ipset

In this release, using protocol numbers is supported alongside their names. The number of maximum ipsets is now automatically increased as needed.

This release fixes the internal CIDR bookkeeping which could lead to mismatches when the number of different-sized networks was greater than the smallest CIDR value. It supports matching elements marked with "nomatch" in "hash:*net*" sets and adds /0 network support to the "hash:net,iface" type.