But usually UDP fragmentation floods use a high amount of bandwidth that is probably going to exhaust the capacity within your network card, that makes this rule optional and probably not the most handy a single. netfilter iptables (quickly to get replaced by nftables) is really a consumer-House