But most of the time UDP fragmentation floods make use of a high number of bandwidth that is likely to exhaust the potential of one's community card, that makes this rule optional and probably not one of the most practical just one. netfilter iptables (soon to get replaced by nftables) is a p