防火墙过滤驱动，1) 一个创建设备的驱动程序入口，为通讯创建符号连接和处理IRPs(分派，加载，卸载，创建...)的标准例程。



　 2)在标准例程里管理IRPs.在我们的代码中，我们实现了四个IOCTL代码：START_IP_HOOK(注册过滤函数),STOP_IP_HOOK(注销过滤函数), ADD_FILTER(安装新的过滤规则),CLEAR_FILTER(清除所有规则).



　　3)对于我们的驱动，我们实现多个用于过滤的函数。

-Firewall filter driver, 1) a device driver to create the entrance, create a symbolic link for the communication and processing of IRPs (distribution, loading, unloading, create ...) standard routines. 2) in the standard routines in the management IRPs. In our code, we achieved four IOCTL code: START_IP_HOOK (up filter function), STOP_IP_HOOK (cancellation filter function), ADD_FILTER (installation of new filter rules), CLEAR_FILTER (clear all the rules). 3) for our drivers, we used to filter multiple functions.