This would be better asked in a new thread instead of hijacking this one… There is no one best algorithm for shaping games.  The real question to ask is, how time-critical are my requirements?  If you want certain users or apps to have priority regardless of anything else, use PRIQ or CBQ.  If you need to guarantee realtime performance while best-serving other users, HFSC is better.  PRIQ is easy; HFSC is hard.

Arghhh…. lol!  I love solving issues like that :) Even though you went back to your ASUS, the first thing I would do is set your server static, so you aren't potentially chasing around IP's every 8 days. If you ever got back, let me know... I'd love to help troubleshoot it.

Try as following my setup of NAT so it should present you to NAT Type 2 and UPNP enabled to allow your both Xbox to communicates each other and host. Here's the other forum that I posted, look into screenshot so it should help. https://forum.pfsense.org/index.php?topic=83332.30

If you have a chance for one more time, I can give you a try with my configure. My configure have got it working with Type 2 and UPNP available and also Steam and Xbox showing NAT 2. Just don't give up so we can help you for solve the problem. You can leave the hybrid nat but it is your opinion. The pictures is in attached. Try same as this. [image: NAT.JPG] [image: NAT.JPG_thumb] [image: upnp.JPG] [image: upnp.JPG_thumb]

Here's trick I use this getting full function with 2 PS3 and 2 PS4 so everything is NAT Type is 2 and UPNP is available. Here's screenshot of my settings. As following my instruction: 1. Outbound NAT must be manually and look for static port for LAN, edit it and click check on static port then save settings 2. UPNP check all as screenshot I did Voila! Everything should be working. I have tested Steam so it is open so is Xbox 360 and One.   [image: upnp.JPG] [image: upnp.JPG_thumb]

@Esprenaltro: @Fmslick: Hello i am playing a online game called War Thunder and i am having packet lost when i have my connect running off my PF box but when i run right out of my modem to my pc all is good, I have looked in to opening ports AS SEEN HERE: war thunder The following ports required to be opened for the game: TCP 80, 443, 5222,  7850-7854(range), 7800-7802(range) UDP 20010-20500(range), 3478-3480(range) In order to play a dev-version you also have to open the following ports: TCP 20443, 33333 Launcher uses the following ports: TCP 27022-27042(range), 6881, 8090 But i don't really know if it is going to help and having a hard time with Port Forwarding… so has anyone had this issue or anything? Same problem but with Path of Exile. hey did you solve your problem with path of exile ? I seem to have the same problem but can't for the life of me figure out how to :/.

Here's my HFSC setup. Seems to be working great for me. You may need to tweak some of your percentages. I have a 50/50 with dedicated bandwidth, so many values are set to cover my gaming needs. https://forum.pfsense.org/index.php?topic=86347.msg474756#msg474756

If the ports to open is a concern, throw out the console? This is a home LAN we're talking about, right?

Thank you very much for your help. Going to test it today or tomorrow! //edit: Do you have the same setup (router infront of the PfSense) ? Whats the difference between the Port Forward section and the Outbound section under Firewall -> NAT ? Do I need to set the Automatic outbound nat to Manual outbound nat? Why did you used the Outbound section? Best regards

"completely unfiltered and connect only to the WAN interface." Do you have more than 1 public IP from your isp?  You can not do what your asking with 1 IP that you would need for your other devices. As to xbox live not working.  Should be simple port forward of 88 tcp, 3074 tcp/udp, 5060-5061 udp.  Your not blocking outbound traffic are you?

pfSense comes with a packet sniffer.  I don't have it in front of me right now, but I think it's under Diagnostics - Packet Capture.  Select your interface, do your thing to make it fail and then use Wireshark to follow the flow and see if you can see the problem. I assume you've already used the Firewall log to check for blocked traffic from their IP space?

Thanks for your input johnpoz! @johnpoz: Or you could have the tenant put their devices that need inbound services directly on your pfsense lan.  So put a switch in front of their router, now their router gets 172.16.1.2 and their ps4 or whatever gets 172.16.1.3 for example. This ended up being our recommendation. We already have "protectected port" setup (Cisco switches) separating each tenant, though they're on the same subnet. I'm not very keen on re-designing the network, which otherwise works great. Hence the recommendation :) Thanks!

I fixed it by creating a static ip address for the 3ds in the dhcp server. I then created a manual out band rule in the firewall>Nat> settings like this Interface:WAN IP: 192.168.9.200 (or what ever your ip address for the nintendo is) Static PORT: YES everything else is as defaults. Save settings and i rebooted just to be sure. Works 100% of the time now Hope that helps Richard

Also some tips here about some oddities with GFWL and this game: http://forums.steampowered.com/forums/showthread.php?t=2959611

@Bai Shen would you mind posting a screenshot for this solution? we still encountered issues in warframe "Strict NAT detected. Upnp malfunctioning. Please forward  udp ports 4950 and 4955 to 192.168.1.32" i did this already: 1. upnp enable (sevices>UPnp) 2. select Manual Outbound NAT rule created 3 rules same below since we have 3dsl lines (in routing mode) interface: wan1/wan2/wan3 source: 192.168.1.0/24 source port: blank destination: any destination port: blank NAT address: default NAT port: blank Static port: CHECK thank you

@dsekclub: I tried what I could be like you were. You can log in to steam as a player. But connet a counterstrike server that manages the first computer possibly a second computer. To start more computers and connect a counterstrike server, these computers will not be connected without the game freezes, or a message stoped after 10 retries. Closes the first computer that is inside the gameserver, then any of those other computers connects, but not as easily its lookslike there is interference. It seems that pfsense can not handle traffic from another router and traffic to Steam Game Servers with out interference. Interference increases as more computers starts. Is this a new bug? More people with some problem or have solution ? Regards Kip3r

Check your Snort alerts if you are using it. I noticed that the Emerging Threats sigs pick up Justin.tv as a trojan.

This is a month old topic, but perhaps this will help someone.  If you are having problems connecting between the subnets and you have firewall rules that allow to pass between the interfaces, my guess is that your game assumes you are in the same subnet.  Broadcast packets will not cross subnet boundaries.  Instead, you should bridge all of your interfaces and assign the bridge as the LAN interface so that it can all be in the same subnet.  This will make the pfSense act as a switch on those physical interfaces.  Broadcast packets will pass and the game will be visible on all of the bridged interfaces.

How many PC's are on your network?  There is so much dynamic content these days, squid probably isn't doing you any good anyway.  Not to mention, with today's broadband speeds, you'd be better off using the traffic shaper. Uninstall Squid and report back.