Hi, I am assuming that you are trying to connect a IP phone to the controller outside of the LAN.

If that is the case, what type of router are you using? Can you bimap the controller to the outside world?

Using a unix firewall you could indeed NAT all those entries, but if it a simple router, your only option maybe to put the controller out on the DMZ.

Obviously that has its own security risks. In this case you need to "protect" the box, disable services you don't need and make sure you have strong passwords.