In version 7.0 or later look at the "inspect" fields. (Prior to version 7 it was called "fixups" not "inspect".) Make sure that the "inspect SIP" field is NO. "no inspect sip" is the proper setting.
With 'inspect sip' on the PIX firewall replaces the internal IP address of the phone with the external IP address. OnSIP uses both pieces of information to accurately deliver the call. The internal IP address must be inside the SIP packet for proper functioning.
Optimize your network for business VoIP with the right router