Firewall stateful handling of ICMP packets