Gitiles
Code Review Sign In
gerrit-public.fairphone.software / fp2-dev / platform / external / iptables / fa97236437d19e1e55dd011828c461469d78d295 / . / TODO
blob: cc5da2ef08a8321cc21f2ae9b386d009eced62aa [file] [log] [blame]
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]1TODO List for netfilter / iptables.
2Currently maintained by Harald Welte <laforge@gnumonks.org>
3
4Please inform me, if you want to work on any of the TODO items, so I
5can update this list and thus prevent two people doing the same work.
6
James Morrisdbd8a262001-09-21 11:59:23 +0000[diff] [blame]7CVS ID: $Id: TODO,v 1.46 2001/09/02 14:03:02 laforge Exp $
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]8
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]9IMPORTANT issues:
10- solution for nostate / notrack (we don't want to track specific conn's)
Harald Welte87d4be42001-07-05 06:26:37 +0000[diff] [blame]11- iptables-save/restore problems with log-level
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]12- multiple related connections [HW]
13- ip_conntrack rmmod loop (sometimes, Yan's patch?)
14- conntrack helper not called for first packet (udp!)
Harald Weltebb364e62001-07-31 21:35:18 +0000[diff] [blame]15- add support for correct SACK handling [HW]
Harald Welteb4c648b2001-09-02 14:03:02 +0000[diff] [blame]16- erroneously too-fast dropped conntrack for half-open TCP connections [HW]
Harald Welte9c63cd92001-07-23 02:18:48 +0000[diff] [blame]17X why is nat_helper's expect() function called for all helpers? [HW]
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]18X full tcp window tracking incompatibility with nat helpers [HW]
Harald Welte3445dfb2001-07-07 23:39:16 +0000[diff] [blame]19- mangle table should use all five netfilter hooks [BC]
Harald Welte90ba5ec2001-05-03 21:10:24 +0000[diff] [blame]20X merge EPRT / EPSV ftp stuff [RR] (reimplemented in ftp-fixes, included 2.4.4)
Harald Welte61b19892001-04-24 00:02:33 +0000[diff] [blame]21X runme error with IPv6 stuff! [HW]
22- wrong 'Out of window' error message from tcp-windowtracking [HW]
Harald Welte90ba5ec2001-05-03 21:10:24 +0000[diff] [blame]23X SMP conntrack race [RR] (ftp-fixes, included in 2.4.4)
Harald Welteb4c648b2001-09-02 14:03:02 +0000[diff] [blame]24X static compiling/linking of iptables (for router-on-a-disk) [HW]
Harald Welte9c63cd92001-07-23 02:18:48 +0000[diff] [blame]25X IPv6 testing (MARK, LOG, REJECT) [HW]
Harald Weltede1578f2001-05-23 23:07:33 +0000[diff] [blame]26x iptables-save doesn't work with eth+ style multiple IF stuff [HW]
27X reject-with on REJECT target doesn't work [HW]
Harald Welte9c63cd92001-07-23 02:18:48 +0000[diff] [blame]28X IPv6 REJECT target doesn't have extension plugin ?!?
Harald Weltede1578f2001-05-23 23:07:33 +0000[diff] [blame]29- colon inside prefix doesn't work
James Morrisd2b5c562001-07-23 00:28:56 +0000[diff] [blame]30X pending minor ip_queue updates [JM]
Harald Welte87d4be42001-07-05 06:26:37 +0000[diff] [blame]31- --mac-source not working in FORWARD (manpage bug?)
James Morrisd2b5c562001-07-23 00:28:56 +0000[diff] [blame]32- netfilter hooks should give error if same function registers twice [HW]
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]33
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]34NICE to have:
Harald Welte489b6032001-07-14 19:21:47 +0000[diff] [blame]35- make RPC conntrack work again
Harald Welte87d4be42001-07-05 06:26:37 +0000[diff] [blame]36- interface names in ipv6 can contain _ and -
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]37- multicast connection tracking
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]38- sysctl support for ftp-multi, irc-conntrack/nat, ftp-fxp
39- integrate HOPLIMIT for ipv6 in patch-o-matic [HW]
Harald Welte90ba5ec2001-05-03 21:10:24 +0000[diff] [blame]40X static 1:1 NAT (only ip address NAT in both directions) (NETMAP target)
Harald Welte302ca3e2001-02-07 16:27:20 +0000[diff] [blame]41- u32 classifier (port from tc -> iptables) [YU]
James Morris90eca6a2001-05-03 11:53:27 +0000[diff] [blame]42X pktlen match (not needed, when u32 available) [FM]
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]43- MARK match / target with boolean OR / AND (to use nfmark bitwise)
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]44- documentation for libiptc
Harald Welte518abc12001-02-18 16:12:45 +0000[diff] [blame]45- port conntrack to IPv6 (code reuse?) [BB]
46X port matches (owner, limit, multiport, owner) to IPv6 [RJ]
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]47- make patch-o-matic more generic (any subdir), and reversible
48- CONFIG_NF_IP_NAT_LOCAL
Harald Weltec67e5f82001-01-24 12:33:49 +0000[diff] [blame]49- fix and test the netfilter bridging stuff
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]50X integrate the ipt_NETLINK target from gianni@ecsc.co.uk [HW]
Harald Welte302ca3e2001-02-07 16:27:20 +0000[diff] [blame]51X integrate PSD target / port it as match [HW]
Harald Weltedd369152001-02-02 10:53:46 +0000[diff] [blame]52- various NAT performance optimizations possible! (which? ask HW)
James Morris90eca6a2001-05-03 11:53:27 +0000[diff] [blame]53- ip_nat_ident module [FM]
Harald Weltede6aaeb2001-03-26 18:06:04 +0000[diff] [blame]54- provide daily CVS snapshots via ftp [HW]
Harald Welte2ca59042001-02-28 11:15:01 +0000[diff] [blame]55- 10.1.2.3.4 is accepted as a valid IP address by iptables -s / -d ?
Harald Welte90ba5ec2001-05-03 21:10:24 +0000[diff] [blame]56- make iptables / ip6tables use the same codebase (as libiptc) [KA]
Harald Welte9c63cd92001-07-23 02:18:48 +0000[diff] [blame]57X string_to_number() does not work correctly for unsigned ints [JM]
Harald Weltefc32daf2001-05-26 20:31:59 +0000[diff] [blame]58- REJECT optionally generates port unreachable with faked SOURCE
James Morris1cb4c052001-05-25 12:24:20 +0000[diff] [blame]59- libipq reentrancy [JM]
James Morrisdbd8a262001-09-21 11:59:23 +0000[diff] [blame]60X libipq asynchronousness [Done by Joost Remijn]
Harald Welte489b6032001-07-14 19:21:47 +0000[diff] [blame]61- compiling without O2 issue
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]62
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]63FUTURE extensions:
Harald Welteb961e6b2001-05-05 00:01:55 +0000[diff] [blame]64- dealing with fragmented expectation-causes (i.e. DCC chat split
65 over two packets, etc.)
Harald Welte3666e0e2001-04-12 22:24:29 +0000[diff] [blame]66- conntrack / nat failover [HW]
67- brainstorming about 2.5 conntrack code
68- netlink interface for conntrack manipulation from userspace [HW]
69- unified nfnetlink for queue,ulog,conntrack (and more?) (2.5 issue)
70
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]71======================================================================
Rusty Russellbdbcc1c2001-04-23 15:25:52 +0000[diff] [blame]72[RR] Paul 'Rusty' Russel <rusty@rustcorp.com.au>
Harald Welteaf4ec452001-01-24 01:15:16 +0000[diff] [blame]73[MB] Marc Boucher <marc@mbsi.ca>
74[JM] James Morris <jmorris@intercode.com.au>
75[HW] Harald Welte <laforge@gnumonks.org>
Harald Welte302ca3e2001-02-07 16:27:20 +0000[diff] [blame]76[YU] Yon Uriarte <ukl2@rz.uni-karlsruhe.de>
Harald Welte518abc12001-02-18 16:12:45 +0000[diff] [blame]77[RJ] Jan Rekorajski <baggins@mimuw.edu.pl>
78[BB] Bastian Blank <bastianb@gmx.de>
James Morris90eca6a2001-05-03 11:53:27 +0000[diff] [blame]79[FM] Fabrice Marie <fabrice@celestix.com>
Harald Welte90ba5ec2001-05-03 21:10:24 +0000[diff] [blame]80[KA] Kiz-Szabo Andras <kisza@sch.bme.hu>
Harald Welteb4c648b2001-09-02 14:03:02 +0000[diff] [blame]81[BC] Brad Chapman <kakadu_croc@yahoo.com>