Subj : Re: Nightmares / Dreams
To   : 2twisty
From : McDoob
Date : Thu Mar 31 2022 18:52:05

 2t>  Mc> Um, because we're not stupid? SSH is literally access to the base OS,
 2t>  Mc> and not to the BBS itself.
 2t> 
 2t> Uh, where to you get that?  I run my BBS SSH on port 2222, not plain 22.
 2t> I have port 22 access from inside my network for admin purposes, but BBS
 2t> users cannot log into the system on port 22 even if they are local to my
 2t> network.

I'm going to give you the excuse of 'youthful exuberance' here. Port 22 and SSH access are not the same. Do *not* open ANY SSH port to the world!

 2t> BBS is behind a powerful firewall (not cheap wifi router or cable modem,
 2t> i run a dedicated pfSense router) with appropriate security and NAT
 2t> redirection for the relevant ports.

For every defence, there is somone trying to find a way around it. I would know, because I've tried. Not in your case, though...(o_O)

 2t> Please educate me if I'm wrong.  I sure can't log in as any BBS user over
 2t> regular SSH into the server.

And that's kind of my point! Why would you give any Trouble, Dick, and Hasbeen, free access to your underlying OS? Close that port, sir!

Just my opinion. Please check out http://pibbs.sytes.net for more.

McDoob
SysOp, PiBBS
pibbs.sytes.net

.... No honey, I can't eat with the family. My computer gets lonely!

--- Mystic BBS v1.12 A47 2021/12/24 (Raspberry Pi/32)
 * Origin: PiBBS (21:4/135)

.