Just received my flint 3 today but cannot seem to enable upnpd
root@GL-BE9300:~# opkg install luci-app-upnp
Unknown package 'luci-app-upnp'.
Collected errors:
I wouldn't say it's not recommended anymore, most people who say it's unsecure are just using default allow all rules, within Luci we can allow / deny clients to request which ports to open / close.
UPNP is something that is needed for gaming these days. Trying to manually open and close ports it's just too time consuming and for the everyday household UPNP is probably fine. Inside luci you can actually only allow certain clients to request ports to open and deny all others which means the security is hardened and personally I think it's more than enough and out ways the risk to ease of use.
I was testing a product from glinet and I recommend that UPNP should be install as default but possibly disabled, let people have the choice to enable if needed.
The problem with not having UPNP installed or active is that people may be unaware that they are getting a Closed or Moderate NAT when gaming without it ON. Yes I know you can open and close ports as I've already said but UPNP does it automatically and with the allow / deny all list you are probably fine.
I actually install UPNP and use it for my two consoles...
Here is a thread when I helped someone setup their UPNP, just modify to your requirements and it should be pretty secure.
Bruce, good day! There are lots of compiler issues on the Flint 3 (remember NGINX from Beta testing). Firmware is really a problem that needs to be solved for GL.iNet. Asus, as a well-known example, supports community builds with Merlin. This improves quality, engages advanced users and adds functionality. I think GL.iNet needs something like that.