updated to remove deprecated ipset syntax