I want to develop a firewall software, LHApi made it very easy for me to capture the packets and get relevent information from them, but I wonder how to drop these packets or let them pass thru accoding to relevent infomation from LOG_INFO structure.
Localhost Monitor API is created as a sniffer tool, not the firewall software and can’t be used fot the dropping packets. However, it’s base driver (TDI filter driver) can be used for the developing the application level firewall like the one you have mentioned.