---
name: "netscript-ipfilter"
section: "8"
platform: "linux"
package: "netscript-ipfilter"
version: "5.5.5+nmu3"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/netscript-ipfilter"
---

# netscript-ipfilter(8)

netscript network configuration command

## NAME

netscript - netscript network configuration command

## SYNOPSIS

**netscript start\|stop\|reload\|restart**\
 **netscript ipfilter load\|clear\|fairq\|flush\|reload\|save**\
 **netscript ipfilter usebackup \[** *backup-number* **\]**\
 **netscript ipfilter exec** *\<function-name1\>\|\<function-name2\> \[chain p1 p2 ...\]*\
 **netscript ip6filter load\|clear\|fairq\|flush\|reload\|save**\
 **netscript ip6filter usebackup \[** *backup-number* **\]**\
 **netscript ip6filter exec** *\<function-name1\>\|\<function-name2\> \[chain p1 p2 ...\]*\

## DESCRIPTION

This manual page documents briefly the **netscript** command from the netscript router/firewall network configuration package.

This command is used to configure/reconfigure the iptables filter setup, that are configured in netscript's configuration files.

## IPTABLES CONFIGURATION

Configuration saving is done by [**iptables-save**(8)](/iptables-save/8.md) and [**iptables-restore**(8)](/iptables-restore/8.md).

## OPTIONS

- **start**

  Set up networking configruation by loading ipcahins filters, setting up bridge, configuring interfaces and running any configured lower layer protocol daemons or commands. For use from a startup script.

- **stop**

  Shut everything down. For use from a startup script.

- **reload**

  Refresh the setup of netscript from the configuration files in /etc/netscript

- **restart\|force-reload**

  Stop everything and then start everything again. For use from a startup script.

- **ipfilter load\|reload**

  Load/reload the IPv4 iptables filters and reconfigure the firewalling, from that saved in  */etc/netscript/iptables* (via  **[iptables-restore(8)](/iptables-restore/8.md)** ), and the QoS fair queuing setup.

- **ipfilter save**

  Save the IPv4 iptables configuration to /etc/netscript/iptables via  **[iptables-save(8)](/iptables-save/8.md)** , after backing it up to  */etc/netscript/iptables.1* and cycling the previous backup files down through the configuration history.

- **ipfilter usebackup \[** *backup-number* **\]**

  Restore setup from the IPv4 iptables backup configuration from  */etc/netscript/iptables.n* ( default 1 ) via  **[iptables-restore(8)](/iptables-restore/8.md).**

- **ipfilter clear\|flush**

  Remove iptables and any firewall setup, and if IPV4\_FWDING\_KERNEL is set to FILTER\_ON (see  **[network.conf(5)](/network.conf/5.md)** ), disables all IPv4 packet forwarding on the router.  Very useful for debugging protocol problems on a firewall by enabling a reasonably safe check to be made with the filtering down.

- **ipfilter forward\|fwd**

  Turns on the IPv4 kernel forwarding switch manually.  This is irrespective of the setting of IPV4\_FWDING\_KERNEL (see **[network.conf(5)](/network.conf/5.md)** ). Use with *caution* as it will allow traffic through the box.

- **ipfilter noforward\|nofwd**

  Turns off the IPv4 kernel forwarding switch manually.  This is irrespective of the setting of IPV4\_FWDING\_KERNEL (see **[network.conf(5)](/network.conf/5.md)** ). Use with *caution* as it will cut off reachability.

- **ipfilter fairq**

  Reload the IPv4 *fairq* chain that marks the packets for the  **QoS** interface transmit queues.

- **ip6filter load\|reload**

  Load/reload the IPv6 iptables filters and reconfigure the firewalling, from that saved in  */etc/netscript/ip6tables*\
    (via  **[ip6tables-restore(8)](/ip6tables-restore/8.md)** ), and the QoS fair queuing setup.

- **ip6filter save**

  Save the IPv6 iptables configuration to /etc/netscript/iptables via  **[ip6tables-save(8)](/ip6tables-save/8.md)** , after backing it up to  */etc/netscript/ip6tables.1* and cycling the previous backup files down through the configuration history.

- **ip6filter usebackup \[** *backup-number* **\]**

  Restore setup from the IPv6 iptables backup configuration from  */etc/netscript/ip6tables.n* ( default 1 ) via  **[ip6tables-restore(8)](/ip6tables-restore/8.md).**

- **ip6filter clear\|flush**

  Remove IPv6 iptables setup, and if IPV6\_FWDING\_KERNEL is set to FILTER\_ON (see  **[network.conf(5)](/network.conf/5.md)** ), disables all IPv6 packet forwarding on the router.  Very useful for debugging protocol problems on a firewall by enabling a reasonably safe check to be made with the filtering down.

- **ip6filter forward\|fwd**

  Turns on the IPv6 kernel forwarding switch manually.  This is irrespective of the setting of IPV6\_FWDING\_KERNEL (see **[network.conf(5)](/network.conf/5.md)** ). Use with *caution* as it will allow traffic through the box.

- **ip6filter noforward\|nofwd**

  Turns off the IPv6 kernel forwarding switch manually.  This is irrespective of the setting of IPV6\_FWDING\_KERNEL (see **[network.conf(5)](/network.conf/5.md)** ). Use with *caution* as it will affect reachability.

- **ip6filter fairq**

  Reload the IPv6  *fairq* chain that marks the packets for the  **QoS** interface transmit queues.

## FILES

*/etc/netscript/ipfilter.conf, /etc/netscript/network.conf,*\
 */etc/netscript/iptables, /etc/netscript/ip6tables,*\

## SEE ALSO

[**ipfilter.conf**(5)](/ipfilter.conf/5.md), [**network.conf**(5)](/network.conf/5.md), [**ip**(8)](/ip/8.md), [**tc**(8)](/tc/8.md), [**iptables**(8)](/iptables/8.md), [**iptables-restore**(8)](/iptables-restore/8.md), [**iptables-save**(8)](/iptables-save/8.md), [**ip6tables**(8)](/ip6tables/8.md), [**ip6tables-restore**(8)](/ip6tables-restore/8.md), [**ip6tables-save**(8)](/ip6tables-save/8.md), [**brcfg**(8)](/brcfg/8.md).\

## AUTHOR

This manual page was written by Matthew Grant \<matt@mattgrant.net.nz\>, for the Debian GNU/Linux system (but may be used by others).

## BUGS

I wrote this manpage when I was half asleep...