Yes, the host would toss drop/reject them anyway. However, having the firewall allows you to find the valid number in all_numbers / something + something (where "something" is as in the grandparent) by first using the firewall to find the correct interval ([0, something[, [something, 2 * something[, ...) and then bruteforcing only those sequence numbers.