fix rule generation
remove ipset generation due to max set limit hardcoded in the kernel