Block fragmented IP packets functionality not working in dslite mode

See more:

C

Linux

networking

I am using a Linux machine which is in dslite mode. To block fragmented IP Packets I am updating the below kernel files.

echo > /proc/sys/net/netfilter/nf_conntrack_frag6_low_thresh
echo > /proc/sys/net/netfilter/nf_conntrack_frag6_high_thresh

After updating these files the packets are not blocking.
Kernel version 3.12.74

Could you please tell how can we achieve?

What I have tried:

echo > /proc/sys/net/netfilter/nf_conntrack_frag6_low_thresh
echo > /proc/sys/net/netfilter/nf_conntrack_frag6_high_thresh