Solved

Steps:

1. NAT >>AON  manually created  entries for all networks. ie  WAN 192.168.X.X /24 source   Static Port (Unchecked)   
2. The entry for Xbox I selected  static port. The other entries were left unchecked
3.  Nat >> Port Forward the standard set
     A. WAN UDP External Port 88     NAT IP (192.168.X.X)  Local Port  88
     B. Wan TCP/UDp External Port 3074    NAT IP (192.168.X.X) Local Port 3074
4. UPnP is off

Results:

XboxLive connection went from Strict to Open.

@n1ko:

I have nintendo wii and mario kart and it worked out-of-the-box. No firewall rules has been made and everything works. Updates,virtual console, mario kart channel etc etc.

hi!

which version do you use?

i'm using 1.2 - Release.
my Wii can connect to the Inet, but i can't play online with Mario Kart. i see my friends, but when i will connect to their channel, it doesn't work.no error message or sth. when i connect to the WFC und will play, i see the message "searching for players" but nothing more for 10 minutes.

greets tpf

I dont think it's enough to just block the ports BitTorrent uses, because almost every client randomizes it's ports.

Why dont ou try to configure the traffic-shaper?
Since you only want to avoid that everything gets slowed down when something torrents, and not block it alltogether this might be the solution.

Also i think it wont be enough just to allow the ports 3074 and 88 for Xbox live.
After the first client connected these ports are used and the next client will use different ports.

Maybe you could google/tcpdump and look what the second/third client uses.

Ahh ok, i wasen't aware that the rules are catched in that way.

thank you

bi-nat? iv got my traffic shaper switched off because it makes ventrilo lag, but i still have the problem with starcraft

update
i stopped the lag with the static NAT option but i still cant create games.

As far as I know it, UPnP won't do the static port on outbound connections so you still have to set up that on AoN page.

Holy crap, i got it!!! finally.
When i realized the IRC port was the problem, i also realized that i had imspector proxying IRC.
I disabled just the IRC portion for imspector, restarted the service, and viola.
It now works just fine, even after i turned off advanced outbound nat and all port forwards.

So, lesson learned. CNC3 uses frickin IRC. wireshark is my best friend.

No one has replied to this thread, but i figured i would post the solution just in case anyone else has the same problem.

Found the problem, Xbox Live is down today as they roll out the new updated dashboard etc

Status:

As we gear up to bring you the New Xbox Experience, Xbox LIVE and the Xbox LIVE page on Xbox.com will be down for 24 hours, beginning on September 29, 2008 from 12:01 AM PST until 11:59 PM PST. During this time you will not be able to access Xbox LIVE.

i play counter-strike and TF2 without any port forwards or anything without ANY problems whatsoever, im just having trouble hosting a server.

no they CAN connect thru my public IP… for some reason my server on my LAN shows up as offline when i look up the public ip to ME, but when anyone tries to connect to it who is not on my LAN, they can see adn connect just fine.  if i try connecting via my public WAN ip, it doesn't go, but if anyone else does, it does. people who are and are not on campus with me.

I had the same problems in the past yer , but i resolve with a new configuration system.
I change the network cards in to a gigabyte "intel" 1000 full duplex and the ram "512 ddr333 to 1024 ddr 400
I have better connection and lag then i play alone with single pc without any firewall

ex : ping 5-10 metro loss=0  choke=0 "  ping 20-30 europe loss=1-3  choke=max5'  ping 30-50 usa loss= 2-8
choke= max 20

ps: u have to change this

I didn't mean you're wrong
You're correct
Start from the day using pfsense
I can't even go further like successfully login smoothly
So don't even need to talk about hosting a game
( In garena, it's not necessary to do port forward if you want to host a game )
( I tried before when i was still using cheap router )

About the pictures that i shown
Although i can login that sometimes
But i can do nothing also eventhough it was logged in
Because it will show me connection to server failed when i tried to join a room
So, it's useless for me to login garena also
Can't play, so, what's the point in logging in?

I'm just wondering why surfing net is ok with pfsense
MSN, YM, also able
But why all the games not working as before
I tried the static port already, not working also
???

The shaper seems to be working very well now!  UPnP is working great as well.  I've attached a screenshot of what my uPnP status page looks like.  I don't think there are too many routers out there that can handle this kind of usage.  Thank you PFsense devs for making the ultimate gaming router / firewall!

upnp_status.JPG
upnp_status.JPG_thumb

It should work just compile it in a freebsd system and you can have it working in pfSense normally.

Hmm, very odd that you are having problems.

I've all my equipment on DHCP, and have created static DHCP entries for them.
Of course DNS is pointing to the firewall, as well as Default Gateway.

Then I've enabled UPnP on the Firewall, X-box360 and PS3.
The firewall has UPnP forbidden for everything, except the X-Box360 and PS3's IP addresses.

This works without any sort of problems. They get the best NAT possible both, I see ports open and close according to the different games and states the machines are in.

Here at work I've tried as well, and here I see problems, but my guess is that it has something to do with some of the ancient switches we have here :-(

I have tried on your way but it isn't work  :-\

Looking for kind soul to help me  :'(

Ya they ended up on the right track there…but you can use a switch....in this case here he had a 2950...He could have had anything setup on that switch, even without him knowing.  who knows, whoever had the switch may have had 2 different Vlans or even some ACL's (access control lists, basically a manual firewall for a switch of that type) on it...It could have been several different issues.  I didn't see this post earlier, I probably could have helped.  Nonetheless it should have worked, my bet was a configuration error on the cisco switch.  That's an enterprise class switch and not some soho linksys or dlink type.  It has much more things you can configure than a home or office router/switch.

Thanks for the advice I tried Static Port option and things are looking better. Thanks Guys.

@GruensFroeschli:

have you tried the static port option?
http://forum.pfsense.org/index.php/topic,7001.0.html

You might want to take a look into the traffic shaper.