#net.ipv4.conf.default.rp_filter=1
#net.ipv4.icmp_echo_ignore_broadcasts=1
#net.ipv6.conf.default.forwarding=1
+kernel.exec-shield=3
kernel.maps_protect=1
net.core.rmem_default=1048576
net.core.wmem_default=1048576
net.ipv4.tcp_max_syn_backlog=8192
net.ipv4.tcp_retries1=2
net.ipv4.tcp_rfc1337=1
-net.ipv4.tcp_syncookies=0
+net.ipv4.tcp_syncookies=1
vm.mmap_min_addr=65536