Query on Windows Filtering Platform

Question

Dear All,

I am using the Windows Filtering Platform API,to block some URL,

I wanted to know is there any way to block all url and give exception to only few url.

Please help me in this regard,

give me ur thoughts on this

with regards Vinayaka Karjigi

Answer 1

Hi Vinayaka, It is possible to do this.

1. Create a filter that blocks out all URLs Have 1 filter block out all requests (0 Conditions set to BLOCK)

2. Allow specific URLs Add filters to allow the specific urls you want to let pass.
   Assign the proper filter weights so that filter arbitration reads the ALLOW.

The filter condition you will have to use is based off the IP Address for the

FWPM_CONDITION_IP_REMOTE_ADDRESS

condition. You can do a getaddrinfo() call to resolve the url to an address.

It's probably most efficient to be working at the ALE layer:

FWPM_LAYER_ALE_AUTH_CONNECT

.