struggling with Xbox One Strict

[comet424]

hi I been trying different fix's for the Xbox One.. none seem to be working which one works for sure.. im using latest pfsense.. and my nat is in manual mode for vpn service
so I cant get out of strict mode

[comet424]

Nat Type is Moderate Double NAT detected
before was strict

[MoonKnight]

@comet424 said in struggling with Xbox One Strict:

Nat Type is Moderate Double NAT detected
before was strict

Hi,
Have you read this one:
https://forum.netgate.com/topic/66074/howto-xbox-one-and-open-nat

or

https://forum.netgate.com/topic/123592/xbox-one-incl-s-and-x-howto-for-open-nat

or, if you need the image version

https://digiex.net/threads/pfsense-step-by-step-guide-to-multiple-xbox-ones-open-nat-play-together-2-3-x.15094/

[comet424]

ive tried 1 and 3 I read those articles before they were the ones not working..
ill give number 2 a try.. I don't know how there can be so many different versions

shouldn't there be a single 1 that works every time no issues no problems ever?
but so many different tricks frustrating
and I use manual mode for nordvpn but people talk about hybride mode etc

[comet424]

guess ive done basically number 2 too.. kinda go confused
but still in Moderate mode

too bad there is no Sure way.. works everytime no other way needed
frustrating

[comet424]

I also tried this one
https://forum.netgate.com/topic/66074/howto-xbox-one-and-open-nat
and still no luck

[comet424]

I get it to work only if I disable my VPN service and do a reboot of pfsense
its open then

but when I restart VPN Service boom back to moderate ugh what do I need to do to get it to work

[comet424]

oh and im behing a NordVpn service
if anyone has NordVPN and xbox one be great.. as I turn off nord box is open turn on and I disabled.. I tried changing the WAN interface to nord OpenVPN but that didn't help still moderate so not sure what settings to change..

also my modem is in bridge mode or should be and I do PPPOE on the pfsense wan interface and have pppoe disabled on the modem and disabled the dhcp and wifi

[comet424]

is there a program to test on Windows to test for NAT to make sure its open
NordVPN says there service should be open but its not

[Animosity022]

@comet424

If you are trying to get an open NAT through a VPN, you are going to have quite the challenge. You'd need to manually forward the ports from the VPN to your PFSense box.

Also, NordVPN doesn't support port forwarding:

https://support.nordvpn.com/#/Getting-Started/1047408432/Do-you-offer-port-forwarding.htm

[comet424]

well what i trying to do is forget it to going through the VPN
i trying to get certain computers to get the VPN and then i want the Xbox to bypass the VPN go directly to the Wan interface.. i kinda get it to do that but then also hits the vpn too so then i guess thats a double nat.. if i shut off the vpn then it opens up i guess... its madning

as eventually if i get xbox to bypass vpn i want some computers on the network on a VPN and some not on the vpn

[comet424]

i also having problems trying to forward port 80 to my unraid server as i have a windows 2016 server with 5 websites i wanna host i cant get it to bypass vpn i wanna be able to www.example.com and go to my unraid server and run the website off the VM of windows 2016 and i having issues cant go directly to WAN
here is my other forum i wrote in i trying to get help i just frustrated
what is a good vpn to do then as i was just trying there 3 day trials
https://forum.netgate.com/topic/133829/having-problems-with-port-forwarding-and-nat-and-vpn/21

[Animosity022]

I think you are trying to do too many things at once. I'd break it down and try to figure out a thing at a time and get it working.

If you remove the VPN from the picture, are you able to get the XBox to open? NordVPN does not forward ports so you'll never get an open NAT using them. There are a few providers from my searching that do support port forwarding. I personally use TorGuard as they support port forwarding and seemed a fair price point.

To get a single IP to go through the VPN, I made an alias for my traffic group and set a rule so it goes through my VPN gateway.

login-to-view

Here is an example of what my rules look like.

[comet424]

This post is deleted!