remove the ddos checking and just stick to dropping invalid packets
added --check for comparing iptables-save rules against generated rules