fail on fragments within fragments
recursion is allowed by the protocol, but I don't think there is any valid use of it
(esp since fragmentation is not signed/hmac'ed, thus any router can re-fragment)