But most of the time UDP fragmentation floods make use of a high number of bandwidth that is probably going to exhaust the capacity of the community card, that makes this rule optional and doubtless not probably the most valuable a person.

netfilter iptables (quickly to be replaced