dont run in background
hardened firewall, country switch via puppet, nat & mtu in iptables script