set RUMP_NPF_TESTING to no, makes npf work in the regular way as a firewall