remove tcp-only, add spurious ip filter