Kernel tweaks disabled by default

scripts/lfirewall

@@ -414,7 +414,7 @@ fw_network_protection(){
 			:
 		;;
 	esac
-	if [ "${NETWORK_PROTECTION:-1}" = 1 ]
+	if [ "${NETWORK_PROTECTION:-0}" = 1 ]
 	then
 		echo 1 > /proc/sys/net/ipv4/tcp_syncookies
 		echo 1 > /proc/sys/net/ipv4/icmp_echo_ignore_broadcasts