| Server IP : 127.0.0.2 / Your IP : 52.14.238.102 Web Server : Apache/2.4.18 (Ubuntu) System : User : www-data ( ) PHP Version : 7.0.33-0ubuntu0.16.04.16 Disable Function : disk_free_space,disk_total_space,diskfreespace,dl,exec,fpaththru,getmyuid,getmypid,highlight_file,ignore_user_abord,leak,listen,link,opcache_get_configuration,opcache_get_status,passthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,php_uname,phpinfo,posix_ctermid,posix_getcwd,posix_getegid,posix_geteuid,posix_getgid,posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid,posix,_getppid,posix_getpwnam,posix_getpwuid,posix_getrlimit,posix_getsid,posix_getuid,posix_isatty,posix_kill,posix_mkfifo,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_times,posix_ttyname,posix_uname,pclose,popen,proc_open,proc_close,proc_get_status,proc_nice,proc_terminate,shell_exec,source,show_source,system,virtual MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/share/doc/libdumbnet1/ |
Upload File : |
ipfw2 on FreeBSD/5 (5.1 has pf)
optimize port wildcard rules for each firewall type - e.g. using ipf
FR_NONE, pf PF_OP_NONE, etc.
ipchains sleazy exec
audit addr_ntos() for non-zero'd host bits
make *_loop() prevent modification within loop, or modify only
post-iteration
prefix everything with dnet_*, maybe new API with common dnet_t handle?
more documentation and example code
ip-cooked.c: use RTM_RESOLVE for ip_lookup_mac() (GetBestInterface()?)
add a way to enable ip forwarding?
finish IPv6 support everywhere (fw, route, ip6, win32, etc.)
reimplement win32 fw (lost with laptop hd crash!@#$%)
NAT, ipsec interface?
maybe Checkpoint FW-1 support, via OPSEC (hrr)
--------+------+-----+-----+----+----+------+-------+-----+
| addr | arp | eth | fw | ip | intf | route | tun |
--------+------+-----+-----+----+----+------+-------+-----+
openbsd | | | | | | | | |
--------+------+-----+-----+----+----+------+-------+-----+
freebsd | | | | 1 | | | | ? |
--------+------+-----+-----+----+----+------+-------+-----+
netbsd | | | | | | | | ? |
--------+------+-----+-----+----+----+------+-------+-----+
linux | | | | | | | | |
--------+------+-----+-----+----+----+------+-------+-----+
solaris | | | | 7 | | | | ? |
--------+------+-----+-----+----+----+------+-------+-----+
macosx | | | | | | | | ? |
--------+------+-----+-----+----+----+------+-------+-----+
irix | | | | 7 | | | | - |
--------+------+-----+-----+----+----+------+-------+-----+
bsdi | | | | 7 | | | | - |
--------+------+-----+-----+----+----+------+-------+-----+
tru64 | | | | 7 | | | | - |
--------+------+-----+-----+----+----+------+-------+-----+
hp-ux | | | | 7 | | 3 | | - |
--------+------+-----+-----+----+----+------+-------+-----+
win32 | | | | | | 3 | | - |
--------+------+-----+-----+----+----+------+-------+-----+
unixware| | - | 2 | - | - | | 4 | - |
--------+------+-----+-----+----+----+------+-------+-----+
aix | | 5 | - | - | - | | 6 | - |
--------+------+-----+-----+----+----+------+-------+-----+
= works, tested 1 = ipfw support, but no ipfw2
? = untested 2 = eth_send doesn't work
- = unimplemented 3 = intf_set doesn't work
4 = route_loop only works
5 = arp_show doesn't work
6 = route_loop doesn't work
7 = IP Filter should work, but untested
arp-{bsd,ioctl} both b0rked on unixware
eth_send() doesn't allow src mac spoofing on MacOS X (no
BIOCSHDRCMPLT) without patch (http://slagheap.net/etherspoof/),
also b0rked on BSD/OS, says markus. not possible on Tru64?
no support for ICMP code in ipfw, therefore none in fw-ipfw.c
need reliable, legit HP-UX, Unixware, and AIX accounts with root
access to finish the ports to those platforms. i'd be happy to port to
other platforms also, given similar (temporary) access.
$Id: TODO 582 2005-02-14 21:56:59Z dugsong $