Playground — rule simulator

Switch rules on and off and see in real time what passes, what is blocked and the real command (based on the official documentation). All packets are SIMULATION. Nothing is sent to the server.

Rules (toggles)

Allow loopback (lo) low Block all traffic from 203.0.113.0/24low Block unusual scans (NULL/XMAS/SYN+FIN) low Rate-limit SSH (recent, anti brute-force) medium Allow ESTABLISHED,RELATED low Allow new SSH (port 22) low Limit ping (max ~1/s) low Rate-limited logging (before DROP) low Default policy: DROP (set LAST) high

Simulation (live)

kernel.log — SIMULATION

Per-rule counters

Rule	Blocked	Allowed
loopback (lo)	0	0
Block source 203.0.113.0/24	0	0
Unusual scans	0	0
Rate-limit SSH (recent)	0	0
ESTABLISHED,RELATED	0	0
New SSH (22)	0	0
Ping limited	0	0
Logged (rate-limited)	0	0
Default policy	0	0

Generated commands

# (enable rules)

Rule order matters (top to bottom, first terminal match wins). With the DROP policy, iptables -F can lock you out — set iptables -P INPUT ACCEPT. . SIMULATION