netscript - netscript network configuration command
netscript start|stop|reload|restart
netscript ipfilter load|clear|fairq|flush|reload|save
netscript ipfilter usebackup [ backup-number ]
netscript ipfilter exec
<function-name1>|<function-name2> [chain p1 p2 ...]
netscript ip6filter load|clear|fairq|flush|reload|save
netscript ip6filter usebackup [ backup-number ]
netscript ip6filter exec
<function-name1>|<function-name2> [chain p1 p2 ...]
This manual page documents briefly the netscript command
from the netscript router/firewall network configuration package.
This command is used to configure/reconfigure the iptables filter
setup, that are configured in netscript's configuration files.
- start
- Set up networking configruation by loading ipcahins filters, setting up
bridge, configuring interfaces and running any configured lower layer
protocol daemons or commands. For use from a startup script.
- stop
- Shut everything down. For use from a startup script.
- reload
- Refresh the setup of netscript from the configuration files in
/etc/netscript
- restart|force-reload
- Stop everthing and then start everything again. For use from a startup
script.
- ipfilter
load|reload
- Load/reload the IPv4 iptables filters and reconfigure the firewalling,
from that saved in /etc/netscript/iptables (via
iptables-restore(8) ), and the QoS fair queuing setup.
- ipfilter
save
- Save the IPv4 iptables configuration to /etc/netscript/iptables via
iptables-save(8) , after backing it up to
/etc/netscript/iptables.1 and cycling the previous backup files
down through the configuration history.
- ipfilter usebackup [ backup-number ]
- Restore setup from the IPv4 iptables backup configuration from
/etc/netscript/iptables.n ( default 1 ) via
iptables-restore(8).
- ipfilter
clear|flush
- Remove iptables and any firewall setup, and if IPV4_FWDING_KERNEL is set
to FILTER_ON (see network.conf(5) ), disables all IPv4 packet
forwarding on the router. Very useful for debugging protocol problems on a
firewall by enabling a reasonably safe check to be made with the filtering
down.
- ipfilter
forward|fwd
- Turns on the IPv4 kernel forwarding switch manually. This is irrespective
of the setting of IPV4_FWDING_KERNEL (see network.conf(5) ). Use
with caution as it will allow traffic through the box.
- ipfilter
noforward|nofwd
- Turns off the IPv4 kernel forwarding switch manually. This is irrespective
of the setting of IPV4_FWDING_KERNEL (see network.conf(5) ). Use
with caution as it will cut off reachability.
- ipfilter
fairq
- Reload the IPv4 fairq chain that marks the packets for the
QoS interface transmit queues.
- ip6filter
load|reload
- Load/reload the IPv6 iptables filters and reconfigure the firewalling,
from that saved in /etc/netscript/ip6tables
(via ip6tables-restore(8) ), and the QoS fair queuing setup.
- ip6filter
save
- Save the IPv6 iptables configuration to /etc/netscript/iptables via
ip6tables-save(8) , after backing it up to
/etc/netscript/ip6tables.1 and cycling the previous backup files
down through the configuration history.
- ip6filter usebackup [ backup-number ]
- Restore setup from the IPv6 iptables backup configuration from
/etc/netscript/ip6tables.n ( default 1 ) via
ip6tables-restore(8).
- ip6filter
clear|flush
- Remove IPv6 iptables setup, and if IPV6_FWDING_KERNEL is set to FILTER_ON
(see network.conf(5) ), disables all IPv6 packet forwarding on the
router. Very useful for debugging protocol problems on a firewall by
enabling a reasonably safe check to be made with the filtering down.
- ip6filter
forward|fwd
- Turns on the IPv6 kernel forwarding switch manually. This is irrespective
of the setting of IPV6_FWDING_KERNEL (see network.conf(5) ). Use
with caution as it will allow traffic through the box.
- ip6filter
noforward|nofwd
- Turns off the IPv6 kernel forwarding switch manually. This is irrespective
of the setting of IPV6_FWDING_KERNEL (see network.conf(5) ). Use
with caution as it will affect reachability.
- ip6filter
fairq
- Reload the IPv6 fairq chain that marks the packets for the
QoS interface transmit queues.
/etc/netscript/ipfilter.conf, /etc/netscript/network.conf,
/etc/netscript/iptables, /etc/netscript/ip6tables,
ipfilter.conf(5), network.conf(5), ip(8),
tc(8), iptables(8), iptables-restore(8),
iptables-save(8), ip6tables(8), ip6tables-restore(8),
ip6tables-save(8), brcfg(8).
This manual page was written by Matthew Grant
<matt@mattgrant.net.nz>, for the Debian GNU/Linux system (but may be
used by others).
I wrote this manpage when I was half asleep...