#allow icmp ping
net.ipv4.ping_group_range=0 999