[rtpengine]

# Userspace forwarding only — the Debian kernel module (rtpengine-kernel-dkms) is not
# installed/needed on this box: table = -1 instead of the default 0.
table = -1

# Single public IP: media sockets bind on it and the SDP advertises it.
interface = __PUBLIC_IP__/__PUBLIC_IP__

# Endpoint learning stays ON (the default): the relay learns the REAL NAT-mapped address of
# each leg from the first RTP packets it receives and forwards there. Turning it off makes
# the relay forward strictly to the (private) addresses in the SDPs, which are unreachable
# from the public internet — media dies. Kamailio does NOT rewrite the SDPs (see the
# comment in kamailio.cfg: fix_nated_sdp does nothing useful in 5.6 without the right flags).

# Control socket consumed by Kamailio (modparam rtpengine_sock).
listen-ng = 127.0.0.1:2223

# Media relay port range (firewall: open UDP 40000-41000).
port-min = 40000
port-max = 41000

timeout = 60
silent-timeout = 3600
tos = 184
log-level = 5