WRT54G does not work or what am I doing wrong?

Question

My setup: DSL -> 2wire modem router (bridge mode, firewall shutdown) ->WRT54G -> LAN with 1 IPPBX, 1 wired PC and 3 wireless PC.
VoIP is running fine within our LAN, we have 2 SIP trunks running fine, But we just cant make an external softphone to work properly from WAN (outside the LAN).
As long as I know, the simplest way to explain what a firewall does is 'everything requested from the inside should be wellcomed, anything unsolicited from the outside should be disallowed UNLESS explicitly told otherwise' this is, why the heck do we have unreachable ports althought we have allow those to receive extern traffic?
Please check the pdf´s (snapshots) here:
http://travelexpress.com.mx/download/router/status.pdf
http://travelexpress.com.mx/download/router/router_firewall.pdf
http://travelexpress.com.mx/download/router/router_forward.pdf
http://travelexpress.com.mx/download/router/scanner.pdf
http://travelexpress.com.mx/download/router/scanner1.pdf
All those are for showing current setup, firewall, port forwarding and the results of a port scanner wich shows that efectively, we cannot use our extern SIP client because the WRT54G is blocking it...
Thanks in advance as we are urged to fix this ASAP

Answer 1

Yes. NAT is a function in the router. Just like the firewall. But still, both are different functions of the router. The firewall filters traffic to the router. NAT is responsible for mapping IP addresses. The reason why unsolicited packets from the internet won't get into the LAN is because NAT cannot deliver those packets and not the firewall rejecting some incoming connection. NAT does not filter. NAT tries to deliver and if it does not know where it drops it. But not because it wants to filter something.
The settings on the router are correct. But as I have mentioned before, forwarding a port does not mean it's open or accessible. There are still other factors which could cause the port to be closed...
Regarding the modem: you can check that if you connect a computer directly to the modem, open a port on the computer and then do the internet port scan again.
I also explained how to check with telnet if TCP port 5060 on the IPPBX is really open or not. Why don't you just do this test? It would be much easier and faster, giving relevant answers. I don't mind whether asterisk usually uses both protocols on 5060 or not. Maybe it does. Maybe not. Maybe it can be configured. Whatever. Enter "telnet 192.168.1.69 5060" into a command prompt window of a computer connected to your LAN and you see if the port is open or not. Then we know something for sure instead of thinking about what should be or should not be...
Also do the same telnet test with port 23 and 80 and then use the internet port scanner to scan for tcp port 23 and tcp port 80. Then we could see if anything goes through or not instead of discussing theory...
I did not say you have to set up a lab setup. I only explained that you were mixing NAT functions and firewall functions of the router. The NAT function may look like some firewall in certain respects but it is still a different function with a completely different purpose.
I also can't say if the IP settings are all correct. Maybe the IP address is correct but the gateway address is not. Or the DNS server.
The subject of this thread is "... or what am I doing wrong?". It's impossible to comment on something if you don't give the details which would allow to verify that you have set it up indeed correct...