iptables: rate limiting problem