Rework LuCI build system

 * Rename subdirectories to their repective OpenWrt package names
 * Make each LuCI module its own standalone package
 * Deploy a shared luci.mk which is used by each module Makefile

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

39 files changed, 16754 insertions, 0 deletions

diff --git a/applications/luci-app-firewall/Makefile b/applications/luci-app-firewall/Makefile
new file mode 100644
index 000000000..21804d7c2
--- /dev/null
+++ b/applications/luci-app-firewall/Makefile
@@ -0,0 +1,14 @@
+#
+# Copyright (C) 2008-2014 The LuCI Team <luci@lists.subsignal.org>
+#
+# This is free software, licensed under the Apache License, Version 2.0 .
+#
+
+include $(TOPDIR)/rules.mk
+
+LUCI_TITLE:=Firewall and Portforwarding application
+LUCI_DEPENDS:=+firewall
+
+include ../../luci.mk
+
+# call BuildPackage - OpenWrt buildroot signature
diff --git a/applications/luci-app-firewall/luasrc/controller/firewall.lua b/applications/luci-app-firewall/luasrc/controller/firewall.lua
new file mode 100644
index 000000000..5a6ab0ad3
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/controller/firewall.lua
@@ -0,0 +1,23 @@
+module("luci.controller.firewall", package.seeall)
+
+function index()
+	entry({"admin", "network", "firewall"},
+		alias("admin", "network", "firewall", "zones"),
+		_("Firewall"), 60)
+
+	entry({"admin", "network", "firewall", "zones"},
+		arcombine(cbi("firewall/zones"), cbi("firewall/zone-details")),
+		_("General Settings"), 10).leaf = true
+
+	entry({"admin", "network", "firewall", "forwards"},
+		arcombine(cbi("firewall/forwards"), cbi("firewall/forward-details")),
+		_("Port Forwards"), 20).leaf = true
+
+	entry({"admin", "network", "firewall", "rules"},
+		arcombine(cbi("firewall/rules"), cbi("firewall/rule-details")),
+		_("Traffic Rules"), 30).leaf = true
+
+	entry({"admin", "network", "firewall", "custom"},
+		cbi("firewall/custom"),
+		_("Custom Rules"), 40).leaf = true
+end
diff --git a/applications/luci-app-firewall/luasrc/model/cbi/firewall/custom.lua b/applications/luci-app-firewall/luasrc/model/cbi/firewall/custom.lua
new file mode 100644
index 000000000..9b53a8a62
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/model/cbi/firewall/custom.lua
@@ -0,0 +1,38 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2011 Jo-Philipp Wich <xm@subsignal.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+local fs = require "nixio.fs"
+
+local f = SimpleForm("firewall",
+	translate("Firewall - Custom Rules"),
+	translate("Custom rules allow you to execute arbritary iptables commands \
+		which are not otherwise covered by the firewall framework. \
+		The commands are executed after each firewall restart, right after \
+		the default ruleset has been loaded."))
+
+local o = f:field(Value, "_custom")
+
+o.template = "cbi/tvalue"
+o.rows = 20
+
+function o.cfgvalue(self, section)
+	return fs.readfile("/etc/firewall.user")
+end
+
+function o.write(self, section, value)
+	value = value:gsub("\r\n?", "\n")
+	fs.writefile("/etc/firewall.user", value)
+end
+
+return f
diff --git a/applications/luci-app-firewall/luasrc/model/cbi/firewall/forward-details.lua b/applications/luci-app-firewall/luasrc/model/cbi/firewall/forward-details.lua
new file mode 100644
index 000000000..c80a6d0e7
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/model/cbi/firewall/forward-details.lua
@@ -0,0 +1,161 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2011 Jo-Philipp Wich <xm@subsignal.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+local sys = require "luci.sys"
+local dsp = require "luci.dispatcher"
+local ft  = require "luci.tools.firewall"
+
+local m, s, o
+
+arg[1] = arg[1] or ""
+
+m = Map("firewall",
+	translate("Firewall - Port Forwards"),
+	translate("This page allows you to change advanced properties of the port \
+	           forwarding entry. In most cases there is no need to modify \
+			   those settings."))
+
+m.redirect = dsp.build_url("admin/network/firewall/forwards")
+
+if m.uci:get("firewall", arg[1]) ~= "redirect" then
+	luci.http.redirect(m.redirect)
+	return
+else
+	local name = m:get(arg[1], "name") or m:get(arg[1], "_name")
+	if not name or #name == 0 then
+		name = translate("(Unnamed Entry)")
+	end
+	m.title = "%s - %s" %{ translate("Firewall - Port Forwards"), name }
+end
+
+s = m:section(NamedSection, arg[1], "redirect", "")
+s.anonymous = true
+s.addremove = false
+
+ft.opt_enabled(s, Button)
+ft.opt_name(s, Value, translate("Name"))
+
+
+o = s:option(Value, "proto", translate("Protocol"))
+o:value("tcp udp", "TCP+UDP")
+o:value("tcp", "TCP")
+o:value("udp", "UDP")
+o:value("icmp", "ICMP")
+
+function o.cfgvalue(...)
+	local v = Value.cfgvalue(...)
+	if not v or v == "tcpudp" then
+		return "tcp udp"
+	end
+	return v
+end
+
+
+o = s:option(Value, "src", translate("Source zone"))
+o.nocreate = true
+o.default = "wan"
+o.template = "cbi/firewall_zonelist"
+
+
+o = s:option(DynamicList, "src_mac",
+	translate("Source MAC address"),
+	translate("Only match incoming traffic from these MACs."))
+o.rmempty = true
+o.datatype = "neg(macaddr)"
+o.placeholder = translate("any")
+
+luci.sys.net.mac_hints(function(mac, name)
+	o:value(mac, "%s (%s)" %{ mac, name })
+end)
+
+
+o = s:option(Value, "src_ip",
+	translate("Source IP address"),
+	translate("Only match incoming traffic from this IP or range."))
+o.rmempty = true
+o.datatype = "neg(ip4addr)"
+o.placeholder = translate("any")
+
+luci.sys.net.ipv4_hints(function(ip, name)
+	o:value(ip, "%s (%s)" %{ ip, name })
+end)
+
+
+o = s:option(Value, "src_port",
+	translate("Source port"),
+	translate("Only match incoming traffic originating from the given source port or port range on the client host"))
+o.rmempty = true
+o.datatype = "neg(portrange)"
+o.placeholder = translate("any")
+
+
+o = s:option(Value, "src_dip",
+	translate("External IP address"),
+	translate("Only match incoming traffic directed at the given IP address."))
+
+luci.sys.net.ipv4_hints(function(ip, name)
+	o:value(ip, "%s (%s)" %{ ip, name })
+end)
+
+
+o.rmempty = true
+o.datatype = "neg(ip4addr)"
+o.placeholder = translate("any")
+
+
+o = s:option(Value, "src_dport", translate("External port"),
+	translate("Match incoming traffic directed at the given " ..
+		"destination port or port range on this host"))
+o.datatype = "neg(portrange)"
+
+
+
+o = s:option(Value, "dest", translate("Internal zone"))
+o.nocreate = true
+o.default = "lan"
+o.template = "cbi/firewall_zonelist"
+
+
+o = s:option(Value, "dest_ip", translate("Internal IP address"),
+	translate("Redirect matched incoming traffic to the specified \
+		internal host"))
+o.datatype = "ip4addr"
+
+luci.sys.net.ipv4_hints(function(ip, name)
+	o:value(ip, "%s (%s)" %{ ip, name })
+end)
+
+
+o = s:option(Value, "dest_port",
+	translate("Internal port"),
+	translate("Redirect matched incoming traffic to the given port on \
+		the internal host"))
+o.placeholder = translate("any")
+o.datatype = "portrange"
+
+
+o = s:option(Flag, "reflection", translate("Enable NAT Loopback"))
+o.rmempty = true
+o.default = o.enabled
+o.cfgvalue = function(...)
+	return Flag.cfgvalue(...) or "1"
+end
+
+
+s:option(Value, "extra",
+	translate("Extra arguments"),
+	translate("Passes additional arguments to iptables. Use with care!"))
+
+
+return m
diff --git a/applications/luci-app-firewall/luasrc/model/cbi/firewall/forwards.lua b/applications/luci-app-firewall/luasrc/model/cbi/firewall/forwards.lua
new file mode 100644
index 000000000..5f7a69b25
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/model/cbi/firewall/forwards.lua
@@ -0,0 +1,144 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2008 Steven Barth <steven@midlink.org>
+Copyright 2010-2012 Jo-Philipp Wich <xm@subsignal.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+]]--
+
+local ds = require "luci.dispatcher"
+local ft = require "luci.tools.firewall"
+
+m = Map("firewall", translate("Firewall - Port Forwards"),
+	translate("Port forwarding allows remote computers on the Internet to \
+	           connect to a specific computer or service within the \
+	           private LAN."))
+
+--
+-- Port Forwards
+--
+
+s = m:section(TypedSection, "redirect", translate("Port Forwards"))
+s.template  = "cbi/tblsection"
+s.addremove = true
+s.anonymous = true
+s.sortable  = true
+s.extedit   = ds.build_url("admin/network/firewall/forwards/%s")
+s.template_addremove = "firewall/cbi_addforward"
+
+function s.create(self, section)
+	local n = m:formvalue("_newfwd.name")
+	local p = m:formvalue("_newfwd.proto")
+	local E = m:formvalue("_newfwd.extzone")
+	local e = m:formvalue("_newfwd.extport")
+	local I = m:formvalue("_newfwd.intzone")
+	local a = m:formvalue("_newfwd.intaddr")
+	local i = m:formvalue("_newfwd.intport")
+
+	if p == "other" or (p and a) then
+		created = TypedSection.create(self, section)
+
+		self.map:set(created, "target",    "DNAT")
+		self.map:set(created, "src",       E or "wan")
+		self.map:set(created, "dest",      I or "lan")
+		self.map:set(created, "proto",     (p ~= "other") and p or "all")
+		self.map:set(created, "src_dport", e)
+		self.map:set(created, "dest_ip",   a)
+		self.map:set(created, "dest_port", i)
+		self.map:set(created, "name",      n)
+	end
+
+	if p ~= "other" then
+		created = nil
+	end
+end
+
+function s.parse(self, ...)
+	TypedSection.parse(self, ...)
+	if created then
+		m.uci:save("firewall")
+		luci.http.redirect(ds.build_url(
+			"admin/network/firewall/redirect", created
+		))
+	end
+end
+
+function s.filter(self, sid)
+	return (self.map:get(sid, "target") ~= "SNAT")
+end
+
+
+ft.opt_name(s, DummyValue, translate("Name"))
+
+
+local function forward_proto_txt(self, s)
+	return "%s-%s" %{
+		translate("IPv4"),
+		ft.fmt_proto(self.map:get(s, "proto"),
+	                 self.map:get(s, "icmp_type")) or "TCP+UDP"
+	}
+end
+
+local function forward_src_txt(self, s)
+	local z = ft.fmt_zone(self.map:get(s, "src"), translate("any zone"))
+	local a = ft.fmt_ip(self.map:get(s, "src_ip"), translate("any host"))
+	local p = ft.fmt_port(self.map:get(s, "src_port"))
+	local m = ft.fmt_mac(self.map:get(s, "src_mac"))
+
+	if p and m then
+		return translatef("From %s in %s with source %s and %s", a, z, p, m)
+	elseif p or m then
+		return translatef("From %s in %s with source %s", a, z, p or m)
+	else
+		return translatef("From %s in %s", a, z)
+	end
+end
+
+local function forward_via_txt(self, s)
+	local a = ft.fmt_ip(self.map:get(s, "src_dip"), translate("any router IP"))
+	local p = ft.fmt_port(self.map:get(s, "src_dport"))
+
+	if p then
+		return translatef("Via %s at %s", a, p)
+	else
+		return translatef("Via %s", a)
+	end
+end
+
+match = s:option(DummyValue, "match", translate("Match"))
+match.rawhtml = true
+match.width   = "50%"
+function match.cfgvalue(self, s)
+	return "<small>%s<br />%s<br />%s</small>" % {
+		forward_proto_txt(self, s),
+		forward_src_txt(self, s),
+		forward_via_txt(self, s)
+	}
+end
+
+
+dest = s:option(DummyValue, "dest", translate("Forward to"))
+dest.rawhtml = true
+dest.width   = "40%"
+function dest.cfgvalue(self, s)
+	local z = ft.fmt_zone(self.map:get(s, "dest"), translate("any zone"))
+	local a = ft.fmt_ip(self.map:get(s, "dest_ip"), translate("any host"))
+	local p = ft.fmt_port(self.map:get(s, "dest_port")) or
+		ft.fmt_port(self.map:get(s, "src_dport"))
+
+	if p then
+		return translatef("%s, %s in %s", a, p, z)
+	else
+		return translatef("%s in %s", a, z)
+	end
+end
+
+ft.opt_enabled(s, Flag, translate("Enable")).width = "1%"
+
+return m
diff --git a/applications/luci-app-firewall/luasrc/model/cbi/firewall/rule-details.lua b/applications/luci-app-firewall/luasrc/model/cbi/firewall/rule-details.lua
new file mode 100644
index 000000000..d29879c24
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/model/cbi/firewall/rule-details.lua
@@ -0,0 +1,329 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2008 Steven Barth <steven@midlink.org>
+Copyright 2010-2012 Jo-Philipp Wich <xm@subsignal.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+]]--
+
+local sys = require "luci.sys"
+local utl = require "luci.util"
+local dsp = require "luci.dispatcher"
+local nxo = require "nixio"
+
+local ft = require "luci.tools.firewall"
+local nw = require "luci.model.network"
+local m, s, o, k, v
+
+arg[1] = arg[1] or ""
+
+m = Map("firewall",
+	translate("Firewall - Traffic Rules"),
+	translate("This page allows you to change advanced properties of the \
+	           traffic rule entry, such as matched source and destination \
+			   hosts."))
+
+m.redirect = dsp.build_url("admin/network/firewall/rules")
+
+nw.init(m.uci)
+
+local rule_type = m.uci:get("firewall", arg[1])
+if rule_type == "redirect" and m:get(arg[1], "target") ~= "SNAT" then
+	rule_type = nil
+end
+
+if not rule_type then
+	luci.http.redirect(m.redirect)
+	return
+
+--
+-- SNAT
+--
+elseif rule_type == "redirect" then
+
+	local name = m:get(arg[1], "name") or m:get(arg[1], "_name")
+	if not name or #name == 0 then
+		name = translate("(Unnamed SNAT)")
+	else
+		name = "SNAT %s" % name
+	end
+
+	m.title = "%s - %s" %{ translate("Firewall - Traffic Rules"), name }
+
+	local wan_zone = nil
+
+	m.uci:foreach("firewall", "zone",
+		function(s)
+			local n = s.network or s.name
+			if n then
+				local i
+				for i in utl.imatch(n) do
+					if i == "wan" then
+						wan_zone = s.name
+						return false
+					end
+				end
+			end
+		end)
+
+	s = m:section(NamedSection, arg[1], "redirect", "")
+	s.anonymous = true
+	s.addremove = false
+
+
+	ft.opt_enabled(s, Button)
+	ft.opt_name(s, Value, translate("Name"))
+
+
+	o = s:option(Value, "proto",
+		translate("Protocol"),
+		translate("You may specify multiple by selecting \"-- custom --\" and \
+		           then entering protocols separated by space."))
+
+	o:value("all", "All protocols")
+	o:value("tcp udp", "TCP+UDP")
+	o:value("tcp", "TCP")
+	o:value("udp", "UDP")
+	o:value("icmp", "ICMP")
+
+	function o.cfgvalue(...)
+		local v = Value.cfgvalue(...)
+		if not v or v == "tcpudp" then
+			return "tcp udp"
+		end
+		return v
+	end
+
+
+	o = s:option(Value, "src", translate("Source zone"))
+	o.nocreate = true
+	o.default = "wan"
+	o.template = "cbi/firewall_zonelist"
+
+
+	o = s:option(Value, "src_ip", translate("Source IP address"))
+	o.rmempty = true
+	o.datatype = "neg(ipaddr)"
+	o.placeholder = translate("any")
+
+	luci.sys.net.ipv4_hints(function(ip, name)
+		o:value(ip, "%s (%s)" %{ ip, name })
+	end)
+
+
+	o = s:option(Value, "src_port",
+		translate("Source port"),
+		translate("Match incoming traffic originating from the given source \
+			port or port range on the client host."))
+	o.rmempty = true
+	o.datatype = "neg(portrange)"
+	o.placeholder = translate("any")
+
+
+	o = s:option(Value, "dest", translate("Destination zone"))
+	o.nocreate = true
+	o.default = "lan"
+	o.template = "cbi/firewall_zonelist"
+
+
+	o = s:option(Value, "dest_ip", translate("Destination IP address"))
+	o.datatype = "neg(ip4addr)"
+
+	luci.sys.net.ipv4_hints(function(ip, name)
+		o:value(ip, "%s (%s)" %{ ip, name })
+	end)
+
+
+	o = s:option(Value, "dest_port",
+		translate("Destination port"),
+		translate("Match forwarded traffic to the given destination port or \
+			port range."))
+
+	o.rmempty = true
+	o.placeholder = translate("any")
+	o.datatype = "neg(portrange)"
+
+
+	o = s:option(Value, "src_dip",
+		translate("SNAT IP address"),
+		translate("Rewrite matched traffic to the given address."))
+	o.rmempty = false
+	o.datatype = "ip4addr"
+
+	for k, v in ipairs(nw:get_interfaces()) do
+		local a
+		for k, a in ipairs(v:ipaddrs()) do
+			o:value(a:host():string(), '%s (%s)' %{
+				a:host():string(), v:shortname()
+			})
+		end
+	end
+
+
+	o = s:option(Value, "src_dport", translate("SNAT port"),
+		translate("Rewrite matched traffic to the given source port. May be \
+			left empty to only rewrite the IP address."))
+	o.datatype = "portrange"
+	o.rmempty = true
+	o.placeholder = translate('Do not rewrite')
+
+
+	s:option(Value, "extra",
+		translate("Extra arguments"),
+		translate("Passes additional arguments to iptables. Use with care!"))
+
+
+--
+-- Rule
+--
+else
+	local name = m:get(arg[1], "name") or m:get(arg[1], "_name")
+	if not name or #name == 0 then
+		name = translate("(Unnamed Rule)")
+	end
+
+	m.title = "%s - %s" %{ translate("Firewall - Traffic Rules"), name }
+
+
+	s = m:section(NamedSection, arg[1], "rule", "")
+	s.anonymous = true
+	s.addremove = false
+
+	ft.opt_enabled(s, Button)
+	ft.opt_name(s, Value, translate("Name"))
+
+
+	o = s:option(ListValue, "family", translate("Restrict to address family"))
+	o.rmempty = true
+	o:value("", translate("IPv4 and IPv6"))
+	o:value("ipv4", translate("IPv4 only"))
+	o:value("ipv6", translate("IPv6 only"))
+
+
+	o = s:option(Value, "proto", translate("Protocol"))
+	o:value("all", translate("Any"))
+	o:value("tcp udp", "TCP+UDP")
+	o:value("tcp", "TCP")
+	o:value("udp", "UDP")
+	o:value("icmp", "ICMP")
+
+	function o.cfgvalue(...)
+		local v = Value.cfgvalue(...)
+		if not v or v == "tcpudp" then
+			return "tcp udp"
+		end
+		return v
+	end
+
+
+	o = s:option(DynamicList, "icmp_type", translate("Match ICMP type"))
+	o:value("", "any")
+	o:value("echo-reply")
+	o:value("destination-unreachable")
+	o:value("network-unreachable")
+	o:value("host-unreachable")
+	o:value("protocol-unreachable")
+	o:value("port-unreachable")
+	o:value("fragmentation-needed")
+	o:value("source-route-failed")
+	o:value("network-unknown")
+	o:value("host-unknown")
+	o:value("network-prohibited")
+	o:value("host-prohibited")
+	o:value("TOS-network-unreachable")
+	o:value("TOS-host-unreachable")
+	o:value("communication-prohibited")
+	o:value("host-precedence-violation")
+	o:value("precedence-cutoff")
+	o:value("source-quench")
+	o:value("redirect")
+	o:value("network-redirect")
+	o:value("host-redirect")
+	o:value("TOS-network-redirect")
+	o:value("TOS-host-redirect")
+	o:value("echo-request")
+	o:value("router-advertisement")
+	o:value("router-solicitation")
+	o:value("time-exceeded")
+	o:value("ttl-zero-during-transit")
+	o:value("ttl-zero-during-reassembly")
+	o:value("parameter-problem")
+	o:value("ip-header-bad")
+	o:value("required-option-missing")
+	o:value("timestamp-request")
+	o:value("timestamp-reply")
+	o:value("address-mask-request")
+	o:value("address-mask-reply")
+
+
+	o = s:option(Value, "src", translate("Source zone"))
+	o.nocreate = true
+	o.allowany = true
+	o.default = "wan"
+	o.template = "cbi/firewall_zonelist"
+
+
+	o = s:option(Value, "src_mac", translate("Source MAC address"))
+	o.datatype = "list(macaddr)"
+	o.placeholder = translate("any")
+
+	luci.sys.net.mac_hints(function(mac, name)
+		o:value(mac, "%s (%s)" %{ mac, name })
+	end)
+
+
+	o = s:option(Value, "src_ip", translate("Source address"))
+	o.datatype = "neg(ipaddr)"
+	o.placeholder = translate("any")
+
+	luci.sys.net.ipv4_hints(function(ip, name)
+		o:value(ip, "%s (%s)" %{ ip, name })
+	end)
+
+
+	o = s:option(Value, "src_port", translate("Source port"))
+	o.datatype = "list(neg(portrange))"
+	o.placeholder = translate("any")
+
+
+	o = s:option(Value, "dest", translate("Destination zone"))
+	o.nocreate = true
+	o.allowany = true
+	o.allowlocal = true
+	o.template = "cbi/firewall_zonelist"
+
+
+	o = s:option(Value, "dest_ip", translate("Destination address"))
+	o.datatype = "neg(ipaddr)"
+	o.placeholder = translate("any")
+
+	luci.sys.net.ipv4_hints(function(ip, name)
+		o:value(ip, "%s (%s)" %{ ip, name })
+	end)
+
+
+	o = s:option(Value, "dest_port", translate("Destination port"))
+	o.datatype = "list(neg(portrange))"
+	o.placeholder = translate("any")
+
+
+	o = s:option(ListValue, "target", translate("Action"))
+	o.default = "ACCEPT"
+	o:value("DROP", translate("drop"))
+	o:value("ACCEPT", translate("accept"))
+	o:value("REJECT", translate("reject"))
+	o:value("NOTRACK", translate("don't track"))
+
+
+	s:option(Value, "extra",
+		translate("Extra arguments"),
+		translate("Passes additional arguments to iptables. Use with care!"))
+end
+
+return m
diff --git a/applications/luci-app-firewall/luasrc/model/cbi/firewall/rules.lua b/applications/luci-app-firewall/luasrc/model/cbi/firewall/rules.lua
new file mode 100644
index 000000000..9bfa66bd0
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/model/cbi/firewall/rules.lua
@@ -0,0 +1,269 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2008 Steven Barth <steven@midlink.org>
+Copyright 2010-2012 Jo-Philipp Wich <xm@subsignal.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+]]--
+
+local ds = require "luci.dispatcher"
+local ft = require "luci.tools.firewall"
+
+m = Map("firewall",
+	translate("Firewall - Traffic Rules"),
+	translate("Traffic rules define policies for packets traveling between \
+		different zones, for example to reject traffic between certain hosts \
+		or to open WAN ports on the router."))
+
+--
+-- Rules
+--
+
+s = m:section(TypedSection, "rule", translate("Traffic Rules"))
+s.addremove = true
+s.anonymous = true
+s.sortable  = true
+s.template = "cbi/tblsection"
+s.extedit   = ds.build_url("admin/network/firewall/rules/%s")
+s.defaults.target = "ACCEPT"
+s.template_addremove = "firewall/cbi_addrule"
+
+
+function s.create(self, section)
+	created = TypedSection.create(self, section)
+end
+
+function s.parse(self, ...)
+	TypedSection.parse(self, ...)
+
+	local i_n = m:formvalue("_newopen.name")
+	local i_p = m:formvalue("_newopen.proto")
+	local i_e = m:formvalue("_newopen.extport")
+	local i_x = m:formvalue("_newopen.submit")
+
+	local f_n = m:formvalue("_newfwd.name")
+	local f_s = m:formvalue("_newfwd.src")
+	local f_d = m:formvalue("_newfwd.dest")
+	local f_x = m:formvalue("_newfwd.submit")
+
+	if i_x then
+		created = TypedSection.create(self, section)
+
+		self.map:set(created, "target",    "ACCEPT")
+		self.map:set(created, "src",       "wan")
+		self.map:set(created, "proto",     (i_p ~= "other") and i_p or "all")
+		self.map:set(created, "dest_port", i_e)
+		self.map:set(created, "name",      i_n)
+
+		if i_p ~= "other" and i_e and #i_e > 0 then
+			created = nil
+		end
+
+	elseif f_x then
+		created = TypedSection.create(self, section)
+
+		self.map:set(created, "target", "ACCEPT")
+		self.map:set(created, "src",    f_s)
+		self.map:set(created, "dest",   f_d)
+		self.map:set(created, "name",   f_n)
+	end
+
+	if created then
+		m.uci:save("firewall")
+		luci.http.redirect(ds.build_url(
+			"admin/network/firewall/rules", created
+		))
+	end
+end
+
+ft.opt_name(s, DummyValue, translate("Name"))
+
+local function rule_proto_txt(self, s)
+	local f = self.map:get(s, "family")
+	local p = ft.fmt_proto(self.map:get(s, "proto"),
+	                       self.map:get(s, "icmp_type")) or translate("traffic")
+
+	if f and f:match("4") then
+		return "%s-%s" %{ translate("IPv4"), p }
+	elseif f and f:match("6") then
+		return "%s-%s" %{ translate("IPv6"), p }
+	else
+		return "%s %s" %{ translate("Any"), p }
+	end
+end
+
+local function rule_src_txt(self, s)
+	local z = ft.fmt_zone(self.map:get(s, "src"), translate("any zone"))
+	local a = ft.fmt_ip(self.map:get(s, "src_ip"), translate("any host"))
+	local p = ft.fmt_port(self.map:get(s, "src_port"))
+	local m = ft.fmt_mac(self.map:get(s, "src_mac"))
+
+	if p and m then
+		return translatef("From %s in %s with source %s and %s", a, z, p, m)
+	elseif p or m then
+		return translatef("From %s in %s with source %s", a, z, p or m)
+	else
+		return translatef("From %s in %s", a, z)
+	end
+end
+
+local function rule_dest_txt(self, s)
+	local z = ft.fmt_zone(self.map:get(s, "dest"))
+	local p = ft.fmt_port(self.map:get(s, "dest_port"))
+
+	-- Forward
+	if z then
+		local a = ft.fmt_ip(self.map:get(s, "dest_ip"), translate("any host"))
+		if p then
+			return translatef("To %s, %s in %s", a, p, z)
+		else
+			return translatef("To %s in %s", a, z)
+		end
+
+	-- Input
+	else
+		local a = ft.fmt_ip(self.map:get(s, "dest_ip"),
+			translate("any router IP"))
+
+		if p then
+			return translatef("To %s at %s on <var>this device</var>", a, p)
+		else
+			return translatef("To %s on <var>this device</var>", a)
+		end
+	end
+end
+
+local function snat_dest_txt(self, s)
+	local z = ft.fmt_zone(self.map:get(s, "dest"), translate("any zone"))
+	local a = ft.fmt_ip(self.map:get(s, "dest_ip"), translate("any host"))
+	local p = ft.fmt_port(self.map:get(s, "dest_port")) or
+		ft.fmt_port(self.map:get(s, "src_dport"))
+
+	if p then
+		return translatef("To %s, %s in %s", a, p, z)
+	else
+		return translatef("To %s in %s", a, z)
+	end
+end
+
+
+match = s:option(DummyValue, "match", translate("Match"))
+match.rawhtml = true
+match.width   = "70%"
+function match.cfgvalue(self, s)
+	return "<small>%s<br />%s<br />%s</small>" % {
+		rule_proto_txt(self, s),
+		rule_src_txt(self, s),
+		rule_dest_txt(self, s)
+	}
+end
+
+target = s:option(DummyValue, "target", translate("Action"))
+target.rawhtml = true
+target.width   = "20%"
+function target.cfgvalue(self, s)
+	local t = ft.fmt_target(self.map:get(s, "target"), self.map:get(s, "dest"))
+	local l = ft.fmt_limit(self.map:get(s, "limit"),
+		self.map:get(s, "limit_burst"))
+
+	if l then
+		return translatef("<var>%s</var> and limit to %s", t, l)
+	else
+		return "<var>%s</var>" % t
+	end
+end
+
+ft.opt_enabled(s, Flag, translate("Enable")).width = "1%"
+
+
+--
+-- SNAT
+--
+
+s = m:section(TypedSection, "redirect",
+	translate("Source NAT"),
+	translate("Source NAT is a specific form of masquerading which allows \
+		fine grained control over the source IP used for outgoing traffic, \
+		for example to map multiple WAN addresses to internal subnets."))
+s.template  = "cbi/tblsection"
+s.addremove = true
+s.anonymous = true
+s.sortable  = true
+s.extedit   = ds.build_url("admin/network/firewall/rules/%s")
+s.template_addremove = "firewall/cbi_addsnat"
+
+function s.create(self, section)
+	created = TypedSection.create(self, section)
+end
+
+function s.parse(self, ...)
+	TypedSection.parse(self, ...)
+
+	local n = m:formvalue("_newsnat.name")
+	local s = m:formvalue("_newsnat.src")
+	local d = m:formvalue("_newsnat.dest")
+	local a = m:formvalue("_newsnat.dip")
+	local p = m:formvalue("_newsnat.dport")
+	local x = m:formvalue("_newsnat.submit")
+
+	if x and a and #a > 0 then
+		created = TypedSection.create(self, section)
+
+		self.map:set(created, "target",    "SNAT")
+		self.map:set(created, "src",       s)
+		self.map:set(created, "dest",      d)
+		self.map:set(created, "proto",     "all")
+		self.map:set(created, "src_dip",   a)
+		self.map:set(created, "src_dport", p)
+		self.map:set(created, "name",      n)
+	end
+
+	if created then
+		m.uci:save("firewall")
+		luci.http.redirect(ds.build_url(
+			"admin/network/firewall/rules", created
+		))
+	end
+end
+
+function s.filter(self, sid)
+	return (self.map:get(sid, "target") == "SNAT")
+end
+
+ft.opt_name(s, DummyValue, translate("Name"))
+
+match = s:option(DummyValue, "match", translate("Match"))
+match.rawhtml = true
+match.width   = "70%"
+function match.cfgvalue(self, s)
+	return "<small>%s<br />%s<br />%s</small>" % {
+		rule_proto_txt(self, s),
+		rule_src_txt(self, s),
+		snat_dest_txt(self, s)
+	}
+end
+
+snat = s:option(DummyValue, "via", translate("Action"))
+snat.rawhtml = true
+snat.width   = "20%"
+function snat.cfgvalue(self, s)
+	local a = ft.fmt_ip(self.map:get(s, "src_dip"))
+	local p = ft.fmt_port(self.map:get(s, "src_dport"))
+
+	if a and p then
+		return translatef("Rewrite to source %s, %s", a, p)
+	else
+		return translatef("Rewrite to source %s", a or p)
+	end
+end
+
+ft.opt_enabled(s, Flag, translate("Enable")).width = "1%"
+
+
+return m
diff --git a/applications/luci-app-firewall/luasrc/model/cbi/firewall/zone-details.lua b/applications/luci-app-firewall/luasrc/model/cbi/firewall/zone-details.lua
new file mode 100644
index 000000000..e5bcb34da
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/model/cbi/firewall/zone-details.lua
@@ -0,0 +1,243 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2008 Steven Barth <steven@midlink.org>
+Copyright 2010-2011 Jo-Philipp Wich <xm@subsignal.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+local nw = require "luci.model.network"
+local fw = require "luci.model.firewall"
+local ds = require "luci.dispatcher"
+local ut = require "luci.util"
+
+local m, p, i, v
+local s, name, net, family, msrc, mdest, log, lim
+local s2, out, inp
+
+
+m = Map("firewall", translate("Firewall - Zone Settings"))
+m.redirect = luci.dispatcher.build_url("admin/network/firewall/zones")
+
+fw.init(m.uci)
+nw.init(m.uci)
+
+
+local zone = fw:get_zone(arg[1])
+if not zone then
+	luci.http.redirect(dsp.build_url("admin/network/firewall/zones"))
+	return
+else
+	m.title = "%s - %s" %{
+		translate("Firewall - Zone Settings"),
+		translatef("Zone %q", zone:name() or "?")
+	}
+end
+
+
+s = m:section(NamedSection, zone.sid, "zone",
+	translatef("Zone %q", zone:name()),
+	translatef("This section defines common properties of %q. \
+		The <em>input</em> and <em>output</em> options set the default \
+		policies for traffic entering and leaving this zone while the \
+		<em>forward</em> option describes the policy for forwarded traffic \
+		between different networks within the zone. \
+		<em>Covered networks</em> specifies which available networks are \
+		members of this zone.", zone:name()))
+
+s.anonymous = true
+s.addremove = false
+
+m.on_commit = function(map)
+	local zone = fw:get_zone(arg[1])
+	if zone then
+		s.section  = zone.sid
+		s2.section = zone.sid
+	end
+end
+
+
+s:tab("general", translate("General Settings"))
+s:tab("advanced", translate("Advanced Settings"))
+
+
+name = s:taboption("general", Value, "name", translate("Name"))
+name.optional = false
+name.forcewrite = true
+name.datatype = "uciname"
+
+function name.write(self, section, value)
+	if zone:name() ~= value then
+		fw:rename_zone(zone:name(), value)
+		out.exclude = value
+		inp.exclude = value
+	end
+
+	m.redirect = ds.build_url("admin/network/firewall/zones", value)
+	m.title = "%s - %s" %{
+		translate("Firewall - Zone Settings"),
+		translatef("Zone %q", value or "?")
+	}
+end
+
+p = {
+	s:taboption("general", ListValue, "input", translate("Input")),
+	s:taboption("general", ListValue, "output", translate("Output")),
+	s:taboption("general", ListValue, "forward", translate("Forward"))
+}
+
+for i, v in ipairs(p) do
+	v:value("REJECT", translate("reject"))
+	v:value("DROP", translate("drop"))
+	v:value("ACCEPT", translate("accept"))
+end
+
+s:taboption("general", Flag, "masq", translate("Masquerading"))
+s:taboption("general", Flag, "mtu_fix", translate("MSS clamping"))
+
+net = s:taboption("general", Value, "network", translate("Covered networks"))
+net.template = "cbi/network_netlist"
+net.widget = "checkbox"
+net.cast = "string"
+
+function net.formvalue(self, section)
+	return Value.formvalue(self, section) or "-"
+end
+
+function net.cfgvalue(self, section)
+	return Value.cfgvalue(self, section) or name:cfgvalue(section)
+end
+
+function net.write(self, section, value)
+	zone:clear_networks()
+
+	local n
+	for n in ut.imatch(value) do
+		zone:add_network(n)
+	end
+end
+
+
+family = s:taboption("advanced", ListValue, "family",
+	translate("Restrict to address family"))
+
+family.rmempty = true
+family:value("", translate("IPv4 and IPv6"))
+family:value("ipv4", translate("IPv4 only"))
+family:value("ipv6", translate("IPv6 only"))
+
+msrc = s:taboption("advanced", DynamicList, "masq_src",
+	translate("Restrict Masquerading to given source subnets"))
+
+msrc.optional = true
+msrc.datatype = "list(neg(or(uciname,hostname,ip4addr)))"
+msrc.placeholder = "0.0.0.0/0"
+msrc:depends("family", "")
+msrc:depends("family", "ipv4")
+
+mdest = s:taboption("advanced", DynamicList, "masq_dest",
+	translate("Restrict Masquerading to given destination subnets"))
+
+mdest.optional = true
+mdest.datatype = "list(neg(or(uciname,hostname,ip4addr)))"
+mdest.placeholder = "0.0.0.0/0"
+mdest:depends("family", "")
+mdest:depends("family", "ipv4")
+
+s:taboption("advanced", Flag, "conntrack",
+	translate("Force connection tracking"))
+
+log = s:taboption("advanced", Flag, "log",
+	translate("Enable logging on this zone"))
+
+log.rmempty = true
+log.enabled = "1"
+
+lim = s:taboption("advanced", Value, "log_limit",
+	translate("Limit log messages"))
+
+lim.placeholder = "10/minute"
+lim:depends("log", "1")
+
+
+s2 = m:section(NamedSection, zone.sid, "fwd_out",
+	translate("Inter-Zone Forwarding"),
+	translatef("The options below control the forwarding policies between \
+		this zone (%s) and other zones. <em>Destination zones</em> cover \
+		forwarded traffic <strong>originating from %q</strong>. \
+		<em>Source zones</em> match forwarded traffic from other zones \
+		<strong>targeted at %q</strong>. The forwarding rule is \
+		<em>unidirectional</em>, e.g. a forward from lan to wan does \
+		<em>not</em> imply a permission to forward from wan to lan as well.",
+		zone:name(), zone:name(), zone:name()
+
+	))
+
+out = s2:option(Value, "out",
+	translate("Allow forward to <em>destination zones</em>:"))
+
+out.nocreate = true
+out.widget = "checkbox"
+out.exclude = zone:name()
+out.template = "cbi/firewall_zonelist"
+
+inp = s2:option(Value, "in",
+	translate("Allow forward from <em>source zones</em>:"))
+
+inp.nocreate = true
+inp.widget = "checkbox"
+inp.exclude = zone:name()
+inp.template = "cbi/firewall_zonelist"
+
+function out.cfgvalue(self, section)
+	local v = { }
+	local f
+	for _, f in ipairs(zone:get_forwardings_by("src")) do
+		v[#v+1] = f:dest()
+	end
+	return table.concat(v, " ")
+end
+
+function inp.cfgvalue(self, section)
+	local v = { }
+	local f
+	for _, f in ipairs(zone:get_forwardings_by("dest")) do
+		v[#v+1] = f:src()
+	end
+	return v
+end
+
+function out.formvalue(self, section)
+	return Value.formvalue(self, section) or "-"
+end
+
+function inp.formvalue(self, section)
+	return Value.formvalue(self, section) or "-"
+end
+
+function out.write(self, section, value)
+	zone:del_forwardings_by("src")
+
+	local f
+	for f in ut.imatch(value) do
+		zone:add_forwarding_to(f)
+	end
+end
+
+function inp.write(self, section, value)
+	zone:del_forwardings_by("dest")
+
+	local f
+	for f in ut.imatch(value) do
+		zone:add_forwarding_from(f)
+	end
+end
+
+return m
diff --git a/applications/luci-app-firewall/luasrc/model/cbi/firewall/zones.lua b/applications/luci-app-firewall/luasrc/model/cbi/firewall/zones.lua
new file mode 100644
index 000000000..e6d8548bf
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/model/cbi/firewall/zones.lua
@@ -0,0 +1,88 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2008 Steven Barth <steven@midlink.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+local ds = require "luci.dispatcher"
+local fw = require "luci.model.firewall"
+
+local m, s, o, p, i, v
+
+m = Map("firewall",
+	translate("Firewall - Zone Settings"),
+	translate("The firewall creates zones over your network interfaces to control network traffic flow."))
+
+fw.init(m.uci)
+
+s = m:section(TypedSection, "defaults", translate("General Settings"))
+s.anonymous = true
+s.addremove = false
+
+s:option(Flag, "syn_flood", translate("Enable SYN-flood protection"))
+
+o = s:option(Flag, "drop_invalid", translate("Drop invalid packets"))
+o.default = o.disabled
+
+p = {
+	s:option(ListValue, "input", translate("Input")),
+	s:option(ListValue, "output", translate("Output")),
+	s:option(ListValue, "forward", translate("Forward"))
+}
+
+for i, v in ipairs(p) do
+	v:value("REJECT", translate("reject"))
+	v:value("DROP", translate("drop"))
+	v:value("ACCEPT", translate("accept"))
+end
+
+
+s = m:section(TypedSection, "zone", translate("Zones"))
+s.template = "cbi/tblsection"
+s.anonymous = true
+s.addremove = true
+s.extedit   = ds.build_url("admin", "network", "firewall", "zones", "%s")
+
+function s.create(self)
+	local z = fw:new_zone()
+	if z then
+		luci.http.redirect(
+			ds.build_url("admin", "network", "firewall", "zones", z.sid)
+		)
+	end
+end
+
+function s.remove(self, section)
+	return fw:del_zone(section)
+end
+
+o = s:option(DummyValue, "_info", translate("Zone ⇒ Forwardings"))
+o.template = "cbi/firewall_zoneforwards"
+o.cfgvalue = function(self, section)
+	return self.map:get(section, "name")
+end
+
+p = {
+	s:option(ListValue, "input", translate("Input")),
+	s:option(ListValue, "output", translate("Output")),
+	s:option(ListValue, "forward", translate("Forward"))
+}
+
+for i, v in ipairs(p) do
+	v:value("REJECT", translate("reject"))
+	v:value("DROP", translate("drop"))
+	v:value("ACCEPT", translate("accept"))
+end
+
+s:option(Flag, "masq", translate("Masquerading"))
+s:option(Flag, "mtu_fix", translate("MSS clamping"))
+
+return m
diff --git a/applications/luci-app-firewall/luasrc/tools/firewall.lua b/applications/luci-app-firewall/luasrc/tools/firewall.lua
new file mode 100644
index 000000000..07162cba5
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/tools/firewall.lua
@@ -0,0 +1,289 @@
+--[[
+LuCI - Lua Configuration Interface
+
+Copyright 2011-2012 Jo-Philipp Wich <xm@subsignal.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+]]--
+
+module("luci.tools.firewall", package.seeall)
+
+local ut = require "luci.util"
+local ip = require "luci.ip"
+local nx = require "nixio"
+
+local translate, translatef = luci.i18n.translate, luci.i18n.translatef
+
+local function tr(...)
+	return tostring(translate(...))
+end
+
+function fmt_neg(x)
+	if type(x) == "string" then
+		local v, neg = x:gsub("^ *! *", "")
+		if neg > 0 then
+			return v, "%s " % tr("not")
+		else
+			return x, ""
+		end
+	end
+	return x, ""
+end
+
+function fmt_mac(x)
+	if x and #x > 0 then
+		local m, n
+		local l = { tr("MAC"), " " }
+		for m in ut.imatch(x) do
+			m, n = fmt_neg(m)
+			l[#l+1] = "<var>%s%s</var>" %{ n, m }
+			l[#l+1] = ", "
+		end
+		if #l > 1 then
+			l[#l] = nil
+			if #l > 3 then
+				l[1] = tr("MACs")
+			end
+			return table.concat(l, "")
+		end
+	end
+end
+
+function fmt_port(x, d)
+	if x and #x > 0 then
+		local p, n
+		local l = { tr("port"), " " }
+		for p in ut.imatch(x) do
+			p, n = fmt_neg(p)
+			local a, b = p:match("(%d+)%D+(%d+)")
+			if a and b then
+				l[1] = tr("ports")
+				l[#l+1] = "<var>%s%d-%d</var>" %{ n, a, b }
+			else
+				l[#l+1] = "<var>%s%d</var>" %{ n, p }
+			end
+			l[#l+1] = ", "
+		end
+		if #l > 1 then
+			l[#l] = nil
+			if #l > 3 then
+				l[1] = tr("ports")
+			end
+			return table.concat(l, "")
+		end
+	end
+	return d and "<var>%s</var>" % d
+end
+
+function fmt_ip(x, d)
+	if x and #x > 0 then
+		local l = { tr("IP"), " " }
+		local v, a, n
+		for v in ut.imatch(x) do
+			v, n = fmt_neg(v)
+			a, m = v:match("(%S+)/(%d+%.%S+)")
+			a = a or v
+			a = a:match(":") and ip.IPv6(a, m) or ip.IPv4(a, m)
+			if a and (a:is6() and a:prefix() < 128 or a:prefix() < 32) then
+				l[1] = tr("IP range")
+				l[#l+1] = "<var title='%s - %s'>%s%s</var>" %{
+					a:minhost():string(),
+					a:maxhost():string(),
+					n, a:string()
+				}
+			else
+				l[#l+1] = "<var>%s%s</var>" %{
+					n,
+					a and a:string() or v
+				}
+			end
+			l[#l+1] = ", "
+		end
+		if #l > 1 then
+			l[#l] = nil
+			if #l > 3 then
+				l[1] = tr("IPs")
+			end
+			return table.concat(l, "")
+		end
+	end
+	return d and "<var>%s</var>" % d
+end
+
+function fmt_zone(x, d)
+	if x == "*" then
+		return "<var>%s</var>" % tr("any zone")
+	elseif x and #x > 0 then
+		return "<var>%s</var>" % x
+	elseif d then
+		return "<var>%s</var>" % d
+	end
+end
+
+function fmt_icmp_type(x)
+	if x and #x > 0 then
+		local t, v, n
+		local l = { tr("type"), " " }
+		for v in ut.imatch(x) do
+			v, n = fmt_neg(v)
+			l[#l+1] = "<var>%s%s</var>" %{ n, v }
+			l[#l+1] = ", "
+		end
+		if #l > 1 then
+			l[#l] = nil
+			if #l > 3 then
+				l[1] = tr("types")
+			end
+			return table.concat(l, "")
+		end
+	end
+end
+
+function fmt_proto(x, icmp_types)
+	if x and #x > 0 then
+		local v, n
+		local l = { }
+		local t = fmt_icmp_type(icmp_types)
+		for v in ut.imatch(x) do
+			v, n = fmt_neg(v)
+			if v == "tcpudp" then
+				l[#l+1] = "TCP"
+				l[#l+1] = ", "
+				l[#l+1] = "UDP"
+				l[#l+1] = ", "
+			elseif v ~= "all" then
+				local p = nx.getproto(v)
+				if p then
+					-- ICMP
+					if (p.proto == 1 or p.proto == 58) and t then
+						l[#l+1] = translatef(
+							"%s%s with %s",
+							n, p.aliases[1] or p.name, t
+						)
+					else
+						l[#l+1] = "%s%s" %{
+							n,
+							p.aliases[1] or p.name
+						}
+					end
+					l[#l+1] = ", "
+				end
+			end
+		end
+		if #l > 0 then
+			l[#l] = nil
+			return table.concat(l, "")
+		end
+	end
+end
+
+function fmt_limit(limit, burst)
+	burst = tonumber(burst)
+	if limit and #limit > 0 then
+		local l, u = limit:match("(%d+)/(%w+)")
+		l = tonumber(l or limit)
+		u = u or "second"
+		if l then
+			if u:match("^s") then
+				u = tr("second")
+			elseif u:match("^m") then
+				u = tr("minute")
+			elseif u:match("^h") then
+				u = tr("hour")
+			elseif u:match("^d") then
+				u = tr("day")
+			end
+			if burst and burst > 0 then
+				return translatef("<var>%d</var> pkts. per <var>%s</var>, \
+				    burst <var>%d</var> pkts.", l, u, burst)
+			else
+				return translatef("<var>%d</var> pkts. per <var>%s</var>", l, u)
+			end
+		end
+	end
+end
+
+function fmt_target(x, dest)
+	if dest and #dest > 0 then
+		if x == "ACCEPT" then
+			return tr("Accept forward")
+		elseif x == "REJECT" then
+			return tr("Refuse forward")
+		elseif x == "NOTRACK" then
+			return tr("Do not track forward")
+		else --if x == "DROP" then
+			return tr("Discard forward")
+		end
+	else
+		if x == "ACCEPT" then
+			return tr("Accept input")
+		elseif x == "REJECT" then
+			return tr("Refuse input")
+		elseif x == "NOTRACK" then
+			return tr("Do not track input")
+		else --if x == "DROP" then
+			return tr("Discard input")
+		end
+	end
+end
+
+
+function opt_enabled(s, t, ...)
+	if t == luci.cbi.Button then
+		local o = s:option(t, "__enabled")
+		function o.render(self, section)
+			if self.map:get(section, "enabled") ~= "0" then
+				self.title      = tr("Rule is enabled")
+				self.inputtitle = tr("Disable")
+				self.inputstyle = "reset"
+			else
+				self.title      = tr("Rule is disabled")
+				self.inputtitle = tr("Enable")
+				self.inputstyle = "apply"
+			end
+			t.render(self, section)
+		end
+		function o.write(self, section, value)
+			if self.map:get(section, "enabled") ~= "0" then
+				self.map:set(section, "enabled", "0")
+			else
+				self.map:del(section, "enabled")
+			end
+		end
+		return o
+	else
+		local o = s:option(t, "enabled", ...)
+		o.default = "1"
+		return o
+	end
+end
+
+function opt_name(s, t, ...)
+	local o = s:option(t, "name", ...)
+
+	function o.cfgvalue(self, section)
+		return self.map:get(section, "name") or
+			self.map:get(section, "_name") or "-"
+	end
+
+	function o.write(self, section, value)
+		if value ~= "-" then
+			self.map:set(section, "name", value)
+			self.map:del(section, "_name")
+		else
+			self:remove(section)
+		end
+	end
+
+	function o.remove(self, section)
+		self.map:del(section, "name")
+		self.map:del(section, "_name")
+	end
+
+	return o
+end
diff --git a/applications/luci-app-firewall/luasrc/view/firewall/cbi_addforward.htm b/applications/luci-app-firewall/luasrc/view/firewall/cbi_addforward.htm
new file mode 100644
index 000000000..3726f643d
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/view/firewall/cbi_addforward.htm
@@ -0,0 +1,115 @@
+<%-
+	local fw = require "luci.model.firewall".init()
+	local izl = { }
+	local ezl = { }
+	local _, z
+	for _, z in ipairs(fw:get_zones()) do
+		if z:name() ~= "wan" then
+			izl[#izl+1] = z
+		elseif z:name() ~= "lan" then
+			ezl[#ezl+1] = z
+		end
+	end
+-%>
+<div class="cbi-section-create cbi-tblsection-create">
+	<br />
+	<table class="cbi-section-table" style="width:810px; margin-left:5px">
+		<tr class="cbi-section-table-titles">
+			<th class="cbi-section-table-cell" colspan="8"><%:New port forward%>:</th>
+		</tr>
+		<tr class="cbi-section-table-descr">
+			<th class="cbi-section-table-cell"><%:Name%></th>
+			<th class="cbi-section-table-cell"><%:Protocol%></th>
+			<th class="cbi-section-table-cell"><%:External zone%></th>
+			<th class="cbi-section-table-cell"><%:External port%></th>
+			<th class="cbi-section-table-cell"><%:Internal zone%></th>
+			<th class="cbi-section-table-cell"><%:Internal IP address%></th>
+			<th class="cbi-section-table-cell"><%:Internal port%></th>
+			<th class="cbi-section-table-cell"></th>
+		</tr>
+		<tr class="cbi-section-table-row">
+			<td class="cbi-section-table-cell">
+				<input type="text" class="cbi-input-text" id="_newfwd.name" name="_newfwd.name" placeholder="<%:New port forward%>" />
+			</td>
+			<td class="cbi-section-table-cell" style="width:110px">
+				<select class="cbi-input-select" id="_newfwd.proto" name="_newfwd.proto">
+					<option value="tcp udp">TCP+UDP</option>
+					<option value="tcp">TCP</option>
+					<option value="udp">UDP</option>
+					<option value="other"><%:Other...%></option>
+				</select>
+			</td>
+			<td class="cbi-section-table-cell" style="width:55px">
+				<select class="cbi-input-select" id="_newfwd.extzone" name="_newfwd.extzone">
+					<% for _, z in ipairs(ezl) do -%><option value="<%=z:name()%>"><%=z:name()%></option><%- end %>
+				</select>
+			</td>
+			<td class="cbi-section-table-cell" style="width:110px">
+				<input type="text" class="cbi-input-text" id="_newfwd.extport" name="_newfwd.extport" />
+			</td>
+			<td class="cbi-section-table-cell" style="width:55px">
+				<select class="cbi-input-select" id="_newfwd.intzone" name="_newfwd.intzone">
+					<% for _, z in ipairs(izl) do -%><option value="<%=z:name()%>"><%=z:name()%></option><%- end %>
+				</select>
+			</td>
+			<td class="cbi-section-table-cell" style="width:110px">
+				<input type="text" class="cbi-input-text" id="_newfwd.intaddr" name="_newfwd.intaddr" />
+			</td>
+			<td class="cbi-section-table-cell" style="width:110px">
+				<input type="text" class="cbi-input-text" id="_newfwd.intport" name="_newfwd.intport" />
+			</td>
+			<td class="cbi-section-table-cell">
+				<input type="submit" class="cbi-button cbi-button-add" name="cbi.cts.<%=self.config%>.<%=self.sectiontype%>.<%=section%>" value="<%:Add%>" />
+			</td>
+		</tr>
+	</table>
+
+	<script type="text/javascript">//<![CDATA[
+		cbi_validate_field('_newfwd.extport', true, 'portrange');
+		cbi_validate_field('_newfwd.intaddr', true, 'host');
+		cbi_validate_field('_newfwd.intport', true, 'portrange');
+
+		cbi_combobox_init('_newfwd.intaddr', {
+			<% first = true; luci.sys.net.ipv4_hints(function(ip, name) %>
+				<%- if first then first = false else %>,<% end -%>'<%=ip%>': '<%=ip%> (<%=name%>)'
+			<%- end) %> }, '', '<%: -- custom -- %>');
+
+		cbi_bind(document.getElementById('_newfwd.extport'), 'blur',
+			function() {
+				var n = document.getElementById('_newfwd.name');
+				var p = document.getElementById('_newfwd.proto');
+				var i = document.getElementById('_newfwd.intport');
+				var hints = {
+				/*  port    name     0=both, 1=tcp, 2=udp, 3=other */
+					21:   [ 'FTP',   1 ],
+					22:   [ 'SSH',   1 ],
+					53:   [ 'DNS',   0 ],
+					80:   [ 'HTTP',  1 ],
+					443:  [ 'HTTPS', 1 ],
+					3389: [ 'RDP',   1 ],
+					5900: [ 'VNC',   1 ],
+				};
+
+				if (!this.className.match(/invalid/))
+				{
+					if (!i.value) i.value = this.value;
+
+					var hint = hints[this.value || 0] || hints[i.value || 0];
+					if (hint)
+					{
+						p.selectedIndex = hint[1];
+
+						if (!n.value)
+							n.value = hint[0];
+					}
+					else if (!n.value)
+					{
+						n.value = 'Forward' + this.value;
+					}
+				}
+			});
+
+
+		cbi_validate_field('cbi.cts.<%=self.config%>.<%=self.sectiontype%>.<%=section%>', true, 'uciname');
+	//]]></script>
+</div>
diff --git a/applications/luci-app-firewall/luasrc/view/firewall/cbi_addrule.htm b/applications/luci-app-firewall/luasrc/view/firewall/cbi_addrule.htm
new file mode 100644
index 000000000..463b2e05f
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/view/firewall/cbi_addrule.htm
@@ -0,0 +1,112 @@
+<%
+	local fw = require "luci.model.firewall".init()
+	local wz = fw:get_zone("wan")
+	local lz = fw:get_zone("lan")
+%>
+
+<div class="cbi-section-create cbi-tblsection-create">
+	<% if wz and lz then %>
+		<br />
+		<table class="cbi-section-table" style="margin-left:5px">
+			<tr class="cbi-section-table-titles">
+				<th class="cbi-section-table-cell left" colspan="4"><%:Open ports on router%>:</th>
+			</tr>
+			<tr class="cbi-section-table-descr">
+				<th class="cbi-section-table-cell"><%:Name%></th>
+				<th class="cbi-section-table-cell"><%:Protocol%></th>
+				<th class="cbi-section-table-cell"><%:External port%></th>
+				<th class="cbi-section-table-cell"></th>
+			</tr>
+			<tr class="cbi-section-table-row">
+				<td class="cbi-section-table-cell" style="width:130px">
+					<input type="text" class="cbi-input-text" id="_newopen.name" name="_newopen.name" placeholder="<%:New input rule%>" />
+				</td>
+				<td class="cbi-section-table-cell" style="width:110px">
+					<select class="cbi-input-select" id="_newopen.proto" name="_newopen.proto">
+						<option value="tcp udp">TCP+UDP</option>
+						<option value="tcp">TCP</option>
+						<option value="udp">UDP</option>
+						<option value="other"><%:Other...%></option>
+					</select>
+				</td>
+				<td class="cbi-section-table-cell" style="width:110px">
+					<input type="text" class="cbi-input-text" id="_newopen.extport" name="_newopen.extport" />
+				</td>
+				<td class="cbi-section-table-cell left">
+					<input type="submit" class="cbi-button cbi-button-add" name="_newopen.submit" value="<%:Add%>" />
+				</td>
+			</tr>
+		</table>
+
+		<table class="cbi-section-table" style="margin-left:5px">
+			<tr class="cbi-section-table-titles">
+				<th class="cbi-section-table-cell left" colspan="6"><br /><%:New forward rule%>:</th>
+			</tr>
+			<tr class="cbi-section-table-descr">
+				<th class="cbi-section-table-cell"><%:Name%></th>
+				<th class="cbi-section-table-cell"><%:Source zone%></th>
+				<th class="cbi-section-table-cell"><%:Destination zone%></th>
+				<th class="cbi-section-table-cell"></th>
+			</tr>
+			<tr class="cbi-section-table-row">
+				<td class="cbi-section-table-cell" style="width:130px">
+					<input type="text" class="cbi-input-text" id="_newfwd.name" name="_newfwd.name" placeholder="<%:New forward rule%>" />
+				</td>
+				<td class="cbi-section-table-cell" style="width:110px">
+					<select class="cbi-input-text" id="_newfwd.src" name="_newfwd.src">
+						<% local k, v; for k, v in ipairs(fw:get_zones()) do -%>
+							<option<%=ifattr(v:name() == "lan", "selected", "selected")%> value="<%=v:name()%>"><%=v:name()%></option>
+						<%- end %>
+					</select>
+				</td>
+				<td class="cbi-section-table-cell" style="width:110px">
+					<select class="cbi-input-text" id="_newfwd.dest" name="_newfwd.dest">
+						<% local k, v; for k, v in ipairs(fw:get_zones()) do -%>
+							<option<%=ifattr(v:name() == "wan", "selected", "selected")%> value="<%=v:name()%>"><%=v:name()%></option>
+						<%- end %>
+					</select>
+				</td>
+				<td class="cbi-section-table-cell left">
+					<input type="submit" class="cbi-button cbi-button-link" name="_newfwd.submit" value="<%:Add and edit...%>" />
+				</td>
+			</tr>
+		</table>
+
+		<script type="text/javascript">//<![CDATA[
+			cbi_validate_field('_newopen.extport', true, 'list(neg(portrange))');
+			cbi_bind(document.getElementById('_newopen.extport'), 'blur',
+				function() {
+					var n = document.getElementById('_newopen.name');
+					var p = document.getElementById('_newopen.proto');
+					var hints = {
+					/*  port    name     0=both, 1=tcp, 2=udp, 3=other */
+						22:   [ 'SSH',   1 ],
+						53:   [ 'DNS',   0 ],
+						80:   [ 'HTTP',  1 ],
+						443:  [ 'HTTPS', 1 ],
+					};
+
+					if (!this.className.match(/invalid/))
+					{
+						var hint = hints[this.value || 0];
+						if (hint)
+						{
+							p.selectedIndex = hint[1];
+
+							if (!n.value)
+								n.value = hint[0];
+						}
+						else if (!n.value && this.value)
+						{
+							n.value = 'Open' + this.value;
+						}
+					}
+				});
+
+
+			cbi_validate_field('cbi.cts.<%=self.config%>.<%=self.sectiontype%>.<%=section%>', true, 'uciname');
+		//]]></script>
+	<% else %>
+		<input type="submit" class="cbi-button cbi-button-add" name="cbi.cts.<%=self.config%>.<%=self.sectiontype%>.<%=section%>" value="<%:Add%>" />
+	<% end %>
+</div>
diff --git a/applications/luci-app-firewall/luasrc/view/firewall/cbi_addsnat.htm b/applications/luci-app-firewall/luasrc/view/firewall/cbi_addsnat.htm
new file mode 100644
index 000000000..4e1681c11
--- /dev/null
+++ b/applications/luci-app-firewall/luasrc/view/firewall/cbi_addsnat.htm
@@ -0,0 +1,66 @@
+<%
+	local fw = require "luci.model.firewall".init()
+	local nw = require "luci.model.network".init()
+	local wz = fw:get_zone("wan")
+	local lz = fw:get_zone("lan")
+%>
+
+<div class="cbi-section-create cbi-tblsection-create">
+	<% if wz and lz then %>
+		<br />
+		<table class="cbi-section-table" style="width:700px; margin-left:5px">
+			<tr class="cbi-section-table-titles">
+				<th class="cbi-section-table-cell left" colspan="6"><%:New source NAT%>:</th>
+			</tr>
+			<tr class="cbi-section-table-descr">
+				<th class="cbi-section-table-cell"><%:Name%></th>
+				<th class="cbi-section-table-cell"><%:Source zone%></th>
+				<th class="cbi-section-table-cell"><%:Destination zone%></th>
+				<th class="cbi-section-table-cell"><%:To source IP%></th>
+				<th class="cbi-section-table-cell"><%:To source port%></th>
+				<th class="cbi-section-table-cell"></th>
+			</tr>
+			<tr class="cbi-section-table-row">
+				<td class="cbi-section-table-cell">
+					<input type="text" class="cbi-input-text" id="_newsnat.name" name="_newsnat.name" placeholder="<%:New SNAT rule%>" />
+				</td>
+				<td class="cbi-section-table-cell" style="width:110px">
+					<select class="cbi-input-text" id="_newsnat.src" name="_newsnat.src">
+						<% local k, v; for k, v in ipairs(fw:get_zones()) do -%>
+							<option<%=ifattr(v:name() == "lan", "selected", "selected")%> value="<%=v:name()%>"><%=v:name()%></option>
+						<%- end %>
+					</select>
+				</td>
+				<td class="cbi-section-table-cell" style="width:110px">
+					<select class="cbi-input-text" id="_newsnat.dest" name="_newsnat.dest">
+						<% local k, v; for k, v in ipairs(fw:get_zones()) do -%>
+							<option<%=ifattr(v:name() == "wan", "selected", "selected")%> value="<%=v:name()%>"><%=v:name()%></option>
+						<%- end %>
+					</select>
+				</td>
+				<td class="cbi-section-table-cell" style="width:110px">
+					<input type="text" class="cbi-input-text" id="_newsnat.dip" name="_newsnat.dip" />
+				</td>
+				<td class="cbi-section-table-cell" style="width:110px">
+					<input type="text" class="cbi-input-text" id="_newsnat.dport" name="_newsnat.dport" placeholder="<%:Do not rewrite%>" />
+				</td>
+				<td class="cbi-section-table-cell">
+					<input type="submit" class="cbi-button cbi-button-link" name="_newsnat.submit" value="<%:Add and edit...%>" />
+				</td>
+			</tr>
+		</table>
+
+		<script type="text/javascript">//<![CDATA[
+			cbi_validate_field('_newsnat.dport', true, 'portrange');
+			cbi_validate_field('_newsnat.dip', true, 'ip4addr');
+			cbi_combobox_init('_newsnat.dip', {
+				<% local c, k, v = 0; for k, v in ipairs(nw:get_interfaces()) do -%>
+					<%- local a; for k, a in ipairs(v:ipaddrs()) do c = c + 1 -%>
+						<% if c > 1 then %>,<% end %>'<%=a:host():string()%>': '<%=a:host():string()%> (<%=v:shortname()%>)'
+					<%- end %>
+				<%- end %> }, '<%: -- Please choose -- %>', '<%: -- custom -- %>');
+		//]]></script>
+	<% else %>
+		<input type="submit" class="cbi-button cbi-button-add" name="cbi.cts.<%=self.config%>.<%=self.sectiontype%>.<%=section%>" value="<%:Add%>" />
+	<% end %>
+</div>
diff --git a/applications/luci-app-firewall/po/ca/firewall.po b/applications/luci-app-firewall/po/ca/firewall.po
new file mode 100644
index 000000000..1843a1649
--- /dev/null
+++ b/applications/luci-app-firewall/po/ca/firewall.po
@@ -0,0 +1,603 @@
+#  luci-fw.pot
+#  generated from ./applications/luci-fw/luasrc/i18n/luci-fw.en.lua
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2014-06-17 09:40+0200\n"
+"Last-Translator: Alex <alexhenrie24@gmail.com>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: ca\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s en %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s amb %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s en %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(Entrada sense nom)"
+
+msgid "(Unnamed Rule)"
+msgstr "(Regla sense nom)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(SNAT sense nom)"
+
+msgid "-- Please choose --"
+msgstr "-- Si us plau, trieu --"
+
+msgid "-- custom --"
+msgstr "-- personalitzats --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> paquets al <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> i limita a %s"
+
+msgid "Action"
+msgstr "Acció"
+
+msgid "Add"
+msgstr "Afegeix"
+
+msgid "Add and edit..."
+msgstr "Afegeix i edita..."
+
+msgid "Advanced Settings"
+msgstr "Ajusts avançats"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Permet el reenviament des dels <em>zones d'origen</em>:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Permet el reenviament als <em>zones de destí</em>:"
+
+msgid "Any"
+msgstr "Qualsevol"
+
+msgid "Covered networks"
+msgstr "Xarxes cobertes"
+
+msgid "Custom Rules"
+msgstr "Regles personalitzades"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"Les regles personalitzades us permet executar ordres del iptables arbitraris "
+"que la infraestructura de tallafocs no cobreix d'altra manera. Aquests "
+"ordres s'executen després de cada reinici de tallafocs, just després el "
+"conjunt de regles per defecte s'ha carregat."
+
+msgid "Destination IP address"
+msgstr "Adreça IP de destí"
+
+msgid "Destination address"
+msgstr "Adreça de destí"
+
+msgid "Destination port"
+msgstr "Port de destí"
+
+msgid "Destination zone"
+msgstr "Zona de destí"
+
+msgid "Do not rewrite"
+msgstr "No reescriguis"
+
+msgid "Drop invalid packets"
+msgstr "Descarta els paquets invàlids"
+
+msgid "Enable"
+msgstr "Habilita"
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr "Habilita protecció contra la inundació SYN"
+
+msgid "Enable logging on this zone"
+msgstr "Habilita el registre d'aquesta zona"
+
+msgid "External IP address"
+msgstr "Adreça IP extern"
+
+msgid "External port"
+msgstr "Port extern"
+
+msgid "External zone"
+msgstr "Zona extern"
+
+msgid "Extra arguments"
+msgstr "Paràmetres extres"
+
+msgid "Firewall"
+msgstr "Tallafocs"
+
+msgid "Firewall - Custom Rules"
+msgstr "Tallafocs - Regles personalitzades"
+
+msgid "Firewall - Port Forwards"
+msgstr "Tallafocs - Reenviaments de port"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Tallafocs - Regles de tràfic"
+
+msgid "Firewall - Zone Settings"
+msgstr "Tallafocs - Ajusts de zona"
+
+msgid "Force connection tracking"
+msgstr "Força el rastreig de connexió"
+
+msgid "Forward"
+msgstr "Reenvia"
+
+msgid "Forward to"
+msgstr "Reenvia a"
+
+msgid "From %s in %s"
+msgstr "Des de %s en %s"
+
+msgid "From %s in %s with source %s"
+msgstr "Des de %s en %s amb origen %s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "Des de %s en %s amb orígens %s i %s"
+
+msgid "General Settings"
+msgstr "Ajusts generals"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 i IPv6"
+
+msgid "IPv4 only"
+msgstr "Només IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "Només IPv6"
+
+msgid "Input"
+msgstr "Entrada"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Reenviament interzonal"
+
+msgid "Internal IP address"
+msgstr "Adreça IP interna"
+
+msgid "Internal port"
+msgstr "Port intern"
+
+msgid "Internal zone"
+msgstr "Zona interna"
+
+msgid "Limit log messages"
+msgstr "Limita els missatges de registre"
+
+msgid "MSS clamping"
+msgstr "Fixació MSS"
+
+msgid "Masquerading"
+msgstr "Mascarada"
+
+msgid "Match"
+msgstr "Coincideix"
+
+msgid "Match ICMP type"
+msgstr "Coincideix amb el tipus ICMP"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+"Coincideix amb trànsit reenviat al port o rang de ports de destí donat."
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Coincideix amb trànsit entrant dirigit al port o rang de ports de destí en "
+"aquest host donat"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+"Coincideix amb trànsit entrant originant en el host client des del port o "
+"rang de ports d'origen donat."
+
+msgid "Name"
+msgstr "Nom"
+
+msgid "New SNAT rule"
+msgstr "Nova regla SNAT"
+
+msgid "New forward rule"
+msgstr "Nova regla de reenviament"
+
+msgid "New input rule"
+msgstr "Nova regla d'entrada"
+
+msgid "New port forward"
+msgstr "Nou reenviament de port"
+
+msgid "New source NAT"
+msgstr "Nou origen NAT"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "Només coincideix amb trànsit entrant dirigit a la adreça IP donada."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Només coincideix amb trànsit entrant des d'aquests MAC."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr "Només coincideix amb trànsit entrant des d'aquest IP o rang."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+"Només coincideix amb trànsit originant en el host client des del port o del "
+"rang de ports d'origen donat"
+
+msgid "Open ports on router"
+msgstr "Obre els ports en el encaminador"
+
+msgid "Other..."
+msgstr "Altre..."
+
+msgid "Output"
+msgstr "Sortida"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr "Passa paràmetres addicionals al iptables. Utilitzeu-ho amb cura!"
+
+msgid "Port Forwards"
+msgstr "Reenviaments de port"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"El reenviament de ports permet que els ordinadors remots en el Internet "
+"connectin a un ordinador o servei específic dins del LAN privat."
+
+msgid "Protocol"
+msgstr "Protocol"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr "Redirigeix trànsit entrant coincidit al port donat en el host intern"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Redirigeix trànsit entrant coincidit al host intern especificat"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "Restringeix la mascarada a les subxarxes de destí donades"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "Restringeix la mascarada a les subxarxes d'origen donades"
+
+msgid "Restrict to address family"
+msgstr "Restringeix a la família d'adreces"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr "Reescriu el trànsit coincidint cap a la adreça donada."
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+"Reescriu el trànsit coincidint cap al port d'origen donat. Pot ser deixat en "
+"blanc per només reescriure l'adreça IP."
+
+msgid "Rewrite to source %s"
+msgstr "Reescriu a l'origen %s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "Reescriu als orígens %s, %s"
+
+msgid "SNAT IP address"
+msgstr "Adreça IP de SNAT"
+
+msgid "SNAT port"
+msgstr "Port SNAT"
+
+msgid "Source IP address"
+msgstr "Adreça IP d'origen"
+
+msgid "Source MAC address"
+msgstr "Adreça MAC d'origen"
+
+msgid "Source NAT"
+msgstr "NAT d'origen"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"El NAT d'origen és un forma específic de mascarada que permet control de gra "
+"fi sobre l'IP d'origen utilitzat pel trànsit sortint, per exemple per "
+"associar múltiples adreces WAN a subxarxes internes."
+
+msgid "Source address"
+msgstr "Adreça d'origen"
+
+msgid "Source port"
+msgstr "Port d'origen"
+
+msgid "Source zone"
+msgstr "Zona d'origen"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"El tallafocs crea zones a les teves interfícies de xarxa per controlar el "
+"flux de tràfic de xarxa."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"Les opcions a sota controlen les polítiques de reenviament entre aquesta "
+"zona (%s) i altres zones. <em>Zones de destí</em> cobreixen trànsit reenviat "
+"<strong>originant des de %q</strong>. <em>Zones d'origen</em> coincideixen "
+"amb trànsit reenviat des de altres zones <strong>apuntat a %q</strong>. La "
+"regla de reenviament es <em>unidirectional</em>, per exemple un reenviament "
+"de lan a wan <em>no</em> implica permís per reenviar de wan a lan també."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"Aquesta pàgina us permet canviar propietats avançats de l'entrada de "
+"reenviament de port. En la majoria dels casos no hi ha necessitat de "
+"modificar aquests ajusts."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"Aquesta pàgina us permet canviar propietats avançats de l'entrada de regla "
+"de trànsit, com als hosts d'origen i de destí coincidits."
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"Aquesta secció defineix propietats comuns de %q. Les opcions <em>entrada</"
+"em> i <em>sortida</em> estableixen les polítiques per defecte per a trànsit "
+"entrant i sortint aquesta zona mentre l'opció <em>reenvia</em> descriu la "
+"política de trànsit reenviat entre xarxes distintes dins de la zona. "
+"<em>Xarxes cobertes</em> especifica quines xarxes disponibles són membres "
+"d'aquesta zona."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "A %s a %s en <var>aquest dispositiu</var>"
+
+msgid "To %s in %s"
+msgstr "A %s en %s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "A %s en <var>aquest dispositiu</var>"
+
+msgid "To %s, %s in %s"
+msgstr "A %s, %s en %s"
+
+msgid "To source IP"
+msgstr "A l'IP d'origen"
+
+msgid "To source port"
+msgstr "Al port d'origen"
+
+msgid "Traffic Rules"
+msgstr "Regles de trànsit"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"Les regles de trànsit defineixen polítiques per als paquets viatjant entre "
+"zones distintes, per exemple per a rebutjar trànsit entre certs hosts o "
+"obrir ports WAN en el encaminador."
+
+msgid "Via %s"
+msgstr "Via %s"
+
+msgid "Via %s at %s"
+msgstr "Via %s a %s"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"Podeu especificar múltiples per seleccionar \"-- personalitzat --\" i "
+"llavors introduir protocols separats per espai."
+
+msgid "Zone %q"
+msgstr "Zona %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Zona ⇒ Reenviaments"
+
+msgid "Zones"
+msgstr "Zones"
+
+msgid "accept"
+msgstr "accepta"
+
+msgid "any"
+msgstr "qualsevol"
+
+msgid "any host"
+msgstr "qualsevol host"
+
+msgid "any router IP"
+msgstr "qualsevol IP d'encaminador"
+
+msgid "any zone"
+msgstr "qualsevol zona"
+
+msgid "don't track"
+msgstr "no rastregis"
+
+msgid "drop"
+msgstr "descarta"
+
+msgid "reject"
+msgstr "rebutja"
+
+msgid "traffic"
+msgstr "trànsit"
+
+#~ msgid "Destination"
+#~ msgstr "Destí"
+
+#~ msgid "Source"
+#~ msgstr "Origen"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Port intern (opcional)"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Regles avançades"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Les regles avançades et deixen personalitzar el teu tallafocs per les "
+#~ "teves necessitats. Només s'hi correspondran les connexions noves. Als "
+#~ "paquets que pertanyen una connexió oberta se'ls permet passar el "
+#~ "tallafocs automàticament."
+
+#~ msgid "Port forwarding"
+#~ msgstr "Readreçament de port"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "El readreçament de ports permet proveir serveis de la xarxa interna a una "
+#~ "xarxa externa."
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "Readreçament de tràfic"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "El readreçament de tràfic et permet canviar l'adreça destí dels paquets "
+#~ "reenviats."
+
+#, fuzzy
+#~ msgid "Network"
+#~ msgstr "Xarxes"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Control de tràfic"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Tràfic zona a zona"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Ací pots especificar quin tràfic de xarxes es permet entre les zones de "
+#~ "xarxa. Només s'hi correspondren les connexions noves. Als paquets que "
+#~ "pertanyen una connexió oberta se'ls permet passar el tallafocs "
+#~ "automàticament. Si experimentes problemes de connexió ocasionals, intenta "
+#~ "activar el Clamping MSS, si no desactiva'l per raons de rendiment."
+
+#~ msgid "Zone"
+#~ msgstr "Zona"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Destí"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Adreça IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Adreça MAC d'origen"
+
+#~ msgid "Custom forwarding"
+#~ msgstr "Reenviament personalitzat"
+
+#~ msgid "Input Zone"
+#~ msgstr "Zona d'entrada"
+
+#~ msgid "Output Zone"
+#~ msgstr "Zona de sortida"
+
+#~ msgid "External Zone"
+#~ msgstr "Zona externa"
+
+#~ msgid "Source MAC"
+#~ msgstr "MAC origen"
+
+#~ msgid "Defaults"
+#~ msgstr "Per defecte"
+
+#~ msgid ""
+#~ "These are the default settings that are used if no other rules match."
+#~ msgstr ""
+#~ "Aquesta és la configuració per defecte utilitzada si no hi ha cap altra "
+#~ "regla que es correspongui."
+
+#~ msgid ""
+#~ "Zones part the network interfaces into certain isolated areas to separate "
+#~ "network traffic. One or more networks can belong to a zone. The MASQ-flag "
+#~ "enables NAT masquerading for all outgoing traffic on this zone."
+#~ msgstr ""
+#~ "Les zones parteixen les interfícies de xarxa en certes àrees aïllades per "
+#~ "separar el tràfic de xarxa. Una o més xarxes poden pertànyer a una zona. "
+#~ "El flag MASQ activa el NAT masquerading per tot el tràfic sortint "
+#~ "d'aquesta zona."
+
+#~ msgid "MASQ"
+#~ msgstr "MASQ"
+
+#~ msgid "contained networks"
+#~ msgstr "Xarxes contingudes"
diff --git a/applications/luci-app-firewall/po/cs/firewall.po b/applications/luci-app-firewall/po/cs/firewall.po
new file mode 100644
index 000000000..beda490f2
--- /dev/null
+++ b/applications/luci-app-firewall/po/cs/firewall.po
@@ -0,0 +1,579 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"PO-Revision-Date: 2014-06-21 11:22+0200\n"
+"Last-Translator: koli <lukas.koluch@gmail.com>\n"
+"Language-Team: none\n"
+"Language: cs\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s v %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s s %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s v %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(Nepojmenovaný vstup)"
+
+msgid "(Unnamed Rule)"
+msgstr "(Nepojmenované pravidlo)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(Nepojmenovaný SNAT)"
+
+msgid "-- Please choose --"
+msgstr "-- Prosím zvolte --"
+
+msgid "-- custom --"
+msgstr "-- vlastní --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> paketů za <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr "<var>%d</var> paketů za <var>%s</var>, burst <var>%d</var> paketů."
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> a omezit na %s"
+
+msgid "Action"
+msgstr "Akce"
+
+msgid "Add"
+msgstr "Přidat"
+
+msgid "Add and edit..."
+msgstr "Přidat a upravit"
+
+msgid "Advanced Settings"
+msgstr "Pokročilé nastavení"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Povolit přesměrování ze <em>zdrojových oblastí</em>:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Povolit přesměrování do <em>zdrojových oblastí</em>:"
+
+msgid "Any"
+msgstr "Libovolné"
+
+msgid "Covered networks"
+msgstr "Pokryté sítě"
+
+msgid "Custom Rules"
+msgstr "Vlastní pravidla"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"Vlastní pravidla vám umožňují spustit libovolné iptables příkazy, které "
+"nejsou jinak pokryté frameworkem firewallu. Příkazy jsou spuštěny po každém "
+"restartu firewallu, právě po načtení výchozí sady pravidel."
+
+msgid "Destination IP address"
+msgstr "Cílová IP adresa"
+
+msgid "Destination address"
+msgstr "Cílová adresa"
+
+msgid "Destination port"
+msgstr "Cílový port"
+
+msgid "Destination zone"
+msgstr "Cílová oblast"
+
+msgid "Do not rewrite"
+msgstr "Nepřepisovat"
+
+msgid "Drop invalid packets"
+msgstr "Zahazovat neplatné pakety"
+
+msgid "Enable"
+msgstr "Povolit"
+
+msgid "Enable NAT Loopback"
+msgstr "Povolit NAT Loopback"
+
+msgid "Enable SYN-flood protection"
+msgstr "Povolit ochranu proti SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr "Povolit logování v této oblasti"
+
+msgid "External IP address"
+msgstr "Vnější IP adresa"
+
+msgid "External port"
+msgstr "Vnější port"
+
+msgid "External zone"
+msgstr "Vnější zóna"
+
+msgid "Extra arguments"
+msgstr "Dodatečné argumenty"
+
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Custom Rules"
+msgstr "Firewall - Vlastní pravidla"
+
+msgid "Firewall - Port Forwards"
+msgstr "Firewall - Přesměrování portů"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Firewall - Pravidla síťového provozu"
+
+msgid "Firewall - Zone Settings"
+msgstr "Firewall - Nastavení zón"
+
+msgid "Force connection tracking"
+msgstr "Vynutit sledování připojení"
+
+msgid "Forward"
+msgstr "Přesměrování"
+
+msgid "Forward to"
+msgstr "Přesměrovat na"
+
+msgid "From %s in %s"
+msgstr "Z %s v %s"
+
+msgid "From %s in %s with source %s"
+msgstr "Z %s v %s se zdrojovou %s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "Z %s v %s se zdrojovou %s a %s"
+
+msgid "General Settings"
+msgstr "Obecné nastavení"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 a IPv6"
+
+msgid "IPv4 only"
+msgstr "pouze IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "pouze IPv6"
+
+msgid "Input"
+msgstr "Vstup"
+
+# nebo mimo zóny?
+msgid "Inter-Zone Forwarding"
+msgstr "Přesměrování mezi zónami"
+
+msgid "Internal IP address"
+msgstr "Vnitřní IP adresa"
+
+msgid "Internal port"
+msgstr "Vnitřní port"
+
+msgid "Internal zone"
+msgstr "Vnitřní zóna"
+
+msgid "Limit log messages"
+msgstr "Omezit logovací zprávy"
+
+msgid "MSS clamping"
+msgstr "MSS clamping"
+
+msgid "Masquerading"
+msgstr "Maškárádování"
+
+msgid "Match"
+msgstr "Shoda"
+
+msgid "Match ICMP type"
+msgstr "Odpovídá ICMP typu"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr "Vybrat provoz, přesměrovaný na zadaný port nebo rozsah portů"
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Vybrat příchozí provoz, směrovaný na zadaný cílový port nebo rozsah portů "
+"tohoto hostitele"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+"Vybrat příchozí provoz, pocházející ze zadaného portu nebo rozsahu portů "
+"klienta."
+
+msgid "Name"
+msgstr "Název"
+
+msgid "New SNAT rule"
+msgstr "Nové pravidlo SNAT"
+
+msgid "New forward rule"
+msgstr "Nové přesměrovací pravidlo"
+
+msgid "New input rule"
+msgstr "Nové vstupní pravidlo"
+
+msgid "New port forward"
+msgstr "Nové přesměrování portu"
+
+msgid "New source NAT"
+msgstr "Nový zdrojový NAT (SNAT)"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "Vybrat pouze příchozí provoz, směrovaný na danou IP adresu."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Vybrat pouze příchozí provoz z těchto MAC adres."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr "Vybrat pouze příchozí provoz z této IP nebo rozsahu IP adres."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+"Vybrat pouze příchozí provoz, pocházející ze zadaného portu nebo rozsahu "
+"portů klienta."
+
+msgid "Open ports on router"
+msgstr "Otevřené porty na routeru"
+
+msgid "Other..."
+msgstr "Ostatní ..."
+
+msgid "Output"
+msgstr "Výstup"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr "Předává další argumenty iptables. Používat opatrně!"
+
+msgid "Port Forwards"
+msgstr "Přesměrování portů"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"Přesměrování portů (port forwarding) umožňuje vzdáleným počítačům z "
+"Internetu připojení k vybraným počítačům nebo službám uvnitř privátní sítě "
+"LAN."
+
+msgid "Protocol"
+msgstr "Protokol"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Přesměrovat vybraný příchozí provoz na uvedený port vnitřního hostitele."
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Přesměrovat vybraný příchozí provoz na uvedeného vnitřního hostitele."
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "Omezit maškarádování na uvedené cílové podsítě"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "Omezit maškarádování na uvedené zdrojové podsítě"
+
+msgid "Restrict to address family"
+msgstr "Omezit na rodinu adres"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr "Přepsat shodný provoz na uvedenou adresu."
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+"Přepsat shodný provoz na uvedený zdrojový port. Může zůstat prázdné, pak "
+"bude přepsána pouze IP adresa."
+
+msgid "Rewrite to source %s"
+msgstr "Přepsat na zdrojovou %s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "Přepsat na zdrojovou %s, %s"
+
+msgid "SNAT IP address"
+msgstr "IP adresa SNATu"
+
+msgid "SNAT port"
+msgstr "Port SNATu"
+
+msgid "Source IP address"
+msgstr "Zdrojová IP adresa"
+
+msgid "Source MAC address"
+msgstr "Zdrojová MAC adresa"
+
+msgid "Source NAT"
+msgstr "Zdrojový NAT"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"Zdrojový NAT je specifická forma maškarádování, která umožňuje jemnozrnnou "
+"kontrolu nad zdrojovými IP, použitými pro odchozí provoz. Využívá se "
+"například pro mapování množství WAN adres do vnitřních podsítí."
+
+msgid "Source address"
+msgstr "Zdrojová adresa"
+
+msgid "Source port"
+msgstr "Zdrojový port"
+
+msgid "Source zone"
+msgstr "Zdrojová zóna"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"Firewall vytváří zóny přes vaše síťová rozhraní za účelem řízení síťového "
+"provozu."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"Níže uvedené možnosti řídí přesměrovací politiky mezi touto zónou (%s) a "
+"ostatními zónami. <em>Cílové zóny</em> pokrývají přesměrovávaný provoz, "
+"<strong>pocházející z %q</strong>. <em>Zdrojové zóny</em> porovnávají "
+"přesměrovávaný provoz z ostatních zón, <strong>zaměřený na %q</strong>. "
+"Přesměrovávací pravidlo je <em>jednosměrné</em>, například přesměrování z "
+"lan do wan <em>nepovoluje</em> přesměrování z wan do lan (a naopak)."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"Tato stránka vám umožňuje změnit pokročilé vlastností přesměrování portů. Ve "
+"většině případů není potřeba upravovat tato nastavení."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"Tato stránka vám umožňuje změnit pokročilé vlastnosti pravidla síťového "
+"provozu, například zdrojové a cílové hostitele."
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"Tato sekce definuje běžné možnosti %q. <em>Vstupní</em> a <em>výstupní</em> "
+"možnosti nastavují výchozí politiky pro provoz, vstupující do této zóny a "
+"vystupující z ní, zatímco <em>přesměrovací</em> možnosti popisují politiku "
+"pro přesměrování provozu mezi rozdílnými sítěmi uvnitř jedné zóny.<em> "
+"Pokryté sítě</em> určuje, které z dostupných sítí jsou členy této zóny."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "Na %s v %s na <var>tomto zařízení</var>"
+
+msgid "To %s in %s"
+msgstr "Na %s v %s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "Na %s na <var>tomto zařízení</var>"
+
+msgid "To %s, %s in %s"
+msgstr "Na %s, %s v %s"
+
+msgid "To source IP"
+msgstr "Na zdrojovou IP"
+
+msgid "To source port"
+msgstr "Na zdrojový port"
+
+msgid "Traffic Rules"
+msgstr "Pravidla síťového provozu"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"Pravidla síťového provozu definují politiky pro cestování paketů mezi "
+"různými zónami, například pro odmítnutí provozu mezi jistými hostiteli nebo "
+"pro otevření WAN portů na routeru."
+
+msgid "Via %s"
+msgstr "Prostřednictvím %s"
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"Lze určit více protokolů. Vyberte \"-- vlastní --\" a vkládejte protokoly "
+"oddělené mezerou."
+
+msgid "Zone %q"
+msgstr "Zóna %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Zóna ⇒ Přesměrování"
+
+msgid "Zones"
+msgstr "Zóny"
+
+msgid "accept"
+msgstr "přijmout"
+
+msgid "any"
+msgstr "libovolný"
+
+msgid "any host"
+msgstr "libovolný hostitel"
+
+msgid "any router IP"
+msgstr "libovolná IP routeru"
+
+msgid "any zone"
+msgstr "libovolná zóna"
+
+msgid "don't track"
+msgstr "nesledovat"
+
+msgid "drop"
+msgstr "zahodit"
+
+msgid "reject"
+msgstr "odmítnout"
+
+msgid "traffic"
+msgstr "provoz"
+
+#~ msgid "Destination"
+#~ msgstr "Cíl"
+
+#~ msgid "Family"
+#~ msgstr "Rodina"
+
+#~ msgid "Forward to %s in %s"
+#~ msgstr "Přesměrovat na %s v %s"
+
+#~ msgid "Forward to %s, %s in %s"
+#~ msgstr "Přesměrovat na %s, %s v %s"
+
+#~ msgid "SNAT"
+#~ msgstr "SNAT"
+
+#~ msgid "Source"
+#~ msgstr "Zdroj"
+
+#~ msgid "To %s"
+#~ msgstr "Na %s"
+
+#~ msgid "To %s at %s"
+#~ msgstr "Na %s v %s"
+
+#~ msgid "Via"
+#~ msgstr "přes"
+
+#~ msgid "Accept forward"
+#~ msgstr "Přijmout přesměrování"
+
+#~ msgid "Accept input"
+#~ msgstr "Přijmout vstup"
+
+#~ msgid "Disable"
+#~ msgstr "Zakázat"
+
+#~ msgid "Discard forward"
+#~ msgstr "Zahodit přesměrování"
+
+#~ msgid "Discard input"
+#~ msgstr "Zahodit vstup"
+
+#~ msgid "Do not track forward"
+#~ msgstr "Nesledovat přesměrování"
+
+#~ msgid "Do not track input"
+#~ msgstr "Nesledovat vstup"
+
+#~ msgid "IP"
+#~ msgstr "IP"
+
+#~ msgid "IP range"
+#~ msgstr "IP rozsah"
+
+#~ msgid "IPs"
+#~ msgstr "IP"
+
+#~ msgid "MAC"
+#~ msgstr "MAC"
+
+#~ msgid "MACs"
+#~ msgstr "MAC"
+
+#~ msgid "Refuse forward"
+#~ msgstr "Odmítnout přesměrování"
+
+#~ msgid "Refuse input"
+#~ msgstr "Odmítnout vstup"
+
+#~ msgid "Rule is disabled"
+#~ msgstr "Pravidlo je zakázané"
+
+#~ msgid "Rule is enabled"
+#~ msgstr "Pravidlo je povolené"
+
+#~ msgid "day"
+#~ msgstr "den"
+
+#~ msgid "hour"
+#~ msgstr "hodina"
+
+#~ msgid "minute"
+#~ msgstr "minuta"
+
+#~ msgid "not"
+#~ msgstr "ne"
+
+#~ msgid "port"
+#~ msgstr "port"
+
+#~ msgid "ports"
+#~ msgstr "porty"
+
+#~ msgid "second"
+#~ msgstr "sekunda"
+
+#~ msgid "type"
+#~ msgstr "typ"
+
+#~ msgid "types"
+#~ msgstr "typy"
diff --git a/applications/luci-app-firewall/po/de/firewall.po b/applications/luci-app-firewall/po/de/firewall.po
new file mode 100644
index 000000000..0e5ddcf1a
--- /dev/null
+++ b/applications/luci-app-firewall/po/de/firewall.po
@@ -0,0 +1,748 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2014-03-25 02:04+0200\n"
+"Last-Translator: laryllian <my-lucl@laryllian.de>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: de\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s in %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s mit %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s in %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(Unbenannter Eintrag)"
+
+msgid "(Unnamed Rule)"
+msgstr "(Unbenannte Regel)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(Unbennanter SNAT-Eintrag)"
+
+msgid "-- Please choose --"
+msgstr "-- Bitte wählen --"
+
+msgid "-- custom --"
+msgstr "-- benutzerdefiniert --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> Pkte. pro <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr "<var>%d</var> Pkte. pro <var>%s</var>, Häufung <var>%d</var> Pkte."
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> und limitieren auf %s"
+
+msgid "Action"
+msgstr "Aktion"
+
+msgid "Add"
+msgstr "Hinzufügen"
+
+msgid "Add and edit..."
+msgstr "Hinzufügen und bearbeiten..."
+
+msgid "Advanced Settings"
+msgstr "Erweiterte Einstellungen"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Erlaube Weiterleitung von <em>Quellzone</em>:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Erlaube Weiterleitung zu <em>Zielzone</em>:"
+
+msgid "Any"
+msgstr "beliebig"
+
+msgid "Covered networks"
+msgstr "Abgedeckte Netzwerke"
+
+msgid "Custom Rules"
+msgstr "Benutzerdefinierte Regeln"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"Benutzerdefinierte Regeln ermöglichen das Ausführen belieber iptables-"
+"Befehle welche durch das Firewall-Framework nicht unterstützt werden. Die "
+"Befehle werden mit jedem Firewall-Neustart abgearbeitet, direkt nach dem "
+"Laden der Basisregeln."
+
+msgid "Destination IP address"
+msgstr "Ziel IP-Adresse"
+
+msgid "Destination address"
+msgstr "Zieladresse"
+
+msgid "Destination port"
+msgstr "Zielport"
+
+msgid "Destination zone"
+msgstr "Ziel-Zone"
+
+msgid "Do not rewrite"
+msgstr "Nicht umschreiben"
+
+msgid "Drop invalid packets"
+msgstr "Ungültige Pakete verwerfen"
+
+msgid "Enable"
+msgstr "Aktivieren"
+
+msgid "Enable NAT Loopback"
+msgstr "NAT-Loopback aktivieren"
+
+msgid "Enable SYN-flood protection"
+msgstr "Schutz vor SYN-flood-Attacken"
+
+msgid "Enable logging on this zone"
+msgstr "Protokollierung innerhalb der Zone aktivieren"
+
+msgid "External IP address"
+msgstr "Externe IP-Adresse"
+
+msgid "External port"
+msgstr "Externer Port"
+
+msgid "External zone"
+msgstr "Externe Zone"
+
+msgid "Extra arguments"
+msgstr "Zusätzliche Argumente"
+
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Custom Rules"
+msgstr "Firewall - Benutzerdefinierte Regeln"
+
+msgid "Firewall - Port Forwards"
+msgstr "Firewall - Portweiterleitungen"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Firewall - Verkehrsregeln"
+
+msgid "Firewall - Zone Settings"
+msgstr "Firewall - Zoneneinstellungen"
+
+msgid "Force connection tracking"
+msgstr "Connectiontracking erzwingen"
+
+msgid "Forward"
+msgstr "Weitergeleitet"
+
+msgid "Forward to"
+msgstr "Weiterleiten an"
+
+msgid "From %s in %s"
+msgstr "Von %s in %s"
+
+msgid "From %s in %s with source %s"
+msgstr "Von %s in %s mit Quell-%s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "Von %s in %s mit Quell-%s und %s"
+
+msgid "General Settings"
+msgstr "Allgemein"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 und IPv6"
+
+msgid "IPv4 only"
+msgstr "nur IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "nur IPv6"
+
+msgid "Input"
+msgstr "Eingang"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Weiterleitungen zwischen Zonen"
+
+msgid "Internal IP address"
+msgstr "Interne IP-Adresse"
+
+msgid "Internal port"
+msgstr "Interner Port"
+
+msgid "Internal zone"
+msgstr "Interne Zone"
+
+msgid "Limit log messages"
+msgstr "Protokollnachrichten limitieren"
+
+msgid "MSS clamping"
+msgstr "MSS Korrektur"
+
+msgid "Masquerading"
+msgstr "NAT aktivieren"
+
+msgid "Match"
+msgstr "Filter"
+
+msgid "Match ICMP type"
+msgstr "Nach ICMP-Typ filtern"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr "Selektiert weitergeleiteten Verkehr nach den angegebenen Ziel-Ports."
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Eingehende Verbindungen filtern welche an den angegebenen Port oder "
+"Portbereich auf dem lokalen Gerät gerichtet sind"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr "Selektiert eingehenden Verkehr nach den angegebenen Quell-Ports."
+
+msgid "Name"
+msgstr "Name"
+
+msgid "New SNAT rule"
+msgstr "Neue SNAT-Regel"
+
+msgid "New forward rule"
+msgstr "Neuer Weiterleitungsregel"
+
+msgid "New input rule"
+msgstr "Neue Eingangsregel"
+
+msgid "New port forward"
+msgstr "Neue Portweiterleitung"
+
+msgid "New source NAT"
+msgstr "Neues SNAT"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "Selektiere nur Verkehr der an die angegebene IP-Adresse gerichtet ist."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Selektiere nur Verkehr von den angegebenen MAC-Adressen."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr "Selektiere nur Verkehr vom angebenem Quell-IP-Adressbereich."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr "Selektiere nur Verkehr von den angegebenen Quell-Ports auf dem Client."
+
+msgid "Open ports on router"
+msgstr "Ports auf dem Router öffnen"
+
+msgid "Other..."
+msgstr "Anderes..."
+
+msgid "Output"
+msgstr "Ausgang"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+"Gibt zusätzliche Kommandozeilenargumente an iptables weiter. Mit Vorsicht "
+"benutzen!"
+
+msgid "Port Forwards"
+msgstr "Portweiterleitungen"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"Portweiterleitungen ermöglichen es entfernten Rechnern im Internet auf "
+"bestimmte Computer oder Dienste im lokalen LAN zuzugreifen."
+
+msgid "Protocol"
+msgstr "Protokoll"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Gefilterte Verbindungen an den angegeben Port auf dem internen Host "
+"weiterleiten"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Gefilterte Verbindungen an den angegeben internen Host weiterleiten"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "NAT auf die angegebenen Ziel-Subnetze beschränken"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "NAT auf die angegebenen Quell-Subnetze beschränken"
+
+msgid "Restrict to address family"
+msgstr "Beschränke auf Adressfamilie"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr "Schreibe selektierten Verkehr auf die angegebene Quell-IP-Adresse um."
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+"Schreibe selektierten Verkehr auf den angegebenen Qull-Port um. Kann leer "
+"gelassen werden um nur die IP-Adresse umzuschreiben."
+
+msgid "Rewrite to source %s"
+msgstr "Schreibe um auf Quell-%s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "Schreibe um auf Quell-%s, %s"
+
+msgid "SNAT IP address"
+msgstr "SNAT-IP-Adresse"
+
+msgid "SNAT port"
+msgstr "SNAT-Port"
+
+msgid "Source IP address"
+msgstr "Quell-IP-Adresse"
+
+msgid "Source MAC address"
+msgstr "Quell-MAC-Adresse"
+
+msgid "Source NAT"
+msgstr "Source NAT"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"Source NAT ist eine spezifische From von NAT, welche volle Kontrolle über "
+"die verwendete Quell-IP-Adresse für ausgehenden Verkehr zulässt, zum "
+"Beispiel um mehrere WAN-IP-Adressen auf interne Subnetze abzubilden."
+
+msgid "Source address"
+msgstr "Quelladresse"
+
+msgid "Source port"
+msgstr "Quellport"
+
+msgid "Source zone"
+msgstr "Quell-Zone"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"Die Firewall erstellt Netzwerkzonen über bestimmte Netzwerkschnittstellen um "
+"den Netzverkehr zu trennen."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"Die untenstehenen Optionen regeln die Verfahreinsweisen für Verkehr zwischen "
+"dieser Zone (%s) und anderen Zonen. <em>Ziel-Zonen</em> decken "
+"weitergeleiteten Verkehr <strong>von %q</strong> ab. <em>Quell-Zonen</em> "
+"treffen auf weitergeleiteten Verkehr aus anderen Zonen zu, welcher "
+"<strong>an %q gerichtet</strong> ist. Die Weiterleitung gilt nur in eine "
+"Richtung, d.h. eine erlaubte Weiterleitung von LAN nach WAN impliziert "
+"<em>nicht</em> zusätzlich die Erlaubnis, auch von WAN nach LAN "
+"weiterzuleiten."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"Diese Seite bietet Zugriff auf die erweiterten Eigenschaften der "
+"Portweiterleitung. In den meisten Fällen ist es unnötig die Eigenschaften zu "
+"ändern."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"Diese Seite bietet Zugriff auf die erweiterten Eigenschaften der "
+"Verkehrsregel, zum Beispiel die Selektion nach Quell- und Zieladressen."
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"Diese Sektion definiert allgemeine Eigenschaften der %q Zone. Die "
+"<em>Eingang</em> und <em>Ausgang</em> Optionen regeln die Verfahrensweise "
+"für Verkehr der in diese Zone eintritt oder diese verlässt. "
+"<em>Weitergeleitet</em> trifft auf Verkehr zwischen verschiedenen "
+"Schnittstellen innerhalb dieser Zone zu. <em>Abgedeckte Netzwerke</em> "
+"definieren die Zugehörigkeit von Schnittstellen zu dieser Zone."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "Zu %s an %s auf <var>diesem Gerät</var>"
+
+msgid "To %s in %s"
+msgstr "Zu %s in %s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "Zu %s auf <var>diesem Gerät</var>"
+
+msgid "To %s, %s in %s"
+msgstr "Zu %s, %s in %s"
+
+msgid "To source IP"
+msgstr "Zu Quell-IP"
+
+msgid "To source port"
+msgstr "Zu Quell-Port"
+
+msgid "Traffic Rules"
+msgstr "Verkehrsregeln"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"Verkehrsregeln bestimmen den Fluss der Pakete zwischen verschiedenen Zonen, "
+"zum Beispiel um Verkehr zwischen bestimmten Rechnern zu unterbinden oder um "
+"WAN-Ports auf dem Router zu öffnen."
+
+msgid "Via %s"
+msgstr "Über %s"
+
+msgid "Via %s at %s"
+msgstr "Über %s an %s"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"Durch die Auswahl von \"-- benutzerdefiniert --\" könnene mehrere Werte "
+"durch Leerzeichen getrennt angegeben werden."
+
+msgid "Zone %q"
+msgstr "Zone %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Zone ⇒ Weiterleitungen"
+
+msgid "Zones"
+msgstr "Zonen"
+
+# Die richtige Übersetzung von ACCEPT im Firewallkontext ist nicht "Annehmen" sondern "Zulassen". Man kann ja keinen
+# ausgehenden Verkehr annehmen. 
+msgid "accept"
+msgstr "zulassen"
+
+msgid "any"
+msgstr "beliebig"
+
+msgid "any host"
+msgstr "beliebiger Rechner"
+
+msgid "any router IP"
+msgstr "beliebige Router-IP"
+
+msgid "any zone"
+msgstr "beliebige Zone"
+
+msgid "don't track"
+msgstr "nicht verfolgen"
+
+msgid "drop"
+msgstr "verwerfen"
+
+msgid "reject"
+msgstr "zurückweisen"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Ziel"
+
+#~ msgid "Family"
+#~ msgstr "Adressfamilie"
+
+#~ msgid "Forward to %s in %s"
+#~ msgstr "Weiterleiten zu %s in %s"
+
+#~ msgid "Forward to %s, %s in %s"
+#~ msgstr "Weiterleiten zu %s, %s in %s"
+
+#~ msgid "SNAT"
+#~ msgstr "SNAT"
+
+#~ msgid "Source"
+#~ msgstr "Quelle"
+
+#~ msgid "To %s"
+#~ msgstr "Zu %s"
+
+#~ msgid "To %s at %s"
+#~ msgstr "Zu %s an %s"
+
+#~ msgid "Via"
+#~ msgstr "Über"
+
+#~ msgid "Accept forward"
+#~ msgstr "Weiterleitung erlauben"
+
+#~ msgid "Accept input"
+#~ msgstr "Eingang erlauben"
+
+#~ msgid "Disable"
+#~ msgstr "Daktivieren"
+
+#~ msgid "Discard forward"
+#~ msgstr "Weiterleitung verwerfen"
+
+#~ msgid "Discard input"
+#~ msgstr "Eingang verwerfen"
+
+#~ msgid "Do not track forward"
+#~ msgstr "Weiterleitung nicht verfolgen"
+
+#~ msgid "Do not track input"
+#~ msgstr "Eingang nicht verfolgen"
+
+#~ msgid "IP"
+#~ msgstr "IP"
+
+#~ msgid "IP range"
+#~ msgstr "IP-Bereich"
+
+#~ msgid "IPs"
+#~ msgstr "IPs"
+
+#~ msgid "MAC"
+#~ msgstr "MAC"
+
+#~ msgid "MACs"
+#~ msgstr "MACs"
+
+#~ msgid "Refuse forward"
+#~ msgstr "Weiterleitung zurückweisen"
+
+#~ msgid "Refuse input"
+#~ msgstr "Eingang zurückweisen"
+
+#~ msgid "Rule is disabled"
+#~ msgstr "Regel ist deaktiviert"
+
+#~ msgid "Rule is enabled"
+#~ msgstr "Regel ist aktiviert"
+
+#~ msgid "day"
+#~ msgstr "Tag"
+
+#~ msgid "hour"
+#~ msgstr "Stunde"
+
+#~ msgid "minute"
+#~ msgstr "Minute"
+
+#~ msgid "not"
+#~ msgstr "nicht"
+
+#~ msgid "port"
+#~ msgstr "Port"
+
+#~ msgid "ports"
+#~ msgstr "Ports"
+
+#~ msgid "second"
+#~ msgstr "Sekunde"
+
+#~ msgid "type"
+#~ msgstr "Typ"
+
+#~ msgid "types"
+#~ msgstr "Typen"
+
+#~ msgid "(optional)"
+#~ msgstr "(optional)"
+
+#~ msgid "Intended destination address"
+#~ msgstr "Gewünschte Zieladresse"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Interner Port (optional)"
+
+#~ msgid "Accept"
+#~ msgstr "Akzeptiere"
+
+#~ msgid "Discard"
+#~ msgstr "Verwerfe"
+
+#~ msgid "Advanced Options"
+#~ msgstr "Erweiterte Optionen"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Erweiterte Regeln"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Mit erweiterten Regeln kann die Firewall an die eigenen Bedürfnisse "
+#~ "angepasst werden. Es werden nur neue Verbindungen betrachtet. Pakete, die "
+#~ "zu bereits bestehenden Verbindungen gehören werden automatisch akzeptiert."
+
+#~ msgid "Custom Rules (/etc/firewall.user)"
+#~ msgstr "Benutzerdefinierte Regeln (/etc/firewall.user)"
+
+#~ msgid "Device"
+#~ msgstr "Gerät"
+
+#~ msgid ""
+#~ "For DNAT, match incoming traffic directed at the given destination ip "
+#~ "address. For SNAT rewrite the source address to the given address."
+#~ msgstr ""
+#~ "Für DNAT Regeln wird der Verkehr nach der angegeben Zieladresse "
+#~ "gefiltert. Bei SNAT Regeln ist dieses die Quelladresse für umgeschriebene "
+#~ "Pakete."
+
+#~ msgid ""
+#~ "Match incoming traffic originating from the given source port or port "
+#~ "range on the client host"
+#~ msgstr ""
+#~ "Eingehende Verbindungen filtern welche von dem angegebenen Port oder "
+#~ "Portbereich des Clients ausgehen"
+
+#~ msgid "Overview"
+#~ msgstr "Übersicht"
+
+#~ msgid "Port forwarding"
+#~ msgstr "Portweiterleitung"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "Portweiterleitungen ermöglichen es interne Netzwerkdienste aus einem "
+#~ "externen Netzwerk heraus erreichbar zu machen."
+
+#~ msgid "Redirection type"
+#~ msgstr "Typ der Weiterleitung"
+
+#~ msgid "Redirections"
+#~ msgstr "Weiterleitungen"
+
+#~ msgid "Rules"
+#~ msgstr "Regeln"
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "Umleitungen"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "Umleitungen erlauben es das Ziel von weitergeleiteten Paketen zu "
+#~ "verändern."
+
+#, fuzzy
+#~ msgid "Network"
+#~ msgstr "Netzwerke"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Verkehrskontrolle"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Zone-zu-Zone Verkehr"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "An dieser Stelle kann festgelegt zwischen welchen Zonen Netzverkehr hin "
+#~ "und her fließen kann. Es werden nur neue Verbindungen betrachtet. Pakete, "
+#~ "die zu bereits bestehenden Verbindungen gehören werden automatisch "
+#~ "akzeptiert. Bei gelegentlich auftretenden Verbindungsproblemen kann MSS "
+#~ "Clamping helfen, ansonsten sollte dies aus Performancegründen deaktiviert "
+#~ "bleiben."
+
+#~ msgid "Zone"
+#~ msgstr "Zone"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Ziel"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "IP-Adresse"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Quell-MAC-Adresse"
+
+#~ msgid "Custom forwarding"
+#~ msgstr "Erweiterte Weiterleitung"
+
+#~ msgid "Input Zone"
+#~ msgstr "Eingangszone"
+
+#~ msgid "Output Zone"
+#~ msgstr "Ausgangszone"
+
+#~ msgid "External Zone"
+#~ msgstr "Externe Zone"
+
+#~ msgid "Source MAC"
+#~ msgstr "Quell-MAC-Adresse"
+
+#~ msgid "Defaults"
+#~ msgstr "Grundeinstellungen"
+
+#~ msgid ""
+#~ "These are the default settings that are used if no other rules match."
+#~ msgstr ""
+#~ "Grundeinstellungen die verwendet werden, wenn keine andere Regel "
+#~ "angewandt werden kann."
+
+#~ msgid ""
+#~ "Zones part the network interfaces into certain isolated areas to separate "
+#~ "network traffic. One or more networks can belong to a zone. The MASQ-flag "
+#~ "enables NAT masquerading for all outgoing traffic on this zone."
+#~ msgstr ""
+#~ "Zonen teilen das Netzwerk in mehrere Bereiche ein um Netzverkehr sicher "
+#~ "zu trennen. Ein oder mehrere Netzwerke gehören zu einer Zone. Das MASQ-"
+#~ "Flag legt fest, dass aller ausgehende Netzverkehr einer Zone NAT-maskiert "
+#~ "wird."
+
+#~ msgid "MASQ"
+#~ msgstr "MASQ"
+
+#~ msgid "contained networks"
+#~ msgstr "verbundene Netzwerke"
diff --git a/applications/luci-app-firewall/po/el/firewall.po b/applications/luci-app-firewall/po/el/firewall.po
new file mode 100644
index 000000000..dbd0b9e5c
--- /dev/null
+++ b/applications/luci-app-firewall/po/el/firewall.po
@@ -0,0 +1,638 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2012-03-31 15:40+0200\n"
+"Last-Translator: Vasilis <acinonyx@openwrt.gr>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: el\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.4\n"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr "%s%s με %s"
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr ""
+
+msgid "(Unnamed Rule)"
+msgstr ""
+
+msgid "(Unnamed SNAT)"
+msgstr ""
+
+msgid "-- Please choose --"
+msgstr "-- Παρακαλώ επιλέξτε --"
+
+msgid "-- custom --"
+msgstr "-- προσαρμοσμένο --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> πκτ. ανά <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr "Ενέργεια"
+
+msgid "Add"
+msgstr "Προσθήκη"
+
+msgid "Add and edit..."
+msgstr "Προσθήκη και επεξεργασία..."
+
+msgid "Advanced Settings"
+msgstr "Ρυθμίσεις για προχωρημένους"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr "Οποιοδήποτε"
+
+msgid "Covered networks"
+msgstr ""
+
+msgid "Custom Rules"
+msgstr "Προσαρμοσμένοι Κανόνες"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+
+msgid "Destination IP address"
+msgstr "Διεύθυνση IP προορισμού"
+
+msgid "Destination address"
+msgstr "Διεύθυνση προορισμού"
+
+msgid "Destination port"
+msgstr "Θύρα προορισμού"
+
+#, fuzzy
+msgid "Destination zone"
+msgstr "Ζώνη προορισμού"
+
+msgid "Do not rewrite"
+msgstr ""
+
+msgid "Drop invalid packets"
+msgstr "Αγνόηση μη-έγκυρων πακετών"
+
+msgid "Enable"
+msgstr "Ενεργοποίηση"
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+#, fuzzy
+msgid "Enable SYN-flood protection"
+msgstr "Προστασία SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External IP address"
+msgstr "Εξωτερική διεύθυνση IP"
+
+msgid "External port"
+msgstr "Εξωτερική θύρα"
+
+msgid "External zone"
+msgstr ""
+
+msgid "Extra arguments"
+msgstr "Επιπλέον παράμετροι"
+
+msgid "Firewall"
+msgstr "Τείχος προστασίας"
+
+msgid "Firewall - Custom Rules"
+msgstr "Τείχος προστασίας - Προσαρμοσμένοι Κανόνες"
+
+msgid "Firewall - Port Forwards"
+msgstr "Τείχος προστασίας - Προώθηση Θυρών"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Τείχος προστασίας - Κανόνες Κίνησεις"
+
+msgid "Firewall - Zone Settings"
+msgstr "Τείχος προστασίας - Ρυθμίσεις Ζώνης"
+
+msgid "Force connection tracking"
+msgstr "Επιβολή παρακολούθησης σύνδεσης"
+
+msgid "Forward"
+msgstr "Προώθηση"
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr "Απο %s στο %s"
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr "Γενικές Ρυθμίσεις"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 και IPv6"
+
+msgid "IPv4 only"
+msgstr "Μόνο IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "Μόνο IPv6"
+
+msgid "Input"
+msgstr "Είσοδος"
+
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+#, fuzzy
+msgid "Internal IP address"
+msgstr "Εσωτερική διεύθυνση"
+
+#, fuzzy
+msgid "Internal port"
+msgstr "Εξωτερική θύρα"
+
+msgid "Internal zone"
+msgstr "Εσωτερική ζώνη"
+
+msgid "Limit log messages"
+msgstr "Περιορισμός καταγραφών συστήματος"
+
+#, fuzzy
+msgid "MSS clamping"
+msgstr "Περιορισμός MSS"
+
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr "Όνομα"
+
+msgid "New SNAT rule"
+msgstr ""
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr ""
+
+msgid "New port forward"
+msgstr ""
+
+msgid "New source NAT"
+msgstr ""
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr ""
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr ""
+
+msgid "Other..."
+msgstr "Άλλο..."
+
+msgid "Output"
+msgstr "Έξοδος"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr "Προώθηση Θυρών"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+
+msgid "Protocol"
+msgstr "Πρωτόκολλο"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr ""
+
+msgid "SNAT port"
+msgstr ""
+
+#, fuzzy
+msgid "Source IP address"
+msgstr "Διεύθυνση MAC πηγής"
+
+msgid "Source MAC address"
+msgstr ""
+
+msgid "Source NAT"
+msgstr ""
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+#, fuzzy
+msgid "Source address"
+msgstr "Διεύθυνση MAC πηγής"
+
+msgid "Source port"
+msgstr "Θύρα πηγής"
+
+#, fuzzy
+msgid "Source zone"
+msgstr "Θύρα πηγής"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"Το τείχος προστασίας δημιουργεί ζώνες πάνω στις διεπαφές δικτύου για να "
+"ελέγχει την δικτυακή κίνηση."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr ""
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr "Ζώνες"
+
+msgid "accept"
+msgstr "αποδοχή"
+
+msgid "any"
+msgstr ""
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr "αγνόηση"
+
+msgid "reject"
+msgstr "απόρριψη"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Προορισμός"
+
+#~ msgid "Family"
+#~ msgstr "Οικογένεια"
+
+#~ msgid "Forward to %s in %s"
+#~ msgstr "Προώθηση του %s στο %s"
+
+#~ msgid "Forward to %s, %s in %s"
+#~ msgstr "Προώθηση στο %s, %s στο %s"
+
+#~ msgid "SNAT"
+#~ msgstr "SNAT"
+
+#~ msgid "Source"
+#~ msgstr "Πηγή"
+
+#~ msgid "To %s"
+#~ msgstr "Προς %s"
+
+#~ msgid "Accept forward"
+#~ msgstr "Αποδοχή προώθησης"
+
+#~ msgid "Accept input"
+#~ msgstr "Αποδοχή εισόδου"
+
+#~ msgid "Disable"
+#~ msgstr "Απενεργοποίηση"
+
+#~ msgid "IP"
+#~ msgstr "IP"
+
+#~ msgid "IP range"
+#~ msgstr "Εύρος IP"
+
+#~ msgid "IPs"
+#~ msgstr "IPs"
+
+#~ msgid "MAC"
+#~ msgstr "MAC"
+
+#~ msgid "MACs"
+#~ msgstr "MACs"
+
+#~ msgid "Refuse forward"
+#~ msgstr "Άρνηση προώθησης"
+
+#~ msgid "Refuse input"
+#~ msgstr "Άρνηση εισόδου"
+
+#~ msgid "day"
+#~ msgstr "ημέρα"
+
+#~ msgid "hour"
+#~ msgstr "ώρα"
+
+#~ msgid "minute"
+#~ msgstr "λεπτό"
+
+#~ msgid "port"
+#~ msgstr "θύρα"
+
+#~ msgid "ports"
+#~ msgstr "θύρες"
+
+#~ msgid "second"
+#~ msgstr "δευτερόλεπτο"
+
+#~ msgid "type"
+#~ msgstr "τύπος"
+
+#~ msgid "types"
+#~ msgstr "τύποι"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Εσωτερική θύρα (προαιρετικό)"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Προχωρημένοι Κανόνες"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Οι προχωρημένοι κανόνες σας επιτρέπουν να προσαρμόσετε το τείχος "
+#~ "προστασίας στις δικές σας ανάγκες. Οι κανόνες θα εφαρμόζονται μόνο στις "
+#~ "νέες συνδέσεις. Πακέτα που ανήκουν σε ήδη ανοιχτές συνδέσεις, θα περνάνε "
+#~ "αυτόματα το τείχος προστασίας."
+
+#~ msgid "Port forwarding"
+#~ msgstr "Προώθηση θυρών"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "Η προώθηση θυρών επιτρέπει σε υπηρεσίες δικτύου που λειτουργούν μέσα σε "
+#~ "ένα εσωτερικό δίκτυο, να γίνονται διαθέσιμες και σε ένα εξωτερικό."
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "Ανακατεύθυνση Κίνησης"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "Η ανακατεύθυνση κίνησης σας επιτρέπει να αλλάξετε την διεύθυνση "
+#~ "προορισμού των προωθημένων πακέτων."
+
+#, fuzzy
+#~ msgid "Network"
+#~ msgstr "Δίκτυα"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Έλεγχος Κίνησης"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Κίνηση Ζώνης-προς-Ζώνη"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Εδώ μπορείτε να ορίσετε τι δικτυακή κίνηση επιτρέπεται μεταξύ δικτυακών "
+#~ "ζωνών. Θα εφαρμόζεται μόνο σε νέες συνδέσεις. Πακέτα που ανήκουν σε ήδη "
+#~ "ανοιχτές συνδέσεις θα περνάνε αυτόματα το τείχος προστασίας. Αν "
+#~ "αντιμετωπίζεται σποραδικά προβλήματα με τη σύνδεσή σας, δοκιμάστε να "
+#~ "ενεργοποιήσετε τον Περιορισμό MSS, αλλιώς απενεργοποιήστε το για "
+#~ "μεγαλύτερη απόδοση."
+
+#~ msgid "Zone"
+#~ msgstr "Ζώνη"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Προορισμός"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Διεύθυνση IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Διεύθυνση MAC πηγής"
+
+#~ msgid "Custom forwarding"
+#~ msgstr "Προσαρμοσμένη προώθηση"
+
+#~ msgid "Input Zone"
+#~ msgstr "Ζώνη Εισόδου"
+
+#~ msgid "Output Zone"
+#~ msgstr "Ζώνη Εξόδου"
+
+#~ msgid "External Zone"
+#~ msgstr "Εξωτερική Ζώνη"
+
+#~ msgid "Source MAC"
+#~ msgstr "MAC πηγής"
+
+#~ msgid "Defaults"
+#~ msgstr "Προκαθορισμένα"
+
+#~ msgid ""
+#~ "These are the default settings that are used if no other rules match."
+#~ msgstr ""
+#~ "Αυτές είναι οι προκαθορισμένες ρυθμίσεις που χρησιμοποιούνται αν δεν "
+#~ "υπάρχει κάποιος άλλος κανόνας που ταιριάζει."
+
+#~ msgid ""
+#~ "Zones part the network interfaces into certain isolated areas to separate "
+#~ "network traffic. One or more networks can belong to a zone. The MASQ-flag "
+#~ "enables NAT masquerading for all outgoing traffic on this zone."
+#~ msgstr ""
+#~ "Οι ζώνες χωρίζουν τις δικτυακές διεπαφές σε απομονωμένες περιοχές ώστε να "
+#~ "διαχωρίζεται η δικτυακή κίνηση. Σε μία ζώνη μπορούν να ανήκουν ένα ή "
+#~ "περισσότερα δίκτυα. Η σημαία MASQ ενεργοποιεί NAT masquerading για όλη "
+#~ "την εξερχόμενη κίνηση της ζώνης."
+
+#~ msgid "MASQ"
+#~ msgstr "MASQ"
+
+#~ msgid "contained networks"
+#~ msgstr "δίκτυα που περιέχονται"
diff --git a/applications/luci-app-firewall/po/en/firewall.po b/applications/luci-app-firewall/po/en/firewall.po
new file mode 100644
index 000000000..2684067e2
--- /dev/null
+++ b/applications/luci-app-firewall/po/en/firewall.po
@@ -0,0 +1,635 @@
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr ""
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr ""
+
+msgid "(Unnamed Rule)"
+msgstr ""
+
+msgid "(Unnamed SNAT)"
+msgstr ""
+
+msgid "-- Please choose --"
+msgstr ""
+
+msgid "-- custom --"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr "Action"
+
+msgid "Add"
+msgstr ""
+
+msgid "Add and edit..."
+msgstr ""
+
+msgid "Advanced Settings"
+msgstr ""
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
+msgstr ""
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+
+msgid "Destination IP address"
+msgstr ""
+
+msgid "Destination address"
+msgstr "Destination address"
+
+msgid "Destination port"
+msgstr "Destination port"
+
+msgid "Destination zone"
+msgstr "Destination zone"
+
+msgid "Do not rewrite"
+msgstr ""
+
+msgid "Drop invalid packets"
+msgstr "Drop invalid packets"
+
+msgid "Enable"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr "Enable SYN-flood protection"
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External IP address"
+msgstr ""
+
+msgid "External port"
+msgstr "External port"
+
+msgid "External zone"
+msgstr ""
+
+msgid "Extra arguments"
+msgstr ""
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/zones.lua      #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Custom Rules"
+msgstr ""
+
+msgid "Firewall - Port Forwards"
+msgstr ""
+
+msgid "Firewall - Traffic Rules"
+msgstr ""
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
+
+msgid "Forward"
+msgstr "Forward"
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr ""
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr ""
+
+msgid "IPv4"
+msgstr ""
+
+msgid "IPv4 and IPv6"
+msgstr ""
+
+msgid "IPv4 only"
+msgstr ""
+
+msgid "IPv6"
+msgstr ""
+
+msgid "IPv6 only"
+msgstr ""
+
+msgid "Input"
+msgstr "Input"
+
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+msgid "Internal IP address"
+msgstr "Internal IP address"
+
+msgid "Internal port"
+msgstr "Internal port"
+
+msgid "Internal zone"
+msgstr ""
+
+msgid "Limit log messages"
+msgstr ""
+
+msgid "MSS clamping"
+msgstr "MSS clamping"
+
+msgid "Masquerading"
+msgstr "Masquerading"
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr "Name"
+
+msgid "New SNAT rule"
+msgstr ""
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr ""
+
+msgid "New port forward"
+msgstr ""
+
+msgid "New source NAT"
+msgstr ""
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr ""
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr ""
+
+msgid "Other..."
+msgstr ""
+
+msgid "Output"
+msgstr "Output"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr ""
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+
+msgid "Protocol"
+msgstr "Protocol"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Redirect matched incoming traffic to the given port on the internal host"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Redirect matched incoming traffic to the specified internal host"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr ""
+
+msgid "SNAT port"
+msgstr ""
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/rrule.lua      #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Traffic Redirection"
+# msgstr ""
+#
+# msgid ""
+# "Traffic redirection allows you to change the destination address of "
+# "forwarded packets."
+# msgstr ""
+#
+# msgid "Overview"
+# msgstr ""
+#
+# msgid "Name"
+# msgstr ""
+#
+# msgid "Source zone"
+# msgstr ""
+#
+# msgid "Source MAC-address"
+# msgstr ""
+#
+# msgid "Source port"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+msgid "Source IP address"
+msgstr "Source IP address"
+
+msgid "Source MAC address"
+msgstr ""
+
+msgid "Source NAT"
+msgstr ""
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+msgid "Source address"
+msgstr "Source address"
+
+msgid "Source port"
+msgstr "Source port"
+
+msgid "Source zone"
+msgstr "Source zone"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr ""
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr "Zones"
+
+msgid "accept"
+msgstr "accept"
+
+msgid "any"
+msgstr "any"
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr "drop"
+
+msgid "reject"
+msgstr "reject"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Destination"
+
+#~ msgid "Source"
+#~ msgstr "Source"
+
+#~ msgid "(optional)"
+#~ msgstr "(optional)"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Internal port (optional)"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/trule.lua      #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Name"
+# msgstr ""
+#
+# msgid "(optional)"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+# msgid "Source port"
+# msgstr ""
+#
+# msgid "Destination port"
+# msgstr ""
+#
+# msgid "Action"
+# msgstr ""
+#
+# msgid "drop"
+# msgstr ""
+#
+# msgid "accept"
+# msgstr ""
+#
+# msgid "reject"
+# msgstr ""
+#
+#~ msgid "Advanced Rules"
+#~ msgstr "Advanced Rules"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+
+#~ msgid "Device"
+#~ msgstr "Device"
+
+#~ msgid ""
+#~ "Match incoming traffic originating from the given source port or port "
+#~ "range on the client host"
+#~ msgstr ""
+#~ "Match incoming traffic originating from the given source port or port "
+#~ "range on the client host"
+
+#~ msgid "Overview"
+#~ msgstr "Overview"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/miniportfw.lua #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Name"
+# msgstr ""
+#
+# msgid "(optional)"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+# msgid "External port"
+# msgstr ""
+#
+# msgid "Internal IP address"
+# msgstr ""
+#
+#~ msgid "Port forwarding"
+#~ msgstr "Port forwarding"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+
+#~ msgid "Rules"
+#~ msgstr "Rules"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/redirect.lua   #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Name"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+#~ msgid "Traffic Redirection"
+#~ msgstr "Traffic Redirection"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+
+#~ msgid "Network"
+#~ msgstr "Network"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/traffic.lua    #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Name"
+# msgstr ""
+#
+#~ msgid "Traffic Control"
+#~ msgstr "Traffic Control"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Zone-to-Zone traffic"
+
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+
+#~ msgid "Zone"
+#~ msgstr "Zone"
+
+#~ msgid "Destination IP"
+#~ msgstr "Destination IP"
+
+#~ msgid "IP address"
+#~ msgstr "IP address"
+
+#~ msgid "Source MAC-address"
+#~ msgstr "Source MAC-address"
diff --git a/applications/luci-app-firewall/po/es/firewall.po b/applications/luci-app-firewall/po/es/firewall.po
new file mode 100644
index 000000000..452809c2c
--- /dev/null
+++ b/applications/luci-app-firewall/po/es/firewall.po
@@ -0,0 +1,698 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2014-06-15 09:00+0200\n"
+"Last-Translator: José Vicente <josevteg@gmail.com>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: es\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s en %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s con %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s en %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(Entrada sin nombre)"
+
+msgid "(Unnamed Rule)"
+msgstr "(Reglas sin nombre)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(SNAT sin nombre)"
+
+msgid "-- Please choose --"
+msgstr "-- Seleccione --"
+
+msgid "-- custom --"
+msgstr "-- propio --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> paquetes por <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+"<var>%d</var> paquetes por <var>%s</var>, máximo <var>%d</var> paquetes."
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> y límite a %s"
+
+msgid "Action"
+msgstr "Acción"
+
+msgid "Add"
+msgstr "Añadir"
+
+msgid "Add and edit..."
+msgstr "Añadir y editar..."
+
+msgid "Advanced Settings"
+msgstr "Configuración avanzada"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Permitir traspaso desde <em>zonas de origen</em>:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Permitir traspaso a <em>zonas de destino</em>:"
+
+msgid "Any"
+msgstr "Cualquiera"
+
+msgid "Covered networks"
+msgstr "Redes cubiertas"
+
+msgid "Custom Rules"
+msgstr "Reglas propias"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"Las reglas propias le permiten ejecutar comandos de iptables que no están "
+"disponibles en el marco del cortafuegos. Los comandos se ejecutarán tras "
+"cualquier rearranque del cortafuegos, justo tras haber cargado el conjunto "
+"de reglas por defecto."
+
+msgid "Destination IP address"
+msgstr "Dirección IP destino"
+
+msgid "Destination address"
+msgstr "Dirección de destino"
+
+msgid "Destination port"
+msgstr "Puerto de destino"
+
+msgid "Destination zone"
+msgstr "Zona de destino"
+
+msgid "Do not rewrite"
+msgstr "No reescribir"
+
+msgid "Drop invalid packets"
+msgstr "Descartar paquetes no válidos"
+
+msgid "Enable"
+msgstr "Activar"
+
+msgid "Enable NAT Loopback"
+msgstr "Activar bucle NAT"
+
+msgid "Enable SYN-flood protection"
+msgstr "Activar protección a inundación-SYN"
+
+msgid "Enable logging on this zone"
+msgstr "Activar registro en esta zona"
+
+msgid "External IP address"
+msgstr "Dirección IP externa"
+
+msgid "External port"
+msgstr "Puerto externo"
+
+msgid "External zone"
+msgstr "Zona externa"
+
+msgid "Extra arguments"
+msgstr "Parámetros extra"
+
+msgid "Firewall"
+msgstr "Cortafuegos"
+
+msgid "Firewall - Custom Rules"
+msgstr "Cortafuegos - Reglas propias"
+
+msgid "Firewall - Port Forwards"
+msgstr "Cortafuegos - traspasos de puerto"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Cortafuegos - Reglas de tráfico"
+
+msgid "Firewall - Zone Settings"
+msgstr "Cortafuegos - Configuración de la zona"
+
+msgid "Force connection tracking"
+msgstr "Forzar seguimiento de conexión"
+
+msgid "Forward"
+msgstr "Traspasar"
+
+msgid "Forward to"
+msgstr "Traspasar a"
+
+msgid "From %s in %s"
+msgstr "Desde %s en %s"
+
+msgid "From %s in %s with source %s"
+msgstr "Desde %s en %s con origen %s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "Desde %s en %s con origen %s y %s"
+
+msgid "General Settings"
+msgstr "Configuración general"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 e IPv6"
+
+msgid "IPv4 only"
+msgstr "Sólo IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "Sñolo IPv6"
+
+msgid "Input"
+msgstr "Entrada"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Traspaso entre zonas"
+
+msgid "Internal IP address"
+msgstr "Dirección IP interna"
+
+msgid "Internal port"
+msgstr "Puerto interno"
+
+msgid "Internal zone"
+msgstr "Zona interna"
+
+msgid "Limit log messages"
+msgstr "Limitar registro de mensajes"
+
+msgid "MSS clamping"
+msgstr "Fijado de MSS"
+
+msgid "Masquerading"
+msgstr "Enmascaramiento"
+
+msgid "Match"
+msgstr "Coincidir"
+
+msgid "Match ICMP type"
+msgstr "Coincidir con tipo ICMP"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr "Coincidir con tráfico traspasado al puerto o rango de puertos destino."
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Coincidir con tráfico de entrada dirigido al puerto o rango de puertos "
+"destino en esta máquina"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+"Coincidir con tráfico de entrada originado desde el puerto o rango de "
+"puertos origen en la máquina cliente."
+
+msgid "Name"
+msgstr "Nombre"
+
+msgid "New SNAT rule"
+msgstr "Nueva regla SNAT"
+
+msgid "New forward rule"
+msgstr "Nueva regla de traspaso"
+
+msgid "New input rule"
+msgstr "Nueva regla de entrada"
+
+msgid "New port forward"
+msgstr "Nuevo traspaso de puerto"
+
+msgid "New source NAT"
+msgstr "Nuevo origen NAT"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "Coincidir sólo con tráfico de entrada a esta dirección IP."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Coincidir sólo con tráfico de entrada desde estas MACs."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr "Coincidir sólo con tráfico de entrada desde esta IP o rango."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+"Coincidir sólo con tráfico de entrada originado desde el puerto o rango de "
+"puertos origen en la máquina cliente"
+
+msgid "Open ports on router"
+msgstr "Abrir puertos en el router"
+
+msgid "Other..."
+msgstr "Otros..."
+
+msgid "Output"
+msgstr "Salida"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr "Pasa más parámetros a IPTables. ¡Usar con cuidado!"
+
+msgid "Port Forwards"
+msgstr "Traspasos de puerto"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"El traspaso de puertos permite a ordenadores remotos en internet conectar a "
+"un ordenador o servicio específico en la LAN privada."
+
+msgid "Protocol"
+msgstr "Protocolo"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Redirigir el tráfico de entrada que coincida al puerto en la máquina interna"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Redirigir el tráfico de entrada que coincida a la máquina interna"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "Restringir enmascaramiento a las subredes destino"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "Restringir enmascaramiento a las subredes origen"
+
+msgid "Restrict to address family"
+msgstr "Restringir a la familia de direcciones"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr "Reescribir el tráfico que coincida a estas direcciones."
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+"Reescribir el tráfico que coincida con este puerto origen. Deje en blanco "
+"para reescribir sólo la dirección IP."
+
+msgid "Rewrite to source %s"
+msgstr "Reescribir a origen %s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "Reescribir a origen %s, %s"
+
+msgid "SNAT IP address"
+msgstr "Dirección IP SNAT"
+
+msgid "SNAT port"
+msgstr "Puerto SNAT"
+
+msgid "Source IP address"
+msgstr "Dirección IP origen"
+
+msgid "Source MAC address"
+msgstr "Dirección MAC origen"
+
+msgid "Source NAT"
+msgstr "NAT origen"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"NAT origen es una forma específica de enmascaramiento que permite el control "
+"fino del origen IP que se usa en el tráfico de salida por ejemplo para "
+"dirigir múltiples direcciones WAN a las subredes internas."
+
+msgid "Source address"
+msgstr "Dirección origen"
+
+msgid "Source port"
+msgstr "Puerto origen"
+
+msgid "Source zone"
+msgstr "Zona origen"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"El cortafuegos crea zonas sobre sus interfaces de red para controlar el "
+"flujo del tráfico."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"Estas opciones controlan las políticas de traspaso entre esta zona (%s) y "
+"otras. <em>Las zonas origen</em> cubren el tráfico traspasado <strong>desde "
+"%q</strong>. <em>Las zonas origen</em> coinciden con el tráfico traspasado "
+"desde otras zonas <strong>dirigido a %q</strong>. La regla de traspaso es "
+"<em>unidireccional</em>, por ejemplo una regla de traspaso desde la LAN a la "
+"WAN <em>no</em> implica permiso para traspasar desde la WAN a la LAN también."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"Propiedades avanzadas de la entrada \"traspaso de puertos\". No suele ser "
+"necesario modificar esta configuración."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"Propiedades avanzadas de la entrada \"reglas de tráfico\", como "
+"coincidencias en puertos de origen y destino."
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"Esta sección define propierdades comunes de %q. Las opciones de <em>entrada</"
+"em> y la <em>salida</em> marcan las políticas por defecto para el tráfico "
+"que entra y deja esta zona mientras que la opción <em>traspaso</em> describe "
+"la política para tráfico traspasado desde diferentes redes en la zona. "
+"<em>Redes cubiertas</em> especifican qué redes disponibles son miembros de "
+"esta zona."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "A %s en %s por <var>este dispositivo</var>"
+
+msgid "To %s in %s"
+msgstr "A %s en %s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "A %s por <var>este dispositivo</var>"
+
+msgid "To %s, %s in %s"
+msgstr "A %s, %s en %s"
+
+msgid "To source IP"
+msgstr "A IP origen"
+
+msgid "To source port"
+msgstr "A puerto origen"
+
+msgid "Traffic Rules"
+msgstr "Reglas de tráfico"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"Las reglas de tráfico definen políticas para tramas que se mueven entre "
+"zonas diferentes, por ejemplo para rechazar tráfico entre ciertas máquinas o "
+"puertos WAN abiertos en el router."
+
+msgid "Via %s"
+msgstr "Vía %s"
+
+msgid "Via %s at %s"
+msgstr "Vía %s a %s"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"Puede poner varios seleccionando \"-- propio --\" e introduciendo los "
+"protocolos separados por espacio."
+
+msgid "Zone %q"
+msgstr "Zona %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Zona ⇒ Traspasos"
+
+msgid "Zones"
+msgstr "Zonas"
+
+msgid "accept"
+msgstr "aceptar"
+
+msgid "any"
+msgstr "cualquiera"
+
+msgid "any host"
+msgstr "cualquier máquina"
+
+msgid "any router IP"
+msgstr "cualquier router IP"
+
+msgid "any zone"
+msgstr "cualquier zona"
+
+msgid "don't track"
+msgstr "no seguir"
+
+msgid "drop"
+msgstr "descartar"
+
+msgid "reject"
+msgstr "rechazar"
+
+msgid "traffic"
+msgstr "tráfico"
+
+#~ msgid "Destination"
+#~ msgstr "Destino"
+
+#~ msgid "Family"
+#~ msgstr "Familia"
+
+#~ msgid "Forward to %s in %s"
+#~ msgstr "Traspasar a %s en %s"
+
+#~ msgid "Forward to %s, %s in %s"
+#~ msgstr "Traspasar a %s, %s en %s"
+
+#~ msgid "SNAT"
+#~ msgstr "SNAT"
+
+#~ msgid "Source"
+#~ msgstr "Origen"
+
+#~ msgid "To %s"
+#~ msgstr "A %s"
+
+#~ msgid "To %s at %s"
+#~ msgstr "A %s en %s"
+
+#~ msgid "Via"
+#~ msgstr "Via"
+
+#~ msgid "Accept forward"
+#~ msgstr "Aceptar traspaso"
+
+#~ msgid "Accept input"
+#~ msgstr "Aceptar entrada"
+
+#~ msgid "Disable"
+#~ msgstr "Desactivar"
+
+#~ msgid "Discard forward"
+#~ msgstr "Descartar traspaso"
+
+#~ msgid "Discard input"
+#~ msgstr "Descartar entrada"
+
+#~ msgid "Do not track forward"
+#~ msgstr "No seguir traspaso"
+
+#~ msgid "Do not track input"
+#~ msgstr "No seguir entrada"
+
+#~ msgid "IP"
+#~ msgstr "IP"
+
+#~ msgid "IP range"
+#~ msgstr "Rango IP"
+
+#~ msgid "IPs"
+#~ msgstr "IPs"
+
+#~ msgid "MAC"
+#~ msgstr "MAC"
+
+#~ msgid "MACs"
+#~ msgstr "MACs"
+
+#~ msgid "Refuse forward"
+#~ msgstr "Rechazar traspaso"
+
+#~ msgid "Refuse input"
+#~ msgstr "Rechazar entrada"
+
+#~ msgid "Rule is disabled"
+#~ msgstr "La regla está desactivada"
+
+#~ msgid "Rule is enabled"
+#~ msgstr "La regla está activada"
+
+#~ msgid "day"
+#~ msgstr "dia"
+
+#~ msgid "hour"
+#~ msgstr "hora"
+
+#~ msgid "minute"
+#~ msgstr "minuto"
+
+#~ msgid "not"
+#~ msgstr "no"
+
+#~ msgid "port"
+#~ msgstr "puerto"
+
+#~ msgid "ports"
+#~ msgstr "puertos"
+
+#~ msgid "second"
+#~ msgstr "segundo"
+
+#~ msgid "type"
+#~ msgstr "tipo"
+
+#~ msgid "types"
+#~ msgstr "tipos"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Puerto interno (opcional)"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Reglas avanzadas"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Las reglas avanzadas le permite personalizar el corta fuego según sus "
+#~ "necesidades. Sólamente las nuevas conexiones serán afectadas por las "
+#~ "reglas. Los paquetes pertenecientes a conexiones ya abierta, se les "
+#~ "permite el libre paso por el corta fuego."
+
+#~ msgid "Port forwarding"
+#~ msgstr "Reenvío de puerto"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "El reenvío de puerto permite proveer servicios de red en una red interna "
+#~ "a una red externa (por ejemplo Internet)"
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "Redirección de tráfico"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "La redirección de tráfico permite cambiar la dirección de destino de los "
+#~ "paquetes reenviados."
+
+#, fuzzy
+#~ msgid "Network"
+#~ msgstr "Redes"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Control de tráfico"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Tráfico Zona-a-Zona"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Aquí puede especificar qué tráfico de red is permitido, discho tráfico "
+#~ "fluirá entre las zonas de red definidas. Sólamente las nuevas conexiones "
+#~ "serán aplicadas por las reglas. Los paquetes pertenecientes a conexiones "
+#~ "ya abierta se les permitirá el paso sobre el corta fuego. Si experimenta "
+#~ "ocacionalmente problemas de conexión, intente activar MSS Clamping de "
+#~ "otra forma, deshabilitelo para mejorar considerablemente la performance."
+
+#~ msgid "Zone"
+#~ msgstr "Zona"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Destino"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Dirección IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Dirección MAC de origen"
+
+#~ msgid "Custom forwarding"
+#~ msgstr "Renvío personalizado"
+
+#~ msgid "Input Zone"
+#~ msgstr "Zona de entrada"
+
+#~ msgid "Output Zone"
+#~ msgstr "Zona de salida"
+
+#~ msgid "External Zone"
+#~ msgstr "Zona Externa"
+
+#~ msgid "Source MAC"
+#~ msgstr "MAC de Origen"
+
+#~ msgid "Defaults"
+#~ msgstr "De fábrica"
+
+#~ msgid ""
+#~ "These are the default settings that are used if no other rules match."
+#~ msgstr ""
+#~ "Estos son los valores por defecto que son usados si no hay otra regla a "
+#~ "aplicar."
+
+#~ msgid ""
+#~ "Zones part the network interfaces into certain isolated areas to separate "
+#~ "network traffic. One or more networks can belong to a zone. The MASQ-flag "
+#~ "enables NAT masquerading for all outgoing traffic on this zone."
+#~ msgstr ""
+#~ "Las zonas dividen las interfaces de red en varias partes aisladas para "
+#~ "separar el tráfico de red. Una o mas redes pueden pertenecer a una zona. "
+#~ "La bandera MASQ activa el enmascaramiento NAT para todo el tráfico "
+#~ "saliente sobre esa zona."
+
+#~ msgid "MASQ"
+#~ msgstr "MASQ"
+
+#~ msgid "contained networks"
+#~ msgstr "redes contenidas"
diff --git a/applications/luci-app-firewall/po/fr/firewall.po b/applications/luci-app-firewall/po/fr/firewall.po
new file mode 100644
index 000000000..96f3f510b
--- /dev/null
+++ b/applications/luci-app-firewall/po/fr/firewall.po
@@ -0,0 +1,693 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2013-02-26 00:44+0200\n"
+"Last-Translator: val56 <valentin_sonet@hotmail.fr>\n"
+"Language-Team: French\n"
+"Language: fr\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n > 1);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr ""
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr ""
+
+msgid "(Unnamed Rule)"
+msgstr ""
+
+msgid "(Unnamed SNAT)"
+msgstr ""
+
+msgid "-- Please choose --"
+msgstr "-- Choisissez SVP --"
+
+msgid "-- custom --"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr "Action"
+
+msgid "Add"
+msgstr ""
+
+msgid "Add and edit..."
+msgstr ""
+
+msgid "Advanced Settings"
+msgstr "Paramètres avancés"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Permettre la transmission des <em>zones source</em> :"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Permettre la transmission vers les <em>zones destination</em> :"
+
+msgid "Any"
+msgstr "N'importe lequel"
+
+msgid "Covered networks"
+msgstr "Réseaux couverts"
+
+msgid "Custom Rules"
+msgstr "Régles spécifiques"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+
+msgid "Destination IP address"
+msgstr "Adresse IP de destination"
+
+msgid "Destination address"
+msgstr "Adresse de destination"
+
+msgid "Destination port"
+msgstr "Port de destination"
+
+msgid "Destination zone"
+msgstr "Zone de destination"
+
+msgid "Do not rewrite"
+msgstr ""
+
+msgid "Drop invalid packets"
+msgstr "Supprimer les paquets invalides"
+
+msgid "Enable"
+msgstr "Activer"
+
+msgid "Enable NAT Loopback"
+msgstr "Activer le NAT sur la boucle-locale"
+
+msgid "Enable SYN-flood protection"
+msgstr "Activer la protection contre le SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr "Activer les traces (logs) sur cette zone"
+
+msgid "External IP address"
+msgstr "Adresse IP externe"
+
+msgid "External port"
+msgstr "Port externe"
+
+msgid "External zone"
+msgstr "Zone externe"
+
+msgid "Extra arguments"
+msgstr ""
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#  applications/luci-fw/luasrc/model/cbi/luci_fw/zones.lua                    #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+msgid "Firewall"
+msgstr "Pare-feu"
+
+msgid "Firewall - Custom Rules"
+msgstr "Pare-feu -- Règles personnalisées"
+
+msgid "Firewall - Port Forwards"
+msgstr "Pare-feu -- Redirections de ports"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Pare-feu -- Règles de trafic"
+
+msgid "Firewall - Zone Settings"
+msgstr "Pare-feu - Configuration des zones"
+
+msgid "Force connection tracking"
+msgstr "Forcer le suivi des connexions"
+
+msgid "Forward"
+msgstr "Transfert"
+
+msgid "Forward to"
+msgstr "Transférer à"
+
+msgid "From %s in %s"
+msgstr ""
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr "Paramètres généraux"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 et IPv6"
+
+msgid "IPv4 only"
+msgstr "IPv4 seulement"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "IPv6 seulement"
+
+msgid "Input"
+msgstr "Entrée"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Transmission entre zones"
+
+msgid "Internal IP address"
+msgstr "Adresse IP interne"
+
+msgid "Internal port"
+msgstr "Port interne"
+
+msgid "Internal zone"
+msgstr "Zone interne"
+
+msgid "Limit log messages"
+msgstr "Limiter les messages de journalisation"
+
+msgid "MSS clamping"
+msgstr "Contrainte du MSS"
+
+msgid "Masquerading"
+msgstr "Masquage"
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr "Type ICMP correspondant"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Prendre en compte le trafic dirigé vers le port de destination donné (ou la "
+"gamme de ports) sur cet hôte"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr "Nom"
+
+msgid "New SNAT rule"
+msgstr "Nouvelle règle SNAT"
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr "Nouvelle règle d'entrée"
+
+msgid "New port forward"
+msgstr "Nouvelle redirection de port"
+
+msgid "New source NAT"
+msgstr "Nouvelle source NAT"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Montrer seulement le trafic entrant provenant de ces adresses MAC."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr "Ports ouverts sur le routeur"
+
+msgid "Other..."
+msgstr "Autre..."
+
+msgid "Output"
+msgstr "Sortie"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr "Redirections de port"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"La redirection de port permet aux ordinateurs distants sur Internet, de se "
+"connecter à un ordinateur ou service spécifié dans le réseau local privé."
+
+msgid "Protocol"
+msgstr "Protocole"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Rediriger le trafic entrant correspondant vers le port donné sur l'hôte "
+"interne"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Rediriger le trafic entrant correspondant vers l'hôte interne spécifié"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+"Restreindre la substitution d'adresses (Masquerade) à ces sous-réseaux "
+"destinataires"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+"Restreindre la substitution d'adresses (Masquerade) à ces sous-réseaux "
+"sources"
+
+msgid "Restrict to address family"
+msgstr "Restreindre à cette famille d'adresses"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr "Adresse IP SNAT"
+
+msgid "SNAT port"
+msgstr "Port SNAT"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#  applications/luci-fw/luasrc/model/cbi/luci_fw/rrule.lua                    #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Traffic Redirection"
+# msgstr ""
+#
+# msgid ""
+# "Traffic redirection allows you to change the destination address of "
+# "forwarded packets."
+# msgstr ""
+#
+# msgid "Overview"
+# msgstr ""
+#
+# msgid "Name"
+# msgstr ""
+#
+# msgid "Source zone"
+# msgstr ""
+#
+# msgid "Source MAC-address"
+# msgstr ""
+#
+# msgid "Source port"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+msgid "Source IP address"
+msgstr "Adresse IP source"
+
+msgid "Source MAC address"
+msgstr "Adresse MAC source"
+
+msgid "Source NAT"
+msgstr "Source NAT"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+msgid "Source address"
+msgstr "Adresse source"
+
+msgid "Source port"
+msgstr "Port source"
+
+msgid "Source zone"
+msgstr "Zone source"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"Le pare-feu crée des zones sur les interfaces réseau pour contrôler le flux "
+"du trafic réseau."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"Les options ci-dessous contrôlent les politiques de transmission entre cette "
+"zone (%s) et les autres zones. <em>Zones de destination</em> couvre le "
+"trafic transfmis <strong>venant de %q</strong>. <em>Zones source</em> "
+"correspond au trafic transféré d'autres zones <strong> à destination de %q</"
+"strong>. La règle de transmission est <em>unidirectionnelle</em>, la "
+"transmission du LAN au WAN n'implique <em>pas</em> également l'autorisation "
+"de transmission du WAN au LAN."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"Cette page vous permet de modifier les propriétés avancées parmi les entrées "
+"de redirection de port. Dans la plupart des cas, cela n'est pas nécessaire "
+"de modifier ces paramètres."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"Cette section définit des propriétés communes de %q. Les options <em>entrée</"
+"em> et <em>sortie</em> définissent les politiques par défaut pour le trafic "
+"entrant et sortant de cette zone, tandis que l'option <em>transmission</em> "
+"décrit la politique pour le trafic transmis entre différents réseaux dans "
+"cette zone. Les <em>réseaux couverts</em> indiquent quels réseaux "
+"disponibles sont membre de cette zone."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr "Règles de trafic"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr "Zone %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Zone ⇒ Transmissions"
+
+msgid "Zones"
+msgstr "Zones"
+
+msgid "accept"
+msgstr "accepter"
+
+#, fuzzy
+msgid "any"
+msgstr "tous"
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr "ignorer"
+
+msgid "reject"
+msgstr "rejeter"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Destination"
+
+#~ msgid "Family"
+#~ msgstr "Famille"
+
+#~ msgid "Source"
+#~ msgstr "Source"
+
+#~ msgid "Via"
+#~ msgstr "Via"
+
+#~ msgid "(optional)"
+#~ msgstr "(optionnel)"
+
+#~ msgid "Intended destination address"
+#~ msgstr "Adresse de destination voulue"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Port interne (optionnel)"
+
+#~ msgid "Advanced Options"
+#~ msgstr "Options avancées"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#  applications/luci-fw/luasrc/model/cbi/luci_fw/trule.lua                    #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Name"
+# msgstr ""
+#
+# msgid "(optional)"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+# msgid "Source port"
+# msgstr ""
+#
+# msgid "Destination port"
+# msgstr ""
+#
+# msgid "Action"
+# msgstr ""
+#
+# msgid "drop"
+# msgstr ""
+#
+# msgid "accept"
+# msgstr ""
+#
+# msgid "reject"
+# msgstr ""
+#
+#~ msgid "Advanced Rules"
+#~ msgstr "Règles avancées"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Les règles avancées vous laissent personnaliser le pare-feu selon vos "
+#~ "besoins. Seules les nouvelles connexions seront prises en compte. Les "
+#~ "paquets appartenant à des connexions déjà ouvertes sont automatiquement "
+#~ "admis à passer le pare-feu."
+
+#~ msgid "Custom Rules (/etc/firewall.user)"
+#~ msgstr "Règles spécifiques (/etc/firewall.user)"
+
+#~ msgid "Device"
+#~ msgstr "Équipement"
+
+#~ msgid ""
+#~ "For DNAT, match incoming traffic directed at the given destination ip "
+#~ "address. For SNAT rewrite the source address to the given address."
+#~ msgstr ""
+#~ "Pour le DNAT, sélectionne le trafic entrant correspondant à l'adresse IP "
+#~ "destinataire. Pour le SNAT, ré-écrit l'adresse source avec l'adresse "
+#~ "donnée."
+
+#~ msgid ""
+#~ "Match incoming traffic originating from the given source port or port "
+#~ "range on the client host"
+#~ msgstr ""
+#~ "Prendre en compte le trafic entrant provenant du port source donné (ou la "
+#~ "gamme de ports) sur l'hôte client"
+
+#~ msgid "Overview"
+#~ msgstr "Vue d'ensemble"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#  applications/luci-fw/luasrc/model/cbi/luci_fw/miniportfw.lua               #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Name"
+# msgstr ""
+#
+# msgid "(optional)"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+# msgid "External port"
+# msgstr ""
+#
+# msgid "Internal IP address"
+# msgstr ""
+#
+#~ msgid "Port forwarding"
+#~ msgstr "Redirection de port"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "La redirection de port vous permet d'exposer des services réseaux de "
+#~ "votre réseau local au réseau externe."
+
+#~ msgid "Redirection type"
+#~ msgstr "Type de redirection"
+
+#~ msgid "Redirections"
+#~ msgstr "Redirections"
+
+#~ msgid "Rules"
+#~ msgstr "Règles"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#  applications/luci-fw/luasrc/model/cbi/luci_fw/redirect.lua                 #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Name"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+#~ msgid "Traffic Redirection"
+#~ msgstr "Redirection du trafic"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "La redirection de trafic vous permet de changer l'adresse de destination "
+#~ "des paquets transférés."
+
+#~ msgid "Network"
+#~ msgstr "Réseau"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#  applications/luci-fw/luasrc/model/cbi/luci_fw/traffic.lua                  #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Name"
+# msgstr ""
+#
+#~ msgid "Traffic Control"
+#~ msgstr "Contrôle de trafic"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Trafic zone-à-zone"
+
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Ici, vous pouvez spécifier quel trafic réseau est autorisé à transiter "
+#~ "entre les zones réseau. Seules les nouvelles connexions seront prises en "
+#~ "compte. Les paquets appartenant à des connexions déjà ouvertes sont "
+#~ "automatiquement admis à passer le pare-feu. Si vous subissez des "
+#~ "problèmes de connexion occasionnels, essayer d'activer le MSS clamping; "
+#~ "sinon laissez-le désactivé pour des raisons de performance."
+
+#~ msgid "Zone"
+#~ msgstr "Zone"
+
+#~ msgid "Destination IP"
+#~ msgstr "IP de destination"
+
+#~ msgid "IP address"
+#~ msgstr "Adresse IP"
+
+#~ msgid "Source MAC-address"
+#~ msgstr "Adresse MAC source"
diff --git a/applications/luci-app-firewall/po/he/firewall.po b/applications/luci-app-firewall/po/he/firewall.po
new file mode 100644
index 000000000..aec566ae0
--- /dev/null
+++ b/applications/luci-app-firewall/po/he/firewall.po
@@ -0,0 +1,432 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr ""
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr ""
+
+msgid "(Unnamed Rule)"
+msgstr ""
+
+msgid "(Unnamed SNAT)"
+msgstr ""
+
+msgid "-- Please choose --"
+msgstr ""
+
+msgid "-- custom --"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Add"
+msgstr ""
+
+msgid "Add and edit..."
+msgstr ""
+
+msgid "Advanced Settings"
+msgstr ""
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
+msgstr ""
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+
+msgid "Destination IP address"
+msgstr ""
+
+msgid "Destination address"
+msgstr ""
+
+msgid "Destination port"
+msgstr ""
+
+msgid "Destination zone"
+msgstr ""
+
+msgid "Do not rewrite"
+msgstr ""
+
+msgid "Drop invalid packets"
+msgstr ""
+
+msgid "Enable"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External IP address"
+msgstr ""
+
+msgid "External port"
+msgstr ""
+
+msgid "External zone"
+msgstr ""
+
+msgid "Extra arguments"
+msgstr ""
+
+msgid "Firewall"
+msgstr ""
+
+msgid "Firewall - Custom Rules"
+msgstr ""
+
+msgid "Firewall - Port Forwards"
+msgstr ""
+
+msgid "Firewall - Traffic Rules"
+msgstr ""
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
+
+msgid "Forward"
+msgstr ""
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr ""
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr ""
+
+msgid "IPv4"
+msgstr ""
+
+msgid "IPv4 and IPv6"
+msgstr ""
+
+msgid "IPv4 only"
+msgstr ""
+
+msgid "IPv6"
+msgstr ""
+
+msgid "IPv6 only"
+msgstr ""
+
+msgid "Input"
+msgstr ""
+
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+msgid "Internal IP address"
+msgstr ""
+
+msgid "Internal port"
+msgstr ""
+
+msgid "Internal zone"
+msgstr ""
+
+msgid "Limit log messages"
+msgstr ""
+
+msgid "MSS clamping"
+msgstr ""
+
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "New SNAT rule"
+msgstr ""
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr ""
+
+msgid "New port forward"
+msgstr ""
+
+msgid "New source NAT"
+msgstr ""
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr ""
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr ""
+
+msgid "Other..."
+msgstr ""
+
+msgid "Output"
+msgstr ""
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr ""
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+
+msgid "Protocol"
+msgstr ""
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr ""
+
+msgid "SNAT port"
+msgstr ""
+
+msgid "Source IP address"
+msgstr ""
+
+msgid "Source MAC address"
+msgstr ""
+
+msgid "Source NAT"
+msgstr ""
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+msgid "Source address"
+msgstr ""
+
+msgid "Source port"
+msgstr ""
+
+msgid "Source zone"
+msgstr ""
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr ""
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr ""
+
+msgid "accept"
+msgstr ""
+
+msgid "any"
+msgstr ""
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
+msgstr ""
+
+msgid "traffic"
+msgstr ""
diff --git a/applications/luci-app-firewall/po/hu/firewall.po b/applications/luci-app-firewall/po/hu/firewall.po
new file mode 100644
index 000000000..1c0ec5e41
--- /dev/null
+++ b/applications/luci-app-firewall/po/hu/firewall.po
@@ -0,0 +1,580 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"PO-Revision-Date: 2014-01-31 16:54+0200\n"
+"Last-Translator: Gabor <juhosg@openwrt.org>\n"
+"Language-Team: none\n"
+"Language: hu\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s %s-ban"
+
+msgid "%s%s with %s"
+msgstr "%s%s %s-el"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s %s-ben"
+
+msgid "(Unnamed Entry)"
+msgstr "(Névtelen bejegyzés)"
+
+msgid "(Unnamed Rule)"
+msgstr "(Névtelen szabály)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(Névtelen SNAT)"
+
+msgid "-- Please choose --"
+msgstr "-- Kérem válasszon --"
+
+msgid "-- custom --"
+msgstr "-- egyéni --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> csomag/<var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr "<var>%d</var> csom. <var>%s</var>-enként, burst <var>%d</var> csom."
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> és korlátozás %s-re"
+
+msgid "Action"
+msgstr "Művelet"
+
+msgid "Add"
+msgstr "Hozzáadás"
+
+msgid "Add and edit..."
+msgstr "Hozzáadás és szerkesztés..."
+
+msgid "Advanced Settings"
+msgstr "Haladó beállítások"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Továbbítás engedélyezése ezekből a <em>forrás zónákból</em>:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Továbbítás engedélyezése ezekbe a <em>cél zónákba</em>:"
+
+msgid "Any"
+msgstr "Bármelyik"
+
+msgid "Covered networks"
+msgstr "Lefedett hálózatok"
+
+msgid "Custom Rules"
+msgstr "Egyéni szabályok"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"Az egyedi szabályok lehetővé teszik tetszőleges iptables parancsok "
+"futtatását melyekre a tűzfal keretrendszer egyébként nem biztosít "
+"lehetőséget. A parancsok a tűzfal minden újraindításakor futtatásra "
+"kerülnek, közvetlenül az alapértelmezett szabálykészletek betöltése után."
+
+msgid "Destination IP address"
+msgstr "Cél IP-cím"
+
+msgid "Destination address"
+msgstr "Cél cím"
+
+msgid "Destination port"
+msgstr "Cél port"
+
+msgid "Destination zone"
+msgstr "Cél zóna"
+
+msgid "Do not rewrite"
+msgstr "Ne írja felül"
+
+msgid "Drop invalid packets"
+msgstr "Érvénytelen csomagok eldobása"
+
+msgid "Enable"
+msgstr "Engedélyezés"
+
+msgid "Enable NAT Loopback"
+msgstr "NAT visszacsatolás engedélyezése"
+
+msgid "Enable SYN-flood protection"
+msgstr "SYN-flood védelem engedélyezése"
+
+msgid "Enable logging on this zone"
+msgstr "Naplózás engeélyezése ezen a zónán"
+
+msgid "External IP address"
+msgstr "Külső IP cím"
+
+msgid "External port"
+msgstr "Külső port"
+
+msgid "External zone"
+msgstr "Külső zóna"
+
+msgid "Extra arguments"
+msgstr "További argumentumok"
+
+msgid "Firewall"
+msgstr "Tűzfal"
+
+msgid "Firewall - Custom Rules"
+msgstr "Tűzfal - Egyéni szabályok"
+
+msgid "Firewall - Port Forwards"
+msgstr "Tűzfal - Port továbbítások"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Tűzfal - Forgalmi szabályok"
+
+msgid "Firewall - Zone Settings"
+msgstr "Tűzfal - Zóna beállítások"
+
+msgid "Force connection tracking"
+msgstr "Kapcsolat követés kényszerítése"
+
+msgid "Forward"
+msgstr "Továbbítás"
+
+msgid "Forward to"
+msgstr "Továbbítás ennek"
+
+msgid "From %s in %s"
+msgstr "%s felől %s-ben"
+
+msgid "From %s in %s with source %s"
+msgstr "%s felől %s-ben %s forrással"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "%s felől %s-ben %s és %s forrással"
+
+msgid "General Settings"
+msgstr "Általános beállítások"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 és IPv6"
+
+msgid "IPv4 only"
+msgstr "csak IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "csak IPv6"
+
+msgid "Input"
+msgstr "Bemenet"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Zónák-közötti továbbítás"
+
+msgid "Internal IP address"
+msgstr "Belső IP cím"
+
+msgid "Internal port"
+msgstr "Belső port"
+
+msgid "Internal zone"
+msgstr "Belső zóna"
+
+msgid "Limit log messages"
+msgstr "Napló üzenetek korlátozása"
+
+msgid "MSS clamping"
+msgstr "MSS clamping engegélyezése"
+
+msgid "Masquerading"
+msgstr "Álcázás"
+
+msgid "Match"
+msgstr "Szűrés"
+
+msgid "Match ICMP type"
+msgstr "Szűrés ICMP típus alapján"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+"Továbbított forgalom szűrése a megadott cél port, vagy port tartomány "
+"szerint."
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Adott portra vagy port tartományra irányított bejövő forgalom szűrése ezen a "
+"gépen"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+"Az ügyfél gép megadott portjáról, vagy port tartományából indított forgalom "
+"szűrése. "
+
+msgid "Name"
+msgstr "Név"
+
+msgid "New SNAT rule"
+msgstr "Új SNAT szabály"
+
+msgid "New forward rule"
+msgstr "Új továbbítási szabály"
+
+msgid "New input rule"
+msgstr "Új bemeneti szabály"
+
+msgid "New port forward"
+msgstr "Új port továbbítás"
+
+msgid "New source NAT"
+msgstr "Új forrás NAT"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "Csak a megadott IP címre irányított bejövő forgalmat egyeztesse."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Csak a megadott MAC címekről érkező bejövő forgalmat egyeztesse."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+"Csak a megadott IP címről illetve IP címtartományból érkező bejövő forgalmat "
+"egyeztesse."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+"Csak az ügyfél gép megadott forrás portjáról illetve forrás port "
+"tartományába tartozó portról indított bejövő forgalmat egyeztesse."
+
+msgid "Open ports on router"
+msgstr "Port megnyitása a routeren"
+
+msgid "Other..."
+msgstr "Egyéb..."
+
+msgid "Output"
+msgstr "Kimenet"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+"További argumentumok küldése az iptables részére. Használja körültekintően!"
+
+msgid "Port Forwards"
+msgstr "Port továbbítás"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"A port továbbítás lehetővé teszi az interneten lévő távoli számítógépeknek a "
+"privát helyi hálózat bizonyos számítógépéhez vagy szolgáltatásához történő "
+"csatlakozását."
+
+msgid "Protocol"
+msgstr "Protokoll"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr "Átirányítja az egyező bejövő forgalmat a belső gép megadott portjához"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Átirányítja az egyező bejövő forgalmat a megadott belső géphez"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "Álcázás korlátozása a megadott cél alhálózatokra"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "Álcázás korlátozása a megadott forrás alhálózatokra"
+
+msgid "Restrict to address family"
+msgstr "Korlátozás cím családra"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr "Az összeíllő forgalom átírása a megadott címre."
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+"Az összeillő forgalom átírása a megadott forrás portra. Amennyibe üresen van "
+"hagyva, csak az IP cím kerül átírásra."
+
+msgid "Rewrite to source %s"
+msgstr "Átírás %s forrásra"
+
+msgid "Rewrite to source %s, %s"
+msgstr "Átírás %s, %s forrásra"
+
+msgid "SNAT IP address"
+msgstr "SNAT IP cím"
+
+msgid "SNAT port"
+msgstr "SNAT port"
+
+msgid "Source IP address"
+msgstr "Forrás IP cím"
+
+msgid "Source MAC address"
+msgstr "Forrás MAC cím"
+
+msgid "Source NAT"
+msgstr "Forrás NAT"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"A forrás NAT az álcázás olyan speciális formája, mely lehetővé teszi a "
+"kimenő forgalomhoz használt forrás IP címek aprólékos szabályozását, például "
+"több WAN cím hozzárendelését a belső alhálózatokhoz."
+
+msgid "Source address"
+msgstr "Forrás cím"
+
+msgid "Source port"
+msgstr "Forrás port"
+
+msgid "Source zone"
+msgstr "Forrás zóna"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"A tűzfal zónákat határoz meg a hálózati interfészek fölött a hálózati "
+"forgalom áramlásának szabályozására."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"Az alábbi beállítások vezérlik a továbbítási irányelveket a jelenlegi zóna "
+"(%s) és a többi zóna között. A <em>cél zónák</em> fedik le a továbbított "
+"forgalmat <strong>amelynek forrása %q</strong>. A <em>forrás zónák</em> "
+"szűrik a továbbított forgalmat más zónákból <strong>melynek célja %q</"
+"strong>. A továbbítási szabály <em>egyirányú</em>, tehát pl. egy továbbítás "
+"LAN-ból WAN-ba <em>nem</em> jelenti azt, hogy a továbbítás WAN-ból LAN-ba is "
+"engedélyezett."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"Ez a lap lehetővé teszi a port továbbítási bejegyzések speciális "
+"tulajdonságainak módosítását. A legtöbb esetben ezeknek a beállításoknak a "
+"módosítása nem szükséges."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"Ez a lap lehetővé teszi a forgalmi szabály bejegyzés speciális "
+"tulajdonságainak módosítását, mint a forrás- és célgépek megfeleltetése."
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"Ez a rész a(z) %q általános beállításait határozza meg. A <em>bejövő</em> és "
+"<em>kimenő</em> beállítások határozzák meg a zónába be- és kilépő forgalom "
+"alapértelmezett szabályait, míg a <em>továbbítási</em> beállítás a különböző "
+"hálózatok közötti forgalomtovábbítás szabályát írja le a zónán belül. A "
+"<em>lefedett hálózatok</em> adják meg, hogy mely elérhető hálózatok tagjai "
+"ennek a zónának."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "%s-re %s-nél a <var>eszközön</var>"
+
+msgid "To %s in %s"
+msgstr "%s-re %s-ben"
+
+msgid "To %s on <var>this device</var>"
+msgstr "%s-re a <var>eszközön</var>"
+
+msgid "To %s, %s in %s"
+msgstr "%s-re, %s %s-ben"
+
+msgid "To source IP"
+msgstr "Forrás IP-re"
+
+msgid "To source port"
+msgstr "Forrás portra"
+
+msgid "Traffic Rules"
+msgstr "Forgalmi szabályok"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"A forgalmi szabályok a különböző zónák között utazó csomagokra vonatkozó "
+"házirendet határozzák meg, például bizonyos gépek közötti forgalom "
+"megakadályozához vagy WAN portok megnyitásához a routeren."
+
+msgid "Via %s"
+msgstr "%s-en át"
+
+msgid "Via %s at %s"
+msgstr "%s-en át %s-nél"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"Az \"-- egyéni --\" lehetőség választásával több protokoll megadása "
+"lehetséges egymástól szóközzell elválasztva."
+
+msgid "Zone %q"
+msgstr "Zóna %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Zóna ⇒ Továbbítások"
+
+msgid "Zones"
+msgstr "Zónák"
+
+msgid "accept"
+msgstr "elfogadás"
+
+msgid "any"
+msgstr "bármelyik"
+
+msgid "any host"
+msgstr "bármelyik gép"
+
+msgid "any router IP"
+msgstr "bármelyik router IP"
+
+msgid "any zone"
+msgstr "bármelyik zóna"
+
+msgid "don't track"
+msgstr "ne kövesse"
+
+msgid "drop"
+msgstr "eldobás"
+
+msgid "reject"
+msgstr "visszautasítás"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Cél"
+
+#~ msgid "Family"
+#~ msgstr "Család"
+
+#~ msgid "Forward to %s in %s"
+#~ msgstr "Továbbítás ide:%s/%s"
+
+#~ msgid "Forward to %s, %s in %s"
+#~ msgstr "Továbbítás ide: %s, %s/%s"
+
+#~ msgid "SNAT"
+#~ msgstr "SNAT"
+
+#~ msgid "Source"
+#~ msgstr "Forrás"
+
+#~ msgid "Via"
+#~ msgstr "Keresztül"
+
+#~ msgid "Accept forward"
+#~ msgstr "Továbbítás engedélyezése"
+
+#~ msgid "Accept input"
+#~ msgstr "Bemenet engedélyezése"
+
+#~ msgid "Disable"
+#~ msgstr "Letiltás"
+
+#~ msgid "Discard forward"
+#~ msgstr "Kimenet eldobása"
+
+#~ msgid "Discard input"
+#~ msgstr "Bemenet eldobása"
+
+#~ msgid "Do not track forward"
+#~ msgstr "Ne kövesse a továbbítást"
+
+#~ msgid "Do not track input"
+#~ msgstr "Ne kövesse a bemenetet"
+
+#~ msgid "IP"
+#~ msgstr "IP"
+
+#~ msgid "IP range"
+#~ msgstr "IP tartomány"
+
+#~ msgid "IPs"
+#~ msgstr "IP-k"
+
+#~ msgid "MAC"
+#~ msgstr "MAC cím"
+
+#~ msgid "MACs"
+#~ msgstr "MAC címek"
+
+#~ msgid "Refuse forward"
+#~ msgstr "Továbbítás megtagadása"
+
+#~ msgid "Refuse input"
+#~ msgstr "Bemenet megtagadása"
+
+#~ msgid "Rule is disabled"
+#~ msgstr "Szabály letiltva"
+
+#~ msgid "Rule is enabled"
+#~ msgstr "Szabály engedélyezve"
+
+#~ msgid "day"
+#~ msgstr "nap"
+
+#~ msgid "hour"
+#~ msgstr "óra"
+
+#~ msgid "minute"
+#~ msgstr "perc"
+
+#~ msgid "not"
+#~ msgstr "nem"
+
+#~ msgid "port"
+#~ msgstr "port"
+
+#~ msgid "ports"
+#~ msgstr "portok"
+
+#~ msgid "second"
+#~ msgstr "másodperc"
+
+#~ msgid "type"
+#~ msgstr "típus"
+
+#~ msgid "types"
+#~ msgstr "típusok"
diff --git a/applications/luci-app-firewall/po/it/firewall.po b/applications/luci-app-firewall/po/it/firewall.po
new file mode 100644
index 000000000..2f87efc69
--- /dev/null
+++ b/applications/luci-app-firewall/po/it/firewall.po
@@ -0,0 +1,502 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2012-04-19 23:05+0200\n"
+"Last-Translator: claudyus <claudyus84@gmail.com>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: it\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.4\n"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr "%s%s con %s"
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr ""
+
+msgid "(Unnamed Rule)"
+msgstr ""
+
+msgid "(Unnamed SNAT)"
+msgstr ""
+
+msgid "-- Please choose --"
+msgstr " -- Selezionare --"
+
+msgid "-- custom --"
+msgstr " -- personalizzata --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> e limita a %s"
+
+msgid "Action"
+msgstr "Azione"
+
+msgid "Add"
+msgstr "Aggiungi"
+
+msgid "Add and edit..."
+msgstr "Aggiungi e edita..."
+
+msgid "Advanced Settings"
+msgstr "Opzioni Avanzate"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Permetti routing da <em>zone di origini</em>:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Permetti rountin a <em>zone di destinazione</em>:"
+
+msgid "Any"
+msgstr "Qualsiasi"
+
+msgid "Covered networks"
+msgstr ""
+
+msgid "Custom Rules"
+msgstr "Regole Personalizzate"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"Le regole personalizzate ti permettorno di eseguire comandi iptables "
+"arbitrari che non solo altrimenti coperti dall'applicazione firewall. I "
+"comandi sono eseguiti dopo ogni riavvio del firewall, giusto dopo le altre "
+"regole che son state caricate."
+
+msgid "Destination IP address"
+msgstr "Indirizzo IP destinazione"
+
+msgid "Destination address"
+msgstr "Indirizzo di destinazione"
+
+msgid "Destination port"
+msgstr "Porta di destinazione"
+
+msgid "Destination zone"
+msgstr "Zona di destinazione"
+
+msgid "Do not rewrite"
+msgstr ""
+
+msgid "Drop invalid packets"
+msgstr ""
+
+msgid "Enable"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External IP address"
+msgstr ""
+
+msgid "External port"
+msgstr "Porta Esterna"
+
+msgid "External zone"
+msgstr ""
+
+msgid "Extra arguments"
+msgstr ""
+
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Custom Rules"
+msgstr ""
+
+msgid "Firewall - Port Forwards"
+msgstr ""
+
+msgid "Firewall - Traffic Rules"
+msgstr ""
+
+msgid "Firewall - Zone Settings"
+msgstr "Firewall - Opzioni delle Zone"
+
+msgid "Force connection tracking"
+msgstr ""
+
+msgid "Forward"
+msgstr ""
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr ""
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr "Opzioni Generali"
+
+msgid "IPv4"
+msgstr ""
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 e IPv6"
+
+msgid "IPv4 only"
+msgstr "Solo IPv4"
+
+msgid "IPv6"
+msgstr ""
+
+msgid "IPv6 only"
+msgstr "Solo IPv6"
+
+msgid "Input"
+msgstr ""
+
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+msgid "Internal IP address"
+msgstr "Indirizzo IP Interno"
+
+msgid "Internal port"
+msgstr "Porta interna"
+
+msgid "Internal zone"
+msgstr ""
+
+msgid "Limit log messages"
+msgstr ""
+
+msgid "MSS clamping"
+msgstr ""
+
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr "Nome"
+
+msgid "New SNAT rule"
+msgstr ""
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr ""
+
+msgid "New port forward"
+msgstr ""
+
+msgid "New source NAT"
+msgstr ""
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr ""
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr ""
+
+msgid "Other..."
+msgstr ""
+
+msgid "Output"
+msgstr ""
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr ""
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+
+msgid "Protocol"
+msgstr "Protocollo"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr ""
+
+msgid "SNAT port"
+msgstr ""
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/rrule.lua      #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# msgid "Traffic Redirection"
+# msgstr ""
+# msgid ""
+# "Traffic redirection allows you to change the destination address of "
+# "forwarded packets."
+# msgstr ""
+# msgid "Overview"
+# msgstr ""
+# msgid "Name"
+# msgstr ""
+# msgid "Source zone"
+# msgstr ""
+# msgid "Source MAC-address"
+# msgstr ""
+# msgid "Source port"
+# msgstr ""
+# msgid "Protocol"
+# msgstr ""
+msgid "Source IP address"
+msgstr "Indirizzo IP di origine"
+
+msgid "Source MAC address"
+msgstr "Indirizzo MAC di origine"
+
+msgid "Source NAT"
+msgstr ""
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+msgid "Source address"
+msgstr "Indirizzo di origine"
+
+msgid "Source port"
+msgstr "Porta di origine"
+
+msgid "Source zone"
+msgstr "Zona di origine"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr ""
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr ""
+
+msgid "accept"
+msgstr "accetta"
+
+msgid "any"
+msgstr "qualsiasi"
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
+msgstr "rifiuta"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Destinazione"
+
+#~ msgid "Source"
+#~ msgstr "Origine"
+
+#~ msgid "Accept input"
+#~ msgstr "Accetta INPUT"
+
+#~ msgid "(optional)"
+#~ msgstr "(facoltativo)"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Porta interna (opzionale)"
+
+#~ msgid "Advanced Options"
+#~ msgstr "Opzioni Avanzate"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Regole Avanzate"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Le regole avanzate consentono di personalizzare il firewall per le tue "
+#~ "necessità. Solo le nuove connessioni saranno combinate. I pacchetti "
+#~ "appartenenti alle connessioni già aperte sono automaticamente autorizzate "
+#~ "ad oltrepassare il firewall."
+
+#~ msgid "Custom Rules (/etc/firewall.user)"
+#~ msgstr "Regole Personalizzate (/etc/firewall.user)"
+
+#~ msgid "Device"
+#~ msgstr "Dispositivo"
+
+#~ msgid "Rules"
+#~ msgstr "Regole"
diff --git a/applications/luci-app-firewall/po/ja/firewall.po b/applications/luci-app-firewall/po/ja/firewall.po
new file mode 100644
index 000000000..877a6f0ef
--- /dev/null
+++ b/applications/luci-app-firewall/po/ja/firewall.po
@@ -0,0 +1,687 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2012-11-14 17:32+0200\n"
+"Last-Translator: Kentaro <kentaro.matsuyama@gmail.com>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: ja\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr "%s%s ,%s"
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr "(名前設定の無いエントリー)"
+
+msgid "(Unnamed Rule)"
+msgstr "(名前設定の無いルール)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(名前設定の無いSNAT)"
+
+msgid "-- Please choose --"
+msgstr "-- 選択してください --"
+
+msgid "-- custom --"
+msgstr "-- 手動設定 --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> パケット / <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+"<var>%d</var> パケット / <var>%s</var>, バースト <var>%d</var> パケット"
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var>, %s を上限に設定"
+
+msgid "Action"
+msgstr "動作"
+
+msgid "Add"
+msgstr "追加"
+
+msgid "Add and edit..."
+msgstr "追加及び編集..."
+
+msgid "Advanced Settings"
+msgstr "詳細設定"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "<em>送信元ゾーン</em>からの転送を許可する:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "<em>宛先ゾーン</em>への転送を許可する:"
+
+msgid "Any"
+msgstr "全て"
+
+msgid "Covered networks"
+msgstr "対象ネットワーク"
+
+msgid "Custom Rules"
+msgstr "手動設定ルール"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"手動設定ルールの設定では、ファイアウォールの設定画面ではサポートされていない"
+"ような、任意のiptablesコマンドを実行することが可能です。これらの任意のコマン"
+"ドは、ファイアウォール機能の起動ごとに、標準のルールが読み込まれた後に実行さ"
+"れます。"
+
+msgid "Destination IP address"
+msgstr "宛先IPアドレス"
+
+msgid "Destination address"
+msgstr "宛先アドレス"
+
+msgid "Destination port"
+msgstr "宛先ポート"
+
+msgid "Destination zone"
+msgstr "宛先ゾーン"
+
+msgid "Do not rewrite"
+msgstr "リライトしない"
+
+msgid "Drop invalid packets"
+msgstr "無効なパケットを遮断する"
+
+msgid "Enable"
+msgstr "有効"
+
+msgid "Enable NAT Loopback"
+msgstr "NATループバックを有効にする"
+
+msgid "Enable SYN-flood protection"
+msgstr "SYN-Floodプロテクションを有効にする"
+
+msgid "Enable logging on this zone"
+msgstr "このゾーンのログ記録を有効にする"
+
+msgid "External IP address"
+msgstr "外部IPアドレス"
+
+msgid "External port"
+msgstr "外部ポート"
+
+msgid "External zone"
+msgstr "外部ゾーン"
+
+msgid "Extra arguments"
+msgstr "追加設定"
+
+msgid "Firewall"
+msgstr "ファイアウォール"
+
+msgid "Firewall - Custom Rules"
+msgstr "ファイアウォール - 手動設定ルール"
+
+msgid "Firewall - Port Forwards"
+msgstr "ファイアウォール - ポートフォワーディング"
+
+msgid "Firewall - Traffic Rules"
+msgstr "ファイアウォール - トラフィック・ルール"
+
+msgid "Firewall - Zone Settings"
+msgstr "ファイアウォール - ゾーン設定"
+
+msgid "Force connection tracking"
+msgstr "強制的にコネクション追跡を行う"
+
+msgid "Forward"
+msgstr "転送"
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr "送信元 %s (%s)"
+
+msgid "From %s in %s with source %s"
+msgstr "送信元 %s (%s) , 送信元 %s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "送信元 %s (%s) , 送信元 %s, 送信元 %s"
+
+msgid "General Settings"
+msgstr "一般設定"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4及びIPv6"
+
+msgid "IPv4 only"
+msgstr "IPv4のみ"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "IPv6のみ"
+
+msgid "Input"
+msgstr "受信"
+
+msgid "Inter-Zone Forwarding"
+msgstr "内部ゾーン転送"
+
+msgid "Internal IP address"
+msgstr "内部IPアドレス"
+
+msgid "Internal port"
+msgstr "内部ポート"
+
+msgid "Internal zone"
+msgstr "内部ゾーン"
+
+msgid "Limit log messages"
+msgstr "ログメッセージを制限"
+
+msgid "MSS clamping"
+msgstr "MSSクランプ"
+
+msgid "Masquerading"
+msgstr "マスカレード"
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr "ICMPタイプの一致"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+"設定された宛先ポート(またはポート範囲)に一致した転送トラフィックが対象になり"
+"ます"
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"設定された宛先ポート(またはポート範囲)に一致した受信トラフィックが対象になり"
+"ます"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+"設定されたクライアントホストの送信元ポート(またはポート範囲)からの受信トラ"
+"フィックと一致したトラフィックが対象になります。"
+
+msgid "Name"
+msgstr "名前"
+
+msgid "New SNAT rule"
+msgstr "SNATルールの新規作成"
+
+msgid "New forward rule"
+msgstr "転送ルールの新規作成"
+
+msgid "New input rule"
+msgstr "受信ルールの新規作成"
+
+msgid "New port forward"
+msgstr "転送設定の新規作成"
+
+msgid "New source NAT"
+msgstr "SNATルールの新規作成"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "設定された宛先IPアドレスと一致した受信トラフィックが対象になります。"
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "設定されたMACアドレスと一致した受信したトラフィックが対象になります。"
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+"設定されたIPアドレス (または範囲) と一致した受信したトラフィックが対象になり"
+"ます。"
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+"設定されたクライアントホストの送信元ポート(またはポート範囲)からの受信トラ"
+"フィックと一致したトラフィックのみを対象にします。"
+
+msgid "Open ports on router"
+msgstr "ポートの開放"
+
+msgid "Other..."
+msgstr "その他のプロトコル"
+
+msgid "Output"
+msgstr "送信"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+"iptablesにパススルーする追加の引数を設定してください。ただし、注意して設定し"
+"てください!"
+
+msgid "Port Forwards"
+msgstr "ポートフォワーディング"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"ポートフォワーディングは、インターネット上のリモートコンピュータから、プライ"
+"ベートなネットワーク上の、特定のコンピュータやサービスへのアクセスを可能にし"
+"ます。"
+
+msgid "Protocol"
+msgstr "プロトコル"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"ルールに一致した受信トラフィックを、内部ホストの設定されたポートへ転送します"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "ルールに一致した受信トラフィックを、設定された内部ホストへ転送します"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "設定された宛先サブネットへのマスカレードを制限する"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "設定された送信元サブネットへのマスカレードを制限する"
+
+msgid "Restrict to address family"
+msgstr "アドレスファミリの制限"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+"ルールに一致したトラフィックの送信元アドレスを設定した値にリライトします。"
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+"ルールに一致したトラフィックの送信元ポートを設定した値にリライトします。空欄"
+"にした場合、IPアドレスのみを書き直します。"
+
+msgid "Rewrite to source %s"
+msgstr "送信元 %s にリライト"
+
+msgid "Rewrite to source %s, %s"
+msgstr "送信元 %s, %s にリライト"
+
+msgid "SNAT IP address"
+msgstr "SNAT IPアドレス"
+
+msgid "SNAT port"
+msgstr "SNAT ポート"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/rrule.lua      #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Traffic Redirection"
+# msgstr ""
+#
+# msgid ""
+# "Traffic redirection allows you to change the destination address of "
+# "forwarded packets."
+# msgstr ""
+#
+# msgid "Overview"
+# msgstr ""
+#
+# msgid "Name"
+# msgstr ""
+#
+# msgid "Source zone"
+# msgstr ""
+#
+# msgid "Source MAC-address"
+# msgstr ""
+#
+# msgid "Source port"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+msgid "Source IP address"
+msgstr "送信元IPアドレス"
+
+msgid "Source MAC address"
+msgstr "送信元MACアドレス"
+
+msgid "Source NAT"
+msgstr "送信元NAT"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"送信元NAT設定は、複数のWANアドレスを内部のサブネットにマッピングするような、"
+"出力トラフィックに対する送信元IPアドレスのきめ細かい制御を行うマスカレードの"
+"設定フォームです。"
+
+msgid "Source address"
+msgstr "送信元アドレス"
+
+msgid "Source port"
+msgstr "送信元ポート"
+
+msgid "Source zone"
+msgstr "送信元ゾーン"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"ファイアウォール機能は、各ネットワークインターフェース上にゾーンを作成してト"
+"ラフィックの制御を行います。"
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"下記の設定は、このゾーン (%s)とその他のゾーン間の転送ポリシーを制御します。"
+"<em>宛先ゾーンへの転送</em> は、<strong>%q から</strong>転送されたトラフィッ"
+"クに対して転送を許可します。 <em>送信元ゾーンからの転送</em> は、別のゾーンか"
+"ら<strong>%qへ</strong> の転送を許可します。トラフィック転送設定は、<em>一方"
+"向</em>であり、例えばlanからwanへの転送設定は、wanからlanへの転送を<em>許可し"
+"ません。</em>"
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"このページでは、各転送ルールの詳細設定を行うことができます。ただし、ほとんど"
+"のケースは、これらの設定を変更する必要はありません。"
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"このページでは、各トラフィックルールの送信元・宛先ホストの設定などの詳細設定"
+"を行うことができます。"
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"このセクションでは、%sの標準的な動作を設定します。<em>受信</em>及び<em>送信</"
+"em>オプションは、このゾーンに対して入出力するトラフィックに対する標準のポリ"
+"シーを設定し、<em>転送</em>オプションは、ゾーン間の転送トラフィックに対する標"
+"準のポリシーになります。<em>対象ネットワーク</em>は、どのネットワーク設定がこ"
+"のゾーンに属するかを設定します。"
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "宛先 %s, %s (<var>デバイス</var>)"
+
+msgid "To %s in %s"
+msgstr "宛先 %s (%s)"
+
+msgid "To %s on <var>this device</var>"
+msgstr "宛先 %s (<var>デバイス</var>)"
+
+msgid "To %s, %s in %s"
+msgstr "宛先 %s, %s (%s)"
+
+msgid "To source IP"
+msgstr "変換後送信元IP"
+
+msgid "To source port"
+msgstr "変換後送信元ポート"
+
+msgid "Traffic Rules"
+msgstr "トラフィック・ルール"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"トラフィック・ルールの設定では、ゾーン間を行き来するパケットのポリシーを設定"
+"します。例えば、特定のホスト間や、ルーターのWANポートへのトラフィックの拒否を"
+"設定することができます。"
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"\"-- 手動設定 --\"を選択し、プロトコルをスペースで区切って入力することで複数"
+"のプロトコルを指定することができます。"
+
+msgid "Zone %q"
+msgstr "ゾーン %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "ゾーン ⇒ 転送"
+
+msgid "Zones"
+msgstr "ゾーン"
+
+msgid "accept"
+msgstr "許可"
+
+msgid "any"
+msgstr "全て"
+
+msgid "any host"
+msgstr "全てのホスト"
+
+msgid "any router IP"
+msgstr "全てのルーターIP"
+
+msgid "any zone"
+msgstr "全てのゾーン"
+
+msgid "don't track"
+msgstr "コネクション追跡を行わない"
+
+msgid "drop"
+msgstr "遮断"
+
+msgid "reject"
+msgstr "拒否"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "宛先"
+
+#~ msgid "Family"
+#~ msgstr "アドレスファミリ"
+
+#~ msgid "Forward to %s in %s"
+#~ msgstr "転送先 %s (%s)"
+
+#~ msgid "Forward to %s, %s in %s"
+#~ msgstr "転送先 %s, %s (%s)"
+
+#~ msgid "SNAT"
+#~ msgstr "SNAT"
+
+#~ msgid "Source"
+#~ msgstr "送信元"
+
+#~ msgid "To %s"
+#~ msgstr "宛先 %s"
+
+#~ msgid "To %s at %s"
+#~ msgstr "宛先 %s, %s"
+
+#~ msgid "Via"
+#~ msgstr "経由"
+
+#~ msgid "Accept forward"
+#~ msgstr "転送を許可"
+
+#~ msgid "Accept input"
+#~ msgstr "受信を許可"
+
+#~ msgid "Disable"
+#~ msgstr "無効"
+
+#~ msgid "Discard forward"
+#~ msgstr "転送を破棄"
+
+#~ msgid "Discard input"
+#~ msgstr "入力を破棄"
+
+#~ msgid "Do not track forward"
+#~ msgstr "転送の追跡を行わない"
+
+#~ msgid "Do not track input"
+#~ msgstr "入力の追跡を行わない"
+
+#~ msgid "IP"
+#~ msgstr "IP"
+
+#~ msgid "IP range"
+#~ msgstr "IPレンジ"
+
+#~ msgid "IPs"
+#~ msgstr "IP"
+
+#~ msgid "MAC"
+#~ msgstr "MAC"
+
+#~ msgid "MACs"
+#~ msgstr "MAC"
+
+#~ msgid "Refuse forward"
+#~ msgstr "転送を拒否"
+
+#~ msgid "Refuse input"
+#~ msgstr "受信を拒否"
+
+#~ msgid "Rule is disabled"
+#~ msgstr "ルール設定は無効になっています"
+
+#~ msgid "Rule is enabled"
+#~ msgstr "ルール設定は有効になっています"
+
+#~ msgid "day"
+#~ msgstr "日"
+
+#~ msgid "hour"
+#~ msgstr "時"
+
+#~ msgid "minute"
+#~ msgstr "分"
+
+#~ msgid "not"
+#~ msgstr "not"
+
+#~ msgid "port"
+#~ msgstr "ポート"
+
+#~ msgid "ports"
+#~ msgstr "ポート"
+
+#~ msgid "second"
+#~ msgstr "秒"
+
+#~ msgid "type"
+#~ msgstr "タイプ"
+
+#~ msgid "types"
+#~ msgstr "タイプ"
+
+#~ msgid "(optional)"
+#~ msgstr "(オプション)"
+
+#~ msgid "Intended destination address"
+#~ msgstr "意図された宛先アドレス"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "内部ポート（オプション）"
+
+#~ msgid "Advanced Options"
+#~ msgstr "詳細なオプション"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "詳細なルール"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "詳細なルール設定を行うことができます。ただし、すでに接続が行われているパ"
+#~ "ケットに関しては、自動的にファイアウォールの通過を許可されます。"
+
+#~ msgid "Custom Rules (/etc/firewall.user)"
+#~ msgstr "手動設定ルール (/etc/firewall.user)"
+
+#~ msgid "Device"
+#~ msgstr "デバイス"
+
+#~ msgid ""
+#~ "For DNAT, match incoming traffic directed at the given destination ip "
+#~ "address. For SNAT rewrite the source address to the given address."
+#~ msgstr ""
+#~ "DNATの場合、設定された宛先アドレスのトラフィックに対して合致を行います。"
+#~ "SNATの場合、送信元アドレスを設定されたアドレスで上書きします。"
+
+#~ msgid "Overview"
+#~ msgstr "概要"
+
+#~ msgid "Port forwarding"
+#~ msgstr "ポートフォワーディング"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "ポートフォワーディングを使用することで、内部ネットワークのサービスを外部に"
+#~ "提供することができます。"
+
+#~ msgid "Redirection type"
+#~ msgstr "転送タイプ"
+
+#~ msgid "Redirections"
+#~ msgstr "転送"
+
+#~ msgid "Rules"
+#~ msgstr "ルール"
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "トラフィック転送"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "トラフィック転送機能を用いることで、転送したパケットの宛先アドレスを変更す"
+#~ "ることが可能です。"
diff --git a/applications/luci-app-firewall/po/ms/firewall.po b/applications/luci-app-firewall/po/ms/firewall.po
new file mode 100644
index 000000000..ccbec6070
--- /dev/null
+++ b/applications/luci-app-firewall/po/ms/firewall.po
@@ -0,0 +1,431 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr ""
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr ""
+
+msgid "(Unnamed Rule)"
+msgstr ""
+
+msgid "(Unnamed SNAT)"
+msgstr ""
+
+msgid "-- Please choose --"
+msgstr ""
+
+msgid "-- custom --"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Add"
+msgstr ""
+
+msgid "Add and edit..."
+msgstr ""
+
+msgid "Advanced Settings"
+msgstr ""
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
+msgstr ""
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+
+msgid "Destination IP address"
+msgstr ""
+
+msgid "Destination address"
+msgstr ""
+
+msgid "Destination port"
+msgstr ""
+
+msgid "Destination zone"
+msgstr ""
+
+msgid "Do not rewrite"
+msgstr ""
+
+msgid "Drop invalid packets"
+msgstr ""
+
+msgid "Enable"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External IP address"
+msgstr ""
+
+msgid "External port"
+msgstr ""
+
+msgid "External zone"
+msgstr ""
+
+msgid "Extra arguments"
+msgstr ""
+
+msgid "Firewall"
+msgstr ""
+
+msgid "Firewall - Custom Rules"
+msgstr ""
+
+msgid "Firewall - Port Forwards"
+msgstr ""
+
+msgid "Firewall - Traffic Rules"
+msgstr ""
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
+
+msgid "Forward"
+msgstr ""
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr ""
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr ""
+
+msgid "IPv4"
+msgstr ""
+
+msgid "IPv4 and IPv6"
+msgstr ""
+
+msgid "IPv4 only"
+msgstr ""
+
+msgid "IPv6"
+msgstr ""
+
+msgid "IPv6 only"
+msgstr ""
+
+msgid "Input"
+msgstr ""
+
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+msgid "Internal IP address"
+msgstr ""
+
+msgid "Internal port"
+msgstr ""
+
+msgid "Internal zone"
+msgstr ""
+
+msgid "Limit log messages"
+msgstr ""
+
+msgid "MSS clamping"
+msgstr ""
+
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "New SNAT rule"
+msgstr ""
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr ""
+
+msgid "New port forward"
+msgstr ""
+
+msgid "New source NAT"
+msgstr ""
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr ""
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr ""
+
+msgid "Other..."
+msgstr ""
+
+msgid "Output"
+msgstr ""
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr ""
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+
+msgid "Protocol"
+msgstr ""
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr ""
+
+msgid "SNAT port"
+msgstr ""
+
+msgid "Source IP address"
+msgstr ""
+
+msgid "Source MAC address"
+msgstr ""
+
+msgid "Source NAT"
+msgstr ""
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+msgid "Source address"
+msgstr ""
+
+msgid "Source port"
+msgstr ""
+
+msgid "Source zone"
+msgstr ""
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr ""
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr ""
+
+msgid "accept"
+msgstr ""
+
+msgid "any"
+msgstr ""
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
+msgstr ""
+
+msgid "traffic"
+msgstr ""
diff --git a/applications/luci-app-firewall/po/no/firewall.po b/applications/luci-app-firewall/po/no/firewall.po
new file mode 100644
index 000000000..e49f3ac96
--- /dev/null
+++ b/applications/luci-app-firewall/po/no/firewall.po
@@ -0,0 +1,565 @@
+msgid ""
+msgstr ""
+"PO-Revision-Date: 2013-03-25 16:42+0200\n"
+"Last-Translator: protx <lars.hardy@gmail.com>\n"
+"Language: no\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s i %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s med %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s i %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(oppføring uten navn)"
+
+msgid "(Unnamed Rule)"
+msgstr "(regel uten navn)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(SNAT uten navn)"
+
+msgid "-- Please choose --"
+msgstr "-- Vennligst velg --"
+
+msgid "-- custom --"
+msgstr "-- egendefinert --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> pakker per <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr "<var>%d</var> pakker per <var>%s</var>, burst <var>%d</var>pakker."
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> og begrens til %s"
+
+msgid "Action"
+msgstr "Handling"
+
+msgid "Add"
+msgstr "Legg til"
+
+msgid "Add and edit..."
+msgstr "Legg til og redigere..."
+
+msgid "Advanced Settings"
+msgstr "Avanserte Innstillinger"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Tillat videresending fra <em>kilde soner</em>:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Tillat videresending til <em>destinasjon soner</em>:"
+
+msgid "Any"
+msgstr "Enhver"
+
+msgid "Covered networks"
+msgstr "Gjeldene nettverk"
+
+msgid "Custom Rules"
+msgstr "Egendefinerte Regler"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"Egendefinerte regler tillater deg å utføre vilkårlige iptables kommandoer "
+"som ikke dekkes av brannmurens standardoppsett. Kommandoene utføres etter "
+"hver omstart av brannmuren, rett etter at standard regelsett er lastet."
+
+msgid "Destination IP address"
+msgstr "Destinasjon IP adresse"
+
+msgid "Destination address"
+msgstr "Destinasjon adresse"
+
+msgid "Destination port"
+msgstr "Destinasjon port"
+
+msgid "Destination zone"
+msgstr "Destinasjon sone"
+
+msgid "Do not rewrite"
+msgstr "Ikke omskriv"
+
+msgid "Drop invalid packets"
+msgstr "Forkast ugyldige pakker"
+
+msgid "Enable"
+msgstr "Aktiver"
+
+msgid "Enable NAT Loopback"
+msgstr "Aktiver NAT <abbr title=\"Loopback\">Tilbakekobling</abbr>"
+
+msgid "Enable SYN-flood protection"
+msgstr "Aktiver SYN-flood beskyttelse"
+
+msgid "Enable logging on this zone"
+msgstr "Aktiver logging av denne sonen"
+
+msgid "External IP address"
+msgstr "Ekstern IP adressse"
+
+msgid "External port"
+msgstr "Ekstern port"
+
+msgid "External zone"
+msgstr "Ekstern sone"
+
+msgid "Extra arguments"
+msgstr "Ekstra argumenter"
+
+msgid "Firewall"
+msgstr "Brannmur"
+
+msgid "Firewall - Custom Rules"
+msgstr "Brannmur - Egendefinerte Regler"
+
+msgid "Firewall - Port Forwards"
+msgstr "Brannmur - Port Videresending"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Brannmur - Trafikk Regler"
+
+msgid "Firewall - Zone Settings"
+msgstr "Brannmur - Sone Innstillinger"
+
+msgid "Force connection tracking"
+msgstr ""
+"Bruk <abbr title=\\\"connection tracking\\\">forbindelse sporing</abbr>"
+
+msgid "Forward"
+msgstr "Videresend"
+
+msgid "Forward to"
+msgstr "Videresend til"
+
+msgid "From %s in %s"
+msgstr "Fra %s i %s"
+
+msgid "From %s in %s with source %s"
+msgstr "Fra %s i %s med kilde %s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "Fra %s i %s med kilde %s og %s"
+
+msgid "General Settings"
+msgstr "Generelle Innstillinger"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 og IPv6"
+
+msgid "IPv4 only"
+msgstr "Kun IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "Kun IPv6"
+
+msgid "Input"
+msgstr "Inndata"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Sone til Sone Videresending"
+
+msgid "Internal IP address"
+msgstr "Intern IP adresse"
+
+msgid "Internal port"
+msgstr "Intern port"
+
+msgid "Internal zone"
+msgstr "Intern sone"
+
+msgid "Limit log messages"
+msgstr "Begrens logging"
+
+msgid "MSS clamping"
+msgstr "MSS Kontroll (Clamping)"
+
+msgid "Masquerading"
+msgstr "Masquerading"
+
+msgid "Match"
+msgstr "Match"
+
+msgid "Match ICMP type"
+msgstr "Match ICMP type"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+"Match videresendt trafikk til den oppgitte destinasjonsport eller "
+"portområdet."
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Match innkommende trafikk rettet mot den oppgitte destinasjonsport eller "
+"portområdet på denne verten"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+"Match innkommende trafikk som kommer fra den oppgitte kildeport eller "
+"portområdet på klienten."
+
+msgid "Name"
+msgstr "Navn"
+
+msgid "New SNAT rule"
+msgstr "Ny SNAT regel"
+
+msgid "New forward rule"
+msgstr "Ny videresending regel"
+
+msgid "New input rule"
+msgstr "Ny inndata regel"
+
+msgid "New port forward"
+msgstr "Ny port videresending"
+
+msgid "New source NAT"
+msgstr "Ny kilde NAT"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "Match kun innkommende trafikk rettet mot den oppgitt IP adresse."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Match kun innkommende trafikk fra disse MAC adresser."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr "Match kun innkommende trafikk fra denne IP eller IP område."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+"Match kun innkommende trafikk som kommer fra den oppgitte kildeport eller "
+"fra portområdet til klienten"
+
+msgid "Open ports on router"
+msgstr "Åpne porter på ruteren"
+
+msgid "Other..."
+msgstr "Andre..."
+
+msgid "Output"
+msgstr "Utdata"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr "Sender flere argumenter til iptables. Bruk med forsiktighet!"
+
+msgid "Port Forwards"
+msgstr "Port Videresendinger"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"Port videresending tillater at eksterne datamaskiner på Internett kan koble "
+"seg til en bestemt maskin eller tjeneste innenfor det private LAN."
+
+msgid "Protocol"
+msgstr "Protokoll"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Viderekoble matchet innkommende trafikk til den oppgitte porten på intern "
+"vert"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Viderekoble matchet innkommende trafikk til den angitte interne vert"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "Begrens Masquerading til oppgitt destinasjons subnett"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "Begrens Masqeuerading til oppgitt kilde subnett"
+
+msgid "Restrict to address family"
+msgstr "Begrens til adresse familie"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr "Omskriv matchet trafikk til den oppgitte adressen."
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+"Omskriv matchet trafikk til den oppgitte kildeport. Kan stå tom for kun "
+"omskriving av IP adressen."
+
+msgid "Rewrite to source %s"
+msgstr "Omskriv til kilde %s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "Omskriv til kilde %s, %s"
+
+msgid "SNAT IP address"
+msgstr "SNAT IP adresse"
+
+msgid "SNAT port"
+msgstr "SNAT port"
+
+msgid "Source IP address"
+msgstr "Kilde IP adresse"
+
+msgid "Source MAC address"
+msgstr "Kilde MAC adresse"
+
+msgid "Source NAT"
+msgstr "Kilde NAT"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"Kilde NAT er en spesifikk form for masquerading som tillater finkornet "
+"kontroll over kilde IP adressen som brukes for utgående trafikk, for "
+"eksempel for å mappe flere WAN adresser til interne subnett."
+
+msgid "Source address"
+msgstr "Kilde adresse"
+
+msgid "Source port"
+msgstr "Kilde port"
+
+msgid "Source zone"
+msgstr "Kilde sone"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"Brannmuren skaper soner over nettverkets grensesnitt for å styre "
+"nettverkstrafikken."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"Med valgene under konfigurerer man videresending mellom denne sone (%s) og "
+"andre soner. <em>Destinasjons soner</em> omhandler videresendt trafikk "
+"<strong>med opprinnelse fra %q</strong>. <em>Kilde soner</em> matcher "
+"videresendt trafikk fra andre soner <strong>rettet mot %q</strong>. Reglene "
+"ved videresending er <em>enveis</em>, d.v.s at videresending fra LAN til WAN "
+"<em>ikke</em> automatisk også tillater videresending fra WAN til LAN."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"Denne siden lar deg endre avanserte egenskaper til port videresending "
+"oppføringer. I de fleste tilfeller er det ikke nødvendig å endre disse "
+"innstillingene."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"Denne siden lar deg endre de avanserte egenskapene til trafikken regel "
+"oppføringer, som for eksempel matchet kilde og destinasjons vert."
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"Denne seksjonen definerer de vanligste valg for %q. Med <em>Inndata</em> og "
+"<em>Utdata</em> fastsetter man vanlige regler for trafikk gjennom sonen, "
+"mens <em>videresend</em> valget definerer regler for videresendt trafikk "
+"mellom forskjellige nettverk i sonen. <em>Gjeldene nettverk</em> "
+"spesifiserer hvilken av de tilgjengelige nettverk som er medlem av denne "
+"sone."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "Til %s på %s på <var>denne enheten</var>"
+
+msgid "To %s in %s"
+msgstr "Til %s i %s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "Til %s på <var>denne enheten</var>"
+
+msgid "To %s, %s in %s"
+msgstr "Til %s, %s i %s"
+
+msgid "To source IP"
+msgstr "Til kilde IP"
+
+msgid "To source port"
+msgstr "Til kilde port"
+
+msgid "Traffic Rules"
+msgstr "Trafikk Regler"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"Trafikk regler definerer regler for sending av pakker mellom ulike soner, "
+"for eksempel for å avvise trafikk mellom visse verter eller for å åpne WAN "
+"porter på ruteren."
+
+msgid "Via %s"
+msgstr "Via %s"
+
+msgid "Via %s at %s"
+msgstr "Via %s på %s"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"Du kan spesifisere flere ved å velge \"-- egendefinert --\" og deretter "
+"skrive flere protokoller atskilt med mellomrom."
+
+msgid "Zone %q"
+msgstr "Sone %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Sone = Videresendinger"
+
+msgid "Zones"
+msgstr "Soner"
+
+msgid "accept"
+msgstr "godta"
+
+msgid "any"
+msgstr "enhver"
+
+msgid "any host"
+msgstr "enhver vert"
+
+msgid "any router IP"
+msgstr "enhver ruter IP"
+
+msgid "any zone"
+msgstr "enhver sone"
+
+msgid "don't track"
+msgstr "ikke track"
+
+msgid "drop"
+msgstr "forkast"
+
+msgid "reject"
+msgstr "avslå"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Destinasjon"
+
+#~ msgid "Family"
+#~ msgstr "Adressefamilie"
+
+#~ msgid "Source"
+#~ msgstr "Kilde"
+
+#~ msgid "Via"
+#~ msgstr "Via"
+
+#~ msgid "(optional)"
+#~ msgstr "(valgfritt)"
+
+#~ msgid "Intended destination address"
+#~ msgstr "Ønsket destinasjon adresse"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Intern port (valgfritt)"
+
+#~ msgid "Advanced Options"
+#~ msgstr "Avanserte Valg"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Avanserte Regler"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Avanserte regler lar deg tilpasse brannmuren til dine behov. Kun nye "
+#~ "tilkoblinger blir berørt. Pakker som tilhører eksisterende tilkoblinger "
+#~ "slipper derfor igjennom brannmuren."
+
+#~ msgid "Custom Rules (/etc/firewall.user)"
+#~ msgstr "Egendefinerte Regler (/etc/firewall.user)"
+
+#~ msgid "Device"
+#~ msgstr "Enhet"
+
+#~ msgid ""
+#~ "For DNAT, match incoming traffic directed at the given destination ip "
+#~ "address. For SNAT rewrite the source address to the given address."
+#~ msgstr ""
+#~ "DNAT: Matcher innkommende trafikk som er rettet mot destinasjons IP-"
+#~ "adressen du angir her. SNAT: Omskriver kilde IP-adressen slik at den blir "
+#~ "lik den IP-adressen du angir her."
+
+#~ msgid ""
+#~ "Match incoming traffic originating from the given source port or port "
+#~ "range on the client host"
+#~ msgstr "Match innkommende trafikk som kommer fra dette port/portområde"
+
+#~ msgid "Overview"
+#~ msgstr "Oversikt"
+
+#~ msgid "Port forwarding"
+#~ msgstr "Port Videresending"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "<abbr title=\"Port Forwarding\">Port Videresending</abbr> tillater at "
+#~ "tjenester fra det interne nettverket kan tilbys et eksternt nettverk."
+
+#~ msgid "Redirection type"
+#~ msgstr "Omadressering type"
+
+#~ msgid "Redirections"
+#~ msgstr "Omadresseringer"
+
+#~ msgid "Rules"
+#~ msgstr "Regler"
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "Trafikk Omadressering"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "<abbr title=\"Traffic Redirection\">Trafikk Omadressering</abbr> lar deg "
+#~ "endre destinasjons adresse på videresendte pakker."
diff --git a/applications/luci-app-firewall/po/pl/firewall.po b/applications/luci-app-firewall/po/pl/firewall.po
new file mode 100644
index 000000000..18be74d23
--- /dev/null
+++ b/applications/luci-app-firewall/po/pl/firewall.po
@@ -0,0 +1,621 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2013-06-22 15:49+0200\n"
+"Last-Translator: obsy <cezary@eko.one.pl>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: pl\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=3; plural=(n==1 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 "
+"|| n%100>=20) ? 1 : 2);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s w %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s z %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s w %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(Nienazwany wpis)"
+
+msgid "(Unnamed Rule)"
+msgstr "(Nienazwana reguła)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(Nienazwany SNAT)"
+
+msgid "-- Please choose --"
+msgstr "-- Proszę wybrać --"
+
+msgid "-- custom --"
+msgstr "-- własne --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> pakiet. na <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+"<var>%d</var> pakiet. na <var>%s</var>, popsutych <var>%d</var> pakiet."
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> i ograniczone do %s"
+
+msgid "Action"
+msgstr "Działanie"
+
+msgid "Add"
+msgstr "Dodaj"
+
+msgid "Add and edit..."
+msgstr "Dodaj i edytuj..."
+
+msgid "Advanced Settings"
+msgstr "Ustawienia zaawansowane"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Zezwól na przekazywanie z <em>source zones</em>:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Zezwól na przekazywanie do <em>destination zones</em>:"
+
+msgid "Any"
+msgstr "Każdy"
+
+msgid "Covered networks"
+msgstr "Objęte sieci"
+
+msgid "Custom Rules"
+msgstr "Własne reguły"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"Własne reguły pozwalają na arbitralne wykonanie poleceń iptables, które nie "
+"są objęte składnią zapory. Polecenia wykonywane są po każdym restarcie "
+"zapory, zaraz po załadowaniu zestawu reguł domyślnych."
+
+msgid "Destination IP address"
+msgstr "Docelowy adres IP"
+
+msgid "Destination address"
+msgstr "Adres docelowy"
+
+msgid "Destination port"
+msgstr "Port docelowy"
+
+msgid "Destination zone"
+msgstr "Strefa docelowa"
+
+msgid "Do not rewrite"
+msgstr "Nie przepisuj"
+
+msgid "Drop invalid packets"
+msgstr "Porzuć wadliwe pakiety"
+
+msgid "Enable"
+msgstr "Włącz"
+
+msgid "Enable NAT Loopback"
+msgstr "Włącz NAT Loopback"
+
+msgid "Enable SYN-flood protection"
+msgstr "Włącz ochronę przed atakiem SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr "Włącz logowanie na tej strefy"
+
+msgid "External IP address"
+msgstr "Zewnętrzne adresy IP"
+
+msgid "External port"
+msgstr "Port zewnętrzny"
+
+msgid "External zone"
+msgstr "Strefa zewnętrzna"
+
+msgid "Extra arguments"
+msgstr "Dodatkowe argumenty"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/zones.lua      #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+msgid "Firewall"
+msgstr "Zapora"
+
+msgid "Firewall - Custom Rules"
+msgstr "Zapora - Reguły własne"
+
+msgid "Firewall - Port Forwards"
+msgstr "Zapora - Przekazywanie portów"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Zapora - Reguły ruchu"
+
+msgid "Firewall - Zone Settings"
+msgstr "Zapora - Ustawienia strefy"
+
+msgid "Force connection tracking"
+msgstr "Wymuś śledzenie połączeń"
+
+msgid "Forward"
+msgstr "Przekazuj"
+
+msgid "Forward to"
+msgstr "Przekazuj do"
+
+msgid "From %s in %s"
+msgstr "Z %s w %s"
+
+msgid "From %s in %s with source %s"
+msgstr "Z %s w %s ze źródłem %s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "Z %s w %s ze źródłem %s i %s"
+
+msgid "General Settings"
+msgstr "Ustawienia ogólne"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 i IPv6"
+
+msgid "IPv4 only"
+msgstr "Tylko IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "Tylko IPv6"
+
+msgid "Input"
+msgstr "Ruch przychodzący"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Przekazywanie pomiędzy strefami"
+
+msgid "Internal IP address"
+msgstr "Wewnętrzny adres IP"
+
+msgid "Internal port"
+msgstr "Wewnętrzny port"
+
+msgid "Internal zone"
+msgstr "Strefa wewnętrzna"
+
+msgid "Limit log messages"
+msgstr "Ograniczenie logowania"
+
+msgid "MSS clamping"
+msgstr "Dostosuj MSS"
+
+msgid "Masquerading"
+msgstr "Maskarada"
+
+msgid "Match"
+msgstr "Dopasuj"
+
+msgid "Match ICMP type"
+msgstr "Dopasuj typ ICMP"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+"Dopasuj przekazywany ruch do danego docelowego portu lub zakresu portów"
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Dopasuj ruch przychodzący do danego portu docelowego lub zakresu portów na "
+"tym hoście"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+"Dopasuj przychodzący ruch pochodzący z danego portu źródłowego lub zakresu "
+"portów na hoście klienta."
+
+msgid "Name"
+msgstr "Nazwa"
+
+msgid "New SNAT rule"
+msgstr "Nowa reguła SNAT"
+
+msgid "New forward rule"
+msgstr "Nowa reguła przekazywania (forward)"
+
+msgid "New input rule"
+msgstr "Nowa reguła wejściowa (input)"
+
+msgid "New port forward"
+msgstr "Nowe przekierowanie portu"
+
+msgid "New source NAT"
+msgstr "Nowy NAT źródłowy"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "Dopasuj tylko przychodzący ruch skierowany do danego adresu IP."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Dopasuj tylko ruch z tych adresów MAC."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr "Dopasuj tylko ruch przychodzący z tego adresu IP lub zakresu adresów."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+"Dopasuj tylko ruch przychodzący z podanego portu źródłowego lub zakresu "
+"portów na hoście klienta"
+
+msgid "Open ports on router"
+msgstr "Otwarte porty na routerze"
+
+msgid "Other..."
+msgstr "Inne..."
+
+msgid "Output"
+msgstr "Wyjście (Output)"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+"Przekazuje dodatkowe argumenty do iptables. Zachowaj szczególną ostrożność!"
+
+msgid "Port Forwards"
+msgstr "Przekierowania portów"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"Przekierowanie portów pozwala komputerom z internetu na połączenia z "
+"komputerami z sieci LAN."
+
+msgid "Protocol"
+msgstr "Protokół"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Przekieruj ruch przychodzący na podany port do wskazanego hosta w sieci "
+"wewnętrznej"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Przekieruj ruch przychodzący do wskazanego hosta w sieci wewnętrznej"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "Ogranicz maskaradę do wskazanych sieci docelowych"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "Ogranicz maskaradę do wskazanych sieci żródłowych"
+
+# Wstawiłem rodzinę gdyż gdzieś wcześniej było tak opisane ale klasa pasuje mi tu bardziej.
+# Obsy - niestety ale "rodzina". W gui dotyczy to wyboru IPv4/IPv6, więc "rodzina" a nie klasa.
+msgid "Restrict to address family"
+msgstr "Ogranicz do rodziny adresów"
+
+# Dosłownie przetłumaczone, nie bardzo wiem czy chodzi o czynność przepisywania pakietu przez usługę czy to jakieś ogólne sformułowanie...
+msgid "Rewrite matched traffic to the given address."
+msgstr "Przepisz dopasowany ruch do wskazanych adresów."
+
+# Jak wyżej chodzi o przepisanie pakietu przez usługę?
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+"Przepisz dopasowany ruch do danego portu żródłowego. Można zostawić puste "
+"aby przepisać tylko adres IP"
+
+msgid "Rewrite to source %s"
+msgstr "Przepisz do źródła %s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "Przepisz do źródła %s, %s"
+
+msgid "SNAT IP address"
+msgstr "Adres IP SNAT"
+
+msgid "SNAT port"
+msgstr "Port SNAT"
+
+msgid "Source IP address"
+msgstr "Źródłowy adres IP"
+
+msgid "Source MAC address"
+msgstr "Źródłowy adres MAC"
+
+msgid "Source NAT"
+msgstr "NAT żródłowy"
+
+# http://www.digipedia.pl/def/doc/id/677604507/name/SNAT/
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"SNAT używany jest wtedy, gdy zmieniane są adresy pakietów połączenia "
+"wychodzącego, czyli pakiety żródłowe. Wykonywany jest zawsze po routowaniu "
+"(POSTROUTING), a więc w chwili, gdy pakiety są gotowe opuścić host. "
+"IPmasquerading jest formą SNAT."
+
+msgid "Source address"
+msgstr "Adres źródłowy"
+
+msgid "Source port"
+msgstr "Port źródłowy"
+
+msgid "Source zone"
+msgstr "Strefa źródłowa"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"Firewall tworzy strefy z Twoich interfejsów sieciowych, aby kontrolować ruch "
+"sieciowy."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"Opcje poniżej kontrolują politykę przekazywania pomiędzy tą strefą (%s) a "
+"innymi strefami. <em>Strefy docelowe</em> obejmują przekazywany ruch "
+"<strong>pochodzący z %q</strong>. <em>Strefy źródłowe</em> match forwarded "
+"traffic from other zones <strong>skierowane do %q</strong>. Reguła "
+"przekazywania jest <em>jednokierunkowa</em>, np. przekazywanie z sieci LAN "
+"do WAN <em>nie</em> implikuje pozwolenia na przekazywanie z sieci WAN do LAN."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"Ta strona pozwala zmienić zaawansowane ustawienia przekierowania portów. W "
+"większości przypadków nie ma potrzeby zmieniać tych ustawień."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"Ta strona pozwala zmienić zaawansowane ustawienia reguły ruchu sieciowego, "
+"takie jak pasujące źródło i hosty docelowe."
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"Ta sekcja definiuje ustawienia ogólne %q. Opcje <em>\"wejście\"</em> i <em>"
+"\"wyjście\"</em> określają domyślną politykę dla ruchu przychodzącego i "
+"wychodzącego w tej strefie, podczas gdy <em>\"przekazywanie\"</em> opisuje "
+"politykę ruchu przekazywanego pomiędzy różnymi sieciami wewnątrz strefy. "
+"<em>Objęte sieci</em> określają dostępne sieci będące członkami tej strefy."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "Do %s w %s na <var>tym urządzeniu</var>"
+
+msgid "To %s in %s"
+msgstr "Do %s w %s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "Do %s na <var>tym urządzeniu</var>"
+
+msgid "To %s, %s in %s"
+msgstr "Do %s, %s w %s"
+
+msgid "To source IP"
+msgstr "Do źródłowego IP"
+
+msgid "To source port"
+msgstr "Do źródłowego portu"
+
+msgid "Traffic Rules"
+msgstr "Reguły ruchu sieciowego"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"Reguły ruchu sieciowego definiują politykę dla pakietów przechodzących "
+"między strefami, na przykład aby odrzucać ruch między konkretnymi hostami "
+"albo otworzyć porty WAN routera."
+
+msgid "Via %s"
+msgstr "Przez %s"
+
+msgid "Via %s at %s"
+msgstr "Przez %s w %s"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"Możesz określić kilka wybierając \"-- własne --\" i wpisując protokoły "
+"rozdzielone spacją."
+
+msgid "Zone %q"
+msgstr "Strefa %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Strefa ⇒ Przekazywanie"
+
+msgid "Zones"
+msgstr "Strefy"
+
+msgid "accept"
+msgstr "akceptuj"
+
+msgid "any"
+msgstr "dowolny"
+
+msgid "any host"
+msgstr "dowolny host"
+
+msgid "any router IP"
+msgstr "dowolne IP routera"
+
+msgid "any zone"
+msgstr "dowolna strefa"
+
+msgid "don't track"
+msgstr "nie śledź"
+
+msgid "drop"
+msgstr "porzucaj"
+
+msgid "reject"
+msgstr "odrzucaj"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Miejsce przeznaczenia"
+
+#~ msgid "Family"
+#~ msgstr "Rodzina"
+
+#~ msgid "Forward to %s in %s"
+#~ msgstr "Przekazuj do %s w %s"
+
+#~ msgid "Forward to %s, %s in %s"
+#~ msgstr "Przekazuj d0 %s, %s w %s"
+
+#~ msgid "SNAT"
+#~ msgstr "SNAT"
+
+#~ msgid "Source"
+#~ msgstr "Źródło"
+
+#~ msgid "To %s"
+#~ msgstr "Do %s"
+
+#~ msgid "Via"
+#~ msgstr "przez"
+
+#~ msgid "Accept forward"
+#~ msgstr "Akceptuj przekazywanie"
+
+#~ msgid "Accept input"
+#~ msgstr "Akceptuj wejście"
+
+#~ msgid "Disable"
+#~ msgstr "Wyłącz"
+
+#~ msgid "Discard forward"
+#~ msgstr "Odrzuć przekazywanie"
+
+#~ msgid "Discard input"
+#~ msgstr "Odrzuć wejście"
+
+#~ msgid "Do not track forward"
+#~ msgstr "Nie śledź przekazywania"
+
+#~ msgid "Do not track input"
+#~ msgstr "Nie śledź wejścia"
+
+#~ msgid "IP"
+#~ msgstr "IP"
+
+#~ msgid "IP range"
+#~ msgstr "Zakres IP"
+
+#~ msgid "IPs"
+#~ msgstr "Numery IP"
+
+#~ msgid "MAC"
+#~ msgstr "MAC"
+
+#~ msgid "MACs"
+#~ msgstr "Adresy MAC"
+
+#~ msgid "Rule is disabled"
+#~ msgstr "Reguła jest wyłączona"
+
+#~ msgid "Rule is enabled"
+#~ msgstr "Reguła jest włączona"
+
+#~ msgid "day"
+#~ msgstr "dzień"
+
+#~ msgid "port"
+#~ msgstr "port"
+
+#~ msgid "ports"
+#~ msgstr "porty"
+
+#~ msgid "(optional)"
+#~ msgstr "(opcjonalne)"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Wewnętrzny port (opcjonalnie)"
+
+#~ msgid "Advanced Options"
+#~ msgstr "Opcje zaawansowane"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/trule.lua      #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# msgid "Name"
+# msgstr ""
+# msgid "(optional)"
+# msgstr ""
+# msgid "Protocol"
+# msgstr ""
+# msgid "Source port"
+# msgstr ""
+# msgid "Destination port"
+# msgstr ""
+# msgid "Action"
+# msgstr ""
+# msgid "drop"
+# msgstr ""
+# msgid "accept"
+# msgstr ""
+# msgid "reject"
+# msgstr ""
+#~ msgid "Advanced Rules"
+#~ msgstr "Reguły zaawansowane"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Reguły zaawansowane pozwalają dostosować zaporę do Twoich potrzeb. Tylko "
+#~ "nowe połączenia zostaną nimi objęte. Pakiety należące do połączeń już "
+#~ "otwarte są automatycznie przepuszczane przez zaporę."
+
+#~ msgid "Custom Rules (/etc/firewall.user)"
+#~ msgstr "Reguły własne (/etc/firewall.user)"
+
+#~ msgid "Device"
+#~ msgstr "Urządzenie"
+
+#~ msgid ""
+#~ "For DNAT, match incoming traffic directed at the given destination ip "
+#~ "address. For SNAT rewrite the source address to the given address."
+#~ msgstr ""
+#~ "Dla DNAT, dopasuj ruch przychodzący kierowane na podany adres IP. Dla "
+#~ "SNAT zmienić adres źródłowy na podany adres."
diff --git a/applications/luci-app-firewall/po/pt-br/firewall.po b/applications/luci-app-firewall/po/pt-br/firewall.po
new file mode 100644
index 000000000..f32f70e5f
--- /dev/null
+++ b/applications/luci-app-firewall/po/pt-br/firewall.po
@@ -0,0 +1,740 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2014-06-21 19:03+0200\n"
+"Last-Translator: Éder <eder.grigorio@openmailbox.org>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: pt_BR\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n > 1);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s in %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s com %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s em %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(Entrada Sem Nome)"
+
+msgid "(Unnamed Rule)"
+msgstr "(Regra Sem Nome)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(SNAT Sem Nome)"
+
+msgid "-- Please choose --"
+msgstr "-- Por favor, escolha --"
+
+msgid "-- custom --"
+msgstr "-- personalizado --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> pcts. por <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr "<var>%d</var> pcts. por <var>%s</var>, pico <var>%d</var> pcts."
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> e limite a %s"
+
+msgid "Action"
+msgstr "Ação"
+
+msgid "Add"
+msgstr "Adicionar"
+
+msgid "Add and edit..."
+msgstr "Adicionar e editar..."
+
+msgid "Advanced Settings"
+msgstr "Configurações Avançadas"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Permite o encaminhamento da <em>zona de origem</em>:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Permite o encaminhamento para a <em>zona de destino</em>:"
+
+msgid "Any"
+msgstr "Qualquer"
+
+msgid "Covered networks"
+msgstr "Redes cobertas"
+
+msgid "Custom Rules"
+msgstr "Regras Personalizadas"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"As regras personalizadas permitem executar comandos iptables arbitrários não "
+"cobertos por esta ferramenta. Os comandos serão executados após cada "
+"reinício do firewall, logo após a carga do conjunto de regras padrão."
+
+msgid "Destination IP address"
+msgstr "Endereço IP de destino"
+
+msgid "Destination address"
+msgstr "Endereço de destino"
+
+msgid "Destination port"
+msgstr "Porta de destino"
+
+msgid "Destination zone"
+msgstr "Zona de destino"
+
+msgid "Do not rewrite"
+msgstr "Não sobrescreva"
+
+msgid "Drop invalid packets"
+msgstr "Descartar pacotes inválidos"
+
+msgid "Enable"
+msgstr "Habilitar"
+
+msgid "Enable NAT Loopback"
+msgstr "Habilite o Loopback do NAT"
+
+msgid "Enable SYN-flood protection"
+msgstr "Habilite proteção contra SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr "Habilite o registro nesta zona"
+
+msgid "External IP address"
+msgstr "Endereço IP externo"
+
+msgid "External port"
+msgstr "Porta Externa"
+
+msgid "External zone"
+msgstr "Zona externa"
+
+msgid "Extra arguments"
+msgstr "Argumentos extras"
+
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Custom Rules"
+msgstr "Firewall - Regras personalizadas"
+
+msgid "Firewall - Port Forwards"
+msgstr "Firewall - Encaminhamento de Portas"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Firewall - Regras de Tráfego"
+
+msgid "Firewall - Zone Settings"
+msgstr "Firewall - Configurações de Zona"
+
+msgid "Force connection tracking"
+msgstr "Force o rastreamento da conexão"
+
+msgid "Forward"
+msgstr "Encaminhar"
+
+msgid "Forward to"
+msgstr "Encaminhar para"
+
+msgid "From %s in %s"
+msgstr "Vindo de %s em %s"
+
+msgid "From %s in %s with source %s"
+msgstr "Vindo de %s em %s com origem %s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "Vindo de %s em %s com origem %s e %s"
+
+msgid "General Settings"
+msgstr "Configurações Gerais"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 e IPv6"
+
+msgid "IPv4 only"
+msgstr "Somente IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "Somente IPv6"
+
+msgid "Input"
+msgstr "Entrada"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Encaminhamento entre Zonas"
+
+msgid "Internal IP address"
+msgstr "Endereço IP interno"
+
+msgid "Internal port"
+msgstr "Porta Interna"
+
+msgid "Internal zone"
+msgstr "Zona interna"
+
+msgid "Limit log messages"
+msgstr "Limita as mensagens de registro"
+
+msgid "MSS clamping"
+msgstr "Ajuste do MSS"
+
+msgid "Masquerading"
+msgstr "Mascaramento"
+
+msgid "Match"
+msgstr "casol"
+
+msgid "Match ICMP type"
+msgstr "Casa com ICMP tipo"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+"Casa o tráfego encaminhado para uma porta ou faixa de portas de destino "
+"específica."
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Casa o tráfego entrante direcionado para uma porta ou faixa de portas de "
+"destino específica neste computador"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+"Casa o tráfego entrante originado de uma porta ou faixa de portas no "
+"equipamento cliente."
+
+msgid "Name"
+msgstr "Nome"
+
+msgid "New SNAT rule"
+msgstr "Nova regra de SNAT"
+
+msgid "New forward rule"
+msgstr "Nova regra de encaminhamento"
+
+msgid "New input rule"
+msgstr "Nova regra de entrada"
+
+msgid "New port forward"
+msgstr "Novo encaminhamento de porta"
+
+msgid "New source NAT"
+msgstr "Nova origem NAT"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+"Somente case o tráfego entrante direcionado para o endereço IP fornecido."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Somente case o tráfego entrante destes endereços MAC."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr "Somente case o tráfego entrante desta faixa de endereços IP."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+"Somente case o tráfego entrante vindo da porta de origem fornecida ou "
+"intervalo de portas no equipamento cliente"
+
+msgid "Open ports on router"
+msgstr "Abrir portas no roteador"
+
+msgid "Other..."
+msgstr "Outro..."
+
+msgid "Output"
+msgstr "Saída"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr "Passa argumentos adicionais para o iptables. Use com cuidado!"
+
+msgid "Port Forwards"
+msgstr "Encaminhamentos de Porta"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"O encaminhamento de portas permite que computadores remotos na Internet "
+"conectem a um computador ou serviço específico dentro da rede local privada."
+
+msgid "Protocol"
+msgstr "Protocolo"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Redireciona tráfego entrante para a porta especificada no computador interno"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Redireciona tráfego entrante para o computador interno especificado"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "Restringe o mascaramento para uma subrede de destino específica"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "Restringe o mascaramento para uma subrede de origem específica"
+
+msgid "Restrict to address family"
+msgstr "Restringe para uma família de endereços"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr "Reescreva o tráfego correspondente para o endereço fornecido."
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+"Reescreva o tráfego correspondente para a porta de origem fornecida. Pode "
+"ficar em branco para somente reescrever o endereço IP."
+
+msgid "Rewrite to source %s"
+msgstr "Reescrever para a origem %s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "Reescrever para a origem %s, %s"
+
+msgid "SNAT IP address"
+msgstr "Endereço IP da SNAT"
+
+msgid "SNAT port"
+msgstr "Porta da SNAT"
+
+msgid "Source IP address"
+msgstr "Endereço IP de origem"
+
+msgid "Source MAC address"
+msgstr "Endereço MAC de origem"
+
+msgid "Source NAT"
+msgstr "NAT origem"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"NAT origem é uma forma específica de mascaramento que permite o controle "
+"fino do endereço IP de origem usado no tráfego sainte. Por exemplo, para "
+"mapear múltiplos endereços WAN para subredes internas."
+
+msgid "Source address"
+msgstr "Endereço de origem"
+
+msgid "Source port"
+msgstr "Porta de origem"
+
+msgid "Source zone"
+msgstr "Zona de origem"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"O firewall cria zonas sobre as interfaces de rede para controlar o fluxo do "
+"tráfego de rede."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"As opções abaixo controlam as políticas de encaminhamento entre esta zona "
+"(%s) e outras zonas. <em>Zonas de destino</em> incluem tráfego encaminhado "
+"<strong>originado de %q</strong>. <em>Zonas de origem</em> casam com tráfego "
+"encaminhado de outras zonas <strong>apontando para %q</strong>. A regra de "
+"encaminhamento é <em>unidirecional</em>, ex: um encaminhamento da LAN para "
+"WAN <em>não</em> implica na permissão de encaminhar da WAN para LAN."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"Esta página permite que você mude propriedades avançadas da entrada do "
+"encaminhamento de porta. Na maioria dos casos, não é necessário modificar "
+"estas configurações."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"Esta página permite que você mude propriedades avançadas da entrada da regra "
+"de tráfego, como os equipamentos de origem e destino."
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"Esta seção define as propriedades comuns de %q. As opções de <em>entrada</"
+"em> e <em>saída</em> definem as políticas padrão para o tráfego entrando e "
+"saindo desta zona, enquanto a opção de <em>encaminhamento</em> descreve a "
+"política para encaminhar o tráfego entre diferentes redes dentro da zona. "
+"<em>Redes Cobertas</em> especificam que redes disponíveis são membros desta "
+"zona."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "Para %s em %s <var>neste dispositivo</var>"
+
+msgid "To %s in %s"
+msgstr "Para %s em %s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "Para %s <var>neste dispositivo</var>"
+
+msgid "To %s, %s in %s"
+msgstr "Para %s, %s em %s"
+
+msgid "To source IP"
+msgstr "Para o endereço IP de origem"
+
+msgid "To source port"
+msgstr "Para a porta de origem"
+
+msgid "Traffic Rules"
+msgstr "Regras de tráfego"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"Regras de tráfego definem políticas para a passagem de pacotes entre as "
+"diferentes zonas. Por exemplo, rejeitar o tráfego entre certos equipamentos "
+"ou abrir portas WAN no roteador."
+
+msgid "Via %s"
+msgstr "Via %s"
+
+msgid "Via %s at %s"
+msgstr "Via %s at %s"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"Você pode especificar múltiplas entradas selecionando \"-- personalizado --"
+"\" e então entrando os protocolos separados por espaço."
+
+msgid "Zone %q"
+msgstr "Zona %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Zona ⇒ Encaminhamentos"
+
+msgid "Zones"
+msgstr "Zonas"
+
+msgid "accept"
+msgstr "aceitar"
+
+msgid "any"
+msgstr "qualquer"
+
+msgid "any host"
+msgstr "qualquer equipamento"
+
+msgid "any router IP"
+msgstr "qualquer endereço IP do roteador"
+
+msgid "any zone"
+msgstr "qualquer zona"
+
+msgid "don't track"
+msgstr "não rastrear"
+
+msgid "drop"
+msgstr "descartar"
+
+msgid "reject"
+msgstr "rejeitar"
+
+# 20140621: edersg: tradução
+msgid "traffic"
+msgstr "Tráfego"
+
+#~ msgid "Destination"
+#~ msgstr "Destino"
+
+#~ msgid "Family"
+#~ msgstr "Família"
+
+#~ msgid "Forward to %s in %s"
+#~ msgstr "Encaminhar para %s em %s"
+
+#~ msgid "Forward to %s, %s in %s"
+#~ msgstr "Encaminhar para %s, %s em %s"
+
+#~ msgid "SNAT"
+#~ msgstr "SNAT"
+
+#~ msgid "Source"
+#~ msgstr "Origem"
+
+#~ msgid "To %s"
+#~ msgstr "Para %s"
+
+#~ msgid "To %s at %s"
+#~ msgstr "Para %s em %s"
+
+#~ msgid "Via"
+#~ msgstr "Via"
+
+#~ msgid "Accept forward"
+#~ msgstr "Aceitar encaminhamento"
+
+#~ msgid "Accept input"
+#~ msgstr "Aceitar entrada"
+
+#~ msgid "Disable"
+#~ msgstr "Desabilitado"
+
+#~ msgid "Discard forward"
+#~ msgstr "Descartar o encaminhamento"
+
+#~ msgid "Discard input"
+#~ msgstr "Descartar a entrada"
+
+#~ msgid "Do not track forward"
+#~ msgstr "Não rastreie o encaminhamento"
+
+#~ msgid "Do not track input"
+#~ msgstr "Não rastreie a entrada"
+
+#~ msgid "IP"
+#~ msgstr "Endereço IP"
+
+#~ msgid "IP range"
+#~ msgstr "Faixa de endereço IP"
+
+#~ msgid "IPs"
+#~ msgstr "Endereços IP"
+
+#~ msgid "MAC"
+#~ msgstr "MAC"
+
+#~ msgid "MACs"
+#~ msgstr "MACs"
+
+#~ msgid "Refuse forward"
+#~ msgstr "Rejeitar encaminhamento"
+
+#~ msgid "Refuse input"
+#~ msgstr "Rejeitar entrada"
+
+#~ msgid "Rule is disabled"
+#~ msgstr "A regra está desabilitada"
+
+#~ msgid "Rule is enabled"
+#~ msgstr "A regra está habilitada"
+
+#~ msgid "day"
+#~ msgstr "dia"
+
+#~ msgid "hour"
+#~ msgstr "hora"
+
+#~ msgid "minute"
+#~ msgstr "minuto"
+
+#~ msgid "not"
+#~ msgstr "não"
+
+#~ msgid "port"
+#~ msgstr "porta"
+
+#~ msgid "ports"
+#~ msgstr "portas"
+
+#~ msgid "second"
+#~ msgstr "segundo"
+
+#~ msgid "type"
+#~ msgstr "tipo"
+
+#~ msgid "types"
+#~ msgstr "tipos"
+
+#~ msgid "(optional)"
+#~ msgstr "(opcional)"
+
+#~ msgid "Intended destination address"
+#~ msgstr "Endereço de destino planejado"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Porta interna (opcional)"
+
+#~ msgid "Advanced Options"
+#~ msgstr "Opções Avançadas"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Regras Avançadas"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "As regras avançadas permitem a personalização da firewall de acordo com "
+#~ "as necessidades. Apenas as novas conexões serão processadas. Pacotes que "
+#~ "pertençam a conexões já abertas estão automaticamente autorizados a "
+#~ "passar pelo firewall."
+
+#~ msgid "Custom Rules (/etc/firewall.user)"
+#~ msgstr "Regras Personalizadas (/etc/firewall.user)"
+
+#~ msgid "Device"
+#~ msgstr "Dispositivo"
+
+#~ msgid ""
+#~ "For DNAT, match incoming traffic directed at the given destination ip "
+#~ "address. For SNAT rewrite the source address to the given address."
+#~ msgstr ""
+#~ "Para DNAT, casa com tráfego entrante direcionado para um dado endereço IP "
+#~ "de destino. Para SNAT, reescreve o endereço de origem para um dado "
+#~ "endereço."
+
+#~ msgid ""
+#~ "Match incoming traffic originating from the given source port or port "
+#~ "range on the client host"
+#~ msgstr ""
+#~ "Casa o tráfego entrante originado de uma porta ou faixa de portas de "
+#~ "origem específica no computador do cliente"
+
+#~ msgid "Overview"
+#~ msgstr "Visão geral"
+
+#~ msgid "Port forwarding"
+#~ msgstr "Redirecionamento de portas"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "O redirecionamento de portas permite disponibilizar serviços da rede "
+#~ "interna para uma rede externa."
+
+#~ msgid "Redirection type"
+#~ msgstr "Tipo de redirecionamento"
+
+#~ msgid "Redirections"
+#~ msgstr "Redirecionamentos"
+
+#~ msgid "Rules"
+#~ msgstr "Regras"
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "Redirecionamento de Tráfego"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "Redirecionamento do tráfego permite a alteração do endereço de destino "
+#~ "dos pacotes encaminhados."
+
+#, fuzzy
+#~ msgid "Network"
+#~ msgstr "Redes"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Controle de Tráfego"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Tráfego de Zona-para-Zona"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Aqui você pode especificar qual tráfego de rede será permitido para o "
+#~ "fluxo entre zonas das redes. Somente novas conexões serão processadas. "
+#~ "Pacotes pertencentes à conexões já abertas estão automaticamente "
+#~ "permitidos para passar pelo firewall."
+
+#~ msgid "Zone"
+#~ msgstr "Zona"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Destino"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Endereço IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Endereço MAC de origem"
+
+#~ msgid "Custom forwarding"
+#~ msgstr "Redirecionamento personalizado"
+
+#~ msgid "Input Zone"
+#~ msgstr "Zona de Entrada"
+
+#~ msgid "Output Zone"
+#~ msgstr "Zona de Saída"
+
+#~ msgid "External Zone"
+#~ msgstr "Zona Externa"
+
+#~ msgid "Source MAC"
+#~ msgstr "MAC de origem"
+
+#~ msgid "Defaults"
+#~ msgstr "Padrões"
+
+#~ msgid ""
+#~ "These are the default settings that are used if no other rules match."
+#~ msgstr ""
+#~ "Estas são as configurações padrões, que serão usadas se não houver outras "
+#~ "regras."
+
+#~ msgid ""
+#~ "Zones part the network interfaces into certain isolated areas to separate "
+#~ "network traffic. One or more networks can belong to a zone. The MASQ-flag "
+#~ "enables NAT masquerading for all outgoing traffic on this zone."
+#~ msgstr ""
+#~ "Zonas são interfaces de redes usadas para separar o tráfego da rede. Uma "
+#~ "ou mais redes podem pertencer a uma zona. A flag-MASQ ativa o "
+#~ "mascaramento NAT para todo o tráfego de saída desta zona."
+
+#~ msgid "MASQ"
+#~ msgstr "MASQ"
+
+#~ msgid "contained networks"
+#~ msgstr "redes contidas"
diff --git a/applications/luci-app-firewall/po/pt/firewall.po b/applications/luci-app-firewall/po/pt/firewall.po
new file mode 100644
index 000000000..304e3659c
--- /dev/null
+++ b/applications/luci-app-firewall/po/pt/firewall.po
@@ -0,0 +1,585 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2013-06-03 13:37+0200\n"
+"Last-Translator: joao.f.vieira <joao.f.vieira@gmail.com>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: pt\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s em %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s with %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s em %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(Entrada Sem Nome)"
+
+msgid "(Unnamed Rule)"
+msgstr "(Regra Sem Nome)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(SNAT Sem Nome)"
+
+msgid "-- Please choose --"
+msgstr "-- Escolha por favor --"
+
+msgid "-- custom --"
+msgstr "-- personalizado --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> pkts. por <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr "Acção"
+
+msgid "Add"
+msgstr "Adicionar"
+
+msgid "Add and edit..."
+msgstr "Adicionar e editar..."
+
+msgid "Advanced Settings"
+msgstr "Definições Avançadas"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Permitir encaminhamento de <em>zonas de origem</em>"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Permitir encaminhamento para <em>zonas de destino</em>"
+
+msgid "Any"
+msgstr "Qualquer"
+
+msgid "Covered networks"
+msgstr "Redes abrangidas"
+
+msgid "Custom Rules"
+msgstr "Regras Personalizadas"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"As regras personalizadas permitem-lhe executar comandos arbitrários iptables "
+"os quais não são possiveis de aplicar usando a framework da firewall. Os "
+"comandos são executados a seguir ao reinicio da firewall, logo a seguir ao "
+"conjunto de regras predefinidas serem carregadas."
+
+msgid "Destination IP address"
+msgstr "Endereço IP de destino"
+
+msgid "Destination address"
+msgstr "Endereço de destino"
+
+msgid "Destination port"
+msgstr "Porta de destino"
+
+msgid "Destination zone"
+msgstr "Zona de destino"
+
+msgid "Do not rewrite"
+msgstr "Não re-escrever"
+
+msgid "Drop invalid packets"
+msgstr "Cancelar pacotes inválidos"
+
+msgid "Enable"
+msgstr "Ativar"
+
+msgid "Enable NAT Loopback"
+msgstr "Ativar NAT Loopback"
+
+msgid "Enable SYN-flood protection"
+msgstr "Ativar a Proteção SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr "Ativar registo nesta zona"
+
+msgid "External IP address"
+msgstr "Endereço IP externo"
+
+msgid "External port"
+msgstr "Porta externa"
+
+msgid "External zone"
+msgstr "Zona externa"
+
+msgid "Extra arguments"
+msgstr "Argumentos extra"
+
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Custom Rules"
+msgstr "Firewall - Regras Personalizadas"
+
+msgid "Firewall - Port Forwards"
+msgstr "Firewall - Encaminhamento de Portas"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Firewall - Regras de Tráfego"
+
+msgid "Firewall - Zone Settings"
+msgstr "Firewall - Definições de Zona"
+
+msgid "Force connection tracking"
+msgstr "Forçar rasto de ligação"
+
+msgid "Forward"
+msgstr "Encaminhar"
+
+msgid "Forward to"
+msgstr "Encaminhar para"
+
+msgid "From %s in %s"
+msgstr "De %s em %s"
+
+msgid "From %s in %s with source %s"
+msgstr "De %s em %s com origem %s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "De %s em %s com origem %s e %s"
+
+msgid "General Settings"
+msgstr "Definições Gerais"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 e IPv6"
+
+msgid "IPv4 only"
+msgstr "Só IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "Só IPv6"
+
+msgid "Input"
+msgstr "Entrada"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Encaminhamento Inter-Zona"
+
+msgid "Internal IP address"
+msgstr "Endereço IP interno"
+
+msgid "Internal port"
+msgstr "Porta interna"
+
+msgid "Internal zone"
+msgstr "Zona Interna"
+
+msgid "Limit log messages"
+msgstr "Limitar registo de mensagens"
+
+#, fuzzy
+msgid "MSS clamping"
+msgstr "MSS-Correction"
+
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match"
+msgstr "Corresponder"
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+"O tráfego encaminhado corresponde a uma determinada porta de destino ou "
+"intervalo de portas."
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"O tráfego de entrada corresponde a uma dada porta de destino ou intervalo de "
+"portas neste host"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+"O tráfego de entrada corresponde a uma dada porta ou de um intervalo de "
+"portas no host cliente."
+
+msgid "Name"
+msgstr "Nome"
+
+msgid "New SNAT rule"
+msgstr "Nova regra SNAT"
+
+msgid "New forward rule"
+msgstr "Nova regra de encaminhamento"
+
+msgid "New input rule"
+msgstr "Nova regra de entrada"
+
+msgid "New port forward"
+msgstr "Novo encaminhamento de porta"
+
+msgid "New source NAT"
+msgstr "Nova origem de NAT"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "Só se tráfego de entrada corresponder ao endereço IP fornecido."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Só se o tráfego de entrada corresponder a um destes MACs."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr "Só se o tráfego de entrada corresponder a este IP ou intervalo."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+"Só se o tráfego de entrada corresponder à porta de origem fornecida ou de um "
+"intervalo de portas no host cliente"
+
+msgid "Open ports on router"
+msgstr "Abrir portas no router"
+
+msgid "Other..."
+msgstr "Outro..."
+
+msgid "Output"
+msgstr "Saída"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr "Passa argumentos adicionais para o iptables. Usar com cuidado!"
+
+msgid "Port Forwards"
+msgstr "Encaminhamento de Portas"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"O Encaminhamento de Portas permite que computadores remotos na internet se "
+"liguem a um computador ou serviço especifico na rede privada (LAN)."
+
+msgid "Protocol"
+msgstr "Protocolo"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Redirecionar a entrada de trafego correspondente à porta fornecida no host "
+"interno"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Redirecionar o tráfego de entrada correspondente para o host interno"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr "Restringir a família de endereços"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr "Re-escrever para a origem %s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "Re-escrever para a origem %s, %s"
+
+msgid "SNAT IP address"
+msgstr "Endereço IP da SNAT"
+
+msgid "SNAT port"
+msgstr "Porta SNAT"
+
+msgid "Source IP address"
+msgstr "Endereço IP de origem"
+
+msgid "Source MAC address"
+msgstr "Endereço MAC de origem"
+
+msgid "Source NAT"
+msgstr "NAT de origem"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"NAT de origem é uma forma especifica de mascarar que permite um controlo "
+"melhorado sobre o IP de origem usado para o tráfego de saída, por exemplo, "
+"para mapear múltiplos endereços para as sub-redes internas."
+
+msgid "Source address"
+msgstr "Endereço de origem"
+
+msgid "Source port"
+msgstr "Porta de origem"
+
+msgid "Source zone"
+msgstr "Zona de origem"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"A firewall cria zonas sobre as interfaces de rede para controlar o fluxo do "
+"tráfego."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"Esta página permite-lhe alterar as definições avançadas da regra de entrada "
+"de tráfego, tal como correspondências de hosts de origem e destino."
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "Para %s no %s em <var>este dispositivo</var>"
+
+msgid "To %s in %s"
+msgstr "Para %s em %s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "Para %s em <var>este dispositivo</var>"
+
+msgid "To %s, %s in %s"
+msgstr "Para %s, %s em %s"
+
+msgid "To source IP"
+msgstr "Para o IP de origem"
+
+msgid "To source port"
+msgstr "Para a porta de origem"
+
+msgid "Traffic Rules"
+msgstr "Regras de Tráfego"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"As Regras de Tráfego definem políticas para os pacotes que viajam entre "
+"diferentes zonas, por exemplo, para rejeitar trafego entre certos hosts ou "
+"para abrir portas WAN no router."
+
+msgid "Via %s"
+msgstr "Via %s"
+
+msgid "Via %s at %s"
+msgstr "Via %s no %s"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"Pode especificar múltiplos seleccionando \"-- personalizado --\" e depois "
+"introduzir os protocolos separados por espaço."
+
+msgid "Zone %q"
+msgstr "Zona %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Zona ⇒ Encaminhamentos"
+
+msgid "Zones"
+msgstr "Zonas"
+
+msgid "accept"
+msgstr "aceitar"
+
+msgid "any"
+msgstr "qualquer"
+
+msgid "any host"
+msgstr "qualquer host"
+
+msgid "any router IP"
+msgstr "qualquer IP do router"
+
+msgid "any zone"
+msgstr "qualquer zona"
+
+msgid "don't track"
+msgstr "não seguir"
+
+msgid "drop"
+msgstr "drop"
+
+msgid "reject"
+msgstr "rejeitar"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Destino"
+
+#~ msgid "Source"
+#~ msgstr "Origem"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Porta interna (opcional)"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Regras Avançadas"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "As regras avançadas permitem a personalização da firewall de acordo com "
+#~ "as necessidades. Apenas as novas ligações serão processadas. Pacotes que "
+#~ "pertençam a ligações já abertas estão automaticamente autorizados a "
+#~ "passar pela firewall."
+
+#~ msgid "Port forwarding"
+#~ msgstr "Redirecionamento de portas"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "O redirecionamento de portas permite disponibilizar serviços na rede "
+#~ "interna para uma rede externa."
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "Redirecionamento de Tráfego"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "Redirecionamento do tráfego permite a alteração do endereço de destino "
+#~ "dos pacotes enviados."
+
+#, fuzzy
+#~ msgid "Network"
+#~ msgstr "Redes"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Controle de Tráfego"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Tráfego de Zona-para-Zona"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Aqui você pode especificar qual tráfego de rede será permitido para o "
+#~ "fluxo entre zonas das redes. Somente novas conexões serão processadas. "
+#~ "Pacotes pertencentes à conexões já abertas estão automaticamente "
+#~ "permitidos para passar pelo firewall."
+
+#~ msgid "Zone"
+#~ msgstr "Zona"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Destino"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Endereço IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Endereço MAC de origem"
+
+#~ msgid "Custom forwarding"
+#~ msgstr "Redirecionamento personalizado"
+
+#~ msgid "Input Zone"
+#~ msgstr "Zona de Entrada"
+
+#~ msgid "Output Zone"
+#~ msgstr "Zona de Saída"
+
+#~ msgid "External Zone"
+#~ msgstr "Zona Externa"
+
+#~ msgid "Source MAC"
+#~ msgstr "MAC de origem"
+
+#~ msgid "Defaults"
+#~ msgstr "Padrões"
+
+#~ msgid ""
+#~ "These are the default settings that are used if no other rules match."
+#~ msgstr ""
+#~ "Estas são as configurações padrões, que serão usadas se não houver outras "
+#~ "regras."
+
+#~ msgid ""
+#~ "Zones part the network interfaces into certain isolated areas to separate "
+#~ "network traffic. One or more networks can belong to a zone. The MASQ-flag "
+#~ "enables NAT masquerading for all outgoing traffic on this zone."
+#~ msgstr ""
+#~ "Zonas são interfaces de redes usadas para separar o tráfego da rede. Uma "
+#~ "ou mais redes podem pertencer a uma zona. A flag-MASQ ativa o "
+#~ "mascaramento NAT para todo o tráfego de saída desta zona."
+
+#~ msgid "MASQ"
+#~ msgstr "MASQ"
+
+#~ msgid "contained networks"
+#~ msgstr "redes contidas"
diff --git a/applications/luci-app-firewall/po/ro/firewall.po b/applications/luci-app-firewall/po/ro/firewall.po
new file mode 100644
index 000000000..391b949dc
--- /dev/null
+++ b/applications/luci-app-firewall/po/ro/firewall.po
@@ -0,0 +1,503 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"PO-Revision-Date: 2014-06-29 19:33+0200\n"
+"Last-Translator: xxvirusxx <condor20_05@yahoo.it>\n"
+"Language-Team: none\n"
+"Language: ro\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=3; plural=(n==1 ? 0 : (n==0 || (n%100 > 0 && n%100 < "
+"20)) ? 1 : 2);;\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s în %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s cu %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s în %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(Intrare fără nume)"
+
+msgid "(Unnamed Rule)"
+msgstr "(Regulă fără nume)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(SNAT fără nume)"
+
+msgid "-- Please choose --"
+msgstr "-- Alege --"
+
+msgid "-- custom --"
+msgstr "-- personalizat --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr "Acţiune"
+
+msgid "Add"
+msgstr "Adaugă"
+
+msgid "Add and edit..."
+msgstr "Adaugă şi editează..."
+
+msgid "Advanced Settings"
+msgstr "Setări avansate"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Permite trecerea din <em>zonele sursa</em>."
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Permite trecerea catre <em>zonele sursa</em>."
+
+msgid "Any"
+msgstr "Oricare"
+
+msgid "Covered networks"
+msgstr "Retele acoperite"
+
+msgid "Custom Rules"
+msgstr "Reguli suplimentare"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+
+msgid "Destination IP address"
+msgstr "Destinaţie adresă IP"
+
+msgid "Destination address"
+msgstr "Destinaţie adresă"
+
+msgid "Destination port"
+msgstr "Portul destinatie"
+
+msgid "Destination zone"
+msgstr "Zona destinatie"
+
+msgid "Do not rewrite"
+msgstr "Nu rescrie"
+
+msgid "Drop invalid packets"
+msgstr "Descarcă pachetele invalide"
+
+msgid "Enable"
+msgstr "Activează"
+
+msgid "Enable NAT Loopback"
+msgstr "Activează loopback NAT"
+
+msgid "Enable SYN-flood protection"
+msgstr "Activează protecţia SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr "Activeaza log in aceasta zona"
+
+msgid "External IP address"
+msgstr "Adresă IP externă"
+
+msgid "External port"
+msgstr "Port extern"
+
+msgid "External zone"
+msgstr "Zonă externă"
+
+msgid "Extra arguments"
+msgstr ""
+
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Custom Rules"
+msgstr "Firewall - Reguli particularizate"
+
+msgid "Firewall - Port Forwards"
+msgstr ""
+
+msgid "Firewall - Traffic Rules"
+msgstr ""
+
+msgid "Firewall - Zone Settings"
+msgstr "Setari zona la firewall"
+
+msgid "Force connection tracking"
+msgstr "Forteaza urmarirea conexiunilor"
+
+msgid "Forward"
+msgstr "Forward"
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr ""
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr "Setari generale"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 şi IPv6"
+
+msgid "IPv4 only"
+msgstr "doar IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "doar IPv6"
+
+msgid "Input"
+msgstr "Intrare"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Forwardare intre-zone"
+
+msgid "Internal IP address"
+msgstr "Adresa IP interna"
+
+msgid "Internal port"
+msgstr "Port intern"
+
+msgid "Internal zone"
+msgstr "Zonă internă"
+
+msgid "Limit log messages"
+msgstr "Limitează mesaje în log"
+
+msgid "MSS clamping"
+msgstr "Ajustare MSS"
+
+msgid "Masquerading"
+msgstr "Translatare"
+
+msgid "Match"
+msgstr "Potrivire"
+
+msgid "Match ICMP type"
+msgstr "Potriveste pe tipul de ICMP"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr "Nume"
+
+msgid "New SNAT rule"
+msgstr "Regulă nouă SNAT"
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr ""
+
+msgid "New port forward"
+msgstr ""
+
+msgid "New source NAT"
+msgstr ""
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr ""
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr ""
+
+msgid "Other..."
+msgstr "Altele..."
+
+msgid "Output"
+msgstr "Ieşire"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr ""
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+
+msgid "Protocol"
+msgstr "Protocol"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr ""
+
+msgid "SNAT port"
+msgstr ""
+
+msgid "Source IP address"
+msgstr "Sursă adresă IP"
+
+msgid "Source MAC address"
+msgstr "Sursă adresă MAC"
+
+msgid "Source NAT"
+msgstr "Sursă NAT"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+msgid "Source address"
+msgstr "Adresa sursa"
+
+msgid "Source port"
+msgstr "Port sursa"
+
+msgid "Source zone"
+msgstr "Zona sursa"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr ""
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr "Zona %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr "Zone"
+
+msgid "accept"
+msgstr "accept"
+
+msgid "any"
+msgstr "oricare"
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
+msgstr ""
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Destinatie"
+
+#~ msgid "Family"
+#~ msgstr "Familia proto"
+
+#~ msgid "Source"
+#~ msgstr "Sursa"
+
+#~ msgid "Via"
+#~ msgstr "Prin"
+
+#~ msgid "(optional)"
+#~ msgstr "(optional)"
+
+#~ msgid "Intended destination address"
+#~ msgstr "Adresa destinatie intentionata"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Port intern (optional)"
+
+#~ msgid "Advanced Options"
+#~ msgstr "Optiuni avansate"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Reguli avansate"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Regulile avansate iti permit particularizarea firewall-ului dupa nevoi. "
+#~ "Numai conexiunile noi vor fi luate in calcul. Pachetele care apartin unor "
+#~ "conexiuni deja stabilite trec deja prin firewall."
+
+#~ msgid "Custom Rules (/etc/firewall.user)"
+#~ msgstr "Reguli suplimentare (/etc/firewall.user)"
+
+#~ msgid "Device"
+#~ msgstr "Dispozitiv"
+
+#~ msgid ""
+#~ "For DNAT, match incoming traffic directed at the given destination ip "
+#~ "address. For SNAT rewrite the source address to the given address."
+#~ msgstr ""
+#~ "Pentru DNAT, leaga traficul venit redirectat catre destinatia IP. Pentru "
+#~ "SNAT rescrie adresa sursa ca fiind adresa IP."
+
+#~ msgid "Overview"
+#~ msgstr "Sumar"
+
+#~ msgid "Port forwarding"
+#~ msgstr "Forwardare catre port"
+
+#~ msgid "Redirection type"
+#~ msgstr "Tipul de redirectare"
+
+#~ msgid "Redirections"
+#~ msgstr "Redirectari"
+
+#~ msgid "Rules"
+#~ msgstr "Reguli"
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "Redirectarea traficului"
diff --git a/applications/luci-app-firewall/po/ru/firewall.po b/applications/luci-app-firewall/po/ru/firewall.po
new file mode 100644
index 000000000..aa5c5a85e
--- /dev/null
+++ b/applications/luci-app-firewall/po/ru/firewall.po
@@ -0,0 +1,679 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: LuCI: firewall\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2013-09-05 16:02+0200\n"
+"Last-Translator: datasheet <michael.gritsaenko@gmail.com>\n"
+"Language-Team: Russian <x12ozmouse@ya.ru>\n"
+"Language: ru\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%"
+"10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+"X-Generator: Pootle 2.0.6\n"
+"X-Poedit-SourceCharset: UTF-8\n"
+
+msgid "%s in %s"
+msgstr "%s в %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s с %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s в %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(Запись без имени)"
+
+msgid "(Unnamed Rule)"
+msgstr "(Правило без имени)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(SNAT без имени)"
+
+msgid "-- Please choose --"
+msgstr "-- Пожалуйста, выберите --"
+
+msgid "-- custom --"
+msgstr "-- пользовательский --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> пакетов за <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr "<var>%d</var> пакетов за <var>%s</var>, подряд <var>%d</var> пакетов"
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> с пределом в %s"
+
+msgid "Action"
+msgstr "Действие"
+
+msgid "Add"
+msgstr "Добавить"
+
+msgid "Add and edit..."
+msgstr "Добавить и редактировать..."
+
+msgid "Advanced Settings"
+msgstr "Расширенные настройки"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Разрешить перенаправление из <em>зон-источников</em>:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Разрешить перенаправление в <em>зоны назначения</em>:"
+
+msgid "Any"
+msgstr "Любой"
+
+msgid "Covered networks"
+msgstr "Использовать сети"
+
+msgid "Custom Rules"
+msgstr "Пользовательские правила"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"Пользовательские правила позволяют выполнять произвольные команды iptables, "
+"которые так или иначе не покрываются данным фреймворком межсетевого экрана. "
+"Команды выполняются при каждом перезапуске межсетевого экрана, сразу после "
+"того, как загружен набор правил по умолчанию."
+
+msgid "Destination IP address"
+msgstr "IP-адрес назначения"
+
+msgid "Destination address"
+msgstr "Адрес назначения"
+
+msgid "Destination port"
+msgstr "Порт назначения"
+
+msgid "Destination zone"
+msgstr "Зона назначения"
+
+msgid "Do not rewrite"
+msgstr "Не перезаписывать"
+
+msgid "Drop invalid packets"
+msgstr "Не пропускать некорректные пакеты"
+
+msgid "Enable"
+msgstr "Включить"
+
+#, fuzzy
+msgid "Enable NAT Loopback"
+msgstr "Включить NAT Loopback"
+
+msgid "Enable SYN-flood protection"
+msgstr "Включить защиту от SYN-flood атак"
+
+msgid "Enable logging on this zone"
+msgstr "Включить журналирование в этой зоне"
+
+msgid "External IP address"
+msgstr "Внешний IP-адрес"
+
+msgid "External port"
+msgstr "Внешний порт"
+
+msgid "External zone"
+msgstr "Внешняя зона"
+
+msgid "Extra arguments"
+msgstr "Дополнительные аргументы"
+
+msgid "Firewall"
+msgstr "Межсетевой экран"
+
+msgid "Firewall - Custom Rules"
+msgstr "Межсетевой экран - Пользовательские правила"
+
+msgid "Firewall - Port Forwards"
+msgstr "Межсетевой экран - Перенаправление портов"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Межсетевой экран - Правила для трафика"
+
+msgid "Firewall - Zone Settings"
+msgstr "Межсетевой экран - Настройка зон"
+
+msgid "Force connection tracking"
+msgstr "Включить отслеживание соединений"
+
+msgid "Forward"
+msgstr "Перенаправление"
+
+msgid "Forward to"
+msgstr "Перенаправлять в"
+
+msgid "From %s in %s"
+msgstr "Из %s в %s"
+
+msgid "From %s in %s with source %s"
+msgstr "Из %s в %s с источником %s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "Из %s в %s с источниками %s и %s"
+
+msgid "General Settings"
+msgstr "Общие настройки"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 и IPv6"
+
+msgid "IPv4 only"
+msgstr "Только IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "Только IPv6"
+
+msgid "Input"
+msgstr "Входящий"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Перенаправление между зонами"
+
+msgid "Internal IP address"
+msgstr "Внутренний IP-адрес"
+
+msgid "Internal port"
+msgstr "Внутренний порт"
+
+msgid "Internal zone"
+msgstr "Внутренняя зона"
+
+msgid "Limit log messages"
+msgstr "Ограничить журнал сообщений"
+
+msgid "MSS clamping"
+msgstr "Ограничение MSS"
+
+msgid "Masquerading"
+msgstr "Маскарадинг"
+
+#, fuzzy
+msgid "Match"
+msgstr "Выбирать"
+
+msgid "Match ICMP type"
+msgstr "Соответствовать ICMP типу"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+"Перенаправить соответствующий трафик на определённый порт или диапазон "
+"портов. "
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Выбирать входящий трафик, направленный на порт или диапазон портов данного "
+"хоста"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+"Выбирать входящий трафик, исходящий из порта или диапазона портов "
+"клиентского хоста."
+
+msgid "Name"
+msgstr "Имя"
+
+msgid "New SNAT rule"
+msgstr "Новое правило SNAT"
+
+msgid "New forward rule"
+msgstr "Новое правило перенаправления"
+
+msgid "New input rule"
+msgstr "Новое правило для входящего трафика"
+
+msgid "New port forward"
+msgstr "Новое перенаправление порта"
+
+msgid "New source NAT"
+msgstr "Новый SNAT"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "Выбирать только входящий трафик, направленный на указанный IP-адрес."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Выбирать только входящий трафик от этих MAC-адресов."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+"Выбирать только входящий трафик от этого IP-адреса или диапазона адресов."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+"Выбирать только входящий трафик, исходящий из указанного порта или диапазона "
+"портов клиентского хоста"
+
+msgid "Open ports on router"
+msgstr "Открыть порты на маршрутизаторе"
+
+msgid "Other..."
+msgstr "Другое..."
+
+msgid "Output"
+msgstr "Исходящий"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+"Передаёт дополнительные аргументы iptables. Используйте с осторожностью!"
+
+msgid "Port Forwards"
+msgstr "Перенаправления портов"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"Перенаправленные портов позволяет удалённым компьютерам из Интернета "
+"соединяться с компьютером или службой внутри частной локальной сети."
+
+msgid "Protocol"
+msgstr "Протокол"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr "Перенаправить входящий трафик на указанный порт хоста внутренней сети"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Перенаправить входящий трафик на указанный хост внутренней сети"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "Использовать маскарадинг только для указанных подсетей-получателей"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "Использовать маскарадинг только для указанных подсетей-отправителей"
+
+msgid "Restrict to address family"
+msgstr "Использовать только семейство протоколов"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr "Перенаправлять соответствующий трафик к указанному адресу."
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+"Перенаправлять соответствующий трафик к указанному порту источника. Может "
+"быть пустым в случае, если необходимо перенаправить только IP-адрес."
+
+msgid "Rewrite to source %s"
+msgstr "Перенаправлять к источнику %s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "Перенаправлять к источнику %s, %s"
+
+msgid "SNAT IP address"
+msgstr "IP-адрес SNAT"
+
+msgid "SNAT port"
+msgstr "Порт SNAT"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/rrule.lua      #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# msgid "Traffic Redirection"
+# msgstr ""
+# msgid ""
+# "Traffic redirection allows you to change the destination address of "
+# "forwarded packets."
+# msgstr ""
+# msgid "Overview"
+# msgstr ""
+# msgid "Name"
+# msgstr ""
+# msgid "Source zone"
+# msgstr ""
+# msgid "Source MAC-address"
+# msgstr ""
+# msgid "Source port"
+# msgstr ""
+# msgid "Protocol"
+# msgstr ""
+msgid "Source IP address"
+msgstr "IP-адрес источника"
+
+msgid "Source MAC address"
+msgstr "MAC-адрес источника"
+
+msgid "Source NAT"
+msgstr "SNAT"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"SNAT - это особая форма маскарадинга (masquerading), позволяющая "
+"осуществлять детальный контроль над IP-адресом источника для исходящего "
+"трафика, например, перенаправление нескольких WAN-адресов во внутреннюю "
+"подсеть."
+
+msgid "Source address"
+msgstr "Адрес источника"
+
+msgid "Source port"
+msgstr "Порт источника"
+
+msgid "Source zone"
+msgstr "Зона-источник"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr "Межсетевой экран создает зоны в вашей сети для контроля трафика."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"Данные настройки управляют перенаправлением между этой (%s) и другими "
+"зонами. Трафиком <em>зон-получателей</em> является трафик <strong>исходящий "
+"из %q</strong>. Трафиком <em>зон-источников</em> является трафик "
+"<strong>направленый в %q</strong>. Перенаправление является "
+"<em>однонаправленным</em>, то есть перанаправление из lan в wan <em>не</em> "
+"допускает перенаправление трафика из wan в lan."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"На этой странице можно изменить расширенные настройки перенаправления "
+"портов. В большинстве случаев нет необходимости изменять эти параметры."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"На этой странице можно изменить расширенные настройки правил для трафика. В "
+"большинстве случаев нет необходимости изменять эти параметры."
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"Данная секция позволяет изменять общие настройки %q. Опции <em>входящий</em> "
+"и <em>исходящий</em> устанавливают политику по умолчанию для входящего и "
+"исходящего трафика. Опция <em>перенаправление</em> позволяет установить "
+"политику для трафика, который перенаправляется через несколько сетей в зоне. "
+"Пункт <em>использовать сети</em> позволяет указать, какие сети являются "
+"частью данной зоны."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "К %s, порту %s на <var>этом устройстве</var>"
+
+msgid "To %s in %s"
+msgstr "К %s в %s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "К %s на <var>этом устройстве</var>"
+
+msgid "To %s, %s in %s"
+msgstr "К %s, %s в %s"
+
+msgid "To source IP"
+msgstr "К IP-адресу источника"
+
+msgid "To source port"
+msgstr "К порту источника"
+
+msgid "Traffic Rules"
+msgstr "Правила для трафика"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"Правила для трафика определяют политику прохождения пакетов между разными "
+"зонами, например, запрет трафика между некоторыми хостами или открытие WAN-"
+"портов маршрутизатора."
+
+msgid "Via %s"
+msgstr "Через %s"
+
+msgid "Via %s at %s"
+msgstr "Через %s, порт %s"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"Вы можете указать несколько, выбрав \"-- пользовательский --\" и перечислив "
+"через пробел названия протоколов."
+
+msgid "Zone %q"
+msgstr "Зона %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Зона ⇒ Перенаправления"
+
+msgid "Zones"
+msgstr "Зоны"
+
+msgid "accept"
+msgstr "принимать"
+
+msgid "any"
+msgstr "любой"
+
+msgid "any host"
+msgstr "любого хоста"
+
+msgid "any router IP"
+msgstr "любой IP-адрес маршрутизатора"
+
+msgid "any zone"
+msgstr "любой зоны"
+
+msgid "don't track"
+msgstr "не отслеживать"
+
+msgid "drop"
+msgstr "не обрабатывать"
+
+msgid "reject"
+msgstr "отвергать"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Назначение"
+
+#~ msgid "Family"
+#~ msgstr "Семейство"
+
+#~ msgid "SNAT"
+#~ msgstr "SNAT"
+
+#~ msgid "Source"
+#~ msgstr "Источник"
+
+#~ msgid "To %s"
+#~ msgstr "к %s"
+
+#~ msgid "To %s at %s"
+#~ msgstr "к %s на %s"
+
+#~ msgid "Via"
+#~ msgstr "Через"
+
+#~ msgid "Accept forward"
+#~ msgstr "Принимать перенаправление"
+
+#~ msgid "Accept input"
+#~ msgstr "Принимать входящие"
+
+#~ msgid "Disable"
+#~ msgstr "Отключить"
+
+#~ msgid "Discard forward"
+#~ msgstr "Отвергать перенаправление"
+
+#~ msgid "Discard input"
+#~ msgstr "Выбрасывать входящие пакеты"
+
+#~ msgid "Do not track forward"
+#~ msgstr "Не отслеживать перенаправление"
+
+#~ msgid "Do not track input"
+#~ msgstr "Не отслеживать входные пакеты"
+
+#~ msgid "IP"
+#~ msgstr "IP-адрес"
+
+#~ msgid "IP range"
+#~ msgstr "Диапазон IP-адресов"
+
+#~ msgid "IPs"
+#~ msgstr "IP-адреса"
+
+#~ msgid "MAC"
+#~ msgstr "MAC-адрес"
+
+#~ msgid "MACs"
+#~ msgstr "MAC-адреса"
+
+#~ msgid "Refuse forward"
+#~ msgstr "Отвергать перенаправление"
+
+#~ msgid "Refuse input"
+#~ msgstr "Отвергать входящий трафик"
+
+#~ msgid "Rule is disabled"
+#~ msgstr "Правило выключено"
+
+#~ msgid "Rule is enabled"
+#~ msgstr "Правило включено"
+
+#~ msgid "day"
+#~ msgstr "день"
+
+#~ msgid "hour"
+#~ msgstr "час"
+
+#~ msgid "minute"
+#~ msgstr "мин"
+
+#~ msgid "not"
+#~ msgstr "не"
+
+#~ msgid "port"
+#~ msgstr "порт"
+
+#~ msgid "ports"
+#~ msgstr "порты"
+
+#~ msgid "second"
+#~ msgstr "сек"
+
+#~ msgid "type"
+#~ msgstr "тип"
+
+#~ msgid "types"
+#~ msgstr "типы"
+
+#~ msgid "(optional)"
+#~ msgstr "(необязательно)"
+
+#~ msgid "Intended destination address"
+#~ msgstr "Адрес назначения"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Внутренний порт (необязательно)"
+
+#~ msgid "Advanced Options"
+#~ msgstr "Расширенные опции"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Расширенные правила"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Расширенные правила позволяют настроить сетевой экран в соответствии с "
+#~ "вашими потребностями. Только новые соединения будут обработаны. Пакеты, "
+#~ "принадлежащие уже существующим соединениям, будут автоматически пропущены "
+#~ "через сетевой экран."
+
+#~ msgid "Custom Rules (/etc/firewall.user)"
+#~ msgstr "Пользовательские правила (/etc/firewall.user)"
+
+#~ msgid "Device"
+#~ msgstr "Устройство"
+
+#~ msgid ""
+#~ "For DNAT, match incoming traffic directed at the given destination ip "
+#~ "address. For SNAT rewrite the source address to the given address."
+#~ msgstr ""
+#~ "Для DNAT соответствующий трафик перенаправляется на введенный адрес "
+#~ "назначения. Для SNAT подменяется адрес источника на введенный."
+
+#~ msgid ""
+#~ "Match incoming traffic originating from the given source port or port "
+#~ "range on the client host"
+#~ msgstr ""
+#~ "Выбирать исходящий трафик отправленный с порта или диапазона портов "
+#~ "внешнего хоста"
+
+#~ msgid "Overview"
+#~ msgstr "Назад к обзору"
+
+#~ msgid "Port forwarding"
+#~ msgstr "Перенаправление портов"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "Перенаправление портов позволяет открыть доступ к внутренним службам из "
+#~ "внешней сети."
+
+#~ msgid "Redirection type"
+#~ msgstr "Тип перенаправления"
+
+#~ msgid "Redirections"
+#~ msgstr "Перенаправления"
+
+#~ msgid "Rules"
+#~ msgstr "Правила"
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "Перенаправление трафика"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "Перенаправление трафика позволяет изменить адрес получателя для "
+#~ "проходящих пакетов."
diff --git a/applications/luci-app-firewall/po/sk/firewall.po b/applications/luci-app-firewall/po/sk/firewall.po
new file mode 100644
index 000000000..32cd193f6
--- /dev/null
+++ b/applications/luci-app-firewall/po/sk/firewall.po
@@ -0,0 +1,432 @@
+msgid ""
+msgstr ""
+"Content-Type: text/plain; charset=UTF-8\n"
+"Project-Id-Version: PACKAGE VERSION\n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"MIME-Version: 1.0\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2;\n"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr ""
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr ""
+
+msgid "(Unnamed Rule)"
+msgstr ""
+
+msgid "(Unnamed SNAT)"
+msgstr ""
+
+msgid "-- Please choose --"
+msgstr ""
+
+msgid "-- custom --"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Add"
+msgstr ""
+
+msgid "Add and edit..."
+msgstr ""
+
+msgid "Advanced Settings"
+msgstr ""
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
+msgstr ""
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+
+msgid "Destination IP address"
+msgstr ""
+
+msgid "Destination address"
+msgstr ""
+
+msgid "Destination port"
+msgstr ""
+
+msgid "Destination zone"
+msgstr ""
+
+msgid "Do not rewrite"
+msgstr ""
+
+msgid "Drop invalid packets"
+msgstr ""
+
+msgid "Enable"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External IP address"
+msgstr ""
+
+msgid "External port"
+msgstr ""
+
+msgid "External zone"
+msgstr ""
+
+msgid "Extra arguments"
+msgstr ""
+
+msgid "Firewall"
+msgstr ""
+
+msgid "Firewall - Custom Rules"
+msgstr ""
+
+msgid "Firewall - Port Forwards"
+msgstr ""
+
+msgid "Firewall - Traffic Rules"
+msgstr ""
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
+
+msgid "Forward"
+msgstr ""
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr ""
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr ""
+
+msgid "IPv4"
+msgstr ""
+
+msgid "IPv4 and IPv6"
+msgstr ""
+
+msgid "IPv4 only"
+msgstr ""
+
+msgid "IPv6"
+msgstr ""
+
+msgid "IPv6 only"
+msgstr ""
+
+msgid "Input"
+msgstr ""
+
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+msgid "Internal IP address"
+msgstr ""
+
+msgid "Internal port"
+msgstr ""
+
+msgid "Internal zone"
+msgstr ""
+
+msgid "Limit log messages"
+msgstr ""
+
+msgid "MSS clamping"
+msgstr ""
+
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "New SNAT rule"
+msgstr ""
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr ""
+
+msgid "New port forward"
+msgstr ""
+
+msgid "New source NAT"
+msgstr ""
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr ""
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr ""
+
+msgid "Other..."
+msgstr ""
+
+msgid "Output"
+msgstr ""
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr ""
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+
+msgid "Protocol"
+msgstr ""
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr ""
+
+msgid "SNAT port"
+msgstr ""
+
+msgid "Source IP address"
+msgstr ""
+
+msgid "Source MAC address"
+msgstr ""
+
+msgid "Source NAT"
+msgstr ""
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+msgid "Source address"
+msgstr ""
+
+msgid "Source port"
+msgstr ""
+
+msgid "Source zone"
+msgstr ""
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr ""
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr ""
+
+msgid "accept"
+msgstr ""
+
+msgid "any"
+msgstr ""
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
+msgstr ""
+
+msgid "traffic"
+msgstr ""
diff --git a/applications/luci-app-firewall/po/sv/firewall.po b/applications/luci-app-firewall/po/sv/firewall.po
new file mode 100644
index 000000000..f3e7fd943
--- /dev/null
+++ b/applications/luci-app-firewall/po/sv/firewall.po
@@ -0,0 +1,433 @@
+msgid ""
+msgstr ""
+"Content-Type: text/plain; charset=UTF-8\n"
+"Project-Id-Version: PACKAGE VERSION\n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"Language: sv\n"
+"MIME-Version: 1.0\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr ""
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr ""
+
+msgid "(Unnamed Rule)"
+msgstr ""
+
+msgid "(Unnamed SNAT)"
+msgstr ""
+
+msgid "-- Please choose --"
+msgstr ""
+
+msgid "-- custom --"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Add"
+msgstr ""
+
+msgid "Add and edit..."
+msgstr ""
+
+msgid "Advanced Settings"
+msgstr ""
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
+msgstr ""
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+
+msgid "Destination IP address"
+msgstr ""
+
+msgid "Destination address"
+msgstr ""
+
+msgid "Destination port"
+msgstr ""
+
+msgid "Destination zone"
+msgstr ""
+
+msgid "Do not rewrite"
+msgstr ""
+
+msgid "Drop invalid packets"
+msgstr ""
+
+msgid "Enable"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External IP address"
+msgstr ""
+
+msgid "External port"
+msgstr ""
+
+msgid "External zone"
+msgstr ""
+
+msgid "Extra arguments"
+msgstr ""
+
+msgid "Firewall"
+msgstr ""
+
+msgid "Firewall - Custom Rules"
+msgstr ""
+
+msgid "Firewall - Port Forwards"
+msgstr ""
+
+msgid "Firewall - Traffic Rules"
+msgstr ""
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
+
+msgid "Forward"
+msgstr ""
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr ""
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr ""
+
+msgid "IPv4"
+msgstr ""
+
+msgid "IPv4 and IPv6"
+msgstr ""
+
+msgid "IPv4 only"
+msgstr ""
+
+msgid "IPv6"
+msgstr ""
+
+msgid "IPv6 only"
+msgstr ""
+
+msgid "Input"
+msgstr ""
+
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+msgid "Internal IP address"
+msgstr ""
+
+msgid "Internal port"
+msgstr ""
+
+msgid "Internal zone"
+msgstr ""
+
+msgid "Limit log messages"
+msgstr ""
+
+msgid "MSS clamping"
+msgstr ""
+
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "New SNAT rule"
+msgstr ""
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr ""
+
+msgid "New port forward"
+msgstr ""
+
+msgid "New source NAT"
+msgstr ""
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr ""
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr ""
+
+msgid "Other..."
+msgstr ""
+
+msgid "Output"
+msgstr ""
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr ""
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+
+msgid "Protocol"
+msgstr ""
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr ""
+
+msgid "SNAT port"
+msgstr ""
+
+msgid "Source IP address"
+msgstr ""
+
+msgid "Source MAC address"
+msgstr ""
+
+msgid "Source NAT"
+msgstr ""
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+msgid "Source address"
+msgstr ""
+
+msgid "Source port"
+msgstr ""
+
+msgid "Source zone"
+msgstr ""
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr ""
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr ""
+
+msgid "accept"
+msgstr ""
+
+msgid "any"
+msgstr ""
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
+msgstr ""
+
+msgid "traffic"
+msgstr ""
diff --git a/applications/luci-app-firewall/po/templates/firewall.pot b/applications/luci-app-firewall/po/templates/firewall.pot
new file mode 100644
index 000000000..402aa6973
--- /dev/null
+++ b/applications/luci-app-firewall/po/templates/firewall.pot
@@ -0,0 +1,425 @@
+msgid ""
+msgstr "Content-Type: text/plain; charset=UTF-8"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr ""
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr ""
+
+msgid "(Unnamed Rule)"
+msgstr ""
+
+msgid "(Unnamed SNAT)"
+msgstr ""
+
+msgid "-- Please choose --"
+msgstr ""
+
+msgid "-- custom --"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Add"
+msgstr ""
+
+msgid "Add and edit..."
+msgstr ""
+
+msgid "Advanced Settings"
+msgstr ""
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
+msgstr ""
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+
+msgid "Destination IP address"
+msgstr ""
+
+msgid "Destination address"
+msgstr ""
+
+msgid "Destination port"
+msgstr ""
+
+msgid "Destination zone"
+msgstr ""
+
+msgid "Do not rewrite"
+msgstr ""
+
+msgid "Drop invalid packets"
+msgstr ""
+
+msgid "Enable"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External IP address"
+msgstr ""
+
+msgid "External port"
+msgstr ""
+
+msgid "External zone"
+msgstr ""
+
+msgid "Extra arguments"
+msgstr ""
+
+msgid "Firewall"
+msgstr ""
+
+msgid "Firewall - Custom Rules"
+msgstr ""
+
+msgid "Firewall - Port Forwards"
+msgstr ""
+
+msgid "Firewall - Traffic Rules"
+msgstr ""
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
+
+msgid "Forward"
+msgstr ""
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr ""
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr ""
+
+msgid "IPv4"
+msgstr ""
+
+msgid "IPv4 and IPv6"
+msgstr ""
+
+msgid "IPv4 only"
+msgstr ""
+
+msgid "IPv6"
+msgstr ""
+
+msgid "IPv6 only"
+msgstr ""
+
+msgid "Input"
+msgstr ""
+
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+msgid "Internal IP address"
+msgstr ""
+
+msgid "Internal port"
+msgstr ""
+
+msgid "Internal zone"
+msgstr ""
+
+msgid "Limit log messages"
+msgstr ""
+
+msgid "MSS clamping"
+msgstr ""
+
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "New SNAT rule"
+msgstr ""
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr ""
+
+msgid "New port forward"
+msgstr ""
+
+msgid "New source NAT"
+msgstr ""
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr ""
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr ""
+
+msgid "Other..."
+msgstr ""
+
+msgid "Output"
+msgstr ""
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr ""
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+
+msgid "Protocol"
+msgstr ""
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr ""
+
+msgid "SNAT port"
+msgstr ""
+
+msgid "Source IP address"
+msgstr ""
+
+msgid "Source MAC address"
+msgstr ""
+
+msgid "Source NAT"
+msgstr ""
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+msgid "Source address"
+msgstr ""
+
+msgid "Source port"
+msgstr ""
+
+msgid "Source zone"
+msgstr ""
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr ""
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr ""
+
+msgid "accept"
+msgstr ""
+
+msgid "any"
+msgstr ""
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
+msgstr ""
+
+msgid "traffic"
+msgstr ""
diff --git a/applications/luci-app-firewall/po/tr/firewall.po b/applications/luci-app-firewall/po/tr/firewall.po
new file mode 100644
index 000000000..60a2190fe
--- /dev/null
+++ b/applications/luci-app-firewall/po/tr/firewall.po
@@ -0,0 +1,432 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Last-Translator: Automatically generated\n"
+"Language-Team: none\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr ""
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr ""
+
+msgid "(Unnamed Rule)"
+msgstr ""
+
+msgid "(Unnamed SNAT)"
+msgstr ""
+
+msgid "-- Please choose --"
+msgstr ""
+
+msgid "-- custom --"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr ""
+
+msgid "Add"
+msgstr ""
+
+msgid "Add and edit..."
+msgstr ""
+
+msgid "Advanced Settings"
+msgstr ""
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
+msgstr ""
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+
+msgid "Destination IP address"
+msgstr ""
+
+msgid "Destination address"
+msgstr ""
+
+msgid "Destination port"
+msgstr ""
+
+msgid "Destination zone"
+msgstr ""
+
+msgid "Do not rewrite"
+msgstr ""
+
+msgid "Drop invalid packets"
+msgstr ""
+
+msgid "Enable"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+msgid "Enable SYN-flood protection"
+msgstr ""
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External IP address"
+msgstr ""
+
+msgid "External port"
+msgstr ""
+
+msgid "External zone"
+msgstr ""
+
+msgid "Extra arguments"
+msgstr ""
+
+msgid "Firewall"
+msgstr ""
+
+msgid "Firewall - Custom Rules"
+msgstr ""
+
+msgid "Firewall - Port Forwards"
+msgstr ""
+
+msgid "Firewall - Traffic Rules"
+msgstr ""
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
+
+msgid "Forward"
+msgstr ""
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr ""
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr ""
+
+msgid "IPv4"
+msgstr ""
+
+msgid "IPv4 and IPv6"
+msgstr ""
+
+msgid "IPv4 only"
+msgstr ""
+
+msgid "IPv6"
+msgstr ""
+
+msgid "IPv6 only"
+msgstr ""
+
+msgid "Input"
+msgstr ""
+
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+msgid "Internal IP address"
+msgstr ""
+
+msgid "Internal port"
+msgstr ""
+
+msgid "Internal zone"
+msgstr ""
+
+msgid "Limit log messages"
+msgstr ""
+
+msgid "MSS clamping"
+msgstr ""
+
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "New SNAT rule"
+msgstr ""
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr ""
+
+msgid "New port forward"
+msgstr ""
+
+msgid "New source NAT"
+msgstr ""
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr ""
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr ""
+
+msgid "Other..."
+msgstr ""
+
+msgid "Output"
+msgstr ""
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr ""
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+
+msgid "Protocol"
+msgstr ""
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr ""
+
+msgid "SNAT port"
+msgstr ""
+
+msgid "Source IP address"
+msgstr ""
+
+msgid "Source MAC address"
+msgstr ""
+
+msgid "Source NAT"
+msgstr ""
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+msgid "Source address"
+msgstr ""
+
+msgid "Source port"
+msgstr ""
+
+msgid "Source zone"
+msgstr ""
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr ""
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr ""
+
+msgid "accept"
+msgstr ""
+
+msgid "any"
+msgstr ""
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr ""
+
+msgid "reject"
+msgstr ""
+
+msgid "traffic"
+msgstr ""
diff --git a/applications/luci-app-firewall/po/uk/firewall.po b/applications/luci-app-firewall/po/uk/firewall.po
new file mode 100644
index 000000000..370530650
--- /dev/null
+++ b/applications/luci-app-firewall/po/uk/firewall.po
@@ -0,0 +1,619 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"PO-Revision-Date: 2012-12-29 12:53+0200\n"
+"Last-Translator: Yurii <yuripet@gmail.com>\n"
+"Language-Team: none\n"
+"Language: uk\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%"
+"10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s у %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s із %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s у %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(Запис без імені)"
+
+msgid "(Unnamed Rule)"
+msgstr "(Правило без імені)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(SNAT без імені)"
+
+msgid "-- Please choose --"
+msgstr "-- Виберіть --"
+
+msgid "-- custom --"
+msgstr "-- додатково --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> пакетів за <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr "<var>%d</var> пакетів за <var>%s</var>, підряд <var>%d</var> пакетів"
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> з лімітом %s"
+
+msgid "Action"
+msgstr "Дія"
+
+msgid "Add"
+msgstr "Додати"
+
+msgid "Add and edit..."
+msgstr "Додати та редагувати..."
+
+msgid "Advanced Settings"
+msgstr "Розширені настройки"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "Дозволити спрямовування від <em>зон-джерел</em>:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "Дозволити спрямовування до <em>зон призначення</em>:"
+
+msgid "Any"
+msgstr "Будь-який"
+
+msgid "Covered networks"
+msgstr "Покриті мережі"
+
+msgid "Custom Rules"
+msgstr "Настроювані правила"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"Настроювані правила дозволяють виконувати довільні команди <em>iptables</"
+"em>, які в іншому випадку не охоплені в межах брандмауера. Команди "
+"виконуються після кожного перезавантаження брандмауера, відразу після "
+"завантаження типового набору правил."
+
+msgid "Destination IP address"
+msgstr "IP-адреса призначення"
+
+msgid "Destination address"
+msgstr "Адреса призначення"
+
+msgid "Destination port"
+msgstr "Порт призначення"
+
+msgid "Destination zone"
+msgstr "Зона призначення"
+
+msgid "Do not rewrite"
+msgstr "Не перезаписувати"
+
+msgid "Drop invalid packets"
+msgstr "Відкидати помилкові пакети"
+
+msgid "Enable"
+msgstr "Увімкнути"
+
+msgid "Enable NAT Loopback"
+msgstr "Увімкнути NAT Loopback"
+
+msgid "Enable SYN-flood protection"
+msgstr "Увімкнути захист від SYN-flood"
+
+msgid "Enable logging on this zone"
+msgstr "Увімкнути реєстрування у цій зоні"
+
+msgid "External IP address"
+msgstr "Зовнішня IP-адреса"
+
+msgid "External port"
+msgstr "Зовнішній порт"
+
+msgid "External zone"
+msgstr "Зовнішня зона"
+
+msgid "Extra arguments"
+msgstr "Додаткові аргументи"
+
+msgid "Firewall"
+msgstr "Брандмауер"
+
+msgid "Firewall - Custom Rules"
+msgstr "Брандмауер — Настроювані правила"
+
+msgid "Firewall - Port Forwards"
+msgstr "Брандмауер — Спрямовування портів"
+
+msgid "Firewall - Traffic Rules"
+msgstr "Брандмауер — Правила трафіка"
+
+msgid "Firewall - Zone Settings"
+msgstr "Брандмауер — Параметри зон"
+
+msgid "Force connection tracking"
+msgstr "Увімкнути відстеження з'єднань"
+
+msgid "Forward"
+msgstr "Спрямовування"
+
+msgid "Forward to"
+msgstr "спрямовування до"
+
+msgid "From %s in %s"
+msgstr "%s у %s"
+
+msgid "From %s in %s with source %s"
+msgstr "%s у %s з вихідним %s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "%s у %s з вихідним %s та %s"
+
+msgid "General Settings"
+msgstr "Загальні настройки"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 та IPv6"
+
+msgid "IPv4 only"
+msgstr "Лише IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "Лише IPv6"
+
+msgid "Input"
+msgstr "Вхідний"
+
+msgid "Inter-Zone Forwarding"
+msgstr "Спрямовування крізь зони"
+
+msgid "Internal IP address"
+msgstr "Внутрішня IP-адреса"
+
+msgid "Internal port"
+msgstr "Внутрішній порт"
+
+msgid "Internal zone"
+msgstr "Внутрішня зона"
+
+msgid "Limit log messages"
+msgstr "Обмеження повідомлень журналу"
+
+msgid "MSS clamping"
+msgstr "Затискання MSS"
+
+msgid "Masquerading"
+msgstr "Підміна"
+
+msgid "Match"
+msgstr "Зіставляти"
+
+msgid "Match ICMP type"
+msgstr "Зіставляти ICMP типу"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+"Зіставляти трафік, що спрямовується на заданий порт призначення або діапазон "
+"портів."
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+"Зіставляти вхідний трафік, спрямований на заданий порт призначення або "
+"діапазон портів цього вузла."
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+"Зіставляти вхідний трафік, що виникає на заданому порту джерела або "
+"діапазоні портів вузла клієнта."
+
+msgid "Name"
+msgstr "Ім'я"
+
+msgid "New SNAT rule"
+msgstr "Нове правило SNAT"
+
+msgid "New forward rule"
+msgstr "Нове правило спрямовування"
+
+msgid "New input rule"
+msgstr "Нове вхідне правило"
+
+msgid "New port forward"
+msgstr "Нове спрямовування порту"
+
+msgid "New source NAT"
+msgstr "Новий NAT джерела"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "Зіставляти тільки вхідний трафік, спрямований на задану IP-адресу."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "Зіставляти тільки вхідний трафік від цих MAC-адрес."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr "Зіставляти тільки вхідний трафік від цього IP чи діапазону."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+"Зіставляти тільки вхідний трафік, що виникає на заданому порту джерела або "
+"діапазоні портів вузла клієнта."
+
+msgid "Open ports on router"
+msgstr "Відкрити порти на роутері"
+
+msgid "Other..."
+msgstr "Інше..."
+
+msgid "Output"
+msgstr "Вихідний"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+"Передача додаткових аргументів для IPTables. Використовуйте з обережністю!"
+
+msgid "Port Forwards"
+msgstr "Спрямовування портів"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+"Спрямовування портів дозволяє віддаленим комп'ютерам з Інтернету "
+"підключатися до певного комп'ютера або служби у приватній мережі."
+
+msgid "Protocol"
+msgstr "Протокол"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+"Переспрямувати відповідний вхідний трафік на заданий порт внутрішнього вузла"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "Переспрямувати відповідний вхідний трафік на заданий внутрішній вузол"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "Обмежити підміну заданими підмережами призначення"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "Обмежити підміну заданими вихідними підмережами"
+
+msgid "Restrict to address family"
+msgstr "Обмежити сімейство протоколів"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr "Переписувати зіставлений трафік на вказану адресу."
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+"Переписувати зіставлений трафік на вказаний порт джерела. Може залишатися "
+"порожнім, щоб переписувати тільки IP-адресу."
+
+msgid "Rewrite to source %s"
+msgstr "перезапис на вихідний %s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "перезапис на вихідний %s, %s"
+
+msgid "SNAT IP address"
+msgstr "IP-адреса SNAT"
+
+msgid "SNAT port"
+msgstr "Порт SNAT"
+
+msgid "Source IP address"
+msgstr "IP-адреса джерела"
+
+msgid "Source MAC address"
+msgstr "MAC-адреса джерела"
+
+msgid "Source NAT"
+msgstr "NAT джерела"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"NAT джерела є специфічною формою маскування, яка дозволяє мати детальний "
+"контроль над IP джерела, що використовуються для вихідного трафіку, "
+"наприклад, для зіставлення кількох WAN-адрес внутрішнім підмережам."
+
+msgid "Source address"
+msgstr "Адреса джерела"
+
+msgid "Source port"
+msgstr "Порт джерела"
+
+msgid "Source zone"
+msgstr "Зона-джерело"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"Брандмауер створює зони поверх ваших мережевих інтерфейсів для управління "
+"потоком мережевого трафіку."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"Опції, наведені нижче, управляють політиками спрямовування між цією (%s) та "
+"іншими зонами. <em>Зони призначення</em> покриваються трафіком, що "
+"<strong>виходить з %q</strong>. <em>Зони-джерела</em> покриваються трафіком "
+"з інших зон, <strong>спрямованим на %q</strong>. Правила спрямування є "
+"<em>односпрямованим</em>, тобто, спрямування від LAN до WAN <em>не</em> "
+"означає, що є також дозвіл спрямовувати від WAN в LAN."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"На цій сторінці можна змінити додаткові властивості елемента спрямовування "
+"портів. У більшості випадків змінювати ці параметри немає необхідності."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+"На цій сторінці можна змінити додаткові властивості елемента правил трафіка, "
+"таких як відповідні параметри джерела та вузлів призначення."
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"Цей розділ визначає загальні властивості %q. Параметри <em>вхідний</em> і "
+"<em>вихідний</em> задають типову політику для трафіку на вході й виході з "
+"цієї зони, а параметр \"спрямовування\" описує політику спрямовування "
+"трафіку між різними мережами в межах зони. Пункт <em>вкриті мережі</em> "
+"визначає, які доступні мережі є членами цієї зони."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "%s на %s <var>цього пристрою</var>"
+
+msgid "To %s in %s"
+msgstr "%s у %s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "%s на <var>цього пристрою</var>"
+
+msgid "To %s, %s in %s"
+msgstr "%s, %s у %s"
+
+msgid "To source IP"
+msgstr "До IP джерела"
+
+msgid "To source port"
+msgstr "До порту джерела"
+
+msgid "Traffic Rules"
+msgstr "Правила трафіка"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"Правила трафіка визначають політику для пакетів, що пересилаються між "
+"різними зонами, наприклад, відхиляти трафік між певними вузлами або відкрити "
+"порти WAN на маршрутизаторі."
+
+msgid "Via %s"
+msgstr "Через %s"
+
+msgid "Via %s at %s"
+msgstr "Через %s на %s"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+"Ви можете вказати кілька протоколів, вибравши \"-- додатково --\", а потім "
+"увівши їх, розділяючи пробілами."
+
+msgid "Zone %q"
+msgstr "Зона %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "Зона ⇒ Спрямовування"
+
+msgid "Zones"
+msgstr "Зони"
+
+msgid "accept"
+msgstr "приймати"
+
+msgid "any"
+msgstr "будь-який"
+
+msgid "any host"
+msgstr "будь-який вузол"
+
+msgid "any router IP"
+msgstr "будь-який IP роутера"
+
+msgid "any zone"
+msgstr "будь-якій зоні"
+
+msgid "don't track"
+msgstr "не відстеж."
+
+msgid "drop"
+msgstr "опускати"
+
+msgid "reject"
+msgstr "відкидати"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Призначення"
+
+#~ msgid "Family"
+#~ msgstr "Сімейство"
+
+#~ msgid "Forward to %s in %s"
+#~ msgstr "спрямовування до %s у %s"
+
+#~ msgid "Forward to %s, %s in %s"
+#~ msgstr "спрямовування до %s, %s у %s"
+
+#~ msgid "SNAT"
+#~ msgstr "SNAT"
+
+#~ msgid "Source"
+#~ msgstr "Джерело"
+
+#~ msgid "To %s"
+#~ msgstr "%s"
+
+#~ msgid "To %s at %s"
+#~ msgstr "%s через %s"
+
+#~ msgid "Via"
+#~ msgstr "Через"
+
+#~ msgid "Accept forward"
+#~ msgstr "Приймати спрямовування"
+
+#~ msgid "Accept input"
+#~ msgstr "Приймати вхідні"
+
+#~ msgid "Disable"
+#~ msgstr "Вимкнути"
+
+#~ msgid "Discard forward"
+#~ msgstr "Скасувати спрямовування"
+
+#~ msgid "Discard input"
+#~ msgstr "Скасувати введення"
+
+#~ msgid "Do not track forward"
+#~ msgstr "Не відстежувати спрямовування"
+
+#~ msgid "Do not track input"
+#~ msgstr "Не відстежувати введення"
+
+#~ msgid "IP"
+#~ msgstr "IP"
+
+#~ msgid "IP range"
+#~ msgstr "діапазон IP"
+
+#~ msgid "IPs"
+#~ msgstr "IP"
+
+#~ msgid "MAC"
+#~ msgstr "MAC"
+
+#~ msgid "MACs"
+#~ msgstr "MAC"
+
+#~ msgid "Refuse forward"
+#~ msgstr "Відкидати спрямовування"
+
+#~ msgid "Refuse input"
+#~ msgstr "Відкидати вхідні дані"
+
+#~ msgid "Rule is disabled"
+#~ msgstr "Правило вимкнене"
+
+#~ msgid "Rule is enabled"
+#~ msgstr "Правило ввімкнене"
+
+#~ msgid "day"
+#~ msgstr "день"
+
+#~ msgid "hour"
+#~ msgstr "годину"
+
+#~ msgid "minute"
+#~ msgstr "хвилину"
+
+#~ msgid "not"
+#~ msgstr "не"
+
+#~ msgid "port"
+#~ msgstr "порт"
+
+#~ msgid "ports"
+#~ msgstr "порти"
+
+#~ msgid "second"
+#~ msgstr "секунду"
+
+#~ msgid "type"
+#~ msgstr "типом"
+
+#~ msgid "types"
+#~ msgstr "типами"
+
+#~ msgid "(optional)"
+#~ msgstr "(необов'язково)"
+
+#~ msgid "Intended destination address"
+#~ msgstr "Адреса призначення"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Внутрішній порт (необов'язково)"
+
+#~ msgid "Advanced Options"
+#~ msgstr "Додаткові параметри"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Розширені правила"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Розширені правила дозволяють налаштувати брандмауер для ваших потреб. "
+#~ "Лише нові з'єднання будуть узгоджені. Пакети, що належать вже відкриті "
+#~ "з'єднання автоматично пропускаються брандмауером."
+
+#~ msgid "Custom Rules (/etc/firewall.user)"
+#~ msgstr "Користувацькі правила (/etc/firewall.user)"
+
+#~ msgid "Device"
+#~ msgstr "Пристрій"
+
+#~ msgid ""
+#~ "For DNAT, match incoming traffic directed at the given destination ip "
+#~ "address. For SNAT rewrite the source address to the given address."
+#~ msgstr ""
+#~ "Для DNAT узгоджує вхідний трафік, спрямований до відповідної IP адреси "
+#~ "призначення. Для SNAT заміняє адресу джерела на дану адресу"
diff --git a/applications/luci-app-firewall/po/vi/firewall.po b/applications/luci-app-firewall/po/vi/firewall.po
new file mode 100644
index 000000000..645aa8829
--- /dev/null
+++ b/applications/luci-app-firewall/po/vi/firewall.po
@@ -0,0 +1,565 @@
+#  luci-fw.pot
+#  generated from ./applications/luci-fw/luasrc/i18n/luci-fw.en.lua
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2009-08-16 14:02+0200\n"
+"Last-Translator: Hong Phuc Dang <dhppat@gmail.com>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Pootle 1.1.0\n"
+
+msgid "%s in %s"
+msgstr ""
+
+msgid "%s%s with %s"
+msgstr ""
+
+msgid "%s, %s in %s"
+msgstr ""
+
+msgid "(Unnamed Entry)"
+msgstr ""
+
+msgid "(Unnamed Rule)"
+msgstr ""
+
+msgid "(Unnamed SNAT)"
+msgstr ""
+
+msgid "-- Please choose --"
+msgstr ""
+
+msgid "-- custom --"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr ""
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr ""
+
+msgid "<var>%s</var> and limit to %s"
+msgstr ""
+
+msgid "Action"
+msgstr "Action"
+
+msgid "Add"
+msgstr ""
+
+msgid "Add and edit..."
+msgstr ""
+
+msgid "Advanced Settings"
+msgstr ""
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr ""
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr ""
+
+msgid "Any"
+msgstr ""
+
+msgid "Covered networks"
+msgstr ""
+
+msgid "Custom Rules"
+msgstr ""
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+
+msgid "Destination IP address"
+msgstr ""
+
+msgid "Destination address"
+msgstr "Địa chỉ điểm đến"
+
+msgid "Destination port"
+msgstr "Cổng điểm đến"
+
+#, fuzzy
+msgid "Destination zone"
+msgstr "Điểm đến"
+
+msgid "Do not rewrite"
+msgstr ""
+
+msgid "Drop invalid packets"
+msgstr "Bỏ qua nhưng gói không hợp lý"
+
+msgid "Enable"
+msgstr ""
+
+msgid "Enable NAT Loopback"
+msgstr ""
+
+#, fuzzy
+msgid "Enable SYN-flood protection"
+msgstr "SYN-flood bảo vệ "
+
+msgid "Enable logging on this zone"
+msgstr ""
+
+msgid "External IP address"
+msgstr ""
+
+msgid "External port"
+msgstr "External port"
+
+msgid "External zone"
+msgstr ""
+
+msgid "Extra arguments"
+msgstr ""
+
+msgid "Firewall"
+msgstr "Firewall"
+
+msgid "Firewall - Custom Rules"
+msgstr ""
+
+msgid "Firewall - Port Forwards"
+msgstr ""
+
+msgid "Firewall - Traffic Rules"
+msgstr ""
+
+msgid "Firewall - Zone Settings"
+msgstr ""
+
+msgid "Force connection tracking"
+msgstr ""
+
+msgid "Forward"
+msgstr ""
+
+msgid "Forward to"
+msgstr ""
+
+msgid "From %s in %s"
+msgstr ""
+
+msgid "From %s in %s with source %s"
+msgstr ""
+
+msgid "From %s in %s with source %s and %s"
+msgstr ""
+
+msgid "General Settings"
+msgstr ""
+
+msgid "IPv4"
+msgstr ""
+
+msgid "IPv4 and IPv6"
+msgstr ""
+
+msgid "IPv4 only"
+msgstr ""
+
+msgid "IPv6"
+msgstr ""
+
+msgid "IPv6 only"
+msgstr ""
+
+msgid "Input"
+msgstr "Input"
+
+msgid "Inter-Zone Forwarding"
+msgstr ""
+
+#, fuzzy
+msgid "Internal IP address"
+msgstr "Internal address"
+
+#, fuzzy
+msgid "Internal port"
+msgstr "External port"
+
+msgid "Internal zone"
+msgstr ""
+
+msgid "Limit log messages"
+msgstr ""
+
+#, fuzzy
+msgid "MSS clamping"
+msgstr "MSS Clamping"
+
+msgid "Masquerading"
+msgstr ""
+
+msgid "Match"
+msgstr ""
+
+msgid "Match ICMP type"
+msgstr ""
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr ""
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr ""
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr ""
+
+msgid "Name"
+msgstr ""
+
+msgid "New SNAT rule"
+msgstr ""
+
+msgid "New forward rule"
+msgstr ""
+
+msgid "New input rule"
+msgstr ""
+
+msgid "New port forward"
+msgstr ""
+
+msgid "New source NAT"
+msgstr ""
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr ""
+
+msgid "Only match incoming traffic from these MACs."
+msgstr ""
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr ""
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr ""
+
+msgid "Open ports on router"
+msgstr ""
+
+msgid "Other..."
+msgstr ""
+
+msgid "Output"
+msgstr "Output"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr ""
+
+msgid "Port Forwards"
+msgstr ""
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr ""
+
+msgid "Protocol"
+msgstr ""
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr ""
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr ""
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr ""
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr ""
+
+msgid "Restrict to address family"
+msgstr ""
+
+msgid "Rewrite matched traffic to the given address."
+msgstr ""
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr ""
+
+msgid "Rewrite to source %s"
+msgstr ""
+
+msgid "Rewrite to source %s, %s"
+msgstr ""
+
+msgid "SNAT IP address"
+msgstr ""
+
+msgid "SNAT port"
+msgstr ""
+
+#, fuzzy
+msgid "Source IP address"
+msgstr "Đỉa chỉ MAC nguồn"
+
+msgid "Source MAC address"
+msgstr ""
+
+msgid "Source NAT"
+msgstr ""
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+
+#, fuzzy
+msgid "Source address"
+msgstr "Đỉa chỉ MAC nguồn"
+
+msgid "Source port"
+msgstr "Cổng nguồn"
+
+#, fuzzy
+msgid "Source zone"
+msgstr "Cổng nguồn"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr ""
+"The firewall tạo zones trên giao diện mạng lưới để điều triển sự dòng lưu "
+"thông của mạng."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr ""
+
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s in %s"
+msgstr ""
+
+msgid "To %s on <var>this device</var>"
+msgstr ""
+
+msgid "To %s, %s in %s"
+msgstr ""
+
+msgid "To source IP"
+msgstr ""
+
+msgid "To source port"
+msgstr ""
+
+msgid "Traffic Rules"
+msgstr ""
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+
+msgid "Via %s"
+msgstr ""
+
+msgid "Via %s at %s"
+msgstr ""
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr ""
+
+msgid "Zone %q"
+msgstr ""
+
+msgid "Zone ⇒ Forwardings"
+msgstr ""
+
+msgid "Zones"
+msgstr "Zones"
+
+msgid "accept"
+msgstr "chấp nhận"
+
+msgid "any"
+msgstr ""
+
+msgid "any host"
+msgstr ""
+
+msgid "any router IP"
+msgstr ""
+
+msgid "any zone"
+msgstr ""
+
+msgid "don't track"
+msgstr ""
+
+msgid "drop"
+msgstr "drop"
+
+msgid "reject"
+msgstr "Không chấp nhận"
+
+msgid "traffic"
+msgstr ""
+
+#~ msgid "Destination"
+#~ msgstr "Điểm đến"
+
+#~ msgid "Source"
+#~ msgstr "Nguồn"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "Internal port (tùy chọn)"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "Luật cấp cao"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "Luật cấp cao để bạn tùy chỉnh firewall mà bạn cần. Chỉ những kết nối mới "
+#~ "sẽ được làm cho phù hợp. Các gói thuộc đã mở các kết nối sẽ tự động cho "
+#~ "phép vượt qua firewall."
+
+#~ msgid "Port forwarding"
+#~ msgstr "Cổng chuyển tiếp"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr ""
+#~ "Cổng chuyển tiếp cho phép cung cấp những dịch vụ mạng trong vùng tới một "
+#~ "ngoại mạng. "
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "Sự chuyển hướng lưu thông"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr ""
+#~ "Sự chuyển hướng lưu thông cho phép bạn thay đổi địa chỉ điểm đến của gói "
+#~ "chuyển tiếp. "
+
+#, fuzzy
+#~ msgid "Network"
+#~ msgstr "Networks"
+
+#~ msgid "Traffic Control"
+#~ msgstr "Điều khiển lưu thông"
+
+#~ msgid "Zone-to-Zone traffic"
+#~ msgstr "Lưu thông Zone- to - Zone"
+
+#, fuzzy
+#~ msgid ""
+#~ "Here you can specify which network traffic is allowed to flow between "
+#~ "network zones. Only new connections will be matched.  Packets belonging "
+#~ "to already open connections are automatically allowed to pass the "
+#~ "firewall. If you experience occasional connection problems try enabling "
+#~ "MSS Clamping otherwise disable it for performance reasons."
+#~ msgstr ""
+#~ "Tại đây bạn có thể xác định được mạng lưới giao thông được phép lưu lượng "
+#~ "qua network zone. Chỉ có kết nối mới sẽ là phù hợp. Các gói thuộc kết nối "
+#~ "đã mở được tự động được cho phép để vượt qua firewall. Nếu bạn gặp vấn đề "
+#~ "kết nối thử kích hoạt MSS Clamping hoặc vô hiệu hóa nó vì lý do thực thi."
+
+#~ msgid "Zone"
+#~ msgstr "Zone"
+
+#, fuzzy
+#~ msgid "Destination IP"
+#~ msgstr "Điểm đến"
+
+#, fuzzy
+#~ msgid "IP address"
+#~ msgstr "Địa chỉ IP"
+
+#, fuzzy
+#~ msgid "Source MAC-address"
+#~ msgstr "Đỉa chỉ MAC nguồn"
+
+#~ msgid "Custom forwarding"
+#~ msgstr "Tùy chỉnh chuyển tiếp"
+
+#~ msgid "Input Zone"
+#~ msgstr "Input Zone"
+
+#~ msgid "Output Zone"
+#~ msgstr "Output Zone"
+
+#~ msgid "External Zone"
+#~ msgstr "External Zone"
+
+#~ msgid "Source MAC"
+#~ msgstr "Nguồn MAC"
+
+#~ msgid "Defaults"
+#~ msgstr "Mặc định"
+
+#~ msgid ""
+#~ "These are the default settings that are used if no other rules match."
+#~ msgstr ""
+#~ "Có những cài đặt mặc định được dùng nếu những cái luật khác không phù hợp"
+
+#~ msgid ""
+#~ "Zones part the network interfaces into certain isolated areas to separate "
+#~ "network traffic. One or more networks can belong to a zone. The MASQ-flag "
+#~ "enables NAT masquerading for all outgoing traffic on this zone."
+#~ msgstr ""
+#~ "Phân vùng các phần giao diện mạng vào những khu vực cô lập nhất định để "
+#~ "phân chia mạng lưới lưu thông. Một hoặc nhiều mạng lưới có thể thuộc vào "
+#~ "một khu. Các MASQ-flag kích hoạt NAT masquerading cho tất cả các lưu "
+#~ "lượng giao thông trên khu vực này."
+
+#~ msgid "MASQ"
+#~ msgstr "MASQ"
+
+#~ msgid "contained networks"
+#~ msgstr "contained networks"
diff --git a/applications/luci-app-firewall/po/zh-cn/firewall.po b/applications/luci-app-firewall/po/zh-cn/firewall.po
new file mode 100644
index 000000000..03c1b003b
--- /dev/null
+++ b/applications/luci-app-firewall/po/zh-cn/firewall.po
@@ -0,0 +1,589 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2010-03-30 17:00+0200\n"
+"PO-Revision-Date: 2014-06-14 18:05+0200\n"
+"Last-Translator: jame-he <755085131@qq.com>\n"
+"Language-Team: QQ Group 75543259 <axishero@foxmail.com>\n"
+"Language: zh_CN\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s 位于 %s"
+
+msgid "%s%s with %s"
+msgstr "%s%s 和 %s"
+
+msgid "%s, %s in %s"
+msgstr "%s, %s 位于 %s"
+
+msgid "(Unnamed Entry)"
+msgstr "(未命名条目)"
+
+msgid "(Unnamed Rule)"
+msgstr "(未命名规则)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(未命名SNAT)"
+
+msgid "-- Please choose --"
+msgstr "-- 请选择 --"
+
+msgid "-- custom --"
+msgstr "-- 自定义 --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> 包.每 <var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr "<var>%d</var> 包. 每 <var>%s</var>, 突发 <var>%d</var> 包."
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> 并且限制到 %s"
+
+msgid "Action"
+msgstr "动作"
+
+msgid "Add"
+msgstr "添加"
+
+msgid "Add and edit..."
+msgstr "添加并编辑..."
+
+msgid "Advanced Settings"
+msgstr "高级设置"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "允许从<em>源区域</em>转发"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "允许转发到<em>目标区域</em>"
+
+msgid "Any"
+msgstr "任何"
+
+msgid "Covered networks"
+msgstr "覆盖网络"
+
+msgid "Custom Rules"
+msgstr "自定义规则"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"自定义规则允许运行一些防火墙没有包含的功能。这些命令将在每次重启防火墙时，在"
+"默认的规则运行后立即执行。"
+
+msgid "Destination IP address"
+msgstr "目标IP地址"
+
+msgid "Destination address"
+msgstr "目标地址"
+
+msgid "Destination port"
+msgstr "目标端口"
+
+msgid "Destination zone"
+msgstr "目标区域"
+
+msgid "Do not rewrite"
+msgstr "不填写=（所有端口）"
+
+msgid "Drop invalid packets"
+msgstr "丢弃无效数据包"
+
+msgid "Enable"
+msgstr "启用"
+
+msgid "Enable NAT Loopback"
+msgstr "启用NAT环回"
+
+msgid "Enable SYN-flood protection"
+msgstr "启用SYN-flood防御"
+
+msgid "Enable logging on this zone"
+msgstr "在此区域允许进入"
+
+msgid "External IP address"
+msgstr "外部IP地址"
+
+msgid "External port"
+msgstr "外部端口"
+
+msgid "External zone"
+msgstr "外部区域"
+
+msgid "Extra arguments"
+msgstr "附加参数"
+
+msgid "Firewall"
+msgstr "防火墙"
+
+msgid "Firewall - Custom Rules"
+msgstr "防火墙 - 自定义规则"
+
+msgid "Firewall - Port Forwards"
+msgstr "防火墙 - 端口转发"
+
+msgid "Firewall - Traffic Rules"
+msgstr "防火墙 - 通信规则"
+
+msgid "Firewall - Zone Settings"
+msgstr "防火墙-区域设置"
+
+msgid "Force connection tracking"
+msgstr "强制连接追踪"
+
+msgid "Forward"
+msgstr "转发"
+
+msgid "Forward to"
+msgstr "转发到"
+
+msgid "From %s in %s"
+msgstr "来自 %s 位于 %s"
+
+msgid "From %s in %s with source %s"
+msgstr "来自 %s 位于 %s 带源 %s"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "来自 %s 位于 %s 带源 %s 并且 %s"
+
+msgid "General Settings"
+msgstr "基本设置"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 和 IPv6"
+
+msgid "IPv4 only"
+msgstr "仅IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "仅IPv6"
+
+msgid "Input"
+msgstr "入站数据"
+
+msgid "Inter-Zone Forwarding"
+msgstr "端口触发"
+
+msgid "Internal IP address"
+msgstr "内部IP地址"
+
+msgid "Internal port"
+msgstr "内部端口"
+
+msgid "Internal zone"
+msgstr "内部区域"
+
+msgid "Limit log messages"
+msgstr "限制日志信息"
+
+msgid "MSS clamping"
+msgstr "MSS钳制"
+
+msgid "Masquerading"
+msgstr "IP动态伪装"
+
+msgid "Match"
+msgstr "匹配规则"
+
+msgid "Match ICMP type"
+msgstr "匹配ICMP类型"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr "需要匹配转发流量到的目标端口或端口范围"
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr "需要匹配入站流量到的目标端口或端口范围"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr "需要匹配入站流量的源端口或端口范围"
+
+msgid "Name"
+msgstr "名字"
+
+msgid "New SNAT rule"
+msgstr "新建SNAT规则"
+
+msgid "New forward rule"
+msgstr "新建转发规则"
+
+msgid "New input rule"
+msgstr "新建进入规则"
+
+msgid "New port forward"
+msgstr "新建端口转发"
+
+msgid "New source NAT"
+msgstr "新建Source NAT"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "需要匹配入站流量的源IP"
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "需要匹配入站流量的源MACs（可以为多个）"
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr "需要匹配入站流量的源IP或IP范围"
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr "需要匹配入站流量的源端口或端口范围"
+
+msgid "Open ports on router"
+msgstr "打开路由器端口"
+
+msgid "Other..."
+msgstr "其它..."
+
+msgid "Output"
+msgstr "出站数据"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr "传递到iptables的额外参数。小心使用！"
+
+msgid "Port Forwards"
+msgstr "端口转发"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr "端口转发允许来自Internet的计算机访问私有局域网内的计算机或服务"
+
+msgid "Protocol"
+msgstr "协议"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr "重定向匹配的入站流量到内部主机的端口"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "重定向匹配的入站流量到的内部主机"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "要限制IP动态伪装的目标子网"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "要限制IP动态伪装的源子网"
+
+msgid "Restrict to address family"
+msgstr "限制地址"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr "将匹配流量的源地址改写成指定地址"
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr "将匹配流量的源端口改写成指定端口。也可以留空，只改写IP地址。"
+
+msgid "Rewrite to source %s"
+msgstr "源地址改写成 %s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "源地址改写成 %s, %s"
+
+msgid "SNAT IP address"
+msgstr "SNAT IP地址"
+
+msgid "SNAT port"
+msgstr "SNAT 端口"
+
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+# Generated from applications/luci-fw/luasrc/model/cbi/luci_fw/rrule.lua      #
+# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
+#
+# msgid "Traffic Redirection"
+# msgstr ""
+#
+# msgid ""
+# "Traffic redirection allows you to change the destination address of "
+# "forwarded packets."
+# msgstr ""
+#
+# msgid "Overview"
+# msgstr ""
+#
+# msgid "Name"
+# msgstr ""
+#
+# msgid "Source zone"
+# msgstr ""
+#
+# msgid "Source MAC-address"
+# msgstr ""
+#
+# msgid "Source port"
+# msgstr ""
+#
+# msgid "Protocol"
+# msgstr ""
+#
+msgid "Source IP address"
+msgstr "源IP地址"
+
+msgid "Source MAC address"
+msgstr "源MAC地址"
+
+msgid "Source NAT"
+msgstr "Source NAT"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"Source NAT是一种特殊形式的封包伪装，它允许精细的控制传出流量的源IP，例如，将"
+"多个WAN地址映射到内部子网。"
+
+msgid "Source address"
+msgstr "源地址"
+
+msgid "Source port"
+msgstr "源端口"
+
+msgid "Source zone"
+msgstr "源区域"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr "防火墙把网络接口分为不同的区域进行管理"
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"以下选项可以控制区域(%s)和其它区域间的转发规则。 <em>目标区域</em>接收"
+"<strong>从%q</strong>转发的流量。<em>源区域</em>匹配从<strong>目标为%q</"
+"strong>的区域的需转发流量。以下规则<em>无法转发</em>,例如：转发lan流量到wan，"
+"但是<em>不允许</em>从wan转发到lan。"
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr "本页面可以更改端口转发的高级设置。大多数情况下，不需要更改这些设置。"
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr "本页面可以更改通信规则的高级设置，比如：需匹配的源主机和目标主机。"
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"本节定义 %q 的通用属性， <em>入站数据</em> 和 <em>出站数据</em>规则用于设置数"
+"据包“进”和“出”路由器（某个接口）默认的转发原则，<em>转发</em>规则用于特定（一"
+"个或多个）区域的不同子网之间的数据包转发。<em>覆盖网络</em>选择从属于这个区域"
+"的网络。"
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "到 %s at %s 位于<var>本设备</var>"
+
+msgid "To %s in %s"
+msgstr "到 %s 位于 %s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "到 %s 位于<var>本设备</var>"
+
+msgid "To %s, %s in %s"
+msgstr "到 %s, %s 位于 %s"
+
+msgid "To source IP"
+msgstr "到源IP"
+
+msgid "To source port"
+msgstr "到源端口"
+
+msgid "Traffic Rules"
+msgstr "通信规则"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"通信规则定义了不同区域间的流量传送，例如：拒绝一些主机之间的通信、打开到WAN的"
+"端口。"
+
+msgid "Via %s"
+msgstr "通过 %s"
+
+msgid "Via %s at %s"
+msgstr "通过 %s at %s"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr "你也可以选择“--自定义--”来定义多个协议，在多个协议间需加空格。"
+
+msgid "Zone %q"
+msgstr "区域 %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "区域 ⇒ 转发"
+
+msgid "Zones"
+msgstr "区域"
+
+msgid "accept"
+msgstr "接受"
+
+msgid "any"
+msgstr "所有"
+
+msgid "any host"
+msgstr "所有主机"
+
+msgid "any router IP"
+msgstr "所有路由地址"
+
+msgid "any zone"
+msgstr "所有区域"
+
+msgid "don't track"
+msgstr "无动作"
+
+msgid "drop"
+msgstr "丢弃"
+
+msgid "reject"
+msgstr "拒绝"
+
+msgid "traffic"
+msgstr "交通"
+
+#~ msgid "Destination"
+#~ msgstr "目标"
+
+#~ msgid "Family"
+#~ msgstr "地址集合"
+
+#~ msgid "Forward to %s in %s"
+#~ msgstr "转发到 %s 位于 %s"
+
+#~ msgid "Forward to %s, %s in %s"
+#~ msgstr "转发到 %s, %s 位于 %s"
+
+#~ msgid "Source"
+#~ msgstr "源"
+
+#~ msgid "Via"
+#~ msgstr "通过"
+
+#~ msgid "Disable"
+#~ msgstr "禁用"
+
+#~ msgid "Do not track forward"
+#~ msgstr "不要追踪转发"
+
+#~ msgid "Do not track input"
+#~ msgstr "不要追踪进入"
+
+#~ msgid "IP"
+#~ msgstr "IP"
+
+#~ msgid "IP range"
+#~ msgstr "IP范围"
+
+#~ msgid "(optional)"
+#~ msgstr "（可选）"
+
+#~ msgid "Intended destination address"
+#~ msgstr "目标地址"
+
+#~ msgid "Internal port (optional)"
+#~ msgstr "内部端口（可选）"
+
+#~ msgid "Advanced Options"
+#~ msgstr "高级选项"
+
+#~ msgid "Advanced Rules"
+#~ msgstr "高级规则"
+
+#~ msgid ""
+#~ "Advanced rules let you customize the firewall to your needs. Only new "
+#~ "connections will be matched. Packets belonging to already open "
+#~ "connections are automatically allowed to pass the firewall."
+#~ msgstr ""
+#~ "高级规则允许按需定制防火墙。此规则只限制新建立的连接，对于已建立链路的数据"
+#~ "包会自动允许通过。"
+
+#~ msgid "Custom Rules (/etc/firewall.user)"
+#~ msgstr "自定义规则(/etc/firewall.user)"
+
+#~ msgid "Device"
+#~ msgstr "设备"
+
+#~ msgid ""
+#~ "For DNAT, match incoming traffic directed at the given destination ip "
+#~ "address. For SNAT rewrite the source address to the given address."
+#~ msgstr ""
+#~ "DNAT：将目标地址转换为指定的IP地址；SNAT：将源地址转换为指定的IP地址。"
+
+#~ msgid ""
+#~ "Match incoming traffic originating from the given source port or port "
+#~ "range on the client host"
+#~ msgstr "在客户端上，比较输入通道与给定的源端口是否一致。"
+
+#~ msgid "Overview"
+#~ msgstr "概览"
+
+#~ msgid "Port forwarding"
+#~ msgstr "端口转发"
+
+#~ msgid ""
+#~ "Port forwarding allows to provide network services in the internal "
+#~ "network to an external network."
+#~ msgstr "端口转发-允许外部网络访问内部网络"
+
+#~ msgid "Redirection type"
+#~ msgstr "重定向类型"
+
+#~ msgid "Redirections"
+#~ msgstr "重定向"
+
+#~ msgid "Rules"
+#~ msgstr "规则"
+
+#~ msgid "Traffic Redirection"
+#~ msgstr "流量重定向"
+
+#~ msgid ""
+#~ "Traffic redirection allows you to change the destination address of "
+#~ "forwarded packets."
+#~ msgstr "流量重定向允许你修改数据包转发地址"
+
+#~ msgid "Zone"
+#~ msgstr "区"
+
+#~ msgid "MASQ"
+#~ msgstr "MASQ"
diff --git a/applications/luci-app-firewall/po/zh-tw/firewall.po b/applications/luci-app-firewall/po/zh-tw/firewall.po
new file mode 100644
index 000000000..6ff2df70d
--- /dev/null
+++ b/applications/luci-app-firewall/po/zh-tw/firewall.po
@@ -0,0 +1,449 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"PO-Revision-Date: 2014-05-21 12:45+0200\n"
+"Last-Translator: omnistack <omnistack@gmail.com>\n"
+"Language-Team: none\n"
+"Language: zh_TW\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=1; plural=0;\n"
+"X-Generator: Pootle 2.0.6\n"
+
+msgid "%s in %s"
+msgstr "%s 在 %s 之中"
+
+msgid "%s%s with %s"
+msgstr "%s%s 同 %s"
+
+msgid "%s, %s in %s"
+msgstr " %s, %s 在 %s 之中"
+
+msgid "(Unnamed Entry)"
+msgstr "(未命名的項目)"
+
+msgid "(Unnamed Rule)"
+msgstr "(未命名的規則)"
+
+msgid "(Unnamed SNAT)"
+msgstr "(未命名的來源NAT)"
+
+msgid "-- Please choose --"
+msgstr "-- 請選擇 --"
+
+msgid "-- custom --"
+msgstr "-- 自訂 --"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>"
+msgstr "<var>%d</var> 封包數. 每<var>%s</var>"
+
+msgid "<var>%d</var> pkts. per <var>%s</var>, burst <var>%d</var> pkts."
+msgstr "<var>%d</var> 封包數. 每<var>%s</var>, 爆量 <var>%d</var> 封包數."
+
+msgid "<var>%s</var> and limit to %s"
+msgstr "<var>%s</var> 且限制到 %s"
+
+msgid "Action"
+msgstr "動作"
+
+msgid "Add"
+msgstr "新增"
+
+msgid "Add and edit..."
+msgstr "新增並編輯..."
+
+msgid "Advanced Settings"
+msgstr "進階設定"
+
+msgid "Allow forward from <em>source zones</em>:"
+msgstr "允許從<em>source zones</em>轉發:"
+
+msgid "Allow forward to <em>destination zones</em>:"
+msgstr "允許從 <em>destination zones</em>轉發:"
+
+msgid "Any"
+msgstr "任意"
+
+msgid "Covered networks"
+msgstr "已覆蓋的網路"
+
+msgid "Custom Rules"
+msgstr "自訂的規則群"
+
+msgid ""
+"Custom rules allow you to execute arbritary iptables commands which are not "
+"otherwise covered by the firewall framework. The commands are executed after "
+"each firewall restart, right after the default ruleset has been loaded."
+msgstr ""
+"自定義規則允許你執行這是不以其他方式涉及的防火牆框架arbritary的iptables命令。"
+"該命令是每個防火牆重啟後執行，默認規則集已經加載之後。"
+
+msgid "Destination IP address"
+msgstr "目標IP位址"
+
+msgid "Destination address"
+msgstr "目標位址"
+
+msgid "Destination port"
+msgstr "目地埠"
+
+msgid "Destination zone"
+msgstr "目標區"
+
+msgid "Do not rewrite"
+msgstr "不要改寫"
+
+msgid "Drop invalid packets"
+msgstr "丟棄不正確的封包群"
+
+msgid "Enable"
+msgstr "啟用"
+
+msgid "Enable NAT Loopback"
+msgstr "啓用NAT回傳"
+
+msgid "Enable SYN-flood protection"
+msgstr "啟用SYN-flood攻擊的保護"
+
+msgid "Enable logging on this zone"
+msgstr "啟用日誌記錄這區"
+
+msgid "External IP address"
+msgstr "外部IP位址"
+
+msgid "External port"
+msgstr "外部埠"
+
+msgid "External zone"
+msgstr "外部區域"
+
+msgid "Extra arguments"
+msgstr "額外參數"
+
+msgid "Firewall"
+msgstr "防火牆"
+
+msgid "Firewall - Custom Rules"
+msgstr "防火牆-自訂規則"
+
+msgid "Firewall - Port Forwards"
+msgstr "防火牆-埠轉發"
+
+msgid "Firewall - Traffic Rules"
+msgstr "防火牆-流量規則"
+
+msgid "Firewall - Zone Settings"
+msgstr "防火牆-區域設定"
+
+msgid "Force connection tracking"
+msgstr "強制連線追蹤"
+
+msgid "Forward"
+msgstr "轉發"
+
+msgid "Forward to"
+msgstr "轉發到"
+
+msgid "From %s in %s"
+msgstr "從％s在％s"
+
+msgid "From %s in %s with source %s"
+msgstr "從％s在％s與來源％"
+
+msgid "From %s in %s with source %s and %s"
+msgstr "從％s在％s與來源％s和％s"
+
+msgid "General Settings"
+msgstr "一般設定"
+
+msgid "IPv4"
+msgstr "IPv4"
+
+msgid "IPv4 and IPv6"
+msgstr "IPv4 和 IPv6"
+
+msgid "IPv4 only"
+msgstr "僅有IPv4"
+
+msgid "IPv6"
+msgstr "IPv6"
+
+msgid "IPv6 only"
+msgstr "僅有IPv6"
+
+msgid "Input"
+msgstr "輸入"
+
+msgid "Inter-Zone Forwarding"
+msgstr "內部-區轉發"
+
+msgid "Internal IP address"
+msgstr "內部的IP位址"
+
+msgid "Internal port"
+msgstr "內部的埠號"
+
+msgid "Internal zone"
+msgstr "內部區"
+
+msgid "Limit log messages"
+msgstr "限制日誌訊息數"
+
+msgid "MSS clamping"
+msgstr "MSS調節"
+
+msgid "Masquerading"
+msgstr "偽裝"
+
+msgid "Match"
+msgstr "匹配"
+
+msgid "Match ICMP type"
+msgstr "匹配的ICMP型態"
+
+msgid "Match forwarded traffic to the given destination port or port range."
+msgstr "匹配已轉發的流量到給定的目標埠或者範圍埠"
+
+msgid ""
+"Match incoming traffic directed at the given destination port or port range "
+"on this host"
+msgstr "匹配輸入的流量到主機上給定的目標埠或者範圍埠"
+
+msgid ""
+"Match incoming traffic originating from the given source port or port range "
+"on the client host."
+msgstr "從給定的來源埠或範圍埠在客戶端主機上的匹配傳入流量始發。"
+
+msgid "Name"
+msgstr "名稱"
+
+msgid "New SNAT rule"
+msgstr "新的來源NAT規則"
+
+msgid "New forward rule"
+msgstr "新轉發規則"
+
+msgid "New input rule"
+msgstr "新輸入規則"
+
+msgid "New port forward"
+msgstr "新轉發埠"
+
+msgid "New source NAT"
+msgstr "新來源埠"
+
+msgid "Only match incoming traffic directed at the given IP address."
+msgstr "僅匹配傳入流量予給定的IP地址."
+
+msgid "Only match incoming traffic from these MACs."
+msgstr "僅匹配從這些MAC群的傳入流量."
+
+msgid "Only match incoming traffic from this IP or range."
+msgstr "僅匹配從這個IP或範圍IP給傳入流量."
+
+msgid ""
+"Only match incoming traffic originating from the given source port or port "
+"range on the client host"
+msgstr "僅匹配從給定的來源埠或範圍埠的客戶端主機上給傳入流量."
+
+msgid "Open ports on router"
+msgstr "開啟路由器上的埠號群"
+
+msgid "Other..."
+msgstr "其它..."
+
+msgid "Output"
+msgstr "輸出"
+
+msgid "Passes additional arguments to iptables. Use with care!"
+msgstr "通行額外的參數到 iptables上. 使用要小心!"
+
+msgid "Port Forwards"
+msgstr "埠轉遞"
+
+msgid ""
+"Port forwarding allows remote computers on the Internet to connect to a "
+"specific computer or service within the private LAN."
+msgstr "埠轉發允許遠端網際網路上的電腦來連接到在私人區網內指定的電腦或服務."
+
+msgid "Protocol"
+msgstr "協定"
+
+msgid ""
+"Redirect matched incoming traffic to the given port on the internal host"
+msgstr "重導向已匹配傳入流量到內部主機上的指定埠"
+
+msgid "Redirect matched incoming traffic to the specified internal host"
+msgstr "重導向已匹配傳入流量到內部主機上"
+
+msgid "Restrict Masquerading to given destination subnets"
+msgstr "限制偽裝到已給予的目標子網路"
+
+msgid "Restrict Masquerading to given source subnets"
+msgstr "限制偽裝到已給予的來源子網路"
+
+msgid "Restrict to address family"
+msgstr "限制的位址群"
+
+msgid "Rewrite matched traffic to the given address."
+msgstr "改寫已匹配的流量到給定的位址."
+
+msgid ""
+"Rewrite matched traffic to the given source port. May be left empty to only "
+"rewrite the IP address."
+msgstr "改寫已匹配的流量到給定的來源埠. 或許可以保留空白到唯一改寫的IP位址."
+
+msgid "Rewrite to source %s"
+msgstr "改寫到來源 %s"
+
+msgid "Rewrite to source %s, %s"
+msgstr "改寫到來源 %s, %s"
+
+msgid "SNAT IP address"
+msgstr "來源NAT IP 位址"
+
+msgid "SNAT port"
+msgstr "來源NAT IP 埠"
+
+msgid "Source IP address"
+msgstr "來源 IP 位址"
+
+msgid "Source MAC address"
+msgstr "來源 MAC硬體位址"
+
+msgid "Source NAT"
+msgstr "來源NAT"
+
+msgid ""
+"Source NAT is a specific form of masquerading which allows fine grained "
+"control over the source IP used for outgoing traffic, for example to map "
+"multiple WAN addresses to internal subnets."
+msgstr ""
+"來源NAT是偽裝的一種特殊形式,它允許對輸出流量的來源IP進行精細控制, 例如要對映"
+"到多個WAN位址到內部子網路群上."
+
+msgid "Source address"
+msgstr "來源位址"
+
+msgid "Source port"
+msgstr "來源埠"
+
+msgid "Source zone"
+msgstr "來源區"
+
+msgid ""
+"The firewall creates zones over your network interfaces to control network "
+"traffic flow."
+msgstr "防火牆對你的網路建立區域以便控制網路流向."
+
+msgid ""
+"The options below control the forwarding policies between this zone (%s) and "
+"other zones. <em>Destination zones</em> cover forwarded traffic "
+"<strong>originating from %q</strong>. <em>Source zones</em> match forwarded "
+"traffic from other zones <strong>targeted at %q</strong>. The forwarding "
+"rule is <em>unidirectional</em>, e.g. a forward from lan to wan does "
+"<em>not</em> imply a permission to forward from wan to lan as well."
+msgstr ""
+"下列的選項控制這區域(%s)和其它區轉發策略.<em>目地區</em> 覆蓋<strong>從 %q 起"
+"源的 </strong>已轉發的流量.<em>來源區</em>匹配從其它區域<strong>針對 %q</"
+"strong>的轉發流量.轉發規則是<em>單向的</em>."
+
+msgid ""
+"This page allows you to change advanced properties of the port forwarding "
+"entry. In most cases there is no need to modify those settings."
+msgstr ""
+"這頁面允許你修改這個轉發埠項目的進階選項. 在大多數情況下,不需要修改這些設定."
+
+msgid ""
+"This page allows you to change advanced properties of the traffic rule "
+"entry, such as matched source and destination hosts."
+msgstr "這頁面允許改變進階流量規則項目的進階設置, 例如匹配的來源和目標主機."
+
+#, fuzzy
+msgid ""
+"This section defines common properties of %q. The <em>input</em> and "
+"<em>output</em> options set the default policies for traffic entering and "
+"leaving this zone while the <em>forward</em> option describes the policy for "
+"forwarded traffic between different networks within the zone. <em>Covered "
+"networks</em> specifies which available networks are members of this zone."
+msgstr ""
+"本節定義 %q 的通用屬性.在<em>輸入</em>和<em>輸出</em>選項設置交通進出的默認策"
+"略,而在<em>轉發</em>的選項描述在這區域內不同網路的轉發流量.<em>已覆蓋的網路群"
+"</em>指定特定區域成員可以是被運用的網路."
+
+msgid "To %s at %s on <var>this device</var>"
+msgstr "到％s在上的<var>此設備</ var>的％s的"
+
+msgid "To %s in %s"
+msgstr "到％s在％s"
+
+msgid "To %s on <var>this device</var>"
+msgstr "到％s上的<var>此設備</ var>的"
+
+msgid "To %s, %s in %s"
+msgstr "到％s，％s的％s中"
+
+msgid "To source IP"
+msgstr "來源IP"
+
+msgid "To source port"
+msgstr "來源埠"
+
+msgid "Traffic Rules"
+msgstr "流量規則"
+
+msgid ""
+"Traffic rules define policies for packets traveling between different zones, "
+"for example to reject traffic between certain hosts or to open WAN ports on "
+"the router."
+msgstr ""
+"流量規則定義在不同區域之間竄行封包的策略,例如要拒絕特定主機群的流量或者要打開"
+"路由器上WAN埠。"
+
+msgid "Via %s"
+msgstr "通過％s的"
+
+msgid "Via %s at %s"
+msgstr "通過％s在％s的"
+
+msgid ""
+"You may specify multiple by selecting \"-- custom --\" and then entering "
+"protocols separated by space."
+msgstr "你可以以選擇\"-- 自訂 --\"並且打入由空格分開的協定來做多重指定."
+
+msgid "Zone %q"
+msgstr "區域 %q"
+
+msgid "Zone ⇒ Forwardings"
+msgstr "區域 ⇒ 轉發進行"
+
+msgid "Zones"
+msgstr "領域"
+
+msgid "accept"
+msgstr "接受"
+
+msgid "any"
+msgstr "任意"
+
+msgid "any host"
+msgstr "任意埠"
+
+msgid "any router IP"
+msgstr "任意路由器IP"
+
+msgid "any zone"
+msgstr "任意區"
+
+msgid "don't track"
+msgstr "不要追蹤"
+
+msgid "drop"
+msgstr "丟棄"
+
+msgid "reject"
+msgstr "拒絕"
+
+msgid "traffic"
+msgstr ""