Can TDI filter driver inject packet to upper layer?

[qlw]

Hi all,

I am new to NT driver development, I want to develop a firewall
travesal program. The program requires:

(1) Drop packet to some addr and port
(2) Inject packet to upper layer (TCP)

I am surveying existing techniques, and read “firewall for 9x…”
by Vadim V.Smirnov, and think TDI filter driver is suitable for me.

I am sure (2) can be done in TDI driver, but can anyone tell me
that (1) can also be fullfilled by TDI driver? ❓

Thanks for your attention!

Ling

[qlw]

BTW, please answer in English, I can not read Russia 🙂

Thanks

[Taras]

(1) and (2) can be done

1) When you are hijacking ClientEventReceive, ClientEventChainedReceive you should analize content and return STATUS_DATA_NOT_ACCEPTED for rejecting data.

[qlw]

Tara, Many thanks.

BTW, can you explain how to do (2) with TDI driver?

[Taras]

Call client register callback function ClientEventReceive or ClientEventChainedReceive

[Author]

Posts