From owner-fwtk-users@ex.tis.com Mon Jul 3 09:09 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA21152 Mon, 3 Jul 2000 09:09:07 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA07820; Mon, 3 Jul 2000 06:16:41 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 3 Jul 2000 04:47:54 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA05734 for fwtk-users-outgoing; Mon, 3 Jul 2000 04:47:37 -0700 (PDT) From: Mark.Leuzinger@mts.mb.ca Subject: HTTP URL Restrictions To: fwtk-users@ex.tis.com Date: Fri, 30 Jun 2000 16:46:21 -0500 Message-ID: X-MIMETrack: Serialize by Router on SMTP_MTS/GW/MTS(Release 5.0.3 |March 21, 2000) at 06/30/2000 04:48:07 PM MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 512 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Greetings, Does any one know how to restrict/allow URL sites through the netperm-table file? Thanks in advance, Mark ================================= Mark R. Leuzinger Systems Engineering Representative MTS Communications Inc. Ph: (204) 941-5215 Page: (204) 931-9149 Fax: (204) 477-6742 EMail: mark.leuzinger@mts.mb.ca ================================= From owner-fwtk-users@ex.tis.com Mon Jul 3 09:09 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA21155 Mon, 3 Jul 2000 09:09:12 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA07816; Mon, 3 Jul 2000 06:16:41 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 3 Jul 2000 04:52:40 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA05797 for fwtk-users-outgoing; Mon, 3 Jul 2000 04:52:24 -0700 (PDT) Message-Id: <4.2.2.20000630204552.00b06b30@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Fri, 30 Jun 2000 20:47:59 -0400 To: "Christian Kuhn" , "fwtk-users" From: Rick Murphy Subject: Re: authserv - can't compile In-Reply-To: <200006302255.PAA19848@relay.nai.com> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 2094 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 12:54 AM 7/1/00 +0200, Christian Kuhn wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > >Hi, > >I just tried to install fwtk2.1. make all produced the binaries, >make install copied them into the desired directory (netperm-table >appeared in the bin directory instead of the given etc, but still >it makes no problems). Next, i tried to use authserv - not present. >The compiler gave this error: Repeating an answer I posted yesterday: add '-ldbm' to the DBMLIB definition in Makefile.config add -lcrypt to the AUXLIB definition. Read the FAQ at www.fwtk.org. -Rick >db.o: In function `auth_dbopen': >/usr/local/src/fwtk/auth/db.c:66: undefined reference to `dbm_open' >db.o: In function `auth_dbclose': >/usr/local/src/fwtk/auth/db.c:83: undefined reference to >`dbm_close' >db.o: In function `auth_dbgetu': >/usr/local/src/fwtk/auth/db.c:123: undefined reference to >`dbm_fetch' >db.o: In function `auth_dbputu': >/usr/local/src/fwtk/auth/db.c:152: undefined reference to >`dbm_store' >db.o: In function `auth_dbdelu': >/usr/local/src/fwtk/auth/db.c:176: undefined reference to >`dbm_delete' >db.o: In function `auth_dbtraversestart': >/usr/local/src/fwtk/auth/db.c:196: undefined reference to >`dbm_firstkey' >/usr/local/src/fwtk/auth/db.c:200: undefined reference to >`dbm_fetch' >db.o: In function `auth_dbtraversenext': >/usr/local/src/fwtk/auth/db.c:225: undefined reference to >`dbm_nextkey' >/usr/local/src/fwtk/auth/db.c:229: undefined reference to >`dbm_fetch' >pass.o: In function `passverify': >/usr/local/src/fwtk/auth/pass.c:39: undefined reference to `crypt' >pass.o: In function `passset': >/usr/local/src/fwtk/auth/pass.c:70: undefined reference to `crypt' >collect2: ld returned 1 exit status >make: *** [authsrv] Error 1 > >What did i wrong? > >mfg >QNo >-- >ICQ 57840861 >AIM MrQNo > From owner-fwtk-users@ex.tis.com Mon Jul 3 09:09 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA21156 Mon, 3 Jul 2000 09:09:12 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA07824; Mon, 3 Jul 2000 06:16:41 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 3 Jul 2000 04:58:36 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA05954 for fwtk-users-outgoing; Mon, 3 Jul 2000 04:58:25 -0700 (PDT) Date: Sat, 1 Jul 2000 12:34:33 -0500 Message-Id: <200007011234.AA138478136@mail.centraltx.com> Mime-Version: 1.0 From: "marc " Reply-To: X-Sender: To: Ted Keller CC: Subject: Re: socks X-Mailer: Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1966 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I'm having a small problem with fwtk I was hoping you guys may be able to help me out with. On my users browsers, they have the ftp proxy set to olympus:8080 which is where I'm running the http-gw. however when they try to download from a ftp site through the www, they get the following: FTP Error- 200 200 Type set to I. http-gw version (olympus.eisenbarth.org) My netperm looks like (the ftp and http sections at least): # Ftp gateway rules: # -------------------------- ftp-gw: denial-msg /usr/local/etc/ftp-deny.txt ftp-gw: welcome-msg /usr/local/etc/ftp-welcome.txt ftp-gw: timeout 3600 ftp-gw: deny-hosts unknown ftp-gw: permit-hosts 148.104.2.* -log { retr stor } # HTTP rules # ------------------------------------ http-gw: policy -java -javascript -activex http-gw: ftp-proxy ftp-gw http-gw: deny-hosts unknown http-gw: permit-hosts 148.104.2.* http-gw: permit-hosts 127.0.0.1 http-gw: default-httpd olympus.eisenbarth.org what's up?? Also, my system is logging the CRAP outta the http server... it's not explicitly enabled.. is it by default? How can I tell it not to log out the wazoo? Thanks! -marc ---------- Original Message ---------------------------------- From: Ted Keller Date: Thu, 29 Jun 2000 19:38:10 -0400 (EDT) >Marc, > >You can install the socks server on the firewall. It is located at >www.socks.nec.com. > >Make sure you configure it correctly. > > >ted keller > > >On Thu, 29 Jun 2000, marc wrote: > >> [To be removed from this list send the message "unsubscribe fwtk-users" in the >> BODY of a mail message to majordomo@ex.tis.com.] >> >> How can I make fwtk compatiable with programs who have the only >> firewall option as SOCKS4/5. >> >> -Marc >> > > From owner-fwtk-users@ex.tis.com Mon Jul 3 11:34 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA21624 Mon, 3 Jul 2000 11:34:46 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA10817; Mon, 3 Jul 2000 08:37:07 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 3 Jul 2000 07:42:55 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA10043 for fwtk-users-outgoing; Mon, 3 Jul 2000 07:42:49 -0700 (PDT) X-Authentication-Warning: Draco.house.gov: smap set sender to SIZE=1858 using -f Message-ID: <462720E13B20D311BF170008C75D282001BE1F75@hrm08.house.gov> From: "Alcorn, Karen" To: "'fwtk-users@tis.com'" Subject: smap questions Date: Mon, 3 Jul 2000 10:41:56 -0400 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 1163 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] We are running smap / smapd (from fwtk 2.1) on an internet mail gateway. Sendmail is the mta to which smap /smapd pass the internet e-mail. I am having two problems with the software: 1. When internet people send large files through smap (> 1 meg) they receive a NDR for the message and I see the following message in the smap log: SMTP QUIT with no message. Does anyone know what is causing this? 2. Also, users are receiving 'Service unavailable' messages, which seem to indicate that there are not enough connections available to smap to process the message (or smap is too busy to open a connection). Does anyone know what might be causing this? My netperm table is as follows: smap, smapd: userid 201 smap, smapd: directory /var/spool/smap smapd: executable /usr/local/etc/smapd smapd: sendmail /usr/lib/sendmail smapd: maxchildren 70 smapd: wakeup 5 smap: timeout 5 smap: maxbytes 20000000 smap: logfile log Any help is greatly appreciated. Thanks. From owner-fwtk-users@ex.tis.com Mon Jul 3 12:43 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA21786 Mon, 3 Jul 2000 12:43:26 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA12341; Mon, 3 Jul 2000 09:51:21 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 3 Jul 2000 08:58:56 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA11176 for fwtk-users-outgoing; Mon, 3 Jul 2000 08:58:45 -0700 (PDT) Message-ID: <26290034.962639876758.JavaMail.imail@dotty.excite.com> Date: Mon, 3 Jul 2000 08:57:56 -0700 (PDT) From: "T. Esting" Reply-To: To: Karen.Alcorn@mail.house.gov Subject: re: smap questions Cc: fwtk-users@tis.com Mime-Version: 1.0 Content-Transfer-Encoding: 7bit X-Mailer: Excite Inbox X-Sender-Ip: 4.17.250.5 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1981 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] The "SMTP QUIT with no message" is caused by read() being interrupted by the alarm() logic used to implement timeouts in smap. Essentially, if a message takes more than 5 seconds to send (based on your config below), you will most likely encounter this message. You may want to check the mailing list archives for some futher discussion on this topic, but you essentially have three options: eliminate the timeout, raise the timeout to something a little less likely to trigger this false positive, or patch smap.c. ------------------------------------------- [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] We are running smap / smapd (from fwtk 2.1) on an internet mail gateway. Sendmail is the mta to which smap /smapd pass the internet e-mail. I am having two problems with the software: 1. When internet people send large files through smap (> 1 meg) they receive a NDR for the message and I see the following message in the smap log: SMTP QUIT with no message. Does anyone know what is causing this? 2. Also, users are receiving 'Service unavailable' messages, which seem to indicate that there are not enough connections available to smap to process the message (or smap is too busy to open a connection). Does anyone know what might be causing this? My netperm table is as follows: smap, smapd: userid 201 smap, smapd: directory /var/spool/smap smapd: executable /usr/local/etc/smapd smapd: sendmail /usr/lib/sendmail smapd: maxchildren 70 smapd: wakeup 5 smap: timeout 5 smap: maxbytes 20000000 smap: logfile log Any help is greatly appreciated. Thanks. _______________________________________________________ Say Bye to Slow Internet! http://www.home.com/xinbox/signup.html From owner-fwtk-users@ex.tis.com Mon Jul 3 14:05 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA22009 Mon, 3 Jul 2000 14:05:16 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA13926; Mon, 3 Jul 2000 11:13:07 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 3 Jul 2000 10:18:32 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA12688 for fwtk-users-outgoing; Mon, 3 Jul 2000 10:18:21 -0700 (PDT) Date: Mon, 3 Jul 2000 13:17:49 -0400 (EDT) From: Ted Keller To: "Alcorn, Karen" cc: "'fwtk-users@tis.com'" Subject: Re: smap questions In-Reply-To: <462720E13B20D311BF170008C75D282001BE1F75@hrm08.house.gov> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 2201 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Karen, Here are a couple of things to look at.... It appears that you have mail size limits of 20mb so that shouldn't be the problem. You may be running into file system full situations. Do a df -k - and check out the availalbe space on the file system you have the "/var/spool/smap" directory at. Verify that you have sufficient space there. With regard to the second problem, are you running samp in daemon mode? or from inetd. If you are running it from inetd, check to see if you are getting a smap "looping" message in your log file. inetd may be shutting the port down due to too many connections within a set time period. Of coarse - this should only happen on heavily loaded mail systems - or in a situation where someone is trying to launch a sendmail attack on your site. ted keller On Mon, 3 Jul 2000, Alcorn, Karen wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > We are running smap / smapd (from fwtk 2.1) on an internet mail gateway. > Sendmail is the mta to which smap /smapd pass the internet e-mail. > > I am having two problems with the software: > 1. When internet people send large files through smap (> 1 meg) they receive > a NDR for the message and I see the following message in the smap log: SMTP > QUIT with no message. Does anyone know what is causing this? > > 2. Also, users are receiving 'Service unavailable' messages, which seem to > indicate that there are not enough connections available to smap to process > the message (or smap is too busy to open a connection). Does anyone know > what might be causing this? > > My netperm table is as follows: > > smap, smapd: userid 201 > smap, smapd: directory /var/spool/smap > smapd: executable /usr/local/etc/smapd > smapd: sendmail /usr/lib/sendmail > smapd: maxchildren 70 > smapd: wakeup 5 > smap: timeout 5 > smap: maxbytes 20000000 > smap: logfile log > > Any help is greatly appreciated. Thanks. > From owner-fwtk-users@ex.tis.com Mon Jul 3 16:43 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA22536 Mon, 3 Jul 2000 16:43:22 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA16605; Mon, 3 Jul 2000 13:51:14 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 3 Jul 2000 12:55:51 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA15011 for fwtk-users-outgoing; Mon, 3 Jul 2000 12:55:45 -0700 (PDT) Date: Mon, 3 Jul 2000 11:02:05 -0500 Message-Id: <200007031102.AA3527541422@mail.centraltx.com> Mime-Version: 1.0 From: "marc " Reply-To: X-Sender: To: Subject: Another Followup X-Mailer: Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1068 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Also, the following is in my logs: Jul 3 10:44:56 olympus /kernel: Connection attempt to TCP 208.189.1 26.3:4172 from 205.188.247.193:20 Jul 3 10:45:00 olympus CRON[12521]: (root) CMD (/usr/libexec/atrun) Jul 3 10:45:13 olympus http-gw[12523]: permit host=athens.eisen barth.org./148.104.2.222 use of gateway (V2.1) Jul 3 10:45:13 olympus http-gw[12523]: log host=athens.eisenbar th.org./148.104.2.222 protocol=FTP cmd=dir dest=ftp.netscape.com path=/ Jul 3 10:45:17 olympus http-gw[12523]: exit host=athens.eisenba rth.org./148.104.2.222 cmds=1 in=0 out=0 user=unauth duration=4 Jul 3 10:45:17 olympus /kernel: Connection attempt to TCP 208.189.1 26.3:4176 from 205.188.247.194:20 It looks like the return TCP packets from the ftp server are using unprivledged ports on my machine, and fwtk won't let them in... what do you guys think? -Marc From owner-fwtk-users@ex.tis.com Mon Jul 3 16:43 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA22540 Mon, 3 Jul 2000 16:43:26 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA16609; Mon, 3 Jul 2000 13:51:15 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 3 Jul 2000 12:58:42 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA15099 for fwtk-users-outgoing; Mon, 3 Jul 2000 12:58:36 -0700 (PDT) Date: Mon, 3 Jul 2000 10:52:22 -0500 Message-Id: <200007031052.AA10617636@mail.centraltx.com> Mime-Version: 1.0 From: "marc " Reply-To: X-Sender: To: Subject: http-gw X-Mailer: Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 2890 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I tried removing it, but it didn't fix it... anyone else help me with these two problems?? -Marc ---------- Original Message ---------------------------------- From: Ted Keller Date: Mon, 3 Jul 2000 10:15:54 -0400 (EDT) Marc, I don't run the http-gw here.... but why do you have the following line in the netperm-tabe? http-gw: ftp-proxy ftp-gw The http-gw code has support for ftp:// type urls without help of another proxy. ted keller On Sat, 1 Jul 2000, marc wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > I'm having a small problem with fwtk I was hoping you guys may > be able to help me out with. On my users browsers, they have the > ftp proxy set to olympus:8080 which is where I'm running the http-gw. > however when they try to download from a ftp site through the www, > they get the following: > > FTP Error- 200 > > 200 Type set to I. > > http-gw version (olympus.eisenbarth.org) > > My netperm looks like (the ftp and http sections at least): > # Ftp gateway rules: > # -------------------------- > ftp-gw: denial-msg /usr/local/etc/ftp-deny.txt > ftp-gw: welcome-msg /usr/local/etc/ftp-welcome.txt > ftp-gw: timeout 3600 > ftp-gw: deny-hosts unknown > ftp-gw: permit-hosts 148.104.2.* -log { retr stor } > > # HTTP rules > # ------------------------------------ > http-gw: policy -java -javascript -activex > http-gw: ftp-proxy ftp-gw > http-gw: deny-hosts unknown > http-gw: permit-hosts 148.104.2.* > http-gw: permit-hosts 127.0.0.1 > http-gw: default-httpd olympus.eisenbarth.org > > what's up?? Also, my system is logging the CRAP outta the http > server... it's not explicitly enabled.. is it by default? How can > I tell it not to log out the wazoo? > > Thanks! > > -marc > > > > ---------- Original Message ---------------------------------- > From: Ted Keller > Date: Thu, 29 Jun 2000 19:38:10 -0400 (EDT) > > >Marc, > > > >You can install the socks server on the firewall. It is located at > >www.socks.nec.com. > > > >Make sure you configure it correctly. > > > > > >ted keller > > > > > >On Thu, 29 Jun 2000, marc wrote: > > > >> [To be removed from this list send the message "unsubscribe fwtk-users" in the > >> BODY of a mail message to majordomo@ex.tis.com.] > >> > >> How can I make fwtk compatiable with programs who have the only > >> firewall option as SOCKS4/5. > >> > >> -Marc > >> > > > > > From owner-fwtk-users@ex.tis.com Tue Jul 4 02:38 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id CAA24019 Tue, 4 Jul 2000 02:38:35 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id XAA20612; Mon, 3 Jul 2000 23:46:20 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 3 Jul 2000 22:46:30 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id WAA19844 for fwtk-users-outgoing; Mon, 3 Jul 2000 22:46:24 -0700 (PDT) 1. Cut Government in half 2. Wait thirty years 3. Repeat as necessary Message-Id: <200007040544.WAA04334@noid.net> X-Mini-Diatribe: To fix America: 1. Cut Government in half 2. Wait thirty years 3. Repeat as necessary Date: Mon, 3 Jul 2000 22:44:59 -0700 From: nptbl@noid.net To: fwtk-users@tis.com Subject: Here's a patch for a possible smap DoS problem Mail-Followup-To: fwtk-users@tis.com Mime-Version: 1.0 X-Mailer: Mutt 1.0i X-Operating-System: Linux 2.0.38 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/mixed; boundary="5vNYLRcllDrimb99" Content-Length: 1920 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] --5vNYLRcllDrimb99 Content-Type: text/plain; charset=us-ascii I was trying nessus (http://www.nessus.org/), a raw socket based scanner tool, and I discovered that smap can be made to fill it's spool with temporary files if it gets a SIGPIPE (broken pipe) because of improper TCP teardown by the client. This fixes it for me: --- smap.c.org Tue Jan 13 14:56:14 1998 +++ smap.c Mon Jul 3 21:49:37 2000 @@ -98,6 +98,14 @@ alarm(timeout); } +static void +brokenpipe() +{ + syslog(LLEV,"received SIGPIPE (broken pipe), aborting"); + if(tempfile != (char *)0) + unlink(tempfile); + smap_exit(1); +} main(ac,av) int ac; @@ -170,6 +178,8 @@ close(sockl); close(sock); } + + signal(SIGPIPE,brokenpipe); if(peername(0,rladdr,riaddr,sizeof(riaddr))) { syslog(LLEV,"cannot get remote host"); Am I too paranoid...? :^) -- } __o } _(\<._ Tor Perkins Send me e-mail with subject "get } (_)/ (_) 962687534@noidDoTnet pgp key" for automatic response. --5vNYLRcllDrimb99 Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename="smap.diff" --- smap.c.org Tue Jan 13 14:56:14 1998 +++ smap.c Mon Jul 3 21:49:37 2000 @@ -98,6 +98,14 @@ alarm(timeout); } +static void +brokenpipe() +{ + syslog(LLEV,"received SIGPIPE (broken pipe), aborting"); + if(tempfile != (char *)0) + unlink(tempfile); + smap_exit(1); +} main(ac,av) int ac; @@ -170,6 +178,8 @@ close(sockl); close(sock); } + + signal(SIGPIPE,brokenpipe); if(peername(0,rladdr,riaddr,sizeof(riaddr))) { syslog(LLEV,"cannot get remote host"); --5vNYLRcllDrimb99-- From owner-fwtk-users@ex.tis.com Tue Jul 4 09:30 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA25204 Tue, 4 Jul 2000 09:30:42 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA24207; Tue, 4 Jul 2000 06:38:38 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 4 Jul 2000 05:17:07 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA22088 for fwtk-users-outgoing; Tue, 4 Jul 2000 05:16:57 -0700 (PDT) Date: Tue, 4 Jul 2000 08:16:23 -0400 (EDT) From: Ted Keller To: marc cc: fwtk-users@ex.tis.com Subject: Re: Another Followup In-Reply-To: <200007031102.AA3527541422@mail.centraltx.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1941 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Marc, The ftp protocol calls for two channels to be opened. The first is the standard command channel (port 21). It will use this channel to pass basic comands between the client and the server. When a data transfer is requested (like the dir command your client issued), the client and server (in our case the http proxy) "negotiate" to use a high number port for the data transfer. Normally port 20 (ftp-data) is not used - but some negotiated high numbered port. (in your example prot 4176). If you have these blocked such that the http-gw cannot open them up - then your ftp transfers will fail. Note - the same holds true for ftp-gw. ted keller On Mon, 3 Jul 2000, marc wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Also, the following is in my logs: > > Jul 3 10:44:56 olympus /kernel: Connection attempt to TCP 208.189.1 > 26.3:4172 from 205.188.247.193:20 > Jul 3 10:45:00 olympus CRON[12521]: (root) CMD (/usr/libexec/atrun) > > Jul 3 10:45:13 olympus http-gw[12523]: permit host=athens.eisen > barth.org./148.104.2.222 use of gateway (V2.1) > Jul 3 10:45:13 olympus http-gw[12523]: log host=athens.eisenbar > th.org./148.104.2.222 protocol=FTP cmd=dir dest=ftp.netscape.com path=/ > Jul 3 10:45:17 olympus http-gw[12523]: exit host=athens.eisenba > rth.org./148.104.2.222 cmds=1 in=0 out=0 user=unauth duration=4 > Jul 3 10:45:17 olympus /kernel: Connection attempt to TCP 208.189.1 > 26.3:4176 from 205.188.247.194:20 > > It looks like the return TCP packets from the ftp server are using > unprivledged ports on my machine, and fwtk won't let them in... > what do you guys think? > > -Marc > From owner-fwtk-users@ex.tis.com Tue Jul 4 09:30 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA25203 Tue, 4 Jul 2000 09:30:42 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA24203; Tue, 4 Jul 2000 06:38:38 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 4 Jul 2000 05:43:13 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA22353 for fwtk-users-outgoing; Tue, 4 Jul 2000 05:43:01 -0700 (PDT) Date: Tue, 4 Jul 2000 08:41:44 -0400 (EDT) From: Ted Keller To: nptbl@noid.net cc: fwtk-users@tis.com Subject: Re: Here's a patch for a possible smap DoS problem In-Reply-To: <200007040544.WAA04334@noid.net> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 2013 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Tor, This may explain something that I and others have noted. Periodially, I see files "hanging around" in my smap spool directory. It always appeared that smap exited somehow - but never left any traces. The message files would be at some level completion - from not data to nearly complete messages. The message content does not seem to be part of the "smap failure" process. Later, the remote host would connect and deliver the message properly. I don't remember seeing left over files from my internal local hosts. The frequency increases when load is high - but I do see left over files periodically on low load days. Any comments? ted keller On Mon, 3 Jul 2000 nptbl@noid.net wrote: > I was trying nessus (http://www.nessus.org/), a raw socket based > scanner tool, and I discovered that smap can be made to fill it's > spool with temporary files if it gets a SIGPIPE (broken pipe) because > of improper TCP teardown by the client. > > This fixes it for me: > > --- smap.c.org Tue Jan 13 14:56:14 1998 > +++ smap.c Mon Jul 3 21:49:37 2000 > @@ -98,6 +98,14 @@ > alarm(timeout); > } > > +static void > +brokenpipe() > +{ > + syslog(LLEV,"received SIGPIPE (broken pipe), aborting"); > + if(tempfile != (char *)0) > + unlink(tempfile); > + smap_exit(1); > +} > > main(ac,av) > int ac; > @@ -170,6 +178,8 @@ > close(sockl); > close(sock); > } > + > + signal(SIGPIPE,brokenpipe); > > if(peername(0,rladdr,riaddr,sizeof(riaddr))) { > syslog(LLEV,"cannot get remote host"); > > Am I too paranoid...? :^) > > -- > } __o > } _(\<._ Tor Perkins Send me e-mail with subject "get > } (_)/ (_) 962687534@noidDoTnet pgp key" for automatic response. > From owner-fwtk-users@ex.tis.com Tue Jul 4 09:50 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA25255 Tue, 4 Jul 2000 09:50:06 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA25124; Tue, 4 Jul 2000 06:58:04 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 4 Jul 2000 06:14:31 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA23033 for fwtk-users-outgoing; Tue, 4 Jul 2000 06:14:26 -0700 (PDT) From: "TJ O Connor" To: "Fwtk Users" , "fwtk users" , "Fwtk Users" Date: Tue, 4 Jul 2000 14:15:24 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 623 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Could someone please show me their netperm-table and inetd files. I seem to have made a hash of the system. Nobody can telnet to any of the machines or servers on the network. If anyone could help me it would be very appreciated - -- _ T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, Assistant SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Tue Jul 4 09:50 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA25254 Tue, 4 Jul 2000 09:50:06 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA25120; Tue, 4 Jul 2000 06:58:03 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 4 Jul 2000 06:14:29 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA23024 for fwtk-users-outgoing; Tue, 4 Jul 2000 06:14:23 -0700 (PDT) From: "TJ O Connor" To: "Fwtk Users" , "fwtk users" , "Fwtk Users" Date: Tue, 4 Jul 2000 14:15:24 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 623 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Could someone please show me their netperm-table and inetd files. I seem to have made a hash of the system. Nobody can telnet to any of the machines or servers on the network. If anyone could help me it would be very appreciated - -- _ T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, Assistant SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Tue Jul 4 11:47 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA25578 Tue, 4 Jul 2000 11:47:26 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA28191; Tue, 4 Jul 2000 08:55:23 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 4 Jul 2000 08:00:20 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA27426 for fwtk-users-outgoing; Tue, 4 Jul 2000 08:00:03 -0700 (PDT) Message-Id: <4.2.2.20000704104429.00b1db20@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Tue, 04 Jul 2000 10:48:37 -0400 To: Ted Keller , nptbl@noid.net From: Rick Murphy Subject: Re: Here's a patch for a possible smap DoS problem Cc: fwtk-users@tis.com In-Reply-To: References: <200007040544.WAA04334@noid.net> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 863 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 08:41 AM 7/4/00 -0400, Ted Keller wrote: >Tor, > >This may explain something that I and others have noted. Periodially, I >see files "hanging around" in my smap spool directory. I agree with Ted - this has been a problem since day one for some people. (I never see any dangling spool files on my BSD system, but some people see a number of those. I run BSD, which I think returns an error on the read call, not a SYSPIPE signal. Ted, why it's not directly related to load is because it can be triggered by a number of external events - for example, network connectivity problems on the sender's end. If the timeout doesn't trigger before TCP declares the link down, you'll get a sigpipe. Good catch, Tor. -Rick From owner-fwtk-users@ex.tis.com Tue Jul 4 12:40 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA25705 Tue, 4 Jul 2000 12:40:32 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA29849; Tue, 4 Jul 2000 09:48:29 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 4 Jul 2000 08:57:12 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA28213 for fwtk-users-outgoing; Tue, 4 Jul 2000 08:57:01 -0700 (PDT) Date: Tue, 4 Jul 2000 16:56:36 +0100 From: James Fidell To: gauntlet-user@mail.rmsbus.com Cc: fwtk-users@tis.com Subject: Re: Here's a patch for a possible smap DoS problem Message-ID: <20000704165636.A12717@gluttony.corp.cloud9.co.uk> References: <200007040544.WAA04334@noid.net> <4.2.2.20000704104429.00b1db20@mail.itm-inst.com> Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: <4.2.2.20000704104429.00b1db20@mail.itm-inst.com>; from rmurphy@itm-inst.com on Tue, Jul 04, 2000 at 10:48:37AM -0400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1342 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Quoting Rick Murphy (rmurphy@itm-inst.com): > At 08:41 AM 7/4/00 -0400, Ted Keller wrote: > >Tor, > > > >This may explain something that I and others have noted. Periodially, I > >see files "hanging around" in my smap spool directory. > > I agree with Ted - this has been a problem since day one for some people. > (I never see any dangling spool files on my BSD system, but some people see > a number of those. I run BSD, which I think returns an error on the read > call, not a SYSPIPE signal. > > Ted, why it's not directly related to load is because it can be triggered > by a number of external events - for example, network connectivity problems > on the sender's end. If the timeout doesn't trigger before TCP declares the > link down, you'll get a sigpipe. I've seen what I believe is the same problem in Gauntlet v5.0 on BSD/OS, too. I don't have access to those systems any more, but if someone does, it might well be worth checking. James. -- "Yield to temptation -- | Consultancy: james@cloud9.co.uk it may not pass your way again" | http://www.cloud9.co.uk/james | - Lazarus Long | James Fidell From owner-fwtk-users@ex.tis.com Tue Jul 4 13:23 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA25860 Tue, 4 Jul 2000 13:23:20 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA01464; Tue, 4 Jul 2000 10:31:17 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 4 Jul 2000 09:37:08 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA29196 for fwtk-users-outgoing; Tue, 4 Jul 2000 09:36:58 -0700 (PDT) Date: Tue, 4 Jul 2000 12:35:55 -0400 (EDT) From: Ted Keller To: TJ O Connor cc: Fwtk Users , fwtk users , Fwtk Users Subject: Re: your mail In-Reply-To: Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1512 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] TJ - a small sample for a solaris based system... Hope this helps. tek # # ftp gateway rules: # ------------------ # ftp-gw: denial-msg /usr/local/fwtk/deny.txt ftp-gw: timeout 21600 ftp-gw: directory /fwroot # Brecksville ftp-gw: permit-hosts xxx.xxx.xxx.* -log { retr stor } ftp-gw: deny-hosts * # # # # telnet gateway rules: # --------------------- # tn-gw: denial-msg /usr/local/fwtk/deny.txt tn-gw: timeout 1800 tn-gw: directory /fwroot # Brecksville tn-gw: permit-hosts xxx.xx.xx.* -dest * tn-gw: deny-hosts * # # tn-gw: prompt tn-gw> ftp stream tcp nowait root /usr/local/fwtk-v2.1/ftp-gw ftp-gw telnet stream tcp nowait root /usr/local/fwtk-v2.1/tn-gw tn-gw On Tue, 4 Jul 2000, TJ O Connor wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Could someone please show me their netperm-table and inetd files. > I seem to have made a hash of the system. > Nobody can telnet to any of the machines or servers on the network. > If anyone could help me it would be very appreciated > > - -- _ > T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, > Assistant SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. > Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 > toconnor@comnitel.com \_/ Fax: +353 21 7305624 > From owner-fwtk-users@ex.tis.com Tue Jul 4 13:23 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA25861 Tue, 4 Jul 2000 13:23:20 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA01462; Tue, 4 Jul 2000 10:31:17 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 4 Jul 2000 09:37:13 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA29205 for fwtk-users-outgoing; Tue, 4 Jul 2000 09:37:02 -0700 (PDT) Date: Tue, 4 Jul 2000 12:35:55 -0400 (EDT) From: Ted Keller To: TJ O Connor cc: Fwtk Users , fwtk users , Fwtk Users Subject: Re: your mail In-Reply-To: Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1512 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] TJ - a small sample for a solaris based system... Hope this helps. tek # # ftp gateway rules: # ------------------ # ftp-gw: denial-msg /usr/local/fwtk/deny.txt ftp-gw: timeout 21600 ftp-gw: directory /fwroot # Brecksville ftp-gw: permit-hosts xxx.xxx.xxx.* -log { retr stor } ftp-gw: deny-hosts * # # # # telnet gateway rules: # --------------------- # tn-gw: denial-msg /usr/local/fwtk/deny.txt tn-gw: timeout 1800 tn-gw: directory /fwroot # Brecksville tn-gw: permit-hosts xxx.xx.xx.* -dest * tn-gw: deny-hosts * # # tn-gw: prompt tn-gw> ftp stream tcp nowait root /usr/local/fwtk-v2.1/ftp-gw ftp-gw telnet stream tcp nowait root /usr/local/fwtk-v2.1/tn-gw tn-gw On Tue, 4 Jul 2000, TJ O Connor wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Could someone please show me their netperm-table and inetd files. > I seem to have made a hash of the system. > Nobody can telnet to any of the machines or servers on the network. > If anyone could help me it would be very appreciated > > - -- _ > T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, > Assistant SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. > Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 > toconnor@comnitel.com \_/ Fax: +353 21 7305624 > From owner-fwtk-users@ex.tis.com Tue Jul 4 14:40 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA26088 Tue, 4 Jul 2000 14:40:49 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA03625; Tue, 4 Jul 2000 11:48:45 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 4 Jul 2000 10:51:22 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA02104 for fwtk-users-outgoing; Tue, 4 Jul 2000 10:51:17 -0700 (PDT) 1. Cut Government in half 2. Wait thirty years 3. Repeat as necessary Message-Id: <200007041750.KAA12388@noid.net> X-Mini-Diatribe: To fix America: 1. Cut Government in half 2. Wait thirty years 3. Repeat as necessary Date: Tue, 4 Jul 2000 10:50:08 -0700 From: nptbl@noid.net To: fwtk-users@tis.com Subject: Re: Here's a patch for a possible smap DoS problem Mail-Followup-To: fwtk-users@tis.com References: <200007040544.WAA04334@noid.net> <4.2.2.20000704104429.00b1db20@mail.itm-inst.com> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <4.2.2.20000704104429.00b1db20@mail.itm-inst.com>; from rmurphy@itm-inst.com on Tue, Jul 04, 2000 at 10:48:37AM -0400 X-Operating-System: Linux 2.0.38 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1720 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] > I run BSD, which I think returns an error on the read call, not a > SYSPIPE signal. BSD may do that (I don't know) but what I was seeing is that smap was writing when it happened, specifically it was in a fflush(stdout) when it gets the signal. Nessus would nail up a connection, hammer out it's "'sploit", and FIN the connection. But nessus was not waiting for smap's FIN. This was leaving smap in a constipated state, just trying to say "250 OK...", meanwhile, nessus was long gone. Inline with Ted's observation, smap would link it's xmaXXXXXX tempfile to it's smaXXXXXX spool file (for smapd) as long as DATA was sent, so for mostly complete connections, mail flow was not interrupted. Unfortunately, it would never get around to unlinking the tempfile because of the signal. > Ted, why it's not directly related to load is because it can be > triggered by a number of external events - for example, network > connectivity problems on the sender's end. If the timeout doesn't > trigger before TCP declares the link down, you'll get a sigpipe. You are right, it's not directly related to load, but it might be indirectly related. Higher load probably means higher WAN side traffic, which could lead to more dropped packets. Also if you've got more SMTP traffic, statistically you've got a better chance of seeing the problem. > Good catch, Tor. Thanks. I was lucky to have discovered a reproducible way to trigger the problem. -- } __o } _(\<._ Tor Perkins Send me e-mail with subject "get } (_)/ (_) 962727327@noidDoTnet pgp key" for automatic response. From owner-fwtk-users@ex.tis.com Wed Jul 5 08:40 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA28774 Wed, 5 Jul 2000 08:40:51 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA09659; Wed, 5 Jul 2000 05:48:45 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 5 Jul 2000 04:47:45 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA08649 for fwtk-users-outgoing; Wed, 5 Jul 2000 04:47:34 -0700 (PDT) To: fwtk-users@ex.tis.com Date: Tue, 04 Jul 2000 20:44:08 -0700 From: "Ramesh c" Message-ID: Mime-Version: 1.0 X-Sent-Mail: off Reply-To: rameshc@mailcity.com X-Mailer: MailCity Service Subject: OUTLOOK WEB ACCESS over internet X-Sender-Ip: 192.169.41.33 Organization: MailCity (http://www.mailcity.lycos.com:80) Content-Language: en Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 529 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, I have MS-Exchange server 5.5 running with OWA configured.People are able to access OWA within intranet not over internet. What should I enable on the firewall for people to access OWA thru internet?. Anything to be done on exchange server? Please adv. cheers Ramesh Send FREE Greetings for Father's Day--or any day! Click here: http://www.whowhere.lycos.com/redirects/fathers_day.rdct From owner-fwtk-users@ex.tis.com Wed Jul 5 10:01 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA28990 Wed, 5 Jul 2000 10:01:06 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA11368; Wed, 5 Jul 2000 07:08:18 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 5 Jul 2000 05:49:50 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA09677 for fwtk-users-outgoing; Wed, 5 Jul 2000 05:49:40 -0700 (PDT) Message-ID: <23429C708328D211B21200A0C9B2176130F2B2@prospero.herefordshire.gov.uk> From: "Randal, Phil" To: "'Michael Levy'" , fwtk-users@lists.nai.com Subject: RE: http-gw and tag processing Date: Wed, 5 Jul 2000 13:45:15 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1022 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] > > I am new to this list, so my apologies if I am covering old ground. > We discovered that http-gw is truncating value="...." fields in > html files when sending them to us. Looking at the code, I see > that it doesn't allow quoted values to be longer than 1026 bytes. > Is there some sound reason for this restriction? Or is it simply > a case of no one thinking a quoted value would ever be longer than > this value? > > ...Michael Levy > VPR&D NewHeights Software I've had a brief look at this, and Michael's right. It also is the cause of problems setting up product profiles on the excellent www.filewatch.com. Has anyone patched http-gw so that it works with FileWatch? I tried with large buffers (100K bytes) without success. Any ideas, insights, or cures? Phil ------------------------------------------------------------ Phil Randal Network Engineer Herefordshire Council, UK From owner-fwtk-users@ex.tis.com Wed Jul 5 10:41 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA29151 Wed, 5 Jul 2000 10:40:50 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA12354; Wed, 5 Jul 2000 07:48:49 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 5 Jul 2000 06:57:15 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA11147 for fwtk-users-outgoing; Wed, 5 Jul 2000 06:57:04 -0700 (PDT) Date: Wed, 5 Jul 2000 09:55:11 -0400 (EDT) From: Ted Keller To: Ramesh c cc: fwtk-users@ex.tis.com Subject: Re: OUTLOOK WEB ACCESS over internet In-Reply-To: Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1008 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Ramesh, I believe the OWA is the outlook web adaptor. That implies that you have to allow http browser access to the exchange server. This probably means that you will have to plug both http and https through your firewall to get to the exchange server..... ted keller On Tue, 4 Jul 2000, Ramesh c wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hello, > > I have MS-Exchange server 5.5 running with OWA configured.People are able to access OWA within intranet not over internet. > > What should I enable on the firewall for people to access OWA thru internet?. Anything to be done on exchange server? > > Please adv. > > cheers > Ramesh > > > Send FREE Greetings for Father's Day--or any day! > Click here: http://www.whowhere.lycos.com/redirects/fathers_day.rdct > From owner-fwtk-users@ex.tis.com Wed Jul 5 12:35 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA29502 Wed, 5 Jul 2000 12:34:53 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA15349; Wed, 5 Jul 2000 09:29:24 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 5 Jul 2000 08:35:52 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA13404 for fwtk-users-outgoing; Wed, 5 Jul 2000 08:35:42 -0700 (PDT) Message-ID: <20000705153439.923.qmail@web4104.mail.yahoo.com> Date: Wed, 5 Jul 2000 08:34:39 -0700 (PDT) From: J A Shamsi Subject: smtp issue To: fwtk-users@ex.tis.com, fwtk-users@lists.nai.com, questions@FreeBSD.org MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1415 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello I am configuring TIS FWTK on a freeBSD 3.2 machine. I am facing problem in configuring smtp (SMAP , SMAPD proxy) I have the following entry in my inetd.conf file smtp stream tcp nowait root /usr/local/libexec/smap =>smap and following in my services file smtp 25/tcp mail smtp 25/udp mail The problem is that, when I am trying to start inetd processes I am getting the message "bind adreess already in use." I did not gets any error message, when I comments out the entry for smtp in my inetd file. I am able to send and recieve messages, after commenting out entry in inetd file( although I donot have any other entry in my inetd file) It looks like that it is starting the process from rc.conf ( although I donot have an entry for smtp in in rc.conf) the error message of bind adrees already in use also disappears when I change the port from 25 to 26. has anyone got any idea about the problem?? what should I do if I want to use smap proxy? do i have to start smapd proxy also?? and do I have to change configuration on the client side also to use smap proxy ( tis fwtk) thanks in advance jawwad shamsi __________________________________________________ Do You Yahoo!? Kick off your party with Yahoo! Invites. http://invites.yahoo.com/ From owner-fwtk-users@ex.tis.com Wed Jul 5 12:35 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA29505 Wed, 5 Jul 2000 12:35:04 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA15357; Wed, 5 Jul 2000 09:29:28 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 5 Jul 2000 08:35:48 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA13397 for fwtk-users-outgoing; Wed, 5 Jul 2000 08:35:38 -0700 (PDT) Message-ID: <20000705153439.923.qmail@web4104.mail.yahoo.com> Date: Wed, 5 Jul 2000 08:34:39 -0700 (PDT) From: J A Shamsi Subject: smtp issue To: fwtk-users@ex.tis.com, fwtk-users@lists.nai.com, questions@FreeBSD.org MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1415 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello I am configuring TIS FWTK on a freeBSD 3.2 machine. I am facing problem in configuring smtp (SMAP , SMAPD proxy) I have the following entry in my inetd.conf file smtp stream tcp nowait root /usr/local/libexec/smap =>smap and following in my services file smtp 25/tcp mail smtp 25/udp mail The problem is that, when I am trying to start inetd processes I am getting the message "bind adreess already in use." I did not gets any error message, when I comments out the entry for smtp in my inetd file. I am able to send and recieve messages, after commenting out entry in inetd file( although I donot have any other entry in my inetd file) It looks like that it is starting the process from rc.conf ( although I donot have an entry for smtp in in rc.conf) the error message of bind adrees already in use also disappears when I change the port from 25 to 26. has anyone got any idea about the problem?? what should I do if I want to use smap proxy? do i have to start smapd proxy also?? and do I have to change configuration on the client side also to use smap proxy ( tis fwtk) thanks in advance jawwad shamsi __________________________________________________ Do You Yahoo!? Kick off your party with Yahoo! Invites. http://invites.yahoo.com/ From owner-fwtk-users@ex.tis.com Wed Jul 5 12:35 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA29508 Wed, 5 Jul 2000 12:35:12 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA15961; Wed, 5 Jul 2000 09:43:08 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 5 Jul 2000 08:55:59 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA14137 for fwtk-users-outgoing; Wed, 5 Jul 2000 08:55:43 -0700 (PDT) Date: Wed, 5 Jul 2000 17:50:17 +0200 From: Willem Brown To: J A Shamsi Cc: fwtk-users@ex.tis.com, fwtk-users@lists.nai.com, questions@FreeBSD.org Subject: Re: smtp issue Message-ID: <20000705175017.C28124@snoopy.brwn.org> References: <20000705153439.923.qmail@web4104.mail.yahoo.com> Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: <20000705153439.923.qmail@web4104.mail.yahoo.com>; from jashamsi@yahoo.com on Wed, Jul 05, 2000 at 08:34:39AM -0700 X-Public-Key: http://willem.brwn.org/pubkey.txt X-Chat-Server: http://chat.brwn.org/ Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 2261 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, Could it be that sendmail is starting? Use the sockstat command to see which app is using port 25. Also make sure you have sendmail_enable="NO" in /etc/rc.conf. Regards Willem Brown On Wed, Jul 05, 2000 at 08:34:39AM -0700, J A Shamsi wrote: > Hello > > I am configuring TIS FWTK on a freeBSD 3.2 machine. > I am facing problem in configuring smtp (SMAP , SMAPD > proxy) > > I have the following entry in my inetd.conf file > > smtp stream tcp nowait root /usr/local/libexec/smap > =>smap > > and following in my services file > > smtp 25/tcp mail > smtp 25/udp mail > > The problem is that, when I am trying to start inetd > processes > I am getting the message > "bind adreess already in use." > > I did not gets any error message, when I comments out > the entry for smtp in my inetd file. > I am able to send and recieve messages, after > commenting out entry in inetd file( although I donot > have any other entry in my inetd file) > It looks like that it is starting the process from > rc.conf ( although I donot have an entry for smtp in > in rc.conf) > > the error message of bind adrees already in use > also disappears when I change the port from 25 to 26. > > has anyone got any idea about the problem?? > > what should I do if I want to use smap proxy? > do i have to start smapd proxy also?? > > and do I have to change configuration on the client > side also to use smap proxy ( tis fwtk) > > thanks in advance > > jawwad shamsi > > > > > > > > > > > > __________________________________________________ > Do You Yahoo!? > Kick off your party with Yahoo! Invites. > http://invites.yahoo.com/ > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > -- /* =============================================================== */ /* Linux, FreeBSD, NetBSD, OpenBSD. The choice is yours. */ /* =============================================================== */ Anything good in life is either illegal, immoral or fattening. From owner-fwtk-users@ex.tis.com Wed Jul 5 17:46 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA00394 Wed, 5 Jul 2000 17:46:18 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA20848; Wed, 5 Jul 2000 14:54:17 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 5 Jul 2000 13:56:35 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA18848 for fwtk-users-outgoing; Wed, 5 Jul 2000 13:56:29 -0700 (PDT) Message-ID: <20000705205530.930.qmail@web4106.mail.yahoo.com> Date: Wed, 5 Jul 2000 13:55:30 -0700 (PDT) From: J A Shamsi Subject: smtp problem To: fwtk-users@ex.tis.com, fwtk-users@lists.nai.com MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 885 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi I am configuring fwtk, smap proxy on 3.2 freebsd machine I have following entries for smtp in /etc/services smtp 25/tcp mail smtp 25/udp mail in /etc/inetd.conf smtp stream tcp nowait root /usr/local/libexec/smap =>smap -daemon 25 and in /etc/rc.conf sendmail_enable="NO" but I cannot send and recieve email form any other hosts I can send and recieve emails from users at the same hosts. i didn't recieve any error and the send and recieved emails from and to the other hosts are not bounced back . just wondering if anyone has the idea about the problem thanks jawwad __________________________________________________ Do You Yahoo!? Send instant messages & get email alerts with Yahoo! Messenger. http://im.yahoo.com/ From owner-fwtk-users@ex.tis.com Wed Jul 5 17:46 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA00393 Wed, 5 Jul 2000 17:46:18 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA20844; Wed, 5 Jul 2000 14:54:13 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 5 Jul 2000 13:56:23 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA18833 for fwtk-users-outgoing; Wed, 5 Jul 2000 13:56:18 -0700 (PDT) Message-ID: <20000705205530.930.qmail@web4106.mail.yahoo.com> Date: Wed, 5 Jul 2000 13:55:30 -0700 (PDT) From: J A Shamsi Subject: smtp problem To: fwtk-users@ex.tis.com, fwtk-users@lists.nai.com MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 885 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi I am configuring fwtk, smap proxy on 3.2 freebsd machine I have following entries for smtp in /etc/services smtp 25/tcp mail smtp 25/udp mail in /etc/inetd.conf smtp stream tcp nowait root /usr/local/libexec/smap =>smap -daemon 25 and in /etc/rc.conf sendmail_enable="NO" but I cannot send and recieve email form any other hosts I can send and recieve emails from users at the same hosts. i didn't recieve any error and the send and recieved emails from and to the other hosts are not bounced back . just wondering if anyone has the idea about the problem thanks jawwad __________________________________________________ Do You Yahoo!? Send instant messages & get email alerts with Yahoo! Messenger. http://im.yahoo.com/ From owner-fwtk-users@ex.tis.com Wed Jul 5 17:54 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA00417 Wed, 5 Jul 2000 17:54:44 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA21260; Wed, 5 Jul 2000 15:02:43 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 5 Jul 2000 14:20:50 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA19457 for fwtk-users-outgoing; Wed, 5 Jul 2000 14:20:44 -0700 (PDT) Date: Wed, 5 Jul 2000 17:19:38 -0400 (EDT) From: Ted Keller To: Fwtk Users Subject: sigpipe broken Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 612 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I installed Tor Perkins patch yesterday and was surprised as to how many sigpipe broken messages I received in my log files. However, there are no dangling files yet - which is a good thing. The number of times this occurs is significantly higher than the number of orphaned files that I would expect to see in one day. I suspect these will occur if the remote MTA exits without the corresponding quit in the smtp protocol - ie - they aren't following the protocol. ted keller From owner-fwtk-users@ex.tis.com Wed Jul 5 18:44 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA00494 Wed, 5 Jul 2000 18:44:42 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA23782; Wed, 5 Jul 2000 15:52:41 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 5 Jul 2000 15:02:15 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA21215 for fwtk-users-outgoing; Wed, 5 Jul 2000 15:02:09 -0700 (PDT) Message-ID: <20000705220111.7484.qmail@web4106.mail.yahoo.com> Date: Wed, 5 Jul 2000 15:01:11 -0700 (PDT) From: J A Shamsi Subject: smtp problem To: fwtk-users@lists.nai.com MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 878 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi I am configuring fwtk, smap proxy on 3.2 freebsd machine I have following entries for smtp in /etc/services smtp 25/tcp mail smtp 25/udp mail in /etc/inetd.conf smtp stream tcp nowait root /usr/local/libexec/smap=>smap -daemon 25 and in /etc/rc.confsendmail_enable="NO" but I cannot send and recieve email form any other hosts I can send and recieve emails from users at the same hosts. i didn't recieve any error and the send and recieved emails from and to the other hosts are not bounced back . just wondering if anyone has the idea about the problem thanks jawwad __________________________________________________ Do You Yahoo!? Send instant messages & get email alerts with Yahoo! Messenger. http://im.yahoo.com/ From owner-fwtk-users@ex.tis.com Wed Jul 5 19:50 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA00602 Wed, 5 Jul 2000 19:50:35 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA25361; Wed, 5 Jul 2000 16:58:34 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 5 Jul 2000 16:06:26 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA24042 for fwtk-users-outgoing; Wed, 5 Jul 2000 16:06:16 -0700 (PDT) From: "Tom Krotchko" To: , Subject: RE: OUTLOOK WEB ACCESS over internet Date: Wed, 5 Jul 2000 19:05:41 -0400 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) In-Reply-To: Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1485 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Its actually quite simple. I've done the very thing with gauntlet, but the principle is the same. The OWA is set to listen on port 80, since its a web server. In our case, we couldn't use port 80 for incoming, so I set the firewall to allow access from any IP address on port 8888 and the plug-gw will plug this over to the internal address of the webserver on port 80. So internally you have: http://outlookserver/exchange But externally, it will be the DNS name for your server: http://outlookserver.somecompany.com:8888/exchange Remember that the port remapping is completely optional. -----Original Message----- From: owner-fwtk-users@ex.tis.com [mailto:owner-fwtk-users@ex.tis.com]On Behalf Of Ramesh c Sent: Tuesday, July 04, 2000 11:44 PM To: fwtk-users@ex.tis.com Subject: OUTLOOK WEB ACCESS over internet [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, I have MS-Exchange server 5.5 running with OWA configured.People are able to access OWA within intranet not over internet. What should I enable on the firewall for people to access OWA thru internet?. Anything to be done on exchange server? Please adv. cheers Ramesh Send FREE Greetings for Father's Day--or any day! Click here: http://www.whowhere.lycos.com/redirects/fathers_day.rdct From owner-fwtk-users@ex.tis.com Thu Jul 6 15:39 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA00947 Thu, 6 Jul 2000 15:39:30 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA01115; Thu, 6 Jul 2000 12:47:24 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 6 Jul 2000 11:15:42 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA00231 for fwtk-users-outgoing; Thu, 6 Jul 2000 11:15:37 -0700 (PDT) Mime-Version: 1.0 X-Sender: farone@mail.gvillesun.com Message-Id: In-Reply-To: <20000705220111.7484.qmail@web4106.mail.yahoo.com> References: <20000705220111.7484.qmail@web4106.mail.yahoo.com> Date: Thu, 6 Jul 2000 14:08:01 -0400 To: fwtk-users@lists.nai.com From: Mark C Farone Subject: http1.1 problem Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" ; format="flowed" Content-Length: 1869 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I'm having problems accessing certain pages through http-gw 2.1 when the remote server seems to require HTTP/1.1. So far, all the servers happen to be running IIS. Specifically, the pages require a HTTP/1.1 'Host:' command. Looking through the archives, I see that Rick had a patch for HTTP/1.1, but I don't see it on fwtk.org. I'm not convinced that this is a problem with http-gw, but some of my users need to access some of these sites. Thanks for any suggestions or pointers. Here's an example: >[farone@prism farone]$ telnet www.eshopflorida.com 80 >Trying 206.98.206.10... >Connected to www.eshopflorida.com. >Escape character is '^]'. >GET >/MALL/Catalog/StoreRedir/asp/url/http%3A%2F%2Fwww%2Eaaadiscountsports%2Ecom/company_id/1000011398/name/AAA+Discount+Sports%2Ecom/mall_id/1000010557.html >HTTP/1.0 > >HTTP/1.1 404 Object Not Found >Server: Microsoft-IIS/4.0 >Date: Thu, 06 Jul 2000 17:44:01 GMT >Content-Type: text/html >Content-Length: 461 >[...] It works only if you use the HTTP/1.1 'Host' command, regardless of whether you specify HTTP/1.0 or 1.1 (rfc2616 states it is required with 1.1): >[farone@prism farone]$ telnet www.eshopflorida.com 80 >Trying 206.98.206.10... >Connected to www.eshopflorida.com. >Escape character is '^]'. >GET >/MALL/Catalog/StoreRedir/asp/url/http%3A%2F%2Fwww%2Eaaadiscountsports%2Ecom/company_id/1000011398/name/AAA+Discount+Sports%2Ecom/mall_id/1000010557.html >HTTP/1.0 >Host: www.eshopflorida.com > >HTTP/1.1 200 OK >Server: Microsoft-IIS/4.0 >Date: Thu, 06 Jul 2000 17:44:27 GMT >Content-Type: text/html >Cache-control: private Regards, Mark -- Mark C. Farone In the future, Systems Analyst, Gainesville Sun everything will work. From owner-fwtk-users@ex.tis.com Thu Jul 6 18:44 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA01673 Thu, 6 Jul 2000 18:44:08 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA03188; Thu, 6 Jul 2000 15:52:09 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 6 Jul 2000 14:51:35 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA02368 for fwtk-users-outgoing; Thu, 6 Jul 2000 14:51:24 -0700 (PDT) Date: Thu, 6 Jul 2000 17:46:40 -0400 (EDT) From: Ted Keller To: Mark C Farone cc: fwtk-users@lists.nai.com Subject: Re: http1.1 problem In-Reply-To: Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 3288 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Mark, Don't know if this is related.... I've seen a number of IIS type sites that do NOT send the final on a connection (EOF) which then terminates the read. I've done a lot of work with the Apache proxy server in this regard and had to change it's behaviour such that ... 1. - unbuffer any read requests comming from the remote servers 2. - pass all data received on an individual read directly to the client - do NOT try to re-buffer the data for improved network performance. 3. - keep timeouts "small" to that these connections eventually time out. What I observe - with these modifications - is that 1. the client starts to behave normally - ie - it looks like it is working 2. I have a lot of hanging connections to that server until timeout processes terminate these connections. You may be seeing the same type of activity through http-gw. I noted in my testing (I put up a quick http-gw server) that http-gw and apache experienced the same issues. I've patched apache - but didn't make corresponding patches to http-gw since I do not use that in my production environment. Hope this helps ted keller On Thu, 6 Jul 2000, Mark C Farone wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > I'm having problems accessing certain pages through http-gw 2.1 when > the remote server seems to require HTTP/1.1. So far, all the servers > happen to be running IIS. Specifically, the pages require a HTTP/1.1 > 'Host:' command. > > Looking through the archives, I see that Rick had a patch for > HTTP/1.1, but I don't see it on fwtk.org. I'm not convinced that > this is a problem with http-gw, but some of my users need to access > some of these sites. > > Thanks for any suggestions or pointers. > > > Here's an example: > > >[farone@prism farone]$ telnet www.eshopflorida.com 80 > >Trying 206.98.206.10... > >Connected to www.eshopflorida.com. > >Escape character is '^]'. > >GET > >/MALL/Catalog/StoreRedir/asp/url/http%3A%2F%2Fwww%2Eaaadiscountsports%2Ecom/company_id/1000011398/name/AAA+Discount+Sports%2Ecom/mall_id/1000010557.html > >HTTP/1.0 > > > >HTTP/1.1 404 Object Not Found > >Server: Microsoft-IIS/4.0 > >Date: Thu, 06 Jul 2000 17:44:01 GMT > >Content-Type: text/html > >Content-Length: 461 > >[...] > > > It works only if you use the HTTP/1.1 'Host' command, regardless of > whether you specify HTTP/1.0 or 1.1 (rfc2616 states it is required > with 1.1): > > >[farone@prism farone]$ telnet www.eshopflorida.com 80 > >Trying 206.98.206.10... > >Connected to www.eshopflorida.com. > >Escape character is '^]'. > >GET > >/MALL/Catalog/StoreRedir/asp/url/http%3A%2F%2Fwww%2Eaaadiscountsports%2Ecom/company_id/1000011398/name/AAA+Discount+Sports%2Ecom/mall_id/1000010557.html > >HTTP/1.0 > >Host: www.eshopflorida.com > > > >HTTP/1.1 200 OK > >Server: Microsoft-IIS/4.0 > >Date: Thu, 06 Jul 2000 17:44:27 GMT > >Content-Type: text/html > >Cache-control: private > > > Regards, > Mark > -- > Mark C. Farone In the future, > Systems Analyst, Gainesville Sun everything will work. > From owner-fwtk-users@ex.tis.com Fri Jul 7 04:36 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id EAA02964 Fri, 7 Jul 2000 04:36:41 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id BAA06352; Fri, 7 Jul 2000 01:44:11 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 7 Jul 2000 00:44:15 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id AAA05569 for fwtk-users-outgoing; Fri, 7 Jul 2000 00:44:04 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: Date: Fri, 07 Jul 2000 08:43:11 +0100 (BST) From: Tony Gale To: Ted Keller Subject: Re: http1.1 problem Cc: fwtk-users@lists.nai.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 639 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On 06-Jul-2000 Ted Keller wrote: > > Don't know if this is related.... I've seen a number of IIS type > sites > that do NOT send the final on a connection (EOF) which then > terminates the read. Could you point me a site (or 2) that does that. -tony --- E-Mail: Tony Gale I just forgot my whole philosophy of life!!! The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Fri Jul 7 09:11 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA03807 Fri, 7 Jul 2000 09:10:39 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA08632; Fri, 7 Jul 2000 06:18:41 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 7 Jul 2000 05:27:51 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA07808 for fwtk-users-outgoing; Fri, 7 Jul 2000 05:27:30 -0700 (PDT) Message-Id: <4.2.2.20000706185450.00b13650@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Thu, 06 Jul 2000 18:57:07 -0400 To: Mark C Farone , fwtk-users@lists.nai.com From: Rick Murphy Subject: Re: http1.1 problem In-Reply-To: References: <20000705220111.7484.qmail@web4106.mail.yahoo.com> <20000705220111.7484.qmail@web4106.mail.yahoo.com> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 869 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 02:08 PM 7/6/00 -0400, Mark C Farone wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > >I'm having problems accessing certain pages through http-gw 2.1 when the >remote server seems to require HTTP/1.1. So far, all the servers happen >to be running IIS. Specifically, the pages require a HTTP/1.1 'Host:' command. The "Host" header is added by the browser. If your browser generates one, http-gw isn't going to strip it. The http-gw doesn't support http/1.1 - chunked pages, for example. That's one of the reasons the Windows Update page doesn't work through http-gw; if you disable http 1.1 it works fine. -Rick From owner-fwtk-users@ex.tis.com Fri Jul 7 17:49 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA05149 Fri, 7 Jul 2000 17:48:58 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA11984; Fri, 7 Jul 2000 14:56:55 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 7 Jul 2000 13:35:38 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA11010 for fwtk-users-outgoing; Fri, 7 Jul 2000 13:35:27 -0700 (PDT) <20000705220111.7484.qmail@web4106.mail.yahoo.com> <4.2.2.20000706185450.00b13650@mail.itm-inst.com> Mime-Version: 1.0 X-Sender: farone@mail.gvillesun.com Message-Id: In-Reply-To: <4.2.2.20000706185450.00b13650@mail.itm-inst.com> References: <20000705220111.7484.qmail@web4106.mail.yahoo.com> <20000705220111.7484.qmail@web4106.mail.yahoo.com> <4.2.2.20000706185450.00b13650@mail.itm-inst.com> Date: Fri, 7 Jul 2000 16:29:31 -0400 To: Rick Murphy From: Mark C Farone Subject: Re: http1.1 problem Cc: fwtk-users@lists.nai.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" ; format="flowed" Content-Length: 3099 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 6:57 PM -0400 7/6/00, Rick Murphy wrote: >The "Host" header is added by the browser. If your browser generates >one, http-gw isn't going to strip it. Looking a little closer with snoop shows this to be the case--so it probably doesn't relate to the Host command. >The http-gw doesn't support http/1.1 - chunked pages, for example. >That's one of the reasons the Windows Update page doesn't work >through http-gw; if you disable http 1.1 it works fine. If I go direct (not through http-gw) and specify http/1.0, as I would expect, I don't seem to be getting chunked data from the IIS server. At least it isn't shown as a 1.1 Transfer-Encoding parameter and I get back the correct data: >[farone@prism farone]$ telnet www.eshopflorida.com 80 >Trying 206.98.206.10... >Connected to www.eshopflorida.com. >Escape character is '^]'. >GET >http://www.eshopflorida.com/MALL/Catalog/StoreRedir/asp/url/http%3A%2F%2Fwww%2Eaaadiscountsports%2Ecom/company_id/1000011398/name/AAA+Discount+Sports%2Ecom/mall_id/1000010557.html >HTTP/1.0 >Host: www.eshopflorida.com > >HTTP/1.1 200 OK >Server: Microsoft-IIS/4.0 >Date: Fri, 07 Jul 2000 14:45:11 GMT >Content-Type: text/html >Cache-control: private > > > >AAA Discount Sports.com > > >src="http://www.pointshop.com/MALL/Catalog/Redir1/asp/url/http%3A%2F%2Fwww%2Eaaadiscountsports%2Ecom/name/AAA+Discount+Sports%2Ecom/company_id/1000011398/mall_id/1000010557"> > > >Connection closed by foreign host. Using http-gw (hence http/1.0), I get back some data, but I don't get what I'd expect (note the URL difference in the frame src as compared to above): >[farone@halley farone]$ telnet proxy1.gvillesun.com 8888 >Trying 205.152.75.11... >Connected to galileo.gvillesun.com. >Escape character is '^]'. >GET >http://www.eshopflorida.com/MALL/Catalog/StoreRedir/asp/url/http%3A%2F%2Fwww%2Eaaadiscountsports%2Ecom/company_id/1000011398/name/AAA+Discount+Sports%2Ecom/mall_id/1000010557.html >HTTP/1.0 >Host: www.eshopflorida.com > >HTTP/1.1 200 OK >Server: Microsoft-IIS/4.0 >Date: Fri, 07 Jul 2000 20:17:58 GMT >Content-Type: text/html >Cache-control: private > > > > > > > >src="http://www.pointshop.com/MALL/Catalog/Redir1/asp/url/http%3A%2F%2Fwww/name//company_id//mall_id/"> > > >Connection closed by foreign host. If I go direct and ask for http/1.1 I clearly receive chunked data. It seems unlikely, but I'll check the code to see if http-gw could be filtering the content of the URL inside the returned HTML file?? Are there any useable http/1.1 patches (or any parts thereof) for http-gw? TIA again, Mark -- Mark C. Farone In the future, Systems Analyst, Gainesville Sun everything will work. From owner-fwtk-users@ex.tis.com Mon Jul 10 06:27 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id GAA13643 Mon, 10 Jul 2000 06:27:43 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id DAA27112; Mon, 10 Jul 2000 03:35:04 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 10 Jul 2000 00:50:42 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id AAA25184 for fwtk-users-outgoing; Mon, 10 Jul 2000 00:50:31 -0700 (PDT) X-Authentication-Warning: wall.pdv.de: mail set sender to using -f Message-ID: <6CC81B07CB44D311A1D20001FA7E9956233272@exchange.pdv.de> From: "Dirk.Nerling" To: "Firewall Toolkit (M-list)" Subject: smap: Mail From question Date: Mon, 10 Jul 2000 09:48:54 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.0.1460.8) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 811 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, I (as postmaster) got an email which pointed me to my smap configuration. The person told me, I have to enable mail from: <> because: "since many delivery agents use such mail from: when generating mail delivery notices. Blocking it, you're happily block any delivery messages to your system, so that mail senders will never know about mistakes in recipients addresses." Is this true? Should I enable this feature and if so, which smap options could to this? best regards Dirk -- Dirk Nerling, PDV-Systeme Erfurt, Haarbergstr. 73, 99097 Erfurt, phone: ++49-361-4407144 PGP Fingerprint: C559 FF0E BAD0 9E09 F720 20F3 683E 357F 69B5 CC83 http://www.pdv.de From owner-fwtk-users@ex.tis.com Mon Jul 10 06:42 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id GAA13689 Mon, 10 Jul 2000 06:42:38 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id DAA27418; Mon, 10 Jul 2000 03:50:09 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 10 Jul 2000 02:23:43 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id CAA25863 for fwtk-users-outgoing; Mon, 10 Jul 2000 02:23:33 -0700 (PDT) From: lv@lynxsk.lynx.sk Date: Mon, 10 Jul 2000 11:23:05 +0200 (CEST) To: "Firewall Toolkit (M-list)" Subject: Re: smap: Mail From question In-Reply-To: <6CC81B07CB44D311A1D20001FA7E9956233272@exchange.pdv.de> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1385 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, I have the same question. After I applied smap anti-spam patch (I forgot the name of this patch, but it creates some utlities with names: mkspamdb, etc.), I have such lines in my messages log: smap[15038]: spam ignored address=<> host=x.x.x.x/y.y.y.y (DB) How can I enable these empty addresses ? Thank in advance for any answer, L. Vitek. On Mon, 10 Jul 2000, Dirk.Nerling wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hello, > > I (as postmaster) got an email which pointed me to my smap configuration. > The person told me, I have to enable mail from: <> > because: > > "since many delivery agents use such mail from: when generating > mail delivery notices. Blocking it, you're happily block any delivery > messages to your system, so that mail senders will never know about > mistakes in recipients addresses." > > Is this true? Should I enable this feature and if so, which smap options > could to this? > best regards Dirk > -- > Dirk Nerling, PDV-Systeme Erfurt, Haarbergstr. 73, 99097 Erfurt, phone: > ++49-361-4407144 > PGP Fingerprint: C559 FF0E BAD0 9E09 F720 20F3 683E 357F 69B5 > CC83 > http://www.pdv.de > From owner-fwtk-users@ex.tis.com Mon Jul 10 07:25 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA13763 Mon, 10 Jul 2000 07:24:56 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id EAA28403; Mon, 10 Jul 2000 04:32:27 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 10 Jul 2000 03:02:06 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA26394 for fwtk-users-outgoing; Mon, 10 Jul 2000 03:01:55 -0700 (PDT) Date: Mon, 10 Jul 2000 13:00:26 +0300 From: Alfred Collins Subject: ftp login failure to some sites. To: fwtk-users@ex.tis.com Message-id: <001201bfea55$ac801c60$e415010a@bc177148> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V5.00.2919.6700 X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0) Content-transfer-encoding: 7bit Importance: Normal X-Priority: 3 (Normal) X-MSMail-priority: Normal Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 3007 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Do any users of ftp-gw.c,v 1.16 1998/02/06 in fwtk-2.1-current have this problem? We are using ftp-gw.c,v 1.3 1997/09/28. During the remote FTP server login dialog (USER ftp@ftp.cc.rl.ac.uk), the FTP client never gets the password prompt. metalab.unc.edu got fixed yesterday, but these two still fail: ftp.cc.rl.ac.uk ftp.informatik.uni-erlangen.de TCPDUMP of failure: 17 13.51127 10.1.21.222 -> userscreen FTP C port=33671 USER ftp@metalab.unc 18 0.00147 userscreen -> metalab.unc.edu FTP C port=51172 19 0.00021 metalab.unc.edu -> userscreen FTP R port=51172 20 0.00002 userscreen -> metalab.unc.edu FTP C port=51172 21 0.18956 userscreen -> 10.1.21.222 FTP R port=33671 22 0.37195 metalab.unc.edu -> userscreen FTP R port=51172 220-\r\n 23 0.00002 userscreen -> metalab.unc.edu FTP C port=51172 24 0.31268 metalab.unc.edu -> userscreen FTP R port=51172 220- 25 0.01510 userscreen -> metalab.unc.edu FTP C port=51172 USER ftp\r\n 26 0.12150 metalab.unc.edu -> userscreen FTP R port=51172 27 0.15162 metalab.unc.edu -> userscreen FTP R port=51172 331 Guest login ok, 28 0.00124 userscreen -> 10.1.21.222 FTP R port=33671 220- 29 0.09492 10.1.21.222 -> userscreen FTP C port=33671 30 0.00015 userscreen -> 10.1.21.222 FTP R port=33671 \r\n220- 31 0.09982 10.1.21.222 -> userscreen FTP C port=33671 32 0.00099 userscreen -> metalab.unc.edu FTP C port=51172 TCPDUMP of success. 17 13.20328 10.1.21.222 -> userscreen FTP C port=33673 USER anonymous@ftp.c 18 0.00145 userscreen -> wcarchive.cdrom.com FTP C port=51179 19 0.00021 wcarchive.cdrom.com -> userscreen FTP R port=51179 20 0.00002 userscreen -> wcarchive.cdrom.com FTP C port=51179 21 0.19734 userscreen -> 10.1.21.222 FTP R port=33673 22 0.54738 wcarchive.cdrom.com -> userscreen FTP R port=51179 220 wcarchive.cdrom. 23 0.00010 userscreen -> wcarchive.cdrom.com FTP C port=51179 24 0.00168 userscreen -> wcarchive.cdrom.com FTP C port=51179 USER anonymous\r\n 25 0.09375 wcarchive.cdrom.com -> userscreen FTP R port=51179 26 0.21831 wcarchive.cdrom.com -> userscreen FTP R port=51179 331 Guest login ok, 27 0.00107 userscreen -> 10.1.21.222 FTP R port=33673 331 Guest login ok, 28 0.09680 10.1.21.222 -> userscreen FTP C port=33673 29 0.00002 userscreen -> 10.1.21.222 FTP R port=33673 30 0.10031 10.1.21.222 -> userscreen FTP C port=33673 31 0.00047 userscreen -> wcarchive.cdrom.com FTP C port=51179 Metalab changed their login dialog. They used to reply with a lot of verbiage just before the login prompt. Now they just give a 331 which now gets properly passed back to the client. No changes were made at our end. Metalab may not have been responding to our complaint. More likely, they changed in response to the wu-ftpd remote root vulnerability. From owner-fwtk-users@ex.tis.com Mon Jul 10 08:34 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA14138 Mon, 10 Jul 2000 08:33:58 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA00144; Mon, 10 Jul 2000 05:41:30 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 10 Jul 2000 04:08:59 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA27787 for fwtk-users-outgoing; Mon, 10 Jul 2000 04:08:38 -0700 (PDT) Message-ID: <23429C708328D211B21200A0C9B2176130F2B9@prospero.herefordshire.gov.uk> From: "Randal, Phil" To: "'Alfred Collins'" , fwtk-users@ex.tis.com Subject: RE: ftp login failure to some sites. Date: Mon, 10 Jul 2000 12:09:48 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 3673 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Latest ftp-gw with patches from www.fwtk.org works fine with these sites. Phil ------------------------------------------------------------ Phil Randal Network Engineer Herefordshire Council, UK > -----Original Message----- > From: Alfred Collins [mailto:collinar@aramco.com.sa] > Sent: 10 July 2000 11:00 > To: fwtk-users@ex.tis.com > Subject: ftp login failure to some sites. > > > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Do any users of ftp-gw.c,v 1.16 1998/02/06 in > fwtk-2.1-current have this > problem? > We are using ftp-gw.c,v 1.3 1997/09/28. > During the remote FTP server login dialog (USER > ftp@ftp.cc.rl.ac.uk), the > FTP client never gets the password prompt. > metalab.unc.edu got fixed yesterday, but these two still fail: > ftp.cc.rl.ac.uk > ftp.informatik.uni-erlangen.de > TCPDUMP of failure: > 17 13.51127 10.1.21.222 -> userscreen FTP C port=33671 USER > ftp@metalab.unc > 18 0.00147 userscreen -> metalab.unc.edu FTP C port=51172 > 19 0.00021 metalab.unc.edu -> userscreen FTP R port=51172 > 20 0.00002 userscreen -> metalab.unc.edu FTP C port=51172 > 21 0.18956 userscreen -> 10.1.21.222 FTP R port=33671 > 22 0.37195 metalab.unc.edu -> userscreen FTP R > port=51172 220-\r\n > 23 0.00002 userscreen -> metalab.unc.edu FTP C port=51172 > 24 0.31268 metalab.unc.edu -> userscreen FTP R port=51172 220- > 25 0.01510 userscreen -> metalab.unc.edu FTP C > port=51172 USER ftp\r\n > 26 0.12150 metalab.unc.edu -> userscreen FTP R port=51172 > 27 0.15162 metalab.unc.edu -> userscreen FTP R > port=51172 331 Guest > login ok, > 28 0.00124 userscreen -> 10.1.21.222 FTP R port=33671 220- > 29 0.09492 10.1.21.222 -> userscreen FTP C port=33671 > 30 0.00015 userscreen -> 10.1.21.222 FTP R port=33671 \r\n220- > 31 0.09982 10.1.21.222 -> userscreen FTP C port=33671 > 32 0.00099 userscreen -> metalab.unc.edu FTP C port=51172 > TCPDUMP of success. > 17 13.20328 10.1.21.222 -> userscreen FTP C port=33673 USER > anonymous@ftp.c > 18 0.00145 userscreen -> wcarchive.cdrom.com FTP C port=51179 > 19 0.00021 wcarchive.cdrom.com -> userscreen FTP R port=51179 > 20 0.00002 userscreen -> wcarchive.cdrom.com FTP C port=51179 > 21 0.19734 userscreen -> 10.1.21.222 FTP R port=33673 > 22 0.54738 wcarchive.cdrom.com -> userscreen FTP R port=51179 220 > wcarchive.cdrom. > 23 0.00010 userscreen -> wcarchive.cdrom.com FTP C port=51179 > 24 0.00168 userscreen -> wcarchive.cdrom.com FTP C > port=51179 USER > anonymous\r\n > 25 0.09375 wcarchive.cdrom.com -> userscreen FTP R port=51179 > 26 0.21831 wcarchive.cdrom.com -> userscreen FTP R > port=51179 331 Guest > login ok, > 27 0.00107 userscreen -> 10.1.21.222 FTP R port=33673 > 331 Guest login > ok, > 28 0.09680 10.1.21.222 -> userscreen FTP C port=33673 > 29 0.00002 userscreen -> 10.1.21.222 FTP R port=33673 > 30 0.10031 10.1.21.222 -> userscreen FTP C port=33673 > 31 0.00047 userscreen -> wcarchive.cdrom.com FTP C port=51179 > Metalab changed their login dialog. They used to reply with a lot of > verbiage just before the login prompt. Now they just give a > 331 which now > gets properly passed back to the client. No changes were made > at our end. > Metalab may not have been responding to our complaint. More > likely, they > changed in response to the wu-ftpd remote root vulnerability. > From owner-fwtk-users@ex.tis.com Mon Jul 10 11:52 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA14895 Mon, 10 Jul 2000 11:52:52 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA03319; Mon, 10 Jul 2000 09:00:22 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 10 Jul 2000 07:22:45 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA01392 for fwtk-users-outgoing; Mon, 10 Jul 2000 07:22:34 -0700 (PDT) From: "Ken Long" Organization: Lectrosonics, Inc. To: "Firewall Toolkit (M-list)" Date: Mon, 10 Jul 2000 08:21:38 -0600 MIME-Version: 1.0 Content-transfer-encoding: 7BIT Subject: Re: smap: Mail From question Message-ID: <39698790.12818.62BC43@localhost> In-reply-to: <6CC81B07CB44D311A1D20001FA7E9956233272@exchange.pdv.de> X-mailer: Pegasus Mail for Win32 (v3.12c) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=US-ASCII Content-Length: 1925 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I just went through this. Here's what I did. I Installed the latest version 2.1 smap and applied the Yao anti-spam patches. A new option is now available in netperm-table called smap: broken-from address Replace address with <> to allow all email from the null address. The line should look like smap: broken-from <> Allowing email from the null address is required if you want to be RFC compliant. IMHO, it's ultimately your call. The advantage to not allowing that address is that you may block some spam from coming in. The disadvantage to not allowing it is you and your users will never get certain error and bounce messages. Those errors that will be blocked don't happen very often, most errors and bounces you receive are sent back to you immediately and these will still get through. The ones you will block are those that happen after the remote system has initially accepted the message for delivery but later decides it is unable to deliver it. I allow the address. Regards, Ken Long On 10 Jul 2000, at 9:48, Dirk.Nerling wrote: > Hello, > > I (as postmaster) got an email which pointed me to my smap configuration. > The person told me, I have to enable mail from: <> > because: > > "since many delivery agents use such mail from: when generating > mail delivery notices. Blocking it, you're happily block any delivery > messages to your system, so that mail senders will never know about > mistakes in recipients addresses." > > Is this true? Should I enable this feature and if so, which smap options > could to this? > best regards Dirk > -- > Dirk Nerling, PDV-Systeme Erfurt, Haarbergstr. 73, 99097 Erfurt, phone: > ++49-361-4407144 > PGP Fingerprint: C559 FF0E BAD0 9E09 F720 20F3 683E 357F 69B5 > CC83 > http://www.pdv.de From owner-fwtk-users@ex.tis.com Mon Jul 10 12:01 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA14929 Mon, 10 Jul 2000 12:00:57 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA03521; Mon, 10 Jul 2000 09:08:22 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 10 Jul 2000 07:46:38 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA01685 for fwtk-users-outgoing; Mon, 10 Jul 2000 07:46:17 -0700 (PDT) Mime-Version: 1.0 X-Sender: farone@mail.gvillesun.com Message-Id: In-Reply-To: <6CC81B07CB44D311A1D20001FA7E9956233272@exchange.pdv.de> References: <6CC81B07CB44D311A1D20001FA7E9956233272@exchange.pdv.de> Date: Mon, 10 Jul 2000 10:37:35 -0400 To: "Dirk.Nerling" From: Mark C Farone Subject: Re: smap: Mail From question Cc: "Firewall Toolkit (M-list)" Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" ; format="flowed" Content-Length: 2256 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] >I (as postmaster) got an email which pointed me to my smap configuration. >The person told me, I have to enable mail from: <> >because: According to http://www.rfc-editor.org/rfc/rfc2505.txt, you "MUST NOT refuse "MAIL From: <>". Although some mta's still only use 'mail from: <>' to bounce mail, many (not all) use 'mailer-daemon@somedomain.com'. Mail From: <> was supposed to be just for smtp mta's to bounce mail. However, that accounted for nearly one-half of all our mail at one point (~25000 msgs/week), 99.9% of which was unsolicited spam. In my case, I had to balance the weight of some users possibly missing bounced messages against violating the RFC and controlling excessive unsolicited traffic. Frankly, our users complain more about unsolicited traffic. >"since many delivery agents use such mail from: when generating >mail delivery notices. Blocking it, you're happily block any delivery >messages to your system, so that mail senders will never know about >mistakes in recipients addresses." Of course, if you block email from addresses that don't resolve properly, you also might miss out on an exciting opportunity to earn up to $10,000 per moth OR MORE by starting a home-based business involving CLICKING FOR CA$H!! that GENERATE $$$ IN SLEEP! :) >Is this true? Should I enable this feature and if so, which smap options >could to this? If you're using Yao's fine anti-spam patch, you could remove any netperm-table line like these to allow mail from <> or unresolvable domains: smap: require-full-email 1 smap: unknown-hosts 1 From the patch: ** require-full-email ** "smap: require-full-email 1" causes this program to ** verify that hosts that are NOT local have an @host part, ** while checking the "from" address. ** unknown-host ** "smap: unknown-host 1" allowing us to accept ** connections from a host whom we can't name [via ** peername()]. Best, Mark -- Mark C. Farone In the future, Systems Analyst, Gainesville Sun everything will work. From owner-fwtk-users@ex.tis.com Mon Jul 10 12:30 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA15028 Mon, 10 Jul 2000 12:29:50 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA04215; Mon, 10 Jul 2000 09:37:22 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 10 Jul 2000 08:12:55 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA02172 for fwtk-users-outgoing; Mon, 10 Jul 2000 08:12:24 -0700 (PDT) Date: Mon, 10 Jul 2000 11:10:58 -0400 From: Joseph S D Yao To: Mark C Farone Cc: Rick Murphy , fwtk-users@lists.nai.com Subject: Re: http1.1 problem Message-Id: <20000710111058.B21001@washington.cospo.osis.gov> Mail-Followup-To: Mark C Farone , Rick Murphy , fwtk-users@lists.nai.com References: <20000705220111.7484.qmail@web4106.mail.yahoo.com> <20000705220111.7484.qmail@web4106.mail.yahoo.com> <4.2.2.20000706185450.00b13650@mail.itm-inst.com> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from farone@gvillesun.com on Fri, Jul 07, 2000 at 04:29:31PM -0400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 616 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] http-gw does bad things to %-encoded URLs. I believe there was a patch on fwtk.org to remove this. There was some exploit that this was preventing, but Marcus didn't remember what it was when I asked him a while ago, and I haven't figured it out either. ;-] -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Mon Jul 10 14:12 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA15510 Mon, 10 Jul 2000 14:11:49 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA06631; Mon, 10 Jul 2000 11:19:21 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 10 Jul 2000 09:44:04 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA04365 for fwtk-users-outgoing; Mon, 10 Jul 2000 09:43:32 -0700 (PDT) Date: Mon, 10 Jul 2000 12:38:15 -0400 (EDT) From: Ted Keller To: Mark C Farone cc: "Dirk.Nerling" , "Firewall Toolkit (M-list)" Subject: Re: smap: Mail From question In-Reply-To: Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 3120 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I block spam messages like ... CLICKING FOR CA$H!! that GENERATE $$$ IN SLEEP! by using a set of spam filters that I've placed into smap. These scan both the header and now the top part of the message body. I've been able to cut the spam stuff to a minimum (can't quite get it all). With this approach - even if a spammer uses the <> type address - the message it still blown away. Sorry I can't supply patches (my version of samp has varied very far from the original 2.1) Can, however, supply a quick kit that you could integrate into the tool-kit. ted keller On Mon, 10 Jul 2000, Mark C Farone wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > >I (as postmaster) got an email which pointed me to my smap configuration. > >The person told me, I have to enable mail from: <> > >because: > > According to http://www.rfc-editor.org/rfc/rfc2505.txt, you "MUST NOT > refuse "MAIL From: <>". > > Although some mta's still only use 'mail from: <>' to bounce mail, > many (not all) use 'mailer-daemon@somedomain.com'. Mail From: <> was > supposed to be just for smtp mta's to bounce mail. However, that > accounted for nearly one-half of all our mail at one point (~25000 > msgs/week), 99.9% of which was unsolicited spam. > > In my case, I had to balance the weight of some users possibly > missing bounced messages against violating the RFC and controlling > excessive unsolicited traffic. Frankly, our users complain more > about unsolicited traffic. > > >"since many delivery agents use such mail from: when generating > >mail delivery notices. Blocking it, you're happily block any delivery > >messages to your system, so that mail senders will never know about > >mistakes in recipients addresses." > > Of course, if you block email from addresses that don't resolve > properly, you also might miss out on an exciting opportunity to earn > up to $10,000 per moth OR MORE by starting a home-based business > involving CLICKING FOR CA$H!! that GENERATE $$$ IN SLEEP! :) > > >Is this true? Should I enable this feature and if so, which smap options > >could to this? > > If you're using Yao's fine anti-spam patch, you could remove any > netperm-table line like these to allow mail from <> or unresolvable > domains: > > smap: require-full-email 1 > smap: unknown-hosts 1 > > From the patch: > > ** require-full-email > ** "smap: require-full-email 1" causes this program to > ** verify that hosts that are NOT local have an @host part, > ** while checking the "from" address. > ** unknown-host > ** "smap: unknown-host 1" allowing us to accept > ** connections from a host whom we can't name [via > ** peername()]. > > Best, > Mark > > -- > Mark C. Farone In the future, > Systems Analyst, Gainesville Sun everything will work. > From owner-fwtk-users@ex.tis.com Mon Jul 10 15:53 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA16106 Mon, 10 Jul 2000 15:52:37 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA08439; Mon, 10 Jul 2000 13:00:08 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 10 Jul 2000 11:27:25 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA06744 for fwtk-users-outgoing; Mon, 10 Jul 2000 11:26:33 -0700 (PDT) Mime-Version: 1.0 X-Sender: farone@mail.gvillesun.com Message-Id: In-Reply-To: References: Date: Mon, 10 Jul 2000 14:17:13 -0400 To: Ted Keller From: Mark C Farone Subject: Re: smap: Mail From question Cc: "Dirk.Nerling" , "Firewall Toolkit (M-list)" Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" ; format="flowed" Content-Length: 672 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 12:38 PM -0400 7/10/00, Ted Keller wrote: >I block spam messages like ... > >CLICKING FOR CA$H!! that GENERATE $$$ IN SLEEP! > >by using a set of spam filters that I've placed into smap. These scan >both the header and now the top part of the message body. I've been able >to cut the spam stuff to a minimum (can't quite get it all). [...] Ted, may I ask what content you are filtering on? Subject? Thanks, Mark -- Mark C. Farone In the future, Systems Analyst, Gainesville Sun everything will work. From owner-fwtk-users@ex.tis.com Mon Jul 10 20:12 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA16857 Mon, 10 Jul 2000 20:12:10 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA10698; Mon, 10 Jul 2000 17:19:42 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 10 Jul 2000 15:37:13 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA09740 for fwtk-users-outgoing; Mon, 10 Jul 2000 15:36:42 -0700 (PDT) Date: Mon, 10 Jul 2000 18:31:56 -0400 (EDT) From: Ted Keller To: Mark C Farone cc: "Dirk.Nerling" , "Firewall Toolkit (M-list)" Subject: Re: smap: Mail From question In-Reply-To: Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1175 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Filter on ... message from address message to address message header message subject first 10 (definable) lines of text Have not gotten into attachments or any encoded type of data. Pretty effective for most spam. Also pretty effective for simple type viruses ... Melissa - ILOVEYOU - Stages .... The starting spamlist was picked up at http://www.cnx.com/stopspam.html The code procsses that format. ted keller On Mon, 10 Jul 2000, Mark C Farone wrote: > At 12:38 PM -0400 7/10/00, Ted Keller wrote: > >I block spam messages like ... > > > >CLICKING FOR CA$H!! that GENERATE $$$ IN SLEEP! > > > >by using a set of spam filters that I've placed into smap. These scan > >both the header and now the top part of the message body. I've been able > >to cut the spam stuff to a minimum (can't quite get it all). > [...] > > Ted, may I ask what content you are filtering on? Subject? > > Thanks, > Mark > -- > Mark C. Farone In the future, > Systems Analyst, Gainesville Sun everything will work. > From owner-fwtk-users@ex.tis.com Tue Jul 11 07:45 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA18830 Tue, 11 Jul 2000 07:44:29 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id EAA15009; Tue, 11 Jul 2000 04:51:53 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 11 Jul 2000 02:19:49 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id CAA13401 for fwtk-users-outgoing; Tue, 11 Jul 2000 02:19:08 -0700 (PDT) Message-ID: <50B56D407D2DD31191DE00902771E9F401593560@ecntex.ecn.nl> From: "Overdijk, Harrie" To: "'Joseph S D Yao'" , Mark C Farone Cc: Rick Murphy , fwtk-users@lists.nai.com Subject: RE: http1.1 problem Date: Tue, 11 Jul 2000 11:16:00 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 1381 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, Joseph Yao wrote the following: > -----Original Message----- > From: Joseph S D Yao [SMTP:jsdy@cospo.osis.gov] > Sent: Monday, July 10, 2000 5:11 PM > To: Mark C Farone > Cc: Rick Murphy; fwtk-users@lists.nai.com > Subject: Re: http1.1 problem > > [To be removed from this list send the message "unsubscribe fwtk-users" in > the > BODY of a mail message to majordomo@ex.tis.com.] > > http-gw does bad things to %-encoded URLs. I believe there was a patch > on fwtk.org to remove this. There was some exploit that this was > preventing, but Marcus didn't remember what it was when I asked him a > while ago, and I haven't figured it out either. ;-] > [Harrie] Back in 1997 there was a large discussion [Harrie] about URL's with escaped nulls. Maybe you are [Harrie] refering to that discussion? I have never seen [Harrie] a patch for this and other encoded URL problems... [Harrie] B.t.w. see fwtk-archive.9701. Greetings, Harrie Overdijk Harrie Overdijk, ECN, Postbox 1, 1755 ZG Petten (NH), The Netherlands. Internet: overdijk@ecn.nl Noisenet: +31 224 56 4597 Fidonet : 2:500/43.1902 (At home!) FAXnet : +31 224 56 1864 ICP/Postmaster/UseNet-News-manager/WWW-manager/Security-manager of ECN. From owner-fwtk-users@ex.tis.com Tue Jul 11 08:05 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA18876 Tue, 11 Jul 2000 08:05:44 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA15327; Tue, 11 Jul 2000 05:12:16 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 11 Jul 2000 03:44:50 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA14051 for fwtk-users-outgoing; Tue, 11 Jul 2000 03:43:59 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <50B56D407D2DD31191DE00902771E9F401593560@ecntex.ecn.nl> Date: Tue, 11 Jul 2000 11:41:51 +0100 (BST) From: Tony Gale To: "Overdijk, Harrie" Subject: RE: http1.1 problem Cc: fwtk-users@lists.nai.com, Rick Murphy , Mark C Farone , Joseph S D Yao Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 2230 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] http-gw doesn't follow the RFCs on this. When I find the right RFC that lists all the unsafe URL characters I'll make a patch - can't remember the RFC number at the moment (hint). I've looked at this before, so know where in the code to do it. -tony On 11-Jul-2000 Overdijk, Harrie wrote: > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hello, > > Joseph Yao wrote the following: > >> -----Original Message----- >> From: Joseph S D Yao [SMTP:jsdy@cospo.osis.gov] >> Sent: Monday, July 10, 2000 5:11 PM >> To: Mark C Farone >> Cc: Rick Murphy; fwtk-users@lists.nai.com >> Subject: Re: http1.1 problem >> >> [To be removed from this list send the message "unsubscribe >> fwtk-users" in >> the >> BODY of a mail message to majordomo@ex.tis.com.] >> >> http-gw does bad things to %-encoded URLs. I believe there was a >> patch >> on fwtk.org to remove this. There was some exploit that this was >> preventing, but Marcus didn't remember what it was when I asked >> him a >> while ago, and I haven't figured it out either. ;-] >> > [Harrie] Back in 1997 there was a large discussion > [Harrie] about URL's with escaped nulls. Maybe you are > [Harrie] refering to that discussion? I have never seen > [Harrie] a patch for this and other encoded URL problems... > [Harrie] B.t.w. see fwtk-archive.9701. > > Greetings, > Harrie Overdijk > > Harrie Overdijk, ECN, Postbox 1, 1755 ZG Petten (NH), The > Netherlands. > Internet: overdijk@ecn.nl Noisenet: +31 224 56 4597 > Fidonet : 2:500/43.1902 (At home!) FAXnet : +31 224 56 1864 > ICP/Postmaster/UseNet-News-manager/WWW-manager/Security-manager of > ECN. --- E-Mail: Tony Gale A complex system that works is invariably found to have evolved from a simple system that works. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Tue Jul 11 09:55 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA19509 Tue, 11 Jul 2000 09:55:29 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA18200; Tue, 11 Jul 2000 07:01:38 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 11 Jul 2000 05:21:42 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA15454 for fwtk-users-outgoing; Tue, 11 Jul 2000 05:20:31 -0700 (PDT) Message-ID: <50B56D407D2DD31191DE00902771E9F401593561@ecntex.ecn.nl> From: "Overdijk, Harrie" To: "'Tony Gale'" Cc: fwtk-users@lists.nai.com, Rick Murphy , Mark C Farone , Joseph S D Yao Subject: RE: http1.1 problem Date: Tue, 11 Jul 2000 14:18:26 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 1240 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Dear Tony, You wrote us the following: > -----Original Message----- > From: Tony Gale [SMTP:gale@syntax.dera.gov.uk] > Sent: Tuesday, July 11, 2000 12:42 PM > To: Overdijk, Harrie > Cc: fwtk-users@lists.nai.com; Rick Murphy; Mark C Farone; Joseph S D Yao > Subject: RE: http1.1 problem > > > http-gw doesn't follow the RFCs on this. When I find the right RFC > that lists all the unsafe URL characters I'll make a patch - can't > remember the RFC number at the moment (hint). > [Harrie] The hint accepted. ;-) It is RFC-1738. [Harrie] It contains a part listing unsafe characters. [Harrie] If you want the text, mail me privately then [Harrie] I'll send it to you. > I've looked at this before, so know where in the code to do it. > [Harrie] Great, it saves me from searching the code! Greetings, Harrie Harrie Overdijk, ECN, Postbox 1, 1755 ZG Petten (NH), The Netherlands. Internet: overdijk@ecn.nl Noisenet: +31 224 56 4597 Fidonet : 2:500/43.1902 (At home!) FAXnet : +31 224 56 1864 ICP/Postmaster/UseNet-News-manager/WWW-manager/Security-manager of ECN. From owner-fwtk-users@ex.tis.com Tue Jul 11 10:14 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA19640 Tue, 11 Jul 2000 10:14:57 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA18806; Tue, 11 Jul 2000 07:21:37 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 11 Jul 2000 05:56:29 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA16168 for fwtk-users-outgoing; Tue, 11 Jul 2000 05:55:58 -0700 (PDT) Mime-Version: 1.0 X-Sender: farone@mail.gvillesun.com Message-Id: In-Reply-To: <50B56D407D2DD31191DE00902771E9F401593561@ecntex.ecn.nl> References: <50B56D407D2DD31191DE00902771E9F401593561@ecntex.ecn.nl> Date: Tue, 11 Jul 2000 08:48:30 -0400 To: "Overdijk, Harrie" From: Mark C Farone Subject: RE: http1.1 problem Cc: "'Tony Gale'" , fwtk-users@lists.nai.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" ; format="flowed" Content-Length: 616 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 2:18 PM +0200 7/11/00, Overdijk, Harrie wrote: > [Harrie] The hint accepted. ;-) It is RFC-1738. > [Harrie] It contains a part listing unsafe characters. > [Harrie] If you want the text, mail me privately then > [Harrie] I'll send it to you. Hint gladly accepted. FWIW, RFC1808 updates some aspects of RFC1738 and specifies the standard for relative urls. -- Mark C. Farone In the future, Systems Analyst, Gainesville Sun everything will work. From owner-fwtk-users@ex.tis.com Tue Jul 11 10:20 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA19667 Tue, 11 Jul 2000 10:20:05 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA18972; Tue, 11 Jul 2000 07:26:37 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 11 Jul 2000 06:06:22 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA16397 for fwtk-users-outgoing; Tue, 11 Jul 2000 06:05:31 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) MIME-Version: 1.0 In-Reply-To: <50B56D407D2DD31191DE00902771E9F401593561@ecntex.ecn.nl> Date: Tue, 11 Jul 2000 14:03:23 +0100 (BST) From: Tony Gale To: "Overdijk, Harrie" Subject: RE: http1.1 problem Cc: Joseph S D Yao , Mark C Farone , Rick Murphy , fwtk-users@lists.nai.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/mixed; boundary="_=XFMail.1.4.4.Linux:20000711140323:14411=_" Content-Length: 3598 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format --_=XFMail.1.4.4.Linux:20000711140323:14411=_ Content-Type: text/plain; charset=iso-8859-1 Right, here goes. http-gw runs the requested URL through auth.c:unesc() which unescapes the %nn sequences in the URL. Now, it has a list of reserved characters which it doesn't unescape, which are listed at the top of auth.c (per protocol, although only HTTP is actually supported): struct res_chars res_char { TYPE_HTTP, "()%:+/;?=&\r\n"}, { 0, NULL} }; Now, there are a few characters missing from this list (# being an obvious one) My suggested change is to: { TYPE_HTTP, "#{}|\\^~[] <>\"()%:+/;?=&\r\n"}, Now, as I don't happen to have URLs lying around with those characters escaped in them, it is slightly hard to test. I have though been using http-gw with # added for ages with no problems, and it fixed a user reported problem. A patch to add those listed above is included. Comments? -tony On 11-Jul-2000 Overdijk, Harrie wrote: > Dear Tony, > > You wrote us the following: > >> -----Original Message----- >> From: Tony Gale [SMTP:gale@syntax.dera.gov.uk] >> Sent: Tuesday, July 11, 2000 12:42 PM >> To: Overdijk, Harrie >> Cc: fwtk-users@lists.nai.com; Rick Murphy; Mark C Farone; Joseph S >> D Yao >> Subject: RE: http1.1 problem >> >> >> http-gw doesn't follow the RFCs on this. When I find the right RFC >> that lists all the unsafe URL characters I'll make a patch - can't >> remember the RFC number at the moment (hint). >> > [Harrie] The hint accepted. ;-) It is RFC-1738. > [Harrie] It contains a part listing unsafe characters. > [Harrie] If you want the text, mail me privately then > [Harrie] I'll send it to you. > >> I've looked at this before, so know where in the code to do it. >> > [Harrie] Great, it saves me from searching the code! > > Greetings, > Harrie > > Harrie Overdijk, ECN, Postbox 1, 1755 ZG Petten (NH), The > Netherlands. > Internet: overdijk@ecn.nl Noisenet: +31 224 56 4597 > Fidonet : 2:500/43.1902 (At home!) FAXnet : +31 224 56 1864 > ICP/Postmaster/UseNet-News-manager/WWW-manager/Security-manager of > ECN. --- E-Mail: Tony Gale Don't put off for tomorrow what you can do today because if you enjoy it today, you can do it again tomorrow. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. --_=XFMail.1.4.4.Linux:20000711140323:14411=_ Content-Disposition: attachment; filename="fwtk-res_chars.patch" Content-Transfer-Encoding: base64 Content-Description: fwtk-res_chars.patch Content-Type: application/octet-stream; name=fwtk-res_chars.patch; SizeOnDisk=435 KioqIGF1dGguYwlUdWUgSnVsIDExIDEzOjU4OjU5IDIwMDAKLS0tIGZ3dGsuZGlzdC9md3RrL2h0 dHAtZ3cvYXV0aC5jCUZyaSBOb3YgMjIgMTY6MjE6MDUgMTk5NgoqKioqKioqKioqKioqKioKKioq IDIzLDMyICoqKioKICB9OwogIAogIHN0cnVjdCByZXNfY2hhcnMJcmVzX2NoYXJzW10gPSB7CiEg CS8qIEFkZCBsaXN0IG9mICJ1bnNhZmUiIGNoYXJhY3RlcnMgZnJvbSBSRkMxNzM4CiEgCSAqIFRS RyAtIDIwMDAwNzExCiEgCSAqLwohIAl7IFRZUEVfSFRUUCwgIiN7fXxcXF5+W10gPD5cIigpJTor Lzs/PSZcclxuIn0sCiAgCXsgMCwgTlVMTH0KICB9OwogIAotLS0gMjMsMjkgLS0tLQogIH07CiAg CiAgc3RydWN0IHJlc19jaGFycwlyZXNfY2hhcnNbXSA9IHsKISAJeyBUWVBFX0hUVFAsICIoKSU6 Ky87Pz0mXHJcbiJ9LAogIAl7IDAsIE5VTEx9CiAgfTsKICAK --_=XFMail.1.4.4.Linux:20000711140323:14411=_-- End of MIME message From owner-fwtk-users@ex.tis.com Tue Jul 11 11:49 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA20088 Tue, 11 Jul 2000 11:49:41 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA22944; Tue, 11 Jul 2000 08:55:38 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 11 Jul 2000 07:23:50 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA18867 for fwtk-users-outgoing; Tue, 11 Jul 2000 07:23:39 -0700 (PDT) Message-ID: <20000711142245.15661.qmail@web4102.mail.yahoo.com> Date: Tue, 11 Jul 2000 07:22:45 -0700 (PDT) From: J A Shamsi Subject: ipfw and proxy To: fwtk-users@ex.tis.com MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 870 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi I want to configure packet filtering firewall (ipfw) on a BSD dual homed gateway(two nic's) having a proxy server( TIS FWTK). I have a http-gw running at port 80. I wonder if I can specify a set of ipfw rules that can restrict the outer nic to communicate only for http-gw( and other proxy services)to the outside world. I know that proxy is running on port 80, but I am curios which port is it using while communicating to other sites for http, so that i can allow communication from that particular port only. I would really appreciate if anyone can help me. thanks jawwad __________________________________________________ Do You Yahoo!? Get Yahoo! Mail – Free email you can access from anywhere! http://mail.yahoo.com/ From owner-fwtk-users@ex.tis.com Tue Jul 11 11:50 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA20093 Tue, 11 Jul 2000 11:50:30 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA22988; Tue, 11 Jul 2000 08:56:56 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 11 Jul 2000 07:38:53 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA19369 for fwtk-users-outgoing; Tue, 11 Jul 2000 07:38:02 -0700 (PDT) Mime-Version: 1.0 X-Sender: farone@mail.gvillesun.com Message-Id: In-Reply-To: References: Date: Tue, 11 Jul 2000 10:30:33 -0400 To: Tony Gale From: Mark C Farone Subject: RE: http1.1 problem Cc: "Overdijk, Harrie" , Joseph S D Yao , Rick Murphy , fwtk-users@lists.nai.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" ; format="flowed" Content-Length: 2104 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 2:03 PM +0100 7/11/00, Tony Gale wrote: >Right, here goes. http-gw runs the requested URL through >auth.c:unesc() which unescapes the %nn sequences in the URL. Now, it >has a list of reserved characters which it doesn't unescape, which >are listed at the top of auth.c (per protocol, although only HTTP >is actually supported): > >struct res_chars res_char > { TYPE_HTTP, "()%:+/;?=&\r\n"}, > { 0, NULL} >}; > >Now, there are a few characters missing from this list (# being an >obvious one) > >My suggested change is to: > > { TYPE_HTTP, "#{}|\\^~[] <>\"()%:+/;?=&\r\n"}, > >Now, as I don't happen to have URLs lying around with those >characters escaped in them, it is slightly hard to test. I have >though been using http-gw with # added for ages with no problems, and >it fixed a user reported problem. > >A patch to add those listed above is included. > >Comments? Thanks, Tony. That definitely is the place. Using your suggestion and re-reading rfc1738, I interpret it to mean that for those characters which are "unsafe" or "reserved" we never want to unescape them where: "unsafe" { <>"#%{}|\^~[]`} "reserved" {;/?:@=&} and additionally, crlf However, I think maybe we shouldn't unescape what it calls "special" characters (those which can exist unencoded in the URL) if they've already been escaped for whatever reason: "special" {$-_.+!*'(),} So, when I change that same line in auth.c to: { TYPE_HTTP, " <>\"#%{}|\\^~[]`;/?:@=&$-_.+!*'(),\r\n"}, I am able to correctly bring up this URL through http-gw: http://www.eshopflorida.com/MALL/Catalog/StoreRedir/asp/url/http%3A%2F%2Fwww%2Eaaadiscountsports%2Ecom/company_id/1000011398/name/AAA+Discount+Sports%2Ecom/mall_id/1000010557.html and get the same data as if I went direct. Any comments, especially as this would relate to security? Mark -- Mark C. Farone In the future, Systems Analyst, Gainesville Sun everything will work. From owner-fwtk-users@ex.tis.com Tue Jul 11 11:50 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA20096 Tue, 11 Jul 2000 11:50:50 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA23002; Tue, 11 Jul 2000 08:57:13 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 11 Jul 2000 07:38:45 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA19352 for fwtk-users-outgoing; Tue, 11 Jul 2000 07:37:54 -0700 (PDT) Message-ID: <50B56D407D2DD31191DE00902771E9F401593564@ecntex.ecn.nl> From: "Overdijk, Harrie" To: "'Tony Gale'" Cc: Joseph S D Yao , Mark C Farone , Rick Murphy , fwtk-users@lists.nai.com Subject: RE: http1.1 problem Date: Tue, 11 Jul 2000 16:35:20 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 2344 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Dear Tony, Thank you very much! I wouldn't have found the problem myself... I did have a site that gave a problem, but never thought that the 'escape' omission would be the problem. It seems that adding the \" solved it in my case. > -----Original Message----- > From: Tony Gale [SMTP:gale@syntax.dera.gov.uk] > Sent: Tuesday, July 11, 2000 3:03 PM > To: Overdijk, Harrie > Cc: Joseph S D Yao; Mark C Farone; Rick Murphy; fwtk-users@lists.nai.com > Subject: RE: http1.1 problem > > > Right, here goes. http-gw runs the requested URL through > auth.c:unesc() which unescapes the %nn sequences in the URL. Now, it > has a list of reserved characters which it doesn't unescape, which > are listed at the top of auth.c (per protocol, although only HTTP > is actually supported): > > struct res_chars res_char > { TYPE_HTTP, "()%:+/;?=&\r\n"}, > { 0, NULL} > }; > > Now, there are a few characters missing from this list (# being an > obvious one) > > My suggested change is to: > > { TYPE_HTTP, "#{}|\\^~[] <>\"()%:+/;?=&\r\n"}, > > Now, as I don't happen to have URLs lying around with those > characters escaped in them, it is slightly hard to test. > [Harrie] The site I tested it with has the URL embedded [Harrie] in a search page: http://www.egl.nl/ [Harrie] - Click 'Partnersearch' [Harrie] - Click 'search the partner service' [Harrie] - Select "Energie environment..." in 'EC-R&R programme' [Harrie] - Type: 'Solar Wind' (no qoutes!) in Keywords [Harrie] - Select 'Match any words between fields (OR)' [Harrie] - Click 'Start Search' [Harrie] You will get a page with summaries and a 'More' link, [Harrie] clicking the 'More' link gives a strange FMPro 5.0 [Harrie] error message on the screen without your patch. [Harrie] With your patch, these problems are solved! Thanks again for your patch and others for this discussion! Greetings, Harrie Overdijk Harrie Overdijk, ECN, Postbox 1, 1755 ZG Petten (NH), The Netherlands. Internet: overdijk@ecn.nl Noisenet: +31 224 56 4597 Fidonet : 2:500/43.1902 (At home!) FAXnet : +31 224 56 1864 ICP/Postmaster/UseNet-News-manager/WWW-manager/Security-manager of ECN. From owner-fwtk-users@ex.tis.com Tue Jul 11 12:38 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA20295 Tue, 11 Jul 2000 12:38:01 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA24574; Tue, 11 Jul 2000 09:44:28 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 11 Jul 2000 08:22:42 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA21381 for fwtk-users-outgoing; Tue, 11 Jul 2000 08:21:51 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: Date: Tue, 11 Jul 2000 16:19:43 +0100 (BST) From: Tony Gale To: Mark C Farone Subject: RE: http1.1 problem Cc: fwtk-users@lists.nai.com, Rick Murphy , Joseph S D Yao , "Overdijk, Harrie" Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 2008 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] (Rick especially, please see comments at end) On 11-Jul-2000 Mark C Farone wrote: > Thanks, Tony. > That definitely is the place. > > Using your suggestion and re-reading rfc1738, I interpret it to > mean > that for those characters which are "unsafe" or "reserved" we never > want to unescape them where: > "unsafe" { <>"#%{}|\^~[]`} > "reserved" {;/?:@=&} > and additionally, crlf > > However, I think maybe we shouldn't unescape what it calls > "special" > characters (those which can exist unencoded in the URL) if they've > already been escaped for whatever reason: > "special" {$-_.+!*'(),} This is where is gets tricky. To some extent this will depend upon how broken peoples cgi scripts are. And there are a *LOT* of broken cgi scripts around. In theory, I don't believe that the specials are required, but they are probably a good idea. > > So, when I change that same line in auth.c to: > { TYPE_HTTP, " <>\"#%{}|\\^~[]`;/?:@=&$-_.+!*'(),\r\n"}, > > I am able to correctly bring up this URL through http-gw: > http://www.eshopflorida.com/MALL/Catalog/StoreRedir/asp/url/http%3A% > 2F%2Fwww%2Eaaadiscountsports%2Ecom/company_id/1000011398/name/AAA+Di > scount+Sports%2Ecom/mall_id/1000010557.html > > and get the same data as if I went direct. > > Any comments, especially as this would relate to security? > The only thing that comes to mind: - the "-dest" option, which does destination checking but I don't think many people use it. Assuming that it is a problem, it was there already, but just got worse. -tony --- E-Mail: Tony Gale Q: What does a WASP Mom make for dinner? A: A crisp salad, a hearty soup, a lovely entree, followed by a delicious dessert. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Tue Jul 11 13:47 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA20502 Tue, 11 Jul 2000 13:47:29 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA26561; Tue, 11 Jul 2000 10:54:33 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 11 Jul 2000 09:20:06 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA23669 for fwtk-users-outgoing; Tue, 11 Jul 2000 09:19:45 -0700 (PDT) Date: Tue, 11 Jul 2000 12:18:39 -0400 From: Joseph S D Yao To: "Overdijk, Harrie" Cc: fwtk-users@lists.nai.com Subject: Re: http1.1 problem Message-Id: <20000711121839.H28053@washington.cospo.osis.gov> Mail-Followup-To: "Overdijk, Harrie" , fwtk-users@lists.nai.com References: <50B56D407D2DD31191DE00902771E9F401593560@ecntex.ecn.nl> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <50B56D407D2DD31191DE00902771E9F401593560@ecntex.ecn.nl>; from overdijk@ecn.nl on Tue, Jul 11, 2000 at 11:16:00AM +0200 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1285 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Tue, Jul 11, 2000 at 11:16:00AM +0200, Overdijk, Harrie wrote: > Joseph Yao wrote the following: ... > > http-gw does bad things to %-encoded URLs. I believe there was a patch > > on fwtk.org to remove this. There was some exploit that this was > > preventing, but Marcus didn't remember what it was when I asked him a > > while ago, and I haven't figured it out either. ;-] > > > [Harrie] Back in 1997 there was a large discussion > [Harrie] about URL's with escaped nulls. Maybe you are > [Harrie] refering to that discussion? I have never seen > [Harrie] a patch for this and other encoded URL problems... > [Harrie] B.t.w. see fwtk-archive.9701. I know that several people have started writing this patch, and that may be what I am thinking of. I should have looked at fwtk.org before answering, but I am still catching up from every hour spent away from here. ;-) Mea culpa, mea culpa, mea maxima culpa. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Wed Jul 12 12:35 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA25093 Wed, 12 Jul 2000 12:35:45 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA02789; Wed, 12 Jul 2000 09:42:30 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 12 Jul 2000 07:07:36 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA01635 for fwtk-users-outgoing; Wed, 12 Jul 2000 07:07:25 -0700 (PDT) Reply-To: From: "Alexander Oesterle \(TCNS GmbH\)" To: Subject: Ports on fwtk Date: Tue, 11 Jul 2000 18:07:57 +0200 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 315 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi everyone, i need an TCP Port 1494 / UDP 1604 for Citrix ICA Protocol through our firewall. Is there a "ica-gw" possible ?? How can i add this feature to my fwtk 2.1 ?? regards alex From owner-fwtk-users@ex.tis.com Wed Jul 12 15:57 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA26506 Wed, 12 Jul 2000 15:56:59 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA06494; Wed, 12 Jul 2000 13:03:08 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 12 Jul 2000 11:28:30 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA03593 for fwtk-users-outgoing; Wed, 12 Jul 2000 11:28:09 -0700 (PDT) Message-ID: <396CB8AA.157CD6CD@v-one.com> Date: Wed, 12 Jul 2000 14:27:54 -0400 From: Keith Young Organization: V-ONE X-Mailer: Mozilla 4.73 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: alexander.oesterle@tcns.de CC: fwtk-users@lists.nai.com Subject: Re: Ports on fwtk References: Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 696 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] "Alexander Oesterle (TCNS GmbH)" wrote: > > i need an TCP Port 1494 / UDP 1604 for Citrix ICA Protocol through our > firewall. > Is there a "ica-gw" possible ?? If you can live without the Program Neighborhood and load balancing, you just need to use "plug-gw" for 1494/tcp. Then, point your ICA client at your firewall as the Citrix server. If you need help with this, let me know (and CC: the list). With the Citrix deal I just did, I know the protocol inside and out... :-) -- --Keith Young -Director of Customer Care/Support, V-ONE Corp. -kyoung@v-one.com From owner-fwtk-users@ex.tis.com Wed Jul 12 15:57 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA26508 Wed, 12 Jul 2000 15:57:00 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA06501; Wed, 12 Jul 2000 13:03:24 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 12 Jul 2000 11:44:58 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA03843 for fwtk-users-outgoing; Wed, 12 Jul 2000 11:44:37 -0700 (PDT) <20000711121839.H28053@washington.cospo.osis.gov> Mime-Version: 1.0 X-Sender: farone@mail.gvillesun.com Message-Id: In-Reply-To: <20000711121839.H28053@washington.cospo.osis.gov> References: <50B56D407D2DD31191DE00902771E9F401593560@ecntex.ecn.nl> <20000711121839.H28053@washington.cospo.osis.gov> Date: Wed, 12 Jul 2000 14:36:59 -0400 To: Joseph S D Yao From: Mark C Farone Subject: Re: http1.1 problem Cc: fwtk-users@lists.nai.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" ; format="flowed" Content-Length: 950 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 12:18 PM -0400 7/11/00, Joseph S D Yao wrote: >I know that several people have started writing this patch, and that >may be what I am thinking of. I should have looked at fwtk.org before >answering, but I am still catching up from every hour spent away from >here. ;-) Mea culpa, mea culpa, mea maxima culpa. Ah, the perils of a vacation. :) I didn't check the code in each patch, but I don't see any info on the fwtk.org site for any kind of patch to do with http-gw's hex encoding. Any other considerations about this proposed patch? By the way, is there an on-line archive of the mailing list from back then? I don't have archives of this mailing list before 5/98. Thanks again, Mark -- Mark C. Farone In the future, Systems Analyst, Gainesville Sun everything will work. From owner-fwtk-users@ex.tis.com Wed Jul 12 16:35 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA26619 Wed, 12 Jul 2000 16:35:16 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA08425; Wed, 12 Jul 2000 13:42:26 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 12 Jul 2000 12:21:25 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA04773 for fwtk-users-outgoing; Wed, 12 Jul 2000 12:21:14 -0700 (PDT) Message-ID: <91A5926EFF44D3118B1200104B7276EB654D29@hart-exchange.hartwellcorp.com> From: "Michael St. Laurent" To: "'fwtk-users@lists.nai.com'" Subject: RE: http1.1 problem Date: Wed, 12 Jul 2000 10:20:49 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 39731 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I applied the patch with Tony's suggested modification. Today I visited a site I had not been to in a while: http://www.solarisguide.com/ and got an error in IE 5.01 ("Internal error in the Microsoft Extensions"). However, after reverting to the old version of http-gw the error still remains so it must be unrelated. Netscape 3.04 displays the page without complaint. Below is the source first from IE and following it from Netscape: IE: SolarisGuide.com: The Unofficial Guide to the Sun Solaris Operating Environment * SolarisGuide.com: The Unofficial Guide to the Sun Solaris Operating Environment *

News
  Headlines
  Scoop
  Submit News

Man Pages
To look up the Solaris manual page for a command, type it in and press GO.

Advanced Search

Resources
  Online Man Pages
  Reviews
  QuickGuides(tm)
  Articles
  Forums
  Essential Ref
  FAQs
  Software
  Hardware
  Usenet
  ISP-Solaris
  Server Daemons
   Feedback
  About

RFC's
To look up an Internet RFC, type in the rfc number or a keyword and hit GO.

RFC Index
Services
  Consulting
  Hardware

Search
To search for a topic type it in and press GO.

Advanced Search

Link to us
  Ultramode
  Banners

internet.com
  Internet News
  Internet Stocks/VC
  Internet Technology
  Windows Internet Tech.
  Linux/Open Source
  Web Developer
  E-Commerce/Marketing
  ISP Resources
  Downloads
  Internet Resources
  Internet Lists
  International

  Search internet.com
  Advertising Info
  Corporate Info
  Internet Trade Shows

internet.commerce
  Be a Commerce Partner
  Computer Help
  Advertise a Coupon
  Map Your Website
  Freelancer Exchange
  Small Biz Purchasing
  Content for Websites
  IT Products and Svcs
  Free Disk Space
  Buy Linux Products
  Software Specials

Tell A Friend!
If you've got a friend you think would enjoy our site, let them know!
Your name

Your email address

Your friends email address



* Solaris and all Solaris-based marks are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. SolarisGuide.com is independent of Sun Microsystems, Inc.


.




THE UNOFFICIAL GUIDE TO THE SUN SOLARIS™ OPERATING ENVIRONMENT *
>>> headlines
Headlines updated: Wednesday, 12-Jul-2000 12:56:44 EDT
SUNW: 97.125         Want more tech news? Get the scoop!

Talkback!

Talk back! Let us know what you think. Read what others had to say.
Click on >>comments with any headline.


 Rosetta Stone For Unix
Wed Jul 12 12:56:44 EDT 2000 (Posted by Jeff)

There's a new version of the Rosetta Stone For Unix out. Translate commands between AIX, DG-UX, HP-UX, IRIX, Linux, OpenBSD, Solaris, SunOS, True64 and Ultrix.

>> comments

 Sun re-thinking source code giveaway
Fri Jun 30 15:46:23 EDT 2000 (Posted by Jeff)

"Logistics issues are giving Sun Microsystems second thoughts on releasing to developers the entire source code of its Solaris operating system under its Free Solaris 8 Source License Program, according to a company official"

Read the full story at infoworld

>> comments

 Free Solaris(SM) Binary License Program Greatly Exceeding Sun's Expectations
Fri Jun 30 15:43:57 EDT 2000 (Posted by Jeff)

Sun today announced that registrants who have signed up for the Free Solaris(SM) Binary License Program within its first 90 days of availability have indicated that they plan to install Sun's operating environment on 260,000 systems. In addition, nearly 65% of the planned installations will take advantage of the no-cost licenses for the Intel Platform Edition of the Solaris Operating Environment. Further, over half of the systems are for users new to the Sun's operating system.

Read the full story at Yahoo

>> comments

 Following the XHTML Path
Fri Jun 30 15:35:15 EDT 2000 (Posted by Jeff)

Talk of XML is popping up everywhere the future of the Web is being discussed, but how can you make the transition? In this week's open publishing article, writer David Jenkins introduces XHTML - the next generation markup language that represents the path between HTML and XML.

Read the article at WebReference

>> comments

 You Say You Want an Evolution
Fri Jun 30 13:01:04 EDT 2000 (Posted by Jeff)

The next contender for heavyweight among Unix applications--and the one that will be needed the most by Windows users deserting that platform--is Evolution, the Outlook-style mail/calendar program current under development by Miguel de Icaza's Helix Code. Michael Hall previews Evolution at Linux Planet.

>> comments

 MySQL Goes GPL
Wed Jun 28 10:08:08 EDT 2000 (Posted by Jeff)

We have always considered ourselves committed members of the Open Source and Free Software communities," said Monty Widenius, project leader on MySQL. Moving to the GNU General Public License (GPL) is a way to show this". It is the latest beta (version 3.23.19) and all new releases that is being GPLed.

For more information, or to download MySQL, visit http://www.mysql.org

>> comments

 Judgment Day for the GPL?
Mon Jun 26 11:41:15 EDT 2000 (Posted by Jeffrey Meltzer)

ne of the biggest issues facing the Open Source and Free Software communities is the legality of the GNU General Public License. As Dennis E. Powell reports, a judge may determine as early as this summer if it's worth the paper it's (not) written on.

Read the article at Linux Planet.

>> comments

 StarOffice 5.2 released
Wed Jun 21 00:04:57 EDT 2000 (Posted by Jeff)

Sun has released StarOffice version 5.2. Some of the new features include "improved import and export filters", "extensive online help", "enhanced database functionality", a new standalone presentation player, and many other new features. You can download the new version of StarOffice at http://www.sun.com/staroffice /.

>> comments

 Solaris Default Processes and init.d
Tue Jun 20 23:59:54 EDT 2000 (Posted by Jeff)

Those Security Focus guys have another another great article. This one is on the rc.X init scripts under Solaris. You can find part one here, and part two here.

< FONT SIZE=1 FACE="Arial,Helvetica">>> comments

 Solaris and inetd.conf
Tue Jun 20 23:58:11 EDT 2000 (Posted by Jeff)

Security has a nice article on configuring inetd.conf on a Solaris server. You can find part one here, and part two here.

< FONT SIZE=1 FACE="Arial,Helvetica">>> comments

 SCSL has merit?
Tue Jun 13 16:38:09 EDT 2000 (Posted by John)

"I think the main reason that "Community Source" has such a bad name is that the pioneer, Sun, wrapped the idea in a very ugly license, the Sun Community Source License (SCSL). Only people who have gone through law school are in a position to understand this license, and even from that corner there seems to be confusion. Luckily, at least for Jini there's a version 2 in the works that promises to be clearer."

Read the full story at Advogato.

>> comments

 Installing Solaris 7 on a Dell Latitude CPi D300XT
Tue Jun 13 15:45:52 EDT 2000 (Posted by Jeff)

P-O Yliniemi has written a nice tutorial about how to get Solaris 7 x86 up and running on your Dell laptop. The instructions should be enough to give anyone assistance in installing Solaris on your x86 based laptop. You can find the tutorial here, or in our FAQs section.

>> comments

 Why 100% Pure Java is a Crock
Thu Jun 8 08:01:31 EDT 2000 (Posted by ice9)

"It tells you to put on your blinders and avoid looking at other alternatives, even if they're better. Don't sacrifice your users on the altar of Sun's corporate agenda."

Read the full editorial at Samizdat Productions.

>> comments

 Shell access security
Mon Jun 5 13:41:09 EDT 2000 (Posted by ice9)

Devshed has a decent article called The Shell Game that discusses improving security of shell access (using SSH instead of telnet, etc.). Worth a read.

>> comments

 Sun buys an Infiniband leg-up
Mon Jun 5 10:08:19 EDT 2000 (Posted by Jeff)

" Sun Microsystems has bought itself some negotiating muscle, picking up the rights to Dolphin's Infiniband technology. Dolphin provides the SCI (Scalable Coherent Interface) interconnects for Sun's Enterprise clusters, Fujitsu's RM600s and Data General's cc-Numa servers, and helped define the SCI spec in its early days. "

For the full story read The Register

>> comments

 How To Eliminate The Ten Most Critical Internet Security Threats
Mon Jun 5 10:06:27 EDT 2000 (Posted by Jeff)

SANS has published what they believe to be the top ten security flaws in systems, and how to secure them. (If you were curious, number one is BIND).

For the full article, read SANS

>> comments

 PHP4 Released
Tue May 23 07:41:39 EDT 2000 (Posted by Ice9)

"May 22, 2000. It's here, it's ready, and it has the long awaited Release tag. The successor of PHP 3.0 has finally been released. At this point, everyone is encouraged to begin upgrading their systems to use this version."

Get the whole story and the new version at PHP.net.

>> comments

 Open Source Software
Sat May 20 01:47:33 EDT 2000 (Posted by Jeffrey)

If you haven't already seen it, check out the latest installment of the Free Software Project, a book about the open source movement that reporter Andrew Leonard is writing "live" on the Web. That is, members of the open source community read each chapter, send their comments to him, and he revises accordingly -- same as with the software development. This chapter is about how Berkeley hackers built the Net's most fabled free operating system on the ashes of the '60s -- and then lost the lead to Linux. The last installment was about how it all started in Finland.

Read the full story at Salon.com.

Thanks go to Karyn Hunt for the tip.

>> comments

 VA Linux wants to challenge Sun for high-end systems
Fri May 19 14:21:57 EDT 2000 (Posted by Jeff)

" "I don't think (Sun) can sell effectively anymore" to companies setting up large numbers of computers for high-traffic Web sites, said Biles, who in his last job plugged Sun network software. "They're turning into a mainframe company."

For the full story read News.com

>> comments

 VBS.NewLove.A
Fri May 19 08:20:39 EDT 2000 (Posted by Jeff)

"The VBS.NewLove.A is a worm, and spreads by sending itself to all adressees in the Outlook address book when it is activated. The attachment name is randomly chosen, but will always have a .Vbs extension. The subject header will begin with "FW: " and will include the name of the randomly chosen attachment (excluding the .VBS extension) Upon each infection, the worm introduces up to 10 new lines of randomly generated comments in order to prevent detection."

This isn't really an issue for those of us not using Outlook. However, you may need to act on this if some of your users are using MS Outlook/Exchange.

Read the full details at S ARC.

>> comments

 Microsoft/Slashdot/Kerberos
Fri May 12 08:19:58 EDT 2000 (Posted by ice)

"Robin Miller sounded like he was licking his chops when reached by phone. In contrast to other disputes involving copyrighted information -- such as the Napster controversy -- this particular tangle cannot easily be painted as one in which hackers are ripping off corporations or depriving artists of revenue. Instead, Microsoft is attempting to co-opt a popular public technology and, after having been confronted about that, is attempting to control the transmission of information revealing its actions."

Read the full story at Salon .

>> comments

 sendmail 8.11.0.Beta1 available
Thu May 11 17:24:25 EDT 2000 (Posted by Jeff)

New beta version of sendmail includes release of STARTTLS and SMTP Authentication Security Layer code.

You can find more information and download the source from The Sendmail Consortium

>> comments

 That pesky ILOVEYOU worm
Thu May 4 22:14:14 EDT 2000 (Posted by Jeff)

By now, most of you Systems Administrators already know about it. I meant to post something about it at 9am this morning, but, got busy spending the better part of my day adding sendmail rulesets to ~100 mailservers, as well as pulling through ~100,000 mbox files, deleting the worm before it was downloaded.

Yet another reason not use use Outlook. When was the last time you heard of a pine, elm, Netscape or Eudora virus? It's always Outlook...

On the Sendmail website they have posted a ruleset that will block the worm.

If anybody out there needs assistance cleaning up your mailserver, please let me know. I quickly became an expert today :)

>> comments


© 1999 internet.com

About internet.com Corp. | Press Releases
Privacy Policy | Advertising Information


-------------------- Michael St. Laurent Hartwell Corporation > -----Original Message----- > From: owner-fwtk-users@ex.tis.com > [mailto:owner-fwtk-users@ex.tis.com]On > Behalf Of Tony Gale > Sent: Tuesday, July 11, 2000 8:20 AM > To: Mark C Farone > Cc: fwtk-users@lists.nai.com; Rick Murphy; Joseph S D Yao; Overdijk, > Harrie > Subject: RE: http1.1 problem > > > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > > (Rick especially, please see comments at end) > > > On 11-Jul-2000 Mark C Farone wrote: > > Thanks, Tony. > > That definitely is the place. > > > > Using your suggestion and re-reading rfc1738, I interpret it to > > mean > > that for those characters which are "unsafe" or "reserved" we never > > want to unescape them where: > > "unsafe" { <>"#%{}|\^~[]`} > > "reserved" {;/?:@=&} > > and additionally, crlf > > > > However, I think maybe we shouldn't unescape what it calls > > "special" > > characters (those which can exist unencoded in the URL) if they've > > already been escaped for whatever reason: > > "special" {$-_.+!*'(),} > > This is where is gets tricky. To some extent this will depend upon > how broken peoples cgi scripts are. And there are a *LOT* of broken > cgi scripts around. In theory, I don't believe that the specials are > required, but they are probably a good idea. > > > > > So, when I change that same line in auth.c to: > > { TYPE_HTTP, " <>\"#%{}|\\^~[]`;/?:@=&$-_.+!*'(),\r\n"}, > > > > I am able to correctly bring up this URL through http-gw: > > http://www.eshopflorida.com/MALL/Catalog/StoreRedir/asp/url/http%3A% > > 2F%2Fwww%2Eaaadiscountsports%2Ecom/company_id/1000011398/name/AAA+Di > > scount+Sports%2Ecom/mall_id/1000010557.html > > > > and get the same data as if I went direct. > > > > Any comments, especially as this would relate to security? > > > > The only thing that comes to mind: > > - the "-dest" option, which does destination checking > > but I don't think many people use it. Assuming that it is a problem, > it was there already, but just got worse. > > -tony > > > --- > E-Mail: Tony Gale > Q: What does a WASP Mom make for dinner? > A: A crisp salad, a hearty soup, a lovely entree, followed by > a delicious dessert. > > The views expressed above are entirely those of the writer > and do not represent the views, policy or understanding of > any other person or official body. > From owner-fwtk-users@ex.tis.com Wed Jul 12 16:35 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA26622 Wed, 12 Jul 2000 16:35:19 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA08421; Wed, 12 Jul 2000 13:42:23 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 12 Jul 2000 12:20:25 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA04727 for fwtk-users-outgoing; Wed, 12 Jul 2000 12:20:04 -0700 (PDT) Message-ID: <91A5926EFF44D3118B1200104B7276EB654D28@hart-exchange.hartwellcorp.com> From: "Michael St. Laurent" To: "'alexander.oesterle@tcns.de'" , "'fwtk-users@lists.nai.com'" Subject: RE: Ports on fwtk Date: Wed, 12 Jul 2000 10:11:10 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 923 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] For the TCP port you can probably use the plug-gw module. For the UDP connection I believe the utility of choice is still UDP Relay. -------------------- Michael St. Laurent Hartwell Corporation > -----Original Message----- > From: owner-fwtk-users@ex.tis.com > [mailto:owner-fwtk-users@ex.tis.com]On > Behalf Of Alexander Oesterle (TCNS GmbH) > Sent: Tuesday, July 11, 2000 9:08 AM > To: fwtk-users@lists.nai.com > Subject: Ports on fwtk > > > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hi everyone, > i need an TCP Port 1494 / UDP 1604 for Citrix ICA Protocol through our > firewall. > Is there a "ica-gw" possible ?? > > How can i add this feature to my fwtk 2.1 ?? > > regards alex > From owner-fwtk-users@ex.tis.com Wed Jul 12 16:45 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA26655 Wed, 12 Jul 2000 16:45:50 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA08868; Wed, 12 Jul 2000 13:52:50 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 12 Jul 2000 12:32:40 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA05174 for fwtk-users-outgoing; Wed, 12 Jul 2000 12:32:19 -0700 (PDT) Date: Wed, 12 Jul 2000 15:31:10 -0400 From: Joseph S D Yao To: Mark C Farone Cc: fwtk-users@lists.nai.com Subject: Re: http1.1 problem Message-Id: <20000712153110.H5443@washington.cospo.osis.gov> Mail-Followup-To: Mark C Farone , fwtk-users@lists.nai.com References: <50B56D407D2DD31191DE00902771E9F401593560@ecntex.ecn.nl> <20000711121839.H28053@washington.cospo.osis.gov> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from farone@gvillesun.com on Wed, Jul 12, 2000 at 02:36:59PM -0400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1097 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Wed, Jul 12, 2000 at 02:36:59PM -0400, Mark C Farone wrote: ... > By the way, is there an on-line archive of the mailing list from back then? > I don't have archives of this mailing list before 5/98. FAQ : "The FWTK users mail list archive is at ftp://ftp.tislabs.com/pub/firewall/toolkit/fwtk-users-archive/ . You can find a searchable online archive at http://www.progressive-comp.com/Lists/?l=fwtk-users&r=1&w=2#fwtk-users " The former goes from 1994 to now. The latter actually forwards me to and goes from Aug 1995 to now. [Who wants to fix the Meta-FAQ - the one that is for some reason labeled "Downloads"?] -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Wed Jul 12 17:20 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA26749 Wed, 12 Jul 2000 17:20:10 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA10472; Wed, 12 Jul 2000 14:27:01 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 12 Jul 2000 12:59:46 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA06274 for fwtk-users-outgoing; Wed, 12 Jul 2000 12:59:15 -0700 (PDT) Message-ID: <396CCDFB.3CF6518B@v-one.com> Date: Wed, 12 Jul 2000 15:58:51 -0400 From: Keith Young Organization: V-ONE X-Mailer: Mozilla 4.73 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: Mark C Farone CC: Joseph S D Yao , fwtk-users@lists.nai.com Subject: Re: http1.1 problem References: <50B56D407D2DD31191DE00902771E9F401593560@ecntex.ecn.nl> <20000711121839.H28053@washington.cospo.osis.gov> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 812 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Mark C Farone wrote: > > I didn't check the code in each patch, but I don't see any info on > the fwtk.org site for any kind of patch to do with http-gw's hex > encoding. > Any other considerations about this proposed patch? I get to have a "free" weekend without business travelling this weekend (yay!), so I'm planning to update fwtk.org on Saturday & Sunday. > By the way, is there an on-line archive of the mailing list from back then? > I don't have archives of this mailing list before 5/98. Look here: http://www.fwtk.org/fwtk/download/downloading.html#3.5 Archives go back to 07/1994. -- --Keith Young -Director of Customer Care/Support, V-ONE Corp. -kyoung@v-one.com From owner-fwtk-users@ex.tis.com Thu Jul 13 05:49 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id FAA28904 Thu, 13 Jul 2000 05:49:36 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id CAA16033; Thu, 13 Jul 2000 02:55:54 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 13 Jul 2000 01:07:14 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id BAA15013 for fwtk-users-outgoing; Thu, 13 Jul 2000 01:06:33 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <396CCDFB.3CF6518B@v-one.com> Date: Thu, 13 Jul 2000 09:04:28 +0100 (BST) From: Tony Gale To: Keith Young Subject: Re: http1.1 problem Cc: fwtk-users@lists.nai.com, Joseph S D Yao , Mark C Farone Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 673 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On 12-Jul-2000 Keith Young wrote: > > I get to have a "free" weekend without business travelling this > weekend > (yay!), so I'm planning to update fwtk.org on Saturday & Sunday. > Excellent. I'll send you a finalised patch in a private email. -tony --- E-Mail: Tony Gale Be free and open and breezy! Enjoy! Things won't get any better so get used to it. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Fri Jul 14 09:21 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA04913 Fri, 14 Jul 2000 09:21:42 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA25226; Fri, 14 Jul 2000 06:28:17 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 14 Jul 2000 03:51:28 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA23695 for fwtk-users-outgoing; Fri, 14 Jul 2000 03:51:18 -0700 (PDT) Message-ID: <007101bfed7f$8ccdf2c0$9001a8c0@sctech.co.jp> From: "Karen Ellrick" To: Subject: Newbie tries to make toolkit - fails Date: Fri, 14 Jul 2000 19:37:46 +0900 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-2022-jp" Content-Length: 1367 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is probably a dumb question to most of you, but please bear with me. I downloaded the toolkit, unzipped and untarred it, and as best I could tried to follow the directions in the README file for running make (since I am on Linux, I copied Makefile.config.linux to Makefile.config). But I get a huge stream of "No such file or directory" errors when I run make. (I would love to attach a list of the output for you to see, but I don't know how to redirect stderr to a file, either - so much to learn!) Anyway, regarding the solution, I know I could start looking through the makefile line by line, and search to see if each needed include file is on my system somewhere (some of them I even recognize from my C programming days way back when), but I suspect that there's one simple thing I missed that would make it work the way it is (like run it from a certain directory or something), rather than looking for and retrieving each of dozens of files one by one. Anybody immediately know what I did wrong? Karen the Clueless -------------------------------- Karen Ellrick S & C Technology, Inc. 1-21-35 Kusatsu-shinmachi Hiroshima 733-0834 Japan (from U.S. 011-81, from Japan 0) 82-293-2838 -------------------------------- From owner-fwtk-users@ex.tis.com Fri Jul 14 09:57 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA05069 Fri, 14 Jul 2000 09:57:44 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA25711; Fri, 14 Jul 2000 07:04:45 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 14 Jul 2000 05:33:18 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA24394 for fwtk-users-outgoing; Fri, 14 Jul 2000 05:33:08 -0700 (PDT) Message-ID: <009e01bfed8d$d13bebc0$9001a8c0@sctech.co.jp> From: "Karen Ellrick" To: Subject: "Newbie tries to make toolkit - fails", Part 2 Date: Fri, 14 Jul 2000 21:19:54 +0900 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-2022-jp" Content-Length: 1638 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi all! Thanks to John Armstrong's prompt response, I learned how to capture the output of make, and the mess is attached as a .txt file. My original message is below, in case someone didn't get it. Thanks in advance for any help you can give me. -------------------------------- Karen Ellrick S & C Technology, Inc. 1-21-35 Kusatsu-shinmachi Hiroshima 733-0834 Japan (from U.S. 011-81, from Japan 0) 82-293-2838 -------------------------------- ORIGINAL MESSAGE: This is probably a dumb question to most of you, but please bear with me. I downloaded the toolkit, unzipped and untarred it, and as best I could tried to follow the directions in the README file for running make (since I am on Linux, I copied Makefile.config.linux to Makefile.config). But I get a huge stream of "No such file or directory" errors when I run make. (I would love to attach a list of the output for you to see, but I don't know how to redirect stderr to a file, either - so much to learn!) Anyway, regarding the solution, I know I could start looking through the makefile line by line, and search to see if each needed include file is on my system somewhere (some of them I even recognize from my C programming days way back when), but I suspect that there's one simple thing I missed that would make it work the way it is (like run it from a certain directory or something), rather than looking for and retrieving each of dozens of files one by one. Anybody immediately know what I did wrong? Karen the Clueless From owner-fwtk-users@ex.tis.com Fri Jul 14 15:55 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA06270 Fri, 14 Jul 2000 15:55:41 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA28613; Fri, 14 Jul 2000 13:02:32 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 14 Jul 2000 11:20:32 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA27708 for fwtk-users-outgoing; Fri, 14 Jul 2000 11:20:21 -0700 (PDT) Message-ID: <396F5A3C.ADF53419@symark.com> Date: Fri, 14 Jul 2000 11:21:48 -0700 From: David Morgan Organization: Symark Software X-Mailer: Mozilla 4.7 [en] (WinNT; I) X-Accept-Language: en MIME-Version: 1.0 To: "fwtk-users@ex.tis.com" Subject: Error on website Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 578 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I am reinstalling the FWTK for a third time as we have upgraded our network connection and the poor box running as the firewall needs to be replaced. I found a mistake on the web site and thought I'd draw somebody's attention to it. (I was on http://judgej.ne.mediaone.net/fwtk/fwtk/patches/patches.html#1.8) This reads: The line to fix is line 129 of ftp-gw.c: If should read: The line to fix is line 129 of ftp.c in http-gw Regards David From owner-fwtk-users@ex.tis.com Fri Jul 14 18:04 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA06653 Fri, 14 Jul 2000 18:03:59 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA00418; Fri, 14 Jul 2000 15:10:35 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 14 Jul 2000 13:38:10 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA28941 for fwtk-users-outgoing; Fri, 14 Jul 2000 13:37:39 -0700 (PDT) Message-ID: <396F7A0A.AED904E4@v-one.com> Date: Fri, 14 Jul 2000 16:37:30 -0400 From: Keith Young Organization: V-ONE X-Mailer: Mozilla 4.73 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: David Morgan CC: "fwtk-users@ex.tis.com" , avenger@erols.com Subject: Re: Error on website References: <396F5A3C.ADF53419@symark.com> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 408 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] David Morgan wrote: > > I found a mistake on the web site and thought I'd draw somebody's attention to > it. Doh! Thanks for catching it. I'll add this to my list of updates for this weekend. -- --Keith Young -Director of Customer Care/Support, V-ONE Corp. -kyoung@v-one.com From owner-fwtk-users@ex.tis.com Sat Jul 15 22:12 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id WAA10317 Sat, 15 Jul 2000 22:12:33 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id TAA08596; Sat, 15 Jul 2000 19:18:54 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sat, 15 Jul 2000 16:23:33 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA07086 for fwtk-users-outgoing; Sat, 15 Jul 2000 16:23:12 -0700 (PDT) Message-Id: <4.2.2.20000715190851.00b587e0@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Sat, 15 Jul 2000 19:11:53 -0400 To: "Karen Ellrick" , From: Rick Murphy Subject: Re: "Newbie tries to make toolkit - fails", Part 2 In-Reply-To: <009e01bfed8d$d13bebc0$9001a8c0@sctech.co.jp> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 742 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 09:19 PM 7/14/00 +0900, Karen Ellrick wrote: By now, you've probably figured out that you forgot the attachment. However, seeing the below: >I copied Makefile.config.linux to Makefile.config). But I get a huge >stream of "No such file or directory" errors when I run make. You probably are missing the C header files (/usr/include/stdio.h, /usr/include/sys/socket.h , for example.) If you don't have those, install the programming subsets from your OS distribution. Otherwise, let us know what files are missing and we may be able to help. Please note that FWTK is rather novice hostile. -Rick From owner-fwtk-users@ex.tis.com Sun Jul 16 17:38 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA11827 Sun, 16 Jul 2000 17:38:16 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA17081; Sun, 16 Jul 2000 14:45:47 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 16 Jul 2000 12:55:09 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA15984 for fwtk-users-outgoing; Sun, 16 Jul 2000 12:54:58 -0700 (PDT) Message-ID: <39721285.95CA33E2@sellbuysector.com> Date: Sun, 16 Jul 2000 20:52:38 +0100 From: Masih Tavassoli Organization: Sellbuy Sector X-Mailer: Mozilla 4.6 [en-gb]C-CCK-MCD NetscapeOnline.co.uk (Win98; I) X-Accept-Language: en-GB,en MIME-Version: 1.0 To: fwtk-users@lists.nai.com Subject: plug-gw to be used for http port 80 Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 705 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi all, I would like to put our webserver behind a firewall so it is available to public but only through port 80. I thought I could use plug-gw to relay all the http requests coming from the internet to be forwarded to our webserver which exists on our private network. Is this possible through fwtk? Am I on the right track??? Any help is appreciated. Internet|--------|firewall|----|Webserver|-----|Database Server| ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Internal network(192.168.1.x) -- Kind regards, Masih From owner-fwtk-users@ex.tis.com Sun Jul 16 19:53 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA12057 Sun, 16 Jul 2000 19:52:51 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA18799; Sun, 16 Jul 2000 16:45:48 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 16 Jul 2000 15:01:24 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA17233 for fwtk-users-outgoing; Sun, 16 Jul 2000 15:01:02 -0700 (PDT) Date: Sun, 16 Jul 2000 17:59:20 -0400 (EDT) From: Ted Keller To: Masih Tavassoli cc: fwtk-users@lists.nai.com Subject: Re: plug-gw to be used for http port 80 In-Reply-To: <39721285.95CA33E2@sellbuysector.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1313 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Masih, You are on the right track. Something for you to consider... Place the web server and possibly the data base server on a third nic card (DMZ zone). That way, you continue to minimize the exposure to your internal network. Any bugs which may be latent in the web server, if discovered, will not then expose your internal network to any harm. ted keller On Sun, 16 Jul 2000, Masih Tavassoli wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hi all, > > > > I would like to put our webserver behind a firewall so it is available > to public but only through port 80. > > I thought I could use plug-gw to relay all the http requests coming from > the internet to be forwarded to our webserver which exists on our > private network. > > Is this possible through fwtk? Am I on the right track??? > Any help is appreciated. > > > Internet|--------|firewall|----|Webserver|-----|Database Server| > > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > Internal network(192.168.1.x) > > > > > -- > Kind regards, > Masih > > > From owner-fwtk-users@ex.tis.com Mon Jul 17 05:12 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id FAA13358 Mon, 17 Jul 2000 05:12:41 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id CAA23088; Mon, 17 Jul 2000 02:20:13 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 17 Jul 2000 00:09:27 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id AAA21425 for fwtk-users-outgoing; Mon, 17 Jul 2000 00:09:15 -0700 (PDT) Message-ID: <000b01bfefc6$1892cc20$0a0ac7be@8022dd221214> From: "=?iso-8859-1?Q?S=E9bastien_Cottalorda?=" To: Subject: skey problem Date: Mon, 17 Jul 2000 09:07:47 +0100 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.5 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/alternative; boundary="----=_NextPart_000_0008_01BFEFCE.7996F160" Content-Length: 4269 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is a multi-part message in MIME format. ------=_NextPart_000_0008_01BFEFCE.7996F160 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi all, I'm trying to setup a TIS Firewall using S/Key but I've problem make it = runs (S/Key, not TIS FWTK). Here is my problem : I have a P100 with Ram:16Mo and RedHat6.0 (kernel 2.2.5-22) I've installed Skeys packages : - pam_skey-1.2-1.i386.rpm - skey-2.2-1.i386.rpm with no problem. Then, I've modified my /etc/pam.d/login file to make skey runs when I = try to login as this : auth sufficient /lib/security/pam_skey.so --> (The only = mofification I've made) auth required /lib/security/pam_securetty.so auth required /lib/security/pam_pwdb.so shadow nullok ... (exactly like the original one) Finally I've reboot my Firewall and here is the /var/log/message I get. Note : Skey did not run during login process, only the Linux = authentication. /var/log/messages: login: PAM unable to dlopen(/lib/security/pam_skey.so) login: PAM [dlerror: /lib/security/pam_skey.so: undefines symbol: = _xstat] login: PAM adding faulty module: /lib/security/pam_skey.so If anybody as a clue or tell me where can I find the solution, I would = appreciate. Thanks in advance. S=E9bastien ------=_NextPart_000_0008_01BFEFCE.7996F160 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hi all,
 
I'm trying to setup a TIS Firewall using S/Key but = I've=20 problem make it runs (S/Key, not TIS FWTK).
 
Here is my problem :
I have a P100 with Ram:16Mo and RedHat6.0 (kernel=20 2.2.5-22)
I've installed Skeys packages :
    - = pam_skey-1.2-1.i386.rpm
    - = skey-2.2-1.i386.rpm
with no problem.
 
Then, I've modified my /etc/pam.d/login file to make = skey runs=20 when I try to login as this :
    auth   =20 sufficient    /lib/security/pam_skey.so  --> (The = only mofification I've made)
    auth   =20 required    /lib/security/pam_securetty.so
    auth   =20 required    /lib/security/pam_pwdb.so shadow = nullok
    ... (exactly like the original=20 one)
 
Finally I've reboot my Firewall and here is the=20 /var/log/message I get.
 
Note : Skey did not run during login process, only = the Linux=20 authentication.
 
/var/log/messages:
    login: PAM unable to=20 dlopen(/lib/security/pam_skey.so)
    login: PAM [dlerror:=20 /lib/security/pam_skey.so: undefines symbol: _xstat]
    login: PAM adding faulty module:=20 /lib/security/pam_skey.so
 
If anybody as a clue or tell me where can I find the = solution,=20 I would appreciate.
 
Thanks in advance.
 
S=E9bastien
------=_NextPart_000_0008_01BFEFCE.7996F160-- From owner-fwtk-users@ex.tis.com Mon Jul 17 05:12 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id FAA13357 Mon, 17 Jul 2000 05:12:41 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id CAA23084; Mon, 17 Jul 2000 02:20:13 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 16 Jul 2000 23:56:55 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id XAA21311 for fwtk-users-outgoing; Sun, 16 Jul 2000 23:56:45 -0700 (PDT) Message-Id: X-Mailer: Novell GroupWise 5.5.2 Date: Mon, 17 Jul 2000 08:52:13 +0200 From: "Hermann Reimer" To: Subject: Is it better to use squid or squid-gw to hide a webserver Mime-Version: 1.0 Content-Disposition: inline Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by relay2.nai.com id XAA21308 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=ISO-8859-1 Content-Length: 1176 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi all, I would like to hide our webserver behind the firewall. Is it a good idea to use squid on the firewall or is it unsecure ? Is it a better idea to use squid-gw on the firewall and put a squid-proxy server in the the same local lan as the webserver ? Webserver is NT, firewall is SuSE Linux with two network cards and fwtk running. I favorite this opinion because the webserver could be managed in the local lan, without any restrictions. In an DMZ the different authors of the web ( in the local lan) could only use ftp to manage their websites, so it's not so comfortable. thank you for any help best regards Hermann Reimer (Leiter EDV) --------------------------------------------------------------------------------- Stadt Deggendorf Informations- und Kommunikationstechnik Franz-Josef-Strauß Straße 3 D-94469 Deggendorf Germany Tel.: +49 (0) 991 2960 259 Fax.: +49 (0) 991 7958 mail: reimer@deggendorf.de internet: http://www.deggendorf.de --------------------------------------------------------------------------------- From owner-fwtk-users@ex.tis.com Mon Jul 17 11:14 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA15070 Mon, 17 Jul 2000 11:14:27 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA26473; Mon, 17 Jul 2000 08:22:09 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 17 Jul 2000 06:38:26 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA25372 for fwtk-users-outgoing; Mon, 17 Jul 2000 06:38:06 -0700 (PDT) From: "Dan and Karen Ellrick" To: "Rick Murphy" , Subject: RE: "Newbie tries to make toolkit - fails", Part 2 Date: Sun, 16 Jul 2000 22:54:16 +0900 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 In-Reply-To: <4.2.2.20000715190851.00b587e0@mail.itm-inst.com> Importance: Normal Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 4500 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] > By now, you've probably figured out that you forgot the attachment. > However, seeing the below: I'm not at work now to be able to confirm, but I'm pretty sure I didn't forget the attachment. However, I am not sure whether attached files make it through the mail group system unscathed - perhaps only my main message was re-distributed to everyone. I even wondered about that at the time I sent it. > You probably are missing the C header files (/usr/include/stdio.h, > /usr/include/sys/socket.h , for example.) That fits the symptoms. Do they all need to be in the same directory where I am compiling? - surely not! > If you don't have those, install > the programming subsets from your OS distribution. That runs into a different problem that has been handicapping me all along. After the installation process (which, of course, uses the CD-ROM) is completed, I have not been able to mount the CD-ROM drive on any of the three machines I have installed RedHat 6.1 on, which is obviously very frustrating. It says that "/mnt/cdrom is not recognized as a block device", an error I do not know the meaning of. All I know to do is ensure that the entry in /etc/fstab looks right, and as far as I know, "right" means it resembles lots of examples I have seen in books or on the web for mounting CD-ROM file systems. I have a variety of "little" problems like this with the servers I'm trying to set up, and unfortunately all the man pages, third-party books, etc. seem to assume things are generally working correctly after a fresh OS install, and so they only talk about doing new things. > Otherwise, let us know > what files are missing and we may be able to help. Too numerous to list - lots and lots of header files. That's why I said I thought it was one, more fundamental thing I was doing wrong. I did select "kernel development" when I installed Linux, so I have been assuming the normal header files were installed somewhere (after all, the compiler is there!). But maybe that's giving RedHat (and myself, as the one who "drives" the installation) too much credit! :-/ > Please note that FWTK is rather novice hostile. If I have no business using it, I wouldn't be surprised to hear it. I really don't have any business doing any of the things I'm currently up to my elbows in, but there is no one else available to do it and no one locally I can even consult with (the job is essentially reconfiguring the network of a dozen-person company to include a firewall and several new services). What I thought I wanted from FWTK is smap, as it was recommended as a good security measure to "wrap around" sendmail on our bastion host. But maybe it's more trouble than it's worth - I haven't yet figured out how to configure sendmail itself (the new aspect from our current setup being that the bastion host is to simply pass the mail to another server rather than housing our mailboxes), and smap would just add to the complexity. At first I thought that smap could replace sendmail for simple store-and-forward setups, but apparently that's not true. It's frustrating when I consider that any one of the people reading this mailing list, and a variety of others I've consulted with, could probably set up our little network in less than a day. Instead I chew up hours of time slogging through a dozen books, semi-constant web searches, e-mail consultations, etc. to find each clue. I am an electrical engineer by training, have extensive programming experience, and have been a lover of Unix (as a user) every since college, but prior to starting this project I had no experience with the system admin and security side of things, and I had no idea how hard it would be. Anyway, sorry I went off on a tangent whining about my challenges. I guess my main point is, am I right in my current thinking that smap, although perhaps improving security, will not make the configuration any simpler but actually more complex, and that I should consider dropping, for now, the idea of using it? Thanks for your help, Karen P.S. In case you're wondering why the address is different than my previous messages, I get my work mail at home also, and so I'm answering from home this time, because I won't go to work again until Wednesday. It's best to write to my work address, so I have the info there where I can use it (k-ellrick@sctech.co.jp). From owner-fwtk-users@ex.tis.com Mon Jul 17 15:19 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA15951 Mon, 17 Jul 2000 15:19:36 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA29585; Mon, 17 Jul 2000 12:27:18 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 17 Jul 2000 10:50:20 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA27977 for fwtk-users-outgoing; Mon, 17 Jul 2000 10:50:10 -0700 (PDT) Message-ID: <397346AD.9CCB9C17@tyc.es> Date: Mon, 17 Jul 2000 19:47:25 +0200 From: Jacobo Gonzalez Simon X-Mailer: Mozilla 4.5 [es] (Win98; I) X-Accept-Language: es MIME-Version: 1.0 To: "fwtk-users@ex.tis.com" Subject: ssh and fwtk Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 528 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hello, how can i open an ssh session trough fwtk in hosts ( multiple) on red 1 from red 0. INTERNET | | | | red 1 --------------firewall fwtk | | | | | | red 0 Thans in advance and sorry for my poor english. From owner-fwtk-users@ex.tis.com Mon Jul 17 17:22 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA16296 Mon, 17 Jul 2000 17:21:43 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA01997; Mon, 17 Jul 2000 14:29:26 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 17 Jul 2000 12:55:44 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA00011 for fwtk-users-outgoing; Mon, 17 Jul 2000 12:55:23 -0700 (PDT) Date: Mon, 17 Jul 2000 15:54:18 -0400 From: Joseph S D Yao To: Dan and Karen Ellrick Cc: fwtk-users@lists.nai.com Subject: Re: "Newbie tries to make toolkit - fails", Part 2 Message-Id: <20000717155418.G671@washington.cospo.osis.gov> Mail-Followup-To: Dan and Karen Ellrick , fwtk-users@lists.nai.com References: <4.2.2.20000715190851.00b587e0@mail.itm-inst.com> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from ellrick@hiroshima-cdas.or.jp on Sun, Jul 16, 2000 at 10:54:16PM +0900 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 4550 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Sun, Jul 16, 2000 at 10:54:16PM +0900, Dan and Karen Ellrick wrote: > > You probably are missing the C header files (/usr/include/stdio.h, > > /usr/include/sys/socket.h , for example.) > That fits the symptoms. Do they all need to be in the same directory where > I am compiling? - surely not! No. You will typically find them in /usr/include and its sub-directories. ... > After the installation process (which, of course, uses the CD-ROM) is > completed, I have not been able to mount the CD-ROM drive on any of the > three machines I have installed RedHat 6.1 on, which is obviously very > frustrating. It says that "/mnt/cdrom is not recognized as a block device", > an error I do not know the meaning of. All I know to do is ensure that the > entry in /etc/fstab looks right, and as far as I know, "right" means it > resembles lots of examples I have seen in books or on the web for mounting > CD-ROM file systems. I have a variety of "little" problems like this with > the servers I'm trying to set up, and unfortunately all the man pages, > third-party books, etc. seem to assume things are generally working > correctly after a fresh OS install, and so they only talk about doing new > things. You appear to be trying to mount /mnt/cdrom on some directory [/cdrom?], instead of mounting /dev/cdrom. The "device special files" are all in /dev/ and its subdirectories. I hope this provides enough information to help you. Different distributions call the device different things. On a slightly older Linux box with a SCSI CD-ROM drive, I have: /dev/scd0 /cdrom iso9660 defaults,ro 0 0 On a more recent Red Hat distribution, there is: /dev/cdrom /mnt/cdrom iso9660 noauto,owner,ro 0 0 ... > "kernel development" when I installed Linux, so I have been assuming the > normal header files were installed somewhere (after all, the compiler is > there!). But maybe that's giving RedHat (and myself, as the one who > "drives" the installation) too much credit! :-/ You don't need the kernel development subset to do normal development, so the normal header files are not included. You can check which header files are found in which RPM package: bash$ rpm -q -f /usr/include/stdio.h glibc-devel-2.1.3-15 > > Please note that FWTK is rather novice hostile. > If I have no business using it, I wouldn't be surprised to hear it. I > really don't have any business doing any of the things I'm currently up to > my elbows in, but there is no one else available to do it and no one locally > I can even consult with (the job is essentially reconfiguring the network of > a dozen-person company to include a firewall and several new services). ;-) Welcome to Total Immersion System Administration. It is a very poor but extremely common way companies have of re-using valuable personnel in tasks for which they have no training. ;-( > What I thought I wanted from FWTK is smap, as it was recommended as a good > security measure to "wrap around" sendmail on our bastion host. But maybe > it's more trouble than it's worth - I haven't yet figured out how to > configure sendmail itself (the new aspect from our current setup being that > the bastion host is to simply pass the mail to another server rather than > housing our mailboxes), and smap would just add to the complexity. At first Smap is an extremely good idea. You do NOT want 'sendmail' to talk to the 'Net directly, especially if you are not skilled at configuring it for security. [Of course, download the latest version and compile and load it, and security will be greatly increased. ;-)] Smap only adds a small degree of complexity to the configuration. You never want ANY user services on the bastion host. They should all be on internal servers. Mailboxes are a prime example. The only things running on the bastion host should be those processes having to do with being a firewall. > I thought that smap could replace sendmail for simple store-and-forward > setups, but apparently that's not true. ... Quite. Smap/smapd form the network proxy. Sendmail is still the prime mail transfer agent [MTA], although 'postfix' can do many of the more common mail transfer things more simply. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Tue Jul 18 00:21 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id AAA17436 Tue, 18 Jul 2000 00:21:14 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id VAA06972; Mon, 17 Jul 2000 21:28:32 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 17 Jul 2000 19:41:37 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id TAA05701 for fwtk-users-outgoing; Mon, 17 Jul 2000 19:41:27 -0700 (PDT) Message-Id: <200007180238.TAA05677@relay2.nai.com> Date: Tue, 18 Jul 2000 10:39:57 +0800 From: wen Reply-To: wen@hisense.qd.sd.cn To: "fwtk-users@lists.nai.com" Subject: set up server in the DMZ X-mailer: FoxMail 3.0 beta 2 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="GB2312" Content-Length: 976 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi: my system is linux redhat6.1.I have installed fwtk2.1 and running is fine. in my system box,I have three networkcard.one of three is used for DMZ. in the DMZ I want to set up webserver,ftp server ,telnet server and more. for these server, clients in the internet or intranet can login. now I can set up these server by applying plug-gw, but beacuse proxy have used standard port.in the DMZ servers have to use other port. for example,in the DMZ i set up two webserver. I assign one 8080 port and another 8081 port.so when I browser these server,I have to type: http://webserver1:8080/ or http://webserver2:8081/.but for clients in the internet,they don't know port my server is using.so they don't know login my server. how to resolve this problem? when I want to set up two and more webserver or ftpserver,etc, what do I do? thanks. From owner-fwtk-users@ex.tis.com Tue Jul 18 04:04 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id EAA17937 Tue, 18 Jul 2000 04:04:19 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id BAA09456; Tue, 18 Jul 2000 01:12:03 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 17 Jul 2000 23:36:41 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id XAA08401 for fwtk-users-outgoing; Mon, 17 Jul 2000 23:36:30 -0700 (PDT) Message-Id: <200007180636.OAA00940@server.qdhaixin.com.cn> X-Authentication-Warning: server.qdhaixin.com.cn: nobody set sender to using -f Date: Tue, 18 Jul 2000 14:24:40 +0800 From: liujianwei Reply-To: liujianwei@hisense.qd.sd.cn To: "fwtk-users@lists.nai.com" Subject: about DMZ! X-mailer: FoxMail 3.0 beta 2 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" Content-Length: 502 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, Dear guys: Long time no see, how are you getting on these days? I met a problem. Could you tell me how I can setup serveral servers such as webserver,ftpserver, mailserver, telnetserver,or the other servers in the DMZ which using fwtk as proxies? How could the internet users visit these servers? I hope that you could give me a clue. Thank you very much! Jianwei From owner-fwtk-users@ex.tis.com Tue Jul 18 16:16 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA21011 Tue, 18 Jul 2000 16:16:03 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA14873; Tue, 18 Jul 2000 13:22:51 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 18 Jul 2000 10:59:04 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA13036 for fwtk-users-outgoing; Tue, 18 Jul 2000 10:58:53 -0700 (PDT) Message-ID: <39747F62.D9219C1B@lynuxworks.com> Date: Tue, 18 Jul 2000 09:01:38 -0700 From: "H.T. Sun" Organization: LynuxWorks, Inc. X-Mailer: Mozilla 4.7 [en] (X11; U; Linux 2.2.12-20 i686) X-Accept-Language: en MIME-Version: 1.0 To: "fwtk-users@lists.nai.com" Subject: filtering attachment files with smap References: <200007180636.OAA00940@server.qdhaixin.com.cn> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 341 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, I have been trying to figure out how smap can filter out some specific attachments which are malicious (virus). Do I need a patch ? Or smap already has the function ? THanks a lot HT From owner-fwtk-users@ex.tis.com Tue Jul 18 16:16 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA21015 Tue, 18 Jul 2000 16:16:27 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA14877; Tue, 18 Jul 2000 13:22:55 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 18 Jul 2000 10:57:39 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA13008 for fwtk-users-outgoing; Tue, 18 Jul 2000 10:57:07 -0700 (PDT) Message-Id: <200007181532.RAA04647@leto.esrf.fr> Date: Tue, 18 Jul 2000 17:32:40 +0200 (MET DST) From: lebayle Reply-To: lebayle Subject: A "jumbo"-patch for spam filtering To: fwtk-users@lists.nai.com Cc: lebayle@leto.esrf.fr MIME-Version: 1.0 X-Mailer: dtmail 1.3.0 CDE Version 1.3 SunOS 5.7 sun4u sparc Sender: owner-fwtk-users@lists.tislabs.com Content-Type: MULTIPART/mixed; BOUNDARY=Mob_of_Kangaroos_663_000 Content-Length: 309785 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] --Mob_of_Kangaroos_663_000 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: j4/Aiiqa9T/1Qtg8N/l+SQ== Hi, I've been away for a while, and don't know what's new regarding smap and spam filtering. The fwtk's web site does not give anything new on the topic, so since I've made a lot of efforts on my side, I would like to make my patches available for other users. Especially, the included filtering based on email contents (http://www.cnx.com/stopspam.html) is really cool, it protected our site from the I-love-you virus and others. ------------------------------ short description of filtering ------------------------------ Each of the following features can be added separately using the relevant compilation options. 1- Built-in home-made anti-relay ("FILTER" compilation option) 2- Unsollicited Commercial Emails coming from well-known "spammers" are filtered according to the NoSpam! database (more than 5000 entries) developed by Jason R. Rhoads (http://www.sabernet.net). The filter processes ("NOSPAM" compilation option): - the "From:" field (sender's name): either a full username or a domain name - the originating hostname i.e. the host establishing the SMTP connection intended to transport the email: either a full hostname, or a domain name, or an IP address 3- MAPS/RBL database (Mail Abuse Prevention System - Realtime Blackhole List). The http://maps.vix.com/rbl site provides a tool checking whether a particular host belongs to the MAPS/RBL database. The spammer is identified based on the originating host only (also "NOSPAM" compilation option). 4- Malformed "From:" address ("NOFAKE" compilation option): - empty "From:" field (either no character at all, or <>, or <@>), except for error reports as of RFC821 - user without domain name - user with invalid domain name, i.e. not registered in DNS - fake user name (e.g. more than N figures) - fake host name 5- Well-know strings in the email's contents ("SPAMBODY" compilation option): based on the work of http://www.cnx.com/stopspam.html Bruno LEBAYLE (lebayle@esrf.fr) European Synchrotron Radiation Facility - Grenoble, FRANCE --Mob_of_Kangaroos_663_000 Content-Type: APPLICATION/x-sun-compress; name="smap.tar.Z"; x-unix-mode=0600 Content-Transfer-Encoding: BASE64 Content-Description: smap.tar.Z Content-MD5: v9KfpSoUajGIuxMCIU5+UA== H52QLl4AGEiwoMGDCBMqXMiwoUOEMGDQgHEjIoCIEWXMiHERYwwaNTpiHGmR YowZNWBsnCFDRscYMWzIuAEg5MObOHPq3FlnDp0wcjqyKSMmTJ6hOw+OedMG TtKEI2XEgCFy5NOrWLNq3co14Jw2YeC4GMO1rFmoU2HYKIlRI8eRH0OSTEvD xoyLN07SuHGjLgy5MGLMrEGT6tnDiA/2/Bk04tCiR8toXdq0bNSpVTEm3sy5 89kXKhSAUAFiyBs4eeSkOYOGDggUY1KAiJEjxwwWIKjIWVyGDIgkbsy8kQOW Tpo3bkBMyeOzTJs5uIEvlQNneBg6vUWTDsKGDQjVrOnM+V5mThk5dnq70K4d hJTeaXyqFlPHOHIQYdz47lkGv5z+Z7yRnhxu9AaCGHmAQAca/WFH3HhklPFT GkP5lkZyC5bRHhtpjFGGG+aBQMYbY9TRxoeuoSACE0kMUYQTUxQhgmwXjsFG HRH6dkcaCyrIoIJvvMHGGjyuN9oLCigAmnYJBFEfGsPpAEITQJU4nhIuuJef ibjpxptvwAlH3HXHJbdcc89F58YYRqqApE9kjpHAGGgAlYAUY8yRBBlbdAFC DyCIQAISZYQRoRxSfhXWWCzYMZsLNoCQAw0vwPRCYLPFoANhm8oAQhtqyEGe dySIsEOSS46WgBEUOghCGk0NdaIbP9mXnJgifpjHhWfgN4ZxbvQaxnhhfBoG haMaxaSTC0YJghC7ufEGCEwUIUQQWVSLWxFTSGEEbkrUUSAIMkRKWw44MMlE kGuAgKsIRiTBBBVFSCECCJTBQSGZ951mK5PA+Rjfq7E6hyK/buD2Rh2ijgjW ha+O50YYJ/omQnlymOGCGXKIwCQUqq2ZBhxD6cBkAi346iEcruWXoHn6nffC f2OMnAaKr5qBL3IF/lpmxK+6wWMa1xmI4Mkg4JfchQ5O7B2UPr224IXtvqEz f3KMJ+YdQJHBq49lpCHqw2ykcHLKZbBhnpRhjLGya84d610aOufnG3JsJEg3 fq4NNaxryPUH86EgDKc00uTVrC/OYqSN3Bnj0THtwg0zdawbZ4OQ9trk0cFw ciLUUMMMIFzR34i0JpvHvXaDEEcdPDLZxBtemyEltOJOW+212RaxbbffguDk GYuBYG5t6aqaQNtvG4ssZV9zzFTh9c2RRoQ5K323G3lnfx0Ifkcd+Mk028y4 48FGPjnDIlp+4Q6vulBGlhG6kSDZO7cRvRzTn7yweNfrz456VCwxncFARpDC E5rgrpuxwTcomN8ZspTABborSEDAmMY4ZjZVza52t4uW7qyFLW2BgFvews3w ijeV2SCPfM4RUH/KtzhaSewNrmkcGx73NclRr3IPA5G7+NcG/DiPDSeDXrCG OL3/WS9C8FtDGcoAh8JxL0EZClrTwuAdGt7MhrKjHd1CmDtqkbB3v0uhcqiI nTY0TlQ3cCG6YFgdObjGCjJwAR4+JUYzdAhhuEmD/LL0H0OB7VPlmUMYDqgg Cnknix8iw8kaJ6YZSuhzXytW6GrgKSoE6VN1oJOIrhMGj3mwj2SUlhl5Z0IU Bm8KbHTOG0EQx3MlTwUJSMB/6njHPO6xDX38o60COUjyGDKLJ5qDIhlpnO4c MpKTLEMlO4fJJWpSdJ38ZBtCiYZR/sSUuPzgGJ8lwlWW0HcnBB5uYMkyWZ6H XDSQ4y1zybQynEEORTukE94wBThQLAQg8CcdRPm9k7WGDnDQwQtecIeGukCR bywQHVwg0RfMoQ5w4OULJCekObxAWnPwZxtc0Jo2IFF5NbpRjvAzHic8YQpQ CAID87UvWxWOZWUKIwjJWcbdnTONwdtnetz4ThnkQI45OJmhVlosOpVhDO3C 1eDOcwKthUGK+CEDGf6jzPKcLKU4MtCwQOBSIwRhCUXIn77YgLCb/uuUO8Wd Kn2KxnSqUajuFNUMYIDUk+3wDVE1XHzMcNUZ/u9C/ZEqHJ5KNO8wj40Im4NO xynXEbISna7EDRGemldy9RWlcyAsVqV1BwUVdjxLCc5qGNZWr9HMOOkZDwp8 4kgQ9ORrZT1rETqIy1yKYYdQFW1/UCCGIPnNDSnAzWNZJtzXXFQM8uFVck+W AD8Sj6vNhc3CUme1Bl63PLzNJTBrdzPfjMEMVWyBD3YWnCqeYYdF8Y4dgEK0 32oIrpQtJ11bqU4QbNZDRNXrZ3srUFGyao+4ckMdnCkCT+qAdVrlKmqH0xsT VRFiioLDZG3H07mekb9q/G9nj1cbEKRMCVsCSoJkEE8ZYESpWhUrvhgE1QuK Km7IKi4ZEpRa7IARpWtSqVjHA1OZCuEJRMiCWmv6M3/lFL8crqw565rZKVWp mzMh14tB21wuco05uRJaedoXxIACxTUD7KYPABVP6zLMq1BOpWV/atfgUSlB R3VxRPz6hl5BjQ4vkF4bNjotSlI4zLtaYgR5xCBRFbkJR05y4UR1sgZrk5ve LOXJorvEOzRacCI9EO0SxDWtbdc3HGqOhZKzwzNsWM5TBnHwwpWcPG+5t5zu lafPA2qKiXrHICj1BcWFaljxyEA+lEFKZgyU8UCs1ew5kgJGECE/jite86qX kkhDbWki1r/WqsIRsE0vKUi729buj0sfPe1qfzu3aN02CND9bXpNgQrwTqub 2u3tcT060lmQN73HZW8q/BvJSt73tMEaoQTwYA7M2WgeFjsHkvpg4UEOq8Mh 7lE/DsXiGLeRxh8ecThNFA0XHwHDy7BxOnjtDSBXecYbzgPjnCjmK3f4ryY+ P5SHXMgbZ06rcT5zlvNAomQQA9FFTnOOW5REUjx5ynNOco9a7wxOWzrQjy4h xAL6QiD/ucZF4Mf/cK07JPXYws1QbRCQW9sD708TgoAFIiwwCElwQrWcAIK9 8jvddbb73PO+d1qCADTBZvT/FHQe/U0MWL1SsDPpBJRzu3tc8mKC4PGu9xcZ 7+/fLgKkNX93wns+JqD3txGcsHnT8x0mCqC8qJKmuTlkbAtzr3vpO+8EPwHq YrbfYMdOJXvav6o7uKd763nv+0A5cmPDj32dZp80WbIh+bofPPP/FCjrt+Ce H3qDfaFvKulXnvahdQP2l7/35osg/S4Y1hxgzrHyjyCSdENVaBKQYRODYHD4 cwf4lFHnsR4KkABZJH5q8FSAozNTMx5wwD/35GsD40NctEOl1RNAElBchTP5 oRxNQAVQ8H/nYQcdoiHVZTiLdRpDsYE/MSRAghue1iHdNDDiEoFpYIJDcUBk oFz68R3i4mzJ0VRowD84lB0J4FoMOBx5kCXFYh6pRQYqRh6vIzYGkzoVWCeu kUVLgT2Nw1L/Bysk0x/DcoDVoUxpYF+44UOLRRw8YiwKxkXkYYJlcAdZ8oA7 EyFr+GmVhBs9djmSlQCqRBmzIh6FkyGisiAfiIeB43+EiCLj0TiZtDT6IUw/ o4h0cIBd2B8V+En5MhR75ENfSAe7oWoGWF0UMmZjUEjYsWr/Vx1CIiJW+CtM 6B/9AVxS5ButcwY5+CF8hD02QAM0kCW7hjn8BxYXBiGNeAbX0Wg9xCBtsIdl kCBA0R/igoti9YO8mB7JMV79cQOisx7HGBbmRWNrEDk/4o3aAz5Q9zUmp4E+ 9CEX9R8+8j08UlUgIC2ZmISFwiGdxmhG5E921FgN9HG2xT1QZyAeN2Zp9ov9 EYzxVI0HkgcHeHlDcx8CaRxcdIqgIgdZci4zkCQJ4Er+JwRMIEc1cIALmY8U M2aAggcwiQUyOZNbkAc22QUscIC7Ro8zOZPcl2H4qC+SlAA72R8wuUeAQgdN MTM7ZlFgkZO5ZHzyZ30JgiD/h4wHmEuFBGxShYxDGZW0J4lLFIEkkkhG8zJe OWMUMpRF6VZlIoc2mSC/Jwc7di8LiVqseJaHpEgncpVhwYFlqUwKsG8qx3bS RFYvFVNNoABlgAdNo0VHZARE1E8UcyJyABvTNxpTJQd+mJkq8GcTcyKdWXkq sFScWRpm0CsqkFrWRQVhYF8pcCqN+ZhMcyC4+B5slQeYSZpyMAYsM5qiogKb iRtDkJqkwZqr4ZqwKZuOeR7JYQdvcD1BwyPvMX9sYAcoUJyqiZxnoJxDEZuM 2ZwEApm/BXWwFDOXWXzCGUnnQZzGyV6t+ZrfyZy0mTrIOAdS8Fu7GZym6Z5n cJzIEZ/LGZ716RoXgptGQQTu4wb7ORp/5p+jwZ3eWQbgeX+VaAZJUphtd3BJ RqDOmQBMA6LKJFLY4ZgNqgI6dhSIBZ6IN5sfGqLxEVIU81wL+CsnSqMMGJtk hUMgkAcSQjBjWIgGsm8uSiAgSisiKqNtIGg3yp5yAJ4m1yFzMn0J8D9WcyLA JAd50CfcR3Z3QAfnyBzngSj4kh/6iB/dQSL5hKVMKCUl0AblJ280Mxz7YR6+ gStSlAd3QKcgsAL/R4pfI5At6SoriSJaKm10wHPVxn+kGEp0wKhyQDMJsAcH GKJs4AY7kEuI549lMAJBA5+rUZD9sW9TaielKQdnYAeZmgCIl2tmhk8n4iqk Kh+OCqmSqgIF4pin0gfKQYqnEqVyInv8R6KzuZBbIBg40AW/WitSKqxKKmjG iqzKqgDAWqpyMKwzWgdiUKN0EK0ykKzLGicJMAWkmAAqUKIIxQIqIGhwoK44 +itwQJ8fSq7XKpyk+AVbeaMilaILCaXMKichqqQpiq64IbCjJmgFu6+j9q50 cCoWWjtJUqRuYK3mKh+SswYoAJ4eaqTCqgL+AhRncCrU2qi/goBv4GlvMKma SKXmirKnAqm1Kjkoa65uoKsK0AciW63amUurGaDxmiTVSqslK7NQYq40xH2z RbJbeLJQMhopAAPhahzByrIqUIrvBCgn+rRR26xUKwd/hrTqqbUjK67Cqkts FWFbUAOCMa3VWraqYZppu7ZbO7V2YrRB4nJiA7aeKbbVGqK6JC6w4xuA0gIx MLdH+qh/GyzSObiFO7ZSS7Hm2kZwsJJYG7ZQ67hS6rdggQcIgh3jwbiGq7lh gAdHC7qYC7BIOicM07kuCQKX27epWyKRylhVBCiv+6+Hm0s2VwaLZ7uhm7oc kh42x32Xq6GHmW+nm7sJUJ7BVVjECz+INyL5yKNOVWO4Ily4YZXVFgYL5hr7 BruI62bY5byAMgPQSxqkI74uuV7YO5G5QljdK23gm0vqOwcOcznNVb7n+yoR UkS4cr8Ypq0ZeW74h6HVim1FULHIeBofkrGG27GryAapKSFz4MBJkrzQeT0K EDL3xCsZqwCUCqJmgALB23VF1AO2KxshzH9C12cowATVYgUs4KVgyjUEIiW7 u3hogwdDEywz8rIijAKSu5IhULl7CwNmk0sJcI1UI8TOMbmpCJ651Jg8ggIx IMV9cIAlPLy+e4BcBBRtIMSwwrv1AZ5ZfMFBhAJtwwJhYAdmE6JtQ3xUWpp2 0CenEsI7a67n9bKgkQB5vJroBT+kRR4k0zZ6yZpVRKplSx9msAVCUAVGMAVJ oAWjAQI0MK2Q2wZ5AJotGbcygMllqwI/q7x48LIIzLPQWR9Ii8BOe7nKGyAu R0rPe4BC6xp/hiLmigajXLaAZaxq+8kv67d0mQcLOQap08WQO8wXZQZ+hAdb EIzTarw683ZSUKmpO18cIriuG8ypW08EwkX46puugcx++z8B8jVd/LD5t3Yx YwYJwARPcARfQARBIHpP4AQHyMAIeQYqkmEiwALwLM9QkAREUKGbg4L63Gr9 jIz/HNBfMNBEwAcOzXpFwATYAtBmNQQGfaEiSTcosFjO2ZIoAAMsIAdnu1Ul TTQRxgLWowe8O8JvG2EpMNMgsMIcp9AwXAQyTMNrYMNuICVjYKY8ekCu8R/A hB0g8Gc/nJVUTAdWjMWaozYoyMJzgNMxPMOp1TO2/AY+0QMl4FFf/c8m3Z8x vVUVSjdtR835XB/nvESAEh/e7DSvMdYyvb/4QxljJmhaFNJPw9XeiyQJgM2L u83TVsAdPcLa1V7cd15ngK+FQgYLHRYzIhso/Bra6bSEm8QJ0NRP7bBofbyJ KVOVqjMoEALmHJ3BQiNCQwfVKSTYicgbDbGjjQKwoTOAwthfQNQqck8LI5T/ DNuyUcSWnZqtrMJZ6dHnpV4gOwYgINxXXNNZSdVWrdMzbAZfugaMPaZSwtsY JZ3bFDV1kh5W1B+CGqvtCT7fVgJk8NtmoF6XKsVTzMNOfcVAnMX0hNjRwova jIz6XdvKjap1DANdQNOVndnQrcQ37cI5vdPWDabZHalALdSugYwg8NUbqN/s /d+pugUCDt+bLd+dnZX2fcZBXNuLnZq5LSEqgjXX89s+S9PCnZ3ErQJPa9z3 7d8+sNzNDSjPvcLSreBXzdMPTqYs7hvfbctt3B+NWN4Sct6cWuHrzQLJ7QPv DcQfXsX0LeLHjd+AO9jIGLg4DrIBPuCUzbg2nksJzs8LXt3XPeQR7gZnSuEW 7kOBm+E5DuAcPuBWztlZnksjfsElfl4n3ti6LQJKSIta6uLtBeNYe9k0jsQH HsRTruPOfeY/ruZB3uDYPcEQPmNGOOHFE95KPi5M7iC48eTqbedVHt18Dt/2 rUt361onruFj/rJnPNsmftsoXuiby7pzoOjoxejDrZo1HunI3d53fgbMXemR fukvnOltzulk2ut54LmgBN5JPt6vOqhOnt5RPuWrrsStXt9ZSe3WDijXEZ1h jucdbuuA7tG5ji+7ruIisLk0BOxwIOwyTuyQvsLHruHLzuOWnubPTt1CLu1S Yu+0e+1ILt5LDhTcfpqo/u3IHu7xjeWuXu6jW7p8o+6Tzu56foC3Hui2Le+E Tu85XB/4ru+OXuz+PsIfr+w7PhsD38KYbvCa7uaNdCKLd+RJne0PD6tNLvHe rurItecg3ucJ8OopP84dnwbrvuHtnpVX5zQoIMlHEARMIAVNkNLBwsHw/cXE IcY8X8buvnZth7wkP+gp7tQiwLxrIFwrH9yNPuMuv+VRH/A03+wEv+YHf0Cd DvfN5fOiru2l3u3jkupSXvFHz+pJn/G+hYv5+/RRP+Y6inh8hQLSe6bVuway YTjS4gYt4NL8I21Lf9i0Lei6fvJuX79yL+UvTvfDXtzGDvPITukCz/c2X/AM Hu2AT6au77yED/SkDvHmTfSJT/Hu3fji/vjkTr+rNb5Yhe6SA/Uxb/lnv/ar 3/YqUr8AHByFNfczv++0//J5P/M9Ht19D+0OjvDe9Wb2u6CDH+rET97GP/Sn XvSLv/wePu5aDv3fJf4FkcmX7qzf7QN5WKywcTS0d5g4VMDBVm5k1KCr5/WK KAa/IiIU0GDtGIY1y3Cd6jN53O/9ECvHtJDEX4xref0O78U8vZf+ENzu83s5 z/0pKXS1koafwyt+Qs/UobfkZ/T6n/P7f5DKN+mmGVisUtH+S3bYj+oprB0z AXkcEIN36Kp2/Sk54NgMxWwZgd0qipW510CvMNsVc3wYz7MZJp1RcBwg1XuB 7G8NeC46kCiw4EoKayzNDUYxh2XYTp/2A4GF7lkRkRII+xad7CN/j+7M/btk xwJrXlUDcjjP92m3Crik9mAqYng/7wbavxyI+PqD4gN3zO/izTfIFwRRwxWk GNDKCF6/PAffNCAxw4BOEO+hAHb1k+5VvtKDTKFfbcGrR4q8oGa7cptQDLad MqiYAM4ZPIQ3r/eBqTXYBkGhI2xBcBAWLqk5qAAh1unzgCUPt+VBkcKw+CBw G38oUBDaPoCH/gzhdBOGm+73FcPnoK24VQ2kf5Jw2x2//McDj6DFw4Uhzs9R PVIkBD8hOdxWDGghHUExRwqBmCnkgKnwxs2WcsiApKB8qIKQTUlVQy34J7BW F6RxmQ0M5kIGSAa5hcHphQjnF35DNjcMywMbZIQLERn+ujiYrfDhr+hXdJCj nT51hqFm26eTdTHOcp05OuFaVMQLWGoCkSaKDRTwEsWGbOADfMDT3S2eGOt8 Ik3zcesvEYIpjrMIgxqco15F6G5toK/mpuBUSSuKTwrphUEgqBMvkwi4iQkQ 9eU36STcCBcIMAEmgATRgf42FsnAUdSIiBAcMsVO5xTPlHlwDfptKpKBqijW xIV+g2/+7xkGsWgRuGaeWUSLahHMEcbr8RbRHBpUimHKPNBFCacWbYt08iHq jS+WtC7nFoFYYCRxHo2ocbITgQI02WgsAywtDbg0q1EaN5lfC00UaqbNw97k CU3ja2xJM4xiFAjr0TZw4kHLHrRNl3Ef0ejXEARsbI2nUdghsdlYD22jT4CN LECXqRc08AVgoxTDQbRihImAlsBXLNwUCEFQwCn9pfdgKJoQF5ADXMAN/DPn SAes48tiZjdiDqCBpDUizN4Fk2bj6gl8AbRSBGIKi7ACReAAIaXZ8LJQQAZz i3dx/kAVf7EKU5G0oI8XIrlMgSfABL7AhBwCaIUKsIAJuR+LQH/UekkAQLIA E4AHUuNqHGF4YKalRNlGlNBAKnpqtQ82mLQJJh6ISx0wAybypdlIM5BcfILX QC4NkaxUARjmDeMiR+xpQOGnBZQp0jD4BwEyLzyDAZUJvujhxEAhWQPkThUa RFJ0sXbkDAMB55EL0IH0ONmCZNZKgUoMO3YrFZES+IppaANg4QeJizmFdVRj bwiT6tHDwceeMB995P/wcD3mQtSBMpAl8V4IkA9BDQo1hY82wwYPEyiTPq5j xQGRFd3gXRxohXYEsKS+IzbD8GSZrGxn0tIlADWpHVNCDFAOeYBWjC7NEamG g6f0cNXFDMTHPuly/qSVmxPIAVgMSitH4m6cfFgTw+KpLMo4MMMkE1N4MCyg BjTGNBky1mTowBTLQVXukTHlKtFjnryVe1I+0kdbGd1wJa0QlIQyur26BHAp VwCgqAFWbgYNBRQQo/yJh0ABKiAOyEYlRi5XwAoQWdIMMbGbfFlwkJfx+ZcA M2AeHtKwN0rbaZMuNc30JYCAiXiogEdETGYFrbil+1AGuJEVoR5rEbX1Chyj NgiYVBMNAjNk/suCadrYmsY0biwxKwVMlQkwEY8UEBeMcMY8lXN0MSWWHPqO IghfcAhIJG1Eps9MGh7tQKWNBLWgeOJJO02wLUgux5/pMykV03yaxsej3af8 xAZ4okpDafAp3xk3qMk1BWZS3GnrRjElCieF3lTNp8oicwcKTAH3YJKkxJ/x ai7gl4E1F+BiRiJdQ2llLSuCzK7JN5NGtqSV9ZEOgKe+STgDpYIJl4TTZ2Yx ELA3E2fAlJpyw1i2AcoEJ88DCiCW3+Fo4oa86YdiH3RznF3za86wsClTxuGr wDoURhdFmETi1cbD2ywBcVMwzM26+c+I5d3kTHlzcIJOqPk3t6V93J1Q03Du ysYJPJPG4iSexdOjwb3zdCguZ+f0g5+zeP5M0SkCSGcTGJvoCR99v/YxZs5U 4ftAMCJx0CkpIWjgptxMan7NfMrOFwA7aSduwJy3M6WZJt0pPUVm7/STv7N+ ikzhiTj1JwhYnI4zi+XLfMM4lVjBFHyFxdIZH8QzBMwRCUJP+IEZXYioUSxS TQNyF87LUEiYMUOqwBLQJG2DpbBczmWZS0glm1w2m+l0Sov/sBcrnLOxKlLE U7IAeXkq/GfSoJ7WE3sSjoEhXODmRHCd6RN2yk32STdhwEi0nZozd2JLWckn fafgvJX808oZn3EpQA1bvjSDBnSEmUJBo0BpT9AcUcaQKYxQELBe0CSzZBql EoWSzdWwQnuDm3qhjNAyyVAaijyLJw4NbdfzgRIOC2ogIMYQcAJYwIcaUfTZ 1YTo+myfRrR2lrQkejX1Jr28n7XSPtLLKBrdpihFzA0WEYt60KgWIqinpiOG EUMZ/h+jcEOWWspUYlWUo/FLi6j2FmbLJA0OM2oQUCdDMS1mvzCZX4NjjgfC dNDqKNdMpRDrlN44qyUqYuIRu4XV5T+UAZ6INTwcMeU+YCFNjYGkZdIamLzs UzTPynm0ZwoqZWKzG5XNUjvSgBayeLoLm9JSr3KJzkonCis96XWbi2SqnOqM c5oHqOStZGJuAGMNMWZILwOjPERw9NATEtMZ6uFM6HZcNl/NBSjUNQJBn8Aa kKHEVE8yUW2JP59odKOk8lAkBbFDSQ+D5RhYlO1KBEiBIQAFqACkVH9Ky2TN LFwlB6ycpKSUWZSZSkYz6U19HDhFo2xSJeSjKeIbHKXbISLkU2z4BBeQTrsl JA2csBKjZtSYejkxZZc8k53SWn5KI0aa7h69NKimElVKS1bJP9CjVIWVR5Vb TtJcCS55pUYNYr8yUQpLOOA8LQ2ynAEk9KZmx5x6KqPlT5iWrdKrkkmwOlEB p1hVYkpVMOaScqm/opu6XKbt0pDBS3mJTOOAvayhoNOjXcpuekwTpi/dnVgV WqbKu8pVq+VehR+XFXSGVbPHOG0oe9GVhLK0gk5eRRHHFRQoAkMgCWi95VMp R1gI6HyCDbIx1m9KPaEQw+AReYCLnIeP+B+41dc4WnCQjj7SvspOoShZPZxm NWXmS7VmQGkFXwtnLIP7eBwHYZpeg3K9b6+htMU1cEYbBedZTIsGE5emNlGJ eBTU9DJQRaceFTXa9UXg6yHplrSHq3Svr4E/SBXXdHYw8Lr5NClRPxJNr/gP ucnGJI6R4UIJqWv4auxzPFQQBpJcFylZa6SbUTLCSsTDBH5UFkmhOuRmiLeK eR6qnYtcIgPjCSwBhVlCw6mKUDbdcTyo2DnKV9dpRU2qz3V4otLollv71Fuz rt+MDWDXhhXdEE+j4kR1o28UCvExLrzI+dgh6WMDUY4C6kG3Jy9ViTdO4SkO Muq6ziu+YBg0xF5yWS07MkQlVl02HAUOJQgna0OK6nK1sZHUotJLd1rDkqSU aGpfI2Wk2Ti5ZukrJMKJSgyf6tMnhhK7pT8VrIJIVGCtWgYkUJbTiqbAZbbY SdbIaInWG1CRtRUFuAFFu2iVVqNtWoHwmxrUccpX5CkiyVJ5wM0qsdEqZ10g MOR9RxKeSglTS0/tabcUtE6sKRTafvoDd6wS27TqxdECCkhLIqjpUGBQ19RP Kb0gBmx9gLClqsHJqp7RuSoCSC3GLBzzNIag06+qTpvojb2VdDYyLkJaq23r aYWDU7AS1+7T+WRoe+0/RXMBVTc1W5RFUK1cs61ZTo+GWDmOt2mtnEGFsQ12 xkrVehvdWC2gzLHhcqluVETpUUHqDKNnVCAInFSAuhuGFtNKWedqlOUSKHsG cglp0aap6zlADjuJLz/bNJMX5YZlAsyCmV4zJsJEjKUtt8ZVxMP5mML+mB7j ta/5BB/kG/Br0lAlbDaHoA9etER8yJT9frsUsCkxmjstjlYtezP4Yb7sC/ti +v5ruB2wfENyLS3V4WBdaIR1OwqEwo4HhZolUobXmANBjS71BrHGSMlaM72V Z5Z0mI72kToQrFFQtfSLuX7bdrsVXSnAtIO5pMemszqYS2SXr5tlgBXMLjxk NkwXb6etuEvL0YZam5pZSUeBMBAjtaQ2kKwxUfBurISzSNW5fkvoKi4zrYHs XX6pOiwWBkXgsBYrm7zdMtzK2jL1FAHH6mU8TUFUnVtAqwnj4bvVJTummKWO x3pWDSpKiCdFAMgeEdwQSRJPj+ACIoCo3ov7UEG/jVXiEeZBguFdgyuyVq0J TWV0oFiGXRdKJjPsedCTw0GISUF9qyCqSIyrtBe3lcEPhMJ9EIp6wbfIFL24 WPA7wzIvFSC/6pEF2F9nCyX05Pf9HzMM4HzW6La7UIAJIC0GeP8iYJHKWXpR C9VrXw0FfDXZYJUsnAl6QhROA8+BFJAexaR0+mrwAw7GT87JHqGjEbgCVGAJ fAEAKQUk2T37Ak0g7zwBKSCACa0obMAP+GRhWgQ3QOiEjBQXdCJFQciEAX5p 2jdVq7PBZNBLueosRQdfyQMLY2csGN+gSBJEgKAdCKIMeN7P623jLKxcXlcS igZLciGFr6qL3STZZFpsE1EihX7CGOa+3TIFXSb6CyjYL/19v57W0srf9lt/ 4cD9dUzI1DG+Wr/3OsGa1iAirRNItE62e2HdrmQUwIaYAF/aWwlggxyeLbqX hg6TEt6bS9StD2a3U/jQzok1PAPa8LR1liChrjKHNgKY7EsbuMN61wxzYkp6 RTFih5qka5gGuOIWi1M3CV8pAvgjRQENJYWLQe9fXbXplw8v2HhFiAEx5P20 0+LRzV8pOIDxbx7uxAavEX/d8jnn3sAktrArjXMO1AGMss4w9fzEvUJJ/ZoE ESGww69Yu2fYFOtafsprt6IwzSXbq3sNYyqsHQEulUAWy6UVNeMyHHrzMCyr w2GA+E5hxEN2swRhcSYLgn/UAdZAdllsryTD2rIJWzmR29L6A6C4S3ayQR7b N3B6yxj63cPrl3Zt4/EHfyWv1iLESSkTe+M5+xh3mji2cL7Oq90pSFyOz/EK xrAk2U6aX87EjguwNoVpC88aOypsXP66pezieK5s6ZIG+bgwHogx6Q4JgmNM EbBRRDqoVlq8ziUQx19tXHpjagh4yKREVOpjKIaKXe1G5GlYF2eOoChQBZLA /21IqiSZLBNL6IgpcTpupB5uXNKJ8ZJr6TJqpAgRwcO9Y/n2NX5yJKp25UEo G2a8iZTnwMh1aXrSRnC1ZSqSeSzqRQGvV2xpZWYTLBLLI4SNHMjbhKLcq16+ A7Axy4jSE/YyI7huKZSV281DIc9xnxMgB07Ab457qehYNZ8TQAaMc3QDzmVg C3yy4ZwHnHMWnWvBNxUZM9ewXlrgal4q/+dGNrMD8VS4V4iogUYBTW2lBEHF ooZZFmHYmZhp59SxZmYDSRCV4FguiqlO13/2rMtAJMpkkTAkRgMxspqUvA8o wAekBYwgGyzzZsadiPlWjkvgyxzEcxpwZgIOafHE7DwUtvPhsc8MusJNBdng p04ADLDOSkyZWWhnFgOaD20bZsLXNbwAEA3pSsCIxqYmGkVrpQ24oqWzi97Q 8rlDp44ZnRZkg42GdCX6RN9KFc3MLvQWmAE/GkbPZxltn430jU7SOppCL7Nm tgUuGdKS0kL6wV5pEJCjlzSPbtLOrAYsZy6gpGNvR3Vq0Hlznulmlpij2+ll jP/hOPZmFgCdPdxc3rWFF+EWyhvHUXtTw2WrIdUKeIssMCNAAFBsbgxXUSLq GVYEsAAUcAITt/DOsUl5Vi2lU9WUUPVeiMlXOQtlYrc8s3ylCszUKpBPSYsb wLu91A0XY4DLA76aD6CxVu7q2lkQoKiNQBZ4AZX6UjdYCyeCI2wK+GftColW 4rpWcHNxQwasglrLaVSPVqjV6ked1CIACVQ0KJCpCfKL/Qgt4E3GSTIwB/Du vwXX2hqeGR+fSnv8r/GBuEHA+NTgIkAFzPUblgrxxKU8gRFEe/iyXzY+6Zpf J41erWRoT7B2AtvXWT9jpTryFm5HldSMsno+gX3drf+tiwEBAncBr1qFLUkD 9ejVsc/QUEbqtRqx/bVJJaEW+1QOgR1iPZaIgfYZyCFhO+OOjYYLBZaU1iL7 YZPskDqvT7al43jUdCoLYracorGG3qqqWTmIgd/xl5rNaCnmHk2sN4NV0Wwe WnKrFYhLG1BkGH2WsWZh08bPsnc/k6m6yKP0Ge6tIm8Q3XJiVUxFo9u/XTbV 6UeZHDHMbZv1zL7aDBvQOWxDDbFDarp+At36pXZqxDZZp+BTtVxRda+W6spK ee/1smmgYKw3RIciMo/mh+f1Wn6tS/2AH1B+UCkn7Q+Ne1YvGxEsG8ZQsPQN PuRE/CgsXAeI6sD9rlrpaw3bC1Rs5cOxHaPKtp3GW574oGD3uMTD0PpjJ9yQ TahH9rWO2DRYCFTsex0RePV5KC4hwhvJbIa8sKN1Rs3ZfHtnz7B7VqmX96xu 3k/gimg7UpQfFAnMftV1e2Pf7YMrvAf13rbWDlcEEIFwcwS8N7XVM/6FKGzk ytgCXAoVCAHTm6Lq4otqvQVrZnWTTGFcHyQ6KTRcGhlQtcDbvnE2JLarLljy OmWhYWuv3g8WwjD4fyCyuYvtvCxhpWAa2S+bVrRsd5fwGaaU4EBPkkk4Ed6x HWh6jiSXpr2RNI0HuC7N9sE/B2372iMcDTDmFa4WInMww28/6iSPiA3OdmbY HZiqr+FrZ6UeTiB+uLzQNzXuiNO23gxNafc0td0NrISTaJq3uJH2mQvbkjGe qjJzWm5t7dP2RxhLjHvGXmvfcrNu2tNy/ABRcQb1wc2YBV9FSBgNKOELwafL mALA4O/jkF9xc/U/7tjKshOMzJFBMkmmBTBZiCpl1uxRbZXTkKlaleSgR1mE q1xQZJJIBPSkea/SpiI5ScR7WGGk+YtgNLKCMbIcyRoZWXKJkEHSCQxJJnAL 97jvVZ43UjhXthPgAk6Al43kLTpIngA2fQJuoZW02U+QtG3yfEfA2/fAVKGH Bu4pTGDeyDL0MC/mxzyYJ/Nv3syj24DUvzh1An+18msCkHnIm2IfU4mdcxOq zst1ALbl0RwFICXG5aiDohmglpfpTxbJYBhrxfabO1PoPDu68bPsOao4XH1+ QczcjZkyaungneHFzOPBXE7B223LZcN6kegjmLf25COJdeuxlATFchjTQGRS PM25jwzYX5uPR/mEQxPKH2Z3IeUBmpGY5VcnQE2ucvDFDxCtLkHMjIib3Rcl gibKlnNZp52EVjmbgenTwi5+8gbxI0Q5tj0kgtmU7/RLyguNTEYUd1Lt/4x0 ngZKE2sbmIBduJTGtvwjD0+pffNovfNP9nN3AdBRgECPdGi8KVLGhN6tFrov f+giT49fkvGk+ZykH79gbWuOxZ4ZSdRk+Y00kSwg2JmfesXITkXAUo2nAoMH MhCWyRMAJqdYwon7VHbU98/z6irMd3P9n7PGYMfDBzuDCpXdt5W3gBbQ0rQh bTvnRG2asvYgWQSegBGo6Fo0SNrybunLYXt0e+ZXBaJ7tH1OptNjM292iKco 1BiMUjgGRJmKVESDkezxpJtpx8N6YWReVgXMFv/z3Ib5eSznc3a2WznkfrPf rXASsy/J3VWs4czMX9YWgxXcp3HpEte+Iw+7AkDJLm0VukUFEKJEOGeHWSXL 5PCf0T7bzIDJEfAjcg509CnO3zPby/LlEv5GPhQ68AVKsn/vCQKag5uhNwzi D4gO0Ni+PMvdOsSzBlQKI8EVMwg7QAn+4AIChKPID8aBtsMia9MrikuAsB6J 6tyYXNcKW2Ur6dE+G2tidawLESHwgAWTWKA9ZDT5Jy+elPwckw9wwEpiLI3V sYqCNjPG7sHP2qfi8YUghpgoIlZDSmAN3IA1MshpqPECQmGIijYf48vAjDcP cN4OeEqRhVu5yPXgiWajY7XUA9+xrsMum2NqAA8celNFJzj5I69XdEKR2IFR dsm7r0WHElKQ2E5TfY4pb/eTGuNXrIxHWzP6p/lxXu90bBzVLvTPuLIkvRRs 9KPMjmOm01DSNNZgFOaA4gTwgOf+yjH9FtgjKWOc53ofgN419Wn49eR9Tbdp Yw8HJDJoRGyGnvtI+cY069vVCQACzfwP1tSsZOiJb1ZCPJ0ve7yhSCKEQAAQ qPN3XoIIiLnu5sWCjd/mWlRnH29D78RdpIxfGHjexjdqtIhSs/e8T1cX483r +3mZS2BZoWEKYqD7sirSMMjAAlap3GCDHkkkVYJDGs13OCwue/pw91xi6NV7 VipN0niZL/sSl+i3JHXQ8tV+hpUAIKAD+kQIKJPG1Iw3O4MvatzI83vriK3k Y8osLwcwFqxX+Szf5cN8aFvcshLNLy42XySJ5WUa6dtYvrvw/D3LIX0xIIVN qJeXYksfM7l6KebLKfjNaobrbLqiXG1Tm+AakLV6I3iyGx/h5MgFJgO9QAai IT0hQDWW7p+rABSnEQTAMiZSREDaNzsRoTXMN3Qhcir3xn++6T8i55IZQAQ0 hAOxwQ18pZcKTFJVmyIEh9AfDiKIk6bv9wWYfGMquWMQ3DyycTP2q5nXHOua DuvmfVcFKJLhWsdQ8Lm0pdVDPVtmmLhYA676n90AmrbHt9k1v0B7Lcg6WGJB j3D/yUoOpMryG5u7/xqYhmwg5taZ5XJ+zz8gs1bQmPLQQflj/vOr7ffWDo90 0z9m4IHHes3nAJGoIllE+x+b4IQkBGbsL9TAEmKH/ybPAjQIC3Al7OdF8H7X TiB96fuf/fLfgtL5iX8sgCPBAmQe+Z8T4IT1fo2L+0cyAYAk2/zXmNR/bgQb cP+NHgng/jf49X8OIGkD/8FvbJUEWCKlHxvS6pEBygYMoLsjMPV+l8sZU5ts V+eBaTJbBHqZCe3B9nF2bh9pMATAfToCQDL3cTDq0NCDKUUPQgIG8jW4a35E 2iBJ+EzvweA3HhR+dYP9cNVlEYof0tX4nRqQ3+fmS+0bAlPx4TOpACIgZLVy pQ4/03VQ9bAA6l/ml6H4dPPb6KfWnH6LWBqEdbF+LtQ/M4KtSPmHwGQGslFI i/NHpmF7YuDIRNpoPgIg9Xe0RVvfgSFY+/ENVY++E7Z8f04T1CQCkn+tyvnH CPKBhAkbSL+9gVCTrnbDhGdiwBSEztSBaGAhKP69foGfIPgafIC0nwhY/wUf 9x/wcAJSE+NJAwg1PYCkSPwXAZqC9J8BiADuHnuHBvg5cIC3oAcIAR5vrqD1 cQGaJLNgCpgKRk3GYC4IAhKCQcQASP+RgFOACQgM6n8oIP+n3y18Hx9psE+U Fn9FYDHnSUZAwJ/hAmxPEIe09PG1fwETP3L5rX99IK3w/BVzgaDxEftRg5eD NdiYHIJOy/X3D/KDF4I/WCLlCvOgg+AIen9O2yR4L5V/lmAa+E5kgqFfGyhu cIJPU35G0u1qz4UouER4Cq3fSCQCooJ+F9OECxII02AyCAvif9ugAtgNboD6 Hdd0EuqCyCAvOAH6gjBMM+gNviwyYTSIEraCNmGJpAyKHsxgSygM1oI8YTG4 Ch6Di5IriA1qg9pHMPgSDoMxYcAEQAFMV+G/xAJWcCnTJYW8lH2hhQi1mdCA pMlm4siBg+bKVkY2AQpt3vZkOLR5p9E6uKAcICrA/lEXbl4UlNvARgQKCZnc A6pcF63FLAJbeBVpIV1IGiRkIMBRggdgDT2ABgF9AAFHifPVTfAd9cspl6Wg IHchYqgYMobPB8cAGcIkkiFZ8f5wFZYhhWEYqgx74WYoGTWGFeD3kaeJHx+H ZxgZNiSUYfQzZhgOl+FpiBjyABdHWogaZld5H204Gt6GY4NpWBj6hgWWbTFT pRmLx/fDfDUFQR7W8AI4h4tfgZYrXQ5fw7V3AkAld6F0uD39IRcCbjEcjge4 IYWBG2xPzKEqA/1xh6TB9jQUKBP1SHJAOsgebYODMB5wXKchegiQXIbxYd8x HtKFgE3ZJ/4NJ0HDmhc0PCjX34KCG9QvC6IDQQYcW5qfqDAU0AFq4GjzGvSF YqGTchQmB5eLhUhNyQfOhZOCG4gAjWHw8RiWSVuhhygfgIizhYgYKPQAnaEc AASgiPyfK1MwrYi1UIuInoyIrOFv4RqGH+OHZ0gjboA2ok94rYWIO2KgwBsO icNgh3ikGG1O0IGYufkuCWKZQSVWhleig3hsdUB6WPM3IK6Fvt9msgVQf5uJ nxDzPSm+H5lINtlLScwKMyEyf2KimoieYDKxn6CkYRl1pM2beLXketieqFQw JYEPxJZY2UA6KeA198REhzPVe2YnXi1pohsguxFIVeLlkN9hS7bh5+L7AYoP oi/CeC09n9s3hSluiRLZdUbb6ImiQn2Wo8kGMBepCALwALleDpDtfVOoSADU p9xLedifWCmSUSdZpShcTIVIYbfUtvk5naKPg3gweQtKkHQqwQ8XguzG45xy MEAl5TfdioNiKicqqorDXJ9ICyYH32DsRy3mesWcnwhCOYp+DX6WLE6JhM0U hiWWi77W7/Up+iKh4j6oKpqKJxqqiF6piqwimeYqxlWVYbu4D4YA46JPIC++ BpVhfeb9yD8JFK+ILZpV/xTOF14timjio9YgKYFbog4HV8117BK46C8ajJAi 01UdJgcDjOFwKCYIoM+0MCL8NYIdkVjBEXipA4YoReiIhwJZGJyYhQfekuAb kiUeAnwoAqiMZcC9wJ2wFjbFoTMYzgFSWF1YpYwLrsrhIyqUh/+BYQifpVA9 i6o0QZEGHxbd1ysYjbiB0pghDCF6YXbFE3mDSYzQ+BuxgADiAbKzADLczKOC yWki0dC84/bgjCvPy9LKCTonkN1jRg1COo4O9wUpMTSf+TcyKHxiAqdHJe4R OtwKBD+MfysAcJeWcV6iAst43oxCeACZcy32fxmV3phQPIO0RytX2/QAU06u Yl7FjfzO1hRZGYmL0s2YNXYr4c8RdBrQNOxdPqg4BXb73eA30hx2XWEv5tV1 KGAhUufUcCou42jAqZyFMuNd+OQACo3Ik4P49QccEz6SohiGp2HZkRc2D6Lj 25Ci6IwBSvQTGL4WvUggchdejYBJzYiOgBqMhRyyM+ITNsVCEjaOK+WKvUId lI2eHei3C2VSQJ2HmJApYbijbBBugVLv46gxSoEZPsqvI8X8RvOjR8Q2jI7K WFo3vZhSsVrBVD/uGCTMioIxFi+GTQpHHdRfs8ko08pheePPQyRt3YikiHyQ QBYIBQspkomJOSTUHfVomE4pyhuVK9hjrcinwgPUanRTSjAH+AA+gB3oQdI6 LADuuG/thFoO14Tl9QBY3v01m8h3Xd9hVzuKFEzKWKj2rSfoCe9oF5IGNGMi cUh8j22F+GiuADb0SsXiQaKPZyOkIgWxK26ji7QuUZAxjgU5N5I2iNKiRCD2 kEjQFuS0OYPykA7pQfKQM6QPoDkCkfyd1+cCpowA5KixQVIoR+TuGDMukdmj E9k8shHP41/IM/4MPmP1GDTiEo1I0Wj3vRN4A0WSFsJnT07TOCGACFDjj+BI UkKnidXIIGCNzcPWCBN2jbjE11gjjo9j4x7T2WWRH5A0RO8ckKtDHxTsdJEv EtxY93SOMdIKtCrSPNFN3nj+qY+HSVcHaXx1sR+OeJlwKvsQAjTQwVpknf/4 G9IBKUoLYCDAQaPQ1JOi4ZBtXaxWTGaQpMgemUxKPY6jM5gySY4mA9dkOZ4X mCOyozn+QdlQ9OQ4nYTH2yDJMjyPpqPWdCCkYZSj8cQ6BpEnYxWZwblCj409 xK9EMZNdxTLULSRnoT/5wSEtYuTL4k9GElIQLTTqOZTloxswyiBywQH6eKmY CMRL/SckIBYUIMuQB7A0UiOE+OiZK4qeusK7sAGKXoS4vARzj0wkM8mgcCXO hVDyCAcb3BZlBIkAHUPrFcVdcVWZInaXaTqz1/fojiAjfghlZLZRRbsXSRQB cWi+mdGHQxx8SZ9g1MrFcl5SSVbL4XAFYHDQ/cl8bqKC0QZ4e5oKgFI52RDw 3o6E65FpI0Cx5y2hVgof4gH8/Rb5QbvQQfWNip5odyPBD/BSXjnMkWk/UVDU V9YuuZ6Y1MwNjs1e4Rjd5HODpTLHzAWWr4EK4FcWlm5AtlfNwZUaVYsi1UgJ eWV1wDSoD3uJ1BgEyipIwrd3nHARJQJbgdTkGscWbiBFUBGJYRXxPcAJdoTC tFJ+G4wXa6kpoosrpV8ZWwIxh9VrcFuOC4Oi4Qgv9ZaEZXNXWcoGw6VJBjnC cyGCTaVbugH6InLZLvJ0meVhKE3lE4ZKgtBBwTsWJUNZC9E4mp6kdSJJlDPN LCRGLpNrjpViBtBTHs7Rh/BlSR7XBwngdHHSFDXFK4CK2RTeY1HSOjQV46b+ jHTuJXxp5ciXVSXglVZ5Qv8lEsQCpJTT5VkT+gmTvpBQaSQ1kz6BCamktADK 2H/AizQHLNQ/02CCkHhgS1Rf+pCOiXg5UU5rUNk44xCNl9JW68h9WJR7jn4Q k4FwnOJv5ONAlCim00Njsjo25oypcf051QXVhlh5lVCf69jHiSxTnxQWNAUH TBtQGQhlJWaAkVkx8khJpg8nUdpCXKFhI80ZdpdlWXXNsVHZHC6SVkZy3hy3 aMwhRu6cMtctmnPaFT1XH6h89tw/086Jc+/cZhPP5RLznItVz5Vf+Bzew9yZ RY9aaddV2XUume4TB0JGFcdHwdWIFGOBZyBp3gSBQUSwFlAFUcFGUBXEBZkB DMBiVARvQV4wA+wFfYENEBO8BDPARmADXASTZqv5FCwGQIFQQBQYBUhBVpAv WAZtAWZAElgErmav6Wu6mqDBbCdsDpvEZrFpbB6byGayqWwmm+3BFPCanAdO gIRAUUgI2sGyaW1em9hmtklsRhu4BBCAAowAKQBIAWnKCTFAC5kASASVQg3w AqALCUB70B44b6pBErg96lFUBbGwOnUVxMIPQjbYXdSIBAUitAz+hRDwbnYX xt8dkBwoKZZJxRHmVSGkoX4gBoQxcFWb8G5SAZ8G0KBK2DD4BK0AMh6NiIje VwdAPNaVkqMz+BHtkROJ+A0M84cZQAfYMPPDu5kEGCgQCP9ggqwU1knakCDc jC9U9JUb/AjcS7NwmYR0Z5eNcCyEMSHdBfJuchXVAYiQhlAIwNU6wiG8Jkxn kNeQIJ0MiAviIo0HKefKWY3gIyXefUEanHLYl+bAzFSdGMV9MH2QASznKZcv 1AfvBMfRRlQc3GbSwCxACWQKCIBizB/JgRSQJUgBUIKhMB6kDOWC8LCRsRC1 wQ3Abb6b74EJYj0gB0Bj3Dkb4AAtADvRAuQAcYTdKQWYG8JDjOEb8Ju2SUIi B7ybgUEL8AT8CpNn5akEXJ5yp+YZnmUUw4FrgCtsE2yAcTCGqA4twPZkqNwM kkUl47rIAKIn6Ul5Jg2nJ+YZBKieRED49DqUWBvIgEA3vAxOCj7CMWUVW0Ui 0SYkDX9B/yYglJ7AJ+rpdlxoBsJ3iOkRgYnIaQA+kFjeAdI1fbouN4D1aQdg n5Yn5nlgGAjTwelgYQQbn+QhwW/WnsXiwGAXLRY1QxJIBpyfU4H6yX4Gn6kn zYlR8BIKFuwpe7Yg96d7iFjAnbqnp9kC/BcDqPY5fBqgrGdtiStAAdyLd2AF XGg3Az6SNq1NUoBJ8m5yTSjAQZFQLBT3iQtgguABYwFTMDP8Fi9A10lSKCVl w7upbLQARgBRMHniANmn8Kl6AnQA2mCWgEZOk4lIYZl8MBFoDdACUAlywA8a hBag8KcDhSt8jPSmR6KDOqFQqBQqPDABQkDSQCVgD1hoChXu0VJyjXYRK5Aa AIm3MATgAFIBb5E0fCtPKFDghRKgmedKITTlJgpKGpMCZAnCQ5pSWpShZJNe k3OdoFDTnwGBfp1GReRJRXihUsZ+gVkAD1KCUSNDbJ7lwQBYxVA2yuEtoqZ4 B7CRZDQgcJvaZilqip6iLUAmGF+RHVbI2cEGpB1iB/bwcLgcHILS4XPIHExH f3B0JB0jxS26cqyKPtJxoHWEFatilUkrvKK+aHxVdQwdyWguCoxGHIkKxTGM yqIShdfxAoAdzaiQsSoCBf7ER9GSSEbTqC7KVbg24eiqiHTYolOHMpprhB1x B9tUIQkegYILIAf8Fi5AC/qCxqBwCtDyrzAbcgBp8AUUB3QCr7AETCMiS6pA GqwLQY13YAYgYbZC7vm97KO1CRoKS3RorUhiEzWoJzjI83SReiZQCITSNAoo 7Bawwo9GKH6DHGAaeEKpxUYKFJAGXNTcwo+SBvMoG3CS6iYpqWsgexyGzJpI WptsZ3RCesKRAif4gr8SJ4ykqwmm14deDjeKUCq1QCZ5SntWI6kn0EHAyUCA gWKAxmKQTiesTXng2oAAUsITsHpNGHDOgZYcAGbfaAlSgCQNO6AzYWjQIz3p 3dImIAkHElba2lwngJCEIp/wkSGMuJBTqCy5hLYWBMxv5gYasFWsKmXl+4JY uCLj6HVCUihMdcAXIKxEcjEFhkSvTQGVXCfXHvYbfdQQQh2EAd5oMmGWeiTd hJuQS4g85EFIwXiGSx7iayCRpg0MSG+gIoibFMM/EyiACC3Af8Bwrl3PE0hK oRiLgeUB8i/ZdTgFcjCRtqaQjQgAm1pFgcJ9Upv+FrKpXQqb8KYAU5toWoIA qponmpB+LWNFKPqZBg3NgSFB4c0BmqhTA990UI5NxYGGjgd8QA8gBXALX0AV ECNYAUMAH7CeTgEWUsSVBexrLwIQw1V0eIVCbzIfiQDABReh1BAnX0De0SV8 ATACboACNKZhiwmAdJ6mUElUolVCZaYpiBAbuTtnzFVKNkhOlJNlwpXCm3QD 7pmFRlCACMAJkRUFIQLB6arFUefBIook1CYbahJamVhOUKmLqJ6cRkBpabLS oCbbSfTYndylZgMek5rwLKpkAkAECAFNAM+SdLwsdZiJkADkKbgBNuNSIpGH wkwaCHqBSQOVeh4cpYkcaJd0cKA9AtFHtPkt16IVwEUMSlwi4oEE2A0tCBYq aEgJnErSVUAVTKspReqaGqePZmw6IrqhcGgM0Jz6qBOKGtlB0B4vz2twON5u Y6HSBFlSU8cbgSgCLImCqm+aNJSEoJPDWEayVY4qDwAExJCCKgig2fg4qNqI apvCDiwU3pXiQT7PXnjVSqqN/YxIUXuSEihqzpibJidAKjspN0qn4NX5U+lk JUjRSBcoxEDikL4kNjFCr+pPEKtCQoVP0BPxsEOWUJQj7/A/N6Tr6PW9W19q MzLrIEF5jnx3gLRX0skdACD8KMWCQIEG/ACmT8FUrYapYmqNc4CsMPykEiPy tJvbKmlAJUhTRsRSgBpMgZok2UT5DYKbyUy62JSkM6ni+OkFmGbcugoXEXS/ 6jtl0AmrpdO1leq1KbsXfNOujqaCEeLhlfoi6R+suobtq+FV0sF98KJfANd2 rqIBuIF+JAXYHXpHFgD5CSNIzCx0pE6l6ipfqhEmrO1PsJpDdVZH4+rljriq J2qw9EbJpiOrxFpHhkX8h5PCpSYHt41RWjT1q6dBHmDrFUzh1WZytI4/3hTM 1ZTyMD5BBSO1KogiQlVK0wBFkirtgQJcrfFBjcS0ogbnodfqqQJMBisxRm1Z YSMqmclCmZAAKYOAdYYaPWuI0F3KUFSPhqifunZm6o3gXOp3ElxYB7WOrdOI U1rBwHpHawp6G50IyUXX6oQ9ansTpYq4+ihYa42Eo0quskHIRLmGTJer4qrG 7KhJhxMGNckGbau3BualUHKrG+V1WTh165ghj+WtxCOtsG2VX1nJ5jo//a2D X+CKpgZEJA7IamWWru+RMiWwzqRcH/8nSn4OvmtUmaGGBpUM3IOgJAhdqfiG GOIPuEIDuqAonNrBi5o6SK9DE03qmZRXOSqB6Og4p9/JgffHFKmCnjhjpXZ2 jMp1oIF0MfFqaWCFGg7aa5mBhparg+CqyvqoCPnr5fCnqhY/KmwyC2VDqWu7 GtjVrw3UzJQ92Aj1FdCg+HGsFeP02rgSiOjrblrZ3I3s6tCa/SAe8ypwUa82 rVddecW/hlfllb962wCsTStPJM74lKFS6io60aziVqdzs5Jbql7Eyrv6cBSc u2oHMbAO1N6ATMgNQEOEQFsUCHeK4VAsBLAQAwW7hxJNaUwK27TOqgXsd6Ko pq5YVV7gQnVk3mr7gMrxmzLUd/DC+kO1wvwKOdo3WZ8UixrYehheGXsHfn3b RnuwPJFNUoIVcB6EqGMGJnJI6GU6UwRbJxALIECPFT7NKXTJW4oy5hC4CPNE o3KkLuL5CqgCqTgg7YGlaiY/i/ExyWqpJmnTGgjWJloh4HqmOpc2YuqCL9AK gaBeihw0TpEgwOSXAqZJzWDKNEUvmCliqpUqpqEpPAgwMag1IGQaBEimBkdl mjTAsumGK8KNcqbaKXpQgNSyjROv8qBaqJYeaaOaBqduwHB6jxWnx6lsapzO AbVpGXCbOqsZbKcKtoKuKRRlJfPhqgwdDxsWQYNRq5OiwupM/WnAOhaKekWf 8ZHK/kszLE8ze92wa1y2lcO+KUvNCujBJrNJgvERUiw2Smsac7Y6rSILOrs1 gqfmwZVxBRGoBmpugKBOAQoqLltVOajlQdJpHhQskxaFqtHGRrvk0kSo+lIF E3U0pqgSlQ0S8FJQAQjqE8DSGgFPQBXAegyqANM8KzCFqqwr6jS3NlgjQvfE o3xPLElfIoq+E4TsAzdwvSL0U8i0xzWvk6IvlRWeMcZH1nfQJrW+3FL7yfp3 GmpYgJ/8Fh9qAwtVzJvd1SJRooIAHOiCwauBoGWACBoEqE3uaPd6yBoLcMBW WzWpJ/0JjxqhPLKwifo6pOoxZsCUik9EGOjjwmTVCq6zTNREBhofWeThWqcS p69pnoqc1jta7XLKBgywuqk3ywdcVqPrVkGwjnqyQS/3z3qIPFF31Yf9FgHr /ATPTpkyaz1LVC6s+OwFVWvpsBSetBqb+LCpKgpAHPkExpFI89eaNTOPLkck YbFvGNya07ZRLZSFI2w4fj8IxIA2rbUkqEnCtyoxu2tsy7x+sk2tYJTGRret ow832A5Kh91V+sTmAVOrlODVtgt7w9cyMBQLWMos0V0sseEr/hlEGLICogVb NN2ofo1H2s0SetOHClC3ErSnQeP6Z0gx6kmA6h0ACr4tE4A+Jg3b2cty2UQo aeP/ylO2t98PZUurDigqieGAAsAPtuTso43JO2xPocPEBmCAUI0jneqDBZMu SdHxqgWXheuhUYkeWuB4ACk7GC6twCZGNzaVgMvfwgGN6yi0nb1z3RIG6e8t SnXrqfOJRqr0kk2V3VZxyxbgBXgRmfwkHCtvCJu/wdknhxgBDGmZ8HfOdqlc HFvJLLbTbFdrjpgaosJxOjGBCG6tTspdQLPSbEVakxKlGSl7oZK+jE+FfYvX pq8hTIgyyoJw52uDy/20ud1s94UrXLgcLuc4iPmve65qoKBmQyMu7RH7mbg7 HIoLjSWOK67v1+I+q4RQjEsHzLhKjE3l406DOi6tgJOQILGBonot+l5L7gJ7 5DIodqT+0R7YCO0sCSslNIGfAyBbIJQWrgp4aE0kB8+naZJIlLn7qHrC6gIF Aeuae5PyfUFqZzd+Iq0bXQPTkj56o8GsS6+MguUlCfMhrABXjHDS0e4nQxgn mwbgBmoAl1gwObtSIzn756YBPQDU8irskhDiq4Dpyqyxn6AxJpqJud6u52W5 u2kAvEumEXu3kE0F7nIwW4AaYC81H5IDBmI50bt5ZqnrcdUhz26w0O82H64M iePL7bvSxcl4lcak/qp4m5fIunWIR9jj9VkDQssmLEQY60hYsHr9SL1ChoCI Bkwx6cb4Gsij9Kg9eqHho3+o4xkyFQF4AMUwhrANLoDSwSYILuvF/8kmKB1h AMv7irq8MChlwOsOpcMuxdvCCrv5LfT5pBx4nKxpsiXSHlobKXK7Ybd27tQL MKE7EQZ/CcYxKCXoO7pAALieCcTr1hgL+aW0S11WuxMqtivFlH2rSiYHAnS7 vgvFWpu0C1zvVgEhwquxn9l7Boi7Fi65K/X6IsEesogrpomz3adaW4VXcEu9 62Y+dw5jGqCo5rs9buow4DZ/IAC5KvkqWx9qGmDrPbqvwQ7gHehwWBL4wCbu VHdAwnsG9Lv/LvcBt7ABdOLBm/pKjazvCrCc4YPdEt77KvBK7ea75fduAV9v ZvukMLxkrKHm1Pi9uEHYO8+MvdnPw4vwhrsSL/R6nNAKPWlXu10YIlmEWKne OiBjDCBLH95jooLI25+Wez8gr3D0LqU7KfVbhNwoQGlsgN+WhQZR2SjJHjOE jYqYXGYtBa7B+DrGdl7kcCGcuF+FZbyYMEGt/2+QFOp6aORfSEH+Obz83XbW 3Uq/M0Z/WyxKCfbraaA+VBFDQXpQfm6vGwgMuke0DhVfi9oB6xF6xPnbIRCl jOt8y5EWu8rLyDgH+LXYzE+S0HpRZORmS/tgeGxsDFz1+qc/J26gHb69pA16 IIeIs9FW/pswCcGX7wv8PwWL3wE2swCLJC7wYqP+XiZIsA/cLdKSLQgKMNfE wGei02IEw1wuMJa7XsgAnW3qynIhwZhST8oTYTNW8KvYBdM4RjAS7OwdNobq GiyHvMEpwBeMXrnAZbDMGuD+DZgSD7wIQn/wTcHEVkQNeHD+6+huXH9Du3i4 XqokzN8wIlIGjVrSUFz2cyrXpHo4Hm+HcPjVfZABdUAlLOqCrZsUCLAwMaqL Uic8IkoUovAlTApTqqcwJKwKBwrDwRnQCqcwmHApHAvTQ6mwJBwoDHxULy78 Cv9Lu3Bv0gvvXMkphXALf3/DsD64CR/DnjArShxUwq7wZasLP8Ns1Sz8fkx1 jVo1nAmbwthwJIwMiwDeqhiwDEM6zbCiGw5rw2eG/mgJC8PWMCy8DvvCD+4Y cA73ptcwKpwN08M25RtADcPD33AxzAnTw9ICuhUMf39JA+VLL53BOvAUpAZX wWRat/hVFsG7HAroBNOK6eKf4yGiwYlwRTzqIsFsLH/3xj6v7QHZmrV+qEKA cVEoJAfhHq5QLOQpJjBzc/cmrpnr4vqTSqWjQel64DWpRQSUGshyEd1XnrIO sgyzh9b2sgjF5Jqd1Ok1MCGdsvWyNMQg6z83UMxHSYdrOY3Yev/odRCQBgsD qVzyE7+iZABR3H35ctjMUFwLCTf578nImPSu1C3wCgU/nI4py7ZMEa8qifE6 1WaZ40lAQCVIEQvJr+kXXwRpwaVZFbgFmyZI0Gl6mioBDYAX6AV8QV2AEqCa G8Fb8BdPxggBrNkYwACPAa0pGdiaTIFTwBVcBpjmrkkZj8ak8VMwAkwbaGnT Ch60Bq9BqAuSdAmlSAoZJgwHxcHPcCa8nWrCdFBHFA2ShKcSiHYRq0FrMB50 IMbs/4kao8Zh3tkFqNAHNkXrwB/YInqfDEEg6CVZhIPwHJyQckNmCjYgxxyC h2Chtg8lQiHyGqwILcKLECM0aitHD9gjVMfGBZEwUUwbGcq00SQ8Cc4CFGol 2J1755YQjeQGsbGBMBuPCTbFbewcRKXSwXpwGnsqeIKe0EIJCoSCoXAeSAl7 sbcxFDQKjwLpMClUCjHApXAqwQSbwg2gA9AAR0VHMiqAAKVCkvCLKlQvQIS8 kMSgBGyGMgQYARbNETAFDC5JwEJFAmQn+xoVIBt8HwrAixwjz8gmRo2cJdzI Q0CObDYoABdIokDhtAHniEiRdCQJH9FE8QZoMb5BbWpiTAsUoguAJWvJSUML EIaKpC0AG5CY2gEHCJGs0ZDILwwRACPvyFiygiAlgwAoci1q3Vwg8QeaHARU AVgAiyAEHMkZhpK8KER1ji2XHCenIXMy2hEGyMdemZXcAgDKSkp5So4yypDm tBAmj8llcnZyJt/ImseafCWTyEBA6sUlH6dc8qQ8yzoKg7IYUCi/osXCjXwn 58lJwJ6cJDDJSkrSkfA0yRRD0qElV8pDwJm8KHPKnwKt3AbYylPyr/vT6HFF RAugM/QfGcanHChPC/GnifxvJsnLQ3dgIW4BJobOcCPPb/dGCiAeVRHKCtiQ HHAB5Y6jcC1bRNpy/zEuZ8vbspb8QMAP4DIqgitDAfIjhXMu68gry3hBS4gO aDK2rCNvy3QwtWws58vk8gsAKzvJoWC3jD22ywlAGyAuowD6srY8MNfKoeC8 7DD7ysDyugwmqSRpwLssGzzMv3LEzDCTy/Uy7XAv1wAAM7rMMT/JpXHKrDKv zCxzy+wyv8yUcUBwMuu8MLNZUGkWcaFxRqBpwgWG8a6pFsgEmKaoSWrWBXYB qikTSMY186RpGcuakEGtiRXcmp9xrpkzWwVJc9X8awabqGjWrDUfm83msykH RJsThURRbW7NZDPZ7Hh6m+DmzDwWJADlpmCQSwgGl4IMsG4anqPBuzkEXLxG xJHK9xkR8pgFBYi+B7epxMCLogARp+NJcfIaFue0gHHieBvnIWLxEQ8gJ3Yg cjYQJSd8eHJinVaD1vkfnJ8vJ9BAlsycBkLN2T3gnBGDznk44wf08c8pGwSd bAWsMAOiKSfF17nMWg9iQNRJjfwgT2ftzCFInQAJ1fkrWJ0oZ+bMcnKdg9nA KSqEndLEP/c7l53JwdmZdhoOa6er4HYOyBKn7jl3Ogt257BwH+id7kHfSa75 H4HnChE1nAt0s/RbNp/PWXN7QATIMlzZFkaeGQvYA3W33oYhwUILshTcCG1A ctBdQGSAKKugBI4HYEFV0h8kASNIe6Dr4pu4wWlEHt4Y+MMBbR5wr3VzJUPz 2rwlw7vZHrgYNYALcC5o0LbBv3RB/wV0UwyAA7gAOEA84UFXMhh0CD1C4wAk 8wlNGqTQUsEKbQMY0HcAdyMWUAYu9IHwmtAJDAOdoCWjKmxr9NqPPDYFCA6d QwMBjUOeUMh4CPhoEE0aNA4U4nnwZVQcEkUOLQZACXFSE51D5wmUg4cABFgm sksTEgaYAXkEDh13ims8UwCNSAQUbIWHgLphyVVdcDzK/QgQGf3pi5gHgkoK aZW0B3WejMJEx51TQCihPfYiQIgQsSM4E+DZrKs52K4iqgWC62auX8OR+jfH EOJNFrEOig0G9A/iAvgTvcJdsoH8B/TBWpI3h6F6DdoFPvrQcacRoMQmB9Sd D1GH9RpFhAVVsDRfz6cPoaRYUEBATzBtZiKjAfrsS5eiqqgzuos+nOXoLPpy FNPGKB2AjF4cp4uba5NmJmNAdSqgcSk9gG8qAnSds3KsHApuAS2AHcAHhMnf tBzgJ/zLPMBCAhutF7Xnqph0VEctya2mHuUs+2hcKvBmb0npgRdc0jahXVIi JJwslpNwwuhAOnMA8XVHTjhIaW2y3OSop0qqwgK/rKYwVWrKLHLryijDEz+p BGlFIr+2AYHNEJwwiQCy6amEs5yUjExptwXgAAJOYPuOvMDwq79g6V0zz9to RvWWi37LBDVcGR8BESdLe1hQXfF4gHh1LEoKE1C2ch8F7pSadDgBLclLHVSL JPc0cOr0EDUM0kHtH6QqI6IdICbbDnvR0HdC+HZJzBxQhHUTSjU5C4URZ8ac DnCkSEauAeJFL6WOWclXbQeE1YFNSx0iBERnNT5ZeK1hJwAbEFYnDTj1NGIp Zou+hVy9ioUIJ4AZcFczQj511AA8sgwgCyeGVs/VgHVz9qF2rUR1X3JYMwYh Sx62WNs3qWlpk1eDGYhRT/1TVzZGsMM4VBfVoLVHLO6aUD7SmOKHSNMHhNDq OpLB2c/h6rECCiCryCoGRNaoEcb2BZysV4C5ERTpR0PAehoEaEiuiw2wFsCw DDVqu8LwdfHeoXCaiACs2l0qZd1esjIABrTe1i2Ja+3D9Tm17Wad9smsecrH Chcrj2DKNKL5VKXAZf/7GiDFRHFvWxEvwqrrOheAgQDsNSni4YTXtDVcrDnm Kec1qnqAxGqFqhZ82mlXXJtnPQ73lF6blPm0eKrwNXNNH6nWgUJ0TXUZXbfX hQAHqDILyRtVfhHWZasP1Hf9sLnEPQ0wNnY7UmmHGygbNsCCiNrhwZAOzBUC qHYjzG6n+IqKIfU7wWIrxICVZ6IG5V7pqsWiKdXYzzWYNCZdSwdIj0va7NgA cGt8THVLRm7BhGSvlT8wfd3CPVa9L700T6tVY2sLd4bV10WxlN0UcGJIcUm2 FDMoSDaox4kVTDK1HZGIGbnxq+dgKYKsM91/cF5bxSPlV6xZIKkFKoxQL+jI nNiEpmeaB3kYm31Si9dtwBdg+TU5czZ9fRX32VlJrUjaDAjQGx85hbHZaLaF qmZ/Y2x2dYFax1kjYgnwQ1nXrmULF6EuTPRS0iK/jgfk6vtx/i0WVbJ69tiw ZzXxvSAl3IyaZ6N2him5YB2gPYWxu4/Uph04ddqftnwtmyLZo7YprMSY2m52 5hsoSI6stv/R094QcEPmKmsHCpZoerDedLacGK6Na/+KS0/va98Ir3Jxf40X o7p+XNEpLeues/PSuTvfzsUG1Lluh4a+89aFh2Sdw/N40HUaz6+CIZI8k51J 589DlzzPHolFMdQ9FGiA1ZwV3MwQyWC8M3sEPfOuCRNUBIvxqMkXtEkuQUTw ESDGrKbBzRkszY7BrBkZTAadMa6ZEeiaorHGbXJ3BiNACPAC1M5ugEWBBsDH ngrIEJgAshPQSqLXGDNF7/SgxnxLOp6vEatuD5rDXZMrQSJmg6cCHFzYrucj pLWJFH4zzo0aXxQZhYQxfhoKX0OesqfQJWy0BuJHawieCtQdgTiRE4I/0iv8 CibNE/p0kwxvyErCNEwLVjedks2qlgpJKiJZHMjeMvQJfTKeqDH2OH/Uli1A HQAfBzUyWoRgB3wUC4Z3sF7c0mUr9MEUxB7fw3RYMRHezsThzXQn3scj4M0I Nd01i6OGH9wB7cIJoACQAKdSZUN2EBH3Qp1L2jgBRgCX5Z2RSuOxsF2waCsa JAlA0qTYx9YZsCCgALJ3CtAC2AA0DQy5bE/eQ5WgcS9gqJ936P17oCult4eI eqveZw7rrSK43qBg7D1715Afgu09H+Xeu3fvvV6IQBSD31xIYqhkGuPtGiDe Q1UACXxPFClK/KFVMJ5c1kaxlLRwSgq10nqaGHXA4dHCud9xbagheXfflPeo oQCc3AB4AC6AD+CTsVdwfue8owYB7hAg3MKIwv0WMNyAwUiAEqSairFJIHGD IxHBXWBx0wAzwA2ggSvgXAHHjRl73E7zVQA1bwWg8WEMgq/gOwEJ4IK/4DB4 DC6Dz+A0uAuuAJQAKAEOzkLj4DEADk4D4OASARCOg98AQIACgAKQwa2x2XCE pwDZiRLuYvDefUeqSbhUBCnJER4DKEvGg0zQAigbdYERvldMjOWCE1p4VuFf eApgXMcAk6dUIAN44X+BbDBOQZ7gSA7QLBLON1oOYAOkn3tBDhADGOETwe5n ybQEu/cNUELz4TfaqJkDtAASAQtNiGPhM8EMsHvDAJQnIc57k1pbuG2QLqAA nASkUwPYAId4bZADVOFrAQ0gG6wFkKdR0RcY4ca1KE6JpwQpgRHOF0A6GgEN 0AKMDhOBEU5SQzp9Ae9pA9QAILItHpmBADgATAB4fgR7OApwi5vhlGcL0BfU 4sZ4YOCGEwbKOBxKA/jiz01dcIjjACx0SGKMi9CygSAOA7QAHDhKYItzErKB RqCHA+MgchUuh+cAo3he0ALgAKPmJa6HQ+EsNO+JA8ThRrhtsPvZAPc44cIS XOJhgGywhBvhAflA7gJMAUjAFKAAuABWgBCgkBPckoULCl0oCQyFQ4HjxQeR MqqiJGwTPd/Joje+AI9Ib9JYcExKAunCG+sLeYKS4AdIDnmAHjDVIQmYQl1A LngKFIGksIcHBnHTDOACgNCbuAY9QwcG7vhEcIjjzAqAREBLRApyOAiwifcd hqdaoJTHESAyUw6MN4unkjGOjcsGJTTJnDLgADKB4Xkq3eJKuUw+A/DjKclX jo3DE0AoRbCLKwBoeDOOxMCh6Sdh0BKw5S2AVY4DpAC8ePppF8wEdPkTvoUD 4t9KudCXqwV/Oe8ZmHvlWzgk3gLMAHr4LP6t7OFouBoOju/iizmLkS6g4XtF XM4SKOMg8mUOjl/hW7gHvpjL4WX5Z+6ENuKjuVpAl68FhvleAY4rG2s4Gm5q iuEsNCKuFkDmu3cw8pl/44KBHE6XVwS856Qgi8cEnPhvXhHs3lLBLF6P0+W3 +BbumtvhdgFzHhFs4br5GR6bv+PTuVEhi3Plm7h0/o3vFU5oYCAVeOeV+TeO Lnzi5DlLoIvHBEkFGt6cp5qQ52xOlWPn3/lE8I7nAEZFes5JVObYOHkulL/j e8V13pzXBU7oFf4XkOeiwyF+EpwECLqpOYsLBjO0ez6drwWRuakpoE/oY3kg 7oGT5zeAi5GGgyMcuugwhYvQOYmE/o2X0I64iyGYm+jv+Ogwi9cAcCh5rofL 4jXAJ36hm+ej5mK+F4QkLPon7ohTnmO5jP6JI+I3gB3OnGPjW7gwgohv4qU5 Ng55pprmOQcuoCPpqWZkfo+35+84lS6Fw+Ojw5H+pI9T4LggHqFn6ZDnOCWL L+NjupO+e9MG73hd4Jmr6bs4HI4u4OZwOpJuF/DiXno0/o3nBXp4nt6nIuJ2 OJaupnviYXpekKc3AXlACyAF3C2SBRouhzviIMFwLhgg5o86OM6L6+iDuKMu QivnuriLwaOXnrxnY/yD1gZs+TEGCK8LsANvNDGU6iQNRnBCtABkQ6MeGBwV T4BXNjtsWgIC0eAeSBJTQZukHDQacRIIcATInP3BCCAVUOUwgL4AIuCjbHmv Hk/YsbQCa/EsXCfGMUxAOlCcxMY7wQTkBxqCtc5X3Op/hPCQHjTreYGnoATs 21nDfRAEpAfrBOyA1EwFsbkITTJbNFeAE0AF3DPCA4C0HggGi/kVnn5GBMKI By6L7xmCwbIxBWQJK1vjkSv1KlnCCBCZSwRs+V7BVzgBCHsYgAYMSsFCsWCS WAFEwLxhVMTmEjtZUbFf7NW3xk6tR+zNG8VeGljsGDszMq3bAb6BsY6fR+xt 80ngAqALGjRVzhJM7FlCGEqvTBGecCB9bGQKvCcNALLTAEDoFTAsnFi2t7rO jaCpxnor/hFMBKWBdeAdSAHXAyNBBHgk80aqGaHTAGuAFOCeIgHMekxgtvNq LwIVUAVIAfGawEmcx00ZdHceEwjicYQQUCiIEkIAtb6v8+McdNvsafrksfkn HjfZAJBCBm2k6xk3O6RQbhbnnroL0IFr0CR1CL2GN+6PuwgNA4TQKUnjXhdo 0JX7VKAANO44QA5AN43lOXuz6GIMI3mBBn0DEO6G+hPuk1/ul7tGYHi6GDeA 6p5HkO4idLpAu9/sOjltMELHBZ87DDBCsxh5xLcSQk/jLoboDhMQ7lJB7X6F z9DJexE1jCgbGbSKHryL7pwE5D6MxATIOyQOKVzuV3jxfr2T0NP75p4WfO6n khRgyJBvNcaibkg4AQGSGg6MzwBAKIuBnuNrU3h/LhUQ7s97EUU38eVSgTHD rLcE5/i6jjP0oJEKRWKOt+mROIvBQRfvEDz0PowEI3ST6N4SzO5G+04+lock lvlfHqR38GS56b6fS+yTOzTOQu8FnztwrhyQFrUz1u0wRSqGjHLgrhfrScVM AIm7HUJAA9VDdxMn6+cOjyfmrfi3QlK7HccCqqJMJQdb+3qgnSvjq3tSsRHw FS0BEIqfuxgKwBP/l0OeU3yzaMUH42tBFQ8TiOzugfgxXOGdL7sksREU6GqB Ey8VkMxNwJgCK7QN4rqGAKVH42j4X0Cqp5qQ+qRQxXPgk/k4tccf4h/7Ho4S mOec+Bo+lpcOQQIZAEykDlLA/5mT0O9FVLm5uRvtCkAfjpzznidBkD5OGeaN ubU+A3je45QjHoykn1G84TlOkcxHAIUATLAPP7uE0K4P7WtBUnHKh+aOOGN+ oM/yqDljLjpU8qB5RSCLZ+Z7OAfuhKYEkCdM0J0L85OnStAssqyLOf0+i6/u 6YIwMpwHBtF8XbB7TwqyvDXPiastlbzaQrhQ85X8Lo58ZQkGvHIQzq/uVXvl JJLfTJnIXiBCP549ggHvArzy77o4vqOD43q4Kf/DG+0yQSVfQr/jV3hKsmxU C1hA3nEE3Ot8RxBgBSgAKcF2rhKs4Q09QD+zjw71+Y/Oj+/hFP197oSW0BUB Q8+YHxVFQBBwb4AASMAVoGQMAa55vGasU/K8uHsuolOeivgmfoztnScLW/GD KAF9B0PvoHPi//oubngSBlx56SB37+oMfWPOYqDwNToa34pfmoj4qBmSsOal Zye+iz/1KsFRMQRMHBKGAhCKP+KlOOU5jYfiLoDRXm6KDhy4Vi+8N/PfilYP mN/hT71GEI2X9TKBDTCL8+OAukqg1qefKAFhoNVb88H4KX6Hlw5az0lyb7gA Vw+9QC4UaQpAReCIjw6he2L/F1gZdoQ8UrUzDJ4wFABpAOM6ekpSEdzlmzgm zxekC5s9Xq6Fk9T5+WY/13v2gnhifxK848b17m0qqfaOOFcu12PjxXlewLz3 5DLBRqDa3/aEezAyR+QFpHyObheI0Ko9HN7ad+gdemLvoafiSUWHvmw4CfTB eJK3w+yJ/UaQ2RuepWabzs2/4lt4TEC4SOOJ/XEei7/mXHl4/53XBoB6l/6K vwDjPS3eLPIFD7tdzxc44rQBiC6In0o1eqRgVHiaiX0wroxLBDO0IB7blwtJ RXPeEsj1akGqqQAY+EZ7Ux+dG/hI+kdwjy/40/nOPqqnJO85SDB58uPpwntu FyzmLLThOaC39nl9s9icywQDuyLenPcFsjmLYeKHnqg5Nq7XB+OROTG+4K/2 u7gTyhcEIze+XI+0/+im+I0PjsRr0HpDdyjD45D6WF7gg8in0hWQJQTSFqpr MN3/n1NCGDoCcOUFfkrg2p/pyP2Cv4kr4968XoDhrwWQAt9+Egzi93gcoRGQ zEY7xJ7mh/VTQc7OlzvpT7levrpP43S+cR0pqOcFPpLuFuDzqIea3sFb6zO0 ms4SLPZ/gYhPpR/nerhgsOAj6Rx4mR4RYPhIutpyiIPnHX6lzxcE4jy+mg6j G+YG+qMPeSb1z3yNLuqv6cM8Sd3nw+GguVpAyavpGPhcn9qr6ST1MC+cL/h2 +H2eVOjhonxybtuv4bZBLT9O7foduHIu19sGDPonLouL9c756q4AKPucuWy+ us/Q0P4nPtunBMB+jT55CgbAvhbOFxielGeoLoFKBNw8umCYy/jP/j/fgZ/i 6MKyPxGs4UDAWF4uAPhuugKQQdTPdgOzDgTsEOkBs/6XDkn/13paLYj03IIC 8O/PC8pBpWbwZz30zJSwQDwBSIDBn4OFa0QAJG7wr6cgwH1aBTwLRYBB/xs4 AQDSvZEEZD30AhFg8E8BksxIv/HHCFKAFVAeU7Rk7RPwLDwBWIB9ptsP1xaN vd4ixFZUQBZwBPRl85sLUCQvJkEAkTFFJAfhW26w0IehaVEYmnw5CDjIA60A 5PAnBJAV9XsVQoDdsK1vZK3BeQAECA3hAdnArNvtPgESwBSUAUKAagQEZJ1Y 9PwgNqf9dIlNTwa8AFy5sw8ttDFvAECxk5daY6eoICZM/fpFYC96BAGsR48s UxTJPfICAQVUC4Z93lFuwO//1yMjycDvKH+PvJ4SAf9ajBBcT6bugU4T0lcL Jv94e21lCCHCtSAEcAtn048wBUAJ3urnOQQQDXm/0WsadAf2RBmwWVQHE4Xs vxvEB/0BFGDTFwhZQ5Q7BvTIecAsMXwOCMaBx4sqoQmSxVU/S5gGYen51vwX /+cBFBp1mL9EQJbABGQJTQD3HwRIARmSQb8ebBaVR/j25Fj/Q48CsFmUMHJA EcCsEwHxQYEQlhkOkskUof73IlkDHusbyNyg85qgIQz+8gIQwBLAoKcAqNS4 CHIa9rrSwOXPL1MAZBi8AfQMMIAvgAwgHYRDEPsZvWhetAMNBHBgi2ArkEMU yAqAjgl8AqKDrMU/OOS4B04IKMAwlMyP77DyO+Ssp9IKQwCRHhJAWMe2s9cp 5BIIHpLSABJACpAEEPkR/qYE7qkWQWnA5IcDTCvAAaAERKPGxCGHYkAhyAPo BqYIETKPhNGLVTAxEBlMuZQpDoM1AnrgBCFZUKU9CE6AqhoFwBGgYwcF0Fak Gph2YsCJTccOfncFWJvAtMwNjr96gRNguJYEuGdoPT5+Ib97XQ1GDCghaAEE Afo3LQlm3RFAQnA4iwLUAY4QSLTVgHAAhyAIFBL4BnZAWDf0H+RBDCggqA9B AIEAYQAhAbMuYGMEGJKQ9Bx/CjmV1v9lCIAEaBGsTXw7uQFtTWkgbbe2Czio tK4AuQGZ39xBYkICUAAgAagAIgiFwgvgCsALdAEUAfkyMAB6gdBvgWALxAVC AXSBvEAnHzCQXuCvWQIMA5sAArPWEzPigGALzHawboYNP4hQjhzNihAmQyzY As9+tTM9gB7AFshzkAOQRxQA8oInAIBE44cORL3tYOYOVIA6IN8ho6EHDDjE AaUAkL+fjj1wCiAE4DsQ8lgCtQEE32IOHagzuAZeXt5oxgKsQgEh49UsAPH8 IEYE3YFmAzoQLMBIkAR+DYZ1vQ2MDdSmQIAOfJatCyhED8AXwwbwPADHgexd /4IFHcGmwY+in5AgOAIELjQEI8HpmGvAYUInkBa0GnBPubH1gBIAvzMFgBVI FlYsR4C/wSmrWpD1OEnEAE0SaQUqgBUA3BB5Cq4ZGaoF1YwOCzPiaidHGw+Y BoIQjoPgXw9KECUfGRkoADos+rbvgeRANHIe+AryCJRp/YEgQGvGOwAF+FHI 3EBhvwLJgk9NvDGT+AqyC74GXkDhgbCOFUHSO/s9C043z4Lbwm5ELngXXCLk BamA+YGawRWQp8IU+AHYBVt/Gb8py7pgiQD/gxP4/54FjgQFwNwB/Eev8fgR /jp2TYAdTICkCVDzW9m8Aa4K5q82HjNCNwAr0AymAbAKKbHPgYagCfAa7A9M AaQICTzXYHfgZ4CMIWJdoDYokoXZgR1hGlgGaAFkAbwKTYD9CrWA/GQSpDZF m+4AnhmNTBWBWfAGgAL4Nd4J6Ll7BosAfvcsCAJS/hRyExuMwhwAoJAyoBIw I/QA7wYJwbniCuEaCAomCNIiHRYJzxdBAfAEGBDI/chaQIE1AG5gCbA2Ma6p 4RQAUAAXwBOgZ0fzA8bt+ACEAkICYc1vHocgHBA+C94Ae4SpwIQvQOggTInt EdQWppKkAoWwZwchDMvFADxwnoJtHVbhCtB6erltCB+Ee4QOnW2gWbQhtBBK CoBzLAEAoczvyFDzE6H186AAM8ICoVQg1bSGwxHO/Gp+GwHrnY+QRkhLGOTJ CH+EtAT03JCwQIguaOwNCTuEIIE7nGaBigAg5AFaAYZraQXfTiRDpYXxyzvA tACEbYMQFXMj65cgQAxaAZEIHKgTAVtBeICewDuBCdWExYLWgScBTkKRaAuy IMYMdzP4gGsAlrAF9BAACMMH1og24U8gG6iFiPhwIrxfjCd9gQiwTshPExVw oBgJZcDfgiUC7wYycA7cDOgRMcEqmkUQJShza0E8/c4DVz/JQhRAoyX8UwDo nbZ/H7/HHx3QDsgEMBV2oKYE7Ak9QNUP6qcakPq1NuwILwCkHYwOSbCoIzbw xxgsQQCxAWEhaXSwM9sBoeKBVIBqwW8gCZAEUABMAZQAQwDlgJCgPmDlchZG XFgP37+OnRBgkpHwa/m9/JyFYzS5g9yA5kV5aM2AC8UbVYAqgifhXGiNQP9M yQJpioSwVG5A/EA0kCwsB7QUNYucoAKACkBSgfl9APmFapMD0JpgPUAFKAWu TXqAiIn/C7tBbYcPRCsoGbSDeYe0guQvYlj5c03gAWAJqwgJARBACUA5yDoY vU5nmcIfxWbB/CM5qCKwBPeFVyegQbEgcNAC2F2gDAcG+iceRbGAFwEn6RBU DcJf/4egxkhhX8gjaEGQ6NYI55t9oWrAp5ZPUQBUAYQAM8BNoatBpsUiyMGU /KgF94wjgH+hB3gtdBEYDacA8RqzX18CGUMyeAPkAQoRCgBoHcnLyrAVsw0K VyQLVwB5wYSE7wBTKPJoPXp+U4LvX/jPCXAEUACkDZ0A8LsaTLgmCTBSqRYA AdxTQQAXAOTPbtgLjLhYC5AMfEPYChXgGWg3LBRKL7IAWRilHRZiCLFG2CP0 BLEDjkEsgB+QDID84/2BDSGHdYDIU8mwBcAjSASeARaBub/F22NBmbD0QaIx SZh1zANthSOBVwA7zBSFDOwAtcPuRVEgn+ICiA8sBTSBYjNDQffinyO/4irs 0pBknEMUwZshLUABVErIDWCHEUHOIY5HQAM9PAIGvSgD9Sg8AJKMDWA9pLdV I6CHDoLegAkCPYh3yw8cECQYVgjYIW/EPJBzawMgyUIKHwLBQJTwiyY3qBkk Kph10p1zBKYHf3gcYBBwETCBmkCjV+1sKhaDcgHUAdYACoAB4vSBf6gHqD0J ho6Hv4VBySrPaeQGwB8iB8g1mB80AP4Qn7AG6AmgC4AAJUNR1AkCf7hgaBcU B8kGCcQSYtBNbsB4sy8UMkAERbiElHcABXDKK8eJ5mJ5cYQjHA2gCJH2cYrs GFqGYwxmXVADp5Ae4F54DT4ETDSjV6IEDbAUuAMAAaQQJoLj4RhACqEfWAoI EU8sw4KM4YdAiIhYaAGQJc4AGYSpYHwA+vBUyHkV3qAPsYfjwhggEdhA9BlJ EeEcu4TWUyIQLGABXLxFz84DUogmoBAxV/LXKgMAATIKbIA6ovvwd8gGCBCQ AXgRKqeKgxLRCKEHCAf+EdkAgBzenxAxuMImEJuNAah/1AEiAszB6AWRsUwc EJh1EYIBonygUDBS4CSuBngEqCVMYpxtfmBKRLtIx5oQnMQiULPhU4GEaZ1V DPgI8j8FgMMgPJR2SR26D4uDSkPGBIdJNTIYFCYGIAASWYSrm8UgCAF7W0Wk IXJGjIlGD1fmhrZ4eyokcM4DHoJ+GAUwWLAGeBww62ppIkAiwRJhevZLJBvw Cr5o2MQPQRGPlagv2CRWEwcEewr0xDdRD3BHzBrgo14APScSwY1ADHCNEv/c oEwKjAk9ABwgT1CEIyyoSjgOvIQ5gB4gcMCsIyz4BNh3awD/YexJg2j0MjRB POIPqjppE4/gBcCLKLzRF/47rQKSYOKtovgeQgMQD4cqJEUDC22He+EhkAIu 3hw/dgTBVA6ioahMqSNgDpY+PgpBFLPugPAUsUMYvd4L4gcuQsGpQvBJ/CnC F7gITDLxQABx8XYGaAOwCbCH3AskQYAgS4FPoCgyFQMHBoREHhBADRAWyA/s FCkHsQqRgxggg+AAXCx8FRVPqMTFAD7h6bRTZEW0DCs+FAMXgBpA/DDUYtbV CcQG5BsQwQtxoIAiKKIt3qYPtUJYXX6w64AStPfYHnRpRq+2HyetPNA7DA6M ZsoAa4B7oh+gHzaBOAJ2CCQLfwa7gaSHlfhXxCHw+8AOiUUK0QqKfSLvw8HV AIZwOjgcXA4gtcgS4MHF+1gCij1O3KgJn8gGeAGsAWQAa4DbYgwgDfACmBCd CLBROCgFgApKFzgViOvx4lQCM7Th4kJhKoCBmwjM6oSLokXiYvGu3JRqopvY AF4AxcGQnJ9QuVgpwNkJ4jRoGbzkYnRxoaCiG9zFTUR3hifuIuXud0cRuNkl FdSLKoGw3jCCMFBEgS4iFHSBpzsNmgatJRBC28PBF6t3LAEXQF/AcWdfHC26 GH53GbzyoouBoyghCAN8GQqM+EXhnXWRhKaTM9TBF0doMgFIAeSuWQRfVN6x 0PaLjrtpXIcRcpdBEwyE9dZwI8YDo09OJ1eLSzGiBMJ6zrvUnnoxJgBeLDfV BjRo/sXxInuPxniFK6KI7lqMOsb9XREFfDcpAC++F4OMNMYA44cQfJdjvC+S F315djg9w3URwvhkNNqF7jxNIAEq4wvg0NfS4ySQ6riLPMLYom1AxKhjHDUJ 77hyGbiQBJgxUodNgMtpGUdNdgEV4ahJ3cRfLCkgEdaMwb5sXDDuzQgiO89F 6nAASAI8o5+RFwdoLAHcANIGSQAYwA/g9BcY+Ai8GVlxnibaAAoPzJgS0MNx ElB0j8YrHErgDneKozTK62wDlKcMGcttZgAfeC0MB8YCvIhHYwzNuQiPezPG 9eh9/DhX4wbvE5cSUDOWGeOMXrtRE4pRx8iPO+qByG4AlwKL2z9Ry7hEJEuQ nEhokcXQopMRu+gGOD5hB2o8dIOMUxLxr6hjDBC4ACQHWsaz00IKqqBHgEmY ByCLfkX3IXex7Sc/ODOgAeA4u7QXgB+gTsAGmBSkJMaNZz8XwB0AD0BFqy36 AWgVaYDAgK1x2dj2k1lUEDOBryjKAEiuDCADWBCMCMYAL4AdUMvmDRAEON+8 AEwQdoSPk5AlUXIhgDnYGbONOISjBEXhjLgb0DJOUF4QOATJwfGQuzhX7PeR Jf4MtEOBox/AbpAHgMeZmrSM6a0W1cag9SQuYCzcD5WNo0V9xPIp/hBKYArY FXWM/4HSzlhgDKA7CzhSG5eN7EMO3CZtOMA94Nb9HJGOQUVuYzdRJjhy1DHO I9obLxtbAUkh3kgGQAOYpzRy3EXJmehDkKhlbCjYIWAAfb90Y5ZiLSKgKTs6 FKYCMYCgRoSAe9E+dDvaIfB4QS8Fg90xrHcbTAPcCsUDT8fRotmR74gdOQN4 ya4kgUdd4ODRp8YGaAHYsZgRisSjo+DRoUCugDrEba4MEMDE40Jh8HiBWPqI HSOP4kYd4+BxgEgnYA6UrcKNe8cpou/w+qV5rMj5FPeJpMOzj7SJY/ACIEsc NXIK3MXBo1ixBeCt4iIsCKqOy0bd44mgROBLTD1iEhNJjKfW4+CRDMBVDBa4 EwcN9YMXxN7x4Ggi6CsqeiQMykeHgqHCznNNBD3uHQkLVoiLQg5ic4ZzVDw6 FJY+NIDWTYTg+6hMeR0cIbKPdoilT5QCOXBP5CIIzNQAXoOv1ikr93h+VKbM HyuIAsezTu3xQfQGGJDtHQ8IJIKhAWNR4DiGig8gBwx4h5MXQNqvO1Bc6BpU Ctx0gUbRo0MBAWk/xD3dE6cGQoOWzRegJ3CAVA0MFJcKsETJo/nRDtH26075 vGRQlAePV5wEJPfH4hVk0S6O/EcW5NnP3xh/WCoOGoIAvAiThicuB9BPbPL8 E++MGkg7RD9s63ZP5JiUm0oKe8eRAf8AfuiR0DvmIF0A4kTIAcVRWvBDczVc IYeKvYEDQnXgBTloUAO08MgAT8jg4hWyE+Z4YDvBH10AHILGY3oA8viGpAh2 CFRNdcjn4cgIe8gx2DuCBXo+EgJjYyoi81h+3Dw6FJ4DHQJBghUyCVmPygNs FUYGyrozwIVNmZCCDD0GHx0KEwNURTOCf6AfWAcFvTqOV0hpAX2gO6BxLES6 HjdpuQnwY2/CavDP4SxaIiePdohdQt4gi2aKHDyKED0EvMfhwAOhC7l3ZB+m XcwSb8jQQuvMDRBbUEpAIu6JZkixARryCNmLlJVcDoqRhQjQ4wtADcAykA3K AUR3OEhG5DRxyVKJ7EVWHP0G5Jpg5I1APBB7fCqqIA2RdoiZDlShm+YReUMa q4IEdccrJHZgKCBYpBAAH2GR10YGQVDxgSBIqEU6FIwDgA9slljxDQlx9BwI VxwTbYNu5BXSBPETsDauH6+Q5TAxRH3IimiKxAO0ACySMCjJwysKFClaBBot FHwrmzN1m9Fx0DAG4EXwHi8EILm0y9zPbdA1kB/gATQEFztyTeDAl6hu5Iut AQ5laIBy4B8ybEZteuNRCNKPzLp+GIoPCHASqA5AFaRNRi9tYkMhpBCUdCye XdYAZIkYFMpIONAPA5CVCZqSOCVAIVFSBmCUjDpgJe+EwRIgAHeADXA48/1x 64qP3oypYFNSJditwAL6HGthCoAFRM8nDyCXXAM0IRYQ+oO64wLCc6AmdEXG JaVjkoPaABAgDRBPZNblKfQRfsm4xx3g4fQ8NHp1E2kH1QFmHRsgIhBZxAGU EmVQCoAMWNpAJ2f00kzaEfQAdQA1HBAguAIleD5mJpdO94u6I4cgPKBVExuM JE+TsQUl4EhBCjEUyAPc+94L+T6jF1igZiAkkCaEEf08FQexzM/rjNiHtEMm pPCQukm5Ab/p2kg0qCRSm2J1JcOtYlcRALl4IxtIDnQAS4Hfyh2LGOkRGQ6s EckG9sNupHXyDaADEBN4LmAAZMURAayiMdkYDKSZROgAPYAioAJgPKkDmCuu 3aQQtsnqm9yPWUef9BukBwSLgEjIgzTpu9cYqwFkAfZ9qYEx4kGDDlGFRCLQ Jx0+axHBZAeu3CQ2o0/SKVpUOYDmIdmRPmkeqAGYAWB2ZoAvmp5CF6nIY0+6 D+mTMovzACeBfmiPpAz8ABgWPQDhYHFwNjaflBtcJzlv7ZEMZe3sdOiWclHC KO+Bc8B4IKuwBeAlfAK0ABZ/Ib0YQY2yVUCexFG6AXSUisAeZWMQRumeIlK6 A4+UAz8lZTSlN7Cg4E/KH/IRtIIqAo7w3qBtcCruE02H7wW/ZMzRnjiKlCjc E+kDLZtd15oyODkcWPrEHzIRc0o9QpDgMjloQAJOI8ARSII8JR5gT3lP/A/o AfAAgcrUBEuxIcWfnB3eBywovALJQv7sa7gGyBoAAQJ41MkT5XAg9igcMB2i DvmTtbD8QAmthOaplFJqKtMDpcNuhR7geLhNOAMQXbyPj4e3ROOxiNf5YNa5 AYoCYr9b5fVw8SZRYEcOVcRmEoVwoAQQI+A6RD1KFK5ua4A/5EkQ61CHgFXW ITKGXgM6AFASWBlBsulJCKRjtkqigtWvVriAxEyGPgSRdIA8AlwSb2B9EQzu uvwFi7L6AF+gVMkINHpdKHsT/ydyo0mBF1kLc418HNyVqoGDARughbcgqHp4 H5V1awBR4vEQDnCOGCMavZZo0wjKARRtYGmtFA80JigS1QHcoBfRuMCssykC ecoAq8qDpV9Dz8CibDwWF4pe48Cv2xMBRQDBohXQHw+WqoH5QisiMditdB/a HvOD3kPy4+ItrpUHgPX0BCAOFUszYBogm0WGVADEATRamMDFAh6A7FiFqDEs EdkLbwPJQtFSilBBbEzYD12R/URoJCTiBeB+9Fz4LA+Bz0bSZJCAWScC5D5m DewJgUCjV1HL4eP1kyigXcICbj9qU7XNknB8ylptMChpxcGm2+JtbflErBgQ DZSVhMUJgtgSbvn1i06wCeCSSCedZVADjRi4lBQOLuGSioR/Tj3yNalIeA99 /SQEscqT5eKNfbj0oVYYJkiGpwF0wQygY+m0PDYw6+QjDsat483B6FX1+DR8 Lu2Sm4vjoaLAjuATEM/QALaKuYPPpT9BXCC7bD0tLEmXCUXyTd0RTsDMoB92 Bz4RjYmh49jCpBFKSDZOLhkDWQPiASrRnki6lBysI1FykUWxGXbA+HN1ZNZl CIoLapc0hfWSQWDvoUUu3pQSryU4QC5NkXA8lBy0ATCBQoPaGP1x6lgoiD+w CSqVCgCOQnHBeil+Gh6RIK4MizSii1ehZDgVkIrFB15upIgzgB5gUhADeFyK B4aIactMRDSqP/DgAiakBzwGC4bHBj7q2ngHUADsV4oD5QFBmvRJbMbEwPz0 LLEGFYf6gWqEWYfNGJRAsLiNRi87QHFhI+iXBJ1ZDaaHOMsU5s3gDrBQLBCQ MPGKEseMjCPB+3gHIAO8l5h13qraU9oA/3c87D1OFEWU8kfPpdisHEZGkwEs I2kFGUkJwUdBivlR8SioAdQAgcTAQO1RQJOGdB+Ww8R+5BsNGA5i2ujFJAqQ DUgGiMXF2xfzb+D1CxxoF/2S5TCuDODR6FUO21PMCoCYYYPwAMtmDpBBwAPc Y/CYVcFLoFOxH6nG/DSMBS0g90o1pk1J7gbEvBAA/2g7zstzBBBzAQFiuk3u J+mYJEoDIjWxd4hEuLo9EIROyoRpnCcT7RRAqBHEG5eYb0eGIh3ToUADSAPE Ae6JoEzrwRigatlzUEooADiPycNoHc2gZil240VyHlV1t0yLnKoOiOlQ0Bme B5ADFzadlxqzmAkU4PehHnWP3bE1gLFsU8k+JGa+HrUVqgE1xcLRmjkWGCgU H5ePNQNY5mLg7CcHsCiUIPZwy0eiAB1ADyD+0kINHssADsDa2f+pD/nOvD5K n2IHg0cOpAJSGnl59E+xBs2HQ4EXgBEgTLhuqxRsBNIF+UwJgWqATnDCNF56 MR0KmUX9wGaRm3kzgJP8LTVyg8fVwCsKlamEdCxCAC+WFE2lU4QAiBjX4maa Lc+GRUxMZH0APNCOXGXaIViGdoNF2RWBm4l0A2m8JgePS0sP0+nRpfjQjEUW CSoM6kbPzB1g4kaEpC2dHIKLtsjGBEyi+CdGaFkGM9ORLhJlCjdT7NgCyA9s JFya18ZCQuUmRcnTfGoaEBUJAMplpfBy8Mg1yPO4HokCL4AgwBHgCTCNvP1w TJAEZE2iwMUyqai3XGbaIbxVcrQ9pjQJ+HcG6EaSNaEE7yHhSgkTjulQOKQl D68TSEm7pryR96eOPEcQIhdvFslj5XBAkik2O0osfciORwkHJu5JAXCUYB9y NltyoQ8/YnCA7Mi6CRYI8IxerJuMAc3Rhmn08gNAK3kEOwJ2Jl1CAVBFNE1u xbKIRzwuYoHAiyiB+E2mGsiIw0m0Qx9SWLZGDAc6EF8Lb8RNCxVBjlg7oyOa KGMPnTG2E11CbtCN7DH0Ef+IJAOyIyHRkIhInGPaERmJjkSSQSQRz6NEpCRK ETGJtkfTZCfxPFBUXLyFErEvpAhSIijxlPiCuCS+EVaJ801X4oCgGwkRZCsE /yAGtcShk4FgkWeA47+V30YN6jfUwRyABTcQYMBV4NoCC7cNXATOI9ChMzVF 3EhNppLQ2POuA5dxY3C+mmhLTDPNGMitMhA1G7lNzTQDHs4U50JA0Bi6+zOy Tw6NbIBE46KxCNBonMbJEF8DNURywQ0REpdDZDHwEM0G3MXiYhhuIhCkM/S5 9Vhx6cUyY5+xxUloRBKsDkMLypRiZVdTNieB0gh844x2nIQlZeypSakGeVKy K32JL0qCyK+gB1ClLFJiKZOUARL6pJMSSsmjbFdOKcWc8Ekg5apwDsgEsFLC tM6cBD/HHhvvzCDZuwraEXADlr0w1JcuJZH9oxZw/7x/nMF4IN1wX8fE+8Yd zZRzWc61JpKBrFAEaAO6HXYwqUI54JzzDph3yAPuYBRy6wLAAl7QcBCvGdYV ClwDWsP+QNbPThEYjFMKJi6M4MXi3d9uwUjUcDAqCzBxLgbZwCauE1cbaNJV +Dx057l3IyMyE8mMyMhcED2R8ii/G1AODfefI8rRJ82T5QH0JDxTPUkxMFH+ ANyT3Ir45AsQZcezW9mR7DJ2zwImAMfOYzezY9ER6AgXrLipJFjSPCCW7A6U JRuWzDoogJUQS4ixMQJsCUWDH78vIQ3xCmdDFOXxOIty8QR0XlJuKdeBow8+ AcSD5EErw3kwPUgHWA+Kx9yDZ5HloHzwQ7B3nEeeEJ+HYjNPIwsN1JgXWLmh JFkogqFTY0kyYzY6KDEkKf8vJb2TXkrPY0fJYwlc4WCF2J3dZBzvAMm76EC2 LFNkVDe8EwRyUCKBdCRUIOkSF0h+HJKgUqg/QJyFDF0DwUTuYq9Rmkd5Cjbi 5KCQV0hh5DPSIxKNREaeIbuYSIQS2jnOySfDi/KV8bh/Vj4s31ewCFAULA0E AZCCSj+m4BTAKTh60Da0CDuElCdPU4zQWrdzytaJCrZ1HMGTQMpuZNeyM9nB 7Mida7grgONwWgA6LB3geD4VxQJYguXw2OAYROYR8wgXz7sjIZHQAye1A7gc 7EoDQwHiwMKOXNGwe9hN48CC44FTJ5CALPh5EgXqAE2B9c5UIAyQFSgFCDiI /hYPpD9V59kT9afcUv2x/sqCr79M4G1l8RYZA+Mt6t4ISsXkwJRPy+i7EzAi GPMIEbqpHF+BF7fnI8tpGWcCVkY5HItB2Lls/DhyEUKOMAexmaiJtSfX28UF Bt6Hqxf54SauYxmeLNvR55RxwM7BgF1Q1GkYpP9dCBKDBIn6H5eyDeAY7BX+ IFiD00FhYTViPhmqdAOMKl+XO8pPpdHL2STeaKVNyeZ4970lHamuKuekw8qB BPwPXDm+nKZu1AeHQs7Z9eCNN4f+1IIA3VhRWDdyEdyN6r/+lEbw/DdYdBDs HdmQgpJnoz/SDgGGPCQuN8mQ08irJzOS2Qmay+WR5uhyuDzRnC2P2teh++/x nsh9e7h7w2cwW/gs4Bay/Fx+LgKFHNyRVmerQw7InHR1jTwt53WSq7miFCSG Od+TMUoKA5HSsbh3ZDw6HsGW3sc1JIWAHUmHNHrpPbudO6Bvp8tu+MmiMzPe 5/JzV0jjJHLyHHmKrGpUD8qRb8hCBjGDVsmKnCKU7YBxZznLHPppLVek5HrM Od0Ou6x64PPTe6dijAmwGDmMSEbCnZKxIoBjfH7yGMcp7sVK6AXCUDBfUJW0 N92HNjxPwRSAhaeMzA2MKWJ4QjukxggAS+eWSwHA5Z55c7krpPyRWSG5HDQI IOEABEgDJKVx1RgRaDWa9jp7U7jUXluuAZqX273BFulydjm83F7AGMqX4y7i 4GQCpkXUIv1OtchalAG4FsOMyMUxI23Rtohb1C3yFn2LYYMK4sUxQFAgyCrS DqST/oRMZXqu+iSeazLiI2kA/QQOxuHRZvOGhIcSCf6OYVBG5BLSXQK1dEIO G1VQHklzpuxifiCShGWaJHcELTeWJNBTIfp/akx068h077jkHCSuOAftY/Fx +mZoIEPZo2tgZKgGET+dDIOc00XHnU6uXIBdbAG8MSl83zghHuECaYeYg9PB 6JRxc7pSna9u9dd4+EBgBMUbxjrPXUZTpFkclD15H2d5vrzFnEng2Xeps/a1 6Ph7TjnCgCXjqNCBm8oB/noKgr+5Q+HvkEcipB0s8lwDjbx53t6xBYkdMBTA MmuQwYIZZAzSBulVvDgONPUHeYMnYBkgCjjAw8bxFQaaYgPwgy8iifebk0AJ 5wgXxrWkAuFMJVCOo8yN4faOaEehY0Vh7UgcdOxx9rRwH0IZozbSGXkhkFra EJCR1cjp2DWSGdmfLBT8J/GWAsrioAitQHmgzBvUCuUHUg0GJUUBifBwEwzY ndB1ZDwDHj2vPwCvMxW6AFCFck4hJZ2zF1mCOEHkIk0a/ye4JH0yO5mvvB12 J3sT5E/gSusRztiBMyrMGdl7eYSLYw60lkdrpAR6ZSCBPZUSqPlLHrkaaFGZ RPeJrcdiI//g2IgDcGjuC9d2TgCHIcZG7xAx7A5O/rgFCrk7ACXTQWDJzE1W Jz2Rtcn2aCfS6BWT0+/R5OIIfborJPVRSGHPVCZwM4cFRAN16C8zQJqni9PB RPeMnEBPYCnQBij5LBAGCfl7wThRnohux0dmvESeHdOOg1FpYNsxoxe62+jt BZpFGT2n3oZvzzipZJJZKjGVA7y4ozq0FUpLaPCJ846My0bN3XyxdkfFi4Pq IXEIfMjPkyx0nSh+tAPILN2HFkOM4QdnY9gxvGou3lKb5sma4zfRnBgsQCf2 JtSJ6UPfhDCKjpnHbA3sMfuYf8wVqLyRKCCR/BVQJHmVEgJh5SWwcYB6BD9c B96KioiRwlwRumCWYtYhSVebfsnQHjCUtJdUIG6yEY+bDAgIomoET/oruEfq AqmaZEfqaEDyOqqteEPqM40DN08QpNlnBBkcBFuyBt2HzbhqHDROEMdiyMdB 4tpx7rl4HC/vNKcDvYEuR1NzKYlbYC5woZAMdAEsA4sAzcBnYDRwONh2LALq AHmAPkC+QxMgCBgtHAKY/ESlx0BSaS/wF1gFCAa6/4Z+dLlKXaQO8ikBTeZB 6i518bhpnCVPJoDJ89ot+PgC5AKUwB8OYjf0Q1I2/ux1ckB6jXmUYqiQo0/a J02W+En5aM/yU2rLS0ksCReE2Likgqs0BoiQowES/gwOmkG5YWeQbig8YD04 /NZTDdIaYQRUyxh0LKIRHZ8PWtLKI1Shn0kneGy+IiOMHsYSYx6BksevO+P9 6yQCO7qB3XzO0Peck9J1BOEEH0HJAQQQ8If30/s1b/qgfr/hgLrTdMPuFAx0 JRObZUzGZCXTjXlNfJIy66qljL8sIXmUOzgx/A5KQcmTTEtvlU9AXKrbLA5+ EX2bY0ThpBlRuPl52k0eB4YCIUqw5W9TaDqKfEX1IQMEDIOw4pkSnukk8UuG IsUPhbdS5OINV4oM3JW+AE+ljENZaPsRa+mXLDkOV94AgknCZC00eBdjvN3x 7/pzS8Qm4hORezFSyHgGGSWMGca3KSTUQuqCwmEeJH8Cl0Tz52zuBxWeu82d +gZ9J4ExXfJuNIeGuzRC5uJxhs+uYLBAcpAc2HkW62Asaj253iYO8gSJs+sJ JVkMRMkZwMm0+MihLAN4KEGUIspRZqA0Ejpk5KBt73pxYEa7gF2A1mjXY9Et 8bhzMzTzJfryjad1ZF8GvdoGWMjPk+20Omehk9GBa5J6u0a+aQfjBKlVUEgy ItGP6kcNwZuP1CLnQ8xJ5s6dLAGkHfrOUwCPq9+l4wqkdrrjC3kORZeYW9El 6yYowchIpq+y+AhmhC1mQ0dNXjwo3rdCUsAdUQCcIcKVEYGOJYcJQjgWGAde IfGOG8dF6PCOcAePEzC6Q1eQY4HhY32AWUfnIwzY+Tp9mr4H6jQOOnkaQId6 Fc2gENGj3pJuLcddnD/kD7GQTEdpk9gsHbgOjGnlS5OE1E98pH0TjygYsnIx 6wig/YF04bzwbRlSEFwGvfqQ7jkknTdOGUcbQGcWM6OZ08woVDUTq0nVtGq+ Jnmmpsj1Ys6udkeqK1x2x4JecEmJXESuIaeQ4y5aG7GND8qrQoQyQzmhPG8C TzOeOskzg590oYCRvEhuHNEOHcdIqRuOE5el69JdIVWPrkRxAenURkmefFfO ATKUUALnYYty8ZYXMO7J9ZB7azjrpoMMuxlIfG5yF3WOZgAxWs+RT7kpFdap 8qYsrbyg3QzPeGDxs5EGKAWRQwGDKZ8xz8jY28NZE9V52UTH4jbxDNBNDBaY P/1yLYFzH18ulLd7W4aW8mR0OTqJ274x54hD2DmyFH2OWlIp5KOpALGIXDYa 4uBznVT64MxUYugdRI8qAMiV4wI45QMKs1hmXPOd8owKSYXHZFjMNNkGHeEJ 8R6NkLjwHaYR3kgH0DhqJJOdRrgnnGwAjzeFO9CdCF2EcsaJKYau+znf4zOe GS9NCr6HnVwvlbqFg0PN0JYUzAhHhQvV6HX0VA7cq1yCAYR24ONPWwpTCDhE NMk1SQ5mHVAvUnAFGOpFQZmGSQCnYRGgYwfPoJdi/oSgTgCrIS6TG9HQeSrw MmmHcEmyJmMzkjkH0KTOGPl31TvvHZCRb0p6zElaD0BMIU3hwEfTc2n0qgzK /xQs8s/45Wmgf9l1kI+w5VhWVbu1onsga9cfSOJ17YJ0SQCKoLgwQHkRlA6O QL2BaUkjqftQpJfy+7+s/OoFSFBuAaAzR1gjVAkcUBcKc0aQwKWRL+f7W7IE Cg8FlkHUTaEQEXEoHGHpFcUGCckQXYGuj5qTYKH9UcN8c8YCIBbgALh3GAUu AKkAqUfYY1xj9ljOTG/+C0aM8joQI/xUpndCoOndAe6DOL2QRNFvjeCLSPop BZ+fUEagmVoASYACeMWV43J07r29I9xR7lgoqAPUHXWPzUxsJVZTwQCoOCCg FOmgtshv5GODhwnR9GtoFhOqRFSt5puBq9l6LC/25Gp0Akb6oH2wdcCB6vns B/uDR7M1nJlQMegdkH9mAfmEJoiaEWyP+5mlK87JI/WR8QWvAUESleiQ1BBI BeUQWDvW5GTPQrVD0AqmDTAQXUENg6dxdLCJa4wt/P5S8ZrQYGgw4veFjFRu IWEOcEn5pWnynRnPvB6gEW08cI2fgFrRz7OrHCRSEckAX1L3YQ71SWfd+1YU 6bSMV0eTaJTkfCO6nB90Hb+OrobUm7khrSAxxNiIhlqAELmFHEKuiqpj/BA4 GyUI0UaWJbOuCOAAhABKADWUz82DX8CvooHmJLHyTWehCIP6Y20RVJB/PEec stZ77T0zY7axa7BtjCx2NqcIuMHhKK5xg0fJw8mNDnZycTv+3QztnFogTPMF +FZ7sr3qKowUH4mIDGf2UlWosEcj5u/RbrpsZC429CxuSQXXJshz5aQa6RpA WBsTSkeborWSf0hAtCIeEP2QjkgTZCRyEhnD5H0GoKJ4aTgq3n1PKWeHIxdI P/N0oyZmp5jOFseNoyWQ1MBxqaaUxNEwaSgdLSzeTbd3+8Xp4le1Duq0rEZ0 Fd6Q20csWjIhGInp4Ub2VkFoGoE8woBxloowHd1l0PYCqrt0AclRhrBJ4x+g HE2pKkeWo8tx0zp4fEfyT7Gahk0NmPACj8mYtEeGMdMGY0yrqY4xT5kk7RkI R41eKs5oq7R12qoQKHCaFPpvOwZ5FNySDMDgdHA64ApjE06SgNriwjlxazS+ BCh0qybDALX1ISCCy4x93DhjJE4UnNRMBbdulba2JuEAbspg6Z7hCmnv8SJC PCIEzLp6q8B14EpwLbgeBqytmDc8QL3V25ppesBJODdNnqa+QKqJ3IqB+wi8 BIx2LIEOp8FVMQDi7Lg1zTZjT7OQW4kz0nji5DVtXEFwFKeBgQUl2DBW4CnG gFJIWkwWQ7DRddGKQQk0ABQAN1e9Rs4VAwJO4WpgeoAAlQR4IlEAH7VznR6E AI6uRdciAgzADQAFmAE0AXaLMIAqwB9RcLnhyTsiJd0AT0Q/6I3k5yUHSLq6 LuIANQAjwBkAB5AHkAJEAUaTjEWJgtcVBiCt5BcqAWYAZwD0pNjvNbFLo2B6 XWECEwgPwetyiviCNCCuAe6uLYEaXYYyQ+A/HBE0aciYd1ccAOQAiSYk8CXe XeEEswIy5ON15USi3BH0L+ADBVavqxpul6Z55Uq2AeQANwAiQRggDBAHwMYF V6SVa784QPHPN0Ec8EgITNcASADsC+f1v4MB0QigKm4AN5IzwCGxvQicAwKs neqKlAHNawyQ9ZAEAAIAALd/V4AFwovgGah5FRPEHckAQADN6xlAC4AFuAEY AXhxa8SMgliAhskymCjoAdQAYwE3gNeVJYAHuANgAegAagAawFgxmdkd08mJ AX4CdVdjxvh1BkA1bALUAAIEU1fD5bXxNPBliL+KX2mv04NUkxmACkAH2MQ1 AZAA2M3tq0AxS/Z9Db+OX28AdIAsQLegDPAhBAJ0E9GnVsRK5fhVCCDbmwHc ybCu74UAgkfCmugG0MnppfancI51UBlg/KoEuAFgAaQAMgH9ABINnwCdmL3q NWYAZAAjQPl1BiAHOAKsASyw0wg3JfbQSjJ+nXXxMaeIMAGiKwC2iDADyANo AeoCpdcFxAwW72eDxYDQAKSko0mL3dYy+LqEtWTgAf4Cl8od3S6uCjs9oAHo AWIAUQAsAL4VBqAGyL+2X3Ne8Fch7P9Vr5ESsBtgFJSwdFg1gBlADVC7C9D5 XqObwFemgNfVBvAaJAMsAbAAWYAbQHGTBpv9lBB4XRWxZz+YAAhxdeE+2Gg6 YruwNwAzgA1gT6EEEAPEAKYA5x5HZspREIuJ5bzhABivsSc8LAbkBoAHIAwU yWwAVAA7QDqITRAsURtcUH2OpAivKw6gCJAGcDmKAbIeU9garNq1C4sDmALI AJ6FbQAcQAs2/ypXDJA2FbeIulcHLDEWLOBELC6kYrmweo0cwHsABhAFGAPY APAARoBgbCOWDuB1zQFkAZoAUYA0ABNA3FADcMPeIeGwVtfc3xwWA5IDuNit AdQAjzkA4kiyHIsHuALkAJQARQBwBBHOd3o/MzoGT72uQABV7PTgUolqtdl9 CFtINwCE7OHsCXB4nR+AzSSyJsihwPkVn6CQLSJgAjuIbIWOrLlnWHCLbQMg ZIsCYYUoGhnWI9s4KN+8IByaJ1kegQ/tJItPuBCgG7GxGJA/rB1iGKvX8L0W Euqml9ie7GzCqMG7qCAGYv2uCFmD4k9ADwAWEMkCXcMGr1WTbBcW6Eo0WMma e5yR8hGnrKyEiqFUhT4kZd0AgsSkrFQTJ7uQrRNw3uwJ0kGnbKMhJoCQzaO6 ANqyOIRqJk82J3ux8wlkPq2yg0lLLDl2KjtYxVvMChZPIAKE7JoUKEmW9ciG ZOeyC9nWmeR1KluLuh5ACBGyqYbMK2M2PnBD/Q+YfQyPqhcVLGQW+7k7BP45 ZeMje9meLEVQrOTCdMpuKd94rlXTbJWgEomQHV2SYkWzgYMRJW7UNAtLzDjB ZKeymoxVRF2JNgvYXMHiZicON8smBEJWCPuazckWCOwAOlPH61RWaICXDX2M Y4ezJwunrEhBTBHBQAO8Mg01eNnFwlVBOtuiQg5wEahoQdmcrB509KHKLM4u ZGERYSmeZGhWPBucfctOZVkoJK+ElFOWfYiQrWoUCRCzHlk76Hp2Ibt1q2qC BWqYLcv6bFdUk9ECyKMKaE8D14H5rOfg/4SfNfe0LsdODNrwLH+2eImXnQPg AVizU9mfgFmxMGvuETsiZDMEw8KRAkK2DtC6adACAVyYpIiTZRgAIeutQigE Z1m0dCdXJIt2LUGfncoe0naDzYFMJUI2p4iBWCw6ZVOb6Z4fLVix2ul1DQLA ALAAZgBFbA3ADqAFEMdaZc+eRIAhCdtOCxAEOLsCHEWyQYDhih+RbNC5VIGa Z4sIQYBxTRgA6HpReNIG0MIAIAF9LJZWfyAHoMgSAWwPdIBzD4nSTXkdUM8W afUDZgcggJ61N9B3u6H1BnA8WFo8bR3iC2C3S8/GacUAbAKIQ1MgTrBJXNF2 YdWCvAgKrDcOxrpHlcrqNdSCj4fAQQHzSsuhVQs2C+wHGIRvqWvWUosBCQIA EssAX4AywHMQm4VLE3kdW5qVcMiyVcXBVSuj7cIKAY4AMgAnQBSANrBAcNI2 aLN+Yan2n6JnhxAhEJCdL0E8VtmsnybyQmBqKmCqAWKXHFplLW0qJQZY4GOO Mum0WbJf7RThgCAYkNPiRrG1dlpbrSPBNlkFsBoc7CoMXte0nx4g+mqrDRw4 m+4AXDk1bbQWDlAFuAIwB2QARoDNJZOnKhutzTiRAXBrc4B07c3yNCC+9LoW yTQPQID1VBNgopoFYL52YYd+9AIMicNWrzEEuAJ8AeIFc8CMqpEHCCAKdJRM bDEgO6A0ZRv2ehCupdheIHgFKkk+5iBTJAsJJBrOCkGF3MqA7cO2a9CxZNlO H3YmRYBGj8E2TuJB0lKsazkmLFsmRBCAUruPfdiyInoRC6lKRLDAYLtmNdgW /3AwP9g8alj2YYtJxMHIAJYARFuRLD2DCDC/eQIYX0V6VACP7dDP60rPcAJc CyRTUoBNrQ+SbIslpAFUAci2fhk8wA1gNCMF8NVKaIsIxadK5xSAbPsEqNdl PUCxnNovrX9BuNYEgPwVMMkSXoO+plWWCDAFAB2qAWB0CFgrCRW2QUv+MwN8 V9kAZNshWiZrZ6q1fD5mbv2Iz1ouJIf29kcHoPG5Y7NOWlusqR8xcEuqnR4Q AQYlbIApgDLRWos9HN0eEKUJ+YE13rmndiu4najKAIoANADswEfAbrufLSJw C7Cq9QJenNEOhIjjUQ1IMjm0RYAsQA7gDVAFGKcsEoi3XtcigIXkM5W9lYtC HioOdYDAQPES/CqLzeqkZtGyQLtIpUi2CLDQTHxiB7gRMlu9hhEABxAEwAHQ AWAARIPDLdW1ZNh/lcN6XTG2gb0DZRYgCKDSGhCObbuwMK21HRZACSCvFdwm EAh/sZW1p9c2j5qZ5dAONHemfVmR7AWXPZp1vEpacK8DD42EhHgga/vBxQMc ZDC3CFw4KbtWfgshLAN4EjIKDdzWbRGh/gd9XaHmaUSod9ufyp9WNSAhjOH+ b5UpakEyQBFgWJAH+OFOEXqDFAKv6xHA7JemWCxgB3y4Xdi1puZBbIeQU+J+ CLoOY4DYJhRXrzEIpAOkXOex04NUnsrJbavEfQN8oKQIcwBhxNdPjja15eJK B9NSagOvK6Ega8AgYA6s/U6daEFW5AiRQ5vqVNfKcc9+64LyDSaw5gWDcvAQ Z5GyXdhUZyAXhji0fB4achObiFy9htkvTut1LVKqNTt+9jqxJIXkYzs94BvG ANoAmTgrAHqyTuAGUAPI1MyRB9kubA+wRTCYhI2IZP0yscdi5HAACKCmEANc 2FoDU8SvZjy2krsmOPvxcr0GYYAJYDlodamc1WvMxux2GAheLh1gCAAiiD2t /apMWMiwAcwBeEqNVOY6J6RN0FUuYM0WIYo9bNAePVmCvFyGJMJgMLmnYGa8 ckMKRdwu7OnpkSEFoAKgJ1m3XlclAA0mSusi2OJiQFAMwYXUgD13eoBigJMk AYoAGgHpJIZWr4FiyAMwcWECatuiLUH3DYAGqJziaR1k8VyGrhugKkquUeNK bU2UEd3ppkRzq4jaGNVGdPFoaIB9H7uAmCuSVQJkX8wADALu4Qr3njsHKBCw FU60bsoGbbhgZ/IFGMuNU0i4gtslwEngCmAEmAMoXl+XlgktxQRz5eR1XQJc C4R/Rd0iwBJAIvAhNDXtc4sIS4CJDRNg6MfJheo6m9YEDAI9QGfui9bSFcku ARKS0rzXJTy3C7sEgBWYAIhqawLbJLOSDlCgvc3qNcq6+ZQ8QNavcVDUtSOY BnAAl4OnrgAwD0AFXMzqNbZ/BlwXQFI1oeitfSCAa62y1YJ4AUJuMEl0NEfK cKkFVwCu5A1ACZANsgFYYFEbkcdU7l+3sCAHMOquccN+GN0ubIelDDAFyCC2 qOiHqoFnrVWzHkUG8Lr61ICfeYBxSgGzcyuSJRpKIWgD7thEbQ2TU4HYZfKE Ac51+YFzj0PBehARdF9qdjEgRMM1wPDJ8bDSnR4kd8EClUzXLmXWTIV1Hev+ dZOVWJiwQWGXDHDYbdAyAfQDAQroaxoCKFu8pRbgaecAoya97mTwDFAZHBR6 CFy7jwM8QHuXZQnfBSwgc08Wzd0iQqjzHLGTXNnYDFW2GM8c7rrAPPAFMB3I 0eC7d4AvgGnAJ/DQ8FO6dk2rgoHNpe0tgel17f41aUN67VwkwHbQGQj5q/Du shQIVID1lBNAC1DVjRui/FwAjpIKb94O6vBHDBl4CCinItkmwBDgQ3hPsExa dtmv71g4gf+1wgv/O0o69Yhw1l0MSBPACCAE8MkaLAW3ORhSYD2DCRAaxJaC YkmBSt0Sbw4GhiEPxDvMpyq83Jtz7FnBoFfhBf8pOo8A8k6vbccW77D9O+Dq NZoANZic39A2yDs9aAIQaqeQrdywJZJ3kRCpJQJsdxu0J9wLgXRyq6B+49dO c32zZ94wwFzxr8V2YAq8ATi24gb3n5sSDfB37cJGyBgN4i8wbhEhhBUg1etC oUCXHDjjmqWXjdkqwSE8EembGwk8b51WPuBg5MRlYUuTMd7RRQHTNCAkEPuJ A3W0jt7RxReggPn+9Og6escAMQUqwASQtsuhFQ6yHQ8ItMw5QLeW14vkpYKQ K6gInyRCLWcXp/vYbQLQAWwATYClqx4ABuBE7F7gE8pNIwNa7FNR0jslsNC4 AXh679y1raOXYXAoeA/wEiq8eQAxbpw26zjB5F54XTOq9QwgwHMwTHvHOlyi Kt69fwPb5LtXQrBZQCH1Iva9dwAhgLlSmQDwXVOJDQC+C4mEbJ6gOEicfew6 AWyGNdsOAXIgY5n91AO8eye+MjeSkx6AjxlSwBeiTN+9V4fWQPrx1LuFFdw6 AWqWF5nUgl73BqMU9Lqa/5yADAKy36H2vDp/eBJYZQ+edIBt3R3ACpPQFcnG FE5WHpJqgdSVzVtEgAIgAWQKyD69LhRgJ+gGaALYeYm+ZK0cDBBgCJAFOP3V YIpkrxXBIb3G63qpKRjuYF4rSl8ogIJBHEgFIPl6bruwxVUK0RjjBQeTGH+O azoEE0wiLNr3OrAEiAzwMRm9E4QGLZgqbcBcVPp2oCZSmU+RbrV2J+nzJSX2 fDm0bcH8QCwm3KvQxYC0BV2VeQAlwCn2WJAnKCBWc9G+KAIrzAHW4ov21UIA 3ri+TEfQL8MgcQkUUPo2ChdSMinkQNKS66tJtBVwfUMKGLTNJdQ3UngGtI6+ SdKh6Vy9Bu33f3lObANYJNMCG4OWLiT3gMj11VlKTsGIvl/qXPD3kEv8Rfsa f5l2XzSLpPHukZs6jOQ6fp+/vILbr8vA6xoFEAJ8oCIEh17fRHzEK9uFjQIM AfiBoNjaGczh1SuSjQKwHT2xh1/BrSHwQhBZew+AEaG+6jvwrgRDKmD2Fcnm f7OtY8kPQfOwuFDMxYCQR2JPeQAgJIrA/0u78CN6XbF2UIW1H0Yh3PgAfvYS 7ji0U4AaABogKEgGiCmEdCW3wtgcLtZQbRhR5di6tMS2CwSvqyRD3FkvUPI2 AaAAf0OsodaXCqACngJkneILbAC9rhAU81cFCEE8AQ6UUN97Q+8AP5ehzBss BRQFlVoVcBUgV4YeVQLr2cq+NtwrbskWA9K4JVM2AUCxVWB6wRW4xEsAjVSq gJ8Kv5VEhRdQBYwGGAIg7WwAVoAxQBsWDZAcjSJe7Ey5xt0kbhe2J1iJwO2S cjNF91kRsKAWvcv4FclOAaaFDSmKrIMnRju+3OXOgflPjYX+LwYYpAEKE19m cDHAkczY6wj39SoJBs+Wd1+vVICRgeuwO1DzHbOKgOOb/LcCQSvXQWAHaN20 AS53DVr3pCntmZjfleG1ITiGaFwVsHjwqZA1QA3ogFkL1QG97r0OCjAVWPzt skQPmdyDnvuvw9uFdU0kYzlxpMrO7dlXr0EFKApMx/iYPNroLIf2haelMAHY dse0XtfDWZxkdKALfn+aAH6fQAA9AN0p6MU63BikAbLB789UnknjiwZ4dCOM BRy1zOCeYXmA2ZsN5h8ESN8A0oFWsJdAOiCPcAAXg62R8L/XwiRWMlpAdANw fpnBkQEthW1SVFur1WtUARS8+QGvaxUgDAADuALYANwANYAnQAETBPyc7cIG rmqTRACOnYhSFjnQxYBYAc4AMwA9ABvgSjgFyFDieNkEagCjrM+L25s2PAIc AaoFoFgZb43MzIsBuQJsPQ56S2C0Qt0W6tsGpBPgNcERll2isCch81mj88Dp dU16EYhRk0orDfD1qzgQD7yuSrvS5M0g/vvYVdrFnt4JqrTRS50AK0wU0A2M 0fwIa8SLbhK4C2s60A/kARqqwD9MoKoO75Q3sMpeAZ4DGYkxLVF4svkFAOGm OgdAw8r8KbG3K8wwOEfQANp4tNz6wUMB0IsByZPdbvEAeDy9LhYgCgCPYwK4 KskAOkpGrFUWEUsDwAcqAWQAaICzK/dQbwkPbgzDAeqAUIAaQE9w/Up1rfw2 dKWxeo3j4H+gExqMm/yKe2PDbgAlQEoMHpeqyLpyD10kIlnQ4Q7IDWAhQQ1M ALkI1kNs77BAHlVK3LT0Dsu7wuH8QHE4DzABlEKYIEQG4Vcxqu/X6xodJg6z BCeAauHG7/QAdGjulSMOhr2uWgDhXUi4DlADYALIXZ+HvzLh70SBR4Ae1gKY /rIAYruCoV5XC0AUwCc0+grBVlktAJdWRqQ/WEVwNTJnIlktAEM3BhAGaAJc I/EAFtiNJgpXr6EgFhAsAYQGMoAm7Xm4Cxv0glP6MRu6mMClQNQBnlnjsR5o ZjnEvcMAgYyoFMEbEcmGAYx5a79jQ/Qyh/sitsM9EU+DVUgaMUoAOXAS0Oui aWkAPGJ4nB7OR0wDYGa4AT6EFViobxiAL8DHDN0ugzEgS+JD4JFYD5ehVBI3 AeAAN4A0gKlpI8DVhfXqNcIA1ZETxBegDYF3+nK6iEevNV21hV2AHswhBgog B9AFrDkfsZsY65pX9KOJCW1oLmJPrGW3N9nGhRKLAWoAP9jxrlX2NVEUqNHR BjaXZ8zubJ4YQbCAyKdMUMzEHFpCcYXGjxgANVV6XXdoW0nOpOAWUxyZxB4S dTnEYgDda0uX0ctV9L1iEfPEPIKW4flSonBXIWQ+duUTdoP4wBeNQtC6GRlU EFkGl+Liwg/WSZwnPjWoKEe5FcDQ7pcYukC+QSzIiCa8g2JicU02Lvwc8BL7 iV20kANosBb2STw9aBvgePQHyoQMQp+4Wjw6QtnSJdK44cAC5rVW2lSnHRSP jiwTFwiWAAXQ1vsldhtcv/JHLmIPQXG3Qds2cJGQWMbEdzs/Yp7QlTi9jBcv DFgDNj0QInHgRNwu3v2ZB9KPfMzL5vOwFlaPavS2i20FLQCJAoCYXlwi6A3Q AeIAo4tDb4jKgCiMkhZcitGQeoY4AJv4S4yGBAKEbYUAi8OpIIXBRUwGmACq jH+kH+PGwbaSsckyjj7hm4CunN5tcRHBQUb7+wIEqOaRHIJ7XxhAmvQ3kB8s NJUJ9EfzwMfYIerY/RibAYa3SmIfJhiRQ1CF+D/dIucH14GPMVVYnUg0HqrU e5HGRlnGcLX4QSQe2Mi4Vm0FIEQGgXqST/kxZu6Ww1JS3QscT3DyWLAgKIex jB0PQYAmLbKWXqzICw+RetHGb2PGU9z4MQp+rBsPXSPFIwICcOAAPTlRmD/c JI27l1+S8QDiPPAxLiR0iVnGygS1wXH4N/w3AAqwjLsXPQYUAWF2UwwKiz2l Nz/GdoBL4GhTWAwl5hxK7NCTq+O1MMkY+XcpDlH+jTvCX2LCglM3POwi5hjU ldIGvlfzQMT448shVjmdB2Y8WQOKoIuYGbFY2ASrDf4HGkR6cSrCNqkkhhWE dBs6SJ8Ab3lX0AsHgEOpBNqxlWI356v4tQR0dUuSdy/FNr0xbWkT6yBOtEu6 iG16AglQWNQ2WCw7hhKzFWSbNds6ANfAHjMWQAOgj4Gfr8t9LZlg1BopfiDU e0O66GMKrAyAc6Etfh4yDTJOxOMvMSgCCPBhiunSiCUY0k/6XQbhb6AzRlPw FGmFjM388f64jEgnQB+fINIuRSDKKaR4U9wdqy/w07Cu4eMCcLU41YADqAOE dHnHBWQ1wCHNiSgophd3B0a+JwJmhAV5e0z7AxFc3fyIOGQWstoAozAReF0m kV/FYJkyMejyrolbLQ3PkBm6euEdQp3gfWw99L1iEqXAg2K1gfjyiYw+PsOu AbjElh/Loou4DYAFcLpC4rIA4VixX6vSJkgt3hmLaQeT9osKIvZyOYznSVxu ZRfDl2Ix7U/gKDDLJSNziDGYhWGwX2tgjVw0+ByEFdbIbwRNb4RXgLxGrvdK h/URKoZU7YfYfOhHrPU2hKHElok/QlQyUnwiwAMEna5fx1ZI4pmSYkAhosGm DdbIBQJawRpZNfATOMJqIZKdgWR+cZy2TsAkiyz6EQLJ66cawRrZDpBgDSTb JusELo1LBQ53e6zJqNmaB0qpa+SJQ35QMLkh/hJnahOZr+I1QRxgBvA0zqfI AfQANQA8ADsT6BrZlDZFCC7F2mRucgzAmwxOFiePaVVLbuC2gRoE7ss9QCfP MtXJ7ORw8jhZosAh+OeYg+3J2+RucqWynTxOlgMsJjvGE2IocTpZoPxN1ieP adEuVITRKDqZ+Zgf0PQakq3J0acxbRAy9oQ7pBcLakevY1qx300QB0wwVihH n+4AtN5KxAA5QMshFtQ6EcMAx0zULVSxDjBR5h/wjyPFbuGcV12ppEpBfjZ6 lHcMXwAGwQBhl0w/Fg/vjJukV0eeJjp5NQCr2J1OINjGLWXe6SxXrmlABEcO de8AS+WfgO/VUMFFaPiikycGx2H/VPXIRWyonR/ECyUHfMxpp3Wgg2ymuBmg L8UMEEHLorO4WgzncCtXB1p/XuWWsrQACeNHLFFSCMpNhYTG4xD5q7xd8KJl IR0GHUSosjUZOWCbdIQOio3Ix2NkqwHzbGlW9Chr1RoPn2S6cleUPaok/pYI aJBo5sNuoltXoayROCCskLPJxoHdxezCUABCfCo0dPdpHyYZ8s64ADnGwAT2 jdeKuGQOsXHBiYi4XQ00IejFXI0JYGf2bGpwGhTDATyU4kv9wSHwQ1BDY06K BerJHGI4gA0gTttDphELLduxyGJ68RFQh3w5jhRrX+OIdoRcmtBJfgAKuxRH 3SqBOWDz8uesNzAV2CDHFDmg1mXwMiU3urzQRCLjECq4m2IcBBug79tbVty6 KQePdoD82cbROfFGmCCck+nLTEqD0+CgFUx6hR2MJlMTl4rIZAx5UBwHsAOE dD9nn6xBsRxgBoAcgEP5iDfMyIGxopJYDrCLe1KKDj7MlF8GgW+4q0jxfRWv Fa/DBswvgxgAuhD37bpyiL0WYQOvQWt5JVPWPDB/ieUAz1oOQU9gxxx+6DGL jXfGPR+IB5GZtBD08jFDiTWfD7Ql88miyXxk9g+8AVgCaosPc7iyJQBjbRrf mLfME0CdJnIAmZpZRjLfVdJBNRzPcaQ4psgwyG04AgvMG2SfAFs5jSsDaAO8 oUDEc2Z58WGWRmy/4CQUMIdacoByU8nw+1FSrhbbL74AyL4awD/Kj1hNhhKH Fpx6wduMgY9YPiIVkMMVMJcselSjMkshQFodGdQibh0V4Cnm4UXZ0RwgVTAA XCPF5p86RAbBptdNQyVqmocFycoqs/whAVk04GNOmGmT/WJ6sTItP3BiBhYA CwbF5ssOwaqZAbHQvJ/qcRGvHGKEQkAXfkFepiknm30MtoIOD6aHTAwEkH+e cL2AY0kXMUhwOlazxCfcAcQEfl0oMY7gOCAmiCJGisfNAgK/pWjTblCJdRHz SYYFEGKGsLuZtpAe8MZudwfE82ZABZh4d5iFVARviusDh95mKwUWJ3durn44 FgWTnGT0IcyYQwxwhh8yVweTVc0CYvP3S9xwRgT/D2dd+UGKQp7gfWli9Bz3 BC7FxGTLgThw7TeLcQ60Dy/FNbS0bKRYDzBfALyVCfzNj12lg4NAS4FEFdyK AUACZIAawK02B9CkZfQ6B0SyYoDVHUY4BpAAHtOmkYHDHNqgc80C5ux1FQOE 7kKTvlcUps2ZCkAGuAHYL/iYjdz68fRADLC2uwEsAWwEZgAnwGUXAwtz0MB2 YYsCiNqLnX+qC9l0fjbtLoDOhoLiQh4Aofu67NKWmXVoh0TXpFQgB4wEJKV6 E5POMOVo5RtgLbD2i0CkSiLIGJCigCl3TVz5nSvKI0i0/+Sz81XhNTF55kWM jBPPdoOypULzbhc9zuHuDs8A9AHo66h565wJhChMETS9UF9nsDOYQewU/r22 SQHP8yiIRzsWKyvEaUyOAdrO8yg/osWTAAx3nkfhE2LMmcwhrI1Zr+EMJgNA 4kaT3Y0OMorq0Ht0dhW3nZUJLuMULOB57nxpNjfCl8u7RQF25sRADkfLVSaU m4IXxt2JM+bZpZEf0BKjJ6N7XsXQITOig3hAECRQc+EATWcEwdyZglxHPhC4 DZ7GFjf38gaUamCVFQN0HT+UaoCQrv0AJvFQwEDcgXuHJQLIMfz57KxjnvQo lhPPDyLczxctWTlU8f0yxzyRjkX/KBnAYQyB/hcfwmq2YoDicoO2JQuOpACf nT+pqNqF5gc4Sik+bjpDFnGLTOcTNO0vSDgx9jyfV5OKe4HB5MWurklROAgn nrUt/mDi84dgInCKbTRvnT8E9gPf613Kptd/Lg/sJEkLf9jon7TSTjmCNkvk Ae5wp1hyIvXQihg5/kH7BCCZUAegs0eEPpAHAPG0ghsHzxGN4ei5iICGRijw D+CCgMcq9EPRa7gwmPziac9+UojeoXAg6EUfPkEvCK7HrCnec9I5ECkhiAAb odnQEgIHwQTCiHVadkFH0bIGm8u9sQ36Ea2IOM6qKNOll+cj9CN6itaEphDR JR+AIEQ1AMfB8ruAFkJ7ou8AXOaW7CiaY+CC1oBpixWRNmgsjH4AAkh3Uo0g B6rNypRr83Ag25x0RgOoAdYAdoCRbahAYXZAyCLCoFLLF9TbUwXRTXk9aDpj 0UqyTWe6wRSBVDlfIF00ZdEuggS9FBHhRfwcjkafAUy9BmJlAkI0HDmCXg38 D1PPqwG6kk/gXJChtDsDndPRXkNBnFu0LzAAbkGfnVcDGeU2wCVQEo19ZkFz eAK6a+gDgSKwPvBmOEOvBnaTPdwjgBPgLsw63jqnAa4HT0QxAFO2Ic2GphBc ZIDPtIP+8/NhRNDDrNkC3s4OkUWl8T26OxATqNGdYvOogmibsyOBMIBN4Oo2 7d7R3YEOHQatHi1bFkh3B+o8HTiunC6PJg2TzhvYltm0QkWxwWjZIQ2WkTsH dD3JPelPNK1XDRKcRAMYmKvMtTOM8QcxbXCTnEfmlonPMtmQrncsvgltNGlE oweVWNfYsabZuBmN1urWAQzSKmG7QZzWaemljTnbojMKfMyy9NU4Ln12VgM4 FfwigsmA9LaiPoKbnAOcmPXSAWg7gBlgW5FLW4skKxvHHUTeYX2oF9E/bjoT CdoAAgg4QBxAm8WTTjqfLc4D4gLg3yXQnEG7tEwvEg6JxwJMYOxpxhycdMyS FIbPiWe2wgdYNd10fg/ZKSaArmdjFtCZDbAmFT+sayW+BuGCsA966wxliRDc FUnMll1+dGt6UIIDbi9rQM+N/OcRtOAKmLvIA4XNpgclrCmyG3JgACTORRu/ XzmROS/BVXQ6RTtXZkMLriYQtuYSot1YF7lNMEiOpeMjdklTcTMTsZDzgkqb LAeTxLQR9GmQnVkG4D4zI/5Pv8dSsET57Cx+2O9VBJBoCwY3Zai46Sx+4NNx mc+DLg0KER8a+yx+IKmF7iS8zuB1kOdgHcSB3jo3qGF0y9s2pbRpQM2fnjGn ARKtMWjisxihlGzAZCsoHcw/BOqtgomgWyuc5k+/BmHKd4A6AEoAE6h06IcR IrrR/Gmxm9dPkTAFtlC7ERK3vIibo805cLAWxCOHpKHSjwMAb2r34zQxADqP dPen1do7L7k4W+t5DhKsRpQN6FD6wzmYPx1SWPcCYl/PQ+oFw5hWL11Ynge7 EScGzmf+9HzBNolPILqAns+ISWcI4VSAQM0cyE6upa3PyekqNWjyDQCO2PcF L/VSfdI+NPGZZMDHtDZiD+eKTWeR5VKAQmSkBiSfnX+Wu4E/4vPR7np27iO6 AQRx7WgOMkX6nmQ3mHUlfJvO/wHHBHLAsquYLLaOpd8W315N73H6+gyqrvRu FQA58hETNPFZBd01APCmIvyYNFWbs2rABdoydC3TkSO1oMdWtavyCOvfrHZq ndnQztsIbw0a+0xLLg/kqmPOtGT5X+guHQTGeB7KB9jOlepb5YZZr2slmUVz qzmRS4FMb4g68WyEOEcMZnyvoQnyL/G5pXscvg0nnr1uPun8wHtpUw1dOED5 pN0lF4Xu9IGgDhADkCI8DMpNSecSogNtHtx0FliTawrWQ4ILAcPJAxmwTlhr RIHOJcTRLOJ561xCvCvLqhPPJcStRJGgYV2pzGidpoLVZ+cS4rdxY21zFlnj H2rSTdPPqxpkAtiiJj73BJK2Ndw9BcTa1RlaIDbwCgrWNGsjLM56mUqwxVn3 rLuwYwDajoQVRLBfwbUKbtkE7cQULXSQSCClniiUixu0YwAiHFFDBuCm3EB7 XYMaRmdkK9L5aP2a2CjnASLDAemghn2hZWgHuFrfpegAkx6bHh/zlDwgEMkG Nf45G2WQ9c3tsyxRqN1akYsIQY1n7X8AgHhV6EgIEnQIz2ObL9Ra0FuQBlx3 gjvP5d28dUE6QlAHsAMELNvTnGDosVVWcb23PgPcAYLR4FfDteR6cK237iTH nRs6AoiLMeQ6cO0JTlwTrvfWrsyvQCBxdH24nlyfrkG3r4OApYfAYqd00FwL rnO4lOstba6Odb25xl2/rrGbcgDHBO/6dm267lzn0p5OFiUOwfC6dG22Nl7f ASbTplw2gGAqc03z7V2bruOQdoOIL0/UJ+q6xqV1kGWIToWwgNm6OyAmmJ1V mWWIhymg6yGs9nysLlN0Bz7OQGukYkNL2LupVaYUBdq9zua59R8SOSAydpeQ os3WTsUEjv60H+a2tnk9b3bVpmXC62Pj2Hx3doowD+gUBezVBhRtN1AGGEZw aIeIqMQYwKzXEzeunh5gsF8QjDnwcFG5gK0veEEwjaeu8UIStqu5Mfq6VDp9 r8MCaYD6wP+QE4kyzXmhpj3YIi/fa7H6hf0tBiykjpvWd8oeNd66GpFByENz qOfWHxwa9CH6usNWWEAoftuxLWsMSNplX8kngV2KbrnW/IP9chQasFDAzmKP aSUK/gT/6AXbTcwGqELAOeS0d8wxdha7hjZWFBrAgU+NXWgcNnUAPuAc6Fhm 0di/amxWW0VTAux/HmMonWqhZus59hHxWEu+HFxnElEbXmYktk25gmq2lo+M fMPWS7tW8BIxf9jIZiKeLCrZecS8QSW7MdE1BMxOKOsChWeDrBx4bi0fkZVc suPXpWwMxBNxWRerBh/VQrGQWGVUtlM64zTCpT2/sOUjEwgbwmAyx3M9QLvk eeQHZ4BK9m7yxFIG2CvccT0SgmopNoDUY4zKrjjGSQQ0MiLscbt5cP2COEHE BPS6gLfrJ7MSOogJDCXbYxDXZusFQYRXuOyPLmDrMHsG7IJGNNAauhCAPh3O AX7Rk1gz5I0guBIHOOvIo6hu/DSlg5PZg62SzFBGeIG2F+yUbQcbb+0h6I8K ey27hdQWJRJRE6iivVrnCSCJLV2RcRSbnx1S4B6+od3WCNajwLL6at3kEVmi g3jFF+wHUR/4gr1k4V4EI0LE2qMNj1jAenC1xt0qr0nakEQg9tMad82aag5M AB0PO8vv9Xl1TPrFeOgaEHdoFYftMND6vEoDOBHseecHcABi8lORTTBf+Gq2 tLsDpuK1RJ6mHqXQnCp5JBraQ+3uwBEwcFAUeETPYlbGJG0gC5zZlr2p3krz D6wkAYS77wg7rN3QqVmao5XKQGswoiNzQ32+ZjcOBZy10NqjtV27+uZHpCpH ML2inuJY9s2NlOta/SByaXHVbemr9c32ZvAFkDvvqPmh3+ubbcixDkEUmDEP tJkNbF2dZiWzc4sHvWAjk4V3mWJKsme7UHCC5AS7rRkE54GYwClWomCCKHaK PPXaYwrXSE3aqWAHsE2aLRkGGoN9Nt7ai7SzvEle7CYG2GwvUt6gJQuCdVd7 sKEE97Nac7k5HDwyECTasBXbsdlRMDaRsD0/0FY8Fe/Wng6DpaxgkVdSbQsE t2uFoNPvBtzXs10rjLSmJ9fKZe0iRHwg1SQXJhpYG8LNx+1aIULUPiScu2aj pO3Rg235drZ4dzbEtGHqtmcMxUvQZaYoE73b3uFJNns+o9jHbv/pqqA2gL5O tPHWTJ7YLv83UXJhQ2YnriPcgt81AA0gr3xzi3CLvIh1Y+p44wXblQlT5hIn pFrOPkdWNNB69cjtU2d3uE0QUWithgf3aJ0GyAPw4rrLR2u79Ge3pFDWXgM0 Eveg4uSRc8eXafC9tul5J10k4cgLtn+zTLBGXGILnXo+DS2sq+OBXFN4dFv7 N3saWVeTZQWxCjGUxlvnJjbCoWUutpJ7JVbEE8S9Lh/cfSyoAmjxaB3NzMjk r6XYOxPb1dCkIZUOStTpAeDaN7d9ItN4nL25DFvnDSIEX79BCakXOrGqhFpv EyDEYWuFWY84bC0twCmsa8thuNWjNTHy0Nssdlu/Ab4A80Mnt/jh2mvvCQf3 hw3BNzeog6EgkVchwCDEpvt9F+zoBFtBilAHuOmK/dIGueY3wNUasFAGcOrC JDigCWUPdhFoCSEjyuK+vFLdtD/Tchma5fa/Blrvug8IAFpLN+0vU9Lr3hGc nI3dv7LGRKqWo5pWpna7APQA/YuyNlPgz2DZZaN8rxM4jOhI5J1y1g0nAVSn OwjEVYJFQaq7KaCszhCsjS3dTQFLH4FbrVAfekpisztjLgM3ADf7JMDhlmJ3 xtrQHLg/YtsAcD257owNI73UsYLLgS/xoRDMhnaTTBNX1to57ZRaiK1WaOme LBC6Mm0qdeK6M2bxvgNsLt0lBG+oNcd7qtPKbfToq/MF9BAWSpxWwfAt0aXh sY/W0c3A8vkyJ9lnwK/eex3e0s2ON8Z7XOy01njPuncjh0x4dUlY161aIA64 DokukgP8pKW7rjxwlv0at/HWjKeP0itNkecIXHpfFGJPgNpUN9E69sQrMNr1 GXHcCm7BMde7SZqdpBVwpJ+UMAFPnKWb/XkGEEyiuQmJYExZt7G7o2DvmXV3 FI4NmTO1sVHA7t2GgAmAtvdNhMpU91qxJUsnUE+bNNjTdF1j91pRmRKihBw4 FQuIZudQd+6Z87J49WbwbsPe/4Ga5Zi2VP3tnmO/JNeIrOLRRZo61P0VeAPg dmfdpe8BwtwUcJrAaUwbu0GC+u5EnrUB/vk/7AkkZ3OVuOuFwULqDbCA6MUW MBm9q4j+6axbO4nuHoMSsFPdeQD83L7vdjsaLU1freEAkBa39YWNtJA/EngT Hc+rk+tJJMnbyR0HyAuAva/W+ASV0230HJHxpnjrZlcD7G1hb990kVBGO1pz EJMOVwVsNl1CJRkuLn9PrvMS10uPCBAABjAgAMdd7i7YR9uhAubVbR0Ar0No xUK6hoKRgoVtfiD3vblRj+AABUywAOzge81C0TOIsDPNBHA9YYaSSDAyEFNH nh3g18oTrSbQDpCCJYGDv8tWeYBZb2Bg3u1MdDn0lCm8QOsxAYVg7dcyFM8Q wPUDbAA1LtTXQEwmkEIIkdfWSEUyAahbis0/8KJxdxWJvL8FNfj70FxcBAJk AabFBHC2bl8xk0gzBoDPYv6HtKXJNXgKM2qEXSfjd4sDFEV2Y8LJUX1zUyTk 0voMsNsj4Dv4ag26dAubDncEeV/ctfUATsJ4Wvv9BMy5ueeHQrIRu81Fs1T2 weXWUuxuxfnyJPKA9mAr0xav/eWhN97641Q7q9FtFT8Eo28ptolAks0w8EmX w9RBXocC4oLgaj3OtEys/UavKkm39WJAFIXX9gmEr5/LuGsSbXHhytyO9fsM HQ2IZcT3Myf8Cp2l/oBLse0A+DnLLkj7aC2YVrv8YTcyZIL4g86LD+4jvS20 AcCIb+8e5im2upy43lOMGiSNGcoo8GAZaH11OzNi467WnsxpxFHasXijDmxj w7kahW9p+DL5G643auXK/UbRF+w7ABxAKnC1Jl3EAYKKeL8WrxhBcXvBxiSG yUiHhAu3tT38DYCIW5Tpw98IvE1D7z/8PCC03lm+MuvhAHG2riFG02zD5T32 IxYEoumfgOIpDou7xiQyAbOyCHFsYq2a/IkdhVpjEpeIV+svsvI4I54xYALW hT3iBeaiwV8OfFzOJokXO4uDgskJM0kcM0pB1nd/rzGJEgW4YysXmDsQlwkW MG+bPXGJsc+5EI63xiQSbCGfG+GW+NHaKJ5RmDyxOQWgS/E3AsHWPXtzY4rH tWLiSnEFt1F8gUoS5yX0xNObPfFvI26wfDxFEPsxjJlkIfH7ZmPCShICY4ir EmcxPfFBYePyFh22TpUcEe0GZgdbc1Y8JJ4Oxb/6flO0Itn/U+JW4nu+5Evs C5bROVwyAIcZANp4DYzPAGB29eecczAiRAknmXVRtZnTtVT6438bMwwQ1Ov6 wGEHDwQinB/hjeDnfexmsj/RUgQsqZ8nuudxeA4ExifPY7Q6gFM4qR2puEpj QKiIX+w6hM6R/tigpSJ6xwoL0FfaM0BbcEtFzAOswIGK8QXmb4W6iCCFoCXb JtHczXHVtM1LhWxtjpzsotEOHNrm+MQAaZzIvo2TEiIEuL/XeEPSEUhOBIRP DzqJdcq+ZW3qchAx5ocvi4sL0EHxeFigCJ5IuFl3Ya3DlO32tXX4eoCvoEHQ Jvvammr9eBujl72oXkvj++ajxPEBuSuxKZDzfo0bnG60d8v4rXccOojM5GPy DlUDIwU4dinaO84cWMdtgjuKIwUcT+tv9RIYFzrtCtIALAant6ZZq4DQvQEU v0ERT8vAeHGch/aDXWLHGCJ73Gye4s0gML4SmxjkpC27HeRQYpzW7unRfjNI nJfjuYL369JHMAme7I6fx9WZfMzXgZ/H/3Qk97pGCGoGgFl3yQ92VZ2nLu+6 G3LAq3CiOEKoaOBDy46zpp64qtPsGJ77Nj7E3G9OAJHSZnL2Hy2c872ptvw8 DkACLLTLtp2cqwCbA5J3dc3kbYAhcRlaXxAkjxtAFSbc0cxC+XghERyQjj7+ D08DpdQqc/Sxggr1BY+HK4lwhfJ51HO8kJ0YLw9wEeYLfTjPeHlgi2gmr3oM JueO+gLJrF7DiFUjyLq2bNgE68zIuIRARYeNKzy3nm4GL1mnOI9cWlkuoEeb pgYSDcYhga7cTI5C6qFymSGA3gzUIUmZWM6AqA0A+BiyEYFk+d1iWU4cb3L4 DNIDMXGRorSgIrsrR+fCBOoCBUyTzq8gIlC7K2rXNU3jFAzUgJp4LJd1RSGR y8N6x3Ae+RV6czkYlyXbWZHkEYLkt+xXCjFSIBJUTH7aVnIzwJn7Q6BB3Iyz HcLBmJkVeWpiL92GxREsBeLgCwM6BO1PfmBpUzqEDrGXc0fTqrr6Np6aOCT6 MJXQLwirJokgnFkeCJjHsFMVFzsgQBzAfmFh/jiNFALMcoOX+DooVcIEbEvz HAPmawBXpR72ixYkQIfDHOLYzHEzQM5cMKV7PfRmDUAh6FeXZJFgM25SFEx5 LbYKKvOm4ueVFmuCsFtSma3kFzsYrjfj6meVBeb6I6Tc1AG/RmA8QOpHvNaU aBPj5mjCs4On3KQd9ioCT8XP53FQb7sRtCz348gywiu/Qu1Vudx8ldgK9hoM CdTaGPDsOGKB9Bo2IFVSpYsGG8k3d9zc1BhoNmAaYa/degB9tc9olsuNIHlp ZDwXY3M7gmPKfwgHCCr7Nc6J0PH/5WYUqNsh4B9sDOjGaAC7seBcPrJXyMbN ig3Ep3NGg+qcOP6/jDMHzmnnIWc4SWAc/4gDwAx7xtUAZwBTbm4RjDhQiAO8 osgSPIym7Gb8iunyzCDoC6KYXvJ77DkiUPxwWpE7FVfiLu7b+JUZB7uHVQPY hlfkJIJ594jgG+1FfiOAkXvjfYZTbIkgsgg8jXxrz12VN4NK8yd8NUB/JIFX EE3g9/GatyhYHE7xHhHwCMbZFL0LeEraNB6daK22BlLKcl4CekSQeUkcX1AY tbEvqU1Cc3Z8e3VevVifxw29BqfTrpUcOaCvVSnvLszjzPFcib2HJNw3z5UY f9TcNekRwWRTFDkQlpwffwLjx58dAmt5QcA7RJ9/rXNpjgcFtJXceA7U/ZMT xyvMyjRipMVuisiM8DqKjCvlP1nQJTcie34eT6Jf3fbP1+GG96pcNSCxw5I+ q63kVHSVgBU9sX0fz6Jbdt3R2fEs+ikWjE4cp6L3iMnopnECwYkZib4dF1Kb xkMLNVs0pn3Wvy0pDwvVbJ2KQlj/8X08Vg0HUAPIYhvlpF5SbmA8Tosbf4n3 X7PjiQrLLv+8a25aRc5qFUy59MI8gO5V9IxDGKBbyWF25Yk9RX2A8YpLJY73 Hocrn96mdnYcD6ByasdaAAeGKu5VuY9CRsQEfJxnx2nmBeLDLYYcjPxKD010 CBxTAuyAdHHQ79QKLg6GA1WSG+0uLCuRzykj2iHsmcu79ekxAIQY6lufJgNY JvW69eneAEwCmp4DEEXbpZfpT2/NARNgr5ADYObeAJgAkuoxgEsu6FUdOJ7n uosIZQArABoABjDkZQLcX9HMP2cObRngCnADiAJMAZwAFYFwrL+aZaCD6NAY ENHgWus1uDCdiyAcMAgfeqHf2mOva38K66pQB5B6RAQ5T8TinxTi3EihbqhD HI6IdADBZIYAOhHZe3brNbiRXANUt+D21GnUVqgbM7S79IV8yjSXUyEl80gA zTUHqYW9Jgj5gSaS7Q2c8aDpWoWbgUNRigDV1qU3T+eKS4GxIl3JpdFB7g3E D+O87GIMiFG9BItUvztPo3MA72w1QFwPmu5tmNQF0z/qzoFYgf4ZOc07lKcT Fp45zAjrt5jw2hiIxszU1MdO1/JwKEeVCVFT5ym2SaDpBwQnYqVbnh5bFkWj XweTQGYs5oOoFFxxaGoUmtHp3lv1LV194nCnljNvqu08Fwjfq0FxYo1OT0Ug odXXS7ui+oXmOsA5NJ6HlH3oj90ygPe8DWuNrUlDFoEJaIA7nAWWSFB3JRko 1APGSx83ZW/gKkp/pLsGNU7rBEfcriYjsPyxrKlTpA4F9oRWrnDAtk5s5ocX 1TkEXMWQbktXVa5ULyLHN2kFTHR0+r9aBtC6kaf/qw+LIPQVIoWAuV5TJxvI AFg31XW5QZ97qmRJF6aTDXrpZAOf0RdA07vE5pi4SMID7WpNs3ldjqYiz65T CM7rIl9oOtkAvl6Ala/LDejrSeFs+no9PADk1a/H6koR2fUAZQFTLJ1dh6k6 12UlWNdOMS5WsK1UpxP2MZV1cAL1enmadmAUqKnDAVLC8OnzsTC9CgEH+CCi ubVZ7rr5M4gduBJKMyDniJHpXguDchHiDrDJeMqmFordH/WF5oZHWwFduKor 1Rea8+567/QcEyg20JIBILHbx8zGgfP4OmDTk1pYZY+ZUoteuk35snhsiK63 qD5T9zg9n+28qD4czEmiq0GPN3NhuiuRdSnT7AayNkfqW3bxAIBdng5oNk4r 03jiEoJXlLXxpT4qN2YFmqWdIkertZb9M9VezkluFc6SBUR2pkK9zB4DGCva 2SHI1V89+5zdzX5pdgAOj7Nk/+02+4CgHftnx7NbEQXtH3VA8xc9zo4kV7Sf BwSTaXY0uzINziNX3JBPDyztK2IBgceroj5oHxAcswcEh9xRtlId0My8bQJm KinVkfbPFPN2m0BKQDUaENELHeIbNjqd1W7xPPNcG0cKqfRVu6wdo2BKBZ7C AaToSvXQIUFRogABlCLU1DcyneQdtG5aoS4uACbcosvrb4abZIFWskw1hSz+ ThG1DnFlZmada/AxV7CPFD7FH3U/5leYnFs0qKl/vj1MHLjXZXld0dN6KqlW YJ0KLWaFukF7MFkeSC3UsPPmSnXHRJNQT0tFmEVCo4XpIcD60HBA305vx6Ch J8vrwRXB9McpPyAyPoQc2fNHqIHdwHvovf0/8DRsyofgn3YfRe9RRuQ7Tia4 EeXpeorLur56GsFirwOoATDG3QrrrDgwNVGZHqmjB0XBYFmZ8UydpfxRn0jP wDGWZ8zxrzydKRvdnq0X3BXhmgM9QDks396FNQPUAOAAUQAogAygDKAEaMd2 E9kAeYRuIpjihrql1mtoYtMAtAExwBMgB6DWbbfbY0bRNwKvqxmgBWsGoKfD CF6XCFGhgdH6sWsG0AKYBj5xToBubbJyaOzL3rvDIcu7hIUKdoaSGa52hyln mT8qMCjzQOQ8rihOL7yjAaRJNvbpAWFhrihCE03LDwQJBkmnNUzY0+6/MIlv MiTL1glqIXJgdEx3zwSuiQHVnXS/q9RAaGAi0LAU3l+YYoNDoCQ2DaF0alJb 2DTv9Sjs9rCwa8zWbYz+Rt08noYAtFgAze1Q/E6GAOvPDkW8hYRAWS0TF9wm 32HWreDke3m29P6CkBTqBwaDIlnCAjQJGyEjaihsXjm08IuJAWEB0YF0Jyzg AS6BcHLnu1EgXjtXV7/7KOSiceHmO919q9COVbtvFa6Y557cYtoymTBGFAGS LymSuna6zj/HRBAGcITXwhq1/yfiQbM5y+51DxusySXvvIuLnUuD4BgN/3PP D/gHiHXoUGudTQA3919MI+K1UogELfBU1S55NwMk5PCPTYDOcAYhA6seyMAG 4JkZQ2OkE89c/hduz75bG9iS2fczQJoWGb2MJhH0Dv0J7UMGPAakY+51zKXV HGvSKF0gMW2AMKDXRekCBZwkVmwKa4MWpXvM9DnPciHTrsxUbNZZquFmv3aj XaAE+nfXt9f9Ygf8RD4TyjfVfgTadw745VW37qTT3Z+JBuXJJh9TtVRxzL7L 0WgAqzHv5hse7dAEuD033d+f/j+d9R++CshcXfo4DK5wl+3Z95nQEM8UmO1C wcHvgPiagQXdf8HkKWAqjC3SVjtNc9lBmpA30AiYetPvb/igYyd+c+nupo3Z 4TkvvWrGu/P9f1kTxQg34XkEgYOtOqu66T5X7HbHp3O4zsggISmeEov7Brwf whoT/W7J+/raKruV/V+OaYG2dkxSufN9QrSYCf9+qWXT4Pfy6vXgNcF0lIcn bn/LuPh5mvKSMZCIzxvUpuRoTfjhttewW4tp7iDLSlbpadq+rO/Y/5d9fw7o xibLCExi/GkQMi2Hz77TDipNl2Zz/DkUWamPpx3E2QQ0oXetI/idTmE3mDU7 yf0XFAaqzZvhNvpAULtTGEztyPizn75a4NwCaFuuvIMlmnV7fMRxt2mRlwBb lFAbFG+B81t9Oz5FAL8O5PEAkUusK5e8ho6LhxDSG2vudPfZ5f/d+R6FIjoO BazYyPeMk2BgeAtINMf7a7kIm8uIggVQj+51zzixBuDZ5p/DM/qtyryOXwOg C1Z3kXf/hW1WkdexNEKIyZvyc8XdSP6U+J5x0gPcJIXmPOVT991ZLEMGYKel ImRE920kPAtFxKx2Sc9m36OcandlygNbjvqWnyJMERPxypR6YvQ9Lz9hVcsz BvNn+N24/BTBj5Ae+LoJ5tGycmOcfF0eMa/LfkwHpBbzfdm9fFk8MWi3chAs 5k3Nz1aa/BRhq70b4bE/5sHvNUUJQ4s3kYBgMasOs9nToPkpAo/6MH+xlMxn tOzyaAA17hJ76dNyfhHzf6XZvfjDfG3eVrACD0jT5q3FtgKMN24+od50V6aU w9zenHLAuzIlGuxT1MzLRzo8jIERLv+bID4ReMujF/yIAZpgAZQA8v2CN+Lh eECIYIdktuQ9XymDjct/Ecg1e3mJZjCuCU8gcMpXibPp0gP4eRngHkef769r 4okIn4Y/bKuXOF+UH5S4Kv2IlutD4l/dXaBQjMVDb7gycfCV03ngeet8f/am jQ3gaAevgR3AOoG/VrsPCoF/svlHvPO9eKl2F1OvMBXjL3BivLiABtChfwOc YifJKuXsO4l2SeGRJylcIL6Gxl33ueSdRLtQlAnk0oQGvFvr74z+a21Kfx5O pjkEq8q3OZLcDKAHuAHMvEczNu/jruR9oajdtUXyEugDPrT/NpGeYDm5WAr8 LNPGQ6dN9RlgdfeClVF/Xj3So1dLMGwYA9KduNdFAQ6aWICarYOMIyuS1msw I8IAM+rDuVV6N+B1ZUaYTp3I5ZsfWqe9Tn8sKAqAyG7EJ4sNvJK+iCBBYQNA B2+6WcSHNIydTH9xTkSHv8fbgtupYAU7qg1V6CAzI5IJ/fS7MzOiLd9jDE/m KZqHAelNvY3b/t2gfYm70iP1dIIzQG8uKq/3+aiw6pUdn2bpn0j2gLClxazX 6evYcAABBGZ0Vh83oCDHDQb0B4TnAGMguh6s55vbcL8f6iAOLU+RiIvNGj6S cv8ImmaeYmMzQzkav2MR16cHCEhURc9hWDkVmAgAAdJ+dIDSrhhVWc+70NZD zmjZPJUP97pYU1+uPyBMH/raiG12fS0Msb63FvtRoKmJj91svbvekTADmNSD vLHfpfp2PYQeEcGrn9efHRARxPp2fVX2YH/aXSzk5ruw+voOQU/APs+rz/KU ckHESVv7gVX297FyEhlnl3O4RI0HfS+K13Cr/wmsSUfzyuWmwBsa1Myr/wl8 GW7EPALSAglNTF7rnKIpq/WT7tF8vYRg/B78dBnE4tHcopHSYbX+bdGy5xHk 4ZvqLfvvOtvvlAmyv1bCR8pWg0nxw681Uh+IPBZAX2cUkHN99emwfM5rmIa7 6RGQR+K3OtTXVYkGIMIdBT4OvI2JwYDAK9mmJ9NbsrkJ6/pZvYsEdlnCLkAw MW8LkksdPaHeRVIfqHacpTsEute1yCfRr/7fZg34NXzStmvmNcS+CJGocLkP Jh2CSMlzut4Hl/uDVSZsE+pRI0/sOHabNZAHkFor4/P1OUnZeFXY79o7vMWX d3kRf6l5I2WYKgxTNo6zzacRYngyfYBUPDABRKjbI0v1wuY4AHNWWa/RhA9o NFFyE0AkiYXK/bx5r9OvJdzETsRNBkWBQpTZfakTXa4D+FiXMcUA5oCihti7 JunSbvrrvR50Vu+aZMmZenfh+XrfIc3WJ7mvnNqH793QlO7sWLyee19EtNnP u4PnLvfewAcxMT1TrDDAsuv0OfNftMqW5a7vTpoDE/QHwPpji1jvsp2m1A+Q EgjJBGLNN7FbWX9UbDxmnV71DXzhrh0COc5F4FTSxnKspfoI/hKbgi9kCZc/ EF/rEPsGvjJ1MIgJHL1W6EP44oc3gn4+oa2XrdPDFzwipV/5uwt/OJDdEV8O x/P1bIB1LSgMz1OqJypch/f3+cfIAicb+6ish5Nw7W+4FO+mIsPgCGibXORN IwQN5EZl/WnQ6j6vdCPsKvf0EPvTINb1DUBUN1EK4bH1JAJMIvNwbF+AbNkE Vx4K1vZNeBa/7YdPQLoHCEL3rsoM+8beEYjb5SJs6vlnuOIs/gOBQXy+VL08 ZGkHiHEsvpveEUjRe9U7Ag1t3maVOcqXe7F1vJ3n6x2B4Qe4NPNQhq/HfxoX MGsD0vJKOp1Mii/B8DsxS9/3QgLCAhngZ3sgh28T6j9KzQgDJkp+Vr9Pa5KO InsaQ1fyNEFaqlqnDxzQAEgscgDnIii/QHDLX7TnT0P1tnxc/qVpl1/BxuVb mkH5b4AbN+r9Mqm3j47RDojGMUVWvhhh7jgBRKPX8v3xwrNqhFTgUBy0bExY 6ocDDAMGAWc9J3kHKCVqZyyA2pmNORhfQT9WvNBL0Q7HkfpK4K9gH62tpxV8 852Ie8mbrM/xCFjL5xpgXfP5/GfsIT8fYr8OPw7rhboK5saN/WQ64b6x3zDP AKq72fQJBC95sQmWwc+ttgvRbvg6PS3bia/WrXnuM2f1rIjK+yVegpGJB+mf OnG70/koVHVeWc+K4OheCJLq2HpWxKIZnDF3VBvgjNGixIxE3j/+gEB61+if OsnQxHpWRKPnBIGLhgJax+UAvOhIfV4i0HyF+xCeYle2pfqlfm+uA9darnlZ gn36RYNAM0rA2jcrlmhWuVn6p87UdnE04L2SnxGf7qX6uryZgCy+S47VLzkx 2GP6p06CrYc9Od/WBx/Ng2k3X0Mt/REPvctlDtXv9Q997/u//ozar3/0y9T7 9POW+z0b/Q3/sA956MAJXvd332+IvTIF8nDCE8Q1kNvXvI0vhUnRZj131+gf AWsGx/Cgfq5eEju2tyM8B7z1pf32iLA3vQ7SLxkinCP6GSTSPmzfQW92TMJa zeuKhXscAdQJTduOVSQIEnL7HhHaTm20ZgQEsKlOIxyPwHkXKo/AUB2pF3TT AdBwc+lPr/A3UbebV+5nTGb1N5LdPtLuRLvxuEaHM7XRlgNs7+k+uy8cqHUD dVGD8NcdZd3V3Quxfwky132yXI3WpERzY/8SPOIjH5d1yvrABfMZv58Ex1G7 6UHjivE1HwEfwA/KHtqXxuv0AP4P4qCcfI/dzwMIpoHnIDKKgF7Xcq1VGyNX 0vHbZPrUwPgzX60lcxsA66sdDycCfktODxAHoCeKk6EEqRKB4g/2NeGm1JDX 6emJnWTTvdd1nW6iJzkfw6kDIlk0AEwApZuaMCmyBna3VwXOoQ7ZI+Fg1D0K bnX8WmXCexe2bC9x1evWCewJvL/lLe57MTSbrDLfFbkGU2lN4M3APNNSnyBw L5o/gHmKQwpgxj+jslSStdvXdYKMwtw5e6q2CPFR7Dm0aX7UwElg+rm688B9 z3P8Ii9HpFHgQV94ZWDj+dX8pdQxLZo7zn94ZrH3pwaT7nirZh4ahK/XODv5 n2O7q7sZNdpyC4/nn39TGOA+SPez0yPS1O57VJBTxMu7gMUWO9R3+lCMhEIH pEn904iQVeHZkNFBRvU7IumH53eLG0Yu4gzn1559EM3YnguYQZAe1M+9kAO0 YxfpDdo6AcPAlJ5RoMWeanN/u+kiQp1g/pwIx/MfnqO2FIPcoi18eoBMBh4D C5TyVllBDsyAR10maLb32S/bgqntvpK/0a9CF5qH6IP9aCcfxevAW9XObmc7 +R/iAuiV5kVC9FEez/HD+4PX826J4oKg2kFhb+Jvqv2HFG+A/1rWw7zEFvjP FRu60mJUL5z/1LlKzGZ15D2jBssS5bl8xm8Z1VNUSUe4ZIObQ7Cf1326y/fn mDWaUwkZESW/0R82MOWaCA6B1Xw8NUse1M+aKsFy9MD951Vp5yLh40Cb7FWb 9Sn+aQqdeHkVBk7yT1O8+9MUrNswYhTqigbMfsAr+8+rDF2kf033Q/iJg/kX UoHbYwASeLZfsmy3rBkUCL6IsAp7P/eQV8C6CZeTCD459n7Hg+XaKKDnHfV/ CLIUiH7qoZyd5B+dqHEnxfZ9ugwehr6bdnlAJDNXyZf8vIvJ9JqYdfsaAByO +fH+gfpjA78aoW17+6jYxqn9BXfF/MJ/rbhVsE2y4TH6YvJPwwjSzezxz3z/ i+XeJH+jd0NzGr+dX/wHsA1OrPpGQ6zajhuQCmp8Ybjli//R/xG2L18klmpu /LMvcYMC5qB/VC4rCOaG/j/wr8tyeoeAA5+rkB9IyKn9hsdNnCMOIxC6A/Od exT9W8tgO/BfTzt6dUaSAQq5ibyh44xf2YEHUHacaM1Tq5eqtZXfVXmUfyJK B0ML71fwqx2/a1Brz+M3+vua999sOhpg/d8SoPVOplv9LpLVdlDbhC+eV/bP 7U+eKOAmwIyfVPwgyqeU8ynIDXwyTRd4inPKfjtLQ0Q5fkQDnyQlbntiqAoI eDUerRv2e19+CyqwAiAC0Ql/f41+RANlaChdlwqHXml5CIBnSGp9TUS1SQZE j1WjC81mM34dAv9/YDQMA7BEXwFsAvZ76HYYEC4SQ3tEOGJ5CIDwc09KxEpG TSd8GICsAa1yH3ugfsExrXL0dSRkR35pAFxFbQN8aqdY43PAT5dxzUm4VNht wm0qBl9b9wb5fyiAaQpEAjlgTgXnAahfCIB7a1FNvQGGRV6APldUYRcLfBJv PAiA4gGZevRnmmYuEp17GUoQQRQGFQdte9R+NW4kNWt9K38zfo9bogPtWKN+ UnVzU1BujAHxB0xEA3q+aFJrYzT5ajo5zAi5bVZ+wHNCc2NFZgB4AGoD+TMS Hmh8CAW9Q4JFQgMhWQJ9RHkygMBzelgbaHJ8wX6mXBkEvmzAU1ljS35qANsE MX4ado1+oQLlAaEC72xHWB8nawCSgGQAcQAjWI4JYj/gB9wIhYAhaRNgJ3Yz fjlzuzSYQLcFOX5lbPhHoAJ5AJKAOXMxACJjpFx4JxtHM35uABw4iHijfrQD PEXnfjlcgE3TeP5+tiuZQCxMOX5Sb6QU8HSRf0UgRwHZaxAPtTPXesp+QgIq CvkUvmF5BBN63AN1VxcCM35nP2EyWnx8TAMF8mEsMloNdkr3cveARm12afkC 4oBGbchKBoFEAaMGs2J1ApJ4BnwJgXBK1Gq9ZNN+7YBYCpxeCX8lX49dbT9r KIUIf0QgKNl+EnkaQ+BJbnQCgVQE/AM3fU1AAXkuVMF+5Ew8dq9BrRsufkt+ Zz8uTK1gbT/JWUh7cH5nP8hKp13HTGoDIIEkAgsDlXf1ctVfHXjoE/4EOwQQ cOB532w6dDKBR4GnAe9XV2bdbK1rOYFOgdBvO1VbRQlojXdNgW0ISmjzAdVL OYEEApl+TEf6XjKBPgEAaWttR35+DTddZX0ggUcshkfRfalkJ0kLAn03FQfL ffVnblkaAVlog0LgZieAMoF0ADs+AmPNdWmB0CQDX3xMHyXCC8YB125RgJV0 hYGTWCBUCkV+HrdiknsUXP9dgkx5Am0M0XV5VOIBngPmXDmBOlNxLeB5o3Yl c0t+GGMRRasIslgZe9h4oH4ZA35EBn7sgEkN9gunQ9JzbVhNRW4DYgEMArAC hYCxgUsRrVyaDF9D6UhnHRBwYwEVB/5yuEMfJzN+Mx27EelHLGt0fUt+WjWl gFNEqRIOHps0ZwaqgTN+2AGkeHQnfVPZfpuBahCVSnJaEgy0dEd+iQoyIlR6 mgzxB1B+c4CHXDJ6yn7sYZx1jXFwfoMSN0l6KVlmbIHBfhsZjkyRfY1+clQk Qfl+h0BpWm14kX8MAwMEDUStcoN+JFpjWuN+MoCmVcYq4QMKEkQDmHPxgV9r sl/yAdNcQxV6KXQIxl2ogI1+dgA8DKKA24A9THYAcQA+blNHA2HZY7d724DU YRZ+jnwzfp17vleSTP9tdnZUBPlBMgAve4dtMXJwfo5IaQBQAuUCa1y0WNxD 2EP1f0kNegAzAE1Xsj3tWDuCzXnNYV5X+UZ/AX96S2y9WAxdH4LlXWkAJEJT AEsAAWZUaxZYuFCVgFhthiijV3SBr4F3S88cKnmDSilalWU5XHdL+ghTVwsS nYGCW38EjiKSZUN71SgedRgQHQJ/YsIIoTuwabACbwTFFeAoa392gqkFnApA V8l6b4KXRBwD7jrSbYYaaAcNWtcDm0stRREFw19IctcDxwFaZXsK5XybajcD uldFYGQCYFmZgll1fniGKBhL1Q4heNJrRAJyRzdkF341aXQDCwZgRFCCURGt J9EJP1j/HIhadkn/Uq9MTUUwKP9tqFkER8ZsUIJORZpij12wAmtEPEUiWWMM hAEKfhp6woJLCpYDEH2aZrACz1o+AQwCXxhoJ3QK825iCDsE50uAbxl9XVhi CL1JBmV2aRY3OHoWWL8VwRVNWVxonHdACtdBMiL1FcMVlwPGgu54B3UdCP4/ PX3dgqIPjQPiXU8RW2nGgm4AQDmXbRcCkBn/gmsCeIA3f/aCxIINfGhFvHFp ggODuFCvTI2CvVxify16UDTTBzZBEVpUgmsCWk0mgR2AaIHCguBd0EZiMnxM aG6ZcBxamXBCgotMqw2sKcwIknjRdf0wizIsA4FXyXVBA8IBLoN0AFhmMYME bIoeIlgRcZ5+IHdFBP0wwmVQJ6uColRMgqJUnUQmgAVJEkcJVQ+DnUpJWw9a ZDQYAVZZ2kSNTcIVdgRGWKQi/IJ7aBl1GUoig9xw30mNSehdggTKfz6DjkUv cVM4LHFtTkKDwgFlgzCDI392gmSDKnF5PTeDb4PYATBobYM4F45FD29SOop/ b4J4g34NAoNBV/VnVUnqS8Rh33VQgo5FVknIAWZogoMIA1yDwgFiceceRAFw Y1hvhGOoc7NzHYOOg04K2112fySDjkXTSz9YjYNHCI4JwmScg2dBJwvhIQhv k0hgah2D0kxBRztM/IIMJ9RjXQVsXalLnIOwg+t6UwlCg1FyEkf6P3d/higw RPgEOl4BgfaCUAhgCo4EXj92g2ODI0uWSo9/AwXcgr6D8wgsS6NgFnn8gpUb lkq7RRpRm353Z0wDqzu8ODduTjrSgPaCf4F3OOI83YOZYot94YOfPX1GkwKR Yd+DCgZEg3+BtQFgZrUBaVrtgwSAWgQ0Pi0B9IPYOOCDvoOlW2lv8DjCCCdm 9YPvgxFSbH7tWAOE4YNRdkhh3YOvS6tuHWRMAwqEuzjkg/s+fWuZgrQCEYSb OBQicVroQbZ7z4LWFakG/SmFbyVM0W+cg0BjISqxfvlTGX9eRS9vHYMOAp9c JVBGWGJ1aGF1V54Z74MhDXFa7XcthNdcvXfcSXE23H2MaVyDbEkdHhZnNn3I g8EfEgWNCdeCGlEAgXyDbEkcfBkE4kAER1CDJYQ7hOUwyku7gkAW6FwzAUg+ mEClBpFwd4OkYGdpZANxPh8Ccks6hOgBYoRyAyM0ZYQjRU2EJQhphBQCojts hFFZ74N7awBS8E+JCpaDdYQEAsx7YwoweUSDxUitYL53tAUvcfRn/IKOUdAk v2MyIvtii2qQRYeEHhG8BJB18hEPhMRIa2tlK/MBAGffZIeE5h9oeTR8LWbP bfaCE3p/gXpdxwFadFQEEAdQFu1eAXjHARlKK4DZTBpnGkQmg2IELg3agFSC x3ahfC5jPmVpgpx5sXX/gqgKQ2ZQgmgXl0ANcfoVsScsg54Z7087UyEDHUR6 ei91cA1NAWViODfGglUNaml9RPk/xyjThOMmb4JKClGDjU37Y3QCnziSRpx0 YnIQdF8AkgNIZBpQq0oshEyC3VR/ezJ+3YKKg4eDg4Mig6ZVZWjHWV5DdgDr Wh6AJIO1bX4DZDQ4gYJb4Ff/JycCq3Qhg82Beg1qADxYa3jvhAiFO0T2AwJf a2L3UyJZ6VdDS3gAQwBNAChlJXw/AQB8BFbOb11Yj1sQQvqBGBB8WDYArIBW WXxYOQCJRmsBUVpjZ/h9ZWcBeGoAQgBjADkAbQCUYSlzRknjdEtH5nReV2oA TwCHRJAMBFghSjUDtFjMhCN4MIWjV+t5Yj8cB1dy2U+YfyOFo1eTaUU6+WNC A4wnkjMjSV98RQRcRcUFP3Hngk1ZYoNzL/JkHjhEOAqC0wNcRfpHT0rcZ81+ DVpmhccnWVwWWPYLi3plhW0DMGaXgh1kXEURAuxyyFocWlxFQxPdDSdmHAJY GD0fhSwvbTAHRYFcRcRzHQLBeFmFFjv2Cy59YFl3Z1xFUgSLbvdlbx57hacF DgLfCnpdkYUSAnYrEwOpcVBfXEXJBJlea2IBaaGFd323ZUFpPR8Thd8obmYU dlBt5XibaqaF4Cm8ZP4IU3axhd8oUAJ4RehL43Afhd8oNYMbYdBcgIJyhfoD az+LSQB7OVyhhfFzVWJXI/2A9wQ8hUxAZ3L2IUV9a1FHfUl9j13JhXgn5oQA hdeFlQluZbtnGH5yhTZMuT/EdOkgGgNrhdw6jlnlW89Do0x2f9BlCIXcOsJe OzrjS8lZJ4XwhYw5nDjoSbZv7UjnhbsRdziJPvOF+4XIhfCFGDjqYiUKy2H8 heUBmXrEPMp8l2W/SgKGEmPJePpqzUcSAhEC20lgREaEE4biAfIRVFmcF4tN FUQxge+Fsy6BekRmpHYhhicIMgCMUpdtzUdEfTdZ2G0rhl40UDfnAQZTz4Ve C5JYjmsVZk1tO4AzZTSGYjcqZGhuXEUlVbM5KobDAo4HfkTlMH1syE2WhfMF wXHvT2VsZFOrhV9rtQGOeAp/AYVGAXESygYsAZZdyg4PgBIM9USZXTBlPIVF AbVBMEQQQI9za4VvBPpDVghfNLxJX3bXhXQlh3KRaAeFI4V0ArVyf2AqJ6lO J4X5AhIG6AJjWuB7PIUlYy4NujTzB54Z+0oThYpxWWh0dhVWwm8fhYBuNSNW aaOBCIXMR1oFh0RtWGQAYArFPzUeDXwFMYBthYVIcgsIJmm7XsqCPIU9cjcD YmvtRnlpHIOjhmIAP1hAgKOGZACdOfxfsIXtawsIvUsBghOFyTPbCl40hgyz eAiFmnXHBsZsJFq+CWMBH3Gtb+6FI4XqROVbtnofhUhEP1iTXDhCAUJ7hZBw WYb/aUtsjWJaYoZiZnuihsuGQgN1P1p01YaQcChyo0l0A15Fa4VIaFthkwL0 aDpykIXmhgRH0DxahpBw64ZMbxQ4XGLqhreG8oagRi5j8Ib2hmIGpzwaZPWG 0YZMb+E4an3/hgGF7IYiXcd0o4ZMb6Fic1OESVd8L3WNYkIDpR11AR44EXCx heaGpR21AR04iGIWh3AOxnFFOqGGVIbXhUhoknRAAFAoR4BMaq+BcknOAQth QnOKhXMvvAaaDLh0u0EwRLKGmmZySVoK5QIEOkg0YWw4OXEPeikTCEF6tFjl XTeH+UmCRb9HWHu1MKOGCTxfPzcCo1F9gb2Gd1QEf9qGUIdHWGIDY0TlhmgI QQ3/KDNJKobTCE5dOYSjhldox2G8Ee2FyIVmAPA4R2JGBd1aoIVCc5A4p1g/ ho4ftgede1k5/DjMf8FLe4Vxh8lv02o8b0FsJ4VgRAMIAQRVCCSBH4WnQ3pY FDjzPetKpYXUgh8C/oUaZGZvvYMjhWgA6nNfZF57kYfZMbZJNgxwErGFRHMo XW1Y1Yb+QzRnJ3cuhjcDuX8MAjAom1DBgB+FD2mza94q7Vi9AYYYX0SJaIIE QoKmXPEBTGspZl+EWYWOBFxdkHrXhccBq3DkZ6BTKyW9Q6VVQxUMY+x9CIXH ARcF4QcyahlKB3jvYAl4EIDOaciHI4X/Szxl1YYxCs8BBn2DISl5E4U1buxt YIeqh19r5332SFNS618uhqqAAUuSaldlPIWiaEd853PIhTx18WqGXqoBE4V5 CuggBWK8CPaHKF3ScyJw80ZrEfMDxGRoAF9YlzvEZPIDFzu+fzyFcQ+0aUUI jF65NFQEH0oNBSZ8yHNogP9tv2iyEgFoXgs/WHcAJQJhAUUIfky1VhBCFYhV Zr9ovHPnS6CFuUXPWmdp1YZrABhjU4I8hatJrQGoQ2s/IWlfQwIFEl8CdQiF bQAAQS4GhoR7hbtJlUrWA/Nu6Ye3aQyFI4UmBapjJwhqST+I/WRShPlTsy6B hd1EqH8BhadBFVhMgMMVToBJgKVELoZafF8AkUaSWNWGWnw3gaYyFUQWiGI8 CwITQGd+Nod0RSGEF2acSOZLsYV0RZgevEs8HhOFdEVMASGAoQSKSJJ7c0XB F094Ikpia2tu14UFSD0tc309g3MvBUhZecmB4IfEBtNsyIV9BoAPrVwSAhME R2wjhZCIXj9zSB1iyHZlhRJdUTz3OCqGEl27OKFYIE89hGB/e4USXaNK63lR box1iIgNXfc41DuPRD0BLocHf09KqztcZquINWm0iJ9wBQMnhRJduQ3/KGAW e36lhb6IIGnnAYFhD3dTh5aIDV3QV+VqO3I3ScEChUntczCFEl3QV6Y0B3Ay C4KIPIUSXQFoN3q8P9B4VIgNXb9oan0LSpdC+2kIhRJdSWithh+F6IgtOX9Y DwR2hagNqXX4XZFJD2kxYdImIIaWiI5M+F23DC1jZ3NDh7xvYjxAATkAY0Vh iGsAVnUFiZN6L0nzKAd+64hgGb1JnE8PXxFgP4aGXoIBY1oWT0xmA3pzRcAE HXTAXB90doiPB0hAGhmASKx6WXnWYUg0xgywaP+IjiLBOE5kqYbriB2HDz0j bVSI/ANQeYh3i2GLd6VEyX6IiOxO0oTCZ9qIIF0ZBAtNzmCAD3aIIF3gIxB1 YYjyER8nHUt5BIUMtAXuYm4E0XVzRQsGyXynWPhW0iYXNmdTdVcAd5yIskGj euqI54jUY9l01EhrRJIeXkOziLhQinHqYtWGHYSzYpR+e4WjZAGF+ARxAKkJ xAw1LzRqMQoGREID6ycaGVtEX4WhAt+BZIVZhXNpE4VQTnUl/ggpAfB4aEsn hdgBqGiXfTaHYApoSOpiP4Y4AswBGUS1ckR200N+fnuFZmOSdK9BSDTvBWsR cQATBEsfLCcZiRsZloSvBaIoJ4U2ZEBit0qahTZk82eghbADCWeyC899Koaw A5dErWBBZrgnFwvzYBiGpiwbZstbOAgqS/MDKFKciasNFjv5QY9iwIk+AWIC BkSkesiFiwFMA7VlYXIThYsBZ2nWAa0Z14n8aupzBmPhRqCECIUkWmlaTQFB eBKARgB/BaBp2AEXgCOFJFqmXJh2R3iLhgiFUjXiS4pa9wT4ejyFHIjcPmY7 kmp4ZbyFCIUsdhWA+mNxexxaawA1TpdANYciWQaKj3F2ACABawBiZ1YSOwJc RWd8A0T1gK1dXVhnZKF1L4gYirtYHQJCAG53dW5tCLs0QHG1W9xeawBLADcA izp0AEgAzlyVSgcolzR3ABwm2nIDemsATAAbaDUAz39pWodJNWwNcBgQawDx DFsFTgAsBuB032aIceVdN0madQsDJ224b89jr3bUh9MDN0lJf2UA/2nWdtCI YwG9CQQ3ExQXO303TIF6DVGKqG3/aXyHM21HitUIIFjxJuaFOVw3SXkaxQXi S78CuEOQhj6KZYpaCoaBAjw2TC91aooSX58k24VeV3iKi0lcYo0DuUXzePMD +IhQis0IKXCgUwFpVWnkfNN1+YYJSIhS0XVVaSEDvldfCqlkW2mTePQ1RgEF TDJzDVo3SS1HBUy3bslpknuditZ4vmUKimEAoElYGF1BCoq2GHASJHDzbgFL RSBxEukgvoYcWb9tlnklAhp76FoYinxXFGSnREMBfhHYal6KWQ3ugIqC+mmc iudvE16Fb/aBaYoERVlIoXAFisRHXEXsgvFynIrMR7sBiQp/WKgDYwFfBIpB 4FsBKfdKoorWin17j3vxQpF7fIpTBCdmHTlOU113PornVdRhy1tQX/KH1GHv eZpm8oqZZ5ZKRoQ8dSw56Gp1glCKHwLfPhRkfy0fJ2sQ42Y8d+2KcA4/Ypdt TEt8asBiLIIYih8CC00/WJsLS0SmbEqC54r6blppDAKCDbxUaYpuPGYKMYNS BFF0MW7EKXVXBmHnihx1L2rVXWgIdIQPiyiLz4gEioJbUgQNBfdYgikJYwla BYrTCJuKHYuJBgV1rIh5CiuCHWTIGV945wGJhy6JXorkc4NHqF9qAyVnCnBH iu8Fpzs+brZJS2w5c1h3EgEkCzVyyYhQik+LEgF6Kc99ll1Ti0+LtQFdi5Zd ZkvxeJyKNkNuYlAFB0cTQNE6xl01hBiKaItOErBphzCyTHqEcIsHA5R0MH09 MSEqd4AfFXIDcT6USNx5fIovak9EX2EdGql37IH0NbRijgdkAgljiTz1gl6K fIIkQZ17E0BDbvZ8m2qPacSFrUzWFR0Mg4eRi81iHjkSYBkDvF12iumCj2m0 JeRvY0nvTo52MYvnRKJIQwFBWgWKkUoqZM6KLUmyi7g6hgJqXN1KPWiDiw9A BUxqAyUF4WdIckQCqHxnbkID9EYlCPIoq0ooXQVaQg1ta/9tRAI9H18/LQkT FPxQE0z2dPsag4uWe62BVhIKijFsHS+Tir9uMYsLCG8GgxIyIhhjaQigZy9J v2gbA6hoLnoLia0ZDUp8igFopjKQA5R00CTghT0xv2gPNwqL8GxtCMozuT/2 YsdwjHwFijFhwV0KbKNuU4iPXfdYNxKlCLZJqYFWWfdYdgDBcyKFUIpnZEF/ CWebeAqKdIvCZlRTDAwbjHQDI4sUVgWKgUQBXeeDXoqXCkABa3TZdHt3dWVN UriHCopWfJaGZ2mJiqVc5If1ijV+/XYagkeKp0EcAr1YeFRGiz6K4geEBZdd pjKvgd1EplOmdMqGXooFSDcCWmJ1Zyp/BYNMjChy32hracZJCorGBQJud2fd RF8p7mMFigwMcgA9iFOLXkM5aM+HckcPgAt4T4o9MRd2+lpGiFCK7hKSh5pe qQVmbfRkaYprBf5NJ2lBjG+M2gqmZKVfN4JXdBiKtGrfYo9EZ0lBi7VCPga6 WQZ8UG35ioeMxT/8A6B/uVlQJ/pqQYgoAhEIenFogwqKWgoHd16K72ysAS0e FGRcA8wIAWYPBQwDiiekjBkDMV2iinlFml7fbDtyBYofJ4QFcHpWd1oKPgY/ eCaAO4YYih8nb3rscnx/KAAHYN0Dpk7fA+yJUIqhBA4eikqgfyMCnmOcijgC XA3CCE1/MgCmapCHxIzhIaZvXn87f3OAVWYdRKF8f1gMcoFYC4yHQP8BRDh+ hrmMFzbVAcpv0IQ1ZnyKlD1GOyCHGYHqjHYEwgjtjPVnHUTvihWMPTF1ADZu 6ElcRZFJv2QYig9+s1hdbvQ1fkyceBUT6nAgRNgNfYeli3yKzAGVWCdaHwK6 NE1FSW4xizd3WzeviiphjUTjS7YHCoriQCphyRcCTCNnAWnHcyFHBoWHiJNJ yzsIigFymmY5cE5EvUQRXiJZMU4xTkkAMI0xTkAAMo0wjTaNL422eSNh/Qi1 dRxabAWCXkQD7G37jFpqXlcmapsDfEz/bB1kZwsjA0YBomBFjTBlolczaq5w Hn4mTF2KGBCtM2p9AWYVB14LYgADQ0J6T41fBMlvVWLvBdKMsTQWEMJliVo2 iIxaOYhXjdGDFkD7RLpLOY3+PzsEcVpTQcqJ+GkfJmWN4AP5AUdAvAYAa4Jb eIyYcg5kqQUUX7yLXVj+TYVoWk/ZhiGHT41LhxZ5/gRMA9Ryj13+TVoKY2Id KGViFEG0ZLqExgEuDR+GLnXpgr94mW/zYBKFPo3DApmI9nZ/WLMLMAcXAvdr AQJKB1yJZo3aSfZygI1tDFZN21wSeTmNUYZHfJaDDG9PjaQPioJ1a2IDrC4v jecFIV2CieADh0QoXREI1GW2K5WH0wMPBK9y825+A7d5gWj5i1M38G/sTmCJ V42PDQEpvklVQAAMKo2PDepJcQALGo9LmIIoguVd4EjjjZ466EnpUB4CNVg+ jeKNwwFxALQ77Y00R1NBSo3yjXIA22R+b2Z4DH7xjUsF843ORbBjdQgPe3oN JWhhjIw5l23gSNgshjhFYH1APQEFWn4NLQDYdQCO5BquPtKNs1U7QguOs1Wl CH8BEDqMdnqMsTSFAnUCaFosa7dK4YnbjWUAkDgmjCmNL421P/oBs3eWYJdv RY1hAzcCsnETQGKKPm+HjSOHymq6WdN3NY6nAadB3nqgMERrAEiJgR8nP2ew jeMnigQhZakBPI3mezWOygSjRNliE3H1Z65pZ2YCCQ5ICoxSjuxRI3yJBFk0 SYc8jpVMf0isi5ONEgKMUkFlkmVGhBkwcUdhAS8Ij0tnS6NxmkwvgL9/I45y f007GItcDSgLREmmcH15L45gaa1ldAImUVNwgI48DNZNQgLtTmRJDAJmSS6H hURPdEw7KmSKeMxVGEVFjYBFsmIvRJ5ZPo1FeFREdIM5L2Ex/n1Xja0BdAnB YztZOVxPJ9t8O41cBD2NgI2JYOGHB44QX0WNM0zgjGhTUIzvZWx9h43SaAQ8 0o3SaI9LLjmOhD6N0mhmaGhuq0nzeSllkUUBfS+Fso7hAVVNTzt3ZzGI7RG8 An4nL41RJ0x+vI6zSJZ462tKjbACQwItOcMVXkeIbgdxrY5NARZ/PHa0AtgN 4gfyRuxGZmULWsdItAVEfhx4SHL+CFIIeQGyf3KGz42+XQZiTAGXjFBxk42+ Xc0BaQNjUntxuY75FFkxEwORiEtscBy4NAIFzAjidrKO+RQWctpKO3fRdXAc +4B9RCZRmXn+jnAORTrCfy2Ot455gASPl2qUJ6YmoGz7hK2OjCf8A6Vf+3lW WRwCqgF7g/6OTY5EZt11sI6KBJ8kj0hfLbRcP26Yc3Ra9oORWUMBlGI1PbwC yjrUjnwJsG50cSKOZROlX8B+p46UWcWIMiLLiumNZSt/OZZdbI6yWiUIEn4J isGOWSslCHxsmB8CgESPDktuduRytFySA6MLOjkiR38DpnNCghYUgGZjjy9h ckVyd7t1/lu5jluPhHY5h7GGBo5XjVaPbnZzU9dh4UzGDNpheACyjnWPEHkG bY1FHW0FRPaAdI9hj6Z2v2muETxoRYFsj7J2AQTLYbiMNI+Mj14/d4VIbUpt r3BNbfBrl4+sdnwUikTUhGUxcQDXbYOPmI8yIss6pFyhWzxoiYuSj252Pl0r eI8DvAsTBNhibAL9Vq0bsnCLj4Bmq38McgNJ2ENLjmyP6AEfAS5P8XZShZ1+ E3EljbJa6AFOPVt0z45nQUMB0283SdliCY85CLwCm4F6XUB6o1eqjuV7/Yqx NHYSSYVLjFeNomiwAoBsh433WPYLtmOZadh+hIqxNGVs2UzBAdKNoALaj1p8 6UdfAAuOWnwHR58cqSZShQmP+oBKaO0zEwXUX3qNMnQwRDh6zQFlcsqOh436 gF00fkTEjvqApQjdU6dY2o3PjWKIJErkT56LV41QB1twiAVdfVRuHAwvjbRl PGUnjBuQVAQUWIp0tT+GGBxZpo9sjRaQGEt2ElhqzIM0jgyQMWw+fgGLWGPx jkWNHyU/AWeBDosHjvSHbIsUDGaLp46PA+RQumdEeiyP7ALXAbMCJwuxOH2A QktKjewC1IIsNJV3e0kJiAyQok6dZK5cPo13QZ4D6VA+TMQim3QQkIAFN4Eo ObaLLhJQBSRZFotZkPhW7oc3QWWIuB/mZPKOPXNTBEBXQQgIYv9tfwU7Ascn PYKvjhuQLo/TZaI7XZAuj9AJNwKINSKQqgFlgNWNNWksG81zJZAWkOYB8Fq9 fF4/IY2jGXhNrAFQaIonEkc2TxSPl5AXf4Zt6ns4goCNn3N6RYYMxDlFOtt1 +IuNkK8RzUqJYfIIgEdxWSWGG5A+AaeNO5CSA+8lUyUBAsdnB49eQ0Njuo/F ewyQuJBHDWNm7Vi9kMEVXIq7j0CQSkXzajNwS3saf0WQCmpSkCBBg0nQczSQ y5DOS3Yrc3jYT04FYmykkDgCcBzdiB0vQXDta85MjnBQX85M9Y/FSNAIzG0d hOmMDJCtP2oV3I/okI1CdxW/iX4NY2ZcjoeNWGLTasEV540qjREIdVonWiMD LI+1YDZUjEo+jQZlckeSaQ8iB41ChzxJgnxXjeYB1lhJeUd86EaIWi6QsTTw Q/4/10hEOMSOwQcbhuiQLgc/ccMB/wGFhSZ8wo9rEd1wgI0SR1NwoUI1jfQM A0IhjUxqfGpVYXKQLXURkc+NxUsyhvlnCY/QadKNqTo3EhRYT33jjzqRBnxj Wsl3NVHlkIsBZIEHjiRauwE3SciP0o9WRSMFPYo6kdRhLHFaaiQCuwGrSlaR sTSyWMhMPH9XjXcAyHkljXZxgl4fAuJE/I6WYoeNqRISTQdqDXx5dthteQNw Dh1rGQnSjcuAjmBujEUERQRFcC4EYl3ZdG0AHwEaY3uRnwLwOE4AOABaXVEA tkkmYq512G1gAQ8nZwA8DFdM4kskcFNq7UuJb3oNu0llb3FaroEiWbtJaFHn S0tsu0lbcFZtomZIj6SRJQJzRXNTX2FSjBgQYAHNUzd7FkA6iWABZgDoSTqO FG8UQe1VFJCbjV5Xo1nVTip5WWzRdaNZJgJGBax6Y4T8OGNF3F0+L4+RcgNc ZjQAQFrwfmMBgo9dWNZ1XYHPfRoBn5FyA6Jpi3V6eL6R25HNBpBwg2f/b9SR mpHbkZBFeAAuEkUIJoAwbDNJzYTpgt91dANfAfiJ1ZHbkTsEpHUjc9qRM3Cr F/BXynTfkfuRpwFFbZtq33W4gISIygSvA9pe9Shdje+R/5E5YN1UODloa29F dknuRDmRfJFyAx9LBkwZQ5EF+pGBX2YJp4c6kPWRZ3mGNjBlizwQOpdtA2Ij kjEEbgCQfaORanIpkos8KwEnki6SUggqkkczMpJnead5bYYNkkN8iQRAADUA WXANWvN1foMARw2SZX+cQ0GC5V1MUr5XcQDzSzBl24pxAxMFcIrTA0qS8Eye GXp1FUTfDUFtfosGds2RTCdSbjAJDydIa1ACkHA5N5xMRZIJdr0BEh6eBh2C 6jfRVRZWSHJKkvuN/mfogU+SxQFYkOaRXpJ3XOxMKnswB2VoZ5IhWDtTDT0j A/VnTFI/WKSNgltkA6Zvk0m2he1riZL1AYh4vwIYY2cAcQC3gANFYwFoSH+N j137JstNdgQckpsJHmmIknIDgGbVfK6RU5Kikj9XrwlMUhN/IZLAixVUgYZz gFwN7wUOjyGSzzIfd9qRg15dR3UC6zfABINJlkUtfPWRqXEnAt+RUgQ8AlA0 DgLHiDKSPHVxWVcKsVlQaGhuZEscfQhna0EajBxa0RT1A++Hzo0WkscWj2TV klZNwXrbR1dvAAQDQ92SB49eP4KRuXfojd+R5ZIEYjo5eY+mkuuSXzTDCO6S FpKVCEVtjGZZi/SSAQKffC2S0gIDAlWKe4r1kSUc9SFvBpZKA0VbaSyA2pFj CFxiT07HaVZZyAhDAX+KhYFhjjdv5pFxLTyS3pCakvQFQ2OWCfxf/3qMgjlc f0hEA0FllXcBaSGTbQN1S3+L2lYVfNmSxgI9H2tEhpBOEbhjr5H5QVREXz/P ffEHyW5BkiVQAW+ekd2STFVLW/WRP5M5SetK44zmkQFKJwLQQXxMD2mLMuJE tk7TJhWSLZNRB0ZYpAWBAaEC+locUGNEkHYzkwFKU5MXb544D2kXBVFnTYfX Cd+RAUoEW/E+fmWaZphR0zFJk5FMV0wtY3B3Em89b7mRJVDCX9BB7GiAeAZM CYNGimaSQZNRBxgFrzQwAbNeGmzoAnRwhWfNEtqRAUrfhI0GpAXsaBIes4rv kEaTLYiwA4BrZZOKCNAHZ0FHWLBuvYeWk3UCfWo9k6GSMUVjWjgEVwUEeI2S ZwYBUpKDRQOWk3peQXV2Y8aGppKZErRc+gF2i0aTiTqjTImTc2fkdclnA5JT gH9IDpMqBmlcv2+okSoGEHIzCqFYIVn/bX9Iy4CiGXYAPEL2b92S2Cz5RBhM 2pFdBR1k0F2rS15J3ZIOAo0Fo0xfNNcJF02biBaSgAp+TDBsLwjakWdpzWfa kemR8mSUY/WRompRNFJuRZEWkslvEXDzk58CtXWGkM9hrVy0CoUIn5HQBbEn 0FesbXANCoPzYZJ7TkUNXcwD6176Ak+TL3VORTFht2jWA6dQDpOsLhFBWmmc UASU+mpORZIRlDTHkUkH/2KtARGUdgNobS5QqWSfkdxdMlhfDD8Svn/Chl+F vzKTY0+PwpGfkfVptQFhAHZez5JbWnl9jZKMZnRoM5SGAslMPpSeguFwql+3 J85JSZKYV7NTan1li4uJ1ZKYV5F+YFhLlBtaiJJgSxuKmpFgSz2LM5TMYyeB 4UC2R1mUQmTpRxVYsVXFXdKIvpF2HvgE8F/zbr9FPWIek7+SVpQ5YKoB9Eac gRoDTZRsAGsq4WX/iwwIdmPyR58pw5FDE2IGZz6WfdeTfpRbYbNTrYQDkoOU xWxTPYaUO5Q2PTcD5j5DYoKUjZQ0lDZ6kZQ5YKeKbwajg1OUAQbYLNF97jFV aYRSs5JWlJuUP3FhAdVFTZQIiy4G7WVGhGA0Xj8TFASTM5T+KcJ96AEkjQ6T 023pRzhEQF3YRAiTVkQkeHyR0204HmWU/inXYsFd42j7jg8FMmK1lNUUDYuC lHRcBZRllF8Bdyw7U7iRtZQ5HRVsgoGakqUcBwQqcMOTP5CvkdmUpUZ5Uk2U KVqCTIeU45TESgiMhldoYXdnsQo0bBMFypMUDBthr0NNlHNnN20tHoISuoJI jiSS2UNllHNnpHPhaOZokZPelC1HN4zqICwD0WMHlIkrQGbqYpVfngMyiodv ZYhVZksK5VUtiK5MXgtLBQMFf4TVkap6AV0FYvwDh3afkWBENIvSa6dDdWHV km5q51UxYkMCDpO2N12EnlaljLB7JpVKReNIVi6+kWgAIWzYZb2R1ZE5SRdj wwIsjbQDJ0vcivVCBkTfiqxEB5Q0CDBl3EONQgljyhQpib6RNAhpA+gCf2mo kU+VtD9rP9Bj+gNMQJ+RNkPacIh63myuZQ6TpXNqCvWJYQEwB+Z/r5FhlUNE JoKOiEmSYZX2GG9+iJJtlU8FFGRxSrmR1wOtbhNAXHw3fFiFnwLXAy97UF/6 A9FiGYtFIAFSYJXEA8BjiRKLJ9pZoY5TkrVBXzTtRJcXRn98lVIEjR6HXol7 4GzVkbVBZ20sN91tv3xTlSR9ln5wEiwDmxbDkcaDcA4zhpiVRWSsdwFsW2+D Qt6RqJXHFqqVsoqwkWICJGvNfGhRHALeWWIDsnTzcNaBr5VWLs9Xel1oUc6T AJOakftaK28SAlNuWpX6AeQbyWVMHpaLq5LFlW5wQQQsk44HXBlORAECu0gn WNhiV3e4j/aDQGkGfLNiP3nBimeVcVocfup9PI9OlSUnNWn6AwYnCXaTajGA U5J2aWyQmpELCMhff4+Iki0evGVvaKWKQZJqEDA6T30Dkl1OzUqkIqZw2A1k N7ZjahKfkYFEtB0HKK0nn5EWTd2I3oy+kfkzJVj8X6OR/YJjhYWR+TPacO11 1ZLyP80IZz9plPYDrH0elpRKuXxEZgFLykgTTPJX1ZFoU71Y4gJ6Wv5R+AQi VAeUtAMvV8MBO3knkjaWrmyBZutKo5FWA7xvD2mXZhwH5SblAcwBeo2gdRyI h15jir6R0QkfRHACkUXKk0wBEnzNWOZDVUArltxe/3uHXnaNupLXRnmNwoOa kYZe8j8jX69qpQiNBp+R3lk3eYdAV4VekbhESzt2kFF8iJKBA8VsJTQyf4Z1 jZKxWbJfNAi5h7hE0whuW2mUsVkdOj1cyGLVktFtf5XRbb5u3499lv5+eJby P9ZvIW8gk9FtFwUHfWiW8j8pXcllOpRqk7FZZEvbahmMUVJylvI/cRJjj8+S m5a5W9Vnd5aalqGWwV2HlqqWwZEdBQ6TyAF/BMGVsZZBDece9h7cRzQehZY4 eqNXBAKOQDGDizx/BEVHFUfYDIySqZYdAj8BpGrWDdGMupauTIMSq2xIcA0t i5V8kUM34CPJlotJ15NBAlqQBEc6lnEAcVo/lpZZA4MVE91ckZbgliFKkESd koWW5Zb0Q1gHJgK3VtCVr5EUBjZqWwX8X8x9mpLxltxwUHP1lk2WqArPk5CQ 05asUgcEqmMnCzl6iYuEUQB5cmFuSgSQYJbwlgCXsyyidzBE+oUOhkmSGlKu VUSEslqKjquLLodrRyFmQAAYQRgFOwJ4HgoKGxmHMC4AOTxCP0EATZZoQTVL uYVeNH+MXHRhljJqf2a4QzsGIwJxhdOW/AH+BFd7MWywlqhKcVqqSrCWyW/t WGaMXlEKeBGA3pVOXPlKO2Y9AS9E/4mvkXEtR1hcBY2EAY2fVxWGVXmBb4iS llkmjNeTGQPKFLSETAM3akGSqgH3OCAy8oyfkYKM6HmICJxkZpetchcangZd RyMFeUlblytrlYudUBZWiYHChXyRPR9rETduwGjkdHYAyH6+kXqXEgUnZrlF KYmoSIGXApZ/gQNZRgHbWc8BkUV0etWRepdHe6eKN2Xnh4GXfQYtKliG8nb4 kp8CdgQjghBiOQjlfHOUiJLjAZt6HxxJktYD9mB8TPVlT4evkdSEngu+eo6K DGukl2hrrHT3BK8onIUZS52AU5I4AvZZEQJvclyQiJKDEupiHZVcDQCVPonV keIZoXT2cZqR4hlBkuIZtkk6Q5NI1JUHRHUAa2LaiZ9EDEXolcmXXG9WcySW wpd0CSxeHDkHR+55n5E9ARMitWV/lYsBwn1bkDh41ZIkWvMH3Iypg9+ImpL4 jEx43Vc4Od1XNpegBFdo9pMalHkAbEA7Av8cwZWnEOd5aVzcYH+VmZaIYhca 15PMAbZg6JSbiYiSJWdCXdWSLg1CcwAEGEtTWOhBv03Il3oN/YLMRSiNqJYi WUdiOFj2jCwJplPnZ2dESTGoXImLEwOWQh2In4jNfhxanoWrdZ97XldVQGIA j3FfNDgCvUMWgzeYwwK3gF2TZJE4AFBt05QNWiR5NwLtWEaYOVwpeXZ8AH4j mNwL02q0cR4JkJcemANyzAj8fgF4EwNvgA6NR3OyZP9tukq1M45/hZG3SmID ukrmZoJbWF16XqVUEwQtHCOYRnWEVB1klxdQeZVKmBkVREyN5on2gwdBuHwm FqBz945FBAUCM3CncOYfRQOrcAx6j10FApNpaGq2AYeTTANWWb1KIFPRdb1K 5mtvmOFKrHYhFi4o5GI2X86FXVgSBd5vYj/fD7KUuEMzmMFyjGlHmGFSqhFq AUQ4RABDAP6WOxV8RUAWlZiECNJNegbtWEtsEgWRcn1SN5hpdlp8l20SBZpa oJKImIFI/AMZSrMu85KvmLAK9JEemJtnJANIdydN6QHdfG+JaZjpcmKNrHpm S6gBgkm1kxgQ15i2SYeSwpiaM8VscYaHiMdK8H5JcZiMpJgrTdNpg3FwjkaE BQLpmJUIQWpIRZhXdnDzAXKY8EwhdVVmsy4EDdaYdQh0JYcCmWkyhvs+95Rm cRST25j9mJdp0QIYegKZCgaUfmKOy5itP8FcwkakmN9mqQgSAbWEu5g1NKF8 HjjbPMCNfUCzLkpvE5mtchyELJNGWKxGv29whWCYzUrLgQKZhnUgJupvE5m2 ZpZRx2NMe+VdRljveGqFTJjNSrRn9EMGYlZzb5jQQTuZ3pgYmVJPrWykiv5l OZnQQVRh2GhIRK5Ie5VWg4loqW2+V5iSP5lVDVCZuXwdOgSDj5gDllaZQYm1 VINLMJmkIh6BVUBNl9MDT5mPaMx/lROmfKgvVZlnmdNEe1bwTmCZXJlfAX17 VJlhmf58NRw2cGCZpAhYakQBZ1hUmVeGhAEBb7eYzUpXhtJPGUqDmdBBEgWk BZwEnDj+bA99rIjyP9xgMphpmMIBK5lZj5SZbwAjX5eZiJjBc4xe1Q7YkmSZ gJipCj9YnXUjmCcIDHSImBBf73HRWconMmW4WFqYNkM3SQBqXy0GRaaZC19G dWgnpAhlaA+Qf5j5CNcDZgCviVhMdIkxatdGjWtcbN1E53b6Y18EO4w3mDcD pEo2iYp36WpagR6YxmIbX8VLvpi8AhFjfhHWmMcBCwhNf3+QZZnHAUQCH0RQ X0IDcACkFptLt5ioRLZlZAAUjpQDfTcmDaaZmnQmjLQd+0Pogs2Z9ZPoS5sc FQNBLygkr2TBj+WR25hqANksdxUjmM8BsxiucTOYBQI3STUATkTHSkYBpGkB lWWZwQIGYSNnLpd3Z3VlcIA4HgRHn45iAUKCcA5ORbISXxgZQBSEegA6gpCZ h17chDeYQUUeVFwEN25sBV8Y+mqvi2FoM5hSezsGfUtFCSuaKQpVYdheTxFN bUeYZQkVgHRcBJE1mrIH7nqlkGBEMDtNlZ2Y0QntWOOQX5j5mPs0FVThQLiT NZqXIUJyfH4LbPqQHpjIAQFxGl8cjY2Yl4vta6EPXprrTOJAHF+GZy6HoQ9G BfA4XGYCLhJWzDOSmMgBJgWnYMaR1kPejiOYc5qBRG0/PzfCCCwBvmgRRWuG fJYrFKNXE0DfhTVphJoWiYyQeZowPDKP1o36CGcefWXlAXt3Y5pMC7wGI5j6 AtRzrYDbmBtm0FfgmYCY1m2oWIiaoQR+A09cAWmmZmEDSlWSmGEFW21jQQMI OUkjmGEF7EMoOR1Vq5omHfIIsZoRAnZMm4zbmIdA7HcBXr0JizKkdBBsX42d mABnvHx7V96KuHdak2WZ8n6BboAKvWoKkIiY+mOmS5QBgYEWWVtfnZgBZuJk AkxER8+AqoIjmJw3zAP4VtUBSB8qfhmVHpjqcBNARZPbmLFd61f7lUeZ5V1v AIEBAWSFkZmZMwAiY5+ahQNOADQA4oieJjdehVICTDUeYTGffmN6TQRQACg9 y4BzAFoAYmdLbGUJ+QHPHBhL82Bobj+VZwDKBvSKIlkFSL1uTAHeMTyAGBBW A+xNQ2a7Q6GZ2BalHa1gIFOCBj0B731Qj15XIFORSoKOr2U3QSyLeg0MbHJh dxFkCf5evHH2g6xIXBn/AdRknJc8m4RgQZsrYw6ZH5v6ktxkLZuMXksK6Uvz bgxdbwC6e8oOWVysdJxjNXjuj4UDxh/fdWI/eoWCW0ICbjpNmw8E5o3HmGc/ YXVjmwV4EQEZm0FkZHIXZogFEUHRdUwBA1r0Q2BZYAenRomLTAGbDOt/cQDY F5qD4YCwk2geU2IpcnpdgQNcBJZ9v3IDBbBH/xw+CtICEGxILCRBmkUZmz0D KAJTQRwXwwJbdQ4Dd2eBAzMdcS37Qw1asZbfZiFovwI5YOyFfJuSe2Rmkmre j4+bnApCMRxakSRWWZEkU0jzYAFpc5p9TTRqr2S+UzF6AXhzmil3c2chjt2U TQTnmWBYMkSjTFubj136DKVDLJtdWARbq03AFS2b52WeA6sNKXc9DGBETwUc AhaTGZtwaSdmGIItKuSQmmYEW+0RWgqvfdybLAOxR91AO1PDAgmX/YALl76b PIR+aoYCGpKmiFybuXpEA1dM1I/CdcsxHWRWO7Oax5bwDxmbRnnzYM9aHQKB hZxkbpv9m4aB/ZvdTQOcApw2Qzd5oHgtm54ZG2RpSvUoQQIYg1l9rZsOnBMU IljCfRlDrpU0m18BKX8fj6WSaB6ZY39muG1jWVybGQI+f2aJ2H6rm/UBGJKP B/AP3U0TTOkBLZvqFe+WTQQAZ4YJ71cARFkKfJYCAkENvgkoeY4J6Jofm8Rk hGk7NJ0x7Wktmx0vSxZfjtWPQJveKiACyjEoezFsfJJwaG6bnDeBmH9YtWRx X06FTQQZdFEolms1biNPXz8SjzBbVXBcm16cDo3MCDkv4pOFA5wLuIB4if5R GIK1KQsDfom4m41EkEUgRBtoeo1cfIEDsGkDCSJ1j13rcLAC825sjFtFJU0N WtJlSADOdEEAMgHgdFmAHwc3Ap1IdIB9H3o4EgyJUedLj5zzA5GcVmNVZv4E nzikV6t6AWnuEpxQAmDCAXJ/OHiInIYMLj7zPV8/zZCaZv4EL5gfJ5+IRY4c fj4DP21KjgGa0wP+BIQFmYWinGItFiqKlkeB5VUXBU99iTrHmCIFxY/pmZyX 1BCNiax6/gSmb7Jf5XQ7BHBIZWtdWP4EggriQFRhg0dTRzFd/XIBeIIKiVtO RepuglvgnAdp+QLlZwaLupz/VgdpJ3fknGWK4pJpSm1+MomBnBqT50YXmdac KXVRa4aamwO4bVZZGQnBFelLXAR5glKFFkA4cXOQXlf/nHFrIlkCCaFJkwJf i8uc8gezW/6c1wHeektsAgX2lAUCW3m9mQIFEYsrRcExzpx1Whx03JQdZAIF iQodHnZgSI+zS4h4XkcWbgidHSiTAp4mF3AknS+dwQgonauQC50dKNyMHAft b/ScCwYxYlgHxUP9Bmp4E50LBvYq/ghMcpmWRJ2FREc8znDQVzAABEcES8MI bkpGdlab/gTzijVbsy6JEmhBaYz2g1adTl1dGa0b/Yx6DVadXwCpTY1tO0zO nGMAPmNmVY+JC53ZbK0Gbh6bmrqc3pr4VslKVnaTmYGcREc9AelHCJ1+i9xd PZJobgNFIQV+ShBnV3xFgQNFxWJyd8Rzy2Jdb9eUfZ35I6wbThGPlseF5V24 UKdBq1toZ69kwhIGREoHUpJ9H/URopoLnYUCmYXPAUKSQxWfJLVJj2/FmmOd +WJzRdGXUZdHCAGN2lk7BL1LNX1Ze6Kd9AX6Y61uHpEojm2W2lmHb3qT5mjv m4GcjAV9ahBCDnFDFaudGBCsNpQBYTKvgYsFTUUZZxxaOisSHl5DrWDZf593 bUK3aIyEsZ2inbg6y0jTnbwLYwiinSVsGAWSWOJtB3lLEuk6TgNHfEuIU5aN CqJ0iwFoOG5KMYacSLxd4Z3rnb5Hop0OAt1uHnTdL/udXj+9CemdTlwBnk4K AJ6rSPEFOIRJneGdTQPAArhBgGuXbQSe651fAG1Ym5kInUMP0Uk7ghsZ03bW nApNhHFfP8KGiJzacLBp/j/OaagDb2qCix2eWJEhYmoQX5UYkYx+y53TCCtK JAInFj52GZEBBb1LUkiwAohF2G2TC65ErJUJbgidKie9e+JDaz87BC0AN0k6 BMeUCJ2kXOZL15DLnY0GtlbRiZWdXiRmaMd2C2DTnYSdKXmWV59Ucp19H35K GAVHfISJWZ4HRIpfO3EQgv+d052JSKoBym/+fL99DF1TF+sgMWEuAKkSwJBQ k4sDG2a1O2qeH0pYAEBiRgAIWGI/kAHKcQid3ZmjV6KIJ25aiOp8fR9lAkwS wVyqkCSdxwEVF3B6uX8QBwVTmzSVnhpE+mMLeKZ11pwjA/eQzoPLnWUrHyWi YAycnZ6LSYlUIxfnS6KbpIuSe/oCYomvnLZoNmSHQIyYlobuZ/8nL3V9dGMA egH6jHltgZyhAoUFT3mEnMlKqAqtAco8el0ES59X4QFVkMeeDUspj9ICznbT nUV2hIwfG16ebDTkgJmIa5wInYBCK3BGYFwNJJ2AQlsJC51+A2dp2JXinvkz tjeSafUBSVM5HQN6XUNcgduCYnIkA5MLpFTvbL5oQpy6nCwlmnUrc2tEgZ3H cME47VgZAtiV9QN5CsVk1pzPAX9EzwHlG60/0XXlmspqFp1Se8Gcl4hPjy4S NwdFm7qcDF2HQNlJlXd5Av8nQoKeJTYJEWk+d6+ctG5RKLAIOWARSwRxJp8L nR8lGmNCAgUgS3kDCRVEniFLj5WdPJC8Bh15xIT4bCufYBnekmcLyYERnkEC xAPIlu9cryiFRABz1pwUBnESFl0pna0npJR2BC6N051yRC2N2ZFRn0AeZQLn RHeE23LqlCufQB4cjWGTF5pcnzWDnibBmAid64L0aJ6WC2djnX4N0F0cXGIy w5tlny2ZHFzRTQ4CtB3eKqeEPwFoXGGfNZsRRDEEclTvglGf3io5YA+frT+b YxoDWwKyZPwDZZ8QmcNbc3+tlxefrT/SbJaU2XQWawZlzWrlgY1CAgjRmwud YwhTQRmSoJ66nHEANABgRIRELJOSaU5FdQAuORFFyYb6apJp31dxV5Ru95MB kZKFAV2BnbsE1QjQV0NLMQozboGcXAUpXTqd0iYhBUoHVZjLnRIG3m+inKJ5 Sx9rUgudonmQFnhi052zdKWfKUtFA3dcFCnLn3YSaWVRjP6cZ22wZmFSm3zk nNtRkljPiFCSZVr3mdac4J/CZXcLqG1tlMSfVgMxAHgAP3FWh05T35zbUdgX CJ30n+tMzpwSCKF85pKbamQJP48zY1FmtZ+WA9KLMQB+jlJoy58UiTVnvJ+G XkAA6lcHC6AICKC8klNELofpTQCA+0iDnuafhl42XBGgXA1eRPER+Z+GXhxf LQntWxygT1y2UT5az5+GXk9cJgWKBJmS9p+7VM5xWHHnmN+fXA3aCthiGIH1 ZzibYinek2xpd2frZcRhEEVFLYJJVWuNBX0Gs5C6nMQ6yWvBXSSKNKAcVeFE RS0yhHWMjWNsnBEIy43VmFBfEQjiAiZ55JzyETVLXplcYQidJmKInEuJFhDc ij6grWHknM9fXj+Un0CU052DEgspaQDjT5QBFYsUBVycfR+DJ6Bs6l/yA1ZE ngO4d7ieOzzLbGBE6Uv2BUuBbqCsgXFB2grtbXiEFn+hlMudfBJulSOd/Z/B WYA3JW9UkQidwVm0mvubbqAIBVMEr5zqUWNFx425eqmHY50CCBSgKpyCWzB3 PR/5hGYAdInKDjFqyHWIMXqNGGPdiSaYGGNXaK9LDF27akNHQS/GipJ7po+9 DXVwaG6TaVpYBEdvh72dAXiTaQcERQGmbzdt95OTaV9rll1eRxpEQB5BL8WB R596DXEATmlSi5yXeZvbBHUAd4A5hK8BCD+CT71JjUuqTiNdQQNsAsOMRQR5 m7wRPYKFN1k0NiWgUc9GFzteV3mb1Zimneg38X0marF70wMjggFmdJpYV8Kg bwBEAPkJTAB3AOx0UWh0jEaU9qC0A7Z41Z7vcDSSAV1xgMZDk5yuA9BL1ppL bD9LQwJ2BBMHQwJrP40eFXQln/JkiwS0Q/9tK3MYEjAAYwBaAOleuV3uVwWb LJbYoB8nr2otn68oNwP2oM59Vi4gRCCXrQgXO1kKIlm4ftI4l224fmYJnmVq A5mUj124fiZ6nzgfRAJFlYWooCd/snGLlEMv6ll7la8DtknqkxxacQBwcE5p DmbBc/hWpFQ7AkRHHgl1f+GA6ZvsoJw3W6HnS5KRcQCvTBVmqQHXWXmbVJE2 bO+CbkoES/agX0MHBD4Kgn69mapXnDdVlBgQYYxNcAFpnZp6Xbl8+HhtnSEF QW3Wjb5+awBKAFkAQwDmWE0ALqHwWDteXVhyACQ1R0NCAJwE4HQcYVZZ5kBR AHIAnVM9iNN7DZccnnoN+ATcOlJ7gnfBYx2f5V0iQL6f8EzQnoJbIkAXAnNF G4Z3YEIcVm2Fm9F1fy1AAZJYKV3TnJIDXle+oTIiIB61Ow1a4W9bWRtf61qW i72bfZHHAmpcR3DlJlZzc4xsBIqe3wHHAq0/QmO8d0Zjl0XRgBaha0VHQN9j MYPioWgA3GC5Ax1k5qHnSxcaB0QiWbAKp0HwOEaZvZWooexmEgxqCymEopCA jPWh+l9OdxxLYJ8cWv5aoXzHRe9ht2qjkI9dAqK/Ml1KAaJ4cSgC86GfobpW aT6Yidl0EGQ/j1Vi0pwwB2STl6GZQOt5x5v1oTV+u278g4GhmUDEA1J7/Gr+ lGdthwXHJzee+ARdGRRkXwxdlmsRR17NfICHloaWaq6Q91PDCBZPR6DQoccn kERMAWBYS2zgI8cGgkXYcbShSQ5he6UmhqFWhr56G0EBjfMoOAI7BkBePDcP grR8l6FRf7UzNGotfp+NxKGvhh8BJ22EodFHZZwMLfNudAmWoJehqAP9ksFd YaJzAH5y+mrfYv5D+2+9ORdgtKGcZ+aEDALmhBVUrpiBZSSRjVdZjJ+h/Qhk A9mY8HwIov0IexzvoQ9xYww+mQGiiaKecG+fl6GNokaWzD+IojUDcaBfdNmf yaFiHkRlz6GJA7s/dY2VcJSivExKkZpmLBQ/koNCJC9hGKx6LBSJQQFl62QD ZQ5lJWrSaAN6LBT5ArOKxAGMRe9X0VPEob0Bcndlc5SHJJssFKdBkUUWn32R vQFnbRcCPYKlnqihaZKMAUQ4AwWGGASRVpssFLQlHnmmKY1jVQ3taYBII4C6 isuixqIRTL2h0gRPntMDOk2ZSGI8rEu7orFlmmflfKIPgWbZaYMSPUikoumB 7FFYAx4mPEdHROx43gzGijlclll0AvGi50uHhR8nHgk1f7lm+6JZdWhT+YW9 mdU231kIdHqL5AEOTPMDNweCBrFa5ZvTkp+WhaIPo41ICU6ieWhua0s+ji2i OpKQog+jm1qyg+9tMkeMog+jeXK5Cro09aAhozIEtmVFazt8upmAog+jcmGf KZCLgaF8S/lqKUuNB+EhnX0to9Y2AGInozIEJwLtZeya46JwS0SjeG1XbBej Q6PzeXd+QqMCcDVx/5CIog+jRm2Wa5eVy6JVo1tacgPVnmtLFnKnmR1f9WdG DY1ri2Zloldc6V08NFhd54/LohWA50tGhCaRwgG1h+uaLAigRVZplo84o+B8 02pQfQWjzZipOJdtJHQ2XMViPoGMos2Yq29kUe9rM3mFopGEHxVvopyS7FFW CF5xjKIWebpwHV13Z6Mq+m/lMLMuhW4Fow0t/il/Q0wAVwBDANMmPUy7ATWc xaLZF5lPWH/Hk0Kio3Irbzydu6J3EbEna2BIj+Mo4WUJcH5j5BtaR4VjqXOE orCjSSfQVzhSYGjcRpmiFSrQV2sRfUSIosWjXj+mnLyGOKMXBckEXXZPSYii xgFfgHI0RYCFooMfTIkuKCEFRoq7otmjmgwJIdOjnwMEd4MfiKLaCq1upYA0 ZqFDpF4SHqSJAXhmB/J/CDjMfTSiB3ORgJp1wQKpAfUotUHSf5eh1gZfWxle G16foTQIWnQLAnZP6qFHlaSOhKHXA91ExF3SfTlx45XjonQDfAHkjfecqKEh KvxqfW7YDVJAOongAX+H8ExNajYCxKGrAaJifphwl7lfgaFVQccGh5OnoAii cjS7C5dm63sBog9p4CKJPBY7uTTvn2ePfF54l4kguUUrSkKiFALkbxyj5o+x cddsXgeWa/1jT5UwVcqdEaQKBt+gH29fDLWPr5qXRR6bEaT8NBhcwZctpKx0 6pXjbpehqEQPBfxfQqQDAoJJFZB9kXNFaFytnOqhuB/voZFXxaBloiFINpWA kaSiFiW+X/KXWAOAnMShmxY3Ygt0V4wBoqdBLQEddJID3AQWT+KifZHCon97 uJPJoadBrwMCVqtmdUQ0ouaiz321cnlX0gSFN0h3x6IwZMpILJMpon+BYl0V o2mfgaFSe3+BfYCepJajWFN+jnE/0id9pFAFUob3noWkR0mcokVwtIDcCz16 wpT2cruXhaQlSlhXtG1+HhyLr6E/laJgYgJWhptq9mDPWox2C1RinaCkuUW4 XRyj9EeHNFJkBXL/S1VNAwlDFf0LeXtFgZxI/DhVYpxjxZnGXWp8qKE8A6SH Z24Jo3cLQADGNQ8F+QEORPYE/HBuPSwGzEtNZo0FVU0HfbNaO47fpJ5eXZ7p RO+hIJTza7p1LAinih1iVWaPjOpEUmZGZsShtHEvjwWl53d/ox4vxo03XJKD kAfvoVUNy3CFkVkDkx4+WYMhEKUVpfyI1HXJoTWDvn53dCd1AYzEodgBZWjG kUKi6Ffzm3+j7RF4AJMek3VtbIpE6gE3Er5sbZZ2BCJ/WIgFJ99DfZvfAeIB 2pjjop4DowPsYRuHtgc5c4kKEKMYT7xv5QFXhFtE4aGDEp+IRqN9kRJECwNQ Ah5mHKOoiQ2BK34UouICNwBXTHYBV3tYpbQC+XnqoWeASGU7SQRgUUnJoXwS iG6sKfR2NR7vo4JBaUpkn5ehTJH6U200Xoy0oXKlGX+9Se+hd6UycHdZAaJP AjhjD0XhRPp+Z6KooU8Cp11DA09OeqUyatSfrT8+L7mcfZETjAGUelqRpS4H 76EGJ2lhtKPLdFJy7hJjdQGiYGmDgkuYr6HogByV95O0jFuhZnC8ZNJ+yKTT A2lcYlX+jR1kPl0Wcq+jXVhzAMBbYgBSADkABEfRl6diHFrgKdBLniZwgFSN RJVjAZJ74Ck2ZSFdg0oJHJtqYE1tALQdt2hobi2gslhLbIoECFVaBWZwI33m iBgQNY9SCNEJeljnUEygj12+ffRo6HyIWs1lZ6GjFJ+M+prmoHaOoxSOS7IH CkXnnBp7vaXCFbZt7GawpS96MDoxg41LeQOUJ7yb96VQFmBiSwGXbXwJEQG1 ATigIll8CSQ1WGjzbnwJvlo+gUWBDaa0JS1d0QXSKPOl0RTVTgimLQkuh4Zx xyhIoV5XfAmOZySTSI98CcRdOWBcfL4O6332g/FCVzSOSB44GJvzpfoBLqZ6 XfFC6Hk0plh2S440ptRh1WE4YlZZOaY/aXBVCWuqhTCmOwaEbxmL62k2TJmR 2qXyanQK85VKpmIGAQJEOKGlH6byB16gwW5Qfutgw1yEX/OllEgbZUBXEELN o6ylxUNHYiMBdnDVau1rigShBHd9rWbKmEqmnVATA+dGpwX9dFtoglubRTtK gkkTTfOlhXloS5GVm0W7C7Zlfo8ZpsIL/keBpptn82A2XPeddKa2TlE0FAMw i+GlTY2kky9JfExon3dnEh7vbMxHXke5cYkKtot0pmMAhAJJWhMHN4xmRE4R l0IEUeVdX3jGBVV58qIUmJymgXIIZ9IdCKa/QwgCgHqwpkEC4ktkZuFAPaZ2 aucB7G2RSe96W6JQk2gX2grHeEZsbJz2C2M0oJkUb8amIUpHcG2SSJIfpj5M SJFsbOxNLDJdB7qCVWaxgQ4ecXzqpYdEsYEmmPYLomg+gAsIzEegiZyFNR6+ XwN69gufVwimxWysWGkAWgDuXJdd5gGpCSxQoxkaA5sz34EVhrd2XFcfpsVs /HZzlLek90t0J+YBan3KotqlpESjC4qWnaN0AhJeOZWlNG2ItFzeKlRv8j/r plcGMx4yWEFX73yNoKylbYilQ6IohaB0plxSGGNYalBfUAgfHBQBY4VWP1to 2G0lpxQM8Vc+R/pnYKaUG2BgznEjXwVZtT9TZOEhQmQuAC2QMJ4bp7ILwBVk luF8cUX2e16CBqc/p4kKmpnaVT2nMqdHp7FdZ2lhA7RY+AShBCmOG6dpko+e y6VAO0UINIz5AceY5gG6VxSMx41ep1hM2WI4maamYQNrBSRaWJngR7ZY/mTU SGJzvJTFpUMTSJHajlintYWACrQlPKUypwZ8/iZ3XHunf58gp+gJwYL8pugJ GRlTBIKntKWRfAt6FaQGp0onLkQre1WcB6WIp5ZFx6U+WVgYxYK9pXcs+B58 muxOJR6CBAhRDJKIp252unweoganxiwZAlWaIKd9Qvpi1QjnAWpY2EfEoiQI qqfoas1KsUebdpinsqcQGRc7NWlXY1aVM5UTXz2mw33lAZZ90KUlCCVVCJik pOums5RcOOhL50PUkqmnpWBQdZ2VnKJ3EW5nfYAzZuumxioSAsILm0trAu+i MIBvfTKniQqjA+FlK1uYpwhRG5WbS194sFsZp+imdQi8Aphq3W4vVbU7/22S kO+n02q8COyL9KeNCXN+h1svgOVliKcQYvymiG0rl5xIHQLvIeum1X/1fSMj F5PRdexDqJoIqK2a9WfsQ5RTkVkMpg9LH6bDQqeKAm83kTo5LANIa0hyoQU6 eKZi0gQIaIZ/VkQbgtqlQnOpClc095KMjbSluldqA6GbcpMJjTlcVpJeR6sB 5h+mXG1YxwLEDI4i50YVBxSIynPXpqRcFWytcEICrI7hpe96gE2HAq1goEuc SH965ad0pmZZWFfZDIeI8hGckTtqbYgWp2qZ8hHWip+ZMWzlirk/xaWobbhQ mmA8WPg/V320pcGh0wgDpVdzaqhQkl+VvaVRno4EXwDISgOmYIAIplFNI1yM nsmmjF7AmYxe72ytpP8HyG1ZSABLH6Y/V8s6yGHvTxRKNaiYHrKKtaHBAukB aZAHqHKoBFu8Alxi0KVeR9BXBEvAaKdDKF37V1oF/KOlNK0B8pP6alUPH1DA oSOmbBQYBdcBxJXapfRztgFvCrVBOnFkpGEIxAOWfX6LCVSVWR+m41o3WrZJ +H9kXiVexF0DAqNuuFAJpxQCAwKoQ/iPyaWah2emyKgik2xxoH/QpfslZQA/ ALyopoNTis9cHgkWoUAe40/3U2yffkXNfBdLzIFWqMcGRlSzGG1+7HLeDPWA xaU1boh62XTWAxJuwWMkgM6VIk8rp3pYAWg7qDl3pWDgV9YJ9J2AYGUCdKIh ciqmMWHWdFgH1W4QlEJzPgqZhheglgN9VxCmomhCdQOPpTTPWqBC1GWQe2Ko H6bRgoChrKU8dagD7ohpkwimUgQ4BQkpo0nbBZADjwfSmh+mdknwdVmZDVpJ eZSNjXPTpXZJ5XF6Wu6RHZjapXZJIGlZmgmMW5+9pWwF1kMXdsuUy6Vabdtc YAywpYFEVQ1icvpZKDkNqJAWaZUQSkECGqeUGztJIowLb2qMfgl2BEycfEwK aVcAJ1wIpgViz4gYRD+VEqhFT1elmmZfAakII1+WlT2maFGXBOFSAWlpqbVJ /2EWnrSlbqn1kwVMEJhbmtqlEqAsdRSBVwm0boyWaKnABP1mAgipCkdANZf4 jLClhKm8ApmdTqnDAW2iOWjTpcGBQmJfdEMCMpOspZBpf2bxP1aomgxXNPoD +EdUqJ5WEmqwaMCm+gHnCPio94szj9ql+gHRFGCaTqX/B4qb+FYnC+xtcanN XGEAVGJtnb2ltANYTJJ0tmZ5ALOh4aXZfP8Bm1rIp7upKicsJ1xmVwZjAZQ9 YAdGlx+mw6mmUycBTHLOlV99dKbRqWoLX2/qpdGpAIvTpQCpdXBzcJWP16mx Ckw7I1+wqXgn/pA7U1lcdgj0pzR8oQLvqU9EREednfIN6KZTJSV/fkRiMvkz gJNGn/AL1KTXpqcGnQ9INJ0wcEjcC1hdCKYAquYIO5iyTC5MDajjeM2gpqhE JBBsvaURqoUsL6lMN9aC0KXpUJV7GqoIpulQ6G2rfhcCHqBpTOGlRISIfrwE 12LflB2q3SMOknc7d1iLSRN6KqrMVVkxM3BGhA5njQUhK30/XKkLabClRIRp XFBniqnLpT2qtFxqF1oKlAMqqv4/OF7HX0eqLUWrbyOgn1AfpmeQPaZCCV4/ +UQ6HiJYHaqOTBM3IWX3dfgelKaKQtgX/2kZqmIDlG7ogCwDT6EkqoRJfkx5 pEBb6qWeJRUCkltxWsCo8gLCqLwE23AJdFCq9XZ2qg2jvKHvfdOlCUWCSUmN QaocDGlTWKRQqs1qPYJ1qaU0xmGSajOb2qWoAXydtKW2YG98RJp0pqgBopYY AUhhpDmmQ0yXu6eWqtJhZAmeOp+IpKespagBUGg6hj5HWKnoXDFLvYRxqWGM e3/wqP4pcA4fjc2hahKwpbGqFZoUmutaAKJ0po+TGJGKWjeIFEkrp/YL/XYj Z9OloQXvJZGnpTShBXB0xqqGehyplBs/AUqMpqiAU7FdeYzTp3dw7Q3RfYFj rJVyY7FzhmNTqX8KZ2GQg4haYm+tlXNjsnO9o7Sl2KrjqmQJdIi9QzYMbKas pdiqcIGuZP4IWTThQJdMdKbzqsRk1lqRg+Wq3aq7o3mn4aoHkH1Ae6qDQrqq VW1OqJSmjAGbeI9w55K9pcN6gEiPVQym0XnOklAb2x9oJ+mqpTS1ZLVnG4aJ qtqlAwXiRA2egJPYAXyGY0VSpuqqlXowhM1K1RH4XR4vDV+9jeqqNhvCXtye XqBIYGipVoW9dQiQH6bYATwCJprOY61rL6nYAX2NEoGqpeyK8qrIXh8CjW1A ASp8iFp2o/qqFRMSQBRYjDmWfSaP4aXvW+N1zVq2PS6pNahYq8Y1ij2UJ4Ko zQHQmFMJFSBNCNZGiYtjq35Ec0gIpu9bvkl9WTJ7QqtblTSl5Rsmm3GpzQRs BcZj7IKORad6+Ug8q1dmHmb6luqqUAd9Wq80xqG9mY1NTaiRTCNIuFBFA5wE CJiKHmVa6AUaA3ZQ8okgq6JunEMOSFoKf6tQBWZtfkS2mxCrUAeGRdtdophc QG2r7QiliLE4A6aRTFxwRliFk4Kap6sqqwFKgJOrk4OrUAXHSl5HEQg1WxZP /mtmlfKqUAddcBpsNACIZqdYKKsbq8CrzUqCk4pm6AIPaTKo31oTbz2mkUxC mJyrUEk2Q7JYV28joH8EEprQqlAHZAmfinFoXavdq/wD7ViOCWmox6tQBWQJ c0TGajirHJB/q9xDvJn+pyqmlFPhUOmdmZtSOgVMbgjRq6cBpAWVaIZhEziR oGemJUPXS7gIbas/WZwKH0R3q5xI0Z0BSo1N4AgzZlhXxqsgqwqsEgWYUbaI OQBjWhGs8qphBbQCaXo1qt1UMGW8CARLbViWkT1vmJHXpjagup91cMQDnoII piisPpf+AmyEEI8trA8n2BeZM1KcFgYre3FBM6xnHa5mgp+cl88FtgfEZKx6 zwVaXGQDzp1QBUh3RKxqP3il2GQfphpMPqrLW3GpT6wqW/eTk5biRE2ovZfs aKKLTIThpSZMhG0UhJSaaKmDEs0C0IS3aDWqZmMeES9nFgYWo06sJ4daYhlK q5kvTRZ33F0AfMxspTRiamkAaYUfJVSNvX+eneEZwQs4HnlRA6YEeOQbO27T pyYCmIVEOFKs2mo+ATpKDGO9pX4RNIwjpm5NdlwvcRMBLqC0peyPgAXekrya rKXsj2GeBaeerG0IkZ6+S41HWqZ0psCA/5wtrGRiSQ6WSiSnwIAKpwhwWG/K jz2m9mqSdPCGg6wZKGxd2qr+qtyqlIPoquCqXjdyRB0C4o5drLqsW0UQQdmI mazHrIlLF09npg2W4WWxrFuoq6yRhBow7WaQrAGRF5MzpgwDtWEHppCsGQMy ABdLaWWSCy2sGQOjTElvRgGohnuqL5V2XB6MUpRdrFtAZTE7BuaZLazxQpZ3 kKwrpsteXH4VR3upnqw0psBwmKQzoF2sEpT5Z6GslBuon2YKRAH0Zx1lw3BO rCaaYKC0pcRkCpSRJ1EATF5kXtOLfJZzABZmgEguDcuABHdFRK8o2AEAZ+im riiGDAimXAPrcDabw5hHCFJ4KqY2DNWIjAHVKOOSdKYvrVo1JUL6pV8GJX4A rGipdp9xLXifhqbGBeVCLl0nrdJcyXs/rOenLSr+RmZo6qV7CrSBDafapYmZ wVxll72lpAtEkaaomm+XIQ96HCb8A7hBDaiOSIc0z6piHdcJOB4aY0AWQwe9 pUyL6mLWfLSlTIvwiVVTsKVtrVOha62lNOJAl0TiZJdtbF2MqOVdea0NWnmt TgbfDWRxQFtncUhyNYM2AOh5nZJFjuFCtXEso3oNNYMgRDMA+GYcWgVYEFgV VKwuQqaCWwVYLXYBaXQAVgBGAEoAegBHAEkAOABrRLMJPkiNSF5XHB4xABxV bwYve5ut+ApRonithQU8D8wMk4Wcoi9Zp3BfNGFzjarTAy9ZfqZply9e4UQi WS8IhzCyXbOlja2KqAKhvZkbhTqHRnerjlGOXVgbhdCUPHGSreVne2XtZVN+ UUT/bYwB72RlWn2tEA/YLEwDmmbbrWmpaIgxg+OtzAG1Kc9/wq0gC0MPb3Ih qdSt2noOAow5EVJWiWBQI6p7lZQ1Qw+nch1k+a2ZZnpdjAE4BN1A0JhzrRgQ AlY5mNGgSI8ue3ldQI7QraMLv4nlbLhmjoTerY1cWFdPO1Zh8WHCrc8cc3SU emGsGa6pAYwnJWm2eBAPpHWSrQgCnEh+aaUmll13duRQL3Z9rSaujCeNMTZi aQgjrnyW0CQfriACLkdgWBOSIkewpwMFb3VTbs+Vwq2WHzlgoQRwhZKtXgPN U1yre61+c4FfUSjtmdU3iAUWhkKuZkiUPbdogg2yZH2tnGc9YkJmZHAFrjYb j6KNraREsUchBWys0K2uZT4j5q2+atesmK2uZbSrdIPdiC1DvVEDemd3YZ4D SVmui0B5myiY6SBZWdSgWEgiFtegXq5qAPif+prTS7ldLpumVFmuh4swRLCp g6R1cISuTwxAAE8AeQdYAi9jd2eSC9YBNGe1AhwFwq3mhooCYAFThu6MZq51 ZTatEgx4rSgC639dqpyufJxrYjkIMKvwlUUE3BUfGDapjUWzCZarvK28BooE WXkPrgKtqK3wTDZi06FZiNahLAPYoSKtEQIBb5Yf6X26njeeI6WubveTAIiM f4deS2wyov+EBq31CL99nYLIcMqtpFzgZr19aZqsiP2rUE5MAUNmHITObW2W mAhaNVoIPkFkf01SAQLbe5KtDALyKHI0qEiGDKitDAIoAVKFd0tcA5qf766P DbKKjK4MAm1oVIBhW8GoPGG8rXpvTUBsBVw/Vpefn7Cuem/YAclu/K71GKKS fGxeA39Zu5/1rhUGaDeAN69tj10BnwB+bon8rQwCEaitS8c0/K6qF5Q0bmWb rZ8GigRYmWhuZKyUmw6uwq3PaLOFTgrZhTABoknSrkUIUwRDS46WKq92T3qq lq5EA91sjWRjDQhyHa90AwZFjWXGO0lYJTTgRTMAqK2wAvtxPl3kctJOpXzC rWMMAwgar5EFdnA8mHopx3bSljsPcBKHmZyXNgfkrSFdKHrTrZit708smbeK AZHRnVIL0XXJPzIisaDnpTx4HQK5O5tgdhJWWXavup7TaiEWLg17r2aFPlZY Vx1fLKSorXZpV24Pom5KS47oV+tMlabzRmNavATAcCx8wq2BRDZkmEAdDP2g sK4hk9ICbKi7AW6CHa+NEPGIaFMJhdQ8onFweAyJja3HcDhjP6L6akoJHV9o Wn1qm614YfwDewEnZtKuBQLVYYmBfa25r8x/QgnJmHuvomC1nsGvhYaSrWBZ KmGkVDQGgqjtEaJ72BEvXvRH3KIFrvOaypwuqI2ttAPwOByPb5Udr7QDOWdi XWumwq3RCd2gaacZSsOoBQi9fuB8IwUWob6JVGGbrdNC6nPnptGZjHc6ieZL mgygbHSNujRtA91AE3NfhfSv6K2GmMpKca/7jrc4C69icuZL5kupaBOp0q9n HVOWFwgZApyq4K9YeGAZb3CrAXuvjGU+Wf123Z2SrRawEqb/JiZI6Zywroxl bmJjRbwIvAi/iqZUPa5BAtug1a/SrxBwt5FmTM9DbKl9rZlL63m3SumdJUNx LZU4T3Fskdav7QTSTEoJNa4lkXo18nPcBIRMUJNoZed6apmBpMwx7GF1pBKW 0K1KlaQ9jKo1af5G5TBarC6v43hWidR7awB9Vy919hcGeRCCH7DtF5luZK+P lYimHa8lbPWqe6+FDPifRoQIBUIDSbCLQqBTEZdTsNdNnAqRleQbl1etYHiw zgHVXrEn60nQc6ityqEdAhZlCa4cROYfvglmcPdTn3mYrbAKklgurxknhIZi PBBij7DlG6ols1yBqu1rYUyypuFoc3QgnAoC9araYjEghl0km6lkAmNJDvaq XkX4qjl7gbCnsA6lJwJWTvxfm631qkmld1/lJj0BTVl9rfWquwuGYmoBMJug mFVmpAhFjv5PgjgnZm2w/wFzRmGt8U0BQS1sbFybavFNyKZ7r6gK62cQcdKu Xgt5m+OqaGvRsF6STnljdJiiOVyACnAcH0TgsLiOja2qAbtBo2oWWMqW/K0Z Wb0BEZaqg4GwzW1qEDloRAN2Hh1lknu5IC1j/61vaER2zZYQaVBf3GnWOupz mU8BjdxpRnuDVD4D67CnAZdFP6ZoCNakhK1OEgux1U4OHHqNZ4ILsZQEQhVE gQ+xCrEERWoVJK8pSM18HiQ1AmdGV6eZsFkDdAJxpMKtJrFeR3Fa/7AxReCb KbEfJxBiAgk3qzCx10pwe/CeMLHGjYWRjQpNAcMVBViiiNKuc3DPAcOTIAII iJKtQrGSpnuWwq1mr+Kk9IV9rbYHxwEvSbRJy68KRaR0kYWHStV/y6/YAVpP a4lkrxwF5q3+eaitlFjnQ/+tJFrVAVxm1gEvgB5+tWTqAc+p0K29Rx1EiaOo rb6oVqmtf35Qfa17Csam3Zhvp5itewofdAKfrHqJCigBIjQosRxadQBRAGcA RwChOzcAVAB8TECUplzmQ3dM0VgxoRgQ2gqNYBBi2wq4gPIoYFkWWg8FpmSj l49doQTlG0kOO0oYl4yOcJmCW9B2AwUbcWRSkZWpOgF+N22bai53OUlfOHpd LneQROJLgaQeCeyUZZUOQYN6tgWVSjQA0qWcl0VrOVxZpVyltrEogwhWzKDd Wn+tGwkqgclHN6FdWBiCOgYiWdcILF6DA9axcA71mtWeuQOlSZWVCbDTA96x Z2lGhHMS/QgJZ7NYIjRWWVhBa0SbpPuXzERiAF5X8LHYLFAAWABDEo4/fyks jjEAsRVXAFAAUACQTFKn/lEmUTUL+Ci5NHpKDK8HCWZo0AgWky14qbE1C9cJ h6uHiBgFEghNZSkxbgAWsuuxcS0BBLaxGrKAbg2DGbJSC6yGDXx1RQ1aIB7m W3dnIB52qAt+HWRYA/Cn4qQSspIRVzoUAS5jVW8lsn4040vuEiSEqbE1VDV2 S5ewN9axSW8pmisxrIgkWqJ1H6visSpMRAJ0SfIRY0UWQGNI2KGNazwMF1ql YJxLMaSpsV8KtmBLbPiMEX7ar15XqWM3XT15m2p2AFQAS1w4WDUAFmG0XLV/ 7WtMWpRhrAI4AEYAQHIOZIhaBllFgdV9PGKpVGqVx5h2siuSuqmCW3uyukYM YoaavHj8eRgQe7IdS3KEUBu7rUUEhrKpZC99qbCqEfmqj117sjV7RgF3ODU6 r0vDeemSXVh7shVtIpvhsYuyJaEkeTmDvwKaoH6yfh7RJ+WjHFrzBbKTJFtW WfMFdlnHZEiPKkxPkWkDx2dQXyFnVLJWq16yrgX+Z9huTJKYr/GZuZear4Es J2WtYPVmMGrHBYun0wOSqCon64fecJuykQRLAQVM5K5efG2WlXNLARNA1LKV WlSni7LKQ2YHe347fGKRy7J3LDtJsIiqFx1kAwK0lsMCIqacovtNxAObqL6x ZJSbsqkJYl2FBMOB4VctnZuytje9br+iFG8fGBMIXrIdAosytYXYpYOtAbNq bpmFc7AiWdFV/nKOrNdYfrLHljR8D2UmceSGOVzRVeqF9ki/MgGz4F8vWQuz AQSkk0MC9m2ysqdEIKQQswJMfKGHiCYIhZdrP8GBIYjXeK6yjgQwr8oEbwbR J9MBapkmCG0IbXysegVJk50fk+Vde5PTg6qy5qiaZvSJiaChbzwMC7MsJU2k gl4qXbqym7LBAakJDUkUZERHYgF/LccBdmP/bSRwvQkuB9xdA5h2f8Ofy7Lq ZhiSXzcpe1djC7NeQ1RTf0Snrl2q6LLtqida7aoLs8lMr3PtlK6ycQBXACZ4 MQA7BstwKXqqslNIQojDAkxo3gwsFAVEqwhesgsGonR+skFuDn5+TPNutW2P YuZ2sHYYEHYIBFG0Ai0AYa2Ts41FpAiXszYARwAbbucI5n4DRRBevUMir8Zd lLHTA1wDtW57s8iOXXULkHoN+q7iAdk4W30+gkpTIllcA5R3bqK1sxcIPgFe Vwd7vTrzbr2zPYgBaQd78VrCs75H2ETLYuI5v7O+R9+anKJcAwxyWFfBa8Fo iYHfqJxeeo3+fBwelAeXbYuTJwI3bsWzwgsAmTlgn1dCmV1YXwY3XtCfrIgv e2huPUzmSZiH6kwdZTlcQUzKH21rHFpBTMhKQVTumY6d5LOPDYon8EznHs1q DaNiVmxgkqzNs/B+/JOpEgyh+rO+RyFdHUzHBhmr4KoBtMGkUG1RlOKyRQQQ tJl4OWATtFZZ5TAtALyzQ1fgqARizkXdTK9kjpeHfxW0RAHmhGquN0HzYASu p7OVbfuA5Gjws0QBFRMJZ22Ej12XcJJlei+RlZdwfg1oo/ZwYzQkoA1aO7Qg Ju1VhpynAR1kEUlzR+aNUYgRmDa0L7BYV9cDR7ROtIdK2rMvsCAmMGijqia0 KlPsUR20WrT8n2d53UakdIxM9LMKgTgF+gM3d/dfqjpMtFy06aurCBelY7S2 XJpEXLQXS55zboGIZjc7Z4P9jnK0/FApfyKYb7SNTVy032xfNOF1H3yCW+Uw HAU2fUCq7WvlMNRCuzOzl020zDFRJ7gnGQTqo1Zlb7Q0gUaEdUyqER20U4rC XB+kSEkAp3af0gKWfZOmtbNTBMuA1wkBZlRhS5fcssEG0gSgaGSV2ksaoq6z F38HR7Q4W6w6tBd/e0wdtFVB46pzTWoQpqOttIgFTkTzSMiZGrQOeFQErWDs fqJiTmnpIEsc6AUTjPEHVXMDcP9tgZ94DeZt+ppPnDeasQqhrrO0bmGJjLRJ YHKfsq206atIQEqJpbToXbKzS2w6U5RmxErqtMt3oiaTAphAMDxEAn117KXe KlihtXZTBLyzqQm0MfFRUF+eBmYgYZ4AtWVjYgHoW3lL0XV1HhNEd2ofnBq0 vVliRfl4m2ooCy2gnnlbaza0UAO2fzCM9LOsP7aW0mCFtFAC4kAoC2eaK6Qu h54GtRKTHmNFCExdCA21sbLNszlJIgQDTFNpLo70s2sJFYtroDVZ+UrSA98S l4qGTU2IZwbJqpKzu4fqszGzdAnrWryzs0MUA/1xNBHCFTGDzqQZRKJp+mxV ZghRC6b0AeJA7kthQuRgUbXvT+ketJ+9mcWU3GxGtcEBk30mSOhLAEkfJxq0 50S+qmqNUguNWmC1kAOMeOdLWLSJB8Fa9rSiWMEC6mJor6mvQLWvIQihTHJa NZc7dVq/pi91IJeutNl0IJfHAdds8Se7NJJbYAfUtO6o6nMceNEJbKW8s8Bz CjPIZ5JTKZ6us+cI4UC8s39zrHqPVWoDXBJZrYNxo2hBtG4EBpemZcKzBUj0 AS9iDYQArVdmcEitG3opJmIlZOSzcJ4hXeBfiXO8s+KutW6WXc6hGrSTTSCW wpK1tYBIWQNJW561k01QfCGW4KW6tQhu9TO1QaNuYETVcRQC2GZGoja0k00y dGqZyErEXOhL+QHoQXKRzLX8XT61Ha53o6ezJEr4V6wBVk1HtCRK+3YstBW0 tVSVZlSrLmN2fYl3SHJ+sbxvmUCydfeTl4KklBMDi36FtNBvjmJhfLOjN530 s3QJ35c2tAgWtrKFtT0f94m1swewnHTNsxyI0FdxtWZHKnOwAwGNZkcvYVuv AWkWSSgCZZFWWXgAnEYUQOYBSXqJi3gAqWEwAGsAWAB6AKJ1JbB5aEQNzGjl XXgA+ApGAY4pFANeV35M0UrOsgt2OLZRf4yz1mL/J5WI0wOmZHF8cJAUalVr SHKkdOV8iJ2JHl8B5paniieaNWnpkfOaewHhrOlXMWy4gDlnawA2AGZI8IBT a0i2OLb0i6GdHFqSgIVBkpE4ttBdOLaYl3tl0XXMqCJZ9EbeKq0/Rq0rsEO2 8U2zAjwVbbYwCTi2LTk4tuBkq3TKBhUB6ElZoYJb4mQ1AKt0owOwiOmhm2rU YUhyjLZjMn5E57KLtn0BUgBmAFRfFpmEgLVYKWyeYgF4wRVeQ/pjAmCOZQ1a 1D9HSaOgGBA+Cg2Rx405RYgF82OcovkjoENOEd9h826SdJGAJUd2SetaJHkZ eRxanonlV4Vn3pC/sZsMsW9JqQZMwRWFLLq2amcmmAYWopYkkYF4gAoItHoN ybb5AStwcbV0ST5SRwA6Z0cAmLHnVZmJ3xLOtqa2gUQxYZhAyzsGRIo8bkpg s0UEX0NxABBiOHtGr15XmxUwW/VnrButYKwbsAwdZOtj4nzmQzGDqU1+HtCY taipTbQKWJ1pdsmOho3PthFz6qSttgICjWsORsB4LV2CqKkB4gIKt3Clz7Yv tRG3prYrJxtfaCf0jTKdi7YWt/YLz2tcZkts1Q4gtRe3HrdTrYJbZWgaigZl mUBMRHat8Qdvpqmaw4HpjtOZprasBVmHel1laOawjwMEsCJZZWiOaz1M0Buq qdaN7ExZHvJkIlmyTWMA0jxOXRN6YzTzNNF1jUQMXdcFJwKyWP4EHKibNAMF mzRIcthuAkwDtqup0wMuDaFi3llfPzdJ1KEwpfGrXldet+RQD2WOSBOnyGFb ZNuXeg1et/gEpJ33ky4NzAiDZ0uAo1e4d72UIACdjVAnopGcly4NOwJqCmti 1WhjAg8F331CA9to4n1mt1yV86iOZ0RrYZ2SL2MrJwKhAuuge7deh9FwcIVC guhBVGnItGhu6EF1AllmQ41/qRyExzqShOxrmmboQcx7pQh6XehBc2ejXFQE X1JQk0R3k5KDEvUDO3P3Y1G2RbcYBO21e7d8YWNIOrNLbNaZMGTVa8RrZrew A7NLJ2bQmRhL0pk6iaBJ73AnbVOYJbR7t/pj6EkuDbByOq+cRb+xvgDGAMAA zAC1APAABkyulRwQR1cABXYHqD/kt6pPzQ1HVxk/GF7qtwAFEEDut8oBMUAY P+i3hU/ktzdX47fot6ZP6LdpQ1Re9FLktwAFVwB4B19elgzUKfi3cE7ut+S3 BUMIQ8lX4D9rE3YHvwH/GwC4IQAHuO9JCbgCuPhABj0TuP4HwyfxC5dDvln5 tyEAED9IACS4UwJZAOi3ZFzUCgi49wLbOlEDkBuXQfcCVgwGOqI4FbjcCoEC 8RoHYDsKh0eXA+cBIgA1uFUnIgB/KVYA9wIkAKI7JQaHM2MC3gGZYKxJFLgq uBa4QbgvrXK1ip33AsIDRgDRQgsaP7i/MyIAAl+0P8ACD0JdA5hP2go+uE64 NrgiAJBAaQjEbf4HQwDCpn1B80i/Dj8PADSXKFm4rgFmuGy4k1xpA+sIf0fC Oi9BFTvzAWm4ZiouZ/cB/zGDgy8fcLisGTwIc7iBAhheLEAjCPc6JDIpASsW eQeSAnwF9AwSWOS3Y7gcECIARQD7TcoY6wKxBSQ9LSp1XFZByG1CArVmR1eY uCu4m7glFo0InrhjBnNcqn8VMMltngunuIm48AIvQFMC9gytT6i4T7hFQES4 zkXdQUwAKxY+FRMSRgBUABi4aQWauJYa8AzYMhk/MS3mBjVT6FG7uGW4XkDy TPUDAkCkBURFOSOmFX0T3VTBaPGxZLhAuEcA2lLxGmxACkATVf8aCAyXuLW4 ayriDYVPRwA8Crc60wjpPLwCPwApA2tNwjraUn4ZLx+1uOECUQPBjK4B6rjg uFq4/bjtQXxBtLgCuXS4CCmABNQCagrDBAy5gbjqEf4HYDPWQZBBz0EtACRC uFHCOqeKUJm1uFNeLAL3DGsTLjjzQs8C4kLYA5ITkz21JcsBbQQpAwMNplCc YL8x+7gIuYECVAIgJqUD8H6BQWsJPbgduQkCJACkA+MtLgD3AikDE7mNQmQF dQgXuSRKGrkJatgBtbj7BFILxUHqBcABslzBP5VC8CG4CWZV0rhAuIJgPZv9 AWkRIAM5CAlJQEMfHFEp4jOuATEBuAHsaFi5WrhauTFaEU9euS1nCQJCUhQM KgSDJ1EDOQBnuZ44abl0uERPl0JRLsVIwp2GAw4T9WJjBqBDuAERMlMBKxbF Arc6CwJ5uYEC5WGsS4g8MUVhHlQ3Pgy1uH9gPA/jAkU/uQiwQhsIXkBRuClX oCWgQ0C5tbgFQ2kFoUEjPWYFoUHuKaUDPEDlBs24VQAnAAASlE40GCQ9GF4d O74dMbmZuC9c9hl9QScCHCaAQVupjLkiABi57QLiepE9pwlNuSQ9XQPnAbi5 CLieCuk7v2O+AalOLwDies4EgmAnCK1Oy1SJuCMAngp5QVYAaLOjX/MGIwDa uacS5D/eAUk/8D/xmN4BziYmhNgBTbgcEA47pQM9H8IDqE4jBW24nArauTIB 9QyJuC84+7kkAF1cGBv5LPkb71cuOPu5LgDDYN4/c0DiuAtb9jokACcE3z98 B6A3kCc9uSQzSAAvAFIA+7mwOzAA+7kxACwArjrqXjsKxgFoYQgDG7odus0b bUGOBsIVJLquOsUCpgOQRTMaLgVrBDOHZwDuuQi4oDclunwFxQJ2n+0CtCEy P6ijvAI0uha4oDcmuvUCygFaD2kFKQMDTRZJXZqbBQocLQQWQmMGoDeMOS8A e6EeCRu6EQE3uns/SQOtA3Y7smj/JxUZZBdWus0bEAMdOn1B4LkuQZEzPBVA uja4QrrNG20IrbSQRR8aqgQ+usECE7hhuhm6Zk/tUqGtABJBAAK4BRvbuFwT y2UKRXa6Wbp6uiE9fbqdP6GtZErmBvc6lbh/ul0TshLUWIO6zRuFuny62AKI ulRDRLqMupa6jrq3IKZccwBxAHa64wEtui0eCQLDuV8DnTKpTgAFZ7roer0B arpVJ6A3ygY3uuqdGT8iUEhXMrmgNyQzrQMkAC0BgAlPZXMAPwAdGXuh3QR5 eOchyAEnAGgGbEw9ClMWHH1gure6MgCyuie6NrmQRQAFvQqok4ZBu2pGAba6 HBC7utM5PbnNG+szTUAcW75czroqASwAHDi1O8sGEAORAldRXkeuur8zu7q+ Oi4/WEMRTzS5DgLQUeNBqrpVAN8/71IeEkQA67c6REU6Vwz7uTAWfAXyuvEa aRH1uucB97rrtz8/+7rYUhNV/7rQT2QwA7u+Oq9NrgE+NZgf/geVQn5A52XW NgO7kQIzGmY/7AP3t866KxY+BEK6Kxajut0D1kFoCFQXoEOiAqwCnBfGAxsI LQSjujJb27pXWxsIKLvSuqS6ZC3xfWkIP4+RQewDMbtRA5ECPgQ1u0hWsgWW OwK7t7pjOc0bi1wkQH0GWX9JA/sEpQFrVgsnpCqtuvu5jDn/PccYigu7Efu5 VDvoid8D6jtIDetd/gVlKyxL7rquASQA57p3uvFV9wwFQ5dO5gYsAkYARQAA uPu5NQCyugpHPDwGcHQJebutOhEBgLswAH4K0brrMwkCIbv4gKtOBgIvujI/ gF/2cdu6kLhGBMdBlQcsu7QzLQhYLjC6LAJpBdq6NbopNq46krgtBJW4axMk u9u6n7vNGwEDorukFKW7NbpxBJ1OFhELuv8Xs0CoPxo/qUAxLVhDrAchuSQA +7muu6WI4jFgM+MBFCf4HppF6re8u325VE84A8C7OyfDuxJNJDK7u7e6Rrgk M+SggU0tCGY/boGzHdEm1h1WnZ0DRCxiLRcCa7skMj0oW0qYQexDu4OJCs+7 27qpTjo0rE5mYRowIAAnNuA47QJuujq66LsIuCcAJwBvQK65G1ZZAEUAJwCn QCkrjLknAB0W0mk4enUoP5NnALgBhLnrCFkER0+JuCgAHbixJ5knyD8uAH9/ HBAPvJxDFbwIuCgAS2C+A0K4GbwWuJoW0wIMCx+8NrgLKh4CJLxVJ6QBpAH/ ufEarlJQu4knM0yVDF8nwgMhYe5ZHBCkAR6NZ0AjUKW6RAHKAU12UwKHe6W6 bEy+AUk/RwANfDa5oSDotyoAibikAYNdrSeHT4O4bQVLvDK5sBQ/AlUA3Zf5 BH1HyQFPQEyQOANTvDe8JAAqAGG84rj/FzEFBA2xQMoBazupN6S5pQPWAmK8 b7xMvDog6m0tmcI6jkCjAV+8CLh3ITm8/0s7vEi8PrzWDrMDsLKRUykk9wFG vPtIfrx1IXG83V5RA3Y7jyenHPVBEyF4vBa4dSEkAHq7rjqmWutlj0BrVnch nLpPE20M4mD/Vze8ibxUvHchMFS2Be5ClFQlABcTL7vUAtJoUS7Qg5dBPCi3 uIZARwghE3UhKgArAGEAIwCOIlhMkEUBaCYGDW7cXXG8KgBXAM1qUS47J0VV ckM/ACoEoFoFAj8At7wzvMATNQA6AOUCOgAfQsID+n+kvI28xQL7BKIPpV0k n58KcQSHu/i6cbyuUmtPL0BsQwo99QKjvKK8RUB3IdA/4ZJRJIYD8AxXAES6 irnnRgkCHChfQ5AInbuTvC4AKgBhWqeKkTTjTuW5arhBLIAD9QH9vDa4KgAC XzRrYwY2AK2YqQOYP3dAMQArAJ4KY0n+BZa64rzYAmsTsECuUrc4IwA3u3m8 8xt/KdtBRQCkAbQGrFH2WxpEChVMvCS9RAAmvQQT6AgDA1A++ElMvK5SpxKP Qv0BpgOhIB+4bEK+Aa5S1ruQBwoWpxJUutS6nbw/E1dydgDVnDe877hrNe1B AaMbmgYCIjSqvMkGPzhMvE68dgQ4Hk288oRtBUEAxQWqDKy8sARXBiK7PwiF NZAHTLxXYBgbFVkvQphPSHqqDCQAoTt3tEy84yDiOnIDdymvLv0IZkmrdGQt 8RHCOs+6yLwkuV9ohkB+HkEeB2B7vecBkrwLvVhD1QKkAfcBSAAjCBxR5zqu AV65WYTTC3cA4LsqAM4mLQhHvVMCp0BsvfC3MjfWqFS8xbmeMHJRwAZkZrNC uwQ3XOC5e5hkAIq9KbxgAH4AygHZDgZQqbyrvJJBrrzAAbC8HgImBq5StLxI DV0Tuby7vL8Fj4DnRoQTLgA6HBwmUjXBaAtoN7x+AN+8Xa3+Bzm4hALcQ78B 4wFzXGUAfgCwvb8zKwBFQAAFUbm/UUW50EGkIisAibi4AXMX7Lj9AeEb/QFx G8UxbgeGA6BD4LspA+k8YwhIDe8BpR1MmeMB6zp3vfYFibgpA7dfEyLtvdIE XXs1Iwq9VSfKJmAXOUDyTsRUKBf+BX1bw1Tkt6Uo/73CJusFpgPEGf0BqTxR dMIDXwZ1vFFTPwptPN9Z8L2iAkk547zot6siwyb/vesF7wENR4MhzjaPDU8O aym2QdehswFPrzK5fkBxboEs4wGVQnUYhgMTKP12OAOkAy0ADTK1bcI6IlCe Ak8ormVKO9gdhgNCvrRB4QEKTycwhgcXuUABAFqHPc0bijo/vEu+JgZ3P5Ko GlAmBlAATZ5tXupE7103vvA/03s/CB8obrpWAK84JgZOAkcsPrsLnyYG6jus jScLPrx7BO+4iTLWQf5q9wFQAKyNwB9uvjm+jgI8vuduJgYYudcxQQBjAjwI qAMmBme+5QnLQv+9cF2SSBADEyh+EUVZAkCbeUUFXL5cBKAwxRnjAUFBSA0h YR074Rr1ASlaZiAmBoS9WAVCvqm+/QGeBS0AERc6AJK+DgN/J3u+KpJkLX++ 3QH/vZ4ELwhsQkIDXiQIA7G+vAKzvoa+tDH7vYq+vQGMvjwocjRfA8deeLiK OpcD8HFJAz1BeL52vEdK0p+SM6ICjkeJPEECQr68QKk3QQBqX+2O/72sGoFl OgCwLuMJRDX4QRwCjb71BTsErr5TAFUArxXmBiS9TABrE/cBfkBYKxFPY0ki KuEaOQieBVMCIwgtAEwAD7fZvuQKlQdLvuMB6jstRXO+AHUyPBoU976svp4F CLsprMkBHChfLYm4CxXrKToApzOTXGsQ473YuYNB+CpFVeUZEQLgu2QX5BGi BKlNR4R9QNdR9RVjFwoVFmtTICm0fQbpXBwQChWwFf4HKr+rqhi/vkDKFEkD Bl7hAQoVA14VBy4A6l48v89BAQUWNiB5140KFS5XQ6L3vicEoqNkdTVBsGU1 vwi4ChWZYFA0HwjfDbCCY4Makg804AN+EWUKnKVBHq0DV1yoCsJZMrkzGikD xhz/EgAS9jprOzBAay1+GXdA87ceEuYG+xpQAIm4MACqvDFBDxOLXAe+vzOn EnY7gAPJASq/hAUoi0gNqDcnCQNa67cxAIm4jjqCuzK5LQS0QeewlVP3Jg80 PQAkAEU6ez+Qv986jkrJAUUAi0tzAJq/nL+SvxwQLQS3lT8DVgLmSyIwbrrs up6/qrxLBcgG0wIqv+Bxxpd0AAG4EANpP70CEAOPR2MF5AqRAWUKC0fjQa8B 9Dt5USi8gr+Bu3wF7wEvrZ6/dD/rJkcFKACeOJ4myb9luREBqryuUiFeRh64 uJAG9QIIOQQ0UwDguwsaVT/WrHEtmr8Djp2/k7+uOua8KKwNsYFZ67/NGwaQ vbqwClEppxJnHp6/Kbb+BT9ZdifiBwAF5rxsFH1anr+AAkW4zRvoLSJ0kL/P uhgBfgptPNWUHgXsumQXlbx8BeO/2ZFyTy0kWjmvAXm+tTPLQZ4vJgZ7AINA YwJSIFYMMgA6AKMmlj3WvzW+GwgdOKq86ykMQ04A479gO8I6FBIdOwBZ9bxb D1kAkL8kM1AIF0QKJ1kCNrwIuDEBMjzypKhfPQrjL2e52L97uGi6WruTv5EC lLtZA0fAfL/COvq6NUD0AhNVkL+RAlS6n7DyZOITdAlQwKq8q7pSvReKqL+F J31BSwRLAI8DnT96KSK6NgXWucxVt763AoYD5qCJuJ0EPqHQBdQpIwgCJGgT mFd1IV4A7LwIuKpWpQE8E+gtKVD9AehrLhu1auC7LgaqvN0Fh78YsbkCZwh9 aBwQLgZ+CnNB/QE9KGmSc8DNG00ApEHdXt2XmFf1vdJNChYNuo2Z7kWZwM0b fgpjvf4pVT/6S9gsbbs5AKbAfAWvQGi8RwYqFntbMrkaAU5XSACyQrdf0k2z Hf+5L7sSFi9AicDxBCK7ogLsUjNAwzqvCUAD9wEtvbfAxMBTFjRBDV3Qeq5g 5163wPM6DjlXHQNN7UGBA4nAewT9VH03dIksA18BghyXa4m4PrmCwHyVrFU7 vb1Z5qArOzK61x0HazK558BoJYPA6sDua2I38MDjQebA/gWkFHMoZAVVQUkD mWCvpGAuuQF7Cl0ywCfFA7gCHyhWn3S6+8DjvOAz/8DiVSkDAsFRBwTBVAAG wUi6wsAOwf3AngIPX+JV373OG5BHhbn+pLtmCQPzuUV2JzCvP/dDzcAcEKQD 5rxHX/Mp4Lt7BQq+aQVtSNYOmgchLzTB7sD4wNBR5sDfOPhJ5CE6A1MAuzP5 Jo9ARME+wTAAKxZiGfIRmgNVTZi/eQ2GA7i6SQMvDMsfBgKZYH0JG0BvaGu9 pR0owDMAHTvHwKUBfVvguyY0sy6zHauqIr0WuD848xjad+u3DQlZBFg7TxJ9 WpkAsggSAuC7bRKowEM7PL0yPDSs77/jAZu/cRMaujK5d8GpwKIEHo0PKD/A Frg1AAhHOXQMuZRBabuxvCcENBhZAJW4ibiEO1Y9aTtQQxZVVEMQXGkFaREN ukxUbDxxu0gAlcE0ALK6UzQbCFwDWAXUHSq/esEXS+C76LqrQDZAmcFSQxdV VUN3u68BVAKDXis72B3nF4m4gbZrBPhLhsG7EbMdPbmvwDK5zj2owG2Iq8AP KL7B0lLCwVC6NlfHwcsGZj8xip4ED0LVWskvjqPjAWkRAFVGLEK7Kzt5JyaB tQlpEYBf4LtAKDJWvBoEDb0dbkCYTtpBSgbFwe5Fgb+uASM0RwVbaQIzFwJS Ame+3gFwR5A4SDvcB65S9l+XhG0FgmAFCIm4tzg3un4K9T/yEcCMzQi8Br4B QQAUEk3BDTRPwWjBNriHODh99wFLwRpEDI7+B88xVCAaUTYGcEiJBIm4cjiq vOs/+D/SNQY6Kxa/QU4kZ70VwlUnR7h0aLVkYAgYCGAI1lDVHe8EjVHqZom4 OgCyAT3CXCkowDoALQCyAfJPZC3nX4HAzgRhvo0IqyIrJDzCQ8I6XL0/R8Kt mEnCfkrvMOsFSL2gE05ckkhOwkTCPr8Im2sTU8JsQVXCrCI9AFzCfb3whbAx gAi4AWkR1EHABLoz5QEBuINPYAPUCM4EhQ/WIXRwbgA/AGTCibg8ACgAqQC/ AKkAKQDrBcNhOycDA428XgLVqEkDnTNJAPi64Lt9wn/CgcIWvoVCSQBkED8C Bjxtar0/3VnJARdiGS+fuaO9HBArJBw/hD//XM8CZ0//XGsTZBRXwoIfVgi+ Af0EK6pFwc8CrLmEP04AshWOwjwA1MEbCLAE/QEUJxoZrAFkLeKdQwH4CCkx wAYTv/oBMCR8wrfCdr4+BLrCOye9wt0EdkJjCPgIpkGkP/S6TB7HwjK5KAzr Bds3HTtpBfEaFFW/AaIhMgJAA/8FWgYLArgBSL/RwL9qeQDotzwAibjZwlwW 8hsoQN7C1ALgwnwH4sIDA+TCRgXmwh+/6cJVv+zCqyIoDO7CPQDawqMB3MJ6 Qd/CSQDhwjK9AgNEBsQGFXYswQi478LrBY2OYwZmYRMU6whtwvRC7yH0J98D 0gsZAnTCTwPZDnfCizx6wgDDZcLYwgPDUMJGwmDC51VkLVXCXCnqBQLDE8PW SlEpFsMgAmvCgifmSxrDcMKlA3LCH8OwM5EQnAihvBHDKcMUwzXDy2JRKWzC AGduwnI3ccIdw3A08rjAH3bCLDEJHMgB5CorJO3C2MI/AD1ARkoyPgo6PwBR AD8APQAkNWPDEUCVR51z0b28Al8AYMAhJ2V5ZcNlw2LDibjbwvLC/gX0wgnD 9sL3AvjCTwXlwiQr/MIzv31N6Lc6ANnCcsOAPRm4dEPiLZzBcEB8Bxo/z7jD NTtAExsMBOC7vjfxwt3CdcMnCXfDJwR5w+MB+cLBW33D6MJ/w+vC67dNwjK5 vjdFwl/CSMJiwkvCWcMcEKXDXsJSwi3DSsLjAibDcsPrBWzDkjOavHpCu8EP wh27cgi4AgWgrgG+Oq5acIKGCKPDrMPrBS8n+AifBtwuxQPKLWMMChaaQ9Bd uAG2wzwVVru5wwu78sGpwmfCuxFpwhMUOMMZw2/Cxb+CT0/Dc8JAw1PD+QMk ww0RPgC0w+rDpMOlw7e4p8Nhwi7DjQhYw+vDKsPww7DDL8NCwijAMCTrBQS5 ZxPOw7gC0MPLYQoV08MGAnlC0Uq6w+zCxcMIuPzDhcO0wvRSbTyblJoFxrrt QT8KcMHNNoJgzQ1MwqvDDMQwJK5Sp8Poua5mqMPywwUC9MOkw/1UjU0mBmaZ DgKJuPEaQrpZut1NGwjXQLgCWQRMXN2AL8K/M/EakkYnGti9MU2QQNY280K0 GNZBQwEtxJhBrgFfvYsHrLxnUU1A+AixV3E2Vr8WuG07bwgUWVG+bAJFxC+4 vb3zMz41/kt9CV4pkq/Pm9jD8RoNFIeM0F2OVCongQJ5QZa5RVn9AYVPv4wJ AgoKlSUXu7VBjLnewukZ0ALWo8A/4LstvDBMSylPAEWv0gvmQdPAgLgIA3rE e0GiT8Z9cLlEhIXE/7hou9N9icQrqgAFVgzzhijAWUPjgC1BdAN0uGnEZz+N CIVPcMTHuq28UgR0xB+/B8RvCKwCmLvzQopkdACfwgi45LgZLx0Waxj3AVvE ILisxPhBfy0dQnlBoENFxGG+4QezAnIIXsTKm0EeQQCvs+MBhU9Ywj4TbQxS BGoAusSCS90DZmErBdpfUiDXs6Al27vYdUXEgTRUcCECaV/rwkXEV0IxQLJR difuKf8X+bsaP4XEC8FvCD4EWQSbBd8Su7MyufEaJELoCUTAv8QbecAVwyZl VWsYqAOfxIc2SA1vCOkh8xWTub2/ub9hxAJpLQNgva4BOr+fAy0JRcQ3TgMD r7OQu7TENrMECY1RqERaR0XESll/AycwNX0KFqSc06QtKhXF5HlcGDgD10Af COVnT2VFxGakDQLTAkQNyrr1N0ZNBgL3AZAE+AMnxRUHRcQnsgoWtzo1uSkx YLggTEXELEO7C4+4QQOIhLQXjyMNQTamhcSQjUcjOgOyBPZguHXmBWeA7Dff A0W4NzuBwRwQ8Rr7Ta8IK6q8GsIVoxezxFHEXQKkXO0CM8SGAyq/3gweES3E oicrFnnAPwILWxO9owF9wNy9R8RnxY2tPwKrWtXDdwB8wH7AUcRBAGLEf1Xu AXRA9FKaujjA7cQ5PDoAz0EPE6ZaURFnF81J+7/7G5i8MieOWlTFOTyOuWwQ v8PCA0dA+5W8EcwNWzuMxVE3LcSRxY6jhMV1CGG+1WqXRJrFvQKNxQICLcRM YJoXmz+YP/8XaRHzG63FZk8nK7bAVMUdO7gCaT99BuVnYwBexeoGlU71Uh07 WEN2uyxXWARsN7UFp1yGCGMF30aUCD67Fzb+TcoBDoG9veZBAr0FAi3EUVoI P+7BwgNLYLJR1cVLQSW9VAA6ANzFFDDxGqwazZZyB7FZVgZZSMs/tBh6xCFh FDBDXJ4wWztUAzwX7zOmAwq0ocPhxUkD8k8ABaTEWFEzgnkLksX4xSQ90HZA vF+l3QPVCXaVIr4NVT0CSsSjC5sbq8RRxO3FYihyA18DaREOE7V/B7ytvFkr AcbzXzUG8bh5AOQq9isOLG8Iiwe4Av62aQNmAAHGcxeJvhm+149LBMLE6Rkf xEfCmD+hrREXRkEVDScJRl/cG+K/YcQRxra4OUB2B/U68Ax/KfcCAcI1uay8 esE+vUk/kLyiArc4ycHBwV+7YwYiAHkHGFXJQowa+MU+xmkFQMZ6B08AQ8Z7 J/Ki7wRHxj28Pr3WwUvGyk9OxqrAz8HjAVLGzzLHKKsDiME2uEK4szauUlrG QsZEANEXRcauAmHGPb1DO2TG1h2XJmfGhcFQxmrGu72tlXkD0RdXxvC+8r5Q Q1cA9wKxUVVeJwlsO/YG5h4kMjs5iljQb+zFVgCzNonGRLr0vI3GUi4dQFc7 tWbzuZTGNTkRvZS97wTJQSiDmMaaxvG+nMZ9W57GHECySloC1g7gvqTGlsb7 MSwGSADBPyYAD8HuxEhWq8Z6QbBgZQDAxoQ/Wg8SWAYHOkATGzECN7gwvVUA 9wJJXgoEMUAjCKc/9wZPABgSZC0tAksA+MXDNfQCOj/3DAAFNFZDACFe9wxC QJo/azt+GUoGUlGQDIlQcb81GK8Bc367OJTEEcZqQbxTvEFQxnszMUGVRXp0 tcWZxoK9bF2vV43ESwEdL70KUAcaQYG9swPpAay7EMb9xtRa7QIpAz6h5RsL vJokNJiKi8ECDgP4xaxe6rmRTAHHr0T+BygALi1DAEIAQgDiLaVAvBz4xRC4 tbtHX7G5bLzyuvJA5Cq7veVnQR7DuY3CwMaexBe7LjWsvA29y1QCTZ53ZAVF NfcBpzOQP/ADZLz6uxgb9ToPvqNAFgSAxQrHcMYRxou4JDJpAdC6RLr8u98/ CT/EV/RSor+OEjzG/cZPx1MBqryKxk1ecrv4OozDDj/wO0oGTMdVJ3HGJwT2 UvcG8yn+Qm2jQgPFAhXGTQA4PSkDEyk6A0gAEwcgBfEB+MVDXOMJegaqvHyY ngXsun7Bfm8bCEZNwMZIXN4B6UKvNH3HnkRfA/1UAMfyxM6bTScfx1QAOTxD AIo6EVUaDX3HInciUK0D0D+AU+IB+MXrUmdP1QKkx7e4Z7hpuHczqTr9ATMa g8SuX+3EEcZzxhC+dcaNuV/GogJ6xn+8671IP9YdTcbAwWjGgsaBAlPG10JV xnTEs8e3uNu/jbgyP2ZPdbs7GLTCKJeyx/3GRcJZP7xkYwWsx7w/WcUQuaTH Pr+qx6vH34kfGrDHZQLcx2MZAb5+bIwBZULSeFII2scjutLHUgJFwgDHq1qq IikDZ77NaeMBAQOnM71CrAFoxznEs8c+v/HHW5mPaJoFd0s8wKk/7b0glMDG 8Mcbx/LHVpkDyGi+3zO1TwfIXD/NuvzGUgL/uZVgAAXuSRm7R7sLwNK+ysFp xusIyV07vgB567eEC1GVNQD4xR6XPwjoiUECjgYbx+G9cmY4A5PHXYtQxE3H /cYYQZp9okMckBzHA8dIv8gY7E2Qx0Rr0kb9AdDENchpxxHGOMhzga9Xm8Or RwPHAMcvxWrFMgRbx1ICssCOuPgpCT3KAXpAMlPpt0BK9BpvxkfI/caTXB+/ kccbx5bHIcdhKHbHqwc6MvjFYshIv2TIBccpA2bIIsfiLetYnMfux31BpQXJ QaIEK8bfwfq8XwMPxjbIVMjKwtMCg13EOntBDjI4xEfEEcZIAAPGGV/1n3fI 0gEZg368Pr00L2cIbwb4xbu9AQQygxd8NgUDA2ZSub+YyJ/GssZKQ1G7/xzv vwnG/LodO3i7kMiiyGmWs8ZjBtjFJACVxr4JRQQNu1TA/brAxozCK8XFITdV yEqVGWC4zIe+wiXGCwPkKq/E4wmsP4cE1l45uvB+LwODZPIVw8VfyP3H/cZ4 T64IaSl0A0xHujpYLvACPr/mxHQAx8fTyK68CsYzHhtR6kz4xQNeO70Xf9O5 JUPKAYypQJMVyJROsEBrxS0Cd0ARW0gALgUBDYHF78hlxhcbHEOHKce8pzMt uK4BngImvgfB/b8QA54E+Ek/vUa+rgEBA9EmlQenMy9cU8gYG9Yd/MioDf4x W7w/AgHJBbjOJmAGJwaoDTsKpQVBXAvJx7wOyaICEMmnAcDGSsI+BLMDOJfT jmQXhU/RJgYC7L3AxgDHkkBhHrGsWgbNGygGcQiHCo7IRMR3yADH1kF2BMIB uJU5yXwFO8kBo/m89J8/ye/IT8gYAmrF6kBpBSgAc0BTAPQMUQBSApIMV2B2 yE3JG8dQyHIHUcmvAUQ1xqZxAO/H8gJNAPLG/cavV0dKNkNuB6dO8A8YG/xC c8jdQT0/+MVqyXYsUQM+ycMFIMdyyUMA8Ckmx0DJcE5SAhLAfAWGu+kZibu9 uYu7vgGNuzG6Yjf4xa4J8a0GAorHGcagyHfIpzMrAn1bFhGZTvhAm06QxlhC UwD3ApZVPwIUw5TJ78gQydeKNQiXv51Dyj+EM1F2cBX4xVe8jw1IvOo7C0WO QqUPNsQJyZu9XMWByLwaQF/4xYErKAKIBfgIh7unUYGfhwquwsxV+MWSQxMD CUGCA35BHH3ut8nJAAJRvSEnK8V8M7g/BshAAugfHwLAxnBhwD8Ex18tPMgi MCIAg0BwCtjJ+sdoANzJXRm+AYVPPjVYBS28t7gxAMXAgQIwuk8AJgkjP3NO 9wKVQpCNvgHtu3i40FEABf7DcFzRyIrI/cYMxjh9TcSinpurd8isvOLHyAH4 xSrF/CGmFpHArMQRxoo0G8XJP+xB+MUqv+UwYQhLue7HTgLnG09V4wJluwYC H7iJyDS8mcZ+x8kBg8liuk/J/QGaI5O4owTora0DhQ9JW0ACeT9TyETHPECk QMIDKE/KV/zHBMo6AJXAuQFuYv3F/8TkIdYdDLwaUeHFngTTAu+4IjM+BBwo 8CHpQpjGnMEdO/W8YSifQaUB4cQWBNVSVQCtuWFeRwBsO5vAnkFXQvICpsd3 u5jGezarXHRDLQCMx2sKRCwWFC3E9k7yArIVhj1hymPKc8pvQPQMaE/qxLy+ jY4txFBB/xcpA/1UkglGROsILEEOxVHEMAxFuvQCVF6GPUpeeEMVDW5AL0At xOhY0UJLyGsEWxd/YJUHfm98v+a97cR0TsfGnT9DPwu6EBfyQC3EdEOTyr/F Hz8wBXxDc05hxBHChMaHTw3AMAOAD1U7RW+Dg2HJTgArAGIAVgBUAGZIQgCn EkkHyL6Ui5TEGD+1u6c/Hj+vuyI/JD9WwO3EyMoxLVLA6FEeP5hOBQcGPeQq QrkSAhS57wQWuRi5XhlBQUq5uslpx9HKGz+hQS4/dEMOxtdO6rxFUFJDwzVJ DYxImk3BAuA4rmlKWFTF5cq5AYlDtrmpN8rK9FKTPzdhRQAOxi3EaxMxAp4H QUqPxmlP9L1FSgPLCT+eB/g6SkEmBmy8mj8twJ0/OELtXFMAbspVyS444Roy QL8BaxMDQG3KYcSSDNFCmwXmv+IxaRF2LPEmk0JDw1HEuEBpO/JAtAcIOd8/ RQAqLZoH37+0B60DisIgPxYRn056xC7L3sYJPYzKKi0LW0bHeUM7xj7L3cbf xDLL6yk1y4ApaxNpEczKekDivy3EP8tKy6FBQmFrExy07cRVyzDL3xEqFjfL 1cYjCF7LIMtSQxFV8shYQkwA+cisxLhATgBYyV1R7QKtuFkDLcThxDxAbTuE PyvCuTIxLTZALcRmyhYNaE8uBVcAuAFDy2kFDbgrFvW7UcQFxUK7d09UAy3E 71dSAp4EQgTdBYaYxb9uBy4AeifuP+4/EMNRxKMjvzFWBrrB/MW6w43CLcSc y6DLPcHtxJzLMl4vAAvBYQDUujm4V8G9P/RxaAh0ukDKwgOoy0MAqsuUWQAF VbuwBF+QbclwwqPLzQO5wYYDpcu1asEGMxrmP98GbTy1pEfE7mJyVPrAp8vN A6vL6wgJu4YaWDfrAslZr8jjAbTLDUfRy5RZKTJDANS6VbuYvFkChgMyN4M0 hkGqeWHEnMury9/L4cvTArzL1B2XwM/LVMWcy50PMhbDVAoWtQFbaSfK3Mt7 IasI5gXFy9Ix+gR1wcDLeyFZBPC5/VRNXtFbTyi6BVIAesTdYksExMvfYpsb BczwIaYB2AMpy34E/icfGm8SsDrYRI0FwMtrVhfJUrkyFlcED8z2YpU0PwIB tNXJ17N7M20/o8sozOxB5EH3GFmJlwooxqfLsAVNJ8ABTR5SAmAzyEpkBWis 4gEbBTMeUL7XQICVrDEcAlgFDwgtxHsRTMy+AYtFOUNZbPjAPgQqv04p/BWp rkzM8QvHP96yaUHDxK+8AQRZzBG8SHbhOsPIdQB6xJxDOE7Fj8oSTMyOAlTI nz8FQ0oGQUprO3dAClvnuKg/+bvjycI1CkPdG2zMFDBiyJnKDMiPaPMGngXT vwU7TLtUxZxDFDDKy+VCzMuckX8nJwT7TY0ICRmtuu/GqzuUxInMYii/lKkD 3MvXL4/MqrhFquMCk8xkAJHE8z5GBZfMdgCKzJrMe0LBp4/MBcS6CLzDbACR xPg5kX6nzFIC27ncuRcaissYGwYn1cMIxNvLmMzkEY9A1QhKi0bIOcTJQxzF I7mRObM43zynHCQWyQHKBnyVlr+ACQ5nhggJwj6/j8lEDQYCYcTHzBjKGwiV v7iVQgStA9/MVi4KFksf6LdWDL8Ma8ztxNzM2ccqvzrHIb9eyUW5e1mIzKrJ 7EEkMiUGesFCvYrKcMbszOYBhQgpAxC8rgFENR1VbMzDFZdZQANZBOE1jjQv A1OsRMBbqQPKErwGzco/eizISvkPSswpQ4YCLcRNGk8n1g6uvXrEzAwEeVQX W8zTpLgFYsFhxCDN001UF37KcgiQQOPKOcQozVIIKs36SlU7xKgHBBrN4GbS NSvN5rkkqXIIgMrtxDDN0jUNMuQa86sSFvG9kkGXKBpBo4FUxUDNVBetA5lC CANcBB/NOM1UF16GLcR5CxTBPwqmAYQEFQY1I8IDrknfBnZ9liKSHl5g7cTO BAPNrAXeAXNc8QVVP0DIpA/tOm662sCBQZJRLcTOBPcGkAx2ux07VMxTFknM +8xpx3XNcpQGAjJUeg0fKGpuLs1HxM4ELpxCVXVihwLRFOgTPA/iKicwmJBI zPF9Yh1oAnTNjwQ/Am1ooSGEzf5ydM2nwZJDQ72hQespFMxlzafB9wE1vekZ DQmczdKxVMWIZOEvPwh2OxfFhb0JAt9fvAsEwbnJLcT/WV8DHsboxcu5uc2W ZKG/Bm0cx3JU/DGnsGG437hUxZVTx34Hw3tv7cShvz4KRMA0xKLJCm8dxc7N +AG6zUsEijT2WTVD40SnQegfhUL8bWtF3QOlBnYrmzfpGdp3nwo7wPN9LcSU CNVp48fOzW883gGExjUChgi0IYlBxcxHxAGd8s3/JvTN4wGqzTZDrM2sxAGd KSS/yVvFjxjTA7DJhgQ8vVUAzQT7TOzNITCiAtSCxMlpA4cK5bklyMIlT3hf A/lDIR0XuU4ATl/szZ9adTYqv20NvQL3AXuyFRnszQkCNwI1Bg0JKr/eCFJZ yc2yaDu9h08+BHa7E1VnLYXNgMhpx/YDIEi9AgECAxo9AqvNaS1EBoDNYsCs xOV0NL97M0UAgXVRFj7Mk00txKdae8GrYNAsuMplB4ODLcT0CC5B4cxRu7YY mS9YzujIBsekzVTF9Ai1uzegXwPlFC7KgQIyX5i+2RVxud7IOs45xGTOWRj9 yzgFEcxXu/e6wLp5zsbEPhO1gHtJX87fwQEDmwXvV3DOR8RyzvU3DcnUw1TE 8RpbxD4Bwr8vuJ9EChWEzsIDhs4CQLNDSwQ5x4WBQj09AorH2cryzNzKogLe yki54cocue3ElM6zA7AFvDEjvkLA2iOSznzIbcSvNhsIycCgMEUDIMZ7zgIT oWIfSjDOrMSUzsHMxMWHyLPOmEO2ziETEQIqYcjNu85sxFkYfELHARoISMSq DHlC2K42uQq0rc6UzsrO+B7CA4nLy1XxT+Zj087IzvU3PUE1BhXGrMJrvSS5 zL5syeHOLBTczt/BmWAsFFcdOcfxfenOhU9Nyr86rSfpztdAjMhfDx/Gf87X QJNBNidAAqnE9c5ZGD+n1s7UeKoMVwDaGhg/h789xwMDNHzPe2AZfB8Az/U3 4Q2ZBNQC5TG1GLIC+s5ZGN6CWr2pA8HI3QSiCA0C4i9kAOQqfV0YE3rE9AjX QOsZNsUUBhjP9Tcpz1IFfkGdQE4APwAmz/0B10CSEcvOsMIuz4YDAbQQz/Qz aUoCy6XONc9ZGPMH+2oQB8/IrBsnAOINWUXxk5hBMUVAwcy8e4nam/lKUSmG A8fJBAmquLQCYs7HztXJCQjOvCzPjQTszvZLZbtaAkw0krm6CLDNAH7RzhNF NM+7yNPM/CeGCGNRSwSsG53OwQGeGfjNwgNGP5VVyQEvuHi4cQTfyr4BdMWQ y3I0esR5z0g/W7xLQdK+xWJQvqs/dwsQA3m+ZgCEzyQIvgj3ASHHUwAzGku+ ip3gwQu/AQM5x5tIe0rqt3jFcMZEv1+6MjfYYr0BLcSqOlEuwFzCT6VViQrb y/GTNgWPzy0qesSwzz8DqU7HH+8EprzCuw5B5Bqvz9Bmts+bxF6c/Mu1z/cB vl7EQfPOBAhyy+3ExM9mAkqokHzBP07NpYiQqbTPv8/IAVICQVxmB9kzCH8t xMzPFshELPXF2Rfcz9XPShL9VNUpNmZUxd3PIAD8YRkF0c7hz8vP489sA5xD LjiVyMRa3c4ouu8hLQCgN7/BlMX4vadQbAAEuu/PShLvzCYnws/iz0oSTs7y uZJAIjD0vXy63ALKV2YEfymku2HEFCJKEmVAwpTKPwIaNgQtxHS5e0JEhBAy n73qlG29cb3Ruy3EcSlUQGMG5MGMYF8DWM2jx+3EJtAPKBFPLND8y3EprsLw AUsEMtAtxFG43cnMvtBjzgkhxkLB73pGPxqctL1ppifK1wLaQnrMSADqyicE TUN5B/RO/xqAy6vIHBBH0Oa4scVrTf8XtbtaxpLOpz/vym1D57h/xdnGkymJ uNTG/xeoQGy8xGBT0NpS+DowLS4t1wKMyujMZkYowLdaaxNkCdwKY9DcQnm/ Y9DKxljQzrjbUt9BetArLUXHMQI1P2strxV3QFrKkcriuILQ1sbcv1rKg9AU z8LFb0CeP3onY9CLPwTL0alj0EMSKxYJBP9crAdpy686PhW7LEUyMi3Ixos/ qrkUyAi4jwzBuHFDAUDjxDEt2MOq0MK4ZF4eP/EEb1syudC4KD9TAnkHsMUQ 0IAp+AgCuNhS/rq0y7jQp0D+sTsYaju0wvFA3AKZ0EoGhD8nPRQSREFZxmRP t7i1uywCaAWw0FUAzdBOAM/QOQ2K0PMbYso5QNXQSQBoBVrPFrhzXe29TwI5 w1K7HogGAou7OGBj0PViQ77mGbnPM6djBn/PXJ5DVeJVngTw0GqLLch7uB4R xB9UHapOZcW30HUlI77Tm6MZ0blnP/u9Uj6hCl1gURaw0AmtZ8++Aawa3jF7 N626AAVXvDYH+QQ6TJxg4LvKWnFLCQIiNFvQgEH3AQfF8qQVGe/GJ6cTu7fQ RVXWAuLEt7ghAFHQtAdCuBDNjbyuUozAUxY4erVU4wJ1AgNEnwqRJIYHQMEf 0f0BaypqfvNCSm+ayza4jbysvE8AvMwpMcoE77fxu7O6nDew0GQIOwrevISp OcLJAeK8q7tW0a8KczT9AWFynwp9WefD5m4NKUTR3wNtz1cZOAPultmhs7hj 0KJPztDFzYdXuQFblRMFChVp0TNBPwJJALvGZC3YAv0bRkqizUUAcdFiQT8C t19dB7HHU9Ctz6yC3gEjQ2wU7wRKO1MxYwa0AXO9LdE9JyrO1SNJDSR7LdF4 DXpBTbkqBnHRntHxGhlf9XGuyM7E7wTCzgET3URSNXfPdjue0YLOrgFFwuMg RNGe0cvI9sX+Ichj0yHpGW0/wQaTTQXCndF+QR8ICcyVVr0C8LyDY2xdOsGz MUTRUQNbqRcTSspsSczRrgEZxfcBFrvwwM8k9F0t0eIDdQPOBBHIH79OwM0N cdHb0UDD3tFIv07ANtGchbCLzgEkQEYBIjAbKPliY9ChChwo/gRnLaUI87im VA7EGriw0MpILABZP64BaRGQQBwFFb/NEkbQykjpHkI9VUQUn2MG8AMDTQdF Sym3yekZ6l7ay2PQnTC6zCPNGMriMT4EswHLzAEohgPQzOPM2zP0FXJj0Mm3 0BXSrLwX0p5DOANHuxzS3zge0mw8oL/TGLN72suw0PcB3rnBFTbNt9BBAgAF pzNLzpN9kUp1vNZ3rhPZDjADBsVZGMUCayqCKEc/eh8+0g3BOdKABQUL0anr CLF68xV0CHK+17MGAikD4UuNBGhBxAJ6q9XJs2ExvBkCus7m0OwCLA3RqSwA U9JzCDNMIjCuvVYxsCVg0gxB8mBd0q4C10D3U2rSdQhj0D1zrgFIxkM7jsgt 0FPQJZF2vmy6srpII8PGedKtEhkIqLwFO4vABUFTFi1IXzGDEh/RgdKJ0jS7 OThXHSq/j9KDTR/R/lofv4e7qNDm0JzSijS2Uoo6FgR7CUox8zPO0SpJ3Af1 xRNFzcIglIG9R0+b0q0DotJEAKTSDAQfFqfSdQNFz8tU19GAAqzSPQK8wq/S GVHR0WPQWk0MyQlvaCVrSxAEZz4zAXLQxtKiQ1ytNxdFBELOxdJfA03RvMwc KFoFTMmp0EAgWQSxQcYBxye8uYbNOLleGdfSSDz9drAK9gWvzb4B/VyWCWPQ ac8sumLGRKIqwx6/2YNrCC3DBQQfxR/RKkRZx3ID79IwCKIH/tK30JnOM8jP m+/SNGthuRQMYR4grRjRrwGfPbw4ctCFgQ+9psZTQxS9Fr2dy426G70SWKUD OsEgvXMAoc9VJwJfqE52vu4VCcPuFRQn1wGSzkdBykLzG0UyTssRT9gybE9I Qe7GqtE+E6AANdNYwppGck+JuCvT0tAu0zfLr8XcAjLTUEGowjjTAhM300bT nLqVZtg4j78yuT3T4AbnX2PKM9NUu3a+L19JAyQAhDvNG9jDT9MtX07TaMpK Pwg79ww0GOUGls8x01LTRNM804E9G9LNOaJAXjKzTwc7ZBcxQIzKUdDgu3LT JwksOm3TUADuKY1bFRl204gJVwBb0z9A9bzKAQK4IwgbXrTFCLiVzzMAq1pS ApTFh8UelWcXcDylxZXFEQg80x07ayo4cO6THBCj0uYGbTzAXCHGYQFb07XS 7wE2s9I1ntO6OoE0brq5yXXTBaEWBHaG4JinvD4EFQEmwqtHclR1070dsRn5 R4YIEjv+b1HAKcTJVokgIQIQA6I8uET9SiYGX8oYEjzTR1+qykXHnUAMQ2nK ytMQwva+ac5VNK0DWQRKAAY9ykJWA8rTIT2RvfpKoic8zXMDQshquwAFu7pG BDq6UtCJ034pisY6zf4HXilSCz3NNj0buObTy8jTujzThVt0xZLFjdNRA4/T YgSYxYvF99NOAPrTjtO9ZbJMktOlo5TTjsUeSzzTeENhHrwE+9NHxJbF/tOK xZPTploM1IzTBNSIxZRZzA2ixWMCCdQ80/cM8QJcD2m8DjnBNQQ038TrKXwZ FhGf0ja4RTJ0Q5HGU8tO01JdVLu+xTE/irqI0xa4o9AJQETLeQc803zFTcse P8nKuyzaxk7TPWBfzBjMAM5Dzq28EI8800bUBcupQAhD3BtN1GTK9FLzBy/F hE8xLU3UGD/5u2y8pcr4OgdbwtB10znN6NKITJrTidMCGtG5ok+DzUnUPNOr jrvCVgBt1BYUxQIsyFAFoIfzzGfUzgRtPHHUi8fay1kFMJT8ivbKeNTeAZoM JLmbHK5bgiF5A2LUzgRdLE4RoLjcQ23Uys0LTTwKusLfM5mbtBctRSrTHwhz F/q8uswTSHFcTtMfCPHOzgtixHfOYLiZ1MkBotTuyb3MbwjQUafU1ckGv4RC RdGnTqfUn8TQAqdODALkKgFgqAq4J+Qq/7mzypDUhgJhAMLCDxMDKW3OtGCX WJvTLEsmyawI4jFCAMI1SwAFQwoE4gZIAOnTOdSVB1ad0UjRMUXS9TdnbyjO oNTKFI5CPJCJSOUbbdTzAZ8EcF3l1H7Begb5z7c4bdRMwSzIpQUQA54CNrti 1EzBi1zu1N0EuAJjxGUrabag1FMxmEH/eTC7fLziyIG9GtG8U0TIbXzbJ0zB 4VXVMso073CDSs69Z9QPl468IDDWHS9fPNOBaM5xQ0C20hjVVMKNCJjPfc2/ M/HDscNjBkXCSdM/F78F1X8d1b9hjQj+0dyTrrgEdSRA17mwOosFd8+QG9UU Y7mJyyq/DcrJAS8nxmIqBizUVScNLH8J/cnqucGnPNMOFDhfbbjfyWsAddMO FIwI9QFI1TMTlxlEPAchJNVqAmxJch5WBnJgm9NzvM5D4wED0ARfTtNe1WXE Vs9yCHBhUwKgv6K6AAmfzn9BzgQZU8gn4VWsMcjLBQK0y/vUmZsMAuEaV274 CHFMxwY80yMDjQZGADU/ZtNPQag/67nnVccGXdOb07ZEgSwLA04FogIjAIi2 HD5lOpwEewU809FMh8djGVHHHchNqWe5srpIbta4xkzAg7gBWgayuiUMg6ge OesIlyEdGU8oElgXuk7TQFROAC0A77gZ0fO6Bs8UEtwCRrpTQ+sp4sY7GEoG F1VE1IvVfIIXE60DEyLKIaYFWAVhxThDu2rDxglPIjSgysLVbF0+NWpuSwRr 1IXNl9WjGelKrgEuTHof3yhb08du56CPVRq5yQTnwjAy1p5YGMwMNcOqP8CA 8HEWIGQF1wLECeDVfUEWMDzT8tWLXOS8TtN+QVk/NQbWwWfDQAB108LRPwiv T87OU3LYyMLUO75GDaSmvQomSMfNk8jHBgDWQi1jGQO14RnYxGMGCcM1ymLF CwNfuhDN4hpiBEEezsQr0CMDJ8riGmfRPwMvuiqZDTITRfXVCW89o8bRnXAi MITCjbxPykC9Rs3sA2HVj8yhzhm5o85RNCvW9r0DNCDCpMgWvzdJjAR21QZv 58dTCDfWSLwXSyfVSQMRCLCLPdaXHwcDhwpJ1jy9S9ZM1tAk4nQsyy3URtaF CFMIhcqNCNIBQgZGzjnUc5+oxrGWnxxaAh2Jts83uWsq4kBdAz3WocCAM859 cNZ0n+xbaxhZP7jD0UoA1sEBptGRy1Egrzr4AwrQcgB71qbIgFlBwUoDJwSB 1iVQvs351aoF0UcECa/TaSddXMG7PwIDTXFBBsdqQTLOJgbpAfQBAUvia43W fgSP1rPNeM+VG2PWW9ZfD/IrdHjsN/W3WRiEvf1kCQJF1qjWngOq1kIEEMIn CRHEbwTf1bLWYmoNKbBCAQbxt9/BrtbLJyTSm9OPA+AjvNZWLnvW1gnTeKG+ UHKCy35BhchNoxrQjdbL1q8038Gx0brW1db5BKy8sdH11RRE+72lY0hPWX0g zI3WyD/4QW664sxhlWhhPwI+BLZS9dWxCJAbNikfCJeWX9L+xQ0D1U48CENA 5C/uAutrANaxCOQK4hnwvUUEyEKjwuDL39WoAa8uAJ2GT5AD2Kr11WFzdn0L ybZOCQL4UADWD9dZvIrE9dXuMwnDD296FNXJ8wdYwV29tgIq0+rJhcJg1d3O I9fuM3gIXwgqvwrNIrxTrCjXXhkqv87RzzHFAqtwPgEA1swz2BS2vSkBjNIj J21qQ8gzvaO4ZMTDAhnXkT1Gz025tlHhHiq/sUz6P1kFPNN5CbrMTtFbvIyd SwQA0sMBuzFIDbXNXA1RLkO+XapP12F9RgS8zXsxXwMBzbvHFwRf1/kExQKK NOUgkiGwT3E05h9101e78QQaP1/XCMSnxTEwTgAmArMERQDIAzMBddes1NsF 2RdfA4XLRdM10X/XqE7IVkAD2b121Ve7Mje2GL+6P79EyB8I1b1wAFvTV7uq 0gkZLEs9AGFe8QIGByEAGc1O05fXYLgsp3/SidNXu6kMj9WtvliGmlNkOTBR xsGb090LaM19QX9u/cAQA5QJio+w12glQUE7f3szaF2XRDzTnXBK1kM7QrnT AjfVONKw19vUX0sSDP8HfkHUhNxGCxXP1Tu8ibjwGkgAX8q71YpDwgNMYLnQ bEBTAIw/5QbT19y/9QIuLfPIFM8AErTLE71zQB8qpzPkviQWwhX7P5dFYcm+ xWs7f8kcEJg/2lIDDTAMT8vwyCoEc9PDNXPMTACFubrVOELdxlRf2Mb51+C7 KMfSyksAgMvKNgbP9QJpBbi7ERf4uMjGBkPYxq8Vks4J2Bs/1tAwQFpCHhIY 2DI/tbvwOzfOcLvtXFkPitD3OuDFMrkZ2JRON86D0ZdOLi25AWw7dMrRQlrK 6ylvv1UAAcvT1yDY0srA0P8Xjrj3uPg63sJYQg7Gxr8sUerM9dcyP9dAIEjt ArW7BSdAw1kECp8iMLbXFssGBx/YTgAnAP8XSgDhxINbIT3ZvEjYTgCSAP8X jD/pt9zGz8fRW5IAwbu6BUXHx8AiubW7ERcSE/q4OthHQ8pCZMddyApDrxU3 zvm7WtgjPT25D74wDN8/ONQ2uOC63QPIXHkDeas3zPXX1E34QQkC4y3zywi4 6zOgHO/LGkxLwInYkdjvMxBg6MnT10s7VAId0K/CChbKkgYnxQIsOaSTmtg/ AcJBOgPrM8YqwRKl2MVBRkrqO2ABh8g/CBcrip0I2CJQkNhaCrgBewUIwq+Y FNalHYiILdYMw0MEYxlHS1NxowR6RH29ZlXI1VfR5SBB1b8z5D+iAkUAEgxK 0VUnz9g/Fed5LADT1+pMVTu0P+cb2djvV7jK2tY2BVC7MjdPZRUZVbugyyoW 3tiy0T6/qbueOOq3SQPBzHjIf9PFuyrY2thWuXsDuAIQQNjDmwW5NWcoqgzz Ng/W2diwJbvPrEnZ2C1k1s4Q0pfEZ8QnuQ1VP54nyu3TaRHv09B62diqEt4B x8vh09rDFNkvCODT8NNsQTY9JDKeAvXTjV711/pKLwAS2Qkp2sPkAos5/gWy RNDPPLvZ2B4myNb3AVTE0djEZolIiQrZ2NaIFSCCA4hz/G0KFpA/hNfrCKaG htL12DrZ6tIrO1QXpSdzavXY5r8+vHUSIrqpA9IBwtEj08K1JNkfGKkDDhOS PZXICdHV1ILYIzlzHo2rrQjT19IJ7rgrQZs/9bwdOwEDi84ORuJHqsT5xSM/ t0ClwtfG4sxq2ArMSgb3Ok8A+9hk2VkYnNQgQzUYGNiXEYVCP8xlzLXOTNZ8 E303x3AXYx8ViNiP2NIJytVEDYDZvgFGzCsxHMPb1KMU1wOR2R7XzRd4CJnZ Or9Mi/ckNhuF2YbZo9mdvH03agA1SyRwzAhj2dxdn8QJw7BmK8WA2YdX8QtZ 2UIEE8Ei1goWxVWQCGPZ6bkrO+hiBMFlXd8zKQNW0z25wwifOAjYcnMAv6QD 6J3YyUeBaB6N0uwDd2D+B5tFSjl8v8fZvNmH1btBob7/S1kCVbtFABx24jHW wQJfd88BYbxuICN4xwR44cE1X09S4wE0L2BgPyNj2R2hu8FOXCPPqccDPw/E UkPxQGwtPz/qwcfZcwAXWSrYtdMSvYIhidZELEzWNS9iACtzY9n6Te8EsVcx BmYCx9SGCM3OrgGsvNEmwTHYSw/ZTcjvBGgTJaHMDd0FjY50AJzYRNn11/E/ MJXTA1gugk+IMxvavAjMDZXAJcycCgjYhMgT2pQDJ11JA37EkdfgwSzZvwGy 0TXW4dEq2IRPWRjqvZ3LpzNhYYYIhU8NVc4En8xFub0BGNg/2vU3QdoYvVkE ucnExFkYhMKY05kiLgDAutPXTdoMueINj8/l0ILYW9o2yfHMwLta2t/BvMsg vyYntcmJSEsE9ApFA31NTNrfwaDNKsNqQYxlqzz3xyDC/cvKBHDa5tLHu4SE 0M4E1ay8CJsmBnkCbaHDnuPS7hX8xAAJbTyfCog6HD/+umXa10CXelQXO880 zmw3gwysPyEAcNqR2mXUpxwtzD4ETtisPzPPkNpZGEAtadJxwMGnR89ZGJ7a chglUJrapNrZDv8ZlI+j2hHP2Q4Szha7rtr1N07YH9drxKEhThGY1LPa6A1Y BR/ETEe42sHaA77cCAcExdpJzCjF3dU72SDGNtolKc0zg8jN2lQXk5Y1I8TM ytq1QRsICa+sAcXaWxrvBBKj09jO2LW/WRhL2NXJ2UleGZbUCALi2htR5Nr1 Ny3MZBfF2i3MatfXuU9wdAny2odP/CG32sDaq9r4AlDXK8ytAx8cVgifCrwn pANUur+6WtpjBuTZvzOiv/gDw7nqykzag7lTFknWMcnCzPIREdtT2uwD0D/g B5Z7HwgXYna+TdHKOk0GW7wOrqg2GNv5Nvk2ogTkKkzakF+9CsK/1tWdzT7a kF+iQ8K//83X1T7aZQaMwsuHWtpxxCS5y0FnxErV67fZzotB80+jxkrEvAIG zXEt9Nj11xTEI8kdFmfEdjsnFqPMPNufxP+5F8QyycwMms7dBC7EL09Rwby6 5NhZf+zaLNk927RB8CE4XzDaPdtSypTWAwPpQlTbWFG2hwy5yj8o0wW5h8TF Irg1aNufxHIxbc89QCMI+9hN2zegwdgF08AVeNv+xGpVMEPP2UHDN8qgBKIE HH1a2gYnyYxDGfQIDdvduxTCMNoGJ9i1hwSKNEwAqRJrAAa/NgVjPdPX/L88 1RHXXwbrtwjSbgfqx5wp2MchArJbm3lQlmMG+9jFS225+xsmh8vJLkEPEyK7 ImkcEKW5s9D+ylhVLz/TuUEAwsW82wFALAL3BlMAH8f+sQXLWMsowKK/0FF7 Mwg5N8bRWxw/MAL3DIm4ztstUx4Cj8uV1gRp9AjdBTfW2MNZx2ReZC0WDYpO PWDX23UoyAKkyDPH6Nuc134ZgsilBT4ErglVBBtATdqOBu96Ir9RLmxJmEGW vyfKor9MzpADgB4gAFsACEe1BnI4l6w4Rn+kIzSSiQk6OWf6o9rS10puAF0A 6NsA3BUMaCIE3B8FkgIH3Dg51jp9AZc7DNw1Og7c+gMQ3JRTE9wyuU/HbLpZ upPQd9kRVVlCaztkLSot3EE8QHRDMdS72w+6INlPACwAExszQunGubjcv5W4 4Lso3Ja8p8B+CrO69bxKXS7MZz9B3Dfc+8jxBAoKC3T5JmW6ogJ2OxPPbs7I z20IS9wrYEoG9rg/Ci0BsrqVYHkz6Rkm0VMWHMquwdfbIj3yAg1bHRn/uV7c rjqlQMjGY9zsAxzKUMyCx/hJQdylyi1gaQXW0ZjXoyNqu9fbELjkwQWhMgXd v77VRbqnxyfcodAhYWvK/8qlAzsY/EFzu665pNmEE0jTktz1E3HG9DuROk3T u9uJ3GPTbMpSQ0HZrtBVALTLogf1AuK4GVVKBgK4rbnVxmw74rjX2y9g8Azn WJjBDbrvymTHg8vX2/Y66ykMvrocN8sLuAdDB0P/F0Hce1V+GQY958K+xZ7B 5QKyupDctbvrt4lQf9PB3Is/SAZpBWTHxNAaxAAF1tzX25QMwtaJVHkWJwSU DPfVNNE1vNfbSRJQx1e6rjpuulnAjX7jurvb49wp3K460bpOwOLc4wm7uje6 sziyupfPSFa1xDNBYwzx3CvKLgY3uvzcINm+OikDLMpvuqS6kEzWuroGBBrY IuA4Bd2O2Ba4KsokMq9j/gcE3Tq63nhGTV8DaQYQA8xODd1B3OPcRTtU0eQt T8kDA73R4UCj3B7dU9HRuqO6ezOpTgDdRTvyu+8E6NNzKFPR87u/xi3dM90w 3U3VHd1/xzfdogKcN1kCtU8DA+q7icmYQXoAOt3JASQ17QLv3CJQJ7mpugDd 8RrVzhpAEIOWwBgQTd0n3OPcvL8kMqEh2MxNDr4BiscA3cUCaQECQH4K8RpO wCbdEpRRA5W8pcGXJhgbuqw0yOLcPgFNnWEejwjNu965ryi0BBDNQ1xGz1rX e7jLSxJPg4Za1lUned2luttAQ79v3ew2ZcAPE4PJ7NQGwAXd4tx70oVCRtqH TyLJ58g2uXI0/RsZL36+zgQtADFhNKk6BI7dfAM4zv5yVQWO3WfOqgzfA0LO o90n3HkCtWR3z0UAzRmbw4rYwsZb1Y3JJ9yCZ56+FTAz1a8CYDML0zNMLQUB yK4CKQMHQagzLweiBoAFd9Jyvq0DyjGYhJ8c/tu23QQJUbyK0Qi4rt2isTYF wFreyQjQI9nS3WR7Ekw4NCkDDQY/AvXFHSc4XyNLjR95eF2AYttLzqwB3N0m 2njPowLtvmQIDcPqPIe4tEPN2K4B6d2FV000FQjVBD0eW8BZBMlWo8/X2xQp C03UKQ3OQR6bBYo69gQy2XvPeDMG1RhMwj9+QYLbONkn3ALetJbNQUO9ehY/ AgspHVVXHW9Mo9zzII8HQs/sAzjBoMfnVWJqjkJVwp7U/tv4A+bLiQSQqYZP 1hVT2yfcRqwCv7NVKQNkF4UEWzG9AmPFIMIQLLrZMt6SW72932zqwvXdy8G7 EXvBZs6MJ8o40cG72861TME2PZAzx9fS3aVcXkOQuenFJ7msvKlO8LvxBC/d Pd053dfbyhcfKC9JyQGo3WApHr+tAwhRQdzKF0cX3mY9BIozEANNBSQs3QWI Qc1VMEy0zcxCFxMZMuomtQFf3q4CPgR3Q0YEHCiBRLe+dI2g3YzPA1ORbm0A ad593tMCaNWuOUDBVx1Evr4IMNsBzg/dwIOqToYEoMuzym3GQdyW3n9BedZT xKh2g8/X2wQCISjjATgAo95emScEih53LEyZ4dthdiPBXQX8AbDe5gHsA60D 6zMckbMBPgErG19KKNIeL0HcHV8t3jsDYyf9ASwA/VynzadQ0gIjwUgNgbnX 23ACkkKxaoDPPwo31kTeWM+SC0zVKAD0Gi9gsgG9zhsIrglYBYJgo9zWHRXb BgJr2YZ+69KTPYZdn8RBADDNSc2SzknaZFKPNE9LdwPWHR8IzqxsAO7enLj2 I624lNY/ZxvW/t7/3gDfAd8C31+6nFB43ZHM4wKNHVnId803zjbbMdu72/tN Pc51vEDO3QTU0ifcA43GddsnhHgECRHeZUKGA9rc5QV92szd19uIbbgFGS8K RxVHI98iB9YD4g0EwiFTxsALBPMbWAAJR4p+8dIuuAEKBb5pQfgzQgMj3+7Z PwMAxhbfPd/iDYTB+8bS3ave5Hm9vSHEvL573W7BGcl9BscGogQcxu0COyBj 0ja4lcis3pdBAD8RVfROg9DU3sNaNpZtz2XcftUW311DoByqP/8gf8/rCHBh I98ebQy5AQL5G1UPWkBuks/RPwLDWLvbws0nXHHfMN0vANPV/WCYvi1BZ7+F vmkRVC7OBO8BkSfCFfnQwjHcuns/QdwJd9TZ0zlTATe6KTIidAfRAwKdvUbT ewoYS85mdt/kGw/eVdlF3+Qb4MYJdzvSWsUCzQgD+NDj3l66WQI0RL1yzdsJ dy0ANC+c3ykD8djAHwTPBgqkyZ/fIkBo1jI3MgjswCm6J9w+Cv5UCQL9VDDI AElkAkLfUdK6yMLEWiknAuRBJgUDBS53W6GJuKk3Nwb/B0kNmgPV32U1ksm0 K+QhLEyb0fQI4LtGAIo6r9+v33o/WL8qLYBDubupT7TAj9zg3yI90UJEu0fE oWSN1FMADoEhuinBV9fS32BbfQeawEgAlAxeymTT41Gf0FjTN0bfuhUNIRIP 2GHU+d+KurHCfVv/ytS6/hpoWw++QcZcxoxb2MMYW7a51teywLW7w1edP7ss M0ALGuAbqTfJQNQpLD8PuGReZ8cW4LvQRcfwDCM9dgd/2DUY0t98QwwE8b6l A34Z59//F3q6Hj/xvmQXWQSLQJLZWRjOTODfB+AgACrUIj8gualA78oc4InQ 0tx90HW7hNEyufm7Ulx2u+7G7sHS35hOZsvnuPROAj9oTlbg5gZ12O5AXeDb QlxbngeFUPBAMMt6Mmw7rU8RT+8BD6NRLrt1VuBYAM9B1rz80xLUicWgcIvF psVkCdLft7hAQCPLGxK+Hca4M8tfunvgOUB/0Sg/DbiMW4TgaQUzACy4UAf+ mP0BF2LSaIrgNLwAP228Djl+Gag/7ilEunNAC1trE1rKMQVTAIjggdhVJ65S pz8dO00/z9RmBS3gPUA61AYHk+BgwWLK71Kv4GjcMLou4BYNNRi0y6XHNcbx DHDTWQL3ztEn3zPdBTsg2AEqYo00xdelSSECkhPg36nHCeBQ4MzgttI14HK7 etMjFUdfMQLL4DlApECwUgOvYMLZQlnLUgBLX3q/zuDY4AsEC1sjFdy/WMqS DPYGk+CfzPB3tL0FAyfKrlJFADd3/QHE1wvWP9LgvoBTamPX4GkF+bsxArTC n05iK/gyhgPPz3AyBeHy2CcAicvrMz0IQLz1ucnANibvnFEphWgUvJPgrlJF QBTh4xcyLUMAykJYQ3kUsOAH4JW6lriT4BVVtMGbwRlVaQVWCRBAotri4GkF r8QhAsC9Ss0IuC68MgR7MxXfHBCuUptBc0NSQ5zTKWAr4d2/Vl/gv2wtM8sc Px4/y9O80DEt/xtJA1fQEthP1H4Zk+B22aUDJcdM4K+5GD/d1x4SAw10Qxbg t7hnzUJVKdY9AoHMLMQ94SdfUBYEwZAE+00JybuabgD74IbgoeA7GEQAk+Cv FfY659/Lxvc6azu54O/DMdxyvycrcy/FAz4EbNffA1MWHN9v4aJAMj9aD48M Xtgx4e/Dz8cyP/m7KcP6itadPYmkWDbh78PQbLPVfEEfunsChQImBo5I+TPZ oMxH6ZHj0h/E0GzYLIzEl+FzRyYGCmGCHIZd1JGS4TlA0tT2UsrHwgN8Q4hQ suHDV0MAMi0vAEdfArjMQpPgHOFISqTVtEEiQC0IhrxC3+JEUbsoJMCUPeFY Q47KLAKGPRDL9Mc9YCMIPdO84aVA/rEeP4+9PQF2Sajb/tAA0iALugPGYvDg t7jVxtfGkrgDP5g/9FJ3MuLGXcuY4Grhds32TuNRXMjYUvhA9BrYuzI/m7t2 4TlAik804WzUyeFdUa3SKTG/1v3SyAKR1tUI9+EQ2M1EJkg2BVHK0UJH3MHV iOE5QC88+l26vePTl0Ev4ZPgVADWSIu82RcO3Ta4rlLdxIdQLgLtXEkA8QLe xPzgmE7kxJPgBc7AAkrUw8kpW1EX/b1DAWrhe91QyyHXPwNC1qYcZcx9E0K4 k+CGmMbVnGyjGb7dB0xoS7/Q8H4cJgB+zL4Q2jo1J9UYS0qJk+B7stPL58Uc BfvgpttRy7G7YcEwAgA/sMoTuBO4oNes4aK/29gUKYYDrt3zflZBu24+A/YF 4wHSxfPgS9sO4qK//QStJ6rSWnLX4O1SRMqQyUS82RUBA+XhJuBp3HLi2hoj PQDS9tmZyc7UIT1yuxPL9Bq54DItJD0P0NcCMQLaQpMMh+J8B0LdgEHqWtS6 jMQc3+DfVwAUMDtRbEmPc6qw7LZQ4Jji/CiMBGe7812XQUaaUMGiAv1UT07S 3z3HNcAVDaIGkab64TfbNuE9x5VHU8+r4g7SJzCR4qxOluIq2THAFd2hw7ng dd7+VPV26s+BA6vi/cVwaJcIhUJuxFXeG+Kk4KMLXXZMuq0DTrotXIXHjDkB BVO6/SkQzT0oVhJJyf5UK6rS37UFB8+nvJvN++E24U2GILonCOHicg0t3+vi wEnIxU8RfGWm1qTgTYbdA+/JC76U4eLL13JtBZfAJgZwAn0G7uIOz/fiaQU6 vVEo+uKozjYF/eK8R44iaCcB4/biOsEF49YnJD3XA9a4C16GCMNEqoANb+fi TgPdAzanvzMqv89ah0SFCA7jiTqtxKUFmd1KuLoDLjVAv6wxeizM4jPH9Dea T20M7uJnQlDCWUBM3ercMeGReNrOf3lgCMrFFxMDzbLGSkHg3zvjRNsOAxbg RePqud+pgN2/M9nOSwQpAy3heRZFAH+er9Ub40C9/8dylCLKoOFMHm7gW9rZ u+8EBNmsMZa7QLvzAwoVEEPwO0TjPwizMXHa6sk928hcIha9Pz+74wcCQixM ueBc40rVmdYR37XfbEIyzuviRLyqDJ/MfZjuyDrj90/QCDe4MAz3AuRyfuPX FnnjTDuY1s28ItqE43cDpt08zo7je+MuAykK1LqcUFICVgyuPizRVuPXFsjI IkeD4FDgXOOLB/0wxNWQ40jjSlvCAtJCvqdM47LRA9uHBEkDUNGwwrTjVxKz 44EoYAxuvVAFRONl3+eg8CFburjjUNj+TV5uUAe+4yHeogIHesy8vgEqxRY7 scnPBrKiY9tKFlsIKUMPD/Ah10Dr2uHiMrumxiyA9is7POHiSs+GA+y95eKy 4jHh3QO4AhMBVb3TAmsBqrwZxLngRSB2vovaTs2JB84EZEvVyX4ErWyH1rMC 0t/x46UFQs4KFjm4ik8JAom+d9QWuKo0giih3TcDAeT9CJVDiTonXP3jIjO4 AmHjt98H5Dp9z8jRPbcCqIA24VXPmacaCILW98uf0EzWamB5ALp7/eOOBh7k aOKL1sE/2MVM1lERI4In5FpAOM8W3iIwLeQn1cBoAzIx5FDdKuQBSjXkKSuG 2Sg5eQIx5EsfMeR6LK3bPwpNyj0CSM9d2jgEJ+QKeaQhEAMoFLUCv8tQ4Al5 cjEK0ckEx7wn0oUEJ+QI0axOMjdtCI+Knwpb5IUC4N/zehtRA9pfqQsVNdkE vCcwpMhZCDPO5tmHBFQuG97w4/GtQ7182q5Svd70uBK528pEuTnWDXlV5Em4 6eJrwO/NHOQbef0BvjpFyJRV5wj9475CPALkQVkAkL1CANLfVxJlQrLbPSgn MZPeoOE+v8zXyKkSCf0w4N8+v6cSB0+XQT1BiE3GwB/JcichYZXkmtUAuqbk yKjvBKYBb95q445Flc5lNeDccNRQ4D6/RT8BUiAAPgk2qnIIIFOi5GMZSdbQ 3WUC/7/dx2XixgEizXYExOSS11QXL7guXfDg3cf4w5ibhtlHAVc0588x4dXk HtW7ERbgyuQMcnSfQ902w18D2QkoYyjARcLQP/m9l0FwXFEpGAWSAy9PMkQt KgoD4hseJiTgAQVVwnZ9reRFVRw7AAWC37zkmL/UAs8magMABcI1MAwnuODk Yxm33lZ/vQJXXT8B/OQCuq4B8LzjgDYFlNfP5ATaAuLRqRjlQ9t03nsEP982 4T6/J7kA5LgCjt6kFBHlVC7rSJnkricmYebi3ORjGaGtqTflZ4ODsMKQjdwD TiQoBvMFEeVGv7vkMOXSMY+FqQMO4aXXB+Q+vx6XGDCTbYcKZV0AuRHlCdls QvXG7DcOYeBISLwMzpG0MOFE5WMZa+NJPw0yQ71PAOrbahCHPfY4KgGzOAGE EeVr44+9k9QkVRHlQ8p73YpPueA+vxlT0wI40D3lcgeX0J/k398Y5aTImWBK 2+TBSOIR5clBXG9iNxJHfrx437gCssR+5bcFu8WCJ8TdDcdRKata88UD4v8B EeW73ao0mnzOBEFBnt9X5eoGs3Ik1ZLlGS9OwPgIrAKVM5++mMQY5QXjfyd5 A9FVMWxmZyHlYxkk1ZVDhblAO5K53gEBvfYhGBthgcoB40jU5K3lbMnXOuzj Eyj0TQy5Xm3j1bvCoMMR5VS5zkRUzqfTVn8DNC0Fdr78vVMX29KZ5X3FsED5 4ZvkEeV4xocKuALt2cRHmtHEVdtRfdbfWdvi/8cUNJMzLOM3x/AhKOMY5UPf Rd62Qe6/htYR5X9geiGOBggoM9a65bZBmNBz5dJCduVFVTF0p0HkGu7Ftt34 CH6+NQab3Y5r3AsdgvNGEeVo3x+4EeUz5anODR3hNa0DOeVhALPJC3f55cvZ FSdE3kXCIFN7M08AAFJWQcts0wKtA27irEuGmGvi0uUdvmwIrV8h3mjaYtWs 5cnjNNqrctrYaRFXN1oKz+R01WUAbcCkXTM867fP5DY9vb2l0afIHRPkQtRt reTHJ5vMqWa+AYZAaazsN+QBFDAjQ7pZO9kSItGPYtH8U5XkeMRY26vOiQSS ziPl3Cdj3knUMsQLA5Xk42HQwPWqfUFfaNlcNSNj5jtj1tiRBGvmiATS38VL XwON1OTFSA1ZBEHjjCdx5s4E5bnvBGDbvgbfAzC6RTIjPT4Eobli21QuyQF2 xzATst9DE3gA4N8wE7ri7dCqEVLRMcDzu03VceY91TxRRgRI0gIvvggW49VH 0t93ABQw/VTQPzJuCBrJQOnkoeZuB1kASQCg5lTIiDPBM+Sp4CfVyeDfqeYk yvDgqeafuY0f4gK05lICWwBGAD1M78ep5r7mwOZuB6nmpgGlBYknfG1dACbc NuHC5r/mLRTD5i0ULxhdKV4ZCmCV2UYETYjkt8vmrebe34IDki+72hHfJcYz Q65JYhlMHgoV3Et2HqDhqebIyLMCeh8eFriBEiIjXaDmLRQwJIJP9Bjvy/XJ +AiBNHoh2jH9VEnWaRERiRm++IwSFnIDXObE5j4A9uZeLBMSQgD65pPYrgj+ 5pnOAOfXuS5BYAZwUffeHMQH5MTmpsMSBvPmBBZyGFfRiL8W5s3mLRQ1xR1u bmE9CtviwOYJww1BRcwLA8wZ7zNkxWYTQN0vv4Q9CFGPuFi6kRmJuFkPowee QfZSVMfmBhBAOufjuAk/LtRfwXzFrAxR0ELnflXnuGXQ5gbxAjU/ZMesxei4 mE4vxKe/CLhEx+a8ajvu4Q/LqkB22NjDRMfg0EngRAD+u/nF4xfluLNSI8vC AyHix9tK5xG4GBvW16S56yngu0THeeLK3H3Q1Nx0023nxtslP7TLRMdmvNzC ksFA3F/n99d4Bx07jrgIOfsaXdlVJ37n37+sQvlOMj9B2NvQ3BvuAXDZKE8P 2D3aHBBEx2y8prll0NbXqEBkxzjh81K0wdDQ3z9t57tgu7kxAt8/PMovAqGt 3EG+YC4Csbtz59pSUedryiPiWEJt52THBaFd2LLFkNyxyNBUeLozQFrKRbhH BXC7ceG4533QT+ETFnpB9Drwvv8adNkSE0/hdgfLyv8bx+cv3BC+u7kLW5/c 1gLp4CXieL8/5LC6d7RkLfa8osGy53zQ1udHx+jgmODz2Pm72MXRu+LnndOi wTrnIuJO5brKkBtFZFHeFrgx5fTnhb7AAVVN+1Or4VfnfEMnCfA7WAD/F3YH mE5zB3bNJSieyX8C6wWO4dGXBLJcWJnnQ+CMwzECTADfvn3FPUB3uzrnUcn4 QFXiMQKTDDfO87cwPyFeQWEwPy0/nuD2UoPROud6zMI6IuLixJhOpEDyArrn CT3iuGsT1zoyP5Unyudtu2i8m78s6IPiLujFuL8BJL2j4L8zYecKQwo9Bj3i v7S5b0MzQILffhnfQWQtCgT0XK7gMrkyMk/dUF7WxRzYuNyJUDrnU8D8uiLo fMVPDmXMfj+ed2QX/sMHyQDEhgNYANBdc+df6A+7hueOu+zKXl/o34xbDbqE yhlVC0BoT8S4geAYP9cCUgBZDz3UVug42JcnmQfxVfJSX15k575g5tsMBGI7 ykIOOxFZg+iXJ2DoRudM57LFieBW6OZDXjLmQ+XjDt9X54DfSA3QzK/LaOKH BuLZXwNruDMdCSd95HQAbdWA5PPiRuig6GlBrbxcxAO+TwSC5VLZfQmG2W0A TESJn1boUmDQet0Dz8EOwhnAuwXwvf540DF2EeFCGwinTjrnPwq7ulm6Vyj1 Yos05r8s5k6D4rqY5Ta4/7lQVrTIjcG9AqTivb25xjPatAS9xpHXcLrkwa3G UgD0vJrJB8uO55HGqD942XPnPwqmUUi/yUGyTPW99SEBxzIWOgOsvA0U6maq zvFBlNYfCMsGAl/gyefMncRx5WrFzQhkF025juMySiO54tkowGzcCsDNG2Dc xQLDyXHcPd09vK7BDrpa3PHowMNRwBnErBoJIQYCfNJIDaXPmXFp4c3orgFx BAa/wT8rG9oKKukHw5Oa68jwQW+O4iegNyABNzuARve8qs6YzjRrMekD4/hB gA+V4aJPpeGZ4d8HIB5A6RDj+eLTAg3aFeN+DX8n4A8fFW4EiwWM2fnnIL6H BnrBOr0T4+IBHuk+x1w/vDNBzmDmrQN3Q17p+wSZEg5dOcz20fC3ks7/uUrV VMSx0SDJX+c/CkrV3QXY1jHpf+e5wmq8mdt1wabb8dgXnCW/iuew6JS9Vnu5 wrhtA8y5v0kDJDOaSR0TFYaV12XnOUA+BN9SXukcKNIJtr3z3ISxPLvdA6a6 LsZU2ZHjV+l7QkXOneiU3tnoK0Gi6arN00LVSNbONeGf6HvRktdMwTDJ1MO0 0XPprumr1DLa9TcjQ21S/95e6UPa9SHYLEUAwN8sQfrbO4Qh38KdhDSQ5fTg CFayEudGwHMx6QDJmMkjPfdA71IIy+7oaxNJ2i3flNit6YG9fOjHuMi8Qryp A9cCkspp2ZVTzgQGOxEX9gZ950jkqj+A4N3phzPf6VI+s8I3zmrZzgSt4DxA 3ALp6a4BIulVwb4BJemwyyqgyOQx6SfSrcJK0kIACQIg0iACqro/CjPWy0F+ J6rObUFMb+zZ9WLUug+8BQ0B6lMWmD/Q3HMHFursA5sFclEb6jC7qcfW5OMC s+kf6jrBI9V+SrTpusyLzE2etcuckUjRzc2Z5z8KYr0LyL/d7wSdMufY0wf4 56XpACfluLzArgKUz2tWCxWe3rbpGBtLACnq3Ly+xT7qkCQL3npCHRl41kTq KhYp6qXEt7jW5b7oEw6HBnZUGsWV418DNs/nVV7p+8kKFldHzwg/1lnVBbiM 6RACm3le6WgTWV7fwRXbMelZBJrN1NEsMZfXWDfMA2/qKUOBBGU1l5ZRKbqZ +TZv6uInkMCdyA/aT8aswG/qYqEC0To0c7WhIWg4YgJmEU5L1G1e6e7Mmc7x zP1UeedW6m3Pxx+LloJF6cVh38G9XBNInsy9YgNFASrpChVgBwa6zUwJAiRA xUG7X2wCAkJ9PyHVFcRqX2zap+kACazpoOlDvaczZNCx4p7o+eeYxNvBX+JS EmfigChvyh7KmeeENIvaDun2xLrbV+eENNDCLQg4uEsWQMfe4fkUCU+u6Em5 pM7G6uINpzMfut0Frbg654Q0gdrRQsUCH7q55k3lY714J9/q7bgz2ifGqimi Aiq/XEM7BD4K4AVGBHS+wtPYIu7YKQMaOyM/41HQ01bo4Orr6svXHeU24z5H ChXx2LjCX+f/6qNf7OofCHG9y7+z192AZsQG5NnohDTj6q5JRgSW1szal0NW BHPnZwsbCKCHQrsYvjo0z9cQzYa88QWzHUdPLQA9ANIk9HaVG7Md6wUMjosy yajJXFbocZGCXQ9rBros61AXKADeKnU1GzCHBMhKEek160dPN7856/QIsx1d LB7DKsyTTUTeJetcBMMnEhZv5VQDDcN8wYBZOufTApnWOZpW6FgyUMPyzCfm 2egaE67j0wLxP5/EwB/e0n8pc+d2vHd2gyi2K30W4ZInyo/PfbkTxYbkV+eh fOO9wcA/xmzeg+P554k8/MB3zwvqA781BlriVutHxFG7CFZrHKjic0eD6wPr 9E9j25/E8difuUzrk9R5fdYVzA0tvkbJXs5a6/rcNwcKFc5VBOsoXrFZbek8 CmZhh1eh67bfc+dnlCjbatMN36XeS9SN5FbofEHr3lPNwuGYxL8Bc0en66JP d9Vf1RHrcDJkFyrJ0wIsyXg0Deqk45nnluF16+W5xAIzQUcATj4S6FfnfEGQ 5mACUt1s3V/Eg9s653xBSL8NxyYG8yozvoshNxNI4iYG32ZCAjdvxOuiT9fr 7AKqzm08og//uQ7pJFNQFye5+eHdNLUyzX8R1fnn1usZL9jrFsYdExLadSgt CIpPguVuzn8n5h+mVSOCEG0oXOPrgOb26+brxc+H3/3r3esanH8niR4BZrFk fngG7ALNCOyABUm+ob9T3nC5/yAO6QXmqXJ8x6/r5Osm36ynRyNpzmAzt+sH 7KUF5uVx270/jgSiJ9YdpxIH6q7jVTKSkbah1esi7CrsF38s7IPejUdlxjHs MNJ/YIkyAWZ8V/Pr2ej169BBKOyuAeEbAr/fBiff0gJJ7L86eEVv63xBB5zr CBXce+FRA83DfQn61GTVYwXW02rFpZWqlVDsa1JQ7Mmb88Rh6d0EQdHFAiQz T9zOxcTfI+Mh7H/hbd3Pm6EhauzpwDueRQRs7C3ZId/iMR7SfAX9TZUHmwt4 7EDFyLu0AtXrpwba4ePjc+zLm6/riOwsyOXL/wFESj5CluKH7KUFA7/yEYLL zMhlung0RXbs2SjNXNJVDdvEjeznp9QpVQST0/JP18+1xCgC+AjdwczalUIc VXPr+efTybfDROr3uhFPAedAQxdEnd/j0q7Mu+wSuYTIvrs4A6MqrMLF3DQY c+ez7NTD39wF6rPdkzR3fK5pVx38xSTryOwGAsLLxsCl1H+7VujT7D0VInQr u+kZ4y3H7ErAA+qE6vUG4icXG/lfWUjg7Ky6/MniJw4Tg+rBx/pLZ8IABigC kcRTfbsfOufa7Inq3skNTT4CzsIzxdns4ezX0ZnX/j8ABZxQ9+wA7Xvcdep9 3P4/+ESv6FC9AO0p5tMCS0vdA4UP5EIVdKkD/MVf5y9BnLlGdUJVTr3OCeIx UtqJuEdfF+hS6BXPdtjdQllVIu3ZQslXk04wMhMbM9xSQ8rnw1fwVYgJutBc W9UCC7oq7brhCcO2BCLtg+IzYATHRutdvunmZwaNvjBL86u+vYnUhr48XfO5 qWXEKKS+FCJREae+v+XyCdMCMgA+7cM1QO214vTgQwAmAEMAJMB20aRxHwhQ Po2+HEQfCKJDzQaagvTgSMSMizYFbsqxZ3vPdQJb135AEwNtKdICwB6wBC47 xhI6taICSL5jKNa4QecyuQEb4AZtQ+7on9Ai2LzQ5UFq2FjTsrruxB4SRurg u4PtYV4RW+bn5gYy6FNcBssmzSLt/xpsvNtCNmGZyUoAQ9QD2JHB9QKR7RQS BA0cvWrnaQUHz6K/muAmXtbpDMwBQJ4CRMfBGi8Fz8ocEIPLRcvfvwAFKSkV 5acDztbkAVbpNri57RC+u+3B7QaAUW/u1XHq/Qgi7TDYJ+3i4fxBj8uqQATo /xe21kdXX9pVJ6ZPw9/B7KkDEd4iKqATOuKC7TDYfsTd63sE3tFzoPM3OdHQ 2Urcze2wQBzgtbuzu+TcDusr3JRUGb0SWNjtvzNVyDI/OsotAjNAWkKI5xg/ nj98B/PnGj8nAH7oCgTX0O3taLwLW9pSXNBfyiLinkDJVznt4u2wQI64LsBF x+LbAUCOPzNC++ru257Xpu2wQBvgP0BMQ0lKM0BsvDhC9bx4v6k3Ge5MANjD 1deK0G9AYuDzGwPu7kCGUN/EaODfP2rLFrhI0joDXrm9vWHCvIR/QY9o/L7a 0hMHZxfQBSLtMdU+7kTI51VB7i7VrN5/J94qgikVE0nuSdK+CNACHjkEcT5E YRk9YUQBVOWNtFblw+15fg/rQMFJ7kfR5tEiUITmYuaC7WPuaO5AAZHtbe6e 5f0p88U7Arxfcs9G0kvSok/fzOaGUUQQzXaUvgHxxZ+4gwy1jdDliQUgW8YF 8dbrCFgAkMP4KHDuWDcPX6da5R5oE9jIeuti7lg3CsFJ1EEJ/11J7pZ+9Agp 5XEPf79S6z8V0wO26pbuy7Ge7nLm1dVNvj/B/cDfvZzup+79AaXu2e1PeATk /HKc7quyvgFJ1h3qPr/qusXTXkeSzmsq4wEy1w8TS9hfA3sf10DO1F/LwO4X 1xQDIMaP61cncO7q6vU3SdrwvCJYBgLL7tLukMyy5Iwn1u4izwPfG9bHP0nu 2e5J2pDYtL/7v6REa70b1uLu3c7a7ibJRMysMd0FwLrf7vPu9O7g7pxD6+7f wSi/amO6zALr77jfWdju9s/t7uDY3e7KNgLfxz9+7tkOrLxJ2hTk487y7vXu D+/27ky9CLhB2sUCCTsjxT8Izib/HOLS+O5H0kRQr8uj6ePSFO9L1QPkPLuR BM7VOADQ1RPvQ9J+QUlb+O7Z40rSEwNg6QkCPgrV4wMDVLrkKnLaH8/kKj3C Lu9ZGLh8pgVmE9baTiSz0j/vgWXdA3MH8xsRuADvmOq8zPC+2tfZIJ5AJ+3U 3DTKidf/yjhhnwoqv9UIrMvi7ivQGhlUF11cQ72k1NbDXQPY7l3vCwNUFwTV 8s56yN0EsdHL7vquki9Q46ZV3uNbzLpM/QGcspHtN7kICikkksUnyl3hZWAS CYVa3gaGCOEbREP+6U9lvOve1Ljtok8numMMwN0Rv60YK8bLyW7Kyk1yCJ4E CMXiMa++CB9aAiJYJgZBQWhteLiR4FC+Qr4N3sUCOQA6AEU/W2k/A/LQy9ey xF0prCfKP15AZb6K798DW+0mBmu4Ue0pjxfjqU6jTL696OIN0qzdwDgmBt9V l0RXHV9d+MHSQmYt5BHWHXrVEcc8KNCO1CkXqw20/iF+QHMHrmDPG7VBIu2i T7XvCN7cCIdPxNnuRY2+sG5z1N5J/QGeAj259MFHBa++9mI6A3m+vgG7usXZ 6e9s7e9PNgXf7yUGR0rTB6dB3QTwwfbvTwD6A5VK9wH776/XE+/a71Md18+M BN0FXEPhR+QCyS8Nv67CQAG4AfJPWzcL8KrVFAZ47wlaVTTb7/7GjMkXQd8o +dvm6tHqsOOguNYq3AEzNfrUZdaiAubPfe+J1/zoameiBDjIeO/0CHzIuepX XCQnGdvJueINdju+CEo70ZsjvjDwvT/BWYBOL1qC7YgzEgnNAp0UP7wJw+Ug BgLUHWXMRN7ZvTITNQYjxgm9SQP6w34A2e/0CAMDrLzcunwFMgtguHc/Pwi4 NXtBZQm24kPwWPDC7lMWSx+OzbwLXpzsCB8IcNKxbIrvWPAwJ1fwStSsvKTI SuV08PgI3tL76jJjgu8rxT3r7uZoBvUnKM+xyQO1xiOOA5i9efDzJk2p4MK2 RzEK6gELFZ3jTrsowHNcFAd9QYsFeO8z72vuuO2Rt4uxaguU8JIv3rsh8LFX hkJ7M2++5BtPJyLtaQDez1zVE+9pAEnI3QQcQwjF6rkH4nB4cwDGHNfE6QF3 z7FXsPD9v7PwUs7I5TYF6+RiA1fOgu0U474IngRgBr6/me6bw5OaqvDq3dDY cEHtx5zw32zCo+0Cgni47U3pUMOR5YLtlsQrO/IRIu3e8KZOB7Xh8FWoXhi0 65SPZOGaJAlFGBT6M4a/e81lK+HwfQlD3cXN7ruT4vW9UdaqEocKq9vN1ZHt +tWS4pLmMt2U5jjd/vDz8ADxRd2pMbECR9b78N+JBfGX3qxO9/CBvbLEjc4t CKBDgPCtuC7u//AQ8QHxJddAA0fotMvP60Tdk+Zc3sEGOd0Z8QbxG/EI8ebH XdYM8a3Hh8vD7RrxkeYI8RDdiU8p5LvsDvF/QSnxyeTlxw3xIPEx8bnuAfFD ykfbGt9yCFs7pET41dnwKPEy8abbK/FS1ozYDfHy8A/x7dCFgVHxOfFWwWbm flzd8Erx/MlY8YWB1Lrq5D3xVfE31lXx3tkhdgy55NRa8WTqxOmkyD7xfQnf 3GkR+L074y7GUhcmatHlMPFu8fqAv+wnBIKHE9cjdiwUOPFH5J7pVfHDuSIw I0NtCIhzCQKo34Pxv9HBP6jfOPE/NwJpCPE7ChvwTdJJ8Z4oEcfOzNkD10CF D14e/tq5w4fZuYXiAbeAEuvZ7X5BBpChTxYTewOb8dkOnfEWuzjxp/EKFvTt 1tFAHgOLsex38XED2ANrTWs7C1sKQzsYpz/IxvTHbXLD6PfQYMxp8bjP8ebN 764Du4OJVEnc2Oil8TwPws8WyD8KLbw+v+q7ULsv4Q7xx/FAI6C4bCnC0RgZ PwLcgAnJRUf+7JbxO4GN8TwV2ek77jqBjPG/6ePc6UKeBKA3cjgwALtA+Nzj IOHwYYEgxvzOeQMjz17CVcKKT/fxE5HyZFm+Y0Or6yHvjyauZuMBj5z73w7r 59za4uHwrgEnAFtKxhy8ggTBJ+Ld8MzLtgIn7ynv6vFHxOHWu8cP8vkb31n+ 8JS9Oax40T7xq8wXWrXLbu2PJxvyMPEzQUc/+Loqw7jWobgjAxnxdwQfs5VD IPIj5lrneM0g7w/y6wQPS7gB8UHrgMkBn+6w6m24Hr9JxhjJmuWJ6azJdgGU 8F2quOWQSCIwctaswj7x/AFLqELANgXJ8AfO09Iu5erxOJed7M3CFOsY76WM hDQNCb5g9jrwQBvo3fClBfA/adS9zULahUIexvjtI9OlBdbB6zrRCb4BXTFa 4y3maOJpu2hcq+it6Ea5aN871sXqE+92vtbBz85IDSbjtevAyRLe2fB38sXX UNd+xCSzPc0l8jbwhMI2yTjm4fCS8mzdvgiN8qDLpsQG8qUFe+O72owHdzSN CbnU1sXIxu7BGfGl8ifPkUNpA0oEJS9zxXLuQAHA7na+fBZLEndCQsW1uzje 3QRyH+LneENZALny8dvTAlNwhwQKYnXVnfIXDj8K/CHkG3XRb94F3f0hwARR AysIsycqxdPyZd2v8s7yydeaA6veFiqbwxC+uAEqv7NhD43lAbVH95/jAfG+ xvIbCPfj65hyCIhStSc+Cp3y+AiyxMDuYBZwgjPOpN6zy4m4CcPLXW8IRQKC XRHyRgQnX00Bz2hxx8sO2MMJwx/bpQWFTzLwPwLk43lBbTyW35XcxgcUjrYH rQF1AhrjCLgJwwNeAsmkA9ZBxAZ32gW4NrvrBMXXJNfyvQzzStrryVkY4yCJ 7x7zy7tg6SDrvgFfCH6/pghi2wnDPdiuuf/y1835G0d3r7zdCwYCF/NF8466 SJ4cAyh5pVwA6Ba4rtmUGynFrAg+80vPLggtw9dAWrpkY1kFEu9N8zYGex/o xFXzWRhZBRG8Be0yuRfW2Q6fOKq8z+zmRrRkAwM25Z8KytkidCfKZfPiDfDe n7Bt3oHwZxOO1cHyAAnVxGTzids/4z3g3dtl4xDNK+fv7pbZR8xCF8EfHhGn z33zAS8/4JrfMvP92i9ZYeaP81vzIJcez8wy1yEf41kYlOpDAFEA8szISv/y gPDUxFMW4/Gh84R6HesJw0iuDMNE3gTu0srwDLG5B89dAtoafAf0DGTKi0Nk F4PtB8/gu63zGz+I7WXH09uq4BoSvdyN3A64gutk86k3X+CiH/8Xg9Mc4IPt Gj918r8BL2DH0O9SuLgoP5dc//LS8+1c1PPx2H0JMns689nzxcc14E4AnzjK AezpM8v/8nnoaE5+0OhRhtz36ejzmz8EP1Lovh1+GUXoDMnp8/HzjL2oP8TH 71Kf0Ec4MDrCOyjAeQfw88vG+fNrEzTgjrgGOlHAVgwkNSABAfT38wT0Rrq9 4C4AC9vi1hjGM8e78w/0UuEbVg+6Hj8o7qXtDPMZ9ILQEfTPAkoGCfSqvCPA RjsO9OjXabybwPUC6POqQrJRd0AFoQfgUgBk5ywCLgJ6Ni/02VKW50wAIwgI Q6ztmOce8/Hh+UCF4sjGWQRrTTQYHs6Ywc82PdstzLW7PgSiDujzeUD3yYY9 ztDcGxj0U/TOykXH8Dtw2UcG5ga787/c+cpEy4648b6x4PMbks4IQ2THj9BO 4LrQLD9oytnKp0MNBdvkTfNrE2r0lRqQ0KW5GuhsO0hB2cqajPVstGmQRZTz Nrh+GSIAaxN72KNA69O5AVoPKxa784jbhQ/pH85qltgbICq/b0GOCrDl1ZSd 2hrpQztrNwEJ95+BwEAW//KI28vaZgYGFqYFsOIc1zEdhdtlF3QJvl/HcLjX HvOi9NravKF7CG7wsckPCI30f/De2zDsp95k88/ZogJG7wkChH7oDRu+Vp3h HmwIRgGdD7gBqPRncuPSSVWhsoLz3Nb8v28Su8IUbAAFWwBCuMzmHvNpmWCw gUEE5JlPFeSD9Nv0+QS+2tq2NgXq7WMDeQXpVdDb/yAV0fIIqRP/8k0BT7xR 2bbk9l9dA9bSub35FPD0J6qpA0jXsu/a9Pv0+elh2cMFr8uOKEongyEB9PH0 G88T2ke+oLs04g7KZPNpzn6++RQ+8hD1X7+qTpnOCAL/8hiDydhg3NbBuscM 5hX1ksgr6odPIe0h9cnYUtrPAgkCPNfUunTOSE+3y6vLu/Mb9WsYKPUyVNbB aQElABr1FvW0vRvDNfXTAib0pQO5QvAm+bynX2YtGLm9zwzzMvWs22dDxsvx BJ/ORMBG9XHzSfVmQxvDdwBcAE31RPXeAVD1OfWSyFLatMuRyMnYWunr8kXY mzi8N1v1YPVixmdDgukMyVL1fryj62hhZvVrGD7pvNJWCS3qbASn6Nfsvc9w 9SECTdHd337STyCP3zzXevUB7zjmO/Vh7lUnX/Vx9VMWfvUp9bMBbRKqvC31 d/Vj799iBsfD0juE1txB9E3zbPWB2mL1OOYx9Tr1Yr1L9dbBMlRHu471gvW6 zCj1gNqA4bzMI/WbzM3Lhuwm9Yn1rDxp9XIntsu4y4oEnvWSyKD17yFe9Wz1 66Xk4j4EgfWw9SECkuoI0371uPXJ2Cq/3K/O4r8zO8wnkDEDqQOmxFTfh/Ux AyMvOANL7jI8xixy5B9CJDO7vawF7eT4bmIGUfXS3pnOjNPy2B/PttFp1Za/ 60TuC3oGmtwe8w71PdVrE23VSPVnHm0FCEOfzvT1nMg/A7gC2PItCI4Wwt3O 0QyOg/Pw9QoW/fUCBE0L/dpC7+nxg/QE9iLFSeY2Bhr1sIMfGnLWDxN742nS i4PR3Zn1lkGNzNcvKvJfuRn2DPYb9qPEV7uj8jH10GYjuQ1HtyknBD4K6mie MAUyGvXhQ1EDtuYw9jeEssaB7iIwfN/+PzT23wygxq283jH+9Jn1scauyKPi j8G9vWnmYwatA5TsEPX728vsaecXzGMGTNZ7WBhjRezT9fvbTuwq48LlKQOf QuEvAs0p8+zEHBCj5uD1BuqnBarqkuwDQu3iS/bE6YvkLd8I1jNKPkKvVzv2 VTSSyWgDb0xjLnH2CuqOQEWGUfX726TISdZexK7Pd/YV9MtK1brGubfkgfZx 31xAPemb8O/1+9tm1StXez+R6GD2IMKO9j815HL+B6czBVWH9pT2QxWK42n2 MkHB35r2NOpI7KH2Bcct39zc2NugVETIMAeH9gL2ChUqv+axgrnmBXFuQ+UM 9vvbZ0tpAokghhg8mwk0PAfzxRl3TEBcGE4FyQSH9ud3GBQ1uW9FamD6AmUH TPO19juEyr6EeK7H80KGGCrKP9IzGi9cW1CIhHv2O4RE65bImzM+wMDy+LNz HqoSccE93tPWkvY4eIvkETJt9r8BPkKu6qUdO/ZV0lzqm/P6M+wDEMvWlQoW fxQ5PEj1pGAzTPL29Te3FGEuUM1KuEtBjM+YvSb2Oayn6IjuWgj4CC9V0jOe SwP2KVpwQbvNatW8GtNCfQk2ADD2CPdFFz8C6jvE3Ty9Wp2M1pL2xUgyN7Ll JwRzG4FBXbjH77ncuyxBwaUdEgMZL6fBtjQtw3a8ZAlh5HfPxN/CnWlBkONe 69P1frkvcXzjjQg4430Jae8pQ8jpSPU+9/kERPdq8Z/2/V5SEgnHWuK89Uj3 SA0+e+MCKAB3Osc1GvVBxataWfeF7ErsIttN5lnzXPdxNlq6Pwi/OtUIS6ip 0V8oezYx9STMiMobx0xchAO1ygIauAG22tMHrif69XnmEPVt9yPmb/fPz1H1 7s1X1IECpV1ekr0Ch+aMuX3RV1w+vGWsJsHWof3yOt5k3Jr0SA2QSpXuh/U3 XIr3cS3IAQsi/uN9WpvIiIMVRKzzN1z38mUrXwO2122IZb0N7b8BN1wqBInL Yr2m94jsZ71H8oj3HCQ62ofwvgg5uv0v//Kq98jYaxjjLbn3V1y4AVHfpezW 1nvjrLyw95T3zPVr26K6kN2RQxuaqPe6yHz1Tw5J1pD1ds6S9eQaIMYJ5025 aPRB1yvF//Jn8OwDJ7p4Jx5ABPbdBc0r3fc9250zH+/WwVbb0glUxNzW6kxo 9K4B/sMDKaeEC8lDvYS/DgJe9XvS5puO69ghSwQo2skB+wQWO+TStemJvtnd TfN70rUFPtv/uP/yCPjOBLHrVSeF5jHzB/hCxV8IwB/Uggz4+AhWBN0DlbxZ Aru+Uc0Y+Pu9hnr9wPfOQ73n6vcBBfIg+LrMF+IEAin4ZwpFQNkLC1QF4T7A KfjA9NXJV3IZlDT4/QjdA0vXLJdl4zn4L3ptzzf4Vetk83QAfNWTTV8DpAWR xJs4ggEB9EX4/s1H+NnNJwuRxKo+5Dgp+Dz46mY68074QfiMBYBZu/OGCILd I7m/wKr1X+aKBKcc1MuhcA/vXvgZ2zC7gfOJuKHtMQWUP6W5WV6zQB4/1Nyh 4FbhBvTW6bjc/REiXkUAazs13Ai4SgBUAPgI1QkCVrRs9jZVBOrjQNHjAqO6 2MNa2EQARwBV4o26CEPwO98/ZBdH2t4BhU+zPxQpKuqg61S71MMexgDQHBCP +JH4mMGNugMDtPIVGWL47AO8zTPRFdvA55LOpPiS+Ja6+ifa4goVrs5ZGNze ivLL5CDGr/jHwLH4QxJKBn4py/PsylftMrla2LTCTNV260I93vZlF3yMbAdX NJwLbvhb2FvgBD/+umgpHTtWAJtclgyPxYH41Pg0Vtb4AAWUv6C/tMtIyVMI w/iGTzKcx/jyB1OO7fjSSe34+nzS9b8zHEOhICBJTSfBC2PqznzFBhrvDDP0 RxMOMQrB2I0IKMD9yF/mhc3rCP+5ANcQWuC74QK5Fy3pt+lT3AbR3MueMEvH bvg1R0zoy/PZDsb4o/her+8ERuU5QU7ZyzpE3v7DrsBHBSXlqSZNAGgAskII mxX5dOCZvO4LWQRGAA0/KQNYAJBwKNkTwXPFvsVmBZE/8AwYEh4/BaHiBmwz AlmMOSz5/cWAQqj3/sNWuacb1LoH6lZB2fiaQEo50ccb+VEDxOqUzENAFfd2 3TYA8Ro/HW5DJwkd2A7MRPmfCh/vXOxD18v18ffMwxgCaujGwF3sUSlCurK6 tsiU6FXQ/xpk6BgUOH0i+Wf5Ow+JBWvogkVs+ZDfHrpv6FXAleixxXP5hAV1 +WLbaOho+VvsevnRw+Tcbvl/+f26cfn/F2TodvlZ7Ij5efmiAgLEUSlv+XDo kPk7EJb5bc+E+XpEhvnFA06oE88WxU+JNwUVbpTHiQovn0b4zbWdNLgh/fDg u/P3FwYYAnnzJgbDOBcp3rLNyJEBsvmbecfdxd3nCFDS++URT4TCl6MUFFIg b/Bb0nbxVSez+aT3Wvilz4xN6wgnwsons8u9+RgIy8kfYfK43rm53TrbaCoa +Qi4AynX+cUC2fm0zf7ohMozs/0BJHoyueH5xx/j+Zh+Fffc+ej5tASJuOz5 odhZxbQ/5fnXuV8A173Lh30H9PnyuHrN7ANC71HR2MNK5VVpx830+YMMmdaN CHosPdhrEz4E818T5foMHPOTz44G3URcBOQqvowowA7zmgMQ35bjicuZ1ikK Cfp2vm0JNs+nop8KJwC1AeC7TAAZCz8AMw0rFk/weUG97BLMu8MYZgXsCLgs +pDCKQAw+ogzIsn/uQG+TQ6jM724K8Nou7zZJ+oMRWLbFg0Z4WQ7Qz8pMrRS Lj9dWwc7Qz/I7/oBoj9BEX89SL9a14/MlOXbJ+EB9OStTn3DkTG4AfvVNRyT fQ9CzAHJL1kC4fl5A+i9T3i+CEcAibgDP/hArMqLuHH6T8fK52y8IgBhXp/J AbjWAgnorbl42fW+wjpaD6JBK/pkT3dAuQG8GkkDhNVtT5gnhvpFQZ/QnNQw uj0ohwLi957RFkOP+gFcX7qL2DXtlPqisL7smPp2+rK7VFWg0L3bn9yO3Hbn otwT2CcElhq27W7hMrlj2Kq5zvPSyrTtrfqM4tHgSUOk+izuXF6w+tpSqrk+ FcIIttAcEN7XRLp4+qpATOc7GHH61sb0Tlb08DvK+ioWrMo2znfTKVF8BT/n dfR6y+K4DszYw/AM0Prvyr3cK/q27VoGMT8yLYxbCxWSuBcbo7um2ygAHL+W xAHR+QP03SjALOCL4ITJesuMWx8/+9/27WsTSeew+uH6M8E4QuT6B0N8BzPB o7vSw475ELvK+svG9byV5+m3SUqo3NgCtMvq6ILm1e2K3GvnGrhx+ngyrUC8 Grssh1B/KXH6NulVBErqwT+TVdfL7d3cuh77LrikXED2NrgaybRB9sDm6tNm zL5m8jEwrewe+2bePwj/uA8T2Ots9nH6tvTTzVAFPPsN6nP5W6nb+gt1pO2t Twu49FJ74yq/kgkGmOfCVVIX2h36vgjuzPF9QPvHyNPaP2OeKFEDdhfv2bD6 Rfui4yK868hZBDYeH+04A4qqpfT3AT0BK/pF+/whe+OMwmwF8vgXu2v7hwZ7 4xreb8l4sObknEY0uF3749x0DtnEpwEm3vrlsNOYvE9UvdYuMeMBPjUUIi0I YwWK380bCyrR7ykkT07RQF+l8frJ2MUCeDwo+bJCI0FsQTgDd97BCJAGuAGE OzQARwBhKEgAtsUi5zj6lfvkBK0DSL+X+yn5w+mb+1HZCcOe+0IAoPthPaP7 JD1fwSfwEPZ7+yECGjuc0qz7J/mu+5r7v8Kx+6D7h2G0+8YDtvuk+7n74uTg 2qf7FrjD73C5UdKO17ICCNtd+1NBSNktCP8XS0FQ5unSmU88+9j7OyD2BRDL 3ftl1IPWavvY++T7xUH03977ZtTQ+0pTaU/l+1LmRPuSm/m86RlVu576QlW4 6LvCqxLo+0D4MSDD9aTzhgTW0RndyQFD0SYGIxdNjmgX4Pv/+53eMtcD/Fe7 BfwyysW/izImRZp11X8nypdb3QPbu5P6HO2W+n5BFkNU5MP6MI7NcS1B+5+i AsnmIr6yW0fiDuyquvjs6MTOCxcbKQNUOz7AcDLg+0MDDt6ntTzZUXR32rb2 Adld+/AhPzsE+kT7pd9pXfPOD/N47gvqr8s8+/npI8gJAjnHO0xM/ArklsDU w0v7Vghq+zfyBvkqxddA7eF4zVL8AOTbCCzmHe964bsLX/xg5vf210BE3mBB x9X01tdARftQNKG0INmyup7BQ9x8BTTdcLrp3MzfUvwaCG38qto+IM4E5/S7 0iG/B0EKJ2EyiQqLIZJIcPCo+64BfPyJ19dALc5o8EnjOxWYwF37WvgI+UXO TPys7NMCsc39byT4R/IdFjXNu8LOw6DH5pNcBDz7ofxFxx/vpPwlbBsJSfqN CRoI9Mc7o9zx4tIv6nfP09VW3jATVerD+q685y1u1d4BwuBzqIb1vzOyxD7F fNsaxewIdwD15D1RAMRTBNv60mg+xU7iKACFT0HaOfBx7XWQyAVx+s/8zsNO 4g0JSw5VwjdOEPva2tbBRdXTy84LH0GH1nTy2fwYq3bRXcR9Pyv6++l4+aUp JQg5Vtn8Bnw/vXlxFRlY7g9yfOuxV77C9N+lSfvBdjgoyLD6hDTn0J++puni GQoJLeXm49D7hDQAydJoFPHs7kHaVtNG8S0JRLyQz8784g0qvxX91zEo+LD6 /uWttKEgi0WI+DS78QQfdMb2+PeuC+710PufKOEawKBCBLFhR80o2az1tPZV Jwgp7QIyVFjeOChVOya5h+49sallkKlx+mjALBss5ed5Qv1sb6rOT91L45LO +12jTqnkvqyAR0n6ZraqzuTJSPE4+lP9eUGtuEz9WP1KLFG7t0eZ9xK8LEuF CGP6Vpn9v2IA2Ngf/Uj9uAI5uEUAJ/cHyY0JwwJb/Wr9Xf3quwaQgCgn1SVJ xAOC9Db9U/0uMdQpEPHm6+QqVbum4mHqbYgC30f96cV+/fwBue6B/Q/viP2y 5sUCi/3A+XL9if2F0ouWFRk112X9a1KU/bLmUdqx5IvLip1b/SECmDzxBNIB 5c0BA5PnxcAu/OHs9Oz0O5s48fouNaT9wj/lzRADqf2UAyv6LjUzwUwANGZu 85S4/cCGA8/sVU0fStwLI6ToAUL9IQKm/RbWbMbKNOvC+tsa970C3byRJwwD K9pyCD41lsjnG7j9IQIr7CLJ9fQHycv3TwJEwMkX7E2i7MP6K+M67HY70wSB NOo8EPvm/dtA6P2HBuz65vBl+TvsK+z28R/92v067K0Dq/jQ2HxNCQJk+qv9 6uzZ/QIEF39yHoQDg+4/CJtF2f170S41TeUj8/N9CxWuzEL9IEHkBDYbxk5c P7j94g2MyKxLuP0hyWIDA02kITMaQ9VuupVoXs0PlWMGMxpFwsFCcgAf/jnf MzVH9kL9pQWW1p8ciToU9DLVauYf/aUFb+wLYAoV/fzPwmL1fumxyQfrHP58 7Dv+LgA9/oIfsS7v2GbP8tjb+na+S+7c30DDU9JW/Sz9pQVHYBMOqswqA9cv MP47A1EDYDQs6nN5qQNC+4WBm/pM1lc06nC2/Ha+Vv6IBMvLWf7EzWL+NGtk /ifVipCuSlv+wNOOcr/8GNkvRAoW10AZ1uwDoPmabLD6gRxAA6wahANZBBMK cfrrlyvlu+qk6Tb9NqsBweInp0X2S3rBg9h5AMldcfqyaCDmrPzNVYjsAFUI YIm4PhVt4US6C9h9W4nigNOf/mrY3sIi4lPgLwIuAtjD8e3J52Bbp/650Czu xPP8QeC7Ceiw7Y4SPvlPAKg/hcuz1dpSte2M4rL+1uk+FYTXnb3HP5zjHTjB CGX1Mrm4/qzQ20E64YLTqPqh3LMdIV5KBvq4rv7DNaRAs7vzvmjLEUOn/gU9 ORhaABr0dif1yRgbxtDtXDItw9zu883+519pBZr5gPluB07QGlt0Q2/FPuHf v9Th9U5T4H4Tm0rqBQ/ogNTM6xa4C7rZ1woEudAyBfUC5NcdGa0DbmK+QlkE f8+3/pkHVV6JQxL0n/5MXp/+Li0Hz/rXExtx52sTVgxMPnr7HBChQRz/EU8b /xn/rwHTT3c4KMAi/yb/EdkY/zfLRzhtmh9CKv8uLSP/Edkj/0c4yD4p/5/+ 93Tj1V8Dy/JyB+n0LhIg+9Ejnvef/k/66sEvBc9AVPpkAFb6JLkXxeegzAHG HKQDMl74CGkR5Lk4PUER0MzkQvERhDRK+hlVM0BDyie69fX+P+gpAkBMR2P6 0WryuA7wT8Bp1v1Djw23/koG3OeA+AL/HNrV/VIRUUC3/kQs8rPIJ2unrit7 HPwV35SZ1egJn/6CXoYD5MUdL00nu+5jGRAD97xRKWcKTsDW+yH/zgsiuYJP jxCFT9fElcJM8oT/WAUuOGnC7rutA0Hah+au/s4Lh7l6Qfe8EPDTexoIbrkq ccDpxOUvuWNJm/9EyB3LmP8r0Lbyiekd4B07gOn98LH/weXo/OfFnOmF91Td 7O3N/ub8M+HtybLotNl5/1gFrfh2vrMFeW9nPyr/zgu8zaHJS/dVNOu3rO1k 57LAtMsRMgTG8rjU/8PpMkEABdm9ycN2vkTe3P/T/0vyezMrTLKIrpAWWhha kv/L/+fFvj8aCCy8SD/p1Wy5wFrtApzMclS8/7zNc0KT0v3/58UNCUa4n/QX u0QAdD9W53T/WAUo9UbRtxfL7Fv2lyT39BrbL9bBP9rKMYqF8hu5PNbE/wpB +cUeVou61CnhwnszFxtQejQTyv9X0b/vF8Us2i3GnTQFrofRsRDp7XjHStzK /1fRLkh6A1LdgCi2yHDo1Lr9XqKSoN2i2EUgwtgvynrXwNHw/4XAL9bBP2Ro JCq05LoI/iaC8n/khPIkSrz/O2jkDWL1csWFwAkcJdbsN2Fyyv+eKIYI5hSx WVkCG9dEBO3MGtaOVOINbwii2DbmavVx8s/JDQmKx8r/iOpw635Oe/WA4RVZ yv/J44AJVZwu4oXunwosVnP0Nrh7McXXpfzeAQqroCWACrMnEAMwyv8cpQWE x8r0/APcCsMxo3L4S/Gld8/WPxk/SRItww75vt2lBUXIef8Yxv/rC9NDNL4B ef/wIQHiRtVudoT/aAjiDTUCGYP7PwoEnddHy4T/yXNKMay8Ov6pA0LJ3Qos nxk/DiKE/8lzSjG6x271HQKE/8lzHCX9VFvZEB8766cDXOtA64T/pAb9AYUP p/KtSPBvNQYPb4T/pAb9AYUPyfVf9xwjgEKE/9Q/59rz1onX8Gsh/65l4hr3 ijLAOMGz1QsGOgNbvmjty9SQRToAcD89Avn7bQUI3hsg1sFLAJxI6kmbvon7 GEuNCEi+p+Q4AyT4RQWf/q5lusVTLnkDXwNwP/HAIf/wAVZ/cggX9uL080h9 FnBBeSw/Avs2l9bdBXACLx55eJ/+seW+13U2ZN5kBXcyS1xwQ7vXR0qm/M3+ hC/R1tLuKOR7BLLEl92lBdjrm923Sg8iWBgdRN34Av8fAkRKfJLS7ijkewSy xKPGmdbCAwcEl92lBdjrJlH7jQFon/4fAjTe49y4wpr4NlGsCN0D0dbS7ijk ewSyxCYGYgBDS5p1RwEh8OjrNN7j3NbB1Pxl/fnh3wOZ1hEUxUHl68bdtB2W a4oengPKxM3+kj3wuWvOj7ts2uzqlNfXwQb4Nrg0/S3qnczCA/6xCgQAErn/ 2CL27bf+qsz7va71hggE1aXvOACP9bDMr8if/rFt9itk+cW61cnm/7FtVrv8 1ETXzf6B/ye5M10BUt34Av+B/8xg4uppvl/yNrhy9y8eGBBzQp/+R5V4uBxD Gl3A6ogOt/CKwm0En/5hldES4/0b1eYGjvbs2dFKPwOd4yr/YZXREuP9G9Xm Bo727NnRSj8DS9kh/2GVWSf9v1IErv5hlVknW8G53bjC4/zLYonWXUPy6ifK tEHhaJkzW8HXuUHmgFlyCGLitgIZ+FDHN0bk8/DYCd7OxW27KQFZus4xVPa/ M7RB4WiZM1vBJwi/J0HmgFlyCGLiNgU6BHa+KQGf/qC/60Tc/msTjP8o6Z/+ FPe2Ulf58wYkM6s/kEglzbBAJ74n1WVsk5Inykz5D+kluVPd0wN+TuIBgE7X vsVBrf8uufnr3QG3/hT3LcwwBZe95v/RCS64zsu91/fNn/7nxWT6o+5FBMlA n/7nxUL349Ji15xdduuqIu9tkQg2HYvsj4qAKOP/gCx8CbMnqJOsLp/+58Vi 1+fFYtexWZ/+58W4Aj0p/NTDAtv/58W4AjanBwSu/ufFNeYiKuFL/vbmzVgF ks4exrf+VYXvBDnFWDfDYcHUduuf/qXoI12u/ocGx+QP9SH/hwY86SjTyQG8 zU/bSuwDApLOyeqawuXto6z6vYv+49IO6V38N87K6uPSgbxr9a9NaO83uQJf awlfA5bi2/+ZG4Dra/MZ/j/xRN2TzqcGrv4Qzj7HG96Uz6PTPOEh/xDO0vnc C176bPgp6c3+EM7CyekZbUOxFXdA5UE8uAy5xGLvBPA/wVqf/rk6x9q93Yjv w+sIuH/luwuf01QC65Ig+dQdVw8EDT0AMwBjAGE4r4ZLYhsBcHpPY4pxf2Is NARH5QJVZ9JPKv+J8UU1AwOFNd34Av+0zaTfiAWf/ufwMxIfxUACXhl9CfEI +APYdRDNc0AkAPEa9cj3yPEMSgah3OYGttwyuXNAVgBx/58/tf5H4enBXVvV 3Im4Zlt/FHUIc+AR1BrUTY4c1NMHsNimWr3oHBBmW38UzUpz4BHUGtS8EQfU m8Vz9Da4vvPkuEnqij9fyvUCks6+8zUy2T+JuL7zjrij/rBAFdiYTuPiZ1tL AGLK9fqSzvA7s7lvQETHw9EJ9a2V/MCM8v4m2MPluMXGacsjPZHGvPocEOW4 xcZpyyM9udzH0Im45bjbQpQM+xo+40rSM9nyTgRc67d+05bqHBDluEcGRFA7 50/gHBDluLbUWlRREVw/Ft67zZyFIjO0y+W49AwIOfBAW/mxFVoP9fPwyOD/ VTQ6/t3ti+xi5ODtrOQyueW4UPq9HbM2bLziUYfn7MoH/zvKQQDMuRa45bjb +b29pNN9BqsNtjFR0iYJfVtH4djDbECZyeHG48a0wtFCMQWx3AlAExLrWLJR 9fPwyGsTKgBewYrlxwHrCKtOYNV60gzkXASIvaICuFr2/tTtgD0AEom4qDfm 1WvjNESJOCjAi7/LQrbkrMkdOCjAi79u4MIBJ//zPSjAtMJoBbPVay0TKAvY WQACv9xCGuF4B1703EENoHs6IOn2Tom4geaB0HDh8UBG1LjAYcEvYF/KH/RG +/cp3EGF0AoEABLC0Im4teD/XE3nrPotYBrogCjy+ru5jrjSUv/6ubspMvHn MrkM2Ao9ZF5oytS6MwDsPcBGJQbp9eDM4wHa+KhC6vkcEAzYCj1kXmjK1Lq2 Urwa2/jq+RwQDNgKPWReaMpL+RT3tlK8Gtv4A/0cEAzYCj1kXmjKS/kU99r4 qEI2vhwQDNiSuGy8gEO3+YgJstXwvoDo88gnCSwCY0raxfJAZBfw/o/5Hei0 wktcM1bwvvMCS+id40U6SAyJuAzYiOd3Q1JDcOF06HPhS0F1ujK5vteXxJ+4 10BvCIE9ibi+1yb8YwYYQZFIIchUA0fyvtcJAsHuhwRrzrgCFvIcEL7XCQLH /0QGPPI3zsrql8gyub7XifF4to7UVPa/M77XifF4thsIXwgJ+f8cqPe+13C5 g2Siuj8KZcyJuL7XLwOkFNvb/QH8IaYBNQbe0laZibi+16QGI9I+BCrFXfy3 7Qi4vtfVGYf72gr9AfT4ibi+19UZLQX5XgnTNf2/M0Q1Mu8+x0b8oM2gJXu9 ibjRJtojUwgY9j8DZf7cA2sCibjRJtojUwgY9j8DLuT6rgb4NrjRJtojUwgY 9j8DV9aUXx3zFrjRJtojUwgY9gDqMrm++Es7QM8cEK/4lRohXvFVnvibv0T+ KSM/CPbO7Mpx2DK5r/iU11rbEuXg2BXlZQKSzq/4dtnkKvC6zRsGuyYAZ/iI wCf/eTiHzAi4r/hS2pLOr/jWwYj1SvXvIZLOr/hq1xkv2YPBP90xTJmSzq/4 9NYNCUQNQ73W0YYDzQxz5mtWOO+FwPPWiddZBH5KUQNfBom4r/j8Ieulibiv +D4EB+Wf0E7YpvKbxM68Jgbmm40JrlWJuGAz8uAw0NW0C9ErxeC7YDOBXK02 mPbYgujIe8ZIDelCmNtNyjf6FrhDuRW5hPKizhu5UTT+B/4hEzTv4OPOuMKK 8lDXfNrH5H2+JfKJuEO5FbmE8qLOG7lRNP4H1cPQzmVdy24i8A8izMEyuUO5 FbmE8qLOG7lRNP4HI8kyVKZBvfs/COD3aZaJuEO5FbmE8qLOG7lRNP4HIOtm zT/vHPoi6U4kEPPVexwQQ7kVuYTyos4buVE0HLjf8cMFKsOyAXTFmvgfCNUp ibhDuRW5hPKizhu5UTQcuKG/qOpNzw/C3/S37Bkv3ckiMJhaZWox3hwQQ7kV uYTyos4buVE0HLix8vU3FRTFS2wowVrkKlb/fAV65aAlRQBodS6+w2XKzxwQ Q7kVuYTyos4buVE0JQl60qXIYScE1ff32+7c2A0pibhDuRW5hPKizhu5UTT+ B1MrAFsdGbzLQ70ZAom4Q7kVuYTyos4buVE0/gd53U1A1cNZvMjfBPaV9JfW h0HiAom4Q7kVuYTyos4buVE0/gcAwlopPTR5LITIfJLS7qIChPWkyFbfR9+f 6Ta4Q7kVuYTyos4buVE0/gf/uTa6GAEl80XCp9MV79IxAhqJuEO5FbmE8qLO G7lRNP4HuMLWwSKXLrsT25nO+/uJuEO5FbmE8qLOG7lRNP4HuMKi9aU/xHQr 0E7KkiJqQWH9nlDj0kO5FbmE8qLOG7lRNP4HuMKi9SECqdiUZyECSkOJuEO5 FbmE8qLOG7lRNP4HSQAv58f/I7kW0DFI9+V9Cd0F/Ogv1srPHBBDuRW5hPKi zhu5UTT+BwNeu83nxfjHc8U/xzoDpMgEU+MqibhDuRW5hPKizhu5UTT+BzkY KD8eP4fT/gcoK1jYGBs0GNz6KxbD82FeIv8Iy4H64LtDuRW5hPKizhu5UTT+ B9z/H/VDO4BfibhDuRW5hPKizhu5UTT+BwjH9/Qa2y/WwT9currsMPm3uCDl CLhDuRW5hPKizhu5UTTu093fpMgHGdYV0PYZ2TK5Q7kVuYTyos4buVE0Grth vVMWvd4iMLXGed2f6Ta4Q7kVuYTyos4buVE0/gemvGXGW/CL3wrJhQ9kxwP6 n77a7OC7Q7kVuYTyos4buVE0/gf/65y5pzr+5YPXck1NdvHV1hVRA3F3IjCY WmVqqPdDuRW5hPKizhu5UTSX9pbCtSX2S4T1+74sS7fsGS/dySIwmFplaqj3 Q7kVuYTyos4buVE0l/aV1j6/Sju+zvTPX9+69SL8CLhDuRW5hPKizhu5UTSX 9mbfFhM5NYbp8qQKFrHrTCe1Zom4Q7kVuYTyos4buVE0l/ZREVw/gb2t//ro p/W18PdNibhDuRW5hPKizhu5UTSX9nka3zO4AsTRGMb124cEe+51ZSYCibhD uRW5hPKizhu5UTT+Bzzz3OfwA8NXWNiruevhibhDuRW5hPKizhu5UTT+B+LD 1eP9AY93WC4SCW08PwGmBZAD0PNDuRW5hPKizhu5UTT+B2jVG+fa8G6BEU/w x+7ltjEb5Ym4Q7kVuYTyos4buVE0/gfFvDzweUFf4SIwcEeJuF/jjkLpGfv7 RMp7BEBIlwPgu0i/IMo2BRdLibjl68bdFPMfAkRKfJLS7ijkewSyxMC8UwRe R6kJr/UcEEi/IfvKNmq4V7u4Aho/CxVJ+Im4SL8h++fCk/LWw+YIibhIv6Ly jxCuzOC7SL+i8o8Qmt7M/eC7SL+i8o8QS8apxOC7SL+i8qkI67fIudbR5l5F PIm4SL/o2KHe4QEA/mHA4LtIv5VBAsclFgAFlN0r7BtcmPU2uD7ILv2p9vfo 9gPgu0i/ltaNBY/Msr7TA0sAJgKJuEi/TPvkHom4bsiP1kEe5UFwuUM7wgZn b7gBijSgolTwMw2JuEi/OuY+u90xd89Iv+D3aZZGP6qnibhIvyjjy0FF2lkY 78U9w98Dkd0pI2a97f1QvrxNMWocAyx2LHaJuEi/KOPLQUXaWRjvxT3D3wOR 3SkjZr3t/VC+FI5VQEZiVQ2JuEi/fuZw+x+/h725CR35ngIqAHW9z+V18WUA pAFYLnPeYR6AQom4SL9J+eYB1Lq2Ulf5hgdb+bEVd0Be+eC7SL9d/DfO4qyL /uPSSL/r5c/BQvJUA2bXZOmRg74GurlnvYm46MLsrSkkksn9wq0Gd89Iv4BD 6whPzT32NP0t6p3MibhIv1rpAhqJuEi/PL0+vWPaBMwyuUi/K+xDv/hBUzGJ uG7uKPysKavYMrlu7sE/cykPlx0ZZ8N0Hf1tUyOSIg0Jw8J8XaAI2MPm0ZNN pQFNJ6ZaZwbiMe8BFdknyki/+v3a7CEAFRkbXJXdUL5Dv+C7SL8wHnJNQzva 8RDNSL9V7LsITNKQA9jJijQHk0JdibhIv8o6niWWL7HJTr9tBVr20UJC3lW/ ibhIv1djibhIv+xDHcr9AbCRzNpTcJckK8Xgu0i/B9ulKUvj2MPPQQG4OuxD v/hBUzGJuM9B6wTK6Oo7QgmV3VC+Q7/gu89BMgg67HtM8DPEI0Rc4LvW6oby 9OAzuWHsU5zf4sxV9wIp/vKkibjW6oby9OBx8ij1RtG3F8vsW/aXJPf0Gtsv 1srPHBDPQSsJpNcnys9BBsasKacbibh0xTK4VZCf4wi4dMVWOcEIn+MIuHTF xlzx4VYAotyJuLjsDvmJuLjsZtwyuefYd87mCLrL0wIKCtjSVobz7Im4Vbul xX8nCqltDC93kESfYhwQVbtMXGMGylrszpjuDP02uFW7DukF5OptyT+hIa2Y iQreAYg6h4y9SUUD2MO7y+467svpPOVpw8YkACEAL/FVJ7vL7jq6yynz5W7t uYm4u8vuOo3lKfPlbtYOtMtVu/3Cf0EzZsv5vzNVu6/LIMZrKkgNUtogxg26 MPOJuFW7nGxX3729kJsBGocKhdCf0IDFibhn6ZAWCQK2r1m6DNjv7xk0zRvh nom4yLkqv5fCphwBzYm4eAW/1uj4Sjvq+BwQdb0Zx4nuM/Iu6R8IVAA8B6Dd UdqMYFcdf2DEBuC7db2uUhYIzgRArM5E900QzXW9vtd/34YICfn/HKj3db1d LMLd5vJHd+C7edeACtXdVxIW/vvHibhaQhXPvydhXp0/ERcBQDRCibj/7VxC EkN3y8vK+vow2DoN8gLguyoWTOwT9QhLQDdTFuREEM0LBFJDokBq9fzqieIK Q/c6GBKm27QHFeHk+gf/9jqH0KLKKT+vAYs/KMBXyEb7Jz3L0/A7XfmLw33Q yuE3xurnWWCiB4m4eb/H0Or+cENDP+/oMj9eXzECHb0qLdnXNGAyuaH+5gYM 2P3grxWxFXdA8k7lMeRBNW5FAYJpNnmJuHvJI8dHX6c//gcpz/EIXt8lv4m4 oyeSA7ME6PhKO+r4HBA65tQCgv6uCTAIxFW5CYm4gmApj4DuKUsh1nEtibhr uYcGXbnSn8Tv/+tzucQDUQO62EgFibhruVnp8H60y2u5c/s/CKv/SA35/0fy ST8qv9Y/0sMrQa48FM8YEuC75OMU09G6u9dQFhq52Cy55rrIeUE5uBdJdEcX GsEVibjk490FM/BRAwnDQdpJ2rrCIfDsvYsy7Q1DY3BdvgES0qbw06SuAWgD 0ugfCAzP6OJVD3oJqJNo3S9PaREYBYm4hPVX9om4hPXY5fM/0Nifb9RCn7je 5SCbQuYnyoT1D9GQA9gUaS4/A4AC993r3YneibiE9dO7nnItCMPg2mx+8hK5 Mj+wUkbqibjD2UYFRUIkM+vlacaJuMPZ1+KDPL3TwMeBxoXqMrkc39e917io qzO62MMc39e4HJDguxzfVx3FAsT8Ywzgu14pVUXnwnlNICWQPajT6m0DArgB /sHFwFEpC0b+3Im4lfINzz+/T84yuZXyDc9EPFI+3HfYw5XyDc/I709S+Pbx 49N43gEt+6KwJ8pPAB0nMfci5v3M49IHT3dPtWb/0YbEtWa3/7ZSvBrb+DQA UfkIuAdPi8uJ+0TIwlEp0YbZIwAQvTEAlOQyuQdPogLfitEnVMN9CejEPwIM bFH7WgpKb4m4ZcZtu80bntQ/A7rITtFWwQjp6gYlQsID8t8fCKzq4Ltlxr+4 ntQ/A23ss0S6yE7RVsEI6eoGJULCA/LfHwis6uC7ZcZrAbK6QKzORPdNtBef xF8IAgiPA+C7S8bza+D/mkIlUKreYJB5FsdwNQsPaXP0NrhS12xC4P8Y8KzM fvKJuFLXBdVYvEgNYteoQRHMr/ocEFLXUddN7zh60r1iQ18DY/EyuVLXTO+g A4T1JOaGCC/p5jDguwFCpQGAKHy7Rr7AP9DORvfYwzEF8r5nW4/cMz+1wGIo gdDk+kS6bbvqvxwQX8IBv7MBwjqk+2C4N/YHCYQDDbph3bTLX8IBv+QCcRPC OqT7YLg39gcJhAMNugY6xNYIuHDhdOgE9OPGdENEQjbYnz8Qu7TLrxX/F78B E/Qd+GpN9fPk2+rz0YJ4EYQ0bwii2EJdibgWy+sG87cOWxwQHvRSADFKWV49 AC8CpdxZACfDHBDyTtsnX0B2xxvH0MQiKjX85Dz9zKT35CGsPESEQR4pA6P0 eAhc4gi48k7bJ19AfPcFx9DE3+01/IAoe+QoFuQhrDxEhEEeKQOj9HgIXOII uAy+8EBxvycEoe224eXb8kBC8kPUqU+P0DP0IhInBLncMfQnCRdVMc/p4fcM 6wT1+m5AMgV1yt8/2cr4VhwCibgMvvBAcb8nBKHttuHl2y7HJgZ6WBwDwTGJ uAy+udDV+MvGGcE5QHNAaAWgQUAlUPrrwbPA7/4H4Ak9fbqJuAy+udDV+Nbg cygGTdG/4LsMvrnQ1fjW4HMoW0bRv+C7DL650NX41uBzKC8Aet45AOC7YV5I QQwEP19V2IrC0vMoP60yykLVUtwbNkAvx1jI1deXJ8XyibhhXjPGdUCquTAF x9Dy9dnG9fPy87HgDAS55yg/ibhqE+w9QLzPMbgCDbp5BMsGEU9QOpj7RsKi wH1Gez/Q8yUVAk3/FwL0ylc7AIm4etOV7evzudBc54TL1gK959/n7udgx6LB sUBA3Im4Qtad1IsEJ8pC1tkIrcI88jfOuAIW8hwQlenhwTsTOgN1vb3s4Ltp QkMTP72awom4aUJDEwPlYga33XY7E9EU/lcFyXfX6lE0xgPvOE5xA9x5B+FR VuHfv4m4xVVDY8ld5fzGLDf6FrhpX+z8RdHi6Ei6hTfs/O3l8qSJuGlf8fw/ zG4HhTfs/ObF8j+JuNrERDwcdV3yhwQdvw8TYd4fAom42sTs/AIEtepf8ja4 nNQZxFD8L7l5QXr67IYlzIG9bexv7oy5nNQaCMUCaEUTBYm4+rxHSgRx/l01 Bnvkx/enxlcF6p1j/729c/mC2ikDQdGuwHe04LttQXC6mchI1IXN+uai6SbK ibhtQXC6nPRk3rv3EB8NLF/2CLhtQVQEK9BMAQPINQatAwyzjP6/Mw/q43Gq BLjEi/YWuA/qRMWx7n5THijfuXP0NrjRuubynAV1FyB2BNEcEL7rQLz8AdnS NOcExHxBuetlxOpe4Lu+60C8LcnfM1+6jMS562XERulBL2LbYb6mRyjZ0dYC cOb2CLgD5u0Ci9oyVLXGENuSzgPmTNhTFgNNib9EyLszibgD5hvektG0tRwQ EvXEuUTB0DE78Gi9MrlmSaf58NSK9wreibh7vcPlo88uAGjVfLsaxInPzUyy 21f2QAOd9eC7e71T/KzsRTVk6a/0Frh7vVP8+uYPS8Plvfs/CHdDibh7vesI NucF8uC7e70U9RwQe71fA7nbAgS16l/yNrjK6mlBnMu55o72OycG0e64tOv+ w3lB7LhfA93Igc0M0Rnf5cVf9gi4yuppQU3jfwPYw8rqZAicy9/dcgdwVawu hk+uAvA/EgL3Ag0JhNSfCOfHJ8rK6oXARP/FohZ5Yeq18NAs4LvK6v0B31Lh GfKkJXZoVUJ/vQ0gaxwQyuqWBHBBiOraL5Ak8xSikom4yuqWBM2YwgNYQ1AA 4Lvz/60ZWgTTAmTeCt/2TgzfJEqJuLW+PgKv0mTeCt/2TovzHBDWQSQs4/Df W3sz9McsSzSYqPdj41QXKwDy8aq8AMc6/ow8rh3guyy78tbY7BwQLLtDvcD1 EQF4wdYORb1cO/HxltEcEG3VTcodExIJmO4G+RwFibhO9UX1F38Cv5TNlUEC x8gnUQBRAIm4IAOLaSjZJ8WSziADqc2KB6oMs2seL4m4G7t319TsWP77/xft cjEh+Oq5Z0OSznu57wTE0RjGi+S6wpJMAN+JuHu5HCVruaXodSVH4qqnv+rH 5PcBjrpbAOcIWJjZ9Ba4+smF6YbAxtHFy4bRnijYyxDXuHyJuFS5Cb+sKWsY 9hkvAHreRwXp9eDMTflX+VkCWfmJuFS5Cb+sKWsYkgLpJtG/YigU97ZSV/lZ Ahj3MrlUuQm/rClrGFMBLwB63kcF6fXgzE35V/lZAln5ibhUuQm/rClrGERI VzjRv2IoFPe2Ulf5WQIY9zK5VLkJv6wpaxg7yd1F6AKJuFS5Cb+sKcESR73X Rd8K0b+0B7ZSvBrb+AP9HBBUuQm/rCnBEtS610XfCtG/tAe2Urwa2/gD/RwQ VLkASTPkaLtdQ2ABibir/8Tv/+sL00M0Md4cEKv/SA1ruYcGL+ki/f3A2eNY BGDs6sAhABDNLN6yy70C4QL5RwQJ4QIuUNFIibiV9Eb2MPv/CGLpDP02uJX0 vzNB7O7vBjrp9eDMnwprAX3rJ8pB5oBZ7DwFx1/h7vs2uEHmgFlyCD4jUZN5 S7GnbpIQzXnJYN8+KEvWaEXM3esIyyyrBhv2gP4cEH7SJwTS6B/vasSNCNUp UdzDNU0A4Lt+5ue2UxaZ6tjZPtlCrZsDibgn6UgNH/VDO1jdr8u0yzI3VTT0 6HkFUgLz12EesWVPv+HBFnly3WEDHrsyuTI3EgU9zBkvM/Io8AL1ChZk7TvJ u7kiNNa8JMBGO2QtIz3saIm4MjdUSNbOdOSXyDK5MjcoJBbSsoPguzI3KCS6 zH7vibgyNygkusw6/rJkYtus6hy+ZYpOJEjXheQZwo5fCQQ5QYm4rOrp4ir7 VSes6oj2vb1I14XkD/UcEKzqyvim9k/j7PZPAIm4u19dQU5p9+hSILgCq9OJ uLtfx19hwRDNu1/HX/fo9gOJuBbQcc+9Aqcc4QMTz4o0aRenHFeL5CqmvPLt PMSJuBbQcc+9At35wvyUvXwSEU/vuHwEnxx2EsH2dwvu+za4ZUDKBCgATivB 3SUJjDplQgv9vOo2uGVAlEj53GwoYukM/Ta4ZUCUSEdKpwZ4QQv9vOo2uGVA 8d+WZMPUKPtMJ3Ldnp5Q/izwZPmTyYm4ZUAIvVn8ot0SFlf8ibjdX8XNwNgy 4irDOuYk978nVgm0QeFomTOJuCYbRcdKAOb+5/ptvEpdO8aJuMLWQR6P7KIC nNhovTK5S+a0BRnCpVprQaUBzaknysH3fLsJ01I+dSXMvkyLibgR+mnVsssO 5Wn167eB440Id9eL8xwQEfrsyEj9Y7oT/B4nAO3guy/h+dujuom4Y8prxXbr pCKJuGngWULo/sjQ6MaG2WAKw56JuGw71OV39A3oijZbThDoz24cEGw71g6C 3wRN+0wKFmS5SAWJuBq/tOPfP4HokOJJAK++sBXU1Im4Gr86ywNVCkP3OhgS qdykQEe9CcNrE43oibgavzTU8chBAEoAmE4wBcfQ+vr0GoXLibgav4L348b0 Uo8MjBqfQK++sBUzQLi4mD9y04m4Gr96QYzEiMRIwp9uGfKJuBq/W8q4QAY9 r9+Q+KW557hy05gUpED3yPEMOu42uBq/oMCuArMxibgavycE5eCt51JD5eFE unbYibgav47UVQQNCfgDV2ObyIm4Gr/5TutYL8t3QFu42dBExv0Rx9Dguxq/ 6+jaUvACakD5ydPzLe6JuBq/cUNKAJhOjwxKBrzV5OAvAqfK38aJuBq/uLhE APXIscIhPdDUj8PT1Jj1Nrgav/DIuLiYP3LTmBSkQPfI8QwJ5Ym4Gr920WHP ScWZ05ljCQL3U/724S8IQWfjMEAWDSg/IuL/XMDFmOD1850/UgJrO6bckT/Z 0KTK5OAvAqfK1tsyuRq/EsJELFdjm8gS+Da4Gr+kATAy3vqJQ1LoAu7n6UPg YV5U6Pb+Gr9kF6VOR+y7wUwS0uvAxOT9CLjCNTzKgT2JuMI1a0Ca7TK5B+Uk MmsB7+dlx3K7EFUSVRRVUUNTQxhVLgKJuLzV/1yxud66d7pR4CESnkGHurwn h7q57ebGrLlx/8fGogdHy4m4vNUENATjKy2JuJc/ieJlvM/HygGY4OzBXuDS yofnHhIA3+/GiVF3OYm4lz8cvEXHYV5IQQwEbSD/F4r4PgQkNSUAtMsAAW0g /xeK+D4EJDUlAFKKGCkiRUoQJiCgBJFCxQlBEEmcDHnSpEgDBXPqiFFTZgwd EAGPJJlC5SGVJ0SCZAFBIgaMly5eghBppUiQKypB6NzJs6fPn0CD+uQIZ0yY ixk3dvwYcmRJKSBOplzZ8iWMmDBmJql5M6fQr2DD8lwjZg0dM0g1cvQIsohI kiZR5qwKUyZNmzhXit3Lt2edMGvk6EmrlG1AJkGqSEQCAkmdM2VATKkzZkyZ OXNCaCa8lmkRJjanFCECwuWLGDVe5MChcwhpK08QygjBeWlb0EFEkzaNWjWO EDphM3EBQkZtw59DjwbxxOMbMWXkgDixGjgI4cSNY1Rr+3ASgSCMSKEIYmIT KFWegmjypIro8ol1g5yShEV5KqSDOCH9hAqSh4cFURJpUIwnBGhNTHGcZ1FU UQRJER2REEFNjETfE05E9YRkReyX0BNXPKTQERZtV5hn9BFRxUEQSURREfaJ V0QR8ElhHxLtvadQFhU5QcUU9oUohGRJlOTCgm2R9ERAIGTRHlT/HeQfkgFR UYUUGT5hRFT/gVADcyeUx8QTQywhGRJBEAGiZmxSWQRXoBGhQ1RoRDZFR3KU 8REVb5SXZxh0pOHGGSAEUSgbdETnBqCRDZEnGWkwVQYcb8hBB20mdgYSmf/B BVWFRCC2H5UYgqAEQUU0sZJiUDBRxREkEtFmpt2FIYYYkTZWhxsftQCCGXK8 0YZkicJRpxtUhpHGHJFVyAQTSWA4xa9hzHFpaS+VkFClZ73BRhp9JuGGHZfR UekcIDCxLB2ZJQtHGmQUCgcc3xoV6BtugEBEGeSy8QYcbZTBKwi+UlEnSPx6 W8e9i8qRR6Fk2BGGG5ZRWUYLd7LBRnQJBXuGHGEM66sZlerk6xVliLFetYnK ga4JIAhRxxyCXoYuFGX8u7HFc4YXEI1+rBfEEjQKmG5oVLBUg1UgvEnQSiEW YWbQR6xokI8zysqzTkbkGRkUQ0w7RBkaJ4QGvpGBwEMPPWwNgkNXrDdaEkOw WNIQSDgR2xNHZKGZTkfSalgZPUPBxsSX2UcFyILOYR/MQSws7HNpbJwZCFeg ASgIZPRJR50Ph1G25uSCICgIYwjbBr4/qM321iLQp4UWoEkhQotPOZS0kmVu LcNLLDAdA0lN2gTVFFUIMcUQUiQhBEFTYJqUplIQDgIO2rYx8xgbg9BGtegK OsafzIJwR6RnL2w6xeSXEW8ZeEQ3xrJlBD59d9b7EJ7XCYVdHtlsMBvadMKD rQUhYnNCwhusJShCZeENdZAOylQ2hUilbScoYAMZcmAGNcggBQZ0wxzuwDEQ mEsneYCgdHQShzqUC1xukB53BjenIOQJBCmsAwj+RIY8uMB+M5TUnGRGMzfY DGGpO4MbIgXDrREBXjiEIAiYFZnPLQsEZfhe5X7gRGEpK1+LCtgLsqgsNmxN RjRiwhsm1jSJseEvDDvjFYhwxjDEbw4tYJYbIDUoEEwsXnmyTBrs0MAzCipe EPzIxPJgxT7aKpF+dEMexPCGHu6kYJUMw8N4ckA76AAFdMiDDG4QAxuAUHBC nEkd4FXFPkEBfA3cVr0i8wQzmCENlpEOFco1h60p8A7mg6AGQfCtNbQSBKSL TBiKk60d6imC+cJXFCPoPbQ97HQzyAoZNDmHH3IRlQibU0RyV4TdnaRMMVvI EYIQETbJ8EThNNXMPnK6QAXsVyXDQgu+180fHuEvIONVGdznJ/flaghhkAMZ MrMZcFZvTksg2xvusCjJ1KENAZPD1poQBCUsqVBDaNBIihQtJ7yTetbjqEeh AjfJQGFJP3pbOa+wpCWcFH9zakJC0UWzROFTOlYQncACZcQToIsImrwpDdcz UDpsVFgsQNe/osOyJjrUelFwIQNZt7UrkchHMavCSoRQhWeVMyJbm2BjFkgH +0yhThpznL4Mai+C3kkO5JLOFODQkTSIrpdXndMVKjXMV1oKXXdK6BjQ8LY3 BKpigW2SCsvzR3hNbAyh2yMS36BEJuJraw+k5mTEMIfxpQEODENYC8v1UxMe TAhvLEMRNuaRYCErsiFjFDXfNQapmsF7Zdja2YCZ0MjkkHNviKW5tpmHb95v qcP14w2P27kGOjeI8RyuUacpHTHMrGaYQa51eTYEMrQgWMOqFBmiQ15v0dZc 0ikCpFIbuc8NFZfpKsP5RLiGhw0hDWfYKcFIeIcwwMEMlOIZEsJQuuNCR2BT NApG3cezJ8ABZIylg+jWgK5Hqi+H0qmT6D7HM8VAq0IDShe+CPVEa122DNeF Z/V2gDuC6E4yVIABOoWgTnaa9CdmvGoYFksnCM7hj+iqZccWyFePoOsK6Gta C3QqB2MS9QwWG3KGD9aEyn0LX+iqwtsGGq8TMktjQJRxGbQMgl21QMPzIqig WmbEj2wsDAsFAXRIdkPH1sllyM1yvJ7gBjY8LAm/FU3zclQoSqqveoGSQyzF VZwmrdlls3qupPDMnEIfOtHRAdfMGg1JR635yphbM6LQIOhOGxoioJa0kUn9 aD2lQdJ9PJ0MWjADS+9U0A/jkzzbAAeMadhSkqUmEcELWE0jDM8P47MfQbAo az2MhGUw5h5jjFJot3ZifuZYHi7Nbfx5W9r2HTMws0BuYIOgZE5wrH1CK50z JLePJ3xlHpS6aUueEC5QAEEVAn4SyVRhCEN40BTKPThvn/B7xpyisCKzOiM2 F9hu1ZN9fkgcIxzcplkOYBFc7NN99etfARuYuMhlrZR/BAoeA9mw+kLzvfg1 DW24Q8ibRvLImFyiABsqRMZVLpcv+WMhq7nSwTKHNuCBDToXcgCpgPNGDWHJ lsFMAzlOghnkwAU5SM3q3Llzqt/T1POlrEKxbrOt/7DrXw/7et7A72dPvepS HoLq5BcZuINd7HRvqLOrJ7qo4L0ILdD7hOVgGa57/e8vWJ0LyC51QysODVc8 X9n+wwQo1L16giydoZygX4E7QTRDuNJyrDASQzFvbkmrmxRIUwRy5QvKn9tW ydCeKySsq1I+1IlLYKCtfyZ0YokiaBDmFSw3fr4jZRikMsu22IkZkQ1SzReI o2IFi5GBMsad7Jyjw1qQ+dRXPCbN64lQJOaA/KpmID/FLlMoiVXOVhvjuMVu uaj5c3et93Q+ueceFnMG60J+8aJFQTZ4ZWCA1oKAczIEGrFMCpQoAfRHCDMH 3KJKrEQcCCVpt7Jm+RJU9gJDQ8dn38Mwz+eAdGB+Jpg6bnBLcpCCJugrWRAG Z0N35aE5TnVVd8Ys8RIDMvACN6AaOWAdrnEd3kIcN6ATUwAFRTAEScAiWjIQ UvB8P0hQOPACNGCE1tFlGgND6JKEVrCEXhIEFvMt+EdLecUs1RIzdcAGa7A/ aSAwZPBqSTAHcPB8q+NTescrwaIxBGUECfUROrVYNWMxfdgo+NKC7jWIhhZL UxAG4CcHgodd1bM6boQ6+CKDNPhZV0UvD3NCMiOHK1M5DfQCVJBQkJEo8aIu 1oIuKCCEMDADMTADp8SAq2UtkfQwlPQGaxBVb2AGdFBgeWIfF1ZJlKFImmVM k2I6ikSM4iZFdyBpPpUnhKRfFnNmGyMd6uIGHLaN3lI6J9SK7yYHAbZEeiBn +fI7MLGNGhZByNdaR7YzV2UtkuYRYvhu+aJHfHQGLxBI0UdIfURGlaMDFkMH 0IQuodUYDBYZQTAHxhQvRlApFtOGEGmAfeQrTUBXhScEf2IWaBAsj8FqV5WN xCVJevYGwGgfYHOO3jNkEkeMxhgZcHAGbWAfMJgRGQUCyfh9ThZJ8eKMcOBa WfR8KLmSwOg4GmgGNSmUnChCF8UxP7mMHdaMA1WU9iUypkN6koKSTzZQa/Bq pHcHzYaJCfNGDJNQDwOSayaScqBDp0M2OCcogGKCwxgeAmIxxohItoSAVIJL jAUFuLQGDYQulGYwjTJJ0eGGBDNmdAAFE8UxZdkCgyUHw3QEYbCOdJAogble Rok5hIVI+bJMEmgtwpIG6xgvTeBYlYJZ3BMZ0rZM39KZ3fOGJJADPskxFfc5 nwdgaPARSEB+fyMFwPkR8XYHf/NEgbQnfRJaf2MohMgrVTUGK1NlttZHfOIt JhQuxNZ8kUFvcFhENpNpmOgtF2M4mhRLAshYVlCYdUglk+MvplIeaRB/YYgk U+ACReAChsIncIAu6ZZYjMdYRTAoNZMu61JI4DQFQVATLDF8JzAtpVIhzPME U6AlSVOFdEMj7pgVBaIlCldSB6GfD+qhNVACLWADxNdp5SEscLAwHDMFw1iM xQUCMLNgClWTdeegEMoeDrESpSIkjYGhVBAhwPElFSEhQkIfJYE5RcIYJpYE KLYcBzGF05Iq7IQQQYBw7QFWGMIEVBEDMfB3OgGFn4IhU9KgJ8olNNIhrDce TtAjVGAfHEU0LEECJgqh/pEj+kEEFJohTnIl6wFT60QimPMCGxIQRhAR+iGF TnAEPdqmgwoVIgA2tyMe5OEfNFJWR8pRTxqn7nGJ8OSjNFKpNWKiKzEmkaoh TfIk6aR+AcF+VDCpK5Gh6YIhElJw6Vces1okPRqFVTItnJoQ4zGh+oIhJ5A0 OAFWg+qqS6A3cROsqdc8VLASE0EED6J/DdohpIGqFTEFDoqoBScDNcACMyAD NsACq6GbZJUF0KMvW+o3+tkhDnqkGMIiDgoa04I8aIo36vQQJEACURGwSaOl SSAbVlGvUFASTfA8UBGi7IGvGVIaLyADPpmPZRCsWPCYigkSx8lUkDI/RlSv HUsEzfOjFhIhrdMCaNAG9mayHPIs0aMZ3OpsoqFPjvKQ8fKeY2CYkTEHw8WQ 7VFNeXKz2DUFOBI37vGqhCoECcsEPbq0TgsVSeACRDB5+kk3S4ChRYAFW8sE NSEFAHseyFpjWFJOOsFR66QFEVEiOJuwY1u2UHC242RjavsEUPBSDKEYJPUg axsEbfu2+lkRj6kE98Yc1HRk8YdFCkhM61K4n8EELfAELcB6F+IELmAejxkD NIADt3gDN6CfeqO35REboDEEFAsC5lmqsZEEpDEFWQAXTVAoHkISciohAwct DmFwewtTrEuqmpKhYhshVZsQLvAELhBw7PeEiLESRuQ+PCU+kREDYacdOPsk CTcnSrArp8UxR0CScGAf4jIGxNECZLAGdRB1OKsQTVARUjAtz4MTAdG6wwuF UsgiAWEePZISFDsnRXAl/ZEcnMu/fls3FAskLTIEaXa/MDUtrKetGCq8tkES C5E0XZpwDWu869d+sgeob7MmFMwWvGMmcDMFoEEF6qElIcwQjBEE8Es3aNig 57QEgeqmhVoTPXoSAWcERmMESwKqJaWfPNwWPmK80qoZaDQTV5M0QFoEKwHE UKEmV+AEO0KnrooeZIsmokHEpltgTNRH6HYwavAc3fkrhzRNSFuqVBAQMMy7 NNICNjhZZ7BKoHlC6SYudKYn23U2nclaJKQy/DJUZ8nGbtwEcCzHH+vHicKL 31I6g8wr2ReaE9TAFdzGNoHIb9sC4lnHrHTGeSxQclBnfexYjfwR+LhmbRBL AQMpR0HDVWAEA6F+u8Iuv4Je1wGfwQXLsrwcU7AodLBY9IeBrXlDwCIsufyz 8cnLsxwVBWbLxzwsPgu0RBzLzdw4n4wC7ZkCyUzNzLwc7Vmku2NBhTy8VtLL pBHOTnBa9BIZVEBCgFHOl2zN4Bxl01yH23UELAkpl6GfyXNijvostzoaB0cj NMVRGRIRFuwjYtqjVfC+BIGsAxe8hTJdUsRD0VYy6QYdWtayORADN5ADMODP aNqovctjz1OzPYoFK6FTlaOfLH2KbPACRRBB2RYGwCEE+DJq38hhUNk1A/Wi AmUtwIECrZkv3RtAX0IdOZCLSRvTLj3TNZ0na4DTMbPT6NLTV0mR/POHp1zU k4HUcVgarMHUTl2qUF1GNG3TVZ3TWK2g4LjV+xPUXl0uRU0FLiRPAXSL05ED TQ3TLa3WU33Tbu0GPC0oPo2BQM2IQ30tKIAy8dK97dhrZq2fQsW660GhtoRL kfGhS0YwYxAHYUAyeXBbOPtHYiBpZAAZUQEy/WLZmJEHeieIkHEEt8YG23VA cfhyZ2NE4YF81fIw1oECnRQddOACZz28jBKGPvUEFNWYXzhPkjFQPbrctenO VmA66LLEGLgxAcYGlkzCD6k0VyET0rRMmHcGaNACLSQ6kfIwkGKAGhZAEkZV 1V06v6Mt0jRBZ8NAg3LfkUEDLSpN6XaZGrRdRVAtdciLE9QCcBAGrO1dlbNe lmjZpbM0+p0v6SYErFWBZIMuvmJ8AZV8ZGDhkcGi2iIzeRBLWeXeoRQe0BQp Nr0/yCwRJl4omKEn6CKtwXvjhJZqYtDfV2YdhPZqLYEDZspX0tGbaGC/FTze T5BXXjLg+aJA38JchXJrZlBc8izepYMrhCJN22dEeIDKNfqUMVqg1bLLp106 FVcGDyPmkzUSRal3sbh0eB4WHUEGamDaSTvebx7n2jdZrvxGRZnniA4UaKAG a6AGWNag4y1NQ0dn+JUnLOiC0hR//QzpBBnm1HSghIReQndFR/AEKAECOgAD yf3kne5aRoZk/Ph/MsiLZxMw+mkU+UJp4kmYHmHTt25+RFZLv6WZAYMu0mYE u0IGjFNEhDIZlWEz+rlmAeZTLuECGHsEYsBIkaGj8UIEklY6vlLkD9MSNhB3 NdCjl0ZkB6qRkSEFE2OYg9ICH8vhDK5JzGEGazy86W6gCGpEeAR30a5Y/M7u /14DuvmhKxDwBdpYc2fMlcJxHMd7uFKb++bkJLxmGihCM+E1VxbtMBgv5Ttx zDEv3OK9L+4rw6ctTNCAhYeBIo58ZLZkt9SDOIsnenKClfKJfl6qNv8RNEqT xeXxeWLLeVnMdBBgrL3ye9SYHj/jb/Uv79JHH+jz0UFIkFXzkXHP7pxJFY/u Wa/L29VTw6xZV9BO0R4ZX0AnJKneZ+9Hnall7uP15sOD3VyHkGtMXU71F2Mw a89YRlA5LdNaWPAF7p4HX4BQbZA6CsX0DTpQ8j6SEKTe4QH4jSn4hK9Jhx8y ik/hZ//4fZ9fGi9tg1/4mZ/46sVejZ9tsTR8rR2HD3PUcD53gSIxrpgQOdPO EA9ptxYZunbGvcZuO0V5WA/vhALqt4YvLic6r9Y1dbhHr4YzOhMZDEf1bPBb +xJ/IvT169Un0hYEZRMEkAHiK9M9JWMEZGSPNf/9ktRIZ2AfQSBJd/BnkeEr JHAD52oVCd/4ZcN6hqLHiqIn0U6zaKCAMUCWyYUZJIwiKuWSSxEA48X24TQP x8uIIXSnWbaPvygdHIesmYWZ4C1KXOPLflGhI6ABN+AtOMuCCw+VoiOwDHTh 7t5FvAhfEyX3UJpJZDkKhWaBOcMoUqCLiAQRqJ4t+1hTQMPskYRCkUrGJIo/ oSQAfoTjMgD1BOYZFOGN6qGWLAIdpEOUYFYPKdrhFc4mcODANvFMjQ8PxAw4 hy/ixYeKdnigBcgXynCX+kg403posAWMD54VM2wF/YlmdY/NJS348RcCiLdT ZWPoobW+yPAGdRka7IO/jTrRDPqTempXC8prhVCZ6UGehwcQIQm6S2CGmbwE NNiW7KBcK2ayCZfBwTDYCaGDsSsZDWlkiEJDSAoxB6PQK5TisOgnzXFDTofW 2y7TScPMgTwwC+ngFFBLp1A6DKpZ+C/qDDFENlJgV4i/8HVqVMxS6lFnA9lI E6MgtKafZChM7ybRSJg50DoUiL/7CBYmFiqkJZIEG1TlkHLGScrZNmJUHt6I GAAOSYAO5DbSojAsUFuSNGEI+fQonNPObGC8EDYfSzLNGf3EDzcGzEhwu3Af +pTRssq0jjTZK31FdBBEMUgE3IuAQSj5YghojkERniYLtBgI7sTi+bw0IAYD SucYFsouDOyXM9BhcMilaS0t6LQIqD5xBarFEzwD5sIN2IesNQQIoh7QA91j udi7SOjNcFZ/uW5yTA+wpDYQPqKJhjsYuwJ+NBlXpJ/6i7koSjTwMsixSVQ6 3oCUowuxbpnEt0hReOobyOhRwDAbUrLR5AFx1vcoGwilKK2cokPI9NNbDCBz seUIHTkWMwAMwlBIowxd/I1nEy9+Sb6rYHdx6LAcOmB0QNJhmnz9Z34UnsV2 Entcg0qMeZExCh2vhC6EgF/EgTNPMPao74FsPlC3eykRygWwqN0kHYTWjRKJ kmF1GBNA4ysITwAZTmxALqKL4ZQnRuPCeBhlaQ5sjD+mURoUMBNmck0zCa07 uAoloX4yIoBh2uCM6EgUlxnO6hOK6WFURDdwAj5CTRwYABGAtBm54hjQgDWk Uc9OOuizv6KfztyNghk6DRg5E5RU+aLXeokXjymiPCNsVIeASaCgA5YjCkoG 93hDlg+9wCWYMF/8HH8RdAaGr2ACjIIXdZIX0x6B3g2BLRMlkYTECmmjbsi+ +CvBCzb+vA4ZGdRFC7EsqQUiSsYAAvEy4CyCASzKlHDIp2Qi7ViClAxNxq+w yBZJHGZR6JKRDYpAlsg0cCK/oAlSkToSBPDIHmm9bgANWHUkTEgqqCJ5I5Fk 4VmSIAAF3IAZYP+gpM+TknfF6tGfroHMKkgV9CutpSXoJiWHTFTIjLxRYZKz BcMIpZtOCAkwV6xxrUSQN3lDrGQAgTlyMkT2KCn5OTbHFcmAU4CjMIQR9iXv CV+JfiBADUi3zsEdP4I5ihSD8p78iQukj0DRdQwYlMSS6JElKEWWSXc8Hw+o MF6UkoG4jMkJaI8Bg/3Ric3xPa6JKGMtOYRHwkonGEsaUhOQbkuABN6Bwxgl Y+VN1DN+8YpojjizRByJIQIzLcMFGIVBGSys0cO4E3hAwhQ1dQUDYoCXxJFD plHgGR3nCgVKvBABaeJ2tAAogDyUgH7KkYVn5ZDFONKg4GUAiTePZWMxShwZ EQOIsOMYeLAIfIym8hhhxl5JKBxGWgqLd9kv7138ATQBswUMzOzEEhnminSY lS9gTswrk/f45cUElJahBRwQZWczjIrFTJI4sA+ZoCX2VthZLJE2xwUPTqIh QwQVZhs4mYXH3TUyFGgFVwwIWAI+08MFkPhI/HBmAKke4hCATRmESTEfE+Eh Mgbj1e0R37Jk9NBS6Jh+EmEkTSlDZaxMLAkCHyEedsZyYTS1JreYE3+PGAWb PkFotl2yexSTT20WmZnxR1bAttA6YiD//JCyiTTP5ky4eR9LvrA23GOgliZ2 6nj1smH2TUsxJ47AzRNPb+VGKZmPZeUsy7UEIJII43nKpGUvPWaS9JMMk6DU AawYQfhP+1syiYIt7LpvN2R4YeIUnUVp+/i/UXbzYJAR6ZQxpDjwGhNSdYwd y4gOPerCrJl4gYGCYB34S/ECD45CnHUA+4hbAgzvEtdEpt7yPzQGFOht9AcI cA5VwzFSh7V4l4LOBqYQ33ZcCgyvAJ8ziUQilzvgLyAg17MOiQ7R3QExgBPx APpsSuqzc7DPNVJm3mdCeCPowiWssjAkTQxSAElCOuBbBsFC1DQSSrMkFMtk nVkGYjE8Dw3FEHlVYyHoh5KwHFDhZIF9nfBnhUj9dGw+gnhybvli2fg7rFlC YVIRwAMPrgJOFhV6RPDFtyhZDUrD+JS8lG4YKAxyRAEkhpINEqpqck9U4xg/ LisChxcw6f6fIWKaqIZGqSUxRESNBYQRAgmlCpLQNyBCrRyFg0qZsWR4P+OG jLKQM8EzW7SLdsDKh4HCKG10hWUjCHI8TkQ7pcMJIRkaY6I0jYbVE3MoF51D XpSNahY3Kv5qYhxtQU3ljOFRf+EfMQ9PMRc/K43OIULqE9ZLXkkDqA5b2AAZ gL2SFiSdQ7zOp0kbKfAcjJtkkKSGJ0DRGHfH2hbnRyhD4K00SNIximyC45xQ DEbg6kjFq7k+xgfGiwx5iQQsjdp1OsAHufSKHAM62tHocDP9aFFaMLdGxYSX 5NSjriJEUCKVIpZ0pGr6L4gJy/AegkJG7SBJ03LekNCCegwKZ1nTB7fi+shR +xyvpiO1gSootE5LeBgoDIU5UJT/M1HyhW5DFEBO7O3LIAh8DI+ty6F5YlDY l0FHTUijpIFwwFQ65InDwTDqKRwgoQkVJx6L/+NQAUxEdSYUVQxhnouKUF2m I9Es6kKZucEo4wQui+tUp7aFUFymOVQErIh1SnCBkSXIADNhJ2uAmUAZ2cbQ kNA6YEmMwOEgFNXDDRWooWpL8uB20Wn2M4cez/gTL7Doz+oc5+KWITOrVxQ9 6VQlKJQGAz0B9VEdJ+HwUkjIE64lNpRamIxdc+yqpQqtUlVnBijEH5mUZrrs jIUWpjpXMZBkmkhaFa86R6maVvHYwfA9ANVX3EJ0wVvCEWGdq2V1u4RSrKkR vsUqWxQBBFvqJ43QEGnGflNNRHCzioHOaoIMq53grLmibeqL3eccHIZodTG8 Qke+GvHRPv4PDQ0voFEHbtZnhxnMwFhLCqVF0qAWGNKjkp29KwKPKyvGz0SX B9qAHkgDLzVpjU6OodPYp0UZgvtms7LJEfmUQGeDmq5ygOoEKLU4O+vMdfKa g0K7NqZj8274ighxSTfPvQmMpigx1ot96BwscYfEIWWiWVbH0aIThFAsqcUc cLFggBFye01jYx4mATkZ5MBvKXApg5nIu9752x5QccRZpZOSRdhwtn3sQHKx DMW1nhKLr1pVPaF+wjbM6B+yjIehLiLO8kxaeeABDYuKJEGKaJMbqDE2UTBF s4lsYCMVYCfNKioYBG2lL5LA/joJUiALIIkfKwVIRIpBWEzghiWhFrCsDNZo OAE9oFAxiX31IPYlk3WyywHKSlki0ALGQ+2isl+2nFzZLMsetuxB6LJ1pySk LorQBNIDjdg+BWYU9QmT9qimEEJAI2qidi3XPGcGnqsGWbIPwolNgSOwZLtE 7CBgSQNakAQR0GhpBJrYWyvhx3asHUEQKu2EkAIDQXVpBSOQNHwF6qkSeslZ rIT9lQSg0GMSAc9DhZkENJEheEzCgmJTgNKCk2IlBcoK4EITEApgRarREGe7 hNLSW2gKWekOmiIFloCnlbNM4MeCBiJxBE4Pc9gSgitCVNqVoCacwLLCHBvU aUGrJNZoR0KNUD/6QTJQKlj1EYtASPSySMDcRg2iMSp2LZUqAsiq1zoBJ2C8 2kPSkGJFClpMhTOBbJGUE3ICQSDgTDRO9R44aQswE6WOCZCGitBmgwDUghaG goUpSjPRBIbAESh7TOJPqdv3daswVBAgDszBCYgpnXAnacDfWbJGdjmwsGKl mwrOl4BXVMAaHqlZpRYLjH8jFJ+KRhAzDAHFfoDRNbrv1suaLpfAIRYC3mga keptpQunECGix5I1XUsjK0QEBna6zoN+GGhSYwogpF1rukpChhANTpcxdAiR 0LtaRZdKFR3i334UnYAFOErNypJCiAZ8kCWLJQTOEmlD723JXgkhwCkC1vHi stMiy6bZg8VREpYmHGm7NrvtizwiYfImx6ABbWbpSYeWMAOWLE2JGW5sCfiH 8fAqGAPsCg1LFjB8DVwCGOlPi3VnBwMHMpTUG3EWR16bkNSJtfHQg+GViOWe UL3TBsoME+MEmsoq7VUmEQO46d4HezCARVAjjVbm+EocR9mY8EXhsSf8NV6Y I/gxP1wRcEB5OCD/OZtVtMrsg891LZsjD9QBncuK9ARBuRgKaMmuGSKzlRTp skADvjcELhYS6C/OwMOgsclGSQpgAblL9m8J9L+tJVcuSfkLYX7hwshq0gfv jhIccAP27q4dKPnCAdsydVE6UIAtQg3ekgFrPHXmSpDPgpO/G8NYoI0VoFZS 20RhFnJgBRhQFBxAtB7moHvH5TvSPOyyS/ZfXsVAf+Ya+pTGii7iX/qlRsiH Bicb6aDTwgtABL6GwvcYkzibRWIhWzIhgMJcLBD5Kweq5bo4FMZtyW7EOdSQ EqgYfncBGACLJ3FxIh1GnB3DaRiXzZ4NUYBH4AFecG8YDR+XJJBQ7QQ/zHhn GBxNk9bCL0QHHIklCDcJLBmgZMsUq7PdtXA4ZpaM7XMlEEJSIK0EznPwXj1h mSoFRQQUtmLNBeI5JImlw/b5oeGUoGQEkmcpRvEgxoNXYGltLoowiuckQ4wU qEY89bQz5pWE8GnlrduNfwBg7xdAtFpCgKisqxbDxINxQ+fQ5lAC0cG22Mw8 HNeWcWRoxtRYlE7iyUICEwUBHsM55Ax/hPO7TDZlQrhgfsPLHgwRMCZCBPG4 W1hCQJAohGAQSsINK1ZuV3fcjgzaxLLGG44MIyAGKA0awAJYVFYIhyWPHEZX ePKxhk9WqECnbO5YnJVB/HgsuxDD1YsXiVWVuxJEwGK7HWBjWjwR+VZ4xkbZ uJ5oAyOXBo2sWcJUFOMfIXm1kuQDKh5RMg4dvwfDhujYK/JEEsoJhsSRIaUl DZAZGShNEMgoCFIle0ZCgZAthcl7GPn3YyGU+cZZzqv7vbA8+GAglcrBYimR evvGkaEIpI7FM0FfKL1YIMRVHUcGo7o5dGa7S0sLw6rg5LVsfhRF4XkCi086 5KWoyU/8YZ4wSyoZ2bVetVjkElRxsxTLIp1m5chQ6k6duog/YHnjnZoOJ/Kw KBDqi3qgjQBPlaxA7ollJiieMTMLG2RX/bzMEtYXf4Ip/uO1QgKlAynVGCrZ yBKrMYwucshqLq83b6/sG66RxiDJIpGVBTSvjE99GZtFmXnVzcDh72kWSCIu SEase3/DeTVHlIeBMniR4zQiICOzwpeL0QJaAlZwmFNkpEa9RzeXVQwJ4UVE eegUCqRsFFQyeyAeLyVEgNqyAoCC8ppjTdaEInOMenIwDBwZWM06hTV5GYGx RC5KHYTNQHllWFgc+TA+lFqGTAz68bqoXTcEVnMv1s1QqSF9qHUJQC106cGB ieJ0SCYSIh3U087TFAHxcOSBYIHMroj3Wx28SDnfXwqToCVTT4nAjsFa5J9U Q21i3vaBK3AgMifDGrhgSodGnBiQIV6s5knUMBARL9I7wOgXrQGVfCd8qXNS UK1uX4iBj7DYknGCrtJDL9UYGHyxmk9CbJgWDck+njFzlG4Ql8rYjvUjKh8M vmea85Lj7EyxBKGUpB3MkOe0ayMbhQIy8Iqw1/PQWPco03Ep9wQBR7MneG8R iBtgaGO4gQLdTMvzO6OJYokF8gsEGEA6UtMMZ9XDDhAHJRAGLgYpFaErz6za ho9VBc7At2AtgyXluKiP5ZVWcxVAFDgnAd5WhiRFMOLIoyo+5a7WZ5V8q+1J AiREA/RhwJxJUVzIwAo9OjJHTkeGYp2rfUpN1LOSYbwtk+oRUsHMSIVKy2Rx QBDLy5oSykOFDBynCjA7lVwTc8UVeQJjy8f250oxh3jyAPEVyckhlQ6P4wRU 8sQYIRzjhOC6XIJM3tCDyRdrQFjGkAftX8OPDjFA5MI+pJuGPYhb0WpWwb5t LMfQn1yeP0eiZiweJmwa55u3q1fzI8w9Ifv/+NK0I2nU20VO0CcbZDPq/9Oy g1O7SNC7rVrzvpH9EaBv09TCC2gxl4/MCGDuUumow0tkFxVsNzcuwSkBFSEY 2b+wkdrTgBNF4VnD6yW2hpJ//PqApbAckMaygQi/rPwYbxRGe8NXpDnnvBsp fA/oRmRtuvg+qWq2YDDSNrp4od1XbKPt8IEuihWyhSl+61q1FnF7QqADSKAb SGBva7dpk4xszxTJsVmktcCzVaNnVokGiSWzSMChhm9Zt/m2HykbaAQ4QJlJ rVwOBgkgyFbhOyMUoQUo19E3viJXBGZCEDEMu90qMusyxoR2e+50Q3RxVMpd ubNlKdgWXIIx4MC1FJK6e3HfAW7BWCBFaZkZ6xoS1+5gYikYi78ARrFkzryB 5F0rI6V0A9Jy+opg3+SNbXxaBZoin7RHm6Xh2DLUMQTZJlPTBQwjFyClxZ/z jdMEOGRhIJTxEfBgS6UYCxlF450r8sRWgo/dfYPmtxBjANsY8gBf0bkIXC0u 8HSDBBz4xlqyETwvqRHsLcbEqOQ4xocFgsPNvDRTX6YRnDgDZLYwCxFOUPIS P7NlhfIjUMruSL3XQOt4f5FkfggdZmGlOVGxU4sQNc5mcObb7tpyuGwdhId4 ahaZMeHE9KrxskP8/3yL+NM69oXwzHFkoHXQKBBgjpaJEQEmaEOIPwr7QETy APlSkCmDDkBwAEl/8lK8mXiBd9dyPYjAq6kJE6AM/UVfJJUly/W2S6uc287J W2y3kpEyHUuvnKHf5VkTmhbwjQB5VOimTJdAqbt+Zyd6nvjzSiOaMumXToyZ XuBm0hNgcPxC8qyQl6zXaiAYfJH/xAtTKMNVTfa5oY4cQGELtTixG9F6awEB 2XzcgWEpYlbN+dADNpOPFyXW9ytphnVyDeKPBCC5HDC65HhRAqEUOZY05XH4 3ijadqThXSa8jNWP4GW7qVvGzxNZp8zGWb2Jubkwn25WOs7+i13iBoxxJbYo o3VZeNYTvaody2T0GieRj883mZcrVsBqaFGnw5TjAD5OTUBj27G+uK0zKj9i IWkqcqjmnm2RB4MM0KRWmnFtliInZPyMsgQpEXdtQBGOCVA8NbgK4lO0t5dI F0j6L4S/LNmEIOSgUOltPJpQE7WiQHhRmIwOnPujU9SOONNTBsawIOvDXMyJ g7lEhJZ9cJwzaGLEiIS6WMjXfPMrOhEqSSanXMcuQ/ZdGSrpCdgXQBNndXpI nywjHahr76G+sY3630zqUR2oUQw04NTdm1KX6iWvqjMLAvynA4i0wRmkO6aH poqoMRJKV39IguiNckVgKuUqsLbwFUb1OIk/oSn+PlDHXByA/YYSCmlDsYsb r7Bpj518zDiNSDY9epK0IkVYwLrkLJmuaMBHy+nYsGQwQz0BHO6EZlliCnZQ yLX9EmGusAEiRjd7/OYjnyZyF8epsd2CFa6iaEnTBl5JMGMsJyP6uGxpejMA xWJZssGCtxSeS5ha/iVWZshx6dWE6noIQ9jS3vTo0q0j1UHoAPGg+yhypEsW migNnWDSoybdnJpxVr2Lp1VEES0ioDHpigcTQ+1du7zn5pHRLFI0LoOZJdvf 0cDbJCgYqBgNlYehaajm+xN4mSVekA4uyonyCjtyLVcktzxXR1KgInBeEhQo KEEKyIKGygMqOYNKgYyftIyOWdDGrrOJZRvii7N4JlA3LPKciAES0lgEC+ft V6wTHQEnD839Ed70kC5yQ9Lgt0cACVCBBQzkncDzgBZvwuJOWx9VdS3ji3cR ZkV1LYeJQKiUQBUgAiSCTrUO+KC0QtgVGPFYPnWlGC7PEEzFlz8CYl4nOFky zxjIbZPfCtCjSHBbt/AzjBXfMAgJAs0DtBQDwwREADseX0tuPCzoEW8DTg/Q H8YEUbyBPAAExoAbwAPBvMkP+uWAJmbPRNiyiZ7iQiyl1WpBwKMHAZHeXFB6 S4/pxzKSmFJVijSokT7SYoTgBEUoYaiD62VPo1MBD68wSVd+08t6n1nrX0xr saHj7ndEHlv+KyjqDmEUdQfWFwlfluhPQhbAXCXF1EN6sqHqK/2lz/TBnkpN e9JwEp6Fz5gR1+EJdCihkbBePcHZEMI0eMiEgtOoOtZEQ1U4oiK4e//lbl99 k427YWUlvNlF6e+/StKICDVBSVgtJwDEsqQM0Ltc8lt6lbhrHRqS9uBFeUIU +Xupa4+pwKufAkRgYD2mulHmze0SMF4Fw9gKK7UVEPhWTNmX7uFUwap8j2+z lEgR3AVnVpF4bSUEalW0x9UpyE5AEM1iQxARuXj1FKN7TKI2sF0WzB5JJNut z6MRpL9eHhkCkml/EZoQlH9jh1Dfi9e8qUPKYUtEyK1/KdWPDh9j6McLbOmL gXseRPqsJF+INBjQBJBAZt58loOxYs8Sj+xZAg1wuWEn2v/dxlTNn8hZ/h5I P2H30+lWCQsPmOZjg1w6dCQ30ALK0lWTjy1g0psBw4T0LasFoUh9ftazmHVh 7O381/f8tS/k3ZNp/pQ7/x/9P4CqX1k3C+L6Rej2mUQW6LpxH6SvgYYJXqZw VFM0xA2DifYr+UpcGYjI38HGKmDYMoLocH+2RL2soZlwn172i9dKfWL7XJqm iDoeRa4wCgqFGyIJK9Cl5HGpmEU44FuSfwSW7YfRw5RF6X/8x13VAx+gQJGg Qr+rb/HbayX/k6xOoFIuX7j1/pBAu4JlYHTUHaxHwCFPaVHgRFAhiDwMZQgX 5CvkIRlB9aKEvBH3RAww/ik/sU8EOEH5ChEFI7UobBeFmW+jUwQYG978Q8dV gCCADbABPoBKCBdEAeY1I8CXAAJKFBRFGEACFhoJCuKRAr6Af4Hlde7RCByO EREaHWM/CzKGABpiX8MQ0DG9JxAOyDD+5VURCYcRgbARDYlXE4j8H1UAOrLp OBs2mIrTEll+HE68gAL8UOpfXlUR0R9WAMvzBOZVZtnh0DgEX14Ed9QZVRIB nG1gg5llCwSNBgbmVXcauqCZxDtYFEcU0cETNlggOG1YfqQHcEJJXHeaQiIo fSAmH0EVUJTgQRzOE3QIRoKA4CTYA7UZlyAq1B5MgZIQ9cdyvBs6xIbDWkAB 0Nu1RM6QgkCLKUh/HBcSSBuAMZwzzcw7U1fBgnaPbXMKHhfGU1r1CzkWcs0v pFs1gJ3gL1gqcQgxjX/GCzJmnuBxsUyQBPQMaeAMIoOloD5Dfzx4QRsiCAi+ AfQHDDSeQSU9jWLmDWaDAAXMMwsug9xO5WJSPIMOSfigSJQN0sagAhvZYLjR eLV95ELBTXkgCNlejpwNtvLYMseFeoKtjW7w4OuFLgRhbWArsoa8gaWgQgiN 4BjVYEKYBuA9Z8zTA0zwRmcGWoANxoIS4QlREx138CDpIb1MG0Rd0fQR2j0G YREWZQyDtkzxVJtAhLGgjUZ/0CiZjihYBSCAeRXxRX+wgnkTfgHZiRDiUIIE D0ZOecJCyDEQIh6WNfIFYhc22C5Bfwg7PGEp+J70FAIKl6H8wIMzlVIoHaQe YEUxF5vQhHZP8QTcIDhsAMsBD3YONyFwAw+2IjuOVxac5IFsgQ0GFyYEccjG gEjkFW8huUQNojN9oS1jDMYZDsPcA2GECB7fShgZQGwOG0WIzkgGx1GdQBYu htGgFLHEMAtikFCUXSmGXFxlmAq+FonWW+hYOIbXzAjiBsKDmgNikegROK8F 40DP1YV5VWr4uQUQ6YZxstwFgx7hH1gKumhQBzdBGGFryE4kxRleETxG7zAc CoKgnCQiV/mBUGFeReoMEtmbIpFndSfMRVUYC14ROELSIBWoBNah3XNFMH9f VLoB8VhDNliGp8cxRYDa6VDrJYWT4eJ2OrgKJEF3eI1dhPQHdCCJ4IL1TO6B sZQMDRs8WEzUh9HHSqUfwiT9IWf4H6ILrUgUhR9qDQYifYggQoe5hnSoSfiH DqJRMiy0Jl9Y8bQcboJ6YF4FcayD1ATJFDKgC2NZFRGXBIR51ZERY80J+0KO g2xAZ2gDeZgichNzwkCY29CDeBw8qCLOAXNCKNUChAGJR22iI9KIeGFs4w8m COsDVvd/HQ5NYXu4Iw51chVUYo78hbMMPGg+2TJBGEGlUjU7C6KViHzMROHB x+ElSjJrWm7WJXKGV+JFlwrSRGgFmvglDmLmQnmnGD5VT0DHcsetdc/gU+UJ 6Qt9Qq5wEDABeaJCJ0JVRBbJnCgorgFYlR3lSvwgM84V8bWFboFiHXRVsSSK 4v+E8dg08uF2oRF9WNZDxmAGMHIaQT7SBhEKYk9u1xxKQpriSLIu9GVQhtAS KZoaIcOUMVXNFTCY9XcqAi2a4kWBMeBxsQQWZQpFimtgS2RVwRWFom6IK243 MRefuE9xOIxUpLjExEL5AmP4I+ZZpuI5eCwOgejbVJUpbje3hk0HP5RZjEK8 YJOJSwiasYjPCILiC+OnVk2GTZ/yM5lAGCYau7gb7QofQ0ZjimF0XE+kaPnx CTFWpGgQsmjDwubQmaGIqOLNgF4YcpuTtXguFom7UNMAQ/WB8UJd8z0Zigwj i4XYyIsVY0LQViVgsxvFyAoaiVTicsAUZlONjL/YCiYe+MLtVFFFikkVd5cw coIFI2m4HHyMDaNWEymGjOSem0Qx4ow+yZBR1UAGNyMuSFDIbnXAzbghSoqI IqVoNJJYkKFzx1jYjDvj0WjRbYsjVlpFhNFyB0N1GCmWIeMGNWHZtV5b46RX BkQQC4p1QtI9hQpjGbBdAFXahrhYiNCFrxTYE5a8HIdD6KPRHAzlmx0SKfJv GSPUaC6qjXMjVCJ8iYttVaSo7JhUk902VjRSjIzhIIaXFR77wrfgsk2G6IKa Vo6YiRUhNghf+BXbxRSAYj1yfkbbNwVuP1jEfNFA2Af3GxYhBxFBcgVtF+8t LMigU1Z40HRshXJYiHxNH0Fu8nfwhDQDHPfiuFJT4Dw3UJRoBkZ0MNX5PLgO dvbKjTsGz8uFDPYUM0Fpw0XdUPjFEqPtoXrc3qTn7bV6C9PzmCtwVzcKYQIy YBZtn6kV1GQOm4NiUj5AP/2QDeFz3BtnAAKoMKAWdcCssViJMxrjz/IEOhYE RS43MLYAn1lVlcgdEaMXugevLATTQkRQKGwKV4D8WPvkciVgUDZAYgbjH/8Y L+RyDuB9UVSwQH3g9lR4nA5HWagxLe1LZcgDKZBdDLsaktCsYDAyRdxgHqAH T4E1tEKOBmhTXgiTGBZ0wIQVMNwIldl9doOhJ/WI14dd0C/8VqQiTmwJioG2 AhXEAKyBtpLC0AjSigopIDxdqEqI0qjEFEfAeBA3ZBMtAIZTd4QIOsGYAKFA BD6fTgDZ9Qv2QaAjlCxJcqKzAUbmKmMksDIYnZFkQxqZn/0RbGT+BUYuBAYN O3GktCpFDZkiuvw14AQYWYU8BGQFfeAQiCtNg0gBBWAx/Br7EamokDSCaOAh CAHYyqkjnWxQRh7dwCFIAaxHwvFFfgbmAY1QcBQrIgGpJSYkD18kmpA0qAni 1pjwBJgJ0ALRcHRNNzLUboFfeGyRD2NhQDF5bqQrCRFMC+lWFXJsMQmfHt9i /jkBMqQCSReUN1kByccYYItxV5KlQjqTDpnqlhswBk2Bp6AhDFyDFp5jb9wB 89Q1mSE8k9pkmddNqgfboV4QTiodaoAeABgAe0MkNpm6yQTSZFvwFrCTcoE7 +U7SHHbAGqC+wI1QSoYgnfR5bUypV3BsUElABoV3wQA1wA0AA9wA31LZY1Bi iwnlu2e7HCkOJQogA3w0OAAuYk4ukEtMRumqMJQdpUgjhBCSbqQCeVCiexnl F6lALjERTBGAoYQHH4WhcEBCBZpK7XIgkAlLQCL5FMiUGUKxkhhUDfBZ3JUE CEIzwDBl9xV5DYvpchd0BVlAizRS+gfmFpDiH0woI6V70BLIezAAWDkdPHlt VpES871KhaQCCeZQh/ZOQ/iGBEF5wMbwNyx9Poe9o29AffsSs2UmGA00nwq5 JiyQeB36pUj0OsrPteEUcn/pxjZRZXyRIszfoDvKHROE2LNW/FwqZMDBoSQc Epoes+MtIwWVdadCRgF6HFe2g+Bx6M8QiYOwJDoIqfazUAqXQmsXMtSVypom gVcGkqiB3hWCFZLKAqpxQogY0gEeZJupkLmlctEn8JaBlRoDXB5ScxTiAk04 fr7hVJcvQEheoLcY2LkoXslxqZ3NUWSOpSQwAGt4iQL3hFiXDQSfwSGyBYYU 9oFI3TwRJHA5MLyUNMIrARnIAZVfn+B7kAFZ24ty5/yIOMiKo15+BOzlMfZe xpeNAbxQX9o5jRgdgAeoL25AHFAW7JckZZ/nXkYHAOZ8OWCyFSAOHsAsdEw6 WIOJ7j2Y8GW8EWDSlxAGgQni5AFnwFiCBvgLaQCDKWyUL7VVViT+4ZbgUZ8g zvUdJECkto8Ia02L3hFBsAs/AGKXxmxza8Ww5AIMLCpmn2C4nQ67mgw5jywT INTSVJGRZgEEIVeI6JASJHmCGbQOQI3QIpQwmOVIyCAECktK5igTSwBghBRw KWbmGr9FssMxMJHb03AUGQhLX6QDJbY9JgfTsKC2EQzA5XHHVOSZRIYNZhDy mYwF5CRUcJBlA6VBOC2QHYmas15WBkMfA4RbBj6ECV+BLnQvvEhigncAYBoR OcUYgQ8jFG7pX7AkmRXtV0iKS/nCnXaa8R7wRZLRVIknVtUa8EW+j4fC1DGv VRn+UAA227wXsSYDt7rRk/AEynCOrQQKmIDka+obp5lnFFfwTAHYq3mMPQys ppcR+SUbeWVk0LYtm8Wms6lCKhM3xDIRm/hkfUT6UD6gG+1X7WNAQS6xiH0g qFEVAcS3cOf8Edcm6sBGWG1ERrDZbtobxx1tcoDEC8JSu5lMhCaMDGshHI2G 30Pyp9elG4FMGzlERgb7ZkYXg+Q8g5geiXBOFYOY5hFAdGPglGYBpMUSo0Yi 0W7CO3dI6BAx0A9wYp8wVTxFVwT7JkT2mm9mzCOlCSMWUhnAAvwk81F/1JjY B0SJHyGNSFSbWulBKfAivkIa0IsFR+1mMpJ1oAsF4CPiERAU3cvIkiQlnThJ XTRqmg/zSOFWB9iLa0Vft0cwUVdc3PcRtDOi2NN5JZ4x5xQwcVxMFtaCtvh9 kTXi18F5ApxkOYG8OWqunX+SvSOeaGnsAmyEMsCd2dDDNIhRQ4wF0SgddGOR QSBRh0gMlle1qCncnTcExBZLqET2zjKxxNCdQk1GgCgkSK/mCZB4QogQ1HSY OmpsMgqmkQBcm5YnZdjqMJ7RBv8QE41XvoKlc4B0Fw8DCZSJ+VfBgnJybY4Y jAWsSF+8dvhc9+hG2lhQCU6l3dkaeYLLMXtSbhgIHckG/A1akhACJO2eKkNN h2qIOxHKMvclsEljx6tJQVQ9gZIa1jEyn77YZIk4cZ9n490EDm02E5S8pEPB EHPCzBAdfAHwQg8gKBASiQL7OWG4MomCCaBu0gHsJxnQA6gr1ksNcG2qDELO 6bhe0AxKRM+YBK50bwgj5eIdnEFO7dhHtAQ1QJLDmwQe/2cA+oAykRLokqOD eJh3gkJSlJg/xNmo2YD+XJ3GiTnuoAYZaDURbY6gzyevB4GmoNVnBeqAMmUu KAYqd+AMkp8tZ31aoM2OvUTk1KDSZ57E5FifdRxHxIusPN9NCDRfAQenXqqn PbJ64B4DKlk6n7HEYzl9TqC/3v8pWRZy9BLzKVneYg5RvoAxCBXXprN2GWA5 2OFDw7xwh9GmGToHMBfbxVb2avxx12a2YYd0QV9QZOBRfi44AAzwJNWhbSMe mgB5lGGHDWADxH+jZlDlX9QJ+qPDGbJogd7CtRmyqBHhxeNnK6Kct8baJ1dd m2xAiZgl4QA5gA1AA4iUo2YnKvKcEMMJoPBqmqL3xAkhLrgynKgnekKEgP3U MmEzmQ8RlmQpMGxEBqDTuXuyoscE7pLJwDE7ICzHz3UPD+a16fPMhNZYVAAY mIOH583DNt6hyE6+YHyNmjkk5Tc4No16pvLECrmRdI8ipvgRFzObbWZ3hqPA RWyFNrwPCcWrJgfokeHob/FPKh1vAB4wSFRqQ2Q8KkPSPU9PHBIv+JoVEQhw dO2j6WNOdtuAF3xipVQumVD44s/0teWVdM+zck75o6je15aytWMEgfGyffhX R08Qp0LSPcsE34hUHBoOyX/2kW4ON4p4smDkUdhGvhAvnqQy3HNStHydY8y2 4y1YThgm3dM5wIlPkA0Hk24XliAIoD0JTBzPYfKTEp1FyVAqMRWlst1RCgoi WEQpwdSUFpIbVTz0ovxwwsbAqGL8a0qSrkSVkh8VDU/3kYKlwoap2aUlAd/D Svf+cDVBDfh4Q7QAeMAZ4F3cAXZAVAWOgqU7qSLmj6hsjKhP+pXeEDspCTFF 3KH7IP8gkI1V/kcFkRZyDHqHoDDmFQpEQPfxlxJCppmDsbO1gNXEr/di3qV5 wnbRBjwMSMf3cSNdcUPFPkp+bBfpBggVgXh/H4FpZHjaBpnDaaomSgeBzBRh QfwAbORH2ifcKMfFpvRqLG9VhgknB0hsdUIbsI/2iUXY2fBFng2Ww2XjlqqA QYD9cTgIgcmJsMmcXgbOqZRkCeahOwEztDl8SFFmvtBljA8LRI3iMHFBONCA 1HJ6aeAoEJmdrqfbaQIk5/0JHwF4OslYfs+pTgCRuqdKn5RUfDJTdgn28ZFq R31ChmK4QCF6y5R3cCQcywGlgZt9BLvaDVY50BJb3XZTRuyjrw9bUShsNmrI zkSIVA5nzIwZmixlcIj++JhUJv7ZTPDJ/TEDagiTNOybbISwc07dELYXL2J0 tajEZkVUWdESuoRw1T1on3YcsUf6zR8YKucALyikOcSNSpW2nqOhOdIEKalu ZBOHQ55A12iUmi98lUxDyXAFdQxZRBpgoC2Ajcm3xp9VLzAAfdCxcDgahmSA bQQoGgbeo0KeDsKUTIAHRTWURPMXhfaa2AQMgL74hptDuiECZAG3gzc6WFmp IAAXyVxQTUsMzZgHrEvW0RAJQnJAw8SRdjpIjHza4YlkNpR55JuaEdFCoNXa IW1kmqviGxLutAFLxF9VP7h6heTpoM8ME6THz3I4ZB3mQ5SxqpoXTsBjYI7g dfDbJWqp5gv/G2aBCzEYJKMfFso5qvmCe/ffLRSa6rQRp8oET8+8IIkITxdc qlqalAfzBDLz9yAnr2XMYBJNNx9BXsKHZUL72z6DYRZTDglmEvucN9QGvuDg BAszD+/0swBA0qp0JGBJG4aqbyioCnewKbn6xZWrG0P45MWpq8lIuyoFxqte XOmho/SrYVG6SvkFrLnCY2Fl5JXFlL/w9tB57CmxGqsaUSogLDU6KST24zdK rOpPcwB1wBqwBDhABApZggiCEsRKuvURwpoqqJE8UF9klDEDsAbAD6ChZJhl oYbAYBkECbTEX6JLMFMKSuMiLmQEAcUEBTYxcGrEecYUREguAAqAZ3gSFWWU ESxNFHoha7PV8T7ogr/QR0xx+Nub2khgpu8UGoBhThz5gm+1JUYSuRr28UNU bKaMtqlClkHRgW91L5UeRNPSpPTxQY6fJUcwKBF2AAVZSNJrNM6wMDC+rbSm sCaVCQt8xvh5mg2MXyTgOgWQRoEPvlSucj5/K615Qu1TCkQEEYwhM4wr4TqH 4EHphuKRuKpFl2uVM3E0rp0cgqPgsBaqHy3BilFzLw7qqkEEiZwm10m0hkLI zIvVa1YKhSsuo5XOIjIASIOIupHCRLzwrLxeC2QHE3vUTOPh20qRNiTIq7DB gQ1JjQvkiUbIkMUr29paRArYK0V6XPyHZ4ya8M/cWZOFGjnIFIZMTvc6THyv 9OEZoz8VGvzT9BUKBTUBRrGjvjpAUgT4uluON9uHRmde2U5LgQmya/Qa2Jfv ZGHdr4OY/ton0HZNUGYK52Cvd0CQAJJiDk0cXuZ/5V9YAMYCwOJOBMMSoQZI SvgoPIEFECZfFNAJTmABKCySgAUIDAhSAFEwOGpxgw+TNPyUZYLx4u08BvJE jte4ERTZTmhiBKQECUApUQMsDf4nOJEF7FRIwk4pob2QdtYU03p4kxOgE0D+ ZS7XFg7jLIAG+9ZS6VO+CsOkTLEQJLFdVgCG62CPz8iPdromsUULH9kisB4D AhorZtQNGQIsiVXuJ3lkiwTaZEt2gBvbGLQprsef6MZCBUMAYiCuJAGNynLg K6QJIAATNQMssjrBCaMQxCsp676EqiB8417FCk+gKiBChkDzMQdQQUDgI7AI IQqaIrgpkCKNvDK7SLKwipCgPEx7Sewyscosd+BrpJDEJg6foG30anSFVh52 8UDoC0nsG3AClA5URL6QcWZE+1aPxCV9NKpOL6tDhKWK0ef3yJkKiUsTYDHG H8rsoaCB6GvtjmJXdzQk7uMCObphZ5asptCQcDihCSsYZzxRFlY166vBQOvG 0PdeznInxO/ga7gM6iwbUaTBXm9ZtyZCfGt5ydyZmnVMWSAbIaIaq7DOoblA Pq4LXWZ0AG6zvRobQVBhRbJR9pYvNCEjKbog56WDAkXcU82amrsm0tjwdKSt VBnAf1wWYls1e8+OQSFmfwNhnBCgx0CiTGCL1B0MYXBeslLESTtY3B6jSTvE aRpV2dQ28QJ8IGlACMJGxLTSxCtxgEarzkZDYtOSadWsLXstpQ/DxCoScRgK G9yUZsRKETctDWe4LWpBkeeg3qVWtkQ1O8aOQX3qwQATArRSBIxaHtBaCUf+ 1ZCotYOjGcBIgS9MKaFgGjG0OsS+ebD5ESBm/xSTHE4NBIj3BsgAQADacH/e qeJsWjve7LXVAmB1QpQxp4NstDF4pmVELHF/VrN6LQa2PsCfzCFNq0MYEVKO USCImKRXrQ4xkQ4T4yiGh9bqEF9nRkdsbCB4kDdEKABNg4I11JBInHqGTaIs xAt0wXcmbZyvDJ5QARuFFniniLrF/UpEBjRH3IJuA0UA8U8APptEUJAmSKZJ LQSBdxpuGl5nm9jWAaEn5AKOaLSl7S8beEIf0gfxxMXVte6mp4rLUHA2QdIw CMaPyuxJ9YrME5Zt+6q7brcrxAHxzNqYYEYe6WvupAsdwUmv4bXSAaz1BggB eROMwMU9B7BFGbCPobemkTK7eS0NEm6hwGjWMhVuCCkquhqG2YV7PpW2XyGM 0nlWuN6O9CEHbBcp1XzVtYK4UkZsxxKhAHIAN3P60Kbm1FBB4GKLJYzyFlzq etPEjUtTshJ9AsygtiV1qYVR+zNeEHzBdFvhImuiZUt1UFW31ESXdpgWgH7Y YhriFlOD1ML5M+UKOoGSy+KepVruEpArYCBTbmJ6DjGmiUuXG5kuufzDXMQr VArbhZh73Hx3UK500KVBc+JcLIEDIR125pOx45Jnuuxk0aW9J6TjKsJXsLnN T56h2IQMXFmF25iRBlKMldC7pJK1iqPLKEyHyFUs5KUOC7sYGDrPObrVH8Jw WVGudS71R4xMGuPCvCSXBbrUhD5TSaQLeFzTEH+xuDDQ6DQGGYE6EDOrnBWW jQFxUuGupHMthOHbGUq7Efnx64o8a+lvk6xVuHQDaPlKYAbA6XjJkFITrWvg OqyxuF1T0zShFGoow5jGHeWynq10YPkhHi7ujqMnAKdzCJjqMoxUFW6U05hg PE0U7SSyhXiphZxLMMABasAcUGVMaghGhfvs6iHcQoU7BYwPGgEDp1Z4uqtu uEtB0Z5Yn04zT52c+C2x8PpJEx9La3L0sbjvnGzI2Pa1Z4zvYctoJv7C0aJ4 VLgZr8Gm2eIZ91HH61joNJWqbSCeMH9/gjATMb5qvALEY2/QHwIbjGJrpJq2 LViXW9JxzEFeceOeRF9EhduA1LVzAIwr4+ZlUCdPYeMavY/LkJE6YLgsLnNq OfWMloKtBH8mSHKNJmL3lLvSRWSgs/oLQMiN+35+fjeuRRerlg3NS8IFhSwE w+1ksXMGM0RQ0+tMhB7gbakrPPkRzAcyxdtmXVnByoYpSbKTRZ6wi7S8qhPZ KWqWusIZtcEF1aZij1s7WTS+ix9xYPmidOiCW4lYhBJKnzg0hig4JNCNG8g8 OEAjiPtDHBD9xAkxZUhA/S3EI5jupAJulSHh+idkgAsQJ/K3Go+vQEK4AJ2D 7VsnuADoLpKgBRAEG4IwKq4AB9yaHUFQaKUBJGZWd2gBEEaCdzAwUHkJCRGy aBECRWTkyEG/wYKymOvwbCOPOPSU1R1bwHTbBWCLbtR2ERyZnO8okrAFGAFz xBBx81AX+AINR0WotliEcFYddgHurxFwB5ABaNMVwCJqYsuCfRApbBflGLhA B/C/4MT7+/+iTQ9woVA7+Hzv1pix9fUJSVwIwAA7Gw4wAMwBvbp3nAi1igAi 4Rr/2AZswNhFBzwnbAHFSB1w/loYEEZrsjCwdUNHrYgCORarlOak8cyiWUkk 8auJp4cECgxPqMC/wgNsdpQBQrCmsAVMAWlN5XD+HjV6TWmgmzA17i8THNg4 wdnaRyDZlAYYCxXcAFvBMs35G9bIE+1IE+IFc8BgcFRz/uI1kUFSUxpQNn5N FdwEswHnL2QTBZvBcfAX/OAMC1rnfVKHrHL/1+5TYGgM52+XxmFGmAJmiElh EgyJQl0KB+ABcYDmgCQsE03HQld4Rm/ORspmb1Q/eoby0zGlbOMbOIFn7DZ8 re0xmDGeuW44Jgp/H4jC8jgJs8JEj5QTvL7CotpVmlFcTMhVGTHdbEFZBy3M cdhdWUrjhRDolVbXKuxJ6AQjJ/57nwxiNwob0X64UQQDWaAG2AEBygVEC6NN fR5RW5poFsuq6mYTXcMQgauzp00TJ4D2FV+heqmd+rB7LQt1x9MqTry2lsI8 AgXsQoiIddKRYAbIGJCaf7nDoon3KkXAvo6UNcSbQhACcWdCHGSdWRsd8ALw GcpdPzJoLsS4DOJSPnwgcgBEjMzAFSGmuTYJ/zHqaAbGHhAN8UtMEnFsHy3F TjktJIUuY75waQhVojBHnFogxEMFE8UQAxgOseWwEScKHXHGchlonQtxCkQT TxGD5iSMw2YTk7AdMJZtJqIZ3XN++abRxq6gkngXH8E8KhW/k+zNpCAHcARx QAirKYB/yRMuU1qYMkiCZUAmKjlhMSETeQgKYXFfOhHCmfvStlm0AlOlSeeA 3fZXuESwgD9li2EtODEGMEWEwsA2ROnFIm7gE+qonx0TZlEFQQrNyT4SkDWV SALRezqonviIUQhOdA7riMaTlwhPq8xF0RhLJBZwxGgT8Wi+Wj5YHGBeJ8Tn oifRs+DExYAr6AGm0WMSvNUW+AJ+EaFGuKmxxBTqLkB+cF2BJFwMt91HgBvf EnUFCDACBK+7hg1QA1Bgc18LgAN8lDOAQQZ5ORtlwMoDGy8R1kkbYBYQCjAD /lSTQDzOMPg7q15WSC12gfE8DIHObhz10pfsIZJgS+SG2EU9qEJ0hDCJrznG BqS5gnusQ9QdM3EB6rzFRFDxufACgE3HDZfaTajHPnEBGkTOAS9AFnZfSBMw Ma9gEQ8LErG41IW9ALgRhBGRwBfqMf+gp4ATqaNgS+QmvJpCh8yzZchBjRrA VwC68ETqGMhkyInuqwGDtSEZMjITIasdFXFsSzZYyKhJjVwg18SXQYJsEOvE NENCHCNDyB0kRfwg97qSGo4DX/TEecJPfCD7yDjxS5wUap3q8R0wJ2hsbqZt OqymyP9vJuXeLXfHxSsbnECdAwNoVyV7wELOmTwnCLZqMghw+FJRHHIELPYg CebI0CoEfQQtyGgDHNPJN48aWXZuNgUJ0cEgoY2aggGCmXRM9sar6189UHTy PlPD0ckYLYnj94mVTA5L7GzIP4vb9rF5xiUgp8NKLvm+707HBDpAI+jCk4td jMpXa92BefwU9KYfMbPFcD0jtKteIAmrMp/RKoPCdM+cDE6cDerLkZEGSLDE bpJYHyuO1hBzmhMBAcvCHXDcoKqXcmcCB+gAL8ALkBFMailEVbMopCM20wsA B7wAQMkaEKMAJIcE/OACBCdtQDeoKQQndMCzHC3vcsNS/EN+yAAuhg8xlr0A y0LduFDQyyDd1PQCjAETyLjMGAUQsqEmot3aBpjUGMuN/B9VCVtANHJxkTKZ gST4nDfPQ2eWqBvCESjHMei+TuG0IaVJy1ISf1R6YCA1Z7rxH8mVD3MvFqr1 R+JPzVm/QSXacTN8c0acGfMykdrUIb+Fxzwslcw3z8qZPtUkL+dmyRbYzJWj flExE0ePieGrVTAjo0ikcJtgJc+ILAtO4BxkTTispjWwQNpUbDVfzVjzV9AC 5E1vQL77OSC+9IR5ZR+hCytny3xD2Mwzp/mQMdvMZKxWojSrgAkzDMeSPMyp rk9RPsE8ZmC6YoE5G5ISLyJt+Fav4UdQe2FHdR1UIqKqEUTPbwFCQanYRaRX i3YnKUSaahKat0HQpGANOc45IORsz4W9gxgDUTZcb8TP5YwDVhSq3uacQ3S3 Cx0BakTEC6NT3YE5k86Tnj1nH0zO04YacbYSVCADawNVic4i4DJROmsY9sHU LPIMAXeGP3VrWEOHAwy2m2h03Qk4+7QaN/SD8AlOJM9UifQUsKEN0sHzjJgx C9Kzs9GMnTFjWcUxmIJA9oLowFm4EEiCvyDa2qaDQg0ExuiWfQJ3+ltOzyyJ M9azOXKgs3A6TSAJH6IDy+DJVbGEwHBySJr8szIRYKDF4ESxc2SwNngQUhE4 g1MRhzDzs8y0mkJDhIgkDKPGhDcG8M/5GcQRS8AglgFqwUHfEIGMZJknk58c tN9cKeAKIGa+4CHrPBJHBDFBYSCJxOFAQsQLke0iQW1wvfyzdGO4sZknBOiM JKhpFNsJvSeDE/uqd2Fldkz76gyGRJce4oPIA/UkZO9N3eH+cUHJSF/ThLjF md/CgCRM0U6ZQsbXftGv61OGNVIcAxrpphmDE+xU3pn/RgeMxE2Uf7FJRnNn 52zYrrJJpdCXnDFXnICER/8Ue/QJ0SCDzT6JGcVDIAmDdCH9SyWy+TGPjCDj QTOykVwh+1M5MiI9JSfEivSawyQ3xECx5XAkR9Lm2pE8SSvJxSJ2cQDRPpEB /JZLWNKchczBT+1TC0XHlIxoCjZUIsJGfxiThRLNbMQ66YZ5dUAgCRYNNeG/ 3jy6srORJ6zJCycwbT0kI3wuR+WaBCLaJgARhyQUPsneZzaHx/CE4Cl0Fh7f M/f1tjlyeQK+o0xTJwEEmwxO1NGpkjL9It9I0ka8YQeAADAAayBtYCxLxOQI TM8MjEVc4iqCE/9dmnpFzMz9DqGwITsbR0bpYOuaC0hCaZGDXCCaReowTMAz W11CnTrgaVqmOIRHgQsJdaEWfBoUbdxvkfy9MgR1NPQRdGNcUJ5sB/QL64Nz piW9BHszdkEz1Aux8R7hVyTUUlIQSVN3YQSl1bQivTjac6DA7GhmDsP36VK3 UNuHiDgs5Jv89CcVS/zJ719CvU6tJ/iGSptS73TEk5ZzoxxAvTA4UShVY9JG UmBa4AqDAo0xG2FS/0IOeTpctlr1wcDKeZDhafcXL3DFfsSzg1r8iNJuaDIw RUgyXAJkjBZT7BlOU3ekG/2mRgYLe7eX6Wu54f7VBwMPN/R0GNzJDIcni0eq sLPxOfSSpJIOISbbGe0raEfnYhc5EcdwIJfC0DMmzFk7DMLlGUVkDNJIAmD0 QOkZsScM1hRJneMGaixZO3AfdF1dBzgBY8DKgzDoHW1g9UAamAGkVO2CXAUB aYC64ASgyJrCroD6qWKUwdCJJHyd0uul4U/NbDrF3dr4ZVaWXOVHt9bPBAOj Q0koEWcAewxPCKatrZE5dbYWVo69rC1f0kIHHv1cpwwqXuWD7L3XdqhmMTpx pyiAwUMD2AAUJX0diN7XgygOYIhyUt8SCVE2rBf8B0FxZ+QZvkIUYkKIQPwX Z0FQ4raGW60TtLAk+cIsUgPQADWADECKOhvLG0WqwPokMnRqGKc919lrkvpc Z8z3hBjgMz7Xu5wLgDIAo+YCLZoD3qJZ0wA49PWiH66zkUP0ESdAvgBAlUM+ 9mTBPcASt4T0IiCdYqypMyEOIQl4VspQTGMXQcODir69fjIe+wsC+AFIgh+g ApCzEZS6+rgCI/vZRKvHxVgqAJcNTvgBYHZjQfmN2ePc6UDRchNqtrPhB3Rp B1FwU2djF5NABFkoLCMmiOIRQ/1fJQN4yDEIU7aPXkELlQGUQNYsFugBmkNl gCT02TygbxM5cLCCtg4NgBnaE26iLRks2o22o/0ViLSBQpAhYnxR1U6ZUu14 2BfBqb1mNhOgwTohtbTaw9OaKQOoRoAfkjOK0trjknQghLgAIY0LUEqUKaYd r41qjxIxQbKtASoArrav/VFaOzCSsD1RugDLsbG9ZnbYwjYpAWxfBbfIQMds 19q+dg0wA7gAM4DL9TvcAMK2uWJth9vjdlOpGpUpFdi6XRqI2+S2DeACRKBM ZDPXbM/b7Ta6jRp8Hf+2vF1K2NtDrLUTgdYAy/a+PXDf2xGoDKBr0wACdw5w a4M0t7a50m5DXgq3xO0C0ABlSrmjGkXc5jZII23f2p3Xt91rS8Hmtrs9bAvb EffBbW8bx2AHxg1ur2RExR5z3BhDJjeqbS1ccd0Eqrpv/w639tKQbXPbW5K8 /TuM257L10Fyl9w/tx9q7cyswnbBzSUZ3U43i2LtuFxMZA5AdePbfo2182vL 3Cf378B1K92/trlSxDbdDTeHDWw33OoK1W1v3yITd8lKbYPdX9Tv8HYvsuk2 uk0cu93ZNr4NA0zcEHfOzTHY3QZ3mWKLUNsuoOAtHZzb1g6y7WFfBX8f1a13 /33pdgRabSvezASSI3J7LoFD0615rwaNt96deHvejXfFjWzv2pj374DkeNj+ 9u+wbVPdq7fafQOs3n4o7G1wk9wNN0hje5vdT3fKvXsX3Py1sD16z9yqN7l9 FWxJwHbg3XQD3E/3VZADMN3ENwwAcFPenNTxTXcP3tK3sG3aCdvLcecdfQPc G7Zq1G5rB8u38I1ufy6qkbddfkPdwevLrXWn3qm2hw12ANx/t9Gdau/XUTfS bX8f32UKJ9Vw298v991dpnTY8jbUnU1o3/33zCpv0wCYBx0AzPncMzcQoIHg C5nevi2BN9fQDub9T/nGyTPNkGQjqxq4TZMA1brPXBkhbw8BjIkc8AVku4jT vl1NFgEFQodw6GEGQEAYsIRA4Cf3EmP1DaZR1b7tneaQk1UFPnMjAe4BSFw3 1OA3ePe4b3ckAYbdyga0AB+KEH5yS7MTxIMphX9RUACOsEh+LfK2cTIo0AC7 JhDgxyggVzjHUAVcAUYAEHBD4QHP1c0Nr+7boQUQAGI4xm6AC4Bzw+EqRBDg 4dIBcvhpub1h3lsAatBu29vlDQO8b28B7PfX4W7DAIb4zB0GyAB6QO9XhmfP lsFISzHoSPIbOiJvj8KIgsvCVtjhb7gjDgvX0jjUvt1TJ2aDAhCwid8auA6e EQZIS6+MKd6NdCYTXRmAhIM3OPgXFTKYBZN4bqsxxJV6ci++GgvjWA0Znotz DEq0UdA5yAGVHh0gqm06+3Yr7srEVkdLe4Z5c54tg73sAtAL8nbq4C0Y40r4 zM0vHy13uDiegnvi1gIo3oPs28MTIaGBOAy9uPsAfcXjPlu0dIxLB1axJhEd ZOKPDjvOGAVp9zgWoQd8H204sozp1RljWS8ugzhBKcMC0XOH4ye3XPsG7BNl hELuL7QAdQa6q5DnnjDL1CmGOxbgeDO1b99v0OJG3iI3VyY45m0GYHqjVSHy kIvkM3crEin04q7acyA64Bkvubxdk7vY1Y9tESg0JjT5RJ77BeXmQuRbjp/c kfZslJNj3g34HPDdpEC9uJDjPtAAdUBUbgJX5DQAvaCPuwxRubMMLb8A7LIL kJbe2vOyvI0GWHBJnaXQi+dqh1MUfpR/UR4yVNeLL9iNCRAAnGoQ58N6EUUH DOq4vL1gn5uYTh3+lnMMcsgd0oz15Zh3WgpATAy93OfQiysg3Ze8DJF/UR8i 36mKJ+ZQ1NbhBiSFlEL285gjTInPGXA+5AnydnydllsZ+3hAnvikAVG4ai69 GAV8xWNOBdXleMBSJJsrmptm5XCbVx+8Ahk+mC85NgNEVS0YGI8566sSU+Qg KsrLHkLjM/cqA6OJ5a7Tvm0ddyYjyUABBIA5JINj8ZjjCzfp57CuKiO401Iu necB3jgbIOQ85g4cntGL1xnS9dYRkGfk9Jpp3k385j1aMTJRrOd6wjoSLCDm +3ZrRjZoEus585Y6sAypw19yqk7myZSf8e7kSu95N6GHcA+IzXpOGbCmvXil EGA0HfI2MlW96dPRUgqRQvTiRUEKImlwjzD5yU0pBCgWBH8+c1MKJIRSZETE AJf5vn1KMwrKuc0Qo6/oksY6QinMGSA6uxop3OgmegGIBryv/Li8DTKwT3CO C/Aioz77dsZnaAhLQEBILm+fGdDXLd6L+yMtgBaANmgBtvS+vaS/owH5S41L qKuHhF9xpUOud3ntS59rIBVgNhGlzwF1eJhuta0B3ANn9Tu9o2v6JxXIiA9X +ump5NQZVzpq9R9N6Rg4ZgCjE+rAGJD+RRGtaYDC5AKYyIS6HEAvzAyI8VLQ i883dPp7c6mLQKhJIxqQtwwOgwRuPmU8eYTE6QJQIir6yW1fkAySzHZ2qYMM 5Ocvko5/6ieiUf07qOHk+QIhpWPeqnVqjqBLByZPR9AC8OkBufopB1BgQMAm XPsW6zAYEGBfuADD9Do+c4++EBVXTp+PvtUXZiWeT+spwx0QQZDo8rbSOqDr Rf6VZF6if1Hxj/TohkvrJ3eazi/DAaB3QB6W8+TWsjruAnwM4XqMjQasAUo6 eJWqo+sxtveCB5Dl3WOiUObkKQNLwq6wL+wMe8PusG/IBvtHUAI0lRN7yTqx xwATOw0wsfuhG/vEfgNc5hG7w8fNnIGnRMjuUaYAKMAQULLDDx+BR7m5tYCb FBS+YSfeJns2gYsYojFACyBxCyEXQc0OUXIzHDcO0ALYPyJNz86yk3YuATcT it4ALQANENIs2ya7gENRggB6V3E8ewfeUXvSXqiadi2AH1qyGu0HOwrAcZsS HLeeyhx72yY7i/IktYDxNBTOzGHtRzsKYIg+SWV7FwlRQl4mex+q6lwPZIqv ELxy3GB7y663pwDlDtPuJAk4gfsn2mFzMx72R3M9mHZFrMn+0ZgS10OHrRwT 7Yk7CvB8U5SHKNMOd6PtcXsYMLJbYCa76H6yJ+7rcoxtgukhIUORrgCE7JFH BLEGvGCGyb68dzAeOpITDbvjAXUZGcBbABawux+g6ukB29kLkLjn7NkE0y5u 7xpO0mpwvK8oomjT7hK0ACsl3n605+x6OxTORYaiNkDJHbJj7y8Br+Fw2QCl xPv9vSvH4fsiK7ST7xTu6369o+96qoCTAyjH2YR2cL5n70Ps/H6L3CLPO/5O vneRymf/Hr6zKDk7/2m/v+/Ze8k6A3SRx/EBf7CD73pq2LHAM3PNsQAfwYcd XXtIQ7Mj8DiA0L7ILvAhpbjdv3fw0jsNMLT/fRv8A68ck/Dk+/yOA+zXoLsK 38EL7X7N/O60kxIjvNAuzZZZLMnLdr7Pfc87M8e8O0k6Oyhqvl/vWQFC9BGo EasEzTAxvDLfO/DANCAeCgjwfr27BBv2dTBUyCMxQ1pY+x7vt0hWcNQgSPXH LvO9M5FfAmJQxZwEBmVNEDh874c3mTJug94uwfGermQFmkvMwNA1FW7FKkHt CCFNuwP/EXgua0CvpbRket87+U6+Xwfzn0EQMxzvhijDfW+n8IM8f02BkbVE BmxhB3zx7vsDf4gK2x/NyC18C/JSsMutGpmslLwmBHa826rREX+wH93ktr/d h3rdpDwszyVx31dB8Bq5H+2wPP4dugjbdXwn/xHA8qDo0/12b0LCPDPhcmnb II29jcMn84R3KVHePN3NXMjOeD/foLzmzWEn7sX3w1dxr96eCzeffZMp9nbw 6m/XAKn876B0O928N9Atzn8d2DYTiXWLou+8asRtY9u1fPb9wl/dx7z1/soL ZO6OZZAni1CkFKfhEHDzngv1PnvH8MN8KRF1l/O5/CjBzX+UAll0KnSYPzg1 N+91KMemXTXPy2PdGjcn1Xin8y6XKGrtKN0SPTSvd8UEzbH3/tEL7ZxUBa/S r+8lqz8/zFvu2UT9Dc1HlMrxhu3Rv/ISpW5iBAgBGlGJDRL8eNZ8SAmF3+3c fA5gwosu5U7ibovoqaALiyLVowbUO4zkyn8EH3zT7tRL9aNo0y6KQu1He7k9 v3+Us3Ay31RG8OUOKc9+d0sbt72tdyXuHPeuQdFT77fIDIBWhuyjaA2gs9ci Nj3VLuDwGjNrF3kDHKJ0/d+X1TORib0NsKI49Vu9YO/YlzsIN12PcC/2DD3V bhxjXv1JGX9KJfP79WFvC8sPn1MPwteTEqwBE6mokQsuQB8P1N0iu/zB7rQv 8Kad7g3aK/V61yZF17/wyjFqENt/BEvD0YAFRAhsfKEgmYbsS4MJ34emK4l7 ct/bS9zNPcfd0/v1zNzXnsyj8zl74d61G8c/PXD/0UDhf1937yVg8Fh8YG+Q de3ltkt/sLMouwYzN7+HoiJ8Ms+ieB3lgQOXHsv3fuiK0rZ/lE5S4q62b9zB K8ONeofsLIoHn65k9puUXc9fq/cfwSa1wF/tDH4LOErwGkOseC+KOvagS38v 3zchOIG5RxI0rXBBcTB8rOwHu0S5wIvboGjiTkqU8+i8auRhk/UlvkNvrrzc pl1mT0ow7R62Cd+9M/bJfAWmp87tkX0FFtxHDt7FKNPFb/Iqvi3Ca3DY4r2T hOFz2DD+RyC6mO2lBPW+HMPtJb5Eqb2b8HqXgK3ia/lex/wufcf3IbvoUsC/ BBG+6LLAN0m/PQgwe+fsEuV+reIr9ctxVJ/MZ++clGMPIy2yiTuer3eh9917 n5++/w5FfNgh6Oup5TZ1f4hm9tl7S89rlKziffa+Xzv2TWX7HrJn75uUCR9P t/nZu5OU3T98gX0fWsBvSSt8RNnn9+1/e5TPtzv2n8sEz9+f+vaPodAGXnYD 66W/yDbtzXFkX9OvKBv20F6BRfpWtyGqec+sWP5HMMPD7DZAocpJ6fok/Ivv 1ZcSfT4JzyVF8GQKKT/D4/pCu4ADUUb7QjvCPb9nE8cxt99FLsdQOGoQ6pPw Bo9fH1EaPOI++z7uS9/iPinh18NIc/2dT8LbP3oqOj97i/t9qLrv1Bf710Mo qhznwSH7R7PAb1JwfilByj/fC3y5bb0k7pv7uO/YP9/8ezIfdnD5wav2fthD /AaPzi6ELPwxu+gi3q8Gdn0H3+avBiY8l6ThF/y8/d+n04fsQEBzzC3t1zB8 4q6GI1OI/NGeJngqzGDiDsMkAYkHEQDvJ/Nq7LPyPBgvCF+i1VAaeki9zk8F iApHCsKh51UNp9cs1gQk7kMCfNQ0iDIH0IWJ9V8dB0rL0PVvOiF7IUgGQEh7 WnQABNTT5HJFjqqW/eXCwBiaSeA1ioWNmJf9mah6LWBv/Ml83dBxPQGJu/LK IbweMUVAACeMBoH/IwIZWHHa+dt/tDsKTfzXUDcqj0PHBt33p+AQQ17hU0si kBtTFPhj/n+Iyggnh+woeBXEgjMoIXvkaOL2J47/wf5EAF4f+JJBSGRtkEXI DmX9TNpWMv9CKSOIiXHG0eFFFMMbf7S/UAM9fLFkJO7PojUNPyD/OQ8LJHBY 8Qf7EUAgVFb3F+p/tN9pIlPl91rm/NG/nqCYZBX843UOYGTny3LBfv17RUMG HfChWOmtv3CCshYcdwqNALEf7SetJJbshCY1W7dK+cFyifvAuBoPBsm8Co6S g/CQuBsJCAEyBGy9dIVfQ8/HaygA/haOC5ajPkH/bJkQf2ikSE3iBZ2Dvg5q LGQ3O/menf7SK8k8KxvS5g5DyypfCP8OdkoAqFkFwfOXzIO4sAxAESE7dYFt AiLBEfmT3DxwIIwY6N8SLwKDwgJbJPOSVhwDXYyQCrYyQTE2BRlCdk2AjgXx bI2gEkICtq90GlqfxB3uxk4wG3GtJPNwX7IuXdjIZDmnA/xoIT0uBuyGLuCv BFeTX0CpseASd8GRtI+tq77wBrDRBD4Mfck8KEDygjhAeOlYTO4Sd3JA5cVV QwziEqDA4AHngHtAL4G57+EXBwQEQlW8BBy3LQnGAkIScbhMkBjigBuCOqCI b5FFykONHAI5bPy1ncikAA84ZMiN1UECYZERHQknMGBwOPCHZOtGgf85qASf AKPgOgnZsY9qIKimXZiYBA84mSAesTaAQvUCHlocMBARluH6kVPIfke7KEBn rvdn+QvZuTvGGpOf9UJmJuwXHRj7dQFbRpYCLkTJaguRuNtPDNtYA0eKpx+N IAnADawGKgGuDgGelVEy7wjSLCgj4G2+adXA945vg0+AK6gWVANXNKUNPMAZ x3yRuKMCDAHYJfPAE+Ce4B4IJDAB1gPjLQmkaYHeYHfgvqgHOlIWN8sEtMGb oepgEJzeUJyWCQYIjEJqJ3tW22kD6AMND2wcskbGAXdSD5Q09DQSd+6BKIzI I9PlL2iuDBUSd7O+fwTy5wliJwiKJfPKHlGWUsETIgrhZxHcbFzOCpOkl2BE wCEQv0g8GFkCWUUAIEBI0AWgO0jcXQGOgi6AH0sRgPDCfjiyWP0Sd/qEw4xP LYtwEkzmhRaMDf+CYR0fDjvXw+P+DZb4ZRMPyY5XkK/VjXg/jQU5cXQAFxs4 Alr3FVtC4NxCdmjB+AOgALNz9zvaPc9ofWWA4cNHLjeHizP/HexEB8aCV1xC zumQuAMMpoaEJGdBRAECgpDwXBnwJPOQNGSDhdxZ0ImHGRoLutj0R2cDgJxf 8COAK3gD9HLYf5tBZEmhBEwXGsybuBBWB7WML4JlsAzSdEAfWAZBBr2y1YCz 7l/wIuNsWAbjEHMI+EtKLmTnXTBF6O6OdkYBy4tWToQAsgMO/hEWVdiXsSBs bvaxZiCqND8aD+0/1METpFrgSxEYKAcnNRkfboH473uwqwvZYeOiA9sEroxy ENRkb1htVH+Wct5BFo0eYDUGBKAXELzoB8rBFFwyQvIQHfyCGNbQNfXBlIEO BJHSuqsPAhjIIp2oFFyO7EDXTAnZOW/CPnC0sWAG8HBw3xFmJX2UBa0M/1ni 7iQiKECQqOWigxeDD+CjI2SnGlNNrFASd7pBEFU4I/Z1LlGGaASCK0EtBxeI cLGwQMgMjgXHTQO9iswuRMYCIswrLG80Ly9CPcB3kCs3L6NEQFLcIfSypQem h1x2BDzalQH0AEWBOUBx8GC35VCExFg8Xy46AmHibsthLYgRNubwL9HBhwnI AGRwqnPiAeoiBS8AA0ReyCczJaR8YCbWBWNBudZlAA0gF5zVhQblWu2UM0Ae gRKRS0gTqhA+B5ACUU2W0GsALZoSeg3GDSypsaCgRlgiKPQX0OuEJVUrKWEy bycnOpjOSeKigzgJ80VCjhJhvFsUTg66MDiIsaDm4NaQJyMK1Y2CGUMFX12B 8GhHCyGnUOQAWyDAkF1TTp+mKZw4kL4uA9C6hRMVgV83L/MDCLaQDsYCXEIX 0I9xAREUaAq9ctGytd7SIHjl1BPvocvUZS8AmZ/a7sKX2TsWfuXsfncAC5Md bqbhB8BHrBK6JRE+Z2G0zMJmLqAonOqScG2AfVkZQAaAJ+Si/LRAX28APRzD 4AUQ6lBIiA6+ANQQQcEbwF9WLkvcaQvBcqo7jcH9JvkgQvgVpsu+cmE5PgeS Zl44L0uIdXRUhcBCfCEvZ+LQLazD2eD6guFC8Mdto4ZHYAmXDQn/ZfbChGFY zkmHkovThQYNPAsFtEH5L1zoBzAmbH6geEe7XE3lgCo3FhRs2eXMEprBUeHB TrDlvPGW7edSB4k7wdYLTcQTHYzW3W9OIq67kB1HoMqQBxga9hcedV0qcF0y jyOgkCAFKgpDdsYEdd3T8Gi3BnBKtOR0c9FBNsBLgF+HA7AIluWSeRuDfsG4 LWt4vnLA1QGIY324HMRY8FvAQvMiKA1DdpIjm81oDmKYuLP6YIYSd2mpFpYt wt4WHVRATFQAdIGCIUNd8GD3FnEfeBF8hX1DTtOkJl32IfAU4A3rdGIA8d8Z wFUzNSQczua4cr1BQN28TJf2IUzmBQweXlw5PsP95lRn2jvafQ7pKS6A2pyw IFuGPckD2D8qhSG70yFQTnXoNRQWBCSOhHgA2KHp0DhHbuKY4A0rBcO6hZPk kPw3FhSY/ejOAsCct6Dp0FbVOBgLAjO6O084ZUGBoiNAKwwNugFcbL45F5vz kBOzGBkcjtTOXfG5zNygQMazPbwDCL7oACxD5eHBLrs0HNQTaOichw8vXyD9 4CWnO1wf4gsYVuq/oOHRrqzWRaMDiC6Gh13B6OCMawxQ+7L7lcv0hwc7C10e 4Do1FsymDBVEB7iC6o3qDD14tIt6kAV0IN5DnwSHYVkwFtTKWQZADNCBdV3i rn3ILoAftAIriGQ2+BKlAFw4QqwUiBAsCA+40OAgDUL35vIYygy3TqwTV8SL gYJ4sJsPIkyuaR1EelhmsBXUQaT+nRfcB2PBOMAwsAbHV8ADdAePdicSEQrf SQEyKfDhQRFXCe+qOhz3JUU3L3s/0UUkGS+AFgL/qAsoRvTG5AH8cGPB8VEZ IBrCLKhfVQ4/AoEE9cKHiBlXZygtFI8yiMEnZIoz4fDVBcwjkgtaAIet6KAf 0RZHBmhl+BXqce650OAgce33YUEgojJGGyFCumEy70C29tMTPA8pcNFBzND9 JnE3BzADDKDMAv+C1cAMIEpXRtgiemMyiZqDhSFfLpNIE5N/jAUlEii5gxy8 KmRXCTssyFVoAEAASQkJ5JX44NgV8BK5BSHEX6ItEWTwNjzauRhsCaREjQGW TFwmaZskHhveCBO0TOKxwWXgyTg28BBRGZ8UB0dhIoOYKFD8EK3wHdFB+8Ij qOrjLxgL2hcacN8DG2LijjFClAAC0E24id2U3UvQYt+BRaDkdAFbEGcAPYBT D0ZXR4TN1Q/Uh3gyCw4IQAQwSNS1hOz2K+q5hFwxInGXswn6ZASAMRlE5Vpd gg6wrAsNGuu6CVkb1cRY0I3gQoDQRRNDg3aAOhUsZ6MI5GoS6kLMdYk7lESU kKQoO1o14EPUVtHB/5cZoHZ4Q8RFoS/oEnmFDOLk5nMQpcsD3G+McrPEo10g wwzASSEDlCl4BbJEhVidYV/GFHkBfLDYAG2Abom2DKJSpiCXJe5SPGWESd01 ERdFWvBjbBUDGcublMNY0Po1OVr/rebGivIPc0H9yvIyVgTxTKi+ioIC7Ewe 4ZPyVRxNuABGJ466l0Yyz13XgQP4penycgGiEpFOMcYWA0AbjBVjbDQAIkm2 7MimdQht1I+8MVbFvaLqzkt4VYyxmUXuhxqBw+KwBHIoa4gX7hJjipbFYMbI sLI4LCEDzA8Wi9WqjIK0rOqh6gsYpnHkSYShi2BYTirCHoLWlQ4PdmE5yAAX hYkAK5yXJVX2HYsDqA7l8AVAiJgfUDxOA7aIzF5uUU+Qj0ADeBSrhzXFsFwd AqNgvrDQkRahda6aweKwpI44aNIuym+MCD+iPULmx9OgWdzGLQz4CmSD8mIU MTDQgFg9lRetES4A90Ed4AVQLRTNiS4MHtKyEgq9sEiIW4yxYYbwAHiASUIl YcFRXqyneA3Ki3STUyF65QwgLSkGChVjbAWGe51XRGGYMviPlTqcirsCY4IC on44joEwStksCNM5BiNosV2m3AlOkL3wCNsldARKUbLYLrtOBZE4im9EEEAa BD5XZZjPBRUPdgBGPMD95omIYwQwer2AgT1GC9PyL5kXYNQDkECMCGu/maLb LzT4YzsDWHoyPQ+7hl3ibmKXophZVRkxduW2jZ3GLpvgsVsStuw+CFmSMQCJ 78uIslPZZe50edyMAZvMTs6XzPPA1CIId/+7nR0pz81YAwDaMZGGdgaPwJ4H Rmu3tGvaPe0yd1I7oN347moHaNTamfW6dp+LNp/YrpSQAqjbne0yd1Y3adke 7LBFLwAAWBovjZjGTKOmcdPIaew0eho/jaDGTmO35CUgiqIBAACsAn83W8Sp 0SrguagBrBqtAs0xUiMM4NRISii33Rf/bqbGl4DnAqIUAzg1hhp/jcDGYKOw cdi4aZwnJBRWjRsDF1tcqQxAbNQ0amyajZxGVGPwataIarQKQBuvjdjGbKO2 cdvIbSQnaiBmYKILXGK/UCuyk4g+gDeABQoAaExeZ2YFUdqvjRLHcEvGNoAC YHanEagDAC1EGsgy64u0xGGQjrsV8OsEh/ZGBQAZAEn464OXgQ9ITLeNcscX AIvXYUsbsiRsJq87yZDxpo5B6Xkn1hkwAko1ooO1IMfncCQYCgsUAIPEgAGy jLaRXhzLKABIIymELkxPUcIQo3jJKQDqVw0ExQccYC8YksMInEP8Cl8AFwxF wZ14ZFDHpRvbDkaBzZ5xjOYYb/w5NhbDAMYxwha8EWv4cbSLzQEMfpXEYoRG 8eIYMLjQUQZqcDVAyaDJcT44kcMz8BxfcRdHFh2EyesImdPUmRx7VXmABB/R kekobySNzA+ociANIIA7rg+CR0odPOrgAAoAewHaQA73HkvRgRiAinQABcDf 0e/Yd/TGXBwHj4ZHPYEC4HAgjxDDARDmheYCBYAawGdUh1gawOiWjhBDBUAg g662UPBrfB19jrewjQi7ABhhvbDLjSYAdVkYn6NC8I8wXjQ0QByhAz8LSs96 4VZQh0BfgINcjrNHXMHFgC3kclRAGMrYANc56iFGsYwQYxGXXRzDg4aGyiDV sYzwe6z0VAr0jcjH4mNSMe/4fFwU8L6Ij8pHxeNPUa4SfGxEQYuijxDH7yPx EeK4S8CpmQC+EdsECVyxwaCwnekmXAYkj4gDeIFXBAjwN8wDlCnSdKS4fyIb QAFwS4AMxNaAAB0BCpwdoCpXaIA/uqrag2UQn2PcTEn4p3EDpBKhiwoAGoCL jQxASYixtAdZWC5H9woHces4BlgdCS0CTixBIABQJE6nB1AAUBIihxZHxaMT sVoABFgDYOT0BPKbB0R18R1lIjNB2gHIFDC6FGTgceKx5QA+wucqCT5HHsIX ALQDQGz8fRyhYi0DOKEQYpQILEh0Aerej9Cv1EYY4KORg+w5Xhz/DKIDZYco QdcIcTQirA7eADC6sdEyLrfAduQ/eg3EcByGYwPEUV0IQ8itsAs+j2FHtkI6 MUrncqk2HBmqcmMAUc3F8dgQBlg4MnNqAGvHzKMrTg5gvTjVKZYKTiZHXEcO 4X2GhpQeikMgjseqNEANbtohGGx+dBMoA6IacoECoAxwIgklSDg0CPu4i6OL LQ0we0OW0W+yDbO77Z8R4e7IbJtBIcvSgrbF151qAhw0ikKWyQrjRLcEBQBm rA4hB9gpYgk/jkWBQOLHMVo3P2A85B9MjvenvKGk8OPIZ9Ak1ByBBTtEo4Dc McVYP4gUaB4nCjXHl8ANAIhocszZZV1aAKYToFw3UndAvEgPlBT2E+YBBcDw gApA6UJHUgTUkSSBGJy4wuqnjkwelRw/jjGAQ5UashvpYVuNISLxkRK5SsK0 g0CojgwohDEgjjgeyBXn0GaAkHQxpBwqivJGHI+GYcKwR2hIpgU1it1IawGL kLORkMtIBjM6cC2AUKGk7hfocpRIbjmSNRbJaN1dxCJpmFgoQA4tkrXBrINF 8q/ISjAkCgY/jh+KYZzJ0R0RA+gX7iT/bjAAw4Y7Tqb1kwS43fLyLvc2BQAn pSK5k2TAqRAAidIHB4cLMY8wXIA4PnxGElo5lFwjwyppQGEZ7iTTifMcl6MM gOt4SsRJXhSKjhy3niT4sMoAcUwsChQ+BmbHjyMNoM6gk5RLkhB7PwIen6Rc MrZWl5Q30gBAiBpFawFEMgIJYrBd2TQgjkuDPwJe0eTI3ssjmBAhjjYAOsDX weSot/PGAS1cjmkCWsU85nngELgiuSObAAqAjkLchSBQIBgJbCt0B6HJaAve 4kjxhKBHJlwIAqGWJU86UkDwBNAChCneFvTIA4GD4IPxmVQAkBWYAEQDYRhR sJzgm9QT0ADsIMSRNB3EsW4AGjACYAHokdKkicCZBzU5EZAIwOB+BDxJemQJ DcR4HVtOtgdeCi6CfUsUIoEBncwCQCyqkxqMH8FwkgqgAEgJqCaXAOvJ9mQR IAlwa0tHhgp0B/RINYGe50kgGmACkFqGLFqKZkt+EnWxEGBb0A3okQKBVAGC 0gjQBChTpCMFAk2A+uQ7EkLpcnlQpi5skw4BBKUwLAL1oBSG2V2eAgjKQoTY SjBDFzQ5+jBULeVI8iRq0odRExgOpCMbFfELKsAtaCFAj0QjIA8QDgqHGmVA ICIAqGj01Ci9Bg+qGlzP0eT4VSB+uQfik7AC+oUWQAYgBKBHljqWAAICJ2Vs gAgwETDy3AT/SEcAJ6VBAApxucBNoiZdXWQAqSAq7gxAhYQ40g2cAkuC/kQ6 kpAlS+KJvCO3Li+CU0s5oTcZEQBiaAESLvTIrcBBwEHQm/wGWgGsADQeeqQS oEcJgxNUngfGAyoC1UWGQuWCm0xHLgFmFxSBhQDRAEtJj2QCIDTokVdK4l4m A1OZS8FPpiObAJ3KckJ8ElSA5FHy+DA+WfSBbcWnMsoSBHBQviOBFKUOZovE BVOpegGhECLScRdH3cGUQUDQPHhOpiN1lceWvYWa8h1pxUgQEARCSapKYmV6 wFpBoohMdSjokV6JfcFzRYlgYww8YggqFdqKKYDoRW9Bj9RbZCojFd3K/I+k S8+THYJjdCvdAIoJoqDiEWwAquhV0iPfXgkHLUGFYD8Qn8zCEV3yF5qLdGQ+ poh0BEhRniPflc2DRMm6hIGhrxwP9DKkAO9K6t8YYGz4cZxVlJKWPKjJAEEC o9GTeKAI0CMNf9+BEAGtYklwsaS3gCjTkeMBFFYWoKqUjkS7bDHUIFEXh0AL gPMgByxZfgcKAjcBm0C0BQlAVkhYKJF6k0+IqAW8hiBAj5wCgFpGk1KA0qRo AGdZBZj2lARgGPTIH4vl4gkBU0haCgiyAPqBk0s6kgrwPGgCJC2jEEiASkVv Us4i78BaXi1pPAsBIsAML2n5H1ATQC2KABjKYSVoklORRWpvcRSeBWRLGByI gCAgBBgPgMS2lgaBiECEgAZQBUhayiliAG/L4QBq0m/RbqFHVgFQJWWAioQc AuIYp7AS/IluAtCCuuVCgGT5jsT25CuSLG0M94Bs8h3Z4QOJTbcIAqzJCAE9 MkQgIPgPSAEqP4+a3mQsRkAwBYAbqCn+A/FJWSURIEQxE7RWUC5Bk1eA2QPK 8ikgtExW4i7LABiRigjEMbTQtgFBsQHQVNGSi2MYoCeZtvonKh6Xl0mh3YbL EXp5GZBe+hwfcS4APYAcBEYBcQwDAIkCHd1L7yX50OQYiuGXzQFubcpLtWDC hHwpBlDGTS/bl9XEnUL3sn2ZgltJsi+3SyNDBQD+gYsCKHh4sC8JEhaI+SUA UxD57JDUwCCVl8CY30G1r3sJjAlqpWAYRUkhBibDwIZmQ9Rfmhd2KYeF7iUF UiTpDNRg4hGKCy2AmYEHUwGBRFRekgFySDHJ3uLHES0I57gMIHs0mNJLVx35 MmIQPMwhkUbyCDEWDabEYP5gXvhHyhufVsoX+AsvboZpCsPsCAoQiVAQIiYz xY5wvYwYOFFoiwxJJeb2jCB5ipvrmDA9LAPJ7uXNKX3gMkhLdS+FHF7JFSbO oVLnEbhecgTkhxcmM+aFcIVp9Qkv9jABCPw4/aXGwPaI/ZpezjHpcNVKOebh QGtFxcyj5BSVlxqD9QXyoXupMSAkxAzlmOBCOSadwWhjFQPPsQsImdSiRwK5 4CGRO+tjUoviinPBatwK0xZU9YEz3OSgg5tM3cK+6zjRvUx8pDCnl301yk/N 0bCGILmgIA43mSIkA8PNEJaJaxCalTKNCDUv8qV/pTxVL6s7bjI7cyNFXaYd IHi4jPxhfqZCjN3LaoMuxK8wmVxh7hGCBamTZCZkoDSjydRfTmomPcnMjEcw 05kJsJlBUDFFCCSaY2bRcZFAh1M/DSYXCZEv8iX8w5VIvkwudC/fBV+xd6Z7 YSJXpiBfoui6l/ClzWMKE5+J67goEOtWmIwHwIgIU3mZJwAxVFDwmfaGRcED 5nppKehSnS8Zlj9MxIxibnppKRhGcCMSiT/M0sJi7npJM6glLhi7lzkOGyYT k3yJj6AcxBAzmtkSYQH68nk5Iwxj/jCvItPLzoQLEc4xB7kDiJe6l6EEFYIH 0XkZeKREQAqGEZWCi0L3spbhnGvUKS9nf4mERFH30pDZvexLrDLvAGrAQ6Ym IQYAGDgqPi91hEUbHuER0lawWCixxTFdbNABlMTr8Y+gX0gZjDUBdaLIdwdX bJ9pclQLyhXHDQmFsSbIQA2Qv3SxERUadW1N2mMaQDXxE3k9igHUdIpHjoZZ zWUgvatnHiH1gyLGw2ZvYaf5emwq4CEPm6w5w6a8ETrwqvkjCgokJkDItiYA YXvZ2LQW3BRFBxQ5FBB4obOJwkyJkTaHcaLIcoF3wYFTzDRB8hIWbaRNGGMe M4TYMtiqna98jrTN6AC1CLdpfAxs1jomBq9HAEMLwIdpggQwfAGsJjjCtiaA wbvgqTtCAhjWC6ID3Ob4r6kg3VRvOBagmzBF5yZOAoriGtFkTjZpYmPE4GZc YacJjsw84gqQmInN7+agYF4oXyxuegvigcFNDcS8wOW4GltKQRCCNKJI1QRF roJZ36wzhDCHlM5NPQDB7ru5jrBfBjhzNfjBAGc9LripB5jOMTihHgzO+WCE 82A04ZwcWG1oisXNSBwdgL/J15x7MTj1AD4EUeTk8ZU52UyebThhkG1NE6fm UFiQBzBBxhZcGRWH78PrMbYQDZlF6iUnm20AGkBrc7Rij3o9LhECJG1NMIOy 4MLwelyKhBqCf0FOzMDZgMGYkYsOrC+PkJMJo4C5zgQZkuAllSQWkK/HKudI YpWQyzxCajnjEljOtqZqAzLwZoCwkQDpm8ECF8zrsQ4QA9AwKgskmyZIysCR YbJmERRMrjlXG8xFTOIREjcYkkTOmTf5nDO5tiZucM0ph8DJETrpdCLJQ+eO 8NBpQPnSHToFBW0YAqOgUw4RrTt0pqVWnJNN3KBvLrCJGxQ7kgYznXKIZASh k1kwblhzLtEOc6LIqVNysK0ZUrTnUMf+ChDHDmQVE6OZd6TIYQZinXmE7aVU AleTxPw4diAXVWKAPqcK8byQ+dknZH5inbYC72beEe4RPER2CjN8jkaB+MPv 0eUo2hJpkeiWnVMcF6JfIf+I7OQr9HVwmDIWamfxqK8D7TQwAAgDGatOXycR hNYJ/hkeoQkTkcWF6ACEE94pqePEuNhGGcjOkeS9obUJ/omJ4DnfifDOI0ME M+C53kBtKh75TnkELqK6U2jB+5oUGCHljXwnqtyAc9lZT+l3IDuFFqmM/uDC MzjRT4l1bmm0fbHOMUCR78aZdyQgslbyl4wmDGdlQA+RG9nxxDrXC5KHiyMB Mefw8uQ6xjoHCsRNsVjLgAaggMg7iiR5nkVHnSfZ6CYJ8dziOQzmBwGGT2fe 0QxA+cF05h3XG1IRbgG0U3OQ3nx6QgbnAC5Nq+ekhmyQ8+RBeDpjnTyI2V/O AOy5ZigKeMLInnGrOATYk4viLWAUoC/qECjPswFnY2uGkfR1yj0NQEFPVdFc JxFp4HFVrRGHJ7HOQ0JzpTKgGkxEqgEKiQYFomfeUQ5Ejjt41o1eE5iHhUKs swNn4PGvTD6RbH8wnWd25vIZRwPQJSIvIKLCxaedrgwJOVRATDz3YuUC4Uqs c4mwT0h8rj4tCJlHS49g7uC5siIZxDrXCDqamgG0E/cJINF9GpgCj6mDnwWu oeoZ/DQLlBHwCJQfoxq10+i0rqM+khxDksGN2yfJcaWYiBQW9CWpj8SGmQFe 4faZ/axtMlOWn9ZHmSe+IITGLshOVj/nD6iFpkN38vxZLuAsVAtGJ6KI2+fW Ux8xKGBlGgXkn6K/+mdfbfe5suJ3ghluUnmoQmIHRP7Jk2CmWBPknxoGj8B3 DgGa/rMP8j8ToJumwwkD1CMg6jx/QkC/jYwHgmR5blHG7qwUWGESBVc0UCbE 0wMaLMAzGCbQDNXPLkySrvrZGhwDwAlDn96T1QGFA4Jw7Zx6ASLyAISEvs7y sw5ALogBND6Bn0UBo+bBE2Cg/Ih1xiiCQhVP4id9Svpgk4x10qf8l3qCV9z7 8XxIvXOCThxERVZQisKbwSHnBM0hcTBJkk5QfJrTs7eg84x1ajRrXjLPr1il TQN64Yx1hhLGoBEEps5wJtZpFFsdJiLroBZBmec5jtHF8ExEnuNcMHgGasiV IdZ5jiMgEkKrIHRM1aAeFBHqPkhwQjzPcTVHwxiE6VWYx5SEqhApnH5QRGgB 6xAKYQoUrCNCkpHQFNy08SqQCaUqNER+kY/QKogLZjbCCZUDZDvKkqlQ8CBd YnLUCv0+rBdaoWQE4mcKTnOweIhjWkLFB6jQvGMKTrDlC03B6RKBFq1QBYS3 SQNav4SiMDYXoUtMAGMy9NZQLYFzWkK5naXQ6M4h0xL64HDMWeiEoVUQEmIx NByKXmiF2jyzoTZPaKikTmHJ9WqFyhy2oSm4uMTWE0938BQQVj0aE5rP6GY2 lHUXQjsYVVRaoSQHoqSvU0CYY2mFpk4qoAPRKsgm9BtqCS1glW9cj9lQT+jF 4JeUDdX8UTtTcDUJmeMhtKHJ70TLEUNNjmSAGcAmz+Mob9wmPOG6iT5HkyhK 9Pg4Ysg2qONSGwJHsqZ/Y8qpWEpDxjVBogkF7BdN1IECPuCiQBztg8q6GaGO BfcIimnGBA9tnzhRT6ZjLilKl1hFskTpAPCOjMdP9CFBtZqKuuN2hLhHSEFK VNVAkWOFgkTha8DNr+iW5gTajfiJBiB/Esk6Q+GIoQ5x0hQ43jTynBXMqo+B YTNhFt3pLBbqoiaukCRe1MJT5KRyNTytPsrOqo+Jq2O4Fb2gbM1EmF9R0g0Q 4uRpFiV5DqCsg1/RAVpjYmuWSCCSuBDMoh4WV4QM4LFZEk0YMAx+oiKGK+FP VEdi9wOJ/gfnGwpGFOfHkYzpBa05IsZCCfxC3OMgIXz2E20DwDkLiTUAMkAF 5ie6KKiCgkQ5C/6XhCZBsrrwE7XvKCOLo9ivlOjh0A3AzEGOfhG+AOzM1Sh3 Ll2mSRh6FB0pJRTF/xxN1JYT6JSO/noiBRzD4mhA4b1UHKUowHKEolmEn2gQ VFZY9VCPThV+ormzmNr3AR8h6VyNuobSVvDRiQF+FCR6pJuZ4TlToqmZbN02 sySamlmGxjGVHWWMEcgXdH4IH2UDKD0XCkfQn2hkbCMCcdw9MkZNjhcD0SiG 1M/psiAbHDIjieCbDan7Rxz5cZR2RAeyntKOjUGZU+Mpb7w0TNbWoBVSEeUK rTvaIhVRnkNLpCJKF4PS00WKBtgvuBzHY48MWud4rMDA2sOQBjfyLD7HlAHI YFdgvUC/YUgtPTiI1mYAkvKzIE1jPkm5czfSFimes7NWIWWNJkkLia+4b6g8 TnxY9ZQvjgGQHBjSNEAw9D9H+dl6ZR5vZLUFXMJC8tZ5cYSTxkTGAHOvEChB 0k6ajzAXzFNQE6tIDOl7IVjg56yQDkpjY3uxoiPZgMPgGqIkbBZLpFoEIQRn dBMZKdV3IUYhpWWEDmlupEKqgEiNDkIxpGQ4nBylVFG66Qw8GlA2o5zSMoIM gEGHKV0ZskpbpAqIhGKr9HBQ+6ol5i8NKLPOl44VcqIwKq0cROZSpZWDVhqL tFfa8pwcAEsdpC5MGZoKE1Z6/GQVgkrLCDCU2uKz1MLCKZUcMBcqpLKdB8er ak8qytAwHDGHCjRGCORQIePTh4kgYEvtAKMMUtWttChgBy2Rnki6m3tSaCYu AUUqL2U0zT//oRjSeunFJ15qyOktkDMqpHbE2ByG9Ct2WHCWlkgxAzVM8oOb sEV6FhCX/uMqpDtMkidwC2IKR3OXKTuBWxbTPWn8I0maLXFvFPlcAH2rzCKG tDb3WABrXgZQpBamGgXHtPgHPExGbC+JDYuECmmZY3wEX5CZskxPcxQTmynN lAQ6L6yTzkzTf+cCxODINE+2l+NpbiJ/phKDdIQ8KUmqveQ7VUh1hDYRpin4 0uR4kiwjjA/ylybF4IZhkWrKMvgCTE2ZkQS6EojSk0rYLagkEAq5poBSgiTZ NHrZCoM4bjnmG0GhPcIKxW3qAKWarjYGk/GHW4PblP9gc3ObngH6HKpReWP/ MThBA8j/uRwtcSsSTqQfrz4qOI2iVTBVOYmrqIjb9JDwUBw6TU7dAEfQw+nu g2Rw7VzIgRC5oBdHz6kKgZKAGTibMiO7RTmkNijVFHV6qntIuhwmpy6Do8el wW2aPGMTXm/wpneGBWfodDhyF70lTB9nilsaiYTPkWQQMkB3HU4VgrqQx4Lb FG1g/1R8ZufApAaI1ib5jyfHBggmUk1fE2WAOqT2UfozBMEM+ESvp9iIfZyd E3zaikg5GHKQnMzIc0Gh7njqlFGbJmTGhakb8GlfgtbJZ2DQhQH4j4acQybJ IILAGRWc9hIBnILTOADgDMkROpU5TApEpsxIrwEUTg6Sg9h7JlAdH844t+mB sYA6UFDS8RW0DBLUgYLEM4OqH2yL3m82WFhTjlzW82eoOiiCUk05cmhN7aPX AHDGQTVszBemnCQ5TOgDlfygouGg1h8Pp14DzhzcamzqNcAMmU4Fpz3UW+Kk dPs4VfkjNGw4qBmBpCcHFc6wLDVDDhQAhYwUCepJztF5Qk10DSP+jhLUeCbV FI/jNuUV1eEOBxkF/qMvcYs6NYkjCme6qG6AVUYXxn/JjFwY2DSun76V1ku7 k0QqOHWj5gnKGGKALmrrJXUC9URjNlHNACsOiGOAAVeAB7gKXBzXipKdSoLk 0+SY9MzakAscQoUnQaq5ZlmA/CCTSlILaqHPCx1XLJ0oSU0UIEkxCmUELykj 9dKlSTB0jlI9qZoE/oMkddk4B2gHxlYCFILULIKO1OUoqAlu4BECBry5FlYs FTvzV6iZMlK3S0NJPae8UVAz0CNICmq4nO4DWF3+UrfoBRqEbXViqTbMFIjL AoP4S00L+ozGZYWIftV3ERb3cnS/kKruc9VUppogFfMwykhtBIjGqS0In6MB AvkgYjhkGiAMEOVERmrlQCH6I0plClIrB8GCKSe7449xTz2UZSUFqR04gKrA gP/QfwCo2uSih4vUjyOj8AlHIbwkVjAXqnPFP0pIMlvyTTOo8uQOhI0mi6ro wBKnUS3NoE+HqWrR6sdDNaQKYsxjLlTrDFnPhWoyQg/RUV2pKjk6qjGvl8X6 U6EaUuWjtuZoqgfVbuLHwJ0aUg1kCEJpnQvVQEa5gFEgSG0DJFSHqTAL9GZR NaE5IH05vgESixtOMOR2UfFYHuRBXAa2HCwRQapn8Arq+VSoegvsBVpVUOTC CqJCS12jUAzinVrNYapZtYg58PSqahDAY1HNsCoZoOB0SN1nQD+rN1rVSkJK dZ/xEfWq/lMZqS3CYsh9rq4KpwucOlWPO3hNr2q38MOYKBhuxhUbE/VTCIJW 9e0xjpqsBgpcMLTUAMXE82OAA1jJCVLViHIriKhC1SQisWoZ6FPpU4VSRip9 asZnQh2tnhosbNfPu9qJM10WcxiWylZHpErPiYkDMqHQPVStYmA2oapVZMoA JfOY9lGWoQGUaD3R1mZx9XMAOPtHfFaNBfMDmAUtVTgSoWOkSh0/qi/H66r5 4pAKUJjGSUxCqurUOIQZwO7ISJUYCFJtmurUFY0+9ONICzEtSlN/dxDH9qri gyApX02BcICmnO1VsabJsVS4LHBZwCziq5PUW6oldb8aYJ3HEViJI6Cv4Uh8 Ncjxz5Q3Ntvsde3NK+ECMTpAWoivnhqynnUCPGdztZvwDa0TBAYIkIrHi9Og 4FX6bWuIWFHIcfvHP0OQY9VgYc0TPAZIosw2A09cI74KnPDESZporOqNuozS swGX6NyvRgrkczRWdoHB1MFaLlsjVDBHINyDqidzqtihVN2vlkA0B1BWZYH6 Ir46caB7Jg9DrBOHiSds9T4TLqWygkq4rGtJCCRsVb95mHOyBgw8nauxVuSZ tRZ4/bSwoVmnjljWbwjFkcpqcXA55iC6hZnHzKAKRKFAZR1lLBAtIhXJAqSQ w88ZisSyxiI6f1RW9OGl1MHqWKAkSEOdrEePLkx2k9E6WeMLJlpppWnHZial 1aLjc/RjJHXKkF7F9WmilV0gV6Gyqp+GERRR9moi4do5XFgv0FctrfvVxwBd YmHKbFslnA0UnzJWDgOGdWYA3jA0QBVrX0bV8UF8tQ5Q5lhDJFf9ClvJ/aoF h0bKbEPLGTgdrGi5LKkCIA1AkRM4QRypray7PKji0a8A0oBoTltHRK20U8O1 1cUmT1J6BrU8hIZVwQSnyOcoYIoD1L6+oawElkFq5tpaSPwReU8lI8nWYWQW IfERx7xPNB0OmRMqU+owEvRpsKsWXFuxDwnTjc5aIvOI4GwgBA8hkCpDhisZ Dt46cUVHTFsVEH1VeWPEldnKlrMyiFKHkYkPbyvOQU74cdW4wiwSqybXB4dH AFeIeegtsFthph6BJivItSjUmys6CgrgZaUTEue0dVEQ/5hQXVuvh/WokuvO 1dEKxbx1mhyLpjYTJd0ZYOcaBZ1B/Fz1BHPUtCrTNZihOmC3xiAqhBYIlocO x+XoVlTIOE2PrgunhGsKNfAo2BodXhzLrgdGeOvCCRsBYxVspU5ihKFPwZaa CR1BkmBKDiMXTgsDBSvYlZeKO/m5BskuBoo1HYfflZUAXwq8PjLBrnqI3Qf3 BYCgsyJINg7eBXmCbAnjdf7gd9WhFAV+rokCuGQoYW+IeZ2FNl51dp3XMAQx dey6c20ZpFbvrqZX4chCE+zaMgiXdF7lXcO60yLr1YlCzJw4vF79mzXHaN26 CgGCWbi9cmIAi77X5icxkhbiCC29OlHUhLkFCejsVd7VBF2+1hmaoGdXno3h NY+p0dk8glDFEJhXnc0AavfBda25BqdkO5jXEKOkDvN6+Pq5msLOBc6bv+ow MhbSXoyMTTARG9Q7kd7RVXhiRDCXHl3jAGLXdOuI4x6pcc0OrjE1rvmyhUI0 pInay9wj5MmAP3MGhqseIuHKbmWpHl2zrddWCOzZVQ/xiQT+RGArQBFY+KfU 8+hKdcUosFuhonnUo6sectsaUgS4KicvjpPH4mMFUw1AWuiymhzVAHhSfyj2 9QU7B1lHlAFSsBDHoSG/cZWxFP04qgHSADSAa+cP1pZwRhxMfrCyHU1UNUAb 4PCZg30OnFPYVHoyWice9UHXhB2BMKc2BpzUF+y9YaESZm3CzhnYqgRJyBav AAzrcxTDzgx+qJJHhKi8Md+FfZJJvmCFrBHVj+IaFouYPQWxBh77ZhNJUabL EQ+r4ZHCGhsBTznYecL+NC6Rg0WVQByrGp2DPujHsaqhB5g6tQhRrvPG1ZLL 0+RIp/sXQCDpdB7NnCklNiEW+iRKYFx7nfJGokQlFRUBip03wjmymBfHqKFg y+nZkhwhwOkOseGlh2Mqlg0wLjjEvhH2CAOTCqbiZ0vkc5zdze5WB6mD+Qk2 kxILaupILmJBTa6RWygxtsDgXah/9mJXC5DRRawegLj5hLsYqDIvhy7HaixG DuI4nfrFtlbljdOpmWb+EtNaHkSAuGA/joeDKmkTNR3bLf0iuBwWj6Waduy3 tMsJjs0tRR+ysaoXQcHyppLAclQD2l3rseAIsKPi8XCQ5qg+OFDrsQVZE5vP kfG41jHNcWPFAONLdOyWhv+6eMSTtgBSCNsEbiwFEnKlke0kShrsENnYNQPL YRihW+XGCm9wCU7PjYH04giqbgqGbgxOC8EC+RsyUsex4JzJOuDKrOhY/QIZ IOuphlglomNThFkv1elPFj+B2Lh+xg1zSA8JwwZB8ij7QBG4gmMRG/YF5SQy clW0lI1K5hgXstIHrOwk0+j6kyUXWEJVr4fXrqxV5yo7lSUXxD9SIAbSsmwD Qc96WeHG5rtwDsLUxWNaiBtrZMUjADzRsfxLhkE6EaLyOkVGAh9II3RZa8Ej 1eDql23iQXUMDCW2NQdddlUSlwV9DiO+puDYycTOTWORjXUZsGQRJPhSdOyc kxt79KCNIiPxOIsqHSk3dlfQjqquomPnCeRCb9No1lrAk6VvDQoiq5PSN4Id QAbALxvNphDeCB86ZKRRLEJqcvwe0Jd4EMlLxaMyErRZc1RG4iU/o71ZCIeu 0JfZdtxtkUYEos3ZyoEcpMf6ceyU6lA9c8lZ3ZwNDvRYkZt1yE5votXZipyG NDyrmwOGQhw7pRnXk2NFDg87iJ2UlkrVs7o5nSZE5TxbRmAieVsVENaLiafp E2Sqh5h9Bh5Nn30rOIB/Fj7LBojXkWdppb3HUuI7KpBBoF1iWluzsxsDiip9 tnKAgjiAQmgrtBYH7mzlIC17oDXwiAHkrwfa680hUwEBgtR9QmizsAfamuyB NpEwofUXLAw0tC5aRWuLdu7FXyPftWiVnn5Dh+f/lUA7iT3QoiZGtF8E+qgx gT5rTHCaLh81jBba8KxXNDyrMXDIJmebtHc6/azywzR3n53S3ul0kAoAz2BT ombgEiBsYWn3spABlwPblF3QYFXP7hGmnOlENK2BIeNBkCSNGBiwJ/RZ80Nv w+WSnJXT4gt0nKvD5SPjwcggzNCThT7rcXkTlkGc1sqwUBWtNmdRhXJCneef lky6AK3TfjTTdFtQykAwFL35ryHRJGgRtbDZQS3FxEkbnkXUbk07tQvGymkU E1RLMRHKHmqtDKTXepx7hbnYv6SH/mehKFFZu2KdlqjwUeK4gQYPtUQFYcYq Q7R1qV1USWU7taUNwyo/4UckOQj60GcRpqnW5ixmQEWrrDW9slx1hfRZHYri U0RHEoHNAQjps6uE4iwTc/k4sONCJme7tXA9bi1PcllQbJjW2hEYXU8b+uzD yBR1nhUDnNTOs/ODKNw3NPFxOFAyokCrszuJ3cZ5dq4Kepyr0lqrjmGAhN15 luXR+kxHCF57sywPVl2bluUR6Jgj9h5ZHtJWgC0iZWrS+XvYBhiAU9fOquNg MmCAS2CKDGxzPZuufcJMte2YReiZCmfnK3IQd8jAlpymsXG/AHBWtvONQAEs FWGLm5N65S9Dj8iH8yGcE2dbQ2yq8mxHj8SIga1qQyD7nw3OQQaynrGS0Yb6 6TyLEznOzmCrs8dVZu3JcUxXwdzVLhAYD8/WqS156j5bF7vaJkrvtW1HeEGE 9jwLL1BaWceqnq+sakGNQrdZXCDbshHbtPQh4gfZtvqhXgifoRY2c73HNBql ZrjpNJrbSmooNfnayZMkw2/7tA3b8lKhDgCEvC3IAI6juHXFxRXJtsECuC1e lerYXy3OVm5dn73ZdUGMZQCbt52tgh51II7YesqXFgb7KG07Hj7Vsb1Hs0A9 NZZ5nlXdCl2nc1DJQGl1VnV7l207QhVfkM3PcpktaBXziOzNQhXPs1DFoqPu djKKZ8DdAm/bAG7W+azvFpRatYUqcjupjs5bSoG66Xgr6oTeMkXOSzdbqGJN gkNru8052FjOswqI1y1ThLxanW0DGJjOs3WGMi2pimYAepQknGcrCYqC8UHv EX4bGMkMjmfet6DUOWEOszdrTbBv4hWpjv1bNezJsX9rK33fZmj5txlaAK7F If0HnR3gWhzmiAZcOIfDNoKLkpPbzmutCWjYQMcPNQbgwIVz+F/Dsm1Ha0Li lcJBwT0vgR6tCb/aEO56M4XrwIWn5AH2C03ULyTlJ6Iquw3hjj91rCdcV6hJ JIwQw02BEFFtCe/bhuYFZdf5Ka3Ocgu+gPsEQw7tg40awrUUIHHRXVCfIC5I i4xwLfvTHnH5sh+D9+1Wp32il+PZaHH/DP6CLm7flH+bGoyi6VxRg9SJmkF0 wMLWe3xwZGwDFK/bOMB5FmRAp63O4kxvtndceOl5dg4gcmMJ5m4zsemybeke 153Zm9V3hUt7j6kT/SwCte24PdgYTKfOs98F0CdXDkZzcrwDcBgwnE4H+k0a IML48KhBOh1gsNPaMscA5Tw7M4WxfqbOs4aP0mh1Ng9Q1aAk5G5LGxeFKggq l7HZm42xqBBEoCfHHIv8spbLQFgtwKUerR/HRcFEIphK8uThcsW6kC4Vp6cy EyVXhgRmeGeRuQtXT4YGAZorhghIDj+huZtSkyMwY3jjctXm1lUSmcAMecQN xb/hZIDminM/tfLGcK6TbtGqAFBowuO8uYSEaQcMYa7IMwzmMhiKNhWV81Nc 9noovhQdFES1uZdBXui7wFtzWlCkuhyvh7cGfq5QU5vrAk1GHEAUnzI1B04X snNgmOhCug/It+lckdYGMpjLeJUDaCMtutgHzGLexKI7kSu/anM5MbjVgy4n ZkbXez3p5pDiiBVM/ya7jHlj0c1f1hliAIpapWedocV3cawzEG3buXqC6ydd Uu1T07UMgG2BuqBCUUZRF/NwvlLpBjOWoP0tl+4uZb5AkKwzaA4GmopHq+7j saZ7SJgnfGTzmOnbjMdDoqZr+oyfcnT5gtEB8+dZtx7XESDrQlFCn89XhEk0 06WLzHTpJiMyj3WGd2hN90CWsl3kInUPZC9Jl+7zRtsaeKwjHg17ujqOjcEM zOdYZ6ADMA1rugqeGmNN1xc52XUf/COcupZczC69Jo8ganXporsaEyVQMOkh s/7KwgVtUVhnBj7FkSZH1w6gtLLosnbLBYxdfkFrF7TV2j3p3gFCku0zPBJi 97arI7Xp6mSXBQjCr65FF6ppx6jq6heGqyysi0Jc1baL3FWjwSzEF8Nd/KFK 1ywBixN4NlFlPILRNsRwdxcCQehnHmSBusoyCtyy4BW3XgDvkmU5usQ7l6g2 97hapnVAhnGPqu1c4k17l7MhdS3qkEV4OGSjUEIXUg1wRNQwXDsLDYEBF4CD pQ0AxLUlGCC6kKG5Aag2lymSY/HYanMnckfUB++bQfl10J3IZUwZu8+BjQH3 tp2b4f2jdCG5KPOVc8FI5cPLL1M3VXhxCXHM1ox9cEb44Q2PPngzPguDem46 l6YrvS0DcHirN4qCoyzAJgQbzGXe7OgEChheCOyDF85wIAkOHiN7vHeAYt6D 98K75HUl9nQnCvKPbkwX8l3A2FVy0ga7kM64/giWty3qQj1/NFHjAHGA6MNk Qp5DM9hrVnWJKgIDNG8X0jl49BqWGjbaAHVXGKthIybCMIBzShKsD2fECiYT sBgZm4A4OmHFYnVYPy/8RvE5jODxyhvdP0KLwqLSE9E7gJW5HnptCTOqRubM w897BsjawDk9g+ACPmgwFNO7QACv4AqGtCbHKI31E+mwR5CUwOO+oegJDGeq l9D7yFgg+HmDt6pHwOzFceIwkByWCguWCKrH/V/NYDpH60QbPCDwm4pHXy9M 00U4612D+m8PmflHx6SVxuWY7BXVcmUPvWtQg2fgMf+IP/TzehqOk7AwZu+4 gGaCnP044gvmcJcBUCKyF9R0kzsc+HmJoIjac6/4SyGz3PX2ltEUMrxCE627 d9373qB+znunZcu1wST/kEUb6p2CgDdmva7QHyuEI44542qe+nlbNgGqUEmM 5TEAnj30fhs/B9YxP29acMxJkHQsWHqCuhMkZm8EYdrp540gqM9kvFnaCMKr sON79IAfkXxrjomE92zKt4yQ9dTQ2Rekh35e9gmps+Ir8/2GxHxXZ37en4gP If8o7dVFAhIFBjiIsCgwcq5YlzFANFFVrrkxBwf1LwkafoRw/GuYicDIap20 lRJKCW36kgJ/unuw/1we88Gh5Mj7xDG5vm3Ppm8GNNcDgXxwWAqUR1IJiOLW 8W1U7vC4rX2zXhzfty9stOrQ9PWG0iDxjt3QHilUDUASfkyUxkSunXwF96ot yNy7dWxA+F9GIOHHBoSBFRgZt1rboD8BKKo0gqSSI8QzfzhlKiCzdaDNmcfc dOtoBlCDSp6KuPLGm4QNjr6UgQyvreTimg2R02voV/QoLDDGrn7NUM1PYwHs 9+uLPZnwLi63jtgTjG34UVd4F7l+8hZaLzzcDCQv8pa3deRFom53v5jTLayj VxfJ38XG0TrhAGQBpycJsQRKAgH1AiPrRueu7+3WcfJ3mEiJZSBNnLiEsUyF dfvbBrkomGp1kRQVV+/295fCQwg/QjADvevf92cgQZnq/r0UqZ4OZfVf+W8j Mwfo/v0uLEfCaf3fjqb8Y6T1iwsAo2EpBZpWXaSeNPz47eW5MYAXwFvH+hnj VAE8yvDHDiahRSGvC7AL8ak6Kd05MRG8sjYRidxUNfA498pC4hQThHFIh2T+ 0tP5IyKmZiBrgbpTxaOn06pb9q0FxnXTvRFgEs2PdwVcC5z61gJlti9gEs1U MPx4k8CfEIHVEOHHcFo0xn1QKA07Znx2W5XOrWNSyLQwXAEzeL7gGUpP0tT8 IevJcxPQJoEvA/tbYCRxx30AikGPOnjFwL0T06YUmHqBMJ3GAYlUuaFfXMPQ aQv6IzrqNk/SszO6RobCMw4cW1k4JYHBkArINGdjK6j7jdVFpjnhpzABKTCq NQxFnC06BqweJn/ggUlvZQMrBj4csgHKbX9gMG0AMhMMhpS+odsUwcDYFBwn uHmyApbBRnUrwSoTMMNNNQ4sLKgybDirnsmI+Y0TmMmwFJD+2sUmv9jTP/Cv NwNZWiBajf3Cj1VCYDB5ruVqbwWiSNiEwfWwCS80ExnccsUj8BCev0JEXaEy +OGpixQivslOwaFfISIQOPyosOQGB4W2qzJghaUCAu+2dRQHlxEeD2HH0Scb AEQb+sXsaA9WwK2gluMuRB485YxRpMuaW+HHaoTUFg5QjZD+OhElv8HaFfCK hgfKKNAqZmovjvhX168CAP+6ElU8xgGWBnAAO8C4DSHcjJEBpGfjAM2YZO1C uBlzEQ7zggusX5iBMm8dAuIYB9BD+HVLwplTkvBfgAzAQjU5tjcoHgbDvo6h dyH8F+AVKITbG5cd0weGEyfcNEzIIYRrwj3hqqtLGCh8UQifeS9KENhgmnBh gvR6Irk+EH4/jk3hRsaoREdSRGhtLm7JXhBHNaKrFuQIGFgD3AGmsVnhkMH3 YGbbdPwjCAvocGFhFwgINS0sYIpLVD1BBq6RsHC0EMDYEm46Xg0zj4wHp+ee tvsZ+oypNhBIrDwEn6y8EaNxFXkbgTWnnL6pSRDUdzCsarD6nHcZw41CDC44 telYRKk6NF8pw2vRYkfFNitcRCnCuhw3JZRdk6M2bSfm+1u4cobNC0dZznAy db/yGRZpKYTDaV4GOxyv1NIRh8DqBh6bZIsFvLB2FM5ZfwTU/URKkMGnVTDI cd9qsr0Nl2xZe9tbIwNBMqFyZCjdDocPJHVEity1k2MoAxAMP4cNDdkOjM1y eFJgaEDRMobLrxfHS1ofpPZqHRYPuzdgrvnL6ywF8poqGq5eFjvGi29P4Wl7 WLVWc5QDPEE6vWrfpiOvbKM7GOZsLH+/HbeGqkbzQ+wHBhUNJ2yywkvYoQKC WFKTHnYDHD7fnU3H75ZSVzScRn0LPwd0jxZisNpKJCv8HJgn4H1GtYNhs6nX AC9cB7IM1NAMqyyaeyeHGGRwyAwW4AGGDO3SEDGAMQ+AGNYwAAaywlDR7aWk Ttf5+f0S4Yh3vFlhfBpvWMdIWMA8QSJjAMcGXLDT1eR4vpSu1nHljU1idMQb ilfwJMYIDJqijoBdlS2TuLDk9DwyvEVyC5DI11KXmNHFK7ihtDa9xLiPi+Ox CukQglB6HqsqsURcWud/R7zkHJ5zGnXfCAzCMHHEFAdxOMB75ECPKgRJTCp2 5oK1JSYXcH1Dn5jU85LLsaA26ekSe+NwBZBIbxwcIOv5FXt7CCIqmF+xCEK2 I1L8l2ECLyY/jr3gygAk0rQ4Xh0Vw3khkaoMO8K1U6myWMDtsjtekNRdJvG+ w1VcM1D2LtZQxQIPWjF4cRssK84VCwxexQA2WChGYN+B2pg64Yqnh5QcTekh k1V8LHgVR2ShxPuOX3GtePp6LBZmJIt5xaDiaHGyOFgcKNYWszuexcNigYe0 OH1LFoYWi4spOdxiVPHHA+kqKx7HkUEiCGhhWTFQolvMiJGWZov5dGpiOykT dMCaLX4vEDc7QkCaLnFkEEgjDpUVB2+rDBNPZ28nUe1ZGRgWD0EGk/6I6IC3 NWK8oRsoTIztEJo1WbFUQnRAKZY/vDewoqhiWUMiR7AoK8YrmEJZtyVjMQlV bliMB3BrIopNicNgbi6QM1uMB/g+cETispghyAARZCdGrUQV26NSBp4Qn7E2 Tlb8dDDNQouLxmvBfHFtDkZKNG5nrIpZdjIRSKQnkcGIjrjX5QkwAlSVSoHi s7vJbF2OFGIgkcUpRsFdlEn8Z9jHsoRTILhKxaNFBSM3JyySgorJqYFicmq6 7I9iWD2n4HrJxlnBAi7e2Fk1KCgYv42hHtjf/GXYaQZWsj3ggorTAD1JyuFY pPnZO2Lbuo2hxDQxS+mi+Mw10fkXkAFWxQUR92EMIl0GiSyIeIY7x43Vs5ew WCLhbLJodnZBxelfTDFUUTiC4QTLwleZxATegEIltkyr/jx6QCIjWoMCk+mi eFEwL5hyaiB4tdVBzKn0RE7MRcklGHQhkTWKO7HPEX+y5SjnMokRg7cE7S29 ZlH8jQMXLI8nDkxeUDFCZzGMEUCUvmfZdLpb5LGyFBKpctUIZ1tvmkziPdhN U028B+sSm31jT2I5DNscJDgbeNSp6UgWC5omfsLQbMWzPEYv4o8DkJ2Fbi+U GL0IJg0UrIoJyNTaAzKZga6qNnavhNCWvnK09PF41QNKPkaQaAUryPfP9DGC pH+MS8gDUIpdIMYNVQb5uDYBawUVXxhKGxtO8rEb1SL4DcUMGJgcwExiDcPk kEwBiWxTXQxADClbCGENOaGw39whKxQkDTenHTIIFJwIKs7GOVw1NvrRJipq 4lawKP6kNFZqyH8UrKeflHc1GYYSf1LaomlT2vFVRJyoPoNAul/bi4nSMmTG s1y26+UXW5G/HSKtc0FvoYnsdG1vWgtzmpqrUmsMmaiizZT3WpFJLJDIv8Dy WFCXRwbGTFTvxI3XPvIcmNPKJF6fth7tyNuB/DCUeH1qkBEk2wyKrovi9an/ 6vfnSF7WFh2TqIji3ca/xmVRXGgd7zYcBpTiiwIP9s1Q18kjU8vGdYJjTy/V 6nhcSFZyhM8iyUqORBnEGLxi9tXvtpJ1m2ZNNfHoRNtJp9saj042aufYRfIl FD6oS3awyEHeG/9NXzJegZ07B7A9SCR+us1kPUHdCEhEgYVEDsIEuUxi8yET 2ZrcVFB+Lo9RLBNggI2eoA/xZ4hjAmxox6iSIoLtU01MTrKkGjYwAneAOIAJ j8mpNpYPmoJJnmbgue7HMYdk1Qw88pOdnnSAnB1AeYGnEKYDzAA8s/tkBu5q AeJoQzafASMYyhuGAKbJcSLZdMDcJpTjGoZVIQip8/zLh8QjJGAhynDhGMt5 4XIMUm5FgEKLjtbEFWhCWTAAUcYDBCeUnv5doQWiAKasKmYovyVqt+67WNHj dfdhUy6e2liGdUJQf7IIhCr5L7ApG2BqjnzU3g8DtUsl2jIq630fx+67o1Pm MfnwOei5CostEKONhMpg0gIxlnFwAFBsyqwogPKNDKy8akiPTpQBCDEbm/Jd ZBi7TybQUFJJvwzlOoFvdJ8sVzaTtmrjyoDXpBxeebjp09EC43JfvoLfQ6Y4 8SbHw+RaBXbpyikDXsI9VOrKRV5t4JW/D0Xeu/JEuU7Q5i1D2hcWqmxdmHKd oHXIWsIrC7a8wxFHAwondQ8ZNq4cCHC3EtaEdq+80b4AAUYsGxZJy8wazMTD A7Zs9g15BZNDyyqYopxC4qeJV86Tkp8IkvYF3zJwLC/YW45gwpYNp/rFybIT xIWI0Q0t91bpyogNh+sw4iIrWZ0oFyaSQ9bhQIEtYZHwGJZFFjsYDD5HewI9 2Z98WqBKUjetywGFjHK+K3hIAqF9FG5Bk4wRaquuLrxcaJgJbzhJnpqhpkOS drU8YFyv8pftDQxlMht+WWfAH37dLRDqGDWTibI95xfX5Q0wpxC+ByHMU535 ogaZLrO3/o6RrU3UdBkMoamqYTappRf3kAJaeAFDuRbnMgAow+qAY7K6/KWH uXr6wuUmjJjtv5cBEli/YMTsQhjPrpZPRBzlTmLwcD4aE8kwxyF6jsCIw8Fv M7wspGMoa4o5C2SDW+3rDp7RK1N8Knh4BYsq7+yo5J27T0aVuCIeHHrTPSQe wJLrAhhL3AHUAPgXMLMTEeJYB7gpzg+UsR9HgAKZmbQQdlgzPx0jUBdHNkga tej4Sf5e0plnylGg0QZJhMyMZ1ZAEDfrzN+D6eNZ8nDyZpArs3ALQHKgVsZ3 TslhS04zX1AwCpVU5aujmcIhOSIzxyCkh0DM3EsTdXTSjBHg/pJpwUrP0cnD Nxh6ZB5ljA5NjiK4E6YjxedIN8nZlWnNmVIaMjMMhtXcSbw1nIHljbzWCF2c mR+atZ0ZpIRRzVBRFATE0Q6g4zwDxAHAwYFHN4Lm4Nvp9OQoZm05ilrFYbMs s9ksUkQkb/KGzZ0DCcOw2Q10Ht02X+hYyR/HwSxmABiybd4YuOhgOctfMKxa V95oexBhmkTLnPy6i2O7uZuAk4DvzpttXwJlw+q9mYRwUwSM+hwtPP0HffO7 q5uQYyxjLJf+vYpHQgLiwCBmchR7DiOAG7uQYTO84Nr5J4aoBPgazpzCPgjX bOkhcW4p8svosQqAdmEfBCwrcZ7nmHTDzYkZ+0I6E+U8kRQfxCXZzRYE/3LI eX6kYRg2i412THrCcPNK1WbCKA4ID5uTAsNmchLEscDg5ixDDsJmI7nSquc1 GR8xgRk6e8Kwt6kDQcFqk46qeSwsjRBktR9H80mjrnOAeXjk8jnqcLBcCTMr 0nzCO66hmhyvRDKA/YLTeQYhanY6H3ewU3uECG/WuX3JOho6wy/Bq2fnCizV md+c3S20Bh75zegucCTwkMQaGs4621g2qGdnGwskeehsY+EzTEp9kRhQXK4v EnHpc9w8snSnnAUnsYfmMWXgllM8BjKSsloFxvOtQOjqU0Wruhx9qsYN0bMv pR2aeP5rnjxxyoEMo1roU6i6w5xmQojljULVh9HtqvKcMvBkDKBEz0KOPu0h M5BxDB0Jt55Nc3DOQMZQdykher48i56pxRfH7WTqhAOk2ng+20tOz1K2HAlw zPpcM2Apt56xLxHU73MtrrYgep7Y7mQfz4bDiecNbbDFe1ZERUMWCKkDganh GUhDeF4jshWEz4znOeYKRf18GVj84p7LBajkzyHwgfFsLdgvID4LFEPnlqve 97iTgLYgZLR6sLhnF6NQAXJoCc3apuukvNHnsxxxU/NgXmB/VJ4nHGvN3TK4 4PRcObis4ETwBWzcoTPlY7FAfj472yXAPx9oYAbXSgU9D6WurgVd0CsrnAiG E1VyEkHDIi4Py7hn+kF2LvNIUfApOuCGzja5/CW6C1AAB75GuoInCjEA2O7Z eTTBkB0bZ51HExZNj3GjGfc8miimIqE7OYBFaStNstw6mMTYUuVOz3zccRmu N/oczNjldCDOznROwmzWuQQ7dD6pOYd3OSnSJioe+taseSQhUFQhgwJcdhms mJh7erYsIlOMwCbHNAgGKhFdLlYAwFDsjV1mBymdrss8P4BAChl5YdzjMscY QOLZ2gQwsoV8jjlG2OPRMBENYCwtQBxFCXDiz+8pugZwBkCXHjL5knVPeaNP kfFwilYiLBS2wisOMwAO4A6gPQ08opCbgbNMWTQE4UeUJzgvkDJNjjmELSiM NYfQijhFRz5AckVHZjRIbr8seHxG+0mj0U9JAwrn0V4sjI4gHEWX0U9JdJor 4hvtjJZH7OHK0QFfYM749OMIYlh0IqNVCPFidjQ8ejnqcwQxXAkTM/CwOxk6 OlpXo3v2VqMjCDVHEEM9To/7jo4ggNFgV1POwiQ2WR6tubrngl8L0rHT7E6I U/H4dzwdd6MfqdDoMuSKZjUGWla/VDBhi5dBCKQ8CX9yIIM4riO4HJZfk6MN ViFsaIGxAkX2wAqAKKHL0LkCiXXROSKKyipp25xKmhBpkrbWKR5/It7W3zBb aOKZsPsCGKXHBPqBKYBR+guQsENDWiVpANO4G6zpsZODejSI7SGRk5oDCZzL eQv9uouhtAchdLTWJqQdgpHogf7Wqv2YIhEoP+7yOFAwOaT02AEwnBxDNZzF zFqnLGhLzklrzZYDOKTikfkxlsbSbjmgnnrp2/BzwLEggZsVl4pssQGiFsAa IDAdcpZ3vjpnVkrHjLR5kwyghgtVRU9Ho088IMAS0h9p1hR0TjjSnNc5eSgM EiL7bYvcfsV2tUpCzKOZUuOYalJXrm/m0lgLj0o6rj34vWiq7nj2js1IZq5u WGBmi0T/CZCZbVMT5IctjkeK6lQ8Dno/FIEM02M7uQxp9QguVz06jqVMAMMb oFvSHtzxABgm0oHHqgbQmJ+hrnjTVTAXt2mAF553GuIox6j0vJbYAA69UZce 4prLj0z0WfJyAErmpSRlWj6NmJS+/d0cbjAA6LTJMU2AwgACkE2NtxfHrwvR BQiAHjgQ0A1CkxoD8zQpsNqhnm6eVD2JMevpqWYgcg35PdjwnAEsUUpC/4y4 ADuzuWDFbQxCk3mdwoeSOSJxYRbxzG8QWmgGQkqUjnLqoIY4QizqLCkBIEAQ IDaQmywnyABkl1MAJbPZrwiQnH4YuqjrB3cCgQEQYKzyjjob/aiD1G6AIbW5 1EhtcjQCugAOEZG2bEOUTvb6cfSMIEpfAjpq1YQCgu/ojU7PwhZ8RvoMyrRq ukl9Q6l96R2MNy6AlpaJy/mY/VzSFTnXqObDEDB6YWYwoW5ST3TS1IIJk6gt rkHNnq5SZ3wV1GSDMgWfmta5qwFUo6evAoPqUmyhur6BnhZUs6j71PLGRfV5 +teWqK56SqoX1OO2SrWL+k/NqOa8aaqb1JzqSXUE6lPtp16iGarT049qQnWo ekGNbiNVR6pX1YFqJIer2jcJq0ZPfx1m1ZdqssGtDVddq3a98apN1YzqAN+v mtlgqBbpDatXKMXqTHWqWlHdq3a5HKttdMHqUfWy2lLdq7a3PatpcIxqZfXU pEUNqgZWn6ed1dPqTbW3mhQord5WQ6pp1eNqsoG1OlzdrSZWM6pb1ezqUrW7 +jwtq45Xv6rT1QVasZy9WgFQNzgQ9CeqBlkAAOS7YProGigDeEbUtoWtd+97 Q7XMr34p+KyUhCMBOaDJcdc0Y3IZEGOUzCYZCZw10WYibzzSkNNehqXFNUOY 1OIqaEsnvvAAkT7qiTWo6WxU9ysDjKScdWbO/svtmV/NKSsiYKxTcBpCW+T2 b2I9SZAD5KzH1B9Hng8VAI1gkFPHKYSRCgo1ZiwAcrnhc0Qq7BxT1kHrKiJh 67/AeLgo7CwUsfLG9VBQKy85lZ7mXhyJAKUNPmi5Q8nMDBxJ0g+ucxlfiGPY j1y6XdJcBR/jCokE/MvFkWjNm7s+EDfFA9+B/QAp0VeqqcMpM7kMDeouJSHU Wt5IYxmHlAEiSIzpxQZcaWOgZOZL7xFqcCNDwvVH9nHNQv2GOq7F1MLeOauJ cnJNmb7MtjYv1+3BbnBCznyoEagfoBurUQ6194KS2cnSPEjyAAHaSVLK4AgQ 4E5jwTIBEikdFI0XJ8DqOkKCpgoDrKjJU4joj+Od5gsA2SE/rajN1bROfQaf oAoHUZld7zOCI9Q7vwYBVfG42uGYAAH+khAE2izEMUows5Q9BAVfvvQQtUS3 GA/gcAZCzxsRG9LH9B8qU5Sp+OBQmxxxBDEfLQEQQAuHa6FHIgEmA4uHOYB+ rTo9YLxgXRyJcLIMhIbnwgagZLZyAEU8g9iZAjZbwT/dNYXMKgAqEKGSh6aA Q8mcBHDWRW69l9IYk2P5QuJUh2jc1ak/jg+qxAO6MFmXeAw8PqjUNWo/QkO6 0iuhADhhu9Yo2PKQOYBiYuWx5gACoAyClzBWJYAS4OMHo4Na4giUF+lIdeMS 4Zagn1MyC7ErjlZIxSPiogywScE64iCiDxbBEwkEUglgEhEd5BJ3BTnseQLh A/BJaLAMAAG+AHi0L4DP8eTzsJAIvK6HADyCLYV/oglAtlgStCzfkUsAQIEh Be+hZBZz7Qu6dw+ft3VId7F7cVQXZBQyHkpmJoCopmztDDxeQ0jP1cCwGTUT QMlcwAEC0BuUmibHIwozDkLicylR51vljeKcSmJ6FwI5YwKhXLF3iRdHFtxZ uj67qOLR/SSu0z7HnLWGEOLYkVA/hkucnoFr+iPduISMycbGSuAyj7gv6aEt Dsxx3HSvkHAj2dYERrY1oWLNRPpkw1iLOSheSa4hez1N65RmGapv1ftqadYS gCfnu9YlwlidAFmAIcAXIE/4ReTDyRfPc7nKcXIZQXZ9Vjw76gnor2Mjl0ER Mn+5/ppLwyL4cPFoeWOtyraBfEBkNAGUzE8ABccc4L6IA8BnP6xtkX3Ti2ME CXBmzIY4hijWf1OAK8CTx0X5jsQZtAxy1KmLcWn9QF+JPcH1XIKVzLwOncKk 5gL5npW9KDneG0CAqk+uEOIYBUg8/IkK0+M4Td3FMavwQgAzIMvoS+7WOGbL R0zhAsAkLS/o18tsbnXDEgZH07Zp2ysdArRpbyciOWh5z0ak8OUUj70Wfgj/ iFegZAY9kOc2BhouBAlhC6fyOZgDkCjbqvLGTASpJnL4jqOU+ByTKnSAIsCJ BA5wBVAy5yyyAK4CK8AHxqxdEqgJhCfZ2v4Wxelpwazdtjkk7rM/2PLGSQSX kFRT7FDSHR8AkFbWze/HkStymFAj5BXw2gqAgRdLYuYYBpg8YnqssYFT+o0c ILE9UFDbMIsmCuNpk2OQWil3qtZXI69LsZvtulynGlG9rw5tq7M71Y7qz3bV 07StJOxU76pL22IJ0fakWlt9yKZ1srZP1eBq1TbE8bbdqS5X17ZB27Ht0/ak el2t29ZsB7db25NqeHVxe7B93D5V16uX23nt5nanGpoN3aZs26GE26TA13Z1 m7d9nvZVw7av28jt7HZq+7e92pZud7e12+Tt3bZ5O7tN22ZmA7fB28Xq3HZ6 27gN345We7bn28zt+nZ3m7iN345u67dJge1tnbZ/m7PNqJZvu7fL2/9tsoFv +8Ct3k5wswH42wxu+jaB+zyt3O5vW7cn3KTA57aFm7tNCqRub7hvsWcAS5BZ G7UShlISRiuPhJFjn6OzY+j0kbMOr7htdOjN8++LmwZ3KFZ64gcw2ErmkkC0 Qt1zqCQCFLRNjplL/wAQ4IpVUohPUgHaQNaC13WdAMmdv9wlxCJs2Cbgxgat UzFBggNoO1EOR1BlxURZgvRQ5hAKAjGSF00WBYBiAim0mN4xQlFuy2NutQQa oAUJjJgcBGMrkOTHqkMeggRgi/y7Fl4tOXHuuLAh5Vg2q14F0h/PiJdsMTeJ +XVdi6NhSz4nCIJuwI52zSwR0vaQYh7Ij9YIfAEAEgYRklQxQhyvBAqBRXZ2 SDiZjnQPeLTrcoNrBUCx5v3x7eXBUnqA1vJG5s84Kkn9zLiLghjoN9fUiyMK mxlHgXvWResUAFYAkEQ/ZRTVvVMyWwGOADKA7JCvm2zA2dop+LrHuzoFC4tp REZNo05HXoUiBV8AIvUX4GwEBHDthCkHkxOEuR+VAorilqsDKAAmCGcjFIra r9Xsc5wgmOZk1LCwngaT+uNo7r7TzQGYPxYE/TS7+7Gqzv5Ba4nn3cwCxeVi +nBJP9B3QxxbRYlLb8FimilSwQR467uVhPzufLfAe3jZHkBs3yByEELBWfM3 NA4X6qY3hLTp0SZH6NfMIB1B6Ql1ywAyWHvrCG33hSCZlfPRyTRhT5hteQQM F9cg0PE5LiGDV4jtV5xYuiI5ciTOkS9zenoAPEDM+y9J4bgBlMvEADpve7Ry OHyZllIS8nzhrD1N9aWSENC8rX1eti95jlTM9uUJku4XMMge/zDHANNG+iPh tcGov9zDWbnlXdUHLxADc0/d9O5pXtDaEOI/pYhUc5vQBojS9W/jqiZMkgkN Lgq8wiwkXuAgiibMQLPb23D8wywkCgpEdd3kf1YT87Lifq0UmKffBfMNdCfd d4bZT1ESUjYpKp9CFO8ME+uZQ4h5LxQAkKHShYIF0wZNMmBgezZJrzg5+Keh wfK923BMXjvRgkIO0jevk94FQ/hx172ll6Hrb3ATU3opuhh9E7xhmK0w+qNI 670g4C12tEdnmNJL+AFsVvXNLsgMaqZBSqTQuvdsNj+Npc00WwbMCztDhoF/ 2i5xiQt9VjHLAOA+xvT1uwZHqlIQSzGnggjI6mk9SocZWlP71RE9LLbB7zf9 gBmX24QvrTLbrzW4Aib+UovJud5bVzCzyokuLvWnVfxNogN++QqVlwc0f4fO 2jqMg/DNVnqMoRlG4/MK00R2B6jBMcB9iYBMGN1YBjyqIAZksuxCF7hEazYh E35wxoyKCiFi3tWP2TXyoEnpBjAfCgjLx4RM4GOn+r4d4WZjqsAn1aTt6rby 41Q93m6B/zAT1K5tFriAW495qg5wn6tn4J1qA/cOHAguqtaB/8Bx4MNtIzit kwjOqlaCl2KZ4LFqJ3jVEwpuq5aCp8CL1VZw8iUSPLsdA7dwU8GF1fvqLzh6 2wbOAw9W+8CX4FtwXbUQ/Aj+As9uL7iH4GnwdTCEGw7eBicbnMGf4HHwNTga vA7OBniDs8EN1XPwP/i7OgvuAjdUa7jJ4FRwDzciPEHtuU6BfwFm3pdv+8IQ kpxKBgBjm3sBmWwAr6nhAxIuuE5kKj804Y9wzrWSkAubv1R+SL0aTeHtQDUh /Ab+qrKBviFH26twPeYpvJaRCm9Ux8JN4Xu4WjilOgze18mF98Bv4b1wV7gu XA+OB2+Fo8JP1X7wPfgsXJJxqg6EK8N94Z3qCvci3BhOC3duA8Op4czw6fY1 fBn+Cu9ub8Oh4d3tLvg0nBteCweDy8CD4cfwYPUYnA5ODk9Wf8OF4fHtd3g6 vLudDC+Gt8OD1c5wezg4HMAtD6+GF7j74dnw83Q9fAqODveHn6fz4QRxbHg3 nBQoDWeH78PJBodwhzg8nFGtCKeD2xte10qAKUALYCcIr1km9SaVH7LkC2T0 IwUerbsoOutOS6eqmgHoO48CSIUgxL7rBdfLQOYLO3xG2hMdsMvwmClwk7gG PHOr2v4C1Bm+0iVgQaTG4Cx7JaoB7BjDKY2MwpbHVzFsYRpaSJ+pmNivzreG p5J61O3DpuJAPCHpUmYsM0ndhGZl4lfY3F5tXeaRU0/Av45vTDkZXfYGJWEj XJdZNERgA7JR3frLY6YtTq4VNVVeauvgB5LDCuT08nG9Ap9V/xFO1eLwIThf fFJdAxeMU6Zz4H7xwTim+hauGA9UE8On4I1x9PRAPJl5GE+CJ8Yr403wy7g1 XDOuDeeMe8M941xwxjhmXFddGP+BR8aN1WHw0/gdHDI+Gl8HP8Yp48Xqybg6 szWurhCNG6pX47DxfzhoXMFtG2dUI8Rz4xTu3ji9Wjje4WaMTzN91/ZBgldb 1PpQh8A6LhEMh7mRJ0gy00GMc+gprjKvmeMGyrT1ga38w5QkXLyTo+pMSg86 15o5nME65gHi2eTxvSM5kx79DV0kqMfXmeQH2fAdID2OZGyC0HJXmN4CJSIF EnFsM2lBfoRfcRxo0azysokIiISLj2nyKEzEeeZc+YcpvWWQHIxi3gcQNoBp J+bNeJgYXBRqcBXyN2+ZthCBva4DFLZ+PWXNmXAhoiOQrKtrrY7CPyDNExOc 4zqn7fDJ6i9lyivyVyhVEKQJ1fEqxrwlEtBR8oO8+0VuTGiAs0lbAG5SkOYa QOToZmWzxqJf5Jbsy8A6+/qoGIw3szST5EpChTGcE3wwOgkZrHooyw4WhvEK 01xwFiAlKhGInqc6b3f/csMjFTcXnJsRyQqyjlh78FPo+woQkQxAy1kYFUId 7jMFlPuJ+8UlB+ZpqauPMAXCm96JrzBpHwkFGN162ueceO6ECyKDZAjIdFw8 QuxcOdBfSg7i0n7yH+YOU2a746lMgyN6t3/yvabwkEfq4SRf3gEoPTJcOUba dKz5/nwDuL4nm3YQNZxrNrwGfKgubzVNIWI4Ish8daz5vTiVmyBvcg3wsiNX mno6hxQnlgs0wthDXMEjHOYNF1cLUjiijjFV3Oa7Q//twFZfrjXz0yTMbAlM 2sVmKr+FRRB8CFIvQobKtK2ZRTk+bD1D3qZEguS9UwoZdUzhSrZv5eiIL0Iy cdJqgowc2k7KtLeChIJLm4G8g2xfugz7KUjEtmYeqvrAh7P64Da3CbO/McCk +1sQoDBdew3SicgRe9xhk2ZCbIgchro5GksEk2nXevaberw4cjiSyGxiFxtL xD+9tE1tMqEHGeYCJTNHIy4jt3IB0EoXHDBrgYFyklJAdKVvUg8rjlGR40Yd wA7r2oSEj76ZCHC69Pdhk11g+HCSILZZOdtsVcMXQDZ4RlQbajZzn0lu7ovH 1FwaMp0JhxCPk+1v4NdoIlkHxQ5uWl4kcFMvV+iUE8yxTYBqfr2fr67P/Obk ME8e1PomijfZAGeAGtwFE4Zi3KBvehkoPWA1AHN7MyzYFg8LTr2x2Fbv4uYv rozxg52nPAfsckKOuMTPIkHK4ayWv72hu/lNUzkHutCsmQts6jfnkLLkpDOD E+5YtEbIxYgznFS5yjnU9XK+GvsCZM6xtKuxbDN84eudxWxfclNXYx4ykTm6 dcPDzHE8q87V3iJImpg8qeq5GoN6OOvqBK1lAqftXOi9tFVuqr0DFEvr6o1G tEmtmgiHXK/REVnb1dgCstIjy/WdmwQvcA6WJyxuUw3QZGwPDhke37jNw4GF GgHpaJ1x7hFGEswC83RfZ/8pitRa8TOo3vqF6GiJc58hgYMrbIpFkW1vjHBc cQ1gEfYDtzW/kHmCDzksp+cLkT0DELbYqTsxH6f/PKd9rj5BtgPZ3qlpyXSR 81YwSYgt1ODsj1VN3OZzgM8Bo4uUmyCfAzTiptLPHBxkK6ck2OKsJmNSA3KR s0ulJrXFWdDrVDODzHkKwgGXhg5yNn/O0L9rQqnTE4WOmoidecgf5hJg4WG9 mb65NZwD/ERI2EbT+s0BHBFa9RVFYtiyp/q+DfoCG4ccN3MBzAktByEAE+TM UakKqTUXSGqznMfBnGPpsVg+9NgK/jibqObUzsSuVnPw4RiAi8sfKklq76zO WOk5M5sYyB3X37jNj6wZwFlnZXYfYJm3wjMzlw1qw2sA4uygE3d81+NVMqR5 M7R7Z5ijg9XYEkq0LGc/5f6UrNMZdFUnm5HW+2aULnx7Id1zqkQkkaFussIQ wEKBJvgM/Mw1AnkTPUBIW89s8510LqZ7gxBIVDrmuyKX6pRDsAeDBe8qWnac Uw5hQFml6+Za6UVn4CP+ECNXRZ6lD0f+3jT0muNdWmT+p16N8VFBr6lOU/Vd 2tQ5r15Qx8KH6bDwWTU0nTD+TK9V78Kr29P0xbg03Zr+Ghd04qtRUNv0b/pv 3JveTA9UN8QL6Nb0iDg6/ZteEV+nl9PXwdV0fLV3G5veqy6N0zqz6brqdbg7 HVltBo+nv9MfPv50fjo9PKAOrd5vE9Sx1edp3Dg5XaBOCuym7znx1bLxh/o7 fZwuUWeokw3O6ff0WrU6PaOOr26nc9SJ1Qpj4fAw/QDbmEDR3hXXAHFOawP3 fPwt6Iyt2aAX05ZzDOdqE0rHMmep7zlh5yd0q7ItzluWkj5CjhtEddhzmefy kjrdUIyQiFqF6pYXOrUKJG0M/FxD0KlVkhZliGdjeyVsKregi7YUg8BHjcXy 96regrADYInbsARCsRweYNk5TxlzzgbnG+XOJPUR85CA7Jw/MONC3biOHkLI WyyXKZW2WmsNdl5yXaEaWN0ZozDkKJnBP1NnZhxgferkd1525lCVhDUDRMp7 sPxnWO9Epc1FzoDBpJCKi2+Z7yR7kRKRtHxvw3rKgb+Wn4aLg38Cv9NFxjT4 5yMrObxtVEJtIsFD/XcTGuEZ6KCa7xZ/cuJOocX0u6A5OgWdHjxtImty9u/w JGO88ZQ5Xrw1gBfP9AEfLqhF2KV4iq2EJARsq/oIG6ruyrh4ygvrcc5HFeiU s3zWf7l7z4GxoepOSo9V/RfhYtN5w9XFADCSYrZnHbzeveusK9ATkWOACoxa PamoEK4MSCKFvZMCaKe/1C4HgOZ9CqCpzBBPyrQD4pibiJw9+hU0EP7puqmv U3Ru+L7ihIHz62rxtq7MM41MXyctkDMa7NDOnIFcmjjSPU9ESth5sKRXE3Ec wK8QpZMfXMslzDrP4DXEc7zqrPsxh0nHEqel7wG00ylhKg/rWl+gyrw5/6MK gWv1V+dBdByJmWRPA4MGwUs+Xn56Ch9rFCDrb0GRhOypP+qYLkcw17J0RMS3 QDGNgyDN1tjpdPs65+P8ARCB4pV56j3pjyxYrvLlHH+8oABuXmaToIWt3gKg jotSR67hPj01TXaJtrdhIzbBzu1qFiga6WLVbdwtONSg36VL3RXnAHlHwWfI W1BdV5ehQjz17LB0K0PFdelKspCrB+vMCw7VSmi+K+rY1aWPwgplnm2jbgRi +8hGTjkywABmjvu6ft1LVeZZPCMhTtrrBXAJDzn2hYSq8nSH6L1r3F5fhmgb 4AuAWw2ew1Ma58DPVcbt3HAIHvd1MkXc3k5ciAoGE+W5RPD2wD5vnwxccsGk HX5rK486Exvw4uXLmcFKE/iZXLgXSA4zcaxIh5oIYlEgWr9JuQG+AHkWJKNn 3b1QjdixN0KNpiWikPSwHWZKg/Neei93n8SGNXqsPEAYl9XYzCH3s6uMty33 U0BLFrc3/FPFn6+tMQCMDicCbg+MjbtnzdVPvnA6OjDNbBe4GwsskNv2q2tC TEeSrDOqgj8hoNzvXJ0HFuap5zypUx8bG0P0I6cVegTaAUHzLsmrnzcpU3mG UWFz+3QYJBSG7SZ3Pty2fZdMHMSkSqyaEg7sqdcw0CG9MXe5E4Mes9To1AGo /BWbiKQX8K/HoHKAj121APLaQJj8BrDa7crUOcAMoPOrY9SuY7GdoHQFKbvm s8p+8GRN3RRRC9xvOrsIBNrJmgICcFJ8pysbqPt8ge43RUkKnw+H3w3bnDtr Cu3OJ2+7Z9bPhy5DfjvXnf0Iy6n08Nd9nawpgBcfTlxnXy/Z4tfzjrLlqzh7 fcvOb5xvgLG36Od1X6dEYkoN7XxAFBjy2HyFmMgHzmwc6/ReROmgitXbg2dq cR83nUMbyADU44lM86WfdB+3wxIoLBb+6pt3OYAO4G+YKJCyQ0AFuKL3K2ix PfUuuG6Q90zvENBO2jvzvIiQP7TEjsdj73/stV/PTXQgMUjIoRuB73U5R6cN 2T5XeT+eyBer5R52eFy2XJKxLfd1euSs6nUApchNQxIJHWjIIkwU05ECazG1 E1VyUp5QMeOs6subEPhoZQyQ88wDzAAEqIOtmnFmOyE6drx8Y2ktod+5Rrr6 NRbqCm2wW1mhnSk4EFoVUUlYNH84ZkPRm5P2ZiiiVgLHgz2u4nOisfx3BDy7 jG8YNiysV6AX0571FJyMJ2FN7w0lxHvN7NfQhUFufc3R/s2ETucS8KmN1MkQ nSNKCD3Bw8W3Ccu4r7lhNfroTuSX5ThPzatRoQL90dzpXr2XTkV1oC9DWepU dB56JcQSH3aN0088Tgon5ev4oXB6bhMqCegJW7liadMFLpeWC4vtgy628PlZ TskhbQWYwwsE5l5406JV1BaH8Oz5AsyTzIxFD1zmc1wqcz7DMwtE6WE8iNIY /g0/a5eLsUXH42f4OLSSELb44CjykUdZorM/5yPLYKT4+4yJzv4W0yrXoDoS 3g4ge/xn+RMhjk7rJHU5ezV6ZFtxSCIH5U54V6tcOk568c1fYjfDe4ht7KaS MDftGhVBRHok7VLOdGITGrpJHOSSRzePjykD3aMLABr53dhTx2vNup1R2mMZ 4AsQ0gjFx+JXNA45X7wUcuZ4QeXhwFjXC/MDmoGwvRoBYhyO3mBrwtT2F/wJ OH8uPHmYNF5xj4VjCa4bXRqvGLVFkgzyr83PmHC5zRfvAebDCaSp0esF1tJe UBo/EwV9bkv3gnmobgK9wC3qLcU+SN0H8Otmt+gOE3/CmHYDS9khkC8cuh8x wu53fAQwyDdk2RTF0ehMxhgha1BnN8IL8iJH16hdYuH4dwvFyws7eBPzqnQ4 HrjbaIIcEtBpnRjVw3aoVZEscOTIH7Z5sBmBFILoNokdeKwZDiTb50iaTaGS 7m0jky/IF1ZXPYVVswRsBbDZkl9QJKj3Y7Fh0yh9FCrW+naW+UOHo+sCEATX eg6H8V6NrgHS5qMVHedP9CnvyoZTx49vuK+QlOjBeMHoaj8x6ZqN0wBbnJqS 2VnDLZB0Z+SenCXRh/P9wTztue3k4h3xK8AcuHw/nrNgKOeNnjA/doF2cXYZ srrAh3soHx+j8F6QoLLA0b0gShjHv+C9CJTpLQ3dOy2PWaFMR+v0dsrRQsPM YDENLwjHp4zw3zLkUPx0NC4d6qaUOBY4hvIPKXwjAjpQg+vr8DGLo99RRIrP vTPPHVXNj74x8TP41nxcGhOfQv6N8grgmUpCAggQ1zbvmqf0XIXVv97R3vwO nmv2klPSQYp586D5H13kdDiaTUmgn1rjD67R5ryADZd4mLcWCMrBK+DizkHI nIowE/bdURLtg3lf+KgqIw+1Fyw5ig4EjqmZeHx5Hhd3nieZJKmZ3tNHCKmS sCNAMJ/rmLnXOr/yB+kcgA0HYIw68nSN03UA3LlSRBJZQdUISArvp98HSaQF /ftAbPBceGlZ8gJHg3TSszCNiRbwGhl4706Un+jM/HzQYC8VQdiPj7NZD3kY d14o2BJsSkjn6MbZvXpJNGwNXZcYxEJSoix6KIrccdo8g2/Erg7EcDVWPeuP 1FNKSkTUVmqpztI1xyPtKUZavfGRduV9pDHSXQg9t6I5L9BMk9rXpMGNtd8s foyKI92F1M5njuOx8LGRlLv77kWWDdo3kZa5QMcvp+58JdVaISB1wFvYCmlv YRJJyOjXxXOOG2JSyjQfFhCLIe0IjFc3Iu7EFaRubp4wLkOp3zRmd4xE4Tnv 01B6khV5OtAt6MTuZUFpPirJejSwgTfEpAoIzzk6ryyOyq6TKiCa0hMdqE7z sys5Aw91dyU95J9DUmkZQW0u9+4mGFwXKS8YYimpvrZI2eyl19L70VbSWSna mpb+nq2la6OXv7b6mmMtHTLXTk2SbqmddIn1nhuDkMPwJ96T/uq5w8H6Y6nu OxDxI91SFxE+8+MSX/2o/tAuByHvQOpH9RYmtDCsPo5pQAnUWlh28GrhlJGl 7llqfk/WiVebywYUtZ8Fosy5cSeWziHng67gUqwBRbrrTuwzl72JpSZxu9/D QyM3LW0Z2NKfcKDlKkwtsDQfGIwvWk12pK8tEk10vX6gWzUw4D5Apd1ExLbO KgXiuZDYO4i1R7LVQgS21F//eF0KdPDU1oAIq1jbmhkH3LKwLYCNCJvIkD06 O4LAgFd+3KXdERt7tnX9FbvNG59VS7RX9upsHmmSVGVfLlVn79Bj9iL7mT1i 3YuLIeXZp3nrcha2L0AVpiSYJIVnKiQOB5XEWPFwDqu9iUxGfMCj5SPvCmk+ wgEuHBYhcRgk3XBxeedjoTC9MX6TWiAG5jIRg/lAAWEuGVKYM0yJDQDIhymG 1CBNPZVLw2QHW97W85XC9yUu+S6RCmcMi2fZSqKSzca8ifzbIxnR48CtvSNw i1zbnui/JGmGkqRW/on08l+KITXck7351lzpxH19HHusPi/cw9H2jsKSzr3m 3hZHCn/4dO8opg6DvaNmrU5qudd/c0zzNqm4x/eo+XUPQJE+XOfqUcMHmWmd Thk/UDCFEeDRiCPTswzv/uY3yWQrDk3puB7ysP3P1BYpWPSZ3ky99CrXCOhH E0M6bjjRjWdW6tfOIyHfSTaIpT0SWtiuc2uOh88nGGz6QXeK+Zzd8vxH1QsP d++tUhacUiLkSbcEb7xNDvE7KfR2P0wmqf5pqkIXRjAff5hK2MptCUnqWy// vk6ALuXDhbrNAGiAEcj/fq8Z5o0DVNWf7qtTxaA6m8/gAsgh8B+p3yuS4yZY PUoOVr8lPPEucTJnxKlsZRZtnbOgi/BFBx/cof06WfuIwacK20vWBdc588Uu BGb6WCAY3k9P+NiH9SkHHt87UcyXn05Dgak4+2BGofh6S/j/YloX+IuRhML/ EC5OFxdamCs+8qVYuVYdInPOxL+dvuRVsQsnp2dAcrXBKCDe5wxmitToLf5L 3ntR6HCbdr8N+M4aZDP+dC6qjADVY973c6HTHt4oISMPg6yYb08brTNwdmxt 0x07VMCfKhSiHiFzJn4K5LCtclXKNQmXp16gw/j4c1xKdQ88VmiZcQPJTyol vTmByDdcAwEAX4j8ynemFjbrx9fkt8qrcj3P4fcX5yfRTFbjD79zJRb8U75k NVeido7jp+7x5ozE7SKvFDbLjHsogojxpwFGfRrpOOR9RAR4YWeZkfzgvOna Tw7xjhrwFnjNAAdeqqkA1UNuBljmuwGm14FHoIZR8RDlYZu/A1HdB/2nUaLc nYJ6MciW0+D80grUVyEzLi8vS7/fvBm86ub88PMMtQZg9UFs329qcOJLW+YJ 1Tq3UB2eniHZhsYN1yEO1TqXebYgOFF38de0hT20DoDV/LzfoAXd+V4D9uBn asN7v1mNCcAP+Al9D6Ginnf+3SW1Z84fIbEIDupJBADpR7XnkxmEBTL4EOpH v+09eXyccuRakKnFbapR4J+/0acYIBiiOw8VjT5IP3QfH5/n09rb5zxlm75U hAKjfmlB/O9XqNIH4QlCf6DQG5PAmQDuwhxUUu8b8vZt03cZumtbPTd8r4HL cImA4bzf/MSbyTzpOW+2QYvPJ6zWWc/fS9LWnyIxgjH9UwSynyCRqP7jNTds XqR/GUjr0/GPG3Z8Rz7Hg7Smck+8X/OZi3El2z0T32uQZ5m1qy//+cnpJ+yP KIdEkFeh4jxTBq/CGpwPtHrZNp3nHxL49tLTJtnUBLIvRf1ZTCPtVAFl420V 1bJ/b87sYzptX3GJY3sItTBx2Rdh8p2n8fZ8ywkAMmCqNuVczwB03mvxBGr+ u/iWnyW3jdsQbmbI/DcqnYQ52YaEd7Zn1b79aPq+OrhPTQfu178R48P94/5s OxZO3F9QO9SBqPnv3jZzX7m/oKaoQ/fH0tHw6X50f1K9UY/iU/cD1R517/52 P7ut3cfuh8PL+6dxe7p437yf3dan00+/++tghbpsn72vBkfv08Yj6tf907h1 P7dP318HY9TX+6fx7n7Vs7mvqw7vD/jh+/L9/H5r/LnP34+M4/cb/K3x/T6B nw3w3z/wj/ch4vb9Z3aGHz3u2z/PVVHH0nv9/LeBR73x5j2T2M/n+49rjU5q fyy9mIfwh/TtdR/+x/X3oIzBZ/2ZOurcACVI3z7pVccP5a3po/gp09zOIqOL /10g+47xd65F1z9+yv6kEBhDGy2g5r9j+xbBFqa0BA0w5EfyWwQFT/iO03X9 mylGHWvt57/X9XxUKepYmoXr28chk2vF/I9rpnytXcGvWh96G/n13/xo9Ngt HxLupmPq//hb1j9xm/miCi38DeWEn+oqkidJrkyL28sPkjWP581B158pDr8o XMnMCQ8+EkfkIEROI78u3L6vCw+Mn6sb/ahtSv+p2r0P4L98d6oT/BD+Ybim X7pv3E906cIl/Iv+7H6pv9DfqRbwo/k9/ZNqA/+rvxw+6j/vr/on+8Fq9b6F n9V/3q71s7d9/fX9Wz+s3w0O7JeDF/uRbcL+crirX9JfrJb1M/uz1cV+Bj+m XyBe7Ef1m/oN1RX+Wb8hvNjv7P/xKwkXhDlR5az5wrwU6k/W/RE2qqA49slX Xq5/7Y+rDlLL/U3oRj8ZLshhEZTdx63tdfZ+PrYK9dqvDM0sjpoxHgX9Rf/q oNx63LiTQnVJno3+o/eVld1f6LflEPon+w7/FT/EH0Tu5G/4FxtmhY2Jcj+U v9zvtE0KN/rB/Ft3Zr8vEvHs7W+w02mrDs31iv9knyaJZlbwE+DfY/YSRb+p H1DA6BeFY0xD8xB9U7+Gruav8z9sg39ShBL/gSPzvCPQ5iysLzZoLHE41vJv 2Z5Pl5+1L3zlsPxHH/rt3so7XibRoOWj/lHCqf85perv5DycpsuiimMAG8CX uZH+hCUUhk7zQlj4GjYerQTfRn1mKguadc3VZcf6Cc77092wenvCm2RUTz/3 cpAwPE126LsCkMIZjnkZFfCfIMz7//2Du6DyW3wiuI3aeuGYt17gqHZU0n2d IM/icoGJxlFtGs46X+H78fL/l/GqK4z7/lOJXjfnyU1NNV1xuBPZzHBmqiq8 GVmmBlCnei9xBUCAKTUk9oDGC60DpCv80wfzJaMdrgSZjkg/EryEFk7PRqrA oJ+thMWuD1PZElHHS6oJgE+KS1Ay64zDtKUaW3mYtj2oD4ai7FLRTS/+X+q/ IFgQ0k7NwKB/qS2EN4KpXKT96K6mkqU5G7Uvz3U3VTNib2ggmPsPBwHG4blC 1X0oOfAkpnGm36FAFL6q4b0R/NdxTBzkcJMCOhDeDTJnk0MCc70x0hL3bsNU 1R+GQ0hGp2yEYgpV50GleZ5By0v3VIsC/DXwaXBxBgigctF32HLPDtR3QVuM VBwGUXuuYto4h1QhVfl3WFoLVUAA8nPgCPVzSFEKVbd2OAllVWEAE2xkfJg4 gFWJK3UCyjqMabJk2E3Ye3lVICZWbPB56lT7DFdCmXPQZl9lgFWVBEV4dwYj Wch8XgMPVUWANhYzeoYOSYBeVQNGSkLpW0JfalWVBPkzqTg1dddOsmQBAzIA VmzSQ+9ZsmQvYSBtYIBAgEw1WmnCYrJk6U5tb2Q4FHcDWvYGCgUubQADJjw0 ZOEzXmW2YU5VhVV8OKMMD2K0VuMkAwVPfMQG/W/3U0gHlgFiK2o4G1kae75V oBipTGZ0n1WnBqJ4aW/HXupU9CmXgMIZ5TmagKcGCzmZc6FuslULOQB2o4BP UAproQTSf/QpdRnffgFSLgPGfy9HrIARErdzywIlfplU9Cl/Mvo0iG2yVQ5n P4C+VUJqR0KkV+UueXLwXXBJJANKQseACwSNdHeAn1X3TTA6B0LQG2IIcE5p H1ddS28QeiwRzXzJOp1EcQAwACNYgUc4EYYvogt5AP1stBAVB9hpL0cNM+4D hS2QXgNY8WMWB0RSxlTqgKZFXXejgPOA50NcMV15glQBemkAk0e+a9Zy0nce gEBby1T8gA98n0XsVV5HAgO9JABWLCkYGB1yiG28UJB8qFU1RxsRvjvXZZRp IAaqNQBW8FskELZyyxLGG7NBLx30VQ57hg8QFUxtcHH8VUpCcQB3YwiBYnn2 dpQCAFYmY/gIqAGyf8JhqUTKApJIA2uQWMdVIgRXYmp0s1P7VRBZlERkOD+B DV8mNx6Bawayf51W2l8gfQYGTnKBR0aAlW8OgPhVU4CGDU4ZP1AmN6sGt2w4 BzNo+1U2FnZytwZDBvkHV0hfgWNE1zm7TV6BtCeUHk2ALkxPgBgYFlZqgZd1 S3VyayFWNhaUHuYCElZwgVsdYjiyVsJIDlbRB5ACknoQgY9H12s5BNprXoEI cmYr8A4mc4Y13zYIcht/cAX+ApxwS0jybn+BuREhAIBt6Fn5S0AaLUhodrN4 uX/4edRSiIFFAQoFfDjGMdkEP1qpIRUzFla5EeMDJ0xAAIcoqIHDXuADR16W gaSBr4GHKCwKP1quEeNm9FUeUq6BfDgSJS8Bu4GqgbWBjoG3gcGBEyUwAMSB tIFhdWM67yjoRkAawIFAAFsSw4FXEWtZzYF5TNKBpYHUgRw2y4HXgYMCxYGP dnWBrYHcgSI/20hXEeMZ4oHagb+B5oFzHz9a6oHZgUuB5YGvgcsxSwPwgdiB vYHsgfSBfDhaGBVYvDluWOxVHlLmb5tzGE4iVo91/QXegPgOZIH5czR9yk5/ BqZyOlIUgU4QdETpVFdI/3U5AxoGAEj1AwZ63FRMXZJ47ShJOo0EYlbACV1u FnRdZy5xAIEdgCF21XcOVuwMZ0TEVBCBuw8ddl5lvxRBVvIPYQeVgcw2awAQ glFH8VySZexV8jkfcKFuLwuoc8xRNwCidESCRlW2OCVw00KtSO8q6hchREpm 33s3AHkb44FQgf9/xWlYggEDSnvEBiVBHoETB6x2TXoogRMH7EFEgmWCqgnu REkbLgQnZ4xWoBJ/alZxPXawVX9qJ4Jlgn9q5HzvWRY2UVded9VeV0gTBzFY QnqrBu1OnVYTB5Araz8XBXFeXlY5A88NOXsiSoqCzDgbA1ZmcVlsXN5Lb32k Q81PQg7nbg8GO1ZySHc6HHNQf5mCnoICaISC6EM5BCg/bwBNJScmPILlgHZ9 rUgvX3uBwgxpT3lW4QYfc7Ru/l6kgnV37m2ydB94kn9ucnUgl1Y1A/V6eTKq X66CW2pUW/N+izkAEiYYanyeVpUElR7IZE5PjAxTfFUAhWlLY01VwwVEEOcZ /Sq3CGCC2AbrP2SCskegGPFFNl5oAHEAkDgegTFCrW1GT2Y6sVbqDUpynylm c/tVdgCbOTAALBE0AA1wXEcuAc1RylYucdGCaDn8eFt4ECYidtNWpAQwAOY5 SW5ZG0UdBgWUfEdXNwDoaZUeTwePUtNWb2uDJxcDl03lQddWhE/0dRpJfXfl OtdWZwB4ANR5AFAuZkdXaACnG/oFx2voJo56XFcyVhx7LYOFdfcHdTjeBQJi BHuaA+o4xFz2Oo1yCE7sJ6k4oW4ITuNCbjoFeG1XqwzuCKR5ZA4iTC9iiwLf B8t2F1c0V244jG5GYQoZL1dOg+l+rW26OgsEWoJNg9wCg0wbeGQ4/BA/ZkZT Sm3xMExtbUGTYpNSSFcYf5gGmIFNfHSBZFePZmR4MFg8eTtXE3CpONMyrDuM B7c2dm3hVoACP1erZ0AI9HpAa3OD7QO+OyZvCXSydIItfFsJap9d7ygeMgkD P1ckA5SBjChWVyQDD4HEUJl2YFeUg5VvtFgwSJeDd1eZgymCxUcVepiDT1Xq F/J7fXqPg6ZyWTmBYx1/JE8uQ4ABYGKjg9xvmwlUcQxXwkM+g7aDk1nGUrGD KhHmC7YC3FQuQ/1OFF84ZcCDKTjKOqiDB3AfbSd+GlfCQ7NHoGUuQ3JRDw5t US5DukGHE0JX04PBDYl0sYPjMVAP3Vedb6Jljlc6dFEg6Vbhgw4DrRkQaDtX nW9/U68lpQXFMxhNYXLog6ZysmTgYnF3+wzkQxNnmlwlSHF3QTXHg/UijATX TnF38E+iBBNPLkM8CJhU5lbCQ6GCkmbLg51vZzn6NceDZzmHKAlgLkOVAx5l pWHQQ8eD/BDpP89aLlfRV51vNQN/aBwRk4PJBfJ7uF1wehZXE4QLJ61ubYPw g/J7xE0ohCQDxlPDg8JD9G7TRyiELQPWV+J64TnHg4wOfVmeg6ZyXCvNGNdP LkPXG7WDnW9jYZghMGQ+hLlEJ1fYVTNpjSbuWF1bx4NOYdEBH12xg+w5bHNU XVKEQjPHTfAFHmRng8JD2SUVeEWEpnKJTC5DXWAVTC5D5BQOV9MyNhNuACyE djH1A/UITzrjg51v0EwSOWOEEjjOHdI0eWKxgwo17gNOTy5DbUHHeUqE+F20 dfBiTXkLhBGC/EvYB8FjpGC0ToGEZl8bRGVix4M6NeBI/4PCQ5cYkQJyW7GD NmIQV8JDE0mehJ1v8QihhKZy3UREU2iEn4R1AitmYSfUEOCDooQPZZyE/wIW Q8eDR2dUBU5M2zMrBrSEFwOBZ3wG1GVfhJ1vn2ftZgRYwkOBDABGeTK0hApo KoSog+lEo0R7ZjF1y4RudCQQ6HGCLUdQ8nsGWomEQXdYareDfAa2ch4yIQPS b9uEaxvIWSJJUG/vKOBs21ZrVzoPsXyuRGpXrG+SbnVmxILRbzAE2SVKZtFv mETkhAB/JYDohCgI7gPwQkwElTFGbwsDPIPwQidwrlejg95MlXB5GwCFSnH4 J4ICBIX0FChwHUlseJuDyzJUfi80SnWBCKiDQSR7QRV2PoS8W9pBt4OfKecl Z3rRAZ9iFkGUCDtX7WWMTN97FnSQTqsEoTrGFCJNl4SwFU9d7EfrP8sby2m1 g5lX5BQ/cVha4wdsAHEAIX2XYcuDODH3EbpvvTZWVy0DqzEwOlh7MGkaHb9y lGnThKIM0HWJda9XCHj2dmZnqFcZenOA03gdb0ddlU5chYBRlB5dH8Aq0IG1 U0mFW4UVOX1noTraA7gaD3tahfIudHW6OWuFlB7zAuV/cIWAOmGFg1HqRwAU gIReXAh4TQecY9t86IR9U5REaToaeWiF8i46AH1IOlI5R5Ybx3JwcdE6zTg5 JHUjCGbhD8FXv337apKFwn3VbZuFxX2ahTwbm36xcJ6F2nSghTY3uG2jhaGF pH6mhU4UzXCphaeFqn6shfIum3GyhT9xnXG1hWRxwWqvha2FwWqWfo+EqoXd bbp+mIXqcLuFs4X9dLNqpIXBfriFfDj2bciFwIXZbft9yYWXYMWFtoXfatSF uYXUfs6FsIUHcdeFzIXBcdqFvIXDceCFxoXnad1+RIWthV5EehGDW9FXp4WG XeiA0TpgbJJ18wdrP4ACrQzBV9B1rEzFddE6G3gHaU8ZvILBV0oOgGwUOOyF ThTGOtl/eIXPBM06lU4EhvIuBobPOuyFOhslcsJVQXmoV3BeoVorgBxhyoOl V1wUMGuLBVhUYFeLERI4pQ0jC+Ei5lflAiFtNknLX+mFo3P1fCCG7U/MOMx1 7IJ3V4sRBXbWaQ+Ay4M0hj57LCzggzmG14A/XWcvFAOacx1Y11ZxAKcM7n9N aLZmgmuVARoBEhClWMsCNwBqAMgynV/EBhFYT1T9gnoC6wVvV1lZE1hWhh5y dUSKXY45XIbvYuuEPn4aV9lRlU11OUKD11bsAqMN6T86gpECxlOZc61U9BBM Y8NIegAafDgHZgEtSPFnEEitf8MSMBq5eaVEVnhhWDMAFkgWdGoAmnC2BYht I05OPJABtnKTR8YEyDKYAZdRL1iqF8cC/x3IMqMVZVjrg946UHxVTyV9u3h3 AGNrcHGghtRRZQ6SboeGiAOUHmRnOnaPdPBHgGyQcFdU7zE5WJoEuH9WVC1x miu0hpQehg22BA5sLFjVbNUGRli3AvR1Q3ovWEEOi2ksWPs6p1woWKd3JEST aDRYbW8jV29PDIM+WGMZg36hEhNgh09zdFUNZViFRNcx7UFnAywsS2NhWCIt KHqqF76GBBqrHik4tlDkhtQyo3QIZ3dY6YZzdZ1S0lY6WJMEQggfcPlUr3iK RxwBB3umcj9/pAWlEzlYZgAdcqMMj4YTE5R5olkrfT9Y7heCTO1BWlEoWDgH FD17QYF2e1jVcVVTvlI7Wn1zlASLhl4q6wimcmRTX0J3WFFDzTq7Wsl8PljE D6NExnRbdyhYKYfmaS91OVhocxYVGHKwQRxE70dqAF0TSkJYRbo5+X5hhvyG KQdEEGs/LQAwWNRZa1jaAypQCWrACL9SFEV5TH0OQoH8S0pmZQybCdF/h4ZO WEUBuURWh61NZQx7atYEDFxxWYRz2FTjBgxIg0yzaoRzOT5Dc/1saoZaWAp8 JCZlVGVYCGxRhuhN43FiWGKHjGllDJGGLX5lDIpdkhIKehB8PlhGVg5ipnuL hpJui2NZSO4FG15lDN8QHYZPZWFYKSN1CFNv+AhRft8HkkdaY6YPk26CWihY fSDGAj16VgZjGRNPZQwdb2dMBGIMUpmH5DllANN5g4c+RXEIuH84T5RlYkEv WCQPCnskRBhhOVhxADcAbwA1AEsEMAC2OKSGcgBNJR085goggaSGcFidOsiG xIefFDlYQlbFhzqCdE18OGWHLgSPhnEIj4cOFIaDNUd4WLN4hm8kVnhYEkhp gqMTmVxOB5JH8wSZc31x+2rbhx5ynIUWbuaHNHCxcOqHyH3Vbe2Hy33Ph6xZ 54eTagx+8IcLag9+94eBavt9+ofoadl+L1jih/SHC2rLfj5YAYinauaF4Yfz h1hw8oeKVsVqvoWlWP2H5nDphwaIxIUMiOOH3W2gfhGI9ocUiAN1FogCiLpq /IcciPxwHoiGahuICoiMavmHIojqauyHKogUfiyIJ4jiheWHLYgIiOqHmXar GIV1NYitguqHTk/sWUFNV2zWAo5nAl7DEwED80bVPqV5DQgmhfNGxwepDepH 0hM1R1UNCRUQJfBpFnRVDS0IoTojfoRiYwDzRpFDnkTigpRY0AFtACElvmtT gYdYvQVKVXt2YjkvRNhVmFhniCqCwC+7R6h9qVhmiJZUpX3dBKd9/mapWPcR 3gKbhxNEQ1bzRnqI0XE8Ry1+xgQwYgUGtnLGBOgDaXPqPMI2zTHANkg3SwOm WL841gcZcH6HoVhHTo8gSWppeChedn6WiJQeP0UPdk9xLkdRQ0qBqVhyKcBr uXkQW2l6lFjwCXN0ogPCUccNzALnaxchHHYFeqZzK32GCYB6qQOYBy42cE6G CW1vkHVPOA5JgV8ESb6IVRCGBhUYTYhzBk+IOAeydm5JO4UvZ+drgy3OOtQ7 rFiIWA0EGT5KZmMJ315Dbq1Lh1gOYqx2CF/aOoeIRlZjiBCHikfeMlcCMwjB bBh9+UveMgsEKQTofH9Cj0fOYWsAG3YtSNBYuliESBV7wSsaSUZPKDk4YItY 0zJ8BNxvVTmxiMR6twbyR151cHHqCx5yYA7QdjVI/QWxYwFI4R9pUQdVbmqp WBse/FC8h62CmFbeBWlziwR5c+lYMRGMa6FufWL2HFE6pVzcWIY1SmZgVKBu iUyfQiFzhgnyUK84sYgMQqE6lV7LXzaJlB7nVkZGhlU6iYkPwoIyB/d6Jk65 MJUDuH/CAuxcjEcgAyyJlAggAxR5HztwcUqJm4hPPGFaCmJRTVE6L0QLWbWG FnTVU0EOb2nOOltm/DpeZmBmjzpoAGNmM1lrDs1j7AJZCEOEvxRqiSFZOAjE MUyFgoZZezNZykb5B9lWq30OFp+Bi0csD8BHblfCGz4joU8DgMBHcFfwJWF+ NlkzAwoIIAZeR/YR4BsXR4pd7Q2eb81P/SobgndFtoj3Ux5Vx3JNhcJiaHNt b0lP5BSRZtN76FhnAx12rgyvZQNZchsjR8MT2ViqiUYEm2zcWHIbQYRpgpQC S39TWdgPZHGhcjRcVVnxB6UFz0F5QXY5TiHWYWVqqhdoHZUeHTibiDx3H0ff CO8ldQgQEnJ13kx+VK2JcQ2Zc69uU1lxDWpzuw3eBX8J41gXI7N2nGXUYF8G IgQlUMw48IQ1R+omvmuYIdOHphCxiUluknNTWUluyUhVWUluulupDD6JMHyN cN9Q9yd8Bt1QsgZvSFha9yf4csw4+YkWVyRk3g1TJ0Z6nkUwVt8CeHMeclyJ +2LPfP1sJYnQFR16oIi5ZANZpCoxdKiC3FjXW85BP4S4GFhY8xUiaAuKdVlA APYoi3LlXYZCpnLpDXpf5jrbOC1OH1/mOQtsvH1viGIAi0c3KbZyWiuQAfAn XoWBQehckVmDAoF2Eji3Nu4DXE/3WHlM1xthXniHmoZ+WZIGckc0Z4pPIS9p AF8Ay0usgrJ0ZC/1A8oy8nEYhogNLoDzQiyA9HPpWaVVcDTiP+NN21LlTXRZ 5AKyQWuAflnkAlIRLUh3CGKKtUCthJWCJYnaI2SIyEhpTo0DZnmsWlSGyEgb Ry4B1nyLR801JSYmijEKYomSaOYLmToQSOJ/VQ1hAKIN0HdVawGBLIIggNVZ jzqUR5d7nSjQiFFFdwA4HkARNgBIdsVZIg0WJjMAawA0AMBH8HZqUucCbVow aykYlGDNWYsFhC13dPRZZFB1AGUMum/KDiwJ1FLLR70FQHapXwODASfFR8Zu hgYxUMJboW8OFmo/UGvqWaJNRgRfAIhtykj6czUDPV+XTnoCiywYcj41JoRL V51SkGSMacY4CwVjV56GLVrSEt+KB0xkce8CQm1mdvhZ4IYzRtpL7AIFPLc2 8oPCWixfHnLqCnAANQBpRzBamXNGBGxCcADQfARa+oo9fspOCgj6inUAfSjV D/mKHnLgIGtEHITCWfOKK4C2ipdj6IADix5yoGFMgdFZEnIecmxOZgBLd/Y2 y0crQx5yMBRpAH83eUxbatxQ7FCZWReL33GFTwda/mnqBcRNW2oyUIoCT1j3 WxBaZIYCi6N6n381iyRWsVL6daYMQS12MS1ajlZRR6tnKIsEWr51nIltWgpa eyqFY6I66gUNWsw4aRAOYB6L3QijKA96P128fcWAtE5Yi/RgHXItWu5/RoZQ ENQxOHYQWocJD4v8Iy1ajHTUEFwOaIv4iR4D+kYnWm50pBGUTeZaJWhudMFl bAW5cwRavXJ1AsJlnA07W2UE526zaiRa7m5KZgoIrXaodO5oB1oAI8gylQFZ W9gvuHYsNJo6PQRzco96FlfYL71yQ2V+Y9FZyxt2KLZyM37qBZMDTmk3iFth n4t3gDd6gouNbaCLp4uRh0Rau3i8bK11JBBfABxDOXJXYx8iXlPBbMIS6lmY dStygWH/RLxSHyKtdcM5rYv2BTF2G4k3W6oXIAaCCYWLpnB4cncRe3LcWUBX j2v7OhJlnVrgAqyHVFwJc4tahGY2D0pCHha1CQ1c0HUpEfMTFF/cWYcTXlOe gqFu9TiBW3w4X1pvXW918HE3i4cTaj/kh9VtmWWAcbFw9ouZfqiL8ouCdZNq nH5oW+6Lv3D7i6g5/YvOffiLAYyrhfWLCIyWcftq+YvJbQeM/Iu0hQqMEYy3 hROMBIwLiA2MC4yhcQOMVxnFasKFjlodjBWIGYwUjBiIEIwXjMFqDH4OjMR+ HIz+evhwJowhjAl1L4wtjNaFLIzzi9mFI4wnjNyFNYwFjBd1Mow2jBluPow8 jPlqO4wNdp1nr1r8i5N+O4yVfkGMunAfjKRaKx6ihUqMAow4jFcZon5SjAmM Fm6ZZad+TIynav+HT4yybQOIXIwVjFmM7ou0fleMtn5UjFCMuX5ijL1+Z4y/ fm6MyoUWjFWMsXFsjNCFdYx2cHeMEnJ5jA9+WoyAcHmMXoynWnOMjGoEiIGM aozlhVyMTRB5c45eyToOQ5dX81pmZHN17HcyhoWMGE0MeIKFJWzqWQCJbW8W JsdJaAYFSAh4+IY2WiCMVwZed+M8R0kAdTUAmYxceQ43bz6aWqSM5Cn7T6OM 7n8VaGUEG15XhWZV2lIGhU+MR4YUVicm54MIeGgAwUg5Z5SMV3HkFFhmrozu f+4V8A+dabuMdYMHBvJ/xIxpcwpj+wThMhtbrAguBE6Ku1oydPKK1EQRgO9N bWp0dVJXkCvAUExlfwWNbqYorFEDaMlZlmRGiThk4mhMYOlZyW6gOj08loJx fepZ33qYOtFaIzrWc35fIzrRWqEEOUdNiIRy4Vk6b3YAjghVWwFdbGoxCqhO DlK9Rx9agYraSNxI+FqLaZMCLzWdCAdGvVkeeZdFmFN+XUZV4m80OMpmpnCa fdVZe2o7X+lyTQcnRyWNHSGxQlqIIkc7i7Y4r26rA0wRKY17al1bwIpNBWFF iAOidACHRlMBA+BD6URHQliHEEOPOvtHAFvXiycRw08WW7s4Rw/6d1mFJFv1 K9+GFnQAW8ApfDjMAs5kGA8DW5UDM3M+c+mLl0PuRDFzd0U0c7JD6mwzc4A6 M3OgR7ZsG39jjaNwnXtrja57CFugQy9/5lJUR9hYIxXVglmDn0OJZeps1okk jU8f5VYASMx6Qlu8OW9IN39lhimNuDlziTyHpwVojfgwkAEbNp6LRltkb4cT nocDW5MEHXaTBGw4oEfHVRdv41F/WiwR/kMVGDIAvogVibENZFudQPxT/4A2 jS2CCgBNAMdLvxBmbMdLVkuoSWN0jFeFi11bdnKqUppc8naZW3NVJ4YxhleL e02kebJkKHNwcasMqgn+TOpHZAY0CBlb9CFdebGAqwyRhjmL1VlGieRulFuX YlR43jhfcnFMzV1LBAtnXXl4jXpbVHhsiGRSU1tPG7psmYX1i8Y5543oh2Rw w1XdHTOC+osNjOqN8I3+i/iL8435c59+9o3mjfSNBoyCi/eNZHhFcP6N+434 jQyM6Y0DjgCOmXHyjQeOEoxZjP+NB4j6jeKJ642fcQqOEY78jbpqD4hoWw6O a4wCjhWOBI7tfRCO740ejrpqoH7ujdYXFo6ucSCOJo4ijutgfIwajgZ1HI4h jgiOeIwwjiqOMo56jDSOiwInji2OC46+cSmOOY4rjoCM5Y0djjaOhIxCjjGO Gn44jrpsoy7rgKJTR2alU710JY4iBDhd2nGJTA1qbnQaHaVzB3pTW/ssmG3G g94L1IwSCV9V4zLebmpU1RKCf2WOTFxTW5ZkhxO2jStI33rBJxU5f17yCGRb aUeELcaCQRqoBSdHagDaPtZzV1+gR/EknYqFiwkbTzmMEd5xMY1lBB2FbUd6 hrBbPltmAV+AtUCjE3kEvUfmOWoAkHyYjLpbhC2tCFlxtBBsHDtfcTr3U7pb 6I1ZjFBF94uCi6SO8Y31i6eO9Y2mjm1v+Y2sjqiFr45YjO2Nqo7VffiLtI7m dLaOrY7cfbmOD46xjhOOqY66jhuMDYy3jutgTozdW8Vq/4vHW+5wvo7ZbSmM xI7mCryOLozMjjOOw47BjmQDzo7Wjn1w0Y46jNWO2H7bjkCM045DjN2O4WPz Wl9IdwgrcmRgGAVmNaxp4FsmYd9gXC8cfYJ5pCoSDpFDCwWahhgFtQm2RWQB 6FsjhBwG5gu/jIpzTiNwZwJQAosjhNqM5SmViiFcrY6Eg7qDRlwWB5lzEFVO WR1cXoSUiAeBKlwxcngc81sWB9c534ATjxl3KkRkVSdcG4+WUCKP6I4QDhsD bYIej3VhF4+eiH5/ZlSFfw6PK3IIZvtXPnwsjx856l0xj6durYKtdZ5WxVnW BJyB4kxlSK11TFkNBBKPgQ5Aj7ppFFxzRPB8iAOxYjmPDlsvh5Na1gQeNKk4 KXwljx1DhYtTj0Jq0lugOBOPUDofJRI3aFI5j8kIX28DUu+DgQ4GhFaDUgkZ BSVcxSNVSFeLiFJ9SHlBGIA7j7Ex0E3JgJeOKRADC7h2U1wuF2SOKRC4doFe AFyBBBsR1wfVh8JbbncrcsWNKRBZSdgXFzhNT3NC/1gDXPlzCmMlcw1jqEHM Ag8Onn7nODtbbwANTvOLu1DACUhSVEd9EBAEvXhUfTZGy0isSNoDdglEEv+A HIAgdtpyCY8nR25UG1V+f4J/8F05B1tq7ytcXMlhvXOrXK967luKjLNo137p i8SPhX4qflRHx48Tfw+GwlmsXNRswUe0VkqDwYJ+PIxd54bpid4LRHv2XMUO s3afWK4a6wI7TXZegALeWdVpVh1bYJNS6lxkeN8ePV1iAHN0jl3PcdgHEHjt XO2PdgRKZkBXAnO/jbFd7gOcga9uKUxAXdgHJ3dGBAiPvl1IWUo0FwNbDkGF llDdGHI031DVhc50s2oOkIFqGI41XeuHEJDYhQtqyY4uXVOM1W0RkOhpDH4d kOB0+2ogkPt9IJBBjiCQRY4gkAiIHZAZkGddDoixcCuQxo5IXciOL5AXkCOO NJDehc2ON5B0jBaQOJAgiDqQ0H48kCWIP5A3jByQNZAPbkOQDHFIkBh+QZAU cTqQeWhXeewDWXmIXRdJO42DepFHdEndh/Z600fpW8JDn0O5QmpQoj/7XLYG lTHocxlT4gMFhbhcdQYrVRNz9ktaiHUGhy/vf3YEuTrjV4JdgyZ9XZFD3EWW A3eQe11PWEpCFnR1RKUTaj/kf5BYgJDIisw4cHGFkA8Te0HKXNlftCflchaL SF3oLvaLoW5fHD1FTWhfHNOBiJD6BedDlR6sKb5d5kNrdxMqUXtnd6KQDiGY kKGQkhq9dF8c0WO2ONISzAIjjRldNk2ikId0n173OpcusF27XayQz4KAgLFd spCMa+IZBEPyQa+K4F26kJV5vZDFkPNCDZD6BcWQpV3LkKKQQ0MWQYl1XlK5 kKKQ+FnYh/YoXlzUkIxr8xR5hSFY91OrkKKQDl2wOCAIpFfgkIxre1pZTHta LgDHZtxU5pC2OO1CLzKxQi0DxF5ZXfoFgi15bKR4RUdfHIItFXt/kPoF4hDV cUiL2127BuJockfVZmZ2G3iUkEIzSjT+ei42ZgGwQdtdDJEEgihM9lvGXa9p xBFOO4QtxGnrfuBdfFR0P+NjJ12UHkqB5mxlDscMsRVqP5qQlB7TMpIEY3Z3 X+1cKYFiOM5WhWDdjaSIWV2cDaN3zwS2cksEhglqOO8OP107kTmBNoZTTksE Y4UcgpiJHF79XdAE14s7YOlDWV0tdoyPlnBDkYNpcnUwHmBuRwAcXnt74TOk OBBIJBB7e5swYFUPXnt7PIJsQowEg0ldkXggNz99IDpdU5GgcjaN1R8fXnt7 JBDDTU5eTpFxkWyRcJFokQ6CVV1skTaLvotVSZVBD150cSJHJBCCkUZTJBAq dsh36mx2EOANWGVZg0dGhESIhBxeSEbzG69ud2mSkd85Mw+/YaJ0uoI1R64n SEaekXuRoHsBi4aRR3T2Y1Zsj5H2KDSFH14XRaF5ZY0wSGeNT15xaSQQu4fx Ty9e3GG7hgo64Ai5EleQjI+jb6sEhJC9kYYPeDRqOPlqtpGiCKF5kHuSITBp /jmiCIePzVzNeYtpciCdCSEaFV4lX5UEdI+ydHoDMR/xC1+NZo00cwQgzToi T7x3tza+dwiRymF0RMN3aSEwYhZB6EZ6kf1xGgbhhtISKnHlioVdo5FzdY5t p0hwa/p+9ZEZU+GK2lwAAz116VzzTX2RU16idPdONzf7RyIEg2kXb5UVHn7B XFZewHN/kOxEr2D2j3AE0zSVHpQCtS/tkdCHxHVrXiZ0lYjtXKsEhijfjRyR hg0Jatp7dXFZXedFSYFYWnNeQolJan+QCwNEBT5xnA2IbYYN3joecptcdkU9 XfZHOAcEbUOAPJJjAPYGAGlkcXiC+pA+RexzFnS4h3YAc3RKkj4rz4LpMn5d rXYdQj2J/miMXikQ8YU5EHV9snRXknkCujz5aWqH3l66Od1Qd1EIePE0Tj5+ XmOSfVugjLM3bWahXkhGcYBZWt8QVUT4YSxucHHNXjp87491CPGPel5rUL59 oW7UXgpLg37Qdvx63l5rUJ5rPZFib2+ShgaOZ5VvSpKeBgo0zWtrfdZehga+ ckluPYcrhFMFYTQgbbtYV39QD/2QIJJQD1A6EY/wXf2FSWr0JYJ5ppK8RUpC JknoWlNOqpKwdQeGh16pgB1v8IsVX7SSSmawkqsek2qxcLqSpY77ar6SqI4W bsGSq47AkriSro7Gkh14u5L9jcmSVDSqgLKOO3DEkrWOs2rSkriO1JLHkruO 15LKkr2OzZKbks+Sv47DktiSwo7VbdWSxY69kuKS+XTnktuSx4Xdkghp8XDa ks6Sy5K6ag9+5ZK1cfCS3pLyktOF95Lukrpx7ZJPGYZq9JLokkeQ+5L/koNw BJMKGdt+B5MgbU2QCpPfkkcL7U2+kqN7qke4kp17vpJNaKwfCJNzgks0XG++ kjoQrBzqXvGS1nW3fBiTIG0zbnA64FRaiFAPk2KVb2GSh15KRBVlckcVZfFF kxrUXTBDFV9qDuEfxm9KknkZUXIaBqUN+3dZWk0H0YrgRQxrKgSfgaZ+f34a kq6Sg5KhXuZSfn54JIF+o2+ScFYECgWWcAtnHV8OFot+KgQsXCoEnHAOfz9x S2lfACFfJV9fi7RVFk40X8BHVCszXzdfdTkxYNNePYkFBpdvmAHIZu+DcAAy AI4OUob/Vk1fMVc4CXw4LBE4WaFf0X9uiNN3A4FNXyJmp4T7OC0AVmPiVuwU TnRTenU4eFSPOk5YMHmPAoRoCki7LaB9XwSJk4uTfIONk4qTLFR4VM5HsUX3 TlRBaHVrX19i93mIbXswdSplAKVIukVWghlIgAI/cWSIYUdzUSADPxGSSPQm bSoHYLaTSDGXeP0FY1d1k72TuJMga11m4lh2OBZBgQG6SMUFzHD6egta9Bpi X7MRxIarBiR/gZO0ExoDMDqYkpeTVY0DWLAc3m9RX6uHllCaXk1fq4fGCPxg zIyBk9M0wSs6bxZ0Dw4NcJxTC4YyYCoRaIjwk9mQ8pN1hUKR4UeuZ80JgHPw AtAB6IBFAfBCxTP/ehEoHEhcMz8L6z8tk7pIa3obf0lCOUb9eQqUgXlWbHdg GoYXVJYBMQADFJBrsV8rMXY5Gwa2hJo/Y0qJXyZitnInMv4XyDGqk9slDBJT h4YOvmuaiOYLnIi6SLcPJIl+TIV1kXf7OFGGfAXvWZF32lIJdiBcMZRvSLJZ hUkyYBYzSSAXSH8MSSCJX3kAESVaaeNDkW1OObpItBA2OMGMGgE1gbh4UJQS EDNHYxkzQhNPxgKrA25laXNelKQbDEYBXmMjgDrlXSoY4oYlcuESoVX1YNgT IW0cebUMXmsyYNgTtQWjRBGUbpR7aBlI2BPnSySUvF/sQb87vV9HcoCUr3Q8 eGthxV+9DnkCYGxxK0sBXwDEgO2Te01iQh12koorgrKPK2CVA3BJcoDwAmhk Ule4ee4fXGokZ8VfaUF5IVaLCkiqCdsE7wIDOS2UyIkvlMqJoV98Tb5rzzp3 EbpIawA3AGlz7ZNDcugIwQkfJflpoW6edsxiumIZUh5S7l/lX21vhwO3Nk1T 3EvkX/9H+0L+iflfr5DqJ9toNgPfOWJPnWtZCM6U9QPtXyJHvZRZCEFzbib6 b/BC/nbvKN9Qa3/HYbY491yHTPQC+i5tAAqJrYKUAgJz6ETubgxgAnPMYuNi wZTZXMBIyQVZae2TAm+UAj2RRAU1RytEl3ffCcVhCmADRhJwIi6kf/iU/wLN Y7Y4zHg6FpJfRWWBQ8hmIW/1R7YvPR4KSJZjzByqk5ZjjZQpRlZsoy5eXxFg owzJBGp110xlUCKVc2bfegePA4NzL+dunwOaK4cqDGAKewtJbVGeTgBIg1KN fApgJBrsQfuUO5Vpgs5mhWCeTj86nX35ZjxgJBqzkzZg4myajDqVjmk/cb2U P2DIWB+PQBtbXz9gR2bAR72UdpOBilRQcE7zAhsEjkfEBlQEF2DZGXtZa3p3 aWqQWWAxVSiRcExSYAEs3I+FhwB71n9slfoI3I/miY5gSmAqUMs6uneyZDBG X2B/V0xtOnUGUvYGdgCGYDY6EklJhHFgvRPHBtVpVQfqfIiVxQ6KleguhX0k YMNjqThNkZOVqglKckEtrVNbcYtnimAzD4N+XJQmb5yHOy81laKVgQ71YKKV QJIyYIWDgor4Q1NkcGp2OfRuggItb7NgdXdNaFxH/3qAVJBYuJUKilNfR3mM ixcDI1+gYOE/5TJHBlyV92Q6h31lyJWcYD1qSBlhfrNgB3sgbY8QZU3FhpVg /VlkcRZ9HWCjePKIgUJbR3oIQYl2ZmVIAQovXPACNgC+a72U3WCMJ30Yc2+Y U7dWsYzASN1gJDVebP9+mIfhYN9gtoZ2CN5g9QIuQ8mLFZRxCIhvQoYKYTEK vWP8QW9I7ZNIOg4UuUSkdtiUsHa6SMoyVQeqk88Va26hbnEAMwCbjRWWx1Vm AHlUCGE1AOdLo2f8YGpzeQWBZj5Hog3KOH2HFo8LYZBE6wgaigODog1nSZd4 CGR3CddOCibGDT16dohwiHiIDmFwDqAos0HjE0AiVTmCQzVIYV5wc2lrCGFz SLqCKmEXIZY5o0PSW91z83hSbK11UJbUaOF/dpTAe1Bh13cgknEAdwAcBDMr tFhrbj5Q+lFEBVlhVDnLS3kAOQAqR6Fu4Gm2cuMjf2/7BQ8UYWGCAq4hPUX4 cvVhgAFYbP+GCJX3UGFhzjnjf+KCAwVcYU8fcoAVOdtZ4WHHQf96A0JBSIaW AQqCQyt9Hx3CAucUln0WdLeThm+2UlmDe1rzUFCSPmfhYZQSKoVcca2CP2TH iRoB4Hh8iZsSo3NfHE1omxJSfFN0ZQQyZJxhG1UEc4htAgmnBQNi0HtbgyBn 2jS0luSUslKMYfMD7wJDBUp+lGH9gAaBMFb1R85HGCDtQLwv/0HETcWWg5Cc YSoaAEh5WopHxZb+AgM7JnP1KH1Vvi/DYc+W4pAAh6RXxZYVle1hz5YTFWdE mpbSltpRE3MdSVR+eUQbjwpj9WHllK1Ps3aBUMmUlGG8aeB+SR2Xae1hvGmF WmdE2zH5lsgUsXJnRFUGcVmLRMQP2TlBSOWUUTr+WulhCJckEChe31CLRBZE 3WWLRJghlpZZBDxQXlPGi+6W2gNMkugFjHRwcQkVtYZplpMCNTyBiqwcq02c YaII5Y+YAV5g7WHiEG+UMxmeUiiX2kEBKwcdmBWdlZRhLpfuMnUj6VkfXGo/ uw+Ycoxhni+7gJKWVh0CD/J7PFycYZFntnisOVaUKDHKUqlptiryMlqI6mEv lwBCFXDmlr58zAJ/SRRWaYJbl+loSZfDQNlTsGiidGOXYJdgBrY4XpfXT9dZ 4XNll6JhzkWjlYNQVXTdXcFQux3aA0lqrZIoSaJhZBEjRxBIm5SeR4OFt2FR RX83gEjECEEawHrRYSOWFGKvVdZzz0xZYYMCiHgAFOFISk+CgPsxyY0hdP6M FGLMOPaWx1GiYfUjeX0hA01tPTylBPWMVmnSlmsE8GkbkUljppdiAEtIuETF h21Rh2CWArFyc2a3dKaXeE7sb+M/XUEqUS5R4WGcBYeWrjq9l+8ljziLhxE2 LAgcYvYynZDsR81l0DQyfvIDrF91hiFiuR6fjb5e8nsfMgOGYVYgR/dDIAM6 j7J0cIQoR1oYSmZwhEN7NjdDhdmXAUZkYDERsmwzYohhGGF8OMBT7AJPgSBH XRh9eS1HSVcwUZYClViSOvRHOWIyRzximmSDW6Jho3PoTh2PhwVMk01HZWa5 BF4qCXR8OeFhfwH8Mh+SKJZxCY+Ke03rCPhGAnhUdlZh0BvucuGUAlwfGz91 JAsBbdKWgQyRQ2IrCwUHdiBH3nXyb96WOm8oB2ZkIEesXCd3PEn4ZAdlDXBK d+x3LmXLYzQAW5I1R0cG8kUfdDGWInRbYkgQKpEdAfld6IBHBpoD8iTfAgBI f4ZwWd0EnylWYmBUqx7uEKOW6EYbhTQDTBHLXxuFG07VU1ViBzI3hbF4QleU RKcl84dhYnlpqmIsXmpiV2LmVBKNUGJrmJ1OwWhRmEpy+Vp/bAxrlEQxWIcD W2NXYvh3PlWXc3eYKTh8g1tieWmWUBlRFGSCmHOYAkZeIKtiV2J8UohSLlUB LKVYlESNmNQxZEkNXJKYTVoElZeYzlt5TJREClsGX4eY25X4FM8EQRozA2OL oGJXYklP2jhgDjEUGVmgmGlR5gt1CHKYyYA1VZl6HBEghOgaaph5abJVrFVH XZREGVaQARtW5mRXYlUN4Iy5mEpy9ydjYnlpc4BFUbpPxpiBhlBaFhZYWkOB mBN7W3Vdp5jKmCs0O1zrg2aYSnIOSGA1Z2JXYvZduhBFmNYS3JhZgPIctGPh mMGR5piHgqBDGCg/OZhCyZjdmAsD1ggwBHBOlESxYGpC/mj4mOtB9TMPBuyY 60WkV5RE9Uf3mFdi1lGmZaqI15hKcnIARGJnQp0O7Ji+MkJmgE+umCVpzpiF af2G7JjmArJ4rpj2BVNYLkKumNKYV2IOZ1lTEWeumCQEwWe9eiaZuxxamFdi HmnmmEFztWQuB3mE9wenNmaYrkceA3U5IZnpRIUS4j/rTctjuQW/Hr5rOAfd GAlNwAwABCRWXmLsVGOITE+JTF5ie03tEw5wx19qmBJBc3HZFAsn6jthYl6C TIKzEYxjIQPtDIBz6jo/mWdaMG+pl/GXxyp5AEJGOm+3CF0+YWJnWmmZMT8v PhNjwA1HidYGsmHVGzVeYWIYBl+NP5khcyl6ZXeYYg8JTWkcKV9AVmLkAoKZ V1zoGvGQhWLkAvZHMDqhbnOGgYYFc9FSt3xlgySF8i6dg1BikmK6bzVUpwUL gmpjmpm5ZqqX9WOpYvACbzp9XFWF+WJGl5MJAlCZdcxiInHtDKocdXJqYz0P 1V34F8N09pbqYkMPtZnjMmiConS4me1iuplOU8+D9h25mShOUVMuQ5Q6xJnA mcaZDE/ImW8o9h2LYj0PHHjxkv+Fy5lVjUd1s5njOD9xCwX+Ovli121KZmmD FJXaURaVgkP5Yu8FWVkIeEMGlFGLD5QImB5WmPpirD0IeNUHWXjkVDdJrEhn BgEs8ZlkUh+PI5bmmfmZ9QMIeMMVAmPnmfqZC3gKBcFa9BvWRx50cmLwmQCa +5l3UteXo5kEmg6aC3jxgCaRgmMNmnCXDZb4mR4BDme5ec44ZnZUOggTjGl6 BM4fWXV/FH8EgQi9Vu9DLWTzFX0QvHiXR62Cp0xCSkR3MoNxCCtOLGPgmXhx TBFVRaiZs5nxAwhHmAndHuF1xF80Y7wFDXYKYUiEdSMHcLyQSmP2R65zZBEW lcBe9WNnAEQY4JloAFCG2iOPmRsRgGw2NLE1YGPycu95NHPdTfgCDwYkmjwI onQOlTNyZGMqEUlqd2n3J3JiqURJavYFn2VbgBgBcprWOR8PDw+PAiUijGNw BX4FHGwjIohtyxEPILYIESUVjzBW/185gV8ZamIVkY2CiwWSlXea3AIiBF9I PEUKlGEn7HstTkILQZrrYFYBaIc6gk48sDoEekaRWo4vNYYG9mCqgJeamWNk actjFgSfcxB6Yg88g51vYg8SNF5kFgS+dXBxNAPnA9VsIJKkY4UGfx/Vgvo+ /oqwRGMZTCQkfb2a/QVjGVQ5UDoWdCAd/0eGKB2LamOSGsdyfIeWAZaVGAG9 X8ty0ph3EbA5QHTLY9B1tWNVT7ZSK4bnAqNEWTawabBjtyOsaecCUXv7Y4hi 8xTmhtJZojm3NowHcDrnWyMEinj1Y7IR3Xx9fUaSYmTPTLeRPoL4XGmOJ5Mw CNhvMyuFaVeTz2PECAh4vyQwlNc0e4+rOpxrkQg8G48Sb4VnfN1jLSfvfDY4 gnnXNL5IFYmmEJthz2NnA7Ka1XLpORBjXTPRf7WIpZopMbN11gJrdMhj3wMF i/lpzgEwUtZITRB7ew+U0lA7m2N1TRDvcS9cnXtNEI1+j5koHEhG6EwwaU0Q 7A+Zc82aDEM3ESw7yHuDmvgCk0eTermakwkJat4FOl/9YyMi/noMQriYDWQj muhNzHguG+Rj/RJqcxgB9hLDdTwb0FcNZP0SMh6vmtBkfIhEd1xSGmTHcpZQ vFBsjy1kUQ/JaZea4hAnePmP6WPcAoqGe2aCGuRj3ALdiylnIF/6Lr0FQpmA CAJyamMZAc84Lzk3P5E/6jhfTyQQGEcelMw4r24XmrwvlCKYm65QcWTgmccG RXxqfVsOagC1OfgXv0BbYS4GsnVhlVhPdlj7RUSLBJs6FBtvIpP7mMUCRTmM ZCKDsnQPCH9E/F0wkdKYjTC8h7lWTWSDDBprqRnoZi6YvZvrgFNSlW43hhhH /wIISEEanynPULxSP1pKe+cFkpJXEdiblUzycdCbAlqYbQ4Zh5FoWc2BUGTg mw1wZArWgbRB64FraYJVDXDuCDMAzIG9ge2b55uljC4B8purgWpiVxFfjx02 OQC7gQ0b7Jv6m+6bl3xDLLmHE4C9gV1i+5uYbYNYJBDigQmcOQ9pb2RJImQx ZLsd2GFpggOYa2nyUEOSe3cpA8VngWKlaw6KvZqCOm6AH5xvepEC73yXmidC XzVqP1Z98nygYiqcIAg+l9qPi2QOdokCcoaZRbpkNZx1WCSaGgG/HDA6en5U VC+cwBheB4Oa61OZc7qS1ZlCnCxu3VazPIVkiTrVNwU3TpwsbuZ24GIKY+CZ Onz1TXBvamM6fNI1JACVZPN5SFNOXzh+0GQ6fKR2X5yNdKtiOnxBm2qc8XG6 ZIk6ZwPJlkSKJFMOlxZXVpwWNkt7kx49hItkiTpqUpOMiWQsbrdY8F1WnMCL 1GiDnJQIEVdnnJN4e5wsbkCHzYlGU1ac4VJMg5CcvXSTnHlzVpwWm8aBVpyJ V/dPbpwsbtKNi5w2OgpjAnjpT2ecaTrUi6CcNDhhORwG9QMPD8qTVpwgBl2B Spw2OhmB0ARfnF5T1YwEbLma61P2QXN1gJd/nI9kfpAinMAYcitvdC9iIFOT HtU6e2TAGDh/TZnrU319upwvWQI2F0gMRgYGM0hLV5Ine02Ues+b0zJAWPBp QgWYHt4L6iqqVFaY4BUGhtKQXogvnK8rmmkaSSBJx1+tZC6X6jwJYB+Fspcm U72JqWTqnFtWQAi3ZfOcfDieTpGO+5iBkOd3Ipz/HQId/mlnhbpkmIYyZxkB mIZDNrFYr3x5ZB5yIHQFZHtmhWR9dI+ZfSsSOJ1f32RBhzpSXJBnYigWVUCU Hrlou2i9aPBkTQVwcxVWnIxFUAVIrliLAkt4l5orEXU5slWUQ5hitlwzR0Ms 03kGD2KPUGKbYSYASjqIQaeEWwd5QokZYHu2Vw4hR134J+lEG226clNO+CeT loeQrYI2Yo5cw5YQZZMCZASSlOM4lJQfgCpmqhfflHpcV2lMEeoqy1Dtc1A5 V2lMBtpBGgYTOQAvO1rHBq0IaGsbkxNldgTAg2gDZUxXaTVjZlLul9hTJZ3+ XXNIXEHaObuX8Zd8nW50dZWWZaMVY5i2iPtk7nVDi5dzVFcCBWpzbVkwCBNP Z4YmLr97RnNtZUdlo3p8VIeRKGUiEPGAGoqPXd9QrggvfntITQXHVXcGyR9p c76cIRpYnR92hJMDg91ElnPoT29IcHEWCDMAmJwwjSoEJ3uKRy0DOU7AmoeF dXyll0Jlu4b6BTkRbEHkXTZeZwHMUd8HxjGLaaFuTI13g/BjMlzzY4V1hRLY k4JyJ2QAZeAYLnHrCFJI9FE3VsplTSW9eIdE7zO0TuJEaYJxlvMXwVB0mqGF zp11ApKFiQLsAvUjYjkMbrBl8CZ/BlV58GPKZTEbhS2wXrRlTiMfjzGXymWI klhaoB2JkbWARwZyfnRSu52OFMZTmIHtnV4EsnWFkIyZcWUQnvCPegTrnGcB rpIUnioev02Ca5dBynbhZQYesmWybL2KQVt7SH4FdQKWlxOd106lNtgp8QeM i4J5LZ6MC5mK4WV0XxxE1FV8Y9ScfX1qQgxovlM1nnkCqILwacIEVTm5SIEC IZwolo5dCGxwl0dERGSrZW0AHjaASCkRKhWvO71ynDLYVQ0B5QQEaohKDSVV JahJIXMkVl+e82hrfgZmsHqMdDp1D2jqnUZW5XHOnWsECWpsnqYQ61PEnMMR 9gakBHBOflJedSc60DpcTq1NORFCfZgFSpcBZt5xbJ7ecadcCmZOd0ieXmnB SDNr6TKYQDqCxVSrHvdpti++g/V7rzu1OJZyoU+QHZgFJgA6BZ0J1zmxBeo4 ZjrzeEY0zX+jniJPuooqZidmpJ6pnqaenzgTZSdm6gWRjAxCP12dQkcGuBO2 citmdTmFjViBLQh7McErAnN4ivtkgnNRUeV2iUyPEMQGhC32OS5kI2YrDgZ8 xZ6dROGMXHmBhUEaqp1Ck2Q4nVKjZbudf38vYoht4xCnd92e6p31IxsDwAgz c7eeBAlGhF1bsJBLZuB1agAwAGYAMACClpUDr227jR9H7wyNAxZIBJ77BS5D eJfiQRNl+wX9BTQD3nXFnuoX4AJZlJJcSGUvXAAEzjoIn56Mikcecq9u6HEO n2KeK4u4ZvpvfH4WVxGfIl/bUgoAcAQKabqMt3aGTOJT61M1R3JmfHmIbXEI Q0gRhnBx3gurBbFyYAz/QbgdlmafH8NBUUeRXVd/I3f9FP6RjmarbmqCq26W ZqtuFGM8nwobdDgbnzAY2kjmekNVR13GOh8/cjiiaIV1BoahbgaG9IsWblGf MHCxcFSfC2oxkFefgWoskLhm4ZHxh/tqWp8ekFafXp/4h2OfP4z7h2afQowi N7NqYZ8YKGyfZJ/gfWmfGIzVbWGf83RTn3Cf5pJvn2ef62Bcn0Sfe5/yN3qf QowAdYGfO5Bgn3if9pKGn3ufoH5hnwx+YZ8PfmGf+31hn0GOYZ9FjmGfCIgG hmZSO51+nzCGM5ybn6OdDZ8Khl5cxjqen5A5HlBaY79pBoYKCAwxZ0SyZqNs FFqffHBOBobnik1RBEmyn/mTqGbNOht/BobTjLGADob/AnRR+zpOTwaGCpTG Out7ZDhdKrRmLomZRyZxUp9kcMyfVZ+Bn02MaZ+6cH2fz5+lhXSfM3H1h9Of yHDbn51qkZ/ZnwmO2J9gjFFw0Z/ckuKfNHvwdOWfvYXdn8GF7J8fjuqfJYzw nzmQ8p/zku6fPpD0n/qSiZ/on42f4J81e/qftXDfn+OfLoj4n5Wf/Z/ijuef 45cZerifdTnROodmL2wWdCZx5Z+SBOYLs59NVSZx/prLny9sS1sVoIhk2k81 PEpm6wtCC1GGYTkIQgOD2XdmlohtohqNOjNHlU7sMiFn+zUfj186Z1B5MplH xGZCknJHxWbskPJmTCCmRal3jHYLJ4V80mZGBP2Ai2kCT2BH+0c7TNEHjA4G D3mEXEIFSBIDsQjeXymg85S3O8wC+UtMkhBn+JPmj9aak1JWDyFvv1IYZ+gI FUKvOImHSnKwRMGTKIXAiIZfZ3o3ANEB/ooFBnaWEA6Kc4xVSnL0clVnjC43 ehZ05J2pOBR8FnyDMJQSc3VaOQwEKU/jX1lnhSWtdfMFRTn6NMFQ12QtZr84 s3VpZNdOgzCydbBHLE8en1VnVJlRe3wGgi1YmWdnQYeqlX9nk1SGb5aSJUQm Y1JXeRZLjy5TKY/mQwJznJyeZxcD9gWFLRNemGeHZ3QTCWrjjUuVI3+2oMBH vTJ+Uip991Mfm6gwj0x+oFOAvkgLcptntCc5co6QcHG+SDR2eqA2FjdCpJfN T75Ia4EsA8igqwb4k1qS2GfBTj8Ubob8YHdcomf9OoaQoWmkTNFnKQOijmRw yWnsjTtw6qCfhdVt7aAYkLFw8KCBaqB+86Bin7Nq9qAhkO+g56Den/Kg/KAP jPig/6BhjAGh7nKxfv6gBaHkfQShLpAKoRuO+2r2oKhx+6AIoTaQDKHdbQx+ D6EPfg+h+332oPWgAqHXjgehAJMfoT2OFKFJkCOhS5AOoR2hB6AWbslpJzp5 g7JCsE0rfYF9fGStZ3lUAnuSBhdyLKECXmJ295rzE3BM5qC6eNR/4KAzoeed g3c7aLF4aYKrOcJhezo7jSk4806GZ3FTRaDvY/c5VhMJBTWZPqF7i6JlwE1W oZ6C6C7RDBY2U1iiZ+dutlRZT1hF33oGm/oIw4ybZy05ZaE1aw5Xn5hOoedu hJgPCXlMZKH+eg058A9YZ/9naqF1ocIZVFtgoZ6C6XO8Z3qhLJw9VPADP4Pb oOdu3VheBEdddKFqP451RaGCocw4FQcWZJFTTlGvoJCh7Zp1V2VoYFHfegJ8 JHV+oW+O5Af6VW+hnoKfnGmh527AiD9bn6H+en0r06Cbof56OUbLX4yhmptc l5E4MGkpHvdYdaEzCBxEHwNpobyVi3wYmOVuSlL0jM6EBYLPZ4tlLkPPoKQF YHXJOupVRGh0oNKbLaHIgC+hwKB0oAKKLgCudbCTz2cWBAKKSmZPcdyhK2d5 oWIP36HYnYZV3qGMghWKwmKBDMOftKHgoZtnuA6Zf3U41kiOeiJIslivoBoD KxS2WsygAATIaviaPaGvoHV5Z2cKaPFhrnCkZIAd3aFnOd0YvWkBX0poCKKO BV6GmUzuDSIEuVo+lJoHj4qCk7CPrp2rjRxoNHZYWgFy4BU6Ur+AWWd1i1iY AQpFnbJ0+wVDSFwPKos6V26WuZ6Tmf5o/p7dCFGGyjg4gzho+hOyQTpec0M0 aNESM56qgB2ipwUzc3Ig54wjbS5oZGg/oCQDQaBnZ7d2wWUKS1J+U2g3WLst fwGsnZOKlZRIaGEAQndOPM9bnmfeAnN0pF5gUkYFnjhLW9ABZADXSCFwD5+e m2Zj/lHhDwJz8xM1RzdCFA5gbCOazKD0GoN+TmgYeLZXU2hVBkxo/396oKMJ gEUXOKyXQ2dOIadtqgP4Ar5IvFlZZ8EMlY4wOr+dcH3BnZpHiqLMONdoi1Uz Yd46PheSSIOTAoEDg7scM0csf41M9EFZZ7sc535KZngANQDrlKSiTzxFOStq 857yRvYoNjgxFM8ViG1PB+OHJFZPB9kPTIIWgipI9SgwALU5Om9wcVgAbwAI LRVNWACkonkywYuJTDNTVEEmikZtkG1KNqRo2JBScciiAEbtfKFuOUYUlxcj OUaIbaIE7Y+2ciQm9ogWdO0UNjesg92i1VMxAJNHegD3ilRzFUwpBPEHvDt8 gcIRJnNxJUZVYjn0gOVomIGEnJl1OQQmAJh0tpLlaPuiZZCde5VvBYcuR5Vv eAZIBz6eBWlKZpVvjyAiRs8N+UuVb82fO3AQo9Cf+2oTo1ifsXAWo1ufGKMu cciS1W0Zo/egFaMcowGOIaMfiOhp+30fo2ufJKMMjmRwKKMIiB+jfZ8voxOQ CaMNoR6jIqPvnyqj7JI1oyWjg584ox2IPaN2jLNqH6Ogfh+jDH4fow9+H6Mn ozajPYxBo0qjbABFjh+jLqMco6l35WgrouuiLnHdejZ13WgcffRj/2j+ad0E VFukV5VvulfAVwmjLX5io/aTvmguceCiLnGMFMFDRCsvBnFMlW9EgahTMJsJ o9aeZjrak4A6eaMUaSmCBEmVb/U06UUUXnlMlW+JBFcrVKOai12jG3+Vb7iW QwWiKBElVKNBnFqjxhzcM0oOMlkMaehz5zlNEEOflW85MnlQZmH1aC5x/aEM n2mjonbyD12jq3t8ox5y6qEQeiyTmQSxQiQDaqJ+oy5xOGTaaNt6CaM4ZMtQ LwC5c6A4IkMmc4OVraNOk5F/XaNqfl8Ew6MSnzpXwKOmi4pQqaMVn/Roh0ez oyoEkZrJoxteyaP3cVqjHZ+NB8+jGJ8uAzBpyaPgoXh23qN7YCVIOQSdA1M+ +Wlro/ZGUDpwcU1GOB4fj+OTEGmHUaZqOTskoAxpJWaYbeujKgS6b/MD+A5Y fnyJIAahcAMFXwB3h7idEQRdgthoR2YBn5lH7Whdd3x3LAP3dQlpKgS1dAme BKNdk/VvoW4gBr59rQhZBGhYGKT1b1hlzheSjx2kX35oZR8b6Gi+fecUPpQY pJF/F0i5F3FZsJyqiS9ZyQiWo91o+29Ci01of0cKo+8xKInQUqsMDG9XAlMA TEpBQRek7zFqnHii9aN2nBMHeJwmQSBnFWmJOlwr1gbGgU2kLG7taI0IGYUQ aagSa26fKeEzzFkxaTEAAXped4WGdgAsWD5HsEUIEAadKZKBR/IkKpHmey2R rEgnaa4MtnLrCLM7ukfdaTCUBU4jhMCe8kYfh2oJpnIrm9xUe6RuVHGk+gVH ni5p7AwzR/uehloxaS+CKyWgCzqCDU5udCoRmU0fR9p3gni5T5WhaaTaI5mi lIr5S3oAK4EzRxZ0jVjmM2leEZ1AmBSdk6T1I7eTawZMoGWZZKSEBMmX8wUA ZRAEszuoivtqQmxhANI3ISWxll8EjlL/elJzYkUxZH8U0l1zH1eHEZQHI+BI J4agc7RSJYXzUDxJJ3FyCGCgbX/acd5LCgDhnaiXRBWVh/qQWo0chdRg9CV4 HFujuyiUCHoEP1HdMt+ku1XqJxVMtqRfADts3TscNoOanTVzdJ9EPJjvpI1u Egk1R5UzxgLTbok+VopIZXoIJCYeOaBzqk2qCRh5CpQrZqF5AH+RUKwpXDHZ cqgFwJqJeP6h015nA8g6LFjccVlaEaUfOxOlU05xbACNUgDEPvYPz4riKtuk gmOIUh87aXaBYk5khYPDpAJzCpQgn5hCSGw/Xc1pwAf/Q1havURQe41ONGiW PGhrfU00E5IRSjo2XpcFOybDlzEISjrNFd1QYzqnc6oJlZgubW8R0KRtR65g +T81OOldqo/yJBgBbwTSjK0ZkR68L2Ir5mSfFNM5PnGYbblnDmB9fn9Coo2n DLN4JBHSm89IfEIuRLFyiF+YIcSCFSAOe+AJPQRKcg6lo6Pna21vLZI2OHkC kgYSJXZ3U4c9pENspnoTZnhHGQFvAOQ7fqXyJICl/lZiZzVIzxVCBaVIhE+J pUZNi6VBlnhHYkTrBRqVkaWMLnY4lKWDpQpgFhaHPVhH00xaR85Mo6U5fe5e AgPqSwZ7mkeCAjilWJvAHDulZjqxiM9Zu3h5BedzJaUDW5tR/ETgQ85hi0Sr TZ1AuaVnQ+VyvXTmVIABVk7qDclETKWHjQuloQSXAWQK0qDSTUhCyJXJpdCI slWjnEt9VlPQiJmE/xFAEQlqApEpTr02TjFpXVYBX6CbiuNCtn/Dpc5hdUpP AJKGpzrqF1xCdkc1SOx39BrPNw43lR4YYdCMqowUE59EjGlkkg04rYoNOZuB j0e+fVaPiUj7WDgxhii8lJBYK58dRYt86U/lpVxp66X+aZtFE4W6To46NUh/ BMISj3wwjVaWg2HQAesI8X0Qpltz7yjZYXN16Wz/Ap8431ASpuFBEUYspkAi vhQPOaxIMULzX2JqYXUwUfADHQEClBoBUJ7jeAqUS1gfcFlXrlx7XZqZllDf Da9HHIPEBqNEdaXwhi1swkMzT9A6u1ojImJnlh4KAAk7FjZbatwXV3gIfHYA aXOET7GAb1NGlwqU7W/sQVmmBEkSpqqcx4ytnJNtuULAR9EQuVeyQlKGbzHh R11nHzn7b2WIyKXhM01VcEmEIc5H3zisdGpjBQqTGj8R40OidN+lqFddGLwC paBQnWlB1GAjBzoUZQD+GdSlEaYMH+ylhY+tO4JDypOrhMCaLZKSA0YEwJou V8sIYmdTpYV2jqDveLil72sTBzgVDxTPmMqlZ0xDbI1fCgWUgExifE03FNNI FzrfdhBHVQFgJcQzVJRLpdCIEqZxcx5H95nLoXRxCgkEZzppvk53AHAAY2ul UuqVRlOBAT4jawC/YTqCIBR7oiJHZaaTXcUF1opYWsERXwBsGUILfkieRwqU GxE6kiFwxXKTHg44gpD+YVmh54gIfIp85iVxWYRl6YnvYKockElOO0IIEiWE LQM3fze0ckoRQyzeHqpRXWaTbWAMk3qdeI46ypOpA+sFh6UGp3ZHypMBA2UM hqWELQyn80KBAQgAk23GBA6iYQDjeBOnAqeuTeFpEqcrTh2nGKfuQhunIacI p2xXT4rgDfOCdTjzgp+bzE1rADAUZIDgQoVpsRKzO30r/QWxW8RW0hI6QnZQ JUgKDhMDPnFCM8MHzpGZR5ISlgNLeEGm1GA6Ui+nMaeDaxZsNQPmC7lYVR87 p/NG5BTVgowEHY91BpBweT4EbJ5gDj1HV7kFGgMxHHxHlp2yaKUafg0QJRiS Wj27apQBYjkKCddHPUflXXNeaAOfppdIZUyCQ6OmogMlXq1agn8aYb6WKlCZ f+ZbeIxHV40O6g2VAxSNNmMwSHEJvkkABhpcuYlWU1xpXZJlAOKmHaaSR25l AKZCphFg5RTfemhB71ksGnt3uxw7nXagZ5FyddWWJTReRQ1ojQx/cWFvI0XQ AS5Ok3lXcqVZq0iup2QvFUyiLeghLEisp7pPrqeuppJISac3Wxhcj6e+Ulxp OnXHKl9vBSeupyhHMBTzlE1XqEfzcbGXkknwaShZr1xVBiGlqaf6Ba8Qx6dm Ta6nUABHADMA4Qs5AOwCSABRR4BE8E0pUBBE6Z3ap3lUrqflNuB1OAALS/UD YgAhDbcCThICc5cBe4ntkXyRdQA1AIJBIxVWoHtcwhJMbKOXcHHgbhYEDRaM mbNrHTjKpSmaSYG/RxFUJkxodL5rDqgdj2BN/ZTeiyBTkxoYqLpIf0mypqBi 5wOLB7amrzj0ExZMmj/yJ9F7OoLmQ/WI3nXRcWJjD4l4R+2n8TTwp/Qb86fy pzpOeolZfgOnuxwga6KnF4qOfD081FP9Q+1/8Q4FkdoGlAP3Ot1VUB0SRTxY PnwWd/hZ3RKELQqUtqR8bS5MaXSXBQmAy5OyZS4D/WydcvZRa3uLLBmXRUci ngII2kviA2R9z0elgyEvRlM0YjYAcABKAEsA7p5BhYsQmEI+RzkATQBzAEEA k6cxAE6j+5e9TYFHWABWAG4A9ElHABw2AWsNTdNH3w1ykD9x2KbEczgJwafO h5CnaFqxMcNpGVkjqK+Caj9kYPQbS1eVXkQSX2bHDNanlFgikgs9pkdbVTBW Lhv2Dx87+1hlp5pH8UXykDCGmoZ+glVv9Bptk5CoM06wpxhyJpbdBK6n9gXB W58L3BIalJVnPFawOYJrFXLOG6dIV5RhCG8oaz89iccNhJs4fliRaJEkBz03 Ik8Uhl2f0QHoPDBvTJ2QSfp2uER4Uq1/Yk5vCQJ5dE5GU0BjGgM5ggZyOW85 joYJTkRsQiFF9mGLem2kNUjTU8oPQajwI0dEcJBFqJBiM4/TOEqonx+OOgFH 74zpf+AD0S46h3WLsUJ4BMRN55rEEYCiN5ZiABKcFl2tkwRsWmPmCx0B/473 GfFFMk4ohT9Y9iHlo0Ke4yPxRaJi45i1L/JF74MKCfyAV6JwdkxPB0z7Ry2V noKAOX17I1DZGStUGHIDBdpDlJ4kEFNIHzseTiGN5E4sUUyLdZpjkrCYTIof R1sAvyTbeqRZ0ilrCF0AAEiDhgZtQwVDLHQfdh9npAxP6Usxi5lwp1B2Cd6a qVh3k4tpvpzKGRl8VRpGmEAAuy4gfOANegfjVyxs41VzpCQmQzpzdGUnCTGw OKIMRT4dgLt/blGqM0dE6ieNbo4IMznHUehGdABXADUAUAAyAPoFs0t8qNNH ipsjEIMC06ackY5g8xN7BOYK+WmviZNPtJaWUJGTW0eNqWQAj6mabJ9VRlR3 OuUO+6RhqGQrwqedKFxp84KSBhwBEKfzi90EaHSSbXlewlOLp5cY/xEzcJea t1zZU7hE2aiap5smZaFCkkRVuhD5Xv6oKHWGBoBI4wN4AAQ8+0bzQrRWP2R9 payk0WekBRcG5GQ/dAKR9kE1oqtD4IcDOTdI4mmJpcs+2UutO1VDQCKSEnQJ d1HlXZGBYEjVfDkHp0XiT9kZHA2nd7qns6c2Xgmp/nr8Q5dNbqU1R0OWh6Xc kC6oh42LBag9WxK4RGKmqgn2Mt5s2RLCYhY2uI3Dp0ORqg9bDqGluYw5AxuE xXkohZZQxneTbaSnnohvMVlXCmGlP+snGkKijViHYgBZT1sJVImCkJhTZQry qBoDzTEFlPNCAUceWi42KqpjiBtg6VAyYC6qFE6pTvMD3jqHKGxqn30JBSdH 3k4PCF5HCpRWHHQAoAswOl92q41DqrOP3o9sjQdUsQ0vg5plSaq7EEuqyIyD Assx/Wzde0NynkH8NS1IFV2AOvN4DRamE0AAnhF8VkQAKAtsQU6CGYQeAVF7 E4K1gghIowzbf8ZSFpkAW9CMpzqTbWKHVQC4DroZmY4dSGZgDU+Jbd5ffEt5 hH9ETk+gKnMAUACkRIsF5Zc/W1A6OGV3h/imBGwKlJZdNDODYAlqCpSeRNdD twSNDsAIn6hOoVI5cgAbNnaUlwHdcwKcPwvQdb8IO2g6qBeatzYmUzN0dhBO T6EFGBHTbsYbhC0mmN0Eszt/AmJnypPsMkeJVGKwbt13hlWSUrd7nHPIprGQ cqO0qCZHcThnomOexqoTn9ZMIiJcauND8A6jaDiXo28QWdV48gcySShYmgQL ow5Mrl6rDXlUfwHCEdObY3WEcxw2HjYlK0upMznlXU9sqQO/qFOQBp2yYT9X jQ56AoYJaZvvqlBRMznmkxxihGnsMotowgJ2oPmqPKgblgdP+6o9qAZmrEA6 gmUBLGEfLHN1wQxkYRZ3kW4/WNVyFTm1OTlFdkf/qDkAxhtKlDUARgDvRhpG 3Us0AIsWZTtWAB87/JY1R2cAMABUS3UAjxrpMn04OYUcVIUYbwQJEkJKUB15 i1AAnwtif0UA3RJJaiKrRUdKADAARwAhDUxsOABlbTmrZUjxB3VLRABIABU+ KqsTgq5Q70JoUeOmZgABJYtpG0PuA5KBSVfFCGqOrVSgHKByg5b9B88VjjpT pdtxVC67anAAIldOPWsEUgB4ADcAVgCOnjJWJFzJCDwokEgbbShu4EX7MUp5 v2nDEtVImYbFdTMD6C5yOKMTiJzKTWsAOADjBtI3vnhbDrsNBobocehx33uj qjpTeqV8BGwJrXYKlIgiyHyLDiSSopkYAXElCmcCc2yDbqKsqHMG8CV5q0uB rlBzAJ5zDp+Vp2BfHnJcX684rziUAlU5Dw7yeHNR/GopOCs4ZFKeR3hUWU+E ZYsCa25NRuAI6GvlaM2qvquUWFanTQcLA/Wm8ImloHkFhKvTMmUKgEG+Qg8P gAILYTJ3Lm3ti+Z322ylGhUHwzY6gjkAawBaAEsDMwCdB1CJrYI4AEwAWkOG pe93anGtnoZn96FQaLKK6auhX52CFhYQJYBIEZTwqy0Dez46gp+N2gNJq45g 9atUhMiIkqqBBFdzBKU2AFAA8mTcq01s+zpmZfiUm6f2q80xOoLNFYwM4yMc BqNEt6mjoRYWNjv4q6sN3nWxFbsI4E46Fn9+gQK7CBemeF8mb5RzXxxuovRu sZVuACaqv6mTjzU5/xo6gmVNlqvxl0hi5k6KlYUSf6vhZnhxL5U4Qm6rMyiH WNEHQJ7waS5XUnyaF+5HGKnebuulUgBCDBgClUS9Qa84Lnq1QENnnqstAKGr 0Weeq7wC5WkdklOLEnCFCEtIOVg5A84f1opErGVqQDkjqSiFUA/GDVxOqoDD OEAIfIPnqsSo3FYyAA8jVB2NQvFGUna4BDM5gpUgUzZepA3SnGSs4TJcOWes 3m54VFlIkkhbrE5vEgnOGot3enpCcVipmCEZDy+pLGORrGdixQJDRxWsTaWO jnoC/6YCJUFl2zj7R7moghxkcSec1G/zOW8A+ktPbzCBCkXzcWRFJkbBeL6m XGnQSOAIqwGhpQSeOAl8BQhIVavzcdAVzkVrbqqsq0NWq2IA5wMCVLmsq6wx ad8H9YjFrMCs83FcTcqsFkFWq3wOK5fOrLYv83F0OowD/Hand8upikdtoLUI z4pCkk86SWopHV4GgkHFBadPNhFKfaN4tVPaWpUD3ax0cfUTLVpdrJYCX6ya TcQRwqqailxpkxpjCWRp1mEBfXwxcSKba4d9XG2lYoiI80KVpRFIFRhYPPhG 3w0TKgWtdULkVRenCHxKBG1vDxM9pFBS7JGTbZ+nWIfWB68494KZGqhiKxGS hk+GeqodNvlZ2W8LreKeEma+OvtGlIeIqYYPfzc4SKCa/zmAdOqsl2RHKpJI nKtFR1KK8Gk4rUKP9CFpTmA1cwB9KM+KPq0XYo0D34Ktgo4G8weeUg5XFwPl Dms9uDrkFPFF8Y/ZCHg6+0d4A4KrNgBPABeAanM4pq1NSBqkWEKAAFSorL+e JFHUrOpIMBJEO5N6/qzElqCLr4mdkA45BmizTRlfgi1fAFhq1Ju7lnai4nsm quqqikcxAEoAwW5aAGcAogu6a+MS8QOtTVUAYgA2AFEAUQAqDDIA2nHrBYat GkyXFZB9FgSHZGZ2nmuVrbGAKCalBVKpLws6qy4A8EmEbCRJQABUbV55l6sZ rb1BZVHfBxgG7qvhh3J1SF/AMaRXHA0zrTYRAJWAAmMJNQNYaqBz+FRIdLYI 5arHDeVdpCrNFYEBMDpZVxdEfFYdSW6EaQJbaqacRpMNp2umlAh5mJ2tPJho AEwAOQBBAFgAegBcEolypWA2AxMVvxSfRyZKEQM5AFAAdgA1AGsA8GkKlDcA SgBkSmEAWgDPN+Z4lacTD3kC4qphSCeKeqpWDPaKhQY5ABRIoJpqAAh8Ii27 q5Wn9xvvfFyobUeSBNYxMwCSojcyx60QSdISboStCJsSMK1lOopPEa6qBh8/ hC0UrqyB4xk5BNCAXBS+VOxoomSTBKlyzkUYKJRbVH3uDUlu52/vKJ5O2wRy XIVf/npaZaFPdwgcBmgALBHgIANv2aVcaXgAUQAwEjUAO2xCAGlzCznXZAZ7 +KeTbTSuQgs3rlJqmKybSA6kRUc2TXAAqAGiKPBpQie1YXgEwBxMES1qKHuM BD8RX2FvKPFkL52Vp+utkgleECxY+WlDrkVQ96c4qBd08xSCcg49wIhjXdaq snaio0ymupJUirM44a0+WKNBsSfWc1pR8aVveVB4vXh8XPY2cK6sPZCJXBlt b7lo7KZug5JJ5DuLqoBIY0vvZHMGFBg1Wug8kK4fe+9k/19xJWZia26/JGFF 8o85B38Eqw1AABBHka6ErNtx84UlfUdG0EFjpH6CVw7cBGhICqzQXkYAMABq AFYMeAD3bAmsGE43AFkAgKk1AHQAYarEorqudV+4rUYEuq0QegRE062OYLet sBzHrleL8Xp6Av9DVQ1nRPw6TBH8Oounh0QmU1xkLgT1KCioaUWcBXiWu1oQ R0BJZjfYkTVHxzGJQH0o5q78q6Z/JAsqELFIMysgDUMsE2wnrWNP4RKkQSut 7qb2YcoONTiEBE1Q5V1Gp3UIHgRnqn+mJGBQeL5rxTO8mbJ0IQMqBIyiuxxW Nyxi8AKAR39dxhueRz6FFAOBff0FLIrITsd2OlzwAo6G50TDE3mL2BcgSFyt ka2nVNinZpbIiDtxL0ekVCqvhC11gq+uFkhMrvUIoQRfcXBxGT4xAHJS6gp5 bHhSsRJ3RQgG6UVvZ+dyzqYJqw15/acKAIKreAXoCE+rHKaqqKEYLCkram8E 0DpeYHmOVh0mYxw2gEjLhnoCP4IgrnltV2KzeMJiOU5CAEQAxFZzSRVsBHZK TzEASQD2RyQQTgA2ALJHH65pjjoWApoMRlYb8CVQH153SH0Tq356gySbqvim F2+tFQhJN0iRaVeKWmO0rR9IRUdAN2cAUABRAAoEa25prwxlbZL9AjYA335y r0pPDK8RBA6vooZXARGvCwUpOtFnCAZSrhNydSqdXvJ4OUQAmvSd9VBVEDdd 1Gkart1ITAB/rUNyawBVAB87J6wFr4tH412wlDcymaegYj8LmFPge98t7yjT mlRn9gJ/BlxaHTxvj1mZQouakoJ06GhrBi2icgDrP6emPlgsLL6nvK/UYDaU m6qWjEEaFK7AVQWIrxqwlE6OQJfDYsaUyJ7jr8OQG28IeJA5u3KNDisavhXI fJd48xMbdjSht5j1AwcGmJX4rt8D01YiTyslVzuNbrESUa1+MHY4G04ESKes sqz9BbhEza+rTC5ge2/UUuhGKQNwmNqgsmbbTQt4i6h4WdKtv6eXVGZfkAIS OLcIIFMZZzc5hq4qSOQHc3RLSK+v+EgeNiiwQZfSE5J1CWpQpARJog2NbV4q bjoCA6CHoDisSDIeXzrOcdNMSVdKWEpJoiiHPR8ln6llSGs9fUDLMYht9ycv Ms9vjA6paS6ZaQ5vhR2nV695BVmvzYTqjvc6k4uhnvtHSn3Db3mL3gUrBuAC a6pke7Uv1kgZrbSlLkcna2lJWGr1rg2tKq3jAwoA6Dy5PXlG738MrSmt+K5v sOgFm2Q6b3xcSA6FrkZTcilTJ3IpA0jhgnUJpzqoOukL80ZLWKeSEEKNOt5L VTmIsGBmNgBqADM7RnH+aTJbd0VLBLc2iLCQAscT53FzdVERIql4dhc6HLCX eB+wfrDXS3YAtFhgeKOrEkZooccTrWhTJ1514UE9pI6wvC8odeOpjkd5FIJU g7CtaKN0hbC1sIiwo7DrTh6w4zansDJP1XqMawt67hceAccxgEhZeLgEWYY5 WGMJyKXtDWxJeAbJk4+wKHXhNWyp5n5OV9ewXWbZsGZILwa4AgZnOm8+hfiP ogw+VciJHzjUThddV3YlJjNhWIsUhPKQ0QE4WR2nRgAhDQsDTACaCUIAoJrR rIanHAF8Dg13mB7lXQqQo6wyNc5TKhE0AE4JOQBRhtSvkGPkgBSskwKPboun qQNfsL14Z1YUsd5u3HWUCHaOE7GNOounJAR1AJ5HGbEgsd5uRl5cr+2a9FnO qWUEmpuVpxAEQzrcr+ZFkkL7R+KRYGbhNXMAjA47eD9NBSflXf2AbKmSSLOw jbCHsCh1qwSVXtyv/UN2ODZvq0M5qo0OUWeUaZ1S4gJKsTFDcarTVlMngYa3 dEuxJ4WTbYItF4C9eGBNzFbbsAN062mcBWFy5guIsDVj4TWrDbhElAgqEWFy q6ttp4iwfUiQcF8A5Tb5aS8FLXPcWI0OwhHwpDSAcD33CXCxtrB5R+kL+S4q keZbxQYsWrxjSVc5qkIAZIBEODcAM6v9qSoRI6s5A14gH3JkYPhVwAllqPae wT9WdmsO53H8rnBxdgBvr0IAcQBNAP2KGa4IsWZKUgDvp9RzSABWAGk4K7AK AFgAcK9/H0IATQA2AEMAtkjNdRNrrCk/quI2QABdQ+STfXCBikgaGwOkpX1v IyIqh0gavlhVWA5D1VNqrPprCz78p8movZTRrQg3vJTtMxpdyk72RudWg5oa r8AJM6zlTpYXzjjDQd9+JnmhT/kuALHuA1GGOAkEsTZeOIVfAKAzeYSsGDBW HwpJIf4CiylopfqQOg6vqtytcWW3Bu53u7HIVr0TTVirA82ECLHfr8ZMggII svQnBbKJZ46Q/KiuCP9iwAKFadUPnqHoRhwgvaupOGQ4gkxzXVR+SgD6AZpp p3vsYxNk+pd+nceL+FRemTA646Y9UrKXiJB8kYEMSA5YjjJnwq3WMXIAuETG rRFEDq5UppU+MgBHAHYAVwBUAGVtsrFhagMoUXJqCfZeA2SiBP+xJkchsrpr uFTRlvVjgya0FeCtPqauYEt4zWSIA7wvgQKCsTaygQHIngyuO7JJV1SmVpza rPVjRaSydEmtjQcmTpcVMgq7bZ8UHi9Nh/tTuxDtCnytd1h0smaWPJYmMtRX DQidpDZs3TqyqIxlC2aeC+GrsnTkAjpvRI9QED6sPxfITtBNoHpRhDZ9IHSL BcCaYqa3f8VyUyeyQfJWBa3pOE5Y1IxBGuhG/61GBnqy8GlIQjhpvk72HOMy oo9TTYuxG7FVOnIdjKbMZ3lvo3qXNZI526k+T3GpaB+IbWk6Zai5mgUKg6aE po+GebJ2sk1oWiLED7ghjQkVedkEbrLTZyhy6WN1ha2tmxJlqBKy7gPETRUI mCFNssGe/xpuhtAGwAwUOLKsgF7HDehGyoxFWEetsnSistpPFKwVOUZV16DM VVpjCWr9RHdE6lAdUlqrmHs0UXlOyg75RDqCMQAwRoItJjxhb5o6FjrPgjlQ 8huGCcZYObBCM2yD2bK4Zzqojk5wOlqxzDY3AFoASDryp2VtF5q8SEOlvJB8 r+1c0SWfFCV2rlCWYLxN9axXowKqBElQriUrTjuul5lMzRIiTHlgqa9armpj eRZxAHoAMZpXijlOSwOYp9ykow2TQ61oqw2Gb6Ep6TgjCayNqYsTHZ5EoYtE OCQC9jr7OpOPU1wThPwxgWI3L8ZrKoIhSfZX4JOZcLAVlYkqnyg66wUPh3Jc F0fGsg0EyLIuA92sy7JIcXtWuY+uYGcAj41rAOZVEWHLMiVIiw4sWI4O7nI4 B+xb0VV2szgHU35ZWvdNAHbsMnWeIFPxD/1kblGKUSElOQCDMFNpsF+Oos1P JHULNkSnglTtS2BmOrEsR9sDVTmVXuANKh1idUpJc6y0sVAAqQPjp19iMRZQ HXlMGpZHAHlIVgA4A4Qtt6+1l6ZSOJVYb9eLqp/vskJxZWWIo2CzgwJis3MA yrLvnmaza01tSZ8LEiU6ryJPpXlbDuBppzpKWMBNgkOlGu47tFZulktwkgOm kT5I2KdsSRQDpmhrAL82cU0zAwRaf28wCyGn6hfDYe84myaelrJ0E6rFkx4y s2wfXvMNv5bDTwRDiQL4F4JDjXJGAE4ASwBKAFIASAA2AEEOHXY+YYZWdAAE bDCmEzU4j/JGkwtBAASvq7OSR3SyDgNXOxs23pwOkbSG9mHPpb1drbLMNmdj /AyUaZShfQX6XSmKcABtkvurQo9UBV5vpIYGtK5DJ2s2qiAD3GO+SM1I8LI6 Do94+psHVIxtlASTTHsE/5MJSMplwVvjeGeyE4+jRMoCiAj0WVVckaHjNssC 4yNSstA6SKB+BXwug51AV2omG1uOBV51CpRqAFIAMABxAEMAbQBJAHEAUav+ RS8L5T8dp2F4jZRQgPydGmFheMlE3ASisz5HUAC7hz8RMVm4RBFS+URYsKgF RFsPrgW0RgYHtJhAPJaHL5xaq2WlZZlHiglRDfFVSAAhUVQAWAAzAGwAaTie a+M2WxpttFSmNls/WzqCMxVUivgnSXsOhR8KAq6qqOyD91xhAP+m0phdH4um q0wjRd58E3PcTuhGVDnorDqCSgBRC/ZHA7RMpiixWHMGHjcyvUhmTeVdUFFK eyeBrYKSBNsfS6l1iXh37EcuAbulxgjxZmRQXWbWs+8o2LOSdU98E3guF56v E6+jtM8CpbTVBgMF3qjsbvQajLTQUWGCj7RWATirlafGJwCn4rJ0TVU5I6lU pvwEUpuTHi4BvW6zahY2i4MPi20VakjhYVYdw7QPr8W0PHgTrzexLGHmadcH rzj2hZJaPlfcA1axPQQfiWNhYV/1tEp2pyr7R7YEvZZ+drKApwZbUIUSFkFT WHqWyVnAa0ISBTVli4sNUQ00FsQYsYlPOOJmNmWppalyvjmgrMUCxwKMJ9gH KZ7FjQpahS3sE/c62yXmM8+b9B2WKEAAyiUbHQqkXZPvUwhJZAoCDsdS7n+3 MEBfOX0DXYxnxwknRrW0wmJYkHeG6z+bgiakMbW+c9OGljp1UlFN1ZG0Gbm0 7nwYfJBtbH3YsihGcCmwYj9S4TMHcOWZnmcpBE16fmbxRZJXWit6prU4nVLc oVcRUVejs2dIgQ5joX9vm1w6V4hUDZbED3ZEz3pxTG61D2kKVV4mkh2zTdRg gQyaqpyqAICtVONvoKpDcjJ6jKtnZ6WqPjmnqqqqhlWoqoZVrKpAp3aqIW0s XrOqawa1qjmo75M+OZV/ibX5S72qhLVQTpdzXxzCqgaqw0vQo+ZS6HHIqjpX DKi+a7yrzqqIYQGb0qp3ldd4m4Y0Yi5xuALEebwvcil3RdUCm1Lgh+GqHTZW Rr+teqroqqZy9ox5fv9ebVfgCExD8aq2SPOq8arALwkFLWL0jP2qNhP8qrsc +qreW/+qBXd2oH5SnykFq5OrCKtkOAqrMab/qJECXTPWiy4ALwBqkMwUE16W F9xG7LXttadGwwelRq9GqUa9RqhGrUbytahGmz20RmuZUD1NJTMAq0aeC2s9 vkbutQO2BLaaRsZGcgDIRkBjy0baRs9G3EbSRi4B97UvAQW2E7YUthW27rWV MOMLUwRjYQAwCQDGOlAEM3N4UtiaBgb2ARi2HLbpjIUhuqOoBZEHZQQits8y CQAJAIFm2jRUO1YBLbY6AC+2gWYycugCHTZdPn0oNbYvttgXkASxRjAANbY7 AQkA2VZ7KhoGWXhBC3swFEg+tgkAJBDZViABuRTLMRxcGLY2tk+2TAZJByIE 9qgvhe4DTrZQtnswMQkBCucFeRNOtgeU3akRB1W2Y2FXtv1HmB1bDhEHvwNO tm22SSF0OG+2kQEzAE62zKV2to8XRLZCAcylCl8DRWE5P6d7BBoB+1NDEAJk IgB9tkEB2VYRO6yQiSzaTy8AMYpjBMEMkkYhA4ctCl8KABa2mradRua1bgxE ABUBm7ahtqFGo0YwEhK20kaqRvW1HDYRtu1GXBL6tWs9WxI1Wv+15gocNwK2 ora2tsBGB7YJtneJzEbZRg2220YPttRG1UazRre2xLbFthS2IAlYbPkFu7aH C1ERfLZTDVMFDi2lDfhjn3nSBO4ODrLSBMVFqAgnD5IZXZEbAzECVwMJBwoA LbYXKyAbsRV5BGG20WMrHgoAbAPstu227rbvtvC27LbitoYCvgJ/CKYwYggK AHIM+rb7tvy2LQAKACoAGrYGBosbXa0yCjg0+QIptgoxPU8AtzAIc7bsNBMq WRLotTMI6rUbA9wM7DXcHy8AkLaStlBX/7ZYBIatMV6FJ1kS1jHZVhRIJLZj YfYBUFfIDc4Ef1dJIhi3+i6RtouEk7ZaiAC3GLaLG0q2pAnTBjJQfjAEBVYA xDbmF5gyExsiEPpRTQf0CNK2kA/qCEs1Y2EgAMqqAbdeEHYvvlkUBykQIBV+ BZYXNAbqJ3Ir1wETN3wtpiOZECQaOxt1OvcRJLaSWkq3bwi+U3cQJQM0A+sI UQlAFFAJ4QatEaVW4rZDAj4mNRD2IbkGSR9oXmSi/bZ5t3q3+rZDsyZDD7dZ Fhi2LwAzJo62rJAtttISph5JIoG3NAb+pQQF4QwaG/cHqQVlNfsIKAD3L802 KQAttss6iLenAyW2LwA0BuIDbwQpL7BH4aSRATsJBwgDA+EMGLaHt5YO606D AgoAPAHoLi8TD7dhBB80+AL3tmAGHF5CXpq3/QhjYZ23vRSgt4236AObt0m3 7TTBonswwAE/FIEIJ0ccBky2IVi6t0y3vbcit8y3oCDxeKEJ8QZ1JsABaX+x iEhdSg62IEm23QNZFgy3fhGOtpS3SbesUZ4gyB6XtxufXhBuTxBYWiZZFqcD LbcVMRq3lLY0Bld1pTLLtyEDTbbZVpRGAQTvtwe3Gbcwt1BXvbfjOAkVqAw3 D24cxbchA8AB6bYZf2eblrbvTpceiLcmTtO3CRB5CfRRYgxmQm4fJKDfHulj XiZ4IDN5iLf0LjwFk0YQuGIQJh37t2hCmLYouP1GeCDOt/G3L7eiLTG3A7hx UDscB7i/BRe4kx0ZuA64ZGQsuD0EhkiUEugCWRYoLwQFbQijBukGE7jcYmoR OLiGGuq2K7jHDQpfQogCM/ECWRaDRPECRbjoAhwH4rZXB74CLSJUYAwD+bZ7 t/y2CgAJDkQG8kT4BCwpLxOnBpgd7ib5AtgtHC+Zj8cH9hDjEaUb4y1hQ/MI 2E/vAvos7RX/UOK2OTtwCIAPwUNtEgEDFDmgCSYYR0QqGlkSHhkJC08BtwOP t3q4krf4Aum3uwZ+F70f+5W1D/kdNXEiB1U8PhwvE7gMjnqKaQobA0XZVn9s twM3Chd8EnwIHowmCgWlNekG1rfGt5wDoBhKtiG3UbdbNVMOMgGMfJcB3AyW FEAHBAUmSA8DpBoZDyABxAFSALdWeQYoAPdCYTlHBqyv9JEpAMQBYm7NF2ZC GQsgXjkOsggiAHoDTwgwDI24MAqQt3gJVWBuACkAOgCut5cEoQkeGegFOgCB KnuSZiAUY9sFPFzguFgE6AMcAxRANiTFn9kqJQNiEctROzREiDwBvgLpBtkU GgmjIm0S1gI8XKYDrKj8JhoqQ1VIUMcSAwpNAFQAAQfXV9IExldLD34ttJ7i EKEJBhRzAtEHWx3TBqFVAbkbTq8l9gH2uMgF2C/5uC4nSrf2uLkOAQewekq3 1KQcCQkXUwAvAFIABwKwuEm2aw5ZElENjQbqJ1wqtrcZGJ0/ThOVYZ4Zryo8 gugJCgrWAs24SreLDAlDR4QgsCQ6AQl5E1oyNgnNB6wELRFAG9JB1EPsCaqE QRgGELcje6fSAa1IvAiterIdoAxcBi65MLkyudm39QMMHKO4+xnhAwt3sT82 t7w0BwNZWuGIALlCDvwIrwZOKyFdA0XXuO4L2rjEBty40gSQuN+4zrgRSBwJ G1U5DwQF5bjCAue4WrfsIYm4egM+DEQDfbl5uDcSgbnguOK4JgOOC6gFDwOJ uW0Ai7lJNsMEKAAZuUEYJBDSQccHRyfZM/MgbAAgudIBPAA+AKu5agNAAD4A KQAnt5JXqAVKt78ta1Q4J54vfgRUE6AWQwBUtkq3+7jjERwD7QmQBHQ4JLnB ueO4xjrktpst7g0YQPi4PFwGMAW5FCeQMS0DFx5EAKcHl7mPCXu2y7kDuaG5 9zrEAUU0GxFvA2gMdQxJIdwM2rkjA8AXdbk8XOK2fj2pBnNMqS04uIglBwMG FNsFPxSEDIm42LgPCygBgCo+HJO5kbfeuO64t3KXGawhhBCAK3kJyLiWRRy4 tkO7gXsw+0U7V8+3nrd2tykv7QnCtwK3xLfXt2q3ybfRt/m3zbf+txK63gP4 t0ZVKgPcYlkhkQGuuAq4M7mhGNq3Ebfdt9Mf4LedCOK3D7fktwK35renIOi3 4rbcYue2rTvutyy3ALgxuAK49beeMCK6I7c2ik645rU7uu23aADGtpq2pLbx tae29LWsRqq2wrYvAQIO/rUTJfu1+D4dNv+1fx/mCrW2TbphupZGubYvAclG mgQbAwy2MArstcC2q7Zium66b7rDRiMAIQAvAGA10jJUfiMACgAjAIIoPgVH tme5nTAFutMq+yqAF4C5RBzEBIuEUwQkuOk49AKGGjZeeLovuPO3YwCRByO6 FEgEA78Fj7oBuJS2SLqLuugLiSxlNSu2lQOVtiS6T0+LHyC2zzKlup26KrYb Rka6LgAqAE9PMlBsO1kBCLefujMNq7qtuiIQfQKyuqq60rdEi0hEmbZwur+6 wLrBupq25rUlttISwroUtk+6prZWAS8+8rX2tcK2Uz2oAa623qtwNzIA/7XJ OzYAYLrHupu2ZLoGgwq2aLq9tmq6DrbLuhC2Vbrauua6b7ovACoA/rYgAAC3 Z2orGiELJDtSMM83igMcOmAV6YRVEhVb80Cmn707rrcAtwschlMqt/dQtS/9 uv26CAN0q1trqQUYCDm5NwqClf8PgDChCbyd6AJZhqVEBrdGCQW7swQgENlm UwkDAygA7BgdCqcHRQAiANwMn7d3t8y5IjOgJsy1/bovAOK26br9ugkA9QXR EDkFigWjBkoAw7gWcjkJrQ+pEjgP1pc8ueFO+UAqu5ibjwUJAGFvCQBSAL0F SQBkAFsA5y9ZFiIAJACpKBQOcwLFumMALADvNGUKrAFOPacBMQAvAN0SpQEx ADoAESVfu6wBS1g4JwEEJAAiADsA4rYjACS76wUJADwAgknWY2gAPgB5umu7 ZQBtuzNC/RfjMnK7arsUunW7brvSRxhEcbtzu3y7bbseARYcebuCu1+3fbsz QlNF0RqBu3u7ibt2uzEWLwChBDdWjrt0u5G7CDIkB4e7j7u/t5i7CzE+V5a7 g7t+u480lh58X6G7kLs8AJU6NS+Bu4i7nbuju9IyNDHRTay7nLtoXp677zOH u627tbsiAGiuaAZoAIm2eboINjUDCQAcBVgAiRIJAAg3MgBpu8G7RgQJAE1B 40nTbplLqgtGto8QbAGqu4FHCgAtu0a2G7aPCf4IjwvVCA57HAPrBewNLgTY jLC4hWMuAOK2CQCgHdK4fC7TC7YM5CoiWiwzuA4tEasFeQ0ntj4ECgAJAMsw 9TGUUxu5D7e5Al1k8iDEKRAGfAY+De4f0wbxZ3EOvwU6EJFB+bsjQgcDA7lm uI62gjSwdDYDOgl3BsNPoQldZMQB6QZKdmSi+rv0FWQ28QLhDBRAEyrRuXMP ggnuJoQxEyEUvNO4J7r5uxO8kA8lCeMzYFIgKn8zASptJoNRxAHuMk8RqTRd hfm7K7eFoewCBjCtHG4mJ7r/uW4mI7yAK6yQ6LvquwcDuFTkpkO3VwSJjHQP MAjeiwW39gFQMcowErsDBJFHMLYVQqsMabc9FGhc3SoPFngHyE3jGH8urQVC J8Cc+bs5L1qZPgUJHn0CdAmXFQkQPQWHGFy3mDLaJnBhjAWXNfm7RgELu8AF jY1vJqMhhRs+vIBRvbr5u2O7xAGmHHi2KgAru+K2LDuKAkO7tBAJACoAFkMo ACkAaLvittZCHgHqu1BebwAJAHsAf7yVvJa8Z1lou9O7gnN0AJ+8Z1mWvJce dABou30Am7wBUWMAlLwJBZa8E0iIMYi3ZyC0EOy6KQAwAGi7tLy2vHIAuLyD SE5GjSaIt7u7yjJ0Osh80RhXMjK6hALGKCUA8QI9JxcUKlBsAbeAehm/BWZf ryUrHme7Qbu4BMO8lryVMKZlHgPJvI+6QS2rRXFnZQTfvHMGN7Z2BC4QQbgt IGi77rxDuyJfEq+It8C8pVcvthRI4TVoc/m8s7znJ7W86G9kon8CRQFdZ2QA mbwKAKO8+ru8Aka2qLzuvGMAm7wJAD1XGwMoAGcgiLfvMygAJgBzACkA3Awh AFkW1DvcDAy99rySOhKvcgyovPq7ZgAoAP28ci1nAJe3L7YJAC99cwYrvYJJ 0RgsAARFZU8gANO8HbeRAj0APL3jOC4QP70JCPC87SfTvFwAbgAiACwAU7uO A0G9Eq8sAIFm8byavPm7fQD5u/cJZyD3vHkGPADwNDC9Jb3xvAC9QLyxu2wA KAD0AUcAeAMSFywABr0evFO9Vb3itvBZbgBOK1O7DAaXt+68QwZou0S7KgAM Bkq7aLsMvU1Blry+O6i8QwDIfJa8eFKBvYO9KgANXRC9Dr14AIq9q7yUMZEB WRbZBKi8eL36NHYZ9wRZFry81DQqAL+8k72VvMAIrJBbAMi7XQCbvGq7TE8I NgkAYwJHAF8AKQGpAhgC+bsjJ/0XHbsltkq9qb1fAPYfRABTvSMAHw42XgkA sL2cBbK9G7a0vXwDtr2wC3wAtb37AZ8BKgEsAP5JXQq5vXYI9wnpu1e9Mgn6 AwIZJgAwAyEA+Ah7MXAATit2AIE4XQA4vegLIrtdvS29/7xZFjEAE71XvWcg CAaIty5QZwCyi8MTwL0GBmQA4r2mHpi9gr2EApu9Ir35uwkAQryzCFO90b0r vWcgRQngt8h8HZV0ALK9dggKCEq9DV0evawL9r3IfL68ezskvVe9Flk+AKwI 1gkgvaUBI737vUa2MRaxvWYFVgAsABNIF76NJku9xQY+ALRYU70xvf293hIp vVW9L7bkvMVShALgtye+rAjdvYw4qLxtvVa9Ab54Uuy9Bb6tCB27uby3Bgu+ CAYNvhm+KTsQvpu9Er77vRS+Nb7oCBi+5r0bvjG9d7u/vSC+Ir7GvK5wJr4t ACi+37gpvfy9J4r+vS6++71CvtIBNL5bvja+WwA4vlS9br0qvRe9Pb4Evu69 QL4iAFFN8AJEvnAARr4Pvvi9v7xSvg29q7yPAfACE71tvhW+F74Ovhq+IAAk vR2+/yZnACgAVr4jvk++Jb4Vvim+Xr4sviq+CQAvvm2+KAB/vlO4YrYGCAm9 g77oCDe+XQANvmwDBAPeEoe+HL5Uvou+Vr7KvFBR7b3OvGy4FCfIeKcFQRhR TcM68QIlAHMAC75Ovq1oab6ivpO+YL4tvvu9l75XvVagnb6Zvp2+Db6Ivqm+ jL6gASG+rL4cBqGDqnewvqMhxb5QBLi+LwDTvHMCJQBtALq+Z76gvr2+LACa vpW+X76RAmG+wr5rvju+br4DvqgDP756Ah27HrbzvUu9Rb4fvXm+Eb58vu68 M3OAvum7gr67vlC+hr7Kvh6+Vb7Nvle+iiXHvLUMWr5cvuO+lL5ivi+26b35 vpu+Y2F2DAK+3r68vow4o74hvaa+AL+Kvsy+bwI4vU4Jrb7NvF0YVzLbca0c vZZBGMY6tr47vbm+CL9ovha/v77lvsG+L7bDvjW9zwTwApm+dgzJvqi+Ab+q vgO/z74zQq++ySPUvjW/t74IMtm+O73cviy/376MOOG+OL8vvwe+Mb+Wvui+ 6b4Cvj6+cb7uviIA97t2vni+WRL3vfa+p74Nvyu9n75ORoW+Gb86vxu/jb5Y vpC+J76Svhy+C7/nvmC/vLyIMRO/Fr5Kv6K+fL6Jvh++Pb8fv9C+MBjSvkG/ vjGQD4W8fQIAL401J08FFbi+2r5Iv2K/ob4Kv8C+lb4vvjq+mL5vvuy+Vr8H viIARGdjI3AAWr/0vly/Sb57vl+//L4Uv/6+Zb9Tvju/HL8hvo6+Br+8Agi/ bL8rvo6/DL+Yvo+9iLf9S2kAc78tv3a/rgNcvaC/eL8Cvx2/z76uviK/nTAY QNpRKr+Jv92+dL8Vv76+bb+vv2+/kb/pvZO/7b0Gvh27gWYevAkVm7+Fvki+ er5LvnC/Yr+jv3e/y75ovwW/Wb6Rvl2+y78wv4+/TL4BvlG9+LxCuOYCtb+L v72+Db5rA7q/Gr95v76/e7/Av9K+E0gxCRRVn2kQBoi/R7/Hv7e/jb/nvwy/ zr8rvSEA5L0vvfu92wSFY5iVmbyovKozogNkvQ0lZ71EAGm9ZU9rvei9Ab6+ O4i3IydyvyIALgD0vaS+KABNQV6/JL3gv3q/y7w/v8G/f7+1Hf0IK0QBBPe7 xr+Vvm6/Ub8OvF1nZQD+vaC/zruqC9C7vRbSuyoATE+Bvle9CsBdvTK9pGA1 vdlRXRg4vcVodkQ5aEYqzQnAB0i9IrspvRW9OsAoAExPiLc8BHK/vjtbvyXA MRc+wLgLBwdJA0q+d7/uvMIRgb4UvTnAWL0mvXkGPgBZFuu/CwV3v22+RsAc vi+2M728AkrAFA7DKSIAFTPPCE69+ic8vXLAQ71UwEu9Wb2OA3LAHb1evka2 KlnbvR8EXr5tvTG9V71MT1u+lXA8XL2+9b3TAS4AJwBHwEO7jQipGGrAxL4t CBQDxAZZwJQfPgCXwB+5BEU9BEq9uAiewKgYSllqwIHAcwArACsAXr7puqW5 HBGMusi51XgkETsElgRbvgG37Loru1O+vJ7GGygAn70TKiwAlcCpwD5xryXj vsrAGwOZwFkWRgUnAF6+0sBlAN69iLcnAEwf2MBVQxMqWwAyAEu70wE6IF6+ KAAEvSkAIJcBA6fAlsDPwDsk2cDjvhJF4AjtwM7A7biiwAG+whEhuPQambzc DKS+qg53wP29a4XJwODAFLf/vZPAK712wDG9SMDSE3vAN70iAB68O73Dv4BR Kr+oA1m9Q738v0K9R71JvVEFqrnNwKrAOyS0wFC9Rb1zwF6+xL4BBFu927+l v2e/KsBQUSzAfr8kvz8FawA0wIzAtMAovXfA9CZ9AlFCkcBvvwkAfxmHBF3A d76kvfcJp714A1EISwDepkQAXwC4AUsA+72Ivu68OUYmwQG+OUYewO4VHbvc MvwC57V5IUq9TwCED90WYgoNvvoDIr27v7y/PL/3v8u8xghuAHMCLIq/Are+ 8b45RuO+Q7tYiigAcME8wTK/ebrPvWYAMWloA+G4cL8KwXjAScCUt0vAfcAu OrEEkATSBhvBSr2PvZW+f8DbvYvBOb4KADq+A8F5X5e3eL15X3y9QLzUu6u8 3UJnA5a82jTyvILBqrzdCWdZEb4RwJrBrLydwSoAmzkdAai8jQqgAS+2QsBw AKi87h9DSC+2Cl/uH529t7yWvNEMyjmNvS+2dwCmwaq807uAAka224m5wcS8 CQDbiVsAZAVGALIDo72kvLrBKgCMvVa9Dr0JAC4QvsEJAHkA2MH7v1kW+ryl vQg25xjxCzYBYapSAPm7aV5tAKK8jQFfAHoDDgE3Al8AXxfuwZlJNgLqwUxB KwF9AOgbjALHwbDBKgBoAKbBdwm1vHi9yjnQUcoOcwBKu4i3JL0iAO1LYwDn uCwA+70QwQvCSr0OwtEY5wJbUAzCDsLRDBbCL7Y5vaIIFcIRwhrCQw/QBA4O TGgZwgkAOb2qNUdEggRzNUIdHsIlwivCDcIvtmElVL1ou7q9MjV6wem7EsBj vWW9FsAsAGW9XwANJU4AKr7pveu9WRZIogIDKAB5X03AKwAjwJi9rsE0AmbA oL8pwGfBLsHRviO/10zdKu4Vxb8BwC8nTGiVviDCowzmvjfACQC5wP8d1Ry1 mugCj7zpvp1fOhRZwCa8bwBZwHe+LAAcvduJOb8wvqa/q757vy/BcwJqwpsD AMDbvkq9lMEpvTnBKwl+cwsDkMGYvq1UxxNKOkmd8Fu+G0pphCwMuZy/jsIy AkcAfL5Rws6+hYTvDUIFjBNZwg9BzgR1DAxCjLp/wlzCgcKuCcQEIlm7eIuA Ii15IdrBa76HwtuJisK3i6AJMAPKgXs7Gb60wiO9Srd1wizBUsJeYQ4U2r48 Ik0DPktGAJxH7gN6wg+31Qg+EzGL6SpSPi8BosKfA5W+gsKUBITCsLxSv+m7 ucCOttABGgkuIbkHPSXEwGnCcCEoANuJUQWYlcMI4cLHE7O5Rb6awJm90gFP wijAdsItwb3Cowy/wgO3xAahBD8A2LfAXTtjZiDbvikAzsJoANDCpcLSwowa hsKjwKMM2r3mwmYAOL3dwkq9dUaVwu/CvMJpwfPCvEfLwrktGgnMuScAPSVh Ar4CB0L6wv7Clb7jVXPBRb4pvV7CcL0xvy++6b1iEP63kK0IwywAJwBIvZ3A /sCYvWFvJ8D7vZbCHr9owb7CFcHdwsYoWhiGuhsJRip2RIsP8b6Awvu90cLW T4kEhsLSwdzAXAAwANfA+bspwzgKysE1AM/B38EiLeHBaBfkwem+iwWIWMoO dMHcDCnBDsO7ws6+e78RwxXB+7/dwri+jwkcw0LD/sIsAHgAAMOFG0fDhcJr vjTCkAJ6wZi+vMHoMYi3a2VjAKHBkhpewyAAdhPeEjHDYUa9vO3CNcMPw2PD K8BUwjEJeRQLwgHAcMN9AmyBW7RrlKvChsLZvcjAecPKDm7DB8FFwPQTLr1d vXnAZwGCwXzAHr+4DLi+hsCawzEuE725wN3CsRvzTDc0egahA71D2RBzAmQL DQvewmvAEyo7wBO+K73NvOwCLMNot198CMPowne+6sIzw4fDK8H2v4rDUFFl w2nD/zQDRnkf98JAw1wxBAUoAPzCHsNevkbD08Jivum/KADYvaTAB8PiwiIA t8NJAwzDdMJwv3TBurcrw+LCLsPcERe/hcOavZ+/iL5lwae/N8PNwznDacPl w4Q13QmSwz4TG8P5wmzDW8LPwozA28MDwxy+l76WvFDDLsNNw16+UMNHfccT ob3PwTG9V8AoAPIc5WMoANLBHr13wHgAtsBqwLnALQjYGvYCRAZ4FD4N/gix BNy8OxZmBgm+ujBowgjBGcQpw9XAVBZ0wDbDfsDkmJnCsziCBQsB/ErTAVQW WC8hA7/CSr1vwzXBoMCywAjEc7v2f78FCgHiwfLBHL4Uvvs6yjmAw2DDZME1 xGTD+cNkM5wG+8Npwz0n2BSPAm3DQ8R3wLHALgQ8wXXD0L0cvmPC2xn4P30F RQkuxC+2q8HWCZi9nbx4MqC8vrx8w5S35MJKwKLBnMFvAB69UsEoAG/E6sJy xKPBZwM0wwvBVcSLw32/cwJ8wzTBOMGlwpPDqcJslHbBbsSBBFu+pMFxwO4i fcP4CH/Db8OBwxq+fsRvxJXEhMQkwMjD88N3wIfEU8KJxI3D6jOMxAvBgsKP xKBVlsNHxKi+x8B5AH/ElMQ+AGdZnMNevqDEPgCvvFvAa8RzAF6+n8GIt2/E Xr5ixGUA3cNwv+DDBsOmwOPD9cFKvU8SR8DFpWsAKb2nxPHCasEVwVERbHNH J+8DgjJTBfPCAMRBw/cRbcNzwqTCccPcw+i+YsIAtxs1oEOGITcEGw0tuOww ucO3wU0VRMK5H2/C/71Vw0rECCTjwSgL+bu5wKAzrQXwG+8lswaPC146USIu xD0HiLdIAOvBRBeovBXECsUZvgzF9cE4CjADv8NJL+LCwsPlwnPCzMDGw0e+ pMQqwcswF71Qw5i87cMvw/DDKsH1w3fCOMPywhXB+zY9wzqK2r7GN+IPa8Pj xAPEbB3lxBy+BsRIwz3BSsPdwSm9V70XxOESCMPxv2fASsAJEKS+DMXswTQC fAB8ALMhgVpxDcTDnsAKxVkWE8X9uZO+8Y8cxIi3xsHCvlgE8Y+7v1TF9MFX xRy+fAbqw1kWxsHsumIQ1r3aDSxXMMSavDJGtsB0wFe9PsXVwDoAncBkwcPB PgVVxe/B2GyMwDK9lQLHuLO/6DEDwi4DNAb8wTQGaABxxXjFbb7LxGdVPBzN xMcTLAD8wW7Dh1FmAOjDC8F5xZC96sHywX7FtsEhCZ3FCcR3wZjF08SMwAnE l74zv4LBSMV7xfLBFcXSQVzDcgDqw4LDX8P0v2a/y8P3w9fE88L7vyq5pwPN NuDE1MMdwzfFIr7nwtrDAcNyw9TCosVVvWXEd8OAxFS4wMQPxWzAgMRHvoLE e8SFxOK8QsCvg1sAxLuJEhPEfb76u0DFDr3RQkTAYL14wNjFaQC2wOTAMb7M NCm9b7ZhAFsA5sUrAOTAIgDgSN+85MVVDe7F58UhuHmw6DGBvhXE0cVxxJrB g8R9AsnDcL+YFPoD2sVnFsUBnsCkxWTF5cX4xVkWvMSnvBy+zMXUBrfEr7yw v+zF7sXkwOvCpcH7vum9LhD7wFUG/cCawCnF7ryeRB/ErboxvSMnWx/nAyAW mgEcvmMJRBVWK30CXRyZoZUbOrsgSLc2Q7YxvW3EeMObviMnR8JMaCwAXcFz GBwZfABDxkQAuUvyv7TFhsSJw7fFecLTvlfC/7/Awn7CN8VxwTbAosVwv/GP 2QZZwGQAIr54IO4fwQOcv/TElsVUxE3GPr+Mwy7As0JZwlTGRMMLwVfGUb8x vdwDfSAoAKoOfsSQZVzGs8UpxSrF8MJPxi7AkGXGv1XGjMBvxgnEXa12AFnA 2MVLv+zF477WxH3GMcFdrWvGSL8Yxi6/5r9Pv+i/+70VxNoMUMMavSYAdwBb vx/Ga8XRQoW++r0xvTPCRMEiLQkAIQLDPT8CPxZWAlMA6b9ZEmUPAwGqxqMB 2gwbxBTEiLepxkUCFgytxrXGKb27vRy+wAQ/xdi7KgC/wbjGXwu6xqzG7gG9 xsHCoBbewsrFHcYrvcAEtsJHwCME4XdoALXGu78gxJIhOxskhj4FgimnLYAE eH25wy+2rYRNA4MPXgsFAX3B5MY1uV8L0W5TAE3C6sZDu+zGgw+KAQ8KWwpS HkUA8cblxu3GDgtQAD4MCQv6xvPGPsJPAAQBUgABx+UD7cZ6A2gKTQDxxnvG EMM5wxPCOCeqNRjBMC54fQ0E/cIsAJ3GBcSOxKfClMOVOLHEHL77xoMP2pGK Bg3H1sRlwzXFmBukucY6/cJxwQvGMb0INtGtdAAmx2bGVsQtxWnDEcdZEm23 WAS5uRLBGMdIwhrHjcTnxAfEMb2Qv+m7csbMAmzCqZD4xCq+88BrAEDGBMRA vGbGa4VDIxMqP70rv23GJMN0xv+9AsOJBH3BlMBFCUe+TcL2vvu9IMNzxiLD 6b5kvpXCgcHjw9e+uL5KvWS+gcb7vejAyQVkAOrAQF/swEjCOcVwxnTH8AIp AE7HUMf/wqi8WsfBvn2JDwkex6rCvzh9wWbHScdoxz7BzwRfwsG+bb36xFfD /cTlwU9Pr8WUt5XBlbwqAMHEC73QwcjBKgAjJ3GizGHJvCgAPAD0xUS7hL1Y iqTH8xXJvCkAPgCpx6W8Zl8CA1yEPiOBOGq+4rzjvOu+tMfXdi4GPwuovMoQ NDHuA5S8+sGWvMY6tWTGx53HJRTKx4W9yrsaXb4NcLjmB4DFYkZZEkLFlgHx uk3FYUaEwycALcPpt+rE+bvsusgm6Z2MuUcE/BklJ+sCqCNpDOkGy7m1ZIIl wQQUKa6nCQDix8EscLmyCTi8AyhEBTcS5zkMHAmnkQGtesAEc1c7eXh288cA twaGQg72AR851gI6AMY69gFCDiEADcgduToADMgwGA7IbAUUyNEB9gHGOiUA Qg7hxwC3GAjiX3YJFRVGCUCevwVZwCUDjQO2HiW5CsgzxxvIQg5GuUEANyce yOgbwhXjIGVEzBHIDOzHyjO1ZPYBRjO7D+/HuQITw90YM8i9Xcy5fADEAYgG oQntxwwU2cJzIOEMLwA9yHJt78R0D+kGxcDix6/DDYEPu1kYdatlAD0AfJUe yJC8usMWvby8iLedx5y/IcU0v9y88AW8vJfFtsCex3HGRcRjxD3BRchZFsjH DBSAt/zFbMBkyFkWZsiFvlkBa8WUt0UJ+gO9x7bHIhTax9i9sWWtWmzIl8VP xJrALsNcAHfF9MNzxW7InsAJAG7IkcBexeUDz7/rvpi8o8e9x3IFiwVbv3rG xL6CyFkWhMi/x3MIdhMaxSu9p8gJUGsAtsYLwVrHIr2MwJ3HcAC2wOy9rMef yFsAPb6+Ap7IzJNzANzFL7aXyAjEmci8DzW9gshYL7XHqMitxUQGpL56CFsA 1DuivlTExQYtAIzAw8hFx8XIpgNhv4wFpL4nACIAkch3wJjGzcjsupTIfsh0 wIK+3MjVwFwAkMitxQXCMQDSyPTDwsgrAG/IC8H3wbu92sh7yNXA38jnyJbI 88idxS/H9ch3wKbF2cj0w9fIWMZtvpi8IgAhADoAqMdLvf/C5sh3wHbIyAZ4 yD3BFcQqABLJHwHdyPvIHL4YyR7E3sMXyTAY7sfdyHwAncAcvrLIUL9zxRjJ jsgvAODIccbrvirJgsNevuLI3MjsunhSisUZvlgWLckvxM3I3cEgANrHCcnY vrG5C74PydPGd8CPx6o1KACzyEfEyMX5u4THbL3iti57dSMcBprHVk/EvJ3H mMHdxYsFE70zyWXItcArAGfIXb1XvSEA412+ie+/D8mHyNfHOsChyEfAWsd1 xk3JkMclw0/Jz8ZIwT8sS8E2AU3BL7ZPwYu9AEZ+xHTBAEZVwUbCIgBYwXYA WsEaA1zBXsEuGWHBpb40xDXHLMXYxGzBnkQSwULEAEZxwUjHOsB1wUvJUb/P xlFC6saew/68C8AxvaLDDsFMwCIAhcF9BIfBJQOJwSwAj8E1w47ALL2ej2UA Kr5VvZLB03iBx5vHt7wqAJfBn8epvMsIqMGhvCoAw8T/xXrEdMRKvsHBvcl7 xK68gQStwbcWsMEIBrPBtgS1wcnBX8a2BMrHqsPYwcDBmcHCwSQHxcHHE8bH ysHMwc7BysfTwd3F1sH6vuTJrMLkydzB8DSlxknElcdNxPy9b17pwUgA57r0 yfXJ9sn3yfjJ+cn6yfvJ/Mn9yf7J/8kAygHKxEY= --Mob_of_Kangaroos_663_000-- From owner-fwtk-users@ex.tis.com Tue Jul 18 20:18 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA22029 Tue, 18 Jul 2000 20:18:03 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA18160; Tue, 18 Jul 2000 17:25:03 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 18 Jul 2000 15:46:43 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA16971 for fwtk-users-outgoing; Tue, 18 Jul 2000 15:46:22 -0700 (PDT) Date: Tue, 18 Jul 2000 18:45:07 -0400 From: Joseph S D Yao To: "H.T. Sun" Cc: "fwtk-users@lists.nai.com" Subject: Re: filtering attachment files with smap Message-Id: <20000718184507.F6946@washington.cospo.osis.gov> Mail-Followup-To: "H.T. Sun" , "fwtk-users@lists.nai.com" References: <200007180636.OAA00940@server.qdhaixin.com.cn> <39747F62.D9219C1B@lynuxworks.com> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <39747F62.D9219C1B@lynuxworks.com>; from htsun@LynuxWorks.COM on Tue, Jul 18, 2000 at 09:01:38AM -0700 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1023 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Tue, Jul 18, 2000 at 09:01:38AM -0700, H.T. Sun wrote: > I have been trying to figure out how smap can > > filter out some specific attachments which are > > malicious (virus). Do I need a patch ? Or smap > > already has the function ? > > THanks a lot Typically, one patches 'smap' to store e-mail messages in a different directory from the one in which 'smapd' looks. Then one does virus checking using some third-party program. If the e-mail file is healthy, then it is moved into the directory in which 'smapd' looks. Also, I note a new patch just posted to the mailing list. I have no idea how good it is. Do you want to test it? ;-) -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Wed Jul 19 04:54 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id EAA23148 Wed, 19 Jul 2000 04:54:26 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id CAA21481; Wed, 19 Jul 2000 02:01:07 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 19 Jul 2000 00:06:55 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id AAA20492 for fwtk-users-outgoing; Wed, 19 Jul 2000 00:06:34 -0700 (PDT) Message-ID: <00e301bff14d$efce1720$9001a8c0@sctech.co.jp> From: "Karen Ellrick" To: "Joseph S D Yao" Cc: References: <4.2.2.20000715190851.00b587e0@mail.itm-inst.com> <20000717155418.G671@washington.cospo.osis.gov> Subject: Re: "Newbie tries to make toolkit - fails", Part 2 Date: Wed, 19 Jul 2000 15:52:40 +0900 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/mixed; boundary="----=_NextPart_000_00E0_01BFF199.5E90C720" Content-Length: 13703 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is a multi-part message in MIME format. ------=_NextPart_000_00E0_01BFF199.5E90C720 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Thank you to all the folks who told me I goofed, and my apologies. I only work two days a week, so I couldn't check on it until today, but I did indeed fail to attach the attachment. This time, here it is. I'm very encouraged by the number of people reading this mailing list and willing to help! I searched for the first few files that make complained about, and found most of them in /usr/lib/bcc/include. I found syslog.h in the fwtk heirarchy (...fwtk/tools/server/syslog/). I'm glad they were already on my system, considering that I currently can't get at my CD-ROM drive to rpm them. So now how do I tell make where to find these files? Now, to respond to a couple specifics in Joe Yao's response: > > ...I have not been able to mount the CD-ROM drive on any of the > > three machines I have installed RedHat 6.1 on... > You appear to be trying to mount /mnt/cdrom on some directory > [/cdrom?], instead of mounting /dev/cdrom. The "device special files" > are all in /dev/ and its subdirectories. It doesn't matter - "mount /dev/mcd" and "mount /mnt/cdrom" give me the same error. The entry in my fstab is: /dev/mcd /mnt/cdrom iso9660 ro,owner,noauto 0 0 And this is the exact wording of the error I get: mount: the kernel does not recognize /dev/mcd as a block device (maybe 'insmod driver'?) I understand that the part in parentheses is supposed to be a hint for troubleshooting, but it's difficult to be sure which of the eleven CD-ROM driver files I found is the right one. Since my device file is /dev/mcd, and I know I have a Mitsumi CD-ROM drive, today I tried typing "insmod mcd". I got the error: Init failed. No mcd device at 0x300 irq 11 ./mcd.o: init_module: Device or resource busy Then I remembered that at installation time I had to specify parameters of "0x340,11", so I suspect there is a possibility that if I could specify 0x340 instead of 0x300 in this case, it might work. But the man page didn't say how parameters go in the command line (after an option flag? after a space?). I tried "insmod mcd 0x340,11" but it just hung with no feedback (even in verbose mode). That's when I ran out of ideas on my own. Any clues? [Sorry that this is off-topic for this discussion group, but I doubt there's a discussion group for such a basic thing as accessing your hardware (mount-users@lists.nai.com? - probably not!).] > Smap is an extremely good idea. You do NOT want 'sendmail' to talk to > the 'Net directly, especially if you are not skilled at configuring it > for security. [Of course, download the latest version and compile and > load it, and security will be greatly increased. ;-)] I did, but I have the same problem compiling it (and a dramatically longer spewing of error messages!). > You never want ANY user services on the bastion host. They should all > be on internal servers. Mailboxes are a prime example. The only > things running on the bastion host should be those processes having to > do with being a firewall. I know - that's why I have to learn how to configure sendmail. Currently we have a single server happily handling our mail, but now that we're adding a firewall I need to configure two hosts - the one inside the firewall would have the mailboxes, and the one on the bastion host would send mail in and out - as a sort of proxy. It will have no user accounts on it - only stuff for the world (http, dns, and the mail forwarding). I would think that this has been done thousands of times before and that there would be examples out there of how to configure the two, especially since our network is really small and really simple. But I can't seem to find anything like that, so I'm slogging through O'Reilly's Sendmail book and getting dizzy. > > I thought that smap could replace sendmail for simple store-and-forward > > setups, but apparently that's not true. ... > > Quite. Smap/smapd form the network proxy. Sendmail is still the prime > mail transfer agent [MTA], although 'postfix' can do many of the more > common mail transfer things more simply. You're the second person to mention postfix in the last 24 hours or so. But I've never heard of it before - even when I recently attended a SANS conference with all kinds of training about firewalls, good and bad network services, etc. Has it been out there enough to be security tested by the wild wild west? Thanks for all the friendly advice! Karen -------------------------------- Karen Ellrick S & C Technology, Inc. 1-21-35 Kusatsu-shinmachi Hiroshima 733-0834 Japan (from U.S. 011-81, from Japan 0) 82-293-2838 -------------------------------- ------=_NextPart_000_00E0_01BFF199.5E90C720 Content-Type: text/plain; name="makelog.txt" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="makelog.txt" for a in lib auth smap smapd netacl plug-gw ftp-gw tn-gw rlogin-gw = http-gw x-gw; do \ ( cd $a; echo all: `pwd`; make all ); \ done all: /home/k-ellrick/fwtk/fwtk/lib make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/lib' cc -I.. -g -DLINUX -c config.c -o config.o config.c:15: stdio.h: No such file or directory config.c:16: ctype.h: No such file or directory config.c:17: syslog.h: No such file or directory make[1]: *** [config.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/lib' all: /home/k-ellrick/fwtk/fwtk/auth make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/auth' cc -I.. -g -DLINUX -c cliio.c cliio.c:13: stdio.h: No such file or directory cliio.c:14: syslog.h: No such file or directory cliio.c:15: sys/signal.h: No such file or directory make[1]: *** [cliio.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/auth' all: /home/k-ellrick/fwtk/fwtk/smap make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/smap' cc -I.. -g -DLINUX -c smap.c -o smap.o smap.c:15: sys/types.h: No such file or directory smap.c:16: sys/file.h: No such file or directory smap.c:17: sys/stat.h: No such file or directory smap.c:18: sys/wait.h: No such file or directory smap.c:19: stdio.h: No such file or directory smap.c:20: time.h: No such file or directory smap.c:21: ctype.h: No such file or directory smap.c:22: syslog.h: No such file or directory smap.c:23: netdb.h: No such file or directory smap.c:24: sys/socket.h: No such file or directory smap.c:25: sys/signal.h: No such file or directory smap.c:26: netinet/in.h: No such file or directory smap.c:27: errno.h: No such file or directory make[1]: *** [smap.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/smap' all: /home/k-ellrick/fwtk/fwtk/smapd make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/smapd' cc -DPARSEADDR -I.. -g -DLINUX -c smapd.c -o smapd.o smapd.c:15: stdio.h: No such file or directory smapd.c:16: syslog.h: No such file or directory smapd.c:18: ctype.h: No such file or directory smapd.c:19: sys/param.h: No such file or directory smapd.c:20: sys/types.h: No such file or directory smapd.c:21: sys/wait.h: No such file or directory smapd.c:22: sys/stat.h: No such file or directory smapd.c:23: sys/file.h: No such file or directory smapd.c:25: sys/dir.h: No such file or directory smapd.c:31: sys/signal.h: No such file or directory smapd.c:32: time.h: No such file or directory make[1]: *** [smapd.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/smapd' all: /home/k-ellrick/fwtk/fwtk/netacl make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/netacl' cc -I.. -g -DLINUX -c netacl.c -o netacl.o netacl.c:15: syslog.h: No such file or directory netacl.c:16: stdio.h: No such file or directory netacl.c:17: sys/types.h: No such file or directory netacl.c:18: sys/file.h: No such file or directory netacl.c:19: pwd.h: No such file or directory netacl.c:20: time.h: No such file or directory make[1]: *** [netacl.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/netacl' all: /home/k-ellrick/fwtk/fwtk/plug-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/plug-gw' cc -I.. -g -DLINUX -c plug-gw.c -o plug-gw.o plug-gw.c:22: stdio.h: No such file or directory plug-gw.c:23: string.h: No such file or directory plug-gw.c:24: syslog.h: No such file or directory plug-gw.c:25: sys/types.h: No such file or directory plug-gw.c:26: sys/time.h: No such file or directory plug-gw.c:27: sys/socket.h: No such file or directory plug-gw.c:31: netdb.h: No such file or directory plug-gw.c:32: netinet/in.h: No such file or directory make[1]: *** [plug-gw.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/plug-gw' all: /home/k-ellrick/fwtk/fwtk/ftp-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/ftp-gw' cc -I.. -g -DLINUX -c ftp-gw.c -o ftp-gw.o ftp-gw.c:15: stdio.h: No such file or directory ftp-gw.c:16: ctype.h: No such file or directory ftp-gw.c:17: syslog.h: No such file or directory ftp-gw.c:18: sys/signal.h: No such file or directory ftp-gw.c:19: sys/ioctl.h: No such file or directory ftp-gw.c:20: sys/errno.h: No such file or directory ftp-gw.c:22: arpa/ftp.h: No such file or directory ftp-gw.c:23: arpa/telnet.h: No such file or directory ftp-gw.c:24: sys/time.h: No such file or directory ftp-gw.c:25: sys/types.h: No such file or directory ftp-gw.c:26: sys/socket.h: No such file or directory ftp-gw.c:33: netinet/in.h: No such file or directory make[1]: *** [ftp-gw.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/ftp-gw' all: /home/k-ellrick/fwtk/fwtk/tn-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/tn-gw' cc -I.. -g -DLINUX -c tn-gw.c -o tn-gw.o tn-gw.c:17: stdio.h: No such file or directory tn-gw.c:18: ctype.h: No such file or directory tn-gw.c:19: syslog.h: No such file or directory tn-gw.c:20: fcntl.h: No such file or directory tn-gw.c:21: sys/ioctl.h: No such file or directory tn-gw.c:22: sys/errno.h: No such file or directory tn-gw.c:24: sys/signal.h: No such file or directory tn-gw.c:25: arpa/telnet.h: No such file or directory tn-gw.c:26: sys/time.h: No such file or directory tn-gw.c:27: sys/types.h: No such file or directory tn-gw.c:28: sys/socket.h: No such file or directory tn-gw.c:36: netinet/in.h: No such file or directory tn-gw.c:37: netdb.h: No such file or directory make[1]: *** [tn-gw.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/tn-gw' all: /home/k-ellrick/fwtk/fwtk/rlogin-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/rlogin-gw' cc -I.. -g -DLINUX -c rlogin-gw.c -o rlogin-gw.o rlogin-gw.c:15: stdio.h: No such file or directory rlogin-gw.c:16: syslog.h: No such file or directory rlogin-gw.c:17: sys/types.h: No such file or directory rlogin-gw.c:18: sys/time.h: No such file or directory rlogin-gw.c:19: sys/socket.h: No such file or directory rlogin-gw.c:23: errno.h: No such file or directory rlogin-gw.c:27: sys/signal.h: No such file or directory rlogin-gw.c:28: sys/ioctl.h: No such file or directory rlogin-gw.c:29: fcntl.h: No such file or directory rlogin-gw.c:30: netdb.h: No such file or directory rlogin-gw.c:31: netinet/in.h: No such file or directory make[1]: *** [rlogin-gw.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/rlogin-gw' all: /home/k-ellrick/fwtk/fwtk/http-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/http-gw' cc -I.. -g -DLINUX -c hmain.c -o hmain.o hmain.c:27: sys/wait.h: No such file or directory In file included from hmain.c:28: http-gw.h:12: stdio.h: No such file or directory http-gw.h:13: ctype.h: No such file or directory http-gw.h:14: sys/signal.h: No such file or directory http-gw.h:15: sys/ioctl.h: No such file or directory http-gw.h:16: sys/errno.h: No such file or directory http-gw.h:17: sys/param.h: No such file or directory In file included from = /usr/lib/gcc-lib/i386-redhat-linux/egcs-2.91.66/include/syslimits.h:7, from = /usr/lib/gcc-lib/i386-redhat-linux/egcs-2.91.66/include/limits.h:11, from http-gw.h:18, from hmain.c:28: /usr/lib/gcc-lib/i386-redhat-linux/egcs-2.91.66/include/limits.h:117: = limits.h: No such file or directory In file included from hmain.c:28: http-gw.h:20: arpa/ftp.h: No such file or directory http-gw.h:21: arpa/telnet.h: No such file or directory http-gw.h:25: sys/time.h: No such file or directory http-gw.h:26: sys/types.h: No such file or directory http-gw.h:27: sys/socket.h: No such file or directory http-gw.h:34: netinet/in.h: No such file or directory http-gw.h:35: netdb.h: No such file or directory http-gw.h:36: string.h: No such file or directory In file included from hmain.c:28: http-gw.h:38: syslog.h: No such file or directory http-gw.h:41: net/if.h: No such file or directory make[1]: *** [hmain.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/http-gw' all: /home/k-ellrick/fwtk/fwtk/x-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/x-gw' cc -I.. -g -DLINUX -I/usr/X11/include -c child.c -o child.o In file included from child.c:14: ulib.h:17: stdio.h: No such file or directory ulib.h:18: stdlib.h: No such file or directory ulib.h:19: errno.h: No such file or directory ulib.h:20: string.h: No such file or directory ulib.h:21: sys/param.h: No such file or directory ulib.h:26: X11/Intrinsic.h: No such file or directory child.c:15: unistd.h: No such file or directory make[1]: *** [child.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/x-gw' make: *** [all] Error 2 ------=_NextPart_000_00E0_01BFF199.5E90C720-- From owner-fwtk-users@ex.tis.com Wed Jul 19 07:13 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA23480 Wed, 19 Jul 2000 07:13:21 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id EAA23255; Wed, 19 Jul 2000 04:20:26 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 19 Jul 2000 02:50:25 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id CAA21896 for fwtk-users-outgoing; Wed, 19 Jul 2000 02:50:04 -0700 (PDT) Message-ID: From: Malcolm Tester To: Karen Ellrick Cc: fwtk-users@lists.nai.com Subject: RE: "Newbie tries to make toolkit - fails", Part 2 Date: Wed, 19 Jul 2000 03:59:50 -0600 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 7153 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Postfix is written by Wietse Venema, who is one of the foremost experts on Internet security software. You can check out his home page at http://www.porcupine.org/wietse or the Postfix program at http://www.postfix.org. Postfix was built from the ground up with security in mind, which Sendmail can't claim or come close to. To quote Wietse, "Postfix attempts to be fast, easy to administer, and secure, while at the same time being sendmail compatible enough to not upset existing users." I have that O'Reilly book on Sendmail too. I haven't touched it since the day I installed Postfix. Postfix is officially "unreleased". That means there are continual updates to it, and it is recognized as "beta" software. However, anything Wietse tends to write that's beta could be considered better than commercially released packages by others. For detailed information on the security Postfix provides, look at http://www.porcupine.org/postfix-mirror/security.html. For books/press information, look at http://www.porcupine.org/postfix-mirror/press.html. Regards, Malcolm Tester II Malcolm W. Tester II Systems Administrator Cambric Corporation 110 West Business Park Drive Draper, Utah 84020 http://www.cambric.com This message is intended only for the use of the individual or entity to whom it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please delete it from your system and notify the sender identified above by e-mail. > -----Original Message----- > From: Karen Ellrick [mailto:k-ellrick@sctech.co.jp] > Sent: Wednesday, July 19, 2000 12:53 AM > To: Joseph S D Yao > Cc: fwtk-users@lists.nai.com > Subject: Re: "Newbie tries to make toolkit - fails", Part 2 > > > Thank you to all the folks who told me I goofed, and my > apologies. I only > work two days a week, so I couldn't check on it until today, but I did > indeed fail to attach the attachment. This time, here it is. > I'm very > encouraged by the number of people reading this mailing list > and willing to > help! > > I searched for the first few files that make complained > about, and found > most of them in /usr/lib/bcc/include. I found syslog.h in the fwtk > heirarchy (...fwtk/tools/server/syslog/). I'm glad they were > already on my > system, considering that I currently can't get at my CD-ROM > drive to rpm > them. So now how do I tell make where to find these files? > > Now, to respond to a couple specifics in Joe Yao's response: > > > > ...I have not been able to mount the CD-ROM drive on any of the > > > three machines I have installed RedHat 6.1 on... > > You appear to be trying to mount /mnt/cdrom on some directory > > [/cdrom?], instead of mounting /dev/cdrom. The "device > special files" > > are all in /dev/ and its subdirectories. > > It doesn't matter - "mount /dev/mcd" and "mount /mnt/cdrom" > give me the same > error. The entry in my fstab is: > /dev/mcd /mnt/cdrom iso9660 ro,owner,noauto 0 0 > And this is the exact wording of the error I get: > mount: the kernel does not recognize /dev/mcd as a block device > (maybe 'insmod driver'?) > I understand that the part in parentheses is supposed to be a hint for > troubleshooting, but it's difficult to be sure which of the > eleven CD-ROM > driver files I found is the right one. Since my device file > is /dev/mcd, > and I know I have a Mitsumi CD-ROM drive, today I tried > typing "insmod mcd". > I got the error: > Init failed. No mcd device at 0x300 irq 11 > ./mcd.o: init_module: Device or resource busy > Then I remembered that at installation time I had to specify > parameters of > "0x340,11", so I suspect there is a possibility that if I > could specify > 0x340 instead of 0x300 in this case, it might work. But the > man page didn't > say how parameters go in the command line (after an option > flag? after a > space?). I tried "insmod mcd 0x340,11" but it just hung with > no feedback > (even in verbose mode). That's when I ran out of ideas on my > own. Any > clues? [Sorry that this is off-topic for this discussion > group, but I doubt > there's a discussion group for such a basic thing as > accessing your hardware > (mount-users@lists.nai.com? - probably not!).] > > > Smap is an extremely good idea. You do NOT want 'sendmail' > to talk to > > the 'Net directly, especially if you are not skilled at > configuring it > > for security. [Of course, download the latest version and > compile and > > load it, and security will be greatly increased. ;-)] > > I did, but I have the same problem compiling it (and a > dramatically longer > spewing of error messages!). > > > You never want ANY user services on the bastion host. They > should all > > be on internal servers. Mailboxes are a prime example. The only > > things running on the bastion host should be those > processes having to > > do with being a firewall. > I know - that's why I have to learn how to configure > sendmail. Currently we > have a single server happily handling our mail, but now that > we're adding a > firewall I need to configure two hosts - the one inside the > firewall would > have the mailboxes, and the one on the bastion host would > send mail in and > out - as a sort of proxy. It will have no user accounts on > it - only stuff > for the world (http, dns, and the mail forwarding). I would > think that this > has been done thousands of times before and that there would > be examples out > there of how to configure the two, especially since our > network is really > small and really simple. But I can't seem to find anything > like that, so > I'm slogging through O'Reilly's Sendmail book and getting dizzy. > > > > I thought that smap could replace sendmail for simple > store-and-forward > > > setups, but apparently that's not true. ... > > > > Quite. Smap/smapd form the network proxy. Sendmail is > still the prime > > mail transfer agent [MTA], although 'postfix' can do many > of the more > > common mail transfer things more simply. > > You're the second person to mention postfix in the last 24 > hours or so. But > I've never heard of it before - even when I recently attended a SANS > conference with all kinds of training about firewalls, good > and bad network > services, etc. Has it been out there enough to be security > tested by the > wild wild west? > > Thanks for all the friendly advice! > > Karen > > -------------------------------- > Karen Ellrick > S & C Technology, Inc. > 1-21-35 Kusatsu-shinmachi > Hiroshima 733-0834 Japan > (from U.S. 011-81, from Japan 0) 82-293-2838 > -------------------------------- > > From owner-fwtk-users@ex.tis.com Wed Jul 19 12:47 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA24967 Wed, 19 Jul 2000 12:47:15 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA26098; Wed, 19 Jul 2000 09:54:20 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 19 Jul 2000 08:14:42 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA24655 for fwtk-users-outgoing; Wed, 19 Jul 2000 08:14:21 -0700 (PDT) Date: Wed, 19 Jul 2000 11:13:16 -0400 From: Joseph S D Yao To: Karen Ellrick Cc: fwtk-users@lists.nai.com Subject: Re: "Newbie tries to make toolkit - fails", Part 2 Message-Id: <20000719111316.D14866@washington.cospo.osis.gov> Mail-Followup-To: Karen Ellrick , fwtk-users@lists.nai.com References: <4.2.2.20000715190851.00b587e0@mail.itm-inst.com> <20000717155418.G671@washington.cospo.osis.gov> <00e301bff14d$efce1720$9001a8c0@sctech.co.jp> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <00e301bff14d$efce1720$9001a8c0@sctech.co.jp>; from k-ellrick@sctech.co.jp on Wed, Jul 19, 2000 at 03:52:40PM +0900 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 871 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] (1) Go to www.redhat.com and sign up in the "how to install my fool Linux" mailing list. No, it has a different name, but you'll recognize it. ;-) (2) Sendmail has 20 years of experience behind it. Postfix has but a few. I have no experience with it. But it was designed "with security in mind" by one of the better producer of Open Source software tools, and few have had bad things to say about it, besides "it doesn't do X esoteric thing that sendmail does." Even boosters of sendmail will praise postfix. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Wed Jul 19 13:16 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA25165 Wed, 19 Jul 2000 13:16:38 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA26769; Wed, 19 Jul 2000 10:23:42 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 19 Jul 2000 09:01:40 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA25108 for fwtk-users-outgoing; Wed, 19 Jul 2000 09:01:29 -0700 (PDT) Date: Wed, 19 Jul 2000 11:59:14 -0400 Message-Id: <200007191559.LAA26368@mailer.progressive-comp.com> From: Hank Leininger Reply-To: Hank Leininger To: fwtk-users@ex.tis.com Subject: Re: http1.1 problem X-Shameless-Plug: Check out http://marc.theaimsgroup.com/ X-Warning: This mail posted via a web gateway at marc.theaimsgroup.com X-Warning: Report any violation of list policy to abuse@progressive-comp.com X-Posted-By: Hank Leininger Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 1499 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On 2000-07-12, Joseph S D Yao wrote: > FAQ : > "The FWTK users mail list archive is at > ftp://ftp.tislabs.com/pub/firewall/toolkit/fwtk-users-archive/ . > You can find a searchable online archive at > http://www.progressive-comp.com/Lists/?l=fwtk-users&r=1&w=2#fwtk-users > " > The former goes from 1994 to now. The latter actually forwards me to > and goes from > Aug 1995 to now. Hm, that's odd, I would've seeded our database from the listspools on ftp.tislabs.com, wonder why our archives don't go back to 1994? Ah, I see. They do. But, I was arbitrarily only printing up to the last five year's worth. Fixed now. Oh, and yes, the company that hosts the archives wanted a little name-recognition building, thus the change from progressive-comp.com -> theaimsgroup.com (still the same server tho). > [Who wants to fix the Meta-FAQ - the one that is for some reason > labeled "Downloads"?] It looks like someone is actively rearranging FAQ stuff on www.fwtk.org? ATM the 'download' section no longer includes the 'support info' FAQs, which is probably good, but... they're not anywhere anymore? /me guesses they'll be back in a few minutes ;) -- Hank Leininger From owner-fwtk-users@ex.tis.com Wed Jul 19 14:08 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA25600 Wed, 19 Jul 2000 14:08:00 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA27924; Wed, 19 Jul 2000 11:15:14 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 19 Jul 2000 09:46:44 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA25868 for fwtk-users-outgoing; Wed, 19 Jul 2000 09:46:34 -0700 (PDT) Date: Wed, 19 Jul 2000 12:44:44 -0400 Message-Id: <200007191644.MAA32385@mailer.progressive-comp.com> From: Hank Leininger Reply-To: Hank Leininger To: fwtk-users@ex.tis.com Subject: Re: Is it better to use squid or squid-gw to hide a webserver X-Shameless-Plug: Check out http://marc.theaimsgroup.com/ X-Warning: This mail posted via a web gateway at marc.theaimsgroup.com X-Warning: Report any violation of list policy to abuse@progressive-comp.com X-Posted-By: Hank Leininger Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 3813 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On 2000-07-17, "Hermann Reimer" wrote: > Is it a good idea to use squid on the firewall or is it unsecure ? > Is it a better idea to use squid-gw on the firewall and put a > squid-proxy server in the the same local lan as the webserver ? > Webserver is NT, firewall is SuSE Linux with two network cards and fwtk > running. > I favorite this opinion because the webserver could be managed in the > local lan, without any restrictions. In an DMZ the different authors of > the web ( in the local lan) could only use ftp to manage their > websites, so it's not so comfortable. Hm. Consider this: If your webserver gets compromised, how will that happen? Given that you'll be able to disable and/or block all other services, it'll happen via HTTP or HTTPS, of course. Particularly given your choice (perhaps not _your_ choice, but something you're required to do) of Windows NT as the webserver, it's a losing proposition to expect *any* kind of firewall/proxy setup to protect the webserver from the IIS bug-of-the-week. If you're an attractive target (and even if not, and you just get unlucky) the webserver will eventually be compromised via some TCP port 80, valid-HTTP-looking attack. At that point, would you rather that the rest of your network (inside the firewall) is exposed to attacks launched from the webserver, or would you rather the webserver be in a playpen by itself? (Note, I'm somewhat MS-bashing here, but the principle would still apply even if your webserver were an OpenBSD box running publicfile.) I'd probably recommend putting a third NIC in the firewall, and setting the webserver (and possibly other DMZ boxes) up on a dedicated network segment. The firewall could be expected to filter all-but-web-requests INTO the webserver, and also all-but-web-responses OUT of the webserver. Of course, any/all DMZ hosts should be locked down so that they "shouldn't" be compromisable -- but even if they are, you've now limited the collateral damage possible. Since sneakernet is probably unacceptable for webpage management, etc, and you are quite right that FTP wouldn't be desirable, you could use Stunnel on webserver to wrap SMB within SSL. Configure Netbios to bind (only) to a localhost/loopback IP address on the NT box (and/or do the odd "dummy NIC just for Netbios" hack). Configure Stunnel to require client certificates on inbound connections on some port you choose, forwarding to localhost:139. Of course the webserver should have local accounts, not be part of a domain. Configure the firewall to allow (only) inside hosts to access the stunnel-server port on the webserver, issue client certs and install stunnel on the workstations of users on the inside network. This means work, and new things to learn (BTW: stunnel lives at http://mike.daewoo.com.pl/computer/stunnel/ or www.stunnel.org, which appears to be down at the moment; we also archive their mailing list at http://marc.theaimsgroup.com/?l=stunnel-users&r=1&w=2), but the additional infrastructure is exactly one NIC and a crossover cable or hub, and all the software's free. Once set up it shouldn't place any extra burden on you to run, and not much for the users (just make "click here" batchfile that does the appropriate stunnel-client invokation and net use commands), although the overhead of SSL will make file management Not Fast But Usable[TM]. ...Then stay up nights sweating because your web developers save their passphrase in a textfile on their desktop box, and install PCAnywhere with no password on their box and plug the FAX machine's phone line into their modem... -- Hank Leininger From owner-fwtk-users@ex.tis.com Wed Jul 19 23:24 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id XAA27376 Wed, 19 Jul 2000 23:24:58 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id UAA02809; Wed, 19 Jul 2000 20:32:04 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 19 Jul 2000 18:05:57 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id SAA01569 for fwtk-users-outgoing; Wed, 19 Jul 2000 18:05:47 -0700 (PDT) Message-Id: <200007200105.JAA00904@server.qdhaixin.com.cn> X-Authentication-Warning: server.qdhaixin.com.cn: nobody set sender to using -f Date: Thu, 20 Jul 2000 9:4:45 +0800 From: wen Reply-To: wen@hisense.qd.sd.cn To: "fwtk-users@ex.tis.com" Subject: set up server in the DMZ X-mailer: FoxMail 3.0 beta 2 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="GB2312" Content-Length: 779 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi: standard port was used by module in the fwtk.for example,http-gw has used 80 port,ftp-gw used 21 and 20 port,tn-gw used 23 port.if I set up a webserver in the DMZ,webserver must listen http request on other port,for example 8777 port.but when clients in the internet want to browse my webserver, beacuse he don't know my webserver is listening on 8777 port,he can send out request with destination port 80. as result,http-gw receive this request and discard it.so he can not login my webserver. what do I do to resolv this problem? for this problem,in another words,it is said as : how should I set up a DMZ with fwtk? thanks. wen From owner-fwtk-users@ex.tis.com Thu Jul 20 02:51 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id CAA27891 Thu, 20 Jul 2000 02:51:57 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id XAA04965; Wed, 19 Jul 2000 23:59:23 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 19 Jul 2000 22:16:41 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id WAA03633 for fwtk-users-outgoing; Wed, 19 Jul 2000 22:16:29 -0700 (PDT) Message-Id: <200007200516.NAA02056@server.qdhaixin.com.cn> X-Authentication-Warning: server.qdhaixin.com.cn: nobody set sender to using -f Date: Thu, 20 Jul 2000 13:15:26 +0800 From: wen Reply-To: wen@hisense.qd.sd.cn To: "fwtk-users@lists.nai.com" Subject: scan host installed fwtk X-mailer: FoxMail 3.0 beta 2 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="GB2312" Content-Length: 642 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi: | internet | | -------------------------- system box -------------------------- | | | intranet in my system box, I have installed fwtk2.1 and redhat6.1. now by portscan tool I scan system box from internet and find some port which is opened ,for example,21,23,80,513,etc. when someone scan my system box, in order to make him not to find opened port how to do? please give me some advice. thanks wen From owner-fwtk-users@ex.tis.com Thu Jul 20 08:43 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA29173 Thu, 20 Jul 2000 08:43:56 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA08233; Thu, 20 Jul 2000 05:51:18 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 20 Jul 2000 04:10:26 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA06464 for fwtk-users-outgoing; Thu, 20 Jul 2000 04:10:16 -0700 (PDT) Message-ID: <001501bff243$37d99440$0a0ac7be@8022dd221214> From: "=?iso-8859-1?Q?S=E9bastien_Cottalorda?=" To: Subject: Skey and Linux passwords Date: Thu, 20 Jul 2000 13:08:28 +0100 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.5 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/alternative; boundary="----=_NextPart_000_0012_01BFF24B.98CCF0A0" Content-Length: 4810 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is a multi-part message in MIME format. ------=_NextPart_000_0012_01BFF24B.98CCF0A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi all, I manage to install skey & login given in the logdaemon-5.8 package on = my Linux RedHat 6.0 system. I've installed them and configured them for my users (keyinit ...) I've replaced the /bin/login by the new login file that allow Skey = challenges. My problem : - If a user hasn't been created by keyinit (root for example), I get = : Router login : root Password : xxxxxxxxxxxx Invalid Login Login: ... and so on.... (the password is the = good one, yes, yes I checked it :-) ) - if I create this user with keyinit and add his name in = /etc/skey.access permit user root permit port tty1 permit port tty2 ... permit port tty4 (to allow him access with either Linux and Skey challenge), I get = exactly the same --> "invalid login" I use shadow password, may be it's the problem : Login try to get a = password that is in fact in /etc/shadow instead of /etc/passwd (I = don't know in fact what it's doing) Exept that , I'm very happy to skey module. If anybody as a clue=20 Thanks in advance S=E9bastien ------=_NextPart_000_0012_01BFF24B.98CCF0A0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hi all,
 
I manage to install skey & login given in the=20 logdaemon-5.8 package on my Linux RedHat 6.0 system.
I've installed them and configured them = for my users=20 (keyinit ...)
I've replaced the /bin/login by the new login file = that allow=20 Skey challenges.
 
My problem :
    - If a user hasn't been created = by keyinit=20 (root for example), I get :
          &nbs= p;    =20 Router login : root
        =    =20     Password : xxxxxxxxxxxx
        =    =20     Invalid Login
          &nbs= p;    =20 Login:       ... and so on....  (the = password=20 is the good one, yes, yes I checked it = :-)      =20 )
 
    - if I create this user with = keyinit and=20 add his name in /etc/skey.access
        =    =20     permit user root
        =    =20     permit port tty1
        =    =20     permit port tty2
        =    =20     ...
        =    =20     permit port tty4
 (to allow him access with either Linux and = Skey=20 challenge), I get exactly the same --> "invalid login"
I use shadow password, may be it's the = problem : Login try to get a password that is in fact in /etc/shadow = instead of=20 /etc/passwd    (I don't know in fact what it's=20 doing)
 
Exept that , I'm very happy to skey = module.
 
If anybody as a clue
 
Thanks in advance
 
S=E9bastien
------=_NextPart_000_0012_01BFF24B.98CCF0A0-- From owner-fwtk-users@ex.tis.com Thu Jul 20 08:54 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA29196 Thu, 20 Jul 2000 08:54:58 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA08578; Thu, 20 Jul 2000 06:02:14 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 20 Jul 2000 04:43:58 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA06772 for fwtk-users-outgoing; Thu, 20 Jul 2000 04:43:16 -0700 (PDT) From: "Dan and Karen Ellrick" To: "Joseph S D Yao" Cc: Subject: RE: "Newbie tries to make toolkit - fails", Part 2 Date: Thu, 20 Jul 2000 10:47:13 +0900 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Importance: Normal In-Reply-To: <20000719111316.D14866@washington.cospo.osis.gov> Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1190 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] > (1) Go to www.redhat.com and sign up in the "how to install my fool > Linux" mailing list. No, it has a different name, but you'll recognize > it. ;-) Yesterday, after I wrote the previous message, I went to redhat.com and tried exactly that. When I clicked on the "Subscribe" link, it created a new message with "Subscribe" as the subject. I sent that as-is (it had my signature, but nowhere did the web site say the message had to be blank, or should have thus-and-info, or anything), but never got a response. I tried submitting my question two hours later (hoping I had been subscribed without notification), but it was refused, saying I was not a subscriber. I then tried looking for a contact page for redhat.com to ask about that, but at that time it seemed that their web site was down (all requests for non-cached pages came up with my browser's page-not-found message). I suppose I should try that again this morning from home. I really am doing all I know to do, but everything seems to end up harder than it ought to be... :( Karen From owner-fwtk-users@ex.tis.com Thu Jul 20 09:49 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA29364 Thu, 20 Jul 2000 09:49:55 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA10141; Thu, 20 Jul 2000 06:57:09 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 20 Jul 2000 05:26:46 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA07488 for fwtk-users-outgoing; Thu, 20 Jul 2000 05:26:26 -0700 (PDT) Date: Thu, 20 Jul 2000 08:21:17 -0400 (EDT) From: Ted Keller To: wen cc: "fwtk-users@lists.nai.com" Subject: Re: scan host installed fwtk In-Reply-To: <200007200516.NAA02056@server.qdhaixin.com.cn> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1437 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Wen, Port 21 - ftp command port. That is openend up by the ftp-gw program. Make sure you have your netperm table set appropriately. port 23 - telnet - tn-gw. ditto above port 80 - http - you need that for your web server on your DMZ port 513 - login ??? are you running the rlogin proxy? You may want to kill that on off. There were (a couple of year ago) listed some patches to the tool kit which allow you to bind to a port. If implmented, you could bind the proxies to internal ports - hence hiding some of the external visability. (September, 1998....) ted keller On Thu, 20 Jul 2000, wen wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > hi: > | internet > | > | > -------------------------- > system box > > -------------------------- > | > | > | intranet > > in my system box, I have installed fwtk2.1 and redhat6.1. > > now by portscan tool I scan system box from internet and find some port which is opened ,for example,21,23,80,513,etc. when someone scan my system box, in order to make him not to find opened port how to do? please give me some advice. > > thanks > > wen > > From owner-fwtk-users@ex.tis.com Thu Jul 20 09:49 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA29363 Thu, 20 Jul 2000 09:49:55 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA10149; Thu, 20 Jul 2000 06:57:12 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 20 Jul 2000 05:33:56 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA07671 for fwtk-users-outgoing; Thu, 20 Jul 2000 05:33:35 -0700 (PDT) Message-ID: <3976F15A.233B5A4B@bath.tmac.com> Date: Thu, 20 Jul 2000 08:32:26 -0400 From: Steve Sandau X-Mailer: Mozilla 4.72 [en] (X11; I; HP-UX B.10.20 9000/715) X-Accept-Language: en MIME-Version: 1.0 To: wen@hisense.qd.sd.cn CC: "fwtk-users@ex.tis.com" Subject: Re: set up server in the DMZ References: <200007200105.JAA00904@server.qdhaixin.com.cn> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1480 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I believe that either fwtk needs to listen on port 80 for incoming www connections and pass them to your DMZ WWW server (as mine does) OR, the client on the Internet needs to know the alternate port that fwtk IS listening on. If you want to have fwtk listen on port 80 and pass the request to your www server which is listening on port 8777, you can use plug-gw to plug incoming port 80 to the www server, port 8777. The line in netperm-table would look like this I think: plug-gw: port www * -plug-to 192.168.251.67 -port 8777 wen wrote: > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > hi: > standard port was used by module in the fwtk.for example,http-gw has used 80 port,ftp-gw used 21 and 20 port,tn-gw used 23 port.if I set up a webserver in the DMZ,webserver must listen http request on other port,for example 8777 port.but when clients in the internet want to browse my webserver, beacuse he don't know my webserver is listening on 8777 port,he can send out request with destination port 80. as result,http-gw receive this request and discard it.so he can not login my webserver. > what do I do to resolv this problem? > > for this problem,in another words,it is said as : how should I set up a DMZ with fwtk? > > thanks. > > wen > > From owner-fwtk-users@ex.tis.com Thu Jul 20 11:24 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA29730 Thu, 20 Jul 2000 11:24:37 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA12767; Thu, 20 Jul 2000 08:31:54 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 20 Jul 2000 06:58:44 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA10178 for fwtk-users-outgoing; Thu, 20 Jul 2000 06:58:24 -0700 (PDT) Message-Id: <200007201351.PAA06528@server1.micram.de> From: "Christian Rost" To: "wen@hisense.qd.sd.cn" Cc: "Fire Wall Tool Kit Mailing List" Date: Thu, 20 Jul 2000 15:49:17 +0000 Reply-To: "Christian Rost" X-Mailer: PMMail 1.96a For OS/2 MIME-Version: 1.0 Subject: Re: scan host installed fwtk Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by relay2.nai.com id GAA09997 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1297 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Thu, 20 Jul 2000 13:15:26 +0800, wen wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > >now by portscan tool I scan system box from internet and find some port which is opened ,for example,21,23,80,513,etc. when someone scan my system box, in order to make him not to find opened port how to do? please give me some advice. > Hi, for that kind of stuff I'm using portsentry, a portscan detector which is part of the ABACUS project (http://www.psionic.com/abacus/). It dynamically configures your network settings if it detects an port scan attempt or if someone tries to connect to ports you've specified as insecure. If everything is configured well, the machine the attack was started from, can not access nor reach your Gateway anymore, because it gets no feedback. Christian ================================================ roCon - Rost Oberndörfer Consulting GbR Ihr Projektpartner fuer Vernetzung, Internet und Marketing Universitaetsstrasse 142 D-44799 Bochum Telefon: +49 (0) 234 971969-6 Telefax: +49 (0) 234 971969-8 http://www.rocon.de From owner-fwtk-users@ex.tis.com Thu Jul 20 12:41 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA29897 Thu, 20 Jul 2000 12:41:36 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA14043; Thu, 20 Jul 2000 09:48:53 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 20 Jul 2000 08:19:14 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA12436 for fwtk-users-outgoing; Thu, 20 Jul 2000 08:18:53 -0700 (PDT) Message-ID: <39771821.D38983A3@jamedia.com> Date: Thu, 20 Jul 2000 11:17:53 -0400 From: Scott McEachern X-Mailer: Mozilla 4.73 [en] (X11; U; FreeBSD 4.0-RELEASE i386) X-Accept-Language: en MIME-Version: 1.0 To: wen@hisense.qd.sd.cn, fwtk-users@ex.tis.com Subject: Re: set up server in the DMZ References: <200007200105.JAA00904@server.qdhaixin.com.cn> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 2171 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] wen wrote: > > hi: > standard port was used by module in the fwtk.for example,http-gw has used 80 port,ftp-gw used 21 and 20 port,tn-gw used 23 port.if I set up a webserver in the DMZ,webserver must listen http request on other port,for example 8777 port.but when clients in the internet want to browse my webserver, beacuse he don't know my webserver is listening on 8777 port,he can send out request with destination port 80. as result,http-gw receive this request and discard it.so he can not login my webserver. > what do I do to resolv this problem? > > for this problem,in another words,it is said as : how should I set up a DMZ with fwtk? > I have a setup just like what you need. Basically you just switch the http-gw/www services around. Here's what you do: - create a line in /etc/services like this: "http-gw 8080/tcp" - make sure you are using the ipbind patch, and have a line like this to start your http proxy: (mine is in /etc/rc.local): "/usr/local/etc/http-gw -daemon 192.168.0.1:http-gw &" where 192.168.0.1 is your internal NIC. - have a line in your netperm-table like this: "http-gw: hosts 192.168.0.*" where 192.168.0.* is your internal (protected) network. Now have all your internal machines use 192.168.0.1:8080 for http/security/ftp proxy, where your firewall is 192.168.0.1. - In /etc/rc.local (or wherever you start the fwtk daemons) have: "/usr/local/etc/plug-gw -daemon www www &" (yes, www twice) - in your netperm table, put "www: port 80 * -plug-to 192.168.1.2 -port 80" where the * is whatever _external_ addresses are allowed (as you can tell, I allow all, because I don't know who's going to hit my site), and the 192.168.1.2 is your DMZ'd web server. Now your internal users can surf, and external people can hit your web server. Apply similar rules for other needed ports. I wouldn't use tn-gw if I were you...go with ssh. -- R. Scott McEachern, Network Administrator J&A Media Services, Inc. 300 John St., Suite 500, Thornhill, ON, CA L3T 5W4 tel:905-881-6902 fax:905-881-6945 From owner-fwtk-users@ex.tis.com Thu Jul 20 20:22 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA01094 Thu, 20 Jul 2000 20:22:13 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA18271; Thu, 20 Jul 2000 17:30:00 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 20 Jul 2000 15:48:03 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA16611 for fwtk-users-outgoing; Thu, 20 Jul 2000 15:47:42 -0700 (PDT) Date: Thu, 20 Jul 2000 18:46:57 -0400 From: Joseph S D Yao To: Hank Leininger Cc: fwtk-users@ex.tis.com Subject: Re: http1.1 problem Message-Id: <20000720184657.X21317@washington.cospo.osis.gov> Mail-Followup-To: Hank Leininger , fwtk-users@ex.tis.com References: <200007191559.LAA26368@mailer.progressive-comp.com> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <200007191559.LAA26368@mailer.progressive-comp.com>; from fwtk-users@progressive-comp.com on Wed, Jul 19, 2000 at 11:59:14AM -0400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 842 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Wed, Jul 19, 2000 at 11:59:14AM -0400, Hank Leininger wrote: > It looks like someone is actively rearranging FAQ stuff on www.fwtk.org? > ATM the 'download' section no longer includes the 'support info' FAQs, > which is probably good, but... they're not anywhere anymore? /me guesses > they'll be back in a few minutes ;) Hank, thanks for the second archive. Keith was working on the Web site over the weekend, when he found ten free minutes. ;-) It should be done by now, tho. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Thu Jul 20 20:41 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA01150 Thu, 20 Jul 2000 20:41:01 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA18595; Thu, 20 Jul 2000 17:48:49 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 20 Jul 2000 16:29:52 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA17152 for fwtk-users-outgoing; Thu, 20 Jul 2000 16:29:31 -0700 (PDT) From: Eberhard Mattes Date: Fri, 21 Jul 2000 01:28:05 +0200 (MET DST) Message-Id: <200007202328.BAA00597@azu.informatik.uni-stuttgart.de> To: hermann.reimer@deggendorf.de CC: fwtk-users@lists.nai.com In-reply-to: (hermann.reimer@deggendorf.de) Subject: Re: Is it better to use squid or squid-gw to hide a webserver Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 579 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] > I would like to hide our webserver behind the firewall. > [...] > Is it a better idea to use squid-gw on the firewall and put a > squid-proxy server in the the same local lan as the webserver ? squid-gw isn't designed for proxying request from the outside to the inside. Use http-in instead. Note that there will be a new em-gw.tar.gz soon, with an important bug fix for http-in. -- Eberhard Mattes From owner-fwtk-users@ex.tis.com Fri Jul 21 01:12 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id BAA01610 Fri, 21 Jul 2000 01:12:00 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id WAA21315; Thu, 20 Jul 2000 22:19:38 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 20 Jul 2000 19:45:51 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id TAA20136 for fwtk-users-outgoing; Thu, 20 Jul 2000 19:45:20 -0700 (PDT) Message-ID: <3977B953.5917E98@v-one.com> Date: Thu, 20 Jul 2000 22:45:39 -0400 From: Keith Young Organization: V-ONE X-Mailer: Mozilla 4.73 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: Joseph S D Yao CC: Hank Leininger , fwtk-users@ex.tis.com Subject: Re: http1.1 problem References: <200007191559.LAA26368@mailer.progressive-comp.com> <20000720184657.X21317@washington.cospo.osis.gov> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1160 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Joseph S D Yao wrote: > > On Wed, Jul 19, 2000 at 11:59:14AM -0400, Hank Leininger wrote: > > It looks like someone is actively rearranging FAQ stuff on www.fwtk.org? > > ATM the 'download' section no longer includes the 'support info' FAQs, > > which is probably good, but... they're not anywhere anymore? /me guesses > > they'll be back in a few minutes ;) > > Hank, thanks for the second archive. Keith was working on the Web site > over the weekend, when he found ten free minutes. ;-) It should be > done by now, tho. "My work is never done." :-) Actually, I spent about 6 hours on the weekend collecting new items and completely redesigning the color layout. Unfortunately, Netscape's editor doesn't handle tables very easily.... :-( I'm taking a half-day tomorrow, so expect to see some changes tomorrow morning. It probably won't be done (should a FAQ ever be done?) but will have more info and changes than what is there now. -- --Keith Young -Director of Customer Care/Support, V-ONE Corp. -kyoung@v-one.com From owner-fwtk-users@ex.tis.com Fri Jul 21 03:36 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id DAA02047 Fri, 21 Jul 2000 03:35:57 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id AAA23084; Fri, 21 Jul 2000 00:43:46 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 20 Jul 2000 22:59:17 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id WAA21698 for fwtk-users-outgoing; Thu, 20 Jul 2000 22:59:06 -0700 (PDT) Message-Id: <200007210558.WAA03120@relay.nai.com> Date: Fri, 21 Jul 2000 13:58:47 +0800 From: wen Reply-To: wen@hisense.qd.sd.cn To: "fwtk-users@ex.tis.com" Subject: about DMZ X-mailer: FoxMail 3.0 beta 2 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="GB2312" Content-Length: 1445 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi,there: today a new problem rush me. | internet | | 1.1.1.1 ----------------- | | 2.2.2.1 DMZ |box installed |------------------------------ | fwtk | |2.2.2.2 |2.2.2.3 ----------------- | | |3.3.3.1 webserver ftpserver | |internal this is my network topology.my box is intalled three NIC and fwtk2.1. external NIC ipaddress is 1.1.1.1,DMZ's is 2.2.2.1,internal is 3.3.3.1. in the DMZ,I want to setup webserver which ipaddress is 2.2.2.2,and ftpserver which ipaddress is 2.2.2.3. now I hope that clients from internal and internet can browse webserver and login ftpserver in the DMZ.further more,clients from internal can freely browse internet website. how to config /etc/services, /etc/inetd.conf and netperm-table files.I am a newer for fwtk,please give me a sample file. thanks in advance. when I setup webserver,I consider things I setup two or more webserver.in this condition, how to config to make fwtk do with difference request for both webserver? when I setup ftpserver,I think a lot. beacuse ftp-gw listen request on 21 port and client ftp command only send request for 21 port,when clients form internet and internal login ftpserver in the DMZ,ftp-gw intercept all requets.how to handle with these? wen From owner-fwtk-users@ex.tis.com Fri Jul 21 08:48 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA02794 Fri, 21 Jul 2000 08:47:56 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA25426; Fri, 21 Jul 2000 05:54:48 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 21 Jul 2000 04:15:28 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA24509 for fwtk-users-outgoing; Fri, 21 Jul 2000 04:15:08 -0700 (PDT) From: ark@eltex.ru Date: Fri, 21 Jul 2000 15:11:23 +0400 Message-Id: <200007211111.PAA03076@paranoid.alpha.int> Organization: "Klingon Imperial Intelligence Service" Subject: Re: http1.1 problem To: kyoung@v-one.com Cc: fwtk-users@ex.tis.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 880 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] -----BEGIN PGP SIGNED MESSAGE----- nuqneH, BTW what happened with old fwtk logo (that one with black background) that was on the site before? Why was it removed? _ _ _ _ _ _ _ {::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_ (##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_| [||] [||] [||] Do i believe in Bible? Hell,man,i've seen one! -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.1i iQCVAwUBOXgv2qH/mIJW9LeBAQEfcQP9F/vdv2j9ZrnEgdBzngSSrssd16s8jPod FZQ2Vc12oPLUwBDrNa9xrHDC+Qdgv8R8daNvArCgCOYcYsg93nQpoqenr1gRjS9O 0s1XzcCPMdDaRKPj6oMZexSFORxI7xLdZB4Hx1MGCCU/MpHGGri2mQpCj4SpIeba lrY6z5eo7y8= =VS3A -----END PGP SIGNATURE----- From owner-fwtk-users@ex.tis.com Fri Jul 21 10:15 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA03017 Fri, 21 Jul 2000 10:15:22 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA27004; Fri, 21 Jul 2000 07:22:30 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 21 Jul 2000 05:50:55 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA25355 for fwtk-users-outgoing; Fri, 21 Jul 2000 05:50:14 -0700 (PDT) Date: Thu, 20 Jul 2000 19:46:10 -0400 From: Joseph S D Yao To: Dan and Karen Ellrick Cc: fwtk-users@lists.nai.com Subject: Re: "Newbie tries to make toolkit - fails", Part 2 Message-Id: <20000720194610.C21317@washington.cospo.osis.gov> Mail-Followup-To: Dan and Karen Ellrick , fwtk-users@lists.nai.com References: <20000719111316.D14866@washington.cospo.osis.gov> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from ellrick@hiroshima-cdas.or.jp on Thu, Jul 20, 2000 at 10:47:13AM +0900 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1994 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Thu, Jul 20, 2000 at 10:47:13AM +0900, Dan and Karen Ellrick wrote: > > (1) Go to www.redhat.com and sign up in the "how to install my fool > > Linux" mailing list. No, it has a different name, but you'll recognize > > it. ;-) > > Yesterday, after I wrote the previous message, I went to redhat.com and > tried exactly that. When I clicked on the "Subscribe" link, it created a > new message with "Subscribe" as the subject. I sent that as-is (it had my > signature, but nowhere did the web site say the message had to be blank, or > should have thus-and-info, or anything), but never got a response. I tried > submitting my question two hours later (hoping I had been subscribed without > notification), but it was refused, saying I was not a subscriber. I then > tried looking for a contact page for redhat.com to ask about that, but at > that time it seemed that their web site was down (all requests for > non-cached pages came up with my browser's page-not-found message). I > suppose I should try that again this morning from home. > > I really am doing all I know to do, but everything seems to end up harder > than it ought to be... :( > > Karen Let's see. This sends e-mail asking that you be subscribed to redhat-install-list. This does not necessarily happen instantly [or even in 24 hours]. This information used to be in the e-mail messages as they were sent out, but it doesn't seem that it is any more. I wonder if it's outdated. Have you tried finding a local Linux user group, whose mailing list you might join? -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Fri Jul 21 11:18 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA03236 Fri, 21 Jul 2000 11:18:47 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA28138; Fri, 21 Jul 2000 08:25:48 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 21 Jul 2000 06:56:17 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA26400 for fwtk-users-outgoing; Fri, 21 Jul 2000 06:55:56 -0700 (PDT) Message-ID: <39785693.B7440074@v-one.com> Date: Fri, 21 Jul 2000 09:56:35 -0400 From: Keith Young Organization: V-ONE X-Mailer: Mozilla 4.73 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: ark@eltex.ru CC: fwtk-users@ex.tis.com Subject: Re: http1.1 problem References: <200007211111.PAA03076@paranoid.alpha.int> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 693 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] ark@eltex.ru wrote: > > BTW what happened with old fwtk logo (that one with black background) that > was on the site before? Why was it removed? The white text on black background made printing the doc on a black&white printer impossible. The old FWTK logo (with the black background) that I did didn't match the white background. I didn't think about printing when I first designed the site and, after a couple of complaints, decided to change it when I had a "free" second. -- --Keith Young -Director of Customer Care/Support, V-ONE Corp. -kyoung@v-one.com From owner-fwtk-users@ex.tis.com Fri Jul 21 13:25 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA03557 Fri, 21 Jul 2000 13:25:08 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA00045; Fri, 21 Jul 2000 10:32:24 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 21 Jul 2000 08:55:53 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA28641 for fwtk-users-outgoing; Fri, 21 Jul 2000 08:55:42 -0700 (PDT) Message-ID: <397872E5.7109EF2C@symark.com> Date: Fri, 21 Jul 2000 08:57:25 -0700 From: David Morgan Organization: Symark Software X-Mailer: Mozilla 4.7 [en] (WinNT; I) X-Accept-Language: en MIME-Version: 1.0 To: "fwtk-users@ex.tis.com" Subject: fwtksyserr: Reset state & net_flags[4] set (read) Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 628 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Dear all, I have just installed the latest FWTK with YAO patches (amongst others) on my replacement firewall. I noticed I am getting a number of errors that I was not getting with the old firewall (same version - a different patch or two maybe) I am getting: smap[pid]: fwtksyserr: Reset state and http-gw[pid]: Network error: net_flags[4] set read errors. I've looked at the code and I am surprised these seem to be happening. I am on a RedHat Linux 6.2 box. Any suggestions? Regards David From owner-fwtk-users@ex.tis.com Fri Jul 21 17:22 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA04225 Fri, 21 Jul 2000 17:22:56 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA02253; Fri, 21 Jul 2000 14:29:11 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 21 Jul 2000 12:54:11 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA01284 for fwtk-users-outgoing; Fri, 21 Jul 2000 12:53:41 -0700 (PDT) Date: Fri, 21 Jul 2000 15:52:26 -0400 From: Joseph S D Yao To: Christian Rost Cc: "wen@hisense.qd.sd.cn" , Fire Wall Tool Kit Mailing List Subject: Re: scan host installed fwtk Message-Id: <20000721155225.X104@washington.cospo.osis.gov> Mail-Followup-To: Christian Rost , "wen@hisense.qd.sd.cn" , Fire Wall Tool Kit Mailing List References: <200007201351.PAA06528@server1.micram.de> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <200007201351.PAA06528@server1.micram.de>; from cr@rocon.de on Thu, Jul 20, 2000 at 03:49:17PM +0000 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 784 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Thu, Jul 20, 2000 at 03:49:17PM +0000, Christian Rost wrote: ... > for that kind of stuff I'm using portsentry, a portscan detector which is part of the > ABACUS project (http://www.psionic.com/abacus/). It dynamically configures your > network settings if it detects an port scan attempt or if someone tries to connect to ports > you've specified as insecure. Good way for a cracker to start a denial of service attack. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Fri Jul 21 19:36 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA04458 Fri, 21 Jul 2000 19:36:45 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA04077; Fri, 21 Jul 2000 16:44:03 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 21 Jul 2000 15:11:02 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA02651 for fwtk-users-outgoing; Fri, 21 Jul 2000 15:10:52 -0700 (PDT) Message-ID: <001901bff361$95288060$7736e0d5@pandora.be> From: "bram kortleven" To: "fwtk" Subject: Need some help Date: Sat, 22 Jul 2000 00:18:22 +0200 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2615.200 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/alternative; boundary="----=_NextPart_000_0016_01BFF372.5844FA00" Content-Length: 1488 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is a multi-part message in MIME format. ------=_NextPart_000_0016_01BFF372.5844FA00 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I'm trying to get a Linuxfirewall up and running, but I'm not having = succes with it Can anyone point a real good explanation and installation guide for tis = fwtk? please? Newbie, but worked a lot before on linux Thx ------=_NextPart_000_0016_01BFF372.5844FA00 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
I'm trying to get a Linuxfirewall up = and running,=20 but I'm not having succes with it
 
Can anyone point a real good = explanation and=20 installation guide for tis fwtk?
 
please?
Newbie, but worked a lot before on=20 linux
Thx
------=_NextPart_000_0016_01BFF372.5844FA00-- From owner-fwtk-users@ex.tis.com Fri Jul 21 21:59 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id VAA04808 Fri, 21 Jul 2000 21:59:49 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id TAA05903; Fri, 21 Jul 2000 19:06:57 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 21 Jul 2000 17:33:05 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id RAA04641 for fwtk-users-outgoing; Fri, 21 Jul 2000 17:32:45 -0700 (PDT) Message-Id: <4.2.2.20000721201148.00b36ad0@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Fri, 21 Jul 2000 20:18:10 -0400 To: David Morgan , "fwtk-users@ex.tis.com" From: Rick Murphy Subject: Re: fwtksyserr: Reset state & net_flags[4] set (read) In-Reply-To: <397872E5.7109EF2C@symark.com> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1181 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 08:57 AM 7/21/00 -0700, David Morgan wrote: >I noticed I am getting a number of errors that I was not getting with the >old firewall (same version - a different patch or two maybe) > >I am getting: >smap[pid]: fwtksyserr: Reset state That gets logged when a RSET command is used. That's harmless. What happens is that when some SMTP servers have multiple mail messages to deliver to a server, you send one mail message, then use a RSET to reset the target; that then allows the server to do another MAIL FROM, RCPT TO, etc.. without opening a new connection. The logging of this message is informational. >and >http-gw[pid]: Network error: net_flags[4] set read errors. That'll happen when some thread in http-gw tries to read on a connection that's already been terminated. It's an indication of an error somewhere; these used to leave http-gw's hanging around forever. The error trap works round the bug. (If you can reproduce one of these, and can debug the cause, it'd be nice to fix it as this is really a band-aid.) -Rick From owner-fwtk-users@ex.tis.com Sat Jul 22 17:30 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA07119 Sat, 22 Jul 2000 17:30:03 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA23873; Sat, 22 Jul 2000 14:36:51 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sat, 22 Jul 2000 11:34:27 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA09403 for fwtk-users-outgoing; Sat, 22 Jul 2000 11:34:16 -0700 (PDT) Date: Sat, 22 Jul 2000 20:25:06 +0200 (CEST) From: Leandro Gelasi To: "fwtk-users@ex.tis.com" Subject: About using postfix on the firewall... Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1042 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi to all! I'm new to this mailing list, so don't blame me if I asked something obvious :-) Reading list's archives, I found that postfix can be used in replacement of smap/smapd daemon on the bastion host. Is this correct? It will simplify my life in installing the firewall system on the bastion host, because I am already using postfix on our servers. I am going to run split dns (external dns on the bastion host, internal over one of our servers), will postfix have any problem to send email from outside to internal network? The split-dns FAQ only talks about Sendmail configuration . Any hint will be appreciated! Bye LG ********************************************************************* Leandro Gelasi V year Computer Science Engineering student at Siena University gelasi@interfree.it Gilles Villeneuve will live forever ********************************************************************* From owner-fwtk-users@ex.tis.com Mon Jul 24 06:15 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id GAA12058 Mon, 24 Jul 2000 06:15:11 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id DAA13394; Mon, 24 Jul 2000 03:22:01 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 01:38:21 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id BAA11318 for fwtk-users-outgoing; Mon, 24 Jul 2000 01:38:10 -0700 (PDT) Message-Id: <200007240837.BAA03717@relay.nai.com> Date: Mon, 24 Jul 2000 16:38:42 +0800 From: wen Reply-To: wen@hisense.qd.sd.cn To: "fwtk-users@ex.tis.com" Subject: fwtk and DNS X-mailer: FoxMail 3.0 beta 2 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="GB2312" Content-Length: 312 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi: is it sure that both fwtk and DNS server must be installed a host? if the answer is yes and I wish to setup DNS server behind the box intalled fwtk,what shoud I do? wen From owner-fwtk-users@ex.tis.com Mon Jul 24 06:15 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id GAA12062 Mon, 24 Jul 2000 06:15:21 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id DAA13398; Mon, 24 Jul 2000 03:22:02 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 00:42:51 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id AAA10494 for fwtk-users-outgoing; Mon, 24 Jul 2000 00:42:40 -0700 (PDT) Message-Id: <200007240741.AAA29496@relay.nai.com> Date: Mon, 24 Jul 2000 15:42:50 +0800 From: wen Reply-To: wen@hisense.qd.sd.cn To: "fwtk-users@ex.tis.com" Subject: about DMZ X-mailer: FoxMail 3.0 beta 2 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="GB2312" Content-Length: 1438 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi,there: today a new problem rush me. | internet | | 1.1.1.1 ----------------- | | 2.2.2.1 DMZ |box installed |------------------------------ | fwtk | |2.2.2.2 |2.2.2.3 ----------------- | | |3.3.3.1 webserver ftpserver | |internal this is my network topology.my box is intalled three NIC and fwtk2.1. external NIC ipaddress is 1.1.1.1,DMZ's is 2.2.2.1,internal is 3.3.3.1. in the DMZ,I want to setup webserver which ipaddress is 2.2.2.2,and ftpserver which ipaddress is 2.2.2.3. now I hope that clients from internal and internet can browse webserver and login ftpserver in the DMZ.further more,clients from internal can freely browse internet website. how to config /etc/services, /etc/inetd.conf and netperm-table files.I am a newer for fwtk,please give me a sample file. thanks in advance. when I setup webserver,I consider things I setup two or more webserver.in this condition, how to config to make fwtk do with difference request for both webserver? when I setup ftpserver,I think a lot. beacuse ftp-gw listen request on 21 port and client ftp command only send request for 21 port,when clients form internet and internal login ftpserver in the DMZ,ftp-gw intercept all requets.how to handle with these? wen From owner-fwtk-users@ex.tis.com Mon Jul 24 08:43 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA13261 Mon, 24 Jul 2000 08:43:27 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA16181; Mon, 24 Jul 2000 05:50:31 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 04:17:45 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA14219 for fwtk-users-outgoing; Mon, 24 Jul 2000 04:17:34 -0700 (PDT) From: "Mario Misic" To: Subject: net_flags[4] Date: Mon, 24 Jul 2000 13:19:31 +0200 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 498 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi! I already saw that even others have problem with http-gw. I have http-gw V2.1 and I got this error while I am trying to access www.xml.com . Network error: net_flags[4] set (read) I read in FAQs that it is probably bug in http-gw software, can someone advice me where to find patch if it exist, I tried to find it somewhere but I didn't. Regards! Mario Misic From owner-fwtk-users@ex.tis.com Mon Jul 24 10:59 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA14094 Mon, 24 Jul 2000 10:59:12 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA19998; Mon, 24 Jul 2000 08:06:23 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 06:31:59 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA16697 for fwtk-users-outgoing; Mon, 24 Jul 2000 06:31:38 -0700 (PDT) X-Originating-IP: [209.206.70.239] From: "Naresh Narang" To: gelasi@interfree.it Cc: fwtk-users@ex.tis.com Subject: Re: About using postfix on the firewall... Date: Sun, 23 Jul 2000 12:36:04 IST Mime-Version: 1.0 Message-ID: X-OriginalArrivalTime: 23 Jul 2000 07:06:04.0535 (UTC) FILETIME=[7758B870:01BFF474] Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; format=flowed Content-Length: 942 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] What I believe is this: Split DNS is to help build a firewall. It has to resolve domains whether from internal or external IP addresses / Domain names. It does not get bound to sendmail. Sendmail uses info supplied by DNS for sending mails. So, it is your Postfix configuration which has to take care of proper routing of Internal or External mail, like you might have seen for sendmail in the FAQ. Regards, NKN > >I am going to run split dns (external dns on the bastion host, internal >over one of our servers), will postfix have any problem to send email from >outside to internal network? The split-dns FAQ only talks about Sendmail >configuration . ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com From owner-fwtk-users@ex.tis.com Mon Jul 24 10:59 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA14095 Mon, 24 Jul 2000 10:59:16 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA20002; Mon, 24 Jul 2000 08:06:23 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 06:32:20 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA16698 for fwtk-users-outgoing; Mon, 24 Jul 2000 06:31:38 -0700 (PDT) From: "Dan and Karen Ellrick" To: "Joseph S D Yao" Cc: Subject: RE: "Newbie tries to make toolkit - fails", Part 2 Date: Sat, 22 Jul 2000 10:11:12 +0900 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) In-Reply-To: <20000720194610.C21317@washington.cospo.osis.gov> X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Importance: Normal Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 2836 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] > Let's see. > > > This sends e-mail asking that you be subscribed to redhat-install-list. > This does not necessarily happen instantly [or even in 24 hours]. I still haven't gotten any notification (three days later)... oh, well. With some struggle (i.e. serious time invested by myself and the company system administrator [who doesn't really know any more than I do about troubleshooting these things] and some serendipitous web searches), I finally found how to issue an insmod command with the proper parameters to allow me to mount my CD-ROM drives. Hooray for small victories! > Have you tried finding a local Linux user group, whose mailing list you > might join? If you mean geographically local, that would be hard for me, because it would all be in Japanese. Plus, I don't live in the technology hot-bed of the country, here in Hiroshima. I found out yesterday that my sysadmin guy subscribes to a magazine (in Japanese, although it may be a translation of an English one) called Linux, and when I asked him for help with sendmail he dug through his pile of them and found some applicable stuff. Unfortunately it didn't work. (Rather than a change to the sendmail.cf file, a daunting task I'm not ready to do, the magazine said to simply use the "mailertable" file to specify the IP address where the sendmail server on our bastion host should send mail for our domain - but it just queued the mail and didn't send it anywhere.) Thank you for all the comments about postfix, but when I mentioned it to my sysadmin, he pointed out that we need to have a mail transport program that won't mess up the Japanese multi-byte characters that could show up in subject lines, body of messages, and attached file names. He knows that sendmail works - postfix, qmail, etc. have possibly never been tested in that regard. So we'll stick with sendmail. I tried the sendmail.org site looking for a mailing list to join, but all they had listed was a couple news groups, and whatever software I need to do news I don't have. I bet there's a regular e-mail based group out there somewhere - anyone know about one? Or does anyone know how to do the (theoretically simple) task of getting sendmail to forward all incoming mail (all mail to the company domain) to another, single server? Or how about my original question about how to tell make where all my include files are (I've looked through the Build and Makefile structure of both fwtk and sendmail 8.10, both of interest to me, and I don't see where the include file paths are specified - in my C programming days as far as I can remember it always just worked...)? Karen From owner-fwtk-users@ex.tis.com Mon Jul 24 10:59 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA14100 Mon, 24 Jul 2000 10:59:32 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA19994; Mon, 24 Jul 2000 08:06:22 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 06:31:18 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA16669 for fwtk-users-outgoing; Mon, 24 Jul 2000 06:30:37 -0700 (PDT) From: dreamwvr To: Joseph S D Yao , Christian Rost Subject: Re: scan host installed fwtk Date: Fri, 21 Jul 2000 16:51:37 -0600 X-Mailer: KMail [version 1.0.28] Cc: "wen@hisense.qd.sd.cn" , Fire Wall Tool Kit Mailing List References: <200007201351.PAA06528@server1.micram.de> <20000721155225.X104@washington.cospo.osis.gov> In-Reply-To: <20000721155225.X104@washington.cospo.osis.gov> MIME-Version: 1.0 Message-Id: <00072116545118.23748@tyr.dreamwvr.com> Content-Transfer-Encoding: 8bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Fire Wall Tool Kit Mailing List Content-Length: 2220 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, that is correct.. FYI this is mentioned in the ABACAS README for the portsentry.. with the author suggesting exactly this scenario which is brought to your attemtion there.. well they have to also be pretty noisy.. to decide to mass scan you.. Best Regards,' dreamwvr@dreamwvr.com On Fri, 21 Jul 2000, Joseph S D Yao wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > On Thu, Jul 20, 2000 at 03:49:17PM +0000, Christian Rost wrote: > ... > >> for that kind of stuff I'm using portsentry, a portscan detector which is part of the > > ABACUS project (http://www.psionic.com/abacus/). It dynamically configures your > > network settings if it detects an port scan attempt or if someone tries to connect to ports > > you've specified as insecure. > > Good way for a cracker to start a denial of service attack. > > -- > Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao > COSPO/OSIS Computer Support EMT-B > ----------------------------------------------------------------------- > This message is not an official statement of COSPO policies. -- Reuters, London, February 29, 1998: Scientists have announced discovering a meteorite which will strike the earth in March, 2028. Millions of UNIX coders expressed relief for being spared the UNIX epoch "crisis" of 2038. _______________________________________________________________________ ************** DREAMWVR.COM - TOTAL INTERNET SERVICES **************** TOTAL DESIGN - DEVELOPMENT - INTEGRATION - SECURITY - Click Here.. ; DREAMWVR.COM - The Console of Many... 90 Topics Covered ; ; ->> LINUX Solution Provider and North American Distributor<<- "===0 PGP Key Available *************** "As Unique as the Company You Keep."***************** "If anyone speaks from DREAMWVR.COM its certainly not me:-)" ________________________________________________________________________ From owner-fwtk-users@ex.tis.com Mon Jul 24 11:01 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA14110 Mon, 24 Jul 2000 11:01:22 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA20006; Mon, 24 Jul 2000 08:06:23 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 06:35:48 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA16745 for fwtk-users-outgoing; Mon, 24 Jul 2000 06:32:37 -0700 (PDT) Date: Mon, 24 Jul 2000 03:21:44 -0500 (CDT) From: Area de Seguridad en Computo To: aleph1@securityfocus.org cc: ryan@securityfocus.com, me@robertgraham.com, jroculan@securityfocus.com, jroculan@securityfocus.org, amackie@home.com, BlueBoar@thievco.com, vpn@securityfocus.com, firewall-wizards@nfr.net, firewalls@lists.gnac.net, fwtk-users@ex.tis.com, isn@sekurity.org, cert@cert.org, comp-privacy@uwm.edu, ntbugtraq@listserv.ntbugtraq.com, ntsecurity@iss.net Subject: Computer Security 2000 Mexico Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 5608 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] -----BEGIN PGP SIGNED MESSAGE----- .---' .---' .---' .---' .---' .---' .---' .---' .---' .---' .---' .---' C o m p u t e r S e c u r i t y 2000 M e x i c o November 26th - December 1st, 2000 Palacio de Miner'ia, M'exico City, M'exico. .---' .---' .---' .---' .---' .---' .---' .---' .---' .---' .---' .---' C A L L F O R P A P E R S The goal of "Computer Security 2000" and "International Computer Security Day" is to create awareness in the computer user community about security strategies and mechanisms used to protect information. "Computer Security 2000" (http://www.seguridad2000.unam.mx)will be a meeting for all the people who is involved in the use of Computer equipment. DISC 2000 (http://www.disc2000.unam.mx)is an annual world-wide celebration convoked by ACM(Association For Computing Machinery). Since 1994, Mexico has participated in this celebration through the Computer Security Area (ASC, http://www.asc.unam.mx). This year DISC2000 will take place alongside the event "Computer Security 2000" on November 30th. The community is invited to participate in the "Computer Security 2000" event through the presentation of theoretical, technical, and applied works and those who presents practical experience in the following topics (but not limited to them): >> Electronic commerce Certification Digital cash New protocols Secure transactions New Technologies >> New firewall technologies Hybrids FW New generations of FW >> World Wide Web security Secure Sockets Layer (SSL) Secure Schemes >> Legislation about Computer Security Advances in legislation 1999-2000 Regulation of domain names Copyright and Industrial property >> Network security New network technology applied to Security (ATM, Fast Ethernet) Routers security >> Clusters security >> Security for software developers >> Security in distributed systems and data bases >> Security in agents and multi-platform languages >> Incident response teams >> Computer security incident handling, prevention and coordination >> Administrative and legal issues in the incident handling >> Software protection and intellectual property >> New tools for incident handling >> Attacks and intrusion detection >> Computer attacks >> Privacy and cryptography protocols >> Security policies >> Computer viruses >> DDOS attacks Important Dates ................ Paper submissions: September 22th Acceptance notification: October 7th Final papers due: October 28th Event Dates: November 26th to December 1st Workshop Format ................ There will be tutorial-style presentations and workshop-style presentations during November 26,27 and 28. And November 29 and December 1 will consist of Technical conferences, as well as business sessions. The Birds of Feather Sessions(BOF'S) will be held on November 26,27 and 28. Contributions should follow the following guidelines: 1.-Tutorials and workshops: Half or full day tutorial proposals will be considered. 2. Conference papers: Written papers may be as long as desired, but presentations must be limited to 30 minutes. 3. Panel Sessions: These informal sessions should either follow a more "hands-on" approach or provide for a high degree of audience participation. They should be tailored to address specific issues and should be from 60 to 90 minutes in duration. Panel Sessions on a particular topic are also aceptable. Program Committee ..................... The committe will be composed by: >> Dr. Eugene Spafford Director of CERIAS, Purdue University, EU >> Wietse Venema IBM T.J. Watson Research Center >> Dr. Eugene Schultz Global Integrity, EU >> Linda McCarthy Net-Defense, EU >> M. en C. Diego Zamboni CERIAS, Purdue University >> Juan Carlos Guel Lopez Computer Security Area DGSCA-UNAM, Mexico Further Information ..................... E-mail:comite@seguridad.unam.mx http://www.seguridad2000.unam.mx http://www.disc2000.unam.mx http://www.asc.unam.mx Address ......... Area de Seguridad en Computo Direccion General de Computo Academico Circuito Exterior, Ciudad Universitaria 04510 Mexico, D.F. Mexico Phone : (52) 56 22 81 69 and (52) 56 85 22 29 Fax : (52) 56 22 80 43 - --- Juan Carlos Guel Lopez Area de Seguridad en C'omputo E-mail: asc@asc.unam.mx DGSCA, UNAM Tel.: 5622-81-69 Fax: 5622-80-43 Circuito Exterior, C. U. WWW: http://www.asc.unam.mx/ 04510 Mexico D. F. PGP: finger asc@asc.unam.mx -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.1i iQEVAwUBOXv8sj6HeEeO/+C1AQHNeAf/Yc56rQ9uX85UpGf2sB+xxeyz2nY8ERhk GssgXxO473z/ixeS32XVnFQg+1OaI9oVtFJ/pJji5E0KMefHiyT+hlZmfyGyp1VF TZqLaKyUw39T2EhWZHb3t2lyzALpK2de2cGvFKoGr2F0DzgF1PYWWwrMHrbDl6HQ ceNuASFw63LsUVEK8nKg/Y5k9CPb/pqEbvh1upmcpCg3MAn8Ea+9OUI2J+GhB52z nLh9QeXqMgq2seAMspgynI/DT3+etG9zo7Rh89wemtP/9hfwSuUIZ1y/e9dXmqzq /HQsChz+LdJd7wqrP24VzS8BiC/YnAKl14ibCe9km/3me6JR8UOM8g== =Uo4u -----END PGP SIGNATURE----- From owner-fwtk-users@ex.tis.com Mon Jul 24 14:47 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA14858 Mon, 24 Jul 2000 14:47:08 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA24411; Mon, 24 Jul 2000 11:54:36 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 10:14:44 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA23264 for fwtk-users-outgoing; Mon, 24 Jul 2000 10:14:33 -0700 (PDT) From: "TJ O Connor" To: "Fwtk Users" Subject: Testing my Network Date: Mon, 24 Jul 2000 18:15:22 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1051 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, I am after setting up my own subnet on a linux box to test my firewall. I put in a second ethernet card which installed no problem. When i ran a few tests on the subnet i came up against a slight problem. I can ping from any computer on my subnet to the inside address of the firewall system and i can ping from the firewall to an internet system (www.esat.net) However when I try to ping the outside address of the firewall from a computer on the subnet it lets me. I have ip_forwarding turned off by using this command: 'echo "0" > /proc/sys/net/ipv4/ip_forward' if anyone knows what i am talking about could they please email me cheers - -- _ T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Mon Jul 24 17:32 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA15396 Mon, 24 Jul 2000 17:32:32 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA27439; Mon, 24 Jul 2000 14:39:56 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 13:02:26 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA25251 for fwtk-users-outgoing; Mon, 24 Jul 2000 13:02:06 -0700 (PDT) X-Authentication-Warning: the-wall.ues-software.com: mail set sender to using -f From: "Y. W. Ko" To: "TJ O Connor" , "Fwtk Users" Subject: RE: Testing my Network Date: Mon, 24 Jul 2000 15:59:16 -0400 Message-ID: <002801bff5a9$a53e60b0$104262c7@uessoftware.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0 In-Reply-To: X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Importance: Normal Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 2289 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I have come across this myself... I guess that it happens when both your internal and external interface have the same network address, in which case, the TCP/IP stack consider them to be on the same subnet. I believe, (well, I hope anyway) that the ping that you did from the internal network can only go as far as the external interface, not beyond. What you might want to do is to reassign reserved non-routable ip address such as "198.162.xxx.xxx" to your internal network. The behaviour you described would disappear. Hope this helps, Ko --------------------------------------------------------------------------- UES Software Inc. Tel: (410) 573-2037 175 Admiral Cochrane Drive, Suite 110 Fax: (410) 573-2041 Annapolis, MD 21401. E-mail: ko@ues-software.com > -----Original Message----- > From: owner-fwtk-users@ex.tis.com [mailto:owner-fwtk-users@ex.tis.com]On > Behalf Of TJ O Connor > Sent: Monday, July 24, 2000 1:15 PM > To: Fwtk Users > Subject: Testing my Network > > > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hi, > I am after setting up my own subnet on a linux box to test my > firewall. > I put in a second ethernet card which installed no problem. > When i ran a few tests on the subnet i came up against a slight > problem. > > I can ping from any computer on my subnet to the inside address of the > firewall system and i can ping from the firewall to an internet system > (www.esat.net) > However when I try to ping the outside address of the firewall > from a computer on the subnet it lets me. I have ip_forwarding > turned off by using this command: > 'echo "0" > /proc/sys/net/ipv4/ip_forward' > > if anyone knows what i am talking about could they please > email me > > cheers > > - -- _ > T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, > SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. > Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 > toconnor@comnitel.com \_/ Fax: +353 21 7305624 > From owner-fwtk-users@ex.tis.com Mon Jul 24 17:47 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA15422 Mon, 24 Jul 2000 17:47:34 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA27749; Mon, 24 Jul 2000 14:55:29 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 13:33:55 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA25900 for fwtk-users-outgoing; Mon, 24 Jul 2000 13:33:34 -0700 (PDT) X-Authentication-Warning: the-wall.ues-software.com: mail set sender to using -f From: "Y. W. Ko" To: "Y. W. Ko" , "TJ O Connor" , "Fwtk Users" Subject: RE: Testing my Network Date: Mon, 24 Jul 2000 16:30:30 -0400 Message-ID: <002901bff5ae$024f2880$104262c7@uessoftware.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Importance: Normal Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 3318 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Sorry I was wrong... It looks as though you CAN still ping the external interface even though the internal network address is different - as long as the internal host you ping from has the firewall configured as the default gateway. I tested it again, well, after I sent the previous email. I apologise. Having said that, it still look as though you cannot ping anything beyond the external interface itself. Comments please? Thanks, Ko --------------------------------------------------------------------------- UES Software Inc. Tel: (410) 573-2037 175 Admiral Cochrane Drive, Suite 110 Fax: (410) 573-2041 Annapolis, MD 21401. E-mail: ko@ues-software.com > -----Original Message----- > From: Y. W. Ko [mailto:ko@ues-software.com] > Sent: Monday, July 24, 2000 3:59 PM > To: TJ O Connor; Fwtk Users > Subject: RE: Testing my Network > > > I have come across this myself... > > I guess that it happens when both your internal and external > interface have the same network address, in which case, the > TCP/IP stack consider them to be on the same subnet. I believe, > (well, I hope anyway) that the ping that you did from the > internal network can only go as far as the external interface, > not beyond. What you might want to do is to reassign reserved > non-routable ip address such as "198.162.xxx.xxx" to your > internal network. The behaviour you described would disappear. > > Hope this helps, > > Ko > > ------------------------------------------------------------------ > --------- > UES Software Inc. Tel: (410) 573-2037 > 175 Admiral Cochrane Drive, Suite 110 Fax: (410) 573-2041 > Annapolis, MD 21401. E-mail: > ko@ues-software.com > > > -----Original Message----- > > From: owner-fwtk-users@ex.tis.com [mailto:owner-fwtk-users@ex.tis.com]On > > Behalf Of TJ O Connor > > Sent: Monday, July 24, 2000 1:15 PM > > To: Fwtk Users > > Subject: Testing my Network > > > > > > [To be removed from this list send the message "unsubscribe > > fwtk-users" in the > > BODY of a mail message to majordomo@ex.tis.com.] > > > > Hi, > > I am after setting up my own subnet on a linux box to test my > > firewall. > > I put in a second ethernet card which installed no problem. > > When i ran a few tests on the subnet i came up against a slight > > problem. > > > > I can ping from any computer on my subnet to the inside address of the > > firewall system and i can ping from the firewall to an internet system > > (www.esat.net) > > However when I try to ping the outside address of the firewall > > from a computer on the subnet it lets me. I have ip_forwarding > > turned off by using this command: > > 'echo "0" > /proc/sys/net/ipv4/ip_forward' > > > > if anyone knows what i am talking about could they please > > email me > > > > cheers > > > > - -- _ > > T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, > > SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. > > Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 > > toconnor@comnitel.com \_/ Fax: +353 21 7305624 > > From owner-fwtk-users@ex.tis.com Mon Jul 24 20:29 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA15885 Mon, 24 Jul 2000 20:28:44 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA01544; Mon, 24 Jul 2000 17:36:38 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 16:02:48 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA29294 for fwtk-users-outgoing; Mon, 24 Jul 2000 16:02:28 -0700 (PDT) Reply-To: From: "Nico Baggus" To: "'Y. W. Ko'" Cc: "'Fwtk Users'" Subject: RE: Testing my Network Date: Tue, 25 Jul 2000 00:53:51 +0200 Message-ID: <000401bff5c2$09e84220$1106a8c0@niconet.adenc.nl> MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0 In-Reply-To: <002801bff5a9$a53e60b0$104262c7@uessoftware.com> Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 298 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] ----8<------ > internal network. I do hope you mean private networks: 192.168.0.0/16 or 172.16.0.0/12 or 10.0.0.0/8 or the test network: 169.254.0.0/16 ------8<----- From owner-fwtk-users@ex.tis.com Mon Jul 24 20:43 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA15916 Mon, 24 Jul 2000 20:42:37 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA01873; Mon, 24 Jul 2000 17:50:31 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 16:29:44 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA29813 for fwtk-users-outgoing; Mon, 24 Jul 2000 16:29:13 -0700 (PDT) Date: Mon, 24 Jul 2000 19:27:59 -0400 From: Joseph S D Yao To: "Y. W. Ko" Cc: TJ O Connor , Fwtk Users Subject: Re: Testing my Network Message-Id: <20000724192759.B14337@washington.cospo.osis.gov> Mail-Followup-To: "Y. W. Ko" , TJ O Connor , Fwtk Users References: <002901bff5ae$024f2880$104262c7@uessoftware.com> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <002901bff5ae$024f2880$104262c7@uessoftware.com>; from ko@ues-software.com on Mon, Jul 24, 2000 at 04:30:30PM -0400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 966 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Mon, Jul 24, 2000 at 04:30:30PM -0400, Y. W. Ko wrote: ... > It looks as though you CAN still ping the external interface even though the > internal network address is different - as long as the internal host you > ping from has the firewall configured as the default gateway. I tested it > again, well, after I sent the previous email. I apologise. Having said that, > it still look as though you cannot ping anything beyond the external > interface itself. I have read about this, as a bug in the network implementation, "to be fixed in a future release." And, yes, you can't ping beyond the remote NIC. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Mon Jul 24 20:52 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA15948 Mon, 24 Jul 2000 20:51:53 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA02141; Mon, 24 Jul 2000 17:59:47 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 16:40:10 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA00032 for fwtk-users-outgoing; Mon, 24 Jul 2000 16:39:49 -0700 (PDT) Date: Mon, 24 Jul 2000 19:38:45 -0400 From: Joseph S D Yao To: Dan and Karen Ellrick Cc: fwtk-users@lists.nai.com Subject: Re: "Newbie tries to make toolkit - fails", Part 2 Message-Id: <20000724193845.D14337@washington.cospo.osis.gov> Mail-Followup-To: Dan and Karen Ellrick , fwtk-users@lists.nai.com References: <20000720194610.C21317@washington.cospo.osis.gov> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from ellrick@hiroshima-cdas.or.jp on Sat, Jul 22, 2000 at 10:11:12AM +0900 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1085 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Sat, Jul 22, 2000 at 10:11:12AM +0900, Dan and Karen Ellrick wrote: > Or how about my original question about how to tell make where all my > include files are (I've looked through the Build and Makefile structure of > both fwtk and sendmail 8.10, both of interest to me, and I don't see where > the include file paths are specified - in my C programming days as far as I > can remember it always just worked...)? They should be, as I have said, in /usr/include/. I also included the 'rpm' command to find in which RPM set any one file would be found. I don't remember it now, but it should be in your mail. Try www.tux.org for some Linux resources and mailing lists. Linux Journal and Linux Magazine are two periodicals. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Mon Jul 24 23:05 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id XAA16225 Mon, 24 Jul 2000 23:04:46 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id UAA05538; Mon, 24 Jul 2000 20:12:41 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 18:36:41 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id SAA03102 for fwtk-users-outgoing; Mon, 24 Jul 2000 18:36:10 -0700 (PDT) X-Authentication-Warning: the-wall.ues-software.com: mail set sender to using -f Date: Mon, 24 Jul 2000 21:34:14 -0400 (EDT) From: "Y. W. Ko" To: Joseph S D Yao cc: TJ O Connor , Fwtk Users Subject: Re: Testing my Network In-Reply-To: <20000724192759.B14337@washington.cospo.osis.gov> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1560 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi Joe, Thanks for your comments. Do you by any chance remember where the bug was mentioned? Is it Linux specfic? More importantly, was it specifically mentioned that nothing at all will be forwarded beyond the "external" interface assuming ip-forward is disabled? Obviously, everyone need to be very concerned if this is not true. Thanks again, Ko On Mon, 24 Jul 2000, Joseph S D Yao wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > On Mon, Jul 24, 2000 at 04:30:30PM -0400, Y. W. Ko wrote: > ... > > It looks as though you CAN still ping the external interface even though the > > internal network address is different - as long as the internal host you > > ping from has the firewall configured as the default gateway. I tested it > > again, well, after I sent the previous email. I apologise. Having said that, > > it still look as though you cannot ping anything beyond the external > > interface itself. > > I have read about this, as a bug in the network implementation, "to be > fixed in a future release." And, yes, you can't ping beyond the remote > NIC. > > -- > Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao > COSPO/OSIS Computer Support EMT-B > ----------------------------------------------------------------------- > This message is not an official statement of COSPO policies. > From owner-fwtk-users@ex.tis.com Mon Jul 24 23:34 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id XAA16294 Mon, 24 Jul 2000 23:33:43 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id UAA06280; Mon, 24 Jul 2000 20:41:38 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 19:22:41 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id TAA04547 for fwtk-users-outgoing; Mon, 24 Jul 2000 19:22:20 -0700 (PDT) Message-ID: <397CF378.1F3576F0@calpha.com> Date: Mon, 24 Jul 2000 20:55:04 -0500 From: syntax X-Mailer: Mozilla 4.72 [en] (X11; I; FreeBSD 4.0-RELEASE i386) X-Accept-Language: en MIME-Version: 1.0 To: Dan and Karen Ellrick CC: fwtk-users@lists.nai.com Subject: Re: "Newbie tries to make toolkit - fails", Part 2 References: Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 3408 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] A great sendmail book is Sendmail Theory and Practice by Frederick M. Avolio & Paul A. Vixie The 1st addition should be all you need if you use the smap interface. A second addition looks to be coming out December 15, 2000 and I look forward to the update to a book that explains sendmail so clearly. Syntax Dan and Karen Ellrick wrote: > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > > Let's see. > > > > > > This sends e-mail asking that you be subscribed to redhat-install-list. > > This does not necessarily happen instantly [or even in 24 hours]. > I still haven't gotten any notification (three days later)... oh, well. > With some struggle (i.e. serious time invested by myself and the company > system administrator [who doesn't really know any more than I do about > troubleshooting these things] and some serendipitous web searches), I > finally found how to issue an insmod command with the proper parameters to > allow me to mount my CD-ROM drives. Hooray for small victories! > > > Have you tried finding a local Linux user group, whose mailing list you > > might join? > If you mean geographically local, that would be hard for me, because it > would all be in Japanese. Plus, I don't live in the technology hot-bed of > the country, here in Hiroshima. I found out yesterday that my sysadmin guy > subscribes to a magazine (in Japanese, although it may be a translation of > an English one) called Linux, and when I asked him for help with sendmail he > dug through his pile of them and found some applicable stuff. Unfortunately > it didn't work. (Rather than a change to the sendmail.cf file, a daunting > task I'm not ready to do, the magazine said to simply use the "mailertable" > file to specify the IP address where the sendmail server on our bastion host > should send mail for our domain - but it just queued the mail and didn't > send it anywhere.) > > Thank you for all the comments about postfix, but when I mentioned it to my > sysadmin, he pointed out that we need to have a mail transport program that > won't mess up the Japanese multi-byte characters that could show up in > subject lines, body of messages, and attached file names. He knows that > sendmail works - postfix, qmail, etc. have possibly never been tested in > that regard. So we'll stick with sendmail. I tried the sendmail.org site > looking for a mailing list to join, but all they had listed was a couple > news groups, and whatever software I need to do news I don't have. I bet > there's a regular e-mail based group out there somewhere - anyone know about > one? Or does anyone know how to do the (theoretically simple) task of > getting sendmail to forward all incoming mail (all mail to the company > domain) to another, single server? > > Or how about my original question about how to tell make where all my > include files are (I've looked through the Build and Makefile structure of > both fwtk and sendmail 8.10, both of interest to me, and I don't see where > the include file paths are specified - in my C programming days as far as I > can remember it always just worked...)? > > Karen From owner-fwtk-users@ex.tis.com Tue Jul 25 00:50 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id AAA16418 Tue, 25 Jul 2000 00:49:31 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id VAA08040; Mon, 24 Jul 2000 21:55:51 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 20:14:03 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id UAA05558 for fwtk-users-outgoing; Mon, 24 Jul 2000 20:13:42 -0700 (PDT) Message-ID: <004201bff5e4$6e02f760$9001a8c0@sctech.co.jp> From: "Karen Ellrick" To: "Joseph S D Yao" Cc: References: <20000720194610.C21317@washington.cospo.osis.gov> <20000724193845.D14337@washington.cospo.osis.gov> Subject: Re: "Newbie tries to make toolkit - fails", Part 2 Date: Tue, 25 Jul 2000 12:00:02 +0900 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/mixed; boundary="----=_NextPart_000_003F_01BFF62F.DD6D8020" Content-Length: 7787 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is a multi-part message in MIME format. ------=_NextPart_000_003F_01BFF62F.DD6D8020 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit > > Or how about my original question about how to tell make where all my > > include files are (I've looked through the Build and Makefile structure of > > both fwtk and sendmail 8.10, both of interest to me, and I don't see where > > the include file paths are specified - in my C programming days as far as I > > can remember it always just worked...)? > > They should be, as I have said, in /usr/include/. On my system, the normal files (like stdio.h) are in /usr/lib/bcc/include. Even though fwtk's Makefile.config.linux is using cc rather than bcc (I seem to have at least three compilers on my system: cc, bcc, and gcc - no wonder this stuff is confusing!), I solved the errors related to those by changing the CC variable in Makefile.config(.linux) from "cc" to "cc -I /usr/lib/bcc/include" (I couldn't figure out any more elegant way to give the compiler that option). But there are still eight include files that are not found (in 28 error messages), four of which are nowhere on my system and the other four are scattered here and there (one in the fwtk directory structure itself - syslog.h). Does everybody have to work this hard to compile things? I doubt it - I still think there's some single package I should have that I don't, or something like that. > I also included the > 'rpm' command to find in which RPM set any one file would be found. I > don't remember it now, but it should be in your mail. What you said in the previous email was: > You can check which header files are found in which RPM package: > bash$ rpm -q -f /usr/include/stdio.h > glibc-devel-2.1.3-15 But if the file is not already there, it will simply give the message: file /usr/include/stdio.h: No such file or directory Obviously if I'm looking for the right package to install, it's because I don't already have the file, so that doesn't do me any good. Next idea? (I'll attach the output file I got after adding "-I /usr/lib/bcc/include".) Sendmail 8.10.0 is even worse - I found a place in the .../sendmail/Build file to specify a directory for include files, but I still get some errors about the very files that are in that directory, as if the various sendmail source files that include them are overriding the directory I gave it and specifying paths directly or something. Sendmail is huge (fwtk isn't a shrimp, either!) - I can't go looking through every source file to learn what's going on with each include reference that bombs (at least not unless I have a whole lot more time on my hands). There has to be a simpler solution... right? Karen ------=_NextPart_000_003F_01BFF62F.DD6D8020 Content-Type: application/octet-stream; name="make.log" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="make.log" for a in lib auth smap smapd netacl plug-gw ftp-gw tn-gw rlogin-gw = http-gw x-gw; do \ ( cd $a; echo all: `pwd`; make all ); \ done all: /home/k-ellrick/fwtk/fwtk/lib make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/lib' cc -I /usr/lib/bcc/include -I.. -g -DLINUX -c config.c -o config.o config.c:17: syslog.h: No such file or directory make[1]: *** [config.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/lib' all: /home/k-ellrick/fwtk/fwtk/auth make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/auth' cc -I /usr/lib/bcc/include -I.. -g -DLINUX -c cliio.c cliio.c:14: syslog.h: No such file or directory make[1]: *** [cliio.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/auth' all: /home/k-ellrick/fwtk/fwtk/smap make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/smap' cc -I /usr/lib/bcc/include -I.. -g -DLINUX -c smap.c -o smap.o smap.c:22: syslog.h: No such file or directory smap.c:23: netdb.h: No such file or directory smap.c:26: netinet/in.h: No such file or directory make[1]: *** [smap.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/smap' all: /home/k-ellrick/fwtk/fwtk/smapd make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/smapd' cc -I /usr/lib/bcc/include -DPARSEADDR -I.. -g -DLINUX -c smapd.c -o = smapd.o smapd.c:16: syslog.h: No such file or directory smapd.c:25: sys/dir.h: No such file or directory make[1]: *** [smapd.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/smapd' all: /home/k-ellrick/fwtk/fwtk/netacl make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/netacl' cc -I /usr/lib/bcc/include -I.. -g -DLINUX -c netacl.c -o netacl.o netacl.c:15: syslog.h: No such file or directory make[1]: *** [netacl.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/netacl' all: /home/k-ellrick/fwtk/fwtk/plug-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/plug-gw' cc -I /usr/lib/bcc/include -I.. -g -DLINUX -c plug-gw.c -o plug-gw.o plug-gw.c:24: syslog.h: No such file or directory plug-gw.c:31: netdb.h: No such file or directory plug-gw.c:32: netinet/in.h: No such file or directory make[1]: *** [plug-gw.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/plug-gw' all: /home/k-ellrick/fwtk/fwtk/ftp-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/ftp-gw' cc -I /usr/lib/bcc/include -I.. -g -DLINUX -c ftp-gw.c -o ftp-gw.o ftp-gw.c:17: syslog.h: No such file or directory ftp-gw.c:22: arpa/ftp.h: No such file or directory ftp-gw.c:23: arpa/telnet.h: No such file or directory ftp-gw.c:33: netinet/in.h: No such file or directory make[1]: *** [ftp-gw.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/ftp-gw' all: /home/k-ellrick/fwtk/fwtk/tn-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/tn-gw' cc -I /usr/lib/bcc/include -I.. -g -DLINUX -c tn-gw.c -o tn-gw.o tn-gw.c:19: syslog.h: No such file or directory tn-gw.c:25: arpa/telnet.h: No such file or directory tn-gw.c:36: netinet/in.h: No such file or directory tn-gw.c:37: netdb.h: No such file or directory make[1]: *** [tn-gw.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/tn-gw' all: /home/k-ellrick/fwtk/fwtk/rlogin-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/rlogin-gw' cc -I /usr/lib/bcc/include -I.. -g -DLINUX -c rlogin-gw.c -o = rlogin-gw.o rlogin-gw.c:16: syslog.h: No such file or directory rlogin-gw.c:30: netdb.h: No such file or directory rlogin-gw.c:31: netinet/in.h: No such file or directory make[1]: *** [rlogin-gw.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/rlogin-gw' all: /home/k-ellrick/fwtk/fwtk/http-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/http-gw' cc -I /usr/lib/bcc/include -I.. -g -DLINUX -c hmain.c -o hmain.o In file included from hmain.c:28: http-gw.h:20: arpa/ftp.h: No such file or directory http-gw.h:21: arpa/telnet.h: No such file or directory In file included from hmain.c:28: http-gw.h:34: netinet/in.h: No such file or directory http-gw.h:35: netdb.h: No such file or directory In file included from hmain.c:28: http-gw.h:38: syslog.h: No such file or directory http-gw.h:41: net/if.h: No such file or directory make[1]: *** [hmain.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/http-gw' all: /home/k-ellrick/fwtk/fwtk/x-gw make[1]: Entering directory `/home/k-ellrick/fwtk/fwtk/x-gw' cc -I /usr/lib/bcc/include -I.. -g -DLINUX -I/usr/X11/include -c = child.c -o child.o In file included from child.c:14: ulib.h:26: X11/Intrinsic.h: No such file or directory make[1]: *** [child.o] Error 1 make[1]: Leaving directory `/home/k-ellrick/fwtk/fwtk/x-gw' make: *** [all] Error 2 ------=_NextPart_000_003F_01BFF62F.DD6D8020-- From owner-fwtk-users@ex.tis.com Tue Jul 25 02:43 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id CAA16634 Tue, 25 Jul 2000 02:43:35 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id XAA09843; Mon, 24 Jul 2000 23:51:30 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 24 Jul 2000 22:19:16 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id WAA08430 for fwtk-users-outgoing; Mon, 24 Jul 2000 22:19:05 -0700 (PDT) Message-Id: <200007250518.WAA28299@relay.nai.com> Date: Tue, 25 Jul 2000 13:18:51 +0800 From: wen Reply-To: wen@hisense.qd.sd.cn To: "fwtk-users@ex.tis.com" Subject: ipbind problem X-mailer: FoxMail 3.0 beta 2 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="GB2312" Content-Length: 484 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi: I have configed ipbind rule in my fwtk's netperm-table file and clients from internet can broswer my webserver in DMZ. but they only browser my main page, not go next page. I check ipbind and fwtk soure code, find no error. but fwtk pached ipbind actually filter my webpage's path. do you have some advice to do with this problem? thanks wen From owner-fwtk-users@ex.tis.com Tue Jul 25 08:19 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA17799 Tue, 25 Jul 2000 08:19:04 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA12207; Tue, 25 Jul 2000 05:26:50 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 25 Jul 2000 02:59:13 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id CAA11055 for fwtk-users-outgoing; Tue, 25 Jul 2000 02:58:42 -0700 (PDT) X-Mailer: exmh version 2.0.2 2/24/98 To: "Y. W. Ko" cc: "TJ O Connor" , "Fwtk Users" Subject: Re: Testing my Network In-reply-to: Your message of "Mon, 24 Jul 2000 16:30:30 EDT." <002901bff5ae$024f2880$104262c7@uessoftware.com> Mime-Version: 1.0 Date: Tue, 25 Jul 2000 10:55:59 +0100 From: David Pick Message-Id: Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1099 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] > Sorry I was wrong... > > It looks as though you CAN still ping the external interface even though the > internal network address is different - as long as the internal host you > ping from has the firewall configured as the default gateway. I tested it > again, well, after I sent the previous email. I apologise. Having said that, > it still look as though you cannot ping anything beyond the external > interface itself. > > Comments please? Perfectly normal. Standard processing for an IP packet when it's received goes something like: 1) Is the packet for me? - ie is the destination IP address the same as the address of *any* interface I have? if so, process the packet as such 2) Since the packet is *not* for me, see if I can route it on - am I allowed to forward anything? (ipforwarding variable) if not, drop it if so, route packet outwards as if I'd sent it myself (apart from decrementing the TTL) -- David Pick From owner-fwtk-users@ex.tis.com Tue Jul 25 13:10 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA19123 Tue, 25 Jul 2000 13:10:23 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA15393; Tue, 25 Jul 2000 10:18:19 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 25 Jul 2000 08:37:43 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA13666 for fwtk-users-outgoing; Tue, 25 Jul 2000 08:37:13 -0700 (PDT) Message-ID: From: Malcolm Tester To: Dan and Karen Ellrick , Joseph S D Yao Cc: fwtk-users@lists.nai.com Subject: RE: "Newbie tries to make toolkit - fails", Part 2 Date: Tue, 25 Jul 2000 09:47:05 -0600 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 2601 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, To answer your question below, I asked the Postifx users group about it. Here's the reply from Wietse himself: > Postfix has been in use in Japan from the days it was in alpha test > several years ago. If there was a problem with Japanese characters > people would be screaming all the time. > > Wietse So, to answer this question you posted: > Sendmail 8.10.0 is even worse - I found a place in the .../sendmail/Build > file to specify a directory for include files, but I still get some errors > about the very files that are in that directory, as if the various sendmail > source files that include them are overriding the directory I gave it and > specifying paths directly or something. Sendmail is huge (fwtk isn't a > shrimp, either!) - I can't go looking through every source file to learn > what's going on with each include reference that bombs (at least not unless > I have a whole lot more time on my hands). There has to be a simpler > solution... right? The answer is yes. Postfix :) I spent 3 weeks on Sendmail 8.10.3 trying to get it to work properly before giving up. I spent 2 hours on Postfix. If you are dead set on using Sendmail, then go to www.sendmail.org and subscribe to a mailing list there. You'll be more likely to find someone who can help you configure the Sendmail software itself. As far as compiling the fwtk, I can compile the base 2.1 package (meaning no patches) and only needing to modify the ftp daemon command a bit to work with gate-ftp properly. And I believe I had problems getting gate-ftp to compile properly at all. Otherwise, everything compiled nicely using gcc. (I've used gcc 2.7*, 2.8*, and 2.95* successfully with it) Wish I could help more, but I don't use RedHat currently. Regards, Malcolm > -----Original Message----- > From: Dan and Karen Ellrick [mailto:ellrick@hiroshima-cdas.or.jp] > Sent: Friday, July 21, 2000 7:11 PM > To: Joseph S D Yao > Cc: fwtk-users@lists.nai.com > Subject: RE: "Newbie tries to make toolkit - fails", Part 2 > Thank you for all the comments about postfix, but when I > mentioned it to my > sysadmin, he pointed out that we need to have a mail > transport program that > won't mess up the Japanese multi-byte characters that could show up in > subject lines, body of messages, and attached file names. He > knows that > sendmail works - postfix, qmail, etc. have possibly never > been tested in > that regard. So we'll stick with sendmail. I tried the From owner-fwtk-users@ex.tis.com Wed Jul 26 02:53 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id CAA21508 Wed, 26 Jul 2000 02:53:09 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id AAA20009; Wed, 26 Jul 2000 00:01:07 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 25 Jul 2000 22:05:35 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id WAA18960 for fwtk-users-outgoing; Tue, 25 Jul 2000 22:05:24 -0700 (PDT) Message-Id: <200007260504.WAA12829@relay.nai.com> Date: Wed, 26 Jul 2000 13:5:21 +0800 From: wen Reply-To: wen@hisense.qd.sd.cn To: "fwtk-users@ex.tis.com" Subject: ipbind only for http-gw X-mailer: FoxMail 3.0 beta 2 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="GB2312" Content-Length: 353 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi: I have patched ipbind for fwtk and try to config. but I find ipbind is only for http-gw. is it true? if reply is yes,how to resolving problem that setup ftpserver in the DMZ? please give some advice. thanks wen From owner-fwtk-users@ex.tis.com Wed Jul 26 07:29 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA22213 Wed, 26 Jul 2000 07:29:09 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id EAA22885; Wed, 26 Jul 2000 04:35:42 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 26 Jul 2000 02:51:35 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id CAA21283 for fwtk-users-outgoing; Wed, 26 Jul 2000 02:51:14 -0700 (PDT) Message-ID: <397EB46F.747A2FB6@jamedia.com> Date: Wed, 26 Jul 2000 05:50:39 -0400 From: Scott McEachern X-Mailer: Mozilla 4.73 [en] (X11; U; FreeBSD 4.0-RELEASE i386) X-Accept-Language: en MIME-Version: 1.0 To: wen@hisense.qd.sd.cn CC: "fwtk-users@ex.tis.com" Subject: Re: ipbind only for http-gw References: <200007260504.WAA12829@relay.nai.com> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1195 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] wen wrote: > hi: > > I have patched ipbind for fwtk and try to config. but I find ipbind is only for http-gw. is it true? if reply is yes,how to resolving problem that setup ftpserver in the DMZ? please give some advice. > Ipbind is not just for http-gw, but for most of the *-gw's. Take a look at the README that comes with ipbind, it explains what files have been changed. You need to create a rule that plugs the ftp-gw from one host directly to the ftp server. You will need to patch ftp-gw for this. I have something similar set up: ftp-gw: permit-hosts 111.222.333.* -log { retr stor (etc) } -plug-to 192.168.0.4 This allows any hosts on the 111.222.333 network to connect to your ftp server (192.168.0.4). This rule allows a specific machine on my internal net to hit a specific site on the Internet: ftp -gw: permit-hosts 192.168.0.55 -log { retr stor } -plug-to 111.222.333.4 -- R. Scott McEachern, Network Administrator J&A Media Services, Inc. 300 John St., Suite 500, Thornhill, ON, CA L3T 5W4 tel:905-881-6902 fax:905-881-6945 From owner-fwtk-users@ex.tis.com Wed Jul 26 07:29 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA22214 Wed, 26 Jul 2000 07:29:09 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id EAA22891; Wed, 26 Jul 2000 04:36:05 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 26 Jul 2000 02:57:08 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id CAA21354 for fwtk-users-outgoing; Wed, 26 Jul 2000 02:56:47 -0700 (PDT) Message-ID: <397EB5BC.16156A4B@jamedia.com> Date: Wed, 26 Jul 2000 05:56:12 -0400 From: Scott McEachern X-Mailer: Mozilla 4.73 [en] (X11; U; FreeBSD 4.0-RELEASE i386) X-Accept-Language: en MIME-Version: 1.0 To: wen@hisense.qd.sd.cn CC: "fwtk-users@ex.tis.com" Subject: Re: ipbind problem References: <200007250518.WAA28299@relay.nai.com> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 997 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] wen wrote: > hi: > I have configed ipbind rule in my fwtk's netperm-table file and clients from internet can broswer my webserver in DMZ. but they only browser my main page, not go next page. I check ipbind and fwtk soure code, find no error. but fwtk pached ipbind actually filter my webpage's path. do you have some advice to do with this problem? > That's pretty strange. I don't know if this will have anything to do with your problem, but have you applied the javascript quoting bug patch? My http-gw has two patches: ipbind, and the javascript one, and it works fine. Ipbind has nothing to do with filtering. It only allows that a service listen to a specific NIC instead of all NICs. -- R. Scott McEachern, Network Administrator J&A Media Services, Inc. 300 John St., Suite 500, Thornhill, ON, CA L3T 5W4 tel:905-881-6902 fax:905-881-6945 From owner-fwtk-users@ex.tis.com Wed Jul 26 12:52 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA23575 Wed, 26 Jul 2000 12:52:45 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA26057; Wed, 26 Jul 2000 09:59:35 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 26 Jul 2000 07:32:06 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA24754 for fwtk-users-outgoing; Wed, 26 Jul 2000 07:31:56 -0700 (PDT) X-Authentication-Warning: spider.usrconsult.be: mail set sender to using -f Message-ID: <397EEE44.D578A764@peaktime.be> Date: Wed, 26 Jul 2000 15:57:24 +0200 From: Michel Bardiaux Organization: Peaktime Belgium S.A. X-Mailer: Mozilla 4.73 [en] (WinNT; I) X-Accept-Language: en,fr MIME-Version: 1.0 To: "fwtk-users@lists.nai.com" Subject: Re: scan host installed fwtk References: <200007200516.NAA02056@server.qdhaixin.com.cn> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1339 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] wen wrote: > | internet > | > | > -------------------------- > system box > > -------------------------- > | > | > | intranet > > in my system box, I have installed fwtk2.1 and redhat6.1. > > now by portscan tool I scan system box from internet and find some port which is opened ,for example,21,23,80,513,etc. when someone scan my system box, in order to make him not to find opened port how to do? please give me some advice. > > thanks > > wen > You have to specify in netperm-table that only addresses on your intranet are allowed access to the proxies. I do that with netacl, but maybe there are other ways? Beside that minimum, you may take a 'belt-and-suspenders' approach, and configure your hosts.allow and hosts.deny files (see "man 5 hosts_access"), and install ipfwadm or ipchains too. -- Michel Bardiaux Peaktime Belgium S.A. Rue Margot, 37 B-1457 Nil St Vincent Tel : +32 10 65.44.15 Fax : +32 10 65.44.10 From owner-fwtk-users@ex.tis.com Wed Jul 26 22:24 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id WAA25019 Wed, 26 Jul 2000 22:24:14 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id TAA29696; Wed, 26 Jul 2000 19:31:51 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 26 Jul 2000 17:47:32 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id RAA28767 for fwtk-users-outgoing; Wed, 26 Jul 2000 17:47:21 -0700 (PDT) Message-ID: From: "Ryan, Martin" To: fwtk-users@ex.tis.com Subject: Slightly off topic but very useful for Solaris based FWTK impleme ntations Date: Thu, 27 Jul 2000 10:46:52 +1000 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 788 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello all, Excuse me if this is common knowledge but a colleague has brought to my attention the efforts of Xerox and the YASSP team to make Solaris Hardening scripts to simplify the modifications needed to implement good host security. From the home page; "This is a short "how to", dedicated to people having to deal with host security under Solaris 2.6, 2. 7 and Solaris 8. The goal is to install Solaris and have a good host security without having to spend hours in modification" The benefits to those of you who have chosen Solaris for your bastion host / FWTK firewall are obvious. The reference is; http://yassp.parc.xerox.com/ Cheers, Martin From owner-fwtk-users@ex.tis.com Thu Jul 27 03:29 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id DAA25822 Thu, 27 Jul 2000 03:29:02 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id AAA01936; Thu, 27 Jul 2000 00:34:52 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 26 Jul 2000 22:57:01 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id WAA00979 for fwtk-users-outgoing; Wed, 26 Jul 2000 22:56:50 -0700 (PDT) Message-ID: <20000727055626.4462.qmail@nw175.netaddress.usa.net> Date: 27 Jul 00 09:56:26 MSD From: Maks H To: fwtk-users@ex.tis.com Subject: x-gw: Connection reset by peer ?????????? X-Mailer: USANET web-mailer (34FM1.5A.01A) Mime-Version: 1.0 Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by relay2.nai.com id WAA00976 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=US-ASCII Content-Length: 1987 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Help me pls!!!! I use OS Linux Slackware, version 2.2.13, and as a mather of fact, when I use TIS FWTK, version 2.1, I have following problemm. All source codes was compiled well and TIS starts without any problemm too, but x-gw cannot work as long as I need. When x-gw started, it works well and forks child-processes for different windows`s application, but when parent-process cancelled child-processes still work and become zomby-processes. At that time all windows of applications from remote server are closed for all users who use servers programms (X-WinPro, Exceed, ExtraX, ect.). And tn-gw still works well, and I can start x-gw from this programm. Here is my file /usr/locall/ect/netperm-table: tn-gw: timeout 360000 tn-gw: permit-hosts 2.2.2.10 -auth -passok -xok x-gw: display dimension:10.0 x-gw: : timeout 360000 tn-gw: xforwarder /usr/local/etc/x-gw x-gw wrires in file /var/log/messages following lines: My application’s server – 1.1.1.10 User’s computer – 2.2.2.10 firewall: x-gw[1581]: started from 2.2.2.10 by USER to display=2.2.2.10:0.0 firewall: x-gw[1585]: permit host=1.1.1.10 x-connection firewall: x-gw[1586]: permit host=1.1.1.10 x-connection (The application opens two windows.) firewall: x-gw[1586]: child exit duration =8016 seconds firewall: x-gw[1586]: child exit duration =1434 seconds firewall: x-gw[1586]: read fd:134521304: Connection reset by peer firewall: x-gw[1586]: child exit duration =0 seconds After that x-gw parent-process canselles and all windows suspendes. The line «read fd:134521304: Connection reset by peet» is never changed. Digit 134521304 is never changed too. Pls help me if it is possible! Sincerelly yours Maka Garuseff. ____________________________________________________________________ Get free email and a permanent address at http://www.netaddress.com/?N=1 From owner-fwtk-users@ex.tis.com Thu Jul 27 10:54 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA03572 Thu, 27 Jul 2000 10:54:09 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA04751; Thu, 27 Jul 2000 08:00:57 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 27 Jul 2000 06:15:10 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA03836 for fwtk-users-outgoing; Thu, 27 Jul 2000 06:14:59 -0700 (PDT) From: "TJ O Connor" To: "Fwtk Users" Date: Thu, 27 Jul 2000 14:15:22 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Importance: Normal Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 505 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, Is it wise to have both a packet filtering firewall and a proxy server protecting your system. cheers TJ - -- _ T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Thu Jul 27 13:57 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA04087 Thu, 27 Jul 2000 13:57:06 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA07252; Thu, 27 Jul 2000 11:04:44 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 27 Jul 2000 08:54:55 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA05245 for fwtk-users-outgoing; Thu, 27 Jul 2000 08:54:44 -0700 (PDT) From: "TJ O Connor" To: "Fwtk Users" Date: Thu, 27 Jul 2000 16:55:22 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Importance: Normal Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1528 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi all, I am having a problem with setting up and tesing my network. I set up my network within our LAN here at work. 192.168.1.38(eth0)__________ 192.168.2.1(eth1) _/\__/\_ \ | | / _______________ | | \| Firewall |/ | | / Outside \--------| System |------------| Workstation | | Lan | | | 192.168.2.2 | \_ _ _ _/ |__________| |_______________| \/ \/ \/ Where the firewall sits on the Linux box, is where all my smtp,www,and dns will be controlled. The pc (192.168.2.2) can ping the internal address(192.168.2.1) >From the firewall i can ping an Internet System. Now I come to a problem. When i turn off ip_forwarding i can't ping the outside address of the firewall(192.168.1.38) However when i turn on ip_forwarding i can't ping the outside address or anywhere on the internet from my 192.168.2.2 This has me baffled for days now. Is it that I have my network setup wrong or is it a fault in the documentation? I need help cheers TJ. - -- _ T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Thu Jul 27 15:10 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA04339 Thu, 27 Jul 2000 15:10:41 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA08277; Thu, 27 Jul 2000 12:17:27 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 27 Jul 2000 10:43:32 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA06935 for fwtk-users-outgoing; Thu, 27 Jul 2000 10:43:11 -0700 (PDT) Date: Thu, 27 Jul 2000 13:41:44 -0400 From: Joseph S D Yao To: TJ O Connor Cc: Fwtk Users Subject: Re: your mail Message-Id: <20000727134144.V2277@washington.cospo.osis.gov> Mail-Followup-To: TJ O Connor , Fwtk Users References: Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from toconnor@comnitel.com on Thu, Jul 27, 2000 at 02:15:22PM +0100 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 846 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Thu, Jul 27, 2000 at 02:15:22PM +0100, TJ O Connor wrote: > Is it wise to have both a packet filtering firewall and a proxy > server protecting your system. It depends on your needs, and what you mean by the above. I hate the thought of allowing IP filters on the same bastion host as the proxies. They just open holes. But many people feel the need to do so. It is best to have filtering routers in front of and behind the proxying firewall, to only allow "proper" use. IMHO. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Thu Jul 27 17:28 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA04744 Thu, 27 Jul 2000 17:28:19 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA10290; Thu, 27 Jul 2000 14:35:35 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 27 Jul 2000 13:01:26 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA08993 for fwtk-users-outgoing; Thu, 27 Jul 2000 13:01:06 -0700 (PDT) Date: Thu, 27 Jul 2000 15:59:57 -0400 From: Joseph S D Yao To: Karen Ellrick Cc: fwtk-users@lists.nai.com Subject: Re: "Newbie tries to make toolkit - fails", Part 2 Message-Id: <20000727155957.J2277@washington.cospo.osis.gov> Mail-Followup-To: Karen Ellrick , fwtk-users@lists.nai.com References: <20000720194610.C21317@washington.cospo.osis.gov> <20000724193845.D14337@washington.cospo.osis.gov> <004201bff5e4$6e02f760$9001a8c0@sctech.co.jp> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <004201bff5e4$6e02f760$9001a8c0@sctech.co.jp>; from k-ellrick@sctech.co.jp on Tue, Jul 25, 2000 at 12:00:02PM +0900 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1930 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Looks like I was right about the Red Hat mailing lists being re-organized ... ----- Forwarded message from Kambiz Aghaiepour ----- Date: Wed, 26 Jul 2000 09:58:33 -0400 From: Kambiz Aghaiepour Organization: Red Hat, Inc. Subject: [linux-xxxxxx] IMPORTANT Changes to Mailing List Attention all List Members: We are in the process of migrating all Red Hat lists from the current list manager software/server running qmail/Smartlist to a new server running postfix and GNU Mailman (*). Within the next week you will receive more information about this migration including information on how to access your membership, including subscribe/unsubscribe information and instructions on how to set your preferences for your membership on the list. The preferences include setting/unsetting digest mode, temporarily disabling delivery, and the option of receiving your own posts. This migration will not only address performace issues that have arisen due to the number of lists/members on Red Hat lists, but also highly improve ease of use for list members. Your patience is greatly appreciated. Thank you for your attention Kambiz Aghaiepour (*) For information on Mailman, see http://www.list.org/ -- \o__O o Kambiz Aghaiepour, RHCE - Phone: (919) 524-7423 o o \_ /|\ -= Red Hat, Inc. =- |\| Pager: (800) 946-4646 //\ //\ |\ |\ -=-=-=-=-=-=-=-=-=-=-=- | | Pager Pin #: 1412622 // // / / |/ mailto:kambiz@redhat.com | http://www.redhat.com |\ || ... ----- End forwarded message ----- -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Fri Jul 28 15:56 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA07889 Fri, 28 Jul 2000 15:56:25 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA17453; Fri, 28 Jul 2000 13:03:41 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 28 Jul 2000 10:36:42 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA15921 for fwtk-users-outgoing; Fri, 28 Jul 2000 10:36:31 -0700 (PDT) Message-ID: <3551A31796ADCF11929400A0247B20CD0D8008F7@exchnj02.sbi.com> From: "Barreira, Fernando" To: "'fwtk-users@tis.com'" Subject: netperm-table issue Date: Fri, 28 Jul 2000 10:44:50 -0400 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 441 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi there, i am having trouble using the ftp-gw, from some machines it's ok but others only works if i use the actual ip address on the ftp site. if i comment the folowing then it works, #tn-gw: directory /proxy/black_hole #tn-gw: userid tis-proxy #tn-gw: groupid other what is the use of these rules? thanks. From owner-fwtk-users@ex.tis.com Sat Jul 29 12:42 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA10182 Sat, 29 Jul 2000 12:42:22 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA24071; Sat, 29 Jul 2000 09:49:31 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sat, 29 Jul 2000 08:02:50 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA23104 for fwtk-users-outgoing; Sat, 29 Jul 2000 08:02:29 -0700 (PDT) Date: Sat, 29 Jul 2000 11:00:52 -0400 (EDT) From: Ted Keller To: "Barreira, Fernando" cc: "'fwtk-users@tis.com'" Subject: Re: netperm-table issue In-Reply-To: <3551A31796ADCF11929400A0247B20CD0D8008F7@exchnj02.sbi.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1554 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Fernando, These command control the tn-gw proxy - not the ftp-gw proxy. These commands do the following..... > #tn-gw: directory /proxy/black_hole Force the tn-gw to chroot to /proxy/black_hole. This helps protect you from any malichious activities agains tn-gw. > #tn-gw: userid tis-proxy Force the tn-gw to change its user-id to tis-proxy from root. This assumes that the account tis-proxy has no elevated permissions. > #tn-gw: groupid other Froce the tn-gw to change its group-id to other from - probably sys. Again - assuems that the group has no elevated permissions. This should not be the cause of your problem. I wonder, however, if you are seeing any configuration errors in otherparts of your netperm-table. Purhaps you are seeing some line wrap-around problems - especailly if the ftp-gw entries are just before or just after these tn-gw parameters.... ted keller On Fri, 28 Jul 2000, Barreira, Fernando wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > hi there, > > i am having trouble using the ftp-gw, from some machines it's ok but others > only works if i use the actual ip address on the ftp site. > if i comment the folowing then it works, > #tn-gw: directory /proxy/black_hole > #tn-gw: userid tis-proxy > #tn-gw: groupid other > > what is the use of these rules? > > thanks. > From owner-fwtk-users@ex.tis.com Sat Jul 29 16:51 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA10625 Sat, 29 Jul 2000 16:51:58 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA26144; Sat, 29 Jul 2000 13:58:58 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sat, 29 Jul 2000 11:38:14 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA24932 for fwtk-users-outgoing; Sat, 29 Jul 2000 11:37:53 -0700 (PDT) Message-Id: <4.2.2.20000729142209.00b2cb70@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Sat, 29 Jul 2000 14:28:32 -0400 To: "Barreira, Fernando" , "'fwtk-users@tis.com'" From: Rick Murphy Subject: Re: netperm-table issue In-Reply-To: <3551A31796ADCF11929400A0247B20CD0D8008F7@exchnj02.sbi.com> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 684 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 10:44 AM 7/28/00 -0400, Barreira, Fernando wrote: >i am having trouble using the ftp-gw, from some machines it's ok but others >only works if i use the actual ip address on the ftp site. >if i comment the folowing then it works, >#tn-gw: directory /proxy/black_hole >#tn-gw: userid tis-proxy >#tn-gw: groupid other If enabling the 'directory' line breaks name resolution (where you must connect using the IP address instead of the host name) you've got something missing in the /proxy/black_hole directory that your resolver uses. -Rick From owner-fwtk-users@ex.tis.com Mon Jul 31 14:23 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA16401 Mon, 31 Jul 2000 14:23:41 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA06454; Mon, 31 Jul 2000 11:31:33 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 31 Jul 2000 08:59:36 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA05306 for fwtk-users-outgoing; Mon, 31 Jul 2000 08:59:25 -0700 (PDT) Message-ID: <3985A208.C80A1E@sellbuysector.com> Date: Mon, 31 Jul 2000 16:58:00 +0100 From: Masih Tavassoli Organization: Sellbuy Sector X-Mailer: Mozilla 4.6 [en-gb]C-CCK-MCD NetscapeOnline.co.uk (Win98; I) X-Accept-Language: en-GB,en MIME-Version: 1.0 To: fwtk-users@lists.nai.com Subject: plug-gw and http access log Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 766 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi all, I recently installed plug-gw to relay all the http requests coming from the internet to be forwarded to our webserver which exists on our private network. It is all working well and good, except in the access_log of apache everything seems to be coming from the firewall. I know this is correct as far as our webserver is concerned but the knock on effect is that I loose my statistical information. Is there anyway to get around this? I guess in theory you could merge the /var/adm/messages log with apache access log to reconstruct the lost information. Any help is appreciated. Kind regards, Masih -- Masih Tavassoli From owner-fwtk-users@ex.tis.com Mon Jul 31 18:38 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA17147 Mon, 31 Jul 2000 18:38:11 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA15926; Mon, 31 Jul 2000 15:45:36 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 31 Jul 2000 14:10:28 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA14776 for fwtk-users-outgoing; Mon, 31 Jul 2000 14:10:07 -0700 (PDT) Date: Mon, 31 Jul 2000 17:09:32 -0400 From: Joseph S D Yao To: Leandro Gelasi Cc: "fwtk-users@ex.tis.com" Subject: Re: About using postfix on the firewall... Message-Id: <20000731170932.U20780@washington.cospo.osis.gov> Mail-Followup-To: Leandro Gelasi , "fwtk-users@ex.tis.com" References: Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from gelasi@interfree.it on Sat, Jul 22, 2000 at 08:25:06PM +0200 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1617 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Sat, Jul 22, 2000 at 08:25:06PM +0200, Leandro Gelasi wrote: ... > Reading list's archives, I found that postfix can be used in replacement > of smap/smapd daemon on the bastion host. > Is this correct? It will simplify my life in installing the firewall > system on the bastion host, because I am already using postfix on our > servers. > > I am going to run split dns (external dns on the bastion host, internal > over one of our servers), will postfix have any problem to send email from > outside to internal network? The split-dns FAQ only talks about Sendmail > configuration . The two are totally separate questions, even though they have a lot to do with each other. Split DNS is, of course, absolutely essential to any FWTK installation. Properly implemented, of course. There is no "sendmail configuration" in DNS. Mail exchange records apply to all properly-implemented mail transfer agents. Postfix is another question. There are those who believe implicitly in its author, therefore it must be bug-free. I do not agree. I would continue to use smap/smapd as the proxy, and either sendmail or postfix as the mail transfer agent. At this point, there are good arguments for either of those in that position. But NOT as a firewall proxy. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Mon Jul 31 19:36 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA17283 Mon, 31 Jul 2000 19:36:10 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA16901; Mon, 31 Jul 2000 16:43:47 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 31 Jul 2000 15:17:55 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA15447 for fwtk-users-outgoing; Mon, 31 Jul 2000 15:17:34 -0700 (PDT) Date: Mon, 31 Jul 2000 18:16:58 -0400 From: Joseph S D Yao To: wen Cc: "fwtk-users@ex.tis.com" Subject: Re: fwtk and DNS Message-Id: <20000731181658.A20780@washington.cospo.osis.gov> Mail-Followup-To: wen , "fwtk-users@ex.tis.com" References: <200007240837.BAA03717@relay.nai.com> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <200007240837.BAA03717@relay.nai.com>; from wen@hisense.qd.sd.cn on Mon, Jul 24, 2000 at 04:38:42PM +0800 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 2450 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Mon, Jul 24, 2000 at 04:38:42PM +0800, wen wrote: > is it sure that both fwtk and DNS server must be installed a host? if the answer is yes and I wish to setup DNS server behind the box intalled fwtk,what shoud I do? When setting up BIND, be sure to use the latest version. Right now, that is 8.2.2-P5, but "soon" it will be 8.2.3 [use it] or 9.0.0 [wait until this settles down]. If you want to resolve DNS from the Internet - and you almost certainly do - you must have a DNS server running as your proxy on your firewall bastion host. If that is all it is, ISTM it will not need to have any zones defined. The bastion host's resolver, however, should be your internal name server. The internal name server should be authoritative for all zones inside the firewall, both forward and reverse. If the internal domain is the same as the external domain, then the internal zones must duplicate all of the information in the external zones. The internal name server must forward all queries that it cannot resolve to the firewall bastion host. In the special case where your internal name server is also the bastion host, you must set it to accept queries only from the inside, and not from the outside. It will not have to forward external queries: it can make them itself. This is not the best configuration. In the special case where your bastion host name server is your external name server, it should have ONLY external addresses in it. As I said before, if your external domain and your internal domain are the same, then you must duplicate information in the two servers' zones. It is possible to have the firewall bastion host be both internal and external name server. This is by far NOT the best configuration. You would have to run TWO instances of 'named'. You would have to make sure that they run from two different configuration files, that they use two different sockets to communicate with 'ndc', and that they logged to different files [preferably]. Many people these days are using for their name servers machines that are not used for any other purpose. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Mon Jul 31 21:54 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id VAA17497 Mon, 31 Jul 2000 21:54:18 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id TAA08111; Mon, 31 Jul 2000 19:01:39 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 31 Jul 2000 16:53:47 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA17081 for fwtk-users-outgoing; Mon, 31 Jul 2000 16:53:17 -0700 (PDT) Message-ID: From: Malcolm Tester To: Joseph S D Yao , Leandro Gelasi Cc: fwtk-users@ex.tis.com Subject: RE: About using postfix on the firewall... Date: Mon, 31 Jul 2000 18:01:46 -0600 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="windows-1252" Content-Length: 4191 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I have to agree with Joseph here. You need split DNS, regardless of the MTA you use. The only interaction between DNS and the MTA is where the MX record is concerned. As long as it is properly configured, it doesn't matter. While I am a big supporter of Wietse, I also agree with Joseph that no software is bug-free. No one is perfect, least of all, us humans. I'm quite sure Postfix has bugs that can be exploited. I just prefer it over sendmail because (personally) I feel it has less bugs. To be honest, I use Sendmail too, on the internal side of my network, because I prefer what it can offer in other areas than Postfix, where security is not so much a concern. Can you use Postfix without smap/smapd? Yes. You can run Sendmail without it too. Is it recommended? No. I don't think anyone would recommend doing that explicitly. You might run less of a chance of being bitten than with Sendmail, but for the optimum security, use smap/smapd. That's what they are there for. If you decide you can get away without doing so, then fine. Your choice. But Postfix is not intended to be a replacement for smap/smapd. It's a replacement for Sendmail. The configuration of the fwtk is the same, regardless of what MTA you use. If you need help getting postfix to talk to the internal network, you can email me offline and I'll be happy to help. Malcolm W. Tester II Systems Administrator Cambric Corporation 110 West Business Park Drive Draper, Utah 84020 http://www.cambric.com This message is intended only for the use of the individual or entity to whom it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please delete it from your system and notify the sender identified above by e-mail. > -----Original Message----- > From: Joseph S D Yao [mailto:jsdy@cospo.osis.gov] > Sent: Monday, July 31, 2000 3:10 PM > To: Leandro Gelasi > Cc: fwtk-users@ex.tis.com > Subject: Re: About using postfix on the firewall... > > > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > On Sat, Jul 22, 2000 at 08:25:06PM +0200, Leandro Gelasi wrote: > ... > > Reading list's archives, I found that postfix can be used > in replacement > > of smap/smapd daemon on the bastion host. > > Is this correct? It will simplify my life in installing the firewall > > system on the bastion host, because I am already using > postfix on our > > servers. > > > > I am going to run split dns (external dns on the bastion > host, internal > > over one of our servers), will postfix have any problem to > send email from > > outside to internal network? The split-dns FAQ only talks > about Sendmail > > configuration . > > The two are totally separate questions, even though they have a lot to > do with each other. > > Split DNS is, of course, absolutely essential to any FWTK > installation. > Properly implemented, of course. There is no "sendmail configuration" > in DNS. Mail exchange records apply to all properly-implemented mail > transfer agents. > > Postfix is another question. There are those who believe > implicitly in > its author, therefore it must be bug-free. I do not agree. I would > continue to use smap/smapd as the proxy, and either sendmail > or postfix > as the mail transfer agent. At this point, there are good arguments > for either of those in that position. But NOT as a firewall proxy. > > -- > Joe Yao jsdy@cospo.osis.gov - > Joseph S. D. Yao > COSPO/OSIS Computer Support EMT-B > -------------------------------------------------------------- > --------- > This message is not an official statement of COSPO policies. >