Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - kitsuna

#1
Quote from: meyergru on April 30, 2025, 08:27:10 PMIf Teams worked like that, it would not function in any decent enterprise environment where you cannot open incoming ports at all.

I assume any listed ports are just needed in outbound direction, so if you enable full internet access for your clients, you should be all set.
If you only want Teams and nothing else, you could limit access to the listed Teams ports, but outbound, not inbound.

i worded the topic poorly, I was talking about NAT experience similar to gaming consoles, like the example i gave for the nintendo switch. Even if you port forward it will give you a poor NAT score if you do not enable a SNAT rule to make the outbound ports static. I was looking to do something similar for teams just to make sure its got the best possible connection experience. However i only know how to do that for an individual device, i am not sure how or if its possible to do it for a whole network. I would assume it should be, if this outbound port then dont randomize it but was hoping someone here knew how
#2
I am attempting to make sure that Teams has the best performance it can in our network. Microsoft lists the ports used by teams for calls and video, naturally i cant just forward this to a single machine. I assume what i want here is a SNAT rule to make the outbound ports static similar to gaming consoles like the switch. However i am not entirely sure how to do this for the entire lan rather than just a particular machine. Can i just set the source as the lan subnet address and the destination as the wan? or am i thinking about this wrong entirely?

I do already have traffic shaping and priority queues setup so this is probably overkill or useless at best but its useful information regardless to know how to do this.
#3
Hi, google does not seem to be helping much here maybe i just dont know what keywords to use. I have a VPS with a usable /64 IPV6 and i wanted to know if its possible to use my wireguard VPN to pass v6 addresses to my lan devices here at home? If so how would i go about setting that up in opnsense?
#4
Thanks for the link but thats not my goal, i am trying to prioritize game traffic above all else, based on some testing i did this seems to be working. I can be in a custom game on HOTS and then use axel to completely saturate my downlink and the game wont be affected by more than a few ms (generally around +6ms) seems to be pretty solid.


Still trying to figure out how to input a port range properly into rules, sadly you can type literally anything into dest port and it wont complain, somehow i dount that asd87w392 is proper port syntax. Anyone know the proper syntax for putting a port range into the rules?
#5
I have been attempting to migrate from pfsense, however one snag i am hitting is that Traffic shaping is significantly more confusing and difficult to setup vs pfsense due to the lack of wizard. I believe i have figured it out but now the problem is that i cant figure out how to verify if its even working. Pfsense has a live view of the ques where i can see how much traffic is going through each one and verify things are being sorted correctly. The status page for opnsense doesnt seem to tell me anything. How can i verify if my rules are properly being used?

Also what is the proper syntax for using a range of ports in the rules? is it say 27000-27030 or 27000:27030