| maskrepl | (Vt boolean) Enable/disable replies to ICMP Address Mask Request packets. Defaults to false. |
| maskfake | (Vt "unsigned integer") When maskrepl is set and this value is non-zero, it will be used instead of the real address mask when the system replies to an ICMP Address Mask Request packet. Defaults to 0. |
| icmplim | (Vt integer) Bandwidth limit for ICMP replies in packets/second. Used when icmplim_output is non-zero. Defaults to 200. |
| icmplim_output | (Vt boolean) Enable/disable bandwidth limiting of ICMP replies. Defaults to true. |
| drop_redirect | (Vt boolean) Enable/disable dropping of ICMP Redirect packets. Defaults to false. |
| log_redirect | (Vt boolean) Enable/disable logging of ICMP Redirect packets. Defaults to false. |
| bmcastecho | (Vt boolean) Enable/disable ICMP replies received via broadcast or multicast. Defaults to false. |
| reply_src | (Vt str) An interface name used for the ICMP reply source in response to packets which are not directly addressed to us. By default continue with normal source selection. |
|