The UPC connectbox by default listens on the HTTP port (port 80) publicly and prompts browsers for credentials that does not match any known credentials provided by the ISP and is thereby potential security hazard. Even if the Firewall or DMZ is enabled on the router the connectbox still listens on the HTTP port such that there is no seeming way of disabling the HTTP port.
One solution is to access the UPC connectbox firewall and port forward port 80 into the abyss by creating a port forward rule to some IP that does not exist. Conversely, port 80 can be forwarded to some machine on the local network in order to make use of the port.