Mercurial > prosody-modules

comparison mod_s2s_never_encrypt_blacklist/mod_s2s_never_encrypt_blacklist.lua @ 417:8fe1b47c9bde

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
mod_s2s_never_encrypt_blacklist: add option to check for the dull s2s session ip (OpenFire bork bork).
author Marco Cirillo <maranda@lightwitch.org>
date Sat, 03 Sep 2011 00:12:28 +0000
parents e4d33cdfed21
children 2b71ba2739e0
comparison
equal deleted inserted replaced
416:10ff12fa82e2 417:8fe1b47c9bde
1 -- Filter out servers which gets choppy and buggy when it comes to starttls. 1 -- Filter out servers which gets choppy and buggy when it comes to starttls.
2 2
3 local bad_servers = module:get_option_set("tls_s2s_blacklist"); 3 local bad_servers = module:get_option_set("tls_s2s_blacklist");
4 local bad_servers_ip = module:get_option_set("tls_s2s_blacklist_ip");
4 5
5 local function disable_tls_for_baddies_in(event) 6 local function disable_tls_for_baddies_in(event)
6 if bad_servers:contains(event.origin.to_host) then event.origin.conn.starttls = nil; end 7 if bad_servers:contains(event.origin.to_host) or bad_servers_ip:contains(event.origin.conn:ip())
8 then event.origin.conn.starttls = nil; end
7 end 9 end
8 10
9 local function disable_tls_for_baddies_out(event) 11 local function disable_tls_for_baddies_out(event)
10 if bad_servers:contains(event.origin.from_host) then event.origin.conn.starttls = nil; end 12 if bad_servers:contains(event.origin.from_host) or bad_servers_ip:contains(event.origin.conn:ip())
13 then event.origin.conn.starttls = nil; end
11 end 14 end
12 15
13 module:hook("s2s-stream-features", disable_tls_for_baddies_out, 10) 16 module:hook("s2s-stream-features", disable_tls_for_baddies_out, 10)
14 module:hook("stanza/http://etherx.jabber.org/streams:features", disable_tls_for_baddies_in, 510) 17 module:hook("stanza/http://etherx.jabber.org/streams:features", disable_tls_for_baddies_in, 510)
15 18