Board:   [fsxNet] BBS Software Development/Support
Subject: Re: BBS Security...
From:    poindexter FORTRAN(21:4/122)
Date:    Fri Sep 04, 2026 06:50

-=> NuSkooler wrote to Shurato <=-

 Nu> I'm missing context here, I think, but you don't need to a lot of money
 Nu> for good BBS security. I suggest a setup sort of like this:

 Nu> {internet} -> [*PHYSICAL* firewall] -> [nginx or caddy TLS term] ->
 Nu> Your services.

 Nu> Physical FW: An older box will due, especially for BBS traffic. Install
 Nu> pfSense or similar.

 Nu> nginx or caddy do your TLS termination. For TLS/HTTPS, you use Let's
 Nu> Encrypt and ACME (free).

 Nu> Your callers get HTTPS/TLS/security, your infra sits behind a firewall.
 Nu> Your scanning/etc. can look at the traffic between the TLS term and the
 Nu> services themselves as it will be plain text by then.


Just adding in here, there is a reverse proxy called NGINX Proxy Manager
that makes a nice graphical front end for NGINX Proxy, and NPM+ includes
crowdsec support to make a free web application firewall out of it.




 Nu> --
  ■ NuSkooler // Xibalba - "The place of fear"
  ■ xibalba.vip (44510/telnet,
0344511/ssh)
  ■ ENiGMA 1/2 WHQ | Phenom | 67 | iMPURE |
03ACiDic
 Nu> --- ENiGMA 1/2 v0.5.1-beta (linux; x64; 22.22.2)
 Nu>  * Origin: Xibalba -+- xibalba.vip:44510 (21:1/121)

.... In England, Baseball is known as American Cricket.
--- MultiMail/Win v0.52
 * Origin: realitycheckBBS.org -- information is power. (21:4/122)
.