How do the TCP/IP Stack and a Packet Filter work together?

G

Guest

I've got the CHX-I Packet Filter installed on my Windows 2000
machine. One of the things that it lets you configure is enabling SYN
flood protection when a certain number of half-open connections is
reached.

I've also noticed that the Windows TCP/IP stack can protect against
SYN floods (see http://support.microsoft.com/kb/315669), and I'm
wondering how things will work if there are 2 different things on my
system that protect against SYN attacks (the TCP/IP stack and the CHX-
I packet filter).

I've discovered that CHX-I uses an NDIS intermediate driver, although
I don't exactly know what that means.

So what happens with incoming packets? Will CHX-I intercept all of
them without letting the TCP/IP stack handle them at all? Or will the
TCP/IP stack process them first, before handing them off to CHX-I?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Raw Socket Send TCP SYN packet 2
TCP/IP stack in WIN XP/Pro 2
network problem with vista 1
How to handle TCP checksum, if adapter support TCP checksum offloading? 0
how to modify the contents of a TCP/IP packet before it is delivered? Can this be done with ip helpe 3
Corrupted TCP/IP and Winsock, Is the only solution...... 3
Fix WinXP TCP\IP stack? 2
C# and TCP/IP sockets 1

Top