No, EMS doesn’t perform this kind of checks because they are not required in the first place. The moment EMS is bound on an IP/PORT combination, the OS is guaranteeing that all inbound connections are valid connections (at least at IP level)
However, there are known firewall issues with UDP traffic. Since UDP is not connection-oriented, the firewall relays on port mappings and expiration algorithms to allow/disallow passthrough.
Ideally, EMS should be run on a machine with a public IP. That is not a MUST for TCP based streaming. Port forwards can take care of that. For UDP traffic, is not a MUST either, but requires a more thoughtful design of the firewall rules to allow legitimate UDP traffic passthrough