WFP Callout Driver Filtering Condition Data Types (Compact 2013)
3/26/2014
The data type for the condition value for each filtering condition is specified as an FWP_DATA_TYPE value. These data types are defined in the following table:
Filtering Condition Identifier |
Condition Value Data Type |
|---|---|
FWPM_CONDITION_IP_LOCAL_ADDRESS |
For an IPv4 address: |
FWPM_CONDITION_IP_REMOTE_ADDRESS |
For an IPv4 address: |
FWPM_CONDITION_IP_SOURCE_ADDRESS |
For an IPv4 address: |
FWPM_CONDITION_IP_DESTINATION_ADDRESS |
For an IPv4 address: |
FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE |
FWP_UINT8 |
FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE |
FWP_UINT8 |
FWPM_CONDITION_IP_LOCAL_INTERFACE |
FWP_UINT64 |
FWPM_CONDITION_IP_FORWARD_INTERFACE |
FWP_UINT64 |
FWPM_CONDITION_IP_PROTOCOL |
FWP_UINT8 |
FWPM_CONDITION_IP_LOCAL_PORT |
FWP_UINT16 |
FWPM_CONDITION_IP_REMOTE_PORT |
FWP_UINT16 |
FWPM_CONDITION_ICMP_TYPE |
FWP_UINT16 |
FWPM_CONDITION_ICMP_CODE |
FWP_UINT16 |
FWPM_CONDITION_EMBEDDED_LOCAL_ADDRESS_TYPE |
FWP_UINT8 |
FWPM_CONDITION_EMBEDDED_REMOTE_ADDRESS |
For an IPv4 address: |
FWPM_CONDITION_EMBEDDED_PROTOCOL |
FWP_UINT8 |
FWPM_CONDITION_EMBEDDED_LOCAL_PORT |
FWP_UINT16 |
FWPM_CONDITION_EMBEDDED_REMOTE_PORT |
FWP_UINT16 |
FWPM_CONDITION_FLAGS |
FWP_UINT32 |
FWPM_CONDITION_DIRECTION |
FWP_UINT32 |
FWPM_CONDITION_INTERFACE_INDEX |
FWP_UINT32 |
FWPM_CONDITION_SUB_INTERFACE_INDEX |
FWP_UINT32 |
FWPM_CONDITION_SOURCE_INTERFACE_INDEX |
FWP_UINT32 |
FWPM_CONDITION_SOURCE_SUB_INTERFACE_INDEX |
FWP_UINT32 |
FWPM_CONDITION_DESTINATION_INTERFACE_INDEX |
FWP_UINT32 |
FWPM_CONDITION_DESTINATION_SUB_INTERFACE_INDEX |
FWP_UINT32 |
FWPM_CONDITION_ALE_APP_ID |
FWP_BYTE_BLOB_TYPE |
FWPM_CONDITION_ALE_USER_ID |
FWP_SECURITY_DESCRIPTOR_TYPE |
FWPM_CONDITION_ALE_REMOTE_USER_ID |
FWP_SECURITY_DESCRIPTOR_TYPE |
FWPM_CONDITION_ALE_REMOTE_MACHINE_ID |
FWP_SECURITY_DESCRIPTOR_TYPE |
FWPM_CONDITION_ALE_PROMISCUOUS_MODE |
FWP_UINT8 |
FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT |
FWP_UINT32 |
FWPM_CONDITION_ALE_NAP_CONTEXT |
FWP_UINT32 |
FWPM_CONDITION_REMOTE_USER_TOKEN |
FWP_SECURITY_DESCRIPTOR_TYPE |
FWPM_CONDITION_RPC_IF_UUID |
FWP_BYTE_ARRAY16_TYPE |
FWPM_CONDITION_RPC_IF_VERSION |
FWP_UINT16 |
FWPM_CONDITION_RPC_IF_FLAG |
FWP_UINT32 |
FWPM_CONDITION_DCOM_APP_ID |
FWP_BYTE_ARRAY16_TYPE |
FWPM_CONDITION_IMAGE_NAME |
FWP_BYTE_BLOB_TYPE |
FWPM_CONDITION_RPC_PROTOCOL |
FWP_UINT8 |
FWPM_CONDITION_RPC_AUTH_TYPE |
FWP_UINT8 |
FWPM_CONDITION_RPC_AUTH_LEVEL |
FWP_UINT8 |
FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM |
FWP_UINT32 |
FWPM_CONDITION_SEC_KEY_SIZE |
FWP_UINT32 |
FWPM_CONDITION_IP_LOCAL_ADDRESS_V4 |
FWP_V4_ADDR_MASK or FWP_UINT32 |
FWPM_CONDITION_IP_LOCAL_ADDRESS_V6 |
FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE |
FWPM_CONDITION_PIPE |
FWP_BYTE_BLOB_TYPE |
FWPM_CONDITION_IP_REMOTE_ADDRESS_V4 |
FWP_V4_ADDR_MASK or FWP_UINT32 |
FWPM_CONDITION_IP_REMOTE_ADDRESS_V6 |
FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE |
FWPM_CONDITION_PROCESS_WITH_RPC_IF_UUID |
FWP_BYTE_ARRAY16_TYPE |
FWPM_CONDITION_RPC_EP_VALUE |
FWP_BYTE_BLOB_TYPE |
FWPM_CONDITION_RPC_EP_FLAGS |
FWP_UINT32 |
FWPM_CONDITION_CLIENT_TOKEN |
FWP_SECURITY_DESCRIPTOR_TYPE |
FWPM_CONDITION_RPC_SERVER_NAME |
FWP_BYTE_BLOB_TYPE |
FWPM_CONDITION_RPC_SERVER_PORT |
FWP_UINT16 |
FWPM_CONDITION_RPC_PROXY_AUTH_TYPE |
FWP_BYTE_BLOB_TYPE |
FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH |
FWP_UINT32 |
FWPM_CONDITION_CLIENT_CERT_OID |
FWP_BYTE_BLOB_TYPE |
See Also
Reference
WFP Callout Driver Filtering Conditions
WFP Callout Driver Filtering Condition Identifiers
WFP Callout Driver Filtering Conditions Available at Each Filtering Layer
WFP Callout Driver Constants