If more than one external address is given, this governs which address is selected. Valid values are none (the default) and route. The latter might require you to set user.privileged to root.
Note that route might create problems for ftp-clients using active ftp if the Dante bind extension is enabled for the ftp-client.