netscript - netscript network configuration command

       This manual page was written by Matthew Grant <matt@mattgrant.net.nz>, for the  Debian  GNU/Linux  system
       (but may be used by others).

       I wrote this manpage when I was half asleep...

                                                January 24, 2014                                    NETSCRIPT(8)

       This  manual  page  documents  briefly  the  netscript command from the netscript router/firewall network
       configuration package.

       This command is used  to  configure/reconfigure  the  iptables  filter  setup,  that  are  configured  in
       netscript's configuration files.

/etc/netscript/ipfilter.conf,/etc/netscript/network.conf,/etc/netscript/iptables,/etc/netscript/ip6tables,

       Configuration saving is done by iptables-save(8) and iptables-restore(8).

       netscript - netscript network configuration command

start  Set  up  networking  configruation  by  loading  ipcahins  filters, setting up bridge, configuring
              interfaces and running any configured lower layer protocol daemons or commands.  For  use  from  a
              startup script.

       stop   Shut everything down. For use from a startup script.

       reload Refresh the setup of netscript from the configuration files in /etc/netscript

       restart|force-reload
              Stop everything and then start everything again. For use from a startup script.

       ipfilterload|reload
              Load/reload  the  IPv4  iptables  filters  and  reconfigure  the  firewalling,  from that saved in
              /etc/netscript/iptables (via iptables-restore(8) ), and the QoS fair queuing setup.

       ipfiltersave
              Save the IPv4 iptables configuration  to  /etc/netscript/iptables  via  iptables-save(8)  ,  after
              backing  it up to /etc/netscript/iptables.1 and cycling the previous backup files down through the
              configuration history.

       ipfilterusebackup[backup-number]
              Restore setup from the IPv4 iptables backup configuration from /etc/netscript/iptables.n ( default
              1 ) via iptables-restore(8).ipfilterclear|flush
              Remove iptables and any firewall setup,  and  if  IPV4_FWDING_KERNEL  is  set  to  FILTER_ON  (see
              network.conf(5)  ),  disables all IPv4 packet forwarding on the router.  Very useful for debugging
              protocol problems on a firewall by enabling a reasonably safe check to be made with the  filtering
              down.

       ipfilterforward|fwd
              Turns  on  the  IPv4  kernel  forwarding  switch manually.  This is irrespective of the setting of
              IPV4_FWDING_KERNEL (see network.conf(5) ). Use with caution as it will allow traffic  through  the
              box.

       ipfilternoforward|nofwd
              Turns  off  the  IPv4  kernel  forwarding switch manually.  This is irrespective of the setting of
              IPV4_FWDING_KERNEL (see network.conf(5) ). Use with caution as it will cut off reachability.

       ipfilterfairq
              Reload the IPv4 fairq chain that marks the packets for the QoS interface transmit queues.

       ip6filterload|reload
              Load/reload the IPv6 iptables  filters  and  reconfigure  the  firewalling,  from  that  saved  in
              /etc/netscript/ip6tables
               (via ip6tables-restore(8) ), and the QoS fair queuing setup.

       ip6filtersave
              Save  the  IPv6  iptables  configuration  to /etc/netscript/iptables via ip6tables-save(8) , after
              backing it up to /etc/netscript/ip6tables.1 and cycling the previous backup files down through the
              configuration history.

       ip6filterusebackup[backup-number]
              Restore setup from the  IPv6  iptables  backup  configuration  from  /etc/netscript/ip6tables.n  (
              default 1 ) via ip6tables-restore(8).ip6filterclear|flush
              Remove  IPv6 iptables setup, and if IPV6_FWDING_KERNEL is set to FILTER_ON (see network.conf(5) ),
              disables all IPv6 packet forwarding on the router.  Very useful for debugging protocol problems on
              a firewall by enabling a reasonably safe check to be made with the filtering down.

       ip6filterforward|fwd
              Turns on the IPv6 kernel forwarding switch manually.  This  is  irrespective  of  the  setting  of
              IPV6_FWDING_KERNEL  (see  network.conf(5) ). Use with caution as it will allow traffic through the
              box.

       ip6filternoforward|nofwd
              Turns off the IPv6 kernel forwarding switch manually.  This is  irrespective  of  the  setting  of
              IPV6_FWDING_KERNEL (see network.conf(5) ). Use with caution as it will affect reachability.

       ip6filterfairq
              Reload the IPv6 fairq chain that marks the packets for the QoS interface transmit queues.

ipfilter.conf(5),  network.conf(5),  ip(8),  tc(8),  iptables(8),  iptables-restore(8), iptables-save(8),
       ip6tables(8), ip6tables-restore(8), ip6tables-save(8), brcfg(8).

netscriptstart|stop|reload|restartnetscriptipfilterload|clear|fairq|flush|reload|savenetscriptipfilterusebackup[backup-number]netscriptipfilterexec<function-name1>|<function-name2>[chainp1p2...]netscriptip6filterload|clear|fairq|flush|reload|savenetscriptip6filterusebackup[backup-number]netscriptip6filterexec<function-name1>|<function-name2>[chainp1p2...]