HOWTO: Xbox 360 Live connection with pfSense (Port Forward & UPnP)

Sikh

with upnp enabled the xbox will request a port forward and succeed. It works fine for my xbox 360 at home. I don't get NAT type strict.

The missing multicast traffic rule prevented the xbox 360 from succeeding to add a port forward mapping.

So has this missing multicast traffic rule been put into play?

I completely erased everything to do with port forwarding, rules etc. First 360 went open, next one had no connection.

databeestje

Aha, multiple 360's. That explains, I think it overwrites the existing rules.

I don't think Microsoft considered the possibility of 2 xboxes on 1 upnp router.

Sikh

Not true because when we have multiple xboxs on the network, upnp automatically gives the first one 3074(default xbox live port) and then the rest xbox's get random ports.

Its Pfsense not being able to handle this.

DD-WRT does it perfectlly fine so idk

AhnHEL

Just as an update, multiple Gaming Consoles do work quite well with pfSense and this tutorial fully explains how to get it up and running.

What I feel is not stated in enough detail in the tutorial, for any new users to pfSense, is the explanation that Advanced Outbound NAT rules work just like the Firewall rules. They work top to bottom and match the first rule that applies and ignores the rules below it. So your LAN rule should always be at the bottom and your specific individual host IP addresses and/or ports should be above the LAN rule. The diagram shows the proper order but does not explain why.

Hopefully this additional information will help some users who are running into problems. Personally, using the UPnP method, I have 2 XBoxes and 2 PS3s on my LAN and they all work with Open NAT, all at the same time with zero issues.

trendchiller

regardless of what i do, following the whole steps mentioned here:

upnp does not seem to allow the packets, you can see the packet answers always to be blocked in the system-logs :-(

i use 2.0-RC2 (i386) built on Sun May 15 20:43:07 EDT 2011

now i defined NAT by hand and it works…
but why not upnp ?

i used the following upnp rule: allow 1-65535 xxx.xxx.xxx.xxx/32 1-65535

anyone any ideas ?

i even created a pass-rule for the upne ports from lan-network to lan-address as stated in http://forum.pfsense.org/index.php/topic,33024.0.html
but it still does not work, there are simply no mapping in the upnp status...