On Starlink, now that you mention it, I'm kinda curious too. What *do* they allow for ports? I've been on a list asking for a starlink for years, but I don't tweet with twits, so guess I don't get invited.
My guess: They treat it like a cellco, ie all cgnat with no inbound ports, only outbound. If you want inbound ports, you need to talk to our "business" division.
No cellco allows inbound service generally, if they do, consider yourselves fortunate of a bygone era. If you need that, you need something like zerotier, tailscale, or random vpn here, and some port forwarding engine between. It's what people do these days.
I don't think any cellco allows inbound ports other than on the local lan, or any vpn service that acts as an intermediary the same in theory.
-mb