Other times it seems impossible to get it to open.
The Xbox One S will sometimes work perfectly with an open port for an entire day. Blocked port 3074 to prevent the 2 Xbox One’s from having conflicting ports. I’ve created forwarded port range rules within upnp, 53-65535. I’ve enabled natpnp, and upnp in pfsense upnp settings. I’ve given both xbox’s unique static ip’s and static outbound ports as per the instructions on pfsense forums. I run a very neatly configured pfsense firewall behind all of this, with both Xbox’s properly whitelisted from openvpn through their Mac ID’s, going through regular Comcast internet. The second one is the new Xbox one S (white).
The first one is just the regular Xbox One original model.