Ways for killswitch testing?

Hi,
I have set up DietPi as a seedbox. As a last step I configured DietPi VPN via the launcher (incl. auto-start and killswitch) and connected via PIA. Everything works correctly, I used curl ipinfo.io to check my IP address and it matches the selected VPN connection. However, I am a bit paranoid due to the usage as a seedbox and would like to test if the killswitch is working correctly. Does anyone know a method for this?

PS: For the use of Radarr/Sonarr etc. Web-UI I have enabled the corresponding ports via -A INPUT -p tcp --dport <PORT> -j ACCEPT. Could there be a security risk here?

Add a firewall rule to forbid the packets to the VPN, this will make it disconnect and fallback to ISP if there is no killswitch.
For *arr add the source IPs of your lan in the firewall rule.

Thx, can you provide me with a guide on how to add my LAN IPs to the Whitelist?

Add -s 192.68.X.Y/ZZ in the rule, replace the letters accordingly.