As long as there is no connection tracking you can send whatever crap you want, including replayed packets from the middle of a connection, perhaps even huge pa

As long as there is no connection tracking you can send whatever crap you want, including replayed packets from the middle of a connection, perhaps even huge packets with a syn flag ... As long as the accounting happens before a firewall performs basic TCP sanity checks you're going to pay for it