Building your own firewall....

[shlomok]

    So...P1. Does that mean we can talk about it? Show me...pls.

Be more specific, high level design goals?

Meanwhile see "Preventing the Execution of Unauthorized Win32 Applications": www.cigital.com/papers/download/discex2.doc

If you need help with drivers I am here :)
 

[P1]

So...P1. Does that mean we can talk about it? Show me...pls.

Personally, you can detour any exe file execution with a loader, for control execution on a single file.

I have adjusted many firewall rules, to let a file access the outside TCPIP world.  It is interesting they NEVER needed to touch the file itself to operate.  It's accept or deny the connection direction in the firewall.

So the question of the moment is, What makes interrupting the OS FILE APIs level so important to your programming task ???

Regards,  P1 

[xandaz]

    Thanks guys. You've been very helpful.
     Laterz