Remote SIP Extension Help

I am attempting to setup a remote extension to Asterisk 1.6 PBX. Here is what I have so far:

My Asterisk Server is behind a Fortigate50B. The 50B is giving Asterisk an IP of 10.1.1.7 on the LAN side. Asterisk has a Virtual IP of 65.255.160.7 on the WAN. (1 to 1 NAT) Ports 5060 and 10001-20000 forwarding to all the right places. In my sip.conf I have:

externip=65.255.160.7
localnet=10.1.1.0/255.255.255.0

[3007]
deny=0.0.0.0/0.0.0.0
secret=#####
dtmfmode=rfc2833
canreinvite=no
context=from-internal
host=dynamic
type=friend
nat=yes
port=5060
qualify=yes
callgroup=
pickupgroup=
dial=SIP/3007
mailbox=3007@default
permit=0.0.0.0/0.0.0.0
callerid=device <3007>
callcounter=yes
faxdetect=no

At my remote site I’m using x-lite to test. I have a LinksysE3000 with ports 5060 and 10001-20000 forwarding to my computer with x-lite. I also have SIP ALG enabled. x-lite settings:

User ID:3007
Domain:65.255.160.7
Authorization name:3007
Register with Domain is Checked

I can ping 65.255.160.7 and telnet in on port 5060.

My x-lite softphone will not register, so what have I missed?

Hi, I have exactly the same problem, with almost identical configs. Does anyone have any ideas how to resolve this ??