#
# Yangfl <mmyangfl@gmail.com>, 2018.
#
msgid ""
msgstr ""
"Content-Type: text/plain; charset=UTF-8\n"
"Last-Translator: Yangfl <mmyangfl@gmail.com>\n"
"Language-Team:  <debian-l10n-chinese@lists.debian.org>\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=1; plural=0;\n"
"PO-Revision-Date: 2018-08-07 19:09+0800\n"
"X-Generator: Gtranslator 2.91.7\n"

msgid ""
"Allow SPA clients to request access to services through an iptables firewall "
"instead of just to it."
msgstr "允许 SPA 客户端请求通过 iptables 防火墙访问服务，而不仅仅是被拦截。"

msgid "Allow SPA clients to request forwarding destination by DNS name."
msgstr "允许 SPA 客户端用 DNS 名称请求转发目标。"

msgid "Base 64 key"
msgstr "Base64 密钥"

msgid ""
"Define a set of ports and protocols (tcp or udp) that will be opened if a "
"valid knock sequence is seen. If this entry is not set, fwknopd will attempt "
"to honor any proto/port request specified in the SPA data (unless of it "
"matches any “RESTRICT_PORTS” entries). Multiple entries are comma-separated."
msgstr ""
"定义一组端口和协议（TCP 或 UDP），如果看到有效的敲门（knock）序列，则打开这些"
"端口和协议。如果未设置此条目，fwknopd 将尝试遵守 SPA 数据中指定的任何协议/端"
"口请求（除非匹配到了任何“RESTRICT_PORTS”条目）。多个条目以逗号分隔。"

msgid ""
"Define the length of time access will be granted by fwknopd through the "
"firewall after a valid knock sequence from a source IP address. If "
"“FW_ACCESS_TIMEOUT” is not set then the default timeout of 30 seconds will "
"automatically be set."
msgstr ""
"定义在源 IP 地址的有效敲门序列后，fwknopd 授予其通过防火墙访问的时间长度。如"
"果未设置“FW_ACCESS_TIMEOUT”，则将自动设置默认超时 30 秒。"

msgid ""
"Define the symmetric key used for decrypting an incoming SPA packet that is "
"encrypted by the fwknop client with Rijndael."
msgstr ""
"定义 Rijndael 对称密钥，将用于解密由 fwknop 客户端传入的加密 SPA 数据包。"

msgid "Enable Uci/Luci control"
msgstr "启用 Uci/Luci 控件"

msgid "Enable config overwrite"
msgstr "启用配置覆盖"

msgid "Firewall Knock Daemon"
msgstr "Firewall Knock 守护进程"

msgid "Firewall Knock Operator"
msgstr "Firewall Knock 操作者"

msgid ""
"Force all SPA packets to contain a real IP address within the encrypted "
"data. This makes it impossible to use the -s command line argument on the "
"fwknop client command line, so either -R has to be used to automatically "
"resolve the external address (if the client behind a NAT) or the client must "
"know the external IP and set it via the -a argument."
msgstr ""
"强制所有 SPA 数据包在加密数据中包含真实 IP 地址。这使得无法在 fwknop 客户端命"
"令行上使用 -s 命令行参数，因此 -R 必须用于自动解析外部地址（如果 NAT 后面的客"
"户端），或客户端必须通过 -a 参数知道外部 IP。"

msgid ""
"Maximum age in seconds that an SPA packet will be accepted. defaults to 120 "
"seconds"
msgstr "SPA 数据包的最大可接受年龄（秒）。默认为 120 秒"

msgid "Normal Key"
msgstr "普通密钥"

msgid "Specify the ethernet interface on which fwknopd will sniff packets."
msgstr "指定 fwknopd 将要嗅探数据包的以太网接口。"

msgid "The base64 hmac key"
msgstr "base64 hmac 密钥"

msgid "Use ANY for any source ip"
msgstr "对任何源 IP 使用 ANY"

msgid ""
"When unchecked, the config files in /etc/fwknopd will be used as is, "
"ignoring any settings here."
msgstr ""
"取消选中时，/etc/fwknopd 中的配置文件将按原样使用，忽略此处的任何设置。"

msgid "access.conf stanzas"
msgstr "access.conf 节"

msgid "fwknopd.conf config options"
msgstr "fwknopd.conf 配置选项"
