SIP phone is working by using proxy manager, but not gateway.
Yes, that is what I was thinking of, unfortunately it not work... at least I couldn't find a way to do so...
alternatively, I have just configured Grandstream FXS gateway to be DMZ in remote office, and supperised it is working fine...
consider as case close, unless someone find a way to use 3cx tunnel or proxy manager... do let me know.
anyway, thanks.
JX