Found the problem, Xbox Live is down today as they roll out the new updated dashboard etc

Status:

As we gear up to bring you the New Xbox Experience, Xbox LIVE and the Xbox LIVE page on Xbox.com will be down for 24 hours, beginning on September 29, 2008 from 12:01 AM PST until 11:59 PM PST. During this time you will not be able to access Xbox LIVE.

i play counter-strike and TF2 without any port forwards or anything without ANY problems whatsoever, im just having trouble hosting a server.

no they CAN connect thru my public IP… for some reason my server on my LAN shows up as offline when i look up the public ip to ME, but when anyone tries to connect to it who is not on my LAN, they can see adn connect just fine.  if i try connecting via my public WAN ip, it doesn't go, but if anyone else does, it does. people who are and are not on campus with me.

I had the same problems in the past yer , but i resolve with a new configuration system.
I change the network cards in to a gigabyte "intel" 1000 full duplex and the ram "512 ddr333 to 1024 ddr 400
I have better connection and lag then i play alone with single pc without any firewall

ex : ping 5-10 metro loss=0  choke=0 "  ping 20-30 europe loss=1-3  choke=max5'  ping 30-50 usa loss= 2-8
choke= max 20

ps: u have to change this

I didn't mean you're wrong
You're correct
Start from the day using pfsense
I can't even go further like successfully login smoothly
So don't even need to talk about hosting a game
( In garena, it's not necessary to do port forward if you want to host a game )
( I tried before when i was still using cheap router )

About the pictures that i shown
Although i can login that sometimes
But i can do nothing also eventhough it was logged in
Because it will show me connection to server failed when i tried to join a room
So, it's useless for me to login garena also
Can't play, so, what's the point in logging in?

I'm just wondering why surfing net is ok with pfsense
MSN, YM, also able
But why all the games not working as before
I tried the static port already, not working also
???

The shaper seems to be working very well now!  UPnP is working great as well.  I've attached a screenshot of what my uPnP status page looks like.  I don't think there are too many routers out there that can handle this kind of usage.  Thank you PFsense devs for making the ultimate gaming router / firewall!

upnp_status.JPG
upnp_status.JPG_thumb

It should work just compile it in a freebsd system and you can have it working in pfSense normally.

Hmm, very odd that you are having problems.

I've all my equipment on DHCP, and have created static DHCP entries for them.
Of course DNS is pointing to the firewall, as well as Default Gateway.

Then I've enabled UPnP on the Firewall, X-box360 and PS3.
The firewall has UPnP forbidden for everything, except the X-Box360 and PS3's IP addresses.

This works without any sort of problems. They get the best NAT possible both, I see ports open and close according to the different games and states the machines are in.

Here at work I've tried as well, and here I see problems, but my guess is that it has something to do with some of the ancient switches we have here :-(

I have tried on your way but it isn't work  :-\

Looking for kind soul to help me  :'(

Ya they ended up on the right track there…but you can use a switch....in this case here he had a 2950...He could have had anything setup on that switch, even without him knowing.  who knows, whoever had the switch may have had 2 different Vlans or even some ACL's (access control lists, basically a manual firewall for a switch of that type) on it...It could have been several different issues.  I didn't see this post earlier, I probably could have helped.  Nonetheless it should have worked, my bet was a configuration error on the cisco switch.  That's an enterprise class switch and not some soho linksys or dlink type.  It has much more things you can configure than a home or office router/switch.

Thanks for the advice I tried Static Port option and things are looking better. Thanks Guys.

@GruensFroeschli:

have you tried the static port option?
http://forum.pfsense.org/index.php/topic,7001.0.html

You might want to take a look into the traffic shaper.

Please do not post the same in multiple forums.

Can you show a screenshot of your rules?
Did you read the notes next to the schedules?

When working with pfSense based schedules, the logic is a bit different from the normal pfSense rules.

For example, the rules are evaluated from top to bottom.

If you have a pass rule and the rule is outside of the schedule, the traffic will be BLOCKED regardless
of pass rules that occur after this rule.

In these cases you will want to change the pass rule to a block style rule to get the needed functionality.

Look in diagnostics -> states.  The source port will match the destination port if static port is working.  Also do not forget to clear your states after making the static port changes.

thanks,

I got the information i needed pretty quick when looking at: http://doc.pfsense.org/index.php/Static_Port.

I just did what the above said, added a rule for all of my subnet to use only one wan when using the range of ports this game uses and walah im up and running.

This firewall is great… I have a few more issues to work out but functionality is working great.

Can you describe how it "does not work"?

Are you sure that you followed the manual correctly on configuring your server to register himself on the public list?

Thanks :) I realise it's a problem that often comes up!

Just in case anyone reads this post for help, basically pfSense defaults to an 'Automatic outbound NAT rule generation' for added security. This can cause problems with incoming connections (UPnP sorts out the out going).

To turn this off select 'Manual Outbound NAT rule generation' then change the automatically generated rule to 'Static Port' = YES.

Repeat for any other subnets if necessary.

I tried that command, and yes, the delayed ACK is 0 by default it seems. Ah well, thank you to everyone who posted, learned a little bit 'bout my pfsense box, etc, etc.

From my experience, Xbox 360s will not respond to ping requests.  Very inconvenient!

I have once setup something like that for some friends of mine and it was working fine. There are some things that you have to consider:

When playing over IPSEC you are in different subnets and broadcasts to announce a server in you LAN won't make it from one subnet to the other. You have to manually join the IP of the server to join a game. Built in "LAN-Browsers" won't work. Most games have an option to manually specify a server IP.

The server should be hosted at the fastest connection. On asymetric connections the upstream is usually even more important than the downstream. The traffic of all clients will be concentrated on that link so better choose the one with the highest available bandwidth and not the one with the fastes machine.

Besides that it should usually work (given that you allow the ports through IPSEC that the games need; maybe start with pass any rules for testing first).