fix CSF firewall IPSET check for non-OpenVZ systems only