view mod_disable_tls/mod_disable_tls.lua @ 4148:34a2e8796cff

mod_firewall: Update chain name for consistency We keep the old JUMP CHAIN for compat, and in case we add internal content checking rules in the future.
author Matthew Wild <mwild1@gmail.com>
date Mon, 21 Sep 2020 15:45:53 +0100
parents 25be5fde250f
children
line wrap: on
line source

local disable_tls_ports = module:get_option_set("disable_tls_ports", {});

module:hook("stream-features", function (event)
	if disable_tls_ports:contains(event.origin.conn:serverport()) then
		module:log("error", "Disabling TLS for client on port %d", event.origin.conn:serverport());
		event.origin.conn.starttls = false;
	end
end, 1000);