The video (cs0-001, recon tools part 3 at ~29:41) says that the following is true about this rule
deny icmp any host 10.1.1.1 echo-reply
Am I misreading the trainers statement? It sounds like its denying ping from 10.1.1.1, which to me is backwards.
I see the rule doing:
Deny icmp from any host going to 10.1.1.1 with keyword echo-reply. (echo-reply seems redundant since its denying ICMP anyway. Is that keyword really needed?)
Am I reading this wrong?