The magazine of the Melbourne PC User Group

How to set up your own BBS: Part 3
John Karmouche

I have previously described a simple, three-step process for setting up your own BBS, recommending that first you should choose the software; second, set up a dedicated phone line; and third, advertise your presence.

My next topic is security, which is a word we hear frequently. Hardly a day goes by without a report in the media about someone hacking into a computer system somewhere in the world. The thieves who recently stole some gold bullion appear to have gained access as the result of hacking into a computer network.

As a sysop you have an obligation to protect yourself and your callers (who in many cases have given you confidential information) against intruders who may wish to infiltrate your BBS - usually by logging on as someone they are not - to corrupt files, your database, or even steal confidential information.

Security profile functions

Most BBS software uses a Security Profile system that performs two functions. One of those allocates a predefined access level to various user categories, which effectively determines what each caller sees when logging on. It is possible to use the security profile to set up a single-line BBS so that it has the appearance of several different systems.

Sysops often use security profile upgrades as a way of encouraging new callers to donate money towards upkeep of the BBS. For example, I use security profiles to provide new callers with a view of everything my BBS has to offer. They are able to download some files, but have restricted access and less online time than subscribers who support the BBS.

Where a BBS has various categories of users the Security profile can be used to define separate levels of access, and even provide different menus for each class. For example, a company might require separate levels or areas of access for categories such as management, office staff, and technicians. Each group might see different menus, communicate via separate message areas, be allocated separate file databases, and be given different online time allocations - all on the same single-line BBS.

Waving the stick

So much for controlling the level of access. The other important function of a security profile system is to enable the sysop to exert control over users by enforcing discipline. For example, a user who does something to cause concern can - according to the seriousness of the offence - be warned, have his or her access restricted, or even suspended. Because the security profile can be set up to maintain a record of callers and what they do, the sysop is able to identify breaches of the rules and the user responsible. The two most common offences are inappropriate language and breaching copyright (for example, uploading commercial software).

One step at a time

During the initial period of setting up your own BBS the Security Profile is mainly a tool for tailoring the system to meet the needs of your callers. It is the next thing to work on after you have established the look of your menu structure.

However, during the early stages of setting up it is best to maintain the default Security Profiles. It takes time to tailor and improve a system and you should take things one step at a time. As the BBS stabilises you can then spend time exploring further enhancements.

User registration

Most callers quite happily complete a New User Questionnaire when they first log on to a BBS. It should ask first-time callers to provide some information about themselves. The kind of detail sought is up to the Sysop, but a minimum is first and last names with some kind of contact address or telephone number and, of course, their chosen password.

The kind of information will vary according to each sysop's perceptions of how a BBS should operate. One who wants to be seen as giving personal service to callers will need reasonable personal details.

Define and control

The security profile is the tool that enables a sysop to define and control his or her BBS. It protects each caller, ensures that no one can gain any advantage, and is handy for gathering information that will assist the sysop when users are having problems.

Setting up a door

The next optional step that you may wish to consider is a "BBS door."

The name "door" gives users the impression that they are about to enter a new area. Essentially, that is exactly what you do when, as a caller to a BBS, you press a key defined in a door menu. In BBS terminology, a door program is something that doesn't come with the original BBS software. It performs special tasks that the BBS author had not originally integrated into the BBS software. Good examples of various door programs include online games and CD-ROM file managers. There are many good and bad door programs out there. I suggest that you have a look around to find something that may suit the need of your BBS.

For a door to function properly, the BBS software must pass control to the door program. In most cases some form of configuration program is involved. The terms DOOR.SYS, GAP.SYS or similar are common. You need not worry too much about what this all means, as the documentation that comes with each door program explains what you should do. If you read the documentation properly you will experience no problems in getting the door to operate.

The biggest problem to overcome when choosing a door for your BBS is finding one that is compatible with your BBS software. There are many different BBS packages and very little standardisation has occurred between authors of BBS doors. I have tried many and found that only one or two will work with my BBS.

Stability is another problem that is encountered when running a door on your own BBS. I once set up an Online Fishing Game door, only to find that it caused my BBS to lock up frequently. There are many amateur door programmers in this world, who really don't know much about how your BBS software was written. Consequently, you will need to monitor the operation of the door program for some time after you have installed it.

It is interesting to note that some BBS software programs are beginning to appreciate that sysops like to add doors to their BBSs. Mustang Software, the developers of Wildcat!, have a package called the Wildcat! Code Online Development Engine (WCode). This enables a sysop to actually write applications using the Wildcat! program language, which is similar to Visual Basic, and then to compile that program so that it will run as part of the Wildcat! BBS. This is an exciting development for Wildcat! sysops which extends our ability to shape the application and look of our BBSs.

Don't forget to read the manual first

As I said earlier in this series, setting up a BBS is very simple. Anyone can set up a BBS, but the most important rule is to must read the manual first. Exactly the same rule applies in setting up a BBS door. All the detail you require is in the documentation that comes with the door software. It will even tell you exactly which BBS systems that particular door is compatible with. People often come to me for advice, only to have me tell them the answer was staring them in the face, if only they had read the manual.

Reprinted from the August 1995 issue of PC Update, the magazine of Melbourne PC User Group, Australia

[About Melbourne PC User Group]