- TESTING=1 (default) — rules auto-flush after 300 seconds if something goes wrong.
- NORMAL — rules persist immediately. Use only after SSH and WHM still work from your IP.
The installer adds your current SSH IP to allow and ignore. Confirm it is correct. Add a non-standard SSH port to TCP_IN before Enable.
