--- a/util/prosodyctl/check.lua	Sat Mar 05 20:32:47 2022 +0000
+++ b/util/prosodyctl/check.lua	Sat Mar 05 20:34:24 2022 +0000
@@ -122,7 +122,7 @@
 	local nonce = pre_result:get_attribute("nonce");
 
 	if not realm then
-		table.insert(result.warnings, "TURN server did not return an authentication realm");
+		table.insert(result.warnings, "TURN server did not return an authentication realm. Is authentication enabled?");
 	end
 	if not nonce then
 		table.insert(result.warnings, "TURN server did not return a nonce");
@@ -245,6 +245,10 @@
 		return result;
 	end
 
+	if result.external_ip.address ~= result.external_ip_pong.address then
+		table.insert(result.warnings, "TURN external IP vs relay address mismatch! Is the TURN server behind a NAT and misconfigured?");
+	end
+
 	--
 
 	return result;