Dnia 2012-03-14, śro o godzinie 15:26 +0000, Michael Humphries-Dolnick pisze: > Yes, I thought of that, but IIRC after a connection is initiated, the > daemon does a dialback validation;
Exactly. s2s connections are uni-directional. Even if the s2s connection is initiated locally it creates outbound connection, and waits for incoming connection from the other server. All outgoing packets are going via outbound connection, and incoming packets via inbound connection. (Of course normal packets are allowed only after successful dialback keys exchange.) > the initial connection would be OK with the RELATED,ESTABLISHED but > then I think dialback validation would get blocked (although I haven't > tested this). Does this follow what you know of how s2s behaves? This might be possible if you have a proper firewall module implementing XMPP s2s as RELATED. Similarly how the module for FTP works adding RELATED connections support. Do check, maybe your firewall already supports XMPP aplication level protocol. -- Tomasz Sterna Instant Messaging Consultant : Open Source Developer http://tomasz.sterna.tv/ http://www.xiaoka.com/portfolio
