Thanks for the info, guys. Meanwhile, I talked to someone else that explained to me that by blocking ICMP-messages you don't really gain anything, except for breaking up the ip-traffic. Without good arguments, I'll keep "allow ICMP from any to any"