added ipset maxelem option & more blacklist URLs