firewall and network driver

Hello,

I searched the forum for vc++ firewall sources and stuffs for win32 and found some interested links, especially that netdefender from which i learned a lot.

Anyway i got a little question.
If i take drvfltip from there for example... h**p://www.codeproject.com/internet/drvfltip.asp

Filter function returns PF_DROP or PF_FORWARD depending if the packet is dropped or forwarded.
What i'd like to do is adding a third choice that would be to ask firewall user.
Driver would detect a connection that isn't in rules and would ask user what he'd like to do. How is it possible? i read there's another possible return value : PF_PASS... would it be a solution?

Thanks
[736 byte] By [backeyes] at [2007-11-18 19:27:10]