Windows:创建我们自己的防火墙以与我们的产品一起分发将涉及什么? [英] Windows: What would be involved with creating our own firewall for distribution with our product?

问题描述

我负责确定创建自己的防火墙所涉及的内容.

I am charged with determining what would be involved with creating our own firewall.

可以拦截每个连接的事物，并根据哪个exe发起连接来决定是否允许它.我们将阻止或挂起连接，直到用户说允许或拒绝为止.

Something that can intercept each and every connection, and decide whether to permit it based on which exe is initiating the connection. We would either block or hang the connection until the user said to permit or deny.

我对XP，Vista，Win7感兴趣.

I am interested in XP, Vista, Win7.

我知道如何用Java，Perl和JavaScript编程.我假设我将需要使Java与某些C或C#可执行文件进行接口才能完成此工作.我预计GUI警报将基于Java，但是最大的事情是知道将需要与Windows的接口，以及XP和Vista/7之间是否存在重大差异.

I know how to program in Java, Perl and JavaScript. I am assuming that I am going to need to get Java to interface with some C or C# executable in order to make this work. I expect the GUI alerts will be Java based, but the big thing is knowing what interfaces with Windows would be needed, and if there is a major difference between XP and Vista/7.

我假设要做出某些决定，也许是一些兼容性问题.请描述会涉及的内容.

I assume there are certain decisions to make, perhaps some compatibility issues. Please describe what would be involved.

我还发布了一个相关的问题，即是否可能简单地利用已构建的在Windows防火墙中，因为我想分别听到这两个选项.

I also posted a related question for the possibility of simply tapping into the built in Windows Firewall because I want to hear about both options separately.

推荐答案

请参阅此stackoverflow问题.要解释该帖子中给出的答案，您需要使用 Windows过滤平台 API.由于它是基于OS的，因此您需要编写或查找API包装器，以便将C/C ++转换为Java可以调用的东西.

See this stackoverflow question. To paraphrase the answer given in that post, you would need to make use of the Windows Filtering Platform API. As it's OS based, you would need to either write or find API wrappers that translate the C/C++ into something Java could call if you want to go that route.

如果您需要网络级防火墙，可以先查看 ipcop 或 Avast 或 ESET/NOD32 可免费或以合理的价格提供防火墙功能.

If you need a network level firewall, you can start by looking at either ipcop or Symantec Endpoint for freebie and commercial solutions respectively. Endpoint does client side protection as well and other products exist such as Avast or ESET/NOD32 that offer firewall capabilities for free or at decent cost.

除非绝对必要，否则我建议您在着手编写自己的选项之前先研究一下商用选项.

Unless it's an absolute necessity, I would advise looking into commercially available options before diving into writing your own.

这篇关于Windows:创建我们自己的防火墙以与我们的产品一起分发将涉及什么?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！