what do you think about opening all RTP ports for rtpengine on Internet, is it a bad practice ?

I wonder if it's possible to use rtpengine with all ports closed.

Maybe someone could explain how rtpengine learn the source address when the SDP contains a local address.

If your rtpengine server is under attack, could rtpengine choose the wrong ip source for RTP ?

Thanks.