can you block traceroute into a dmz

How can you achieve this?