<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
I'm using <font color="#3333ff"><br>
<param name="apply-nat-acl" value="my_nat"/><br>
<param name="nat-options-ping" value="true"/></font><br>
in my SIP profile in order to make Freeswitch ping every phone
registered to it.<br>
<small><big>This works well for keeping phones on remote LANs reachable.</big></small><br>
<br>
My_nat ACL is defined as following:<br>
<font color="#3333ff"> <list name="my_nat" default="allow"><br>
</list></font><br>
That is, it allows everybody.<small><big><br>
<br>
</big></small>Question: am I making my system insecure by doing so?<br>
I believe "No" since ACL list "my_nat" is only used by appl-nat-acl
parameter,<br>
but I don't know FreeSWITCH well enough to grantee that nothing else is
affected.<br>
E.g. does anything else change if phone is considered NATed / non-NATed?<br>
<br>
Regards,<br>
Victor<br>
<br>
</body>
</html>