Preventing Replay attacks

[Makris]

I've configured my UsernameToken request to use a nonce and Timestamp but
the service does not stop replay attacks when I send the same request
multiple times. Does WSS4J prevent replay attacks or is this something the
user needs to implement ?