diff options
authorlaforge <laforge>2001-11-13 09:26:03 +0000
committerlaforge <laforge>2001-11-13 09:26:03 +0000
commit1d22915eb3630668ac90a3f5d1a697b5a6da37b9 (patch)
parent1dde240a755a1cdab114e7da67891dc75dbf10b5 (diff)
todo update (Fabrice Marie)
1 files changed, 2 insertions, 22 deletions
diff --git a/TODO b/TODO
index e5008a3..9edc55a 100644
--- a/TODO
+++ b/TODO
@@ -4,7 +4,7 @@ Currently maintained by Harald Welte <>
Please inform me, if you want to work on any of the TODO items, so I
can update this list and thus prevent two people doing the same work.
-CVS ID: $Id: TODO,v 1.48 2001/10/16 08:07:39 laforge Exp $
+CVS ID: $Id: TODO,v 1.49 2001/10/25 13:37:46 laforge Exp $
- token ring crashes ??
@@ -15,20 +15,8 @@ IMPORTANT issues:
- conntrack helper not called for first packet (udp!)
- add support for correct SACK handling [HW]
- erroneously too-fast dropped conntrack for half-open TCP connections [HW]
-X why is nat_helper's expect() function called for all helpers? [HW]
-X full tcp window tracking incompatibility with nat helpers [HW]
- mangle table should use all five netfilter hooks [BC]
-X merge EPRT / EPSV ftp stuff [RR] (reimplemented in ftp-fixes, included 2.4.4)
-X runme error with IPv6 stuff! [HW]
- wrong 'Out of window' error message from tcp-windowtracking [HW]
-X SMP conntrack race [RR] (ftp-fixes, included in 2.4.4)
-X static compiling/linking of iptables (for router-on-a-disk) [HW]
-X IPv6 testing (MARK, LOG, REJECT) [HW]
-x iptables-save doesn't work with eth+ style multiple IF stuff [HW]
-X reject-with on REJECT target doesn't work [HW]
-X IPv6 REJECT target doesn't have extension plugin ?!?
-- colon inside prefix doesn't work
-X pending minor ip_queue updates [JM]
- --mac-source not working in FORWARD (manpage bug?)
- netfilter hooks should give error if same function registers twice [HW]
- speed issues (mark_source_chains, Robert Olsson)
@@ -39,27 +27,19 @@ NICE to have:
- multicast connection tracking
- sysctl support for ftp-multi, irc-conntrack/nat, ftp-fxp
- integrate HOPLIMIT for ipv6 in patch-o-matic [HW]
-X static 1:1 NAT (only ip address NAT in both directions) (NETMAP target)
- u32 classifier (port from tc -> iptables) [YU]
-X pktlen match (not needed, when u32 available) [FM]
- MARK match / target with boolean OR / AND (to use nfmark bitwise)
- documentation for libiptc
- port conntrack to IPv6 (code reuse?) [BB]
-X port matches (owner, limit, multiport, owner) to IPv6 [RJ]
-- make patch-o-matic more generic (any subdir), and reversible
+- make patch-o-matic reversible
- fix and test the netfilter bridging stuff
-X integrate the ipt_NETLINK target from [HW]
-X integrate PSD target / port it as match [HW]
- various NAT performance optimizations possible! (which? ask HW)
- ip_nat_ident module [FM]
- provide daily CVS snapshots via ftp [HW]
-- is accepted as a valid IP address by iptables -s / -d ?
- make iptables / ip6tables use the same codebase (as libiptc) [KA]
-X string_to_number() does not work correctly for unsigned ints [JM]
- REJECT optionally generates port unreachable with faked SOURCE
- libipq reentrancy [JM]
-X libipq asynchronousness [Done by Joost Remijn]
- compiling without O2 issue
FUTURE extensions: