Are you using some PBX behind the NAT? or you are just using some sip account on your pc-softphone or something… if you are using pbx you must do static nat on your router, 5060 (SIP) and udp for RTP. input chain allowed udp what you did it is not needed because voip traffic must pass through the router (forward chain). also if you are using dynamic ip address on your wan connections and you are routing your voip packet through wan2 check in wireshark which ip address are you sending to the outside… maybe stun resolving public ip from wan1 and another side is trying to return voice (rtp packets) to that address and that packet will not get to you.
you can try outbound call and from your pc or pbx take log with wireshark and you can put the results here, first thing first we must know does stun resloving the real public ip (wan2), if does then we are moving on firewall
“if you are using pbx you must do static nat on your router, 5060 (SIP) and udp for RTP. input chain allowed udp what you did it is not needed because voip traffic must pass through the router (forward chain).” How do i go about this especially the rtp