bindings to libipset.
a more comprehensive library directly talking to netlink will hopefully be available soon after !