python编写网络防火墙_是否可以为Windows编写带有Python / Scapy的简单防火墙？

I'm looking to make a "small" firewall that can intercept HTTP traffic, it should then modify or drop the packet according to its ip address and the content(text) of the packet.

I googled several times before I created this question.

Im afraid it'll take a long time, also, I do not have any experience in developing a driver kernel-mode.

Recently though, I came across a library for python (scapy), and from the documentation, it is able to sniff as well as forge traffic.

However I have a few questions about scapy:

What does it mean to "forge network packets?" Does it forge a copy of the packets?

Thanks in advance.

PS: Also since I'm not experienced in developing drivers in kernel-mode, is there any alternative library in user-mode? The programming language used is not my goal, my goal is to accomplish this task in a sh