I assume that *65 works (repeat extension) to prove that traffic from the PBX to the phones is working correctly.
Is you system properly identified as a NAT host? To trouble shoot, I’d start monitoring the traffic from your ITSP to your PBX. Make sure that the RTP traffic is making it from the gateway router to the PBX. Also, double check that your RTP ports are actually correctly forwarded (I once sent my RTP ports to the “other” server by accident in one network).
Since it’s all of your extensions, I’d start on the RTP pathway from the ITSP to the PBX and make sure that’s working.