[jdev] spoofing "from" attributes

Tue Feb 22 12:28:59 CST 2005

Richard Dobson wrote:
>> This is what I'm not able to do. The 'service unvailable' error 
>> suggests me that this kind of spoofing should work, but either the s2s 
>> component does not support it or some option must set in the config file.
> 
> 
> But if its going to s2s that means you are trying to deliver it to 
> another server, and if you are doing something that looks like its 
> spoofed it will get rejected, what are the exact messages you are trying 
> to send that are getting rejected?
> 

This is the message, which is sent back to the component as an error

<route to='sciasbat at jabber.linux.it'
   xmlns='http://jabberd.jabberstudio.org/ns/component/1.0'
   from='soap'>
   <message to='sciasbat at jabber.linux.it'
     xmlns='jabber:client' from='ooga at kamin.polito.it'>
     <body> ciao </body>
   </message>
</route>

this is the error:

<route to='soap'
   xmlns='http://jabberd.jabberstudio.org/ns/component/1.0'
   from='s2s'>
   <message to='ooga at kamin.polito.it'
    xmlns='jabber:client' from='sciasbat at jabber.linux.it'
    type='error'>
     <error code='503' type='cancel'>
       <service-unavailable 
xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'/>
     </error>
     <body> ciao </body>
   </message>
</route>

the user "ooga" does not exists on kamin, which is normally able to send 
messages to the other server, jabber.linux.it

(the component receives the same error also trying to spoof messages of 
existing users)

> But you must be at some stage or it would work, something must be wrong 
> with your configuration or what you are trying to send that is causing 
> it to get rejected.
> 
> Which suggests that your servers you are trying to test with are not 
> setup correctly and thus not even able to start a dialback attempt, can 
> normal users on your server send messages ok?

Yes, they can.

-- 
Fabio Forno, Ph.D. - Research Assistant
Politecnico di Torino - Dip. Automatica e Informatica
C.so Duca degli Abruzzi 24 - 10129 Torino (Italy)
Phone: +39 011 2276 102 - JabberId: sciasbat at jabber.linux.it