What causes packets to be dropped by a firewall even though SYN and SYNACK packets are being exchanged?