How to fix XBOX moderate NAT error.

How to fix XBOX moderate NAT error.

You are here:
< Back


Xbox Live requires the following ports to be open:

  • Port 88 (UDP)
  • Port 3074 (UDP and TCP)

How to resolve XBOX Moderate NAT error.

Solution (15 – 30 min)

First you need to get the IP address of your XBOX from the XBOX’s UI (how to find this).

With the XBOX IP address in hand:
  1. Assign the XBOX a persistent IP:
    • Log into your Kibosh at
    • Go to Connection, DHCP
    • Under Static IPs there is a drop-down that should have the XBOX IP listed
      • Select the XBOX IP and then ADD
      • Save Changes
    • Now the XBOX will always pull the same IP when it’s rebooted.
  2. Port forwarding
    • Staying logged into your Kibosh…
    • Go to Firewall, Port Forwarding, and create a new rule
      • NOTE: Be sure to choose ADD after creating each rule
    • Save Changes
    • Reboot XBOX
  3. Test XBOX Live Connection (from the XBOX, Settings). Does the NAT error persist?
    • No = issues solved, happy gaming!
    • Yes = go to Step 4.
  4. From the XBOX to go Settings, System, Network Settings, Wireless
    • Choose Configure Network
    • Select IP Settings, IP Address, Subnet, Gateway
    • Choose Manual
      • Set the IP address from step 1
      • Subnet Mask:
      • Gateway:
    • Go back 2x
    • Select DNS Settings
    • Choose Manual
    • Set Primary to
    • Set secondary to:
  5. Test XBOX Live Connection (from the XBOX, Settings)

Inline setup – if your Kibosh is installed inline (between two routers):

  1. Log into your routers (not the Kibosh, the router in front of the Kibosh) Admin UI, usually, or (how to find this).
  2. Find the Port Forwarding section. Sometimes prominently displayed, sometimes hidden in firewall section.
  3. You will need to forward port 3074 from the existing router to the Gatekeeper.
  4. So for example let’s say your existing router is a Linksys. Sticking with our IP scheme from steps I & II, from the Linksys ( make a new firewall port forwarding entry: xbox=port 3074 to port 3074.

Internet Security and Parental Controls.

Tales from the blog!