improve ipset updates

Remove duplicates, remove stale _swap chains, better cidr parser