I have a PIX 7.01 that I am trying to get an application to talk across on TCP 94. Rules allow the whole IP stack. I noticed from a capture that the source port is 60003, destination port is 94. I do not see this traffic hit another upstream firewall. However, if I telnet to IP on port 94 , I see the traffic and the source port is 4000 something. So it appears that anything that has a source port 60003, or 60000 somethings gets a reset packet from the pix, as I never see it leave the outside interface unless it is, for example, sourced from port 4000 something. Could the PIX be sending the Reset packet?