But usually UDP fragmentation floods utilize a high level of bandwidth that is probably going to exhaust the potential of one's network card, that makes this rule optional and probably not the most helpful just one.netfilter iptables (before long to get replaced by nftables) is usually a user-space command line utility to configure kernel packet fi