$ 0 0 "Otherwise do a traceroute to find out by which route its coming in." which sounds like a route not covered by iptables.