- default to dropping to _ipguard user - add installation instructions including directory setup needed for dropped privileges - explicitly depend on the fixed version of libnet, this software doesn't work correctly without it maintainer ok