fixed ipset patch to make it work right from userland