From 331a9fe68285f87e6eb146162abb2e85d11189b0 Mon Sep 17 00:00:00 2001
From: Keith Whyte <keith@rhizomatica.org>
Date: Wed, 6 Mar 2019 10:01:33 +0000
Subject: [PATCH] FS: Minor changes to internal vpn profile

---
 .../files/etc/freeswitch/sip_profiles/internalvpn.xml        | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/modules/rhizo_base/files/etc/freeswitch/sip_profiles/internalvpn.xml b/modules/rhizo_base/files/etc/freeswitch/sip_profiles/internalvpn.xml
index c2c75c6..0f36d4b 100644
--- a/modules/rhizo_base/files/etc/freeswitch/sip_profiles/internalvpn.xml
+++ b/modules/rhizo_base/files/etc/freeswitch/sip_profiles/internalvpn.xml
@@ -101,7 +101,7 @@
     <!-- extended info parsing -->
     <!-- <param name="extended-info-parsing" value="true"/> -->
 
-    <param name="aggressive-nat-detection" value="true"/>
+    <param name="aggressive-nat-detection" value="false"/>
     <!--
         There are known issues (asserts and segfaults) when 100rel is enabled.
         It is not recommended to enable 100rel at this time.
@@ -126,6 +126,7 @@
     -->
     <param name="local-network-acl" value="localnet.auto"/>
     <param name="apply-register-acl" value="domains"/>
+    <param name="apply-candidate-acl" value="domains"/>
     <!--<param name="dtmf-type" value="info"/>-->
 
 
@@ -224,7 +225,7 @@
     <!--<param name="inbound-proxy-media" value="true"/>-->
 
     <!-- Let calls hit the dialplan before selecting codec for the a-leg -->
-    <param name="inbound-late-negotiation" value="true"/>
+    <param name="inbound-late-negotiation" value="false"/>
 
     <!-- Allow ZRTP clients to negotiate end-to-end security associations (also enables late negotiation) -->
     <param name="inbound-zrtp-passthru" value="true"/>