Subj : Re: BBS Listing Outbound Telnet
To   : Apam
From : Warpslide
Date : Mon Oct 19 2020 10:49 am

On 19 Oct 2020, Apam said the following...
 
 Ap> Anyway, I then realized I was opening up a the possibility for anyone to
 Ap> add any lan address in the bbs list and telnet to it... I'm no security
 Ap> expert, but I don't really want anyone tunneling through my BBS onto my
 Ap> LAN.

That's a good point.  Never thought about using that as a means of moving laterally into the network.

....or maybe using your BBS as jumping point to other areas of the internet,
like how the Carna Botnet used weak passwords to log in & exploit ~420,000 telnet hosts:

https://seclists.org/fulldisclosure/2013/Mar/166


Jay

.... I put all my spare cash into an origami business. It folded.

--- Mystic BBS v1.12 A47 2020/10/13 (Raspberry Pi/32)
 * Origin: Northern Realms (21:3/110)

.