Jasper Yu says to YSITD 反過來做的話 就是 allow all deny tcp any any new deny icmp allow icmp any any echo-reply對ㄅ