I have some logical problem with winpk filter driver. I’m working on a simple url filter system. When http request try to going out from mstcp, sw checking http headers and requested url. If url is blocked? packet’s marked in my own marking table. When http response recieved from related server, sw checks marked packets and if packet matched, recieved data changed to blocked message. This is basic live cycle of my sw.
But, my blacklist in other machine at same network. When I try to lookup requested url in my blacklist with UDP queries, I have to hang GET packet on air until UDP answer recieved from server.. Because all of the network traffics pass from same adapter. 🙂