fixed firewall.c for ipset