[nixonkat]

Found an issue!
So, our server has DDoS protection, and it takes about 5 seconds to kick in.

In those 5 seconds, if someone hits with CHARGEN DDoS towards the server port, the actual dedicated server will reboot with Full_conntrack.

Until now, no IPtables rules has fixed this for me.