Wait, I think I found it. I think the DROP is handled by the else
clause around line 4030 of pf.c (in the DragonFly code). I'm not
entirely sure.
It looks like it will be easy to flag state creation without a SYN
and have it ignore sequence space comparisons for that case.
-Matt