TID: Mystic BBS 1.12 A48
MSGID: 1:129/215 62455e08
REPLY: 2:201/137 a004cbb7
TZUTC: -0500
 BW> choose to disable the anti-spoofing (IP) check? E.g. for the scenario
 BW> when a user uses fTelnet (an fTelnet proxy somewhere in the world) and
 BW> then wants to download the file via his/her web browser (another IP)?

fTelnet should be responding to a SENDLOC request which allows Mystic to get
the non-proxied IP address of the user.  This is either not working or Mystic
is accidentally not using that IP for web downloads which is highly possible.

If we can't get that working then I think the trusted proxy IP option is
probably the way to go.  I'll try to take a look at that tonight.

 BW> A configuration option for the download URL (e.g. if you have a web
 BW> server in front of MIS for HTTPS support with a "real" SSL certificate)
 BW> would also be a great addition. :)

The web server does support HTTPS but there was a delay when negotiating
connections with CryptLib.  I couldn't figure out why at the time so if memory
serves me, I disabled SSL and never came back to it.

It is technically possible to import a CA signed cert for the BBS but Cryptlib
doesn't have tools to import standard certificate formats (from what I
remember) into their proprietary keystore.

I would like to switch to OpenSSL instead because CryptLib has been annoying
to work with for me, and that could simplify much of this stuff.  The problem
is that I don't believe OpenSSL supports a SSH server which would be something
we need to figure out first.

... User Error: Replace user and hit any key to continue...

--- Mystic BBS v1.12 A48 (Windows/64)
 * Origin: Sector 7 * Mystic WHQ (1:129/215)
SEEN-BY: 1/123 15/0 90/1 103/705 105/81 106/201 120/340 616 123/10
SEEN-BY: 123/131 124/5016 129/215 305 153/757 7715 154/10 30 40 50
SEEN-BY: 154/700 203/0 218/700 220/90 221/0 1 6 226/18 30 70 227/114
SEEN-BY: 227/201 229/110 111 112 113 114 206 275 307 310 317 400 424
SEEN-BY: 229/426 428 452 470 550 664 700 240/1120 5832 261/38 266/512
SEEN-BY: 280/464 5003 282/1038 292/854 8125 301/1 317/3 320/219 322/757
SEEN-BY: 335/364 341/66 234 342/200 396/45 460/58 633/280 712/848
SEEN-BY: 770/1 2320/105 3634/12 5020/1042
PATH: 129/215 154/10 280/464 292/854 229/426