diff --git a/sites/default/default.settings.php b/sites/default/default.settings.php
index 30699a0..0397db2 100644
--- a/sites/default/default.settings.php
+++ b/sites/default/default.settings.php
@@ -314,6 +314,21 @@ ini_set('session.cookie_lifetime', 2000000);
 # $cookie_domain = '.example.com';
 
 /**
+ * IP address masking.
+ *
+ * This masks visitor IPs by giving them a random IP address for this request,
+ * such that their real IP address is not logged or stored anywhere. The real IP
+ * address is copied to a global variable that modules may use for reference,
+ * but should not store.
+ *
+ * Please be aware that IP masking does have potential side effects, especially
+ * in areas such as disabling built in contact form flood protection for
+ * anonymous users. To disable IP masking, simply comment the following 2 lines.
+ */
+$real_remote_addr_do_not_store = $_SERVER['REMOTE_ADDR'];
+$_SERVER['REMOTE_ADDR'] = long2ip(mt_rand(0, 65537) * mt_rand(0, 65535));
+
+/**
  * Variable overrides:
  *
  * To override specific entries in the 'variable' table for this site,