Skip to content

Instantly share code, notes, and snippets.

@m8urnett
Created July 8, 2019 23:58
Show Gist options
  • Save m8urnett/ebc53aa70953b3162aa9f78d50a669bb to your computer and use it in GitHub Desktop.
Save m8urnett/ebc53aa70953b3162aa9f78d50a669bb to your computer and use it in GitHub Desktop.
<item>
<filterKey>{96809035-6827-4d6f-a6b8-980ac33511ac}</filterKey>
<displayData>
<name>Query User</name>
<description>Prompt the User for a decision corresponding this Inbound Traffic</description>
</displayData>
<flags/>
<providerKey>{decc16ca-3f33-4346-be1e-8fb4ae0f3d62}</providerKey>
<providerData>
<data>1e27010000000000</data>
<asString>.'......</asString>
</providerData>
<layerKey>FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6</layerKey>
<subLayerKey>{b3cdd441-af90-41ba-a745-7c6008ff2301}</subLayerKey>
<weight>
<type>FWP_UINT8</type>
<uint8>3</uint8>
</weight>
<filterCondition numItems="2">
<item>
<fieldKey>FWPM_CONDITION_IP_PROTOCOL</fieldKey>
<matchType>FWP_MATCH_EQUAL</matchType>
<conditionValue>
<type>FWP_UINT8</type>
<uint8>17</uint8>
</conditionValue>
</item>
<item>
<fieldKey>FWPM_CONDITION_FLAGS</fieldKey>
<matchType>FWP_MATCH_FLAGS_NONE_SET</matchType>
<conditionValue>
<type>FWP_UINT32</type>
<uint32>9</uint32>
</conditionValue>
</item>
</filterCondition>
<action>
<type>FWP_ACTION_CALLOUT_UNKNOWN</type>
<filterType>{c3dbed20-0bb6-4bf3-828d-96732e1e0026}</filterType>
</action>
<rawContext>0</rawContext>
<reserved/>
<filterId>11095174</filterId>
<effectiveWeight>
<type>FWP_UINT64</type>
<uint64>3459044889319178240</uint64>
</effectiveWeight>
</item>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment