Introduction - If you have any usage issues, please Google them yourself
Firewall filter driver, 1) a device driver to create the entrance, create a symbolic link for the communication and processing of IRPs (distribution, loading, unloading, create ...) standard routines. 2) in the standard routines in the management IRPs. In our code, we achieved four IOCTL code: START_IP_HOOK (up filter function), STOP_IP_HOOK (cancellation filter function), ADD_FILTER (installation of new filter rules), CLEAR_FILTER (clear all the rules). 3) for our drivers, we used to filter multiple functions.