/ip firewall service-port set sip disabled=no
I guess the default setting must depend on what ROS version the router started with, I thought it was always off by default. Wrong.
But on our tower routers we don't use NAT and in almost all cases don't even have connection tracking on, so would the SIP helper be rewriting any port 5060/5061 traffic?
