It was listed in the your remark:
``` phoneA(192.168.147.100) -(TLS)- (192.168.147.1)KamailioA(192.168.1.1) -(TLS)- (192.168.1.2)KamailioB(192.168.148.1) -(TLS)- (192.168.148.100)phoneB ```
TCP/TLS connections are created at the OS layer, depending on OS IP routes, in many cases the app has no much control about the local ip/port when connecting to a remote peer.
If you do `kamctl srv sockets`, do you see the this ip listed there?