Port Forwarding for Minecraft Bedrock Server not Working

Started by spencerlhon, January 17, 2023, 09:10:34 AM

Previous topic - Next topic
So I'm pretty new to OPNSense and trying to figure stuff out on my own, but I've hit a roadblock...

I'm trying to start a Minecraft server for my kids and cousins to join which requires some port forwarding (which I've done), but it's just not working for anyone that's joining outside of my local network. The port it needs open for the Bedrock edition of Minecraft is 19132. I've followed some other tutorials on how to do port forwarding in OPNSense and it seemed easy enough, yet the ports appear to be closed still according to portchecker.co and my inability to join the server off the network. Is there something I'm missing? This is what my TCP/UDP rule looks like:

Firewall -> NAT -> Port Forward (added a new rule here with Aliases for ports and my PC)

Disabled: no
No RDR (NOT) no
Interface: WAN
TCP/IP Version: IPv4
Protocol: TCP/UDP
Source: any
Source port range: from: any; to: any
Destination/Invert: no
Destination: WAN Address
Destination port range: from: 19132; to: 19132
Redirect target IP: My PC (which is hosting the server)
Redirect target port: 19132
Pool Options: Default
Log: no
Category: empty
Description: empty
Set local tag: empty
Match local tag: empty
No XMLRPC Sync: no
NAT reflection: Enable
Filter rule association: Rule


I've applied the rule and rebooted the router (because I guess, why not?) and I've restarted the server multiple times to see if there was something wrong with it, but still nothing... I'm not able to connect. The way it's supposed to work too is that everyone that's outside my network will need my public IP to connect to the server. I'm fine with that since it's just family and none of them barely know what an IP address is let alone what to do with something like a public one.

So with that said, what else can I do? Is there a feature that I haven't enabled yet? I'm at a loss here because I feel like I've done everything.

Any help would be greatly appreciated!

Bedrock is UDP which is probably why the online port checker shows nothing (they can usually only check TCP).

I assume you have applied the port forward (same for the Aliases)? That can sometimes to be missed after creating the rule or alias.

Check that the associated firewall rule on WAN has been created and is enabled.

The other explanation of course is that it is nothing to do with OPNsense, instead your ISP uses CG-NAT or blocks ports. Then you are out of luck unless you set up a VPN (or change ISP).

Quote from: Greelan on January 17, 2023, 09:26:00 AM
Bedrock is UDP which is probably why the online port checker shows nothing (they can usually only check TCP).

I assume you have applied the port forward (same for the Aliases)? That can sometimes to be missed after creating the rule or alias.

Check that the associated firewall rule on WAN has been created and is enabled.

Yeah I checked the rule on WAN and it looks right.

I hope it's not my ISP... because there's nothing else good around my area, haha! If so, then I might go the VPN route to see what I can do. I haven't tried connecting to it using Minecraft since trying out the online port checker and I've changed some things, so it might be working. I just thought it was an easier way to check if the port was open or not without going through Minecraft every time.

Thanks!

You can check if you are on CG-NAT by looking at the public IP shown on the WAN interface in your router config. If it starts with 100, you are on CG-NAT

September 12, 2023, 07:20:42 AM #5 Last Edit: September 22, 2023, 05:00:07 PM by RylandMckinney
I totally get your frustration with the Minecraft Bedrock server port forwarding issue. Let's try to figure it out together. It seems like your port forwarding rule is set up correctly, but those port checker tools can sometimes give false results. Have you tried connecting to the server using your public IP address? Another thing you could try is enabling NAT reflection in your OPNSense settings. Sometimes it helps with connectivity from within your own network. Since you mentioned being new to OPNSense, have you checked out the Minecraft web portal on ModBay? They have some handy guides and resources that might help you troubleshoot your server setup. You can find it here https://modbay.org/ I hope these suggestions will help you get your Minecraft server up and running smoothly for your kids and cousins.

Hello.

Sorry to bring up an old post like this, but it seemed most relevant to what I am trying to do, and having similar issues.

I don't believe my issue is with Cox blocking my NAT connection, but it could be. So let's start with what I have set up so far.

ALIAS:
enabled: checked
name: computer_name
type: host
category:
content: IP address
statistics: unchecked
description:

NAT > Port Forward:
Disabled: unchecked
No RDR: unchecked
Interface: WAN_ETH1
TCP/IP Version: IPv4
Protocol: TCP/UDP
Source / Invert: unchecked
Source: any
Source port range from:   to: 19132 - 19133
Destination / Invert: unchecked
Destination: WAN_ETH1 address
Destination port range from:   to: 19132 - 19133
Redirect target IP: alias_computer_name
Redirect target port: 19132
Pool Options: Default
Log: unchecked
Category:
Description: Minecraft Bedrock Server 01
Set local tag:
Match local tag:
No XMLRPC Sync:
NAT reflection: Enable
Filter rule association: Rule Minecraft Bedrock Server 01


OK.

I'm not sure what else I'm missing at this point, but I've been stuck here for a long time and I'm finally coming to look for help. Any assistance would be greatly appreciated.

Please try to set source port to any, as the source port could differ from the destination port.