This means ICMP errors will be ignored, which is a Bad Idea.
But people are likely to complain about how it breaks their setup if we
don't ignore ICMP anyway.