From: "Steven Levine" <ecs-isp@2rosenthals.com>
Message-ID: <644acdde.6.mr2ice.fgrirsq@earthlink.net>
Date: Thu, 27 Apr 2023 12:32:46 -0700
To: "eCS ISP Mailing List" <ecs-isp@2rosenthals.com>
In-Reply-To: <list-7060516@2rosenthals.com>
Subject: Re: [eCS-ISP] InJoy FW 4.2.2 issue with a rule "failed to send packet"

In <list-7060516@2rosenthals.com>, on 04/27/23
   at 07:37 PM, "Massimo S." <ecs-isp@2rosenthals.com> said:


Hi Massimo,

>i've 3 include files containing rules and another number of rules in
>firerule.cnf

>#include <firewall/spam.cnf> 
>                                                  #include
><firewall/r_p_ddos.cnf> 
>                                                                                                    #include
> <firewall/url_filter.cnf>

>i had to comment one of these to have injoy working again

I'm still confused about what you actually did.  Are you saying that
simply removing the new rule123 was not sufficient to allow ijfw to start
working again?

For those reading along, ijfw does all the rule processing in ring3 (i.e.
gateway.exe and firewall.dll).  The ring0 driver fxwrap.sys is part of the
NDIS protocol stack and past packets up and down the stack after they have
been processed by the firewall, assuming the firewall is enabled.

What's failing for Massimo is the DosWrite that passes a packet from the
ring3 code to the ring0 code.

Steven

-- 
----------------------------------------------------------------------
"Steven Levine" <steve53@earthlink.net>  Warp/DIY/BlueLion etc.
www.scoug.com www.arcanoae.com www.warpcave.com
----------------------------------------------------------------------