[Freeswitch-users] SIPS & SRTP questions

[Bzzz]

Hi list,

I'm running a FS server @home to create a small network of people
that need confidentiality upon their calls/conferences.

I'm reading the SIPS/SRTP FS wiki page at this moment and I've got
some questions:

* I've a dyndns WAN name for my adsl box (that I loop on my DNS to 
  the server LAN's name: nslookup extname.org => 192.168.1.50); so I
  suppose I must have the WAN name as the 'cn' in my cert/key for
  external clients being able to connect? (but what about internal
  ones?)

* If I'm not using auto-nat, is forwarding port 5081 from the WAN to
  the server sufficient for making and receiving external calls?
* BTW, SIP 5060 is supposed to be internal, so why is it also part of
  the uPNP forwards?

* How can I force FS to only work in SSLv23 + SRTP modes? (how?)

* Is there a possibility for each user to have its own certificate,
  so I would be able to revoke permissions atomically if needed?

Jean-Yves
-- 
We are Pentium of Borg. Division is futile. You will be approximated.
(seen in someone's .signature)