- Shipped
- 27 ஆகஸ்ட், 2026 அன்று 6:22 AM UTC
- Author
- Kamo
- Commit
- 7e63bf1
- TURN over TLS on 5349 with a real cert (turn-kamocrm-com-cert). Without turns:, a customer behind a 443-only egress firewall has no media path. Verified externally: listener up, chain validates. - Authoritative host port allocation table; k3m1 reserved for KamoPBX. - Router NAT rules documented in-repo, incl. the missing pbx.kamocrm.com A record (needs 42.181.8.87). - Corrected coturn comment claiming k3m1 is 47.181.8.87; it is 42.181.8.87 and .87 on 47.x belongs to an unrelated third party. - Corrected relay range to the real 52000-65535 (README said 49152). - verify-phase0.sh probes from outside. UDP rows report INCONCLUSIVE rather than PASS: nc -z -u calls almost any UDP port open, which would be a false green on the SIP and RTP paths.