[ejabberd] acl by IP address + auto add users in userlist

Andreas andreas at unstable.nl
Thu Apr 3 14:16:37 MSD 2008

On Wed, Apr 02, 2008 at 10:30:58PM -0300, Pedro Zorzenon Neto wrote:
> I'll solve problems of Internet in-band registering adding a rule in 
> iptables to drop all packages with the string jabber:iq:register that 
> come not from internal network.
> It will be a workaround, not a real solution, but it seems that will work.

That doesn't help if people are using TLS or SSL (which they should).

Another way would be to disable inband registration, and use: 

	ejabberdctl register [user] [pass]

(Possibly as part of some php script on the intranet).

    -- Andreas	[ http://unstable.nl | gopher://unstable.nl ]

More information about the ejabberd mailing list