kernel.dmesg_restrict = 0
kernel.sysrq = 1
net.ipv4.tcp_syncookies = 1