block upnp and pcp requests from the outside world

Although miniupnpd DOES do the right thing, discourage
attempts by dropping packets from the upnp and pcp port
numbers
cerowrt-3.10-32-12