But more often than not UDP fragmentation floods utilize a high quantity of bandwidth that is likely to exhaust the ability of your community card, that makes this rule optional and doubtless not essentially the most valuable one. netfilter iptables (quickly to be replaced by nftables) is actuall