Reputation: 23
I'm developing a windows Firewall as my Final Year Project. For this I want to block port for processes in c++. Which API should be used to do this, or if there's any KERNEL MODE API which can be overridden like PsSetCreateNrocessNotifyRoutine
?
Upvotes: 2
Views: 1408
Reputation: 8393
For Windows Vista and later, you should be using the Windows Filtering Platform, which is accessible from both user-mode and kernel-mode. See this article for an example.
Upvotes: 2