Filtering name resolution with TDI filter

NTDEV
1

Hi all,

Is it possible to filter DNS name resolution with TDI filter?
I got TDI_QUERY_ADDRESS_INFO to try monitore this action, but I can’t
get right input and output parameters yet.

Am I going to the right way?

Thanks in advance,
Fernando Roberto da Silva.

2

Fernando,

DNS name resolution is built on TCP and UDP. The DNS ‘client’ resolver is
quite simply a Winsock client in usermode. You have many options to
‘filter’ this behavior but TDI_QUERY_ADDRESS_INFO is not one of them. That
will only give you information about the TDI ‘address file object’, probably
not what you are looking for.

Just what do you need to ‘filter’ in the DNS process? Have you considered a
layered service provider?

Good Luck,
Dave Cattley

David R. Cattley
Consulting Engineer
Systems Software Development

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Fernando Roberto
Sent: Wednesday, May 31, 2006 12:20 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Filtering name resolution with TDI filter

Hi all,

Is it possible to filter DNS name resolution with TDI filter?
I got TDI_QUERY_ADDRESS_INFO to try monitore this action, but I can?t get
right input and output parameters yet.

Am I going to the right way?

Thanks in advance,
Fernando Roberto da Silva.

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer