Thanks for the link.

I tried setting "apply-candidate-acl", "apply-inbound-acl" with an ACL allowing the private "172.16.x.x" network, as described here [1] with no success. I tried starting freeswitch with "-nonat" parameter with no success of working RTP.

RTP comes with source 172.16.x.x and I am routing it based on a static route on freeswitch machine via public IP gateway which knows to forward it further.

[1] https://freeswitch.org/confluence/display/FREESWITCH/ACL

Stefan


On Mon, Jul 4, 2016 at 12:13 AM, Stanislav Sinyagin <ssinyagin@gmail.com> wrote:
I might actually be wrong with this, so you better read the docs at
https://freeswitch.org/confluence/display/FREESWITCH/NAT


On Sun, Jul 3, 2016 at 10:40 AM, Anonim Stefan <fanx07@gmail.com> wrote:
> Thank you Stanislav, I will try.
>
> The question I have is why "denies everything" and not "allows everything"
> for the new ACL?
>
>