Ip address of netcard for FireWall

Well, well, well
I want to implement firewall, so i need to do it between NIC
driver and protocol…
I know that i could read Registry key for service, but is it the
only way?


You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

> ----------

From: xxxxx@mail.ru[SMTP:xxxxx@mail.ru]
Reply To: xxxxx@lists.osr.com
Sent: Thursday, February 14, 2002 7:04 AM
To: xxxxx@lists.osr.com
Subject: [ntdev] Ip address of netcard for FireWall

Well, well, well
I want to implement firewall, so i need to do it between NIC
driver and protocol…
I know that i could read Registry key for service, but is it the
only way?

No. You can monitor source IP addresses in the packets. You can use user
mode helper which can get this info using an API which is described
somewhere on the 'Net (and maybe already in Platform SDK). You can use TDI
(and mix layers even more :slight_smile: functions (examine tdikrnl.h file, there are
some interesting functions which allow enumerating all IP addresses; sorry
I’m lazy to find it now, I posted it to the list in the past – search
archives).

The question remains: why do you need it? Firewall usually use a set of
rules from external source (user mode app). User mode application can get
all the info and build rules for firewall and firewall only need to apply
rules to current packet.

Best regards,

Michal Vodicka
STMicroelectronics Design and Application s.r.o.
[michal.vodicka@st.com, http:://www.st.com]


You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com