But most of the time UDP fragmentation floods use a high degree of bandwidth that is likely to exhaust the capability of your network card, which makes this rule optional and probably not by far the most useful 1.netfilter iptables (before long to get replaced by nftables) can be a person-Place command line utility to configure kernel packet filter