annotate mod_s2s_whitelist/README.markdown @ 4127:e9e10ec1b91c

mod_firewall: Add checkcerts option for HTTP lists, cert verification disabled when SNI unsupported This provides a balance between security and usability. SNI is supported in Prosody trunk and in Prosody 0.11 from commit 30d3f6f85eb8 (scheduled for 0.11.7).
author Matthew Wild <mwild1@gmail.com>
date Tue, 15 Sep 2020 11:49:55 +0100
parents 6e5bde0879ad
children 313937349fbc
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
3155
6e5bde0879ad mod_s2s_whitelist: Add a README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 This module lets you block connections to any remote servers not on a
6e5bde0879ad mod_s2s_whitelist: Add a README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2 whitelist.
6e5bde0879ad mod_s2s_whitelist: Add a README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3
6e5bde0879ad mod_s2s_whitelist: Add a README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
4 ``` {.lua}
6e5bde0879ad mod_s2s_whitelist: Add a README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
5 s2s_whitelist = {
6e5bde0879ad mod_s2s_whitelist: Add a README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
6 "example.org",
6e5bde0879ad mod_s2s_whitelist: Add a README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
7 }
6e5bde0879ad mod_s2s_whitelist: Add a README
Kim Alvefur <zash@zash.se>
parents:
diff changeset
8 ```