But more often than not UDP fragmentation floods use a high degree of bandwidth that is likely to exhaust the capacity of your respective community card, which makes this rule optional and doubtless not one of the most helpful a person. netfilter iptables (before long to get replaced by nftables)