The use of application level gateways in routers is strongly discouraged; it nearly always leads to tears.
If you don’t really have an ALG, but are simply doing port forwarding, as is the recommended method, match/permit could contain the providers’ UAC addresses (the addresses they use as client when calling you).
Also check that you are successfully registering, unless you have provided your public address to the provider, and are using IP authentication.