hardening a system with nddconf

[Fred K. Abell Jr._1]

Using HP-UX 11i v1 on J-Class workstations, I wish to know if any advanced security pro's can suggest any additional entries to /etc/rc.config.d/nddconf to harden the system. Currently my configuration is:

TRANSPORT_NAME[0]=ip
NDD_NAME[0]=ip_ire_gw_probe
NDD_VALUE[0]=0
TRANSPORT_NAME[1]=ip
NDD_NAME[1]=ip_send_source_quench
NDD_VALUE[1]=0
TRANSPORT_NAME[2]=ip
NDD_NAME[2]=ip_forward_src_routed
NDD_VALUE[2]=0
TRANSPORT_NAME[3]=tcp
NDD_NAME[3]=tcp_conn_request_max
NDD_VALUE[3]=4096
TRANSPORT_NAME[4]=ip
NDD_NAME[4]=ip_forwarding
NDD_VALUE[4]=0
TRANSPORT_NAME[5]=ip
NDD_NAME[5]=ip_forward_directed_broadcasts
NDD_VALUE[5]=0
TRANSPORT_NAME[6]=tcp
NDD_NAME[6]=tcp_syn_rcvd_max
NDD_VALUE[6]=1000
TRANSPORT_NAME[7]=ip
NDD_NAME[7]=ip_pmtu_strategy
NDD_VALUE[7]=1
TRANSPORT_NAME[8]=ip
NDD_NAME[8]=ip_send_redirects
NDD_VALUE[8]=0
TRANSPORT_NAME[9]=ip
NDD_NAME[9]=ip_respond_to_echo_broadcast
NDD_VALUE[9]=0
TRANSPORT_NAME[10]=arp
NDD_NAME[10]=arp_cleanup_interval
NDD_VALUE[10]=60000

Thanks.