IFWXConnection interface

Applies to: desktop apps only

The IFWXConnection interface represents a particular connection and provides methods that are specific to it.

For more information about how the IFWXConnection interface is used in application filters, see Filter Object Model.

Members

The IFWXConnection interface inherits from the IUnknown interface. IFWXConnection also has these types of members:

Methods

The IFWXConnection interface has these methods.

MethodDescription
AttachDataFilter

Attaches a data filter to the connection.

AttachDataFilterWithDestination

Attaches a data filter to the connection. The data filter is associated with a remote UDP destination.

Deny

Denies the current operation on the connection object.

EmulateConnection

Creates a connection to a client for a filter-emulated listening (inbound) connection.

EmulateForBind

Emulates a bind for an incoming request.

EmulateForConnect

Emulates a connection for an outbound request. In the outbound scenario, a data filter emulates the external connection for an internal client.

GetConnectionFlags

Retrieves the flags that are set for the connection.

GetExternalPeerName

Gets the peer name for the external socket. This method is implemented by calling the Windows Sockets (Winsock)getpeername function on the actual external socket.

GetExternalSocketName

Gets the socket name for the external socket. This method is implemented by calling the Winsock getsockname function on the actual external socket.

GetIpFilter

Gets a copy of the IP filter object for the connection.

GetSession

Returns the session object to which a connection belongs.

IncrementBytesSentCounter

Updates the counter with how many bytes have been sent over an emulated connection.

Kill

Forces the connection to terminate.

SetBufferSize

Sets the buffer size for a connection.

SetClientAddress

Gives the client address for a connection returned by the IFWXSession::BindForClient method, for which the client address was not previously specified.

SetIpFilter

Sets the IP filter for the connection. Either sets a new IP filter if there had not been one or replaces the current IP filter with a new one.

SetSocketName

sets the name of the socket for the connection. Call this method only if the caller is emulating the connection.

 

Remarks

The connection object represented by the IFWXConnection interface implements functions specific to a particular connection. Every remote socket created on behalf of a client has a connection object associated with it.

When a registered event occurs, the Microsoft Firewall service will call IFWXSessionFilter::FirewallEventHandler and will pass the FirewallEvent parameter to it. Included in the FirewallEvent parameter is a pointer to the IFWXConnection.

After the pointer is available, you can use the IFWXConnection methods, such as IFWXConnection::AttachDataFilter.

The IFWXConnection methods are understood most easily in the context of connection scenarios:

Scenario A: Bind and Connect

  1. The client requests a bind or connection.
  2. The Firewall service creates a connection object.
  3. The Firewall service checks access rights.
  4. The Firewall service provides an event notification to the application filters, so that the filters can then work with the connection object and use:

Scenario B: Bind and Listen

  1. The client requests a bind.
  2. The filter calls IFWXSession::BindForClient.
  3. The Firewall service creates a connection object.
  4. The Firewall service provides an event notification to the application filter, so that the filter can then work with the connection object.

When a listening socket exists, and an event of type fwx_AcceptedConnection occurs, an accepted socket is created on the Firewall service. The connection object for the accepted socket exists before the matching client socket is created.

Note  A single TCP connection between a listening socket on the Firewall service and an external server may result in the creation of two ss: a listening connection on the Firewall service, and an inbound connection. When the remote server disconnects, the inbound connection is closed, but the listening connection may not close if FWX_FLAG_ALLOW_MULTIPLE was specified.

Requirements

Minimum supported client

None supported

Minimum supported server

Windows Server 2008 R2, Windows Server 2008 with SP2 (64-bit only)

Version

Forefront Threat Management Gateway (TMG) 2010

Header

Wspfwext.idl

See also

Filter Interfaces

 

 

Build date: 7/12/2010

Community Additions

ADD
Show: