Handling multiple NB in outbound classify functions RRS feed

  • Question

  • In my classifyFn for the FWPM_LAYER_OUTBOUND_IPPACKET_V4/6 layers, the NDL

    (passed in through the layerData argument) may have more than one NB chained


    Can I assume that the following FWPS_INCOMING_VALUES0
    values apply to all
    NBs in the chain?

         1.  Source and destination IP addresses.
         2. IP protocol type.

    Point #1 seems likely but #2
    seems unclear, especially since the
    enumeration doesn't support an IP
    protocol enum value.

    Wednesday, January 30, 2013 6:36 PM


  • Yes all NB's at these layers pertain to that flow (5 tuple matching).

    Hope this helps,

    Dusty Harper [MSFT]
    Microsoft Corporation
    This posting is provided "AS IS", with NO warranties and confers NO rights

    Thursday, January 31, 2013 6:43 PM