diff --git a/lib/puppet/type/firewall.rb b/lib/puppet/type/firewall.rb
index 9b4591203..435d5d09c 100644
--- a/lib/puppet/type/firewall.rb
+++ b/lib/puppet/type/firewall.rb
@@ -1259,7 +1259,8 @@
       DESC
     },
     reject: {
-      type: "Optional[Enum['icmp-net-unreachable', 'icmp-host-unreachable', 'icmp-port-unreachable', 'icmp-proto-unreachable',
+      # workaround for https://github.com/puppetlabs/puppetlabs-firewall/issues/1184
+      type: "Optional[Enum['tcp-reset', 'icmp-net-unreachable', 'icmp-host-unreachable', 'icmp-port-unreachable', 'icmp-proto-unreachable',
                               'icmp-net-prohibited', 'icmp-host-prohibited', 'icmp-admin-prohibited', 'icmp6-no-route', 'no-route',
                               'icmp6-adm-prohibited', 'adm-prohibited', 'icmp6-addr-unreachable', 'addr-unreach', 'icmp6-port-unreachable']]",
       desc: <<-DESC