Adding metadata

188 files changed, 0 insertions, 10744 deletions

diff --git a/net-firewall/arno-iptables-firewall/Manifest b/net-firewall/arno-iptables-firewall/Manifest
deleted file mode 100644
index 5756b80ab52a..000000000000
--- a/net-firewall/arno-iptables-firewall/Manifest
+++ /dev/null
@@ -1,2 +0,0 @@
-DIST arno-iptables-firewall-2.1.1a.tar.gz 141116 BLAKE2B db6a4b5bfc94d69bbc8f6eb6b15485ae030e62ff26b00aa88e0426fdc711dadfc641a3a3fe55ce1c35ab61900f2d2235fca3d7359879d7255e44c3b19f8bf13f SHA512 1af2bd82434a530d44d2a511ce7416d2c5387ae1fe215e0db47cb72d6517a64c7d4366bfed33e0446d48ed403d55b09306d34aa8528d666f088d9557632b5756
-DIST arno-iptables-firewall-2.1.2a.tar.gz 141918 BLAKE2B a70e218ba98a8683aacf28a72494b237925cb343bf55933944244d1927b5202e30dbcb46673d8ac3d7f084208270ae407f8eeb6155a7bfd4c6aecf2a9a392c52 SHA512 cabdcc23da99593f32638c1467c20e59b6c13b64e37863e2293cde945ad5cdacb330521abc917813de4e8e1224fe44735dbb71edc56dcb821c3bd8a1bef01604
diff --git a/net-firewall/arno-iptables-firewall/arno-iptables-firewall-2.1.1a.ebuild b/net-firewall/arno-iptables-firewall/arno-iptables-firewall-2.1.1a.ebuild
deleted file mode 100644
index 4a047feb32a5..000000000000
--- a/net-firewall/arno-iptables-firewall/arno-iptables-firewall-2.1.1a.ebuild
+++ /dev/null
@@ -1,107 +0,0 @@
-# Copyright 1999-2023 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit readme.gentoo-r1 systemd
-
-DESCRIPTION="Arno's iptables firewall script"
-HOMEPAGE="https://rocky.eld.leidenuniv.nl https://github.com/arno-iptables-firewall/aif"
-
-SRC_URI="https://github.com/${PN}/aif/archive/${PV}.tar.gz -> ${P}.tar.gz"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="amd64 x86"
-IUSE="+plugins rsyslog"
-
-RDEPEND="
-	net-firewall/ipset
-	net-firewall/iptables
-	sys-apps/coreutils
-	sys-apps/iproute2
-	plugins? ( net-dns/bind-tools )
-"
-
-S="${WORKDIR}/aif-${PV}"
-
-DISABLE_AUTOFORMATTING="yes"
-DOC_CONTENTS="You will need to configure /etc/${PN}/firewall.conf
-before using this package. To start the script, run:
-
-/etc/init.d/${PN} start (for OpenRC)
-systemctl start ${PN} (for systemd)
-
-If you want to start this script at boot, run:
-
-rc-update add ${PN} default (for OpenRC)
-systemctl enable ${PN} (for systemd)"
-
-src_prepare() {
-	sed -i -e 's:/usr/local/share/:/usr/libexec/:' \
-		bin/"${PN}" share/"${PN}"/environment || die "Sed failed!"
-	sed -i -e 's:/usr/local/sbin/:/usr/sbin/:' \
-		lib/systemd/system/"${PN}.service" || die "Sed failed!"
-	eapply_user
-}
-
-src_install() {
-	insinto /etc/"${PN}"
-	doins etc/"${PN}"/firewall.conf
-	doins etc/"${PN}"/custom-rules
-
-	doinitd "${FILESDIR}/${PN}"
-	systemd_dounit lib/systemd/system/"${PN}.service"
-
-	dobin bin/arno-fwfilter
-	dosbin bin/"${PN}"
-
-	insinto /usr/libexec/"${PN}"
-	doins share/"${PN}"/environment
-
-	exeinto /usr/libexec/"${PN}"
-	doexe share/"${PN}"/aif-job-execute
-	doexe share/"${PN}"/aif-job-processor
-
-	insinto /etc/logrotate.d
-	doins etc/logrotate.d/"${PN}"
-
-	dodoc CHANGELOG README
-	readme.gentoo_create_doc
-
-	if use plugins
-	then
-		insinto /etc/"${PN}"/plugins
-		doins etc/"${PN}"/plugins/*
-
-		insinto /usr/libexec/"${PN}"/plugins
-		doins share/"${PN}"/plugins/*.plugin
-		doins share/"${PN}"/plugins/adaptive-ban-helper
-		doins share/"${PN}"/plugins/dyndns-host-open-helper
-		doins share/"${PN}"/plugins/parasitic-net-helper
-		doins share/"${PN}"/plugins/traffic-accounting-helper
-
-		exeinto /usr/libexec/"${PN}"/plugins
-		doexe share/"${PN}"/plugins/traffic-accounting-log-rotate
-		doexe share/"${PN}"/plugins/traffic-accounting-show
-
-		docinto plugins
-		dodoc share/"${PN}"/plugins/*.CHANGELOG
-	fi
-
-	if use rsyslog
-	then
-		insinto /etc/rsyslog.d
-		newins etc/rsyslog.d/"${PN}".conf 20-"${PN}".conf
-	fi
-
-	doman share/man/man1/arno-fwfilter.1 \
-		share/man/man8/"${PN}".8
-}
-
-pkg_postinst() {
-	ewarn "When you stop this script, all firewall rules are flushed!"
-	ewarn "Make sure to not use multiple firewall scripts simultaneously"
-	ewarn "unless you know what you are doing!"
-	readme.gentoo_print_elog
-}
diff --git a/net-firewall/arno-iptables-firewall/arno-iptables-firewall-2.1.2a.ebuild b/net-firewall/arno-iptables-firewall/arno-iptables-firewall-2.1.2a.ebuild
deleted file mode 100644
index e024ae246af7..000000000000
--- a/net-firewall/arno-iptables-firewall/arno-iptables-firewall-2.1.2a.ebuild
+++ /dev/null
@@ -1,107 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit readme.gentoo-r1 systemd
-
-DESCRIPTION="Arno's iptables firewall script"
-HOMEPAGE="https://rocky.eld.leidenuniv.nl https://github.com/arno-iptables-firewall/aif"
-
-SRC_URI="https://github.com/${PN}/aif/archive/${PV}.tar.gz -> ${P}.tar.gz"
-
-S="${WORKDIR}/aif-${PV}"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="amd64 x86"
-IUSE="+plugins rsyslog"
-
-RDEPEND="
-	net-firewall/ipset
-	net-firewall/iptables
-	sys-apps/coreutils
-	sys-apps/iproute2
-	plugins? ( net-dns/bind-tools )
-"
-
-DISABLE_AUTOFORMATTING="yes"
-DOC_CONTENTS="You will need to configure /etc/${PN}/firewall.conf
-before using this package. To start the script, run:
-
-/etc/init.d/${PN} start (for OpenRC)
-systemctl start ${PN} (for systemd)
-
-If you want to start this script at boot, run:
-
-rc-update add ${PN} default (for OpenRC)
-systemctl enable ${PN} (for systemd)"
-
-src_prepare() {
-	sed -i -e 's:/usr/local/share/:/usr/libexec/:' \
-		bin/"${PN}" share/"${PN}"/environment || die "Sed failed!"
-	sed -i -e 's:/usr/local/sbin/:/usr/sbin/:' \
-		lib/systemd/system/"${PN}.service" || die "Sed failed!"
-	eapply_user
-}
-
-src_install() {
-	insinto /etc/"${PN}"
-	doins etc/"${PN}"/firewall.conf
-	doins etc/"${PN}"/custom-rules
-
-	doinitd "${FILESDIR}/${PN}"
-	systemd_dounit lib/systemd/system/"${PN}.service"
-
-	dobin bin/arno-fwfilter
-	dosbin bin/"${PN}"
-
-	insinto /usr/libexec/"${PN}"
-	doins share/"${PN}"/environment
-
-	exeinto /usr/libexec/"${PN}"
-	doexe share/"${PN}"/aif-job-execute
-	doexe share/"${PN}"/aif-job-processor
-
-	insinto /etc/logrotate.d
-	doins etc/logrotate.d/"${PN}"
-
-	dodoc CHANGELOG README
-	readme.gentoo_create_doc
-
-	if use plugins
-	then
-		insinto /etc/"${PN}"/plugins
-		doins etc/"${PN}"/plugins/*
-
-		insinto /usr/libexec/"${PN}"/plugins
-		doins share/"${PN}"/plugins/*.plugin
-		doins share/"${PN}"/plugins/adaptive-ban-helper
-		doins share/"${PN}"/plugins/dyndns-host-open-helper
-		doins share/"${PN}"/plugins/parasitic-net-helper
-		doins share/"${PN}"/plugins/traffic-accounting-helper
-
-		exeinto /usr/libexec/"${PN}"/plugins
-		doexe share/"${PN}"/plugins/traffic-accounting-log-rotate
-		doexe share/"${PN}"/plugins/traffic-accounting-show
-
-		docinto plugins
-		dodoc share/"${PN}"/plugins/*.CHANGELOG
-	fi
-
-	if use rsyslog
-	then
-		insinto /etc/rsyslog.d
-		newins etc/rsyslog.d/"${PN}".conf 20-"${PN}".conf
-	fi
-
-	doman share/man/man1/arno-fwfilter.1 \
-		share/man/man8/"${PN}".8
-}
-
-pkg_postinst() {
-	ewarn "When you stop this script, all firewall rules are flushed!"
-	ewarn "Make sure to not use multiple firewall scripts simultaneously"
-	ewarn "unless you know what you are doing!"
-	readme.gentoo_print_elog
-}
diff --git a/net-firewall/arno-iptables-firewall/files/arno-iptables-firewall b/net-firewall/arno-iptables-firewall/files/arno-iptables-firewall
deleted file mode 100644
index 40e32a9d8de0..000000000000
--- a/net-firewall/arno-iptables-firewall/files/arno-iptables-firewall
+++ /dev/null
@@ -1,27 +0,0 @@
-#!/sbin/openrc-run
-command=/usr/sbin/arno-iptables-firewall
-description="Single- & multi-homed firewall script with DSL/ADSL support"
-
-extra_started_commands="reload"
-description_reload="Reload blocked hosts (blackhole) file"
-
-depend() {
-  before net
-  use logger
-}
-
-start() {
-  ${command} start
-}
-
-stop() {
-  ${command} stop
-}
-
-restart() {
-  ${command} restart
-}
-
-reload() {
-  ${command} force-reload
-}
diff --git a/net-firewall/arno-iptables-firewall/metadata.xml b/net-firewall/arno-iptables-firewall/metadata.xml
deleted file mode 100644
index 918260b2dee8..000000000000
--- a/net-firewall/arno-iptables-firewall/metadata.xml
+++ /dev/null
@@ -1,18 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="person" proxied="yes">
-    <email>erkiferenc@gmail.com</email>
-    <name>Ferenc Erki</name>
-  </maintainer>
-  <maintainer type="project" proxied="proxy">
-    <email>proxy-maint@gentoo.org</email>
-    <name>Proxy Maintainers</name>
-  </maintainer>
-  <use>
-    <flag name="plugins">Install optional plugins</flag>
-    <flag name="rsyslog">Install configuration snippet for <pkg>app-admin/rsyslog</pkg>
-    </flag>
-  </use>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/arptables/Manifest b/net-firewall/arptables/Manifest
deleted file mode 100644
index 48c44cf1a70a..000000000000
--- a/net-firewall/arptables/Manifest
+++ /dev/null
@@ -1,2 +0,0 @@
-DIST arptables-0.0.5.tar.gz 52247 BLAKE2B 860aac1af315f188ecb7f17956f9225c2a9ec007882d102be8edc9fecc9400928f4200e95283f0ecc27c4c3ae0b409887445ed79a330cef2e2d00444db83c01f SHA512 fe7f909b45a1bdc435a8307352fe2dc9c292bb7c6cf4a4d13cc2728f447b3da14a07a4dd6dc25b7872895e4e26561681f1fed25ce517102ae762701bcbcbf104
-DIST arptables-0.0.5.tar.gz.sig 590 BLAKE2B 6e993d990a2e127cbc94059086205961705a72836d685d6186d6984ae94b004534180c48aaf1d814f37e84552c2b1c1d5e0f42468fc14e579957b04913288f18 SHA512 241e55be102cc58d33c7a236b9d015601463ad4b41087b5a7e749cd3896b68e0b11da51344df87f2cfa1dff18c292883e2f4b082c561018de9c1b17122548b72
diff --git a/net-firewall/arptables/arptables-0.0.5-r2.ebuild b/net-firewall/arptables/arptables-0.0.5-r2.ebuild
deleted file mode 100644
index 2d59ff04c263..000000000000
--- a/net-firewall/arptables/arptables-0.0.5-r2.ebuild
+++ /dev/null
@@ -1,61 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=7
-
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit toolchain-funcs verify-sig
-
-DESCRIPTION="Set up, maintain, and inspect the tables of ARP rules in the Linux kernel"
-HOMEPAGE="https://ebtables.netfilter.org"
-SRC_URI="
-	https://ftp.netfilter.org/pub/${PN}/${P}.tar.gz
-	verify-sig? ( https://ftp.netfilter.org/pub/${PN}/${P}.tar.gz.sig )
-"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="amd64 ppc x86"
-
-BDEPEND="
-	>=app-eselect/eselect-iptables-20211203
-	verify-sig? ( sec-keys/openpgp-keys-netfilter )
-"
-RDEPEND="${BDEPEND}"
-
-src_compile() {
-	# -O0 does not work and at least -O2 is required, bug #240752
-	emake CC="$(tc-getCC)" COPT_FLAGS="-O2 ${CFLAGS//-O0/-O2}"
-	sed -e 's:__EXEC_PATH__:/sbin:g' \
-		-i arptables-save arptables-restore || die "sed failed"
-}
-
-src_install() {
-	emake \
-		PREFIX="${ED}"/ \
-		LIBDIR="${ED}/$(get_libdir)" \
-		SYSCONFIGDIR="${ED}"/etc \
-		MANDIR="${ED}"/usr/share/man \
-		install
-
-	newman arptables-legacy.8 arptables.8
-}
-
-pkg_postinst() {
-	if ! eselect arptables show &>/dev/null; then
-		elog "Current arptables implementation is unset, setting to arptables-legacy"
-		eselect arptables set arptables-legacy
-	fi
-
-	eselect arptables show
-}
-
-pkg_prerm() {
-	if [[ -z ${REPLACED_BY_VERSION} ]] && has_version 'net-firewall/iptables[nftables]'; then
-		elog "Resetting arptables symlinks to xtables-nft-multi before removal"
-		eselect arptables set xtables-nft-multi
-	else
-		elog "Unsetting arptables symlinks before removal"
-		eselect arptables unset
-	fi
-}
diff --git a/net-firewall/arptables/metadata.xml b/net-firewall/arptables/metadata.xml
deleted file mode 100644
index f308c62eb267..000000000000
--- a/net-firewall/arptables/metadata.xml
+++ /dev/null
@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="project">
-    <email>base-system@gentoo.org</email>
-    <name>Gentoo Base System</name>
-  </maintainer>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/bpfilter/Manifest b/net-firewall/bpfilter/Manifest
deleted file mode 100644
index 3ba74db9eb8c..000000000000
--- a/net-firewall/bpfilter/Manifest
+++ /dev/null
@@ -1,2 +0,0 @@
-DIST bpfilter-0.5.2.tar.gz 2548282 BLAKE2B 5e91dffd89f6bd4c336a2862b4842563190a4362473e27ed5835c1f81163e9c9af8af991c831f6878ebae6cf47313a872d280506a6000dc0251209644611239b SHA512 4e841f8df6ab77fc9e199c0828018f4dfb89923aab429b7b9854b4abf04fa540b4fabf26fe7b40b53af737d9c72d8e115ad6bb283eabcade7a4a381fce3694f2
-DIST bpfilter-0.6.0.tar.gz 2664103 BLAKE2B c3cab8a6b50a06e5c8a246fdb7198813fbb405ae128b0398e5806561d93f495b5a982d29f0c7df49556bc635751d8456e3062dfbe5f1026f4ff27fba250bbe75 SHA512 d270ea1b328d82052294133597ef3fd253ff6f6488e896515165250e4d7772fa1a83a36cea4d5bacc0cbbb74f842e850b18f3dadbe0bd300b21e7ce2e7be777a
diff --git a/net-firewall/bpfilter/bpfilter-0.5.2.ebuild b/net-firewall/bpfilter/bpfilter-0.5.2.ebuild
deleted file mode 100644
index 25c790e1727e..000000000000
--- a/net-firewall/bpfilter/bpfilter-0.5.2.ebuild
+++ /dev/null
@@ -1,113 +0,0 @@
-# Copyright 2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-PYTHON_COMPAT=( python3_{13..14} )
-inherit python-any-r1 cmake
-
-DESCRIPTION="BPF-based packet filtering framework"
-HOMEPAGE="
-	https://bpfilter.io/
-	https://github.com/facebook/bpfilter
-"
-SRC_URI="https://github.com/facebook/bpfilter/archive/refs/tags/v${PV}.tar.gz -> ${P}.tar.gz"
-
-LICENSE="GPL-2+"
-SLOT="0/0"
-KEYWORDS="~amd64"
-IUSE="doc test"
-
-RESTRICT="!test? ( test )"
-
-# tests need root access
-RESTRICT+=" test"
-
-DEPEND="
-	dev-libs/libbpf:=
-	dev-libs/libnl:3=
-	test? (
-		dev-util/cmocka
-	)
-"
-RDEPEND="${DEPEND}"
-BDEPEND="
-	sys-devel/bison
-	sys-devel/flex
-	doc? (
-		app-text/doxygen
-		$(python_gen_any_dep '
-			dev-python/sphinx[${PYTHON_USEDEP}]
-			dev-python/linuxdoc[${PYTHON_USEDEP}]
-			dev-python/breathe[${PYTHON_USEDEP}]
-			dev-python/furo[${PYTHON_USEDEP}]
-		')
-	)
-	test? (
-		$(python_gen_any_dep '
-			net-analyzer/scapy[${PYTHON_USEDEP}]
-		')
-	)
-"
-
-PATCHES=(
-	"${FILESDIR}/bpfilter-0.5.0-no-coverage.patch"
-)
-
-DOCS=(
-	CONTRIBUTING.md
-	README.md
-)
-
-pkg_setup() {
-	(use test || use doc) && python-any-r1_pkg_setup
-}
-
-python_check_deps() {
-	local -a atoms
-	if use doc; then
-		python_has_version \
-			"dev-python/sphinx[${PYTHON_USEDEP}]" \
-			"dev-python/breathe[${PYTHON_USEDEP}]" \
-			"dev-python/linuxdoc[${PYTHON_USEDEP}]" \
-			"dev-python/furo[${PYTHON_USEDEP}]" \
-		|| return
-	fi
-	if use test; then
-		python_has_version \
-			"net-analyzer/scapy[${PYTHON_USEDEP}]" \
-		|| return
-	fi
-}
-
-src_prepare() {
-	sed -e '/get_version_from_git/ d' -i CMakeLists.txt || die
-	cmake_src_prepare
-}
-
-src_configure() {
-	local CMAKE_BUILD_TYPE=release
-	local -a mycmakeargs=(
-		-DNO_CHECKS=ON
-		-DNO_BENCHMARKS=ON
-		-DDEFAULT_PROJECT_VERSION="${PV}"
-		-DNO_DOCS=$(usex doc 'OFF' 'ON')
-		-DNO_TESTS=$(usex test 'OFF' 'ON')
-	)
-	cmake_src_configure
-}
-
-src_compile() {
-	cmake_src_compile
-	use doc && cmake_build doc
-}
-
-src_test() {
-	cmake_src_test
-	cmake_build e2e || die "tests failed"
-}
-
-src_install() {
-	cmake_src_install
-	use doc && dodoc -r "${BUILD_DIR}/doc/"{ht,x}ml
-}
diff --git a/net-firewall/bpfilter/bpfilter-0.6.0.ebuild b/net-firewall/bpfilter/bpfilter-0.6.0.ebuild
deleted file mode 100644
index 882058045d84..000000000000
--- a/net-firewall/bpfilter/bpfilter-0.6.0.ebuild
+++ /dev/null
@@ -1,113 +0,0 @@
-# Copyright 2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-PYTHON_COMPAT=( python3_{13..14} )
-inherit python-any-r1 cmake
-
-DESCRIPTION="BPF-based packet filtering framework"
-HOMEPAGE="
-	https://bpfilter.io/
-	https://github.com/facebook/bpfilter
-"
-SRC_URI="https://github.com/facebook/bpfilter/archive/refs/tags/v${PV}.tar.gz -> ${P}.tar.gz"
-
-LICENSE="GPL-2+"
-SLOT="0/0"
-KEYWORDS="~amd64"
-IUSE="doc test"
-
-RESTRICT="!test? ( test )"
-
-# tests need root access
-RESTRICT+=" test"
-
-DEPEND="
-	dev-libs/libbpf:=
-	dev-libs/libnl:3=
-	test? (
-		dev-util/cmocka
-	)
-"
-RDEPEND="${DEPEND}"
-BDEPEND="
-	sys-devel/bison
-	sys-devel/flex
-	doc? (
-		app-text/doxygen
-		$(python_gen_any_dep '
-			dev-python/sphinx[${PYTHON_USEDEP}]
-			dev-python/linuxdoc[${PYTHON_USEDEP}]
-			dev-python/breathe[${PYTHON_USEDEP}]
-			dev-python/furo[${PYTHON_USEDEP}]
-		')
-	)
-	test? (
-		$(python_gen_any_dep '
-			net-analyzer/scapy[${PYTHON_USEDEP}]
-		')
-	)
-"
-
-PATCHES=(
-	"${FILESDIR}/bpfilter-0.6.0-no-coverage.patch"
-)
-
-DOCS=(
-	CONTRIBUTING.md
-	README.md
-)
-
-pkg_setup() {
-	(use test || use doc) && python-any-r1_pkg_setup
-}
-
-python_check_deps() {
-	local -a atoms
-	if use doc; then
-		python_has_version \
-			"dev-python/sphinx[${PYTHON_USEDEP}]" \
-			"dev-python/breathe[${PYTHON_USEDEP}]" \
-			"dev-python/linuxdoc[${PYTHON_USEDEP}]" \
-			"dev-python/furo[${PYTHON_USEDEP}]" \
-		|| return
-	fi
-	if use test; then
-		python_has_version \
-			"net-analyzer/scapy[${PYTHON_USEDEP}]" \
-		|| return
-	fi
-}
-
-src_prepare() {
-	sed -e '/get_version_from_git/ d' -i CMakeLists.txt || die
-	cmake_src_prepare
-}
-
-src_configure() {
-	local CMAKE_BUILD_TYPE=release
-	local -a mycmakeargs=(
-		-DNO_CHECKS=ON
-		-DNO_BENCHMARKS=ON
-		-DDEFAULT_PROJECT_VERSION="${PV}"
-		-DNO_DOCS=$(usex doc 'OFF' 'ON')
-		-DNO_TESTS=$(usex test 'OFF' 'ON')
-	)
-	cmake_src_configure
-}
-
-src_compile() {
-	cmake_src_compile
-	use doc && cmake_build doc
-}
-
-src_test() {
-	cmake_src_test
-	cmake_build e2e || die "tests failed"
-}
-
-src_install() {
-	cmake_src_install
-	use doc && dodoc -r "${BUILD_DIR}/doc/"{ht,x}ml
-}
diff --git a/net-firewall/bpfilter/files/bpfilter-0.5.0-no-coverage.patch b/net-firewall/bpfilter/files/bpfilter-0.5.0-no-coverage.patch
deleted file mode 100644
index c9c5f53c0929..000000000000
--- a/net-firewall/bpfilter/files/bpfilter-0.5.0-no-coverage.patch
+++ /dev/null
@@ -1,74 +0,0 @@
-diff --git a/doc/CMakeLists.txt b/doc/CMakeLists.txt
-index 6269787..9566e6b 100644
---- a/doc/CMakeLists.txt
-+++ b/doc/CMakeLists.txt
-@@ -36,7 +36,6 @@
- #]]
- 
- find_package(Doxygen REQUIRED)
--find_program(GENHTML_BIN genhtml REQUIRED)
- find_program(SPHINX_BIN sphinx-build REQUIRED)
- 
- file(GLOB_RECURSE bf_srcs
-@@ -114,10 +113,6 @@ add_custom_command(
- 	# Update the modification time of the documentation's index, so the
- 	# benchmark report will be generated (as external/benchmarks/index.html is
- 	# now out-of-date).
--	COMMAND
--		${CMAKE_COMMAND}
--			-E touch
--			${CMAKE_CURRENT_BINARY_DIR}/html/external/benchmarks/index.html
- 	DEPENDS
- 		${CMAKE_CURRENT_BINARY_DIR}/conf.py
- 		${CMAKE_CURRENT_BINARY_DIR}/xml/index.xml
-@@ -127,36 +122,7 @@ add_custom_command(
- 	COMMENT "Generating the documentation"
- )
- 
--add_custom_command(
--	COMMAND
--		${CMAKE_CURRENT_SOURCE_DIR}/benchreport
--			--sources ${CMAKE_SOURCE_DIR}
--			--results ${CMAKE_BINARY_DIR}/output/benchmarks
--			--template ${CMAKE_CURRENT_SOURCE_DIR}/benchmarks.html.template
--			--output ${CMAKE_CURRENT_BINARY_DIR}/html/external/benchmarks/index.html
--	DEPENDS
--		${CMAKE_CURRENT_SOURCE_DIR}/benchreport
--		${CMAKE_CURRENT_BINARY_DIR}/html/index.html
--		${CMAKE_CURRENT_SOURCE_DIR}/benchmarks.html.template
--	OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/html/external/benchmarks/index.html
--	COMMENT "Generate the benchmarks summary"
--)
--
--add_custom_command(
--	COMMAND
--		${CMAKE_CURRENT_SOURCE_DIR}/covreport
--			--genhtml ${GENHTML_BIN}
--			--tracefile ${CMAKE_BINARY_DIR}/output/tests/lcov.out
--			--output ${CMAKE_CURRENT_BINARY_DIR}/html/external/coverage
--	DEPENDS
--		${CMAKE_CURRENT_SOURCE_DIR}/covreport
--		${CMAKE_CURRENT_BINARY_DIR}/html/index.html
--	OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/html/external/coverage/index.html
--	COMMENT "Generate the coverage report"
--)
--
- add_custom_target(doc
- 	DEPENDS
--		${CMAKE_CURRENT_BINARY_DIR}/html/external/benchmarks/index.html
--		${CMAKE_CURRENT_BINARY_DIR}/html/external/coverage/index.html
-+		${CMAKE_CURRENT_BINARY_DIR}/html/index.html
- )
-diff --git a/tests/unit/CMakeLists.txt b/tests/unit/CMakeLists.txt
-index 2f1a927..4caf7ba 100644
---- a/tests/unit/CMakeLists.txt
-+++ b/tests/unit/CMakeLists.txt
-@@ -207,7 +207,7 @@ add_custom_target(test
-     COMMENT "Running tests"
- )
- 
--if (NOT ${NO_DOCS})
-+if (FALSE)
-     include(ProcessorCount)
-     find_program(LCOV_BIN lcov REQUIRED)
- 
diff --git a/net-firewall/bpfilter/files/bpfilter-0.6.0-no-coverage.patch b/net-firewall/bpfilter/files/bpfilter-0.6.0-no-coverage.patch
deleted file mode 100644
index 5cc8a4821bab..000000000000
--- a/net-firewall/bpfilter/files/bpfilter-0.6.0-no-coverage.patch
+++ /dev/null
@@ -1,76 +0,0 @@
-diff --git a/doc/CMakeLists.txt b/doc/CMakeLists.txt
-index b79820c..8e04af5 100644
---- a/doc/CMakeLists.txt
-+++ b/doc/CMakeLists.txt
-@@ -36,7 +36,6 @@
- #]]
- 
- find_package(Doxygen REQUIRED)
--find_program(GENHTML_BIN genhtml REQUIRED)
- find_program(SPHINX_BIN sphinx-build REQUIRED)
- 
- file(GLOB_RECURSE bf_srcs
-@@ -114,10 +113,6 @@ add_custom_command(
- 	# Update the modification time of the documentation's index, so the
- 	# benchmark report will be generated (as external/benchmarks/index.html is
- 	# now out-of-date).
--	COMMAND
--		${CMAKE_COMMAND}
--			-E touch
--			${CMAKE_CURRENT_BINARY_DIR}/html/external/benchmarks/index.html
- 	DEPENDS
- 		${CMAKE_CURRENT_BINARY_DIR}/conf.py
- 		${CMAKE_CURRENT_BINARY_DIR}/xml/index.xml
-@@ -126,39 +121,3 @@ add_custom_command(
- 		${CMAKE_CURRENT_BINARY_DIR}/html/index.html
- 	COMMENT "Generating the documentation"
- )
--
--add_custom_command(
--	COMMAND
--		${CMAKE_CURRENT_SOURCE_DIR}/benchreport
--			--sources ${CMAKE_SOURCE_DIR}
--			--results ${CMAKE_BINARY_DIR}/output/benchmarks
--			--template ${CMAKE_CURRENT_SOURCE_DIR}/benchmarks.html.template
--			--output ${CMAKE_CURRENT_BINARY_DIR}/html/external/benchmarks/index.html
--	DEPENDS
--		${CMAKE_CURRENT_SOURCE_DIR}/benchreport
--		${CMAKE_CURRENT_BINARY_DIR}/html/index.html
--		${CMAKE_CURRENT_SOURCE_DIR}/benchmarks.html.template
--	OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/html/external/benchmarks/index.html
--	COMMENT "Generate the benchmarks summary"
--)
--
--# covreport should not depend on lcov.out: it should generate a coverage report
--# if it exists, or skip the report generation if it doesn't.
--add_custom_command(
--	COMMAND
--		${CMAKE_CURRENT_SOURCE_DIR}/covreport
--			--genhtml ${GENHTML_BIN}
--			--tracefile ${CMAKE_BINARY_DIR}/output/tests/lcov.out
--			--output ${CMAKE_CURRENT_BINARY_DIR}/html/external/coverage
--	DEPENDS
--		${CMAKE_CURRENT_SOURCE_DIR}/covreport
--		${CMAKE_CURRENT_BINARY_DIR}/html/index.html
--	OUTPUT ${CMAKE_CURRENT_BINARY_DIR}/html/external/coverage/index.html
--	COMMENT "Generate the coverage report"
--)
--
--add_custom_target(doc
--	DEPENDS
--		${CMAKE_CURRENT_BINARY_DIR}/html/external/benchmarks/index.html
--		${CMAKE_CURRENT_BINARY_DIR}/html/external/coverage/index.html
--)
-diff --git a/tests/unit/CMakeLists.txt b/tests/unit/CMakeLists.txt
-index 074a3c3..d09def9 100644
---- a/tests/unit/CMakeLists.txt
-+++ b/tests/unit/CMakeLists.txt
-@@ -203,7 +203,7 @@ add_custom_target(unit
-     COMMENT "Running unit tests"
- )
- 
--if (NOT ${NO_DOCS})
-+if (FALSE)
-     include(ProcessorCount)
-     find_program(LCOV_BIN lcov REQUIRED)
- 
diff --git a/net-firewall/bpfilter/metadata.xml b/net-firewall/bpfilter/metadata.xml
deleted file mode 100644
index 56e379f48d61..000000000000
--- a/net-firewall/bpfilter/metadata.xml
+++ /dev/null
@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="person">
-    <email>chutzpah@gentoo.org</email>
-    <name>Patrick McLean</name>
-  </maintainer>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/conntrack-tools/Manifest b/net-firewall/conntrack-tools/Manifest
deleted file mode 100644
index 9eb22f0bf4c5..000000000000
--- a/net-firewall/conntrack-tools/Manifest
+++ /dev/null
@@ -1,4 +0,0 @@
-DIST conntrack-tools-1.4.8.tar.xz 452980 BLAKE2B 2f8a7d7facf4890a8ca7dec54d5faa1383ad5e449a0599707578567e9c8ed6fd63ca308538afc34e99121e39e80c1ce686c8dda89247abdf4699bb420b52c4fb SHA512 95d8f6f068c1342ad7e767537e722272a4f5bd8b46b952713ade053a1043aa9ababbe5ce658ede9c77b6de5221b97ad8833777caffd69b67dd70a99f2b45afdf
-DIST conntrack-tools-1.4.8.tar.xz.sig 566 BLAKE2B 65c2ee185b099281603bca179038bd9ab6e28756f9fa12a53a8bcb75ed561097c9e4672c45fcecc366b86b65e1753073808090e264671d3a3d8dd18ed6f4d680 SHA512 8cd229d2e980ab1788e90fc8f53827fe1e4b21801cad6cddf6a9ff537501c40c52242cc964005b2889ad0a4548c772304db8696d4644611ecf9f091aca5c14ee
-DIST conntrack-tools-1.4.9.tar.xz 452480 BLAKE2B afa7aa685e20be510d7a7a916625d83f34d305212b8b86d4de94976d2212886391a45acdba3e906a7b6614b6476e61ead6648ee567458d3a90ebbe2eccbd3e7b SHA512 1cef49d6f1995915a5c6b811fefc02bef92c9881b6eba8d6f85071f4f129ec139dadfd5546fa02d3ed42888f4d6f46ffc0cc13da30de1baa28a795b95041c035
-DIST conntrack-tools-1.4.9.tar.xz.sig 566 BLAKE2B 6700acad416fa77dc409da21d31c138861c026f7a924154448e925ddb3bc72a4af5111219db6542d17e313f1d5f277b35996b57714a1bfce03c2663c280fb0cf SHA512 8fe0e78d1d76924e3897924af32b3cae5fcb5d42661ea728ed00bf6539c6319720844a3c378fb304ca78da7d31d92361d08640f7f00064752ce0e41e9bd0490a
diff --git a/net-firewall/conntrack-tools/conntrack-tools-1.4.8-r1.ebuild b/net-firewall/conntrack-tools/conntrack-tools-1.4.8-r1.ebuild
deleted file mode 100644
index c11278aa667c..000000000000
--- a/net-firewall/conntrack-tools/conntrack-tools-1.4.8-r1.ebuild
+++ /dev/null
@@ -1,109 +0,0 @@
-# Copyright 1999-2024 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit linux-info systemd verify-sig
-
-DESCRIPTION="Connection tracking userspace tools"
-HOMEPAGE="https://conntrack-tools.netfilter.org"
-SRC_URI="
-	https://www.netfilter.org/projects/conntrack-tools/files/${P}.tar.xz
-	verify-sig? ( https://www.netfilter.org/projects/conntrack-tools/files/${P}.tar.xz.sig )
-"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="~alpha amd64 ~arm64 ~hppa ppc ppc64 ~riscv x86"
-IUSE="doc +cthelper +cttimeout systemd"
-
-RDEPEND="
-	>=net-libs/libmnl-1.0.3
-	>=net-libs/libnetfilter_conntrack-1.0.9
-	>=net-libs/libnetfilter_queue-1.0.2
-	>=net-libs/libnfnetlink-1.0.1
-	net-libs/libtirpc
-	cthelper? (
-		>=net-libs/libnetfilter_cthelper-1.0.0
-	)
-	cttimeout? (
-		>=net-libs/libnetfilter_cttimeout-1.0.0
-	)
-	systemd? (
-		>=sys-apps/systemd-227
-	)
-"
-DEPEND="${RDEPEND}"
-BDEPEND="
-	app-alternatives/yacc
-	app-alternatives/lex
-	virtual/pkgconfig
-	doc? (
-		app-text/docbook-xml-dtd:4.1.2
-		app-text/xmlto
-	)
-	verify-sig? ( sec-keys/openpgp-keys-netfilter )
-"
-
-pkg_setup() {
-	linux-info_pkg_setup
-
-	if kernel_is lt 2 6 18 ; then
-		die "${PN} requires at least 2.6.18 kernel version"
-	fi
-
-	# netfilter core team has changed some option names with kernel 2.6.20
-	if kernel_is lt 2 6 20 ; then
-		CONFIG_CHECK="~IP_NF_CONNTRACK_NETLINK"
-	else
-		CONFIG_CHECK="~NF_CT_NETLINK"
-	fi
-	CONFIG_CHECK="${CONFIG_CHECK} ~NF_CONNTRACK
-		~NETFILTER_NETLINK ~NF_CONNTRACK_EVENTS"
-
-	check_extra_config
-
-	linux_config_exists || \
-		linux_chkconfig_present "NF_CONNTRACK_IPV4" || \
-		linux_chkconfig_present "NF_CONNTRACK_IPV6" || \
-		ewarn "CONFIG_NF_CONNTRACK_IPV4 or CONFIG_NF_CONNTRACK_IPV6 " \
-			"are not set when one at least should be."
-}
-
-src_prepare() {
-	default
-
-	# bug #474858
-	sed -i -e 's:/var/lock:/run/lock:' doc/stats/conntrackd.conf || die
-}
-
-src_configure() {
-	econf \
-		$(use_enable cthelper) \
-		$(use_enable cttimeout) \
-		$(use_enable systemd)
-}
-
-src_compile() {
-	default
-
-	use doc && emake -C doc/manual
-}
-
-src_install() {
-	default
-
-	newinitd "${FILESDIR}"/conntrackd.initd-r3 conntrackd
-	newconfd "${FILESDIR}"/conntrackd.confd-r2 conntrackd
-
-	insinto /etc/conntrackd
-	doins doc/stats/conntrackd.conf
-
-	systemd_dounit "${FILESDIR}"/conntrackd.service
-
-	dodoc -r doc/sync doc/stats AUTHORS TODO
-	use doc && dodoc doc/manual/${PN}.html
-
-	find "${ED}" -name '*.la' -delete || die
-}
diff --git a/net-firewall/conntrack-tools/conntrack-tools-1.4.9.ebuild b/net-firewall/conntrack-tools/conntrack-tools-1.4.9.ebuild
deleted file mode 100644
index b129d90de671..000000000000
--- a/net-firewall/conntrack-tools/conntrack-tools-1.4.9.ebuild
+++ /dev/null
@@ -1,109 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit linux-info systemd verify-sig
-
-DESCRIPTION="Connection tracking userspace tools"
-HOMEPAGE="https://conntrack-tools.netfilter.org"
-SRC_URI="
-	https://www.netfilter.org/projects/conntrack-tools/files/${P}.tar.xz
-	verify-sig? ( https://www.netfilter.org/projects/conntrack-tools/files/${P}.tar.xz.sig )
-"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="~alpha amd64 ~arm64 ~hppa ppc ppc64 ~riscv x86"
-IUSE="doc +cthelper +cttimeout systemd"
-
-RDEPEND="
-	>=net-libs/libmnl-1.0.3
-	>=net-libs/libnetfilter_conntrack-1.1.1
-	>=net-libs/libnetfilter_queue-1.0.2
-	>=net-libs/libnfnetlink-1.0.1
-	net-libs/libtirpc
-	cthelper? (
-		>=net-libs/libnetfilter_cthelper-1.0.0
-	)
-	cttimeout? (
-		>=net-libs/libnetfilter_cttimeout-1.0.0
-	)
-	systemd? (
-		>=sys-apps/systemd-227
-	)
-"
-DEPEND="${RDEPEND}"
-BDEPEND="
-	app-alternatives/yacc
-	app-alternatives/lex
-	virtual/pkgconfig
-	doc? (
-		app-text/docbook-xml-dtd:4.1.2
-		app-text/xmlto
-	)
-	verify-sig? ( sec-keys/openpgp-keys-netfilter )
-"
-
-pkg_setup() {
-	linux-info_pkg_setup
-
-	if kernel_is lt 2 6 18 ; then
-		die "${PN} requires at least 2.6.18 kernel version"
-	fi
-
-	# netfilter core team has changed some option names with kernel 2.6.20
-	if kernel_is lt 2 6 20 ; then
-		CONFIG_CHECK="~IP_NF_CONNTRACK_NETLINK"
-	else
-		CONFIG_CHECK="~NF_CT_NETLINK"
-	fi
-	CONFIG_CHECK="${CONFIG_CHECK} ~NF_CONNTRACK
-		~NETFILTER_NETLINK ~NF_CONNTRACK_EVENTS"
-
-	check_extra_config
-
-	linux_config_exists || \
-		linux_chkconfig_present "NF_CONNTRACK_IPV4" || \
-		linux_chkconfig_present "NF_CONNTRACK_IPV6" || \
-		ewarn "CONFIG_NF_CONNTRACK_IPV4 or CONFIG_NF_CONNTRACK_IPV6 " \
-			"are not set when one at least should be."
-}
-
-src_prepare() {
-	default
-
-	# bug #474858
-	sed -i -e 's:/var/lock:/run/lock:' doc/stats/conntrackd.conf || die
-}
-
-src_configure() {
-	econf \
-		$(use_enable cthelper) \
-		$(use_enable cttimeout) \
-		$(use_enable systemd)
-}
-
-src_compile() {
-	default
-
-	use doc && emake -C doc/manual
-}
-
-src_install() {
-	default
-
-	newinitd "${FILESDIR}"/conntrackd.initd-r3 conntrackd
-	newconfd "${FILESDIR}"/conntrackd.confd-r2 conntrackd
-
-	insinto /etc/conntrackd
-	doins doc/stats/conntrackd.conf
-
-	systemd_dounit "${FILESDIR}"/conntrackd.service
-
-	dodoc -r doc/sync doc/stats AUTHORS TODO
-	use doc && dodoc doc/manual/${PN}.html
-
-	find "${ED}" -name '*.la' -delete || die
-}
diff --git a/net-firewall/conntrack-tools/files/conntrackd.confd-r2 b/net-firewall/conntrack-tools/files/conntrackd.confd-r2
deleted file mode 100644
index 01c0633809d5..000000000000
--- a/net-firewall/conntrack-tools/files/conntrackd.confd-r2
+++ /dev/null
@@ -1,14 +0,0 @@
-# conntrackd config file
-# default: /etc/conntrackd/conntrackd.conf
-#CONNTRACKD_CFG=/etc/conntrackd/conntrackd.conf
-
-# conntrackd lockfile (must match the "LockFile" entry
-# from the "General" section in the config file)
-# default: /run/lock/conntrack.lock
-#CONNTRACKD_LOCK=/run/lock/conntrack.lock
-
-# extra options for conntrackd
-#CONNTRACKD_OPTS="" # you must NOT use -C here!
-
-# depend on a specific network interface
-#rc_need="net.eth1"
diff --git a/net-firewall/conntrack-tools/files/conntrackd.initd-r3 b/net-firewall/conntrack-tools/files/conntrackd.initd-r3
deleted file mode 100644
index eddcae97ec3d..000000000000
--- a/net-firewall/conntrack-tools/files/conntrackd.initd-r3
+++ /dev/null
@@ -1,77 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2017 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-CONNTRACKD_BIN="/usr/sbin/conntrackd"
-CONNTRACKD_CFG=${CONNTRACKD_CFG:-/etc/conntrackd/conntrackd.conf}
-CONNTRACKD_LOCK=${CONNTRACKD_LOCK:-/run/lock/conntrack.lock}
-
-depend() {
-	use logger
-	need net
-}
-
-checkconfig() {
-	# check for netfilter conntrack kernel support
-	local nf_ct_available=0
-	for k in net.netfilter.nf_conntrack_max \
-		net.ipv4.netfilter.ip_conntrack_max \
-		net.nf_conntrack_max; do
-		if sysctl ${k} >/dev/null 2>&1; then
-			nf_ct_available=1 # sysctl key found
-			break
-		fi
-	done
-	if [ ${nf_ct_available} -eq 0 ]; then
-		eerror
-		eerror "Your kernel is missing netfilter conntrack support!"
-		eerror "Make sure your kernel was compiled with netfilter conntrack support."
-		eerror
-		eerror "If it was compiled as a module you need to ensure the module is being"
-		eerror "loaded before starting conntrackd."
-		eerror "Either add an entry to /etc/modules.autoload/[...] (for baselayout-1)"
-		eerror "or /etc/conf.d/modules (for baselayout-2/OpenRC) or load the module"
-		eerror "by hand like this, depending on your kernel version:"
-		eerror
-		eerror "  modprobe nf_conntrack # (for newer kernels)"
-		eerror "  modprobe ip_conntrack # (for older kernels)"
-		eerror
-		return 1
-	fi
-	# check for config file
-	if [ ! -e "${CONNTRACKD_CFG}" ]; then
-		eerror
-		eerror "The conntrackd config file (${CONNTRACKD_CFG})"
-		eerror "is missing!"
-		eerror
-		return 1
-	fi
-	# check for leftover lockfile
-	if [ -f "${CONNTRACKD_LOCK}" ]; then
-		ewarn
-		ewarn "The conntrackd lockfile (${CONNTRACKD_LOCK})"
-		ewarn "exists although the service is not marked as started."
-		ewarn "Will remove the lockfile and start the service in 10s"
-		ewarn "if not interrupted..."
-		ewarn
-		sleep 10
-		if ! rm -f "${CONNTRACKD_LOCK}"; then
-			eerror "Failed to remove the conntrackd lockfile (${CONNTRACKD_LOCK})"
-			return 1
-		fi
-	fi
-}
-
-start() {
-	checkconfig || return 1
-	ebegin "Starting conntrackd"
-	start-stop-daemon --start --exec "${CONNTRACKD_BIN}" \
-		-- -d -C "${CONNTRACKD_CFG}" ${CONNTRACKD_OPTS}
-	eend $?
-}
-
-stop() {
-	ebegin "Stopping conntrackd"
-	start-stop-daemon --stop --exec "${CONNTRACKD_BIN}"
-	eend $?
-}
diff --git a/net-firewall/conntrack-tools/files/conntrackd.service b/net-firewall/conntrack-tools/files/conntrackd.service
deleted file mode 100644
index 26f950c0d9cc..000000000000
--- a/net-firewall/conntrack-tools/files/conntrackd.service
+++ /dev/null
@@ -1,13 +0,0 @@
-[Unit]
-Description=Conntrack Daemon
-Documentation=man:conntrackd(8) man:conntrackd.conf(5)
-
-[Service]
-Type=notify
-ExecStart=/usr/sbin/conntrackd -C /etc/conntrackd/conntrackd.conf
-Restart=on-failure
-ProtectSystem=full
-ProtectHome=true
-
-[Install]
-WantedBy=multi-user.target
diff --git a/net-firewall/conntrack-tools/metadata.xml b/net-firewall/conntrack-tools/metadata.xml
deleted file mode 100644
index fe357a525cf3..000000000000
--- a/net-firewall/conntrack-tools/metadata.xml
+++ /dev/null
@@ -1,23 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="project">
-    <email>netmon@gentoo.org</email>
-    <name>Gentoo network monitoring and analysis project</name>
-  </maintainer>
-  <longdescription lang="en">
-The conntrack-tools are a set of free software userspace tools for Linux that
-allow system administrators interact with the Connection Tracking System, which
-is the module that provides stateful packet inspection for iptables. The
-conntrack-tools are the userspace daemon conntrackd and the command line
-interface conntrack.
-</longdescription>
-  <upstream>
-    <remote-id type="cpe">cpe:/a:netfilter:conntrack-tools</remote-id>
-  </upstream>
-  <use>
-    <flag name="cthelper">Use <pkg>net-libs/libnetfilter_cthelper</pkg> for userspace conntrack helper support</flag>
-    <flag name="cttimeout">Use <pkg>net-libs/libnetfilter_cttimeout</pkg> for conntrack timeout support</flag>
-  </use>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/ebtables/Manifest b/net-firewall/ebtables/Manifest
deleted file mode 100644
index 1c9551269f6e..000000000000
--- a/net-firewall/ebtables/Manifest
+++ /dev/null
@@ -1,2 +0,0 @@
-DIST ebtables-2.0.11.tar.gz 428411 BLAKE2B 62af4c38ad21498e43f41ef96c8abb5704e8d8a48f1327c587b664f36fdfa9849a9a37e59958db56d38019465d8bf1775914f7387fde99a441615913702cf504 SHA512 43a04c6174c8028c501591ef260526297e0f018016f226e2a3bcf80766fddf53d4605c347554d6da7c4ab5e2131584a18da20916ffddcbf2d26ac93b00c5777f
-DIST ebtables-2.0.11.tar.gz.sig 590 BLAKE2B b82997970a980afe408ad819d774ff7982762b3586510c1d1ab02e1a4ce3f0e6134a5826475eec1951401a9f31e384453aec509f585a853ad055f6ce8f5ac83c SHA512 d75e45d61442bb5adc05c14dadf050165a0646be7d2abde55420ec26c999daae549df3340901cf90f3a6550c24f450ab6faac639f5e86616e3a2543965390c4a
diff --git a/net-firewall/ebtables/ebtables-2.0.11-r3.ebuild b/net-firewall/ebtables/ebtables-2.0.11-r3.ebuild
deleted file mode 100644
index 4ad82564a04d..000000000000
--- a/net-firewall/ebtables/ebtables-2.0.11-r3.ebuild
+++ /dev/null
@@ -1,115 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI="7"
-
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit autotools verify-sig
-
-MY_PV="$(ver_rs 3 '-' )"
-MY_P="${PN}-${MY_PV}"
-
-DESCRIPTION="Controls Ethernet frame filtering on a Linux bridge, MAC NAT and brouting"
-HOMEPAGE="https://ebtables.netfilter.org/"
-SRC_URI="
-	https://ftp.netfilter.org/pub/${PN}/${MY_P}.tar.gz
-	verify-sig? ( https://ftp.netfilter.org/pub/${PN}/${MY_P}.tar.gz.sig )
-"
-S="${WORKDIR}/${MY_P}"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="amd64 arm arm64 ~loong ppc ppc64 ~riscv x86"
-IUSE="+perl static"
-
-BDEPEND="
-	>=app-eselect/eselect-iptables-20200508
-	verify-sig? ( sec-keys/openpgp-keys-netfilter )
-"
-# The ebtables-save script is written in perl.
-RDEPEND="
-	${BDEPEND}
-	net-misc/ethertypes
-	perl? ( dev-lang/perl )
-"
-
-PATCHES=(
-	"${FILESDIR}/${PN}-2.0.11-makefile.patch"
-
-	# Enhance ebtables-save to take table names as parameters bug #189315
-	"${FILESDIR}/${PN}-2.0.11-ebt-save.patch"
-
-	# from upstream git
-	"${FILESDIR}/ebtables-2.0.11-remove-stray-atsign.patch"
-)
-
-pkg_setup() {
-	if use static; then
-		ewarn "You've chosen static build which is useful for embedded devices."
-		ewarn "It has no init script. Make sure that's really what you want."
-	fi
-}
-
-src_prepare() {
-	default
-
-	# Don't install perl scripts if USE=perl is disabled.
-	if ! use perl; then
-		sed -i -e '/^sbin_SCRIPTS/ d' Makefile.am || die
-	fi
-
-	# The bundled autotools are borked, so force a rebuild.
-	eautoreconf
-}
-
-src_configure() {
-	econf \
-		--bindir="/bin" \
-		--sbindir="/sbin" \
-		--libdir="/$(get_libdir)/${PN}" \
-		$(use_enable static)
-}
-
-src_compile() {
-	emake $(usex static 'static ebtables-legacy.8' '')
-}
-
-src_install() {
-	local -a DOCS=( ChangeLog THANKS )
-
-	if ! use static; then
-		emake DESTDIR="${D}" install
-		newinitd "${FILESDIR}"/ebtables.initd-r1 ebtables
-		newconfd "${FILESDIR}"/ebtables.confd-r1 ebtables
-
-		find "${D}" -name '*.la' -type f -delete || die
-
-		# The ethertypes package installs this for us.
-		rm "${ED}"/etc/ethertypes || die
-	else
-		into /
-		newsbin static ebtables
-	fi
-
-	newman ebtables-legacy.8 ebtables.8
-	einstalldocs
-}
-
-pkg_postinst() {
-	if ! eselect ebtables show &>/dev/null; then
-		elog "Current ebtables implementation is unset, setting to ebtables-legacy"
-		eselect ebtables set ebtables-legacy
-	fi
-
-	eselect ebtables show
-}
-
-pkg_prerm() {
-	if [[ -z ${REPLACED_BY_VERSION} ]] && has_version 'net-firewall/iptables[nftables]'; then
-		elog "Resetting ebtables symlinks to xtables-nft-multi before removal"
-		eselect ebtables set xtables-nft-multi
-	else
-		elog "Unsetting ebtables symlinks before removal"
-		eselect ebtables unset
-	fi
-}
diff --git a/net-firewall/ebtables/files/ebtables-2.0.11-ebt-save.patch b/net-firewall/ebtables/files/ebtables-2.0.11-ebt-save.patch
deleted file mode 100644
index 7cfe128babf4..000000000000
--- a/net-firewall/ebtables/files/ebtables-2.0.11-ebt-save.patch
+++ /dev/null
@@ -1,26 +0,0 @@
-diff --git a/ebtables-save.in b/ebtables-save.in
-index 17924a2..c7a64c3 100644
---- a/ebtables-save.in
-+++ b/ebtables-save.in
-@@ -12,6 +12,7 @@ my $ebtables = "@sbindir@/ebtables";
- my $cnt = "";
- my $version = "1.0";
- my $table_name;
-+my @table_names;
- 
- # ========================================================
- # Process filter table
-@@ -49,6 +50,13 @@ sub process_table {
- }
- # ========================================================
- 
-+if ($#ARGV + 1 == 0) {
-+   @table_names =split("\n", `grep -E '^ebtable_' /proc/modules | cut -f1 -d' ' | sed s/ebtable_//`);
-+}
-+else {
-+   @table_names = @ARGV;
-+}
-+# ========================================================
- unless (-x $ebtables) { exit -1 };
- print "# Generated by ebtables-save v$version (legacy) on " . `date`;
- if (defined($ENV{'EBTABLES_SAVE_COUNTER'}) && $ENV{'EBTABLES_SAVE_COUNTER'} eq "yes") {
diff --git a/net-firewall/ebtables/files/ebtables-2.0.11-makefile.patch b/net-firewall/ebtables/files/ebtables-2.0.11-makefile.patch
deleted file mode 100644
index dc9be9e7d6c4..000000000000
--- a/net-firewall/ebtables/files/ebtables-2.0.11-makefile.patch
+++ /dev/null
@@ -1,13 +0,0 @@
-diff --git a/Makefile.am b/Makefile.am
-index 6181003..de01139 100644
---- a/Makefile.am
-+++ b/Makefile.am
-@@ -50,7 +50,7 @@ ebtables_legacy_LDADD = libebtc.la
- ebtablesd_LDADD = libebtc.la
- ebtables_legacy_restore_SOURCES = ebtables-restore.c
- ebtables_legacy_restore_LDADD = libebtc.la
--static_SOURCES = ebtables.c
-+static_SOURCES = ebtables.c ebtables-standalone.c
- static_LDFLAGS = -static
- static_LDADD = libebtc.la
- examples_ulog_test_ulog_SOURCES = examples/ulog/test_ulog.c getethertype.c
diff --git a/net-firewall/ebtables/files/ebtables-2.0.11-remove-stray-atsign.patch b/net-firewall/ebtables/files/ebtables-2.0.11-remove-stray-atsign.patch
deleted file mode 100644
index 88f1d7296529..000000000000
--- a/net-firewall/ebtables/files/ebtables-2.0.11-remove-stray-atsign.patch
+++ /dev/null
@@ -1,32 +0,0 @@
-From 7d00e58157bc61168a057cde91a6e5b54dca573b Mon Sep 17 00:00:00 2001
-From: Jan Engelhardt <jengelh@inai.de>
-Date: Mon, 2 Dec 2019 20:52:04 +0100
-Subject: build: remove stray @ sign in manpage
-
-Because the sed command was not matching the trailing @, it
-was left in the manpage, leading to
-
-NAME
-       ebtables-legacy (2.0.11@) - Ethernet bridge frame table administration (legacy)
-
-Signed-off-by: Jan Engelhardt <jengelh@inai.de>
-Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
----
- Makefile.am | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/Makefile.am b/Makefile.am
-index b879941..6181003 100644
---- a/Makefile.am
-+++ b/Makefile.am
-@@ -64,6 +64,6 @@ ebtables-legacy-save: ebtables-save.in ${top_builddir}/config.status
- 	${AM_V_GEN}sed -e 's![@]sbindir@!${sbindir}!g' <$< >$@
- 
- ebtables-legacy.8: ebtables-legacy.8.in ${top_builddir}/config.status
--	${AM_V_GEN}sed -e 's![@]PACKAGE_VERSION!${PACKAGE_VERSION}!g' \
-+	${AM_V_GEN}sed -e 's![@]PACKAGE_VERSION@!${PACKAGE_VERSION}!g' \
- 		-e 's![@]PACKAGE_DATE@!${PROGDATE}!g' \
- 		-e 's![@]LOCKFILE@!${LOCKFILE}!g' <$< >$@
--- 
-cgit v1.2.1
-
diff --git a/net-firewall/ebtables/files/ebtables.confd-r1 b/net-firewall/ebtables/files/ebtables.confd-r1
deleted file mode 100644
index 8e83c81b9f84..000000000000
--- a/net-firewall/ebtables/files/ebtables.confd-r1
+++ /dev/null
@@ -1,19 +0,0 @@
-# /etc/conf.d/ebtables
-
-# Location in which ebtables initscript will save set rules on 
-# service shutdown
-EBTABLES_SAVE="/var/lib/ebtables/rules-save"
-
-# Options to pass to ebtables-save and ebtables-restore 
-SAVE_RESTORE_OPTIONS=""
-
-# Save state on stopping ebtables
-SAVE_ON_STOP="yes"
-
-# If you need to log iptables messages as soon as iptables starts,
-# AND your logger does NOT depend on the network, then you may wish
-# to uncomment the next line.
-# If your logger depends on the network, and you uncomment this line
-# you will create an unresolvable circular dependency during startup.
-# After commenting or uncommenting this line, you must run 'rc-update -u'.
-#rc_use="logger"
diff --git a/net-firewall/ebtables/files/ebtables.initd-r1 b/net-firewall/ebtables/files/ebtables.initd-r1
deleted file mode 100644
index bdc0987b1b2b..000000000000
--- a/net-firewall/ebtables/files/ebtables.initd-r1
+++ /dev/null
@@ -1,101 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2021 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-extra_commands="save panic"
-extra_started_commands="reload"
-
-ebtables_bin="/sbin/ebtables"
-ebtables_save=${EBTABLES_SAVE}
-
-depend() {
-	before net
-}
-
-ebtables_tables() {
-	local table
-	for table in filter nat broute; do
-		if ${ebtables_bin} -t ${table} -L > /dev/null 2>&1; then
-			printf '%s' "${table} "
-		fi
-	done
-}
-
-set_table_policy() {
-	local chains table=$1 policy=$2
-	case ${table} in
-		nat)    chains="PREROUTING POSTROUTING OUTPUT";;
-		broute) chains="BROUTING";;
-		filter) chains="INPUT FORWARD OUTPUT";;
-		*)      chains="";;
-	esac
-	local chain
-	for chain in ${chains} ; do
-		${ebtables_bin} -t ${table} -P ${chain} ${policy}
-	done
-}
-
-checkconfig() {
-	if [ ! -f ${ebtables_save} ] ; then
-		eerror "Not starting ebtables.  First create some rules then run:"
-		eerror "/etc/init.d/ebtables save"
-		return 1
-	fi
-	return 0
-}
-
-start() {
-	checkconfig || return 1
-	ebegin "Loading ebtables state and starting bridge firewall"
-	${ebtables_bin}-restore ${SAVE_RESTORE_OPTIONS} < "${ebtables_save}"
-	eend $?
-}
-
-stop() {
-	if [ "${SAVE_ON_STOP}" = "yes" ] ; then
-		save || return 1
-	fi
-	ebegin "Stopping bridge firewall"
-	local a
-	for a in $(ebtables_tables); do
-		set_table_policy $a ACCEPT
-
-		${ebtables_bin} -t $a -F
-		${ebtables_bin} -t $a -X
-	done
-	eend $?
-}
-
-reload() {
-	ebegin "Flushing bridge firewall"
-	local a
-	for a in $(ebtables_tables); do
-		${ebtables_bin} -t $a -F
-		${ebtables_bin} -t $a -X
-	done
-	eend $?
-
-	start
-}
-
-save() {
-	ebegin "Saving ebtables state"
-	checkpath -d -m 0755 "${ebtables_save%/*}"
-	checkpath -f -m 0600 "${ebtables_save}"
-	${ebtables_bin}-save $(ebtables_tables) ${SAVE_RESTORE_OPTIONS} > "${ebtables_save}"
-	eend $?
-}
-
-panic() {
-	service_started ebtables && svc_stop
-
-	local a
-	ebegin "Dropping all packets forwarded on bridges"
-	for a in $(ebtables_tables); do
-		${ebtables_bin} -t $a -F
-		${ebtables_bin} -t $a -X
-
-		set_table_policy $a DROP
-	done
-	eend $?
-}
diff --git a/net-firewall/ebtables/metadata.xml b/net-firewall/ebtables/metadata.xml
deleted file mode 100644
index b2a8248c687e..000000000000
--- a/net-firewall/ebtables/metadata.xml
+++ /dev/null
@@ -1,15 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="project">
-    <email>base-system@gentoo.org</email>
-    <name>Gentoo Base System</name>
-  </maintainer>
-  <use>
-    <flag name="perl">Install the ebtables-save script which uses perl</flag>
-  </use>
-  <upstream>
-    <remote-id type="cpe">cpe:/a:netfilter:ebtables</remote-id>
-  </upstream>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/ferm/Manifest b/net-firewall/ferm/Manifest
deleted file mode 100644
index 556f96af1fa2..000000000000
--- a/net-firewall/ferm/Manifest
+++ /dev/null
@@ -1 +0,0 @@
-DIST ferm-2.7.tar.xz 77320 BLAKE2B 1c7b9e111b86cebc5c0f503e96422d3411b14eb18621268653262926be3e2493b6e66869d607feddbcdb945dada8960f40f166202e3b61a6e93007683fa3a38b SHA512 bbc0e025514c8bf826dd0c13c24cba64b2729380bce5ab8f0e1a72c4f22471edc4fcd2c343cf9af97a2e9bd204ba27feefcfe21d4b0ce53837be042f863c9c24
diff --git a/net-firewall/ferm/ferm-2.7.ebuild b/net-firewall/ferm/ferm-2.7.ebuild
deleted file mode 100644
index 6293e4dd4bb5..000000000000
--- a/net-firewall/ferm/ferm-2.7.ebuild
+++ /dev/null
@@ -1,37 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit systemd
-
-DESCRIPTION="Command line util for managing firewall rules"
-HOMEPAGE="http://ferm.foo-projects.org/"
-SRC_URI="http://ferm.foo-projects.org/download/${PV}/${P}.tar.xz"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="amd64 ~arm64 ppc x86"
-
-# Uses Internet connection while testing.
-RESTRICT="test"
-
-# does not install any perl libs
-RDEPEND="dev-lang/perl:*
-	net-firewall/iptables
-	virtual/perl-File-Spec"
-
-DOCS=( AUTHORS NEWS README.rst TODO doc/ferm.txt examples/ )
-HTML_DOCS=( doc/ferm.html )
-
-src_install() {
-	dosbin src/{,import-}ferm
-	systemd_dounit ferm.service
-
-	einstalldocs
-	doman doc/*.1
-}
-
-pkg_postinst() {
-	elog "See ${EROOT}/usr/share/doc/${PF}/examples for sample configs"
-}
diff --git a/net-firewall/ferm/metadata.xml b/net-firewall/ferm/metadata.xml
deleted file mode 100644
index 5fd9611ebbc2..000000000000
--- a/net-firewall/ferm/metadata.xml
+++ /dev/null
@@ -1,13 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="person" proxied="yes">
-    <email>hydrapolic@gmail.com</email>
-    <name>Tomáš Mózes</name>
-  </maintainer>
-  <maintainer type="project" proxied="proxy">
-    <email>proxy-maint@gentoo.org</email>
-    <name>Proxy Maintainers</name>
-  </maintainer>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/firehol/Manifest b/net-firewall/firehol/Manifest
deleted file mode 100644
index d515eaba4f15..000000000000
--- a/net-firewall/firehol/Manifest
+++ /dev/null
@@ -1,2 +0,0 @@
-DIST firehol-3.1.7.tar.xz 1457932 BLAKE2B 9a861f2e9c900bce45d0dbd12f4546bc14eb4d74aea27a8d4cb0e5bfe8bea92d9bff3ccf008d46bd64212d689123273c99d0b0faaaadd34f0e1d85e22ee757c9 SHA512 b05cec806c2c8fc410bf9c7a30e3ad1d9f1c06fd2d501a7e5434010f6bb38722aac5b64de9b4285d2c71cacbf6b2f3c758685da5a70c05621df52879eb5148c2
-DIST firehol-3.1.8.tar.xz 1419992 BLAKE2B 47846b0f574df64759f1467304f6e420f04b6caa80ce26e85ba628a38e57d3ae53572a85f65acf71f5ad2f075bda4f0f45069d24a33355b95d2ee3a8a001faa6 SHA512 391190fc17e6339566c4fea9bbd1fe6acd237b10debf4ad4f19a6e6b7fd314a11c6825c85b95498a2d7951e2ec971c05a4c8632846f621ac70e3030a59cd0f72
diff --git a/net-firewall/firehol/files/firehol.confd b/net-firewall/firehol/files/firehol.confd
deleted file mode 100644
index c8b06e0eaf09..000000000000
--- a/net-firewall/firehol/files/firehol.confd
+++ /dev/null
@@ -1,2 +0,0 @@
-#Locate of FireHOL conf file
-FIREHOL_CONF="/etc/firehol/firehol.conf"
diff --git a/net-firewall/firehol/files/firehol.initd b/net-firewall/firehol/files/firehol.initd
deleted file mode 100644
index 719f336c46f1..000000000000
--- a/net-firewall/firehol/files/firehol.initd
+++ /dev/null
@@ -1,66 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2018 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-extra_commands="save panic try"
-extra_started_commands="reload"
-
-depend() {
-	need localmount
-	after bootmisc
-	before net
-	provide firewall
-}
-
-checkrules() {
-	if [ ! -f ${FIREHOL_CONF} ]; then
-		eerror "Not starting FireHOL. Create ${FIREHOL_CONF}"
-		eerror "and fill it with some rules."
-		eerror "man firehol.conf for more info."
-		return 1
-	fi
-}
-
-start() {
-	checkrules || return 1
-	ebegin "Starting FireHOL"
-		/usr/sbin/firehol ${FIREHOL_CONF} start > /dev/null
-	eend $? 
-}
-
-stop() {
-	ebegin "Stopping FireHOL"
-		/usr/sbin/firehol stop > /dev/null
-	eend $?
-}
-
-restart() {
-        ebegin "Restarting Firewall"
-                svc_stop;
-                svc_start;
-        eend $?
-}
-
-try() {
-	ebegin "Trying FireHOL configuration"
-	/usr/sbin/firehol ${FIREHOL_CONF} try
-	eend $?
-}
-
-status() {
-	ebegin "Showing FireHOL status"
-	/usr/sbin/firehol status
-	eend $?
-}
-
-panic() {
-	ebegin "FireHOL PANIC"
-	/usr/sbin/firehol panic
-	eend $?
-}
-
-save() {
-	ebegin "Saving FireHOL configuration"
-	/usr/sbin/firehol save
-	eend $?
-}
diff --git a/net-firewall/firehol/files/fireqos.confd b/net-firewall/firehol/files/fireqos.confd
deleted file mode 100644
index 55fa2e037e01..000000000000
--- a/net-firewall/firehol/files/fireqos.confd
+++ /dev/null
@@ -1,2 +0,0 @@
-#Locate of FireQOS conf file
-FIREQOS="/etc/firehol/fireqos.conf"
diff --git a/net-firewall/firehol/files/fireqos.initd b/net-firewall/firehol/files/fireqos.initd
deleted file mode 100644
index de94ce9840e5..000000000000
--- a/net-firewall/firehol/files/fireqos.initd
+++ /dev/null
@@ -1,44 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2018 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-depend() {
-	need localmount
-	after bootmisc
-	before net
-}
-
-checkrules() {
-	if [ ! -f ${FIREQOS_CONF} ]; then
-		eerror "Not starting FireQOS. Create ${FIREQOS_CONF}"
-		eerror "and fill it with some rules."
-		eerror "man fireqos.conf for more info."
-		return 1
-	fi
-}
-
-start() {
-	checkrules || return 1
-	ebegin "Starting FireQOS"
-		/usr/sbin/fireqos start ${FIREQOS_CONF} -- ${FIREQOS_EXTRA_ARGS} > /dev/null
-	eend $? 
-}
-
-stop() {
-	ebegin "Stopping FireQOS"
-		/usr/sbin/fireqos stop > /dev/null
-	eend $?
-}
-
-restart() {
-        ebegin "Restarting FireQOS"
-                svc_stop;
-                svc_start;
-        eend $?
-}
-
-status() {
-	ebegin "Showing FireQOS status"
-	/usr/sbin/fireqos status
-	eend $?
-}
diff --git a/net-firewall/firehol/firehol-3.1.7-r2.ebuild b/net-firewall/firehol/firehol-3.1.7-r2.ebuild
deleted file mode 100644
index 701ca0742f2f..000000000000
--- a/net-firewall/firehol/firehol-3.1.7-r2.ebuild
+++ /dev/null
@@ -1,82 +0,0 @@
-# Copyright 1999-2024 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit linux-info systemd
-
-DESCRIPTION="iptables firewall generator"
-HOMEPAGE="https://firehol.org/ https://github.com/firehol/firehol"
-SRC_URI="https://github.com/firehol/firehol/releases/download/v${PV}/${P}.tar.xz"
-
-LICENSE="GPL-2"
-SLOT="0"
-IUSE="doc ipv6 ipset"
-KEYWORDS="amd64 arm ~arm64 ~ppc ~x86"
-
-# Set the dependency versions to aid cross-compiling. Keep them at their
-# minimums as the configure script merely checks whether they are sufficient.
-MY_BASH_VERSION=4.0
-MY_IPRANGE_VERSION=1.0.2
-
-RDEPEND="
-	app-arch/gzip
-	>=app-shells/bash-${MY_BASH_VERSION}:0
-	net-analyzer/traceroute
-	net-firewall/iptables
-	>=net-misc/iprange-${MY_IPRANGE_VERSION}:0
-	net-misc/iputils[ipv6(+)?]
-	sys-apps/iproute2[-minimal,ipv6(+)?]
-	sys-apps/kmod[tools]
-	ipset? ( net-firewall/ipset )
-"
-DEPEND="${RDEPEND}"
-
-pkg_setup() {
-	local CONFIG_CHECK=" \
-		~IP_NF_FILTER \
-		~IP_NF_IPTABLES \
-		~IP_NF_MANGLE \
-		~IP_NF_TARGET_MASQUERADE
-		~IP_NF_TARGET_REDIRECT \
-		~IP_NF_TARGET_REJECT \
-		~NETFILTER_XT_CONNMARK \
-		~NETFILTER_XT_MATCH_HELPER \
-		~NETFILTER_XT_MATCH_LIMIT \
-		~NETFILTER_XT_MATCH_OWNER \
-		~NETFILTER_XT_MATCH_STATE \
-		~NF_CONNTRACK \
-		~NF_CONNTRACK_MARK \
-		~NF_NAT \
-		~NF_NAT_FTP \
-		~NF_NAT_IRC \
-	"
-
-	if kernel_is -lt 4 19; then
-		CONFIG_CHECK+=" ~NF_CONNTRACK_IPV4"
-	fi
-
-	linux-info_pkg_setup
-}
-
-src_configure() {
-	# This erroneously checks for BASH_VERSION_PATH rather than BASH_VERSION.
-	BASH_VERSION_PATH=${MY_BASH_VERSION} \
-	IPRANGE_VERSION=${MY_IPRANGE_VERSION} \
-	econf \
-		--disable-vnetbuild \
-		$(use_enable ipset update-ipsets) \
-		$(use_enable doc) \
-		$(use_enable ipv6)
-}
-
-src_install() {
-	default
-
-	newconfd "${FILESDIR}"/firehol.confd firehol
-	newinitd "${FILESDIR}"/firehol.initd firehol
-	newconfd "${FILESDIR}"/fireqos.confd fireqos
-	newinitd "${FILESDIR}"/fireqos.initd fireqos
-
-	systemd_dounit contrib/fire{hol,qos}.service
-}
diff --git a/net-firewall/firehol/firehol-3.1.8.ebuild b/net-firewall/firehol/firehol-3.1.8.ebuild
deleted file mode 100644
index 24e7760f88bd..000000000000
--- a/net-firewall/firehol/firehol-3.1.8.ebuild
+++ /dev/null
@@ -1,82 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit linux-info systemd
-
-DESCRIPTION="iptables firewall generator"
-HOMEPAGE="https://firehol.org/ https://github.com/firehol/firehol"
-SRC_URI="https://github.com/firehol/firehol/releases/download/v${PV}/${P}.tar.xz"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~amd64 ~arm ~arm64 ~ppc ~x86"
-IUSE="doc ipv6 ipset"
-
-# Set the dependency versions to aid cross-compiling. Keep them at their
-# minimums as the configure script merely checks whether they are sufficient.
-MY_BASH_VERSION=4.0
-MY_IPRANGE_VERSION=1.0.2
-
-RDEPEND="
-	app-arch/gzip
-	>=app-shells/bash-${MY_BASH_VERSION}:0
-	net-analyzer/traceroute
-	net-firewall/iptables
-	>=net-misc/iprange-${MY_IPRANGE_VERSION}:0
-	net-misc/iputils[ipv6(+)?]
-	sys-apps/iproute2[-minimal,ipv6(+)?]
-	sys-apps/kmod[tools]
-	ipset? ( net-firewall/ipset )
-"
-DEPEND="${RDEPEND}"
-
-pkg_setup() {
-	local CONFIG_CHECK=" \
-		~IP_NF_FILTER \
-		~IP_NF_IPTABLES \
-		~IP_NF_MANGLE \
-		~IP_NF_TARGET_MASQUERADE
-		~IP_NF_TARGET_REDIRECT \
-		~IP_NF_TARGET_REJECT \
-		~NETFILTER_XT_CONNMARK \
-		~NETFILTER_XT_MATCH_HELPER \
-		~NETFILTER_XT_MATCH_LIMIT \
-		~NETFILTER_XT_MATCH_OWNER \
-		~NETFILTER_XT_MATCH_STATE \
-		~NF_CONNTRACK \
-		~NF_CONNTRACK_MARK \
-		~NF_NAT \
-		~NF_NAT_FTP \
-		~NF_NAT_IRC \
-	"
-
-	if kernel_is -lt 4 19; then
-		CONFIG_CHECK+=" ~NF_CONNTRACK_IPV4"
-	fi
-
-	linux-info_pkg_setup
-}
-
-src_configure() {
-	# This erroneously checks for BASH_VERSION_PATH rather than BASH_VERSION.
-	BASH_VERSION_PATH=${MY_BASH_VERSION} \
-	IPRANGE_VERSION=${MY_IPRANGE_VERSION} \
-	econf \
-		--disable-vnetbuild \
-		$(use_enable ipset update-ipsets) \
-		$(use_enable doc) \
-		$(use_enable ipv6)
-}
-
-src_install() {
-	default
-
-	newconfd "${FILESDIR}"/firehol.confd firehol
-	newinitd "${FILESDIR}"/firehol.initd firehol
-	newconfd "${FILESDIR}"/fireqos.confd fireqos
-	newinitd "${FILESDIR}"/fireqos.initd fireqos
-
-	systemd_dounit contrib/fire{hol,qos}.service
-}
diff --git a/net-firewall/firehol/metadata.xml b/net-firewall/firehol/metadata.xml
deleted file mode 100644
index 03a2d73f509b..000000000000
--- a/net-firewall/firehol/metadata.xml
+++ /dev/null
@@ -1,14 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="person">
-    <email>chewi@gentoo.org</email>
-    <name>James Le Cuirot</name>
-  </maintainer>
-  <use>
-    <flag name="ipset">
-			Use <pkg>net-firewall/ipset</pkg>.
-		</flag>
-  </use>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/firewalld/Manifest b/net-firewall/firewalld/Manifest
deleted file mode 100644
index 3a739c1ad419..000000000000
--- a/net-firewall/firewalld/Manifest
+++ /dev/null
@@ -1,4 +0,0 @@
-DIST firewalld-2.3.0.tar.bz2 1307839 BLAKE2B f986af940841d7982c44ef5d7df9758f8b8f0e2bd511c61dc358d21e2d272ddc510571bcbdd6c7e47d0bd1ee6250240445094b30945c8de695007c1eb24ed642 SHA512 9a0fe1098c8bbb63bc4af04f56b7810d3d4e94be4247574daba64fb7a344488053f80426b7422c3a4620a54fee69a4264e1b0d66580757aac29aa65d723007c5
-DIST firewalld-2.3.1.tar.bz2 1309031 BLAKE2B 08893b400ec8ed5bc5148f8480fdadc6cd5019563fbac778257048a721fe34ef40e911b836a60492b51080da1d9ca5c83cdd0eb2a617e376008c6af46fe09156 SHA512 cf9e41c5a04705a70159e91f301a14526c2a9915dccd053e439ef10c7cbcec8b56f5adc250361041b9fd7d94fe5d314f32be0d1d816ebf520242c09513dc3e42
-DIST firewalld-2.3.2.tar.bz2 1328360 BLAKE2B 97bd5d580c13b2b61ffcc03b1763270659995934745fb308e2dadf0853c2bca138081a0b6f656e905ea7e4ed4a1c4a32706d3e9382d92c30fc0f1e28437751c4 SHA512 d3166e116614cee8b9d640000db8bab1b60f2e19102fd0b3c6609d557a77c0cefc0e2bea25194d889ac211e58a9384ae7fd2e590af9f7f2fc674a86fa3f0e681
-DIST firewalld-2.4.0.tar.bz2 1342244 BLAKE2B 8e878eefe9b458e2c9b742b55268839e746cfa5c8f4460df17fff74c4f6b03bad64981ec530565d6746fca05a797dcd82f3af99a3cb64dfbe98be6f7d6c38f41 SHA512 24071b2f0a2d5acf41430e41238480d78b1f758bceb493b44dba89dbc02a73f6adfc47359d108d502c41ac2b1ac8302bbda426d7f89095b44240c98739f58ae8
diff --git a/net-firewall/firewalld/files/firewalld-2.2.1-systemd-service.patch b/net-firewall/firewalld/files/firewalld-2.2.1-systemd-service.patch
deleted file mode 100644
index 461dec825c94..000000000000
--- a/net-firewall/firewalld/files/firewalld-2.2.1-systemd-service.patch
+++ /dev/null
@@ -1,19 +0,0 @@
-Drops the/an obsolete 'conflicts' line with old iptables services bug #833506
-Removes EnvironmentFile and FIREWALLD_ARGS variable
-===================================================================
---- a/config/firewalld.service.in
-+++ b/config/firewalld.service.in
-@@ -4,12 +4,10 @@
- Wants=network-pre.target
- After=dbus.service
- After=polkit.service
--Conflicts=iptables.service ip6tables.service ebtables.service ipset.service
- Documentation=man:firewalld(1)
-
- [Service]
--EnvironmentFile=-/etc/sysconfig/firewalld
--ExecStart=@sbindir@/firewalld --nofork --nopid $FIREWALLD_ARGS
-+ExecStart=@sbindir@/firewalld --nofork --nopid
- ExecReload=/bin/kill -HUP $MAINPID
- # supress to log debug and error output also to /var/log/messages
- StandardOutput=null
diff --git a/net-firewall/firewalld/files/firewalld-2.3.1-systemd-service.patch b/net-firewall/firewalld/files/firewalld-2.3.1-systemd-service.patch
deleted file mode 100644
index ba74d302535a..000000000000
--- a/net-firewall/firewalld/files/firewalld-2.3.1-systemd-service.patch
+++ /dev/null
@@ -1,18 +0,0 @@
-Drops the/an obsolete 'conflicts' line with old iptables services bug #833506
-Removes EnvironmentFile and FIREWALLD_ARGS variable
---- a/config/firewalld.service.in
-+++ b/config/firewalld.service.in
-@@ -4,12 +4,10 @@ Before=network-pre.target
- Wants=network-pre.target
- After=dbus.service
- After=polkit.service
--Conflicts=iptables.service ip6tables.service ebtables.service ipset.service
- Documentation=man:firewalld(1)
- 
- [Service]
--EnvironmentFile=-/etc/sysconfig/firewalld
--ExecStart=@sbindir@/firewalld --nofork --nopid $FIREWALLD_ARGS
-+ExecStart=@sbindir@/firewalld --nofork --nopid
- ExecStartPost=@bindir@/firewall-cmd --state
- # don't fail ExecStartPost on RUNNING_BUT_FAILED
- SuccessExitStatus=251
diff --git a/net-firewall/firewalld/files/firewalld-2.3.2-systemd-service.patch b/net-firewall/firewalld/files/firewalld-2.3.2-systemd-service.patch
deleted file mode 100644
index 3390b78d1d5c..000000000000
--- a/net-firewall/firewalld/files/firewalld-2.3.2-systemd-service.patch
+++ /dev/null
@@ -1,18 +0,0 @@
-Drops the/an obsolete 'conflicts' line with old iptables services bug #833506
-Removes EnvironmentFile and FIREWALLD_ARGS variable
---- a/config/firewalld.service.in
-+++ b/config/firewalld.service.in
-@@ -5,12 +5,10 @@ Wants=network-pre.target
- Requires=dbus.service
- After=dbus.service
- After=polkit.service
--Conflicts=iptables.service ip6tables.service ebtables.service ipset.service
- Documentation=man:firewalld(1)
- 
- [Service]
--EnvironmentFile=-/etc/sysconfig/firewalld
--ExecStart=@sbindir@/firewalld --nofork --nopid $FIREWALLD_ARGS
-+ExecStart=@sbindir@/firewalld --nofork --nopid
- ExecReload=/bin/kill -HUP $MAINPID
- StandardOutput=null
- StandardError=null
diff --git a/net-firewall/firewalld/files/firewalld.init b/net-firewall/firewalld/files/firewalld.init
deleted file mode 100644
index 3bd3623de868..000000000000
--- a/net-firewall/firewalld/files/firewalld.init
+++ /dev/null
@@ -1,12 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2018 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-description="FirewallD"
-command=/usr/sbin/firewalld
-pidfile=/var/run/firewalld.pid
-
-depend() {
-	need dbus
-	provide firewall
-}
diff --git a/net-firewall/firewalld/firewalld-2.3.0-r2.ebuild b/net-firewall/firewalld/firewalld-2.3.0-r2.ebuild
deleted file mode 100644
index c912198a69b1..000000000000
--- a/net-firewall/firewalld/firewalld-2.3.0-r2.ebuild
+++ /dev/null
@@ -1,219 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-PYTHON_COMPAT=( python3_{13..14} )
-inherit bash-completion-r1 gnome2-utils linux-info optfeature
-inherit plocale python-single-r1 systemd xdg-utils
-
-DESCRIPTION="Firewall daemon with D-Bus interface providing a dynamic firewall"
-HOMEPAGE="https://firewalld.org/"
-SRC_URI="https://github.com/firewalld/firewalld/releases/download/v${PV}/${P}.tar.bz2"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="amd64 arm arm64 ~loong ppc64 ~riscv x86"
-IUSE="gui selinux test"
-# Tests are too unreliable in sandbox environment
-RESTRICT="!test? ( test ) test"
-REQUIRED_USE="${PYTHON_REQUIRED_USE}"
-
-RDEPEND="
-	${PYTHON_DEPS}
-	|| ( >=sys-apps/openrc-0.11.5 sys-apps/systemd )
-	$(python_gen_cond_dep '
-		dev-python/dbus-python[${PYTHON_USEDEP}]
-		dev-python/pygobject:3[${PYTHON_USEDEP}]
-		>=net-firewall/nftables-0.9.4[python,json,${PYTHON_USEDEP}]
-		gui? (
-			dev-python/pyqt6[gui,widgets,${PYTHON_USEDEP}]
-			x11-libs/gtk+:3
-			x11-libs/libnotify[introspection]
-		)
-	')
-	net-firewall/nftables[xtables(+)]
-	selinux? ( sec-policy/selinux-firewalld )
-"
-DEPEND="
-	${RDEPEND}
-	dev-libs/glib:2
-"
-BDEPEND="
-	app-text/docbook-xml-dtd
-	>=dev-util/intltool-0.35
-	sys-devel/gettext
-"
-
-# Testsuite's Makefile.am calls missing(!)
-# ... but this seems to be consistent with the autoconf docs?
-# Needs more investigation: https://www.gnu.org/software/autoconf/manual/autoconf-2.67/html_node/autom4te-Invocation.html
-QA_AM_MAINTAINER_MODE=".*--run autom4te --language=autotest.*"
-
-PLOCALES="ar as ast bg bn_IN ca cs da de el en_GB en_US es et eu fa fi fr gl gu hi hr hu ia id it ja ka kn ko lt ml mr nl or pa pl pt pt_BR ro ru si sk sl sq sr sr@latin sv ta te tr uk zh_CN zh_TW"
-
-PATCHES=(
-	"${FILESDIR}"/${PN}-2.2.1-systemd-service.patch
-)
-
-pkg_setup() {
-	# See bug #830132 for the huge list
-	# We can probably narrow it down a bit but it's rather fragile
-	local CONFIG_CHECK="
-		~NF_CONNTRACK ~NETFILTER_XT_MATCH_CONNTRACK
-		~NETFILTER
-		~NETFILTER_ADVANCED
-		~NETFILTER_INGRESS
-		~NF_NAT_MASQUERADE
-		~NF_NAT_REDIRECT
-		~NF_TABLES_INET
-		~NF_TABLES_IPV4
-		~NF_TABLES_IPV6
-		~NF_CONNTRACK
-		~NF_CONNTRACK_BROADCAST
-		~NF_CONNTRACK_NETBIOS_NS
-		~NF_CONNTRACK_TFTP
-		~NF_CT_NETLINK
-		~NF_CT_NETLINK_HELPER
-		~NF_DEFRAG_IPV4
-		~NF_DEFRAG_IPV6
-		~NF_NAT
-		~NF_NAT_TFTP
-		~NF_REJECT_IPV4
-		~NF_REJECT_IPV6
-		~NF_SOCKET_IPV4
-		~NF_SOCKET_IPV6
-		~NF_TABLES
-		~NF_TPROXY_IPV4
-		~NF_TPROXY_IPV6
-		~IP_NF_FILTER
-		~IP_NF_IPTABLES
-		~IP_NF_MANGLE
-		~IP_NF_NAT
-		~IP_NF_RAW
-		~IP_NF_SECURITY
-		~IP_NF_TARGET_MASQUERADE
-		~IP_NF_TARGET_REJECT
-		~IP6_NF_FILTER
-		~IP6_NF_IPTABLES
-		~IP6_NF_MANGLE
-		~IP6_NF_NAT
-		~IP6_NF_RAW
-		~IP6_NF_SECURITY
-		~IP6_NF_TARGET_MASQUERADE
-		~IP6_NF_TARGET_REJECT
-		~IP_SET
-		~NETFILTER_CONNCOUNT
-		~NETFILTER_NETLINK
-		~NETFILTER_NETLINK_OSF
-		~NETFILTER_NETLINK_QUEUE
-		~NETFILTER_SYNPROXY
-		~NETFILTER_XTABLES
-		~NETFILTER_XT_CONNMARK
-		~NETFILTER_XT_MATCH_CONNTRACK
-		~NETFILTER_XT_MATCH_MULTIPORT
-		~NETFILTER_XT_MATCH_STATE
-		~NETFILTER_XT_NAT
-		~NETFILTER_XT_TARGET_MASQUERADE
-		~NFT_COMPAT
-		~NFT_CT
-		~NFT_FIB
-		~NFT_FIB_INET
-		~NFT_FIB_IPV4
-		~NFT_FIB_IPV6
-		~NFT_HASH
-		~NFT_LIMIT
-		~NFT_LOG
-		~NFT_MASQ
-		~NFT_NAT
-		~NFT_QUEUE
-		~NFT_QUOTA
-		~NFT_REDIR
-		~NFT_REJECT
-		~NFT_REJECT_INET
-		~NFT_REJECT_IPV4
-		~NFT_REJECT_IPV6
-		~NFT_SOCKET
-		~NFT_SYNPROXY
-		~NFT_TPROXY
-		~NFT_TUNNEL
-		~NFT_XFRM
-	"
-
-	# kernel >= 4.19 has a unified NF_CONNTRACK module, bug #692944
-	if kernel_is -lt 4 19; then
-		CONFIG_CHECK+=" ~NF_CONNTRACK_IPV4 ~NF_CONNTRACK_IPV6"
-	fi
-
-	# bug #831259
-	if kernel_is -le 5 4 ; then
-		CONFIG_CHECK+=" ~NF_TABLES_SET"
-	fi
-
-	# bug #853055
-	if kernel_is -lt 5 18 ; then
-		CONFIG_CHECK+=" ~NFT_COUNTER"
-	fi
-
-	# bug #926685
-	if kernel_is -le 6 1 ; then
-		CONFIG_CHECK+=" ~NFT_OBJREF"
-	fi
-
-	linux-info_pkg_setup
-}
-
-src_prepare() {
-	default
-
-	plocale_find_changes "po" "" ".po" || die
-	plocale_get_locales | sed -e 's/ /\n/g' > po/LINGUAS
-}
-
-src_configure() {
-	python_setup
-
-	local myeconfargs=(
-		--enable-systemd
-		--with-systemd-unitdir="$(systemd_get_systemunitdir)"
-		--with-bashcompletiondir="$(get_bashcompdir)"
-	)
-
-	econf "${myeconfargs[@]}"
-}
-
-src_install() {
-	default
-	python_optimize
-
-	# Get rid of junk
-	rm -rf "${ED}"/etc/sysconfig/ || die
-
-	# For non-gui installs we need to remove GUI bits
-	if ! use gui; then
-		rm -rf "${ED}"/etc/xdg/autostart || die
-		rm -f "${ED}"/usr/bin/firewall-applet || die
-		rm -f "${ED}"/usr/bin/firewall-config || die
-		rm -rf "${ED}"/usr/share/applications || die
-		rm -rf "${ED}"/usr/share/icons || die
-	fi
-
-	newinitd "${FILESDIR}"/firewalld.init firewalld
-}
-
-pkg_preinst() {
-	gnome2_schemas_savelist
-}
-
-pkg_postinst() {
-	xdg_icon_cache_update
-	gnome2_schemas_update
-
-	# bug #833569
-	optfeature "changing zones with NetworkManager" gnome-extra/nm-applet
-}
-
-pkg_postrm() {
-	xdg_icon_cache_update
-	gnome2_schemas_update
-}
diff --git a/net-firewall/firewalld/firewalld-2.3.1-r1.ebuild b/net-firewall/firewalld/firewalld-2.3.1-r1.ebuild
deleted file mode 100644
index 26342f0a5118..000000000000
--- a/net-firewall/firewalld/firewalld-2.3.1-r1.ebuild
+++ /dev/null
@@ -1,227 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-PYTHON_COMPAT=( python3_{13..14} )
-inherit bash-completion-r1 gnome2-utils linux-info optfeature
-inherit plocale python-single-r1 systemd xdg-utils
-
-DESCRIPTION="Firewall daemon with D-Bus interface providing a dynamic firewall"
-HOMEPAGE="https://firewalld.org/"
-SRC_URI="https://github.com/firewalld/firewalld/releases/download/v${PV}/${P}.tar.bz2"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="amd64 arm arm64 ~loong ppc64 ~riscv x86"
-IUSE="gui selinux test"
-# Tests are too unreliable in sandbox environment
-RESTRICT="!test? ( test ) test"
-REQUIRED_USE="${PYTHON_REQUIRED_USE}"
-
-RDEPEND="
-	${PYTHON_DEPS}
-	|| ( >=sys-apps/openrc-0.11.5 sys-apps/systemd )
-	$(python_gen_cond_dep '
-		dev-python/dbus-python[${PYTHON_USEDEP}]
-		dev-python/pygobject:3[${PYTHON_USEDEP}]
-		>=net-firewall/nftables-0.9.4[python,json,${PYTHON_USEDEP}]
-		gui? (
-			dev-python/pyqt6[gui,widgets,${PYTHON_USEDEP}]
-			x11-libs/gtk+:3
-			x11-libs/libnotify[introspection]
-		)
-	')
-	net-firewall/ipset
-	net-firewall/nftables[xtables(+)]
-	selinux? ( sec-policy/selinux-firewalld )
-"
-DEPEND="
-	${RDEPEND}
-	dev-libs/glib:2
-"
-BDEPEND="
-	app-text/docbook-xml-dtd
-	>=dev-util/intltool-0.35
-	sys-devel/gettext
-"
-
-# Testsuite's Makefile.am calls missing(!)
-# ... but this seems to be consistent with the autoconf docs?
-# Needs more investigation: https://www.gnu.org/software/autoconf/manual/autoconf-2.67/html_node/autom4te-Invocation.html
-QA_AM_MAINTAINER_MODE=".*--run autom4te --language=autotest.*"
-
-PLOCALES="ar as ast bg bn_IN ca cs da de el en_GB en_US es et eu fa fi fr gl gu hi hr hu ia id it ja ka kn ko lt ml mr nl or pa pl pt pt_BR ro ru si sk sl sq sr sr@latin sv ta te tr uk zh_CN zh_TW"
-
-PATCHES=(
-	"${FILESDIR}"/${PN}-2.3.1-systemd-service.patch
-)
-
-pkg_setup() {
-	# See bug #830132 for the huge list
-	# We can probably narrow it down a bit but it's rather fragile
-	local CONFIG_CHECK="
-		~NF_CONNTRACK ~NETFILTER_XT_MATCH_CONNTRACK
-		~NETFILTER
-		~NETFILTER_ADVANCED
-		~NETFILTER_INGRESS
-		~NF_NAT_MASQUERADE
-		~NF_NAT_REDIRECT
-		~NF_TABLES_INET
-		~NF_TABLES_IPV4
-		~NF_TABLES_IPV6
-		~NF_CONNTRACK
-		~NF_CONNTRACK_BROADCAST
-		~NF_CONNTRACK_NETBIOS_NS
-		~NF_CONNTRACK_TFTP
-		~NF_CT_NETLINK
-		~NF_CT_NETLINK_HELPER
-		~NF_DEFRAG_IPV4
-		~NF_DEFRAG_IPV6
-		~NF_NAT
-		~NF_NAT_TFTP
-		~NF_REJECT_IPV4
-		~NF_REJECT_IPV6
-		~NF_SOCKET_IPV4
-		~NF_SOCKET_IPV6
-		~NF_TABLES
-		~NF_TPROXY_IPV4
-		~NF_TPROXY_IPV6
-		~IP_NF_FILTER
-		~IP_NF_IPTABLES
-		~IP_NF_MANGLE
-		~IP_NF_NAT
-		~IP_NF_RAW
-		~IP_NF_SECURITY
-		~IP_NF_TARGET_MASQUERADE
-		~IP_NF_TARGET_REJECT
-		~IP6_NF_FILTER
-		~IP6_NF_IPTABLES
-		~IP6_NF_MANGLE
-		~IP6_NF_NAT
-		~IP6_NF_RAW
-		~IP6_NF_SECURITY
-		~IP6_NF_TARGET_MASQUERADE
-		~IP6_NF_TARGET_REJECT
-		~IP_SET
-		~NETFILTER_CONNCOUNT
-		~NETFILTER_NETLINK
-		~NETFILTER_NETLINK_OSF
-		~NETFILTER_NETLINK_QUEUE
-		~NETFILTER_SYNPROXY
-		~NETFILTER_XTABLES
-		~NETFILTER_XT_CONNMARK
-		~NETFILTER_XT_MATCH_CONNTRACK
-		~NETFILTER_XT_MATCH_MULTIPORT
-		~NETFILTER_XT_MATCH_STATE
-		~NETFILTER_XT_NAT
-		~NETFILTER_XT_TARGET_MASQUERADE
-		~NFT_COMPAT
-		~NFT_CT
-		~NFT_FIB
-		~NFT_FIB_INET
-		~NFT_FIB_IPV4
-		~NFT_FIB_IPV6
-		~NFT_HASH
-		~NFT_LIMIT
-		~NFT_LOG
-		~NFT_MASQ
-		~NFT_NAT
-		~NFT_QUEUE
-		~NFT_QUOTA
-		~NFT_REDIR
-		~NFT_REJECT
-		~NFT_REJECT_INET
-		~NFT_REJECT_IPV4
-		~NFT_REJECT_IPV6
-		~NFT_SOCKET
-		~NFT_SYNPROXY
-		~NFT_TPROXY
-		~NFT_TUNNEL
-		~NFT_XFRM
-	"
-
-	# kernel >= 4.19 has a unified NF_CONNTRACK module, bug #692944
-	if kernel_is -lt 4 19; then
-		CONFIG_CHECK+=" ~NF_CONNTRACK_IPV4 ~NF_CONNTRACK_IPV6"
-	fi
-
-	# bug #831259
-	if kernel_is -le 5 4 ; then
-		CONFIG_CHECK+=" ~NF_TABLES_SET"
-	fi
-
-	# bug #853055
-	if kernel_is -lt 5 18 ; then
-		CONFIG_CHECK+=" ~NFT_COUNTER"
-	fi
-
-	# bug #926685
-	if kernel_is -le 6 1 ; then
-		CONFIG_CHECK+=" ~NFT_OBJREF"
-	fi
-
-	linux-info_pkg_setup
-}
-
-src_prepare() {
-	default
-
-	# Skip XML schema verification for tests
-	cat <<-EOF > config/xmlschema/check.sh || die
-	#!/bin/sh
-	exit 0
-	EOF
-	chmod +x config/xmlschema/check.sh || die
-
-	plocale_find_changes "po" "" ".po" || die
-	plocale_get_locales | sed -e 's/ /\n/g' > po/LINGUAS
-}
-
-src_configure() {
-	python_setup
-
-	local myeconfargs=(
-		--enable-systemd
-		--with-systemd-unitdir="$(systemd_get_systemunitdir)"
-		--with-bashcompletiondir="$(get_bashcompdir)"
-	)
-
-	econf "${myeconfargs[@]}"
-}
-
-src_install() {
-	default
-	python_optimize
-
-	# Get rid of junk
-	rm -rf "${ED}"/etc/sysconfig/ || die
-
-	# For non-gui installs we need to remove GUI bits
-	if ! use gui; then
-		rm -rf "${ED}"/etc/xdg/autostart || die
-		rm -f "${ED}"/usr/bin/firewall-applet || die
-		rm -f "${ED}"/usr/bin/firewall-config || die
-		rm -rf "${ED}"/usr/share/applications || die
-		rm -rf "${ED}"/usr/share/icons || die
-	fi
-
-	newinitd "${FILESDIR}"/firewalld.init firewalld
-}
-
-pkg_preinst() {
-	gnome2_schemas_savelist
-}
-
-pkg_postinst() {
-	xdg_icon_cache_update
-	gnome2_schemas_update
-
-	# bug #833569
-	optfeature "changing zones with NetworkManager" gnome-extra/nm-applet
-}
-
-pkg_postrm() {
-	xdg_icon_cache_update
-	gnome2_schemas_update
-}
diff --git a/net-firewall/firewalld/firewalld-2.3.1.ebuild b/net-firewall/firewalld/firewalld-2.3.1.ebuild
deleted file mode 100644
index e9b8823cd46e..000000000000
--- a/net-firewall/firewalld/firewalld-2.3.1.ebuild
+++ /dev/null
@@ -1,226 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-PYTHON_COMPAT=( python3_{13..14} )
-inherit bash-completion-r1 gnome2-utils linux-info optfeature
-inherit plocale python-single-r1 systemd xdg-utils
-
-DESCRIPTION="Firewall daemon with D-Bus interface providing a dynamic firewall"
-HOMEPAGE="https://firewalld.org/"
-SRC_URI="https://github.com/firewalld/firewalld/releases/download/v${PV}/${P}.tar.bz2"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="amd64 arm arm64 ~loong ppc64 ~riscv x86"
-IUSE="gui selinux test"
-# Tests are too unreliable in sandbox environment
-RESTRICT="!test? ( test ) test"
-REQUIRED_USE="${PYTHON_REQUIRED_USE}"
-
-RDEPEND="
-	${PYTHON_DEPS}
-	|| ( >=sys-apps/openrc-0.11.5 sys-apps/systemd )
-	$(python_gen_cond_dep '
-		dev-python/dbus-python[${PYTHON_USEDEP}]
-		dev-python/pygobject:3[${PYTHON_USEDEP}]
-		>=net-firewall/nftables-0.9.4[python,json,${PYTHON_USEDEP}]
-		gui? (
-			dev-python/pyqt6[gui,widgets,${PYTHON_USEDEP}]
-			x11-libs/gtk+:3
-			x11-libs/libnotify[introspection]
-		)
-	')
-	net-firewall/nftables[xtables(+)]
-	selinux? ( sec-policy/selinux-firewalld )
-"
-DEPEND="
-	${RDEPEND}
-	dev-libs/glib:2
-"
-BDEPEND="
-	app-text/docbook-xml-dtd
-	>=dev-util/intltool-0.35
-	sys-devel/gettext
-"
-
-# Testsuite's Makefile.am calls missing(!)
-# ... but this seems to be consistent with the autoconf docs?
-# Needs more investigation: https://www.gnu.org/software/autoconf/manual/autoconf-2.67/html_node/autom4te-Invocation.html
-QA_AM_MAINTAINER_MODE=".*--run autom4te --language=autotest.*"
-
-PLOCALES="ar as ast bg bn_IN ca cs da de el en_GB en_US es et eu fa fi fr gl gu hi hr hu ia id it ja ka kn ko lt ml mr nl or pa pl pt pt_BR ro ru si sk sl sq sr sr@latin sv ta te tr uk zh_CN zh_TW"
-
-PATCHES=(
-	"${FILESDIR}"/${PN}-2.3.1-systemd-service.patch
-)
-
-pkg_setup() {
-	# See bug #830132 for the huge list
-	# We can probably narrow it down a bit but it's rather fragile
-	local CONFIG_CHECK="
-		~NF_CONNTRACK ~NETFILTER_XT_MATCH_CONNTRACK
-		~NETFILTER
-		~NETFILTER_ADVANCED
-		~NETFILTER_INGRESS
-		~NF_NAT_MASQUERADE
-		~NF_NAT_REDIRECT
-		~NF_TABLES_INET
-		~NF_TABLES_IPV4
-		~NF_TABLES_IPV6
-		~NF_CONNTRACK
-		~NF_CONNTRACK_BROADCAST
-		~NF_CONNTRACK_NETBIOS_NS
-		~NF_CONNTRACK_TFTP
-		~NF_CT_NETLINK
-		~NF_CT_NETLINK_HELPER
-		~NF_DEFRAG_IPV4
-		~NF_DEFRAG_IPV6
-		~NF_NAT
-		~NF_NAT_TFTP
-		~NF_REJECT_IPV4
-		~NF_REJECT_IPV6
-		~NF_SOCKET_IPV4
-		~NF_SOCKET_IPV6
-		~NF_TABLES
-		~NF_TPROXY_IPV4
-		~NF_TPROXY_IPV6
-		~IP_NF_FILTER
-		~IP_NF_IPTABLES
-		~IP_NF_MANGLE
-		~IP_NF_NAT
-		~IP_NF_RAW
-		~IP_NF_SECURITY
-		~IP_NF_TARGET_MASQUERADE
-		~IP_NF_TARGET_REJECT
-		~IP6_NF_FILTER
-		~IP6_NF_IPTABLES
-		~IP6_NF_MANGLE
-		~IP6_NF_NAT
-		~IP6_NF_RAW
-		~IP6_NF_SECURITY
-		~IP6_NF_TARGET_MASQUERADE
-		~IP6_NF_TARGET_REJECT
-		~IP_SET
-		~NETFILTER_CONNCOUNT
-		~NETFILTER_NETLINK
-		~NETFILTER_NETLINK_OSF
-		~NETFILTER_NETLINK_QUEUE
-		~NETFILTER_SYNPROXY
-		~NETFILTER_XTABLES
-		~NETFILTER_XT_CONNMARK
-		~NETFILTER_XT_MATCH_CONNTRACK
-		~NETFILTER_XT_MATCH_MULTIPORT
-		~NETFILTER_XT_MATCH_STATE
-		~NETFILTER_XT_NAT
-		~NETFILTER_XT_TARGET_MASQUERADE
-		~NFT_COMPAT
-		~NFT_CT
-		~NFT_FIB
-		~NFT_FIB_INET
-		~NFT_FIB_IPV4
-		~NFT_FIB_IPV6
-		~NFT_HASH
-		~NFT_LIMIT
-		~NFT_LOG
-		~NFT_MASQ
-		~NFT_NAT
-		~NFT_QUEUE
-		~NFT_QUOTA
-		~NFT_REDIR
-		~NFT_REJECT
-		~NFT_REJECT_INET
-		~NFT_REJECT_IPV4
-		~NFT_REJECT_IPV6
-		~NFT_SOCKET
-		~NFT_SYNPROXY
-		~NFT_TPROXY
-		~NFT_TUNNEL
-		~NFT_XFRM
-	"
-
-	# kernel >= 4.19 has a unified NF_CONNTRACK module, bug #692944
-	if kernel_is -lt 4 19; then
-		CONFIG_CHECK+=" ~NF_CONNTRACK_IPV4 ~NF_CONNTRACK_IPV6"
-	fi
-
-	# bug #831259
-	if kernel_is -le 5 4 ; then
-		CONFIG_CHECK+=" ~NF_TABLES_SET"
-	fi
-
-	# bug #853055
-	if kernel_is -lt 5 18 ; then
-		CONFIG_CHECK+=" ~NFT_COUNTER"
-	fi
-
-	# bug #926685
-	if kernel_is -le 6 1 ; then
-		CONFIG_CHECK+=" ~NFT_OBJREF"
-	fi
-
-	linux-info_pkg_setup
-}
-
-src_prepare() {
-	default
-
-	# Skip XML schema verification for tests
-	cat <<-EOF > config/xmlschema/check.sh || die
-	#!/bin/sh
-	exit 0
-	EOF
-	chmod +x config/xmlschema/check.sh || die
-
-	plocale_find_changes "po" "" ".po" || die
-	plocale_get_locales | sed -e 's/ /\n/g' > po/LINGUAS
-}
-
-src_configure() {
-	python_setup
-
-	local myeconfargs=(
-		--enable-systemd
-		--with-systemd-unitdir="$(systemd_get_systemunitdir)"
-		--with-bashcompletiondir="$(get_bashcompdir)"
-	)
-
-	econf "${myeconfargs[@]}"
-}
-
-src_install() {
-	default
-	python_optimize
-
-	# Get rid of junk
-	rm -rf "${ED}"/etc/sysconfig/ || die
-
-	# For non-gui installs we need to remove GUI bits
-	if ! use gui; then
-		rm -rf "${ED}"/etc/xdg/autostart || die
-		rm -f "${ED}"/usr/bin/firewall-applet || die
-		rm -f "${ED}"/usr/bin/firewall-config || die
-		rm -rf "${ED}"/usr/share/applications || die
-		rm -rf "${ED}"/usr/share/icons || die
-	fi
-
-	newinitd "${FILESDIR}"/firewalld.init firewalld
-}
-
-pkg_preinst() {
-	gnome2_schemas_savelist
-}
-
-pkg_postinst() {
-	xdg_icon_cache_update
-	gnome2_schemas_update
-
-	# bug #833569
-	optfeature "changing zones with NetworkManager" gnome-extra/nm-applet
-}
-
-pkg_postrm() {
-	xdg_icon_cache_update
-	gnome2_schemas_update
-}
diff --git a/net-firewall/firewalld/firewalld-2.3.2.ebuild b/net-firewall/firewalld/firewalld-2.3.2.ebuild
deleted file mode 100644
index 0530c3174104..000000000000
--- a/net-firewall/firewalld/firewalld-2.3.2.ebuild
+++ /dev/null
@@ -1,227 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-PYTHON_COMPAT=( python3_{13..14} )
-inherit bash-completion-r1 gnome2-utils linux-info optfeature
-inherit plocale python-single-r1 systemd xdg-utils
-
-DESCRIPTION="Firewall daemon with D-Bus interface providing a dynamic firewall"
-HOMEPAGE="https://firewalld.org/"
-SRC_URI="https://github.com/firewalld/firewalld/releases/download/v${PV}/${P}.tar.bz2"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="~amd64 ~arm ~arm64 ~loong ~ppc64 ~riscv ~x86"
-IUSE="gui selinux test"
-# Tests are too unreliable in sandbox environment
-RESTRICT="!test? ( test ) test"
-REQUIRED_USE="${PYTHON_REQUIRED_USE}"
-
-RDEPEND="
-	${PYTHON_DEPS}
-	|| ( >=sys-apps/openrc-0.11.5 sys-apps/systemd )
-	$(python_gen_cond_dep '
-		dev-python/dbus-python[${PYTHON_USEDEP}]
-		dev-python/pygobject:3[${PYTHON_USEDEP}]
-		>=net-firewall/nftables-0.9.4[python,json,${PYTHON_USEDEP}]
-		gui? (
-			dev-python/pyqt6[gui,widgets,${PYTHON_USEDEP}]
-			x11-libs/gtk+:3
-			x11-libs/libnotify[introspection]
-		)
-	')
-	net-firewall/ipset
-	net-firewall/nftables[xtables(+)]
-	selinux? ( sec-policy/selinux-firewalld )
-"
-DEPEND="
-	${RDEPEND}
-	dev-libs/glib:2
-"
-BDEPEND="
-	app-text/docbook-xml-dtd
-	>=dev-util/intltool-0.35
-	sys-devel/gettext
-"
-
-# Testsuite's Makefile.am calls missing(!)
-# ... but this seems to be consistent with the autoconf docs?
-# Needs more investigation: https://www.gnu.org/software/autoconf/manual/autoconf-2.67/html_node/autom4te-Invocation.html
-QA_AM_MAINTAINER_MODE=".*--run autom4te --language=autotest.*"
-
-PLOCALES="ar as ast bg bn_IN ca cs da de el en_GB en_US es et eu fa fi fr gl gu hi hr hu ia id it ja ka kn ko lt ml mr nl or pa pl pt pt_BR ro ru si sk sl sq sr sr@latin sv ta te tr uk zh_CN zh_TW"
-
-PATCHES=(
-	"${FILESDIR}"/${PN}-2.3.2-systemd-service.patch
-)
-
-pkg_setup() {
-	# See bug #830132 for the huge list
-	# We can probably narrow it down a bit but it's rather fragile
-	local CONFIG_CHECK="
-		~NF_CONNTRACK ~NETFILTER_XT_MATCH_CONNTRACK
-		~NETFILTER
-		~NETFILTER_ADVANCED
-		~NETFILTER_INGRESS
-		~NF_NAT_MASQUERADE
-		~NF_NAT_REDIRECT
-		~NF_TABLES_INET
-		~NF_TABLES_IPV4
-		~NF_TABLES_IPV6
-		~NF_CONNTRACK
-		~NF_CONNTRACK_BROADCAST
-		~NF_CONNTRACK_NETBIOS_NS
-		~NF_CONNTRACK_TFTP
-		~NF_CT_NETLINK
-		~NF_CT_NETLINK_HELPER
-		~NF_DEFRAG_IPV4
-		~NF_DEFRAG_IPV6
-		~NF_NAT
-		~NF_NAT_TFTP
-		~NF_REJECT_IPV4
-		~NF_REJECT_IPV6
-		~NF_SOCKET_IPV4
-		~NF_SOCKET_IPV6
-		~NF_TABLES
-		~NF_TPROXY_IPV4
-		~NF_TPROXY_IPV6
-		~IP_NF_FILTER
-		~IP_NF_IPTABLES
-		~IP_NF_MANGLE
-		~IP_NF_NAT
-		~IP_NF_RAW
-		~IP_NF_SECURITY
-		~IP_NF_TARGET_MASQUERADE
-		~IP_NF_TARGET_REJECT
-		~IP6_NF_FILTER
-		~IP6_NF_IPTABLES
-		~IP6_NF_MANGLE
-		~IP6_NF_NAT
-		~IP6_NF_RAW
-		~IP6_NF_SECURITY
-		~IP6_NF_TARGET_MASQUERADE
-		~IP6_NF_TARGET_REJECT
-		~IP_SET
-		~NETFILTER_CONNCOUNT
-		~NETFILTER_NETLINK
-		~NETFILTER_NETLINK_OSF
-		~NETFILTER_NETLINK_QUEUE
-		~NETFILTER_SYNPROXY
-		~NETFILTER_XTABLES
-		~NETFILTER_XT_CONNMARK
-		~NETFILTER_XT_MATCH_CONNTRACK
-		~NETFILTER_XT_MATCH_MULTIPORT
-		~NETFILTER_XT_MATCH_STATE
-		~NETFILTER_XT_NAT
-		~NETFILTER_XT_TARGET_MASQUERADE
-		~NFT_COMPAT
-		~NFT_CT
-		~NFT_FIB
-		~NFT_FIB_INET
-		~NFT_FIB_IPV4
-		~NFT_FIB_IPV6
-		~NFT_HASH
-		~NFT_LIMIT
-		~NFT_LOG
-		~NFT_MASQ
-		~NFT_NAT
-		~NFT_QUEUE
-		~NFT_QUOTA
-		~NFT_REDIR
-		~NFT_REJECT
-		~NFT_REJECT_INET
-		~NFT_REJECT_IPV4
-		~NFT_REJECT_IPV6
-		~NFT_SOCKET
-		~NFT_SYNPROXY
-		~NFT_TPROXY
-		~NFT_TUNNEL
-		~NFT_XFRM
-	"
-
-	# kernel >= 4.19 has a unified NF_CONNTRACK module, bug #692944
-	if kernel_is -lt 4 19; then
-		CONFIG_CHECK+=" ~NF_CONNTRACK_IPV4 ~NF_CONNTRACK_IPV6"
-	fi
-
-	# bug #831259
-	if kernel_is -le 5 4 ; then
-		CONFIG_CHECK+=" ~NF_TABLES_SET"
-	fi
-
-	# bug #853055
-	if kernel_is -lt 5 18 ; then
-		CONFIG_CHECK+=" ~NFT_COUNTER"
-	fi
-
-	# bug #926685
-	if kernel_is -le 6 1 ; then
-		CONFIG_CHECK+=" ~NFT_OBJREF"
-	fi
-
-	linux-info_pkg_setup
-}
-
-src_prepare() {
-	default
-
-	# Skip XML schema verification for tests
-	cat <<-EOF > config/xmlschema/check.sh || die
-	#!/bin/sh
-	exit 0
-	EOF
-	chmod +x config/xmlschema/check.sh || die
-
-	plocale_find_changes "po" "" ".po" || die
-	plocale_get_locales | sed -e 's/ /\n/g' > po/LINGUAS
-}
-
-src_configure() {
-	python_setup
-
-	local myeconfargs=(
-		--enable-systemd
-		--with-systemd-unitdir="$(systemd_get_systemunitdir)"
-		--with-bashcompletiondir="$(get_bashcompdir)"
-	)
-
-	econf "${myeconfargs[@]}"
-}
-
-src_install() {
-	default
-	python_optimize
-
-	# Get rid of junk
-	rm -rf "${ED}"/etc/sysconfig/ || die
-
-	# For non-gui installs we need to remove GUI bits
-	if ! use gui; then
-		rm -rf "${ED}"/etc/xdg/autostart || die
-		rm -f "${ED}"/usr/bin/firewall-applet || die
-		rm -f "${ED}"/usr/bin/firewall-config || die
-		rm -rf "${ED}"/usr/share/applications || die
-		rm -rf "${ED}"/usr/share/icons || die
-	fi
-
-	newinitd "${FILESDIR}"/firewalld.init firewalld
-}
-
-pkg_preinst() {
-	gnome2_schemas_savelist
-}
-
-pkg_postinst() {
-	xdg_icon_cache_update
-	gnome2_schemas_update
-
-	# bug #833569
-	optfeature "changing zones with NetworkManager" gnome-extra/nm-applet
-}
-
-pkg_postrm() {
-	xdg_icon_cache_update
-	gnome2_schemas_update
-}
diff --git a/net-firewall/firewalld/firewalld-2.4.0.ebuild b/net-firewall/firewalld/firewalld-2.4.0.ebuild
deleted file mode 100644
index 86d1ec60e178..000000000000
--- a/net-firewall/firewalld/firewalld-2.4.0.ebuild
+++ /dev/null
@@ -1,227 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-PYTHON_COMPAT=( python3_{13..14} )
-inherit bash-completion-r1 gnome2-utils linux-info optfeature
-inherit plocale python-single-r1 systemd xdg-utils
-
-DESCRIPTION="Firewall daemon with D-Bus interface providing a dynamic firewall"
-HOMEPAGE="https://firewalld.org/"
-SRC_URI="https://github.com/firewalld/firewalld/releases/download/v${PV}/${P}.tar.bz2"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="amd64 arm arm64 ~loong ppc64 ~riscv x86"
-IUSE="gui selinux test"
-# Tests are too unreliable in sandbox environment
-RESTRICT="!test? ( test ) test"
-REQUIRED_USE="${PYTHON_REQUIRED_USE}"
-
-RDEPEND="
-	${PYTHON_DEPS}
-	|| ( >=sys-apps/openrc-0.11.5 sys-apps/systemd )
-	$(python_gen_cond_dep '
-		dev-python/dbus-python[${PYTHON_USEDEP}]
-		dev-python/pygobject:3[${PYTHON_USEDEP}]
-		>=net-firewall/nftables-0.9.4[python,json,${PYTHON_USEDEP}]
-		gui? (
-			dev-python/pyqt6[gui,widgets,${PYTHON_USEDEP}]
-			x11-libs/gtk+:3
-			x11-libs/libnotify[introspection]
-		)
-	')
-	net-firewall/ipset
-	net-firewall/nftables[xtables(+)]
-	selinux? ( sec-policy/selinux-firewalld )
-"
-DEPEND="
-	${RDEPEND}
-	dev-libs/glib:2
-"
-BDEPEND="
-	app-text/docbook-xml-dtd
-	>=dev-util/intltool-0.35
-	sys-devel/gettext
-"
-
-# Testsuite's Makefile.am calls missing(!)
-# ... but this seems to be consistent with the autoconf docs?
-# Needs more investigation: https://www.gnu.org/software/autoconf/manual/autoconf-2.67/html_node/autom4te-Invocation.html
-QA_AM_MAINTAINER_MODE=".*--run autom4te --language=autotest.*"
-
-PLOCALES="ar as ast bg bn_IN ca cs da de el en_GB en_US es et eu fa fi fr gl gu hi hr hu ia id it ja ka kn ko lt ml mr nl or pa pl pt pt_BR ro ru si sk sl sq sr sr@latin sv ta te tr uk zh_CN zh_TW"
-
-PATCHES=(
-	"${FILESDIR}"/${PN}-2.3.2-systemd-service.patch
-)
-
-pkg_setup() {
-	# See bug #830132 for the huge list
-	# We can probably narrow it down a bit but it's rather fragile
-	local CONFIG_CHECK="
-		~NF_CONNTRACK ~NETFILTER_XT_MATCH_CONNTRACK
-		~NETFILTER
-		~NETFILTER_ADVANCED
-		~NETFILTER_INGRESS
-		~NF_NAT_MASQUERADE
-		~NF_NAT_REDIRECT
-		~NF_TABLES_INET
-		~NF_TABLES_IPV4
-		~NF_TABLES_IPV6
-		~NF_CONNTRACK
-		~NF_CONNTRACK_BROADCAST
-		~NF_CONNTRACK_NETBIOS_NS
-		~NF_CONNTRACK_TFTP
-		~NF_CT_NETLINK
-		~NF_CT_NETLINK_HELPER
-		~NF_DEFRAG_IPV4
-		~NF_DEFRAG_IPV6
-		~NF_NAT
-		~NF_NAT_TFTP
-		~NF_REJECT_IPV4
-		~NF_REJECT_IPV6
-		~NF_SOCKET_IPV4
-		~NF_SOCKET_IPV6
-		~NF_TABLES
-		~NF_TPROXY_IPV4
-		~NF_TPROXY_IPV6
-		~IP_NF_FILTER
-		~IP_NF_IPTABLES
-		~IP_NF_MANGLE
-		~IP_NF_NAT
-		~IP_NF_RAW
-		~IP_NF_SECURITY
-		~IP_NF_TARGET_MASQUERADE
-		~IP_NF_TARGET_REJECT
-		~IP6_NF_FILTER
-		~IP6_NF_IPTABLES
-		~IP6_NF_MANGLE
-		~IP6_NF_NAT
-		~IP6_NF_RAW
-		~IP6_NF_SECURITY
-		~IP6_NF_TARGET_MASQUERADE
-		~IP6_NF_TARGET_REJECT
-		~IP_SET
-		~NETFILTER_CONNCOUNT
-		~NETFILTER_NETLINK
-		~NETFILTER_NETLINK_OSF
-		~NETFILTER_NETLINK_QUEUE
-		~NETFILTER_SYNPROXY
-		~NETFILTER_XTABLES
-		~NETFILTER_XT_CONNMARK
-		~NETFILTER_XT_MATCH_CONNTRACK
-		~NETFILTER_XT_MATCH_MULTIPORT
-		~NETFILTER_XT_MATCH_STATE
-		~NETFILTER_XT_NAT
-		~NETFILTER_XT_TARGET_MASQUERADE
-		~NFT_COMPAT
-		~NFT_CT
-		~NFT_FIB
-		~NFT_FIB_INET
-		~NFT_FIB_IPV4
-		~NFT_FIB_IPV6
-		~NFT_HASH
-		~NFT_LIMIT
-		~NFT_LOG
-		~NFT_MASQ
-		~NFT_NAT
-		~NFT_QUEUE
-		~NFT_QUOTA
-		~NFT_REDIR
-		~NFT_REJECT
-		~NFT_REJECT_INET
-		~NFT_REJECT_IPV4
-		~NFT_REJECT_IPV6
-		~NFT_SOCKET
-		~NFT_SYNPROXY
-		~NFT_TPROXY
-		~NFT_TUNNEL
-		~NFT_XFRM
-	"
-
-	# kernel >= 4.19 has a unified NF_CONNTRACK module, bug #692944
-	if kernel_is -lt 4 19; then
-		CONFIG_CHECK+=" ~NF_CONNTRACK_IPV4 ~NF_CONNTRACK_IPV6"
-	fi
-
-	# bug #831259
-	if kernel_is -le 5 4 ; then
-		CONFIG_CHECK+=" ~NF_TABLES_SET"
-	fi
-
-	# bug #853055
-	if kernel_is -lt 5 18 ; then
-		CONFIG_CHECK+=" ~NFT_COUNTER"
-	fi
-
-	# bug #926685
-	if kernel_is -le 6 1 ; then
-		CONFIG_CHECK+=" ~NFT_OBJREF"
-	fi
-
-	linux-info_pkg_setup
-}
-
-src_prepare() {
-	default
-
-	# Skip XML schema verification for tests
-	cat <<-EOF > config/xmlschema/check.sh || die
-	#!/bin/sh
-	exit 0
-	EOF
-	chmod +x config/xmlschema/check.sh || die
-
-	plocale_find_changes "po" "" ".po" || die
-	plocale_get_locales | sed -e 's/ /\n/g' > po/LINGUAS
-}
-
-src_configure() {
-	python_setup
-
-	local myeconfargs=(
-		--enable-systemd
-		--with-systemd-unitdir="$(systemd_get_systemunitdir)"
-		--with-bashcompletiondir="$(get_bashcompdir)"
-	)
-
-	econf "${myeconfargs[@]}"
-}
-
-src_install() {
-	default
-	python_optimize
-
-	# Get rid of junk
-	rm -rf "${ED}"/etc/sysconfig/ || die
-
-	# For non-gui installs we need to remove GUI bits
-	if ! use gui; then
-		rm -rf "${ED}"/etc/xdg/autostart || die
-		rm -f "${ED}"/usr/bin/firewall-applet || die
-		rm -f "${ED}"/usr/bin/firewall-config || die
-		rm -rf "${ED}"/usr/share/applications || die
-		rm -rf "${ED}"/usr/share/icons || die
-	fi
-
-	newinitd "${FILESDIR}"/firewalld.init firewalld
-}
-
-pkg_preinst() {
-	gnome2_schemas_savelist
-}
-
-pkg_postinst() {
-	xdg_icon_cache_update
-	gnome2_schemas_update
-
-	# bug #833569
-	optfeature "changing zones with NetworkManager" gnome-extra/nm-applet
-}
-
-pkg_postrm() {
-	xdg_icon_cache_update
-	gnome2_schemas_update
-}
diff --git a/net-firewall/firewalld/metadata.xml b/net-firewall/firewalld/metadata.xml
deleted file mode 100644
index dd27b14a3e04..000000000000
--- a/net-firewall/firewalld/metadata.xml
+++ /dev/null
@@ -1,13 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="project">
-    <email>virtualization@gentoo.org</email>
-    <name>Gentoo Virtualization Project</name>
-  </maintainer>
-  <maintainer type="person">
-    <email>sam@gentoo.org</email>
-    <name>Sam James</name>
-  </maintainer>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/fwbuilder/Manifest b/net-firewall/fwbuilder/Manifest
deleted file mode 100644
index d3d865096571..000000000000
--- a/net-firewall/fwbuilder/Manifest
+++ /dev/null
@@ -1 +0,0 @@
-DIST fwbuilder-6.0.0_rc1_p20230723-8013c00e.tar.gz 7292112 BLAKE2B 6dbacdbbd30e0af7c0a997e0b110e2a42285c0c76e8b60bb68344f7eb459b79bd0baf045edd53d5c8ae8299b4046d154c3be8270aa56ae2ac7a8102a7542723b SHA512 0f7093588ab11e5f47672d9b73acd22674eb3a4ece1f70f99c1b00aa16cf95a79740b68419fe3e700542bdafa5943a5a1dc7000f28885e8b870106c94a25af50
diff --git a/net-firewall/fwbuilder/files/fwbuilder-6.0.0_pre20200502-drop-Werror.patch b/net-firewall/fwbuilder/files/fwbuilder-6.0.0_pre20200502-drop-Werror.patch
deleted file mode 100644
index 36722122e5cb..000000000000
--- a/net-firewall/fwbuilder/files/fwbuilder-6.0.0_pre20200502-drop-Werror.patch
+++ /dev/null
@@ -1,25 +0,0 @@
-From e4c76883d8de814050893bec4d196d5d5f48c9c2 Mon Sep 17 00:00:00 2001
-From: Sam James <sam@gentoo.org>
-Date: Wed, 4 Aug 2021 20:46:56 +0100
-Subject: [PATCH] Drop -Werror
-
----
- CMakeLists.txt | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/CMakeLists.txt b/CMakeLists.txt
-index ddabd38..97477b0 100644
---- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -45,7 +45,7 @@ endif()
- set(CMAKE_CXX_STANDARD 11)
- set(CMAKE_POSITION_INDEPENDENT_CODE ON)
- set(CXX_DEFAULT_FLAGS # clang/GCC warnings
--	$<$<OR:$<CXX_COMPILER_ID:Clang>,$<CXX_COMPILER_ID:GNU>>:-Wall;-Wextra;-Werror;-Wno-overloaded-virtual>
-+	$<$<OR:$<CXX_COMPILER_ID:Clang>,$<CXX_COMPILER_ID:GNU>>:-Wall;-Wextra;-Wno-overloaded-virtual>
-                          # MSVC warnings
-     $<$<CXX_COMPILER_ID:MSVC>:/WX;/W4>)
- 
--- 
-2.32.0
-
diff --git a/net-firewall/fwbuilder/files/fwbuilder-6.0.0_rc1-automagic-ccache.patch b/net-firewall/fwbuilder/files/fwbuilder-6.0.0_rc1-automagic-ccache.patch
deleted file mode 100644
index d7f2cfb7e113..000000000000
--- a/net-firewall/fwbuilder/files/fwbuilder-6.0.0_rc1-automagic-ccache.patch
+++ /dev/null
@@ -1,28 +0,0 @@
-From 6021c352a009121870107ed37f07ee520110d4c2 Mon Sep 17 00:00:00 2001
-From: Sam James <sam@gentoo.org>
-Date: Fri, 27 Aug 2021 03:24:26 +0100
-Subject: [PATCH] Drop automagic ccache usage
-
----
- CMakeLists.txt | 5 -----
- 1 file changed, 5 deletions(-)
-
-diff --git a/CMakeLists.txt b/CMakeLists.txt
-index 97477b0..cd17c6a 100644
---- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -5,11 +5,6 @@ set(CMAKE_OSX_DEPLOYMENT_TARGET "10.9"
-     CACHE STRING "Minimum macOS deployment version"
- )
- 
--find_program(CCACHE_PROGRAM ccache)
--if(CCACHE_PROGRAM)
--    set_property(GLOBAL PROPERTY RULE_LAUNCH_COMPILE "${CCACHE_PROGRAM}")
--endif()
--
- project(firewallbuilder LANGUAGES CXX C)
- 
- ### Version variables and include file
--- 
-2.33.0
-
diff --git a/net-firewall/fwbuilder/files/fwbuilder-6.0.0_rc1-fix_version.patch b/net-firewall/fwbuilder/files/fwbuilder-6.0.0_rc1-fix_version.patch
deleted file mode 100644
index cce544a58a0c..000000000000
--- a/net-firewall/fwbuilder/files/fwbuilder-6.0.0_rc1-fix_version.patch
+++ /dev/null
@@ -1,11 +0,0 @@
---- a/cmake/VERSION.cmake
-+++ b/cmake/VERSION.cmake
-@@ -3,7 +3,7 @@
- set(PROJECT_VERSION_MAJOR "6")
- set(PROJECT_VERSION_MINOR "0")
- set(PROJECT_VERSION_PATCH "0")
--set(PROJECT_VERSION_EXTRA "-rc1")
-+set(PROJECT_VERSION_EXTRA "_rc1")
- set(PROJECT_GENERATION "${PROJECT_VERSION_MAJOR}.${PROJECT_VERSION_MINOR}")
- set(PROJECT_GENERATION_SHORT "${PROJECT_VERSION_MAJOR}${PROJECT_VERSION_MINOR}")
- set(PROJECT_VERSION "${PROJECT_VERSION_MAJOR}.${PROJECT_VERSION_MINOR}.${PROJECT_VERSION_PATCH}${PROJECT_VERSION_EXTRA}")
diff --git a/net-firewall/fwbuilder/files/fwbuilder-6.0.0_rc1_p20230723-docdir-nocompress.patch b/net-firewall/fwbuilder/files/fwbuilder-6.0.0_rc1_p20230723-docdir-nocompress.patch
deleted file mode 100644
index 1d3641ca15c2..000000000000
--- a/net-firewall/fwbuilder/files/fwbuilder-6.0.0_rc1_p20230723-docdir-nocompress.patch
+++ /dev/null
@@ -1,66 +0,0 @@
---- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -86,7 +86,7 @@
- else()
-   include(GNUInstallDirs)
-   set(FWB_INSTALL_DATADIR ${CMAKE_INSTALL_DATADIR}/fwbuilder-${PROJECT_VERSION})
--  set(FWB_INSTALL_DOCDIR ${CMAKE_INSTALL_DATADIR}/doc/fwbuilder-${PROJECT_VERSION})
-+  set(FWB_INSTALL_DOCDIR ${CMAKE_INSTALL_DOCDIR})
-   set(FWB_INSTALL_BINDIR ${CMAKE_INSTALL_BINDIR})
- endif()
- 
---- a/doc/CMakeLists.txt
-+++ b/doc/CMakeLists.txt
-@@ -3,42 +3,22 @@
- install(FILES
-         AUTHORS
-         ChangeLog
--        COPYING
-+        # COPYING
-         Credits
--        FWBuilder-Routing-LICENSE.txt
-+        # FWBuilder-Routing-LICENSE.txt
-         PatchAcceptancePolicy.txt
- 	${readme_files}
- 	DESTINATION ${FWB_INSTALL_DOCDIR})
- 
- if(UNIX AND NOT APPLE)
--    FIND_PROGRAM(GZIP_TOOL
--    	NAMES gzip
--    	PATHS /bin
--    	      /usr/bin
--    	      /usr/local/bin)
--    
--    IF(NOT GZIP_TOOL)
--        MESSAGE(FATAL_ERROR "Could not find gzip for man page compression.")
--    endif(NOT GZIP_TOOL)
--    
--    add_custom_target(generate_man ALL
--        COMMAND ${GZIP_TOOL} -c ${CMAKE_CURRENT_SOURCE_DIR}/fwbedit.1 > ${CMAKE_BINARY_DIR}/fwbedit.1.gz
--        COMMAND ${GZIP_TOOL} -c ${CMAKE_CURRENT_SOURCE_DIR}/fwbuilder.1 > ${CMAKE_BINARY_DIR}/fwbuilder.1.gz
--        COMMAND ${GZIP_TOOL} -c ${CMAKE_CURRENT_SOURCE_DIR}/fwb_iosacl.1 > ${CMAKE_BINARY_DIR}/fwb_iosacl.1.gz
--        COMMAND ${GZIP_TOOL} -c ${CMAKE_CURRENT_SOURCE_DIR}/fwb_ipf.1 > ${CMAKE_BINARY_DIR}/fwb_ipf.1.gz
--        COMMAND ${GZIP_TOOL} -c ${CMAKE_CURRENT_SOURCE_DIR}/fwb_ipfw.1 > ${CMAKE_BINARY_DIR}/fwb_ipfw.1.gz
--        COMMAND ${GZIP_TOOL} -c ${CMAKE_CURRENT_SOURCE_DIR}/fwb_ipt.1 > ${CMAKE_BINARY_DIR}/fwb_ipt.1.gz
--        COMMAND ${GZIP_TOOL} -c ${CMAKE_CURRENT_SOURCE_DIR}/fwb_pf.1 > ${CMAKE_BINARY_DIR}/fwb_pf.1.gz
--        COMMAND ${GZIP_TOOL} -c ${CMAKE_CURRENT_SOURCE_DIR}/fwb_pix.1 > ${CMAKE_BINARY_DIR}/fwb_pix.1.gz)
--    
--    install(FILES ${CMAKE_BINARY_DIR}/fwbedit.1.gz
--            ${CMAKE_BINARY_DIR}/fwbuilder.1.gz
--            ${CMAKE_BINARY_DIR}/fwb_iosacl.1.gz
--            ${CMAKE_BINARY_DIR}/fwb_ipf.1.gz
--            ${CMAKE_BINARY_DIR}/fwb_ipfw.1.gz
--            ${CMAKE_BINARY_DIR}/fwb_ipt.1.gz
--            ${CMAKE_BINARY_DIR}/fwb_pf.1.gz
--            ${CMAKE_BINARY_DIR}/fwb_pix.1.gz
-+    install(FILES ${CMAKE_CURRENT_SOURCE_DIR}/fwbedit.1
-+            ${CMAKE_CURRENT_SOURCE_DIR}/fwbuilder.1
-+            ${CMAKE_CURRENT_SOURCE_DIR}/fwb_iosacl.1
-+            ${CMAKE_CURRENT_SOURCE_DIR}/fwb_ipf.1
-+            ${CMAKE_CURRENT_SOURCE_DIR}/fwb_ipfw.1
-+            ${CMAKE_CURRENT_SOURCE_DIR}/fwb_ipt.1
-+            ${CMAKE_CURRENT_SOURCE_DIR}/fwb_pf.1
-+            ${CMAKE_CURRENT_SOURCE_DIR}/fwb_pix.1
-             DESTINATION ${CMAKE_INSTALL_MANDIR}/man1)
- endif(UNIX AND NOT APPLE)
- 
diff --git a/net-firewall/fwbuilder/fwbuilder-6.0.0_rc1_p20230723-r1.ebuild b/net-firewall/fwbuilder/fwbuilder-6.0.0_rc1_p20230723-r1.ebuild
deleted file mode 100644
index 028c26791155..000000000000
--- a/net-firewall/fwbuilder/fwbuilder-6.0.0_rc1_p20230723-r1.ebuild
+++ /dev/null
@@ -1,65 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-COMMIT=8013c00e1f29350d96926768290e8c7f91cda424
-inherit cmake xdg
-
-DESCRIPTION="Firewall management GUI for iptables, PF, Cisco routers and more"
-HOMEPAGE="https://github.com/fwbuilder/fwbuilder"
-SRC_URI="https://github.com/fwbuilder/fwbuilder/archive/${COMMIT}.tar.gz -> ${P}-${COMMIT:0:8}.tar.gz"
-S="${WORKDIR}/${PN}-${COMMIT}"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="amd64 ~ppc ppc64 x86"
-IUSE="test"
-RESTRICT="!test? ( test ) test"
-
-RDEPEND="
-	dev-libs/libxml2:=
-	dev-libs/libxslt
-	dev-libs/openssl:=
-	dev-qt/qtbase:6[gui,network,widgets]
-	net-analyzer/net-snmp:=
-"
-DEPEND="${RDEPEND}"
-
-PATCHES=(
-	# downstream patches
-	"${FILESDIR}"/${PN}-6.0.0_pre20200502-drop-Werror.patch
-	"${FILESDIR}"/${PN}-6.0.0_rc1-automagic-ccache.patch
-	"${FILESDIR}"/${PN}-6.0.0_rc1-fix_version.patch
-	"${FILESDIR}"/${P}-docdir-nocompress.patch # bug 957888
-)
-
-src_prepare() {
-	# Hangs
-	cmake_comment_add_subdirectory -f src/unit_tests ".*Dialog.*Test" \
-		RuleSetViewTest ObjectManipulatorTest RuleSetViewContextMenuTest
-
-	cmake_src_prepare
-}
-
-src_configure() {
-	local mycmakeargs=(
-		-DUseQt6=ON
-		-DFWB_INSTALL_DOCDIR=
-		-DBUILD_TESTING=$(usex test)
-	)
-
-	cmake_src_configure
-}
-
-src_test() {
-	cp "${BUILD_DIR}"/src/libfwbuilder/etc/fwbuilder.dtd "${S}"/src/res || die
-
-	local -x QT_QPA_PLATFORM=offscreen
-	TEST_VERBOSE=1 FWB_RES_DIR="${S}/src/res" cmake_src_test
-}
-
-src_install() {
-	cmake_src_install
-	docompress -x /usr/share/man
-}
diff --git a/net-firewall/fwbuilder/metadata.xml b/net-firewall/fwbuilder/metadata.xml
deleted file mode 100644
index 5f33304011d5..000000000000
--- a/net-firewall/fwbuilder/metadata.xml
+++ /dev/null
@@ -1,5 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/fwknop/Manifest b/net-firewall/fwknop/Manifest
deleted file mode 100644
index ea35b29e7a7a..000000000000
--- a/net-firewall/fwknop/Manifest
+++ /dev/null
@@ -1,2 +0,0 @@
-DIST fwknop-2.6.11.tar.bz2 1812061 BLAKE2B 7cfb8abc95fd8aa8a8d6774507fe4dea8deacc5aa4c9f5874c39dc2a3ab0c413cf479632a34027c76180cecd0a4fbf11d8cac5fe77f48993932fab13ea740a0b SHA512 79ce0585d075dffe77143b4d6ec3f8653ddad5f46cfb596e9f373be0065bdace7efdfe9cd341ebfaa7232d39f905affa81325b569635c8a44095fd551debadd7
-DIST fwknop-2.6.11.tar.bz2.asc 195 BLAKE2B 56ea868bd31fc4d06e3e976042bd3969f2c8df5bcb1e6a12d87c5740eb39b2eaf1118620be260e94b07758f4bc875e58f6b63a7989cdc08a32f049aa208b57a3 SHA512 2902a9ccb1c82baa4a96af5841d21ac873b606876fe01e8fbcf2b1e2a89c75965477f574c62a6f261f2af4420038ea6d41ef66af57b79742527054593e3cd3d7
diff --git a/net-firewall/fwknop/files/fwknop-2.6.10_fno-common_fix.patch b/net-firewall/fwknop/files/fwknop-2.6.10_fno-common_fix.patch
deleted file mode 100644
index 9c144cc1eddd..000000000000
--- a/net-firewall/fwknop/files/fwknop-2.6.10_fno-common_fix.patch
+++ /dev/null
@@ -1,23 +0,0 @@
-From a87325b0816a79329cf0b4d4f9ebf247ead117db Mon Sep 17 00:00:00 2001
-From: Jakub Jelen <jjelen@redhat.com>
-Date: Mon, 10 Feb 2020 15:21:56 +0100
-Subject: [PATCH] Unbreak build with gcc10 (-fno-common)
-
-Signed-off-by: Jakub Jelen <jjelen@redhat.com>
----
- client/log_msg.h | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/client/log_msg.h b/client/log_msg.h
-index cc17716b..3dda1614 100644
---- a/client/log_msg.h
-+++ b/client/log_msg.h
-@@ -38,7 +38,7 @@ enum
-     LOG_VERBOSITY_INFO,         /*!< Constant to define a INFO message */
-     LOG_VERBOSITY_DEBUG,        /*!< Constant to define a DEBUG message */
-     LOG_LAST_VERBOSITY
--} log_level_t;
-+};
- 
- #define LOG_DEFAULT_VERBOSITY   LOG_VERBOSITY_NORMAL    /*!< Default verbosity to use */
- 
diff --git a/net-firewall/fwknop/files/fwknopd.confd b/net-firewall/fwknop/files/fwknopd.confd
deleted file mode 100644
index 63bcd01dd82f..000000000000
--- a/net-firewall/fwknop/files/fwknopd.confd
+++ /dev/null
@@ -1,21 +0,0 @@
-# /etc/conf.d/fwknopd: config file for /etc/init.d/fwknopd
-
-# Path to the fwknopd config directory (needs to be an absolute path).
-
-FWKNOPD_CONFDIR="/etc/fwknop"
-
-
-# Additional options to pass to fwknopd.
-# Refer to the fwknopd(8) manpage for more information.
-
-#FWKNOPD_OPTS=""
-
-
-# Pid file to use (needs to be an absolute path).
-
-#FWKNOPD_PIDFILE="/run/fwknop/fwknopd.pid"
-
-
-# Path to the fwknopd binary (needs to be an absolute path).
-
-#FWKNOPD_BINARY="/usr/sbin/fwknopd"
diff --git a/net-firewall/fwknop/files/fwknopd.init b/net-firewall/fwknop/files/fwknopd.init
deleted file mode 100644
index dda1bf03156e..000000000000
--- a/net-firewall/fwknop/files/fwknopd.init
+++ /dev/null
@@ -1,91 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2016 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-extra_commands="checkconfig"
-extra_started_commands="reload"
-
-: ${FWKNOPD_BINARY:=/usr/sbin/fwknopd}
-: ${FWKNOPD_CONFDIR:=/etc/fwknop}
-: ${FWKNOPD_CONFIG:=${FWKNOPD_CONFDIR}/fwknopd.conf}
-: ${FWKNOPD_PIDFILE:=/run/fwknop/${SVCNAME}.pid}
-
-depend() {
-	after iptables ip6tables ebtables firewall
-	use logger
-	if [ "${rc_need+set}" = "set" ]; then
-		: # Do nothing, the user has explicitly set rc_need
-	elif [ -f "${FWKNOPD_CONFIG}" ]; then
-		local x warn_intf
-		for x in $(awk '/^[[:blank:]]*PCAP_INTF/{ sub(";$", ""); print $2 }' "${FWKNOPD_CONFIG}" 2>/dev/null); do
-			warn_intf="${warn_intf} ${x}"
-		done
-		if [ -n "${warn_intf}" ]; then
-			need net
-			ewarn "You are binding an interface in PCAP_INTF statement in your fwknopd.conf!"
-			ewarn "You must add rc_need=\"net.FOO\" to your /etc/conf.d/${SVCNAME},"
-			ewarn "where FOO is the following interface(s):"
-			ewarn "${warn_intf}"
-		else
-			# If PCAP_INTF and PCAP_FILE are not set, then fwknopd uses eth0
-			if ! grep -q '^[[:blank:]]*PCAP_FILE' "${FWKNOPD_CONFIG}"; then
-				need net
-				ewarn "You are not binding any interface in PCAP_INTF statement in your fwknopd.conf,"
-				ewarn "neither you are providing PCAP_FILE option. Thus fwknopd will listen on eth0."
-				ewarn "You must add rc_need=\"net.eth0\" to your /etc/conf.d/${SVCNAME}."
-			fi
-		fi
-	fi
-}
-
-checkconfig() {
-	if [ ! -e "${FWKNOPD_CONFDIR}"/fwknopd.conf ]; then
-		eerror "You need ${FWKNOPD_CONFDIR}/fwknopd.conf file to run fwknopd"
-		eerror "Example is located at /etc/fwknop/fwknopd.conf.example"
-		return 1
-	fi
-
-	if [ ! -e "${FWKNOPD_CONFDIR}"/access.conf ]; then
-		eerror "You need ${FWKNOPD_CONFDIR}/access.conf file to run fwknopd"
-		eerror "Example is located at /etc/fwknop/access.conf.example"
-		return 1
-	fi
-
-	[ "${FWKNOPD_PIDFILE}" != "/run/fwknop/${SVCNAME}.pid" ] \
-		&& FWKNOPD_OPTS="${FWKNOPD_OPTS} --pid-file=${FWKNOPD_PIDFILE}"
-
-	[ "${FWKNOPD_CONFDIR}" != "/etc/fwknop" ] \
-		&& FWKNOPD_OPTS="${FWKNOPD_OPTS} \
-			--config=${FWKNOPD_CONFDIR}/fwknopd.conf \
-			--access-file=${FWKNOPD_CONFDIR}/access.conf"
-
-	return 0
-}
-
-start() {
-	checkconfig || return 1
-
-	ebegin "Starting ${SVCNAME}"
-	start-stop-daemon --start \
-		--exec ${FWKNOPD_BINARY} --pidfile ${FWKNOPD_PIDFILE} \
-		-- ${FWKNOPD_OPTS}
-	eend $?
-}
-
-stop() {
-	if [ "${RC_CMD}" = "restart" ]; then
-		checkconfig || return 1
-	fi
-
-	ebegin "Stopping ${SVCNAME}"
-	start-stop-daemon --stop --pidfile ${FWKNOPD_PIDFILE}
-	eend $?
-}
-
-reload() {
-	checkconfig || return 1
-
-	ebegin "Reloading ${SVCNAME} configuration"
-	start-stop-daemon --signal HUP --pidfile ${FWKNOPD_PIDFILE}
-	eend $?
-}
diff --git a/net-firewall/fwknop/files/fwknopd.service b/net-firewall/fwknop/files/fwknopd.service
deleted file mode 100644
index d2e8c3125200..000000000000
--- a/net-firewall/fwknop/files/fwknopd.service
+++ /dev/null
@@ -1,12 +0,0 @@
-[Unit]
-Description=Firewall Knock Operator Daemon
-After=network-online.target
-
-[Service]
-Type=forking
-PIDFile=/run/fwknop/fwknopd.pid
-ExecStart=/usr/sbin/fwknopd
-ExecReload=/bin/kill -HUP $MAINPID
-
-[Install]
-WantedBy=multi-user.target
diff --git a/net-firewall/fwknop/files/fwknopd.tmpfiles.conf b/net-firewall/fwknop/files/fwknopd.tmpfiles.conf
deleted file mode 100644
index b7cb3856b056..000000000000
--- a/net-firewall/fwknop/files/fwknopd.tmpfiles.conf
+++ /dev/null
@@ -1 +0,0 @@
-d /run/fwknop 0700 root root -
diff --git a/net-firewall/fwknop/fwknop-2.6.11-r1.ebuild b/net-firewall/fwknop/fwknop-2.6.11-r1.ebuild
deleted file mode 100644
index 15c36e2fcd9b..000000000000
--- a/net-firewall/fwknop/fwknop-2.6.11-r1.ebuild
+++ /dev/null
@@ -1,133 +0,0 @@
-# Copyright 1999-2024 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/fwknop.gpg
-inherit autotools linux-info readme.gentoo-r1 systemd tmpfiles verify-sig
-
-DESCRIPTION="Single Packet Authorization and Port Knocking application"
-HOMEPAGE="https://www.cipherdyne.org/fwknop/"
-SRC_URI="
-	https://www.cipherdyne.org/fwknop/download/${P}.tar.bz2
-	verify-sig? ( https://www.cipherdyne.org/fwknop/download/${P}.tar.bz2.asc )
-	"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="~amd64 ~x86"
-IUSE="+client extras firewalld gdbm gpg +iptables nfqueue +server static-libs udp-server"
-
-DEPEND="
-	client? ( net-misc/wget[ssl] )
-	firewalld? ( net-firewall/firewalld )
-	gdbm? ( sys-libs/gdbm )
-	gpg? (
-		app-crypt/gpgme:=
-		dev-libs/libassuan:=
-		dev-libs/libgpg-error
-	)
-	iptables? ( net-firewall/iptables )
-	nfqueue? ( net-libs/libnetfilter_queue )
-	server? ( !nfqueue? ( !udp-server? ( net-libs/libpcap ) ) )
-	verify-sig? ( sec-keys/openpgp-keys-fwknop )
-"
-RDEPEND="${DEPEND}"
-
-REQUIRED_USE="
-	nfqueue? ( server )
-	server? ( ^^ ( firewalld iptables ) )
-	udp-server? ( server )
-"
-
-##PATCHES=( "${FILESDIR}/${PN}-2.6.10_fno-common_fix.patch" )
-
-DOCS=( AUTHORS ChangeLog README )
-
-DISABLE_AUTOFORMATTING=1
-DOC_CONTENTS="
-Example configuration files were installed to '${EPREFIX}/etc/fwknopd/'.
-Please edit them to suit your needs and then remove the .example suffix.
-
-fwknopd supports several backends: firewalld, iptables, ipfw, pf, ipf.
-You can set the desired backend via FIREWALL_EXE option in fwknopd.conf
-instead of the default one chosen at compile time.
-"
-
-pkg_setup() {
-	linux-info_pkg_setup
-}
-
-src_prepare() {
-	default_src_prepare
-
-	# Install example configs with .example suffix.
-	if use server; then
-		sed -i -e 's|conf;|conf.example;|g' Makefile.am || die
-	fi
-
-	eautoreconf
-}
-
-src_configure() {
-	local myeconfargs=(
-		--localstatedir="${EPREFIX}/run"
-		$(use_enable client)
-		$(use_enable !gdbm file-cache)
-		$(use_enable nfqueue nfq-capture)
-		$(use_enable server)
-		$(use_enable udp-server)
-		$(use_with gpg gpgme)
-	)
-	use firewalld && myeconfargs+=(--with-firewalld="${EPREFIX}/usr/sbin/firewalld")
-	use iptables && myeconfargs+=(--with-iptables="${EPREFIX}/sbin/iptables")
-
-	econf "${myeconfargs[@]}"
-}
-
-src_install() {
-	default_src_install
-
-	if use extras; then
-		dodoc extras/apparmor/usr.sbin.fwknopd
-		dodoc extras/console-qr/console-qr.sh
-		dodoc extras/fwknop-launcher/*
-	fi
-
-	if use server; then
-		newinitd "${FILESDIR}/fwknopd.init" fwknopd
-		newconfd "${FILESDIR}/fwknopd.confd" fwknopd
-		systemd_dounit extras/systemd/fwknopd.service
-		newtmpfiles "${FILESDIR}/fwknopd.tmpfiles.conf" fwknopd.conf
-		readme.gentoo_create_doc
-	fi
-
-	find "${ED}" -type f -name "*.la" -delete || die
-
-	if ! use static-libs ; then
-		find "${ED}" -type f -name libfko.a -delete || die
-	fi
-}
-
-pkg_postinst() {
-	if use server; then
-		readme.gentoo_print_elog
-
-		tmpfiles_process fwknopd.conf
-
-		if ! linux_config_exists || ! linux_chkconfig_present NETFILTER_XT_MATCH_COMMENT; then
-			echo
-			ewarn "fwknopd daemon relies on the 'comment' match in order to expire"
-			ewarn "created firewall rules, which is an important security feature."
-			ewarn "Please enable NETFILTER_XT_MATCH_COMMENT support in your kernel."
-			echo
-		fi
-		if use nfqueue && \
-			! linux_config_exists || ! linux_chkconfig_present NETFILTER_XT_TARGET_NFQUEUE; then
-			echo
-			ewarn "fwknopd daemon relies on the 'NFQUEUE' target for NFQUEUE mode."
-			ewarn "Please enable NETFILTER_XT_TARGET_NFQUEUE support in your kernel."
-			echo
-		fi
-	fi
-}
diff --git a/net-firewall/fwknop/metadata.xml b/net-firewall/fwknop/metadata.xml
deleted file mode 100644
index fd5cf6dcd092..000000000000
--- a/net-firewall/fwknop/metadata.xml
+++ /dev/null
@@ -1,25 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="person" proxied="yes">
-    <email>hlein@korelogic.com</email>
-    <name>Hank Leininger</name>
-  </maintainer>
-  <maintainer type="project" proxied="proxy">
-    <email>proxy-maint@gentoo.org</email>
-    <name>Proxy Maintainers</name>
-  </maintainer>
-  <use>
-    <flag name="client">Build fwknop client</flag>
-    <flag name="extras">Install utility scripts and AppArmor policy for fwknopd</flag>
-    <flag name="firewalld">Use <pkg>net-firewall/firewalld</pkg> as the default server backend</flag>
-    <flag name="gdbm">Use <pkg>sys-libs/gdbm</pkg> to store fwknopd digest cache</flag>
-    <flag name="gpg">Enable GPG support via <pkg>app-crypt/gpgme</pkg>
-    </flag>
-    <flag name="iptables">Use <pkg>net-firewall/iptables</pkg> as the default server backend</flag>
-    <flag name="nfqueue">Enable UDP-only NFQUEUE server mode (no <pkg>net-libs/libpcap</pkg> dependency)</flag>
-    <flag name="server">Build fwknopd server</flag>
-    <flag name="udp-server">Enable UDP-only server mode (no <pkg>net-libs/libpcap</pkg> dependency)</flag>
-  </use>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/ipkungfu/Manifest b/net-firewall/ipkungfu/Manifest
deleted file mode 100644
index 6fc13f1229f9..000000000000
--- a/net-firewall/ipkungfu/Manifest
+++ /dev/null
@@ -1 +0,0 @@
-DIST ipkungfu-0.6.1.tar.bz2 104516 BLAKE2B 94ff9942deb072a7dc372c89e4238fcfdbd29d69e3afe26b05b9d70cfd0058da731cfe8910b89a04ee4d765f24277b670fc8b932373b66b512b5237cc68582f1 SHA512 bc1df9894d36d40f5394cbaef6f7cc9f95a8eaaf45a03d1c3a809bc5a7a5ae685c8cf6a27363ab83f6f817a0d44277b28de8bd40230d29c5700dda1d52e231b7
diff --git a/net-firewall/ipkungfu/files/ipkungfu.init b/net-firewall/ipkungfu/files/ipkungfu.init
deleted file mode 100644
index a3eeafc5b813..000000000000
--- a/net-firewall/ipkungfu/files/ipkungfu.init
+++ /dev/null
@@ -1,19 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2016 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-depend() {
-	need logger net
-}
-
-start () {
-	ebegin "Starting ipkungfu"
-	/usr/sbin/ipkungfu --init
-	eend $? "Failed to start ipkungfu"
-}
-
-stop() {
-	ebegin "Stopping ipkungfu"
-	/usr/sbin/ipkungfu --disable > /dev/null
-	eend $? "Failed to stop ipkungfu"
-}
diff --git a/net-firewall/ipkungfu/files/ipkungfu_noiseless.patch b/net-firewall/ipkungfu/files/ipkungfu_noiseless.patch
deleted file mode 100644
index eed657f2dada..000000000000
--- a/net-firewall/ipkungfu/files/ipkungfu_noiseless.patch
+++ /dev/null
@@ -1,24 +0,0 @@
-diff -ru ipkungfu-0.6.1.orig/ipkungfu.in ipkungfu-0.6.1/ipkungfu.in
---- ipkungfu-0.6.1.orig/ipkungfu.in	2007-01-22 04:47:04.000000000 +0100
-+++ ipkungfu-0.6.1/ipkungfu.in	2007-07-04 12:49:23.000000000 +0200
-@@ -753,11 +753,15 @@
- fi
- 
- function delTestChain {
--# {{{ Flush and delete test chains
--	$IPTABLES -t filter -F SYSTEST
--	$IPTABLES -t filter -X SYSTEST
--	$IPTABLES -t mangle -F SYSTEST
--	$IPTABLES -t mangle -X SYSTEST
-+# {{{ Flush and delete test chains, if exist
-+	if $IPTABLES -t filter -L SYSTEST > /dev/null 2>&1 ; then
-+		$IPTABLES -t filter -F SYSTEST
-+		$IPTABLES -t filter -X SYSTEST
-+	fi
-+	if $IPTABLES -t mangle -L SYSTEST > /dev/null 2>&1 ; then
-+		$IPTABLES -t mangle -F SYSTEST
-+		$IPTABLES -t mangle -X SYSTEST
-+	fi
- # }}}
- }
- 
diff --git a/net-firewall/ipkungfu/ipkungfu-0.6.1-r2.ebuild b/net-firewall/ipkungfu/ipkungfu-0.6.1-r2.ebuild
deleted file mode 100644
index f117debef619..000000000000
--- a/net-firewall/ipkungfu/ipkungfu-0.6.1-r2.ebuild
+++ /dev/null
@@ -1,46 +0,0 @@
-# Copyright 1999-2024 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DESCRIPTION="A nice iptables firewall script"
-HOMEPAGE="http://www.linuxkungfu.org/"
-SRC_URI="http://www.linuxkungfu.org/ipkungfu/${P}.tar.bz2"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="amd64 ~ppc ~sparc x86"
-
-DEPEND="net-firewall/iptables"
-RDEPEND="${DEPEND}
-	virtual/logger"
-
-PATCHES=(
-	"${FILESDIR}/${PN}_noiseless.patch"
-)
-
-src_install() {
-	default
-
-	# Install configuration files
-	emake DESTDIR="${D}" install-config
-
-	mv "${D}"/usr/share/doc/${P} "${D}"/usr/share/doc/${PF} || die
-
-	# Install Gentoo init script
-	newinitd "${FILESDIR}"/ipkungfu.init ipkungfu
-}
-
-pkg_postinst() {
-	# Remove the cache dir so ipkungfu won't fail when running for
-	# the first time, in case 0.6.0 was installed before.
-	rm -rf /etc/ipkungfu/cache
-
-	einfo "Be sure, before running ipkungfu, to edit the config files in:"
-	einfo "/etc/ipkungfu/"
-	einfo
-	einfo "Also, be sure to run ipkungfu prior to rebooting,"
-	einfo "especially if you you're updating from <0.6.0 to >=0.6.0."
-	einfo "There are some significant configuration changes on this"
-	einfo "release covered by the ipkungfu script."
-}
diff --git a/net-firewall/ipkungfu/metadata.xml b/net-firewall/ipkungfu/metadata.xml
deleted file mode 100644
index 5f33304011d5..000000000000
--- a/net-firewall/ipkungfu/metadata.xml
+++ /dev/null
@@ -1,5 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/ipset/Manifest b/net-firewall/ipset/Manifest
deleted file mode 100644
index c4c49e79d3aa..000000000000
--- a/net-firewall/ipset/Manifest
+++ /dev/null
@@ -1 +0,0 @@
-DIST ipset-7.24.tar.bz2 695548 BLAKE2B 52e05313353e7b5fe969d5f113794238356bf900b4e7ac4693c05164ecde0826d0e911dcae67bb4103f49b587f94f561d14dcfebb78c5c231013fda7d36a81da SHA512 18ccb49bd38083f0556b11e1d17f43791c52a2b094c9a500b6f770796b17e8e70c3860a628eac2252eb672b1fc9de734d3a0e0823d61dd9be7b4188adc6dd214
diff --git a/net-firewall/ipset/files/ipset-net_namespace.patch b/net-firewall/ipset/files/ipset-net_namespace.patch
deleted file mode 100644
index 5349635967c2..000000000000
--- a/net-firewall/ipset/files/ipset-net_namespace.patch
+++ /dev/null
@@ -1,11 +0,0 @@
---- a/configure.ac	2025-05-22 22:36:57.332625302 -0000
-+++ b/configure.ac	2025-05-22 22:37:17.729090112 -0000
-@@ -401,7 +401,7 @@ fi
- 
- AC_MSG_CHECKING([kernel source for id in struct pernet_operations])
- if test -f $ksourcedir/include/net/net_namespace.h && \
--   $AWK '/^struct pernet_operations /,/^}/' $ksourcedir/include/net/net_namespace.h | $GREP -q 'int \*id;'; then
-+   $AWK '/^struct pernet_operations /,/^}/' $ksourcedir/include/net/net_namespace.h | $GREP -qE 'int \*id;|int \* const id'; then
- 	AC_MSG_RESULT(yes)
- 	AC_SUBST(HAVE_NET_OPS_ID, define)
- else
diff --git a/net-firewall/ipset/files/ipset.confd-r1 b/net-firewall/ipset/files/ipset.confd-r1
deleted file mode 100644
index ebedb672a676..000000000000
--- a/net-firewall/ipset/files/ipset.confd-r1
+++ /dev/null
@@ -1,19 +0,0 @@
-# /etc/conf.d/ipset
-
-# Location in which ipset initscript will save set rules on 
-# service shutdown
-IPSET_SAVE="/var/lib/ipset/rules-save"
-
-# Save state on stopping ipset
-SAVE_ON_STOP="yes"
-
-# Suffix used for temporary set names used for atomic swaps
-TEMP_SUFFIX=".t"
-
-# If you need to log iptables messages as soon as iptables starts,
-# AND your logger does NOT depend on the network, then you may wish
-# to uncomment the next line.
-# If your logger depends on the network, and you uncomment this line
-# you will create an unresolvable circular dependency during startup.
-# After commenting or uncommenting this line, you must run 'rc-update -u'.
-#rc_use="logger"
diff --git a/net-firewall/ipset/files/ipset.initd-r7 b/net-firewall/ipset/files/ipset.initd-r7
deleted file mode 100644
index a96e69617e8a..000000000000
--- a/net-firewall/ipset/files/ipset.initd-r7
+++ /dev/null
@@ -1,127 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2013 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-extra_commands="save"
-extra_started_commands="reload"
-
-IPSET_SAVE=${IPSET_SAVE:-/var/lib/ipset/rules-save}
-ipset_name_regex='^[-_.a-zA-Z0-9]+$'
-
-depend() {
-    before iptables ip6tables
-}
-
-checkconfig() {
-    if [ ! -f "${IPSET_SAVE}" ] ; then
-        eerror "Not starting ${SVCNAME}. First create some rules then run:"
-        eerror "/etc/init.d/${SVCNAME} save"
-        return 1
-    fi
-    return 0
-}
-
-start() {
-    checkconfig || return 1
-    ebegin "Loading ipset session"
-    ipset restore < "${IPSET_SAVE}"
-    eend $?
-}
-
-stop() {
-    # check if there are any references to current sets
-
-    if ! ipset list | gawk '
-        ($1 == "References:") { refcnt += $2 }
-        ($1 == "Type:" && $2 == "list:set") { set = 1 }
-        (scan) { if ($0 != "") setcnt++; else { scan = 0; set = 0 } }
-        (set && $1 == "Members:") {scan = 1}
-        END { if ((refcnt - setcnt) > 0) exit 1 }
-    '; then
-        eerror "ipset is in use, can't stop"
-        return 1
-    fi
-
-    if [ "${SAVE_ON_STOP}" = "yes" ] ; then
-        save || return 1
-    fi
-
-    ebegin "Removing kernel IP sets"
-    ipset flush
-    ipset destroy
-    eend $?
-}
-
-reload() {
-    ebegin "Reloading ipsets"
-
-    # Loading sets from a save file is only additive (there is no
-    # automatic flushing or replacing). And, we can not remove sets
-    # that are currently used in existing iptables rules.
-    #
-    # Instead, we create new temp sets for any set that is already
-    # in use, and then atomically swap them into place.
-    #
-    # XXX: This does not clean out previously used ipsets that are
-    # not in the new saved policy--it can't, because they may still
-    # be referenced in the current iptables rules.
-
-    # Build a list of all currently used sets (if any);
-    # also make sure all sets' names are fully supported.
-    IFS_O=$IFS
-    NEWLINE='
-'
-    local IFS=$NEWLINE
-    for running_ipset in $(ipset -n list) ; do
-      if ! echo "${running_ipset}" | grep -q -E "${ipset_name_regex}" ; then
-        eend 1 "Running set name ('$running_ipset') does not match regex '${ipset_name_regex}'"
-	return 1
-      fi
-      running_ipset_list="$running_ipset_list $running_ipset"
-    done
-    IFS=$IFS_O
-    running_ipset_list="${running_ipset_list# }"
-
-    # Check the configured suffix, and make sure there are no collisions
-    if test -z "${TEMP_SUFFIX}" ; then
-      eend 1 "TEMP_SUFFIX cannot be empty"
-      return 1
-    fi
-
-    # Make sure TEMP_SUFFIX uses only known-safe characters.
-    if ! echo "${TEMP_SUFFIX}" | grep -q -E "${ipset_name_regex}" ; then
-      eend 1 "TEMP_SUFFIX pattern ('$TEMP_SUFFIX') does not match regex '${ipset_name_regex}'"
-      return 1
-    fi
-    # We don't block ., but it must be escaped.
-    temp_suffix_regex=$(echo "${TEMP_SUFFIX}" | sed 's/\./\\./g')
-
-    if echo "$running_ipset_list" | grep -q -E "${temp_suffix_regex}( |$)" ; then
-      eend 1 "Existing set(s) match TEMP_SUFFIX pattern ('${TEMP_SUFFIX}'), cannot continue"
-      return 1
-    fi
-
-    # Build a regular expression that matches those set names.
-    running_ipset_list_regex="$(echo "$running_ipset_list" | tr -s ' ' '|' )"
-
-    # Load up sets from the save file, but rename any set that already
-    # exists to a temporary name that we will swap later.
-    if ! cat ${IPSET_SAVE} | sed -r "s/^(create|add) (${running_ipset_list_regex}) /\1 \2${temp_suffix_regex} /" | ipset restore ; then
-        eend $? "Failed to load new ipsets"
-    fi
-
-    # Now for every set name that currently exists, atomically swap it
-    # with the temporary new one we created, and then destroy the old set.
-    for ipset_name in ${running_ipset_list} ; do
-        ipset swap "${ipset_name}" "${ipset_name}${TEMP_SUFFIX}" || eend $? "Failed to swap in new ipset $ipset_name"
-        ipset destroy "${ipset_name}${TEMP_SUFFIX}" || eend $? "Failed to delete obsolete ipset ${ipset_name}${TEMP_SUFFIX}"
-    done
-    eend 0
-}
-
-save() {
-    ebegin "Saving ipset session"
-    checkpath --file --mode 0600 "${IPSET_SAVE}"
-		ipset -output save list > "${IPSET_SAVE}"
-    eend $?
-}
diff --git a/net-firewall/ipset/files/ipset.systemd-r1 b/net-firewall/ipset/files/ipset.systemd-r1
deleted file mode 100644
index 600779604fb3..000000000000
--- a/net-firewall/ipset/files/ipset.systemd-r1
+++ /dev/null
@@ -1,15 +0,0 @@
-[Unit]
-Description=ipset service
-Before=network-pre.target iptables-restore.service ip6tables-restore.service firewalld.service
-Wants=network-pre.target
-ConditionFileNotEmpty=/var/lib/ipset/rules-save
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-ExecStart=/usr/sbin/ipset -exist -file /var/lib/ipset/rules-save restore
-ExecReload=/usr/sbin/ipset -exist -file /var/lib/ipset/rules-save restore
-ExecStop=/usr/sbin/ipset -file /var/lib/ipset/rules-save save
-
-[Install]
-WantedBy=multi-user.target
diff --git a/net-firewall/ipset/ipset-7.24.ebuild b/net-firewall/ipset/ipset-7.24.ebuild
deleted file mode 100644
index 3730a329a4f2..000000000000
--- a/net-firewall/ipset/ipset-7.24.ebuild
+++ /dev/null
@@ -1,118 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-MODULES_OPTIONAL_IUSE=modules
-inherit autotools bash-completion-r1 linux-mod-r1 systemd
-
-DESCRIPTION="IPset tool for iptables, successor to ippool"
-HOMEPAGE="https://ipset.netfilter.org/ https://git.netfilter.org/ipset/"
-SRC_URI="https://ipset.netfilter.org/${P}.tar.bz2"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="amd64 arm arm64 ~loong ppc ppc64 ~riscv x86"
-
-RDEPEND="
-	net-firewall/iptables
-	net-libs/libmnl:=
-"
-DEPEND="${RDEPEND}"
-BDEPEND="virtual/pkgconfig"
-
-DOCS=( ChangeLog INSTALL README UPGRADE )
-
-# configurable from outside, e.g. /etc/portage/make.conf
-IP_NF_SET_MAX=${IP_NF_SET_MAX:-256}
-
-PATCHES=(
-	"${FILESDIR}/${PN}-net_namespace.patch"
-)
-
-src_prepare() {
-	default
-	eautoreconf
-}
-
-pkg_setup() {
-	get_version
-	CONFIG_CHECK="NETFILTER"
-	ERROR_NETFILTER="ipset requires NETFILTER support in your kernel."
-	CONFIG_CHECK+=" NETFILTER_NETLINK"
-	ERROR_NETFILTER_NETLINK="ipset requires NETFILTER_NETLINK support in your kernel."
-	# It does still build without NET_NS, but it may be needed in future.
-	#CONFIG_CHECK="${CONFIG_CHECK} NET_NS"
-	#ERROR_NET_NS="ipset requires NET_NS (network namespace) support in your kernel."
-	CONFIG_CHECK+=" !PAX_CONSTIFY_PLUGIN"
-	ERROR_PAX_CONSTIFY_PLUGIN="ipset contains constified variables (#614896)"
-
-	build_modules=0
-	if use modules; then
-		if linux_config_src_exists && linux_chkconfig_builtin "MODULES" ; then
-			if linux_chkconfig_present "IP_NF_SET" || \
-				linux_chkconfig_present "IP_SET"; then #274577
-				eerror "There is IP{,_NF}_SET or NETFILTER_XT_SET support in your kernel."
-				eerror "Please either build ipset with modules USE flag disabled"
-				eerror "or rebuild kernel without IP_SET support and make sure"
-				eerror "there is NO kernel ip_set* modules in /lib/modules/<your_kernel>/... ."
-				die "USE=modules and in-kernel ipset support detected."
-			else
-				einfo "Modular kernel detected. Gonna build kernel modules..."
-				build_modules=1
-			fi
-		else
-			eerror "Nonmodular kernel detected, but USE=modules. Either build"
-			eerror "modular kernel (without IP_SET) or disable USE=modules"
-			die "Nonmodular kernel detected, will not build kernel modules"
-		fi
-	fi
-
-	[[ ${build_modules} -eq 1 ]] && linux-mod-r1_pkg_setup
-}
-
-src_configure() {
-	export bashcompdir="$(get_bashcompdir)"
-
-	econf \
-		--enable-bashcompl \
-		$(use_with modules kmod) \
-		--with-maxsets=${IP_NF_SET_MAX} \
-		--with-ksource="${KV_DIR}" \
-		--with-kbuild="${KV_OUT_DIR}"
-}
-
-src_compile() {
-	einfo "Building userspace"
-
-	local modlist=( xt_set=kernel/net/netfilter/ipset/:"${S}":kernel/net/netfilter/:
-					em_ipset=kernel/net/sched:"${S}":kernel/net/sched/:modules )
-
-	for i in ip_set{,_bitmap_{ip{,mac},port},_hash_{ip{,mac,mark,port{,ip,net}},mac,net{,port{,net},iface,net}},_list_set}; do
-		modlist+=( ${i}=kernel/net/netfilter/ipset/:"${S}":kernel/net/netfilter/ipset )
-	done
-
-	emake
-
-	if [[ ${build_modules} -eq 1 ]]; then
-		einfo "Building kernel modules"
-		linux-mod-r1_src_compile
-	fi
-}
-
-src_install() {
-	einfo "Installing userspace"
-	default
-
-	find "${ED}" -name '*.la' -delete || die
-
-	newinitd "${FILESDIR}"/ipset.initd-r7 ${PN}
-	newconfd "${FILESDIR}"/ipset.confd-r1 ${PN}
-	systemd_newunit "${FILESDIR}"/ipset.systemd-r1 ${PN}.service
-	keepdir /var/lib/ipset
-
-	if [[ ${build_modules} -eq 1 ]]; then
-		einfo "Installing kernel modules"
-		linux-mod-r1_src_install
-	fi
-}
diff --git a/net-firewall/ipset/metadata.xml b/net-firewall/ipset/metadata.xml
deleted file mode 100644
index ae4b6ca1b860..000000000000
--- a/net-firewall/ipset/metadata.xml
+++ /dev/null
@@ -1,17 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="project">
-    <email>base-system@gentoo.org</email>
-    <name>Gentoo Base System</name>
-  </maintainer>
-  <maintainer type="person">
-    <email>robbat2@gentoo.org</email>
-    <name>Robin H. Johnson</name>
-  </maintainer>
-  <maintainer type="person">
-    <email>mpagano@gentoo.org</email>
-    <name>Mike Pagano</name>
-  </maintainer>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/ipt_netflow/Manifest b/net-firewall/ipt_netflow/Manifest
deleted file mode 100644
index e5f4998b6c83..000000000000
--- a/net-firewall/ipt_netflow/Manifest
+++ /dev/null
@@ -1,2 +0,0 @@
-DIST ipt_netflow-2.6.tar.gz 95752 BLAKE2B 088c7030addd34d9d889cfa705aa060d0793e33be957deb3b703daea4229afc24f7268285ce336e425a024dc9d8139633a5206ff9d769c95cf71c156acbd4f25 SHA512 0ccea556e25dc6bc2d8c7648ed1b4ab366097baf5b06f167ccd19d2adb0a195ad652635181573785f9e9fa208d163f22b6527310eb939455d7ee3bc141cbeed5
-DIST ipt_netflow-2.6_p20250317.tar.gz 96793 BLAKE2B 8d397b79574b472a806da6c5a4aa2e9922765c046682266904f3d291594420f884131c24e45affa989f56c335a10d5e64540a235dffdc8368d78581181ae7192 SHA512 2569b372a24ac3c05505313a0dae2846055d265fcddc7c2f8112145960f857f1eb6b68e33bba7d888f253c34d1f9c1486d0bfaa3881c1c26dd8a83257631048e
diff --git a/net-firewall/ipt_netflow/files/ipt_netflow-2.0-configure.patch b/net-firewall/ipt_netflow/files/ipt_netflow-2.0-configure.patch
deleted file mode 100644
index f6b3a005ba21..000000000000
--- a/net-firewall/ipt_netflow/files/ipt_netflow-2.0-configure.patch
+++ /dev/null
@@ -1,10 +0,0 @@
---- a/configure
-+++ b/configure
-@@ -421,7 +421,6 @@
- iptables_find_version	#IPTVER
- iptables_try_pkgconfig	#try to configure from pkg-config
- iptables_find_src	#IPTSRC
--iptables_src_version	#check that IPTSRC match to IPTVER
- iptables_inc		#IPTINC
- iptables_modules	#IPTLIB
- 
diff --git a/net-firewall/ipt_netflow/files/ipt_netflow-2.6-fix-linux-headers-5.14.patch b/net-firewall/ipt_netflow/files/ipt_netflow-2.6-fix-linux-headers-5.14.patch
deleted file mode 100644
index 0f52b68d5235..000000000000
--- a/net-firewall/ipt_netflow/files/ipt_netflow-2.6-fix-linux-headers-5.14.patch
+++ /dev/null
@@ -1,29 +0,0 @@
-https://github.com/aabc/ipt-netflow/commit/66e4304101010108892376866334ec9317b427d8.patch
-https://bugs.gentoo.org/813993
-
-From: ABC <abc@openwall.com>
-Date: Wed, 14 Jul 2021 15:39:42 +0300
-Subject: [PATCH] Namespace sk_error_report
-
-sk_error_report is introduced in v5.14-rc1: e3ae2365efc14 ("net: sock:
-introduce sk_error_report").
---- a/ipt_NETFLOW.c
-+++ b/ipt_NETFLOW.c
-@@ -1943,7 +1943,7 @@ static struct ctl_path netflow_sysctl_path[] = {
- #endif /* CONFIG_SYSCTL */
- 
- /* socket code */
--static void sk_error_report(struct sock *sk)
-+static void netflow_sk_error_report(struct sock *sk)
- {
- 	struct ipt_netflow_sock *usock;
- 
-@@ -1974,7 +1974,7 @@ static struct socket *usock_open_sock(struct ipt_netflow_sock *usock)
- 	}
- 	sock->sk->sk_allocation = GFP_ATOMIC;
- 	sock->sk->sk_prot->unhash(sock->sk); /* hidden from input */
--	sock->sk->sk_error_report = &sk_error_report; /* clear ECONNREFUSED */
-+	sock->sk->sk_error_report = &netflow_sk_error_report; /* clear ECONNREFUSED */
- 	sock->sk->sk_user_data = usock;
- 	sock->sk->sk_reuse = SK_CAN_REUSE;
- 
diff --git a/net-firewall/ipt_netflow/files/ipt_netflow-2.6-gentoo.patch b/net-firewall/ipt_netflow/files/ipt_netflow-2.6-gentoo.patch
deleted file mode 100644
index 44dcfdec6d7b..000000000000
--- a/net-firewall/ipt_netflow/files/ipt_netflow-2.6-gentoo.patch
+++ /dev/null
@@ -1,61 +0,0 @@
---- a/Makefile.in	2021-05-27 12:57:29.600377496 +0300
-+++ b/Makefile.in	2021-05-27 12:58:55.111381725 +0300
-@@ -13,7 +13,7 @@
- SNMPTGSO = /usr/lib/snmp/dlmod/snmp_NETFLOW.so
- SNMPCONF = /etc/snmp/snmpd.conf
- SNMPLINE = dlmod netflow $(SNMPTGSO)
--CC = gcc
-+CC ?= gcc
- 
- # https://www.kernel.org/doc/Documentation/kbuild/modules.txt
- # https://www.kernel.org/doc/Documentation/kbuild/makefiles.txt
-@@ -24,31 +24,31 @@
- 
- ipt_NETFLOW.ko: version.h ipt_NETFLOW.c ipt_NETFLOW.h compat_def.h compat.h Makefile
- 	@echo Compiling $(shell ./version.sh) for kernel $(KVERSION)
--	make -C $(KDIR) M=$(CURDIR) modules
-+	$(MAKE) -C $(KDIR) M=$(CURDIR) modules
- 	@touch $@
- compat_def.h: gen_compat_def
- 	./gen_compat_def > $@
- sparse: | version.h ipt_NETFLOW.c ipt_NETFLOW.h compat.h Makefile
- 	@rm -f ipt_NETFLOW.ko ipt_NETFLOW.o
- 	@echo Compiling for kernel $(KVERSION)
--	make -C $(KDIR) M=$(CURDIR) modules C=1
-+	$(MAKE) -C $(KDIR) M=$(CURDIR) modules C=1
- 	@touch ipt_NETFLOW.ko
- coverity:
- 	coverity-submit -v
- 
- minstall: | ipt_NETFLOW.ko
- 	@echo " *"
--	make -C $(KDIR) M=$(CURDIR) modules_install INSTALL_MOD_PATH=$(DESTDIR)
-+	$(MAKE) -C $(KDIR) M=$(CURDIR) modules_install INSTALL_MOD_PATH=$(DESTDIR)
- 	$(DEPMOD)
- mclean:
--	make -C $(KDIR) M=$(CURDIR) clean
-+	$(MAKE) -C $(KDIR) M=$(CURDIR) clean
- lclean:
- 	-rm -f *.so *_sh.o
- clean: mclean lclean
- 	-rm -f *.so *.o modules.order version.h compat_def.h
- 
- snmp_NETFLOW.so: snmp_NETFLOW.c
--	$(CC) -fPIC -shared -o $@ $< -lnetsnmp
-+	$(CC) $(CFLAGS) $(LDFLAGS) -fPIC -shared -o $@ $< -lnetsnmp
- 
- sinstall: | snmp_NETFLOW.so IPT-NETFLOW-MIB.my
- 	@echo " *"
-@@ -68,10 +68,10 @@
- 	fi
- 
- %_sh.o: libipt_NETFLOW.c
--	$(CC) $(CFLAGS) -O2 -Wall -Wunused $(IPTABLES_CFLAGS) -fPIC -o $@ -c libipt_NETFLOW.c
-+	$(CC) $(CFLAGS) -Wall -Wunused $(IPTABLES_CFLAGS) -fPIC -o $@ -c libipt_NETFLOW.c
- 
- %.so: %_sh.o
--	$(CC) -shared -o $@ $<
-+	$(CC) $(LDFLAGS) -shared -o $@ $<
- 
- version.h: ipt_NETFLOW.c ipt_NETFLOW.h compat.h Makefile
- 	@./version.sh --define > version.h
diff --git a/net-firewall/ipt_netflow/files/ipt_netflow-2.6-kernel-6.4.patch b/net-firewall/ipt_netflow/files/ipt_netflow-2.6-kernel-6.4.patch
deleted file mode 100644
index cfbca8823d79..000000000000
--- a/net-firewall/ipt_netflow/files/ipt_netflow-2.6-kernel-6.4.patch
+++ /dev/null
@@ -1,66 +0,0 @@
-From 0eb2092e930c78fc726d5d05abbcc81aa6c41b89 Mon Sep 17 00:00:00 2001
-From: ABC <abc@openwall.com>
-Date: Mon, 26 Jun 2023 16:29:58 -0300
-Subject: [PATCH] Build compatibility with v6.4 (register_sysctl_paths)
-
-'register_sysctl_paths' is missed from v6.4 due to 0199849acd07
-("sysctl: remove register_sysctl_paths()").
-
-Signed-off-by: ABC <abc@openwall.com>
-
-Slightly modified to fit on 2.6 release
----
- gen_compat_def |  2 ++
- ipt_NETFLOW.c  | 10 ++++++++--
- 2 files changed, 10 insertions(+), 2 deletions(-)
-
-diff --git a/gen_compat_def b/gen_compat_def
-index 396fdb9..a9cb95e 100755
---- a/gen_compat_def
-+++ b/gen_compat_def
-@@ -87,6 +87,8 @@
- kbuild_test_symbol nf_bridge_info_get linux/netfilter_bridge.h
- # Stumbled on 5.9
- kbuild_test_struct vlan_dev_priv linux/if_vlan.h
-+# 6.4: 0199849acd07 ("sysctl: remove register_sysctl_paths()")
-+kbuild_test_symbol register_sysctl_paths linux/sysctl.h
- 
- echo "// End of compat_def.h"
- 
-diff --git a/ipt_NETFLOW.c b/ipt_NETFLOW.c
-index b3c2c99..eee8074 100644
---- a/ipt_NETFLOW.c
-+++ b/ipt_NETFLOW.c
-@@ -1929,16 +1929,18 @@ static ctl_table netflow_net_table[] = {
- 	{ }
- };
- #else /* >= 2.6.25 */
-+# ifdef HAVE_REGISTER_SYSCTL_PATHS
- static struct ctl_path netflow_sysctl_path[] = {
- 	{
- 		.procname = "net",
--#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,33)
-+#  if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,33)
- 		.ctl_name = CTL_NET
--#endif
-+#  endif
- 	},
- 	{ .procname = "netflow" },
- 	{ }
- };
-+# endif
- #endif /* 2.6.25 */
- #endif /* CONFIG_SYSCTL */
- 
-@@ -5666,7 +5668,11 @@ static int __init ipt_netflow_init(void)
- #endif
- 						      );
- #else /* 2.6.25 */
-+# ifdef HAVE_REGISTER_SYSCTL_PATHS
- 	netflow_sysctl_header = register_sysctl_paths(netflow_sysctl_path, netflow_sysctl_table);
-+# else
-+	netflow_sysctl_header = register_sysctl("net/netflow", netflow_sysctl_table);
-+# endif
- #endif
- 	if (!netflow_sysctl_header) {
- 		printk(KERN_ERR "netflow: can't register to sysctl\n");
diff --git a/net-firewall/ipt_netflow/files/ipt_netflow-2.6-ref_module_fix.patch b/net-firewall/ipt_netflow/files/ipt_netflow-2.6-ref_module_fix.patch
deleted file mode 100644
index 21d647190709..000000000000
--- a/net-firewall/ipt_netflow/files/ipt_netflow-2.6-ref_module_fix.patch
+++ /dev/null
@@ -1,60 +0,0 @@
-commit 352cdb28eecbb57de3509b18dfc37dcce0455c01
-Author: ABC <abc@openwall.com>
-Date:   Tue Jun 22 19:07:02 2021 +0300
-
-    Fix compile for stable kernels by not using 'ref_module'
-    
-    `ref_module' unexport in 7ef5264de7732 ("modules: mark ref_module
-    static") is back-ported into stable kernels making old `#if
-    LINUX_VERSION_CODE' checks irrelevant or too complicated to update.
-    
-    Do not use `ref_module' API at all since `try_module_get' is ancient
-    enough to use always.
-    
-    Reported-by: https://github.com/xtaran
-    Fixes: https://github.com/aabc/ipt-netflow/issues/177
-
-diff --git a/compat.h b/compat.h
-index 99edf91..30f1d8f 100644
---- a/compat.h
-+++ b/compat.h
-@@ -170,10 +170,6 @@ static int __ethtool_get_settings(struct net_device *dev, struct ethtool_cmd *cm
- # define CHECK_OK	0
- #endif
- 
--#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,35)
--# define use_module	ref_module
--#endif
--
- #ifndef NF_IP_LOCAL_IN /* 2.6.25 */
- # define NF_IP_PRE_ROUTING	NF_INET_PRE_ROUTING
- # define NF_IP_LOCAL_IN		NF_INET_LOCAL_IN
-diff --git a/ipt_NETFLOW.c b/ipt_NETFLOW.c
-index d3d3901..c4c049d 100644
---- a/ipt_NETFLOW.c
-+++ b/ipt_NETFLOW.c
-@@ -5494,12 +5494,8 @@ static void register_ct_events(void)
- 	}
- 	/* Reference netlink module to prevent it's unsafe unload before us. */
- 	if (!netlink_m && (netlink_m = find_module(NETLINK_M))) {
--#if LINUX_VERSION_CODE < KERNEL_VERSION(5,9,0)
--		use_module(THIS_MODULE, netlink_m);
--#else
- 		if (!try_module_get(netlink_m))
- 			netlink_m = NULL;
--#endif
- 	}
- 
- 	/* Register ct events callback. */
-@@ -5527,10 +5523,9 @@ static void unregister_ct_events(void)
- #else /* < v3.2 */
- 	unset_notifier_cb();
- #endif /* v3.2 */
--#if LINUX_VERSION_CODE >= KERNEL_VERSION(5,9,0)
- 	module_put(netlink_m);
- 	netlink_m = NULL;
--#endif
-+
- 	rcu_assign_pointer(saved_event_cb, NULL);
- #else /* < v2.6.31 */
- 	nf_conntrack_unregister_notifier(&ctnl_notifier);
diff --git a/net-firewall/ipt_netflow/files/ipt_netflow-9999-gentoo.patch b/net-firewall/ipt_netflow/files/ipt_netflow-9999-gentoo.patch
deleted file mode 100644
index 4853d7505362..000000000000
--- a/net-firewall/ipt_netflow/files/ipt_netflow-9999-gentoo.patch
+++ /dev/null
@@ -1,64 +0,0 @@
-diff --git a/Makefile.in b/Makefile.in
-index 65edf4c..7d6ccc8 100644
---- a/Makefile.in
-+++ b/Makefile.in
-@@ -13,7 +13,7 @@ CARGS = @CARGS@
- SNMPTGSO = /usr/lib/snmp/dlmod/snmp_NETFLOW.so
- SNMPCONF = /etc/snmp/snmpd.conf
- SNMPLINE = dlmod netflow $(SNMPTGSO)
--CC = gcc
-+$(CC) ?= gcc
- 
- # https://www.kernel.org/doc/Documentation/kbuild/modules.txt
- # https://www.kernel.org/doc/Documentation/kbuild/makefiles.txt
-@@ -24,7 +24,7 @@ all: ipt_NETFLOW.ko libipt_NETFLOW.so libip6t_NETFLOW.so @SNMPTARGET@
- 
- ipt_NETFLOW.ko: version.h ipt_NETFLOW.c ipt_NETFLOW.h compat_def.h compat.h Makefile
- 	@echo Compiling $(shell ./version.sh) for kernel $(KVERSION)
--	make -C $(KDIR) M=$(CURDIR) modules
-+	$(MAKE) -C $(KDIR) M=$(CURDIR) modules
- 	@touch $@
- compat_def.h: gen_compat_def
- 	./gen_compat_def > $@-
-@@ -32,24 +32,24 @@ compat_def.h: gen_compat_def
- sparse: | version.h ipt_NETFLOW.c ipt_NETFLOW.h compat.h Makefile
- 	@rm -f ipt_NETFLOW.ko ipt_NETFLOW.o
- 	@echo Compiling for kernel $(KVERSION)
--	make -C $(KDIR) M=$(CURDIR) modules C=1
-+	$(MAKE) -C $(KDIR) M=$(CURDIR) modules C=1
- 	@touch ipt_NETFLOW.ko
- coverity:
- 	coverity-submit -v
- 
- minstall: | ipt_NETFLOW.ko
- 	@echo " *"
--	make -C $(KDIR) M=$(CURDIR) modules_install INSTALL_MOD_PATH=$(DESTDIR)
-+	$(MAKE) -C $(KDIR) M=$(CURDIR) modules_install INSTALL_MOD_PATH=$(DESTDIR)
- 	$(DEPMOD)
- mclean:
--	make -C $(KDIR) M=$(CURDIR) clean
-+	$(MAKE) -C $(KDIR) M=$(CURDIR) clean
- lclean:
- 	-rm -f *.so *_sh.o
- clean: mclean lclean
- 	-rm -f *.so *.o modules.order version.h compat_def.h
- 
- snmp_NETFLOW.so: snmp_NETFLOW.c
--	$(CC) -fPIC -shared -o $@ $< -lnetsnmp
-+	$(CC) $(CFLAGS) $(LDFLAGS) -fPIC -shared -o $@ $< -lnetsnmp
- 
- sinstall: | snmp_NETFLOW.so IPT-NETFLOW-MIB.my
- 	@echo " *"
-@@ -69,10 +69,10 @@ sinstall: | snmp_NETFLOW.so IPT-NETFLOW-MIB.my
- 	fi
- 
- %_sh.o: libipt_NETFLOW.c
--	$(CC) $(CFLAGS) -O2 -Wall -Wunused $(IPTABLES_CFLAGS) -fPIC -o $@ -c libipt_NETFLOW.c
-+	$(CC) $(CFLAGS) -Wall -Wunused $(IPTABLES_CFLAGS) -fPIC -o $@ -c libipt_NETFLOW.c
- 
- %.so: %_sh.o
--	$(CC) -shared -o $@ $<
-+	$(CC) $(LDFLAGS) -shared -o $@ $<
- 
- version.h: ipt_NETFLOW.c ipt_NETFLOW.h compat.h Makefile
- 	@./version.sh --define > version.h
diff --git a/net-firewall/ipt_netflow/ipt_netflow-2.6-r1.ebuild b/net-firewall/ipt_netflow/ipt_netflow-2.6-r1.ebuild
deleted file mode 100644
index 08997f3178c2..000000000000
--- a/net-firewall/ipt_netflow/ipt_netflow-2.6-r1.ebuild
+++ /dev/null
@@ -1,109 +0,0 @@
-# Copyright 1999-2024 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit linux-mod-r1 toolchain-funcs
-
-DESCRIPTION="Netflow iptables module"
-HOMEPAGE="
-	https://sourceforge.net/projects/ipt-netflow
-	https://github.com/aabc/ipt-netflow
-"
-SRC_URI="https://github.com/aabc/ipt-netflow/archive/v${PV}.tar.gz -> ${P}.tar.gz"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="amd64 x86"
-
-IUSE="natevents snmp"
-
-RDEPEND="
-	net-firewall/iptables:0=
-	snmp? ( net-analyzer/net-snmp )
-"
-DEPEND="${RDEPEND}"
-BDEPEND="
-	virtual/linux-sources
-	virtual/pkgconfig
-"
-
-PATCHES=(
-	"${FILESDIR}/${PN}-2.0-configure.patch" # bug #455984
-	"${FILESDIR}/${PN}-2.6-gentoo.patch"
-	"${FILESDIR}/${P}-ref_module_fix.patch" # bug #781014
-	"${FILESDIR}/${P}-fix-linux-headers-5.14.patch" # bug #813993
-	"${FILESDIR}/${P}-kernel-6.4.patch" # bug #921589
-)
-
-pkg_setup() {
-	local CONFIG_CHECK="BRIDGE_NETFILTER ~IP_NF_IPTABLES VLAN_8021Q"
-	if use natevents; then
-		CONFIG_CHECK+=" NF_CONNTRACK_EVENTS"
-		if kernel_is lt 5 2; then
-			CONFIG_CHECK+=" NF_NAT_NEEDED"
-		else
-			CONFIG_CHECK+=" NF_NAT"
-		fi
-	fi
-
-	IPT_LIB="/usr/$(get_libdir)/xtables"
-	linux-mod-r1_pkg_setup
-}
-
-src_unpack() {
-	default
-
-	mv "${WORKDIR}"/${PN/_/-}-* "${WORKDIR}"/${P} || die
-}
-
-src_prepare() {
-	default
-
-	# Checking for directory is enough
-	sed -i \
-		-e 's:-s /etc/snmp/snmpd.conf:-d /etc/snmp:' \
-		configure || die
-}
-
-do_conf() {
-	tc-export CC
-	echo ./configure $*
-	./configure $* ${EXTRA_ECONF} || die 'configure failed'
-}
-
-src_configure() {
-	local IPT_VERSION="$($(tc-getPKG_CONFIG) --modversion xtables)"
-	# this configure script is not based on autotools
-	# ipt-src need to be defined, see bug #455984
-	do_conf \
-		--disable-dkms \
-		--enable-aggregation \
-		--enable-direction \
-		--enable-macaddress \
-		--enable-vlan \
-		--ipt-lib="${IPT_LIB}" \
-		--ipt-src="/usr/" \
-		--ipt-ver="${IPT_VERSION}" \
-		--kdir="${KV_DIR}" \
-		--kver="${KV_FULL}" \
-		$(use natevents && echo '--enable-natevents') \
-		$(use snmp && echo '--enable-snmp-rules' || echo '--disable-snmp-agent')
-}
-
-src_compile() {
-	local modlist=( ipt_NETFLOW=ipt_netflow )
-	linux-mod-r1_src_compile
-	emake ARCH="$(tc-arch-kernel)" CC="$(tc-getCC)" LD="$(tc-getLD)" OBJDUMP="$(tc-getOBJDUMP)" all
-}
-
-src_install() {
-	linux-mod-r1_src_install
-
-	use snmp && emake DESTDIR="${D}" SNMPTGSO="/usr/$(get_libdir)/snmp/dlmod/snmp_NETFLOW.so" sinstall
-
-	exeinto "${IPT_LIB}"
-	doexe libip{,6}t_NETFLOW.so
-
-	doheader ipt_NETFLOW.h
-}
diff --git a/net-firewall/ipt_netflow/ipt_netflow-2.6_p20250317.ebuild b/net-firewall/ipt_netflow/ipt_netflow-2.6_p20250317.ebuild
deleted file mode 100644
index 71baeddafbe9..000000000000
--- a/net-firewall/ipt_netflow/ipt_netflow-2.6_p20250317.ebuild
+++ /dev/null
@@ -1,106 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit linux-mod-r1 toolchain-funcs
-
-# Hash of commit point.
-SNAPSHOT=0c5759d002131ac3ae161713f4ce0d515037c1de
-
-DESCRIPTION="Netflow iptables module"
-HOMEPAGE="https://github.com/aabc/ipt-netflow"
-SRC_URI="https://github.com/aabc/ipt-netflow/archive/${SNAPSHOT}.tar.gz -> ${P}.tar.gz"
-
-S="${WORKDIR}/ipt-netflow-${SNAPSHOT}"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~amd64 ~x86"
-IUSE="natevents snmp"
-
-RDEPEND="
-	net-firewall/iptables:0=
-	snmp? ( net-analyzer/net-snmp )
-"
-DEPEND="${RDEPEND}"
-BDEPEND="
-	virtual/linux-sources
-	virtual/pkgconfig
-"
-
-PATCHES=(
-	"${FILESDIR}/${PN}-2.0-configure.patch" # bug #455984
-	"${FILESDIR}/${PN}-9999-gentoo.patch"
-)
-
-pkg_setup() {
-	local CONFIG_CHECK="BRIDGE_NETFILTER ~IP_NF_IPTABLES VLAN_8021Q"
-	if use natevents; then
-		CONFIG_CHECK+=" NF_CONNTRACK_EVENTS"
-		if kernel_is lt 5 2; then
-			CONFIG_CHECK+=" NF_NAT_NEEDED"
-		else
-			CONFIG_CHECK+=" NF_NAT"
-		fi
-	fi
-
-	IPT_LIB="/usr/$(get_libdir)/xtables"
-	linux-mod-r1_pkg_setup
-}
-
-src_prepare() {
-	default
-
-	# Fix incorrect module version in sources
-	sed -i \
-		-e '/IPT_NETFLOW_VERSION/s#"[0-9.]*"#"'${PV}'"#' \
-		ipt_NETFLOW.c || die
-
-	# Checking for directory is enough
-	sed -i \
-		-e 's:-s /etc/snmp/snmpd.conf:-d /etc/snmp:' \
-		configure || die
-}
-
-do_conf() {
-	tc-export CC
-	echo ./configure $*
-	./configure $* ${EXTRA_ECONF} || die 'configure failed'
-}
-
-src_configure() {
-	local IPT_VERSION="$($(tc-getPKG_CONFIG) --modversion xtables)"
-	# this configure script is not based on autotools
-	# ipt-src need to be defined, see bug #455984
-	do_conf \
-		--disable-dkms \
-		--enable-aggregation \
-		--enable-direction \
-		--enable-macaddress \
-		--enable-vlan \
-		--ipt-lib="${IPT_LIB}" \
-		--ipt-src="/usr/" \
-		--ipt-ver="${IPT_VERSION}" \
-		--kdir="${KV_DIR}" \
-		--kver="${KV_FULL}" \
-		$(use natevents && echo '--enable-natevents') \
-		$(use snmp && echo '--enable-snmp-rules' || echo '--disable-snmp-agent')
-}
-
-src_compile() {
-	local modlist=( ipt_NETFLOW=ipt_netflow )
-	linux-mod-r1_src_compile
-	emake ARCH="$(tc-arch-kernel)" CC="$(tc-getCC)" LD="$(tc-getLD)" OBJDUMP="$(tc-getOBJDUMP)" all
-}
-
-src_install() {
-	linux-mod-r1_src_install
-
-	use snmp && emake DESTDIR="${D}" SNMPTGSO="/usr/$(get_libdir)/snmp/dlmod/snmp_NETFLOW.so" sinstall
-
-	exeinto "${IPT_LIB}"
-	doexe libip{,6}t_NETFLOW.so
-
-	doheader ipt_NETFLOW.h
-}
diff --git a/net-firewall/ipt_netflow/ipt_netflow-9999.ebuild b/net-firewall/ipt_netflow/ipt_netflow-9999.ebuild
deleted file mode 100644
index 5c63a5984557..000000000000
--- a/net-firewall/ipt_netflow/ipt_netflow-9999.ebuild
+++ /dev/null
@@ -1,103 +0,0 @@
-# Copyright 1999-2023 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit git-r3 linux-mod-r1 toolchain-funcs
-
-DESCRIPTION="Netflow iptables module"
-HOMEPAGE="
-	https://sourceforge.net/projects/ipt-netflow
-	https://github.com/aabc/ipt-netflow
-"
-EGIT_REPO_URI="https://github.com/aabc/ipt-netflow"
-
-LICENSE="GPL-2"
-SLOT="0"
-IUSE="natevents snmp"
-
-RDEPEND="
-	net-firewall/iptables:0=
-	snmp? ( net-analyzer/net-snmp )
-"
-DEPEND="${RDEPEND}"
-BDEPEND="
-	virtual/linux-sources
-	virtual/pkgconfig
-"
-
-PATCHES=(
-	"${FILESDIR}/${PN}-2.0-configure.patch" # bug #455984
-	"${FILESDIR}/${PN}-9999-gentoo.patch"
-)
-
-pkg_setup() {
-	local CONFIG_CHECK="BRIDGE_NETFILTER ~IP_NF_IPTABLES VLAN_8021Q"
-	if use natevents; then
-		CONFIG_CHECK+=" NF_CONNTRACK_EVENTS"
-		if kernel_is lt 5 2; then
-			CONFIG_CHECK+=" NF_NAT_NEEDED"
-		else
-			CONFIG_CHECK+=" NF_NAT"
-		fi
-	fi
-
-	IPT_LIB="/usr/$(get_libdir)/xtables"
-	linux-mod-r1_pkg_setup
-}
-
-src_prepare() {
-	default
-
-	# Fix incorrect module version in sources
-	sed -i \
-		-e '/IPT_NETFLOW_VERSION/s#"[0-9.]*"#"'${PV}'"#' \
-		ipt_NETFLOW.c || die
-
-	# Checking for directory is enough
-	sed -i \
-		-e 's:-s /etc/snmp/snmpd.conf:-d /etc/snmp:' \
-		configure || die
-}
-
-do_conf() {
-	tc-export CC
-	echo ./configure $*
-	./configure $* ${EXTRA_ECONF} || die 'configure failed'
-}
-
-src_configure() {
-	local IPT_VERSION="$($(tc-getPKG_CONFIG) --modversion xtables)"
-	# this configure script is not based on autotools
-	# ipt-src need to be defined, see bug #455984
-	do_conf \
-		--disable-dkms \
-		--enable-aggregation \
-		--enable-direction \
-		--enable-macaddress \
-		--enable-vlan \
-		--ipt-lib="${IPT_LIB}" \
-		--ipt-src="/usr/" \
-		--ipt-ver="${IPT_VERSION}" \
-		--kdir="${KV_DIR}" \
-		--kver="${KV_FULL}" \
-		$(use natevents && echo '--enable-natevents') \
-		$(use snmp && echo '--enable-snmp-rules' || echo '--disable-snmp-agent')
-}
-
-src_compile() {
-	local modlist=( ipt_NETFLOW=ipt_netflow )
-	linux-mod-r1_src_compile
-	emake ARCH="$(tc-arch-kernel)" CC="$(tc-getCC)" LD="$(tc-getLD)" OBJDUMP="$(tc-getOBJDUMP)" all
-}
-
-src_install() {
-	linux-mod-r1_src_install
-
-	use snmp && emake DESTDIR="${D}" SNMPTGSO="/usr/$(get_libdir)/snmp/dlmod/snmp_NETFLOW.so" sinstall
-
-	exeinto "${IPT_LIB}"
-	doexe libip{,6}t_NETFLOW.so
-
-	doheader ipt_NETFLOW.h
-}
diff --git a/net-firewall/ipt_netflow/metadata.xml b/net-firewall/ipt_netflow/metadata.xml
deleted file mode 100644
index ebe4a986ab13..000000000000
--- a/net-firewall/ipt_netflow/metadata.xml
+++ /dev/null
@@ -1,12 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="project">
-    <email>netmon@gentoo.org</email>
-    <name>Gentoo network monitoring and analysis project</name>
-  </maintainer>
-  <use>
-    <flag name="natevents">Netflow NAT translation events (NEL) support</flag>
-  </use>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/iptables/Manifest b/net-firewall/iptables/Manifest
deleted file mode 100644
index c5f6b628eb9d..000000000000
--- a/net-firewall/iptables/Manifest
+++ /dev/null
@@ -1,5 +0,0 @@
-DIST iptables-1.8.11.tar.xz 649284 BLAKE2B 82daca3940e253f6fda7cf5b3332488c31391ff66c0112c0cae2645ab61918f81e6028ea2b1e1385f21e4c5ff8cd64cba31072a2417a2ab696fe1c6b5464cea1 SHA512 4937020bf52d57a45b76e1eba125214a2f4531de52ff1d15185faeef8bea0cd90eb77f99f81baa573944aa122f350a7198cef41d70594e1b65514784addbcc40
-DIST iptables-1.8.12.tar.xz 652440 BLAKE2B 5516aadcf413efde272b09d1747e78e19f1d9e5481cdfdfe2360ca5f16926bb17535f58e4014a3616c59da83f41b39fc71e591c916bc309c7ca31701785a9e7e SHA512 b25bd6f6f78a6192699bce44c2b29ca65351ef71198a84fa26d29c47cb24ed695ee0406f6581fa81ece4d30445bb0680def5dc328f7fc708b80cadcd0230fe49
-DIST iptables-1.8.12.tar.xz.sig 566 BLAKE2B aaa2574b6ad3848d8bb6603481a0f0734e2a529c0e0a351ee0178848dd981d507fbebff3a2756f2bd91bce373d7c398f572195c9767457e0ea096a20d2fc32a5 SHA512 c1a22b6c6104a0395823a8695eafca6459d82af3467e70e88dc5625aeb6d3feba485a3f2baaf0e8e6ff1b979dc1c764427a6d6614a070476078d1e2f8cd3fd34
-DIST iptables-1.8.13.tar.xz 652632 BLAKE2B 5bfaa3353c8aa8df34938e00739a6713b49697157268bb65302dac86b832c826d7b73c35ed5e71f376299c69d4a62c1d14d4b2d177c62a4f667d0b3c378a34fa SHA512 3aefd76ca60d00f46ba4d6f39cbcfdc60517d03b6714da25dcd67542f6f4eea8d82c4855bdd9124efe18b769f41951772b8340a6eda75b85f8dd52b2289b145b
-DIST iptables-1.8.13.tar.xz.sig 566 BLAKE2B d150357e5ab3af9743fc4fb514b899d342446b8299ac02b9eb2a17893b690a657d457da3f6a35867bf8d2c46519a926100a222c71bf4d8594f9616143556adc5 SHA512 9b8ef597e1f73c2697f29b07ac010313696f52f478f10c65ec4c4e2dc933be50c74c5c236512e4d756220c4d2fd511fded88dc46f2376fc5d7e2bea71fd267ca
diff --git a/net-firewall/iptables/files/ip6tables-r1.confd b/net-firewall/iptables/files/ip6tables-r1.confd
deleted file mode 100644
index e608f41d1ea7..000000000000
--- a/net-firewall/iptables/files/ip6tables-r1.confd
+++ /dev/null
@@ -1,27 +0,0 @@
-# /etc/conf.d/ip6tables
-
-# Set wait option for xtables lock in seconds
-# DEFAULT: 60
-#IPTABLES_LOCK_WAIT_TIME="60"
-
-# Set wait interval option for xtables lock in microseconds
-# DEFAULT: 1000
-#IPTABLES_LOCK_WAIT_INTERVAL="1000"
-
-# Location in which ip6tables initscript will save set rules on
-# service shutdown
-IP6TABLES_SAVE="/var/lib/ip6tables/rules-save"
-
-# Options to pass to ip6tables-save and ip6tables-restore 
-SAVE_RESTORE_OPTIONS="-c"
-
-# Save state on stopping ip6tables
-SAVE_ON_STOP="yes"
-
-# If you need to log ip6tables messages as soon as ip6tables starts,
-# AND your logger does NOT depend on the network, then you may wish
-# to uncomment the next line.
-# If your logger depends on the network, and you uncomment this line
-# you will create an unresolvable circular dependency during startup.
-# After commenting or uncommenting this line, you must run 'rc-update -u'.
-#rc_use="logger"
diff --git a/net-firewall/iptables/files/iptables-1.8.4-no-symlinks.patch b/net-firewall/iptables/files/iptables-1.8.4-no-symlinks.patch
deleted file mode 100644
index 349a01abd5fd..000000000000
--- a/net-firewall/iptables/files/iptables-1.8.4-no-symlinks.patch
+++ /dev/null
@@ -1,19 +0,0 @@
-diff --git a/iptables/Makefile.am b/iptables/Makefile.am
-index 71b1b1d4..30c77f9a 100644
---- a/iptables/Makefile.am
-+++ b/iptables/Makefile.am
-@@ -71,12 +71,10 @@ CLEANFILES       = iptables.8 xtables-monitor.8 \
- 
- vx_bin_links   = iptables-xml
- if ENABLE_IPV4
--v4_sbin_links  = iptables-legacy iptables-legacy-restore iptables-legacy-save \
--		 iptables iptables-restore iptables-save
-+v4_sbin_links  = iptables-legacy iptables-legacy-restore iptables-legacy-save
- endif
- if ENABLE_IPV6
--v6_sbin_links  = ip6tables-legacy ip6tables-legacy-restore ip6tables-legacy-save \
--		 ip6tables ip6tables-restore ip6tables-save
-+v6_sbin_links  = ip6tables-legacy ip6tables-legacy-restore ip6tables-legacy-save
- endif
- if ENABLE_NFTABLES
- x_sbin_links  = iptables-nft iptables-nft-restore iptables-nft-save \
diff --git a/net-firewall/iptables/files/iptables-r1.confd b/net-firewall/iptables/files/iptables-r1.confd
deleted file mode 100644
index d5055e0a5d23..000000000000
--- a/net-firewall/iptables/files/iptables-r1.confd
+++ /dev/null
@@ -1,27 +0,0 @@
-# /etc/conf.d/iptables
-
-# Set wait option for xtables lock in seconds
-# DEFAULT: 60
-#IPTABLES_LOCK_WAIT_TIME="60"
-
-# Set wait interval option for xtables lock in microseconds
-# DEFAULT: 1000
-#IPTABLES_LOCK_WAIT_INTERVAL="1000"
-
-# Location in which iptables initscript will save set rules on
-# service shutdown
-IPTABLES_SAVE="/var/lib/iptables/rules-save"
-
-# Options to pass to iptables-save and iptables-restore 
-SAVE_RESTORE_OPTIONS="-c"
-
-# Save state on stopping iptables
-SAVE_ON_STOP="yes"
-
-# If you need to log iptables messages as soon as iptables starts,
-# AND your logger does NOT depend on the network, then you may wish
-# to uncomment the next line.
-# If your logger depends on the network, and you uncomment this line
-# you will create an unresolvable circular dependency during startup.
-# After commenting or uncommenting this line, you must run 'rc-update -u'.
-#rc_use="logger"
diff --git a/net-firewall/iptables/files/iptables-r4.init b/net-firewall/iptables/files/iptables-r4.init
deleted file mode 100644
index e3b38b30e42c..000000000000
--- a/net-firewall/iptables/files/iptables-r4.init
+++ /dev/null
@@ -1,167 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2022 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-extra_commands="check save panic"
-extra_started_commands="reload"
-
-iptables_lock_wait_time=${IPTABLES_LOCK_WAIT_TIME:-"60"}
-iptables_lock_wait_interval=${IPTABLES_LOCK_WAIT_INTERVAL:-"1000"}
-
-iptables_name=${SVCNAME}
-case ${iptables_name} in
-	iptables|ip6tables) ;;
-	*) iptables_name="iptables" ;;
-esac
-
-iptables_bin="/sbin/${iptables_name}"
-case ${iptables_name} in
-	iptables)  iptables_proc="/proc/net/ip_tables_names"
-	           iptables_save=${IPTABLES_SAVE};;
-	ip6tables) iptables_proc="/proc/net/ip6_tables_names"
-	           iptables_save=${IP6TABLES_SAVE};;
-esac
-
-depend() {
-	need localmount #434774
-	before net
-}
-
-set_table_policy() {
-	local has_errors=0 chains table=$1 policy=$2
-	case ${table} in
-		nat)    chains="PREROUTING POSTROUTING OUTPUT";;
-		mangle) chains="PREROUTING INPUT FORWARD OUTPUT POSTROUTING";;
-		filter) chains="INPUT FORWARD OUTPUT";;
-		*)      chains="";;
-	esac
-
-	local chain
-	for chain in ${chains} ; do
-		${iptables_bin} --wait ${iptables_lock_wait_time} -t ${table} -P ${chain} ${policy}
-		[ $? -ne 0 ] && has_errors=1
-	done
-
-	return ${has_errors}
-}
-
-checkkernel() {
-	if [ ! -e ${iptables_proc} ] ; then
-		eerror "Your kernel lacks ${iptables_name} support, please load"
-		eerror "appropriate modules and try again."
-		return 1
-	fi
-	return 0
-}
-
-checkconfig() {
-	if [ -z "${iptables_save}" -o ! -f "${iptables_save}" ] ; then
-		eerror "Not starting ${iptables_name}.  First create some rules then run:"
-		eerror "/etc/init.d/${iptables_name} save"
-		return 1
-	fi
-	return 0
-}
-
-start_pre() {
-	checkconfig || return 1
-}
-
-start() {
-	ebegin "Loading ${iptables_name} state and starting firewall"
-	${iptables_bin}-restore --wait ${iptables_lock_wait_time} ${SAVE_RESTORE_OPTIONS} < "${iptables_save}"
-	eend $?
-}
-
-stop_pre() {
-	checkkernel || return 1
-}
-
-stop() {
-	if [ "${SAVE_ON_STOP}" = "yes" ] ; then
-		save || return 1
-	fi
-
-	ebegin "Stopping firewall"
-	local has_errors=0 a
-	for a in $(cat ${iptables_proc}) ; do
-		set_table_policy $a ACCEPT
-		[ $? -ne 0 ] && has_errors=1
-
-		${iptables_bin} --wait ${iptables_lock_wait_time} -F -t $a
-		[ $? -ne 0 ] && has_errors=1
-
-		${iptables_bin} --wait ${iptables_lock_wait_time} -X -t $a
-		[ $? -ne 0 ] && has_errors=1
-	done
-	eend ${has_errors}
-}
-
-reload() {
-	checkkernel || return 1
-	checkrules || return 1
-	local has_errors=0 a flushed=0
-	for a in $(cat ${iptables_proc}) ; do
-		if ! grep -q "^\*${a}$" "${iptables_save}" ; then
-			[ $flushed -eq 0 ] && ebegin "Flushing firewall" && flushed=1
-			${iptables_bin} --wait ${iptables_lock_wait_time} -F -t $a
-			[ $? -ne 0 ] && has_errors=1
-
-			${iptables_bin} --wait ${iptables_lock_wait_time} -X -t $a
-			[ $? -ne 0 ] && has_errors=1
-		fi
-	done
-	eend ${has_errors}
-
-	start
-}
-
-checkrules() {
-	ebegin "Checking rules"
-	${iptables_bin}-restore --test ${SAVE_RESTORE_OPTIONS} < "${iptables_save}"
-	eend $?
-}
-
-check() {
-	# Short name for users of init.d script.
-	checkrules
-}
-
-save() {
-	ebegin "Saving ${iptables_name} state"
-	checkpath -q -d "$(dirname "${iptables_save}")"
-	checkpath -q -m 0600 -f "${iptables_save}"
-	${iptables_bin}-save ${SAVE_RESTORE_OPTIONS} > "${iptables_save}"
-	eend $?
-}
-
-panic() {
-	# use iptables autoload capability to load at least all required
-	# modules and filter table
-	${iptables_bin} --wait ${iptables_lock_wait_time} -S >/dev/null
-	if [ $? -ne 0 ] ; then
-		eerror "${iptables_bin} failed to load"
-		return 1
-	fi
-
-	if service_started ${iptables_name}; then
-		rc-service ${iptables_name} stop
-	fi
-
-	local has_errors=0 a
-	ebegin "Dropping all packets"
-	for a in $(cat ${iptables_proc}) ; do
-		${iptables_bin} --wait ${iptables_lock_wait_time} -F -t $a
-		[ $? -ne 0 ] && has_errors=1
-
-		${iptables_bin} --wait ${iptables_lock_wait_time} -X -t $a
-		[ $? -ne 0 ] && has_errors=1
-
-		if [ "${a}" != "nat" ]; then
-			# The "nat" table is not intended for filtering, the use of DROP is therefore inhibited.
-			set_table_policy $a DROP
-			[ $? -ne 0 ] && has_errors=1
-		fi
-	done
-	eend ${has_errors}
-}
diff --git a/net-firewall/iptables/files/systemd/ip6tables-restore.service b/net-firewall/iptables/files/systemd/ip6tables-restore.service
deleted file mode 100644
index 921b691296d8..000000000000
--- a/net-firewall/iptables/files/systemd/ip6tables-restore.service
+++ /dev/null
@@ -1,14 +0,0 @@
-[Unit]
-Description=Restore ip6tables firewall rules
-# if both are queued for some reason, don't store before restoring :)
-Before=ip6tables-store.service
-# sounds reasonable to have firewall up before any of the services go up
-Before=network-pre.target
-Wants=network-pre.target
-
-[Service]
-Type=oneshot
-ExecStart=/sbin/ip6tables-restore -w -- /var/lib/ip6tables/rules-save
-
-[Install]
-WantedBy=basic.target
diff --git a/net-firewall/iptables/files/systemd/ip6tables-store.service b/net-firewall/iptables/files/systemd/ip6tables-store.service
deleted file mode 100644
index 9975378353d3..000000000000
--- a/net-firewall/iptables/files/systemd/ip6tables-store.service
+++ /dev/null
@@ -1,11 +0,0 @@
-[Unit]
-Description=Store ip6tables firewall rules
-Before=shutdown.target
-DefaultDependencies=No
-
-[Service]
-Type=oneshot
-ExecStart=/bin/sh -c "/sbin/ip6tables-save --counters > /var/lib/ip6tables/rules-save"
-
-[Install]
-WantedBy=shutdown.target
diff --git a/net-firewall/iptables/files/systemd/iptables-restore.service b/net-firewall/iptables/files/systemd/iptables-restore.service
deleted file mode 100644
index a9e56793548c..000000000000
--- a/net-firewall/iptables/files/systemd/iptables-restore.service
+++ /dev/null
@@ -1,14 +0,0 @@
-[Unit]
-Description=Restore iptables firewall rules
-# if both are queued for some reason, don't store before restoring :)
-Before=iptables-store.service
-# sounds reasonable to have firewall up before any of the services go up
-Before=network-pre.target
-Wants=network-pre.target
-
-[Service]
-Type=oneshot
-ExecStart=/sbin/iptables-restore -w -- /var/lib/iptables/rules-save
-
-[Install]
-WantedBy=basic.target
diff --git a/net-firewall/iptables/files/systemd/iptables-store.service b/net-firewall/iptables/files/systemd/iptables-store.service
deleted file mode 100644
index aa16e75e9ccf..000000000000
--- a/net-firewall/iptables/files/systemd/iptables-store.service
+++ /dev/null
@@ -1,11 +0,0 @@
-[Unit]
-Description=Store iptables firewall rules
-Before=shutdown.target
-DefaultDependencies=No
-
-[Service]
-Type=oneshot
-ExecStart=/bin/sh -c "/sbin/iptables-save --counters > /var/lib/iptables/rules-save"
-
-[Install]
-WantedBy=shutdown.target
diff --git a/net-firewall/iptables/iptables-1.8.11-r1.ebuild b/net-firewall/iptables/iptables-1.8.11-r1.ebuild
deleted file mode 100644
index 1f4a4a45676c..000000000000
--- a/net-firewall/iptables/iptables-1.8.11-r1.ebuild
+++ /dev/null
@@ -1,176 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit systemd toolchain-funcs autotools flag-o-matic
-
-DESCRIPTION="Linux kernel (2.4+) firewall, NAT and packet mangling tools"
-HOMEPAGE="https://www.netfilter.org/projects/iptables/"
-SRC_URI="https://www.netfilter.org/projects/iptables/files/${P}.tar.xz"
-
-LICENSE="GPL-2"
-# Subslot reflects PV when libxtables and/or libip*tc was changed
-# the last time.
-SLOT="0/1.8.3"
-KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86"
-IUSE="conntrack netlink nftables pcap static-libs test"
-RESTRICT="!test? ( test )"
-# TODO: skip tests needing nftables if no xtables-nft-multi (bug #890628)
-REQUIRED_USE="test? ( conntrack nftables )"
-
-COMMON_DEPEND="
-	conntrack? ( >=net-libs/libnetfilter_conntrack-1.0.6 )
-	netlink? ( net-libs/libnfnetlink )
-	nftables? (
-		>=net-libs/libmnl-1.0:=
-		>=net-libs/libnftnl-1.2.6:=
-	)
-	pcap? ( net-libs/libpcap )
-"
-DEPEND="
-	${COMMON_DEPEND}
-	virtual/os-headers
-	>=sys-kernel/linux-headers-4.4:0
-"
-BDEPEND="
-	virtual/pkgconfig
-	nftables? (
-		app-alternatives/lex
-		app-alternatives/yacc
-	)
-"
-RDEPEND="
-	${COMMON_DEPEND}
-	nftables? ( net-misc/ethertypes )
-	!<net-firewall/ebtables-2.0.11-r1
-	!<net-firewall/arptables-0.0.5-r1
-"
-IDEPEND=">=app-eselect/eselect-iptables-20220320"
-
-PATCHES=(
-	"${FILESDIR}"/${PN}-1.8.4-no-symlinks.patch
-)
-
-src_prepare() {
-	# Use the saner headers from the kernel
-	rm include/linux/{kernel,types}.h || die
-
-	default
-	eautoreconf
-}
-
-src_configure() {
-	# Some libs use $(AR) rather than libtool to build, bug #444282
-	tc-export AR
-
-	# Hack around struct mismatches between userland & kernel for some ABIs
-	# bug #472388
-	use amd64 && [[ ${ABI} == "x32" ]] && append-flags -fpack-struct
-
-	local myeconfargs=(
-		--sbindir="${EPREFIX}/sbin"
-		--libexecdir="${EPREFIX}/$(get_libdir)"
-		--enable-devel
-		--enable-ipv6
-		--enable-shared
-		$(use_enable conntrack connlabel)
-		$(use_enable nftables)
-		$(use_enable netlink libnfnetlink)
-		$(use_enable pcap bpf-compiler)
-		$(use_enable pcap nfsynproxy)
-		$(use_enable static-libs static)
-	)
-
-	econf "${myeconfargs[@]}"
-}
-
-src_compile() {
-	emake V=1
-}
-
-src_install() {
-	default
-
-	# Managed by eselect-iptables
-	# https://bugs.gentoo.org/881295
-	rm "${ED}/usr/bin/iptables-xml" || die
-
-	dodoc iptables/iptables.xslt
-
-	# All the iptables binaries are in /sbin, so might as well
-	# put these small files in with them
-	into /
-	dosbin iptables/iptables-apply
-	dosym iptables-apply /sbin/ip6tables-apply
-	doman iptables/iptables-apply.8
-
-	insinto /usr/include
-	doins include/ip{,6}tables.h
-	insinto /usr/include/iptables
-	doins include/iptables/internal.h
-
-	keepdir /var/lib/ip{,6}tables
-	newinitd "${FILESDIR}"/${PN}-r4.init iptables
-	newconfd "${FILESDIR}"/${PN}-r1.confd iptables
-	dosym iptables /etc/init.d/ip6tables
-	newconfd "${FILESDIR}"/ip6tables-r1.confd ip6tables
-
-	if use nftables; then
-		# Bug #647458
-		rm "${ED}"/etc/ethertypes || die
-
-		# Bugs #660886 and #669894
-		rm "${ED}"/sbin/{arptables,ebtables}{,-{save,restore}} || die
-	fi
-
-	systemd_dounit "${FILESDIR}"/systemd/ip{,6}tables-{re,}store.service
-
-	find "${ED}" -type f -name "*.la" -delete || die
-}
-
-pkg_postinst() {
-	local default_iptables="xtables-legacy-multi"
-	if ! eselect iptables show &>/dev/null; then
-		elog "Current iptables implementation is unset, setting to ${default_iptables}"
-		eselect iptables set "${default_iptables}"
-	fi
-
-	if use nftables; then
-		local tables
-		for tables in {arp,eb}tables; do
-			if ! eselect ${tables} show &>/dev/null; then
-				elog "Current ${tables} implementation is unset, setting to ${default_iptables}"
-				eselect ${tables} set xtables-nft-multi
-			fi
-		done
-	fi
-
-	eselect iptables show
-}
-
-pkg_prerm() {
-	if [[ -z ${REPLACED_BY_VERSION} ]]; then
-		elog "Unsetting iptables symlinks before removal"
-		eselect iptables unset
-	fi
-
-	if ! has_version 'net-firewall/ebtables'; then
-		elog "Unsetting ebtables symlinks before removal"
-		eselect ebtables unset
-	elif [[ -z ${REPLACED_BY_VERSION} ]]; then
-		elog "Resetting ebtables symlinks to ebtables-legacy"
-		eselect ebtables set ebtables-legacy
-	fi
-
-	if ! has_version 'net-firewall/arptables'; then
-		elog "Unsetting arptables symlinks before removal"
-		eselect arptables unset
-	elif [[ -z ${REPLACED_BY_VERSION} ]]; then
-		elog "Resetting arptables symlinks to arptables-legacy"
-		eselect arptables set arptables-legacy
-	fi
-
-	# The eselect module failing should not be fatal
-	return 0
-}
diff --git a/net-firewall/iptables/iptables-1.8.12.ebuild b/net-firewall/iptables/iptables-1.8.12.ebuild
deleted file mode 100644
index ce440b899b02..000000000000
--- a/net-firewall/iptables/iptables-1.8.12.ebuild
+++ /dev/null
@@ -1,181 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit systemd toolchain-funcs autotools flag-o-matic verify-sig
-
-DESCRIPTION="Linux kernel (2.4+) firewall, NAT and packet mangling tools"
-HOMEPAGE="https://www.netfilter.org/projects/iptables/"
-SRC_URI="
-	https://www.netfilter.org/projects/iptables/files/${P}.tar.xz
-	verify-sig? ( https://www.netfilter.org/projects/iptables/files/${P}.tar.xz.sig )
-"
-
-LICENSE="GPL-2"
-# Subslot reflects PV when libxtables and/or libip*tc was changed
-# the last time.
-SLOT="0/1.8.3"
-KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86"
-IUSE="conntrack netlink nftables pcap static-libs test"
-RESTRICT="!test? ( test )"
-# TODO: skip tests needing nftables if no xtables-nft-multi (bug #890628)
-REQUIRED_USE="test? ( conntrack nftables )"
-
-COMMON_DEPEND="
-	conntrack? ( >=net-libs/libnetfilter_conntrack-1.0.6 )
-	netlink? ( net-libs/libnfnetlink )
-	nftables? (
-		>=net-libs/libmnl-1.0:=
-		>=net-libs/libnftnl-1.2.6:=
-	)
-	pcap? ( net-libs/libpcap )
-"
-DEPEND="
-	${COMMON_DEPEND}
-	virtual/os-headers
-	>=sys-kernel/linux-headers-4.4:0
-"
-BDEPEND="
-	virtual/pkgconfig
-	nftables? (
-		app-alternatives/lex
-		app-alternatives/yacc
-	)
-	verify-sig? ( sec-keys/openpgp-keys-netfilter )
-"
-RDEPEND="
-	${COMMON_DEPEND}
-	nftables? ( net-misc/ethertypes )
-	!<net-firewall/ebtables-2.0.11-r1
-	!<net-firewall/arptables-0.0.5-r1
-"
-IDEPEND=">=app-eselect/eselect-iptables-20220320"
-
-PATCHES=(
-	"${FILESDIR}"/${PN}-1.8.4-no-symlinks.patch
-)
-
-src_prepare() {
-	# Use the saner headers from the kernel
-	rm include/linux/{kernel,types}.h || die
-
-	default
-	eautoreconf
-}
-
-src_configure() {
-	# Some libs use $(AR) rather than libtool to build, bug #444282
-	tc-export AR
-
-	# Hack around struct mismatches between userland & kernel for some ABIs
-	# bug #472388
-	use amd64 && [[ ${ABI} == "x32" ]] && append-flags -fpack-struct
-
-	local myeconfargs=(
-		--sbindir="${EPREFIX}/sbin"
-		--libexecdir="${EPREFIX}/$(get_libdir)"
-		--enable-devel
-		--enable-ipv6
-		--enable-shared
-		$(use_enable conntrack connlabel)
-		$(use_enable nftables)
-		$(use_enable netlink libnfnetlink)
-		$(use_enable pcap bpf-compiler)
-		$(use_enable pcap nfsynproxy)
-		$(use_enable static-libs static)
-	)
-
-	econf "${myeconfargs[@]}"
-}
-
-src_compile() {
-	emake V=1
-}
-
-src_install() {
-	default
-
-	# Managed by eselect-iptables
-	# https://bugs.gentoo.org/881295
-	rm "${ED}/usr/bin/iptables-xml" || die
-
-	dodoc iptables/iptables.xslt
-
-	# All the iptables binaries are in /sbin, so might as well
-	# put these small files in with them
-	into /
-	dosbin iptables/iptables-apply
-	dosym iptables-apply /sbin/ip6tables-apply
-	doman iptables/iptables-apply.8
-
-	insinto /usr/include
-	doins include/ip{,6}tables.h
-	insinto /usr/include/iptables
-	doins include/iptables/internal.h
-
-	keepdir /var/lib/ip{,6}tables
-	newinitd "${FILESDIR}"/${PN}-r4.init iptables
-	newconfd "${FILESDIR}"/${PN}-r1.confd iptables
-	dosym iptables /etc/init.d/ip6tables
-	newconfd "${FILESDIR}"/ip6tables-r1.confd ip6tables
-
-	if use nftables; then
-		# Bug #647458
-		rm "${ED}"/etc/ethertypes || die
-
-		# Bugs #660886 and #669894
-		rm "${ED}"/sbin/{arptables,ebtables}{,-{save,restore}} || die
-	fi
-
-	systemd_dounit "${FILESDIR}"/systemd/ip{,6}tables-{re,}store.service
-
-	find "${ED}" -type f -name "*.la" -delete || die
-}
-
-pkg_postinst() {
-	local default_iptables="xtables-legacy-multi"
-	if ! eselect iptables show &>/dev/null; then
-		elog "Current iptables implementation is unset, setting to ${default_iptables}"
-		eselect iptables set "${default_iptables}"
-	fi
-
-	if use nftables; then
-		local tables
-		for tables in {arp,eb}tables; do
-			if ! eselect ${tables} show &>/dev/null; then
-				elog "Current ${tables} implementation is unset, setting to ${default_iptables}"
-				eselect ${tables} set xtables-nft-multi
-			fi
-		done
-	fi
-
-	eselect iptables show
-}
-
-pkg_prerm() {
-	if [[ -z ${REPLACED_BY_VERSION} ]]; then
-		elog "Unsetting iptables symlinks before removal"
-		eselect iptables unset
-	fi
-
-	if ! has_version 'net-firewall/ebtables'; then
-		elog "Unsetting ebtables symlinks before removal"
-		eselect ebtables unset
-	elif [[ -z ${REPLACED_BY_VERSION} ]]; then
-		elog "Resetting ebtables symlinks to ebtables-legacy"
-		eselect ebtables set ebtables-legacy
-	fi
-
-	if ! has_version 'net-firewall/arptables'; then
-		elog "Unsetting arptables symlinks before removal"
-		eselect arptables unset
-	elif [[ -z ${REPLACED_BY_VERSION} ]]; then
-		elog "Resetting arptables symlinks to arptables-legacy"
-		eselect arptables set arptables-legacy
-	fi
-
-	# The eselect module failing should not be fatal
-	return 0
-}
diff --git a/net-firewall/iptables/iptables-1.8.13.ebuild b/net-firewall/iptables/iptables-1.8.13.ebuild
deleted file mode 100644
index cb910b96ea59..000000000000
--- a/net-firewall/iptables/iptables-1.8.13.ebuild
+++ /dev/null
@@ -1,181 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit systemd toolchain-funcs autotools flag-o-matic verify-sig
-
-DESCRIPTION="Linux kernel (2.4+) firewall, NAT and packet mangling tools"
-HOMEPAGE="https://www.netfilter.org/projects/iptables/"
-SRC_URI="
-	https://www.netfilter.org/projects/iptables/files/${P}.tar.xz
-	verify-sig? ( https://www.netfilter.org/projects/iptables/files/${P}.tar.xz.sig )
-"
-
-LICENSE="GPL-2"
-# Subslot reflects PV when libxtables and/or libip*tc was changed
-# the last time.
-SLOT="0/1.8.3"
-KEYWORDS="~alpha amd64 arm arm64 ~hppa ~loong ~m68k ~mips ppc ppc64 ~riscv ~s390 ~sparc x86"
-IUSE="conntrack netlink nftables pcap static-libs test"
-RESTRICT="!test? ( test )"
-# TODO: skip tests needing nftables if no xtables-nft-multi (bug #890628)
-REQUIRED_USE="test? ( conntrack nftables )"
-
-COMMON_DEPEND="
-	conntrack? ( >=net-libs/libnetfilter_conntrack-1.0.6 )
-	netlink? ( net-libs/libnfnetlink )
-	nftables? (
-		>=net-libs/libmnl-1.0:=
-		>=net-libs/libnftnl-1.2.6:=
-	)
-	pcap? ( net-libs/libpcap )
-"
-DEPEND="
-	${COMMON_DEPEND}
-	virtual/os-headers
-	>=sys-kernel/linux-headers-4.4:0
-"
-BDEPEND="
-	virtual/pkgconfig
-	nftables? (
-		app-alternatives/lex
-		app-alternatives/yacc
-	)
-	verify-sig? ( sec-keys/openpgp-keys-netfilter )
-"
-RDEPEND="
-	${COMMON_DEPEND}
-	nftables? ( net-misc/ethertypes )
-	!<net-firewall/ebtables-2.0.11-r1
-	!<net-firewall/arptables-0.0.5-r1
-"
-IDEPEND=">=app-eselect/eselect-iptables-20220320"
-
-PATCHES=(
-	"${FILESDIR}"/${PN}-1.8.4-no-symlinks.patch
-)
-
-src_prepare() {
-	# Use the saner headers from the kernel
-	rm include/linux/{kernel,types}.h || die
-
-	default
-	eautoreconf
-}
-
-src_configure() {
-	# Some libs use $(AR) rather than libtool to build, bug #444282
-	tc-export AR
-
-	# Hack around struct mismatches between userland & kernel for some ABIs
-	# bug #472388
-	use amd64 && [[ ${ABI} == "x32" ]] && append-flags -fpack-struct
-
-	local myeconfargs=(
-		--sbindir="${EPREFIX}/sbin"
-		--libexecdir="${EPREFIX}/$(get_libdir)"
-		--enable-devel
-		--enable-ipv6
-		--enable-shared
-		$(use_enable conntrack connlabel)
-		$(use_enable nftables)
-		$(use_enable netlink libnfnetlink)
-		$(use_enable pcap bpf-compiler)
-		$(use_enable pcap nfsynproxy)
-		$(use_enable static-libs static)
-	)
-
-	econf "${myeconfargs[@]}"
-}
-
-src_compile() {
-	emake V=1
-}
-
-src_install() {
-	default
-
-	# Managed by eselect-iptables
-	# https://bugs.gentoo.org/881295
-	rm "${ED}/usr/bin/iptables-xml" || die
-
-	dodoc iptables/iptables.xslt
-
-	# All the iptables binaries are in /sbin, so might as well
-	# put these small files in with them
-	into /
-	dosbin iptables/iptables-apply
-	dosym iptables-apply /sbin/ip6tables-apply
-	doman iptables/iptables-apply.8
-
-	insinto /usr/include
-	doins include/ip{,6}tables.h
-	insinto /usr/include/iptables
-	doins include/iptables/internal.h
-
-	keepdir /var/lib/ip{,6}tables
-	newinitd "${FILESDIR}"/${PN}-r4.init iptables
-	newconfd "${FILESDIR}"/${PN}-r1.confd iptables
-	dosym iptables /etc/init.d/ip6tables
-	newconfd "${FILESDIR}"/ip6tables-r1.confd ip6tables
-
-	if use nftables; then
-		# Bug #647458
-		rm "${ED}"/etc/ethertypes || die
-
-		# Bugs #660886 and #669894
-		rm "${ED}"/sbin/{arptables,ebtables}{,-{save,restore}} || die
-	fi
-
-	systemd_dounit "${FILESDIR}"/systemd/ip{,6}tables-{re,}store.service
-
-	find "${ED}" -type f -name "*.la" -delete || die
-}
-
-pkg_postinst() {
-	local default_iptables="xtables-legacy-multi"
-	if ! eselect iptables show &>/dev/null; then
-		elog "Current iptables implementation is unset, setting to ${default_iptables}"
-		eselect iptables set "${default_iptables}"
-	fi
-
-	if use nftables; then
-		local tables
-		for tables in {arp,eb}tables; do
-			if ! eselect ${tables} show &>/dev/null; then
-				elog "Current ${tables} implementation is unset, setting to ${default_iptables}"
-				eselect ${tables} set xtables-nft-multi
-			fi
-		done
-	fi
-
-	eselect iptables show
-}
-
-pkg_prerm() {
-	if [[ -z ${REPLACED_BY_VERSION} ]]; then
-		elog "Unsetting iptables symlinks before removal"
-		eselect iptables unset
-	fi
-
-	if ! has_version 'net-firewall/ebtables'; then
-		elog "Unsetting ebtables symlinks before removal"
-		eselect ebtables unset
-	elif [[ -z ${REPLACED_BY_VERSION} ]]; then
-		elog "Resetting ebtables symlinks to ebtables-legacy"
-		eselect ebtables set ebtables-legacy
-	fi
-
-	if ! has_version 'net-firewall/arptables'; then
-		elog "Unsetting arptables symlinks before removal"
-		eselect arptables unset
-	elif [[ -z ${REPLACED_BY_VERSION} ]]; then
-		elog "Resetting arptables symlinks to arptables-legacy"
-		eselect arptables set arptables-legacy
-	fi
-
-	# The eselect module failing should not be fatal
-	return 0
-}
diff --git a/net-firewall/iptables/metadata.xml b/net-firewall/iptables/metadata.xml
deleted file mode 100644
index a2e7106aebed..000000000000
--- a/net-firewall/iptables/metadata.xml
+++ /dev/null
@@ -1,30 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="project">
-    <email>base-system@gentoo.org</email>
-    <name>Gentoo Base System</name>
-  </maintainer>
-  <use>
-    <flag name="conntrack">Build against <pkg>net-libs/libnetfilter_conntrack</pkg> when enables the connlabel matcher</flag>
-    <flag name="netlink">Build against libnfnetlink which enables the nfnl_osf util</flag>
-    <flag name="nftables">Support nftables kernel interface</flag>
-    <flag name="pcap">Build against <pkg>net-libs/libpcap</pkg> which enables the nfbpf_compile util</flag>
-  </use>
-  <longdescription>
-		iptables is the userspace command line program used to set up, maintain, and
-		inspect the tables of IPv4 packet filter rules in the Linux kernel. It's a
-		part of packet filtering framework which allows the stateless and stateful
-		packet filtering, all kinds of network address and port translation, and is a
-		flexible and extensible infrastructure with multiple layers of API's for 3rd
-		party extensions. The iptables package also includes ip6tables. ip6tables is
-		used for configuring the IPv6 packet filter.
-
-		Note that some extensions (e.g. imq and l7filter) are not included into
-		official kernel sources so you have to patch the sources before installation.
-	</longdescription>
-  <upstream>
-    <remote-id type="cpe">cpe:/a:netfilter:iptables</remote-id>
-  </upstream>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/lutelwall/Manifest b/net-firewall/lutelwall/Manifest
deleted file mode 100644
index 327c5ec9fbc4..000000000000
--- a/net-firewall/lutelwall/Manifest
+++ /dev/null
@@ -1 +0,0 @@
-DIST lutelwall-0.99.tar.gz 29209 BLAKE2B 1f9e0c1516105e271ea3fc0ab51cdb4957a86ce725e305ef681951960f84029ecb8b911a1b49827dec67b00289385e8a62a5c90529463057859aa3d130897d39 SHA512 8812048c9e4ec3beff2214ed3ceb2d980d769ada686a934af22baec76a3670e51ddb171097adbfb78c63ce9bc25554b1da93ec8c86f59457277fd4651cf1068c
diff --git a/net-firewall/lutelwall/files/lutelwall b/net-firewall/lutelwall/files/lutelwall
deleted file mode 100644
index e99b3923a975..000000000000
--- a/net-firewall/lutelwall/files/lutelwall
+++ /dev/null
@@ -1,25 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2005 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License, v2 or later
-
-depend() {
-	need net
-	use logger
-}
-
-start() {
-	ebegin "Starting LutelWall"
-	/usr/sbin/lutelwall start
-	eend $?
-}
-
-stop() {
-	ebegin "Stopping LutelWall"
-	/usr/sbin/lutelwall stop
-	eend $?
-}
-
-restart() {
-	stop
-	start
-}
diff --git a/net-firewall/lutelwall/lutelwall-0.99-r1.ebuild b/net-firewall/lutelwall/lutelwall-0.99-r1.ebuild
deleted file mode 100644
index 0f97a1465b44..000000000000
--- a/net-firewall/lutelwall/lutelwall-0.99-r1.ebuild
+++ /dev/null
@@ -1,32 +0,0 @@
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=7
-
-DESCRIPTION="IPTables firewall setup script"
-LICENSE="GPL-2"
-HOMEPAGE="https://www.lutel.pl/lutelwall/"
-SRC_URI="https://www.lutel.pl/wp-content/uploads/${PV}/${P}.tar.gz"
-SLOT="0"
-KEYWORDS="~alpha ~amd64 ~ppc ~sparc x86"
-
-RDEPEND="
-	>=net-firewall/iptables-1.2.6
-	>=sys-apps/gawk-3.1
-	sys-apps/iproute2
-"
-
-src_install() {
-	insinto /etc
-	doins lutelwall.conf
-
-	dosbin lutelwall
-	doinitd "${FILESDIR}"/lutelwall
-
-	dodoc FEATURES ChangeLog
-}
-
-pkg_postinst() {
-	elog "Basic configuration file is /etc/lutelwall.conf"
-	elog "Adjust it to your needs before using"
-}
diff --git a/net-firewall/lutelwall/metadata.xml b/net-firewall/lutelwall/metadata.xml
deleted file mode 100644
index 9a9d668b2de5..000000000000
--- a/net-firewall/lutelwall/metadata.xml
+++ /dev/null
@@ -1,23 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="person" proxied="yes">
-    <email>tomek@lutel.pl</email>
-    <name>Tomek Lutelmowski</name>
-  </maintainer>
-  <maintainer type="project">
-    <email>netmon@gentoo.org</email>
-    <name>Gentoo network monitoring and analysis project</name>
-  </maintainer>
-  <maintainer type="project" proxied="proxy">
-    <email>proxy-maint@gentoo.org</email>
-    <name>Proxy Maintainers</name>
-  </maintainer>
-  <longdescription>
-LutelWall is high-level firewall configuration tool. It uses human-readable and easy 
-to understand configuration to set up Netfilter in most secure way. Its flexibility 
-allows firewall admins build from very simple, single-homed firewalls, to most complex 
-ones - with multiple subnets, DMZ's and traffic redirections.
-</longdescription>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/metadata.xml b/net-firewall/metadata.xml
deleted file mode 100644
index cdf40d019088..000000000000
--- a/net-firewall/metadata.xml
+++ /dev/null
@@ -1,34 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE catmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
-<catmetadata>
-	<longdescription lang="en">
-		The net-firewall category contains network firewall software.
-	</longdescription>
-	<longdescription lang="de">
-		Die Kategorie net-firewall enthült Firewall-Software.
-	</longdescription>
-	<longdescription lang="es">
-		La categoría net-firewall contiene programas relacionados con
-		cortafuegos de redes.
-	</longdescription>
-	<longdescription lang="ja">
-		net-firewall カテゴリーにはネットワーク・ファイアウォールの
-		ソフトウェアが含まれています。
-	</longdescription>
-	<longdescription lang="nl">
-		De net-firewall categorie bevat firewall-software.
-	</longdescription>
-	<longdescription lang="vi">
-		Nhóm net-firewall chứa các phần mềm firewall.
-	</longdescription>
-	<longdescription lang="it">
-		La categoria net-firewall contiene software per firewall.
-	</longdescription>
-	<longdescription lang="pt">
-		A categoria net-firewall contém programas de firewall para
-		redes.
-	</longdescription>
-	<longdescription lang="pl">
-		Kategoria net-firewall zawiera ściany ogniowe (firewalle).
-	</longdescription>
-</catmetadata>
diff --git a/net-firewall/nfacct/Manifest b/net-firewall/nfacct/Manifest
deleted file mode 100644
index 7fdc3221082e..000000000000
--- a/net-firewall/nfacct/Manifest
+++ /dev/null
@@ -1,2 +0,0 @@
-DIST nfacct-1.0.2.tar.bz2 265449 BLAKE2B 08da45f90a2982746633001265c93ff6d055bc0ec9bcfb731b60e3666a2ee2520ed499ea57815e524b6c49369415aa4215d0c8e6ea02c1ce76dbc22de2fc79ea SHA512 2d7a76a51ffb10601e67ceda2ce055e63a8da802a682aab3c96cfa38e1d9d0d7ae7fa204d17d555303216e2ceeb0965d6b25387634725cf35e0a7109d84b47b3
-DIST nfacct-1.0.2.tar.bz2.sig 543 BLAKE2B 163e88c95fbb513178ea24313f35f6e03008695649b6ac8e384cb52df300705956bb09869863da7b3ffc08032f9a653f3c1c356a81ed369f9d17d244600f582c SHA512 93ade7a6fed651b55c078405de28149c2bfaf44e09d5e1e64d1ba97dbbe3f90d947108592a535449382b80eabc590b20bb7c2e66213f82075179d3b5d3abc0fb
diff --git a/net-firewall/nfacct/files/nfacct.confd b/net-firewall/nfacct/files/nfacct.confd
deleted file mode 100644
index b695251ebb03..000000000000
--- a/net-firewall/nfacct/files/nfacct.confd
+++ /dev/null
@@ -1,7 +0,0 @@
-# /etc/conf.d/nfacct
-
-# Location for nfacct initscript to save and restore the counters
-NFACCT_SAVE="/var/lib/nfacct/counters-save"
-
-# Save counters on stopping nfacct
-SAVE_ON_STOP="yes"
diff --git a/net-firewall/nfacct/files/nfacct.initd b/net-firewall/nfacct/files/nfacct.initd
deleted file mode 100644
index ac5eeaa33aba..000000000000
--- a/net-firewall/nfacct/files/nfacct.initd
+++ /dev/null
@@ -1,42 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2021 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-extra_commands="save"
-
-NFACCT_SAVE=${NFACCT_SAVE:-/var/lib/nfacct/counters-save}
-
-depend() {
-	before iptables ip6tables
-}
-
-checkconfig() {
-	if [ ! -f "${NFACCT_SAVE}" ] ; then
-		eerror "Not starting ${SVCNAME}. First create some counters then run:"
-		eerror "/etc/init.d/${SVCNAME} save"
-		return 1
-	fi
-	return 0
-}
-
-start() {
-	checkconfig || return 1
-	ebegin "Loading nfacct counters"
-	nfacct restore < "${NFACCT_SAVE}"
-	eend $?
-}
-
-stop() {
-	if [ "${SAVE_ON_STOP}" = "yes" ] ; then
-		save || return 1
-	fi
-	ebegin "Removing nfacct counters"
-	nfacct flush
-	eend $?
-}
-
-save() {
-	ebegin "Saving nfacct counters"
-	nfacct list > "${NFACCT_SAVE}"
-	eend $?
-}
diff --git a/net-firewall/nfacct/metadata.xml b/net-firewall/nfacct/metadata.xml
deleted file mode 100644
index def7802554eb..000000000000
--- a/net-firewall/nfacct/metadata.xml
+++ /dev/null
@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="project">
-    <email>netmon@gentoo.org</email>
-    <name>Gentoo network monitoring and analysis project</name>
-  </maintainer>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/nfacct/nfacct-1.0.2-r2.ebuild b/net-firewall/nfacct/nfacct-1.0.2-r2.ebuild
deleted file mode 100644
index f14c2749a7e0..000000000000
--- a/net-firewall/nfacct/nfacct-1.0.2-r2.ebuild
+++ /dev/null
@@ -1,38 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit linux-info verify-sig
-
-DESCRIPTION="Command line tool to create/retrieve/delete accounting objects in NetFilter"
-HOMEPAGE="https://www.netfilter.org/projects/nfacct/"
-SRC_URI="
-	https://www.netfilter.org/projects/${PN}/files/${P}.tar.bz2
-	verify-sig? ( https://www.netfilter.org/projects/${PN}/files/${P}.tar.bz2.sig )
-"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="amd64 ~arm ~arm64 ~ppc64 ~riscv x86"
-
-RDEPEND="
-	net-libs/libmnl:=
-	>=net-libs/libnetfilter_acct-1.0.3
-"
-DEPEND="${RDEPEND}"
-BDEPEND="
-	virtual/pkgconfig
-	verify-sig? ( sec-keys/openpgp-keys-netfilter )
-"
-
-CONFIG_CHECK="~NETFILTER_NETLINK_ACCT"
-
-src_install() {
-	default
-
-	keepdir /var/lib/nfacct
-	newinitd "${FILESDIR}"/${PN}.initd nfacct
-	newconfd "${FILESDIR}"/${PN}.confd nfacct
-}
diff --git a/net-firewall/nftables/Manifest b/net-firewall/nftables/Manifest
deleted file mode 100644
index 05c28bc11ea6..000000000000
--- a/net-firewall/nftables/Manifest
+++ /dev/null
@@ -1,10 +0,0 @@
-DIST nftables-1.1.1.tar.xz 989700 BLAKE2B f273c78369ba755049c6afa63eba195cf29f926fa8fc9bf344022904c00a8c6c4259cc5093e23993a55fd25790af575305df79a7c28624fa7082661b2eed70d0 SHA512 676413d4adadffb15d52c1f8f6432636cab83a7bcda1a18d9f0e6b58819a2c027a49922588c02bd9ad386de930eaa697bfe74c0938b595bf1ee485bfa7cf2e50
-DIST nftables-1.1.1.tar.xz.sig 566 BLAKE2B b7debda3373972f69af9b4b23e1b66a8fd156440187aafba605bb7342c267207e5aa628256e96432ebd4583a6a9436e1969a33636111d2bd8d57185a01e2d502 SHA512 fc23034c512f686167203e827ff2a8f7cb64530211ce92a28793bd49577ce3bf519ffbe910b0071cb21925898497cb5cbf70121c68bfcdbfa4460c63a14203ac
-DIST nftables-1.1.3.tar.xz 990172 BLAKE2B 35f4ece6c27b29a14bc71bb7893971134950509a713e84453e1f87df6b07cda327314d6dbbf048032a047652b8817f8ee8a5d74a56e356088495edd1dbbed000 SHA512 b5c244cb6db73eb232e5c999e07403b60c543efb9c4b9991838cc9c43a1bd08ca7b2926233536cbb0cc66e2a9acc4fbddc4b5565f5665e753c107a8739a86040
-DIST nftables-1.1.3.tar.xz.sig 566 BLAKE2B 4f0e9c89213b46d3445a729bf96b1790adc53725f31134f9028297e99d83ac43f5094f9cfa0efee903dc691781dd5d67a814583ff1c645776f1a46266dc2681f SHA512 7aa972c146e0dfaacc8faaef9b9ebbe419f7cbc5814d1fb978b35a4972d384aabe2e6e053fefc6d5d042acb9bff5f35e5f97cbee0c4a0152c53ab9c2e5b0335f
-DIST nftables-1.1.4.tar.xz 1005044 BLAKE2B 359d23c89462125be72d4a103bd063cb9acf4c929ecc345d11c895b990ab7a7d96e73ac2d5e39036a7a6593edcb82d1b407e49c6fbb95aba8e31270f4b2d0917 SHA512 861beb92bdf668c92054becded5497369c9182124df45a175a8534aa1eb5b3d5e69f85e4e10f468f61f7493370e99b51ebe6f6e6e207670211167d88fa9e63aa
-DIST nftables-1.1.4.tar.xz.sig 566 BLAKE2B 87d84b3f4e896923c7c59701ab98aec289dd5a5413f6ff1b4680a98238ce9ccba452e23cc686b04a84c70be4c153d3aac5d73db8c7a7c61021226b20c0c11fab SHA512 4aa1d7f2b219e24cbc41fa397afcc605b3cf1c55a14b97827c0581cc2af9c5def0308ed69aa243b30690f7f14501c573a7902a75003582d0adf26ab086ca8356
-DIST nftables-1.1.5.tar.xz 1008132 BLAKE2B 4c391e316f5c04cffe16a64df60217d74e37ab4f87c614003e2d2f702b8a4fe81c2ca7f42b3429e948078b2b0ecf0ad61b8cc2f7b95384fff9c004bcc3837317 SHA512 01fbbea43fd01250b0176a200dfdb6b84d3d51156cc2350acb25a5e66960e1908c3d17a0363baddb32897ea8bea0569b67500a94f708c8587b0e29402f51cbb6
-DIST nftables-1.1.5.tar.xz.sig 566 BLAKE2B 4868d9a0fc35eade43e973e7d17412edd2302155df8d1b68664746feec84479446ad427363ccc0a4fc32272b03a200414451c9732cd3486707994816d331b91c SHA512 e6ff864eeba8c73ec5352d5c690864e29f128258edd653765f77e34689dc7408de91a04827bf15fcf8e13cf6b875f3b7e9bbdb0b23dc89cecde43787b1df60bd
-DIST nftables-1.1.6.tar.xz 1025092 BLAKE2B ec2abb475e078fa9872c02a7eef711eac40ac8dc40e3ff15b732808db5d1b5632a85060db04146a49b187fdcf865c3cce17774773bb8987442c5d3fc943c0380 SHA512 8d0a833d0ae2b6ac82e0da8bb74ffb69679e49a938b86a75d4ee3d81343400a95fe064cf95d60d22df30370779e524b31497a9c89a516d9bff645f3f83bb6bb1
-DIST nftables-1.1.6.tar.xz.sig 566 BLAKE2B 9ccd32fd29e02457da05848852456e5bb2cebe5757ad9a18add9184f9151880712e03a34ca81df905cf9ee325e9e3278cc924b2ff87bca726e42d53b17bbe9b5 SHA512 7a7cc7773c4784f7c5902b3fd33b7efcb808eb846bee4a0fed5f8ef54759a5cf2dd59605d171fe2ffa59416db7e56162f59b7abbd7fdfa2b5e3d417942743585
diff --git a/net-firewall/nftables/files/libexec/nftables-mk.sh b/net-firewall/nftables/files/libexec/nftables-mk.sh
deleted file mode 100644
index 27defe3c1c31..000000000000
--- a/net-firewall/nftables/files/libexec/nftables-mk.sh
+++ /dev/null
@@ -1,60 +0,0 @@
-#!/bin/sh
-
-main() {
-	local NFTABLES_SAVE=${2:-'/var/lib/nftables/rules-save'}
-	case "$1" in
-		"check")
-			nft -c -f "${NFTABLES_SAVE}"
-		;;
-		"clear")
-			nft flush ruleset
-		;;
-		"list")
-			nft ${SAVE_OPTIONS} list ruleset
-		;;
-		"load")
-			# We use an include because cat fails with long rulesets see #675188
-			printf 'flush ruleset\ninclude "%s"\n' "${NFTABLES_SAVE}" | nft -f -
-		;;
-		"panic")
-			panic hard | nft -f -
-		;;
-		"soft_panic")
-			panic soft | nft -f -
-		;;
-		"store")
-			local tmp_save="${NFTABLES_SAVE}.tmp"
-			umask 177
-			(
-				printf '#!/sbin/nft -f\nflush ruleset\n'
-				nft ${SAVE_OPTIONS} list ruleset
-			) > "$tmp_save" && mv ${tmp_save} ${NFTABLES_SAVE}
-		;;
-	esac
-}
-
-panic() {
-	local erule;
-	[ "$1" = soft ] && erule="ct state established,related accept;" || erule="";
-	cat <<EOF
-flush ruleset
-table inet filter {
-	chain input {
-		type filter hook input priority 0;
-		$erule
-		drop
-	}
-	chain forward {
-		type filter hook forward priority 0;
-		drop
-	}
-	chain output {
-		type filter hook output priority 0;
-		$erule
-		drop
-	}
-}
-EOF
-}
-
-main "$@"
diff --git a/net-firewall/nftables/files/libexec/nftables.sh b/net-firewall/nftables/files/libexec/nftables.sh
deleted file mode 100644
index 557b454a9115..000000000000
--- a/net-firewall/nftables/files/libexec/nftables.sh
+++ /dev/null
@@ -1,150 +0,0 @@
-#! /bin/sh
-
-main() {
-    local NFTABLES_SAVE=${2:-'/var/lib/nftables/rules-save'}
-    local retval
-    case "$1" in
-        "clear")
-            if ! use_legacy; then
-                nft flush ruleset
-            else
-                clear_legacy
-            fi
-            retval=$?
-        ;;
-        "list")
-            if ! use_legacy; then
-                nft list ruleset
-            else
-                list_legacy
-            fi
-            retval=$?
-        ;;
-        "load")
-            nft -f ${NFTABLES_SAVE}
-            retval=$?
-        ;;
-        "store")
-            umask 177
-            local tmp_save="${NFTABLES_SAVE}.tmp"
-            if ! use_legacy; then
-                nft ${SAVE_OPTIONS} list ruleset > ${tmp_save}
-            else
-                save_legacy ${tmp_save}
-            fi
-            retval=$?
-            if [ ${retval} ]; then
-                mv ${tmp_save} ${NFTABLES_SAVE}
-            fi
-        ;;
-    esac
-    return ${retval}
-}
-
-clear_legacy() {
-    local l3f line table chain first_line
-
-    first_line=1
-    if manualwalk; then
-        for l3f in $(getfamilies); do
-            nft list tables ${l3f} | while read line; do
-                table=$(echo ${line} | sed "s/table[ \t]*//")
-                deletetable ${l3f} ${table}
-            done
-        done
-    else
-        nft list tables | while read line; do
-            l3f=$(echo ${line} | cut -d ' ' -f2)
-            table=$(echo ${line} | cut -d ' ' -f3)
-            deletetable ${l3f} ${table}
-        done
-    fi
-}
-
-list_legacy() {
-    local l3f
-
-    if manualwalk; then
-        for l3f in $(getfamilies); do
-            nft list tables ${l3f} | while read line; do
-                line=$(echo ${line} | sed "s/table/table ${l3f}/")
-                echo "$(nft list ${line})"
-            done
-        done
-    else
-        nft list tables | while read line; do
-            echo "$(nft list ${line})"
-        done
-    fi
-}
-
-save_legacy() {
-    tmp_save=$1
-    touch "${tmp_save}"
-    if manualwalk; then
-        for l3f in $(getfamilies); do
-            nft list tables ${l3f} | while read line; do
-                line=$(echo ${line} | sed "s/table/table ${l3f}/")
-                nft ${SAVE_OPTIONS} list ${line} >> ${tmp_save}
-            done
-        done
-    else
-        nft list tables | while read line; do
-            nft ${SAVE_OPTIONS} list ${line} >> "${tmp_save}"
-        done
-    fi
-}
-
-use_legacy() {
-    local major_ver minor_ver
-
-    major_ver=$(uname -r | cut -d '.' -f1)
-    minor_ver=$(uname -r | cut -d '.' -f2)
-
-    [ $major_ver -ge 4 -o $major_ver -eq 3 -a $minor_ver -ge 18 ] && return 1
-    return 0
-}
-
-CHECK_TABLE_NAME="GENTOO_CHECK_TABLE"
-
-getfamilies() {
-    local l3f families
-
-    for l3f in ip arp ip6 bridge inet; do
-        if nft create table ${l3f} ${CHECK_TABLE_NAME} > /dev/null 2>&1; then
-            families="${families}${l3f} "
-            nft delete table ${l3f} ${CHECK_TABLE_NAME}
-        fi
-    done
-    echo ${families}
-}
-
-manualwalk() {
-    local result l3f=`getfamilies | cut -d ' ' -f1`
-
-    nft create table ${l3f} ${CHECK_TABLE_NAME}
-    nft list tables | read line
-    if [ $(echo $line | wc -w) -lt 3 ]; then
-        result=0
-    fi
-    result=1
-    nft delete table ${l3f} ${CHECK_TABLE_NAME}
-
-    return $result
-}
-
-deletetable() {
-    # family is $1
-    # table name is $2
-    nft flush table $1 $2
-    nft list table $1 $2 | while read l; do
-        chain=$(echo $l | grep -o 'chain [^[:space:]]\+' | cut -d ' ' -f2)
-        if [ -n "${chain}" ]; then
-            nft flush chain $1 $2 ${chain}
-            nft delete chain $1 $2 ${chain}
-        fi
-    done
-    nft delete table $1 $2
-}
-
-main "$@"
diff --git a/net-firewall/nftables/files/man-pages/gen-manpages.bash b/net-firewall/nftables/files/man-pages/gen-manpages.bash
deleted file mode 100644
index a2223d3dd5be..000000000000
--- a/net-firewall/nftables/files/man-pages/gen-manpages.bash
+++ /dev/null
@@ -1,72 +0,0 @@
-#!/bin/bash
-#
-# create manpages for nftables
-
-declare -A MAN_PAGES
-
-MAN_PAGES=(
-	[nft.8]="nft.txt"
-	[libnftables-json.5]="libnftables-json.adoc"
-	[libnftables.3]="libnftables.adoc"
-)
-
-build_manpages() {
-	tar axf "${distfile}" -C "${srcdir}" || return
-
-	pushd "${srcdir}/${version}/doc" > /dev/null || return
-	local manpage
-	for manpage in "${!MAN_PAGES[@]}"; do
-		a2x -L --doctype manpage --format manpage -D . "${MAN_PAGES[${manpage}]}" || return
-	done
-	popd > /dev/null || return
-
-	local -a tarfiles
-	readarray -t tarfiles < <(printf -- "${version}/doc/%s\\n" "${!MAN_PAGES[@]}")
-
-	tar -Jc --owner='root:0' --group='root:0' \
-		--transform="s:^${version}/doc:${version}-manpages:" \
-		-f "${version}-manpages.tar.xz" \
-		-C "${srcdir}" \
-		"${tarfiles[@]}" || return
-
-	rm -rf "${srcdir:?}/${version}" || return
-}
-
-main() {
-	shopt -s failglob
-	local version="${1}" srcdir="${0%/*}"
-
-	if [[ -z ${version} ]]; then
-		# shellcheck disable=SC2016
-		version=$(
-			find . -maxdepth 1 -type d -a -name 'nftables-*' -printf '%P\0' 2>/dev/null \
-			| LC_COLLATE=C sort -z \
-			| sed -z -n '${p;Q}' \
-			| tr -d '\000'
-		)
-		if [[ -z ${version} ]]; then
-			# shellcheck disable=SC2016
-			version=$(
-				find . -maxdepth 3 -mindepth 3 -type f -a -name 'nftables-*.ebuild' -printf '%P\0' 2>/dev/null \
-				| LC_COLLATE=C sort -z \
-				| sed -r -z -n '${s:.*/::;s:-r[0-9]+::;s:[.]ebuild::;p;Q}' \
-				| tr -d '\000'
-			)
-			if [[ -z ${version} ]]; then
-				printf 'Usage %s <version>\n' "${0}" >&2
-				return 1
-			fi
-		fi
-	elif [[ ${version} =~ [0-9.]+ ]]; then
-		version="nftables-${version}"
-	fi
-
-	local distdir distfile
-	local -a distfiles
-	distdir="$(portageq distdir)" || return
-	distfiles=( "${distdir}/${version}.tar."* ) || return
-	distfile="${distfiles[-1]}"
-	build_manpages || return
-}
-
-main "${@}"
diff --git a/net-firewall/nftables/files/nftables-mk.confd b/net-firewall/nftables/files/nftables-mk.confd
deleted file mode 100644
index 5cda24030f93..000000000000
--- a/net-firewall/nftables/files/nftables-mk.confd
+++ /dev/null
@@ -1,26 +0,0 @@
-# /etc/conf.d/nftables
-
-# Location in which nftables initscript will save set rules on
-# service shutdown
-NFTABLES_SAVE="/var/lib/nftables/rules-save"
-
-# Options to pass to nft on save
-SAVE_OPTIONS="-n"
-
-# Save state on stopping nftables
-SAVE_ON_STOP="yes"
-
-# Only for OpenRC systems.
-# Set to "hard" or "soft" to panic when stopping instead of
-# clearing the rules
-# Soft panic loads a ruleset dropping any new or invalid connections
-# Hard panic loads a ruleset dropping all traffic
-PANIC_ON_STOP=""
-
-# If you need to log nftables messages as soon as nftables starts,
-# AND your logger does NOT depend on the network, then you may wish
-# to uncomment the next line.
-# If your logger depends on the network, and you uncomment this line
-# you will create an unresolvable circular dependency during startup.
-# After commenting or uncommenting this line, you must run 'rc-update -u'.
-#rc_use="logger"
diff --git a/net-firewall/nftables/files/nftables-mk.init-r1 b/net-firewall/nftables/files/nftables-mk.init-r1
deleted file mode 100644
index 1f03301c0535..000000000000
--- a/net-firewall/nftables/files/nftables-mk.init-r1
+++ /dev/null
@@ -1,109 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-extra_commands="check clear list panic save soft_panic"
-extra_started_commands="reload"
-
-depend() {
-	need localmount #434774
-	before net
-}
-
-checkkernel() {
-	if ! /sbin/nft list ruleset >/dev/null 2>/dev/null ; then
-		eerror "Your kernel lacks nftables support, please load"
-		eerror "appropriate modules and try again."
-		return 1
-	fi
-	return 0
-}
-
-checkconfig() {
-	if [ -z "${NFTABLES_SAVE}" ] || [ ! -f "${NFTABLES_SAVE}" ] ; then
-		eerror "Not starting nftables. First create some rules then run:"
-		eerror "/etc/init.d/${SVCNAME} save"
-		return 1
-	fi
-	return 0
-}
-
-_nftables() {
-	export NFTABLES_SAVE SAVE_OPTIONS
-	/usr/libexec/nftables/nftables.sh "${@}"
-}
-
-start_pre() {
-	checkconfig || return 1
-	checkkernel || return 1
-	check || return 1
-}
-
-start() {
-	ebegin "Loading ${SVCNAME} state and starting firewall"
-	_nftables load "${NFTABLES_SAVE}"
-	eend ${?}
-}
-
-stop() {
-	if [ "${SAVE_ON_STOP}" = "yes" ] ; then
-		save || return 1
-	fi
-
-	ebegin "Stopping firewall"
-	if [ "${PANIC_ON_STOP}" = "hard" ]; then
-		_nftables panic
-	elif [ "${PANIC_ON_STOP}" = "soft" ]; then
-		_nftables soft_panic
-	else
-		_nftables clear
-	fi
-	eend ${?}
-}
-
-reload() {
-	start_pre || return 1
-	start
-}
-
-clear() {
-	ebegin "Clearing rules"
-	_nftables clear
-	eend ${?}
-}
-
-list() {
-	_nftables list
-}
-
-check() {
-	ebegin "Checking rules"
-	_nftables check "${NFTABLES_SAVE}"
-	eend ${?}
-}
-
-save() {
-	ebegin "Saving ${SVCNAME} state"
-	checkpath -q -d "$(dirname "${NFTABLES_SAVE}")"
-	checkpath -q -m 0600 -f "${NFTABLES_SAVE}"
-	_nftables store "${NFTABLES_SAVE}"
-	eend ${?}
-}
-
-panic() {
-	if service_started "${SVCNAME}"; then
-		rc-service "${SVCNAME}" zap
-	fi
-	ebegin "Dropping all packets"
-	_nftables panic
-	eend ${?}
-}
-
-soft_panic() {
-	if service_started "${SVCNAME}"; then
-		rc-service "${SVCNAME}" zap
-	fi
-	ebegin "Dropping new connections"
-	_nftables soft_panic
-	eend ${?}
-}
diff --git a/net-firewall/nftables/files/nftables.confd b/net-firewall/nftables/files/nftables.confd
deleted file mode 100644
index e83a4b962061..000000000000
--- a/net-firewall/nftables/files/nftables.confd
+++ /dev/null
@@ -1,19 +0,0 @@
-# /etc/conf.d/nftables
-
-# Location in which nftables initscript will save set rules on 
-# service shutdown
-NFTABLES_SAVE="/var/lib/nftables/rules-save"
-
-# Options to pass to nft on save
-SAVE_OPTIONS="-n"
-
-# Save state on stopping nftables
-SAVE_ON_STOP="yes"
-
-# If you need to log nftables messages as soon as nftables starts,
-# AND your logger does NOT depend on the network, then you may wish
-# to uncomment the next line.
-# If your logger depends on the network, and you uncomment this line
-# you will create an unresolvable circular dependency during startup.
-# After commenting or uncommenting this line, you must run 'rc-update -u'.
-#rc_use="logger"
diff --git a/net-firewall/nftables/files/nftables.init-r1 b/net-firewall/nftables/files/nftables.init-r1
deleted file mode 100644
index 60f1632f4551..000000000000
--- a/net-firewall/nftables/files/nftables.init-r1
+++ /dev/null
@@ -1,129 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 2014-2017 Nicholas Vinson
-# Copyright 1999-2020 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-extra_commands="clear list panic save"
-extra_started_commands="reload"
-depend() {
-	need localmount #434774
-	before net
-}
-
-_nftables() {
-	export NFTABLES_SAVE SAVE_OPTIONS
-	/usr/libexec/nftables/nftables.sh "${@}"
-}
-
-start_pre() {
-	checkkernel || return 1
-	checkconfig || return 1
-	return 0
-}
-
-clear() {
-	_nftables clear || return 1
-	return 0
-}
-
-list() {
-	_nftables list || return 1
-	return 0
-}
-
-panic() {
-	checkkernel || return 1
-	if service_started "${RC_SVCNAME}"; then
-		rc-service "${RC_SVCNAME}" stop
-	fi
-
-	ebegin "Dropping all packets"
-	clear
-	if nft create table ip filter >/dev/null 2>&1; then
-	nft -f /dev/stdin <<-EOF
-		table ip filter {
-			chain input {
-				type filter hook input priority 0;
-				drop
-			}
-			chain forward {
-				type filter hook forward priority 0;
-				drop
-			}
-			chain output {
-				type filter hook output priority 0;
-				drop
-			}
-		}
-	EOF
-	fi
-	if nft create table ip6 filter >/dev/null 2>&1; then
-	nft -f /dev/stdin <<-EOF
-		table ip6 filter {
-			chain input {
-				type filter hook input priority 0;
-				drop
-			}
-			chain forward {
-				type filter hook forward priority 0;
-				drop
-			}
-			chain output {
-				type filter hook output priority 0;
-				drop
-			}
-		}
-	EOF
-	fi
-}
-
-reload() {
-	checkkernel || return 1
-	ebegin "Flushing firewall"
-	clear
-	start
-}
-
-save() {
-	ebegin "Saving nftables state"
-	checkpath -q -d "$(dirname "${NFTABLES_SAVE}")"
-	checkpath -q -m 0600 -f "${NFTABLES_SAVE}"
-	export SAVE_OPTIONS
-	_nftables store "${NFTABLES_SAVE}"
-	return $?
-}
-
-start() {
-	ebegin "Loading nftables state and starting firewall"
-	clear
-	_nftables load "${NFTABLES_SAVE}"
-	eend ${?}
-}
-
-stop() {
-	if yesno "${SAVE_ON_STOP:-yes}"; then
-		save || return 1
-	fi
-
-	ebegin "Stopping firewall"
-	clear
-	eend ${?}
-}
-
-checkconfig() {
-	if [ ! -f "${NFTABLES_SAVE}" ]; then
-		eerror "Not starting nftables.  First create some rules then run:"
-		eerror "rc-service nftables save"
-		return 1
-	fi
-	return 0
-}
-
-checkkernel() {
-	if ! nft list tables >/dev/null 2>&1; then
-		eerror "Your kernel lacks nftables support, please load"
-		eerror "appropriate modules and try again."
-		return 1
-	fi
-	return 0
-}
diff --git a/net-firewall/nftables/files/systemd/nftables-load.service b/net-firewall/nftables/files/systemd/nftables-load.service
deleted file mode 100644
index 149ccac2f5f0..000000000000
--- a/net-firewall/nftables/files/systemd/nftables-load.service
+++ /dev/null
@@ -1,14 +0,0 @@
-[Unit]
-Description=Load nftables firewall rules
-# if both are queued for some reason, don't store before restoring :)
-Before=nftables-store.service
-# sounds reasonable to have firewall up before any of the services go up
-Before=network-pre.target
-Wants=network-pre.target
-
-[Service]
-Type=oneshot
-ExecStart=/usr/libexec/nftables/nftables.sh load /var/lib/nftables/rules-save
-
-[Install]
-WantedBy=basic.target
diff --git a/net-firewall/nftables/files/systemd/nftables-restore.service b/net-firewall/nftables/files/systemd/nftables-restore.service
deleted file mode 100644
index 4b68b0a5b09e..000000000000
--- a/net-firewall/nftables/files/systemd/nftables-restore.service
+++ /dev/null
@@ -1,14 +0,0 @@
-[Unit]
-Description=Store and restore nftables firewall rules
-ConditionPathExists=/var/lib/nftables/rules-save
-Before=network-pre.target
-Wants=network-pre.target
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-ExecStart=/usr/libexec/nftables/nftables.sh load /var/lib/nftables/rules-save
-ExecStop=/usr/libexec/nftables/nftables.sh store /var/lib/nftables/rules-save
-
-[Install]
-WantedBy=basic.target
diff --git a/net-firewall/nftables/files/systemd/nftables-store.service b/net-firewall/nftables/files/systemd/nftables-store.service
deleted file mode 100644
index 373f8b947d7d..000000000000
--- a/net-firewall/nftables/files/systemd/nftables-store.service
+++ /dev/null
@@ -1,11 +0,0 @@
-[Unit]
-Description=Store nftables firewall rules
-Before=shutdown.target
-DefaultDependencies=No
-
-[Service]
-Type=oneshot
-ExecStart=/usr/libexec/nftables/nftables.sh store /var/lib/nftables/rules-save
-
-[Install]
-WantedBy=shutdown.target
diff --git a/net-firewall/nftables/metadata.xml b/net-firewall/nftables/metadata.xml
deleted file mode 100644
index 6002ccc70fdf..000000000000
--- a/net-firewall/nftables/metadata.xml
+++ /dev/null
@@ -1,19 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="project">
-    <email>base-system@gentoo.org</email>
-    <name>Gentoo Base System</name>
-  </maintainer>
-  <maintainer type="person">
-    <email>prometheanfire@gentoo.org</email>
-    <name>Matthew Thode</name>
-  </maintainer>
-  <use>
-    <flag name="doc">Create man pages for the package (requires <pkg>app-text/asciidoc</pkg>)</flag>
-    <flag name="json">Enable JSON support via <pkg>dev-libs/jansson</pkg>
-    </flag>
-    <flag name="xtables">Add libxtables support to try to automatically translate rules added by iptables-compat</flag>
-  </use>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/nftables/nftables-1.1.1-r1.ebuild b/net-firewall/nftables/nftables-1.1.1-r1.ebuild
deleted file mode 100644
index bbfcc7c257a0..000000000000
--- a/net-firewall/nftables/nftables-1.1.1-r1.ebuild
+++ /dev/null
@@ -1,233 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_OPTIONAL=1
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{13..14} )
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit eapi9-ver edo linux-info distutils-r1 systemd verify-sig
-
-DESCRIPTION="Linux kernel firewall, NAT and packet mangling tools"
-HOMEPAGE="https://netfilter.org/projects/nftables/"
-
-if [[ ${PV} =~ ^[9]{4,}$ ]]; then
-	inherit autotools git-r3
-	EGIT_REPO_URI="https://git.netfilter.org/${PN}"
-	BDEPEND="app-alternatives/yacc"
-else
-	SRC_URI="
-		https://netfilter.org/projects/nftables/files/${P}.tar.xz
-		verify-sig? ( https://netfilter.org/projects/nftables/files/${P}.tar.xz.sig )
-	"
-	KEYWORDS="amd64 arm arm64 ~hppa ~loong ~mips ppc ppc64 ~riscv ~sparc x86"
-	BDEPEND="verify-sig? ( sec-keys/openpgp-keys-netfilter )"
-fi
-
-# See COPYING: new code is GPL-2+, existing code is GPL-2
-LICENSE="GPL-2 GPL-2+"
-SLOT="0/1"
-IUSE="debug doc +gmp json libedit python +readline static-libs test xtables"
-RESTRICT="!test? ( test )"
-
-RDEPEND="
-	>=net-libs/libmnl-1.0.4:=
-	>=net-libs/libnftnl-1.2.8:=
-	gmp? ( dev-libs/gmp:= )
-	json? ( dev-libs/jansson:= )
-	python? ( ${PYTHON_DEPS} )
-	readline? ( sys-libs/readline:= )
-	xtables? ( >=net-firewall/iptables-1.6.1:= )
-"
-DEPEND="${RDEPEND}"
-BDEPEND+="
-	app-alternatives/lex
-	virtual/pkgconfig
-	doc? (
-		app-text/asciidoc
-		>=app-text/docbook2X-0.8.8-r4
-	)
-	python? ( ${DISTUTILS_DEPS} )
-"
-
-REQUIRED_USE="
-	python? ( ${PYTHON_REQUIRED_USE} )
-	libedit? ( !readline )
-"
-
-src_prepare() {
-	default
-
-	if [[ ${PV} =~ ^[9]{4,}$ ]] ; then
-		eautoreconf
-	fi
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_prepare
-		popd >/dev/null || die
-	fi
-}
-
-src_configure() {
-	local myeconfargs=(
-		--sbindir="${EPREFIX}"/sbin
-		$(use_enable debug)
-		$(use_enable doc man-doc)
-		$(use_with !gmp mini_gmp)
-		$(use_with json)
-		$(use_with libedit cli editline)
-		$(use_with readline cli readline)
-		$(use_enable static-libs static)
-		$(use_with xtables)
-	)
-
-	econf "${myeconfargs[@]}"
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_configure
-		popd >/dev/null || die
-	fi
-}
-
-src_compile() {
-	default
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_compile
-		popd >/dev/null || die
-	fi
-}
-
-src_test() {
-	emake check
-
-	if [[ ${EUID} == 0 ]]; then
-		edo tests/shell/run-tests.sh -v
-	else
-		ewarn "Skipping shell tests (requires root)"
-	fi
-
-	if use python; then
-		pushd tests/py >/dev/null || die
-		distutils-r1_src_test
-		popd >/dev/null || die
-	fi
-}
-
-python_test() {
-	if [[ ${EUID} == 0 ]]; then
-		edo "${EPYTHON}" nft-test.py
-	else
-		ewarn "Skipping Python tests (requires root)"
-	fi
-}
-
-src_install() {
-	default
-
-	if ! use doc && [[ ! ${PV} =~ ^[9]{4,}$ ]]; then
-		pushd doc >/dev/null || die
-		doman *.?
-		popd >/dev/null || die
-	fi
-
-	# Do it here instead of in src_prepare to avoid eautoreconf
-	# rmdir lets us catch if more files end up installed in /etc/nftables
-	dodir /usr/share/doc/${PF}/skels/
-	mv "${ED}"/etc/nftables/osf "${ED}"/usr/share/doc/${PF}/skels/osf || die
-	rmdir "${ED}"/etc/nftables || die
-
-	exeinto /usr/libexec/${PN}
-	newexe "${FILESDIR}"/libexec/${PN}-mk.sh ${PN}.sh
-	newconfd "${FILESDIR}"/${PN}-mk.confd ${PN}
-	newinitd "${FILESDIR}"/${PN}-mk.init-r1 ${PN}
-	keepdir /var/lib/nftables
-
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-load.service
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-store.service
-
-	if use python ; then
-		pushd py >/dev/null || die
-		distutils-r1_src_install
-		popd >/dev/null || die
-	fi
-
-	find "${ED}" -type f -name "*.la" -delete || die
-}
-
-pkg_preinst() {
-	local stderr
-
-	# There's a history of regressions with nftables upgrades. Perform a
-	# safety check to help us spot them earlier. For the check to pass, the
-	# currently loaded ruleset, if any, must be successfully evaluated by
-	# the newly built instance of nft(8).
-	if [[ -n ${ROOT} ]] || [[ ! -d /sys/module/nftables ]] || [[ ! -x /sbin/nft ]]; then
-		# Either nftables isn't yet in use or nft(8) cannot be executed.
-		return
-	elif ! stderr=$(umask 177; /sbin/nft -t list ruleset 2>&1 >"${T}"/ruleset.nft); then
-		# Report errors induced by trying to list the ruleset but don't
-		# treat them as being fatal.
-		printf '%s\n' "${stderr}" >&2
-	elif [[ ${stderr} == *"is managed by iptables-nft"* ]]; then
-		# Rulesets generated by iptables-nft are special in nature and
-		# will not always be printed in a way that constitutes a valid
-		# syntax for ntf(8). Ignore them.
-		return
-	elif set -- "${ED}"/usr/lib*/libnftables.so;
-		! LD_LIBRARY_PATH=${1%/*} "${ED}"/sbin/nft -c -f -- "${T}"/ruleset.nft
-	then
-		eerror "Your currently loaded ruleset cannot be parsed by the newly built instance of"
-		eerror "nft. This probably means that there is a regression introduced by v${PV}."
-		eerror "(To make the ebuild fail instead of warning, set NFTABLES_ABORT_ON_RELOAD_FAILURE=1.)"
-		if [[ -n ${NFTABLES_ABORT_ON_RELOAD_FAILURE} ]] ; then
-			die "Aborting because of failed nft reload!"
-		fi
-	fi
-}
-
-pkg_postinst() {
-	local save_file
-	save_file="${EROOT}"/var/lib/nftables/rules-save
-
-	# In order for the nftables-load systemd service to start
-	# the save_file must exist.
-	if [[ ! -f "${save_file}" ]]; then
-		( umask 177; touch "${save_file}" )
-	elif [[ $(( "$( stat --printf '%05a' "${save_file}" )" & 07177 )) -ne 0 ]]; then
-		ewarn "Your system has dangerous permissions for ${save_file}"
-		ewarn "It is probably affected by bug #691326."
-		ewarn "You may need to fix the permissions of the file. To do so,"
-		ewarn "you can run the command in the line below as root."
-		ewarn "    'chmod 600 \"${save_file}\"'"
-	fi
-
-	if has_version 'sys-apps/systemd'; then
-		if ver_replacing -lt "1.1.1-r1"; then
-			elog "Starting with ${PN}-1.1.1-r1, the ${PN}-restore.service has"
-			elog "been split into ${PN}-load.service and ${PN}-store.service."
-			elog
-		fi
-		elog "If you wish to enable the firewall rules on boot (on systemd) you"
-		elog "will need to enable the nftables-load service."
-		elog "    'systemctl enable ${PN}-load.service'"
-		elog
-		elog "Enable nftables-store.service if you want firewall rules to be"
-		elog "saved at shutdown."
-	fi
-
-	if has_version 'sys-apps/openrc'; then
-		elog "If you wish to enable the firewall rules on boot (on openrc) you"
-		elog "will need to enable the nftables service."
-		elog "    'rc-update add ${PN} default'"
-		elog
-		elog "If you are creating or updating the firewall rules and wish to save"
-		elog "them to be loaded on the next restart, use the \"save\" functionality"
-		elog "in the init script."
-		elog "    'rc-service ${PN} save'"
-	fi
-}
diff --git a/net-firewall/nftables/nftables-1.1.1.ebuild b/net-firewall/nftables/nftables-1.1.1.ebuild
deleted file mode 100644
index 8506e6960cef..000000000000
--- a/net-firewall/nftables/nftables-1.1.1.ebuild
+++ /dev/null
@@ -1,228 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_OPTIONAL=1
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{13..14} )
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit edo linux-info distutils-r1 systemd verify-sig
-
-DESCRIPTION="Linux kernel firewall, NAT and packet mangling tools"
-HOMEPAGE="https://netfilter.org/projects/nftables/"
-
-if [[ ${PV} =~ ^[9]{4,}$ ]]; then
-	inherit autotools git-r3
-	EGIT_REPO_URI="https://git.netfilter.org/${PN}"
-	BDEPEND="app-alternatives/yacc"
-else
-	SRC_URI="
-		https://netfilter.org/projects/nftables/files/${P}.tar.xz
-		verify-sig? ( https://netfilter.org/projects/nftables/files/${P}.tar.xz.sig )
-	"
-	KEYWORDS="amd64 arm arm64 ~hppa ~loong ~mips ppc ppc64 ~riscv ~sparc x86"
-	BDEPEND="verify-sig? ( sec-keys/openpgp-keys-netfilter )"
-fi
-
-# See COPYING: new code is GPL-2+, existing code is GPL-2
-LICENSE="GPL-2 GPL-2+"
-SLOT="0/1"
-IUSE="debug doc +gmp json libedit python +readline static-libs test xtables"
-RESTRICT="!test? ( test )"
-
-RDEPEND="
-	>=net-libs/libmnl-1.0.4:=
-	>=net-libs/libnftnl-1.2.8:=
-	gmp? ( dev-libs/gmp:= )
-	json? ( dev-libs/jansson:= )
-	python? ( ${PYTHON_DEPS} )
-	readline? ( sys-libs/readline:= )
-	xtables? ( >=net-firewall/iptables-1.6.1:= )
-"
-DEPEND="${RDEPEND}"
-BDEPEND+="
-	app-alternatives/lex
-	virtual/pkgconfig
-	doc? (
-		app-text/asciidoc
-		>=app-text/docbook2X-0.8.8-r4
-	)
-	python? ( ${DISTUTILS_DEPS} )
-"
-
-REQUIRED_USE="
-	python? ( ${PYTHON_REQUIRED_USE} )
-	libedit? ( !readline )
-"
-
-src_prepare() {
-	default
-
-	if [[ ${PV} =~ ^[9]{4,}$ ]] ; then
-		eautoreconf
-	fi
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_prepare
-		popd >/dev/null || die
-	fi
-}
-
-src_configure() {
-	local myeconfargs=(
-		--sbindir="${EPREFIX}"/sbin
-		$(use_enable debug)
-		$(use_enable doc man-doc)
-		$(use_with !gmp mini_gmp)
-		$(use_with json)
-		$(use_with libedit cli editline)
-		$(use_with readline cli readline)
-		$(use_enable static-libs static)
-		$(use_with xtables)
-	)
-
-	econf "${myeconfargs[@]}"
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_configure
-		popd >/dev/null || die
-	fi
-}
-
-src_compile() {
-	default
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_compile
-		popd >/dev/null || die
-	fi
-}
-
-src_test() {
-	emake check
-
-	if [[ ${EUID} == 0 ]]; then
-		edo tests/shell/run-tests.sh -v
-	else
-		ewarn "Skipping shell tests (requires root)"
-	fi
-
-	if use python; then
-		pushd tests/py >/dev/null || die
-		distutils-r1_src_test
-		popd >/dev/null || die
-	fi
-}
-
-python_test() {
-	if [[ ${EUID} == 0 ]]; then
-		edo "${EPYTHON}" nft-test.py
-	else
-		ewarn "Skipping Python tests (requires root)"
-	fi
-}
-
-src_install() {
-	default
-
-	if ! use doc && [[ ! ${PV} =~ ^[9]{4,}$ ]]; then
-		pushd doc >/dev/null || die
-		doman *.?
-		popd >/dev/null || die
-	fi
-
-	# Do it here instead of in src_prepare to avoid eautoreconf
-	# rmdir lets us catch if more files end up installed in /etc/nftables
-	dodir /usr/share/doc/${PF}/skels/
-	mv "${ED}"/etc/nftables/osf "${ED}"/usr/share/doc/${PF}/skels/osf || die
-	rmdir "${ED}"/etc/nftables || die
-
-	exeinto /usr/libexec/${PN}
-	newexe "${FILESDIR}"/libexec/${PN}-mk.sh ${PN}.sh
-	newconfd "${FILESDIR}"/${PN}-mk.confd ${PN}
-	newinitd "${FILESDIR}"/${PN}-mk.init-r1 ${PN}
-	keepdir /var/lib/nftables
-
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-restore.service
-
-	if use python ; then
-		pushd py >/dev/null || die
-		distutils-r1_src_install
-		popd >/dev/null || die
-	fi
-
-	find "${ED}" -type f -name "*.la" -delete || die
-}
-
-pkg_preinst() {
-	local stderr
-
-	# There's a history of regressions with nftables upgrades. Perform a
-	# safety check to help us spot them earlier. For the check to pass, the
-	# currently loaded ruleset, if any, must be successfully evaluated by
-	# the newly built instance of nft(8).
-	if [[ -n ${ROOT} ]] || [[ ! -d /sys/module/nftables ]] || [[ ! -x /sbin/nft ]]; then
-		# Either nftables isn't yet in use or nft(8) cannot be executed.
-		return
-	elif ! stderr=$(umask 177; /sbin/nft -t list ruleset 2>&1 >"${T}"/ruleset.nft); then
-		# Report errors induced by trying to list the ruleset but don't
-		# treat them as being fatal.
-		printf '%s\n' "${stderr}" >&2
-	elif [[ ${stderr} == *"is managed by iptables-nft"* ]]; then
-		# Rulesets generated by iptables-nft are special in nature and
-		# will not always be printed in a way that constitutes a valid
-		# syntax for ntf(8). Ignore them.
-		return
-	elif set -- "${ED}"/usr/lib*/libnftables.so;
-		! LD_LIBRARY_PATH=${1%/*} "${ED}"/sbin/nft -c -f -- "${T}"/ruleset.nft
-	then
-		eerror "Your currently loaded ruleset cannot be parsed by the newly built instance of"
-		eerror "nft. This probably means that there is a regression introduced by v${PV}."
-		eerror "(To make the ebuild fail instead of warning, set NFTABLES_ABORT_ON_RELOAD_FAILURE=1.)"
-		if [[ -n ${NFTABLES_ABORT_ON_RELOAD_FAILURE} ]] ; then
-			die "Aborting because of failed nft reload!"
-		fi
-	fi
-}
-
-pkg_postinst() {
-	local save_file
-	save_file="${EROOT}"/var/lib/nftables/rules-save
-
-	# In order for the nftables-restore systemd service to start
-	# the save_file must exist.
-	if [[ ! -f "${save_file}" ]]; then
-		( umask 177; touch "${save_file}" )
-	elif [[ $(( "$( stat --printf '%05a' "${save_file}" )" & 07177 )) -ne 0 ]]; then
-		ewarn "Your system has dangerous permissions for ${save_file}"
-		ewarn "It is probably affected by bug #691326."
-		ewarn "You may need to fix the permissions of the file. To do so,"
-		ewarn "you can run the command in the line below as root."
-		ewarn "    'chmod 600 \"${save_file}\"'"
-	fi
-
-	if has_version 'sys-apps/systemd'; then
-		elog "If you wish to enable the firewall rules on boot (on systemd) you"
-		elog "will need to enable the nftables-restore service."
-		elog "    'systemctl enable ${PN}-restore.service'"
-		elog
-		elog "If you are creating firewall rules before the next system restart"
-		elog "the nftables-restore service must be manually started in order to"
-		elog "save those rules on shutdown."
-	fi
-
-	if has_version 'sys-apps/openrc'; then
-		elog "If you wish to enable the firewall rules on boot (on openrc) you"
-		elog "will need to enable the nftables service."
-		elog "    'rc-update add ${PN} default'"
-		elog
-		elog "If you are creating or updating the firewall rules and wish to save"
-		elog "them to be loaded on the next restart, use the \"save\" functionality"
-		elog "in the init script."
-		elog "    'rc-service ${PN} save'"
-	fi
-}
diff --git a/net-firewall/nftables/nftables-1.1.3.ebuild b/net-firewall/nftables/nftables-1.1.3.ebuild
deleted file mode 100644
index 438e964f74ae..000000000000
--- a/net-firewall/nftables/nftables-1.1.3.ebuild
+++ /dev/null
@@ -1,236 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_OPTIONAL=1
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{13..14} )
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit eapi9-ver edo linux-info distutils-r1 systemd verify-sig
-
-DESCRIPTION="Linux kernel firewall, NAT and packet mangling tools"
-HOMEPAGE="https://netfilter.org/projects/nftables/"
-
-if [[ ${PV} =~ ^[9]{4,}$ ]]; then
-	inherit autotools git-r3
-	EGIT_REPO_URI="https://git.netfilter.org/${PN}"
-	BDEPEND="app-alternatives/yacc"
-else
-	inherit libtool
-	SRC_URI="
-		https://netfilter.org/projects/nftables/files/${P}.tar.xz
-		verify-sig? ( https://netfilter.org/projects/nftables/files/${P}.tar.xz.sig )
-	"
-	KEYWORDS="amd64 arm arm64 ~hppa ~loong ~mips ppc ppc64 ~riscv ~sparc x86"
-	BDEPEND="verify-sig? ( >=sec-keys/openpgp-keys-netfilter-20240415 )"
-fi
-
-# See COPYING: new code is GPL-2+, existing code is GPL-2
-LICENSE="GPL-2 GPL-2+"
-SLOT="0/1"
-IUSE="debug doc +gmp json libedit python +readline static-libs test xtables"
-RESTRICT="!test? ( test )"
-
-RDEPEND="
-	>=net-libs/libmnl-1.0.4:=
-	>=net-libs/libnftnl-1.2.9:=
-	gmp? ( dev-libs/gmp:= )
-	json? ( dev-libs/jansson:= )
-	python? ( ${PYTHON_DEPS} )
-	readline? ( sys-libs/readline:= )
-	xtables? ( >=net-firewall/iptables-1.6.1:= )
-"
-DEPEND="${RDEPEND}"
-BDEPEND+="
-	app-alternatives/lex
-	virtual/pkgconfig
-	doc? (
-		app-text/asciidoc
-		>=app-text/docbook2X-0.8.8-r4
-	)
-	python? ( ${DISTUTILS_DEPS} )
-"
-
-REQUIRED_USE="
-	python? ( ${PYTHON_REQUIRED_USE} )
-	libedit? ( !readline )
-"
-
-src_prepare() {
-	default
-
-	if [[ ${PV} =~ ^[9]{4,}$ ]] ; then
-		eautoreconf
-	else
-		elibtoolize
-	fi
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_prepare
-		popd >/dev/null || die
-	fi
-}
-
-src_configure() {
-	local myeconfargs=(
-		--sbindir="${EPREFIX}"/sbin
-		$(use_enable debug)
-		$(use_enable doc man-doc)
-		$(use_with !gmp mini_gmp)
-		$(use_with json)
-		$(use_with libedit cli editline)
-		$(use_with readline cli readline)
-		$(use_enable static-libs static)
-		$(use_with xtables)
-	)
-
-	econf "${myeconfargs[@]}"
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_configure
-		popd >/dev/null || die
-	fi
-}
-
-src_compile() {
-	default
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_compile
-		popd >/dev/null || die
-	fi
-}
-
-src_test() {
-	emake check
-
-	if [[ ${EUID} == 0 ]]; then
-		edo tests/shell/run-tests.sh -v
-	else
-		ewarn "Skipping shell tests (requires root)"
-	fi
-
-	if use python; then
-		pushd tests/py >/dev/null || die
-		distutils-r1_src_test
-		popd >/dev/null || die
-	fi
-}
-
-python_test() {
-	if [[ ${EUID} == 0 ]]; then
-		edo "${EPYTHON}" nft-test.py
-	else
-		ewarn "Skipping Python tests (requires root)"
-	fi
-}
-
-src_install() {
-	default
-
-	if ! use doc && [[ ! ${PV} =~ ^[9]{4,}$ ]]; then
-		pushd doc >/dev/null || die
-		doman *.?
-		popd >/dev/null || die
-	fi
-
-	# Do it here instead of in src_prepare to avoid eautoreconf
-	# rmdir lets us catch if more files end up installed in /etc/nftables
-	dodir /usr/share/doc/${PF}/skels/
-	mv "${ED}"/etc/nftables/osf "${ED}"/usr/share/doc/${PF}/skels/osf || die
-	rmdir "${ED}"/etc/nftables || die
-
-	exeinto /usr/libexec/${PN}
-	newexe "${FILESDIR}"/libexec/${PN}-mk.sh ${PN}.sh
-	newconfd "${FILESDIR}"/${PN}-mk.confd ${PN}
-	newinitd "${FILESDIR}"/${PN}-mk.init-r1 ${PN}
-	keepdir /var/lib/nftables
-
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-load.service
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-store.service
-
-	if use python ; then
-		pushd py >/dev/null || die
-		distutils-r1_src_install
-		popd >/dev/null || die
-	fi
-
-	find "${ED}" -type f -name "*.la" -delete || die
-}
-
-pkg_preinst() {
-	local stderr
-
-	# There's a history of regressions with nftables upgrades. Perform a
-	# safety check to help us spot them earlier. For the check to pass, the
-	# currently loaded ruleset, if any, must be successfully evaluated by
-	# the newly built instance of nft(8).
-	if [[ -n ${ROOT} ]] || [[ ! -d /sys/module/nftables ]] || [[ ! -x /sbin/nft ]]; then
-		# Either nftables isn't yet in use or nft(8) cannot be executed.
-		return
-	elif ! stderr=$(umask 177; /sbin/nft -t list ruleset 2>&1 >"${T}"/ruleset.nft); then
-		# Report errors induced by trying to list the ruleset but don't
-		# treat them as being fatal.
-		printf '%s\n' "${stderr}" >&2
-	elif [[ ${stderr} == *"is managed by iptables-nft"* ]]; then
-		# Rulesets generated by iptables-nft are special in nature and
-		# will not always be printed in a way that constitutes a valid
-		# syntax for ntf(8). Ignore them.
-		return
-	elif set -- "${ED}"/usr/lib*/libnftables.so;
-		! LD_LIBRARY_PATH=${1%/*} "${ED}"/sbin/nft -c -f -- "${T}"/ruleset.nft
-	then
-		eerror "Your currently loaded ruleset cannot be parsed by the newly built instance of"
-		eerror "nft. This probably means that there is a regression introduced by v${PV}."
-		eerror "(To make the ebuild fail instead of warning, set NFTABLES_ABORT_ON_RELOAD_FAILURE=1.)"
-		if [[ -n ${NFTABLES_ABORT_ON_RELOAD_FAILURE} ]] ; then
-			die "Aborting because of failed nft reload!"
-		fi
-	fi
-}
-
-pkg_postinst() {
-	local save_file
-	save_file="${EROOT}"/var/lib/nftables/rules-save
-
-	# In order for the nftables-load systemd service to start
-	# the save_file must exist.
-	if [[ ! -f "${save_file}" ]]; then
-		( umask 177; touch "${save_file}" )
-	elif [[ $(( "$( stat --printf '%05a' "${save_file}" )" & 07177 )) -ne 0 ]]; then
-		ewarn "Your system has dangerous permissions for ${save_file}"
-		ewarn "It is probably affected by bug #691326."
-		ewarn "You may need to fix the permissions of the file. To do so,"
-		ewarn "you can run the command in the line below as root."
-		ewarn "    'chmod 600 \"${save_file}\"'"
-	fi
-
-	if has_version 'sys-apps/systemd'; then
-		if ver_replacing -lt "1.1.1-r1"; then
-			elog "Starting with ${PN}-1.1.1-r1, the ${PN}-restore.service has"
-			elog "been split into ${PN}-load.service and ${PN}-store.service."
-			elog
-		fi
-		elog "If you wish to enable the firewall rules on boot (on systemd) you"
-		elog "will need to enable the nftables-load service."
-		elog "    'systemctl enable ${PN}-load.service'"
-		elog
-		elog "Enable nftables-store.service if you want firewall rules to be"
-		elog "saved at shutdown."
-	fi
-
-	if has_version 'sys-apps/openrc'; then
-		elog "If you wish to enable the firewall rules on boot (on openrc) you"
-		elog "will need to enable the nftables service."
-		elog "    'rc-update add ${PN} default'"
-		elog
-		elog "If you are creating or updating the firewall rules and wish to save"
-		elog "them to be loaded on the next restart, use the \"save\" functionality"
-		elog "in the init script."
-		elog "    'rc-service ${PN} save'"
-	fi
-}
diff --git a/net-firewall/nftables/nftables-1.1.4.ebuild b/net-firewall/nftables/nftables-1.1.4.ebuild
deleted file mode 100644
index b28a61f96ac1..000000000000
--- a/net-firewall/nftables/nftables-1.1.4.ebuild
+++ /dev/null
@@ -1,236 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_OPTIONAL=1
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{13..14} )
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit eapi9-ver edo linux-info distutils-r1 systemd verify-sig
-
-DESCRIPTION="Linux kernel firewall, NAT and packet mangling tools"
-HOMEPAGE="https://netfilter.org/projects/nftables/"
-
-if [[ ${PV} =~ ^[9]{4,}$ ]]; then
-	inherit autotools git-r3
-	EGIT_REPO_URI="https://git.netfilter.org/${PN}"
-	BDEPEND="app-alternatives/yacc"
-else
-	inherit libtool
-	SRC_URI="
-		https://netfilter.org/projects/nftables/files/${P}.tar.xz
-		verify-sig? ( https://netfilter.org/projects/nftables/files/${P}.tar.xz.sig )
-	"
-	KEYWORDS="amd64 arm arm64 ~hppa ~loong ~mips ppc ppc64 ~riscv ~sparc x86"
-	BDEPEND="verify-sig? ( >=sec-keys/openpgp-keys-netfilter-20240415 )"
-fi
-
-# See COPYING: new code is GPL-2+, existing code is GPL-2
-LICENSE="GPL-2 GPL-2+"
-SLOT="0/1"
-IUSE="debug doc +gmp json libedit python +readline static-libs test xtables"
-RESTRICT="!test? ( test )"
-
-RDEPEND="
-	>=net-libs/libmnl-1.0.4:=
-	>=net-libs/libnftnl-1.3.0:=
-	gmp? ( dev-libs/gmp:= )
-	json? ( dev-libs/jansson:= )
-	python? ( ${PYTHON_DEPS} )
-	readline? ( sys-libs/readline:= )
-	xtables? ( >=net-firewall/iptables-1.6.1:= )
-"
-DEPEND="${RDEPEND}"
-BDEPEND+="
-	app-alternatives/lex
-	virtual/pkgconfig
-	doc? (
-		app-text/asciidoc
-		>=app-text/docbook2X-0.8.8-r4
-	)
-	python? ( ${DISTUTILS_DEPS} )
-"
-
-REQUIRED_USE="
-	python? ( ${PYTHON_REQUIRED_USE} )
-	libedit? ( !readline )
-"
-
-src_prepare() {
-	default
-
-	if [[ ${PV} =~ ^[9]{4,}$ ]] ; then
-		eautoreconf
-	else
-		elibtoolize
-	fi
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_prepare
-		popd >/dev/null || die
-	fi
-}
-
-src_configure() {
-	local myeconfargs=(
-		--sbindir="${EPREFIX}"/sbin
-		$(use_enable debug)
-		$(use_enable doc man-doc)
-		$(use_with !gmp mini_gmp)
-		$(use_with json)
-		$(use_with libedit cli editline)
-		$(use_with readline cli readline)
-		$(use_enable static-libs static)
-		$(use_with xtables)
-	)
-
-	econf "${myeconfargs[@]}"
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_configure
-		popd >/dev/null || die
-	fi
-}
-
-src_compile() {
-	default
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_compile
-		popd >/dev/null || die
-	fi
-}
-
-src_test() {
-	emake check
-
-	if [[ ${EUID} == 0 ]]; then
-		edo tests/shell/run-tests.sh -v
-	else
-		ewarn "Skipping shell tests (requires root)"
-	fi
-
-	if use python; then
-		pushd tests/py >/dev/null || die
-		distutils-r1_src_test
-		popd >/dev/null || die
-	fi
-}
-
-python_test() {
-	if [[ ${EUID} == 0 ]]; then
-		edo "${EPYTHON}" nft-test.py
-	else
-		ewarn "Skipping Python tests (requires root)"
-	fi
-}
-
-src_install() {
-	default
-
-	if ! use doc && [[ ! ${PV} =~ ^[9]{4,}$ ]]; then
-		pushd doc >/dev/null || die
-		doman *.?
-		popd >/dev/null || die
-	fi
-
-	# Do it here instead of in src_prepare to avoid eautoreconf
-	# rmdir lets us catch if more files end up installed in /etc/nftables
-	dodir /usr/share/doc/${PF}/skels/
-	mv "${ED}"/etc/nftables/osf "${ED}"/usr/share/doc/${PF}/skels/osf || die
-	rmdir "${ED}"/etc/nftables || die
-
-	exeinto /usr/libexec/${PN}
-	newexe "${FILESDIR}"/libexec/${PN}-mk.sh ${PN}.sh
-	newconfd "${FILESDIR}"/${PN}-mk.confd ${PN}
-	newinitd "${FILESDIR}"/${PN}-mk.init-r1 ${PN}
-	keepdir /var/lib/nftables
-
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-load.service
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-store.service
-
-	if use python ; then
-		pushd py >/dev/null || die
-		distutils-r1_src_install
-		popd >/dev/null || die
-	fi
-
-	find "${ED}" -type f -name "*.la" -delete || die
-}
-
-pkg_preinst() {
-	local stderr
-
-	# There's a history of regressions with nftables upgrades. Perform a
-	# safety check to help us spot them earlier. For the check to pass, the
-	# currently loaded ruleset, if any, must be successfully evaluated by
-	# the newly built instance of nft(8).
-	if [[ -n ${ROOT} ]] || [[ ! -d /sys/module/nftables ]] || [[ ! -x /sbin/nft ]]; then
-		# Either nftables isn't yet in use or nft(8) cannot be executed.
-		return
-	elif ! stderr=$(umask 177; /sbin/nft -t list ruleset 2>&1 >"${T}"/ruleset.nft); then
-		# Report errors induced by trying to list the ruleset but don't
-		# treat them as being fatal.
-		printf '%s\n' "${stderr}" >&2
-	elif [[ ${stderr} == *"is managed by iptables-nft"* ]]; then
-		# Rulesets generated by iptables-nft are special in nature and
-		# will not always be printed in a way that constitutes a valid
-		# syntax for ntf(8). Ignore them.
-		return
-	elif set -- "${ED}"/usr/lib*/libnftables.so;
-		! LD_LIBRARY_PATH=${1%/*} "${ED}"/sbin/nft -c -f -- "${T}"/ruleset.nft
-	then
-		eerror "Your currently loaded ruleset cannot be parsed by the newly built instance of"
-		eerror "nft. This probably means that there is a regression introduced by v${PV}."
-		eerror "(To make the ebuild fail instead of warning, set NFTABLES_ABORT_ON_RELOAD_FAILURE=1.)"
-		if [[ -n ${NFTABLES_ABORT_ON_RELOAD_FAILURE} ]] ; then
-			die "Aborting because of failed nft reload!"
-		fi
-	fi
-}
-
-pkg_postinst() {
-	local save_file
-	save_file="${EROOT}"/var/lib/nftables/rules-save
-
-	# In order for the nftables-load systemd service to start
-	# the save_file must exist.
-	if [[ ! -f "${save_file}" ]]; then
-		( umask 177; touch "${save_file}" )
-	elif [[ $(( "$( stat --printf '%05a' "${save_file}" )" & 07177 )) -ne 0 ]]; then
-		ewarn "Your system has dangerous permissions for ${save_file}"
-		ewarn "It is probably affected by bug #691326."
-		ewarn "You may need to fix the permissions of the file. To do so,"
-		ewarn "you can run the command in the line below as root."
-		ewarn "    'chmod 600 \"${save_file}\"'"
-	fi
-
-	if has_version 'sys-apps/systemd'; then
-		if ver_replacing -lt "1.1.1-r1"; then
-			elog "Starting with ${PN}-1.1.1-r1, the ${PN}-restore.service has"
-			elog "been split into ${PN}-load.service and ${PN}-store.service."
-			elog
-		fi
-		elog "If you wish to enable the firewall rules on boot (on systemd) you"
-		elog "will need to enable the nftables-load service."
-		elog "    'systemctl enable ${PN}-load.service'"
-		elog
-		elog "Enable nftables-store.service if you want firewall rules to be"
-		elog "saved at shutdown."
-	fi
-
-	if has_version 'sys-apps/openrc'; then
-		elog "If you wish to enable the firewall rules on boot (on openrc) you"
-		elog "will need to enable the nftables service."
-		elog "    'rc-update add ${PN} default'"
-		elog
-		elog "If you are creating or updating the firewall rules and wish to save"
-		elog "them to be loaded on the next restart, use the \"save\" functionality"
-		elog "in the init script."
-		elog "    'rc-service ${PN} save'"
-	fi
-}
diff --git a/net-firewall/nftables/nftables-1.1.5.ebuild b/net-firewall/nftables/nftables-1.1.5.ebuild
deleted file mode 100644
index b8993275bd97..000000000000
--- a/net-firewall/nftables/nftables-1.1.5.ebuild
+++ /dev/null
@@ -1,237 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_OPTIONAL=1
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{13..14} )
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit eapi9-ver edo linux-info distutils-r1 systemd verify-sig
-
-DESCRIPTION="Linux kernel firewall, NAT and packet mangling tools"
-HOMEPAGE="https://netfilter.org/projects/nftables/"
-
-if [[ ${PV} =~ ^[9]{4,}$ ]]; then
-	inherit autotools git-r3
-	EGIT_REPO_URI="https://git.netfilter.org/${PN}"
-	BDEPEND="app-alternatives/yacc"
-else
-	inherit libtool
-	SRC_URI="
-		https://netfilter.org/projects/nftables/files/${P}.tar.xz
-		verify-sig? ( https://netfilter.org/projects/nftables/files/${P}.tar.xz.sig )
-	"
-	KEYWORDS="amd64 arm arm64 ~hppa ~loong ~mips ppc ppc64 ~riscv ~sparc x86"
-	BDEPEND="verify-sig? ( >=sec-keys/openpgp-keys-netfilter-20240415 )"
-fi
-
-# See COPYING: new code is GPL-2+, existing code is GPL-2
-LICENSE="GPL-2 GPL-2+"
-SLOT="0/1"
-IUSE="debug doc +gmp json libedit python +readline static-libs test xtables"
-RESTRICT="!test? ( test )"
-
-RDEPEND="
-	>=net-libs/libmnl-1.0.4:=
-	>=net-libs/libnftnl-1.3.0:=
-	gmp? ( dev-libs/gmp:= )
-	json? ( dev-libs/jansson:= )
-	python? ( ${PYTHON_DEPS} )
-	readline? ( sys-libs/readline:= )
-	xtables? ( >=net-firewall/iptables-1.6.1:= )
-"
-DEPEND="${RDEPEND}"
-BDEPEND+="
-	app-alternatives/lex
-	virtual/pkgconfig
-	doc? (
-		app-text/asciidoc
-		>=app-text/docbook2X-0.8.8-r4
-	)
-	python? ( ${DISTUTILS_DEPS} )
-"
-
-REQUIRED_USE="
-	python? ( ${PYTHON_REQUIRED_USE} )
-	libedit? ( !readline )
-"
-
-src_prepare() {
-	default
-
-	if [[ ${PV} =~ ^[9]{4,}$ ]] ; then
-		eautoreconf
-	else
-		elibtoolize
-	fi
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_prepare
-		popd >/dev/null || die
-	fi
-}
-
-src_configure() {
-	local myeconfargs=(
-		--sbindir="${EPREFIX}"/sbin
-		--with-unitdir=$(systemd_get_systemunitdir)
-		$(use_enable debug)
-		$(use_enable doc man-doc)
-		$(use_with !gmp mini_gmp)
-		$(use_with json)
-		$(use_with libedit cli editline)
-		$(use_with readline cli readline)
-		$(use_enable static-libs static)
-		$(use_with xtables)
-	)
-
-	econf "${myeconfargs[@]}"
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_configure
-		popd >/dev/null || die
-	fi
-}
-
-src_compile() {
-	default
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_compile
-		popd >/dev/null || die
-	fi
-}
-
-src_test() {
-	emake check
-
-	if [[ ${EUID} == 0 ]]; then
-		edo tests/shell/run-tests.sh -v
-	else
-		ewarn "Skipping shell tests (requires root)"
-	fi
-
-	if use python; then
-		pushd tests/py >/dev/null || die
-		distutils-r1_src_test
-		popd >/dev/null || die
-	fi
-}
-
-python_test() {
-	if [[ ${EUID} == 0 ]]; then
-		edo "${EPYTHON}" nft-test.py
-	else
-		ewarn "Skipping Python tests (requires root)"
-	fi
-}
-
-src_install() {
-	default
-
-	if ! use doc && [[ ! ${PV} =~ ^[9]{4,}$ ]]; then
-		pushd doc >/dev/null || die
-		doman *.?
-		popd >/dev/null || die
-	fi
-
-	# Do it here instead of in src_prepare to avoid eautoreconf
-	# rmdir lets us catch if more files end up installed in /etc/nftables
-	dodir /usr/share/doc/${PF}/skels/
-	mv "${ED}"/etc/nftables/osf "${ED}"/usr/share/doc/${PF}/skels/osf || die
-	rmdir "${ED}"/etc/nftables || die
-
-	exeinto /usr/libexec/${PN}
-	newexe "${FILESDIR}"/libexec/${PN}-mk.sh ${PN}.sh
-	newconfd "${FILESDIR}"/${PN}-mk.confd ${PN}
-	newinitd "${FILESDIR}"/${PN}-mk.init-r1 ${PN}
-	keepdir /var/lib/nftables
-
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-load.service
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-store.service
-
-	if use python ; then
-		pushd py >/dev/null || die
-		distutils-r1_src_install
-		popd >/dev/null || die
-	fi
-
-	find "${ED}" -type f -name "*.la" -delete || die
-}
-
-pkg_preinst() {
-	local stderr
-
-	# There's a history of regressions with nftables upgrades. Perform a
-	# safety check to help us spot them earlier. For the check to pass, the
-	# currently loaded ruleset, if any, must be successfully evaluated by
-	# the newly built instance of nft(8).
-	if [[ -n ${ROOT} ]] || [[ ! -d /sys/module/nftables ]] || [[ ! -x /sbin/nft ]]; then
-		# Either nftables isn't yet in use or nft(8) cannot be executed.
-		return
-	elif ! stderr=$(umask 177; /sbin/nft -t list ruleset 2>&1 >"${T}"/ruleset.nft); then
-		# Report errors induced by trying to list the ruleset but don't
-		# treat them as being fatal.
-		printf '%s\n' "${stderr}" >&2
-	elif [[ ${stderr} == *"is managed by iptables-nft"* ]]; then
-		# Rulesets generated by iptables-nft are special in nature and
-		# will not always be printed in a way that constitutes a valid
-		# syntax for ntf(8). Ignore them.
-		return
-	elif set -- "${ED}"/usr/lib*/libnftables.so;
-		! LD_LIBRARY_PATH=${1%/*} "${ED}"/sbin/nft -c -f -- "${T}"/ruleset.nft
-	then
-		eerror "Your currently loaded ruleset cannot be parsed by the newly built instance of"
-		eerror "nft. This probably means that there is a regression introduced by v${PV}."
-		eerror "(To make the ebuild fail instead of warning, set NFTABLES_ABORT_ON_RELOAD_FAILURE=1.)"
-		if [[ -n ${NFTABLES_ABORT_ON_RELOAD_FAILURE} ]] ; then
-			die "Aborting because of failed nft reload!"
-		fi
-	fi
-}
-
-pkg_postinst() {
-	local save_file
-	save_file="${EROOT}"/var/lib/nftables/rules-save
-
-	# In order for the nftables-load systemd service to start
-	# the save_file must exist.
-	if [[ ! -f "${save_file}" ]]; then
-		( umask 177; touch "${save_file}" )
-	elif [[ $(( "$( stat --printf '%05a' "${save_file}" )" & 07177 )) -ne 0 ]]; then
-		ewarn "Your system has dangerous permissions for ${save_file}"
-		ewarn "It is probably affected by bug #691326."
-		ewarn "You may need to fix the permissions of the file. To do so,"
-		ewarn "you can run the command in the line below as root."
-		ewarn "    'chmod 600 \"${save_file}\"'"
-	fi
-
-	if has_version 'sys-apps/systemd'; then
-		if ver_replacing -lt "1.1.1-r1"; then
-			elog "Starting with ${PN}-1.1.1-r1, the ${PN}-restore.service has"
-			elog "been split into ${PN}-load.service and ${PN}-store.service."
-			elog
-		fi
-		elog "If you wish to enable the firewall rules on boot (on systemd) you"
-		elog "will need to enable the nftables-load service."
-		elog "    'systemctl enable ${PN}-load.service'"
-		elog
-		elog "Enable nftables-store.service if you want firewall rules to be"
-		elog "saved at shutdown."
-	fi
-
-	if has_version 'sys-apps/openrc'; then
-		elog "If you wish to enable the firewall rules on boot (on openrc) you"
-		elog "will need to enable the nftables service."
-		elog "    'rc-update add ${PN} default'"
-		elog
-		elog "If you are creating or updating the firewall rules and wish to save"
-		elog "them to be loaded on the next restart, use the \"save\" functionality"
-		elog "in the init script."
-		elog "    'rc-service ${PN} save'"
-	fi
-}
diff --git a/net-firewall/nftables/nftables-1.1.6.ebuild b/net-firewall/nftables/nftables-1.1.6.ebuild
deleted file mode 100644
index c81ab85774f8..000000000000
--- a/net-firewall/nftables/nftables-1.1.6.ebuild
+++ /dev/null
@@ -1,239 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_OPTIONAL=1
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{13..14} )
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit eapi9-ver edo linux-info distutils-r1 systemd verify-sig
-
-DESCRIPTION="Linux kernel firewall, NAT and packet mangling tools"
-HOMEPAGE="https://netfilter.org/projects/nftables/"
-
-if [[ ${PV} =~ ^[9]{4,}$ ]]; then
-	inherit autotools git-r3
-	EGIT_REPO_URI="https://git.netfilter.org/${PN}"
-	BDEPEND="app-alternatives/yacc"
-else
-	inherit libtool
-	SRC_URI="
-		https://netfilter.org/projects/nftables/files/${P}.tar.xz
-		verify-sig? ( https://netfilter.org/projects/nftables/files/${P}.tar.xz.sig )
-	"
-	KEYWORDS="amd64 arm arm64 ~hppa ~loong ~mips ppc ppc64 ~riscv ~s390 ~sparc x86"
-	BDEPEND="verify-sig? ( >=sec-keys/openpgp-keys-netfilter-20240415 )"
-fi
-
-# See COPYING: new code is GPL-2+, existing code is GPL-2
-LICENSE="GPL-2 GPL-2+"
-SLOT="0/1"
-IUSE="debug doc +gmp json libedit python +readline static-libs test xtables"
-RESTRICT="!test? ( test )"
-
-RDEPEND="
-	>=net-libs/libmnl-1.0.4:=
-	>=net-libs/libnftnl-1.3.1:=
-	gmp? ( dev-libs/gmp:= )
-	json? ( dev-libs/jansson:= )
-	python? ( ${PYTHON_DEPS} )
-	readline? ( sys-libs/readline:= )
-	xtables? ( >=net-firewall/iptables-1.6.1:= )
-"
-DEPEND="${RDEPEND}"
-BDEPEND+="
-	app-alternatives/lex
-	virtual/pkgconfig
-	doc? (
-		app-text/asciidoc
-		>=app-text/docbook2X-0.8.8-r4
-	)
-	python? ( ${DISTUTILS_DEPS} )
-"
-
-REQUIRED_USE="
-	python? ( ${PYTHON_REQUIRED_USE} )
-	libedit? ( !readline )
-"
-
-src_prepare() {
-	default
-
-	if [[ ${PV} =~ ^[9]{4,}$ ]] ; then
-		eautoreconf
-	else
-		elibtoolize
-	fi
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_prepare
-		popd >/dev/null || die
-	fi
-}
-
-src_configure() {
-	local myeconfargs=(
-		--sbindir="${EPREFIX}"/sbin
-		--with-unitdir=$(systemd_get_systemunitdir)
-		--enable-distcheck
-		$(use_enable debug)
-		$(use_enable doc man-doc)
-		$(use_with !gmp mini_gmp)
-		$(use_with json)
-		$(use_with libedit cli editline)
-		$(use_with readline cli readline)
-		$(use_enable static-libs static)
-		$(use_with xtables)
-	)
-
-	# bash until 1.1.7 (https://git.netfilter.org/nftables/commit/?id=2e3c68f26d5bd60c8ea7467fa9018c282a7d8c47)
-	CONFIG_SHELL="${BROOT}"/bin/bash econf "${myeconfargs[@]}"
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_configure
-		popd >/dev/null || die
-	fi
-}
-
-src_compile() {
-	default
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_compile
-		popd >/dev/null || die
-	fi
-}
-
-src_test() {
-	emake check
-
-	if [[ ${EUID} == 0 ]]; then
-		edo tests/shell/run-tests.sh -v
-	else
-		ewarn "Skipping shell tests (requires root)"
-	fi
-
-	if use python; then
-		pushd tests/py >/dev/null || die
-		distutils-r1_src_test
-		popd >/dev/null || die
-	fi
-}
-
-python_test() {
-	if [[ ${EUID} == 0 ]]; then
-		edo "${EPYTHON}" nft-test.py
-	else
-		ewarn "Skipping Python tests (requires root)"
-	fi
-}
-
-src_install() {
-	default
-
-	if ! use doc && [[ ! ${PV} =~ ^[9]{4,}$ ]]; then
-		pushd doc >/dev/null || die
-		doman *.?
-		popd >/dev/null || die
-	fi
-
-	# Do it here instead of in src_prepare to avoid eautoreconf
-	# rmdir lets us catch if more files end up installed in /etc/nftables
-	dodir /usr/share/doc/${PF}/skels/
-	mv "${ED}"/etc/nftables/osf "${ED}"/usr/share/doc/${PF}/skels/osf || die
-	rmdir "${ED}"/etc/nftables || die
-
-	exeinto /usr/libexec/${PN}
-	newexe "${FILESDIR}"/libexec/${PN}-mk.sh ${PN}.sh
-	newconfd "${FILESDIR}"/${PN}-mk.confd ${PN}
-	newinitd "${FILESDIR}"/${PN}-mk.init-r1 ${PN}
-	keepdir /var/lib/nftables
-
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-load.service
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-store.service
-
-	if use python ; then
-		pushd py >/dev/null || die
-		distutils-r1_src_install
-		popd >/dev/null || die
-	fi
-
-	find "${ED}" -type f -name "*.la" -delete || die
-}
-
-pkg_preinst() {
-	local stderr
-
-	# There's a history of regressions with nftables upgrades. Perform a
-	# safety check to help us spot them earlier. For the check to pass, the
-	# currently loaded ruleset, if any, must be successfully evaluated by
-	# the newly built instance of nft(8).
-	if [[ -n ${ROOT} ]] || [[ ! -d /sys/module/nftables ]] || [[ ! -x /sbin/nft ]]; then
-		# Either nftables isn't yet in use or nft(8) cannot be executed.
-		return
-	elif ! stderr=$(umask 177; /sbin/nft -t list ruleset 2>&1 >"${T}"/ruleset.nft); then
-		# Report errors induced by trying to list the ruleset but don't
-		# treat them as being fatal.
-		printf '%s\n' "${stderr}" >&2
-	elif [[ ${stderr} == *"is managed by iptables-nft"* ]]; then
-		# Rulesets generated by iptables-nft are special in nature and
-		# will not always be printed in a way that constitutes a valid
-		# syntax for ntf(8). Ignore them.
-		return
-	elif set -- "${ED}"/usr/lib*/libnftables.so;
-		! LD_LIBRARY_PATH=${1%/*} "${ED}"/sbin/nft -c -f -- "${T}"/ruleset.nft
-	then
-		eerror "Your currently loaded ruleset cannot be parsed by the newly built instance of"
-		eerror "nft. This probably means that there is a regression introduced by v${PV}."
-		eerror "(To make the ebuild fail instead of warning, set NFTABLES_ABORT_ON_RELOAD_FAILURE=1.)"
-		if [[ -n ${NFTABLES_ABORT_ON_RELOAD_FAILURE} ]] ; then
-			die "Aborting because of failed nft reload!"
-		fi
-	fi
-}
-
-pkg_postinst() {
-	local save_file
-	save_file="${EROOT}"/var/lib/nftables/rules-save
-
-	# In order for the nftables-load systemd service to start
-	# the save_file must exist.
-	if [[ ! -f "${save_file}" ]]; then
-		( umask 177; touch "${save_file}" )
-	elif [[ $(( "$( stat --printf '%05a' "${save_file}" )" & 07177 )) -ne 0 ]]; then
-		ewarn "Your system has dangerous permissions for ${save_file}"
-		ewarn "It is probably affected by bug #691326."
-		ewarn "You may need to fix the permissions of the file. To do so,"
-		ewarn "you can run the command in the line below as root."
-		ewarn "    'chmod 600 \"${save_file}\"'"
-	fi
-
-	if has_version 'sys-apps/systemd'; then
-		if ver_replacing -lt "1.1.1-r1"; then
-			elog "Starting with ${PN}-1.1.1-r1, the ${PN}-restore.service has"
-			elog "been split into ${PN}-load.service and ${PN}-store.service."
-			elog
-		fi
-		elog "If you wish to enable the firewall rules on boot (on systemd) you"
-		elog "will need to enable the nftables-load service."
-		elog "    'systemctl enable ${PN}-load.service'"
-		elog
-		elog "Enable nftables-store.service if you want firewall rules to be"
-		elog "saved at shutdown."
-	fi
-
-	if has_version 'sys-apps/openrc'; then
-		elog "If you wish to enable the firewall rules on boot (on openrc) you"
-		elog "will need to enable the nftables service."
-		elog "    'rc-update add ${PN} default'"
-		elog
-		elog "If you are creating or updating the firewall rules and wish to save"
-		elog "them to be loaded on the next restart, use the \"save\" functionality"
-		elog "in the init script."
-		elog "    'rc-service ${PN} save'"
-	fi
-}
diff --git a/net-firewall/nftables/nftables-9999.ebuild b/net-firewall/nftables/nftables-9999.ebuild
deleted file mode 100644
index d61a7fbed80b..000000000000
--- a/net-firewall/nftables/nftables-9999.ebuild
+++ /dev/null
@@ -1,237 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_OPTIONAL=1
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{13..14} )
-VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/netfilter.org.asc
-inherit eapi9-ver edo linux-info distutils-r1 systemd verify-sig
-
-DESCRIPTION="Linux kernel firewall, NAT and packet mangling tools"
-HOMEPAGE="https://netfilter.org/projects/nftables/"
-
-if [[ ${PV} =~ ^[9]{4,}$ ]]; then
-	inherit autotools git-r3
-	EGIT_REPO_URI="https://git.netfilter.org/${PN}"
-	BDEPEND="app-alternatives/yacc"
-else
-	inherit libtool
-	SRC_URI="
-		https://netfilter.org/projects/nftables/files/${P}.tar.xz
-		verify-sig? ( https://netfilter.org/projects/nftables/files/${P}.tar.xz.sig )
-	"
-	KEYWORDS="~amd64 ~arm ~arm64 ~hppa ~loong ~mips ~ppc ~ppc64 ~riscv ~sparc ~x86"
-	BDEPEND="verify-sig? ( >=sec-keys/openpgp-keys-netfilter-20240415 )"
-fi
-
-# See COPYING: new code is GPL-2+, existing code is GPL-2
-LICENSE="GPL-2 GPL-2+"
-SLOT="0/1"
-IUSE="debug doc +gmp json libedit python +readline static-libs test xtables"
-RESTRICT="!test? ( test )"
-
-RDEPEND="
-	>=net-libs/libmnl-1.0.4:=
-	>=net-libs/libnftnl-1.3.0:=
-	gmp? ( dev-libs/gmp:= )
-	json? ( dev-libs/jansson:= )
-	python? ( ${PYTHON_DEPS} )
-	readline? ( sys-libs/readline:= )
-	xtables? ( >=net-firewall/iptables-1.6.1:= )
-"
-DEPEND="${RDEPEND}"
-BDEPEND+="
-	app-alternatives/lex
-	virtual/pkgconfig
-	doc? (
-		app-text/asciidoc
-		>=app-text/docbook2X-0.8.8-r4
-	)
-	python? ( ${DISTUTILS_DEPS} )
-"
-
-REQUIRED_USE="
-	python? ( ${PYTHON_REQUIRED_USE} )
-	libedit? ( !readline )
-"
-
-src_prepare() {
-	default
-
-	if [[ ${PV} =~ ^[9]{4,}$ ]] ; then
-		eautoreconf
-	else
-		elibtoolize
-	fi
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_prepare
-		popd >/dev/null || die
-	fi
-}
-
-src_configure() {
-	local myeconfargs=(
-		--sbindir="${EPREFIX}"/sbin
-		--with-unitdir=$(systemd_get_systemunitdir)
-		$(use_enable debug)
-		$(use_enable doc man-doc)
-		$(use_with !gmp mini_gmp)
-		$(use_with json)
-		$(use_with libedit cli editline)
-		$(use_with readline cli readline)
-		$(use_enable static-libs static)
-		$(use_with xtables)
-	)
-
-	econf "${myeconfargs[@]}"
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_configure
-		popd >/dev/null || die
-	fi
-}
-
-src_compile() {
-	default
-
-	if use python; then
-		pushd py >/dev/null || die
-		distutils-r1_src_compile
-		popd >/dev/null || die
-	fi
-}
-
-src_test() {
-	emake check
-
-	if [[ ${EUID} == 0 ]]; then
-		edo tests/shell/run-tests.sh -v
-	else
-		ewarn "Skipping shell tests (requires root)"
-	fi
-
-	if use python; then
-		pushd tests/py >/dev/null || die
-		distutils-r1_src_test
-		popd >/dev/null || die
-	fi
-}
-
-python_test() {
-	if [[ ${EUID} == 0 ]]; then
-		edo "${EPYTHON}" nft-test.py
-	else
-		ewarn "Skipping Python tests (requires root)"
-	fi
-}
-
-src_install() {
-	default
-
-	if ! use doc && [[ ! ${PV} =~ ^[9]{4,}$ ]]; then
-		pushd doc >/dev/null || die
-		doman *.?
-		popd >/dev/null || die
-	fi
-
-	# Do it here instead of in src_prepare to avoid eautoreconf
-	# rmdir lets us catch if more files end up installed in /etc/nftables
-	dodir /usr/share/doc/${PF}/skels/
-	mv "${ED}"/etc/nftables/osf "${ED}"/usr/share/doc/${PF}/skels/osf || die
-	rmdir "${ED}"/etc/nftables || die
-
-	exeinto /usr/libexec/${PN}
-	newexe "${FILESDIR}"/libexec/${PN}-mk.sh ${PN}.sh
-	newconfd "${FILESDIR}"/${PN}-mk.confd ${PN}
-	newinitd "${FILESDIR}"/${PN}-mk.init-r1 ${PN}
-	keepdir /var/lib/nftables
-
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-load.service
-	systemd_dounit "${FILESDIR}"/systemd/${PN}-store.service
-
-	if use python ; then
-		pushd py >/dev/null || die
-		distutils-r1_src_install
-		popd >/dev/null || die
-	fi
-
-	find "${ED}" -type f -name "*.la" -delete || die
-}
-
-pkg_preinst() {
-	local stderr
-
-	# There's a history of regressions with nftables upgrades. Perform a
-	# safety check to help us spot them earlier. For the check to pass, the
-	# currently loaded ruleset, if any, must be successfully evaluated by
-	# the newly built instance of nft(8).
-	if [[ -n ${ROOT} ]] || [[ ! -d /sys/module/nftables ]] || [[ ! -x /sbin/nft ]]; then
-		# Either nftables isn't yet in use or nft(8) cannot be executed.
-		return
-	elif ! stderr=$(umask 177; /sbin/nft -t list ruleset 2>&1 >"${T}"/ruleset.nft); then
-		# Report errors induced by trying to list the ruleset but don't
-		# treat them as being fatal.
-		printf '%s\n' "${stderr}" >&2
-	elif [[ ${stderr} == *"is managed by iptables-nft"* ]]; then
-		# Rulesets generated by iptables-nft are special in nature and
-		# will not always be printed in a way that constitutes a valid
-		# syntax for ntf(8). Ignore them.
-		return
-	elif set -- "${ED}"/usr/lib*/libnftables.so;
-		! LD_LIBRARY_PATH=${1%/*} "${ED}"/sbin/nft -c -f -- "${T}"/ruleset.nft
-	then
-		eerror "Your currently loaded ruleset cannot be parsed by the newly built instance of"
-		eerror "nft. This probably means that there is a regression introduced by v${PV}."
-		eerror "(To make the ebuild fail instead of warning, set NFTABLES_ABORT_ON_RELOAD_FAILURE=1.)"
-		if [[ -n ${NFTABLES_ABORT_ON_RELOAD_FAILURE} ]] ; then
-			die "Aborting because of failed nft reload!"
-		fi
-	fi
-}
-
-pkg_postinst() {
-	local save_file
-	save_file="${EROOT}"/var/lib/nftables/rules-save
-
-	# In order for the nftables-load systemd service to start
-	# the save_file must exist.
-	if [[ ! -f "${save_file}" ]]; then
-		( umask 177; touch "${save_file}" )
-	elif [[ $(( "$( stat --printf '%05a' "${save_file}" )" & 07177 )) -ne 0 ]]; then
-		ewarn "Your system has dangerous permissions for ${save_file}"
-		ewarn "It is probably affected by bug #691326."
-		ewarn "You may need to fix the permissions of the file. To do so,"
-		ewarn "you can run the command in the line below as root."
-		ewarn "    'chmod 600 \"${save_file}\"'"
-	fi
-
-	if has_version 'sys-apps/systemd'; then
-		if ver_replacing -lt "1.1.1-r1"; then
-			elog "Starting with ${PN}-1.1.1-r1, the ${PN}-restore.service has"
-			elog "been split into ${PN}-load.service and ${PN}-store.service."
-			elog
-		fi
-		elog "If you wish to enable the firewall rules on boot (on systemd) you"
-		elog "will need to enable the nftables-load service."
-		elog "    'systemctl enable ${PN}-load.service'"
-		elog
-		elog "Enable nftables-store.service if you want firewall rules to be"
-		elog "saved at shutdown."
-	fi
-
-	if has_version 'sys-apps/openrc'; then
-		elog "If you wish to enable the firewall rules on boot (on openrc) you"
-		elog "will need to enable the nftables service."
-		elog "    'rc-update add ${PN} default'"
-		elog
-		elog "If you are creating or updating the firewall rules and wish to save"
-		elog "them to be loaded on the next restart, use the \"save\" functionality"
-		elog "in the init script."
-		elog "    'rc-service ${PN} save'"
-	fi
-}
diff --git a/net-firewall/nftlb/Manifest b/net-firewall/nftlb/Manifest
deleted file mode 100644
index 8ec890888e6a..000000000000
--- a/net-firewall/nftlb/Manifest
+++ /dev/null
@@ -1,3 +0,0 @@
-DIST nftlb-1.0.7.tar.gz 201988 BLAKE2B 794778523b3a60a351fd071e6ff129197203ddfb1b80823dd6b05c30cb530040da465a10d2ffbf11cad063c2a453bb9baebd6e689b9166d4fcb0fe9fd17760e8 SHA512 eb1e9847f340e57b75a5b8680774d8208b282faccdef48e316b2bd52b10349eeda70643386e0e899d0f6a2f506964cf1b7a7ec2d86279f83ca87a9afa8f047bc
-DIST nftlb-1.0.8.gh.tar.gz 256936 BLAKE2B 1ab9fb508c8613304ebde7185a8ad8ddabb483d17c8b872cfb7da8a0b0e5a8d40f74a74361d1d5b8304d45c00357eea1f88f2cc39e5afe537791278277462407 SHA512 f612b7065fb5011f1af34cabe0945b7b0c1479241b4673d86e2e97d06bffdfefcc5ca4ec3ad3752faa92862306ed8ad28754838236476fe9db88099bc389cf7c
-DIST nftlb-1.1.0.gh.tar.gz 250421 BLAKE2B 4034032bec80fe43c67af54550fe24f6133ce9b79c769caa678ef351d001ad01b758740df73e149726f00c258a84e3f4cbd6394a86efec0cdb5221a2f374f774 SHA512 e4fd41f5d7251913be457ae9b4e1ca1a1cc25751d1ffbb7fac3e009332ff963fcd5ab141e8cdbd26eee57183bc7663bf153feb5cd2ba8e2b6cc36083c8c12e46
diff --git a/net-firewall/nftlb/files/nftlb-1.0-musl.patch b/net-firewall/nftlb/files/nftlb-1.0-musl.patch
deleted file mode 100644
index 399136754554..000000000000
--- a/net-firewall/nftlb/files/nftlb-1.0-musl.patch
+++ /dev/null
@@ -1,73 +0,0 @@
-diff --git a/configure.ac b/configure.ac
-index 84bfd96..3f6f81d 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -2,6 +2,7 @@ AC_INIT([nftlb], [1.0], [netfilter-devel@vger.kernel.org])
- 
- AC_CONFIG_AUX_DIR([build-aux])
- AC_CONFIG_MACRO_DIR([m4])
-+AC_CONFIG_HEADERS([config.h])
- AM_INIT_AUTOMAKE([-Wall foreign subdir-objects
-         tar-pax no-dist-gzip dist-bzip2 1.6])
- 
-@@ -25,5 +26,7 @@ AC_CHECK_HEADER([ev.h], [EVENTINC="-include ev.h"],
- 				 [EVENTINC="-include libev/ev.h"],
- 				 [AC_MSG_ERROR([ev.h not found])])])
- 
-+AC_CHECK_HEADERS([execinfo.h])
-+
- AC_CONFIG_FILES([Makefile src/Makefile])
- AC_OUTPUT
-diff --git a/src/main.c b/src/main.c
-index 9854f95..8e7df1d 100644
---- a/src/main.c
-+++ b/src/main.c
-@@ -18,6 +18,7 @@
-  *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
-  *
-  */
-+#include "config.h"
- 
- #include <stdio.h>
- #include <stdlib.h>
-@@ -25,7 +26,10 @@
- #include <string.h>
- #include <errno.h>
- #include <unistd.h>
-+
-+#ifdef HAVE_EXECINFO_H
- #include <execinfo.h>
-+#endif /* HAVE_EXECINFO_H */
- 
- #include "config.h"
- #include "objects.h"
-@@ -88,6 +92,7 @@ static void nftlb_sighandler(int signo)
- 	exit(EXIT_SUCCESS);
- }
- 
-+#ifdef HAVE_EXECINFO_H
- static void nftlb_trace() {
- 	void *buffer[255];
- 	char **str;
-@@ -109,6 +114,7 @@ static void nftlb_trace() {
- 
- 	exit(EXIT_FAILURE);
- }
-+#endif /* HAVE_EXECINFO_H */
- 
- int main(int argc, char *argv[])
- {
-@@ -166,9 +172,13 @@ int main(int argc, char *argv[])
- 
- 	if (signal(SIGINT, nftlb_sighandler) == SIG_ERR ||
- 	    signal(SIGTERM, nftlb_sighandler) == SIG_ERR ||
-+#ifdef HAVE_EXECINFO_H
- 	    signal(SIGPIPE, SIG_IGN) == SIG_ERR ||
- 	    signal(SIGABRT, nftlb_trace) == SIG_ERR ||
- 	    signal(SIGSEGV, nftlb_trace) == SIG_ERR) {
-+#else
-+	    signal(SIGPIPE, SIG_IGN) == SIG_ERR) {
-+#endif /* HAVE_EXECINFO_H */
- 		tools_printlog(LOG_ERR, "Error assigning signals");
- 		return EXIT_FAILURE;
- 	}
diff --git a/net-firewall/nftlb/files/nftlb-1.0-tests.patch b/net-firewall/nftlb/files/nftlb-1.0-tests.patch
deleted file mode 100644
index 48685074cb83..000000000000
--- a/net-firewall/nftlb/files/nftlb-1.0-tests.patch
+++ /dev/null
@@ -1,45 +0,0 @@
-diff --git a/tests/exec_tests.sh b/tests/exec_tests.sh
-index 2a30a07..7814f5a 100755
---- a/tests/exec_tests.sh
-+++ b/tests/exec_tests.sh
-@@ -36,6 +36,8 @@ fi
- 
- echo "-- Executing configuration tests"
- 
-+retval=0
-+
- for test in `ls -d ${TESTS}`; do
- 	if [[ ! ${test} =~ ^..._ ]]; then
- 		continue;
-@@ -58,6 +60,7 @@ for test in `ls -d ${TESTS}`; do
- 
- 	if [ $statusexec -ne 0 ]; then
- 		echo -e "\e[31mNFT EXEC ERROR\e[0m"
-+		retval=1
- 		continue;
- 	fi
- 
-@@ -65,6 +68,7 @@ for test in `ls -d ${TESTS}`; do
- 
- 	if [ ! -f ${outputfile} ]; then
- 		echo "Dump file doesn't exist"
-+		retval=1
- 		continue;
- 	fi
- 
-@@ -76,6 +80,7 @@ for test in `ls -d ${TESTS}`; do
- 		rm -f ${reportfile}
- 	else
- 		echo -e "\e[31mNFT DUMP ERROR\e[0m"
-+		retval=1
- 		if [ $APPLY_REPORTS -eq 1 ]; then
- 			cat ${reportfile} > ${outputfile}
- 			echo -e "APPLIED"
-@@ -89,4 +94,7 @@ fi
- 
- if [ "`grep 'nft command error' /var/log/syslog`" != "" ]; then
- 	echo -e "\e[33m* command errors found, please check syslog\e[0m"
-+	retval=1
- fi
-+
-+exit ${retval}
diff --git a/net-firewall/nftlb/files/nftlb-1.0.8-musl.patch b/net-firewall/nftlb/files/nftlb-1.0.8-musl.patch
deleted file mode 100644
index 75e84b14629b..000000000000
--- a/net-firewall/nftlb/files/nftlb-1.0.8-musl.patch
+++ /dev/null
@@ -1,73 +0,0 @@
-diff --git a/configure.ac b/configure.ac
-index 8ec1711..1de7be7 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -2,6 +2,7 @@ AC_INIT([nftlb], [1.0.8], [netfilter-devel@vger.kernel.org])
- 
- AC_CONFIG_AUX_DIR([build-aux])
- AC_CONFIG_MACRO_DIR([m4])
-+AC_CONFIG_HEADERS([config.h])
- AM_INIT_AUTOMAKE([-Wall foreign subdir-objects
-         tar-pax no-dist-gzip dist-bzip2 1.6])
- 
-@@ -25,5 +26,7 @@ AC_CHECK_HEADER([ev.h], [EVENTINC="-include ev.h"],
- 				 [EVENTINC="-include libev/ev.h"],
- 				 [AC_MSG_ERROR([ev.h not found])])])
- 
-+AC_CHECK_HEADERS([execinfo.h])
-+
- AC_CONFIG_FILES([Makefile src/Makefile])
- AC_OUTPUT
-diff --git a/src/main.c b/src/main.c
-index 2149e34..9ff3f7b 100644
---- a/src/main.c
-+++ b/src/main.c
-@@ -18,6 +18,7 @@
-  *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
-  *
-  */
-+#include "config.h"
- 
- #include <stdio.h>
- #include <stdlib.h>
-@@ -25,6 +26,10 @@
- #include <errno.h>
- #include <unistd.h>
- 
-+#ifdef HAVE_EXECINFO_H
-+ #include <execinfo.h>
-+#endif /* HAVE_EXECINFO_H */
-+
- #include "config.h"
- #include "objects.h"
- #include "server.h"
-@@ -88,6 +93,7 @@ static void nftlb_sighandler(int signo)
- 	exit(EXIT_SUCCESS);
- }
- 
-+#ifdef HAVE_EXECINFO_H
- static void nftlb_trace() {
- 	int level;
- 
-@@ -100,6 +106,7 @@ static void nftlb_trace() {
- 	if (!obj_recovery())
- 		exit(EXIT_FAILURE);
- }
-+#endif /* HAVE_EXECINFO_H */
- 
- static int main_process(const char *config, int mode)
- {
-@@ -189,9 +196,13 @@ int main(int argc, char *argv[])
- 
- 	if (signal(SIGINT, nftlb_sighandler) == SIG_ERR ||
- 	    signal(SIGTERM, nftlb_sighandler) == SIG_ERR ||
-+#ifdef HAVE_EXECINFO_H
- 	    signal(SIGPIPE, SIG_IGN) == SIG_ERR ||
- 	    signal(SIGABRT, nftlb_trace) == SIG_ERR ||
- 	    signal(SIGSEGV, nftlb_trace) == SIG_ERR) {
-+#else
-+	    signal(SIGPIPE, SIG_IGN) == SIG_ERR) {
-+#endif /* HAVE_EXECINFO_H */
- 		zcu_log_print(LOG_ERR, "Error assigning signals");
- 		return EXIT_FAILURE;
- 	}
diff --git a/net-firewall/nftlb/files/nftlb-1.0.8-tests.patch b/net-firewall/nftlb/files/nftlb-1.0.8-tests.patch
deleted file mode 100644
index 2eed096cad15..000000000000
--- a/net-firewall/nftlb/files/nftlb-1.0.8-tests.patch
+++ /dev/null
@@ -1,45 +0,0 @@
-diff --git a/tests/config_exec/exec_tests.sh b/tests/config_exec/exec_tests.sh
-index f63950e..a55b467 100755
---- a/tests/config_exec/exec_tests.sh
-+++ b/tests/config_exec/exec_tests.sh
-@@ -36,6 +36,8 @@ fi
- 
- echo "-- Executing configuration tests"
- 
-+retval=0
-+
- for test in `ls -d ${TESTS}`; do
- 	if [[ ! ${test} =~ ^..._ ]]; then
- 		continue;
-@@ -58,6 +60,7 @@ for test in `ls -d ${TESTS}`; do
- 
- 	if [ $statusexec -ne 0 ]; then
- 		echo -e "\e[31mNFT EXEC ERROR\e[0m"
-+		retval=1
- 		continue;
- 	fi
- 
-@@ -65,6 +68,7 @@ for test in `ls -d ${TESTS}`; do
- 
- 	if [ ! -f ${outputfile} ]; then
- 		echo "Dump file doesn't exist"
-+		retval=1
- 		continue;
- 	fi
- 
-@@ -76,6 +80,7 @@ for test in `ls -d ${TESTS}`; do
- 		rm -f ${reportfile}
- 	else
- 		echo -e "\e[31mNFT DUMP ERROR\e[0m"
-+		retval=1
- 		if [ $APPLY_REPORTS -eq 1 ]; then
- 			cat ${reportfile} > ${outputfile}
- 			echo -e "APPLIED"
-@@ -89,4 +94,7 @@ fi
- 
- if [ "`grep 'nft command error' /var/log/syslog`" != "" ]; then
- 	echo -e "\e[33m* command errors found, please check syslog\e[0m"
-+	retval=1
- fi
-+
-+exit ${retval}
diff --git a/net-firewall/nftlb/files/nftlb-1.1.0-musl.patch b/net-firewall/nftlb/files/nftlb-1.1.0-musl.patch
deleted file mode 100644
index b9cfb315c7e2..000000000000
--- a/net-firewall/nftlb/files/nftlb-1.1.0-musl.patch
+++ /dev/null
@@ -1,73 +0,0 @@
-diff --git a/configure.ac b/configure.ac
-index ace78db..55f5f68 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -2,6 +2,7 @@ AC_INIT([nftlb], [1.1.0], [netfilter-devel@vger.kernel.org])
- 
- AC_CONFIG_AUX_DIR([build-aux])
- AC_CONFIG_MACRO_DIR([m4])
-+AC_CONFIG_HEADERS([config.h])
- AM_INIT_AUTOMAKE([-Wall foreign subdir-objects
-         tar-pax no-dist-gzip dist-bzip2 1.6])
- 
-@@ -25,5 +26,7 @@ AC_CHECK_HEADER([ev.h], [EVENTINC="-include ev.h"],
- 				 [EVENTINC="-include libev/ev.h"],
- 				 [AC_MSG_ERROR([ev.h not found])])])
- 
-+AC_CHECK_HEADERS([execinfo.h])
-+
- AC_CONFIG_FILES([Makefile src/Makefile])
- AC_OUTPUT
-diff --git a/src/main.c b/src/main.c
-index bca652e..5d7e918 100644
---- a/src/main.c
-+++ b/src/main.c
-@@ -18,6 +18,7 @@
-  *   along with this program.  If not, see <http://www.gnu.org/licenses/>.
-  *
-  */
-+#include "config.h"
- 
- #include <stdio.h>
- #include <stdlib.h>
-@@ -25,6 +26,10 @@
- #include <errno.h>
- #include <unistd.h>
- 
-+#ifdef HAVE_EXECINFO_H
-+ #include <execinfo.h>
-+#endif /* HAVE_EXECINFO_H */
-+
- #include "config.h"
- #include "objects.h"
- #include "server.h"
-@@ -88,6 +93,7 @@ static void nftlb_sighandler(int signo)
- 	exit(EXIT_SUCCESS);
- }
- 
-+#ifdef HAVE_EXECINFO_H
- static void nftlb_trace() {
- 	int level;
- 
-@@ -100,6 +106,7 @@ static void nftlb_trace() {
- 	if (!obj_recovery())
- 		exit(EXIT_FAILURE);
- }
-+#endif /* HAVE_EXECINFO_H */
- 
- static int main_process(const char *config, int mode)
- {
-@@ -189,9 +196,13 @@ int main(int argc, char *argv[])
- 
- 	if (signal(SIGINT, nftlb_sighandler) == SIG_ERR ||
- 	    signal(SIGTERM, nftlb_sighandler) == SIG_ERR ||
-+#ifdef HAVE_EXECINFO_H
- 	    signal(SIGPIPE, SIG_IGN) == SIG_ERR ||
- 	    signal(SIGABRT, nftlb_trace) == SIG_ERR ||
- 	    signal(SIGSEGV, nftlb_trace) == SIG_ERR) {
-+#else
-+	    signal(sigpipe, sig_ign) == sig_err) {
-+#endif /* have_execinfo_h */
- 		u_log_print(LOG_ERR, "Error assigning signals");
- 		return EXIT_FAILURE;
- 	}
diff --git a/net-firewall/nftlb/metadata.xml b/net-firewall/nftlb/metadata.xml
deleted file mode 100644
index 56e379f48d61..000000000000
--- a/net-firewall/nftlb/metadata.xml
+++ /dev/null
@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="person">
-    <email>chutzpah@gentoo.org</email>
-    <name>Patrick McLean</name>
-  </maintainer>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/nftlb/nftlb-1.0.7-r1.ebuild b/net-firewall/nftlb/nftlb-1.0.7-r1.ebuild
deleted file mode 100644
index c1f86a202c02..000000000000
--- a/net-firewall/nftlb/nftlb-1.0.7-r1.ebuild
+++ /dev/null
@@ -1,61 +0,0 @@
-# Copyright 2020-2023 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit linux-info autotools
-
-DESCRIPTION="nftables load balancer"
-HOMEPAGE="https://github.com/zevenet/nftlb"
-SRC_URI="https://github.com/zevenet/${PN}/archive/v${PV}.tar.gz -> ${P}.tar.gz"
-
-LICENSE="AGPL-3"
-SLOT="0"
-KEYWORDS="~amd64 ~x86"
-
-DEPEND="
-	net-firewall/nftables:=[modern-kernel(+)]
-	dev-libs/jansson:=
-	dev-libs/libev:=
-"
-RDEPEND="${DEPEND}"
-
-# tests need root access
-RESTRICT="test"
-
-PATCHES=(
-	"${FILESDIR}/nftlb-1.0-tests.patch"
-	"${FILESDIR}/nftlb-1.0-musl.patch"
-)
-
-pkg_setup() {
-	local CONFIG_CHECK="
-		~NF_TABLES
-		~NFT_NUMGEN
-		~NFT_HASH
-		~NF_NAT
-		~IP_NF_NAT
-	"
-
-	linux-info_pkg_setup
-
-	if kernel_is lt 4 19; then
-		eerror "${PN} requires kernel version 4.19 or newer"
-	fi
-}
-
-src_prepare() {
-	default
-	eautoreconf
-}
-
-src_test() {
-	pushd tests >/dev/null || die
-
-	sed -e "s:/var/log/syslog:\"${T}/tests.log\":" \
-		-i exec_tests.sh || die
-
-	./exec_tests.sh || die "tests failed"
-
-	popd >/dev/null || die
-}
diff --git a/net-firewall/nftlb/nftlb-1.0.8-r1.ebuild b/net-firewall/nftlb/nftlb-1.0.8-r1.ebuild
deleted file mode 100644
index cff8fa4f0cf6..000000000000
--- a/net-firewall/nftlb/nftlb-1.0.8-r1.ebuild
+++ /dev/null
@@ -1,64 +0,0 @@
-# Copyright 2020-2023 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit linux-info autotools
-
-DESCRIPTION="nftables load balancer"
-HOMEPAGE="https://github.com/zevenet/nftlb"
-SRC_URI="https://github.com/zevenet/${PN}/archive/v${PV}.tar.gz -> ${P}.gh.tar.gz"
-
-LICENSE="AGPL-3"
-SLOT="0"
-KEYWORDS="~amd64 ~x86"
-
-DEPEND="
-	net-firewall/nftables:=[modern-kernel(+)]
-	dev-libs/jansson:=
-	dev-libs/libev:=
-"
-RDEPEND="${DEPEND}"
-
-# tests need root access
-RESTRICT="test"
-
-PATCHES=(
-	"${FILESDIR}/nftlb-1.0.8-tests.patch"
-	"${FILESDIR}/nftlb-1.0.8-musl.patch"
-)
-
-pkg_setup() {
-	local CONFIG_CHECK="
-		~NF_TABLES
-		~NFT_NUMGEN
-		~NFT_HASH
-		~NF_NAT
-		~IP_NF_NAT
-	"
-
-	linux-info_pkg_setup
-
-	if kernel_is lt 4 19; then
-		eerror "${PN} requires kernel version 4.19 or newer"
-	fi
-}
-
-src_prepare() {
-	# there are some compiler artifacts in the tarball
-	find "${S}" -name '*.o' -delete || die
-
-	default
-	eautoreconf
-}
-
-src_test() {
-	pushd tests >/dev/null || die
-
-	sed -e "s:/var/log/syslog:\"${T}/tests.log\":" \
-		-i exec_tests.sh || die
-
-	./exec_tests.sh || die "tests failed"
-
-	popd >/dev/null || die
-}
diff --git a/net-firewall/nftlb/nftlb-1.1.0.ebuild b/net-firewall/nftlb/nftlb-1.1.0.ebuild
deleted file mode 100644
index 7e90a613b33b..000000000000
--- a/net-firewall/nftlb/nftlb-1.1.0.ebuild
+++ /dev/null
@@ -1,69 +0,0 @@
-# Copyright 2020-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit linux-info autotools
-
-DESCRIPTION="nftables load balancer"
-HOMEPAGE="
-	https://www.relianoid.com/nftlb
-	https://github.com/relianoid/nftlb
-"
-SRC_URI="https://github.com/relianoid/${PN}/archive/v${PV}.tar.gz -> ${P}.gh.tar.gz"
-
-LICENSE="AGPL-3"
-SLOT="0"
-KEYWORDS="~amd64 ~x86"
-
-DEPEND="
-	net-firewall/nftables:=[modern-kernel(+)]
-	dev-libs/jansson:=
-	dev-libs/libev:=
-"
-RDEPEND="
-	${DEPEND}
-"
-
-# tests need root access
-RESTRICT="test"
-
-PATCHES=(
-	"${FILESDIR}/nftlb-1.0.8-tests.patch"
-	"${FILESDIR}/nftlb-1.1.0-musl.patch"
-)
-
-pkg_setup() {
-	local CONFIG_CHECK="
-		~NF_TABLES
-		~NFT_NUMGEN
-		~NFT_HASH
-		~NF_NAT
-		~IP_NF_NAT
-	"
-
-	linux-info_pkg_setup
-
-	if kernel_is lt 4 19; then
-		eerror "${PN} requires kernel version 4.19 or newer"
-	fi
-}
-
-src_prepare() {
-	# there are some compiler artifacts in the tarball
-	find "${S}" -name '*.o' -delete || die
-
-	default
-	eautoreconf
-}
-
-src_test() {
-	pushd tests >/dev/null || die
-
-	sed -e "s:/var/log/syslog:\"${T}/tests.log\":" \
-		-i exec_tests.sh || die
-
-	./exec_tests.sh || die "tests failed"
-
-	popd >/dev/null || die
-}
diff --git a/net-firewall/psad/Manifest b/net-firewall/psad/Manifest
deleted file mode 100644
index 5d64570b037f..000000000000
--- a/net-firewall/psad/Manifest
+++ /dev/null
@@ -1 +0,0 @@
-DIST psad-2.4.6.tar.bz2 2548405 BLAKE2B 7479ce4496343ca988da4dbe82190053385f1a8fa2e190002545c63f2e36283bc84293d932ebe147c9078923fa9e0527b4265fffdb8e1fd99bfc5d9955f9f3cd SHA512 a5de29b9ca0108aa8c6a325b725145f408dc517aeee4654596c7a037762f495a78827c64fc2e9c4284bc8db65caf0321982ecaf02de6d73784c2038e1078f42d
diff --git a/net-firewall/psad/files/psad-2.2.4-var-run.patch b/net-firewall/psad/files/psad-2.2.4-var-run.patch
deleted file mode 100644
index 7e6c9d29081d..000000000000
--- a/net-firewall/psad/files/psad-2.2.4-var-run.patch
+++ /dev/null
@@ -1,19 +0,0 @@
---- a/init-scripts/psad-init.gentoo
-+++ b/init-scripts/psad-init.gentoo
-@@ -1,4 +1,4 @@
--#!/sbin/runscript
-+#!/sbin/openrc-run
- ## Copyright 2006 Michael Rash
- # Distributed under the terms of the GNU General Public License v2
- # Author: Michael Rash
-@@ -19,6 +19,10 @@
- 
- start() {
- 	checkconfig || return 1
-+	checkpath -q -d -m 755 -o root:root /run/psad
-+	checkpath -q -d -m 755 -o root:root /var/lib/psad
-+	checkpath -q -d -m 755 -o root:root /var/log/psad
-+	[ -p /var/lib/psad/psadfifo ] || mknod -m 600 /var/lib/psad/psadfifo p
- 
- 	ebegin "Starting ${SVCNAME}"
- 	start-stop-daemon \
diff --git a/net-firewall/psad/metadata.xml b/net-firewall/psad/metadata.xml
deleted file mode 100644
index def7802554eb..000000000000
--- a/net-firewall/psad/metadata.xml
+++ /dev/null
@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="project">
-    <email>netmon@gentoo.org</email>
-    <name>Gentoo network monitoring and analysis project</name>
-  </maintainer>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/psad/psad-2.4.6-r1.ebuild b/net-firewall/psad/psad-2.4.6-r1.ebuild
deleted file mode 100644
index 7f7c63a676c3..000000000000
--- a/net-firewall/psad/psad-2.4.6-r1.ebuild
+++ /dev/null
@@ -1,93 +0,0 @@
-# Copyright 1999-2023 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit perl-module toolchain-funcs
-
-DESCRIPTION="Port Scanning Attack Detection daemon"
-HOMEPAGE="https://www.cipherdyne.org/psad/"
-SRC_URI="https://www.cipherdyne.org/psad/download/${P}.tar.bz2"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="~alpha amd64 ~arm64 ppc ~sparc x86"
-IUSE="selinux"
-
-RDEPEND="
-	dev-perl/Bit-Vector
-	dev-perl/Date-Calc
-	dev-perl/NetAddr-IP
-	dev-perl/Unix-Syslog
-	net-firewall/iptables
-	net-misc/whois
-	virtual/logger
-	virtual/mailx
-	virtual/perl-Storable
-	selinux? ( sec-policy/selinux-psad )
-"
-BDEPEND="virtual/perl-ExtUtils-MakeMaker"
-
-PATCHES=( "${FILESDIR}"/${PN}-2.2.4-var-run.patch )
-
-src_prepare() {
-	default
-
-	sed -i \
-		-e 's|/usr/bin/gcc|$(CC)|g' \
-		-e 's|-O|$(CFLAGS) $(LDFLAGS)|g' \
-		Makefile || die
-	# Fix up default paths
-	sed -i \
-		-e "s:/usr/bin/whois_psad:/usr/bin/whois:g" \
-		psad.conf || die
-}
-
-src_configure() {
-	default
-
-	local d
-	for d in IPTables-Parse IPTables-ChainMgr; do
-		cd "${S}"/deps/${d} || die
-		perl-module_src_configure
-	done
-}
-
-src_compile() {
-	tc-export CC
-	default
-
-	local d
-	for d in IPTables-Parse IPTables-ChainMgr; do
-		cd "${S}"/deps/${d} || die
-		perl-module_src_compile
-	done
-}
-
-src_install() {
-	newbin misc/pscan psad-pscan
-
-	dosbin kmsgsd psad psadwatchd
-	newsbin fwcheck_psad.pl fwcheck_psad
-
-	insinto /etc/psad
-	doins \
-		*.conf auto_dl icmp{,6}_types ip_options psad_* pf.os posf \
-		protocols signatures
-
-	newinitd init-scripts/psad-init.gentoo psad
-
-	doman doc/*.8
-
-	dodoc doc/BENCHMARK CREDITS Change* doc/FW_EXAMPLE_RULES README \
-		doc/README.SYSLOG doc/SCAN_LOG
-
-	insinto /etc/psad/snort_rules
-	doins deps/snort_rules/*
-
-	local d
-	for d in IPTables-Parse IPTables-ChainMgr; do
-		cd "${S}"/deps/${d} || die
-		perl-module_src_install
-	done
-}
diff --git a/net-firewall/rtsp-conntrack/Manifest b/net-firewall/rtsp-conntrack/Manifest
deleted file mode 100644
index 4d17074c63e3..000000000000
--- a/net-firewall/rtsp-conntrack/Manifest
+++ /dev/null
@@ -1 +0,0 @@
-DIST rtsp-conntrack-5.3.tar.gz 12409 BLAKE2B 91bc82f404c3d5b32100684625f5fc9641d60df457c25b2bf93988bad7acd76fdc46e2e76d12dccf42eb61bd3f724752a974728a8b229bb59df6bec545e22151 SHA512 660cf212cb5802f0d9a02c45948d02729e686fe96e12d5e2294f5d9a588d872677d4f8ef39f4abac6ec3adb2ef5e1c884858e63275a84e1035d13c21537530ab
diff --git a/net-firewall/rtsp-conntrack/files/rtsp-conntrack-5.3-strlcpy.patch b/net-firewall/rtsp-conntrack/files/rtsp-conntrack-5.3-strlcpy.patch
deleted file mode 100644
index 4051421a0f84..000000000000
--- a/net-firewall/rtsp-conntrack/files/rtsp-conntrack-5.3-strlcpy.patch
+++ /dev/null
@@ -1,29 +0,0 @@
-https://patch-diff.githubusercontent.com/raw/maru-sama/rtsp-linux/pull/12.patch
-From: Brahmajit Das <brahmajit.xyz@gmail.com>
-Date: Sun, 28 Apr 2024 01:48:03 +0530
-Subject: [PATCH 1/1] Fix build with Linux 6.8
-
-With commit
-https://github.com/torvalds/linux/commit/57f22c8dab6b266ae36b89b073a4a33dea71e762
-strlcpy has been removed in favor of strscpy. Thus giving us build error
-such as nf_conntrack_rtsp.c: error: implicit declaration of function
-strlcpy.
-
-First reported on Gentoo Linux, please reffer:
-https://bugs.gentoo.org/928590
-
-Signed-off-by: Brahmajit Das <brahmajit.xyz@gmail.com>
---- a/nf_conntrack_rtsp.c
-+++ b/nf_conntrack_rtsp.c
-@@ -550,7 +550,7 @@ init(void)
- 		}
- 
- #if LINUX_VERSION_CODE >= KERNEL_VERSION(3,6,0)
--		strlcpy(hlpr->name, tmpname, sizeof(hlpr->name));
-+		strscpy(hlpr->name, tmpname, sizeof(hlpr->name));
- #else
- 		hlpr->name = tmpname;
- #endif
--- 
-2.44.0
-
diff --git a/net-firewall/rtsp-conntrack/metadata.xml b/net-firewall/rtsp-conntrack/metadata.xml
deleted file mode 100644
index 5f33304011d5..000000000000
--- a/net-firewall/rtsp-conntrack/metadata.xml
+++ /dev/null
@@ -1,5 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/rtsp-conntrack/rtsp-conntrack-5.3-r2.ebuild b/net-firewall/rtsp-conntrack/rtsp-conntrack-5.3-r2.ebuild
deleted file mode 100644
index 2282fcec6ec3..000000000000
--- a/net-firewall/rtsp-conntrack/rtsp-conntrack-5.3-r2.ebuild
+++ /dev/null
@@ -1,31 +0,0 @@
-# Copyright 1999-2024 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-inherit linux-mod-r1
-
-DESCRIPTION="RTSP conntrack module for Netfilter"
-HOMEPAGE="https://github.com/maru-sama/rtsp-linux"
-SRC_URI="https://github.com/maru-sama/rtsp-linux/archive/${PV}.tar.gz -> ${P}.tar.gz"
-S="${WORKDIR}/rtsp-linux-${PV}"
-
-LICENSE="GPL-2"
-SLOT="0"
-KEYWORDS="amd64 x86"
-
-CONFIG_CHECK="NF_CONNTRACK"
-
-PATCHES=(
-	"${FILESDIR}"/${P}-strlcpy.patch
-)
-
-src_compile() {
-	local modlist=(
-		nf_conntrack_rtsp=net/netfilter
-		nf_nat_rtsp=net/ipv4/netfilter
-	)
-	local modargs=( KERNELDIR="${KV_OUT_DIR}" )
-
-	linux-mod-r1_src_compile
-}
diff --git a/net-firewall/shorewall/Manifest b/net-firewall/shorewall/Manifest
deleted file mode 100644
index 3517007e6d7d..000000000000
--- a/net-firewall/shorewall/Manifest
+++ /dev/null
@@ -1,7 +0,0 @@
-DIST shorewall-5.2.8.tar.bz2 574427 BLAKE2B 1ea97c8d8ed4619af1ffe0e502c6871a2c14e6e75a12b5e702315aa67411efb6d0c3049017ea48f02e302a7d4af72d06b635dcc8314a4d4325a24cc8f7abd344 SHA512 d5fc562f59e97cb462c6c0d7cf2b0f6211d413c2e3db72d93e8ad4f23cd1d0f69c90fff602d6891bbee1725c2505a72f3677c3050758e36f38f0248e8c6c7e52
-DIST shorewall-core-5.2.8.tar.bz2 77980 BLAKE2B 141ac2baf5b466c31d90bb73e8aa4f3f8688656f3734b85dcd392196559a70a9550f125595c488e90e2a34c8ab7067106d728b349fbcb7e42fdd0a8d11c749da SHA512 f0d4f41b2614cc4c6f834ac2a7bdfae181789bc97044171b0fa1e968cda930cfdc86fa1ff4b54b43a8ae22b7b6f80b66b77888644c5a7751edf814cc49d491c6
-DIST shorewall-docs-html-5.2.8.tar.bz2 4322407 BLAKE2B 42daa490ac8b14a93a56b6a2beb388600e7be4336e46bdbadf417c638873f8c362171a6c2b388044fa3bc551cc446832e3773459183eaf31d096af575b85631f SHA512 c6bf1d3d6d2e08c483d72662fef66a0db8dd3cc3637c6731e97d6150bcc24762864bd51eaa9a3ff0f75d7599c7a56a467668a6907c4bdaa9f90d8bf9453e127b
-DIST shorewall-init-5.2.8.tar.bz2 42589 BLAKE2B 74e265ed9d938b6130800f548f5f47658b641a76906a40d1980331f78648650a2165c43d232ab8d817ee5bcd63e1920e2e8b6f97b279a48baba1b72908816bc3 SHA512 eda8648ae5e67b2d6bc29f770e4ba791b6befaf85020445fb38d9837d65d8dcc90db79220e8d6a4c4918151ca2d33375cb3f3b7127e300cb9a37a572d154093c
-DIST shorewall-lite-5.2.8.tar.bz2 47250 BLAKE2B 2fff00d7a6248a3db0aa5d6b3ed041b06bdfa35b71195088659afd4036cf61c6bc2f3de739803d4e26e56785aa90c87ec6a2120239183351fae7a54065f1a629 SHA512 d72f260b095f1dfb2b0a0c967ae80bfd7f5f3469a08eb446c0b3e1b1e662cb500510b75f2979a00a9ef57b16e6a23a95483c34e2a5c5d2d090bc1e071ea87292
-DIST shorewall6-5.2.8.tar.bz2 203102 BLAKE2B d9117d42cd25e18aa1104ec3f4498227eedcce5c3531623e2e4d6ec27ba5221f98e1ae2e596ac90d7415cd366b2dbfdd024adaaef0c1c2756900188bde105903 SHA512 7044efe84b2c585fcd0bfb661666c71cea140157f22ba7d4881006e24d785eb0091c071c825fa5948bc1383e7fd4617cc8f3d4e68865cf472ddea3811bf1833d
-DIST shorewall6-lite-5.2.8.tar.bz2 47178 BLAKE2B 47026c3fdab7564c8e48b653a4c67db99fe5ff07de723169f65185aea563691806164a637a38c419d19619cf1380462fa7287b0993d9389dd311393bac911602 SHA512 a80ffc7baf7800e024e41a0f9736543b15d10f2d403540e48e8a2cd2ba0196ce04ff01ac98fc03852c7d268bb4954714dd428375e768b80aa4792683b8775935
diff --git a/net-firewall/shorewall/files/shorewall-5.2.1-no-gzipped-manpages.patch b/net-firewall/shorewall/files/shorewall-5.2.1-no-gzipped-manpages.patch
deleted file mode 100644
index 386a55dfbad8..000000000000
--- a/net-firewall/shorewall/files/shorewall-5.2.1-no-gzipped-manpages.patch
+++ /dev/null
@@ -1,28 +0,0 @@
-diff --git a/install.sh b/install.sh
-index bd89420..6ad695e 100755
---- a/install.sh
-+++ b/install.sh
-@@ -1179,9 +1179,8 @@ if [ ${PRODUCT} = shorewall ]; then
-     [ -n "$INSTALLD" ] || make_parent_directory ${DESTDIR}${MANDIR}/man5 0755
- 
-     for f in *.5; do
--	gzip -9c $f > $f.gz
--	run_install $INSTALLD  -m 0644 $f.gz ${DESTDIR}${MANDIR}/man5/$f.gz
--	echo "Man page $f.gz installed to ${DESTDIR}${MANDIR}/man5/$f.gz"
-+	run_install $INSTALLD  -m 0644 $f ${DESTDIR}${MANDIR}/man5/$f
-+	echo "Man page $f installed to ${DESTDIR}${MANDIR}/man5/$f"
-     done
- fi
- 
-@@ -1212,9 +1211,8 @@ fi
- [ -n "$INSTALLD" ] || make_parent_directory ${DESTDIR}${MANDIR}/man8 0755
- 
- for f in *.8; do
--    gzip -9c $f > $f.gz
--    run_install $INSTALLD  -m 0644 $f.gz ${DESTDIR}${MANDIR}/man8/$f.gz
--    echo "Man page $f.gz installed to ${DESTDIR}${MANDIR}/man8/$f.gz"
-+    run_install $INSTALLD  -m 0644 $f ${DESTDIR}${MANDIR}/man8/$f
-+    echo "Man page $f installed to ${DESTDIR}${MANDIR}/man8/$f"
- done
- 
- cd ..
diff --git a/net-firewall/shorewall/files/shorewall-core-5.2.1-no-gzipped-manpages.patch b/net-firewall/shorewall/files/shorewall-core-5.2.1-no-gzipped-manpages.patch
deleted file mode 100644
index 52ef41040755..000000000000
--- a/net-firewall/shorewall/files/shorewall-core-5.2.1-no-gzipped-manpages.patch
+++ /dev/null
@@ -1,16 +0,0 @@
-diff --git a/install.sh b/install.sh
-index fd7f8f6..3872cc7 100755
---- a/install.sh
-+++ b/install.sh
-@@ -353,9 +353,8 @@ if [ -n "$MANDIR" ]; then
-     [ -n "$INSTALLD" ] || make_parent_directory ${DESTDIR}${MANDIR}/man8 0755
- 
-     for f in *.8; do
--	gzip -9c $f > $f.gz
--	install_file $f.gz ${DESTDIR}${MANDIR}/man8/$f.gz 0644
--	echo "Man page $f.gz installed to ${DESTDIR}${MANDIR}/man8/$f.gz"
-+	install_file $f ${DESTDIR}${MANDIR}/man8/$f 0644
-+	echo "Man page $f installed to ${DESTDIR}${MANDIR}/man8/$f"
-     done
- 
-     cd ..
diff --git a/net-firewall/shorewall/files/shorewall-init-01_remove-ipset-functionality-r2.patch b/net-firewall/shorewall/files/shorewall-init-01_remove-ipset-functionality-r2.patch
deleted file mode 100644
index 92258b1ff23c..000000000000
--- a/net-firewall/shorewall/files/shorewall-init-01_remove-ipset-functionality-r2.patch
+++ /dev/null
@@ -1,29 +0,0 @@
---- a/shorewall-init-5.2.4.3/shorewall-init
-+++ b/shorewall-init-5.2.4.3/shorewall-init
-@@ -68,10 +68,6 @@ shorewall_init_start () {
- 
-     printf "Initializing \"Shorewall-based firewalls\": "
- 
--    if [ -n "$SAVE_IPSETS" -a -f "$SAVE_IPSETS" ]; then
--	ipset -R < "$SAVE_IPSETS"
--    fi
--
-     for PRODUCT in $PRODUCTS; do
- 	if setstatedir; then
- 	    #
-@@ -109,15 +105,6 @@ shorewall_init_stop () {
- 	fi
-     done
- 
--    if [ -n "$SAVE_IPSETS" ]; then
--	mkdir -p $(dirname "$SAVE_IPSETS")
--	if ipset -S > "${SAVE_IPSETS}.tmp"; then
--	    grep -qE -- '^(-N|create )' "${SAVE_IPSETS}.tmp" && mv -f "${SAVE_IPSETS}.tmp" "$SAVE_IPSETS" || rm -f "${SAVE_IPSETS}.tmp"
--	else
--	    rm -f "${SAVE_IPSETS}.tmp"
--	fi
--    fi
--
-     return 0
- }
- 
diff --git a/net-firewall/shorewall/files/shorewall-init.confd b/net-firewall/shorewall/files/shorewall-init.confd
deleted file mode 100644
index 1b126be4e8bf..000000000000
--- a/net-firewall/shorewall/files/shorewall-init.confd
+++ /dev/null
@@ -1,6 +0,0 @@
-# List the Shorewall products Shorewall-init should
-# initialize (space-separated list).
-#
-# Sample: PRODUCTS="shorewall shorewall6-lite"
-#
-PRODUCTS=""
diff --git a/net-firewall/shorewall/files/shorewall-init.initd b/net-firewall/shorewall/files/shorewall-init.initd
deleted file mode 100644
index 95873ef5eeee..000000000000
--- a/net-firewall/shorewall/files/shorewall-init.initd
+++ /dev/null
@@ -1,191 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2015 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-SHOREWALLRC_FILE="@GENTOO_PORTAGE_EPREFIX@/usr/share/shorewall/shorewallrc"
-CONFIG_FILE="@GENTOO_PORTAGE_EPREFIX@/etc/conf.d/${SVCNAME}"
-
-description="Puts Shorewall in a safe state at boot time"
-description="${description} prior to bringing up the network."
-
-required_files="$SHOREWALLRC_FILE"
-
-depend() {
-	need localmount
-	before net
-	after bootmisc ipset tmpfiles.setup ulogd
-}
-
-
-. $SHOREWALLRC_FILE
-
-checkconfig() {
-	local PRODUCT=
-
-	if [ -z "${VARLIB}" ]; then
-		eerror "\"VARLIB\" isn't defined or empty! Please check" \
-			"\"${SHOREWALLRC_FILE}\"."
-
-		return 1
-	fi
-
-	if [ -z "${PRODUCTS}" ]; then
-		eerror "${SVCNAME} isn't configured! Please check" \
-			"\"${CONFIG_FILE}\"."
-
-		return 1
-	fi
-
-	for PRODUCT in ${PRODUCTS}; do
-		if [ ! -x ${SBINDIR}/${PRODUCT} ]; then
-			eerror "Invalid product \"${PRODUCT}\" specified" \
-				"in \"${CONFIG_FILE}\"!"
-			eerror "Maybe \"${PRODUCT}\" isn't installed?"
-
-			return 1
-		fi
-	done
-
-	return 0
-}
-
-check_firewall_script() {
-	if [ ${PRODUCT} = shorewall -o ${PRODUCT} = shorewall6 ]; then
-		ebegin "Checking \"${STATEDIR}/firewall\""
-		${SBINDIR}/${PRODUCT} compile -c 1>/dev/null
-		eend $?
-	fi
-
-	if [ ! -x ${STATEDIR}/firewall ]; then
-		eerror "\"${PRODUCT}\" isn't configured!"
-
-		if [ ${PRODUCT} = shorewall-lite -o ${PRODUCT} = shorewall6-lite ]; then
-			eerror "Please go to your 'administrative system'" \
-				"and deploy the compiled firewall" \
-				"configuration for this system."
-		fi
-
-		return 1
-	fi
-
-	return 0
-}
-
-is_allowed_to_be_executed() {
-	# This is not a real service. shorewall-init is an intermediate
-	# script to put your Shorewall-based firewall into a safe state
-	# at boot time prior to bringing up the network.
-	# Please read /usr/share/doc/shorewall-init-*/README.gentoo.gz
-	# for more information.
-	# When your system is up, there is no need to call shorewall-init.
-	# Please call shorewall{,6,-lite,6-lite} directly. That's the
-	# reason why we are preventing start, stop or restart here.
-
-	local PRODUCT=
-
-	if [ "${RC_RUNLEVEL}" != "boot" -a "${RC_CMD}" = "start" ]; then
-		# Starting shorewall-init is only allowed at boot time
-		eerror "This is a boot service, which can only be started" \
-			"at boot."
-		eerror "If you want to get your shorewall-based firewall" \
-			"into the same safe boot state again, run"
-		eerror ""
-		eindent
-		for PRODUCT in ${PRODUCTS}; do
-			eerror "/etc/init.d/${PRODUCT} stop"
-		done
-		eoutdent
-		eerror ""
-		eerror "Yes, \"stop\" and not start."
-		eerror ""
-		return 1
-	fi
-
-	if [ "${RC_RUNLEVEL}" != "shutdown" -a "${RC_CMD}" = "stop" ]; then
-		# Stopping shorewall-init is only allowed at shutdown
-		eerror "This is a boot service, which cannot be stopped."
-		eerror "If you really want to stop your Shorewall-based" \
-			"firewall the same way this service would stop" \
-			"Shorewall at shutdown, please run"
-		eerror ""
-		eindent
-		for PRODUCT in ${PRODUCTS}; do
-			eerror "/etc/init.d/${PRODUCT} clear"
-		done
-		eoutdent
-		eerror ""
-		eerror "Keep in mind that this will clear (=bring down)" \
-			"your firewall!"
-		eerror ""
-		return 1
-	fi
-
-	if [ "${RC_CMD}" = "restart" ]; then
-		eerror "This is a boot service, which cannot be restarted."
-		eerror "If you want to restart any of your Shorewall-based" \
-			"firewalls, run"
-		eerror ""
-		eindent
-		for PRODUCT in ${PRODUCTS}; do
-			eerror "/etc/init.d/${PRODUCT} restart"
-		done
-		eoutdent
-		eerror ""
-		return 1
-	fi
-
-	return 0
-}
-
-set_statedir() {
-	STATEDIR=
-	local VARDIR=
-
-	if [ -f ${CONFDIR}/${PRODUCT}/vardir ]; then
-		STATEDIR=$( . ${CONFDIR}/${PRODUCT}/vardir && echo ${VARDIR} )
-	fi
-
-	[ ! -n "${STATEDIR}" ] && STATEDIR=${VARLIB}/${PRODUCT}
-}
-
-start_pre() {
-	checkconfig || return 1
-
-	is_allowed_to_be_executed || return 1
-}
-
-start() {
-	local PRODUCT=
-	local STATEDIR=
-
-	for PRODUCT in ${PRODUCTS}; do
-		set_statedir
-
-		check_firewall_script || return 1
-
-		ebegin "Initializing \"${PRODUCT}\""
-		${STATEDIR}/firewall stop 1>/dev/null
-		eend $?
-	done
-}
-
-stop_pre() {
-	checkconfig || return 1
-
-	is_allowed_to_be_executed || return 1
-}
-
-stop() {
-	local PRODUCT=
-	local STATEDIR=
-
-	for PRODUCT in ${PRODUCTS}; do
-		set_statedir
-
-		check_firewall_script || return 1
-
-		ebegin "Clearing \"${PRODUCT}\""
-		${STATEDIR}/firewall clear 1>/dev/null
-		eend $?
-	done
-}
diff --git a/net-firewall/shorewall/files/shorewall-init.readme b/net-firewall/shorewall/files/shorewall-init.readme
deleted file mode 100644
index f7b13fed3de6..000000000000
--- a/net-firewall/shorewall/files/shorewall-init.readme
+++ /dev/null
@@ -1,30 +0,0 @@
-shorewall-init from upstream offers two features (taken from [1]):
-
-	1. It can 'close' the firewall before the network interfaces are
-	   brought up during boot.
-	
-	2. It can change the firewall state as the result of interfaces
-	   being brought up or taken down.
-
-On Gentoo we only support the first feature -- the firewall lockdown during
-boot.
-
-We do not support the second feature, because Gentoo doesn't support a
-if-{up,down}.d folder like other distributions do. If you would want to use
-such a feature, you would have to add a custom action to /etc/conf.d/net
-(please refer to the Gentoo Linux Handbook [2] for more information).
-If you are able to add your custom {pre,post}{up,down} action, your are
-also able to specify what shorewall{6,-lite,6-lite} should do, so there is
-no need for upstream's scripts in Gentoo.
-
-If you disagree with us, feel free to open a bug [3] and contribute your
-solution for Gentoo.
-
-Upstream's original init script also supports saving and restoring of
-ipsets. Please use the init script from net-firewall/ipset if you need
-such a feature.
-
-
-[1] http://www.shorewall.net/Shorewall-init.html
-[2] http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=4&chap=5
-[3] https://bugs.gentoo.org
diff --git a/net-firewall/shorewall/files/shorewall-init.systemd b/net-firewall/shorewall/files/shorewall-init.systemd
deleted file mode 100644
index 2b4695855f3a..000000000000
--- a/net-firewall/shorewall/files/shorewall-init.systemd
+++ /dev/null
@@ -1,18 +0,0 @@
-#
-#	The Shoreline Firewall (Shorewall) Packet Filtering Firewall - V5.0
-#
-[Unit]
-Description=shorewall-init
-Documentation=http://www.shorewall.net/Shorewall-init.html
-Before=network-pre.target
-Wants=network-pre.target
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-StandardOutput=syslog
-ExecStart=/sbin/shorewall-init start
-ExecStop=/sbin/shorewall-init stop
-
-[Install]
-WantedBy=basic.target
diff --git a/net-firewall/shorewall/files/shorewall-lite-5.2.1-no-gzipped-manpages.patch b/net-firewall/shorewall/files/shorewall-lite-5.2.1-no-gzipped-manpages.patch
deleted file mode 100644
index 7f6a91ce4dff..000000000000
--- a/net-firewall/shorewall/files/shorewall-lite-5.2.1-no-gzipped-manpages.patch
+++ /dev/null
@@ -1,26 +0,0 @@
-diff --git a/install.sh b/install.sh
-index f66810a..051b861 100755
---- a/install.sh
-+++ b/install.sh
-@@ -448,17 +448,15 @@ if [ -d manpages -a -n "$MANDIR" ]; then
-     make_parent_directory ${DESTDIR}${MANDIR}/man5 0755
- 
-     for f in *.5; do
--	gzip -c $f > $f.gz
--	install_file $f.gz ${DESTDIR}${MANDIR}/man5/$f.gz 0644
--	echo "Man page $f.gz installed to ${DESTDIR}${MANDIR}/man5/$f.gz"
-+	install_file $f ${DESTDIR}${MANDIR}/man5/$f 0644
-+	echo "Man page $f installed to ${DESTDIR}${MANDIR}/man5/$f"
-     done
- 
-     make_parent_directory ${DESTDIR}${MANDIR}/man8 0755
- 
-     for f in *.8; do
--	gzip -c $f > $f.gz
--	install_file $f.gz ${DESTDIR}${MANDIR}/man8/$f.gz 0644
--	echo "Man page $f.gz installed to ${DESTDIR}${MANDIR}/man8/$f.gz"
-+	install_file $f ${DESTDIR}${MANDIR}/man8/$f 0644
-+	echo "Man page $f installed to ${DESTDIR}${MANDIR}/man8/$f"
-     done
- 
-     cd ..
diff --git a/net-firewall/shorewall/files/shorewall-lite.confd-r1 b/net-firewall/shorewall/files/shorewall-lite.confd-r1
deleted file mode 100644
index daef3054274a..000000000000
--- a/net-firewall/shorewall/files/shorewall-lite.confd-r1
+++ /dev/null
@@ -1,19 +0,0 @@
-# Global start/restart/stop options
-#
-OPTIONS="-tvv"
-
-# Start options
-#
-STARTOPTIONS=""
-
-# Stop options
-#
-STOPOPTIONS=""
-
-# Reload options
-#
-RELOADOPTIONS=""
-
-# Restart options
-#
-RESTARTOPTIONS=""
diff --git a/net-firewall/shorewall/files/shorewall-lite.initd-r3 b/net-firewall/shorewall/files/shorewall-lite.initd-r3
deleted file mode 100644
index ee304926f97c..000000000000
--- a/net-firewall/shorewall/files/shorewall-lite.initd-r3
+++ /dev/null
@@ -1,90 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2018 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-if [ "${RC_SVCNAME}" = "shorewall6-lite" ]; then
-	PRODUCT_NAME="Shorewall6-Lite"
-	command="/usr/sbin/shorewall-lite -6"
-else
-	PRODUCT_NAME="Shorewall-Lite"
-	command="/usr/sbin/shorewall-lite"
-fi
-
-description="The Shoreline Firewall Lite, more commonly known as \"${PRODUCT_NAME}\", is"
-description="${description} a high-level tool for configuring Netfilter."
-
-extra_commands="clear"
-extra_started_commands="reload reset"
-
-description_clear="Clear will remove all rules and chains installed by"
-description_clear="${description_clear} ${PRODUCT_NAME}. The firewall is"
-description_clear="${description_clear} then wide open and unprotected."
-
-description_reload="Reload is similar to \"${RC_SERVICE} start\" except that it assumes"
-description_reload="${description_reload} that the firewall is already started."
-description_reload="${description_reload} Existing connections are maintained."
-
-description_reset="All the packet and byte counters in the firewall are reset."
-
-depend() {
-	provide firewall
-	after ulogd
-}
-
-clear() {
-	ebegin "Clearing all ${RC_SVCNAME} rules and setting policy to ACCEPT"
-	${command} ${OPTIONS} clear 1>/dev/null
-	eend $?
-}
-
-reload() {
-	ebegin "Reloading ${RC_SVCNAME}"
-	${command} ${OPTIONS} reload ${RELOADOPTIONS} 1>/dev/null
-	eend $?
-}
-
-reset() {
-	ebegin "Resetting the packet and byte counters in ${RC_SVCNAME}"
-	${command} ${OPTIONS} reset 1>/dev/null
-	eend $?
-}
-
-restart() {
-	local _retval
-	ebegin "Restarting ${RC_SVCNAME}"
-	${command} status 1>/dev/null
-	_retval=$?
-	if [ ${_retval} = '0' ]; then
-		svc_start
-	else
-		${command} ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
-	fi
-	eend $?
-}
-
-start() {
-	ebegin "Starting ${RC_SVCNAME}"
-	${command} ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
-	eend $?
-}
-
-status() {
-	local _retval
-	${command} status 1>/dev/null
-	_retval=$?
-	if [ ${_retval} = '0' ]; then
-		einfo 'status: started'
-		mark_service_started "${SVCNAME}"
-		return 0
-	else
-		einfo 'status: stopped'
-		mark_service_stopped "${SVCNAME}"
-		return 3
-	fi
-}
-
-stop() {
-	ebegin "Stopping ${RC_SVCNAME}"
-	${command} ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
-	eend $?
-}
diff --git a/net-firewall/shorewall/files/shorewall-lite.systemd b/net-firewall/shorewall/files/shorewall-lite.systemd
deleted file mode 100644
index a9d66e732bb1..000000000000
--- a/net-firewall/shorewall/files/shorewall-lite.systemd
+++ /dev/null
@@ -1,20 +0,0 @@
-#
-#	The Shoreline Firewall Lite (Shorewall-Lite) Packet Filtering Firewall - V5.0
-#
-[Unit]
-Description=Shorewall IPv4 firewall lite
-Documentation=man:shorewall-lite(8) http://www.shorewall.net/Documentation_Index.html
-Wants=network-online.target
-After=network-online.target
-Conflicts=iptables.service firewalld.service iptables-restore.service
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-EnvironmentFile=/etc/conf.d/shorewall-lite
-StandardOutput=syslog
-ExecStart=/sbin/shorewall-lite $OPTIONS start $STARTOPTIONS
-ExecStop=/sbin/shorewall-lite $OPTIONS stop $STOPOPTIONS
-
-[Install]
-WantedBy=basic.target
diff --git a/net-firewall/shorewall/files/shorewall.confd-r1 b/net-firewall/shorewall/files/shorewall.confd-r1
deleted file mode 100644
index daef3054274a..000000000000
--- a/net-firewall/shorewall/files/shorewall.confd-r1
+++ /dev/null
@@ -1,19 +0,0 @@
-# Global start/restart/stop options
-#
-OPTIONS="-tvv"
-
-# Start options
-#
-STARTOPTIONS=""
-
-# Stop options
-#
-STOPOPTIONS=""
-
-# Reload options
-#
-RELOADOPTIONS=""
-
-# Restart options
-#
-RESTARTOPTIONS=""
diff --git a/net-firewall/shorewall/files/shorewall.initd-r3 b/net-firewall/shorewall/files/shorewall.initd-r3
deleted file mode 100644
index a67948155817..000000000000
--- a/net-firewall/shorewall/files/shorewall.initd-r3
+++ /dev/null
@@ -1,98 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2018 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-if [ "${RC_SVCNAME}" = "shorewall6" ]; then
-	PRODUCT_NAME="Shorewall6"
-	command="/usr/sbin/shorewall -6"
-else
-	PRODUCT_NAME="Shorewall"
-	command="/usr/sbin/shorewall"
-fi
-
-description="The Shoreline Firewall, more commonly known as \"${PRODUCT_NAME}\", is"
-description="${description} a high-level tool for configuring Netfilter."
-
-extra_commands="check clear"
-extra_started_commands="reload reset"
-
-description_check="Checks if the configuration will compile or not."
-
-description_clear="Clear will remove all rules and chains installed by"
-description_clear="${description_clear} ${PRODUCT_NAME}. The firewall is then"
-description_clear="${description_clear} wide open and unprotected."
-
-description_reload="Reload is similar to \"${RC_SERVICE} start\" except that it assumes"
-description_reload="${description_reload} that the firewall is already started."
-description_reload="${description_reload} Existing connections are maintained."
-
-description_reset="All the packet and byte counters in the firewall are reset."
-
-depend() {
-	provide firewall
-	after ulogd
-}
-
-check() {
-	ebegin "Checking ${RC_SVCNAME} configuration"
-	${command} ${OPTIONS} check 1>/dev/null
-	eend $?
-}
-
-clear() {
-	ebegin "Clearing all ${RC_SVCNAME} rules and setting policy to ACCEPT"
-	${command} ${OPTIONS} clear 1>/dev/null
-	eend $?
-}
-
-reload() {
-	ebegin "Reloading ${RC_SVCNAME}"
-	${command} ${OPTIONS} reload ${RELOADOPTIONS} 1>/dev/null
-	eend $?
-}
-
-reset() {
-	ebegin "Resetting the packet and byte counters in ${RC_SVCNAME}"
-	${command} ${OPTIONS} reset 1>/dev/null
-	eend $?
-}
-
-restart() {
-	local _retval
-	ebegin "Restarting ${RC_SVCNAME}"
-	${command} status 1>/dev/null
-	_retval=$?
-	if [ ${_retval} = '0' ]; then
-		svc_start
-	else
-		${command} ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
-	fi
-	eend $?
-}
-
-start() {
-	ebegin "Starting ${RC_SVCNAME}"
-	${command} ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
-	eend $?
-}
-
-status() {
-	local _retval
-	${command} status 1>/dev/null
-	_retval=$?
-	if [ ${_retval} = '0' ]; then
-		einfo 'status: started'
-		mark_service_started "${SVCNAME}"
-		return 0
-	else
-		einfo 'status: stopped'
-		mark_service_stopped "${SVCNAME}"
-		return 3
-	fi
-}
-
-stop() {
-	ebegin "Stopping ${RC_SVCNAME}"
-	${command} ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
-	eend $?
-}
diff --git a/net-firewall/shorewall/files/shorewall.systemd b/net-firewall/shorewall/files/shorewall.systemd
deleted file mode 100644
index 0844178b0d1f..000000000000
--- a/net-firewall/shorewall/files/shorewall.systemd
+++ /dev/null
@@ -1,20 +0,0 @@
-#
-#	The Shoreline Firewall (Shorewall) Packet Filtering Firewall - V5.0
-#
-[Unit]
-Description=Shorewall IPv4 firewall
-Documentation=man:shorewall(8) http://www.shorewall.net/Documentation_Index.html
-Wants=network-online.target
-After=network-online.target
-Conflicts=iptables.service firewalld.service iptables-restore.service
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-EnvironmentFile=/etc/conf.d/shorewall
-StandardOutput=syslog
-ExecStart=/sbin/shorewall $OPTIONS start $STARTOPTIONS
-ExecStop=/sbin/shorewall $OPTIONS stop $STOPOPTIONS
-
-[Install]
-WantedBy=basic.target
diff --git a/net-firewall/shorewall/files/shorewall6-lite.systemd b/net-firewall/shorewall/files/shorewall6-lite.systemd
deleted file mode 100644
index 5ca1a0d2d1a8..000000000000
--- a/net-firewall/shorewall/files/shorewall6-lite.systemd
+++ /dev/null
@@ -1,20 +0,0 @@
-#
-#	The Shoreline Firewall 6 Lite (Shorewall6-Lite) Packet Filtering Firewall - V5.0
-#
-[Unit]
-Description=Shorewall IPv6 firewall lite
-Documentation=man:shorewall6-lite(8) http://www.shorewall.net/Documentation_Index.html
-Wants=network-online.target
-After=network-online.target
-Conflicts=ip6tables.service firewalld.service ip6tables-restore.service
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-EnvironmentFile=/etc/conf.d/shorewall6-lite
-StandardOutput=syslog
-ExecStart=/sbin/shorewall6-lite $OPTIONS start $STARTOPTIONS
-ExecStop=/sbin/shorewall6-lite $OPTIONS stop $STOPOPTIONS
-
-[Install]
-WantedBy=basic.target
diff --git a/net-firewall/shorewall/files/shorewall6.systemd b/net-firewall/shorewall/files/shorewall6.systemd
deleted file mode 100644
index 182c71bd0803..000000000000
--- a/net-firewall/shorewall/files/shorewall6.systemd
+++ /dev/null
@@ -1,20 +0,0 @@
-#
-#	The Shoreline Firewall 6 (Shorewall6) Packet Filtering Firewall - V5.0
-#
-[Unit]
-Description=Shorewall IPv6 firewall
-Documentation=man:shorewall6(8) http://www.shorewall.net/Documentation_Index.html
-Wants=network-online.target
-After=network-online.target
-Conflicts=ip6tables.service firewalld.service ip6tables-restore.service
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-EnvironmentFile=/etc/conf.d/shorewall6
-StandardOutput=syslog
-ExecStart=/sbin/shorewall6 $OPTIONS start $STARTOPTIONS
-ExecStop=/sbin/shorewall6 $OPTIONS stop $STOPOPTIONS
-
-[Install]
-WantedBy=basic.target
diff --git a/net-firewall/shorewall/files/shorewallrc-r3 b/net-firewall/shorewall/files/shorewallrc-r3
deleted file mode 100644
index a0ed9f7f0495..000000000000
--- a/net-firewall/shorewall/files/shorewallrc-r3
+++ /dev/null
@@ -1,24 +0,0 @@
-#
-# Gentoo Shorewall 5.2 rc file
-#
-BUILD=gentoo                            #Default is to detect the build system
-HOST=gentoo                             #Gentoo GNU Linux
-PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr                             #Top-level directory for shared files, libraries, etc.
-SHAREDIR=${PREFIX}/share                #Directory for arch-neutral files.
-LIBEXECDIR=${PREFIX}/share              #Directory for executable scripts.
-PERLLIBDIR=${PREFIX}/share/shorewall    #Directory to install Shorewall Perl module directory
-CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc                            #Directory where subsystem configurations are installed
-SBINDIR=${PREFIX}/sbin                  #Directory where system administration programs are installed
-MANDIR=${PREFIX}/share/man              #Directory where manpages are installed.
-INITDIR=${CONFDIR}/init.d               #Directory where SysV init scripts are installed.
-INITFILE=${PRODUCT}                     #Name of the product's installed SysV init script
-INITSOURCE=init.gentoo.sh               #Name of the distributed file to be installed as the SysV init script
-ANNOTATED=                              #If non-zero, annotated configuration files are installed
-SERVICEDIR=tbs          #Directory where .service files are installed (systems running systemd only)
-SERVICEFILE=gentoo.service              #Name of the distributed file to be installed as systemd service file
-SYSCONFFILE=default.gentoo              #Name of the distributed file to be installed in $SYSCONFDIR
-SYSCONFDIR=${CONFDIR}/conf.d            #Directory where SysV init parameter files are installed
-SPARSE=                                 #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
-VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib                         #Directory where product variable data is stored.
-VARDIR=${VARLIB}/${PRODUCT}             #Directory where product variable data is stored.
-DEFAULT_PAGER=${PAGER}                  #Pager to use if none specified in shorewall[6].conf
diff --git a/net-firewall/shorewall/metadata.xml b/net-firewall/shorewall/metadata.xml
deleted file mode 100644
index 325f6d6dceb4..000000000000
--- a/net-firewall/shorewall/metadata.xml
+++ /dev/null
@@ -1,33 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <maintainer type="project">
-    <email>netmon@gentoo.org</email>
-    <name>Gentoo network monitoring and analysis project</name>
-  </maintainer>
-  <longdescription lang="en">
-		The Shoreline Firewall, more commonly known as "Shorewall", is high-level tool for configuring Netfilter.
-		You describe your firewall/gateway requirements using entries in a set of configuration files.
-		Shorewall reads those configuration files and with the help of the iptables, iptables-restore, ip and
-		tc utilities, Shorewall configures Netfilter and the Linux networking subsystem to match your requirements.
-		Shorewall can be used on a dedicated firewall system, a multi-function gateway/router/server or on a
-		standalone GNU/Linux system. Shorewall does not use Netfilter's ipchains compatibility mode and can thus
-		take advantage of Netfilter's connection state tracking capabilities.
-
-		Shorewall is not a daemon. Once Shorewall has configured the Linux networking subsystem, its job is complete and
-		there is no "Shorewall process" left running in your system. The /usr/sbin/shorewall program can be used at
-		any time to monitor the Netfilter firewall.
-	</longdescription>
-  <upstream>
-    <doc lang="en">http://shorewall.net/Documentation_Index.html</doc>
-    <remote-id type="cpe">cpe:/a:shorewall:shorewall</remote-id>
-  </upstream>
-  <use>
-    <flag name="init">Adds the capability to place the firewall in a safe state prior to bringing up the network interfaces</flag>
-    <flag name="ipv4">Installs everything needed to create a full IPv4 firewall</flag>
-    <flag name="ipv6">Adds the capability to create a full IPv6 firewall (requires <pkg>net-firewall/shorewall</pkg> ipv4 USE flag)</flag>
-    <flag name="lite4">Installs everything needed to just *run* an IPv4 compiled firewall script created with <pkg>net-firewall/shorewall</pkg> ipv4 USE flag</flag>
-    <flag name="lite6">Installs everything needed to just *run* an IPv6 compiled firewall script created with <pkg>net-firewall/shorewall</pkg> ipv6 USE flag</flag>
-  </use>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/shorewall/shorewall-5.2.8-r2.ebuild b/net-firewall/shorewall/shorewall-5.2.8-r2.ebuild
deleted file mode 100644
index b37ab2c5cb4e..000000000000
--- a/net-firewall/shorewall/shorewall-5.2.8-r2.ebuild
+++ /dev/null
@@ -1,475 +0,0 @@
-# Copyright 1999-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI="7"
-
-inherit eapi9-ver linux-info prefix systemd
-
-DESCRIPTION='A high-level tool for configuring Netfilter'
-HOMEPAGE="https://shorewall.org/"
-LICENSE="GPL-2"
-SLOT="0"
-IUSE="doc +init +ipv4 ipv6 lite4 lite6 selinux"
-
-MY_PV=${PV/_rc/-RC}
-MY_PV=${MY_PV/_beta/-Beta}
-MY_P=${PN}-${MY_PV}
-
-MY_MAJOR_RELEASE_NUMBER=$(ver_cut 1-2)
-MY_MAJORMINOR_RELEASE_NUMBER=$(ver_cut 1-3)
-
-# shorewall
-MY_PN_IPV4=Shorewall
-MY_P_IPV4=${MY_PN_IPV4/#S/s}-${MY_PV}
-
-# shorewall6
-MY_PN_IPV6=Shorewall6
-MY_P_IPV6=${MY_PN_IPV6/#S/s}-${MY_PV}
-
-# shorewall-lite
-MY_PN_LITE4=Shorewall-lite
-MY_P_LITE4=${MY_PN_LITE4/#S/s}-${MY_PV}
-
-# shorewall6-lite
-MY_PN_LITE6=Shorewall6-lite
-MY_P_LITE6=${MY_PN_LITE6/#S/s}-${MY_PV}
-
-# shorewall-init
-MY_PN_INIT=Shorewall-init
-MY_P_INIT=${MY_PN_INIT/#S/s}-${MY_PV}
-
-# shorewall-core
-MY_PN_CORE=Shorewall-core
-MY_P_CORE=${MY_PN_CORE/#S/s}-${MY_PV}
-
-# shorewall-docs-html
-MY_PN_DOCS=Shorewall-docs-html
-MY_P_DOCS=${MY_PN_DOCS/#S/s}-${MY_PV}
-
-# Upstream URL schema:
-# Beta:    $MIRROR/pub/shorewall/development/4.6/shorewall-4.6.4-Beta2/shorewall-4.6.4-Beta2.tar.bz2
-# RC:      $MIRROR/pub/shorewall/development/4.6/shorewall-4.6.4-RC1/shorewall-4.6.4-RC1.tar.bz2
-# Release: $MIRROR/pub/shorewall/4.6/shorewall-4.6.3/shorewall-4.6.3.3.tar.bz2
-
-MY_URL_PREFIX=
-MY_URL_SUFFIX=
-if [[ ${MY_PV} = *-Beta* ]] || [[ ${MY_PV} = *-RC* ]]; then
-	MY_URL_PREFIX='development/'
-
-	if [[ ${MY_PV} = *-Beta* ]] ; then
-		MY_URL_SUFFIX="-Beta${MY_PV##*-Beta}"
-	elif [[ ${MY_PV} = *-RC* ]] ; then
-		MY_URL_SUFFIX="-RC${MY_PV##*-RC}"
-	fi
-
-	# Cleaning up temporary variables
-	unset _tmp_last_index
-	unset _tmp_suffix
-else
-	KEYWORDS="~alpha amd64 ~hppa ppc ppc64 ~sparc x86"
-fi
-
-SRC_URI="
-	https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-core-${MY_PV}.tar.bz2
-	ipv4? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-${MY_PV}.tar.bz2 )
-	ipv6? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall6-${MY_PV}.tar.bz2 )
-	lite4? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-lite-${MY_PV}.tar.bz2 )
-	lite6? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall6-lite-${MY_PV}.tar.bz2 )
-	init? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/shorewall-init-${MY_PV}.tar.bz2 )
-	doc? ( https://shorewall.org/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}${MY_URL_SUFFIX}/${MY_P_DOCS}.tar.bz2 )
-"
-
-# - Shorewall6 requires Shorewall
-# - Installing Shorewall-init or just the documentation doesn't make any sense,
-#   that's why we force the user to select at least one "real" Shorewall product
-#
-# See https://shorewall.org/download.htm#Which
-REQUIRED_USE="
-	ipv6? ( ipv4 )
-	|| ( ipv4 lite4 lite6 )
-"
-
-# No build dependencies! Just plain shell scripts...
-DEPEND=""
-
-RDEPEND="
-	>=net-firewall/iptables-1.4.20
-	>=sys-apps/iproute2-3.8.0[-minimal]
-	app-alternatives/bc
-	ipv4? (
-		>=dev-lang/perl-5.16
-	)
-	ipv6? (
-		>=dev-perl/Socket6-0.230.0
-		>=net-firewall/iptables-1.4.20[ipv6(+)]
-		>=sys-apps/iproute2-3.8.0[ipv6(+)]
-	)
-	lite6? (
-		>=net-firewall/iptables-1.4.20[ipv6(+)]
-		>=sys-apps/iproute2-3.8.0[ipv6(+)]
-	)
-	init? ( >=sys-apps/coreutils-8.20 )
-	selinux? ( >=sec-policy/selinux-shorewall-2.20161023-r3 )
-	!net-firewall/shorewall-core
-	!net-firewall/shorewall6
-	!net-firewall/shorewall-lite
-	!net-firewall/shorewall6-lite
-	!net-firewall/shorewall-init
-	!<sys-apps/systemd-214
-"
-
-S=${WORKDIR}
-
-pkg_pretend() {
-	local CONFIG_CHECK="~NF_CONNTRACK"
-
-	local WARNING_CONNTRACK="Without NF_CONNTRACK support, you will be unable"
-	local WARNING_CONNTRACK+=" to run any shorewall-based firewall on the local system."
-
-	# kernel >=4.19 has unified NF_CONNTRACK module, bug 671176
-	if kernel_is -lt 4 19; then
-		if use ipv4 || use lite4; then
-			CONFIG_CHECK="${CONFIG_CHECK} ~NF_CONNTRACK_IPV4"
-
-			local WARNING_CONNTRACK_IPV4="Without NF_CONNTRACK_IPV4 support, you will"
-			local WARNING_CONNTRACK_IPV4+=" be unable to run any shorewall-based IPv4 firewall on the local system."
-		fi
-
-		if use ipv6 || use lite6; then
-			CONFIG_CHECK="${CONFIG_CHECK} ~NF_CONNTRACK_IPV6"
-
-			local WARNING_CONNTRACK_IPV6="Without NF_CONNTRACK_IPV6 support, you will"
-			local WARNING_CONNTRACK_IPV6+=" be unable to run any shorewall-based IPv6 firewall on the local system."
-		fi
-	fi
-
-	check_extra_config
-}
-
-pkg_setup() {
-	if [[ -n "${DIGEST}" ]]; then
-		einfo "Unsetting environment variable \"DIGEST\" to prevent conflicts with package's \"install.sh\" script ..."
-		unset DIGEST
-	fi
-}
-
-src_prepare() {
-	# We are moving each unpacked source from MY_P_* to MY_PN_*.
-	# This allows us to use patches from upstream and keeps epatch_user working
-
-	einfo "Preparing shorewallrc ..."
-	cp "${FILESDIR}"/shorewallrc-r3 "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
-	eprefixify "${S}"/shorewallrc.gentoo
-	sed -i \
-		-e "s|SERVICEDIR=tbs|SERVICEDIR=$(systemd_get_systemunitdir)|" \
-		"${S}"/shorewallrc.gentoo || die "Failed to update shorewallrc"
-
-	# shorewall-core
-	mv "${S}"/${MY_P_CORE} "${S}"/${MY_PN_CORE} || die "Failed to move '${S}/${MY_P_CORE}' to '${S}/${MY_PN_CORE}'"
-	ebegin "Applying Gentoo-specific changes to ${MY_P_CORE} ..."
-	ln -s ../shorewallrc.gentoo ${MY_PN_CORE}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
-	eend 0
-
-	pushd "${S}"/${MY_PN_CORE} &>/dev/null || die
-	eapply "${FILESDIR}"/shorewall-core-5.2.1-no-gzipped-manpages.patch
-	popd &>/dev/null || die
-
-	# shorewall
-	if use ipv4; then
-		mv "${S}"/${MY_P_IPV4} "${S}"/${MY_PN_IPV4} || die "Failed to move '${S}/${MY_P_IPV4}' to '${S}/${MY_PN_IPV4}'"
-		ebegin "Applying Gentoo-specific changes to ${MY_P_IPV4}"
-		ln -s ../shorewallrc.gentoo ${MY_PN_IPV4}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
-		cp "${FILESDIR}"/shorewall.confd-r1 "${S}"/${MY_PN_IPV4}/default.gentoo || die "Copying shorewall.confd-r1 failed"
-		cp "${FILESDIR}"/shorewall.initd-r3 "${S}"/${MY_PN_IPV4}/init.gentoo.sh || die "Copying shorewall.initd-r2 failed"
-		cp "${FILESDIR}"/shorewall.systemd "${S}"/${MY_PN_IPV4}/gentoo.service || die "Copying shorewall.systemd failed"
-		eend 0
-
-		pushd "${S}"/${MY_PN_IPV4} &>/dev/null || die
-		eapply "${FILESDIR}"/shorewall-5.2.1-no-gzipped-manpages.patch
-		popd &>/dev/null || die
-	fi
-
-	# shorewall6
-	if use ipv6; then
-		mv "${S}"/${MY_P_IPV6} "${S}"/${MY_PN_IPV6} || die "Failed to move '${S}/${MY_P_IPV6}' to '${S}/${MY_PN_IPV6}'"
-		ebegin "Applying Gentoo-specific changes to ${MY_P_IPV6}"
-		ln -s ../shorewallrc.gentoo ${MY_PN_IPV6}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
-		cp "${FILESDIR}"/shorewall.confd-r1 "${S}"/${MY_PN_IPV6}/default.gentoo || die "Copying shorewall.confd-r1 failed"
-		cp "${FILESDIR}"/shorewall.initd-r3 "${S}"/${MY_PN_IPV6}/init.gentoo.sh || die "Copying shorewall.initd-r2 failed"
-		cp "${FILESDIR}"/shorewall6.systemd "${S}"/${MY_PN_IPV6}/gentoo.service || die "Copying shorewall6.systemd failed"
-		eend 0
-
-		pushd "${S}"/${MY_PN_IPV6} &>/dev/null || die
-		eapply "${FILESDIR}"/shorewall-5.2.1-no-gzipped-manpages.patch
-		popd &>/dev/null || die
-	fi
-
-	# shorewall-lite
-	if use lite4; then
-		mv "${S}"/${MY_P_LITE4} "${S}"/${MY_PN_LITE4} || die "Failed to move '${S}/${MY_P_LITE4}' to '${S}/${MY_PN_LITE4}'"
-		ebegin "Applying Gentoo-specific changes to ${MY_P_LITE4}"
-		ln -s ../shorewallrc.gentoo ${MY_PN_LITE4}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
-		cp "${FILESDIR}"/shorewall-lite.confd-r1 "${S}"/${MY_PN_LITE4}/default.gentoo || die "Copying shorewall-lite.confd-r1 failed"
-		cp "${FILESDIR}"/shorewall-lite.initd-r3 "${S}"/${MY_PN_LITE4}/init.gentoo.sh || die "Copying shorewall-lite.initd-r2 failed"
-		cp "${FILESDIR}"/shorewall-lite.systemd "${S}"/${MY_PN_LITE4}/gentoo.service || die "Copying shorewall-lite.systemd failed"
-		eend 0
-
-		pushd "${S}"/${MY_PN_LITE4} &>/dev/null || die
-		eapply "${FILESDIR}"/shorewall-lite-5.2.1-no-gzipped-manpages.patch
-		popd &>/dev/null || die
-	fi
-
-	# shorewall6-lite
-	if use lite6; then
-		mv "${S}"/${MY_P_LITE6} "${S}"/${MY_PN_LITE6} || die "Failed to move '${S}/${MY_P_LITE6}' to '${S}/${MY_PN_LITE6}'"
-		ebegin "Applying Gentoo-specific changes to ${MY_P_LITE6}"
-		ln -s ../shorewallrc.gentoo ${MY_PN_LITE6}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
-		cp "${FILESDIR}"/shorewall-lite.confd-r1 "${S}"/${MY_PN_LITE6}/default.gentoo || die "Copying shorewall-lite.confd-r1 failed"
-		cp "${FILESDIR}"/shorewall-lite.initd-r3 "${S}"/${MY_PN_LITE6}/init.gentoo.sh || die "Copying shorewall-lite.initd-r2 failed"
-		cp "${FILESDIR}"/shorewall6-lite.systemd "${S}"/${MY_PN_LITE6}/gentoo.service || die "Copying shorewall6-lite.systemd failed"
-		eend 0
-
-		pushd "${S}"/${MY_PN_LITE6} &>/dev/null || die
-		eapply "${FILESDIR}"/shorewall-lite-5.2.1-no-gzipped-manpages.patch
-		popd &>/dev/null || die
-	fi
-
-	# shorewall-init
-	if use init; then
-		mv "${S}"/${MY_P_INIT} "${S}"/${MY_PN_INIT} || die "Failed to move '${S}/${MY_P_INIT}' to '${S}/${MY_PN_INIT}'"
-		ebegin "Applying Gentoo-specific changes to ${MY_P_INIT}"
-		ln -s ../shorewallrc.gentoo ${MY_PN_INIT}/shorewallrc.gentoo || die "Failed to symlink shorewallrc.gentoo"
-		cp "${FILESDIR}"/shorewall-init.confd "${S}"/${MY_PN_INIT}/default.gentoo || die "Copying shorewall-init.confd failed"
-		cp "${FILESDIR}"/shorewall-init.initd "${S}"/${MY_PN_INIT}/init.gentoo.sh || die "Copying shorewall-init.initd failed"
-		cp "${FILESDIR}"/shorewall-init.systemd "${S}"/${MY_PN_INIT}/gentoo.service || die "Copying shorewall-init.systemd failed"
-		cp "${FILESDIR}"/shorewall-init.readme "${S}"/${MY_PN_INIT}/shorewall-init.README.Gentoo.txt || die "Copying shorewall-init.systemd failed"
-		eend 0
-
-		eprefixify "${S}"/${MY_PN_INIT}/init.gentoo.sh
-
-		pushd "${S}"/${MY_PN_INIT} &>/dev/null || die
-		eapply -p2 "${FILESDIR}"/shorewall-init-01_remove-ipset-functionality-r2.patch
-		popd &>/dev/null || die
-	fi
-
-	# shorewall-docs-html
-	if use doc; then
-		mv "${S}"/${MY_P_DOCS} "${S}"/${MY_PN_DOCS} || die "Failed to move '${S}/${MY_P_DOCS}' to '${S}/${MY_PN_DOCS}'"
-	fi
-
-	eapply_user
-}
-
-src_configure() {
-	:;
-}
-
-src_compile() {
-	:;
-}
-
-src_install() {
-	# shorewall-core
-	einfo "Installing ${MY_P_CORE} ..."
-	DESTDIR="${ED}" ${MY_PN_CORE}/install.sh shorewallrc.gentoo || die "${MY_PN_CORE}/install.sh failed"
-	dodoc "${S}"/${MY_PN_CORE}/changelog.txt "${S}"/${MY_PN_CORE}/releasenotes.txt
-
-	# shorewall
-	if use ipv4; then
-		einfo "Installing ${MY_P_IPV4} ..."
-		DESTDIR="${ED}" ${MY_PN_IPV4}/install.sh shorewallrc.gentoo || die "${MY_PN_IPV4}/install.sh failed"
-		keepdir /var/lib/shorewall
-
-		if use doc; then
-			dodoc -r "${S}"/${MY_PN_IPV4}/Samples
-		fi
-	fi
-
-	# shorewall6
-	if use ipv6; then
-		einfo "Installing ${MY_P_IPV6} ..."
-		DESTDIR="${ED}" ${MY_PN_IPV6}/install.sh shorewallrc.gentoo || die "${MY_PN_IPV6}/install.sh failed"
-		keepdir /var/lib/shorewall6
-
-		if use doc; then
-			dodoc -r "${S}"/${MY_PN_IPV6}/Samples6
-		fi
-	fi
-
-	# shorewall-lite
-	if use lite4; then
-		einfo "Installing ${MY_P_LITE4} ..."
-		DESTDIR="${ED}" ${MY_PN_LITE4}/install.sh shorewallrc.gentoo || die "${MY_PN_LITE4}/install.sh failed"
-		keepdir /var/lib/shorewall-lite
-	fi
-
-	# shorewall6-lite
-	if use lite6; then
-		einfo "Installing ${MY_P_LITE6} ..."
-		DESTDIR="${ED}" ${MY_PN_LITE6}/install.sh shorewallrc.gentoo || die "${MY_PN_LITE6}/install.sh failed"
-		keepdir /var/lib/shorewall6-lite
-	fi
-
-	# shorewall-init
-	if use init; then
-		einfo "Installing ${MY_P_INIT} ..."
-		DESTDIR="${ED}" ${MY_PN_INIT}/install.sh shorewallrc.gentoo || die "${MY_PN_INIT}/install.sh failed"
-		dodoc "${S}"/${MY_PN_INIT}/shorewall-init.README.Gentoo.txt
-
-		if [[ -f "${ED}/etc/logrotate.d/shorewall-init" ]]; then
-			# On Gentoo, shorewall-init will not create shorewall-ifupdown.log,
-			# so we don't need a logrotate configuration file for shorewall-init
-			einfo "Removing unused \"${ED}/etc/logrotate.d/shorewall-init\" ..."
-			rm -rf "${ED}"/etc/logrotate.d/shorewall-init || die "Removing \"${ED}/etc/logrotate.d/shorewall-init\" failed"
-		fi
-
-		if [[ -d "${ED}/etc/NetworkManager" ]]; then
-			# On Gentoo, we don't support NetworkManager
-			# so we don't need this folder at all
-			einfo "Removing unused \"${ED}/etc/NetworkManager\" ..."
-			rm -rf "${ED}"/etc/NetworkManager || die "Removing \"${ED}/etc/NetworkManager\" failed"
-		fi
-
-		if [[ -f "${ED}/usr/share/shorewall-init/ifupdown" ]]; then
-			# This script isn't supported on Gentoo
-			rm -rf "${ED}"/usr/share/shorewall-init/ifupdown || die "Removing \"${ED}/usr/share/shorewall-init/ifupdown\" failed"
-		fi
-	fi
-
-	if use doc; then
-		einfo "Installing ${MY_P_DOCS} ..."
-		docinto html && dodoc -r "${S}"/${MY_PN_DOCS}/*
-	fi
-}
-
-pkg_postinst() {
-	if [[ -z "${REPLACING_VERSIONS}" ]]; then
-		# This is a new installation
-
-		# Show first steps for shorewall/shorewall6
-		local _PRODUCTS=""
-		if use ipv4; then
-			_PRODUCTS="shorewall"
-
-			if use ipv6; then
-				_PRODUCTS="${_PRODUCTS}/shorewall6"
-			fi
-		fi
-
-		if [[ -n "${_PRODUCTS}" ]]; then
-			elog "Before you can use ${_PRODUCTS}, you need to edit its configuration in:"
-			elog ""
-			elog "  /etc/shorewall/shorewall.conf"
-
-			if use ipv6; then
-				elog "  /etc/shorewall6/shorewall6.conf"
-			fi
-
-			elog ""
-			elog "To activate your shorewall-based firewall on system start, please add ${_PRODUCTS} to your default runlevel:"
-			elog ""
-			elog "  # rc-update add shorewall default"
-
-			if use ipv6; then
-				elog "  # rc-update add shorewall6 default"
-			fi
-		fi
-
-		# Show first steps for shorewall-lite/shorewall6-lite
-		_PRODUCTS=""
-		if use lite4; then
-			_PRODUCTS="shorewall-lite"
-		fi
-
-		if use lite6; then
-			if [[ -z "${_PRODUCTS}" ]]; then
-				_PRODUCTS="shorewall6-lite"
-			else
-				_PRODUCTS="${_PRODUCTS}/shorewall6-lite"
-			fi
-		fi
-
-		if [[ -n "${_PRODUCTS}" ]]; then
-			if use ipv4; then
-				elog ""
-			fi
-
-			elog "Before you can use ${_PRODUCTS}, you need to provide a configuration, which you can"
-			elog "create using ${CATEGORY}/shorewall (with \"ipv4\" and or \"ipv6\" USE flag)."
-			elog ""
-			elog "To read more about ${_PRODUCTS}, please visit"
-			elog "  https://shorewall.org/CompiledPrograms.html"
-			elog ""
-			elog "To activate your shorewall-lite-based firewall on system start, please add ${PRODUCTS} to your default runlevel:"
-			elog ""
-
-			if use lite4; then
-				elog "  # rc-update add shorewall-lite default"
-			fi
-
-			if use lite6; then
-				elog "  # rc-update add shorewall6-lite default"
-			fi
-		fi
-
-		if use init; then
-			elog ""
-			elog "To secure your system on boot, please add shorewall-init to your boot runlevel:"
-			elog ""
-			elog "  # rc-update add shorewall-init boot"
-			elog ""
-			elog "and review \$PRODUCTS in"
-			elog ""
-			elog "  /etc/conf.d/shorewall-init"
-		fi
-
-	fi
-
-	if ver_replacing -lt ${MY_MAJOR_RELEASE_NUMBER}; then
-		# This is an upgrade
-
-		elog "You are upgrading from a previous major version. It is highly recommended that you read"
-		elog ""
-		elog "  - /usr/share/doc/shorewall*/releasenotes.tx*"
-		elog "  - https://shorewall.org/Shorewall-5.html#idm214"
-
-		if use ipv4; then
-			elog ""
-			elog "You can auto-migrate your configuration using"
-			elog ""
-			elog "  # shorewall update -A"
-
-			if use ipv6; then
-				elog "  # shorewall6 update -A"
-			fi
-
-			elog ""
-			elog "*after* you have merged the changed files using one of the configuration"
-			elog "files update tools of your choice (dispatch-conf, etc-update...)."
-
-			elog ""
-			elog "But if you are not familiar with the \"shorewall[6] update\" command,"
-			elog "please read the shorewall[6] man page first."
-		fi
-	fi
-
-	if ! use init; then
-		elog ""
-		elog "Consider emerging ${CATEGORY}/${PN} with USE flag \"init\" to secure your system on boot"
-		elog "before your shorewall-based firewall is ready to start."
-		elog ""
-		elog "To read more about shorewall-init, please visit"
-		elog "  https://shorewall.org/Shorewall-init.html"
-	fi
-
-	if ! has_version "net-firewall/conntrack-tools"; then
-		elog ""
-		elog "Your Shorewall firewall can utilize \"conntrack\" from the \"net-firewall/conntrack-tools\""
-		elog "package. if you want to use this feature, you need to install \"net-firewall/conntrack-tools\"!"
-	fi
-
-	if ! has_version "dev-perl/Devel-NYTProf"; then
-		elog ""
-		elog "If you want to profile your Shorewall firewall you need to install \"dev-perl/Devel-NYTProf\"!"
-	fi
-}
diff --git a/net-firewall/ufw/Manifest b/net-firewall/ufw/Manifest
deleted file mode 100644
index 4385c3a573cf..000000000000
--- a/net-firewall/ufw/Manifest
+++ /dev/null
@@ -1 +0,0 @@
-DIST ufw-0.36.2.tar.gz 592562 BLAKE2B 630f80a18fdc462fbd91e61f4af496ad613b52ae6eef3e16558db9affcbcaedb5077e5d84fc6580175ec7358563cbb98612176fe570e0d03fdc1683766729e90 SHA512 43c5f31c98681e006b821f30e3d729eec0bbe21eeea833916b6ab18899201e5e243e5077ace32480b2a222b69b2c383ff95b7a50241053d025d68f34c25cd60b
diff --git a/net-firewall/ufw/files/rsyslog/ufw.logrotate b/net-firewall/ufw/files/rsyslog/ufw.logrotate
deleted file mode 100644
index f88ca8265bea..000000000000
--- a/net-firewall/ufw/files/rsyslog/ufw.logrotate
+++ /dev/null
@@ -1,13 +0,0 @@
-/var/log/ufw.log
-{
-	rotate 5
-	weekly
-	missingok
-	notifempty
-	compress
-	delaycompress
-	sharedscripts
-	postrotate
-		/etc/init.d/rsyslog reload >/dev/null 2>&1 || true
-	endscript
-}
diff --git a/net-firewall/ufw/files/syslog-ng/syslog-ng.example b/net-firewall/ufw/files/syslog-ng/syslog-ng.example
deleted file mode 100644
index 41f7ce39cef7..000000000000
--- a/net-firewall/ufw/files/syslog-ng/syslog-ng.example
+++ /dev/null
@@ -1,13 +0,0 @@
-# This is an example rule for app-admin/syslog-ng to separate ufw logs
-# from /var/log/messages.
-# Place those lines before "log" entries in /etc/syslog-ng/syslog-ng.conf.
-
-filter f_ufw { match("\\[UFW " value("MESSAGE")); };
-destination ufwfile { file("/var/log/ufw.log"); };
-log {
-	source(src);
-	filter(f_ufw);
-	destination(ufwfile);
-	destination(console_all);
-	flags(final);
-};
diff --git a/net-firewall/ufw/files/syslog-ng/ufw.logrotate b/net-firewall/ufw/files/syslog-ng/ufw.logrotate
deleted file mode 100644
index 5080aa1bfa38..000000000000
--- a/net-firewall/ufw/files/syslog-ng/ufw.logrotate
+++ /dev/null
@@ -1,12 +0,0 @@
-# logrotate snippet for ufw
-# requires app-admin/syslog-ng
-# copy the file into /etc/logrotate.d
-/var/log/ufw.log {
-    missingok
-    rotate 5
-    notifempty
-    sharedscripts
-    postrotate
-        /etc/init.d/syslog-ng reload > /dev/null 2>&1 || true
-    endscript
-}
diff --git a/net-firewall/ufw/files/ufw-0.36-bash-completion.patch b/net-firewall/ufw/files/ufw-0.36-bash-completion.patch
deleted file mode 100644
index 927af244eef1..000000000000
--- a/net-firewall/ufw/files/ufw-0.36-bash-completion.patch
+++ /dev/null
@@ -1,16 +0,0 @@
---- a/shell-completion/bash	2018-12-14 21:25:55.000000000 +0300
-+++ b/shell-completion/bash	2019-03-21 01:26:46.152181981 +0300
-@@ -57,7 +57,6 @@
-     echo "numbered verbose"
- }
- 
--_have ufw &&
- _ufw()
- {
-     cur=${COMP_WORDS[COMP_CWORD]}
-@@ -91,4 +90,4 @@
-     fi
- }
- 
--_have ufw && complete -F _ufw ufw
-+complete -F _ufw ufw
diff --git a/net-firewall/ufw/files/ufw-0.36.1-distutils.patch b/net-firewall/ufw/files/ufw-0.36.1-distutils.patch
deleted file mode 100644
index fe7ab3845058..000000000000
--- a/net-firewall/ufw/files/ufw-0.36.1-distutils.patch
+++ /dev/null
@@ -1,14 +0,0 @@
-https://src.fedoraproject.org/rpms/ufw/raw/rawhide/f/ufw-0.35-distutils-setuptools.patch
---- a/setup.py
-+++ b/setup.py
-@@ -26,8 +26,8 @@
- #
- 
- from __future__ import print_function
--from distutils.command.install import install as _install
--from distutils.core import setup
-+from setuptools.command.install import install as _install
-+from setuptools import setup
- import errno
- import os
- import re
diff --git a/net-firewall/ufw/files/ufw-0.36.1-dont-check-iptables.patch b/net-firewall/ufw/files/ufw-0.36.1-dont-check-iptables.patch
deleted file mode 100644
index ae0c95525a46..000000000000
--- a/net-firewall/ufw/files/ufw-0.36.1-dont-check-iptables.patch
+++ /dev/null
@@ -1,50 +0,0 @@
---- a/setup.py    2022-06-27 17:33:18.043794598 +0300
-+++ b/setup.py    2022-06-27 18:15:18.384463926 +0300
-@@ -256,46 +256,7 @@
- os.unlink(os.path.join('staging', 'ufw-init'))
- os.unlink(os.path.join('staging', 'ufw-init-functions'))
-
--iptables_exe = ''
--iptables_dir = ''
--
--for e in ['iptables']:
--    # Historically iptables was in /sbin, then later also symlinked from
--    # /usr/sbin/iptables to /sbin/iptables. Debian bullseye moves iptables
--    # to /usr/sbin with no symlink in /sbin except on upgrades. To accomodate
--    # buildds that may still have the old iptables, search /usr/sbin first
--    for dir in ['/usr/sbin', '/sbin', '/usr/bin', '/bin', '/usr/local/sbin', \
--                '/usr/local/bin']:
--        if e == "iptables":
--            if os.path.exists(os.path.join(dir, e)):
--                iptables_dir = dir
--                iptables_exe = os.path.join(iptables_dir, "iptables")
--                print("Found '%s'" % iptables_exe)
--            else:
--                continue
--
--        if iptables_exe != "":
--            break
--
--
--if iptables_exe == '':
--    print("ERROR: could not find required binary 'iptables'", file=sys.stderr)
--    sys.exit(1)
--
--for e in ['ip6tables', 'iptables-restore', 'ip6tables-restore']:
--    if not os.path.exists(os.path.join(iptables_dir, e)):
--        print("ERROR: could not find required binary '%s'" % (e), file=sys.stderr)
--        sys.exit(1)
--
--(rc, out) = cmd([iptables_exe, '-V'])
--if rc != 0:
--    raise OSError(errno.ENOENT, "Could not find version for '%s'" % \
--                  (iptables_exe))
--version = re.sub('^v', '', re.split('\s', str(out))[1])
--print("Found '%s' version '%s'" % (iptables_exe, version))
--if version < "1.4":
--    print("WARN: version '%s' has limited IPv6 support. See README for details." % (version), file=sys.stderr)
--
-+iptables_dir = '/sbin'
- setup (name='ufw',
-       version=ufw_version,
-       description='front-end for Linux firewalling',
diff --git a/net-firewall/ufw/files/ufw-0.36.1-move-path.patch b/net-firewall/ufw/files/ufw-0.36.1-move-path.patch
deleted file mode 100644
index 8ace1edc1166..000000000000
--- a/net-firewall/ufw/files/ufw-0.36.1-move-path.patch
+++ /dev/null
@@ -1,124 +0,0 @@
---- a/doc/ufw-framework.8     2021-09-19 04:19:03.000000000 +0300
-+++ b/doc/ufw-framework.8     2022-06-27 17:14:11.292890569 +0300
-@@ -18,7 +18,7 @@
- parameters and configuration of IPv6. The framework consists of the following
- files:
- .TP
--#STATE_PREFIX#/ufw\-init
-+#SHARE_DIR#/ufw\-init
- initialization script
- .TP
- #CONFIG_PREFIX#/ufw/before.init
-@@ -47,7 +47,7 @@
-
- .SH "BOOT INITIALIZATION"
- .PP
--\fBufw\fR is started on boot with #STATE_PREFIX#/ufw\-init. This script is a
-+\fBufw\fR is started on boot with #SHARE_DIR#/ufw\-init. This script is a
- standard SysV style initscript used by the \fBufw\fR command and should not be
- modified. The #CONFIG_PREFIX#/before.init and #CONFIG_PREFIX#/after.init
- scripts may be used to perform any additional firewall configuration that is
---- a/setup.py    2021-09-19 04:19:01.000000000 +0300
-+++ b/setup.py    2022-06-27 17:33:18.043794598 +0300
-@@ -54,7 +54,7 @@
-             return
-
-         real_confdir = os.path.join('/etc')
--        real_statedir = os.path.join('/lib', 'ufw')
-+        real_statedir = os.path.join('/etc', 'ufw', 'user')
-         real_prefix = self.prefix
-         if self.home != None:
-             real_confdir = self.home + real_confdir
-@@ -131,14 +131,20 @@
-         self.copy_file('doc/ufw.8', manpage)
-         self.copy_file('doc/ufw-framework.8', manpage_f)
-
--        # Install state files and helper scripts
-+        # Install state files
-         statedir = real_statedir
-         if self.root != None:
-             statedir = self.root + real_statedir
-         self.mkpath(statedir)
-
--        init_helper = os.path.join(statedir, 'ufw-init')
--        init_helper_functions = os.path.join(statedir, 'ufw-init-functions')
-+        # Install helper scripts
-+        sharedir = real_sharedir
-+        if self.root != None:
-+            sharedir = self.root + real_sharedir
-+        self.mkpath(sharedir)
-+
-+        init_helper = os.path.join(sharedir, 'ufw-init')
-+        init_helper_functions = os.path.join(sharedir, 'ufw-init-functions')
-         self.copy_file('src/ufw-init', init_helper)
-         self.copy_file('src/ufw-init-functions', init_helper_functions)
-
-@@ -219,14 +225,19 @@
-                              f])
-
-             subprocess.call(["sed",
-+                              "-i",
-+                             "s%#SHARE_DIR#%" + real_sharedir + "%g",
-+                             f])
-+
-+            subprocess.call(["sed",
-                              "-i",
-                              "s%#VERSION#%" + ufw_version + "%g",
-                              f])
-
-         # Install pristine copies of rules files
--        sharedir = real_sharedir
--        if self.root != None:
--            sharedir = self.root + real_sharedir
-+        #sharedir = real_sharedir
-+        #if self.root != None:
-+        #    sharedir = self.root + real_sharedir
-         rulesdir = os.path.join(sharedir, 'iptables')
-         self.mkpath(rulesdir)
-         for f in [ before_rules, after_rules, \
---- a/src/backend_iptables.py    2021-09-19 04:19:01.000000000 +0300
-+++ b/src/backend_iptables.py    2022-06-27 17:44:24.880445896 +0300
-@@ -37,6 +37,8 @@
-
-         files = {}
-         config_dir = _findpath(ufw.common.config_dir, datadir)
-+        state_dir = _findpath(ufw.common.state_dir, datadir)
-+        share_dir = _findpath(ufw.common.share_dir, datadir)
-
-         files['rules'] = os.path.join(config_dir, 'ufw/user.rules')
-         files['before_rules'] = os.path.join(config_dir, 'ufw/before.rules')
-@@ -48,8 +50,7 @@
-         # the lock files (ufw.common.state_dir, aka /lib/ufw), but when set,
-         # ufw-init is in rootdir/lib/ufw (ro) and the lockfiles in
-         # datadir/lib/ufw (rw)
--        files['init'] = os.path.join(_findpath(ufw.common.state_dir, rootdir),
--                                     'ufw-init')
-+        files['init'] = os.path.join(share_dir, 'ufw-init')
-
-         ufw.backend.UFWBackend.__init__(self, "iptables", dryrun, files,
-                                         rootdir=rootdir, datadir=datadir)
---- a/src/ufw-init    2021-09-19 03:50:19.000000000 +0300
-+++ b/src/ufw-init    2022-06-27 17:48:34.352545026 +0300
-@@ -31,10 +31,10 @@
- fi
- export DATA_DIR="$datadir"
-
--if [ -s "${rootdir}#STATE_PREFIX#/ufw-init-functions" ]; then
--    . "${rootdir}#STATE_PREFIX#/ufw-init-functions"
-+if [ -s "${rootdir}#SHARE_DIR#/ufw-init-functions" ]; then
-+    . "${rootdir}#SHARE_DIR#/ufw-init-functions"
- else
--    echo "Could not find ${rootdir}#STATE_PREFIX#/ufw-init-functions (aborting)"
-+    echo "Could not find ${rootdir}#SHARE_DIR#/ufw-init-functions (aborting)"
-     exit 1
- fi
-
-@@ -83,7 +83,7 @@
-     fi
-     ;;
- *)
--    echo "Usage: #STATE_PREFIX#/ufw-init {start|stop|restart|force-reload|force-stop|flush-all|status}"
-+    echo "Usage: #SHARE_DIR#/ufw-init {start|stop|restart|force-reload|force-stop|flush-all|status}"
-     exit 1
-     ;;
- esac
diff --git a/net-firewall/ufw/files/ufw-0.36.1-shebang.patch b/net-firewall/ufw/files/ufw-0.36.1-shebang.patch
deleted file mode 100644
index aaafaac12ae9..000000000000
--- a/net-firewall/ufw/files/ufw-0.36.1-shebang.patch
+++ /dev/null
@@ -1,15 +0,0 @@
---- a/setup.py	2019-03-21 01:51:55.751971770 +0300
-+++ b/setup.py	2019-03-21 01:54:40.142513567 +0300
-@@ -121,12 +121,6 @@
-         for f in [ script, manpage, manpage_f ]:
-             self.mkpath(os.path.dirname(f))
-
--        # update the interpreter to that of the one the user specified for setup
--        print("Updating staging/ufw to use %s" % (sys.executable))
--        subprocess.call(["sed",
--                         "-i",
--                         "1s%^#.*python.*%#! /usr/bin/env " + sys.executable + "%g",
--                         'staging/ufw'])
-         self.copy_file('staging/ufw', script)
-         self.copy_file('doc/ufw.8', manpage)
-         self.copy_file('doc/ufw-framework.8', manpage_f)
diff --git a/net-firewall/ufw/files/ufw-2.initd b/net-firewall/ufw/files/ufw-2.initd
deleted file mode 100644
index bccd83ddb3a2..000000000000
--- a/net-firewall/ufw/files/ufw-2.initd
+++ /dev/null
@@ -1,136 +0,0 @@
-#!/sbin/openrc-run
-# Copyright 1999-2012 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-
-depend() {
-	before net
-	provide firewall
-}
-
-start() {
-	ebegin "Starting ufw"
-	_source_file || { eend $?; return $?; }
-
-	local enabled_in_cfg ret
-	_check_if_enabled_in_cfg
-	enabled_in_cfg=$?
-
-	# Avoid "Firewall already started, use 'force-reload'" message that
-	# appears if `ufw enable' had been run before start().
-	if _status_quiet; then
-		eend 0
-		return
-	fi
-
-	# The ufw_start function does the same: if ufw is disabled using `ufw disable',
-	# ufw_start would not start ufw and return 0, so let's handle this case.
-	case $enabled_in_cfg in
-	0)
-		ufw_start
-		ret=$?
-		eend $ret "Failed to start ufw."
-		;;
-	1)
-		# see /etc/conf.d/<name>
-		if [ "${ufw_nonfatal_if_disabled:-no}" != "yes" ]; then
-			ret=1
-			eend $ret "Not starting firewall (not enabled), use \"ufw enable\" first."
-		else
-			ret=0
-			eend 0
-		fi
-		;;
-	2)
-		ret=1
-		eend $ret "Failed to start ufw."
-		;;
-	esac
-
-	return $ret
-}
-
-stop() {
-	ebegin "Stopping ufw"
-	_source_file || { eend $?; return $?; }
-	local enabled_in_cfg ret
-	_check_if_enabled_in_cfg
-	enabled_in_cfg=$?
-
-	# Same as above (unless --force is passed to ufw_stop).
-	case $enabled_in_cfg in
-	0)
-		ufw_stop
-		ret=$?
-		;;
-	1)
-		einfo "INFO: ufw is configured to be disabled"
-		ufw_stop --force
-		ret=$?
-		;;
-	2)
-		ret=1
-		;;
-	esac
-
-	eend $ret "Failed to stop ufw."
-	return $ret
-}
-
-_status_quiet() {
-	# return values: 0 - started, 1 - stopped, 2 - error
-	# Does not execute _source_file.
-	local ret
-	ufw_status > /dev/null
-	ret=$?
-	# Return values for ufw_status come from /usr/share/ufw/ufw-init-functions.
-	case $ret in
-	0) return 0 ;;
-	3) return 1 ;;
-	*) return 2 ;;
-	esac
-}
-
-_source_file() {
-	local sourced_f="/usr/share/ufw/ufw-init-functions"
-	if [ ! -f "$sourced_f" ]; then
-		eerror "Cannot find file $sourced_f!"
-		return 1
-	fi
-
-	local _path=$PATH
-	if ! . "$sourced_f"; then
-		# PATH can be broken here, fix it...
-		PATH=$_path
-		eerror "Error sourcing file $sourced_f"
-		return 1
-	fi
-
-	if [ -z "$PATH" ]; then
-		PATH=$_path
-	else
-		PATH="${PATH}:${_path}"
-	fi
-	return 0
-}
-
-_check_if_enabled_in_cfg() {
-	# Check if user has enabled the firewall with "ufw enable".
-	# Return 0 if firewall enabled in configuration file, 1 otherwise, 2 on error.
-
-	local sourced_f="/etc/ufw/ufw.conf"
-	if [ ! -f "$sourced_f" ]; then
-		eerror "Cannot find file $sourced_f!"
-		return 2
-	fi
-
-	if ! . "$sourced_f"; then
-		eerror "Error sourcing file $sourced_f"
-		return 2
-	fi
-
-	if [ "$ENABLED" = "yes" ] || [ "$ENABLED" = "YES" ]; then
-		return 0
-	else
-		return 1
-	fi
-}
diff --git a/net-firewall/ufw/files/ufw.confd b/net-firewall/ufw/files/ufw.confd
deleted file mode 100644
index 900d3bf67bd4..000000000000
--- a/net-firewall/ufw/files/ufw.confd
+++ /dev/null
@@ -1,5 +0,0 @@
-# If equals to "yes", warnings that firewall is disabled
-# (using `ufw disable') will be suppressed and the service
-# will be considered started.
-# Default if unset or another value is "no".
-ufw_nonfatal_if_disabled=no
diff --git a/net-firewall/ufw/files/ufw.service b/net-firewall/ufw/files/ufw.service
deleted file mode 100644
index 9d6972036a05..000000000000
--- a/net-firewall/ufw/files/ufw.service
+++ /dev/null
@@ -1,15 +0,0 @@
-[Unit]
-Description=Uncomplicated Firewall
-DefaultDependencies=no
-Before=network.target sysinit.target
-After=systemd-sysctl.service
-ConditionPathExists=|/etc/ufw/ufw.conf
-
-[Service]
-Type=oneshot
-RemainAfterExit=yes
-ExecStart=/usr/share/ufw/ufw-init start
-ExecStop=/usr/share/ufw/ufw-init stop
-
-[Install]
-WantedBy=multi-user.target
\ No newline at end of file
diff --git a/net-firewall/ufw/metadata.xml b/net-firewall/ufw/metadata.xml
deleted file mode 100644
index c6e19133939d..000000000000
--- a/net-firewall/ufw/metadata.xml
+++ /dev/null
@@ -1,19 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <use>
-    <flag name="examples">Example ufw config files</flag>
-    <flag name="ipv6">IPv6 support for iptables</flag>
-  </use>
-  <longdescription lang="en">
-	The Uncomplicated Firewall (ufw) is a frontend for iptables and is
-	particularly well-suited for host-based firewalls. It provides a framework
-	for managing netfilter, as well as an easy to use command-line interface for
-	manipulating the firewall.
-	</longdescription>
-  <stabilize-allarches />
-  <upstream>
-    <remote-id type="launchpad">ufw</remote-id>
-  </upstream>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/ufw/ufw-0.36.2.ebuild b/net-firewall/ufw/ufw-0.36.2.ebuild
deleted file mode 100644
index c505b62ca88b..000000000000
--- a/net-firewall/ufw/ufw-0.36.2.ebuild
+++ /dev/null
@@ -1,220 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-PYTHON_COMPAT=( python3_{13..14} )
-inherit bash-completion-r1 eapi9-ver edo linux-info python-single-r1 systemd
-
-DESCRIPTION="A program used to manage a netfilter firewall"
-HOMEPAGE="https://launchpad.net/ufw"
-SRC_URI="https://launchpad.net/ufw/${PV%.*}/${PV}/+download/${P}.tar.gz"
-
-LICENSE="GPL-3"
-SLOT="0"
-KEYWORDS="amd64 ~arm arm64 ~loong ppc ppc64 ~riscv ~sparc x86"
-IUSE="examples ipv6"
-REQUIRED_USE="${PYTHON_REQUIRED_USE}"
-# bug #957559
-RESTRICT="test"
-
-RDEPEND="
-	${PYTHON_DEPS}
-	net-firewall/iptables[ipv6(+)?]
-"
-BDEPEND="
-	$(python_gen_cond_dep '
-		dev-python/setuptools[${PYTHON_USEDEP}]
-	')
-	sys-devel/gettext
-"
-
-PATCHES=(
-	# Move files away from /lib/ufw.
-	"${FILESDIR}/${PN}-0.36.1-move-path.patch"
-	# Remove unnecessary build time dependency on net-firewall/iptables.
-	"${FILESDIR}/${PN}-0.36.1-dont-check-iptables.patch"
-	# Remove shebang modification.
-	"${FILESDIR}/${PN}-0.36.1-shebang.patch"
-	# Fix bash completions, bug #526300
-	"${FILESDIR}/${PN}-0.36-bash-completion.patch"
-	# Strip distutils use
-	"${FILESDIR}/${PN}-0.36.1-distutils.patch"
-)
-
-pkg_pretend() {
-	local CONFIG_CHECK="~PROC_FS
-		~NETFILTER_XT_MATCH_COMMENT ~NETFILTER_XT_MATCH_HL
-		~NETFILTER_XT_MATCH_LIMIT ~NETFILTER_XT_MATCH_MULTIPORT
-		~NETFILTER_XT_MATCH_RECENT ~NETFILTER_XT_MATCH_STATE"
-
-	if kernel_is -ge 2 6 39; then
-		CONFIG_CHECK+=" ~NETFILTER_XT_MATCH_ADDRTYPE"
-	else
-		CONFIG_CHECK+=" ~IP_NF_MATCH_ADDRTYPE"
-	fi
-
-	# https://bugs.launchpad.net/ufw/+bug/1076050
-	if kernel_is -ge 3 4; then
-		CONFIG_CHECK+=" ~NETFILTER_XT_TARGET_LOG"
-	else
-		CONFIG_CHECK+=" ~IP_NF_TARGET_LOG"
-		use ipv6 && CONFIG_CHECK+=" ~IP6_NF_TARGET_LOG"
-	fi
-
-	CONFIG_CHECK+=" ~IP_NF_TARGET_REJECT"
-	use ipv6 && CONFIG_CHECK+=" ~IP6_NF_TARGET_REJECT"
-
-	check_extra_config
-
-	# Check for default, useful optional features.
-	if ! linux_config_exists; then
-		ewarn "Cannot determine configuration of your kernel."
-		return
-	fi
-
-	local nf_nat_ftp_ok="yes"
-	local nf_conntrack_ftp_ok="yes"
-	local nf_conntrack_netbios_ns_ok="yes"
-
-	linux_chkconfig_present \
-		NF_NAT_FTP || nf_nat_ftp_ok="no"
-	linux_chkconfig_present \
-		NF_CONNTRACK_FTP || nf_conntrack_ftp_ok="no"
-	linux_chkconfig_present \
-		NF_CONNTRACK_NETBIOS_NS || nf_conntrack_netbios_ns_ok="no"
-
-	# This is better than an essay for each unset option...
-	if [[ "${nf_nat_ftp_ok}" == "no" ]] || \
-	   [[ "${nf_conntrack_ftp_ok}" == "no" ]] || \
-	   [[ "${nf_conntrack_netbios_ns_ok}" == "no" ]]; then
-		echo
-		local mod_msg="Kernel options listed below are not set. They are not"
-		mod_msg+=" mandatory, but they are often useful."
-		mod_msg+=" If you don't need some of them, please remove relevant"
-		mod_msg+=" module name(s) from IPT_MODULES in"
-		mod_msg+=" '${EROOT}/etc/default/ufw' before (re)starting ufw."
-		mod_msg+=" Otherwise ufw may fail to start!"
-		ewarn "${mod_msg}"
-		if [[ "${nf_nat_ftp_ok}" == "no" ]]; then
-			ewarn "NF_NAT_FTP: for better support for active mode FTP."
-		fi
-		if [[ "${nf_conntrack_ftp_ok}" == "no" ]]; then
-			ewarn "NF_CONNTRACK_FTP: for better support for active mode FTP."
-		fi
-		if [[ "${nf_conntrack_netbios_ns_ok}" == "no" ]]; then
-			ewarn "NF_CONNTRACK_NETBIOS_NS: for better Samba support."
-		fi
-	fi
-}
-
-src_prepare() {
-	default
-
-	# Set as enabled by default. User can enable or disable
-	# the service by adding or removing it to/from a runlevel.
-	sed -i 's/^ENABLED=no/ENABLED=yes/' conf/ufw.conf \
-		|| die "sed failed (ufw.conf)"
-
-	sed -i "s/^IPV6=yes/IPV6=$(usex ipv6)/" conf/ufw.defaults || die
-
-	# If LINGUAS is set install selected translations only.
-	if [[ -n ${LINGUAS+set} ]]; then
-		_EMPTY_LOCALE_LIST="yes"
-		pushd locales/po > /dev/null || die
-
-		local lang
-		for lang in *.po; do
-			if ! has "${lang%.po}" ${LINGUAS}; then
-				rm "${lang}" || die
-			else
-				_EMPTY_LOCALE_LIST="no"
-			fi
-		done
-
-		popd > /dev/null || die
-	else
-		_EMPTY_LOCALE_LIST="no"
-	fi
-}
-
-src_compile() {
-	edo ${EPYTHON} setup.py build
-}
-
-src_install() {
-	edo ${EPYTHON} setup.py install --prefix="${EPREFIX}/usr" --root="${D}"
-	python_fix_shebang "${ED}"
-	python_optimize
-	einstalldocs
-
-	newconfd "${FILESDIR}"/ufw.confd ufw
-	newinitd "${FILESDIR}"/ufw-2.initd ufw
-	systemd_dounit "${FILESDIR}/ufw.service"
-
-	pushd "${ED}" || die
-	chmod -R 0644 etc/ufw/*.rules || die
-	popd || die
-
-	exeinto /usr/share/${PN}
-	doexe tests/check-requirements
-
-	# users normally would want it
-	insinto "/usr/share/doc/${PF}/logging/syslog-ng"
-	doins -r "${FILESDIR}"/syslog-ng/*
-
-	insinto "/usr/share/doc/${PF}/logging/rsyslog"
-	doins -r "${FILESDIR}"/rsyslog/*
-	doins doc/rsyslog.example
-
-	if use examples; then
-		insinto "/usr/share/doc/${PF}/examples"
-		doins -r examples/*
-	fi
-	newbashcomp shell-completion/bash "${PN}"
-
-	[[ ${_EMPTY_LOCALE_LIST} != "yes" ]] && domo locales/mo/*.mo
-}
-
-pkg_postinst() {
-	local found=()
-	local apps=( "net-firewall/arno-iptables-firewall"
-		"net-firewall/ferm"
-		"net-firewall/firehol"
-		"net-firewall/firewalld"
-		"net-firewall/ipkungfu" )
-
-	for exe in "${apps[@]}"
-	do
-		if has_version "${exe}"; then
-			found+=( "${exe}" )
-		fi
-	done
-
-	if [[ -n ${found} ]]; then
-		echo ""
-		ewarn "WARNING: Detected other firewall applications:"
-		ewarn "${found[@]}"
-		ewarn "If enabled, these applications may interfere with ufw!"
-	fi
-
-	if [[ -z ${REPLACING_VERSIONS} ]]; then
-		echo ""
-		elog "To enable ufw, add it to boot sequence and activate it:"
-		elog "-- # rc-update add ufw boot"
-		elog "-- # /etc/init.d/ufw start"
-		echo
-		elog "If you want to keep ufw logs in a separate file, take a look at"
-		elog "/usr/share/doc/${PF}/logging."
-	fi
-	if [[ -z ${REPLACING_VERSIONS} ]] || ver_replacing -lt 0.34; then
-		echo
-		elog "/usr/share/ufw/check-requirements script is installed."
-		elog "It is useful for debugging problems with ufw. However one"
-		elog "should keep in mind that the script assumes IPv6 is enabled"
-		elog "on kernel and net-firewall/iptables, and fails when it's not."
-	fi
-	echo
-	ewarn "Note: once enabled, ufw blocks also incoming SSH connections by"
-	ewarn "default. See README, Remote Management section for more information."
-}
diff --git a/net-firewall/xtables-addons/Manifest b/net-firewall/xtables-addons/Manifest
deleted file mode 100644
index 792a4870f63e..000000000000
--- a/net-firewall/xtables-addons/Manifest
+++ /dev/null
@@ -1,3 +0,0 @@
-DIST xtables-addons-3.27.tar.xz 340360 BLAKE2B 5b82069e21464bc293d76c6cd298e6beafdda57bc07582be64d7ff9a5511741bd1acd9a54a7b1caa08631d108a17b51dc7e7c2926003e6a893b1df0f6b360b62 SHA512 1938342914c24621743d0460e4057ffa6d3b6d01f3d0ca5feaa3852675f18c309f57fcb73725972d4aa87b7da92667efffa16e203f4cd1362cb8bb03a116636a
-DIST xtables-addons-3.28.tar.xz 340112 BLAKE2B ee4455e3f57549c7dfcf3871782617e22806d5862d22a791aca9579188e735d070504caaf72b4ceaa516a4a77c809cd6cb12c964214a56d9df0a3ba047683b81 SHA512 11d7ffc62d41d9f86c51a0c35fb4bc91581e8c4f2fb8e0c6309ea1381a8bd5567612dbcdfed041bfeed300bfe19fd7f36d9af0d4c76d36b2275fa840cfa5342d
-DIST xtables-addons-3.29.tar.xz 342356 BLAKE2B 632b8a4b11b5365b7a9e08277374c5b74c0cf56e3783e3cf63764139b03b36973e20c6a27e7a6336cf72d8cf5a2c00f61daf83ceb5eba536a7d52d13e0a70d74 SHA512 48264f3a555d7ba6fc404154e2a0d84b8551a28c9e0cbeff44f3dc419cff46a250e10482ce8b256545bbde2ddec6b11183dc2f7f7396f8ed3cd12c99ff69d2e7
diff --git a/net-firewall/xtables-addons/metadata.xml b/net-firewall/xtables-addons/metadata.xml
deleted file mode 100644
index 40e5ddeb4bd6..000000000000
--- a/net-firewall/xtables-addons/metadata.xml
+++ /dev/null
@@ -1,14 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE pkgmetadata SYSTEM "https://docs.baldeagleos.com/dtd/metadata.dtd">
-<pkgmetadata>
-  <longdescription>
-	Xtables-addons is the successor to patch-o-matic(-ng). Likewise, it contains
-	extensions that were not, or are not yet, accepted in the main kernel/iptables
-	packages.
-
-	Xtables-addons is different from patch-o-matic in that you do not have to patch
-	or recompile the kernel, sometimes recompiling iptables is also not needed. But
-	please see the INSTALL file for the minimum requirements of this package.
-	</longdescription>
-  <origin>baldeagleos-repo</origin>
-</pkgmetadata>
diff --git a/net-firewall/xtables-addons/xtables-addons-3.27.ebuild b/net-firewall/xtables-addons/xtables-addons-3.27.ebuild
deleted file mode 100644
index 45cae44b7c2b..000000000000
--- a/net-firewall/xtables-addons/xtables-addons-3.27.ebuild
+++ /dev/null
@@ -1,116 +0,0 @@
-# Copyright 2023-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-MODULES_OPTIONAL_IUSE="+modules"
-inherit flag-o-matic linux-mod-r1 toolchain-funcs
-
-XTABLES_MODULES=(
-	account chaos delude dhcpmac dnetmap echo ipmark logmark
-	proto sysrq tarpit asn condition fuzzy geoip gradm iface
-	ipp2p ipv4options length2 lscan pknock psd quota2
-)
-
-MODULES_KERNEL_MIN=4.15
-
-DESCRIPTION="iptables extensions not yet accepted in the main kernel"
-HOMEPAGE="
-	https://inai.de/projects/xtables-addons/
-	https://codeberg.org/jengelh/xtables-addons/
-"
-SRC_URI="https://inai.de/files/xtables-addons/${P}.tar.xz"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="amd64 x86"
-IUSE="${XTABLES_MODULES[*]/#/xtables_addons_}"
-
-XTABLES_SCRIPTS_DEPEND="
-	app-arch/unzip
-	dev-perl/Net-CIDR-Lite
-	dev-perl/Text-CSV_XS
-	virtual/perl-Getopt-Long
-"
-DEPEND="net-firewall/iptables:="
-RDEPEND="
-	${DEPEND}
-	xtables_addons_asn? ( ${XTABLES_SCRIPTS_DEPEND} )
-	xtables_addons_geoip? ( ${XTABLES_SCRIPTS_DEPEND} )
-"
-BDEPEND="virtual/pkgconfig"
-
-pkg_setup() {
-	local CONFIG_CHECK="NF_CONNTRACK NF_CONNTRACK_MARK"
-
-	if use xtables_addons_ipp2p; then
-		CONFIG_CHECK+=" TEXTSEARCH_BM"
-		local ERROR_TEXTSEARCH_BM="CONFIG_TEXTSEARCH_BM: is not set but is needed to use xt_ipp2p"
-	fi
-
-	if use xtables_addons_pknock; then
-		CONFIG_CHECK+=" ~CONNECTOR"
-		local ERROR_CONNECTOR="CONFIG_CONNECTOR: is not set but is needed to receive userspace
-		notifications from pknock through netlink/connector"
-	fi
-
-	linux-mod-r1_pkg_setup
-}
-
-src_prepare() {
-	default
-
-	local mod modules
-	mapfile -t modules < <(sed -En 's/^build_(.+)=.*/\L\1/p' mconfig || die)
-	[[ ${modules[*]} == "${XTABLES_MODULES[*]}" ]] ||
-		die "XTABLES_MODULES needs to be updated to: '${modules[*]}'"
-
-	for mod in "${modules[@]}"; do
-		use xtables_addons_${mod} || sed -i "/^build_${mod}=/Id" mconfig || die
-	done
-}
-
-src_configure() {
-	# Uses CFLAGS for tools, and it may mismatch with the kernel's CC
-	# FIXME?: ideally would want to build tools with normal CC
-	use modules && CC=${KERNEL_CC} strip-unsupported-flags
-
-	local econfargs=(
-		# TODO?: should move to ${EPREFIX}/usr + use default libexecdir by now
-		# (matching documentation), but could be a disruptive change for users
-		# with xt_asn/geoip_* paths they may have hardcoded in scripts
-		--prefix="${EPREFIX:-/}"
-		--libexecdir="${EPREFIX}"/$(get_libdir)
-		$(usex modules --with-kbuild="${KV_OUT_DIR}" --without-kbuild)
-
-		# Needed for cross-compiling and to avoid a clash with the Gentoo ARCH.
-		ARCH="$(tc-arch-kernel)"
-	)
-
-	econf "${econfargs[@]}"
-}
-
-src_compile() {
-	use modules || MODULES_MAKEARGS=()
-
-	emake "${MODULES_MAKEARGS[@]}"
-}
-
-src_install() {
-	MODULES_MAKEARGS+=(
-		DESTDIR="${D}"
-		INSTALL_MOD_DIR=xtables_addons
-	)
-
-	emake "${MODULES_MAKEARGS[@]}" install
-	modules_post_process
-
-	dodoc -r README.rst doc/.
-
-	use xtables_addons_asn ||
-		find "${ED}" -type f -name '*_asn*' -delete || die
-	use xtables_addons_geoip ||
-		find "${ED}" -type f -name '*_geoip*' -delete || die
-
-	find "${ED}" -type f -name '*.la' -delete || die
-}
diff --git a/net-firewall/xtables-addons/xtables-addons-3.28.ebuild b/net-firewall/xtables-addons/xtables-addons-3.28.ebuild
deleted file mode 100644
index ef451cea3ad4..000000000000
--- a/net-firewall/xtables-addons/xtables-addons-3.28.ebuild
+++ /dev/null
@@ -1,115 +0,0 @@
-# Copyright 2023-2025 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-MODULES_OPTIONAL_IUSE="+modules"
-inherit flag-o-matic linux-mod-r1 toolchain-funcs
-
-XTABLES_MODULES=(
-	account chaos delude dhcpmac dnetmap echo ipmark logmark
-	proto sysrq tarpit asn condition fuzzy geoip gradm iface
-	ipp2p ipv4options length2 lscan pknock psd quota2
-)
-
-MODULES_KERNEL_MIN=4.15
-
-DESCRIPTION="iptables extensions not yet accepted in the main kernel"
-HOMEPAGE="
-	https://inai.de/projects/xtables-addons/
-	https://codeberg.org/jengelh/xtables-addons/
-"
-SRC_URI="https://inai.de/files/xtables-addons/${P}.tar.xz"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="~amd64 ~x86"
-IUSE="${XTABLES_MODULES[*]/#/xtables_addons_}"
-
-XTABLES_SCRIPTS_DEPEND="
-	app-arch/unzip
-	dev-perl/Net-CIDR-Lite
-	dev-perl/Text-CSV_XS
-"
-DEPEND="net-firewall/iptables:="
-RDEPEND="
-	${DEPEND}
-	xtables_addons_asn? ( ${XTABLES_SCRIPTS_DEPEND} )
-	xtables_addons_geoip? ( ${XTABLES_SCRIPTS_DEPEND} )
-"
-BDEPEND="virtual/pkgconfig"
-
-pkg_setup() {
-	local CONFIG_CHECK="NF_CONNTRACK NF_CONNTRACK_MARK"
-
-	if use xtables_addons_ipp2p; then
-		CONFIG_CHECK+=" TEXTSEARCH_BM"
-		local ERROR_TEXTSEARCH_BM="CONFIG_TEXTSEARCH_BM: is not set but is needed to use xt_ipp2p"
-	fi
-
-	if use xtables_addons_pknock; then
-		CONFIG_CHECK+=" ~CONNECTOR"
-		local ERROR_CONNECTOR="CONFIG_CONNECTOR: is not set but is needed to receive userspace
-		notifications from pknock through netlink/connector"
-	fi
-
-	linux-mod-r1_pkg_setup
-}
-
-src_prepare() {
-	default
-
-	local mod modules
-	mapfile -t modules < <(sed -En 's/^build_(.+)=.*/\L\1/p' mconfig || die)
-	[[ ${modules[*]} == "${XTABLES_MODULES[*]}" ]] ||
-		die "XTABLES_MODULES needs to be updated to: '${modules[*]}'"
-
-	for mod in "${modules[@]}"; do
-		use xtables_addons_${mod} || sed -i "/^build_${mod}=/Id" mconfig || die
-	done
-}
-
-src_configure() {
-	# Uses CFLAGS for tools, and it may mismatch with the kernel's CC
-	# FIXME?: ideally would want to build tools with normal CC
-	use modules && CC=${KERNEL_CC} strip-unsupported-flags
-
-	local econfargs=(
-		# TODO?: should move to ${EPREFIX}/usr + use default libexecdir by now
-		# (matching documentation), but could be a disruptive change for users
-		# with xt_asn/geoip_* paths they may have hardcoded in scripts
-		--prefix="${EPREFIX:-/}"
-		--libexecdir="${EPREFIX}"/$(get_libdir)
-		$(usex modules --with-kbuild="${KV_OUT_DIR}" --without-kbuild)
-
-		# Needed for cross-compiling and to avoid a clash with the Gentoo ARCH.
-		ARCH="$(tc-arch-kernel)"
-	)
-
-	econf "${econfargs[@]}"
-}
-
-src_compile() {
-	use modules || MODULES_MAKEARGS=()
-
-	emake "${MODULES_MAKEARGS[@]}"
-}
-
-src_install() {
-	MODULES_MAKEARGS+=(
-		DESTDIR="${D}"
-		INSTALL_MOD_DIR=xtables_addons
-	)
-
-	emake "${MODULES_MAKEARGS[@]}" install
-	modules_post_process
-
-	dodoc -r README.rst doc/.
-
-	use xtables_addons_asn ||
-		find "${ED}" -type f -name '*_asn*' -delete || die
-	use xtables_addons_geoip ||
-		find "${ED}" -type f -name '*_geoip*' -delete || die
-
-	find "${ED}" -type f -name '*.la' -delete || die
-}
diff --git a/net-firewall/xtables-addons/xtables-addons-3.29.ebuild b/net-firewall/xtables-addons/xtables-addons-3.29.ebuild
deleted file mode 100644
index ef0f67ab4bf4..000000000000
--- a/net-firewall/xtables-addons/xtables-addons-3.29.ebuild
+++ /dev/null
@@ -1,115 +0,0 @@
-# Copyright 2023-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-MODULES_OPTIONAL_IUSE="+modules"
-inherit flag-o-matic linux-mod-r1 toolchain-funcs
-
-XTABLES_MODULES=(
-	account chaos delude dhcpmac dnetmap echo ipmark logmark
-	proto sysrq tarpit asn condition fuzzy geoip gradm iface
-	ipp2p ipv4options length2 lscan pknock psd quota2
-)
-
-MODULES_KERNEL_MIN=4.15
-
-DESCRIPTION="iptables extensions not yet accepted in the main kernel"
-HOMEPAGE="
-	https://inai.de/projects/xtables-addons/
-	https://codeberg.org/jengelh/xtables-addons/
-"
-SRC_URI="https://inai.de/files/xtables-addons/${P}.tar.xz"
-
-LICENSE="GPL-2+"
-SLOT="0"
-KEYWORDS="amd64 x86"
-IUSE="${XTABLES_MODULES[*]/#/xtables_addons_}"
-
-XTABLES_SCRIPTS_DEPEND="
-	app-arch/unzip
-	dev-perl/Net-CIDR-Lite
-	dev-perl/Text-CSV_XS
-"
-DEPEND="net-firewall/iptables:="
-RDEPEND="
-	${DEPEND}
-	xtables_addons_asn? ( ${XTABLES_SCRIPTS_DEPEND} )
-	xtables_addons_geoip? ( ${XTABLES_SCRIPTS_DEPEND} )
-"
-BDEPEND="virtual/pkgconfig"
-
-pkg_setup() {
-	local CONFIG_CHECK="NF_CONNTRACK NF_CONNTRACK_MARK"
-
-	if use xtables_addons_ipp2p; then
-		CONFIG_CHECK+=" TEXTSEARCH_BM"
-		local ERROR_TEXTSEARCH_BM="CONFIG_TEXTSEARCH_BM: is not set but is needed to use xt_ipp2p"
-	fi
-
-	if use xtables_addons_pknock; then
-		CONFIG_CHECK+=" ~CONNECTOR"
-		local ERROR_CONNECTOR="CONFIG_CONNECTOR: is not set but is needed to receive userspace
-		notifications from pknock through netlink/connector"
-	fi
-
-	linux-mod-r1_pkg_setup
-}
-
-src_prepare() {
-	default
-
-	local mod modules
-	mapfile -t modules < <(sed -En 's/^build_(.+)=.*/\L\1/p' mconfig || die)
-	[[ ${modules[*]} == "${XTABLES_MODULES[*]}" ]] ||
-		die "XTABLES_MODULES needs to be updated to: '${modules[*]}'"
-
-	for mod in "${modules[@]}"; do
-		use xtables_addons_${mod} || sed -i "/^build_${mod}=/Id" mconfig || die
-	done
-}
-
-src_configure() {
-	# Uses CFLAGS for tools, and it may mismatch with the kernel's CC
-	# FIXME?: ideally would want to build tools with normal CC
-	use modules && CC=${KERNEL_CC} strip-unsupported-flags
-
-	local econfargs=(
-		# TODO?: should move to ${EPREFIX}/usr + use default libexecdir by now
-		# (matching documentation), but could be a disruptive change for users
-		# with xt_asn/geoip_* paths they may have hardcoded in scripts
-		--prefix="${EPREFIX:-/}"
-		--libexecdir="${EPREFIX}"/$(get_libdir)
-		$(usex modules --with-kbuild="${KV_OUT_DIR}" --without-kbuild)
-
-		# Needed for cross-compiling and to avoid a clash with the Gentoo ARCH.
-		ARCH="$(tc-arch-kernel)"
-	)
-
-	econf "${econfargs[@]}"
-}
-
-src_compile() {
-	use modules || MODULES_MAKEARGS=()
-
-	emake "${MODULES_MAKEARGS[@]}"
-}
-
-src_install() {
-	MODULES_MAKEARGS+=(
-		DESTDIR="${D}"
-		INSTALL_MOD_DIR=xtables_addons
-	)
-
-	emake "${MODULES_MAKEARGS[@]}" install
-	modules_post_process
-
-	dodoc -r README.rst doc/.
-
-	use xtables_addons_asn ||
-		find "${ED}" -type f -name '*_asn*' -delete || die
-	use xtables_addons_geoip ||
-		find "${ED}" -type f -name '*_geoip*' -delete || die
-
-	find "${ED}" -type f -name '*.la' -delete || die
-}