:INPUT,FORWARD,OUTPUT

-p icmp -m icmp --icmp-type any;=;OK

# output uses the number, better use the name?

# ERROR: cannot find: iptables -I INPUT -p icmp -m icmp --icmp-type echo-reply

# -p icmp -m icmp --icmp-type echo-reply;=;OK

# output uses the number, better use the name?

# ERROR: annot find: iptables -I INPUT -p icmp -m icmp --icmp-type destination-unreachable

# -p icmp -m icmp --icmp-type destination-unreachable;=;OK

# it does not acccept name/name, should we accept this?

# ERROR: cannot load: iptables -A INPUT -p icmp -m icmp --icmp-type destination-unreachable/network-unreachable

# -p icmp -m icmp --icmp-type destination-unreachable/network-unreachable;=;OK

-m icmp;;FAIL

# we accept "iptables -I INPUT -p tcp -m tcp", why not this below?

# ERROR: cannot load: iptables -A INPUT -p icmp -m icmp

# -p icmp -m icmp;=;OK