readme.txt

基于TDI驱动编写的个人防火墙程序。包括驱动模块、应用层规则配置及加载模块。

Welcome to Simple TDI Based Open Source Personal Firewall for NT4/2000


INSTALLATION

1. Run install.bat or install_nt4.bat for NT4

2. Edit %SystemRoot%\system32\drivers\etc\tdi_fw.conf for your taste

3. Restart Windows


RULES

Edit file %SystemRoot%\system32\drivers\etc\tdi_fw.conf
Description of file format is in it.

To reload rules you have to restart tdi_fw_svc service:
C:\>net stop tdi_fw_svc
C:\>net start tdi_fw_svc

Errors are written in log (see below).


LOGS

There are two types of logs and three types of records to write.

The first type of logs is text log files. They're in
%SystemRoot%\system32\LogFiles\tdi_fw directory.
File name consists of year, month and date: YYYYMMDD.log

The second type of logs is Windows' "Event Log". Records are writing to 
Application log with "tdi_fw_svc" event source. You can use "Event Viewer" 
to view events.

By default all events are written to text log files. If you want specify what
kind of events are to be written in "Event Log" see [_config_] section of
tdi_fw.conf file.

Sometimes instead of process name there're only process id (pid) in logs.
It appeared when process started and exited too fast. This is bug and
it'll be fixed in next release.


BUGS

Check the latest version at http://ntdev.h1.ru/tdi_fw.html

Mail me to [e-mail]


DEBUGGING

First you have to disable autostarting of driver and helper service.

1. Remove autostart of driver by executing: bin\install remove drv
or by starting uninstall_nt4.reg for NT4
2. Uninstall service by executing: tdi_fw_svc remove
3. Restart Windows

And now see debug.txt file

---
vlad-ntdev