Commit Graph

151 Commits

Author SHA1 Message Date
Bryan Ashby f8788d56d6
Merge branch '0.0.10-alpha' of ssh://numinibsd/git/base/enigma-bbs into security-updates 2019-06-11 18:25:35 -06:00
Bryan Ashby 487968dac9
Fix my previous dumb 2019-06-09 09:19:34 -06:00
David Stephens 43e22cfc74 Turn off debug logging of MRC message sending 2019-06-05 23:41:28 +01:00
David Stephens 8153473b89 Dial down MRC logging 2019-05-31 22:00:48 +01:00
David Stephens 19e10bb096 Tweak to MRC handshake 2019-05-31 21:19:29 +01:00
David Stephens 136854017a Lots of tidy-up from PR #235 feedback 2019-05-31 20:32:16 +01:00
David Stephens 593bf67b45 Stop passing sockets all over the place. General tidy up and refactor. Add reconnection to MRC logic. 2019-05-31 01:16:32 +01:00
David Stephens 109b157c02 more MRC bug squashing and tidy up 2019-05-26 00:14:36 +01:00
David Stephens 9f4f1fca13 Refactor and rename of MRC client and multiplexer 2019-05-22 23:43:41 +01:00
David Stephens 92528fc16f MRC bug squashing 2019-05-20 23:37:32 +01:00
David Stephens 67ecad4e1a Implemented most MRC server calls 2019-05-19 00:01:58 +01:00
David Stephens 9c2b3be0b1 MRC WIP 2019-05-18 00:25:35 +01:00
Bryan Ashby e960e2800d
Merge branch '0.0.10-alpha' of ssh://numinibsd/git/base/enigma-bbs into security-updates 2019-05-06 20:49:16 -06:00
Bryan Ashby 50426d0e60
Listen 'address' for WebSockets 2019-04-09 20:25:37 -06:00
Bryan Ashby 37ea1e3a30
Listen 'address' for SSH 2019-04-09 20:25:27 -06:00
Bryan Ashby 8114a1e3f2
Listen 'address' for Telnet 2019-04-09 20:25:14 -06:00
Bryan Ashby 3460b98bf5
Listen 'address' for Web 2019-04-09 20:25:03 -06:00
Bryan Ashby d54338c46e
Listen 'address' for Gopher 2019-04-09 20:24:52 -06:00
Bryan Ashby 0ed507cd7b
Initial real 2FA/OTP work 2019-04-09 20:07:19 -06:00
Bryan Ashby 23779c3abe
Use authInfo obj vs weird params. auth factor 1: factor 2 for 2FA, etc. 2019-02-22 22:51:12 -07:00
Bryan Ashby 57938e761e
+ Implement SSH PubKey authentication
* Security related items to config/security dir
2019-02-20 23:55:09 -07:00
Bryan Ashby 8ba80426e3 Better disconnect - should resolve issues with SSH 2019-02-02 10:20:22 -07:00
Bryan Ashby f15629682c Fix outstanding SSH bug seen with NetRunner and SyncTERM with ugly hack: Disable keep-alives 2019-01-29 20:36:45 -07:00
Bryan Ashby 6408e40604 Fix minor typo 2019-01-13 19:10:54 -07:00
Bryan Ashby c5a72c7356 TODO notes 2019-01-02 20:08:00 -07:00
Bryan Ashby b23cdd20bf Listen to 'env' events 2019-01-02 19:52:15 -07:00
Bryan Ashby 4fb7c4bf53 Some minor cleanup 2018-12-31 11:33:14 -07:00
Bryan Ashby 3864d957c9 * Servers now use async listen() 2018-12-27 02:46:16 -07:00
Bryan Ashby 9d1815682d * ServerModule's createServer() is now async
* Re-write of NNTP Message-ID <> internal message UUIDs
2018-12-27 02:19:26 -07:00
Bryan Ashby ee93035bb8 * Disconnect clients that attempt to login with banned usernames for Telnet as well
* Slow disconnects to thwart brute force attacks - these names won't exist anyway,
  but we want the attacking client to not DoS us
2018-12-25 00:18:04 -07:00
Bryan Ashby 06a1925288 Check bad usernames @ login 2018-12-24 15:32:38 -07:00
Bryan Ashby 73e8b0454e Wrap ctx.reject() and catch throws 2018-12-24 15:14:37 -07:00
Bryan Ashby f4088303ca cleanControlCodes -> stripAnsiControlCodes 2018-12-17 22:08:59 -07:00
Bryan Ashby 1f5ec39778 Strip pipe codes! 2018-12-17 21:39:10 -07:00
Bryan Ashby b1eea4f4b7 Some logging updates 2018-12-17 11:20:14 -07:00
Bryan Ashby 6d45d74a47 Little better NNTP config 2018-12-15 23:52:59 -07:00
Bryan Ashby cf6e3d3ba8 Better logging 2018-12-15 02:40:36 -07:00
Bryan Ashby 4b2771012b Show desc if set 2018-12-15 02:06:15 -07:00
Bryan Ashby dba2fc18f6 Strip MCI/Pipe codes 2018-12-15 01:55:38 -07:00
Bryan Ashby a3ba57b0b8 Fix schedule issue 2018-12-14 23:21:33 -07:00
Bryan Ashby b903b2ee82 Better logging 2018-12-14 23:08:53 -07:00
Bryan Ashby 874aee5baa Change listen addr 2018-12-14 23:03:10 -07:00
Bryan Ashby 772022f0d0 + NNTP Content Server
* Read-only to public conf/areas only for now
* Missing some protocol support
* Could use better encoding practices and ANSI prep
2018-12-14 22:21:57 -07:00
Bryan Ashby df2bf4477e SECURITY UPDATE
* Handle failed login attempts via Telnet
* New lockout features for >= N failed attempts
* New auto-unlock over email feature
* New auto-unlock after N minutes feature
* Code cleanup in users
* Add user_property.js - start using consts for user properties. Clean up over time.
* Update email docs
2018-11-22 23:07:37 -07:00
Bryan Ashby 9fd819d608 Resolve TODO RE using EnigError for bad login attempts 2018-11-21 19:43:50 -07:00
Bryan Ashby ebc70907d4 Newest messages first when listing msgs from Gopher 2018-11-21 17:55:31 -07:00
Bryan Ashby 3af5b6f509 * Word wrap messages when output via Gopher server
* Fix Gopher startup banner default
2018-11-20 21:02:30 -07:00
Bryan Ashby 74b03fe846 Fix exception when no SSH stuff is configured 2018-11-12 22:05:36 -07:00
Bryan Ashby 25560cb47a SyncTERM SSH support
+ Enabled all ssh2-streams supported KEX, ciphers, etc. for now. Will communicate with Deuce about this.
2018-11-04 19:29:51 -07:00
Bryan Ashby 3f34f77fcd Implement fake pipe() for WebSocket (doors/etc.) 2018-07-08 11:23:56 -06:00