--- a/modules/mod_cap.c	2017-06-19 13:57:05.531787226 +0200
+++ b/modules/mod_cap.c	2017-06-19 13:56:53.780841831 +0200
@@ -422,6 +422,9 @@
   }
 #endif
 
+  if (res != -1 && pr_module_exists("mod_fw_ipset.c"))
+    res = lp_add_cap(CAP_NET_ADMIN, CAP_PERMITTED);
+
   if (res != -1)
     res = lp_set_cap();