PAN-1248 - dont punt any icmp packets to the controller

Reviewer: @rlane