I have the following rules in place on all my firewalls:
iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
iptables -A INPUT -p icmp --icmp-type fragmentation-needed -j ACCEPT
iptables -A FORWARD -p icmp --icmp-type fragmentation-needed -j ACCEPT
If there is some other icmp type related to mtu path discovery I am
missing, perhaps someone could point it out???