Sane default tcp_flow_timeout

Rather than turning off the new feature, use a sane default value of 1 hour, which should cover most firewalls' and OS's TCP idle timeout.