IP stack filter driver

NTDEV
1

On local host:
UDP Proxy listen on 127.0.0.1:8888
UDP Client send packets to 127.0.0.1:4321
Client and proxy have no configurable option for ports, ip only.

Task brief: Extend IP stack to pass packets from Client to Proxy and back.

FW RULE like that:
PROTO UDP SRC ADDR 127.0.0.1 PORT ANY -> DST ADDR 127.0.0.1 PORT 4321 translate/redirect/map to ADDR 127.0.0.1 PORT 8888

Is it possible to do?
What is solution to apply this rule to IP stack in Win XP / Vista / 7?

Thank you so much!
Dmitry

2

> UDP Proxy listen on 127.0.0.1:8888

UDP Client send packets to 127.0.0.1:4321
Client and proxy have no configurable option for ports, ip only.

Task brief: Extend IP stack to pass packets from Client to Proxy and back.

Updating the apps will be by far easier in terms of man*months. The usual cost is several days, and, with the 2 drivers, you will hardly have at least something alive in a month.

What is solution to apply this rule to IP stack in Win XP / Vista / 7?

XP has pathetic firewall and I have major doubts this is possible.

Even Vista’s firewall does not understand things like map/redirect.

So, you will need to write your own firewall, more so - on 127.0.0.1 which is not related to NDIS at all.

In Vista+ you can use WFP, and on pre-Vista you have no options then TDI filter.

So, 2 projects, one for Vista+, one for pre-Vista.

–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com

3

Thanks Maxim!

WFP thats I need to learn.

Thaks you so much!
Dmitry