po: resync firewall translations

15 files changed, 3225 insertions, 1696 deletions

diff --git a/po/ca/firewall.po b/po/ca/firewall.po
index 4f00bcd1a..b6650d460 100644
--- a/po/ca/firewall.po
+++ b/po/ca/firewall.po
@@ -13,208 +13,320 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Pootle 1.1.0\n"
 
-msgid "Firewall"
-msgstr "Tallafocs"
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr "Acció"
+
+msgid "Advanced Options"
+msgstr ""
+
+msgid "Advanced Rules"
+msgstr "Regles avançades"
+
+msgid "Advanced Settings"
+msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
+msgstr ""
+"Les regles avançades et deixen personalitzar el teu tallafocs per les teves "
+"necessitats. Només s'hi correspondran les connexions noves. Als paquets que "
+"pertanyen una connexió oberta se'ls permet passar el tallafocs "
+"automàticament."
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
 msgstr ""
-"El tallafocs crea zones a les teves interfícies de xarxa per controlar el "
-"flux de tràfic de xarxa."
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid "Custom Rules (/etc/firewall.user)"
+msgstr ""
+
+msgid "Destination"
+msgstr "Destí"
+
+msgid "Destination address"
+msgstr "Adreça destí"
+
+msgid "Destination port"
+msgstr "Port de destí"
 
 #, fuzzy
-msgid "Enable SYN-flood protection"
-msgstr "Protecció SYN-flood"
+msgid "Destination zone"
+msgstr "Destí"
+
+msgid "Device"
+msgstr ""
 
 msgid "Drop invalid packets"
 msgstr "Descarta els paquets invàlids"
 
-msgid "Input"
-msgstr "Entrada"
+msgid "Enable NAT Loopback"
+msgstr ""
 
-msgid "Output"
-msgstr "Sortida"
+#, fuzzy
+msgid "Enable SYN-flood protection"
+msgstr "Protecció SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
+msgstr "Port extern"
+
+msgid "Family"
+msgstr ""
+
+msgid "Firewall"
+msgstr "Tallafocs"
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid ""
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
 
 msgid "Forward"
 msgstr ""
 
-msgid "reject"
-msgstr "rebutja"
+msgid "General Settings"
+msgstr ""
 
-msgid "drop"
-msgstr "descarta"
+msgid "IPv4 and IPv6"
+msgstr ""
 
-msgid "accept"
-msgstr "accepta"
+msgid "IPv4 only"
+msgstr ""
 
-msgid "Zones"
-msgstr "Zones"
+msgid "IPv6 only"
+msgstr ""
 
-msgid "Name"
+msgid "Input"
+msgstr "Entrada"
+
+msgid "Intended destination address"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
 #, fuzzy
-msgid "MSS clamping"
-msgstr "Clamping MSS"
+msgid "Internal IP address"
+msgstr "Adreça interna"
 
 #, fuzzy
-msgid "Network"
-msgstr "Xarxes"
+msgid "Internal port"
+msgstr "Port extern"
 
-msgid "Traffic Control"
-msgstr "Control de tràfic"
+msgid "Internal port (optional)"
+msgstr "Port intern (opcional)"
 
-msgid "Zone-to-Zone traffic"
-msgstr "Tràfic zona a zona"
+msgid "Limit log messages"
+msgstr ""
 
 #, fuzzy
-msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
-msgstr ""
-"Ací pots especificar quin tràfic de xarxes es permet entre les zones de "
-"xarxa. Només s'hi correspondren les connexions noves. Als paquets que "
-"pertanyen una connexió oberta se'ls permet passar el tallafocs "
-"automàticament. Si experimentes problemes de connexió ocasionals, intenta "
-"activar el Clamping MSS, si no desactiva'l per raons de rendiment."
+msgid "MSS clamping"
+msgstr "Clamping MSS"
 
-msgid "Source"
-msgstr "Origen"
+msgid "Masquerading"
+msgstr ""
 
-msgid "Destination"
-msgstr "Destí"
+msgid "Match ICMP type"
+msgstr ""
 
-msgid "Rules"
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
 msgstr ""
 
-msgid "Protocol"
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
 msgstr ""
 
-msgid "Device"
+msgid "Name"
 msgstr ""
 
-msgid "Action"
-msgstr "Acció"
+msgid "Output"
+msgstr "Sortida"
 
-msgid "Traffic Redirection"
-msgstr "Readreçament de tràfic"
+msgid "Overview"
+msgstr ""
+
+msgid "Port forwarding"
+msgstr "Readreçament de port"
 
 msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
-"El readreçament de tràfic et permet canviar l'adreça destí dels paquets "
-"reenviats."
+"El readreçament de ports permet proveir serveis de la xarxa interna a una "
+"xarxa externa."
 
-msgid "(optional)"
+msgid "Protocol"
 msgstr ""
 
-msgid "Zone"
-msgstr "Zona"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
 
-msgid "Source port"
-msgstr "Port d'origen"
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
 
-#, fuzzy
-msgid "Destination IP"
-msgstr "Destí"
+msgid "Redirection type"
+msgstr ""
 
-#, fuzzy
-msgid "IP address"
-msgstr "Adreça IP"
+msgid "Redirections"
+msgstr ""
 
-msgid "Destination port"
-msgstr "Port de destí"
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
 
-msgid "Advanced Rules"
-msgstr "Regles avançades"
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
 
-msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+msgid "Restrict to address family"
 msgstr ""
-"Les regles avançades et deixen personalitzar el teu tallafocs per les teves "
-"necessitats. Només s'hi correspondran les connexions noves. Als paquets que "
-"pertanyen una connexió oberta se'ls permet passar el tallafocs "
-"automàticament."
 
-msgid "Overview"
+msgid "Rules"
 msgstr ""
 
-#, fuzzy
-msgid "Source zone"
-msgstr "Port d'origen"
+msgid "Source"
+msgstr "Origen"
 
 #, fuzzy
-msgid "Destination zone"
-msgstr "Destí"
+msgid "Source IP address"
+msgstr "Adreça MAC d'origen"
 
-msgid "any"
+msgid "Source MAC address"
 msgstr ""
 
 #, fuzzy
 msgid "Source address"
 msgstr "Adreça MAC d'origen"
 
-msgid "Destination address"
-msgstr "Adreça destí"
-
-#, fuzzy
-msgid "Source MAC-address"
-msgstr "Adreça MAC d'origen"
+msgid "Source port"
+msgstr "Port d'origen"
 
 #, fuzzy
-msgid "Source IP address"
-msgstr "Adreça MAC d'origen"
+msgid "Source zone"
+msgstr "Port d'origen"
 
 msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
+"El tallafocs crea zones a les teves interfícies de xarxa per controlar el "
+"flux de tràfic de xarxa."
 
-msgid "External port"
-msgstr "Port extern"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
 
 msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
-#, fuzzy
-msgid "Internal IP address"
-msgstr "Adreça interna"
+msgid "Traffic Redirection"
+msgstr "Readreçament de tràfic"
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
+"El readreçament de tràfic et permet canviar l'adreça destí dels paquets "
+"reenviats."
 
-msgid "Internal port (optional)"
-msgstr "Port intern (opcional)"
+msgid "Via"
+msgstr ""
 
-msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+msgid "Zone %q"
 msgstr ""
 
-msgid "Port forwarding"
-msgstr "Readreçament de port"
+msgid "Zone ⇒ Forwardings"
+msgstr ""
 
-msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+msgid "Zones"
+msgstr "Zones"
+
+msgid "accept"
+msgstr "accepta"
+
+msgid "any"
 msgstr ""
-"El readreçament de ports permet proveir serveis de la xarxa interna a una "
-"xarxa externa."
+
+msgid "drop"
+msgstr "descarta"
+
+msgid "reject"
+msgstr "rebutja"
 
 #, fuzzy
-msgid "Internal port"
-msgstr "Port extern"
+#~ msgid "Network"
+#~ msgstr "Xarxes"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Control de tràfic"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Tràfic zona a zona"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Ací pots especificar quin tràfic de xarxes es permet entre les zones de "
+#~ "xarxa. Només s'hi correspondren les connexions noves. Als paquets que "
+#~ "pertanyen una connexió oberta se'ls permet passar el tallafocs "
+#~ "automàticament. Si experimentes problemes de connexió ocasionals, intenta "
+#~ "activar el Clamping MSS, si no desactiva'l per raons de rendiment."
+
+#~ msgid "Zone"
+#~ msgstr "Zona"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Destí"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Adreça IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Adreça MAC d'origen"
 
 #~ msgid "Custom forwarding"
 #~ msgstr "Reenviament personalitzat"
diff --git a/po/de/firewall.po b/po/de/firewall.po
index db19e0c85..4f5fba524 100644
--- a/po/de/firewall.po
+++ b/po/de/firewall.po
@@ -12,206 +12,319 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Translate Toolkit 1.1.1\n"
 
-msgid "Firewall"
-msgstr "Firewall"
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr "Aktion"
+
+msgid "Advanced Options"
+msgstr ""
+
+msgid "Advanced Rules"
+msgstr "Erweiterte Regeln"
+
+msgid "Advanced Settings"
+msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
+msgstr ""
+"Mit erweiterten Regeln kann die Firewall an die eigenen Bedürfnisse "
+"angepasst werden. Es werden nur neue Verbindungen betrachtet. Pakete, die zu "
+"bereits bestehenden Verbindungen gehören werden automatisch akzeptiert."
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
 msgstr ""
-"Die Firewall erstellt Netzwerkzonen über bestimmte Netzwerkschnittstellen um "
-"den Netzverkehr zu trennen."
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid "Custom Rules (/etc/firewall.user)"
+msgstr ""
+
+msgid "Destination"
+msgstr "Ziel"
+
+msgid "Destination address"
+msgstr "Zieladresse"
+
+msgid "Destination port"
+msgstr "Zielport"
 
 #, fuzzy
-msgid "Enable SYN-flood protection"
-msgstr "Schutz vor SYN-flood-Attacken"
+msgid "Destination zone"
+msgstr "Ziel"
+
+msgid "Device"
+msgstr ""
 
 msgid "Drop invalid packets"
 msgstr "Ungültige Pakete verwerfen"
 
-msgid "Input"
-msgstr "Eingang"
+msgid "Enable NAT Loopback"
+msgstr ""
 
-msgid "Output"
-msgstr "Ausgang"
+#, fuzzy
+msgid "Enable SYN-flood protection"
+msgstr "Schutz vor SYN-flood-Attacken"
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
+msgstr "Externer Port"
+
+msgid "Family"
+msgstr ""
+
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid ""
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
 
 msgid "Forward"
 msgstr ""
 
-msgid "reject"
-msgstr "zurückweisen"
+msgid "General Settings"
+msgstr ""
 
-msgid "drop"
-msgstr "verwerfen"
+msgid "IPv4 and IPv6"
+msgstr ""
 
-msgid "accept"
-msgstr "annehmen"
+msgid "IPv4 only"
+msgstr ""
 
-msgid "Zones"
-msgstr "Zonen"
+msgid "IPv6 only"
+msgstr ""
 
-msgid "Name"
+msgid "Input"
+msgstr "Eingang"
+
+msgid "Intended destination address"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
 #, fuzzy
-msgid "MSS clamping"
-msgstr "MSS Clamping"
+msgid "Internal IP address"
+msgstr "Interne Adresse"
 
 #, fuzzy
-msgid "Network"
-msgstr "Netzwerke"
+msgid "Internal port"
+msgstr "Externer Port"
 
-msgid "Traffic Control"
-msgstr "Verkehrskontrolle"
+msgid "Internal port (optional)"
+msgstr "Interner Port (optional)"
 
-msgid "Zone-to-Zone traffic"
-msgstr "Zone-zu-Zone Verkehr"
+msgid "Limit log messages"
+msgstr ""
 
 #, fuzzy
-msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
-msgstr ""
-"An dieser Stelle kann festgelegt zwischen welchen Zonen Netzverkehr hin und "
-"her fließen kann. Es werden nur neue Verbindungen betrachtet. Pakete, die zu "
-"bereits bestehenden Verbindungen gehören werden automatisch akzeptiert. Bei "
-"gelegentlich auftretenden Verbindungsproblemen kann MSS Clamping helfen, "
-"ansonsten sollte dies aus Performancegründen deaktiviert bleiben."
+msgid "MSS clamping"
+msgstr "MSS Clamping"
 
-msgid "Source"
-msgstr "Quelle"
+msgid "Masquerading"
+msgstr ""
 
-msgid "Destination"
-msgstr "Ziel"
+msgid "Match ICMP type"
+msgstr ""
 
-msgid "Rules"
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
 msgstr ""
 
-msgid "Protocol"
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
 msgstr ""
 
-msgid "Device"
+msgid "Name"
 msgstr ""
 
-msgid "Action"
-msgstr "Aktion"
+msgid "Output"
+msgstr "Ausgang"
 
-msgid "Traffic Redirection"
-msgstr "Umleitungen"
+msgid "Overview"
+msgstr ""
+
+msgid "Port forwarding"
+msgstr "Portweiterleitung"
 
 msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
-"Umleitungen erlauben es das Ziel von weitergeleiteten Paketen zu verändern."
+"Portweiterleitungen ermöglichen es interne Netzwerkdienste aus einem "
+"externen Netzwerk heraus erreichbar zu machen."
 
-msgid "(optional)"
+msgid "Protocol"
 msgstr ""
 
-msgid "Zone"
-msgstr "Zone"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
 
-msgid "Source port"
-msgstr "Quellport"
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
 
-#, fuzzy
-msgid "Destination IP"
-msgstr "Ziel"
+msgid "Redirection type"
+msgstr ""
 
-#, fuzzy
-msgid "IP address"
-msgstr "IP-Adresse"
+msgid "Redirections"
+msgstr ""
 
-msgid "Destination port"
-msgstr "Zielport"
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
 
-msgid "Advanced Rules"
-msgstr "Erweiterte Regeln"
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
 
-msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+msgid "Restrict to address family"
 msgstr ""
-"Mit erweiterten Regeln kann die Firewall an die eigenen Bedürfnisse "
-"angepasst werden. Es werden nur neue Verbindungen betrachtet. Pakete, die zu "
-"bereits bestehenden Verbindungen gehören werden automatisch akzeptiert."
 
-msgid "Overview"
+msgid "Rules"
 msgstr ""
 
-#, fuzzy
-msgid "Source zone"
-msgstr "Quellport"
+msgid "Source"
+msgstr "Quelle"
 
 #, fuzzy
-msgid "Destination zone"
-msgstr "Ziel"
+msgid "Source IP address"
+msgstr "Quell-MAC-Adresse"
 
-msgid "any"
+msgid "Source MAC address"
 msgstr ""
 
 #, fuzzy
 msgid "Source address"
 msgstr "Quell-MAC-Adresse"
 
-msgid "Destination address"
-msgstr "Zieladresse"
-
-#, fuzzy
-msgid "Source MAC-address"
-msgstr "Quell-MAC-Adresse"
+msgid "Source port"
+msgstr "Quellport"
 
 #, fuzzy
-msgid "Source IP address"
-msgstr "Quell-MAC-Adresse"
+msgid "Source zone"
+msgstr "Quellport"
 
 msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
+"Die Firewall erstellt Netzwerkzonen über bestimmte Netzwerkschnittstellen um "
+"den Netzverkehr zu trennen."
 
-msgid "External port"
-msgstr "Externer Port"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
 
 msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
-#, fuzzy
-msgid "Internal IP address"
-msgstr "Interne Adresse"
+msgid "Traffic Redirection"
+msgstr "Umleitungen"
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
+"Umleitungen erlauben es das Ziel von weitergeleiteten Paketen zu verändern."
 
-msgid "Internal port (optional)"
-msgstr "Interner Port (optional)"
+msgid "Via"
+msgstr ""
 
-msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+msgid "Zone %q"
 msgstr ""
 
-msgid "Port forwarding"
-msgstr "Portweiterleitung"
+msgid "Zone ⇒ Forwardings"
+msgstr ""
 
-msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+msgid "Zones"
+msgstr "Zonen"
+
+msgid "accept"
+msgstr "annehmen"
+
+msgid "any"
 msgstr ""
-"Portweiterleitungen ermöglichen es interne Netzwerkdienste aus einem "
-"externen Netzwerk heraus erreichbar zu machen."
+
+msgid "drop"
+msgstr "verwerfen"
+
+msgid "reject"
+msgstr "zurückweisen"
 
 #, fuzzy
-msgid "Internal port"
-msgstr "Externer Port"
+#~ msgid "Network"
+#~ msgstr "Netzwerke"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Verkehrskontrolle"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Zone-zu-Zone Verkehr"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "An dieser Stelle kann festgelegt zwischen welchen Zonen Netzverkehr hin "
+#~ "und her fließen kann. Es werden nur neue Verbindungen betrachtet. Pakete, "
+#~ "die zu bereits bestehenden Verbindungen gehören werden automatisch "
+#~ "akzeptiert. Bei gelegentlich auftretenden Verbindungsproblemen kann MSS "
+#~ "Clamping helfen, ansonsten sollte dies aus Performancegründen deaktiviert "
+#~ "bleiben."
+
+#~ msgid "Zone"
+#~ msgstr "Zone"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Ziel"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "IP-Adresse"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Quell-MAC-Adresse"
 
 #~ msgid "Custom forwarding"
 #~ msgstr "Erweiterte Weiterleitung"
diff --git a/po/el/firewall.po b/po/el/firewall.po
index e4d38dcd1..82272a7c2 100644
--- a/po/el/firewall.po
+++ b/po/el/firewall.po
@@ -11,209 +11,321 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Pootle 1.1.0\n"
 
-msgid "Firewall"
-msgstr "Τείχος προστασίας"
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr "Ενέργεια"
+
+msgid "Advanced Options"
+msgstr ""
+
+msgid "Advanced Rules"
+msgstr "Προχωρημένοι Κανόνες"
+
+msgid "Advanced Settings"
+msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
+msgstr ""
+"Οι προχωρημένοι κανόνες σας επιτρέπουν να προσαρμόσετε το τείχος προστασίας "
+"στις δικές σας ανάγκες. Οι κανόνες θα εφαρμόζονται μόνο στις νέες συνδέσεις. "
+"Πακέτα που ανήκουν σε ήδη ανοιχτές συνδέσεις, θα περνάνε αυτόματα το τείχος "
+"προστασίας."
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
 msgstr ""
-"Το τείχος προστασίας δημιουργεί ζώνες πάνω στις διεπαφές δικτύου για να "
-"ελέγχει την δικτυακή κίνηση."
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid "Custom Rules (/etc/firewall.user)"
+msgstr ""
+
+msgid "Destination"
+msgstr "Προορισμός"
+
+msgid "Destination address"
+msgstr "Διεύθυνση προορισμού"
+
+msgid "Destination port"
+msgstr "Θύρα προορισμού"
 
 #, fuzzy
-msgid "Enable SYN-flood protection"
-msgstr "Προστασία SYN-flood"
+msgid "Destination zone"
+msgstr "Προορισμός"
+
+msgid "Device"
+msgstr ""
 
 msgid "Drop invalid packets"
 msgstr "Αγνόηση μη-έγκυρων πακετών"
 
-msgid "Input"
-msgstr "Είσοδος"
+msgid "Enable NAT Loopback"
+msgstr ""
 
-msgid "Output"
-msgstr "Έξοδος"
+#, fuzzy
+msgid "Enable SYN-flood protection"
+msgstr "Προστασία SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
+msgstr "Εξωτερική θύρα"
+
+msgid "Family"
+msgstr ""
+
+msgid "Firewall"
+msgstr "Τείχος προστασίας"
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid ""
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
 
 msgid "Forward"
 msgstr ""
 
-msgid "reject"
-msgstr "απόρριψη"
+msgid "General Settings"
+msgstr ""
 
-msgid "drop"
-msgstr "αγνόηση"
+msgid "IPv4 and IPv6"
+msgstr ""
 
-msgid "accept"
-msgstr "αποδοχή"
+msgid "IPv4 only"
+msgstr ""
 
-msgid "Zones"
-msgstr "Ζώνες"
+msgid "IPv6 only"
+msgstr ""
 
-msgid "Name"
+msgid "Input"
+msgstr "Είσοδος"
+
+msgid "Intended destination address"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
 #, fuzzy
-msgid "MSS clamping"
-msgstr "Περιορισμός MSS"
+msgid "Internal IP address"
+msgstr "Εσωτερική διεύθυνση"
 
 #, fuzzy
-msgid "Network"
-msgstr "Δίκτυα"
+msgid "Internal port"
+msgstr "Εξωτερική θύρα"
 
-msgid "Traffic Control"
-msgstr "Έλεγχος Κίνησης"
+msgid "Internal port (optional)"
+msgstr "Εσωτερική θύρα (προαιρετικό)"
 
-msgid "Zone-to-Zone traffic"
-msgstr "Κίνηση Ζώνης-προς-Ζώνη"
+msgid "Limit log messages"
+msgstr ""
 
 #, fuzzy
-msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
-msgstr ""
-"Εδώ μπορείτε να ορίσετε τι δικτυακή κίνηση επιτρέπεται μεταξύ δικτυακών "
-"ζωνών. Θα εφαρμόζεται μόνο σε νέες συνδέσεις. Πακέτα που ανήκουν σε ήδη "
-"ανοιχτές συνδέσεις θα περνάνε αυτόματα το τείχος προστασίας. Αν "
-"αντιμετωπίζεται σποραδικά προβλήματα με τη σύνδεσή σας, δοκιμάστε να "
-"ενεργοποιήσετε τον Περιορισμό MSS, αλλιώς απενεργοποιήστε το για μεγαλύτερη "
-"απόδοση."
+msgid "MSS clamping"
+msgstr "Περιορισμός MSS"
 
-msgid "Source"
-msgstr "Πηγή"
+msgid "Masquerading"
+msgstr ""
 
-msgid "Destination"
-msgstr "Προορισμός"
+msgid "Match ICMP type"
+msgstr ""
 
-msgid "Rules"
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
 msgstr ""
 
-msgid "Protocol"
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
 msgstr ""
 
-msgid "Device"
+msgid "Name"
 msgstr ""
 
-msgid "Action"
-msgstr "Ενέργεια"
+msgid "Output"
+msgstr "Έξοδος"
 
-msgid "Traffic Redirection"
-msgstr "Ανακατεύθυνση Κίνησης"
+msgid "Overview"
+msgstr ""
+
+msgid "Port forwarding"
+msgstr "Προώθηση θυρών"
 
 msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
-"Η ανακατεύθυνση κίνησης σας επιτρέπει να αλλάξετε την διεύθυνση προορισμού "
-"των προωθημένων πακέτων."
+"Η προώθηση θυρών επιτρέπει σε υπηρεσίες δικτύου που λειτουργούν μέσα σε ένα "
+"εσωτερικό δίκτυο, να γίνονται διαθέσιμες και σε ένα εξωτερικό."
 
-msgid "(optional)"
+msgid "Protocol"
 msgstr ""
 
-msgid "Zone"
-msgstr "Ζώνη"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
 
-msgid "Source port"
-msgstr "Θύρα πηγής"
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
 
-#, fuzzy
-msgid "Destination IP"
-msgstr "Προορισμός"
+msgid "Redirection type"
+msgstr ""
 
-#, fuzzy
-msgid "IP address"
-msgstr "Διεύθυνση IP"
+msgid "Redirections"
+msgstr ""
 
-msgid "Destination port"
-msgstr "Θύρα προορισμού"
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
 
-msgid "Advanced Rules"
-msgstr "Προχωρημένοι Κανόνες"
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
 
-msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+msgid "Restrict to address family"
 msgstr ""
-"Οι προχωρημένοι κανόνες σας επιτρέπουν να προσαρμόσετε το τείχος προστασίας "
-"στις δικές σας ανάγκες. Οι κανόνες θα εφαρμόζονται μόνο στις νέες συνδέσεις. "
-"Πακέτα που ανήκουν σε ήδη ανοιχτές συνδέσεις, θα περνάνε αυτόματα το τείχος "
-"προστασίας."
 
-msgid "Overview"
+msgid "Rules"
 msgstr ""
 
-#, fuzzy
-msgid "Source zone"
-msgstr "Θύρα πηγής"
+msgid "Source"
+msgstr "Πηγή"
 
 #, fuzzy
-msgid "Destination zone"
-msgstr "Προορισμός"
+msgid "Source IP address"
+msgstr "Διεύθυνση MAC πηγής"
 
-msgid "any"
+msgid "Source MAC address"
 msgstr ""
 
 #, fuzzy
 msgid "Source address"
 msgstr "Διεύθυνση MAC πηγής"
 
-msgid "Destination address"
-msgstr "Διεύθυνση προορισμού"
-
-#, fuzzy
-msgid "Source MAC-address"
-msgstr "Διεύθυνση MAC πηγής"
+msgid "Source port"
+msgstr "Θύρα πηγής"
 
 #, fuzzy
-msgid "Source IP address"
-msgstr "Διεύθυνση MAC πηγής"
+msgid "Source zone"
+msgstr "Θύρα πηγής"
 
 msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
+"Το τείχος προστασίας δημιουργεί ζώνες πάνω στις διεπαφές δικτύου για να "
+"ελέγχει την δικτυακή κίνηση."
 
-msgid "External port"
-msgstr "Εξωτερική θύρα"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
 
 msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
-#, fuzzy
-msgid "Internal IP address"
-msgstr "Εσωτερική διεύθυνση"
+msgid "Traffic Redirection"
+msgstr "Ανακατεύθυνση Κίνησης"
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
+"Η ανακατεύθυνση κίνησης σας επιτρέπει να αλλάξετε την διεύθυνση προορισμού "
+"των προωθημένων πακέτων."
 
-msgid "Internal port (optional)"
-msgstr "Εσωτερική θύρα (προαιρετικό)"
+msgid "Via"
+msgstr ""
 
-msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+msgid "Zone %q"
 msgstr ""
 
-msgid "Port forwarding"
-msgstr "Προώθηση θυρών"
+msgid "Zone ⇒ Forwardings"
+msgstr ""
 
-msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+msgid "Zones"
+msgstr "Ζώνες"
+
+msgid "accept"
+msgstr "αποδοχή"
+
+msgid "any"
 msgstr ""
-"Η προώθηση θυρών επιτρέπει σε υπηρεσίες δικτύου που λειτουργούν μέσα σε ένα "
-"εσωτερικό δίκτυο, να γίνονται διαθέσιμες και σε ένα εξωτερικό."
+
+msgid "drop"
+msgstr "αγνόηση"
+
+msgid "reject"
+msgstr "απόρριψη"
 
 #, fuzzy
-msgid "Internal port"
-msgstr "Εξωτερική θύρα"
+#~ msgid "Network"
+#~ msgstr "Δίκτυα"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Έλεγχος Κίνησης"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Κίνηση Ζώνης-προς-Ζώνη"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Εδώ μπορείτε να ορίσετε τι δικτυακή κίνηση επιτρέπεται μεταξύ δικτυακών "
+#~ "ζωνών. Θα εφαρμόζεται μόνο σε νέες συνδέσεις. Πακέτα που ανήκουν σε ήδη "
+#~ "ανοιχτές συνδέσεις θα περνάνε αυτόματα το τείχος προστασίας. Αν "
+#~ "αντιμετωπίζεται σποραδικά προβλήματα με τη σύνδεσή σας, δοκιμάστε να "
+#~ "ενεργοποιήσετε τον Περιορισμό MSS, αλλιώς απενεργοποιήστε το για "
+#~ "μεγαλύτερη απόδοση."
+
+#~ msgid "Zone"
+#~ msgstr "Ζώνη"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Προορισμός"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Διεύθυνση IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Διεύθυνση MAC πηγής"
 
 #~ msgid "Custom forwarding"
 #~ msgstr "Προσαρμοσμένη προώθηση"
diff --git a/po/en/firewall.po b/po/en/firewall.po
index 27edcdd59..41d74b2ce 100644
--- a/po/en/firewall.po
+++ b/po/en/firewall.po
@@ -11,143 +11,200 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 
+msgid "(optional)"
+msgstr "(optional)"
+
+msgid "Action"
+msgstr "Action"
+
+msgid "Advanced Options"
+msgstr ""
+
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/zones.lua      #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/trule.lua      #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
-msgid "Firewall"
-msgstr "Firewall"
+# msgid "Name"
+# msgstr ""
+#
+# msgid "(optional)"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+# msgid "Source port"
+# msgstr ""
+#
+# msgid "Destination port"
+# msgstr ""
+#
+# msgid "Action"
+# msgstr ""
+#
+# msgid "drop"
+# msgstr ""
+#
+# msgid "accept"
+# msgstr ""
+#
+# msgid "reject"
+# msgstr ""
+#
+msgid "Advanced Rules"
+msgstr "Advanced Rules"
+
+msgid "Advanced Settings"
+msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
 msgstr ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
 
-msgid "Enable SYN-flood protection"
-msgstr "Enable SYN-flood protection"
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
 
-msgid "Drop invalid packets"
-msgstr "Drop invalid packets"
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
 
-msgid "Input"
-msgstr "Input"
+msgid "Any"
+msgstr ""
 
-msgid "Output"
-msgstr "Output"
+msgid "Covered networks"
+msgstr ""
 
-msgid "Forward"
-msgstr "Forward"
+msgid "Custom Rules"
+msgstr ""
 
-msgid "reject"
-msgstr "reject"
+msgid "Custom Rules (/etc/firewall.user)"
+msgstr ""
 
-msgid "drop"
-msgstr "drop"
+msgid "Destination"
+msgstr "Destination"
 
-msgid "accept"
-msgstr "accept"
+msgid "Destination address"
+msgstr "Destination address"
 
-msgid "Zones"
-msgstr "Zones"
+msgid "Destination port"
+msgstr "Destination port"
 
-msgid "Name"
-msgstr "Name"
+msgid "Destination zone"
+msgstr "Destination zone"
 
-msgid "Masquerading"
-msgstr "Masquerading"
+msgid "Device"
+msgstr "Device"
 
-msgid "MSS clamping"
-msgstr "MSS clamping"
+msgid "Drop invalid packets"
+msgstr "Drop invalid packets"
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr "Enable SYN-flood protection"
+
+msgid "Enable logging on this zone"
+msgstr ""
 
-msgid "Network"
-msgstr "Network"
+msgid "External port"
+msgstr "External port"
+
+msgid "Family"
+msgstr ""
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/traffic.lua    #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/zones.lua      #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
-# msgid "Name"
-# msgstr ""
-#
-msgid "Traffic Control"
-msgstr "Traffic Control"
+msgid "Firewall"
+msgstr "Firewall"
 
-msgid "Zone-to-Zone traffic"
-msgstr "Zone-to-Zone traffic"
+msgid "Firewall - Zone Settings"
+msgstr ""
 
 msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
-msgstr ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
+msgstr ""
 
-msgid "Source"
-msgstr "Source"
+msgid "Force connection tracking"
+msgstr ""
 
-msgid "Destination"
-msgstr "Destination"
+msgid "Forward"
+msgstr "Forward"
 
-msgid "Rules"
-msgstr "Rules"
+msgid "General Settings"
+msgstr ""
 
-msgid "Protocol"
-msgstr "Protocol"
+msgid "IPv4 and IPv6"
+msgstr ""
 
-msgid "Device"
-msgstr "Device"
+msgid "IPv4 only"
+msgstr ""
 
-msgid "Action"
-msgstr "Action"
+msgid "IPv6 only"
+msgstr ""
 
-# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/redirect.lua   #
-# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-#
-# msgid "Name"
-# msgstr ""
-#
-# msgid "Protocol"
-# msgstr ""
-#
-msgid "Traffic Redirection"
-msgstr "Traffic Redirection"
+msgid "Input"
+msgstr "Input"
 
-msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+msgid "Intended destination address"
 msgstr ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
 
-msgid "(optional)"
-msgstr "(optional)"
+msgid "Inter-Zone Forwarding"
+msgstr ""
 
-msgid "Zone"
-msgstr "Zone"
+msgid "Internal IP address"
+msgstr "Internal IP address"
 
-msgid "Source port"
-msgstr "Source port"
+msgid "Internal port"
+msgstr "Internal port"
 
-msgid "Destination IP"
-msgstr "Destination IP"
+msgid "Internal port (optional)"
+msgstr "Internal port (optional)"
 
-msgid "IP address"
-msgstr "IP address"
+msgid "Limit log messages"
+msgstr ""
 
-msgid "Destination port"
-msgstr "Destination port"
+msgid "MSS clamping"
+msgstr "MSS clamping"
+
+msgid "Masquerading"
+msgstr "Masquerading"
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
+msgstr ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
+
+msgid "Name"
+msgstr "Name"
+
+msgid "Output"
+msgstr "Output"
+
+msgid "Overview"
+msgstr "Overview"
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/trule.lua      #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/miniportfw.lua #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
 # msgid "Name"
@@ -159,56 +216,53 @@ msgstr "Destination port"
 # msgid "Protocol"
 # msgstr ""
 #
-# msgid "Source port"
-# msgstr ""
-#
-# msgid "Destination port"
-# msgstr ""
-#
-# msgid "Action"
-# msgstr ""
-#
-# msgid "drop"
-# msgstr ""
-#
-# msgid "accept"
+# msgid "External port"
 # msgstr ""
 #
-# msgid "reject"
+# msgid "Internal IP address"
 # msgstr ""
 #
-msgid "Advanced Rules"
-msgstr "Advanced Rules"
+msgid "Port forwarding"
+msgstr "Port forwarding"
 
 msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 
-msgid "Overview"
-msgstr "Overview"
+msgid "Protocol"
+msgstr "Protocol"
 
-msgid "Source zone"
-msgstr "Source zone"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Redirect matched incoming traffic to the given port on the internal host"
 
-msgid "Destination zone"
-msgstr "Destination zone"
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Redirect matched incoming traffic to the specified internal host"
 
-msgid "any"
-msgstr "any"
+msgid "Redirection type"
+msgstr ""
 
-msgid "Source address"
-msgstr "Source address"
+msgid "Redirections"
+msgstr ""
 
-msgid "Destination address"
-msgstr "Destination address"
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
 
-msgid "Source MAC-address"
-msgstr "Source MAC-address"
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rules"
+msgstr "Rules"
+
+msgid "Source"
+msgstr "Source"
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 # Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/rrule.lua      #
@@ -243,65 +297,123 @@ msgstr "Source MAC-address"
 msgid "Source IP address"
 msgstr "Source IP address"
 
-msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+msgid "Source MAC address"
 msgstr ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
 
-msgid "External port"
-msgstr "External port"
+msgid "Source address"
+msgstr "Source address"
 
-msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
-msgstr ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+msgid "Source port"
+msgstr "Source port"
 
-msgid "Internal IP address"
-msgstr "Internal IP address"
+msgid "Source zone"
+msgstr "Source zone"
 
-msgid "Redirect matched incoming traffic to the specified internal host"
-msgstr "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 
-msgid "Internal port (optional)"
-msgstr "Internal port (optional)"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
 
 msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
-"Redirect matched incoming traffic to the given port on the internal host"
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/miniportfw.lua #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/redirect.lua   #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
 # msgid "Name"
 # msgstr ""
 #
-# msgid "(optional)"
-# msgstr ""
-#
 # msgid "Protocol"
 # msgstr ""
 #
-# msgid "External port"
-# msgstr ""
-#
-# msgid "Internal IP address"
-# msgstr ""
-#
-msgid "Port forwarding"
-msgstr "Port forwarding"
+msgid "Traffic Redirection"
+msgstr "Traffic Redirection"
 
 msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 
-msgid "Internal port"
-msgstr "Internal port"
+msgid "Via"
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr "Zones"
+
+msgid "accept"
+msgstr "accept"
+
+msgid "any"
+msgstr "any"
+
+msgid "drop"
+msgstr "drop"
+
+msgid "reject"
+msgstr "reject"
+
+#~ msgid "Network"
+#~ msgstr "Network"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/traffic.lua    #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Name"
+# msgstr ""
+#
+#~ msgid "Traffic Control"
+#~ msgstr "Traffic Control"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Zone-to-Zone traffic"
+
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+
+#~ msgid "Zone"
+#~ msgstr "Zone"
+
+#~ msgid "Destination IP"
+#~ msgstr "Destination IP"
+
+#~ msgid "IP address"
+#~ msgstr "IP address"
+
+#~ msgid "Source MAC-address"
+#~ msgstr "Source MAC-address"
diff --git a/po/es/firewall.po b/po/es/firewall.po
index 4a223906e..653a6387f 100644
--- a/po/es/firewall.po
+++ b/po/es/firewall.po
@@ -11,209 +11,321 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Pootle 1.1.0\n"
 
-msgid "Firewall"
-msgstr "Corta fuego"
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr "Acción"
+
+msgid "Advanced Options"
+msgstr ""
+
+msgid "Advanced Rules"
+msgstr "Reglas avanzadas"
+
+msgid "Advanced Settings"
+msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
+msgstr ""
+"Las reglas avanzadas le permite personalizar el corta fuego según sus "
+"necesidades. Sólamente las nuevas conexiones serán afectadas por las reglas. "
+"Los paquetes pertenecientes a conexiones ya abierta, se les permite el libre "
+"paso por el corta fuego."
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
 msgstr ""
-"El corta fuego crea zonas sobre sus interfaces de red para controlar el "
-"flujo del tráfico."
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid "Custom Rules (/etc/firewall.user)"
+msgstr ""
+
+msgid "Destination"
+msgstr "Destino"
+
+msgid "Destination address"
+msgstr "Dirección de destino"
+
+msgid "Destination port"
+msgstr "Puerto de destino"
 
 #, fuzzy
-msgid "Enable SYN-flood protection"
-msgstr "Protección por exceso de SYN"
+msgid "Destination zone"
+msgstr "Destino"
+
+msgid "Device"
+msgstr ""
 
 msgid "Drop invalid packets"
 msgstr "Rechazar paquetes inválidos"
 
-msgid "Input"
-msgstr "Entrada"
+msgid "Enable NAT Loopback"
+msgstr ""
 
-msgid "Output"
-msgstr "Salida"
+#, fuzzy
+msgid "Enable SYN-flood protection"
+msgstr "Protección por exceso de SYN"
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
+msgstr "Puerto externo"
+
+msgid "Family"
+msgstr ""
+
+msgid "Firewall"
+msgstr "Corta fuego"
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid ""
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
 
 msgid "Forward"
 msgstr ""
 
-msgid "reject"
-msgstr "desechar"
+msgid "General Settings"
+msgstr ""
 
-msgid "drop"
-msgstr "rechazar"
+msgid "IPv4 and IPv6"
+msgstr ""
 
-msgid "accept"
-msgstr "aceptar"
+msgid "IPv4 only"
+msgstr ""
 
-msgid "Zones"
-msgstr "Zonas"
+msgid "IPv6 only"
+msgstr ""
 
-msgid "Name"
+msgid "Input"
+msgstr "Entrada"
+
+msgid "Intended destination address"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
 #, fuzzy
-msgid "MSS clamping"
-msgstr "MSS Clamping"
+msgid "Internal IP address"
+msgstr "Dirección interna"
 
 #, fuzzy
-msgid "Network"
-msgstr "Redes"
+msgid "Internal port"
+msgstr "Puerto externo"
 
-msgid "Traffic Control"
-msgstr "Control de tráfico"
+msgid "Internal port (optional)"
+msgstr "Puerto interno (opcional)"
 
-msgid "Zone-to-Zone traffic"
-msgstr "Tráfico Zona-a-Zona"
+msgid "Limit log messages"
+msgstr ""
 
 #, fuzzy
-msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
-msgstr ""
-"Aquí puede especificar qué tráfico de red is permitido, discho tráfico "
-"fluirá entre las zonas de red definidas. Sólamente las nuevas conexiones "
-"serán aplicadas por las reglas. Los paquetes pertenecientes a conexiones ya "
-"abierta se les permitirá el paso sobre el corta fuego. Si experimenta "
-"ocacionalmente problemas de conexión, intente activar MSS Clamping de otra "
-"forma, deshabilitelo para mejorar considerablemente la performance."
+msgid "MSS clamping"
+msgstr "MSS Clamping"
 
-msgid "Source"
-msgstr "Origen"
+msgid "Masquerading"
+msgstr ""
 
-msgid "Destination"
-msgstr "Destino"
+msgid "Match ICMP type"
+msgstr ""
 
-msgid "Rules"
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
 msgstr ""
 
-msgid "Protocol"
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
 msgstr ""
 
-msgid "Device"
+msgid "Name"
 msgstr ""
 
-msgid "Action"
-msgstr "Acción"
+msgid "Output"
+msgstr "Salida"
 
-msgid "Traffic Redirection"
-msgstr "Redirección de tráfico"
+msgid "Overview"
+msgstr ""
+
+msgid "Port forwarding"
+msgstr "Reenvío de puerto"
 
 msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
-"La redirección de tráfico permite cambiar la dirección de destino de los "
-"paquetes reenviados."
+"El reenvío de puerto permite proveer servicios de red en una red interna a "
+"una red externa (por ejemplo Internet)"
 
-msgid "(optional)"
+msgid "Protocol"
 msgstr ""
 
-msgid "Zone"
-msgstr "Zona"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
 
-msgid "Source port"
-msgstr "Puerto de origen"
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
 
-#, fuzzy
-msgid "Destination IP"
-msgstr "Destino"
+msgid "Redirection type"
+msgstr ""
 
-#, fuzzy
-msgid "IP address"
-msgstr "Dirección IP"
+msgid "Redirections"
+msgstr ""
 
-msgid "Destination port"
-msgstr "Puerto de destino"
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
 
-msgid "Advanced Rules"
-msgstr "Reglas avanzadas"
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
 
-msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+msgid "Restrict to address family"
 msgstr ""
-"Las reglas avanzadas le permite personalizar el corta fuego según sus "
-"necesidades. Sólamente las nuevas conexiones serán afectadas por las reglas. "
-"Los paquetes pertenecientes a conexiones ya abierta, se les permite el libre "
-"paso por el corta fuego."
 
-msgid "Overview"
+msgid "Rules"
 msgstr ""
 
-#, fuzzy
-msgid "Source zone"
-msgstr "Puerto de origen"
+msgid "Source"
+msgstr "Origen"
 
 #, fuzzy
-msgid "Destination zone"
-msgstr "Destino"
+msgid "Source IP address"
+msgstr "Dirección MAC de origen"
 
-msgid "any"
+msgid "Source MAC address"
 msgstr ""
 
 #, fuzzy
 msgid "Source address"
 msgstr "Dirección MAC de origen"
 
-msgid "Destination address"
-msgstr "Dirección de destino"
-
-#, fuzzy
-msgid "Source MAC-address"
-msgstr "Dirección MAC de origen"
+msgid "Source port"
+msgstr "Puerto de origen"
 
 #, fuzzy
-msgid "Source IP address"
-msgstr "Dirección MAC de origen"
+msgid "Source zone"
+msgstr "Puerto de origen"
 
 msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
+"El corta fuego crea zonas sobre sus interfaces de red para controlar el "
+"flujo del tráfico."
 
-msgid "External port"
-msgstr "Puerto externo"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
 
 msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
-#, fuzzy
-msgid "Internal IP address"
-msgstr "Dirección interna"
+msgid "Traffic Redirection"
+msgstr "Redirección de tráfico"
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
+"La redirección de tráfico permite cambiar la dirección de destino de los "
+"paquetes reenviados."
 
-msgid "Internal port (optional)"
-msgstr "Puerto interno (opcional)"
+msgid "Via"
+msgstr ""
 
-msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+msgid "Zone %q"
 msgstr ""
 
-msgid "Port forwarding"
-msgstr "Reenvío de puerto"
+msgid "Zone ⇒ Forwardings"
+msgstr ""
 
-msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+msgid "Zones"
+msgstr "Zonas"
+
+msgid "accept"
+msgstr "aceptar"
+
+msgid "any"
 msgstr ""
-"El reenvío de puerto permite proveer servicios de red en una red interna a "
-"una red externa (por ejemplo Internet)"
+
+msgid "drop"
+msgstr "rechazar"
+
+msgid "reject"
+msgstr "desechar"
 
 #, fuzzy
-msgid "Internal port"
-msgstr "Puerto externo"
+#~ msgid "Network"
+#~ msgstr "Redes"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Control de tráfico"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Tráfico Zona-a-Zona"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Aquí puede especificar qué tráfico de red is permitido, discho tráfico "
+#~ "fluirá entre las zonas de red definidas. Sólamente las nuevas conexiones "
+#~ "serán aplicadas por las reglas. Los paquetes pertenecientes a conexiones "
+#~ "ya abierta se les permitirá el paso sobre el corta fuego. Si experimenta "
+#~ "ocacionalmente problemas de conexión, intente activar MSS Clamping de "
+#~ "otra forma, deshabilitelo para mejorar considerablemente la performance."
+
+#~ msgid "Zone"
+#~ msgstr "Zona"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Destino"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Dirección IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Dirección MAC de origen"
 
 #~ msgid "Custom forwarding"
 #~ msgstr "Renvío personalizado"
diff --git a/po/fr/firewall.po b/po/fr/firewall.po
index 548feeb09..3e672e97c 100644
--- a/po/fr/firewall.po
+++ b/po/fr/firewall.po
@@ -12,144 +12,201 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=(n > 1);\n"
 
+msgid "(optional)"
+msgstr "(optionnel)"
+
+msgid "Action"
+msgstr "Action"
+
+msgid "Advanced Options"
+msgstr ""
+
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-#  applications/luci-fw/luasrc/model/cbi/luci_fw/zones.lua                    #
+#  applications/luci-fw/luasrc/model/cbi/luci_fw/trule.lua                    #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
-msgid "Firewall"
-msgstr "Pare-feu"
+# msgid "Name"
+# msgstr ""
+#
+# msgid "(optional)"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+# msgid "Source port"
+# msgstr ""
+#
+# msgid "Destination port"
+# msgstr ""
+#
+# msgid "Action"
+# msgstr ""
+#
+# msgid "drop"
+# msgstr ""
+#
+# msgid "accept"
+# msgstr ""
+#
+# msgid "reject"
+# msgstr ""
+#
+msgid "Advanced Rules"
+msgstr "Règles avancées"
+
+msgid "Advanced Settings"
+msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
 msgstr ""
-"Le pare-feu crée des zones sur les interfaces réseau pour contrôler le flux "
-"du trafic réseau."
+"Les règles avancées vous laissent personnaliser le pare-feu selon vos "
+"besoins. Seules les nouvelles connexions seront prises en compte. Les "
+"paquets appartenant à des connexions déjà ouvertes sont automatiquement "
+"admis à passer le pare-feu."
 
-msgid "Enable SYN-flood protection"
-msgstr "Activer la protection contre le SYN-flood"
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
 
-msgid "Drop invalid packets"
-msgstr "Ignorer les paquets invalides"
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
 
-msgid "Input"
-msgstr "Entrée"
+msgid "Any"
+msgstr ""
 
-msgid "Output"
-msgstr "Sortie"
+msgid "Covered networks"
+msgstr ""
 
-msgid "Forward"
-msgstr "Transfert"
+msgid "Custom Rules"
+msgstr ""
 
-msgid "reject"
-msgstr "rejeter"
+msgid "Custom Rules (/etc/firewall.user)"
+msgstr ""
 
-msgid "drop"
-msgstr "ignorer"
+msgid "Destination"
+msgstr "Destination"
 
-msgid "accept"
-msgstr "accepter"
+msgid "Destination address"
+msgstr "Adresse de destination"
 
-msgid "Zones"
-msgstr "Zones"
+msgid "Destination port"
+msgstr "Port de destination"
 
-msgid "Name"
-msgstr "Nom"
+msgid "Destination zone"
+msgstr "Zone de destination"
 
-msgid "Masquerading"
+msgid "Device"
+msgstr "Équipement"
+
+msgid "Drop invalid packets"
+msgstr "Ignorer les paquets invalides"
+
+msgid "Enable NAT Loopback"
 msgstr ""
 
-msgid "MSS clamping"
+msgid "Enable SYN-flood protection"
+msgstr "Activer la protection contre le SYN-flood"
+
+msgid "Enable logging on this zone"
 msgstr ""
 
-msgid "Network"
-msgstr "Réseau"
+msgid "External port"
+msgstr "Port externe"
+
+msgid "Family"
+msgstr ""
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-#  applications/luci-fw/luasrc/model/cbi/luci_fw/traffic.lua                  #
+#  applications/luci-fw/luasrc/model/cbi/luci_fw/zones.lua                    #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
-# msgid "Name"
-# msgstr ""
-#
-msgid "Traffic Control"
-msgstr "Contrôle de trafic"
+msgid "Firewall"
+msgstr "Pare-feu"
 
-msgid "Zone-to-Zone traffic"
-msgstr "Trafic zone-à-zone"
+msgid "Firewall - Zone Settings"
+msgstr ""
 
 msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
-msgstr ""
-"Ici, vous pouvez spécifier quel trafic réseau est autorisé à transiter entre "
-"les zones réseau. Seules les nouvelles connexions seront prises en compte. "
-"Les paquets appartenant à des connexions déjà ouvertes sont automatiquement "
-"admis à passer le pare-feu. Si vous subissez des problèmes de connexion "
-"occasionnels, essayer d'activer le MSS clamping; sinon laissez-le désactivé "
-"pour des raisons de performance."
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
+msgstr ""
 
-msgid "Source"
-msgstr "Source"
+msgid "Force connection tracking"
+msgstr ""
 
-msgid "Destination"
-msgstr "Destination"
+msgid "Forward"
+msgstr "Transfert"
 
-msgid "Rules"
-msgstr "Règles"
+msgid "General Settings"
+msgstr ""
 
-msgid "Protocol"
-msgstr "Protocole"
+msgid "IPv4 and IPv6"
+msgstr ""
 
-msgid "Device"
-msgstr "Équipement"
+msgid "IPv4 only"
+msgstr ""
 
-msgid "Action"
-msgstr "Action"
+msgid "IPv6 only"
+msgstr ""
 
-# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-#  applications/luci-fw/luasrc/model/cbi/luci_fw/redirect.lua                 #
-# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-#
-# msgid "Name"
-# msgstr ""
-#
-# msgid "Protocol"
-# msgstr ""
-#
-msgid "Traffic Redirection"
-msgstr "Redirection du trafic"
+msgid "Input"
+msgstr "Entrée"
 
-msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+msgid "Intended destination address"
 msgstr ""
-"La redirection de trafic vous permet de changer l'adresse de destination des "
-"paquets transférés."
 
-msgid "(optional)"
-msgstr "(optionnel)"
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+msgid "Internal IP address"
+msgstr "Adresse IP interne"
 
-msgid "Zone"
-msgstr "Zone"
+msgid "Internal port"
+msgstr "Port interne"
 
-msgid "Source port"
-msgstr "Port source"
+msgid "Internal port (optional)"
+msgstr "Port interne (optionnel)"
+
+msgid "Limit log messages"
+msgstr ""
+
+msgid "MSS clamping"
+msgstr ""
 
-msgid "Destination IP"
-msgstr "IP de destination"
+msgid "Masquerading"
+msgstr ""
 
-msgid "IP address"
-msgstr "Adresse IP"
+msgid "Match ICMP type"
+msgstr ""
 
-msgid "Destination port"
-msgstr "Port de destination"
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Prendre en compte le trafic dirigé vers le port de destination donné (ou la "
+"gamme de ports) sur cet hôte"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
+msgstr ""
+"Prendre en compte le trafic entrant provenant du port source donné (ou la "
+"gamme de ports) sur l'hôte client"
+
+msgid "Name"
+msgstr "Nom"
+
+msgid "Output"
+msgstr "Sortie"
+
+msgid "Overview"
+msgstr "Vue d'ensemble"
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-#  applications/luci-fw/luasrc/model/cbi/luci_fw/trule.lua                    #
+#  applications/luci-fw/luasrc/model/cbi/luci_fw/miniportfw.lua               #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
 # msgid "Name"
@@ -161,58 +218,54 @@ msgstr "Port de destination"
 # msgid "Protocol"
 # msgstr ""
 #
-# msgid "Source port"
-# msgstr ""
-#
-# msgid "Destination port"
-# msgstr ""
-#
-# msgid "Action"
-# msgstr ""
-#
-# msgid "drop"
-# msgstr ""
-#
-# msgid "accept"
+# msgid "External port"
 # msgstr ""
 #
-# msgid "reject"
+# msgid "Internal IP address"
 # msgstr ""
 #
-msgid "Advanced Rules"
-msgstr "Règles avancées"
+msgid "Port forwarding"
+msgstr "Redirection de port"
 
 msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
-"Les règles avancées vous laissent personnaliser le pare-feu selon vos "
-"besoins. Seules les nouvelles connexions seront prises en compte. Les "
-"paquets appartenant à des connexions déjà ouvertes sont automatiquement "
-"admis à passer le pare-feu."
+"La redirection de port vous permet d'exposer des services réseaux de votre "
+"réseau local au réseau externe."
 
-msgid "Overview"
-msgstr "Vue d'ensemble"
+msgid "Protocol"
+msgstr "Protocole"
 
-msgid "Source zone"
-msgstr "Zone source"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Rediriger le trafic entrant correspondant vers le port donné sur l'hôte "
+"interne"
 
-msgid "Destination zone"
-msgstr "Zone de destination"
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Rediriger le trafic entrant correspondant vers l'hôte interne spécifié"
 
-#, fuzzy
-msgid "any"
-msgstr "tous"
+msgid "Redirection type"
+msgstr ""
 
-msgid "Source address"
-msgstr "Adresse source"
+msgid "Redirections"
+msgstr ""
 
-msgid "Destination address"
-msgstr "Adresse de destination"
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
 
-msgid "Source MAC-address"
-msgstr "Adresse MAC source"
+msgid "Rules"
+msgstr "Règles"
+
+msgid "Source"
+msgstr "Source"
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #  applications/luci-fw/luasrc/model/cbi/luci_fw/rrule.lua                    #
@@ -247,66 +300,125 @@ msgstr "Adresse MAC source"
 msgid "Source IP address"
 msgstr "Adresse IP source"
 
-msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+msgid "Source MAC address"
 msgstr ""
-"Prendre en compte le trafic entrant provenant du port source donné (ou la "
-"gamme de ports) sur l'hôte client"
 
-msgid "External port"
-msgstr "Port externe"
+msgid "Source address"
+msgstr "Adresse source"
 
-msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
-msgstr ""
-"Prendre en compte le trafic dirigé vers le port de destination donné (ou la "
-"gamme de ports) sur cet hôte"
+msgid "Source port"
+msgstr "Port source"
 
-msgid "Internal IP address"
-msgstr "Adresse IP interne"
+msgid "Source zone"
+msgstr "Zone source"
 
-msgid "Redirect matched incoming traffic to the specified internal host"
-msgstr "Rediriger le trafic entrant correspondant vers l'hôte interne spécifié"
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"Le pare-feu crée des zones sur les interfaces réseau pour contrôler le flux "
+"du trafic réseau."
 
-msgid "Internal port (optional)"
-msgstr "Port interne (optionnel)"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
 
 msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
-"Rediriger le trafic entrant correspondant vers le port donné sur l'hôte "
-"interne"
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-#  applications/luci-fw/luasrc/model/cbi/luci_fw/miniportfw.lua               #
+#  applications/luci-fw/luasrc/model/cbi/luci_fw/redirect.lua                 #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
 # msgid "Name"
 # msgstr ""
 #
-# msgid "(optional)"
-# msgstr ""
-#
 # msgid "Protocol"
 # msgstr ""
 #
-# msgid "External port"
-# msgstr ""
-#
-# msgid "Internal IP address"
-# msgstr ""
-#
-msgid "Port forwarding"
-msgstr "Redirection de port"
+msgid "Traffic Redirection"
+msgstr "Redirection du trafic"
 
 msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
-"La redirection de port vous permet d'exposer des services réseaux de votre "
-"réseau local au réseau externe."
+"La redirection de trafic vous permet de changer l'adresse de destination des "
+"paquets transférés."
 
-msgid "Internal port"
-msgstr "Port interne"
+msgid "Via"
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr "Zones"
+
+msgid "accept"
+msgstr "accepter"
+
+#, fuzzy
+msgid "any"
+msgstr "tous"
+
+msgid "drop"
+msgstr "ignorer"
+
+msgid "reject"
+msgstr "rejeter"
+
+#~ msgid "Network"
+#~ msgstr "Réseau"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#  applications/luci-fw/luasrc/model/cbi/luci_fw/traffic.lua                  #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Name"
+# msgstr ""
+#
+#~ msgid "Traffic Control"
+#~ msgstr "Contrôle de trafic"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Trafic zone-à-zone"
+
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Ici, vous pouvez spécifier quel trafic réseau est autorisé à transiter "
+#~ "entre les zones réseau. Seules les nouvelles connexions seront prises en "
+#~ "compte. Les paquets appartenant à des connexions déjà ouvertes sont "
+#~ "automatiquement admis à passer le pare-feu. Si vous subissez des "
+#~ "problèmes de connexion occasionnels, essayer d'activer le MSS clamping; "
+#~ "sinon laissez-le désactivé pour des raisons de performance."
+
+#~ msgid "Zone"
+#~ msgstr "Zone"
+
+#~ msgid "Destination IP"
+#~ msgstr "IP de destination"
+
+#~ msgid "IP address"
+#~ msgstr "Adresse IP"
+
+#~ msgid "Source MAC-address"
+#~ msgstr "Adresse MAC source"
diff --git a/po/it/firewall.po b/po/it/firewall.po
index d0d83b7ea..b7231a37e 100644
--- a/po/it/firewall.po
+++ b/po/it/firewall.po
@@ -12,139 +12,193 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Translate Toolkit 1.1.1\n"
 
-msgid "Firewall"
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Advanced Options"
+msgstr ""
+
+msgid "Advanced Rules"
+msgstr ""
+
+msgid "Advanced Settings"
 msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
 msgstr ""
 
-msgid "Enable SYN-flood protection"
+msgid "Allow forward from <em>source zones</em>:"
 msgstr ""
 
-msgid "Drop invalid packets"
+msgid "Allow forward to <em>destination zones</em>:"
 msgstr ""
 
-msgid "Input"
+msgid "Any"
 msgstr ""
 
-msgid "Output"
+msgid "Covered networks"
 msgstr ""
 
-msgid "Forward"
+msgid "Custom Rules"
 msgstr ""
 
-msgid "reject"
+msgid "Custom Rules (/etc/firewall.user)"
 msgstr ""
 
-msgid "drop"
+msgid "Destination"
 msgstr ""
 
-msgid "accept"
+msgid "Destination address"
 msgstr ""
 
-msgid "Zones"
+msgid "Destination port"
 msgstr ""
 
-msgid "Name"
+msgid "Destination zone"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Device"
 msgstr ""
 
-msgid "MSS clamping"
+msgid "Drop invalid packets"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
 msgstr ""
 
-msgid "Network"
+msgid "Family"
 msgstr ""
 
-msgid "Traffic Control"
+msgid "Firewall"
 msgstr ""
 
-msgid "Zone-to-Zone traffic"
+msgid "Firewall - Zone Settings"
 msgstr ""
 
 msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
 msgstr ""
 
-msgid "Source"
+msgid "Force connection tracking"
 msgstr ""
 
-msgid "Destination"
+msgid "Forward"
 msgstr ""
 
-msgid "Rules"
+msgid "General Settings"
 msgstr ""
 
-msgid "Protocol"
+msgid "IPv4 and IPv6"
 msgstr ""
 
-msgid "Device"
+msgid "IPv4 only"
 msgstr ""
 
-msgid "Action"
+msgid "IPv6 only"
 msgstr ""
 
-msgid "Traffic Redirection"
+msgid "Input"
 msgstr ""
 
-msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+msgid "Intended destination address"
 msgstr ""
 
-msgid "(optional)"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
-msgid "Zone"
+msgid "Internal IP address"
 msgstr ""
 
-msgid "Source port"
+msgid "Internal port"
 msgstr ""
 
-msgid "Destination IP"
+msgid "Internal port (optional)"
 msgstr ""
 
-msgid "IP address"
+msgid "Limit log messages"
 msgstr ""
 
-msgid "Destination port"
+msgid "MSS clamping"
 msgstr ""
 
-msgid "Advanced Rules"
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match ICMP type"
 msgstr ""
 
 msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "Output"
 msgstr ""
 
 msgid "Overview"
 msgstr ""
 
-msgid "Source zone"
+msgid "Port forwarding"
 msgstr ""
 
-msgid "Destination zone"
+msgid ""
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
 
-msgid "any"
+msgid "Protocol"
 msgstr ""
 
-msgid "Source address"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
 msgstr ""
 
-msgid "Destination address"
+msgid "Redirect matched incoming traffic to the specified internal host"
 msgstr ""
 
-msgid "Source MAC-address"
+msgid "Redirection type"
+msgstr ""
+
+msgid "Redirections"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rules"
+msgstr ""
+
+msgid "Source"
 msgstr ""
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
@@ -180,39 +234,68 @@ msgstr ""
 msgid "Source IP address"
 msgstr ""
 
-msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+msgid "Source MAC address"
 msgstr ""
 
-msgid "External port"
+msgid "Source address"
 msgstr ""
 
-msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+msgid "Source port"
 msgstr ""
 
-msgid "Internal IP address"
+msgid "Source zone"
 msgstr ""
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
 
-msgid "Internal port (optional)"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
 msgstr ""
 
 msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
-msgid "Port forwarding"
+msgid "Traffic Redirection"
 msgstr ""
 
 msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
 
-msgid "Internal port"
+msgid "Via"
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr ""
+
+msgid "accept"
+msgstr ""
+
+msgid "any"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
 msgstr ""
diff --git a/po/ja/firewall.po b/po/ja/firewall.po
index d0d83b7ea..b7231a37e 100644
--- a/po/ja/firewall.po
+++ b/po/ja/firewall.po
@@ -12,139 +12,193 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Translate Toolkit 1.1.1\n"
 
-msgid "Firewall"
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Advanced Options"
+msgstr ""
+
+msgid "Advanced Rules"
+msgstr ""
+
+msgid "Advanced Settings"
 msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
 msgstr ""
 
-msgid "Enable SYN-flood protection"
+msgid "Allow forward from <em>source zones</em>:"
 msgstr ""
 
-msgid "Drop invalid packets"
+msgid "Allow forward to <em>destination zones</em>:"
 msgstr ""
 
-msgid "Input"
+msgid "Any"
 msgstr ""
 
-msgid "Output"
+msgid "Covered networks"
 msgstr ""
 
-msgid "Forward"
+msgid "Custom Rules"
 msgstr ""
 
-msgid "reject"
+msgid "Custom Rules (/etc/firewall.user)"
 msgstr ""
 
-msgid "drop"
+msgid "Destination"
 msgstr ""
 
-msgid "accept"
+msgid "Destination address"
 msgstr ""
 
-msgid "Zones"
+msgid "Destination port"
 msgstr ""
 
-msgid "Name"
+msgid "Destination zone"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Device"
 msgstr ""
 
-msgid "MSS clamping"
+msgid "Drop invalid packets"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
 msgstr ""
 
-msgid "Network"
+msgid "Family"
 msgstr ""
 
-msgid "Traffic Control"
+msgid "Firewall"
 msgstr ""
 
-msgid "Zone-to-Zone traffic"
+msgid "Firewall - Zone Settings"
 msgstr ""
 
 msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
 msgstr ""
 
-msgid "Source"
+msgid "Force connection tracking"
 msgstr ""
 
-msgid "Destination"
+msgid "Forward"
 msgstr ""
 
-msgid "Rules"
+msgid "General Settings"
 msgstr ""
 
-msgid "Protocol"
+msgid "IPv4 and IPv6"
 msgstr ""
 
-msgid "Device"
+msgid "IPv4 only"
 msgstr ""
 
-msgid "Action"
+msgid "IPv6 only"
 msgstr ""
 
-msgid "Traffic Redirection"
+msgid "Input"
 msgstr ""
 
-msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+msgid "Intended destination address"
 msgstr ""
 
-msgid "(optional)"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
-msgid "Zone"
+msgid "Internal IP address"
 msgstr ""
 
-msgid "Source port"
+msgid "Internal port"
 msgstr ""
 
-msgid "Destination IP"
+msgid "Internal port (optional)"
 msgstr ""
 
-msgid "IP address"
+msgid "Limit log messages"
 msgstr ""
 
-msgid "Destination port"
+msgid "MSS clamping"
 msgstr ""
 
-msgid "Advanced Rules"
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match ICMP type"
 msgstr ""
 
 msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "Output"
 msgstr ""
 
 msgid "Overview"
 msgstr ""
 
-msgid "Source zone"
+msgid "Port forwarding"
 msgstr ""
 
-msgid "Destination zone"
+msgid ""
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
 
-msgid "any"
+msgid "Protocol"
 msgstr ""
 
-msgid "Source address"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
 msgstr ""
 
-msgid "Destination address"
+msgid "Redirect matched incoming traffic to the specified internal host"
 msgstr ""
 
-msgid "Source MAC-address"
+msgid "Redirection type"
+msgstr ""
+
+msgid "Redirections"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rules"
+msgstr ""
+
+msgid "Source"
 msgstr ""
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
@@ -180,39 +234,68 @@ msgstr ""
 msgid "Source IP address"
 msgstr ""
 
-msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+msgid "Source MAC address"
 msgstr ""
 
-msgid "External port"
+msgid "Source address"
 msgstr ""
 
-msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+msgid "Source port"
 msgstr ""
 
-msgid "Internal IP address"
+msgid "Source zone"
 msgstr ""
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
 
-msgid "Internal port (optional)"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
 msgstr ""
 
 msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
-msgid "Port forwarding"
+msgid "Traffic Redirection"
 msgstr ""
 
 msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
 
-msgid "Internal port"
+msgid "Via"
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr ""
+
+msgid "accept"
+msgstr ""
+
+msgid "any"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
 msgstr ""
diff --git a/po/no/firewall.po b/po/no/firewall.po
index 3bea9015a..65aed482b 100644
--- a/po/no/firewall.po
+++ b/po/no/firewall.po
@@ -11,143 +11,200 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 
+msgid "(optional)"
+msgstr "(valgfri)"
+
+msgid "Action"
+msgstr "Handling"
+
+msgid "Advanced Options"
+msgstr ""
+
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/zones.lua      #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/trule.lua      #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
-msgid "Firewall"
-msgstr "Brannmur"
+# msgid "Name"
+# msgstr ""
+#
+# msgid "(optional)"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+# msgid "Source port"
+# msgstr ""
+#
+# msgid "Destination port"
+# msgstr ""
+#
+# msgid "Action"
+# msgstr ""
+#
+# msgid "drop"
+# msgstr ""
+#
+# msgid "accept"
+# msgstr ""
+#
+# msgid "reject"
+# msgstr ""
+#
+msgid "Advanced Rules"
+msgstr "Avanserte Regler"
+
+msgid "Advanced Settings"
+msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
 msgstr ""
-"Brannmuren skaper soner over nettverkets grensesnitt for å styre "
-"nettverkstrafikken. Opplever du tilfeldige nettverks problemer kan du prøve "
-"å aktivere MMS Kontroll, om ikke er det best å deaktivere MMS Kontrollen for "
-"best ytelse."
+"Avanserte regler lar deg tilpasse brannmuren til dine behov. Kun nye "
+"tilkoblinger blir berørt. Pakker som hører til åpne tilkoblinger får "
+"automatisk tillatelse til å passere brannmuren."
 
-msgid "Enable SYN-flood protection"
-msgstr "Aktiver SYN-flood beskyttelse"
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
 
-msgid "Drop invalid packets"
-msgstr "Forkast ugyldige pakker"
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
 
-msgid "Input"
-msgstr "Inndata"
+msgid "Any"
+msgstr "Alle"
 
-msgid "Output"
-msgstr "Utdata"
+msgid "Covered networks"
+msgstr ""
 
-msgid "Forward"
-msgstr "Videresend"
+msgid "Custom Rules"
+msgstr ""
 
-msgid "reject"
-msgstr "avslå"
+msgid "Custom Rules (/etc/firewall.user)"
+msgstr ""
 
-msgid "drop"
-msgstr "forkast"
+msgid "Destination"
+msgstr "Destinasjon"
 
-msgid "accept"
-msgstr "godta"
+msgid "Destination address"
+msgstr "Destinasjon adresse"
 
-msgid "Zones"
-msgstr "Soner"
+msgid "Destination port"
+msgstr ""
 
-msgid "Name"
-msgstr "Navn"
+msgid "Destination zone"
+msgstr "Destinasjon Sone"
 
-msgid "Masquerading"
-msgstr "Masquerading"
+msgid "Device"
+msgstr "Enhet"
 
-msgid "MSS clamping"
-msgstr "MSS Kontroll (Clamping)"
+msgid "Drop invalid packets"
+msgstr "Forkast ugyldige pakker"
 
-msgid "Network"
-msgstr "Nettverk"
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr "Aktiver SYN-flood beskyttelse"
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
+msgstr "Ekstern port"
+
+msgid "Family"
+msgstr ""
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/traffic.lua    #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/zones.lua      #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
-# msgid "Name"
-# msgstr ""
-#
-msgid "Traffic Control"
-msgstr "Trafikk Kontroll"
+msgid "Firewall"
+msgstr "Brannmur"
 
-msgid "Zone-to-Zone traffic"
-msgstr "Sone-til-Sone trafikk"
+msgid "Firewall - Zone Settings"
+msgstr ""
 
 msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
 msgstr ""
-"Her kan du angi hvilken nettverkstrafikk som har lov til å passere mellom "
-"nettverkssoner. Bare nye tilkoblinger blir berørt da pakker som tilhører "
-"eksisterende koblinger automatisk får lov å passere brannmuren.<br /> "
 
-msgid "Source"
-msgstr "Kilde"
+msgid "Force connection tracking"
+msgstr ""
 
-msgid "Destination"
-msgstr "Destinasjon"
+msgid "Forward"
+msgstr "Videresend"
 
-msgid "Rules"
-msgstr "Regler"
+msgid "General Settings"
+msgstr ""
 
-msgid "Protocol"
-msgstr "Protokoll"
+msgid "IPv4 and IPv6"
+msgstr ""
 
-msgid "Device"
-msgstr "Enhet"
+msgid "IPv4 only"
+msgstr ""
 
-msgid "Action"
-msgstr "Handling"
+msgid "IPv6 only"
+msgstr ""
 
-# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/redirect.lua   #
-# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-#
-# msgid "Name"
-# msgstr ""
-#
-# msgid "Protocol"
-# msgstr ""
-#
-msgid "Traffic Redirection"
-msgstr "Trafikk Omdirigering"
+msgid "Input"
+msgstr "Inndata"
 
-msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+msgid "Intended destination address"
 msgstr ""
-"<abbr title=\"Traffic Redirection\">Trafikk Omdirigering</abbr> lar deg "
-"endre destinasjons adresse på videresendte pakker."
 
-msgid "(optional)"
-msgstr "(valgfri)"
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+msgid "Internal IP address"
+msgstr "Intern IP adresse"
 
-msgid "Zone"
-msgstr "Sone"
+msgid "Internal port"
+msgstr "Intern port"
 
-msgid "Source port"
-msgstr "Kilde port"
+msgid "Internal port (optional)"
+msgstr "Intern port (valfritt)"
+
+msgid "Limit log messages"
+msgstr ""
+
+msgid "MSS clamping"
+msgstr "MSS Kontroll (Clamping)"
 
-msgid "Destination IP"
-msgstr "Destinasjon IP"
+msgid "Masquerading"
+msgstr "Masquerading"
 
-msgid "IP address"
-msgstr "IP adresse"
+msgid "Match ICMP type"
+msgstr ""
 
-msgid "Destination port"
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
 msgstr ""
+"Match innkommende trafikk rettet mot den gitte destinasjons port/portområdet "
+"på denne verten"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
+msgstr ""
+"Match innkommende trafikk som kommer fra den gitte kilde port/portområdet "
+"fra klienten"
+
+msgid "Name"
+msgstr "Navn"
+
+msgid "Output"
+msgstr "Utdata"
+
+msgid "Overview"
+msgstr "Oversikt"
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/trule.lua      #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/miniportfw.lua #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
 # msgid "Name"
@@ -159,56 +216,54 @@ msgstr ""
 # msgid "Protocol"
 # msgstr ""
 #
-# msgid "Source port"
-# msgstr ""
-#
-# msgid "Destination port"
-# msgstr ""
-#
-# msgid "Action"
-# msgstr ""
-#
-# msgid "drop"
-# msgstr ""
-#
-# msgid "accept"
+# msgid "External port"
 # msgstr ""
 #
-# msgid "reject"
+# msgid "Internal IP address"
 # msgstr ""
 #
-msgid "Advanced Rules"
-msgstr "Avanserte Regler"
+msgid "Port forwarding"
+msgstr "Port Videresending"
 
 msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
-"Avanserte regler lar deg tilpasse brannmuren til dine behov. Kun nye "
-"tilkoblinger blir berørt. Pakker som hører til åpne tilkoblinger får "
-"automatisk tillatelse til å passere brannmuren."
+"<abbr title=\"Port Forwarding\">Port Videresending</abbr> tillater at "
+"nettverkstjenester fra det interne nettverket tilbys et eksternt nettverk."
 
-msgid "Overview"
-msgstr "Oversikt"
+msgid "Protocol"
+msgstr "Protokoll"
 
-msgid "Source zone"
-msgstr "Kilde Sone"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Omadresser matchet innkommende trafikk til den gitte porten på den interne "
+"vert"
 
-msgid "Destination zone"
-msgstr "Destinasjon Sone"
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Omadresser matchet innkommende trafikk til den angitte interne verten"
 
-msgid "any"
-msgstr "alle"
+msgid "Redirection type"
+msgstr ""
 
-msgid "Source address"
-msgstr "Kilde adresse"
+msgid "Redirections"
+msgstr ""
 
-msgid "Destination address"
-msgstr "Destinasjon adresse"
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rules"
+msgstr "Regler"
 
-msgid "Source MAC-address"
-msgstr "Kilde MAC-adresse"
+msgid "Source"
+msgstr "Kilde"
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 # Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/rrule.lua      #
@@ -243,72 +298,126 @@ msgstr "Kilde MAC-adresse"
 msgid "Source IP address"
 msgstr "Kilde IP adresse"
 
-msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+msgid "Source MAC address"
 msgstr ""
-"Match innkommende trafikk som kommer fra den gitte kilde port/portområdet "
-"fra klienten"
 
-msgid "External port"
-msgstr "Ekstern port"
+msgid "Source address"
+msgstr "Kilde adresse"
 
-msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
-msgstr ""
-"Match innkommende trafikk rettet mot den gitte destinasjons port/portområdet "
-"på denne verten"
+msgid "Source port"
+msgstr "Kilde port"
 
-msgid "Internal IP address"
-msgstr "Intern IP adresse"
+msgid "Source zone"
+msgstr "Kilde Sone"
 
-msgid "Redirect matched incoming traffic to the specified internal host"
-msgstr "Omadresser matchet innkommende trafikk til den angitte interne verten"
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"Brannmuren skaper soner over nettverkets grensesnitt for å styre "
+"nettverkstrafikken. Opplever du tilfeldige nettverks problemer kan du prøve "
+"å aktivere MMS Kontroll, om ikke er det best å deaktivere MMS Kontrollen for "
+"best ytelse."
 
-msgid "Internal port (optional)"
-msgstr "Intern port (valfritt)"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
 
 msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
-"Omadresser matchet innkommende trafikk til den gitte porten på den interne "
-"vert"
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/miniportfw.lua #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/redirect.lua   #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
 # msgid "Name"
 # msgstr ""
 #
-# msgid "(optional)"
-# msgstr ""
-#
 # msgid "Protocol"
 # msgstr ""
 #
-# msgid "External port"
-# msgstr ""
+msgid "Traffic Redirection"
+msgstr "Trafikk Omdirigering"
+
+msgid ""
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
+msgstr ""
+"<abbr title=\"Traffic Redirection\">Trafikk Omdirigering</abbr> lar deg "
+"endre destinasjons adresse på videresendte pakker."
+
+msgid "Via"
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr "Soner"
+
+msgid "accept"
+msgstr "godta"
+
+msgid "any"
+msgstr "alle"
+
+msgid "drop"
+msgstr "forkast"
+
+msgid "reject"
+msgstr "avslå"
+
+#~ msgid "Network"
+#~ msgstr "Nettverk"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/traffic.lua    #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
-# msgid "Internal IP address"
+# msgid "Name"
 # msgstr ""
 #
-msgid "Port forwarding"
-msgstr "Port Videresending"
+#~ msgid "Traffic Control"
+#~ msgstr "Trafikk Kontroll"
 
-msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
-msgstr ""
-"<abbr title=\"Port Forwarding\">Port Videresending</abbr> tillater at "
-"nettverkstjenester fra det interne nettverket tilbys et eksternt nettverk."
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Sone-til-Sone trafikk"
 
-msgid "Internal port"
-msgstr "Intern port"
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Her kan du angi hvilken nettverkstrafikk som har lov til å passere mellom "
+#~ "nettverkssoner. Bare nye tilkoblinger blir berørt da pakker som tilhører "
+#~ "eksisterende koblinger automatisk får lov å passere brannmuren.<br /> "
+
+#~ msgid "Zone"
+#~ msgstr "Sone"
+
+#~ msgid "Destination IP"
+#~ msgstr "Destinasjon IP"
+
+#~ msgid "IP address"
+#~ msgstr "IP adresse"
+
+#~ msgid "Source MAC-address"
+#~ msgstr "Kilde MAC-adresse"
 
 #~ msgid "Destinasjon port"
 #~ msgstr "Destination port"
-
-#~ msgid "Any"
-#~ msgstr "Alle"
diff --git a/po/pl/firewall.po b/po/pl/firewall.po
index e0e10be74..d1063a93d 100644
--- a/po/pl/firewall.po
+++ b/po/pl/firewall.po
@@ -12,134 +12,193 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Translate Toolkit 1.1.1\n"
 
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Advanced Options"
+msgstr ""
+
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/zones.lua      #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/trule.lua      #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
-msgid "Firewall"
+# msgid "Name"
+# msgstr ""
+#
+# msgid "(optional)"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+# msgid "Source port"
+# msgstr ""
+#
+# msgid "Destination port"
+# msgstr ""
+#
+# msgid "Action"
+# msgstr ""
+#
+# msgid "drop"
+# msgstr ""
+#
+# msgid "accept"
+# msgstr ""
+#
+# msgid "reject"
+# msgstr ""
+#
+msgid "Advanced Rules"
+msgstr ""
+
+msgid "Advanced Settings"
 msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
 msgstr ""
 
-msgid "Enable SYN-flood protection"
+msgid "Allow forward from <em>source zones</em>:"
 msgstr ""
 
-msgid "Drop invalid packets"
+msgid "Allow forward to <em>destination zones</em>:"
 msgstr ""
 
-msgid "Input"
+msgid "Any"
 msgstr ""
 
-msgid "Output"
+msgid "Covered networks"
 msgstr ""
 
-msgid "Forward"
+msgid "Custom Rules"
 msgstr ""
 
-msgid "reject"
+msgid "Custom Rules (/etc/firewall.user)"
 msgstr ""
 
-msgid "drop"
+msgid "Destination"
 msgstr ""
 
-msgid "accept"
+msgid "Destination address"
 msgstr ""
 
-msgid "Zones"
+msgid "Destination port"
 msgstr ""
 
-msgid "Name"
+msgid "Destination zone"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Device"
 msgstr ""
 
-msgid "MSS clamping"
+msgid "Drop invalid packets"
 msgstr ""
 
-msgid "Network"
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
+msgstr ""
+
+msgid "Family"
 msgstr ""
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/traffic.lua    #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/zones.lua      #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
-# msgid "Name"
-# msgstr ""
-#
-msgid "Traffic Control"
+msgid "Firewall"
 msgstr ""
 
-msgid "Zone-to-Zone traffic"
+msgid "Firewall - Zone Settings"
 msgstr ""
 
 msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
 msgstr ""
 
-msgid "Source"
+msgid "Force connection tracking"
 msgstr ""
 
-msgid "Destination"
+msgid "Forward"
 msgstr ""
 
-msgid "Rules"
+msgid "General Settings"
 msgstr ""
 
-msgid "Protocol"
+msgid "IPv4 and IPv6"
 msgstr ""
 
-msgid "Device"
+msgid "IPv4 only"
 msgstr ""
 
-msgid "Action"
+msgid "IPv6 only"
 msgstr ""
 
-# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/redirect.lua   #
-# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-#
-# msgid "Name"
-# msgstr ""
-#
-# msgid "Protocol"
-# msgstr ""
-#
-msgid "Traffic Redirection"
+msgid "Input"
 msgstr ""
 
-msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+msgid "Intended destination address"
 msgstr ""
 
-msgid "(optional)"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
-msgid "Zone"
+msgid "Internal IP address"
 msgstr ""
 
-msgid "Source port"
+msgid "Internal port"
 msgstr ""
 
-msgid "Destination IP"
+msgid "Internal port (optional)"
 msgstr ""
 
-msgid "IP address"
+msgid "Limit log messages"
 msgstr ""
 
-msgid "Destination port"
+msgid "MSS clamping"
+msgstr ""
+
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "Output"
+msgstr ""
+
+msgid "Overview"
 msgstr ""
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/trule.lua      #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/miniportfw.lua #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
 # msgid "Name"
@@ -151,52 +210,49 @@ msgstr ""
 # msgid "Protocol"
 # msgstr ""
 #
-# msgid "Source port"
-# msgstr ""
-#
-# msgid "Destination port"
-# msgstr ""
-#
-# msgid "Action"
-# msgstr ""
-#
-# msgid "drop"
-# msgstr ""
-#
-# msgid "accept"
+# msgid "External port"
 # msgstr ""
 #
-# msgid "reject"
+# msgid "Internal IP address"
 # msgstr ""
 #
-msgid "Advanced Rules"
+msgid "Port forwarding"
 msgstr ""
 
 msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
 
-msgid "Overview"
+msgid "Protocol"
 msgstr ""
 
-msgid "Source zone"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
 msgstr ""
 
-msgid "Destination zone"
+msgid "Redirect matched incoming traffic to the specified internal host"
 msgstr ""
 
-msgid "any"
+msgid "Redirection type"
 msgstr ""
 
-msgid "Source address"
+msgid "Redirections"
 msgstr ""
 
-msgid "Destination address"
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
 msgstr ""
 
-msgid "Source MAC-address"
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rules"
+msgstr ""
+
+msgid "Source"
 msgstr ""
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
@@ -232,58 +288,78 @@ msgstr ""
 msgid "Source IP address"
 msgstr ""
 
-msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+msgid "Source MAC address"
 msgstr ""
 
-msgid "External port"
+msgid "Source address"
 msgstr ""
 
-msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+msgid "Source port"
 msgstr ""
 
-msgid "Internal IP address"
+msgid "Source zone"
 msgstr ""
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
 
-msgid "Internal port (optional)"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
 msgstr ""
 
 msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
-# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/miniportfw.lua #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/redirect.lua   #
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
 #
 # msgid "Name"
 # msgstr ""
 #
-# msgid "(optional)"
-# msgstr ""
-#
 # msgid "Protocol"
 # msgstr ""
 #
-# msgid "External port"
-# msgstr ""
-#
-# msgid "Internal IP address"
-# msgstr ""
-#
-msgid "Port forwarding"
+msgid "Traffic Redirection"
 msgstr ""
 
 msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
 
-msgid "Internal port"
+msgid "Via"
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr ""
+
+msgid "accept"
+msgstr ""
+
+msgid "any"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
 msgstr ""
diff --git a/po/pt/firewall.po b/po/pt/firewall.po
index 21a29ecf7..9ea6973cb 100644
--- a/po/pt/firewall.po
+++ b/po/pt/firewall.po
@@ -11,207 +11,319 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Pootle 1.1.0\n"
 
-msgid "Firewall"
-msgstr "Firewall"
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr "Acção"
+
+msgid "Advanced Options"
+msgstr ""
+
+msgid "Advanced Rules"
+msgstr "Regras Avançadas"
+
+msgid "Advanced Settings"
+msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
+msgstr ""
+"As regras avançadas permitem a personalização da firewall de acordo com as "
+"necessidades. Apenas as novas ligações serão processadas. Pacotes que "
+"pertençam a ligações já abertas estão automaticamente autorizados a passar "
+"pela firewall."
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
 msgstr ""
-"O firewall cria zonas sobre as interfaces de rede para controlar o fluxo do "
-"tráfego."
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid "Custom Rules (/etc/firewall.user)"
+msgstr ""
+
+msgid "Destination"
+msgstr "Destino"
+
+msgid "Destination address"
+msgstr "Endereço de destino"
+
+msgid "Destination port"
+msgstr "Porta de destino"
 
 #, fuzzy
-msgid "Enable SYN-flood protection"
-msgstr "Proteção SYN-flood"
+msgid "Destination zone"
+msgstr "Destino"
+
+msgid "Device"
+msgstr ""
 
 msgid "Drop invalid packets"
 msgstr "Dropar pacotes inválidos"
 
-msgid "Input"
-msgstr "Entrada"
+msgid "Enable NAT Loopback"
+msgstr ""
 
-msgid "Output"
-msgstr "Saída"
+#, fuzzy
+msgid "Enable SYN-flood protection"
+msgstr "Proteção SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
+msgstr "Porta Externa"
+
+msgid "Family"
+msgstr ""
+
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid ""
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
 
 msgid "Forward"
 msgstr ""
 
-msgid "reject"
-msgstr "rejeitar"
+msgid "General Settings"
+msgstr ""
 
-msgid "drop"
-msgstr "dropar"
+msgid "IPv4 and IPv6"
+msgstr ""
 
-msgid "accept"
-msgstr "aceitar"
+msgid "IPv4 only"
+msgstr ""
 
-msgid "Zones"
-msgstr "Zonas"
+msgid "IPv6 only"
+msgstr ""
 
-msgid "Name"
+msgid "Input"
+msgstr "Entrada"
+
+msgid "Intended destination address"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
 #, fuzzy
-msgid "MSS clamping"
-msgstr "MSS-Correction"
+msgid "Internal IP address"
+msgstr "Endereço interno"
 
 #, fuzzy
-msgid "Network"
-msgstr "Redes"
+msgid "Internal port"
+msgstr "Porta Externa"
 
-msgid "Traffic Control"
-msgstr "Controle de Tráfego"
+msgid "Internal port (optional)"
+msgstr "Porta interna (opcional)"
 
-msgid "Zone-to-Zone traffic"
-msgstr "Tráfego de Zona-para-Zona"
+msgid "Limit log messages"
+msgstr ""
 
 #, fuzzy
-msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
-msgstr ""
-"Aqui você pode especificar qual tráfego de rede será permitido para o fluxo "
-"entre zonas das redes. Somente novas conexões serão processadas. Pacotes "
-"pertencentes à conexões já abertas estão automaticamente permitidos para "
-"passar pelo firewall."
+msgid "MSS clamping"
+msgstr "MSS-Correction"
 
-msgid "Source"
-msgstr "Origem"
+msgid "Masquerading"
+msgstr ""
 
-msgid "Destination"
-msgstr "Destino"
+msgid "Match ICMP type"
+msgstr ""
 
-msgid "Rules"
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
 msgstr ""
 
-msgid "Protocol"
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
 msgstr ""
 
-msgid "Device"
+msgid "Name"
 msgstr ""
 
-msgid "Action"
-msgstr "Acção"
+msgid "Output"
+msgstr "Saída"
 
-msgid "Traffic Redirection"
-msgstr "Redirecionamento de Tráfego"
+msgid "Overview"
+msgstr ""
+
+msgid "Port forwarding"
+msgstr "Redirecionamento de portas"
 
 msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
-"Redirecionamento do tráfego permite a alteração do endereço de destino dos "
-"pacotes enviados."
+"O redirecionamento de portas permite disponibilizar serviços na rede interna "
+"para uma rede externa."
 
-msgid "(optional)"
+msgid "Protocol"
 msgstr ""
 
-msgid "Zone"
-msgstr "Zona"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
 
-msgid "Source port"
-msgstr "Porta de origem"
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
 
-#, fuzzy
-msgid "Destination IP"
-msgstr "Destino"
+msgid "Redirection type"
+msgstr ""
 
-#, fuzzy
-msgid "IP address"
-msgstr "Endereço IP"
+msgid "Redirections"
+msgstr ""
 
-msgid "Destination port"
-msgstr "Porta de destino"
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
 
-msgid "Advanced Rules"
-msgstr "Regras Avançadas"
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
 
-msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+msgid "Restrict to address family"
 msgstr ""
-"As regras avançadas permitem a personalização da firewall de acordo com as "
-"necessidades. Apenas as novas ligações serão processadas. Pacotes que "
-"pertençam a ligações já abertas estão automaticamente autorizados a passar "
-"pela firewall."
 
-msgid "Overview"
+msgid "Rules"
 msgstr ""
 
-#, fuzzy
-msgid "Source zone"
-msgstr "Porta de origem"
+msgid "Source"
+msgstr "Origem"
 
 #, fuzzy
-msgid "Destination zone"
-msgstr "Destino"
+msgid "Source IP address"
+msgstr "Endereço MAC de origem"
 
-msgid "any"
+msgid "Source MAC address"
 msgstr ""
 
 #, fuzzy
 msgid "Source address"
 msgstr "Endereço MAC de origem"
 
-msgid "Destination address"
-msgstr "Endereço de destino"
-
-#, fuzzy
-msgid "Source MAC-address"
-msgstr "Endereço MAC de origem"
+msgid "Source port"
+msgstr "Porta de origem"
 
 #, fuzzy
-msgid "Source IP address"
-msgstr "Endereço MAC de origem"
+msgid "Source zone"
+msgstr "Porta de origem"
 
 msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
+"O firewall cria zonas sobre as interfaces de rede para controlar o fluxo do "
+"tráfego."
 
-msgid "External port"
-msgstr "Porta Externa"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
 
 msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
-#, fuzzy
-msgid "Internal IP address"
-msgstr "Endereço interno"
+msgid "Traffic Redirection"
+msgstr "Redirecionamento de Tráfego"
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
+"Redirecionamento do tráfego permite a alteração do endereço de destino dos "
+"pacotes enviados."
 
-msgid "Internal port (optional)"
-msgstr "Porta interna (opcional)"
+msgid "Via"
+msgstr ""
 
-msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+msgid "Zone %q"
 msgstr ""
 
-msgid "Port forwarding"
-msgstr "Redirecionamento de portas"
+msgid "Zone ⇒ Forwardings"
+msgstr ""
 
-msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+msgid "Zones"
+msgstr "Zonas"
+
+msgid "accept"
+msgstr "aceitar"
+
+msgid "any"
 msgstr ""
-"O redirecionamento de portas permite disponibilizar serviços na rede interna "
-"para uma rede externa."
+
+msgid "drop"
+msgstr "dropar"
+
+msgid "reject"
+msgstr "rejeitar"
 
 #, fuzzy
-msgid "Internal port"
-msgstr "Porta Externa"
+#~ msgid "Network"
+#~ msgstr "Redes"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Controle de Tráfego"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Tráfego de Zona-para-Zona"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Aqui você pode especificar qual tráfego de rede será permitido para o "
+#~ "fluxo entre zonas das redes. Somente novas conexões serão processadas. "
+#~ "Pacotes pertencentes à conexões já abertas estão automaticamente "
+#~ "permitidos para passar pelo firewall."
+
+#~ msgid "Zone"
+#~ msgstr "Zona"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Destino"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Endereço IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Endereço MAC de origem"
 
 #~ msgid "Custom forwarding"
 #~ msgstr "Redirecionamento personalizado"
diff --git a/po/pt_BR/firewall.po b/po/pt_BR/firewall.po
index 21a29ecf7..9ea6973cb 100644
--- a/po/pt_BR/firewall.po
+++ b/po/pt_BR/firewall.po
@@ -11,207 +11,319 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Pootle 1.1.0\n"
 
-msgid "Firewall"
-msgstr "Firewall"
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr "Acção"
+
+msgid "Advanced Options"
+msgstr ""
+
+msgid "Advanced Rules"
+msgstr "Regras Avançadas"
+
+msgid "Advanced Settings"
+msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
+msgstr ""
+"As regras avançadas permitem a personalização da firewall de acordo com as "
+"necessidades. Apenas as novas ligações serão processadas. Pacotes que "
+"pertençam a ligações já abertas estão automaticamente autorizados a passar "
+"pela firewall."
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
 msgstr ""
-"O firewall cria zonas sobre as interfaces de rede para controlar o fluxo do "
-"tráfego."
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid "Custom Rules (/etc/firewall.user)"
+msgstr ""
+
+msgid "Destination"
+msgstr "Destino"
+
+msgid "Destination address"
+msgstr "Endereço de destino"
+
+msgid "Destination port"
+msgstr "Porta de destino"
 
 #, fuzzy
-msgid "Enable SYN-flood protection"
-msgstr "Proteção SYN-flood"
+msgid "Destination zone"
+msgstr "Destino"
+
+msgid "Device"
+msgstr ""
 
 msgid "Drop invalid packets"
 msgstr "Dropar pacotes inválidos"
 
-msgid "Input"
-msgstr "Entrada"
+msgid "Enable NAT Loopback"
+msgstr ""
 
-msgid "Output"
-msgstr "Saída"
+#, fuzzy
+msgid "Enable SYN-flood protection"
+msgstr "Proteção SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
+msgstr "Porta Externa"
+
+msgid "Family"
+msgstr ""
+
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid ""
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
 
 msgid "Forward"
 msgstr ""
 
-msgid "reject"
-msgstr "rejeitar"
+msgid "General Settings"
+msgstr ""
 
-msgid "drop"
-msgstr "dropar"
+msgid "IPv4 and IPv6"
+msgstr ""
 
-msgid "accept"
-msgstr "aceitar"
+msgid "IPv4 only"
+msgstr ""
 
-msgid "Zones"
-msgstr "Zonas"
+msgid "IPv6 only"
+msgstr ""
 
-msgid "Name"
+msgid "Input"
+msgstr "Entrada"
+
+msgid "Intended destination address"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
 #, fuzzy
-msgid "MSS clamping"
-msgstr "MSS-Correction"
+msgid "Internal IP address"
+msgstr "Endereço interno"
 
 #, fuzzy
-msgid "Network"
-msgstr "Redes"
+msgid "Internal port"
+msgstr "Porta Externa"
 
-msgid "Traffic Control"
-msgstr "Controle de Tráfego"
+msgid "Internal port (optional)"
+msgstr "Porta interna (opcional)"
 
-msgid "Zone-to-Zone traffic"
-msgstr "Tráfego de Zona-para-Zona"
+msgid "Limit log messages"
+msgstr ""
 
 #, fuzzy
-msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
-msgstr ""
-"Aqui você pode especificar qual tráfego de rede será permitido para o fluxo "
-"entre zonas das redes. Somente novas conexões serão processadas. Pacotes "
-"pertencentes à conexões já abertas estão automaticamente permitidos para "
-"passar pelo firewall."
+msgid "MSS clamping"
+msgstr "MSS-Correction"
 
-msgid "Source"
-msgstr "Origem"
+msgid "Masquerading"
+msgstr ""
 
-msgid "Destination"
-msgstr "Destino"
+msgid "Match ICMP type"
+msgstr ""
 
-msgid "Rules"
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
 msgstr ""
 
-msgid "Protocol"
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
 msgstr ""
 
-msgid "Device"
+msgid "Name"
 msgstr ""
 
-msgid "Action"
-msgstr "Acção"
+msgid "Output"
+msgstr "Saída"
 
-msgid "Traffic Redirection"
-msgstr "Redirecionamento de Tráfego"
+msgid "Overview"
+msgstr ""
+
+msgid "Port forwarding"
+msgstr "Redirecionamento de portas"
 
 msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
-"Redirecionamento do tráfego permite a alteração do endereço de destino dos "
-"pacotes enviados."
+"O redirecionamento de portas permite disponibilizar serviços na rede interna "
+"para uma rede externa."
 
-msgid "(optional)"
+msgid "Protocol"
 msgstr ""
 
-msgid "Zone"
-msgstr "Zona"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
 
-msgid "Source port"
-msgstr "Porta de origem"
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
 
-#, fuzzy
-msgid "Destination IP"
-msgstr "Destino"
+msgid "Redirection type"
+msgstr ""
 
-#, fuzzy
-msgid "IP address"
-msgstr "Endereço IP"
+msgid "Redirections"
+msgstr ""
 
-msgid "Destination port"
-msgstr "Porta de destino"
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
 
-msgid "Advanced Rules"
-msgstr "Regras Avançadas"
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
 
-msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+msgid "Restrict to address family"
 msgstr ""
-"As regras avançadas permitem a personalização da firewall de acordo com as "
-"necessidades. Apenas as novas ligações serão processadas. Pacotes que "
-"pertençam a ligações já abertas estão automaticamente autorizados a passar "
-"pela firewall."
 
-msgid "Overview"
+msgid "Rules"
 msgstr ""
 
-#, fuzzy
-msgid "Source zone"
-msgstr "Porta de origem"
+msgid "Source"
+msgstr "Origem"
 
 #, fuzzy
-msgid "Destination zone"
-msgstr "Destino"
+msgid "Source IP address"
+msgstr "Endereço MAC de origem"
 
-msgid "any"
+msgid "Source MAC address"
 msgstr ""
 
 #, fuzzy
 msgid "Source address"
 msgstr "Endereço MAC de origem"
 
-msgid "Destination address"
-msgstr "Endereço de destino"
-
-#, fuzzy
-msgid "Source MAC-address"
-msgstr "Endereço MAC de origem"
+msgid "Source port"
+msgstr "Porta de origem"
 
 #, fuzzy
-msgid "Source IP address"
-msgstr "Endereço MAC de origem"
+msgid "Source zone"
+msgstr "Porta de origem"
 
 msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
+"O firewall cria zonas sobre as interfaces de rede para controlar o fluxo do "
+"tráfego."
 
-msgid "External port"
-msgstr "Porta Externa"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
 
 msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
-#, fuzzy
-msgid "Internal IP address"
-msgstr "Endereço interno"
+msgid "Traffic Redirection"
+msgstr "Redirecionamento de Tráfego"
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
+"Redirecionamento do tráfego permite a alteração do endereço de destino dos "
+"pacotes enviados."
 
-msgid "Internal port (optional)"
-msgstr "Porta interna (opcional)"
+msgid "Via"
+msgstr ""
 
-msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+msgid "Zone %q"
 msgstr ""
 
-msgid "Port forwarding"
-msgstr "Redirecionamento de portas"
+msgid "Zone ⇒ Forwardings"
+msgstr ""
 
-msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+msgid "Zones"
+msgstr "Zonas"
+
+msgid "accept"
+msgstr "aceitar"
+
+msgid "any"
 msgstr ""
-"O redirecionamento de portas permite disponibilizar serviços na rede interna "
-"para uma rede externa."
+
+msgid "drop"
+msgstr "dropar"
+
+msgid "reject"
+msgstr "rejeitar"
 
 #, fuzzy
-msgid "Internal port"
-msgstr "Porta Externa"
+#~ msgid "Network"
+#~ msgstr "Redes"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Controle de Tráfego"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Tráfego de Zona-para-Zona"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Aqui você pode especificar qual tráfego de rede será permitido para o "
+#~ "fluxo entre zonas das redes. Somente novas conexões serão processadas. "
+#~ "Pacotes pertencentes à conexões já abertas estão automaticamente "
+#~ "permitidos para passar pelo firewall."
+
+#~ msgid "Zone"
+#~ msgstr "Zona"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Destino"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Endereço IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Endereço MAC de origem"
 
 #~ msgid "Custom forwarding"
 #~ msgstr "Redirecionamento personalizado"
diff --git a/po/ru/firewall.po b/po/ru/firewall.po
index d0d83b7ea..b7231a37e 100644
--- a/po/ru/firewall.po
+++ b/po/ru/firewall.po
@@ -12,139 +12,193 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Translate Toolkit 1.1.1\n"
 
-msgid "Firewall"
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Advanced Options"
+msgstr ""
+
+msgid "Advanced Rules"
+msgstr ""
+
+msgid "Advanced Settings"
 msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
 msgstr ""
 
-msgid "Enable SYN-flood protection"
+msgid "Allow forward from <em>source zones</em>:"
 msgstr ""
 
-msgid "Drop invalid packets"
+msgid "Allow forward to <em>destination zones</em>:"
 msgstr ""
 
-msgid "Input"
+msgid "Any"
 msgstr ""
 
-msgid "Output"
+msgid "Covered networks"
 msgstr ""
 
-msgid "Forward"
+msgid "Custom Rules"
 msgstr ""
 
-msgid "reject"
+msgid "Custom Rules (/etc/firewall.user)"
 msgstr ""
 
-msgid "drop"
+msgid "Destination"
 msgstr ""
 
-msgid "accept"
+msgid "Destination address"
 msgstr ""
 
-msgid "Zones"
+msgid "Destination port"
 msgstr ""
 
-msgid "Name"
+msgid "Destination zone"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Device"
 msgstr ""
 
-msgid "MSS clamping"
+msgid "Drop invalid packets"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
 msgstr ""
 
-msgid "Network"
+msgid "Family"
 msgstr ""
 
-msgid "Traffic Control"
+msgid "Firewall"
 msgstr ""
 
-msgid "Zone-to-Zone traffic"
+msgid "Firewall - Zone Settings"
 msgstr ""
 
 msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
 msgstr ""
 
-msgid "Source"
+msgid "Force connection tracking"
 msgstr ""
 
-msgid "Destination"
+msgid "Forward"
 msgstr ""
 
-msgid "Rules"
+msgid "General Settings"
 msgstr ""
 
-msgid "Protocol"
+msgid "IPv4 and IPv6"
 msgstr ""
 
-msgid "Device"
+msgid "IPv4 only"
 msgstr ""
 
-msgid "Action"
+msgid "IPv6 only"
 msgstr ""
 
-msgid "Traffic Redirection"
+msgid "Input"
 msgstr ""
 
-msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+msgid "Intended destination address"
 msgstr ""
 
-msgid "(optional)"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
-msgid "Zone"
+msgid "Internal IP address"
 msgstr ""
 
-msgid "Source port"
+msgid "Internal port"
 msgstr ""
 
-msgid "Destination IP"
+msgid "Internal port (optional)"
 msgstr ""
 
-msgid "IP address"
+msgid "Limit log messages"
 msgstr ""
 
-msgid "Destination port"
+msgid "MSS clamping"
 msgstr ""
 
-msgid "Advanced Rules"
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match ICMP type"
 msgstr ""
 
 msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "Output"
 msgstr ""
 
 msgid "Overview"
 msgstr ""
 
-msgid "Source zone"
+msgid "Port forwarding"
 msgstr ""
 
-msgid "Destination zone"
+msgid ""
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
 
-msgid "any"
+msgid "Protocol"
 msgstr ""
 
-msgid "Source address"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
 msgstr ""
 
-msgid "Destination address"
+msgid "Redirect matched incoming traffic to the specified internal host"
 msgstr ""
 
-msgid "Source MAC-address"
+msgid "Redirection type"
+msgstr ""
+
+msgid "Redirections"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rules"
+msgstr ""
+
+msgid "Source"
 msgstr ""
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
@@ -180,39 +234,68 @@ msgstr ""
 msgid "Source IP address"
 msgstr ""
 
-msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+msgid "Source MAC address"
 msgstr ""
 
-msgid "External port"
+msgid "Source address"
 msgstr ""
 
-msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+msgid "Source port"
 msgstr ""
 
-msgid "Internal IP address"
+msgid "Source zone"
 msgstr ""
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
 
-msgid "Internal port (optional)"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
 msgstr ""
 
 msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
-msgid "Port forwarding"
+msgid "Traffic Redirection"
 msgstr ""
 
 msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
 
-msgid "Internal port"
+msgid "Via"
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr ""
+
+msgid "accept"
+msgstr ""
+
+msgid "any"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
 msgstr ""
diff --git a/po/vi/firewall.po b/po/vi/firewall.po
index 8528fb929..c6405bd4c 100644
--- a/po/vi/firewall.po
+++ b/po/vi/firewall.po
@@ -13,206 +13,318 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Pootle 1.1.0\n"
 
-msgid "Firewall"
-msgstr "Firewall"
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr "Action"
+
+msgid "Advanced Options"
+msgstr ""
+
+msgid "Advanced Rules"
+msgstr "Luật cấp cao"
+
+msgid "Advanced Settings"
+msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
+msgstr ""
+"Luật cấp cao để bạn tùy chỉnh firewall mà bạn cần. Chỉ những kết nối mới sẽ "
+"được làm cho phù hợp. Các gói thuộc đã mở các kết nối sẽ tự động cho phép "
+"vượt qua firewall."
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
 msgstr ""
-"The firewall tạo zones trên giao diện mạng lưới để điều triển sự dòng lưu "
-"thông của mạng."
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid "Custom Rules (/etc/firewall.user)"
+msgstr ""
+
+msgid "Destination"
+msgstr "Điểm đến"
+
+msgid "Destination address"
+msgstr "Địa chỉ điểm đến"
+
+msgid "Destination port"
+msgstr "Cổng điểm đến"
 
 #, fuzzy
-msgid "Enable SYN-flood protection"
-msgstr "SYN-flood bảo vệ "
+msgid "Destination zone"
+msgstr "Điểm đến"
+
+msgid "Device"
+msgstr ""
 
 msgid "Drop invalid packets"
 msgstr "Bỏ qua nhưng gói không hợp lý"
 
-msgid "Input"
-msgstr "Input"
+msgid "Enable NAT Loopback"
+msgstr ""
 
-msgid "Output"
-msgstr "Output"
+#, fuzzy
+msgid "Enable SYN-flood protection"
+msgstr "SYN-flood bảo vệ "
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External port"
+msgstr "External port"
+
+msgid "Family"
+msgstr ""
+
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid ""
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
 
 msgid "Forward"
 msgstr ""
 
-msgid "reject"
-msgstr "Không chấp nhận"
+msgid "General Settings"
+msgstr ""
 
-msgid "drop"
-msgstr "drop"
+msgid "IPv4 and IPv6"
+msgstr ""
 
-msgid "accept"
-msgstr "chấp nhận"
+msgid "IPv4 only"
+msgstr ""
 
-msgid "Zones"
-msgstr "Zones"
+msgid "IPv6 only"
+msgstr ""
 
-msgid "Name"
+msgid "Input"
+msgstr "Input"
+
+msgid "Intended destination address"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
 #, fuzzy
-msgid "MSS clamping"
-msgstr "MSS Clamping"
+msgid "Internal IP address"
+msgstr "Internal address"
 
 #, fuzzy
-msgid "Network"
-msgstr "Networks"
+msgid "Internal port"
+msgstr "External port"
 
-msgid "Traffic Control"
-msgstr "Điều khiển lưu thông"
+msgid "Internal port (optional)"
+msgstr "Internal port (tùy chọn)"
 
-msgid "Zone-to-Zone traffic"
-msgstr "Lưu thông Zone- to - Zone"
+msgid "Limit log messages"
+msgstr ""
 
 #, fuzzy
-msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
-msgstr ""
-"Tại đây bạn có thể xác định được mạng lưới giao thông được phép lưu lượng "
-"qua network zone. Chỉ có kết nối mới sẽ là phù hợp. Các gói thuộc kết nối đã "
-"mở được tự động được cho phép để vượt qua firewall. Nếu bạn gặp vấn đề kết "
-"nối thử kích hoạt MSS Clamping hoặc vô hiệu hóa nó vì lý do thực thi."
+msgid "MSS clamping"
+msgstr "MSS Clamping"
 
-msgid "Source"
-msgstr "Nguồn"
+msgid "Masquerading"
+msgstr ""
 
-msgid "Destination"
-msgstr "Điểm đến"
+msgid "Match ICMP type"
+msgstr ""
 
-msgid "Rules"
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
 msgstr ""
 
-msgid "Protocol"
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
 msgstr ""
 
-msgid "Device"
+msgid "Name"
 msgstr ""
 
-msgid "Action"
-msgstr "Action"
+msgid "Output"
+msgstr "Output"
 
-msgid "Traffic Redirection"
-msgstr "Sự chuyển hướng lưu thông"
+msgid "Overview"
+msgstr ""
+
+msgid "Port forwarding"
+msgstr "Cổng chuyển tiếp"
 
 msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
-"Sự chuyển hướng lưu thông cho phép bạn thay đổi địa chỉ điểm đến của gói "
-"chuyển tiếp. "
+"Cổng chuyển tiếp cho phép cung cấp những dịch vụ mạng trong vùng tới một "
+"ngoại mạng. "
 
-msgid "(optional)"
+msgid "Protocol"
 msgstr ""
 
-msgid "Zone"
-msgstr "Zone"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
 
-msgid "Source port"
-msgstr "Cổng nguồn"
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
 
-#, fuzzy
-msgid "Destination IP"
-msgstr "Điểm đến"
+msgid "Redirection type"
+msgstr ""
 
-#, fuzzy
-msgid "IP address"
-msgstr "Địa chỉ IP"
+msgid "Redirections"
+msgstr ""
 
-msgid "Destination port"
-msgstr "Cổng điểm đến"
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
 
-msgid "Advanced Rules"
-msgstr "Luật cấp cao"
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
 
-msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+msgid "Restrict to address family"
 msgstr ""
-"Luật cấp cao để bạn tùy chỉnh firewall mà bạn cần. Chỉ những kết nối mới sẽ "
-"được làm cho phù hợp. Các gói thuộc đã mở các kết nối sẽ tự động cho phép "
-"vượt qua firewall."
 
-msgid "Overview"
+msgid "Rules"
 msgstr ""
 
-#, fuzzy
-msgid "Source zone"
-msgstr "Cổng nguồn"
+msgid "Source"
+msgstr "Nguồn"
 
 #, fuzzy
-msgid "Destination zone"
-msgstr "Điểm đến"
+msgid "Source IP address"
+msgstr "Đỉa chỉ MAC nguồn"
 
-msgid "any"
+msgid "Source MAC address"
 msgstr ""
 
 #, fuzzy
 msgid "Source address"
 msgstr "Đỉa chỉ MAC nguồn"
 
-msgid "Destination address"
-msgstr "Địa chỉ điểm đến"
-
-#, fuzzy
-msgid "Source MAC-address"
-msgstr "Đỉa chỉ MAC nguồn"
+msgid "Source port"
+msgstr "Cổng nguồn"
 
 #, fuzzy
-msgid "Source IP address"
-msgstr "Đỉa chỉ MAC nguồn"
+msgid "Source zone"
+msgstr "Cổng nguồn"
 
 msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
+"The firewall tạo zones trên giao diện mạng lưới để điều triển sự dòng lưu "
+"thông của mạng."
 
-msgid "External port"
-msgstr "External port"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
 
 msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
-#, fuzzy
-msgid "Internal IP address"
-msgstr "Internal address"
+msgid "Traffic Redirection"
+msgstr "Sự chuyển hướng lưu thông"
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
+"Sự chuyển hướng lưu thông cho phép bạn thay đổi địa chỉ điểm đến của gói "
+"chuyển tiếp. "
 
-msgid "Internal port (optional)"
-msgstr "Internal port (tùy chọn)"
+msgid "Via"
+msgstr ""
 
-msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+msgid "Zone %q"
 msgstr ""
 
-msgid "Port forwarding"
-msgstr "Cổng chuyển tiếp"
+msgid "Zone ⇒ Forwardings"
+msgstr ""
 
-msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+msgid "Zones"
+msgstr "Zones"
+
+msgid "accept"
+msgstr "chấp nhận"
+
+msgid "any"
 msgstr ""
-"Cổng chuyển tiếp cho phép cung cấp những dịch vụ mạng trong vùng tới một "
-"ngoại mạng. "
+
+msgid "drop"
+msgstr "drop"
+
+msgid "reject"
+msgstr "Không chấp nhận"
 
 #, fuzzy
-msgid "Internal port"
-msgstr "External port"
+#~ msgid "Network"
+#~ msgstr "Networks"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Điều khiển lưu thông"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Lưu thông Zone- to - Zone"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Tại đây bạn có thể xác định được mạng lưới giao thông được phép lưu lượng "
+#~ "qua network zone. Chỉ có kết nối mới sẽ là phù hợp. Các gói thuộc kết nối "
+#~ "đã mở được tự động được cho phép để vượt qua firewall. Nếu bạn gặp vấn đề "
+#~ "kết nối thử kích hoạt MSS Clamping hoặc vô hiệu hóa nó vì lý do thực thi."
+
+#~ msgid "Zone"
+#~ msgstr "Zone"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Điểm đến"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Địa chỉ IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Đỉa chỉ MAC nguồn"
 
 #~ msgid "Custom forwarding"
 #~ msgstr "Tùy chỉnh chuyển tiếp"
diff --git a/po/zh_CN/firewall.po b/po/zh_CN/firewall.po
index b549defe3..91e1e602f 100644
--- a/po/zh_CN/firewall.po
+++ b/po/zh_CN/firewall.po
@@ -11,139 +11,193 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "X-Generator: Pootle 1.1.0\n"
 
-msgid "Firewall"
-msgstr "防火墙"
+msgid "(optional)"
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Advanced Options"
+msgstr ""
+
+msgid "Advanced Rules"
+msgstr ""
+
+msgid "Advanced Settings"
+msgstr ""
 
 msgid ""
-"The firewall creates zones over your network interfaces to control network "
-"traffic flow."
+"Advanced rules let you customize the firewall to your needs. Only new "
+"connections will be matched. Packets belonging to already open connections "
+"are automatically allowed to pass the firewall."
 msgstr ""
 
-msgid "Enable SYN-flood protection"
+msgid "Allow forward from <em>source zones</em>:"
 msgstr ""
 
-msgid "Drop invalid packets"
+msgid "Allow forward to <em>destination zones</em>:"
 msgstr ""
 
-msgid "Input"
+msgid "Any"
 msgstr ""
 
-msgid "Output"
+msgid "Covered networks"
 msgstr ""
 
-msgid "Forward"
+msgid "Custom Rules"
 msgstr ""
 
-msgid "reject"
+msgid "Custom Rules (/etc/firewall.user)"
 msgstr ""
 
-msgid "drop"
+msgid "Destination"
 msgstr ""
 
-msgid "accept"
+msgid "Destination address"
 msgstr ""
 
-msgid "Zones"
-msgstr "区"
+msgid "Destination port"
+msgstr ""
 
-msgid "Name"
+msgid "Destination zone"
 msgstr ""
 
-msgid "Masquerading"
+msgid "Device"
 msgstr ""
 
-msgid "MSS clamping"
+msgid "Drop invalid packets"
+msgstr ""
+
+msgid "Enable NAT Loopback"
 msgstr ""
 
-msgid "Network"
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
 msgstr ""
 
-msgid "Traffic Control"
+msgid "External port"
 msgstr ""
 
-msgid "Zone-to-Zone traffic"
+msgid "Family"
+msgstr ""
+
+msgid "Firewall"
+msgstr "防火墙"
+
+msgid "Firewall - Zone Settings"
 msgstr ""
 
 msgid ""
-"Here you can specify which network traffic is allowed to flow between "
-"network zones. Only new connections will be matched.  Packets belonging to "
-"already open connections are automatically allowed to pass the firewall. If "
-"you experience occasional connection problems try enabling MSS Clamping "
-"otherwise disable it for performance reasons."
+"For DNAT, match incoming traffic directed at the given destination ip "
+"address. For SNAT rewrite the source address to the given address."
 msgstr ""
 
-msgid "Source"
+msgid "Force connection tracking"
 msgstr ""
 
-msgid "Destination"
+msgid "Forward"
 msgstr ""
 
-msgid "Rules"
+msgid "General Settings"
 msgstr ""
 
-msgid "Protocol"
+msgid "IPv4 and IPv6"
 msgstr ""
 
-msgid "Device"
+msgid "IPv4 only"
 msgstr ""
 
-msgid "Action"
+msgid "IPv6 only"
 msgstr ""
 
-msgid "Traffic Redirection"
+msgid "Input"
 msgstr ""
 
-msgid ""
-"Traffic redirection allows you to change the destination address of "
-"forwarded packets."
+msgid "Intended destination address"
 msgstr ""
 
-msgid "(optional)"
+msgid "Inter-Zone Forwarding"
 msgstr ""
 
-msgid "Zone"
-msgstr "区"
+msgid "Internal IP address"
+msgstr ""
 
-msgid "Source port"
+msgid "Internal port"
 msgstr ""
 
-msgid "Destination IP"
+msgid "Internal port (optional)"
 msgstr ""
 
-msgid "IP address"
+msgid "Limit log messages"
 msgstr ""
 
-msgid "Destination port"
+msgid "MSS clamping"
 msgstr ""
 
-msgid "Advanced Rules"
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match ICMP type"
 msgstr ""
 
 msgid ""
-"Advanced rules let you customize the firewall to your needs. Only new "
-"connections will be matched. Packets belonging to already open connections "
-"are automatically allowed to pass the firewall."
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host"
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "Output"
 msgstr ""
 
 msgid "Overview"
 msgstr ""
 
-msgid "Source zone"
+msgid "Port forwarding"
 msgstr ""
 
-msgid "Destination zone"
+msgid ""
+"Port forwarding allows to provide network services in the internal network "
+"to an external network."
 msgstr ""
 
-msgid "any"
+msgid "Protocol"
 msgstr ""
 
-msgid "Source address"
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
 msgstr ""
 
-msgid "Destination address"
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
+
+msgid "Redirection type"
+msgstr ""
+
+msgid "Redirections"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
 msgstr ""
 
-msgid "Source MAC-address"
+msgid "Rules"
+msgstr ""
+
+msgid "Source"
 msgstr ""
 
 # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
@@ -179,42 +233,74 @@ msgstr ""
 msgid "Source IP address"
 msgstr ""
 
-msgid ""
-"Match incoming traffic originating from the given source port or port range "
-"on the client host"
+msgid "Source MAC address"
 msgstr ""
 
-msgid "External port"
+msgid "Source address"
 msgstr ""
 
-msgid ""
-"Match incoming traffic directed at the given destination port or port range "
-"on this host"
+msgid "Source port"
 msgstr ""
 
-msgid "Internal IP address"
+msgid "Source zone"
 msgstr ""
 
-msgid "Redirect matched incoming traffic to the specified internal host"
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
 msgstr ""
 
-msgid "Internal port (optional)"
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
 msgstr ""
 
 msgid ""
-"Redirect matched incoming traffic to the given port on the internal host"
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are member of this zone."
 msgstr ""
 
-msgid "Port forwarding"
+msgid "Traffic Redirection"
 msgstr ""
 
 msgid ""
-"Port forwarding allows to provide network services in the internal network "
-"to an external network."
+"Traffic redirection allows you to change the destination address of "
+"forwarded packets."
 msgstr ""
 
-msgid "Internal port"
+msgid "Via"
 msgstr ""
 
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr "区"
+
+msgid "accept"
+msgstr ""
+
+msgid "any"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
+msgstr ""
+
+#~ msgid "Zone"
+#~ msgstr "区"
+
 #~ msgid "MASQ"
 #~ msgstr "MASQ"