But more often than not UDP fragmentation floods utilize a high quantity of bandwidth that is probably going to exhaust the potential of your network card, which makes this rule optional and possibly not probably the most valuable a person. netfilter iptables (quickly to be replaced by nftables)