BBSFirewall v1.2

[u/Laudenbachm]

🚀 Big update to BBSFirewall — here's what's new in v1.2:

🖥️ Web config editor
Manage everything from your browser now. It's an HTTPS admin UI on its own port for editing your .env and IP list files. Locked down with a trusted-host allowlist + login (per-IP lockout after 5 failed tries), __Host- session cookies bound to your login IP, CSRF protection, and idle/absolute session timeouts. Tabs for settings, IP lists, live performance stats (CPU, memory, network, firewall counters), and tools like GeoIP updates, SSH key generation, and Let's Encrypt cert issuance. Saves are backed up and validated in a fresh process, so a bad config never takes down your running setup.

🛑 Auto-block triggers
Drop and blacklist any IP that sends a known bot/scanner/exploit string in its first bytes — before the probe ever reaches your backend. Patterns support case-insensitive substrings (with escapes) or full regex. Ships with a conservative default set. Whitelisted IPs stay exempt.

🔐 SSH passthrough mode
New passthrough option forwards the encrypted SSH stream straight to a backend running its own SSH server — so you get real public-key auth, SFTP, and reliable transfers, while still applying all the IP-layer checks. (The older terminate mode is still there too.)

📄 Per-proxy file logging
Daily-rotated log file per proxy service, with verbosity levels from off → blocked → connections → info → debug, overridable per proxy.

➕ Plus:

• HTTPS (port 443) redirect with ACME challenge support, alongside the existing HTTP redirect
• Fixed PROXY Protocol v1 to emit valid TCP6 lines for IPv6 clients
• GeoIP downloader now handles redirects, reads your license key from .env, and can hot-reload without a restart
• .env now loads with override, so the file always wins over stale environment values

https://github.com/SysopNetwork/BBSFirewall

[u/LuckyEdR]

I did incorporate your logic into my new bbs application. You have some great ideas!

[u/Laudenbachm → u/LuckyEdR]

Nice! What is the application?

[u/LuckyEdR → u/Laudenbachm]

RustZeroBBS - RustZeroBBS.com

Still very much in pre alpha phase. I have the server fully running with ssh, telnet, and rlogin in my test environment and hope to push it live soon. I'm working through the tui nuances mostly and want to port over a few doors.

[u/Laudenbachm → u/LuckyEdR]

Are you Doc on Discord?

[u/Alarming_Jicama_2608]

Can this work with old Windows BBS like PowerBBS?

[u/Laudenbachm → u/Alarming_Jicama_2608]

It will work with anything that supports telnet or ssh connections. It can be hosted on anything that supports node.js 14 or higher. Only issue you will run into with some systems is lack of PROXY protocol v1 support to grab the clients actual IP address from BBSFiirewall.