Development December 2019

development@lists.ipfire.org

13 participants
46 discussions

[PATCH] BUG11695: Adding/editing rules with preset broken
by Alexander Marx 15 Jul '21

15 Jul '21

added another check to fill same ports in source and destination when a custom service is selected. Signed-off-by: Alexander Marx <alexander.marx(a)ipfire.org> Reported-by: erik(a)vanlinsteeict.nl --- html/cgi-bin/firewall.cgi | 1 + 1 file changed, 1 insertion(+) diff --git a/html/cgi-bin/firewall.cgi b/html/cgi-bin/firewall.cgi index 499f279..d17afab 100644 --- a/html/cgi-bin/firewall.cgi +++ b/html/cgi-bin/firewall.cgi @@ -757,6 +757,7 @@ sub checkrule } } if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'dnatport'} eq ''){$fwdfwsettings{'dnatport'}=$custsrvport;} + if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'grp3'} eq 'cust_srv'){$fwdfwsettings{'dnatport'}=$custsrvport;} } #check if DNAT port is multiple if($fwdfwsettings{'nat'} eq 'dnat' && $fwdfwsettings{'dnatport'} ne ''){ -- 2.7.4

3 2

Re: [PATCH 0/5] ipblacklist: IP Address Blacklists
by Michael Tremer 30 Jan '20

30 Jan '20

Hi, > On 16 Dec 2019, at 20:06, Tim FitzGeorge <lists(a)tfitzgeorge.me.uk> wrote: > > Hi, > > I've attached the current GUI screenshot. Thanks for that. I have a couple of suggestions/concerns about it: a) I am not sure what the value is about the top box that is called “Status”. It is basically a summary of the iptables output, but will it help the user? A blacklist with more or fewer entries is not better or worse, blocking more packets isn’t better than blocking fewer. It is about the quality of the blocks. b) I would prefer to move the settings box to the top. If you like you can show the size of the blacklists there and when they have been updated, too. c) I would suggest to remove the “safe” column because that is a very hard summary of what the lists do. We should explain that on the wiki. I guess this is too complicated to explain to our users in one sentence and it needs at least a page of text. People who do not read that have you just lost out. d) I do not understand what the “update check rate” means. I suppose we should show the update interval of the lists in the table and just refresh them according to that. e) Do we want to keep the automatic blacklists now? I do not think it will actually improve the security of IPFire. > > I'll update the code based on our discussions, and submit an updated set > of patches - I imagine there will have to be at least one more iteration. Let’s wait until we have come to decisions :) -Michael > > Tim > > (No additional comments below) > > On 13/12/2019 23:11, Michael Tremer wrote: >> Hi, >> >> Again my apologies for my late reply. Busy busy weeks. >> >>> On 8 Dec 2019, at 20:50, Tim FitzGeorge <ipfr(a)tfitzgeorge.me.uk> wrote: >>> >>> Hello, >>> >>> It's my turn to apologise for being slow to respond - I've had a busy >>> week, but I should have plenty of time over the next couple of weeks. >> >> No worries. Turns out we all do :) >> >>> I've made most of the comments inline, however I think Michael had a >>> question (which I can't find now) about what happens if someone enables >>> all the lists. One thing which would perhaps make this less likely is >>> that the WUI tags the available lists with whether they're safe or not, >>> with a footnote that safe means that the list only blocks malicious >>> traffic. This won't guarantee that a user won't still try to enable all >>> the lists, but it should make them realise that they should think first. >> >> We had a couple of features going slightly wrong or being “misunderstood” by some users. People still seem to panic when they see “local recursor”. To this day I do not know why. >> >> We cannot make everything idiot-proof. And when some user if of that category, they probably should shutdown their IPFire box, educate themselves and then come back again. So I do not want to limit people, but make things as easy as possible. >> >> If someone enables all the lists, good luck with passing packets :) >> >>> I have considered replacing this tag with a risk high/medium/low and >>> maybe adding a category (invalid/application/scanner/C&C or something >>> like that), but that may provide too much information and dissuade them >>> from actually following the links to checkout what the list actually does. >> >> Can we have a screenshot of the GUI right now? I didn’t run the code, yet. >> >> We should document the lists like we do it with the rulesets of the IPS. People might ignore this, but that is on them. >> >>> >>> Tim >>> >>> >>> On 05/12/2019 22:25, Michael Tremer wrote: >>>> Hello, >>>> >>>>> On 4 Dec 2019, at 17:05, Peter Müller <peter.mueller(a)ipfire.org> wrote: >>>>> >>>>> Hello Tim, hello Michael, >>>>> >>>>> please see my responses inline... >>>>>>>> >>>>>>>> We could periodically update the blacklists on our main mirror (and >>>>>>>> wait for the network to sync it), make sure it is signed and write >>>>>>>> a small downloader that fetches, validates and installs them. >>>>>>>> >>>>>>>> @All: Thoughts on this? >>>>>>> >>>>>>> I think there are a number of points here. >>>>>>> >>>>>>> Firstly, from the point of a third party using IPFire, is this really >>>>>>> solving the privacy disclosure problem? There's no way round disclosing >>>>>>> your public IP address to someone you're downloading from; all this does >>>>>>> is change who that information is being disclosed to. For the user >>>>>>> there's no way of knowing whether the source is more or less protective >>>>>>> of the user's privacy than the blacklist provider. Indeed it won't be >>>>>>> possible to know who the lists are being downloaded from until the >>>>>>> download starts. >>>>>> >>>>>> There is a way: Tor. But that is a totally different story. >>>>> Well, I see a third option on this: Use the mirror infrastructure we already >>>>> have. Every IPFire installation discloses its public IP address to one of these >>>>> servers sooner or later, so we do not disclose additional data if the blacklists >>>>> were fetched from these. >>>>> >>>>> Needless to say, Tor (hidden services) would be better, but that is a different >>>>> story indeed. :-) >>>>>> >>>>>> The point is rather that a forget list can be sent instead of the “real” one. >>>>> I did not get this. Forget? Forged?? ??? >>>> >>>> Yes, I meant to write forged, but auto-correct didn’t let me. >>>> >>>>>>> Secondly, latency; some of the lists are updated every 5 minutes. While >>>>>>> I've limited the maximum check rate to hourly, will the updates >>>>>>> propagate quickly enough. For reference on my main system the 24 >>>>>>> updates on the CIARMY list made 143 498 changes (additions or >>>>>>> deletions). I've seem it do over 200 000. >>>>> Yes, I observe that behaviour for CINS/CIArmy too. Unfortunately, they do not >>>>> document a recommended update interval anywhere, so we can only guess. >>>>> >>>>> Personally, more static lists seem to be preferable for packet filtering. Highly >>>>> dynamic ones such as CIArmy should be done via DNSBL queries or something similar >>>>> - do we really want to have that list here? >>>> >>>> It is not really an option to implement a DNSBL into a packet filter, but I get your point. >>> >>> One of the 'selling points' for an IP address blacklist is that it can >>> respond quickly to new threats - or rather new attackers. While a new >>> IDS/IPS rule needs time to analyse the threat, generate a rule and check >>> it, it's easy to add an address to a list. So, I think the CIArmy list >>> is potentially useful for protecting home systems etc. with budget >>> hardware, but I would be very careful about using it for a protecting a >>> general access website. >> >> If they are very volatile, we should honour that and update them often, too. >> >> It probably is more about false-positives being removed very quickly instead of adding threats very quickly. The average IPFire user is probably not under threats like these to need to react very quickly. >> >> So I do not see much value in adding those lists and then updating once a day. Does it have to be every 5 min? No. I would suggest 15 which should be good enough for everyone. >> >> Other lists should of course not be updated every 15 minutes when not needed. >> >> Running every 15 minutes would allow us to retry downloading lists that are on an hourly schedule if the download failed. >> >>>> >>>>>> How did you come up with the hour? Will it be retried more often if the download was not successful? >>>>> One hour is the most common interval indeed, but adding some random time might >>>>> be useful in order to reduce load on the servers providing a blacklist. >>>> >>>> Yes, definitely. Otherwise we will shoot down our mirrors. >>> >>> When I implemented that section of code, specifying the minimum check >>> period in hours seemed to provide a convenient way of allowing a check >>> period covering a wide range, with an hour as the fastest and a week as >>> the slowest. I didn't looked at the CIArmy list until much later. Most >>> of the lists don't change nearly as much, but the CIArmy list is >>> described as one that deliberately responds quickly. >>> >>> From my production system, for yesterday: >>> >>> The following block lists were updated: >>> BLOCKLIST_DE: 24 Time(s) - 9341 change(s) >>> BOGON_FULL: 1 Time(s) - 10 change(s) >>> CIARMY: 24 Time(s) - 159134 change(s) >>> DSHIELD: 7 Time(s) - 18 change(s) >>> EMERGING_FWRULE: 1 Time(s) - 50 change(s) >>> FEODO_AGGRESIVE: 24 Time(s) - 13 change(s) >>> SHODAN: 1 Time(s) - 0 change(s) >>> SPAMHAUS_DROP: 1 Time(s) - 0 change(s) >>> TOR_EXIT: 24 Time(s) - 162 change(s) >> >> Very interesting statistics. >> >>> >>> and my test system: >>> >>> The following block lists were updated: >>> ALIENVAULT: 19 Time(s) - 5331 change(s) >>> EMERGING_COMPROMISED: 1 Time(s) - 26 change(s) >>> TALOS_MALICIOUS: 1 Time(s) - 36 change(s) >>> >>> That covers most of the lists. From the WUI, since 1 Dec: >>> >>> Blacklist Entries pkts bytes Last updated >>> in in >>> AUTOBLACKLIST 0 731 51144 Sun Dec 8 18:40:02 2019 >>> BLOCKLIST_DE 28020 857 46735 Sun Dec 8 18:40:02 2019 >>> BOGON_FULL 214 5255 189K Sun Dec 8 16:50:04 2019 >>> CIARMY 15000 19774 976K Sun Dec 8 18:04:01 2019 >>> DSHIELD 20 7992 321K Sun Dec 8 16:45:13 2019 >>> EMERGING_FWRULE 1647 197 8383 Fri Dec 6 05:29:07 2019 >>> FEODO_AGGRESIVE 7169 0 0 Sun Dec 8 18:50:07 2019 >>> SHODAN 32 34 1530 Sun Dec 8 17:54:09 2019 >>> SPAMHAUS_DROP 823 0 0 Fri Dec 6 18:22:35 2019 >>> SPAMHAUS_EDROP 111 82 16433 Thu Dec 5 17:27:09 2019 >>> TOR_EXIT 1055 0 0 Sun Dec 8 18:31:02 2019 >> >> This as well. >> >> Those are more packets than I would have expected. >> >>> >>> (I've left out the pkts/bytes out fields which were all 0) >>> >>> Note that where possible I do a HEAD request first and then only >>> download the list if the modification time has changed since the last >>> check. For dynamically generated lists this isn't possible. >> >> You won’t need a HEAD request for it. You can include it in the GET request. >> >> Have a look at location downloader where I use that. The server will respond with 304 and not send any payload. >> >> https://git.ipfire.org/?p=location/libloc.git;a=blob;f=src/python/location-… >> >>> >>> If the download isn't successful it just gives up and waits for the next >>> attempt (apart from the usual retries in the library). I probably >>> should to change that so that it only applies the per list minimum >>> update period in this case (specified in the sources file) rather than >>> the user specified value as well. >> >> I think it is not the worst if an update fails. It might just happen every once in a while. >> >> So I would suggest to just re-run the script more often and when the mtime of the file is older than the threshold, a download is attempted. You can use that timestamp for the GET request. >> >>> I already use a time offset on the downloads - when it's started from >>> boot, backup restore or WUI enable, it checks to see if it's installed >>> in the fcrontab, and if not adds itself at a randomly generated offset >>> in the hour. >> >> That should potentially go to red.up, or if we can settle on 15 minutes, I would consider that often enough to quickly update all lists after a reboot. >> >>> >>>> >>>>>>> Third, bandwidth; while the downloads are fairly small (ALIENVAULT is >>>>>>> the largest at a few MB), there are going to be a lot of them. How will >>>>>>> this affect the willingness of people to mirror IPFire? >>>>> I do not consider this being a problem as we do not generate that much traffic >>>>> to them. Of course, that depends on the update interval again. >>>> >>>> That depends on your point of view. >>>> >>>> I do not have a problem with this at all in my data center, but there are plenty of people with a volume-based LTE plan or simply a 128 kBit/s connection. It will take a longer time to download the lists for them. We need to mind that. >>>> >>>>>>> >>>>>>>> >>>>>>>> Talking about the preference of packet filter and IPS, I prefer to >>>>>>>> use the latter as well as it gains more insight in what kind of malicious >>>>>>>> traffic tried to pass a firewall machine. On systems with low resources, >>>>>>>> this might be problematic and removing load from the IPS can be preferred >>>>>>>> (make this configurable?!), on others, people might want to have both >>>>>>>> results. >>>>>>>> >>>>>>> You're only going to get one result for a packet whichever way round the >>>>>>> IP blacklist and IPS are since whichever comes first will drop the >>>>>>> packet before it reaches the second (well it would be possible to put >>>>>>> the IP blacklist first and get it to log and mark packets which are then >>>>>>> dropped after the IPS, but I think that's getting a little complicated. >>>>>>> In addition I've seen the messages about the trouble marking was >>>>>>> causing in the QoS). >>>>>>> >>>>>>> I think it's a 50/50 choice as to which is more valuable first; it's >>>>>>> probably going to differ from packet to packet. For me the possibility >>>>>>> of reducing the IPS load means I prefer putting the IP blacklist first >>>>>>> >>>>>>> It should be fairly easy to add the choice of where to put the IP >>>>>>> blacklist. I think it'll have to be in the main firewall script, so >>>>>>> it'll require a firewall restart, but it's not something that'll be >>>>>>> changed often. >>>>>> >>>>>> I do not think that the user should choose this. If we cannot easily make a decision, how can our users do this? Not saying they are stupid here, we are just giving them something so that they do not have to put the thought and research into things themselves and make their jobs easier. >>>>> Agreed. >>>>> >>>>>> >>>>>> I think performance matters. And if the IPS comes first, the most likely case would be that we are seeing a SYN packet that is being scanned and after that being dropped by the blacklist. It was pointless to even scan the empty packet (TCP fast open aside). This is only different for other packets with payloads. >>>>>> >>>>>> We would protect the IPS from a SYN flooding attack here at least and from scanning more packets unnecessarily. >>>>> So dropping packets from blacklisted IP addresses/networks before IPS is it, then. >>>>>> >>>>>> I do not even think it makes sense to swap the order in the outgoing direction. >>>>> Me too. >>>>> >>>>>> >>>>>> What IPFire is lacking is a statistical analysis for those logs. Collecting more and more data isn’t helpful from my point of view. Only if you are looking at a very specific thing.This is true, but I am not sure if it makes sense to spend too much work on this. >>>>> Based on my personal experience, firewall hits observed on a single machine exposed >>>>> to the internet are interesting, but the overall situation across multiple machines >>>>> is even more interesting. Very quickly, you'll end on something like a centralised >>>>> logging server and custom statistical analysis here... >>>> >>>> Probably a project for IPFire 4.0 :) >>>> >>> Or use one of the existing services, like the DSHIELD client >>> https://dshield.org/howto.html (subject to privacy concerns again). >>>>>> >>>>>>>> >>>>>>>> Personally, I consider Spamhaus DROP/EDROP can be safely enabled by default. >>>>>>>> I would love to see the bogon ruleset here, too (think about 8chan successor >>>>>>>> hosted at unallocated RIPE space in Saint Petersburg), but that will likely cause >>>>>>>> interference if RED does not have a public IP address assigned. >>>>>>> >>>>>>> I can add a field to the options file that controls whether a list is >>>>>>> enabled by default. >>>>> Thank you. :-) >>>>>> >>>>>> To stress the point from above again: We would then share all public IP addresses of all IPFire systems in the world with Spamhaus and who is hosting their infrastructure. That can be considered a threat. >>>>> This is my only objection against this patchset. Now, what can we do about it? >>>>> One possibility is to apply the patchset now and implement a custom download >>>>> source thing later on, or do that before releasing Core Update 139 (or which version >>>>> the patchset will be to) after we agreed on something. >>>> >>>> I do not see this being merged for 139. But that is not important. We need to get it right first and then release it. >>>> >>>> As far as I know, nobody has tested this, yet. >>> >>> There are a number of people who have been running an earlier version >>> which I shared on GitHub. There were a few early issues, but it seems >>> to be OK now. >>> >>> https://forum.ipfire.org/viewtopic.php?f=27&t=21845 >>> >>> This version wasn't integrated into IPFire, so (for example) it inserted >>> itself into the INPUT IPTables chain rather than having it's chains >>> created as part of the firewall start-up script. >>> >>>> >>>> I have huge concerns about the automatic blacklist. @Peter: What is your opinion on this? >>>> >>> >>> While I implemented it, I'm aware of its potential to cause problems, >>> which is why it has to be separately enabled. It's not caused me any >>> issues at the default settings (blocks at over 10 packets per hour until >>> 1 hour has passed without seeing packets from the address), but I've not >>> used it on a site with publicly announced services. If I was going to >>> use it on a web site I would want to, at the very minimum, drop the >>> block period drastically. >> >> I suppose this is entirely unusable on an IPFire box in a data center that hosts things. Let’s say our rack in Hanover. >> >> You will have hits from some broken IP stacks and people might just end up on this without doing anything wrong. >> >> You can denial-of-service easily as well and I suppose without aggregation of data from many many systems, it does not make sense to instantly block addresses. And even then you probably would block an entire subnet. >> >> So I am not sure how I should feel about it. I do not think that it adds anything because the packets would have been blocked anyways. >> >>> >>> On the other hand, it's good at responding quickly. Usually I see only >>> 1-2% of blocks from the automatic list: >>> >>> Reason Count % First Last >>> CIARMY 2416 45 Dec 6 00:00 Dec 6 23:59 >>> DSHIELD 1353 25 Dec 6 00:00 Dec 6 23:59 >>> INPUT 1294 24 Dec 6 00:00 Dec 6 23:59 >>> AUTOBLACKLIST 122 2 Dec 6 00:20 Dec 6 16:28 >>> BLOCKLIST_DE 89 2 Dec 6 00:20 Dec 6 23:46 >>> >>> and sometimes none at all, but one one occasion it blocked over 8000 >>> packets. Again I'm aware this is for a home system, which is rather >>> different than from a Web server. >>> >>>>> If we do, I will have a look at the licensing stuff (DShield and Spamhaus do not >>>>> seem to be problematic, as they are hosted on 3rd party servers, too). >>>> >>>> One of them will be, sooner or later. And one is enough I suppose. >>> >>> DShield (https://dshield.org/api/#threatfeeds) and firehol >>> (http://iplists.firehol.org/) seem to host copies of most of the lists >>> as well. >>>> >>>> I do not really want to overthink this - we didn’t do this with clamav for example either. But it probably is a decision to be made by the user what they want to enable and we should not enable anything by default. So no data will be leaked as long as the user does not consent. >>>> >>>> -Michael >>>> >>>>> >>>>> Thanks, and best regards, >>>>> Peter Müller >> > > <Screenshot_2019-12-16_IP_Address_Blacklists.png>

3 19

DDNS: add new Provider key-sytems.net (domaindiscount24)
by Christof Weniger 23 Jan '20

23 Jan '20

Hi, I hope this is the correct way to submit this patch. https://www.domaindiscount24.com/ has its own ddns service runnning, which (for me) gets rid of the necessity of having to use an extra service for that. I tested the following patch on my system at home, and attached it to this mail. I started my quest at the community forum: https://community.ipfire.org/t/adding-new-ddns-provider/428/2 Christof

4 8

[PATCH 0/3] network-functions.pl : Correct comparisons and enhance testsuite
by Tim FitzGeorge 06 Jan '20

06 Jan '20

Fixes a number of minor bugs in network-functions.pl where comparisons of binary network representations is done using string rather than integer comparision operators, and checks for undefined values are done on the wrong variables. Also enhances the testsuite to display information on failed test. Fixes: 12263 Tim FitzGeorge (3): network-functions.pl : Enhance testsuite to show cause of error network-functions.pl : Compare correct variables in network_equal network-functions.pl : Use integer comparison rather than string config/cfgroot/network-functions.pl | 35 ++++++++++++++++++----------------- 1 file changed, 18 insertions(+), 17 deletions(-) -- 2.16.4

3 8

[PATCH] Chinese language: Add chinese language to WUI
by Erik Kapfer 06 Jan '20

06 Jan '20

Triggered by https://community.ipfire.org/t/translating-ipfire-into-chinese/697 . With the please from the user fxneng from the community platform to deliver his translation work, i deliver it now. Signed-off-by: Erik Kapfer <ummeegge(a)ipfire.org> --- langs/list | 1 + langs/zh/cgi-bin/zh.pl | 2969 ++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 2970 insertions(+) create mode 100644 langs/zh/cgi-bin/zh.pl diff --git a/langs/list b/langs/list index ed59c86b4..757acd32f 100644 --- a/langs/list +++ b/langs/list @@ -7,3 +7,4 @@ ru:Русский:Russian nl:Nederlands:Dutch tr:Türkçe:Turkish it:Italiano:Italian +zh:简体中文:中国 diff --git a/langs/zh/cgi-bin/zh.pl b/langs/zh/cgi-bin/zh.pl new file mode 100644 index 000000000..d0418939c --- /dev/null +++ b/langs/zh/cgi-bin/zh.pl @@ -0,0 +1,2969 @@ +%tr = ( +%tr, + +'24 hours' => '24小时', +'Act as' => 'Act as:', +'Add Level7 rule' => '添加7层规则', +'Add Port Rule' => '添加端口规则', +'Add Rule' => '添加规则', +'Add a route' => '添加路由', +'Async logging enabled' => '启用syslog文件的异步写入', +'Captive' => '强制门户', +'Captive 1day' => '1天', +'Captive 1month' => '1个月', +'Captive 1week' => '1星期', +'Captive GAIN ACCESS' => '获得访问', +'Captive WiFi coupon' => 'WiFi优惠卷', +'Captive activate' => '启用', +'Captive activated' => '已启用', +'Captive active on' => '启用在', +'Captive agree tac' => '我同意以下条款和条件。', +'Captive auth_lic' => '许可', +'Captive auth_vou' => '凭证', +'Captive authentication' => '访问类型', +'Captive brand color' => '品牌颜色', +'Captive branding' => '品牌推广', +'Captive client session expiry time' => '会话到期时间', +'Captive config' => '设置', +'Captive coupon' => '优惠券', +'Captive delete logo' => '删除徽标', +'Captive err doublevoucher' => '带有此代码的优惠券已存在', +'Captive expire' => '到期', +'Captive expiry time' => '到期时间', +'Captive export coupons' => '导出优惠券', +'Captive generate coupons' => '生成优惠券', +'Captive generated coupon no' => '优惠券号码', +'Captive heading terms' => '条款及细则', +'Captive heading voucher' => '优惠券或访问码', +'Captive invalid coupon' => '您输入了无效的优惠券代码。请再试一遍。', +'Captive invalid logosize' => '上传的图片文件不满足要求的分辨率，分辨率至少为1280x400，但不大于1920x800像素', +'Captive invalid_voucher' => '无效的代码。请再试一遍', +'Captive ip' => 'IP地址', +'Captive issued coupons' => '已发行的优惠券', +'Captive logo uploaded' => '已上传徽标', +'Captive logo_set' => '当前徽标', +'Captive mac' => 'MAC地址', +'Captive noexpiretime' => '没有给出有效的连接时间范围', +'Captive nolimit' => '不限制', +'Captive nr' => '号码', +'Captive please accept the terms and conditions' => '请接受条款条件', +'Captive please enter a coupon code' => '请输入优惠券代码', +'Captive portal' => 'IPFire强制门户', +'Captive portal coupons' => '强制门户优惠券', +'Captive terms' => '条款&条件', +'Captive terms short' => '条款&条件', +'Captive time' => '激活后的访问时间(小时)', +'Captive title' => '登录页标题', +'Captive upload logo' => '上传徽标', +'Captive upload logo recommendations' => '(PNG或JPEG, 建议1280x720像素)', +'Captive valid for' => '适用于', +'Captive voactive' => '活动优惠券', +'Captive voucher' => '优惠卷', +'Captive vouchervalid' => '此优惠券的允许时间', +'Captive vout' => '已发行凭证', +'Captive wrong ext' => '上传的文件类型错误', +'Choose Rule' => '选择以下规则中的一个。', +'Class' => '类', +'Class was deleted' => '具有潜在子类的类别被删除', +'ConnSched action' => '动作:', +'ConnSched add action' => '添加计划', +'ConnSched change profile title' => '更改配置:', +'ConnSched days' => '天:', +'ConnSched dial' => '连接', +'ConnSched down' => '向下', +'ConnSched hangup' => '断开连接', +'ConnSched ipsecstart' => '启动(或重启)IPsec', +'ConnSched ipsecstop' => '停止IPsec', +'ConnSched reboot' => '重启', +'ConnSched reconnect' => '重新连接', +'ConnSched scheduled actions' => '调度计划', +'ConnSched scheduler' => '计划', +'ConnSched select profile' => '选择配置', +'ConnSched shutdown' => '关机', +'ConnSched time' => '时间:', +'ConnSched up' => '向上', +'ConnSched weekdays' => '一周中某一天:', +'Daily' => '每天', +'Disabled' => '禁用', +'Edit an existing route' => '编辑现有路由', +'Enter TOS' => '激活或停用TOS-bits ，然后按保存。', +'Existing Files' => '数据库中的文件', +'HDD temperature' => '硬盘温度', +'Level7 Protocol' => '7层协议', +'Level7 Rule' => '7层规则', +'Level7 rule' => '7层规则', +'Local VPN IP' => '内部网络(绿色):', +'MB read' => '读(MB)', +'MB written' => '写(MB)', +'MTU' => 'MTU大小:', +'MTU settings' => 'MTU设置:', +'Number of Countries for the pie chart' => '饼图上的国家数量', +'Number of IPs for the pie chart' => '饼图上的IP数量', +'Number of Ports for the pie chart' => '饼图上的端口数量', +'OVPN' => 'OpenVPN', +'OpenVPN' => 'OpenVPN', +'Pages' => '页', +'Ping' => 'Ping :', +'Port Rule' => '端口规则', +'QoS not enabled' => '未启用QoS!', +'Queuelenght' => '队列长度', +'Remote IP' => '远程IP/主机名(DynDNS):', +'Remote VPN IP' => 'VPN子网 (例如:10.0.10.0/255.255.255.0):', +'Resolv' => '解析重试:', +'Scan for Files' => '从文件扫描', +'Scan from Directory' => '从目录扫描', +'Set time on boot' => '在启动时强制设置系统时钟', +'Subclass' => '子类', +'TOS Bits' => 'TOS-Bits', +'TOS Rule' => 'TOS-规则', +'TOS rule' => 'TOS 规则', +'The class number does not match the specified interface.' => '类号与指定的接口不匹配。', +'The destination IP address is invalid.' => '目标IP地址无效。', +'The source IP address is invalid.' => '源IP地址无效。', +'Utilization on' => 'Utilization on', +'Verbose' => '详细:', +'WakeOnLan' => '网络唤醒', +'Weekly' => '每周', +'a ca certificate with this name already exists' => '具有该名称的CA证书已存在。', +'a connection with this common name already exists' => '具有该通用名称的连接已存在。', +'a connection with this name already exists' => '具有该名称的连接已存在。', +'abort' => '中止', +'access allowed' => '允许访问从:', +'access refused with this oinkcode' => '此Oink代码拒绝访问', +'accounting' => '会计', +'accounting user nonpdc' => '会计 - 非PDC模式', +'accounting user pdc' => '会计 - PDC模式', +'action' => '动作', +'activate' => '激活', +'activate user' => '激活用户', +'active' => 'Active', +'add' => '添加', +'add a host' => '添加主机', +'add a new rule' => '添加规则:', +'add cron' => 'add cronjob', +'add device' => '添加设备', +'add network' => '添加网络', +'add new alias' => '添加别名', +'add new lease' => '添加新的固定租约', +'add new ovpn' => 'OpenVPN设置:', +'add printer' => '添加打印机', +'add service' => '添加服务', +'add share' => '添加共享', +'add subclass' => '添加子类', +'add user' => '添加用户', +'add xtaccess' => '添加外部访问', +'add-route' => '添加推送路由', +'added from dhcp lease list' => '从DHCP租约列表中添加', +'addons' => '插件', +'admin user password has been changed' => 'Admin用户密码已修改。', +'admin users' => 'User with superuser rights', +'administrator password' => 'Administrator密码', +'administrator user password' => 'Admin用户密码:', +'administrator username' => 'Administrator用户名', +'adsl settings' => 'ADSL设置', +'advanced' => '高级', +'advanced server' => '高级服务器选项', +'advproxy AUTH always required' => '要求身份验证不受限制的源地址', +'advproxy AUTH auth cache TTL' => '身份验证缓存TTL（分钟）', +'advproxy AUTH global settings' => '全局身份验证设置', +'advproxy AUTH limit of IP addresses' => '每个用户的IP地址限制', +'advproxy AUTH method' => '认证方法', +'advproxy AUTH method ident' => 'identd', +'advproxy AUTH method ldap' => 'LDAP', +'advproxy AUTH method ncsa' => '本地', +'advproxy AUTH method none' => '无', +'advproxy AUTH method ntlm' => 'Windows NT4域', +'advproxy AUTH method ntlm auth' => 'Windows活动目录', +'advproxy AUTH method radius' => 'RADIUS', +'advproxy AUTH no auth' => '没有身份验证的域（每行一个）', +'advproxy AUTH number of auth processes' => '认证进程数', +'advproxy AUTH realm' => '身份验证领域提示', +'advproxy AUTH user IP cache TTL' => '用户/IP缓存TTL（分钟）', +'advproxy IDENT authorized users' => '已认证用户（每行一个）', +'advproxy IDENT aware hosts' => 'IDENT aware主机（每行一个）', +'advproxy IDENT identd settings' => '通用IDENT设置', +'advproxy IDENT required' => '需要IDENT验证', +'advproxy IDENT timeout' => 'IDENT超时（秒）', +'advproxy IDENT unauthorized users' => '未认证的用户（每行一个）', +'advproxy IDENT use negative access list' => '使用否定访问控制', +'advproxy IDENT use positive access list' => '使用积极的访问控制', +'advproxy IDENT user based access restrictions' => '基于用户的访问限制', +'advproxy LDAP ADS' => '活动目录', +'advproxy LDAP NDS' => 'Novell eDirectory', +'advproxy LDAP V2' => 'LDAP版本2', +'advproxy LDAP V3' => 'LDAP版本3', +'advproxy LDAP auth' => 'LDAP认证', +'advproxy LDAP basedn' => '基本DN', +'advproxy LDAP binddn password' => 'Bind DN 密码', +'advproxy LDAP binddn settings' => 'Bind DN 设置', +'advproxy LDAP binddn username' => 'Bind DN 用户名', +'advproxy LDAP common settings' => '通用LDAP设置', +'advproxy LDAP group access control' => '基于组的访问控制', +'advproxy LDAP group required' => '必填组', +'advproxy LDAP port' => '端口', +'advproxy LDAP server' => 'LDAP服务器', +'advproxy LDAP type' => 'LDAP类型', +'advproxy MIME block types' => ' 阻止这些MIME类型（每行一个）', +'advproxy MIME filter' => 'MIME类型过滤器', +'advproxy NCSA auth' => '本地用户认证', +'advproxy NCSA create user' => '创建用户', +'advproxy NCSA group' => '组', +'advproxy NCSA group membership' => '组成员', +'advproxy NCSA grp disabled' => '禁用', +'advproxy NCSA grp extended' => '扩展', +'advproxy NCSA grp standard' => '标准', +'advproxy NCSA min password length' => '最小密码长度', +'advproxy NCSA no accounts' => '没有可用的用户帐户', +'advproxy NCSA password' => '密码', +'advproxy NCSA password confirm' => '密码 (确认)', +'advproxy NCSA redirector bypass' => '绕过组成员的重定向', +'advproxy NCSA update user' => '更新用户', +'advproxy NCSA user accounts' => '用户帐号', +'advproxy NCSA user management' => '用户管理', +'advproxy NCSA username' => '用户名', +'advproxy NTLM BDC hostname' => 'BDC主机', +'advproxy NTLM PDC hostname' => 'PDC主机', +'advproxy NTLM auth' => 'Windows NT/2003 认证', +'advproxy NTLM auth mode' => '认证模式', +'advproxy NTLM authorized users' => '认证域用户（每行一个）', +'advproxy NTLM domain' => '域', +'advproxy NTLM domain settings' => '通用域设置', +'advproxy NTLM unauthorized users' => '未经认证的域用户（每行一个）', +'advproxy NTLM use integrated auth' => '启用Windows集成身份验证', +'advproxy NTLM use negative access list' => '使用否定访问控制', +'advproxy NTLM use positive access list' => '使用积极的访问控制', +'advproxy NTLM user based access restrictions' => '基于用户的访问限制', +'advproxy RADIUS authorized users' => '认证用户（每行一个）', +'advproxy RADIUS identifier' => '鉴定', +'advproxy RADIUS port' => '端口', +'advproxy RADIUS radius settings' => '通用RADIUS设置', +'advproxy RADIUS secret' => '共享密钥', +'advproxy RADIUS server' => 'RADIUS服务器', +'advproxy RADIUS unauthorized users' => '未经认证的用户（每行一个）', +'advproxy RADIUS use negative access list' => '使用否定访问控制', +'advproxy RADIUS use positive access list' => '使用积极的访问控制', +'advproxy RADIUS user based access restrictions' => '基于用户的访问限制', +'advproxy UA enable filter' => '启用浏览器检查', +'advproxy access' => '访问', +'advproxy admin mail' => '缓存管理员e-mail', +'advproxy advanced proxy' => '高级代理', +'advproxy advanced web proxy' => '高级Web代理', +'advproxy advanced web proxy configuration' => 'Web代理高级配置', +'advproxy allowed subnets' => '允许的子网（每行一个）', +'advproxy allowed web browsers' => '允许客户进行Web访问', +'advproxy back to main page' => '返回主页', +'advproxy banned ip clients' => '禁止的IP地址（每行一个）', +'advproxy banned mac clients' => '禁止的MAC地址（每行一个）', +'advproxy basic authentication' => '允许HTTP基本身份验证', +'advproxy cache management' => '缓存管理', +'advproxy cache replacement policy' => '缓存替换策略', +'advproxy cache-digest' => '启用缓存摘要生成', +'advproxy chgwebpwd ERROR' => '错误:', +'advproxy chgwebpwd SUCCESS' => '成功:', +'advproxy chgwebpwd change password' => '更改密码', +'advproxy chgwebpwd change web password' => '更改 Web 访问 密码', +'advproxy chgwebpwd new password' => '新密码', +'advproxy chgwebpwd new password confirm' => '新密码（确认）', +'advproxy chgwebpwd old password' => '当前密码', +'advproxy chgwebpwd username' => '用户名', +'advproxy classroom extensions' => '类型扩展', +'advproxy clear cache' => '清除缓存', +'advproxy client IP forwarding' => '客户端IP地址转发', +'advproxy common settings' => '通用设置', +'advproxy content based throttling' => '启用基于内容的限制', +'advproxy cre disabled' => '管理接口已被管理员禁用', +'advproxy cre group definitions' => '课堂组的定义', +'advproxy cre supervisors' => '管理IP地址（每行一个）', +'advproxy destination ports' => '目标端口', +'advproxy download throttling' => '下载节流', +'advproxy enabled' => '启用', +'advproxy enabled on' => '代理接口', +'advproxy errmsg acl cannot be empty' => '访问控制列表不能为空', +'advproxy errmsg auth cache ttl' => '验证缓存TTL的值无效', +'advproxy errmsg auth children' => '身份验证进程数无效', +'advproxy errmsg auth ipcache may not be null' => '使用IP地址限制时，身份验证缓存TTL可以不为0', +'advproxy errmsg auth ipcache ttl' => '用户/IP缓存TTL的值无效', +'advproxy errmsg cache' => 'RAM缓存大小大于硬盘缓存大小:', +'advproxy errmsg change fail' => '密码无法更改', +'advproxy errmsg change success' => 'Web访问密码已成功更改', +'advproxy errmsg hdd cache size' => '硬盘高速缓存大小的值无效(至少需要10MB）', +'advproxy errmsg ident timeout' => 'Invalid ident timeout', +'advproxy errmsg invalid bdc' => '备份域控制器的主机名无效', +'advproxy errmsg invalid destination port' => '无效的目标端口', +'advproxy errmsg invalid ip or mask' => '无效的IP地址或网络掩码', +'advproxy errmsg invalid mac' => '无效的MAC地址', +'advproxy errmsg invalid pdc' => '主域控制器的主机名无效', +'advproxy errmsg invalid proxy port' => '无效的代理端口', +'advproxy errmsg invalid upstream proxy' => '无效的上游代理IP/主机名', +'advproxy errmsg invalid upstream proxy username or password setting' => '无效的上游代理用户名或密码设置', +'advproxy errmsg invalid user' => '用户名不存在', +'advproxy errmsg ldap base dn' => '需要LDAP基本DN', +'advproxy errmsg ldap bind dn' => '需要LDAP绑定DN用户名和密码', +'advproxy errmsg ldap port' => '无效的LDAP端口号', +'advproxy errmsg ldap server' => 'LDAP服务器的IP地址/主机名无效', +'advproxy errmsg max userip' => '每用户的IP地址数量无效', +'advproxy errmsg mem cache size' => '内存缓存大小的值无效', +'advproxy errmsg no browser' => '必须至少选择一个浏览器或客户端进行Web访问', +'advproxy errmsg no password' => '密码不能为空', +'advproxy errmsg no username' => '用户名不能为空', +'advproxy errmsg non-transparent proxy required' => 'Web代理必须以非透明模式运行才能进行身份验证', +'advproxy errmsg ntlm domain' => '需要Windows域名', +'advproxy errmsg ntlm pdc' => '需要主域控制器的主机名', +'advproxy errmsg password incorrect' => '密码错误', +'advproxy errmsg password length' => '密码长度值无效', +'advproxy errmsg password length 1' => '密码必须至少包含 ', +'advproxy errmsg password length 2' => ' 字符', +'advproxy errmsg passwords different' => '密码不匹配', +'advproxy errmsg proxy ports equal' => '代理端口和透明端口不能相同。', +'advproxy errmsg radius port' => 'RADIUS端口号无效', +'advproxy errmsg radius secret' => '需要RADIUS共享密码', +'advproxy errmsg radius server' => 'RADIUS服务器的IP地址无效', +'advproxy errmsg time restriction' => '无效的时间限制', +'advproxy errmsg wpad invalid ip or mask' => 'WPAD:排除的IP子网IP或子网无效', +'advproxy error design' => '错误信息格式', +'advproxy error language' => '错误信息语言', +'advproxy fake referer' => '伪造的推荐人已提交到外部网站', +'advproxy fake useragent' => '伪造的用户代理已提交到外部网站', +'advproxy friday' => '星期五', +'advproxy from' => '从', +'advproxy group access control' => '基于组的访问控制', +'advproxy group required' => '必填组', +'advproxy hdd cache size' => '硬盘缓存大小(MB)', +'advproxy invalid num of children' => '无效的过滤进程数量', +'advproxy log enabled' => '启用记录', +'advproxy log query' => '记录查询字词', +'advproxy log settings' => '记录设置', +'advproxy log useragent' => '记录用户代理', +'advproxy max download size' => '最大下载大小(KB)', +'advproxy max size' => '最大对象尺寸 (KB)', +'advproxy max upload size' => '最大上传大小(KB)', +'advproxy memory replacement policy' => '内存替换策略', +'advproxy min size' => '最小对象尺寸(KB)', +'advproxy mode allow' => '允许', +'advproxy mode deny' => '拒绝', +'advproxy monday' => '星期一', +'advproxy network based access' => '基于网络的访问控制', +'advproxy no cache sites' => '不缓存这些域（每行一个）', +'advproxy no clients defined' => '未定义客户', +'advproxy no connection auth' => '没有面向连接的身份验证转发', +'advproxy no cre groups' => '没有可用的访问组', +'advproxy no internal proxy on blue' => '禁用从蓝色网络到其他子网的内部代理访问', +'advproxy no internal proxy on green' => '禁止内部代理从其他子网访问绿色网络', +'advproxy number of L1 dirs' => '一级子目录的数量', +'advproxy off' => '代理关闭', +'advproxy offline mode' => '启用离线模式', +'advproxy on' => '代理打开', +'advproxy privacy' => '隐私', +'advproxy proxy port' => '代理端口', +'advproxy proxy port transparent' => '透明端口', +'advproxy ram cache size' => '内存缓存大小 (MB)', +'advproxy redirector children' => '过滤进程数', +'advproxy reset' => '重置', +'advproxy saturday' => '星期六', +'advproxy save and restart' => '保存并重启', +'advproxy squid version' => 'Squid缓存版本', +'advproxy squidclamav' => 'SquidClamav', +'advproxy ssadvanced proxy' => '高级代理', +'advproxy ssl ports' => '允许的SSL端口（每行一个）', +'advproxy standard' => '标准', +'advproxy standard ports' => '允许的标准端口（每行一个）', +'advproxy sunday' => '星期日', +'advproxy supervisor password' => '管理密码', +'advproxy suppress version' => '禁止版本信息', +'advproxy throttle binary' => '二进制文件', +'advproxy throttle dskimg' => 'CD映像', +'advproxy throttle mmedia' => '多媒体', +'advproxy throttling per host on' => '每个主机的限制', +'advproxy throttling total on' => '整体限制', +'advproxy throttling unlimited' => '无限制', +'advproxy thursday' => '星期四', +'advproxy time restrictions' => '时间限制', +'advproxy to' => '到', +'advproxy transfer limits' => '传递限制', +'advproxy transparent on' => '透明接口', +'advproxy tuesday' => '星期二', +'advproxy unknown' => '未知', +'advproxy unrestricted ip clients' => '不受限制的IP地址（每行一个）', +'advproxy unrestricted mac clients' => '不受限制的MAC地址（每行一个）', +'advproxy update accelerator' => '更新加速器', +'advproxy update information' => '有可供下载的更新版本。访问<a href="http://www.advproxy.net" target="_blank">http://www.advproxy.net</a>获取更多信息。', +'advproxy update notification' => '更新通知!', +'advproxy upstream password' => '上游密码', +'advproxy upstream proxy' => '上游代理', +'advproxy upstream proxy host:port' => '上游代理（主机：端口）', +'advproxy upstream username' => '上游用户名', +'advproxy url filter' => 'URL过滤器', +'advproxy username forwarding' => '用户名转发', +'advproxy via forwarding' => '代理地址转发', +'advproxy visible hostname' => '可见的主机名', +'advproxy web browser' => 'Web浏览器', +'advproxy wednesday' => '星期三', +'advproxy wpad example dst_noproxy_ip' => '例如：192.168.2.0/255.255.255.0', +'advproxy wpad example dst_noproxy_url' => '例如：*.ipfire.org*', +'advproxy wpad label dst_noproxy_ip' => '排除的IP子网（每行一个）', +'advproxy wpad label dst_noproxy_url' => '排除的URL（每行一个）', +'advproxy wpad notice' => '注意：为使WPAD/PAC正常工作，需要进行进一步更改。请参阅<a href="https://wiki.ipfire.org/configuration/network/proxy/extend/wpad" target="_blank">Wiki</a>。', +'advproxy wpad title' => 'Web代理自动发现协议（WPAD）/代理自动配置（PAC）', +'advproxy wpad view pac' => '打开PAC文件', +'again' => 'Again:', +'age second' => '秒', +'age seconds' => '秒', +'age shour' => '时', +'age sminute' => '分', +'age ssecond' => '秒', +'aktiv' => '活动', +'album' => 'Album', +'alcatelusb help' => '要使用Speedtouch 330或Speedtouch USB调制解调器，必须将固件上传到IPFire中。请从speedtouch.com下载SpeedTouch 330的嵌入式固件程序包，解压缩，然后使用以下格式上传适用于您调制解调器的文件: 使用以下形式，当Rev<4时为KQD6_3.xxx，Rev=4则为ZZZL_3.xxx。', +'alcatelusb upload' => '上传Speedtouch USB固件', +'alias ip' => '别名IP', +'aliases' => '别名', +'aliases not active' => '除非您的红色接口为静态，否则别名将不起作用', +'all' => '全部', +'all interfaces' => '所有接口', +'all services' => '所有服务', +'all updates installed' => '已安装所有更新', +'allmsg' => '显示所有', +'alt dialup' => '拨号', +'alt home' => '主页', +'alt information' => '信息', +'alt logs' => '日志', +'alt ovpn' => 'OpenVPN', +'alt proxy' => '代理', +'alt services' => '服务', +'alt system' => '系统', +'alt vpn' => 'VPNs', +'and' => '和', +'ansi t1.483' => '即将被删除', +'apcupsd' => 'APC-UPS状态', +'application layer gateways' => '应用层网关', +'apply' => '即时应用', +'april' => '四月', +'archive not exist' => '配置档案不存在', +'are you sure' => '您确定?', +'arp table entries' => 'ARP表条目', +'artist' => 'Artist', +'atm device' => '设备:', +'atm settings' => 'ATM设置', +'attemps' => '尝试', +'attention' => '注意', +'august' => '八月', +'authentication' => '认证方式:', +'automatic' => '自动', +'available updates' => '可用更新:', +'average' => 'Average', +'avoid dod' => '不要将此选项与“按需拨号”一起使用！主要用于您的IPFire位于路由器后面的情况。您的红色IP必须在三个保留的网络号码之一内，例如10/8, 172.16/12, 192.168/16', +'back' => '返回', +'backup' => '备份恢复', +'backup archive' => '备份文件 (.dat)', +'backup clear archive' => '清除备份文件 (.gz)', +'backup config floppy' => '备份配置-软盘', +'backup configuration' => '备份配置:', +'backup erase key' => '清除密钥', +'backup explain key' => '备份使用密钥加密。为避免非法备份操作，IPFire仅还原使用您在此处指定的密钥加密的备份。您有三种选择', +'backup explain key li1' => '让IPFire为您创建密钥。', +'backup explain key li2' => '导入已保存的密钥（可能受密码保护）。', +'backup explain key li3' => '仅从未加密的1.4.10备份中提取密钥。', +'backup explain key no1' => '如果计划还原新设备，则应保存此密钥，IPFire仅接受一次密钥创建/导入。', +'backup explain key no2' => '旧版软盘备份与此密钥无关。', +'backup export key' => '导出密钥', +'backup extract key' => '提取密钥', +'backup from' => '备份于', +'backup generate key' => '生成密钥', +'backup import dat file' => '导入备份文件(.dat)', +'backup import key' => '导出密钥', +'backup key' => '备份加密密钥', +'backup key file' => '备份密钥文件', +'backup key info' => 'IPFire限制访问备份密钥，因此您必须知道root密码。您可以使用密码在IPFire外部保护此密钥。', +'backup media info' => '软盘和/或未格式化的介质可能显示奇怪的分区大小。在这种情况下，请选择整个设备。建议在卸下设备之前先安装硬盘。注意：此处创建的软盘不适用于IPFire安装程序！', +'backup missing key' => '需要备份密钥来还原设置', +'backup password' => '备份密码', +'backup protect key password' => '备份密钥密码', +'backup sets' => '备份设置', +'backup to floppy' => '备份到软盘', +'backupaddon' => '插件备份文件', +'backupprofile' => '如果重新连接失败，请切换到配置文件', +'backups' => '备份', +'backupwarning' => '请首先还原您的主备份，然后再还原插件备份。请保留下载时提供的原始文件名。', +'bad characters in' => '错误字符', +'bad characters in script field' => '脚本字段中的错误字符', +'bad characters in the telephone number field' => '电话号码字段中的错误字符。', +'bad destination range' => '目标端口范围的第一值大于或等于第二值。', +'bad ignore filter' => '忽略排除错误:', +'bad return code' => '助手程序返回错误代码', +'bad source range' => '源端口范围的第一值大于或等于第二值。', +'bandwidth usage' => 'bandwidth usage (external)', +'bandwitherror' => '启用Qos后，您将无法更改带宽设置。必须首先禁用Qos。', +'bandwithsettings' => '带宽设定', +'basic options' => '基本选项', +'beep when ppp connects or disconnects' => 'IPFire连接或断开时发出蜂鸣声', +'behind a proxy' => '代理后端:', +'bewan adsl pci st' => '即将被删除', +'bewan adsl usb' => '即将被删除', +'bit' => 'bit', +'bitrate' => '比特率', +'bleeding rules' => 'Bleeding Edge Snort规则', +'block' => '阻止', +'blue' => '蓝色', +'blue access' => '无线设置', +'blue access use hint' => '您必须输入设备的MAC或IP地址。两者都可以输入', +'blue interface' => '蓝色接口', +'broadcast' => '广播', +'broken pipe' => 'Broken管道', +'buffered memory' => 'Buffered Memory', +'buffers' => '已缓冲', +'bytes per second' => 'Bytes per Second', +'bytes received' => '接收字节数', +'bytes sent' => '发送字节数', +'ca certificate' => 'CA证书', +'ca name' => 'CA名称', +'cache management' => '缓存管理', +'cache size' => '缓存大小 (MB):', +'cached' => '已缓存', +'cached memory' => 'Cached memory', +'cached swap' => 'Cached swap', +'calamaris available reports' => '可用报告', +'calamaris byte unit' => '字节单位', +'calamaris create report' => '创建报告', +'calamaris enable content report' => '启用内容报告', +'calamaris enable distribution histogram' => '启用分布直方图', +'calamaris enable domain report' => '启用域报告', +'calamaris enable performance report' => '启用性能报告', +'calamaris enable requester report' => '启用请求者报告', +'calamaris enable verbose reporting' => '启用详细报告', +'calamaris high' => '高', +'calamaris histogram resolution' => '直方图分辨率', +'calamaris low' => '低', +'calamaris medium' => '中', +'calamaris no reports available' => '无可用报告', +'calamaris none' => '无', +'calamaris number of content types' => '内容类型数量', +'calamaris number of domains' => '域数量', +'calamaris number of requested urls' => '请求的URL数量', +'calamaris number of requesting hosts' => '请求主机数量', +'calamaris performance options' => '性能选项', +'calamaris proxy reports' => '代理报告', +'calamaris refresh list' => '刷新列表', +'calamaris report interval (in minutes)' => '报告间隔(分钟)', +'calamaris report options' => '报告选项', +'calamaris report period' => '报告期间', +'calamaris run as background task' => '作为后台任务运行', +'calamaris show usernames' => '显示用户名', +'calamaris skip archived logfiles' => '跳过存档的日志文件', +'calamaris unlimited' => '不限制', +'calamaris view' => '查看', +'calamaris view report' => '查看报告', +'calc traffic all x minutes' => '计算所有x分钟的流量', +'cancel' => '取消', +'cancel-adv-options' => '取消', +'cannot enable both nat traversal and compression' => '无法同时启用NAT穿越和压缩。', +'cannot enable ntp without specifying primary' => '如果不指定第一个NTP服务器，则无法启用NTP。', +'cannot specify secondary dns without specifying primary' => '如果不指定第一个DNS服务器，则无法指定第二个DNS服务器。', +'cannot specify secondary ntp without specifying primary' => '如果不指定第一个NTP服务器，则无法指定第二个NTP服务器。', +'cannot specify secondary wins without specifying primary' => '如果不指定第一个WINS服务器，则无法指定第二个WINS服务器。', +'cant change certificates' => '无法更改证书。', +'cant enable xtaccess' => '关联的端口转发规则已禁用，因此您无法为此规则启用外部访问。', +'cant start openssl' => '无法启动OpenSSL', +'capabilities' => '性能', +'caps all' => '全部', +'capsclosed' => '断线', +'capsinactive' => '不活跃', +'capsopen' => '已连接', +'capswarning' => '警告', +'caption' => 'Caption', +'ccd add' => '添加网络', +'ccd choose net' => '选择网络', +'ccd client options' => '客户端高级选项', +'ccd clientip' => '主机地址', +'ccd dynrange' => '动态OpenVPN IP地址池', +'ccd err blue' => '这是蓝色子网。', +'ccd err green' => '这是绿色子网。', +'ccd err hostinnet' => '您仍然无法删除该网络，但该网络仍包含客户端。', +'ccd err inuse' => '已被其他客户端使用。', +'ccd err invalidname' => '名称无效。允许的字符为A-Z，a-z，破折号和空格。', +'ccd err invalidnet' => 'IP地址无效。格式: 192.168.0.0/24 or 192.168.0.0/255.255.255.0.', +'ccd err iroute' => '路由的网络地址无效。', +'ccd err irouteexist' => '该路由已被使用。', +'ccd err isipsecnet' => '给定的子网地址已被IPsec网络使用。', +'ccd err isipsecrw' => '给定的子网地址已被IPsec rw网络使用。', +'ccd err isovpnn2n' => '子网地址已用于OpenVPN网络对网络连接。', +'ccd err isovpnnet' => '子网地址已用于OpenVPN服务器。', +'ccd err issubnet' => '子网地址已在使用中。', +'ccd err name' => '请选择一个名称', +'ccd err nameexist' => '名称已经存在', +'ccd err netadr' => '子网地址无效或范围太大。', +'ccd err netadrexist' => '网络已经存在', +'ccd err orange' => '这是橙色区域子网。', +'ccd err red' => '这是红色区域子网。', +'ccd err routeovpn' => '已由OpenVPN服务器使用。', +'ccd err routeovpn2' => '已经从OpenVPN服务器推送。', +'ccd hint' => '在此页面上，您可以定义静态网络，roadwarrior客户端可以从中获取固定的IP地址分配。', +'ccd invalid' => '无效。', +'ccd iroute' => 'IPFire可以访问客户端站点上的这些网络', +'ccd iroute2' => '客户端可以访问IPFire网站上的这些网络', +'ccd iroutehint' => '注意！如果更改这些设置，则必须重新启动OpenVPN服务器，以使更改生效!', +'ccd modify' => '更改网络', +'ccd name' => '名称', +'ccd net' => '静态IP地址池', +'ccd noaddnet' => '仅当OpenVPN服务器停止时才能添加新的静态网络。', +'ccd none' => '无', +'ccd routes' => '路由:', +'ccd subnet' => '子网', +'ccd used' => '用户地址', +'cert' => '证书', +'certificate' => '证书', +'certificate authorities' => '证书颁发机构和密钥', +'certificate does not have a valid ca associated with it' => '证书没有与之关联的有效CA。', +'certificate file move failed' => '证书文件移动失败', +'cfg restart' => '在还原配置归档文件后，建议重新启动。', +'chain' => 'Chain', +'change passwords' => '修改密码', +'change share' => '编辑共享选项', +'check all' => '检查全部', +'check for net traffic update' => '检查网络流量更新', +'check vpn lr' => '检查', +'choose config' => '选择配置', +'choose media' => '选择媒体', +'cipher' => '加密:', +'city' => '城市', +'class in use' => '该类已在使用中。', +'clear cache' => '清除缓存', +'clear playlist' => 'Empty playlist', +'clenabled' => '提供时间到本地网络', +'click to disable' => '已启用(单击则禁用)', +'click to enable' => '已禁用(单击则启用)', +'client' => '工作组名称', +'clock has not been synchronized' => '时钟未同步', +'clock last synchronized at' => '时钟上次同步于', +'comment' => '描述:', +'common name' => '通用名称', +'community rules' => 'Snort/VRT GPLv2社区规则', +'comp-lzo' => 'LZO-压缩:', +'compression' => '压缩:', +'computer to modem rate' => '计算机到modem的速率:', +'concentrator name' => '集中器名称:', +'confirmation' => '确认', +'connect' => 'OVPN 启动/连接', +'connect the modem' => '连接调制解调器', +'connect timeout' => '连接超时:', +'connected' => '已连接', +'connecting' => '正在连接...', +'connection' => '连接', +'connection closed' => '未连接...', +'connection debugging' => '连接调试', +'connection status and controlc' => '连接状态和控制', +'connection tracking' => 'iptables连接跟踪', +'connection type' => '连接类型', +'connection type is invalid' => '连接类型无效。', +'connections' => '查看连接', +'connections are associated with this ca. deleting the ca will delete these connections as well.' => '连接与此CA关联。删除CA也会删除这些连接。', +'connscheduler' => '调度计划', +'core notice 1' => '注意: 有一个核心更新', +'core notice 2' => '', +'core notice 3' => '可用。', +'could not be opened' => '不能打开。', +'could not connect to' => '不能连接到', +'could not connect to www ipcop org' => '无法连接到www.ipfire.org', +'could not connect to www ipfire org' => '无法连接到www.ipfire.org', +'could not create directory' => '无法创建目录。', +'could not download latest patch list' => '无法下载最新的补丁程序列表（未连接）。', +'could not download latest updates' => '无法下载最新更新。', +'could not download the available updates list' => '无法下载可用的更新列表。', +'could not open available updates file' => '无法打开可用的更新文件。', +'could not open installed updates file' => '无法打开已安装的更新文件', +'could not open update information file' => '无法打开更新信息文件。更新文件已损坏。', +'could not retrieve common name from certificate' => '无法从证书中检索通用名称。', +'count' => '计数', +'countries' => '国别', +'country' => '国家', +'country codes and flags' => '国家代码和国旗:', +'countrycode' => '代码', +'cpu frequency per' => 'CPU frequency per', +'cpu idle usage' => 'Idle CPU Usage', +'cpu interrupt usage' => 'Interrupt CPU Usage', +'cpu iowait usage' => 'CPU waiting for IO', +'cpu irq usage' => 'IRQ CPU Usage', +'cpu nice usage' => 'Nice CPU Usage', +'cpu steal usage' => 'Steal CPU Usage', +'cpu system usage' => 'System CPU Usage', +'cpu usage per' => 'CPU Usage per', +'cpu user usage' => 'User CPU Usage', +'create' => '创建', +'create mask' => '新创建文件的UNIX权限', +'create new backup' => '创建一个新的备份集', +'credits' => '捐助', +'crl' => '证书吊销列表', +'cron server' => 'CRON服务器', +'crypto error' => '加密错误', +'crypto warning' => '加密警告', +'cryptographic settings' => '加密设置', +'current' => 'Current', +'current aliases' => '当前别名', +'current class' => '当前类别', +'current devices' => '当前设备', +'current dhcp leases on blue' => '当前在蓝色接口上的DHCP租约', +'current dynamic leases' => '当前动态租约', +'current fixed leases' => '当前固定租约', +'current hosts' => '当前主机', +'current media' => '当前媒体', +'current ovpn' => '活动OVPN连接:', +'current playlist' => '当前播放列表', +'current profile' => '当前配置文件:', +'current rules' => '当前规则:', +'custom networks' => '自定义网络', +'custom services' => '自定义服务', +'daily firewallhits' => '防火墙命中(每日)', +'dangerous' => '有风险', +'dat without key' => '没有密钥，无法还原加密的存档。', +'date' => 'Date', +'date not in logs' => '查询的日期不存在（或仅部分记录）日志', +'day' => '天', +'day after' => '后天', +'day before' => '前天', +'day-graph' => 'Day', +'days' => '天', +'dbfile' => '数据库文件', +'ddns help dnsmadeeasy' => '在主机名字段中输入您的ID（或ID列表，以ID分隔）。', +'ddns help freedns' => '在用户名字段中输入您的连接字符串', +'ddns help plus' => '+标记为必填字段', +'ddns hostname added' => '添加了动态DNS主机名', +'ddns hostname modified' => '动态DNS主机名已修改', +'ddns hostname removed' => '动态DNS主机名已删除', +'ddns minimize updates' => '最小化更新：在更新之前，将主机名“ [host.] domain”的dns IP与RED IP进行比较。', +'ddns noip prefix' => '要在组模式下使用no-ip，请在主机名前加上%', +'deactivate' => '停用', +'deactivate user' => '停用用户', +'dead peer detection' => '失效对等体检测（DPD）', +'debugme' => '尚未实施', +'december' => '十二月', +'deep scan directories' => '递归扫描', +'def lease time' => '默认租约时间', +'default' => '默认', +'default IP address' => '默认IP地址', +'default ip' => '默认IP地址', +'default lease time' => '默认租约时间(分钟):', +'default networks' => '默认网络', +'default renewal time' => '默认续订时间', +'default services' => '默认服务', +'defaultwarning' => '警告-您的设置将丢失，并被默认设置替换。', +'delete' => '删除', +'delete cron' => '删除调度计划', +'delete pc' => '删除工作组', +'delete share' => '删除共享', +'delete user' => '删除用户', +'demon login script' => 'Demon login script', +'deprecated fs warn' => '不推荐使用的文件系统！较新的内核将不再提供支持。备份并重新格式化!', +'description' => '描述', +'dest ip and port' => '目标IP:端口', +'destination' => '目标', +'destination ip' => '目标IP', +'destination ip bad' => '无效的目标IP', +'destination ip or net' => '目标IP或网络', +'destination net' => '目标网络', +'destination port' => '目标端口', +'destination port numbers' => '目标端口必须是有效的端口号或端口范围。', +'destination port overlaps' => '目标端口范围与现有端口范围重叠。', +'detail level' => '详细程度', +'details' => '细节', +'device' => '设备', +'devices on blue' => 'BLUE上的设备', +'dh' => 'Diffie-Hellman参数', +'dh key move failed' => 'Diffie-Hellman参数移动失败。', +'dh key warn' => '创建长度为2048位的DH参数最多需要几分钟。 3072或4096位的长度可能需要几个小时。请耐心等待。', +'dh key warn1' => '对于一般或较小的系统，建议使用上传功能上传较长的Diffie-Hellman参数。', +'dh name is invalid' => '名称无效，请使用“dh1024.pem".', +'dh parameter' => 'Diffie-Hellman参数', +'dhcp advopt add' => '添加DHCP选项', +'dhcp advopt added' => 'DHCP选项已添加', +'dhcp advopt blank value' => 'DHCP选项值不能为空。', +'dhcp advopt custom definition' => '您的自定义选项定义', +'dhcp advopt definition' => '定义', +'dhcp advopt definition exists' => '定义选项已存在。您只能编辑或删除它。', +'dhcp advopt edit' => '编辑DHCP选项', +'dhcp advopt help' => '选项列表', +'dhcp advopt list' => '其他DHCP选项', +'dhcp advopt modified' => 'DHCP选项已修改', +'dhcp advopt name' => '选项名称', +'dhcp advopt removed' => 'DHCP选项已删除', +'dhcp advopt scope' => '选项范围', +'dhcp advopt scope global' => '全局', +'dhcp advopt scope help' => '全局范围或将范围限制为选中的接口。', +'dhcp advopt unknown' => '无法识别DHCP选项名称', +'dhcp advopt value' => '选项值', +'dhcp allow bootp' => '允许bootp客户端', +'dhcp base ip fixed lease' => '用于创建固定租约的基本IP', +'dhcp bootp pxe data' => '输入此固定租约的可选bootp pxe数据', +'dhcp configuration' => 'DHCP配置', +'dhcp create fixed leases' => '创建固定租赁', +'dhcp dns enable update' => '启用DNS更新（RFC2136）:', +'dhcp dns key name' => '密钥名称', +'dhcp dns update' => 'DNS更新', +'dhcp dns update algo' => '算法', +'dhcp dns update secret' => 'Secret', +'dhcp fixed lease err1' => '对于固定租约，您必须输入MAC地址或主机名，或者同时输入两者。', +'dhcp fixed lease help1' => 'IP地址可以输入为FQDN', +'dhcp mode' => 'DHCP', +'dhcp server' => 'DHCP服务器', +'dhcp server disabled' => 'DHCP服务器已禁用。', +'dhcp server disabled on blue interface' => '在蓝色接口上禁用了DHCP服务器', +'dhcp server enabled' => 'DHCP服务器已启用。', +'dhcp server enabled on blue interface' => '在蓝色接口上启用了DHCP服务器', +'dhcp-options' => 'DHCP推送选项', +'dial' => '连接', +'dial profile' => '通过配置文件进行连接', +'dial user password' => '拨号用户密码:', +'dial user password has been changed' => '拨号用户密码已更改。', +'dialing mode' => '拨号模式:', +'dialup red not ppp' => '只在红色设置为PPP拨号时，才能使用拨号配置文件。请检查网络设置。', +'dialup settings' => '拨号设置', +'directory mask' => 'UNIX目录权限', +'directory writeable' => '可写目录', +'disabled' => '禁用', +'disconnect' => 'OpenVPN 停止/断开连接', +'disconnects' => '断开连接', +'disk access per' => 'Disk Access per', +'disk usage' => '使用情况', +'display' => '显示', +'display charset' => '显示字符集', +'display hostname in window title' => '在窗口标题中显示主机名', +'display traffic at home' => '在起始页上显示计算出的流量', +'display webinterface effects' => '激活效果', +'dl client arch' => '下载客户端软件包（zip）', +'dl client arch insecure' => '下载不安全的客户端软件包（zip）', +'dmz' => 'DMZ', +'dmz pinhole configuration' => 'DMZ pinhole配置', +'dmz pinhole rule added' => 'DMZ pinhole已添加; 重新启动DMZ pinhole', +'dmz pinhole rule removed' => 'DMZ pinhole规则已删除; 重新启动DMZ pinhole', +'dmzpinholes for same net not necessary' => 'DMZ Pinholes对于同一网来说不是必需的。选择其他源或目标网络。', +'dnat address' => '防火墙接口', +'dns address deleted' => '成功删除!', +'dns address deleted txt' => 'DNS服务器地址已成功删除。 您必须重新启动或重新连接更改才能生效!', +'dns address done' => 'DNS服务器地址设置将被保存。', +'dns address recon' => '尝试重新连接!', +'dns check failed' => 'DNS检查失败', +'dns desc' => '如果red0接口从提供商处通过DHCP获得IP地址信息，则将自动设置DNS服务器地址。现在，您可以使用自己的地址更改这些DNS服务器IP地址。', +'dns error 0' => '第一个DNS服务器地址无效, 请检查输入值! 第二个 DNS服务器地址有效。', +'dns error 01' => '第一个和第二个DNS服务器地址无效，请检查您的输入值。!', +'dns error 1' => '第二个DNS服务器地址无效，请检查您的输入值! 第一个DNS服务器地址有效。', +'dns forward disable dnssec' => '禁用DNSSEC(有风险)', +'dns forwarding dnssec disabled notice' => '(DNSSEC已禁用)', +'dns header' => '仅为red0上的DHCP分配DNS服务器地址', +'dns list' => '免费的公共DNS服务器列表', +'dns menu' => 'DNS服务器', +'dns new 0' => '第一个DNS服务器:', +'dns new 1' => '第二个DNS服务器:', +'dns proxy server' => 'DNS代理服务器', +'dns saved' => '保存成功!', +'dns saved txt' => '输入的两个DNS服务器地址已成功保存。 您必须重新启动或重新连接，更改才能生效!', +'dns server' => 'DNS服务器', +'dns servers' => 'DNS服务器', +'dns title' => '域名系统', +'dnsforward' => 'DNS转发', +'dnsforward add a new entry' => '添加条目', +'dnsforward configuration' => 'DNS转发配置', +'dnsforward dnssec disabled' => 'DNSSEC验证已禁用', +'dnsforward edit an entry' => '编辑现有条目', +'dnsforward entries' => '当前条目', +'dnsforward forward_servers' => '域名解析服务器', +'dnsforward zone' => '区域', +'dnssec aware' => 'DNSSEC Aware', +'dnssec disabled warning' => '警告：DNSSEC已被禁用', +'dnssec information' => 'DNSSEC信息', +'dnssec not supported' => '不支持DNSSEC', +'dnssec validating' => 'DNSSEC验证', +'do not log this port list' => '在记录日志之前删除此端口列表（减小日志大小）', +'dod' => '按需拨号', +'dod for dns' => '按需拨号DNS:', +'dod not compatible with ddns' => '按需拨号与动态DNS服务不兼容', +'dod waiting' => '按需拨号等待', +'domain' => '域', +'domain master' => '主域名', +'domain name' => '域名', +'domain name suffix' => '域名后缀:', +'domain not set' => '未设置域。', +'donation' => '捐款', +'donation-link' => 'https://www.paypal.com/en_US/GB/i/btn/btn_donateCC_LG.gif', +'donation-text' => 'IPFire由志愿者在空闲时间进行维护。为了保持该项目的运行成本，如果您愿意支持我们，请您为我们提供一小笔捐款。', +'done' => '做吧', +'dos charset' => 'DOS字符集', +'down and up speed' => '输入您的下行和上行速度 然后点击保存。', +'downlink' => '下行链接', +'downlink speed' => '下行速度（kbit/秒）', +'downlink std class' => '下行链接标准等级', +'download' => '下载', +'download ca certificate' => '下载CA证书', +'download certificate' => '下载文件', +'download dh parameter' => '下载Diffie-Hellman参数', +'download host certificate' => '下载主机证书', +'download new ruleset' => '下载新的规则集', +'download pkcs12 file' => '下载PKCS12文件', +'download root certificate' => '下载根证书', +'download tls-auth key' => '下载tls认证密钥', +'dpd action' => '动作', +'dpd delay' => '延时', +'dpd timeout' => '超时', +'driver' => '设备', +'drop action' => '防火墙在“阻止”模式下的默认行为（转发）', +'drop action1' => '防火墙在“阻止”模式下的默认行为（出站）', +'drop action2' => '防火墙的默认行为（入站）', +'drop forward' => '记录丢弃的转发数据包', +'drop input' => '记录丢弃的入站数据包', +'drop newnotsyn' => '记录丢弃的新未同步数据包', +'drop outgoing' => '记录丢弃的出站数据包', +'drop portscan' => '记录丢弃的端口可以发送的数据包', +'drop proxy' => '丢弃所有未寻址到代理的数据包', +'drop samba' => '删除所有Microsoft端口135,137,138,139,445,1025', +'drop wirelessforward' => '记录丢弃的无线转发数据包', +'drop wirelessinput' => '记录丢弃的无线入站数据包', +'dst port' => '目标端口', +'dstprt range overlaps' => '目标端口范围与已定义的端口重叠。', +'dstprt within existing' => '目标端口在已定义的端口范围内。', +'duplicate ip' => '输入了重复的IP地址', +'duplicate ip bold' => '粗体为重复地址', +'duplicate mac' => '输入了重复的MAC地址', +'duplicate name' => '该名称已被使用，请选择其他名称.', +'dyn dns source choice' => '动态DNS提供商将从以下位置获取此IPFire的IP地址:', +'dynamic dns' => '动态DNS', +'dynamic dns client' => '动态DNS客户端', +'e-mail address too long' => '电子邮件地址太长；它不能超过40个字符。', +'eciadsl help' => '要使用ECI ADSL调制解调器，必须将synch.bin文件上传到IPFire。请从ECIADSL网站下载文件，然后上传文件 synch.bin 。', +'eciadsl upload' => '上传ECI ADSL synch.bin文件', +'edit' => '编辑', +'edit a rule' => '编辑现有规则:', +'edit advanced settings when done' => '完成后编辑高级设置。', +'edit an existing alias' => '编辑现有别名', +'edit an existing host' => '编辑现在主机', +'edit an existing lease' => '编辑现有租约', +'edit device' => '编辑设备', +'edit hosts' => '编辑主机', +'edit network' => '编辑网络', +'edit printer' => '编辑打印机', +'edit service' => '编辑服务', +'edit share' => '编辑共享', +'editor' => '编辑', +'eg' => '例如:', +'eight hours' => '8小时', +'email config' => '配置', +'email empty field' => '空字段', +'email error' => '错误：无法发送测试邮件', +'email invalid' => '无效字段', +'email invalid mailfqdn' => '邮件服务器FQDN无效', +'email invalid mailip' => '邮件服务器IP地址无效', +'email invalid mailport' => '邮件服务器端口无效', +'email mailaddr' => '服务器地址', +'email mailpass' => '密码', +'email mailport' => '服务器端口', +'email mailrcpt' => '收件人', +'email mailsender' => '发件人', +'email mailuser' => '用户名', +'email server can not be empty' => 'E-mail服务器不能为空', +'email settings' => '邮件服务', +'email subject' => 'IPFire测试邮件', +'email success' => '测试消息发送成功', +'email testmail' => '发送测试邮件', +'email text' => '测试来自IPFire邮件服务的邮件', +'email tls' => '使用TLS', +'email usemail' => '激活邮件服务', +'emailreportlevel' => '邮件报告级别', +'emerging pro rules' => 'Emergingthreats.net专业规则', +'emerging rules' => 'Emergingthreats.net社区规则', +'empty' => '该字段可以留空', +'empty profile' => '配置留空', +'enable ignore filter' => '启用排除', +'enable javascript' => '启用javas脚本', +'enable smt' => '启用同时多线程（SMT）', +'enable wildcards' => '启用wildcards:', +'enabled' => '启用:', +'enabled on' => '启用在', +'enabledtitle' => '启用', +'encapsulation' => '封装形式', +'encrypted' => '加密', +'encryption' => '加密:', +'end address' => '结束地址:', +'enter ack class' => '输入ACK- Class 然后点击保存。', +'enter data' => '输入设置 然后点击保存。', +'entropy' => 'Entropy', +'entropy graphs' => 'Entropy Graphs', +'err bk 1' => '创建档案时出错', +'err bk 10 password' => '备份密码错误', +'err bk 2 key' => '创建密钥文件时出错', +'err bk 3 tar' => '将文件追加到存档时出错', +'err bk 4 gz' => '压缩档案时出错', +'err bk 5 encrypt' => '加密存档时出错', +'err rs 1' => '恢复档案时出错', +'err rs 6 decrypt' => '解密存档时出错', +'err rs 7 untartst' => '解密的档案无效', +'err rs 8 untar' => '解压缩存档时出错', +'error' => '错误', +'error config' => '不能打开/var/ipfire/ovpn/config/ZERINA.ovpn !', +'error external access' => '不能打开/var/ipfire/xtaccess/config (无法授予外部访问权限)!', +'error messages' => '错误信息', +'esp encryption' => 'ESP加密:', +'esp grouptype' => 'ESP组类型:', +'esp integrity' => 'ESP完整性:', +'esp keylife' => 'ESP密钥有效期:', +'esp keylife should be between 1 and 24 hours' => 'ESP密钥有效期应在1到24小时之间。', +'every' => '自动', +'exampel' => '例如', +'exclude logfiles' => '排除日志文件', +'excluding buffers and cache' => '-/+ 缓冲/缓存', +'expected' => '预期', +'expertoptions' => '专家选择', +'expires' => '到期', +'export' => '导出', +'exportkey' => '导出PSK', +'external access' => '外部访问', +'external access configuration' => '外部访问配置', +'external access rule added' => '添加了外部访问规则；重新启动访问控制器', +'external access rule changed' => '外部访问规则已更改；重新启动访问控制器', +'external access rule removed' => ' 外部访问规则已删除；重新启动访问控制器', +'external aliases configuration' => '外部别名配置', +'extrahd' => '添加硬盘', +'extrahd because there is already a device mounted' => ', 因为已经安装了设备', +'extrahd cant umount' => '无法挂载', +'extrahd detected drives' => '检测到的设备', +'extrahd install or load driver' => '如果您的设备未在此处列出，则需要安装或加载驱动程序。 如果可以看到设备但没有分区，则必须先创建它们。', +'extrahd maybe the device is in use' => '. 也许设备正在使用中', +'extrahd to' => '到', +'extrahd to root' => 'to root', +'extrahd unable to read' => '不能读取', +'extrahd unable to write' => '不能写入', +'extrahd you cant mount' => '您无法挂载', +'fallout zombieload ridl' => 'Fallout/ZombieLoad/RIDL', +'false classnumber' => '类型编号与接口不匹配。', +'false max bandwith' => '最大带宽错误。', +'false min bandwith' => '最小带宽错误。', +'february' => '二月', +'fetch ip from' => '借助外部服务器猜测真实的公共IP', +'fifteen minutes' => '15分钟', +'filename' => '文件名', +'filesystem full' => '文件系统已满', +'fireinfo ipfire version' => 'IPFire版本', +'fireinfo is disabled' => 'Fireinfo已禁用', +'fireinfo is enabled' => 'Fireinfo已启用', +'fireinfo is submitted' => '您的个人资料已提交到fireinfo服务。', +'fireinfo is submitted button' => '不，我不想再发送我的个人资料', +'fireinfo kernel version' => '内核版本', +'fireinfo not submitted' => '您的个人资料未提交到fireinfo服务。', +'fireinfo not submitted button' => '是的，我想发送我的配置文件', +'fireinfo pakfire version' => 'Pakfire版本', +'fireinfo please enable' => '请启用Fireinfo服务。', +'fireinfo settings' => 'Fireinfo设置', +'fireinfo system version' => '系统版本', +'fireinfo why descr1' => '启用此功能对于IPFire的开发非常重要', +'fireinfo why descr2' => '。', +'fireinfo why enable' => '为什么要启用Fireinfo?', +'fireinfo why read more' => '了解详细原因。', +'fireinfo your profile id' => '您的配置文件ID', +'firewall' => '防火墙', +'firewall graph country' => '饼图(国家)', +'firewall graph ip' => '饼图(IP)', +'firewall graph port' => '饼图(端口)', +'firewall hits' => '防火墙命中总数', +'firewall hits per' => 'firewallhits per', +'firewall log' => '防火墙日志', +'firewall log country' => '防火墙日志(国家)', +'firewall log ip' => '防火墙日志(IP)', +'firewall log port' => '防火墙日志(端口)', +'firewall logs' => '防火墙日志', +'firewall logs country' => '防火墙日志(国家)', +'firewall logs ip' => '防火墙日志(IP)', +'firewall logs port' => '防火墙日志(端口)', +'firewall rules' => '防火墙策略', +'firewallhits' => 'Firewallhits', +'firmware' => '固件', +'firmware upload' => '上传固件/驱动', +'first' => '最初', +'five minutes' => '5分钟', +'fixed ip lease added' => '固定IP租约已添加', +'fixed ip lease modified' => '固定IP租约已修改', +'fixed ip lease removed' => '固定IP租约已删除', +'flag' => '国旗', +'force enable' => '强制', +'force update' => '强制更新', +'force user' => '强制所所有新文件发送给用户', +'foreshadow' => '预示', +'forward firewall' => '防火墙', +'forwarding rule added' => '添加转发规则；重新启动转发器', +'forwarding rule removed' => '转发规则已删除；重新启动转发器', +'forwarding rule updated' => '转发规则已更新；重新启动转发器', +'four hours' => '4小时', +'free' => '剩余', +'free memory' => 'Free Memory ', +'free swap' => 'Free Swap', +'frequency' => '频率', +'friday' => '星期五', +'fritzdsl help' => '要使用Fritz！DSL fcdsl / fcdslsl / fcdsl2 / fcdslusb / fcdslslusb调制解调器之一，必须将软件包上传到IPFire。请从IPFire网站下载与您的版本相对应的tarball，然后使用下面的表格上传整个 fcdsl-（your_version）.tgz', +'fritzdsl upload' => '上传Fritz!DSL设备', +'from' => '从', +'from email adr' => '发件人邮件地址', +'from email pw' => '发件人邮件密码', +'from email server' => '发件人邮件服务器', +'from email user' => '发件人邮件用户名', +'from warn email bad' => '发件人邮件地址无效', +'fw blue' => '蓝色接口的防火墙选项', +'fw default drop' => '防火墙策略', +'fw logging' => 'Firewall日志', +'fw settings' => 'Firewall设置', +'fw settings color' => '在规则表中显示颜色', +'fw settings dropdown' => '显示规则创建站点上的所有网络', +'fw settings remark' => '在规则表中显示备注', +'fw settings ruletable' => '显示空规则表', +'fwdfw ACCEPT' => '接受', +'fwdfw DROP' => '丢弃', +'fwdfw MODE1' => '丢弃所有数据包', +'fwdfw MODE2' => '接受所有数据包', +'fwdfw REJECT' => '拒绝', +'fwdfw action' => '动作', +'fwdfw additional' => '其他设置', +'fwdfw addrule' => '添加/编辑规则:', +'fwdfw all icmp' => '全部ICMP类型', +'fwdfw all subnets' => '所有子网', +'fwdfw change' => '更新', +'fwdfw copy' => '复制', +'fwdfw delete' => '删除', +'fwdfw dnat' => '目标NAT (端口转发)', +'fwdfw dnat error' => '您必须为DNAT选择单个主机。不允许组或网络。', +'fwdfw dnat extport' => '使用源NAT规则时，外部端口必须为空。', +'fwdfw dnat nochoice' => '请从NAT部分中选择源NAT或目标NAT。', +'fwdfw dnat porterr' => '您必须为NAT选择一个端口或端口范围（tcp / udp）', +'fwdfw dnat porterr2' => '未定义目标端口时，无法使用外部端口（NAT）。', +'fwdfw edit' => '编辑', +'fwdfw err concon' => '并发连接数无效', +'fwdfw err nosrc' => '未选择源。', +'fwdfw err nosrcip' => '需要指定源IP地址。', +'fwdfw err notgt' => '未选择目标', +'fwdfw err notgtip' => '需要指定目标IP地址。', +'fwdfw err prot_port' => '所选协议不允许使用源端口或目标端口', +'fwdfw err prot_port1' => '使用源端口或目标端口时，必须选择TCP或UDP作为协议', +'fwdfw err ratecon' => '速率限制中的连接值无效', +'fwdfw err remark' => '备注中的字符无效。', +'fwdfw err ruleexists' => '该规则已经存在。', +'fwdfw err same' => '源和目标是相同的。', +'fwdfw err samesub' => '源和目标IP地址来自同一子网。', +'fwdfw err src_addr' => '无效的源MAC / IP地址。', +'fwdfw err tgt_addr' => '无效的目标IP地址。', +'fwdfw err tgt_grp' => '目标服务组为空', +'fwdfw err tgt_mac' => 'MAC地址不能用作目标。', +'fwdfw err tgt_port' => '无效的目标端口。', +'fwdfw err time' => '您必须选择至少一天。', +'fwdfw external port nat' => '外部端口（NAT）', +'fwdfw final_rule' => '最近规则: ', +'fwdfw from' => '从:', +'fwdfw hint ip1' => '由于源子网和目标子网可能重叠，因此最后生成的规则可能永远不会匹配。', +'fwdfw hint ip2' => '请仔细检查此规则是否有意义: ', +'fwdfw hint mac' => '目标组包含MAC地址，将在规则创建过程中将其跳过。', +'fwdfw iface' => '接口', +'fwdfw ipsec network' => 'IPsec网络:', +'fwdfw limitconcon' => '限制每个IP地址的并发连接', +'fwdfw log' => '日志', +'fwdfw log rule' => '日志规则', +'fwdfw man port' => '端口:', +'fwdfw many' => 'Many', +'fwdfw maxconcon' => '最高并发连接', +'fwdfw menu' => '防火墙', +'fwdfw movedown' => '向下移动', +'fwdfw moveup' => '向上移动', +'fwdfw natport used' => 'NAPT的给定端口已被其他DNAT规则使用。', +'fwdfw newrule' => '添加规则', +'fwdfw numcon' => '连接数', +'fwdfw p2p txt' => '允许/拒绝访问P2P网络。', +'fwdfw pol allow' => '允许', +'fwdfw pol block' => '阻止', +'fwdfw pol text' => '为来自本地网络的连接设置默认的防火墙行为。您可以允许所有新连接，也可以默认阻止它们。在后一种模式下，本地网络之间的连接也将被阻止。', +'fwdfw pol text1' => '设置由防火墙本身启动的连接的默认防火墙行为。注意！您可能将自己锁定。', +'fwdfw pol title' => '默认防火墙行为', +'fwdfw prot41' => 'IPv6封装(协议41)', +'fwdfw prot41 short' => 'IPv6封装', +'fwdfw ratelimit' => '新连接限速', +'fwdfw red' => '红色', +'fwdfw reread' => '应用更改', +'fwdfw rule action' => '规则动作:', +'fwdfw rule activate' => '激活规则', +'fwdfw rulepos' => '规则位置', +'fwdfw rules' => '规则', +'fwdfw snat' => '源NAT', +'fwdfw source' => '源', +'fwdfw sourceip' => '源地址(MAC/IP地址或网络)', +'fwdfw std network' => '标准网络', +'fwdfw target' => '目标', +'fwdfw targetip' => '目标地址(IP地址或网络)', +'fwdfw till' => '直到:', +'fwdfw time' => '时间限制', +'fwdfw timeframe' => '使用时间限制', +'fwdfw toggle' => '激活或停用', +'fwdfw togglelog' => '激活或停用日志', +'fwdfw use nat' => '使用网络地址转换(NAT)', +'fwdfw use srcport' => '源端口:', +'fwdfw use srv' => '目标端口:', +'fwdfw useless rule' => '该规则无效。', +'fwdfw warn1' => '这可能会导致将防火墙规则应用到它们不适合的网络。', +'fwdfw wd_fri' => '星期五', +'fwdfw wd_mon' => '星期一', +'fwdfw wd_sat' => '星期六', +'fwdfw wd_sun' => '星期天', +'fwdfw wd_thu' => '星期四', +'fwdfw wd_tue' => '星期二', +'fwdfw wd_wed' => '星期三', +'fwdfw xt access' => '入站', +'fwhost Custom Host' => '主机', +'fwhost Custom Network' => '网络', +'fwhost IpSec Host' => 'IPsec主机', +'fwhost IpSec Network' => 'IPsec网络', +'fwhost OpenVPN N-2-N' => 'OpenVPN Net-to-Net', +'fwhost OpenVPN static host' => 'OpenVPN静态主机', +'fwhost OpenVPN static network' => 'OpenVPN静态网络', +'fwhost Standard Network' => '标准网络', +'fwhost addgeoipgrp' => '添加GeoIP组', +'fwhost addgrp' => '添加新的网络/主机组', +'fwhost addgrpname' => '组名:', +'fwhost addhost' => '添加主机', +'fwhost addnet' => '添加网络', +'fwhost addservice' => '添加服务', +'fwhost addservicegrp' => '添加服务组', +'fwhost any' => '任意', +'fwhost attention' => 'ATTENTION', +'fwhost back' => '返回', +'fwhost blue' => '蓝色', +'fwhost ccdhost' => 'OpenVPN客户端:', +'fwhost ccdnet' => 'OpenVPN网络:', +'fwhost change' => '修改', +'fwhost changeremark' => '您修改的只是备注', +'fwhost cust addr' => '主机', +'fwhost cust geoip' => 'GeoIP组', +'fwhost cust geoipgroup' => 'GeoIP组', +'fwhost cust geoiplocation' => 'GeoIP位置', +'fwhost cust grp' => '网络/主机组', +'fwhost cust net' => '网络', +'fwhost cust service' => '服务', +'fwhost cust srvgrp' => '服务组', +'fwhost deleted' => '已删除', +'fwhost empty' => '规则未定义', +'fwhost err addr' => '无效的IP地址或子网', +'fwhost err addrgrp' => '请提供组名称', +'fwhost err empty' => '请填写所有输入字段', +'fwhost err emptytable' => '该组中没有条目', +'fwhost err groupempty' => '所选组为空', +'fwhost err grpexist' => '具有相同名称的组已经存在', +'fwhost err hostexist' => '具有相同名称的主机已存在', +'fwhost err hostorip' => '名称或IP地址无效', +'fwhost err ip' => 'IP地址无效', +'fwhost err ipcheck' => '该IP地址已被使用', +'fwhost err ipmac' => 'IP/MAC地址无效', +'fwhost err ipwithsub' => '请仅提供一个IP地址（不带子网掩码）', +'fwhost err isccdhost' => '此名称已被OpenVPN客户端连接使用', +'fwhost err isccdiphost' => '此IP地址已被OpenVPN客户端连接使用', +'fwhost err isccdipnet' => '此IP地址已被OpenVPN网络连接使用', +'fwhost err isccdnet' => '此名称已被OpenVPN网络使用', +'fwhost err isingrp' => '该条目已存在于组中', +'fwhost err mac' => 'MAC地址无效', +'fwhost err maxservicetcp' => '此组中已达到15个TCP服务的最大数量（端口范围计数两次）', +'fwhost err maxserviceudp' => '此组中已达到15个UDP服务的最大数量（端口范围计数两次）', +'fwhost err name' => '名称无效。允许的字符：大写和小写字母，数字，空格和破折号。', +'fwhost err name1' => '空名。', +'fwhost err net' => '网络/IP地址已存在', +'fwhost err netexist' => '具有相同名称的网络已存在', +'fwhost err partofnet' => '该网络是现有网络的子网。', +'fwhost err port' => '端口为空', +'fwhost err remark' => '无效的备注。允许的字符：大写和小写字母，数字，空格，破折号，花括号，分号，竖线和点。', +'fwhost err srv exists' => '具有相同名称的服务已存在', +'fwhost err srvexist' => '该服务已存在于组中', +'fwhost err sub32' => '请添加网络，而不是单个主机', +'fwhost green' => '绿色', +'fwhost hint' => '注意', +'fwhost hosts' => '防火墙主机', +'fwhost icmptype' => 'ICMP类型:', +'fwhost ip_mac' => 'IP/MAC地址', +'fwhost ipadr' => 'IP地址:', +'fwhost ipsec host' => 'IPsec客户端:', +'fwhost ipsec net' => 'IPsec网络:', +'fwhost menu' => '防火墙组', +'fwhost netaddress' => '网络地址', +'fwhost newgeoipgrp' => 'GeoIP组', +'fwhost newgrp' => '网络/主机组', +'fwhost newhost' => '主机', +'fwhost newnet' => '网络', +'fwhost newservice' => '服务', +'fwhost newservicegrp' => '服务组', +'fwhost orange' => '橙色', +'fwhost ovpn_n2n' => 'OpenVPN Net-to-Net', +'fwhost port' => '端口', +'fwhost prot' => '协议', +'fwhost reread' => '防火墙规则需要更新。', +'fwhost reset' => '取消', +'fwhost services' => '服务:', +'fwhost srv_name' => '服务名称', +'fwhost stdnet' => '标准网络:', +'fwhost type' => '类型', +'fwhost used' => '已用', +'fwhost welcome' => '这里可以将单个主机、网络和服务组合在一起，以便更容易、更快速的创建新规则。', +'fwhost wo subnet' => '(没有子网)', +'g.dtm' => '即将被删除', +'g.lite' => '即将被删除', +'gateway' => '网关', +'gateway ip' => '网关IP', +'gen dh' => '生成新的Diffie-Hellman参数', +'gen static key' => '生成静态密钥', +'generate' => '生成根/主机证书', +'generate a certificate' => '生成证书:', +'generate dh key' => '生成Diffie-Hellman参数', +'generate iso' => '生成ISO', +'generate ptr' => '生成PTR', +'generate root/host certificates' => '生成根/主机证书', +'generate tripwire keys and init' => '生成tripwire密钥并初始化', +'generatekeys' => '生成密钥', +'generatepolicy' => '生成新策略', +'generatereport' => '生成新报告', +'generating the root and host certificates may take a long time. it can take up to several minutes on older hardware. please be patient' => '生成根证书和主机证书可能需要很长时间。在较旧的硬件上可能需要花费几分钟。请耐心等待。', +'genkey' => '生成PSK', +'genre' => '类型', +'geoip' => 'GeoIP', +'geoipblock' => 'GeoIP阻止', +'geoipblock block countries' => '封锁国家', +'geoipblock configuration' => 'GeoIP配置', +'geoipblock country code' => '国家代码', +'geoipblock country is allowed' => '允许从该国家入站的流量', +'geoipblock country is blocked' => '来自该国家的入站流量将被阻止', +'geoipblock country name' => '国家名称', +'geoipblock enable feature' => '启用基于GeoIP的阻止:', +'geoipblock flag' => 'Flag', +'global settings' => '全局设置', +'gpl i accept these terms and conditions' => '我接受这些条款和条件', +'gpl license agreement' => '许可协议', +'gpl please read carefully the general public license and accept it below' => '请仔细阅读通用公共许可证并在下面接受', +'gpl unofficial translation of the general public license v3' => '通用公共许可证v3的非官方翻译', +'graph' => 'Graph', +'graph per' => 'per', +'green' => '绿色', +'green interface' => '绿色接口', +'grouptype' => '组类型:', +'guaranteed bandwith' => '保证带宽', +'guardian' => '监护人', +'guest ok' => '允许来宾进入', +'gui settings' => 'GUI设置', +'gz with key' => '在此计算机上只能还原加密的存档。', +'hangup' => '断开连接', +'hangup string' => 'Hangup:', +'harddisk temperature' => 'Harddisk Temperature', +'harddisk temperature graphs' => 'HDD图表', +'hardware graphs' => '硬件图表', +'hardware support' => '硬件支持', +'hardware vulnerabilities' => '硬件漏洞', +'hdd temperature in' => 'HDD temperature in', +'help' => '帮助', +'high' => '高', +'high memory usage' => 'High memory usage', +'hint' => '提示:', +'holdoff' => '拖延时间（秒）', +'host' => '主机', +'host allow' => '允许的主机列表', +'host certificate' => '主机证书', +'host configuration' => 'Host配置', +'host deny' => '拒绝的主机列表', +'host ip' => '主机IP地址', +'host to net vpn' => '主机到网络虚拟专用网（RoadWarrior）', +'hostname' => '主机名', +'hostname and domain already in use' => '主机名和域已在使用中。', +'hostname cant be empty' => '主机名不能为空。', +'hostname not set' => '主机名未设置。', +'hosts config added' => '已添加主机配置', +'hosts config changed' => '主机配置已更改', +'hour' => '小时', +'hour-graph' => 'Hour', +'hours' => '小时', +'hours2' => '小时', +'ibod for dual isdn only' => 'iBOD仅可用于Dual ISDN。', +'icmp selected but no type' => '为协议选择了ICMP，但未指定ICMP类型。', +'icmp type' => 'ICMP类型', +'id' => 'ID', +'idle' => '空闲', +'idle timeout' => '空闲超时（分钟； 0禁用）:', +'idle timeout not set' => '空闲超时未设置。', +'ids apply' => '应用', +'ids apply ruleset changes' => '正在应用规则集更改。请等待所有操作成功完成...', +'ids automatic rules update' => '自动更新规则', +'ids download new ruleset' => '下载并解压缩新规则集。请等待所有操作成功完成...', +'ids enable' => '启用入侵防御系统', +'ids hide' => '隐藏', +'ids ignored hosts' => '列入白名单的主机', +'ids log hits' => '已激活规则总数', +'ids log viewer' => 'IPS日志查看器', +'ids logs' => 'IPS日志', +'ids monitor traffic only' => '仅监控流量', +'ids monitored interfaces' => '监控接口', +'ids no network zone' => '请选择至少一个要监视的网络区域', +'ids no ruleset available' => '没有可用的规则集。请先下载一个', +'ids oinkcode required' => '所选规则集需要订阅或Oinkcode', +'ids rules update' => '规则集', +'ids ruleset autoupdate in progress' => '规则集更新正在进行中。请等待所有操作成功完成...', +'ids ruleset settings' => '规则集设置', +'ids show' => '显示w', +'ids working' => '正在应用更改。请等待所有操作成功完成...', +'iface' => '接口', +'ignore filter' => '排除', +'ike encryption' => 'IKE加密:', +'ike grouptype' => 'IKE组类型:', +'ike integrity' => 'IKE完整性:', +'ike lifetime' => 'IKE有效期:', +'ike lifetime should be between 1 and 24 hours' => 'IKE的有效期应在1到24小时之间。', +'imei' => 'IMEI', +'import' => '导入', +'importkey' => '导入PSK', +'imsi' => 'IMSI', +'in' => '进', +'inactive' => '不活跃', +'include logfiles' => '包含日志文件', +'incoming' => '入站', +'incoming compression in bytes per second' => '入站压缩', +'incoming firewall access' => '入站防火墙访问', +'incoming overhead in bytes per second' => '入站开销', +'incoming traffic in bytes per second' => 'Incoming Traffic', +'incorrect password' => '密码错误', +'info' => '信息', +'init string' => '提示:', +'insert floppy' => '要备份到软盘，请将格式化的软盘插入IPFire上的驱动器，然后单击备份到软盘来备份系统配置。请仔细检查结果，以确保备份成功完成。这可能需要一段时间才能完成，因此请耐心等待。', +'insert removable device' => '可以可移动设备', +'install' => '安装', +'install new update' => '安装新更新:', +'installed' => '已安装', +'installed updates' => '已安装的更新:', +'instant update' => '即时更新', +'integrity' => 'Integrity:', +'interface' => '接口', +'interface mode' => '接口', +'interfaces' => '接口', +'internet' => 'INTERNET', +'intrusion detection' => '入侵防御', +'intrusion detection system' => '入侵防御系统', +'intrusion detection system log viewer' => '入侵防御系统日志查看器', +'intrusion detection system rules' => '规则集', +'intrusion detection system2' => '入侵防御系统', +'intrusion prevention system' => '入侵防御系统', +'invalid broadcast ip' => '无效的广播IP', +'invalid cache size' => '无效的缓存大小。', +'invalid characters found in pre-shared key' => '在预共享密钥中找到无效字符。', +'invalid date entered' => '输入的日期无效。', +'invalid default lease time' => '无效的默认租约时间。', +'invalid domain name' => '无效的域名。', +'invalid downlink speed' => '无效的下行链路速度。', +'invalid end address' => '无效的结束地址。', +'invalid fixed ip address' => '无效的固定IP地址', +'invalid fixed mac address' => '无效的固定MAC地址', +'invalid hostname' => '无效主机。', +'invalid input' => '输入无效', +'invalid input for authentication method' => '认证方法输入无效。', +'invalid input for city' => '城市输入无效。', +'invalid input for country' => '国家输入无效。', +'invalid input for department' => '部门的输入无效。', +'invalid input for dhcp dns' => 'DHCP DNS输入无效', +'invalid input for dhcp domain' => 'DHCP域输入无效', +'invalid input for dhcp wins' => 'DHCP WINS输入无效', +'invalid input for dpd delay' => 'DPD延迟输入无效', +'invalid input for dpd timeout' => 'DPD超时输入无效', +'invalid input for e-mail address' => '发件人地址无效', +'invalid input for esp keylife' => 'ESP密钥有效期输入无效', +'invalid input for hostname' => '主机名输入无效.', +'invalid input for ike lifetime' => 'IKE有效期输入无效', +'invalid input for inactivity timeout' => '闲置超时输入无效', +'invalid input for interface address' => '接口地址输入无效', +'invalid input for interface mode' => '接口模式输入无效', +'invalid input for interface mtu' => '接口MTU输入无效', +'invalid input for keepalive 1' => 'Keepalive ping输入无效', +'invalid input for keepalive 1:2' => 'Keepalive use输入无效，至少1：2的比例', +'invalid input for keepalive 2' => 'Keepalive ping-restart输入无效', +'invalid input for local ip address' => '本地IP地址输入无效', +'invalid input for max clients' => '最大客户端输入无效', +'invalid input for mode' => '模式输入无效', +'invalid input for name' => '用户的全名或系统主机名无效', +'invalid input for oink code' => 'Oink代码输入无效', +'invalid input for organization' => '机构输入无效', +'invalid input for remote host/ip' => '远程主机/ip输入无效.', +'invalid input for state or province' => '州或省的输入无效。', +'invalid input for valid till days' => '有效期至（天）的输入无效。', +'invalid ip' => 'IP地址无效', +'invalid ip or hostname' => 'IP地址或主机名无效', +'invalid keep time' => '保持时间必须是有效数字', +'invalid key' => '无效的密钥', +'invalid loaded file' => '加载文件无效', +'invalid local-remote id' => '本地和远程ID不能相同，并以“@”符号开头。这些是Strongswan术语中的leftid和rightid。', +'invalid logserver address' => '无效的syslogd服务器地址', +'invalid logserver protocol' => '无效的syslogd服务器协议', +'invalid mac address' => 'MAC地址无效', +'invalid max lease time' => '最长租约时间无效。', +'invalid maximum incoming size' => '最大入站大小无效。', +'invalid maximum object size' => '最大对象大小无效。', +'invalid maximum outgoing size' => '最大出站大小无效。', +'invalid md5sum' => 'MD5Sum无效。', +'invalid minimum object size' => '最小对象大小无效。', +'invalid mtu input' => 'MTU无效', +'invalid netmask' => '掩码无效', +'invalid port' => '无效的端口。必须是有效的端口号。', +'invalid port list' => '端口列表语法为：port[,port]..。其中port在/etc/services或number中', +'invalid primary dns' => '第一个DNS服务器无效', +'invalid primary ntp' => '第一个NTP服务器地址无效', +'invalid secondary dns' => '第二个DNS服务器无效', +'invalid secondary ntp' => '第二个NTP服务器地址无效', +'invalid start address' => '开始地址无效', +'invalid time entered' => '输入的时间无效。', +'invalid time period' => '无效的时间段', +'invalid uplink speed' => '无效的上行速度。', +'invalid upstream proxy username or password setting' => '无效的上游代理用户名或密码设置。', +'invalid users' => '列出拒绝访问的用户', +'invalid vpi vpci' => '无效的VPI/VPCI设置', +'invalid wins address' => '无效的WINS服务器地址。', +'invert' => '倒置', +'ip address' => 'IP地址', +'ip address in use' => 'IP地址已被使用', +'ip address outside subnets' => '外部子网IP地址', +'ip alias added' => '已添加外部IP别名', +'ip alias changed' => '外部IP别名已更改', +'ip alias removed' => '外部IP别名已删除', +'ip info' => 'IP信息', +'ipfire has now rebooted' => 'IPFire现在正在重启。', +'ipfire has now shutdown' => 'IPFire现在关机。', +'ipfire side' => 'IPFire端:', +'ipfire side is invalid' => 'IPFire端无效。', +'ipfires hostname' => 'IPFire的主机名', +'ipinfo' => 'IP信息', +'ipsec' => 'IPsec', +'ipsec connection' => 'IPsec连接', +'ipsec interface mode gre' => 'GRE', +'ipsec interface mode none' => '- 无（默认） -', +'ipsec interface mode vti' => 'VTI', +'ipsec mode transport' => '传输', +'ipsec mode tunnel' => '隧道', +'ipsec network' => 'IPsec网络', +'ipsec no connections' => '没有活动的IPsec连接', +'ipsec settings' => 'IPsec设置', +'iptable rules' => 'IPTable规则', +'iptmangles' => 'IPTable Mangles', +'iptnats' => 'IPTable NAT', +'ipts' => 'iptables', +'isdn' => 'ISDN', +'isdn settings' => '其他ISDN设置:', +'isdn1' => '单位ISDN', +'isdn2' => '双ISDN', +'itlb multihit' => 'iTLB MultiHit', +'january' => '一月', +'javascript menu error1' => '如果下拉菜单不起作用，请在', +'javascript menu error2' => '页面', +'july' => '七月', +'june' => '六月', +'kernel' => 'Kernel', +'kernel logging server' => '核心日志记录服务器', +'kernel version' => '内核版本:', +'key stuff' => '2. 密钥和证书', +'keyreset' => '重置密钥', +'keys' => '密钥', +'lan' => 'LAN', +'lang' => '英语', +'languagepurpose' => '选择您希望IPFire显示的语言:', +'last' => '最近', +'last activity' => '最后活动', +'lateprompting' => '后期提示', +'lease expires' => '租约到期', +'least preferred' => '最不喜欢', +'legend' => '说明', +'length' => '长度', +'lifetime' => '有效期:', +'line' => 'Line', +'linkq' => 'Link Quality', +'load printer' => '加载打印机', +'loaded modules' => '加载的模块:', +'local hard disk' => '硬盘', +'local ip address' => '本地IP地址', +'local master' => 'Local Master', +'local ntp server specified but not enabled' => '已指定但未启用本地NTP服务器', +'local subnet' => '本地子网:', +'local subnet is invalid' => '本地子网无效。', +'local vpn hostname/ip' => '本地VPN主机/IP', +'localkey' => '本地密钥', +'localkeyfile' => '本地密钥文件', +'log' => '日志', +'log enabled' => '启用日志', +'log level' => '日志层级', +'log lines per page' => '每页行数', +'log server address' => 'Syslog服务器:', +'log server protocol' => '协议:', +'log settings' => '日志设置', +'log summaries' => '日志摘要', +'log summary' => '日志摘要', +'log var messages' => '设置/var/log/messages:', +'log view' => '日志查看', +'log viewer' => '日志查看器', +'log viewing options' => '日志查看选项', +'log-options' => '日志文件选项', +'loged in at' => '登录于', +'logging' => '日志', +'logging server' => '日志服务器', +'loginlogout' => '登录/注销', +'logs' => '日志', +'lookup failed' => '反向查询失败', +'loosedirectorychecking' => '松散的目录检查', +'low' => '低', +'ls_dhcpd' => 'DHCP服务器:', +'ls_disk space' => '磁盘空间:', +'ls_free/swan' => 'VPN:', +'ls_httpd' => 'HTTP服务器:', +'ls_init' => 'Init:', +'ls_kernel' => '内核和防火墙:', +'ls_modprobe' => '加载模块:', +'ls_pam_unix' => '本地用户登录:', +'ls_sshd' => '远程用户登录:', +'ls_syslogd' => 'Syslogd:', +'mac address' => 'MAC地址', +'mac address deleted' => '删除成功!', +'mac address deleted txt' => 'MAC地址已成功删除，但更改仅在重启后生效。', +'mac address done' => 'MAC地址设置将被保存。', +'mac address error not 00' => 'MAC地址必须以00开头!', +'mac address error not valid' => 'MAC地址无效!', +'mac address header' => 'Red0上的MAC地址', +'mac address in use' => 'MAC地址已被使用', +'mac address menu' => '分配MAC', +'mac address recon' => '尝试重新连接!', +'mac address saved' => '保存成功!', +'mac address saved txt' => 'MAC地址已成功保存，但更改仅在重新启动或重新连接后生效。', +'mac address title' => '分配MAC地址', +'mac desc' => '在这里，您可以更改red0上的MAC地址。地址必须以十六进制（0-9，a-f）输入。 例如： 00-01-02-0e-b8-d6 或 00:01:02:0e:b8:d6。', +'mac filter' => 'MAC过滤器', +'mac new' => '新的MAC地址:', +'mac1 new' => '新的MAC地址 1 (vdsl-inet):', +'mac2 new' => '新的MAC地址 2 (vdsl-iptv):', +'magic packet send to:' => '魔术包发送到:', +'mailmethod' => '邮件方式', +'mailprogramm' => '邮件程序', +'main page' => '主页', +'manage ovpn' => '5. 隧道管理:', +'manage printers' => '管理打印机', +'manage shares' => '管理共享', +'manual' => '手动', +'manual control and status' => '手动控制和状态:', +'manually' => '手动', +'map to guest' => '来宾地图', +'march' => '三月', +'marked' => '已标记', +'masquerade blue' => '在BLUE接口上伪装', +'masquerade green' => '在GREEN接口上伪装 ', +'masquerade orange' => '在ORANGE接口上伪装 ', +'masquerading' => '伪装', +'masquerading disabled' => '禁用伪装', +'masquerading enabled' => '启用伪装', +'max bandwith' => '最大带宽', +'max incoming size' => '最大入站大小(KB):', +'max lease time' => '最长租约时间(分钟):', +'max outgoing size' => '最大出站大小(KB):', +'max reliability' => '最大的可靠性', +'max renewal time' => '最长续订时间', +'max retries not set' => '未设置最大重试次数。', +'max size' => '最大对象大小 (KB):', +'max throughput' => '最大产量', +'maximal' => 'Maximal', +'maximum' => 'Maximum', +'maximum retries' => '最大重试次数:', +'may' => '五月', +'mbmon display' => '显示', +'mbmon fan' => '风扇转速', +'mbmon fan in' => 'Fan speed in', +'mbmon graphs' => 'mbmon Graphs', +'mbmon label' => 'Label', +'mbmon settings' => 'mbmongraph settings', +'mbmon temp' => '温度', +'mbmon temp in' => 'Temperature in', +'mbmon value' => '值', +'mbmon volt' => 'Voltage', +'meaning' => 'meaning', +'media' => '硬盘', +'media information' => '硬盘信息', +'medium' => '中', +'meltdown' => 'Meltdown', +'memory' => 'Memory', +'memory information' => '内存信息', +'memory usage per' => 'Memory Usage per', +'messages' => 'Messages', +'messages logging' => 'Logsettings for /var/log/messages', +'method' => 'Method:', +'min costs' => 'Minimum costs', +'min delay' => 'Minimum delay', +'min size' => '最小对象大小(KB):', +'minimal' => 'Minimal', +'minimum' => 'Minimum', +'minute' => 'Minute', +'minutes' => 'Minutes', +'misc-options' => '其他选项', +'missing dat' => '找不到加密的档案', +'missing gz' => '找不到未加密的存档', +'mitigated' => 'Mitigated', +'mode' => '模式', +'model' => '模型', +'modem' => 'Modem', +'modem configuration' => 'Modem配置', +'modem hardware details' => 'Modem硬件', +'modem information' => 'Modem信息', +'modem network bit error rate' => '误码率', +'modem network information' => '网络信息', +'modem network mode' => '网络模式', +'modem network operator' => '网络运营商', +'modem network registration' => '网络注册', +'modem network signal quality' => '信号品质', +'modem no connection' => '未连接', +'modem no connection message' => '无法建立与调制解调器的连接。', +'modem on com1' => 'Modem on COM1', +'modem on com2' => 'Modem on COM2', +'modem on com3' => 'Modem on COM3', +'modem on com4' => 'Modem on COM4', +'modem on com5' => 'Modem on COM5', +'modem settings have errors' => 'Modem设置有错误', +'modem sim information' => 'SIM信息', +'modem speaker on' => 'Modem喇叭开:', +'modem status' => 'Modem状态', +'modify' => '修改', +'modulation' => '调制', +'monday' => '星期一', +'monitor interface' => '监控接口', +'month' => '月', +'month-graph' => '月', +'monthly firewallhits' => '防火墙命中(每月)', +'monthly start day bad' => '每月开始日期不正确', +'monthly traffic bad' => '月交易量不正确', +'monthly volume' => '月交易量', +'monthly volume start day' => '每月第一天', +'monthly volume start day short' => '第一天', +'months' => '月', +'more' => '更多', +'most preferred' => '最喜欢的', +'mount' => '挂载', +'mounted on' => '挂载', +'mpfire' => 'IPFire媒体播放器', +'mpfire controls' => 'MPFire控制', +'mpfire playlist' => 'MPFire播放列表', +'mpfire scanning' => '扫描新文件', +'mpfire search' => 'MPFire搜索', +'mpfire songs' => 'MP Fire歌曲列表', +'mpfire webradio' => 'MPFire Webradio', +'mtu' => 'MTU', +'mtu QoS' => '这不会更改全局MTU，而只会为QoS设置MTU。', +'my new share' => '我的共享', +'name' => '名称', +'name is invalid' => '名称无效', +'name must only contain characters' => '名称只能包含字符。', +'name too long' => '用户的全名或系统主机名太长', +'nameserver' => '域名服务器', +'nat-traversal' => 'Nat穿越:', +'needreboot' => '更新需要重新启动', +'net' => 'Net', +'net address' => '网络地址', +'net config' => '网络配置', +'net config type' => '网络配置的种类', +'net config type help' => '绿色是局域网，红色是互联网，蓝色是WLAN，橙色是DMZ。', +'net to net vpn' => '虚拟专用网', +'net traffic newversion' => '有新的网络流量程序版本可用:', +'net-traffic configuration' => '网络流量配置', +'netbios name' => 'Netbios名称', +'netmask' => '网络掩码', +'network' => '网络', +'network added' => '已添加自定义网络', +'network configuration' => '网络配置', +'network internal' => '网络(内部)', +'network options' => '网络选项', +'network other' => '网络(其他)', +'network red' => '网络(外部)', +'network removed' => '已删除自定义网络', +'network status information' => '网络状态信息', +'network time' => '使用网络时间服务器', +'network time from' => '从网络时间服务器获取时间', +'network traffic graphs' => '网络流量图', +'network traffic graphs external' => '网络流量图(外部)', +'network traffic graphs internal' => '网络流量图(内部)', +'network traffic graphs others' => '网络(其他)', +'network updated' => '已更新自定义网络', +'networks settings' => '防火墙 - 网络设置', +'never' => '从不', +'new optionsfw later' => '有些选项需要重新启动才能生效', +'new optionsfw must boot' => '您必须重新启动IPFire', +'newer' => '较新', +'next' => '下一个', +'no' => 'No', +'no alcatelusb firmware' => '没有阿尔卡特USB固件。请上传。', +'no cfg upload' => '没有数据上传', +'no dhcp lease' => '没有获得DHCP租约', +'no eciadsl synch.bin file' => '没有ECI ADSL synch.bin文件。请上传。', +'no filter pass' => '输入未过滤数据包的标准类别。', +'no fritzdsl driver' => '没有Fritz！DSL驱动程序。请上传。', +'no hardware random number generator' => '该系统没有entropy源。', +'no information available' => '无信息可用。', +'no log selected' => '未选择日志', +'no modem selected' => '未选择调制解调器', +'no set selected' => '未选择设置', +'no time limit' => '不限制时间', +'none' => '无', +'none found' => '未找到', +'nonetworkname' => '没有输入网络名称', +'noservicename' => '未输入服务名称', +'not a valid ca certificate' => '不是有效的CA证书。', +'not a valid dh key' => '不是有效的Diffie-Hellman参数文件。请使用2048、3072或4096位的长度以及PKCS＃3格式。', +'not affected' => '不受影响', +'not enough disk space' => '没有足够的磁盘空间', +'not present' => '不存在', +'not running' => '未运行', +'not set' => '未设置', +'notes' => '注意', +'notice' => '注意', +'november' => '十一月', +'ntp common settings' => '通用设置', +'ntp configuration' => 'NTP配置', +'ntp must be enabled to have clients' => '必须启用NTP才能到客户端。', +'ntp server' => 'NTP服务器', +'ntp sync' => '同步', +'ntp syncro disabled' => 'NTP同步已禁用', +'ntp syncro enabled' => 'NTP同步已启禁用', +'ntpd restarted' => '已重启NTPD', +'number' => '编号:', +'o-no' => '不活跃', +'o-yes' => '活跃', +'october' => '十月', +'off' => '关', +'ok' => 'OK', +'older' => '较旧', +'on' => '开', +'one hour' => '1小时', +'one month' => '1个月', +'one week' => '1周', +'one year' => '1年', +'online help en' => '在线帮助（英语）', +'only digits allowed in holdoff field' => '拖延字段中仅允许数字', +'only digits allowed in max retries field' => '“最大重试次数”字段中仅允许数字。', +'only digits allowed in the idle timeout' => '空闲超时中仅允许数字。', +'only red' => '仅红色', +'open to all' => '覆盖对所有的外部访问', +'openssl produced an error' => 'OpenSSL产生错误', +'openvpn client' => 'OpenVPN客户端', +'openvpn default' => '默认', +'openvpn destination port used' => '目标端口已被另一台OpenVPN服务器使用。', +'openvpn disabled' => '禁用', +'openvpn enabled' => '启用', +'openvpn fragment allowed with udp' => '仅在使用UDP协议时才允许使用数据分片。', +'openvpn log' => 'OpenVPN 日志', +'openvpn mssfix allowed with udp' => '仅在使用UDP协议时才允许使用“ mssfix”。', +'openvpn network' => 'OpenVPN网络', +'openvpn prefix local subnet' => '本地子网不支持使用前缀表示法。请输入一个子网掩码，例如255.255.255.0。', +'openvpn prefix openvpn subnet' => 'OpenVPN子网不支持使用前缀表示法。请输入一个子网掩码，例如255.255.255.0。', +'openvpn prefix remote subnet' => '远程子网不支持使用前缀表示法。请输入一个子网掩码，例如255.255.255.0。', +'openvpn server' => 'OpenVPN服务器', +'openvpn subnet is used' => '给定的子网由另一个OpenVPN服务器使用。', +'optional at cmd' => '可选的AT命令', +'optional data' => '3. 选项设置:', +'options' => '选项', +'options fw' => '防火墙选项', +'optionsfw portlist hint' => '端口列表必须用逗号分隔（例如137,138）。每个协议最多可以指定15个端口。', +'optionsfw warning' => '修改这些选项意味着重新启动防火墙', +'or' => '或', +'orange' => '橙色', +'organization cant be empty' => '机构名称不能为空.', +'organization name' => '机构名称', +'organization too long' => '机构名称太长；它不能超过60个字符。', +'original' => '原始', +'os level' => 'OS层级', +'other' => '其他', +'other countries' => '其他国家', +'other login script' => '其他登录脚本', +'otherip' => '其他IP', +'otherport' => '其他Port', +'our donors' => '我们的捐助者', +'out' => '出', +'outgoing' => '出站', +'outgoing compression in bytes per second' => '出站压缩', +'outgoing firewall' => '出站防火墙', +'outgoing firewall access' => '出站防火墙访问', +'outgoing firewall add ip group' => '添加IP地址组', +'outgoing firewall add mac group' => '添加MAC地址组', +'outgoing firewall edit ip group' => '编辑IP地址组', +'outgoing firewall edit mac group' => '编辑MAC地址组', +'outgoing firewall group error' => '存在具有相同名称的组。', +'outgoing firewall groups' => '防火墙组', +'outgoing firewall ip groups' => '出站防火墙IP地址组', +'outgoing firewall mac groups' => '出站防火墙MAC地址组', +'outgoing firewall mode0' => '使用此模式，所有客户端都可以无限制地访问Internet。', +'outgoing firewall mode1' => '使用此模式时，仅允许基于定义的规则的连接。', +'outgoing firewall mode2' => '使用此模式，尽管已定义了所有连接，但仍允许所有连接。', +'outgoing firewall outgoing firewall reserved groupname' => '请使用另一个组名，该名称保留。', +'outgoing firewall p2p allow' => '允许使用P2P协议', +'outgoing firewall p2p deny' => '禁止使用P2P协议', +'outgoing firewall p2p description 1' => '这个按钮', +'outgoing firewall p2p description 2' => '表示允许使用p2p协议，或者', +'outgoing firewall p2p description 3' => '拒绝p2p协议。', +'outgoing firewall reset' => '重置全部', +'outgoing firewall view group' => '查看组', +'outgoing firewall warning' => '不选择源IP或Mac将忽略它们', +'outgoing overhead in bytes per second' => '出站开销', +'outgoing traffic in bytes per second' => 'Outgoing Traffic', +'override mtu' => '覆盖默认MTU', +'ovpn' => 'OpenVPN', +'ovpn add conf' => '其他配置', +'ovpn con stat' => 'OpenVPN连接统计', +'ovpn config' => 'OVPN-Config', +'ovpn crypt options' => '加密选项', +'ovpn device' => 'OpenVPN设备:', +'ovpn dh' => 'Diffie-Hellman参数长度', +'ovpn dh new key' => '生成新的Diffie-Hellman参数', +'ovpn dh parameters' => 'Diffie-Hellman参数选项', +'ovpn dh upload' => '上传新的Diffie-Hellman参数', +'ovpn dl' => 'OVPN-Config 下载', +'ovpn engines' => '加密引擎', +'ovpn errmsg green already pushed' => '始终设置绿色网络的路由', +'ovpn errmsg invalid ip or mask' => '无效的网络地址或子网掩码', +'ovpn error dh' => 'Diffie-Hellman参数必须至少为2048位! 请生成或上传新的Diffie-Hellman参数，可以在下面的“ Diffie-Hellman参数选项”部分中进行设置。', +'ovpn error md5' => '您的主机证书使用MD5作为签名，该签名不再被接受。 请更新到最新的IPFire版本并生成新的根和主机证书。 然后需要更新所有OpenVPN客户端！', +'ovpn generating the root and host certificates' => '生成根证书和主机证书可能需要很长时间。', +'ovpn ha' => '哈希算法', +'ovpn log' => 'OVPN-Log', +'ovpn mgmt in root range' => '端口号为1024或更高。', +'ovpn mtu-disc' => '路径MTU发现', +'ovpn mtu-disc and mtu not 1500' => '路径MTU发现要求MTU为1500。', +'ovpn mtu-disc maybe' => '可选', +'ovpn mtu-disc no' => '从不', +'ovpn mtu-disc off' => '禁用', +'ovpn mtu-disc with mssfix or fragment' => '路径MTU发现不能与mssfix或分片一起使用', +'ovpn mtu-disc yes' => '强制', +'ovpn no connections' => '没有有效的OpenVPN连接', +'ovpn on blue' => 'OpenVPN on BLUE:', +'ovpn on orange' => 'OpenVPN on ORANGE:', +'ovpn on red' => 'OpenVPN on RED:', +'ovpn port in root range' => '端口号为1024或更高。', +'ovpn reneg sec' => '会话密钥有效期:', +'ovpn routes push' => '路由（每行一条）。例如： 192.168.10.0/255.255.255.0 192.168.20.0/24', +'ovpn routes push options' => '路由推送选项', +'ovpn server status' => '当前OpenVPN服务器状态:', +'ovpn subnet' => 'OpenVPN子网:', +'ovpn subnet is invalid' => 'OpenVPN子网无效。', +'ovpn subnet overlap' => 'OpenVPN子网 : ', +'ovpn tls auth' => 'TLS通道保护:', +'ovpn warning rfc3280' => '您的主机证书不符合RFC3280。 请更新到最新的IPFire版本，并尽快生成新的根和主机证书。 然后需要更新所有OpenVPN客户端!', +'ovpn_fastio' => 'Fast-IO', +'ovpn_mssfix' => 'MSSFIX大小', +'ovpn_mtudisc' => 'MTU发现', +'ovpn_processprio' => '优先流程', +'ovpn_processprioD' => '深', +'ovpn_processprioED' => '极深', +'ovpn_processprioEH' => '极高', +'ovpn_processprioEN' => '比正常高', +'ovpn_processprioH' => '高', +'ovpn_processprioLN' => '比正常更深', +'ovpn_processprioN' => '正常', +'ovpn_processprioVD' => '非常深', +'ovpn_processprioVH' => '非常高', +'ovpnstatus log' => 'OPEN VPN状态日志', +'ovpnsys log' => 'OPEN VPN系统日志', +'p2p block' => 'P2P网络', +'p2p block save notice' => '请重新加载防火墙规则集，以应用您的更改。', +'package failed to install' => '插件安装失败。', +'pagerefresh' => '页面正在刷新，请等待。', +'pakfire accept all' => '您是否要安装所有插件?', +'pakfire ago' => '前完成的。', +'pakfire available addons' => '可用插件:', +'pakfire configuration' => 'Pakfire配置', +'pakfire core update auto' => '自动安装核心和插件更新：', +'pakfire core update level' => '核心更新版本', +'pakfire health check' => '检查镜像是否可达(ping):', +'pakfire install description' => '请从下面的列表中选择一项或多项，然后单击加号进行安装。', +'pakfire install package' => '您要安装以下软件包: ', +'pakfire installed addons' => '已安装的插件:', +'pakfire last core list update' => '上一次核心列表更新是在', +'pakfire last package update' => '上一次插件列表更新是在', +'pakfire last serverlist update' => '上一次服务器列表更新是在', +'pakfire last update' => '上一次更新是在', +'pakfire possible dependency' => '可能会有一些依赖的软件包，这是需要安装的软件包的列表。', +'pakfire register' => '在pakfire服务器上注册:', +'pakfire system state' => '系统状态', +'pakfire uninstall description' => '请从下面的列表中选择一项或多项，然后单击减号进行卸载。', +'pakfire uninstall package' => '您要卸载以下插件: ', +'pakfire update daily' => '每天搜索更新:', +'pakfire updates' => '可用更新:', +'pakfire working' => 'Pakfire正在运行...请等待所有操作成功完成。', +'pap or chap' => 'PAP或CHAP', +'parentclass' => '父类', +'parentclass add' => '添加父类', +'password' => '密码:', +'password contains illegal characters' => '密码包含非法字符。', +'password crypting key' => '密码加密密钥', +'password not set' => '密码没设置', +'password too short' => '密码太短了', +'passwords do not match' => '密码不匹配。', +'passwords must be at least 6 characters in length' => '密码长度至少为6个字符', +'path to directory' => '共享路径', +'pc' => '工作组', +'pc add' => '添加工作组', +'pdc options' => 'PDC选项', +'percentage' => 'Percentage', +'persistent' => '持久', +'pfs yes no' => '完全正向保密(PFS)', +'phase1 group' => '阶段1组', +'phonebook entry' => '电话本条目:', +'ping disabled' => '禁用ping响应', +'pkcs12 file password' => 'PKCS12文件密码', +'play' => 'Play', +'please reboot to apply your changes' => '请重新启动以应用您的更改', +'polfile' => 'Polfile', +'policy' => '策略', +'port' => '端口', +'port forwarding configuration' => '端口转发配置', +'ports' => '端口', +'portscans' => 'Portscans', +'pots' => '模拟经典线', +'ppp setup' => 'PPP设置', +'pppoe' => 'PPPoE', +'pppoe settings' => '其他PPPoE设置:', +'pptp netconfig' => '我的网络配置', +'pptp peer' => 'Peer', +'pptp route' => 'PPTP路由', +'pptp settings' => '其他PPTP设置:', +'pre-shared key is too short' => '预共享密钥太短。', +'prefered master' => '首选', +'present' => '当前', +'prev' => '以前', +'primary dns' => '第一个DNS服务器', +'primary ntp server' => '第一个NTP服务器', +'primary wins server address' => '第一个WINS服务器', +'printcap name' => '打印机名称', +'printer' => '打印机', +'printername' => '打印机名称', +'printing' => '打印', +'printing options' => '打印选项', +'priority' => '优先', +'processes' => 'Processes', +'processor vulnerability mitigations' => '处理器漏洞缓解', +'profile' => '配置文件', +'profile deleted' => '配置文件已删除: ', +'profile has errors' => '配置文件有错误', +'profile made current' => '当前配置文件: ', +'profile name' => '配置文件名称:', +'profile name not given' => '未提供配置文件名称。', +'profile saved' => '配置文件已保存: ', +'profiles' => '配置文件:', +'proto' => '协议', +'protocol' => '协议:', +'proxy' => '代理', +'proxy access graphs' => '代理访问图表', +'proxy admin password' => '缓存管理员密码', +'proxy cachemgr' => '激活缓存管理', +'proxy errmsg filedescriptors' => '错误的文件描述符数量', +'proxy filedescriptors' => '文件描述符数量', +'proxy log viewer' => '查看代理日志', +'proxy logs' => '代理日志', +'proxy no proxy extend' => '或指定不代理目的地的列表', +'proxy no proxy local' => '禁止在蓝色/绿色网络上进行本地代理', +'proxy port' => '代理端口', +'proxy reconfigure' => '保存并重新加载', +'proxy reports' => '代理报告', +'proxy reports daily' => '日报', +'proxy reports monthly' => '月报', +'proxy reports today' => '当前', +'proxy reports weekly' => '周报', +'psk' => 'PSK', +'ptr' => 'PTR', +'pulse' => '脉冲', +'pulse dial' => '脉冲拨号:', +'qos add subclass' => '添加子类', +'qos enter bandwidths' => '您需要输入下行带宽和上行带宽!', +'qos graphs' => 'Qos图表', +'qos warning' => '规则必须保存，否则将被丢弃!', +'quick control' => '快速控制', +'quick playlist' => '快速播放列表', +'ram' => 'RAM', +'random number generator daemon' => '随机数生成器进程', +'rdns' => 'rDNS', +'read bytes' => 'Read Bytes', +'read list' => '列出只读主机', +'real address' => '真实地址', +'reboot' => '重启', +'reboot ask' => '重启?', +'reboot question' => '重新启动和关闭的额外查询', +'reboot schedule' => '安排IPFire重新启动', +'reboot sure' => '您确定要重启吗?', +'rebooting' => '重启中', +'rebooting ipfire' => 'IPFire重启中', +'reconnect' => '重新连接', +'reconnection' => '重新连接', +'red' => 'Internet', +'red1' => '红色', +'references' => '参考文献', +'refresh' => '刷新', +'refresh index page while connected' => '连接后刷新index.cgi页面', +'refresh update list' => '刷新更新列表', +'registered user rules' => 'Talos VRT注册用户规则', +'released' => '已发行', +'reload' => '重新加载', +'remark' => '备注', +'remark title' => '备注:', +'remote access' => '远程访问', +'remote announce' => '远程通知', +'remote browse sync' => '远程浏览同步', +'remote host/ip' => '远程主机/IP', +'remote logging' => '远程日志', +'remote subnet' => '远程子网:', +'remote subnet is invalid' => '远程子网无效。', +'removable device advice' => '插入设备，刷新，选择并安装后再使用。移除前的数量。', +'remove' => '删除', +'remove ca certificate' => '删除CA证书', +'remove x509' => '删除x509', +'repeat' => '重复', +'reportfile' => '报告文件', +'reportlevel' => '报告级别', +'request' => '请求', +'requested data' => '1. 连接设置:', +'required field' => '必填项目', +'reserved dst port' => '目标端口仅保留用于IPFire:', +'reserved src port' => '源端口仅保留用于IPFire:', +'reset' => '重置', +'reset shares' => '重置共享', +'resetglobals' => '重置全局设置', +'resetpolicy' => '将策略重置为默认值', +'resetshares' => '重置共享?', +'resetting the vpn configuration will remove the root ca, the host certificate and all certificate based connections' => '重置X509会删除根CA、主机证书和所有基于证书的连接', +'restart' => '重启', +'restart ovpn server' => '重启OpenVPN服务器', +'restore' => '恢复', +'restore defaults' => '恢复默认', +'restore hardware settings' => '恢复硬件设置', +'restore settings' => '重新设置', +'reverse sort' => '按时间倒序排序', +'root' => 'Root', +'root certificate' => '根证书', +'root path' => '根路径', +'root user password' => 'Root密码', +'route subnet is invalid' => '其他推送路由子网无效', +'router ip' => '路由IP地址:', +'routing table entries' => '路由表条目', +'rsvd dst port overlap' => '目标端口范围与为IPFire保留的端口重叠:', +'rsvd src port overlap' => '源端口范围与为IPFire保留的端口重叠:', +'rules already up to date' => '规则已更新', +'runmode' => '运行模式', +'running' => '正在运行', +'safe removal of umounted device' => '您可以安全地卸下未安装的设备', +'samba' => 'Samba', +'samba join a domain' => '加入域', +'samba join domain' => '加入域', +'samba status' => 'Samba状态', +'saturday' => '星期六', +'save' => '保存', +'save config' => '保存设置', +'save error' => '无法保存配置存档文件', +'save settings' => '保存设置', +'save-adv-options' => '保存高级选项', +'script name' => '脚本名称:', +'search' => '搜索', +'secondary dns' => '第二个DNS服务器', +'secondary ntp server' => '第二个NTP服务器', +'secondary wins server address' => '第二个WINS服务器', +'seconds' => '秒', +'section' => '类型', +'secure shell server' => '安全SHELL服务器', +'security' => '安全', +'security options' => '安全选项', +'select' => '选择', +'select dest net' => '选择目标网络。', +'select media' => '选择媒体 (可移动媒体仅支持FAT)', +'select source net' => '选择一个源网络。如果没有配置橙色或蓝色网络，则不需要DMZ Pinholes。', +'selecttraffic' => '选择使用概况:', +'send cr' => 'ISP requires Carriage Return:', +'send email notification' => '已启用，发送电子邮件通知', +'send test mail' => '发送测试电子邮件', +'september' => '九月', +'serial' => 'Serial', +'server reserved' => '连接域名服务器是保留的，不允许使用', +'server restart' => 'OpenVPN服务器运行时，您将无法保存任何更改。', +'server string' => '服务器字符串', +'service' => '服务', +'service added' => '自定义网络服务已添加', +'service name' => '服务名称:', +'service removed' => '自定义网络服务已删除', +'service updated' => '自定义网络服务已更新', +'servicename' => '服务名称', +'services' => '服务', +'services settings' => '防火墙 - 服务设置', +'set' => 'set', +'set time now' => '立即设置时间', +'set time now help' => '要在任何时候（甚至在使用重复计划时）将同步事件排队，请按立即设置时间按钮。请注意，在同步事件发生之前，您可能需要等待五分钟或更长时间。', +'settings' => '设置', +'shaping add options' => '添加服务', +'shaping list options' => '流量整形服务', +'shared' => '已共享', +'sharename' => '共享名', +'shares' => '共享', +'show ajax speedmeter in footer' => '显示Ajax测速计', +'show areas' => '显示区域', +'show ca certificate' => '显示CA证书', +'show certificate' => '显示文件', +'show crl' => '显示证书吊销列表', +'show dh' => '显示Diffie-Hellman参数', +'show host certificate' => '显示主机证书', +'show last x lines' => '显示最后的x行', +'show lines' => 'Show lines', +'show root certificate' => '显示根证书', +'show share options' => '显示共享选项', +'show tls-auth key' => '显示tls-认证密钥', +'shuffle' => '随机播放', +'shutdown' => '关机', +'shutdown ask' => '关机?', +'shutdown control' => '关机控制', +'shutdown sure' => '您确定关机?', +'shutdown2' => '关机:', +'shutting down' => '关机', +'shutting down ipfire' => '关闭IPFire', +'since' => '以来', +'sitekey' => '站点密钥', +'sitekeyfile' => '站点密钥文件', +'size' => '大小', +'smart information' => 'S.M.A.R.T. 信息', +'smartwarn1' => '设备:', +'smartwarn2' => '报告S.M.A.R.T. 错误', +'smbreload' => '重新加载samba', +'smbrestart' => '重启samba', +'smbstart' => '启动samba', +'smbstop' => '停止samba', +'smt disabled' => '同时多线程（SMT）已禁用', +'smt enabled' => '同时多线程（SMT）已启用', +'smt not supported' => '不支持同时多线程（SMT）', +'smtphost' => 'SMTP主机', +'smtpport' => 'SMTP端口', +'snat new source ip address' => '添加源IP地址', +'socket options' => '套接字选项', +'software version' => '软件版本', +'sort ascending' => '升序排列', +'sort descending' => '降序排列', +'sound' => '声音', +'source' => '源', +'source ip' => '源IP', +'source ip and port' => '源IP: 端口', +'source ip bad' => '不是有效的IP地址或网络地址。', +'source ip country' => '源IP国家', +'source ip in use' => '使用中的源IP:', +'source ip or net' => '源IP或网络', +'source net' => '源网络', +'source network' => '源IP, 或网络(留空为"全部"):', +'source port' => '源端口', +'source port in use' => '正在使用的源端口:', +'source port numbers' => '源端口必须是有效的端口号或端口范围。', +'source port overlaps' => '源端口范围与现有端口范围重叠。', +'speaker off' => '喇叭关:', +'speaker on' => '喇叭开:', +'spectre variant 1' => '幽灵变种1', +'spectre variant 2' => '幽灵变种2', +'spectre variant 4' => '幽灵变种4', +'squid extension methods' => '您的<tt>扩展方式</tt>列表', +'squid extension methods invalid' => '您的扩展方式列表只能包含字母和数字的大写单词，并用空格分隔。 ', +'squid fix cache' => '修复缓存', +'src port' => '源端口', +'srcprt range overlaps' => '源端口范围与已定义的端口重叠。', +'srcprt within existing' => '源端口在已定义的端口范围内。', +'ssdmz pinholes' => 'DMZ Pinholes', +'ssh' => 'SSH', +'ssh access' => 'SSH访问', +'ssh access tip' => 'IPFire SSH未使用默认端口22!', +'ssh active sessions' => '活动登录', +'ssh agent forwarding' => '允许SSH代理转发', +'ssh fingerprint' => '指纹', +'ssh host keys' => 'SSH主机密钥', +'ssh is disabled' => 'SSH已禁用。停止。', +'ssh is enabled' => 'SSH已启用。重启。', +'ssh key' => '密钥', +'ssh key size' => '大小(bits)', +'ssh keys' => '允许基于公钥的身份验证', +'ssh login time' => '登录时间', +'ssh no active logins' => '没有活动登录', +'ssh no auth' => '您不允许使用任何身份验证方法；这将阻止您登录', +'ssh passwords' => '允许基于密码的身份验证', +'ssh port' => '将SSH端口设置为默认22（否则使用222）', +'ssh portfw' => '允许TCP转发', +'ssh tempstart15' => '在15分钟内停止SSH进程', +'ssh tempstart30' => '在30分钟内停止SSH进程', +'ssh username' => '用户名', +'ssh1 disabled' => 'SHv1已禁用，将需要版本2客户端。', +'ssh1 enabled' => '启用SSHv1，将支持旧的客户端。', +'ssh1 support' => '支持SSH协议版本1（仅旧客户端需要）', +'ssnetwork status' => '网络状态', +'sspasswords' => '密码', +'ssport forwarding' => '端口转发', +'ssproxy graphs' => '代理图表', +'sssystem status' => '系统状态', +'sstraffic' => '网络流量', +'sstraffic graphs' => '流量图', +'standard login script' => '标准登录脚本', +'start' => '启动', +'start address' => '起始地址:', +'start ovpn server' => '启动OpenVPN服务器', +'state or province' => '州或省', +'static ip' => '静态IP', +'static routes' => '静态路由', +'status' => '状态', +'status information' => '状态信息', +'status ovpn' => 'OpenVPN', +'std classes' => '标准类', +'stop' => '停止', +'stop ovpn server' => '停止OpenVPN服务器', +'stopped' => '已停止', +'subject' => '主题', +'subject test' => '测试邮件', +'subject warn' => '警告-达到警告级别', +'subnet' => '子网', +'subnet is invalid' => '掩码无效', +'subnet mask' => '子网掩码', +'subscripted user rules' => 'Talos VRT订阅规则', +'successfully refreshed updates list' => '成功刷新更新列表。.', +'summaries kept' => '保留摘要', +'sunday' => '星期日', +'support donation' => '通过捐款支持IPFire项目', +'swap' => '交换', +'swap usage per' => 'Swap usage per', +'system' => '系统', +'system graphs' => '系统图表', +'system has hwrng' => '该系统具有硬件随机数生成器。', +'system has rdrand' => '该系统支持英特尔®RDRAND。', +'system information' => '系统信息', +'system is offline' => '系统离线。', +'system log viewer' => '系统日志查看器', +'system logs' => '系统日志', +'system status information' => '系统状态信息', +'ta key' => 'TLS认证密钥', +'taa zombieload2' => 'TSX Async中上/ZombieLoad v2', +'tcp more reliable' => 'TCP(更可靠)', +'telephone not set' => '未设置电话。', +'template' => '预设', +'template warning' => '您有两个选择来设置Qos。首先，您按下保存按钮并自行生成类和规则。第二，按下预设按钮，将通过模板设置类别和规则。', +'ten minutes' => '10分钟', +'teovpn_fragment' => '分片大小', +'test' => '测试', +'test email could not be sent' => '不能发送测试邮件', +'test email was sent' => '测试邮件发送成功', +'the following update was successfully installed' => '以下更新已成功安装', +'the statistics were last updated at' => '统计信息的最新更新时间为', +'theme' => '主题', +'there are updates' => '有适用于您系统的更新。请转到“更新”部分以获取更多信息。', +'there are updates available' => '有适用于您系统的更新。强烈建议您尽快安装它们。', +'there was no file upload' => '没有文件上传。', +'thirty minutes' => '30分钟', +'this feature has been sponsored by' => '此功能由以下机构赞助', +'this is not a valid archive' => '这不是有效的存档。', +'this is not an authorised update' => '这不是一个经过认证的更新。', +'this months volume' => '本月量', +'this update is already installed' => '此更新已安装。', +'this weeks volume' => '本周量', +'thursday' => '星期四', +'time' => '时间', +'time date manually reset' => '时间/日期手动重置。', +'time server' => '时间服务器', +'timeout must be a number' => '超时必须为数字。', +'title' => '标题', +'to' => '到', +'to email adr' => '收件地址', +'to install an update' => '要安装更新，请在下面上传.tgz.gpg文件:', +'to warn email bad' => '收件地址无效', +'toggle' => '暂停/继续', +'toggle enable disable' => '启用或禁用', +'tone' => 'Tone', +'tone dial' => 'Tone拨号:', +'too long 80 char max' => ' 太长，最多可输入80个字符', +'tor' => 'Tor', +'tor 0 = disabled' => '0 = 禁用', +'tor accounting' => 'Accounting', +'tor accounting bytes' => '流量(读/写)', +'tor accounting bytes left' => 'left', +'tor accounting interval' => '间隔(UTC)', +'tor accounting limit' => 'Accounting limit (MB)', +'tor accounting period' => 'Accounting period', +'tor accounting period daily' => '每天', +'tor accounting period monthly' => '每月', +'tor accounting period weekly' => '每周', +'tor acls' => '访问控制', +'tor allowed subnets' => '允许的子网（每行一个）', +'tor bandwidth burst' => 'Max. burst', +'tor bandwidth rate' => '最大速率', +'tor bandwidth settings' => '带宽设定', +'tor bandwidth unlimited' => '不限制', +'tor bridge enabled' => '启用Tor网桥', +'tor common settings' => '通用设置', +'tor configuration' => 'Tor配置', +'tor connected relays' => '已连接中继', +'tor contact info' => '联络信息', +'tor daemon' => '进程', +'tor directory port' => '目录端口', +'tor enabled' => '启用Tor', +'tor errmsg invalid accounting limit' => 'Invalid accounting limit', +'tor errmsg invalid directory port' => '无效的目录端口', +'tor errmsg invalid ip or mask' => '无效的IP子网', +'tor errmsg invalid node id' => '无效的节点ID', +'tor errmsg invalid relay address' => '无效的中继地址', +'tor errmsg invalid relay name' => '无效的中继名称', +'tor errmsg invalid relay port' => '无效的中继端口', +'tor errmsg invalid socks port' => '无效的SOCKS端口', +'tor exit country' => 'Exit country', +'tor exit country any' => '任何国家', +'tor exit nodes' => 'Exit Nodes', +'tor relay address' => '中继地址', +'tor relay configuration' => 'Tor中继配置', +'tor relay enabled' => '启用Tor中继', +'tor relay external address' => '中继外部地址', +'tor relay fingerprint' => '中继指纹', +'tor relay mode' => '中继模式', +'tor relay mode bridge' => '网桥', +'tor relay mode exit' => '出口节点', +'tor relay mode private bridge' => '专用网桥', +'tor relay mode relay' => '仅中继', +'tor relay nickname' => '中继名称', +'tor relay port' => '中继端口', +'tor service' => 'Tor服务', +'tor socks port' => 'SOCKS端口', +'tor stats' => '统计', +'tor traffic limit hard' => '已达到流量限制。', +'tor traffic limit soft' => '流量几乎达到上限。不接受任何新连接。', +'tor traffic read written' => '总流量（读/写）', +'tor use exit nodes' => '仅使用这些出口节点（每行一个）', +'total connection time' => '总连接时间', +'total hits for log section' => '日志部分的总点击数', +'traffic back' => 'Back', +'traffic calc time' => '计算时间', +'traffic calc time bad' => '计算时间不正确', +'traffic info messages' => '信息', +'traffic monitor' => '流量监控', +'traffic on' => 'Traffic on', +'traffic shaping' => '流量整形', +'traffic shaping settings' => '流量整形设置', +'traffic warn level bad' => '警告级别不正确', +'trafficblue' => 'WLAN', +'trafficdate' => '日期', +'trafficfrom' => '从', +'trafficgreen' => 'Internal net', +'trafficin' => '入站', +'trafficorange' => 'DMZ', +'trafficout' => '出站', +'trafficred' => 'Internet', +'traffics' => '使用概况', +'trafficsum' => '合计', +'trafficto' => '到', +'transfer limits' => 'Transfer limits', +'transparent on' => 'Transparent on', +'transport mode does not support vti' => '传输模式不支持VTI', +'tripwire' => 'Tripwire', +'tripwire cronjob' => 'tripwire作业任务', +'tripwire functions' => 'tripwire功能', +'tripwire reports' => 'tripwire报告', +'tripwireoperating' => '该过程已开始。这可能需要几分钟，请等待该过程完成后窗口将自动刷新。', +'tripwirewarningdatabase' => '警告-您的数据库将使用最新报告的数据进行更新。请确保未报告未经授权的更改。因此，需要本地密钥。', +'tripwirewarningkeys' => '警告-这会删除您当前的密钥，配置和数据库，并生成新的密钥。', +'tripwirewarningpolicy' => '警告-在重新初始化数据库之后，将重建您的策略。因此，需要站点密钥和本地密钥。', +'tuesday' => '星期二', +'twelve hours' => '12小时', +'two weeks' => '2周', +'type' => '类型', +'udp less overhead' => 'UDP(较少的开销)', +'umount' => 'Umount', +'umount removable media before to unplug' => '拔出设备之前，先挂载可移动媒体。', +'unable to alter profiles while red is active' => '红色网络处于活动状态时无法更改配置文件。', +'unable to contact' => '无法连接', +'unblock' => '解锁', +'unblock all' => '全部解锁', +'uncheck all' => '取消所有', +'unencrypted' => '未加密', +'uninstall' => '卸载', +'unix charset' => 'UNIX字符集', +'unix group' => ' UNIX用户组', +'unix password sync' => 'Unix密码同步', +'unix shell' => 'UNIX Shell', +'unknown' => '未知', +'unlimited' => '不限制', +'unnamed' => '未命名', +'update' => '更新', +'update accelerator' => '更新加速器', +'update ruleset' => '更新规则集', +'update time' => '更新时间:', +'update transcript' => 'Update transcript', +'updatedatabase' => '使用上一份报告更新数据库', +'updates' => '更新', +'updates installed' => '规则集更新自', +'updates is old1' => '您的更新文件是', +'updates is old2' => '我们建议您在系统>更新页面上进行更新。', +'updxlrtr 3 months' => '3个月', +'updxlrtr 6 months' => '6个月', +'updxlrtr all files' => '所有文件 ...', +'updxlrtr cache dir' => '缓存目录', +'updxlrtr cache maintenance' => '缓存维护', +'updxlrtr cache size' => '缓存大小(bytes)', +'updxlrtr cache statistics' => '缓存统计', +'updxlrtr cancel download' => '取消下载', +'updxlrtr children' => '加速器进程数', +'updxlrtr common settings' => '通用设置', +'updxlrtr condition download' => '下载', +'updxlrtr condition nosource' => 'No source', +'updxlrtr condition ok' => '最新', +'updxlrtr condition outdated' => '过时', +'updxlrtr condition suspended' => '已暂停', +'updxlrtr condition unknown' => '未知', +'updxlrtr configuration' => '更新加速器配置', +'updxlrtr current downloads' => '文件正在下载到本地缓存中', +'updxlrtr current files' => '本地缓存中的当前文件', +'updxlrtr daily' => '每日', +'updxlrtr data from cache' => '缓存中的数据（字节）', +'updxlrtr disk usage' => '磁盘使用率', +'updxlrtr efficiency index' => '缓存效率指数', +'updxlrtr empty repository' => '本地缓存为空', +'updxlrtr enable autocheck' => '启用自动源检查', +'updxlrtr enable log' => '启用日志', +'updxlrtr filename' => '名称', +'updxlrtr files' => '文件', +'updxlrtr filesize' => '大小', +'updxlrtr full autosync' => '检查期间替换过时的文件', +'updxlrtr invalid disk usage' => '磁盘用量最大值无效。', +'updxlrtr invalid download rate' => '下载率最大值无效。', +'updxlrtr invalid num of children' => '加速器进程数无效', +'updxlrtr last access' => '最近缓存访问', +'updxlrtr last checkup' => '最近源检查', +'updxlrtr low download priority' => '降低CPU优先级进行下载', +'updxlrtr maintenance' => '维护', +'updxlrtr marked as' => '标记为', +'updxlrtr max disk usage' => '最高磁盘用量', +'updxlrtr max download rate' => '最高外部下载速率(kbit/s)', +'updxlrtr month' => '一个月', +'updxlrtr monthly' => '每月', +'updxlrtr not accessed' => 'not accessed since', +'updxlrtr not enabled' => 'Web代理页面上未启用更新加速器', +'updxlrtr other' => '其他', +'updxlrtr passive mode' => '启用被动模式', +'updxlrtr pending downloads' => '待下载', +'updxlrtr performance options' => '性能选项', +'updxlrtr progress' => '进程', +'updxlrtr purge' => '清除', +'updxlrtr remove file' => '从缓存中删除', +'updxlrtr save and restart' => '保存并重启', +'updxlrtr source' => '源', +'updxlrtr source checkup' => '源检查', +'updxlrtr source checkup schedule' => '源检查计划', +'updxlrtr sources' => '源', +'updxlrtr standard view' => '标准检视', +'updxlrtr statistics' => '统计', +'updxlrtr statistics by source' => '按来源统计', +'updxlrtr summary' => '摘要', +'updxlrtr total cache size' => '总缓存大小(bytes)', +'updxlrtr total data from cache' => '从缓存传递的总数据（字节）', +'updxlrtr total files' => '缓存中的文件总数', +'updxlrtr unknown' => '未知', +'updxlrtr update accelerator' => '更新加速器', +'updxlrtr update information' => '有可供下载的更新版本。访问<a href="http://update-accelerator.advproxy.net" target="_blank">http://update-accelerator.advproxy.net</a>获取更多信息。', +'updxlrtr update notification' => '更新通知!', +'updxlrtr used by' => 'Used by', +'updxlrtr web proxy service required' => '必须启用Web代理服务才能使用更新加速器', +'updxlrtr week' => '周', +'updxlrtr weekly' => '每周', +'updxlrtr year' => '年', +'upgrade' => '升级', +'uplink' => '上行链路', +'uplink bit rate' => '上行比特率', +'uplink speed' => '上行速度（kbit /秒）', +'uplink std class' => '上行链路标准类', +'upload' => '上传', +'upload a certificate' => '上传证书:', +'upload a certificate request' => '上传证书请求:', +'upload ca certificate' => '上传CA证书', +'upload dh key' => '上传Diffie-Hellman参数', +'upload fcdsl.o' => '即将被删除', +'upload file' => '上传文件', +'upload new ruleset' => '上传新规则集', +'upload p12 file' => '上传PKCS12文件', +'upload static key' => '上传静态密钥', +'upload successful' => '上传成功.', +'upload synch.bin' => '上传synch.bin', +'upload update file' => '上传更新文件:', +'upstream password' => '上游密码:', +'upstream proxy host:port' => '上游代理（主机：端口）', +'upstream username' => '上游用户名:', +'uptime' => '运行时间', +'uptime and users' => '运行时间和用户:', +'uptime load average' => '平均负载', +'url filter' => '网址过滤', +'urlfilter access' => '访问', +'urlfilter activity detection' => '活动检测', +'urlfilter add new time constraint rule' => '添加时间限制规则', +'urlfilter add new user quota rule' => '添加用户配额规则', +'urlfilter add rule' => '添加', +'urlfilter advanced settings' => '高级设置', +'urlfilter allow' => '允许', +'urlfilter allow access' => '允许访问', +'urlfilter allowed domains' => '允许的域（每行一个）', +'urlfilter allowed urls' => '允许的URL（每行一个）', +'urlfilter assigned quota users' => '分配的用户（每行一个）', +'urlfilter assigned users' => '分配的用户', +'urlfilter automatic blacklist update' => '自动更新黑名单', +'urlfilter automatic update schedule' => '自动更新时间表', +'urlfilter back to main page' => '返回主页', +'urlfilter background image' => '网址过滤器背景图片', +'urlfilter background text' => '要将自定义背景图片用于屏蔽页，请在下方上传.jpg文件', +'urlfilter backup' => '创建备份文件', +'urlfilter backup error' => '无法创建备份文件', +'urlfilter backup settings' => '备份网址过滤器设置', +'urlfilter banned clients' => '禁止的IP地址', +'urlfilter blacklist age 1' => '上次成功更新黑名单为', +'urlfilter blacklist age 2' => '几天前', +'urlfilter blacklist category name' => '黑名单类别名称', +'urlfilter blacklist editor' => '黑名单编辑器', +'urlfilter blacklist editor info' => '创建和编辑自己的黑名单文件', +'urlfilter blacklist name' => '黑名单名称', +'urlfilter blacklist update' => '黑名单更新', +'urlfilter block' => '阻止', +'urlfilter block access' => '阻止访问', +'urlfilter block all' => '阻止所有未明确允许的URL', +'urlfilter block archives' => '阻止压缩的存档文件', +'urlfilter block audio-video' => '阻止音频/视频文件', +'urlfilter block categories' => '阻止类别', +'urlfilter block executables' => '阻止可执行文件', +'urlfilter block ip' => '阻止通过其IP地址访问的网站', +'urlfilter block settings' => '阻止页面设置', +'urlfilter blocked domains' => '阻止的域（每行一个）', +'urlfilter blocked expressions' => '被阻止的表达式（作为正则表达式）', +'urlfilter blocked urls' => '阻止的URLs (每行一个)', +'urlfilter category' => '类别', +'urlfilter category all' => 'any', +'urlfilter category data error' => '黑名单为空', +'urlfilter category log' => '按类别拆分日志', +'urlfilter category name error' => '必须输入黑名单类别名称', +'urlfilter client' => '客户端', +'urlfilter configuration' => 'URL过滤器配置', +'urlfilter constraint definition' => '定义', +'urlfilter constraint outside' => '外部', +'urlfilter constraint within' => '内部', +'urlfilter copy rule' => '复制', +'urlfilter current files' => '本地存储库中的当前文件', +'urlfilter custom blacklist' => '自定义黑名单', +'urlfilter custom expression list' => '自定义表达式列表', +'urlfilter custom url' => '自定义源URL', +'urlfilter custom url required' => '需要自定义源URL', +'urlfilter custom whitelist' => '自定义白名单', +'urlfilter daily' => '每日', +'urlfilter disabled' => '禁用', +'urlfilter domains' => '域(每行一个)', +'urlfilter dont restart urlfilter' => '不要重新启动URL过滤器', +'urlfilter dst' => '目标', +'urlfilter dst error' => '必须至少选择一个类别', +'urlfilter edit domains urls expressions' => '编辑域，URL和表达式', +'urlfilter edit time constraint rule' => '编辑现有的时间限制规则', +'urlfilter edit user quota rule' => '编辑现有的用户配额规则', +'urlfilter empty ads' => '用空白窗口阻止“广告”', +'urlfilter empty repository' => '本地文件存储库为空', +'urlfilter enable automatic blacklist update' => '启用自动更新', +'urlfilter enable custom blacklist' => '启用自定义黑名单', +'urlfilter enable custom expression list' => '启用自定义表达式列表', +'urlfilter enable custom whitelist' => '启用自定义白名单', +'urlfilter enable expression lists' => '启用表达式列表', +'urlfilter enable full backup' => '包括完整的黑名单', +'urlfilter enable jpeg' => '启用背景图片', +'urlfilter enable log' => '启用记录', +'urlfilter enable rewrite rules' => '启用本地文件重定向', +'urlfilter enabled' => '启用:', +'urlfilter example' => '例如: www.domain.com', +'urlfilter example ads' => '例如: www.domain.com/ads/', +'urlfilter export blacklist' => '导出黑名单', +'urlfilter export error' => '无法创建导出文件', +'urlfilter expressions' => '表达式（每行一个）', +'urlfilter file ext block' => '文件扩展名阻止', +'urlfilter filename' => '名称', +'urlfilter filesize' => '大小', +'urlfilter filter settings' => 'URL过滤器设置', +'urlfilter fri' => '星期五', +'urlfilter friday' => '星期五', +'urlfilter from' => '从', +'urlfilter hourly' => '每小时', +'urlfilter import blacklist' => '导入黑名单', +'urlfilter import text' => '要导入以前保存的黑名单编辑器文件，请在下面上传.tar.gz文件', +'urlfilter install blacklist' => '安装黑名单', +'urlfilter install information' => '新的黑名单将自动编译为预建数据库。根据黑名单的大小，这可能需要几分钟。', +'urlfilter invalid content' => '文件不是squidGuard兼容的黑名单', +'urlfilter invalid import file' => '该文件不是有效的URL过滤器黑名单编辑器文件', +'urlfilter invalid ip or mask error' => '无效的IP地址或网络掩码', +'urlfilter invalid restore file' => '该文件不是有效的URL过滤器备份文件', +'urlfilter invalid user error' => '无效的用户名', +'urlfilter load blacklist' => '导入黑名单', +'urlfilter local file redirection' => '本地文件重定向', +'urlfilter log' => '网址过滤器日志', +'urlfilter log summary' => 'URL过滤器命中总数', +'urlfilter log viewer' => 'URL过滤器日志查看器', +'urlfilter logs' => 'URL过滤器日志', +'urlfilter maintenance' => 'URL过滤器维护', +'urlfilter manage local file repository' => '管理本地文件存储库', +'urlfilter manage repository' => '管理存储库', +'urlfilter minutes' => '分钟', +'urlfilter mode allow' => '允许', +'urlfilter mode block' => '阻止', +'urlfilter mon' => '星期一', +'urlfilter monday' => '星期一', +'urlfilter monthly' => '每月一次', +'urlfilter msg text 1' => '消息行 1', +'urlfilter msg text 2' => '消息行 2', +'urlfilter msg text 3' => '消息行 3', +'urlfilter network access control' => '基于网络的访问控制', +'urlfilter no categories' => '没有可用的类别', +'urlfilter not enabled' => 'Web代理页面上未启用URL过滤器', +'urlfilter quota restart message' => '注意：重新启动URL过滤器时，所有用户的计数器都将重置', +'urlfilter quota time error' => '时间配额的值无效', +'urlfilter quota user error' => '至少需要一个用户名', +'urlfilter redirect template' => '重定向页面模板', +'urlfilter redirectpage' => '重定向到该URL', +'urlfilter remove file' => '从存储库中删除文件', +'urlfilter renewal' => '续约', +'urlfilter renewal period' => '续期', +'urlfilter repository information' => '这些文件的下载请求将从原源重定向到本地文件存储库。', +'urlfilter reset' => '重置', +'urlfilter restart' => '重启URL过滤器', +'urlfilter restart message' => '必须重新启动URL过滤器才能激活更改的规则', +'urlfilter restart notification' => '激活更改的规则', +'urlfilter restore' => '导入备份文件', +'urlfilter restore results' => '恢复结果', +'urlfilter restore settings' => '恢复URL过滤器设置', +'urlfilter restore success' => 'URL过滤器配置已恢复。必须重新启动URL过滤器才能激活新设置。', +'urlfilter restore text' => '要恢复以前保存的配置，请在下面上传.tar.gz备份文件', +'urlfilter safesearch' => '启用安全搜索', +'urlfilter sat' => '星期六', +'urlfilter saturday' => '星期六', +'urlfilter save and restart' => '保存并重启', +'urlfilter save schedule' => '保存更新设置', +'urlfilter select blacklist' => '选择现有的黑名单', +'urlfilter select multi' => '按Ctrl键选择多个类别', +'urlfilter select source' => '选择下载源', +'urlfilter set time constraints' => '设置时间限制', +'urlfilter set user quota' => '设置用户配额', +'urlfilter show category' => '在阻止页面上显示类别', +'urlfilter show dnserror' => '使用“DNS错误”阻止URL', +'urlfilter show ip' => '在阻止页面上显示IP', +'urlfilter show url' => '在阻止页面上显示URL', +'urlfilter source' => '源主机或网络', +'urlfilter src' => '源', +'urlfilter src error' => '源不能为空', +'urlfilter sun' => '星期日', +'urlfilter sunday' => '星期日', +'urlfilter tar error' => '无法从tar存档中提取文件', +'urlfilter thu' => '星期四', +'urlfilter thursday' => '星期四', +'urlfilter time' => '时间', +'urlfilter time quota' => '时间配额', +'urlfilter time space' => '时空', +'urlfilter timebased access control' => '基于时间的访问控制', +'urlfilter timespace error' => 'Error in time space declaration', +'urlfilter to' => '到', +'urlfilter tue' => '星期二', +'urlfilter tuesday' => '星期二', +'urlfilter unfiltered clients' => '不过滤的IP地址', +'urlfilter update information' => '有可供下载的更新版本。访问<a href="http://www.urlfilter.net" target="_blank">http://www.urlfilter.net</a>获取更多信息。', +'urlfilter update notification' => '更新通知!', +'urlfilter update now' => '现在更新', +'urlfilter update results' => '黑名单更新结果', +'urlfilter update rule' => '更新', +'urlfilter upload background' => '上传图片', +'urlfilter upload blacklist' => '上传黑名单', +'urlfilter upload file' => '上传文件', +'urlfilter upload file information 1' => '注意', +'urlfilter upload file information 2' => '需要重新启动URL过滤器以激活对存储库的更改。', +'urlfilter upload file text' => '要将文件添加到本地存储库，请在下面上传文件', +'urlfilter upload information' => '新的黑名单将自动编译为预建数据库。根据黑名单的大小，这可能需要几分钟。在重新启动URL过滤器之前，请等待此任务完成。', +'urlfilter upload success' => '黑名单上传成功完成。', +'urlfilter upload text' => '要上传更新黑名单，请在下面上传.tar.gz文件', +'urlfilter url filter' => '网址过滤器', +'urlfilter urlfilter blacklist editor' => '网址过滤器黑名单编辑器', +'urlfilter urls' => '网址（每行一个）', +'urlfilter user time quota' => '时间配额（分钟）', +'urlfilter username' => '用户名', +'urlfilter username log' => '用户名日志', +'urlfilter web proxy service required' => '必须启用Web代理服务才能使用URL过滤器', +'urlfilter wed' => '星期三', +'urlfilter wednesday' => '星期三', +'urlfilter weekday error' => '必须至少选择一天', +'urlfilter weekly' => '每周', +'urlfilter whitelist always allowed' => '允许自定义白名单禁止的客户', +'urlfilter wrong filetype' => '文件没有扩展名.tar.gz', +'use' => 'Use', +'use a pre-shared key' => '使用预共享密钥:', +'use dov' => '使用语音数据(DOV):', +'use ibod' => '按需使用带宽(iBOD):', +'use ipfire red ip' => 'IPFire在连接期间使用红色IP', +'use only proposed settings' => '仅使用建议的设置。', +'used' => '已用', +'used memory' => 'Used Memory', +'used swap' => 'Used Swap', +'user' => '用户', +'user log' => '用户日志', +'user proxy logs' => '用户代理日志', +'username' => '用户名:', +'username not set' => '用户名未设置。', +'users department' => '用户部门', +'users email' => '用户的电子邮件地址', +'users fullname or system hostname' => '用户的全名或系统主机名', +'valid root certificate already exists' => '有效的根证书已存在。', +'valid till' => '有效期至', +'vci number' => 'VCI号码:', +'vendor' => '供应商', +'view log' => '查看日志', +'virtual address' => '虚拟地址', +'virtual private networking' => '虚拟专用网络', +'visible in browselist' => '在浏览列表中可见', +'visit us at' => '请访问我们', +'voldown10' => '音量降低10', +'voldown5' => '音量降低5', +'volup10' => '音量增加10', +'volup5' => '音量增加5', +'vpi number' => 'VPI号码:', +'vpn' => 'VPN', +'vpn aggrmode' => '允许IKE主动模式。尽可能避免（预共享密钥以明文形式传输）!', +'vpn altname syntax' => 'SubjectAltName是用逗号分隔的电子邮件，dns，uri，rid和ip对象的列表。 email:an email address. Syntax email:copy takes the email field from the cert to be used. DNS:a valid domain name. URI:any valid uri. RID:registered object identifier. IP:an IP address. Note:charset is limited and case is significant. Example: e-mail:ipfire(a)foo.org,email:copy,DNS:www.ipfire.org,IP:127.0.0.1,URI:http://url/to/something', +'vpn auth-dn' => '对等体是远程ID字段中的IPV4地址、FQDN、USER_FQDN或DER_ASN1_DN字符串标识', +'vpn broken' => 'Broken', +'vpn configuration main' => 'VPN配置', +'vpn connecting' => '连接', +'vpn delayed start' => '启动VPN之前的延迟（秒）', +'vpn delayed start help' => '如果需要，此延迟可用于允许动态DNS更新，以便正确获取。红色是动态IP时的常用值是60。', +'vpn force mobike' => '强制使用MOBIKE（仅IKEv2）', +'vpn inactivity timeout' => '不活动超时', +'vpn incompatible use of defaultroute' => '主机名=%不允许使用默认路由', +'vpn keyexchange' => '密钥交换', +'vpn local id' => '本地ID', +'vpn missing remote id' => '您必须为此验证指定正确的专有名称（DN）。', +'vpn mtu invalid' => 'MTU必须为数值!', +'vpn no full pki' => '缺少生成证书的私钥', +'vpn on blue' => 'VPN on BLUE', +'vpn on green' => 'VPN on GREEN', +'vpn on orange' => 'VPN on ORANGE', +'vpn on-demand' => '按需拨号', +'vpn payload compression' => '协商有效载荷压缩', +'vpn red name' => '红色接口的公用IP或FQDN或 <%默认路由>', +'vpn remote id' => '远程ID', +'vpn start action' => '启动操作', +'vpn start action add' => '等待连接启动', +'vpn start action route' => '按需拨号', +'vpn start action start' => '总是连接', +'vpn statistic n2n' => 'VPN: N2N', +'vpn statistic rw' => 'VPN: Roadwarrior', +'vpn subjectaltname' => '主题替代名称', +'vpn wait' => '等待', +'vpn watch' => '远程对等IP更改(dyndns)时重新启动网络到网络VPN.', +'vpn weak' => 'Weak', +'vulnerability' => '漏洞', +'vulnerable' => '漏洞', +'waiting to synchronize clock' => '等待同步时钟', +'warn when traffic reaches' => '当流量达到x %时发出警告', +'warning messages' => '警告信息', +'was deleted' => '已删除', +'web hits' => '匹配所选标准的网站总数', +'web proxy' => 'Web代理', +'web proxy configuration' => 'Web代理配置', +'web server' => 'Web服务器', +'webradio playlist' => 'Webradio播放列表', +'website' => 'Web站点', +'wednesday' => '星期三', +'week' => '周', +'week-graph' => '周', +'weekly firewallhits' => '防火墙命中(每周)', +'weeks' => '周', +'wildcards' => 'Wildcards', +'wins server' => 'Wins服务器', +'wins support' => 'Wins支持', +'wireless' => '无线', +'wireless config added' => '已添加无线配置', +'wireless config changed' => '已更改无线配置', +'wireless configuration' => '无线配置', +'wireless network' => 'WiFi网络', +'wlan client' => '无线客户端', +'wlan client advanced settings' => '高级设置', +'wlan client and' => 'and', +'wlan client anonymous identity' => '匿名身份', +'wlan client auth auto' => 'Auto', +'wlan client auth peap' => 'PEAP', +'wlan client auth ttls' => 'TTLS', +'wlan client authentication settings' => '认证设置', +'wlan client bssid' => 'BSSID', +'wlan client ccmp' => 'CCMP', +'wlan client configuration' => '无线客户端配置', +'wlan client disconnected' => '断开连接', +'wlan client duplicate ssid' => '重复SSID', +'wlan client eap authentication method' => 'EAP认证方法', +'wlan client eap phase2 method' => 'EAP阶段2方法', +'wlan client eap state' => 'EAP状态', +'wlan client edit entry' => '编辑无线客户端配置', +'wlan client encryption' => '加密', +'wlan client encryption eap' => 'EAP', +'wlan client encryption none' => '无', +'wlan client encryption wep' => 'WEP', +'wlan client encryption wpa' => 'WPA', +'wlan client encryption wpa2' => 'WPA2', +'wlan client group cipher' => '组密码', +'wlan client group key algorithm' => 'GKA', +'wlan client identity' => '标识符', +'wlan client invalid key length' => '密钥长度无效。', +'wlan client method' => '方法', +'wlan client new entry' => '创建新的无线客户端配置', +'wlan client new network' => '添加网络', +'wlan client pairwise cipher' => '成对密码', +'wlan client pairwise key algorithm' => 'PKA', +'wlan client pairwise key group key' => '成对密钥/组密钥', +'wlan client password' => '密码', +'wlan client psk' => '预共享密钥', +'wlan client ssid' => 'SSID', +'wlan client tkip' => 'TKIP', +'wlan client tls cipher' => 'TLS密码', +'wlan client tls version' => 'TLS版本', +'wlan client wpa mode' => 'WPA模式', +'wlan client wpa mode all' => 'Auto', +'wlan client wpa mode ccmp ccmp' => 'CCMP-CCMP', +'wlan client wpa mode ccmp tkip' => 'CCMP-TKIP', +'wlan client wpa mode tkip tkip' => 'TKIP-TKIP', +'wlan clients' => '无线客户端', +'wlanap' => '接入点', +'wlanap auto' => '自动选择频道', +'wlanap broadcast ssid' => '广播SSID', +'wlanap channel' => '频道', +'wlanap client isolation' => '客户端隔离', +'wlanap configuration' => '接入点配置', +'wlanap country' => '国家代码', +'wlanap debugging' => '调试', +'wlanap del interface' => '删除所选接口?', +'wlanap encryption' => '加密', +'wlanap informations' => '信息', +'wlanap interface' => '选择接口', +'wlanap invalid wpa' => 'WPA密码中的长度无效。必须介于8到63个字符之间。', +'wlanap link dhcp' => '无线局域网DHCP配置', +'wlanap link wireless' => '活动的无线局域网客户端', +'wlanap management frame protection' => '管理框架保护（802.11w）', +'wlanap neighbor scan' => '邻居扫描', +'wlanap neighbor scan warning' => '警告！禁用可能违反监管规则!', +'wlanap no interface' => '所选接口不是无线局域网卡!', +'wlanap none' => 'none', +'wlanap notifications' => '通知', +'wlanap select interface' => '请选择无线局域网接口。', +'wlanap ssid' => 'SSID', +'wlanap verbose' => 'Verbose', +'wlanap warnings' => 'Warnings', +'wlanap wlan card' => 'WLan Card', +'wlanap wlan services' => 'WLan服务', +'wlanap wlan settings' => 'WLan设置', +'wlanap wlan status' => 'WLan状态', +'wol wakeup' => '远程唤醒', +'workgroup' => 'Workgroup', +'written bytes' => 'Writen Bytes', +'xtaccess all error' => '您不能在端口转发条目中设置对全部(All)的外部访问。', +'xtaccess bad transfert' => '如果指定端口目标范围，则源范围必须相同!', +'year' => '年', +'year-graph' => '年', +'yearly firewallhits' => '防火墙命中(每年)', +'yes' => '是', +'you can only define one roadwarrior connection when using pre-shared key authentication' => '使用预共享密钥身份验证时，您只能定义一个Roadwarrior连接。 您已经建立了带有预共享密钥身份验证的Roadwarrior连接，或者您现在尝试添加一个。', +'your department' => '您的部门', +'your e-mail' => '您的电子邮件地址', +'zoneconf access native' => '本地', +'zoneconf access none' => '无', +'zoneconf access vlan' => 'VLAN', +'zoneconf nic assignment' => 'NIC分配', +'zoneconf nicmode bridge' => '桥接', +'zoneconf nicmode default' => '默认', +'zoneconf nicmode macvtap' => 'MacVTtap', +'zoneconf notice reboot' => '请重新启动以应用您的更改。', +'zoneconf title' => '区域配置', +'zoneconf val native assignment error' => 'NIC不能被多个区域本地访问。', +'zoneconf val ppp assignment error' => 'PPP模式中用于红色的NIC不能被任何其他区域访问。', +'zoneconf val vlan amount assignment error' => '一个区域最多只能分配一个VLAN。', +'zoneconf val vlan tag assignment error' => '每个NIC不能多次使用同一个VLAN标识。', +'zoneconf val zoneslave amount error' => '未处于桥接模式的区域不能分配多个NIC', +); + +#EOF -- 2.12.2

5 16

[PATCH] bind: Update to 9.11.14
by Matthias Fischer 04 Jan '20

04 Jan '20

For details see: https://downloads.isc.org/isc/bind9/9.11.14/RELEASE-NOTES-bind-9.11.14.html "Bug Fixes Fixed a bug that caused named to leak memory on reconfiguration when any GeoIP2 database was in use. [GL #1445] Fixed several possible race conditions discovered by Thread Sanitizer." Signed-off-by: Matthias Fischer <matthias.fischer(a)ipfire.org> --- config/rootfiles/common/bind | 4 ++-- lfs/bind | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/bind b/config/rootfiles/common/bind index df6bbf4b6..e5435bd02 100644 --- a/config/rootfiles/common/bind +++ b/config/rootfiles/common/bind @@ -272,11 +272,11 @@ usr/lib/libbind9.so.161.0.4 #usr/lib/libdns.la #usr/lib/libdns.so usr/lib/libdns.so.1107 -usr/lib/libdns.so.1107.1.0 +usr/lib/libdns.so.1107.1.1 #usr/lib/libisc.la #usr/lib/libisc.so usr/lib/libisc.so.1104 -usr/lib/libisc.so.1104.0.0 +usr/lib/libisc.so.1104.0.1 #usr/lib/libisccc.la #usr/lib/libisccc.so usr/lib/libisccc.so.161 diff --git a/lfs/bind b/lfs/bind index 6bb23a143..249328843 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@ include Config -VER = 9.11.13 +VER = 9.11.14 THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 17de0d024ab1eac377f1c2854dc25057 +$(DL_FILE)_MD5 = 5aa75bcb6cdad102f151cae4a53f117f install : $(TARGET) -- 2.18.0

2 2

[PATCH] tshark: Update to version 3.0.7
by Erik Kapfer 30 Dec '19

30 Dec '19

Several bugfixes are included in this version, some protocol support has been added. For a complete overview of the changelog, take a look in here --> https://www.wireshark.org/docs/relnotes/wireshark-3.0.6.html https://www.wireshark.org/docs/relnotes/wireshark-3.0.7.html . Signed-off-by: Erik Kapfer <ummeegge(a)ipfire.org> --- config/rootfiles/packages/tshark | 4 ++-- lfs/tshark | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/tshark b/config/rootfiles/packages/tshark index 1e72493e9..b29a7c7b8 100644 --- a/config/rootfiles/packages/tshark +++ b/config/rootfiles/packages/tshark @@ -608,10 +608,10 @@ usr/bin/tshark #usr/include/wireshark/wsutil/xtea.h #usr/lib/libwireshark.so usr/lib/libwireshark.so.12 -usr/lib/libwireshark.so.12.0.5 +usr/lib/libwireshark.so.12.0.7 #usr/lib/libwiretap.so usr/lib/libwiretap.so.9 -usr/lib/libwiretap.so.9.0.5 +usr/lib/libwiretap.so.9.0.7 #usr/lib/libwscodecs.so usr/lib/libwscodecs.so.2 usr/lib/libwscodecs.so.2.0.0 diff --git a/lfs/tshark b/lfs/tshark index 7c9cd6613..e8c63f3d8 100644 --- a/lfs/tshark +++ b/lfs/tshark @@ -24,7 +24,7 @@ include Config -VER = 3.0.5 +VER = 3.0.7 THISAPP = wireshark-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -33,7 +33,7 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = tshark DEPS = "krb5" -PAK_VER = 3 +PAK_VER = 4 ############################################################################### # Top-level Rules @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = d01fdc4e78ef8ea70f20616c91419bd9 +$(DL_FILE)_MD5 = 5b486f20239545c5af1db614c0d98876 install : $(TARGET) -- 2.12.2

4 5

Merry Christmas
by Michael Tremer 24 Dec '19

24 Dec '19

Boys and girls, Have a very lovely Christmas this year. Celebrate with your family, friends and whoever else you want to spend it with. Thank you all for your hard work that helped to make IPFire what it is: the best open source firewall in the world. I hope next year will be even better! Yours truly, -Michael

1 0

[PATCH 1/3] amazon-ssm-agent: New package
by Michael Tremer 24 Dec '19

24 Dec '19

AWS Systems Manager Agent (SSM Agent) is Amazon software that can be installed and configured on an Amazon EC2 instance, an on-premises server, or a virtual machine (VM). SSM Agent makes it possible for Systems Manager to update, manage, and configure these resources. The agent processes requests from the Systems Manager service in the AWS Cloud, and then runs them as specified in the request. SSM Agent then sends status and execution information back to the Systems Manager service by using the Amazon Message Delivery Service. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- config/backup/includes/amazon-ssm-agent | 1 + .../packages/x86_64/amazon-ssm-agent | 13 ++ lfs/amazon-ssm-agent | 118 ++++++++++++++++++ make.sh | 1 + src/initscripts/packages/amazon-ssm-agent | 42 +++++++ src/paks/amazon-ssm-agent/install.sh | 36 ++++++ src/paks/amazon-ssm-agent/uninstall.sh | 36 ++++++ src/paks/amazon-ssm-agent/update.sh | 26 ++++ 8 files changed, 273 insertions(+) create mode 100644 config/backup/includes/amazon-ssm-agent create mode 100644 config/rootfiles/packages/x86_64/amazon-ssm-agent create mode 100644 lfs/amazon-ssm-agent create mode 100644 src/initscripts/packages/amazon-ssm-agent create mode 100644 src/paks/amazon-ssm-agent/install.sh create mode 100644 src/paks/amazon-ssm-agent/uninstall.sh create mode 100644 src/paks/amazon-ssm-agent/update.sh diff --git a/config/backup/includes/amazon-ssm-agent b/config/backup/includes/amazon-ssm-agent new file mode 100644 index 000000000..d202bcf26 --- /dev/null +++ b/config/backup/includes/amazon-ssm-agent @@ -0,0 +1 @@ +/etc/amazon/ssm diff --git a/config/rootfiles/packages/x86_64/amazon-ssm-agent b/config/rootfiles/packages/x86_64/amazon-ssm-agent new file mode 100644 index 000000000..98f93cdfd --- /dev/null +++ b/config/rootfiles/packages/x86_64/amazon-ssm-agent @@ -0,0 +1,13 @@ +#etc/amazon +etc/amazon/ssm +etc/amazon/ssm/amazon-ssm-agent.json +etc/amazon/ssm/seelog.xml +etc/rc.d/init.d/amazon-ssm-agent +usr/bin/amazon-ssm-agent +usr/bin/ssm-cli +usr/bin/ssm-document-worker +usr/bin/ssm-session-logger +usr/bin/ssm-session-worker +var/ipfire/backup/addons/includes/amazon-ssm-agent +#var/lib/amazon +var/lib/amazon/ssm diff --git a/lfs/amazon-ssm-agent b/lfs/amazon-ssm-agent new file mode 100644 index 000000000..da164ced8 --- /dev/null +++ b/lfs/amazon-ssm-agent @@ -0,0 +1,118 @@ +############################################################################### +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2019 IPFire Team <info(a)ipfire.org> # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see <http://www.gnu.org/licenses/>. # +# # +############################################################################### + +############################################################################### +# Definitions +############################################################################### + +include Config + +VER = 2.3.786.0 +SUP_ARCH = x86_64 + +THISAPP = amazon-ssm-agent-$(VER) +DL_FILE = $(THISAPP).tar.gz +DL_FROM = $(URL_IPFIRE) +DIR_APP = $(DIR_SRC)/$(THISAPP) +TARGET = $(DIR_INFO)/$(THISAPP) +PROG = amazon-ssm-agent +PAK_VER = 1 + +DEPS = "" + +export GOPATH = $(HOME)/gopath + +DIR_BUILD = $(GOPATH)/src/github.com/aws/amazon-ssm-agent + +############################################################################### +# Top-level Rules +############################################################################### + +objects = $(DL_FILE) + +$(DL_FILE) = $(DL_FROM)/$(DL_FILE) + +$(DL_FILE)_MD5 = a2887445875d335b021c5044eab955dc + +install : $(TARGET) + +check : $(patsubst %,$(DIR_CHK)/%,$(objects)) + +download :$(patsubst %,$(DIR_DL)/%,$(objects)) + +md5 : $(subst %,%_MD5,$(objects)) + +dist: + @$(PAK) + +############################################################################### +# Downloading, checking, md5sum +############################################################################### + +$(patsubst %,$(DIR_CHK)/%,$(objects)) : + @$(CHECK) + +$(patsubst %,$(DIR_DL)/%,$(objects)) : + @$(LOAD) + +$(subst %,%_MD5,$(objects)) : + @$(MD5) + +############################################################################### +# Installation Details +############################################################################### + +$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) + @$(PREBUILD) + @rm -rf $(DIR_APP) $(DIR_BUILD) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) + + # The build system is searching for code in a certain path + mkdir -pv $$(dirname $(DIR_BUILD)) + ln -svf --relative $(DIR_APP) $(DIR_BUILD) + + # Disable style check + cd $(DIR_BUILD) && sed -e "/checkstyle.sh/d" -i makefile + + # Build + cd $(DIR_BUILD) && make build-linux + + # Install + mkdir -pv /etc/amazon/ssm /usr/bin /var/lib/amazon/ssm + cd $(DIR_BUILD) && install -v -m 755 \ + bin/linux_amd64/amazon-ssm-agent \ + bin/linux_amd64/ssm-cli \ + bin/linux_amd64/ssm-document-worker \ + bin/linux_amd64/ssm-session-worker \ + bin/linux_amd64/ssm-session-logger \ + /usr/bin + cd $(DIR_BUILD) && install -v -m 644 \ + seelog_unix.xml /etc/amazon/ssm/seelog.xml + cd $(DIR_BUILD) && install -v -m 644 \ + amazon-ssm-agent.json.template /etc/amazon/ssm/amazon-ssm-agent.json + + # Install initscript + $(call INSTALL_INITSCRIPT,amazon-ssm-agent) + + # Install backup include + install -v -m 644 $(DIR_SRC)/config/backup/includes/amazon-ssm-agent \ + /var/ipfire/backup/addons/includes/amazon-ssm-agent + + @rm -rf $(DIR_APP) $(DIR_BUILD) + @$(POSTBUILD) diff --git a/make.sh b/make.sh index 64b08b7d9..34eae1cbb 100755 --- a/make.sh +++ b/make.sh @@ -1631,6 +1631,7 @@ buildipfire() { lfsmake2 tshark lfsmake2 geoip-generator lfsmake2 speedtest-cli + lfsmake2 amazon-ssm-agent } buildinstaller() { diff --git a/src/initscripts/packages/amazon-ssm-agent b/src/initscripts/packages/amazon-ssm-agent new file mode 100644 index 000000000..c385d890c --- /dev/null +++ b/src/initscripts/packages/amazon-ssm-agent @@ -0,0 +1,42 @@ +#!/bin/sh +######################################################################## +# Begin $rc_base/init.d/amazon-ssm-agent +######################################################################## + +. /etc/sysconfig/rc +. ${rc_functions} + +case "${1}" in + start) + # Do not launch the agent when we are not running on EC2 + if ! running_on_ec2; then + exit 0 + fi + + boot_mesg "Starting Amazon SSM Agent..." + /usr/bin/amazon-ssm-agent &>/dev/null & + evaluate_retval + ;; + + stop) + boot_mesg "Stopping Amazon SSM Agent..." + killproc /usr/bin/amazon-ssm-agent + ;; + + restart) + ${0} stop + sleep 1 + ${0} start + ;; + + status) + statusproc /usr/bin/amazon-ssm-agent + ;; + + *) + echo "Usage: ${0} {start|stop|restart|status}" + exit 1 + ;; +esac + +# End $rc_base/init.d/amazon-ssm-agent diff --git a/src/paks/amazon-ssm-agent/install.sh b/src/paks/amazon-ssm-agent/install.sh new file mode 100644 index 000000000..b9044906b --- /dev/null +++ b/src/paks/amazon-ssm-agent/install.sh @@ -0,0 +1,36 @@ +#!/bin/bash +############################################################################ +# # +# This file is part of the IPFire Firewall. # +# # +# IPFire is free software; you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation; either version 2 of the License, or # +# (at your option) any later version. # +# # +# IPFire is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with IPFire; if not, write to the Free Software # +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # +# # +# Copyright (C) 2007 IPFire-Team <info(a)ipfire.org>. # +# # +############################################################################ +# +. /opt/pakfire/lib/functions.sh + +extract_files +restore_backup ${NAME} + +start_service ${NAME} + +# Enable autostart +ln -sf ../init.d/amazon-ssm-agent /etc/rc.d/rc0.d/K10amazon-ssm-agent +ln -sf ../init.d/amazon-ssm-agent /etc/rc.d/rc3.d/S41amazon-ssm-agent +ln -sf ../init.d/amazon-ssm-agent /etc/rc.d/rc6.d/K10amazon-ssm-agent + +exit 0 diff --git a/src/paks/amazon-ssm-agent/uninstall.sh b/src/paks/amazon-ssm-agent/uninstall.sh new file mode 100644 index 000000000..48f160762 --- /dev/null +++ b/src/paks/amazon-ssm-agent/uninstall.sh @@ -0,0 +1,36 @@ +#!/bin/bash +############################################################################ +# # +# This file is part of the IPFire Firewall. # +# # +# IPFire is free software; you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation; either version 2 of the License, or # +# (at your option) any later version. # +# # +# IPFire is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with IPFire; if not, write to the Free Software # +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # +# # +# Copyright (C) 2007 IPFire-Team <info(a)ipfire.org>. # +# # +############################################################################ +# +. /opt/pakfire/lib/functions.sh + +extract_backup_includes + +stop_service ${NAME} + +make_backup ${NAME} + +remove_files + +rm -rfv /etc/rc.d/rc*.d/*amazon-ssm-agent + +exit 0 diff --git a/src/paks/amazon-ssm-agent/update.sh b/src/paks/amazon-ssm-agent/update.sh new file mode 100644 index 000000000..89c40d0d7 --- /dev/null +++ b/src/paks/amazon-ssm-agent/update.sh @@ -0,0 +1,26 @@ +#!/bin/bash +############################################################################ +# # +# This file is part of the IPFire Firewall. # +# # +# IPFire is free software; you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation; either version 2 of the License, or # +# (at your option) any later version. # +# # +# IPFire is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with IPFire; if not, write to the Free Software # +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # +# # +# Copyright (C) 2007 IPFire-Team <info(a)ipfire.org>. # +# # +############################################################################ +# +. /opt/pakfire/lib/functions.sh +./uninstall.sh +./install.sh -- 2.20.1

1 2

[PATCH] stripper: Strip all unneeded relocation information
by Michael Tremer 24 Dec '19

24 Dec '19

Libraries were treated differently and therfore it could happen that they were not stripped from any unnecessary relocation information at all. This patch changes that and strips everything from libraries that we do not need. The ISO was 3MB smaller. Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org> --- src/stripper | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/src/stripper b/src/stripper index f121d3591..ac5f58ca5 100755 --- a/src/stripper +++ b/src/stripper @@ -17,7 +17,7 @@ done function _strip() { local file=${1} - local cmd="${STRIP-strip}" + local strip="${STRIP-strip}" local exclude l for exclude in ${excludes}; do @@ -27,17 +27,19 @@ function _strip() { fi done + local cmd=( "${strip}" ) + case "$(file -bi ${file})" in - application/x-sharedlib*|application/x-archive*) - cmd="${cmd} --strip-debug --remove-section=.comment --remove-section=.note" + application/x-archive*) + cmd+=( "--strip-debug" "--remove-section=.comment" "--remove-section=.note" ) ;; *) - cmd="${cmd} --strip-unneeded" + cmd+=( "--strip-all" ) ;; esac echo "Stripping ${file}..." - ${cmd} ${file} + ${cmd[*]} ${file} } for dir in ${dirs}; do -- 2.20.1

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development December 2019