After some feedback...

Changes

• Can optionally allow all ICMP types, not just ping and traceroute. If you had the firewall running while scanning with nmap (for some reason), errors would sometimes be thrown because the firewall restricts some lesser used types used when nmap is scanning.
• Can now restrict contact to or from certain hosts. Even if you have them in the target/outbound or trusted/inbound lists, the they will be flat out blocked if they're in the exclude list.