From owner-freebsd-questions@FreeBSD.ORG Sat Jun 5 19:07:35 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A3B0616A4CE for ; Sat, 5 Jun 2004 19:07:35 -0700 (PDT) Received: from bombshelter.ca (CPE0060975ec36a-CM.cpe.net.cable.rogers.com [24.157.197.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4CA8943D3F for ; Sat, 5 Jun 2004 19:07:35 -0700 (PDT) (envelope-from tbruyere@bombshelter.ca) Received: from bombshelter.ca (localhost [127.0.0.1]) by bombshelter.ca (8.12.10/8.12.10) with ESMTP id i5628kWl073989 for ; Sat, 5 Jun 2004 22:08:46 -0400 (EDT) (envelope-from tbruyere@bombshelter.ca) Received: from localhost (tbruyere@localhost)i5628eOi073986 for ; Sat, 5 Jun 2004 22:08:46 -0400 (EDT) (envelope-from tbruyere@bombshelter.ca) Date: Sat, 5 Jun 2004 22:08:40 -0400 (EDT) From: Ted Bruyere To: freebsd-questions@freebsd.org Message-ID: <20040605220456.T70624@bombshelter.ca> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: IPFW and NATD to open firewall for XBox Live X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Jun 2004 02:07:35 -0000 I hope the subject says it all... I'm told that while using xbox live behind a router (I'm using FreeBSD 5.2.1), ports 88 and 3074 need to be open. I have this working for internal addresses in the 192.168.2.* range, and it DID work back when I had a linux box doing the routing. Can anyone tell me what's going down, if this is the right way to do it, or supply more information or troubleshooting? Any help at all appreciated. Here's the lines I'm using to try to do this, based on the web searching I've been doing. in /etc/rc.firewall.local: # XBOX: (UDP 88, UDP 3074, and TCP 3074) ipfw allow log tcp from any to any 88 ipfw allow log udp from any to any 88 ipfw allow log tcp from any to any 3074 ipfw allow log udp from any to any 3074 and in /etc/natd.conf redirect_port tcp 192.168.2.216:3074 3074 redirect_port udp 192.168.2.216:3074 3074 redirect_port tcp 192.168.2.216:88 88 redirect_port udp 192.168.2.216:88 88