enable ecn, disable ipv4/ipv6 forwarding per default