Looking for more docs on PfCreateInterface

From: Jeff Fink (jfinkjfink_at_yahoo.com)
Date: 01/05/05 

Date: Tue, 4 Jan 2005 17:19:42 -0700

I want to create a firewall on my box using PfAddFiltersToInterface. The
API looks pretty straightforward, but there are some issues that I'd like to
learn more about before I start writing code.

My main goal is to add filters to the WAN ips on the server boxes so that I
can control what ips can get to what ports on the box.

1) Are the filter interfaces created via PfCreateInterface persisted on the
system through reboots? Or do I need to construct a service that creates an
interface, adds filters, and then associates with the WAN ips at startup?

2) If the interfaces do persist, how do I get a list of existing interfaces
without modifying the settings? PFCreateInterface says that a non-zero
value in the dwName parameter "is a potentially shared interface."

3) If a new ip gets added to the box, how do I detect this so tha I can bind
my interface to it?

4) When I finally get ready to add my filters, I'm assuming that I can
specify a range of ports by setting the wSrcPort/wSrcPortHighRange values
appropriately.

Thanks for any info,
-Jeff

Relevant Pages

  • Re: NDIS_MINIPORT_CHARACTERISTICS
    ... I am referring to NDIS-hooking filters that wrap the NDIS interfaces. ... kernel security if unsigned drivers and components can so easily ...
    (microsoft.public.development.device.drivers)
  • Crap: Really no programmatically filter control in DirectShow??
    ... I try to use several MPEG2-Decoders in my DirectShow application. ... Besides the quality and performance issues among all the filters you can get ... If I have to know what interfaces a COM object can use (I can only ... So I can only control these filters, where .h header files exist from the ...
    (microsoft.public.win32.programmer.directx.video)
  • XDS Codec - any experiences
    ... We have been implementing a number of filters in WME9, ... except the XDS_Codec filter and interfaces ... In the documentation, there are several vague points which we ...
    (microsoft.public.windowsmedia.sdk)
  • Learning basics of Directshow and questions
    ... Each type of Directshow filters has its own Standard interfaces, ... custom interfaces. ...
    (microsoft.public.win32.programmer.directx.video)
  • Re: Fw: Serious Security Issue in Windows XP SP2s Firewall
    ... the fact that it is treating all interfaces as equal is not. ... It's very easy to check out what settings are implemented for the FW ... a simple and coherent configuration model ... the security of that system. ...
    (Focus-Microsoft)