support for options allowed and fix ipset delete timing