Bogdan
Mon Jan 19 21:37:33 CST 2004
"Thomas F. Divine [DDK MVP]" <tdivine@NOpcausaSPAM.com> wrote in message
news:OCQpuDr3DHA.1672@TK2MSFTNGP12.phx.gbl...
>
> "Bogdan Bejan" <na@na.na> wrote in message
> news:ejKTv2i3DHA.3196@TK2MSFTNGP11.phx.gbl...
> > This is an everview of the diffrent network firltering metods:
> >
http://www.ndis.com/papers/winpktfilter.htm
> >
>
> Yes, that is a page that I maintain. (And I need to add Max's approach of
> filtering over AFD.SYS...)
>
> Max is correct, however, in that NDIS is documented much better then other
> filtering methods. On Windows 2000 and higher NDIS IM drivers are the best
> choice for filtering.Consider other alternatives only if per-packet
> filtering cannot fit your needs.
Doing almost any content filtering at packet level i guess it will be a
pain, since you will probably need to reimplement a TCP/IP stack (ingnoring
that there are more stream oriented protocols then just TCP/IP), right?
> Thomas F. Divine
> www.pcausa.com
>
>
> > "Hari" <anonymous@discussions.microsoft.com> wrote in message
> > news:066701c3d98f$c24aab50$a401280a@phx.gbl...
> > > Hi ,
> > >
> > > I want to write a personal firewall like thing to prevent
> > > certain files going out and coming into the system. Say
> > > all word files. i want to allow the file to move out/in
> > > after some modifications on the file.
> > >
> > > What is the best way of doing it.
> > >
> > > From what i learnt from you guys and the net i found that
> > > TDI and NDIS filters are the way .
> > >
> > > Can anybody suggest me which one is the best?
> > >
> > > Will both the filters can be wriiten in USer mode?
> > >
> > > Which mode i should write for ur info i want my
> > > application to interat with the firewall.
> > >
> > > Can somebody suggest me any material providing a starting
> > > point
> > > Thanks
> >
> >
>
>