Gitiles
Code Review Sign In
gerrit-public.fairphone.software / fp2-dev / platform / external / iptables / 47a026dcbd2ae053d8586027eda42be9a4bc2012 / . / TODO
blob: 3e01f3c14805a43fe946ff6dcfe5a35bfefaed7a [file] [log] [blame]
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]1TODO List for netfilter / iptables.
2Currently maintained by Harald Welte <laforge@gnumonks.org>
3
4Please inform me, if you want to work on any of the TODO items, so I
5can update this list and thus prevent two people doing the same work.
6
James Morris47a026d2001-11-30 10:55:10 +0000[diff] [blame^]7CVS ID: $Id: TODO,v 1.51 2001/11/24 22:59:16 jamesm Exp $
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]8
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]9IMPORTANT issues:
Harald Welte76029842001-10-25 13:37:46 +0000[diff] [blame]10- token ring crashes ??
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]11- solution for nostate / notrack (we don't want to track specific conn's)
Harald Welte87d4be42001-07-05 06:26:37 +0000[diff] [blame]12- iptables-save/restore problems with log-level
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]13- multiple related connections [HW]
14- ip_conntrack rmmod loop (sometimes, Yan's patch?)
15- conntrack helper not called for first packet (udp!)
Harald Weltebb364e62001-07-31 21:35:18 +0000[diff] [blame]16- add support for correct SACK handling [HW]
Harald Welteb4c648b2001-09-02 14:03:02 +0000[diff] [blame]17- erroneously too-fast dropped conntrack for half-open TCP connections [HW]
Harald Welte3445dfb2001-07-07 23:39:16 +0000[diff] [blame]18- mangle table should use all five netfilter hooks [BC]
Harald Welte61b19892001-04-24 00:02:33 +0000[diff] [blame]19- wrong 'Out of window' error message from tcp-windowtracking [HW]
Harald Welte87d4be42001-07-05 06:26:37 +0000[diff] [blame]20- --mac-source not working in FORWARD (manpage bug?)
James Morrisd2b5c562001-07-23 00:28:56 +0000[diff] [blame]21- netfilter hooks should give error if same function registers twice [HW]
Harald Welte9eb109a2001-10-16 08:07:39 +0000[diff] [blame]22- speed issues (mark_source_chains, Robert Olsson)
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]23
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]24NICE to have:
Harald Welte489b6032001-07-14 19:21:47 +0000[diff] [blame]25- make RPC conntrack work again
Harald Welte87d4be42001-07-05 06:26:37 +0000[diff] [blame]26- interface names in ipv6 can contain _ and -
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]27- multicast connection tracking
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]28- sysctl support for ftp-multi, irc-conntrack/nat, ftp-fxp
29- integrate HOPLIMIT for ipv6 in patch-o-matic [HW]
Harald Welte302ca3e2001-02-07 16:27:20 +0000[diff] [blame]30- u32 classifier (port from tc -> iptables) [YU]
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]31- MARK match / target with boolean OR / AND (to use nfmark bitwise)
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]32- documentation for libiptc
Harald Welte518abc12001-02-18 16:12:45 +0000[diff] [blame]33- port conntrack to IPv6 (code reuse?) [BB]
Fabrice MARIE96b71712001-11-13 09:26:03 +0000[diff] [blame]34- make patch-o-matic reversible
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]35- CONFIG_NF_IP_NAT_LOCAL
Harald Weltec67e5f82001-01-24 12:33:49 +0000[diff] [blame]36- fix and test the netfilter bridging stuff
Harald Weltedd369152001-02-02 10:53:46 +0000[diff] [blame]37- various NAT performance optimizations possible! (which? ask HW)
James Morris90eca6a2001-05-03 11:53:27 +0000[diff] [blame]38- ip_nat_ident module [FM]
Harald Weltede6aaeb2001-03-26 18:06:04 +0000[diff] [blame]39- provide daily CVS snapshots via ftp [HW]
Harald Welte90ba5ec2001-05-03 21:10:24 +0000[diff] [blame]40- make iptables / ip6tables use the same codebase (as libiptc) [KA]
Harald Weltefc32daf2001-05-26 20:31:59 +0000[diff] [blame]41- REJECT optionally generates port unreachable with faked SOURCE
James Morris1cb4c052001-05-25 12:24:20 +0000[diff] [blame]42- libipq reentrancy [JM]
Harald Welte489b6032001-07-14 19:21:47 +0000[diff] [blame]43- compiling without O2 issue
James Morrisb25f99e2001-11-24 22:59:16 +0000[diff] [blame]44- libipq runtime version, do before 1.2.5 [JM]
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]45
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]46FUTURE extensions:
Harald Welteb961e6b2001-05-05 00:01:55 +0000[diff] [blame]47- dealing with fragmented expectation-causes (i.e. DCC chat split
48 over two packets, etc.)
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]49- conntrack / nat failover [HW]
50- brainstorming about 2.5 conntrack code
51- netlink interface for conntrack manipulation from userspace [HW]
52- unified nfnetlink for queue,ulog,conntrack (and more?) (2.5 issue)
53
James Morris47a026d2001-11-30 10:55:10 +0000[diff] [blame^]54Userspace queuing for 2.5:
55- Integration with nfnetlink.
56- Multiple queues per protocol.
57- Netlink broadcast support.
58- Allow multiple reader/writers in userspace.
59- How to handle multiple protocols (e.g. use separate queue handlers
60 or a multiplexer like ipqmpd).
61- Peformance improvements: multipart messages, mmaped socket (possibly).
62- Simplify queuing logic, which is quite ugly at the moment. (BC suggested
63 removing logic from kernel).
64- Allow userspace to set nfmark.
65- Allow userspace to set queue length etc.
66- Possibly pass conntrack/NAT info to userspace with packet.
67
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]68======================================================================
Rusty Russellbdbcc1c2001-04-23 15:25:52 +0000[diff] [blame]69[RR] Paul 'Rusty' Russel <rusty@rustcorp.com.au>
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]70[MB] Marc Boucher <marc@mbsi.ca>
71[JM] James Morris <jmorris@intercode.com.au>
72[HW] Harald Welte <laforge@gnumonks.org>
Harald Welte302ca3e2001-02-07 16:27:20 +0000[diff] [blame]73[YU] Yon Uriarte <ukl2@rz.uni-karlsruhe.de>
Harald Welte518abc12001-02-18 16:12:45 +0000[diff] [blame]74[RJ] Jan Rekorajski <baggins@mimuw.edu.pl>
75[BB] Bastian Blank <bastianb@gmx.de>
James Morris90eca6a2001-05-03 11:53:27 +0000[diff] [blame]76[FM] Fabrice Marie <fabrice@celestix.com>
Harald Welte90ba5ec2001-05-03 21:10:24 +0000[diff] [blame]77[KA] Kiz-Szabo Andras <kisza@sch.bme.hu>
Harald Welteb4c648b2001-09-02 14:03:02 +0000[diff] [blame]78[BC] Brad Chapman <kakadu_croc@yahoo.com>