First if you are using NAT make sure that in sip.conf you have NAT=YES as well as externip set to your IP or dynamic DNS. Next you have to forward ports 5060-5090 and 10000-20000 UDP to your server. If you have a public IP on the box and just a firewall then you will need to open the same ports as mentioned above.
RTP. SIP uses two sets of ports, 5060 is for SIP itself and is the control channel. The media (voice data) is sent over RTP which requires a range of ports. 10k-20k is the default and is set in rtp.conf.