Hi I am a new Sysop and I've just got my bbs built and installed on linux (Debian).

It's great, thanks for such fantastic software.

Anyway currently I'm using a shared server which has a firewall and ssh key authentication
setup. I haven't opened up the telnet port to the world just yet due to reading
a lot of
posts about telnet not being secure.

Looking at the wiki and forums on the internet etc I see you can use Synchronet
with ssh.
The problem is though I've got rsa keys setup, so my server only allows them.

I don't know how this would work with connecting to synchronet or how to go about getting it
working. If it did work, would that then mean that 8bit computers I'm wanting to use to
connect to it would also not work with their bbs software and such?

I've enabled most of the tips (or disabled!) that are in the Hardening Synchronet wiki page.
But I just wanted to check with you guys how to ideally get things set up so I can still use
Synchronet on my shared vps server without it harming stuff I have on there and
other sites,
ssh for the server, imap email and all the other bits and bobs.

Maybe it is safe enough to open up Telnet to the world??

Thanks very much for any help or guidance.
--- SBBSecho 3.03-Win32
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Help with Security and BBS setup
By: Soydemadrid to All on Mon Feb 26 2018 04:59 am

Anyway currently I'm using a shared server which has a firewall and ssh key authentication setup. I haven't opened up the telnet port to the world just yet due to reading a lot of posts about telnet not being secure.

Telnet is inherently insecure because it is plaintext, so it's vulnerabile to man-in-the-middle attacks for passwords and whatnot. I wouldn't be overly concerned about it, as it's the standard connection for BBSes.

Looking at the wiki and forums on the internet etc I see you can use Synchronet with ssh. The problem is though I've got rsa keys setup, so my server only allows them.

Synchronet provides its own SSH connection, so you can't have both sshd (what comes with your linux install) and Synchronet's SSH running on the same port at the same time. If you're going to use your server soley to serve BBS traffic, I'd suggest moving sshd to another port (something higher, above port 1024), and run Synchronet on port 22. (that's what I do) You would then use your rsa keys to access your server on the higher port.


SSH is encrypted, so passwords are not sent in plaintext.

DaiTengu

... Everybody is somebody else's weirdo.

---
* Synchronet * War Ensemble BBS - The sport is war, total war - warensemble.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Soydemadrid wrote to All <=-

Anyway currently I'm using a shared server which has a firewall and ssh key authentication

I'm assuming you don't have root access on this server? See below for the implications.

setup. I haven't opened up the telnet port to the world just yet due to reading a lot of
posts about telnet not being secure.

That's a judgement call you have to make, but yes it is true that telnet is not secure and can be easily sniffed by hosts along the path between user and BBS. However, many terminal setups only support telnet, so you may need to compromise here. Your call. :)

Looking at the wiki and forums on the internet etc I see you can use Synchronet with ssh.
The problem is though I've got rsa keys setup, so my server only allows them.

Synchronet uses its own SSH server, so the RSA keys are irrelevant. You will need to have Synchronet use a different port to your regular SSH server, however, because it is an independent service. Users connect to the Synchronet SSH port, and log in with their username and password.

I don't know how this would work with connecting to synchronet or how
to go about getting it
working. If it did work, would that then mean that 8bit computers I'm wanting to use to
connect to it would also not work with their bbs software and such?

8 bit computers? Are there any with SSH clients? I normally use SyncTerm on Windows, and occasionally ssh on Linux (though this is not as good as a BBS style terminal emulator).

I've enabled most of the tips (or disabled!) that are in the Hardening Synchronet wiki page.
But I just wanted to check with you guys how to ideally get things set
up so I can still use
Synchronet on my shared vps server without it harming stuff I have on there and other sites,
ssh for the server, imap email and all the other bits and bobs.

If you don't have root access, you almost certainly will have issues with binding the "low" ports (<1024) if your host runs Linux or another *NIX OS. For SSH, and telnet, not a biggie, just have to inform your users what ports you're using. However, services such as email, etc will be severaly impacted by this.

Maybe it is safe enough to open up Telnet to the world??

Generally yes, I haven't heard of too many actual issues with telnet in the real world. BBSs aren't a huge target.


... When a man brings his wife a gift for no reason... there's a reason.
=== MultiMail/Win32 v0.49
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)

Re: Help with Security and BBS setup
By: Soydemadrid to All on Mon Feb 26 2018 04:59 am

Anyway currently I'm using a shared server which has a firewall and ssh key authentication setup. I haven't opened up the telnet port to the world just yet due to reading a lot of posts about telnet not being secure.

I don't think I'd worry too much about using telnet with your BBS. Everything with telnet is done in the clear, so potentially someone could watch communication to your BBS and get things like users' passwords as they're entered, but I don't think many people would be interested in getting such sensitive data from a BBS.

I thought about putting emphasis on SSH for my BBS, but I doubt many users would care enough to switch to SSH. If you only allow SSH on your BBS, you might get a lot fewer callers than if you also allowed telnet.

Nightfox

---
* Synchronet * Digital Distortion: digitaldistortionbbs.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

On 2018 Feb 26 14:29:32, you wrote to Soydemadrid:

Anyway currently I'm using a shared server which has a firewall and
ssh key authentication setup. I haven't opened up the telnet port to
the world just yet due to reading a lot of posts about telnet not
being secure.

I don't think I'd worry too much about using telnet with your BBS. Everything with telnet is done in the clear, so potentially someone
could watch communication to your BBS and get things like users'
passwords as they're entered, but I don't think many people would be interested in getting such sensitive data from a BBS.

i know of quite a few folks who would be interested in getting such sensitive data from /any/ connection they can find... especially if it is a shared password...

I thought about putting emphasis on SSH for my BBS, but I doubt many
users would care enough to switch to SSH. If you only allow SSH on
your BBS, you might get a lot fewer callers than if you also allowed telnet.

some users /can't/ do ssh... they're lucky they can telnet at all... i'm aware of at least one BBS user that (still) uses a 486 with DOS v6 and the old watcom
comms drivers stuff... almost kinda similar to the old KA9Q stuff...

)\/(ark

Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
... I _DO_ know everything. I just can't remember most of it.
---
* Origin: (1:3634/12.73)

Re: Help with Security and BBS setup
By: mark lewis to Nightfox on Tue Feb 27 2018 04:15 am

Hi thanks, well with my server not mainly being for the BBS my best bet it seems IS to open up Telnet on a non-default port along with ssh and rlogin (all also on non-default ports). So that should be fine and then I can at least login via ssh to protect my passwords and such even if the users don't...

Does that sound about right?

---
* Synchronet * BBS for Amstrad computer users including CPC, PPC and PCW!
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: Help with Security and BBS setup
By: Tony Langdon to Soydemadrid on Tue Feb 27 2018 08:49 am

Synchronet uses its own SSH server, so the RSA keys are irrelevant. You wil

l

need to have Synchronet use a different port to your regular SSH server, however, because it is an independent service. Users connect to the Synchro

net

SSH port, and log in with their username and password.

Hi thanks. Well I've opened up telnet to the world and it is working great, albeit I'm using custom ports for telnet, rlogin and ssh just in case. That should be fine. Thanks for the tips.

SSH (and rlogin) I am having a problem with. When I set their custom ports in sbbs.ini as well as having options=ALLOW_SSH (or whatever the correct syntax
is in there, I just quote from approx memory!!) - then I can't see the ports listening when I check netstat. Telnet is listening and setting on the custom port no problem at all. But the other two ports aren't listed...

When I try ssh in on that custom port too, well just nothing happens. I've opened up my server firewall on those custom ports and can't see anything in the logs. So I think the problem is synchronet not binding or setting up those services.

Anyone know what to check or how to fix this please?

Thanks again for getting me going. I only used BBSes as a kid when I was about 7, so even if I knew anything back then I've sinced forgotten what I did or what I was doing haha! Great to be back though.

Oh and yeah I don't think any 8bit users (my target users) will ever use ssh, but at least we can then all use it on our modern machines as an option...

---
* Synchronet * BBS for Amstrad computer users including CPC, PPC and PCW!
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Help with Security and BBS setup
By: Simulant to mark lewis on Tue Feb 27 2018 09:55 am

Re: Help with Security and BBS setup
By: mark lewis to Nightfox on Tue Feb 27 2018 04:15 am

Hi thanks, well with my server not mainly being for the BBS my best bet it seems IS to open up Telnet on a non-default port along with ssh and rlogin (all also on non-default ports). So that should be fine and then I can at least login via ssh to protect my passwords and such even if the users don't...

Does that sound about right?

I'm not a fan of non-default ports. I think using non-default ports creates one extra hurdle for users, if you care about attracting them. <shrug>

digital man

Synchronet/BBS Terminology Definition #48:
SMTP = Simple Message Transfer Protocol
Norco, CA WX: 49.7oF, 66.0% humidity, 2 mph W wind, 0.51 inches rain/24hrs
--- SBBSecho 3.03-Win32
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: Help with Security and BBS setup
By: Simulant to Tony Langdon on Tue Feb 27 2018 10:05 am

Re: Re: Help with Security and BBS setup
By: Tony Langdon to Soydemadrid on Tue Feb 27 2018 08:49 am

Synchronet uses its own SSH server, so the RSA keys are irrelevant. You wil

l

need to have Synchronet use a different port to your regular SSH server, however, because it is an independent service. Users connect to the Synchro

net

SSH port, and log in with their username and password.

Hi thanks. Well I've opened up telnet to the world and it is working great, albeit I'm using custom ports for telnet, rlogin and ssh just in case. That should be fine. Thanks for the tips.

SSH (and rlogin) I am having a problem with. When I set their custom ports in sbbs.ini as well as having options=ALLOW_SSH (or whatever the correct syntax
is in there, I just quote from approx memory!!) - then I can't see the ports listening when I check netstat. Telnet is listening and setting on the custom port no problem at all. But the other two ports aren't listed...

When I try ssh in on that custom port too, well just nothing happens. I've opened up my server firewall on those custom ports and can't see anything in the logs. So I think the problem is synchronet not binding or setting up those services.

Anyone know what to check or how to fix this please?

The Terminal Server log output will tell you when it's attempting to bind ports, which ports, and if there is a problem, what that error number/description is.

Thanks again for getting me going. I only used BBSes as a kid when I was about 7, so even if I knew anything back then I've sinced forgotten what I did or what I was doing haha! Great to be back though.

Welcome back!

digital man

This Is Spinal Tap quote #18:
Sustain, listen to it. Don't hear anything. You would though were it playing. Norco, CA WX: 50.5oF, 64.0% humidity, 0 mph SW wind, 0.51 inches rain/24hrs
--- SBBSecho 3.03-Win32
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Help with Security and BBS setup
By: Nightfox to Soydemadrid on Mon Feb 26 2018 02:29 pm

I don't think I'd worry too much about using telnet with your BBS. Everything with telnet is done in the clear, so potentially someone could watch communication to your BBS and get things like users' passwords as they're entered, but I don't think many people would be interested in getting such sensitive data from a BBS.

I think of telnet/ssh as http/https in a way. If you want to keep the system close, shy of the new user login/application process, separate, build your board around the same models as many secure websites. Offering limited access over http, lets say.

I agree this isn't a real concern for the BBS community. But I'm all for people having secure systems, too.

_ispy++

---
* Synchronet * euphoria
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Help with Security and BBS setup
By: Digital Man to Simulant on Tue Feb 27 2018 09:56 am

I'm not a fan of non-default ports. I think using non-default ports creates one extra hurdle for users, if you care about attracting them. <shrug>

I second this.

_ispy++

---
* Synchronet * euphoria
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Help with Security and BBS setup
By: ispyhumanfly to Nightfox on Wed Feb 28 2018 01:04 am

I agree this isn't a real concern for the BBS community. But I'm all for people having secure systems, too.

I am too.. Security is important, and I'd think people would benefit from using SSH, but it seems to me the majority of the BBS world still uses telnet by default.

Nightfox

---
* Synchronet * Digital Distortion: digitaldistortionbbs.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Simulant wrote to Tony Langdon <=-

Hi thanks. Well I've opened up telnet to the world and it is working great, albeit I'm using custom ports for telnet, rlogin and ssh just in case. That should be fine. Thanks for the tips.

Cool, so far, so good. ;)

SSH (and rlogin) I am having a problem with. When I set their custom
ports in sbbs.ini as well as having options=ALLOW_SSH (or whatever the correct syntax is in there, I just quote from approx memory!!) - then I can't see the ports listening when I check netstat. Telnet is listening and setting on the custom port no problem at all. But the other two
ports aren't listed...

What does Synchronet's error log say? That might give some clue as to why it's not working. Are the SSH and rlogin ports > 1024? If not, try a higher port number.

Thanks again for getting me going. I only used BBSes as a kid when I
was about 7, so even if I knew anything back then I've sinced forgotten what I did or what I was doing haha! Great to be back though.

You're welcome, and great to see you back here. :)

Oh and yeah I don't think any 8bit users (my target users) will ever
use ssh, but at least we can then all use it on our modern machines as
an option...

Yeah, I know of no serial - SSH gateways, but there's a number of serial - telnet devices that will work with those old machines that can't use IP directly. And those that can, can generally telnet. :)


... Ambition is the last refuge of the failure.
=== MultiMail/Win32 v0.49
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)

Re: Help with Security and BBS setup
By: Nightfox to ispyhumanfly on Tue Feb 27 2018 06:42 pm

for people having secure systems, too.

I am too.. Security is important, and I'd think people would benefit from using SSH, but it seems to me the majority of the BBS world still uses telnet by default.

It's true. Perhaps in the future using telnet for first time access, account creation, things like that is a viable approach for those wanting to maintain the accessibility of telnet while keeping an experience and its communication secure once inside.

_ispy++

---
* Synchronet * euphoria - euphoriabbs.org
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Help with Security and BBS setup
By: Nightfox to ispyhumanfly on Tue Feb 27 2018 06:42 pm

Ok thanks for the help everyone. I'll rethink and possibly go back to the default ports if I can, or at least for Telnet...

I'll check the log and report back if it gives any clues why my ssh server isn't listening.

Also, how do I edit the main welcome graphic? Can't find it mentioned on the Wiki etc. Tried to edit the *bg.bin file but it didn't change anything. I'd like to put a retro Amstrad logo there ideally as a noce welcome to users. Thanks again for all the help. BBSes are awesome. I'm typing this on JuiceSSH on my Android phone while sat with my little boy. Later I can access on my CPC and at work on my PC. Talk about versatility!!

---
* Synchronet * BBS for Amstrad computer users including CPC, PPC and PCW!
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Help with Security and BBS setup
By: Simulant to All on Wed Feb 28 2018 07:59 am

I think you are looking for answer.asc...

---
* Synchronet * Singapore Fun - your emulation destination
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Help with Security and BBS setup
By: Simulant to All on Wed Feb 28 2018 07:59 am

Also, how do I edit the main welcome graphic?

I think you mean text/menu/logon.asc?

Ttyl :-),
Al


... When I am right nobody remembers - When I am wrong nobody forgets!

---
* Synchronet * The Rusty MailBox - Penticton, BC Canada - trmb.synchro.net
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: Help with Security and BBS setup
By: Tony Langdon to Simulant on Wed Feb 28 2018 01:41 pm

What does Synchronet's error log say? That might give some clue as to why i

t's

not working. Are the SSH and rlogin ports > 1024? If not, try a higher por

t

number.

Thanks again for helping. I've checked the /var/log/sbbs.log I setup when I first installed Synchronet and there are a few funky things in there...

synchronet: srvc 0034 !ERROR 98 binding JSON socket to port 10088

seems to be in there a fair bit, but then later on after some of those it does say: srvc 0000 JSON JSON client initialized (v1.29) - so maybe that gets there in the end?

I also get this error, which is maybe something to do with ssh not working: term SSH cryptGetPrivateKey failure

Perhaps that also stops rLogin too?? I set the custom ports for rlogin as 664 and ssh as 6128 - the only reason being so that they're easy to remember and those ports seemed to be free.

664 for an Amstrad CPC 8bit computer model number, and the CPC6128 is the 128k 3" floppy disk model. So I thought they were cool ports to use, with Telnet on port 464 too, for the CPC464 haha. Nice little in-joke when connecting for the Amstrad users I'm aiming the BBS towards.

:)

---
* Synchronet * BBS for Amstrad computer users including CPC, PPC and PCW!
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: Help with Security and BBS setup
By: Simulant to Tony Langdon on Wed Feb 28 2018 12:38 pm

Re: Re: Help with Security and BBS setup
By: Tony Langdon to Simulant on Wed Feb 28 2018 01:41 pm

What does Synchronet's error log say? That might give some clue as to why i

t's

not working. Are the SSH and rlogin ports > 1024? If not, try a higher por

t

number.

Thanks again for helping. I've checked the /var/log/sbbs.log I setup when I first installed Synchronet and there are a few funky things in there...

synchronet: srvc 0034 !ERROR 98 binding JSON socket to port 10088

seems to be in there a fair bit, but then later on after some of those it does say: srvc 0000 JSON JSON client initialized (v1.29) - so maybe that gets there in the end?

That would be unrelated to any telnet/rlogin/ssh bind failures. Do you see the log output (not necessarily errors) with regards to binding the terminal server ports (i.e. telnet, ssh, and rlogin)?

I also get this error, which is maybe something to do with ssh not working: term SSH cryptGetPrivateKey failure

Likely.

Perhaps that also stops rLogin too??

Unlikely.

digital man

Synchronet/BBS Terminology Definition #10:
CVS = Concurrent Versioning System
Norco, CA WX: 55.2oF, 54.0% humidity, 2 mph E wind, 0.00 inches rain/24hrs
--- SBBSecho 3.03-Win32
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Simulant wrote to Tony Langdon <=-

Re: Re: Help with Security and BBS setup
By: Tony Langdon to Simulant on Wed Feb 28 2018 01:41 pm

What does Synchronet's error log say? That might give some clue as to why i

t's

not working. Are the SSH and rlogin ports > 1024? If not, try a higher por

t

number.

Thanks again for helping. I've checked the /var/log/sbbs.log I setup
when I first installed Synchronet and there are a few funky things in there...

synchronet: srvc 0034 !ERROR 98 binding JSON socket to port 10088

I have seen this one.

seems to be in there a fair bit, but then later on after some of those
it does say: srvc 0000 JSON JSON client initialized (v1.29) - so maybe that gets there in the end?

Not sure, ask DM. :)

I also get this error, which is maybe something to do with ssh not working: term SSH cryptGetPrivateKey failure

That sounds like a possibility.

Perhaps that also stops rLogin too?? I set the custom ports for rlogin
as 664 and ssh as 6128 - the only reason being so that they're easy to remember and those ports seemed to be free.

664 for an Amstrad CPC 8bit computer model number, and the CPC6128 is
the 128k 3" floppy disk model. So I thought they were cool ports to
use, with Telnet on port 464 too, for the CPC464 haha. Nice little
in-joke when connecting for the Amstrad users I'm aiming the BBS
towards.

So, telnet is working on 464?

I am having some difficulty, because you never indicated whether you had root access or not.


... I'm so hungry, I could eat a... Wait! Come back, @FN@!
=== MultiMail/Win32 v0.49
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)

Re: Help with Security and BBS setup
By: Digital Man to Simulant on Tue Feb 27 2018 09:56 am

I'm not a fan of non-default ports. I think using non-default ports creates

one

extra hurdle for users, if you care about attracting them. <shrug>

Yes I can understand. I may try get back to defaults if I can, unfortunately I might be stuck with non-standard ports if I have to leave services running on the same server using the defaults... Hopefully in future I can move the BBS to its own server too and go all default, that'd be great. I'm still just finding my feet - is it easy enought to move server or domain/host address later on with an existing running BBS?

Another query I had if I do stick to non-default ports is the SBBS list you run. Obviously it would be fantastic to stay listed in that directory to hopefully attract users, but how do I get the list to use the non-standard ports?

Thanks once again, I'm slowly learning here!!

---
* Synchronet * BBS for Amstrad computer users including CPC, PPC and PCW!
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Help with Security and BBS setup
By: Simulant to Digital Man on Wed Feb 28 2018 03:46 pm

Re: Help with Security and BBS setup
By: Digital Man to Simulant on Tue Feb 27 2018 09:56 am

I'm not a fan of non-default ports. I think using non-default ports creates

one

extra hurdle for users, if you care about attracting them. <shrug>

Yes I can understand. I may try get back to defaults if I can, unfortunately I might be stuck with non-standard ports if I have to leave services running on the same server using the defaults... Hopefully in future I can move the BBS to its own server too and go all default, that'd be great. I'm still just finding my feet - is it easy enought to move server or domain/host address later on with an existing running BBS?

Yes: http://wiki.synchro.net/faq:misc#migration

Another query I had if I do stick to non-default ports is the SBBS list you run. Obviously it would be fantastic to stay listed in that directory to hopefully attract users, but how do I get the list to use the non-standard ports?

Yes. When you create or edit your BBS entry you can specify which TCP port(s).

digital man

This Is Spinal Tap quote #14:
The Boston gig has been cancelled. [Don't] worry, it's not a big college town. Norco, CA WX: 60.5oF, 41.0% humidity, 3 mph SE wind, 0.00 inches rain/24hrs
--- SBBSecho 3.03-Win32
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: Help with Security and BBS setup
By: Tony Langdon to Simulant on Thu Mar 01 2018 07:43 am

I also get this error, which is maybe something to do with ssh not working: term SSH cryptGetPrivateKey failure

That sounds like a possibility.

Perhaps that also stops rLogin too?? I set the custom ports for rlogin as 664 and ssh as 6128 - the only reason being so that they're easy to remember and those ports seemed to be free.

664 for an Amstrad CPC 8bit computer model number, and the CPC6128 is the 128k 3" floppy disk model. So I thought they were cool ports to use, with Telnet on port 464 too, for the CPC464 haha. Nice little in-joke when connecting for the Amstrad users I'm aiming the BBS towards.

So, telnet is working on 464?

I am having some difficulty, because you never indicated whether you had roo

t

access or not.

Hi sorry yes I should of said, I do have root access to the server. It's shared so other services on there have to remain in place (at least for now) so email, ssh etc on default ports... So I'm running with those custom ports for now.

But yeah telnet seems to be working fine on port 464 but can't figure out what that ssh cyrptgetprivatekey error is. Am I supposed to set up some keys for Synchronet somehow? Or edit a config file to point to some or such?

Thanks.

---
* Synchronet * BBS for Amstrad computer users including CPC, PPC and PCW!
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Help with Security and BBS setup
By: Al to Simulant on Wed Feb 28 2018 03:51 am

Re: Help with Security and BBS setup
By: Simulant to All on Wed Feb 28 2018 07:59 am

Also, how do I edit the main welcome graphic?

I think you mean text/menu/logon.asc?

Ttyl :-),
Al

... When I am right nobody remembers - When I am wrong nobody forgets!

Thanks Al, that's a massive help and much appreciated. :)

---
* Synchronet * BBS for Amstrad computer users including CPC, PPC and PCW!
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: Help with Security and BBS setup
By: Simulant to Tony Langdon on Thu Mar 01 2018 09:12 am

But yeah telnet seems to be working fine on port 464 but can't figure out what that ssh cyrptgetprivatekey error is. Am I supposed to set up some keys for Synchronet somehow? Or edit a config file to point to some or such?

Synchronet (cryptlib) will auto-generate the private key during initialization. You can try deleting the key file (ctrl/cryptlib.key) and see if that fixes the problem.

digital man

Synchronet/BBS Terminology Definition #17:
DSL = Digital Subscriber Line
Norco, CA WX: 55.1oF, 60.0% humidity, 0 mph WSW wind, 0.00 inches rain/24hrs --- SBBSecho 3.03-Win32
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Simulant wrote to Tony Langdon <=-

Hi sorry yes I should of said, I do have root access to the server.
It's shared so other services on there have to remain in place (at
least for now) so email, ssh etc on default ports... So I'm running
with those custom ports for now.

OK, that eliminates a common suspect. Not sure why rlogin isn't working then, the answer may lie in the logs.

But yeah telnet seems to be working fine on port 464 but can't figure
out what that ssh cyrptgetprivatekey error is. Am I supposed to set up some keys for Synchronet somehow? Or edit a config file to point to
some or such?

Something weird going on. Given your userbase, I'm guessing SSH won't be hugely important in any case, but it would be good to sort it.


... Diets are for those who are thick and tired of it.
=== MultiMail/Win32 v0.49
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)

Re: Re: Help with Security and BBS setup
By: Digital Man to Simulant on Thu Mar 01 2018 10:34 am

Re: Re: Help with Security and BBS setup
By: Simulant to Tony Langdon on Thu Mar 01 2018 09:12 am

But yeah telnet seems to be working fine on port 464 but can't figure out what that ssh cyrptgetprivatekey error is. Am I supposed to set up some k

eys

for Synchronet somehow? Or edit a config file to point to some or such?

Synchronet (cryptlib) will auto-generate the private key during initializati

on.

You can try deleting the key file (ctrl/cryptlib.key) and see if that fixes

the

problem.

digital man

Synchronet/BBS Terminology Definition #17:
DSL = Digital Subscriber Line
Norco, CA WX: 55.1oF, 60.0% humidity, 0 mph WSW wind, 0.00 inches rain/24hrs

Hi thanks that did the trick, deleting cyptlib.key gets me in and everything seems to work great from my standard console (Konsole on KDE) when connecting with linux via ssh... What is strange though is I downloaded SyncTerm to use for BBSing and in Telnet that is awesome. A much nicer experience than my standard linux terminal. The only problem though is when I connect via SSH it is really slow, doesn't show the ansi graphics properly and also give an error after logging in "Error receiving data".

I tried installing the latest version from source but the build complains of a missing syncterm.man.in file. So I'm stuck using teh 0.9.5b version. I'm not sure if that makes a difference, or if even the 1.0 would do this?

Is there something else I need to do with ssh to get it working right?

Thanks very much again for all the help getting me set up! :)

---
* Synchronet * BBS for Amstrad computer users including CPC, PPC and PCW!
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: Help with Security and BBS setup
By: Simulant to Digital Man on Fri Mar 02 2018 02:54 pm

I tried installing the latest version from source but the build complains of a missing syncterm.man.in file. So I'm stuck using teh 0.9.5b version. I'm not sure if that makes a difference, or if even the 1.0 would do this?

You should definitely use 1.0 or later.

Is there something else I need to do with ssh to get it working right?

On the BBS side? Sounds like you got it working right already.

digital man

Synchronet "Real Fact" #82:
Flapuebarg unf vagreany ebg13 fhccbeg sbe fhcresvpvnyyl rapelcgvat grkg.
Norco, CA WX: 56.2oF, 68.0% humidity, 3 mph ESE wind, 0.00 inches rain/24hrs --- SBBSecho 3.03-Win32
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: Re: Help with Security and BBS setup
By: Tony Langdon to Simulant on Fri Mar 02 2018 06:28 am

Something weird going on. Given your userbase, I'm guessing SSH won't be hugely important in any case, but it would be good to sort it.

digital man has fixed it, I just had to delete the cryptkey file! Now everything seems to be working which is great!

Thanks again for the help.

---
* Synchronet * BBS for Amstrad computer users including CPC, PPC and PCW!
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Simulant wrote to Tony Langdon <=-

digital man has fixed it, I just had to delete the cryptkey file! Now everything seems to be working which is great!

Good to hear. :)


... How was my day? Oh, the police will fill you in...
=== MultiMail/Win32 v0.49
--- SBBSecho 3.03-Linux
* Origin: Freeway BBS Bendigo,Australia freeway.apana.org.au (3:633/410)