Minecraft Education | Unable to join multiplayer game

[posix]

Hello Netgate Forum,

This is what I need some assistance.

Problem Description:
Unable to join multiplayer game in Minecraft Education Edition.
When attempting to join it fails with "Unable to Join World"

Hardware:
SG-5100 2.4.5-SP1

Troubleshooting:
Checked and noticed that while it failed-
Status->System Logs->Firewall->Normal View

WAN	PUBLIC_IP:19132	WAN_IP:54784	UDP

And read manual
https://education.minecraft.net/wp-content/uploads/Minecraft-Education-Edition-Multiplayer-Guide.pdf
Page 2

Port 19132 TCP AND UDP (this carries Minecraft multiplayer traffic)

I created the following NAT rule: Under Firewall->NAT->Port Forward

Interface WAN
Protocol TCP/UDP
Destination WAN Address
Destination port range: 19132 (Alias MincraftPort)
Redirect IP 192.168.40.99 ->DHCP static address 
Redirect Target Port 19132 (Alias MincraftPort)

I am not longer seeing any blocked messages related to port 19132 or target IP.

On Firewall->NAT->Outbound I have following configured

Manual Outbound Nat Rule Generation.

I also created an outbound rule

Interface WAN
Address Family IPv4
Protocol TCP/UDP
Source Network 192.168.40.99/32
Address Interface Address
Port or Range - Blank - Static Range checked

Its on a VLAN with no pfblocker or any other application. Internet works without issue.

Took a packet capture and as far as I can see low number of re-transmits I can see the TCP flow and TLS handshake. RakNet is the protocol used.

This is for my childs AGP class and all my childs class mates can join. I have spent two days troubleshooting on my own. Any suggetions?

[DaddyGo]

@posix said in Minecraft Education | Unable to join multiplayer game:

This is what I need some assistance.

Hi,

Have you checked the host computer FW too?
(AV software FW or Win FW)

It is not enough to configure the hardware firewall (pfSense NGFW)

[posix]

This post is deleted!

[posix]

@daddygo

Thanks for the response. Yes! bitdefender firewall on the PC has and was disabled.

UPDATE: others can join when my child hosts the multiplayer game/world but they still cannot join their classmates/teachers worlds/multiplayer game.

But the same players/teacher can join each other’s without issue.

[DaddyGo]

@posix said in Minecraft Education | Unable to join multiplayer game:

others can join when my child hosts the multiplayer game/world

It sounds like multiplayer is working (port 19132), ergo this is not a pfSense or host FW issue

-does Minecraft Edu. use UPnP or other ports?

[bigchimpin]

Welcome to hell, my friend. We are approaching our four year anniversary of this issue, join me in celebrating the eternal life of Feature #7727: https://redmine.pfsense.org/issues/7727

https://forum.netgate.com/topic/153478/pfsense-multiple-pcs-open-nat-a-solution-and-a-grievance

[Uglybrian]

Hello, by any chance are you using a Apple device with private addresses enabled in the Wi-Fi?

[posix]

@daddygo no mention of UPNP.

[posix]

@uglybrian no it’s windows 10 dell inspiron laptop it uses private subnet 192.168.40.x they all do. Wi-Fi is provided by unifi AP.

[posix]

@bigchimpin hey I remember seeing this bug!
Lol it’s been hell last two days. Was considering shelling $799 to netgate support....

[DaddyGo]

@posix said in Minecraft Education | Unable to join multiplayer game:

no mention of UPNP.

as the colleague @bigchimpin mentions, we have already discussed it here:
(wait - wait and end up waiting)

https://forum.netgate.com/topic/153514/nat-issues-when-playing-games-on-two-computers/12?_=1599056109642

BTW:
so I asked about UPnP

[posix]

@daddygo

Ok thanks, so another update I was researching on UPnP and forgot to add the following configuration. (I did this for another gaming PC to get from strict NAT to moderate NAT and I did see better behavior).

Services -> UPnP & NAT-PMP (check)
Enable UPnP & NAT-PMP (check)
UPnP Port Mapping Allow UPnP Port Mapping (check)
External Interface WAN
Interface SPECIFIC VLAN interface

Then under

UPnP Access Control Lists
allow 53-65535 192.168.40.99 53-65535

Unfortunately still not able to join games. Looking at the packet capture I took using (Full) Level detail. I saw many retransmits in TCP. They would come in batches in the flow then everything would return to normal. I googled upnp wire shark capture and it seems all are UDP port 1900 and SSDP.

@bigchimpin @DaddyGo I want to thoroughly exhaust my options and go through the steps before calling it.I dont doubt your analysis. Mainly documentation. Perhaps might help others get a workaround in place as I did.

[DaddyGo]

@posix said in Minecraft Education | Unable to join multiplayer game:

I want to thoroughly exhaust my options

This will not be resolved today, maybe tomorrow

[posix]

UPDATE:

My child confirmed today that they are able to join other players world.

I can confirm no change in configuration other the last update I provided on
making changes Services UPnP & NAT-PMP.

Will monitor some more.

[DaddyGo]

@posix said in Minecraft Education | Unable to join multiplayer game:

making changes Services UPnP & NAT-PMP.

Which I would like to add, with things like UPnP & NAT-PMP be careful on your firewall.
Always run on a separate interface
(I see you have a VLAN for this purpose)

[tyluerdisy]

This post is deleted!

[dmp1ce]

Did anyone try just port forwarding the recommended ports on the https://portforward.com/minecraft/ page? I'm going to give that a try because I don't really want to turn UPnP on.

Some additional ports to forward would be 19133 and 25565 which I didn't see mentioned in this thread.

[dmp1ce]

Nevermind, I guess 19133 is for IPv6 and 25565 is for Java Edition. So, opening 19132 should do it for my setup, but I cannot join only host. Minecraft Education gets the wrong IP though.

[kasatka]

This post is deleted!

[GeorgiaClark]

This post is deleted!