323 lines
18 KiB
PHP
323 lines
18 KiB
PHP
<?php
|
|
// Copyright 1999-2025. Plesk International GmbH. All rights reserved.
|
|
|
|
$messages = [
|
|
'title' => 'Firewall',
|
|
'backendNotAvailable' => 'Install the iptables package from your OS vendor to use the firewall module.',
|
|
'protocolsNotSupported' => "The iptables binaries do not support all required protocols (e.g., TCP, UDP, ICMP, ICMPv6), and the system failed to load the corresponding kernel modules. You may need to reboot with a newer kernel or manually install the missing modules.",
|
|
'permissionDenied' => 'Permission denied',
|
|
'noConfiguration' => 'Could not generate a shell script to apply your configuration.',
|
|
'unknownAction' => 'Unknown action',
|
|
'execError' => 'Execution error',
|
|
'notConfirmed' => 'Could not confirm the firewall rules. An unexpected "Activate firewall configuration" task may be running. You can check for the presence of such tasks in Task Manager.',
|
|
|
|
'actionLog' => [
|
|
'enabled' => 'Firewall enabled/disabled',
|
|
'activated' => 'Firewall rules activated',
|
|
],
|
|
|
|
'button' => [
|
|
'title' => 'Firewall',
|
|
'description' => 'Set up firewall.',
|
|
],
|
|
|
|
'permissionManageFirewall' => 'Firewall',
|
|
|
|
'swapRules' => [
|
|
'sameRules' => 'Swapping requires two different rules',
|
|
'notCustom' => 'Only custom rules can be swapped',
|
|
'notEditable' => 'One or both rules do not belong to the editable configuration',
|
|
'differentChains' => 'Cannot swap rules belonging to different chains',
|
|
],
|
|
|
|
'copyConfiguration' => [
|
|
'invalidConfiguration' => 'An invalid configuration number was specified.',
|
|
],
|
|
|
|
'addRule' => [
|
|
'missingProperty' => 'One or more of the required firewall rule properties is missing.',
|
|
'unknownDirection' => 'Unknown direction: %%direction%%',
|
|
'unknownAction' => 'Unknown action: %%action%%',
|
|
],
|
|
|
|
'ruleNotFound' => 'The rule was not found.',
|
|
'ruleNotEditable' => 'The rule does not belong to the editable configuration.',
|
|
|
|
'remoteAccessRule' => "[SET][%%time%%] Allow remote access for the database user '%%userName%%' of the customer '%%customerName%%'",
|
|
|
|
'notification' => [
|
|
'title' => 'Rules are waiting for your approval',
|
|
'subject' => 'Remote access rules for database users were modified and are waiting for your approval.',
|
|
'message' => 'Please go to Firewall Settings to review and confirm the rules.',
|
|
'action' => 'Open Firewall'
|
|
],
|
|
|
|
'app' => [
|
|
'enable' => 'Firewall protection',
|
|
'rules' => 'Firewall Rules',
|
|
'editServiceRule' => 'Service: %%name%%',
|
|
'columnAction' => 'Action',
|
|
'columnName' => 'Name',
|
|
'columnDescription' => 'Description',
|
|
'service' => [
|
|
'dns' => 'Domain name server',
|
|
'ftp' => 'FTP server',
|
|
'imap' => 'IMAP (mail retrieval) server',
|
|
'mysql' => 'MySQL server',
|
|
'ping' => 'Ping service',
|
|
'neighbor_disc' => 'IPv6 Neighbor Discovery',
|
|
'plesk' => 'Plesk administrative interface',
|
|
'plesk_http3' => 'Plesk administrative interface using HTTP/3',
|
|
'autoinstaller' => 'Plesk Installer',
|
|
'pop3' => 'POP3 (mail retrieval) server',
|
|
'poppassd' => 'Mail password change service',
|
|
'postgresql' => 'PostgreSQL server',
|
|
'samba' => 'Samba (file sharing in Windows networks)',
|
|
'smtp' => 'SMTP (mail sending) server',
|
|
'smtp_submission' => 'SMTP (submission port) server',
|
|
'ssh' => 'SSH (secure shell) server',
|
|
'www' => 'WWW server',
|
|
'www_http3' => 'WWW server using HTTP/3',
|
|
'ftp_passive' => 'FTP server passive ports',
|
|
'dhcp' => 'DHCP client',
|
|
'custom' => 'Custom service',
|
|
],
|
|
'catchall' => [
|
|
'forward' => 'System policy for traffic forwarding',
|
|
'input' => 'System policy for incoming traffic',
|
|
'output' => 'System policy for outgoing traffic',
|
|
],
|
|
'unknownRule' => 'Unknown',
|
|
'hint' => [
|
|
'catchall' => 'The system policy controls all connections that are not explicitly allowed or denied by the above rules.',
|
|
'custom' => 'This custom rule controls connections in accordance with the user-defined settings.',
|
|
'service' => [
|
|
'dns' => 'This rule controls access to the domain name server on this host.',
|
|
'ftp' => 'This rule controls access to the FTP server on this host.',
|
|
'imap' => 'This rule controls access to the IMAP (mail retrieval) server on this host.',
|
|
'mysql' => 'This rule controls access to the MySQL server on this host.',
|
|
'samba' => 'This rule controls access to the resources shared on the server.',
|
|
'ping' => 'This rule controls which other computers may ping this host.',
|
|
'plesk' => 'This rule controls access to the Plesk administrative interface on this host.',
|
|
'plesk_http3' => 'This rule controls access to the Plesk administrative interface using HTTP/3 on this host.',
|
|
'pop3' => 'This rule controls access to the POP3 (mail retrieval) server on this host.',
|
|
'poppassd' => 'This rule controls access to the Mail password change service on this host.',
|
|
'postgresql' => 'This rule controls access to the PostgreSQL server on this host.',
|
|
'smtp' => 'This rule controls access to the SMTP (mail sending) server on this host.',
|
|
'smtp_submission' => 'This rule controls access to the SMTP Submission on this host.',
|
|
'ssh' => 'This rule controls access to the SSH (secure shell) server on this host.',
|
|
'www' => 'This rule controls access to the WWW server on this host.',
|
|
'www_http3' => 'This rule controls access to the WWW server using HTTP/3 on this host.',
|
|
'neighbor_disc' => 'This rule controls access to the IPv6 Neighbor Discovery on this host.',
|
|
'autoinstaller' => 'This rule controls access to the Plesk Installer on this host.',
|
|
'ftp_passive' => 'This rule controls access to the FTP server passive ports on this host.',
|
|
'dhcp' => 'This rule controls access to the DHCP client on this host.',
|
|
'custom' => 'This rule controls access to the custom service on this host.',
|
|
]
|
|
],
|
|
'description' => [
|
|
'custom' => [
|
|
'forward' => '%%action%% forwarding from %%from%% to %%to%% on %%ports%%',
|
|
'input' => '%%action%% incoming from %%from%% on %%ports%%',
|
|
'output' => '%%action%% outgoing to %%to%% on %%ports%%',
|
|
],
|
|
'service' => [
|
|
'forward' => '%%action%% forwarding from %%from%% to %%to%%',
|
|
'input' => '%%action%% incoming from %%from%%',
|
|
'output' => '%%action%% outgoing to %%to%%',
|
|
],
|
|
'catchall' => [
|
|
'forward' => '%%action%% forwarding of all other traffic',
|
|
'input' => '%%action%% all other incoming traffic',
|
|
'output' => '%%action%% all other outgoing traffic',
|
|
],
|
|
],
|
|
'fromAll' => 'all',
|
|
'toAll' => 'all',
|
|
'port' => 'port %%ports%%',
|
|
'ports' => 'ports %%ports%%',
|
|
'allPorts' => 'all ports',
|
|
'denyFromOther' => 'Deny incoming from all others',
|
|
'action' => [
|
|
'allow' => 'Allow',
|
|
'deny' => 'Deny',
|
|
'custom' => 'Allow',
|
|
],
|
|
'toolbar' => [
|
|
'toolbarGroupActions' => 'Actions',
|
|
'search' => 'Search...',
|
|
'groupAdd' => 'Add',
|
|
'buttonAdd' => 'Add Rule',
|
|
'buttonAddHint' => 'Add a firewall rule',
|
|
'groupActions' => 'Actions',
|
|
'buttonRemove' => 'Remove',
|
|
'buttonRemoveHint' => 'Remove the selected firewall rules.',
|
|
'buttonExport' => 'Export',
|
|
'buttonExportHint' => 'Export all the firewall rules to a JSON file.',
|
|
'buttonImport' => 'Import',
|
|
'buttonImportHint' => 'Import the firewall rules from a JSON file.',
|
|
'yesRemove' => 'Yes, remove',
|
|
'cancel' => 'Cancel',
|
|
'removeEmptySelection' => 'Select one or more firewall rules to be removed.',
|
|
'removeConfirmation' => 'Remove the selected firewall rules?',
|
|
'removeSuccess' => 'The selected firewall rules were removed.',
|
|
'importSuccess' => 'The firewall rules were imported.',
|
|
],
|
|
'showActiveConfiguration' => 'This is the active firewall configuration. %%link%%',
|
|
'showActiveConfigurationLink' => 'Go back to editing.',
|
|
|
|
'modifiedRules' => [
|
|
'warning' => 'The firewall configuration has unsaved changes. %%link%%',
|
|
'showActive' => 'Show the active configuration.',
|
|
'buttonApply' => 'Apply Changes',
|
|
'buttonDiscard' => 'Discard',
|
|
],
|
|
|
|
'preview' => [
|
|
'titleEnable' => 'Enabling firewall protection and rules management',
|
|
'titleApplyChanges' => 'Applying changes',
|
|
'text' => 'A shell script was generated to apply the current configuration of rules and policies to your system.',
|
|
'show' => 'Preview the script',
|
|
'hide' => 'Hide',
|
|
'vzNotice' => 'You are using Virtuozzo containers. Make sure that firewall is available for your container (the iptables module is loaded).',
|
|
'warningCustomRulesOverwritten' => 'Any firewall rules added directly via the iptables utility will be overwritten.',
|
|
'buttonEnable' => 'Apply',
|
|
'buttonCancel' => 'Cancel',
|
|
],
|
|
|
|
'ruleEditForm' => [
|
|
'ruleName' => 'Rule name',
|
|
'ipDescription' => [
|
|
'address' => 'IP address (for example, 192.168.0.1 or fc00::1), network (for example, 192.168.0.0/16 or fc00::/7) or %%countryCode%%',
|
|
'countryCode' => 'two-letter ISO 3166 country code (for example, AF or ZW)',
|
|
'dataProvided' => 'IP geolocation data is currently provided by %%geoIpProvider%%.',
|
|
'learnMore' => 'Learn how to switch to another data source',
|
|
'provider' => [
|
|
'dpIpLite' => 'DB-IP',
|
|
'maxmind' => 'GeoIP2 from MaxMind',
|
|
'maxmindLite' => 'GeoLite2 from MaxMind',
|
|
]
|
|
],
|
|
'matchDirection' => [
|
|
'title' => 'Match direction',
|
|
'incoming' => 'Incoming',
|
|
'outgoing' => 'Outgoing',
|
|
'forwarding' => 'Forwarding',
|
|
],
|
|
'actions' => [
|
|
'allow' => 'Allow',
|
|
'deny' => 'Deny',
|
|
'custom' => 'Allow from selected sources, deny from others',
|
|
],
|
|
'ports' => [
|
|
'title' => 'Ports',
|
|
'description' => 'A port (for example, 1000) or a port range (for example, 1000-1051) to filter. If the field is blank, all protocols and ports will be filtered.',
|
|
'tcp' => 'TCP',
|
|
'udp' => 'UDP',
|
|
],
|
|
'sources' => 'Sources',
|
|
'destinations' => 'Destinations',
|
|
'validationErrors' => [
|
|
'nameIsRequired' => 'Rule name is required',
|
|
'invalidData' => 'Invalid data format',
|
|
'invalidPortFormat' => 'Invalid port format',
|
|
'portOutOfRanges' => 'The port must be in the range from 1 to 65535',
|
|
'portsFormat' => 'The ports or port ranges must be specified with a protocol (comma-separated); for example, 1000/tcp,1000-1051/udp.',
|
|
'IPAddressFormat' => 'A malformed firewall rule address was specified.',
|
|
'oneOfPortsOutOfRanges' => 'One of the ports is out of the range from 1 to 65535',
|
|
],
|
|
'ruleSavedSuccessfully' => 'The rule is saved successfully',
|
|
'newRuleDefaultName' => 'New custom rule',
|
|
],
|
|
|
|
'successEnable' => 'Firewall protection was enabled.',
|
|
'successDisable' => 'Firewall protection was disabled.',
|
|
'successApplyChanges' => 'The current configuration was applied.',
|
|
'successDiscardChanges' => 'The changes were discarded.',
|
|
|
|
'FormField' => [
|
|
'addMore' => 'Add one more',
|
|
],
|
|
'Form' => [
|
|
'submitButton' => 'Save',
|
|
'cancelButton' => 'Cancel',
|
|
],
|
|
'List' => [
|
|
'totalRows' => "%%totalRows%% items total",
|
|
'selectedRows' => "%%selectedRows%% of %%totalRows%% items selected",
|
|
'selectAll' => "Select all",
|
|
'deselectAll' => "Deselect",
|
|
'all' => "All",
|
|
],
|
|
'Pagination' => [
|
|
'total' => "%%current%% of %%total%%",
|
|
'itemsPerPage' => "Items per page",
|
|
'all' => "All",
|
|
],
|
|
],
|
|
|
|
'tasks' => [
|
|
'activate' => [
|
|
'running' => 'Applying the firewall configuration...',
|
|
'done' => 'The firewall configuration has been applied.',
|
|
'error' => 'Failed to apply the firewall configuration.',
|
|
],
|
|
],
|
|
|
|
'cli' => [
|
|
'commands' => [
|
|
'apply' => 'Apply the current firewall rules and update the active configuration.',
|
|
'confirm' => 'Confirm the previously applied configuration.',
|
|
'disable' => 'Disable firewall rules management.',
|
|
'enable' => 'Enable firewall rules management.',
|
|
'is-enabled' => 'Check whether the firewall is enabled.',
|
|
'reset' => 'Revert the current firewall rules to the last active configuration.',
|
|
'reset-to-default' => 'Revert current firewall rules back to default configuration.',
|
|
'set-rule' => 'Create a new or update an existing firewall rule.',
|
|
'remove-rules' => 'Remove the specified firewall rules.',
|
|
'list-json' => 'List the firewall rules as JSON.',
|
|
'export' => 'Export firewall rules to JSON.',
|
|
'import' => 'Import firewall rules from JSON.',
|
|
],
|
|
'options' => [
|
|
'id' => 'ID of the firewall rule required for the update operation, which runs using the --set-rule command.',
|
|
'ids' => 'IDs of the firewall rules (comma-separated) required for the remove operation, which runs using the --remove-rules command.',
|
|
'name' => 'Firewall rule name.',
|
|
'direction' => 'Firewall rule direction. Allowed values: input, output, forward.',
|
|
'action' => 'Firewall rule action. Allowed values: allow, deny.',
|
|
'ports' => 'Firewall rule ports or port ranges with a protocol (comma-separated); for example, 1000/tcp,1000-1051/udp.',
|
|
'remote-addresses' => 'The list of the firewall rule addresses (comma-separated). An address can be an IP address (for example, 192.168.0.1 or fc00::1), a network (for example, 192.168.0.0/16 or fc00::/7), or a two-letter ISO 3166 country code (for example, AF or ZW).',
|
|
'from' => 'The list of the firewall rule addresses (comma-separated) for forwarding and incoming connections. An address can be an IP address (for example, 192.168.0.1 or fc00::1), a network (for example, 192.168.0.0/16 or fc00::/7), or a two-letter ISO 3166 country code (for example, AF or ZW).',
|
|
'to' => 'The list of the firewall rule addresses (comma-separated) for forwarding and outgoing connections. An address can be an IP address (for example, 192.168.0.1 or fc00::1), a network (for example, 192.168.0.0/16 or fc00::/7), or a two-letter ISO 3166 country code (for example, AF or ZW).',
|
|
'config' => 'The source from which firewall rules will be imported. Specify \'-\' to import firewall rules from standard input (default, recommended), a file path, or a URL.',
|
|
'auto-confirm-this-may-lock-me-out-of-the-server' => 'Use this with the --apply or --enable commands to avoid having to run the --confirm command from a separate SSH session. Use this only in automated deployment scenarios. Misconfigured firewall rules may prevent you from having access to the server.',
|
|
],
|
|
'errors' => [
|
|
'is_disabled' => 'Firewall rules management is disabled.',
|
|
'confirm_failed_apply' => 'Apply your changes first.',
|
|
'confirm_failed_connection' => 'To apply and confirm changes, run each corresponding command in a separate SSH session.',
|
|
'confirm_failed' => 'Unable to confirm the firewall rules.',
|
|
'set_rule_failed_id' => 'A firewall rule id must be numeric.',
|
|
'set_rule_failed_name' => 'A firewall rule name must be specified.',
|
|
'set_rule_failed_ports' => 'A malformed firewall rule port or port range was specified.',
|
|
'failed_existing_config' => 'The configuration file does not exist or is not accessible. Try using the \'%%command%%\' command instead.',
|
|
'failed_available_url_config' => 'The configuration file URL is not available: %%error%%',
|
|
'remove_rules_not_found' => 'No firewall rules were found for removal.',
|
|
],
|
|
'actions' => [
|
|
'apply_success' => 'The firewall rules were activated. To save your changes, run the --confirm command within %%seconds%% second(s).',
|
|
'confirm_noop' => 'The firewall rules were already confirmed, or no --apply or --enable command was issued beforehand.',
|
|
'confirm_success' => 'The firewall rules were confirmed.',
|
|
'confirm_enable_success' => 'Firewall rules management was confirmed.',
|
|
'reset_success' => 'Changes to the firewall rules were reverted.',
|
|
'reset_to_default_success' => 'The firewall rules were reverted to the default configuration.',
|
|
'enable_success' => 'Firewall rules management was enabled. To save your changes, run the --confirm command within %%seconds%% second(s).',
|
|
'disable_success' => 'Firewall rules management was disabled',
|
|
'set_rule_success_create' => 'The firewall rule was created with the ID: \'%%ruleId%%\'.',
|
|
'set_rule_success_update' => 'The firewall rule was updated with the ID: \'%%ruleId%%\'.',
|
|
'remove_rules_success' => 'The firewall rules were removed.',
|
|
'import_success' => 'The firewall rules were imported. To apply your changes, run the --apply command.',
|
|
],
|
|
],
|
|
];
|