Migrate WHITELIST and BLACKLIST to ipsets