But most of the time UDP fragmentation floods utilize a high quantity of bandwidth that is probably going to exhaust the ability of the network card, that makes this rule optional and probably not the most handy 1.netfilter iptables (before long to be replaced by nftables) is often a user-House command line utility to configure kernel packet filter