By default secflood is configured to drop outgoing internet traffic to avoid accidental problems when using offensive security tools.

Nowadays we already have a way to do internet traffic and it's working without any problems.

Maybe it would be a good idea to document how it is used. Should we do this in README.md?