If such an ICMP error message comes from outside, the firewalls with stricter rules will reject it, because it does not correspond to packets sent by the victim computer.

Moreover, Ethernet booting is done usually from separate management networks to which only the administrators are connected, on which also other vulnerable protocols, like IPMI, are used, not from the main network that may have an Internet gateway.