Klaus Darilion writes:
I think the "reply" problem needs to be solved using the registrar NAT bflag. If NAT flag is set for callee, activate a reply-route with add_alias() (can be done per branch).
that is not correct, because add_alias() needs to be called even when reply comes from a tcp ua that is not behind nat.
-- juha