Feature requests

From DD-WRT Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 09:06, 3 February 2008 (edit)
Akhalid (Talk | contribs)
(Generic)
← Previous diff
Revision as of 18:11, 15 February 2008 (edit) (undo)
Trailmug (Talk | contribs)
(Wireless - Add feature request)
Next diff →
Line 88: Line 88:
* A comments field for each MAC address in the Wireless MAC Filter list. This would allow users to list what each wireless device is. * A comments field for each MAC address in the Wireless MAC Filter list. This would allow users to list what each wireless device is.
 +
 +* Add support for changing Advanced Wireless Settings for devices with multiple radios (wl0, wl1..).
=Security= =Security=

Revision as of 18:11, 15 February 2008

Contents

Generic

  • Auto Upgrade Feature
  • More help and specific documentation and how-to's should be added also.
  • Ability to enable / disable ports on any given supported device
  • New WRT54G/S will no longer be compatible, why not sell equivilant hardware capable of performing like the WRT54G/S. Market it at schools and end users emphasizing the Spam, Virus and Content filtering features. (And make it plug and play. Too many linux distributions require the user to be knowledgable, and most home users are not).
  • Mail server or smtp server (easier) to send mail without the server of our ISP
    • Option to utilize SD Memory Card for storage of unsent SMTP, or undeleted POP3 emails.
    • Option for email address, domain/subdomains, or IP address or range blacklists.
  • Modular services and features: Make services like Kai a module that would be uploaded to the jffs partition if someone needed to use it. Reduce the avaliable "themes" in order to save space, and allow people to upload news ones to the jffs parition as needed.
  • To increase revenues, create services like "Spam", "Virus" and "Content" filtering that would rely on a central server (Since the wrt54g doesn't have the power to do such things), and charge a reasonable fee to use them (Essentially the wrt54g would redirect traffic through your servers depending on type of service). Especially web filtering (Such as p0rn etc.) Firewalls capable of doing this cost over 300$ and charge 100$ a year to filter. Its nothing more than a list of IP addresses that are used to lookup and block traffic depending on their destination.
  • A version that has both VoIP and VPN functionality. If this cannot possibly fit into 4? MB flash, good things to leave out would be gaming modules, hotspot support or even all of the wireless. Rationale is that wireless APs can be easily added further downstream, whereas the best place to put VoIP and VPN functions is at the "uppermost" network entry point.
  • Implement a simple reverse proxy (or similar capability) to allow multiple servers behind the router to share a single IP. This would eliminate a proxy server when only the reverse proxy is needed. Support for up to 5 servers would be adequate.
  • BEFSR41 and BEFSR81 support

Kernel

Networking

  • Basic embedded function of http(s) reverse proxy (configurable via GUI with optional basic rewrite rules) in order to offer a single http(s) network entry point for the router management interface (and related local network tools) and some other local network http sites (other routers, web servers etc). Having the single https (443) entry point should be very confortable for secure access from company firewalls.
  • Put some features to Separate Lan and WLan over web interface
  • Custom names associated with MAC addresses on MAC Filter (default to first host name if no value is specified)
  • VRRP support
  • MoBlock - PeerGuardian style IP Blocking
  • IPv6 enhancements : few small steps for coders, giant step for the internet !
    • Update all IPv4 fields to IP version agnostic field (1 single text field). For instance, in "Setup/BasicSetup" there is no reason Router IP can only be IPv4 ;-)
    • Update all IP mask field to a single field noting the bit mask (cf CIDR notation)
    • Update "Setup/Basic Setup/Network Setup/Network Address Server Settings (DHCP)" so that DHCPv6 statefull is also possible (radvd possible thru radvd ? or usage of new library like DHCPv6:Dibbler http://klub.com.pl/dhcpv6/ )
    • Update Setup/AdvancedRouting tab as Setup/AdvancedSetup (to balance with the "BasicSetup" tab)
    • Add a new section named "IPv6" in Setup/AdvancedSetup and move here all the ipv6 configuration related elements at this time located in Administration/Management/RouterManagement/Ipv6Support
    • Add a subsection to "IPv6" section that managing the "Tunnel Mode" with a combo :
      • None
      • Automatic : create a 6to4 anycast using the public ipv4 from the wan (see 6to4 anycast script ) and enable radv using the 6to4 Radvd default config)
      • Manual : create a 6to4 tunnel to a broker (xs26.net, sixxs.net, tb.ipv6.btexact.com ...). If this option is sellected, then 4 textfields are displayed for : EXTIPv4, TUNNELIPv6, ENDPOINTIPv4, ENDPOINTIPv6, so that the static tunnel startup script can be called.
    • Add Miredo client & server (details to be added)
  • Support to limit max bandwidth for a specific IP address / Range of IP addresses, or a MAC address.
  • PPPoE + DHCP at the same time
  • Add time adjustable QoS feature. Virgin Broadband in UK (the only cable provider which cable routers are used for) throttles bandwith speed between 4pm and 12pm. Thus QoS needs automatic adjustment between this time.
  • Guarantee a specific MAC address an adjustabe share of bandwidth such as VOIP device or comptuter.

Wireless

  • Replace simple 'Status/Wireless/Survey' with Wiviz (or make it an option). DONE *Eko
  • Timetable for switching on/off the WLAN function (for example during the night or during work hours). DONE *Eko
  • Script to switch WLAN on/off by pressing CISCO button DONE *Eko
  • Additional RADIUS server IPs on Wireless Security tab for failover when the primary server is not available (a total of 3 would be nice)
  • Unbridged Isolated Virtual Wireless VLANs (VWVLANs): Capability to create vwlans unbridged, different subnets, ip's, and have a gui to automatically do iptables.
  • A comments field for each MAC address in the Wireless MAC Filter list. This would allow users to list what each wireless device is.
  • Add support for changing Advanced Wireless Settings for devices with multiple radios (wl0, wl1..).

Security

  • Dynamic HTTP filtering using a blacklist or possibly a whitelist
  • Click-to-Blacklist feature in incoming/outgoing logs to prohibit return visits by IP port scanners
  • WHOIS lookup for IP addresses that show up in the incoming/outgoing logs to identify suspicious accesses
  • Option to deny trafic routing (LAN or WAN) from a specific IP/IP range/All IPs to another IP/IP range/All IPs with option of spcific port/range of ports/All ports.
  • Description in Wireless MAC Filter
  • Wired MAC filter to limit access to known hosts
  • Timeout feature for 'unknown' as well as TCP/UDP
  • GUI for sshd_dss_host_key, sshd_rsa_host_key and httpd certificate
  • Clamav to scan downloads

WebGUI

  • Soft switch off router from GUI
  • Fix for "MS SQL" L7 filter (The space keeps it from properly being added or displayed in the web interface)

Others

  • Change the "SPI Firewall" to a real, user-editable, iptables-based firewall.
  • When creating jffs include deleteable symbolic links to all existing web pages so we can modify/customize them, point "index" page to jffs from then on so that we can develop custom web pages without having to mess with startup scripts and all that. Make sure it's easy to allow shell script calls from web push buttons etc... People could then post their stuff for others to try and/or for you to include in next versions.
  • pocket browser friendly. i like setup my wireless using my pocketpc instead of taking a bulky laptop. but lots of page cant be configure from ms pocket internet explorer because of javascript stuffs. maybe i can choose a more friendly gui style that accessible from pocket internet explorer? (dont tell me to use the bulky, slow loading minimo. i use firefox on my desktop. but i wont use minimo.) ((Don't expect this necessarily. These machines are already low on available memory and you shouldn't be making drastic changes wirelessly anyway.))
  • "Add VOIP specific optimization options. Add a VOIP specific menu with its own submenus" Canukhed 00:50, 25 Mar 2006 (CET) to optimize VOIP and commercial VOIP services such as Vonage. Not just SIP options, but VOIP (Vonage type) specific. Such options should include enhancement of voice quality, enable a phone adapter (from specific port) to be VOIP only, etc.
  • easy htb/tc configurator or script generator (nbd from openwrt works on it)
  • more "Blocked Services" (at least 10). This was submitted a few times.
  • Spanning port/Monitor port
  • Built in Radius server with GUI frontend
  • Ability to customize the firmware with a GUI, Hence removing features you dont need. The GUI would be a lot easier to use than recompiling the firmware every time.
  • Similar to above, I've got a Linksys PAP2 device and it has seperate views for users and admins and passwords for both, it would be great for the admin to be able to choose which features are available for the users by using check boxes for instance, I would feel alot safer letting others port into my Wrt from the web.
  • The ability to check the disconnection logs, so that the user is able to see when the PPPoE (or any other connection) disconnects. If so, for how long it remained disconnected, and for how long it remained connected. History of IPs that you have been connected with to be logged as well would be helpful. Although adding this feature sounds like you need a storage device for the logs(like WRT350N), or there would be a limit on how much log could be saved. Still, it would be a real help if this feature is implemented, I check my router frequently.