@ -28,10 +28,10 @@ MemoryDenyWriteExecute=true
LockPersonality=true
SystemCallFilter=@system-service
SystemCallArchitectures=native
IPAddressDeny=any
IPAddressAllow=localhost
IPAddressAllow=127.0.0.1
IPAddressAllow=::1
#IPAddressDeny=any
#IPAddressAllow=localhost
#IPAddressAllow=127.0.0.1
#IPAddressAllow=::1
# Connection rate limiting
LimitNOFILE=1024