BBSFirewall v1.1.0
BBSFirewall v1.1.0
First public release by Sysop Network.
Built on the foundation of bbsfw by Ryan Fantus.
What''s included
- TCP Proxy — Forwards telnet connections to a backend BBS server
- SSH Server — Encrypted SSH access proxied to the telnet backend, legacy cipher support for old clients
- HTTPS Redirect — HTTP (port 80) and HTTPS (port 443) redirect to a configured URL
- Let''s Encrypt —
setup-certs.shfor cert setup and auto-renewal with no downtime - PROXY Protocol v1 — Passes the real client IP to the backend BBS (configurable on/off)
- Country Blocking — Block by country using a local MaxMind GeoLite2 database
- IP Whitelist / Blocklist — Per-IP and CIDR range support
- Rate Limiting — Flood protection with configurable window and block duration
- Per-IP Connection Limit — Cap simultaneous connections from a single IP
- Encoding Detection — UTF-8/CP437 auto-detection for SSH clients, separate backend routing
- Graceful Shutdown — Active sessions drain cleanly on SIGTERM/SIGINT
- PM2 Ready —
ecosystem.config.jsincluded for production process management
Getting started
git clone https://github.com/SysopNetwork/BBSFirewall.git
cd BBSFirewall
npm install
cp .env.example .env
nano .env
npm startSee the README for full setup instructions.
MIT License — Copyright (c) 2026 Sysop Network