add ipset support
add negation support for ipset
add more ipset documentation
Merge pull request #383 from vzctl/ipset

add ipset support