Search the Community
Showing results for tags 'nat'.
-
Hi, I recently bought a TP-Link Archer C6 router. Previously I had a ISP router which was not that good. I've connected the ISP one to the new router and it is working fine. Except that the NAT Type is set to Strict. I want to how I can change that to Open. I DMZ'ed my PC from the route's "site" but still I get "You're NAT type is set to Strict" in GTAO. When I looked into to I see lots of info about Port Forwarding and stuff. I don't understand that. For my ISP router I was easily able to change the NAT type. It had a drop-down menu of some sorts but in TP-Link I'm not able to find it. Can someone please help me ? TLDR: Need help with Changing NAT type in a TP Link Router and Need info about Port Forwarding and stuff. Thank You
-
So I was running Ubuntu in virtual box. It had been awhile since I fired up this particular VM and so firefox was out of date and so was the copy of Ubuntu. I was on a website and I clicked on something accidentally that was very similar to an ad. Firefox immediately threw and error and froze, Ubuntu then threw a kernel error and Firefox then crashed Like 20 seconds passed and then it clicked in my head that everything in the VM was out of date, I just clicked on some random ad that crashed firefox in a way which could be through overloading the memory and caused kernel errors. I could literally have a kernel exploit being run. Or it could have just been a bug. Regardless due to the very systematic way things were throwing errors and crashing I killed the box after like 30 seconds. I don't think I gave it nearly enough time to do any real damage and the few accounts I had logged into on the VM all have two factor authentication. But my host PC is a different story, if it got out of the VM my life would be much more difficult. The virtualbox machine did have a NAT connection to my main PC, which was connected to the internet through a VPN. I may just be paranoid, but if it was some type of exploit how possible would it be for a sophisticated piece of malware to escape virtualbox?
-
IPv6 supposedly removes all classic NAT related problems regarding port forwarding. I already have it for quite some time, so do I still need to port forwarding/UPnP for online gaming? Or games aren't using it already because a more global implementation is needed?
- 6 replies
-
- port forwarding
- router
-
(and 3 more)
Tagged with:
-
So for last 5 days Im having having Issues connecting to xbox party chat. When I join or someone joins me it just keeps saying connecting forever. There is one person I can join if he is alone than others can join and it work then there is another one who I can join but whenever anyone else connects I start connecting forever. I actually have a weird network setup, I have 2 routers set in bridge mode and my ISP does NAT for me. He is also forwarding ports I need for xbox and I asked him recently if he did not change anything about it. My xbox says my NAT type is open, but I dont believe it, the issue feels like NAT issue. I tried factory setting for my xbox, for my routers, I updated everything. And I did pretty much every troubleshot advice I could find on internet. So anyone has an Idea what could cause it. My ISP does not know what to do. He always tells my to tell him what to do and he will do it. So i will appreciate any advice Thanks
-
I recently acquired a 5G mobile modem/router from my mobile phone provider, since my primary ISP has unreliable connectivity, wired both modems to an Ubiquiti Edgerouter-X 5, configured failover from primary to 5G, and wired that to my existing network. It works fine right now, but I wanted to know is it feasible to pair down the amount of NATing on my network? I know that mutli-NATed network *may* be susceptible to some connectivity issues when there is more than one router at play. So let me break down the different configured subnets: Primary Modem: 98.XXX.XXX.XXX/22 (modem only) 5G Modem/Router: 192.168.XXX.XXX/24 (different from below subnets) EdgeRouter-X: 192.168.100.1/24 (switch0 interface) Gryphon Router/AP: 192.168.1.1 (/24?), with device DHCP range: 192.168.1.100-249 I think this results in routes to/from the Primary modem being double NAT: Primary Modem (No NAT) -> ER-X (NAT) -> Gryphon (NAT) Is it advisable to remove the ER-X's Source NAT rule to Masquerade for the Primary Modem if my ER-X is only connected to the one Gryphon Router? Would this interfere with when a failover occurs that changes routes from Primary Modem to 5G? Then there's the routes to/from 5G modem/router that might be a triple NAT: 5G modem/router (NAT) -> ER-X (NAT) -> Gryphon (NAT) I know that there is no way to remove NAT from the 5G modem/router, but what about removing it from the ER-X? Would that work alright in a failover scenario? As for the Gryphon Router: It seems NAT is built-in and cannot be disabled. All I can configure is LAN IP, static & DHCP Ranges for devices, and configure WAN for DHCP, Static IP, or PPPoE. I know that the ideal solution would be to ditch Gryphon router+mesh alltogether, but I can't afford to replace it with an AP-only hardware, like a Ubiquiti AP. I would also like to avoid setting any additional manual IP addresses if possible, aside from switch0 interface. Lastly, is it possible for my ER-X to do traffic analysis of my Gryphon's subnet by changing ER-X or Gryphon config such as changing & broadening the ER-X's "switch0" interface's subnet, or does each router need to continue to have separate subnets? I think my ER-X config is relatively simple, but here it is sanitized below, and also my network diagram below that if you are curious what's downstream from the routers: Thanks for reading.
- 7 replies
-
- nat
- networking
-
(and 4 more)
Tagged with:
-
So I originally followed this guide: http://test-support.netcommwireless.com/faq/nf10wv-bridge-mode-setup-guide But wasn't able to get my modem working on bridge mode, so I called my ISP and they configured it as the following https://imgur.com/a/OD1VkaD Is this correct? The internet is working but Plex is still complaining about a double NAT and Port Forwarding isn't working. We are using Google Nest Wifi. Wifi point works and connects, but goes offline sometimes.
- 3 replies
-
- networking
- modem
-
(and 3 more)
Tagged with:
-
Hi, I have problem with my pptp VPN. Bellow there is my config that worked but doesen't work anymore. /ip firewall mangle add action=mark-routing chain=prerouting dst-address-list=Kancl in-interface=bridge1 new-routing-mark=Kancl passthrough=yes src-address-list=XPS /ip firewall nat add action=masquerade chain=srcnat dst-address-list=Kancl out-interface=Kancl src-address-list=XPS add action=masquerade chain=srcnat /ip route add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=Kancl pref-src="" routing-table=Kancl scope=30 suppress-hw-offload=no target-scope=10 /routing table add disabled=no fib name=Kancl /interface pptp-client add connect-to=XXX.XXX.XXX.XXX disabled=no name=Kancl user=XXXX /ip firewall address-list add address=192.168.88.254 comment=LAN list=XPS add address=192.168.88.241 comment=WIFI list=XPS add address=92.62.0.0/16 list=Kancl (public IPs) add address=100.64.0.0/10 list=Kancl (public IPs) add address=10.0.0.0/8 list=Kancl (private IPs that is why I am using the VPN) It looks like that the FW rules works based on these graphs. The router is RB5009 on v7.6 (it worked on V7 before) And yes, the VPN is conected 16:39:12 pptp,ppp,info Kancl: authenticated 16:39:12 pptp,ppp,info Kancl: connected 16:39:12 pptp,ppp,info Kancl: using encoding - MPPE128 stateless It just stopped working without any changes. I even looked in my backup from november and the config is same and it worked before and there shoudnt be problem on the end. I can connect via VPN on my PC to that and it works fine. The FW should be OK too (this is not my standart firewall, I reduced it to bare minimum): /ip firewall filter add action=fasttrack-connection chain=forward comment="Fasttrack UDP" dst-port=53 hw-offload=yes in-interface=ether1 protocol=udp add action=fasttrack-connection chain=forward comment="Fasttrack TCP" dst-port=53 hw-offload=yes in-interface=ether1 protocol=tcp add action=accept chain=input comment="accept established,related" connection-state=established,related add action=accept chain=input comment="allow ICMP" in-interface=ether1 protocol=icmp add action=accept chain=input comment="allow SSH" in-interface=bridge1 port=22 protocol=tcp add action=accept chain=input comment="allow Winbox 8291" in-interface=ether1 port=8291 protocol=tcp src-address-list=allowed_to_router add action=accept chain=input comment="CAPSMANAGER Discovery" in-interface=bridge1 port=5246,5247 protocol=udp add action=accept chain=input comment=OpnVPN-PASS dst-port=1194 in-interface=ether1 protocol=tcp add action=drop chain=input in-interface=ether1 I think that the rules are working based on those graphs but it doesent want to go through the nat. I thought that FastTrack could be the problem but removing it doesn't help. If I use the pptp client it doesn't work and I can't even access these IPs 92.62.0.0/16 (public range) and 100.64.0.0/10 even though they are public IPs (these IPs are blocked for some reason). I even tried to disable the FW and that didn't work too.
-
- networking
- pptp-vpn
-
(and 2 more)
Tagged with:
-
Hi everyone! I need to get around my CG-NAT to access 2 IP Cameras from outside my house, (before any of you ask this, no, my carrier does not offer a Public IP address, as i get my service via 4G, and i can choose between a total of 2 carriers, none of which offer public IPs). The Solution i came up with, is to rent a VPS in the cloud that i use as a PPTP VPN server (with port forwarding), and to connect an EdgeRouter (under which i connected my cameras) to it. The VPN works perfectly, even port forwarding does, i even tried connecting directly to it with my pc, and opening ports via Windows Firewall. Now to the main problem, the EdgeRouter, i managed to have it connect to the VPN server, i got an IP address, and i can even surf the web through the VPN, but i just can't get the port forwarding to work, i'm currently to the point where if i expose regular HTTP with port 8080 i can detect SYN packets through WireShark, but it's almost like the response packets can't get to destination, i'm pretty sure it's a NAT issue on the EdgeRouter side. A few details about my setup: Home (Natted) Network: 192.168.1.0/24 EdgeRouter's Network (Where the IP Cameras are): 192.168.10.0/24 VPN's Network (Server and pptpc0 interface): 192.168.50.0/24 VPN Server OS: Windows Server I attached a map of my network topology. Thank you in advance for any advice.
-
Hi everyone, I have a Proxmox virtual machine running on OpenSense firewall. The VM has some port-forwarding rules set up for specific ports, but it cannot access those ports on its own public IP address. I have checked the firewall rules on both OpenSense and the VM, and they appear to be correctly configured. Proxmox only has one NIC and is running OpenSense inside a virtual machine, below is the Proxmox configuration and port forwarding rule. I have also tried accessing the forwarded ports from outside the network, and they work perfectly fine. However, when trying to access the same ports from within the network, the connection times out. Has anyone encountered this issue before? Any ideas on what could be causing this and how to fix it? So far, I've run an NMAP scan on both the OpenSense firewall and the Proxmox VM, and everything appears to be correctly configured. However, I'm not sure what other diagnostic data I can provide to help troubleshoot this issue. Scan from an external network: Scan from inside the virtual machine on the same hostname: As you can see, the port forward works properly on other networks but when we check it in NMAP it's `filtered`. This also occurs on Linux virtual machines, while this virtual machine is running Windows Server 2019 disabling the firewall changes nothing. I'm climbing mount stupid here with the searching and forum posts, feel free to ask if you people need any more log files / information! Thank you in advance for your help!
-
- opnsense
- port-forwarding
-
(and 3 more)
Tagged with:
-
When I try to connect or set up my wifi connection on my ps4, it says NAT TYPE FAILED ( when testing the connection) . It had never happened before and I don’t know why this suddenly happened. I tried connecting my ps4 with another wifi ( hotspot of my cellular network) and it worked just fine. So apparently it is only happening with my WIFI. Please help!
-
Hello everyone, I'm a long time viewer of LTT but first time in the need of assistance of something this tricky. First let me say that Zerotier has been outstaning all around and I really just need help with taking it a step further, so this lengthy post will be mostly explaining what I did correctly and afterwards what I would like to do and maybe you can help me get it done. So I have a Zerotier network setup up and running, all firewall rules inside of it and IP addressing are working flawlessly (and I might add quite beautifully). So I took it upon myself to make my life just a little more complicated and bridge a Zerotier Virtual LAN Adapter to passthrough traffic over to a wireless router using windows as a "shared internet connection" which so far semi-works. I am using the windows PC to bridge the Zerotier adapter over to a physical 1gb LAN card that feeds the WiFi router and connected my phone for ping tests with a tunnel in Delaware. Ping times are a little high, but it does work. Here is where my life starts taking a turn for the OCD-Worst. The tunnel from the physical adapter that is sharing the VPN connection can route all ping traffic and local sharing just fine, but I cannot pass internet through the VPN adapter. This is to be expected since the "LAN" as configured by my Zerotier Management Page does not contain within it a DHCP server nor a DNS server. So now I wonder... What would I have to do, so that when an adapter from within the Zerotier LAN is shared, will also have access to the internet? I have read this documentation that I am linking to from the Zerotier helpdesk, but I cannot for the life of me understand whether the server config they are reference is pointing to a physical server being a solution or a VM with a bridged adapter inside the network. The term transparent passthrough is one I find myself thinking I might have not understood in its entirety. Is it possible for someone to dumb this down for me a little or try to recreate my settings to see if maybe I am just doing something wrong? I know this question is a little tricky, because in a normal situation, the computer where the adapter is installed has to have internet on it in the first place! But this is not the case when I bridge the connection over to a seperate "independant network" being served exclusively by the Virtual LAN Adapter. In any case, thank you for your time if you got this far into the post, and I hope I have made it clear what my intentions and problems are. GO LMG!
-
- networking
- nat
-
(and 1 more)
Tagged with:
-
So i have been playing Forza Horizon 4 for over a year but its always has the same issue,sudden Disconnect,Cannot see other players but in map appears but i managed to fixed thr "Low Streaming bandwith" issue and now it keeps getting worse i am unable to find a fixed for it i need help i already tried port forwarding it,i already set teredo in GPEDIT.MSC and i try press fix it on XBOX networking live setting in settings i have tried everything,i tested the speed of my wifi.i tried reset ipconfig /flushdns and netsh winsock reset and then reseting the network from network settings it worked i can see other players and join race like the game never broken,and then after a few minutes it broken again i keep doing this for over five times its like the network settings roll back to the broken settings and i dont know what made it broken,this only hapened in forza my other games worked fine
- 2 replies
-
- networking
- teredo
-
(and 1 more)
Tagged with:
-
It seems like every time I try to play a game online my NAT type changes. I would like to know if it's safe to keep NAT type open on my router (a Netgear R7000).
-
Hi, recently I bought a game and it takes a lot of time for me to join someone, when it should actually be almost instant. It says with red that the NAT type is strict and it should be green in order to have everything working fine. I've contacted game's support page and They said to flush dns, restart router, open ports, turn off windows firewall, none of which worked. I don't know what to do, every other game works fine. My router is connected to another router, but I don't think that would matter.
-
Hello, I am using a WatchGuard x500 as a pfSense router. I have that device behind a ATT NVG599 I think it's called. I want to get an Open or Moderate Nat for games and other ports. When I try to port forward both, nothing changes. I have tried disabling all outbound NAT rules and when I do that some internet services stop working. I have heard of bridge mode on the ATT combo unit but DirecTV is plugged into the ATT and I don't want to run another cable back to my switches. Thanks, Matthew
- 1 reply
-
- nat
- networking
-
(and 1 more)
Tagged with:
-
This is a big problem and the explanation is going to be relatively big so strap yourselves in. Also its a bit of a story as well. I recently got a 100 Mbps up and 100 Mbps dedicated FTTH line from a local ISP for $15 . I have switched between over 5-10 ISP's in India. India is a country with a lot of people and extremely limited IPV4 allocation. ~ 35 million IP addresses for 1.2 billion people. As of Match of 2017, the amount of people with internet access soared to 420 million users, a quarter of it due to a revolutionary company called Reliance Jio, with 4G only, VoLTE calling, fully IPV6 ready networks. Unlike Mobile Network operators who flock to ipv6 due to heavy shortage, ISP's have clutched the egregious abomination CG-NAT aka Double NAT. As I mentioned earlier nearly all of the ISP's have so little IPV4 addresses that they universally adopted CG-NAT. Older ISP's who have enough IPV4 addresses either use Dynamic IP (which for me is fine) or still give out static as a standard. However by literal definition older ISP's are not providing FTTH instead still relying on DSL connections or false branding Vectorization DSL as V-Fiber. As all ISP's do, my ISP also has a paid Static IP service. However that is only available in a business plan. And the Business plans have Data Caps of about 250 GB for a 100 Mbps connection at a higher price. And the static IP charges alone per year is almost half as much as the yearly service bill. I just cant bear to live with a 250 GB data cap beyond which my internet goes back to stone age 512 kbps, a increased bill of almost 75% extra just for the "pleasure" of having static IP. My ISP is relatively small and although I would consider myself a noob in networking, those guys are even more so. I begged them to enable the support for IPV6. However they haven't bought any due to the fears that some of the equipment in people's home wont support it, it does not add value to the sales pitch, and they have to shell out for ipv4 NAT anyway. They pretty much said to me I am the only guy asking for this and its just absurd. I run a Plex Server in my Home. Since I am stuck behind CG NAT for the past year or two, Its useless other than for local streaming. At least during the time of ridiculous mobile network speeds I could have convinced myself to scrap the Plex idea. However I pay $7 Flat fee prepaid per month for 2 GB per Day 4G LTE only network ( with 90% network coverage all over India including rural areas with 100% coverage expected by next year). And I use 0% of it because I am behind a damn CGNAT and bored whenever I leave my house. I have already tried running a VPN as a default to Pure VPN's dedicated IP service and reverse SSH tunneling to my Network. It is super slow and slows down pretty much everything. Here is the scenario : 1) All expected client devices for the Plex Server support IPV6. 2) The server does not have access to an IPV6 address because the ISP does not support it. 3) I get a private IP address from my ISP and am not able to reach my network behind a NAT. 4) My ISP will offer little to no help whatsoever Question : What is the best fastest solution to expose my Home Network to the Internet ? If a solution that I have mentioned as already tried sounds the best to you and/or have a similar but faster approach please let me know. Thank you guys in advance
-
Hi all! I have searched on the internet for a long time, but I still don't understand it: how does a virus in a virtual machine spread through NAT? Example: I have an 3 year old laptop on which I only use virtualbox to test viruses (for fun). The laptop is connected(wifi) to a router which on his turn connects to 3 other computers. The shared folder is set to read only and the virtual windows 10 get's it's internet connection from NAT. To the point: Is possible that a virus like wannacry escapes from the virtual windows 10, goes on the network and infects the other 3 computers? If that's possible, how the hell then? I thought NAT was a virtual connection. I hope you guys can help me. I apologize for my terrible English.
- 7 replies
-
- nat
- virtualbox
-
(and 1 more)
Tagged with:
-
I recently build my own PC as my old one died on me (a prebuild PC). I started to download and installed games like GTA V, Ghost Recon WIldlands, Battlefield 3, etc. I first started play GTA V and wanted to try to go online but it shows me message and disconnected me to the online session. I tried to play Ghost Recon Wildlands and try to login to Uplay but I can't seem to login. I check both of the server and it is up and running. I tried many troubleshoot like puting my NAT type to open and aquire DMZ host and even port forwarding but still I can't play these kind of games and I'm running out of ideas. The only online games I can play is PAYDAY 2 and Playerunknown battleground.
-
my router died and im using a shitty 2006 airport from the thrift store in the mean time but it keeps locking up and i have to unplug it and plug it back in (multiple times a day) as far as I can tell dhcp is whats locking up anyway I want to use linux to do a router instead of buying a router but I dont want to use pfsense because of its shitty wireless support. I think im going to put debian on it. I want to buy this barebones pc and put the max ram in it. I have chosen it because it is the cheepest barebones i can find that has dual nic's and wireless and doesent need too much else to get running https://www.newegg.com/Product/Product.aspx?item=N82E16883218075 I want to get that and get ram from the electronics thrift store called grey bears in my area. http://www.greybears.org/thrift-store/computer-store/ so my software setup would need to be... eth0 WAN eth1 LAN (to switch) WL0 LAN (broadcast network for wireless devices to join) how hard would this be to do? does anyone have any advice? does that boneless have any fatal flaws i should know about? im probably going to use it as a database and MQTT/node-red server as well if that is possible ontop of its routing
-
Wondering if anyone can help. ive had many issues with my network on my xbox, and after talking to Microsoft and my internet service provider (rogers) and trying to port forward to my xbox, and failing (rogers wont do it, and they wont help) microsoft recommends i try to fix my nat status on my xbox from strict to open, and after trying abunch of things nothing is working. i was thinking, i only use the rogers modem/router they provided they said it was the best thing to do. if i get a router do you think that would fix any issues?
-
Hi all, While I like to think I am good with technology and computing, I do admit my one downfall is networking. I know enough, and probably more than most of the general population (Thank you, LMG). Having messed around with settings, I've decided to see what more knowledgeable people think of my situation. So, I currently live in a Student Studio flat, with no thoughts of leaving until I graduate. Each flat has it's own Ethernet connection of which students must buy their own router and connect it to the Ethernet port, should they want to use the internet that is included with the rent. I've now lived here for over a year and had plenty of time to experiment with settings to try and improve the internet. The internet speed is absolutely fine and excluding the daily 5 minutes of downtime that appears to occur, connecting to the internet is no problem. The issue I have could be considered a 'first world problem'. The way in which the network is set-up does have it's problems. For example, some multiplayer games will have problems during game-play with packet loss and latency variation, spiking from anywhere around 20ms up to 140ms (Sometimes WAY higher), back down to 20ms is a matter of a couple seconds. Rocket League is the main offender for this. All other internet browsing and even streaming video seems to be fine (Though, Twitch can have buffering issues occasionally). Further, my Xbox provides detailed connection information and informs me that the connect is a Double NAT. From my understanding, this occurs when a router is connected to another router. Obviously, there isn't very much I can do about this. One solution that fixed most of these issues was using my router as an access point. This reduced the number of connection errors I had during multiplayer games, Twitch no longer buffered as much as before and my xbox no longer report a double-NAT. I thought I had out-smarted the student block! However, I have concerns that perhaps this solution is a dangerous one from a security standpoint. My devices still require a password to connect, but once connected to my router (now access point), were now connected directly to the central router of the student block. I left this for a couple weeks, but today noticed that my Spotify Connect showed a PS4, not something that I own, never mind signed into. This, at first, made me wonder if someone had somehow connected to my router. I checked my control panel, no PS4 or unknown devices connected. Still concerned, I downloaded a network watcher, and as some of you were probably expecting, it came back with a list of ALL of the routers connected in the building, plus my devices and the PS4, of which the owner probably had the same problems as me with Double-NATs and ping. I have now gone back to using the router as a router, now my network watcher just shows MY devices and router. Sadly, this does mean that my Xbox will now remind me of my Double-NAT connection, Rocket League will time me out from matchmaking for disconnecting during a game and Twitch will buffer as it did. Does anyone have any solutions to this? I assume I should keep away from using my router as an access point? Shall I just suck it up, get over it and stop making such a fuss over having an internet connection that is probably more stable than half of the worlds? Many thanks in advance!
- 4 replies
-
- networking
- double nat
-
(and 4 more)
Tagged with:
-
Carrier-grade NAT Discussion https://en.wikipedia.org/wiki/Carrier-grade_NAT Was in a reddit discussion for the last couple of days and couldn't figure out why this guy couldn't access his game server remotely. Then someone replied with "Carrier-grade NAT" Never heard of this process until today and a quick read of the WIKI and this has made me angry! Granted there's the whole "boo hoo hoo the worlds running out of IPv4 addresses" but ISP's employing this kind of evil voodoo on their customers COME ON!! Venting aside though, what are the alternatives for ISPs? For users who are strangled with this nonsense via their ISP is their any workarounds? Let the discussions begin ?
- 7 replies
-
- nat
- carrier-grade
-
(and 2 more)
Tagged with:
-
Hello This may be an odd question but my brain somehow cannot wrap around how it's done. Okay so let me explain. Currently, my ISP has assigned me a public static IP address. I run a few home servers that I make publicly accessible via port forwarding the servers LAN IP over to the WAN IP. That said, I want to ask my ISP to give me three more public IP addresses or a block of public IPs. And when I have these said IP addresses, I want to assign them each directly to my home servers. Now, here's where the problem comes in. Say they do lease me two extra IPs, how on earth would I distribute those IPs directly to my servers? I assume I need a router for that obviously, but how will it be set up in the router, generally speaking, no specific router in question. Would the router need to be compatible for something like this? If yes, what capabilities should the router have? I basically need the full scope on how I would directly connect one of my servers to these public IP addresses once provided to me, please?
- 16 replies
-
Router: Asus RT-AC66u ISP: Comcast I have been struggling to make my NAT type open. I achieved this a few weeks ago, but since then, it reverted back to strict. Additionally as of now, I was able to make it moderate. Steps I have take so far are listed below: Assigned Static IP to desktop Port Forward 3074 both, 88, udp, 53 both, 80 tcp, 500 udp, 3544 udp, 4500 udp, and 52907 udp (will explain this port later) Ensured Teredo is enabled Reset Teredo Manually assigned port to Teredo ie the 52907 from above Disabled SIG ALG Ensured UPnP is enabled I am now stuck. I have done everything but create a DMZ - something I do not really want to do. Any suggestions?