most firewalls limit ICMP across their boundaries, hence why ping doesn't work for a lot of places from the outside in.

This exploit is a unicast packet, which is unsolicited. For NAT, you probably don't need to do much. for ipv6 you'll need to make sure that your firewall doesn't blindly pass on ICMP ie make sure its a stateful firewall.