[Freeswitch-users] FreeSWITCH behind NAT

[jungle boogie]

Hi All,

I have some questions about this page and what folks do when freeswitch 
is behind NAT:
https://freeswitch.org/confluence/display/FREESWITCH/NAT+Traversal

1. Do ports need to be opened on the firewall under all circumstances? 
UDP ports for RTP, for instance.

2. Is this always a good idea to enable in sip_profiles/internal.xml?
<param name="nat-options-ping" value="true"/>


3. Is it necessary/recommended to have STUN enabled in vars.xml AND 
setup the nat-options-ping?


4. my sip_profile/internal.xml has this:
<param name="ext-rtp-ip" value="auto-nat"/>
<param name="ext-sip-ip" value="auto-nat"/>

Is this an improvement over what's  in confluence of:
<param name="ext-rtp-ip" value="$${external_rtp_ip}"/>

5. If the endpoints are configured to connect using TCP, does any of 
this change what's above?

thanks!