giopas thanks for your feedback
There are 5 build in failsaves to protect yourself:
1) whatever you try to do with the app , it will always add your current subnet automaticly to the private ip adresses field (even if you delete it or change it wrongly and then save it ) -> it will always add the private ip adress subnet where your nas is located: if your nas is 192.168.4.50 or 192.168.1.4 it will automaticly whitelist 192.168.0.0/255.255.0.0
If it was located in the ip adress 10.1.0.34 it would whitelist 10.1.0.0/255.255.0.0
2) IP adresses are always validated 3 times, they will be ignored and not be compiled when you put a syntax error in one of the fields (it will even warn you that the ip adress is no valid)
3) When compiling a list, it never writes directly to the ipsec.conf file to avoid beeing interupted during such a sensative process , instead it writes to a tempory file, and if the write was succesfull it will do a file copy (which is much faster and save)
4) Compiling is protected against to many writes, between each compilation you need to wait 1 minute (to protect against bruteforcing comming from a whitelisted ip adress)
5) If however all the above failsaves fail, you can still press the reset button 1.5 second on the nas, this will cause a soft reset, and remove al lthe security features that you set on the nas (also the whitelisting will be resetted), but your other nas config and files remain the same (As long as you don't press the reset button for 10 seconds -> which is the hard reset (where all the config will be errased and only your files will survive)