个人防火墙核心技术是数据包的截获,通过SPI 服务提供者接口进行网络数据包( Service

Provider Interface) 截获能够最完备地得到进程访网信息. 一个功能完备的个人防火墙系统不仅能够封

包截获,还应能解析协议、支持自定义控管规则以及日志记录随时的网络通信状况. 本项目遵循SPI 规

范完整实现了上述功能,给出了一个Windows 下的个人防火墙系统实现过程中的技术要点分析.-Personal firewall core technology is intercepted packet through the SPI interface to the network service provider of data packets (Service Provider Interface) can be intercepted to visit the most comprehensive access to the process of network information. A fully functional personal firewall system is not only able to intercept packets, but also be able to resolve the agreement, support custom control rules and logging network traffic conditions at any time. The project follows a full realization of the above specification SPI function, gives a personal firewall under Windows system implementation in the process of analysis of technical points.