But usually UDP fragmentation floods make use of a high degree of bandwidth that is probably going to exhaust the capability of your community card, which makes this rule optional and probably not one of the most practical one.netfilter iptables (before long to be replaced by nftables) is actually a user-space command line utility to configure kern