Registration attacks

I don't know, I don't use them, but if they can't/won't change the signalling port, create a PNAT rule to allow the host address and translate the port to redirect such traffic to your "safer" listening port