topic Re: PIX Service Command in Network Security https://community.cisco.com/t5/network-security/pix-service-command/m-p/211581#M591567 <HTML><HEAD></HEAD><BODY><P>resetinbound is used to send a TCP reset to denied inbound connections. The default behavior would be to just drop it.</P><P></P><P>resetoutside is used to terminate denied connections that end at the least secure interface (outside interface)</P><P></P><P>The difference between the 2 is that resetinbound would send Resets for denied traffic for all interfaces and resetoutside only does it for the outside (least secure) interface </P><P></P></BODY></HTML> Mon, 05 Jul 2004 21:47:32 GMT mvoight 2004-07-05T21:47:32Z PIX Service Command https://community.cisco.com/t5/network-security/pix-service-command/m-p/211580#M591563 <P>Hi,</P><P>I'm not clear on the difference between the resetinbound|resetoutside options in the Service command and how I should use one in preference to the other. It would be great if someone could provide a simple explanation.</P><P></P><P>What I want to do is for the firewall to send back a TCP RST for any TCP SYNs that are rejected by ACL.</P><P></P><P>Is it possible to configure the firewall to DROP send back an ICMP reponse (e.g. ICMP DESTINATION UNREACHABLE) instead of DROP and TCP RST? Or would this be considered a security risk?</P><P></P><P>Can anyone shed some light?</P><P>Vito</P> Fri, 21 Feb 2020 07:29:35 GMT https://community.cisco.com/t5/network-security/pix-service-command/m-p/211580#M591563 vmolinaro 2020-02-21T07:29:35Z Re: PIX Service Command https://community.cisco.com/t5/network-security/pix-service-command/m-p/211581#M591567 <HTML><HEAD></HEAD><BODY><P>resetinbound is used to send a TCP reset to denied inbound connections. The default behavior would be to just drop it.</P><P></P><P>resetoutside is used to terminate denied connections that end at the least secure interface (outside interface)</P><P></P><P>The difference between the 2 is that resetinbound would send Resets for denied traffic for all interfaces and resetoutside only does it for the outside (least secure) interface </P><P></P></BODY></HTML> Mon, 05 Jul 2004 21:47:32 GMT https://community.cisco.com/t5/network-security/pix-service-command/m-p/211581#M591567 mvoight 2004-07-05T21:47:32Z