But more often than not UDP fragmentation floods use a high level of bandwidth that is probably going to exhaust the capability of one's community card, which makes this rule optional and doubtless not the most useful one particular.netfilter iptables (quickly to get replaced by nftables) can be a person-space command line utility to configure kern