A lot of examples where people are using keep-state with setup together. For example:
ipfw add 1 allow tcp from any to me 22 setup keep-state
Because of setup, this rule will allow only SYN packets, which are first packets in TCP handshake. OK.
But, why is this so necessary? Why not just using keep-state without setup? What's the profit?