seem to recall that the PIX explicitly allows for ping to its interfaces, i.e. permit icmp inside any
what if at the same time i had this on an ACL that's applied to the inside interface: access-list in_acl deny icmp any any
which one takes precedence?