Does anyone have some good links for modern best practices? Internally we have some disagreement about whether we should allow or block ICMP and traceroute (well, UDP, since the ICMP policy would ...

If its valuable you can limit exposure to some minor vulnerabilities and blocking icmp reply can certainly cut your visibility down a little, especially from automated scans and some worms which use ...