| Harald Welte | af4ec45 | 2001-01-24 01:15:16 +0000 | [diff] [blame] | 1 | TODO List for netfilter / iptables. |
| 2 | Currently maintained by Harald Welte <laforge@gnumonks.org> |
| 3 | |
| 4 | Please inform me, if you want to work on any of the TODO items, so I |
| 5 | can update this list and thus prevent two people doing the same work. |
| 6 | |
| Harald Welte | 12005ca | 2003-11-10 18:11:11 +0000 | [diff] [blame] | 7 | CVS ID: $Id: TODO,v 1.71 2003/11/06 23:20:00 laforge Exp $ |
| Harald Welte | af4ec45 | 2001-01-24 01:15:16 +0000 | [diff] [blame] | 8 | |
| Harald Welte | 3666e0e | 2001-04-12 22:24:29 +0000 | [diff] [blame] | 9 | IMPORTANT issues: |
| Harald Welte | 15a9a69 | 2002-02-19 09:14:27 +0000 | [diff] [blame] | 10 | - erroneously too-fast dropped conntrack for half-open TCP connections [JK] |
| Harald Welte | 7f3f130 | 2003-01-14 21:21:11 +0000 | [diff] [blame] | 11 | - --mac-source not working in FORWARD (manpage bug?) [BZ] |
| Harald Welte | 7f3f130 | 2003-01-14 21:21:11 +0000 | [diff] [blame] | 12 | - locally bound udp port can still be used for MASQ/SNAT [BZ] |
| Harald Welte | 7f3f130 | 2003-01-14 21:21:11 +0000 | [diff] [blame] | 13 | - unaligned access of nulldevname during string match [BZ] |
| Harald Welte | 12005ca | 2003-11-10 18:11:11 +0000 | [diff] [blame] | 14 | - unaligned access in interface match (ip_tables core) |
| Harald Welte | ce6f9ef | 2002-08-18 22:19:26 +0000 | [diff] [blame] | 15 | - update documentation to reflect newnat |
| Harald Welte | 12005ca | 2003-11-10 18:11:11 +0000 | [diff] [blame] | 16 | - release iptables-1.3.0-test (with new libiptc for speedup) |
| 17 | - ipv6 ldp (igmp) and ndisc bypasses LOCAL_OUT hook |
| Harald Welte | af4ec45 | 2001-01-24 01:15:16 +0000 | [diff] [blame] | 18 | |
| Harald Welte | 4799c73 | 2002-02-25 09:27:31 +0000 | [diff] [blame] | 19 | TO BE INVESTIGATED: |
| Harald Welte | 7f3f130 | 2003-01-14 21:21:11 +0000 | [diff] [blame] | 20 | - packet counters on sparc64 platform [BZ] |
| Harald Welte | 4799c73 | 2002-02-25 09:27:31 +0000 | [diff] [blame] | 21 | - conntrack helper not called for first packet (udp!) |
| 22 | - different behaviour for first packet towards an l2-unresolved ip? |
| 23 | |
| Harald Welte | 3666e0e | 2001-04-12 22:24:29 +0000 | [diff] [blame] | 24 | NICE to have: |
| Harald Welte | 7f3f130 | 2003-01-14 21:21:11 +0000 | [diff] [blame] | 25 | - sysctl support for ftp-multi, irc-conntrack/nat, ftp-fxp [BZ] |
| Harald Welte | 12005ca | 2003-11-10 18:11:11 +0000 | [diff] [blame] | 26 | - port conntrack to IPv6 (code reuse?) |
| Harald Welte | 7f3f130 | 2003-01-14 21:21:11 +0000 | [diff] [blame] | 27 | - ip_nat_ident module [BZ] |
| Harald Welte | 90ba5ec | 2001-05-03 21:10:24 +0000 | [diff] [blame] | 28 | - make iptables / ip6tables use the same codebase (as libiptc) [KA] |
| James Morris | 1cb4c05 | 2001-05-25 12:24:20 +0000 | [diff] [blame] | 29 | - libipq reentrancy [JM] |
| Harald Welte | 7f3f130 | 2003-01-14 21:21:11 +0000 | [diff] [blame] | 30 | - compiling without O2 issue [BZ] |
| James Morris | b25f99e | 2001-11-24 22:59:16 +0000 | [diff] [blame] | 31 | - libipq runtime version, do before 1.2.5 [JM] |
| Harald Welte | 12005ca | 2003-11-10 18:11:11 +0000 | [diff] [blame] | 32 | - l3 independent ip_queue / ULOG (2.6) |
| 33 | - add support for IRC tracking in opposite direction |
| 34 | - Find mirrors for www.TLD.netfilter.org domains |
| 35 | - example section on homepage |
| 36 | - searchable mailinglist archives |
| 37 | - faq-o-matic system |
| Harald Welte | af4ec45 | 2001-01-24 01:15:16 +0000 | [diff] [blame] | 38 | |
| Harald Welte | 3666e0e | 2001-04-12 22:24:29 +0000 | [diff] [blame] | 39 | FUTURE extensions: |
| Harald Welte | b961e6b | 2001-05-05 00:01:55 +0000 | [diff] [blame] | 40 | - dealing with fragmented expectation-causes (i.e. DCC chat split |
| 41 | over two packets, etc.) |
| Harald Welte | 3666e0e | 2001-04-12 22:24:29 +0000 | [diff] [blame] | 42 | - conntrack / nat failover [HW] |
| Harald Welte | 3666e0e | 2001-04-12 22:24:29 +0000 | [diff] [blame] | 43 | - unified nfnetlink for queue,ulog,conntrack (and more?) (2.5 issue) |
| 44 | |
| James Morris | 47a026d | 2001-11-30 10:55:10 +0000 | [diff] [blame] | 45 | Userspace queuing for 2.5: |
| 46 | - Integration with nfnetlink. |
| 47 | - Multiple queues per protocol. |
| 48 | - Netlink broadcast support. |
| 49 | - Allow multiple reader/writers in userspace. |
| 50 | - How to handle multiple protocols (e.g. use separate queue handlers |
| 51 | or a multiplexer like ipqmpd). |
| 52 | - Peformance improvements: multipart messages, mmaped socket (possibly). |
| 53 | - Simplify queuing logic, which is quite ugly at the moment. (BC suggested |
| 54 | removing logic from kernel). |
| 55 | - Allow userspace to set nfmark. |
| 56 | - Allow userspace to set queue length etc. |
| 57 | - Possibly pass conntrack/NAT info to userspace with packet. |
| 58 | |
| Harald Welte | af4ec45 | 2001-01-24 01:15:16 +0000 | [diff] [blame] | 59 | ====================================================================== |
| Harald Welte | b4c648b | 2001-09-02 14:03:02 +0000 | [diff] [blame] | 60 | [BC] Brad Chapman <kakadu_croc@yahoo.com> |
| Harald Welte | 15a9a69 | 2002-02-19 09:14:27 +0000 | [diff] [blame] | 61 | [HW] Harald Welte <laforge@gnumonks.org> |
| 62 | [JK] Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> |
| 63 | [JM] James Morris <jmorris@intercode.com.au> |
| 64 | [KA] Kiz-Szabo Andras <kisza@sch.bme.hu> |
| Harald Welte | 15a9a69 | 2002-02-19 09:14:27 +0000 | [diff] [blame] | 65 | [RR] Paul 'Rusty' Russel <rusty@rustcorp.com.au> |
| Harald Welte | 7f3f130 | 2003-01-14 21:21:11 +0000 | [diff] [blame] | 66 | [BZ] Included in Bugzilla System |