XMPP Service Operators - 2021-09-15

Any Azure hosters? Stay safe... https://nitter.kavin.rocks/_msw_/status/1438014701107957766 ... 😞 https://nitter.kavin.rocks/amiluttwak/status/1437898746747097090

oof

funny :))

that's one hell of an RCE, just strip the authentication header and you're root. Handy 🙂

Reminds me of a similarly-functioning backdoor in some chinese routers

Hi, I installed prosody-modules on my debian 11 vps, enabled http_upload in config file (along with http), made a letsencrypt certificate for upload. subdomain, and made maximum size of uploaded file to 10MiB (and it shows all of these is correct on conversations app and http_upload and maximum size is correct) but I still can't send any files. Does anybody knwo where I made a mistake?

Did you open the ports?

Any error?

> Did you open the ports? > Any error? I did "ufw allow in XMPP" any port remains in this situation?

Also I serve an Nginx site at the same time

you probably need 5443 or similar per the config

or netstat -tupln

> Any error? Nothing in the systemd-journald or "systemctl status prosody".

> you probably need 5443 or similar per the config > or netstat -tupln I don't remember right now what ports XMPP list in ufw opens, but I think it opens all the default ports (and I didn't changed ports in config)

ufw probably only opens 5222 and 5269

> ufw probably only opens 5222 and 5269 I will check that.

Thanks.

you can alternatively have your nginx reverse proxy to prosody's http port

> you can alternatively have your nginx reverse proxy to prosody's http port Also considered that, soon I'll get to console and tshoot.

Thanks.