# extra options for conntrackd CONNTRACKD_OPTS="-S"