Have done a packet trace with Wireshark, ZS is completly blocking all SIP packets, I have no firewalls, no rules, have applied athelings patch, have rebooted but for some strange reason the SIP is being lost/blocked by ZS
If you are using Wireshark then you probably know what you are doing network wise.
Outbound traffic should work with no firewall rules. And that should allow responses back in via the same port. So it sounds like it should work…
Can I assume that other non-SIP traffic is working?
What is the default policy on your firewall setting’s “forward” chain?
I do have a “virtual server” set for UDP port 5060 to pass data to my AstLinux box from both of my WAN links. But this should only be necessary if you are expecting unsolicited SIP traffic (external extension to your phone system and/or traffic from unknown entities who have done a look up on e164.org or equivalent).