Help with SIP config.

[Guest]

[seh2000]

Hello!
I hope someone can help me here.
I just build a new machine to run Endian on with 3 1Gb LAN. 1 used for Green, 1 used for Red and 1 for Blue where my VoIP adapter sits.
I can register with my VoIP provider, but not make calls...
SIP Proxy
transparent
SIP Port 5060
RTP L P 16382
RTP H P 16482
Autosave
Log Calls
FW logs outgoing

Firewall
Blue > Red
SIP / UDP / 5060

Green + Blue
Any / ICMP / 8+30

But I keep getting this type of error message:
FORWARD:DROP UDP (br2) 192.168.2.104:16464 -> 204.11.192.22:62402 (eth1)
MAC=00:30:18:ac:c1:15:00:0e:08:cf:d4:7b:08:00 LEN=200 TOS=18 PREC=0xA0 TTL=249 ID=25887 LEN=180 MARK=2800

Why 16464 is dropped when its inside the RTP range in SIP Proxy, I am sure I missed something, but what?!


Steen

Edit 10/12
Added the VoIP adapter to Orange/DMZ (assume I could have used Blue) used the fixed IP of the VoIP router and allowed "any" service with "any" protocol to Red then I can register, make and receive calls, but isn't this then like having no FW between VoIP adapter? 
Any one? Input appreciated on correct set-up.

[seh2000]

Update...

I have tried the following configuration, register with VoIP provider = OK, dial tone and dialing, but no voice on outgoing and incoming calls.
 
Source                            Destination Service  Protocol   Dest Port            Action   Remark
(MAC of VoIp Adapter)    RED              SIP        UDP          5060                    Allow   
(MAC of VoIp Adapter)        RED           TFTP      UDP          69                    Allow   
(MAC of VoIp Adapter)    RED              TFTP      UDP           21, 2400            Allow   21 & 2400 I found via a google search, but not too sure if correct
(MAC of VoIp Adapter)    RED              NTP   TCP+UDP 123                    Allow   
(MAC of VoIp Adapter)    RED              <ANY>    UDP          80                    Allow
(MAC of VoIp Adapter)    RED              <ANY>    UDP        10000:20000    Allow   

The above with and without SIP Proxy enabled. I tried with the IP adr for the VoIP adpt instead of the MAC address for same.

I have also tried the above together with:
Port forwarding / Destination NAT

Incoming IP             Service                              Translate to         Port
IP Range 1/24
IP Range 2/24         UDP/10000:20000      IP VoIP adpt        10000:20000   
Filter policy: Allow and Allow with IPs both tried

IP Range 1/24
IP Range 2/24         UDP/5060:5080              IP VoIP adpt         5060:5080
Filter policy: Allow and Allow with IPs both tried

Any advice/assistance highly appreciated!

Steen