is it possible to do layer 2 filtering using wfp on windows vista and windows 7 RRS feed

  • Question

  • it is possible to do layer 2 filtering on windows 7 and windows vista. I have seen a page on msdn where it said that layer 2 was introduced to windows 8 and later. but I also saw this fieldkey listed under windows 7 FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET
    Wednesday, August 24, 2016 6:27 AM

All replies

  • FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET is only available on OS>=8. This can be seen in fwpmu.h
    • Proposed as answer by JST86 Wednesday, August 24, 2016 10:26 AM
    Wednesday, August 24, 2016 10:26 AM
  • so how do i filter layer 2 from windows 7 and windows vista
    Wednesday, August 24, 2016 1:50 PM
  • This should be achievable with an NDIS LWF driver
    Wednesday, August 24, 2016 3:26 PM
  • What if i use fWps_fields_outbound_mac_frame_802_3 i just want know the remote mac address 
    You can also follow the link

    you will see that FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET is also listed under windows 7 and another site also said that the enum above was originally FWPM_LAYER_INBOUND_MAC_FRAME_802_3 so is it possible to get the remote mac address

    • Edited by davescxp Thursday, August 25, 2016 4:27 AM
    Thursday, August 25, 2016 3:32 AM