But usually UDP fragmentation floods use a high volume of bandwidth that is probably going to exhaust the capability of your respective community card, which makes this rule optional and possibly not the most beneficial a single.netfilter iptables (soon to be replaced by nftables) is really