UPNP/Port Forwarding

[Smokie]

I have a couple of questions regarding the above if someone can enlighten me...

As previously discussed here or another forum, My security scan indicates that UPNP is enabled and I should disable it, However if I do and enable port forwarding then that gets highlighted as a security risk. What is the best practice when it come to this? Is UPNP not just the new port forwarding? the router opens and closes ports as required? I do a lot of torrent downloading on computers and on my NAS, These clients work better with the ports open but is this a security risk with either of the above?

Thanks

 

[ColinTaylor]

There is no "best practice" for this because it depends on the individual circumstances (technical as well as human).

Personally I would never enable UPnP in a business/office environment, but for a typical home setup I do. Merlin's firmware doesn't expose UPnP to the internet and IIRC has UPnP "secure mode". That somewhat limits the potential for malicious exploitation and I prefer to have ports opened and then closed when needed rather than the alternative of having ports permanently open. YMMV

 

[Smokie]

Was thinking open and closed is better. It' merlin firmware I'm on so that's a good thing I guess. What about android boxes for streaming. I'm guessing they request ports to be open? Anyone have security issues with them or best practise when it comes to them.

Cheers for the prompt reply.