Under Firewall Advanced,

Click Decrement IP TTL for forwarded traffic

DO NOT click on Never generate ICMP Time-Exceeded packets (this makes it not work 🙂