echo-request is stateful, thus once accepted in either of 2 rules you have unlimited rate from/to same host, echo reply is unreachable. @jow-
openwrt
