NAT not working on UDP 5060

[pwnell]

I am running pfSense 2.0 and found I have the same issue as this guy:

http://forum.pfsense.org/index.php/topic,45255.0.html

I re-post this as that thread seems to have dried up with no solution - adding static NAT mappings does not help me.  My peer sends me SIP OPTION UDP packets from <their ip:5060="">to <my wan="" ip:5060="">, I can see using pfSense's packet sniffer that the packets arrive on the firewall, they are not blocked by the NAT rule yet a tcpdump on the internal Asterisk bos clearly shows that these UDP packets never make it to the internal IP.  If the internal box initiates a SIP REGISTER via UDP to the peer, the response does get back to the internal box.

My NAT rule is a basic

WAN TCP/UDP * * WAN address 5060 (SIP) 10.0.0.210 5060 (SIP)

Since these UDP OPTIONS packets never make it to the Asterisk box, the peer disables our IP access.</my></their>

[dhatz]

Can you send the output of

pfctl -sa | fgrep 5060

?