I am learning Windows Filtering Platform in kernel mode. Could anyone give me an example of Veto in WFP? I know the below code is Hard Block, but I can't imagine what Veto looks like.
classifyOut->actionType = FWP_ACTION_BLOCK;
classifyOut->rights &= ~FWPS_RIGHT_ACTION_WRITE;
MSDN link for this: Filter Arbitration