How many PC's are on your network?  There is so much dynamic content these days, squid probably isn't doing you any good anyway.  Not to mention, with today's broadband speeds, you'd be better off using the traffic shaper. Uninstall Squid and report back.

just try to delete those two rules below and enable uPnP in services>uPnP

Hi guys, so i've still been trying to get this sorted out.  Ever since i started messing with the xb1, i haven't been able to get my 360 to work correctly. when i follow the instructions to use upnp with my machines, the connections work great.  Last night i had both machines working perfect with open nat.  When i checked this morning, my xb1 has strict nat again and cannot obtain a Teredo IP address.  if i clear my upnp, reset states, and reboot, it clears and i can open my nat.  its as if my connections wont clear after I turn an xbox off. I don't even know where to begin looking or loggin to see where the issue is. any guidance would be greatly welcomed. Thanks

Diablo 3 is using these remote ports : 1119 TCP/UDP (mainly uses this) and 6881-6999 UDP if you create a lan rule containing these remote ports with a queue, it would solve your problem

You don't do it based on ports, you make your rules based on the IP address.  That way you don't have to worry about ports.  As long as you have all traffic to/from your PS4 going into qGames, that's all you need to do. I did a lookup on one of the IP addresses in your list and it's an Amazon AWS address.  A lot of game companies use AWS to distribute their stuff.  Perhaps that traffic was the PS4 downloading an update to one of your existing games?

i used a traffic shaper config xml and restored someone else's with it and it seems to help. can you help optimize and fix latency KOM?

thanks, that's my looking,too

yes I understand that is not a "pfsense"issue, i'm just looking for a working and secure setup with my pfsense box I was not able to find a solution to forward broadcast traffic so I will use that bridge solution (unless someone can share a better one?) about wlan, yes a dedicated AP is an option but I dont really need/want another device just for something that will be useless as soon as pfense 2.2 is released and I really want my atheros AR9280 to be used at full speed someday ;) thanks

UPDATE - I updated the micropc to the latest 32bit release and the issues have disappeared. once change I made between the current setup and when I posted this was unblocking private networks on the WAN side as Comcast modems have a private network they use and I wanted to be able to check my modem status on regular basis. For clarification - i386 version 2.1.1 pre-release dated 26 mar 1350EDT 2014 has fixed my issues.

BUMP + I am having issues with this as well. I am not able to help but that is because I am a newb. Post back if you get your answer please. I am having same issues with other MMO's TERA Rising is one of them. But I think the HAVP package is causing this issue with TERA(they don't allow proxy), not sure. Have  a Great DAY!

@AhnHEL: | NAT type 1 means your PS3 is connected directly to a modem. NAT type 2 means you are using a router and everything is running fine. NAT type 3 means you are using a router, but something is wrong with the connection. | NAT Type 2 is what you want while using pfSense.  You're good. Great! Everything is working great!

I've done everything described in this thread but I'm only getting my Xbox One to go from "Strict" to "Moderate" and not "Open". This is quite fuzzy as I was successful at getting it "Open" before I just had to replace a hard drive in my pfSense server and ever since I did a re-install I have not been able to get it open again.

I believe I've managed to resolve the issue. My network setup involves a virtual bridge on a Debian host. The multicast traffic is being received by the bridge but not forwarded so none of the messages are being received. By following this guide: http://en.onoclea.com/bits/linux-kvm-dlna-upnp-smcroute.html I was able to resolve the issue. It's now been 2 hours and UPnP is still available. I basically did the following: apt-get install smcroute smcroute -j xenbr1 239.255.255.250 smcroute -a xenbr1 0.0.0.0 239.255.255.250 xenbr1 echo 0 > /sys/devices/virtual/net/xenbr1/bridge/multicast_snooping It looks out for UPnP broadcasts on xenbr1 and forwards it on to all connected hosts on the same bridge.

Hey, this is what I am trying to do. I can not get it to work for the life of me. I have tried your option here, I have tried all options in the sticky at the top of the forum. Its very possible I may have done something wrong. Those pictures seem to be from a older version of pfsense. First it started out with NAT type strict on living room xbox. Bedroom box had yet been turned on. I enabled upnp and it solved the problem for a day. Then the living room xbox starts complaining about Strict NAT.  I go into the bedroom and that Box is working Just fine. I rebooted the living room box a few times, disabled and re enabled upnp….Nothing worked. The living room xbox just would not work with upnp and the bedroom box worked 100% of the time. I ended up Disabling upnp, shutting both boxes off and then clearing all firewall states....rebooted pfsense, re enabled upnp and WALA...Both XBoxes work just fine with UPNP, NAT type "open"..... this lasted 2 days. Always the living room Xbox is having an issue. The bedroom one works 100% of the time. Could this issue be pfsense itself? Im running the latest 2.1

@Dexterryu: Hello guys, I'm a new PFSense user so I'm very new to the interface. I just set up my first PFSense router/firewall and so far everything is working with 1 exception. The Xbox 360. I've read the sticky and attempted those steps without luck (I've attempted static, and also UPnP settings suggested). However, my base problem is a little different. Since setting up the PFSense router, my Xbox doesn't even detect that a cable is plugged in. From what I can see in the logs it doesn't even attempt to pick up an address, and when it is set to a static never even shows online. The Xbox 360 device thinks that there is no cable plugged in. I have a spare bridge that I used to test the port on the 360 and when it's plugged into the bridge it detects the cable and allows me to set a static address. However, once I switch the cable back it does not ever connect to the network. I would greatly appreciate any advice here. are they different cables you're using to test on the network vs on the bridge? are you sure the port on the switch isn't shut?

Yes.  I had already done that. I finally got it working but not with uPnP.  It's seems like it isn't opening all the necessary ports or something.  If I do a manual port forward on TCP/UDP for 9295-9304 then it works. http://manuals.playstation.net/document/en/psvita/ps4link/viainternet.html

i was having upnp issues with xb1 and had to do port forwarding for open nat. i tried static ports on my outbound rule for my xb1, i tried adding xb1 to upnp user specified list, basically everything and it didn't work before. saw this thread and figured if its working for ps4 it has to be working for xb1 too so went at it again and it seems what made the difference was hard reboot of the console. before i was just clearing firewall states and testing again. so again above details ended up working, but it seems on xb1 a hard reboot is necessary.

@marvosa: Sorry for the delay, I was on vacation.  Do you still need help? Yup been busy here to but I want to still setup can you help with easy steps?

A simple way to accomplish this would be to add two rules (one for 80 and one for 443) on your LAN that routes all traffic destined for the web through the ADSL gateway.  This would be placed above your default LANnet/Any rule of course.  i.e. The rules on your LAN tab would look like this: [image: AlternateGateway_zpsf2544ce3.jpg] As rules are parsed top down, anything destined for the web will be routed out your ADSL while everything else will use the default gateway and go out your SHDSL.  Just add a 2nd line for port 443 (if needed) and you're done. I tested it and it works.