Could you share the steps you took to fix UPnP issues with games such as Planetary Annihilation and Call of Duty, even after trying various configurations repeatedly? Did you also face any challenges related to webcam settings during this troubleshooting process?

@xtreamdev what is the bottom part of UPnp Settings? You can add in specific IP addressing have you enabled that? Did you also set NAT up correctly? Static port I think the setting is for the Xbox only.

https://docs.netgate.com/pfsense/en/latest/recipes/games.html

@DynamiteLotus I have always been using UPnP and have Open NAT on all my games.

But it seems to me that one key element to the success here is to change the default port 3074 so that each Xbox uses a different port.. So this is not a pfsense setting or rule, it's something you have to do in each Xbox manually.

I don't know anything about Xbox but it's in the guide that is linked in the original post.

800502fe-6800-48f8-9772-bd7e18181517-image.png

https://forum.netduma.com/topic/21835-the-new-xbox-one-update-has-manual-port-selection-3074-more/

UPDATE: Turns out it was an issue with my ISP. However, I'm still wondering why my memory usage was so high (it's far lower now after a system reboot).

@Sabrcyclon Great that it's working with that setup. If you ever get the urge to do more testing, you can always try to recreate that deny rule and see if it breaks things. Then you can try limiting the ports as well, but testing takes time so question is, is it worth it... ?

9 years later! Wonder how many had this issue in that time.

To save someone else hours of pulling their hair out....

Don't forget to reset state tables!!!

Diagnostics / States / Reset States

Rebooting the router / PC / Game did not work!

Resetting state tables may take a while and not automatically refresh the page. Click on the pfsense logo and wait for the home page to load.

@JonathanLee I block DNS over HTTPS to the firewall using unbound because I have unbound running DoT. My solution to the Nintendo griping about DNS was to route it out to 1.0.0.2. I was also having issues with unbound using the ephemeral ports I was using, interrupting my sensitive codel games so had change localhost's NAT outbound.

@PickleSlice ...
This might help...

https://www.reddit.com/r/OPNsenseFirewall/comments/ux5h43/the_definitive_guide_to_enabling_sony_playstation/?rdt=52258

@mcury I know that AppID can detect everything when the rules are in place. I do not know the patterns but, they do not require description it seems.

@Th3ory Hmm, I usually see at least one or two ports showing up in the list as soon as I start a game. The page does not dynamically update though, you have to refresh it, or click "UPnP & NAT-PMP" to get it to refresh.

It would look like this after starting MW3 and MW2 for example.

322dc3c0-6ee3-40a4-896e-f42e5d170fb8-image.png

@Dave234ee Have to solved this issue?
I don't really see why your network should be slowed down by your downloading unless you actually consume the entire bandwidth.

BUT, I read somewhere that the Xbox app is be considered part of the OS in some ways, and your settings for Windows Updates seem to affect also this App. Press the Windows Search Bar and type “Delivery Optimization advanced settings.” and see what comes up.

Another tip I saw was related to Windows Defender... Try turning off Real Time Protection and see if that helps, and then turn back on after download is complete.

@jowilhnson Nah I gave up using pfSense for Gaming Console purpose. It's sad that even at netgate nobody cares.
Just coming back from Gamescom where we had several booth using netgat ein the past now switched to another solution because of the consoles. Sad :(

@LinkP Thank you. I've come a long way from microsoft, and this product is excellent. ty!

I actually just got this to work, YMMV since set ups are so different like my VLAN usage, etc. but it does work for me now.

The dedicated server has a built in network test that they do to ensure it can "communicate" properly. I saw some forum post on steam discussions and reddit (https://www.reddit.com/r/SonsOfTheForest/comments/14jo4y0/bug_with_the_new_dedicated_server_tools/) about users being able to play/connect even though the network test failed. Most likely it is either a bug with the network test being used or just that is unfamiliar with the way packets are being handled by pfsense.

So most of my set up was actually good and working. Setting NAT + Proxy mode allowed the self-test to pass but as stated only external friends could connect and see the server, I was unable to do so at all. A post mentioned they were using Pure NAT setting for NAT reflection - I tried that and the network self-test failed in the dedicated server. From a suggestion from a user, I tried Pure NAT again and then added the following in the server config file: "SkipNetworkAccessibilityTest": true. This skips the built-in network self-test that is problematic with pfsense NATing or either has a bug as stated.

I then was able to see the server in Steam Public List and connect properly. Side note, I am not able to see the server at all in LAN list probably due to VLAN and/or subnet differences. But that is not a big issue since I can connect via public listing. I hope this helps any other users experiencing similar issues