But more often than not UDP fragmentation floods utilize a high level of bandwidth that is probably going to exhaust the potential of the network card, which makes this rule optional and probably not essentially the most beneficial one particular.netfilter iptables (shortly to get replaced by nftables) is a user-space command line utility to config