It seems like voipo should be able to narrow the range of RTP ports on a per user basis.

Or even better, configure the switch (FreeSwitch I believe) to assign a very specific set of RTP ports for each user/account.

This would require a bit more initial setup on accounts, but in the long run I would expect it to pay off.