Remove SPI firewall in router RB450G

I have to disable the SPI firewall in the RB450G
How I can do this?

the xbox 360 has incompatibility with SPI Firewall of mikrotik

other routers work well removing the firewall

I need to know how to completely disable the SPI firewall

Goto IP → Firewall and select the Filters tab. Then highlight all of the rules and remove them.

No, that’s bad solution. Add new rule with dst-address of xbox and action accept, and put that rule first.

I have an Xbox working just fine with the firewall. Post your export.

Sent from my SCH-I545 using Tapatalk

the mikrotik has an internal SPI firewall, always works through an internal firewall

I what I want is to disable the SPI firewall router

other routers is possible to disable the firewall

into the mikrotik is not possible to disable it?

need an update for customers who want to disable the internal firewall mikrotik

Xbox 360 does not support mandatory routers that work through a firewall

You can’t fully disable it. But like I said… I have configured tons of them and have never had a problem if configured properly with XBox 360 or XBox One.

I never noticed any problem with my Xbox.
Firewall is enabled and everything works fine.
Remember to enable and configure UPnP.

Regards,

UPNP does not work for xbox 360

UPNP only open UDP port 3074
but the xbox 360 also requires ports

3074 tcp, 88 udp, 53 tcp / udp, 80 tcp

routers running firewall are not compatible with the xbox 360 or the xbox one

will give open nat but does not work correctly, microsoft recommends disabling firewall

as it might not be possible to completely disable the firewall?

I think this is a mistake

option is necessary to completely disable the firewall for those who want to turn it off

What is so important on xbox that justifies disabling firewall (or just forwarding above written ports)?

Sent from Android by Tapatalk.

to host online multiplayer on xbox 360

I have 100 megs FTTH

and play online with Mikrotik never am Host

but with the router that gives me my internet provider I’m almost always the host

because the router can disable the firewall

have much experience in multiplayer on xbox live

from 2005 to xbox live game online

and I said so this works on xbox 360

the router with internal firewall to eliminate impossible not work well on xbox 360

if you work through a firewall lose priority for host in multiplayer games

You can check this in the game gears of war 2

EFADEN

I’ve got the following and still manage to get NAT Type: Strict. I’ve set up a src-address-list because I have both the XBox 360 and the One on the same network. I wonder if setting up a VLan with less strict ruleset would be better?

FILTER

 0   ;;; Allow XBOX Live
     chain=gaming action=accept protocol=udp src-address-list=game-console-addr dst-port=88

 1   ;;; Allow XBOX Live
     chain=gaming action=accept protocol=udp src-address-list=game-console-addr dst-port=500

 2   ;;; Allow XBOX Live
     chain=gaming action=accept protocol=udp src-address-list=game-console-addr dst-port=3544

 3   ;;; Allow XBOX Live
     chain=gaming action=accept protocol=udp src-address-list=game-console-addr dst-port=4500

 4   ;;; Allow XBOX Live
     chain=gaming action=accept protocol=udp src-address-list=game-console-addr dst-port=3074

 5   ;;; Allow XBOX Live
     chain=gaming action=accept protocol=tcp src-address-list=game-console-addr dst-port=3074

NAT

0   ;;; NAT
     chain=srcnat action=masquerade out-interface=ether1-gateway

 1   ;;; XBox Live
     chain=dstnat action=dst-nat to-addresses=192.168.88.232/30 to-ports=3074 protocol=udp in-interface=ether1-gateway dst-port=3074

 2   ;;; Xbox Live
     chain=dstnat action=dst-nat to-addresses=192.168.88.232/30 to-ports=3074 protocol=tcp in-interface=ether1-gateway dst-port=3074

 3   ;;; XBox Live
     chain=dstnat action=dst-nat to-addresses=192.168.88.232/30 to-ports=88 protocol=udp in-interface=ether1-gateway dst-port=88

 4   ;;; XBox Live
     chain=dstnat action=dst-nat to-addresses=192.168.88.232/30 to-ports=500 protocol=udp in-interface=ether1-gateway dst-port=500

 5   ;;; XBox Live
     chain=dstnat action=dst-nat to-addresses=192.168.88.232/30 to-ports=3544 protocol=udp in-interface=ether1-gateway dst-port=3544

 6   ;;; XBox Live
     chain=dstnat action=dst-nat to-addresses=192.168.88.232/30 to-ports=4500 protocol=udp in-interface=ether1-gateway dst-port=4500

Your trying to forward ONE incoming port to two different boxes. Thats your problem…

Understood. What would be a possible solution?

Upnp. Although I’m not sure that would work because of it requires specific ports your out of luck.

Sent from my SCH-I545 using Tapatalk