Tryag File Manager
Home
-
Turbo Force
Current Path :
/
usr
/
share
/
locale
/
zh_CN
/
LC_MESSAGES
/
Upload File :
New :
File
Dir
//usr/share/locale/zh_CN/LC_MESSAGES/system-config-securitylevel.mo
[ ) ! l X } + h z ) U c > F . & x U J N ( h H ) Q { ) , j | ) 2 ( 1 K e m w { " E %! 9! E! - P! ~! ! ! ! ! ! 0 ! ! ! 9 ! #" +" <" @" F" ) Y" # # # # # # # # $ ($ 8% & & && ;& D K& & & & D & 6 ( H( { E) ) * Z, ,- ; . !0 0 1 ) 2 3 5 4 4 5 ! T6 T v7 7 P 8 - (9 V9 : $ : 7: $ G: ) l: : : : ; o z< < < $ = * 4= _= f= }= = = = = = = = = = > "> @ /> p> > > > > > > > > > ' > ? ? - #? Q? Z? l? p? v? ? u@ @ @ @ @ @ @ & @ A A "B C !C .C >C G NC C C " C ! Z : & N B # M E L [ ( ) 3 H T , A S 6 % . 5 = 7 8 Q - + ? K 1 G Y R > 9 J U ' / < W V O F C * P X 0 D @ " 2 $ ; I 4 ERROR - You must be root to run lokkit. Firewall Configuration A firewall sits between your computer and the network, and determines which resources on your computer remote users on the network are able to access. A properly configured firewall can greatly increase the out-of-the-box security of your system. Firewall Customization Choose which trusted devices and incoming services should be allowed for your network security settings. * FTP -- FTP is a protocol used for remote file transfer. If you plan on making your FTP server publicly available, enable this option. You need the vsftpd package installed for this option to be useful. * Mail (SMTP) -- This allows incoming SMTP mail delivery. If you need to allow remote hosts to connect directly to your machine to deliver mail, enable this option. You do not need to enable this if you collect your mail from your ISP's server by POP3 or IMAP, or if you use a tool such as fetchmail. Note that an improperly configured SMTP server can allow remote machines to use your server to send spam. * NFSv4 -- This allowed you to use the NFS version 4 protocol via TCP to share files. You will need to have the NFS tools installed and properly configure your NFS server for this option to be useful. * Other ports -- You can specify that other ports not listed here be allowed through the firewall. The format to use is 'port:protocol'. For example, if you wanted to allow IMAP access through your firewall, you can specify 'imap:tcp'. You can also specify numeric ports explicitly; to allow UDP packets on port 1234 through, specify '1234:udp'. To specify multiple ports, separate them by commas. * SSH -- Secure Shell (SSH) is a protocol for logging into and executing commands on remote machines. It provides secure encrypted communications. If you plan on accessing your machine remotely via SSH over a firewalled interface, enable this option. You need the openssh-server package installed for this option to be useful. * Samba Browsing -- This allows you to access access and participate in Windows file and printer sharing networks. You need the Samba package installed for this option to be useful * Secure WWW (HTTPS) -- HTTPS is a modified HTTP used to serve Web pages when security is important. Examples are sites that require logins like stores or web mail. This option is not required for viewing pages locally or developing Web pages. You need the httpd package installed for this option to be useful * Telnet -- Telnet is a protocol for logging into remote machines. It is unencrypted, and provides little security from network snooping attacks. Enabling telnet is not recommended. You need the telnet-server package installed for this option to be useful. * WWW (HTTP) -- HTTP is the protocol used to serve Web pages. If you plan on making your Web server publicly available, enable this option. This option is not required for viewing pages locally or developing Web pages. You need the httpd package installed for this option to be useful. Allow Incoming -- Enabling these options allows the specified services to pass through the firewall. Note, during a workstation-class installation, the majority of these services are not present on the system. Choose the appropriate security level for your system. Disabled -- Disabling the firewall allows complete access and does no security checking. It is recommended that this only be selected if you are running on a trusted network (not the Internet), or if you plan to do more detailed firewall configuration later. Enabled -- By choosing enabled, your system will not accept connections from the outside that are not explicitly defined by you. If you are connecting your system to the Internet, but do not plan to run a server, this is the safest choice. If additional services are needed, you can choose Customize to allow specific services through the firewall, or to implicitly trust traffic coming over certain interfaces. It is not recommended to enable this for devices that are connected to public networks, such as the Internet. Trusted Devices -- Checking these for any of your devices allows all traffic coming from that device to be allowed. For example, if you are running a local network, but are connecting to the Internet via a PPP dialup, you could check that eth0 is trusted to allow any traffic coming from your local network. <Tab>/<Alt-Tab> between elements | <Space> selects | <F12> next screen 'enforcing', 'permissive', or 'disabled' A firewall protects against unauthorized network intrusions. Enabling a firewall blocks all incoming connections. Disabling a firewall allows all connections and is not recommended. Add Port Allow all traffic on the specified device Allow incoming: Allow specific ports through the firewall Backwards compatibilty, aliased to --enabled Backwards compatiblity, ignored Cancel Changing this SELinux setting requires rebooting the system so the entire file system may be relabeled. Relabeling takes a long time depending on the file system. Would you like to continue with this setting and reboot the system after firstboot is complete? Changing to SELinux enabled will cause a relabel of the entire file system on the next boot. Relabeling takes a long time depending on the size of the file system. Do you wish to continue? Clicking the 'Yes' button will set the security level of the system and override any existing firewall configuration. Are you sure that you want to do this? Configure SELinux Configure SELinux Policy Configure firewall but do not activate it Configure system security level and firewall rules Customize Disable an iptables module Disable firewall Disabled Enable an iptables module Enable firewall (default) Enabled Enforcing FTP Firewall Firewall Configuration Firewall Configuration - Customize Firewall Customization Firewall: Invalid port given: '%s'. Please give a port number or service name. MASQUERADE Devices: Mail (SMTP) Masquerade Masquerades traffic from the specified device NFS4 Name OK Ok Other ports Permissive Please choose the security level for the system. Port(s): Protocol: Run noninteractively; process only command-line arguments SELinux SELinux Setting: SSH Samba Secure WWW (HTTPS) Security Enhanced Linux (SELinux) provides finer-grained security controls than those available in a traditional Linux system. It can be set up in a disabled state, a state which only warns about things which would be denied, or a fully active state. Most people should keep the default setting. Security Level Configuration Security Level and Firewall Security Level: Telnet Trusted Trusted Devices: Trusted services: Usually 'targeted' or 'strict' WWW (HTTP) You can customize your firewall in two ways. First, you can select to allow all traffic from certain network interfaces. Second, you can allow certain protocols explicitly through the firewall. Specify additional ports in the form 'service:protocol', such as 'imap:tcp'. You can use a firewall to allow access to specific services on your computer from other computers and prevent unauthorized access from the outside world. Which services, if any, do you wish to allow access to? _Firewall Options _SELinux device to masquerade device to trust ignore settings stored in /etc/sysconfig/system-config-securitylevel module to add module to remove port:protocol (e.g, ssh:tcp) Project-Id-Version: zh_CN Report-Msgid-Bugs-To: POT-Creation-Date: 2006-11-28 10:51-0500 PO-Revision-Date: 2006-10-03 12:19+0800 Last-Translator: ProgramFan <zyangmath@gmail.com> Language-Team: <zh@li.org> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Generator: KBabel 1.9.1 错误 - 您必须是根用户才能运行 lokkit。 防火墙设置 防火墙位于您的计算机与网络之间， 它决定您计算机里的哪些资源可被网 上的远端用户访问。一个设置完善的 防火墙可以极大提高您的系统防范外 部威胁的能力。 定制防火墙 根据您的网络安全设置，选择哪些 信任的设备和服务可以访问您的系统。 * FTP -- FTP 是用于远程传输文件的协议。 如果您打算将您的 FTP 服务器向公众开放， 启用该选项。您需要安装 vsftpd 软件 包。 * 邮件 (SMTP) -- 它允许入站的 SMTP 邮件传递。 如果您需要允许远端主机直接连接您的机器以 传递邮件，启用这个选项。如果您以 POP3 或 IMAP 的方式从 ISP 的服务器收取邮件，或者您使用 诸如 fetchmail 之类的工具，则无需启用该选 项。注意：一个设置不当的 SMTP 服务器可能导 致远端机器连接到您的服务器上发送垃圾邮件。 * NFSv4 -- 允许您使用 NFS v4 协议通过 TCP 共享文件。要使用这个功能， 您需要安装 NFS 工具程序，并 需要正确地配置您的 NFS 服务器。 * 其它端口 -- 您可以指定其它没有在这里列出 的端口来允许穿过防火墙。格式为： 'port:protocol'。例如，如果您想允许 IMAP 访问穿过您的防火墙，您可以指定 'imap:tcp'。您也可以显式地指定 数字端口，如：要在1234端口上允许 UDP 数据包穿越，设定'1234:udp'。要指定多个端口， 用逗号分隔它们。 * SSH -- 安全Shell (SSH) 是一种为 在远端机器上登录并执行命令而设计 的协议。它提供了安全加密的通讯。如 果您需要使用 SSH 远程访问位于防火墙 后的机器，启用这一选项。您还需要安装 openssh-server 软件包。 * Samba 浏览 -- 可以允许您 进入及共享 Windows 文件和打印机 网络共享。您需要安装 Samba 软件包 * 安全万维网 (HTTP) -- HTTPS 是修改过的HTTP。 当网络安全很重要时应该使用这个协议。 例如那些需要登录的网站，如网上购物或网络邮件。 您需要安装 httpd 软件包。 * Telnet -- Telnet 是为远程登录而设计的 协议。它并不加密，并且对网络嗅探攻击 不具备防范能力。不推荐启用 telnet。如 果您需要启用 telnet，请安装 telnet-server 软件包。 * 万维网 (HTTP) -- HTTP 是用于提供 Web 服务的 协议。如果您打算使您的 Web 服务器向公众 开放，启用这一选项。就本地查看的页面和开 发 Web 页面而言，该选项并不是必须的。您需 要安装 httpd 软件包。 允许入站 -- 启用这些选项以允许 特定的服务穿过防火墙。注意，在 安装工作站时，大多数此类服 务将不会被安装进系统。 请为您的系统选择适当的安全级别。 禁用 -- 禁用防火墙将允许所有访问 并且不进行任何安全检查。推荐您只在 您的系统运行于可信任的网络（而非 互联网）中时；或者您计划将来做 更细致的防火墙设置时使用 该选项。 启用 -- 选择启用，您的系统将 不接受来自外部的访问，除非您 明确定义了接受某些特定的访问。 如果您将您的系统连接至互联网， 但却不打算运行服务程序，这是最安 全的选择。如果需要添加额外的服务， 您可以选择“定制”以允许特定的服 务穿过防火墙，或者隐式地信任来自 某个接口的流量。 不推荐对连接到公共网络（如互联网） 的设备启用该项。 信任的设备 -- 选择您允许来自该设备 的访问的设备。例如，如果您运行一个局域 网，并通过 PPP 拨号连接到互联网，您便可 选择 eth0 成为信任的设备，以允许来自您的 局域网的所有流量。 <Tab>/<Alt-Tab> 在元素间切换 | <Space> 选择 | <F12> 下一屏幕 ‘强制’，‘准许’，或‘禁用’ 防火墙保护网络免遭未经授权的网络入侵。启用防火墙会阻塞所有进入的连接。禁用防火墙会允许所有连接，我们不推荐您这么做。 添加端口 允许指定设备上的所有流量 允许进入： 允许指定的端口穿过防火墙 向后兼容性，是 --enabled 的别名 向后兼容性，忽略 取消 改变 SELinux 设定需要重新启动系统，从而使整个文件系统的标签产生变化。根据文件系统大小的不同，重新标注文件系统可能会花很长。您希望在 firstboot 完成后希望使用以上操作，然后重新启动系统吗? 把系统改变为启动 SELinux 将会在下次启动系统时重新标注整个文件系统。根据文件系统大小的不同，重注标注可能会花很长时间。继续吗？ 点击“是”按钮会设置系统的安全级别并覆盖现存的防火墙配置。您确认要如此吗？ 配置 SELinux 配置 SELinux 策略 配置防火墙，但是不启用它 设置系统安全级别和防火墙规则 定制 禁用 iptables 模块 禁用防火墙 禁用 启用一个 iptables 模块 启用防火墙（默认） 启用 强制 FTP 防火墙 防火墙配置 防火墙配置 - 定制 防火墙定制 防火墙： 无效的端口：'%s'。请指定一个端口号或服务名。 MASQUERADE 设备： 邮件 (SMTP) 伪装 特定设备的伪装数据流 NFS4 名称 确定 确定 其它端口 允许 请为您的系统选择安全级别。 端口： 协议： 非交互式执行；只处理命令行参数 SELinux SELinux 设置： SSH Samba 安全 WWW (HTTPS) SELinux（Security Enhanced Linux）提供了比一个传统的 Linux 系统更加详细的安全控制功能。它可以被设置为禁用状态、只发送警告状态和完全激活状态。多数用户应该保持默认的设置。 安全级别设置 安全级别和防火墙 安全级别： Telnet 信任的 信任的设备： 信任的服务： 通常是“targeted”或“strict” WWW (HTTP) 您可以使用两种方法来定制防火墙。其一，您可以选择允许来自某些网络接口的所有访问；其二，您可以指定允许某些协议穿过防火墙。按照“服务：协议”的格式来指定额外的端口，如“imap:tcp”。 您可以使用一个防火墙来允许从其它机器上访问您的系统上的特定的服务，同时可以防止来自外界的、未经验证的系统对您的系统进行访问。您希望允许哪些服务可以被访问呢？ 防火墙选项(_F) SELinux (_S) 伪装的设备 信任的设备 忽略保存在 /etc/sysconfig/system-config-securitylevel 里的设置 添加模块 删除模块 端口：协议（如：ssh:tcp）