Thank you mRgOBLIN for the script, my rules is fine.
The promisc on is just for debug.
I found the problem after allots os time speed with this... the problem is the fu*king network interfaces...
Intel Corporation 82576 Gigabit Network- The new intel driver support the VMDQ channels and was activated.
I disable it, and no more packets loss
But when i configure the rules, other problem appears.. a fatal kernel panic relational with icmp_send() and more functions on kernel 2.6.37.6.
This appends when a make a ping from the dmz, so i decide to upgrade to kernel to 2.6.38.4, when no more problems at the moment.
Thank you all to me