freebsd-skq/contrib/ipfilter/todo

28 lines
822 B
Plaintext
Raw Normal View History

* automatically use the interface's IP# for NAT rather than any specific IP#
- Done. Use "0/32" as destination address/mask. Uses first interface IP#
set for an interface.
* use fr_tcpstate() with NAT code for increased NAT usage security or even
fr_checkstate()
* use minor devices for controlling access to alternate parts of IP Filter
such as filtering, accounting, state, NAT, etc.
* see if the Solaris2 and dynamic plumb/unplumb problem is solvable
time permitting:
* load balancing across interfaces
* record buffering for TCP/UDP
* modular application proxying
* invesitgate making logging better
* add reverse nat (similar to rdr) to map addresses going in both directions
* add 'tail' switch to ipmon
(this might just be some changes to rdr). In 1:1 relationships maybe make
it an option.