<profile name="external">
	<!-- http://wiki.freeswitch.org/wiki/Sofia_Configuration_Files -->
	<!-- This profile is only for outbound registrations to providers -->
	<gateways>
	</gateways>

	<aliases>
		<!--
		<alias name="outbound"/>
		<alias name="nat"/>
		-->
	</aliases>

	<domains>
		<domain name="all" alias="false" parse="false"/>
	</domains>

	<settings>
		<param name="debug" value="0"/>
		<!-- If you want FreeSWITCH to shutdown if this profile fails to load, uncomment the next line. -->
		<param name="user-agent-string" value="FreeSWITCH" enabled="true"/>
		<param name="shutdown-on-fail" value="true" enabled="false"/>
		<param name="sip-trace" value="no"/>
		<param name="sip-capture" value="no"/>
		<param name="rfc2833-pt" value="101"/>
		<!-- RFC 5626 : Send reg-id and sip.instance -->
		<param name="enable-rfc-5626" value="true" enabled="false"/>
		<param name="sip-port" value="5080"/>
		<param name="dialplan" value="XML"/>
		<param name="context" value="public"/>
		<param name="dtmf-duration" value="2000"/>
		<param name="inbound-codec-prefs" value="$${global_codec_prefs}"/>
		<param name="outbound-codec-prefs" value="$${outbound_codec_prefs}"/>
		<param name="hold-music" value="$${hold_music}"/>
		<param name="rtp-timer-name" value="soft"/>
		<param name="enable-100rel" value="true" enabled="false"/>
		<param name="disable-srv503" value="true" enabled="false"/>
		<param name="manage-presence" value="true"/>
		<!-- This could be set to "passive" -->
		<param name="local-network-acl" value="localnet.auto"/>
		<param name="apply-nat-acl" value="nat.auto"/>
		<param name="apply-inbound-acl" value="providers"/>
		<param name="apply-register-acl" value="providers" enabled="false"/>
		<!-- used to share presence info across sofia profiles
		 manage-presence needs to be set to passive on this profile
		 if you want it to behave as if it were the internal profile
		 for presence.
		-->
		<!-- Name of the db to use for this profile -->
		<param name="dbname" value="share_presence" enabled="false"/>
		<param name="presence-hosts" value="$${domain}" enabled="false"/>
		<param name="force-register-domain" value="$${domain}" enabled="false"/>
		<!--all inbound reg will stored in the db using this domain -->
		<param name="force-register-db-domain" value="$${domain}" enabled="false"/>
		<!-- ************************************************* -->

		<param name="aggressive-nat-detection" value="false" enabled="false"/>
		<param name="inbound-codec-negotiation" value="generous"/>
		<param name="nonce-ttl" value="60"/>
		<param name="auth-calls" value="true"/>
		<param name="auth-subscriptions" value="true"/>
		<param name="inbound-late-negotiation" value="true" enabled="false"/>
		<!--
		DO NOT USE HOSTNAMES, ONLY IP ADDRESSES IN THESE SETTINGS!
		-->
		<param name="rtp-ip" value="$${local_ip_v4}"/>
		<param name="sip-ip" value="$${local_ip_v4}"/>
		<param name="ext-rtp-ip" value="$${external_rtp_ip}"/>
		<param name="ext-sip-ip" value="$${external_sip_ip}"/>
		<param name="rtp-timeout-sec" value="300" description="deprecated" enabled="false"/>
		<param name="rtp-hold-timeout-sec" value="1800" description="deprecated" enabled="false"/>
		<param name="media_timeout" value="300" enabled="true"/>
		<param name="media_hold_timeout" value="1800" enabled="true"/>
		<param name="enable-3pcc" value="true" enabled="false"/>

		<!-- TLS: disabled by default, set to "true" to enable -->
		<param name="tls" value="$${external_ssl_enable}"/>
		<!-- Set to true to not bind on the normal sip-port but only on the TLS port -->
		<param name="tls-only" value="false"/>
		<!-- additional bind parameters for TLS -->
		<param name="tls-bind-params" value="transport=tls"/>
		<!-- Port to listen on for TLS requests. (5081 will be used if unspecified) -->
		<param name="tls-sip-port" value="5081"/>
		<!-- Location of the agent.pem and cafile.pem ssl certificates (needed for TLS server) -->
		<param name="tls-cert-dir" value="$${external_ssl_dir}"/>
		<!-- Optionally set the passphrase password used by openSSL to encrypt/decrypt TLS private key files -->
		<param name="tls-passphrase" value=""/>
		<!-- Verify the date on TLS certificates -->
		<param name="tls-verify-date" value="false"/>
		<!-- TLS verify policy, when registering/inviting gateways with other servers (outbound) or handling inbound registration/invite requests how should we verify their certificate -->
		<!-- set to 'in' to only verify incoming connections, 'out' to only verify outgoing connections, 'all' to verify all connections, also 'subjects_in', 'subjects_out' and 'subjects_all' for subject validation. Multiple policies can be split with a '|' pipe -->
		<param name="tls-verify-policy" value="none"/>
		<!-- Certificate max verify depth to use for validating peer TLS certificates when the verify policy is not none -->
		<param name="tls-verify-depth" value="2"/>
		<!-- If the tls-verify-policy is set to subjects_all or subjects_in this sets which subjects are allowed, multiple subjects can be split with a '|' pipe -->
		<param name="tls-verify-in-subjects" value=""/>
		<!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 -->
		<param name="tls-version" value="$${sip_tls_version}"/>
		<!-- TLS ciphers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH -->
		<param name="tls-ciphers" value="$${sip_tls_ciphers}" enabled="false"/>

		<!-- suppress CNG on this profile or per call with the 'suppress_cng' variable -->
		<param name="suppress-cng" value="true" enabled="true"/>

		<!--session timers -->
		<param name="session-timeout" value="0" enabled="true"/>
		<param name="enable-timer" value="false" enabled="true"/>
		<param name="minimum-session-expires" value="0" enabled="false"/>

		<!--If you have ODBC support and a working dsn you can use it instead of SQLite-->
		<param name="odbc-dsn" value="$${dsn}" enabled="false"/>

		<param name="dtmf-type" value="rfc2833"/>
		<param name="zrtp-passthru" value="true"/>
		
		<!-- save session in the database for option to restore SIP UDP calls -->
		<param name="track-calls" value="false"/>
	</settings>
</profile>