[FW-1] H323 issue

[Carlos Infante <cib87@FW1-NOSPAMTID.ES>]

Hi All,
Below you ave a diagram showing mi H323 structure. For testings I've
got to PCs with h323 software (T#1 and T#2). The MCU box is the H323 Gatekeeper.
The h323 signaling goes through the firewalls. T#1 --> MCU and MCU -->T#2. 
for service  h323 (I'm seeing this two entries in my log viewer)
I've the folling rules in my rule base
PCs    MCU    H323   
accept
MCU    PCs                                                 
H323    accept

The MCU object have been defined as VoIP Domain gatekeeper.The properties of the gatekeeper are as follow:
Related endpoint Internet (defined as range from 1.0.0.0 to 223.255.255.255)
VoIP installed at: The real MCU machine
In routing mode I've checked all of them.
In VoIP general properties i've checked "allow to re-direct connections"

As I mentioned above, two entries are showed int the log viewer accepting the rules, but when the called station tries to respond the firewalls reject the connection.

Anyone knows what I'm missing? Suggestions will be very appreciated

TIA

Carlos
                                         ------
                | MCU |
                |     |
                -------
                   |
                   |
                -------
                | FW1 |
                |     |
                -------
                  |
          --------------------
          |                  |
       -------            -------
       | T#1 |            | T#2 |
       |     |            |     |
       -------            -------