Michael Rash
Michael Rash
Recent RHEL and CentOS distros have moved to firewalld. fwsnort needs to support this.
Add ipset support for Snort rules with large numbers of IP addresses. This feature was suggested by Imad Daou.
Use assert() to validate expected values wherever possible when a debug mode is enabled.
Very strong validation of C code can be achieved through the usage of the C Bounded Model Checker (CBMC): https://www.cprover.org/cprover-manual/cbmc/tutorial/ The fwknop project should investigate its use in addition to...
Need comprehensive IPFW\* variable documentation added to the fwknopd man page.
Add support to the iPhone client for the new HMAC modes.
Create an Amazon AMI with fwknopd loaded and a default configuration that supports SNAT+DNAT so that other Amazon VPC instances can be reached through this host with SPA.
This would introduce a dependency on the OpenSSL library, but some users may prefer this. Usage of OpenSSL would cause current crypto code to not be compiled in via autoconf...
We should likely include the author of each vulnerability. At least, my guess is that most people who are reporting a vulnerability at all to a CVE numbering authority wouldn't...
Gpg command_args should be configurable via the gpgdir command line.