Jabber - OS settings

Start from configuring XMPP-related service records in DNS.

chat                IN   A        1.2.3.4
jabber              IN   CNAME    chat
conference          IN   CNAME    chat
irc                 IN   CNAME    chat
_jabber._tcp        IN   SRV      10 0 5269 chat.ourdom.com
_xmpp-server._tcp   IN   SRV      10 0 5269 chat.ourdom.com

BIND complains that SRV records must not point to CNAMEs. Therefore either xmpp/jabber should be replaced by mail or make them A-type records.

Addresses that potentially allow SSL should have alias mail.ourdom.com because certificate uses this name.

-A FWL -m state --state NEW -p tcp -m multiport --dports 5222,5223,5269 -j ACCEPT