problems applying ipset patch

[Andrea]

> 
> No, 'make install' will overwrite existing shared libraries and 
> binaries. Just make sure you use the correct iptables binary if you have 
> got one installed in another directory, too, from your distribution.
> 

Kernel now works fine!

I've rebooted the system with the new kernel, compiled and installed 
iptables and ipset, rebooted again.

At the startup, however, iptables failed to start, (and so the shorewall 
script), with the message "iptables-restore: line 10 failed"