Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NATting with Hybrid Outbound Sometimes Working

    NAT
    4
    18
    525
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Strike1asd @kaysersosa
      last edited by

      @kaysersosa Get a public IP from your ISP

      1 Reply Last reply Reply Quote 0
      • G
        Gblenn @kaysersosa
        last edited by Gblenn

        @kaysersosa said in NATting with Hybrid Outbound Sometimes Working:

        From the game I can access the server only if I'm running on the same system I'm playing the game from. If I host the server on another internal system, I then can't see it. This is throwing possible Windows firewall issues.

        So just so I understand... if you run the server on PC A, and try to access it from PC B, both on your LAN, your can't?
        It only works if you host it on A and try to access it from A ??

        @kaysersosa said in NATting with Hybrid Outbound Sometimes Working:

        My NAT Reflection mode is set to Pure NAT -- under System > Advanced > Firewall & NAT

        And what about Automatic NAT reflection, is that on?

        kaysersosaK 1 Reply Last reply Reply Quote 0
        • kaysersosaK
          kaysersosa @Strike1asd
          last edited by

          @Strike1asd
          There isn't a GoogleFiber router and GoogleFiber doesn't block any ports from what I've researched.

          My pfSense is connected directly into the Fiber to Ethernet connector.

          1 Reply Last reply Reply Quote 0
          • kaysersosaK
            kaysersosa @Gblenn
            last edited by

            @Gblenn
            Correct on the PC setup.

            Enable automatic outbound NAT for Reflection is not checked.
            Enable NAT Reflection for 1:1 NAT is not checked.

            G 1 Reply Last reply Reply Quote 0
            • G
              Gblenn @kaysersosa
              last edited by

              @kaysersosa said in NATting with Hybrid Outbound Sometimes Working:

              @Gblenn
              Correct on the PC setup.

              Ok, but that means that the problem is at the PC running the server, not with pfsense... At least to start with.
              Since any communication between PC A and B on the same LAN, doesn't involve pfsense at all...

              So perhaps the game server is either not broadcasting it's existance at all, or something is blocking it from doing so. And it might be windows firewall which you also mentioned earlier.
              Once you get that sorted, so that PC B can access the server on PC A, you should be good to go if you forward the correct ports on pfsense.

              If you set "NAT Reflection mode for port forwards" to Pure, and check the box for "Enable automatic outbound NAT for Reflection", you will then be able to access the game server using your external IP. pfsense will recognize the request and figure out that it should go to the IP of the game server (provided the port forward works).

              kaysersosaK 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @kaysersosa
                last edited by johnpoz

                @kaysersosa said in NATting with Hybrid Outbound Sometimes Working:

                My setup is Google Fiber -> pfSense ->

                What device are you using in front of pfsense? What is the make and model of this device?

                Did you setup pfsense wan IP in the dmz of your google fiber device?

                https://support.google.com/fiber/answer/4643957?hl=en

                As to hybrid outbound - you really wouldn't need that unless you were wanting to nat something to a different interface/ip - say if you had a vpn connection or something and you wanted to policy route some traffic out the vpn, or you had a vip on your wan you wanted to nat some specific traffic too.

                Normally you would just have automatic with no need for hybrid outbound nat.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                kaysersosaK 1 Reply Last reply Reply Quote 0
                • kaysersosaK
                  kaysersosa @Gblenn
                  last edited by

                  @Gblenn I realize this forum is for pfSense, but any help you can provide regarding the Windows Firewall or testing I can do. Tools I can run and provide information. If not, I understand.

                  G 1 Reply Last reply Reply Quote 0
                  • kaysersosaK
                    kaysersosa @johnpoz
                    last edited by

                    @johnpoz said in NATting with Hybrid Outbound Sometimes Working:

                    What device are you using in front of pfsense? What is the make and model of this device?

                    There isn't a router in front of my pfsense. It is just the fiber to ethernet connection into my house.

                    I have changed the Hybrid back to Automatic, still no change. I do have OpenVPN setup and working. Was starting to tinker with VLANs but none of that is setup or used.

                    1 Reply Last reply Reply Quote 0
                    • G
                      Gblenn @kaysersosa
                      last edited by Gblenn

                      @kaysersosa said in NATting with Hybrid Outbound Sometimes Working:

                      @Gblenn I realize this forum is for pfSense, but any help you can provide regarding the Windows Firewall or testing I can do. Tools I can run and provide information. If not, I understand.

                      Well the simplest test you can do is to turn off Windows defender (if that is what you use) on the PC where you run the game server. Restart the game server and see if you now can both find it and then connect to it from the other PC.

                      Which game is it you are trying to host btw?

                      kaysersosaK 1 Reply Last reply Reply Quote 0
                      • kaysersosaK
                        kaysersosa @Gblenn
                        last edited by

                        @Gblenn

                        I will give that a try when I have a moment. I think I've done it without luck before, but I'll do it and let you know the results.

                        The game is Icarus. I have tried using both of the following methods without luck.

                        https://github.com/RocketWerkz/IcarusDedicatedServer/wiki/Server-Setup
                        https://makeyourownserver.com/easiest-way-to-host-your-own-icarus-dedicated-server/

                        G 1 Reply Last reply Reply Quote 0
                        • G
                          Gblenn @kaysersosa
                          last edited by

                          @kaysersosa said in NATting with Hybrid Outbound Sometimes Working:

                          The game is Icarus. I have tried using both of the following methods without luck.

                          Ok looks like only two ports need to be forwarded 17777 and 21015. Doesn't say which protocol so I'd select TCP/UDP for both.

                          What does your NAT rule look like? Can you paste a picture?

                          kaysersosaK 1 Reply Last reply Reply Quote 0
                          • kaysersosaK
                            kaysersosa @Gblenn
                            last edited by

                            @GblennNAT Rule.JPG Icarus Alias.JPG

                            Here are the screenshots.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.