-A INPUT -m set --match-set abuse src -m hashlimit --hashlimit-name abuse_limit --hashlimit-upto 3/min --hashlimit-burst 3 --hashlimit-mode srcip,srcport -j LOG --log-prefix "Abuse: " --log-level 5
-A INPUT -m set --match-set abuse src -j DROP
-A FORWARD -m set --match-set abuse src -m hashlimit --hashlimit-name abuse_limit --hashlimit-upto 3/min --hashlimit-burst 3 --hashlimit-mode srcip,srcport -j LOG --log-prefix "Abuse: " --log-level 5
-A FORWARD -m set --match-set abuse src -j DROP