This is the main todo org mode file for the fwknop project
** COMPLETED
This bucket is for completed tasks.
+*** [client] Add --icmp-type and --icmp-code args
+ :CLOSED: <2012-10-11 Thu>
+ For SPA packets sent over ICMP via raw socket, allow the user to specify
+ the ICMP type and code.
*** [server] For Ubuntu systems, have fwknopd managed by upstart
:CLOSED: <2012-09-27 Thu>
fwknopd can benefit from upstart management and monitoring on Ubuntu
** [server] Add access variable to require particular IP's even when REQUIRE_SOURCE is used
The SOURCE variable only applies to the IP header. Add analogous filtering
for the allow IP that is encrypted within an SPA payload.
-** [client] Add --icmp-type and --icmp-code args
- For SPA packets sent over ICMP via raw socket, allow the user to specify
- the ICMP type and code.
** [client] Fix 'Could not set destination IP.' in hostname resolution in '-P icmp' mode
It seems that hostname resolution is not working when SPA packets are
spoofed. Here is the command line to trigger the problem: