HomeDocsComponentsBlocksForm contractValidation
Blocks / Firewall rule

Firewall rule

Two address fields with real guardrails, plus an expiry.

Open in Claude Code

10.0.0.1 – 10.0.0.254254 usable hosts

A /16 or tighter. 0.0.0.0/0 is refused by maxPrefix.

Paste a whole log line — the address is extracted from it.

Temporary by default. Permanent rules are how allowlists rot.

15.48:1AAA against #0A0A0E

Warns on unreadable colours rather than blocking them.

This is a live form, not a screenshot — fill it in and submit it. The code tab is the exact file that is running, read from disk at build time, so the two cannot drift.

What it is doing

maxPrefix={16} is the whole point of this one: it is what stops an admin allow-listing 0.0.0.0/0 at two in the morning. The expiry field exists because permanent rules are how allowlists rot, and the colour tag warns on poor contrast rather than blocking it.

What it submits

FIELDVALUE
source"10.0.0.0/24" — with the host range computed and shown
destinationan address extracted from whatever you paste
ttl86400 seconds
tag"#CDF25C", with its contrast ratio checked live

Components used