An Adventure: How to Implement a Firewall-Hook Driver?

Jesus Oliva

Rate me:

4.83/5 (65 votes)

28 Oct 20049 min read

672.3K

11K

194

Firewall-Hook driver is a completely unknown method to develop simple packet filtering applications. With this article, I want to tell you how this driver works and what you need to do to use it in your applications.

fwhookdrv_bin.zip
- FirewallApp.exe
- FwHookDrv.sys
fwhookdrv_src.zip
- Driver
  - buildchk_wxp_x86.log
  - Debug
    - FwHookDrv.sys
    - vc60.idb
  - FwHookDrv.c
  - FwHookDrv.dsp
  - FwHookDrv.dsw
  - FwHookDrv.h
  - makefile
  - NetHeaders.h
  - objchk_wxp_x86
    - _objects.mac
    - i386
      - fwhookdrv.obj
      - FwHookDrv.pdb
      - FwHookDrv.sys
  - sources
- FirewallApp.exe
- FirewallHooK
  - FirewallApp.cpp
  - FirewallApp.dsp
  - FirewallApp.dsw
  - FirewallApp.h
  - FirewallApp.rc
  - FirewallAppDoc.cpp
  - FirewallAppDoc.h
  - FirewallAppView.cpp
  - FirewallAppView.h
  - MainFrm.cpp
  - MainFrm.h
  - res
    - CVS
      - Entries
      - Entries.Extra
      - Repository
      - Root
    - FirewallApp.ico
    - FirewallApp.rc2
    - FirewallAppDoc.ico
    - newtoolbar.bmp
    - Toolbar.bmp
  - resource.h
  - RuleDlg.cpp
  - RuleDlg.h
  - rules.h
  - sockUtil.cpp
  - sockutil.h
  - StdAfx.cpp
  - StdAfx.h
  - TDriver.cpp
  - TDriver.h
- FwHookDrv.sys

#if !defined _RULES_H
#define _RULES_H

typedef struct _RuleInfo
{
	unsigned long sourceIp;
	unsigned long sourceMask;
	unsigned short sourcePort;

	unsigned long destinationIp;
	unsigned long destinationMask;
	unsigned short destinationPort;

	unsigned int protocol;

	int action;
}RuleInfo, *PRuleInfo;

#endif

By viewing downloads associated with this article you agree to the Terms of Service and the article's licence.

If a file you wish to view isn't highlighted, and is a text file (not binary), please let us know and we'll add colourisation support for it.

Written By

Jesus Oliva

Chief Technology Officer

Spain

To summarize: learn, learn, learn... and then try to remember something I.... I don't Know what i have to remember...

http://www.olivacorner.com

An Adventure: How to Implement a Firewall-Hook Driver?

Comments and Discussions