Updated TODO list (removed items that were compled and/or deprecated).

git-svn-id: file:///home/mbr/svn/fwknop/trunk@208 510a4753-2344-4c79-9c09-4d669213fbeb
This commit is contained in:
Damien Stuart
2010-02-07 03:30:46 +00:00
parent 4373172289
commit d24b19ec94
2 changed files with 1 additions and 16 deletions
-15
View File
@@ -7,30 +7,15 @@ To whom it may concern, this is -*- outline -*- mode.
* The fwknop C client:
** Config file support.
** Command-line options and features ala fwknop Perl client:
*** Add NAT support.
*** Server Command support.
*** Server Auth support (maybe).
*** Client timeout support.
*** Last command support (and show last command).
*** Time offset from command line
*** Rand port and NAT rand port.
*** Add Resolve External IP (-R), --source-ip (-s), and --URL functionality.
** Man page
* The fwknopd server:
** Sniffer support to acquire SPA packet data ala the fwknopd Perl server:
*** Packets acquired via libpcap from a live networking interface.
*** Packets acquired via a file (supports the ulogd pcap writer).
*** User-defined pcap filters.
*** IP address exclusions/inclusions.
** Replay attack detection via storage and verification of SPA digests.
** SPA packet decryption:
*** Support of multiple encryption keys and access requirements (SOURCE stanzas).
*** GnuPG and Rijndael decryption.
*** Username restrictions.
** Firewall rule manipulation upon receipt of a valid SPA packet:
*** Initially manipulate firewall rules by executing the firewall binary directly.
*** Possibly use libdnet once we move past executing the firewall binary.
*** Should concentrate on iptables, but ipfw and pf support eventually.
*** User-defined firewall rule timeouts.
*** NAT rules to internal systems.
+1 -1
View File
@@ -50,7 +50,7 @@ fko_set_rand_value(fko_ctx_t ctx, const char *new_val)
#else
FILE *rfd;
struct timeval tv;
size_t amt_read;
size_t amt_read;
#endif
unsigned long seed;
char *tmp_buf;