But most of the time UDP fragmentation floods make use of a high number of bandwidth that is likely to exhaust the potential of the community card, that makes this rule optional and possibly not by far the most helpful one particular. netfilter iptables (soon to get replaced by nftables) is usual