Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Test Request: UPnP Fix for Multiple Consoles playing the same game / static port outbound NAT

    Scheduled Pinned Locked Moved Gaming
    133 Posts 28 Posters 47.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      food007 Galactic Empire
      last edited by

      @trunix , sure. I can try that. I will change the setting, test, and report back.

      I don't think it should change anything though, as even the helper text above the ACL Entries field uses CIDR notation for its example. (see highlighted text in pic... screenshot from 2.4.5, but I believe the helper text is the same in 2.5.0 as well)

      Capture.PNG

      A 1 Reply Last reply Reply Quote 0
      • A
        aniel @food007
        last edited by

        @food007 where u able to test it out ?

        F 1 Reply Last reply Reply Quote 0
        • F
          food007 Galactic Empire @aniel
          last edited by

          @aniel Yes, I tested specifying each address individually... no difference.

          A 1 Reply Last reply Reply Quote 1
          • A
            aniel @food007
            last edited by

            @food007 do u think this will get fixed with the release of 2.5.5 ?

            V F 2 Replies Last reply Reply Quote 0
            • V
              vMAC @aniel
              last edited by

              @aniel I wouldn't bet on it. Unfortunately I tried to help on this in the spring of last year. Still not working reliably.

              1 Reply Last reply Reply Quote 0
              • F
                food007 Galactic Empire @aniel
                last edited by

                @aniel I'm with @vMAC . I don't see this being fixed anytime soon. I ended up just DMZ'ing off my consoles and liberally opening ports, because this simply doesn't work at the time of this writing (on 2.4.5 or 2.5_development).

                A 1 Reply Last reply Reply Quote 0
                • A
                  aniel @food007
                  last edited by

                  @food007 that is to bad :(

                  C 1 Reply Last reply Reply Quote 0
                  • C
                    chrcoluk @aniel
                    last edited by

                    Guys

                    An update

                    So I added an xbox series S to my network, forwarded the xbox ports and noticed nat was down, and it was reporting errors with testudo network.

                    Did a bit of research and it turns out microsoft now use ipv6 for their multiplayer, and if native ipv6 is not detected it will use testudo, now I never figured out why testudo wouldnt work, something somewhere seemed to be blocking it.

                    But as soon as I put it on my main VLAN which has working ipv6, it all works fine. With native ipv6 it will have its own routable ip so all solved.

                    pfSense CE 2.7.2

                    F 1 Reply Last reply Reply Quote 0
                    • F
                      food007 Galactic Empire @chrcoluk
                      last edited by

                      @chrcoluk thanks for the update. Glad to hear it's working for you.
                      I'm not using IPv6 in my networks behind my WAN link, so UPnP being broken is still a blocker on this issue for me. :(

                      w26

                      T 1 Reply Last reply Reply Quote 1
                      • T
                        theprestigepacketfilter @food007
                        last edited by

                        @food007 agreed, feels like a workaround as opposed to a solution.

                        1 Reply Last reply Reply Quote 0
                        • C
                          chrcoluk
                          last edited by

                          Well i am looking into this again, trying to play UNO on steam.

                          Ubisoft in their wisdom decided to use the same port as xbox (port 3074), I see connection attempts adhoc in the firewall.

                          I have no experience with upnp at all, so its a learning crunch to try and understand how it is supposed to work, supposed to be configured etc, but all I know at the moment is that players cannot connect to me when I host a game but I can connect to others when they are host.

                          As usual the game vendors documentation is awful, so left trying to figure this out. If I get any success I will report back here.

                          pfSense CE 2.7.2

                          A 1 Reply Last reply Reply Quote 0
                          • A
                            aniel @chrcoluk
                            last edited by

                            @chrcoluk they will fixed by verison 2.5.next

                            1 Reply Last reply Reply Quote 0
                            • C
                              chrcoluk
                              last edited by chrcoluk

                              I think the issue here is none of the developers have gaming consoles so no testing is getting done by those who can change the code.

                              pfSense CE 2.7.2

                              A 1 Reply Last reply Reply Quote 2
                              • A
                                aniel @chrcoluk
                                last edited by

                                @chrcoluk i agree i just don’t understand why they can put more resources and interest into fixing this, in the meanwhile i will keep playing with open nat and my brother with strict nat on warzone.

                                1 Reply Last reply Reply Quote 1
                                • C
                                  chrcoluk
                                  last edited by

                                  Bunch of these

                                  Feb 25 03:02:15 miniupnpd 33263 PCPSendUnsolicitedAnnounce(sockets[0]) sendto(): No route to host
                                  Feb 25 03:02:15 miniupnpd 33263 SendNATPMPPublicAddressChangeNotification: sendto(s_udp=18, port=5351): No route to host
                                  Feb 25 03:02:12 miniupnpd 33263 PCPSendUnsolicitedAnnounce() IPv6 sendto(): No route to host
                                  Feb 25 03:02:12 miniupnpd 33263 PCPSendUnsolicitedAnnounce(sockets[0]) sendto(): No route to host
                                  Feb 25 03:02:12 miniupnpd 33263 SendNATPMPPublicAddressChangeNotification: sendto(s_udp=18, port=5351): No route to host
                                  Feb 25 03:02:11 miniupnpd 33263 PCPSendUnsolicitedAnnounce() IPv6 sendto(): No route to host
                                  Feb 25 03:02:11 miniupnpd 33263 PCPSendUnsolicitedAnnounce(sockets[0]) sendto(): No route to host
                                  Feb 25 03:02:11 miniupnpd 33263 SendNATPMPPublicAddressChangeNotification: sendto(s_udp=18, port=5351): No route to host
                                  Feb 25 03:02:11 miniupnpd 33263 PCPSendUnsolicitedAnnounce() IPv6 sendto(): No route to host
                                  Feb 25 03:02:11 miniupnpd 33263 PCPSendUnsolicitedAnnounce(sockets[0]) sendto(): No route to host
                                  Feb 25 03:02:11 miniupnpd 33263 SendNATPMPPublicAddressChangeNotification: sendto(s_udp=18, port=5351): No route to host
                                  Feb 25 03:02:11 miniupnpd 33263 PCPSendUnsolicitedAnnounce() IPv6 sendto(): No route to host
                                  Feb 25 03:02:11 miniupnpd 33263 PCPSendUnsolicitedAnnounce(sockets[0]) sendto(): No route to host
                                  Feb 25 03:02:11 miniupnpd 33263 SendNATPMPPublicAddressChangeNotification: sendto(s_udp=18, port=5351): No route to host

                                  At same time in firewall log, the block RFC1918 on WAN is blocking those packets, destination ip 224.0.0.1. Source ip/port is pfsense ip and port miniupnpd listens on. This is starting to get interesting.

                                  pfSense CE 2.7.2

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    chrcoluk
                                    last edited by

                                    After allowing the traffic that pfsense was blocking (created easyrule for it), its working on my xbox.

                                    Some info here, as this was worked on for pfsense 2.5.

                                    https://redmine.pfsense.org/issues/7727

                                    I am still trying to get it working with windows as a upnp host which is proving more difficult, but that may be a windows issue rather than pfsense.

                                    pfSense CE 2.7.2

                                    A 1 Reply Last reply Reply Quote 0
                                    • A
                                      aniel @chrcoluk
                                      last edited by

                                      @chrcoluk said in Test Request: UPnP Fix for Multiple Consoles playing the same game / static port outbound NAT:

                                      https://redmine.pfsense.org/issues/7727

                                      yep me and my brother are on pc, we can't both have open not

                                      C 1 Reply Last reply Reply Quote 0
                                      • C
                                        chrcoluk @aniel
                                        last edited by chrcoluk

                                        @aniel

                                        Is very frustrating, the consoles have a test feature which allows debugging.

                                        I cannot find a way in windows to simply diagnose and test upnp.

                                        How are you even getting one peron on open nat on the pc, how are you testing it?

                                        --edit--

                                        Tired after a few hours of uno, but I fixed it had 2 devices using same port using upnp at same time, which I believe was the reason for this thread?

                                        I will need to collate everything together I did and compile it into a report for the devs to look into.

                                        pfSense CE 2.7.2

                                        A 1 Reply Last reply Reply Quote 0
                                        • A
                                          aniel
                                          last edited by

                                          @chrcoluk yes please and also can u share how u got two pc to be playing the same game at the same time and both have open nat?

                                          1 Reply Last reply Reply Quote 0
                                          • D
                                            DonZalmrol
                                            last edited by DonZalmrol

                                            I'm trying to get two computers (A and B) that are on the same network in open NAT in order to play Anno 1800.

                                            What I did:

                                            1. Enabled "NAT Reflection mode for port forwards" with Pure NAT mode

                                            2. Checked "Enable NAT Reflection for 1:1 NAT"

                                            3. Checked "Enable automatic outbound NAT for Reflection"

                                            4. Under NAT -> Outbound mode have my NAT mode set to "Manual Outbound NAT rule generation. (AON - Advanced Outbound NAT)" as I have some other services (e.g. mail and webserver) running that need a static port for NAT. *

                                            5. Set my LAN network on which the computers reside to static port

                                            6. Enabled "UPNP & NAT-PMP"

                                            7. Checked "Allow UPnP Port Mapping"

                                            8. Checked "Allow NAT-PMP Port Mapping

                                            9. External interface = WAN

                                            10. Interfaces = LAN

                                            11. Checked "Log packets"

                                            12. Checked "Deny access to UPnP & NAT-PMP by default"

                                            13. Created as a test a non-scoped ACL entry "allow 1024-65535 MyLANNetworkRange/24 1024-65535"

                                            14. Did a reset of the states

                                            15. Restarted both computers

                                            Question for Item 4 -> Do I need to have my outbound NAT mode set to Hybrid, or is it OK to have it in Manual mode?

                                            Results: Computer A gets open NAT = success, Computer B gets strict NAT and multiplayer is offline. If computer B starts the game before A, the roles are reversed.

                                            Any tips would be greatly appreciated!

                                            PS: Have not yet checked "IP Options" under my LAN rule.

                                            T 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.