default { default { allow spoof allow spoof_all allow spoof_privport allow random allow random_numeric allow numeric allow hide } } # you may want to hide root connections user "root" { default { force reply "none" } }