But most of the time UDP fragmentation floods utilize a high level of bandwidth that is probably going to exhaust the potential of the community card, which makes this rule optional and possibly not the most helpful just one.netfilter iptables (shortly to get replaced by nftables) is really a consumer-House command line utility to configure kernel