Re: View but not download files via web
By: nelgin to All on Sun Aug 10 2025 04:12:01

Hi all,

I'm sure someone has solved this before.

I want no-logged in users to be able to view file areas and file information but not download files over HTTP or HTTPS.

Surely, someone has done this before and hopefully they will share their special sauce :) Thanks.

i think this should help https://wiki.synchro.net/custom:webv4?s[]=webctrl&s[]=ini

i wanted to have (for now) most of the web interface show to logged in users only. Not sure if that is a perfect example, but i think it works =)

my current webctrl.ini

AccessRequirements = level 90
Authorization = Digest

[*games.xjs]
AccessRequirements = LEVEL 50 AND REST NOT G

[*files.xjs]
AccessRequirements = LEVEL 50 AND REST NOT G

[*forum.xjs]
AccessRequirements = LEVEL 50 AND REST NOT G

[*forum.ssjs]
AccessRequirements = LEVEL 50 AND REST NOT G

[*.mail.xjs]
AccessRequirements = LEVEL 50 AND REST NOT G


Mindsurfer

---
þ Synchronet þ FuNToPiA BBS - telnet://funtopia.synchro.net:3023 ssh:3022
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Surely, someone has done this before and hopefully they will share their special sauce :) Thanks.

Download Requirements = PROT NOT HTTP and NOT HTTPS

but... why?

Not sure why he wanted it, but I know what I needed it for.

I enjoyed offering older DOS programs up for download for anyone, user or
not. However, the companies that scan systems for files and then blacklist them do not like older programs, especially ones that might be compressed
with PKLITE or some other process.

Those being available get flagged, then you start getting a bunch of
complaints that other sysops (who use these defense products on their
Windows machines) can no longer connect via binkp, and from users who can
no longer connect via even telnet.

That latter group will get an error pop-up from the product, so you know
what is causing it. The companies, since you are not a customer of theirs,
are not very motivated to remove your info from their blacklists.
It is a real PITA.


* SLMR 2.1a * Learn from your parent's mistakes... Use Birth Control!
---
þ Synchronet þ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Mike Powell to DIGITAL MAN on Mon Aug 11 2025 09:36 am

Surely, someone has done this before and hopefully they will share their special sauce :) Thanks.

Download Requirements = PROT NOT HTTP and NOT HTTPS

but... why?

Not sure why he wanted it, but I know what I needed it for.

I enjoyed offering older DOS programs up for download for anyone, user or not. However, the companies that scan systems for files and then blacklist them do not like older programs, especially ones that might be compressed with PKLITE or some other process.

Those being available get flagged, then you start getting a bunch of complaints that other sysops (who use these defense products on their Windows machines) can no longer connect via binkp, and from users who can
no longer connect via even telnet.

That latter group will get an error pop-up from the product, so you know what is causing it. The companies, since you are not a customer of theirs, are not very motivated to remove your info from their blacklists.
It is a real PITA.

Maybe just disallow Guest from downloading (or downloading via HTTP/HTTPS). To disallow all your users from downloading via HTTP/HTTPS seems like an over-reaction to me.

But for decades, Vertrauen has allowed non-authenticated and guest users to download all files (including old ones compressed with PKLITE) via HTTP/HTTPS and I've never had the issue describe. Maybe I've just been lucky.
--
digital man (rob)

Synchronet/BBS Terminology Definition #29:
DTR = Data Terminal Ready
Norco, CA WX: 87.3øF, 46.0% humidity, 2 mph WNW wind, 0.00 inches rain/24hrs --- SBBSecho 3.29-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Maybe just disallow Guest from downloading (or downloading via HTTP/HTTPS). To >disallow all your users from downloading via HTTP/HTTPS seems like an >over-reaction to me.

I am not certain if that is actually what I did, or if I realized that "disallowing guest" wasn't working and just turned them all off.

Based on what I have in scfg, putting "NOT GUEST" there didn't work.

Putting "NOT GUEST" in ~/webv4/pages/webctrl.ini, under [*files.xjs] is IIRC what did it.


* SLMR 2.1a * Pass the tequila, Manuel...
---
þ Synchronet þ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Digital Man to Mike Powell on Mon Aug 11 2025 11:58:30

Maybe just disallow Guest from downloading (or downloading via HTTP/HTTPS). To disallow all your users from downloading via HTTP/HTTPS seems like an over-reaction to me.

Actually, that's what I meant to do.I'm going to have go and fix that. So

LEVEL 60 OR PROTO NOT HTTP AND NOT HTTPS ?

---
þ Synchronet þ End Of The Line BBS - endofthelinebbs.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: nelgin to Digital Man on Wed Aug 13 2025 04:17 am

Re: View but not download fil
By: Digital Man to Mike Powell on Mon Aug 11 2025 11:58:30

Maybe just disallow Guest from downloading (or downloading via HTTP/HTTPS). To disallow all your users from downloading via HTTP/HTTPS seems like an over-reaction to me.

Actually, that's what I meant to do.I'm going to have go and fix that. So

LEVEL 60 OR PROTO NOT HTTP AND NOT HTTPS ?

When mixing AND or and OR logic, yes parens:

LEVEL 60 OR (PROTO NOT HTTP AND NOT HTTPS)
--
digital man (rob)

This Is Spinal Tap quote #34:
We'd love to stand around and chat, but we've gotta sit down in the lobby Norco, CA WX: 71.4øF, 79.0% humidity, 2 mph SW wind, 0.00 inches rain/24hrs
--- SBBSecho 3.29-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Digital Man to nelgin on Wed Aug 13 2025 10:14:25

When mixing AND or and OR logic, yes parens:

LEVEL 60 OR (PROTO NOT HTTP AND NOT HTTPS)

Thanks, I'll give that a try.

---
þ Synchronet þ End Of The Line BBS - endofthelinebbs.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Digital Man to nelgin on Wed Aug 13 2025 10:14 am

Maybe just disallow Guest from downloading (or downloading via

When mixing AND or and OR logic, yes parens:

LEVEL 60 OR (PROTO NOT HTTP AND NOT HTTPS)

If you want to disallow the guest, would "REST NOT G" do the trick? I've been using that for a while and it seemed like that works as expected.

Nightfox

---
þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Nightfox to Digital Man on Wed Aug 13 2025 03:56 pm

Re: View but not download fil
By: Digital Man to nelgin on Wed Aug 13 2025 10:14 am

Maybe just disallow Guest from downloading (or downloading via

When mixing AND or and OR logic, yes parens:

LEVEL 60 OR (PROTO NOT HTTP AND NOT HTTPS)

If you want to disallow the guest, would "REST NOT G" do the trick? I've been using that for a while and it seemed like that works as expected.

Yes. Or event better, "NOT GUEST".
--
digital man (rob)

Synchronet "Real Fact" #136:
Synchronet Ad: If you had three wishes, you could toss the other two
Norco, CA WX: 84.1øF, 50.0% humidity, 10 mph WSW wind, 0.00 inches rain/24hrs --- SBBSecho 3.29-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Digital Man to nelgin on Wed Aug 13 2025 10:14 am

If you want to disallow the guest, would "REST NOT G" do the trick? I've been using that for a while and it seemed like that works as expected.

Nightfox

---
¨ Synchronet ¨ Digital Distortion: digitaldistortionbbs.com

Other than bulletins I have all areas set for access at any level and execution set for level 50 or up. Guests are default level 10. Once they register they are level 50. This has made for a more pleasant environment here. Guests can look but not touch :) I only ask for a name or handle and location in registration. I do not need more than that. This works through the message bases, web server and telnet and so on.


telnet://ricksbbs.synchro.net:23
http://ricksbbs.synchro.net:8080
Madison,NC

---
þ Synchronet þ Rick's BBS telnet://ricksbbs.synchro.net:23
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)