Stack Overflow
Stack Overflow

Questions tagged [wfp]

Windows Filtering Platform (WFP) - API for creating network filtering applications.

121 questions
74
votes
9 answers

Java 7 prevents FTP transfers on Windows Vista and 7 if firewall is on. Any ideas?

Java 7 prevents FTP transfers on Windows Vista and 7. In FTP, before a file is transferred a PORT or a PASV command must be sent. As soon as one of the commands is sent the Windows Firewall closes the socket that sent it. This only happens if the…
HansA
  • 1,375
  • 2
  • 11
  • 19
8
votes
2 answers

WFPSampler Compilation issue - wfpcalloutsclassreg not found

The compilation of the Microsoft demo WFPSampler Project fails in any setup (32/64 - debug/release) on WFPSamplerCalloutDriver.InX at line 36 : [ClassInstall32.nt$ARCH$] AddReg = WFPCalloutsClassReg : Stamping .\WFPSamplerCalloutDriver.inf…
Damien
  • 1,492
  • 10
  • 32
8
votes
2 answers

How to filter network connections to specific domain names on Windows

I want to implement a Windows Service that will by default block/allow all network connections and whitelist/blacklist specific domain names (like google.com). I looked at Windows Filtering Platform but it does not seem I can filter on domain names,…
anotherCode245
  • 703
  • 1
  • 8
  • 20
7
votes
1 answer

WinDivert: redirect to proxy listening on loopback interface only

trying to implement transparent proxy same way as in this post, but I have a "proxy" listening only on loopback interface. Once I set DstAddr to loopback, 2nd packet of TCP handshake never received ... iphdr->DstAddr =…
mbg033
  • 501
  • 5
  • 18
7
votes
2 answers

Windows Driver Development: Deploy option missing in Visual Studio 2012

I was trying to compile and deploy the WFP sample obtained from MSDN called msnmntr but the same problem applies to all samples. This and all samples fail to deploy because there's one step in the documentation that are missing in Visual Studio 2012…
ppaulojr
  • 3,579
  • 4
  • 29
  • 56
6
votes
2 answers

windows filtering platform. net wrapper?

Is there a .NET wrapper for the windows filtring platfrom? Im looking to use WFP to observe application level network traffic observations in my c# app. Thanks!
Dacto
  • 2,901
  • 9
  • 45
  • 54
5
votes
3 answers

Communication between kernel-mode and user-mode application

I have built a WFP callout driver which runs in kernel mode. Now, I'm trying to figure out how to communicate between this driver and my GUI application which runs in user-mode. Any ideas? Exactly what I want is something like this: The callout…
henrikpersson
  • 338
  • 2
  • 9
5
votes
0 answers

WFP (Windows Filtering Platform) Local TCP proxy redirection works only after WFPSamplere.exe -clean

I am using WFPsampler to redirect TCP IPV4traffic using the below command. WFPSampler.exe -s PROXY -l FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 -ipra 192.168.10.52 -iprp 9000 -pra 127.0.0.1 -prp 5050 -v -plspid 9184 The redirection doesn't work until I…
A.N
  • 541
  • 2
  • 13
5
votes
2 answers

Windows Filtering Platform user mode or kernel mode?

I am using the Windows Filtering Platform. I want to create a traffic filter, security manager, which monitors packets and network events or blocks urls... I know most of the WFP functions can be called from either user mode or kernel mode. I am…
QuangNHb
  • 304
  • 2
  • 9
4
votes
0 answers

Receiving in/out traffic stats using WFP user-mode API

I'm working on the application that should collect in/out traffic stats for every connection on the system. My idea is using the WFP 'FwpmConnectionSubscribe0' function in order to register the callback function and start receiving the…
Richard Roe
  • 95
  • 5
4
votes
1 answer

How do I implement per-app routing behavior on windows?

I am running a VPN in windows 10 desktop (using OpenVPN) and the VPN is the default gateway, so that all traffic by default goes through the VPN tunnel. However, I would like to exempt certain apps from the VPN, so that their traffic goes directly…
horseyguy
  • 29,455
  • 20
  • 103
  • 145
4
votes
0 answers

Windows Filtering Platform Network Slowdown Due to Spinlock

I am writing a Windows Filtering Platform Kernel Mode Driver, the goal of the driver is to capture all traffic on a particular layer, and communicate this traffic back down to user-mode so that it can be further analyses. The driver never needs to…
Dan
  • 3,879
  • 5
  • 36
  • 50
4
votes
2 answers

Universal Windows App Show Page As Dialog

I am trying to display a page as a dialog in Universal Window App (Windows 10). In WFP, there is this ShowDialog to call on Window: var msgBox = new MessageWindow(); msgBox.Owner = App.Current.MainWindow; msgBox.WindowStartupLocation =…
user3863376
  • 63
  • 1
  • 2
  • 4
4
votes
2 answers

Windows Filtering Platform to filter HTTPS from managed code

I want to develop a host-based firewall for Windows mainly to filter URLs starting with HTTPS ! I know that Microsoft is presenting WFP as a substitution to the deprecated old techniques such as firewall/filter hooks, NDIS, TDI, WSA and Winsock 2…
JohnTube
  • 1,782
  • 27
  • 46
4
votes
1 answer

Can a NDIS protocol driver (npf.sys of WinPcap) be ported to LWF or WFP?

everyone. I am doing some improvements for WinPcap. Now I have ported the npf.sys driver from NDIS5.0 to NDIS6.0. Is there still improvement space for this driver, like porting it to LWF (Light-Weight Filter) or WFP (Windows Filter Platform)? We…
hsluoyz
  • 2,739
  • 5
  • 35
  • 59
1
2 3
…
8 9