just an update to this issue, this was caused by rtpproxy not answering to a stun binding request but rather relaying it downstream. (for which asterisk as pstn terminator replied with a binding success)

i wonder how difficult it is to add stun into rtpproxy? mediaproxy-ng should work but it does not support bridge mode. any other options?

time to move this discussion to the other mailing list :)

On Nov 19, 2013 4:50 PM, "Kelvin Chua" <kelchy@gmail.com> wrote:
here is the scenario:
kamailio 4.0.4 running in bridge mode 
eth0 : 10.17.0.202
eth1 : 100.200.30.40

a call comes in from ice enabled webrtc client (chrome) from public internet, 
kamailio processed the call, no audio.
if i replace kamailio with asterisk, audio ok.

upon investigating using wireshark, i found out that chrome sends a "Binding Request" for the IP/port in ICE candidate. Kamailio/rtpproxy sends back
Binding Success XOR-MAPPED-ADDRESS but the IP is the internal one 10.17.0.202:port

this is not right, the response should be the remote IP/port, not the local IP/port

Kelvin Chua