drop icmp from host 1.2.3.4
