1) Kernel must not to support loadable modules. It prevents to load a module
like Adore into kernel and masquerade hacker's processes.
2) Next options should be enabled/disabled:
Network Options:
Y IP: TCP syncookie support (disabled per default)
Y TCP Explicit Congestion Notification support
Loadable module support:
N Enable loadable module support