MS Internet Connection Firewall

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ Drivers
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - USB: multifunction device beside usbser.sys Hi Because of many people recommended to use usbser.sys instead of writing my own COM mapping driver I did so, and it works so far. My problem now is, that I should be able to use the device's second configuration - so I think I can name some kind of multifunctional device. For getting quick results about feasability, I used libusb-win32 (latest version). I tried to reset the device, enumerate all for getting a new handle set config but got an error. I think it must be usbser.sys that claims the device befor I can do it. How can I solve the problem. Any idea. Many thanks in advance Robin Tag: MS Internet Connection Firewall Tag: 50338
  - 2
    - how does Softice stop the window system? Hello all. I wanna ask a question about softice again. When i start softice, the windows system is stopped. How is this possible? Softice doesn't hook irq0(timer), i think. But, the windows system can't get the chance of handling a timer interrupt. I wanna use a same method like softice's to implement my little driver. Any ideas? thanks for reading. Tag: MS Internet Connection Firewall Tag: 50334
  - 3
    - Help!!!Are there any examples about cdrom filter driver on win9x? Tag: MS Internet Connection Firewall Tag: 50331
  - 4
    - How do you tell WZC that our driver/adapter is WPA compliant We handle OID_802_11_AUTHENTICATION_MODE and return that we are doind WPA authentication but WZC authentication does not show WPA option. Any ideas? -Ron- Tag: MS Internet Connection Firewall Tag: 50326
  - 5
    - problem using a standalone device object with NDIS Hello, I have a problem when using 'NdisMRegisterDevice()' in my NDIS driver. I use this call to create a standalone device object so that my application can communicate with my driver. Using this, I can communicate with my driver fine from my app. However, the file handle that my application creates to talk to my driver does NOT get notified when I register to receive device notifications using 'RegisterDeviceNotification'. However, if I create a handle using the REAL device name (obtained by using the SetupDixxx functions), my app properly receives the notifications. I can't use this handle tho', 'cuz NDIS owns it and my driver won't received Irps sent to it. The basic problem I'm trying to solve is this: if the device is unplugged WHILE the app is running, the app needs to close the handle to allow the driver to unload. Thx, Rick Tag: MS Internet Connection Firewall Tag: 50318
  - 6
    - Getting quick IP address on P2P RNDIS network There is a small problem that we've run into, which I hope somebody can help us with. We have a USB device, which supports RNDIS and that causes an XP machine to create a separate network for it. The device also creates a "remote" node on that network essensially establishing point-to-point network inside the device itself. Now to the problem, how do we quickly assign IP address to this network? I am looking for any suggestions - from totally legal to semi-legal. So far this device is restricted to a lab environment, but having fully supported solution is obviously preferred. Static IP assignment is out of question. So is auto IP as it is too slow. We need to be able to assign a address in a matter of seconds or even faster. Also a requirement - multiple instances of this device can be connected to the same machine and they all have to sit on separate networks and don't conflict with each other. The only solution that I can think of at a moment is to have the device being a DHCP server for its own net. Problem: multiple devices can be connected to the PC and there must be a solid algorithm in place to avoid any conflicts. I was also told that IPv6 would solve this issue. This is very generic problem and I am sure there are good solutions to it. Can anybody offers any suggestions or refer me to relevant RFC or something? Any help would be appreciated. Thanks! -- Max. Tag: MS Internet Connection Firewall Tag: 50314
  - 7
    - DIFx Framework - HOWTO Hi All, First, I have only a basic understanding of the certificates, signing, etc. so please excuse me if some question appears to be a stupid one :-) I'm evaluating the MS DIFx framework as to make a single file installation of the driver I've made. In connection with this I have tried to set-up an installation through DIFx framework but have some troubles with it. I get the following error in DpInst.log file for every INF file in the driver: "ERROR: driver package 'drive:\path\INFFILE.INF' is unsigned. Error code 0x800B0100, No signature was present in the subject." Could somebody explain me what is the right way to set-up the installation. - As far as I know only the cat file should be signed not all the files in the driver package... Follows a short description of how I've tried to make the installation: In the INF file I have included the requested CatalogFile and DriverPackageType sections: CatalogFile=CBMA.cat DriverPackageType=PlugAndPlay The content of CBMA.cdf file is: [CatalogHeader] name=CBMA.cat [CatalogFiles] CBM.dll=CBM.dll OEMUI.dll=OEMUI.dll OEMUNI.dll=OEMUNI.dll CBM.ini=CBM.ini CBM_CT1000II.INF=CBM_CT1000II.INF CBM_CTS300.INF=CBM_CTS300.INF CBM_PPU700.INF=CBM_PPU700.INF CBM1000II.GPD=CBM1000II.GPD CTS300.GPD=CTS300.GPD PPU700.GPD=PPU700.GPD ttfsub.GPD=ttfsub.GPD CBMA.HLP=CBMA.HLP eula.txt=eula.txt From this file I have successfully created .cat file and subsequently signed it with a test certificate obtained through makecert.exe and cert2spc.exe... After that I copied DpInst.exe in the driver directory and made eula.txt and dpinst.xml files. Subsequently when I ran DpInst.exe I received the described error. Any help will be appreciated! 10x ___________________________________________ Best regards, Ivan Dimitrov Tag: MS Internet Connection Firewall Tag: 50299
  - 8
    - DPC has high latency only with SMP Hallo, i'm back with my DPC latency problem: i'm testing my driver on an SMP machine, and 4 or 5 times every second when in the isr i request the dpc, i find that the old request is still in queue. When I start the OS with the /onecpu option, this behaviour disappears and the DPC is never delayed too much (>1ms). Does anyone have some clue for solving this problem ? I don't understand why the dpc handling seems to slow down so much on a SMP machine. Thanks, e. Tag: MS Internet Connection Firewall Tag: 50298
  - 9
    - question from IRP Cheat Sheet 1 ==> Scenario 2 ) Forward and Wait Hello, I have questions regarding the IRP cheat sheet's Scenario 2 , Forward and Wait. http://support.microsoft.com/default.aspx?scid=kb;EN-US;320275 could somebody pls clarify these thanks Taha Question 1 ) ------------ in DispatchRoutine_2 ( ... if (status == STATUS_PENDING) { does this return value of STATUS_PENDING mean that the completion routine of some lower level driver would have returned STATUS_MORE_PROCESSING_REQUIRED? Question 2) ----------- in DispatchRoutine_2 ( ... IoCompleteRequest (Irp, IO_NO_INCREMENT); return status; i) What control flow will the call to IoCompleteRequest initiate? ii) To whom will the "return status;" statement give control How are i) and ii) above inter-related? Tag: MS Internet Connection Firewall Tag: 50297
  - 10
    - [Q] how can i get the CR3 value? Hello all. I have a question about getting cr3 value. (page directory base address) In softice, the 'PAGE' command shows the cr3 value exactly. (on windows 2000, 0x30000. on windows xp, 0x39000) But, my driver can't catch the value. (0xb9e83d8f <- like this) the code is this. push cr3 pop eax it doesn't work. I think this is because my driver is called in a user process, not in kernel. so, my question is this. is there any way to get the cr3 value of the kernel? (running a thread in kernel?) if no, how can i use the same method like softice's. thanks for reading. Tag: MS Internet Connection Firewall Tag: 50295
  - 11
    - BugCheck in TDI Filter TDI_RECEIVE Completion. Have some very simple code but it is Bug Checking from time to time. Seems to be trouble with MDL. if(*IoRequestPacket && (STATUS_MORE_PROCESSING_REQUIRED == status)) { //do set up the filters completion routine and call it IrpStack->CompletionRoutine = F_RECV_COMPLETION_ROUTINE ; } F_RECV_COMPLETION_ROUTINE( IN PDEVICE_OBJECT DeviceObject, IN PIRP pIrp, IN PVOID Context ) { PMDL pMDL = pIrp->MdlAddress ; if(pMDL) ulBytes = MmGetMdlByteCount(pMDL) ; //call original Completion afterwards... } Bug Checks vary from DRIVER_IRQL... to IRQL_NOT_LESS... Do I miss something? Since I am only filtering, I supposed that the MDL was already locked. Tag: MS Internet Connection Firewall Tag: 50294
  - 12
    - Question on IRP Cheat sheet SCENARIO 4: QUEUE FOR LATER, OR FORWARD AND REUSE Hello, I have questions regarding the IRP cheat sheet's SCENARIO 4: QUEUE FOR LATER, OR FORWARD AND REUSE http://support.microsoft.com/default.aspx?scid=kb;EN-US;320275 could somebody pls clarify these thanks Taha =================================================== |SCENARIO 4: QUEUE FOR LATER, OR FORWARD AND REUSE| =================================================== Question 1) ----------- The comment in DispathRoutine_4 says the following: // // You mark the IRP pending if you are intending to --> queue the IRP <---- // and process it later. If you are intending to forward the IRP // directly, use one of the methods discussed earlier in this article. what is meant by "queue the IRP" over here? Question 2) ----------- In the explanation it says: " The completion routine can either return STATUS_CONTINUE_COMPLETION or STATUS_MORE_PROCESSING_REQUIRED. You return STATUS_MORE_PROCESSING_REQUIRED only if you intend to reuse the IRP from another thread and complete it later. " what does it mean by "if you intend to reuse the IRP from another thread and complete it later"? Question 3) ----------- In CompletionRoutine_42 (..... Here in the comment it sys: // // Because you are stopping the completion of the IRP by returning the // following status, you must complete the IRP later. What is meant by "you must complete the IRP later." , later when , why and how? Tag: MS Internet Connection Firewall Tag: 50293
  - 13
    - Question on IRP Cheat sheet SCENARIO 4: QUEUE FOR LATER, OR FORWARD AND REUSE Hello, I have questions regarding the IRP cheat sheet's SCENARIO 4: QUEUE FOR LATER, OR FORWARD AND REUSE http://support.microsoft.com/default.aspx?scid=kb;EN-US;320275 could somebody pls clarify these thanks Taha =================================================== |SCENARIO 4: QUEUE FOR LATER, OR FORWARD AND REUSE| =================================================== Question 1) ----------- The comment in DispathRoutine_4 says the following: // // You mark the IRP pending if you are intending to --> queue the IRP <---- // and process it later. If you are intending to forward the IRP // directly, use one of the methods discussed earlier in this article. what is meant by "queue the IRP" over here? Question 2) ----------- In the explanation it says: " The completion routine can either return STATUS_CONTINUE_COMPLETION or STATUS_MORE_PROCESSING_REQUIRED. You return STATUS_MORE_PROCESSING_REQUIRED only if you intend to reuse the IRP from another thread and complete it later. " what does it mean by "if you intend to reuse the IRP from another thread and complete it later"? Question 3) ----------- In CompletionRoutine_42 (..... Here in the comment it sys: // // Because you are stopping the completion of the IRP by returning the // following status, you must complete the IRP later. What is meant by "you must complete the IRP later." , later when , why and how? Tag: MS Internet Connection Firewall Tag: 50292
  - 14
    - Questions on IRP Cheat Sheet ==> SCENARIO 2: FORWARD AND WAIT Hello, I have questions regarding the IRP cheat sheet's Scenario 2 , Forward and Wait. http://support.microsoft.com/default.aspx?scid=kb;EN-US;320275 could somebody pls clarify these thanks Taha Question 1 ) ------------ in DispatchRoutine_2 ( ... if (status == STATUS_PENDING) { does this return value of STATUS_PENDING mean that the completion routine of some lower level driver would have returned STATUS_MORE_PROCESSING_REQUIRED? Question 2) ----------- in DispatchRoutine_2 ( ... IoCompleteRequest (Irp, IO_NO_INCREMENT); return status; i) What control flow will the call to IoCompleteRequest initiate? ii) To whom will the "return status;" statement give control How are i) and ii) above inter-related? Tag: MS Internet Connection Firewall Tag: 50291
  - 15
    - Questions on IRP Cheat Sheet ==> SCENARIO 2: FORWARD AND WAIT Hello, I have questions regarding the IRP cheat sheet's Scenario 2 , Forward and Wait. http://support.microsoft.com/default.aspx?scid=kb;EN-US;320275 could somebody pls clarify these thanks Taha Question 1 ) ------------ in DispatchRoutine_2 ( ... if (status == STATUS_PENDING) { does this return value of STATUS_PENDING mean that the completion routine of some lower level driver would have returned STATUS_MORE_PROCESSING_REQUIRED? Question 2) ----------- in DispatchRoutine_2 ( ... IoCompleteRequest (Irp, IO_NO_INCREMENT); return status; i) What control flow will the call to IoCompleteRequest initiate? ii) To whom will the "return status;" statement give control How are i) and ii) above inter-related? Tag: MS Internet Connection Firewall Tag: 50290
  - 16
    - simple & stripe volumes filter driver differences ? Hi i got a working simple volume filter driver, it is installed as an upperfilter driver. When working with stripe volumes it does not write and / or read the data correctly. What is different between simple and stripe volumes for that driver then ? Thanks. Tag: MS Internet Connection Firewall Tag: 50288
  - 17
    - after application call CancelIO USB device . after application called CancelIO, driver receive two IRPs with ioControlCode 0x80002004 and 0x8000201C , how to find out the meaning of these ioControlcodes? I tried to split it in to parts as DDK defined,but i don't know how to do next. Is there a way to get the meaning? Tag: MS Internet Connection Firewall Tag: 50287
  - 18
    - SetFeature DEVICE_REMOTE_WAKEUP Sir...Good afternoon I had a problem on USB RemoteWakeup, that Device is not belong to Keyboard or mouse. The Bit of "support remote wakeup" in device ConfigurationDescriptor Had been Setted as 1 . How can i make the Windows replay device a SetFeature to enable this function? or i should send SetFeature out while my driver checking ConfigurationDescriptor?? May i have your kindly answer? Tag: MS Internet Connection Firewall Tag: 50286
  - 19
    - static driver verifier? Has anybody used any pre-release version of Microsoft's SDV ? http://www.microsoft.com/whdc/devtools/tools/SDV.mspx are there any updates on when would this be available ? regards Taha Tag: MS Internet Connection Firewall Tag: 50285
  - 20
    - Driver debugging issue Can anyone teach me how to step by step debug a kernel mode driver in C++ source rathar than in DASM? I am currently using DriverStudio 3.x but I don't know how to break a driver. I've tried using DbgBreakPoint(), but it breaks in assembly code. How can I debug in my C++ source? also, if I issue GO command after breaking at DbgBreakPoint(), the target system crash and reboot. How to solve it? Besides Driver Studio, tutorials on how to debug kernel mode driver in C++ source using WinDbg will also appreciated. Thanks David Tag: MS Internet Connection Firewall Tag: 50281
  - 21
    - why my cdrom filter driver(WDM) doesn't work on win98? It can work right on windows 2000. Tag: MS Internet Connection Firewall Tag: 50278
  - 22
    - network link speed Hello, does anyone know how the link speed is determined by Windows when attached to a wireless network? I know Windows queries the Ndis driver using OID_GEN_LINK_SPEED, which is supposed to return the max Tx rate. In a wireless network, the max rate is determined by the Service Set. Therefore, I would assume that when associating with a particular Access Point, I should always get the same link speed. However, I've seen cases where the link speed changes between 1, 2, 5.5 & 11Mbps - even though I'm still connected (i.e. no disassociation/reassociation occurs). My service set consists of a single Access Point, which is configured to use all 4 rates (i.e. they're all marked Mandatory in the beacon parameter set). Thx, Rick Farrington Tag: MS Internet Connection Firewall Tag: 50272
  - 23
    - IoBuildDeviceIoControlRequest DDK for IoBuildDeviceIoControlRequest(...) says that field " Event is set to to the signaled state when lower driver has completed the requested operation..." Does it mean that I/O Manager set Event ? thanks, dave Tag: MS Internet Connection Firewall Tag: 50271
  - 24
    - AVStream: Saving MPEG2-PS to file with Dump filter sees loss of stream Hi, I'm using the Dump filter from the SDK to connect to my HW encoder and save to file. When I playback the file I get a loss of content everey couple ~5 seconds for ~1/3 of a second (my source shows time code on screen). Wondering if any body has seen this problem? Would it be possible that the latency from the dump filter writing to the HD could cause this? MY encoder buffers ~2 seconds of MPEG2-PS and never experiences an overflow. Thx Tag: MS Internet Connection Firewall Tag: 50265
  - 25
    - scsi troubles... Hi folks, my (first attempt of a) pcmcia scsi miniport driver is driving me insane... The driver consists of only a DriverEntry() - which initializes a HW_INITIALIZATION_DATA structure - and a few (empty) functions for the drivers entry points. (As seen at MSDN->SCSI Miniport Drivers). Here's how the initialization of the HW_INITIALIZATION_DATA structure looks like: ULONG DriverEntry(IN PVOID DriverObject, IN PVOID Argument2) { HW_INITIALIZATION_DATA InitData; ULONG Status; ULONG i; for (i=0; i<sizeof(HW_INITIALIZATION_DATA); i++) ((PUCHAR)&InitData)[i] = 0; InitData.HwInitializationDataSize = sizeof(HW_INITIALIZATION_DATA); InitData.AdapterInterfaceType = PCMCIABus; InitData.DeviceExtensionSize = sizeof(MY_DEV_EXT); InitData.NumberOfAccessRanges = 2; InitData.HwFindAdapter = FFS_FindAdapter; InitData.HwInitialize = FFS_HwInitialize; InitData.HwStartIo = FFS_StartIo; InitData.HwResetBus = FFS_ResetBus; InitData.HwAdapterControl = FFS_AdapterControl; InitData.HwInterrupt = FFS_Interrupt; InitData.HwAdapterState = FFS_AdapterState; InitData.HwDmaStarted = NULL; Status = ScsiPortInitialize(DriverObject, Argument2, &InitData, NULL); __asm int 3 return(Status); } The bare minimum inf file to install my bare minimum driver looks like this: [Version] Signature="$WINDOWS NT$" Class=MTD ClassGuid={4D36E970-E325-11CE-BFC1-08002BE10318} Provider="Mike" DriverVer=08/14/2004 [DestinationDirs] DefaultDestDir=12 [Manufacturer] "Flashcard"=DeviceList [DeviceList] "PCMCIA Flashcard"=DriverInstall,PCMCIA\UNKNOWN_MANUFACTURER-0000 [DriverInstall.NTx86] CopyFiles=@ffs.sys [DriverInstall.NTx86.Services] AddService=ffs, 2, ServiceInstallSettings [ServiceInstallSettings] DisplayName = "PCMCIA Flashcard" ServiceType = 1 StartType = 3 ErrorControl = 1 ServiceBinary = %12%\ffs.sys LoadOrderGroup = SCSI Miniport Dependencies = PCMCIA AddReg = ServiceRegistryEntries [ServiceRegistryEntries] HKR, "Parameters\PnpInterface", "8", 0x00010001, 0x00000001 The driver is ment to be pnp compliant as the PnpInterface registry key and the presence of the HwAdapterState-function indicate. After the driver is installed and a memory card is pluged in, the drivers DriverEntry() function is called and ScsiPortInitialize() returnes a value of zero. (Which seems to be ok). But after that, no other function will be called! The main question is: Why is no other function than DriverEntry() called? Acording to MSDN this may happen if PnpInterface is present but the driver is not installed as a service for the device. Which leads directly to the question: The above inf file should install the driver ffs.sys as service (with the name 'ffs') for devices of type PCMCIA\UNKNOWN_MANUFACTURER-0000. Is this the case? Or do you see any mistakes? (I used msdn and Oneys WDM book to 'tinker' the above inf file together, but it's well possible that i've missed something... ?!?) I have no idea why my driver does not initialize proper. Maybe a legacy driver would be a better idea than a pnp driver... Please let me know if you have any advice. Thanks in advance, Mike Tag: MS Internet Connection Firewall Tag: 50264
- Next
  - 1
    - USB Driver : 0xC0000B00 + 0xC000A00 errors with Isochronous OUT Endpoint when ASAP is specified ! Hi, My device supports an Isochronous OUT Endpoint, set to 895 bytes/ms. Also I would like to fully use this endpoint (ie : fill in all Isochronous OUT frames each millisecond). To do this, I implemented a stuff that sends 4 pending URBs to the USB Bus driver. Each URB also gets completed but some are completed with 0xC0000B00 error (USBD_STATUS_ISOCH_REQUEST_FAILED). For those URBs that fails with this error, Iso packets (that do not have data) are told to be in error (0xC0000A00 = USBD_STATUS_BAD_START_FRAME), whereas all URB are sent with the USBD_START_ISO_TRANSFER_ASAP flag. Does anyone knows this kind of problem, and is there any trick to fix this problem ? Thanks by advance ! Sebastien Tag: MS Internet Connection Firewall Tag: 50258
  - 2
    - USB Driver : 0xC0000B00 + 0xC000A00 errors with Isochronous OUT Endpoint when ASAP is specified ! Hi, My device supports an Isochronous OUT Endpoint, set to 895 bytes/ms. Also I would like to fully use this endpoint (ie : fill in all Isochronous OUT frames each millisecond). To do this, I implemented a stuff that sends 4 pending URBs to the USB Bus driver. Each URB also gets completed but some are completed with 0xC0000B00 error (USBD_STATUS_ISOCH_REQUEST_FAILED). For those URBs that fails with this error, Iso packets (that do not have data) are told to be in error (0xC0000A00 = USBD_STATUS_BAD_START_FRAME), whereas all URB are sent with the USBD_START_ISO_TRANSFER_ASAP flag. Does anyone knows this kind of problem, and is there any trick to fix this problem ? Thanks by advance ! Sebastien Tag: MS Internet Connection Firewall Tag: 50256
  - 3
    - Using DIFxApp for Net Client install I've been trying to use the DIFxAPP code to install our NFS Client Device driver and have been running into problems. The DIFxAPP code requires a WHQL digital signature.for use with Windows 2000 and XP. Since we have no hardware we cannot take advantage of that program. An Authenticode signature can be used for Windows Server 2003, but apparently not for Win2k and XP (According to the Authenticode doc anyway). Has anyone else run into this problem? Any workarounds? Does anyone know why a WHQL digital signature is a requirement? Any idea if this requirement might be relaxed in the future? The error that cat get past is 0x800B0100L which is "No signature was present in the subject." I have supplied an Authenticode signiture, so I'm guessing that it wants a WHQL digital signature, correct? Regards, Duane Johnson WRQ, Inc. Tag: MS Internet Connection Firewall Tag: 50255
  - 4
    - Terminal Server, virtual audio driver, and lossless audio I was unable to locate a better newsgroup, so if there is a better place to post this question, please let me know. I am working with streaming audio over a Terminal Services connection in Windows 2003 Server. However, the application we'd like to use will be used in an audiological setting, so having lossless audio is of paramount importance and there doesn't appear to be a way to configure the virtual audio driver to use a lossless codec for transmission across the network. My question, then is this: Is there a way to configure the virtual audio driver for Terminal Services to use lossless compression? If not, to whom would I speak in order to have this option implemented in a future version? Thank you for your time in this matter. Tag: MS Internet Connection Firewall Tag: 50254
  - 5
    - How does NDISWAN work? Hi, does somebody know how NDISWAN makes decisions which WAN link is best for sent packet? MSDN says: "In an NDIS WAN environment, NDISWAN examines the header of the descriptor of a send packet and determines over which link the packet will be sent", but I would like to know what item of packet descriptor header is crucial. Tag: MS Internet Connection Firewall Tag: 50253
  - 6
    - binplace integration to the build utility Hello, Is there a way to integrate the binplace utility to the build utility of the ddk? For example the WPP tool is integrated and to use it you need to add the macro "RUN_WPP= $(SOURCES) -km" to the "source" file. I could not find any documentation about it in the ddk or the Internet. Nir Tag: MS Internet Connection Firewall Tag: 50250
  - 7
    - How to popup safe removal dialog of PNP device ? Dears Do you know if there is any function can popup safe removal dialog of PNP device ? Thanks a lot .. Tag: MS Internet Connection Firewall Tag: 50246
  - 8
    - DeviceIoControl return 998 hi, I try to retrieve signal strength from NDISUIO driver. the CreateFile returns OK on the name \\\\.\\{x-x-x-x}, but the DeviceIoControl retrurn 998 (no access to file). does anybody know why and how i should solve this problem. I should mention i'm working on xp and therefore the line "queryOID->ptcDeviceName = ptcDeviceName;" could not be performed, because the queryOID->ptcDeviceName exists only on WIN CE. Thanx, d Tag: MS Internet Connection Firewall Tag: 50245
  - 9
    - Server 2003 DDK USB Driver samples Hello, I was reading somewhere on this forum by Eliyas Yakub that Win XP DDK sample driver bulkusb had bugs wihch are fixed in Server 2003 DDK sample , is it possible to get the bulusb sample driver from Server 2003 DDK without geting the complete DDK regards Taha Tag: MS Internet Connection Firewall Tag: 50244
  - 10
    - 2 device interface questions Hi, i use SetupDiGetClassDevs to build a list of devices, and then i use SetupDiEnumDeviceInterfaces to enumerate device interfaces. however, if i do not specify DIGCF_DEVICEINTERFACE and use the same classguid that i use for SetupDiEnumDeviceInterfaces, the enumeration fails. aparrently if i do not specify DIGCF_DEVICEINTERFACE, i get a list of setup classes. what is the use of this if i cannot enumerate device interfaces with the resulting list? my second question is simpler: i am making an api to handle the device driver interfacing. a user needs to have something that he can pass to the api that i am making, in order to say: open a connection to that specific device. does he need to use the detailed name that is returned by SetupDiGetDeviceInterfaceDetail? or is there a simpler way to do this? kind regards, Bruno. Tag: MS Internet Connection Firewall Tag: 50241
  - 11
    - Microsoft Mirror Sample Driver hi all i am using Microsoft Mirror Sample Driver. all is working fine, and i am able to capture the desktop (with minor additions). however, i am experiencing a runtime side-effect. all combo-boxes in the operating system do not open normally, rather, they open only over where the mouse is. i commented out all the DrvXXX except for DrvEnablePDev DrvCompleteDev DrvDisablePDev DrvEnableSurface DrvDisableSurface DrvAssertMode (which seem to be the minimal requirement for a Mirror Display Driver). after i remove the driver and re-boot, the side-effect goes away. has anyone else ever experienced this side effect? can some one help me? assaf Tag: MS Internet Connection Firewall Tag: 50238
  - 12
    - good kernel forums needed hi all i am looking to join some good forums. mailing lists and the likes. any recomendations? assaf Tag: MS Internet Connection Firewall Tag: 50236
  - 13
    - Custom IOCTL for Audio Drivers Hello I have been trying to adapt MSVAD DDK sample so that it can handle custom IOCTLs from user mode apps. I registerd an handler for IRP_MJ_DEVICECONTROL and use PcDispatchIrp() to send down unrecognized IRPs to PortCls. since the MSVAD sample demonstrates an audio driver thats PnP aware, its not advisible to create a symbolic link for the driver such that usermode apps can open "\\.\mydriver" and send IOCTLs. I was wondering, how should one go about exposing the driver in such a way that user mode apps can send custom IOCTLs to it. TIA Tag: MS Internet Connection Firewall Tag: 50233
  - 14
    - how to display messages during boot time Hi, I have written a scsi miniport driver and it works well when I choose the "multi(0)disk(0)rdisk(0)partion(1)..." option defined in the boot.ini during boot time. I copied the driver into the root and renamed it as ntbootdd.sys. I added another option "scsi(0)disk(0)rdisk(0)..." in the boot.ini. When the system boots, I choose the scsi option. But the same driver ntbootdd.sys seems failed. I want to display some messages to the text mode screen in my driver like ntldr.exe does, so I could debug my driver. Does anybody know how to do that ? Thanks in advance Clin Tag: MS Internet Connection Firewall Tag: 50210
  - 15
    - newbie: ExAllocatePoolWithTag Hello, I'm rather new to driver development and I've got a question: In my driver I use the ExAllocatePoolWithTag function. As I'm running on DISPATCH_LEVEL, I need to specifiy NonPagedPool as a pool type. But as I'm allocating rather a big amount of memory, I'd prefer a paged pool allocation. Is there any way to do this in DISPATCH_LEVEL? Thanks to everyone Sam Tag: MS Internet Connection Firewall Tag: 50206
  - 16
    - MSVAD example Dear all, in the MSVAD example of DDK, Sound volume of Mic recording and MIDI recording are not adjustable in SndVol32. How to make them adjustable? Thx. David Tag: MS Internet Connection Firewall Tag: 50186
  - 17
    - Ndis packet user mode round-trip Suppose you have a Ndis IM over a Gigabit NIC. The IM sends all packes to user-mode then a console application will write the packes to the IM that will send them. What would be the resonable lowest degree of performance degradation one could expect from this scenario? Tag: MS Internet Connection Firewall Tag: 50180
  - 18
    - bug (?) in SfGetFileName in the SFilter sample, SfGetFileName will produce a string from various pieces. It gets a device name, a related file name (if any) , and then the filename and glues them together. I'm seeing that when a file from the network is being written, the device is \device\harddiskvolume2 then the related file object is '\' and then the routine appends a \ also finally the file name is \test\alpha.txt. This results in a name = \device\harddiskvolume2\\\test\alpha.txt. Can this possibly be correct? -- Gak - Finecats Tag: MS Internet Connection Firewall Tag: 50163
  - 19
    - IOCTL and mutex Hello I guess I am little confused and would appreciate if someone were to help me resolving this. I have written a driver for PCI based device to be meant to be used on Windows 2000 and up. The device has a few controls that the user application can get and set through IOCTL interface that I have provided in the driver. In order to serialize access to ioctls, I use Kernel Mutex as shown KeWaitForMutexObject(&pdx->ioctlMutex, Executive, KernelMode, FALSE, NULL) ; /* do stuff */ KeReleaseMutex(&pdx->ioctlMutex, FALSE) ; I could have used spinlocks but I reasoned that Mutex would work just as fine in this case because driver would not be in an arbitrary thread context while processing IOCTLs and I could spare raising the IRQL to DISPATCH. Also, I should mention that my driver installation does not put another filter driver on top of my driver. Now I am wondering if my above reasoning is indeed correct. In other words, can it ever happen that, either on XP or windows 2000, the driver receives IOCTL in an arbitrary thread context in which case I should probably switch to using spinlocks. Thanks in advance, Puneet Tag: MS Internet Connection Firewall Tag: 50161
  - 20
    - Restarting a print job I work for a small printer manufacturer as a software engineer developing. I'm currently modifying a USB print driver to add an error recovery capability, it should allow a job to be reprinted from the same page where an error happened. I've already implemented this feature for a parallel port driver but I'm facing some problems now that I'm trying to do the same for USB port. The problem is as follows: 1. When an error condition is detected the Language Monitor's WritePort function stops sending data to the printer but keeps reading data from the print spooler unitl it detects an end-of-page token. 2. When this happens I set the job to be restarted using the SetJob function using the command JOB_CONTROL_RESTART. 3. I can see in the print queue the job restarting and respooling. The print spooler starts sending data again to the Language Monitor. 4. This is when the error happens. The WritePort returns error 183, which is "Cannot create a file when that file already exists". So, I read some documentation and tried some option without much success. My best gess is that the print processor is not being restarted. There is two files (FP00000.SPL and FP00000.SHD) that are never deleted as the way the should when this error happens. I tried to use the ControlPrintProcessor() function to terminate the print processor manually when the job is done, but I couldn't get the correct handle. Did some one have this problem before? any suggestions? Sincerely, Fabio Milan Tag: MS Internet Connection Firewall Tag: 50159
  - 21
    - Device Initialization File I am trying to have my driver read a .ini file and apply the described settings to hardware. Are there any routines available, similar to GetPrivateProfileInt and GetPrivateProfileString, that are available to drivers? If not, any suggestions on how to parse individual lines? Thank you for your time. Tag: MS Internet Connection Firewall Tag: 50149
  - 22
    - Problem with linked list Hi again, I implemented the following double linked list stuff: typedef struct __MYSTRUCT { UINT t; [...] UINT bufferlen; //length of buffer BYTE *buffer; }MYSTRUCT; typedef struct __MYLIST{ MYSTRUCT mystr; LIST_ENTRY linkfield; }MYLIST, *PMYLIST; LIST_ENTRY DoubleHead; ------------------------------------------------------- [...] MYSTRUCT a; //filled with data /*The size of all the entries is dynamic, that's why the size of the structure is allocated again every time*/ UINT structsize = sizeof(UINT) + sizeof(UINT) + sizeof(a.buffer) + a.bufferlen; PMYLIST psElement = (PMYLIST) ExAllocatePoolWithTag(PagedPool,structsize,'HASA'); //here we CRASH!!! if(psElement == NULL) { DBGPRINT(("Allocatepool failed!")); } else { psElement->mystr = a; NdisAcquireSpinLock(&GlobalLock); if(numberofentries <= MAX_LIST_ENTRIES) //limit for #elements { InsertTailList(&DoubleHead,&psElement->linkfield); numberofentries = numberofentries + 1; } NdisReleaseSpinLock(&GlobalLock); } When I execute the code above, the computer crashes: DRIVER_CORRUPTED_EXPOOL, with an error in the marked line above. Any ideas why? Thanks Peter Tag: MS Internet Connection Firewall Tag: 50144
  - 23
    - FILE_DEVICE_DISK and VPB in a device filter Good people: I've a question about the toaster filter sample attaching to the disk stack. The filter calls IoCreateDevice specifying FILE_DISK_UNKNOWN on wxp since IoIsWdmVersionAvailable(1, 0x20) returns TRUE. Later in AddDeviceRoutine, the newly created device type was update with the lower's type which is FILE_DEVICE_DISK. I/O manager didn't create a VPB for the DO since it was FILE_DISK_UNKNOWN at the time it was created. Is there anything bad if the topmost device object is DEVICE_DISK but the VPB is NULL? It didn't crash on XP though. Thanks, Calvin - Calvin Guan Software Engineer ATI Technologies Inc. www.ati.com Tag: MS Internet Connection Firewall Tag: 50142
  - 24
    - Matching WM_DEVICECHANGE to a Device Object I would like to tie the WM_DEVICECHANGE message to a device object (DBT_DEVICEARRIVAL or DBT_DEVICEREMOVECOMPLETE). Is it possible to translate the dbcc_name received in the message to something that can be used in kernel mode to identify the device object? Or the reverse--is it possible for a WDM filter to get the dbcc_name given a device object? Just somehow need to bridge the message to the exact device. Tag: MS Internet Connection Firewall Tag: 50135
  - 25
    - Reading SINGLE_LIST from backwards Hi, I created a single list and started pushing elements to it by PushEntryList(). Now, how can I read through the list's elements backwards (starting at the tail)? Can anyone provide some source code? thanks a lot Peter Tag: MS Internet Connection Firewall Tag: 50130

Can anyone tell me how MS Internet Connection Firewall
works? I know that it opens an outgoing packet and
changes its source address so that the incoming packets
are routed to alg.exe (application layer gateway). Can
someone tell me how it does this? How does it change the
packet? Does it use a TDI driver, a filter hook driver,
or an NDIS intermediate driver?

Top

Re: MS Internet Connection Firewall by Maxim

Maxim
Wed Aug 18 13:49:30 CDT 2004

Why would firewall change a packet? It inspects it, and then either drops
it or passes it. But why change?
ALG is a part of NAT (Internet Connection Sharing) and not the gateway.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
maxim@storagecraft.com
http://www.storagecraft.com

"steve" <anonymous@discussions.microsoft.com> wrote in message
news:10a401c4851a$08175fd0$a301280a@phx.gbl...
> Can anyone tell me how MS Internet Connection Firewall
> works? I know that it opens an outgoing packet and
> changes its source address so that the incoming packets
> are routed to alg.exe (application layer gateway). Can
> someone tell me how it does this? How does it change the
> packet? Does it use a TDI driver, a filter hook driver,
> or an NDIS intermediate driver?

Top