rule 'MULTICAST_OUT -p IPv4 --ip-protocol icmp -j RETURN'