NOBO
NOBO

On-Line Help

What is NOBO?
What is Back Orifice?
FAQ - Frequently Asked Questions
Download
Links
Contacting
On-line Help

Main Window

The NOBO main window is composed by the event log window and some control buttons. In the log window, NOBO events, such as a TCP/IP packet received, are registered along some other messages.

The control buttons are:

  • OK - Closes the NOBO window
  • Clear - Clear the log window. Note that if you are using a log file to log events, it won't be cleared.
  • Options - NOBO configuration.
  • About - Shows some information about NOBO

Configuration - Action

Here you can configure how should NOBO react when it receives a BO packet.
  • Open NOBO Window - Opens the NOBO windows if its closed (i.e. only in the tray) or show it up if its not visible.
  • Show Message Box - Shows a message box with information about the packet NOBO was just received.
  • Behave as above for unknown packets - Apply the settings below to unknown -- not BO -- packets.

Configuration - Reply

In this section you can configure what should NOBO do when a BO packet is received.
  • Ignore - No actions. The packet is silently discarded.
  • Reply NOBO Banner - Reply with a standard NOBO banner.
  • Reply Message - Let's you make your own custom message to be sent to the BO client. By choosing this options, you can use the "Set Message" button to edit the message text.

Configuration - Fake PING

In this section you can define if you want or not to send fake PING replies back to BO clients and, if you do, the computer name to be used on such replies.
  • Send fake PING replies - This option makes NOBO respond to PING packets (which one normally send to a machine to know if the BO server is running on it) in a different way. If this option is set, NOBO will always send a fake PING reply, which may make the BO client user think that the BO server is really running on your machine. Note that if this option is set NOBO will always send a fake PING reply, even if it's configured to ignore packets.
  • Name - With this options you can setup the "computer name" to be used on fake replies. This "name" doesn't need to be the actual name of your computer (it should not, in fact!), but any other name you may like. If no name is configured, NOBO will use "DEFAULT", the same name Windows uses for unnamed computers.

Configuration - Flood

In this section you can configure NOBO to detect someone else trying to flood your connection with a stream of network packets.
  • Disabled - NOBO will never try to detect flooding of your connection. Note that to disable flood detection is strongly discouraged!
  • Enables - NOBO will use a set of standard rules to detect someone trying to flood your connection.
  • Advanced - With this option you can change individual parameters that will change the internal rules that govern the flood detection rules of NOBO.
  • Addresses - How many (IP) addresses NOBO should "remember" of received packets. Increasing this values makes NOBO use a little more memory (but not too much).
  • Interval (ms) - The maximum time interval (in miliseconds) between packets to detect a possible flood.
  • Packets - After receiving this number of packets, and since they were received within the configured interval, NOBO will assume that a flooding is taking place and will ignore any other packet coming from the same address.
  • Expires (ms) - How long (in miliseconds) NOBO must be kept from receiving a packet from a specific address to "forget" its registry of received packets from the same address.

Configuration - Logging

Here you can set up the logging characteristcs of NOBO.
  • Scrollback Lines - set up how many lines NOBO must keep in the log window. When this many lines are in the log window, NOBO will chop off the first one to make room for the new one (note: this apply only to the log window; yif you configure NOBO to log to a file -- see below, the number of lines on the file won't be limited).
  • Log to File - Allows you to specify a file wich will receive a copy of each message showed in the log window. When you select this option, you can push the "Browser" button to choose the log file.

Configuration - Network

In this tab you can configure the port number NOBO will bind to. A port is a number between 1 and 65535 that identifies a point of entrance (or exit) on the host TCP/IP.
  • Default - Use the default BO port, 31337.
  • Custom - Allows you to set the port that NOBO should listen on.
  • Use password - This option allows NOBO to act and accept packets like a passworded version of the BO server. Normally this option should not be needed. This option is available for advanced uses of NOBO.

Copyright © 1998 Flávio Veloso. All rights reserved.
NOBO was created with the invaluable help from the Centro de Segurança do CentroIn Internet Provider -- CentroIn Internet Provider Security Center.)