UPNP fails when play

zboll

I have an issue too with my xbox360 too when using pfsense. My xbox360 would report the NAT as open which is good, but I would have to try connecting like 20 times to get into a game when playing COD3. Because of that, I changed my router over to a buffalo router with DD-WRT installed, and now I am able to connect to almost every game I try. Is this the problem you guys where having in this post?

my pfsense router was a P2 400 MHz with 386 MB ram. I thought maybe it was too slow and that was causing me problems with connecting to games. I just got a P4 2.4 GHz machine with 512 MB ram, I have been thinking about going back to pfsense with that, what do you guys think, do you think upnp will work? Would the faster computer make any difference?

thanks,
Zack

LawnMowerGuy1

UPnP maintainer,

When I was working with the UPnP implementation on embedded linksys devices I noticed they had many hacks in place (mostly for msn messenger). I also noticed that the xbox does not send a UPnP release.

Maybe you could build something into the daemon such as this pseudo-code:

if (requestingUPnPdesc = Xbox (192.168.x.x)) {

if (valid rule already exists) {
send success message to the xbox so it does not try to map another port;
}
else {
map the port;
}
}
else {
continue;
}

rsw686

LawnMowerGuy1,

I will look at the code and see how difficult it would be to implement something like that.

I'm away for the week so I don't have an xbox in front of me. If somebody could get me the miniupnpd debug output when xbox tries to connect and maps another port that would be great. I can't remember how it checks to see if the port is already mapped.

Using one of the later snapshots you can put miniupnpd into debug mode by running the following on the console. Make sure to stop miniupnpd using the status -> services page.

/usr/local/sbin/miniupnpd -f /var/etc/miniupnpd.conf

Afterwards you can restart the service on the status -> services page to get out of debug mode.

I just hate implementing hacks to get microsoft's crap to work. It really bothers me that they can't follow the UPnP specs like everybody else.

forum

no zboll your pfsense is working well it,s the xbox and the upnp thats not working together. when i hade d-link gming router it,s working well to. but i like the pfsense better. in d-link i find a gamefuel page where all of this ports and other things that was reallated to games was. why can,t we build one page like this in the pfsense ?

GruensFroeschli

@forum: http://forum.pfsense.org/index.php/topic,3917.0.html

zboll

@forum:

no zboll your pfsense is working well it,s the xbox and the upnp thats not working together. when i hade d-link gming router it,s working well to. but i like the pfsense better. in d-link i find a gamefuel page where all of this ports and other things that was reallated to games was. why can,t we build one page like this in the pfsense ?

Yeah ok. I might just try pfsense on the P4 2.4 Ghz and see if it works any better with the xbox. the buffalo router with DD-WRT works perfectly in terms of playing xbox 360, but I like the feature that pfsense has of multiple wan support which originally got me using pfsense instead of a linux variant.

I originally figured I would try out a linux variant when I could not get pfsense to work with xbox360 because my DD-WRT router is linux based. I found that "Endian" and "Clarckconnect" both have dual wan support. I tried to install Endian but I couldn't get it to work and it is not documented very well online for the community edition. Clarckconnect cost $430 dollars for the version with two WAN so I could not justify it. If any one knows of a linux variant that I could try with dual wan support, it would be greatly appreciated (I just want to check if the UPNP with xbox works).

Otherwise, I will probably have to run a separate line from my dd-wrt router to my pfsense box, which means running another cable. So a setup like this.

DSL –-----------------------------------|
|
|---->Pfsense----->rest of network
Cable -------> DD-WRT Router -|---->|
|
|----->xbox 360

Zack

rsw686

OpenWRT uses miniupnpd as well. What client does DD-WRT use? Maybe you could post your problem on the miniupnpd forum accessible from the below link.

http://miniupnp.free.fr/

Otherwise I will take a look at it when I get the debug output or next week when I have access to an xbox 360. I'm just not overly compelled to fix this as it's an xbox implementation issue and I don't game.

zboll

I looked but I couldn't find it, I believe that dd-wrt is closely related to open-wrt.

I have two dd-wrt routers available, so I may just use one as a wireless bridge to my xbox so I dont have to run another cable. Do you think I would notice a performance boast upgrading my pfsense box from a p2 400 mhz 386 mb ram to p4 2.4 ghz 512 mb ram. The thing is my P4 has a 250 gb hard drive and pfsense does not support samba. If you guys think its worth the upgrade, I might just have my linux box mount the pfsense harddrive using ssh filesystem so I dont waste all that space. Probably not the best but I think I should still be able to stream DVD on gigabit network.

Zack

LawnMowerGuy1

@rsw686:

OpenWRT uses miniupnpd as well. What client does DD-WRT use?

DD-WRT uses a variant of the hacked Linksys client.

zboll

thanks for the info.

I think that im just going to do the dd-wrt wireless bridged to the xbox with pfsense behind the dd-wrt. I would eventually like to try out a one level solution but the only option I am aware of right now that supports dual wan is the commercial version of clarkconnect. If anyone has a distribution up for recommendation to try, I would appreciate it.

thanks,
Zack

rsw686

Instead of asking for other distributions why not get me the miniupnpd debug info and I'll have to look to see if I can fix it.

rsw686

I had some free time to look into this. I corrected the code so xbox 360 will not keep mapping additional ports. I implemented a check so if the existing redirect is identical to the redirect request it will ignore the request.

To install this you need to be using a hard drive install or embedded version of pfSense. I am not going to commit this until I finish testing it further and the miniupnpd author patches his source with it. It just becomes too hard to maintain the patches otherwise.

On the console
cd /tmp
fetch http://wgnrs.dynalias.com:81/pfsense/miniupnpd/sh-replace-binary.sh
fetch http://wgnrs.dynalias.com:81/pfsense/miniupnpd/devel/miniupnpd
chmod +x sh-replace-binary.sh
./sh-replace-binary.sh miniupnpd

The md5 returned should match 6d170ae9fa1d5a28a33d6ec00ffca4ac. If it does then your good to go. Let me know if this solves your problem.

forum

ok seems to work i just got one port for the xbox 360 and the nat is open but i will test this one out mokre today

rsw686

@forum:

ok seems to work i just got one port for the xbox 360 and the nat is open but i will test this one out mokre today

Did you get a chance to test it out more?

zboll

I have been out of town for the week, I am going to try to get my pfsense box back up and running to test.

thanks,
Zack

zboll

Ok, I just did the upnp but I am still having trouble. My problem is when I try to connect to xbox games, I have trouble getting into games. I think maybe it is not a problem with upnp.

Do you guys think maybe my hardware is too slow? P2 400 mhz 386 mb ram.

I am able to connect to games easily on my dd-wrt router so I dont think it is an ISP issue, I am going to try plugging my xbox 360 directly into the router without going through any switches and see if that helps.

Zack

forum

yes it seems too work but my other computer who is using upnp is not listed any more but i work,s with xbox 360 my friend is not home saw i can,t test it saw much that i want.

KoSoVaR

Hello,

I am willing to test this. If you need the output of anything, just tell me what I need to do. I learn very quickly so I can get screenshots up or a text dump out no problem. I also have an Xbox 360 connected to live that my Dad plays non stop and he can't connect to games.. but I use pfSense for my home network because it's just amazing.

I applied the patch just 30 seconds ago - I will update you guys on what's happening with it and what not.

Best Wishes

rsw686

I just committed that latest version of MiniUPnPd RC8 which includes the xbox fix and some other fixes. The snapshots created after the time stamp on this post will have it included.

KoSoVaR

That fix works perfect…

Now.. do I have to reinstall pfSense to keep it updated or how do I go about making it work ?