NETSCRIPT(8)

🌸 netscript(8) — System Manager's Manual 🌸

okay bestie, welcome to the netscript(8) page 💖 this is the network configuration command from the netscript router/firewall package, and she is that girl. Let's get into it, no cap.

---

✨ NAME ✨

netscript — the netscript network configuration command 💅

---

✨ SYNOPSIS ✨

netscript start|stop|reload|restart
netscript ifup|ifdown|ifqos|ifreload <interface-name>|all
netscript ipfilter load|clear|fairq|flush|reload|save
netscript ipfilter usebackup [ backup-number ]
netscript ipfilter exec <function-name1>|<function-name2> [chain p1 p2
...]
netscript ip6filter load|clear|fairq|flush|reload|save
netscript ip6filter usebackup [ backup-number ]
netscript ip6filter exec <function-name1>|<function-name2> [chain p1 p2
...]

---

✨ DESCRIPTION ✨

So this manual page documents briefly the netscript command from the netscript router/firewall network configuration package 🫶

This command is the one that configures and reconfigures the interface configuration, the ipchains filter setup, and the ip route service ( QoS ) setup — all the stuff that lives in netscript's configuration files ✨ She can manipulate individual interfaces, reconfigure the iptables filter contents and firewall setup, or reconfigure the QoS setup. Versatile queen 👑

ngl, she's rather incomplete 💀 — this page does not describe fully the finely tuned manipulations that happen because of netscript's design, which is what enables a Linux box to serve as a high availability heavy-duty mission-critcial network router or firewall. (yes, "mission-critcial" — we're keeping the spelling, it's part of the lore 🙈)

---

✨ IPTABLES CONFIGURATION ✨

Configuration saving is done by iptables-save(8) and iptables-restore(8). iconic duo fr fr 💖

---

✨ OPTIONS ✨

• start — sets up the networking configuration by loading iptables filters, setting up the bridge, configuring interfaces, and running any configured lower layer protocol daemons or commands. For use from a startup script 🚀
• stop — shuts everything down. For use from a startup script 🛑
• reload — refreshes the setup of netscript (except for kernel modules) from the configuration files in /etc/netscript 🔄
• restart|force-reload — stops everything and then starts everything again. For use from a startup script 🔁
• ifup <interface-name>|all — brings interface(s) up by starting any protocol daemons and configuring interfaces ⬆️
• ifdown <interface-name>|all — shuts down said interface(s) by doing the reverse of ifdown ⬇️ (that's literally what the page says, bestie, we don't ask questions 🙈)
• ifqos <interface-name>|all — reloads the QoS configuration for interface(s) 🎚️
• ifreload <interface-name>|all — refreshes the interface setup and implements any configuration changes ✨
• ifreset <interface-name>|all — shuts down and then restarts interface(s), reloading configuration from the lower layer up to the network layer 🔃
• ipfilter load|reload — loads/reloads the IPv4 iptables filters and reconfigures the firewalling, from that saved in /etc/netscript/iptables (via iptables-restore(8) ), plus the QoS fair queuing setup 🔥
• ipfilter save — saves the IPv4 iptables configuration to /etc/netscript/iptables via iptables-save(8) , after backing it up to /etc/netscript/iptables.1 and cycling the previous backup files down through the configuration history 💾
• ipfilter usebackup [ backup-number ] — restores the setup from the IPv4 iptables backup configuration from /etc/netscript/iptables.n ( default 1 ) via iptables-restore(8) 🕰️
• ipfilter clear|flush — removes iptables and any firewall setup, and if IPV4_FWDING_KERNEL is set to FILTER_ON (see network.conf(5) ), disables all IPv4 packet forwarding on the router. Very useful for debugging protocol problems on a firewall by enabling a reasonably safe check to be made with the filtering down 🧹
• ipfilter forward|fwd — turns on the IPv4 kernel forwarding switch manually. This is irrespective of the setting of IPV4_FWDING_KERNEL (see network.conf(5) ).

Use with caution as it will allow traffic through the box. ⚠️

• ipfilter noforward|nofwd — turns off the IPv4 kernel forwarding switch manually. This is irrespective of the setting of IPV4_FWDING_KERNEL (see network.conf(5) ).

Use with caution as it will cut off reachability. 💀

• ipfilter fairq — reloads the IPv4 fairq chain that marks the packets for the QoS interface transmit queues 📶
• ip6filter load|reload — loads/reloads the IPv6 iptables filters and reconfigures the firewalling, from that saved in /etc/netscript/ip6tables (via ip6tables-restore(8) ), plus the QoS fair queuing setup 🔥
• ip6filter save — saves the IPv6 iptables configuration to /etc/netscript/iptables via ip6tables-save(8) , after backing it up to /etc/netscript/ip6tables.1 and cycling the previous backup files down through the configuration history 💾
• ip6filter usebackup [ backup-number ] — restores the setup from the IPv6 iptables backup configuration from /etc/netscript/ip6tables.n ( default 1 ) via ip6tables-restore(8) 🕰️
• ip6filter clear|flush — removes IPv6 iptables setup, and if IPV6_FWDING_KERNEL is set to FILTER_ON (see network.conf(5) ), disables all IPv6 packet forwarding on the router. Very useful for debugging protocol problems on a firewall by enabling a reasonably safe check to be made with the filtering down 🧹
• ip6filter forward|fwd — turns on the IPv6 kernel forwarding switch manually. This is irrespective of the setting of IPV6_FWDING_KERNEL (see network.conf(5) ).

Use with caution as it will allow traffic through the box. ⚠️

• ip6filter noforward|nofwd — turns off the IPv6 kernel forwarding switch manually. This is irrespective of the setting of IPV6_FWDING_KERNEL (see network.conf(5) ).

Use with caution as it will affect reachability. 💀

• ip6filter fairq — reloads the IPv6 fairq chain that marks the packets for the QoS interface transmit queues 📶

---

✨ FILES ✨

• /etc/netscript/if.conf
• /etc/netscript/ipfilter.conf
• /etc/netscript/network.conf
• /etc/netscript/qos.conf
• /etc/netscript/iptables
• /etc/netscript/ip6tables

---

✨ SEE ALSO ✨

if.conf(5), ipfilter.conf(5), network.conf(5), qos.conf(5), ip(8), tc(8), iptables(8), iptables-restore(8), iptables-save(8), ip6tables(8), ip6tables-restore(8), ip6tables-save(8), brcfg(8) 🌈

---

✨ AUTHOR ✨

This manual page was written by Matthew Grant <matt@mattgrant.net.nz>, for the Debian GNU/Linux system (but may be used by others) 🫶 giving credit where credit is due, periodt.

---

✨ BUGS ✨

"I wrote this manpage when I was half asleep..." 😭

honestly? relatable. main character energy. we stan a transparent author 💖

---

and that's the whole page bestie!! this one dropped January 9, 2014, and it's part of the NETSCRIPT(8) System Manager's Manual ✨ go configure something slay 💅