Who is your SIP trunk provider? Have you talked with them to make sure all of the IP's they have are on your ACL. That has happened to me before. Also have you tried putting in the subnet in 838.