upnp (probably again...)

[Gar]

is leaving encrypted upnp enabled a good idea or should it be off if all is running ok?

 

[ColinTaylor]

I don't believe there is such a thing as "encrypted upnp" (if you're talking about IGD). Maybe you mean secure mode, which should always be enabled unless you have a specific reason not to.

 

[Gar]

My mistake, I did mean secure mode. Thanks

 

[RMerlin]

In Asuswrt (with miniupnpd), secure mode means that a client can only forward a port to itself. It prevents, for example, a compromised Internet camera from forwarding port 3389 (Remote Desktop) toward your Windows computer. Therefore it's a good idea to always leave secure mode enabled. There are no legitimate reason that I know of for a device to require forwarding a port to a different IP on your LAN.