yet another NAT post... pfsense, DMZ, dynamic ip...

[dutler]

I think I have an OK understanding of NAT in general so I think my questions are more about configuration than NAT specifically. I have read through quite a few threads and referneces but still do nto understand the following ....

In context to piaf local to my lan, but nat'd via a shared dynamic public ip address:

1. Using the ip.sh script to keep paif updated on lasted public IP and I configure the localnet in sip_nat.conf, my external SIP trunks will get the correct external IP but my IP phones local to piaf will get local IP?
2. What about remote IP phones that are douple nat'd?
3. On my firewall I need to port foreword for inbound traffic, but what about outbound?

In context of piaf in a differnt subnet (DMZ) to my LAN, but still nat'd with a single shared and dynamic public IP:

1. If the is.sh script is used, than the IP phones on the nieboring lan need to be able to resolve to the DMZ IP address? I am using pfsense, so I can do a domain name overide should i use external host rather than exteralip.....
2. Does anyone have experience with pfsence and siproxd?

Thanks,