Firewall does not create rule for networks in "Match (Permit)" on PJSIP trunks

When pjsip trunks are created, the SIP server address gets an "ACCEPT" rule in the 'fpbxsmarthosts' chain in the firewall, but addresses in the "Match (Permit)" field do not. (in PJSIP Settings > Advanced). 

For providers such as VoIP Innovations with multiple origination servers, this will result in only calls that come in via the primary server being answered by Asterisk, whereas any calls coming from Secondary, Tertiary, etc will not make it to Asterisk.

Workarounds are to either add all the provider's servers in the firewall networks manually, or enable Responsive Firewall which will allow Asterisk to decide whether to accept or reject the traffic.