Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

Setting up a BBS. Security questions

Thread Tools
 
Search this Thread
 
Old 08 May 2003, 04:06 PM
  #1  
Jeff Wiltshire
Scooby Regular
Thread Starter
 
Jeff Wiltshire's Avatar
 
Join Date: Nov 2000
Location: 412 Wheel HP Audi RS4
Posts: 2,021
Likes: 0
Received 1 Like on 1 Post
Post

Obviously it depends on your defination of expensive....

A 10 concurrent user Netilla is £6K +VAT....

More info off-line if anyone want to discuss it further

there is a demo of the Netilla here

[Edited by Jeff Wiltshire - 8/5/2003 4:07:16 PM]
Old 05 August 2003, 03:53 PM
  #2  
douglasb
Scooby Regular
 
douglasb's Avatar
 
Join Date: Jun 2003
Location: use the Marauder's Map to find out.
Posts: 2,041
Likes: 0
Received 0 Likes on 0 Posts
Question

I think I have worked out the answer to this myself, but I'd like to run the situation past people with more knowledge of the subject than I have to see if my thinking is correct or if I have missed anything obvious.

The company I work for has a lot of people such as sales, service and support who tend to be on the road a lot and not in an office very much. Inevitably, they will come across situations where someone else will aready have hit the same problem and will have an answer. The problem is knowing who it will be that has the answer. Rather than phoning around until they find the right person, the solution would seem to be a BBS where questions can be asked. A FAQ section and a "useful downloads" area would also be useful.

I have the option of setting this up as part of the corporate Intranet or renting some Web space and putting it on the Internet.

Pro the Intranet option is that it will be behind the company firewall. Access is then only allowed to legitimate users as authentication will already have taken place before users reach the BBS. Against this is the fact that access when out of an office will only be dial-up. If someone needs to download a 2MB file and only has a 30K line a lot of waiting is involved.

The Internet option allows easier and faster access so that someone needing to check a FAQ or download a file when on a customer site can get access from any PC. Against this is security. I've had a look at phpBB and DiscusWare software which will allow usernames and passwords for access before being able to view anything, however if a casual surfer who hasn't logged on uses Search and gets lucky they will be able to view any messages with the search term in it.

While most of the topics will be fairly boring to any non employee, it could be possible to find company confidential information. (For example, if a competitor knew that there was a BBS they could try addresses like ABCforum.co.uk until they found it. If we were both pitching for business at XYZ plc, they could search for XYZ and might find out information about pre-sales problems we were encountering).

Is there a way to make an Internet BBS secure or is the Intranet option the only answer? Anything I've missed? Any other ideas?

Doug
Old 05 August 2003, 03:58 PM
  #3  
Jeff Wiltshire
Scooby Regular
Thread Starter
 
Jeff Wiltshire's Avatar
 
Join Date: Nov 2000
Location: 412 Wheel HP Audi RS4
Posts: 2,021
Likes: 0
Received 1 Like on 1 Post
Post

There is a 3rd option which is too use a SSL VPN product which will allow you to have all the security of a IPSec VPN client but without the VPN client software. This allows you to access your corporate network from any device with a browser and Internet access. Solutions are available from

Aventail
Netilla which is the one we sell
as well Whale Communications....

Definatly the way forward for remote access solutions.


Jeff
Old 05 August 2003, 04:01 PM
  #4  
suba
Scooby Regular
 
suba's Avatar
 
Join Date: Mar 2000
Posts: 2,462
Likes: 0
Received 0 Likes on 0 Posts
Question

next question...

is it gonna be expensive?
Old 05 August 2003, 04:28 PM
  #5  
JackClark
Scooby Senior
 
JackClark's Avatar
 
Join Date: Dec 2000
Location: Overdosed on LCD
Posts: 20,852
Received 51 Likes on 34 Posts
Post

I've used Sharepoint in the past and it's worked well.
Old 05 August 2003, 05:27 PM
  #6  
stevencotton
Scooby Regular
 
stevencotton's Avatar
 
Join Date: Jan 2001
Location: behind twin turbos
Posts: 2,710
Likes: 0
Received 1 Like on 1 Post
Post

I'd probably use something like Bugzilla instead of a BBS, might be more suited to the task?

You could also just use basic HTTP auth over SSL/TLS and sign your own certificates, since you'll have control over the clients you can include a client cert too, it doesn't matter if there is no CA if its only your employees that'll be using it.

Total cost: £0, but YMMV!
Old 06 August 2003, 07:06 PM
  #7  
douglasb
Scooby Regular
 
douglasb's Avatar
 
Join Date: Jun 2003
Location: use the Marauder's Map to find out.
Posts: 2,041
Likes: 0
Received 0 Likes on 0 Posts
Post

Thanks for the replies. As the whole thing is at the "prove it works and we might spend some money" stage, £0 looks better than £6K

I'll investigate further. Thanks for pointers in the right direction.

Doug
Old 06 August 2003, 07:17 PM
  #8  
ianmiller999
Scooby Regular
 
ianmiller999's Avatar
 
Join Date: Feb 2003
Posts: 1,285
Likes: 0
Received 0 Likes on 0 Posts
Post

phpNuke

www.whosbest.net has a link somewhere at the bottom of the page and I believe there is a way make a password access area.
Old 07 August 2003, 10:54 AM
  #9  
suba
Scooby Regular
 
suba's Avatar
 
Join Date: Mar 2000
Posts: 2,462
Likes: 0
Received 0 Likes on 0 Posts
Post

i am sure if you can password protect a directory where the bbs will be on, that should be enuf? for example you could password protect the directory www.yourcompany.co.uk/internal/bbs and put the bbs stuff there. just dont put a link on the main website so your user will have to type in the URL manually or put it in their favourites.
Old 07 August 2003, 11:56 AM
  #10  
Figment
Scooby Regular
 
Figment's Avatar
 
Join Date: Jul 2001
Location: deep inside your imagination
Posts: 24,057
Likes: 0
Received 0 Likes on 0 Posts
Post

you could use vBulletin, which allows you to specify access/viewing/posting rights on a per forum, per usergroup and per user level, so you could set it to only allow access to registered users, thereby shutting out casual surfers who happen across the site. By setting metatags correctly, you should also be able to prevent spiders crawling through the BBS, so topics would not be available on search engines.

You could even make it so your clients have read-only access to pertinent forums if this could prove beneficial to your service.
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
taylor85
Wheels And Tyres For Sale
9
28 September 2015 11:34 PM
johnnybon
Wheels And Tyres For Sale
7
25 September 2015 07:49 AM
ossett2k2
Engine Management and ECU Remapping
15
23 September 2015 09:11 AM
Nick71
Subaru Parts
0
21 September 2015 07:54 PM
domino46
Subaru Parts
1
11 September 2015 08:54 AM



Quick Reply: Setting up a BBS. Security questions



All times are GMT +1. The time now is 12:44 AM.