iptables -F FORWARD 
iptables -A FORWARD -p TCP --dport 80 -j BOTNET 
iptables -A FORWARD -p TCP -d 207.112.10.109/32 --dport 80 --syn -m state --state NEW -m limit --limit 5/second -j ACCEPT
iptables -A FORWARD -p TCP -d 207.112.10.109/32 --dport 80 --syn -m state --state NEW -m limit --limit 10/second -j DROP
iptables -A FORWARD -p TCP -d 207.112.10.109/32 --dport 80 --syn -m state --state NEW -m limit --limit 11/second -j LOG
iptables -A FORWARD -p TCP -d 207.112.10.109/32 --dport 80 --syn -m state --state NEW -j DROP



paste