Kevin L. Kane came up with a patch to allow raw socket access within jails. It’s been committed, and it now means that if you set the sysctl jail.allow_raw_sockets, you can ping when in a jail.