But more often than not UDP fragmentation floods use a high quantity of bandwidth that is likely to exhaust the capability of your network card, which makes this rule optional and possibly not probably the most useful a person.netfilter iptables (soon to be replaced by nftables) can be a user-space command line utility to configure kernel packet fi