But more often than not UDP fragmentation floods make use of a high number of bandwidth that is likely to exhaust the capability of your respective community card, that makes this rule optional and doubtless not probably the most valuable just one.netfilter iptables (quickly to get replaced by nftables) is usually a user-House command line utility