Fix for Xbox Live NAT Issues

RouterOS General
1

For anyone having Strict or Moderate NAT issues on Xbox Live implement the following firewall rules to get Open NAT.

There is no need to add the rules for ports 80 and 53. After I implemented the rules the counters were not showing anything until after I rebooted the router, so make sure to give your router a reboot before you attempt to test them.

Replace the 192.168.0.50 address with the IP of your Xbox.
(Make sure your Xbox IP is static, or set a static address assignment on your DHCP server)

/ip firewall nat
add action=dst-nat chain=dstnat dst-port=88 protocol=udp to-addresses=\
    192.168.0.50 to-ports=88
add action=dst-nat chain=dstnat dst-port=3074-3076 protocol=tcp to-addresses=\
    192.168.0.50 to-ports=3074-3076
add action=dst-nat chain=dstnat dst-port=3074-3076 protocol=udp to-addresses=\
    192.168.0.50 to-ports=3074-3076
add action=dst-nat chain=dstnat dst-port=500 protocol=udp to-addresses=\
    192.168.0.50 to-ports=500
add action=dst-nat chain=dstnat dst-port=3544 protocol=udp to-addresses=\
    192.168.0.50 to-ports=3544
add action=dst-nat chain=dstnat dst-port=4500 protocol=udp to-addresses=\
    192.168.0.50 to-ports=4500

/ip firewall filter
add chain=forward dst-port=88 protocol=udp
add chain=forward dst-port=3074-3076 protocol=tcp
add chain=forward dst-port=3074-3076 protocol=udp
add chain=forward dst-port=500 protocol=udp
add chain=forward dst-port=3544 protocol=udp
add chain=forward dst-port=4500 protocol=udp
2

I don’t have xbox but I consider opening so many ports to it as too risky just for playing games.

3

I have updated the code to reflect a fix for in-game NAT issues such as, your NAT type showing as OPEN on the Xbox Live Dashboard but MODERATE or STRICT in-game. I was having this issue while playing Call of Duty Advanced Warfare, it would prevent me from joining certain friend’s parties. The fix was to add ports 3075 and 3076 to the 3074 rules.