hello
I have experienced the same problem; calls from extensions to outside have no inbound audio path. The problem wasn't the firewall, but in the translation from RTP to SRTP by Snom One. As per the OP above, turning off encryption for extensions 'fixes' the problem.
I should also say that this problem did not occur for all calls.