I would say: disable all options on the ICMP-tab, create 2 firewall rules: deny icmp from any to external(interface address) allow icmp from internal(networks) to internal(interface address)
I would say: disable all options on the ICMP-tab, create 2 firewall rules: deny icmp from any to external(interface address) allow icmp from internal(networks) to internal(interface address)