[asterisk-dev] [Code Review] 3372: Allow local ICE candidates to be overridden with specified address

[Sean Bright]

On 3/19/2014 6:30 AM, Olle E. Johansson wrote:
> The major one being that ICE was create so that we don't have to mess 
> around like this. The external IP is just a server-reflexive address. 
> You may want to make a decision on what you prefer in the C-line 
> depending on the old logic - what's the most likely address we're 
> going to end up with?

With externaddr/externhost in chan_sip you are effectively hiding the 
fact that Asterisk is behind a NAT device.  Creating the ICE candidate 
list using the local interfaces leaks information that you might not 
want getting leaked.  The goal of this patch was to make Asterisk appear 
to be sitting on the public internet.  I've been running it successfully 
for a few months, but it's not ready for public consumption in it's 
current state.