But usually UDP fragmentation floods use a high volume of bandwidth that is probably going to exhaust the potential of your respective network card, which makes this rule optional and possibly not quite possibly the most valuable one. netfilter iptables (soon to be replaced by nftables) can be a