• Web Interface/Connection

    From Mikesla@VERT/PARANOR to All on Sun Sep 11 00:25:00 2022
    Hello.

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.

    Thanks.
    ... Paranor BBS (24/7) - 192.168.96.130 - Telnet/SSH/Rlogin
    --- MultiMail/Win v0.52
    þ Synchronet þ Paranor BBS - 192.168.96.130 - Telnet/SSH/Rlogin
  • From Nightfox@VERT/DIGDIST to Mikesla on Sat Sep 10 21:32:01 2022
    Re: Web Interface/Connection
    By: Mikesla to All on Sat Sep 10 2022 07:25 pm

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.

    I'm not sure if fTelnet can use those other protocols - but I don't think RLogin is any safer than telnet. With RLogin, everything is still passed in the clear. SSH is the only one that would encrypt anything.

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
  • From Digital Man@VERT to Nightfox on Sat Sep 10 21:44:55 2022
    Re: Web Interface/Connection
    By: Nightfox to Mikesla on Sat Sep 10 2022 04:32 pm

    Re: Web Interface/Connection
    By: Mikesla to All on Sat Sep 10 2022 07:25 pm

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.

    I'm not sure if fTelnet can use those other protocols - but I don't think RLogin is any safer than telnet. With RLogin, everything is still passed in the clear. SSH is the only one that would encrypt anything.

    fTelnet uses a websocket (not Telnet) and can do websocket over TLS, very safe. --
    digital man (rob)

    Breaking Bad quote #40:
    This Bogdan character... he wrestled you into submission with his eyebrows. Norco, CA WX: 74.9øF, 80.0% humidity, 3 mph S wind, 0.12 inches rain/24hrs
    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Nightfox@VERT/DIGDIST to Digital Man on Sat Sep 10 23:05:00 2022
    Re: Web Interface/Connection
    By: Digital Man to Nightfox on Sat Sep 10 2022 04:44 pm

    fTelnet uses a websocket (not Telnet) and can do websocket over TLS, very safe.

    Ah, that's good to know. It seems that it connects to Synchronet's telnet server though? I thought it was effectively a telnet connection (or RLogin, if you configure it that way).

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
  • From Digital Man@VERT to Nightfox on Sun Sep 11 00:41:38 2022
    Re: Web Interface/Connection
    By: Nightfox to Digital Man on Sat Sep 10 2022 06:05 pm

    Re: Web Interface/Connection
    By: Digital Man to Nightfox on Sat Sep 10 2022 04:44 pm

    fTelnet uses a websocket (not Telnet) and can do websocket over TLS, very safe.

    Ah, that's good to know. It seems that it connects to Synchronet's telnet server though? I thought it was effectively a telnet connection (or RLogin, if you configure it that way).

    fTelnet connects to a websocket service (e.g. Synchronet's websocketservice.js) which in turn connects to a Telnet or Rlogin server and plays a proxy role for the data.
    --
    digital man (rob)

    Synchronet "Real Fact" #39:
    Synchronet first supported Windows NT v6.x (a.k.a. Vista/Win7) w/v3.14a (2006) Norco, CA WX: 73.1øF, 87.0% humidity, 3 mph SSE wind, 0.08 inches rain/24hrs ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From Mikesla@VERT/PARANOR to Nightfox on Sun Sep 11 05:46:00 2022
    Thank You. I thought I would give it a shot. I'm not all that concerned about it but best to see if it could be done.

    Cheers, and thanks for the help.

    Nightfox wrote to Mikesla <=-

    Re: Web Interface/Connection
    By: Mikesla to All on Sat Sep 10 2022 07:25 pm

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.

    I'm not sure if fTelnet can use those other protocols - but I don't
    think RLogin is any safer than telnet. With RLogin, everything is
    still passed in the clear. SSH is the only one that would encrypt anything.

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com

    --- MultiMail/Win v0.52
    þ Synchronet þ Paranor BBS - 71.7.154.249 - Telnet/SSH/Rlogin
  • From Nightfox@VERT/DIGDIST to Mikesla on Sun Sep 11 04:49:36 2022
    Re: Web Interface/Connection
    By: Mikesla to Nightfox on Sun Sep 11 2022 12:46 am

    Thank You. I thought I would give it a shot. I'm not all that concerned about it but best to see if it could be done.

    I was a bit mistaken. fTelnet communicates over websocket, which can use TLS (which is secure) and gets forwarded to Synchronet's telnet service.

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
  • From Charles Blackburn@VERT/FBOBBS to Nightfox on Sun Sep 11 02:55:32 2022
    Re: Web Interface/Connection
    By: Nightfox to Mikesla on Sat Sep 10 2022 16:32:01

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.
    I'm not sure if fTelnet can use those other protocols - but I don't think RLogin is any safer than telnet. With RLogin, everything is still passed in the clear. SSH is the only one that would encrypt
    anything.

    yea rlogin is the same as telnet effectively.. if i remember right, it was originally designed as a "restricted login" (hence the name) to a "restricted shell" (/bin/rsh) so that people could have guest accounts on the university machines and not do anything "silly".

    ssh would be the only one to encrypt it.

    regards
    Charles Blackburn
    SYSOP - The F.B.O BBS
    Aviation related fun @ bbs.thefbo.us IPV4 and IPV6
    DOVE-Net
    Coming soon: FSX-Net, FIDO-Net

    ---
    þ Synchronet þ The FBO BBS - bbs.thefbo.us - A place for aviation fun....
  • From Tracker1@VERT/TRN to Mikesla on Sun Sep 11 01:22:49 2022
    On 9/10/22 16:25, Mikesla wrote:
    How do I setup the web interface to not use telnet but have folks
    use a much safer way of connecting such as SSH, and/or Rlogin.

    RLogin isn't safer than Telnet... also, the protocol the user uses is a websocket or secure-websocket connection to the BBS... the "telnet"
    connection is local from the websocket server to the BBS.

    You can block the telnet port from internet access if you like.
    --
    Michael J. Ryan - tracker1@roughneckbbs.com
    ---
    þ Synchronet þ Roughneck BBS - roughneckbbs.com
  • From Tracker1@VERT/TRN to Nightfox on Sun Sep 11 01:25:01 2022
    On 9/10/22 18:05, Nightfox wrote:
    fTelnet uses a websocket (not Telnet) and can do websocket over TLS,
    very safe.

    Ah, that's good to know. It seems that it connects to Synchronet's
    telnet server though? I thought it was effectively a telnet
    connection (or RLogin, if you configure it that way).

    Browser -> sbbs-websocket -> localhost-telnet
    --
    Michael J. Ryan - tracker1@roughneckbbs.com
    ---
    þ Synchronet þ Roughneck BBS - roughneckbbs.com
  • From Digital Man@VERT to Charles Blackburn on Sun Sep 11 16:24:23 2022
    Re: Web Interface/Connection
    By: Charles Blackburn to Nightfox on Sat Sep 10 2022 09:55 pm

    Re: Web Interface/Connection
    By: Nightfox to Mikesla on Sat Sep 10 2022 16:32:01

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.
    I'm not sure if fTelnet can use those other protocols - but I don't think RLogin is any safer than telnet. With RLogin, everything is still passed in the clear. SSH is the only one that would encrypt
    anything.

    yea rlogin is the same as telnet effectively.. if i remember right, it was originally designed as a "restricted login" (hence the name) to a "restricted shell" (/bin/rsh) so that people could have guest accounts on the university machines and not do anything "silly".

    I think the 'r' in rlogin stands for remote: https://en.wikipedia.org/wiki/Berkeley_r-commands#rlogin

    ssh would be the only one to encrypt it.

    There are terminal/shell protocols that use TLS for encryption (e.g. telnets, websockets) instead of SSH.
    --
    digital man (rob)

    Synchronet "Real Fact" #68:
    Robert D. Bouman, the author of SyncEdit, died in the mid to late 1990s
    Norco, CA WX: 79.9øF, 73.0% humidity, 4 mph E wind, 0.00 inches rain/24hrs
    ---
    þ Synchronet þ Vertrauen þ Home of Synchronet þ [vert/cvs/bbs].synchro.net
  • From mikesla@VERT/PARANOR to Nightfox on Sun Sep 18 11:45:30 2022
    Re: Web Interface/Connection
    By: Nightfox to Mikesla on Sat Sep 10 2022 04:32 pm

    Re: Web Interface/Connection
    By: Mikesla to All on Sat Sep 10 2022 07:25 pm

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.

    I'm not sure if fTelnet can use those other protocols - but I don't think RLogin is any safer than telnet. With RLogin, everything is still passed in the clear. SSH is the only one that would encrypt anything.

    Nightfox


    Thanks Nightfox.

    ---
    þ Synchronet þ Paranor BBS - 71.7.154.249 - (1:229/110 - 21:1/ 233)