spoofprotect=yes
ip_forward=no
syncookies=no

