ip_forward=yes
spoofprotect=yes
syncookies=no