Rule
iptables -I PREROUTING -t nat -p tcp --dport 8899 --syn -m hashlimit --hashlimit 3500/m --hashlimit-mode dstport --hashlimit-burst 3500 --hashlimit-name visamini -j DNAT --to-destination 172.16.16.11:80

iptables -A PREROUTING -t nat -p tcp --dport 8899 ! --syn -j DNAT --to-destination 172.16.16.11:8


Destination Machine

# iptables -L -n -v | grep dpt:80 ; sleep 60;iptables -L -n -v | grep dpt:80 ; sleep 60;iptables -L -n -v | grep dpt:80 ; sleep 60
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 flags:0x17/0x02
 7378  354K ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 flags:0x17/0x02
13818  663K ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 flags:0x17/0x02