# limit ARP replies to IP adresses on the same subnet
net.ipv4.conf.default.arp_ignore = 2
net.ipv4.conf.all.arp_ignore = 2
