Bob you can go to
https://www.grc.com/x/ne.dll?bh0bkyd2Do a full port scan
I once had a linksys router many years ago and it had a few open ports so returned it.
If i remember a bt one had two or so open ports,
You will have a firewall on your PC's and can get norton and so on
For Android you can use no root firewall, that uses part of the vpn so you cant use that and a vpn at the same time.
But you should get a none isp router in most cases if you can
Dont worry about setup as the newer ones ask what isp you have and they set up then its just your username and password from your isp
I had a isp router and PCs started turning on in the night, and lets just say they weren't just ticking over, the hdds and cpu cores were very high, plus the network meter showed a lot of traffic.
I have a video and screens of this but i cant get to them at the moment.
The log showed a tr69 comand sent every time they turned on
Binning the isp router for a kits review one stopped this right away.
A wiki page and other sites said the tr69 database is used by your isp and the spooks
but as of late its been edited and references to the missuse by the spooks seems to have been removed
Though if i remember right its in the book GCHQ taking back the internet (i think thats the title)
Oh and dont put you devices in a DMZ if you dont need to, also keep plug n play off
For PC's and tablets/phones try malware bytes
It blocks websites, stops drivebys and so on
For PC's and none isp routers use a DNS like addguard as it blocks adds and bad sites
And open DNS, they go in the router so cover all devices on your network not just PC's
For a pc by pc option use DNS Angel (you can edit the .cfg) to lockdown kids pcs.
Also on PC's use a modified hosts file from
https://winhelp2002.mvps.org/hosts.htmIve never seen a add since 2002
In the end how safe is safe
What was that worm called, stuxnet worm, now that was high level stuff