UPnP multiple hosts playing the same game using the same port product feedback

phobix

Sad to say that without this key feature, I cannot use pfsense as my new router/firewall. This is a feature that works on nearly every other router/firewall out there. It works on all consumer grade routers as well as things like the edgerouter and cisco ASA's.
Pretty disappointing considering pfsense did everything else I wanted it to wonderfully.

brandur

@phobix:

Sad to say that without this key feature, I cannot use pfsense as my new router/firewall. This is a feature that works on nearly every other router/firewall out there. It works on all consumer grade routers as well as things like the edgerouter and cisco ASA's.
Pretty disappointing considering pfsense did everything else I wanted it to wonderfully.

Are you referring to UPnP and NAT-PMP? If so, it is supported, but not enabled by default.
https://doc.pfsense.org/index.php/What_are_UPnP_and_NAT-PMP

Harvy66

uPNP cannot let you use the same port at the same time, but it does let you use the same IP at the same time. If two devices tried to use the same port at the same time to the same remote IP+port, it would be ambiguous to the router where to send the packet. This is logically impossible without some packet cross-layer packet tagging, which I hope no one ever does.

kpa

Nm

stephenw10

That's true but I don't think that's what we're seeing here.

The games require opening port forwards to the internal clients from some remote server on a specific destination port. They all try to use the same port.

Unless I'm mistaken, which I could be! Please enlighten me if so. :)

Steve

kpa

Never mind my reply above which I have now edited.

The question is too vague because there are two different things at play. First is the port forwarding part which UPnP does handle but of course the same destination port on the external address is only usable for one port forward, no way around it on pfSense or any other platform. The next thing is the outbound NAT configuration and this is what I think the question is really about and this is something the UPnP service in pfSense doesn't automate as far as I know.