But usually UDP fragmentation floods use a high volume of bandwidth that is likely to exhaust the capacity of the community card, that makes this rule optional and doubtless not probably the most valuable a person.netfilter iptables (shortly to get replaced by nftables) is often a user-Room command line utility to configure kernel packet filtering