DMZ Help

[lmnsour]

I'm trying to setup a Gaming PC on the firewall and some games don't like the Strict NAT policy.

I tried manual port forwarding and then tried UPNP but neither worked.

I was looking into setting up a DMZ and found a help thread that said setting up a 1:1 NAT would work with the port fwd'ing.  https://forum.opnsense.org/index.php?topic=429.0

The problem is I'm kind of a caveman and its not broken down quiet enough for me to follow.  Attached is a map to my network and screen shots of the virtual IP and 1:1 NAT rule I made.  Its still not working so I think I did something wrong.

[lilsense]

I am not sure why you need DMZ, as this is a plain Jane PC.  What game are you trying to play that you are unable to?

[lmnsour]

I am not sure why you need DMZ, as this is a plain Jane PC.  What game are you trying to play that you are unable to?

Bungie servers don't like strict NATs.  I keep getting a network message from Bungie and noticeable network lag.

[lilsense]

based on this link: https://help.bungie.net/hc/en-us/articles/360049496751

all you gotta do is to port forward the two UDP ports: 3074, 3097

[lmnsour]

based on this link: https://help.bungie.net/hc/en-us/articles/360049496751

all you gotta do is to port forward the two UDP ports: 3074, 3097

I tried port forwarding and UPnP.  The UPnP status shows the ports are open (the PC firewall rules are already configured for the ports so that's not an issue). 

I still get the "Strict NAT" error.

Anyways, from what I understand, a 1:1 NAT is needed to fix this but if you have a better idea, I'd appreciate it.  Thanks!

[lilsense]

no need for 1:1 NAT as you do not have sufficient Internet IP. you may need to do a 1:1 PAT as in port not network. So set your ports to be the same.

[lmnsour]

no need for 1:1 NAT as you do not have sufficient Internet IP. you may need to do a 1:1 PAT as in port not network. So set your ports to be the same.

Thanks, I looked deeper into it and was able to get Port Forwarding to work finally. 

[lilsense]

I am glad I was able to help. You might want to post what you did or how you did it for others that might have the same issue.

[lmnsour]

I am glad I was able to help. You might want to post what you did or how you did it for others that might have the same issue.

I think my first attempt to Port Fwd didnt work (and UPnP?) because I didn't have "Hybrid NAT" selected on the firewall outbound rules.  I found this article helpful:

https://niallbest.com/achieve-full-open-nat-with-port-forwarding-for-xbox-live-via-opnsense/