IPFW IPFW and Wireshark

[Handy92]

1. Why is possible to read packet via Wireshark if is theoretycally blocked using Stratefull and Powerfull Firewall?

2. It is possible to do virtually internet interface who will be using by system and apps (wireshark) like a physsically interface, and between physically and virtually sending packages using IPFW redirect?

Cable > physically em0 > ipfw filtred, logging and redirect > virtually im0 > other apps.

3. Clam AV and IPFW, for windows. It is possible?

4. IPFW what Networ Layer?

 

[SirDice]

1. Why is possible to read packet via Wireshark if is theoretycally blocked using Stratefull and Powerfull Firewall?

Blocking a packet at the firewall doesn't prevent the packet from actually arriving at the interface. It just doesn't get processed by the network stack higher up.

Clam AV and IPFW, for windows. It is possible?

ClamAV, yes. IPFW no.

IPFW what Networ Layer?

TCP/IP doesn't quite fit in the OSI standard model but it's usually layers 2, 3 and 4.