Replay protection isn't about DoS attacks. Replay protections is about re-injecting previous messages to confuse recipient.

Yes, it's THAT hard. I'd read many good books and still feel bad looking on my first attempts in protocol design.

BTW, IGE cipher mode isn't well known for being strong.