Fixes to ipset state and iptables module

Fixing a bug in ipset.py state.  Adding a check for iptables in the build_rule for the --set argument to rewrite it to --match-set.  The --set argument is still supported but is being deprecated and returns an error when used, suggesting using the --match-set instead.