|
1782
|
1 #summary Prevent communication between hosts
|
|
|
2 #labels Stage-Beta
|
|
|
3
|
|
|
4 = Introduction =
|
|
|
5
|
|
|
6 In some environments it is desirable to isolate one or more hosts, and prevent communication with external, or even other internal domains.
|
|
|
7
|
|
|
8 Loading mod_isolate_host on a host will prevent all communication with JIDs outside of the current domain, though it is possible to configure exceptions.
|
|
|
9
|
|
|
10 *Note:* if you just want to prevent communication with external domains, this is possible without a plugin. See [http://prosody.im/doc/s2s#disabling Prosody: Disabling s2s] for more information.
|
|
|
11
|
|
|
12 This module was sponsored by [http://exa-networks.co.uk/ Exa Networks].
|
|
|
13
|
|
|
14 = Configuration =
|
|
|
15
|
|
|
16 To isolate all hosts by default, add the module to your global modules_enabled:
|
|
|
17
|
|
|
18 {{{
|
|
|
19 modules_enabled = {
|
|
|
20 ...
|
|
|
21 "isolate_host";
|
|
|
22 ...
|
|
|
23 }
|
|
|
24 }}}
|
|
|
25
|
|
|
26 Alternatively you can isolate a single host by putting a modules_enabled line under the VirtualHost directive:
|
|
|
27
|
|
|
28 {{{
|
|
|
29 VirtualHost "example.com"
|
|
|
30 modules_enabled = { "isolate_host" }
|
|
|
31 }}}
|
|
|
32
|
|
|
33 After enabling the module, you can add further options to add exceptions for the isolation:
|
|
|
34
|
|
|
35 || *Option* || *Description* ||
|
|
|
36 || isolate_except_domains || A list of domains to allow communication with. ||
|
|
|
37 || isolate_except_users || A list of user JIDs allowed to bypass the isolation and communicate with other domains. ||
|
|
|
38
|
|
|
39 *Note:* Admins of hosts are always allowed to communicate with other domains
|
|
|
40
|
|
|
41 = Compatibility =
|
|
|
42 || 0.9 || Works || |
