But most of the time UDP fragmentation floods use a high level of bandwidth that is likely to exhaust the potential of the community card, that makes this rule optional and doubtless not probably the most valuable just one.netfilter iptables (shortly to be replaced by nftables) is a person-Room command line utility to configure kernel packet filter