[Parth100]

Hello Taras

Thankyou for the reply.
I got it. Now final question. Which is a better way to develop a kernel level firewall – NDIS hooking or IM driver???

I am not able to take a decision on this!!!
What parameters should I consider when taking the decision?

Microsoft doesnot support NDIS hooking…so it can change the undocumented data structures used by NDIS hooking any time.

So I was having a debate with my friend over this topic (who favours hooking method).

Can am IM driver be built that is atleast source compatiable wiht Win98?

Why do most commertial personal firewalls use NDIS hooking when it can be done with IM driver?

Regards
Parth

[Parth100]

Hello Taras

Thankyou for reply.
As I said I am new to kernel programming so bear with me if my questions sound vague. 😕 😳
I am not able to get a clear pic. of the whole thing…
Since I am writing NDIS IM driver it is suppose to bind itself with NDIS miniport drivers. However modem driver may not be a NDIS miniport driver!!!(I hope I am making sence).
I have a 56Kbps modem which is attached to COM port 2.(one that makes noice when connecting to the net 😆 )
Now can my IM driver filter traffic coming from this modem and if yes how?
I know I am asking too much but can you tell me how the whole thing works in a bit detail.
Also suggest me some literature/reading material.
Thanking you and hoping for reply…
Parth Mehta

[Author]

Posts