[IPSEC]: Reject packets within replay window but outside the bit mask