That's of course true, but bandwidth is usually not the problem with eg. SYN attacks.

Iptables is there to ensure you can handle as many packets as possible per second, not bandwidth.