Fernando Fernandez Mancera (1): configure.ac: fix typo in docbook2x error message Florian Westphal (9): nftables: xt: don't use hard-coded AF_INET meters: do not set a defaut meter size from userspace tests: shell: add crash reproducer src: netlink_delinarize: don't stop when encountering unsupported expression tests: use 100ms for set timeout build: Bump version to v0.9.0 build: missing headers file in Makefile.am tests: shell: add quotes when using <<<-style here document tests: shell: timeout: fix output for HZ=250 Máté Eckl (12): tests: py: specify python version in nft-test.py tests: py: small typo fixes in the python tests README tests: py: updated test file structure descripion in README tests: py: print_msg refactor tests: py: print path of the logfile tests: py: Added paylad file description to README tests: py: Make diff functions use print_* functions include: update nf_tables.h nat: Eliminate misuse of AF_* src: Introduce socket matching include: update linux/netfilter_ipv4.h test: py: Add test cases for socket matching Pablo Neira Ayuso (14): segtree: missing comments in range and prefix expressions in sets tests: shell: more chain dependency validation tests: shell: non-base chain loops tests: shell: chain dependency validation with maps segtree: add timeout for range and prefix expressions in sets segtree: incorrect handling of comments and timeouts with mapping tests: py: fix race in deleting element statement: don't print burst if equals 5 tests: shell: remove nft_objref module on cleanup statement: old kernels are allowing burst zero, don't print it src: connlimit support expr: extend fwd statement to support address and family src: do not reset generation ID on ruleset flush build: update release name Phil Sutter (41): include/linux: Add required NFT_CT_MAX macro libnftables: Put bison parsing into dedicated functions libnftables: Make some arrays globally accessible libnftables: Make some functions globally accessible libnftables: Introduce a few helper functions libnftables: Implement JSON output support libnftables: Implement JSON parser py: Add getter/setter for echo output option py: Add JSON support to nftables Class tests/py: Reduce indenting level in nft-test.py tests/py: Don't read expected payload for each table tests/py: Highlight offending parts in differences warnings tests/py: Support testing JSON input and output as well evaluate: Return ENOENT if rule index is too large nft.8: Drop misleading adjective 'absolute' libnftables: Move scanner object into struct nft_ctx nft.8: Document limitation of reject statement in bridge family objref: Use "ct helper" for NFT_OBJECT_CT_HELPER JSON: Use "type" for CT helper object JSON: Disallow non-array concat expression values JSON: Sort out rule position and handles in general JSON: Review meter statement support JSON: Review set elem expressions JSON: Fix parsing and printing of limit objects JSON: Simplify tcp option expression parsing a bit JSON: Improve prefix expression parsing error message a bit JSON: Fix parsing of meter statement key JSON: Simplify immediate value parsing tests/py: Adjust JSON for changes in any/ct.t tests/py: Add missing JSON equivalent for inet/sets.t tests/py: Add missing JSON equivalent for rule in inet/tcp.t parser_bison: Merge wildcard_rhs_expr and wildcard_stmt_expr JSON: Simplify wildcard expression JSON: Simplify verdict statement parsing JSON: Fix add rule with index JSON: Fix replace command parser JSON: Review large number parsing/printing tests/py: ip6/flowtable.t: Add missing JSON expected output log: Add support for audit logging nft.8: Fix reject statement documentation evaluate: explicitly deny concatenated types in interval sets Sabrina Dubroca (1): fix printing of "tcp flags syn" and "tcp flags == syn" expressions