[RT-AC88U] NAT Passthrough Panel

[AntonK]

Hi,

Is it best router security practice to 'disable' every one of these settings if none of them are being used?

Thanks,
Anton

 

[roguetr]

I wouldn't say it's best practice, rather maybe configuration streamlining. Really, these are just additional features of the NAT implementation. What you allow and don't allow via NAT can be controlled in other ways.

Disabling each one may reduce the kernel footprint a little, assuming it prevents the relevant modules from loading. It's always possible any module loaded could increase the chance of a local vulnerability as well, in a multiuser environment.

If you see a performance improvement by disabling them and you definitely don't need them then I'd say go for it. For the most part though, having to re-enable these options when you do need them is going to be a pita.



Sent from my MI 5 using Tapatalk

 

[RMerlin]

In Asus's stock firmware case, disabling also means they add a series of firewall rules to explicitely drop traffic on the associated ports, which can lead to hard-to-track issues down the road (for instance, blocking IPSEC will prevent some VoIP services from working properly).

 

[JDB]

In Asus's stock firmware case, disabling also means they add a series of firewall rules to explicitely drop traffic on the associated ports, which can lead to hard-to-track issues down the road (for instance, blocking IPSEC will prevent some VoIP services from working properly).

I experienced exactly this and it confused the **** out of me for ages!!


Sent from my iPhone using Tapatalk

 

[AntonK]

Thanks for the info!