locked
I wanna inject tcp and udp packet , when did I detect it's first connection? RRS feed

  • Question

  • I wanna inject tcp and udp packet , when did I detect it's first connection?

    I did it in FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 layer , is it correct?

    Wednesday, July 7, 2010 9:24 AM

Answers

  • AUTH_RECV_ACCEPT is for the inbound packets/ AUTH_CONNECT is for outbound.  These layers may reauthorize connections and as well, so you will need to have logic to handle this.

     

    Hope this helps,

     


    Dusty Harper [MSFT]
    Microsoft Corporation
    ------------------------------------------------------------
    This posting is provided "AS IS", with NO warranties and confers NO rights
    ------------------------------------------------------------
    Wednesday, July 7, 2010 5:56 PM
    Moderator

All replies

  • AUTH_RECV_ACCEPT is for the inbound packets/ AUTH_CONNECT is for outbound.  These layers may reauthorize connections and as well, so you will need to have logic to handle this.

     

    Hope this helps,

     


    Dusty Harper [MSFT]
    Microsoft Corporation
    ------------------------------------------------------------
    This posting is provided "AS IS", with NO warranties and confers NO rights
    ------------------------------------------------------------
    Wednesday, July 7, 2010 5:56 PM
    Moderator
  • hi Dusty :

             in AUTH_RECV_ACCEPT and AUTH_CONNECT  , how can I reclassify the packet?  can i do it in FLOW_ESTABLISED_Vx layer?

     

    Friday, July 9, 2010 1:49 AM
  • Reauhorization is done automatically if certain conditions are met (filters are modified at those layers, profile crossing, interfaces change etc.)

     

    Hope this helps,

     


    Dusty Harper [MSFT]
    Microsoft Corporation
    ------------------------------------------------------------
    This posting is provided "AS IS", with NO warranties and confers NO rights
    ------------------------------------------------------------
    Friday, July 9, 2010 3:09 AM
    Moderator