"BehaviourEasy":"Easy NAT: your router keeps the same outside port whatever the destination, so calls and games can usually connect directly.",
"BehaviourHard":"Hard NAT: your router picks a new outside port for every destination (symmetric NAT). Direct connections between two homes often fail, and calls go through a relay.",
"BehaviourNone":"This device has a public address of its own: nothing translates it.",
"BehaviourUnknown":"The STUN servers didn't answer: UDP may be blocked on this network.",
"ContactMail":"The mail servers of Gmail and Outlook: a connection to port 25, closed without sending anything. The blocklists Spamhaus, UCEPROTECT, SpamCop and Barracuda, and dnssec-failed.org, are asked only through your own name server.",
"ContactRoute":"The routers on the way to meweb.arasaka.software: a few short test messages with a limited lifetime (ping) show the first steps of the route.",
"ContactRouter":"Your router, on your own network: asked whether it lets apps open ports and which internet address it has. Ports are opened only if you agree, for ten minutes at most.",
"ContactServer":"meweb.arasaka.software, run by the publisher in Italy: to see whether you are online, which public addresses the internet sees and whether a newer version exists, and, only if you agree, to try to reach this device from outside. The me-web? server keeps nothing about your checks unless you send them.",
"ContactShare":"Only if you choose to share: your findings, sent to meweb.arasaka.software after you have read them.",
"ContactSpeed":"meweb.arasaka.software again for the speed test: up to 12 MB down and 4 MB up (2 and 1 on mobile data).",
"ContactStun":"stun.meweb.arasaka.software, run by the publisher, and stun.nextcloud.com, run by Nextcloud GmbH in Germany: one short message each, to see how your router translates addresses for calls and games.",
"ExplainAddresses":"The address the rest of the internet sees when this device talks to it. With IPv4 the devices at home usually share one address, held by the router; with IPv6 each device usually has its own.",
"ExplainBehaviour":"Calls, games and some file sharing connect two homes directly. That works when your router keeps the same outside port whatever the destination (easy NAT). When it changes the port for each destination (hard or symmetric NAT), the other side can't guess it, and the connection goes through a relay, which is slower.",
"ExplainConnection":"How this device is connected right now, and the address your router gave it. Addresses starting with 192.168, 10, or 172.16 to 172.31 only work inside your home (private addresses).",
"ExplainDevice":"A home server should stay on, stay put and have room for your data. A desktop or a small always-on box works; a laptop works while it stays plugged in; a phone doesn't.",
"ExplainDns":"Your name server turns names into addresses. me-web? asks it for a name with a deliberately broken signature (dnssec-failed.org) and for a name that doesn't exist: an honest server that checks signatures refuses both.",
"ExplainHistory":"Each check is saved on this device only. If your public address stays the same for weeks it is probably fixed (static); if it changes, you need a name that follows it (dynamic DNS).",
"ExplainMail":"To run a mail server at home you must reach other mail servers on port 25, and they must trust you: a reverse name (PTR) that looks like a server's and points back to your address, and no blocklist naming you. me-web? connects to Gmail's and Outlook's mail servers on port 25 and disconnects without sending anything; the blocklists are asked through your own name server.",
"ExplainNat":"To host something at home, the internet has to reach your router. That works when your router holds the public address. When your provider shares one address among many customers (CGNAT), nobody can reach you from outside over IPv4 unless the provider gives you an address of your own; a tunnel or IPv6 are the ways around it.",
"ExplainOnline":"me-web? asks its own server, meweb.arasaka.software, over a secure connection and over a plain one. If the secure one fails and the plain one is sent somewhere else, a login page (captive portal) is in the way, as in hotels and on trains.",
"ExplainProvider":"Found without going online, in the provider map inside me-web?, from your public address. The notes come from the operator's own technical sheet or from users' reports, each with its source and date: they say what is usual, not what your contract says.",
"ExplainReach":"The real test: me-web?'s server tries to connect to this device from the internet, on the ports a home server would use (80 and 443 for websites). The app answers with a secret only it knows, so another device can't be mistaken for it. The line about your own public address says whether devices at home can use it too (hairpin).",
"ExplainRouter":"Game consoles, calls and file sharing ask the router to open a port for them, using UPnP, NAT-PMP or PCP. me-web? only asks your router whether it answers and which internet address it has; it opens nothing.",
"ExplainSpeed":"A short download and upload against meweb.arasaka.software. The result is the slower of your line and the publisher's server, so a very fast line can read lower than it is. On mobile data the test is smaller.",
"HintSharedHop":"A router of your provider uses a shared-space address (100.64.x.x). That happens with address sharing and without it, so on its own it proves nothing.",
"ReachAskBody":"me-web?'s server can try to reach this device from the internet, over IPv4 and IPv6. It connects back only to your own address and stores nothing.",
"ReachAskPorts":"For IPv4, me-web? can ask your router to open ports 80, 443 and one high port towards this device for up to ten minutes, and closes them afterwards. Your computer may ask whether me-web? may receive connections: allow it for the test.",
"ReachAskTitle":"Test from outside?",
"ReachBlockedAfterMapping":"Your router opened the ports, but nothing came through: your provider shares the address or blocks incoming connections.",
"ReachBoth":"The internet reaches this device over IPv4 and IPv6.",
"ReachNoListener":"This device wouldn't let me-web? listen for the test.",
"ReachNoMapping":"Your router didn't open the ports, so nothing came through over IPv4.",
"ReachNothingAsIs":"Nothing reached this device. me-web? opened no port, so this only tests ports you opened yourself.",
"ReachOpenPorts":"Open ports and test",
"ReachOwnNetwork":"This is the publisher's own network: the test can't run from here.",
"ReachSkip":"Skip",
"ReachSkipped":"Not tested: you chose to skip it.",
"ReachTooMany":"Too many tests from this address. Try again later (about {0} min).",
"ReachUnavailable":"The test server couldn't be reached.",
"ReachV4":"The internet reaches this device over IPv4.",
"ReachV6Only":"The internet reaches this device over IPv6 only.",
"RefusalBadPorts":"ports not allowed",
"RefusalBusy":"another test is running",
"RefusalNotPublic":"not a public address",
"RefusalOtherAddress":"the address changed during the test",
"RefusalOwnNetwork":"the publisher's own network",
"ShareExact":"This is exactly what will be sent, including your public addresses:",
"ShareFailed":"It couldn't be sent.",
"ShareKeep":"Kept for twelve months, then deleted; you can delete it earlier from this app at any time. Details at meweb.arasaka.software/privacy.",
"ShareOfferBody":"Sending these findings helps improve the notes on providers in the next release of me-web?. You'll see exactly what is sent before anything leaves.",
"ShareOfferTitle":"Help the next version",
"ShareOpen":"Share these findings",
"ShareSend":"Send",
"ShareSent":"Sent, thank you. Your submission is {0}, kept until {1}; you can delete it under “What this app contacts”.",
"ShareTitle":"Share these findings",
"ShareTooMany":"Too many submissions from this address today. Try again tomorrow.",
"ShareWho":"Who receives them: Arasaka di Hvozdikov Yevheniy, the publisher of me-web?, on its own server in Italy (meweb.arasaka.software).",
"ShareWhy":"Why: to improve the notes on providers in later releases. Only totals without addresses are ever published, after a person has reviewed them. The legal basis is your consent.",
"UseAdviceAlwaysOn":"Use a computer or a small box that stays on at home.",
"UseAdviceBridge":"Set the first router to bridge mode, or open the port on both routers.",
"UseAdviceDynamicName":"Use a name that follows your address (dynamic DNS), or ask your provider for a fixed address.",
"UseAdviceForward":"Open the port on your router (port forwarding) towards the device that runs it.",
"UseAdviceIpv6Firewall":"Allow incoming connections to this device in your router's IPv6 firewall.",
"UseAdviceOwnAddress":"Ask your provider for a public address of your own (see “Your provider” for what it usually costs), or use a tunnel to a small server elsewhere.",
"UseAdviceRelay":"Receive mail at home if you like, but send it through a relay: a mail service or a small server with a proper reverse name.",
"UseAdviceRelayBoth":"Use a relay or a small server elsewhere for both receiving and sending.",
"UseAdviceTunnel":"Use a tunnel: your home connects out to a small server elsewhere, which receives the visitors.",
"UseFediverse":"A fediverse or blog server",
"UseFiles":"Family photos and files",
"UseGameServer":"A game or voice server",
"UseMail":"A mail server",
"UseReasonAddressMayChange":"Your public address may change, and this needs a name that always points to you.",
"UseReasonBlocked":"Connections from outside don't get through over IPv4.",
"UseReasonDouble":"Your router sits behind another router.",
"UseReasonDynamicReverse":"Your address's reverse name looks like a home line, which big mailboxes distrust.",
"UseReasonIpv6Direct":"This device has its own public IPv6 address.",
"UseReasonMailClean":"Port 25 is open, the reverse name looks right and no list names your address.",
"UseReasonNoIpv4":"This connection has no IPv4.",
"UseReasonNoReverse":"Your address has no reverse name, which big mailboxes require.",
"UseReasonOnlyIpv6":"Only IPv6 gets through, and many visitors still have IPv4 only.",
"UseReasonPhone":"A phone isn't a good server: it sleeps and runs on battery.",
"UseReasonPort25Blocked":"Port 25 is blocked, so mail can't be sent directly from here.",
"UseReasonReachedV4":"The outside test reached this device over IPv4.",
"UseReasonReachedV6":"The outside test reached this device over IPv6.",
"UseReasonResidentialList":"Your address is listed as a home connection, which big mailboxes refuse.",
"UseReasonRouterHolds":"Your router holds your public address, so it can pass connections on.",
"UseReasonShared":"Your provider shares your public IPv4 address with other customers.",
"UseReasonUnknown":"Not enough is known about this connection.",
