I also have satellite broadband through WildBlew, simply because it's the only alternative to dialup where I live. Their Fair Access Policy specifically disallows hosting and p2p. I had someone probe the ViaSat modem my connection goes through, and their scan reports that ALL ports are open. At first, I thought the modem just resets all incoming connection attempts (except for DNS), but upon further examination, I determined that it only appears to reset incoming connections from other customers of the same satellite service.

SSH is able to connect from the internet to my firewall just fine if I'm not on my neighbor's satellite connection. Otherwise, I have to set up an SSH connection to a server in Canada with a tunnel to my firewall, then set up another SSH tunnel through my firewall to the firewall's SSL web interface. Kinda convoluted, but it works.