Service Ports: Do they cause more problems than they solve?

RouterOS General
1

Title says almost all of it…

/ip/firewall/service-port> Do they cause more problems than they solve? I’m using MikroTik in a service provider environment, and I have a dedicated NAT router… it does nothing other than NAT.

I’m using src-nat, with 100.64.0.0/10, to a public IP. (I promise it’s broken up more than that, just trying to make this simple)

Question: In this environment, do the service ports hurt more than they help? Specifically the SIP helper… should I leave it enabled? Or should I disable it?

Thoughts?

2

What problems are you encountering? What is the origin of the question?

Be professional, provide MTU of 1500, buy IPv4 and apply IPv6, instead of making your customers (who hypothetically pay you) suffer from double NAT.