>>/958/
others are correct on UPnP
wifi is insecure, use cables as much as possible
NAT should be enabled, but it isn't as important as making sure your router isn't compromised. There is FOSS router software available for maximum security, have a gander and lurk.