ip_forward=no
spoofprotect=yes
syncookies=no
