summaryrefslogtreecommitdiffstats
path: root/contrib/ipfilter/todo
blob: ac41ba280b0259be44e540e1c59c1c1de0d054aa (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
BUGS:
-----
* fix "to <ifname>" bug on FreeBSD 2.2.8
fastroute works

===============================================================================
GENERAL:
--------

* use fr_tcpstate() with NAT code for increased NAT usage security or even
  fr_checkstate() - suspect this is not possible.

time permitting:

* load balancing across interfaces

* record buffering for TCP/UDP

* modular application proxying
on the way

* keep fragment information for state entries automatically.
done for NAT

* allow multiple ip addresses in a source route list for ipsend

* complete Linux port to implement all the IP Filter features
return-rst done, to/dup-to/fastroute remain - ip_forward() problems :-(

* add a flag to automate src spoofing

* ipfsync() should change IP#'s in current mappings as well as what's
  in rules.
 
* document bimap

* document NAT rule order processing

* add more docs
in progress

OpenPOWER on IntegriCloud