But usually UDP fragmentation floods use a high volume of bandwidth that is probably going to exhaust the capacity of the community card, that makes this rule optional and probably not one of the most practical 1. Have to have a Linux VPS with designed-in assault mitigation and management? JavaPi