[ 1] Simple NDIS Hooking Based Firewall for NT4/2000
http://ntdev.h1.ru/ndis_fw.html
http://ntdev.h1.ru/ndis_fw.zip
[ 2] Simple TDI-Based Open Source Personal Firewall for Windows NT4/2000/XP/2003
http://sourceforge.net/projects/tdifw
http://optusnet.dl.sourceforge.n ... ifw/tdifw-1.3.2.zip
[ 3] http://dream.net9.org/~driver/restrict/PCAUSA/pcausa.zip(非最新版)
[ 4] Firewall for Windows 9x/ME/NT/2000/XP - Vadim V.Smirnov
http://www.ntkernel.com/articles/firewalleng.shtml
[ 5] How to implement a Firewall-Hook Driver(cool and undocumented)
http://www.codeproject.com/internet/FwHookDrv.asp
http://www.codeproject.com/internet/FwHookDrv/FwHookDrv_src.zip
[ 6] Windows Network Data And Packet Filtering Frequently Asked Questions(这里有一张Network Architecture Diagram)
http://www.pcausa.com/resources/winpktfilter.htm
[ 7] Network Architecture in Windows NT-based Operating Systems
http://plasmic.com/~vizzini/ntnetarch.html
[ 8] Ntpacket.exe: Updated Windows NT 4.0 NDIS 3.0 Packet Sample Available
http://support.microsoft.com/default.aspx?scid=kb;EN-US;238652
ftp://ftp.microsoft.com/Softlib/MSLFILES/Ntpacket.exe
Bugs in the NT DDK Packet Protocol Driver Sample
http://www.panix.com/~perin/packetbugs.html
[ 9] EthernetSpy
http://telemat.det.unifi.it/book/EthernetSpy/EthernetSpy.zip
[10] BriProto NDIS Protocol Driver Project Files
http://adaptive4.ucsd.edu/projec ... 2003.08.01.1218.zip
http://adaptive4.ucsd.edu/projects/briproto_driver/doc/
[11] A RARP Server(source code)
http://www.panix.com/~perin/rarpd.zip
[12] NDIS "Packet" Discussion(介绍了NDIS_PACKET、NDIS_BUFFER)
http://www.pcausa.com/resources/ndispacket.htm
http://www.pcausa.com/resources/ndispacket_decode.htm
http://www.pcausa.com/resources/readonpacket.htm
NDIS_PACKET Discussion Part 2 - NDIS_PACKET Reserved Areas
http://www.ndis.com/papers/ndispacket/ndispacket2.htm
[13] Workaround To Circumvent ProtocolReceive Faults Caused By Some Faulty NDIS Miniport Drivers
http://www.pcausa.com/support/KB03080201.htm
[14] Conditions Needed For ReceivePacketHandler To Be Called
http://www.pcausa.com/support/KB07130001.htm
[15] http://www.rhyshaden.com/ethernet.htm(介绍了802.1p的帧格式)
[16] NDIS Driver Compile Flags - Stephan Wolf[2004-03-15]
http://www.wd-3.com/031504/NDISCompile.htm
[17] KNOWLEDGE BASE LINKS STOP MESSAGES(理解BSOD)
http://aumha.org/win5/kbestop.htm
[18] Stop 0x0000000A or IRQL_NOT_LESS_OR_EQUAL(介绍了Stop Message的四个参数)
http://www.microsoft.com/resourc ... s/prmd_stp_hwpg.asp
[19] Kernel Driver Frequestly Asked Questions (FAQ)
http://www.osronline.com/custom. ... rint.cfm&id=256
[20] INFO: Network Binding Analysis
http://support.microsoft.com/default.aspx?scid=kb;en-us;192483
[21] Windows 2000 Filter-Hook Driver example
http://ntdev.h1.ru/ipfilter.html
http://ntdev.h1.ru/ipfilter_src.html
[22] 用VC开发Win2000/XP下的防火墙
http://computer.sz.net.cn/2004-05-17/nw2004051700070.shtml
http://computer.sz.net.cn/2004-05-17/nw2004051700071.shtml
http://computer.sz.net.cn/2004-05-17/nw2004051700072.shtml
http://dl2.mydown.com/code/more/DrvFltIp_FirewallFHK.rar
[23] Simple Packet Filtering Firewall - Deepthi Reddy, Ramya Balakumar, Vandana Bhardwaj
http://www.csc.villanova.edu/~vbhardwa/netclass/firewall.ppt
http://www.sju.edu/~vb189802/computerNet/fire.zip(source code)
Simple packet Filter Firewall
http://www.csc.villanova.edu/~vbhardwa/netclass/Firewall.htm
[24] Developing Firewalls for Windows 2000/XP
http://www.codeproject.com/internet/drvfltip.asp
http://www.codeproject.com/internet/drvfltip/FirewallFHK_src.zip
http://www.codeproject.com/internet/drvfltip/DrvFltIp_source.zip
[25] Simple Packet - Filter Firewall
http://www.codeproject.com/internet/smfirewall.asp
http://www.codeproject.com/internet/smfirewall/fire.zip
[26] Hollis Technology Solutions IpHook Version 1 Release
http://www.hollistech.com/Resources/IpHook/Release%20Notes.htm
http://www.hollistech.com/Resources/IpHook/IpHook.msi(source code)
[27] An Easy Firewall Application - [2003-10-06]
http://www.codeproject.com/tools/firewallpapi.asp
http://www.codeproject.com/tools/firewallpapi/firewallpapisrc.zip
http://www.codeproject.com/tools/firewallpapi/firewallpapi.zip
[28] NetCenturion is a TCP/IP packet filter for Windows 2000 and XP
http://www.softsystem.co.uk/page5.html
http://www.softsystem.co.uk/NetCenturion1204.zip
http://www.softsystem.co.uk/NetCenturion1204src.zip
[29] Extending The Microsoft PassThru NDIS Intermediate Driver - Thomas F. Divine <wd-3.tdivine@pcausa.com> [2003-07-15]
Part 1 Adding a DeviceIoControl Interface
http://www.wd-3.com/archive/ExtendingPassthru.htm
http://www.wd-3.com/downloads/ExtendingPassthru.zip
Extending The Microsoft PassThru NDIS Intermediate Driver - James Antognini <antognini@mindspring.com> Thomas F. Divine <wd-3.tdivine@pcausa.com> [2003-12-15]
Part 2 Two IP Address Blocking NDIS IM Drivers
http://www.wd-3.com/archive/ExtendingPassthru2.htm
http://www.wd-3.com/downloads/PassThru2.zip
[30] NDIS Driver Debugging Guidelines - [2003-05-05]
http://www.microsoft.com/taiwan/ ... NDIS/ndisdebug.mspx
http://download.microsoft.com/do ... /ndisWinHec2003.doc
(用kd调试)
Debugging NDIS Drivers
http://msdn.microsoft.com/librar ... .xml.asp?frame=true
NDIS Debug Tracing and Kernel Debugger Extensions - [2003-11-20]
http://support.microsoft.com/kb/q248413/
How to enable NDIS debug tracing - [2005-08-09]
http://support.microsoft.com/kb/q164459/
如何启用和使用NDIS验证程序 - [2005-12-23]
http://support.microsoft.com/kb/q266403/
[31] Porting Miniport Drivers to NDIS 6.0 - [2005-04-19]
http://www.microsoft.com/taiwan/ ... S/NDIS6drvport.mspx
http://download.microsoft.com/do ... e6/NDIS6drvport.doc
[32] 基于PassThru的NDIS中间层驱动程序扩展 - Addylee <Addylee2004@163.com> [2006-05-02]
http://www.xfocus.net/articles/200605/865.html
[33] PCAUSA Discussion List
http://groups.yahoo.com/group/discussion-pcausa/
[34] Controlling Stacking Order of NDIS 5.0 Intermediate Drivers - [2003-12-17]
http://support.microsoft.com/kb/250615
[35] NAT在NDIS中间层驱动中的实现 - thinking <thinkingfh@163.com> [2006-06-17]
http://www.xfocus.net/articles/200606/870.html
[36] Raw Ethernet Packet Sending - miahrugger [2003-10-25]
http://www.codeproject.com/cs/internet/sendrawpacket.asp
http://www.codeproject.com/cs/in ... t/SendRawPacket.zip
(用到了NDIS Protocol Driver)
http://ntdev.h1.ru/ndis_fw.html
http://ntdev.h1.ru/ndis_fw.zip
[ 2] Simple TDI-Based Open Source Personal Firewall for Windows NT4/2000/XP/2003
http://sourceforge.net/projects/tdifw
http://optusnet.dl.sourceforge.n ... ifw/tdifw-1.3.2.zip
[ 3] http://dream.net9.org/~driver/restrict/PCAUSA/pcausa.zip(非最新版)
[ 4] Firewall for Windows 9x/ME/NT/2000/XP - Vadim V.Smirnov
http://www.ntkernel.com/articles/firewalleng.shtml
[ 5] How to implement a Firewall-Hook Driver(cool and undocumented)
http://www.codeproject.com/internet/FwHookDrv.asp
http://www.codeproject.com/internet/FwHookDrv/FwHookDrv_src.zip
[ 6] Windows Network Data And Packet Filtering Frequently Asked Questions(这里有一张Network Architecture Diagram)
http://www.pcausa.com/resources/winpktfilter.htm
[ 7] Network Architecture in Windows NT-based Operating Systems
http://plasmic.com/~vizzini/ntnetarch.html
[ 8] Ntpacket.exe: Updated Windows NT 4.0 NDIS 3.0 Packet Sample Available
http://support.microsoft.com/default.aspx?scid=kb;EN-US;238652
ftp://ftp.microsoft.com/Softlib/MSLFILES/Ntpacket.exe
Bugs in the NT DDK Packet Protocol Driver Sample
http://www.panix.com/~perin/packetbugs.html
[ 9] EthernetSpy
http://telemat.det.unifi.it/book/EthernetSpy/EthernetSpy.zip
[10] BriProto NDIS Protocol Driver Project Files
http://adaptive4.ucsd.edu/projec ... 2003.08.01.1218.zip
http://adaptive4.ucsd.edu/projects/briproto_driver/doc/
[11] A RARP Server(source code)
http://www.panix.com/~perin/rarpd.zip
[12] NDIS "Packet" Discussion(介绍了NDIS_PACKET、NDIS_BUFFER)
http://www.pcausa.com/resources/ndispacket.htm
http://www.pcausa.com/resources/ndispacket_decode.htm
http://www.pcausa.com/resources/readonpacket.htm
NDIS_PACKET Discussion Part 2 - NDIS_PACKET Reserved Areas
http://www.ndis.com/papers/ndispacket/ndispacket2.htm
[13] Workaround To Circumvent ProtocolReceive Faults Caused By Some Faulty NDIS Miniport Drivers
http://www.pcausa.com/support/KB03080201.htm
[14] Conditions Needed For ReceivePacketHandler To Be Called
http://www.pcausa.com/support/KB07130001.htm
[15] http://www.rhyshaden.com/ethernet.htm(介绍了802.1p的帧格式)
[16] NDIS Driver Compile Flags - Stephan Wolf[2004-03-15]
http://www.wd-3.com/031504/NDISCompile.htm
[17] KNOWLEDGE BASE LINKS STOP MESSAGES(理解BSOD)
http://aumha.org/win5/kbestop.htm
[18] Stop 0x0000000A or IRQL_NOT_LESS_OR_EQUAL(介绍了Stop Message的四个参数)
http://www.microsoft.com/resourc ... s/prmd_stp_hwpg.asp
[19] Kernel Driver Frequestly Asked Questions (FAQ)
http://www.osronline.com/custom. ... rint.cfm&id=256
[20] INFO: Network Binding Analysis
http://support.microsoft.com/default.aspx?scid=kb;en-us;192483
[21] Windows 2000 Filter-Hook Driver example
http://ntdev.h1.ru/ipfilter.html
http://ntdev.h1.ru/ipfilter_src.html
[22] 用VC开发Win2000/XP下的防火墙
http://computer.sz.net.cn/2004-05-17/nw2004051700070.shtml
http://computer.sz.net.cn/2004-05-17/nw2004051700071.shtml
http://computer.sz.net.cn/2004-05-17/nw2004051700072.shtml
http://dl2.mydown.com/code/more/DrvFltIp_FirewallFHK.rar
[23] Simple Packet Filtering Firewall - Deepthi Reddy, Ramya Balakumar, Vandana Bhardwaj
http://www.csc.villanova.edu/~vbhardwa/netclass/firewall.ppt
http://www.sju.edu/~vb189802/computerNet/fire.zip(source code)
Simple packet Filter Firewall
http://www.csc.villanova.edu/~vbhardwa/netclass/Firewall.htm
[24] Developing Firewalls for Windows 2000/XP
http://www.codeproject.com/internet/drvfltip.asp
http://www.codeproject.com/internet/drvfltip/FirewallFHK_src.zip
http://www.codeproject.com/internet/drvfltip/DrvFltIp_source.zip
[25] Simple Packet - Filter Firewall
http://www.codeproject.com/internet/smfirewall.asp
http://www.codeproject.com/internet/smfirewall/fire.zip
[26] Hollis Technology Solutions IpHook Version 1 Release
http://www.hollistech.com/Resources/IpHook/Release%20Notes.htm
http://www.hollistech.com/Resources/IpHook/IpHook.msi(source code)
[27] An Easy Firewall Application - [2003-10-06]
http://www.codeproject.com/tools/firewallpapi.asp
http://www.codeproject.com/tools/firewallpapi/firewallpapisrc.zip
http://www.codeproject.com/tools/firewallpapi/firewallpapi.zip
[28] NetCenturion is a TCP/IP packet filter for Windows 2000 and XP
http://www.softsystem.co.uk/page5.html
http://www.softsystem.co.uk/NetCenturion1204.zip
http://www.softsystem.co.uk/NetCenturion1204src.zip
[29] Extending The Microsoft PassThru NDIS Intermediate Driver - Thomas F. Divine <wd-3.tdivine@pcausa.com> [2003-07-15]
Part 1 Adding a DeviceIoControl Interface
http://www.wd-3.com/archive/ExtendingPassthru.htm
http://www.wd-3.com/downloads/ExtendingPassthru.zip
Extending The Microsoft PassThru NDIS Intermediate Driver - James Antognini <antognini@mindspring.com> Thomas F. Divine <wd-3.tdivine@pcausa.com> [2003-12-15]
Part 2 Two IP Address Blocking NDIS IM Drivers
http://www.wd-3.com/archive/ExtendingPassthru2.htm
http://www.wd-3.com/downloads/PassThru2.zip
[30] NDIS Driver Debugging Guidelines - [2003-05-05]
http://www.microsoft.com/taiwan/ ... NDIS/ndisdebug.mspx
http://download.microsoft.com/do ... /ndisWinHec2003.doc
(用kd调试)
Debugging NDIS Drivers
http://msdn.microsoft.com/librar ... .xml.asp?frame=true
NDIS Debug Tracing and Kernel Debugger Extensions - [2003-11-20]
http://support.microsoft.com/kb/q248413/
How to enable NDIS debug tracing - [2005-08-09]
http://support.microsoft.com/kb/q164459/
如何启用和使用NDIS验证程序 - [2005-12-23]
http://support.microsoft.com/kb/q266403/
[31] Porting Miniport Drivers to NDIS 6.0 - [2005-04-19]
http://www.microsoft.com/taiwan/ ... S/NDIS6drvport.mspx
http://download.microsoft.com/do ... e6/NDIS6drvport.doc
[32] 基于PassThru的NDIS中间层驱动程序扩展 - Addylee <Addylee2004@163.com> [2006-05-02]
http://www.xfocus.net/articles/200605/865.html
[33] PCAUSA Discussion List
http://groups.yahoo.com/group/discussion-pcausa/
[34] Controlling Stacking Order of NDIS 5.0 Intermediate Drivers - [2003-12-17]
http://support.microsoft.com/kb/250615
[35] NAT在NDIS中间层驱动中的实现 - thinking <thinkingfh@163.com> [2006-06-17]
http://www.xfocus.net/articles/200606/870.html
[36] Raw Ethernet Packet Sending - miahrugger [2003-10-25]
http://www.codeproject.com/cs/internet/sendrawpacket.asp
http://www.codeproject.com/cs/in ... t/SendRawPacket.zip
(用到了NDIS Protocol Driver)