Hello All. Are there any web-access BBSs, other than EleWeb...
...WildCat is too expensive just for a hobby.
Telnet sends your password, everything that the remote system sends for disp on your screen and everything that you type, to and from the remote host in unencrypted clear text. How is this any more secure than an unencrypted HTTP connection?
A Web interface to a BBS could also be made less insecure by making use of S and HTTPS. A text-based BBS could be made less insecure by enabling SSH and disabling Telnet.
What's the hole? I don't see it. If you're referring to the ability for a person to use another person's name on another node, that's nothing new or specific to web bbses....
Quoting Andy Ball from a message to Michel Samson <--
use of SSL and HTTPS. A text-based BBS could be made less insecure
by enabling SSH and disabling Telnet.
What's the hole? I don't see it. If you're referring to the ability for a person to use another person's name on another node, that's nothing new or specific to web bbses....
Andy Ball wrote to Michel Samson <=-
Hello Michel,
That would not work for the many, many people who are assigned IP addresses dynamically (not just dial-up users, but also many DSL customers).
SSH supercedes telnet for applications where security is a concern. Combining them is odd.
Why reinvent the wheel?
--- BBBS/NT v4.01 Flag-5
# Origin: FamilyNet Sponsored by http://www.christian-wellness.net (8:8/2)
* Origin: BBS Networks @ www.bbsnets.com 808-839-6036 (1:10/345)
I've used SSH to connect to the system then telnet into the board across t LAN. Seemed pretty secure for what I was doing.
wow. that is quite a security flaw. isn't that something that can be easil fixed? apparently, it happened by accident in this case (in michael's case <<<====== end quote
This isn't a security issue per se; it's an artifact of running individual unconnected systems.
Telnet through an SSH tunnel? Effective, yet somehow perverse (but it mak sense if your BBS machine lacks support for SSH itself). I do something similar, tunnelling VNC through SSH to control computers at a remote site.
MS> ...i might even imagine other ways to adapt plain old ~TelNet~
> sessions without any newer protocols (via additionnal security
> macros/utilities, perhaps?)...
Why reinvent the wheel?
Jon Watson wrote to Andy Ball <=-
Andy Ball wrote to Sean Dennis:
<snip>
--- BBBS/NT v4.01 Flag-5
# Origin: FamilyNet Sponsored by http://www.christian-wellness.net (8:8/2)
* Origin: BBS Networks @ www.bbsnets.com 808-839-6036 (1:10/345)
Is this allowed? Two Origin lines? I'm not bitching, just curious
because if so
then I have to redo my BBS <-> Web replicator. Not a biggy, but my
preg search
just looks for Origin...not * Origin.
Telnet -> Web -> SSH, which is nonsense. Those technologies are simplyalternative means of connecting to a BBS. None are compulsory and there is certainly no need to progress through them in any kind of sequence.
SSH supercedes telnet for applications where security is a concern. Combinin them is odd.
Any client platform capable of running SSH should also be capable of running SFTP. It may also be possible to use traditional BBS file transfer protocol such as XModem, Kermit etc. over an SSH connection.
Telnet through an SSH tunnel? Effective, yet somehow perverse (but it makes sense if your BBS machine lacks support for SSH itself). I do something similar, tunnelling VNC through SSH to control computers at
a remote site.
SFTP. It may also be possible to use traditional BBS file transfer protoc such as XModem, Kermit etc. over an SSH connection.
JON WATSON wrote to ANDY BALL <=-
Is this allowed? Two Origin lines? I'm not bitching, just curious
JON WATSON wrote to ANDY BALL <=-
Is this allowed? Two Origin lines? I'm not bitching, just curious
Yeah, it is allowed for gates. Perfectly legal. :)
wow. that is quite a security flaw. isn't that something that can be easil fixed? apparently, it happened by accident in this case (in michael's case
unconnected systems.
SFTP. It may also be possible to use traditional BBS file transfer prot such as XModem, Kermit etc. over an SSH connection.
leputty, available on sourceforge, i believe, has zmodem support as well as ssh1 and ssh2. for command-line ssh, there's bterm.. but it only supports ssh1, and is very slow.
leputty, available on sourceforge, i believe, has zmodem support as wel ssh1 and ssh2. for command-line ssh, there's bterm.. but it only suppor ssh1, and is very slow.And, of course, ZOC.
Is this allowed? Two Origin lines? I'm not bitching, just curious because if so
then I have to redo my BBS <-> Web replicator. Not a biggy, but my preg search
just looks for Origin...not * Origin.
That depends, on if its a gated message. Looks like its a message that originated in FamilyNet (8:8/2) and came through BBS Networks
(1:10/345).
Yeah, it is allowed for gates. Perfectly legal. :)
Only the Origin line with the '*' is a valid Origin line.
ROB SWINDELL wrote to SEAN DENNIS <=-
Only the Origin line with the '*' is a valid Origin line.
Only the Origin line with the '*' is a valid Origin line.
OK....will there only ever be one * Origin line? Is it spec that if there ar more that they start with # ?
Only the Origin line with the '*' is a valid Origin line.
OK....will there only ever be one * Origin line? Is it spec that if there ar more that they start with # ?
So, because you can't back up your suggestions or answer any of my perfect reasonable questions you're going to ignore my posts? Fine! You have pro that you belong back on my twit list in any case.
Only the Origin line with the '*' is a valid Origin line.
According to FTS-4, yes.
OK....will there only ever be one * Origin line? Is it spec that if there more that they start with # ?
No, but that is a common practice.
<<<====== end quote
OK, cool. So...before I go jumping into my code.....
For the sake of argument, am I required to keep all origin lines, or just th one starting with the '*'?
======>>> Rob Swindell, 1:0/0 wrote:
Originally to: Jon Watson
I would keep (and convert) any existing origin lines as it helps track gated messages and other potential problems.
<<<====== end quote
Convert? How so?
Convert? How so?
Replace the '*' with a '#' (before adding your own Origin line).
Example (in C):
if(!strncmp((char *)buf+l," * Origin: ",11))
buf[l+1]='#'; /* Convert " * Origin" into " # Origin" */
<snip>
--- BBBS/NT v4.01 Flag-5
# Origin: FamilyNet Sponsored by http://www.christian-wellness.net
(8:8/2)
* Origin: BBS Networks @ www.bbsnets.com 808-839-6036 (1:10/345)
Is this allowed? Two Origin lines?
I'm not bitching, just curious because if so then I have to redo
my BBS <-> Web replicator. Not a biggy, but my preg search just
looks for Origin...not * Origin.
Is this allowed? Two Origin lines? I'm not bitching, just curious CH>> JW> because if so
then I have to redo my BBS <-> Web replicator. Not a biggy, but my CH>> JW> preg search
just looks for Origin...not * Origin.
That depends, on if its a gated message. Looks like its a message that CH>> originated in FamilyNet (8:8/2) and came through BBS Networks
(1:10/345).
Crap...OK....which one is considered the 'real' originator?
I'm not sure I can keep both...hmm...
Only the Origin line with the '*' is a valid Origin line.
OK....will there only ever be one * Origin line?
Is it spec that if there are more that they start with # ?
OK, cool. So...before I go jumping into my code.....
For the sake of argument, am I required to keep all origin
lines, or just the one starting with the '*'?
Convert? How so?
Replace the '*' with a '#' (before adding your own Origin
line).
PS - I just installed webalizer for kicks today on my server.
I had no idea that I was getting 40 some odd unique sites per
day. Guess the web forums are more popular than I thought :)
Convert? How so?
Replace the '*' with a '#' (before adding your own Origin
line).
but only when you are gateing echomail from one network to another...
the leading space and star are significant as well as the defactostandard
use of the hash mark for additional origin lines on gated messages...
' * Origin: '
is what should be keyed on as well as a confirmation of locating the proper line by looking to the end of the line for a FTN formatted address within the parenthesis... ;)
PS - I just installed webalizer for kicks today on my server.
I had no idea that I was getting 40 some odd unique sites per
day. Guess the web forums are more popular than I thought :)
they may be spiders from the search engines as well as spammer spiders looking for email addresses "in the clear" that they can harvest... it is also possible that they are infected machines trying to infect your server... and then there are the whitehat machines checking that your server isn't already infected ;)
Actually, when exporting any mail to an FTN network. :-) If a user types
* Origin: some bogus value (using a '*')
Re: Telnet Vs SSH
By: mark lewis to Rob Swindell on Wed Nov 03 2004 09:57 am
Convert? How so?
Replace the '*' with a '#' (before adding your own Origin
line).
but only when you are gateing echomail from one network to another...
Actually, when exporting any mail to an FTN network. :-) If a
user types
* Origin: some bogus value (using a '*')
Actually, when exporting any mail to an FTN network. :-) If a user types
* Origin: some bogus value (using a '*')
haha.. it worked, 'cuz the message stopped right there.
Convert? How so?
Replace the '*' with a '#' (before adding your own Origin
line).
but only when you are gateing echomail from one network to another...
Actually, when exporting any mail to an FTN network. :-) If a
user types
* Origin: some bogus value (using a '*')
there's where your message stopped... apparently your system didn't detect t above invalid origin line and add a proper and valid origin line ;) the abo isn't proper or valid because it is missing a FTN formatted address within t ()'s ;)
ya gotta have both ends of the line correct for it to be valid... ;)
PS - I just installed webalizer for kicks today on my server. I had no
Actually, when exporting any mail to an FTN network. :-) If
a user types
* Origin: some bogus value (using a '*')
haha.. it worked, 'cuz the message stopped right there.
Actually, when exporting any mail to an FTN network. :-)If a user types
* Origin: some bogus value (using a '*')
haha.. it worked, 'cuz the message stopped right there.
Well I think it's only a valid Origin line if it follows a
tear line (---).
there's where your message stopped... apparently your
system didn't detect the above invalid origin line and
add a proper and valid origin line ;) the about isn't
proper or valid because it is missing a FTN formatted
address within the ()'s ;)
ya gotta have both ends of the line correct for it to be valid... ;)
Actually, it's got to follow a tear line in order to be a
valid origin line.
PS - I just installed webalizer for kicks today on my server. I had no
Webalizer? What would that be?
PS - I just installed webalizer for kicks today on my server. I had no
It's a 'stats' program for your web server. It parses the apache log and sho a really nice break down of hits, sites, visits, who what where and when...i pretty cool.
PS - I just installed webalizer for kicks today on my server. I had no
It's a 'stats' program for your web server. It parses the apache log and
shows a really nice break down of hits, sites, visits, who what where and
when...it's pretty cool.
noPS - I just installed webalizer for kicks today on my server. I had
It's a 'stats' program for your web server. It parses the apache logand
shows a really nice break down of hits, sites, visits, who what whereand
when...it's pretty cool.
Hi Jon,
Where might I find it?
Sysop: | digital man |
---|---|
Location: | Riverside County, California |
Users: | 1,037 |
Nodes: | 15 (1 / 14) |
Uptime: | 17:37:43 |
Calls: | 845 |
Calls today: | 13 |
Files: | 95,177 |
D/L today: |
1,542 files (156M bytes) |
Messages: | 464,782 |