But more often than not UDP fragmentation floods use a high degree of bandwidth that is likely to exhaust the potential of your respective network card, that makes this rule optional and doubtless not the most valuable 1. netfilter iptables (shortly to get replaced by nftables) is actually a pers