<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
<pkgmetadata>
	<maintainer type="project">
		<email>base-system@gentoo.org</email>
		<name>Gentoo Base System</name>
	</maintainer>
	<use>
		<flag name="conntrack">Build against <pkg>net-libs/libnetfilter_conntrack</pkg> when enables the connlabel matcher</flag>
		<flag name="netlink">Build against libnfnetlink which enables the nfnl_osf util</flag>
		<flag name="nftables">Support nftables kernel interface</flag>
		<flag name="pcap">Build against <pkg>net-libs/libpcap</pkg> which enables the nfbpf_compile util</flag>
	</use>
	<longdescription>
		iptables is the userspace command line program used to set up, maintain, and
		inspect the tables of IPv4 packet filter rules in the Linux kernel. It's a
		part of packet filtering framework which allows the stateless and stateful
		packet filtering, all kinds of network address and port translation, and is a
		flexible and extensible infrastructure with multiple layers of API's for 3rd
		party extensions. The iptables package also includes ip6tables. ip6tables is
		used for configuring the IPv6 packet filter.

		Note that some extensions (e.g. imq and l7filter) are not included into
		official kernel sources so you have to patch the sources before installation.
	</longdescription>
	<upstream>
		<remote-id type="cpe">cpe:/a:netfilter_core_team:iptables</remote-id>
	</upstream>
</pkgmetadata>
