1 #summary Prevent communication between hosts

     2 #labels Stage-Beta

     3 

     4 = Introduction =

     5 

     6 In some environments it is desirable to isolate one or more hosts, and prevent communication with external, or even other internal domains.

     7 

     8 Loading mod_isolate_host on a host will prevent all communication with JIDs outside of the current domain, though it is possible to configure exceptions.

     9 

    10 *Note:* if you just want to prevent communication with external domains, this is possible without a plugin. See [http://prosody.im/doc/s2s#disabling Prosody: Disabling s2s] for more information.

    11 

    12 This module was sponsored by [http://exa-networks.co.uk/ Exa Networks].

    13 

    14 = Configuration =

    15 

    16 To isolate all hosts by default, add the module to your global modules_enabled:

    17 

    18 {{{

    19     modules_enabled = {

    20         ...

    21         "isolate_host";

    22         ...

    23     }

    24 }}}

    25 

    26 Alternatively you can isolate a single host by putting a modules_enabled line under the VirtualHost directive:

    27 

    28 {{{

    29     VirtualHost "example.com"

    30         modules_enabled = { "isolate_host" }

    31 }}}

    32 

    33 After enabling the module, you can add further options to add exceptions for the isolation:

    34 

    35 || *Option* || *Description* ||

    36 || isolate_except_domains || A list of domains to allow communication with. ||

    37 || isolate_except_users || A list of user JIDs allowed to bypass the isolation and communicate with other domains. ||

    38 

    39 *Note:* Admins of hosts are always allowed to communicate with other domains

    40 

    41 = Compatibility =

    42 || 0.9 || Works ||