WFP Changes for Windows Vista SP1 and Windows Server 2008

Several changes have been made in the available functions and behavior of the Windows Filtering Platform that begin with Windows Vista with Service Pack 1 (SP1) and Windows Server 2008. Frequently, to take advantage of the new features, you must compile or recompile a callout driver that has the NTDDI_VERSION macro set to NTDDI_WIN6SP1.

• New functions: FwpsConstructIpHeaderForTransportPacket0 FwpsReassembleForwardFragmentGroup0

• New FWPS_STREAM_FLAG_RECEIVE_PUSH flag option that is described in FwpsStreamInjectAsync0

• Updated and renamed filtering conditions, listed in Filtering Conditions Available at Each Filtering Layer

• Updated and renamed data field identifiers that were added to FWPS_LAYER_ALE_AUTH_RECV_ACCEPT_XXX and FWPS_LAYER_INBOUND_ICMP_ERROR_XXX layers, listed in Data Field Identifiers, together with behavior changes

• Additional metadata field identifiers, listed in Metadata Fields and Metadata Fields at Each Filtering Layer

• The following documentation topics are new:

  • Developing IPsec-Compatible Callout Drivers
  • Processing Classify Callouts Asynchronously

• The following topics contain additional updates: Processing Notify Callouts Stream Inspection FwpsFlowAssociateContext0 FwpsFlowRemoveContext0 classifyFn notifyFn FWPS_CALLOUT0 FWPS_INCOMING_METADATA_VALUES0