Firewall: Protect port 80 only with CONNLIMIT and remove it from PORTFLOOD to avoid false alarms.