How to restrict using NetBEUI and/or TCP/IP for selected processes?

NTFSD
1

Hi again

another short question:
How to enable/disable using NetBEUI and/or TCP/IP for several processes?
I mean, that they no need to hook packets, just deny network requests from
selected processes.

Is it possible to solve this task without hooking network traffic, like
hooking NDIS or TDI?

does anybody knows answer?

Valery

You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

2

Yes, I know, Winsock LSP looks like it’s fastest way and plus that it’s user
mode solution.
But we haven’t forget that TCPIP.SYS could be called directly omitting win
sockets over TDI.
I know also, that by using IoAttachDevice for \Device\RawIp, \Device\Udp,
\Device\Tcp, I can hook TDI level. BTW, what’s NetBEUI device name to hook
it as well?

I asked my question to check for more fastest and easiest way. Looks like,
there is no other good solutions except written above

Valery

----- Original Message -----
From: “Yoni Baron”
To: “File Systems Developers”
Sent: Friday, February 01, 2002 1:06 AM
Subject: [ntfsd] RE: How to restrict using NetBEUI and/or TCP/IP for selec
ted processes?

> You can hook the processes ws2_32.dll import table.
> There are couple of ways to do this.
>
> -----Original Message-----
> From: Valery A. Boronin [mailto:xxxxx@novosoft.ru]
> Sent: Thursday, January 31, 2002 8:04 PM
> To: File Systems Developers
> Subject: [ntfsd] How to restrict using NetBEUI and/or TCP/IP for selected
> processes?
>
>
> Hi again
>
> another short question:
> How to enable/disable using NetBEUI and/or TCP/IP for several processes?
> I mean, that they no need to hook packets, just deny network requests from
> selected processes.
>
> Is it possible to solve this task without hooking network traffic, like
> hooking NDIS or TDI?
>
> does anybody knows answer?
>
> Valery
>
>
>
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@camelot.com
> To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
> —
> You are currently subscribed to ntfsd as: xxxxx@novosoft.ru
> To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com
>
>
>

—
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com