 - Masquerading firewall access support in FORWARD chain.
 - Doc links in email messages linking back to help docs on cipherdyne.org
 - Integrate with ssh and other clients.
 - Add ability to re-import an updated config with --HUP option.
 - Port client code to as many operating systems as possible.  Even Windows
   support perhaps?
 - Solve the key management issue by interfacing with various existing
   authentication systems (LDAP, Radius, Unix crypt(), etc.).
 - Update IPTables::ChainMgr to be able to manage a Netfilter ruleset on a
   remote system.
 - Client derived access timeouts.
 - Support GPG keys.
 - Reverse shell from fwknop server.
 - Verbose status information for fwknop server that shows stats on the
   number of authentication requests, currently allowed addresses, etc.
 - Debian package, and Gentoo release.
 - Re-implement p0f for the pcap modes, and use to pre-filter before
   attempting to decrypt (for better performance).
 - Ability to ignore IP addresses that have flooded fwknop with bogus or
   replayed packets.
 - External updating of web view into fwknop status information.  Then by
   allowing SSL encrypted sessions only with the webserver, a user can get
   a view into what is actually happening on the server side.
 - Tie in with pcap to detect when the first session actually established
   after allowing access through the packet filter, and then shutting the
   access off immediately after instead of requiring a timeout?
