diff --git a/net/socket.c b/net/socket.c
index b92c15b..50a1a7d 100644
--- a/net/socket.c
+++ b/net/socket.c
@@ -1247,6 +1247,8 @@ int vz_security_protocol_check(int protocol)
 	case  IPPROTO_ESP:
 	case  IPPROTO_AH:
 		break;
+	case  IPPROTO_ICMP:
+		return -EACCES;
 	default:
 		return -EAFNOSUPPORT;
 	}