Xbox 360-Open NAT but still blocking traffic?



  • This has been driving me insane so I'm hoping you guys can shed some light for me.  I couldn't find anyone else with this issue so I am sorry if I missed it somewhere.

    First off, my current setup is like this Modem > Asus RT-N66U (192.168.7.1) > pfSense Wan(192.168.7.77) > pfSense LAN (192.168.1.100) > gigabit switch > Xbox360(192.168.1.20) assigned via pfSense.  I realize that I shouldn't have the Asus in there but at the moment I can't do anything about it.  I did however setup my pfSense box as a DMZ (192.168.7.77) so everything is coming to it.

    So right now I have upnp turned on with no user specified rules.  The Xbox and all of the games I have tried report open NAT and in the upnp status page it says: 'Xbox (192.168.1.20:3074) 3074 UDP' so upnp appears to be working.  This is where it gets weird though.  When I try to do a chat or party with a friend over live his IP pops up in my firewall log with port 3074 trying to get to 192.168.7.77(the pfSense box) on a random port which is blocked.  Since it is blocked the connection always fails.  As a matter of fact, if I join any gears of war online game I always get a few different IP's coming in on random ports trying to get to 192.168.7.77:60396. I haven't seen 60396 listed anywhere in reference to Xbox Live so I am not sure why it wants that port so much.  Also, I cant help but notice that the destination IP is always the pfSense WAN instead of my Xbox which I think is the problem.

    Short of putting another NIC card in my pfSense box and making my xbox a DMZ or forwarding every port to it I don't know what to do.  I'm thinking the Asus router is screwing everything up for me but I'm not 100% sure.  If you guys have anything I could try I would greatly appreciate it.



  • You should have the Asus behind your pfsense box in bridge mode and do NAT only on pfsense. Is there a reason you have it setup before pfsense?



  • Unfortunately its not my network to start switching around components around. The whole reason I set up a pfSense box was to play around with it and get familiar with it so when I get out of here and have my own house I am used to it.  I've already learned a ton and I am enjoying playing with around with it.

    Do you think the Asus router is what is causing the issues?  I know having double NAT is asking for problems so I wouldn't be surprised.  Im thinking I might just pop a spare NIC in and mess with having a DMZ just for fun. Like I said I'm open to any suggestions.