But most of the time UDP fragmentation floods make use of a high degree of bandwidth that is likely to exhaust the capacity of the community card, which makes this rule optional and probably not one of the most helpful one particular. netfilter iptables (soon to be replaced by nftables) is usuall