fix ipset command args