Board:   [fsxNet] BBS Software Development/Support
Subject: RE: BBS Security...
From:    Shurato(21:2/148)
Date:    Tue Sep 08, 2026 13:31

* In a message originally to Shurato, NuSkooler said:

 > Twas Saturday, September 5th when Shurato said...
 >  Sh> Ok, I've got reverse proxy on all of my servers except for one radio
 >  Sh> station so that it's accessible by shoutcast apps.  Is there anything
 > I
 >  Sh> can do to better secure my non-https services like news, telnet, ssh,

 >  Sh> twgs and sqgs? Having 5 exposed and ports 80 and 443 instead of about
 > 15
 >  Sh> ports is a big boost!

 > Nice!

 > - NNTP and Telnet at least are both plain-text - SSH, already secure
 > (assuming your keys are safe)

I got stunnel working with NNTP for NNTPS.

 > BUT, depending on your firewall, you can use things like SNORT to monitor
 > for misbehaving connections, exploit attempsts, so on and sort of auto-ban
 > them when detected/etc.

I've got suricata set up!

--
Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
,wss, ssh utf-8) (22,23,110,21,119,999,2222) shsbbs.net FREQ FILES !


---
 * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (21:2/148)
.