Bojan,
do you have any specifics in mind?
How do you want to fool the firewall?
- Spoofed source?
- connect through port tunnel?
- ...?
for testing firewall configs try firewalk[er?] or create the required packets for using hping[2].
What exactly are you trying to achieve?