add watch netstat cmd to iptables anti ddos kung fu rules post