add ipset and tsocks config