Things To Do

• Handle NAT of fragments.
• More infrastructure for NAT in userspace.
• Port more of the old masquerading per-protocol modules.
• Cool TCP load-sharing failover NAT.
• IPv6 packet filtering.
• Serious profiling on real traffic patterns.
• Actually use nfcache field for caching (fast forward & filter?)
• Gnome packet watcher.