This event is a notification on an Firewall client operation
that uses the Winsock gethostbyaddr function. It allows the
filter to modify or block a request that uses gethostbyaddr
by using the IFWXGetXByY::SetResult or
IFWXGetXByY::Deny method.
Two events are generated, one before and one after the actual name
resolution.
[in] Address being looked up in network byte order.
AddressLength
[in] Size in bytes of the buffer pointed to by the
Address member.
AddressType
[in] Type of address, such as the AF_INET address family type
(defined as TCP, UDP, and other associated Internet protocols).
Address family types and their corresponding values are defined in
winsock2.h.
Hostent
[in] Pointer to a buffer containing the response hostent
structure. The buffer contains a valid hostent structure if
the fBeforeAction member is FALSE. Otherwise, the value of
the Hostent member is undefined.
HostentLength
[in] Size, in bytes, of the buffer pointed to by the
Hostent member.
fBeforeAction
Before-action flag. The value of this flag is TRUE when called
before name resolution is done.
It is FALSE when the gethostbyaddr function is called
after name resolution is done. The buffer contains a valid
hostent structure if the fBeforeAction member is
FALSE.
FilterAccess
[in] Access status for the event. This is a value from the
FwxFilterAccess
enumerated type. This member indicates the current access status.
The filter may call the IFWXGetXByY::Deny method to
modify the access status.
piGetXByY
[in] Pointer to a IFWXGetXByY interface that can be used
to control the outcome of the name query.
Remarks
This event is generated only for Firewall clients (fwxSourceWSP); it is not
generated for SecureNAT clients.