i try to figure out, how to solve RE-INVITES and SRTP:

i have an kamailio route names route[MEDIAPROXY] that i used to controll rtpengine in an private and public ip setup. This works fine for me now.

It use the permission module and the adress table to figure out 

$var(mediagroup) = allow_address_group($Ri, 0); received from internal or external ip.

The idea is from SBC-OS chamless stolen, so thanks for that.

So fare so good. I adapted SRTP also to this.

But on RE-INVITES it stops handling SRTP correctly to the encryption upstream.

And i am sure, its my fault. But i have no clue how to detect that correctly.

Any hints where i can read more about an correct handling on this?

Here my main-config file / kamailio 5.3.x and rtpengine.

--