Þ• Ÿ
- À"
Á" Ì" Î" q à# \ R$ " ¯$ Ò% Ø% á% è% ð% & & & & +& A& K&
\& j&
t& ‚& ’& ›&
¨& ¶& ¿&
Ë& Ö&
â& ð& I ù& { C' [ ¿' ‚ ( b ž( ˜ ) à š) ç ^* E F+ % Œ+ ²+ º+ ¾+ È+ ‚ è+ k, p, v, |, ƒ, ™, ¡, ³, È, à, ô,
- - &- 4 @- & u- $ œ- % Á- ' ç- $ . 4. :. A. H. \. n. †. ’. 2 ±. 2 ä. / ./ ?/
L/ Z/ b/ $ q/ . –/ " Å/ è/ $ 0 -0 $ K0 p0 |0 „0 # 0 ¬ ±0 ^1 m1 ] z1
Ø1 æ1 ÷1 n
2 y2 , —2 ? Ä2 3 3 3 "3 /3 <3 Q3 i3
u3 €3 ’3
Ÿ3 ª3 Ä3 Ö3
å3 ð3 ÿ3 4
4 (4 74 A4 N4 Z4 g4 v4 €4 ˆ4 ‘4 ¦4 û ®4 ª5 °5 k ¶5 - "6 P6 f6 : ƒ6 ¾6 Å6 Í6 Ö6 æ6 ý6 7 r 27 ¥7 ¯7 ¶7 Ï ¾7 C Ž8 2 Ò8 L 9 R9 ^9
h9 u s9 é9 õ9 û9 J : M: R: X: ]: c: Œ m: È ú: m Ã; Q 1< Ÿ ƒ< #= *= J=
T= _=
l= z= = ‰= ¡= µ= Ë= Þ= ï= ø= l > x>
‚> > $ ’> ·> ¼> L? R? X? h? à u? % V@ |@ € …@ y A €A ˆA A ¤A 6 ªA ' áA B # B >B
_B mB
}B ˆB D ”B ÙB åB D ïB ) 4C & ^C % …C ' «C $ ÓC * øC ! #D ED ^D xD D ¯D : ÌD B E : JE …E ¤E ¾E ØE ôE F + !F MF fF F / ™F % ÉF 5 ïF ? %G * eG # G I ´G þG H H &H 8H >H FH OH YH bH lH vH Ú ‡H bI iI |I ‰I I ¬I ÅI ÒI æI ÷I J J (J 4J DJ UJ aJ wJ
†J ”J £J ´J ÀJ ÑJ
ÛJ æJ ìJ ôJ K )K HK bK ~K †K q K L
L L 0L L 7L „L ‹L —L ¤L ¬L A ´L öL úL M M
M » M œ ÖM * sN ¥ žO Å DP D
Q S OQ + £Q ÏQ ¡ åQ ƒ ‡R Œ T ˜T )U BU
KU VU W ^U * ¶U áU çU V V V V *V
4V ?V KV TV \V hV & mV # ”V + ¸V ) äV M W 0 \W ( W ^ ¶W A X ; WX “X œX ¢X ¨X ®X ·X ½X ÄX ÎX ÔX ÝX áX íX óX üX Y Y Y Y - Y JY WY
\Y gY qY vY Y
„Y ’Y —Y œY ¢Y ¨Y ®Y ²Y
·Y ÂY ÉY ÍY ÔY ÙY âY æY íY ôY ýY Z Z
Z $Z & (Z OZ « fZ
\ \ Æ \ € æ\ U g] ½] Ä^ Ë^ Õ^ Ü^ æ^ ù^ _
_ _ *_ @_ M_ c_ v_ ƒ_ _ _ _ º_ Í_ Ú_ ç_ ô_ ` ` H *` c s` ] ×` f 5a W œa ‡ ôa Á |b æ >c E %d $ kd d —d žd «d u Êd @e Ge Qe Xe be re ye ‰e Ÿe ¸e Ïe âe õe üe B f * Xf & ƒf ' ªf ' Òf ' úf "g &g 0g 7g Jg ]g ug ‚g ' ›g $ Ãg èg þg h h %h ,h 6h $ Rh " wh šh # ºh # Þh & i )i 0i 7i >i ]i îi ûi ^ j gj tj †j l žj k * ,k 9 Wk ‘k ›k ¢k ¬k ¶k Ãk Ðk ãk ðk ýk
l l 'l @l Vl il vl ƒl l l l Àl Íl Úl çl úl m m $m .m ;m ¯ Bm òm ùm M n % Nn tn Šn 5 ¨n Þn ån ïn ùn o o K b e Û d = Î ¦ ¹ ¾ d P „ ‹ < l ä  ô § X x | ¥ ^ V Ý Õ 4 = \ € 2 o E È ] & r ž & 6 % ’ … J . ` D ‚ J ( w c H m ` Š Ï ó í ‘ ¼ O ? å ¡ Æ Œ • - ù j 6 F * g ý A Ô ´ " œ Q ² ¤ U W ! # S é g R f ~ 0 ¶ < ° Þ • b † u c T Ð µ 1 [ + T ' ' k Ž P
Ü Œ O 7 ¯ k ) › l ® ” ± 9 ³ p Ë # € ‹ > % @ W h » ‘ - Select - / A connection tracking helper is assisting to make protocols work that are using different flows for signaling and data transfers. The data transfers are using ports that are unrelated to the signaling connection and are therefore blocked by the firewall without the helper. A firewalld icmptype provides the information for an Internet Control Message Protocol (ICMP) type for firewalld. A firewalld service is a combination of ports, protocols, modules and destination addresses. A firewalld zone defines the level of trust for network connections, interfaces and source addresses bound to the zone. The zone combines services, ports, protocols, masquerading, port/packet forwarding, icmp filters and rich rules. The zone can be bound to interfaces and source addresses. About About %s Action Action: Active Bindings Add Add Chain Add Command Line Add Context Add Entries From File Add Entry Add Forward Port Add ICMP Type Add IPSet Add Interface Add Passthrough Add Port Add Protocol Add Rich Rule Add Rule Add Service Add Source Add User Id Add User Name Add Zone Add a rule with the arguments args to a chain in a table with a priority. Add additional ports or port ranges, which need to be accessible for all hosts or networks that can connect to the machine. Add additional ports or port ranges, which need to be accessible for all hosts or networks. Add additional source ports or port ranges, which need to be accessible for all hosts or networks that can connect to the machine. Add additional source ports or port ranges, which need to be accessible for all hosts or networks. Add entries to bind interfaces to the zone. If the interface will be used by a connection, the zone will be set to the zone specified in the connection. Add entries to bind source addresses or areas to the zone. You can also bind to a MAC source address, but with limitations. Port forwarding and masquerading will not work for MAC source bindings. Add entries to forward ports either from one port to another on the local system or from the local system to another system. Forwarding to another system is only useful if the interface is masqueraded. Port forwarding is IPv4 only. Add protocols, which need to be accessible for all hosts or networks. Additional chains for use with rules. Address All All Files All network traffic is blocked. An IPSet can be used to create white or black lists and is able to store for example IP addresses, port numbers or MAC addresses. Args Args: Audit Audit: Authorization failed. Authors Automatic Helpers Base Helper Settings Base ICMP Type Settings Base IPSet Settings Base Service Settings Base Zone Settings Bindings Block all network traffic Bold entries are mandatory, all others are optional. Built-in helper, rename not supported. Built-in icmp, rename not supported. Built-in ipset, rename not supported. Built-in service, rename not supported. Built-in zone, rename not supported. Chain Chain: Chains Change Default Zone Change Log Denied Change LogDenied value. Change Zone Change Zones of Connections... Change default zone for connections or interfaces. Change which zone a network connection belongs to. Change zone of binding Changes applied. Command line Command lines Comment Configuration: Configure Automatic Helper Assigment Configure Automatic Helper Assignment setting. Configure Shields UP/Down Zones... Configure Shields Up/Down Zones Connection to FirewallD established. Connection to FirewallD lost. Connection to firewalld established. Connections Context Contexts Current default zone of the system. Currently visible configuration. Runtime configuration is the actual active configuration. Permanent configuration will be active after service or system reload or restart. Default Target Default Zone Default Zone '{default_zone}' active for connection '{connection}' on interface '{interface}' Default Zone: Default Zone: %s Default Zone: '%s' Default zone '{default_zone}' {activated_deactivated} for connection '{connection}' on interface '{interface}' Default zone changed to '%s'. Default zone used by network connection '%s' Define ports or port ranges, which are monitored by the helper. Description: Dest Destination Destination: Direct Chain Direct Configuration Direct Passthrough Rule Direct Rule Edit Chain Edit Command Line Edit Context Edit Entry Edit Firewall Settings... Edit Forward Port Edit ICMP Type Edit IPSet Edit Interface Edit Passthrough Edit Port Edit Protocol Edit Rich Rule Edit Rule Edit Service Edit Source Edit User Id Edit User Name Edit Zone Element Element: Enable Notifications Entries Entries of the IPSet. You will only be able to see entries of ipsets that are not using the timeout option, also only the entries, that have been added by firewalld. Entries, that have been directly added with the ipset command wil not be listed here. Entry Error Failed to connect to firewalld. Please make sure that the service has been started correctly and try again. Failed to get connections from NetworkManager Failed to load icons. Failed to read file '%s': %s Failed to set zone {zone} for connection {connection_name} Family Family: Firewall Firewall Applet Firewall Configuration FirewallD has been reloaded. Forward to another port Forwarding to another system is only useful if the interface is masqueraded.
Do you want to masquerade this zone ? Hashsize: Helper Helpers Here you can define which services are trusted in the zone. Trusted services are accessible from all hosts and networks that can reach the machine from connections, interfaces and sources bound to this zone. Here you can select the zones used for Shields Up and Shields Down. Here you can set rich language rules for the zone. Hide active runtime bindings of connections, interfaces and sources to zones ICMP Filter ICMP Type ICMP Types ICMP Types can only be changed in the permanent configuration view. The runtime configuration of ICMP Types is fixed. IP address: IPSet IPSets IPSets can only be created or deleted in the permanent configuration view. IPv4 IPv4: IPv6 IPv6: Icmp Type If Invert Filter is enabled, marked ICMP entries are accepted and the others are rejected. In a zone with the target DROP, they are dropped. If a command entry on the whitelist ends with an asterisk '*', then all command lines starting with the command will match. If the '*' is not there the absolute command inclusive arguments must match. If you enable local forwarding, you have to specify a port. This port has to be different to the source port. If you enable masquerading, IP forwarding will be enabled for your IPv4 networks. If you specify destination addresses, the service entry will be limited to the destination address and type. If both entries are empty, there is no limitation. Ignore Initial hash size, default 1024 Interface Interfaces Invalid name Invert Filter Level: License Load ICMP Type Defaults Load IPSet Defaults Load Service Defaults Load Zone Defaults Local forwarding Lockdown Lockdown Whitelist Lockdown locks firewall configuration so that only applications on lockdown whitelist are able to change it. Lockdown: Log Denied Log: Make runtime configuration permanent Mark Mark the ICMP types in the list, which should be rejected. All other ICMP types are allowed to pass the firewall. The default is no limitation. Mark: Mask: Masquerade zone Masquerading Masquerading allows you to set up a host or router that connects your local network to the internet. Your local network will not be visible and the hosts appear as a single address on the internet. Masquerading is IPv4 only. Max number of elements, default 65536 Maxelem: Meaning: Log of denied packets. But this is too long. LogDenied is also the parameter used in firewalld.conf.Automatic Helpers: Meaning: Log of denied packets. But this is too long. LogDenied is also the parameter used in firewalld.conf.Log Denied: Module: Modules Name already exists Name: Netfilter helper modules are needed for some services. Network traffic is not blocked anymore. No Active Zones. No NetworkManager imports available No connection to firewall daemon Other Module: Other Protocol: Panic Mode Panic Mode: Panic mode means that all incoming and outgoing packets are dropped. Passthrough Permanent Please be careful with passthrough rules to not damage the firewall. Please configure base ICMP type settings: Please configure base helper settings: Please configure base ipset settings: Please configure base service settings: Please configure base zone settings: Please enter a mark with an optional mask. Please enter a port and protocol. Please enter a protocol. Please enter a rich rule. Please enter a source. Please enter an interface name: Please enter an ipset entry: Please enter an ipv4 address with the form address[/mask]. Please enter an ipv4 or ipv6 address with the form address[/mask]. Please enter an ipv6 address with the form address[/mask]. Please enter the command line. Please enter the context. Please enter the user id. Please enter the user name. Please select a file Please select a helper: Please select a netfilter conntrack helper: Please select a service. Please select an ICMP type Please select an ipset: Please select default zone from the list below. Please select ipv and enter the args. Please select ipv and table and enter the chain name. Please select ipv and table, chain priority and enter the args. Please select the automatic helpers value: Please select the log denied value: Please select the source and destination options according to your needs. Port Port / Port Range: Port Forwarding Port and Protocol Ports Prefix: Priority Priority: Protocol Protocol: Protocols Reload Firewalld Reloads firewall rules. Current permanent configuration will become new runtime configuration. i.e. all runtime only changes done until reload are lost with reload if they have not been also in permanent configuration. Remove Remove All Entries Remove Chain Remove Command Line Remove Context Remove Entries From File Remove Entry Remove Forward Port Remove ICMP Type Remove IPSet Remove Interface Remove Passthrough Remove Port Remove Protocol Remove Rich Rule Remove Rule Remove Selected Entry Remove Service Remove Source Remove User Id Remove User Name Remove Zone Reset To Default Rich Rule Rich Rules Rules Runtime Runtime To Permanent Select zone for connection '%s' Select zone for interface '%s' Select zone for source %s Select zone for source '%s' Service Services Services can only be changed in the permanent configuration view. The runtime configuration of services is fixed. Shields Down Zone: Shields Up Shields Up Zone: Short: Show active runtime bindings of connections, interfaces and sources to zones Source Source Port Source Ports Source: Sources Specify whether this ICMP Type is available for IPv4 and/or IPv6. Src Table Table: Target: Text Files The Internet Control Message Protocol (ICMP) is mainly used to send error messages between networked computers, but additionally for informational messages like ping requests and replies. The context is the security (SELinux) context of a running application or service. To get the context of a running application use ps -e --context. The direct configuration gives a more direct access to the firewall. These options require user to know basic iptables concepts, i.e. tables, chains, commands, parameters and targets. Direct configuration should be used only as a last resort when it is not possible to use other firewalld features. The ipv argument of each option has to be ipv4 or ipv6 or eb. With ipv4 it will be for iptables, with ipv6 for ip6tables and with eb for ethernet bridges (ebtables). The lockdown feature is a light version of user and application policies for firewalld. It limits changes to the firewall. The lockdown whitelist can contain commands, contexts, users and user ids. The mark and the mask fields are both 32 bits wide unsigned numbers. The mask can be a network mask or a number for ipv4.
The mask is a number for ipv6. The mask can be a network mask or a number. The mask is a number. The passthrough rules are directly passed through to the firewall and are not placed in special chains. All iptables, ip6tables and ebtables options can be used. The priority is used to order rules. Priority 0 means add rule on top of the chain, with a higher priority the rule will be added further down. Rules with the same priority are on the same level and the order of these rules is not fixed and may change. If you want to make sure that a rule will be added after another one, use a low priority for the first and a higher for the following. This IPSet uses the timeout option, therefore no entries are visible here. The entries should be taken care directly with the ipset command. This feature is useful for people using the default zones mostly. For users, that are changing zones of connections, it might be of limited use. Timeout value in seconds Timeout: To Address To Port To enable this Action has to be 'reject' and Family either 'ipv4' or 'ipv6' (not both). Trying to connect to firewalld, waiting... Type: Used by network connection '%s' User ID User Ids User id User ids. User name User names User names. Version: Warning With limit: Zone Zone '%s' activated for interface '%s' Zone '%s' activated for source '%s' Zone '%s': ICMP type '%s' is not available. Zone '%s': Service '%s' is not available. Zone '{zone}' active for connection '{connection}' on interface '{interface}' Zone '{zone}' active for interface '{interface}' Zone '{zone}' active for source {source} Zone '{zone}' {activated_deactivated} for connection '{connection}' on interface '{interface}' Zone '{zone}' {activated_deactivated} for interface '{interface}' Zone '{zone}' {activated_deactivated} for source '{source}' Zone: %s Zones _File _Help _Options _View accept activated alert critical day deactivated debug disabled drop eb emergency enabled error firewall;network;security;iptables;netfilter; forward-port hour icmp-block icmp-type info inverted ipv4 ipv4 and ipv6 ipv6 ipv: label level limit log mark masquerade minute nat notice port protocol raw reject second security service source-port warning with Type: yes {entry} (Default Zone: {default_zone}) {entry} (Zone: {zone}) Project-Id-Version: PACKAGE VERSION
Report-Msgid-Bugs-To:
PO-Revision-Date: 2018-11-16 08:29+0000
Last-Translator: Copied by Zanata
Language-Team: Chinese (Taiwan) (http://www.transifex.com/projects/p/firewalld/language/zh_TW/)
Language: zh_TW
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Plural-Forms: nplurals=1; plural=0;
X-Generator: Zanata 4.6.2
- é¸å– - / 連線追蹤輔助器是è¦è¼”助使用ä¸åŒè¨Šè™Ÿã€è³‡æ–™å‚³è¼¸æµå‘çš„å”定é‹ä½œã€‚è³‡æ–™å‚³è¼¸è‹¥ä½¿ç”¨ç„¡é—œè¨Šè™Ÿé€£ç·šçš„é€£æŽ¥åŸ ï¼Œåœ¨æ²’æœ‰è¼”åŠ©å™¨çš„æƒ…æ³ä¸‹æœƒè¢«é˜²ç«ç‰†å°éŽ–。 firewalld icmptype 為 firewalld æ供網際網路控制訊æ¯å”定 (ICMP，Internet Control Message Protocol) 類型資訊。 firewalld æœå‹™å¯ç”±é€£æŽ¥åŸ ã€å”定ã€æ¨¡çµ„ã€ç›®çš„地ä½å€ç‰çµ„åˆè€Œæˆã€‚ firewalld 界域所定義的是ç¶å®šè©²ç•ŒåŸŸä¹‹ç¶²è·¯é€£ç·šã€ä»‹é¢ã€ä¾†æºä½å€çš„ä¿¡ä»»ç‰ç´šã€‚界域能çµåˆæœå‹™ã€é€£æŽ¥åŸ ã€å”定ã€å½è£ã€é€£æŽ¥åŸ /å°åŒ…轉é€ã€icmp éŽæ¿¾ã€è±å¯Œè¦å‰‡ç‰ã€‚界域å¯ä»¥èˆ‡ä»‹é¢ã€ä¾†æºä½å€ç‰ç¶å®šã€‚ 關於 關於 %s 動作 動作： 使用ä¸çš„ç¶å®š åŠ å…¥ åŠ å…¥éˆæ¢ åŠ å…¥æŒ‡ä»¤åˆ— åŠ å…¥æƒ…å¢ƒ å¾žæª”æ¡ˆæ–°å¢žé …ç›® åŠ å…¥æ¢ç›® åŠ å…¥è½‰é€é€£æŽ¥åŸ åŠ å…¥ ICMP é¡žåž‹ åŠ å…¥ IPSet åŠ å…¥ä»‹é¢ åŠ å…¥é€šé€ åŠ å…¥é€£æŽ¥åŸ åŠ å…¥å”定 åŠ å…¥è±å¯Œè¦å‰‡ åŠ å…¥è¦å‰‡ åŠ å…¥æœå‹™ åŠ å…¥ä¾†æº åŠ å…¥ä½¿ç”¨è€… ID åŠ å…¥ä½¿ç”¨è€…å稱 åŠ å…¥ç•ŒåŸŸ åŠ å…¥æœ‰ args 引數的è¦å‰‡åˆ°æœ‰å„ªå…ˆç‰ç´šçš„è¡¨æ ¼çš„éˆæ¢ä¸ã€‚ è«‹æ·»åŠ å…¶ä»–é€£æŽ¥åŸ æˆ–é€£æŽ¥åŸ ç¯„åœï¼Œè®“所有å¯é€£æŽ¥è‡³æœ¬æ©Ÿçš„主機或網路å˜å–。 新增é¡å¤–çš„é€šè¨ŠåŸ æˆ–é€šè¨ŠåŸ ç¯„åœï¼Œä¸¦ä¸”å¿…é ˆèƒ½è¢«æ‰€æœ‰ä¸»æ©Ÿæˆ–ç¶²è·¯å˜å–。 åŠ å…¥å…¶ä»–ä¾†æºé€£æŽ¥åŸ æˆ–é€£æŽ¥åŸ ç¯„åœï¼Œè®“所有å¯é€£æŽ¥è‡³æœ¬æ©Ÿçš„主機或網路å˜å–。 åŠ å…¥å…¶ä»–ä¾†æºé€£è¨ŠåŸ æˆ–é€£æŽ¥åŸ ç¯„åœï¼Œè®“所有主機或網路å‡å¯å˜å–。 è«‹æ·»åŠ æ¢ç›®ä¾†å°‡ä»‹é¢èˆ‡æ¤ç•ŒåŸŸç¶å®šã€‚如果介é¢æœƒè¢«æŸé€£ç·šä½¿ç”¨ï¼Œå‰‡ç•ŒåŸŸå°‡è¢«è¨ç‚ºé€£ç·šä¸æ‰€æŒ‡å®šçš„界域。 è«‹æ·»åŠ æ¢ç›®ä¾†å°‡ä¾†æºä½å€æˆ–å€åŸŸèˆ‡æ¤ç•ŒåŸŸç¶å®šã€‚您也å¯ä»¥ç¶å®šè‡³ MAC 來æºä½å€ï¼Œä½†æœ‰é™åˆ¶ã€‚port forwarding 與 masquerading 都無法在 MAC 來æºç¶å®šä¸Šé‹ä½œã€‚ 新增æ¢ç›®ä¾†å¾žæœ¬åœ°ç«¯ç³»çµ±ä¸Šçš„ä¸€å€‹é€£æŽ¥åŸ è½‰é€è‡³å¦ä¸€å€‹é€£æŽ¥åŸ ，或由本地端系統轉é€è‡³å¦ä¸€éƒ¨ç³»çµ±ã€‚僅在介é¢å¡å½è£æ™‚æ‰èƒ½è½‰é€è‡³å¦ä¸€éƒ¨ç³»çµ±ã€‚é€£æŽ¥åŸ è½‰é€åŠŸèƒ½åƒ…é©ç”¨æ–¼ IPv4。 新增通訊å”å®šï¼Œä¸¦ä¸”å¿…é ˆèƒ½è¢«æ‰€æœ‰ä¸»æ©Ÿæˆ–ç¶²è·¯å˜å–。 è¦ä½¿ç”¨çš„è¦å‰‡çš„é¡å¤–éˆæ¢ã€‚ ä½å€ 全部 所有檔案 所有網路交通已å°éŽ–。 IPSet å¯ä»¥ç”¨ä¾†å»ºç«‹ç™½å單或黑å單，且å¯ä»¥å„²å˜ä¾‹å¦‚ IP ä½å€ã€é€£æŽ¥åŸ 號ã€æˆ– MAC ä½å€ç‰ã€‚ 引數 引數： ç¨½æ ¸ ç¨½æ ¸ï¼š 授權失敗。 作者 自動輔助器 基礎輔助器è¨å®š 基礎 ICMP é¡žåž‹è¨å®š 基礎 IPSet è¨å®šå€¼ 基礎æœå‹™è¨å®š 基礎界域è¨å®š ç¶å®š å°éŽ–所有網路交通 粗體的æ¢ç›®ç‚ºå¼·åˆ¶é …目，其他æ¢ç›®å‰‡ç‚ºé¸ç”¨é …目。 內建輔助器，ä¸æ”¯æ´é‡æ–°å‘½å。 內建 icmp，ä¸æ”¯æ´é‡æ–°å‘½å。 內建 ipset，ä¸æ”¯æ´é‡æ–°å‘½å。 內建æœå‹™ï¼Œä¸æ”¯æ´é‡æ–°å‘½å。 內建界域，ä¸æ”¯æ´é‡æ–°å‘½å。 éˆ éˆæ¢ï¼š éˆæ¢ 變更é è¨ç•ŒåŸŸ 變更日誌被拒 變更 LogDenied 值。 變更å€åŸŸ 變更連線的界域... 變更連線或介é¢çš„é è¨ç•ŒåŸŸã€‚ 變更網路連線所屬的界域。 變更ç¶å®šçš„界域 變更已套用。 指令列 指令列 備註 組態： è¨å®šè‡ªå‹•è¼”助器指派 è¨å®šè‡ªå‹•è¼”助器指派è¨å®šã€‚ è¨å®šé˜²ç¦¦å±•é–‹/å¸ä¸‹ç•ŒåŸŸ... è¨å®šé˜²ç¦¦å±•é–‹/å¸ä¸‹ç•ŒåŸŸ 與 FirewallD 的連線已建立。 與 FirewallD 的連線已ä¸æ–·ã€‚ 連至 firewalld 的連線已建立。 連線 情境 情境 系統的目å‰é è¨ç•ŒåŸŸã€‚ ç›®å‰å¯è¦‹çš„組態。執行時期組態為實際使用ä¸çµ„態。永久組態將在æœå‹™æˆ–系統é‡æ–°è¼‰å…¥æˆ–é‡æ–°å•Ÿå‹•ä¹‹å¾Œå•Ÿå‹•ã€‚ é è¨ç›®æ¨™ é è¨ç•ŒåŸŸ é è¨ç•ŒåŸŸã€Œ{default_zone}ã€ä½¿ç”¨ä¸ï¼šé€£ç·šã€Œ{connection}ã€ï¼Œä»‹é¢ã€Œ{interface}〠é è¨åŸŸï¼š é è¨ç•ŒåŸŸï¼š%s é è¨ç•ŒåŸŸï¼šã€Œ%s〠é è¨ç•ŒåŸŸã€Œ{default_zone}ã€{activated_deactivated}：連線「{connection}ã€ï¼Œä»‹é¢ã€Œ{interface}〠é è¨ç•ŒåŸŸè®Šæ›´ç‚ºã€Œ%sã€ã€‚ 網路連線 '%s' 所使用的é è¨ç•ŒåŸŸ å®šç¾©é€£æŽ¥åŸ æˆ–é€£æŽ¥åŸ ç¯„åœï¼Œç”±è¼”助器監控。 æ述： 目標 目的地 目標： 直接éˆæ¢ 直接組態 直接通é€è¦å‰‡ 直接è¦å‰‡ 編輯éˆæ¢ 編輯指令列 編輯情境 編輯æ¢ç›® 編輯防ç«ç‰†è¨å®š... 編輯轉é€é€£æŽ¥åŸ 編輯 ICMP é¡žåž‹ 編輯 IPSet ç·¨è¼¯ä»‹é¢ ç·¨è¼¯é€šé€ ç·¨è¼¯é€£æŽ¥åŸ ç·¨è¼¯å”定 編輯è±å¯Œè¦å‰‡ 編輯è¦å‰‡ 編輯æœå‹™ ç·¨è¼¯ä¾†æº ç·¨è¼¯ä½¿ç”¨è€… ID 編輯使用者å稱 編輯界域 å…ƒç´ å…ƒç´ ï¼š 啟用通知 æ¢ç›® IPSet çš„æ¢ç›®ã€‚您åªèƒ½çœ‹åˆ°æœªä½¿ç”¨é€¾æ™‚é¸é …çš„ IPset æ¢ç›®ï¼Œä»¥åŠåŠ å…¥ firewalld çš„æ¢ç›®ã€‚已經é€éŽ ipset æŒ‡ä»¤ç›´æŽ¥åŠ å…¥çš„æ¢ç›®ä¸æœƒåœ¨æ¤åˆ—出。 æ¢ç›® 錯誤 連接 firewalld 失敗。請確定該æœå‹™å·²æ£å¸¸å•Ÿå‹•ï¼Œç„¶å¾Œé‡è©¦ã€‚ 從 NetworkManager å–得連線失敗 無法載入圖示。 讀å–檔案 '%s' 失敗：%s 無法為連線 {connection_name} è¨å®šå€åŸŸ {zone} å®¶åº å®¶åºï¼š 防ç«ç‰† 防ç«ç‰†é¢æ¿ç¨‹å¼ 防ç«ç‰†çµ„æ…‹ FirewallD å·²é‡æ–°è¼‰å…¥ã€‚ 轉é€è‡³å…¶ä»–é€£æŽ¥åŸ è½‰é€è‡³å…¶ä»–系統的功能僅在介é¢ç‚ºå½è£ä¹‹æ™‚æ‰æœƒæœ‰ç”¨ã€‚
您是å¦æƒ³è¦å½è£æ¤ç•ŒåŸŸï¼Ÿ Hashsize： 輔助器 輔助器 ä½ å¯ä»¥åœ¨æ¤è™•å®šç¾©è©²ç•ŒåŸŸä¸æœ‰å“ªäº›æœå‹™å€¼å¾—信任。åªè¦æ¤ç•ŒåŸŸæ‰€ç¶å®šä¹‹é€£ç·šã€ä»‹é¢ã€ä¾†æºçš„主機與網路能觸åŠæœ¬æ©Ÿï¼Œå‰‡çš†å¯å˜å–這些信任的æœå‹™ã€‚ 您å¯ä»¥åœ¨é€™è£¡é¸å–「防禦展開ã€èˆ‡ã€Œé˜²ç¦¦å¸ä¸‹ã€æ‰€è¦ä½¿ç”¨çš„界域。 您å¯ä»¥åœ¨é€™è£¡è¨å®šç•ŒåŸŸçš„è±å¯Œèªžè¨€è¦å‰‡ã€‚ 在界域ä¸éš±è—連線ã€ä»‹é¢åŠä¾†æºçš„使用ä¸åŸ·è¡Œæ™‚期ç¶å®š ICMP éŽæ¿¾å™¨ ICMP é¡žåž‹ ICMP é¡žåž‹ ICMP 類型僅å¯ä»¥åœ¨æ°¸ä¹…組態檢視下更動。ICMP 類型的執行時期組態是固定ä¸è®Šçš„。 IP ä½å€ï¼š IPSet IPSet IPSet åªèƒ½åœ¨æ°¸ä¹…é…置檢視下建立或刪除。 IPv4 IPv4： IPv6 IPv6： Icmp é¡žåž‹ 如果啟用了å轉篩é¸å™¨ï¼Œç³»çµ±æœƒæŽ¥å—已標示的 ICMP é …ç›®ï¼Œä½†æ‹’çµ•å…¶ä»–é …ç›®ã€‚åœ¨ç›®æ¨™ç‚º DROP 的界域ä¸ï¼Œå®ƒå€‘會被丟棄。 如果白åå–®ä¸çš„指令æ¢ç›®æ˜¯ä»¥ç±³å—號「*ã€çµå°¾ï¼Œå‰‡æ‰€æœ‰ä»¥è©²æŒ‡ä»¤åˆ—é–‹é 的任何指令皆會匹é…。如果「*ã€ä¸¦éžçµå°¾ï¼Œå‰‡å¿…é ˆç²¾ç¢ºç¬¦åˆè©²æŒ‡ä»¤èˆ‡ç›¸é—œå¼•æ•¸ã€‚ 若您啟用本地端轉é€ï¼Œæ‚¨å°±å¿…é ˆè¦æŒ‡å®šé€£æŽ¥åŸ ã€‚é€™å€‹é€£æŽ¥åŸ å¿…é ˆå’Œä¾†æºé€£æŽ¥åŸ ä¸åŒã€‚ 若您啟用å½è£ï¼Œå°‡ç‚ºæ‚¨çš„ IPv4 網路啟用 IP 轉é€åŠŸèƒ½ã€‚ 若您指定目標ä½å€ï¼Œæœå‹™æ¢ç›®å°‡é™æ–¼ç›®çš„地ä½å€èˆ‡é¡žåž‹ã€‚若兩æ¢ç›®çš†ç©ºï¼Œå‰‡æ²’有é™åˆ¶ã€‚ 忽略 åˆå§‹é›œæ¹Šå¤§å°ï¼Œé è¨ 1024 ä»‹é¢ ä»‹é¢ ç„¡æ•ˆçš„å稱 å轉篩é¸å™¨ ç‰ç´šï¼š 授權æ¢æ¬¾ 載入 ICMP é¡žåž‹é è¨å€¼ 載入 IPSet é è¨å€¼ 載入æœå‹™é è¨å€¼ 載入界域é è¨å€¼ æœ¬åœ°ç«¯è½‰é€ å°éŽ–管制 å°éŽ–管制白åå–® å°éŽ–管制會鎖上防ç«ç‰†çµ„態，åªæœ‰å°éŽ–管制白åå–®ä¸åˆ—出的應用程å¼å¯ä»¥æ”¹å‹•çµ„態。 å°éŽ–管制： 已拒絕的日誌 記錄： 使 runtime é…置永久化 標記 將清單ä¸æ‡‰è¢«æ‹’絕的 ICMP 類型標記起來。其他所有 ICMP 則å…許通éŽé˜²ç«ç‰†ã€‚é è¨å€¼ç‚ºç„¡é™åˆ¶ã€‚ 標記： é®ç½©ï¼š å½è£ç•ŒåŸŸ å½è£ å½è£å¯è®“您è¨ç½®å€‹èƒ½è®“您本本地端網路連至網際網路的主機或路由器。您的本地端網路ä¸æœƒè¢«çœ‹è¦‹ï¼Œä¸”眾主機在網際網路上會顯示æˆå–®ä¸€ä½å€ã€‚å½è£åŠŸèƒ½åƒ…é©ç”¨æ–¼ IPv4。 å…ƒç´ æœ€å¤§æ•¸ï¼Œé è¨ 65536 Maxelem： 自動輔助器： 已拒絕的日誌： 模組： 模組 å稱已經å˜åœ¨ å稱： 有些æœå‹™å¿…é ˆæœ‰ Netfilter 輔助器模組。 網路交通已ä¸å†å°éŽ–。 無使用ä¸ç•ŒåŸŸã€‚ ç„¡å¯ç”¨çš„ NetworkManager 匯入 未有連接防ç«ç‰†å¹•å¾Œç¨‹å¼çš„連線 其他模組： 其他å”定： ææ…Œæ¨¡å¼ æ慌模å¼ï¼š æ慌模å¼ä»£è¡¨æ‰€æœ‰é€£å…¥èˆ‡å‚³å‡ºå°åŒ…都會直接丟棄。 é€šé€ æ°¸ä¹… 使用通é€è¦å‰‡æ™‚請務必å°å¿ƒä»¥å…æ壞防ç«ç‰†ã€‚ 請調整基礎 ICMP é¡žåž‹è¨å®šï¼š è«‹è¨å®šåŸºç¤Žè¼”助器è¨å®šå€¼ï¼š 請調整基礎 IPSet è¨å®šå€¼çµ„態： è«‹è¨å®šåŸºç¤Žæœå‹™è¨å®šï¼š è«‹è¨å®šåŸºç¤Žç•ŒåŸŸè¨å®šï¼š 請輸入標記與é¸ç”¨çš„é®ç½©ã€‚ è«‹è¼¸å…¥é€£æŽ¥åŸ èˆ‡å”定。 請輸入å”定。 請輸入è±å¯Œè¦å‰‡ã€‚ 請輸入來æºã€‚ 請輸入介é¢å稱： 請輸入 ipset é …ç›®ï¼š è«‹å¾žæ ¼å¼ä½å€ï¼ˆæˆ–é®ç½©ï¼‰è¼¸å…¥ IPV4 ä½å€ è«‹å¾žæ ¼å¼ä½å€ï¼ˆæˆ–é®ç½©ï¼‰è¼¸å…¥ IPV4 或 IPV6 ä½å€ã€‚ è«‹å¾žæ ¼å¼ä½å€ï¼ˆæˆ–é®ç½©ï¼‰è¼¸å…¥ IPV6 ä½å€ 請輸入指令列。 請輸入情境。 請輸入使用者 ID。 請輸入使用者å稱。 è«‹é¸æ“‡ä¸€å€‹æª”案 è«‹é¸å–輔助器： è«‹é¸å– netfilter 連接追蹤輔助器： è«‹é¸å–æœå‹™ã€‚ è«‹é¸å– ICMP é¡žåž‹ è«‹é¸å– IPset： 請從下列清單ä¸é¸å–é è¨ç•ŒåŸŸã€‚ è«‹é¸å– ipv 並輸入引數。 è«‹é¸å– ipv èˆ‡è¡¨æ ¼ï¼Œä¸¦è¼¸å…¥éˆæ¢å稱 è«‹é¸å– ipv èˆ‡è¡¨æ ¼ã€éˆæ¢å„ªå…ˆç‰ç´šï¼Œä¸¦è¼¸å…¥å¼•æ•¸ã€‚ è«‹é¸å–自動輔助器之值： è«‹é¸æ“‡å·²æ‹’絕的日誌值： è«‹æ ¹æ“šæ‚¨çš„éœ€æ±‚é¸æ“‡ä¾†æºä»¥åŠç›®çš„地é¸é …。 é€£æŽ¥åŸ é€£æŽ¥åŸ / é€£æŽ¥åŸ ç¯„åœï¼š é€£æŽ¥åŸ è½‰é€ é€£æŽ¥åŸ èˆ‡é€šè¨Šå”定 é€£æŽ¥åŸ å‰ç¶´ï¼š 優先程度 優先ç‰ç´šï¼š å”定 通訊å”定： å”定 é‡æ–°è¼‰å…¥ Firewalld é‡æ–°è¼‰å…¥é˜²ç«ç‰†è¦å‰‡ã€‚ç›®å‰çš„永久組態會變æˆæ–°çš„執行時期組態。舉例，所有的執行時期下的變動直到é‡æ–°è¼‰å…¥å‰éƒ½æœƒæœ‰æ•ˆï¼šåªè¦æ”¹è®Šä¸æ˜¯è¨åœ¨æ°¸ä¹…組態ä¸ï¼Œé‚£éº¼ä¸€æ—¦é‡æ–°è¼‰å…¥å¾Œæ‰€æœ‰æ”¹å‹•éƒ½æœƒæ¶ˆå¤±ã€‚ 移除 ç§»é™¤æ‰€æœ‰é …ç›® 移除éˆæ¢ 移除指令列 移除情境 從檔案ä¸ç§»é™¤é …ç›® 移除æ¢ç›® 移除轉é€é€£æŽ¥åŸ 移除 ICMP é¡žåž‹ 移除 IPSet ç§»é™¤ä»‹é¢ ç§»é™¤é€šé€ ç§»é™¤é€£æŽ¥åŸ ç§»é™¤å”定 移除è±å¯Œè¦å‰‡ 移除è¦å‰‡ 移除é¸æ“‡çš„é …ç›® 移除æœå‹™ ç§»é™¤ä¾†æº ç§»é™¤ä½¿ç”¨è€… ID 移除使用者å稱 移除界域 é‡è¨å›žé è¨å€¼ è±å¯Œè¦å‰‡ è±å¯Œè¦å‰‡ è¦å‰‡ 執行時期 使 Runtime 永久化 é¸å–「%sã€é€£ç·šçš„界域 é¸å–「%sã€ä»‹é¢çš„界域 é¸å– %s 來æºçš„界域 é¸å–「%sã€ä¾†æºçš„界域 æœå‹™ æœå‹™ æœå‹™åƒ…å¯ä»¥åœ¨æ°¸ä¹…組態檢視下更動。æœå‹™çš„執行時期組態是固定ä¸è®Šçš„。 防禦å¸ä¸‹ç•ŒåŸŸï¼š 防禦展開 防禦展開界域： ç°¡çŸï¼š 在界域ä¸é¡¯ç¤ºé€£ç·šã€ä»‹é¢åŠä¾†æºçš„使用ä¸åŸ·è¡Œæ™‚期ç¶å®š ä¾†æº ä¾†æºé€£æŽ¥åŸ 來æºé€£æŽ¥åŸ 來æºï¼š ä¾†æº æŒ‡æ˜Žæ¤ ICMP 類型在 IPv4 與/或 IPv6 ä¸æ˜¯å¦å¯ç”¨ã€‚ ä¾†æº è¡¨ è¡¨æ ¼ï¼š 目標： æ–‡å—檔案 網際網路控制訊æ¯é€šè¨Šå”定 (Internet Control Message Protocol, ICMP) 主è¦ç”¨åœ¨é€£ç¶²é›»è…¦é–“錯誤訊æ¯çš„傳é€ï¼Œä¸éŽä¹Ÿèƒ½è¢«ç”¨ä¾†å‚³é€åƒæ˜¯ ping 請求和回應的資訊訊æ¯ã€‚ 情境是指執行ä¸æ‡‰ç”¨ç¨‹å¼æˆ–æœå‹™çš„安全情境 (SELinux 情境)。若è¦å–得執行ä¸æ‡‰ç”¨ç¨‹å¼çš„情境，請使用指令 ps -e --context。 直接組態讓您å¯ä»¥æ›´ç›´æŽ¥åœ°å˜å–防ç«ç‰†ã€‚這些é¸é …需è¦ä½¿ç”¨è€…知曉基礎的 iptables æ¦‚å¿µï¼Œä¾‹å¦‚è¡¨æ ¼ã€éˆæ¢ã€æŒ‡ä»¤ã€åƒæ•¸ã€ç›®æ¨™ç‰ã€‚直接組態應該謹以「最後的é¿é¢¨æ¸¯ã€çš„心態å°å¾…，åªåœ¨ç„¡æ³•ä½¿ç”¨å…¶ä»– firewalld 功能時æ‰ä½¿ç”¨ã€‚ æ¯å€‹é¸é …çš„ ipv å¼•æ•¸å¿…é ˆæ˜¯ ipv4 或 ipv6 或 eb。ipv4 用於 iptables，ipv6 用於 ip6tables，而 eb 用於乙太網路接橋 (ebtables)。 å°éŽ–管制功能是 firewalld 其使用者與應用程å¼æ–¹é‡çš„輕é‡ç‰ˆã€‚它會é™åˆ¶é˜²ç«ç‰†çš„更動。å°éŽ–管制白åå–®å¯ä»¥åŒ…å«æŒ‡ä»¤ã€æƒ…境ã€ä½¿ç”¨è€…與使用者 ID。 標記與é®ç½©æ¬„ä½éƒ½æ˜¯ 32 ä½å…ƒå¯¬çš„ç„¡æ£è² 號數å—。 IPv4 é®ç½©å¯ä»¥æ˜¯ç¶²è·¯é®ç½©æˆ–數å—。
IPv6 é®ç½©æ˜¯æ•¸å—。 é®ç½©å¯ä»¥æ˜¯ç¶²è·¯é®ç½©æˆ–數å—。 é®ç½©ç‚ºæ•¸å—。 通é€è¦å‰‡æœƒç›´æŽ¥å‚³éžçµ¦é˜²ç«ç‰†ï¼Œè€Œä¸æœƒæ”¾å…¥ç‰¹æ®Šéˆæ¢ä¸ã€‚所有的 iptablsã€ip6tables 與 ebtables é¸é …皆å¯ä½¿ç”¨ã€‚ 優先ç‰ç´šç”¨ä¾†æŽ’åºè¦å‰‡ã€‚優先ç‰ç´š 0 代表將è¦å‰‡åŠ 到éˆæ¢é ‚端；優先ç‰ç´šæ•¸å—越高，è¦å‰‡æœƒè¶Šå¾€å¾Œæ“ºæ”¾ã€‚相åŒå„ªå…ˆç‰ç´šçš„è¦å‰‡ä½åœ¨åŒå€‹ç‰ç´šä¸ï¼Œè€Œé€™äº›è¦å‰‡çš„é †åºä¸¦éžå›ºå®šè€Œå¯èƒ½è®Šå‹•ã€‚如果您想è¦ç¢ºä¿æŸè¦å‰‡åœ¨æŸå€‹è¦å‰‡ä¹‹å¾Œæ‰åŠ 入，å‰è€…請使用較低的優先ç‰ç´šï¼Œå¾Œè€…請使用較高的優先ç‰ç´šã€‚ 這 IPSet ä½¿ç”¨é€¾æ™‚å€¼ï¼Œå› æ¤æ¤è™•çœ‹ä¸åˆ°ä»»ä½•æ¢ç›®ã€‚這些æ¢ç›®æ‡‰è©²ç›´æŽ¥é€éŽ ipset 指令來處ç†ã€‚ æ¤åŠŸèƒ½å°æ–¼å¤§å¤šæ•¸ä½¿ç”¨é è¨ç•ŒåŸŸçš„人來說很有用處。至於更改連線的界域之使用者，這å¯èƒ½ç”¨è™•ä¸å¤§ã€‚ 時é™å€¼ï¼Œå–®ä½ç‚ºç§’ 時é™ï¼š 至ä½å€ è‡³é€£æŽ¥åŸ è¦å•Ÿç”¨æ¤åŠŸèƒ½ï¼Œã€Œå‹•ä½œã€å¿…é ˆæ˜¯ã€Œæ‹’çµ•ã€è€Œã€Œå®¶æ—ã€å¿…é ˆæ˜¯ã€Œipv4ã€æˆ–「ipv6ã€ï¼ˆè€Œéžå…©è€…）。 æ£åœ¨å˜—試連上 firewalld，ç‰å¾…ä¸... 類型： 由「%sã€ç¶²è·¯é€£ç·šä½¿ç”¨ 使用者 ID 使用者 ID 使用者 ID 使用者 ID。 使用者å稱 使用者å稱 使用者å稱。 版本： è¦å‘Š 有é™åˆ¶ï¼š 界域 界域「%sã€å·²å•Ÿå‹•ï¼šä»‹é¢ã€Œ%s〠界域「%sã€å·²å•Ÿå‹•ï¼šä¾†æºã€Œ%s〠界域「%sã€ï¼šICMP 類型「%sã€ç„¡æ³•ä½¿ç”¨ã€‚ 界域「%sã€ï¼šæœå‹™ã€Œ%sã€ç„¡æ³•ä½¿ç”¨ã€‚ 界域「{zone}ã€ä½¿ç”¨ä¸ï¼šé€£ç·šã€Œ{connection}ã€ï¼Œä»‹é¢ã€Œ{interface}〠界域「{zone}ã€ä½¿ç”¨ä¸ï¼šä»‹é¢ã€Œ{interface}〠界域「{zone}ã€ä½¿ç”¨ä¸ï¼šä¾†æº {source} 界域「{zone}ã€{activated_deactivated}：連線「{connection}ã€ï¼Œä»‹é¢ã€Œ{interface}〠界域「{zone}ã€{activated_deactivated}：介é¢ã€Œ{interface}〠界域「{zone}ã€{activated_deactivated}：來æºã€Œ{source}〠界域：%s 界域 檔案(_F) 求助(_H) é¸é …(_O) 檢視(_V) æŽ¥å— å·²å•Ÿå‹• è¦ç¤º åš´é‡ æ—¥ å·²åœæ¢ 除錯 å·²åœç”¨ ä¸Ÿè½ eb 緊急 已啟用 錯誤 防ç«ç‰†;網路;安全性;iptables;netfilter; forward-port å°æ™‚ icmp-block icmp-type 資訊 å轉 ipv4 ipv4 與 ipv6 ipv6 ipv： 標籤 ç‰ç´š é™åˆ¶ 記錄 標記 å½è£ åˆ†é˜ nat æ³¨æ„ æŽ¥åŸ å”定 原始 拒絕 秒 安全性 æœå‹™ source-port è¦å‘Š æ¤é¡žåž‹ï¼š 是 {entry} (é è¨ç•ŒåŸŸï¼š{default_zone}) {entry} (界域：{zone})