Partager via

FWPS_ACTION0 (Compact 2013)

  • Article

3/26/2014

This structure specifies the run-time action that the WFP Filter Engine should take if all filtering conditions are true.

Syntax

typedef struct FWPS_ACTION0_ {
  FWP_ACTION_TYPE  type;
  UINT32  calloutId;
} FWPS_ACTION0;

Members

  • type
    An FWP_ACTION_TYPE value that represents the action that the filter engine should take if all filtering conditions are true. For a filter that is passed to a callout's notifyFn or classifyFn callout function, this member is one of the following values:

    • FWP_ACTION_CALLOUT_TERMINATING: Specifies that the callout's classifyFn callout function must return one of the following values for the action to be taken on the data:
    • FWP_ACTION_BLOCK: Block the data from being transmitted or received
    • FWP_ACTION_PERMIT: Permit the data to be transmitted or received
    • If the callout's classifyFn callout function returns any other value for the action to be taken on the data, it is handled as if the callout's classifyFn callout function returned FWP_ACTION_BLOCK.
    • FWP_ACTION_CALLOUT_INSPECTION: Specifies that the callout's classifyFn callout function must return the following value for the action to be taken on the data:
    • FWP_ACTION_CONTINUE: Move to the next filter.
    • If the callout's classifyFn callout function returns any other value for the action to be taken on the data, it is handled as if the callout's classifyFn callout function returned FWP_ACTION_CONTINUE.
    • FWP_ACTION_CALLOUT_UNKNOWN: Specifies that the callout's classifyFn callout function can return any of the following values for the action to be taken on the data:
      • FWP_ACTION_BLOCK: block the data from being transmitted or received
      • FWP_ACTION_PERMIT : enable the data to be transmitted or received
      • FWP_ACTION_CONTINUE : move on to the next filter
  • calloutId
    The run-time identifier for the callout that the filter engine calls if all filtering conditions are true. This is the same identifier that was returned when the callout driver called the FwpsCalloutRegister0 function to register the callout with the filter engine.

Remarks

An FWPS_ACTION0 structure is contained inside an FWPS_FILTER0 structure.

Requirements

Header

fwpsk.h

See Also

Reference

WFP Callout Driver Structures
classifyFn
notifyFn
FWPS_FILTER0
FwpsCalloutRegister0
WFP Callout Driver Reference