blob: a5108096f1aa8cd88c2df7c1eee53a44faf66e54 [file] [log] [blame]
Harald Welteaf4ec452001-01-24 01:15:16 +00001TODO List for netfilter / iptables.
2Currently maintained by Harald Welte <laforge@gnumonks.org>
3
4Please inform me, if you want to work on any of the TODO items, so I
5can update this list and thus prevent two people doing the same work.
6
Harald Welte2ca59042001-02-28 11:15:01 +00007CVS ID: $Id: TODO,v 1.23 2001/02/22 12:01:55 laforge Exp $
Harald Welteaf4ec452001-01-24 01:15:16 +00008
9IMPORTANT before iptables-1.2.1 release:
Harald Weltedd369152001-02-02 10:53:46 +000010X generic tcp sequence number offset support for nat helpers [HW]
Harald Welte5e561692001-02-04 14:41:22 +000011X prerelease make target (for applying certain p-o-m stuff) [RR]
Harald Welteaf4ec452001-01-24 01:15:16 +000012- header files in seperate directory, build all extensions, even
Harald Welte5e561692001-02-04 14:41:22 +000013 when current kernel not patched [RR]
Harald Weltedd369152001-02-02 10:53:46 +000014X restore counters for individual rules (iptables / iptables-restore) [HW]
Harald Welte5e561692001-02-04 14:41:22 +000015- add libipulog / libiptc to DEVEL target [RR]
Harald Welteaf4ec452001-01-24 01:15:16 +000016
17INDEPENDENT from iptables-1.2.1 release:
18- netlink interface for conntrack manipulation from userspace [HW]
19- unified nfnetlink for queue,ulog,conntrack (and more?) (2.5 issue)
20- sysctl support for ftp-multi, irc-conntrack/nat, ftp-fxp
21- integrate HOPLIMIT for ipv6 in patch-o-matic [HW]
22- static 1:1 NAT (only ip address NAT in both directions)
Harald Welte302ca3e2001-02-07 16:27:20 +000023- u32 classifier (port from tc -> iptables) [YU]
Harald Welteaf4ec452001-01-24 01:15:16 +000024- pktlen match (not needed, when u32 available)
25- SMP locking for IRC buggy?
26- MARK match / target with boolean OR / AND (to use nfmark bitwise)
Harald Weltedd369152001-02-02 10:53:46 +000027X full tcp window tracking incompatibility with nat helpers [HW]
28X multiple related connections [HW]
Harald Welteaf4ec452001-01-24 01:15:16 +000029- documentation for libiptc
Harald Welte518abc12001-02-18 16:12:45 +000030- port conntrack to IPv6 (code reuse?) [BB]
31X port matches (owner, limit, multiport, owner) to IPv6 [RJ]
Harald Welteaf4ec452001-01-24 01:15:16 +000032- multicast connection tracking
33- conntrack / nat failover [HW]
34- Hard lockup with ip_queue under heavy load
35- mangle table should use all five netfilter hooks
36- make patch-o-matic more generic (any subdir), and reversible
37- CONFIG_NF_IP_NAT_LOCAL
Harald Weltec67e5f82001-01-24 12:33:49 +000038- fix and test the netfilter bridging stuff
Harald Weltedd369152001-02-02 10:53:46 +000039- integrate the ipt_NETLINK target from gianni@ecsc.co.uk
Harald Welte302ca3e2001-02-07 16:27:20 +000040X integrate PSD target / port it as match [HW]
Harald Weltedd369152001-02-02 10:53:46 +000041- various NAT performance optimizations possible! (which? ask HW)
Harald Welteccf72df2001-02-22 12:01:55 +000042- ip_nat_ident module
43- provide daily CVS snapshots via fto [HW]
Harald Welte2ca59042001-02-28 11:15:01 +000044- 10.1.2.3.4 is accepted as a valid IP address by iptables -s / -d ?
Harald Welteaf4ec452001-01-24 01:15:16 +000045
46======================================================================
47[RR] Paul 'Rusty' Russel <rusty@linuxcare.com.au>
48[MB] Marc Boucher <marc@mbsi.ca>
49[JM] James Morris <jmorris@intercode.com.au>
50[HW] Harald Welte <laforge@gnumonks.org>
Harald Welte302ca3e2001-02-07 16:27:20 +000051[YU] Yon Uriarte <ukl2@rz.uni-karlsruhe.de>
Harald Welte518abc12001-02-18 16:12:45 +000052[RJ] Jan Rekorajski <baggins@mimuw.edu.pl>
53[BB] Bastian Blank <bastianb@gmx.de>