An Adventure: How to Implement a Firewall-Hook Driver?

Jesus Oliva

Rate me:

4.83/5 (65 votes)

28 Oct 20049 min read

672.9K

11K

194

Firewall-Hook driver is a completely unknown method to develop simple packet filtering applications. With this article, I want to tell you how this driver works and what you need to do to use it in your applications.

fwhookdrv_bin.zip
- FirewallApp.exe
- FwHookDrv.sys
fwhookdrv_src.zip
- Driver
  - buildchk_wxp_x86.log
  - Debug
    - FwHookDrv.sys
    - vc60.idb
  - FwHookDrv.c
  - FwHookDrv.dsp
  - FwHookDrv.dsw
  - FwHookDrv.h
  - makefile
  - NetHeaders.h
  - objchk_wxp_x86
    - _objects.mac
    - i386
      - fwhookdrv.obj
      - FwHookDrv.pdb
      - FwHookDrv.sys
  - sources
- FirewallApp.exe
- FirewallHooK
  - FirewallApp.cpp
  - FirewallApp.dsp
  - FirewallApp.dsw
  - FirewallApp.h
  - FirewallApp.rc
  - FirewallAppDoc.cpp
  - FirewallAppDoc.h
  - FirewallAppView.cpp
  - FirewallAppView.h
  - MainFrm.cpp
  - MainFrm.h
  - res
    - CVS
      - Entries
      - Entries.Extra
      - Repository
      - Root
    - FirewallApp.ico
    - FirewallApp.rc2
    - FirewallAppDoc.ico
    - newtoolbar.bmp
    - Toolbar.bmp
  - resource.h
  - RuleDlg.cpp
  - RuleDlg.h
  - rules.h
  - sockUtil.cpp
  - sockutil.h
  - StdAfx.cpp
  - StdAfx.h
  - TDriver.cpp
  - TDriver.h
- FwHookDrv.sys