WFP Built-in Callout Identifiers (Compact 2013)
3/26/2014
The identifiers for the callout functions that are built in to the Windows Filtering Platform (WFP) are each represented by a GUID. These identifiers are defined as follows.
The V4 and V6 suffixes at the end of the callout identifiers indicate whether the callout is for the IPv4 network stack or for the IPv6 network stack.
Callout identifier |
Description |
|---|---|
FWPM_CALLOUT_IPSEC_INBOUND_TRANSPORT_V4 FWPM_CALLOUT_IPSEC_INBOUND_TRANSPORT_V6 |
Verifies that each received packet that is supposed to arrive over a transport mode security association arrives securely. This callout is applicable at the transport layer. |
FWPM_CALLOUT_IPSEC_OUTBOUND_TRANSPORT_V4 FWPM_CALLOUT_IPSEC_OUTBOUND_TRANSPORT_V6 |
Indicates to IPsec the outbound traffic that must be secured over transport mode security associations. This callout is applicable at the transport layer. |
FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_V4 FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_V6 |
Verifies that each received packet that is supposed to arrive over a tunnel mode security association arrives securely. This callout is applicable at the transport layer. |
FWPM_CALLOUT_IPSEC_OUTBOUND_TUNNEL_V4 FWPM_CALLOUT_IPSEC_OUTBOUND_TUNNEL_V6 |
Indicates to IPsec the outbound traffic that must be secured over tunnel mode security associations. This callout is applicable at the transport layer. |
FWPM_CALLOUT_IPSEC_FORWARD_INBOUND_TUNNEL_V4 FWPM_CALLOUT_IPSEC_FORWARD_INBOUND_TUNNEL_V6 |
Verifies that each received packet that is supposed to arrive over a tunnel mode security association arrives securely. This callout is applicable at the forwarding layer. |
FWPM_CALLOUT_IPSEC_FORWARD_OUTBOUND_TUNNEL_V4 FWPM_CALLOUT_IPSEC_FORWARD_OUTBOUND_TUNNEL_V6 |
Indicates to IPsec the outbound traffic that must be secured over a tunnel mode security association. This callout is applicable at the forwarding layer. |
FWPM_CALLOUT_IPSEC_INBOUND_INITIATE_SECURE_V4 FWPM_CALLOUT_IPSEC_INBOUND_INITIATE_SECURE_V6 |
Verifies that each incoming connection that is supposed to arrive secure arrives securely. This callout is applicable at the ALE accept layer. |
FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_ALE_ACCEPT_V4 FWPM_CALLOUT_IPSEC_INBOUND_TUNNEL_ALE_ACCEPT_V6 |
Permits the IPsec tunnel mode IP-in-IP packets when they get classified at the ALE accept layer. |
FWPM_CALLOUT_IPSEC_ALE_CONNECT_V4 FWPM_CALLOUT_IPSEC_ALE_CONNECT_V6 |
Applies IPsec policy modifiers to client applications. |
FWPM_CALLOUT_WFP_TRANSPORT_LAYER_V4_SILENT_DROP FWPM_CALLOUT_WFP_TRANSPORT_LAYER_V6_SILENT_DROP |
Implements stealth-mode filtering by silently dropping all incoming packets for which TCP does not have a listening endpoint. This callout is applicable at the inbound transport discard layer. |
FWPM_CALLOUT_TCP_CHIMNEY_CONNECT_LAYER_V4 FWPM_CALLOUT_TCP_CHIMNEY_CONNECT_LAYER_V6 |
Enables or disables TCP chimney offload for each outgoing connection. |
FWPM_CALLOUT_TCP_CHIMNEY_ACCEPT_LAYER_V4 FWPM_CALLOUT_TCP_CHIMNEY_ACCEPT_LAYER_V6 |
Enables or disables TCP chimney offload for each incoming connection. |
FWPM_CALLOUT_SET_OPTIONS_AUTH_CONNECT_LAYER_V4 FWPM_CALLOUT_SET_OPTIONS_AUTH_CONNECT_LAYER_V6 |
Sets classify options on outbound flows. |
See Also
Reference
WFP Constants
WFP Access Right Identifiers
WFP Built-in Keying Module Identifiers
WFP Built-in Provider Context Identifiers
WFP Built-in Provider Identifiers
WFP Filter Context Identifiers
WFP Filter Weight Identifiers
WFP Filtering Conditions
WFP Filtering Layer Identifiers
WFP Filtering Sublayer Identifiers
WFP Error Codes