add note about icmp redirects, fix #255