diff --git a/conf/autoload_configs/acl.conf.xml b/conf/autoload_configs/acl.conf.xml
index 655e2facf3..a1708a55f3 100644
--- a/conf/autoload_configs/acl.conf.xml
+++ b/conf/autoload_configs/acl.conf.xml
@@ -4,8 +4,9 @@
 	 These ACL's are automatically created on startup.
 
 	 rfc1918.auto  - RFC1918 Space
-	 nat.auto      - RFC1918 Minus your local lan.
+	 nat.auto      - RFC1918 Excluding your local lan.
 	 localnet.auto - ACL for your local lan.
+	 loopback.auto - ACL for your local lan.
     -->
 
     <list name="lan" default="allow">
diff --git a/conf/sip_profiles/internal.xml b/conf/sip_profiles/internal.xml
index 9761f92aa5..92dfcb4c3a 100644
--- a/conf/sip_profiles/internal.xml
+++ b/conf/sip_profiles/internal.xml
@@ -56,6 +56,11 @@
     <!--<param name="enable-100rel" value="true"/>-->
     <!--<param name="minimum-session-expires" value="120"/>-->
     <param name="apply-inbound-acl" value="domains"/>
+    <!--
+	This defines your local network, by default we detect your local network
+	and create this localnet.auto ACL for this.
+    -->
+    <param name="local-network-acl" value="localnet.auto"/>
     <!--<param name="apply-register-acl" value="domains"/>-->
     <!--<param name="dtmf-type" value="info"/>-->
     <param name="record-template" value="$${base_dir}/recordings/${caller_id_number}.${target_domain}.${strftime(%Y-%m-%d-%H-%M-%S)}.wav"/>
@@ -140,6 +145,12 @@
     <param name="inbound-reg-force-matching-username" value="true"/>
     <!-- on authed calls, authenticate *all* the packets not just invite -->
     <param name="auth-all-packets" value="false"/>
+    <!--
+	Possible options for ext-rtp-ip or ext-sip-ip 
+
+	auto     - Use guessed ip.
+	auto-nat - Use ip learned from NAT-PMP or UPNP
+    -->
     <!-- <param name="ext-rtp-ip" value="$${external_rtp_ip}"/> -->
     <!-- <param name="ext-sip-ip" value="$${external_sip_ip}"/> -->
     <!-- rtp inactivity timeout -->