iptables will match the following ICMP request packet as ESTABLISHED state after the first reply packet is sent

view story

http://unix.stackexchange.com – In iptables, I added the rules as below to limit the incoming icmp request packet rate. But it didn't work. Because after the 1st incoming icmp request was accepted by the 1st rule and my host replied, all the following icmp request will accepted by the 2nd rule, which will accept the incoming icmp request as ESTABLISHED state packet. I think this doesn't make sense. I checked the "Iptables Tutorial 1.2.2" and I found the statement as below. "The reply packet is considered as being ESTABLISHED, as we have already explained. However, we can know for sure that after the ICMP reply, there wi (HowTos)