maybe just drop them rather than reject with tcp reset