Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Do these port forwards look correct based on these requirements?

    Scheduled Pinned Locked Moved NAT
    19 Posts 3 Posters 3.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • O
      opjohnny
      last edited by

      I found a possible fix for this game, but I'm not sure if this is opening up security holes for me…

      https://forum.pfsense.org/index.php?topic=73012.0

      I know my NAT type was labeled "Strict" by the PC version of Call of Duty : Advanced Warfare and someone in The Crew subreddit mentioned my NAT may be the issue here.  I followed that guide, rebooted my pfSense box, loaded up the game and tested.  I'm seeing players and getting quick PVP matches now so the issue appears to be fixed.

      Anything I should be aware of with this "fix?"

      pfSense Boxes-

      Celeron C1037U MiniPC(HDD, current)
      VIA C7 miniITX(HDD, retired)
      Firebox x750e(CF, retired)
      Dell PowerEdge 2950 w/ ESXi v5.5(Retired)
      Dell PowerEdge 860 w/ ESXi v5.5(Retired)
      Firebox x700(CF, for a coworker)

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        What using UPnP?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • O
          opjohnny
          last edited by

          Apparently this game is.  All my networking issues in the game have disappeared after opening NAT.

          pfSense Boxes-

          Celeron C1037U MiniPC(HDD, current)
          VIA C7 miniITX(HDD, retired)
          Firebox x750e(CF, retired)
          Dell PowerEdge 2950 w/ ESXi v5.5(Retired)
          Dell PowerEdge 860 w/ ESXi v5.5(Retired)
          Firebox x700(CF, for a coworker)

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Huh?  Dude no opening ports to your console is not a security issue.  Now what ports are actually listed as being used..  Look under status UPnP and it will show you what ports were opened.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • O
              opjohnny
              last edited by

              @johnpoz:

              Huh?  Dude no opening ports to your console is not a security issue.  Now what ports are actually listed as being used..  Look under status UPnP and it will show you what ports were opened.

              This is to my PC, no consoles here. Here us UPnP status while The Crew is running…

              3074 udp 192.168.1.10 3074 DemonwarePortMapping
              18857 udp 192.168.1.10 18857 Skype UDP at 192.168.1.10:18857 (2897)
              18857 tcp 192.168.1.10 18857 Skype TCP at 192.168.1.10:18857 (2897)

              pfSense Boxes-

              Celeron C1037U MiniPC(HDD, current)
              VIA C7 miniITX(HDD, retired)
              Firebox x750e(CF, retired)
              Dell PowerEdge 2950 w/ ESXi v5.5(Retired)
              Dell PowerEdge 860 w/ ESXi v5.5(Retired)
              Firebox x700(CF, for a coworker)

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                well sure looks like only 3074 udp to me.. that other port is skype - are you running skype?

                3074 is not listed in your first port forwards.  So that would explain why its now working with UPnP, you had the wrong ports open.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • O
                  opjohnny
                  last edited by

                  @johnpoz:

                  well sure looks like only 3074 udp to me.. that other port is skype - are you running skype?

                  3074 is not listed in your first port forwards.  So that would explain why its now working with UPnP, you had the wrong ports open.

                  Those ports I opened were directly from Ubisoft's website.  They never mentioned 3074.

                  pfSense Boxes-

                  Celeron C1037U MiniPC(HDD, current)
                  VIA C7 miniITX(HDD, retired)
                  Firebox x750e(CF, retired)
                  Dell PowerEdge 2950 w/ ESXi v5.5(Retired)
                  Dell PowerEdge 860 w/ ESXi v5.5(Retired)
                  Firebox x700(CF, for a coworker)

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    Well they missed it clearly ;)  Not the first time KB articles about what ports to use are completely nonsense.  Like how they state 80 and 443 and 53, etc..  And make it seem like those need to be inbound vs just outbound ports.

                    Clearly UPnP opened 3074, no other ports are listed other than that skype, turn off skype and see if that goes away. Just play your game and look what ports are forwarded.. Then turn off UPnP and forward the port(s).

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • O
                      opjohnny
                      last edited by

                      Those two skype ports and the 3074 port are the only ones showing up in the list.  I turned the UPnP back off, set the NAT Outbound back to auto, created a new port forward for 3074 UDP, and launched the game.  I can't tell if this is affecting the game yet.

                      pfSense Boxes-

                      Celeron C1037U MiniPC(HDD, current)
                      VIA C7 miniITX(HDD, retired)
                      Firebox x750e(CF, retired)
                      Dell PowerEdge 2950 w/ ESXi v5.5(Retired)
                      Dell PowerEdge 860 w/ ESXi v5.5(Retired)
                      Firebox x700(CF, for a coworker)

                      1 Reply Last reply Reply Quote 0
                      • O
                        opjohnny
                        last edited by

                        I'm only seeing one person on the map.  After a few minutes that did not change, so it looks like I need all that other stuff set in pfSense.  I'm not seeing any traffic going out over 3000 or 3074 in firewall log, only 3001.

                        pfSense Boxes-

                        Celeron C1037U MiniPC(HDD, current)
                        VIA C7 miniITX(HDD, retired)
                        Firebox x750e(CF, retired)
                        Dell PowerEdge 2950 w/ ESXi v5.5(Retired)
                        Dell PowerEdge 860 w/ ESXi v5.5(Retired)
                        Firebox x700(CF, for a coworker)

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          Dude - remove all your forwards.  Enable UPnP - does it work now?  What parts are in use.

                          Disable UPnP and put in the forwards manual.  Or just leave UPnP on.. You do not need both for it to work.. either UPnP will work, or you correctly forward the ports.  You do not need both.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.