Firewall Ports needed for Xbox Live (360 & X1)

[RaTix]

These are the ports needed to be forwarded for Xbox 360 and Xbox One.

http://support.microsoft.com/kb/908874

Here is the ports and link to the full Microsoft article on port settings for the Xbox 360

The following ports must be available for Xbox Live to operate correctly:

Port 88 (UDP)
Port 3074 (UDP and TCP)
Port 53 (UDP and TCP)
Port 80 (TCP)

https://support.xbox.com/en-US/xbox-one/networking/network-ports-used-xbox-live

If you have a firewall or network hardware, such as a router, you might need to make a configuration change in order for your Xbox One console to communicate with Xbox Live. This configuration change is sometimes called “opening ports” or "port forwarding."

Xbox Live requires the following ports to be open:

Port 88 (UDP)
Port 3074 (UDP and TCP)
Port 53 (UDP and TCP)
Port 80 (TCP)
Port 500 (UDP)
UDP Port 3544 (UDP)
UDP Port 4500 (UDP)

For Multiple Xbox's on same Network (2 Xbox 360's or 360 + X1)
This is the solution that worked for me, but it may depend on your router's capabilities. Use this link to see the specifics that have been tested for your router,

http://forums.xbox.com/xbox_forums/xbox_support/networking-hardware/02-routers/default.aspx

Here are the steps for UPnP setup for multiple Xbox's on same Network. Taken from the Xbox website.

Turn on UPnP to refresh your NAT table

UPnP is a standard that helps routers communicate effectively. If your router or gateway supports UPnP, it is likely enabled by default.

In some scenarios, you may be able to resolve connectivity issues by refreshing the Network Address Translation (NAT) table. To refresh the NAT table on a router where UPnP is already enabled, you need to disable UPnP, save your changes, and then power cycle your router. After that, you will need to turn UPnP back on and save your changes.

Important Do not use a combination of port forwarding, UPnP, and perimeter network (also known as DMZ) settings. If you previously enabled perimeter network functionality on your router, you must disable the perimeter network before you try this procedure.

Follow these steps to turn UPnP off and on:

1. Log in to your router's web-based configuration page to and make sure UPnP is turned on.

Note Refer to your router's documentation or support website for help turning UPnP on for the first time, or off and then back on.

Note Make sure that the router is restarted each time you update any of the router settings. If the router does not restart automatically, manually restart the router.

2. Turn the UPnP setting off, and then save your changes.
3. Restart your console and all your network hardware (your modem and router).
4. Log in to your router's web-based configuration page to and make sure UPnP is turned off.
5. Turn the UPnP setting back on, and then save your changes again.
6. Restart your console and all network hardware (your modem and router).

We have collected information about how to adjust the settings on a variety of routers. Visit our Networking Hardware Information forums to learn how to configure and update your specific network hardware. If we do not have content on your specific router, please consult your router documentation.

Note Clicking this link opens a second browser window so that you won’t lose your place while you’re looking for information about how to configure your network hardware.

Once you have reset your router, check your NAT information again to see if this resolved your issue:

1. From the Network settings screen, select Test multiplayer connection.
2. After the test is complete, you will need to pull and hold both triggers and both bumpers on your controller. This will display a Detailed network statistics screen.
3. In the second column of the Detailed network statistics screen you will see a field called Detailed NAT information. At first, you will see (…) displayed in this field while your NAT type is being retested. Once you see NAT information displayed in this field, the test is complete.
4. Press the B button on your controller to return to the Test multiplayer connection results.
5. Select Continue to return to the Network settings screen and check your NAT type.

NAT Troubleshooting Guide
Use this to troubleshoot Strict and moderate NAT on Xbox 360 and X1.

http://support.xbox.com/en-US/xbox-one/networking/nat-error-solution

[RaTix]

Everyone on the 360 needs to double check that these ports are setup. Last night Regent, Reaver, Devils, and Comp all still needed to have these setup just to get in the Section 8 servers.

If you need a guide on how to do it with your model router, go to www.portforward.com. Select your router, and then choose "Xbox Live 360". The only ports you need are the ones listed above.

[Reaver]

Ratix I think you solved the mystery of my lag as well.. Because I was on COD4 early this morning and went to a public match of 16 people, and I was hosting with no problems..

[captnjeter]

Reaver solved his lag? Someone get Al Michaels to give us a MIRACLES! call.

[LordCompulon]

I think that I saw a pig up in the sky! LOL

The setting I had on my router that was disrupting my DSA Section 8 server access was that I had inbound port 3074 directed to a specific internal IP for Passive FTP connections. This setting has been in place for years. I have been able to play COD4, UT3, and GOW2 with XBOX live with no apparent problems until yesterday. Only after I turned that forwarding off yesterday was I able to connect to the Section 8 DSA server. So I think that whether these ports are used in which directions depends on what you are actually doing as well.

[RaTix]

You may not notice any problems at all, but fact is it can cause problems for other people. If one person in a game doesn't have the ports open, it can cause others from joining, mic issues, invites not being sent, and party issues.

I know Jeter had some issues with a GB match being disputed because the other team said they were unable to get in touch with him. It is very possible they tried but were not able to because of his port settings. That's why it's extremely important that all DSA set these ports up.

[captnjeter]

No, that was some dicks being dicks because they were not on the bloody game when they should have been and apparently our video of them showing on Skate 2 wasn't good enough. Fucking Gamebattles. But I will admit that my NAT settings need to be fixed... maybe then I can connect to Regent when he's connected to his router.

[LvDevilsFan]

all i can say is ratix did what he did on my router and now it seems to run ALOT quicker and cleaner now.. thank You oh great Emperor!

[Cottoinc]

Here is another little trick that helps with match making connectivity issues. It has helped with a bit of lag issues I was having and it has helped Solo from dropping out of COD games. This is just one section of a long and informative post on networking your xbox.

Quote from MW3 forum: OPTIMIZING YOUR CONNECTION ON THE XBOX - THE ELAGAPHANT STRIKES BACK (UPDATED 3RD FEB 2012)

Changing the dns settings on your xbox
First off credit to this goes to ISilentKiller4I for this idea as he was the one who bought it up originally on the blackops forum.
I'll post a simple then a more complex version and also finally explain what it does,

Simple version.
1) Turn on your xbox and via the dashboard open up the system settings tab and scroll down and click onto Network settings
2) Select the connection you use and then press configure network
3) You should now have a screen that is tabbed basic settings with the dns setting at the bottom, scroll down to the dns settings and press A
4) Chose "manual" and the screen will now show two options primary and secondary dns servers
5) Highlight primary , press a and enter this EXACTLY 8.8.8.8 (then press start button to confirm)
6) Highlight secondary, press A and enter this exactly 8.8.4.4 (then press start button to confirm)
7) reboot xbox and away you go.
8.8.8.8 and 8.8.4.4 are googles public dns servers they are usually some of the fastest hence used for the simple method

Complex version that might give better results
1) Goto Here and download namebench for your operating system (mac or windows) its a small program only 5mb odd
2) Run the program and you should see it has entered your details ie, location, browsr ect (make sure these are correct if not change then in the drop down menus Make sure that Include best available regional dns servicesis checked, then hit Start, it takes about 3-5 mins to run the entire program so sit back twiddle thumbs till it finishes.
3) Once it has finished it should give you a list of the fastest dns servers in your area , with the highest showing a percentage increase on speed in the top left hand box, dont worry about any warning messages you get to do with hijacked domains in the list ect as we arent changing your browser dns only the xbox.
4) Top right hand box will show the primary and secondary dns sever ip addresses for the fastest dns server it found.
5) Turn on your xbox and via the dashboard open up the system settings tab and scroll down and click onto Network settings
6) Select the connection you use and then press configure network
7) You should now have a screen that is tabbed basic settings with the dns setting at the bottom, scroll down to the dns settings and press A
8 ) Chose "manual" and the screen will now show two options primary and secondary dns servers
9) Highlight primary , press a and enter EXACTLY the ip address for primary shown in namebench in the top right hand box (then press start button to confirm)
10) Highlight secondary, press A and enter EXACTLY the ip address for secondary shown in namebench in the top right hand box (then press start button to confirm)
11) reboot xbox and away you go.


For either version if you want to swap back to your original settings for whatever reason
1) Open up the system settings tab and scroll down and click onto Network settings
2) Select the connection you use and then press configure network
3) You should now have a screen that is tabbed basic settings with the dns setting at the bottom, scroll down to the dns settings and press A
4) Chose "Automatic" reboot the xbox

[RaTix]

Last week I noticed some issues when playing and decided to run a network test on the 360. To my surprise I found that I was now getting a NAT error. Nothing had changed on my network so it made no sense. Last night I got dropped mid match from BF3 and decided to run another test and try to lock down the problem.

Apparently MS has decided to change and add additional required ports to be forwarded now to get open NAT.

Ports 53 UPD/TCP and port 80.

Why it requires the HTTP port, I have no idea. This kind of screws with my web server now having to have to set this. I might try to remove and only use the 53 and see if it works.

I suggest everyone run a Network and Live test on the 360 to make sure your NAT is still open. If not, make the appropriate changes.

The First post has been updated with the new port requirements.

[RegentOne]

The HTTP requirement is for their new IE interface on the XBOX that was released a month or so ago.

[RaTix]

Ok, but you never have to add port forwarding to all computers on a network just so they can use a web browser. Only if hosting a web server.
I removed the port 80 forwarding on my router and will test later. I have a feeling it only needs the DNS port (53) to work. And I only have it set as UDP.

[Zabka]

I have had no problems.

[RaTix]

After just having to help Inlimbo and Moser with their X1's Strict NAT, I figured I'd update the OP and bump this for everyone else to remember to change their Port Forwarding for the X1. There are extra ports needed for the X1.

[RaTix]

OP edited with information on setting up multiple Xbox's on the same network with OPEN NAT. Or at least what worked for me. Links to the Xbox NAT troubleshooting guide and router info forums also added.