Condition ID Filtering (Fwpmu.h) - Win32 Applications (2023)

Each of the Windows Filtering Platform (WFP) filter condition identifiers is represented by aGUID. The data type for the condition value for each filter condition is specified as aFWP_DATA_TYPE. These identifiers and their data types are defined here.

Standard conditions are listed first, followed by user mode specific conditions. Conditions are grouped by supported operating system so that you can easily find out which conditions are supported by a specific operating system.

(Video) 32. Windows Services - Part-2 - Windows System Programming in C/C++

Use

(Video) Cross-Site Scripting (XSS) Explained And Demonstrated By A Pro Hacker!

Each of the following filter conditions is only available at a subset of the WFP filter levels. For more information about the availability of each condition at a specific level, seeFilter conditions available at each filter level.

Terms available for Windows 8 and Windows Server 2012Description
FWPM_CONDITION_INTERFACE_MAC_ADDRESS
The MAC address of a specific local interface.
Data type:FWP_BYTE_ARRAY6_TYPE
FWPM_CONDICIÓN_MAC_LOCAL_ADDRESS
Destination address of an input frame or source address of an output frame.
Data type:FWP_BYTE_ARRAY6_TYPE
FWPM_CONDITION_MAC_REMOTE_ADDRESS
Source address of an input frame or destination address of an output frame.
Data type:FWP_BYTE_ARRAY6_TYPE
FWPM_CONDITION_ETHER_TYPE
The Ethernet V2 network payload type. (See ETHERNET_TYPE_IPV4 etc. in netiodef.h.)
Data type:FWP_UINT16
FWPM_CONDICIÓN_VLAN_ID
The 16 bits of the VLAN header, including the VID, CFI, and priority fields, as per the 802.1q standard (see VLAN_TAG in netiodef.h for bit field locations).
Data type:FWP_UINT16
FWPM_CONDITION_VSWITCH_TENANT_NETWORK_ID
Unique identifier for the vSwitch network. Cannot be used in conjunction with VLAN_ID.
Data type:FWP_UINT16
FWPM_CONDITION_NDIS_PORT
The NDIS port number.
Data type:FWP_UINT32
FWPM_CONDITION_NDIS_MEDIA_TYPE
The NDIS port media type.
Data type:FWP_UINT32
Possible values:any of theNDIS_MIDDLEenumeration values. (See ntddndis.h.)
FWPM_CONDITION_NDIS_PHYSICAL_MEDIA_TYPE
The NDIS port media type.
Data type:FWP_UINT32
Possible values:any of theNDIS_PHYSICAL_MEDIUMenumeration values. (See ntddndis.h.)
FWPM_CONDITION_L2_FLAGS
A bitwise OR of a combination of filter condition flags.
Data type:FWP_UINT32
Possible values:
  • FWP_CONDITION_L2_IS_MOBILE_BANDA ANCHA
  • FWP_CONDITION_L2_IS_NATIVE_ETHERNET
  • FWP_CONDITION_L2_IS_WIFI
  • FWP_CONDITION_L2_IS_WIFI_DIRECT_DATA

FWPM_CONDICIÓN_MAC_LOCAL_ADDRESS_TYPE
The address type of the physical local address.
Data type:FWP_UINT8
Possible values:one of the followingDL_ADDRESS_TYPEenumeration values.
  • DlUnicast
  • DlMulticastGenericName
  • DlBroadcast

FWPM_CONDITION_MAC_REMOTE_ADDRESS_TYPE
The address type of the remote physical address.
Data type:FWP_UINT8
Possible values:one of the followingDL_ADDRESS_TYPEenumeration values.
  • DlUnicast
  • DlMulticastGenericName
  • DlBroadcast

FWPM_CONDITION_MAC_SOURCE_ADDRESS
The physical source address of a frame.
Data type:FWP_BYTE_ARRAY6_TYPE
FWPM_CONDITION_MAC_DESTINATION_ADDRESS
The physical destination address of a frame.
Data type:FWP_BYTE_ARRAY6_TYPE
FWPM_CONDITION_MAC_SOURCE_ADDRESS_TYPE
The address type of the physical destination address.
Data type:FWP_UINT8
Possible values:one of the followingDL_ADDRESS_TYPEenumeration values.
  • DlUnicast
  • DlMulticastGenericName
  • DlBroadcast

FWPM_CONDITION_MAC_DESTINATION_ADDRESS_TYPE
The address type of the physical destination address.
Data type:FWP_UINT8
Possible values:one of the followingDL_ADDRESS_TYPEenumeration values.
  • DlUnicast
  • DlMulticastGenericName
  • DlBroadcast

FWPM_CONDITION_IP_SOURCE_PORT
The source port for transporting packets.
Data type:FWP_UINT16
FWPM_CONDITION_VSWITCH_ICMP_TYPE
The ICMP type field as specified in RFC 792.
Data type:FWP_UINT16
FWPM_CONDITION_IP_DESTINATION_PORT
The packet transport destination port.
Data type:FWP_UINT16
FWPM_CONDITION_VSWITCH_ICMP_CODE
The ICMP code field as specified in RFC 792.
Data type:FWP_UINT16
FWPM_CONDITION_VSWITCH_ID
Unique identifier for a vSwitch instance.
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_VSWITCH_NETWORK_TYPE
Indicates whether the vSwitch instance is part of an external, internal, or private virtual network.
Data type:FWP_UINT8
FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_ID
Unique identifier of the source of the current package. (The name of a VM NIC, P-NIC, or V-NIC.)
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_ID
Unique identifier of the current packet's destination. (The name of a VM NIC, P-NIC, or V-NIC.)
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_VSWITCH_SOURCE_VM_ID
Unique identifier of the source vSwitch virtual machine.
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_VSWITCH_DESTINATION_VM_ID
Unique identifier of the vSwitch target VM.
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_TYPE
The interface type of the current package repository.
Data type:FWP_UINT8
Possible values:
  • SwitchNicSyntheticNic (se o tipo de interface for VM-NIC)
  • SwitchNicEmulatedNic (se o tipo de interface for VM-NIC)
  • SwitchNicPhysicalNic (se o tipo de interface for P-NIC)
  • SwitchNicVNic (if interface type is V-NIC, connected to host partition)

FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_TYPE
Current packet destination interface type.
Data type:FWP_UINT8
Possible values:
  • SwitchNicSyntheticNic (se o tipo de interface for VM-NIC)
  • SwitchNicEmulatedNic (se o tipo de interface for VM-NIC)
  • SwitchNicPhysicalNic (se o tipo de interface for P-NIC)
  • SwitchNicVNic (if interface type is V-NIC, connected to host partition)

FWPM_CONDITION_INTERFACE
The LUID for the network interface associated with the local IP address.
Data type:FWP_UINT64
FWPM_CONDITION_ALE_PACKAGE_ID
The security identifier (SID) of an application container.
Data type:FWP_SID
FWPM_CONDITION_ALE_ORIGINAL_APP_ID
The full device path of the application, for example, "\device0\hardiskvolume1\Program Files\Application.exe". If a connection was redirected, this is the original application identifier; otherwise it is the same asFWPM_CONDITION_ALE_APP_ID.
Data type:FWP_BYTE_BLOB_TYPE
Conditions available for Windows 7, Windows Server 2008 R2 and later versionsDescription
FWPM_CONDITION_IP_NEXTHOP_ADDRESS
The IP address of the next hop interface.
Data type:FWP_V4_ADDR_MASK
FWPM_CONDITION_IP_NEXTHOP_INTERFACE
The next-hop interface from which the packet originates.
Data type:FWP_UINT64
FWPM_CONDITION_NEXTHOP_INTERFACE_TYPE
The interface type of the next hop interface.
Data type:FWP_UINT32
FWPM_CONDITION_NEXTHOP_TUNNEL_TYPE
The tunnel type of the next-hop interface.
Data type:FWP_UINT32
FWPM_CONDITION_NEXTHOP_INTERFACE_INDEX
The interface index of the next hop interface.
Data type:FWP_UINT32
FWPM_CONDITION_NEXTHOP_SUB_INTERFACE_INDEX
The subinterface index of the next hop interface.
Data type:FWP_UINT32
FWPM_CONDITION_ORIGINAL_PROFILE_ID
The network category of the inbound or next hop interface over which the ALE flow is created (inbound or outbound).
Data type:FWP_UINT32
FWPM_CONDITION_CURRENT_PROFILE_ID
The network category of the incoming or next-hop interface upon which the current packet (inbound or outbound) is built.
Data type:FWP_UINT32
FWPM_CONDITION_LOCAL_INTERFACE_PROFILE_ID
The network category of the delivery interface.
Data type:FWP_UINT32
FWPM_CONDITION_ARRIVAL_INTERFACE_PROFILE_ID
The network category of the incoming interface.
Data type:FWP_UINT32
FWPM_CONDITION_NEXTHOP_INTERFACE_PROFILE_ID
The network category of the next-hop interface.
Data type:FWP_UINT32
FWPM_CONDITION_REAUTHORIZE_REASON
The reason for reauthorizing a previously authorized connection.
Data type:FWP_UINT32
FWPM_CONDITION_ALE_REAUTH_REASON
The reason for reauthorizing a previously authorized connection, such asFWP_CONDITION_REAUTHORIZE_REASON_POLICY_CHANGE(or one of the other values ​​listed inFilter health indicators).
Data type:FWP_UINT32
FWPM_CONDITION_ORIGINAL_ICMP_TYPE
The ICMP type with which the flow was created.
Data type:FWP_UINT16
FWPM_CONDITION_IP_PHYSICAL_ARRIVAL_INTERFACE
The LUID of the physical interface associated with the incoming IP address.
Data type:FWP_UINT64
FWPM_CONDITION_IP_PHYSICAL_NEXTHOP_INTERFACE
The LUID of the next-hop physical interface.
Data type:FWP_UINT64
FWPM_CONDITION_INTERFACE_QUARANTINE_EPOCH
The epoch count associated with an interface. Reserved.
Data type:FWP_UINT64
FWPM_CONDITION_ALE_SIO_FIREWALL_SOCKET_PROPERTY
Reserved for internal use.
Data type:FWP_UINT32
Constants available for Windows Vista with SP1, Windows Server 2008 and later versionsDescription
FWPM_CONDITION_IP_ARRIVAL_INTERFACE
The LUID for the network interface associated with the incoming IP address.
Data type:FWP_UINT64
FWPM_CONDITION_ARRIVAL_INTERFACE_TYPE
The type of incoming network interface as defined by the Internet Assigned Names Authority (IANA). For more information, seehttps://www.iana.org/assignments/ianaiftype-mib.
Possible values:The interface type values ​​listed in the Ipifcons.h header file.
Data type:FWP_UINT32
FWPM_CONDITION_ARRIVAL_TUNNEL_TYPE
The tunneling method used by a tunnel bound to the incoming network interface when the Type member is IF_TYPE_TUNNEL. The tunnel type is defined by the Internet Assigned Names Authority (IANA). For more information, seehttps://www.iana.org/assignments/ianaiftype-mib.
Possible values:Values ​​for the TUNNEL_TYPE enumeration type are listed in the Ifdef.h header file.
Data type:FWP_UINT32
FWPM_CONDITION_ARRIVAL_INTERFACE_INDEX
The index of the incoming network interface as listed by the network stack.
Data type:FWP_UINT32
FWPM_CONDITION_ARRIVAL_SUB_INTERFACE_INDEX
The index of the incoming network interface as listed by the network stack.
Data type:FWP_UINT32
FWPM_CONDICIÓN_LOCAL_INTERFACE_INDEX
The index of the network interface as listed by the network stack.
Data type:FWP_UINT32
FWPM_CONDITION_LOCAL_INTERFACE_TYPE
The type of interface defined by the Internet Assigned Names Authority (IANA). For more information, seehttps://www.iana.org/assignments/ianaiftype-mib.
Possible values:The interface type values ​​listed in the Ipifcons.h header file.
Data type:FWP_UINT32
FWPM_CONDITION_LOCAL_TUNNEL_TYPE
The tunneling method used by a tunnel when the Type member is IF_TYPE_TUNNEL. The tunnel type is defined by the Internet Assigned Names Authority (IANA). For more information, seehttps://www.iana.org/assignments/ianaiftype-mib.
Possible values:Values ​​for the TUNNEL_TYPE enumeration type are listed in the Ifdef.h header file.
Data type:FWP_UINT32
Constants available for Windows Vista and higherDescription
FWPM_CONDITION_IP_LOCAL_ADDRESS
Local IP addresses.
Data type:To an IPv4 address
  • FWP_V4_ADDR_MASK, o
  • FWP_UINT32

Data type:To an IPv6 address
  • FWP_V6_ADDR_MASK, o
  • FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_IP_REMOTE_ADDRESS
The remote IP address.
Data type:To an IPv4 address
  • FWP_V4_ADDR_MASK, o
  • FWP_UINT32

Data type:To an IPv6 address
  • FWP_V6_ADDR_MASK, o
  • FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_IP_SOURCE_ADDRESS
The source IP address for forwarded packets.
Data type:To an IPv4 address
  • FWP_V4_ADDR_MASK, o
  • FWP_UINT32

Data type:To an IPv6 address
  • FWP_V6_ADDR_MASK, o
  • FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_IP_DESTINATION_ADDRESS
The destination IP address for forwarded packets.
Data type:To an IPv4 address
  • FWP_V4_ADDR_MASK, o
  • FWP_UINT32

Data type:To an IPv6 address
  • FWP_V6_ADDR_MASK, o
  • FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
The local IP address type.
Possible values:one of the followingNL_ADDRESS_TYPEenumeration values.
  • NlatUnspecified
  • NlatUnicastName
  • NlatAnycastName
  • NlatMulticastGenericName
  • NlatBroadcastName

Data type:FWP_UINT8
FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
The destination IP address type for forwarded packets.
Possible values:one of the followingNL_ADDRESS_TYPEenumeration values.
  • NlatUnspecified
  • NlatUnicastName
  • NlatAnycastName
  • NlatMulticastGenericName
  • NlatBroadcastName

Data type:FWP_UINT8
FWPM_CONDITION_IP_LOCAL_INTERFACE
The LUID for the network interface associated with the local IP address.
Data type:FWP_UINT64
FWPM_CONDITION_INTERFACE_TYPE
The type of interface defined by the Internet Assigned Names Authority (IANA). For more information, seehttps://www.iana.org/assignments/ianaiftype-mib.
Possible values:The interface type values ​​listed in the Ipifcons.h header file.
Data type:FWP_UINT32
FWPM_CONDITION_TUNNEL_TYPE
The tunneling method used by a tunnel when the Type member is IF_TYPE_TUNNEL. The tunnel type is defined by the Internet Assigned Names Authority (IANA). For more information, seehttps://www.iana.org/assignments/ianaiftype-mib.
Possible values:Values ​​for the TUNNEL_TYPE enumeration type are listed in the Ifdef.h header file.
Data type:FWP_UINT32
FWPM_CONDITION_IP_FORWARD_INTERFACE
The LUID of the network interface to which the forwarded packet will be sent.
Data type:FWP_UINT64
FWPM_CONDITION_IP_PROTOCOL
The IP protocol number as specified in RFC 1700.
Data type:FWP_UINT8
FWPM_CONDITION_IP_LOCAL_PORT
The local transport protocol port number.
Data type:FWP_UINT16
FWPM_CONDITION_ICMP_TYPE
The ICMP type field as specified in RFC 792.
Data type:FWP_UINT16
FWPM_CONDITION_IP_REMOTE_PORT
The port number of the long distance transport protocol.
Data type:FWP_UINT16
FWPM_CONDICIÓN_ICMP_CÓDIGO
The ICMP code field as specified in RFC 792.
Data type:FWP_UINT16
FWPM_CONDITION_EMBEDDED_LOCAL_ADDRESS_TYPE
The type of local IP address embedded in the ICMP packet.
Possible values:one of the followingNL_ADDRESS_TYPEenumeration values.
  • NlatUnspecified
  • NlatUnicastName
  • NlatAnycastName
  • NlatMulticastGenericName
  • NlatBroadcastName

Data type:FWP_UINT8
FWPM_CONDITION_EMBEDDED_REMOTE_ADDRESS
The remote IP address embedded in the ICMP packet.
Data type:To an IPv4 address
  • FWP_V4_ADDR_MASK, o
  • FWP_UINT32

Data type:To an IPv6 address
  • FWP_V6_ADDR_MASK, o
  • FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_EMBEDDED_PROTOCOL
The IP protocol number embedded in the ICMP packet as specified in RFC 1700.
Data type:FWP_UINT8
FWPM_CONDITION_EMBEDDED_LOCAL_PORT
The local transport protocol port number embedded in the ICMP packet.
Data type:FWP_UINT16
FWPM_CONDITION_EMBEDDED_REMOTE_PORT
The remote transport protocol port number embedded in the ICMP packet.
Data type:FWP_UINT16
FWPM_CONDITION_FLAGS
A bitwise OR of a combination of filter condition flags.
Possible values:verFilter health indicators
Data type:FWP_UINT32
FWPM_CONDITION_DIRECTION
The direction of traffic or data flow.
Possible values:
  • FWP_DIRECTION_INBOUND
  • FWP_DIRECTION_OUTBOUND

For datagram skins (FWPM_LAYER_DATAGRAM_DATA_) and stream packet layers (FWPM_LAYER_STREAM_PACKET_), the value is the same as the packet address.
For stream layers (FWPM_LAYER_STREAM_) and established flow layers (FWPM_LAYER_ALE_FLOW_ESTABLISHED_), the value corresponds to the address of the connection. (For example, if a local application initiates the connection, an incoming packetFWPM_CONDITION_DIRECTIONadapted toFWP_DIRECTION_OUTBOUND.)
Data type:FWP_UINT32
FWPM_CONDITION_INTERFACE_INDEX
The index of the network interface as listed by the network stack.
Data type:FWP_UINT32
FWPM_CONDITION_SUB_INTERFACE_INDEX
The index of the logical network interface as listed by the network stack.
Data type:FWP_UINT32
FWPM_CONDITION_SOURCE_INTERFACE_INDEX
The source network interface index for forwarded packets as enumerated by the network stack.
Data type:FWP_UINT32
FWPM_CONDITION_SOURCE_SUB_INTERFACE_INDEX
The source logical network interface index for forwarded packets as enumerated by the network stack.
Data type:FWP_UINT32
FWPM_CONDITION_DESTINATION_INTERFACE_INDEX
The destination network interface index for forwarded packets as listed by the network stack.
Data type:FWP_UINT32
FWPM_CONDITION_DESTINATION_SUB_INTERFACE_INDEX
The destination logical network interface index for forwarded packets, as listed by the network stack.
Data type:FWP_UINT32
FWPM_CONDITION_ALE_APP_ID
The full device path of the app, as returned byFwpmGetAppIdFromFileName0Occupation.
(Por exemplo "\device0\hardiskvolume1\Program Files\Application.exe".)
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_ALE_USER_ID
The local user ID.
Data type:FWP_SECURITY_DESCRIPTOR_TYPE
FWPM_CONDITION_ALE_REMOTE_USER_ID
The remote user ID.
Data type:FWP_SECURITY_DESCRIPTOR_TYPE
FWPM_CONDITION_ALE_REMOTE_MACHINE_ID
The identification of the remote computer.
Data type:FWP_SECURITY_DESCRIPTOR_TYPE
FWPM_CONDITION_ALE_PROMISCUOUS_MODE
The raw socket mode allowed or denied.
Possible values:
  • SIO_RCVALL
  • SIO_RCVALL_IGMPMCAST
  • SIO_RCVALL_MCAST
For a description of these raw socket modes, see theWSAIoctlNameOccupation.
Data type:FWP_UINT32
FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT
Reserved for internal use.
Data type:FWP_UINT32
FWPM_CONDITION_ALE_NAP_CONTEXT
Reserved for internal use.
Data type:FWP_UINT32

The following constants are available for user mode only.

(Video) Filters How do you use Filters in Intune Microsoft Endpoint Manager

User mode conditions available for Windows 8 and Windows Server 2012Description
FWPM_CONDITION_QM_MODE
The Quick Mode (QM) filter mode. what concernsIPSEC_TRAFFIC_TYPEfor possible values.
Data type:FWP_UINT32
User mode conditions available for Windows 7, Windows Server 2008 R2 and later versionsDescription
FWPM_CONDITION_KM_AUTH_NAP_CONTEXT
Reserved for internal use.
Data type:FWP_UINT32
FWPM_CONDITION_PEER_NAME
The partner's name. For example, the DNS name of the peer.
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_REMOTE_ID
The identity of the remote authentication principal.
Data type:FWP_SECURITY_DESCRIPTOR_TYPE
FWPM_AUTHENTICATION_CONDITION_TYPE
The type of authentication method IKE, IKEv2, or AuthIP.
Data type:IKEEXT_AUTHENTICATION_METHOD_TYPE
FWPM_CONDITION_KM_TYPE
The type of encoding mechanism.
Data type:IKEEXT_KEY_MODULE_TYPE
FWPM_CONDITION_KM_MODE
The IPsec mode in which a token can be obtained.
Data type:IPSEC_TOKEN_MODE
FWPM_CONDITION_IPSEC_POLICY_KEY
The policy provider context key for the main mode (MM) or quick mode (QM) of the authorized SA. Useful for restricting the scope of the authorization rule to SAs formed by a specified IPsec MM or QM policy key.
Data type:FWP_BYTE_ARRAY16_TYPE
FWPM_AUTHENTICATION_CONDITION_TYPE
The method used to authenticate the security association.
[!Use]
Only available on Windows Server 2008 R2, Windows 7 and later.

Data type:FWP_UINT32
Constants available for Windows Vista and higherDescription
FWPM_CONDITION_REMOTE_USER_TOKEN
The remote user ID.
Data type:FWP_SECURITY_DESCRIPTOR_TYPE
FWPM_CONDITION_RPC_IF_UUID
O UUID da interface RPC.
Data type:FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_RPC_IF_VERSION
The version of the RPC interface.
Data type:FWP_UINT16
FWPM_CONDITION_RPC_IF_FLAG
Reserved for internal use.
Data type:FWP_UINT32
FWPM_CONDITION_DCOM_APP_ID
The ID of the COM application.
Data type:FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_IMAGE_NAME
The name of the application.
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_RPC_PROTOCOL
The RPC protocol.
Possible values:
  • RPC_PROTSEQ_TCP
  • RPC_PROTSEQ_NMP
  • RPC_PROTSEQ_LRPC
  • RPC_PROTSEQ_HTTP

Data type:FWP_UINT8
FWPM_CONDITION_RPC_AUTH_TYPE
The type of authentication service. For more information about the types of authentication services, seeauthentication service constants.
Data type:FWP_UINT8
FWPM_CONDITION_RPC_AUTH_LEVEL
The authentication service level. For more information about authentication service levels, seeAuthentication Level Constants.
Data type:FWP_UINT8
FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM
The certificate-based Security Service Provider Interface (SSPI) encryption algorithm.
Data type:FWP_UINT32
FWPM_CONDITION_SEC_KEY_SIZE
The size of the SSPI encryption key based on the certificate.
Data type:FWP_UINT32
FWPM_CONDITION_IP_LOCAL_ADDRESS_V4
The local IPv4 address.
Data type:
  • FWP_V4_ADDR_MASK, o
  • FWP_UINT32

FWPM_CONDITION_IP_LOCAL_ADDRESS_V6
The local IPv6 address.
Data type:
  • FWP_V6_ADDR_MASK, o
  • FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_IP_REMOTE_ADDRESS_V4
The remote IPv4 address.
Data type:
  • FWP_V4_ADDR_MASK, o
  • FWP_UINT32

FWPM_CONDITION_IP_REMOTE_ADDRESS_V6
The remote IPv6 address.
Data type:
  • FWP_V6_ADDR_MASK, o
  • FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_PIPE
The name of the remote named pipe.
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_PROCESS_WITH_RPC_IF_UUID
The UUID of the process using the RPC interface.
Data type:FWP_BYTE_ARRAY16_TYPE
FWPM_CONDICIÓN_RPC_EP_VALUE
Reserved for internal use.
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_RPC_EP_FLAGS
Reserved for internal use.
Data type:FWP_UINT32
FWPM_CONDITION_CLIENT_TOKEN
The client ID when using RpcProxy.
Data type:FWP_SECURITY_DESCRIPTOR_TYPE
FWPM_CONDITION_RPC_SERVER_NAME
The RPC server name when using RpcProxy.
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_RPC_SERVER_PORT
The port on the RPC server when using RpcProxy.
Data type:FWP_UINT16
FWPM_CONDITION_RPC_PROXY_AUTH_TYPE
The type of RPC proxy authentication service.
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH
The length of the Secure Sockets Layer (SSL) key in the client certificate.
Data type:FWP_UINT32
FWPM_CONDITION_CLIENT_CERT_OID
The object identifier in the client certificate.
Data type:FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_NET_EVENT_TYPE
The liquid event type.
Data type:FWP_UINT32

comments

When IP addresses are stored in FWP_UINT32 format or when an IP port is stored in FWP_UINT16 format, they are stored in host order, not network order.

requirements

applicationbravura
Minimum client supported
Windows Vista [nur Desktop-Apps]
minimum server allowed
Windows Server 2008 [desktop apps only]
Header
Fwpmu.h

Videos

1. Python Filter Emails by Sender Name | Python Filter Emails by Subject | Filter Emails by Attachments
(Python2020)
2. Simple Mail Checker in Python
(NeuralNine)
3. Microsoft Intune Training For Beginners Part 2
(Paddy Maddy)
4. Lecture-20 GetMessage and PeekMessage difference with example
(Varteta Learning Platform)
5. Download All Messages & Attachments From Outlook Using Python
(Coding Is Fun)
6. How to Filter a List in Python?
(Finxter - Create Your Six-Figure Coding Business)
Top Articles
Latest Posts
Article information

Author: Ouida Strosin DO

Last Updated: 11/06/2022

Views: 6441

Rating: 4.6 / 5 (56 voted)

Reviews: 95% of readers found this page helpful

Author information

Name: Ouida Strosin DO

Birthday: 1995-04-27

Address: Suite 927 930 Kilback Radial, Candidaville, TN 87795

Phone: +8561498978366

Job: Legacy Manufacturing Specialist

Hobby: Singing, Mountain biking, Water sports, Water sports, Taxidermy, Polo, Pet

Introduction: My name is Ouida Strosin DO, I am a precious, combative, spotless, modern, spotless, beautiful, precious person who loves writing and wants to share my knowledge and understanding with you.