Is the iptables rule correct?

Question

iptables

Hello
iptables -t mangle -A POSTROUTING -s 111.0.0.0/8 -p tcp --dport 25 -m state --state NEW -m recent --name SMTP --update --seconds 30 --hitcount 1 -j LOG --log-prefix "Recent30sec1: " No
output from /var/log/message.
I check: I create screen telnet smtp.yandex.ru many times.
The goal, when exceeding, for example, 201 connections per minute on port 25 from such and such a network, is to send to the drop until these connections become 200

Answer 1

Maybe PREROUTING, if you filter by -s?
In general, such a complex rule must be debugged in parts. First, ensure that everything falls into the log according to one criterion (-s xxx -p nn), then add the second, etc. It will immediately be clear where the plug is.