Next time:
----------

 * Update the README file


 * Add support for a DHCP server


 * Maybe: add support for a proxy


 * Add a possibility to protect and just work properly with an
   arbitrary number of NICs, interior NICs first, then exterior.  Seems
	to be rather simple but must be written very carefully since a number
	of rules are based on stating NICs explicitly.  Another box to is
   needed to test this! :-)


 * Maybe:
   cat icmp.in  tcpudp.in  > connections.in
   cat icmp.out tcpudp.out > connections.out

   This will (i) reduce the number of configuration files and
   (ii) make rules more consistent.  ATM, there are rules for
   CUPS and NTP that are not at their best places.  To implement
   this, a major rewrite of the script will be needed.


 * Maybe: introduce {ext,fwd,int}/block.out -- a list of hosts
   to block connections to.


 * Maybe: add a granular check for client ports:

   tcpudp.in
   53   udp   4.5.6.7.8:900

   This will allow one to check source ports on a per machine basis.


 * Maybe: add an optional start-up parameter pointing to CONFDIR.  This
   will allow one to have several CONFDIRs used for different purposes.

--------------------------------------------------------------------------------
