# Why kcp/NAT is operating even it has been disabled in settings?
**URL:** https://forum.syncthing.net/t/why-kcp-nat-is-operating-even-it-has-been-disabled-in-settings/10996
**Category:** Support
**Created:** [November 27, 2017, 2:40am UTC](https://forum.syncthing.net/t/why-kcp-nat-is-operating-even-it-has-been-disabled-in-settings/10996 "2017-11-27T02:40:19Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@Jarno](https://forum.syncthing.net/u/Jarno)
#### Post date: [November 27, 2017, 2:40am UTC](https://forum.syncthing.net/t/why-kcp-nat-is-operating-even-it-has-been-disabled-in-settings/10996/1 "2017-11-27T02:40:19Z")
I have disabled the following options in Syncthing/SyncTrayzor settings:
- Enable NAT traversal
- Global Discovery
- Enable Relaying
and left only _Local Discovery_ enabled. Yet Syncthing Console reports:
```
[XXXX] 10:24:39 INFO: kcp://0.0.0.0:22020 detected NAT type: Port restricted NAT
[XXXX] 10:24:39 INFO: kcp://0.0.0.0:22020 resolved external address kcp://101.100.164.47:22020 (via stun.sipgate.net:10000)
```
Why is the external discovery still happening even I have disabled it in settings? I am too paranoid to leave any file sync happening over Internet. I use sync over SSH tunnel for that purpose. How can I really disable the external port discovery.
---
### Author:  [@AudriusButkevicius](https://forum.syncthing.net/u/AudriusButkevicius)
#### Post date: [November 27, 2017, 8:03am UTC](https://forum.syncthing.net/t/why-kcp-nat-is-operating-even-it-has-been-disabled-in-settings/10996/2 "2017-11-27T08:03:40Z")
This is nothing todo with any of the settings you disabled. Search for existing threads on the forum on this.
---
### Author:  [@Jarno](https://forum.syncthing.net/u/Jarno)
#### Post date: [November 27, 2017, 8:59am UTC](https://forum.syncthing.net/t/why-kcp-nat-is-operating-even-it-has-been-disabled-in-settings/10996/3 "2017-11-27T08:59:28Z")
The bit unintuitive trick is to go to Advanced Settings and set:
```
Stun Keepalive Seconds = 0
```
---
### Author:  [@imsodin](https://forum.syncthing.net/u/imsodin)
#### Post date: [November 27, 2017, 10:22am UTC](https://forum.syncthing.net/t/why-kcp-nat-is-operating-even-it-has-been-disabled-in-settings/10996/4 "2017-11-27T10:22:06Z")
Agreed, see [https://github.com/syncthing/syncthing/issues/4518](https://github.com/syncthing/syncthing/issues/4518) and [resolved external address?? (new in .v0.14.40)](https://forum.syncthing.net/t/resolved-external-address-new-in-v0-14-40/10933/11?u=imsodin).
---
### Author:  [@DrSchnagels](https://forum.syncthing.net/u/DrSchnagels)
#### Post date: [November 28, 2017, 12:48am UTC](https://forum.syncthing.net/t/why-kcp-nat-is-operating-even-it-has-been-disabled-in-settings/10996/5 "2017-11-28T00:48:40Z")
I’m paranoid too and I use these settings. I really didn’t like the implementation of KCP without being able to fully disable it too. I use fixed IP addresses too. For the future, now that I understand and can config syncthing pretty good, I plan to use my first internet connected device at work to my home server.
> ```
> tcp4://0.0.0.0:22000
> nnnn
> false
> false
> false
> false
> nnnn
> 0
>
> ```
---
### Author:  [@system](https://forum.syncthing.net/u/system)
#### Post date: [December 28, 2017, 1:02am UTC](https://forum.syncthing.net/t/why-kcp-nat-is-operating-even-it-has-been-disabled-in-settings/10996/6 "2017-12-28T01:02:31Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.