How To: Setup XBOX Live

[nixfu]

There are a few steps required to get XBOX Live working when your using Zentyal 2.2 + Transparent Proxy.  The steps are to forward the correct ports from the internet to the xbox, and to let the xbox bypass the transparent http proxy.  Here they are in detail.

• Setup the XBOX with a static IP Address so you can reference it in the other steps
• Setup the required Port Forward entries.. Go to Firewall->Port Forwarding and add these entries
  
  wan-eth1   Zentyal   TCP/UDP   port3074   AnySource   192.168.0.xboxip    PortSame    description
  wan-eth1   Zentyal   UDP           port88   AnySource   192.168.0.xboxip    PortSame    description
  
• You will have to add a bypass of the transparent proxy for the XBOX because it does not seem to like http proxies like squid/dansguardian very much.
  
  This is accomplished by editing the script file /etc/zentyal/hooks/firewall.postservice which gets run after each firewall startup and allows you to add a custom rule that you can't add via the web interface.  Add a custom iptables rule to the file like this:
  

  then
      #add custom rules here
      iptables -t nat -I PREROUTING  -i internal-eth0 -p tcp -m tcp --dport 80 -s 192.168.0.xboxip/32 -j ACCEPT
  fi
  

  Also make the file executable... chmod a+rx firewall.postservice.
  
  

After that you should be able to use all the features of XBOX live such as ESPN3, games, Netflix etc without any errors or problems.

[Escorpiom]

Nice info! I was just in the middle of getting a Xbox online 

Question is (most of all for the dev team) the port number 88 is used for Kerberos, and Zentyal 3.0 will probably include Kerberos.
Will we get into trouble if port 88 is forwarded to the Xbox device?

Another question, port 80 is for the web server. If we add the postservice hook, will we run into problems with the webserver running on the Zentyal box?

Cheers.
 

[nixfu]

Port 88 is for kerberos which XBOX Live uses for authentication.

The port 80 iptables/firewall rule is not for inbound but for OUTPUT web..  It allows the xbox to bypass the proxy/webcache and use the web directly.