Proposed solution

Transmit ICMP addr unreachable
No restriction on source addr
More quick disconnection possible

Implemented into KAME IPv6 stack

Works fine against BSD-based TCP stack
Listens to ICMP errors, disconnect TCP connection if # exceeds limit