1. Forum
  2. Fidonet
  3. SYNC SYSOPS

  • Web Interface/Connection

    From Mikesla@1:103/705 to All on Sat Sep 10 19:25:00 2022
    Hello.

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.

    Thanks.
    ... Paranor BBS (24/7) - 192.168.96.130 - Telnet/SSH/Rlogin
    --- MultiMail/Win v0.52
    þ Synchronet þ Paranor BBS - 192.168.96.130 - Telnet/SSH/Rlogin
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Nightfox@1:103/705 to Mikesla on Sat Sep 10 16:32:01 2022
    Re: Web Interface/Connection
    By: Mikesla to All on Sat Sep 10 2022 07:25 pm

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.

    I'm not sure if fTelnet can use those other protocols - but I don't think RLogin is any safer than telnet. With RLogin, everything is still passed in the clear. SSH is the only one that would encrypt anything.

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to Nightfox on Sat Sep 10 16:44:55 2022
    Re: Web Interface/Connection
    By: Nightfox to Mikesla on Sat Sep 10 2022 04:32 pm

    Re: Web Interface/Connection
    By: Mikesla to All on Sat Sep 10 2022 07:25 pm

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.

    I'm not sure if fTelnet can use those other protocols - but I don't think RLogin is any safer than telnet. With RLogin, everything is still passed in the clear. SSH is the only one that would encrypt anything.

    fTelnet uses a websocket (not Telnet) and can do websocket over TLS, very safe. --
    digital man (rob)

    Breaking Bad quote #40:
    This Bogdan character... he wrestled you into submission with his eyebrows. Norco, CA WX: 74.9øF, 80.0% humidity, 3 mph S wind, 0.12 inches rain/24hrs
    --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Nightfox@1:103/705 to Digital Man on Sat Sep 10 18:05:00 2022
    Re: Web Interface/Connection
    By: Digital Man to Nightfox on Sat Sep 10 2022 04:44 pm

    fTelnet uses a websocket (not Telnet) and can do websocket over TLS, very safe.

    Ah, that's good to know. It seems that it connects to Synchronet's telnet server though? I thought it was effectively a telnet connection (or RLogin, if you configure it that way).

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to Nightfox on Sat Sep 10 19:41:38 2022
    Re: Web Interface/Connection
    By: Nightfox to Digital Man on Sat Sep 10 2022 06:05 pm

    Re: Web Interface/Connection
    By: Digital Man to Nightfox on Sat Sep 10 2022 04:44 pm

    fTelnet uses a websocket (not Telnet) and can do websocket over TLS, very safe.

    Ah, that's good to know. It seems that it connects to Synchronet's telnet server though? I thought it was effectively a telnet connection (or RLogin, if you configure it that way).

    fTelnet connects to a websocket service (e.g. Synchronet's websocketservice.js) which in turn connects to a Telnet or Rlogin server and plays a proxy role for the data.
    --
    digital man (rob)

    Synchronet "Real Fact" #39:
    Synchronet first supported Windows NT v6.x (a.k.a. Vista/Win7) w/v3.14a (2006) Norco, CA WX: 73.1øF, 87.0% humidity, 3 mph SSE wind, 0.08 inches rain/24hrs --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Mikesla@1:103/705 to Nightfox on Sun Sep 11 00:46:00 2022
    Thank You. I thought I would give it a shot. I'm not all that concerned about it but best to see if it could be done.

    Cheers, and thanks for the help.

    Nightfox wrote to Mikesla <=-

    Re: Web Interface/Connection
    By: Mikesla to All on Sat Sep 10 2022 07:25 pm

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.

    I'm not sure if fTelnet can use those other protocols - but I don't
    think RLogin is any safer than telnet. With RLogin, everything is
    still passed in the clear. SSH is the only one that would encrypt anything.

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com

    --- MultiMail/Win v0.52
    þ Synchronet þ Paranor BBS - 71.7.154.249 - Telnet/SSH/Rlogin
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Nightfox@1:103/705 to Mikesla on Sat Sep 10 23:49:36 2022
    Re: Web Interface/Connection
    By: Mikesla to Nightfox on Sun Sep 11 2022 12:46 am

    Thank You. I thought I would give it a shot. I'm not all that concerned about it but best to see if it could be done.

    I was a bit mistaken. fTelnet communicates over websocket, which can use TLS (which is secure) and gets forwarded to Synchronet's telnet service.

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Charles Blackburn@1:103/705 to Nightfox on Sat Sep 10 21:55:32 2022
    Re: Web Interface/Connection
    By: Nightfox to Mikesla on Sat Sep 10 2022 16:32:01

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.
    I'm not sure if fTelnet can use those other protocols - but I don't think RLogin is any safer than telnet. With RLogin, everything is still passed in the clear. SSH is the only one that would encrypt
    anything.

    yea rlogin is the same as telnet effectively.. if i remember right, it was originally designed as a "restricted login" (hence the name) to a "restricted shell" (/bin/rsh) so that people could have guest accounts on the university machines and not do anything "silly".

    ssh would be the only one to encrypt it.

    regards
    Charles Blackburn
    SYSOP - The F.B.O BBS
    Aviation related fun @ bbs.thefbo.us IPV4 and IPV6
    DOVE-Net
    Coming soon: FSX-Net, FIDO-Net

    ---
    þ Synchronet þ The FBO BBS - bbs.thefbo.us - A place for aviation fun....
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Tracker1@1:103/705 to Mikesla on Sat Sep 10 20:22:49 2022
    On 9/10/22 16:25, Mikesla wrote:
    How do I setup the web interface to not use telnet but have folks
    use a much safer way of connecting such as SSH, and/or Rlogin.

    RLogin isn't safer than Telnet... also, the protocol the user uses is a websocket or secure-websocket connection to the BBS... the "telnet"
    connection is local from the websocket server to the BBS.

    You can block the telnet port from internet access if you like.
    --
    Michael J. Ryan - tracker1@roughneckbbs.com
    ---
    ï¿­ Synchronet ï¿­ Roughneck BBS - roughneckbbs.com
    --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Tracker1@1:103/705 to Nightfox on Sat Sep 10 20:25:01 2022
    On 9/10/22 18:05, Nightfox wrote:
    fTelnet uses a websocket (not Telnet) and can do websocket over TLS,
    very safe.

    Ah, that's good to know. It seems that it connects to Synchronet's
    telnet server though? I thought it was effectively a telnet
    connection (or RLogin, if you configure it that way).

    Browser -> sbbs-websocket -> localhost-telnet
    --
    Michael J. Ryan - tracker1@roughneckbbs.com
    ---
    ï¿­ Synchronet ï¿­ Roughneck BBS - roughneckbbs.com
    --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From Digital Man@1:103/705 to Charles Blackburn on Sun Sep 11 11:24:23 2022
    Re: Web Interface/Connection
    By: Charles Blackburn to Nightfox on Sat Sep 10 2022 09:55 pm

    Re: Web Interface/Connection
    By: Nightfox to Mikesla on Sat Sep 10 2022 16:32:01

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.
    I'm not sure if fTelnet can use those other protocols - but I don't think RLogin is any safer than telnet. With RLogin, everything is still passed in the clear. SSH is the only one that would encrypt
    anything.

    yea rlogin is the same as telnet effectively.. if i remember right, it was originally designed as a "restricted login" (hence the name) to a "restricted shell" (/bin/rsh) so that people could have guest accounts on the university machines and not do anything "silly".

    I think the 'r' in rlogin stands for remote: https://en.wikipedia.org/wiki/Berkeley_r-commands#rlogin

    ssh would be the only one to encrypt it.

    There are terminal/shell protocols that use TLS for encryption (e.g. telnets, websockets) instead of SSH.
    --
    digital man (rob)

    Synchronet "Real Fact" #68:
    Robert D. Bouman, the author of SyncEdit, died in the mid to late 1990s
    Norco, CA WX: 79.9øF, 73.0% humidity, 4 mph E wind, 0.00 inches rain/24hrs
    --- SBBSecho 3.15-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)
  • From mikesla@1:103/705 to Nightfox on Sun Sep 18 06:45:30 2022
    Re: Web Interface/Connection
    By: Nightfox to Mikesla on Sat Sep 10 2022 04:32 pm

    Re: Web Interface/Connection
    By: Mikesla to All on Sat Sep 10 2022 07:25 pm

    How do I setup the web interface to not use telnet but have folks use a much safer way of connecting such as SSH, and/or Rlogin.

    I'm not sure if fTelnet can use those other protocols - but I don't think RLogin is any safer than telnet. With RLogin, everything is still passed in the clear. SSH is the only one that would encrypt anything.

    Nightfox


    Thanks Nightfox.

    ---
    þ Synchronet þ Paranor BBS - 71.7.154.249 - (1:229/110 - 21:1/ 233)
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)