The ice not ready message comes from not getting any stun messages to the candidate ip/port sent in the 200ok. Maybe do a pcap and see if the firefox is sending any stun packets to that addr.