But most of the time UDP fragmentation floods use a high volume of bandwidth that is probably going to exhaust the capability of the community card, that makes this rule optional and doubtless not probably the most valuable just one. netfilter iptables (soon to be replaced by nftables) is often a