Mikrotik VoIP issue with contrac enabled

Hello community,

i have a RB1100AH with contrack enabled. If try outbound calls, i got the connection established but no voice. Inbound calls working fine.
There is no NAT on RB1100AH that could affect the VoIP since i have an offical ip but if i disable contrack, voice on outbound calls is transmitted fine immediatly.
The problem is, that there are some people without official IP, so contrac has to be enabled for NAT.
I also tried, if it is a problem with the nat rule, but disable the nat rule has no effect, neither add an accept rule to sort official IPs out of nat chain.
/ip firewall service-port sip enabled or disabled changed nothing.

RB 1100AH
ROS 5.20

/ip firewall address-list
add address=x.x.x.x/24 disabled=no list=nomasq
add address=x.x.x.x/24 disabled=no list=nomasq
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
    tcp-close-wait-timeout=10s tcp-established-timeout=1d tcp-fin-wait-timeout=\
    10s tcp-last-ack-timeout=10s tcp-syn-received-timeout=5s \
    tcp-syn-sent-timeout=5s tcp-syncookie=no tcp-time-wait-timeout=10s \
    udp-stream-timeout=3m udp-timeout=10s
/ip firewall mangle
add action=mark-routing chain=prerouting disabled=no new-routing-mark=kamax \
    passthrough=yes src-address=192.168.67.1
/ip firewall nat
add action=accept chain=srcnat disabled=no src-address-list=nomasq
add action=masquerade chain=srcnat disabled=no src-address-list=!nomasq
/ip firewall service-port
set ftp disabled=yes ports=21
set tftp disabled=yes ports=69
set irc disabled=yes ports=6667
set h323 disabled=yes
set sip disabled=yes ports=5060,5061 sip-direct-media=yes
set pptp disabled=no

Any idea?

I hope my english is ok and i didn’t miss any information needed

Best regards
Manuel Ritter

Your catch all NAT rule may be the problem, it is very broad. It might be better to specify the subnet that you want it for along with the out interface to narrow it down. Especially if you have a routed subnet to your router on a different interface.

Thanks for your reply,

missing outbound interface solved the problem. Bad misstake.

Best regards
Manuel Ritter