Share via


IP Firewall OS Design Development (Windows Embedded CE 6.0)

1/6/2010

The IP firewall is typically used on an Internet gateway device. It can also be used as a host firewall. The firewall helps protect the device on which it runs and helps to protect devices on the private side of the gateway. The firewall blocks IP traffic at the IP and transport layers.

This firewall uses rules to determine whether to block, allow, or log inbound or outbound traffic. Inbound traffic originates from a host on the public side of the firewall. Outbound traffic originates from either a host on the private side or the device that is running the firewall. For more information about the IP Firewall, see IP Firewall Application Development.

OS Design Information

The following table shows operating system design information for the IP Firewall.

Element Information

Dependencies

TCP/IP, IP Helper API, Winsock, FormatMessage API, and Full C Runtime

Hardware considerations

None

Modules and Components

The following table shows the components and modules that implement the IP Firewall.

Item Module Component

IP Firewall configuration API

fwapi

None

IP firewall driver

fw6

None

IP Firewall Implementation Considerations

You can include the Firewall Catalog item in your OS design. Choosing this Catalog item sets the appropriate Sysgen variable for enabling the IP Firewall.

The following table shows the Sysgen variable that enables the IP Firewall.

Sysgen variable Description

SYSGEN_FIREWALL

When this variable is set, the IP Firewall is included in the run-time image. The firewall blocks IP traffic at the IP and transport layers.

Application Development Topics

IP Firewall Application Development

Best Practices for the IP Firewall

Default IP Firewall Rules

Firewall Rule Examples

See Also

Reference

IP Firewall Reference
IP Firewall Logging Reference

Concepts

IP Firewall Registry Settings

Other Resources

Firewall