ipset: only save ip/network once