FreeBSD -- Missing IPsec anti-replay window check

Problem Description:
A missing check means that an attacker can reinject an old packet and
it will be accepted and processed by the IPsec endpoint.
Impact:
The impact depends on the higher-level protocols in use over IPsec.
For example, an attacker who can capture and inject packets could
cause an action that was intentionally performed once to be repeated.