The idea is to use NAT if, as you are, behind a firewall,.You need to use the externhost=foo.dyndns.net syntax with an appropriate “refresh rate” (dynamic IP in FreePBX talk) if you rely on a DDNS service instead of the externip=n.n.n.n, it’s all in the wiki., did you read it yet?