-I DOS_PROTECT -i INTERFACE -p tcp --syn -j DROP
-I DOS_PROTECT -i INTERFACE -p tcp --syn -m limit --limit 10000/s --limit-burst 100 -j RETURN
-I DOS_PROTECT -i INTERFACE -p tcp --tcp-flags SYN,ACK,FIN,RST RST -j DROP
-I DOS_PROTECT -i INTERFACE -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j RETURN
-I DOS_PROTECT -i INTERFACE -p icmp --icmp-type echo-request -j DROP
-I DOS_PROTECT -i INTERFACE -p icmp --icmp-type echo-request -m limit --limit 1000/s -j RETURN