[jadmin] Messages from unknown sender

[Leslie G. Seigneur]

I am concerned that I may have a security issue with my jabber server.  I have been receiving chat messages that appear to be coming from the server itself not from a particular user.  Let's say the name of my jabber server is jabberserver.org.  Sometimes I see chat windows that say the sender is jabberserver.org, not any particular user.  Can someone tell me how a user(s) could be sending messages that appear to be coming from the server itself?  I am running jabberd2 vers. 2.0s8.  The Access Control section of my sm.xml file looks like this:

<!-- Access control information -->
  <aci>
    <!-- The JIDs listed here will get access to all restricted
         functions, regardless of restrictions further down -->
    <acl type='all'>
      <jid>me at jabberserver.org</jid>
    </acl>

    <!-- These JIDs can send broadcast messages (announce, motd) -->

    <acl type='broadcast'>
      <jid>me at jabberserver.org</jid>
    </acl>


    <!-- These JIDs will receive messages addressed to the sm itself
         (help requestes and such) -->
    <!--
    <acl type='messages'>
      <jid>support at localhost</jid>
    </acl>
    -->

    <!-- These JIDs can discover active user/session information -->
    <!--
    <acl type='disco'>
      <jid>me at jabberserver.org</jid>
    </acl>
    -->
  </aci>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.jabber.org/pipermail/jadmin/attachments/20080411/d7656906/attachment.htm