[PATCH] ipvs: add and reorder bh locks after moving to keventd

	Hello,

	I hope this is correct addition to the last ipvs changes that move
update_defense_level/si_meminfo to keventd:

- ip_vs_random_dropentry now runs in process context and should use _bh 
locks to protect from softirqs
- update_defense_level still needs _bh locks after si_meminfo is called,
for the same purpose

	Dave, please apply on ack, the attached patch is against 
2.6.12-rc3

Signed-off-by: Julian Anastasov <ja@ssi.bg>