1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
TODO List for netfilter / iptables.
Currently maintained by Harald Welte <laforge@gnumonks.org>
Please inform me, if you want to work on any of the TODO items, so I
can update this list and thus prevent two people doing the same work.
CVS ID: $Id: TODO,v 1.19 2001/02/02 10:53:46 laforge Exp $
IMPORTANT before iptables-1.2.1 release:
X generic tcp sequence number offset support for nat helpers [HW]
X prerelease make target (for applying certain p-o-m stuff) [RR]
- header files in seperate directory, build all extensions, even
when current kernel not patched [RR]
X restore counters for individual rules (iptables / iptables-restore) [HW]
- add libipulog / libiptc to DEVEL target [RR]
INDEPENDENT from iptables-1.2.1 release:
- netlink interface for conntrack manipulation from userspace [HW]
- unified nfnetlink for queue,ulog,conntrack (and more?) (2.5 issue)
- sysctl support for ftp-multi, irc-conntrack/nat, ftp-fxp
- integrate HOPLIMIT for ipv6 in patch-o-matic [HW]
- static 1:1 NAT (only ip address NAT in both directions)
- u32 classifier (port from tc -> iptables)
- pktlen match (not needed, when u32 available)
- SMP locking for IRC buggy?
- MARK match / target with boolean OR / AND (to use nfmark bitwise)
X full tcp window tracking incompatibility with nat helpers [HW]
X multiple related connections [HW]
- documentation for libiptc
- port conntrack to IPv6 (code reuse?)
- port matches (owner, limit, multiport, owner) to IPv6
- HOPLIMIT IPv6 target / match [HW]
- multicast connection tracking
- conntrack / nat failover [HW]
- Hard lockup with ip_queue under heavy load
- mangle table should use all five netfilter hooks
- make patch-o-matic more generic (any subdir), and reversible
- CONFIG_NF_IP_NAT_LOCAL
- fix and test the netfilter bridging stuff
- integrate the ipt_NETLINK target from gianni@ecsc.co.uk
- integrate PSD target / port it as match [HW]
- various NAT performance optimizations possible! (which? ask HW)
======================================================================
[RR] Paul 'Rusty' Russel <rusty@linuxcare.com.au>
[MB] Marc Boucher <marc@mbsi.ca>
[JM] James Morris <jmorris@intercode.com.au>
[HW] Harald Welte <laforge@gnumonks.org>
|
