Gents, I have a PFSense router running our network here. It's configured with a separate WAN connection for our 3CX installation. Rules are set correctly, phone calls work over SIP and our trunk is fine. Outbound rule is set, the 3cx server has static port set. Before I configured this the firewall test would report unmatched port mapping. Now I'm getting "full cone test failed". Outbound rule: WAN_3CX x.x.x.x/32 * * * WAN_3CX address * YES Port forward: WAN_3CX TCP/UDP * 5090 WAN_3CX address 5090 10.0.11.250 5090 WAN_3CX TCP/UDP * 5061 WAN_3CX address 5061 10.0.11.250 5061 WAN_3CX TCP/UDP 3CX_STUN_Servers 9000 - 9255 WAN_3CX address 9000 - 9255 10.0.11.250 9000 - 9255 WAN_3CX TCP/UDP * 5060 (SIP) WAN_3CX address 5060 (SIP) 10.0.11.250 5060 (SIP) I will be setting a source address of our SIP provider after this thing passes it's bloody test... Any ideas?