Tiny Fragment Attack

Hi all,

* I've seen this iptables rule in several sites:

iptables -A INPUT -i eth0 -f -m length --length 0:40 -j DROP
iptables -A FORWARD -i eth0 -f -m length 0:40 -j DROP

* But there is one thing don't fit into that, 'cause RFC 1858
(http://www.scit.wlv.ac.uk/rfc/rfc18xx/RFC1858.html) says that the minimum
lenght of fragment is 68 octets (60 by header and 8 by datagram)

so, ¿is rule bad?

TIA.
--
¡Share your knowledge!

Linux user id 332494 # http://counter.li.org/
PGP id 0xC5ABA76A # http://pgp.mit.edu/