🛠 Tools 📰 News 📘 Help ⚖ Terms
Rule Configuration
Invalid — use 1–65535 or range 80:443
Invalid — e.g. 192.168.1.0/24 or 2001:db8::/32
Invalid — e.g. 10.0.0.0/8
⚡
Stateful Inspection — conntrack is auto-injected for ACCEPT / INPUT rules -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT is prepended to ensure established sessions are never disrupted by new blocking rules.
Quick Fill:
Generated Commands
iptablesIPv4
0
Configure a rule and click Generate →
ip6tablesIPv6
0
Enable dual-stack toggle above →
ufwUbuntu / Debian
0
Configure a rule and click Generate →
firewalldRHEL / Fedora / AlmaLinux
0
Configure a rule and click Generate →

Rule Chain

0 rules
No rules in chain yet — configure a rule and click "Add to Chain".
⚠️
⚠ Important Disclaimer — Commands Are Destructive These generated commands modify kernel-level netfilter packet filtering tables in real time. Applying DROP or REJECT rules to the INPUT chain on a remote server without the SSH Safeguard active WILL lock you out permanently. Always snapshot first: iptables-save > /tmp/rules.v4.bak. Test every rule in a lab environment before applying to production. MYSYSAD bears no liability for service outages, data loss, or security incidents caused by misconfigured firewall rules.
Share MySysAd

⚠️ IMPORTANT: Tools are provided "AS IS" for educational purposes only.

By using this site you agree to our Terms of Service. © MYSYSAD — All rules generated locally · Zero uploads.