If you want to use this module to manage your IPtables firewall, click the button below to convert the existing rules to a save file, and then disable your existing firewall script. index_saveex=Save Firewall Rules index_atboot=Enable firewall at boot time? index_headerex=Existing firewall configuration index_bootup=Activate at boot index_bootupdesc=Change this option to control whether your firewall is activated at boot time or not. index_return=rules list index_setup=No IPtables firewall has been setup yet on your system. Webmin can set one up for you, to be stored in the save file $1, with the initial settings based your selection of firewall type below.. index_rsetup=The IPtables firewall configuration on your system is about to be re-set. Webmin will set up new default rules, to be stored in the save file $1, with the initial settings based your selection of firewall type below.. index_auto0=Allow all traffic index_auto1=Do network address translation on external interface: index_auto2=Block all incoming connections on external interface: index_auto3=Block all except SSH and IDENT on external interface: index_auto4=Block all except SSH, IDENT, ping and high ports on interface: index_auto5=Block all except ports used for virtual hosting, on interface: index_auto=Setup Firewall index_add=Add index_shorewall=Warning! It appears that Shorewall is being used to generate your system's firewall. Maybe you should use the Shorewall Firewall module instead. index_reset=Reset Firewall index_resetdesc=Click this button to clear all existing firewall rules and set up new rules for a basic initial configuration. index_cluster=Cluster Servers index_clusterdesc=Click this button to set up additional Webmin servers to which the firewall configuration will be automatically copied. desc_p=protocol is $1 desc_p!=protocol is not $1 desc_s=source is $1 desc_s!=source is not $1 desc_d=destination is $1 desc_d!=destination is not $1 desc_i=input interface is $1 desc_i!=input interface is not $1 desc_o=output interface is $1 desc_o!=output interface is not $1 desc_f=packet is a fragment desc_f!=packet is not a fragment desc_sport=source port is $1 desc_sport!=source port is not $1 desc_dport=destination port is $1 desc_dport!=destination port is not $1 desc_sports=source ports are $1 desc_sports!=source ports are not $1 desc_dports=destination ports are $1 desc_dports!=destination ports are not $1 desc_tcp-flags=TCP flags $2 (of $1) are set desc_tcp-flags!=TCP flags $2 (of $1) are not set desc_tcp-option=packet uses TCP option $1 desc_tcp-option!=packet does not use TCP option $1 desc_icmp-type=ICMP type is $1 desc_icmp-type!=ICMP type is not $1 desc_mac-source=ethernet address is $1 desc_mac-source!=ethernet address is not $1 desc_limit=rate is less than $1 desc_limit!=rate is more than $1 desc_limit-burst=burst rate is less than $1 desc_limit-burst!=burst rate is more than $1 desc_ports=source and destination ports are $1 desc_ports!=source and destination ports are not $1 desc_uid-owner=sender is user $1 desc_uid-owner!=sender is not user $1 desc_gid-owner=sender is group $1 desc_gid-owner!=sender is not group $1 desc_pid-owner=process ID of sender is $1 desc_pid-owner!=process ID of sender is not $1 desc_sid-owner=session group of sender is $1 desc_sid-owner!=session group of sender is not $1 desc_state=state of connection is $1 desc_state!=state of connection is not $1 desc_tos=type of service field is $1 desc_tos!=type of service field is not $1 desc_physdev-in=input physical interface is $1 desc_physdev-in!=input physical interface is not $1 desc_physdev-out=output physical interface is $1 desc_physdev-out!=output physical interface is not $1 desc_conds=If $1 desc_and=and desc_always=Always redhat_eoutput=An error occured getting IPtables status from the command $1. This probably indicates that your system has been configured to use IPchains instead of IPtables. gentoo_escript=The Gentoo IPtables startup script $1 was not found on your system. edit_title1=Add Rule edit_title2=Edit Rule edit_title3=Clone Rule edit_header1=Chain and action details edit_chain=Part of chain edit_cmt=Rule comment edit_jump=Action to take edit_jump_other=Run chain edit_header2=Condition details edit_desc=The action selected above will only be carried out if all the conditions below are met. edit_source=Source address or network edit_ignore=Ignored edit_is=Equals edit_not=Does not equal edit_dest=Destination address or network edit_in=Incoming interface edit_out=Outgoing interface edit_frag=Fragmentation edit_fragis=Is fragmented edit_fragnot=Is not fragmented edit_proto=Network protocol edit_sport=Source TCP or UDP port edit_dport=Destination TCP or UDP port edit_port0=Port(s) edit_port1=Port range $1 to $2 edit_ports=Source and destination port(s) edit_tcpflags=TCP flags set edit_flags=$2 out of $1 edit_tcpoption=TCP option number is set edit_icmptype=ICMP packet type edit_mac=Ethernet address edit_limit=Packet flow rate edit_below=Below edit_above=Above edit_limitburst=Packet burst rate edit_uidowner=Sending unix user edit_gidowner=Sending unix group edit_pidowner=Sending process ID edit_sidowner=Sending process group edit_state=Connection states edit_state_new=New connection edit_state_established=Existing connection edit_state_related=Related to existing edit_state_invalid=Not part of any connection edit_state_untracked=Not tracked edit_tos=Type of service edit_rtoports=Target ports for redirect edit_prange=Port range $1 to $2 edit_mtoports=Source ports for masquerading edit_dnat=IPs and ports for DNAT edit_dnatip=IP range $1 to $2 edit_snat=IPs and ports for SNAT edit_any=Any edit_oifc=Other.. edit_clone=Clone rule edit_before=Before rule $1 edit_after=After rule $1 edit_args=Additional parameters edit_mods=Additional IPtables modules edit_rwith=Reject with ICMP type edit_rwithtype=Type $1 edit_physdevin=Incoming physical interface edit_physdevout=Outgoing physical interface edit_physdevisin=Packet incoming on bridge interface edit_physdevisout=Packet outgoing on bridge interface edit_physdevisbridged=Packet is being bridged save_err=Failed to save rule save_echain=Missing or invalid chain to run save_esource=Missing or invalid source address or network save_edest=Missing or invalid destination address or network save_ein=Missing or invalid incoming interface save_eout=Missing or invalid outgoing interface save_eproto=No protocol selected save_esport=Missing or invalid source port(s) save_esportfrom=Invalid range start for source ports save_esportto=Invalid range end for source ports save_esportrange=You must enter at least a start or end for the source port range save_etcpudp=Source and destination port conditions can only be used if the protocol is TCP, UDP or SCTP save_edport=Missing or invalid destination port(s) save_edportfrom=Invalid range start for destination ports save_edportto=Invalid range end for destination ports save_edportrange=You must enter at least a start or end for the destination port range save_eports=Missing or invalid source and destination port(s) save_etcp1=The TCP flags condition can only be used if the protocol is TCP save_etcpflags=You must select at least one TCP flag from each row save_etcpflags2=You must select at least one TCP flag from the second row save_etcp2=The TCP option number condition can only be used if the protocol is TCP save_etcpoption=Missing or invalid TCP option number save_eicmp=The ICMP packet type condition can only be used if the protocol is ICMP save_emac=Missing or invalid ethernet address save_elimit=Missing or invalid packet flow rate save_elimitburst=Missing or invalid packet burst rate save_euidowner=Missing or invalid sending unix user save_egidowner=Missing or invalid sending unix group save_epidowner=Missing or invalid sending process ID save_esidowner=Missing or invalid sending process group ID save_ertoports=Missing or invalid redirect target port save_emtoports=Missing or invalid masquerade source port save_edipfrom=Missing or invalid starting IP address for DNAT save_edipto=Invalid ending IP address for DNAT save_edpfrom=Invalid starting port for DNAT save_edpto=Missing or invalid ending port for DNAT save_esipfrom=Missing or invalid starting IP address for SNAT save_esipto=Invalid ending IP address for SNAT save_espfrom=Invalid starting port for SNAT save_espto=Missing or invalid ending port for SNAT save_estates=No connection states selected save_ecanjump=You are not allowed to use this action save_ephysdevin=Missing or invalid incoming physical interface save_ephysdevout=Missing or invalid outgoing physical interface delete_title=Delete Chain delete_rusure=Are you sure you want to delete the chain $1 ? $2 rules within it will be deleted. delete_ok=Delete Now delete_ecannot=You are not allowed to delete chains clear_title=Clear Chain clear_rusure=Are you sure you want to delete all $2 rules from chain $1 ? clear_ecannot=You are not allowed to clear chains new_err=Failed to create chain new_ename=Missing or invalid chain name new_etaken=A chain with this name already exists new_ecannot=You are not allowed to create chains apply_err=Failed to apply configuration apply_ecannot=You are not allowed to apply the configuration apply_remote=Error from $1 : $2 unapply_err=Failed to revert configuration unapply_ecannot=You are not allowed to revert the configuration bootup_ecannot=You are not allowed to enable or disable the firewall at bootup log_create_rule=Added rule to chain $1 in table $2 log_modify_rule=Modified rule in chain $1 in table $2 log_delete_rule=Deleted rule in chain $1 in table $2 log_move_rule=Moved rule in chain $1 in table $2 log_delete_chain=Deleted chain $1 from table $2 log_rename_chain=Renamed chain $1 in table $2 log_clear_chain=Cleared chain $1 in table $2 log_create_chain=Created chain $1 in table $2 log_modify_chain=Set default action for chain $1 in table $2 log_delsel_chain=Deleted $3 rules from chain $1 in table $2 log_movesel_chain=Moved $3 rules from chain $1 in table $2 log_apply=Applied configuration log_unapply=Reverted configuration log_setup=Set up firewall log_convert=Converted existing firewall log_bootup=Enabled firewall at boot time log_bootdown=Disabled firewall at boot time log_add_host=Added cluster server $1 log_add_group=Added cluster servers from group $1 log_delete_host=Removed cluster server $1 log_delete_group=Removed $1 cluster servers log_openports=Opened firewall ports $1 setup_eiface=No external network interface entered setup_ecannot=You are not allowed to setup the firewall acl_tables=Allowed IPtables acl_apply=Can apply configuration? acl_unapply=Can un-apply configuration? acl_bootup=Can enable firewall at boot? acl_setup=Can perform initial firewall setup? acl_cluster=Can manage firewall cluster? acl_jumps=Allowed actions acl_jall=All acl_newchain=Can create new chains? acl_delchain=Can delete or clear chains? acl_policy=Can change default policy? etable=You are not allowed to edit this IPtable ejump=You are not allowed to edit this rule ecluster=You are not allowed to manage the firewall cluster cluster_title=Cluster Firewall Servers cluster_none=No servers have been added to the firewall cluster yet. cluster_host=Hostname cluster_desc=Description cluster_os=Operating system cluster_add=Add server cluster_gadd=Add servers in group cluster_need=You must add servers with a login and password in the Webmin Servers Index module before they can be managed here. cluster_return=cluster servers cluster_delete=Remove Selected add_title=Add Servers add_msg=Adding $1 .. add_gmsg=Adding servers in group $1 .. add_err=Failed to add server add_gerr=Failed to add group add_echeck=Server $1 does not have the Linux Firewall module add_emissing=Server $1 is missing the firewall command $2 add_ok=Added $1, with $2 active firewall rules. policy_ecannot=You are not allowed to change the default policy for this chain move_title=Move Rules move_count=Rules selected move_chain=Current change move_dest=Destination chain move_ok=Move Now move_header=Rule move options rename_title=Rename Chain rename_count=Rules in chain rename_chain=Current name rename_name=New name rename_ok=Rename Now rename_header=Chain rename options rename_adjust=Modify other rules that jump to this chain? rename_none=None rename_ecannot=You are not allowed to rename chains