ejabberd - Comments for "transports no longer open for all"

solved

jeroen — Thu, 29 May 2008 19:52:47 +0000

We have solved this issue. The FQDN of the transport must be equal to the IP of the Jabber server, not the IP of the transport server. In ejabberd.cfg the hostname of the transport is used (in the ejabberd_service statement). This is a bit confusing because one may wonder how the jabber server will know where the transport server is. I assume that the transport connects through the defined port with the password set in ejabberd.cfg and that's how the jabber server identifies the transport server.
When the transport server is on the same machine as the jabber server one will not have any transport configuration problems because then it's very straightforward.

same problem after DNS correction

jeroen — Mon, 05 May 2008 21:51:39 +0000

Ok, my DNS now contains:

For the server running the transport services:
msn.jabber.anywise.com > 81.175.86.226
aim-icq.jabber.anywise.com > 81.175.86.226
jit-icq.jabber.anywise.com > 81.175.86.226

For the jabber server:
jabber.anywise.com > 81.175.86.202
*.jabber.anywise.com > 81.175.86.202

Still, when I discover services from an account on this jabber server I can see and use the transport. When I do this from another account (I tried jabber.org and jabber.se and browsed jabber.anywise.com) I see the transports listed but they are not available. Reply from the server (using Psi):

[iq from= msn.jabber.anywise.com type=error xml:lang=en to=jeroen@jabber.se/Macintosh-2 id=ab76a ]
[query xmlns=jabber:iq:agents/]
[error type=cancel code=404 ]
[remote-server-not-found xmlns=urn:ietf:params:xml:ns:xmpp-stanzas/]
[/error]
[/iq]

Check DNS and firewall

mfoss — Mon, 05 May 2008 20:55:16 +0000

The problem is probably not related to external transports, but related to services. Specifically the DNS configuration for those services.

I can connect from my home machine to the jabber server:

$ telnet jabber.anywise.com 5269
Trying 81.175.86.202...
Connected to jabber.anywise.com.
Escape character is '^]'.

But I can't connect to the MUC service, for example:

$ telnet conference.jabber.anywise.com 5269
Trying 81.175.86.226...
telnet: Unable to connect to remote host: Connection refused

Check this FAQ: Users from Other Servers Cannot Reach my Components