Enable forward port, disable root provision