External extension not working when used with TLS and SRTP

I will search the internet on how to activate the logs for sip debugging.

I checked my router and found some mistakes by me.
I set for example 6666 --> 5061 in port forwarding.
Some how that does not work. Then I set 5061 --> 5061 and it works.

Next tried setting the sip tls port in sip setting page in freepbx to 6666 and change back the router to 6666 --> 6666. But does not work even after restarting the freepbx server.

Please note the firewall is off.

So finally the router is set to 5061 --> 5061 and freepbx sip is set to 5061.
Using Grandstream Wave app. It is set to use TLS and encrypted RTP. So far it is working.

FYI. The router is pfsense running the latest version.

I will experiment more. Could it be some setting in pfsense is causing this problem? But is another problem.

Once again thank you for replying. I do appreciate it.