Vadim Smirnov

Forum Replies Created

Viewing 15 posts - 661 through 675 (of 1,490 total)
  • Author
    Posts
  • Vadim Smirnov
    Keymaster

      Hi Ghita,

      I can’t see the filters you have set, but I suspect that your filters for blocking TCP/UDP may be destination IP/MAC address specfic and therefore broadcast/multicast packets get passed (they have special broadcast/multicast MAC and IP adresses).

      Hope it helps…

      in reply to: PSTATIC_FILTER_TABLE blocks DNS traffic #7133
      Vadim Smirnov
      Keymaster

        Thank you for the update. I’m glad that you have resolved the issue.

        in reply to: Winpk filter on Windows 7 #7136
        Vadim Smirnov
        Keymaster

          Could you provide more details?
          1) ListAdapters output.
          2) PassThru output. For this test ping one of other notebooks.
          3) IPCONFIG output.

          We are not aware about any issues with Windows 7, so it must be something about your configuration or usage.

          in reply to: PSTATIC_FILTER_TABLE blocks DNS traffic #7131
          Vadim Smirnov
          Keymaster

            To resolve an issue with DNS you can change all your filters from blocking to redirect and check filter ID in the DNS packets. So you can identify filter which selects DNS packets.

            in reply to: PSTATIC_FILTER_TABLE blocks DNS traffic #7127
            Vadim Smirnov
            Keymaster

              From what I can see filter 2 is supposed to block incoming packets on local port 80. If this is what you want to do and still incoming packets on port port 80 are not blocked then there is only one possibility – these packets are passed by filter 1.

              in reply to: PSTATIC_FILTER_TABLE blocks DNS traffic #7128
              Vadim Smirnov
              Keymaster

                I don’t have the filters code under hand at the moment but for the second filter I would add that it should be applied to TCP protocol.

                in reply to: Winpk filter missing or failed to load #7126
                Vadim Smirnov
                Keymaster

                  Please clarify, are using an application build on top of WinpkFilter driver and this application reports that driver is missing?

                  in reply to: WinpkFilter news/updates. #5516
                  Vadim Smirnov
                  Keymaster

                    Windows Packet Filter Kit 3.1.3 released:
                    – Changed approach to disable TCP task offload in NDIS LWF. Previous method had some known issues.

                    If you are eligible for a free update, please send the following details to support@ntkernel.com tо receive an update instruction:

                    1) Your order ID.
                    2) An approximate date of purchasing.

                    in reply to: Winpkfilter with IPSecVPN #7125
                    Vadim Smirnov
                    Keymaster

                      I’m not familier with IPSECVPN software you use, but yes, there are two possibilities:

                      1) IPSEC driver above WinpkFilter: in this case instead normal TCP/IP packets (all or only part of them depending on IPSEC policy) you intercept encrypted IPSEC packets. I’m not sure how your WinpkFilter software would deal with these packets (tries to tunnel or ignores).
                      2) IPSEC driver below WinpkFilter: in this case your UDP tunnel packets can be encrypted by IPSEC driver (depending on the policy).

                      I would check what packet you get in your WinpkFilter software and check what packet go out on the network media with network sniffer to discover the details.

                      in reply to: Winpkfilter for Linux #7124
                      Vadim Smirnov
                      Keymaster
                        in reply to: WinpkFilter news/updates. #5515
                        Vadim Smirnov
                        Keymaster

                          Windows Packet Filter Kit 3.1.2 released:
                          – Added Filter ID for the packets redirected by built-in filters
                          – Updated C# samples

                          If you are eligible for a free update, please send the following details to support@ntkernel.com tо receive an update instruction:

                          1) Your order ID.
                          2) An approximate date of purchasing.

                          in reply to: Identification of WAN Interfaces #7123
                          Vadim Smirnov
                          Keymaster

                            Internet Gateway code simply treats all adapters with media different from NdisMedium802_3 as WAN. This is not correct of course, but works for most cases and good enough for the sample. I think your intrface reports media different from 802.3 and this causes described misbehave. NDIS_MEDIUM is defined as following:

                            typedef enum _NDIS_MEDIUM
                            {
                            NdisMedium802_3,
                            NdisMedium802_5,
                            NdisMediumFddi,
                            NdisMediumWan,
                            NdisMediumLocalTalk,
                            NdisMediumDix, // defined for convenience, not a real medium
                            NdisMediumArcnetRaw,
                            NdisMediumArcnet878_2,
                            NdisMediumAtm,
                            NdisMediumWirelessWan,
                            NdisMediumIrda,
                            NdisMediumBpc,
                            NdisMediumCoWan,
                            NdisMedium1394,
                            NdisMediumInfiniBand,
                            #if ((NTDDI_VERSION >= NTDDI_VISTA) || NDIS_SUPPORT_NDIS6)
                            NdisMediumTunnel,
                            NdisMediumNative802_11,
                            NdisMediumLoopback,
                            #endif // (NTDDI_VERSION >= NTDDI_VISTA)

                            #if (NTDDI_VERSION >= NTDDI_WIN7)
                            NdisMediumWiMAX,
                            NdisMediumIP,
                            #endif

                            There are too many things to improve in this sample to build a real NAT aplication suitable for different environments and it would take plenty of time to build a desired list. You’d better look at some solutions alreaddy available on market to see what features can be implemented.

                            in reply to: Identification of WAN Interfaces #7121
                            Vadim Smirnov
                            Keymaster

                              Thank you for reporting this, but the more detailed network configuration would be appreciated. Like what network adapters do you have, what type and which of them are connected (ipconfig output?). And how Internet Gateway identifies these ones (may be screenshot?).

                              Although, I have to note that Internet Gateway is just a sample coded in a day to demonstrate usage of WinpkFilter driver for NAT solutions. And of course it does not pretend to be a well tested end user application.

                              in reply to: Why NdisrdMP on Windows 7? #7120
                              Vadim Smirnov
                              Keymaster

                                Ndisrdmp is a miniport part of WinpkFilter NDIS IM driver. However, if you use one of the latest versions (starting 3.0.8) of WinpkFilter then it is supposed to install NDIS LWF driver on Windows Vista and later which does not have that part. Probably the WinpkFilter version you use is out-of-date.

                                in reply to: Ip fragmentation and reassembly with winpkfilter #7119
                                Vadim Smirnov
                                Keymaster

                                  Yes, you can fragment the resulted packet and send out two packets instead one, server will reassemble it. However, please note that fragmented packets often are blocked by firewalls.

                                Viewing 15 posts - 661 through 675 (of 1,490 total)