    /sbin/iptables --new-chain OutboundICMP
    /sbin/iptables --new-chain OutboundICMP_1
    /sbin/iptables --append OUTPUT --protocol icmp --jump OutboundICMP
    /sbin/iptables --append OutboundICMP --protocol icmp --jump OutboundICMP_1
    # Catch any returns, just in case
    /sbin/iptables --append OUTPUT --protocol icmp --jump denylog
    /sbin/iptables --append OutboundICMP --protocol icmp --jump denylog
