One other thing I'd suggest is to put the URL into the provision field directly...

Code:
http://provisioning.voipo.com/$MA
... literally. Don't substitute your MAC address, let your device do it for you. Also, don't try to wget it from a separate box--perhaps the provisioning server can tell when something other than the ATA is attempting to download the provision file...