sounds like a firewall issue, but my suggestion would be to turn on local streaming in the MBG setup of those remote users.
Since you are describing that the issue is isolated to remote users, turning on local streaming will allow the IP phones to send their audio stream directly to one another, rather then through the MCD.