Need to add support stun option.
Then we behind the NAT and originate call to some one everything is ok. But then sever try place incoming call on us, it could reach the client, because client talk in this SIP URL wrong(local) port instead of external NAT port.
Maybe this open-source stun client-server app could help.
P.S. Sorry for my bad english.