File

mod_firewall: SUBSCRIBED: Flip subscription check to match documentation The documentation claims that this condition checks whether the recipient is subscribed to the sender. However, it was using the wrong method, and actually checking whether the sender was subscribed to the recipient. A quick poll of folk suggested that the documentation's approach is the right one, so this should fix the code to match the documentation. This should also fix the bundled anti-spam rules from blocking presence from JIDs that you subscribe do (but don't have a mutual subscription with).

---
labels:
summary: Workaround for servers doing EXTERNAL without proper stream headers
...

Introduction
============

This module is a workaround for servers that try to do s2s
authentication with certificates and SASL EXTERNAL, but do not send
correct stream headers. Notably Openfire versions since 3.7 or 3.8.