Does enabling UPnP makes my network more vulnerable to attacks

[ZacharyZstorm]

From the title itself, does it matter if I enable my UPnP when it comes to security against malware and virii

[AdvancedSetup]

Short answer: YES

I have mine disabled in my router.

 

Please see the following links for further information

https://en.wikipedia.org/wiki/Universal_Plug_and_Play

https://lifehacker.com/disable-upnp-on-your-wireless-router-already-1844012366

https://www.howtogeek.com/122487/htg-explains-is-upnp-a-security-risk/

 

 

[ZacharyZstorm]

Okay thank you, so port forwarding is advised?

[AdvancedSetup]

Only if you need it. A lot depends on what you have at home and how you use it.

I use a Roku streaming plugged directly into my TV that uses a wireless connection to my router and it works well for me. I don't have a game console or do other fancy connections so I don't need port forwarding.

Everyone is different so you'd need to determine that on your own.

Turn it off if it's on (normally it's off anyways) then see if all your devices work how you want or not. If they do then you're all set. If not then you might need to look at port forwarding.

 

[ZacharyZstorm]

Hello, sorry I haven't replied for a while. I would like to ask if Wifi Security questions can be asked here as well. I am concerned about my modem's security as well

[David H. Lipman]

Yes.

Some notes...

• Disable acceptance of ICMP Pings
• Change the Default Router password using a Strong Password
• Use a Strong WiFi password on WPA2 using AES encryption or Enable WPA3 if it is an option.
• Disable Remote Management
• Create separate WiFi networks for groups of devices with similar purposes to prevent an entire network of devices from being compromised if a malicious actor is able to gain unauthorized access to one device or network. Example: Keep IoT devices on one network and mobile devices on another.
• Change the network name (SSID).  Do not use your; Name, Postal address or other personal information.  Make it unique or whimsical and known to your family/group.
• Is the Router Firmware up-to-date ?  Updating the firmware mitigates exploitable vulnerabilities.
• Specifically set Firewall rules to BLOCK;   TCP and UDP ports 135 ~ 139, 445, 1234, 3389 and 5555
• Document passwords created and store them in a safe but accessible location.

 

Edited May 22, 2021 by David H. Lipman
Edited for content, clarity, spelling and grammar

[ZacharyZstorm]

Hello, I need some advice in setting up my Wifi connection.The brand and model of my Modem is Skyworth CM5100. The set up is as follows: ISP > Wireless Modem > End Devices. I have my Window's firewall enabled, but I didn't know that Modem and Routers have Firewalls too. When I snooped around, I saw that the firewall is in the low settings. I wanna ask what changes do I need to do? I have some of the options here and want to ask what should I enable or set them.
IPv4 Firewall Protection: Off/Low/Med/High

IPv6 Firewall Protection: On/Off

Filter Proxy: Enable/Disable

Filter Cookies: Enable/Disable

Block Fragmented IP Packets: Enable/Disable

Port Scan Detection: Enable/Disable

IP Flood Detection: Enable/Disable

I'm not sure if these settings will affect some of functions of my Wifi, but I play online games such as Valorant, League of Legends in garena, Teamfortress 2 and other Steam games, as well as watch streams on Netflix, Youtube and Cmovies.

Any advice is welcomed. Thank you!

In my Wifi's Low Firewall Setting, it said that No Ports are Restricted

Edited May 19, 2021 by AdvancedSetup
corrected font issue

[David H. Lipman]

Replied in;  Post ID:1457868