>>958
others are correct on UPnP

wifi is insecure, use cables as much as possible

NAT should be enabled, but it isn't as important as making sure your router isn't compromised. There is FOSS router software available for maximum security, have a gander and lurk.