Dark Souls Connection Between Two Pfsense Routers

[maltbeverage]

I'm hoping someone here is familiar with Dark Souls coop/pvp connections. I am behind a Pfsense 2.1.5 router with a basic config for a home network. Dark Souls works fine when trying to connect to all other players (invade/summon) except for one of my friends (I will call friend A) who is also running Pfsense 2.1.5.

Whether summoning or being summoned by friend A, the summoning always fails. If I am summoned into the world of friend B, that works fine. If friend B summons friend A while I am in his world, I get kicked out.

Friend A and I have confirmed we can see each others IP address in our state tables though it does not look like a connection is established. We all run DSC fix for DS which ensures we are in the same IP pool as our friends. It is as if something between our two networks is conflicting, though I am at a loss of what that could be. Aside from Dark Souls, we have no issues with connections in other multiplayer games. He can connect to an Insurgency server hosted in my network. BTsync also works fine between us.

I feel as though it could be something related to our pfsense setups, though I'm unsure where to troubleshoot beyond basic port forwarding/firewall rules and turning it off and on again  ::).

Any nudges in the right direction would be appreciated.

[mcwtim]

from: http://steamcommunity.com/app/211420/discussions/0/828935269278734403/

"What DSCfix does NOT do:
– Fix any NAT related problems. If you have a strict NAT (as reported by GFWL) and have not been able to successfully summon/be summoned, DSCfix will probably not help."

Assuming you used default NAT settings in pfSense it is strict.

Perhaps finding the ports for the game and forwarding them and enabling NAT+Proxy under NAT reflection for that rule will help. The game does use some P2P for the friend connections.

[maltbeverage]

@mcwtim:

from: http://steamcommunity.com/app/211420/discussions/0/828935269278734403/

"What DSCfix does NOT do:
– Fix any NAT related problems. If you have a strict NAT (as reported by GFWL) and have not been able to successfully summon/be summoned, DSCfix will probably not help."

Agreed, however I can connect to all other friends just fine. The connection issue is isolated between the two of us.

@mcwtim:

Assuming you used default NAT settings in pfSense it is strict.

I have Manual outbound NAT rule generation with the default rules for the WAN interface.

@mcwtim:

Perhaps finding the ports for the game and forwarding them and enabling NAT+Proxy under NAT reflection for that rule will help. The game does use some P2P for the friend connections.

NAT+Proxy is enabled on my box already. I did not try specifically try opening up DS ports since it connects fine to all other players, though that would be an obvious troubleshooting step to rule out as a cause so I will try that.

Thanks for the reply.

[mcwtim]

Also some tips here about some oddities with GFWL and this game:

http://forums.steampowered.com/forums/showthread.php?t=2959611