本地源和本地目标数据包的行为 [英] Behaviour of local source and local destination packets

问题描述

您好，

我对同一台计算机上存在本地源和本地目标地址的数据包有疑问。例如，假设一台机器具有IP地址A，并且该机器的ping被发送到A.

I have a question regarding packets with local source and local destination address being present on the same machine. For example, let us say a machine has IP address A and a ping, from that machine, is sent to A.

在上述情况下，FWPM_LAYER_INBOUND_IPPACKET_V4的标注接收到该数据包（提供过滤器允许这样的数据包，但让我们假设没有过滤器）。是否应该通过callout
驱动程序对此特定数据包进行任何特殊处理？在这种情况下，标注驱动程序不会修改此特定数据包;它应该像从网络收到的任何其他数据包一样重新注入它吗？

In the above case, a callout at FWPM_LAYER_INBOUND_IPPACKET_V4 receives the packet (provided the filter allows for such packets, but let us assume that there are no filters). Should there by any special processing for this particular packet by the callout driver? In this case, the callout driver is not to modify this particular packet; should it re-inject it as any other packet received from the network?

推荐答案

如果没有过滤器，那么标注将永远不会被调用。 只有当该特定数据包有匹配的过滤器时才会调用标注。

If there are no filters, then the callout would never be invoked.  A callout will only be invoked if there is a matching filter for that particular packet.

默认情况下，如果没有与流量模式匹配的过滤器，则允许流量。

By default if there are no filters that match the traffic pattern, then the traffic is permitted.

希望这会有所帮助，

这篇关于本地源和本地目标数据包的行为的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！