Board:   [fsxNet] BBS Software Development/Support
Subject: BBS Security...
From:    Shurato(21:2/148)
Date:    Sat Aug 29, 2026 10:44

The only things I'm not doing that have been suggested are VLANs (I want all
of my systems to be able to connect to eachother on the same subnet, so I
don't know if I can do this), tunneling and reverse proxies as well.  I'm not
sure if I can do that with non- http services (telnet, ftp, ssh, nntp) as
well as if I would need ssl certs for each domain.  I'm not a business, so I
don't know if I  need those.  I've got fail2ban through crowdsec and rgtel,
geoip blocking, bad actor lists through crowdsec, qfeeds and maltrail and
suricata, dns blocking through zen armor and the above and unbound as well as
filtering through quad9).  I also have clamav checking my traffic.  The main
thing I'm concerned about though, is the fact that none of my traffic
filtering handles https.  I'm poor and can't afford the licenses that would
support that (hundreds of dollars a month I think).

--
Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
,wss, ssh utf-8) (22,23,110,21,119,999,2222) shsbbs.net FREQ FILES !


*** THE READER V4.50 [freeware]
---
 * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (21:2/148)
.