ip_forward=no
spoofprotect=yes
syncookies=yes
