network: icmp handling with anon-vpn

Still missing appropriate firewall forward handling.