Don't need to add IP to ACL if you are authenticating on 5060. (AFAIK). Causes more issues than solutions in that case.
Also, you need to post the full call log for that call for NO_ROUTE_DESTINATION to anyone here at all.
Do me a personal favour and post the log in a code block when you do.