Re: the nothing to hide a
By: MRO to Nightfox on Tue Feb 15 2022 06:20 pm

> > Yep.. Manye BBSes today have web interfaces where the public forum
>
> that's why guest access to that shit should be turned off.

Where is an example of this? So far, I only know of MajorBBS that puts the BBS messages in a web forum as well. What BBSes do you know that have their messages web accessible?

---
■ Synchronet ■ Final Zone BBS - finalzone.ddns.net - www.xadara.com

Re: the nothing to hide a
By: Phigan to MRO on Sat Feb 26 2022 09:25 pm

Ph> Where is an example of this? So far, I only know of MajorBBS that puts the BBS messages in a web forum as well. What BBSes do
Ph> you know that have their messages web accessible?

Synchronet itself does this.

Mewcenary.

---
■ Synchronet ■ Extricate BBS - bbs.extricate.org

Re: the nothing to hide a
By: Phigan to MRO on Sat Feb 26 2022 09:25 pm

> Re: the nothing to hide a
> By: MRO to Nightfox on Tue Feb 15 2022 06:20 pm
>
> > > Yep.. Manye BBSes today have web interfaces where the public forum
>
> > that's why guest access to that shit should be turned off.
>
> Where is an example of this? So far, I only know of MajorBBS that puts the
> BBS messages in a web forum as well. What BBSes do you know that have their
> messages web accessible?

Most Synchronet BBSes (e.g. web.synchro.net).
--
digital man (rob)

Sling Blade quote #20:
Doyle: Hey is this the kind of retard that drools and rubs shit in his hair?
Norco, CA WX: 50.4°F, 24.0% humidity, 0 mph NE wind, 0.00 inches rain/24hrs
---
■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net

-=> Mewcenary wrote to Phigan <=-

Ph> Where is an example of this? So far, I only know of MajorBBS that puts the
Me> BBS messages in a web forum as well. What BBSes do
Ph> you know that have their messages web accessible?

Me> Synchronet itself does this.

Well, assuming the sysop wants it to.

My BBS is not web-accessible.

.... Gone crazy, be back later, please leave message.
--- MultiMail/Linux v0.52
� Synchronet � Palantir BBS * palantirbbs.ddns.net * Pensacola, FL

Re: the nothing to hide a
By: Phigan to MRO on Sat Feb 26 2022 09:25 pm

> Re: the nothing to hide a
> By: MRO to Nightfox on Tue Feb 15 2022 06:20 pm
>
> > > Yep.. Manye BBSes today have web interfaces where the public forum
>
> > that's why guest access to that shit should be turned off.
>
> Where is an example of this? So far, I only know of MajorBBS that puts the B
> messages in a web forum as well. What BBSes do you know that have their
> messages web accessible?
>

Echicken's one comes to mind, the first of all.

--
gopher://gopher.richardfalken.com/1/richardfalken

---
■ Synchronet ■ Palantir BBS * palantirbbs.ddns.net * Pensacola, FL

Re: the nothing to hide a
By: Phigan to MRO on Sat Feb 26 2022 09:25 pm

> Re: the nothing to hide a
> By: MRO to Nightfox on Tue Feb 15 2022 06:20 pm
>
> > > Yep.. Manye BBSes today have web interfaces where the public forum
>
> > that's why guest access to that shit should be turned off.
>
> Where is an example of this? So far, I only know of MajorBBS that puts the
> BBS messages in a web forum as well. What BBSes do you know that have their
> messages web accessible?

synchronet's web interface.
a2k bbs has a nice web interface for msgs too.
there's a few fidonet on the web websites.

i didnt see a majorbbs that puts bbs msgs in a web forum

i used to link my msg bases to vbulletin via nntp plugin and nightfox did also.
i got the idea from hax0r from hax0r's palace.
---
■ Synchronet ■ ::: BBSES.info - free BBS services :::

Re: the nothing to hide a
By: Arelor to Phigan on Sun Feb 27 2022 11:03 am
> Re: the nothing to hide a
> By: Phigan to MRO on Sat Feb 26 2022 09:25 pm
>
> > Re: the nothing to hide a
> > By: MRO to Nightfox on Tue Feb 15 2022 06:20 pm
>
> > > > Yep.. Manye BBSes today have web interfaces where the public forum
>
> > > that's why guest access to that shit should be turned off.
>
> > Where is an example of this? So far, I only know of MajorBBS that puts th
> > messages in a web forum as well. What BBSes do you know that have their
> > messages web accessible?
>
>
> Echicken's one comes to mind, the first of all.
>
> --
> gopher://gopher.richardfalken.com/1/richardfalken
>
And a nice layout that echicken's web forum interface has also. The best that
I know of.

Sincerely,
Jon Justvig
Stepping Stone BBS
telnet://steppingstonebbs.com

---
■ Synchronet ■ Stepping Stone BBS - steppingstonebbs.com

Re: the nothing to hide a
By: Arelor to Phigan on Sun Feb 27 2022 11:03 am

>> Where is an example of this? So far, I only know of MajorBBS that puts
>> the B messages in a web forum as well. What BBSes do you know that
>> have their messages web accessible?

Ar> Echicken's one comes to mind, the first of all.

Many Synchronet BBSes have their messages available via the web. Many Synchronet sysops choose to enable this by forwarding the web port to their BBS machine. But a sysop could easily disable that functionality by not forwarding the web port, and I'm sure there's also a setting in Synchronet to have it not run its web server.

Nightfox

---
■ Synchronet ■ Digital Distortion: digitaldistortionbbs.com

Re: the nothing to hide a
By: cr1mson to Arelor on Sun Feb 27 2022 01:39 pm

cr> And a nice layout that echicken's web forum interface has also. The best
cr> that I know of.

I used to run vBulletin on Apache with the plug-in that linked it with my BBS via Synchronet's news server, but I decided to stop doing that. I think echicken's webv4 started to approach the kind of functionality included in things like vBulletin, so I didn't really think it was worth it to continue paying for vBulletin's ongoing fees.

Nightfox

---
■ Synchronet ■ Digital Distortion: digitaldistortionbbs.com

Re: the nothing to hide a
By: Nightfox to Arelor on Sun Feb 27 2022 03:57 pm

Ni> not forwarding the web port, and I'm sure there's also a setting in
Ni> Synchronet to have it not run its web server.

Startup sbbs with "w-" to disable the webserver.

From the Windows Sync control panel there's a "Web" menu. Uncheck auto start.

- Andre

---
■ Synchronet ■ Radio Mentor BBS - bbs.radiomentor.org

Re: the nothing to hide a
By: cr1mson to Arelor on Sun Feb 27 2022 01:39 pm

> > > Re: the nothing to hide a
> > > By: MRO to Nightfox on Tue Feb 15 2022 06:20 pm
>
> > > > > Yep.. Manye BBSes today have web interfaces where the public
> > > > > forum
>
> > > > that's why guest access to that shit should be turned off.
>
> > > Where is an example of this? So far, I only know of MajorBBS that puts
> > > th messages in a web forum as well. What BBSes do you know that have
> > > their messages web accessible?
>
>
> > Echicken's one comes to mind, the first of all.
>
> > --
> > gopher://gopher.richardfalken.com/1/richardfalken
>
> And a nice layout that echicken's web forum interface has also. The best
> that I know of.
>

you really think that's better than steve wynn's at2k design?

https://i.imgur.com/G6X4CQK.png

https://i.imgur.com/PkPSmM7.png

https://i.imgur.com/hapUUWb.png

i know you've seen it.

i've always liked it. also it's nice and fast. i think it's the perfect design for a web interface to a bbs.
---
■ Synchronet ■ ::: BBSES.info - free BBS services :::

Re: the nothing to hide a
By: Nightfox to Arelor on Sun Feb 27 2022 03:57 pm

> Many Synchronet BBSes have their messages available via the web. Many
> Synchronet sysops choose to enable this by forwarding the web port to their
> BBS machine. But a sysop could easily disable that functionality by not
> forwarding the web port, and I'm sure there's also a setting in Synchronet
> to have it not run its web server.

no. you just turn off guest access to the msg base so the msg bases arent crawled by a search bot.
---
■ Synchronet ■ ::: BBSES.info - free BBS services :::

Re: the nothing to hide a
By: Nightfox to cr1mson on Sun Feb 27 2022 04:00 pm

> I used to run vBulletin on Apache with the plug-in that linked it with my
> BBS via Synchronet's news server, but I decided to stop doing that. I think
> echicken's webv4 started to approach the kind of functionality included in
> things like vBulletin, so I didn't really think it was worth it to continue
> paying for vBulletin's ongoing fees.

oh you paid? that's one thing i didnt do.

i liked it. it was just cludged together.
also, nobody used it. it looked great and it was cool but nobody used it.
---
■ Synchronet ■ ::: BBSES.info - free BBS services :::

-=> On 02-26-22 21:25, Phigan wrote to MRO <=-

Ph> Where is an example of this? So far, I only know of MajorBBS that puts
Ph> the BBS messages in a web forum as well. What BBSes do you know that
Ph> have their messages web accessible?

Synchronet is another.

.... But that trick never works! -Rocky
--- MultiMail/Win v0.52
■ Synchronet ■ Freeway BBS, Bendigo Australia. freeway.apana.org.au

-=> On 02-27-22 15:57, Nightfox wrote to Arelor <=-

Ni> Many Synchronet BBSes have their messages available via the web. Many
Ni> Synchronet sysops choose to enable this by forwarding the web port to
Ni> their BBS machine. But a sysop could easily disable that functionality
Ni> by not forwarding the web port, and I'm sure there's also a setting in
Ni> Synchronet to have it not run its web server.

I love (not) how people assume we're all running behind a NAT. What port
forwarding? ;)

.... Let us drink deep for death is inevitable.
--- MultiMail/Win v0.52
■ Synchronet ■ Freeway BBS, Bendigo Australia. freeway.apana.org.au

Re: Re: the nothing to hide a
By: Vk3jed to Nightfox on Mon Feb 28 2022 03:42 pm

Ni>> Many Synchronet BBSes have their messages available via the web.
Ni>> Many Synchronet sysops choose to enable this by forwarding the web
Ni>> port to their BBS machine. But a sysop could easily disable that
Ni>> functionality by not forwarding the web port, and I'm sure there's
Ni>> also a setting in Synchronet to have it not run its web server.

Vk> I love (not) how people assume we're all running behind a NAT. What port
Vk> forwarding? ;)

You have all your ports exposed publicly to the internet? Or perhaps there's an alternative to NAT that I'm not aware of..?
I thought pretty much everyone with internet at home would be using a router, and I thought NAT a standard feature of a router for some level of protection.

Nightfox

---
■ Synchronet ■ Digital Distortion: digitaldistortionbbs.com

Re: Re: the nothing to hide a
By: Nightfox to Vk3jed on Sun Feb 27 2022 10:25 pm

> You have all your ports exposed publicly to the internet?

On my BBS computers, yes.
--
digital man (rob)

Sling Blade quote #17:
Charles Bushman: A shovel just makes too goddamned much racket.
Norco, CA WX: 62.3°F, 12.0% humidity, 2 mph ENE wind, 0.00 inches rain/24hrs
---
■ Synchronet ■ Vertrauen ■ Home of Synchronet ■ [vert/cvs/bbs].synchro.net

Re: Re: the nothing to hide a
By: Nightfox to Vk3jed on Sun Feb 27 2022 10:25 pm

Ni> You have all your ports exposed publicly to the internet? Or perhaps there's an alternative to NAT that I'm not aware of..?
Ni> I thought pretty much everyone with internet at home would be using a router, and I thought NAT a standard feature of a router
Ni> for some level of protection.

Numerous BBS systems are run directly with public IPs now via cloud solutions.

Also, although rare, some broadband providers allow a _range_ of public IPs to be allocated to consumers, so it's possible to dedicate one of these to a BBS host.

Synchronet doesn't come security hardened out of the box (I'd argue it should, maybe I should submit a pull request on this :-) ), but there is an article on Hardening on the Wiki.

Mewcenary.

---
■ Synchronet ■ Extricate BBS - bbs.extricate.org

Re: Re: the nothing to hide a
By: Nightfox to Vk3jed on Sun Feb 27 2022 10:25 pm

> Re: Re: the nothing to hide a
> By: Vk3jed to Nightfox on Mon Feb 28 2022 03:42 pm
>
> Ni>> Many Synchronet BBSes have their messages available via the web.
> Ni>> Many Synchronet sysops choose to enable this by forwarding the web
> Ni>> port to their BBS machine. But a sysop could easily disable that
> Ni>> functionality by not forwarding the web port, and I'm sure there's
> Ni>> also a setting in Synchronet to have it not run its web server.
>
> Vk> I love (not) how people assume we're all running behind a NAT. What por
> Vk> forwarding? ;)
>
> You have all your ports exposed publicly to the internet? Or perhaps there'
> an alternative to NAT that I'm not aware of..?
> I thought pretty much everyone with internet at home would be using a router
> and I thought NAT a standard feature of a router for some level of protectio
>
> Nightfox
>

Many rural areas have homes with a single computer in them. Village grandpas
just skip the router and connect their computer directly to the ethernet link
their ISPs give them. A router does not make much sense if you are only using a
single computer.

Besides, with IPV6 a computer may have an Internet routable address and be
completely exposed while being behind a router anyway.

--
gopher://gopher.richardfalken.com/1/richardfalken

---
■ Synchronet ■ Palantir BBS * palantirbbs.ddns.net * Pensacola, FL

Re: the nothing to hide a
By: Nightfox to cr1mson on Sun Feb 27 2022 04:00 pm
> Re: the nothing to hide a
> By: cr1mson to Arelor on Sun Feb 27 2022 01:39 pm
>
> cr> And a nice layout that echicken's web forum interface has also. The bes
> cr> that I know of.
>
> I used to run vBulletin on Apache with the plug-in that linked it with my BB
> via Synchronet's news server, but I decided to stop doing that. I think
> echicken's webv4 started to approach the kind of functionality included in
> things like vBulletin, so I didn't really think it was worth it to continue
> paying for vBulletin's ongoing fees.
>
> Nightfox
>
I actually remember that from way-back. I too used your script with Synchonet
and vBulletin. It was nice to import SBBS users into the forum and transfer
messages between the two. That was quite nice back then. But ya, things have
changed since then and echicken's approach fulfills certainly my needs as well
as others. I still use the legacy telnet to write messages but it's nice to
have a web-base forum with messages too that don't use telnet and particularly
like the web side of things.

Sincerely,
Jon Justvig
Stepping Stone BBS
telnet://steppingstonebbs.com

---
■ Synchronet ■ Stepping Stone BBS - steppingstonebbs.com

Re: Re: the nothing to hide a
By: Vk3jed to Nightfox on Mon Feb 28 2022 03:42 pm

> -=> On 02-27-22 15:57, Nightfox wrote to Arelor <=-
>
> Ni> Many Synchronet BBSes have their messages available via the web. Many
> Ni> Synchronet sysops choose to enable this by forwarding the web port to
> Ni> their BBS machine. But a sysop could easily disable that functionality
> Ni> by not forwarding the web port, and I'm sure there's also a setting in
> Ni> Synchronet to have it not run its web server.
>
> I love (not) how people assume we're all running behind a NAT. What port
> forwarding? ;)
>

well, we're assuming people here are somewhat powerusers, and they have multiple computers and devices. also it helps to have some type of hardware firewall up.
---
■ Synchronet ■ ::: BBSES.info - free BBS services :::

Re: the nothing to hide a
By: cr1mson to Nightfox on Mon Feb 28 2022 03:52 am

> I actually remember that from way-back. I too used your script with
> Synchonet and vBulletin. It was nice to import SBBS users into the forum
> and transfer messages between the two. That was quite nice back then. But
> ya, things have changed since then and echicken's approach fulfills
> certainly my needs as well as others. I still use the legacy telnet to
> write messages but it's nice to have a web-base forum with messages too that
> don't use telnet and particularly like the web side of things.

well another thing that was nice is the search feature of vbulletin.
vbulletin is good software. the nntp plugin not so good.it worked most of the time. it's just old and meant for an older version of vbulletin.
---
■ Synchronet ■ ::: BBSES.info - free BBS services :::

-=> On 02-27-22 22:25, Nightfox wrote to Vk3jed <=-

Ni> You have all your ports exposed publicly to the internet? Or perhaps
Ni> there's an alternative to NAT that I'm not aware of..? I thought pretty
Ni> much everyone with internet at home would be using a router, and I
Ni> thought NAT a standard feature of a router for some level of
Ni> protection.

NAT != security. You've fallen for the big myth that NAT is somehow more
secure. All it does is screw up some protocols (FTP anyone?), and puts
arbitrary limits on incoming traffic (2 BBSs on the same port, NO WAY!).

NAT is an ugly hack to help with IPv4 shortages.

First defence is only have the services (daemons) you need running and
listening only on the IP/port combinations you want. If further limiting of
access is needed, then there's this wonderful thing called a firewall. ;)
iptables on Linux does an excellent job, and even Windows Firewall doesn't do a
bad job, if properly configured.

.... You were sent here as a warning to others, weren't you?
--- MultiMail/Win v0.52
■ Synchronet ■ Freeway BBS, Bendigo Australia. freeway.apana.org.au

-=> On 02-28-22 05:03, MRO wrote to Vk3jed <=-

MR> well, we're assuming people here are somewhat powerusers, and they have
MR> multiple computers and devices. also it helps to have some type of
MR> hardware firewall up. ---

That still doesn't necessarily mean NAT. Firewalls have been around _much_
longer than NAT.

.... People are always available for work in the past tense.
--- MultiMail/Win v0.52
■ Synchronet ■ Freeway BBS, Bendigo Australia. freeway.apana.org.au

Re: Re: the nothing to hide a
By: Vk3jed to MRO on Fri Mar 04 2022 06:57 pm

> -=> On 02-28-22 05:03, MRO wrote to Vk3jed <=-
>
> MR> well, we're assuming people here are somewhat powerusers, and they have
> MR> multiple computers and devices. also it helps to have some type of
> MR> hardware firewall up. ---
>
> That still doesn't necessarily mean NAT. Firewalls have been around _much_
> longer than NAT.
>
>
> ... People are always available for work in the past tense.

so what are we arguing about? you neek saying NAT over and over again. that's all i'm geting.
---
■ Synchronet ■ ::: BBSES.info - free BBS services :::