detection improvements for OpenVZ systems and IPSET disabling