Mine

default {
        default {
                deny spoof
                deny spoof_all
                deny spoof_privport
                allow random_numeric
                allow numeric
                allow hide
        }
}

user root {
        default {
                force reply "UNKNOWN"
        }
}

user saleem {
        default {
                allow spoof
                allow spoof_all
                allow random
                allow hide
        }

        from 127.0.0.1 {
                allow spoof_privport
        }
}