Abnormal phenomenon.

I tested out TDI hooking driver(Network packet filtering driver).
By the way, I met a problem.

I made a rule which can control access to shared-folder of my computer
from other computers.
At first, I removed this rule and let other computers come into my
shared-folder. One computer(A-machine) connected to my shared-folder and
did something(file open or etc). And then A-machine disconnected.
The next, I applied rule to deny access to my shared-folder.
By the way, A-machine could access to my shared-folder as before.
If A-machine try to access after several minutes, from that moment, access
denied.

Is this problem due to session or other reasons?
How should i solve this problem?
Ask advice.

It sounds like you’re trying to filter network filesystem requests using
a TDI hook (!). This is tenuous at best. I suggest you use a proper
filesystem hook.

mynam wrote:

I tested out TDI hooking driver(Network packet filtering driver).
By the way, I met a problem.

I made a rule which can control access to shared-folder of my computer
from other computers.
At first, I removed this rule and let other computers come into my
shared-folder. One computer(A-machine) connected to my shared-folder and
did something(file open or etc). And then A-machine disconnected.
The next, I applied rule to deny access to my shared-folder.
By the way, A-machine could access to my shared-folder as before.
If A-machine try to access after several minutes, from that moment, access
denied.

Is this problem due to session or other reasons?
How should i solve this problem?
Ask advice.


Nick Ryan (MVP for DDK)