Adding #2: Yes, enabled Responsive. Looks good. Have machine with dynamic public IP.
Adding #1: Yes, I got too punchy and disabled External for SIP. Did not registered with my SIP provider. Punched External for SIP, and within seconds, my SIP trunk registered with the provider. Excellent.
Holy Moses. Push-button happiness here. So easy, a cave man can do this.