Re: View but not download files via web
By: nelgin to All on Sun Aug 10 2025 04:12 am

Hi all,

I'm sure someone has solved this before.

I want no-logged in users to be able to view file areas and file information but not download files over HTTP or HTTPS.

Surely, someone has done this before and hopefully they will share their special sauce :) Thanks.

Download Requirements = PROT NOT HTTP and NOT HTTPS

but... why?
--
digital man (rob)

Sling Blade quote #18:
Karl Childers: Some folks call it Hell, I call it Hades.
Norco, CA WX: 90.7øF, 37.0% humidity, 10 mph SSW wind, 0.00 inches rain/24hrs --- SBBSecho 3.29-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download files via web
By: nelgin to All on Sun Aug 10 2025 04:12 am

I want no-logged in users to be able to view file areas and file information but not download files over HTTP or HTTPS.

I'm pretty sure this can be done with ARS. You'd have to add an ARS string for each file library though. For each file library you have, you could go to the Download Requirements and use this string:

PROT!HTTP PROT!HTTPS

That should disallow downloading for both HTTP and HTTPS. I use that for Access Requirements for one of mine, but I imagine it should work for download requirements as well.

Nightfox

---
þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download files via web
By: Digital Man to nelgin on Sun Aug 10 2025 14:32:40

Download Requirements = PROT NOT HTTP and NOT HTTPS

That doesn't work.

for my AdventureNet file library (named AV) I have

Download Requirements PROT NOT HTTP AND NOT HTTPS


The file is still offered up via the browser.

but... why?

bbs@bbs:/sbbs/data/logs$ grep call=download http-2025-08-*.log |wc -l
41031


Over 14,000 downloads in 11 days is somewhat dubious. Whether they complete, I have no idea.

---
þ Synchronet þ End Of The Line BBS - endofthelinebbs.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download files via web
By: nelgin to Digital Man on Mon Aug 11 2025 12:50 am

Re: View but not download files via web
By: Digital Man to nelgin on Sun Aug 10 2025 14:32:40

Download Requirements = PROT NOT HTTP and NOT HTTPS

That doesn't work.

for my AdventureNet file library (named AV) I have

Download Requirements PROT NOT HTTP AND NOT HTTPS

The file is still offered up via the browser.

So when I do this, the files are still listed in webv4, but aren't actually clickable/downloadable.

but... why?

bbs@bbs:/sbbs/data/logs$ grep call=download http-2025-08-*.log |wc -l
41031

Over 14,000 downloads in 11 days is somewhat dubious. Whether they complete, I have no idea.

Limiting downloads to non-Guest users would probably take care of that.
--
digital man (rob)

Steven Wright quote #27:
Experience is something you don't get until just after you need it.
Norco, CA WX: 84.8øF, 46.0% humidity, 4 mph WNW wind, 0.00 inches rain/24hrs --- SBBSecho 3.29-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Surely, someone has done this before and hopefully they will share their special sauce :) Thanks.

Download Requirements = PROT NOT HTTP and NOT HTTPS

but... why?

Not sure why he wanted it, but I know what I needed it for.

I enjoyed offering older DOS programs up for download for anyone, user or
not. However, the companies that scan systems for files and then blacklist them do not like older programs, especially ones that might be compressed
with PKLITE or some other process.

Those being available get flagged, then you start getting a bunch of
complaints that other sysops (who use these defense products on their
Windows machines) can no longer connect via binkp, and from users who can
no longer connect via even telnet.

That latter group will get an error pop-up from the product, so you know
what is causing it. The companies, since you are not a customer of theirs,
are not very motivated to remove your info from their blacklists.
It is a real PITA.


* SLMR 2.1a * Learn from your parent's mistakes... Use Birth Control!
---
þ Synchronet þ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Mike Powell to DIGITAL MAN on Mon Aug 11 2025 09:36 am

Surely, someone has done this before and hopefully they will share their special sauce :) Thanks.

Download Requirements = PROT NOT HTTP and NOT HTTPS

but... why?

Not sure why he wanted it, but I know what I needed it for.

I enjoyed offering older DOS programs up for download for anyone, user or not. However, the companies that scan systems for files and then blacklist them do not like older programs, especially ones that might be compressed with PKLITE or some other process.

Those being available get flagged, then you start getting a bunch of complaints that other sysops (who use these defense products on their Windows machines) can no longer connect via binkp, and from users who can
no longer connect via even telnet.

That latter group will get an error pop-up from the product, so you know what is causing it. The companies, since you are not a customer of theirs, are not very motivated to remove your info from their blacklists.
It is a real PITA.

Maybe just disallow Guest from downloading (or downloading via HTTP/HTTPS). To disallow all your users from downloading via HTTP/HTTPS seems like an over-reaction to me.

But for decades, Vertrauen has allowed non-authenticated and guest users to download all files (including old ones compressed with PKLITE) via HTTP/HTTPS and I've never had the issue describe. Maybe I've just been lucky.
--
digital man (rob)

Synchronet/BBS Terminology Definition #29:
DTR = Data Terminal Ready
Norco, CA WX: 87.3øF, 46.0% humidity, 2 mph WNW wind, 0.00 inches rain/24hrs --- SBBSecho 3.29-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download files via web
By: Digital Man to nelgin on Mon Aug 11 2025 11:24:50

So when I do this, the files are still listed in webv4, but aren't actually clickable/downloadable.

Yup, sorted. My web server is being so hammered that it didn't get a chance to recycle.

Limiting downloads to non-Guest users would probably take care of that.

I'd still like guests to be able to download via ftp, the bbs and gopher.

---
þ Synchronet þ End Of The Line BBS - endofthelinebbs.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Maybe just disallow Guest from downloading (or downloading via HTTP/HTTPS). To >disallow all your users from downloading via HTTP/HTTPS seems like an >over-reaction to me.

I am not certain if that is actually what I did, or if I realized that "disallowing guest" wasn't working and just turned them all off.

Based on what I have in scfg, putting "NOT GUEST" there didn't work.

Putting "NOT GUEST" in ~/webv4/pages/webctrl.ini, under [*files.xjs] is IIRC what did it.


* SLMR 2.1a * Pass the tequila, Manuel...
---
þ Synchronet þ CAPCITY2 * capcity2.synchro.net * Telnet/SSH:2022/Rlogin/HTTP
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Digital Man to Mike Powell on Mon Aug 11 2025 11:58:30

Maybe just disallow Guest from downloading (or downloading via HTTP/HTTPS). To disallow all your users from downloading via HTTP/HTTPS seems like an over-reaction to me.

Actually, that's what I meant to do.I'm going to have go and fix that. So

LEVEL 60 OR PROTO NOT HTTP AND NOT HTTPS ?

---
þ Synchronet þ End Of The Line BBS - endofthelinebbs.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: nelgin to Digital Man on Wed Aug 13 2025 04:17 am

Re: View but not download fil
By: Digital Man to Mike Powell on Mon Aug 11 2025 11:58:30

Maybe just disallow Guest from downloading (or downloading via HTTP/HTTPS). To disallow all your users from downloading via HTTP/HTTPS seems like an over-reaction to me.

Actually, that's what I meant to do.I'm going to have go and fix that. So

LEVEL 60 OR PROTO NOT HTTP AND NOT HTTPS ?

When mixing AND or and OR logic, yes parens:

LEVEL 60 OR (PROTO NOT HTTP AND NOT HTTPS)
--
digital man (rob)

This Is Spinal Tap quote #34:
We'd love to stand around and chat, but we've gotta sit down in the lobby Norco, CA WX: 71.4øF, 79.0% humidity, 2 mph SW wind, 0.00 inches rain/24hrs
--- SBBSecho 3.29-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Digital Man to nelgin on Wed Aug 13 2025 10:14:25

When mixing AND or and OR logic, yes parens:

LEVEL 60 OR (PROTO NOT HTTP AND NOT HTTPS)

Thanks, I'll give that a try.

---
þ Synchronet þ End Of The Line BBS - endofthelinebbs.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Digital Man to nelgin on Wed Aug 13 2025 10:14 am

Maybe just disallow Guest from downloading (or downloading via

When mixing AND or and OR logic, yes parens:

LEVEL 60 OR (PROTO NOT HTTP AND NOT HTTPS)

If you want to disallow the guest, would "REST NOT G" do the trick? I've been using that for a while and it seemed like that works as expected.

Nightfox

---
þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Nightfox to Digital Man on Wed Aug 13 2025 03:56 pm

Re: View but not download fil
By: Digital Man to nelgin on Wed Aug 13 2025 10:14 am

Maybe just disallow Guest from downloading (or downloading via

When mixing AND or and OR logic, yes parens:

LEVEL 60 OR (PROTO NOT HTTP AND NOT HTTPS)

If you want to disallow the guest, would "REST NOT G" do the trick? I've been using that for a while and it seemed like that works as expected.

Yes. Or event better, "NOT GUEST".
--
digital man (rob)

Synchronet "Real Fact" #136:
Synchronet Ad: If you had three wishes, you could toss the other two
Norco, CA WX: 84.1øF, 50.0% humidity, 10 mph WSW wind, 0.00 inches rain/24hrs --- SBBSecho 3.29-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

Re: View but not download fil
By: Digital Man to nelgin on Wed Aug 13 2025 10:14 am

If you want to disallow the guest, would "REST NOT G" do the trick? I've been using that for a while and it seemed like that works as expected.

Nightfox

---
¨ Synchronet ¨ Digital Distortion: digitaldistortionbbs.com

Other than bulletins I have all areas set for access at any level and execution set for level 50 or up. Guests are default level 10. Once they register they are level 50. This has made for a more pleasant environment here. Guests can look but not touch :) I only ask for a name or handle and location in registration. I do not need more than that. This works through the message bases, web server and telnet and so on.


telnet://ricksbbs.synchro.net:23
http://ricksbbs.synchro.net:8080
Madison,NC

---
þ Synchronet þ Rick's BBS telnet://ricksbbs.synchro.net:23
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)