But usually UDP fragmentation floods use a high level of bandwidth that is probably going to exhaust the potential of one's network card, which makes this rule optional and possibly not the most helpful just one. netfilter iptables (before long to get replaced by nftables) is actually a perso