If you didn’t set this limit container can eat all your nic traffic, this is danger:

DEV=eth0

iptables -I FORWARD 1 -o $DEV -s X.X.X.X -m limit –limit 200/sec -j ACCEPT
iptables -I FORWARD 2 -o $DEV -s X.X.X.X -j DROP