diff --git a/base/sysctl/etc/sysctl.d/00-moby.conf b/base/sysctl/etc/sysctl.d/00-moby.conf
index 49ffed8ad..bb59b989c 100644
--- a/base/sysctl/etc/sysctl.d/00-moby.conf
+++ b/base/sysctl/etc/sysctl.d/00-moby.conf
@@ -1,3 +1,8 @@
+# from Alpine defaults
+net.ipv4.tcp_syncookies = 1
+net.ipv4.conf.default.rp_filter = 1
+net.ipv4.conf.all.rp_filter = 1
+net.ipv4.ping_group_range=999 59999
 # general limits
 vm.max_map_count = 262144
 vm.overcommit_memory = 1