The UDP ports are needed so the server sending UDP call data _to_ you can get to the ATA. If you have a properly configured router, the SIP port rules (5060,5061 etc) are not necessary. Those connections will be built and maintained during registration with the server.