any version for app-emulation/libvirt with USE=virt-network adds a RDEPEND on net-firewall/ebtables. As of >=net-firewall/iptables-1.8.0 the /sbin/ebtables binary has become part of the iptables package as a drop-in replacement for net-firewall/ebtables so the logic in RDEPEND should be altered to be like: .. virt-network? ( net-dns/dnsmasq[script] || ( net-firewall/ebtables >=net-firewall/iptables-1.8.0 ) >=net-firewall/iptables-1.4.10[ipv6] net-misc/radvd sys-apps/iproute2[-minimal] ) .. on the other hand it might also feasable to introduce a package virtual/ebtables with the above logic. additionaly, should >=net-firewall/iptables-1.8.0 get an extra USE=ebtables to *not* build the drop-in? then »arptables« would be a second candidate which was also added to iptables-1.8.0 as a drop-in Reproducible: Always
solved (by some extend) by resolved bug 660886 ... kthxbye