diff --git a/resources/templates/conf/sip_profiles/external.xml.noload b/resources/templates/conf/sip_profiles/external.xml.noload
index fe7ab99931..438f9e82f5 100644
--- a/resources/templates/conf/sip_profiles/external.xml.noload
+++ b/resources/templates/conf/sip_profiles/external.xml.noload
@@ -39,10 +39,12 @@
 		<param name="rtp-timer-name" value="soft"/>
 		<param name="enable-100rel" value="true" enabled="false"/>
 		<param name="disable-srv503" value="true" enabled="false"/>
+		<param name="manage-presence" value="false"/>
 		<!-- This could be set to "passive" -->
 		<param name="local-network-acl" value="localnet.auto"/>
-		<param name="manage-presence" value="false"/>
-
+		<param name="apply-nat-acl" value="nat.auto"/>
+		<param name="apply-inbound-acl" value="domains"/>
+		<param name="apply-register-acl" value="domains" enabled="false"/>
 		<!-- used to share presence info across sofia profiles
 		 manage-presence needs to be set to passive on this profile
 		 if you want it to behave as if it were the internal profile