Reply To: NDIS hooking firewall

Home Forums Discussions General Discussion NDIS hooking firewall Reply To: NDIS hooking firewall

#5659

Vadim Smirnov
Moderator

The firewalls you have mentioned use NDIS-hooks and I don’t think that their drivers are WHQL certified. An example, ZoneAlarm uses technology based on some undocumented NDIS structures which can be changed by MS anytime. Do you think that such driver can be WHQL? However, NDIS hooks is still the most effective way to desigh the firewall kernel, and that fact that MS officially don’t recommend this is not enough to stop using it.