Add XTABLES_ADDONS description (discussed in -dev on 18.01.2010).

diff --git a/profiles/ChangeLog b/profiles/ChangeLog
index e08af3740844c2c84c6ef7d790cde5cb4971b901..cd1f2843f7cfb0af201f6361418296a2ee3f7b79 100644 (file)
--- a/profiles/ChangeLog
+++ b/profiles/ChangeLog
@@ -1,11 +1,14 @@
 # ChangeLog for profile directory
 # Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.4143 2010/04/28 15:25:36 lavajoe Exp $
+# $Header: /var/cvsroot/gentoo-x86/profiles/ChangeLog,v 1.4144 2010/04/29 09:25:50 pva Exp $
 #
 # This ChangeLog should include records for all changes in profiles directory.
 # Only typo fixes which don't affect portage/repoman behaviour could be avoided
 # here. If in doubt put a record here!
 
+  29 Apr 2010; Peter Volkov <pva@gentoo.org> +desc/xtables_addons.desc:
+  Add XTABLES_ADDONS description (discussed in -dev on 18.01.2010).
+
   28 Apr 2010; Joe Peterson <lavajoe@gentoo.org> package.mask:
   Remove entry for removed package sys-fs/btrfs
 

diff --git a/profiles/desc/xtables_addons.desc b/profiles/desc/xtables_addons.desc
new file mode 100644 (file)
index 0000000..6f816c1
--- /dev/null
+++ b/profiles/desc/xtables_addons.desc
@@ -0,0 +1,31 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/profiles/desc/xtables_addons.desc,v 1.1 2010/04/29 09:25:51 pva Exp $
+
+# This file contains descriptions of XTABLES_ADDONS USE-EXPANDED variables.
+# Keep it sorted.
+
+account - ACCOUNT target is a high performance accounting system for large local networks
+chaos - CHAOS target causes confusion on the other end by doing odd things with incoming packets
+condition - matches if a specific condition variable is (un)set
+delude - DELUDE target will reply to a SYN packet with SYN-ACK, and to all other packets with an RST
+dhcpmac - DHCPMAC target/match in conjunction with ebtables can be used to completely change all MAC addresses from and to a VMware-based virtual machine
+echo - ECHO target sends back all packets it received
+fuzzy - matches a rate limit based on a fuzzy logic controller (FLC)
+geoip - match a packet by its source or destination country
+iface - match allows to check interface states
+ipmark - IPMARK target allows mark a received packet basing on its IP address
+ipp2p - matches certain packets in P2P flows
+ipset - enables build of ipset related modules
+ipv4options - match against a set of IPv4 header options
+length2 - matches the length of a packet against a specific value or range of values
+logmark - LOGMARK target will log packet and connection marks to syslog
+lscan - match detects simple low-level scan attemps based upon the packet's contents
+quota2 - match implements a named counter which can be increased or decreased on a per-match basis
+pknock - match implements so-called "port knocking", a stealthy system for network authentication
+psd - match attempts to detect TCP and UDP port scans (derived from Solar Designer's scanlogd)
+rawnat - The RAWSNAT and RAWDNAT targets provide stateless network address translation
+steal - STEAL target is like DROP, but does not throw an error when used in the OUTPUT chain
+sysrq - SYSRQ target allows to remotely trigger sysrq on the local machine over the network
+tarpit - TARPIT target captures and holds incoming TCP connections using no local per-connection resources
+tee - TEE target will clone a packet and redirect this clone to another machine on the local network segment