In fact, I'd initially used UPnP because I thought keepalives might not be reliable enough for incoming calls.

However, the keepalives work great and prevent random outside IP addresses from messing with my Grandstream.