That's intentional, see latest readme:
The DoS protection counters are always enabled ... here is the latest readme a bit misleading/wriong.
