modified fw_close ipset driver to drop all caps