Spring RTS Engine

After the new update of spring about a month back, ive been unable to host spring games. No NAT, Fixed source, or UDP hole punching, everyone times out. I started watching my firewall messages, and noticed it was blocking several hundred attemps from IPs to port 55,000-something, 10000-something, and 7000-something. These IPs were all coming from the two people trying to join my spring game.

My router is using network address translation, and due to some of the computers and services im running, just opening up all ports isnt an option.

354829 rule 60/0(match): block in on tl1: (tos 0x0, ttl 109, id 10152, offset 0, flags [none], proto: UDP (17), length: 40) <client 2>.3711 > <my wan IP>.8452: UDP, length 12

327380 rule 60/0(match): block in on tl1: (tos 0x0, ttl 103, id 62447, offset 0, flags [none], proto: UDP (17), length: 40) <client 1>.10156 > <my wan IP>.8452: UDP, length 12

<repeat these two a few hundred times>

Ive changed the rules to allow any source port, to my WAN IP with a destination of 8425. Even with this, it still seems to be blocking it. Im not quite sure why the TA Spring clients are trying to connect with such a wide range of ports, but since my router is not a peice of crap linksys, it blocks it like I told it to.

Anyone have any suggestions?

Seems to be randomly working now...I'm not entirely sure why we were trying to connect to him on random high ports, when he had it set to fixed >_>

well, its obviously not working now... Im looking at the last 500 firewall log messages, they were all to the taspring port.... and not suprising, everyone is trying to connect to every other port known in the universe.

Within about 10 seconds or so of my log, here are some of the seemingly random ports the spring clients are attempting to connect to. The destination ports are fine, but its trying to connect with the wrong source ports. port 60871, port 15529, port 3851, port 23507, port 62197, port 1026, port 1027, port 8300, port 50657, port 11026... just to name a few.

That's probably because spring doesn't care what source port it gets, it lets the OS (windows) assign them.