Firewall/NAT

Hello, I have searched and was unable to find any way to DMZ more than one Xbox to be used on XBox live through M0n0Wall. I followed these instructions:
1. Create a reservation in my DHCP server for my Xbox 360 so that it always gets the same IP address. You could also set a static IP on the Xbox if that is your preference.

2. In m0n0wall, check the box “Enable advanced outbound NAT” on the Outbound NAT configuration tab.

3. Setup a mapping for your local LAN subnet. Interface should be WAN, source should be your subnet address (for example, my subnet is 192.168.12.0/24), target should be left blank and leave “Disable port mapping” unchecked.

4. Setup a mapping for your Xbox 360. Interface should be WAN, source should be the IP address assigned to the Xbox in Step 1 with a 32 bit mask (for example, 192.168.12.100/32), target should be left blank and this time check the box for “Disable port mapping”.

5. Save and apply these changes.

6. Configure Inbound NAT and create a mapping for TCP/UDP 3074. Interface should be WAN, External address should be Interface address, Protocol should be TCP/UDP, External port range should be 3074 to 3074, NAT IP should be the IP address of the Xbox assigned in Step 1, Local port should be 3074. Check the box to “Auto-add a firewall rule to permit traffic through this NAT rule.”

7. Save and apply these changes.

8. Reset the NAT and Firewall state.

Now when you run the Xbox live test, it should come back as “Open”.

NOTE: The above steps were based on the 1.3 version of m0n0wall. I haven’t used any of the previous versions, so the steps may vary from version to version.

But can not do it for another host on the network on the same port. Is there a way around this or to specify multiple IPs for one port?
I do have another router connected to the M0n0wall just for the purpose of wireless and adding 4 addition ports. I thought about DMZing that routers IP and then connecting both XBoxs to it which at that point would give the wireless router FireWall control over both boxes, but I think that might put me in the same situation. Any ideas?

If you have only one public IP address (WAN), then you can forward one unique WAN port to one unique private LAN address.

The only workarounds would be having more than one public WAN IP address or being able to change the port an additional XBOX listens on.

Unfortunately, the way Microsoft designed the Xbox, the only way to have multiple Xbox's behind a single IP is to use UPnP - which m0n0wall doesn't support.  The best you'll be able to get using m0n0wall is one Xbox on Open, and the rest on 'moderate' (I think).

I was afraid of that, I know that it can be done w/ a Cisco router/switch but thats over $300 for a switch and I have my network working the way I want it except for the XBox garbage...

I was thinking about obtaining another IP from my ISP might be the cheaper route

But I might have a line on an older Cisco switch so I will look into that as well

if you're not familiar with pfSense, you might want to check it out.  it's a fork of m0n0wall and supports UPnP.

Roy...

I looked around the pfsense forums about this. The consensus seems to be that UPnP will ease running XBOX, it will not do anything to allow multiple XBOX behind only one public IP address. I'd like to be wrong about this, but I couldn't find anything there that says otherwise. Maybe it's there and I missed it?

This post seems to give the best instructions: http://forum.pfsense.org/index.php?topic=13730.msg73340#msg73340

There were a few issues using this setup, but in the end it started working.