mirror of
https://github.com/webmin/webmin.git
synced 2026-01-16 15:06:07 +00:00
386 lines
17 KiB
Plaintext
386 lines
17 KiB
Plaintext
index_title=Linux IPTables Firewall
|
|
index_title_v=IPv4 Firewall
|
|
index_title_v6=IPv6 Firewall
|
|
index_position=Showing rules $1 to $2 of $3
|
|
index_editing=rules file $1
|
|
index_ecommand=The command $1 was not found on your system. Webmin needs this command to configure IPtables.
|
|
index_ekernel=An error occured when checking your current IPtables configuration : $1 This may indicate that your kernel does not support IPtables.
|
|
index_header=Firewall configuration from $1
|
|
index_evalid=WARNING! Your current IPtables configuration is invalid : $1
|
|
index_change=Showing IPtable:
|
|
index_chain_input=Incoming packets (INPUT) - Only applies to packets addressed to this host
|
|
index_chain_output=Outgoing packets (OUTPUT) - Only applies to packets originated by this host
|
|
index_chain_forward=Forwarded packets (FORWARD) - Only applies to packets passed through this host
|
|
index_chain_prerouting=Packets before routing (PREROUTING)
|
|
index_chain_postrouting=Packets after routing (POSTROUTING)
|
|
index_chain=Chain $1
|
|
index_action=Action
|
|
index_desc=Condition
|
|
index_comm=Comment
|
|
index_move=Move
|
|
index_none=There are no rules defined for this chain.
|
|
index_policy=Set Default Action To:
|
|
index_policy_accept=Accept
|
|
index_policy_drop=Drop
|
|
index_policy_queue=Userspace
|
|
index_policy_return=Exit chain
|
|
index_jump_accept=<font color=#00aa00>Accept</font>
|
|
index_jump_drop=<font color=#ff0000>Drop</font>
|
|
index_jump_reject=<font color=#ff4400>Reject</font>
|
|
index_jump_queue=<font color=#0000ff>Userspace</font>
|
|
index_jump_return=Exit chain
|
|
index_jump_log=Log packet
|
|
index_jump_masquerade=Masquerade
|
|
index_jump_redirect=Redirect
|
|
index_jump_dnat=Destination NAT
|
|
index_jump_snat=Source NAT
|
|
index_jump_=Do nothing
|
|
index_jump=Jump to chain $1
|
|
index_radd=Add Rule
|
|
index_cdelete=Delete Chain
|
|
index_crename=Rename Chain
|
|
index_cclear=Clear All Rules
|
|
index_cdeletesel=Delete Selected
|
|
index_cmovesel=Move Selected
|
|
index_cadd=Add a new chain named:
|
|
index_apply=Apply Configuration
|
|
index_applydesc=Click this button to make the firewall configuration listed above active. Any firewall rules currently in effect will be flushed and replaced
|
|
index_applydesc2=Click this button to make the firewall configuration listed above active on all servers in the cluster. Any firewall rules currently in effect will be flushed and replaced
|
|
index_unapply=Revert Configuration
|
|
index_unapplydesc=Click this button to reset the configuration listed above to the one that is currently active.
|
|
index_unapply2=Save Configuration
|
|
index_unapply2desc=Click this button to save the configuration above into the permanent firewall configuration file.
|
|
index_table_filter=Packet filtering (filter)
|
|
index_table_nat=Network address translation (nat)
|
|
index_table_mangle=Packet alteration (mangle)
|
|
index_existing=Webmin has detected $1 IPtables firewall rules currently in use, which are not recorded in the save file $2. These rules were probably setup from a script, which this module does not know how to read and edit.<p>If you want to use this module to manage your IPtables firewall, click the button below to convert the existing rules to a save file, and then disable your existing firewall script.
|
|
index_saveex=Save Firewall Rules
|
|
index_atboot=Enable firewall at boot time?
|
|
index_headerex=Existing firewall configuration
|
|
index_bootup=Activate at boot
|
|
index_bootupdesc=Change this option to control whether your firewall is activated at boot time or not.
|
|
index_return=rules list
|
|
index_setup=No IPtables firewall has been setup yet on your system. Webmin can set one up for you, to be stored in the save file $1, with the initial settings based your selection of firewall type below..
|
|
index_rsetup=The IPtables firewall configuration on your system is about to be re-set. Webmin will set up new default rules, to be stored in the save file $1, with the initial settings based your selection of firewall type below..
|
|
index_auto0=Allow all traffic
|
|
index_auto1=Do network address translation on external interface:
|
|
index_auto2=Block all incoming connections on external interface:
|
|
index_auto3=Block all except SSH and IDENT on external interface:
|
|
index_auto4=Block all except SSH, IDENT, ping and high ports on interface:
|
|
index_auto5=Block all except ports used for virtual hosting, on interface:
|
|
index_auto=Setup Firewall
|
|
index_add=Add
|
|
index_shorewall=It appears that Shorewall is being used to generate your system's firewall. Maybe you should use the <a href='$1'>Shoreline Firewall module</a> instead.
|
|
index_firewalld=It appears that FirewallD is being used to generate your system's firewall. Maybe you should use the <a href='$1'>FirewallD module</a> instead.
|
|
index_fail2ban=It appears that Fail2Ban is being used to manage some firewall rules. You should modify them with <a href='$1'>Fail2Ban module</a> and filter <a href=$2>f2b-.*</a> or <a href=$2>fail2ban-.*</a>.
|
|
index_filter_chain=is not managed by firewall.
|
|
index_filter_nodirect=External managed rules detected. Activate "<a href=$1>Directly edit firewall rules"</a> or your firewall rules may break.
|
|
index_reset=Reset Firewall
|
|
index_resetdesc=Click this button to clear all existing firewall rules and set up new rules for a basic initial configuration.
|
|
index_cluster=Cluster Servers
|
|
index_clusterdesc=Click this button to set up additional Webmin servers to which the firewall configuration will be automatically copied.
|
|
index_ipset=IPset Protocol
|
|
index_ipset_title=Active IPsets which can be used by firewall rules
|
|
index_ipset_name=Name of IPset
|
|
index_ipset_type=Type
|
|
index_ipset_elem=# Elements
|
|
index_ipset_maxe=# Max
|
|
index_ipset_size=Size
|
|
index_ipvxmode=Change IP protocol version:
|
|
index_ipvx4=IPv4
|
|
index_ipvx6=IPv6
|
|
|
|
desc_p=protocol is $1
|
|
desc_p!=protocol is not $1
|
|
desc_s=source is $1
|
|
desc_s!=source is not $1
|
|
desc_d=destination is $1
|
|
desc_d!=destination is not $1
|
|
desc_i=input interface is $1
|
|
desc_i!=input interface is not $1
|
|
desc_o=output interface is $1
|
|
desc_o!=output interface is not $1
|
|
desc_f=packet is a fragment
|
|
desc_f!=packet is not a fragment
|
|
desc_sport=source port is $1
|
|
desc_sport!=source port is not $1
|
|
desc_dport=destination port is $1
|
|
desc_dport!=destination port is not $1
|
|
desc_sports=source ports are $1
|
|
desc_sports!=source ports are not $1
|
|
desc_dports=destination ports are $1
|
|
desc_dports!=destination ports are not $1
|
|
desc_tcp-flags=TCP flags $2 (of $1) are set
|
|
desc_tcp-flags!=TCP flags $2 (of $1) are not set
|
|
desc_tcp-option=packet uses TCP option $1
|
|
desc_tcp-option!=packet does not use TCP option $1
|
|
desc_icmp-type=ICMP type is $1
|
|
desc_icmp-type!=ICMP type is not $1
|
|
desc_icmpv6-type=ICMP type is $1
|
|
desc_icmpv6-type!=ICMP type is not $1
|
|
desc_mac-source=ethernet address is $1
|
|
desc_mac-source!=ethernet address is not $1
|
|
desc_limit=rate is less than $1
|
|
desc_limit!=rate is more than $1
|
|
desc_limit-burst=burst rate is less than $1
|
|
desc_limit-burst!=burst rate is more than $1
|
|
desc_ports=source and destination ports are $1
|
|
desc_ports!=source and destination ports are not $1
|
|
desc_uid-owner=sender is user $1
|
|
desc_uid-owner!=sender is not user $1
|
|
desc_gid-owner=sender is group $1
|
|
desc_gid-owner!=sender is not group $1
|
|
desc_pid-owner=process ID of sender is $1
|
|
desc_pid-owner!=process ID of sender is not $1
|
|
desc_sid-owner=session group of sender is $1
|
|
desc_sid-owner!=session group of sender is not $1
|
|
desc_state=state of connection is $1
|
|
desc_state!=state of connection is not $1
|
|
desc_ctstate=state of connection is $1
|
|
desc_ctstate!=state of connection is not $1
|
|
desc_tos=type of service field is $1
|
|
desc_tos!=type of service field is not $1
|
|
desc_match-set=$2 matches IPset $1
|
|
desc_match-set!=$2 does not match IPset $1
|
|
desc_match-set_src=incoming traffic
|
|
desc_match-set_dst=outgoing traffic
|
|
desc_physdev-in=input physical interface is $1
|
|
desc_physdev-in!=input physical interface is not $1
|
|
desc_physdev-out=output physical interface is $1
|
|
desc_physdev-out!=output physical interface is not $1
|
|
desc_conds=If $1
|
|
desc_and=and
|
|
desc_always=Always
|
|
desc_args--match-set=$2 is contained in IP-set $1
|
|
desc_src=source
|
|
desc_dest=destination
|
|
|
|
redhat_einstalled2=No <tt>$1</tt> bootup action was found, indicating that the IPtables package is not installed on your system
|
|
redhat_eoutput=An error occured getting IPtables status from the command $1. This probably indicates that your system has been configured to use IPchains instead of IPtables.
|
|
|
|
gentoo_escript=The Gentoo IPtables startup script $1 was not found on your system.
|
|
|
|
eiptables2=Unknown IPtables save file entry at line $2 : $1
|
|
eip6tables2=Unknown IP6tables save file entry at line $2 : $1
|
|
|
|
edit_title1=Add Rule
|
|
edit_title2=Edit Rule
|
|
edit_title3=Clone Rule
|
|
edit_header1=Chain and action details
|
|
edit_chain=Part of chain
|
|
edit_cmt=Rule comment
|
|
edit_jump=Action to take
|
|
edit_jump_other=Run chain
|
|
edit_header2=Condition details
|
|
edit_desc=The action selected above will only be carried out if <b>all</b> the conditions below are met.
|
|
edit_source=Source address or network
|
|
edit_ignore=Ignored
|
|
edit_is=Equals
|
|
edit_not=Does not equal
|
|
edit_dest=Destination address or network
|
|
edit_in=Incoming interface
|
|
edit_out=Outgoing interface
|
|
edit_frag=Fragmentation
|
|
edit_fragis=Is fragmented
|
|
edit_fragnot=Is not fragmented
|
|
edit_proto=Network protocol
|
|
edit_sport=Source TCP or UDP port
|
|
edit_dport=Destination TCP or UDP port
|
|
edit_port0=Port(s)
|
|
edit_port1=Port range $1 to $2
|
|
edit_ports=Source and destination port(s)
|
|
edit_tcpflags=TCP flags set
|
|
edit_flags=$2 out of<br> $1
|
|
edit_tcpoption=TCP option number is set
|
|
edit_icmptype=ICMP packet type
|
|
edit_mac=Ethernet address
|
|
edit_limit=Packet flow rate
|
|
edit_below=Below
|
|
edit_above=Above
|
|
edit_limitburst=Packet burst rate
|
|
edit_uidowner=Sending unix user
|
|
edit_gidowner=Sending unix group
|
|
edit_pidowner=Sending process ID
|
|
edit_sidowner=Sending process group
|
|
edit_state=Connection states
|
|
edit_state_new=New connection
|
|
edit_state_established=Existing connection
|
|
edit_state_related=Related to existing
|
|
edit_state_invalid=Not part of any connection
|
|
edit_state_untracked=Not tracked
|
|
edit_state_snat=Source NATd
|
|
edit_state_dnat=Destination NATd
|
|
edit_tos=Type of service
|
|
edit_rtoports=Target ports for redirect
|
|
edit_prange=Port range $1 to $2
|
|
edit_mtoports=Source ports for masquerading
|
|
edit_dnat=IPs and ports for DNAT
|
|
edit_dnatip=IP range $1 to $2
|
|
edit_snat=IPs and ports for SNAT
|
|
edit_any=Any
|
|
edit_oifc=Other..
|
|
edit_clone=Clone rule
|
|
edit_before=Before rule $1
|
|
edit_after=After rule $1
|
|
edit_args=Additional parameters
|
|
edit_mods=Additional IPtables modules
|
|
edit_rwith=Reject with ICMP type
|
|
edit_rwithtype=Type $1
|
|
edit_physdevin=Incoming physical interface
|
|
edit_physdevout=Outgoing physical interface
|
|
edit_physdevisin=Packet incoming on bridge interface
|
|
edit_physdevisout=Packet outgoing on bridge interface
|
|
edit_physdevisbridged=Packet is being bridged
|
|
edit_matchset=Matching IPset
|
|
edit_matchsetsrc=on incoming traffic
|
|
edit_matchsetdst=on outgoing traffic
|
|
|
|
save_err=Failed to save rule
|
|
save_echain=Missing or invalid chain to run
|
|
save_esource=Missing or invalid source address or network
|
|
save_edest=Missing or invalid destination address or network
|
|
save_ein=Missing or invalid incoming interface
|
|
save_eout=Missing or invalid outgoing interface
|
|
save_eproto=No protocol selected
|
|
save_esport=Missing or invalid source port(s)
|
|
save_esportfrom=Invalid range start for source ports
|
|
save_esportto=Invalid range end for source ports
|
|
save_esportrange=You must enter at least a start or end for the source port range
|
|
save_etcpudp=Source and destination port conditions can only be used if the protocol is TCP, UDP or SCTP
|
|
save_edport=Missing or invalid destination port(s)
|
|
save_edportfrom=Invalid range start for destination ports
|
|
save_edportto=Invalid range end for destination ports
|
|
save_edportrange=You must enter at least a start or end for the destination port range
|
|
save_eports=Missing or invalid source and destination port(s)
|
|
save_etcp1=The TCP flags condition can only be used if the protocol is TCP
|
|
save_etcpflags=You must select at least one TCP flag from each row
|
|
save_etcpflags2=You must select at least one TCP flag from the second row
|
|
save_etcp2=The TCP option number condition can only be used if the protocol is TCP
|
|
save_etcpoption=Missing or invalid TCP option number
|
|
save_eicmp=The ICMP packet type condition can only be used if the protocol is ICMP
|
|
save_emac=Missing or invalid ethernet address
|
|
save_elimit=Missing or invalid packet flow rate
|
|
save_elimitburst=Missing or invalid packet burst rate
|
|
save_euidowner=Missing or invalid sending unix user
|
|
save_egidowner=Missing or invalid sending unix group
|
|
save_epidowner=Missing or invalid sending process ID
|
|
save_esidowner=Missing or invalid sending process group ID
|
|
save_ertoports=Missing or invalid redirect target port
|
|
save_emtoports=Missing or invalid masquerade source port
|
|
save_edipfrom=Missing or invalid starting IP address for DNAT
|
|
save_edipto=Invalid ending IP address for DNAT
|
|
save_edpfrom=Invalid starting port for DNAT
|
|
save_edpto=Missing or invalid ending port for DNAT
|
|
save_esipfrom=Missing or invalid starting IP address for SNAT
|
|
save_esipto=Invalid ending IP address for SNAT
|
|
save_espfrom=Invalid starting port for SNAT
|
|
save_espto=Missing or invalid ending port for SNAT
|
|
save_estates=No connection states selected
|
|
save_ecanjump=You are not allowed to use this action
|
|
save_ephysdevin=Missing or invalid incoming physical interface
|
|
save_ephysdevout=Missing or invalid outgoing physical interface
|
|
|
|
delete_title=Delete Chain
|
|
delete_rusure=Are you sure you want to delete the chain $1 ? $2 rules within it will be deleted.
|
|
delete_ok=Delete Now
|
|
delete_ecannot=You are not allowed to delete chains
|
|
|
|
clear_title=Clear Chain
|
|
clear_rusure=Are you sure you want to delete all $2 rules from chain $1 ?
|
|
clear_ecannot=You are not allowed to clear chains
|
|
|
|
new_err=Failed to create chain
|
|
new_ename=Missing or invalid chain name
|
|
new_etaken=A chain with this name already exists
|
|
new_ecannot=You are not allowed to create chains
|
|
|
|
apply_err=Failed to apply configuration
|
|
apply_ecannot=You are not allowed to apply the configuration
|
|
apply_remote=Error from $1 : $2
|
|
unapply_err=Failed to revert configuration
|
|
unapply_ecannot=You are not allowed to revert the configuration
|
|
bootup_ecannot=You are not allowed to enable or disable the firewall at bootup
|
|
|
|
log_create_rule=Added rule to chain $1 in table $2
|
|
log_modify_rule=Modified rule in chain $1 in table $2
|
|
log_delete_rule=Deleted rule in chain $1 in table $2
|
|
log_move_rule=Moved rule in chain $1 in table $2
|
|
log_delete_chain=Deleted chain $1 from table $2
|
|
log_rename_chain=Renamed chain $1 in table $2
|
|
log_clear_chain=Cleared chain $1 in table $2
|
|
log_create_chain=Created chain $1 in table $2
|
|
log_modify_chain=Set default action for chain $1 in table $2
|
|
log_delsel_chain=Deleted $3 rules from chain $1 in table $2
|
|
log_movesel_chain=Moved $3 rules from chain $1 in table $2
|
|
log_apply=Applied configuration
|
|
log_unapply=Reverted configuration
|
|
log_setup=Set up firewall
|
|
log_convert=Converted existing firewall
|
|
log_bootup=Enabled firewall at boot time
|
|
log_bootdown=Disabled firewall at boot time
|
|
log_add_host=Added cluster server $1
|
|
log_add_group=Added cluster servers from group $1
|
|
log_delete_host=Removed cluster server $1
|
|
log_delete_group=Removed $1 cluster servers
|
|
log_openports=Opened firewall ports $1
|
|
|
|
setup_eiface=No external network interface entered
|
|
setup_ecannot=You are not allowed to setup the firewall
|
|
|
|
acl_tables=Allowed IPtables
|
|
acl_apply=Can apply configuration?
|
|
acl_unapply=Can un-apply configuration?
|
|
acl_bootup=Can enable firewall at boot?
|
|
acl_setup=Can perform initial firewall setup?
|
|
acl_cluster=Can manage firewall cluster?
|
|
acl_jumps=Allowed actions
|
|
acl_jall=All
|
|
acl_newchain=Can create new chains?
|
|
acl_delchain=Can delete or clear chains?
|
|
acl_policy=Can change default policy?
|
|
|
|
etable=You are not allowed to edit this IPtable
|
|
ejump=You are not allowed to edit this rule
|
|
ecluster=You are not allowed to manage the firewall cluster
|
|
|
|
cluster_title=Cluster Firewall Servers
|
|
cluster_none=No servers have been added to the firewall cluster yet.
|
|
cluster_host=Hostname
|
|
cluster_desc=Description
|
|
cluster_os=Operating system
|
|
cluster_add=Add server
|
|
cluster_gadd=Add servers in group
|
|
cluster_need=You must add servers with a login and password in the Webmin Servers Index module before they can be managed here.
|
|
cluster_return=cluster servers
|
|
cluster_delete=Remove Selected
|
|
|
|
add_title=Add Servers
|
|
add_msg=Adding $1 ..
|
|
add_gmsg=Adding servers in group $1 ..
|
|
add_err=Failed to add server
|
|
add_gerr=Failed to add group
|
|
add_echeck=Server $1 does not have the Linux Firewall module
|
|
add_emissing=Server $1 is missing the firewall command $2
|
|
add_ok=Added $1, with $2 active firewall rules.
|
|
add_enone=No servers to add selected!
|
|
|
|
policy_ecannot=You are not allowed to change the default policy for this chain
|
|
|
|
move_title=Move Rules
|
|
move_count=Rules selected
|
|
move_chain=Current change
|
|
move_dest=Destination chain
|
|
move_ok=Move Now
|
|
move_header=Rule move options
|
|
|
|
rename_title=Rename Chain
|
|
rename_count=Rules in chain
|
|
rename_chain=Current name
|
|
rename_name=New name
|
|
rename_ok=Rename Now
|
|
rename_header=Chain rename options
|
|
rename_adjust=Modify other rules that jump to this chain?
|
|
rename_none=None
|
|
rename_ecannot=You are not allowed to rename chains
|
|
__norefs=1
|