wfp fix

CHANGELOG.md

@@ -23,10 +23,13 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 
 ### Changed
 - split the advanced new box wizard page in two
+- reorganized box options a bit
 
 ### Fixed
 - fixed issue with proxy authentication setting
 - fixed memory leak in sbiesvc
+- fixed issue with inconsistent WFP option application [#3900](https://github.com/sandboxie-plus/Sandboxie/issues/3900)
+
 
 
 

Sandboxie/core/dll/net.c

@@ -1381,7 +1381,10 @@ _FX BOOLEAN WSA_Init(HMODULE module)
 
     List_Init(&WSA_FwList);
 
-    WSA_WFPisEnabled = SbieApi_QueryConfBool(NULL, L"NetworkEnableWFP", FALSE);
+    ULONG Drv_Features = 0;
+    if (NT_SUCCESS(SbieApi_Call(API_QUERY_DRIVER_INFO, 3, 0, (ULONG_PTR)&Drv_Features, sizeof(Drv_Features))))
+        WSA_WFPisEnabled = (Drv_Features & SBIE_FEATURE_FLAG_WFP) != 0;
+
     if(WSA_WFPisEnabled)
         WSA_WFPisBlocking = !Config_GetSettingsForImageName_bool(L"AllowNetworkAccess", TRUE);
     else // load rules only when the driver is not doing the filtering