I am trying to go away from firestarter off the network server.

Its got eth1 (WAN) and eth2 (LAN) and shares the connection.

I swapped over to system-config-firewall. I set up masquerade on eth1 to 2, even put in some port forwards. It all works except xbox live.

In firestarter I have got port 88 UDP and UDP 3074 and TCP 3074 forwarded to an xbox LAN IP. The xbox finds live and reports as green 100% no limitations.

I have got the same exact rule in system-config-firewall, but I get yellow and says NAT issues.

Anyone got ideas?

No one good with firewalls here. I here theres a book on this troubleshooting topic...