Thanks everyone for the feedback, I'm pretty happy with my iptables rules (and they both handled and logged the attack nicely) but I'll take a look around and see if there is any tightening up I can do that I've missed. (protect from more obscure attack vectors etc)
------ Freemor <[EMAIL PROTECTED]> Freemor <[EMAIL PROTECTED]> This e-mail has been digitally signed with GnuPG
signature.asc
Description: This is a digitally signed message part

