Cream of the Crop 22

home *** CD-ROM | disk | FTP | other *** search

/ Cream of the Crop 22 / Cream of the Crop 22.iso / bbs / firewall.zip / FIREWALL.DOC < prev next >

Wrap

Text File | 1996-10-07 | 27KB | 468 lines

───────────────────────────────────────────────────────────────────────────── ▄▄▄▄▄▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄ ▄▄▄▄ ▄▄▄ ▄▄▄▄▄▄▄▄ ▄▄▄▄ ▄▄▄▄ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █ █░░█ ▀▀▀ ▀▀▀▀ █░░█▄█▀ █░░█ ▀▀▀ █░░█ ▄▄▄ █░█ █░░█ █░█ █░░█ █░░█ █▒▒█▀ ▄▄▄▄ █▒▒█▀ █ █▒▒█▀ █▒▒█ █▒█ █▒█ █▒▒█▄█▒█ █▒▒█ █▒▒█ █▓▓█ █▓▓█ █▓▓█ ▓█ █▓▓█ ▄▄▄ █▓▓█ █▓█ █▓█ █▓▓█ █▓█ █▓▓█ ▄▄▄ █▓▓█ ▄▄▄ ████ ████ ████ ██ ████ ███ ████ ███ ███ ████ ███ ████ ███ ████ ███ ▀▀▀▀ ▀▀▀▀ ▀▀▀▀ ▀ ▀▀▀▀▀▀▀ ▀▀▀▀▀▀▀▀▀▀▀▀ ▀▀▀▀ ▀▀▀ ▀▀▀▀▀▀▀▀ ▀▀▀▀▀▀▀▀ v1.00 By: Michael J. van Zwieten 10/07/96 ───────────────────────────────────────────────────────────────────────────── ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Index 1 │ └───────────────────────────────────────────────────────────────────────────┘ Index...............................................1 Disclaimer..........................................2 License Agreement...................................3 Program Description.................................4 A real life example using Firewall!.................5 System Requirements.................................6 Enclosed File Descriptions..........................7 Installation of Firewall!...........................8 Setting up Firewall, step by step...................9 How I run Firewall on my system....................10 Ideas on how you can Firewall!.....................11 Additional Commandline Parameters..................12 Common Errors & Answers to Questions...............13 Registering Firewall!..............................14 Acknowledgements...................................15 Thanks.............................................16 ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Disclaimer 2 │ └───────────────────────────────────────────────────────────────────────────┘ Firewall is distributed without any type of warranty. Michael J. van Zwieten assumes no liability to you or any subsequent users for any damages, including any lost profits or other incidental or consequential damages arising out of your use or inability to use Firewall, even if Michael J. van Zwieten has been advised of any possibility of such damages. Michael J. van Zwieten will also not be liable for any such claim made by a third party. Basically...it has been tested, and it works as far as I know. ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ License Agreement 3 │ └───────────────────────────────────────────────────────────────────────────┘ The Firewall program, support files, and documentation are copyrighted products of Michael J. van Zwieten. Michael J. van Zwieten reserves all rights to these products. This is protected by the United States of America (USA) and International Copyright Laws. In no way shall the components of the software package be reproduced or modified in any form or method without prior expressly written permission from Michael J. van Zwieten. Tampering with or altering the contents or integrity of the software package is prohibited. No fee may be charged by any agency other than Michael J. van Zwieten beyond the cost of distributing unregistered copies without prior expressly written permission from Michael J. van Zwieten. A major portion of this software comes from the DDPlus Door Driver Package and was written by the authors of that package. The DDPlus Doordriver kit has been used for the communications, interrupt handling and some utility functions and that part of the software remains copyrighted by the authors of the DDplus Package. ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Program Description: 4 │ └───────────────────────────────────────────────────────────────────────────┘ Firewall is a door program that was designed to load after a front-end mailer, or logon matrix, and acts as a front-end, requiring a valid Username and Password before being allowed to pass to whatever program you have set it up to pass to using errorlevels in a batchfile. Firewall was made to emulate a Unix logon in a Telnet session. This entails that names must be typed in EXACTLY the way they are written in the config file, caps and lowercase characters, and a no-echoing password entry. If the Username and Password were entered right, Firewall will exit them out with an errorlevel, and if after 2 attempts, the Username and Password are still wrong, Firewall will drop carrier on the user, and exit to a different errorlevel. ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Real-life Example: 5 │ └───────────────────────────────────────────────────────────────────────────┘ I currently use Firewall to only allow those who actively used Fidonet Email on my old Bulletin Board, while running a newer Bulletin Board on the side. The old board was still fully configured to handle the mail traffic, while the new one was still under construction. Firewall allowed me to effectively control who I wanted to logon to the old BBS without having to totally re-configure the old BBS by wiping out user configurations, and setting the BBS to not accept any new callers. ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Requirements: 6 │ └───────────────────────────────────────────────────────────────────────────┘ At this point in time the only requirements are FILES=10 (or more) in your config.sys file and ANSI.SYS. SHARE must also be loaded IF you intend to use the Firewall program in a multi-node environment OR under DesqView. The Firewall program is RIP aware but NOT a RIP program at this time. A FOSSIL is NOT required to run the Firewall program, although one will be supported if it exists. Automatic time slicing support is provided to most common multi-taskers as well. ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Enclosed Files & Descriptions: 7 │ └───────────────────────────────────────────────────────────────────────────┘ FIREWALL.DOC - What you're reading right now! REGISTER.FRM - The Registration Form. WHATS.NEW - Standard "what's new in this version" FIREWALL.EXE - Main executable FIREWALL.CTL - DDPlus Door Driver Control File. I'll go over the config for this file later on in this document. SAMPLE.CTL - Complete Sample DDPlus Door Driver Control File... look at this for further examples if you need to. FIREWALL.CFG - Registration / Sysop / BBS Config File. I'll go over the config for this file later on in this document. USERIDS.CFG - Username and Password Config File. I'll go over this too, later on in this file. DOOR.SYS - Door Drop File. This file must stay with the other files, and will go over any changes later on in this document. ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Installation of Firewall: 8 │ └───────────────────────────────────────────────────────────────────────────┘ Just unzip FIREWALL.ZIP and *ALL* it's files into it's own subdirectory of your choice. I will refer to Firewall being in the C:\BBS\DOORS\FIREWALL directory in this document. ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Setting up Firewall, step by step: 9 │ └───────────────────────────────────────────────────────────────────────────┘ The following 4 files, found in your Firewall directory will be ones you'll have to use a text editor on to customize your copy of Firewall: 1). FIREWALL.CTL 2). FIREWALL.CFG 3). DOOR.SYS 4). USERIDS.CFG Here is a brief description and overview on what to do to each file: 1). Editing FIREWALL.CTL. The FIREWALL.CTL file contains information vital to the operation of the Firewall Door. All items listed here must be included, and filled out. The following is the sample (and working) FIREWALL.CTL file: SYSOPFIRST Joe ^^^ - Change this to your First Name SYSOPLAST Schmoe ^^^^^^ - Change this to your Last Name BBSNAME The Dark Side BBS ^^^^^^^^^^^^^^^^^ - Change this to your BBS Name BBSTYPE DOORSYS ^^^^^^^ - Leave this as is - we're using the DOOR.SYS that was enclosed with this archive. COMPORT 1 ^ - Change this to your COM port number XFOSSIL - Use this if your COM port's locked Baud rate is at or above 57600, and you're using an external Fossil Driver. If your locked Baud Rate is lower, using an external Fossil Driver, change this value to FOSSIL. If your not using any kind of external Fossil Driver, just totally delete this option, and FIREWALL will use it's own internal Fossil routines. PORT1 03F8 4 | | |- Change this to your COM port's IRQ channel | | | |---- Change this to your COM port's physical address | COM1 is usually 03F8 and IRQ 4 | COM2 is usually 02F8 and IRQ 3 | |---------Change this to your COM port number LOCKBAUD 57600 ^^^^^ - Change this to your COM port's locked baud rate. 14.4k Modems usually are at 38400 28.8k Modems usually are at 57600 or 115200 STATUS ON - Leave this as is - keeps the status bar on the bottom of the screen on. STATFORE 7 - Leave this as is - Status Bar Foreground color STATBACK 1 - Leave this as is - Status Bar Background color For more information or additional entries/features not mentioned here, please refer to the SAMPLE.CTL file included with this archive. 2). Editing FIREWALL.CFG. The FIREWALL.CFG file contains your Registration Number, Sysop Name and BBS/Business Name. If you have not registered, it's a good thing to just keep the top line all 0's. If you have registered, I'd like to thank you very much for contributing to the development of this program! The following is the sample (and working) FIREWALL.CFG file: 0000000 - Your registration number Joe Schmoe - Your Full Name The Dark Side BBS - Your BBS Name 3). Editing DOOR.SYS. The DOOR.SYS file is a Door Drop File usually created by your BBS software to tell the Door Program some information about the caller before entering the door, so that it can pass on names, time left on the BBS, etc. Other familiar Door Drop Files are DORINFO1.DEF, TRIBBS.SYS, PCBOARD.SYS, etc. The following is the top portion of the enclosed DOOR.SYS file. You will only need to edit the top portion of this file for your needs to get the door up and running. If you are going to use Firewall in a situation other than a front-end (where the user physically hasn't logged on yet to produce a DOOR.SYS file), then you will need to have your BBS or batchfiles copy the newly created DOOR.SYS file to your Firewall directory: COM1: - Change this to reflect your COM port number. 28800 - Change this to your modem's highest connect speed. 8 - Don't worry about this... 2 - Don't worry about this either... 57600 - Change this to your COM port's locked Baud Rate. ... ... - Leave the rest unchanged... ... 4). Editing USERIDS.CFG. The USERIDS.CFG file contains the Usernames and passwords for those who you want to be able to pass through the Firewall door. Please remember that if the user wants to logon correctly, he/she must type in the name/password *EXACTLY* as you have it in the USERIDS.CFG. Missed Caps/lowercase letters will not be tolerated by the system (like Unix!) :) The following is the sample (and working) USERIDS.CFG file: Jack Indabocks - Name 1 stardestroyer - Password for Name 1 Mike Hunt - Name 2 wanker - Password for Name 2 ... ... Joe Bloe - Name X schmoe - Password for Name X - *NOTE* Don't hit enter on the last line in the USERIDS.CFG file. If you did, just move the cursor to the end of the last line, and lean on the delete key until you are pretty sure all the carriage returns are gone, then save. That's it for editing files! Now let's take a look at some examples on how we can set Firewall up to run for you! ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ In basic terms, how I run Firewall on my System: 10 │ └───────────────────────────────────────────────────────────────────────────┘ 1). My Front-end Mailer picks up the call. 2). A Logon Matrix lets the user pass on to a variety of choices, one of which is Firewall. 3). If Firewall is chosen, it runs via a batchfile: :Firewall @echo off cd c:\bbs\doors\firewall firewall if errorlevel 2 goto OldBBS if errorlevel 1 goto Cleanup goto AfterBBS :OldBBS ... runs old BBS :Cleanup ... after BBS cleanup & maintenance If the user passed the Username/Password, he/she will exit with an errorlevel of 2, and pass onto the Old BBS. If they fail the logon, they will have carrier dropped on them, and Firewall will exit with an errorlevel of 1, and pass onto the After BBS cleanup. This example above could also easily be dropped right into your Front-end Mailer Batchfiles, or, into any one of your Door Batchfiles! ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ How you could run Firewall: 11 │ └───────────────────────────────────────────────────────────────────────────┘ Firewall is very configurable to use pretty much anywhere for anything! You could run it right after your mailer picks up the call, before it hits the BBS... or you could set Firewall up to run before an adult Door Game is run to completely control who can go in and who can't. I'm sure each and everyone of you will be able to make great use of Firewall! ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Additional Commandline Parameters, if you want or need them: 12 │ └───────────────────────────────────────────────────────────────────────────┘ "/Bxxxxx" This tells FIREWALL.EXE to lock its baud rate at xxxxx. In order to get the most efficiency out of a high speed error correcting modem (9600 baud or above), you may lock the baud rate to a speed higher than what the caller is actually using. By locking the baud to say 38,400, the modem can compress text data that is being sent and achieve a baud rate much higher than the actual transmission rate. This will lock the baud rate at the same value for all nodes that use this command line. If you perfer a more selective way to lock baud use 'LOCKBAUD' command in the FIREWALL.CTL file. "/Cx" (where x is 1..4) This specifies a comport number. Some bbs software does not create door information files (dropfiles) that contain the comport number. If your bbs does have a comport listed in the dropfile then there is no need for this parameter. The default is comport 0, local mode. "/E" - Expanded Memory Specification. If your machine has over one megabyte of memory, then you may have some available. FIREWALL.EXE can utilize EMS to improve performance and reduce conventional memory requirements. This command will tell FIREWALL.EXE to use EMS memory to hold its overlay buffer. Otherwise harddisk area may be used to hold this buffer. This needs a memory manager and when enabled and is compatible with DESQview. Default is NOT to use available EMS. "/L" This tells FIREWALL.EXE to load up in LOCAL mode. This is good for testing or when a sysop just wants to "try out" the door without messing with his BBS setup. The "/L" mode will ask the user for his name and run the door in local mode. "/Nx" (where x is 1..9) This specifies a "node number". Some bbs software support multinode environments in which you must know the node number of the drop file to use. For example, RBBS-PC uses DORINFOx.DEF. If you specified "/N2" then FIREWALL.EXE would use DORINFO2.DEF. "/Pyyy" This specifies the path to the drop files. For example, "/PC:\WILDCAT\WCWORK\NODE1" would tell FIREWALL.EXE to look for the drop file in C:\WILDCAT\WCWORK\NODE1. If this is left out the program assumes the drop file is local. "/V" This command will tell FIREWALL.EXE not to show any display on the local screen. Only a colored screen and a message will be displayed. The cursor will not move as it will be turned off. Saves a little processing on multi-tasking systems. "/W" This flags the program that a network is present even though no multitaskers are detected. This is useful if the door is run on a network such as Novell that doesn't use multitaskers. ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Common Runtime Errors & Q&A to Common Problems: 13 │ └───────────────────────────────────────────────────────────────────────────┘ Error 201 Files not found. Check to make sure that all required files are in your FIREWALL directory. Problem1: "I set up a User & Password, and when he/she tried to logon, they were kicked off, even though they typed the correct name and password" Answer1: The name and password may have been spelled correctly, but they probably did not use the correct Capital/Lower Case letters that you set up in the USERIDS.CFG file. Look at this table for examples: USERIDS.CFG File What User Entered FIREWALL's Response ---------------------------------------------------------------------------- Joe Schmoe joe schmoe Invalid ZZZzzz zzzzzz Invalid John Doe John Doe Valid BlahBlah blahBlah Invalid Again, if the user does not type out *EXACTLY* what you put down in the USERIDS.CFG file, they will be kicked off. Unix is not forgiving, so FIREWALL shall not be either... ;) ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Registering Firewall: 14 │ └───────────────────────────────────────────────────────────────────────────┘ Firewall is Shareware. You are granted a 30-day trial period to test the program, after which you must register it or cease to use it. Use of the program beyond a 30-day trial period is prohibited unless the program is registered. By registering Firewall, you can be asured of continued development of the software. Thank you for your support! This Program may be freely distributed but DO NOT under any circumstances change any of the executables or alter any files that come in the original distribution archive. I urge you to register as soon as you can! The more registrations that I have will show the interest of people in the program, and I will release a newer version with many more features. If you register, the 10 second "nag" delay when Firewall fires up, will be removed. If you wish to register, please fill out the registration form REGISTER.DOC enclosed with this archive. ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Acknowledgements: 15 │ └───────────────────────────────────────────────────────────────────────────┘ DDplus 7.1 - Distributed by Steve Lorenz and Bob Dalton - 1995 ┌───────────────────────────────────────────────────────────────────────────┐ │░░░▒▒▒▓▓▓ Thanks! 16 │ └───────────────────────────────────────────────────────────────────────────┘ * To my wife for putting up with me spending way too much time on the computer! :) * To my beta testers for finding da bugs! * To all of you who have registered, and are contributing to the development of this program!