Is it possible to install filter on FWPM_LAYER_NAME_RESOLUTION_CACHE_V4? RRS feed

  • Question

  • I try to install filter (with callout) on FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 (Windows 10, kernel mode).

    When it works with other layers, with this one FwpmFilterAdd0 always fails with STATUS_FWP_OUT_OF_BOUNDS, it is completely unclear which parameter causes the problem. (The sublayed installed and callout added successfully). Tried it without conditions, with conditions, without callout (FWP_ACTION_BLOCK, for example), nothing helps.

    Any ideas?

    Thursday, August 1, 2019 8:20 AM

All replies

  • Hi

    STATUS_FWP_OUT_OF_BOUNDS is generally due to "The option value specified by newValue -> uint32 does not include one of the defined FWP_OPTION_VALUE_XXX constant values."

    See: https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/content/fwpsk/nf-fwpsk-fwpsclassifyoptionset0#return-value

    I recommend that you test each parameter value of the FwpsClassifyOptionSet0 function to see if there are exceptions.

    If there is error, please refer to this to find out the cause of the error.

    Best regards,


    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.

    Friday, August 2, 2019 10:20 AM