UPnP ON by default
Problem with most routers is that they have UPnP service set to ON by default.
There are no easy way to disable this on my ISP-provided-router. I already logged in through SSH and connected to my router and studied all possible commands. There's kill command but it won't kill UPnP service, I think I can enable DEBUG mode and then replace the hex code of UPnP in RAM of router but feeding it garbage hex every router bootup is a lot of work due to busy schedule. Replacing this router is not an option because of some hardcoded MAC which connects to and is being verified by ISP.