chore: update firewall i18n strings

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

frontend/src/utils/i18n.ts

@@ -793,7 +793,32 @@ const exact: Record<string, string> = {
   '独立 IPv4': 'Dedicated IPv4',
   '添加规则': 'Add Rule',
   '启用后默认拒绝所有入站和出站流量，仅放行下方规则': 'When enabled, all inbound and outbound traffic is blocked by default. Only the rules below are allowed.',
+  '已启用，未匹配规则的流量将被拒绝': 'Enabled. Traffic that does not match a rule will be denied.',
+  '已启用，未匹配规则的流量将被放行': 'Enabled. Traffic that does not match a rule will be allowed.',
+  '未启用时不接管该容器流量': 'Disabled. Container traffic is not managed by this firewall.',
+  '默认动作': 'Default Action',
+  '没有命中下方规则时如何处理': 'How to handle traffic that does not match the rules below',
+  '未匹配拒绝': 'Deny unmatched',
+  '未匹配放行': 'Allow unmatched',
+  '网络范围': 'Network Scope',
+  '可配置：': 'Configurable: ',
+  '可配置：IPv4（公网 IPv4）。 IPv4 规则覆盖独立公网 IPv4。': 'Configurable: IPv4 (Public IPv4). IPv4 rules apply to the dedicated public IPv4.',
+  '可配置：IPv4（NAT）。 IPv4 规则覆盖IPv4 NAT 端口映射。 NAT 入站端口按容器内部端口匹配，不是宿主机公网端口。': 'Configurable: IPv4 (NAT). IPv4 rules apply to IPv4 NAT port mappings. NAT inbound ports are matched by the container internal port, not the host public port.',
+  '可配置：IPv6。 IPv6 规则覆盖该容器已分配的 IPv6 地址。': 'Configurable: IPv6. IPv6 rules apply to the IPv6 addresses assigned to this container.',
+  '可配置：IPv4（公网 IPv4）、IPv6。 IPv4 规则覆盖独立公网 IPv4。 IPv6 规则覆盖该容器已分配的 IPv6 地址。': 'Configurable: IPv4 (Public IPv4), IPv6. IPv4 rules apply to the dedicated public IPv4. IPv6 rules apply to the IPv6 addresses assigned to this container.',
+  '可配置：IPv4（NAT）、IPv6。 IPv4 规则覆盖IPv4 NAT 端口映射。 NAT 入站端口按容器内部端口匹配，不是宿主机公网端口。 IPv6 规则覆盖该容器已分配的 IPv6 地址。': 'Configurable: IPv4 (NAT), IPv6. IPv4 rules apply to IPv4 NAT port mappings. NAT inbound ports are matched by the container internal port, not the host public port. IPv6 rules apply to the IPv6 addresses assigned to this container.',
+  '当前容器未分配 IPv4 NAT、独立公网 IPv4 或 IPv6，暂无可配置网络。': 'This container has no IPv4 NAT, dedicated public IPv4, or IPv6 assigned, so no firewall network can be configured.',
+  '当前容器没有可配置的 NAT、公网 IPv4 或 IPv6': 'This container has no configurable NAT, public IPv4, or IPv6',
+  '当前容器没有可配置网络': 'This container has no configurable network',
+  'IPv4 规则覆盖独立公网 IPv4。': 'IPv4 rules apply to the dedicated public IPv4.',
+  'IPv4 规则覆盖IPv4 NAT 端口映射。': 'IPv4 rules apply to IPv4 NAT port mappings.',
+  'NAT 入站端口按容器内部端口匹配，不是宿主机公网端口。': 'NAT inbound ports are matched by the container internal port, not the host public port.',
+  'IPv6 规则覆盖该容器已分配的 IPv6 地址。': 'IPv6 rules apply to the IPv6 addresses assigned to this container.',
+  'IPv4（公网 IPv4）': 'IPv4 (Public IPv4)',
+  'IPv4（NAT）': 'IPv4 (NAT)',
+  '全部网络': 'All Networks',
   '方向': 'Direction',
+  '网络': 'Network',
   '来源/目标 IP': 'Source / Destination IP',
   '动作': 'Action',
   '入站': 'Inbound',
@@ -802,18 +827,31 @@ const exact: Record<string, string> = {
   '放行': 'Allow',
   '拒绝': 'Deny',
   '暂无防火墙规则': 'No firewall rules',
+  '防火墙设置已保存并应用': 'Firewall settings saved and applied',
+  '保存防火墙设置失败': 'Failed to save firewall settings',
   '编辑规则': 'Edit Rule',
   '入站 (Inbound)': 'Inbound',
   '出站 (Outbound)': 'Outbound',
   '留空为全部端口，支持: 22 | 80,443 | 8000-9000': 'Leave empty for all ports. Supports: 22 | 80,443 | 8000-9000',
+  '入站填容器服务端口；留空为全部端口，支持: 22 | 80,443 | 8000-9000': 'For inbound rules, enter the container service port. Leave empty for all ports. Supports: 22 | 80,443 | 8000-9000',
+  '出站填远端目标端口；留空为全部端口，支持: 22 | 80,443 | 8000-9000': 'For outbound rules, enter the remote destination port. Leave empty for all ports. Supports: 22 | 80,443 | 8000-9000',
+  'NAT 入站填容器内部端口，例如公网 22023 -> 容器 22，这里填 22': 'For NAT inbound rules, enter the container internal port. For example, public 22023 -> container 22 means enter 22 here.',
+  '端口仅适用于 TCP/UDP': 'Ports only apply to TCP/UDP',
   '如: 22 或 80,443 或 8000-9000': 'e.g. 22 or 80,443 or 8000-9000',
+  '当前协议不使用端口': 'This protocol does not use ports',
   '来源 IP': 'Source IP',
   '目标 IP': 'Destination IP',
   '留空为任意 IP，支持 CIDR: 192.168.1.0/24': 'Leave empty for any IP. Supports CIDR: 192.168.1.0/24',
+  '留空为任意 IPv4，支持 CIDR: 192.168.1.0/24': 'Leave empty for any IPv4. Supports CIDR: 192.168.1.0/24',
+  '留空为任意 IPv6，支持 CIDR: 2001:db8::/64': 'Leave empty for any IPv6. Supports CIDR: 2001:db8::/64',
+  '留空为任意 IP，支持 IPv4/IPv6 CIDR': 'Leave empty for any IP. Supports IPv4/IPv6 CIDR',
   '如: 192.168.1.0/24': 'e.g. 192.168.1.0/24',
+  '如: 2001:db8::/64': 'e.g. 2001:db8::/64',
+  '如: 192.168.1.0/24 或 2001:db8::/64': 'e.g. 192.168.1.0/24 or 2001:db8::/64',
   '放行 (ACCEPT)': 'Allow (ACCEPT)',
   '拒绝 (DROP)': 'Deny (DROP)',
   '规则描述': 'Rule description',
+  '兼容旧请求：default_action 可不传，不传时保留现有策略；rule.network 可不传，不传按 ipv4 处理。default_action: DROP=未命中规则时拒绝, ACCEPT=未命中规则时放行。network: ipv4=IPv4 NAT/公网 IPv4, ipv6=IPv6, all=同时应用到 IPv4 和 IPv6。NAT 入站规则的 port 填容器内端口，不是宿主机公网端口。': 'Backward compatible: default_action is optional; if omitted, the existing policy is kept. rule.network is optional; if omitted, it is treated as ipv4. default_action: DROP=deny unmatched traffic, ACCEPT=allow unmatched traffic. network: ipv4=IPv4 NAT/public IPv4, ipv6=IPv6, all=apply to both IPv4 and IPv6. For NAT inbound rules, port is the container internal port, not the host public port.',
   '登录方式': 'SSH Auth Method',
   '保留当前密码': 'Keep current password',
   '生成新密码': 'Generate new password',