I am having a new VOIP System installed and they would like the following ports opened on the Mikrotik router.

TCP Port 80 & 8000 Web Admin
TCP Port 8080 SECONDARY HTTP
TCP Port 443 SECURED WEB ADMIN (PRIMARY HTTPS)
TCP Port 8443 SECONDARY HTTPS
TCP Port 23 TELNET CLI (PRIMARY TELNET)
TCP Port 8023 SECONDARY TELNET
TCP Port 992 SECURE TELNET OVER SSL
TCP 5003 iPECS VOICE TELNET
UDP 161 SNMP

TCP 1720 VOICE NETWORKING SIGNALLING
UDP 5060 SIP SIGNALING (TRUNK REMOTE SIP EXT.)
UDP 5588 iPKTS SIGNALLING (REMOTE PHONE)
UDP 7000 - 7323 RTP (SIP, NETWORKING, REMOTE PHONE)

what you call "opening ports" is called DST-NAT in RouterOS:
http://wiki.mikrotik.com/wiki/Manual:IP ... nation_NAT

(last example)

Never ever use Telnet. It's one of the cardinal sins of network security. If something requires Telnet then that's justification to avoid it like a plague.