Overview:
If you are running PfSense and trying to play Call of Duty: Black Ops Cold War on PC or console, but still see strict NAT with UPnP turned on this is where you will find the solution.
Static IP Setup:
The first thing you will need to do is set a static IP for your PC (Or console). There are various other guides that will walk you through how to create a static IP or static DHCP reservation. Once you have a static IP you can start creating the rules in PfSense.
NAT Outbound Rules:
Now that you have a static IP you can create a new outbound rule. In PfSense, go to Firewall -> NAT -> Outbound. The Outbound page is a tab at the top.
On this outbound page, make sure “Hybrid Outbound NAT” is selected. Next, create a new rule with the up arrow, this will add the rule to the top. This is important because the firewall will catch rules based on the order.
With this new rule, you will need to specify your source IP (PC or console), for this you will select “network” as the type and your static IP with a subnet mask of /32. Leave the protocol set to any. In the “Translation” section select the “Static Port” checkbox and leave the port or range blank. At the bottom give this rule a description. Then click save. After the rule is saved click “Apply Changes”
By default, PfSense will rewrite the source port, which will not work for Cold War. This rule tells PfSense not to rewrite source ports for this machine. Read more about static port HERE.
Port Forwarding:
Now that the static port rule has been enabled you should see your NAT type is now moderate. If you open Cold War again and see it is open, or you are fine with moderate, you can skip this section.
Ports differ between PC and consoles so I will link the port list from Activision HERE and the image for Cold War below.
The first thing you need to do is go to Firewall -> NAT -> Port Forwarding. Then create a few rules. The first one I will create is the TCP/3074 rule. Click the add up or down button and enter the following, leaving “filter rule association” as the default. Click save, then apply changes.
*Note: the “Redirect target IP” field is your static IP for your PC or console.
Next is the TCP/27014-27050 rule, enter the following, and leave “filter rule association” as the default. Click save, then apply changes.
Last is the UDP/3074-3079 rule, enter the following, and leave “filter rule association” as the default. Click save, then apply changes.
Done!
You should now have 3 rules (For PC), as seen below and your NAT type should now be Open.
Comments are closed