iptables -I INPUT -s 183.60.0.0/16 -j DROP
iptables -I INPUT -s 210.211.0.0/16 -j DROP
iptables -I INPUT -s 211.143.0.0/16 -j DROP
iptables -I INPUT -s 123.151.0.0/16 -j DROP
iptables -I INPUT -s 38.122.0.0/16 -j DROP
iptables -I INPUT -s 14.17.0.0/16 -j DROP
iptables -I INPUT -s 221.228.0.0/16 -j DROP
iptables -I INPUT -s 27.248.0.0/16 -j DROP

iptables -A wanout -p tcp --dport 135:139 -j DROP
iptables -A wanout -p udp --dport 135:139 -j DROP
iptables -A wanout -p tcp --dport 445 -j DROP

iptables -D INPUT -p tcp --dport 1723 -j ACCEPT
iptables -I INPUT -s [ip] -p tcp --dport 1723 -j ACCEPT

Limit connection per user

iptables -I FORWARD -p tcp --syn -m iprange --src-range 192.168.22.10-192.168.22.250 -m connlimit --connlimit-above 125 -j DROP