Changeset 626b446


Ignore:
Timestamp:
2005-12-02T11:30:03Z (14 years ago)
Author:
Wilmer van der Gaast <wilmer@…>
Branches:
master
Children:
027d2eb
Parents:
e5663e0
Message:

The Jabber module now only accepts a limited range of ports (5222 and 5223),
so it can't be abused as a portscanner. Thanks to Peter van Dijk (Habbie)
for the report.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • protocols/jabber/jabber.c

    re5663e0 r626b446  
    590590        else if (port == -1 && ssl)
    591591                port = DEFAULT_PORT_SSL;
     592        else if (port != 5222 && port != 5223) {
     593                serv_got_crap(GJ_GC(gjc), "Only port numbers 5222 and 5223 are allowed for Jabber connections.");
     594                STATE_EVT(JCONN_STATE_OFF)
     595                return;
     596        }
    592597       
    593598        if (server == NULL)
Note: See TracChangeset for help on using the changeset viewer.