I thought my router’s firewall blocked everything inbound, but UPnP had opened ports I never asked for
Your firewall is only as strong as UPnP lets it be, and mine had holes I never approved of
Read the full story on XDA Developers.