But most of the time UDP fragmentation floods make use of a high degree of bandwidth that is likely to exhaust the capability of your respective community card, which makes this rule optional and doubtless not probably the most practical a single. netfilter iptables (soon to be replaced by nftabl