News:

MASM32 SDK Description, downloads and other helpful links
MASM32.com New Forum Link
masmforum WebSite

Building your own firewall....

Started by xandaz, April 29, 2012, 10:08:07 PM

Previous topic - Next topic

shlomok

Quote from: xandaz on May 06, 2012, 01:11:15 PM
    So...P1. Does that mean we can talk about it? Show me...pls.

Be more specific, high level design goals?

Meanwhile see "Preventing the Execution of Unauthorized Win32 Applications": www.cigital.com/papers/download/discex2.doc

If you need help with drivers I am here :)
 

P1

Quote from: xandaz on May 06, 2012, 01:11:15 PMSo...P1. Does that mean we can talk about it? Show me...pls.
Personally, you can detour any exe file execution with a loader, for control execution on a single file.

I have adjusted many firewall rules, to let a file access the outside TCPIP world.  It is interesting they NEVER needed to touch the file itself to operate.  It's accept or deny the connection direction in the firewall.

So the question of the moment is, What makes interrupting the OS FILE APIs level so important to your programming task ???

Regards,  P1  :8)


xandaz

    Thanks guys. You've been very helpful.
     Laterz