Just a quick note
I've RTFM!
Without Lavasoft Firewall ICS works perfectly.
Install the firewall and no matter what you enable or disable within the settings, ICS fails.

NAT/Trusted do nothing, disabling the whole firewall or setting the policy to disable does nothing, custom rules, disabling all the other nifty little protections does nothing.

Useless software!