It will let them in without a port forward in place. The port forward just rewrites the IP on an incoming connection, nothing more.
If you can reuse opened connection, but that will work with firewall too.
If you can reuse opened connection, but that will work with firewall too.