I would ask you whether you consider or not a good choice to set a maximum number of nat entries at one time not to loss connection to the router itself in case of viruses or file-sharing program on the LAN. I know that is not the best solutions but it provide manageability by remote in case of troubles.
Your opinions?
Alex.