I know! I've never come across it! It's what I seem to have to do when using a docker container - unless someone knows different?
Docker uses a vm, which is on the network 192.168.. But the container has an IP of 172.17..
I'm no docker expert and in an ideal world the container should have a 192.168.. Address, but I can't find a way to make that happen.
Maybe I'm asking in the wrong mailing list - could be a question for docker. Either way, I'd like to figure out what I'm doing wrong! 
Nb. This is no way going to be a production setup - it's a development setup.

I "think" I understand what I need to do..
Thanks
Oz
On 6 Apr 2016, at 18:39, Michael Jerris <mike@jerris.com> wrote:

The default acl's treat all rfc1918 addresses as internal.  you'll need to make one that treats your external addresses as external even tho they are rfc1918.  Why are you natting from one private address to another?  Its a very strange implementation


On Apr 6, 2016, at 1:31 PM, Oz Mortimer <omortimer@gmail.com> wrote:

Hi,
Thanks for the reply - I wish I understood it - but I don’t ;)
Yes, the natting is between one rfc1918 address space to another.

Based on your reply I tried

<param name="apply-nat-acl" value="damnnat”/>

where acl.conf.xml has

 <list name="damnnat" default="allow">
      <node type="allow" cidr="192.168.1.0/24"/>
      <node type="allow" cidr="172.17.0.0/24"/>
    </list>

To no avail!. can you give me a pointer to what I need to change and where?

Thanks
Oz.

On 6 Apr 2016, at 17:58, Michael Jerris <mike@jerris.com> wrote:

you are natting from one rfc1918 address space to another?  If so, all the default nat acl's will be wrong, and you will have to make your own acl's that match your network environment.

On Apr 6, 2016, at 12:48 PM, Oz Mortimer <omortimer@gmail.com> wrote:

HI,

I’m trying to get FS running in Docker, which largely was pain free (i know, i know, VMs, etc), but I can’t get my head around what is going on with RTP. Ive set ext-rtp-ip and it seems to be taking affect:

freeswitch@7ad22635059e> sofia status profile internal
=================================================================================================
Name             internal
Domain Name       N/A
Auto-NAT         false
DBName           sofia_reg_internal
Pres Hosts       172.17.0.5,172.17.0.5
Dialplan         XML
Context           trusted
Challenge Realm   auto_from
RTP-IP           172.17.0.5
Ext-RTP-IP       192.168.1.168
SIP-IP           172.17.0.5
Ext-SIP-IP       192.168.1.168
URL               sip:mod_sofia@192.168.1.168:5060
BIND-URL         sip:mod_sofia@192.168.1.168:5060;maddr=172.17.0.5;transport=udp,tcp
HOLD-MUSIC       local_stream://moh
OUTBOUND-PROXY   N/A
CODECS IN         G729,PCMU,PCMA
CODECS OUT       G729,PCMU,PCMA
TEL-EVENT         101
DTMF-MODE         none
CNG               13
SESSION-TO       0
MAX-DIALOG       0
NOMEDIA           false
LATE-NEG         true
PROXY-MEDIA       false
ZRTP-PASSTHRU     true
AGGRESSIVENAT     false
CALLS-IN         2
FAILED-CALLS-IN   2
CALLS-OUT         0
FAILED-CALLS-OUT 0
REGISTRATIONS     0



but when a call is placed i seems to be incorrect in the SDP

2016-04-06 16:29:49.011107 [DEBUG] mod_sofia.c:2353 Ring SDP:
v=0
o=FreeSWITCH 1459942605 1459942606 IN IP4 172.17.0.5
s=FreeSWITCH
c=IN IP4 172.17.0.5
t=0 0
m=audio 17584 RTP/AVP 8 101
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=ptime:20
a=sendrecv

Shouldn’t the SDP reflect the Ext-RTP-IP ?

Im sure i’ve missed some sort of config setting or have gone snow blind!.
fs version is FreeSWITCH (Version 1.6.7 -14-d38d065 64bit)

Any ideas will be greatly received.
Thanks
Oz.
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org