ejabberd 隐私列表(xep-0016)意外行为

ejabberd 隐私列表(xep-0016)意外行为

为了抵御 xmpp 垃圾邮件,我使用 xep-0016 隐私列表,该列表允许来自相互订阅的联系人(以及来自 muc 服务器)的消息,并且默认拒绝:

<!-- Outgoing Sun 15 Jul 2018 14:19:00 CEST -->
<iq xmlns="jabber:client" type="get" id="1ebf80d8-0997-479a-803f-46eb5e635001" from="[email protected]/gajim.1ZZTNLAD">
<query xmlns="jabber:iq:privacy" />
</iq>

<!-- Outgoing Sun 15 Jul 2018 14:19:00 CEST -->
<r xmlns="urn:xmpp:sm:3" />

<!-- Incoming Sun 15 Jul 2018 14:19:00 CEST -->
<iq xml:lang='en' to='[email protected]/gajim.1ZZTNLAD' from='[email protected]' type='result' id='1ebf80d8-0997-479a-803f-46eb5e635001'>
<query xmlns='jabber:iq:privacy'>
<active name='Antispam'/>
<default name='Antispam'/>
<list name='Antispam'/>
</query>
</iq>

<!-- Incoming Sun 15 Jul 2018 14:19:00 CEST -->
<r xmlns='urn:xmpp:sm:3'/>

<!-- Outgoing Sun 15 Jul 2018 14:19:00 CEST -->
<a xmlns="urn:xmpp:sm:3" h="127" />

<!-- Incoming Sun 15 Jul 2018 14:19:00 CEST -->
<a h='106' xmlns='urn:xmpp:sm:3'/>

<!-- Outgoing Sun 15 Jul 2018 14:19:50 CEST -->
<iq xmlns="jabber:client" type="get" id="37a7c289-1e95-4531-b892-7c46d8bf6f07" from="[email protected]/gajim.1ZZTNLAD">
<query xmlns="jabber:iq:privacy">
<list name="Antispam" />
</query>
</iq>

<!-- Outgoing Sun 15 Jul 2018 14:19:50 CEST -->
<r xmlns="urn:xmpp:sm:3" />

<!-- Incoming Sun 15 Jul 2018 14:19:50 CEST -->
<iq xml:lang='en' to='[email protected]/gajim.1ZZTNLAD' from='[email protected]' type='result' id='37a7c289-1e95-4531-b892-7c46d8bf6f07'>
<query xmlns='jabber:iq:privacy'>
<list name='Antispam'>
<item order='9' action='deny'/>
<item value='both' type='subscription' order='8' action='allow'/>
<item value='conference.average.org' type='jid' order='3' action='allow'/>
<item value='conference.jabber.ru' type='jid' order='2' action='allow'/>
<item value='conference.siacs.eu' type='jid' order='1' action='allow'/>
</list>
</query>
</iq>

这在 jabberd2 服务器上按预期工作。但在 ejabberd 服务器上,它会阻止所有通信。当我向联系人(订阅“Both”)发送任何内容时,我收到此错误:

[14:04:37] ‎egc‎: peep
‎[14:05:08] ‎Your active privacy list has denied the routing of this stanza.

怎么了?

答案1

嗯,看起来漏洞我已经提交了拉取请求

相关内容