But more often than not UDP fragmentation floods make use of a high degree of bandwidth that is likely to exhaust the capacity of the network card, which makes this rule optional and doubtless not one of the most handy one.netfilter iptables (before long to get replaced by nftables) is a user-House command line utility to configure kernel packet fi