So I thinking I might have found the problem the firewall was block the SIP.
Date Time 2013-03-05 17:13:54 Date 2013-03-05
Time 17:13:54 Level warning warning
Sub Type other ID 7
Virtual Domain root Src x.x.x.x
Src Name x.x.x.x Src Port 5060
Dst x.x.x.x Dst Name x.x.x.x
Dst Port 26877 Service 26877/udp
Protocol 17 IM and P2P Application N/A
Duration 0 Rule 0
Policy ID 0 Sent 0 B
Received 0 B VPN N/A
Src Interface wan1 Dst Interface root
Serial Number 41685417 Status
User N/A Group N/A
Carrier End Point N/A Application Name N/A
Application Category N/A Sent Shaper Bytes Dropped 0
Received Shaper Bytes Dropped 0 Per-IP Shaper Bytes Dropped 0
Sent Shaper Name N/A Received Shaper Name N/A
Per-IP Shaper Name N/A Identity Index 0
Message iprope_in_check() check failed, drop Destination Country United States
VPN Type N/A VPN Tunnel N/A
Profile Group Name N/A Sub Application Category N/A
Sub Application Name N/A Source Country United States
type=traffic subtype=other pri=warning status=deny vd="root"
I noticed that the source IP was our SIP.
