But more often than not UDP fragmentation floods utilize a high level of bandwidth that is probably going to exhaust the potential of your respective community card, which makes this rule optional and probably not one of the most beneficial just one. netfilter iptables (soon to be replaced by nft