<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.10.3">
</HEAD>
<BODY>
QSL Jay - and CONV access tested successfully in W. Mich.<BR>
Based on my experience, this is new ground and I will proceed to include all this in documentation.<BR>
If these topics already exist in documentation somewhere - may I have links to them for inclusion?<BR>
<BR>
Now you will note I expand this thread to include security.<BR>
My experience is that use of the -6 SSID to enable direct connect via AX-25 thwarts password security.<BR>
I have not explored the other direct connect options, I will later...<BR>
<BR>
I find some concern in this lack of identity check.<BR>
Granted, security is lax in most jnos installations, but integration with Internet opens Pandora's box.<BR>
I'd like to hear from this community - is the risk worth making an issue of it?<BR>
<BR>
For my station, I believe I will not enable the feature until security is a fully explored subject.<BR>
I'm satisfied that the doorway to the BBS is as secure as jnos is capable.<BR>
I'm also satisfied the overhead of indirect connect (for BOTH man and computer) is trivial.<BR>
<BR>
On Wed, 2006-12-13 at 07:14 -0500, Jay Nugent wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">Greetings Skip,</FONT>
</PRE>
</BLOCKQUOTE>
>>SNIP<<
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">> Isn't it a misnomer to "connect to CONV bridge" since "connect" syntax</FONT>
<FONT COLOR="#000000">> is intended for BBS-to-BBS interconnect via AX-25?</FONT>
<FONT COLOR="#000000"> No. An AX25 "connect" can be to ANY service. Whether that service be</FONT>
<FONT COLOR="#000000">a BBS, a console, a teleprinter, a PBBS, a CONVerse bridge, a Node, or a</FONT>
<FONT COLOR="#000000">database. It's mearly a way of establishing a connection between two</FONT>
<FONT COLOR="#000000">stations setting up a path that data may flow between them.</FONT>
</PRE>
</BLOCKQUOTE>
A question directed at Maiko and other developers:<BR>
If password security is deemed to be more important than offering the shortcut connect feature to users,<BR>
then can you guess at the effort required to add a password challenge to these "direct" access features?<BR>
Where would it fall in your list of interests/priorities?<BR>
<BR>
I offer the following as insight into my personal interests - not for detail conversation at this time...<BR>
<BR>
I am beginning to explore the issues of abuse via Internet access to jnos, and the history leading to policies of dis-allowing open access to to email transport agents. At this point I believe I have an incomplete appreciation for the subject, however if I am at least close to the crux of the matter it seems like tools exist to manage the risk while having relatively open Internet links. The approach I see involves use of software like fetchmail, iptables, spamguard, and the like to manage the traffic over the tun interface to Internet. It also seems that offering direct connect via -6 SSID without pwd validation as an example plays into this scenario.
<BLOCKQUOTE TYPE=CITE>
<PRE>
</PRE>
</BLOCKQUOTE>
>>SNIP<<
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000"> Koolness! And with JNOS there is always more than one way to skin a</FONT>
<FONT COLOR="#000000">cat. Personally I prefer method #49, to use a power sander... YOW!! ;-</FONT>)
</PRE>
</BLOCKQUOTE>
Kewl Jay - and yes jnos is multifaceted.<BR>
A sidelight question to you and MI-DRG:<BR>
How would you and DRG feel if I were to redirect my documentation effort away from publishing a .pdf document and toward perhaps populating a wiki with the material and opening it to further development using wiki-like tools? It seems to me the relationship between open access and security is a worthy topic for development - specifically for jnos sysops.
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000"> --- Jay Nugent WB8TKL</FONT>
<FONT COLOR="#000000"> Chair, ARRL Michigan Section "Digital Radio Group" (DRG)</FONT>
<FONT COLOR="#000000"> [<A HREF="http://www.MI-DRG.org">www.MI-DRG.org</A>]</FONT>
</PRE>
</BLOCKQUOTE>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<BR>
73<BR>
de [George (Skip) VerDuin] K8RRA k
</TD>
</TR>
</TABLE>
</BODY>
</HTML>