DOS protection: may manage an iptables rule (connlimit) if started as root