Gitiles
Code Review Sign In
gerrit-public.fairphone.software / fp2-dev / platform / external / iptables / 766113ac7457f4e14014d2accd5344a03bb6854f / . / TODO
blob: 4b176d2715aeac0508fcc4c67273ad736027199d [file] [log] [blame]
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]1TODO List for netfilter / iptables.
2Currently maintained by Harald Welte <laforge@gnumonks.org>
3
4Please inform me, if you want to work on any of the TODO items, so I
5can update this list and thus prevent two people doing the same work.
6
Harald Welte4a284e72003-04-13 10:24:59 +0000[diff] [blame]7CVS ID: $Id: TODO,v 1.69 2003/01/14 21:21:11 laforge Exp $
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]8
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]9IMPORTANT issues:
Harald Welte15a9a692002-02-19 09:14:27 +0000[diff] [blame]10- erroneously too-fast dropped conntrack for half-open TCP connections [JK]
Harald Welte42e283c2003-01-10 14:50:24 +0000[diff] [blame]11X wrong 'Out of window' error message from tcp-windowtracking [JK]
Harald Welte7f3f1302003-01-14 21:21:11 +0000[diff] [blame]12- --mac-source not working in FORWARD (manpage bug?) [BZ]
Harald Welte4a284e72003-04-13 10:24:59 +0000[diff] [blame]13X update manpages to include recently submitted extensions [BZ]
Harald Welte7f3f1302003-01-14 21:21:11 +0000[diff] [blame]14- locally bound udp port can still be used for MASQ/SNAT [BZ]
Harald Welte4a284e72003-04-13 10:24:59 +0000[diff] [blame]15X fix for ICMP DNAT info leak
Harald Welte7f3f1302003-01-14 21:21:11 +0000[diff] [blame]16- unaligned access of nulldevname during string match [BZ]
Harald Weltece6f9ef2002-08-18 22:19:26 +0000[diff] [blame]17- update documentation to reflect newnat
Harald Welte7f3f1302003-01-14 21:21:11 +0000[diff] [blame]18- ip6_tables not working on ultrasparc [BZ]
19 (20020912155314.GA20741@paradigm.rfc822.org)
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]20
Harald Welte4799c732002-02-25 09:27:31 +0000[diff] [blame]21TO BE INVESTIGATED:
Harald Welte7f3f1302003-01-14 21:21:11 +0000[diff] [blame]22- packet counters on sparc64 platform [BZ]
Harald Welte4799c732002-02-25 09:27:31 +0000[diff] [blame]23- ip_conntrack rmmod loop (sometimes, Yan's patch?)
24- conntrack helper not called for first packet (udp!)
25- different behaviour for first packet towards an l2-unresolved ip?
26
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]27NICE to have:
Harald Welte706e53c2002-07-08 06:17:33 +0000[diff] [blame]28- endianness wrt. unnamed initializers in conntrack helpers after
29 pptp-patch applied
Harald Welte42e283c2003-01-10 14:50:24 +0000[diff] [blame]30X make RPC conntrack work again
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]31- multicast connection tracking
Harald Welte7f3f1302003-01-14 21:21:11 +0000[diff] [blame]32- sysctl support for ftp-multi, irc-conntrack/nat, ftp-fxp [BZ]
Harald Welte42e283c2003-01-10 14:50:24 +0000[diff] [blame]33X integrate HOPLIMIT for ipv6 in patch-o-matic [HW]
Harald Welte4a284e72003-04-13 10:24:59 +0000[diff] [blame]34X u32 classifier (port from tc -> iptables) [YU]
Harald Welte15a9a692002-02-19 09:14:27 +0000[diff] [blame]35- port conntrack to IPv6 (code reuse?) [BC]
Harald Welte7f3f1302003-01-14 21:21:11 +0000[diff] [blame]36- ip_nat_ident module [BZ]
Harald Welte90ba5ec2001-05-03 21:10:24 +0000[diff] [blame]37- make iptables / ip6tables use the same codebase (as libiptc) [KA]
James Morris1cb4c052001-05-25 12:24:20 +0000[diff] [blame]38- libipq reentrancy [JM]
Harald Welte7f3f1302003-01-14 21:21:11 +0000[diff] [blame]39- compiling without O2 issue [BZ]
James Morrisb25f99e2001-11-24 22:59:16 +0000[diff] [blame]40- libipq runtime version, do before 1.2.5 [JM]
Harald Welte7f3f1302003-01-14 21:21:11 +0000[diff] [blame]41- add ICMP type-3-code-13 option to REJECT [BZ]
Harald Welte4a284e72003-04-13 10:24:59 +0000[diff] [blame]42X export list of matches/targets via proc-fs [BZ]
43X ip6tables mangle needs 'route_me_harder' equivalent [BZ]
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]44
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]45FUTURE extensions:
Harald Welteb961e6b2001-05-05 00:01:55 +0000[diff] [blame]46- dealing with fragmented expectation-causes (i.e. DCC chat split
47 over two packets, etc.)
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]48- conntrack / nat failover [HW]
49- brainstorming about 2.5 conntrack code
50- netlink interface for conntrack manipulation from userspace [HW]
51- unified nfnetlink for queue,ulog,conntrack (and more?) (2.5 issue)
52
James Morris47a026d2001-11-30 10:55:10 +0000[diff] [blame]53Userspace queuing for 2.5:
54- Integration with nfnetlink.
55- Multiple queues per protocol.
56- Netlink broadcast support.
57- Allow multiple reader/writers in userspace.
58- How to handle multiple protocols (e.g. use separate queue handlers
59 or a multiplexer like ipqmpd).
60- Peformance improvements: multipart messages, mmaped socket (possibly).
61- Simplify queuing logic, which is quite ugly at the moment. (BC suggested
62 removing logic from kernel).
63- Allow userspace to set nfmark.
64- Allow userspace to set queue length etc.
65- Possibly pass conntrack/NAT info to userspace with packet.
66
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]67======================================================================
Harald Welteb4c648b2001-09-02 14:03:02 +0000[diff] [blame]68[BC] Brad Chapman <kakadu_croc@yahoo.com>
Harald Welte15a9a692002-02-19 09:14:27 +0000[diff] [blame]69[HW] Harald Welte <laforge@gnumonks.org>
70[JK] Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
71[JM] James Morris <jmorris@intercode.com.au>
72[KA] Kiz-Szabo Andras <kisza@sch.bme.hu>
73[MB] Marc Boucher <marc@mbsi.ca>
74[RR] Paul 'Rusty' Russel <rusty@rustcorp.com.au>
75[YU] Yon Uriarte <ukl2@rz.uni-karlsruhe.de>
Harald Welte7f3f1302003-01-14 21:21:11 +0000[diff] [blame]76[BZ] Included in Bugzilla System