I had an issue where one of my computers had taken over one of IPSecs ports. It would be nice to be able to put limits on UPNP to block certain ports, etc.
RouterOS is owning a SOCKET Proxy Server and over this one it would be very
easy to use it to handle the uPNP traffic then nothing else must be done over
the NAT and Firewall way.
The proxy eats up much more CPU compared to using UPNP. I mean the 951G has enough trouble with a simple ruleset keeping up with a 75/15 cable connection, I'd bet I wouldn't see more than 30% of my download capability with a socket proxy.