From elevyabe@cisco.com Mon Nov 2 02:27:56 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EFD1A28C1BE for ; Mon, 2 Nov 2009 02:27:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YPR-IfyIiBE7 for ; Mon, 2 Nov 2009 02:27:55 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id 3E43C28C193 for ; Mon, 2 Nov 2009 02:27:55 -0800 (PST) Authentication-Results: ams-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Aj0AAP9C7kqQ/uCWe2dsb2JhbACCIzAlmFsBAQsLJAanPJZLhDkE X-IronPort-AV: E=Sophos;i="4.44,665,1249257600"; d="scan'208,217";a="53355703" Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 02 Nov 2009 10:28:13 +0000 Received: from xbh-ams-101.cisco.com (xbh-ams-101.cisco.com [144.254.74.71]) by ams-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA2ASDEF019376; Mon, 2 Nov 2009 10:28:13 GMT Received: from xmb-ams-105.cisco.com ([144.254.74.80]) by xbh-ams-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 2 Nov 2009 11:28:13 +0100 Received: from [144.254.53.124] ([144.254.53.124]) by xmb-ams-105.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 2 Nov 2009 11:28:13 +0100 Message-ID: <4AEEB43D.8010107@cisco.com> Date: Mon, 02 Nov 2009 11:28:13 +0100 From: Eric Levy-Abegnoli User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Christian Vogt References: <871D15B0-6B49-49F4-AD94-88AC7523044C@ericsson.com> <200910231045135108459@huaweisymantec.com> <5FDC3979-13E4-480A-A1F6-334B95E2ED66@ericsson.com> <200910291035478406365@huaweisymantec.com> <4540D1DA-94A6-4DC9-B5B9-E9C0E32D127B@ericsson.com> <4AE93B2C.7060906@it.uc3m.es> <633E8B21-3B7C-4E17-B661-2E56AA1DB635@ericsson.com> In-Reply-To: <633E8B21-3B7C-4E17-B661-2E56AA1DB635@ericsson.com> Content-Type: multipart/alternative; boundary="------------050600080404000908000404" X-OriginalArrivalTime: 02 Nov 2009 10:28:13.0328 (UTC) FILETIME=[2E9E6900:01CA5BA7] Cc: SAVI Mailing List Subject: Re: [savi] A few comments on draft-vogt-savi-framework X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2009 10:27:57 -0000 This is a multi-part message in MIME format. --------------050600080404000908000404 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Christian, Christian Vogt a écrit : > On Oct 28, 2009, marcelo bagnulo braun wrote: > > >>> For this case, we need a prioritization of which address assignment >>> methods take precedence over which other address assignment methods. >>> And you are right that the definition of this prioritization will >>> require care. >>> >>> >> yes, moreover, we need to figure if it is enough with a prioritazation >> or we need to change the mechanisms in order to interact properly. >> As i >> stated earlier (and eric noted before me), we certainly need to update >> send savi to properly interact with the slaac savi (at least, haven't >> doen the analysis for dhcp savi yet) >> > > Correct; the prioritization may affect the protocol specifications > (SLAAC, DHCP, SEND) just as well as it affects the framework document. > > My suggestion -- as a working group member, not as a chair -- is that > the framework document should talk about the prioritization > conceptually, whereas the protocol specifications need to include the > details that implement the prioritization. Thoughts? > > I don't see much value in a document that describes things at the "conceptual" level without looking at the details of address assignament methods. Its going to be very confusing if each "protocol" document describes the prioritisation of binding entries from it's own point of view. So far, I see s 1)SLACC 2)DHCP 3)CGA 4)MANUAL (static binding) 5) LOCAL (L3 addresses configured on the L2 device). And then there are combinations. For instance CGA is relatively orthogonal to the protocol (SLACC, MANUAL, DHCP, etc...). I thought the very purpose of the framenwork document was exactly to describe those interactions, which include prioritzation, but also protocol interactions. This draft addresses none of this. Does that mean we need a document that describe the interactions? That could be draft-levy-abegnoli-savi-plbt-01 . I had given up on it, hoping the framework document would cover the same topic. So far, it does not. Eric > - Christian > > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > > --------------050600080404000908000404 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit 
Christian,
Christian Vogt a écrit : 
On Oct 28, 2009, marcelo bagnulo braun wrote:

  
For this case, we need a prioritization of which address assignment
methods take precedence over which other address assignment methods.
And you are right that the definition of this prioritization will
require care.

      
yes, moreover, we need to figure if it is enough with a prioritazation
or we need to change the mechanisms in order to interact properly.  
As i
stated earlier (and eric noted before me), we certainly need to update
send savi to properly interact with the slaac savi (at least, haven't
doen the analysis for dhcp savi yet)
    

Correct; the prioritization may affect the protocol specifications
(SLAAC, DHCP, SEND) just as well as it affects the framework document.

My suggestion -- as a working group member, not as a chair -- is that
the framework document should talk about the prioritization
conceptually, whereas the protocol specifications need to include the
details that implement the prioritization.  Thoughts?
I don't see much value in a document that describes things at the "conceptual" level without looking at the details of address assignament methods.
Its going to be very confusing if each "protocol" document describes the prioritisation of binding entries from it's own point of view.
So far, I see s 1)SLACC 2)DHCP 3)CGA 4)MANUAL (static binding) 5) LOCAL (L3 addresses configured on the L2 device). And then there are combinations. For instance CGA is relatively orthogonal to the protocol (SLACC, MANUAL, DHCP, etc...).
I thought the very purpose of the framenwork document was exactly to describe those interactions, which include prioritzation, but also protocol interactions. This draft addresses none of this. Does that mean we need a document that describe the interactions?  That could be draft-levy-abegnoli-savi-plbt-01. I had given up on it, hoping the framework document would cover the same topic. So far, it does not.
Eric






- Christian


_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi

--------------050600080404000908000404-- From elevyabe@cisco.com Mon Nov 2 02:41:41 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A3F3428C1E2 for ; Mon, 2 Nov 2009 02:41:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rd45NV2JQjCo for ; Mon, 2 Nov 2009 02:41:40 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id 7D81C28C1DC for ; Mon, 2 Nov 2009 02:41:39 -0800 (PST) Authentication-Results: ams-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkoAAING7kqQ/uCWe2dsb2JhbACCITKZAAEBCwskBqdXlk2EOQQ X-IronPort-AV: E=Sophos;i="4.44,666,1249257600"; d="scan'208,217";a="53358133" Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 02 Nov 2009 10:41:57 +0000 Received: from xbh-ams-102.cisco.com (xbh-ams-102.cisco.com [144.254.73.132]) by ams-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA2Afvad026196; Mon, 2 Nov 2009 10:41:58 GMT Received: from xmb-ams-105.cisco.com ([144.254.74.80]) by xbh-ams-102.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 2 Nov 2009 11:41:57 +0100 Received: from [144.254.53.124] ([144.254.53.124]) by xmb-ams-105.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 2 Nov 2009 11:41:57 +0100 Message-ID: <4AEEB775.5020103@cisco.com> Date: Mon, 02 Nov 2009 11:41:57 +0100 From: Eric Levy-Abegnoli User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Christian Vogt References: <871D15B0-6B49-49F4-AD94-88AC7523044C@ericsson.com> <200910231045135108459@huaweisymantec.com> <5FDC3979-13E4-480A-A1F6-334B95E2ED66@ericsson.com> <200910291035478406365@huaweisymantec.com><4540D1DA-94A6-4DC9-B5B9-E9C0E32D127B@ericsson.com> <4AE93B2C.7060906@it.uc3m.es> <210BBA32-43EB-49EC-B9BB-0C5B9AE7C4EA@ericsson.com> In-Reply-To: <210BBA32-43EB-49EC-B9BB-0C5B9AE7C4EA@ericsson.com> Content-Type: multipart/alternative; boundary="------------090000020001020507060207" X-OriginalArrivalTime: 02 Nov 2009 10:41:57.0381 (UTC) FILETIME=[19CAEB50:01CA5BA9] Cc: SAVI Mailing List , =?ISO-8859-1?Q?Alberto_Garc=EDa?= Subject: Re: [savi] A few comments on draft-vogt-savi-framework X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2009 10:41:42 -0000 This is a multi-part message in MIME format. --------------090000020001020507060207 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Christian, Christian Vogt a écrit : > Alberto - > > As a member of the working group, not as its chair: You are right > that co-existence scenarios need to be handled. But I'm not sure that > coexistence requires /special/ behavior. As long as the behavior > desired for coexistence scenarios does not preclude the behavior > desired for non-coexistence scenarios, I think coexistence should be > covered by the /regular/ behavior of the various SAVI protocol > specifications. That is, in the particular case of SLAAC/SEND co- > existence, I think we should strive for a SAVI SEND protocol that can > handle non-SEND-capable SAVI devices. > As we are centralizing the co-existence decisions in a "man-in-the-middle" savi-device, we can't just consider that the capability of the savi-device (SeND, not SeND) are it's sole problem. Which "looks" the case if the co-existence scenarios are described in the savi-SeND protocol specification. A savi device not SEND-capable breaks RFC3971. Like a bridge that would mess with L3 messages. And it has no way to know. Can we **really** specify that? There might be thousands of non-SeND capable nodes on the link, and just one signle pair of SeND nodes, and this SAVI-switch in the middle is completely messing with their "standard" behavior. Note that there **are** such deployments out there. And the deployments scenarios are exactly that (few SeND critical nodes, many non-SeND). So I think the description of this scenario, and associated warnings should show up either in all documents, or in a higher level doc( framework, or other). Eric > Does this make sense? > > - Christian > > > > On Oct 29, 2009, at 3:04, Alberto García wrote: > > >> My opinion is that priorization is not enough. >> I think we need to define "operation modes" (SEND-only, SLAAC-only, >> SEND-SLAAC-compatible...) and describe the state machine for each one. >> >> To support the idea of why we need a new state machine for SEND-SLAAC >> compatibility, i.e. for a domain in which both SEND hosts and non- >> SEND hosts >> coexist, just consider what a node should do (extending naturally the >> current FCFS and SEND proposals) if a SAVI device is in NO_BIND >> state, and a >> data packet (not DAD NSOL) is received, from a Validating port VP. >> In this >> case, the SEND SAVI device should send >> - 2 (unsecured) NSOL messages through Trusted ports (according to >> FCFS SAVI) >> - and a secured NUD NSOL message through the Validating Port >> (according to SEND SAVI >> And The state is moved to TENTATIVE. >> >> In the TENTATIVE state, the SAVI device should maybe wait long >> enough (a >> RetransTimer, which is the waiting time for NUD operation) for a >> secured NUD >> NADV even if an unsecured DAD NSOL is received from a trusted port >> in the >> meanwhile, to assure that SEND validated addresses have priority over >> non-SEND addresses. [Note that this may occur if a SEND host has one >> collision when performing DAD for an address, and it is not >> withdrawing the >> second address if an unsecured DAD NSOL is received for it, as RFC >> 3971 >> says]. >> Different states should be defined (VALID_SEND, VALID_NON_SEND), with >> different behavior when the valid_timeout expires. >> >> >> So I don't think this is just "ships in the night", but different >> modes >> should be defined to integrate all the possible combinations of >> address >> configuration mechanisms. Maybe one of these modes should be the >> default >> one, but the administrator could set the SAVI devices to the >> appropriate >> mode (well, they also have to define which ports are trusted or >> not...). >> >> Does this make sense? >> Regards, >> Alberto >> > > > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > > --------------090000020001020507060207 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit 
Christian,
Christian Vogt a écrit : 
Alberto -

As a member of the working group, not as its chair:  You are right  
that co-existence scenarios need to be handled.  But I'm not sure that  
coexistence requires /special/ behavior.  As long as the behavior  
desired for coexistence scenarios does not preclude the behavior  
desired for non-coexistence scenarios, I think coexistence should be  
covered by the /regular/ behavior of the various SAVI protocol  
specifications.  That is, in the particular case of SLAAC/SEND co- 
existence, I think we should strive for a SAVI SEND protocol that can  
handle non-SEND-capable SAVI devices.
As we are centralizing the co-existence decisions in a "man-in-the-middle" savi-device, we can't just consider that the capability of the savi-device (SeND, not SeND) are it's sole problem. Which "looks" the case if the co-existence scenarios are described in the savi-SeND protocol specification.
A savi device not SEND-capable breaks RFC3971. Like a bridge that would mess with L3 messages. And it has no way to know. Can we **really** specify that? There might be thousands of non-SeND capable nodes on the link, and just one signle pair of SeND nodes, and this SAVI-switch in the middle is completely messing with their "standard" behavior.  Note that there **are** such deployments out there. And the deployments scenarios are exactly that (few SeND critical nodes, many non-SeND).
So I think the description of this scenario, and associated warnings should show up either in all documents, or in a higher level doc( framework, or other).
Eric
Does this make sense?

- Christian



On Oct 29, 2009, at 3:04, Alberto García wrote:

  
My opinion is that priorization is not enough.
I think we need to define "operation modes" (SEND-only, SLAAC-only,
SEND-SLAAC-compatible...) and describe the state machine for each one.

To support the idea of why we need a new state machine for SEND-SLAAC
compatibility, i.e. for a domain in which both SEND hosts and non- 
SEND hosts
coexist, just consider what a node should do (extending naturally the
current FCFS and SEND proposals) if a SAVI device is in NO_BIND  
state, and a
data packet (not DAD NSOL) is received, from a Validating port VP.  
In this
case, the SEND SAVI device should send
	- 2 (unsecured) NSOL messages through Trusted ports (according to
FCFS SAVI)
	- and a secured NUD NSOL message through the Validating Port
(according to SEND SAVI
	And The state is moved to TENTATIVE.

In the TENTATIVE state, the SAVI device should maybe wait long  
enough (a
RetransTimer, which is the waiting time for NUD operation) for a  
secured NUD
NADV even if an unsecured DAD NSOL is received from a trusted port  
in the
meanwhile, to assure that SEND validated addresses have priority over
non-SEND addresses. [Note that this may occur if a SEND host has one
collision when performing DAD for an address, and it is not  
withdrawing the
second address if an unsecured DAD NSOL is received for it, as RFC  
3971
says].
Different states should be defined (VALID_SEND, VALID_NON_SEND), with
different behavior when the valid_timeout expires.


So I don't think this is just "ships in the night", but different  
modes
should be defined to integrate all the possible combinations of  
address
configuration mechanisms. Maybe one of these modes should be the  
default
one, but the administrator could set the SAVI devices to the  
appropriate
mode (well, they also have to define which ports are trusted or  
not...).

Does this make sense?
Regards,
Alberto
    



_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi

--------------090000020001020507060207-- From elevyabe@cisco.com Mon Nov 2 05:20:29 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 77EC63A6919 for ; Mon, 2 Nov 2009 05:20:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BwMi6HUB9npO for ; Mon, 2 Nov 2009 05:20:28 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id 58A663A6898 for ; Mon, 2 Nov 2009 05:20:24 -0800 (PST) Authentication-Results: ams-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Aj0AAANs7kqQ/uCWe2dsb2JhbACCIzCCIZZfAQELCyQGqD2HDAiPP4JDgR9XBIFiiXo X-IronPort-AV: E=Sophos;i="4.44,666,1249257600"; d="scan'208,217";a="53384058" Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 02 Nov 2009 13:20:42 +0000 Received: from xbh-ams-102.cisco.com (xbh-ams-102.cisco.com [144.254.73.132]) by ams-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA2DKg0H002225; Mon, 2 Nov 2009 13:20:42 GMT Received: from xmb-ams-105.cisco.com ([144.254.74.80]) by xbh-ams-102.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 2 Nov 2009 14:20:42 +0100 Received: from [144.254.53.124] ([144.254.53.124]) by xmb-ams-105.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 2 Nov 2009 14:20:41 +0100 Message-ID: <4AEEDCAD.1000800@cisco.com> Date: Mon, 02 Nov 2009 14:20:45 +0100 From: Eric Levy-Abegnoli User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Bi Jun References: <001D73EA1D454F0BAE91F989B597D73D@junbiVAIO> In-Reply-To: <001D73EA1D454F0BAE91F989B597D73D@junbiVAIO> Content-Type: multipart/alternative; boundary="------------050101030601000104090409" X-OriginalArrivalTime: 02 Nov 2009 13:20:41.0823 (UTC) FILETIME=[46CD6EF0:01CA5BBF] Cc: SAVI Mailing List Subject: Re: [savi] SAVI Solution for DHCPv4/v6 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2009 13:20:29 -0000 This is a multi-part message in MIME format. --------------050101030601000104090409 Content-Type: text/plain; charset=GB2312 Content-Transfer-Encoding: 8bit Jun Bi and all, I think the document is a reasonnably good shape. I had however a few substantial comments made offline, that I'd like to repeat the mailing list (note that they are all listed already in the doc as open issues, but the RA filtering) - Section 9.4: Router Advertisements have nothing to do with the SAVI charter. For that, there is draft-ietf-v6ops-ra-guard. So I don't think it belongs here or in the framework document. - Section 7 (and subsequent) I don't like the idea of creating a state "START" on the request, and I think in most cases, the state creation could happen on the reply. Otherwise, there is an obvious DoS attack that would fill the binding table with as many "START" entries as allowed (max described in section 16 help protecting the box, but not the anchor) and prevent legitimate entries to be created. >From my reading, a state "START" is created upon receiving a REQUEST message. In most cases, creating the state on the REPLY should work and be a lot safer. That is whenever the REPLY have enough information to create the entry and associate it with the requesting anchor. For instance, if the anchor is the MAC, then the response has it. If the anchor is the port, upon receiving the REPLY, it can be found in the option 82. And if there is no option 82 (I am wondering if the switch could not insert it all the time?), then there is the switch L2 mapping table. So I'd like this state to be removed or a least used as an "optionnal but dangerous" correlation mechanism. - My other substantial comment is about the interactions between ND (or ARP) and DHCP. My understanding of DHCP is that it is the client responsability to verify the address uniqueness and to DHCPDECLINE in case of a collision. So it should be sufficient to refer to DHCP messages, and if not, i'd like to see the rational for it. I have also suggested that whatever additional interactions there maybe should rather be described in the framework document. Eric Bi Jun a ¨¦crit: > Dear WG members, > Please read the SAVI solution for DHCP. > This draft is for DHCP case. We removed the text on SLAAC of CPS-01 > and contributed to SAVI SLAAC draft. > This version have taken the suggestions from Christian, Eric > Levy-Abegnoli , Alberto Garc¨ªa, etc. Thanks to all of them. > Please provideyour comments. > thanks, > Jun Bi > http://www.ietf.org/id/draft-bi-savi-cps-02.txt > SAVI Solution for DHCPv4/v6 > draft-bi-savi-cps-02.txt > Abstract > > This document specifies the procedure of setting up bindings between > DHCPv4 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address and > anchor (refer to [SAVI-framework]) on SAVI (Source Address Validation > Improvements) device. The bindings can be used to filter packets with > forged IP addresses. > ------------------------------------------------------------------------ > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > --------------050101030601000104090409 Content-Type: text/html; charset=GB2312 Content-Transfer-Encoding: 8bit Jun Bi and all,
I think the document is a reasonnably good shape. I had however a few substantial comments made offline, that I'd like to repeat
the mailing list (note that they are all listed already in the doc as open issues, but the RA filtering)

- Section 9.4: Router Advertisements have nothing to do with the SAVI charter. For that, there is draft-ietf-v6ops-ra-guard. So
I don't think it belongs here or in the framework document.

- Section 7 (and subsequent) I don't like the idea of creating a state "START" on the request, and I think in most cases, the state creation
  could happen on the reply. Otherwise, there is an obvious DoS attack that would fill the binding table with as
  many "START" entries as allowed (max described in section 16 help protecting the box, but not the anchor) and prevent legitimate entries
  to be created. 
  From my reading, a state "START" is created upon receiving a REQUEST message. In most cases, creating the state on the REPLY should
  work and be a lot safer. That is whenever the REPLY have enough information to create the entry and associate it with the requesting anchor.
  For instance, if the anchor is the MAC, then the response has it. If the anchor is the port, upon receiving the REPLY, it can be found in the
  option 82. And if there is no option 82 (I am wondering if the switch could not insert it all the time?), then there is the switch L2 mapping table.
  So I'd like this state to be removed or a least used as an "optionnal but dangerous" correlation mechanism.

- My other substantial comment is about the interactions between ND (or ARP) and DHCP. My understanding of DHCP is
  that it is the client responsability to verify the address uniqueness and to DHCPDECLINE in case of a collision. So it should be
  sufficient to refer to DHCP messages, and if not, i'd like to see the rational for it.
  I have also suggested that whatever additional interactions there maybe should rather be described in the
  framework document.     

Eric


Bi Jun a ¨¦crit :
Dear WG members,
 
Please read the SAVI solution for DHCP. 
This draft is for DHCP case. We removed the text on SLAAC of CPS-01 and contributed to SAVI SLAAC draft.
This version have taken the suggestions from Christian, Eric Levy-Abegnoli , Alberto Garc¨ªa, etc. Thanks to all of them.
Please provide your comments.
thanks,
Jun Bi
 
 
               SAVI Solution for DHCPv4/v6
                         draft-bi-savi-cps-02.txt
 
Abstract

   This document specifies the procedure of setting up bindings between
   DHCPv4 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address and
   anchor (refer to [SAVI-framework]) on SAVI (Source Address Validation
   Improvements) device. The bindings can be used to filter packets with
   forged IP addresses.

_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi

--------------050101030601000104090409-- From alberto@it.uc3m.es Mon Nov 2 06:33:54 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0EFE128C125 for ; Mon, 2 Nov 2009 06:33:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.299 X-Spam-Level: X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SVHTDAvdft1J for ; Mon, 2 Nov 2009 06:33:53 -0800 (PST) Received: from smtp03.uc3m.es (smtp03.uc3m.es [163.117.176.133]) by core3.amsl.com (Postfix) with ESMTP id A562628C0FC for ; Mon, 2 Nov 2009 06:33:52 -0800 (PST) Received: from bombo (bombo.it.uc3m.es [163.117.139.125]) by smtp03.uc3m.es (Postfix) with ESMTP id E1E117F2F8A; Mon, 2 Nov 2009 15:34:10 +0100 (CET) From: =?ISO-8859-15?Q?Alberto_Garc=EDa?= To: "'Eric Levy-Abegnoli'" , "'Christian Vogt'" References: <871D15B0-6B49-49F4-AD94-88AC7523044C@ericsson.com> <200910231045135108459@huaweisymantec.com> <5FDC3979-13E4-480A-A1F6-334B95E2ED66@ericsson.com> <200910291035478406365@huaweisymantec.com><4540D1DA-94A6-4DC9-B5B9-E9C0E32D127B@ericsson.com> <4AE93B2C.7060906@it.uc3m.es><210BBA32-43EB-49EC-B9BB-0C5B9AE7C4EA@ericsson.com> <4AEEB775.5020103@cisco.com> Date: Mon, 2 Nov 2009 15:34:10 +0100 Message-ID: <5F478AAF585047D596445D235C51D74D@bombo> MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-15" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook 11 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579 Thread-Index: AcpbqR7uFCUFooGvSdGRhK6E747jJQAHasZw In-Reply-To: <4AEEB775.5020103@cisco.com> X-TM-AS-Product-Ver: IMSS-7.0.0.3116-5.6.0.1016-16984.003 Cc: 'SAVI Mailing List' Subject: Re: [savi] A few comments on draft-vogt-savi-framework X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2009 14:33:54 -0000 Hi | -----Mensaje original----- | De: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] En nombre de Eric | Levy-Abegnoli | Enviado el: lunes, 02 de noviembre de 2009 11:42 | Para: Christian Vogt | CC: SAVI Mailing List; Alberto Garc=EDa | Asunto: Re: [savi] A few comments on draft-vogt-savi-framework | =20 | Christian, | Christian Vogt a =E9crit : | =20 | Alberto - | =20 | As a member of the working group, not as its chair: You are right | that co-existence scenarios need to be handled. But I'm not sure that | coexistence requires /special/ behavior. As long as the behavior | desired for coexistence scenarios does not preclude the behavior | desired for non-coexistence scenarios, I think coexistence should be | covered by the /regular/ behavior of the various SAVI protocol | specifications. That is, in the particular case of SLAAC/SEND co- | existence, I think we should strive for a SAVI SEND protocol that can | handle non-SEND-capable SAVI devices. | =20 | =20 | As we are centralizing the co-existence decisions in a "man-in-the-middle" savi- | device, we can't just consider that the capability of the savi-device (SeND, not | SeND) are it's sole problem. Which "looks" the case if the = co-existence scenarios | are described in the savi-SeND protocol specification. I don't understand this. What's the problem with a situation in which = the manager of the network configures SAVI devices... - in SLAAC-only mode if it knows no SEND hosts are there - in SEND-only mode if it knows all hosts are SEND - in SLAAC-SEND-compatible mode if it knows the network has SEND and no = SEND hosts. I assume that deploying SAVI is going to require some management (we = have assumed that when stating that there are roles such as Trusted and Validating). For SEND even more configuration is required in the SAVI devices (i.e. trust anchors).=20 SEND hosts also need to be configured with trust anchors for processing correctly secured RADV. (well, the manager may not know if two hosts configure CGAs just for communication among themselves, but, is this the general case? ) So, the manager will provide the appropriate SAVI operation mode.=20 In addition, the compatible mode should work fine for both types of = hosts. A manager with SAVI devices capable of this, and with any suspicion that a SEND host may appear, may set up the SAVI devices to be in this mode.=20 Do you think this deployment model for SAVI is reasonable? | A savi device not SEND-capable breaks RFC3971.=20 Yes, so when a SEND host exists, SAVI must be SEND enabled. | Like a bridge that would mess | with L3 messages. And it has no way to know.=20 This is where I kindly disagree. Regards, Alberto | Can we **really** specify that? | There might be thousands of non-SeND capable nodes on the link, and = just one | signle pair of SeND nodes, and this SAVI-switch in the middle is completely | messing with their "standard" behavior. Note that there **are** such | deployments out there. And the deployments scenarios are exactly that (few | SeND critical nodes, many non-SeND). | So I think the description of this scenario, and associated warnings should show | up either in all documents, or in a higher level doc( framework, or other). | Eric | =20 | =20 | Does this make sense? | =20 | - Christian | =20 | =20 | =20 | On Oct 29, 2009, at 3:04, Alberto Garc=EDa wrote: | =20 | =20 | =20 | My opinion is that priorization is not enough. | I think we need to define "operation modes" (SEND-only, SLAAC- | only, | SEND-SLAAC-compatible...) and describe the state machine for | each one. | =20 | To support the idea of why we need a new state machine for | SEND-SLAAC | compatibility, i.e. for a domain in which both SEND hosts and | non- | SEND hosts | coexist, just consider what a node should do (extending naturally | the | current FCFS and SEND proposals) if a SAVI device is in | NO_BIND | state, and a | data packet (not DAD NSOL) is received, from a Validating port | VP. | In this | case, the SEND SAVI device should send | - 2 (unsecured) NSOL messages through Trusted ports | (according to | FCFS SAVI) | - and a secured NUD NSOL message through the | Validating Port | (according to SEND SAVI | And The state is moved to TENTATIVE. | =20 | In the TENTATIVE state, the SAVI device should maybe wait long | enough (a | RetransTimer, which is the waiting time for NUD operation) for a | secured NUD | NADV even if an unsecured DAD NSOL is received from a trusted | port | in the | meanwhile, to assure that SEND validated addresses have priority | over | non-SEND addresses. [Note that this may occur if a SEND host | has one | collision when performing DAD for an address, and it is not | withdrawing the | second address if an unsecured DAD NSOL is received for it, as | RFC | 3971 | says]. | Different states should be defined (VALID_SEND, | VALID_NON_SEND), with | different behavior when the valid_timeout expires. | =20 | =20 | So I don't think this is just "ships in the night", but different | modes | should be defined to integrate all the possible combinations of | address | configuration mechanisms. Maybe one of these modes should be | the | default | one, but the administrator could set the SAVI devices to the | appropriate | mode (well, they also have to define which ports are trusted or | not...). | =20 | Does this make sense? | Regards, | Alberto | =20 | =20 | =20 | =20 | =20 | _______________________________________________ | savi mailing list | savi@ietf.org | https://www.ietf.org/mailman/listinfo/savi | =20 | =20 | =20 From elevyabe@cisco.com Mon Nov 2 07:01:35 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1FD003A657C for ; Mon, 2 Nov 2009 07:01:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.449 X-Spam-Level: X-Spam-Status: No, score=-8.449 tagged_above=-999 required=5 tests=[AWL=-2.150, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0LFVQH06gz4s for ; Mon, 2 Nov 2009 07:01:33 -0800 (PST) Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by core3.amsl.com (Postfix) with ESMTP id E23543A67D8 for ; Mon, 2 Nov 2009 07:01:33 -0800 (PST) Authentication-Results: sj-iport-5.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAHOD7kpAaHte/2dsb2JhbADFapZjhDwE X-IronPort-AV: E=Sophos;i="4.44,667,1249257600"; d="scan'208";a="101960010" Received: from hkg-core-1.cisco.com ([64.104.123.94]) by sj-iport-5.cisco.com with ESMTP; 02 Nov 2009 15:01:52 +0000 Received: from xbh-ams-101.cisco.com (xbh-ams-101.cisco.com [144.254.74.71]) by hkg-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA2F1Z5V012052; Mon, 2 Nov 2009 15:01:51 GMT Received: from xmb-ams-105.cisco.com ([144.254.74.80]) by xbh-ams-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 2 Nov 2009 16:01:42 +0100 Received: from [144.254.53.124] ([144.254.53.124]) by xmb-ams-105.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 2 Nov 2009 16:01:42 +0100 Message-ID: <4AEEF467.5010508@cisco.com> Date: Mon, 02 Nov 2009 16:01:59 +0100 From: Eric Levy-Abegnoli User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: =?ISO-8859-15?Q?Alberto_Garc=EDa?= References: <871D15B0-6B49-49F4-AD94-88AC7523044C@ericsson.com> <200910231045135108459@huaweisymantec.com> <5FDC3979-13E4-480A-A1F6-334B95E2ED66@ericsson.com> <200910291035478406365@huaweisymantec.com><4540D1DA-94A6-4DC9-B5B9-E9C0E32D127B@ericsson.com> <4AE93B2C.7060906@it.uc3m.es><210BBA32-43EB-49EC-B9BB-0C5B9AE7C4EA@ericsson.com> <4AEEB775.5020103@cisco.com> <5F478AAF585047D596445D235C51D74D@bombo> In-Reply-To: <5F478AAF585047D596445D235C51D74D@bombo> Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 8bit X-OriginalArrivalTime: 02 Nov 2009 15:01:42.0737 (UTC) FILETIME=[63638410:01CA5BCD] Cc: 'SAVI Mailing List' , 'Christian Vogt' Subject: Re: [savi] A few comments on draft-vogt-savi-framework X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2009 15:01:35 -0000 Alberto, Alberto García a écrit : > Hi > > | -----Mensaje original----- > | De: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] En nombre de > Eric > | Levy-Abegnoli > | Enviado el: lunes, 02 de noviembre de 2009 11:42 > | Para: Christian Vogt > | CC: SAVI Mailing List; Alberto García > | Asunto: Re: [savi] A few comments on draft-vogt-savi-framework > | > | Christian, > | Christian Vogt a écrit : > | > | Alberto - > | > | As a member of the working group, not as its chair: You are right > | that co-existence scenarios need to be handled. But I'm not sure > that > | coexistence requires /special/ behavior. As long as the behavior > | desired for coexistence scenarios does not preclude the behavior > | desired for non-coexistence scenarios, I think coexistence should be > | covered by the /regular/ behavior of the various SAVI protocol > | specifications. That is, in the particular case of SLAAC/SEND co- > | existence, I think we should strive for a SAVI SEND protocol that > can > | handle non-SEND-capable SAVI devices. > | > | > | As we are centralizing the co-existence decisions in a > "man-in-the-middle" savi- > | device, we can't just consider that the capability of the savi-device > (SeND, not > | SeND) are it's sole problem. Which "looks" the case if the co-existence > scenarios > | are described in the savi-SeND protocol specification. > > I don't understand this. What's the problem with a situation in which the > manager of the network configures SAVI devices... > - in SLAAC-only mode if it knows no SEND hosts are there > - in SEND-only mode if it knows all hosts are SEND > - in SLAAC-SEND-compatible mode if it knows the network has SEND and no SEND > hosts. > I assume that deploying SAVI is going to require some management (we have > assumed that when stating that there are roles such as Trusted and > Validating). For SEND even more configuration is required in the SAVI > devices (i.e. trust anchors). > It is not realistic to expect that the operator will know **all** end-nodes capabilities. There might be thousands of them, (I know an enterprise which as 100,000) and they could show up or disappear at n a very dynamic pace. Also, there is an organisation issue; quite commonly, the network in controlled by one entity, the end-nodes by a different one. Security so far is mostly dealt with by end-nodes, not network elements. If we move some security feature out of the end-nodes into a network box, we must insure it does at least an equivalent job. For CGA, no provisionning (trust anchor) is required what-so-ever. So the SAVI has no other way to know than to look at the CGA option. > SEND hosts also need to be configured with trust anchors for processing > correctly secured RADV. (well, the manager may not know if two hosts > configure CGAs just for communication among themselves, but, is this the > general case? ) > So, the manager will provide the appropriate SAVI operation mode. > We are talking about address assignment, right? Then CGA does not require any centralized provisionning of any kind. In particular no trust anchor. > In addition, the compatible mode should work fine for both types of hosts. A > manager with SAVI devices capable of this, and with any suspicion that a > SEND host may appear, may set up the SAVI devices to be in this mode. > > Do you think this deployment model for SAVI is reasonable? > There are many situations where he will not know. We (SeND) have designed a distributed protocol where end-nodes can take care of their own security. And now by centralizing some of the security, we (SAVI) are breaking this model. I think this is going to be a SeND (or at least CGA) killer. Once someone have deployed a bunch of SAVI switches, it won't be possible anymore to deploy SeND on any subset of end-devices. Eric > | A savi device not SEND-capable breaks RFC3971. > Yes, so when a SEND host exists, SAVI must be SEND enabled. > > | Like a bridge that would mess > | with L3 messages. And it has no way to know. > > This is where I kindly disagree. > Regards, > Alberto > > | Can we **really** specify that? > | There might be thousands of non-SeND capable nodes on the link, and just > one > | signle pair of SeND nodes, and this SAVI-switch in the middle is > completely > | messing with their "standard" behavior. Note that there **are** such > | deployments out there. And the deployments scenarios are exactly that > (few > | SeND critical nodes, many non-SeND). > | So I think the description of this scenario, and associated warnings > should show > | up either in all documents, or in a higher level doc( framework, or > other). > | Eric > | > | > | Does this make sense? > | > | - Christian > | > | > | > | On Oct 29, 2009, at 3:04, Alberto García wrote: > | > | > | > | My opinion is that priorization is not enough. > | I think we need to define "operation modes" (SEND-only, > SLAAC- > | only, > | SEND-SLAAC-compatible...) and describe the state machine for > | each one. > | > | To support the idea of why we need a new state machine for > | SEND-SLAAC > | compatibility, i.e. for a domain in which both SEND hosts > and > | non- > | SEND hosts > | coexist, just consider what a node should do (extending > naturally > | the > | current FCFS and SEND proposals) if a SAVI device is in > | NO_BIND > | state, and a > | data packet (not DAD NSOL) is received, from a Validating > port > | VP. > | In this > | case, the SEND SAVI device should send > | - 2 (unsecured) NSOL messages through Trusted ports > | (according to > | FCFS SAVI) > | - and a secured NUD NSOL message through the > | Validating Port > | (according to SEND SAVI > | And The state is moved to TENTATIVE. > | > | In the TENTATIVE state, the SAVI device should maybe wait > long > | enough (a > | RetransTimer, which is the waiting time for NUD operation) > for a > | secured NUD > | NADV even if an unsecured DAD NSOL is received from a > trusted > | port > | in the > | meanwhile, to assure that SEND validated addresses have > priority > | over > | non-SEND addresses. [Note that this may occur if a SEND host > | has one > | collision when performing DAD for an address, and it is not > | withdrawing the > | second address if an unsecured DAD NSOL is received for it, > as > | RFC > | 3971 > | says]. > | Different states should be defined (VALID_SEND, > | VALID_NON_SEND), with > | different behavior when the valid_timeout expires. > | > | > | So I don't think this is just "ships in the night", but > different > | modes > | should be defined to integrate all the possible combinations > of > | address > | configuration mechanisms. Maybe one of these modes should be > | the > | default > | one, but the administrator could set the SAVI devices to the > | appropriate > | mode (well, they also have to define which ports are trusted > or > | not...). > | > | Does this make sense? > | Regards, > | Alberto > | > | > | > | > | > | _______________________________________________ > | savi mailing list > | savi@ietf.org > | https://www.ietf.org/mailman/listinfo/savi > | > | > | > > > > From christian.vogt@ericsson.com Mon Nov 2 09:38:49 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5DB5B28C1CC for ; Mon, 2 Nov 2009 09:38:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.558 X-Spam-Level: X-Spam-Status: No, score=-6.558 tagged_above=-999 required=5 tests=[AWL=0.041, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id McnV0hyQLm6u for ; Mon, 2 Nov 2009 09:38:48 -0800 (PST) Received: from imr1.ericy.com (imr1.ericy.com [198.24.6.9]) by core3.amsl.com (Postfix) with ESMTP id 698B43A6A73 for ; Mon, 2 Nov 2009 09:38:47 -0800 (PST) Received: from eusrcmw750.eamcs.ericsson.se (eusrcmw750.exu.ericsson.se [138.85.77.50]) by imr1.ericy.com (8.13.1/8.13.1) with ESMTP id nA2Hd6rd030726 for ; Mon, 2 Nov 2009 11:39:06 -0600 Received: from eusrcmw750.eamcs.ericsson.se ([138.85.77.53]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Mon, 2 Nov 2009 11:38:01 -0600 Received: from eusaamw0706.eamcs.ericsson.se ([147.117.20.31]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Mon, 2 Nov 2009 11:38:01 -0600 Received: from EUSAACMS0701.eamcs.ericsson.se ([169.254.1.35]) by eusaamw0706.eamcs.ericsson.se ([147.117.20.31]) with mapi; Mon, 2 Nov 2009 12:38:00 -0500 From: Christian Vogt To: Eric Levy-Abegnoli Date: Mon, 2 Nov 2009 12:38:43 -0500 Thread-Topic: [savi] A few comments on draft-vogt-savi-framework Thread-Index: Acpb4zhvrI+ja0sxRQ6vioWWkU0qHw== Message-ID: References: <871D15B0-6B49-49F4-AD94-88AC7523044C@ericsson.com> <200910231045135108459@huaweisymantec.com> <5FDC3979-13E4-480A-A1F6-334B95E2ED66@ericsson.com> <200910291035478406365@huaweisymantec.com><4540D1DA-94A6-4DC9-B5B9-E9C0E32D127B@ericsson.com> <4AE93B2C.7060906@it.uc3m.es> <210BBA32-43EB-49EC-B9BB-0C5B9AE7C4EA@ericsson.com> <4AEEB775.5020103@cisco.com> In-Reply-To: <4AEEB775.5020103@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 02 Nov 2009 17:38:01.0103 (UTC) FILETIME=[395499F0:01CA5BE3] Cc: SAVI Mailing List , =?iso-8859-1?Q?Alberto_Garc=EDa?= Subject: Re: [savi] A few comments on draft-vogt-savi-framework X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2009 17:38:49 -0000 On Nov 2, 2009, Eric Levy-Abegnoli wrote: > A savi device not SEND-capable breaks RFC3971. Let's be a bit more specific here. In what way would a non-SEND-capable SAVI device break RFC 3971? Alberto has mentioned one case -- when a SEND host's DAD fails for the second time due to an unsecured Neighbor Advertisement, then the SEND host will configure the IP address, yet a non-SEND-capable SAVI device would block the IP address. Is this the issue you are referring to? Then we should discuss whether or not this is acceptable. Or are there more issues you are thinking of? - Christian From elevyabe@cisco.com Tue Nov 3 00:53:17 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D585828C179 for ; Tue, 3 Nov 2009 00:53:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.061 X-Spam-Level: X-Spam-Status: No, score=-8.061 tagged_above=-999 required=5 tests=[AWL=-1.463, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id omyT+5kfeAUE for ; Tue, 3 Nov 2009 00:53:16 -0800 (PST) Received: from sj-iport-1.cisco.com (sj-iport-1.cisco.com [171.71.176.70]) by core3.amsl.com (Postfix) with ESMTP id A540A28C177 for ; Tue, 3 Nov 2009 00:53:16 -0800 (PST) Authentication-Results: sj-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AuUFAD5+70qrR7Ht/2dsb2JhbACCIjElwjmXSoJHgXYE X-IronPort-AV: E=Sophos;i="4.44,673,1249257600"; d="scan'208,217";a="265293573" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-1.cisco.com with ESMTP; 03 Nov 2009 08:53:37 +0000 Received: from xbh-ams-101.cisco.com (xbh-ams-101.cisco.com [144.254.74.71]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA38rVO7004345; Tue, 3 Nov 2009 08:53:37 GMT Received: from xmb-ams-105.cisco.com ([144.254.74.80]) by xbh-ams-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 3 Nov 2009 09:53:25 +0100 Received: from [144.254.53.124] ([144.254.53.124]) by xmb-ams-105.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 3 Nov 2009 09:53:24 +0100 Message-ID: <4AEFEF84.4020807@cisco.com> Date: Tue, 03 Nov 2009 09:53:24 +0100 From: Eric Levy-Abegnoli User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Christian Vogt References: <871D15B0-6B49-49F4-AD94-88AC7523044C@ericsson.com> <200910231045135108459@huaweisymantec.com> <5FDC3979-13E4-480A-A1F6-334B95E2ED66@ericsson.com> <200910291035478406365@huaweisymantec.com><4540D1DA-94A6-4DC9-B5B9-E9C0E32D127B@ericsson.com> <4AE93B2C.7060906@it.uc3m.es> <210BBA32-43EB-49EC-B9BB-0C5B9AE7C4EA@ericsson.com> <4AEEB775.5020103@cisco.com> In-Reply-To: Content-Type: multipart/alternative; boundary="------------030205060607010709080905" X-OriginalArrivalTime: 03 Nov 2009 08:53:25.0034 (UTC) FILETIME=[1A8B60A0:01CA5C63] Cc: SAVI Mailing List , =?ISO-8859-1?Q?Alberto_Garc=EDa?= Subject: Re: [savi] A few comments on draft-vogt-savi-framework X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2009 08:53:18 -0000 This is a multi-part message in MIME format. --------------030205060607010709080905 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Christian Vogt a écrit : > On Nov 2, 2009, Eric Levy-Abegnoli wrote: > > >> A savi device not SEND-capable breaks RFC3971. >> > > Let's be a bit more specific here. In what way would a non-SEND-capable > SAVI device break RFC 3971? Alberto has mentioned one case -- when a > SEND host's DAD fails for the second time due to an unsecured Neighbor > Advertisement, then the SEND host will configure the IP address, yet a > non-SEND-capable SAVI device would block the IP address. Is this the > issue you are referring to? Then we should discuss whether or not this > is acceptable. Or are there more issues you are thinking of? > The sole purpose of CGA is to enable a CGA-capable node to prefer CGA-prooved NDP message over a none prooved one. If the savi device does first-come-first-serve, and is not able to verify (and prefer) CGA credentials, then there are plenty of scenarios where it will keep the non CGA owner entry and discard traffic from the legitimate: basically all scenarios where the non-CGA came first. But I consider keeping the bogus entry is not the worse. It also prevents CGA-capable nodes to make a RFC3971 proper decision, by not showing them messages from the legitimate owner, provided that it came second. This is **not** a theoritical issue. I'll give you one scenario (you asked for it :)): 1) A CGA-capable node N (typically a critical host, such as a server or a router) gets its address X in the savi binding table 2) an attacker M spots X -easy, it's multicast in NA -. He sends DAD NS every minute for target X. As long as N is there, he gets the NS, responds with NA and that's legal. - In parallel, M computes X' (easy), the sibling CGA address of X (with colision = 1) and DAD it. The savi device installs it in the table - At some point N go silent (pretty common, for maintenance, move, etc). Attacker M sends its periodic DAD NS for X. The savi device thinks it's a move and replace the legitimate owner by the attacker. - Here is the funny part. N comes back. Do DAD for X. M responds. N tries a second address X'. It's in the binding table! M responds. - N ignores the response (that's 3971) and start sourcing with X'. All its traffic is dropped. Including the unsolicited NA to all-nodes - Every node on the link, including the CGA-capable now have M as X and X' owner. And the savi device is dropping all N traffic. That's what I call highjacking. While this is not worse than before for non-CGA capable nodes, any CGA-capable nodes on the link should have prefered N to M. But they don't have chance to see N. So CGA (RFC3971) become pointless, useless. Eric > - Christian > > > > --------------030205060607010709080905 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Christian Vogt a écrit : 
On Nov 2, 2009, Eric Levy-Abegnoli wrote:

  
A savi device not SEND-capable breaks RFC3971.
    

Let's be a bit more specific here.  In what way would a non-SEND-capable
SAVI device break RFC 3971?  Alberto has mentioned one case -- when a
SEND host's DAD fails for the second time due to an unsecured Neighbor
Advertisement, then the SEND host will configure the IP address, yet a
non-SEND-capable SAVI device would block the IP address.  Is this the
issue you are referring to?  Then we should discuss whether or not this
is acceptable.  Or are there more issues you are thinking of?
The sole purpose of CGA is to enable a CGA-capable node to prefer CGA-prooved NDP message over a none prooved one.
If the savi device does first-come-first-serve, and is not able to verify (and prefer) CGA credentials, then there are plenty of scenarios
where it will keep the non CGA owner entry and discard traffic from the legitimate: basically all scenarios where the non-CGA came first.

But I consider keeping the bogus entry is not the worse. It also prevents CGA-capable nodes to make a RFC3971 proper decision, by not
showing them messages from the legitimate owner, provided that it came second.

This is **not** a theoritical issue. I'll give you one scenario (you asked for it :)):

1) A CGA-capable node N (typically a critical host, such as a server or a router) gets its address X in the savi binding table
2) an attacker M spots X -easy, it's multicast in NA -. He sends DAD NS every minute for target X. As long as N is there,
   he gets the NS, responds with NA and that's legal.
- In parallel, M computes X' (easy), the sibling CGA address of X (with colision = 1) and DAD it. The savi device installs it in the table
- At some point N go silent (pretty common, for maintenance, move, etc). Attacker M sends its periodic DAD NS for X. The savi device thinks
it's a move and replace the legitimate owner by the attacker.
- Here is the funny part. N comes back. Do DAD for X. M responds. N tries a second address X'. It's in the binding table! M responds.
- N ignores the response (that's 3971) and start sourcing with X'. All its traffic is dropped. Including the unsolicited NA to all-nodes
- Every node on the link, including the CGA-capable now have M as X and X' owner.  And the savi device is dropping all N traffic.

That's what I call highjacking.
While this is not worse than before for non-CGA capable nodes, any CGA-capable nodes on the link should have prefered  N to M.
But they don't have chance to see N. So CGA (RFC3971) become pointless, useless.
Eric





- Christian

--------------030205060607010709080905-- From junbi@cernet.edu.cn Tue Nov 3 02:45:01 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B16FE3A69E9 for ; Tue, 3 Nov 2009 02:45:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.962 X-Spam-Level: * X-Spam-Status: No, score=1.962 tagged_above=-999 required=5 tests=[AWL=0.375, BAYES_05=-1.11, FH_HAS_XAIMC=2.696, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CIbIT519SDMy for ; Tue, 3 Nov 2009 02:45:00 -0800 (PST) Received: from cernet.edu.cn (sea.net.edu.cn [202.112.3.66]) by core3.amsl.com (Postfix) with SMTP id CFAF23A69AC for ; Tue, 3 Nov 2009 02:44:56 -0800 (PST) Received: from junbiVAIO([59.66.24.163]) by cernet.edu.cn(AIMC 3.2.0.0) with SMTP id jm2b4af0654d; Tue, 03 Nov 2009 18:45:07 +0800 Message-ID: From: "Bi Jun" To: "Eric Levy-Abegnoli" References: <001D73EA1D454F0BAE91F989B597D73D@junbiVAIO> <4AEEDCAD.1000800@cisco.com> In-Reply-To: <4AEEDCAD.1000800@cisco.com> Date: Tue, 3 Nov 2009 18:45:06 +0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_02B7_01CA5CB5.C2E8E7C0" X-Priority: 3 X-MSMail-Priority: Normal Importance: Normal X-Mailer: Microsoft Windows Live Mail 14.0.8064.206 X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8064.206 X-AIMC-AUTH: junbi X-AIMC-MAILFROM: junbi@cernet.edu.cn X-AIMC-Msg-ID: O2tsQFXB Cc: SAVI Mailing List Subject: Re: [savi] SAVI Solution for DHCPv4/v6 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2009 10:45:01 -0000 ÕâÊÇÒ»·â MIME ¸ñʽµÄ¶à·½Óʼþ¡£ ------=_NextPart_000_02B7_01CA5CB5.C2E8E7C0 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: quoted-printable Dear Eric, Thank you very much for your comments. Please see my reply below. Best Regards, Jun Bi From: Eric Levy-Abegnoli=20 Sent: Monday, November 02, 2009 9:20 PM To: Bi Jun=20 Cc: SAVI Mailing List=20 Subject: Re: [savi] SAVI Solution for DHCPv4/v6 Jun Bi and all, I think the document is a reasonnably good shape. I had however a few = substantial comments made offline, that I'd like to repeat=20 the mailing list (note that they are all listed already in the doc as = open issues, but the RA filtering) - Section 9.4: Router Advertisements have nothing to do with the SAVI = charter. For that, there is draft-ietf-v6ops-ra-guard. So I don't think it belongs here or in the framework document. bj: A good suggestion. The address prefix configuration security is = very important for source address validation, so the SAVI draft must=20 mention it. Since there is a related draft, we plan to move this = part into the "security consideration". After the = draft-ietf-v6ops-ra-guard is finalized (as a RFC), if at that time, the = solution in that rfc works for SAVI requirement, then we remove the text = and state that the SAVI device must conform to that rfc. - Section 7 (and subsequent) I don't like the idea of creating a state = "START" on the request, and I think in most cases, the state creation could happen on the reply. Otherwise, there is an obvious DoS attack = that would fill the binding table with as many "START" entries as allowed (max described in section 16 help = protecting the box, but not the anchor) and prevent legitimate entries to be created. =20 From my reading, a state "START" is created upon receiving a REQUEST = message. In most cases, creating the state on the REPLY should work and be a lot safer. That is whenever the REPLY have enough = information to create the entry and associate it with the requesting = anchor.=20 For instance, if the anchor is the MAC, then the response has it. If = the anchor is the port, upon receiving the REPLY, it can be found in the option 82. And if there is no option 82 (I am wondering if the switch = could not insert it all the time?), then there is the switch L2 mapping = table.=20 So I'd like this state to be removed or a least used as an "optionnal = but dangerous" correlation mechanism. bj: In our opinion, the most scenarios will be SAVI-host = connections. In that case, host directly attached to SAVI-host port, so = there is be no=20 security threaten in this case. If a non-savi switch is connected to = SAVI-poly port, what you mentioned might be a problem. But please note = that=20 if we remove this state, then if the MAC-port mapping table is = poisoned by an attacked launched between REQUEST and REPLY, the SAVI = switch=20 will lost the source port, there will another security threaten (with = this "START" state, the REPLY can be forwarded to the correct source = port by=20 the binding table when the MAP-port mapping table is changed). Therefore = by trading off, we intend to keep it (but will consider to mentioned the potential problem for SAVI-poly port).=20 Actually, the SAVI-ploy port (A SAVI switch connects to a non-SAVI = switch) is really not recommend indeed in our opinion, because it can = not achieve the host-granularity anti-spoofing, which is very import for = security, management and billing purposes. The only case I believe the = SAVI-poly case is useful is that a person in a office connect a hub to = SAVI-switch, then connect his multiple hosts to the hub (as the case we = discussed with Marcelo, Erik, Christian on the last day of IETF 75). In = this case, I think the user should be reasonable for the attacking = between his own hosts). - My other substantial comment is about the interactions between ND (or = ARP) and DHCP. My understanding of DHCP is=20 that it is the client responsability to verify the address uniqueness = and to DHCPDECLINE in case of a collision. So it should be sufficient to refer to DHCP messages, and if not, i'd like to see the = rational for it. I have also suggested that whatever additional interactions there = maybe should rather be described in the=20 framework document. =20 bj: Even it is a client's resposability to verify the address = uniqueness, the SAVI device must make sure the client have done it. If the client didn't complete the DAD procedure, the SAVI device = has the right to drop the packets as a punishment. Eric Bi Jun a =A8=A6crit :=20 Dear WG members, Please read the SAVI solution for DHCP. =20 This draft is for DHCP case. We removed the text on SLAAC of CPS-01 = and contributed to SAVI SLAAC draft. This version have taken the suggestions from Christian, Eric = Levy-Abegnoli , Alberto Garc=A8=AAa, etc. Thanks to all of them. Please provide your comments. thanks, Jun Bi http://www.ietf.org/id/draft-bi-savi-cps-02.txt =20 SAVI Solution for DHCPv4/v6 draft-bi-savi-cps-02.txt Abstract This document specifies the procedure of setting up bindings = between DHCPv4 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address and anchor (refer to [SAVI-framework]) on SAVI (Source Address = Validation Improvements) device. The bindings can be used to filter packets = with forged IP addresses. -------------------------------------------------------------------------= ----- _______________________________________________ savi mailing list savi@ietf.org https://www.ietf.org/mailman/listinfo/savi =20 ------=_NextPart_000_02B7_01CA5CB5.C2E8E7C0 Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable
Dear Eric,
 
Thank you very much for your = comments.
Please see my reply below.
 
Best Regards,
Jun Bi

Sent: Monday, November 02, 2009 9:20 PM
To: Bi Jun
Subject: Re: [savi] SAVI Solution for = DHCPv4/v6

Jun Bi and all,
I think the document is a reasonnably = good shape.=20 I had however a few substantial comments made offline, that I'd like to = repeat=20
the mailing list (note that they are all listed already in the doc = as open=20 issues, but the RA filtering)

- Section 9.4: Router = Advertisements have=20 nothing to do with the SAVI charter. For that, there is=20 draft-ietf-v6ops-ra-guard. So
I don't think it belongs here or in the = framework document.
 
  bj: A good suggestion. The address prefix=20 configuration security is very important for source address validation, = so the=20 SAVI draft must
     mention it. Since there is = a=20 related draft, we plan to move this part into the "security = consideration".=20 After the = draft-ietf-v6ops-ra-guard is=20 finalized (as a RFC), if at that time, the solution in that rfc works = for SAVI=20 requirement, then we remove the text and state that the SAVI device=20 must conform to that = rfc.


- Section 7 (and = subsequent) I=20 don't like the idea of creating a state "START" on the request, and I = think in=20 most cases, the state creation
  could happen on the reply. = Otherwise,=20 there is an obvious DoS attack that would fill the binding table with=20 as
  many "START" entries as allowed (max described in section = 16 help=20 protecting the box, but not the anchor) and prevent legitimate = entries
 =20 to be created. 
  From my reading, a state "START" is = created upon=20 receiving a REQUEST message. In most cases, creating the state on the = REPLY=20 should
  work and be a lot safer. That is whenever the REPLY = have enough=20 information to create the entry and associate it with the requesting = anchor.=20
  For instance, if the anchor is the MAC, then the response has = it. If=20 the anchor is the port, upon receiving the REPLY, it can be found in=20 the
  option 82. And if there is no option 82 (I am wondering if = the=20 switch could not insert it all the time?), then there is the switch L2 = mapping=20 table.
  So I'd like this state to be removed or a least used = as an=20 "optionnal but dangerous" correlation mechanism.
 
 
 
   bj:  In our = opinion, the most=20 scenarios will be SAVI-host connections. In that case, host directly = attached to=20 SAVI-host port, so there is be no
    security threaten = in this=20 case. If a non-savi switch is connected to SAVI-poly port, what you = mentioned=20 might be a problem. But please note that
  if we remove this state, then = if the=20 MAC-port mapping table is poisoned by an attacked launched between = REQUEST and=20 REPLY, the SAVI switch
 will lost the source port, = there will=20 another security threaten (with this "START" state, the REPLY can = be=20 forwarded to the correct source port by
the binding table when the MAP-port = mapping table=20 is changed). Therefore by trading off, we intend to keep it (but will = consider=20 to mentioned the
  potential problem for SAVI-poly port).=20
 
  Actually, the SAVI-ploy port = (A SAVI=20 switch connects to a non-SAVI switch) is really not recommend = indeed in our=20 opinion, because it can not achieve the host-granularity anti-spoofing, = which is=20 very import for security, management and billing purposes. The only = case I=20 believe the SAVI-poly case is useful is that a person in  a office connect a hub to = SAVI-switch,=20 then connect his multiple hosts to the hub (as the case we discussed = with Marcelo, Erik, Christian on the last = day of IETF=20 75). In this case, I think the user should be reasonable for = the=20 attacking between his own hosts).
 
 
 

- My other substantial comment is about the interactions = between ND (or=20 ARP) and DHCP. My understanding of DHCP is
  that it is the = client=20 responsability to verify the address uniqueness and to DHCPDECLINE in = case of a=20 collision. So it should be
  sufficient to refer to DHCP = messages, and=20 if not, i'd like to see the rational for it.
  I have also = suggested=20 that whatever additional interactions there maybe should rather be = described in=20 the
  framework document.      =
 
 
 
  bj: Even it is a client's resposability to = verify the=20 address uniqueness, the SAVI device must make sure the client have done=20 it.
       =20 If the client didn't complete the DAD procedure, the SAVI device has the = right=20 to drop the packets as a punishment.
 
 

Eric


Bi Jun a =A8=A6crit :
Dear WG members,
 
Please read the SAVI solution for = DHCP. 
This=20 draft is for DHCP case. We removed the text on SLAAC of CPS-01 and = contributed=20 to SAVI SLAAC draft.
This version have taken the suggestions from=20 Christian, Eric Levy-Abegnoli , Alberto Garc=A8=AAa, etc. Thanks to = all of=20 them.
Please provide your = comments.
thanks,
Jun=20 Bi
 
  http://www.ietf.org/id/draft-bi-savi-cps-02.txt<= /A>        
 
       =20        SAVI Solution for=20 = DHCPv4/v6
          =             &= nbsp; =20 draft-bi-savi-cps-02.txt
 
Abstract

   This document = specifies=20 the procedure of setting up bindings between
   DHCPv4=20 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address = and
  =20 anchor (refer to [SAVI-framework]) on SAVI (Source Address=20 Validation
   Improvements) device. The bindings can be = used to=20 filter packets with
   forged IP = addresses.

_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/=
mailman/listinfo/savi

------=_NextPart_000_02B7_01CA5CB5.C2E8E7C0-- From alberto@it.uc3m.es Tue Nov 3 09:59:29 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 98B2428C139 for ; Tue, 3 Nov 2009 09:59:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.299 X-Spam-Level: X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4PEBiMls2df4 for ; Tue, 3 Nov 2009 09:59:28 -0800 (PST) Received: from smtp01.uc3m.es (smtp01.uc3m.es [163.117.176.131]) by core3.amsl.com (Postfix) with ESMTP id 640C828C151 for ; Tue, 3 Nov 2009 09:59:26 -0800 (PST) Received: from bombo (bombo.it.uc3m.es [163.117.139.125]) by smtp01.uc3m.es (Postfix) with ESMTP id 25F9FBA855E; Tue, 3 Nov 2009 18:59:45 +0100 (CET) From: =?ISO-8859-15?Q?Alberto_Garc=EDa?= To: "'Eric Levy-Abegnoli'" References: <871D15B0-6B49-49F4-AD94-88AC7523044C@ericsson.com> <200910231045135108459@huaweisymantec.com> <5FDC3979-13E4-480A-A1F6-334B95E2ED66@ericsson.com> <200910291035478406365@huaweisymantec.com><4540D1DA-94A6-4DC9-B5B9-E9C0E32D127B@ericsson.com> <4AE93B2C.7060906@it.uc3m.es><210BBA32-43EB-49EC-B9BB-0C5B9AE7C4EA@ericsson.com> <4AEEB775.5020103@cisco.com> <5F478AAF585047D596445D235C51D74D@bombo> <4AEEF467.5010508@cisco.com> Date: Tue, 3 Nov 2009 18:59:42 +0100 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-15" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook 11 Thread-Index: AcpbzWx8SRe8p7b4Q2uD4q+uJ/iZUQA3UQ2A In-Reply-To: <4AEEF467.5010508@cisco.com> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579 X-TM-AS-Product-Ver: IMSS-7.0.0.3116-5.6.0.1016-16988.000 Cc: 'SAVI Mailing List' , 'Christian Vogt' Subject: Re: [savi] A few comments on draft-vogt-savi-framework X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2009 17:59:29 -0000 Hi Eric | -----Mensaje original----- | De: Eric Levy-Abegnoli [mailto:elevyabe@cisco.com] | Enviado el: lunes, 02 de noviembre de 2009 16:02 | Para: Alberto Garc=EDa | CC: 'Christian Vogt'; 'SAVI Mailing List' | Asunto: Re: [savi] A few comments on draft-vogt-savi-framework | =20 | Alberto, | Alberto Garc=EDa a =E9crit : | > Hi | > | > | -----Mensaje original----- | > | De: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] En = nombre de | > Eric | > | Levy-Abegnoli | > | Enviado el: lunes, 02 de noviembre de 2009 11:42 | > | Para: Christian Vogt | > | CC: SAVI Mailing List; Alberto Garc=EDa | > | Asunto: Re: [savi] A few comments on draft-vogt-savi-framework | > | | > | Christian, | > | Christian Vogt a =E9crit : | > | | > | Alberto - | > | | > | As a member of the working group, not as its chair: You are right | > | that co-existence scenarios need to be handled. But I'm not sure | > that | > | coexistence requires /special/ behavior. As long as the behavior | > | desired for coexistence scenarios does not preclude the behavior | > | desired for non-coexistence scenarios, I think coexistence should be | > | covered by the /regular/ behavior of the various SAVI protocol | > | specifications. That is, in the particular case of SLAAC/SEND co- | > | existence, I think we should strive for a SAVI SEND protocol that | > can | > | handle non-SEND-capable SAVI devices. | > | | > | | > | As we are centralizing the co-existence decisions in a | > "man-in-the-middle" savi- | > | device, we can't just consider that the capability of the savi-device | > (SeND, not | > | SeND) are it's sole problem. Which "looks" the case if the co-existence | > scenarios | > | are described in the savi-SeND protocol specification. | > | > I don't understand this. What's the problem with a situation in = which the | > manager of the network configures SAVI devices... | > - in SLAAC-only mode if it knows no SEND hosts are there | > - in SEND-only mode if it knows all hosts are SEND | > - in SLAAC-SEND-compatible mode if it knows the network has SEND = and no | SEND | > hosts. | > I assume that deploying SAVI is going to require some management = (we have | > assumed that when stating that there are roles such as Trusted and | > Validating). For SEND even more configuration is required in the = SAVI | > devices (i.e. trust anchors). | > | It is not realistic to expect that the operator will know **all** | end-nodes capabilities. There might be thousands of them, | (I know an enterprise which as 100,000) and they could show up or | disappear at n a very dynamic pace. | Also, there is an organisation issue; quite commonly, the network in | controlled by one entity, the end-nodes by a different one. | Security so far is mostly dealt with by end-nodes, not network | elements. If we move some security feature out of the end-nodes | into a network box, we must insure it does at least an equivalent = job. In this case I assume that the SAVI devices should be SLAAC-SEND = compatible (it is a case in which the operator assumes could be any of them). Is = this a problem? | =20 | For CGA, no provisionning (trust anchor) is required what-so-ever. So | the SAVI has no other way to know than to look at | the CGA option. I agree about that. However, I don't like very much talking about CGA, but about SEND. SEND specifies the behavior for validating host addresses (that must be = CGAs), but also for validating router-related information (router identity and prefixes). For the last issue, trust anchors is the way defined in the RFC3971 to do this. Note that for SEND SAVI operation, it is relevant to be able to identify local traffic from transit traffic, and to do this, the devices must = know which prefixes are on-link. A good dynamic way to do this is to use the signing facility for RADV info of SEND, whose validation depends on = trust anchors.=20 Otherwise, the operator must configure manually the prefixes... i.e. a = lot of configuration in SAVI devices, which was the point here = (configuration of the operation mode of SAVI devices is not an issue compared to the rest = of the configuration required). | > SEND hosts also need to be configured with trust anchors for = processing | > correctly secured RADV. (well, the manager may not know if two = hosts | > configure CGAs just for communication among themselves, but, is = this the | > general case? ) | > So, the manager will provide the appropriate SAVI operation mode. | > | We are talking about address assignment, right? Then CGA does not | require any centralized provisionning of any kind. | In particular no trust anchor. Yes, agreed | > In addition, the compatible mode should work fine for both types of hosts. A | > manager with SAVI devices capable of this, and with any suspicion = that a | > SEND host may appear, may set up the SAVI devices to be in this = mode. | > | > Do you think this deployment model for SAVI is reasonable? | > | There are many situations where he will not know. We (SeND) have | designed a distributed protocol where end-nodes can | take care of their own security. And now by centralizing some of the | security, we (SAVI) are breaking this model. | I think this is going to be a SeND (or at least CGA) killer. Once | someone have deployed a bunch of SAVI switches, it won't be possible | anymore to deploy SeND on any subset of end-devices. ... or just deploy from the beginning SLAAC-SEND savi compatible = devices.=20 Well, I'm not seriously proposing this (due to cost considerations).=20 But I'm not so pessimistic as you are: SLAAC SAVI provides to SLAAC more security than SEND. Even SLAAC SAVI for SEND provides a different type = of security, that is applied to data packets (SEND only protects the = binding between IP address and layer-2 address), which is an additional security that does not exist now for SEND operation. For SLAAC SAVI, when a host receives SEND ND messages, it knows that the additional protection for = the IP / layer 2 address binding is there. Agreed that does not provide priority to SEND hosts (which occurs in RFC3971), and does not protect DAD for unsecured NADV in 2nd and 3rd = times. Which I assume that would make users ask their operators to change SAVI devices to SEND-compatible ones.=20 By the way, I think some kind of notification (such as the ICMP message currently suggested to generate when discarding packets) would enable, = at least, some kind of feedback specially relevant for SEND hosts (or users = of the host).=20 Alberto | Eric | > | A savi device not SEND-capable breaks RFC3971. | > Yes, so when a SEND host exists, SAVI must be SEND enabled. | > | > | Like a bridge that would mess | > | with L3 messages. And it has no way to know. | > | > This is where I kindly disagree. | > Regards, | > Alberto | > | > | Can we **really** specify that? | > | There might be thousands of non-SeND capable nodes on the link, = and just | > one | > | signle pair of SeND nodes, and this SAVI-switch in the middle is | > completely | > | messing with their "standard" behavior. Note that there **are** such | > | deployments out there. And the deployments scenarios are exactly that | > (few | > | SeND critical nodes, many non-SeND). | > | So I think the description of this scenario, and associated = warnings | > should show | > | up either in all documents, or in a higher level doc( framework, = or | > other). | > | Eric | > | | > | | > | Does this make sense? | > | | > | - Christian | > | | > | | > | | > | On Oct 29, 2009, at 3:04, Alberto Garc=EDa wrote: | > | | > | | > | | > | My opinion is that priorization is not enough. | > | I think we need to define "operation modes" (SEND-only, | > SLAAC- | > | only, | > | SEND-SLAAC-compatible...) and describe the state machine for | > | each one. | > | | > | To support the idea of why we need a new state machine for | > | SEND-SLAAC | > | compatibility, i.e. for a domain in which both SEND hosts | > and | > | non- | > | SEND hosts | > | coexist, just consider what a node should do (extending | > naturally | > | the | > | current FCFS and SEND proposals) if a SAVI device is in | > | NO_BIND | > | state, and a | > | data packet (not DAD NSOL) is received, from a Validating | > port | > | VP. | > | In this | > | case, the SEND SAVI device should send | > | - 2 (unsecured) NSOL messages through Trusted ports | > | (according to | > | FCFS SAVI) | > | - and a secured NUD NSOL message through the | > | Validating Port | > | (according to SEND SAVI | > | And The state is moved to TENTATIVE. | > | | > | In the TENTATIVE state, the SAVI device should maybe wait | > long | > | enough (a | > | RetransTimer, which is the waiting time for NUD operation) | > for a | > | secured NUD | > | NADV even if an unsecured DAD NSOL is received from a | > trusted | > | port | > | in the | > | meanwhile, to assure that SEND validated addresses have | > priority | > | over | > | non-SEND addresses. [Note that this may occur if a SEND host | > | has one | > | collision when performing DAD for an address, and it is not | > | withdrawing the | > | second address if an unsecured DAD NSOL is received for it, | > as | > | RFC | > | 3971 | > | says]. | > | Different states should be defined (VALID_SEND, | > | VALID_NON_SEND), with | > | different behavior when the valid_timeout expires. | > | | > | | > | So I don't think this is just "ships in the night", but | > different | > | modes | > | should be defined to integrate all the possible combinations | > of | > | address | > | configuration mechanisms. Maybe one of these modes should be | > | the | > | default | > | one, but the administrator could set the SAVI devices to the | > | appropriate | > | mode (well, they also have to define which ports are trusted | > or | > | not...). | > | | > | Does this make sense? | > | Regards, | > | Alberto | > | | > | | > | | > | | > | | > | _______________________________________________ | > | savi mailing list | > | savi@ietf.org | > | https://www.ietf.org/mailman/listinfo/savi | > | | > | | > | | > | > | > | > From christian.vogt@ericsson.com Wed Nov 4 04:39:15 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0EE1C3A69CD for ; Wed, 4 Nov 2009 04:39:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.562 X-Spam-Level: X-Spam-Status: No, score=-6.562 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mzrMnDifvRgl for ; Wed, 4 Nov 2009 04:39:14 -0800 (PST) Received: from imr1.ericy.com (imr1.ericy.com [198.24.6.9]) by core3.amsl.com (Postfix) with ESMTP id 406043A69BE for ; Wed, 4 Nov 2009 04:39:14 -0800 (PST) Received: from eusrcmw751.eamcs.ericsson.se (eusrcmw751.exu.ericsson.se [138.85.77.51]) by imr1.ericy.com (8.13.1/8.13.1) with ESMTP id nA4CdXDH013828 for ; Wed, 4 Nov 2009 06:39:35 -0600 Received: from eusrcmw751.eamcs.ericsson.se ([138.85.77.56]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Wed, 4 Nov 2009 06:38:56 -0600 Received: from eusaamw0712.eamcs.ericsson.se ([147.117.20.181]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Wed, 4 Nov 2009 06:38:56 -0600 Received: from EUSAACMS0701.eamcs.ericsson.se ([169.254.1.35]) by eusaamw0712.eamcs.ericsson.se ([147.117.20.181]) with mapi; Wed, 4 Nov 2009 07:38:56 -0500 From: Christian Vogt To: SAVI Mailing List Date: Wed, 4 Nov 2009 07:38:55 -0500 Thread-Topic: Preparing for upcoming meeting Thread-Index: AcpdS8W4NJZ0wo7YT6WVbdK5fTWy1A== Message-ID: <540094AE-AF40-41C2-AF67-607FBD338677@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 04 Nov 2009 12:38:56.0695 (UTC) FILETIME=[C674BC70:01CA5D4B] Subject: [savi] Preparing for upcoming meeting X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Nov 2009 12:39:15 -0000 Comrades - In preparation of our upcoming working group meeting, I would like to remind everyone to read the documents identified on the meeting agenda [1]. Of interest are in particular the documents about SAVI for SLAAC- and DHCP-assigned IP addresses. After our recent decision to develop separate specifications for SLAAC- and DHCP-assigned IP addresses, we now have to decide with which documents to proceed. This requires that everyone has read the relevant documents. Noteworthy also: If you have read the documents and have comments, please don't wait until the working group meeting before you speak up. Do it already here on the mailing list. - Christian [1] http://www.ietf.org/proceedings/09nov/agenda/savi.txt From elevyabe@cisco.com Wed Nov 4 05:27:50 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DFECA3A68C9 for ; Wed, 4 Nov 2009 05:27:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.868 X-Spam-Level: X-Spam-Status: No, score=-6.868 tagged_above=-999 required=5 tests=[AWL=-2.070, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_21=0.6, J_CHICKENPOX_44=0.6, J_CHICKENPOX_73=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2JS+9zsP8+Qi for ; Wed, 4 Nov 2009 05:27:46 -0800 (PST) Received: from sj-iport-2.cisco.com (sj-iport-2.cisco.com [171.71.176.71]) by core3.amsl.com (Postfix) with ESMTP id 4A1BC3A67A7 for ; Wed, 4 Nov 2009 05:27:46 -0800 (PST) Authentication-Results: sj-iport-2.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AhwFAGsQ8UqrR7Ht/2dsb2JhbACCJC2CIcBPhwwIkRuDZlcEgWWKCQ X-IronPort-AV: E=Sophos;i="4.44,680,1249257600"; d="scan'208,217";a="221091932" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-2.cisco.com with ESMTP; 04 Nov 2009 13:28:07 +0000 Received: from xbh-ams-101.cisco.com (xbh-ams-101.cisco.com [144.254.74.71]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA4DS1QU019856; Wed, 4 Nov 2009 13:28:07 GMT Received: from xmb-ams-105.cisco.com ([144.254.74.80]) by xbh-ams-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 4 Nov 2009 14:28:06 +0100 Received: from [144.254.53.124] ([144.254.53.124]) by xmb-ams-105.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 4 Nov 2009 14:28:06 +0100 Message-ID: <4AF18166.3070206@cisco.com> Date: Wed, 04 Nov 2009 14:28:06 +0100 From: Eric Levy-Abegnoli User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Bi Jun References: <0AC38B235E5F49AA922FC02151234C9C@junbiVAIO> In-Reply-To: <0AC38B235E5F49AA922FC02151234C9C@junbiVAIO> Content-Type: multipart/alternative; boundary="------------060304090300080704060407" X-OriginalArrivalTime: 04 Nov 2009 13:28:06.0334 (UTC) FILETIME=[A493EDE0:01CA5D52] Cc: 'SAVI Mailing List' Subject: Re: [savi] IETF SAVI SLAAC X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Nov 2009 13:27:51 -0000 This is a multi-part message in MIME format. --------------060304090300080704060407 Content-Type: text/plain; charset=GB2312 Content-Transfer-Encoding: 8bit Jun bi, "some" comments inline ... Eric Bi Jun a ¨¦crit: > > Dear Erik£¬Marcelo, and Eric, > > Below is our revision suggestion towards final draft-ietf-slaac-00. > Thanks, > Jun Bi > > Amerge proposal based on FCFS-02 and slaac-cps-00(as attachments): > > Basic frame: FCFS-02. > > 1. Sections to Add > > 1.1 Add a section for IPv4(Section 10.1.2 in slaac-cps may contribute) > > Add a section to handle IPv4 address using the similar mechanism. This > section specifies the procedure to set up binding for manually > configured(but not static) IPv4 address, as described in [RFC5227]. > > This mechanism can handle the situation in which users can configure > their address manually so long as the address belongs to an allowed > prefix. > > This situation is different from that any interface can only configure > a fixed address, and manually configuration on the SAVI device > wouldn¡¯t handle it. > > 1.2 Add a port type: host port, as a complement of port-validation > > For a port directly attached to a single host, mechanism mainly based > on control packet snooping(Section 10.1.1 in slaac-cps may contribute) > would be more lightweight and secure. > > As described in RFC4862, DAD must be performed before assigning any > address. It¡¯s the reasonability basis of control packet snooping only. > For a savi-host port, it is rarely necessary for the savi device to > trigger a detection on behavior of the attached host, unless in the > case that detection packets are got lost(with an extremely little > possibility). > > In slaac-cps00, the savi device should snoop a wide scope of control > packet, to avoid dropping valid packet as much as possible. Will a > host send data packet directly without performing any resolution? > > Even in an extreme bad situation, the savi device can send probes > whenever a new address appears(but this function is turned off by > default.). Although this seems the same as FCFS, there is a benefit > the savi device can control the rate to prevent DoS attack. > I thought we already had this discussion. There are clearly cases where the switch is going to miss DAD packets. **As an example** when the spanning tree is being calculated (learning state), packets an't bridged but drop. So unless you configure your switch otherwise, it is fairly common that the first minute of forwarding is lost. And that includes DAD packets. So it is a must to handle that situation, and the proposal we discussed in Stockholm was to poll the source of a data packet (DAD NS) to learn the binding **from a control message**. It's not worse than an address resolution performed on a router in the other direction. Except that in the savi case, the switch would not be required to keep the original packet. Maybe I am missing your point. Are you proposing to make that behavior optional? Then you would surely break those cases on missed DAD messages, wouldn't you? > > The security aspect: > > (1) A clear entry number limit can be set for each host and avoid > binding entry exhaustion.(This limit can never be set on a port > accessed by a number of hosts.) > The limit should be per-anchor. I have no issue with that. Actually, I remember I brought that up to the list some time ago. As long as it is not the "primary" security mechanism. Because, as such, it is very poor. Any limit per anchor (mac, port, etc). protect the device, but weaken same-anchor-users. For instance, if you put a limit per mac, then an attacker could get you to this limit, and prevent other legitimate users to install an entry for this mac. > (2) A rate limit of sending probes can be set to avoid DoS. (This > limit cannot be set on other types of ports, either.) > I think that is briefly mentionned in the current draft in section 4.2.2 > > (3) A more strict filtering policy(e.g., default dropping) can be set > on such port, to stop one packet attack and DoS against the savi > device itself. (Default dropping policy cannot be set on other kinds > of ports.) > > (4) A host level granularity trace ability can be enabled. > > 1.3 Add a section to specify the procedure of check a packet(Section > 12 in slaac-cps can contribute). > Similar considerations can be found in section 2.4 of the current document. > > 1.4 Add a section to specify the procedure to remove a binding(Section > 11 in slaac-cps can contribute). > The move scenario is described in section 2.3. The delete scenario is not described (and is probably worse discussing here) but the consensus was "on-demand garbage collection at the time the SAVI device runs out of memory". > 1.5 Add a section to clearly specify the details on special > situations(Section 13,14,15 in slaac-cps can contribute). > I think there is generally good stuff there. With a lot of question marks. Certainly worth discussing on the list. > > 1.6 Add a section to specify the related constants, especially the > time related constants, e.g, TENT_LT. > > 2. Sections to be moved to framework > > 2.1, 2.2, 2.4, 2.5 > > These sections are great analysis work on SAVI solutions in common. > They should be moved to savi-framework or another informational draft > for clarity. > > 3. Open issues: > > 3.1 Whether to build a perimeter based on SAVI functions? > > Benefits: > > 1. An attacker cannot spoof any address in SAVI area; > > 2. Spoofing packets will be dropped on reaching the perimeter; > > 3. Spoofing packets from non-SAVI area will be filtered at a ¡°anchor¡± > level. > > Cost: > > 1. Control plane cost: A SAVI device will potentially keep a record of > all the addresses on the link. It is unconvinced that the storage > distribution mechanism will work indeed. More details of this > mechanism should be specified. > > 2. Additional communication cost: using NDP as a BDP to distribute > bindings; > > 3. Data plane cost: whenever check a packet, the SAVI device must go > through an extremely huge deny list. > > Possible error: > > 1. Whether is it reasonable to set up bindings for hosts out of SAVI > area based on FCFS? > > -The owner of an address is never necessary to send a packet first to > the SAVI area. Then another host can set up a binding before it and > make the perimeter to drop the traffic of the address owner. > > Alterative: > > Make it an optional function, or use mature techniques: > > -Separate the prefix scope of SAVI area and non-SAVI area. Using > ingress filter the perform prefix level check. > > This is sure to work. > > ------------------------------------------------------------------------ > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi --------------060304090300080704060407 Content-Type: text/html; charset=GB2312 Content-Transfer-Encoding: 8bit Jun bi,
"some" comments inline ...
Eric

Bi Jun a ¨¦crit :

Dear Erik£¬Marcelo, and Eric,

Below is our revision suggestion towards final draft-ietf-slaac-00.
Thanks,
Jun Bi

A merge proposal based on FCFS-02 and slaac-cps-00(as attachments):

 

Basic frame: FCFS-02.

 

1.       Sections to Add

 

1.1   Add a section for IPv4(Section 10.1.2 in slaac-cps may contribute)

 

Add a section to handle IPv4 address using the similar mechanism. This section specifies the procedure to set up binding for manually configured(but not static) IPv4 address, as described in [RFC5227].

This mechanism can handle the situation in which users can configure their address manually so long as the address belongs to an allowed prefix.

This situation is different from that any interface can only configure a fixed address, and manually configuration on the SAVI device wouldn¡¯t handle it.

 

1.2   Add a port type: host port, as a complement of port-validation

 

For a port directly attached to a single host, mechanism mainly based on control packet snooping(Section 10.1.1 in slaac-cps may contribute) would be more lightweight and secure.

 

As described in RFC4862, DAD must be performed before assigning any address. It¡¯s the reasonability basis of control packet snooping only. For a savi-host port, it is rarely necessary for the savi device to trigger a detection on behavior of the attached host, unless in the case that detection packets are got lost(with an extremely little possibility).

In slaac-cps00, the savi device should snoop a wide scope of control packet, to avoid dropping valid packet as much as possible. Will a host send data packet directly without performing any resolution?

Even in an extreme bad situation, the savi device can send probes whenever a new address appears(but this function is turned off by default.). Although this seems the same as FCFS, there is a benefit the savi device can control the rate to prevent DoS attack.

I thought we already had this discussion. There are clearly cases where the switch is going to miss DAD packets.  **As an example** when the spanning tree is being calculated (learning state), packets an't bridged but drop. So unless you configure your switch otherwise, it is fairly common that the first minute of forwarding is lost. And that includes DAD packets.
So it is a must to handle that situation, and the proposal we discussed in Stockholm was to poll the source of a data packet (DAD NS) to learn the binding **from a control message**.
It's not worse than an address resolution performed on a router in the other direction. Except that in the savi case, the switch would not be required to keep the original packet.
Maybe I am missing your point. Are you proposing to make that behavior optional? Then you would surely break those cases on missed DAD messages, wouldn't you?

 

The security aspect:

(1) A clear entry number limit can be set for each host and avoid binding entry exhaustion.(This limit can never be set on a port accessed by a number of hosts.)

The limit should be per-anchor. I have no issue with that. Actually, I remember I brought that up to the list some time ago. As long as it is not the "primary" security mechanism. Because, as such, it is very poor. Any limit per anchor (mac, port, etc). protect the device, but weaken same-anchor-users.  For instance, if you put a limit per mac, then an attacker could get you to this limit, and prevent other legitimate users  to install an entry for this mac.

(2) A rate limit of sending probes can be set to avoid DoS. (This limit cannot be set on other types of ports, either.)

I think that is briefly mentionned in the current draft in section 4.2.2

(3) A more strict filtering policy(e.g., default dropping) can be set on such port, to stop one packet attack and DoS against the savi device itself. (Default dropping policy cannot be set on other kinds of ports.)

(4) A host level granularity trace ability can be enabled.

 

1.3   Add a section to specify the procedure of check a packet(Section 12 in slaac-cps can contribute).

Similar considerations can be found in section 2.4 of the current document.

1.4   Add a section to specify the procedure to remove a binding(Section 11 in slaac-cps can contribute).    

The move scenario is described in section 2.3.
The delete scenario is not described (and is probably worse discussing here) but the consensus was "on-demand garbage collection at the time the SAVI device runs out of memory".
 

1.5   Add a section to clearly specify the details on special situations(Section 13,14,15 in slaac-cps can contribute).

I think there is generally good stuff there. With a lot of question marks. Certainly worth discussing on the list.

1.6   Add a section to specify the related constants, especially the time related constants, e.g, TENT_LT.

 

2.       Sections to be moved to framework

 

2.1, 2.2, 2.4, 2.5

These sections are great analysis work on SAVI solutions in common. They should be moved to savi-framework or another informational draft for clarity.

 

3.       Open issues:

 

3.1   Whether to build a perimeter based on SAVI functions?

Benefits:

1. An attacker cannot spoof any address in SAVI area;

         2. Spoofing packets will be dropped on reaching the perimeter;

         3. Spoofing packets from non-SAVI area will be filtered at a ¡°anchor¡± level.

Cost:

1.       Control plane cost: A SAVI device will potentially keep a record of all the addresses on the link. It is unconvinced that the storage distribution mechanism will work indeed. More details of this mechanism should be specified.

2.       Additional communication cost: using NDP as a BDP to distribute bindings;

3.       Data plane cost: whenever check a packet, the SAVI device must go through an extremely huge deny list.

Possible error:

1.       Whether is it reasonable to set up bindings for hosts out of SAVI area based on FCFS?

-The owner of an address is never necessary to send a packet first to the SAVI area. Then another host can set up a binding before it and make the perimeter to drop the traffic of the address owner.

 

Alterative:

              Make it an optional function, or use mature techniques:

              -Separate the prefix scope of SAVI area and non-SAVI area. Using ingress filter the perform prefix level check.

           This is sure to work.


_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi

--------------060304090300080704060407-- From yaoa02@mails.tsinghua.edu.cn Wed Nov 4 07:10:02 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1698D3A68A2 for ; Wed, 4 Nov 2009 07:10:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.739 X-Spam-Level: X-Spam-Status: No, score=-0.739 tagged_above=-999 required=5 tests=[BAYES_20=-0.74, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vMJJPmDeuyxS for ; Wed, 4 Nov 2009 07:09:58 -0800 (PST) Received: from smtp.tsinghua.edu.cn (smtp.tsinghua.edu.cn [166.111.8.80]) by core3.amsl.com (Postfix) with ESMTP id 4F6933A6890 for ; Wed, 4 Nov 2009 07:09:56 -0800 (PST) Received: from th211024.ip.tsinghua.edu.cn ([59.66.211.24] helo=yaoguangPC) by smtp.tsinghua.edu.cn with esmtpa (Exim 4.69) (envelope-from ) id 1N5hUv-0002t0-9i; Wed, 04 Nov 2009 23:10:09 +0800 From: "Guang Yao" To: "'Eric Levy-Abegnoli'" References: <0AC38B235E5F49AA922FC02151234C9C@junbiVAIO> <4AF18166.3070206@cisco.com> In-Reply-To: <4AF18166.3070206@cisco.com> Date: Wed, 4 Nov 2009 23:10:08 +0800 Message-ID: <000b01ca5d60$e57a94e0$b06fbea0$@tsinghua.edu.cn> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_000C_01CA5DA3.F39DD4E0" X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcpdUq1Ru82Mwn2sTJ2jX4oh14q1nAACfXMA Content-Language: zh-cn Cc: 'SAVI Mailing List' Subject: Re: [savi] IETF SAVI SLAAC X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Nov 2009 15:10:02 -0000 This is a multi-part message in MIME format. ------=_NextPart_000_000C_01CA5DA3.F39DD4E0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Eric, Please refer to the inline comment. Best regards, Guang (2) A rate limit of sending probes can be set to avoid DoS. (This limit cannot be set on other types of ports, either.) I think that is briefly mentionned in the current draft in section 4.2.2 [Guang Yao] I don't think limiting NSOL rate is a good solution. There may be a burst of new addresses from the port attached to a number of hosts. It's hard to recognize this situation from DoS attack. Although limiting the rate will not cause binding missing, bad user experience will be resulted in. 1.3 Add a section to specify the procedure of check a packet(Section 12 in slaac-cps can contribute). Similar considerations can be found in section 2.4 of the current document. [Guang Yao] I read the doc again and found them. I suggest to separate the state transit description and forward-or-discard specification, just for clarity. I found two things dubious: 1. Traffic will be stored when DAD is not finished. Would it cause a long queue or some kind of DoS? 2. Why probes are not sent to Trust port? There may be a host using the tentative address attached to one of the SAVI neighbors. ------=_NextPart_000_000C_01CA5DA3.F39DD4E0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Eric,

 

Please refer to the inline comment.

 

Best regards,

Guang

 

(2) A rate limit of sending = probes can be set to avoid DoS. (This limit cannot be set on other types of = ports, either.)

I think that is briefly = mentionned in the current draft in section 4.2.2
 

[Guang Yao] =

I don’t think limiting NSOL = rate is a good solution. There may be a burst of new addresses from the port = attached to a number of hosts. It’s hard to recognize this situation from DoS = attack. Although limiting the rate will not cause binding missing, bad user = experience will be resulted in.

1.3   Add a section to specify the procedure of check a packet(Section 12 in = slaac-cps can contribute).

Similar considerations can be = found in section 2.4 of the current document.

[Guang Yao] =

I read the doc again and found = them. I suggest to separate the state transit description and forward-or-discard specification, just for clarity.

 

I found two things = dubious:

1.       Traffic will be stored = when DAD is not finished. Would it cause a long queue or some kind of DoS? =

2.       Why probes are not = sent to Trust port? There may be a host using the tentative address attached to = one of the SAVI neighbors.

 

------=_NextPart_000_000C_01CA5DA3.F39DD4E0-- From junbi@tsinghua.edu.cn Wed Nov 4 07:20:02 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1D4AD3A68A2 for ; Wed, 4 Nov 2009 07:20:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.697 X-Spam-Level: X-Spam-Status: No, score=0.697 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, DNS_FROM_RFC_DSN=1.495, HTML_MESSAGE=0.001, J_CHICKENPOX_21=0.6, J_CHICKENPOX_44=0.6, J_CHICKENPOX_73=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9RDAlfd+lyAN for ; Wed, 4 Nov 2009 07:20:00 -0800 (PST) Received: from smtp.tsinghua.edu.cn (smtp.tsinghua.edu.cn [166.111.8.81]) by core3.amsl.com (Postfix) with ESMTP id E82FA3A67FD for ; Wed, 4 Nov 2009 07:19:57 -0800 (PST) Received: from th053200.ip.tsinghua.edu.cn ([59.66.53.200] helo=junbiVAIO) by smtp.tsinghua.edu.cn with esmtpa (Exim 4.69) (envelope-from ) id 1N5heh-0003Cv-GZ; Wed, 04 Nov 2009 23:20:15 +0800 Message-ID: <4AD6EEC3844C42D68F52B3047FB04D51@junbiVAIO> From: "Jun Bi" To: "Eric Levy-Abegnoli" References: <0AC38B235E5F49AA922FC02151234C9C@junbiVAIO> <4AF18166.3070206@cisco.com> In-Reply-To: <4AF18166.3070206@cisco.com> Date: Wed, 4 Nov 2009 23:20:19 +0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00B6_01CA5DA5.5FD1C350" X-Priority: 3 X-MSMail-Priority: Normal Importance: Normal X-Mailer: Microsoft Windows Live Mail 14.0.8064.206 X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8064.206 Cc: 'SAVI Mailing List' Subject: Re: [savi] IETF SAVI SLAAC X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Nov 2009 15:20:02 -0000 ÕâÊÇÒ»·â MIME ¸ñʽµÄ¶à·½Óʼþ¡£ ------=_NextPart_000_00B6_01CA5DA5.5FD1C350 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: quoted-printable Dear Eric,=20 Thank you very much for review comments. Before answering your question, I'd like to clearly our proposal in = short: 1 Have the port type definition. From the requirement, I believe the = SAVI-host port (A host is directly attached to a switch port, no port = sharing)=20 is very necessary (for example an operator like CERNET), because 1) the security (using physical port as the anchor is the most secure = we can achieve in lightweight),=20 2) management (host granular tracing back),=20 3) and billing reasons (to precisely billing to the single source = address. Certainly, to define such a port type could be in either the solution = document or framework document. 2 For the SAVI-host port, the mechanism (actually mixed CPS and FCFS) is = the best choice I believe. 1) For "normal case", the data packet is expected to come to the switch = port later than control packets (as we observed=20 in our experiments). The switch could run CPS mode by just listening the = DAD procedure completion, then setting up the binding.=20 It's more light weight and secure. Because the number of control packets = are smaller than data packets (might in line rate of 1G, even 10Gbps),=20 then the burden brought to the switch is lower than FCFS (the DAD-NS = probe, a CPU action, is triggered by any source address-unbound=20 data packets, which is a normal case when the host using multiple = addresses). Can we store the packets with source address being verified = in the switch when the switch sending out DAD-NS probe? If yes, there is = another burden. If no but forwarding, then the single-packet attack can = not be traced back. If no but dropping, the switch may drop lots of = legitimate user packets during the DAD-NS probe procedure. Moreover, the result of FCFS is unknown yet, but the first hop CPS is = already proved working with the prosody and experiments in = Tsinghua/CERNET. (2) For "special case", where the DAD-NS is lost in the link between = SAVI port and the host (which is very low possibility=20 as Fred Baker analyzed), FCFS mode is a way to recover the state = (sending probe for source address-unbound packets).=20 Because this is a low possibility case, then the cost and security = threaten is not eliminated. 3 For a port type that SAVI switch connected to a nonSAVI switch (hub) = (the port is shared by multiple hosts, we call it=20 SAVI-ploy port), FCFS mode is OK, If an operator wants it (without = strictly host-granularity requirement). So it's better to keep two modes for different port types. What we = proposed is that some section addressed some=20 problems, but still need some details, where we can contribute to those = sections with the text in our draft. My other replies are in line below. Thank you once again! Best Regards, Jun Bi From: Eric Levy-Abegnoli=20 Sent: Wednesday, November 04, 2009 9:28 PM To: Bi Jun=20 Cc: 'SAVI Mailing List'=20 Subject: Re: [savi] IETF SAVI SLAAC Jun bi, "some" comments inline ... Eric Bi Jun a =A8=A6crit :=20 Dear Erik=A3=ACMarcelo, and Eric, Below is our revision suggestion towards final draft-ietf-slaac-00. Thanks, Jun Bi A merge proposal based on FCFS-02 and slaac-cps-00(as attachments): =20 Basic frame: FCFS-02. =20 1. Sections to Add =20 1.1 Add a section for IPv4(Section 10.1.2 in slaac-cps may = contribute) =20 Add a section to handle IPv4 address using the similar mechanism. This = section specifies the procedure to set up binding for manually = configured(but not static) IPv4 address, as described in [RFC5227].=20 This mechanism can handle the situation in which users can configure = their address manually so long as the address belongs to an allowed = prefix. This situation is different from that any interface can only configure = a fixed address, and manually configuration on the SAVI device = wouldn=A1=AFt handle it. =20 1.2 Add a port type: host port, as a complement of port-validation =20 For a port directly attached to a single host, mechanism mainly based = on control packet snooping(Section 10.1.1 in slaac-cps may contribute) = would be more lightweight and secure. =20 As described in RFC4862, DAD must be performed before assigning any = address. It=A1=AFs the reasonability basis of control packet snooping = only. For a savi-host port, it is rarely necessary for the savi device = to trigger a detection on behavior of the attached host, unless in the = case that detection packets are got lost(with an extremely little = possibility). In slaac-cps00, the savi device should snoop a wide scope of control = packet, to avoid dropping valid packet as much as possible. Will a host = send data packet directly without performing any resolution? Even in an extreme bad situation, the savi device can send probes = whenever a new address appears(but this function is turned off by = default.). Although this seems the same as FCFS, there is a benefit the = savi device can control the rate to prevent DoS attack. I thought we already had this discussion. There are clearly cases where = the switch is going to miss DAD packets. **As an example** when the = spanning tree is being calculated (learning state), packets an't bridged = but drop. So unless you configure your switch otherwise, it is fairly = common that the first minute of forwarding is lost. And that includes = DAD packets.=20 So it is a must to handle that situation, and the proposal we discussed = in Stockholm was to poll the source of a data packet (DAD NS) to learn = the binding **from a control message**.=20 It's not worse than an address resolution performed on a router in the = other direction. Except that in the savi case, the switch would not be = required to keep the original packet. Maybe I am missing your point. Are you proposing to make that behavior = optional? Then you would surely break those cases on missed DAD = messages, wouldn't you? =20 BJ: if the DAD is not lost in the link between SAVI switch-host port = and the host, then the switch already receives the DAD-NS. Then based on = CPS-SLAAC, no mater the DAD-NS is forwarded or not, the binding is set = up, right? The security aspect: (1) A clear entry number limit can be set for each host and avoid = binding entry exhaustion.(This limit can never be set on a port accessed = by a number of hosts.) The limit should be per-anchor. I have no issue with that. Actually, I = remember I brought that up to the list some time ago. As long as it is = not the "primary" security mechanism. Because, as such, it is very poor. = Any limit per anchor (mac, port, etc). protect the device, but weaken = same-anchor-users. For instance, if you put a limit per mac, then an = attacker could get you to this limit, and prevent other legitimate users = to install an entry for this mac.=20 BJ: what we proposed above is the mechanism for strict = security case only -- for the SAVI-host port. The port is only bound = with ONE host.=20 There is not anchor sharing in this case. So it's = reasonable to limit the host if it performs bad. =20 (2) A rate limit of sending probes can be set to avoid DoS. (This = limit cannot be set on other types of ports, either.) I think that is briefly mentionned in the current draft in section 4.2.2 (3) A more strict filtering policy(e.g., default dropping) can be set = on such port, to stop one packet attack and DoS against the savi device = itself. (Default dropping policy cannot be set on other kinds of ports.) (4) A host level granularity trace ability can be enabled. =20 1.3 Add a section to specify the procedure of check a packet(Section = 12 in slaac-cps can contribute). Similar considerations can be found in section 2.4 of the current = document.=20 1.4 Add a section to specify the procedure to remove a = binding(Section 11 in slaac-cps can contribute). =20 The move scenario is described in section 2.3.=20 The delete scenario is not described (and is probably worse discussing = here) but the consensus was "on-demand garbage collection at the time = the SAVI device runs out of memory".=20 =20 1.5 Add a section to clearly specify the details on special = situations(Section 13,14,15 in slaac-cps can contribute). I think there is generally good stuff there. With a lot of question = marks. Certainly worth discussing on the list. 1.6 Add a section to specify the related constants, especially the = time related constants, e.g, TENT_LT. =20 2. Sections to be moved to framework =20 2.1, 2.2, 2.4, 2.5 These sections are great analysis work on SAVI solutions in common. = They should be moved to savi-framework or another informational draft = for clarity. =20 3. Open issues: =20 3.1 Whether to build a perimeter based on SAVI functions? Benefits:=20 1. An attacker cannot spoof any address in SAVI area; 2. Spoofing packets will be dropped on reaching the = perimeter; 3. Spoofing packets from non-SAVI area will be filtered at a = =A1=B0anchor=A1=B1 level. Cost: 1. Control plane cost: A SAVI device will potentially keep a = record of all the addresses on the link. It is unconvinced that the = storage distribution mechanism will work indeed. More details of this = mechanism should be specified. 2. Additional communication cost: using NDP as a BDP to = distribute bindings; 3. Data plane cost: whenever check a packet, the SAVI device = must go through an extremely huge deny list. Possible error: 1. Whether is it reasonable to set up bindings for hosts out of = SAVI area based on FCFS? -The owner of an address is never necessary to send a packet first to = the SAVI area. Then another host can set up a binding before it and make = the perimeter to drop the traffic of the address owner. =20 Alterative:=20 Make it an optional function, or use mature techniques: -Separate the prefix scope of SAVI area and non-SAVI = area. Using ingress filter the perform prefix level check. This is sure to work. -------------------------------------------------------------------------= ----- _______________________________________________ savi mailing list savi@ietf.org https://www.ietf.org/mailman/listinfo/savi -------------------------------------------------------------------------= ------- _______________________________________________ savi mailing list savi@ietf.org https://www.ietf.org/mailman/listinfo/savi ------=_NextPart_000_00B6_01CA5DA5.5FD1C350 Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable
Dear Eric,
 
Thank you very much for review = comments.
 
Before answering your question, I'd like to = clearly=20 our proposal in short:
1 Have the port type definition. From the = requirement, I=20 believe the SAVI-host port (A host is directly attached to a switch = port,=20 no port sharing)
is very necessary (for example an operator = like CERNET),=20 because
1)  the security (using physical port as = the anchor=20 is the most secure we can achieve in lightweight),
2) management (host granular tracing back),=20
3) and billing reasons (to precisely billing = to the=20 single source address.
Certainly, to define such a port type could be = in either=20 the solution document or framework document.
 
2 For the SAVI-host port, the mechanism = (actually mixed=20 CPS and FCFS) is the best choice I believe.
1) For "normal case", the data packet is = expected to=20 come to the switch port later than control packets (as we observed =
in our experiments). The=20 switch could run CPS mode by just listening the DAD procedure = completion, then=20 setting up the binding.
It's more light weight and = secure. Because the number of control packets are smaller than = data packets=20 (might in line rate of 1G, even 10Gbps),
then the burden brought to the switch is lower = than FCFS=20 (the DAD-NS probe, a CPU action, is triggered by any source = address-unbound=20
data packets, which is a normal case when the = host using=20 multiple addresses). Can we store the packets with source address being=20 verified in
 the switch when the switch sending out = DAD-NS=20 probe? If yes, there is another burden. If = no but=20 forwarding, then the single-packet attack can not be traced back. If no = but=20 dropping, the switch may drop lots of legitimate user packets during the = DAD-NS=20 probe procedure.
Moreover, the result of FCFS is unknown yet, = but the=20 first hop CPS is already proved working with the prosody and experiments = in=20 Tsinghua/CERNET.
 (2) For = "special case",=20 where the DAD-NS is lost in the link between SAVI port and the host = (which is=20 very low possibility
as Fred Baker analyzed), FCFS mode is a way to = recover=20 the state (sending probe for source address-unbound packets). =
Because this is a low possibility case, then = the cost=20 and security threaten is not eliminated.
 
3 For a port type that SAVI switch = connected to a=20 nonSAVI switch (hub)  (the port is shared by multiple hosts, we = call it=20
SAVI-ploy port), FCFS mode is OK, If an = operator wants=20 it (without strictly host-granularity requirement).
So it's better to keep two modes for different = port=20 types. What we proposed is that some section addressed some =
problems, but still need some details, where = we can=20 contribute to those sections with the text in our draft.
 
My other replies are in line = below.
 
Thank you once again!
 
Best Regards,
Jun Bi
 
 
 

From: Eric Levy-Abegnoli
Sent: Wednesday, November 04, 2009 9:28 PM
To: Bi Jun
Subject: Re: [savi] IETF SAVI SLAAC

Jun bi,
"some" comments inline ...
Eric

Bi = Jun a=20 =A8=A6crit :=20

Dear Erik=A3=ACMarcelo, and = Eric,

Below=20 is our revision suggestion towards final = draft-ietf-slaac-00.
Thanks,
Jun Bi

A merge proposal based on = FCFS-02 and=20 slaac-cps-00(as attachments):

 

Basic frame:=20 FCFS-02.

 

1.      =20 Sections to = Add

 

1.1  =20 Add a section for IPv4(Section = 10.1.2 in=20 slaac-cps may contribute)

 

Add a section to handle IPv4 address using the similar = mechanism.=20 This section specifies the procedure to set up binding for manually=20 configured(but not static) IPv4 address, as described in [RFC5227].=20

This mechanism can handle the situation in which users = can=20 configure their address manually so long as the address belongs to an = allowed=20 prefix.

This situation is different from that any interface can = only=20 configure a fixed address, and manually configuration on the SAVI = device=20 wouldn=A1=AFt handle it.

 

1.2  =20 Add a port type: host port, as = a=20 complement of port-validation

 

For a port directly attached to a single host, mechanism = mainly=20 based on control packet snooping(Section 10.1.1 in slaac-cps may = contribute)=20 would be more lightweight and secure.

 

As described in RFC4862, DAD must be performed before = assigning any=20 address. It=A1=AFs the reasonability basis of control packet snooping = only. For a=20 savi-host port, it is rarely necessary for the savi device to trigger = a=20 detection on behavior of the attached host, unless in the case that = detection=20 packets are got lost(with an extremely little=20 possibility).

In slaac-cps00, the savi device should snoop a wide scope = of=20 control packet, to avoid dropping valid packet as much as possible. = Will a=20 host send data packet directly without performing any=20 resolution?

Even in an extreme bad situation, the savi device can = send probes=20 whenever a new address appears(but this function is turned off by = default.).=20 Although this seems the same as FCFS, there is a benefit the savi = device can=20 control the rate to prevent DoS = attack.

I thought we already had this discussion. There are clearly cases = where the=20 switch is going to miss DAD packets.  **As an example** when the = spanning=20 tree is being calculated (learning state), packets an't bridged but = drop. So=20 unless you configure your switch otherwise, it is fairly common that the = first=20 minute of forwarding is lost. And that includes DAD packets.
So it = is a must=20 to handle that situation, and the proposal we discussed in Stockholm was = to poll=20 the source of a data packet (DAD NS) to learn the binding **from a = control=20 message**.
It's not worse than an address resolution performed on a = router=20 in the other direction. Except that in the savi case, the switch would = not be=20 required to keep the original packet.
Maybe I am missing your point. = Are you=20 proposing to make that behavior optional? Then you would surely break = those=20 cases on missed DAD messages, wouldn't you?

 

 BJ:  if the DAD is not lost in the link = between=20 SAVI switch-host port and the host, then the switch already receives = the=20 DAD-NS. Then based on CPS-SLAAC, no mater the DAD-NS is forwarded or = not, the=20 binding is set up, right?

 

The security aspect:

(1) A clear entry number limit can be set for each host = and avoid=20 binding entry exhaustion.(This limit can never be set on a port = accessed by a=20 number of hosts.)

The limit should be per-anchor. I have no issue with that. = Actually, I=20 remember I brought that up to the list some time ago. As long as it is = not the=20 "primary" security mechanism. Because, as such, it is very poor. Any = limit per=20 anchor (mac, port, etc). protect the device, but weaken = same-anchor-users. =20 For instance, if you put a limit per mac, then an attacker could get you = to this=20 limit, and prevent other legitimate users  to install an entry for = this=20 mac.
 
 
 
 
         &nbs= p;      =20 BJ: what we proposed above is the mechanism for strict security = case only=20 -- for the SAVI-host port. The port is only bound with ONE host. =
         &nbs= p;       =20 There is not anchor sharing in this case. So it's reasonable to limit = the host=20 if it performs bad.

 
 
 

(2) A rate limit of sending probes can be set to avoid = DoS. (This=20 limit cannot be set on other types of ports,=20 either.)

I think that is briefly = mentionned=20 in the current draft in section 4.2.2

(3) A more strict filtering policy(e.g., default = dropping) can be=20 set on such port, to stop one packet attack and DoS against the savi = device=20 itself. (Default dropping policy cannot be set on other kinds of=20 ports.)

(4) A host level granularity trace ability can be=20 enabled.

 

1.3  =20 Add a section to specify the = procedure=20 of check a packet(Section 12 in slaac-cps can=20 contribute).

Similar = considerations can be=20 found in section 2.4 of the current document.

1.4  =20 Add a section to specify the = procedure=20 to remove a binding(Section 11 in slaac-cps can = contribute).  =20  

The move scenario is = described=20 in section 2.3.
The delete scenario is not described (and is = probably worse=20 discussing here) but the consensus was "on-demand garbage collection at = the time=20 the SAVI device runs out of memory".
 

1.5  =20 Add a section to clearly = specify the=20 details on special situations(Section 13,14,15 in slaac-cps can=20 contribute).

I think there is = generally good=20 stuff there. With a lot of question marks. Certainly worth discussing on = the=20 list.

1.6  =20 Add a section to specify the = related=20 constants, especially the time related constants, e.g,=20 TENT_LT.

 

2.      =20 Sections to be moved to=20 framework

 

2.1, 2.2, 2.4, = 2.5

These sections are great = analysis work on=20 SAVI solutions in common. They should be moved to savi-framework or = another=20 informational draft for clarity.

 

3.      =20 Open = issues:

 

3.1  =20 Whether to build a perimeter = based on=20 SAVI functions?

Benefits:

1. An attacker = cannot spoof any=20 address in SAVI area;

         2. = Spoofing=20 packets will be dropped on reaching the = perimeter;

         3. = Spoofing=20 packets from non-SAVI area will be filtered at a =A1=B0anchor=A1=B1=20 level.

Cost:

1.      =20 Control plane cost: A SAVI = device will=20 potentially keep a record of all the addresses on the link. It is = unconvinced=20 that the storage distribution mechanism will work indeed. More details = of this=20 mechanism should be specified.

2.      =20 Additional communication cost: = using NDP=20 as a BDP to distribute bindings;

3.      =20 Data plane cost: whenever = check a=20 packet, the SAVI device must go through an extremely huge deny=20 list.

Possible error:

1.      =20 Whether is it reasonable to = set up=20 bindings for hosts out of SAVI area based on = FCFS?

-The owner of an address is never = necessary to=20 send a packet first to the SAVI area. Then another host can set up a = binding=20 before it and make the perimeter to drop the traffic of the address=20 owner.

 

Alterative:

          =  =20   Make it an optional function, or use mature=20 techniques:

          =  =20   -Separate the prefix scope of SAVI area and non-SAVI area. = Using=20 ingress filter the perform prefix level check.

          = This=20 is sure to work.


_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/=
mailman/listinfo/savi

_______________________________________________
savi mailing=20 list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi
------=_NextPart_000_00B6_01CA5DA5.5FD1C350-- From lint@h3c.com Thu Nov 5 00:31:27 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0748828C1A1 for ; Thu, 5 Nov 2009 00:31:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 3.483 X-Spam-Level: *** X-Spam-Status: No, score=3.483 tagged_above=-999 required=5 tests=[AWL=0.384, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, J_CHICKENPOX_21=0.6, J_CHICKENPOX_44=0.6, J_CHICKENPOX_73=0.6, MIME_BASE64_BLANKS=0.041, MIME_BASE64_TEXT=1.753, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iTk9F0MYI5Km for ; Thu, 5 Nov 2009 00:31:25 -0800 (PST) Received: from huawei-3com.com (unknown [60.191.123.56]) by core3.amsl.com (Postfix) with ESMTP id 5ABE328C1A5 for ; Thu, 5 Nov 2009 00:31:23 -0800 (PST) Received: from huawei-3com.com (localhost [127.0.0.1]) by h3cml02-in.huawei-3com.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0KSM00F5YO28L3@h3cml02-in.huawei-3com.com> for savi@ietf.org; Thu, 05 Nov 2009 16:39:44 +0800 (CST) Received: from h3cmta02-ds.h3c.com ([172.25.12.70]) by h3cml02-in.huawei-3com.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0KSM00G1YO27L0@h3cml02-in.huawei-3com.com> for savi@ietf.org; Thu, 05 Nov 2009 16:39:44 +0800 (CST) Received: from smtp2.h3c.com ([172.25.14.252]) by h3cmta02-ds.h3c.com (Lotus Domino Release 8.5FP1) with ESMTP id 2009110516265193-587987 ; Thu, 05 Nov 2009 16:26:51 +0800 Received: from unknown (HELO l00450) ([10.153.17.51]) by smtp2.h3c.com with ESMTP; Thu, 05 Nov 2009 16:28:25 +0800 Date: Thu, 05 Nov 2009 16:29:23 +0800 From: Lin Tao To: Jun Bi , Eric Levy-Abegnoli Message-id: <008201ca5df2$14c739b0$3311990a@h3c.huawei3com.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Outlook Express 6.00.2900.3598 Content-type: text/plain; charset=gb2312 Content-transfer-encoding: base64 X-Priority: 3 (Normal) X-MSMail-priority: Normal X-MIMETrack: Itemize by SMTP Server on h3cmta02-ds/h3c(Release 8.5FP1|June 15, 2009) at 2009-11-05 16:26:52, Serialize by Router on h3cmta02-ds/h3c(Release 8.5FP1|June 15, 2009) at 2009-11-05 16:26:52, Serialize complete at 2009-11-05 16:26:52 References: <0AC38B235E5F49AA922FC02151234C9C@junbiVAIO> <4AF18166.3070206@cisco.com> <4AD6EEC3844C42D68F52B3047FB04D51@junbiVAIO> Cc: 'SAVI Mailing List' Subject: Re: [savi] IETF SAVI SLAAC X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2009 08:31:27 -0000 SSBhZ3JlZSB0aGUgQ1BTIG11c3QgYmUgdGhlIGZpcnN0IG1lY2hhbmlzbS4gQmVjYXVzZSBTQVZJ IGRldmljZSBpcyB0aGUgY2xvc2VzdCBkZXZpY2UgdG8gaG9zdCwgdGhlcmUgaGF2ZSBub3QgU1RQ IHByb3RvY29sLCBzbyB0aGUgREFEIE5TIHdpbGwgaGFyZGx5IGxvc2UuIA0KDQpPbiB0aGUgb3Ro ZXIgaGFuZCwgbW9uaXRvciB0aGUgZGF0YSBwYWNrZXQgb2YgYSBmbG93IGlzIGhlYXZ5IGJ1cmRl bi4gV2hlbiBhIGhvc3Qgc3RhcnQgc2VuZGluZyBkYXRhIHBhY2tldCwgaXQgd2lsbCBzZW5kIG1h bnkgZGF0YSBwYWNrZXQgYmVmb3JlIGl0IGNoZWNrIHRoZSByZWNlcHRpb24gaXMgbm9ybWFsLiBC dXQgaXQgd2lsbCBjaGVjayB0aGUgY29udHJvbCBwYWNrZXQncyByZWNlcHRpb24gaW1tZWRpYXRl bHksIHRoZW4gc2VuZCBkYXRhIHBhY2tldC4NCg0KSWYgdGhlIFNBVkkgZGV2aWNlIGJpbmQgZW50 cnkgZnJvbSBkYXRhIHBhY2tldCBvZiBhIGZsb3csIGhvdyB0byBkZWFsIHdpdGggdGhlIGRhdGEg cGFja2V0IG9mIHRoaXMgZmxvdyBiZWZvcmUgdGhlIGVudHJ5IHRha2UgZWZmZWN0PyBJZiBjYWNo ZSB0aGVzZSBwYWNrZXQsIGl0IHdpbGwgYnVyZGVuIFNBVkkgZGV2aWNlLg0KDQpCVFcsIEknbSBh ZnJhaWQgb2YgdGhlIG51bWVyb3VzIHN0YXRlIG9mIGJvdGggU0FWSSBTTEFBQyBhbmQgU0FWSSBE SENQLiBBcyB0aGUgYWNjZXNzIGRldmljZSwgU0FWSSBtdXN0IHNpbXBsZXIgYW5kIHNpbXBsZXIs IHRoZSBudW1lcm91cyB3aWxsIGNvbXBsZXggaXQuIFNob3VsZCB3ZSBoYXZlIGEgc2ltcGxlIHNv bHV0aW9uPw0KDQoNCg0KLS0tLS0gT3JpZ2luYWwgTWVzc2FnZSAtLS0tLSANCkZyb206ICJKdW4g QmkiIDxqdW5iaUB0c2luZ2h1YS5lZHUuY24+DQpUbzogIkVyaWMgTGV2eS1BYmVnbm9saSIgPGVs ZXZ5YWJlQGNpc2NvLmNvbT4NCkNjOiAiJ1NBVkkgTWFpbGluZyBMaXN0JyIgPHNhdmlAaWV0Zi5v cmc+DQpTZW50OiBXZWRuZXNkYXksIE5vdmVtYmVyIDA0LCAyMDA5IDExOjIwIFBNDQpTdWJqZWN0 OiBSZTogW3NhdmldIElFVEYgU0FWSSBTTEFBQw0KDQoNCj4gRGVhciBFcmljLCANCj4gDQo+IFRo YW5rIHlvdSB2ZXJ5IG11Y2ggZm9yIHJldmlldyBjb21tZW50cy4NCj4gDQo+IEJlZm9yZSBhbnN3 ZXJpbmcgeW91ciBxdWVzdGlvbiwgSSdkIGxpa2UgdG8gY2xlYXJseSBvdXIgcHJvcG9zYWwgaW4g c2hvcnQ6DQo+IDEgSGF2ZSB0aGUgcG9ydCB0eXBlIGRlZmluaXRpb24uIEZyb20gdGhlIHJlcXVp cmVtZW50LCBJIGJlbGlldmUgdGhlIFNBVkktaG9zdCBwb3J0IChBIGhvc3QgaXMgZGlyZWN0bHkg YXR0YWNoZWQgdG8gYSBzd2l0Y2ggcG9ydCwgbm8gcG9ydCBzaGFyaW5nKSANCj4gaXMgdmVyeSBu ZWNlc3NhcnkgKGZvciBleGFtcGxlIGFuIG9wZXJhdG9yIGxpa2UgQ0VSTkVUKSwgYmVjYXVzZQ0K PiAxKSAgdGhlIHNlY3VyaXR5ICh1c2luZyBwaHlzaWNhbCBwb3J0IGFzIHRoZSBhbmNob3IgaXMg dGhlIG1vc3Qgc2VjdXJlIHdlIGNhbiBhY2hpZXZlIGluIGxpZ2h0d2VpZ2h0KSwgDQo+IDIpIG1h bmFnZW1lbnQgKGhvc3QgZ3JhbnVsYXIgdHJhY2luZyBiYWNrKSwgDQo+IDMpIGFuZCBiaWxsaW5n IHJlYXNvbnMgKHRvIHByZWNpc2VseSBiaWxsaW5nIHRvIHRoZSBzaW5nbGUgc291cmNlIGFkZHJl c3MuDQo+IENlcnRhaW5seSwgdG8gZGVmaW5lIHN1Y2ggYSBwb3J0IHR5cGUgY291bGQgYmUgaW4g ZWl0aGVyIHRoZSBzb2x1dGlvbiBkb2N1bWVudCBvciBmcmFtZXdvcmsgZG9jdW1lbnQuDQo+IA0K PiAyIEZvciB0aGUgU0FWSS1ob3N0IHBvcnQsIHRoZSBtZWNoYW5pc20gKGFjdHVhbGx5IG1peGVk IENQUyBhbmQgRkNGUykgaXMgdGhlIGJlc3QgY2hvaWNlIEkgYmVsaWV2ZS4NCj4gMSkgRm9yICJu b3JtYWwgY2FzZSIsIHRoZSBkYXRhIHBhY2tldCBpcyBleHBlY3RlZCB0byBjb21lIHRvIHRoZSBz d2l0Y2ggcG9ydCBsYXRlciB0aGFuIGNvbnRyb2wgcGFja2V0cyAoYXMgd2Ugb2JzZXJ2ZWQgDQo+ IGluIG91ciBleHBlcmltZW50cykuIFRoZSBzd2l0Y2ggY291bGQgcnVuIENQUyBtb2RlIGJ5IGp1 c3QgbGlzdGVuaW5nIHRoZSBEQUQgcHJvY2VkdXJlIGNvbXBsZXRpb24sIHRoZW4gc2V0dGluZyB1 cCB0aGUgYmluZGluZy4gDQo+IEl0J3MgbW9yZSBsaWdodCB3ZWlnaHQgYW5kIHNlY3VyZS4gQmVj YXVzZSB0aGUgbnVtYmVyIG9mIGNvbnRyb2wgcGFja2V0cyBhcmUgc21hbGxlciB0aGFuIGRhdGEg cGFja2V0cyAobWlnaHQgaW4gbGluZSByYXRlIG9mIDFHLCBldmVuIDEwR2JwcyksIA0KPiB0aGVu IHRoZSBidXJkZW4gYnJvdWdodCB0byB0aGUgc3dpdGNoIGlzIGxvd2VyIHRoYW4gRkNGUyAodGhl IERBRC1OUyBwcm9iZSwgYSBDUFUgYWN0aW9uLCBpcyB0cmlnZ2VyZWQgYnkgYW55IHNvdXJjZSBh ZGRyZXNzLXVuYm91bmQgDQo+IGRhdGEgcGFja2V0cywgd2hpY2ggaXMgYSBub3JtYWwgY2FzZSB3 aGVuIHRoZSBob3N0IHVzaW5nIG11bHRpcGxlIGFkZHJlc3NlcykuIENhbiB3ZSBzdG9yZSB0aGUg cGFja2V0cyB3aXRoIHNvdXJjZSBhZGRyZXNzIGJlaW5nIHZlcmlmaWVkIGluDQo+IHRoZSBzd2l0 Y2ggd2hlbiB0aGUgc3dpdGNoIHNlbmRpbmcgb3V0IERBRC1OUyBwcm9iZT8gSWYgeWVzLCB0aGVy ZSBpcyBhbm90aGVyIGJ1cmRlbi4gSWYgbm8gYnV0IGZvcndhcmRpbmcsIHRoZW4gdGhlIHNpbmds ZS1wYWNrZXQgYXR0YWNrIGNhbiBub3QgYmUgdHJhY2VkIGJhY2suIElmIG5vIGJ1dCBkcm9wcGlu ZywgdGhlIHN3aXRjaCBtYXkgZHJvcCBsb3RzIG9mIGxlZ2l0aW1hdGUgdXNlciBwYWNrZXRzIGR1 cmluZyB0aGUgREFELU5TIHByb2JlIHByb2NlZHVyZS4NCj4gTW9yZW92ZXIsIHRoZSByZXN1bHQg b2YgRkNGUyBpcyB1bmtub3duIHlldCwgYnV0IHRoZSBmaXJzdCBob3AgQ1BTIGlzIGFscmVhZHkg cHJvdmVkIHdvcmtpbmcgd2l0aCB0aGUgcHJvc29keSBhbmQgZXhwZXJpbWVudHMgaW4gVHNpbmdo dWEvQ0VSTkVULg0KPiAoMikgRm9yICJzcGVjaWFsIGNhc2UiLCB3aGVyZSB0aGUgREFELU5TIGlz IGxvc3QgaW4gdGhlIGxpbmsgYmV0d2VlbiBTQVZJIHBvcnQgYW5kIHRoZSBob3N0ICh3aGljaCBp cyB2ZXJ5IGxvdyBwb3NzaWJpbGl0eSANCj4gYXMgRnJlZCBCYWtlciBhbmFseXplZCksIEZDRlMg bW9kZSBpcyBhIHdheSB0byByZWNvdmVyIHRoZSBzdGF0ZSAoc2VuZGluZyBwcm9iZSBmb3Igc291 cmNlIGFkZHJlc3MtdW5ib3VuZCBwYWNrZXRzKS4gDQo+IEJlY2F1c2UgdGhpcyBpcyBhIGxvdyBw b3NzaWJpbGl0eSBjYXNlLCB0aGVuIHRoZSBjb3N0IGFuZCBzZWN1cml0eSB0aHJlYXRlbiBpcyBu b3QgZWxpbWluYXRlZC4NCj4gDQo+IDMgRm9yIGEgcG9ydCB0eXBlIHRoYXQgU0FWSSBzd2l0Y2gg Y29ubmVjdGVkIHRvIGEgbm9uU0FWSSBzd2l0Y2ggKGh1YikgICh0aGUgcG9ydCBpcyBzaGFyZWQg YnkgbXVsdGlwbGUgaG9zdHMsIHdlIGNhbGwgaXQgDQo+IFNBVkktcGxveSBwb3J0KSwgRkNGUyBt b2RlIGlzIE9LLCBJZiBhbiBvcGVyYXRvciB3YW50cyBpdCAod2l0aG91dCBzdHJpY3RseSBob3N0 LWdyYW51bGFyaXR5IHJlcXVpcmVtZW50KS4NCj4gU28gaXQncyBiZXR0ZXIgdG8ga2VlcCB0d28g bW9kZXMgZm9yIGRpZmZlcmVudCBwb3J0IHR5cGVzLiBXaGF0IHdlIHByb3Bvc2VkIGlzIHRoYXQg c29tZSBzZWN0aW9uIGFkZHJlc3NlZCBzb21lIA0KPiBwcm9ibGVtcywgYnV0IHN0aWxsIG5lZWQg c29tZSBkZXRhaWxzLCB3aGVyZSB3ZSBjYW4gY29udHJpYnV0ZSB0byB0aG9zZSBzZWN0aW9ucyB3 aXRoIHRoZSB0ZXh0IGluIG91ciBkcmFmdC4NCj4gDQo+IE15IG90aGVyIHJlcGxpZXMgYXJlIGlu IGxpbmUgYmVsb3cuDQo+IA0KPiBUaGFuayB5b3Ugb25jZSBhZ2FpbiENCj4gDQo+IEJlc3QgUmVn YXJkcywNCj4gSnVuIEJpDQo+IA0KPiANCj4gDQo+IA0KPiANCj4gRnJvbTogRXJpYyBMZXZ5LUFi ZWdub2xpIA0KPiBTZW50OiBXZWRuZXNkYXksIE5vdmVtYmVyIDA0LCAyMDA5IDk6MjggUE0NCj4g VG86IEJpIEp1biANCj4gQ2M6ICdTQVZJIE1haWxpbmcgTGlzdCcgDQo+IFN1YmplY3Q6IFJlOiBb c2F2aV0gSUVURiBTQVZJIFNMQUFDDQo+IA0KPiANCj4gSnVuIGJpLA0KPiAic29tZSIgY29tbWVu dHMgaW5saW5lIC4uLg0KPiBFcmljDQo+IA0KPiBCaSBKdW4gYSCopmNyaXQgOiANCj4gIERlYXIg RXJpa6OsTWFyY2VsbywgYW5kIEVyaWMsDQo+IA0KPiAgQmVsb3cgaXMgb3VyIHJldmlzaW9uIHN1 Z2dlc3Rpb24gdG93YXJkcyBmaW5hbCBkcmFmdC1pZXRmLXNsYWFjLTAwLg0KPiAgVGhhbmtzLA0K PiAgSnVuIEJpDQo+IA0KPiANCj4gIEEgbWVyZ2UgcHJvcG9zYWwgYmFzZWQgb24gRkNGUy0wMiBh bmQgc2xhYWMtY3BzLTAwKGFzIGF0dGFjaG1lbnRzKToNCj4gDQo+ICAgDQo+IA0KPiAgQmFzaWMg ZnJhbWU6IEZDRlMtMDIuDQo+IA0KPiAgIA0KPiANCj4gIDEuICAgICAgIFNlY3Rpb25zIHRvIEFk ZA0KPiANCj4gICANCj4gDQo+ICAxLjEgICBBZGQgYSBzZWN0aW9uIGZvciBJUHY0KFNlY3Rpb24g MTAuMS4yIGluIHNsYWFjLWNwcyBtYXkgY29udHJpYnV0ZSkNCj4gDQo+ICAgDQo+IA0KPiAgQWRk IGEgc2VjdGlvbiB0byBoYW5kbGUgSVB2NCBhZGRyZXNzIHVzaW5nIHRoZSBzaW1pbGFyIG1lY2hh bmlzbS4gVGhpcyBzZWN0aW9uIHNwZWNpZmllcyB0aGUgcHJvY2VkdXJlIHRvIHNldCB1cCBiaW5k aW5nIGZvciBtYW51YWxseSBjb25maWd1cmVkKGJ1dCBub3Qgc3RhdGljKSBJUHY0IGFkZHJlc3Ms IGFzIGRlc2NyaWJlZCBpbiBbUkZDNTIyN10uIA0KPiANCj4gIFRoaXMgbWVjaGFuaXNtIGNhbiBo YW5kbGUgdGhlIHNpdHVhdGlvbiBpbiB3aGljaCB1c2VycyBjYW4gY29uZmlndXJlIHRoZWlyIGFk ZHJlc3MgbWFudWFsbHkgc28gbG9uZyBhcyB0aGUgYWRkcmVzcyBiZWxvbmdzIHRvIGFuIGFsbG93 ZWQgcHJlZml4Lg0KPiANCj4gIFRoaXMgc2l0dWF0aW9uIGlzIGRpZmZlcmVudCBmcm9tIHRoYXQg YW55IGludGVyZmFjZSBjYW4gb25seSBjb25maWd1cmUgYSBmaXhlZCBhZGRyZXNzLCBhbmQgbWFu dWFsbHkgY29uZmlndXJhdGlvbiBvbiB0aGUgU0FWSSBkZXZpY2Ugd291bGRuoa90IGhhbmRsZSBp dC4NCj4gDQo+ICAgDQo+IA0KPiAgMS4yICAgQWRkIGEgcG9ydCB0eXBlOiBob3N0IHBvcnQsIGFz IGEgY29tcGxlbWVudCBvZiBwb3J0LXZhbGlkYXRpb24NCj4gDQo+ICAgDQo+IA0KPiAgRm9yIGEg cG9ydCBkaXJlY3RseSBhdHRhY2hlZCB0byBhIHNpbmdsZSBob3N0LCBtZWNoYW5pc20gbWFpbmx5 IGJhc2VkIG9uIGNvbnRyb2wgcGFja2V0IHNub29waW5nKFNlY3Rpb24gMTAuMS4xIGluIHNsYWFj LWNwcyBtYXkgY29udHJpYnV0ZSkgd291bGQgYmUgbW9yZSBsaWdodHdlaWdodCBhbmQgc2VjdXJl Lg0KPiANCj4gICANCj4gDQo+ICBBcyBkZXNjcmliZWQgaW4gUkZDNDg2MiwgREFEIG11c3QgYmUg cGVyZm9ybWVkIGJlZm9yZSBhc3NpZ25pbmcgYW55IGFkZHJlc3MuIEl0oa9zIHRoZSByZWFzb25h YmlsaXR5IGJhc2lzIG9mIGNvbnRyb2wgcGFja2V0IHNub29waW5nIG9ubHkuIEZvciBhIHNhdmkt aG9zdCBwb3J0LCBpdCBpcyByYXJlbHkgbmVjZXNzYXJ5IGZvciB0aGUgc2F2aSBkZXZpY2UgdG8g dHJpZ2dlciBhIGRldGVjdGlvbiBvbiBiZWhhdmlvciBvZiB0aGUgYXR0YWNoZWQgaG9zdCwgdW5s ZXNzIGluIHRoZSBjYXNlIHRoYXQgZGV0ZWN0aW9uIHBhY2tldHMgYXJlIGdvdCBsb3N0KHdpdGgg YW4gZXh0cmVtZWx5IGxpdHRsZSBwb3NzaWJpbGl0eSkuDQo+IA0KPiAgSW4gc2xhYWMtY3BzMDAs IHRoZSBzYXZpIGRldmljZSBzaG91bGQgc25vb3AgYSB3aWRlIHNjb3BlIG9mIGNvbnRyb2wgcGFj a2V0LCB0byBhdm9pZCBkcm9wcGluZyB2YWxpZCBwYWNrZXQgYXMgbXVjaCBhcyBwb3NzaWJsZS4g V2lsbCBhIGhvc3Qgc2VuZCBkYXRhIHBhY2tldCBkaXJlY3RseSB3aXRob3V0IHBlcmZvcm1pbmcg YW55IHJlc29sdXRpb24/DQo+IA0KPiAgRXZlbiBpbiBhbiBleHRyZW1lIGJhZCBzaXR1YXRpb24s IHRoZSBzYXZpIGRldmljZSBjYW4gc2VuZCBwcm9iZXMgd2hlbmV2ZXIgYSBuZXcgYWRkcmVzcyBh cHBlYXJzKGJ1dCB0aGlzIGZ1bmN0aW9uIGlzIHR1cm5lZCBvZmYgYnkgZGVmYXVsdC4pLiBBbHRo b3VnaCB0aGlzIHNlZW1zIHRoZSBzYW1lIGFzIEZDRlMsIHRoZXJlIGlzIGEgYmVuZWZpdCB0aGUg c2F2aSBkZXZpY2UgY2FuIGNvbnRyb2wgdGhlIHJhdGUgdG8gcHJldmVudCBEb1MgYXR0YWNrLg0K PiANCj4gSSB0aG91Z2h0IHdlIGFscmVhZHkgaGFkIHRoaXMgZGlzY3Vzc2lvbi4gVGhlcmUgYXJl IGNsZWFybHkgY2FzZXMgd2hlcmUgdGhlIHN3aXRjaCBpcyBnb2luZyB0byBtaXNzIERBRCBwYWNr ZXRzLiAgKipBcyBhbiBleGFtcGxlKiogd2hlbiB0aGUgc3Bhbm5pbmcgdHJlZSBpcyBiZWluZyBj YWxjdWxhdGVkIChsZWFybmluZyBzdGF0ZSksIHBhY2tldHMgYW4ndCBicmlkZ2VkIGJ1dCBkcm9w LiBTbyB1bmxlc3MgeW91IGNvbmZpZ3VyZSB5b3VyIHN3aXRjaCBvdGhlcndpc2UsIGl0IGlzIGZh aXJseSBjb21tb24gdGhhdCB0aGUgZmlyc3QgbWludXRlIG9mIGZvcndhcmRpbmcgaXMgbG9zdC4g QW5kIHRoYXQgaW5jbHVkZXMgREFEIHBhY2tldHMuIA0KPiBTbyBpdCBpcyBhIG11c3QgdG8gaGFu ZGxlIHRoYXQgc2l0dWF0aW9uLCBhbmQgdGhlIHByb3Bvc2FsIHdlIGRpc2N1c3NlZCBpbiBTdG9j a2hvbG0gd2FzIHRvIHBvbGwgdGhlIHNvdXJjZSBvZiBhIGRhdGEgcGFja2V0IChEQUQgTlMpIHRv IGxlYXJuIHRoZSBiaW5kaW5nICoqZnJvbSBhIGNvbnRyb2wgbWVzc2FnZSoqLiANCj4gSXQncyBu b3Qgd29yc2UgdGhhbiBhbiBhZGRyZXNzIHJlc29sdXRpb24gcGVyZm9ybWVkIG9uIGEgcm91dGVy IGluIHRoZSBvdGhlciBkaXJlY3Rpb24uIEV4Y2VwdCB0aGF0IGluIHRoZSBzYXZpIGNhc2UsIHRo ZSBzd2l0Y2ggd291bGQgbm90IGJlIHJlcXVpcmVkIHRvIGtlZXAgdGhlIG9yaWdpbmFsIHBhY2tl dC4NCj4gTWF5YmUgSSBhbSBtaXNzaW5nIHlvdXIgcG9pbnQuIEFyZSB5b3UgcHJvcG9zaW5nIHRv IG1ha2UgdGhhdCBiZWhhdmlvciBvcHRpb25hbD8gVGhlbiB5b3Ugd291bGQgc3VyZWx5IGJyZWFr IHRob3NlIGNhc2VzIG9uIG1pc3NlZCBEQUQgbWVzc2FnZXMsIHdvdWxkbid0IHlvdT8NCj4gDQo+ IA0KPiANCj4gICBCSjogIGlmIHRoZSBEQUQgaXMgbm90IGxvc3QgaW4gdGhlIGxpbmsgYmV0d2Vl biBTQVZJIHN3aXRjaC1ob3N0IHBvcnQgYW5kIHRoZSBob3N0LCB0aGVuIHRoZSBzd2l0Y2ggYWxy ZWFkeSByZWNlaXZlcyB0aGUgREFELU5TLiBUaGVuIGJhc2VkIG9uIENQUy1TTEFBQywgbm8gbWF0 ZXIgdGhlIERBRC1OUyBpcyBmb3J3YXJkZWQgb3Igbm90LCB0aGUgYmluZGluZyBpcyBzZXQgdXAs IHJpZ2h0Pw0KPiANCj4gDQo+IA0KPiANCj4gIFRoZSBzZWN1cml0eSBhc3BlY3Q6DQo+IA0KPiAg KDEpIEEgY2xlYXIgZW50cnkgbnVtYmVyIGxpbWl0IGNhbiBiZSBzZXQgZm9yIGVhY2ggaG9zdCBh bmQgYXZvaWQgYmluZGluZyBlbnRyeSBleGhhdXN0aW9uLihUaGlzIGxpbWl0IGNhbiBuZXZlciBi ZSBzZXQgb24gYSBwb3J0IGFjY2Vzc2VkIGJ5IGEgbnVtYmVyIG9mIGhvc3RzLikNCj4gDQo+IFRo ZSBsaW1pdCBzaG91bGQgYmUgcGVyLWFuY2hvci4gSSBoYXZlIG5vIGlzc3VlIHdpdGggdGhhdC4g QWN0dWFsbHksIEkgcmVtZW1iZXIgSSBicm91Z2h0IHRoYXQgdXAgdG8gdGhlIGxpc3Qgc29tZSB0 aW1lIGFnby4gQXMgbG9uZyBhcyBpdCBpcyBub3QgdGhlICJwcmltYXJ5IiBzZWN1cml0eSBtZWNo YW5pc20uIEJlY2F1c2UsIGFzIHN1Y2gsIGl0IGlzIHZlcnkgcG9vci4gQW55IGxpbWl0IHBlciBh bmNob3IgKG1hYywgcG9ydCwgZXRjKS4gcHJvdGVjdCB0aGUgZGV2aWNlLCBidXQgd2Vha2VuIHNh bWUtYW5jaG9yLXVzZXJzLiAgRm9yIGluc3RhbmNlLCBpZiB5b3UgcHV0IGEgbGltaXQgcGVyIG1h YywgdGhlbiBhbiBhdHRhY2tlciBjb3VsZCBnZXQgeW91IHRvIHRoaXMgbGltaXQsIGFuZCBwcmV2 ZW50IG90aGVyIGxlZ2l0aW1hdGUgdXNlcnMgIHRvIGluc3RhbGwgYW4gZW50cnkgZm9yIHRoaXMg bWFjLiANCj4gDQo+IA0KPiANCj4gDQo+ICAgICAgICAgICAgICAgICBCSjogd2hhdCB3ZSBwcm9w b3NlZCBhYm92ZSBpcyB0aGUgbWVjaGFuaXNtIGZvciBzdHJpY3Qgc2VjdXJpdHkgY2FzZSBvbmx5 IC0tIGZvciB0aGUgU0FWSS1ob3N0IHBvcnQuIFRoZSBwb3J0IGlzIG9ubHkgYm91bmQgd2l0aCBP TkUgaG9zdC4gDQo+ICAgICAgICAgICAgICAgICAgVGhlcmUgaXMgbm90IGFuY2hvciBzaGFyaW5n IGluIHRoaXMgY2FzZS4gU28gaXQncyByZWFzb25hYmxlIHRvIGxpbWl0IHRoZSBob3N0IGlmIGl0 IHBlcmZvcm1zIGJhZC4NCj4gDQo+IA0KPiANCj4gDQo+IA0KPiANCj4gDQo+ICAoMikgQSByYXRl IGxpbWl0IG9mIHNlbmRpbmcgcHJvYmVzIGNhbiBiZSBzZXQgdG8gYXZvaWQgRG9TLiAoVGhpcyBs aW1pdCBjYW5ub3QgYmUgc2V0IG9uIG90aGVyIHR5cGVzIG9mIHBvcnRzLCBlaXRoZXIuKQ0KPiAN Cj4gSSB0aGluayB0aGF0IGlzIGJyaWVmbHkgbWVudGlvbm5lZCBpbiB0aGUgY3VycmVudCBkcmFm dCBpbiBzZWN0aW9uIDQuMi4yDQo+IA0KPiANCj4gICgzKSBBIG1vcmUgc3RyaWN0IGZpbHRlcmlu ZyBwb2xpY3koZS5nLiwgZGVmYXVsdCBkcm9wcGluZykgY2FuIGJlIHNldCBvbiBzdWNoIHBvcnQs IHRvIHN0b3Agb25lIHBhY2tldCBhdHRhY2sgYW5kIERvUyBhZ2FpbnN0IHRoZSBzYXZpIGRldmlj ZSBpdHNlbGYuIChEZWZhdWx0IGRyb3BwaW5nIHBvbGljeSBjYW5ub3QgYmUgc2V0IG9uIG90aGVy IGtpbmRzIG9mIHBvcnRzLikNCj4gDQo+ICAoNCkgQSBob3N0IGxldmVsIGdyYW51bGFyaXR5IHRy YWNlIGFiaWxpdHkgY2FuIGJlIGVuYWJsZWQuDQo+IA0KPiAgIA0KPiANCj4gIDEuMyAgIEFkZCBh IHNlY3Rpb24gdG8gc3BlY2lmeSB0aGUgcHJvY2VkdXJlIG9mIGNoZWNrIGEgcGFja2V0KFNlY3Rp b24gMTIgaW4gc2xhYWMtY3BzIGNhbiBjb250cmlidXRlKS4NCj4gDQo+IFNpbWlsYXIgY29uc2lk ZXJhdGlvbnMgY2FuIGJlIGZvdW5kIGluIHNlY3Rpb24gMi40IG9mIHRoZSBjdXJyZW50IGRvY3Vt ZW50LiANCj4gDQo+IA0KPiAgMS40ICAgQWRkIGEgc2VjdGlvbiB0byBzcGVjaWZ5IHRoZSBwcm9j ZWR1cmUgdG8gcmVtb3ZlIGEgYmluZGluZyhTZWN0aW9uIDExIGluIHNsYWFjLWNwcyBjYW4gY29u dHJpYnV0ZSkuICAgICANCj4gDQo+IA0KPiBUaGUgbW92ZSBzY2VuYXJpbyBpcyBkZXNjcmliZWQg aW4gc2VjdGlvbiAyLjMuIA0KPiBUaGUgZGVsZXRlIHNjZW5hcmlvIGlzIG5vdCBkZXNjcmliZWQg KGFuZCBpcyBwcm9iYWJseSB3b3JzZSBkaXNjdXNzaW5nIGhlcmUpIGJ1dCB0aGUgY29uc2Vuc3Vz IHdhcyAib24tZGVtYW5kIGdhcmJhZ2UgY29sbGVjdGlvbiBhdCB0aGUgdGltZSB0aGUgU0FWSSBk ZXZpY2UgcnVucyBvdXQgb2YgbWVtb3J5Ii4gDQo+IA0KPiANCj4gDQo+ICAxLjUgICBBZGQgYSBz ZWN0aW9uIHRvIGNsZWFybHkgc3BlY2lmeSB0aGUgZGV0YWlscyBvbiBzcGVjaWFsIHNpdHVhdGlv bnMoU2VjdGlvbiAxMywxNCwxNSBpbiBzbGFhYy1jcHMgY2FuIGNvbnRyaWJ1dGUpLg0KPiANCj4g SSB0aGluayB0aGVyZSBpcyBnZW5lcmFsbHkgZ29vZCBzdHVmZiB0aGVyZS4gV2l0aCBhIGxvdCBv ZiBxdWVzdGlvbiBtYXJrcy4gQ2VydGFpbmx5IHdvcnRoIGRpc2N1c3Npbmcgb24gdGhlIGxpc3Qu DQo+IA0KPiANCj4gIDEuNiAgIEFkZCBhIHNlY3Rpb24gdG8gc3BlY2lmeSB0aGUgcmVsYXRlZCBj b25zdGFudHMsIGVzcGVjaWFsbHkgdGhlIHRpbWUgcmVsYXRlZCBjb25zdGFudHMsIGUuZywgVEVO VF9MVC4NCj4gDQo+ICAgDQo+IA0KPiAgMi4gICAgICAgU2VjdGlvbnMgdG8gYmUgbW92ZWQgdG8g ZnJhbWV3b3JrDQo+IA0KPiAgIA0KPiANCj4gIDIuMSwgMi4yLCAyLjQsIDIuNQ0KPiANCj4gIFRo ZXNlIHNlY3Rpb25zIGFyZSBncmVhdCBhbmFseXNpcyB3b3JrIG9uIFNBVkkgc29sdXRpb25zIGlu IGNvbW1vbi4gVGhleSBzaG91bGQgYmUgbW92ZWQgdG8gc2F2aS1mcmFtZXdvcmsgb3IgYW5vdGhl ciBpbmZvcm1hdGlvbmFsIGRyYWZ0IGZvciBjbGFyaXR5Lg0KPiANCj4gICANCj4gDQo+ICAzLiAg ICAgICBPcGVuIGlzc3VlczoNCj4gDQo+ICAgDQo+IA0KPiAgMy4xICAgV2hldGhlciB0byBidWls ZCBhIHBlcmltZXRlciBiYXNlZCBvbiBTQVZJIGZ1bmN0aW9ucz8NCj4gDQo+ICBCZW5lZml0czog DQo+IA0KPiAgMS4gQW4gYXR0YWNrZXIgY2Fubm90IHNwb29mIGFueSBhZGRyZXNzIGluIFNBVkkg YXJlYTsNCj4gDQo+ICAgICAgICAgICAyLiBTcG9vZmluZyBwYWNrZXRzIHdpbGwgYmUgZHJvcHBl ZCBvbiByZWFjaGluZyB0aGUgcGVyaW1ldGVyOw0KPiANCj4gICAgICAgICAgIDMuIFNwb29maW5n IHBhY2tldHMgZnJvbSBub24tU0FWSSBhcmVhIHdpbGwgYmUgZmlsdGVyZWQgYXQgYSChsGFuY2hv cqGxIGxldmVsLg0KPiANCj4gIENvc3Q6DQo+IA0KPiAgMS4gICAgICAgQ29udHJvbCBwbGFuZSBj b3N0OiBBIFNBVkkgZGV2aWNlIHdpbGwgcG90ZW50aWFsbHkga2VlcCBhIHJlY29yZCBvZiBhbGwg dGhlIGFkZHJlc3NlcyBvbiB0aGUgbGluay4gSXQgaXMgdW5jb252aW5jZWQgdGhhdCB0aGUgc3Rv cmFnZSBkaXN0cmlidXRpb24gbWVjaGFuaXNtIHdpbGwgd29yayBpbmRlZWQuIE1vcmUgZGV0YWls cyBvZiB0aGlzIG1lY2hhbmlzbSBzaG91bGQgYmUgc3BlY2lmaWVkLg0KPiANCj4gIDIuICAgICAg IEFkZGl0aW9uYWwgY29tbXVuaWNhdGlvbiBjb3N0OiB1c2luZyBORFAgYXMgYSBCRFAgdG8gZGlz dHJpYnV0ZSBiaW5kaW5nczsNCj4gDQo+ICAzLiAgICAgICBEYXRhIHBsYW5lIGNvc3Q6IHdoZW5l dmVyIGNoZWNrIGEgcGFja2V0LCB0aGUgU0FWSSBkZXZpY2UgbXVzdCBnbyB0aHJvdWdoIGFuIGV4 dHJlbWVseSBodWdlIGRlbnkgbGlzdC4NCj4gDQo+ICBQb3NzaWJsZSBlcnJvcjoNCj4gDQo+ICAx LiAgICAgICBXaGV0aGVyIGlzIGl0IHJlYXNvbmFibGUgdG8gc2V0IHVwIGJpbmRpbmdzIGZvciBo b3N0cyBvdXQgb2YgU0FWSSBhcmVhIGJhc2VkIG9uIEZDRlM/DQo+IA0KPiAgLVRoZSBvd25lciBv ZiBhbiBhZGRyZXNzIGlzIG5ldmVyIG5lY2Vzc2FyeSB0byBzZW5kIGEgcGFja2V0IGZpcnN0IHRv IHRoZSBTQVZJIGFyZWEuIFRoZW4gYW5vdGhlciBob3N0IGNhbiBzZXQgdXAgYSBiaW5kaW5nIGJl Zm9yZSBpdCBhbmQgbWFrZSB0aGUgcGVyaW1ldGVyIHRvIGRyb3AgdGhlIHRyYWZmaWMgb2YgdGhl IGFkZHJlc3Mgb3duZXIuDQo+IA0KPiAgIA0KPiANCj4gIEFsdGVyYXRpdmU6IA0KPiANCj4gICAg ICAgICAgICAgICAgTWFrZSBpdCBhbiBvcHRpb25hbCBmdW5jdGlvbiwgb3IgdXNlIG1hdHVyZSB0 ZWNobmlxdWVzOg0KPiANCj4gICAgICAgICAgICAgICAgLVNlcGFyYXRlIHRoZSBwcmVmaXggc2Nv cGUgb2YgU0FWSSBhcmVhIGFuZCBub24tU0FWSSBhcmVhLiBVc2luZyBpbmdyZXNzIGZpbHRlciB0 aGUgcGVyZm9ybSBwcmVmaXggbGV2ZWwgY2hlY2suDQo+IA0KPiAgICAgICAgICAgICBUaGlzIGlz IHN1cmUgdG8gd29yay4NCj4gDQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBzYXZpIG1haWxpbmcgbGlz dA0KPiBzYXZpQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vc2F2aQ0KPiANCj4gDQo+IA0KPiANCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gDQo+ IA0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBz YXZpIG1haWxpbmcgbGlzdA0KPiBzYXZpQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vc2F2aQ0KPg0KDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoN Cg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBz YXZpIG1haWxpbmcgbGlzdA0KPiBzYXZpQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vc2F2aQ0KPg== From christian.vogt@ericsson.com Thu Nov 5 00:33:31 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C113228C1A1 for ; Thu, 5 Nov 2009 00:33:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.555 X-Spam-Level: X-Spam-Status: No, score=-6.555 tagged_above=-999 required=5 tests=[AWL=0.044, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hg8Qg7TV0IX1 for ; Thu, 5 Nov 2009 00:33:31 -0800 (PST) Received: from imr1.ericy.com (imr1.ericy.com [198.24.6.9]) by core3.amsl.com (Postfix) with ESMTP id E5CCB28C190 for ; Thu, 5 Nov 2009 00:33:30 -0800 (PST) Received: from eusrcmw750.eamcs.ericsson.se (eusrcmw750.exu.ericsson.se [138.85.77.50]) by imr1.ericy.com (8.13.1/8.13.1) with ESMTP id nA58XVa3001577; Thu, 5 Nov 2009 02:33:31 -0600 Received: from eusrcmw750.eamcs.ericsson.se ([138.85.77.53]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Thu, 5 Nov 2009 02:33:12 -0600 Received: from eusaamw0711.eamcs.ericsson.se ([147.117.20.178]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Thu, 5 Nov 2009 02:33:12 -0600 Received: from EUSAACMS0701.eamcs.ericsson.se ([169.254.1.35]) by eusaamw0711.eamcs.ericsson.se ([147.117.20.178]) with mapi; Thu, 5 Nov 2009 03:33:11 -0500 From: Christian Vogt To: Eric Levy-Abegnoli Date: Thu, 5 Nov 2009 03:33:57 -0500 Thread-Topic: [savi] A few comments on draft-vogt-savi-framework Thread-Index: Acpd8pvefuhtvVWMQD2QpzymRhBNKw== Message-ID: References: <871D15B0-6B49-49F4-AD94-88AC7523044C@ericsson.com> <200910231045135108459@huaweisymantec.com> <5FDC3979-13E4-480A-A1F6-334B95E2ED66@ericsson.com> <200910291035478406365@huaweisymantec.com><4540D1DA-94A6-4DC9-B5B9-E9C0E32D127B@ericsson.com> <4AE93B2C.7060906@it.uc3m.es> <210BBA32-43EB-49EC-B9BB-0C5B9AE7C4EA@ericsson.com> <4AEEB775.5020103@cisco.com> <4AEFEF84.4020807@cisco.com> In-Reply-To: <4AEFEF84.4020807@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 05 Nov 2009 08:33:12.0224 (UTC) FILETIME=[9C7AC200:01CA5DF2] Cc: SAVI Mailing List , =?iso-8859-1?Q?Alberto_Garc=EDa?= Subject: Re: [savi] A few comments on draft-vogt-savi-framework X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2009 08:33:31 -0000 On Nov 3, 2009, Eric Levy-Abegnoli wrote: >> Let's be a bit more specific here. In what way would a non-SEND-=20 >> capable >> SAVI device break RFC 3971? Alberto has mentioned one case -- when a >> SEND host's DAD fails for the second time due to an unsecured =20 >> Neighbor >> Advertisement, then the SEND host will configure the IP address, =20 >> yet a >> non-SEND-capable SAVI device would block the IP address. Is this the >> issue you are referring to? Then we should discuss whether or not =20 >> this >> is acceptable. Or are there more issues you are thinking of? >> > > The sole purpose of CGA is to enable a CGA-capable node to prefer > CGA-prooved NDP message over a none prooved one. If the savi device =20 > does > first-come-first-serve, and is not able to verify (and prefer) CGA > credentials, then there are plenty of scenarios where it will keep the > non CGA owner entry and discard traffic from the legitimate: basically > all scenarios where the non-CGA came first. But all of these scenarios are about the same issue: When a SEND host's DAD fails for the second time due to an unsecured Neighbor Advertisement, then the SEND host will configure the IP address, yet a non-SEND-capable SAVI device would block the IP address. The same holds for the attack scenario that you described in your email. The question is hence: What do we do about this issue? Is it negligible? Is it significant enough to warrant building SEND support in all SLAAC SAVI devices? Should we find some tradeoff? I think your attack scenario shows that the situation is not negligible. On the other hand, many of us feel that full-fledged SEND support would make SLAAC SAVI devices too expensive. So how would a reasonable tradeoff (Alberto calls it a "SEND-compatible mode") look like? - Christian From elevyabe@cisco.com Thu Nov 5 01:06:45 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A53E3A6993 for ; Thu, 5 Nov 2009 01:06:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.423 X-Spam-Level: X-Spam-Status: No, score=-9.423 tagged_above=-999 required=5 tests=[AWL=1.175, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ggiUDp4ErrFu for ; Thu, 5 Nov 2009 01:06:44 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id 974203A6774 for ; Thu, 5 Nov 2009 01:06:43 -0800 (PST) Authentication-Results: ams-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Aj4AAOEk8kqQ/uCWe2dsb2JhbACCIDIlmGkBARYkBqo3l2WCR4F2BIFm X-IronPort-AV: E=Sophos;i="4.44,685,1249257600"; d="scan'208,217";a="53677030" Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 05 Nov 2009 09:07:01 +0000 Received: from xbh-ams-101.cisco.com (xbh-ams-101.cisco.com [144.254.74.71]) by ams-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA5971n1004996; Thu, 5 Nov 2009 09:07:01 GMT Received: from xmb-ams-105.cisco.com ([144.254.74.80]) by xbh-ams-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 5 Nov 2009 10:07:00 +0100 Received: from [144.254.53.124] ([144.254.53.124]) by xmb-ams-105.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 5 Nov 2009 10:07:00 +0100 Message-ID: <4AF295B4.1000309@cisco.com> Date: Thu, 05 Nov 2009 10:07:00 +0100 From: Eric Levy-Abegnoli User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Christian Vogt References: <871D15B0-6B49-49F4-AD94-88AC7523044C@ericsson.com> <200910231045135108459@huaweisymantec.com> <5FDC3979-13E4-480A-A1F6-334B95E2ED66@ericsson.com> <200910291035478406365@huaweisymantec.com><4540D1DA-94A6-4DC9-B5B9-E9C0E32D127B@ericsson.com> <4AE93B2C.7060906@it.uc3m.es> <210BBA32-43EB-49EC-B9BB-0C5B9AE7C4EA@ericsson.com> <4AEEB775.5020103@cisco.com> <4AEFEF84.4020807@cisco.com> In-Reply-To: Content-Type: multipart/alternative; boundary="------------020609040009020507010309" X-OriginalArrivalTime: 05 Nov 2009 09:07:00.0718 (UTC) FILETIME=[558E60E0:01CA5DF7] Cc: SAVI Mailing List , =?ISO-8859-1?Q?Alberto_Garc=EDa?= Subject: Re: [savi] A few comments on draft-vogt-savi-framework X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2009 09:06:45 -0000 This is a multi-part message in MIME format. --------------020609040009020507010309 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Christian Vogt a écrit : > On Nov 3, 2009, Eric Levy-Abegnoli wrote: > > >>> Let's be a bit more specific here. In what way would a non-SEND- >>> capable >>> SAVI device break RFC 3971? Alberto has mentioned one case -- when a >>> SEND host's DAD fails for the second time due to an unsecured >>> Neighbor >>> Advertisement, then the SEND host will configure the IP address, >>> yet a >>> non-SEND-capable SAVI device would block the IP address. Is this the >>> issue you are referring to? Then we should discuss whether or not >>> this >>> is acceptable. Or are there more issues you are thinking of? >>> >>> >> The sole purpose of CGA is to enable a CGA-capable node to prefer >> CGA-prooved NDP message over a none prooved one. If the savi device >> does >> first-come-first-serve, and is not able to verify (and prefer) CGA >> credentials, then there are plenty of scenarios where it will keep the >> non CGA owner entry and discard traffic from the legitimate: basically >> all scenarios where the non-CGA came first. >> > > But all of these scenarios are about the same issue: When a SEND host's > DAD fails for the second time due to an unsecured Neighbor > Advertisement, then the SEND host will configure the IP address, yet a > non-SEND-capable SAVI device would block the IP address. The same holds > for the attack scenario that you described in your email. > > The question is hence: What do we do about this issue? Is it > negligible? Is it significant enough to warrant building SEND support > in all SLAAC SAVI devices? Should we find some tradeoff? > > I think your attack scenario shows that the situation is not negligible. > On the other hand, many of us feel that full-fledged SEND support would > make SLAAC SAVI devices too expensive. So how would a reasonable > tradeoff (Alberto calls it a "SEND-compatible mode") look like? > I don't think we need "full-fledged SEND support". All what is needed is the capability to verify a sha1 hash and a rsa-signature. **That** is negligeable compared to full-fledge SeND or to everything else required to implement savi slacc or dhcp. And there is plenty of open source to achieve these minor features. So the tradeoff would be to require CGA and RSA verification (this is pure algorithmic and entirely stateless), and prefer entries what carry these credentials. I really don't see that as a big deal. We (SeND work) have defined a realistic incremental deployment scenario for SeND ("transitionning mode"). And we start seeing it happening. The security is left to end-nodes, and network admin have little ways to know which end-nodes are using CGA addresses. As soon as a savi-not-CGA-capable device is going to be deployed, these (few) end-nodes doing SeND will be as vulnerable as regular ND nodes. And these nodes will have no way to know that a savi-device is messing with ND. **We are moving the security decision from host to the switch, with less security, and no way to communicate this between each other** I am worrying that if we don't make CGA verification a MUST, we are giving a clear message that SeND is useless. What is the value of a security mechanism that prevent another stronger one to operate? Eric > - Christian > > > > --------------020609040009020507010309 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Christian Vogt a écrit : 
On Nov 3, 2009, Eric Levy-Abegnoli wrote:

  
Let's be a bit more specific here.  In what way would a non-SEND- 
capable
SAVI device break RFC 3971?  Alberto has mentioned one case -- when a
SEND host's DAD fails for the second time due to an unsecured  
Neighbor
Advertisement, then the SEND host will configure the IP address,  
yet a
non-SEND-capable SAVI device would block the IP address.  Is this the
issue you are referring to?  Then we should discuss whether or not  
this
is acceptable.  Or are there more issues you are thinking of?

      
The sole purpose of CGA is to enable a CGA-capable node to prefer
CGA-prooved NDP message over a none prooved one. If the savi device  
does
first-come-first-serve, and is not able to verify (and prefer) CGA
credentials, then there are plenty of scenarios where it will keep the
non CGA owner entry and discard traffic from the legitimate: basically
all scenarios where the non-CGA came first.
    

But all of these scenarios are about the same issue:  When a SEND host's
DAD fails for the second time due to an unsecured Neighbor
Advertisement, then the SEND host will configure the IP address, yet a
non-SEND-capable SAVI device would block the IP address.  The same holds
for the attack scenario that you described in your email.

The question is hence:  What do we do about this issue?  Is it
negligible?  Is it significant enough to warrant building SEND support
in all SLAAC SAVI devices?  Should we find some tradeoff?

I think your attack scenario shows that the situation is not negligible.
On the other hand, many of us feel that full-fledged SEND support would
make SLAAC SAVI devices too expensive.  So how would a reasonable
tradeoff (Alberto calls it a "SEND-compatible mode") look like?
I don't think we need "full-fledged SEND support". All what is needed is the capability to verify a sha1 hash and a rsa-signature. **That** is negligeable compared to full-fledge SeND or to everything else required to implement savi slacc or dhcp. And there is plenty of open source to achieve these minor features.
So the tradeoff would be to require CGA and RSA verification (this is pure algorithmic and entirely stateless), and prefer entries what carry these credentials. I really don't see that as a big deal.

We (SeND work) have defined a realistic incremental deployment scenario for SeND ("transitionning mode"). And we start seeing it happening. The security is left to end-nodes, and network admin have little ways to know which end-nodes are using CGA addresses. As soon as a savi-not-CGA-capable device is going to be deployed, these (few) end-nodes doing SeND will be as vulnerable as regular ND nodes. And these nodes will have  no way to know that a savi-device is messing with ND.
**We are moving the security decision from host to the switch, with less security, and no way to communicate this between each other**
I am worrying that if we don't make CGA verification a MUST, we are giving a clear message that SeND  is useless. What is the value of a security mechanism that prevent another stronger one to operate?
Eric

   
- Christian

--------------020609040009020507010309-- From christian.vogt@ericsson.com Thu Nov 5 11:03:32 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A52413A69EF for ; Thu, 5 Nov 2009 11:03:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.309 X-Spam-Level: X-Spam-Status: No, score=-5.309 tagged_above=-999 required=5 tests=[AWL=-1.211, BAYES_00=-2.599, HTML_MESSAGE=0.001, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TKMvBRL3oKFa for ; Thu, 5 Nov 2009 11:03:31 -0800 (PST) Received: from imr2.ericy.com (imr2.ericy.com [198.24.6.3]) by core3.amsl.com (Postfix) with ESMTP id 5F9DA3A68CB for ; Thu, 5 Nov 2009 11:03:31 -0800 (PST) Received: from eusrcmw751.eamcs.ericsson.se (eusrcmw751.exu.ericsson.se [138.85.77.51]) by imr2.ericy.com (8.13.1/8.13.1) with ESMTP id nA5J3nnv017498 for ; Thu, 5 Nov 2009 13:03:52 -0600 Received: from eusrcmw750.eamcs.ericsson.se ([138.85.77.50]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Thu, 5 Nov 2009 13:02:56 -0600 Received: from eusaamw0706.eamcs.ericsson.se ([147.117.20.31]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Thu, 5 Nov 2009 13:02:56 -0600 Received: from client-vpn-074.edd.ericsson.se (147.117.20.212) by eusaamw0706.eamcs.ericsson.se (147.117.20.91) with Microsoft SMTP Server id 8.1.375.2; Thu, 5 Nov 2009 14:02:50 -0500 From: Christian Vogt Content-Type: multipart/alternative; boundary="Apple-Mail-11--32260040" Date: Fri, 6 Nov 2009 03:03:34 +0800 References: To: SAVI Mailing List Message-ID: <058861F3-5E50-42FD-A6CC-220EE213629C@ericsson.com> MIME-Version: 1.0 (Apple Message framework v1076) X-Mailer: Apple Mail (2.1076) X-OriginalArrivalTime: 05 Nov 2009 19:02:56.0626 (UTC) FILETIME=[95BCF520:01CA5E4A] Subject: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2009 19:03:32 -0000 --Apple-Mail-11--32260040 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; format=flowed; delsp=yes Group - Attached is a liaison related to SAVI from the Broadband Forum, for your information and consideration. Comments? - Christian Begin forwarded message: > From: Robin Mersh > Date: November 6, 2009 1:42:05 GMT+08:00 > To: "fenner@fenron.com" , Christian Vogt >, "fred.baker@cisco.com" , > "kurtis@kurtis.pp.se" , "dromasca@avaya.com" >, "rbonica@juniper.net" , "rdroms@cisco.com" >, "jari.arkko@piuha.net" , Mark Townsley > > Subject: Broadband Forum liaison to IETF on IPv6 security > > Dear colleagues, > > For your review, please see the liaison from the Broadband Forum > attached below. > > Best regards, > Robin Mersh > COO > The Broadband Forum > phone: +1 336 288 8013 > cell: +1 303 596 7448 > email: rmersh@broadband-forum.org > > > --Apple-Mail-11--32260040 Content-Type: multipart/mixed; boundary="Apple-Mail-12--32260039" --Apple-Mail-12--32260039 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="us-ascii" Group = - 

Attached is a liaison related to SAVI from = the Broadband Forum, for your information and consideration. =  Comments?

- = Christian



Begin forwarded = message:

From: Robin Mersh <rmersh@broadband-forum.org&= gt;
Date: November 6, 2009 1:42:05 = GMT+08:00
To: "fenner@fenron.com" <fenner@fenron.com>, Christian = Vogt <christian.vogt@ericsson.com>, "fred.baker@cisco.com" = <fred.baker@cisco.com>, = "kurtis@kurtis.pp.se" <kurtis@kurtis.pp.se>, "dromasca@avaya.com" <dromasca@avaya.com>, "rbonica@juniper.net" <rbonica@juniper.net>, "rdroms@cisco.com" <rdroms@cisco.com>, "jari.arkko@piuha.net" <jari.arkko@piuha.net>, Mark = Townsley <townsley@cisco.com>
Subject: Broadband Forum = liaison to IETF on IPv6 security

Dear colleagues,

For your review, please = see the liaison from the Broadband Forum attached = below.

Best regards,
rmersh@broadband-forum.org<= /div>



=
= --Apple-Mail-12--32260039 Content-Disposition: inline; filename="BBF liaison to IETF on IPv6 security.pdf" Content-Type: application/pdf; name="BBF liaison to IETF on IPv6 security.pdf" Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjIgMCBvYmoKPDwgL0xlbmd0aCA0IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeNrtfV2THMeR5Hv9it67F8lMauX3h+zsTKAo6njHW1EiTbQ1 0ws4GAIQAQyEGYCH+/UXntOd2ZWZXlMDct9u90GrLUx1d1VkhEeEh8e/Dn89/OuQD04dvck5HXx2 h+jC0eXDu+vDd4c3h9/98VYfrm4Pqvzv7ZX8e3U0TuF/7v+f5/+2RHPURmlziCrLHXI+XL0+fPbt wfnyD0//8e3rw+++0Ed90Idvfzj86t9+ffj2n4c/fVu+SbvX6s4Hk9PRGRUPNh2NzjnuufN/Od15 +Sv/zger7DFnn/bdebm/83+dfufhznJH59z8zsv2d96+s7bHpLOvd14e95xxbx3DMYZD8HIrczA+ HaM5eHP0YTm/+K+v311dv717//TV4d1L+ZPTP8K9yz/s7iHf4XdfvtaHz29OH5GXX8SsDs56+UOv l/JB+ueYVWewVoVisYfg7C9rsPUoBKuOyj/uzpsG2+6swzEFfl9zVAe94L6flfu2f2LtUeVs4/2/ /NW77rJXx2x9Ol++OV1eTpdjkssm5NPlp91fa+XkqNrT1Wf9VWuOTue03F/+vr8clFwOkd07+WNW 56tvui9m5FhkZRP5aOO0XFbhdPnQX/buGKwLp2/2RX85GbmsXfdQ6iPV6hjk31w+0uXishH/Fdz5 q73v/9rL0ZD3ebr8ur+co5xzd35o/Td34m2zq+/rq/6yjXLZn2/+svtqTl53iNmTR+7kjOuQ8+Vf X15OqTzz01e77U1Ju6PNTpOn5p2RyypfvtCLr+ajOtoUE3ljPlk5Cvp8+dvuctBysuTZLPPPDjYf ta03//0ef2GM/I0Et31nr5zpw+O8hRweG7e8hR3uvM9b+KyPITxw37m3ECceVbXdwQLUMXqrz9b3 qjuUnTN5Nbyko5ZTzV5xFIfv5WSSQ6mVPiaXz4fyur9s4tHK4SHmpSWKJds5k3pR3Jw1ypJbyxUJ RersLXoXKlH5qKI9H6rf9JetfG8V3eWvXoqN4B/o7XCo5YXIR2v6SpfBVH4YHswxyoMJ5McBVhhn 5Fgus0cT7DFqF8iDS/lolMu6u/fZHrR4hJC9IbFHywkTNHb+6z8Mb0UcpVjE6bEPvwsfrrNhL00+ W06vJ/YgD/iogVbIO/UCQ4IJxJeZJJYuaGeZPxZADefs2Z6OQ/yAZ4nnb37Vxw9xlCrbzKJPiEef nFnFj2JPMJZsFp8lroaDxBHBo7+VEwvUKIFUwNgPeyCYkfglUTuebG7Z7Z6ozR364I2HG+tR/qb3 9eEoUaYGkie90YVjUCmdH/7f+8/WUZ5uvfmXM6PT9d0cej8hDz+4eL783QyUmHrzP+/KZ5IWPx/z Prf8Ke6+oLQHAskpm/njNjx8MYRdsbUcEoE6Z5dNwkVy8iJ9xYe3g0cPcor0+UXeDS8yH0PyDI3g RaaQwiWWWTl8f5RYlJnLlxMs0cSQWKSzlR9uDbEx8ZhH7S11D06+uTs/lee99UcvYMSdn8rd4Fsi ftf6m3XxYqHxwrmjCXL6d9lEsbbl3gGtfp2ckBCYTTiBtypMXOdyjhhBrnry2jqT6W0iI8vMRjOb EPjrlTXMJtYmM9iEkycfg6EwQNBxCJ64bS0QVB6zP321DwNKCAAgntkEYICpT+15H498BATRzCgi MkvHQqUViCqB9GyuQ4xHRInak2Bn8dnWOZI0lICjo74MV6uERcKNrZlY/0KdJGrWK0eSBmeDGGxk SYMkSoI4K3jqo7gkQmL6MZI3Jln+MacKV/tv7sXQU05uYQmLoMJU0exloJVTZnHG4lG+muQdx5RK pDVKCTpedkdaiSZKUkV6WpfHx9pvhgd8tMq58498MjmOsfnBv88SfOdXwXShsfawHWuHYCofrnMF /H/eVQ6zHikqeWTLdjg97AunAQn6Htgz1A0k+ZZgabtztrRXYXyuxZT+lIYkpk7qGdnhe1pNqgIl ksYaUj4bCjFygl3N6ga3KC5b4vT5DP44wzy+nqIRaGsxkeqxByRtxKNLjkCzoyzeo4bpx2ZHAGs6 nF7ZL5AdvaNvdJn9di8RIcVaKOrfGkw0xpo9HTt7EDgYJUU6v7XvJ0BWDJLWx4BUW6Qc3lrwgMns rWn5cFUrPb2lllgWdCbhxiCZru9sgA+Cb5LycZnHaDi9nBIDhaikZ+W7ey8VriKK6shyI0QybVje hSBai35jHBPYw1M+pwX2eJMvo8FySrvkRYgJepzuXCBKSJ+QeC2Shh+NRBxqzvuDAcGt52Bw+hFh 4oGyq07oL72fWAeDrwcvI9FMV/D1zcQgfQqWubB1Dea7wY1I7qTMKvFaHmzKWDl/2e95nssnRQo5 /wIAdgTt/7VdZ3s/yYCDipn41CgJpbEVqN5N0i7fYG6f4gJiZ13LcF8NJiRWmDRNu1DUD/UUDRha TqCE9MxaAsDQrlaE/tWjYBx+688/7MMMQzd/OngWwFwfLYGakheJOdS6ygixBc3JM78MVJdfDTDX 6byVlh220rKUjF3mFjM72T9uJ2Xvf73sS8oOs6Ss++0LKm3K1krcy7HiIifX0zT+IidbxjJeKefU g/3j5NxnV0HR+y6bNPA5NtoDr71GxdMmGKt1euEGE3RgqYuBx5LE6DKcXFqEfHNJXc6X3w5H3CJ1 SeyyYGNT2zxDqEL/qtYAhhgplpxyF9tLtagYmoBj9GzdIctbV3g6LTfZH4xsEhfl42G/yf7/YLQZ jJRAE+R6Dz/PTwtGYjLK7M8gd9/XyLOQ2y4Pvf7Pt0uLT7uT3ZUW30yCGOsUSQRLuoD2gsr/tp12 3gwOycPb9Q3Y5aL0F5RnPdLS7cnVsG5nMUgbT0BmiUGmptvDzRFkNG1aWI2WeM6ssywW4Joz/M0A jh3qjusccncEC0ry7uSrOdxb2cLNYWjJg9ghLoh48nNrkXVwg3wVWwHT6+06xZDhwiIkOWARDPmM r+f5avAGHkXJhbwzpQH8HcuVnMCKFjyfDkHEHk2sp2BAPGLqpmG1p0MQkRRShfMr/TgYhJP82DNr Qz6kG9rq45tN8lRCZk/FKY8fRit3gtXkh52LO5fVMzEluJUILowu5KJ9ydKyqp2Jg0rosa0NcsM/ XZ6HhTepDvMm1V9IM3uZxx+0elJWrMVVQLavB33oQllxE7m2lJ/Molc433twfzkJ2LPn2PanIXgJ 8Gj12ie7uFOouuXwiIfNYswyjzHi2LbJXu3OfxtKAqswc7PdwZqGmeWhMDOvqoFxkNyKJdQzDqJL W5yD4Bnk1km+t4uJxREU3VqLafBJFp21+tlDLoP+VKtsPzISwBYEWi2PeWlD698LdDan5t0ylL46 nskDweBNhyxQV7M8mwGRRFIpz7y9EQhta+tvKLt5heTbM9ICjMZX4tk/hwQ3CjxQLIIjX/FKswYV mkRZUneWzghk1q0K/HaIJUgC3YoIsnSshGYzQ5NIXJLTtNViJcxpX8P3wIiIqNQyroYVj6WtWXdE 7/MZe88rC+YAr+Y+IZORh2oLE+RRBrvZZVmGaFBaRfXRfj2pA3tf4ew3fSBCAm18oF2UVax4MgMv lkHhNV9hiAUaNN3cx4JN2gHMSCnEgj2Pc0xldriYFheU/F+nXGnZFRUeTD7us6IuKrya5J7RWJa7 oxsTTDzZwotJE1q8F3ubKElU1/t5bwqnvJQxptashRvSgl7mINkIHJQscd16fyDya4kkgtkvX8TP KgL8t+HoFy42o4hJyhLlScfLcuKFIcjjMJ6mFFmepfa0I68FPMOQydOSvzwaRWswOsFIq7v8Q+/o BShJdKc9Eq8FwSVaySxtb00rmYJaQjXeoZGhCkGMUbotjkb01I+jeUN7OxYnQ1wVydIsTkarurwe cgIQwmtJ7L+3ukk58WJl6ii+SmKYHJGzq4cf2N9BCfLK3dpxyH+5n2NQU3s9fPnv3x6e/O1PT/Zw udCd8sbmx3xAc6qPcX0gW9OexXL5Af9zu1L89CH6zrJVKX6AvtOd9mVdKX4yo+Z5NopwHhc4udUf J2Ub25oeszqy+IK1a8TbXDagLDyAhMjth73iSj3AvnjAvf2zQ6rA4UFV4NO/KhDFvPKsOV2KRby6 reU0+VwT9IHOBGKOrdWioWRi0zGZmsCOAB6Jk+VVfUlA5H9YcxrEHLFRFseQe6uQmW+NAuCtozA3 Hp2pKPjlxDsGdcapQwmt4IZa038xlNCAGyLjHFpkk7G2kAbfWhJKBu6dnFurDONwOdSRsmE9Pxcw flWf6OBaC1MqFHyR3Ce5VkyWBAEuq7PyC7pWA5uI/WH8T3GtEThoj2v93xOyvNJsGgquMxujiWft soAfZ/MNUUfiWQuXXlXn+e2MDaIMxToSt1U2Z9/606SGqeWrs7zThGNIZmwALrWc4JuTezVgHcHD raF8PeGDmFjt/uOe5oSWOK+yPMr5q/wE2hxz3ISH6k2poTGOPlrJpqa7Pw1jEYLijWVDFfeQ22Za rEb9rtJQXw1vOiMqWMr7cZjhOn/2x961SoROrpJg/jBpX9iQGaES1GWTas335cwzhzotMnQ1DSbA fKRjEegXGjqUV/qFhtYnkoZ/jAsrZqN/YNnNXekf2BUV9JKGisKL9Svne7h0voKa5N5ywjBTOzjf 5eESBhq+IXaua+4bzxn3pu/tm5PGym1tf/vlYde7r4cIGm8yy8+oG0/vuzjxPHrPZN6DTM2OTeFR AqQdRIBgQU5+nuYUV+0bNvr9Lo+m0AeS1Gj9k5bHDhvSNwCnkva8gT8PmEcSWRV6jLpc9EFcm7P6 sNHGfTkvozAm0SPKKP/Re1gwWhtt/IYU11kVVmNuJWnyxUBZ9ZKCr8Y7HiyjeESEcHoPn95BYcOk ztids0Wf9fWANRVt6Ms+cBROVDRSLe9aKM8mpU2r1gzY1bwGMK8LjAGL3mlydMQno4pX5wefTWZ4 TPCetf9syWDOl7/oAyUa+Tmwx1Ia+SmwzM2id+pqoW7MQrSE+Mya3RYh3q2RYte31ZEiRSfoQ8cK 5oY8A+c9GNZ4csiA2gT5OBskR6cVF4Yhb1S6g2KdGY8j7wwrPmGCPPjMbM0jCrvMaroYGLDWsJYr hvNUG/7p5+QCJr5CbcQPHSlk8j4YUksMmOlqk6795WjA9+weSpVgwISMq8CmR6LRgWReLW24jEpi m12+HjoT4Jgrhs0lW5WURjMmaUKebiq/oH9mCbZi6vHtbSXBVuSFMddRaIWejXrlMuoVVwz2hzhY YFNIAmb3eMtP4mA5yBCkPenIP371uI4IuBZWAM/0A2Zu/vk2/eZph3gwup9U5RR8GBGPPPBAIvki b1IrYyPzxHiVHJuXKGDCuZ/ycUht0Sz2rBmMqb1Ysff7vqECAo0Llma26BXX0/N8Qt4x+N7LNBvK YHg6OhinJWuOitbhxZvpoDX5Zpi6C147dlk+W7vab72eTCsEaxh1x0ky5FLvM+qckpfImOrr+mEo NaGHTWObk/BjYvXSw8iMiiBTJeJxvJWY3iJEz0nyYgs500eOEJC1olwQQZxOaU1It0G+mq6d/fdD dUd8ofHrimepPeFwmntlllQI8O5TKmylT60lc3/EIf/Hr3cpmUgEiVHO9v4bPw58on/v/hMG223y m1TZpnr0+aPavz0p6G4IuasmR2+jOUs2b2qL5Pd7npX8TZDfpB/8TWPFanncoOfGdCHo1AtvaadW nBznrnHmM9P5KLSVyjJ4PfPQYtlszg0uWhwKcRiFbJ11ZhMAa6rTYZvqpCezarqCiDjAdAyE53M9 ayDUagyEW5aiSkiD6ND5sulhupffZWovQQ2MGXFG7aupoWCFem86A868B6YY+RsbbCI2+POp4hYJ WeBc8Va8+GbvPFTjiodYwcv3k/mU4KqB/XM8rybXdP56wveKKVHyryAjE9MKfi8dFdNVNa99tR4t f6NiOj2vX0Bg5cttgZWvtwVWPpCx1WU+mFG41oEqdXVjq7dDTq9AnKUyTuux1atZ5aZpRE0rN7zD XKivMTF1tDKLHDQV5vAG4+rmMCdbn2U9CJm0k/UYa+PpqLwmanf39VlNPQ1SxFi/2fcDlBSQGzzT r4KnUa2edTPxNF6nSHqeEgiPLYF8NpQLitYic/0OppZyZBm9KkSQOQL2qMlH1YsPVi2youDUKQA+ 5CB9mS/0jziYb7bTrOuJQtpFmnW3qbb1EymmLYzPtCqmvZuJADSljR8HR4aKVSfj8WA+7Y8pyzN+ rCPbW9+36Gq7wy9036ZZC7ZqMnvuy4AlcUAzvaTDtl7SQvWSpml044k+JyNvbKYNxdRWHruZFVPl rF9G4KUrplrl6RwmlHUpFCoiEKZO5r6aYTjNuOzBYKqp1wtYLtrHjSl+t+lWDxMhz5hqBWqos6K0 lgJLVS1oajFqxqcGnyFESthACFeaSWeBDSKghPUgHAjH0XliCmg4puBYhdgBMLX50Z8mZVjJ0DVL 0aGilKpszqDUCZK6MY4qiklE0IaFk1DkHyxBJgED4JRGHoqOkWEROED+IQQWiwLooj4wenwEV8xR 8RYIHvsG9t8MhADBvgL2yVcTI5QIrZn6S9Lgua5H8ldlWCgw1bBxO7TgoMBUwcPVAJ6LAlMmHi1h msJTGmwGLSW6TNBeRtDJOtAOoPik6BjvJJewUoHo8wHXQzHHZQZEFYZkUmbIXaEBVJ3tixHlZgnG lEehBO4ZRQeIBcIeW/1h4HAUCohfUdhWskroEtJUXmu00y0dYNGwJk9pgYUCUqkOoyAOCHLrSu9q khIMEa/58Iy41BDpKIPgQa80sTWNkfpGJBqemsXkjkrkhGqLgaxMzcEi8+BTwRaZR3UeP4zoSTyu pz/MFj0dzXSyHCRka+9pGFaX03u0tIeu3b1AG8vHUHFNhjUytSuOjTkPEEwFF7AytPalF0l1Er04 lxwCHZZCq5JPtni0KpkIkUCZKH9MT2AA0dlRccmAznVghyAgB66O59lIl9OQfmCWFlEO4zgtoh5G 80gd0dBwTB9JR2Qulva8IT1riACzjmKGWtnHJD0NFAt+FCPbAYq/3zfavXzSNN/TcZK2TPORNn4p NxjHSkPgRUpKRQfDAxidfEgTI3O5ertnEy0AnTxDQpCryZoqVmOazymqWA0R+kw8AvgDyWbWR0fn SZnaHHo3oxe0abWbiUB9jI4JtYNeYII3bMYDYCREBh4dGji+lqEHXBshJhdZGRr0At0EHfvukMvI I6iTBvsguEwvI39O9uwyvhuKZiBGeCaoBv6A9kzxOMD/Z4Y8TZYPpvLjwbtjirWFP8yqyfdSzVe9 HFCvOBsbSD0iKvSpAsPbsfTJqQuO4Kr5qvR2mHAPUsqUmhAx12lX9IDVbBcKhezwgHoQmgPvPzpZ kD1qefztgHkRjhNrYaYIjY/1Z1+CWgV+n2bgLgsMkTybdo+8gf4do71lwRkuMgqMVgKBRjH3pWHa II+cxltl0YZiCEiJJdXm6A8j4AU1mEp9qowSfiKDegJ4QXFhjDt5z/oCo7wdAa/E25qnvxpDQLzA KCPgFSzutCe8YkG0SmyFlR+0kbCYKjX+bgS8CWkjbS6IkSvHR3slE4+JRXPwVRrHbFRiQ7/aeUoj R8Pa+mXdr97mARfEZcIJC+zpEP12z30d5gvgmOt9H1QTGl6yeIPUNtHcdB0isNaiVYzx0NXlns5Z qsvMui6HfYnyah6G7ZYpTfXZTCwvRrsllhciq9t3JbnrGb/RqEQyc1BbJKlhom6d4PRwc+QUTVV4 oPJDLLNxWw4TAKIbrHo9CE5LPMysd48ZU3GflrRhHPJTExgmc+g0BsWK5IAnqbmS3vMDnthGERnE rGErdl1D7emNhk5ulIZGQ9F3M/ajjXpUyt2D7Q3IK3sIby+3z92bCTv84tyNlcbVsOnttpDl9XbD 42rGELcqsKCCNMuoTHYXdA2Pl9ti8HfbYvAft8XgD9srY4ZGJPqUPrA6SGlERkMlyATxqcTJxRgL jZSABdaCikoTt9HVxI+zVqOhwm2lZO6r6uF3k7MbLS24Owhom+4EXPYaJbVoTudq0mtMMVJKELYx BUr6x+FMPjH4g8Pps2EFA/DSVGPUDTfHtolIi94Q96/a/gO+x2xeduyEFWKy1qzjFDCbx3d2Bczm NdA3VLXRP4mO4n90rVViT7wwl4dy3XJJXLa0ng7esqmX3094y1HXVO71QExWyBM9o5MUOVSfKPyX tCYHJlmRy5A7q0Jm2FG2pIWbMePeJod+GPxhAieICvtCHaTVnUadViiSUtmIkjvIC2dIVhWvQ9Em 0oNAZe405ps0nWSX9EAChaa+WENNo5aNh8SlDKPTucKSHijFGGIai6TiMKx50VWH0JxmbQLg/6YW NcH/9iJ7GDdgyWertIp/DwqJiukHCcmPiOkP1Os+ThQiTGte9A8ME1+hTQT9tImXiTjOwnf6XOg0 Xm3rNL4YyrIJxEwK1VGib72Ju+0tby8m3CHbiC4vZ3sMkg0Mba+b2AfCHWIDP0WqIbAQUNhBupaX ng9t7AyGjiFPrcTkNuh0NwzOIre2DMmcu9zkqTmYWisLDFokcMSudprfDnA7YDkEU3rwaAcZuuIA CpNOsx1tkEjOjbN63MMf8fKgbUR6/PDR+zQiNTjkj7vtsgP9Y/B6D+97GRRbOl7mG6JTPxjHMpNw frrNOX42cxWxVtefbY+FvJyp/LrkKG8zIa9xFP2v1BlvZr7C16/2ZuYrnGfAB9tnm6voqz5QHVc6 ReoqBCP76uRmquPGMXyB1bSxue67mYBwiAzF2gCqdQx0JMWgds/09aEXq1M9jwPhRQv0CXTW07nS MM+XD22F/cW328jqbA7EuqhZxxx8mJBqtXgYG9FAPomMe4sngW6BYs18j3UoUdGxRPls5S3TW/Ig x9uq8Hs15AaowBvmX0MRAF6XFJaOMNMYTENqgcVfnjLGAoQAWzN/TA4wZK083fYKfWC6dCzCFH1k mC5CiCJaukoW5HlBpES9IwrqSm2AdhhMhClaQ0p6CZZoDDtDCQwHH1ikL2ybXHkjAxmnbFRlndJC tskDyajuEwLBoakT3c0aD0ZTNaniEWtJb3DWaIVGR8W7VFndkYiuiMB/UGt5FRWGqjWdPoGhOs/w vwIBgkIUrVCsDJQHJH9+bPspRsAK+dBMWQhFjiVRHpAG8YvvcNISmT2t0UruoaBlxRIbA2ZXTU1G No280VR3hr2etQ/a9MrbWfugYe27UaEa+45oxmZL+KVcG5AYLPMc2mF/rqH5HNRYrKX5nCvbDmk3 yEG7x7OShnZlqZ+nJFoM9tMYpz3Cr7YsQYF8dqSNXoEs7qgzlbzAGqNc9TK+HJsJUJPTjGMUQCKs Xu3DuANOEvTqb8PIl0kXNx++WkAlN7PhMh1QyU2MPCwfCzHFxIS0o5WM19LRtIj4G2lXMyL+BuZw dSwqEZkqhaCLwvad6wRRZE/JUQk9lhSogij092soeD/utxa3lWn3L4O3tXb2K742wq/mKlBukyPE EhQoj8Zdk6nWqF2znkmMEs9/z52XHaNQL7fVMPuY2TUoDhOV/wt1m7eTVdRWGza/gu0GmkfcTkD+ bntS6uVMiFzRcnfh8+sqIP9+1jxUNfMeGPkSE1OjWg5bK8BXTJoJ7673Hx8mhH688mW+vgCtRdea ol9Mih2u8RX/OExVBpTSabkCrUVVhYHcpLcYc31oacJtMikxJ4nmYYz1helJ89AEmtgV6RRleH8C inSWVTOwMKIVjp8NeTqilg1M+wS2oqov+dswFx/koVUA9cVAynfAT+eH9sdJFuFasXE4YQms3Bp4 XJ8HKLBy6wtLkyxCN1X6MAioll3xZ6BhhjxAkEJO7hF0yQWgKufoP8kVbgtgoggoEGH/nft6S+cK n07UK02T1xnpcZLdp7q66HZ7U/DbyVB8aLNLr4YEIENyK28s7r5o5d7t02IWOKTEs+9+Xr/dUzXD UJBHRNh521EAviuv30ye88UM4LA/fU2HHQSYAY3batb/S7QJ6Izg/XILyvZeLbc4zBYFN1m119ub kG5mQ2CuDns+m3S1DeXKApW3JG2omWHago/HYozfRUqWRT5fv9btRBE4OprPWyfvo+NurorrGkOq gZFl11pcb7e1uF7NyCrOM83XQlaxtRP5cSDLAtk6NtBUyCqN5vtsMgRmGu9tOgSWMq1qlU0la73Z Zd0Pl9/NgniJR5nuoyx0Wl1bcu9ndFpFp2dC0W5VrFsSS4KnHhMyLtAzrGGXCOP1tkt5sz1W/Dj1 psNZvYnwzDrPPnUp3rOddcWlOLoSoJNivP5ZUoyziX1Bm4415VbiH8fJwP6DPmWZa+yhzh5cTVlf kE18pPaJ9Z6WryV9XEfu5czleMWk6MpgqTe8I2cxgGlJ2lAwrKFLrYrLURVeX2/Pnd7OCHCaDrVi 4N+6xNq7HQXnxZyCQxI5lNlVoH0TjKXGVpcdGubYu9LWkj+bzaUazXwlALJRjg2mBawtt3U+s79c 8HPztMNUK/Bz87TvJlOtjgshRfgz7RmVPYJNrFg5GkOt2hH2TzJledphXupKiIut7fj1pMYume+5 kv1hl5RB8vfSgPc+eg/zOWz76ANB36RTvpZ+uBmmcGEDA8VlmRca7rZd9O1MGaApsI/FPQHEKlCC zHpf6sBlBOkoJeYxinBAVJldhuymt2HhIq0p0Y7kudJACoudJMvdzMUrY6h4wIqUMYiulP0ZlNra +fhBwxWUJa8obwKaLE6zobeiyWK1Y7gRpqgpt7s0S9W6fMNJGeOIVga0Y0lAWebWRJ8PE86GbXT6 q1mrtZvh7Vut42bf5sVRYfH0MtCCiow3C2AYcmRUCABDATNMxBXG0prAVwNAk6Sv+bunMxHXWOPm bJDKa814MBikUsowT1uKBkygORWvRUdQUimfZgIcMWUVIl38gF4nhnjJXE7WaOMk1mrJ8GnasLZ6 LhtUPeNnZ+Qnls7l5EL+TozNmLMEGE+/WumFpmw/rcKOfuIuLcW7bX3AF9vVn+t5/KGjfCDT1KPz p015wOGLrZTcX8x4PI4vrIB4oLV0CAYLDlsu+Ga2J7WTcFk64ZlGgLib1LGjpmMshdTnqtDCELuw 87LtrhsaE2haa0V3fZeudLct5iFhOUgKakHn90a0PKoktnlfrGjxbtlvnA+Mb/Xyw90YycdxfEt+ lwpzG+nlhx9IYI+TLo06q07MNnytSmZfbstq9btou5LZ7cx8WzfjjnRpFj7ipVv9+umsDZMSW564 Tn9/8zPS3xfbypfjgPlK+fJ2Qkj1ztnNWnAP3x28mzG/tOUXRbjk7SMs/8Fq8Kbw9qzqntusz924 b680IFkcW1v+1Wyz7Hkz0zJWdk55AS3drGz3db8VCsYZ2XBWsc3AdbnL6rvANDKK6Jelq+nhO5tO 2tPJAsyLiu7ddkX35UQdIQRKsISgiadjKw7aOo724dBftJGmM6XeGyKL4KXe6xNdIAcORhP9fjZT P2gbrW4nwtuo9x521XuH4guCuKkKNjczkqOmbL6iCdZqhD1QLKJgrd38buBAxiPGMBiLEVFa1yHb 25kqmHWGDjAKAPYqkxdayittQ8nTWXuy6Xa+mbQndfCMixQxCNuI+0ORBLbWyoRf9/IKZZedZc3A MiJlq639acDuGuUSxs3OZSq6Rp5BuKtMRTM16YLNI6VB5aImXY/Y32ZTTklbyhUscxxscEzwmLtg +42aYaDEmkhFwUCJ1YlOOcEvpYXCEGwjfVQzGgMJGfa1Pzw9MhtxRZ/gF1d2B4FEhT10n+9GmXNB zgwK9pu7x2wXpSzL/BTq0xdchRekS82GvSYDxwc6cDyISq3D6Q/bhJ0bAgUXppK+kja+nuz1y16z uITuq2TDbF4SMwc6ej5RDOpgLZS9mhXKmjd4OZtesjrQBquARaOpUFJZOUj320BlM7fZ2sOs/5o8 KxCiV+I0HaxCryQr2gMtvZK2c/N2sidD0j+m5tqtSno50xIw64rvsh5+So6WNiF15GMwjIp0WpXE dDbhgJViTW20Z02jlr2bNUu8DTRcq6NyNm+JeEq4JraGbkikhbIykqBiP4XXJpIzil3soZVo3WYt fpoMFRhn2KAcpgqiNbRFu55Y7iFQKhsJjWEDDcgDDO2nl0qbr+9zVmmLWbGVXxkC+YmqMmZsR4m0 hpLR/20KvV/O9I7EeS2s7gTsV4/3t2M0z3I5kB1uRaQz0aFMXRZo16rCN+NgALT2zuH8yUyks6nk /30MJaC7ZCYYaVQh9FHdICgl6EBnluWdJM2FwmMh9FFaqpzvNi8xCIVbDVX2QJn/xl3oh46qRB79 57wwDWsxl8AlXa2Yi62P5fnAmNUgqVEFdAwOaOpaNPYeBRMYY9aBqajZ4F3R0QyKdae11+liVuP1 SP0PZQMr09EEU9FaUs0WZCHWEikPPcBa1Mpa1iss1MUpGaUyA0oUiepsJoQ55td0VPnIhVBAAhJI SGdzosXiW0o9ifLVrKeaZFHcokqJsbNB/e8ky3rqf5MsGxTNErZee4r1E1b2GkrATxmdLEOyTp01 pE7oM882XCh/HQfuv4PUSf40jpJkIftUQHci82UbmR/myPwp0dniEnCoZdIyq0RXlQPZxFZ2uCRK 8SuzwEaxs9npBtwS6Xuy9X1OlV/mDeyPszIY1VUtxEYVLV0yiknE+JgFGQsaAQljfPdW8pguVT+u QQtouzjKjM6yblN9mJRDE8e1pdLfBhNezfYrBC43BZpEKwUNCiiY83VcFPi0rHZLzI2XgrpltdM+ VisFvZg0AoyxNH+DRmijC8x4EPLQ9YY4RbCK77KFlPl6nH1Zc92sYUcPOxRSKwVdTdK3av7T5C3Q +hc2lutMqSPniXG2IlEszRmeX4Gu07bF/kOw+Vy74vT3n0/GOXybDOp3dZSR8qa7NCRg6IlmxrgJ WLeWNKu8d8XWqwm5NrbBoGG7A7hsUdP1NyifKU43Q7E1c7lZpG+m6gZ+NSm2DlOhLbfDLIFhlfco YN1m5sPLvLjKrHeewMZpRf+vZgPj1jJLK1q0xjFhS4hRZadYhblo0TacMbIkoCXE8FMu1N16Bp70 dVoM8TYrfDambpDRyvQyLCkz7ohWKNsHw9cvYBe0YYPT65Hv26ncVPJ0phui9rQlIJldkG9+/mw5 vXZUnMUBb/hsGTcwpESTnLKBoTq9DmYtJbnLVPbzPrnLG4qzyIFOHb8BrSO34/GxbFCYbY1b7hco WIj0su9lC9ObLilQRQ7ipMH6dMzc5PDStVnyvjAcx9Z53o98W/qzysi3MXwBoJIIxnib2qPZTWk1 YgW6PdFnw4qDsuXx04A6SEa7Ot1P9xFVlzkEezeMGkLRlgpzd8sDP4xLWTCP67nSW+NiTM71acUV XQmxYqo+I1whxnNd6+l+vS0A9m7Q03XicSwTS+n0dL/f1tN9NdH7j4aK6hdB/6bNN9PTdW0PwWG7 Z/3NbFGVsYx8+DiFrz7BB9c08DS5I5O+nrFFY6XGX08kvlKTFBpmZstGF8dqD6XKzb10qXK3FP1m ewjpzfYQ0mGmvGMra+jzYQgJHomqqcfikaIm+C8WllhktlZU+5ViMxyF858Ma8Z3TelBaBsMh5SZ lkOCCEWztYExWnhgNBNJIEA0W/uqR1IgQFg6T5/LThe6jz2XnS6VU/3jRLnTGVbcKNo61S991QMp MOg3BqwURJ4cJfEo6J3UiuqkcAIVJ4L2i2xntIwcXFT9Xd2J9mTasrZU3lxjKZqJfHPLpTbOu5ls v0ls04GBW6L6UEW1v83aj5dhScpR1c7Sm3N8DxXorvqSObcukKM3R0ueENZpqHoEWaA/BCZbKDBK 4q+nqNqBK+PZ63QluXOsbeBK9kbt0JXsjeqVlEVSFaMNluYlS8ousHKqh+CXpQJRRRonsuaa9rCV yF5ngK0E9sXWe6SuhuJgYV2xZ1KEbzxffI4aMRWHjYAzdIeJuOh4ofAySGrFQoTxtDZe1qrTalUq a9U5rbqsVX9MCbltV8VCd72rOHhLxFqIiXViLc+3uZLPB9b+qvp3Tap/W0NSueLauxn0NLwrVt6V ZoMrurwrTeeYyrvSVPAd4mkq0SGpIp5mWEguPHRrmAZZgZ6ONnDKpodECTVnZLpsrJpSdJV4Aa6d Tt+yVmuRsMwoMWUTVVtE+tNkNbVvS7LGAmAA4ZGNk543V5Ovttpc/ZLMQDHmBxjlMVs6Wr+agRpE cdczUO9mqLbpdN/MtOZ9RZYDvQJQw0U28VAmqAxdLdCN1vdpSkSAMIahuwgaER3eQgEv+cjURSEI qdos6vOBKyngztbcblhFhQqe0YwHVLgbnsqApZIxZzYomErGnOkODFhSJ1C1rNXmjbKsU1gkIY1i 03gZO80ah2EoD4K7ka2n7RQkzLQZ0y1Yfba9YPW4S/LFFF1P94gQ8zheYlnrYfbLkO0t1hT/P952 +dSm6kh3XHY0VV+NqxVDyoN1LPOm6s1ktWII1QX+OEoGlq7qsqur+sNMrL0RIobRXfgp5xiFxRRa UGSuv9AdVWDEAIPefKNTvJsUY0IgFb2y2sgrLhdjsdabzh6AEK6pEHGp1Ci63q1sRmqB/sVsusCa tLGZMfEq6Xn1EQGMZaV4Q/8vJ8MH0WcmX2IKF8oS7+wBvSzf23gSN1vY7Nhq4fjNbLhg4IMvl9pm ba/9u9l2lbaoZyzjoG1UFZLfzSaK+XJFsGrbXGQ/8o8iT3ULsxKPb1Z4Q6IhyTG7aHg7Wb3oXAyP WVpRmhJQyiSOcNxZcdyWeTxMatqh+aq/THZW6ORZxSwVmbhEmdvY+BIpVNTAc8pHKil7ST653iaf /J+ZPk5T4LgjklsM+kNdoZnv69kiqeyZOEhH+77epn0PvgxwTuVMeQEB9GdP94qJBbcy4/OZPkKk a6ktBL4VFTYvEjkpJ9LgK6xwFVjKU1jhTjHl8s6PviF+dEsF0tXi7Gez1KENbQ4b5gD3VDKkyFJ4 3TmFLV53OwVvZ7lBzKyaUXKDkKkqF2JuClSKfp0b/GZgBigsDqO5wb34wumb/Y9tdYX3RF2BDGKX VVOhVpWfz1ZNeTqDW8asXGLaWqX5r2sR5+NsE5Wvbr6vNBYFheTCJ/UPtUefb0//8N+HpB49OhsJ bOx2bX6YYFKTouWdfUgJMNHy9YjN99tlluvtMsu7mVjAhm7tesTGbk9bq118Oou+gNVlTLzOb5UK ljr/x5RP1/5JgoS069rTD83zOwih6JMJ/GJbXlEik2PebvvgktfPty3ruhsp7izrajvbud6mkM5M SzfnODOtkNZDi51piV82W6blaG3jNCu9XKoSP4So5JzA7cwtZ3mE5Ry2LWdZfSrIfhi3mpvOJ4jU mm0CqNqUKVHbMll5BtQa3jnuQq7lrLhdv3jZGrGkfljszu85g4+8rTX3k5sPHsJvtnc+vezeXyl2 Ndbx0Nley9dejW9IB6XpCCXekFeej6ZAlIL6dzRhleWdnhXU/kig9nIJQR5yeecac33cv/RrRNK+ 5y0+6raLLt5jz/H982ThL7wsEXLpBPM/zBdtzxvw94sDWeNzJSI0NlUv92z/x5BjrURYbrY1SN// LA3S5/viPvg8Atz2v4fHzW2jEuRz3nXnz/oS1vr8D5UeDzkcS2sLp5XObI3QaaUzKwpDhULV+tj3 w4DXfROO9c6hY9/kFt4Qjj0ToD5x7A+7OPZfDBseIThGR5VQU3QphI2aIrpsdFajTEFyEv2qTzaI CaayuTWSKclOhPp6W4R6INkDlLX2xYtZPtvaF4PSMxrkgZKNuinnq5kirM/M1orKdKOFvprxv6xh Yuddp2xYawDIFjyT+D1XBpmgLPRtXOCar15O0RpNPgxUFPznnrMvPvoEVf6teZW//j8vFK5KCmVu ZHN0cmVhbQplbmRvYmoKNCAwIG9iagoxMTg4OQplbmRvYmoKMSAwIG9iago8PCAvVHlwZSAvUGFn ZSAvUGFyZW50IDEyIDAgUiAvUmVzb3VyY2VzIDMgMCBSIC9Db250ZW50cyAyIDAgUiAvTWVkaWFC b3gKWzAgMCA2MTIgNzkyXSA+PgplbmRvYmoKMyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1Rl eHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxCjUgMCBSID4+ IC9Gb250IDw8IC9GMS4xIDcgMCBSIC9GMi4wIDEwIDAgUiAvRjMuMCAxMSAwIFIgPj4gL1hPYmpl Y3QKPDwgL0ltMSA4IDAgUiA+PiA+PgplbmRvYmoKOCAwIG9iago8PCAvTGVuZ3RoIDkgMCBSIC9U eXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggMzQ1IC9IZWlnaHQKNzAgL0NvbG9y U3BhY2UgNSAwIFIgL0ludGVycG9sYXRlIHRydWUgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVy Ci9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNqkvXd4VFeWLyrAcbrnu9+bf+57796Z+WbuTE+37e5p N27bgHKoKuVEdsA2ziAhlConSWRMNBhjTLAxBrtJCpVzkgCRRI5CASGEhHLlU/uttU9VqSTovuP7 3OdzG1E6tc/ea/3Wb8UTIgxDgoQwgYAvRPwB4vaQgUFy9xaxNg1s23ThQ4k9W2RLF9tSJdZkeqWL /8sXfFhmgV9MFdhTq5ypAkeyyJYqN3PhUlg4Ykua1JYmsafBB+ASWdIltgy4+La0aieP37qg7OxH C3VLX/9mwf+oy3lmRcr0srRpKxKnlc2ZtnLWtJVvzFgxBy74SdzKBLjg589/Pid7a8kwCRD6T4hE /2HwCsFz+sdI34/nt8g0hbA2uZUjN2cojWkb9AvveU4FyCj7Mfx4+N/wR7hbAP8YYv9F8I/Ejz+H i/0k/asgvSJfhR/y0Su8lMhv+ujHQuEfMuzP6d8z9KI3x/t78WLYb6E3JYHoRT8Z+cZQZLVMeOWh yOd8hAlG9wE/w0RXG11eIHxnPwnC13kJvXP0duyqgvTfMT8Of2kw8kXhX2G3K/JEweiTEia8Vwz9 DPwwRDzE2/zomFw9X2LJFNmTxbZkuTVDpsnS3PvKS8YCxN8ZOrdZ97lSVygzZ0rM2RJrjtDI2XVm hZt00e+kSwjhNXFkJPx0E4ceObvYE/zbV/Q+E7sa/gs/KEiQ3R/4YTAsGyES8434+Ezkz0z4KPEX J84rcoqBAN4NrvAdQhPLCwvw5GVNHEf0ihzrxAeivxTd/FDk59EtAgVvvPOVRDNXZMnhWzkSS4bM gnqKxwPyhncGHBjzkr6rQ9bDrRtXNS6VquYJdDkiK1dsz6BQkCqz/wIciKBBKvwuIIDAno6QAsdN v1pigrtxQB+F5lQWAQAZJDaOyJHJd+aWO4sXHOO8vPY//6Hyd79a+afpJW9MX5k4vSxpWhmqPHtR KEj4hVDgHSe9h89vkmnzo1CgMKav0y++6wUoGJvY3on9D5DIDycdOmEPnZkiY9EPRQ89shRcA/vD 4NRTnoQGkdUGIhcTKwxToCAUq+mhqbgUo4xP+UAgupiwqgL++CNQMEkYJ+PJxLdOwNEk7XsSCqJA waoPCwXu5kdHFaq5CAU2FBI4DoSCjh1eMhog3s7Qmc36j5X6XJmZK7ZkSqxZESi4PwEFk/d88n/G 4PLT/3bywUVW/sSHon+EbQ9MwC8TVc+YzYlRxlgoiH4s5mgYCgKBUOz3TojBlH+YKdfEZ56CFVMk i0x5rgkosGbzQUNjoIBQ2+Mmo0PkbmPbl+sa3qlpKqg1FCrMuTJrrtSeCYZbZE0RmtNAkX8RDoDu Ax/Ag6bfCNgOZyrGc0+U2lKAEgiNqVJHltjG45vS5Q4u3L/SnvepcV7C9tn/7bN/fvGzl/6u9E3A gRkVc6ZVvAlX3MpZcSvnICAAPYhc/3UoCBGvh3T/dH69TJsLS5Jas0AOpeb01YbFd7xnvcQbjNnJ iNLFmuwpm8zECn+MXQjECElEr1EewgI8SaGYCbgOTdbf0NPOMWJlYjU7yiUCYcl/ihhPUQom9BQ0 eooterpQhREpZg9C5Al7NFlco2wqskjQ95ZHRxTqIgoFaCPkliypJkfdud1LBgJkuJM4NxnfVxh5 aE1AfmwcoTH969MABQ+mmL+YA2KettonVx6IIHms2kZQl4lCJUOvGBY3Fd6ncolghG5Fdgf+30s5 3pR9jFX/WL7HkKdvPjPxgdj7hGJhOcwqI/DCPB3WcEEDTXe+kmmKQBmF1rQIdU+mpM3vIWP95N53 zlr5saJVpmypPlFuTgcdAVUVGJNF5kSk8TaO2Mr9RWgAR8x3IB9A5DFnyoDmURMgsidKHaliS4rU zgEQEDmy4arQJilOL/rU9Na/KV7+1af/+n9VzH5xecK0ZQnPlKfElb4ZBzhQ/gbgAGo9IkDy/xkU eEn3z+fCUACGBnYDHJNVxsW3vee9yNamqBgzlWXFcIDghB2PhYXAlJOdfNxPIDlrKyMyMJlDxroS sQoVmKy2cPRR6xOYWMkT9HKyOjBTaHOsfQ/9FUQKTXxjYIIkxOxN1OSFoo8/8bsxUIACOdzSf6hG nQ+CAUIlsYDbmCvV5KmRFfQFyEAncQAUyEzgnCYiKQXeaAAoWOkhD/+a/D+FEkxeA4l6Q3AxE95Z jNPHxLAmZuopTGVBU7cmOOF2TWKDk9nUU09nkrF4mlGgv8VMcoWecHnYbQ9MOd8pnM1LBpvu7EQf 2cIV2pKQ7VMoCMI/xD1Abh9sXiU/WVRrywWvTepKFlmTQP3BI6DmOwWJgS1DYM74pVAArAChwJwN OMC6BnAH9uewDPaIEQ3suULX/Pfri/9J9OqLJa/O+Hzm8yviZ6xInF6ePL0yOa5sTlw5XKDyyXiV wRVBgF8MBb1Hz26Ua/JxhTYeuD9AeFYZF972XvBSDvBUy/ik5xil+sGokIdiDQ0zVfFjVhLjgMNn 3ISMUdtBf5deMeydCU0hrszTFfwJC+Kn9/SGrdIUGzThekQcnNDkyMNUvuGPbCATDK88uhj22aPP FQhNtV+TfNjol/rIwOn+72rUlP9bkTHKzYVSdaG64ysv6Q+Qwa5Q8ybDB2CPRPYElEnwIg3p37RU eMnjyS48y8MDT+DAJOR5CjCGdSoK2rGb5o+1+/97zsTQvWMmsCIUw5fYIMATYhCJQU1lTVOdkUm7 yEw4JhHIihzHxNqivDT2n0Dk0WDnB9W3d4IKgD6KrAkAAjKMAaYGiR8IA/gFiuPFq2zZ1ebZ1fak clsC35YC+y8BJm9JAFYA+oJQYMv4pbECdAcAPcDXs2RiiADJHhdvZU8XOJIF1kSZiye0Zwlc85eq 5/0v2R9eXP7n51emPVOWFFcaH1cWH7cyHplARVJceSJeYShIjF6/EArgYfuOtm6RafPRbbFzYCUs FNzxtAUmc6q/BQVTcTtCL5lYoGYm2c0YMQjiKTOs9aSn4w5zyJi4X8SdfOKgJ7SACZ/4k6sNa0dU qgMTODCBAJPYyERAIMRMZiB+ujxvVCIjyh79GPtFgalEd3I4a/JOMqxAslAgj0KBqViqLo5AwXBX 6Mwm/adSE0/gSITDklo5Ej1nT3OVH6AgGBt0jbrkT0LB05jYFJYTDtJOeV7/JOCNKGboqfcJbx9D A4kTXCXsa8RCAZlCAwKTzy4mEkhX8tfFL9ZdZaYGuELM013XyC75yDBAgQL4GNrlBJoLwFiNhwxf HbKvOfnWKhNQ5Xhhc3Klg1vtyhU4eOBHwCdloK12jO2DKa+mXtsvzCBgnBAjh/Zkyigyol4GnK+i mVtpSBI4Cz9QF/2T+KUXlr8yoyQ+bkUKqnZlQlwVMIHZqOmVqRQEEqmDMIt1E+LKUuECT+EXQkH/ z2e3goOA67HjQ4Gfstaw+N741dBEmJ2Z4rVFjCkNrIUCT/ztU7BiMn+exNZi0T4UGz1gpqgPE4MG T3ByFgoY5skgXjCWUsbEB2JpQMyvTA5Hs59hyCQtC8f/Y81ohFdM2mHmiQeZooUT3+4jo6f7fqxR FVIoABcyM8IKvqaxgtEu5sImXYnYWCiwAXPjSq08mY73bXOFn/SH2Ugoij/eKBQ8ReMnhzpjNjYS MiXME/FDJgYK8CvAYvpo6GBKlCAYdiGjYd4Jm/60lATzJB+b4hFMgtBJNCY2zskEo7mh2GhwaErW gHlq9sSLrOArhRp2PmMCCqzpw6TjYMtaRUNOLfzRnlBpmyNszi83ZwtsGMxBVmBPAm4GDjUYUAlG 9n4JFFgy4KARfGyJIjtgO96EOoYZ7D3B45CdWbSkMf9/yV96oeR301e8PgPdAVDt2XEVs+Iq4d/x SAlQ2SkOlL8RV/46RQOAgnS4wlBQPue/CAUe0vfTuS0SXRgKMHhoTlmrfzsCBaxcjYXIMHBUH174 H+C6BslAiAwSTDh6Y1glM1XcGdZ9QLEJxXqmoah2Axy5fcTNal9YcydJMNpZmrfy+sgYLABUAxAM GDVdTCAYdQmj4vcEFExATehJe4RrCNCbe/Hm+JhghUO4JP8T3J6NUgZiQqneWG9oInk3mYGHMAY7 BhoNa/bhv+EaozkaLxuB8ZKxlr6jNU3zaawgHWMFlhypuoCygigUrBAbiwEKwHzILTy5jkOh4FEk tYe7RJcNp4NEIvJFowHiDkQiP0965dTEM7ExF3ajYmL77M1RDIL09GGXPGTUQ7yBibQge5oBH174 +RjB8FP0CLt4wTCMx8ZzApGVhHfJi5fbG01WTjqFQGxGMjQlJDs5g0wjFeAFj9EzhW0cDJLRIF12 VDA8ZCACBVyxJYnFAVDM28SwRv1+jb5AYeGgF+DkVFm5wNhRZ8O1BKmguRhes2aKfmHYkGUFUnOa lLobGB9wpE2wBVu2wDnv/abif1W8NuOz3z5b8TqqOSo7XLMwOBBGANYFwFqCaStfhwuhAL0DYAXp 08tS0I+oiJ++Mh6gIGvL8qGIw/W0ZKJ7nPQcOrdWosumeQ2EI0AqYAUdnosgPAyey2Mf6R0mtzoZ 15XRpivDjZeHGq6PabuDLUPkNo1ojfmJjy3GIKEgvUCQQsEgq5BwE884GRslo24USzd8KUN8IZQ9 AKKRIdLVHjhzbdjR774VJCMM5YEMC9ohuIWPFQ9QnDHS10dudASbb3o118abbvvMnaEzj8jNMXLf g5I54iPjYdGKMXzBEMMyU1+QUlPKUQmJhiAY+MVx0veIXO8kp657TFfGtDfHLd2Bs8Pkrgdl3u+L mCe/H1aCIWUPZl7gF0FQR0NkiGHG8ZGDYfsUNVSsjngR64bHSfcDcvaWx3jTrb/tsdzzn+4l12Dz KabB08Etxuw9f1E0LFBa84UWFDO5lRPJIMAmD99nzm7WLZMacwUY1EpXgoOgTtt3qspDHgaxAMLn wRqYsRHyoDdwtt1jvOHRXhvXdoRcvaRtjPSMk8FxMu5j1Secs2eNsp9dtTsYDESwIsiEN2csNO7F 54Xf7e0jV+76HLc8hhvj+ltu+31yfYQMuonPh2lXH6v7IYKfH8ezAPBx+8lICCM/fvgGFq/h5yOI 4ajsHjIECOxHHAb0ACjGXeoJnrsxZr7mNt70ujqCF0fwcAHWQH/9DD3TgN8btQ4sBOA+B9noTTA0 EfWFPfHAzo+Snh5y6bbPetWtvu7FDRkg1+HEYSVu/FLvCOlRt++SqwqVlmy5NU1gTJZST7nh0Vq5 huYNzZlCc4bUjmSMxQG2loDWFEWhIPMX5xPNqXIHEINUoSkJDLHQmSK0plBikClxLPxIteifJa+8 UDbzmYrEuNI3aJrg9Ri7nxgJD4bLiug1a1oZ/SuECJpHwBjC7Onls5/7bHbOtlJgBaFQ6G9Bwdn1 CAXosKSLzQgFqw2Lb3tbqCL0drjP6K59u9vC32z4ZLX6LeWJuXCtaXpnu2n5vmaF6vqem6OngFrQ Q/dG0TsQQLsZDIGEjD0Yv32q19Q6bLowZLo4YLzYY+4YaXOTR49JZ3PXiX0O5QbNJ6uOfqg5s5cy Da8v4GWPMoB2YcBDerr8F2x3j524uGu3TbxRs3R104K6hnmrG95d2/jRTkvl0bbNLT0nHpCrHjxf 4AmeqIMY8NEqJybATNABtOwMih8q9UPSde6R/ofWL3ZayzfqPljd+DZc6xo/3KItOeBSnmz7+qb7 HAj8SAiF1h0avN3fdnWw+cwjw/nHjguPbFd6DEO+myCWIKUMW97DimsAjSwgxhAZ6CbX1TcP7m9R fmkuWdf0bt2JBatOvr1R/cluh+Cn8xtbHzYMkrtDpG+E9DU/Pq5oWiQ354INAqMjt2ZINVkRKBi8 z5zZrPtUZsaTklqSFJYMpT5rlwvO9x54tcOkr224peHSwQPOtTsMJesa31rVuLC2cdE61fvwaIfP rnf2HH9Ibo+j8gJJoJl9tl4r6EMNoqjlY50han59xDdCHo+R3nvMeUP7D/tcq7abK+FuqxoWra5/ a13jB18aqvc6NljvqToCqFmwSIYMe4K9bb22S0O2833mywP2a49tt/tbgqEhQmuHOgfvnO0xXR2x nn+kO/tQe3341PWh1hHSP0wedQavWduPHmxetd1Quk69pKZhcW3Te1vMK/Y7Fcab+7v850ZJLzK3 cKWHn+5xJHoA/7DPgtwjAKjopgjQ7m413jy4167Yol++VvXuKtViuL7QL91j45+88OWlARMg5Bjp HyT3Gtq3yVSFMmMWWmTAAUsaaP2m8wvEhnRM88Gem9Ajk9C6ILa2kAUEMYsGSAm4vxQKaBYyA+sH 7Bz4b74lQebMEFo4Qtd8wIF/kbz+YunrccvfQMtehfY9XExYFs4ORGuK2IKiGeE0IusUzMJrRfx0 9CDCUJC7fQVAAcMwf63acJwMHGrdLNNliu1zJDbqKFky6kwLr4esgKVN13etOfE+sFa5rkCgyRIa spXWQpmpQGrMlxjy+E0ccX3WFvP7R87WdgXOgHYHqE0PhOPNgQAZd5M+2+2jipPvidXFkqYceUOe 4i/F37r47cR09Oa6WnVxdX2yzMxVauc2XfoWOD+Dlh3JpJt4RsmjDnLmxI0NG/XvKBoLRA1Zwkae WMeTmzLlpmyZIVdmAG+6QNKYD/fZbv7U1LGvj9ykVjsa0qc8gIm4lFRBGcrSR0j3mf6GHdZKWcMC ubYIwVDLkRoywQrgw6qyxWqOUpdfp37r2LWt98nFMdI9RO7sbBJJfy6u1c1VqItq6+dvOLLk3L0T QeTkbGALrGmAir0XlO4euXTizq41pqViTYFQnSXSZMp1eUpDgUKfK9XyJNp0mSpzdcP8Q6cV5/pV j8l15/BBuXq+1JRFhSSRQkEOTSayYcNTm/UfI4m1J9TY0xRGjljF291a8ZhcvRVs/v7c6rXGj4Qn C8SN2TINV6zjigx5UvM8qb5Aps2XqbKlJ3O3GZdZuw49Ih1eNNlsmIYGfBgvE8TAIKUFDF2/302G HpKbDbd3rTW+L1TniPW5An2WWI/brjTmyPVZMnWOVJMn0xStM31o6Pqun9yC47v56NSa45/KGxcq NAsk9UWyE4VbVMvuuy/D+j3kUeO5vXXHlyjq85UNBXWqecpji/adkT0gZ8wDP2yxlinVi2DxUi0X XSQzj6/jSgxZUjVX2Zi/Vf+Z+e53wADdyPMD/tDk4CEL/UHgYUCNhgG+bnkcP19Yv07ztqwpV67N lOl4oOawbJmGJ1dnYZrmZM5a9YJ9p0XXfZZH5HJ992aJKl9pywO/DKwhmmwrV+ZMw5ieCc203JIF Ukr5fNokKJhAg1+cQYBTpvWEvGpjGqKBg1OhT5S3Ln6vsehfZH94oeTP00uSplUkIw6Amlckg+6z NYQRHIhCAeLAjNJUuGKg4A34AEJBOQJITKzgb0DB4JHWbTJtNuKADbNUsEiFpajZe2i3S6g4Ob/O OFds4FSbUmQtuXw7t8qcChffyhHaeRIH7FiKWJ+iaMreaSw929vkQSPuZTlyECk5eN/9tns/iRuL heY0kSW+1pFeY8zcee7972+Wixo5Ql28zJEgdsZL9Tmam3sBTILokGK9NxgaS8fhL3SfyTW5Ih3N ndlxx2QOLmKpOZXekCO1AWJniHRJcgNX3lC4yya6MtwyRkaBsgbZ0AFYCSTrDEo7IhVQ00d95NpP rZslR+cq9PlCI2sFUpD1UaCW2PBcxI4kTC0ZM8T1OdtNKy66T3YQ69euCqUxW2hKEJmT4UFWH88/ 3f0D0FfgGT7krGz6YBjYVPP9kxv1JVUncyu16AaiJ2iHO/NA2DD4b0/DeJElXqFPk57grjrxLlh/ h+cbUC5YTwwU5NGwIcj/WBetNlSYs/C3rClSkB9D1teXVjSPHvzSWgYqKdBzYVukDrAySRJ7isCR xYfNsWbi11lTgUWgUhyfu7957c2xs+iMMzQ1ADyajf2yDg4zHkKT+uDGWPMOi4B/Il9k5omb04Su VJEzHbaFltPQzJcF9iep2hwvBw06Oe+ni5tAp66N6JXqBWBDBSYsgqqx8b4wv9cdOA8n6yHdJy5s rdMWivUA/rh+wJOdFz851lsnVReLNNmAgUog4eZEgTUevhFzahbg6kkgJApNpuJ48fctNfdJmwcP NxQlYEwg4pmiBQF2dFd759uN6o8UjflyQ5rIOFtkmSN1oOaCCEnN6XJzRp0jq8bMkWiTFZrcdaqP bMPfn+hdA1gnNPDA9MN2oTyAjIGbZk8DGg8/gQshwkwrAy0Z4VQgXsn0Sv3FmUS6h/BFSAPsWWw1 kdBVtKQx/5+lr7648rW4ZeALJE6vTAMcmFGVGocgkDyjNDm2diiaNGT/agaFCBpCxGs6uAnAJSrh Y2+ysYK/CQVgvAYACuS0B4HtpxA4MH5YZ8lXaPMAIuSWHLGdA+cidHEqrUlwRiJXKt+RWg2Uxp4h dGSIbKmYkK3PWNf0tq3jECVdI1SwGD+D4RrT7Z8U2oXgaoHwyABO9ckSQzpcQm3iqpYMmSNJYE2U qHNVV3YDbvipj/mY3P753EbwR2Sgd+Y0sYsmW+F0aDyHXumwKqmTxweHy8kDABdaEkGQJE1Z69Uf uh4cG8dbjTMhbyS75weZoRmTgc7g2W8sIvmJuWvt8+BYQUlp0CaDjZpigAge05EEz1hlQZ2SmNKk Tbxtjvednl3bznwoMMLZcQQ2rsKau1pV1NyzHxxS/0QiYXSUtGuu7lzTsBisv9yZLXRyy60pVbZU vo0WqVqSQQAwWePkiBHcEmssKWvMRSC6G1wL4Z5ANdFGWJMVFh5mEO7toYXH7i6MFXwORhkWCdso MyeBp7nKVfCF423+CS7fwMX7u7BcTWiJB/kEzYUzgi+SOjP45iSBKUVuz4JfV6jmb9WvaHus95Be PwAvKFGQZdduGh/GYvvz/Y0bVB8r9XOljrxqW/pKa2KFJZ5vx7oXlF6ss00XO1Lg61AAzDy5sUD4 c9axi8rWsb24QidWzOJhGZI3mN/qZdp86Gx2Hz+/CYyy3JZS66RG1sAFZJPogYxxwezKLTw4wbDZ hZXTCn+JM0niiAeHWmHk1WoKdprLOpkLHgwdRALPVJj9QQ9s0YPA1R8uKOv0xeKm9DorTwmSacU6 XoAUgSUVU/+wKgtWaUpNHFgAcpvGojrDW6ucC8ALALOCWG0N5wdltkwRHL0NQ/pselFCY/sT7sD/ PyiQ0lIEgTlD4soV2nL4znkfqIv+Vfa7Z5e9NH0lVg5Mq06NK4mfthL7C6aXJVEcSJ7AgUlQkBjB geiFjQlxpbMRCla8AVBQsLN8iK2H+StQAP71kbNbFOpCGcIdPiDfgfVOwIWUAIZmREWwBUJrGgCX zJGFygLCYAUzlwEaQQEBFAcONxPYV83xxZbOQ+MoY+N+DO8EgIobbxxS6OajqbXCbVNkNjDrHEzI Yi1HosCYCPtfo1ukvgwy3wsWcIzcP3p2k/LE3BpTTrUxge9IFjhT+DYs5IBPYnU0+G5mPFP4Cd+Y LGNF3ZEIYiMwxst1OWub3jvVc4JGMMYmAs4h8IpHu8j5vS0y6YlC9ImMKeCgVdviRdQG4Q3NaLXF KO2pmLBzZAHQAQdQmtOVBs56R/G60/MrTWnVTg7fngmEWanKc/Xu9WBcGrfXj05NF3pVTW8B+Yfd g/tXgVY2o57CNioAtUDNLVy6fp4ArI9jjtA6C5iV0pQJninInsSeCbpG7fhUKNik/1yiLwAVUzrS 5LYkgTlBCApuADOXI3Vyha50AGqgavC9AF/saQrMYLtTADNFDm6lORl+FzQOaPN247IbbpOb9GN2 IMQG4OG8BsdJT9uQYW3DUrmqAIhxhSlB3MITt3AAWGCfAXzw19kqWQtY7VT4Xr4RQQbIUl1T1jbX Ypk9b6UlTYBakyY2Jm2xLekJtPnJYy/paby8o8aQh8s2p4EsYZbEzgN+JTEl0zacNFBPysPR+CIz t3GENiAesyXOVIQIQwps+I+t6x6Te5gQCbJ+AkPjA2MPya2fzm2SqQsqtfEgZrBFImM8cAyli8uW z1XDtluzJfZcsQWYEg+fxcqpseahV+jI5hvT4AKeCVAgdaDR33X9c6EhUwb4gKVHSYCxIOcg+TRI SFsGwmgQ9RH+D4hButKVWW1IFTjngV/wj6LfPb/8ty/yZ8ct/zP6BeUp0ytT4kpms52GM6J8oHzO pCtcPJAQhoJw2DAGCsrefO6z2e8eVNCwYfCvQ0HvkbNfAFMC4EU0sCKr5NPHl6IRT4RLApxNlwR+ OuyzpClPqsqWaDhg1sWWFNwcZwoY1ipjEiipUle4rvEDkLFR7JEJV86Y7hxUaAuQ3oN4mHAnQY/Q hGEYFvCZV6XOFp1Y3HRx/xjpHCY3mq5jfVetMR9VxglsJLXakSB1JsF6pLoMiYoHbp1InS/UcQTa FKCgoNEgdVjG6UxB0gI8QZu9vvGDtgGNF5UUKSRlkN4hcvfAObFMmwtkQ+nMQSG0p8iaaZ2nNUNk zBTpwKPPFatyRE3Z4ImLdTyxmQPiKjengw8CulmtY5NKoMLZEnNenabY1fcdMhAaIgiQXuvD77C7 UJVfZysG64NUH+i6LRG2FyixUJMhbOSImrgiTSZGJ0xcIFqiZppNNiELVbiyyrVJoLkRKChQ39vt wbTgWCc5tUn/sdRcWGlKYd1VLJgHEm5B/wg2E9S2Sp8o0qeB5VU05cqaMG4g0aYqbFz4ompjhsjF EzgBnWYrbOmi4xlfWVaCozSCmcew0w0e/c2QZYPxQ4WmWGHKR7aMlfCJNJ2BmihUpQjq09Gj1+SJ tVkiLRwfrcO3oeMAhFxu5lbasvjNOaC8+NSmtG3WpQ+8lwOYVug72fa1UJ0laUlnK3VB78C8gqmV AyWzpAiNqRJDllCbLdDwxHoERiz1N2fInNlVZmBQYD5Sa8y81fVvXRhQgysaLfj0Eu8A6Wi49aWk vkBqzAb+KXPwkOSzIXo7p0qbDNLC12UK1Dl8bbZIxxPAs5gxOAbiDVAPvFRoTVE24+8KTUnAMMHW awa3gQkDkoNOgT2Jb48HwgwWEOsKMF8wESdkmSobMaAVAmF8kND6gZifTwIBADdYIZBMeevbSxqK /0X2+xdKXn5mxRugudMrwJTHo0aDX1CeyMYGI8o+5wkomEMbkfCaYAsABRVJSC3KE58ti/+7T18r ObFmBOPbgaf0oUQ6E4+c20BjBSCu6XD62KppycLMtTUDVECiTgPGtf9ila5rh7Pv4KnHh229+366 Ugs+IGKCEVgcB0ut0BHmYECvIe8bW8UgueanwTQveWzrOAz+PtgC6oBwq208gALYOoAOcWPuesPS AxdXqdsP3Bg5PULunB76Eeu99TlKKxfgBSwdUGus39Ck1Khztxk/PHK+Rtux29Cz59ittd+eq1it WVCjzgdgh28HeAGKgs4yGHFN0U5TVR+57SN+yt4ZDD60fy9T5yGCmdPR+4P1WNJAU8Q68CzyNlo/ +u5STeO9HaaefYbOr3++WPeVfTkQSLkuDyRcaqTZPZBhC8oD38oDKFA0Frj6DgLg0ETZYJfHtVq7 WGbNlZhzAFgAykAOAQRQRxqzNurf2XemurF9i6l3j7pz+/fnZJutnwrVRQJTntAE1ieTBkBS0YLT MlSAAlgtbVJm25EQCkTGHGAXoBQgwDJXJvpH1gwF2DI4CG3OGuNbe06X119bb+nYY2j/tv765m+a S2GLJOA4mwsBvqrtSQLnHAw82rKUTcVHL2wCh84fKeQbIQ++bRUDTIHbXmPPBt0ECof80MQFkrNG O/9rZ+nRq2sN3d8Y7+9puL3px0uyLZZ3kP8Ys9GvMaeAPa2yZ1bYOWAjpJYEhTF9s/6DB55LQYzl 9h9v2yUx5FXZaEUNlrhzARCAZoCPIFFnrzK+vfeCsLFru+bB14evrd5kXiprypcb86Tgolpzq8GV s8TLLalw3AdPK93kAcaUApgyGCMDrSNqeX0xBlLMPNY3wZ5f0FktF26y0fzB/gui+o6t2gd7TrRv PXBRusG0RKrGM4VFiq3xUhcGc2AzBabUmmYeeLIABe3E9oVhGZg/mYkjsiYInUngKwmd2eAbUm6Q wjYisaXCwJApT+CyZcMiezLtZcjAMnKgmvbMKnPYCQUPEaAPzKvUFA9WRuh6+63Gxf9TNnPaZy89 VxEPyv5MWRJcSADKYnyBSNaAVfxIVSHbdIAVyOBTTC+fPb38zWkr34grpX9bAV7GrGcr0md8/Mb/ Uzrzi+YdY2SYRHyEmO51tm7Di/MKLmwS67OxJcqWgmhgTqdl8FyxKVveVPzTldXXxs1jpDtS1TPg IY9GSO8DclV196s1undkpgI0nVawa8lgodbY8qQnsi3de71objClbrl7GAub7WjFgDcK0N1IB+mq bcg/eXFLp/fiGHk8TkbBtt4nF7fYlslNOTJDSg2wCOqtY3GdNu8L3SegyP3Baz7am+Mj/R7y0EO6 290tIM+KhrlI80CpLSnUzUxH5WpaqL12wIN6hASyM3Rmo/ZDiR5bQcEswoKRghoz5eqcTYYPbPd/ uOc/O4a3BRPcF8Rv6Rsmt1r7ju2wlALNYFkrC+YSWnMuMmeD393c95OXDAUxp9915OwaUF7aa8aV UDcTjYIuo1Y97+TlbbdHnV5aSEBTb/AIfX3kuu3+0Q2GEiH2gHDZm1PPFK0GQIFclae7tyOA6xmk hcfgIGQCUUdBMqcAJgBDAC8GzKiyfsHJK5vbx5vhpALhLRqEwxol926Mmb9rkSsbFwDdBWkEhwhM tsCUrjQXrW58+5pbj4UNIT94T657JxUN80E34SiREzq4QlTVLNHJ7APNkguPVKOYuOyPVGH1B0hP b+Cc4eaeNdr3ZIZ87I+wpvCtVC8o5VMYsjbrP37ouxLCUGrPiUtbQdL4SJMywEcQ2kHpMhW6rLqG eQfPrL3paQb3ykM3B76lx39FdWV3XUOxTM9BpbZgrS/QfqkubYP2/Q5/G0hvEGsh3A/IlS3WFTXG QmBW4OWJnVnguaAt1nHXaBdrr++5778E7NeNhzsI8uAmfQ+Cl/R3965TLxE3pilBPa1p1RaQtyza 74lcAtY/RDp+OrelprFYgewuhY/EgFsJXqQTnw7gAraIphvQ4rNQgOBmxzkk2KQQgQLqqWFBAmy+ zMXDZzel0KhIhshRuKRxwf8r/sPzK2c+W0n5PPX6p/oC1NBHQgFRHEhkoWDayqTpKxOnrZwVV/pa XNnrMyrmIKnA38WKxBkl8b9eNvO11Yk7z20dRyrljRbeT4YCHF1y6PwXIl0OGxQCHgjqDDRMqM1c ZVpienBggNzyYo1ZIBgKRJxKtjJndIR0nRupX61ZwtpNDAubkoFIyA3c3S1l/eQOrd8bjEIB7bpK FziRGUrrOapbG0bIXVoIF7ba1q4f+SdzgZnUODhi0xxw0KTgkqvzvmypuu13jKMh8NLMIFvIBL5i AL5imHSd6j+8Sr0QhAo2X2BMxuCGHWxNwRZdaWfwrJeMgABo7u5QqPNR/e309PVJMnNmrXH+l+YV dwN2EFQgscFwICoYSVKP+EhvL2n97pwQk3Q2sH0Z0fiJ2JItU82zP/iRrU68MqbfoP8IXA8JrdhE UAXSqOOtNb3nenTYTe7TUTD+iYp5/JfbTR51kYvftIrAMUGxsaZGrnRMYKkLdPe+CpLeEEABjRUA TgqMiXBMgGYYCXTlAO/dYF16dujEILkVpLER1h/EBiMGqxzdWLRws+Ha1lr9QoGRByvnA4zYM8Wm LElTzpG2OlpvM9ZPbu1zyMGVw8WDY+hIrjYkyc25MlXxyVtbH5LLQPCwqoeJ1PUF2dpLOOLeKx79 Oj3CLEZCwFBa2NparsyYtWkCCrpPXNoMUACaAoiHARmg1sbMWlXh4XPKfizoGg0QD5UFrBSgCc37 qtub67T5EmMG8A1w6ODBwekAaD330ODB+i4A+UF7/2GlfgF8FyqmjQdMA3AGNmqz5cMLoydpCRaW dOLK2doPPGD3CLl/w2sGEgWeL/jFIkcmwAjmR8w0fo49CGN3PWfX1C9cbeGBE1RlTZCezkICAO6k JQn4idKcjnkZWi0Mz0KvNIw5W5JoeiUFa5ItYJVw/gAbVRDQ3ITCkQkHIWxetKRp7j+Kfvdi6Utx pa+CXzCjEjyCWZOif5T/43CSlYmU/9NGA/whDQiEw4aYO5hRNgvRANyKMtqdhP4F/Dzh71bM/Iey 3yw5Pv+bS2vhoCdYweTuEzZWcLh1o0SXj8+IIwt4wDaV+mxl4zzj/b2A0iAkTGw3SpDFkwCcmgcr AHtPDRytaVok1edQ54LKpyND2pjfNmCBY/KCgt89JNdguxMLBRhzNmZ9afu0izh9aLKxDg2+BXyK XaaKGmOx0ByO5IP5A4f0K6foVuAUrDNIpyqFojUCWC0Rom2woFAPXPd/qlUtkJuygdmCJ4j80JwN Doi+exf8bl/oxmbLR+h+0n4r4OFAfUF4vjAt7Qie96FQeZmQLzgx3iDc6UxVqb+PXPnaLpToi5B8 GtFIhdsE1EW2BwfAvoO8Hb+1RdCUi6VilM8gPzFya7WLnL3HRnHxblZJQxMDUrBomWXOQIf2nZIq dDkY7jYmwoNjlbs1R6TFHgSw8gAFnaGzG/XLwIWHxUcT2fCM4JKcevwz7ECAVkrTHG6kpJCWV9Hk 7OgY6TrUtkasKQTtA1caEzpmDpjROvXiLl8b+ImgNXDoqFBwUtYEDHFYMqRNBT9f3tJLbtItCrAt RmwbCC1FCNAqzjEAtLZRwyr9InRqkBJzWB8ZMH+d6YNe37Ugxgp6j17eLtZjiTs6TaA1gJbG7M3G pde92jEkG7Ab4Sq1EC474MYCrdZttuUSPXDsFERgamdljXP1N350I+0cGyWde88IwKmh3wvilw6E XGnJW6dbcn3c7MW4qButGJ1JFKkM99M9AUrcf2nMvM1eDqYQQAD0FIgQSogZzbofcabfdOcr+fHM WguSsXJjIvjCtAAsVWFNQ6tHS/JgVfC7lP9j4QE8mpROH2I9AoxH2ZFFCE0YBRJZM6uNXNnpd95u mPc/pX8AHHi2dCZOICmPjyvFKAEtEaTqXB6GAlo5kBCGgphQIcsNMLNQEv9MWfwzFZRLrKBdiuUp 8PMXy2a98Pk/J3+TWGlfvOeSHBSBJo6fMrkhSJuUD59ZJ9XnYe4bw6dZIMByVcGh1tphchsMJRMe 8BY71gyuIMoYVWGQscMX1onUBWJbltiZA0QLfA2JOrPxyh4PZgR6bHcPKtSF0TZtMRgOfcHPVzaM kXYvChjeDw7lxrhuTeOiWlMB+GtAt4TUrKwxvnN+SO/BQx9BqYN/mHDFOxNTZuINgaR1H7m8Cvi5 wkpDvqY0VHYzd9eZ0hHSfnnIolTPY7NCoKpVFjidPFBkR/8PmLXH6sDgRAskth8Fo8FVXwBrYq+M WmXqhcAEapyFIOoglmxllPXhftjDAXJ7e3O5wIjeIlBZqRO9D+BCP19bD86UD4Qc+Euk98oXis5K ojIZGgdeccfnWqNfBHIlxwxpCh2alyPQFqsQCvrBqgIUbADXFXi4I4tvpXJr50ibshpvAvHrwnJu gOxggJba0NUzEfAPheC/QZcBcNbpPq2zFcPi2XF5IN5SVb6r+8QwuXPy7jqpJgvwHKS32ooZT4U5 Z5P5407mApxyMBgWIX8IpzsFqeVG8wrPRWP4o6Sn6d4WqSobwATdfwoFcIhrze8D1Q/QuvG/XN4p 1hVi9hlrKQEK0uBxvjsjHSG3KSVge6X9kcFoAVql3Hvs2g45Tg/D0C5GMk088MvqL+z2sEWY/vPg pQJtQPcQdBPYoCELHFsrJnn7aDzBxzKZCKdlgowXKxVDIVpROdg80KjQLABUxPvTSWIYTbIlAtaF EKi7jp/fVNNYKNSmAIRKHFwgVPTfSAAwvGNlDVwaO3Amkmpk243p0EKcRpIMLBejtZZ0Pjhcp+a/ dTLv/xb95wsrX5+2/M24Usr2S+Y8U5Ect2IO0v6VkassHuz7jJIEuCJsgToOFbSekHoKz9A8Y7jk gP1MBWd6efqLJXP+7rPfzdzy52X2eZW27G/bqt2kZ0rTfTRyGMI+oJ6fTq9RGHliRyLyOvB3wIvX vnVpwIKEOeAJNxIy4ekB4WL7iYZ0Bj4GiqbQLuZbaXu1LYNvTwAp+sYuHSQ3vaTDdvd7hbooYshw r2SaImPHQTAl2NfDsC0h/fo722tV+TJYCXzGibk2kSb70MUaYDUBLINhYueBBGI6YGmjAYjNwC2v aa3qXakJM4A4Bwb4uTl9tWnRbeK09f4sVReimbNyaKECV6DL2eUSD5K7PjI00Rk3qbk28qTYruMZ Jz3726TolTsKMDWAuQ8OhYLvYIW3x88pNO/A46OzCeIBHqsxf4P58zvE5cVYTbgFD7WSHa3CRIK3 VPx9Ph/I7c9X60SqDIUri4UCZK3aQgoFAyEyykKBVF+ADqmDh4hqSNlmfb+XXAqQ8chIMTzUaI9h iJnojw5hOVmf7u5+qSo33HFjQWWUa4t+Pr+1n7R9faFcaABPlocpWitHasmVNOTpO3ah/LDtY0x4 fwLRcSUxs6fADe8hp9fo3lXoc2kqCpEf9mGN5YP7gcs+dCcBCnZJtEUSLPVJwQoTAGR1nubWN+No Mvy+cIMaQ+fIgScCzBMQZqSlV63QFmGlBEZTcdCWQjX357NbxjGw8OB8XxPmPa3pbBUQ/FtpyNth KRsi1/2hgfAozjBNoqDF+Ce6FAkgZKCfdO09I4LfQtmwJFPJAT6fDCsJAWjgNLP2oxc2rtG8A3sl 0GcJTVmYCLansrkz2t2POVx2/gDbjyCwZQrCUIAVU0CxFHacWCgEHGh56z1V8f8Q/Sbu85dokD95 RkVG3PL4Z8pTsChoRfy0lSlhHEB6gAjwTGnyM1TTI4nCcD1hGA0AK1amTluRGrc8CZgDBgrKkuI+ e/PXn7/yp3Wzl9kWlbtyqy3cvRexXSVmqgATnIACEMkxgIKfz6xVGLKEtngQDFp4ydvs+Pwx6UAd xWJ0GoOnTT1BJkZBwBK4g+x+9oVubXYtg/3hmzCgiokkY+YW/fIe0uol7Y4738PZxdRpZ4D72Xz/ JJhabFrC+DUGCn44L1VoeXWOHDH1udD+aha29P8FPsbWxLPzQ0MTIxHYaQGEwfJGQu3O3QPNMrkx j29OYr1R7PMyFJ7yHD96a7tEi1AAtgPcB8zCawqM9w6PoffkBUMKJgAZR0xHe4hKZdhLwNmDfY7H hySqAqEWs+FoPoxcgDhb3wHwks49tIgb5+HABxpYFpq4Ul3xDxc2DJFOMKlUWZBvhh3tcAttuH0u 5MH99JORy56GGu1cvj5d5IRtxPlyUnWB5t7XbD8ddRA+BzMqoFl7MExSTerPV+TIgYMT+h+utg4P BUCIC/oDkSkiYzfHnHWaufJIxSZWlurzd9vEHcS++dRSvgF+iHfGsltT3hrNkjt+C2AsHjkLATG9 jdGRqn4vQ0eAeIfJ3e/P1sp1ecjkWRJo4aw1AxRc8aGH0nf0UhgKMHNtTsKIh7rwdG897UuKeqBB HDAbYskG3DhwZagZ5EfhRCIE2ALemUxVCFQWWCWYbP3NfRiJsqbgcYPPrk+u0xebOvaNk04smmKQ voKlYEU3Oh0igpTonAKIWe7vh6PEtiNLMg4spX49yjzjQ5zGhrV+572GjapSpXqRDIlrOsA1hgdx dkQ81kWY0uR0qJHQzhM4sujFQaxwJmGQ1pykcPIwPuBc9M6Juf+96nfPr/jj8/yEuGVvTC9PBTQA PjCtZNaMFXOm08jhRO6A+gLTy3CmMe03jA4pmoM4UPE6XitmzahIiVuRHlea8lx58vQVb05b/trf l//xP1f/ucz2boW9QOTKERg5e88J8Cj9T4eCIFbh9vx09guFrpiWtaSzhUZfnysHI8iE1S88R9TH UAygehjpOmTv6PWQnj0X+VifA06QBSM8UkPmBs1H7YzVS+447hwERoepFpptwYCYqtDe/hdsBEZz jyLcTzq/PVWp0HMlhlRa2ZUMYLJe92EnaQVYZtjpdGwHOo2GRcvMooTHF/KAUmhu7hUAR3Vx6LPQ kdGGHOvQ/v3n5SDzCkzfJyttND6vWXB50Ab+dTCAAhOaGMzF4B+ZQOxwFWAFwOGvjGnXaN+TGrJw mJgdXABujTrf+WjvCOmytR/HsYRg6awJUjsIOQek19RxZARLqZGLsp57hNawPbJMpEMQVQ0es5uc /tK6HBbMjtRWWDg1TTnGu1/RrnCaATF8LDfl0LE5GKmo1eQYO3dQcsVGT0jkW2grROCJsTOMb4jc 3ub8tNrAzspIB8qq1Gd/aS67ROrX2d+GExRgIRnWhcq1vN32qj5yiYZoJs03CPcDTf5ZIDjmJg80 t/fIdQVsyQ1yMHP6BtP79wPXfJhh6T3RtkOsKRBh+iZNbkkFQ1mjLb40aMI2xmDsYIdww7SPwce4 M3q2Tr1QirWmaVipZeMAlzh8Zs0YuTNGOv5ybptMXyyk7gYWZti4isaiK0NGOC9smA3FDKyYmB0R Po9QeK7c4DW3vla1WGZCM4SBGsxWZEx4WCD8IXClh7tDF1U3d28xl9bq3hapioTqHImGK2nMkNfn 1jUWKBqywF8TqvIFqsJqdaFAnS9U5YlVOeKmPKkmj1/PU1gXvXs44x/L//uvP/+n50t/N33Zb58p fWXGsleeL/nDs8t+9/zyl15Y9tsXS195ftnLzy1/+RmsMXh5+opXppfNpJPMkyegoCySVWShAJ2F xDhai/j8yuTpn73665Uvv7L+tRXWt/iOIr6di46/Iev7C3IAvb/GCoLYKNpz5OxmmW6h0JSJeXMs tOaBWzFKutHPYrzYFRr0ReeHsyJH+XQwIngBwJPvr0gEhgylJRsLaUwpSkve6oZ3b/rBzW+33Tks V89niZOIZsqA0TV3HwvgwtwhP3YPDpD7XzlLpLo0TJFbsYpeauBuMZT0kLYga1VD0dl7EcsXdi1R bWnHMZC9YVvXMRAMLBg2pdU6s6r0iVJjtq7/q+/aZApdDkB3DUbzEuTWjNWGt++5L3iC42zIOvp0 YV+Vzj0IYaTMy04tgNXeY5rXqZYC68BiS+AtZk6dttDZ/+0QVhofXKUrkprnyG2JEvMcwJwa1dxT DzXjsMNBdyjWWGN6IjxLmbCN2DTgD4vvJ1e+slVgctaOMY0aM2dVY5bp7g46KSIMBUoTWK5E1FYD p05d1Nx7gPZwxcxIQAvuYw8JaR01h9H+HSCB212fi7ABn0sjq0k1+qxt5uWnvIdXWeZj852Nh7zd mijXZHxrFY6SdhrwDM8lwrvB/kTmUtBwHBN21zDuNGDpBOKUL4lM4YAN32hact9/w4dNpr31bdtl mkIRLeVFYmBNVmqK2vqNAcoqJsZph9iwYbiTpWP8wjrdu9X6RLaVAyysUpd/+OzaYXJ7DKeLbJAa igEi2LodhTVT2TjvnucMzQcxvsjQe/bxw8NdKF/ysxEbBljIYHvQtdH0CZyswJSCvA7Xzw1MmlCN 3SsBGgZ/SNqvj52xdderb36nvvqN7voe49VvjZf36K99q77yNfxEe2tf4/Vv1Df3q67tV185oLt2 QHt9T1P7jn1X5AU7X0/Y8JukHa/N3vqnWdtnztr22pytr+MF/7FtZvzW1+Cavfm15B2zZ217/U+b X5u9O+2/Vf7mhdLfv1g+O9yAXJoEKv8sqDxmEGbHlb+JY0zKZ8eVxc8oT3q+ZM6vl//+PzfOLHMt qqKvacDqLwvWsx08V4ME++lQgIxxjHT9dHGLXP+WwIQFvYADwMx3ni0fJT00YhzWdl/AHx1oiYme EKgGywwYJgjmuPvAJRFAgcKchaNgMOKUu7bpvdsBMzh01js/ydVz2ZIS6gKnKtT5LfePBjDL6Qbx AqDpJw92tZRLdRk1Nh7fkKBwpcqMvM365b3kcoCMsJIXDHORCEFlwvMuaJ8RoU3Hg64H9VJdEd+W osDaGHSHxfpM7cMdhy4pZJos0NA6W5rUlCg1pwEUdPnA5LGDmGjXaxQKwmjAiifbaRTwk8e3ffZ1 qvdlxmw2GwL0SanKAygYIR3qK9/Xagrk1gQJRQPMMTUUunqaxlF+fGGLHZ3fBhIagQIm/BRIUwfJ 9V32Sokhj92lp0KB3MClXnOawpqtaMhz9uwDKGBnMoTCuukPT3MKRw9DEzkL3Kn7XzYvwxyNjTcF CtY738LGLgstCTDHAxQcbFGMkLssFMSMDAvEGNbIREp8Ni8WcXUeAocayPPfhgJ2Vo+EQsHVIWsA v4J5ckQe6390uy+s078NQgWEnG/HukqZNvfw2fUjpH2Y3DvculmiL8JYPS0Yg0eAk70z1uLHPgXc XG8oMoeBhKOSkYQxXTcD7tNjBHn9h6AvEppgorfKDL/SYmJeCiwSUN1Lpyv43ZihHqTFNn0BbHh5 5KMVCz7SO066PeTROP4V9mN6sSvnZjuxbGspk9nekbS8xXfOEzTPFbrm4+VcKHDBNV8Q+aPYsUji XAw/rHAtXuZc+ptVr75Q8vKM5cgNQNkBBKaVxMctw+6k6eXJ0zDa8GZc1ZwZlfHTSmYCDszcGL/M Or/CzqPVvNjHhxOVtdkHzyuorzdpIm5sBgGW/f3pNUBp+JYsiTVHbMoCP3ej/eN+chuHVgX8fn8w 4hsGQ2FDFgp7BiH2nRF+OJSdZ1ZIwLc18cAcy10cYNGbDcvuERc4Gpa7P8k0RWwmkdZkJgMUNHf/ BSdxURnAQj3y+JsWvpwtN7VhbxGsHxyEOwEn+hExST74UpxEG4ooUYh9f02AZkP6T176SqTNkzjS McFtwk4lOF/H6Pc/XqqTqbGCUWZOAc8OnOWIgzAWHcsfJJGGN7bRZWIsToA6CAOX3Vpl40KlJZft wsD6B3W+o+9bgFPHvRPgg0uBVztTaN1mRq12AViNUUxmeandhxsGI/ksdi5AKNJfRw03GQEHAesJ dVnsizYUFl6sg9BBEAokeh4wWJxeYuHWaXNPXFnrxfwCdZ1C4VFsONyDjfIxYf7kD4/28g0w17fY P2bz3SDwSnuGTMPbaS2/Qho3upaAg4AlH7TEt9aYs9O8coBcdZPHoZgMboidRzXlzTXoc2Pl6rEr X4KDBtv+pIOAUHBxh0RbSGt0sQ8Fn1HLQsHYpHe1TJq05O12n2OhQGSPQkH+4daNgMAgvccufCnW 5mFvlDUFDl3hyJTUF5zrU3vJYzp8CR/cT41auGeBrSsIAuNlLQtw2r6LQ41rdBhwxq5h2p0KKwyy 8xsnTbb0xg5+DOEQnhF2rEoQjYUvgEAxGmKRLfw7I25y6x7R7Wj5jK/NrjZn8e2Z1TjSkMf2MsAl sGViz6+Di40t7E/MmVUmXrWzqNT13r/X/em50lefqQAaED9t5awZZTSkUJKEb0Qqy8DUYXni9Io5 05a/9mLpS3/Y8MfltnmilkKMKtPRzeA04Tt09LyDF8QAU5OHfzIxs6kDo6Tz0Lk1MmuBqDlDaKG1 FpY0uaYQDsiLQ73wFxkPOzMwEELCxbCcM0iBgB1C1eG5sMq0RORAFwCTgI50gYazyyZ6SK6gpQAo 0ObjcE57MvveH4SCrhNeMsRubACTicOHLtQBh6915AnNkX439VzXo8M40ZeV5sBEBiEUNkt4uD4P FpCAKo2SO/tb5OBrC+gUIBAe5Cf6wguBxqZ7X4PLhqlnWkyLcymbcq3df6FFF2OsmcYJJ8zUIY1B P83MY6F7v7rjK1FjrtKWJzJhxQgmEzVFjr4DmJR/aJWrFqKKWVOAwQKcyvRzdztlw1iYMcJOUYJ7 hKJDZCJD1TDmGWCp+/Cp/sOypgKlo6DKnBoJGxZGw4YABRuMn8oM+eH5uqDF+tTdzuVj5EEwkv5g wrOUKFxTQg9HRvvCaDsvGbsx6sD4mJ0TroQH06zO3o/Nv6e2nP4YnESpnZbMWdJkprzV6nfvBK1o SlgXgJk6Do1FaDQWqMdecJSwsd1U+NSwIWz18Us7KRSkT4YCS2BiLB4z+c0sTIQVLAa3RYTdnTRO Ag5C66YR0ukhvYYbB+ARpA5shUAjAs6prrDh6jY36QJKD0LrD7jZ0ViETMzCZf0yuMD5xYFmd76U q/LkFh4NP9KCVVtqaNLMtNjJljExBzoGx0+HbcEeeBlfmF36aGLI6w6S/m7Gvs30EdhlmYNXTcsP 2MoE2u/MZVue6SB09jVJGWyeCxsDbTnLbIv/rfbV6ctmxpUkYLviij9jJVJ5Aq1MTqUXhhzjlr0K OPDHTW9+biviN2eJqR2kI9wxpYIOgp7z/UWhD5NBgdhXDkU3Go4QrPYPZ1fzdZwqWyL2SwJvtCXL tZlHL2waJt1+Mk5pIKFJhECkVCmMBpRlgS3ot9w9LNHMrbICheMJHJxqa7JEl3vk7OZRcp/+7U90 jGoCiwM4n0dT2Hy/wce+iC2cTBw1dexTNhUKdRyZKxNugh0f2qx9p0WwQl/IEx0iGvNmgUllk6Cq 1z369Zp3cc4PTSZi7kafvNa8uIOcPj3QAMDC7jzmdm1pIkPeDrtgEAduPI4O2QsbkRAJTHrFD3EH R0DwtreU4TwNnFaNvjwmEzXFzr6DHtLXPn5xleF9rKwAa+jgIOYb8mrUSy579V4yyKBkhEemYz0V DueK6i5NaQUwqnagVaQwYDG/gFX2cF3BbjpJchihwPC5zFjEN6Xz2R5nY9Ja/fxrwzYckxj0sIv1 h8Iz1Rhm0usnfGR8mNxX3dkjU+dJbeESejaZePLKV4/J1W8vVUkM+CIMoYXDxxLoXJmqsOnOlx7S 42fGYvc/5mVwE8MQAcouu3VrDO+Faw6fSCaGMwi6/CgU4FsCtUVXhq2BSRMyp7zIwN/pvgisAIs8 bfTgAAq0hT+e+QJYAZDzS4+0AMjsG4WwHsCSIgeXx7jsPjmDszfDOx8Z44+uXzQYjoUYXuJ9RO7u tJfKdDipgJ1URusKkqeMqZ+Y4U+rKp58xV4o8m4dYNIkHKEZ6Pac2m2vBMQTmbhVxmRlc3a1LglI F7aZWyJvRrOmUpczNVyZYMSKZbk1Q2jLKbW//R+rX3uudBZOMKaDy2iNcRIWE66Y/ezKpBfKU2Z8 9savl7/y6qaZJc551S05GDYxp4fvjKjCi0AB30e6p0JBBA0ACkbI/cPnN4J/CqAEp4Pd2ZYEpSlj jebt1qH6MawG9zFsOH1iAEjA68MpoDRoP9xNzm8xlMjNhYB41TaUIngopa7Y1dXgxuaCAVp4nCum 0/vZqlq5ush5v8HLVg+yzJWM3Ry3rWv8AAeuWrnV2NGPaSOFam7rgGoch2UNMbTQJcBOqaAWiQ4P ZegrzcaBpR+8qBCrcoAOsSlmDBcYuHvPV46RjlvjLesM76AKR/qJMEOtyjfe3+NBgo1lJzSRHYrO b8cMFFxBjO6D4bB0/KQwLMY3ZpookltS2KYnx8PvQSDRILbyhVSRkd7TdnupPm9/q3SIdGIdIMO+ sJGJUSV2XpCbTvXsP91bv1o3H9bMNybTeQggCbl87bzGzt20xGiwM4RQACclASZJy1qkjnSJhnvg tOQxuYHjU4I+L+MJYoQzmv9gi0KCAcbrAY+YnKnTLK2xFLJd2JjosaXVaItbe5uGyB3Dgx1yTa7E yAUoEznT8SkMvE3Wj266XXBSQcbD4GZgjMhPglGWDPsGYkAr93q+vyAF2yc2cFij9mSJ0dHLOwAK 2Px7BAqKrwzZaawgOq6ZiSFNOFoZoQDYO632ZwdWUCjY4MFui4G+YNsm84cifYYSB2LgS4Vg2UCu mm5t82LBtpc9Way8QlrLpsN8PgwXwx+8I6RPc/eApDEf+zctlOxhNwGFgqdMVp804D1ES1D8NKzM htGoA8USV7efPOryu3ZbKsT1uVJLDr71DI7VkIaZaOw0SWMnotD/BlhOQZnBsm2ewsoG8NPAcSi1 Lvj32t8/W/rnZ8rTgA88U0nriksTqFOQMH3FmzM+/9Ovl//+z5sSl1nnVjl5mIa2Usm089jRizQO DH4370Cb0DuZFZDJUDCOE483YWcueo48qTFDrMfxOPyGwvWmijbPmWEUVEoBI6woiPLGjr581Edu fteqkNPXe6E1tGMBD5jLtfol4CF6MYWEPQj4ypUwDmCYFz5v7zrJ1pBHRiK7h8nd75rragzzqwzs hIQUmTNNpONtMpde99ncpDOIDYCs98cGxdhygwCd7dll7TokbyqWmnhyexZOnABeZMyUqwqAwHtR VTu+dq0Uaamposk4LFO3ZK0zLLk0ZKG9zDg9KWJSmci87vA8pbvB02vVn0gwts8JUwtYng0Lj609 BwI0dqTuAB8kH4ACX4hpxRcYic2cWv1Cze294CZgSjTkDWDJSpCNacN/M2ScTvrque62bLesAEog NCWAhobnbFhzRRqWFbCFx2c26j+X6LJldM42dtzYMV4hbSpQ3d0xigUMOMuX9VtR8rHqECPwASwk Gxwgt/efVwo1OLVJwr6/w4wDZDYY3utlcCzkHcawRrVYZsT7C6zxQlsCRpw0hT+cW9tNwKwP0nmz 7GzkaPA5QKvUhodIt63niEJTLDGlKZ1ZfGNKuDM3pvAYaM/xS9vRKNBJWeykfbl23pUhZziDEJr0 Mj52hiEIBrifG7RLZEYcJcEOqQAoOHRmrQddgEEPuX/owmpRYx7bwUG9Hh54/au1b59+eGIcS77H KKQEQpHXobIT5wJYyvig+dGxtbql2BxtSaYzmjJoy0AGQkFo8mv1opnFYLiRgUx+Pw6aKfoBL1bm DbQzzYBRUi2GX1Bs7JkCMxf8L3ATKnWJsuiwdJx8ws4/xxEZqLZmHnasm9PEzqyVzvn/VvsfM5a/ BBwALtq8PAfnm1XxplWkTi/5869Xvjxzyxsl9oXVjtxqWLmVAzCCATc6uooWSIDXkw1Gav9FuQfd 4SnvMYy+gADp/eHWzViva+NINBxxY/YG20dfXhB9eWO10ilaZ62zPDINkKFhOuYXt5TxhNAEDMMv 3g227DslFZ4EQ8wFGZY7U+S2FJkpHVz+I5dXASWgLYEsFBRG3wGB5EddZOs6BiiBRWrhd5H4QaLO PFCJ6+fKHFmAkyLLHNgiTCVrc7c4S4D8D5LbbECGOvU0+osEbxTUXNf5TY1qLh01Ru0Cht14YIB2 Wasekjbw1mEZpo5va1RFoP7sPGE6PCGjxlK8QbP0/OCJUdJOR6QydP5veChRgCZb4as3mT+W0zL1 akxEIqTjlBt7nrxpnr3nEPXlh295bVssQOCzFa7MMMkE+m3KltQXaDt2D5I7dKC6NxR57SC1SnD/ 3rZR3XoD5iix+dEaXhsWwVpygKLr7n1FOxMH2M5ErGoAWmXDkQVAb8QuHEQAtlV1a8fD0CX4ikDQ zbCeaoj9CjfY60fk4o9na0Bf+CaOvJmLv2jniBAq845dXkNnJ46NknuHTq3BkRTo42OBHE7dNPCE DbnfnhJ1BE+Bu8f29URTkyGMdAwDUbd0H5Q3LsSmD5blsi/UAF5kmmhHAnZa37ZVocmmgwFhAbiH cs2CK0PNgWjMMPLqk8hgdlDY4Q5v6wYtJm4QClhWoMs/dGaVl3QQPLKB1kHtasOnYtpzKm/OrGK5 gS5jtWaB6+EPtBHMPTmPgyc7QO6eenRsi/l9iTYdjqyCNghgJ4IhhY2lTMllTJnqj+lOxhvzXgwW eBlfCLtxb/mav3JUgIcLj4ntz7Y0Ac3a0KhszEDU8BykRIoGySwUSOhkFayjsPNW2Iv/Y9V/vFD6 yjO0Anl6OX0VQkXStPL0uM8AB37/h42vlTrmVSHCZOG4Nso02Kry8IQl2jIp1Ofuv6jwYKD+Ke/2 Zfuz3OThifM7a+vnSxqyN7s+a3r8bePwz7Uta/K/e3fm2oyXRbN+v/L1kgNlLY+dN8fbHjI3H5Nb PYHLlx47T17eu1m/HMiPwkon9NoSFPYkiTGp1pxbp154zWdANMYy70HajlTIjnGgr6nNUICD0HUc oMDHVtoFw6+ufkzavzktkupz5MZUJd0ioZM2vepz67TvN17f1T52BkMHaIWxSfkhc/3sI+3eFgW+ gFjPQZBxIP8XsR3E6sWOjp99WLWLGtFLLmw3lIBVxQFollSsEHPwBIYMqTpznWbxsUub2h4bh0gP nfP8MEB6RknHPc+phkvb1mveA3stMOJ0CyxeMiVLqECCqgIUNPcdBnFlsDmru/7KVqkqX0rLMySR YhXsqmvM39esOHW/sZ/cAjs1ioP++odJe/t48/G2beu0S3FGCuvn0pZDKS33wsysqkDXjj0IQexB QCignY/JYhMiksSRXmFKELo4QvBZ6ov2NctOdTX0Bq95sBW6z4Pf8rDLf851/6dt+hJpQ6EMTsrJ qbTMxoEz5oxa09yNug+ujxt9OC0QteP8Q12tahG+YQHfIpqKOUE7B1iWRJ29VbfMcGNft69tjDyg 3b4DbtI7SG5deqg5fGaNvGkBjiS1IufnO9IrLWyyNSO2SdlHehoubsURoywUOJCEKzTzrg5OgYJA zJtT0EC0+05TVoCjk1goAGpx5CwLBUCE3I9Jzzctq9i3gQMOYFW5Fd9qKjNxlE3FP5/bdHXA+pjc GcWkHub4Hoc6LvWZgKLUnlwg12SApAmpz4h9xOYMIPBs63GEr8a8JpLEvMs7xrqy0WZK9gJu8uhu wLnNuAwkQY5zPzJiBpuEex6j00siXaj42rUwWWKTsDauwITTKVc6Fv57ze+eL/kDti2zBcll+BqU 6Ste/1XZK3/a+Kdyx0KBjSthIw/mSO+DIxl7H+gX0RIOoPqZ+9uk4zTZFIlyTLwJgrICYL+dx059 uf7Ix/U3dl4nV3bd+XFmbcHff/LajE9mxn326nMlf372o3//z9o/Vxk/UWo/2GL7bIv947Wmd3Ge raoINh8nD1NiJrVjMARbgFX5x25+MUbaES2D8L8B692DGKqiM1FpJVtajWY+CC2dDMDEvlHdT4Zu +izrVO/XqLLqzFy+KVHkSq00J4scOPBEZMhbq31nt7XsUKvy8MVVe89Ub3Z+ItYUCsE/NWUBXQd2 CqyAUoIs4OoHz9W50ZC52XZdACV75xGg0zSogp1x4RQD7KSeJ2rKrNUv3mpfvq9VfOSS8lCbeGfL J2v083F6hi4H/SYLenPooeMkTDQfcNCShlznw+8DWBqNlSoPyNkvLEvRSbHwaJ4CObyQNqti84J+ 3kbrJ1+fFnzfpvyhTfq167P1urnwvWBM5ZZUqSleSZvExUacOwQ/wW44VaHm3m5KV8Y64OaGZaBx yCQtdEy9g8e+VAszm7bsShVPpCra4Ph49/mq7y/Jvz8n+6a5fLPpXaUqDw5FZinCAXqOdKETbVCN LUteXwzqMIa44aO82Q9exv4LEhxdAtzGmVdtTKMzRrBIA6fVqQo36N7d5Sw7eFH2wxXlN2ertzo+ UTRk1RlzqnXo5yqcOCC0yp5d5czBpLYpWWHkbDF81Ou9HMS3YDw8eWEH3ERG8yw4o8wSX6spuDRg wYbEiaZXJlofSAuP3Xd9rXDu6CDYs6sR7bkyVfaR07UeLC32+tHJHb3sdqzRvYW6AC4qmoNUOroE g0Uge0r1vG3OT/de4H93SfntOel2R7lS9baoPrfGlFuLuTZaph72rDm0oQxLsGJfrBOa9FbZMK/2 +0i0Gp/Bui5YyWB7oAVgs05fXMt2yGItOlbUsMMuWN2PeStKOhs2DJN5lioAmWR9QEcWMP9/q3np 78pexelkJQnYb1iZPL30tV+VvfSnTW+UWOZXWylLtCSzQUIRG3MOQwHejR1AJDbwngoF0XYSfOkA 6T/p2tfc0dhDOiXGHf/wYeKvPkl89vPE51amxZXMmVGZOH3Fy3/Y/Mcy1yKRJU+gTePrw6OG0QOi vah0DmSayJyssGaK1Pm7TvHB/oJJorUnYI4H7fcOgwDAgqtNaFjBkQcy39JZ7yZDHhL0x8ZhMIxz 39l9ZF3DO7IGbo09G7AdjHilOXGFLb7cngwWFmQSgUWTI9JnVOmT6OvqcIglMCKwpwr2KLV5my0r bgdPY76SrT1lsG5whHTtPS2VqHOlhswaRybfkCC0JLIzqOn0TuTDOO1KnVHZlFSlmyMwJ6BGmwAu wPKm4KAkYxq6clhBwVFacmu0xfaH+7FbFh1z2MzesyN/Wa1dDGZUZsvGKUzOFGxvd6RIHTihqFqf Xq3n8nWZfA1OeQXjjolXC2xdktKcLNOnK6w08AhyYk6UGtMAbJvav2InHneEzmGTsiUPsc7MwQZM Y4bIkMI3JOEsPuDbzvRqW3qFMbVSmyrQZkg0XJk2Q6BJUFCujpP9XNhuX2Wag8p4nLvLWvGQXB2j 9f8YCQ/4cHp5yPSF+dMa3SKpoRA7KZxoYeHC4W/03V5AvGHx1doMfBZDMrgqOBnMgVVtInUifGCl mVdhz2ILJuERtpiXPvBdoq5QX/3FXUpNMagAO85OZk2s0xZeG7YFJkFB9G1r4RfK3PXBg7+DVawW TjVVqBpd/s+t4NdgPyZtjw2MkD5z9z7pyXxwSQSmVDqEE4cuslER2PkqbSKIbpUmo1KdLtDzKAnn 4EwJU7LUmApeLU5WxEFS+CYCJOo23qS3c8bQabaJNfrKGzZsRWfX9N0LntptqZKfzJPqMBjIojR9 D+kUKAhXY0avaEsjpc1oqnDCmzO71LHoN3WvPFf2x7jS2YAD2IdY8trfr3x55hczl9sWCJqLaAY/ 4nFMnbaawUIBvo4tAgWx7wWb8g5KANX2wc4+Mrz1zA+/WjLn+c9Sn1uW9FxJ4rPLE54tiX9h5awX S3/7x/UvVTrmSW25cisnnPS0ZOLkKDqYToz8KhG5QVMejgoJnWXnF7F5ljEyYrn7l9r6uTVmHJoB oqW0cusaillW4KHTxsID+Sk59GGpwyPDzT0b1e/KVJkSAw7zAWUUtvD4Lg6bVpCYga6jQ4QVRDg8 EEuSwL2VWxNkhiSZNnu94ZPLPtcIVqH7w9109FC9ZLSTadvjkolOFADhxFIoVwrrtOLwZCuQ53Qc tubIBjcNd9iOUz7A8UTOb+KschSta5mvMOdgH7cpW6HPr1UtsD08NIYjg2hANTTqJb2WOz+sVb0r auJi8zsOLsCBseDy1FDiB7etsnLpt2RKXJn41jO4vzG1zppTa5xfa1tUbkgTNWeIXDj1FxS/qXPr /9fed4BHdZ1pC/UGGNspdrLJJtlssptsminSdPUCotjYBmMbUGMkzYx674hqG2y6bXA37saAUC8j jSQ6iCqKqBJCvY805c6d85/vnDujO0Ik8f8/f5J9HvTMaomsmblzdc57vvJ+7zsGactgG3vuzaoE nErkNeB7ElhQE1xYGbLzzEtrawIKMezXSGGOpp6UQxtCMSzj5Y1vdUFTcDYJTjIafNM0gHsgZVa+ eGeN6oq2mhgPETUViMoZFrgZ95v7KzYcjC4se7FQsxAYGsf90xt9s47hwAzkebMsm4veNFjkoOge kl8VuqFs4e6Tr+Y3hmUcC4UeEEi4+G2tW9mubzYQym7xhT3ZJQvT8KHQFEj6xT75pUsujzSOgfkF 3yqXK0uSJWS8M968peKl/CoyuH0UIue8sgWfnVynQ+0scEKoKqNxDHWXX9mXU7wQPrs6iAgzBkHW 3Ag0kuymYKrIQbXI8pr8QBSuWojvJD6+Nx9/rlCzAByNGxak1/qTMXB/rjrK82C1Fg24qWdCXgKp LgbDad9tY9NudWJRydJ1tWFQzGmUpNSJso9yCQIPCqjgYZB172dTIq7lf4IWCk5C1ZLsplBVw4pf Ff3eUfUn0CVIAf6AR/xv5rzpFa95IePoIrx4QAuF2LRxmooWqzULvNAEAaDgo/O5OlsomGSHTRTt UHXfhV/EBXoo/OyVPjgrcUmUOWAcSBA7KWZPV/1m9tY/ZJ1cnkp1P9QyKp1BlS2h/4Ij1Zr5OCnb 15R533SGiM7p8R3UER0KHLxp7hwoOrIM72g4FqulBTX+GAqa7h7QgbINw3DUD4YqexAzFOBANrXv 31yyKr94UVHV4qK6+fgjp2pIoawBlJbxsQKuUo3A5yk6HgIBf43v+tqQvEOhextTb5qPaSGZ1XNs MSqFAZw/COHums6/q8nOwehUv4jIXRJNlTpfokoXmNLgDy3RhiB6n/OPhaZXBuI0YfeJ2JPsh7vP xuRUhZDFFpJfs7CgdJmm+wstEIMts8Asjg16am9+vKk8PL9yIXAv1QF51T7r8OatJcOSONlpCk6q 909WQxkE6niahfnlYWvLlzXq9793OSe9Zn5KvTStQZpWK8uqCDpy9y0dKB4M30cX3yiNLVIvzKgS bDoagpPcjdVLTzD7Prmchtf/2ur5ebUQm5FkLQgDQkYNUG5wkgVJCnG4wAF8diW4RWyrVF0crAY1 CfMIISCYuGYxqdjrUV9zT9kbJTEwYFUTgm8ChoJkDTyAAwNTk744XspQCwk5ISSrNiwPx8NHlhVf 3nTe8MnauiUptUTeHx9MNT6v1b7cabpInC57vju7o6h2KX56ar1fKnHlw6liy3gT6SWxPHtZi/My cdO7Z7z4VvUrhTXAJ8SAhpfc2urnv2h+A6c2JmppzbnzGYfRneLW7QWlL2QcCsbBPyizcb1jv3SN D4gw4LSliTg41Ahy68RrcdZZvGBz/aoT6L03Tq7Mqw6DeA/G2EGrk7RLGL4nuMXlk0sZ9AZKRBnH 0eAdfeO7jUm5RxYW1oYA6fSYNEk9J+8kyH7yoYDSfqxQQHGVeqfSf1uq6/75ZMgxrm7ZLwv/6Ijz 9OTAaYq5nom/m7ttdmLTC5mNYYQvCvudslA491WadBDhaCsUQIHCCgU2dsM27pl6s6kfGVe9nzkj ei4OA6jlip3Syy5e5JwkcY6fZxf18//e9N9Jx5enaEIxouYdw7GoOEsjwN9x6Jta5YOz9c2lUaXn 3x0yXzexvdSDm4EHOw4Oen21Nz/NLlmSSTSlIa/BW+Pw4obb35DRVMbS5jSRUwmeRUwGwVbp6ujR T09sKDiwNLcEinW5TeL8JhyBiFLrxRlNPllHpSDTpwnIrPTNrQwoKAnbUrqm4uoHXfpWAxphTFqO W8IaCF+QJfI+9JUH+9H1A+e3FR5YXlS5NK8WeLY5oJ0ug1erC4SQQx1MK/k42M4ve+Hg2bd60fl7 6PhbGiXO+nGoAFus2j+7eGFD1349zuWNFg0HIzeYc65fvbMuGa80DH2FGhnO5ojyVVCGGlgB+LDA dxIayjUBmYdDdjYkndWVdKPLbx/NSysJyyEysBDEloaV3to1DnKIg/fNp9+qlOPDFyZhK70Kq4PX Hn71rL7iHrr+xeV3cw+/AJzkBpxySoimekjOscB04o1C2jEiHAnnEQnEL05vvWu8iAMkg1k/YSBl 8XyElJcoDl0dadhVk559cGm+GhrNGfUiHKjgvyD4OKhl+U0+a4+KczRCjO3pFfM3VEbVtn06gm61 jjfkl7yYVx+WSVTF8L19o2Z1B3NpHLp+PQebd+YfCcbbkPYZs6t8MNSfH6wg1I5xNMnnl6zPcTR+ U9+8qWRZXiUUGyELxodC8cL3j70+ACqIDIMm2mHE9Or+sZ4j26riCw4vKawMyqkR5zVKYcXW4+0Z xOkK1geu0wTlV8hyDoXsPbnuKjrZgtSv1clzSxfh9CeP6LllqSUWt27GNqhmTJbxLhK0QFbVxp58 F/+tDy0orJuPl01GnSBV45V9TJbW4JNBsgM6kDsJCqyOHhZ+EVcuyAVKTCD+q+FsCJ/+v1n/R/uY v9jHenvG/37udiFOGdLIID9tUUHkMwEF/oRs7G8RVIQX5wQ2p4ACm9YIkShkT4/c/HVCgGvcHHuV wD5Z6pgscUqU2su9naOE/5YU8uf8sGUfvZRWGZFVtgym9fGfstQ/t9w/pzQAL9QtdZGHW3dd1TYa IPYgDF6eex2xJx5svHVoc2VMQfWyDdUv4TPi9dqVr5fEXOhWkz44Y5Xe4vIw0hY3UzkENNJhvnK0 48t9R1PWl2FACM4u9geh2urQrKognK7ijDijNCSv9LktVRFfn3vt8lADEOYpVwGIsoxJD4OHBAog kBtntBbv5iEdun95qOaDhly8O7KPhGSV+aaVSkA5pGJxQfnzOUeW5BSHFZYs2XM66Wj/V1pISwcH 0M296rWv18k3aV7dVLcCf5At5fJTXQdhjJe18FIhMGAMZiM+6e6jK2W338HJcl5xSHZxcE5ZGDiy VSzJLV+QUxaSUxqcezj0zdpVZXe2t6Mzw+geXsYfq998vUyxrmLlZvXqzVXhW4+s0dz8grDcx++P N79Xlb2h7FV8G7fUrdhSEb6jNO/icPMA0vagvsa+g3uO4dU4Hycm2eWL08oXpFcGgV9SeWBeeWh+ WSj+LO80ppzo/a4fjNK0XOjL4QBr1BtIHYwS0PDHALfKAXSruv3TbfVKfIfzKxdklwVklwTkV8wv qFyALz7rsF9mccCmulc+u7K+xaAeASbV6N3By1tLkjZUrX69LnJ91Ssbylbsrkrt1F03AvF4oOLi Z1tLwl+rXo4/3caalZuqXt5epbgy0AgTcw+BArwe2sevvl2R9FrZSxtrVqxXr8CH+PrSNQeaPxwE Y1+S2DCUFG0kcyj6QdR9z9xcdn33a6WvrC1ZiAEws8QPx3JZ5SEZxUHZR8Iw/uQdXLJbE6O+934v ujuE+tpRyzs1Ba8fid5WG/FG9fLXa5e/VvuSxeWZZwRPuAQmE0djZiACHGwznNpenZBb8iwOh7Jq gV2W3iCGWYljAaByDJlmiAUKfHkJghUESI4PBDwJnc4ALwYyFYUzspRjz/1uw29c5b+blTB33jbv hIblaU3PpoBDRABlWdM6J40HAAegleDLg5qHQIGtuTzx92QHEPNBc8WMKIGdwsslzc8u1tteJXZT yJ6Sh2xsOnhitPOGqf+Oue3aWPOJtvKSc+991/zWgbOvH7mw/ejtz1oH6vqMLWQaSztOjKpJ2mYk MhcgPUiEB9l+pu+esaUDXWjTn79nuNBuPNdhuNSnv2fiTMApmccii0RY4pzaDyCLnox3dV0fPqZu /eKLY6+/V5+9pyZpe5Vyd13ah6cLv7z8WkPP1+2mS2MwAjZO2lJGqECQ2ROzkf4pmXFmjHJvaB7K QEN8nNBjenEqWnXzo0/O5u89nry7TrGrSvV2Veb+xs21rfsvDagHQXWtnzUB89mEtAOm9vumq/hU xZ+oXXepfbRZBwwuLY1QLYVZxkgSHgNIRw5pUceFvpqylvc+PrZuV03Knrqkd9RJe9Xph5q3nek4 1GHEr9DJgJCsljGPDuk6e4y38Yu36S/gu9Q1fnnMeM9iSj7co7vZzly5Z77Sbrh8Z+hyz9g9MHVl 8acA5OlDbS3DjaVX3v+gMX+3OnlXXcJOtXKXOvmzsxsrbn5webR+ELVT+1TLPCYoE+LvjEnHaUOZ LMQZ+Kce7xEt6utE18/11xy8sPvTY0V71anv1Cburk5+V53z1bld9e2HWnXNg6iTVIeGcVJoNA3e N7TeMV68pb94z3S1k23p0l0l9wdufu/4/W7j9XvGS7eZy7fYS23oPF4So+YBUKmySRB4+86I14au e/Rql+HyPcP1O/oWnC90Mi0943fgLwh6F4xlmJS1+MAyZEH2dpgvHb138JtzO/Y1Fb5ZmbRbk/62 Juu9xsLiS3ub+2rvm29oYWQJDKEwzg8b7naNXsTr+e7w6R5TS6f+ErlFLG8gYqIdj+8YYwYJi5tj Te/UZ0BDTb0wG6exakKoOBqA8wIStwcBDtTZQAEt6FG5M5rdE98laCaSikEILVIBy7ohILlxwW/z f/SE6hdzt/omN64A57uGMDC/I46roDGi4ThvdOib8lKImBKXfdBmIo4YPzmXq4dxEn6tgGOS6xE7 jNhuxMZ/+ZaHXGgX722XKHFI9rNTiF1jZC/v33QDmfsg2YcKLRApzUMmyPjwjsN7v08PfjejeqAb MYPI1IvY22jklnGgzTDYbx7H8cEQ1HVh5EwLwjQw4EmMlRlC9NKZOTVLQAMdpPDsGKGh64nohoEI CIzBxKKhH+nb2J4eNDgE4V/fEOroQbe60c0edIc87g6AHNYYV8616hWbJ8pQOhZ8E3UgmG8cRaYx EgtBp5NMCeuRbgT147OyC13pRBfx9z5wZukag2rDiBbpR0EX2ow/SBs7cBv13EODvbBN2FGILjD4 wBYm7ktwAWNQv8JvBPR3fNT1IN1NY9dd1NWGOu6j9vvoRgdq6UIto+gOGW4dguk2cHOjCTsc0ORf DGEMGjhPQ8K7wMvPxI3H6hnblWnmtgAOp0cJ2fv+AGrtNJ/rRpdG0O0h1DYGBHIgiRm4MMxkmSjB b60jfxRWbzXOIboEhIzBUttxHXC0+nSofRhd7WUv9qCrGFVG0dAoqGDBpRqp/SKxaNcjg574pMPV mnWERcZYZz+By01kBHSgVYSfPs6fj7OeU2arfgH3w4npUXK3R8l4u4HDAcrwscl8oZBI9FJGR1Hv IKyZmx3ocje6PozaMb6Nw9KljWyWfFDCWuWog0ZuZt1s0bYzc5MdyKp/An+CntvGpl11qsziBfma JaBUBkOFIVmWGiDd1xwOkKEVznSVuIHg/wpuGtDHDKBmjqCdqwlNrw/OblqQqvanWlXJ9SH/kztD tO33SQ0v41eDaQXyslDIsopCkI5DHmfqKiORhpXMMBUUIKoRzNDyEN4LI4ADxttIt/TdNOfoucBp TJFR2WScHWy4eOg6wgcS2wf3iCFkLYbQ2IiiEdnjXYg5bbi3+3xxxJfrArfK5659+Q9ZL/whc5mg KGrhjpTkIzu/uNV4A40Owx9RT3IHooxFSFlwPw3Q7x81jl4Ybjs13n5a331yvPOU/t5lOBnx9kSX mPtra/f5bVv9TM6il19TtaPhdjR6frTtFNvWxLSeMd48rWs9NXbzBtMLk5N6y2JgjHw5O4asm9bh AfwuZ0fvntK2Nevvnx5pvT7WNspqaXWijx09N9p6lm09brp8Bl0/oW+5YLjVBbAzfg+NfXvzWOLX O0K2Jv4xf9l/Zi/5S9FLfltikw7sKu3AuGEYgURGR0IOQJhRZMa3u7rjcm7xvud2p84revkPuYt/ lxs2Z93zC96JSyh/7UBv/T2ANXA2h+lBk946EE30SBlO3Yh3QJL+L0vqKtwW45+bHIKSEMvELWtY 2QbYC0byLNbanrOdLWQsT9STbM6qFMdMpqdy78KZKhIwxy/OMBO/bFULtGbX1lkelm4uE/8sMvOn e6YIWc02jDjWxjQZrkQL33mFL/MEC4ibMUcce5zjGIPXA0EeMkfMxYeWeRyWXz2zDB1MyECxLO/W wXf89P67xoZtVTHr1Etwtp5e608TAZoLZFm6A9YegdWNnUIBBYpMcvTT7D63NjizOpiYqNIR5tBc zfzM2tC0qoWrvxQrK4MzGhZAbbxORs2YCBQEWeqEk3CA79Y0BRRYR6vIRAmQ/FrHel7ZlOK/Lvxn iUGeKrFDvNBO4U3k1KSu8bL/WbvC7zW5b2H0gsyoptazY1CF44IlsNaD1X4lZv8b/5m8yD1ijlP0 M9Mi/mQvn+ukEDvEih3kIqdob6dVs58MF/jkrXyren8H26+F/UJ2qkV1j3axWrpuSOKX/1a5+L/i n/tNwnP/mbDoD/FLjg21ld89PyfthekRs+1i/mAf8T/CjBdvIO3bmtJnol/8rWrpb1KW/il56Z8U z/4+evEbJZ/rrKMVpolKr4EFeWSMWl2sOXxj/h+jwv4U/+zvEp77rXLh/yjnB2WsuNJ7ewxsuFHD 9Utzo577vWLJfyUs/O+ksN/HLxSmLTtnvlfdc27hVsUPwyUeq0WOOIeSz4ZB0ajZTtHCmVGyH63y fWVnbtPAjSFk0EJ0ZMKhQlXbueVvZvx8deD0lULH1bOnyZ+xj3vGOX6eo8LbPmquZ4x45kqvBZtj D9843ge7ycLgNVn03GmaZEb88o6Jm30DNDDzt94EDZ6iAWdyRFUHJ2/8B6izPHYfwyuM8xQtJrmW m1n+S02M/bLsJKkBm58jZEkDefr5psnb/69CAe84JhRErrDA+2UeW4Z9sDZuS7Ll4xvDvyuThhBZ 2og2GU2QvyAq3EHOjsF25tQudVxOaWB6DalkNliGCuu5Lh5HGOBRCnlGqwH0ZCcmpFCdBi5WfRiY aoFduA/V1c+reTaz5Plv7m/b3pxU2Lg4V+NHOwuw3xtkVq4CwQFJjgbGfumYc0aDVXg5gJtDx79W GfxpM0ABN0oJWg0smSwz49j7ylj3n9eEzYoUuCq8XBUCZxVRU0yCCWgXlQ9e+c5R3s4x4umveBVf 02A4ZY1QgsOh8g3zUNK3236m8AcEUMx2SRJMU8x1TKCWLiCxggHBXSnxVIhmKUWPyb0ee3W2uGjl FzeaiGgRooEFXe86ZGzovvB0pI9rlLenXOq6RuwiF86Ik2Yd/eK3yc97RItdVRL7eC+POKF31ks3 kGGD5suZywRucol9rLdD9LzpsZIZqwT5ZfvGyLCzeWKXYLwz0IEyvNM7EeuXFTFzpcB1jdBJLnCL FbtHiX4RHXJhtAsDHA7jS280//AV/EP4Tw7RXi4Rgl+kL847+ekvEwJdov7sppznHCN0UeIPKHRK FE9PCXKMETvFidzjJG6r5vw+aeG3Vxt7EdOB9G/VffWr+GCMAB4KP8/EICcFmSHFGKvytosHtti0 RKlLvMR19TNPrRatrfyoDapzRIbUOttGax20rz5RPJnqoJx8cLP8eX9rK5y35pnJO8s2on5wMzz0 J3z1Mda2Is3tRBJ1T4hSW5qDVLfQzEwNTVbLHt4Q0CQaDJqIO9jJ4gn8euNkKGAQYh/AwHESEdk8 3cR7UEU7OmDOkE6FkRkHXTvdiT11KTkloaBcSrx9U+pEuU0B1BCK9/Cd4BXX8w2XA7iogM4j1Plk qWW5tZSt5wf+d7V+hdULcw4tP3h7Twe68P75tVkVgWBWRQ2ONZYKAw0JONKyBONAeqM/8T6m7OUH oSDfCgXcyQOwhlNa9kz/rb8ol7hGedmrBHjHuRDNNLsEmVOCr71C5KQUuYACs9hNLjpwvV6HM31I 6o1H+1tDNys8V85xipljlzDbLmmOXfxshxQRyDjjzCIRug+O8UJ8CJLHPIe4ua7xAnwgPhnju6n2 8y4IoTmdKBPEeUxFx9mfJQTjt3NQCaYpvaclCN1T/GYo/RwjhBhSMMLgl3WNEUkKw8+hkbUnvn4s WgqjGWkiu0SBvULoFu2dWrp70GrawjX3acuAMZnxeW28g7TStRHTFTIiFUu6JHGiXyYtOtF/e4Qk 9aXtzY9HApsC3CoTfZxUfh4J/o8nBjjHetklzLVP8bZX4bvhg3HALmaOfYzIWQm+M/h/uiXK3CK9 fy0P+rbj5JZjB34SLnOMfgZ86xLEdnECanlvpyLuNilgjGun9HZM9XFNkHrGiHDYkPjtjl7aDuNi JEJdowP1rGXC2MxObgDZ7mgzf+B0YschSzWA4UUOxolz8MHjmJ26zTTp3ESTEGlqKKBSJ3x9Cesv 6PnNggff4mFQ8DcfNqDyYFRgE+FwkkRkOmwCBCZ952kAMiZujHTwpvboO41JueWgIZzVGJR3NCSl WpJ/PABMZOpl1u3PK+LJHjBe51wAKP0DzCAwjNSLM9XCAk3guvrQwnK/DcVLy1s/6kNtvej2vhPr so/Mz6eTnnR0sZ64aGkkXF5AmAkECqj4ib+VwUhHwyZBgcUmg2ZPAAUXRtq9U5bNjPN1TvJxipfC ok0gru4JQocEbyell3Oi2CHVxy1acKC1cZAUysrbz/0uY+m0iNluCrFHsi+YtqTIQHs5RUKkluY5 Jsx1SJiLt880HCoQI1fi8uDtnOlrpxDgXZNSvLMfqm2cwjA+so/33/iJ3N9Fid907rTEufgAnRYn 8IyX4UDFI1nimCiwU+LDWioojDiLtDnHPvNcI7JTeIEZXJIUw5drpDC78gMtVc9gqYIEQwTo9OPm UfwDDF9tSOu7PtI1TmQX72UHHtM4BBL+Onn+heHbOigJMkdun5oeKQDTSVCSlE2Lxa/s50hMZ2AW TCkEjdlEKf4F5ySZe4o/UDHB2A4jg8Q9PsBVLngqLeixOBmOOpyVc12SvZ2SvBwTvfAv2KuoG6bE Lm4eDg8wnjgopfZxvq7x/o5xkplRku1HDw5xYa+ZlqlsB3Vtt+rEdkO2aj+Ws9Imp7Zk4hNiXLwk gv8sa8LOTjr3WV7uTGUMJ4b30dSYYVM3sKQ2E4okpC4xTgWC+BoaZlstGv5LmXkXYOJNBJingirL dU71XyfHNiz/fR/4zmnlQUbMGghpob/NcOq9hqys4uD8ppD0ekJFI0F+dh2YZU+CgonJAhvj9QC+ /XpGLaFGg42CpOAoSNjll4W+XrasrOUtLcIh6/AAuvfB8Q3gXgfpP+x0OrpIoYZAAVckJKkBzVO4 sIQ2E4GmXg+1Aj4U6E0W6QazGZ+V1ww9v4sOdV3lhdekPfiziOxSZeC+qpqLNyDeia4kCH8yWnbw +tF+xDQM3vLKXeW4hji7qcDtHVSVlCKMJDhcx7/sLp/rHP5n1+jZLnjZ4yMe7x1q65ZEpFkTvd1S ZDNWz9mm3j8MaTJrNLNa1nSi+8bTawJw2DwteR7EGIlC1xRfiCji5uKIwkXl7aGSub7sNS/5pRak Lzz1FYYCZ5B6xsGMyFUldQn3Ti/dq6XmbWTVQenMTOt4UA3WovF2AgUusSJAJ5UAY4ijSvzLhODz wzdIedxYcQegAGANwFDsmhzgoMAnODjU4xgJ3x+cKDmvIQWQNV44RHFRijGY4AtwSAi0U0jBsJJE AiQoEtvF/sUlYZ5rvJdLjMAlWuAcLsTpD85xPJQCZ4UIEEbl75QaZBcvxIj62/glDX3X9ZYI1tKw NpqsSkH0fOfn6eapkn5r2Gzm72iWdzIaLQ/+E62RA/sADkykFebJj4kLYGzZAJM2qcki8sNMuPAY TVYc4L2d2VrEmwINJgoa5ilxwKaC8bCXekgEMvUXRxOBcXXyMloQob2xtzEt+3BofkMoMQIOgmq/ hs7ByfLq+ef+RJpgbR1aqMUcEYi6dOGn4MwiRQ2zOWCmU+K3HuPA5T1ElUWrh/ZHxyfH1xdWLsqs k9Aho2xKRyR8Qh4/wVKpmKhPyqy+hFYooDKnXN5GgzegdjEXR9oFCS/8WO6H17YDWLHg4FlEjJhF eI+7RYl+FOP3VKTfT18UVlw/cQ/pFmxNwvvODcYkBWDrphLgI9ItwWfaqtk4aP+FYr5P0Zpnt6bg 9OF3qUs9w4UOkfMcVRI7HPkn49hYio9X+9h5jyt9fh7tX9LRPMKJ7aCmjqv/pgqzw0d2IpFxxtdA LKFxuO4cI/CI8P6JPDhwbUzGvq3tyLjp1DfOr862h9EMb5ckiVucYFasJKfi3XFkoOU1PWsbGbI4 AtF1I4MsP9wh0tspNcBB5euSFGgXK/ppwoLTAzf10B8x1dw++3ikCDiWSUK4A0oBBjq8r/Gx7iyf NytaPCdjeeiG2LBtimcKXvBcPQ+H905x3u5pvnCp8SLnDJwO/IlWXCHDSpQ5xHi7RM77ZVKY7+aY +a8n4vTkp3Jfl1V/8QB4FNql+sB7JQqdlAKXlXNyyvcNcxUUI/VfMLM80TCulWY086c4Le3/qZJi BvHS3qlO+SnzAxvxLtuKxFTbyqoXyhH1aTrAIjRFudLy/zkgsvHfZCeql/wiwFSVBPaBPczYQhFr fviWt8Qe1rrrVLGW7TWYOS9X+HhjqO/I1XfzS5eAMEidNF1NDL4bwoibGMyVc90BOgVgM2TE4cBE Q8GyWzEUZKilnG5D0/ycyvlFpS+W3dg9BrOikEYzZpDL2H9yY3ZJUE6DlIMCDeUTAvXdSinkNOLq uK4ll5KQxCGz0Y8fFVhXBGsAJyByGLD9SFfTef6r7pOSHbHT4oR2SSJ4JEOa4BQryTvxxTf3z5R1 XaxsP38bDW1v/Hp6OI5+SVSMQ4IUkGF3ihN5Ror+krk8v+x9HDPcQbpOhO4h5gLq/fCq+rm3M2dE 4DRfYq+UAiAkynBQjYOKmWukAZti7gEJBO9Ttqnz2o+UoVBVw3swSTiN7C8nnH1Ee/0kLjD+4Paq visdUKJHfci0qfGL6VFCJ8i7hfbxXu4qkWeUd3b5nlHoMrM2ByBdZkboeXWg8YB1a9zk4BnhGO83 TQHff5G6pHn47hi5hqqbp5+IEkNxj0IB504ldlnj/V+pC3c2H7rK9vUgph2NXUCdH7bWiIpW4/d1 ioPEwQ68sJ9xTBMSs0uJY1KAfaTwZ6r5GRV763W3b4HlN3sDDR9oP7FsbwZ+1jSFl0MaRgywuMIp mJtS+IeM59rRkJGwCDgrlklGHmYq6MHwctgHi4RTQ8HDT0+bchk/Sp8CCqZOzmm3jpYEWa6sMXW2 zlkJIL4P7/eFAvNkFHpg57JmNEXewg+BzJz82F+BAiPvGkh1BSgu2mvM8XXlEQXV84nboxinA2Qc OMSy9XyJbieU7yy6HJT6C3xCkORS+1FwyKoNICJmAUQ5DQTl0qqloB5WEVRYvLSs9b1h1EFsZDnz Mj3q+vTYRiINKsuyFAyt0h/8XMMm9dDQJIVMHzQQh4iqEGKJ0md+QLmE0DyMI7BQ9S/sSnOLIfas yWISG4jxdjt090Q/zHewvYhtRt1/TH1uZpyvg1LsRFJmqLypoMW28v2iy2P3Rwk/QwclOBOhFQFp AT/93WPF/x63AIfW4AObBEVFB6UIB/yPr/L++GzZIDLg31f3XPmhIgiyaZU38YoV4xPZPU72E3ng Zxdr++EioZdjhtdkNjZ86RFNjCGSYVbCRSl0j/LOqHhnxPr3ZfntKpYYs7K30bjv+mg3uYiaSoCF vVL8q+TFzQO3DYR6VH775IwoON8hl8FgSFwpPWJlv1Ytru682AOTFLAsRoBMZcDXc1XfHfZG/PQI kUOs0B7SCgE568G5xkXhi8OYby43DEK3hR2D/j5+C9MwMrUjXcTH62dGQp0B7jbOcRJFLvGiH8pl 1e3ndHRbkeiNZR/YDpas2TaIfVhk+zcD4IcVA7/vF4vQQ6sGD7w6++A03AP9PvZ7vvv3esrf/H2b X2A5QVRw8TvS9m5m+eLsahB1gQHYegk96ym9h5sK1NA6oXXaiBscpiZuMBOtCYJZp1oYYIHsgPQO 1jaGFFYvXFey/Mi1nVp0fxxoGxM+hhQKQPBz8gDy33iAbKCaNB8h6gjgQQGv3muprhCJGP0A0r+y Pc1TTnwYybmG98vMSOGhS3U6GLXAIYXptaNf4SDZSS6ADavwwnmBi0rqvNor8tPNHUB+I6uXMSGe Fq4RBKExMjAftqh/nhiGA2b8+jSbxmiAoWbJZkUbGutHbG3vlR+rguwUApB5T4Biu2OcaEa0JKf6 o06kparrlImnJVDgDlAgA9RKxAm72C1aQKCAsfHUYClPDCLqEQIFfuuiPQAKODdqDAW/Tlp4vv+u gezW0jsnp0cKSIWT1EzSfTAsPC4PSP1uTz8xJmYtzGg92ao6xFZ0XfqlcoFnvB/UFeOFNGOyV0Gb Mq3k3R5qI0J3tGW+FQc2pw0dv41f5KnCcOoFkVWyFCc7M6IEn5yrGgVOIXeyETYgy+fi/tXt/+jr /8uXlaMyiO7saFKkVwZm187PrQ8FnZB6CSXzQPmuzn9CnKQugA4HcZYfZE4wV+2ztjE4Ww1iF3Q0 EgRmG/0za8Xw88qgguIXi1v2aVGXDo2YJ3o94G6ME4RPjq+3yER/PyiguihEXM4KBf2T1E0tUACc tAFkfHlHmoecM2im5oz4iCxu0dCxwS6kD3hT5SIXOivEzglSJ5zFK8U4hQ/dorqBhoZAydvmi6pr gpQZY9RBUMHkle71XAMdedKAw4tf5K4QP71aWj/c2ouMDT1Xf5oYSthNEJxjKHBRSp5WBNaO3xyG C7C+PAcFOCqApmcSHwr2ahFXWDPbBkBm0itpw1CwNsqTBCd/BQpcknEKD6USfNA7xAl+EhtaPXR9 mPOQ58r1NIAeh2SBWbQ7Dac/0DRMkoJrVRI0ZH+eOL9mtFVLqZ3kXpsYA/VvIgwH5oU9mc7RXo6p UkAP4pg5PdL7jYpPR0gdlVfuewQF/+wvS/LSrj9fVPEi0QOHQQPYYvVcuM6DghCiig+YkN5A6/nc fgSbTmJGkE1VBYgbSFqNEAcYhTXz80tePNyKzzKMA0SOFeJrDgqI9GjXRxwU+P5fQEEOlZPFIUp1 MPVM5DG6WT4lDGaFELMCoEBIT21wcSUJAoUCnNpdGOn4t/j5ToQbgw90nB3MSPR9Ksrn65uNw2T0 iPhzWfzricATdTQDFxDWhHfNDTQ4b/2rzgqgHpFMQeKaIJ0VLX3j6Lc9yHCs+9pTqiBiAEdSdair S7zXr74GjGU9g+Nryx+GJgjTo8Bj2i5RwqXzE1Aw2VLcYkCG7mE0K1yDocDiUD8ZCnCC8FiUCDoC 0BaB/ohLrPDPWS9fBytw1koIZC15pR6Z8GsWHf3cJVpkp8AoJ6WfyyFGIFwf3gpTeBNZM6eyC27D 5l5kKKr60CNagLMhexCrlOBYaHq0IPvrXSMTiuXIbDbxW3KPoOCfBQXEA2SspV9dUE5sshvng22Q xTLemrZTJjBGCagiciHBhP4ACP7UAldwbQNIVKWrfTObpLmNsvzqgILDz5Xf+XQYhCghHoB51gmW M17T4D330XFIEGyZCd8LCgItUJCrA6FdK5ONBwWgBIXjf+al7akYCoBOEM9BgUe08NuLtbS6fvBK k+ca+CHeKbBZ8IkZ7eW3IaoNJKq4iQaOmGExomJYE2N5G5z84kWeXb3PJdLLKY47l/HGd10jXPFh IX73413XnozxhUogaLpCpO0U7T1/q/I+FPQsLTbiy4KRZ30jQIGzErzmrVCQXrl3yFLvYnicFrOl 9IOTdL+1a1xjRJxRNYGCXyUvbLaFgmlxAqd4KY587BVCzxhR2Jake8gwZoU41spwBZ4/jnb2XCj1 lIOHHf59Z5CiFTmvESzdldoJXCzO041vPIH/D6PZnmPfTSdQAPcBo0GCcMYaYfrn24ZJP4XmFBaN 7kdQ8E+HAhzjjjZ3V2AoSKvzSyeyOZaS4ATBGNp2gAacQTBt7VkHAUBSoNYvvx5mjog4/wIo5dX4 rit9vuLWO4Mw+AaS9XT6lT+jQdwl+j45thncJTSS7O8fGIDLPAcFgZ+cy7aBAl7PiEIBXtLLdqRD 2TARoMDBEhUcuqIhE3bsjrpv3GOkJDcXAgNfKfSIlaV8twOYQmYjGWEjG5C1mDNbq9/4ywgBvhYZ D3WeeTJG5hIrckzyoUQm+xiB7xYFQEHnlR/G+XPspiR4d7y752+K6YKOv4GHXTDqSKHARQEsPuj0 kdwcRwUDlnEb1jxJlxKg4B7S+RZGAxQkSf4KFGBgcVRJnOIlOP7Bu/Wl3TndpBxqIrYoPNY/a0QM vpgPL1dhkAQGkQoqgXhfu8eIw9/L7yX1E+r1Ck4NZiM3fgXZiuHDk0dmRAkckzlCl128N86e0r/Y PkTnD6lS1qOo4F+iWEC4xmjwfF9FftkL6fWBIEXS5EfadiGcSkAdlSHibM4y+MrG9f5kaCgEPzET xwaNATnVPgXq0MK6sNQSv4LSpVWt+7SoXQdDUqCrQweuzUQ71cx5fBjHAAo25leE5IAO1feEAtJi IENP4Lj0yflMPVBr/wYUuMoFNEGgW2wGhoKrDfgI60PM2uL33eSkro6j90SBfZLMNUKwreGrQRhu pU4QLCeOZw1s2AnLY7yo8cHaqL31q4QFbrFSgIJ4KEo4KyEL6ERjx7uvQtlQJSC6STI7pcAzRrxo Y2w/iA5Y1GVhdA+gYF0j1AoI7xeu000hnhEhyimDqMCEJvWGrAZeqAPpAvJJB4FAAXxMAgVnB+7q LVAwM1JI6hgk0oiXeEZ4rXobb2pGz2fcTGxQHKLov7nRiHEJPwUHEnYxXvjFnaO85R+sHSBzRtaD BaCAVhtIRvbZmfInYqV2inmOqaBei287zhcyvtwxSPSDpmARP4KCf2axQG9EIy1DYIiZ0xCS3gim jZTvZxUMoZ1E3lASN4BAJxAxFGQ0BoIkO0hA+66rDy0oD1tXtqL89j7KIyIDnjSfNlJPUmtqSQQb uz45vj6/Yn5Ovez/BQowCn16Ll1PnZQf6DRZoeBFKxTA/pLgvYD3xbeX1EPI2I/YorKP3KLgPJ2W Ioa+f6J0uly6rf5LnJ5DIs/jn4MTFQEBOmML9qqkjKdF6PjYnf9MCHOPIyX6eOhF4qhgdsHLPUh/ svf6kwp/vI9wko4TEKAtRXov2hAzQAZsSZZt5kOBezTUCsilit0V4lmrRXmle4et1p4PgQL/gr8G BaV3oJlI8yMMCE5K0WNrRFF7i3og1Of1py1SVmbyrC8v13pGiuxJVIAvHr+4h1yk+Gj9IDKMUw9z rqsCE/W0pInv1/7TZR7hUDYE9INASOQa5ZX65fYBaDuSBcCaHt72egQF/8gvoBno0dh9dGVj5QrI BcC0y4+4EILnI9HXlUGvsIG0BqghO+kqUmd2kPrHOUVjQLrGL436d1cFFB1+tqL1AzC9hZ3BPqiL MuFLi8ZG0d3PT2/IPBKca3G8/V5QAH6+1AmrXLr/XLqBqhghNFkohqzMHhwV7MygCYIVCmZFCA9c 1WAo6EOmLfVfu632xoc1cG8ADYCIWHCY69+Zx/S0umKyaMRjaOOggBNKgtG/mv4rP5X7uylkhI0M Ifo0ubfsdXz0M5r2C08lhsAPVUIy3iieES1asiF2gFcrsPR0jGs1n3vG+djF4VcA6PBQSh4PF2cX vz2Mgcds5o+uW5MUHKvfQtq5aStwIk9ycyhdTgkFHOsgCa7BM8o7/N1CGhVM9suCDwtshK8vq3FU MI1UGmkNxH2NMPaDoiEaFVjSFSOJ/OmL4Lf7+HQp/oCEiiAmZUyh+xpByhfbhogKxAMMn0dQ8M+F ApA1GEb39x1Pzq8KSa2Q5TcFg5FrtSyjBo5pcPcAWwqYKoJpgjof6ksLE0Z1Phk1EsInpLMAgfl1 C/KLF5W0bh9D95kH5qwfZFMTd7m7n54oyisHk3RbQtHf8VCDIj2dQcivDtrfnA1QwJoRj/VtXW84 OMEH34NQgKOCb1rqhqHVyO47VfaE3IfmwjS9dY+TPL8ttR+U8IycLoUZ6cBzhNpcWXyxzdBBMICS D/PB5Sp8fLsqfYgJLLD9nWOEYTtT8FF4ovv6k/GBwC9K4ri+eKcsJgmCzjrkTlg3+Ho2Hv3aNVLo kOhrl+oDMwhxoumRgpj9m0coYhBuOxUTg4ELckeHkeGkrv1PWctdlBIoSxIocFJMAQUEoySUWeE+ JRSYJwhaGKZw4IShAKOHPWlnUCiI+bBo4AEoMFhiCh1iPzpTChNViY+g4H9FgkCPs2FNx/68w6C8 naOWFGp8CxvBLC9Tzdkc0NogqLI3BuVpgIoMzuz1stwGaUGTPxCKNCCen3tkUenN94dRpxF4xZQ/ wNJjdPIaY2k9flSH2j87tSm38lmrkOnf/wDbRA2EMdnqwLyyBV+dW2/ESYDturLm9AZktEIB6SAQ zYEEqBVgKNASYa66+1d+rgh1VoimKclmiRe6qKS/TgzTjFwf4wymOaKskUuIifGZwUA/IWUmrNiX 85gcuEN2KjL0FDvPPUaaDKc5e7zz6hOqADglU2WEashBQS8kSjbeSTgOefPYAfdwgZ1KCjR+ldAZ 5+kxwtCdiTh3AJ4eyxlU6Ig0EOmFAtuwpPfSrCgfJ5izmAIKJtiGMERA2YZit+jJUMBH7ElQMM1S jZwMBSY6JGVmLFCAP9GHZ0pxHvEICv63fBH1m/EO86UdVUnrKxfn18jyaoSgFkJG/zIbgsGdk5qD EHEAvO+yoHXoTwcTMmulBZrAAvWCgiOLi1u3D4PNHGi4EaoJUeQ22yotTNBlwQdAh7pxNpFV+ix+ l+8bFeQ1BGapwYgnrz4st/i5ypvvGaFW8OAcCsuHAkszUWLlFXx7pX4UJnzRXTQqzFuJFzk+VWHu HijHYs9Igeq7bZ3Q9zQSahyyGFOS0U6W9OChzgaihRXtzT+PC3CLEzkncHQ+j1T/WdHSL+4cw/v0 WPvlH8UHQYciRUJGpMX40FzEhwJkhQL9vjNlT0bLIEEg8ghQr4sV/LnolevGXj1LNHv1Bq4TZ4Jr MJmMOPDYcvoQcBTjYQM+mCBMhoKUCSjot4UCHm+fg4IZkZOhQP5hUf/fDQXkAWXDtM8fAgWPyob/ xAaCmVa9QCJ7HI0eaytZe+D5dZXB6zV+eWppRi0xKQamAXCJwYSoMRj/EGzCNED6xWEAeG3XBePg vLD42cobH2hR1zgag8SZk/xnrYKNNlBgtoSU0MAabhltKihZnqOe/32hAOaX1TCUtFazdG1x+IWR OiLNbX5wJI2fIHiuwTgACQKwDRMk+LD79krDGFmcQ8icdfDtx1Z5z0zwwzE5kAZVApx3PxXj/8mV OnJuWmS4uLEUy7+NoDt8Cw2EbpTjeNsxnjQrQR4Epn1npy+7xPZiqDnddePHCaF2QAkW0VP7YVCg RbpDrceejsTZio+dJeuHikGE9ycXa0bI1dI7bDaMUw12/AG7kdHvNYV7nIxU9kT0WfYq8S9TJqCg gnQQJkFBxDuFtJTHrxqaHg4F+JU9ooUxH6zvp8+yJAgM4uRDKfWRnyA8goJ/9ZDARCULQABzBPUd vPhmUfHiQuKVAMIjDaEpdYHp9YEFhIFMK/Z5Db5gPKH2xVCQX7cgryJs7ZHny1p3jaEuIwiEEql2 NDFmYjmXbScyzEbOpgSNdaPWnXWJOWVh2eBH9ndDAfjQyYjjtn925ZK31Nn3wYhcb4EC1hYKuLLh 8p0ZMwgUENYxBAZ4hX/TohkjgvhjCDX0X/uPNYH4yMNQYBc3zzkZWvAesZKfx4Z8fLWuC8YGQZZ3 nNFR4QgtMHOAWXTN0PP8WykzV3u7wTzjXIckKXDz8OtHCTeUfzAEAqGm0z23fqgIom0Fu3g4tfGh SaFAZ2ELWHoBzPGea78I93dVgnncNKrISthKwuxV503dPRx6cOPtOmiGGneePPyk3N8hVgjaRwle OPiBsFwl/vfUhWcGgVegJ1AwK4L8nAcFkW8XDlkdNyxCHA9CAZCdCBRghMHRFIaCAeuzWDp0Z7ZK 4uhsy4aPoOBfnFbAUn0P1kCEevVd6Ppn5zYVlIRllEugON8Ykkq6dWubfHNqhLlqPxwYZIJ/gSTr qBS6h+VBRUeWV7d+PAbq1qCYpNdze5xlmcmzWhNDAQzRBoeRagbptKiz9s4n60peyquZn1Xn9/dD Qb5Gih84W8kpf6H07pf9MIvE8GRtWFsogGbiBBQkQdEMpwmzIgAKRkm9C0fIOPlN2L8ZOIcJEsdU fA564Z3rmCB1lkuflAcmHNx9THunl0ipjxDuDYaXq2h46+mSv+Stco4ibXflHLuEOfhQxjjgGif+ bdKilrEOhngzHe9q/UFcIN6G+NdA8MQCBUTsiOWrSzGIuWvq98+PcF7D8ZGArhwvcFKKZsh9xZti v+260M6Jrhvx01vRyLbm0qdiQ+xj8K+BjqsTUCPI6c+DAowwVbdOPh4uJF0AqBXQsmH0nsJhMhfM qxYixhYKZkYCE8MKBRjiYh8GBSbKWAYomGmFgqQJKKBsQ96WfwQF/wp0Q5NVN0bHgmVzH2r97tqW zdWvZBYvyKldnF23IFMdAIJCanGu2ie/IZj4l4FjY9qRgC21EZqO/eOo10jFo0wc/9ZMS+zmB9Uk OP00g1lPtQdJQDLcg1p2VaYWVj6Xq7aQFqhyssb68LUdUiDetXViHL0UVIVtqVe1oxtaYl9Iu9wT kuA8KCAzCBn4nIKNQCYTKRTgBMECBeYxxFww3PuvlOdcYiXTlDApQMTK8DKWOSp93cNFv1EtXr4t o6j4va21XxQe3if/ePO8vFUe4TIHuQzMoBO87VNxSOw9TSn0jPdxe3XeW6e+o7QEkC4BvYJgexBE gvl9fBnWqEBvK4WB9yzem1lf7fRYDQxhWtaA8oVK5KCUOq+R/Jsq7Pk92evL3n+r5rPUb7cHvBbn 8qrQVRkwLdHPjugLTVPNo1BgSRBuTwEFpIPgiaHg7XwCBSwfCixm9FwzEd8oKxTQBOFBKGCt5zwX FZQDFMQLyN2GZ+FYwhoVTIaCR2XDf+YXdViYEIYiR4AWp/znBio/Or5+3ZFV2cWLc6pCcqp9Myq8 M6vE2TW+meWBWYfDNldEfH1xy1VtA4kHjDZz2GZ2Qrph6mgEZMnpn5sqEOrNQ9cGmjaXvZJfGZhb JcFnPZjl1YMLW3o9iJOkE2GTnEaiiw6dzUCMGEUaWWG535aKyDMDZVo0bLBkzxavB5bftmCgXcgs 25qCoQDCY9jmYvsUH89I0YHrGAoMBk4Uj+1Dhq+uNf0k3N9NDhNJjml+0FiEKAKEC3Du7xrh5Rnh 7RHuhR/u+Ltc5K70cYyDsQWgKycKHZNlLgqZ+yph+PvrOiF6B/ouTiuO9l5/PNYf9H9IzI9TD3wx IRvWdEOthmwpk3U6A5/4ujPau3+IX+IRIQSiUbKvXTzoIzkkiZ2UAtdYoVuk9/SV82as8poe7uUS OY+IE/raJ/jZqcjEUAJOgrxxcOIWL/2lKvT80F09GHMwZTePPxElJi0SaDjia54ZLYzcnWuBAnaS Qi9JgpgvWwAKXBJ9AApIrcM9TmJNEBiDiUsrzFxb0wgmKaaPzlbgWwSz2JkBdiqBU6IU367kL7f1 wzKz9npND1EeeAQF/1go4Ks+WkYDDKBTPTiAbl0erj1ybefeo2nbNGu2NUZtrQ/f2RT7cXNe1Z29 18cbhsGQbpjmBQ+RS3roX9NaSbAUGNEo6q7v2I+jkfyy4A0NoVnVMpws5B5bkKbxT6sHrmNmE4AD EAs1wbn1gQV1wQWl/kUHnzva8aUW9YxTQVc6JsiZX7B8RVkDZNMGHBVMl0uBNZfqAwm7CrSJvr1S P06qJSYzPPRADzBsbzjwxCpY8HaxAugFAG+WDBQk49NZZE/Iw/SYtlOAJphzkgyfxThJB/2iKC/P cPHit9KuMP1aggPEWoWp67j4dMJ8KO/HzbOj9J41ogWbY7vBZIc6/AKrmfwJ8GUA0WhH3dc/Xe3r JpfZKWVw4uO3U87DaQstaTooRW6JEpd4qHDC5SXKHBQ+TgqpvYLAXTJcrUus8DeJC5sH28ZBa8UA Q8rh3qDVTCAOX/9ja0QRb+cNIgMzlWA4oZ0YMRTMXA19SRhtJrmVc5S34uNN3eC7YdHNYThtQOKx AeIJHzdXzoqG2S6qnmqvED4eI03+ensnfF7LdOUjKPhXqBlOKQNFNigRa9USe+j+EdTZi250MFfu GVv60B0t6sY/NBDnO7NVYpqn7Waa8pVtOhdmqyeO9d8G4gWp6S3eXC7POriwQB2WrSYe8Y2clmm6 2gf8ajVkULpallcetEMtP9n97SCMOYzTPJfIbjB8KOCN6rDdiFm+KxOoxQqIkPHKxFsGpE0vN+jB q4vbjIwBwvVexGw/+d3T0b6e4UIPBcQDDklk7h5n7oSWDEEv6cvDoAF+NTKvh2Fheqxk1quCl3fn XjP343gANgiME0Nx72hny0+UITjaB3lw2tOXi8I2Qa3AhFhrbdVEfByInyZoLOQeeHtWuI+H0h9v c4gK0qR2qUI6JUHQydtO6eVIr0QldY2RPZ25xCPJDwCH9CsdY4W/Tlp4eqR9GPRVjKXtpx9bI8bX iVEFg6FLsg9OEFbszuolcqwTUxu2UcGBq5onV0s9lTIc/GCsc06QQtnw/XUDFj1zk5EL84wmA20f jyLmkzMVT0aKcViC77Nrkq+HSjorQpj02Zv9tGxoIj5pU+kQPoKCf/AXM2EZMClrozUEE/Gns0ox cyO6+NxkWKN1oMzM8hmzXLmJ+atQgGwMhalnFrhKjCHjEBq8Zjj+yan1RcWvFJY9n1MWllM5P7c2 tLBuPgaHgqqw/PIl2YcWbaxa/v6pjMujNSQeGKMFLugBABLoJyUIVijoQcwL21JnRkinq3w846TT ldLH4v2eXCUqvtQwDoYwDLcPuRkcXQ/SH7xzVJq38rGXvWZES1xiRS4qKZ3xJ3p9IhIqi0l0Ae17 fGi6hM/7WZRfUfn77Ug7amOiBWZ/JztafiYPwsDirMBBvghjEd5QC4qiBygUkHIqT/4X7u04MtxH 42urP3l8pdQjSuokJ3LoCfMAB1LFdqk4cQA/aBxmuCf4OId7CzZG5Z360mnVHM94mbNChEMCj1jJ f6jCzgy3jwAdkSm+eeyHkWJPldRNAZ/IXSF+PEoY8U5+jwUKzLZQYAYoMH59vvpHr0pmKXwwdkFu Eid6PFyo/GADaUHyBKMo8Yq6NyJ2/8nyWSvmzoiT4I/sGiPyjBE9sRrGkQYsowoANYxh8sAIspX6 fPT1D4kKbEGYsfi5MJxLI0/1ERwAjSzPRcLiB2HmjMWn6ub/1ZIlFb+xDUkYyJoHtKjj0kD916d3 vFOfvflIeOHBZ9ceXrj2u8WvHXl1X13WoXN7zvfVa0EDQTuGdNRzhFIALZUKTl3fZNtMxBth5esp jz0/d/orc2et9Jr5ypyZK71+8ILXkYs4KmAnRHdZmLBjiD/gGNJfN3QWHtozL2u5x4rZUHKMmutK xntxRkAIPCL7WG/7yDl4Uz8t91m5L7ext2UIgm1yQxiOkoRfEJ+cZ9tafvWq78wVc34YLnrs1bmP RXg/8YrXovyobuochHMTE0uVxAjbw0jgzTBGGBHfXm+S5Yc/HRvguPovjnFznRNp4A29TneVyC1q 7oxX5wVtkjeMtn5+re7HKwT4Az4ZJZr+6hz8j9/LFzTfv0HqoqbaayefWjr38Ve9Hl8p/EGE6LHV Xj9YPlu+PWfAYg/9IBTgkOnr0xU/XiHyXO3lvnrezGjhjCjB4y/Nke/K60M6WqKBWrGZqzlS5RN8 w788Xv7Uy94eq+a6h3t5RgqmR3pjZEj9eEsvFbfklKnZR1Dwr9BMtI0HGEu5j9ja0s1umphX5Wm3 moFdBiQ3YvHMST3/vbKT/OyAfzVmbmwRn+uQmGjRvTumE63mykvGzy8wH1zUfdjKHOxBZ8fQfR2I IoKJCxnDgek4ep1mvZFCgZnXm+P09okdcE372Y9u1u++VbHnZsW7d6reblPvu1rdquvSAgSZmAmQ hO4GjFTDTtR3I/1x1Lbl0uEF76c9szXiB+nBOOgFkyOl6LG0wF9teNH/g+SkhncPjVxoQ+P9kD4b OclBExd9GUhwdV/f9+7p4p2Xi3ddLt7ZcviNC99uu3Dwm+t1vWBhYKSh1LiRMXEjexw+G4lhcRfS XUEj26+WLv4s879fX/Z4BnFZUordE2RPZy0IeDdh/fH9V9AQBo1zo7d3nTm4/fLhrZe+23bl8Fst h98+U9zP+WSxd0c79545/Pa1sh0tJVsuwi/sPHeg/PoJrcVk04wmhNXolsR34Jqxc8vp7968Xf7a jSMbrx/ccOXAGxcOVHWeG0LMqMnA28MsHZUiXq7spaG7r5384vVbRzZeO7TxRvG6a9+9cek7dU/L MFUxokcMyzwUCsyP9ug/6Ov/AH8FeI4KZW5kc3RyZWFtCmVuZG9iago5IDAgb2JqCjM4NzAyCmVu ZG9iagoxMyAwIG9iago8PCAvTGVuZ3RoIDE0IDAgUiAvTiAzIC9BbHRlcm5hdGUgL0RldmljZVJH QiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNp9kk9IFFEcx7+zJUKsBWUmUvBOtgdX Bu1gHYzd9W/Ktqxrpgiyzr7ZHZ2dnd7MbiUeQoguQdYxuljRSTqGBw8dAg8RgmJdIugoGQSCl5Dt NzO77ojagzfvM7//v997QF0obZp6gAF5wxbJ/ii7Oz7B6jdQhwYEQSutWGYkkRh2mWxxZO19heSc m+Hj9f9dDYISAhJVgMasx9ccnvZ4wOH7tmkTTzqs5NIZYpO4TaSSMeJXxGezPp72cYZbCvEy8U3F FBQnkCIeKClZJ+YOsWxkNIPkl4m7MpaSJybfwFNnFl6Z9hDQfQU49bkmm7CA5XfApdaaLNQMXBwD Vjprst2kOx+pad1SOztckRSMAnU/yuXdVqD+BbD/vFz++7pc3n9DOb4DH3WlKEqVGUnSF8Drw12N /dzgQlOYc18JUVA1nftGerza69eLR/Ulq3QSezNxVxewRPcwdgYYegy8/AlcfQ9c+AAkGoDUdQQe obpt/sDNEyuYD4WWzdmsQ5Y7WNg5OlmEXghnsULeLNpcsEFDaW9jaV1nrqnFBLe4KPFMO/J6sdrv OdpBboyO0EnzCqjc6q2wNJNJ99DdoJ14I8N7ep13Qbyoan2DzoXQ/qSKvlGPpfOaPZjyONBt6PHh CsMoxG97MbFj2tFkNb5VGumtymfStxJ0tpD8xmxhyLFpIt/QXC415rGUmsvF4hVexTh0cGgw6GuA IYl+RBGGCYECVNJoZKGRlLs2gtjC7LGWOhI+ZqTfJp9t1+ceiuTteN1BNI6FtoMITP4m/5a35CX5 rfxrsaUYqmkWxJSmrD/7Q3GdzNW4FW2lJi++QnkjpNWRJWn+oCfLV6mvOtVYbKlFcnLwJ/E9X5fc lymMaTfSrJup5Oos+kZ82U6aHtmuza8213JtnV6Z3AyuzR+aVeFIV/ygq8P/NTu/P/8HzbABaApl bmRzdHJlYW0KZW5kb2JqCjE0IDAgb2JqCjcwNgplbmRvYmoKNSAwIG9iagpbIC9JQ0NCYXNlZCAx MyAwIFIgXQplbmRvYmoKMTIgMCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9NZWRpYUJveCBbMCAwIDYx MiA3OTJdIC9Db3VudCAxIC9LaWRzIFsgMSAwIFIgXSA+PgplbmRvYmoKMTUgMCBvYmoKPDwgL1R5 cGUgL0NhdGFsb2cgL1BhZ2VzIDEyIDAgUiA+PgplbmRvYmoKMTYgMCBvYmoKPDwgL0xlbmd0aCAx NyAwIFIgL0xlbmd0aDEgMTQwMjQgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCnja7Zpp WFPX+vbXSkIChJAEmSRAggGqBcRZHCqRSZCiIsQmOIGAYutAUZxRqm21tHaydq7a0bZ02Gxtxdaq nUdra+dZO0+22ul0Qv733g+PtV7n9Mt5v7zXdUJ+ue/nWUPWXnuv5UIVUghhFa3CKAbUzq9pFDYx Fpk9ILF2yWLPg5t2/Qb/thAh4bMb58z/5ZeyCPhPhQhLmDNv+ez7Zz4aLYQdVYymhvqauuMDn5kp RJQJiWENSNg2mHcjHo04tWH+4mU2g3gQcTVix7yFtTWGVDkPcSPi8Pk1yxq9t6Vdi3gVYs+Cmvn1 X0RWX474Zi1ubKpv7P7688OIMb5UK3JSaOMXIkKYhQOaguuQwCCEZYsQJzaJU1+TxLliEa61VVws NopNYp94T8wS6+BuENvEXeIeoYjHxfPiLfH/8HViech8EWHchRH2EqL79+6jJ+4CnSGRp2Q2Iepl 8vyV6XZ0f3da7rsTm7odJzrNUSJcb2szHEL2R9nV/bshV4u7h2mxYT28XW9x3LLlxIMntp82B+Wi SkwV08R0US1qcP11okHMxcycJ+aJ+WKBHi1A2Rx8zkY0E7VqUUvzf9VaKBpBk1gsmsUS/DTCL+qJ tLLz9bhZLMXPMrFcrBArxSrR0vO5VM+sQskKPV4GVos1uDMXiLW6Y6XMOnGhuAh3bb3YIC75x+iS k65NXCouw32+XFzxH/3Gv0VX4ucqcTWeh2vEZnGtuB7PxU3i5tOy1+n5G8UWsRXPjFa2GZmtutNK 94hnxEPiATznD+tzWYtZoxnheZmtz2Ej5mAVrnDdKSOm+Vt6crZW49q1a2vrudJlyK89pcWSnnnU aq5DTeqF7oPWS8tpM3ElroH8X1dE0Wb9+v/Knjor/5Tl+bj5lJm5SY80d3r2P/lrxS1YgbfiU5tV zd0GT26r7k/NbzlZd5se3y7uEHfiXmzXHStl7oLfLu7G2r5XtIv78POXP9WRPiDu1++cIjqEKnaI nbiTD4tdolPP/1PZv8vv6MmrJzO7xSPiUTwhe8V+7DRP4IczjyG3ryf7lJ6j+AnxJGKtFkXPiGex Q70gXhQviYPiaUQv65/PIXpFHBKvibekDe5V8RU+u4DwjaubOWP6tKlVwYC/smJy+aSJE8rOLh1f UjyuqLAgP2+sL3fMWaNHjRyRM3zY0Oz+WZl909NSvX3c8dFOh91mDQ8LtZhDTEaDFJmF3qJqj5Je rZjSvcXFWVrsrUGi5pREteJBqujvdRRPtV7N8/eaPtScfVpNH9X0nawpHZ7RYnRWpqfQ61EOFHg9 nbKqPAC/scAb9ChHdV+me1O6HtgQpKSghacwvqHAo8hqT6FStKShrbC6AP11WMPzvfn14VmZoiPc CmuFU/p6Gztk3zFSN4a+hSM7DCLUpn2tYkwrrKlTJpUHCgtcKSlBPSfy9b4Uc75i0fvyzNXGLC71 dGTub7us0yFmVWdE1HnraqYFFGMNGrUZC9va1ivODKWft0Dpt+LTeFxyvZLpLShUMrzorHTyyS+Q Skiaw+tp+1lg8N6j3/49U9OTMac5fhaa1S7x5DShnL3A2DBCXF9KijaWSzt9YhYCpbU8QLFHzHKp wpedEVQM1VrJfi6J8WslrVxysnm1N0W7VYXVPe8lDfFK6yxPViZmX3+n4Y1yj2JMr55V26BpTX2b t6CA5q0yoPgKYHw1Pdda2DEgG/VrqnERc7VpKA8o2d5GJdqbRxWQ8Gj3YG5FQG/S00yJzldEdW1P KyW7sEAbl6ewrbqABqj15S0P7BaDuw93DPG4dgwWQ0RQG4cSm4+bkl7YFqibrbirXXV4Pmd7Aq4U xRfE9AW9gfqgdpe8DqXfYXxdiv6Neitc22m1ubJ25Za0UE/A4DIGtbuFhKcIH9680Shw4HbpoXZH 80Z7AtIluBq+paeG5v7WDwJjWn6xVmTUmuYXu1KCKfT6hyG5esYUkqaEntKXA4mTY6Lv+Y9Do9ra gPp5CusLThng3zoN6RlgT2//fpwGbS56vhgtQrXbWcxFxjSsXOQM6EZPaXcx3qOISZ6At94b9OIZ 8k0KaNemzbV+f0srvKXlVQH9bvc8JZV/i6g8hyJFpKCYA0M+nsGiDBffVj0ep8cnw+LTiku42NMW 6i2taNM69/Z0KDxYQbhoc3pJzaU5UUOwNIuwu3mLarweh6eoraazu3VWW4fP19ZYWN0wUuvDW1LX 5q0IjHbpY50caHGt0L4qSpTK0sq8rEzsPXkdXrmhvMMnN1RUBXbjcOvZUBlQDdKQX50X7EhFWWC3 B5u7njVoWS2pBR4t0HqajCBUr+/a7ROiVS816Qk9ru2UQs+Fck6K2k4D5RycMyBnopxPz2kv3KT4 BkwxtttCT512e1YFG9qqg9riErG4lXhLRXrHCMXgHdMhDeYIJdxbn6dYvXlaPlfL51LerOUteDBk rMTkaHtSW7UX+xQeqIBwSXoUjVqXns7u7spAygHX0WAKHrVpoCqghGVg7w9JG4964zSqkR6ntNbW aOMQ/oDW1pJWUhvEY8sdokqJEoYewnp6QI0ivY32OKJRLe4NbqDevhWB0hpUghnalwbmBvXH2aGI Yu9I3HbqMyRd+6LsYFuUd5C+NrEUwtPWaxKGsYmKAGVcCPFlQZokSwRGXutFUW21B7NtErUVeNRp Lw13UaYeW6IpvV4n3NVTKLTLMqZZbeFKWH90iLfmrf21JRmSZgkGafB6tL6nAr7boVgxovRTprKn AWYHRSXaWPBej6FqVR/XuinvFJO9y7CzaIPWe7KgWLGlldRg86f2VmS8Odw4VNsjrD19PEVZi3bl EZh3Y1plZ/d27/KUU15ZmV7tDwftwRQu/M7oE8G20xPK1IyszNDTszY93dYWavv3DWi+Qm0nVUt6 CvGnBiqG4De0RcZD+I3KKCxihCgTE8TUPcImJ4tYMVI+9FBMQUFolmWvzMdC8MhKESqkzPfZTQbb roSEXO+uoeaNRmdJp8zamWvZaDCI3K4Pu17O7vrwaNSI7KMy+4MjHx5xHH/ZOSJ78JHXjwwcIJ0p Tp3oSIPFEm329ulvGHpG+rDBgweNMQwdku7tE2nQc0OGDR9jHDwo2WCM5swYgxZL46E/q4wTu8yG 1d7cKYNDkhPs0TZziCExPiprdJqjYmra6P5JFqPFbAwJtfQdntendF5hn3ctzqSY2KSo0NCopNiY JKel672QyN9/CIn8I980749rjOZR03JTjdeHhxpMZnNncnzvM0ellEyx93KYrL0czthQS5Qzom/B tK6LYxK1PhJjYqivrjL6LfzEF8bwkL0iRoR2OEJEdvbAAXGRRm3UwyVdheVuky06KaZ3SpTJbJhu svVKjuntiTKFHLfZQ00WWy+beaXNHma0RETb0N8DQhi3hsSJ/uIzX2pqskxNkqmJ0uuSqQkytbdM j5fpcbJflOznlFEehywb0Nm932ezG8qqB0jhscoy0a+z+8sdKIEe22HvUZuuv+yI0PXXHVZNDU5f ZHK81ijeqn1anZ3dh7Um0Nd3oE/ofq2rU/L7tS6gx3xhaLENd7RXVKfM3eGd3M/RKS0d5kqRe3RQ btcBmT09Q38dyHgqY/Bx3T6dMXDA9AyRIaeffKVp9ziFb3KK02I2p6drfngaTV+MU38UtprDbZau aZYIq9kcZguVkb/3iosMMZqtYfJMU0RUfFS8J8r8dWhkWEhBrwSHxeJI6BWV4Awzvr053GRLjnPG OyLM+4wmkzRZrOY/rghzJgj9/gntb0wmJxbnz7SP/ln0DtX/quDZ+L3X/6X6KtmLMEyrK3raWbZ0 vStE+IQ/B564LOzhnr+N+etlMkWi2kHczTgh4XFf8RvbbeIFubbne0347SkEv3lZ0KtDZIt6Ibzx qVbkpV4jqqdPs0BPxRMnTyqoysivmTd3VtNcNczo6TRcuDMsXo6HWcdmLZsL2LSyWcNmNZsWNqvY rGSzgs1yNsvYLGWzhE0zm8VsFrE5n00jm4VsFrCZz2Yem/PYnMtmLpsGNnPYzGZTz6aOTS2bWWxq 2FSzmclmBpvpbKaxmcqmik2QTYDNOWymsPGzqWRTwWYym3I2k9hMZDOBTRmbs9mUshnPpoRNMZtx bIrYFLIpYJPPJo/NWDY+NrlsxrA5i81oNqPYjGQzgk0Om+FshrEZymYIm8FsBrEZyGYAm2w2/dlk sclkk8HmTDb92PRlcwabdDZpbFLZeNn0YZPCxsPGzSaZTRKbRDYuNglserOJZxPHJpZNDJtoNr3Y RLFxsnGwsbOJZGNjE8HGyiacTRibUDYWNmY2IWxMbIxsDGwkG9FjZDebE2y62PzJ5g82v7P5jc2v bP7F5hc2P7P5ic2PbH5gc5zNMTbfs/mOzVE237L5hs3XbL5i8yWbL9h8zuYzNp+y+YTNx2yOsDnM 5iM2H7L5gM37bN5j8y6bd9i8zeYtNm+yeYPN62xeY3OIzatsXmFzkM3LbA6weYnNi2xeYPM8m+fY PMvmGTZPs3mKzZNsnmDzOJv9bPax2cvmMTZ72DzK5hE2u9l0stnF5mE2D7HZyWYHG5VNBxuFzYNs HmBzP5v72LSzuZfNPWzuZrOdzV1s7mRzB5vb2dzG5lY229hsZbOFzS1sbmZzE5sb2dzA5no217G5 ls1mNtew2cTmajZXsbmSzRVsLmezkc1lbC5l08bmEjYb2KxnczGbi9jwsUfysUfysUfysUfysUfy sUfysUfysUfysUfysUfysUfysUfysUfysUfysUfysUfysUfysUc2seHzj+Tzj+Tzj+Tzj+Tzj+Tz j+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tz j+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Rjj+Rjj+Rjj+TTjuTTjuTTjuTTjuTTjuTTjuTTjuTTjuTT jszfoRmcmtXkMW6cmdXkGMhaii5Qk0dCWilaQ7JaTY6AtFC0imQlyQqS5WrSWMgyNSkfspRkCUkz lS2maBFJEyXPV5PyII0kC0kWUJX5JPNIzlMTCyHnkswlaSCZQzJbTSyA1FNUR1JLMoukhqSaZCbJ DGo3naJpJFNJqkiCJAGSc0imkPhJKkkqSCaTlJNMIplIMoGkjORsklKS8aqrBFJCUqy6xkPGkRSp rlJIoeo6G1JAkk+SR2VjqZ2PJJfajSE5i2Q01RxFMpKajyDJIRlOMoxkKHU2hGQw9TKIZCDJAOos m6Q/tcsiySTJIDmTpB9JX5IzqOt0kjTqM5XES9KHuk4h8VA7N0kySRJJIomLJEFNmADpTRKvJkyE xJHEUjKGJJqSvUiiSJxU5iCxUzKSxEYSQWVWknCSMCoLJbGQmNXekyAhau9yiInESEkDRZJE6CK7 SU7oVWQXRX+S/EHyO5X9RtGvJP8i+YXkZzW+EvKTGl8B+ZGiH0iOkxyjsu8p+o7kKMm3VPYNydeU /IrkS5IvSD6nKp9R9ClFn1D0MckRksNU9hHJh5T8gOR9kvdI3qUq71D0Nslbatw5kDfVuCmQN0he p+RrJIdIXiV5haocJHmZkgdIXiJ5keQFqvI8yXOUfJbkGZKnSZ4ieZJqPkHR4yT7SfZR2V6Sxyi5 h+RRkkdIdpN0Us1dFD1M8hDJTpIdamwuRFVjp0I6SBSSB0keILmf5D6SdpJ71Vjs1/Ie6uVuku1U dhfJnSR3kNxOchvJrSTbSLZSZ1uol1tIbqaym0huJLmB5HpqcB1F15JsJrmGyjZRL1eTXEVlV5Jc QXI5yUaSy6jmpRS1kVxCsoFkPcnFakwN5CI1ZhbkQpJ1asxsyFqSC9QYP6RVjcFmLNeoMcMgq0la qPkqareSZIUaUwdZTs2XkSwlWULSTLKYZBF13UTNzydpVGNqIQupswVUcz7JPJLzSM4lmUvtGkjm 0MhmU/N6kjqqWUsyi6SGpJpkJskMuujpNLJpJFPpoquo6yB9UYDkHBruFPoiP/VSSVJBMpmkXI32 QSap0do3TFSjtcd7ghq9DlKmRmdBzqYqpSTj1WicC2QJRcUk4yhZpEavhhSq0eshBWr0Gki+Gt0K yVOjiiBjSXwkuSRj1Cj8+S7Pomi06gxCRpGMVJ3aozGCJEd1joMMV50ByDDVWQUZSmVDSAarzkzI IKo5UHVqFzZAdWprM5ukPzXPom/IJMmgzs4k6Ued9SU5gySdJE11arOUSuKlPvtQnynUmYd6cZMk U7skkkQSF0kCSW/VMR0SrzpmQOJUx0xILEkMSTRJL5IoauCkBg5K2kkiSWwkEVTTSjXDKRlGEkpi ITFTzRCqaaKkkcRAIkmEr9s+y61xwl7r7rLXuf+E/wP8Dn5D7lfk/gV+AT+Dn5D/EfyAsuOIj4Hv wXfgKPLfgm9Q9jXir8CX4AvweeQc92eRDe5PwSfgY3AEucPQj8CH4APE70PfA++Cd8DbtvPcb9kG ut+EvmGb537dlu5+DRyCf9WW4X4FHAQvo/wAci/Z5rtfhH8B/nn452znup+1zXU/Y2twP22b434K bZ9Ef0+Ax4Gvez8+94G94LGI8917Iprcj0Yscj8Ssdi9G3SCXcg/DB5C2U6U7UBOBR1AAQ9al7sf sK5w329d5b7P2uJut6523wvuAXeD7eAucKc1y30H9HZwG9rcCt1mPc+9FX4L/C3gZvib0NeN6OsG 9HU9cteBa8FmcA3YBK5Gu6vQ35XhE9xXhE90Xx4+x70x/E73ZeHb3RcZ09wXGnPc62SOe62/1X9B e6t/jb/Fv7q9xW9tkdYWV0tpy8qW9pb3Wnxl5vBV/hX+le0r/Mv9S/3L2pf6l7Q3+03N0c2Lm40/ Ncv2ZlnQLAc0S4NodjR7mo0Ri/1N/kXtTX7RNKmptUlpMo1Smg43GUSTDNf+wabJlVyk/SvRqiab o+h8/0J/Y/tC/4LZ8/3nYlhzc+b4G9rn+Gfn1Pnr2+v8tTmz/DU51f6ZOdP9M9qn+6flVPmntlf5 gzkB/zmoPyWn0u9vr/RX5JT7J7eX+yfmTPBPQL4sp9R/dnupf3xOsb+kvdg/LqfIX4hLFomORE+i 0aENYEIiRiJcMm+Ay+c67DrmMgmX4trvMkbZE9wJhn723jJ/Ym+5sPea3lf0NtrjD8YbfPH9Movs cQfjPor7Ps7UyxfXr3+RiHXEemKNMdq1xZZVFumaW0A6cKh+rWWx3vQie4y0x7hjDIXuGCmch53H nMaYfY6DDoPdLu32brvBZ0d1e6Q70qB9dEcafZEDhxfZbW6bQfvothljfTZktB7PiJhUWWS3uq0G f651otXgs+bmF/msWQOKhFF6pBTSATGGou5OGeMuMu7R/4tuiJDyyo7KioyM0s5QMblUCZ00VZEb lLQK7dNXXqWYNyjCXzU10CHl5cEOacivVKK1/2Shxxdt3CiS8kqVpIqAaty2LSkvWKq0at7n0323 5gWqBDNmLGpelJGxeAY+ZixanKG/EclmLcrQktp70WLE2k+zHouMf3xRNcjMRXgt7sktzvj/+iUz /vf6L18dQvu/QWO7DReKOsM6sBZcAFrBGrAatIBVYCVYAZaDZWApWAKawWKwCJwPGsFCsADMB/PA eeBcMBc0gDlgNqgHdaAWzAI1oBrMBDPAdDANTAVVIAgC4BwwBfhBJagAk0E5mAQmggmgDJwNSsF4 UAKKwThQBApBAcgHeWAs8IFcMAacBUaDUWAkGAFywHAwDAwFQ8BgMAgMBANANugPskAmyABngn6g LzgDpIM0kAq8oA9IAR7gBskgCSQCF0gAvUE8iAOxIAZEg14gCjiBA9hBJLCBCGAF4SAMhAILMIMQ YBrbjU8jMAAJhKiTyMkToAv8Cf4Av4PfwK/gX+AX8DP4CfwIfgDHwTHwPfgOHAXfgm/A1+Ar8CX4 AnwOPgOfgk/Ax+AIOAw+Ah+CD8D74D3wLngHvA3eAm+CN8Dr4DVwCLwKXgEHwcvgAHgJvAheAM+D 58Cz4BnwNHgKPAmeAI+D/WAf2AseA3vAo+ARsBt0gl3gYfAQ2Al2ABV0AAU8CB4A94P7QDu4F9wD 7gbbwV3gTnAHuB3cBm4F28BWsAXcAm4GN4EbwQ3genAduBZsBteATeBqcBW4ElwBLgcbwWXgUtAG LgEbwHpwMbhI1I1tlVj/EutfYv1LrH+J9S+x/iXWv8T6l1j/EutfYv1LrH+J9S+x/iXWv8T6l1j/ EutfNgHsARJ7gMQeILEHSOwBEnuAxB4gsQdI7AESe4DEHiCxB0jsARJ7gMQeILEHSOwBEnuAxB4g sQdI7AESe4DEHiCxB0jsARJ7gMQeILEHSOwBEnuAxB4gsQdIrH+J9S+x/iXWvsTal1j7EmtfYu1L rH2JtS+x9iXWvsTa/9+fBP/VK/i/KfivXvEzZ4j/A86y2JwKZW5kc3RyZWFtCmVuZG9iagoxNyAw IG9iago2MzEwCmVuZG9iagoxOCAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0FzY2Vu dCA5NTIgL0NhcEhlaWdodCA2MzggL0Rlc2NlbnQgLTI2OSAvRmxhZ3MKNCAvRm9udEJCb3ggWyAt NDc3IC0xOTQgMTIxNCA5NTMgXSAvRm9udE5hbWUgL0hPUlBEWitDYWxpYnJpIC9JdGFsaWNBbmds ZQowIC9TdGVtViAwIC9NYXhXaWR0aCAxMjg4IC9YSGVpZ2h0IDQ3MSAvRm9udEZpbGUyIDE2IDAg UiA+PgplbmRvYmoKMTkgMCBvYmoKWyAyMjYgNTA3IDM4NiBdCmVuZG9iagoyMCAwIG9iago8PCAv TGVuZ3RoIDIxIDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNqN2Mtu21YURuG5 n0LDdBBYh+cOGASKFAE86AV1+wDnxsBALQuyMvDbd5Ex8xdpBhlsAVsSLX2L5kC8/XD/y/3p8Xq4 /ePy3B7G9bA8nvplvDx/vrRxqOPT4+nGTIf+2K5v2/bYnsr55paDH15fruPp/rQ8H+7ubg6H2z95 +eV6eT28+7k/1/HT+tzvlz4uj6dPh3d/f3jYnnn4fD7/M57G6Xo43szzoY+FP/drOf9Wnsbhdjv0 /X3n9cfr63uO0jv+ej2Pw7Tt5stXas99vJxLG5dy+jRu7o7H+e7jx/lmnPo3L/njlyPq8p+3rrOk uMysZt5mX6d5m3218zb76uZt9tXP2+xrmLfZ1zhvs69p3mZf87zNvpZ5m32t8zb72uZt9rXP2+zr mLfZ12Xe5m01WI28BquR12A18hqsRl6D1chrsBp5DVYjr8Fq5DVYjbwGq5HXYDXyGqxGXoPVyGuw GnkNViOvwWrknbBO8k5YtzlOeV2xrnM8WrOuWNc5HqftzVgneSesk7wT1kneCesk74R1kpdP22Zf sU7yTlgneSesk7wT1kneCeskL990m7fVYrXywtrmy8r1sP/j/+9CsGSwOvWWDFan3pLBKoUlg1UK SwarFJYMViksGaxSWDJYpbBksEphyWCVwpLBKoUlg1UKSwarFJYMVikcGZxSODI4/as7rE5eh9XJ 67A6eR1WJ6/D6uR1WJ28DquT12F18jqsTl6H1cnrsDp5HVYnr8Pq5HVYnbweq5fXY/XyeqxeXo/V y+uxenk9Vi+vx+rl9Vi9vB6rl9dj9fJ6rF5ej9XL67F6eT1WL6/H6uX1WL28AWuQN2AN8gasQd6A NdgfuRACGYJSBDIEpQhkCEoRyBCUIpAhKEUgQ1CKQIagFIEMQSkCGYJSBDIEpQhkCEoRyBCUIpIh KkUkQ1SKSIaoFJEMUac+Yo3yRqxR3og1yhuxRnkj1ihvxBrljVijvBFrlDdijfJGrFHeiDXKy8M2 b2vCmuRNWJO8CWuSN2FN8iasSd6ENcmbsCZ5E9Ykb8Ka5E1Yk7wJa5I3YU3yJqxJ3oQ1yZuwJnkT 1iRvxprlzVizvBlrljdjzfJmrFnejDX7H7kQMhmyUmQyZKXIZMhKkcmQlSKTIStFJkNWikyGrBSZ DFkpMhmyUmQyZKUoZChKUchQlKKQoShFIUNRikKGohSFDEWnvmAt8hasRd6CtchbsBZ5C9Yib8Fa 5C1Yi7wFa5G3YC3yFqxF3oq1yluxVnkr1ipvxVrlrVirvBVrlbdirfJWrFXeirXKW7FWeSvWKm/F WuWtWKu8FWuVt2Kt8lasVd6GtcnbsDZ5G9Ymb8Pa5G1Ym7wNa5O3YW3yNqwt/siF0MjQlKKRoSlF I0NTikaGphSNDE0pGhmaUjQyNKVoZGhK0cnQlaKToStFJ0NXik6GrhSdDF0pOhm6UnQydKXoZOg6 9R1rl7dj7fJ2rF3ejrXL27F2eTvWLm/H2uXtWLu8A+uQd2Ad8g6sQ96Bdcg7sA55B9Yh78A65B1Y h7wD65B3YB3yDqxD3oF1yDuwDnkH1iHvwDrkHViHvMtqlXdZrfIuq1XeZbXKu6xWeZfVKu+yWuVd Vqu8y2bVulrzdy6E8M11sKwVVGJZK6jEslZQiWWtoBLLWkEllrXC8p3PXH+yr7cWvt4KaJ8vl3G6 bvcftp//6w//x9P4eovi/Hxej9rmX6tjZyYKZW5kc3RyZWFtCmVuZG9iagoyMSAwIG9iagoxMjky CmVuZG9iago3IDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZv bnQgL0hPUlBEWitDYWxpYnJpIC9Gb250RGVzY3JpcHRvcgoxOCAwIFIgL1dpZHRocyAxOSAwIFIg L0ZpcnN0Q2hhciAzMyAvTGFzdENoYXIgMzUgL1RvVW5pY29kZSAyMCAwIFIKPj4KZW5kb2JqCjIy IDAgb2JqCjw8IC9MZW5ndGggMjMgMCBSIC9MZW5ndGgxIDE0NzQ4IC9GaWx0ZXIgL0ZsYXRlRGVj b2RlID4+CnN0cmVhbQp42qV6CXzURZb/q/pd3Z2+03eO/nV3ujtJJySEDiEQyS8hiUAEwmkazZAA QRgPgoAoM0JEFA0eQRHwJLoKiAedDmLCMUZdr5lxxHHGQddZszM4qGNWZkbRVdK9r34dEHbd/Xz2 /+/O+7063rfq1atXr6p+aSAAoIdO4EBZcm1bB3xMfoIlv0Z6ZckNa+Qvn9mOadINIE1c1nHVtb5b 3JjWYJkw86prblr21g1N+wCM2QDu7uXtbUu/f+g9L0D4WcSPX44F1lf1L2L+JObzll+75sZlVNsE kK/B/JXXrFzSVj2vfiHml2K+9Nq2GzvE9y3fYH475uXr2q5t37W56zHMH8R8sGPl6jXkz9zTmP8I 800d17d31PiWcgAFRQDmlVhGgI2HjUiEQ6wNWDBa8n/70P+Sxz6ARxIuKBMvkpBA8z+2pgUdZKBO htG8EUwqN4MFrGoqE2xgBwd2cBiyVdoL2XwI0K6pk+couSJ1ktUxTj/HweakafSTgGfhDySfyNBH vgMnfEvcZCxMQ72/Qf0PwAg8gL3Mgx3ECnnY13yYRniUicBd5OHUDanP4BK4D55IvUg2pfZj/b3w OnyLGvwrT6ACZqL8fGiHz7hPIJZ6CEe7Bcc0CeYQB7TB+/j9GnW4H7bDL8jPU99irzbYhO1VQQ3U pF5OnYVCuIvvFk5oX4BtcISIqSWpFZALfuiikdT7qY8hBDH4J3gWdYqQQX4q+OBquA12ETf3OqYe gCchSfS0hZsivIQ9TcOZvQ7WQRfsh18SK2kSTginUz9LncJ5yYR81GkFfEbKyQz6FK9PTU59CFfA ALyJ42XfQf4Kfq9wRbI69WjqFbT8i0RHjpKXhTLhnpFbUo+nnsfZCsFYtMhM7Gcx3Aovw1vwN/g7 3ZjaCFNhLvb8GskhMgmhxd+nbrqBbuDegzE42hbUdi3shjjOyGE4AsfQNv8CQ/AJsZEsMp0sJtvI 36meLqXvcA9zB7nf8YR/Gu0dgCDaaA08hZ77a3gb3iECtl9KmshPyUqykzxKhmicfkG/4TX8rfz3 /IgQSg4lv0/NTH0NLvDAZbAeNqJt/wn64CD8Bn4Pf4d/wBliJhPIcvI4iZMh8gXVUj+dRTvoDvoU fY6byW3jXubL+Vr+av5t/kPhdmGr1CYlz+5J3p98Lvlu6sXUu+g7Rmw/BA1o0VvQK56Cl+A9bP0D +CP8ifkPtj+JLCQ/wV5WkzvIdvIceY28Sz7HUYL69dNJtA57XUmvRzttovfT7dj7O/g9Tj+kf6R/ pV9zAufnxnOruMe5ONfPHef+wpv5ED+GH8vP4hfyKZyZMuFSYa6wT3hGeEU4LVaJS8UO8VNpk7RZ 8+uRwpF/TUJyeTKe7EPf1aAnrUdLPAZPoN8fxDn4JVr0N6jxEHyFs+AhPhJGvStJA2kkM8jl5ErS TjaRLeQ+sos8TJ4gz+MIcAxUQt0jtIbOpW20nW6mW+jd9CB+D9O36Pv0BB1GzZ1cgItwY7lp3ELu Cu46HMMabgO3GS27jdvPvcO9x53iPuWGcdacfC6/ll/PP8jv5Q/y7wqXCdfi9wnhJWFQeFc4K5wV qegRs8US8afiPvFPkiiNl5qkO6XfSf/QdJBsUoiayxeFKTeuwVy6n9r4jWQYC3IIj7FlG0RwHubi qvgHVHNJnBcjq0fd7NTNZ6rBS+HjiF9DjkA5eQ02ipTDOMkPQYJ8RIf4V+kl8HvSStz8Xu464ZfU B89gNOqmR+kRUgsHaRVdQB/hgHxC9sEn6O83wnZyNVkNz5BhMpHcTCrIRvgddXBzyWaoSj1BeaIl 08hpQA3gFn4p/OR/D7+kEj6Cz5KP8Qb+5xif+mEHzuizuDc9Dd8RIfUFRjcOo1EbRpm70N9vAxb1 WnCdbcT16MYIco34DhwkGKGlCnEyvx5Ow3/AZ8Jh9KhajKSnkiv4x/g/pypSxbjCcJXBPlx3y+FS XDGfoJccwzzLXYkrXYexpAxXdRMshKVwM0a9bal46pHUrambUivhV4j9jhSR70gProh+RFTBm/i9 Fz4gW3EdXgr/T5/kUhiEz4mLBEkZrodh4QahW9gvHBR+IbwtjkVrb4aH0aP/hN6swxEsgXfhc/iG aHBu3FAEUdR3AureDNfQGHcMphAPdOCazcc4Xjs6ktXYyia03iO4no/h2jiNceJK+AWcIJQ4cURL sH8NttOIdl6E0ntwBm8lfViyFKN2IfwVx20kE+ga7E/BlnZg1BpEnT6Cv6C1U6peRRgX6sgCbOsb uByWYg/joYn0QkPqEEaqmVDH/RrtnUfMUEv85EnEteIKNUIOVAp/JhSKkjNTE+gK7hjuMSks78Hd KwsuIatQCxOOYwTsZBaUJ+egDu8BKDXzlOrJl1RNmlg5oaI8Oq5sbGnJmOKiSGFBfjgUzAv4fbI3 Nyc7y+N2OR12W6bVYjYZDfoMnVYjiQLPUQJF9YGGVjkeao3zocDUqcUsH2jDgrYLClrjMhY1XCwT l1tVMfliSQUll/0XSSUtqZyXJGa5CqqKi+T6gBx/uy4g95OFs5sxfXddICbHh9X0DDXdraYNmPb5 ECDXu5bXyXHSKtfHG25Y3lXfWofN9WbopgSmtOuKi6BXl4HJDEzFnYGOXuKcTNQEddZP7KWgMaBS cU+grj7uDtQxDeJcsL5tabxpdnN9XZbPFysuipMpSwKL4xCojZsiqghMUbuJi1PiktqNvIKNBrbK vUWDXXf1m2Fxa0S/NLC07crmONcWY31YIthvXdy5/qTrhyw2bp3SvOXC2iyuq961QmbZrq4tcnxw dvOFtT72jMWwDcTSYENrVwN2fRcasXGujL3R22LNcXIbdimzkbBRpcfXHqhnJa0/lePaQG1geddP W3FqPF1xmHOTL+HxKAOpIfDUy13zmgO+eHVWINZWl91rg645N/W5Fdl9cU1xUa/ZkjZsr9E0mtAb Lky0n69TU6o4SzXOOW9ZwjQKTEOHiMtLZNSkOYBjmsAe7ROga8kEFMNPjCAqvhRnZEVcO6W1yzyR lTN8XAiaA3LX14AeEBj+4uKSttESMWj+GliS+cl5V8P6c+l4JBIvLGQuIk3BOUUdJ6v58uKiG/rp +ECHWUaG5oMmtG1bbGIJmt/nYxO8tV+BxZiJd85uTudlWJyVAKUkEovTVlYzeK7GPp/VdJ6rOQ9v DaAnH1SP6fa4JnT+z2R2ZNYvnxgnjv+luj1d3zg30Dh7YbNc39U6atvGeRfl0vUTzteNpuKZU5q5 LDqaolmcWotOeeV5YZZp1sf5IP6JqlMvjXPolGoBkRvi5tap6WdM5/P9j5h+SXMBqD91mqFU9gNs VMv4xMjF+UkX5S/STt/Fob58iDbOW9jVpbuorgEDUFdXQ0Bu6GrtautPdS4OyOZA1wDdS/d2ddS3 npvQ/tThrVnxhrtiOIjlZCI6K4XaYna8IOqVR2D3HwlqD1KSFKV+Wq1kgsAnOdBJfJKAWyMKScod JSHQ4iHTBa6I+UzVSNVM81dVM0aqoBrT5rP4GFvqs/gsQXwQ3LjPytzgWUWA70HmB9mN6y3c9/+E pwzW1xgli5tARHECr9Me4CgVQ0QWSgUqHNC8/Qxrv4U1WnUGqoerh8eWZmK7BOkt4k6ewguDgfGz /2DP9O1tB45jMd6dMvFGWAQnlOp1hWS58cbCv/BneF7rs2vF/CJf0GH12mfZaan9gJ3a7baAP2jN 1Mi2IAGaFe4QO/F41pgfPqAn+v7UYJ82I6rvp3cpvtIxypimMa1jOsZ0juke0zNGI48pHUPH2Pwy yJmlmTSzn27tKx471xVBk7Qwm8wwt6w6E1k1Y/irlmHVPowslSUtq9BvBsCe6kzkVNqxk4SHsc7e zMpIJBJDIWKxVgLS2FLSGM+Y2xg3oYP06uQJMdICLZm+slxqt4mSA/c3UcRdzUcs48oqxo8vj4bC oQBn8Y1mQoEddPrzz2xZuHLR7d0tj98wPflJ0kDyX3mu8LLLG6cXvbufWHsitXOVm34pHM658sFF Vz0bCR/duPTYKoOG8q8nnxO0l19aN18rjAwkb9TqW2bWXlnI5hDv7UIb2tkMXtiojMsX8nWXOtv5 dr1Q6Kx0TnXEHMsdQqVzfNaWrAeFHRmC18KMm2kNmswad/iARKRRy0rMspmdPiL7Sn3UZ7GiLc2l ZmpmtpR/1JbnDTm2FFpWEWYMp8NhtdvwHI3fQNoUkykbPdpiO815sfWW/tbiimUzbl385Mh7JP+P P6+Yuqiq6pq5k18QDmeHXkme+s0Lt/YsaSz08q+cLTdaF7y2f/+hZVajekSFnXhe3oxj1cL1SrVG 4EUhKMmaUs1Lmo81fImmW0M1GuD4ICVUCxqpWpyF/jOHw1VFPXJGaQbN4LUynh9L0W5sVLoLRzXT 3II+PgMzOCw2KCvzDuScYK7CEY6z+Ow+lXZywyOT6NKRR4TD3yaf+nZkG9PtUdTtKeF5XLqXKJ4m Cc90lOeCAmh4wSNR7sJuxbEDF3abZB3OYIZEF2vBbrCTR0k+HRKe/37aN6zt6am/8H8X3oMicly5 ZMDSn3Mo//UiXsqU7M5Mp90VaRfa89eINxrW5H+gfz+gj+nmG+f7Y4Hl+mXWq3wr8q8qWpdze84O n94a6E8N9eV6o4wr7W5PdLZ/duBl/8sBfpV/VeAW/y2Bf/P/W0CM6AoNef68QKUhGmjUNRrq/FMC PzW0B24yrPffaejy79HtNezzZ2p1WoPoFwNundvg8Ev+gM7AE+cCl+KWoytdZKVrt4u6DtN2yEoN KnpPpTeLZBXbOJhK0OWUaR45WkoUvGy3km7Sg3FsEI/T/84rnkoz3s+LC7WuL1NO4lQynVFnoxQO ecZ4wz3mOHpkI/nSkjanu/i3o1PYOLe5F5QJMXWFzzSfQR65Hj10ZFXkq5bIyTS/PnLS6qxsaVl1 fSSirns/2iMrZzLa4/go/3Mis9KP5kGGubcSVpY7rpislQbZWqlTycTKPlWMeiwzVOpcjNR48cMn 1ivSKfOaFftE3URDub8c7TjNMMXfENije9qvg5bYuSUTdDjGlaWDBfuWR8ePHyfzTgHjhV8S7Tan g1dDCx+QYTqRPbu33LvtksuiA//eumXjl0/j1dopJU9k3nzzLdNKiiaQ+Dtr70rBS8nPk++TP2Zv u+Om2dFpWdYxkxbc9HzHq8v+/kvDqiXl/sposGTZtce2bvjoakKYfxWh7w7gupJwXQVKtKV8qdCk 7dB2aru1kkgEGsSTugQardPp4TcKROgnxYpOlGRSipcK9GnMWjhjE+2gnbSb8tStGXl2dFZmN/dS nBV1XY1U4aO+ve7k6AKrUh0e3b2crSrycXIGf3dyJv/Kt99+P1l9Izgt9Sk/hp8MASgjq5TlkkeT LeQ4PNOzpmZPC/6L+WOLdry7wX15aJn7qtDtofvc93v2eAay3vC8maUXRYPdIbodYbHAHnOvo7fT PeIL4uui/qXoB2aak1c21lJkyFMiY6J5ij8fH+6c6Mq8s3k0ryGHeWep0RS9JIdAjjknnvMfOXxO ThEZBwqWmjDQUpjvU7It1T4ly4wPlyfq66drXuAlvUFXxOIp1qkcq1WOEkUooSi2jNyxIU2BNt8Q 8+p366lXT1K4uylGR1TvmRUl0Vacj3tKCSHjCnyLnORjJ5nlXORc6eSc7nEratJWXXU9eveq4RYW siLp3Em27Q+j46FpR5Axn1cDWCTtiImSHLIqNpzODEBeavDFrJzovLylebQlEmtBBG5xnNGcnpRV Lcw5w+iKZeh8nM3h9DHvFMWAX/XQivF420MHFQnb8uw2B9vxKsaXk/ZU5LfvHO1v5LKCyc8zzBI3 9cmWJ48tePi+1y5rWtk4j/xk/Od5Fc11l9WPM2fQP415aHvszheT/Xfddll2hVvT0JC4Y+HdjdlB OXt2/aTkb61lrnDVpAVloYq8dtUftqA/bEc/NUE2PDoA1tS3ytiMyoqsS7OodYG4QLfAscAVy/5G Esv5SYZJmeVZ9XyjoTGzPmu79KBWpzdiUAYPTkNCkGxsNjIzMkygc/o0no5ckmsuoFzI1E8KFD3p gE4WXXKq0xZfVTVjeKTqLzPNq86oux47A7FwDataSMuUZiVjmbhMt8yxzLUiW2iJQUuERXE0Ht53 AU0WtmfiOk4vczTaFuLelHglmRwZuKJXsUan3dRy6+ar2m8XDo+c3p48lfyP5Onkh1fEHqGFT83q 2P3MoccfZWt0Po69GteCG/5Nmd1sillxYzetsK5w3Oy6yb2T7tS/bn7d9Qfz+67PxM80n2V+Zv9W zJyQOcE+3Trd0eCK6VfopYnWCkeFi1snrDNtEW433eneZ93rGLAecmiNqo9mRRl/wWqLGscZWIk7 N6pykyVqOEx40KHNrJYMUFAUFJSDcd3oqYcxivBYJTslwkqJD0oMLGHwzTISoydL8tncnua0KWew 4NwyYzjy1XAEo/NXLSfRZ0e+ikSQp2Mi2lSNfmm/Gl8hMLcDtCQ6Iz82+Vfjklkrbt54ddMyO7FF vnr7s+RfiWP4lU/oF2Vz523bf+yRK1aW/OIVEiI8kUhwL/ObeWi7tlG/6VaKrTExpotZ096yC13j W622I7czl07kovqJ9qh7Olenn26vcz+o1dpUd8lgXqMYMySjCadC5ywwGkKEeYrJBJ57me/4NO6c 5qrzI1x1Ju0xaqRLn5ihBUeGvmJYIa7QrbCmvUVsifl85aMDtI4rc+JJ/UJX4duS39f0Lnwx+X3y lcQm4h6xltStb7tj81VLtzxyRYyEccc0Evd2aj7bsf+y65568sXHd+N4a3C8YfQVG2STfxoAM66T hozKB7UPGXaY9wl7dUe0Rwz9Ho3GRqbSS8UG3azcfYZD4iHPG7o39e/rTui/lb4xGLJN2XYFY4Rd MVqiJvtL9nfsnF31htxqlRudyOndit5ktDYZW43U6LKynf2QOytKxlmByeTIUZX7C9I8UpzmrmyV KyYMqD3spmlGtRdZrWjmPj7D6mLmzsuQwEdK7GknKsldlLsyd3cun2vyaRSDKYoGH42HEWbxFuZU X+HiHMaNXbG5lHxbtUvJNeEDg7CLRWt1X64eUTd+KyqBElamDApZR4M144lzohho1b1cBQBW4EWA 1TsZi/dpdZPVbI2vOgJM/iSLoS1q90YFrWRknRpZ90YFjQVqoyVVGJ7x+IH3inFs+1uF0YIwF5dx 82c+DpxPPRJkpk8ATvodcY3/7EDyr7etILb3holVHFG4TW21C8PcjQuurKoiZE7JQ4+/sO2P6AuR 5BvJYzdvnUquWb9xypTVzPfvx+DxLPo+u+OtGwAtGr3aoqtWtE1a2qmNawe1x7VfagWvtlW7UduD BQInSnjZ5NDTFTgOQ4hswbgpCqLE66iE64pNnNaXF+Xdmuq0y0dGr53qvo6HZvXIbB7dSq6PnLss 3p++LPKHCJ88+/10PvT9hyyup55IziZ7VB3tsFWZ4ZBCkuwcLx3SCJ1OwvEC2G0Gs96s/a868XZx kZmY79GaiC1EzXgy8dzL9kviNIwz467qdjich+nV4KM/7UVF1b3TPeOkaya7wLSkdR5uOac0Tp5l 3EWaM73tFpu67YUr1FkZX265m7jLd64tbJsw1hYwRSqs6eF0f//9r/b+xGQ6zQvB6CbuaxazNwCI u3AdhsmkAShAq7Wg5XGu9XbRoY9yUU3UFQ3U0XpNvasuoJe5koK52taCzoLdBU+Ke6U9+hfEF/Tx guMFQwVGKCgpaMKKlwo+LhALFE92tBrznWqlIPl4yZPjYKFKJ7GTiJLLS2aLJZyVnR0K63DyTOaQ 1aIsLG+1kJU4Ff20QTF5skI52Vi2Mpu0ZpNsLDsYxHsai2sJgLC61LXVjCvjUe8wioaVGqQqpLxw NKxMvCRaEn4n/HGYM4W94c4wB2E5XBpOhfmwO//PVecOK6NHYrw3DptHqs7gqsLD35lVLYypToMG Z18WJy+4bV8fYccQEsn02dk5xKmeRpwOO05KNMyCo6gmQ+eSGwi3dXDZjtKGJ65c+0R+TvJUTnj2 pOVjkqdyq8fXLC9OnuJD256eN3/+vEVX1u0aidFFj42pmrp1R5LShocXFjVsfnDkLM4ZXub4GM6Z A3YrLinTmblQs1zD9/MEZ8tcp6kzfWYWRGbiHItkNIj6jAzcECgJOUCR86IHgKSwEY+LWc3hz4t2 u3pctMN12kW/dBGXLiOkNzL7Ggx6NfwhpEdPTjNfdY6uJbTXqKWYm14fOaMWqJZiNqo6v5f4Lhy8 RTVSLrXzseSpvNmV09ZEcKkJW99reWiWl+Y+2z6haXMi6eVDjxycsnzzz9L/cZ+D+8RDOFYDnip2 KlM/Jac032R+Y+ffoJ8K1OoW3FoaMy/IXOCIuXbSXeIuzU59v/b39F+Ej7S/158STomfGsx7Nb+i vxZf1byuF9Zq7hQ3aziL6ocZTmYkGy/ZKiVPa1ZHFs0y+uCiY0D6MJXeHNlBahXujtoV5mW4N65w 8YQdpPCCFLXiwDAC4EEqLxS0/bA3zukaeeRvJJp864v7kt90EXnHddc98MB11+2g/ruI2JV848u/ JV/dnNr32L59PY/s28fW4xYArgLHa4Z9Sv5OgWiNZK6wTFgrcCXWZuNyY4eV12lNeq+e3qtP6Wm1 fpae6vvpOqVAknCWOSrq8kFr1pbi5YjXejZad1vpIutG6wHrcStvNUOIcOxQkEFpJ15oKXFbqgdI Npw7Qp6f1DMsCoErfTbAOa4sYzsBnn2gMe6c2xgvV98wlU1AA/jUmUULOCV1qi2kh83rlKvrWmOX X3rJpDklfGjn1XXlX4+p2Z/8G46xFOfUjGMspK8og6JFDGjCToszsMu6y7Yz/EChVrI12Kj1iGHA +Ibvk8C3hjN+scAw39BueCBjp3Wvf0Av1QSUvLrQVf6loS3WLbbb/bfmaStC9WJDxnTDLFODrxZv +nnhUIW+3MfuteV5kqgTLFqfyxDW+/3+gJTnV4pW62+03WS/oWBt4R32zYUP2R8oPOg/GDB0knud d7keLHy6MF4kOn0OxReIOpRsb9TrIB87iGOcxtcUvDdIg4orJxr0sKuT4sTY01RESotISREpyvWV YsQfh0fM0fikchRRjxNarSEK7siN/czkZzHmqPek0XWkvv1j0WgYRi/n5SIhInGQkH+8r8E3j8Sc S8kK5xmiI07Ke3x+mp9p0NN8zyKe8A35GU0e4mnIlKpHWvDPYnVWnqOWVVnsVcKv+vIL8SKY5n71 VUseyw/1efPSebdHzStZmLjaQMb7G/y7DNv9/+z/nV/0+fUGnvewcbyAJygYx85Sfc7iajJ62FDz /mBUfXuSgzsAkPT7E76VdJLThANiVt+m8KpkpgMlCVFmAE8W8ad5yobgULBpxzingu06FWzUqZRX RJ3sHuxUggX4wHZNTq965eSd8z0KxjCThzR5Uh46Onj1hYr6ORlh2a8iozGenX+YMUbfgKTvkavw 09KiHqHyUm8p2gxrtSkfH2iHLw4ZKvU2fSVLJvTsncrnvRmV6jGJIB5jQvrtCF4sMeCH89S3I2wP uPDlCPu/ItufS4nHet2SayuCNvu05LNXbPjwkw9/l5/8xrKoeWWpnB0iL8eav/rygxFSEpkzPz+7 RLbbLI2TFzzYdfSerWMn13odgVx79rLpjbff99u4+q7Rm/qUbhMexcj4tlIgg0wCugLTRON0Y8wk ue3g4hx2cFozbcRppTbi4rSSTtK7mMFN4Oxxxp1cK7JBvLf3Ez6BVxV2tAU7e5uPNwl9hrZEVwJQ QhZhnEAJJd/FhZzW+fZq227bARvXauu0dduO207bBLCZbbKt1MbjJerGnnObamO8AiPFJIwUA2BL DbJXLGfTb1jMX7lZcBlW/wuAoifVg40JPyzKEHvAYlOt6mRmY6+cLIHyceVBC10/mBHODk93Lf75 ZesrM7S33EI8fGgoOW9TJDvrw8Jxs+vHPkDeGXrvyeSdaJ+7Mc7M5UO4Tz6iOC+3XGXZIXBa0S1W 0SpLI220nKKSiQ3Vwmc4QGe32XRaMdMWstuBhUijQ90tHSSFq/5/2S21mvPbpIac1hDNxdvkhXvk jOEq83/bJVvSl6sQDtKXHjY7wfks3MyJx1Zcvf8y4vbOqZ56fSFx756/+Cf7d9CepGuofdKstSfJ IDucsn/HcPq3/7B0955FpqqvNe70T87ecP1i1znOTq/iLuE9lNWe/+UbcmlyciZMMcN33yVnm+v/ 22/inCIW0UrchvfDW8IbsANpO/9n2In0qLAApiMv4lfDNORbkM9HPg95DWLup5WpJ6Qc2IBl25Dm cDmqTCm25cX83ey3gPhdSlzkHvIR1XETudv5ewS9sF/0S/nSeukvmkHteO3zOjnjn/Xz9G+q2jnh 73iuXgICngzMUALz8fQ607wSy6g6IuvoGNivvaB2+tQ5dZdGaq5f0XZNce3Ka5bOmHfBr/hSYfjD j/7Mwqn+bygHghCGAuxjPFRAHdRDA1wKU+EymAFNMBvmYN8L4HJo/gXM4x4CE2HLcZDb1We2lSn9 3IN9pswypcbMPQBNSBTi3AwYRKKwktsGG5EoijcmiseWDbBEn85YZkb5rSAjdSJx0INPouYVJCa/ FUMma/7WhMmi4n6WKI2mE31mV1lTjY27EQjXzl0HAfByG5DnIl+CPAf5Ym4pHqSYnkqfyVzWif1V o3g1Z8eRerkazgFlyOs4D2SpYmsTxnQ/axP5hWU1Om4K51JFTJwBosg1nJQo88pHOAU1Vbg7+rQZ TL87EmZ72THuNk7CC76X60Qpp9d0jNNBCRIbybw+raGsu0bPzcNhzkOzeFFHArvVp8Jdl8CGsL96 LhuXr5e7Gt3HjryBy03YvYNHuPtVsftYK9jf5IRmHGN9BmPZYI2Wm4y1ce4etPg9am/dfaEJZVAT 4vKhFImiUTdiir0ZNnNdmOrCaerCqenCqelCLbrYDzm5O7HmTpQp4dZDB7cOupF2Y5rHJu0JtOCA msjLLxvg3JwLLWE+grYjWOrp0xqZZq6ENVMVc/XpjWXVx7jVMAuJovJr+pyuspVHuEJ1KEV9riwG 6Eho9Wg6Z3ouEOhgc3CMy+ZyVUvkqBaI13gxT8DEeYHQX9LjzDr0Pfp7Nr/sJ3Qq/9Uof3uU/ybN U4P0eB/2ovTT3zI+VJNNP8HGFtE/wm5MUXqEvgqlCPiQ9jMt6Ad0AKqRn8D8UuQDyMchP5zwvent p/19yFD3hxMGBxssfTURKRlNeIOjCWfWaMLqKKsJ0lfoy5CNTfwBeR7yl+kg+JG/hNyFfJCugTeR v0DLYRLyg6P8n+lR5tP0RXoIJiDvSxiZCvGExNiBhMjY8wlI55pKvEfp8/QZ8KDoc4mQB0v39YXy vKYj2B6hT+E9IMdrrdHRx0kz+QqFeuAE42ClTyQqWCPdiaOyd4B2027FVaEElWJlD1caLC0u3cPJ QblYrpD3yDVmeg8Gpd0UFyzdis8KkCl6D5KC1E3vTPAV8ZoRHBMbF4VOfPaoqVZ8dqgpwKf5fO1p NVVNb4NZSBTb2IC0EakT6Rbg8bke6WdIP0e6WS1Zg7QWaR2Gjw5EdCCiAxEdKqIDER2I6EBEh4ro UHtfi8QQrYhoRUQrIlpVRCsiWhHRiohWFcH0bUVEq4poQkQTIpoQ0aQimhDRhIgmRDSpiCZENCGi SUUoiFAQoSBCUREKIhREKIhQVISCCAURioooRUQpIkoRUaoiShFRiohSRJSqiFJElCKiVEXIiJAR ISNCVhEyImREyIiQVYSMCBkRsoowI8KMCDMizCrCjAgzIsyIMKsIszo/a5EYYggRQ4gYQsSQihhC xBAihhAxpCKGEDGEiCG6rpc7XvMaQo4j5DhCjquQ4wg5jpDjCDmuQo4j5DhCjo8OfY1qDIpuswFp I1InEsMOInYQsYOIHVSxg6p7rUVi2Dgi4oiIIyKuIuKIiCMijoi4iogjIo6IuIroQUQPInoQ0aMi ehDRg4geRPSoiB7VcdciMcT/3Sn/z1NDbyHNGtxc8b5aoPKN8IXKN8AJld8MvSr/OexR+c9gk8rX Q4XK10FI5dieyteAV0MS3gpTjQNDwCykRUgrkXYjHUB6CUlSU+8gfYyUouWKnzdJs6Td0gHpJUk4 IA1J1CTOEneLB8SXROGAOCRSuSaLGtQ4iqEF7lWfG/H5JRJuIvisVlPVNIr9RjHOluM3SqOKZVj+ spC8U0heKiQHCsm9haRGSy8lvBrpZKigqDhpVvShyd4TSBWh8GSMTPcc+sLpTYTGe/vJ0TQrUCLI v0DqRdqDtAmpAqkMqRgpiORVywpRvlnxjzZ5FCmM5EOSWRfgcOBByGrRKAPUQPb0vWYALesnnI+4 I4lwKbL+RHgWshcT4cXeGi05BGF2DCIv4Mw9g/xAwnsSq59Ls2cT3iPI9iXwKt1PWhLhMciuSITf 9tYYyHw8FDLovFE+F8fN+JyEdwGKzU54C5BFEuEQky7EjoJYW0Ca4STy4CgqL91TIOGdhMyf8FYy aQ2E2cQTEYpV9QQkxrk+VOjLAdLMEyXDO+y93/sFwv+KhkX3+EDu55G9E+wnCxSd92jxYyhc403U 6Jg87g+9ozzO+AvePcE7vQ9jWyR4yPugd4z3nuJ+DRbfjXrfqXaR8G6S++kzSqa301vqXVN80rva O93b5p3jbQliecJ7pfcoUxNipJk+c8jbhA1Ow1EEE95Lg/2qig3em7yKN+ytlI8y+8KEdLsVxUeZ BaAs3XsR2rcw2M98fH5FP7EohdJpqVu6QqqVJkkByS/lSjmSTWPVmDVGjV6j02g0oobXUA1obOzi H2EHaZtoZkzk2ZNX02bKnulzNlCioTAd4pkcXqTm1pLG+OASaFwsx8/MDfQT3eyFcSFQS+LWRmic VxufEGnsl1Jz4hWRxrjUdEVzLyH3xLA0Tu/oJzCvuZ+kWNFtWeyHn70Ebrs7awAIcd92dywGLscN 1a5q62RLZUPdjzxaR58X/LDBdWEyJ76jcW5zfH9OLF7GEqmcWGP8Fvaz0AFqoob6ugFqZCzWPMB3 UFP9HFbOd9TFUOykKobebEQxCDOGYppakJkYxpNaJoZzlJYLIRzlfIyhnM4AIVUupDOocjxhcr0n 5Pq6XllWZYIAJ1SZE0G4QAY9BrF1vaGQKhWQSTOTIs0BWVWsQG3I60WRYq8qQvBcpzbkJWpn8ZIf RIKjIuXnRcrVvjjyg4w3LWPLPydjy0eZyP/np702QvrGrt3wKvulbWugvh2pNb71huWueOdiWe7d sHb0J7ih1sVLljPe1h5fG2ivi28I1Mm9Y1/9kepXWfXYQF0vvFo/r7n3VaW9LjFWGVsfaKuL9VVX Nddc1Ned5/tqrvqRxqpYY82sr+qaH6muYdXVrK8a1lcN66taqVb7ql/B/L6puVcDtbEpV6Z5H83Q oQ+3ZvlitQ5zx2Tm0AOTfK4NWYd5IPsgIxKL6wO1cQMSqyquKa5hVbjOWJWR/Zx6tMq1YZIv6zDZ N1plxmJLoBbOmRaYEHsP2xj3zV3YzFwlrrT9+JytZh+12gX1K+rwD/NrVMLvhZKw+kc/a37ss3bt 2tXssTayGqAxXji3MT6evRWWJOyqtS6GZWPOlXGcWtar1db3pwaxMoJKkDWsO5aKEPYfTEWHty6J 9og9EmVXhTV9npyylcdwB9+IhPc4ui5Rot6X6bo+f5DdX9b0lZSnOd5PGU94fGXs1WIFQhkPprli KcZEd7C7uLuiJ9hT3FMhsn8D78FC7x62lSZK9nCwJrL6nCEwuSYG6X+sYn+PJ7Jz1I57WCISiUVW E9Ve/93Y5JzR1/xg/lGuNr/m3ISky1dDWjhdGVl7DrR2FKJWrlUhaof/CQduxhoKZW5kc3RyZWFt CmVuZG9iagoyMyAwIG9iagoxMDQwNwplbmRvYmoKMjQgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNj cmlwdG9yIC9Bc2NlbnQgOTA1IC9DYXBIZWlnaHQgNzIyIC9EZXNjZW50IC0yMTIgL0ZsYWdzCjMy IC9Gb250QkJveCBbIC02MjggLTM3NyAyMDM0IDEwMTEgXSAvRm9udE5hbWUgL0JKSFJERytBcmlh bC1Cb2xkTVQKL0l0YWxpY0FuZ2xlIDAgL1N0ZW1WIDAgL0xlYWRpbmcgMzMgL01heFdpZHRoIDIw MDAgL1hIZWlnaHQgNTI1IC9Gb250RmlsZTIKMjIgMCBSID4+CmVuZG9iagoyNSAwIG9iagpbIDI3 OCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUw IDc1MCA3NTAKNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgMzMzIDc1MCA3NTAg NzUwIDc1MCA3NTAgNzUwIDc1MAo3MjIgNzUwIDcyMiA3NTAgNjExIDc1MCA3NTAgNzUwIDc1MCA3 NTAgNjExIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwCjY2NyA2MTEgNzUwIDc1MCA3NTAgNzUwIDc1 MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNTU2IDYxMSA1NTYKNjExIDU1NiA3NTAgNzUw IDc1MCAyNzggMjc4IDc1MCA3NTAgODg5IDYxMSA2MTEgNzUwIDc1MCAzODkgNTU2IDMzMwo2MTEg XQplbmRvYmoKMTAgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNl Rm9udCAvQkpIUkRHK0FyaWFsLUJvbGRNVCAvRm9udERlc2NyaXB0b3IKMjQgMCBSIC9XaWR0aHMg MjUgMCBSIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDExNyAvRW5jb2RpbmcgL01hY1JvbWFuRW5j b2RpbmcKPj4KZW5kb2JqCjI2IDAgb2JqCjw8IC9MZW5ndGggMjcgMCBSIC9MZW5ndGgxIDM0MjYw IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp42rS9CXwURfo/XFV99/TM9NxnJjOZzOSY cOUgBKJp5BIh3CBBIkFuEEkAERQ0KJeIiu56X3jjgQQIGFBXdFldDxbWaz3WY3fxXKOsy7KukJn/ U9UzIejv9777/7yfdybTXX1X1XN9n6ee6iCMENJQK+KQMWvxzOb7Js3vB3veRAg7Z61YHr29+a0V UP4MIbHv3OZ5i6c+/I/BCMk6QsIf5126au7qe274I0LWYwgtOD1/zszZp99/O4bQFXA+6j8fdjgX a79HaKUftgvnL16+snJFMAzbtXBP/6VLZs0cVd8b7rVqEhy/afHMlc3877TbYBvuh6KXzVw856Ng 03KEruTpdvOSZculu+RzYLsQtp9pXjqneUL60New/Q5Cagb2YUTbQ1uEsIj+Xz84uyYcQrwgIklW VAvSrDY7QjpyIKfL7fH6/IFgKJwXyY/GClC8MIGSRag4e2FJaaqsV+8+ffuVV1RW9a8eUDNwUO05 59YZg89D/398hqChw/7vrhAOoAD8gsLjKMAnEdAh8yX8vqLr9ILMV/Q4XZNv4OSO7A+h7WgHXoB2 oBfRy/g4XLUT7Uft6PfIh4aie9Fq9Gu0EYloGuy5Hk2ArwD7f40DmXbUBz0IvPQgOgznXoiuRgeQ F/szX6Nr0HrubbhqPbKiAjQYjUNL0I14dOZyNB19yl+HqtFodBlqxq2ZqZmbMrdmHkGPov3c7zNd yIKCaBZ8D2e+E97P/Bn1gituQ3ehT/Gtyl5kwFNa4cz70FJ0N9fI48y8zE9Qgxi6AurAo3p0GB8k Kbj7HPQl9uPV3BC4y8OZtswhOCuMGtF8dDc6gKvwCBITpmfqM4eRF56xEu56F9qN9sG3A72APsSa cDzzSOY4CqAyNBLa047+gA9y6a616Tra0dBLJagGjixBv0GvoqM4jl8iSwRNKBcM4crMO8iN+qHJ UNvH4cov8L/J1fC9hnuFH545D9mgX26hvY1+h/6Cg7gPHounkBKyhNzPLUUyPLEffGejBdDfd8Ld P8EpvI9o5Aj3MP8Uf0rMS3+WsQFFkugedB96CVuhpVG8DF+L38N/I0PIDHIP+Sv3a/4J/i1pJrT6 YrQY3YieQv/GTjwAj8cX4fl4Nd6Ib8F34cP4KP6KDCaTyCLyPTefa+Fe4M+D70R+GX+dsEG4Qfwq PTV9KP3H9L8z5ZkNaDzww1qo/W3ofmjZfnQEfQDfT9FfsYAt2AbfKI7hyfgq+F6Nb8QP4e34CdwO TzmK/4q/xj/gf+FTBMFXJCESIwXwjZOl5Arya3IvOQLfo+Rb8h/OxxVwKa6Kq+UauCVQq43cVvju 5f7CB/kjfAb6uVy4XXhA2C48JbwsHBc16VoZyW+efrirtOuTNEpvSt+e3p1uz/wFeYCGQeiFfFQL tZ8J34VA79uB43ait7EGfRfEpfhcPBp6ZgZeiFvwSujJdfhu/Cir+zP4eeilP+Hvoc5WEmZ17k2q yHlkLHwvJnNIC9lKbiXt5D3yEydxFs7OebhSbgTXyM3hlnOruNu5Nu5N7mPur9xJ7jR8M7zK5/MF fJJP8SP4Gfzl/P38l/yXwnThDeFzURUXixvEDvEfUn/pXGmcNF5qlG6W9knvyE3Anb9Fe9GzZ2m1 z7i13DBuL7qJVPAB8gfyB+DnGWg2V0+AU8l2vImswe2kUFgpDiKD8Bh0nE9CX79CHiAnySCuHo/C E9FC0s+8m+jmn4RVLf9b1Mk/D237A9x5pajhq8n3ooZ2Y0Rq4Jm/4/ryKe4N9CH3KZb4B9FHvIp9 uJM8zo0DLniBP1eYimLcvegZrgWvQXsJ6DH1lLwF+HgMfhL0wiRcjn/kMogjY4CLqrm/oevQIvI+ 6gQ53oTuwLP5eegmVIFXoy/RYyAVJcJlYqnowa+RBfxm4sLtiPBPQOtqcCHmBDdahxu5u8XvyQfo cnSEV9En3NNQ+yPkGa6ePy5MwPNBAtagDaglsxatEqbyb+F5iMNTUIL/DLTbaq6cj8H6GtAq00Gn 7QPpPgB6YDBXD3v8wDmjgS8mg4a4G753gp7ggYMWgIxfCFrsD6hdnEQ60DzBhkHrgG15Iz0BTcs8 hu7KzEOXZW5FvUAfbMyshjtuR5+jm9F2vD59FWpGEZCcT/BoYTg5IgzP9CKbyQdkIrn9bPpCbyew H30D32fQcHSu8BzazP8JTUR1mS2Zd4G7i0HD3oUuQRegY9DK7+AJ53MHUUV6DNmVGc41Q3s/ReMz j2fysYrmZy5FY9Hz6FFJQDOllDFk8qTBRt2559QOGlgzoLqqsqK8X98+vXuVpUpLiouSicJ4QSya H8kLh4IBv8/rcbucDt1us2oWVZElUeA5glHZsPjwpmhbsqmNT8bPP78X3Y7PhB0ze+xoaovCruFn n9MWbWKnRc8+04Az5/7sTMM80+g+E+vRWlTbqyw6LB5tOzw0Hu3A08ZPhfKNQ+MN0bZOVq5n5a2s bIVyLAYXRIf55w+NtuGm6LC24Svmbx7WNBRut8uiDokPmaP2KkO7VAsULVBq88Wbd2HfuZgViG/Y wF0EyVaoVFswPnRYWyA+lNagjUsMmzm7bdz4qcOGhmKxhl5lbXjIrPglbSh+Xps9xU5BQ9hj2sQh bRJ7THQBbQ26Ibqr7ODmLR06uqQppc2Oz545fWobN7OBPsORgucObfNdecx/ZhNu7hwydWPPoyFu 8zD/gijd3Lx5Y7Rt2/ipPY/G6LKhAe4B15LE8KbNw+HRW6ATR02MwtPI+oapbXg9PDJKW0JbZbZv TnwY3dO0MNqmxM+Lz9+8sAlIE9zchiasiu0OBo39mc9QcFh086Sp8VhbXSjeMHNoeJcbbZ6wak/A iAbOPtKrbJfuMDt2l82eLWjWnoU53cdYiZ1OS6MmdPcspjWKjwSGaIvOikJNpsahTQPoYs4AtHnW ADgNPg0YrmqbDRRZ0KYMadqsD6T76fVtQkKPRzf/CwEHxDu/PXvPzOweMaH/C9Ei5ZNuVoPjuXJb KtVWWkpZRBoCNIU6nsu2q3qVregg8XizHoUVdB8aB307s2FgH+j+WIwS+IYOA10CG22t46ea21F0 SWg3MvqkGtpIEz1yMHfEM5keac0d6b68KQ6c3M4QradNTnb/2XWva9j8gW3Y+/9weI55fNTE+Kjx 06ZGh21uyvbtqElnbZnHB3Qfy5baXEOmciGSLZEQx44CU07vPpluTNXa+AT8iYypZ3dIMnAl24Oj w9v0pvPNZYMai/2XF3VkjtOr2OrMZdlqtg1Mnb096Kzts6qnbeagwmAGR02atnmzetYxYDXzgSOz K+B4NGlqLDqkDU0GyUzAX0fm4AD6awi1GdBlQ+gJwH/mruzmWSeGsuUG+FDu7FU2HBTd5s3D49Hh m5s2z+zItF4Sj+rxzfvJy+Tlzc3DmnKM05E5cEOobfiWBuir+XggCAVB51ExHjJpak8CMa5v6MXc G8wAqoAA8UrovHaCj4lSB7nLcCGBP8YhVeKPYRSQReEY4Z4Hw68ADOyN/Cn9ZG1X7Rj9RG19Vy2q g7J+Ghb9+sYcMUcCFhjM3ukod/C0IaBTKMofpC7V6vR40iS8DQ7UOYZaZMdId0qyrnfgij3oAZsM a8MhPWC7GHE6F+U47mnHfVvooxq7TnbqJzvhOXXwCNyIk8RRWd2/ukKU4OvRMf70tj/UT3t+7aqi c+IpnEqPfx7/iG3ffdh16mjD5tufeyGdn46e9fw5hlZMinWiqDpGToXWQH2Aw7BuRw9wF9uAb9p1 nUyGwo/tdjsrHGu3WlnhW8OuqmSy3ZZvI7anndk6puDzs3q64shRWZSEb4UXLKJOutbiVKrgnKIr 1z4/rf5Iejz+DP/l+f23b5721qmuD79L/5CWmev5ZPoTfB34KCoas1cFwjwlduBxRhJztYRgFdci lXCwgcQB0sCxgN+WABrZBkTcZnnwTqjLicYTx/TOWh0IQ5d6p97ViR3Omn59K6oqPG5RKurfv3rf 4XEXltf05w4fbrkhWR+YeRE8dzDuIAvJYuCFMiPQTJo5Uo/r4ZFxRIJCM5wQ4Jtv9KfG6Mca9S9Q n/rOfn1RCzSzKuYZTEpwx969put8ABYbof4cShh+Qqtba1ZyJ+K3wfFtPKvnycZG6KtOs1oHDh8+ DPyIJme+5B3CQaBRHp68i1DeNdRghBfcEavVp3RkvmL0oAUjQAmiOJBG9yCvpsFSo/tQHyDGYVgc hvvTJ4R2ib+80wm4k0jv9AVQlhW+MwIWi0hvqdM9SNc0uqT7um955p7tYjSgh4FVdpOo5Tdg3rzw c8LPnvnMuIQXN5JNlk3212yCIln8ZJhrtOeCwJDQJNd0z/TAhNAiaZFllutSz6JAU2gVuUJcYbnS vlG8U7pdf83/IXlPfM/ykT3YXd1lihGLV/ZVMFJ0hShb8x3LEGgJwwZ7o+DqErQ18uoNJiMCDza2 pDqz1cSNLeDKDqAfDL+GBpfu7F9R7vU6gSHFeEFR0qV7K8r7O/RkvEASJy96e9uK3cvPW/j2g++s umX/E6tXP/HE1asvaCRvYx6f8/SMPenMh+l0+rc77nwW35e+4/vj4B8u/G7BBkr3T4GAp4B2Ktpp RDnD6qhcxF9DbiZ3yfzTPFaQKBBOEbBG8Osqq71K24Qwlc2OzGdM4qDwjeFgBA0zgtoYQaGXjQAl V44mjD5BTTCs9koh1xN9BRwFn5oIAcsBXIvXI5NZW1LQLynzAxumzqrz1WBHDe0f1JiKxR2iKFWB XFSQU+2D3550x1/7LOevOnd1/jMjXp9B21YLWF2CtkXwq1leUhy61e9yiZOtlJUcDlb4zlB0HUoR txChLOqjJ0Qi9GgkbIMjEY3WPNJBnjM0ovp80XzdQUg0H+SzzzuH6fIw6tNJa1pHl4fKKfOS7gdq TidhDzQUu4PknvOZYXG6yOSIm+6j994Nt6aiYrGQyT6qsVgv/k9Po/xMn0efxh5m9B8kDBKfE14U n5NelV8LSyO1Bm2SbZE223al80rX9c7nnZ8HPw8dD2ovWp51kZAe1vP0iC7+JnMcScD8MqwVoFYw ouqyKL4eDrrD4aAcDnKYyMEwZ43oHeSRPWMd2NGB/XtpCxDrDjsmmrrM9zb0NuV1/BxZi6JIxwMM zbG3jswgS8g1hCcHSCHKxzfvMpn9BDB7qlY/0cmMUF1nV+Mxh5NSFhYbbb1TtjX6IVP3oZwEDECN uHFpQ0PCE0tWA8X796+qBNZnahHkAhQkGBVR4qXT1cSXePju77ffddW19+L9rh//+PbJ8x9/+aHp kR07BtfOOnj1oc/nLvrVvZtdRz74ZsfUJ59/ZNPMfkz/Tcl8wXuBV1K4IUs6S8BvUAr4wwhTZk1p sIFL4qrVrtkjqlriiYT5SElYKLHGrZo/AEYpqlP2j0pJSkd6erIP1T+H+9AvctbU1YFi7wQKdr6i v+Ks0Q+lyumPUrBYsHqtw6wbrPwwx4WOFSFugvdSfaF7tvdy6yr3Butm9/WhR62qEOUY51g0q42X MDwXU8IY0IDnMA1ZWXFVu6Z5eP8B8ggKkPlGEdRSgGpanctmRJdESdRPeTnaKi1LMu2UxCipJwnU +MSz9Ehyay9/Bx6wO/A2PoAHIAQNt5zRV2Ud+NZdOZXF6Ei11olUo6m5uo5R9gTbRSlqEhSEFUgI 8opbGlzVXqq1GOmk6u5ijoqUjBJdonhBckp7/m2Lrtn50JqK0W6nZVnHhoULtrjbY988s/L1RXNn X7s1/dV7L2Xwdf67NrZdu/pB9/1k5ZpZ165bF9376rzds2fc2zvywk0H0//6guIlFAQ9oAsHQMdZ cdLo75yqzdfu1p7QXtOE0dxo6695zgl8jjSRkwTVwklIA4F/nePdHMdzVkQ0Ky9xz5HnkAzga5uh Ip6HU9DrKt9B5j4rCKqRl1+p5rShahonVviOWSm1A1cbVskoiFdKrbEqaaudUIayWN2ViOgkSjhC L6bXQOHYPnoN2WvrwFtYX38LGpApwxNUxdTqX+hMFwKQO1nrqKHdXFOzsXeKB7Gx2+3Q4YCz9yNr 5pPdzhpQO+8YlooarqBXDcfn5dXSWzQAOeAcw60ZlhqtdVyNZiRrtIIwrHvVMI3bAHCwClc4Kjxx B+fA5PaudeS+X73ySnu6Cs94lNt3+oJH0w+CYN/WtQj6tx7svwdkJw+V4rFZ6cm343w8A3M4VBwx rNhqBaUXEgoibqsawSihU3XIsIAe8enUdPiY7PgYFvBlDffhdw7rv2OcBWzV2KkfaqSi0mtRAA+V DM/QwNDoNOek6CJutjRbXuicHV0uXx5eL28Ivye/43VIUdqPRWbPipPjTHBoKcYOSPRAUTQejdED DlrLcVYC9Qzht2dQ4wbCo+TqDChzgOFEexPLdCY1gEB1oDW04viz1LbpW8tUKi4RXGN463wzfEt8 1/h4n5ce83np43wdpHBPyjT3QM/ObtnJSg6TGGgjk5cBAygRqNQ0YAmwKDXyokSFxElVXbwAOfRq KjLYfUaiRO7UHn/ZyEVTBk++hAx+fl571xVH1/0lfey+67/a8XFX9dibxix95KGrrnySn2hb2Le+ 77nf/XlWU/rfb23uvBqPwqvxEy9tf/n0x41PNnTcf+fOnUwnzgS58QqPIytqNmyHrJiHPyLzCsgE Vf59CeYVzbqM4wjtlLFM3XMkaJeXKX9HY4H6MwhXB6sl+BoAIgFbVnmAC9LYUlt/onOMfpJadh26 gFqCGkeNqfZxC8OnIuJEKd7f6ayeye3dku4c1d++n7v2n9fzP+3YclvamT7V8dEO/A1+9V7qCU0E HgwAD/pQHPUlyOTCdg2FIr2prIFNJ5N793bGIqJQHHFaI4pG2Y0iyn0Mkabs1H+gjGjPGWFaYAft fi7nXHC5s7huBuYKPRo93cPu6GEM7DmDPM+GtdR6d9bUdKPbZ1lFxFxFRLMixxjKted0Qfb5dB8U ThsFdCd9LL3Sw8CJh7X0TPtyD4Nn4T7ZCuR+VIaqq7y4xDvSOzL5hfZ1X0Hpi9egNXg1v1xusSzV Lrde6bsBbcZb+A3yWss6bYP1Rt+bjldczgKQld3haJCuotE+dNUrmqQCFCmJaijiRxpUY1tv3KOn l72oYKWDzDP01DK7EQXpAS/SrtuJvQPfsq/cv6wNHCM4vrtwmacbHnsMD/Fs7dcNj0+A9J9g8pI1 Nc6aRtY4qvyyMsPAQuPSFtTS0ICTyarKLDTI2RQEe1zuHvLSU3jwwuZLv3jx4DeLFm+8MX3ygw/S J2+5ZMOi+euvnztv08CRWyeu3b7j2mse50Ildy7c9uGn2+beUVJ2aNPzGYTxwZtfwpPmr7tuxqyN 605n6reOfaz12ie35/wiypMR0IvPZOltyfeD+nP4OzInGUH9FIhSCvopXC6mFPU7GEkdDDU7/I6y lKU4Qj3XsTbOZnOjcRgzQGLVAaFiPhK2FlBARnvlUKqxnKmRctYxQG3KfjrVox//rhuV9qjEN4yZ acEoZWDHwbj4f3nq2c/62aP69HyQUTkwONprxC/yXhify13qXRycF78yuCayJXhD5G7vE8Hng994 v4iejLrO8d7v3eHlBpbMFknRAcCicWAmfywqRosjY20zwFu3hekj8dvjTKXcTiuRfwDXIAvoZIef 6WNojl/3E//WMqqp26midnTzksNwEMfW1Ks9cQtlJcpIoHezxiXLRKgRvOOGLFQ5l1RVFlF9C2sE zOR0MPcriRnLeBgvNe/wrp45cc24/rj/c4v3ncbSKzd3XnXlPx56+kPyxqPLV+5+YvWaB/FE/crL Rl/zfrPmn7IIy+9/ivW7039L/5D+Mr3nmRe5ynv2Hbp3C1W6GDWjv/KD+N/S8VhDu5lrBfdLEDmZ CM+RabCTI9N2E0M8gMcBFBlneNBT+KkoT4IyX8tcssulC6exZtZS7YoCfYL1nfDxBynwzAIyBNoV ezD2NHNvnE5zhKzdju/ekz6UfmmPGQs4qw6t5GYeLD0GbERoHTDioQ6CgWkdBLMO4lNRjqsVUVCO CljI1uGLRqhBbX0nrcT/UAeMq+gfP+h0FYdPZ7g3yNr0zD24DtfuSc9lcS60JD1eeld4F41AF6J/ GxfyMT3qjcUSVdYK2zDbSP/Q2PDC4SNHTJlku7LE5k2U4KRSmpcsqQr2rxmSmOJvyLsoNqVkysiG KXP8cxJzS1YEr8xbWrjevy64Je+G2MZkwKaPsyFuIjVlqr2or2WchVgk73PkfDQEjSLPtQ8ZyKn5 cPTZgTiaak6R1AFcj4rIc/v6nF9ol7DUQa4z7Pq4c1Ghc5u9sK/eDIDgAH4Chcj97XUDSgvhfAXF yf2GEq3CVYGpF24xbV99ZxfwICiyE13HACp3gi/X2QgSdQy6p67xGLBj1g5SpydB2Y8qMxYA8FVX cCbfVfd3VlWSwngBTzxuJ18RLayuEEU+XlBYWARnVztRrJynASyJXl+UxO4sPwPn2gh//eAHxzds X/DwD0svvL+mYM/WSEle1ZSl659K7zj8TXrNu+/iX/0Li/iSqXsrfkw/+Y9P0tenfxwyafaV+CVs /IhvWDrzzX3vD5vstqa9104asLrl/I0zjZaFxsOjLpr//toHcN22ixrv6Zq5xR4qOmcctt78OC54 5qP0vG/+lb7/ibarF3x4zdLPb3vhoxMfYzuOvvHajjfSn/zl9dKiAB59/Z1D1r0xd9Ptg7f+Aeif 6UJIaADcLiEbnrcP2+w6A8g/tGcLPzLFSaglbmBGlBlEgS376H31efJ8pUnfxG3VXxNeEQ/qx3WL LDTgKWScPt/Spv9T+6f1nzaF13grb+MsqiLwPPhVsihJGpRlUZMwQvAYw86iGlFJc8MhwnF0n4fu 46K85oarlIggyBGREztIs6EgWfvaIJiQA9gCBsJiOLUomiNxE8bxR/hPeW4rj/kOjA3LOO2g9KnG bdWwRrd1u3REItdIrRKRfmV/708sLtgSgB/8+YE7ggEdtJa/rjYI3FJL44WdG4XeqRQg/429/WzN lDF4BRv1Q4dshw5tFMw1aLdRbZaJo9oi46dNbeftnCwdAKcfZX6kSq8BL21pNGMtcVyB41yMc8W4 ZJEocaTij2Tqx0913fPgB/gfdw0vCFcIB34ajp9PDyXT8O37r7jxBiqrHLodsOLXQCsH8wJc+xEP VBlBo3A8Pzw+JT43vkxZp4gLgpcLzcoyy3XCdRaxyKtw/qLSiDdPUVzOSGlpSQkK50Wg5/IjEQeS /UlRo6BLBI/KqKCGSnRSIyWKtO9Fmd5dZNQW3ZQTxEmJpBamV2gqPU+jnOGhZ2nBsrxIlGnIaDZi dZJZPlbIRqt+amdkNguiGb9SWcyqMTVour87HtXIwuh0o77zRDZElY1lwA+MSS04aDV9HDXUBzZd YBqvqnDEevi4NhLHsXIzkJGMg7tVXs2kE8q3k+T2N5bNnbf+5gtbX9qS/hU+Z+2AC0YNv/b+9Ed4 8cXJIdMGTrptS3qHcKBh/5yLH6soer513q6mftwEh3du/cglJae2SdqARcMnrOpHdfnczJfCCuFt oMrbe2eRhXkEm/CWte8rYwYtRVG5dRZo/eV5rWhd3lZ0t/AU96h1P9dufdV6FB3L+2eew+bMc+Tl caVisaM0HM0fYZ3ivtAzJTBfWJR3lfMG593cXba7w9vxI2S7412bC7lRUHfrQR5k85PdxTUMrvQq rtHtCPMhV0TjQhFe0ZP2C1AyCrgimO9LRmUsa7Q2ciAyazrTlClQldDRsMx6SQ7WmUABGh8FB2kp 9jGVBx3nLKwAfSclqWGmGpGaZr795XPSv/28M/2ne3biIS//GZcNerHi5V898bfpi7/Y8PBfCen3 /amX8GVvfY4n7/rsjV7bbn0o/f0tz6W/3vy8aX/uB/0zDXjaDr33udEnmo+HyCZ/OvSIHclQaQXn syCRwthKUVmc28/2MOZjaimYn6f/18z37xzz/ZhjvsjPmS9bbjzDdP36Dlll9OdCkizKgszLvBjw B/1EtKggCSqYDK/b6/JyYojzxbDTBgu/HI5hr+qIIejHVKoUPmtxI+VRn9fnBTeTAIcmYuXZWBv4 oLH78X+emnZ1w/JlY6685fD69C5cc8uj/YbV33HpmB3pN4UDnrzRl6SPHHo8nX5iZvmO/v2Gff3Y F/8ujUCrHwLdQHPTLOg2wyMKEVmWJMTxtCNVJWJBskT5I093VkqTuAuiatRK1KCVV/4/CKw26CKT hbKdVs9EtrH+xLHUzyW1X19otSeW/T3EF56+n0udfpdbJxzYka57Om3dQeUIAD2/HtqgoBuNFGvD zQABcs2AJtwbJVELIUHLf1Fvw2KOe2TFMP2L6quDpveofo/6HzNdZYpYf1737dzHpz8nbV3jaL0H 7uiay7DcYpD//SD/CewygiF3yEOaivDFsgs7ucJCFHP6SAJFCBPQKK0FxqIvYuPAe1MwThYlCgHZ QcuKmliQ6hhrC7PB2WjVh4wGzAaH6PVkaWsRLspLRlWsMgdGDSRnXdQtzvV648lsi6D6NOTR7RbX sm0zblhD4Q+w9FA+HgoHw4EwJ2pJPeFJ5iflBJ+MJ/zWvBjy2l0xONntikqwVSAkYjhsAd52O2AR UWIxVMjBArFgCngntXptKveh3A74qirhOEuDeH1SbwIqhI5RUlgF/O/gRpPFN6ePbns//UD7Hjzu owcwvjW5M3bJviXrX74iNmAjJrdcffxcUvc07vps6bL9+OL338PL2ud1/Lpvc2v9+HVjNz1wKP1j 68xq7AB6PAI6pYDJwvs0RnfQCLo8lTwXUdRt6lGVqAIhFhlkOCpJIo0fMqsH/U1DV1BiQTKROtx+ Zv0ws36NrVZsJZZodlTmoKHCTf8LBpSzDNhD53iz8hO14qh1nLXJ2mzlBzX4U40t3cMxpg4y6Ziq ZcFIkCfwx5kiwmDogCnhF4flIy+Tn15+uUsUDnQ9Rqb9NJzs6apnfPkiLNZCP3Dozb1UfggdENoz 4Bw2MLSnotJc9+prrotLzHU8Ya7zIubaHzQHkkqtemVU2CrsFIBbAbTdjLahNsT3QQYahz5Fx5Hg jMLOrYgTzMgr7Qd/tn++zfXPd7n+OWnoJuJj/fMQ/15DDwU8ZPrU3a0A6xobWpbWdjXmOoWGZKk4 VjhefJlCJGhjdeZLbibDRE8Y+hwyT1xOLhc3WTc5RIVJXLuFClwHDhoWPmJXlKSqykkLdcppzViB VshiaghWME033WOw4KKlMerCUZfhGudqcvEunERs6MFUi9/kyPrnrF4Z5dyXa0mn3thitoiiSBDC zlQdcw3NGH3/KmgICzUmB+2UmmeNXFj8csNL1750GG/zb189ZNnV3A+nAx2vL/yE0hKwnzCB8jRO GxGuoLpGVgYWqVVif3WEeiG3gfsTJ61QP+A+AENE9QQzj8XCFn6z8CT/jSyoPK7i3+OJQtlaccYq uShdAHTYo9U46d49sC1n1zxd57H1wT1OL93/iXFOAJ6ZSJwjK4HAOSC8iqrIqsDxfFRQ3YIAWyBQ IqB3UVWRQHhMJIuMZJUjFvBnO8hAw95XwNuENuGg8JnACxfIdJ+lr4SjgMbbJA6cvQ2GZon+3xqk H84YpO0Uzmd5qLOrsQU8wJZOqpNqqQDV1tIf6EEK6OkIGKz9LKYvyXqtXAvw3Q/wPQTwnWLr9wc0 mAElunF8j+ag/XXc8EFB1G2OSlm36ZUKLak6yAYyn9vA0BP70Pi/QymAfisL1PD0VxCqAeH4ZJ8X it4akXarxVkjF7hreMNdQ7t5bwKKnprUmU8DvTFuWdqYQtSBoNyPYxj+JMftL5P3sdR1F7k2g7pO HgcFUEL+1PXM6TvJF9+keZTlG74U+EZAiw0NE9CCApKj1Dkijxt2iXD/NQA4+QvQJP4CNH3RaFp+ U0hjHqjgWyCo/9zB6nInQqId6qKTY2aQbD+SQQ8wPSnbrA5m40BBQEGgQ8bFtKQ56WHBrnEKwkRW LDYkK0S1iEx+9azw/rSPCa+O6MBQti0/5tpyuv2s5AcaJq47eFA/evQgDZSkUibFUC4ZIl9iOklk S44tebYU2FKmHBenJcLABZhNapNtZ7xjlS2lnPMs0y7LZwN/AtaiqrPSzhaCxiFsA2gmA0ajDad3 YwV2k+fIFOSEvppiWLMoRswRgN0W0aBz6kQf4HdmHGrNxjSe4b+UyZIh4xpE7LKbhGR+hbZB+z10 pTZSG2nnSviEtcw2lbuIX2FdadtolS1EkGus/W1jyShuqGTI9dbzbOqd5C7udul2eTv3uCQ6id1m 6ysQkHgia1ZrX0GGoqxNsE/ABrjjMp0QArrfZtMpnZqcrU7iPEC2Iyvut1uIyh24n6Fqiho1tGss 2HIAGmnDFjhCOsCJV+zAivZmHesdZMqzUaFJaBXAnJDtexzUQAZoDk9jrR84jfnpUA52bxxrBK8d ukHv8Q2CL0+FfeMa5rzDCvTvGSf9BaRlTgEPvodI5j3mo49q0+BYMdMA1syPu2wq3Zsd7HtnX6zG VhZjA377qmts5dWsuLcX7M0O6qUawMsHOaXxTRAA7PX1r8YxMNM4jh134kJ8UV9voArPwMJz6Sk7 01OFA6d+uOX8cfdwp38azr9xqor/7FSUycq9oO/zKRbGa3Y5LTm8Ifs1LxsX+cqI0ZJMwBZLMihd mUgcJys8IYok81xUFIWc1RW6oY1gyhKAESPIGLoxasFRyzhLk6XZ0moRLDLgagZurPCw/w5g87/E N90Au4dJTzWmGKJpOXEWomFxuJqajTyjUU7dcpnPngUtK0dhgZhKpeASqNAuG8NroPkH9w2vkY1y s1heI4GOpW7wvgAUy80i3RtnRcMSr5Fsbvi56PaJfS4o5pnFPCh6aPHHXd1KF/cQHiBiBaY4Czvu fZUjB149nQaSreWvAXK1nmo1fdhZgP8/Ft5BNhRCrxvjgnbs1t3ukC8U4nmdd1t8lhD/hG+f7RUb 5/P5QySaZzjGusb6jOBUYapyoT7ZMcM1zTfDPyV4YegG311ED0Q4zhmxKJ5klMZAAW1QMkg59CTR kSra+RLFH7T/pdwIh0QJE2PqJ9iah/PsSUpFsYf6CIRznr/p+jfm9Hf9WZlR4P67dBrfpG4qQ+/V OqooR45KAu4/moU34f5v4OFPtaf3vXgkfWD773Henz7CoVVf3/KH9J/I63gxvu/l9KN//jS9be/v 8bTfpP+dPoIrcWgPtvwq/bnp9/NdwN9W5Ee7jbI5jkVuMkof5b5Iv8jNW7QIaBnk85t+nzMps1iT rGf1b9YPkoPRIIa/oN/6f+sO/tKbDfQ0Ztn4U0ujGYHqdghN9A1ODXPiIwT6JhZzQLnbfyclt9Zf emvDd+nX0pvwVc/f3zi637r09cIBm3POvsXPpbu6nubwlmumX+exmrzzIMj5DugHPyrAp42Y02LD zv7haflz5cX5vMLSuWS2lNiykEJa2hKWXEULWq5gyRWcHZm/7nEGK2F9fE9BUaWDbucVVerZtT27 huPv78lLmsfhfD27pseNkVBI2C4IXxCdaJkeXhxeqqy0rbKvVzfZ77A+Ye+wf2X70q6DzYs67G6H w+6wa4ozRGJBryo6aT6W4FcUry8YiPioOmHpgz4fihUwivr9drtNjiRt94q5xEUxRyzmeBUwF0xk AcfGaGFzYWshV1jg/2+pLP6vOilOIeLPnP6sCASO+Wmwh5qNLLVTcKy2pg/LmzLTpgTAipQBUj0/ KOuxGKps2Gvs+kCHcyBVHbiF2Q0baKBgoMYBOsoJP5sRrtEB8OkF+fDrVjoNPUKXPq/PFed6E2Co OGMuNn4ae5BsPvTmla+/XV88eXTmxMuTL7uwV2zUX/CD628fc8fD6b7CgbG/X3Xve3mJwjGXp1tw v3VbBlikrsu5iupVI+azPMTpmS/5vwtvo77EYxTN4mbxy7jlPJ8oquJqwkO4kdLovGH5QwuHF03k GqTpeRcWX++yxWkYgvZ3Ya6QyBWSuUJRrhBnpDBPNguJXCGZKxRRz284LRVbk4WkkCtK9LdXxocm hvWZFp0Sn5y41LLQusg21z3Hv8pypfVK+xr98sJliQ3cZsv11s32G/X1hdclbrXebr/dE8nitV6x pDOUDCrJEnDNUEnQyZf3S6I5IFzWXqtC14dIKOG19ooUJXBC8ApUe5hjGJFeSiTi5ZjWSzmcNY1m aISuGtkQWp9O8xsyeiUKbVaLEAvnRUKyJPIcEXGisAD2iUIk1CtoULa7GTRRpxf1YoEeZml1HMXj cBNuxluxCE5om+HqRR9JHw01vkBJohJcQpW4zUYml9CqWel1JcFyaBNOOqkJp4ecOSZ3dg+VOCdR WQj0ywZ+GuuPMY+zk0XNz4RzdfCe6QhY6gRtEbAxHbugEfMG6om2nOFi0Pqu6gipKM/GIguL2PA+ SxrLxnw9bp+X9zEmBae1MDn9WeuM369Z8uTEcdMHpS8dv2De1T/8+uH/bBAO2Hc80fZgzQD8wdTW Kzecuu/V9D/vwn/SL7vxwvOWDR02L+6bmap+eM6Sl2YveHOt7Yab1l40tqJiUfGgvSsuP7Js+dfm +GhfsA8H2LjU9YZVIBHocsSmSykdZNmeqDm686wYxaQPTW3AeC/ORma+MixMQchZ7fBDzoH5a05N nM6phbQJpOkd5X139fRloEMBoxxr/EJn+eJ1uST+KhoFJK50Hr85HRKsO3b89E+zvgro8eE0/w2f m83OcgoYycx+gTusyAImQp+PD+sfH3ZUVMAd69jwY8go7CPgUlTMJdQ+Wl+tSbtevl7Zqh3UjoMn rI3TCE8sMskmNihYA3cBbllXx8ag4GpVUaKy4JZlAUEHEMFNiKDAo76OqoC/58h4DpFZOKa4ZpyM W+WtMmxjbFiJUVwzg+CbyQOEELrHERXGCaQvYO6t4KEfFwTA3Zv2WJq2m7i7heYL05+fDjGDogwG Ov11tRRdZ4fG6MiYia3dgJ93Izv4Mv/YrTgxXYH7AfDFTCChMLsYTuvPYDZikzoY7KDJWDFcYaLm CkwGd/3+Lbymd35BL7zlla6XAXn9qbV55Uq+5KfhtM8DCEkrqO3EHxnJEpR0lDiT/hrU31Hj7O8f iUY4RjpH+KeiCx1TnRf69TvlO+3ZjjQqdBwMpDyVQqU2VBiqjfJMEiZpF3lmC7O1RZ7lwnLtKo9d 8FD/zCkDIxFGx7o6RjUf0w608yMcD16QKEHnq2B4FKvNbtfcLqeTToH3ezoytXsE5I/SteZ00LUx zQMQGwmEAM52Y4z8gixHPH63x+N3aooS8Tih6HRodntUd7h13eFUNNnvEewOXUMEqiRwft1uVxRZ JlAnv9PpcCA56PMF9cEKHo+iSIOlB34GEvD4fVE69BMIdOAbdpmGrzEYqO8Cp6krGOjyjxk2Z+gX 3TYv5zRRe0cHOHM/gOf1PV2os1cgLhtt+qFDsKg9lCv1XACx7UBsB+UJp0qTckwOSMDO0jMckHXL bLBnj2YIxgCTKZY2AkO4TIZwOWHlqgBXig6bYnx/+qpXPy0MDlCx75u3xsbDvb74bfqy59JvFEk+ d/o14cDpujtu+3sh90lXMP3tP29o554B0N64JTpnxKmHmcyKWZnV8MJ9sjKQ4wcpHZkv9zh9NOD1 pWGDAh+ABUcXCkVLfhYje98YBAW+GBbOJF8il6p9bPx8PF+cb/lE5AWe40RZUkRRETlF1eiYVVS1 uFXVInKiwlED6KV7uSjBIK5Y1CwiBvWGLR0kYCiqqnAEtIatg/gNRVMmGGqrStQOvNewWixaFHET xpKbmdDuNRTgIXcODxkWpvK0rJr7a1bxEf8+q+3lGBXk1EnT+6KpXl3m6guq3cBrPsHiB0D4jb1T KRlkWWDD3bS0kQ5y67AY1eYDEoXp8LasKRp/IHMCfLUTLKmnwcyloDhIYTEv+PHgfe0KUIjT0G1n Yo4zAu4gg7re+BbHxg0772Ic/mvXs2QxV58evnr1sq145+k9Xb8yMfIFma/4MH8uKkbVpJdRpliV 0oA1WFpiLS2tsfb3VIcGlo4sbbQ2li60Liht6rvZuqHkbu89wSesnuJcNLeIzYuhpccCTxbvCzxX fChwpPgtz8fF8lAvjlDL66BGwek8k95QRZHoZFrK9+X7U2WllTV8TdlI/vyyKXJDaq68ILVC26i9 pv3H+p+Uo7rShnm9T2Glrzzm9s8oWVJCSsJ9bHW2m20P2DI24QHbTtv3Ns6mZWdNfZObR3XC8NCZ ETaWj2YTab6azRbmfB3kyX3+29zhsIToSUFmsoYVqeVhzlIyU5+JREbmRKyQgoQsRPvW9PMLeUr5 QjqWRLMmC6lnQNteSMPUFvq4QvagwpwtLOwgFxm2IoPmqUeTfZM7k0IN9TQo9gDo9t4+VuhXw0ID kXhl35qDNWRbDa7x0boNpnf0JfwFfQpfFI+IJF+sE4loY7CeMaPoZ3iepXCKzAUTbQzbs9Ersd+A HtNQALikdDAzLIP3RHfkvyv1+ecU0BxL5VLgc+e3mLCtpjvriaEZGipFLWZmD4Ux1exbVVlkJsOf Sxiu8Xo8bq8vnuREyUbMXDM4iaudvX/hzudHLDu/atGH83DFsE3XrMpr81929PpNT47TFV/B82Hf JYeWTC9fvGD+Q8m86yYPf2r9mLVj3DZrsDChXtbrnIYWf8sNo4yZF/ReefzU+nMG4I+Lw3pxfZ/z my4ae84VjKc3AE/T+A6dz9Vq3IMFzV4oVAnDBKEuvy2f5OcXhCvC54Wb87fmiwNdtd7a4Gjv6GCj 3Gidam/0XhxcKF9qnW+/zHtZ8GD+B9qHvg8Df3V96/s28Le8z/Iz+YGo0Mfex91XqLMbwmj7OGGu 8GHev/ifdE332HiRoFAYFKjqCdss/sKjFqxbDEuTpdXCmyPtFsalFn82uHoy518ez42MmFPELDS9 m42QUC7oQylqWY4dFYg3I0MMXFVwCUIOYkDA23AbPo75fFyHx2IOU/hF2RbTdNs8ymCYMQtm40LY SZkFM2bBNORJeYyd6qWPxn42kMpSUnAgMqK6p1fH+GIpHf2EPQB+z+xkmBj+WN6IqbBalqKWWNxR 4QCkCw69juIFRRwA3TNZq70eb1+665KdLUb6hxeeX0QqJ9+y4ulHL1/xtHCg6183j7359WXp79Pv 3Ydvf3HyDYffOPrKYWZbxmW+4jpBZwXxtCwerLRdY8d2C6bDZc2IQ7wzbJH8Yd6CbR5Jpu2XWPsl lh0q6bT9EuPyw++8YmL5Q43l9Edh4whFw/nhIa4hvomuib4mV5PvHnIPd7f1Ef2RoCZbA+pCsoBb KFyuNVtbrY9pe5V96l5N82obtL8RzlYww77Efo2ds2NQM8aqvmwMrwmqtRVtQ5+h4wBn7XYLOlPH MFS90CYzHVUQgvYVWlL5YHswTbGiJDIYfc5nVAkyqowMewqPSDhfqpOIZGNRKpWeJDEVK/ULVR7K Im46RmOOWC/NzsfdjzDFBJ1LT6Q6l+ZGrx01ffTGY/DHPBegXAP2mYn62cS9nJdCacfV7sr7/pkP 0/9e+vX1O/6cvzNwzbRNTz6ybuFNeL3v2SM4D6tPY7J254OhRZf+9u33Xr6WyuRwoNmnZn4Vnmw8 ohLemrBWWodahSp3VfhCMkmd4J4YnkdmC3OUWe6m8MH8d4R3XR8HPnd97v7e9/fA50z2vPn5qSAV 2FFBKr1Sb1Jo7e0dSKqso8gw63D3yPCF6hTrPOvn4pfen/AJm449nM2i20EmLZIDgVByFn8FzR22 J3T9qAPrDsPR5Gh1gHBSnjBF1OGksuNghosKq0OkHORgIutgAV/a4w4b7XFHbkzBQb3H81ji83Jn 4YvSEelTKSPxlERjJU6KMJZjulqKmKzIyMZMk8QskBSIVI7rmfXRUt/Z1VPs2LTa2mOUZrX0d0bS aFw8VnVWpiUdyuqZLD5gzqFr3r184TvXNd3eZ09X9OnLVzy6/aqVD264f8uphx/A3Obxg4ntp+HE +ebrL73y4ZuHKM1GgR6NgJx5gGYTDV8+CnsAWTUKjcpkyxxukbBEmWORPeYsZdYBx4wJtJQXZjNX nB8IP7lPBvl+zoGBfuHBzvrg4PB45/TAhPBM5+LgzPBKcaXnJDnp15EX260+3zhvk7fZy3nD9q36 Np3oOh8KqxI6QJ6kHJvTZwdBGqDfdZCO21wgPT7DCpaXuZ/W3IQla27s2ErPV4pKK9us2BrMp0Ou iWQlXRuDqanNx/neCr1QMgpLK3OUivagVJhRyhSwMKMRyy+glOqpFRtT9V3Hxujg8Z9kXn+9mZoN CtJMzq7taqllfo0zl0zHRh1zImYGf91SjA1d4xibMSNyFx8o+27/1+nvsfvP72IbPv2Vunv9rC1d H5Lx2oAp169+Ak/xPdyO80Hda7g4/Un6P3p054H5+LYNQ+Y/xvSkC4jYKryNfNhqRNwKtgf6BPoG jEBz4B7tXusTVjloLba2BQ4G+ADtkeJgfmWebOU0e1jFHpJyu3hOROoDbuzOuAzel+ARR27FbBBj T78BlWwwIxXOr9yKcMCgghIwrCAoWdBczABzARUdVJaFzT9kg4jubBDxG2Z62MAim2jbkfmJzUdC D/sDz+MDKIZOYhXlsHX3aAdF2eBMga/c2WhCbDoPs8ZhJt24dYeoSKIMOElXnCHkEO0hnMKp0rVr cQokZWmFI15VUVVZTQMwoNioXvPQmWK7H3jAFbxuxejpoQHlE4YeOcLdvaVlUeXwC533qcObLtly ei7IxHnp8dw3IBN0TsQSo8liEdxlloR7tGWYW1TyAnlllqS7LF5j6e++wDLcPUWaaplv+Un9l8fW O15WdG783KLRRVvLtpVJ/WP9S+rKhluGx4aVTIpNKlkgzYrNKmkqay37sOir2Hfx74scPq/o6SC7 2ovDLonZEj2K+jJL0ooOoqMIwCtZY5QL4bBdHVYQ1lSvpyJRoSb8/qM+rPsMX5Ov1ceXQZeTyWVM sfmYYvN1KzYfU2x0ghfb+42p2OhZdMJXVrH5KDC4gM0BW27HCVSQX/ii/Yj9U3vGzufb6+xjwdQx mbEHKW3tBWzKUZjeyc60m51pN3sgVbY8RhVcakwPBXeiU/+Zjus6dpK+ReBYdnLDMfO9Bi1glnw0 tY/ByCJzTgPVdL6qXKJHz7kxc3dayocsX7PJb8Mr2j46ftkfb3z+ysfmfLTtN9/c9dia1dt3XLly +9Tg+ET57GnVbTfg2o/vxHjLna2nF/54ZOVTXOkfD7745m9f+S2VoY0IcTT3z41n7kdeYHyPr5LN YWUgO8FXccO4A1ae7RroC1T6ZIfmcHMCRvawILktqpZQjIr+lRkFH1Swl1kZr8GSLYvZ0k1JoFD3 wsHSLhm+U4L0PIX5neztAG5KEoWaGDYFkCZqsu2T+9jQ+BgvmyRW2b+yzXvcS5q927xt3oyX9xJ3 whx01KEOx+kbV6LAOZ8hno3TZJ3bnwwfk1I+l1TVY+jxJxMTIsLEkjDYOcYzYlyP8Rw2v52NP6ZO 9Izdmy8EqDUhIfV+mXTaRJuUsIlaCFtlkEtEhwTXIhBqM/HKnEjriDsYGUWPY2P71QdXPDOq/fJF 426sBVj4w62Nj9zbNYM8uPGqiTet6XoOZHITEKqW5WJJ6LBxsdKftmCsslXZprQpB5VPleOKhJR8 pVlpVR7I7vpMyShqvgIoS+IJp4jc1RiJgsiropQQEP8Av41v4w/yn/HiQf44TxAf5Y/CFs+beJlM 5rv7jWf9xqv0qTzTbHxOs/G5OChPhUilfciPkX/ee0tr2YRY6CmcCwxRll/aknJVVXg46JVN7e3t /N+PHDnl4ZOnPqRzCx5Kj8cDWZud6F1jGC8khEF8hbBBEHyyIEg8T3jBhbDVQji3xjsEi0RbaBGl sMO+FTS6zwdSaU2o6lYLzrfUWcZaOJrqYVTTFmVTP5izYGGepSXCvBONNsoiM7+EybYl4HLviI3o KdVMiml25BidhsBaUF099QtYUmR3+xwVFRt12cz7tcm6PSnraggrNimETI6gr/io8GBzljXN5aLz QDa0p+cX9M+v7t9eMfiOkfzXf/zjf666yzbyVn76qW2H6mdTeQVe4H6kuVxkphESTXQlThGnKZzd +k/hpMgpuZR8c0BPzRWUXIFlALABwcncFSpxilEXi0wd3+MsopGq4+2wdgpsR4ztMNbBHpHnBV6s VkYAKcRe6lT1Cu5y9UPub6L0mIjjYlJKyDXiAKXOOtbawDeIU6UGZQ2/SrhLeUV8i39PPCZ+Lf1b /I/scaqqwHE8oVlgigwbiiwnzNwvjucTZj6YCgzL02A1L9AQqcWCVL4D2w1F4FmMpUCmW7Eo8w90 c8h6K0AgSwKRBPiLCNehsSA5NA+vH5N9RnFkpg0yTkZOpgGYQ4GYc4ICmvUvsRFze9KakZqNjLSc ZCMjqTPjfABQfTU0hs3n0sFoXpgEZJdrObbMRoytoxScr6zjiOK30qQE8D7MWeCGqpTl1ShyXl4t zefanUfTut7ZHWWrXbHsXG+WE9KCWE7YfiRmDu6OseSF3V66+mS3zpLBYMW2NLbaZcnllOBsMpnz Yx7Lbi88ze2uZQs6bLrbTy/+dleoJjuQ02DGQOiQjpkuVoFxHEsgofjJr9ML8YufpB+8Rjhw+nnc ll7RNZvkX5m+iPLldbCoZvL6t30CU1AsAbR6gJkIWlllrvv2M9cFZqKokQBzYxfyhQeETwV+LCyO C1y+0Cy0ChmBB22uEs5U8PROTNF7ANk8gPBBcDRJT23/4xltn9dD25u0NvGYnAVjuaGbTCY3mJPV XWgMf7buosqLBpDM5FHMtuiH9sx17SyN1LShYhIwUxy/SlN9TuQyt07k3oHzvlFvsVYm+GP8MeUv vs+jwrvCySjxydG44g9FFY6LR8Kih0IKCYvxYEBXjybw1sS2BEmAHrMltjqwg2c+m5/5ayxYx3w2 N5sNyt6KQhvqIMxzY2rMwcJ0jly+giOX++XowI2G5k9sDeEQu12o+3YhdrsQzZ9z0NuFmJUMMdc7 RGWJGeeQRm8cysX/QvR+XkQq4gl8FGEaBSD5iMofx+Qv7xfyxzQu8mYt8OkcRj5huJkpNklhM0Wy MNGBV+75uQY2YzRdx3qEbXoE/GCjiw1PtCw1MzfrTCF2+Hrmrts0tyvp1hwh7LR6coY667zQNyuw 4Usfm6PMzDXD0T0N94Pljy1ccUf+1a/f/+Se+PRzm3/dPnX26LUD+eRtY2ZcMvXAzn1dReS+S2cM vO2RrjvI7pUrx919S9cHOcz1BfCLF68xXAInush2vUP/G/el6zh30iXyVOXWAsOs0vGd+lH/Z/6M n4/Kbpvb6wTMhUWvVbXaNFuhn+EsP8NcFoa2LAxtWbrRloUJgaWAnUF7mKEtC0NbsP0fk6AWNRuR O2kwdWhhgM6C4c8yxk+FLkiRl/+4nzT7t/nb/Af9vJ8jFR4vk82T7Q5HNt3zfwRc6s8Al6MH4OKz knjQcP4cwI3xsWnAqTNh3NoTDISdtddMkGYJYWCDu1GYV3QoqqxKKifqSYdoC2G76swSmU4taKFa mFE5G8vtQeKND13+cdOD43S1vXTR+cse55N37BzWXF++pmsZ2XDZ4sG3vtmVnX80NPMVXwR0tKIA XrTPw97c4qKjBswroEK5jJYC7IBTUgPaCPF8eYrYIM8TF8hypT7QOdBb5R+mj3KO8g7zTxemKxP0 Rmejd4J/sbBYma0vdi72zvZfgT2KKFgv4iYJk9SLtEu5OcIc9VJN9YV5yQFKw10YYt5PiDGC1P2y J4kFdLLBwFwAlhWy2V7mKwuyGWGscNBwFSYq+0oYSboUlTip36egJej+kTScAGVbIdJs1PFlM/0Q izeiMKMwCyNk5ZZpIMRS4JEBt6QKgaB+QRpWyL7YzaSd3pJqPNnYIymmO5OMxnzYiNBEYaJyiXCJ wlPrRE9xsZdroOyrNnq6RUMfuf53H2HvVX+/4dN05/7dGzfs3rN+427iwkU3rUj/pevw36/FEWx9 8403//i7N15nNNyYXsDHgIZOFMGXGDdpei/9HH2UztdF26IkP1qixfPKPeV55+U1R7dG5YG+gaEL fBeEGuSLtOm+6aGF8iJtgb7Ytyh0MPq2+2P/x8G3I8fcxyKfRTNRb5xP6SlPFT9QH85foE/TP7f8 PS+tWxw2zhumIXTRG7ZZkC1QeFTFumqoTWqrykcZEaNG9gU1X5jjcqo/u/1TDtR1Z/ya4XSVcluc 5f4ux64KUuFMIPQ/R85zAXO9R8BcPytgfvLnAXM2pAVqkgXM80dU+/FZEfNcwPzn4XIWL3fU9IyW u3KK1etxs6n6RQ6uB/02PjLw1vmbji68/NOrpt3c2/HYipVPPb582a70AuGFzePHb8nc+XD61A2j B3ad4h45fOiNd994/U+UhuenF3CfAQ11FMb9jZssJEVK/YPIKLJKE+s8dYFRga2RbRGh0lUZqosM dQ0NTXRNDM1yzQo1RVoj74jvOr8Qv9a+8eslpEBLeWpIlTaSDNemkQXkA+0j/9+8Xwe+CJ0mdsxb 3cGwRbKJ7jAPhPPZKhCNstqxbjfsTfZWOx9hwYgIo56dBSPs3cEIOwtG2Fkwws6MKQsneGlf281Z IaJ5eh3TH8sdv4yyFjJZZnEIicUhJK8Jfs2oXV7k7AjE/xBh7TpR+0vCoBbsyEbD+2dDDmfFVstK 75j8Qvr7JW9f/buWh7piT69c9tjOFZc/nF5A5EFjcG8sbUtf99hNPw3hdhw+/NtX33nvVTOvZT0Q 5xWgiwO9Zgzq48I6j+N8JT+En8jP5ZfzouKQFVmxuhyKFXEytjChQKpSvFXGckHUhV2kwPG/+/fd iO9Hw9HD3IhMGZ2FK0wXX+wB9cc4Rxz6hYt/TG88sZTO4KOdU5N7dRPSX9toY8nfjUvpDEyTgc24 mgTmYv1D5y6ou+jic887b9DF7giffLDl/IGPF42oa1ra9Y7ZD3WZr7hd0A99OZ9xFV/gLhioXKAM LZxSMKdgtXKTsq7wMddTZS9zVsUX9Pv6jip7zyeEyGRC9HKs+qfL05Xp6nTLdG26daG8UFmoLrQs 1BZa25PtRXaaalVY0r9wmtpgmZ2cXbw8vrywtfBX6r3arcV3lN3W9xH1Ce3hokeK9yR/l/QW5xBp Qa4QzxUKc4Vi00vMnkML8VyhMFfIo3nRzkjNNLkooal8MJr08JbeeUEawisIlLFxhkBdYGxgRmBn 4EhAtAfyA0sCnwb4/MDNARJ4AajjAc5gUW/DTU/Xafq/jo+Cw4d1zOZe7XF7K81ouM1RiXHv6XmX 5pG8sEfizQFpFqD4IheE+MJwURLz4d6W/CAOFgYMl7+ynF7eh8Vt/eaSSkyAvdMyEKVXBqL0qgBz IAMs8h3oIBftlgpL4dK94ZqjpbiUPoVeUZrLNi3NySoUvmHv/ykNskfFikorm8oPlpO68tZyUk4j +IXIb+JexnRRs5dBvdMCrUCUvaWIViJaaGdK2M6qZ49mtcRPRpTpDjZDJBtuLPg0594G+mXD9CDo WXVMX3Cow2rpmOxAeCrV0mMefMocE2OvQmxhA+HUp6FJfnTVPb/TZ6Ioo6hXJC64y5IO3am7dE4s sEZDSCmWQljoBYuIGzZjtngIFcStmlyihnBxkaKKKT6E8vU8irfMWZ1swXLjS1Nr165FPVQSjQM1 dr95rihZ1JtUVfav/kXyIHxpzjSLhNbttl9/1eqVVYlfvXLX2MEDSm+ZuOaFaY42bdmC1Qu93j6h dS/eMWXBK2uOfIDPCS9aOmfoOXF/onzk2jEjVhXnp86/ap5/wvQJ1fFwnkstrBi8evq0By58mspp YeYHUirchXx07qdKpzMmafzjoDEYCq0BjLBmVTGHvLqSsqtgvjmLXS9ABdjqTGg4I8nDlGFNUrPU Km2VeAT4aZvUJh2UjkoiS7/P5uGfYFwk0eRCNnBr+mXZQjYz/yfGHRSZUftPQzxZgGZiS+kAWYj8 uP+uuT9zVtlLartq9WNUy3fSzEOq5R0VFfprZupxwmcOotERAkc1e38ce8sS0YOjay+5tGzduj17 97pSxZEHH9DPnfMQmbUFS5emb9zS9av6siDz80GXfUb/twkeux8F6egTePAk6vLS1O/jRoXTXZly 4ULZ5dWwy2sBde6AbkIV3oTfR92KIPNZfMxb8TlZeL479cTHFLiv20/xubOB+mxU2MccTx/1U6y0 PzI+fNCHfWOCLC5AXZTg8SBpDm4LtgUzQT6oJZRu00Hf8hpVjiqfKbySMx1Kt+nIRqVVFotmSVYs /sx8FIUFhZUxgbNCAzT4+0tnBGwIyxKozb0iBoQoyOs2q91Kc/3o5H9wSHgthKyywwwFlpauBRtM k5vM8c2iJAsH+s5M8+TqVr978cNjdUu7xXHZ+PE3DWq/t/38xWOrlpFbu/bc2G/E+Ik3byI1NGwK 9AnSeD7QR8XfZHMHfIKMVFnEYncqaSGb2dMn1TOjlCWUPlslYFTgqFGphrc6ahRwOCtluiCg6/bA GmfXKg1qKJFYJSqGBUOfSkGiEnlhAVsfGlcX965EUVjYtRJUrCTVGlSlno9GqFPwFNIgT1Xm4rlk gbxAWYmuwFeQVfJK5Qp1I95INnDXS5vkzcp96E7lFvVp9JD6AnpW2qW+hn6nfojeVb9Ff1NPoRNq GTRH9SOvWoySarU6FhmqIhhOb6UAzFKZe58szaMVKaigTGVnL3tETIvSvqD7GKilvcL2EkHQLDRB 6OMU9A38DqcOp1Cf7oTbalWS5YSiuhVFRRwhCTMTU1BVpJpplaKkKhzCQh8NawWyYRhKq0KUDhza awitAhGgZChRYuACyzdvUX7qDAa6Grsag/7OY43mEGpNd4TRUXP2BDSaJ5fNT+oxhYDlvbI0R1cF xs+kL/3NsUS+P/Xt/vRlfLJr3bwlk1aQTYw9snmLzwJ/OPm83DxKJ0WoTAOZaWFi1td4h70ilWdZ 0bTkiGrmgYPtNnOAAMwrLTkMtv1/GrsW6KiKNF1Vt3Nffd/deXfSnVfn0UhiEgwNkdzEhABZSCAR 0wEEBBxFHGAS4IgMNDOggy9Gdg6i7hGXnRkRdw6dDoQmeDYoLmoUYRwGd/EBjngGdw+iLj4QSe9f 1Z2As+w5c7u/+v9b9Vfde/9btx73Vv0lmxxGCrSJMK+DPlSFmYFRTEwcssOUk2+qEoWdSQ3dHTNO HTNOsimVydGx7PpG5lFlw1PoxmWOUplMM+eYT5ic6UuY60yajHSMMCYteiRvXrXhyUm8w7YPeAur HbwiufhsKdNKcSAH75ScmmgZyMW5BY+Y7cyBvmyRUCYGtGo0TpggTtQauWbeFqaLLc7b9GZzmjVH n2XdJywWf2I9wK8VesSD/IDeb33NX5FKnGYJKlGLtRK92Cp3j0c11hrxIXEH95TyAt5Ndjt/r+xH /fyA9objFP+f0nnHef2v1iX+e8njZDNTFOYafGLgHqvWmWslM262rOkOC5miIBYJepFGu3OawKlY KVJj8VN2DS2pVMh/ZazPpmK3i5edpl8OmB2OWfJcc5m5znzElE3ZAbmR3o7EjfnbgcjlgUvlieH9 xjn6S7QA4J9tuzk2QFlIkWRZhL6KbJgmlPEtfSnIgnbLVPtuWdd8R0xB9AmmZQVSBHdKiqDBfS5S NbeqaiJ0ewKy6IbodNRy8llBBAuWQ9RNRVPZ6VlQllOLI/ThsXQ6d0t2f2OomJo2CKucGsMv2LKv VcbL5Q10LCu53ZZaTbzc3GASk+45jRS8gL0z5uDxemE//sb1zd2sWZQ5/dK8eRnQtoE/fczmZdx4 xHLyuTOZ+3cMWBY0o5aC8hQtEW975z7Vp/jIy/Gz0K49i7T4iX2oQvdZkEdHrR+GWiLV7Wzm8ole gdqzA4+89pZIFRu2JMbP9gq+hK+VnGVKpwCd6IfmIKQN5dWJqFBBU4yi8WQgcaTRxEfjpbN4Zvxs n+xz+ND45Gjo5ISik/1WEI0B0E8MrmvjaxPvtunjx2ag0iKFlSiudDZsmivmcMvwoYEX6xxVLx7c Oe7W/r3D+w69WPoeFDHPnjOHyE+v7njrGLn7ymmybv8Px1lZo0Nd9CWUNQb+IFkXperYyTuIxBNe hTyps3a5Xh5g2ZJZD8o+oFtYz89MTHBvywx26dsd28WntWf0wymH+cPCW7qk22nBLM4lpapZxjg8 wbkRP+EUy607HCEh5OzUnsI75B3OAySmvOEc0t42TnN/lv6ovm98Klsjj5dTQZapZ6jQvKCzyGyN cjqPiIpkmfBseinNFFAQJYbr383znCBKEuZ5iQ7ShlYZ1Ooq1nXVcELTgqhOTjFkXie6bBxFRyVi FCHJjZDEEfWoitUihXMrCidLEscRHvoDioLkVgtbU9X1Sr6sL+Sl9bYMtcMBm2/jw8xU2W225uPW k/xW0OVUc91rSevcrMKA+sL41Lh0gc2av5ajaX0xL5lf5/3ceA3R09f1h0WWTxMuEJp5a8XaZLbY p2XkBJ1stmtOUMlPD3IAuh/NCxps+nBqEOfnBSXbM2pcIMReobIvRlDpVKXT6qeGfiviirGONw0/ /fG/jPWMKep7b/hJ/OiHpycMf0ZK8PDl5oqGqivDytV38LTQ8Dy4rrzhmdznkEey8LfJPJIju3XO yXkydYt38i7b0n1OW/El80pmeSDrw6yMY1mZBiWss84qjuw+3YN1ehH3e4Il7tn6XpmzVRtuiK+k otqgjqBIVpqaYRU7i5Vi9RblFnWc9rTpLLFKXFPSQlbIFUq917rXdW/qA/xq9QFzrXtt6mb1EfMx 6zHXFvcOebfzZeOQOeD+L/mv7q/Vq8Zld9yTO5Kj0lxOT7ZDb9Q36ZyeOXr6iZcJ1ui0jxpdVwwo LaH1kOl2uYos2Q07ugLFYZFThs6w7KLDyJ08TQB5DA8p9wx6iCdG6vbroAvbHSMdtrPOsi0y3xq0 iBXDDf06zkdN2TINYtqyfUqF0qpwbUpcIQpI9JXroBtSty/btw6KRlDeVWqzDjIRnf2eYVw6l0lt +l/IyjAuMA5l0O7DSI4Sr//ASbPUwyz/QLmnQXmTAeXNIaTEzyNn/Dy+vrRxxz/qrwnK+TVBDZ6y /alBMzlpMURbzdQkBWQfV3FizEsNm6aRbMZQc/EF+RvcE8fUTkk3/SnO4ftf/TCQ7w18sm94WX1h xbrZ1cM/edEoKcy+T89xlFx9etXGdavJfVfe2NsQaqdlTwmUPSchX2l4r61aMfKmSCxcmZie8Y4t AYMn5bLv3q/a04ApJSVSuRHEQXkqnkwmi1OlVmMu7iAdYpfUZizDi8gican0IO4RH5QexZvFLdJl fIlkZ4p+XCoGpKD4O/E9LNCn5YCRWk2ggJWoae8C6E6TCZJMRFkuwgQqQIKpCUOyMCUAlygvVFFi 5QFWnwc0mcSwvg+qwxT+EJkDpahAX1+xF/f56vMaRpqtLdDC2hdaChv/X0iDtB4kr8d4L8KtaDmK Iw4x40MoUzd68mixQd8HJr9kX6XMuQAbX2Zcpa8Cao1PoaP4KRtsmWxuGtprScMWK+ehpDWS/aXY L9JXMwntiVSXsPfqAapFqsqEGaeVITaPg9ZmH0V1qoQkOX8gOyiJadm30uZZND3IOl9yWpC4AVlp 1wqWqnGYL6CT5bBwS1Veagn5bXfncCu3+Ooryx9Yiv97Gyfy29ZcvfNB6Vm4z/Ef8JBjOWiKQ7m2 jsfRVVXY3EZH39ofr6rCQYoORzceevJJ+s64nfsf0pXyJ+SkvX177s7MvZnkonDRRc4IZ1zkuHDc RQaFQRfZK+x1kZ3CThfZKmx1kfXCehe5Il5xk2XiMjfpErvcRBEVN3G7RAH6p07E6Zc17jLRVIKV WhXVUtvkbXa5a7mwQdgqcAJ2jXfXaqpSC00dOz2rWluFhfFiLcGoluO2EkwyM1a+kHipw0aZGFfP seUYGIfq6OTyCwazS5M010rvGzLepD189LOVK1filckNz8OpBXQYYE06zwt51/HY/YqvbM6YmmoO /2aEc7z2x989VNtWOjl9zh3XOPaNpJn7jMxIeZPp6n17BtPVF+IXboJF7CZnhbMuckI44SKHhcMu EhEiLrJL2OUi24RtLvIL4RcuskJY4SJLxCVu0i62J3WlK04OuV9yUe0oKihNA3Vh8SWBelRgUCFB tRhreq0CGitW0ycpikoVpq4ihKtFoLRiRGeoLWX6oiZ16QeIWqascwbj2WI9dKmeEfpjdY1qauVK 0FxiRI5bSKzlU3Udf8cr3sCcMbeM4/5jhHF8ByqaOLO0OW1++zUuscQtpxxL3RhvmK/Xfi1mi2wF wdcz/m3HCKUjm5jVXGgbjC6JC1SYNDwD3Wag7/cOVxkTRkNGtsk8Sqz9SPagdQxBtAdoPdABRze6 HXAGUAuYDcgCTAcsBLSz8H9FKyhEL1qeMjt+NWU22p7yOrob8BzwuxyfoN18EN0P+7+FNAcdCNVQ GYi7nd+DdoD/P0H4IvB7Dvh/BjoX4lQAlYTHUSZQHmSnAR6CuG1AJwNaIC0X0AbAw/h19Cv8enwX hANFv4R0H6b+gMYknQLXtBnC6yBeIez/EvgsOB4PVAfkAUoc3fEfQK4d0EzXPobfajSEeVyGpxA/ +Q23x7EjZQpfzT8inBQ/lyqkHrnHOU1JU/apneqAlqZ9pN+lnzSmmIvNPS7bneaOpFanLU0/nJGR 8W7mV1lHPRU5vpzvc0969/nuzJudX5K/q2Bs4drC7/yG/1LxqZJY6SboNX4w5qc3TRo7o2LTzdsr X63qr3q3+p7q4eQyx5Mxtbm6CKXA02OgcjQbIYcq05KZMAkreX95pCHU1TWjY/L0QP3P7l24bHoH k4AtXkztL91gm8zsuTqRAu1rumwyteaZitLg2aTrrGazlVbzUAGCzi3yI7p6cikqQwE0Bt2ExsK5 VKCbUSWqQuNAazUoiCagWtSImiDdZjQFTUXTUAv6BzQdzUCtqA3NRLNQO+pAt8M13IE6UQh1oTlo LpqHomgf2o9Qb4den8+lo4uAOIBDXnDLAa2A+YCtgJ0AHulJn+WADYBBwBcsxObSo9uq7BiQRxnp W7qsku0uTOzOncd2++4IJej0mQnaODUhNiEhdnN1wntsQ4IWj0lQq6gyTKmsVh6uT+PS0AkAQSvA xeQ1pEPH1Iue51JRBEA4Puljc1Zfob9y5yDnQJgjHEaLkTd+mMNR1aysl0mcXIR76SWfkwuJEHKh TzMrd9ZPI39BewGDAI78BX4fk4/RBgJdNmSAWwfYCRgEHAdcBPDkLPzOwO8j8hHSyYeoHFAHmA/Y CRgEXAQI5ENwDfIBzUbMpXwdgJAPwDXI+3BZ74Ork9PAnSan4dT+FK0JVh5kTKA8yXiLkkx6dpKx 0ipj5N3o5VJvjHzS5wt4n6+vICdRBAA5E1wD4AO0ARYAVgB44E4BdwqFAb8GPA+IAHiIcwrinII4 Q4C3AadQBcAGtAFEciIKh4mR41F/g7c+jbxDXofM7CXHyBuMvk2OMvoW+XdG3wSaC3SIHI3melG9 E8IRxDGAGkDLITyFvNJXaHnj9SYZBPV4wS0H1AFaAfMBWwE8GST50cVeCxI5hIagtPaSKPqM0d+j XSKyl3pt/22Qx3zU8U+4FThwdvp2+ont3/407FLH/8Q24Kjj3/QYcNTxr90IHHX8y1YDRx3/4qXA UcffNR846vhbO4ADJ0aeO1BY7K1pvQ/76nWyBrS0BrS0BrS0BjnIGvpDlx303J6NlpWBxp6xA6Vl 3vAADr+Mw7NweBcOL8Hh9Ti8EYdrcfhOHA7gsAeHc3HYxuFDeDyoIoztfT/aDdoZODyEw3/A4W4c 9uNwEQ4X4rAP19gxkhedWsVIEyN99fS5AnrrpEodzjEPNJoH2ToPHvtBcI8D4mzPBiFffkI4M5fS /L6yusT+2AmVy+unkCMQ8QjchiPoDMABN+gIZKMjkMgRSEAHtw4wH3AYcBEQJ9To/RmSDye+lbk6 uOWAOsB8wAbARQDPTucigKDlyVPcy06sPHnSrXSPHIEfXQI7j+TZOYbHCBhTuK3Qj8zFrbnxXFKD 0tKguLVM0Yxhtf9b9btvVSTVS+QJshXlwI34dZJujV7O8cbwjqj/kLc+FT+Fch2Q63AQ+XER0PGo m+2PQx6R0mrkIS8BrYx6ZkM0Peof4x3AGo3V773sOef9DHp8wJ73HPK+54s5cNT7Z/B5qd970rPF +2Z5TASfl/0xDGTAx0QPesZ7/zDERDdCwDNR73pK+r0/9zR77/OwgCWJgDu7Yc/WvbP8Xd4pkF6j 5y6v3Q1p9nvrPHd6axNS42icfm8FnEIgwZbByZZ62EELclmCt9fE8D32GGG70Cm0CrcIlcIYIU/w CjlCtuAWLdEQNVERZVEUedEhEhGJbjqRIEDrQDdvsBfSDuo6GG8Q6iaqSAStSwKVUcTFtZCW9gbc Ejm8CLXc5Yt8014Qw/LMrkhKQQOOWC2opaMhMj7QEhPisyI1gZaI0DansxfjJ0LgGyG/imHU0RnD ceq1OZuu3nsQYWxufjyb0pLNj4dCKCNtdV1GnTXJDE5uvIGzIOle99o940d8TmR7S3tnZE9OKFJJ mXhOqCXyj3R534P4K/xFU+NB/CUloc6D3CT8VdMs6s9NagyFWmJ4NpODxuyXIAc55ksmJ+YiH5VD PjE3IfdMQq4I4oNcISUgJ0moiMkVSRKTc2Aq19td2NTYW1jIZNJ9qJvJdKf7rpcZKgKZoiImkxZG Q0xmKC1MZSKTmIjHAyK5HiaCs5CHiXhwFhOZfU2kPCmyZVRkCzsSh6/JeBIy6tkRGfUsyAT+3m1J A3Qw+yaGFs2lSyMvKGhaAlgQeXT1PRmR8F0+X++iUHLNZP+CuxbdQ+nCJZFQwZLGyKKCRl/vxLk3 CJ5LgycWNPaiuU0dnb1z7SWN0Yn2xKaChY2hvua26pofHWvL6LGq226QWBtNrJoeq7nmBsE1NLiZ HquGHquGHqvZbmbHQiyPt3X2iqghBD1oRvuIU4b8uiA7L9SQZqyYxDLvxLyM9dkD0CDZjZyBUEQp aIioABp0U/1N9TQInikapNH1r5NBGesn5mUP4N3JIAO8zYIGFOhZ1b0KZTTd25j4d8MGXj2rqMIT bqD7/9sgrCliL2zs7kGoJVLW3hKpm9nV2SsI4LuAXlJkwoif09kUix9OeI4FzwnUk+NGBalfLfWT pKTg/73/q67ZRj0IDY1DfdjOxT2oO8RFcls6CBQFHcmFhgeguUSrh+4QXGA3DuDukTTYaSc/MiF6 vSPoWZXkknroSdJELIjSPaKO0Y1qCf0vXH7oHQplbmRzdHJlYW0KZW5kb2JqCjI3IDAgb2JqCjIz NDgwCmVuZG9iagoyOCAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0FzY2VudCA5MDUg L0NhcEhlaWdodCA3MjMgL0Rlc2NlbnQgLTIxMiAvRmxhZ3MKMzIgL0ZvbnRCQm94IFsgLTY2NSAt MzI1IDIwMjkgMTAwNiBdIC9Gb250TmFtZSAvWlpOVEZNK0FyaWFsTVQgL0l0YWxpY0FuZ2xlCjAg L1N0ZW1WIDAgL0xlYWRpbmcgMzMgL01heFdpZHRoIDIwMDAgL1hIZWlnaHQgNTI1IC9Gb250Rmls ZTIgMjYgMCBSCj4+CmVuZG9iagoyOSAwIG9iagpbIDI3OCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1 MCA3NTAgMzMzIDMzMyA3NTAgNzUwIDI3OCAzMzMgMjc4IDc1MCA1NTYKNTU2IDU1NiA1NTYgNTU2 IDc1MCA1NTYgNTU2IDU1NiA1NTYgNzUwIDc1MCA1ODQgNzUwIDU4NCA3NTAgMTAxNSA2NjcKNjY3 IDcyMiA3MjIgNjY3IDYxMSA3NzggNzIyIDI3OCA1MDAgNjY3IDU1NiA4MzMgNzIyIDc3OCA2Njcg NzUwIDcyMgo2NjcgNjExIDc1MCA2NjcgOTQ0IDc1MCA2NjcgNzUwIDc1MCA3NTAgNzUwIDc1MCA3 NTAgNzUwIDU1NiA1NTYgNTAwCjU1NiA1NTYgMjc4IDU1NiA1NTYgMjIyIDIyMiA1MDAgMjIyIDgz MyA1NTYgNTU2IDU1NiA1NTYgMzMzIDUwMCAyNzgKNTU2IDUwMCA3MjIgNTAwIDUwMCA1MDAgNzUw IDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MAo3NTAgNzUwIDc1MCA3NTAg NzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwCjc1MCA3 NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1 MCA3NTAKNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUw IDc1MCA3NTAgNzUwIDc1MAo3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAg NzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwCjc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDU1NiA3 NTAgMzMzIDMzMyBdCmVuZG9iagoxMSAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1 ZVR5cGUgL0Jhc2VGb250IC9aWk5URk0rQXJpYWxNVCAvRm9udERlc2NyaXB0b3IKMjggMCBSIC9X aWR0aHMgMjkgMCBSIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDIxMSAvRW5jb2RpbmcgL01hY1Jv bWFuRW5jb2RpbmcKPj4KZW5kb2JqCjMwIDAgb2JqCjw8IC9BdXRob3IgKFJvYmluIE1lcnNoKSAv Q3JlYXRvciAoTWljcm9zb2Z0IFdvcmQpIC9DcmVhdGlvbkRhdGUgKEQ6MjAwOTExMDUxMjQwNDAt MDUnMDAnKQovTW9kRGF0ZSAoRDoyMDA5MTEwNTEyNDA0MC0wNScwMCcpIC9Qcm9kdWNlciAoTWFj IE9TIFggMTAuNC4xMSBRdWFydHogUERGQ29udGV4dCkKL1RpdGxlIChNaWNyb3NvZnQgV29yZCAt IERvY3VtZW50MikgPj4KZW5kb2JqCnhyZWYKMCAzMQowMDAwMDAwMDAwIDAwMDAwIG4gCjAwMDAw MTIwMDYgMDAwMDAgbiAKMDAwMDAwMDAyMiAwMDAwMCBuIAowMDAwMDEyMTExIDAwMDAwIG4gCjAw MDAwMTE5ODUgMDAwMDAgbiAKMDAwMDA1MjAyMCAwMDAwMCBuIAowMDAwMDAwMDAwIDAwMDAwIG4g CjAwMDAwNjAyNTcgMDAwMDAgbiAKMDAwMDAxMjI4NSAwMDAwMCBuIAowMDAwMDUxMTcwIDAwMDAw IG4gCjAwMDAwNzE1NDQgMDAwMDAgbiAKMDAwMDA5NjI5MyAwMDAwMCBuIAowMDAwMDUyMDU2IDAw MDAwIG4gCjAwMDAwNTExOTEgMDAwMDAgbiAKMDAwMDA1MjAwMCAwMDAwMCBuIAowMDAwMDUyMTQw IDAwMDAwIG4gCjAwMDAwNTIxOTEgMDAwMDAgbiAKMDAwMDA1ODU5MiAwMDAwMCBuIAowMDAwMDU4 NjEzIDAwMDAwIG4gCjAwMDAwNTg4MzYgMDAwMDAgbiAKMDAwMDA1ODg2OCAwMDAwMCBuIAowMDAw MDYwMjM2IDAwMDAwIG4gCjAwMDAwNjA0MTggMDAwMDAgbiAKMDAwMDA3MDkxNiAwMDAwMCBuIAow MDAwMDcwOTM4IDAwMDAwIG4gCjAwMDAwNzExODAgMDAwMDAgbiAKMDAwMDA3MTcyMiAwMDAwMCBu IAowMDAwMDk1MjkzIDAwMDAwIG4gCjAwMDAwOTUzMTUgMDAwMDAgbiAKMDAwMDA5NTU1MiAwMDAw MCBuIAowMDAwMDk2NDY2IDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgMzEgL1Jvb3QgMTUgMCBS IC9JbmZvIDMwIDAgUiAvSUQgWyA8ZDFhYWEyNjEyY2E4Yzc3YzQ5NTc1MjJjMmYyMGE2NTE+Cjxk MWFhYTI2MTJjYThjNzdjNDk1NzUyMmMyZjIwYTY1MT4gXSA+PgpzdGFydHhyZWYKOTY2OTQKJSVF T0YK --Apple-Mail-12--32260039 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset="us-ascii"

--Apple-Mail-12--32260039-- --Apple-Mail-11--32260040-- From xiayangsong@huawei.com Thu Nov 5 14:33:23 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 20D053A68CC for ; Thu, 5 Nov 2009 14:33:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.395 X-Spam-Level: X-Spam-Status: No, score=-2.395 tagged_above=-999 required=5 tests=[AWL=0.203, BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ixy8tGi1SCkz for ; Thu, 5 Nov 2009 14:33:22 -0800 (PST) Received: from usaga04-in.huawei.com (usaga04-in.huawei.com [206.16.17.180]) by core3.amsl.com (Postfix) with ESMTP id 03CB93A6836 for ; Thu, 5 Nov 2009 14:33:22 -0800 (PST) Received: from huawei.com (usaga04-in [172.18.4.101]) by usaga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KSN00GV0QO8RC@usaga04-in.huawei.com> for savi@ietf.org; Thu, 05 Nov 2009 16:33:44 -0600 (CST) Received: from X24512z ([10.124.12.62]) by usaga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KSN00EHLQO76J@usaga04-in.huawei.com> for savi@ietf.org; Thu, 05 Nov 2009 16:33:44 -0600 (CST) Date: Thu, 05 Nov 2009 16:33:42 -0600 From: Frank Xia To: Christian Vogt , SAVI Mailing List Message-id: <008a01ca5e68$08273f40$3e0c7c0a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Outlook Express 6.00.2900.3598 Content-type: multipart/alternative; boundary="Boundary_(ID_jgGKVUk5QECjxe4UUJl0cw)" X-Priority: 3 X-MSMail-priority: Normal References: <058861F3-5E50-42FD-A6CC-220EE213629C@ericsson.com> Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2009 22:33:23 -0000 This is a multi-part message in MIME format. --Boundary_(ID_jgGKVUk5QECjxe4UUJl0cw) Content-type: text/plain; charset=iso-8859-1 Content-transfer-encoding: 7BIT Hi Christian The reason of Duplicate Link Local Addresses is different hosts having same MAC addresses use same algorithm to create LLAs. In broadband network, hosts(CPE) with duplicate MACs are allowed. There are two ways to fix it 1)Change CPE algorithm to lower possibility of duplicate address to a tolerable degree. IPv6 use DAD to avoid the duplicate LLA. 2)Hosts are layer 2 seperated. LLA can only be used with a link. Different links can have the same LLA. BR Frank ----- Original Message ----- From: Christian Vogt To: SAVI Mailing List Sent: Thursday, November 05, 2009 1:03 PM Subject: [savi] Broadband Forum liaison to IETF on IPv6 security Group - Attached is a liaison related to SAVI from the Broadband Forum, for your information and consideration. Comments? - Christian Begin forwarded message: From: Robin Mersh Date: November 6, 2009 1:42:05 GMT+08:00 To: "fenner@fenron.com" , Christian Vogt , "fred.baker@cisco.com" , "kurtis@kurtis.pp.se" , "dromasca@avaya.com" , "rbonica@juniper.net" , "rdroms@cisco.com" , "jari.arkko@piuha.net" , Mark Townsley Subject: Broadband Forum liaison to IETF on IPv6 security Dear colleagues, For your review, please see the liaison from the Broadband Forum attached below. Best regards, Robin Mersh COO The Broadband Forum phone: +1 336 288 8013 cell: +1 303 596 7448 email: rmersh@broadband-forum.org ------------------------------------------------------------------------------ ------------------------------------------------------------------------------ Group - Attached is a liaison related to SAVI from the Broadband Forum, for your information and consideration. Comments? - Christian Begin forwarded message: > From: Robin Mersh > Date: November 6, 2009 1:42:05 GMT+08:00 > To: "fenner@fenron.com" , Christian Vogt >, "fred.baker@cisco.com" , > "kurtis@kurtis.pp.se" , "dromasca@avaya.com" >, "rbonica@juniper.net" , "rdroms@cisco.com" >, "jari.arkko@piuha.net" , Mark Townsley > > Subject: Broadband Forum liaison to IETF on IPv6 security > > Dear colleagues, > > For your review, please see the liaison from the Broadband Forum > attached below. > > Best regards, > Robin Mersh > COO > The Broadband Forum > phone: +1 336 288 8013 > cell: +1 303 596 7448 > email: rmersh@broadband-forum.org > > > ------------------------------------------------------------------------------ _______________________________________________ savi mailing list savi@ietf.org https://www.ietf.org/mailman/listinfo/savi --Boundary_(ID_jgGKVUk5QECjxe4UUJl0cw) Content-type: text/html; charset=iso-8859-1 Content-transfer-encoding: 7BIT
Hi Christian
 
The reason of Duplicate Link Local Addresses is different hosts having
same MAC addresses use same algorithm to create LLAs.
In broadband network, hosts(CPE) with duplicate  MACs are allowed.
 
There are two ways to fix it
1)Change CPE algorithm to lower possibility of duplicate address
   to a tolerable degree.  IPv6 use DAD to avoid the duplicate LLA.
2)Hosts are layer 2 seperated.  LLA can only be used with a link.
   Different links can have the same LLA.  
 
BR
Frank
----- Original Message -----
Sent: Thursday, November 05, 2009 1:03 PM
Subject: [savi] Broadband Forum liaison to IETF on IPv6 security

Group - 

Attached is a liaison related to SAVI from the Broadband Forum, for your information and consideration.  Comments?

- Christian



Begin forwarded message:

From: Robin Mersh <rmersh@broadband-forum.org>
Date: November 6, 2009 1:42:05 GMT+08:00
Subject: Broadband Forum liaison to IETF on IPv6 security

Dear colleagues,

For your review, please see the liaison from the Broadband Forum attached below.

Best regards,
Robin Mersh
COO
The Broadband Forum
phone: +1 336 288 8013
cell: +1 303 596 7448




Group -

Attached is a liaison related to SAVI from the Broadband Forum, for 
your information and consideration.  Comments?

- Christian



Begin forwarded message:

> From: Robin Mersh <rmersh@broadband-forum.org>
> Date: November 6, 2009 1:42:05 GMT+08:00
> To: "fenner@fenron.com" <fenner@fenron.com>, Christian Vogt <christian.vogt@ericsson.com
> >, "fred.baker@cisco.com" <fred.baker@cisco.com>, 
> "kurtis@kurtis.pp.se" <kurtis@kurtis.pp.se>, "dromasca@avaya.com" <dromasca@avaya.com
> >, "rbonica@juniper.net" <rbonica@juniper.net>, "rdroms@cisco.com" <rdroms@cisco.com
> >, "jari.arkko@piuha.net" <jari.arkko@piuha.net>, Mark Townsley <townsley@cisco.com
> >
> Subject: Broadband Forum liaison to IETF on IPv6 security
>
> Dear colleagues,
>
> For your review, please see the liaison from the Broadband Forum 
> attached below.
>
> Best regards,
> Robin Mersh
> COO
> The Broadband Forum
> phone: +1 336 288 8013
> cell: +1 303 596 7448
> email: rmersh@broadband-forum.org
>
>
>


_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi
--Boundary_(ID_jgGKVUk5QECjxe4UUJl0cw)-- From christian.vogt@ericsson.com Thu Nov 5 20:00:17 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D4D723A6783 for ; Thu, 5 Nov 2009 20:00:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.499 X-Spam-Level: X-Spam-Status: No, score=-6.499 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v15Y6aYKB2rr for ; Thu, 5 Nov 2009 20:00:17 -0800 (PST) Received: from imr2.ericy.com (imr2.ericy.com [198.24.6.3]) by core3.amsl.com (Postfix) with ESMTP id 1D77D3A69D8 for ; Thu, 5 Nov 2009 20:00:17 -0800 (PST) Received: from eusrcmw750.eamcs.ericsson.se (eusrcmw750.exu.ericsson.se [138.85.77.50]) by imr2.ericy.com (8.13.1/8.13.1) with ESMTP id nA640cN2001922 for ; Thu, 5 Nov 2009 22:00:39 -0600 Received: from eusrcmw751.eamcs.ericsson.se ([138.85.77.51]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Thu, 5 Nov 2009 21:59:30 -0600 Received: from eusaamw0707.eamcs.ericsson.se ([147.117.20.32]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Thu, 5 Nov 2009 21:59:30 -0600 Received: from EUSAACMS0701.eamcs.ericsson.se ([169.254.1.35]) by eusaamw0707.eamcs.ericsson.se ([147.117.20.32]) with mapi; Thu, 5 Nov 2009 22:59:29 -0500 From: Christian Vogt To: SAVI Mailing List Date: Thu, 5 Nov 2009 22:59:38 -0500 Thread-Topic: Presenters please send slides Thread-Index: AcpelYmglFfqaBLARh6420JwTgJdkA== Message-ID: <548A0CEB-FE9F-44F8-A381-98A520948D90@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 06 Nov 2009 03:59:30.0325 (UTC) FILETIME=[8AAD9450:01CA5E95] Subject: [savi] Presenters please send slides X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 04:00:17 -0000 Could those of us who will present at the upcoming working group meeting please sent me their slides? I will then upload the slides to the proceedings web page. - Christian From junbi@cernet.edu.cn Fri Nov 6 04:04:02 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A11B93A6877 for ; Fri, 6 Nov 2009 04:04:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.092 X-Spam-Level: * X-Spam-Status: No, score=1.092 tagged_above=-999 required=5 tests=[AWL=0.994, BAYES_00=-2.599, FH_HAS_XAIMC=2.696, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y+TE54D2APE5 for ; Fri, 6 Nov 2009 04:04:01 -0800 (PST) Received: from cernet.edu.cn (sea.net.edu.cn [202.112.3.66]) by core3.amsl.com (Postfix) with SMTP id A4C513A6A7A for ; Fri, 6 Nov 2009 04:03:57 -0800 (PST) Received: from junbiVAIO([59.66.24.163]) by cernet.edu.cn(AIMC 3.2.0.0) with SMTP id jm284af48880; Fri, 06 Nov 2009 20:04:17 +0800 Message-ID: <56F4AA901B6841CEA6C0C127FAA54677@junbiVAIO> From: "Bi Jun" To: "Eric Levy-Abegnoli" References: <001D73EA1D454F0BAE91F989B597D73D@junbiVAIO><4AEEDCAD.1000800@cisco.com> In-Reply-To: Date: Fri, 6 Nov 2009 20:04:25 +0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0531_01CA5F1C.56DBF860" X-Priority: 3 X-MSMail-Priority: Normal Importance: Normal X-Mailer: Microsoft Windows Live Mail 14.0.8064.206 X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8064.206 X-AIMC-AUTH: junbi X-AIMC-MAILFROM: junbi@cernet.edu.cn X-AIMC-Msg-ID: 1lJ8XGXB Cc: SAVI Mailing List Subject: Re: [savi] SAVI Solution for DHCPv4/v6 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 12:04:02 -0000 ÕâÊÇÒ»·â MIME ¸ñʽµÄ¶à·½Óʼþ¡£ ------=_NextPart_000_0531_01CA5F1C.56DBF860 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: quoted-printable Dear Eric, In response your comment on using option 82 to store the port info to = reduce the "START" state,=20 we consulted some vendors, not all DHCP servers support option 82, so = that might be a problem when the SAVI=A1=A1 device is widely deployed. Another response from the switch vendor is = that inserting the option in DHCP packet=20 is estimated to consume the similar or more CPU resource than creating a = "START" state.=20 There is one situation that if the anchor is MAC (need the MAC is = unspoofable, by deploying some IEEE tech such 802.1ae/af,=20 which is not the common case), then the "START" state is not needed. Anyway, thank you very much for your valuable comments, and we are = considering to adopt your suggestion as=20 an option (or open issue) in the draft. thanks, Jun Bi From: Bi Jun=20 Sent: Tuesday, November 03, 2009 6:45 PM To: Eric Levy-Abegnoli=20 Cc: SAVI Mailing List=20 Subject: Re: [savi] SAVI Solution for DHCPv4/v6 Dear Eric, Thank you very much for your comments. Please see my reply below. Best Regards, Jun Bi From: Eric Levy-Abegnoli=20 Sent: Monday, November 02, 2009 9:20 PM To: Bi Jun=20 Cc: SAVI Mailing List=20 Subject: Re: [savi] SAVI Solution for DHCPv4/v6 Jun Bi and all, I think the document is a reasonnably good shape. I had however a few = substantial comments made offline, that I'd like to repeat=20 the mailing list (note that they are all listed already in the doc as = open issues, but the RA filtering) - Section 9.4: Router Advertisements have nothing to do with the SAVI = charter. For that, there is draft-ietf-v6ops-ra-guard. So I don't think it belongs here or in the framework document. bj: A good suggestion. The address prefix configuration security is = very important for source address validation, so the SAVI draft must=20 mention it. Since there is a related draft, we plan to move this = part into the "security consideration". After the = draft-ietf-v6ops-ra-guard is finalized (as a RFC), if at that time, the = solution in that rfc works for SAVI requirement, then we remove the text = and state that the SAVI device must conform to that rfc. - Section 7 (and subsequent) I don't like the idea of creating a state = "START" on the request, and I think in most cases, the state creation could happen on the reply. Otherwise, there is an obvious DoS attack = that would fill the binding table with as many "START" entries as allowed (max described in section 16 help = protecting the box, but not the anchor) and prevent legitimate entries to be created. =20 From my reading, a state "START" is created upon receiving a REQUEST = message. In most cases, creating the state on the REPLY should work and be a lot safer. That is whenever the REPLY have enough = information to create the entry and associate it with the requesting = anchor.=20 For instance, if the anchor is the MAC, then the response has it. If = the anchor is the port, upon receiving the REPLY, it can be found in the option 82. And if there is no option 82 (I am wondering if the switch = could not insert it all the time?), then there is the switch L2 mapping = table.=20 So I'd like this state to be removed or a least used as an "optionnal = but dangerous" correlation mechanism. bj: In our opinion, the most scenarios will be SAVI-host = connections. In that case, host directly attached to SAVI-host port, so = there is be no=20 security threaten in this case. If a non-savi switch is connected to = SAVI-poly port, what you mentioned might be a problem. But please note = that=20 if we remove this state, then if the MAC-port mapping table is = poisoned by an attacked launched between REQUEST and REPLY, the SAVI = switch=20 will lost the source port, there will another security threaten (with = this "START" state, the REPLY can be forwarded to the correct source = port by=20 the binding table when the MAP-port mapping table is changed). Therefore = by trading off, we intend to keep it (but will consider to mentioned the potential problem for SAVI-poly port).=20 Actually, the SAVI-ploy port (A SAVI switch connects to a non-SAVI = switch) is really not recommend indeed in our opinion, because it can = not achieve the host-granularity anti-spoofing, which is very import for = security, management and billing purposes. The only case I believe the = SAVI-poly case is useful is that a person in a office connect a hub to = SAVI-switch, then connect his multiple hosts to the hub (as the case we = discussed with Marcelo, Erik, Christian on the last day of IETF 75). In = this case, I think the user should be reasonable for the attacking = between his own hosts). - My other substantial comment is about the interactions between ND (or = ARP) and DHCP. My understanding of DHCP is=20 that it is the client responsability to verify the address uniqueness = and to DHCPDECLINE in case of a collision. So it should be sufficient to refer to DHCP messages, and if not, i'd like to see the = rational for it. I have also suggested that whatever additional interactions there = maybe should rather be described in the=20 framework document. =20 bj: Even it is a client's resposability to verify the address = uniqueness, the SAVI device must make sure the client have done it. If the client didn't complete the DAD procedure, the SAVI device = has the right to drop the packets as a punishment. Eric Bi Jun a =A8=A6crit :=20 Dear WG members, Please read the SAVI solution for DHCP. =20 This draft is for DHCP case. We removed the text on SLAAC of CPS-01 = and contributed to SAVI SLAAC draft. This version have taken the suggestions from Christian, Eric = Levy-Abegnoli , Alberto Garc=A8=AAa, etc. Thanks to all of them. Please provide your comments. thanks, Jun Bi http://www.ietf.org/id/draft-bi-savi-cps-02.txt =20 SAVI Solution for DHCPv4/v6 draft-bi-savi-cps-02.txt Abstract This document specifies the procedure of setting up bindings = between DHCPv4 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address and anchor (refer to [SAVI-framework]) on SAVI (Source Address = Validation Improvements) device. The bindings can be used to filter packets = with forged IP addresses. -------------------------------------------------------------------------= ----- _______________________________________________ savi mailing list savi@ietf.org https://www.ietf.org/mailman/listinfo/savi =20 -------------------------------------------------------------------------= ------- _______________________________________________ savi mailing list savi@ietf.org https://www.ietf.org/mailman/listinfo/savi ------=_NextPart_000_0531_01CA5F1C.56DBF860 Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable
Dear Eric,
 
In response your comment on using option 82 to = store the=20 port info to reduce the "START" state,
we consulted some vendors, not all DHCP = servers support=20 option 82, so that might be a problem when the SAVI=A1=A1
device is widely deployed.  Another = response=20 from the switch vendor is that inserting the option in DHCP = packet=20
is estimated to consume the similar or more = CPU resource=20 than creating a "START" state.
There is one situation that if the anchor is = MAC (need=20 the MAC is unspoofable, by deploying some IEEE tech such 802.1ae/af,=20
which is not the common case), then the = "START" state is=20 not needed.
Anyway, thank you very much for your valuable = comments,=20 and we are considering to adopt your suggestion as
an option (or open issue) in the = draft.
 
thanks,
Jun Bi

From: Bi Jun
Sent: Tuesday, November 03, 2009 6:45 PM
Subject: Re: [savi] SAVI Solution for = DHCPv4/v6

Dear Eric,
 
Thank you very much for your = comments.
Please see my reply below.
 
Best Regards,
Jun Bi

Sent: Monday, November 02, 2009 9:20 PM
To: Bi Jun
Subject: Re: [savi] SAVI Solution for = DHCPv4/v6

Jun Bi and all,
I think the document is a reasonnably = good shape.=20 I had however a few substantial comments made offline, that I'd like to = repeat=20
the mailing list (note that they are all listed already in the doc = as open=20 issues, but the RA filtering)

- Section 9.4: Router = Advertisements have=20 nothing to do with the SAVI charter. For that, there is=20 draft-ietf-v6ops-ra-guard. So
I don't think it belongs here or in the = framework document.
 
  bj: A good suggestion. The address prefix=20 configuration security is very important for source address validation, = so the=20 SAVI draft must
     mention it. Since there is = a=20 related draft, we plan to move this part into the "security = consideration".=20 After the = draft-ietf-v6ops-ra-guard is=20 finalized (as a RFC), if at that time, the solution in that rfc works = for SAVI=20 requirement, then we remove the text and state that the SAVI device=20 must conform to that = rfc.


- Section 7 (and = subsequent) I=20 don't like the idea of creating a state "START" on the request, and I = think in=20 most cases, the state creation
  could happen on the reply. = Otherwise,=20 there is an obvious DoS attack that would fill the binding table with=20 as
  many "START" entries as allowed (max described in section = 16 help=20 protecting the box, but not the anchor) and prevent legitimate = entries
 =20 to be created. 
  From my reading, a state "START" is = created upon=20 receiving a REQUEST message. In most cases, creating the state on the = REPLY=20 should
  work and be a lot safer. That is whenever the REPLY = have enough=20 information to create the entry and associate it with the requesting = anchor.=20
  For instance, if the anchor is the MAC, then the response has = it. If=20 the anchor is the port, upon receiving the REPLY, it can be found in=20 the
  option 82. And if there is no option 82 (I am wondering if = the=20 switch could not insert it all the time?), then there is the switch L2 = mapping=20 table.
  So I'd like this state to be removed or a least used = as an=20 "optionnal but dangerous" correlation mechanism.
 
 
 
   bj:  In our = opinion, the most=20 scenarios will be SAVI-host connections. In that case, host directly = attached to=20 SAVI-host port, so there is be no
    security threaten = in this=20 case. If a non-savi switch is connected to SAVI-poly port, what you = mentioned=20 might be a problem. But please note that
  if we remove this state, then = if the=20 MAC-port mapping table is poisoned by an attacked launched between = REQUEST and=20 REPLY, the SAVI switch
 will lost the source port, = there will=20 another security threaten (with this "START" state, the REPLY can = be=20 forwarded to the correct source port by
the binding table when the MAP-port = mapping table=20 is changed). Therefore by trading off, we intend to keep it (but will = consider=20 to mentioned the
  potential problem for SAVI-poly port).=20
 
  Actually, the SAVI-ploy port = (A SAVI=20 switch connects to a non-SAVI switch) is really not recommend = indeed in our=20 opinion, because it can not achieve the host-granularity anti-spoofing, = which is=20 very import for security, management and billing purposes. The only = case I=20 believe the SAVI-poly case is useful is that a person in  a office connect a hub to = SAVI-switch,=20 then connect his multiple hosts to the hub (as the case we discussed = with Marcelo, Erik, Christian on the last = day of IETF=20 75). In this case, I think the user should be reasonable for = the=20 attacking between his own hosts).
 
 
 

- My other substantial comment is about the interactions = between ND (or=20 ARP) and DHCP. My understanding of DHCP is
  that it is the = client=20 responsability to verify the address uniqueness and to DHCPDECLINE in = case of a=20 collision. So it should be
  sufficient to refer to DHCP = messages, and=20 if not, i'd like to see the rational for it.
  I have also = suggested=20 that whatever additional interactions there maybe should rather be = described in=20 the
  framework document.      =
 
 
 
  bj: Even it is a client's resposability to = verify the=20 address uniqueness, the SAVI device must make sure the client have done=20 it.
       =20 If the client didn't complete the DAD procedure, the SAVI device has the = right=20 to drop the packets as a punishment.
 
 

Eric


Bi Jun a =A8=A6crit :
Dear WG members,
 
Please read the SAVI solution for = DHCP. 
This=20 draft is for DHCP case. We removed the text on SLAAC of CPS-01 and = contributed=20 to SAVI SLAAC draft.
This version have taken the suggestions from=20 Christian, Eric Levy-Abegnoli , Alberto Garc=A8=AAa, etc. Thanks to = all of=20 them.
Please provide your = comments.
thanks,
Jun=20 Bi
 
  http://www.ietf.org/id/draft-bi-savi-cps-02.txt<= /A>        
 
       =20        SAVI Solution for=20 = DHCPv4/v6
          =             &= nbsp; =20 draft-bi-savi-cps-02.txt
 
Abstract

   This document = specifies=20 the procedure of setting up bindings between
   DHCPv4=20 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address = and
  =20 anchor (refer to [SAVI-framework]) on SAVI (Source Address=20 Validation
   Improvements) device. The bindings can be = used to=20 filter packets with
   forged IP = addresses.

_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/=
mailman/listinfo/savi

_______________________________________________
savi mailing=20 list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi
------=_NextPart_000_0531_01CA5F1C.56DBF860-- From lint@h3c.com Fri Nov 6 04:24:22 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DF9A63A68A8 for ; Fri, 6 Nov 2009 04:24:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.487 X-Spam-Level: ** X-Spam-Status: No, score=2.487 tagged_above=-999 required=5 tests=[AWL=1.188, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, MIME_BASE64_BLANKS=0.041, MIME_BASE64_TEXT=1.753, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vKADbuTzfQf1 for ; Fri, 6 Nov 2009 04:24:21 -0800 (PST) Received: from huawei-3com.com (unknown [60.191.123.56]) by core3.amsl.com (Postfix) with ESMTP id 8D01E3A67E1 for ; Fri, 6 Nov 2009 04:24:20 -0800 (PST) Received: from huawei-3com.com (localhost [127.0.0.1]) by h3cml02-in.huawei-3com.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0KSO002CPTKKGY@h3cml02-in.huawei-3com.com> for savi@ietf.org; Fri, 06 Nov 2009 20:33:56 +0800 (CST) Received: from h3cmta02-ds.h3c.com ([172.25.12.70]) by h3cml02-in.huawei-3com.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0KSO0037VTKKAZ@h3cml02-in.huawei-3com.com> for savi@ietf.org; Fri, 06 Nov 2009 20:33:56 +0800 (CST) Received: from smtp2.h3c.com ([172.25.14.252]) by h3cmta02-ds.h3c.com (Lotus Domino Release 8.5FP1) with ESMTP id 2009110620204090-647133 ; Fri, 06 Nov 2009 20:20:40 +0800 Received: from unknown (HELO l00450) ([10.153.17.51]) by smtp2.h3c.com with ESMTP; Fri, 06 Nov 2009 20:22:30 +0800 Date: Fri, 06 Nov 2009 20:23:31 +0800 From: Lin Tao To: Bi Jun , Eric Levy-Abegnoli Message-id: <009b01ca5edb$f45f5e60$3311990a@h3c.huawei3com.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Outlook Express 6.00.2900.3598 Content-type: text/plain; charset=gb2312 Content-transfer-encoding: base64 X-Priority: 3 (Normal) X-MSMail-priority: Normal X-MIMETrack: Itemize by SMTP Server on h3cmta02-ds/h3c(Release 8.5FP1|June 15, 2009) at 2009-11-06 20:20:40, Serialize by Router on h3cmta02-ds/h3c(Release 8.5FP1|June 15, 2009) at 2009-11-06 20:20:41, Serialize complete at 2009-11-06 20:20:41 References: <001D73EA1D454F0BAE91F989B597D73D@junbiVAIO> <4AEEDCAD.1000800@cisco.com> Cc: SAVI Mailing List Subject: Re: [savi] SAVI Solution for DHCPv4/v6 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 12:24:23 -0000 RGVhciBCaSBhbmQgRXJpYzoNCg0KSSB0aGluayB0aGlzIGRvY3VtZW50IGlzIHJlYXNvbmFibHkg Z29vZCBzaGFwZSB0b28uIExpa2UgSVB2NCwgaXQncyBvYnZpb3VzIHRvIGNyZWF0ZSBiaW5kaW5n IGVudHJ5IGFjY29yZGluZyBESENQdjYgbWVzc2FnZS4gSXQgaXMgd29ydGggdG8gYmVjb21lIGEg U0FWSSBncm91cCBkcmFmdC4NCg0KQnV0IEknbSBhZnJhaWQgb2YgdGhlIG51bWVyb3VzIHN0YXRl LiBBcyB0aGUgYWNjZXNzIGRldmljZSwgU0FWSSBtdXN0IHNpbXBsZXIgYW5kIHNpbXBsZXIsIHRo ZSBudW1lcm91cyB3aWxsIGNvbXBsZXggaXQuIFNob3VsZCB3ZSBoYXZlIGEgc2ltcGxlIHNvbHV0 aW9uPw0KDQpBbm90aGVyIHF1ZXN0aW9uLCBob3cgdG8gZGVmZW5kIHRoYXQgYSBwc2V1ZG8gaG9z dCBmb3JnZSB0aGUgY29uZmlybSBtZXNzYWdlIHRvIGNoYW5nZSB0aGUgYmluZGluZyBlbnRyeSdz IHBvcnQ/IE1heWJlIHNlbmRpbmcgYSBOUyB0byBvcmlnaW4gcG9ydCBjYW4gYXZvaWQgdGhpcyBh dHRhY2suIEJUVywgc29tZSBESENQdjYgc2VydmVyJ3MgUmVwbHkgZG9lc24ndCBjYXJyeSB0aGUg SUEgYWRkcmVzcydzIGxpZmV0aW1lLCB0aGUgc2FtZSBhcyBjb21maXJtLCBzbyB0aGUgYmluZGlu ZyBlbnRyeSBoYXNuJ3QgbGlmZXRpbWUuDQoNCg0KTGluIFRhbw0KDQoNCi0tLS0tIE9yaWdpbmFs IE1lc3NhZ2UgLS0tLS0gDQpGcm9tOiAiQmkgSnVuIiA8anVuYmlAY2VybmV0LmVkdS5jbj4NClRv OiAiRXJpYyBMZXZ5LUFiZWdub2xpIiA8ZWxldnlhYmVAY2lzY28uY29tPg0KQ2M6ICJTQVZJIE1h aWxpbmcgTGlzdCIgPHNhdmlAaWV0Zi5vcmc+DQpTZW50OiBUdWVzZGF5LCBOb3ZlbWJlciAwMywg MjAwOSA2OjQ1IFBNDQpTdWJqZWN0OiBSZTogW3NhdmldIFNBVkkgU29sdXRpb24gZm9yIERIQ1B2 NC92Ng0KDQoNCj4gRGVhciBFcmljLA0KPiANCj4gVGhhbmsgeW91IHZlcnkgbXVjaCBmb3IgeW91 ciBjb21tZW50cy4NCj4gUGxlYXNlIHNlZSBteSByZXBseSBiZWxvdy4NCj4gDQo+IEJlc3QgUmVn YXJkcywNCj4gSnVuIEJpDQo+IA0KPiANCj4gRnJvbTogRXJpYyBMZXZ5LUFiZWdub2xpIA0KPiBT ZW50OiBNb25kYXksIE5vdmVtYmVyIDAyLCAyMDA5IDk6MjAgUE0NCj4gVG86IEJpIEp1biANCj4g Q2M6IFNBVkkgTWFpbGluZyBMaXN0IA0KPiBTdWJqZWN0OiBSZTogW3NhdmldIFNBVkkgU29sdXRp b24gZm9yIERIQ1B2NC92Ng0KPiANCj4gDQo+IEp1biBCaSBhbmQgYWxsLA0KPiBJIHRoaW5rIHRo ZSBkb2N1bWVudCBpcyBhIHJlYXNvbm5hYmx5IGdvb2Qgc2hhcGUuIEkgaGFkIGhvd2V2ZXIgYSBm ZXcgc3Vic3RhbnRpYWwgY29tbWVudHMgbWFkZSBvZmZsaW5lLCB0aGF0IEknZCBsaWtlIHRvIHJl cGVhdCANCj4gdGhlIG1haWxpbmcgbGlzdCAobm90ZSB0aGF0IHRoZXkgYXJlIGFsbCBsaXN0ZWQg YWxyZWFkeSBpbiB0aGUgZG9jIGFzIG9wZW4gaXNzdWVzLCBidXQgdGhlIFJBIGZpbHRlcmluZykN Cj4gDQo+IC0gU2VjdGlvbiA5LjQ6IFJvdXRlciBBZHZlcnRpc2VtZW50cyBoYXZlIG5vdGhpbmcg dG8gZG8gd2l0aCB0aGUgU0FWSSBjaGFydGVyLiBGb3IgdGhhdCwgdGhlcmUgaXMgZHJhZnQtaWV0 Zi12Nm9wcy1yYS1ndWFyZC4gU28NCj4gSSBkb24ndCB0aGluayBpdCBiZWxvbmdzIGhlcmUgb3Ig aW4gdGhlIGZyYW1ld29yayBkb2N1bWVudC4NCj4gDQo+ICBiajogQSBnb29kIHN1Z2dlc3Rpb24u IFRoZSBhZGRyZXNzIHByZWZpeCBjb25maWd1cmF0aW9uIHNlY3VyaXR5IGlzIHZlcnkgaW1wb3J0 YW50IGZvciBzb3VyY2UgYWRkcmVzcyB2YWxpZGF0aW9uLCBzbyB0aGUgU0FWSSBkcmFmdCBtdXN0 IA0KPiAgICAgbWVudGlvbiBpdC4gU2luY2UgdGhlcmUgaXMgYSByZWxhdGVkIGRyYWZ0LCB3ZSBw bGFuIHRvIG1vdmUgdGhpcyBwYXJ0IGludG8gdGhlICJzZWN1cml0eSBjb25zaWRlcmF0aW9uIi4g QWZ0ZXIgdGhlIGRyYWZ0LWlldGYtdjZvcHMtcmEtZ3VhcmQgaXMgZmluYWxpemVkIChhcyBhIFJG QyksIGlmIGF0IHRoYXQgdGltZSwgdGhlIHNvbHV0aW9uIGluIHRoYXQgcmZjIHdvcmtzIGZvciBT QVZJIHJlcXVpcmVtZW50LCB0aGVuIHdlIHJlbW92ZSB0aGUgdGV4dCBhbmQgc3RhdGUgdGhhdCB0 aGUgU0FWSSBkZXZpY2UgbXVzdCBjb25mb3JtIHRvIHRoYXQgcmZjLg0KPiANCj4gDQo+IC0gU2Vj dGlvbiA3IChhbmQgc3Vic2VxdWVudCkgSSBkb24ndCBsaWtlIHRoZSBpZGVhIG9mIGNyZWF0aW5n IGEgc3RhdGUgIlNUQVJUIiBvbiB0aGUgcmVxdWVzdCwgYW5kIEkgdGhpbmsgaW4gbW9zdCBjYXNl cywgdGhlIHN0YXRlIGNyZWF0aW9uDQo+ICBjb3VsZCBoYXBwZW4gb24gdGhlIHJlcGx5LiBPdGhl cndpc2UsIHRoZXJlIGlzIGFuIG9idmlvdXMgRG9TIGF0dGFjayB0aGF0IHdvdWxkIGZpbGwgdGhl IGJpbmRpbmcgdGFibGUgd2l0aCBhcw0KPiAgbWFueSAiU1RBUlQiIGVudHJpZXMgYXMgYWxsb3dl ZCAobWF4IGRlc2NyaWJlZCBpbiBzZWN0aW9uIDE2IGhlbHAgcHJvdGVjdGluZyB0aGUgYm94LCBi dXQgbm90IHRoZSBhbmNob3IpIGFuZCBwcmV2ZW50IGxlZ2l0aW1hdGUgZW50cmllcw0KPiAgdG8g YmUgY3JlYXRlZC4gIA0KPiAgRnJvbSBteSByZWFkaW5nLCBhIHN0YXRlICJTVEFSVCIgaXMgY3Jl YXRlZCB1cG9uIHJlY2VpdmluZyBhIFJFUVVFU1QgbWVzc2FnZS4gSW4gbW9zdCBjYXNlcywgY3Jl YXRpbmcgdGhlIHN0YXRlIG9uIHRoZSBSRVBMWSBzaG91bGQNCj4gIHdvcmsgYW5kIGJlIGEgbG90 IHNhZmVyLiBUaGF0IGlzIHdoZW5ldmVyIHRoZSBSRVBMWSBoYXZlIGVub3VnaCBpbmZvcm1hdGlv biB0byBjcmVhdGUgdGhlIGVudHJ5IGFuZCBhc3NvY2lhdGUgaXQgd2l0aCB0aGUgcmVxdWVzdGlu ZyBhbmNob3IuIA0KPiAgRm9yIGluc3RhbmNlLCBpZiB0aGUgYW5jaG9yIGlzIHRoZSBNQUMsIHRo ZW4gdGhlIHJlc3BvbnNlIGhhcyBpdC4gSWYgdGhlIGFuY2hvciBpcyB0aGUgcG9ydCwgdXBvbiBy ZWNlaXZpbmcgdGhlIFJFUExZLCBpdCBjYW4gYmUgZm91bmQgaW4gdGhlDQo+ICBvcHRpb24gODIu IEFuZCBpZiB0aGVyZSBpcyBubyBvcHRpb24gODIgKEkgYW0gd29uZGVyaW5nIGlmIHRoZSBzd2l0 Y2ggY291bGQgbm90IGluc2VydCBpdCBhbGwgdGhlIHRpbWU/KSwgdGhlbiB0aGVyZSBpcyB0aGUg c3dpdGNoIEwyIG1hcHBpbmcgdGFibGUuIA0KPiAgU28gSSdkIGxpa2UgdGhpcyBzdGF0ZSB0byBi ZSByZW1vdmVkIG9yIGEgbGVhc3QgdXNlZCBhcyBhbiAib3B0aW9ubmFsIGJ1dCBkYW5nZXJvdXMi IGNvcnJlbGF0aW9uIG1lY2hhbmlzbS4NCj4gDQo+IA0KPiANCj4gICBiajogIEluIG91ciBvcGlu aW9uLCB0aGUgbW9zdCBzY2VuYXJpb3Mgd2lsbCBiZSBTQVZJLWhvc3QgY29ubmVjdGlvbnMuIElu IHRoYXQgY2FzZSwgaG9zdCBkaXJlY3RseSBhdHRhY2hlZCB0byBTQVZJLWhvc3QgcG9ydCwgc28g dGhlcmUgaXMgYmUgbm8gDQo+ICAgIHNlY3VyaXR5IHRocmVhdGVuIGluIHRoaXMgY2FzZS4gSWYg YSBub24tc2F2aSBzd2l0Y2ggaXMgY29ubmVjdGVkIHRvIFNBVkktcG9seSBwb3J0LCB3aGF0IHlv dSBtZW50aW9uZWQgbWlnaHQgYmUgYSBwcm9ibGVtLiBCdXQgcGxlYXNlIG5vdGUgdGhhdCANCj4g IGlmIHdlIHJlbW92ZSB0aGlzIHN0YXRlLCB0aGVuIGlmIHRoZSBNQUMtcG9ydCBtYXBwaW5nIHRh YmxlIGlzIHBvaXNvbmVkIGJ5IGFuIGF0dGFja2VkIGxhdW5jaGVkIGJldHdlZW4gUkVRVUVTVCBh bmQgUkVQTFksIHRoZSBTQVZJIHN3aXRjaCANCj4gd2lsbCBsb3N0IHRoZSBzb3VyY2UgcG9ydCwg dGhlcmUgd2lsbCBhbm90aGVyIHNlY3VyaXR5IHRocmVhdGVuICh3aXRoIHRoaXMgIlNUQVJUIiBz dGF0ZSwgdGhlIFJFUExZIGNhbiBiZSBmb3J3YXJkZWQgdG8gdGhlIGNvcnJlY3Qgc291cmNlIHBv cnQgYnkgDQo+IHRoZSBiaW5kaW5nIHRhYmxlIHdoZW4gdGhlIE1BUC1wb3J0IG1hcHBpbmcgdGFi bGUgaXMgY2hhbmdlZCkuIFRoZXJlZm9yZSBieSB0cmFkaW5nIG9mZiwgd2UgaW50ZW5kIHRvIGtl ZXAgaXQgKGJ1dCB3aWxsIGNvbnNpZGVyIHRvIG1lbnRpb25lZCB0aGUNCj4gIHBvdGVudGlhbCBw cm9ibGVtIGZvciBTQVZJLXBvbHkgcG9ydCkuIA0KPiANCj4gIEFjdHVhbGx5LCB0aGUgU0FWSS1w bG95IHBvcnQgKEEgU0FWSSBzd2l0Y2ggY29ubmVjdHMgdG8gYSBub24tU0FWSSBzd2l0Y2gpIGlz IHJlYWxseSBub3QgcmVjb21tZW5kIGluZGVlZCBpbiBvdXIgb3BpbmlvbiwgYmVjYXVzZSBpdCBj YW4gbm90IGFjaGlldmUgdGhlIGhvc3QtZ3JhbnVsYXJpdHkgYW50aS1zcG9vZmluZywgd2hpY2gg aXMgdmVyeSBpbXBvcnQgZm9yIHNlY3VyaXR5LCBtYW5hZ2VtZW50IGFuZCBiaWxsaW5nIHB1cnBv c2VzLiBUaGUgb25seSBjYXNlIEkgYmVsaWV2ZSB0aGUgU0FWSS1wb2x5IGNhc2UgaXMgdXNlZnVs IGlzIHRoYXQgYSBwZXJzb24gaW4gIGEgb2ZmaWNlIGNvbm5lY3QgYSBodWIgdG8gU0FWSS1zd2l0 Y2gsIHRoZW4gY29ubmVjdCBoaXMgbXVsdGlwbGUgaG9zdHMgdG8gdGhlIGh1YiAoYXMgdGhlIGNh c2Ugd2UgZGlzY3Vzc2VkIHdpdGggTWFyY2VsbywgRXJpaywgQ2hyaXN0aWFuIG9uIHRoZSBsYXN0 IGRheSBvZiBJRVRGIDc1KS4gSW4gdGhpcyBjYXNlLCBJIHRoaW5rIHRoZSB1c2VyIHNob3VsZCBi ZSByZWFzb25hYmxlIGZvciB0aGUgYXR0YWNraW5nIGJldHdlZW4gaGlzIG93biBob3N0cykuDQo+ IA0KPiANCj4gDQo+IA0KPiAtIE15IG90aGVyIHN1YnN0YW50aWFsIGNvbW1lbnQgaXMgYWJvdXQg dGhlIGludGVyYWN0aW9ucyBiZXR3ZWVuIE5EIChvciBBUlApIGFuZCBESENQLiBNeSB1bmRlcnN0 YW5kaW5nIG9mIERIQ1AgaXMgDQo+ICB0aGF0IGl0IGlzIHRoZSBjbGllbnQgcmVzcG9uc2FiaWxp dHkgdG8gdmVyaWZ5IHRoZSBhZGRyZXNzIHVuaXF1ZW5lc3MgYW5kIHRvIERIQ1BERUNMSU5FIGlu IGNhc2Ugb2YgYSBjb2xsaXNpb24uIFNvIGl0IHNob3VsZCBiZQ0KPiAgc3VmZmljaWVudCB0byBy ZWZlciB0byBESENQIG1lc3NhZ2VzLCBhbmQgaWYgbm90LCBpJ2QgbGlrZSB0byBzZWUgdGhlIHJh dGlvbmFsIGZvciBpdC4NCj4gIEkgaGF2ZSBhbHNvIHN1Z2dlc3RlZCB0aGF0IHdoYXRldmVyIGFk ZGl0aW9uYWwgaW50ZXJhY3Rpb25zIHRoZXJlIG1heWJlIHNob3VsZCByYXRoZXIgYmUgZGVzY3Jp YmVkIGluIHRoZSANCj4gIGZyYW1ld29yayBkb2N1bWVudC4gICAgICANCj4gDQo+IA0KPiANCj4g DQo+ICBiajogRXZlbiBpdCBpcyBhIGNsaWVudCdzIHJlc3Bvc2FiaWxpdHkgdG8gdmVyaWZ5IHRo ZSBhZGRyZXNzIHVuaXF1ZW5lc3MsIHRoZSBTQVZJIGRldmljZSBtdXN0IG1ha2Ugc3VyZSB0aGUg Y2xpZW50IGhhdmUgZG9uZSBpdC4NCj4gICAgICAgIElmIHRoZSBjbGllbnQgZGlkbid0IGNvbXBs ZXRlIHRoZSBEQUQgcHJvY2VkdXJlLCB0aGUgU0FWSSBkZXZpY2UgaGFzIHRoZSByaWdodCB0byBk cm9wIHRoZSBwYWNrZXRzIGFzIGEgcHVuaXNobWVudC4NCj4gDQo+IA0KPiANCj4gRXJpYw0KPiAN Cj4gDQo+IEJpIEp1biBhIKimY3JpdCA6IA0KPiAgRGVhciBXRyBtZW1iZXJzLA0KPiANCj4gIFBs ZWFzZSByZWFkIHRoZSBTQVZJIHNvbHV0aW9uIGZvciBESENQLiAgDQo+ICBUaGlzIGRyYWZ0IGlz IGZvciBESENQIGNhc2UuIFdlIHJlbW92ZWQgdGhlIHRleHQgb24gU0xBQUMgb2YgQ1BTLTAxIGFu ZCBjb250cmlidXRlZCB0byBTQVZJIFNMQUFDIGRyYWZ0Lg0KPiAgVGhpcyB2ZXJzaW9uIGhhdmUg dGFrZW4gdGhlIHN1Z2dlc3Rpb25zIGZyb20gQ2hyaXN0aWFuLCBFcmljIExldnktQWJlZ25vbGkg LCBBbGJlcnRvIEdhcmOoqmEsIGV0Yy4gVGhhbmtzIHRvIGFsbCBvZiB0aGVtLg0KPiANCj4gIFBs ZWFzZSBwcm92aWRlIHlvdXIgY29tbWVudHMuDQo+ICB0aGFua3MsDQo+ICBKdW4gQmkNCj4gDQo+ ICAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvaWQvZHJhZnQtYmktc2F2aS1jcHMtMDIudHh0ICAgICAg ICANCj4gDQo+ICAgICAgICAgICAgICAgICBTQVZJIFNvbHV0aW9uIGZvciBESENQdjQvdjYNCj4g ICAgICAgICAgICAgICAgICAgICAgICAgICBkcmFmdC1iaS1zYXZpLWNwcy0wMi50eHQNCj4gDQo+ IA0KPiAgQWJzdHJhY3QNCj4gDQo+ICAgICBUaGlzIGRvY3VtZW50IHNwZWNpZmllcyB0aGUgcHJv Y2VkdXJlIG9mIHNldHRpbmcgdXAgYmluZGluZ3MgYmV0d2Vlbg0KPiAgICAgREhDUHY0IFtSRkMy MTMxXS9ESENQdjYgW1JGQzMzMTVdIGFzc2lnbmVkIHNvdXJjZSBJUCBhZGRyZXNzIGFuZA0KPiAg ICAgYW5jaG9yIChyZWZlciB0byBbU0FWSS1mcmFtZXdvcmtdKSBvbiBTQVZJIChTb3VyY2UgQWRk cmVzcyBWYWxpZGF0aW9uDQo+ICAgICBJbXByb3ZlbWVudHMpIGRldmljZS4gVGhlIGJpbmRpbmdz IGNhbiBiZSB1c2VkIHRvIGZpbHRlciBwYWNrZXRzIHdpdGgNCj4gICAgIGZvcmdlZCBJUCBhZGRy ZXNzZXMuDQo+IA0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gc2F2aSBtYWlsaW5nIGxpc3QNCj4gc2F2 aUBpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhdmkN Cj4gIA0KPg0KDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCg0KPiBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBzYXZpIG1haWxpbmcgbGlzdA0K PiBzYXZpQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v c2F2aQ0KPg== From lint@h3c.com Fri Nov 6 09:17:21 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D95523A68F7 for ; Fri, 6 Nov 2009 09:17:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 4.405 X-Spam-Level: **** X-Spam-Status: No, score=4.405 tagged_above=-999 required=5 tests=[BAYES_50=0.001, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, MANGLED_MEN=2.3, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xyDvnq-Kdmwb for ; Fri, 6 Nov 2009 09:17:20 -0800 (PST) Received: from huawei-3com.com (unknown [60.191.123.50]) by core3.amsl.com (Postfix) with ESMTP id 51E063A68E9 for ; Fri, 6 Nov 2009 09:17:19 -0800 (PST) Received: from huawei-3com.com (localhost [127.0.0.1]) by h3cml01-in.huawei-3com.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0KSP001H56PHDO@h3cml01-in.huawei-3com.com> for savi@ietf.org; Sat, 07 Nov 2009 01:17:41 +0800 (CST) Received: from huawei-3com.com ([172.25.15.135]) by h3cml01-in.huawei-3com.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0KSP002L46PH1M@h3cml01-in.huawei-3com.com> for savi@ietf.org; Sat, 07 Nov 2009 01:17:41 +0800 (CST) Received: from [172.25.15.126] (Forwarded-For: [125.96.99.239]) by h3cmc02-in.huawei-3com.com (mshttpd); Sat, 07 Nov 2009 01:17:41 +0800 Date: Sat, 07 Nov 2009 01:17:41 +0800 From: lintao 00450 To: Bi Jun , Eric Levy-Abegnoli Message-id: <14d19b147a84.147a8414d19b@huawei-3com.com> MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 1.25 (built Mar 3 2004) Content-type: multipart/mixed; boundary="Boundary_(ID_zjObZfuPjwan36RJ8FYkxg)" Content-language: zh-CN X-Accept-Language: zh-CN Priority: normal Cc: SAVI Mailing List , fuqiang@h3c.com Subject: [savi] FW:Re: SAVI Solution for DHCPv4/v6 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 17:17:21 -0000 This is a multi-part message in MIME format. --Boundary_(ID_zjObZfuPjwan36RJ8FYkxg) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline I'll clarify that I think it is worth to become a SAVI WG as SAVI solution for DHCP. The follow discussion is tiny and help it clearer. In fact, we have deploy it in our product. > > But I'm afraid of the numerous state. As the access device, SAVI > must simpler and simpler, the numerous will complex it. Should we > have a simple solution? > > Another question, how to defend that a pseudo host forge the > confirm message to change the binding entry's port? Maybe sending > a NS to origin port can avoid this attack. BTW, some DHCPv6 > server's Reply doesn't carry the IA address's lifetime, the same > as comfirm, so the binding entry hasn't lifetime. > > > Lin Tao --Boundary_(ID_zjObZfuPjwan36RJ8FYkxg) Content-type: message/rfc822 Content-disposition: inline MIME-version: 1.0 Content-type: TEXT/PLAIN Content-transfer-encoding: 8BIT Eën®zZ¶¾&èºw²'­~ŠàEçŠ÷~º&‡w&—M¢žWZ¥¸nk¢ÝÊ&r‰µïm¹×võ¼¡ÝÉœÓh§†æ°z-Ü¢g(š#åjw­1ë,j§'«½êùØz-,uÛ–îŠ[Lj½öÓN0ŠØDHÄÏ‰Ý Hí41u“äµ½‡w&sM¢žšÁè·r‰œ¢gè®X§¶Ür‰…®-:6‹öÓOvÓn9ïí<Ó@’Mœz+ÞuúèšÜš]6Šyhq©a¢ËuÛ½4Õ¼¡ÝÉ¥Óh§†æ°z-Ü¢g(š#åjw­1ë,j§'«½êùØz-,uÛ–îŠ[Lj½öÓN0ŠØDHÄÏ‰Ý Hí4Ø?S)˜‡w&—M¢žšÁè·r‰œ¢gè®X§¶Ür‰ŽD#Ó–)í‡w¢ak‹N¢ý´ÓÝ´ßuûO4Ð$“EçŠ÷~º&‡w&µ­6vÈwqÊ&×½¶ç]»Ñ¼¡ÝÉ¥Óh§†æ°z-Ü¢g(š#åjw­1ë,j§'«½êùØz-,uÛ–îŠ[Lj½öÓN0ŠØDHÄÏ‰Ý Hí4ßÏS)€‡w&—M¢žšÁè·r‰œ¢gè®X§¶Ür‰ŽD#Ó–)í‡w¢ak‹N¢ý´ÓÝ´ßtûO4Ð$“EçŠ÷~º&²kiÖÜr‰µïm¹×¹Ù¼¡ÝÉ­kM²Ür‰‹¢Û¬‰¢ž„^•æ¬{ÎE?\"¶13âwm4÷]tëm6Óž=ó®;×~…®-:6‹öÓOvÓm9ãí<ÓD^qè¯y×ë¢išŠXžµú+ƒ®5ïO|ßfò²kiÖÜr‰°ŠØDHÄϸ´èÚ/ÛM=ÛM¶Óß´óMyÇ¢½ç_®‰µÛ½4ÖZjXh²ÝvïM5o'(­íÚšÉ\¢cè²×âÇ­„DŒLø ]A p:ð>®-:6‹öÓOtãn6ßO4Ðô“EçŠ÷~º&–‡–,¶ZjXh²ÝvïM5o'(­íÚšÉ\¢cè²×âÇ­„DŒLø _@ëp:𢻾'(­íÚšÉ\¢ak‹N¢ý´ÓÝ8Û¶ÓÍ4=$ÑyÇ¢½ç_®‰¦j)bz×许׽=ó}›ÊZjXh²×(­íÚšÉ\¢mvïM5jf¯ŠÇg{ h®ÝtÓn0ŠØDHÄωÛÊ ‰íz{mÊ—­{¦V¢ÈZ®Ç­½ß]‚¢{^žÛkj{z·§r‡bžÚ±î¸\ú⢸­Ësh®f¥\ÄŒj)i®*+ŠÜ¢¹š•s0Dëiɵé¢ÍæòHÄÏIêïzº'‡w&µ­6vÏáÝÄ^•æ¬{ÎE?RníyÛM=jÝ´ÓÝuÓ­´ÛN4IêâjX³y¼‘¢ë^®‰áÝÉ­kM³øwq¥y«ó‘OÔ›§{^vÓOZ·m4÷]tëm6ÓRz¸š–,Þr‰©•ë^jÝ´ÓÝuÓ­´ÛN5"צ‹7›É#='«½êèžÜšÖ´ÙÛ?‡wzWš±ï9ýIºwµçm4õ«vÓOu×N¶Óm9á'«‰©bÍæòF‹­zº'‡w&µ­6vÏáÝÄ^•æ¬{ÎE?RníyÛM=jÝ´ÓÝuÓ­´ÛNyIêâjX³yÊ&¦W­y«vÓOu×N¶Óm9äúÞqç^Ç¥ŠËWç§N«zƯŠ'­~Šà éb½êÞvÚ,jøœ¢··jk%r‰—:¸ Šv¥N‹¾'(­íÚšÉ\¢eÕŠ»¬IƧçZ™«â±ÙÞÁ«ZšÉ\¢eÒ¥©…•¨ 9t©jdœ¢·¶ãÎ×J–¦-ëÞ•t©jd­jÛ¬6‹¢·Û;µ¨ yÖ›¢÷÷ßkz«¢­çæ׬¶ÀX½×ÏÓMçßE ƒN Ô׎uBÎ0„Œ0‡ãÓžw0ƒ„ë€K I think this document is reasonably good shape too. Like IPv4, it's obvious to create binding entry according DHCPv6 message. It is worth to become a SAVI group draft. But I'm afraid of the numerous state. As the access device, SAVI must simpler and simpler, the numerous will complex it. Should we have a simple solution? Another question, how to defend that a pseudo host forge the confirm message to change the binding entry's port? Maybe sending a NS to origin port can avoid this attack. BTW, some DHCPv6 server's Reply doesn't carry the IA address's lifetime, the same as comfirm, so the binding entry hasn't lifetime. Lin Tao ----- Original Message ----- From: "Bi Jun" To: "Eric Levy-Abegnoli" Cc: "SAVI Mailing List" Sent: Tuesday, November 03, 2009 6:45 PM Subject: Re: [savi] SAVI Solution for DHCPv4/v6 > Dear Eric, > > Thank you very much for your comments. > Please see my reply below. > > Best Regards, > Jun Bi > > > From: Eric Levy-Abegnoli > Sent: Monday, November 02, 2009 9:20 PM > To: Bi Jun > Cc: SAVI Mailing List > Subject: Re: [savi] SAVI Solution for DHCPv4/v6 > > > Jun Bi and all, > I think the document is a reasonnably good shape. I had however a few substantial comments made offline, that I'd like to repeat > the mailing list (note that they are all listed already in the doc as open issues, but the RA filtering) > > - Section 9.4: Router Advertisements have nothing to do with the SAVI charter. For that, there is draft-ietf-v6ops-ra-guard. So > I don't think it belongs here or in the framework document. > > bj: A good suggestion. The address prefix configuration security is very important for source address validation, so the SAVI draft must > mention it. Since there is a related draft, we plan to move this part into the "security consideration". After the draft-ietf-v6ops-ra-guard is finalized (as a RFC), if at that time, the solution in that rfc works for SAVI requirement, then we remove the text and state that the SAVI device must conform to that rfc. > > > - Section 7 (and subsequent) I don't like the idea of creating a state "START" on the request, and I think in most cases, the state creation > could happen on the reply. Otherwise, there is an obvious DoS attack that would fill the binding table with as > many "START" entries as allowed (max described in section 16 help protecting the box, but not the anchor) and prevent legitimate entries > to be created. > From my reading, a state "START" is created upon receiving a REQUEST message. In most cases, creating the state on the REPLY should > work and be a lot safer. That is whenever the REPLY have enough information to create the entry and associate it with the requesting anchor. > For instance, if the anchor is the MAC, then the response has it. If the anchor is the port, upon receiving the REPLY, it can be found in the > option 82. And if there is no option 82 (I am wondering if the switch could not insert it all the time?), then there is the switch L2 mapping table. > So I'd like this state to be removed or a least used as an "optionnal but dangerous" correlation mechanism. > > > > bj: In our opinion, the most scenarios will be SAVI-host connections. In that case, host directly attached to SAVI-host port, so there is be no > security threaten in this case. If a non-savi switch is connected to SAVI-poly port, what you mentioned might be a problem. But please note that > if we remove this state, then if the MAC-port mapping table is poisoned by an attacked launched between REQUEST and REPLY, the SAVI switch > will lost the source port, there will another security threaten (with this "START" state, the REPLY can be forwarded to the correct source port by > the binding table when the MAP-port mapping table is changed). Therefore by trading off, we intend to keep it (but will consider to mentioned the > potential problem for SAVI-poly port). > > Actually, the SAVI-ploy port (A SAVI switch connects to a non-SAVI switch) is really not recommend indeed in our opinion, because it can not achieve the host-granularity anti-spoofing, which is very import for security, management and billing purposes. The only case I believe the SAVI-poly case is useful is that a person in a office connect a hub to SAVI-switch, then connect his multiple hosts to the hub (as the case we discussed with Marcelo, Erik, Christian on the last day of IETF 75). In this case, I think the user should be reasonable for the attacking between his own hosts). > > > > > - My other substantial comment is about the interactions between ND (or ARP) and DHCP. My understanding of DHCP is > that it is the client responsability to verify the address uniqueness and to DHCPDECLINE in case of a collision. So it should be > sufficient to refer to DHCP messages, and if not, i'd like to see the rational for it. > I have also suggested that whatever additional interactions there maybe should rather be described in the > framework document. > > > > > bj: Even it is a client's resposability to verify the address uniqueness, the SAVI device must make sure the client have done it. > If the client didn't complete the DAD procedure, the SAVI device has the right to drop the packets as a punishment. > > > > Eric > > > Bi Jun a ¨¦crit : > Dear WG members, > > Please read the SAVI solution for DHCP. > This draft is for DHCP case. We removed the text on SLAAC of CPS-01 and contributed to SAVI SLAAC draft. > This version have taken the suggestions from Christian, Eric Levy-Abegnoli , Alberto Garc¨ªa, etc. Thanks to all of them. > > Please provide your comments. > thanks, > Jun Bi > > http://www.ietf.org/id/draft-bi-savi-cps-02.txt > > SAVI Solution for DHCPv4/v6 > draft-bi-savi-cps-02.txt > > > Abstract > > This document specifies the procedure of setting up bindings between > DHCPv4 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address and > anchor (refer to [SAVI-framework]) on SAVI (Source Address Validation > Improvements) device. The bindings can be used to filter packets with > forged IP addresses. > > ------------------------------------------------------------------------------ > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > > -------------------------------------------------------------------------------- > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > _______________________________________________ savi mailing list savi@ietf.org https://www.ietf.org/mailman/listinfo/savi --Boundary_(ID_zjObZfuPjwan36RJ8FYkxg)-- From elevyabe@cisco.com Fri Nov 6 09:20:49 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E23E128C149 for ; Fri, 6 Nov 2009 09:20:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.398 X-Spam-Level: X-Spam-Status: No, score=-7.398 tagged_above=-999 required=5 tests=[AWL=-1.400, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_53=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ykQSL12SuXuq for ; Fri, 6 Nov 2009 09:20:48 -0800 (PST) Received: from sj-iport-1.cisco.com (sj-iport-1.cisco.com [171.71.176.70]) by core3.amsl.com (Postfix) with ESMTP id 208013A6851 for ; Fri, 6 Nov 2009 09:20:48 -0800 (PST) Authentication-Results: sj-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AjgFAFfp80qrR7Hu/2dsb2JhbACCIS+CIcA8hwwIkGaCR4EfVwSBZ4oY X-IronPort-AV: E=Sophos;i="4.44,694,1249257600"; d="scan'208,217";a="267416893" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-1.cisco.com with ESMTP; 06 Nov 2009 17:21:11 +0000 Received: from xbh-ams-101.cisco.com (xbh-ams-101.cisco.com [144.254.74.71]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id nA6HL5EZ002849; Fri, 6 Nov 2009 17:21:11 GMT Received: from xmb-ams-105.cisco.com ([144.254.74.80]) by xbh-ams-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 6 Nov 2009 18:21:09 +0100 Received: from [144.254.53.124] ([144.254.53.124]) by xmb-ams-105.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 6 Nov 2009 18:21:09 +0100 Message-ID: <4AF45B05.9060403@cisco.com> Date: Fri, 06 Nov 2009 18:21:10 +0100 From: Eric Levy-Abegnoli User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Bi Jun References: <001D73EA1D454F0BAE91F989B597D73D@junbiVAIO><4AEEDCAD.1000800@cisco.com> <56F4AA901B6841CEA6C0C127FAA54677@junbiVAIO> In-Reply-To: <56F4AA901B6841CEA6C0C127FAA54677@junbiVAIO> Content-Type: multipart/alternative; boundary="------------090406000505090706060506" X-OriginalArrivalTime: 06 Nov 2009 17:21:09.0199 (UTC) FILETIME=[87D74DF0:01CA5F05] Cc: SAVI Mailing List Subject: Re: [savi] SAVI Solution for DHCPv4/v6 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 17:20:50 -0000 This is a multi-part message in MIME format. --------------090406000505090706060506 Content-Type: text/plain; charset=GB2312 Content-Transfer-Encoding: 8bit Hi Jun Bi, Bi Jun a ¨¦crit: > Dear Eric, > In response your comment on using option 82 to store the port info to > reduce the "START" state, > we consulted some vendors, not all DHCP servers support option 82, so > that might be a problem when the SAVI¡¡ > device is widely deployed. ack. > Another response fromthe switch vendor is that insertingthe option in > DHCP packet > is estimated to consume the similar or more CPU resource than creating > a "START" state. For the record, I believe we should be cautious in not driving this specification from too many implementation considerations, as there seem to be more and more such arguments brought up. I'd prefer a solid reliable secure protocol than one that can be prototyped. CPU was not my concern: It's rather early/temporary state creation. There are numerous examples (tcp syn attack is the best known) where creating states before the clinet is "confirmed" (in our case before the client is granted with an address) opened the door for nasty attacks. > There is one situation that if the anchor is MAC (need the MAC is > unspoofable, by deploying some IEEE tech such 802.1ae/af, > which is not the common case), then the "START" state is not needed. > Anyway, thank you very much for your valuable comments, and we are > considering to adopt your suggestion as > an option (or open issue) in the draft. As I said, as long as the state is clearly qualified, issues discussed and cases where it can be avoided listed, I am all fine. Thank you. Eric > thanks, > Jun Bi > > *From:* Bi Jun > *Sent:* Tuesday, November 03, 2009 6:45 PM > *To:* Eric Levy-Abegnoli > *Cc:* SAVI Mailing List > *Subject:* Re: [savi] SAVI Solution for DHCPv4/v6 > > Dear Eric, > Thank you very much for your comments. > Please see my reply below. > Best Regards, > Jun Bi > > *From:* Eric Levy-Abegnoli > *Sent:* Monday, November 02, 2009 9:20 PM > *To:* Bi Jun > *Cc:* SAVI Mailing List > *Subject:* Re: [savi] SAVI Solution for DHCPv4/v6 > > Jun Bi and all, > I think the document is a reasonnably good shape. I had however a few > substantial comments made offline, that I'd like to repeat > the mailing list (note that they are all listed already in the doc as > open issues, but the RA filtering) > > - Section 9.4: Router Advertisements have nothing to do with the SAVI > charter. For that, there is draft-ietf-v6ops-ra-guard. So > I don't think it belongs here or in the framework document. > * bj: A good suggestion. The address prefix configuration security is > very important for source address validation, so the SAVI draft must * > * mention it. Since there is a related draft, we plan to move this > part into the "security consideration". After the > draft-ietf-v6ops-ra-guard**is finalized (as a RFC), if at that time, > the solution in that rfc works for SAVI requirement, then we remove > the text and state that the SAVI device mustcon**form to that rfc.* > > > - Section 7 (and subsequent) I don't like the idea of creating a state > "START" on the request, and I think in most cases, the state creation > could happen on the reply. Otherwise, there is an obvious DoS attack > that would fill the binding table with as > many "START" entries as allowed (max described in section 16 help > protecting the box, but not the anchor) and prevent legitimate entries > to be created. > From my reading, a state "START" is created upon receiving a REQUEST > message. In most cases, creating the state on the REPLY should > work and be a lot safer. That is whenever the REPLY have enough > information to create the entry and associate it with the requesting > anchor. > For instance, if the anchor is the MAC, then the response has it. If > the anchor is the port, upon receiving the REPLY, it can be found in the > option 82. And if there is no option 82 (I am wondering if the switch > could not insert it all the time?), then there is the switch L2 > mapping table. > So I'd like this state to be removed or a least used as an "optionnal > but dangerous" correlation mechanism. > bj: In our opinion, the most scenarios will be SAVI-host connections. > In that case, host directly attached to SAVI-host port, so there is be no > security threaten in this case. If a non-savi switch is connected to > SAVI-poly port, what you mentioned might be a problem. But please note > that > if we remove this state, then if the MAC-port mapping table is > poisoned by an attacked launched between REQUEST and REPLY, the SAVI > switch > will lost the source port, there will another security threaten (with > this "START" state,the REPLY can be forwarded to the correct source > port by > the binding table when the MAP-port mapping table is changed). > Therefore by trading off, we intend to keep it (but will consider to > mentioned the > potentialproblem for SAVI-polyport). > Actually, the SAVI-ploy port (A SAVI switchconnects to a non-SAVI > switch) is really not recommend indeed in our opinion, because it can > not achieve the host-granularity anti-spoofing, which is very import > for security, managementand billing purposes. The only case I believe > the SAVI-poly case is useful isthataperson in a office connect a hub > to SAVI-switch, then connect his multiple hosts to the hub (as the > case we discussed with Marcelo, Erik, Christianon the last day of IETF > 75). In this case, I thinkthe user should be reasonable for the > attacking between his own hosts). > > - My other substantial comment is about the interactions between ND > (or ARP) and DHCP. My understanding of DHCP is > that it is the client responsability to verify the address uniqueness > and to DHCPDECLINE in case of a collision. So it should be > sufficient to refer to DHCP messages, and if not, i'd like to see the > rational for it. > I have also suggested that whatever additional interactions there > maybe should rather be described in the > framework document. > * bj: Even it is a client's resposability to verify the address > uniqueness, the SAVI device must make sure the client have done it.* > If the client didn't complete the DAD procedure, the SAVI device has > the right to drop the packets as a punishment. > > Eric > > > Bi Jun a ¨¦crit: >> Dear WG members, >> Please read the SAVI solution for DHCP. >> This draft is for DHCP case. We removed the text on SLAAC of CPS-01 >> and contributed to SAVI SLAAC draft. >> This version have taken the suggestions from Christian, Eric >> Levy-Abegnoli , Alberto Garc¨ªa, etc. Thanks to all of them. >> Please provideyour comments. >> thanks, >> Jun Bi >> http://www.ietf.org/id/draft-bi-savi-cps-02.txt >> SAVI Solution for DHCPv4/v6 >> draft-bi-savi-cps-02.txt >> Abstract >> >> This document specifies the procedure of setting up bindings between >> DHCPv4 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address and >> anchor (refer to [SAVI-framework]) on SAVI (Source Address Validation >> Improvements) device. The bindings can be used to filter packets with >> forged IP addresses. >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> savi mailing list >> savi@ietf.org >> https://www.ietf.org/mailman/listinfo/savi >> > > ------------------------------------------------------------------------ > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi --------------090406000505090706060506 Content-Type: text/html; charset=GB2312 Content-Transfer-Encoding: 8bit Hi Jun Bi,
Bi Jun a ¨¦crit :
Dear Eric,
 
In response your comment on using option 82 to store the port info to reduce the "START" state,
we consulted some vendors, not all DHCP servers support option 82, so that might be a problem when the SAVI¡¡
device is widely deployed.
ack.
Another response from the switch vendor is that inserting the option in DHCP packet
is estimated to consume the similar or more CPU resource than creating a "START" state.
For the record, I believe we should be cautious in not driving this specification from too many implementation considerations, as there seem to be more and more such arguments brought up.
I'd prefer a solid reliable secure protocol than one that can be prototyped.

CPU was not my concern: It's rather early/temporary state creation. There are numerous examples (tcp syn attack is the best known) where creating states before the clinet is "confirmed" (in our case before the client is granted with an address) opened the door for nasty attacks.
There is one situation that if the anchor is MAC (need the MAC is unspoofable, by deploying some IEEE tech such 802.1ae/af,
which is not the common case), then the "START" state is not needed.
Anyway, thank you very much for your valuable comments, and we are considering to adopt your suggestion as
an option (or open issue) in the draft.
As I said, as long as the state is clearly qualified, issues discussed and cases where it can be avoided listed, I am all fine.
Thank you.
Eric
 
thanks,
Jun Bi

From: Bi Jun
Sent: Tuesday, November 03, 2009 6:45 PM
Subject: Re: [savi] SAVI Solution for DHCPv4/v6

Dear Eric,
 
Thank you very much for your comments.
Please see my reply below.
 
Best Regards,
Jun Bi

Sent: Monday, November 02, 2009 9:20 PM
To: Bi Jun
Subject: Re: [savi] SAVI Solution for DHCPv4/v6

Jun Bi and all,
I think the document is a reasonnably good shape. I had however a few substantial comments made offline, that I'd like to repeat
the mailing list (note that they are all listed already in the doc as open issues, but the RA filtering)

- Section 9.4: Router Advertisements have nothing to do with the SAVI charter. For that, there is draft-ietf-v6ops-ra-guard. So
I don't think it belongs here or in the framework document.
 
  bj: A good suggestion. The address prefix configuration security is very important for source address validation, so the SAVI draft must
     mention it. Since there is a related draft, we plan to move this part into the "security consideration". After the draft-ietf-v6ops-ra-guard is finalized (as a RFC), if at that time, the solution in that rfc works for SAVI requirement, then we remove the text and state that the SAVI device must conform to that rfc.


- Section 7 (and subsequent) I don't like the idea of creating a state "START" on the request, and I think in most cases, the state creation
  could happen on the reply. Otherwise, there is an obvious DoS attack that would fill the binding table with as
  many "START" entries as allowed (max described in section 16 help protecting the box, but not the anchor) and prevent legitimate entries
  to be created. 
  From my reading, a state "START" is created upon receiving a REQUEST message. In most cases, creating the state on the REPLY should
  work and be a lot safer. That is whenever the REPLY have enough information to create the entry and associate it with the requesting anchor.
  For instance, if the anchor is the MAC, then the response has it. If the anchor is the port, upon receiving the REPLY, it can be found in the
  option 82. And if there is no option 82 (I am wondering if the switch could not insert it all the time?), then there is the switch L2 mapping table.
  So I'd like this state to be removed or a least used as an "optionnal but dangerous" correlation mechanism.
 
 
 
   bj:  In our opinion, the most scenarios will be SAVI-host connections. In that case, host directly attached to SAVI-host port, so there is be no
    security threaten in this case. If a non-savi switch is connected to SAVI-poly port, what you mentioned might be a problem. But please note that
  if we remove this state, then if the MAC-port mapping table is poisoned by an attacked launched between REQUEST and REPLY, the SAVI switch
 will lost the source port, there will another security threaten (with this "START" state, the REPLY can be forwarded to the correct source port by
the binding table when the MAP-port mapping table is changed). Therefore by trading off, we intend to keep it (but will consider to mentioned the
  potential problem for SAVI-poly port).
 
  Actually, the SAVI-ploy port (A SAVI switch connects to a non-SAVI switch) is really not recommend indeed in our opinion, because it can not achieve the host-granularity anti-spoofing, which is very import for security, management and billing purposes. The only case I believe the SAVI-poly case is useful is that a person in  a office connect a hub to SAVI-switch, then connect his multiple hosts to the hub (as the case we discussed with Marcelo, Erik, Christian on the last day of IETF 75). In this case, I think the user should be reasonable for the attacking between his own hosts).
 
 
 

- My other substantial comment is about the interactions between ND (or ARP) and DHCP. My understanding of DHCP is
  that it is the client responsability to verify the address uniqueness and to DHCPDECLINE in case of a collision. So it should be
  sufficient to refer to DHCP messages, and if not, i'd like to see the rational for it.
  I have also suggested that whatever additional interactions there maybe should rather be described in the
  framework document.     
 
 
 
  bj: Even it is a client's resposability to verify the address uniqueness, the SAVI device must make sure the client have done it.
        If the client didn't complete the DAD procedure, the SAVI device has the right to drop the packets as a punishment.
 
 

Eric


Bi Jun a ¨¦crit :
Dear WG members,
 
Please read the SAVI solution for DHCP. 
This draft is for DHCP case. We removed the text on SLAAC of CPS-01 and contributed to SAVI SLAAC draft.
This version have taken the suggestions from Christian, Eric Levy-Abegnoli , Alberto Garc¨ªa, etc. Thanks to all of them.
Please provide your comments.
thanks,
Jun Bi
 
 
               SAVI Solution for DHCPv4/v6
                         draft-bi-savi-cps-02.txt
 
Abstract

   This document specifies the procedure of setting up bindings between
   DHCPv4 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address and
   anchor (refer to [SAVI-framework]) on SAVI (Source Address Validation
   Improvements) device. The bindings can be used to filter packets with
   forged IP addresses.

_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi

_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi

--------------090406000505090706060506-- From fred@cisco.com Thu Nov 5 14:18:04 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B1BD628C11C; Thu, 5 Nov 2009 14:18:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.448 X-Spam-Level: X-Spam-Status: No, score=-106.448 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jsg1-wGuul0m; Thu, 5 Nov 2009 14:18:03 -0800 (PST) Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by core3.amsl.com (Postfix) with ESMTP id 93F1728C118; Thu, 5 Nov 2009 14:18:03 -0800 (PST) Authentication-Results: sj-iport-5.cisco.com; dkim=neutral (message not signed) header.i=none X-Files: None : None X-IronPort-AV: E=Sophos;i="4.44,688,1249257600"; d="pdf'?scan'208,217";a="102668301" Received: from hkg-core-1.cisco.com ([64.104.123.94]) by sj-iport-5.cisco.com with ESMTP; 05 Nov 2009 22:18:22 +0000 Received: from [10.5.39.87] (tky-vpn-client-230-20.cisco.com [10.70.230.20]) by hkg-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA5MIGNX012995; Thu, 5 Nov 2009 22:18:17 GMT Message-Id: From: Fred Baker To: Erik Nordmark , Hesham Soliman , =?UTF-8?Q?JINMEI_Tatuya_/_=E7=A5=9E=E6=98=8E=E9=81=94=E5=93=89?= , Thomas Narten , Susan Thomson , william.allen.simpson@gmail.com Content-Type: multipart/alternative; boundary=Apple-Mail-283--20577923 Mime-Version: 1.0 (Apple Message framework v936) Date: Fri, 6 Nov 2009 06:18:16 +0800 References: X-Mailer: Apple Mail (2.936) X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: 6man-ads@tools.ietf.org, IETF IPv6 Mailing List , savi-ads@tools.ietf.org, Robin Mersh , v6ops-ads@tools.ietf.org, IPv6 Operations , SAVI Mailing List Subject: [savi] Fwd: Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2009 22:18:04 -0000 --Apple-Mail-283--20577923 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Gentlemen: I'm writing to you as the authors of RFCs 4861 and 4862. In a past meeting, I think the one in March, an issue came up in Savi that has now been brought to our attention in a formal manner. The problem is that in certain access network technologies, notably DSL and I believe Cable Modem, the connectivity between the CPE host or router and the ISP's first hop router is siloed - it looks like an Ethernet to the host but in fact is separated into separate channels. The effect is that while the ISP router can speak to and hear all of the CPEs it is connected to, the CPEs cannot hear each other. This has implications for Duplicate Address Detection in SLAAC. We look forward to your advice. Fred Baker IPv6 Operations Begin forwarded message: > From: Robin Mersh > Date: November 6, 2009 1:42:05 AM GMT+08:00 > To: fenner@fenron.com, christian.vogt@ericsson.com, fred.baker@cisco.com > , kurtis@kurtis.pp.se, dromasca@avaya.com, rbonica@juniper.net, rdroms@cisco.com > , jari.arkko@piuha.net, Mark Townsley > Subject: Broadband Forum liaison to IETF on IPv6 security > > Dear colleagues, > > For your review, please see the liaison from the Broadband Forum > attached below. > > Best regards, > Robin Mersh > COO > The Broadband Forum > phone: +1 336 288 8013 > cell: +1 303 596 7448 > email: rmersh@broadband-forum.org > > > > --Apple-Mail-283--20577923 Content-Type: multipart/mixed; boundary=Apple-Mail-284--20577921 --Apple-Mail-284--20577921 Content-Type: text/html; charset=US-ASCII Content-Transfer-Encoding: quoted-printable
From: = Robin Mersh <rmersh@broadband-forum.org&= gt;
Date: November 6, 2009 1:42:05 AM = GMT+08:00
=
Subject: = Broadband Forum liaison to IETF on IPv6 = security
=
Dear colleagues,

For your review, please = see the liaison from the Broadband Forum attached = below.

Best regards,
Robin = Mersh
COO
The Broadband Forum
phone: +1 = 336 288 8013
cell: +1 303 596 7448
email: rmersh@broadband-forum.org<= /div>



=
= --Apple-Mail-284--20577921 Content-Disposition: inline; filename="BBF liaison to IETF on IPv6 security.pdf" Content-Type: application/pdf; x-mac-creator=4D535744; x-unix-mode=0644; x-mac-type=50444620; name="BBF liaison to IETF on IPv6 security.pdf" Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjIgMCBvYmoKPDwgL0xlbmd0aCA0IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeNrtfV2THMeR5Hv9it67F8lMauX3h+zsTKAo6njHW1EiTbQ1 0ws4GAIQAQyEGYCH+/UXntOd2ZWZXlMDct9u90GrLUx1d1VkhEeEh8e/Dn89/OuQD04dvck5HXx2 h+jC0eXDu+vDd4c3h9/98VYfrm4Pqvzv7ZX8e3U0TuF/7v+f5/+2RHPURmlziCrLHXI+XL0+fPbt wfnyD0//8e3rw+++0Ed90Idvfzj86t9+ffj2n4c/fVu+SbvX6s4Hk9PRGRUPNh2NzjnuufN/Od15 +Sv/zger7DFnn/bdebm/83+dfufhznJH59z8zsv2d96+s7bHpLOvd14e95xxbx3DMYZD8HIrczA+ HaM5eHP0YTm/+K+v311dv717//TV4d1L+ZPTP8K9yz/s7iHf4XdfvtaHz29OH5GXX8SsDs56+UOv l/JB+ueYVWewVoVisYfg7C9rsPUoBKuOyj/uzpsG2+6swzEFfl9zVAe94L6flfu2f2LtUeVs4/2/ /NW77rJXx2x9Ol++OV1eTpdjkssm5NPlp91fa+XkqNrT1Wf9VWuOTue03F/+vr8clFwOkd07+WNW 56tvui9m5FhkZRP5aOO0XFbhdPnQX/buGKwLp2/2RX85GbmsXfdQ6iPV6hjk31w+0uXishH/Fdz5 q73v/9rL0ZD3ebr8ur+co5xzd35o/Td34m2zq+/rq/6yjXLZn2/+svtqTl53iNmTR+7kjOuQ8+Vf X15OqTzz01e77U1Ju6PNTpOn5p2RyypfvtCLr+ajOtoUE3ljPlk5Cvp8+dvuctBysuTZLPPPDjYf ta03//0ef2GM/I0Et31nr5zpw+O8hRweG7e8hR3uvM9b+KyPITxw37m3ECceVbXdwQLUMXqrz9b3 qjuUnTN5Nbyko5ZTzV5xFIfv5WSSQ6mVPiaXz4fyur9s4tHK4SHmpSWKJds5k3pR3Jw1ypJbyxUJ RersLXoXKlH5qKI9H6rf9JetfG8V3eWvXoqN4B/o7XCo5YXIR2v6SpfBVH4YHswxyoMJ5McBVhhn 5Fgus0cT7DFqF8iDS/lolMu6u/fZHrR4hJC9IbFHywkTNHb+6z8Mb0UcpVjE6bEPvwsfrrNhL00+ W06vJ/YgD/iogVbIO/UCQ4IJxJeZJJYuaGeZPxZADefs2Z6OQ/yAZ4nnb37Vxw9xlCrbzKJPiEef nFnFj2JPMJZsFp8lroaDxBHBo7+VEwvUKIFUwNgPeyCYkfglUTuebG7Z7Z6ozR364I2HG+tR/qb3 9eEoUaYGkie90YVjUCmdH/7f+8/WUZ5uvfmXM6PT9d0cej8hDz+4eL783QyUmHrzP+/KZ5IWPx/z Prf8Ke6+oLQHAskpm/njNjx8MYRdsbUcEoE6Z5dNwkVy8iJ9xYe3g0cPcor0+UXeDS8yH0PyDI3g RaaQwiWWWTl8f5RYlJnLlxMs0cSQWKSzlR9uDbEx8ZhH7S11D06+uTs/lee99UcvYMSdn8rd4Fsi ftf6m3XxYqHxwrmjCXL6d9lEsbbl3gGtfp2ckBCYTTiBtypMXOdyjhhBrnry2jqT6W0iI8vMRjOb EPjrlTXMJtYmM9iEkycfg6EwQNBxCJ64bS0QVB6zP321DwNKCAAgntkEYICpT+15H498BATRzCgi MkvHQqUViCqB9GyuQ4xHRInak2Bn8dnWOZI0lICjo74MV6uERcKNrZlY/0KdJGrWK0eSBmeDGGxk SYMkSoI4K3jqo7gkQmL6MZI3Jln+MacKV/tv7sXQU05uYQmLoMJU0exloJVTZnHG4lG+muQdx5RK pDVKCTpedkdaiSZKUkV6WpfHx9pvhgd8tMq58498MjmOsfnBv88SfOdXwXShsfawHWuHYCofrnMF /H/eVQ6zHikqeWTLdjg97AunAQn6Htgz1A0k+ZZgabtztrRXYXyuxZT+lIYkpk7qGdnhe1pNqgIl ksYaUj4bCjFygl3N6ga3KC5b4vT5DP44wzy+nqIRaGsxkeqxByRtxKNLjkCzoyzeo4bpx2ZHAGs6 nF7ZL5AdvaNvdJn9di8RIcVaKOrfGkw0xpo9HTt7EDgYJUU6v7XvJ0BWDJLWx4BUW6Qc3lrwgMns rWn5cFUrPb2lllgWdCbhxiCZru9sgA+Cb5LycZnHaDi9nBIDhaikZ+W7ey8VriKK6shyI0QybVje hSBai35jHBPYw1M+pwX2eJMvo8FySrvkRYgJepzuXCBKSJ+QeC2Shh+NRBxqzvuDAcGt52Bw+hFh 4oGyq07oL72fWAeDrwcvI9FMV/D1zcQgfQqWubB1Dea7wY1I7qTMKvFaHmzKWDl/2e95nssnRQo5 /wIAdgTt/7VdZ3s/yYCDipn41CgJpbEVqN5N0i7fYG6f4gJiZ13LcF8NJiRWmDRNu1DUD/UUDRha TqCE9MxaAsDQrlaE/tWjYBx+688/7MMMQzd/OngWwFwfLYGakheJOdS6ygixBc3JM78MVJdfDTDX 6byVlh220rKUjF3mFjM72T9uJ2Xvf73sS8oOs6Ss++0LKm3K1krcy7HiIifX0zT+IidbxjJeKefU g/3j5NxnV0HR+y6bNPA5NtoDr71GxdMmGKt1euEGE3RgqYuBx5LE6DKcXFqEfHNJXc6X3w5H3CJ1 SeyyYGNT2zxDqEL/qtYAhhgplpxyF9tLtagYmoBj9GzdIctbV3g6LTfZH4xsEhfl42G/yf7/YLQZ jJRAE+R6Dz/PTwtGYjLK7M8gd9/XyLOQ2y4Pvf7Pt0uLT7uT3ZUW30yCGOsUSQRLuoD2gsr/tp12 3gwOycPb9Q3Y5aL0F5RnPdLS7cnVsG5nMUgbT0BmiUGmptvDzRFkNG1aWI2WeM6ssywW4Joz/M0A jh3qjusccncEC0ry7uSrOdxb2cLNYWjJg9ghLoh48nNrkXVwg3wVWwHT6+06xZDhwiIkOWARDPmM r+f5avAGHkXJhbwzpQH8HcuVnMCKFjyfDkHEHk2sp2BAPGLqpmG1p0MQkRRShfMr/TgYhJP82DNr Qz6kG9rq45tN8lRCZk/FKY8fRit3gtXkh52LO5fVMzEluJUILowu5KJ9ydKyqp2Jg0rosa0NcsM/ XZ6HhTepDvMm1V9IM3uZxx+0elJWrMVVQLavB33oQllxE7m2lJ/Molc433twfzkJ2LPn2PanIXgJ 8Gj12ie7uFOouuXwiIfNYswyjzHi2LbJXu3OfxtKAqswc7PdwZqGmeWhMDOvqoFxkNyKJdQzDqJL W5yD4Bnk1km+t4uJxREU3VqLafBJFp21+tlDLoP+VKtsPzISwBYEWi2PeWlD698LdDan5t0ylL46 nskDweBNhyxQV7M8mwGRRFIpz7y9EQhta+tvKLt5heTbM9ICjMZX4tk/hwQ3CjxQLIIjX/FKswYV mkRZUneWzghk1q0K/HaIJUgC3YoIsnSshGYzQ5NIXJLTtNViJcxpX8P3wIiIqNQyroYVj6WtWXdE 7/MZe88rC+YAr+Y+IZORh2oLE+RRBrvZZVmGaFBaRfXRfj2pA3tf4ew3fSBCAm18oF2UVax4MgMv lkHhNV9hiAUaNN3cx4JN2gHMSCnEgj2Pc0xldriYFheU/F+nXGnZFRUeTD7us6IuKrya5J7RWJa7 oxsTTDzZwotJE1q8F3ubKElU1/t5bwqnvJQxptashRvSgl7mINkIHJQscd16fyDya4kkgtkvX8TP KgL8t+HoFy42o4hJyhLlScfLcuKFIcjjMJ6mFFmepfa0I68FPMOQydOSvzwaRWswOsFIq7v8Q+/o BShJdKc9Eq8FwSVaySxtb00rmYJaQjXeoZGhCkGMUbotjkb01I+jeUN7OxYnQ1wVydIsTkarurwe cgIQwmtJ7L+3ukk58WJl6ii+SmKYHJGzq4cf2N9BCfLK3dpxyH+5n2NQU3s9fPnv3x6e/O1PT/Zw udCd8sbmx3xAc6qPcX0gW9OexXL5Af9zu1L89CH6zrJVKX6AvtOd9mVdKX4yo+Z5NopwHhc4udUf J2Ub25oeszqy+IK1a8TbXDagLDyAhMjth73iSj3AvnjAvf2zQ6rA4UFV4NO/KhDFvPKsOV2KRby6 reU0+VwT9IHOBGKOrdWioWRi0zGZmsCOAB6Jk+VVfUlA5H9YcxrEHLFRFseQe6uQmW+NAuCtozA3 Hp2pKPjlxDsGdcapQwmt4IZa038xlNCAGyLjHFpkk7G2kAbfWhJKBu6dnFurDONwOdSRsmE9Pxcw flWf6OBaC1MqFHyR3Ce5VkyWBAEuq7PyC7pWA5uI/WH8T3GtEThoj2v93xOyvNJsGgquMxujiWft soAfZ/MNUUfiWQuXXlXn+e2MDaIMxToSt1U2Z9/606SGqeWrs7zThGNIZmwALrWc4JuTezVgHcHD raF8PeGDmFjt/uOe5oSWOK+yPMr5q/wE2hxz3ISH6k2poTGOPlrJpqa7Pw1jEYLijWVDFfeQ22Za rEb9rtJQXw1vOiMqWMr7cZjhOn/2x961SoROrpJg/jBpX9iQGaES1GWTas335cwzhzotMnQ1DSbA fKRjEegXGjqUV/qFhtYnkoZ/jAsrZqN/YNnNXekf2BUV9JKGisKL9Svne7h0voKa5N5ywjBTOzjf 5eESBhq+IXaua+4bzxn3pu/tm5PGym1tf/vlYde7r4cIGm8yy8+oG0/vuzjxPHrPZN6DTM2OTeFR AqQdRIBgQU5+nuYUV+0bNvr9Lo+m0AeS1Gj9k5bHDhvSNwCnkva8gT8PmEcSWRV6jLpc9EFcm7P6 sNHGfTkvozAm0SPKKP/Re1gwWhtt/IYU11kVVmNuJWnyxUBZ9ZKCr8Y7HiyjeESEcHoPn95BYcOk ztids0Wf9fWANRVt6Ms+cBROVDRSLe9aKM8mpU2r1gzY1bwGMK8LjAGL3mlydMQno4pX5wefTWZ4 TPCetf9syWDOl7/oAyUa+Tmwx1Ia+SmwzM2id+pqoW7MQrSE+Mya3RYh3q2RYte31ZEiRSfoQ8cK 5oY8A+c9GNZ4csiA2gT5OBskR6cVF4Yhb1S6g2KdGY8j7wwrPmGCPPjMbM0jCrvMaroYGLDWsJYr hvNUG/7p5+QCJr5CbcQPHSlk8j4YUksMmOlqk6795WjA9+weSpVgwISMq8CmR6LRgWReLW24jEpi m12+HjoT4Jgrhs0lW5WURjMmaUKebiq/oH9mCbZi6vHtbSXBVuSFMddRaIWejXrlMuoVVwz2hzhY YFNIAmb3eMtP4mA5yBCkPenIP371uI4IuBZWAM/0A2Zu/vk2/eZph3gwup9U5RR8GBGPPPBAIvki b1IrYyPzxHiVHJuXKGDCuZ/ycUht0Sz2rBmMqb1Ysff7vqECAo0Llma26BXX0/N8Qt4x+N7LNBvK YHg6OhinJWuOitbhxZvpoDX5Zpi6C147dlk+W7vab72eTCsEaxh1x0ky5FLvM+qckpfImOrr+mEo NaGHTWObk/BjYvXSw8iMiiBTJeJxvJWY3iJEz0nyYgs500eOEJC1olwQQZxOaU1It0G+mq6d/fdD dUd8ofHrimepPeFwmntlllQI8O5TKmylT60lc3/EIf/Hr3cpmUgEiVHO9v4bPw58on/v/hMG223y m1TZpnr0+aPavz0p6G4IuasmR2+jOUs2b2qL5Pd7npX8TZDfpB/8TWPFanncoOfGdCHo1AtvaadW nBznrnHmM9P5KLSVyjJ4PfPQYtlszg0uWhwKcRiFbJ11ZhMAa6rTYZvqpCezarqCiDjAdAyE53M9 ayDUagyEW5aiSkiD6ND5sulhupffZWovQQ2MGXFG7aupoWCFem86A868B6YY+RsbbCI2+POp4hYJ WeBc8Va8+GbvPFTjiodYwcv3k/mU4KqB/XM8rybXdP56wveKKVHyryAjE9MKfi8dFdNVNa99tR4t f6NiOj2vX0Bg5cttgZWvtwVWPpCx1WU+mFG41oEqdXVjq7dDTq9AnKUyTuux1atZ5aZpRE0rN7zD XKivMTF1tDKLHDQV5vAG4+rmMCdbn2U9CJm0k/UYa+PpqLwmanf39VlNPQ1SxFi/2fcDlBSQGzzT r4KnUa2edTPxNF6nSHqeEgiPLYF8NpQLitYic/0OppZyZBm9KkSQOQL2qMlH1YsPVi2youDUKQA+ 5CB9mS/0jziYb7bTrOuJQtpFmnW3qbb1EymmLYzPtCqmvZuJADSljR8HR4aKVSfj8WA+7Y8pyzN+ rCPbW9+36Gq7wy9036ZZC7ZqMnvuy4AlcUAzvaTDtl7SQvWSpml044k+JyNvbKYNxdRWHruZFVPl rF9G4KUrplrl6RwmlHUpFCoiEKZO5r6aYTjNuOzBYKqp1wtYLtrHjSl+t+lWDxMhz5hqBWqos6K0 lgJLVS1oajFqxqcGnyFESthACFeaSWeBDSKghPUgHAjH0XliCmg4puBYhdgBMLX50Z8mZVjJ0DVL 0aGilKpszqDUCZK6MY4qiklE0IaFk1DkHyxBJgED4JRGHoqOkWEROED+IQQWiwLooj4wenwEV8xR 8RYIHvsG9t8MhADBvgL2yVcTI5QIrZn6S9Lgua5H8ldlWCgw1bBxO7TgoMBUwcPVAJ6LAlMmHi1h msJTGmwGLSW6TNBeRtDJOtAOoPik6BjvJJewUoHo8wHXQzHHZQZEFYZkUmbIXaEBVJ3tixHlZgnG lEehBO4ZRQeIBcIeW/1h4HAUCohfUdhWskroEtJUXmu00y0dYNGwJk9pgYUCUqkOoyAOCHLrSu9q khIMEa/58Iy41BDpKIPgQa80sTWNkfpGJBqemsXkjkrkhGqLgaxMzcEi8+BTwRaZR3UeP4zoSTyu pz/MFj0dzXSyHCRka+9pGFaX03u0tIeu3b1AG8vHUHFNhjUytSuOjTkPEEwFF7AytPalF0l1Er04 lxwCHZZCq5JPtni0KpkIkUCZKH9MT2AA0dlRccmAznVghyAgB66O59lIl9OQfmCWFlEO4zgtoh5G 80gd0dBwTB9JR2Qulva8IT1riACzjmKGWtnHJD0NFAt+FCPbAYq/3zfavXzSNN/TcZK2TPORNn4p NxjHSkPgRUpKRQfDAxidfEgTI3O5ertnEy0AnTxDQpCryZoqVmOazymqWA0R+kw8AvgDyWbWR0fn SZnaHHo3oxe0abWbiUB9jI4JtYNeYII3bMYDYCREBh4dGji+lqEHXBshJhdZGRr0At0EHfvukMvI I6iTBvsguEwvI39O9uwyvhuKZiBGeCaoBv6A9kzxOMD/Z4Y8TZYPpvLjwbtjirWFP8yqyfdSzVe9 HFCvOBsbSD0iKvSpAsPbsfTJqQuO4Kr5qvR2mHAPUsqUmhAx12lX9IDVbBcKhezwgHoQmgPvPzpZ kD1qefztgHkRjhNrYaYIjY/1Z1+CWgV+n2bgLgsMkTybdo+8gf4do71lwRkuMgqMVgKBRjH3pWHa II+cxltl0YZiCEiJJdXm6A8j4AU1mEp9qowSfiKDegJ4QXFhjDt5z/oCo7wdAa/E25qnvxpDQLzA KCPgFSzutCe8YkG0SmyFlR+0kbCYKjX+bgS8CWkjbS6IkSvHR3slE4+JRXPwVRrHbFRiQ7/aeUoj R8Pa+mXdr97mARfEZcIJC+zpEP12z30d5gvgmOt9H1QTGl6yeIPUNtHcdB0isNaiVYzx0NXlns5Z qsvMui6HfYnyah6G7ZYpTfXZTCwvRrsllhciq9t3JbnrGb/RqEQyc1BbJKlhom6d4PRwc+QUTVV4 oPJDLLNxWw4TAKIbrHo9CE5LPMysd48ZU3GflrRhHPJTExgmc+g0BsWK5IAnqbmS3vMDnthGERnE rGErdl1D7emNhk5ulIZGQ9F3M/ajjXpUyt2D7Q3IK3sIby+3z92bCTv84tyNlcbVsOnttpDl9XbD 42rGELcqsKCCNMuoTHYXdA2Pl9ti8HfbYvAft8XgD9srY4ZGJPqUPrA6SGlERkMlyATxqcTJxRgL jZSABdaCikoTt9HVxI+zVqOhwm2lZO6r6uF3k7MbLS24Owhom+4EXPYaJbVoTudq0mtMMVJKELYx BUr6x+FMPjH4g8Pps2EFA/DSVGPUDTfHtolIi94Q96/a/gO+x2xeduyEFWKy1qzjFDCbx3d2Bczm NdA3VLXRP4mO4n90rVViT7wwl4dy3XJJXLa0ng7esqmX3094y1HXVO71QExWyBM9o5MUOVSfKPyX tCYHJlmRy5A7q0Jm2FG2pIWbMePeJod+GPxhAieICvtCHaTVnUadViiSUtmIkjvIC2dIVhWvQ9Em 0oNAZe405ps0nWSX9EAChaa+WENNo5aNh8SlDKPTucKSHijFGGIai6TiMKx50VWH0JxmbQLg/6YW NcH/9iJ7GDdgyWertIp/DwqJiukHCcmPiOkP1Os+ThQiTGte9A8ME1+hTQT9tImXiTjOwnf6XOg0 Xm3rNL4YyrIJxEwK1VGib72Ju+0tby8m3CHbiC4vZ3sMkg0Mba+b2AfCHWIDP0WqIbAQUNhBupaX ng9t7AyGjiFPrcTkNuh0NwzOIre2DMmcu9zkqTmYWisLDFokcMSudprfDnA7YDkEU3rwaAcZuuIA CpNOsx1tkEjOjbN63MMf8fKgbUR6/PDR+zQiNTjkj7vtsgP9Y/B6D+97GRRbOl7mG6JTPxjHMpNw frrNOX42cxWxVtefbY+FvJyp/LrkKG8zIa9xFP2v1BlvZr7C16/2ZuYrnGfAB9tnm6voqz5QHVc6 ReoqBCP76uRmquPGMXyB1bSxue67mYBwiAzF2gCqdQx0JMWgds/09aEXq1M9jwPhRQv0CXTW07nS MM+XD22F/cW328jqbA7EuqhZxxx8mJBqtXgYG9FAPomMe4sngW6BYs18j3UoUdGxRPls5S3TW/Ig x9uq8Hs15AaowBvmX0MRAF6XFJaOMNMYTENqgcVfnjLGAoQAWzN/TA4wZK083fYKfWC6dCzCFH1k mC5CiCJaukoW5HlBpES9IwrqSm2AdhhMhClaQ0p6CZZoDDtDCQwHH1ikL2ybXHkjAxmnbFRlndJC tskDyajuEwLBoakT3c0aD0ZTNaniEWtJb3DWaIVGR8W7VFndkYiuiMB/UGt5FRWGqjWdPoGhOs/w vwIBgkIUrVCsDJQHJH9+bPspRsAK+dBMWQhFjiVRHpAG8YvvcNISmT2t0UruoaBlxRIbA2ZXTU1G No280VR3hr2etQ/a9MrbWfugYe27UaEa+45oxmZL+KVcG5AYLPMc2mF/rqH5HNRYrKX5nCvbDmk3 yEG7x7OShnZlqZ+nJFoM9tMYpz3Cr7YsQYF8dqSNXoEs7qgzlbzAGqNc9TK+HJsJUJPTjGMUQCKs Xu3DuANOEvTqb8PIl0kXNx++WkAlN7PhMh1QyU2MPCwfCzHFxIS0o5WM19LRtIj4G2lXMyL+BuZw dSwqEZkqhaCLwvad6wRRZE/JUQk9lhSogij092soeD/utxa3lWn3L4O3tXb2K742wq/mKlBukyPE EhQoj8Zdk6nWqF2znkmMEs9/z52XHaNQL7fVMPuY2TUoDhOV/wt1m7eTVdRWGza/gu0GmkfcTkD+ bntS6uVMiFzRcnfh8+sqIP9+1jxUNfMeGPkSE1OjWg5bK8BXTJoJ7673Hx8mhH688mW+vgCtRdea ol9Mih2u8RX/OExVBpTSabkCrUVVhYHcpLcYc31oacJtMikxJ4nmYYz1helJ89AEmtgV6RRleH8C inSWVTOwMKIVjp8NeTqilg1M+wS2oqov+dswFx/koVUA9cVAynfAT+eH9sdJFuFasXE4YQms3Bp4 XJ8HKLBy6wtLkyxCN1X6MAioll3xZ6BhhjxAkEJO7hF0yQWgKufoP8kVbgtgoggoEGH/nft6S+cK n07UK02T1xnpcZLdp7q66HZ7U/DbyVB8aLNLr4YEIENyK28s7r5o5d7t02IWOKTEs+9+Xr/dUzXD UJBHRNh521EAviuv30ye88UM4LA/fU2HHQSYAY3batb/S7QJ6Izg/XILyvZeLbc4zBYFN1m119ub kG5mQ2CuDns+m3S1DeXKApW3JG2omWHago/HYozfRUqWRT5fv9btRBE4OprPWyfvo+NurorrGkOq gZFl11pcb7e1uF7NyCrOM83XQlaxtRP5cSDLAtk6NtBUyCqN5vtsMgRmGu9tOgSWMq1qlU0la73Z Zd0Pl9/NgniJR5nuoyx0Wl1bcu9ndFpFp2dC0W5VrFsSS4KnHhMyLtAzrGGXCOP1tkt5sz1W/Dj1 psNZvYnwzDrPPnUp3rOddcWlOLoSoJNivP5ZUoyziX1Bm4415VbiH8fJwP6DPmWZa+yhzh5cTVlf kE18pPaJ9Z6WryV9XEfu5czleMWk6MpgqTe8I2cxgGlJ2lAwrKFLrYrLURVeX2/Pnd7OCHCaDrVi 4N+6xNq7HQXnxZyCQxI5lNlVoH0TjKXGVpcdGubYu9LWkj+bzaUazXwlALJRjg2mBawtt3U+s79c 8HPztMNUK/Bz87TvJlOtjgshRfgz7RmVPYJNrFg5GkOt2hH2TzJledphXupKiIut7fj1pMYume+5 kv1hl5RB8vfSgPc+eg/zOWz76ANB36RTvpZ+uBmmcGEDA8VlmRca7rZd9O1MGaApsI/FPQHEKlCC zHpf6sBlBOkoJeYxinBAVJldhuymt2HhIq0p0Y7kudJACoudJMvdzMUrY6h4wIqUMYiulP0ZlNra +fhBwxWUJa8obwKaLE6zobeiyWK1Y7gRpqgpt7s0S9W6fMNJGeOIVga0Y0lAWebWRJ8PE86GbXT6 q1mrtZvh7Vut42bf5sVRYfH0MtCCiow3C2AYcmRUCABDATNMxBXG0prAVwNAk6Sv+bunMxHXWOPm bJDKa814MBikUsowT1uKBkygORWvRUdQUimfZgIcMWUVIl38gF4nhnjJXE7WaOMk1mrJ8GnasLZ6 LhtUPeNnZ+Qnls7l5EL+TozNmLMEGE+/WumFpmw/rcKOfuIuLcW7bX3AF9vVn+t5/KGjfCDT1KPz p015wOGLrZTcX8x4PI4vrIB4oLV0CAYLDlsu+Ga2J7WTcFk64ZlGgLib1LGjpmMshdTnqtDCELuw 87LtrhsaE2haa0V3fZeudLct5iFhOUgKakHn90a0PKoktnlfrGjxbtlvnA+Mb/Xyw90YycdxfEt+ lwpzG+nlhx9IYI+TLo06q07MNnytSmZfbstq9btou5LZ7cx8WzfjjnRpFj7ipVv9+umsDZMSW564 Tn9/8zPS3xfbypfjgPlK+fJ2Qkj1ztnNWnAP3x28mzG/tOUXRbjk7SMs/8Fq8Kbw9qzqntusz924 b680IFkcW1v+1Wyz7Hkz0zJWdk55AS3drGz3db8VCsYZ2XBWsc3AdbnL6rvANDKK6Jelq+nhO5tO 2tPJAsyLiu7ddkX35UQdIQRKsISgiadjKw7aOo724dBftJGmM6XeGyKL4KXe6xNdIAcORhP9fjZT P2gbrW4nwtuo9x521XuH4guCuKkKNjczkqOmbL6iCdZqhD1QLKJgrd38buBAxiPGMBiLEVFa1yHb 25kqmHWGDjAKAPYqkxdayittQ8nTWXuy6Xa+mbQndfCMixQxCNuI+0ORBLbWyoRf9/IKZZedZc3A MiJlq639acDuGuUSxs3OZSq6Rp5BuKtMRTM16YLNI6VB5aImXY/Y32ZTTklbyhUscxxscEzwmLtg +42aYaDEmkhFwUCJ1YlOOcEvpYXCEGwjfVQzGgMJGfa1Pzw9MhtxRZ/gF1d2B4FEhT10n+9GmXNB zgwK9pu7x2wXpSzL/BTq0xdchRekS82GvSYDxwc6cDyISq3D6Q/bhJ0bAgUXppK+kja+nuz1y16z uITuq2TDbF4SMwc6ej5RDOpgLZS9mhXKmjd4OZtesjrQBquARaOpUFJZOUj320BlM7fZ2sOs/5o8 KxCiV+I0HaxCryQr2gMtvZK2c/N2sidD0j+m5tqtSno50xIw64rvsh5+So6WNiF15GMwjIp0WpXE dDbhgJViTW20Z02jlr2bNUu8DTRcq6NyNm+JeEq4JraGbkikhbIykqBiP4XXJpIzil3soZVo3WYt fpoMFRhn2KAcpgqiNbRFu55Y7iFQKhsJjWEDDcgDDO2nl0qbr+9zVmmLWbGVXxkC+YmqMmZsR4m0 hpLR/20KvV/O9I7EeS2s7gTsV4/3t2M0z3I5kB1uRaQz0aFMXRZo16rCN+NgALT2zuH8yUyks6nk /30MJaC7ZCYYaVQh9FHdICgl6EBnluWdJM2FwmMh9FFaqpzvNi8xCIVbDVX2QJn/xl3oh46qRB79 57wwDWsxl8AlXa2Yi62P5fnAmNUgqVEFdAwOaOpaNPYeBRMYY9aBqajZ4F3R0QyKdae11+liVuP1 SP0PZQMr09EEU9FaUs0WZCHWEikPPcBa1Mpa1iss1MUpGaUyA0oUiepsJoQ55td0VPnIhVBAAhJI SGdzosXiW0o9ifLVrKeaZFHcokqJsbNB/e8ky3rqf5MsGxTNErZee4r1E1b2GkrATxmdLEOyTp01 pE7oM882XCh/HQfuv4PUSf40jpJkIftUQHci82UbmR/myPwp0dniEnCoZdIyq0RXlQPZxFZ2uCRK 8SuzwEaxs9npBtwS6Xuy9X1OlV/mDeyPszIY1VUtxEYVLV0yiknE+JgFGQsaAQljfPdW8pguVT+u QQtouzjKjM6yblN9mJRDE8e1pdLfBhNezfYrBC43BZpEKwUNCiiY83VcFPi0rHZLzI2XgrpltdM+ VisFvZg0AoyxNH+DRmijC8x4EPLQ9YY4RbCK77KFlPl6nH1Zc92sYUcPOxRSKwVdTdK3av7T5C3Q +hc2lutMqSPniXG2IlEszRmeX4Gu07bF/kOw+Vy74vT3n0/GOXybDOp3dZSR8qa7NCRg6IlmxrgJ WLeWNKu8d8XWqwm5NrbBoGG7A7hsUdP1NyifKU43Q7E1c7lZpG+m6gZ+NSm2DlOhLbfDLIFhlfco YN1m5sPLvLjKrHeewMZpRf+vZgPj1jJLK1q0xjFhS4hRZadYhblo0TacMbIkoCXE8FMu1N16Bp70 dVoM8TYrfDambpDRyvQyLCkz7ohWKNsHw9cvYBe0YYPT65Hv26ncVPJ0phui9rQlIJldkG9+/mw5 vXZUnMUBb/hsGTcwpESTnLKBoTq9DmYtJbnLVPbzPrnLG4qzyIFOHb8BrSO34/GxbFCYbY1b7hco WIj0su9lC9ObLilQRQ7ipMH6dMzc5PDStVnyvjAcx9Z53o98W/qzysi3MXwBoJIIxnib2qPZTWk1 YgW6PdFnw4qDsuXx04A6SEa7Ot1P9xFVlzkEezeMGkLRlgpzd8sDP4xLWTCP67nSW+NiTM71acUV XQmxYqo+I1whxnNd6+l+vS0A9m7Q03XicSwTS+n0dL/f1tN9NdH7j4aK6hdB/6bNN9PTdW0PwWG7 Z/3NbFGVsYx8+DiFrz7BB9c08DS5I5O+nrFFY6XGX08kvlKTFBpmZstGF8dqD6XKzb10qXK3FP1m ewjpzfYQ0mGmvGMra+jzYQgJHomqqcfikaIm+C8WllhktlZU+5ViMxyF858Ma8Z3TelBaBsMh5SZ lkOCCEWztYExWnhgNBNJIEA0W/uqR1IgQFg6T5/LThe6jz2XnS6VU/3jRLnTGVbcKNo61S991QMp MOg3BqwURJ4cJfEo6J3UiuqkcAIVJ4L2i2xntIwcXFT9Xd2J9mTasrZU3lxjKZqJfHPLpTbOu5ls v0ls04GBW6L6UEW1v83aj5dhScpR1c7Sm3N8DxXorvqSObcukKM3R0ueENZpqHoEWaA/BCZbKDBK 4q+nqNqBK+PZ63QluXOsbeBK9kbt0JXsjeqVlEVSFaMNluYlS8ousHKqh+CXpQJRRRonsuaa9rCV yF5ngK0E9sXWe6SuhuJgYV2xZ1KEbzxffI4aMRWHjYAzdIeJuOh4ofAySGrFQoTxtDZe1qrTalUq a9U5rbqsVX9MCbltV8VCd72rOHhLxFqIiXViLc+3uZLPB9b+qvp3Tap/W0NSueLauxn0NLwrVt6V ZoMrurwrTeeYyrvSVPAd4mkq0SGpIp5mWEguPHRrmAZZgZ6ONnDKpodECTVnZLpsrJpSdJV4Aa6d Tt+yVmuRsMwoMWUTVVtE+tNkNbVvS7LGAmAA4ZGNk543V5Ovttpc/ZLMQDHmBxjlMVs6Wr+agRpE cdczUO9mqLbpdN/MtOZ9RZYDvQJQw0U28VAmqAxdLdCN1vdpSkSAMIahuwgaER3eQgEv+cjURSEI qdos6vOBKyngztbcblhFhQqe0YwHVLgbnsqApZIxZzYomErGnOkODFhSJ1C1rNXmjbKsU1gkIY1i 03gZO80ah2EoD4K7ka2n7RQkzLQZ0y1Yfba9YPW4S/LFFF1P94gQ8zheYlnrYfbLkO0t1hT/P952 +dSm6kh3XHY0VV+NqxVDyoN1LPOm6s1ktWII1QX+OEoGlq7qsqur+sNMrL0RIobRXfgp5xiFxRRa UGSuv9AdVWDEAIPefKNTvJsUY0IgFb2y2sgrLhdjsdabzh6AEK6pEHGp1Ci63q1sRmqB/sVsusCa tLGZMfEq6Xn1EQGMZaV4Q/8vJ8MH0WcmX2IKF8oS7+wBvSzf23gSN1vY7Nhq4fjNbLhg4IMvl9pm ba/9u9l2lbaoZyzjoG1UFZLfzSaK+XJFsGrbXGQ/8o8iT3ULsxKPb1Z4Q6IhyTG7aHg7Wb3oXAyP WVpRmhJQyiSOcNxZcdyWeTxMatqh+aq/THZW6ORZxSwVmbhEmdvY+BIpVNTAc8pHKil7ST653iaf /J+ZPk5T4LgjklsM+kNdoZnv69kiqeyZOEhH+77epn0PvgxwTuVMeQEB9GdP94qJBbcy4/OZPkKk a6ktBL4VFTYvEjkpJ9LgK6xwFVjKU1jhTjHl8s6PviF+dEsF0tXi7Gez1KENbQ4b5gD3VDKkyFJ4 3TmFLV53OwVvZ7lBzKyaUXKDkKkqF2JuClSKfp0b/GZgBigsDqO5wb34wumb/Y9tdYX3RF2BDGKX VVOhVpWfz1ZNeTqDW8asXGLaWqX5r2sR5+NsE5Wvbr6vNBYFheTCJ/UPtUefb0//8N+HpB49OhsJ bOx2bX6YYFKTouWdfUgJMNHy9YjN99tlluvtMsu7mVjAhm7tesTGbk9bq118Oou+gNVlTLzOb5UK ljr/x5RP1/5JgoS069rTD83zOwih6JMJ/GJbXlEik2PebvvgktfPty3ruhsp7izrajvbud6mkM5M SzfnODOtkNZDi51piV82W6blaG3jNCu9XKoSP4So5JzA7cwtZ3mE5Ry2LWdZfSrIfhi3mpvOJ4jU mm0CqNqUKVHbMll5BtQa3jnuQq7lrLhdv3jZGrGkfljszu85g4+8rTX3k5sPHsJvtnc+vezeXyl2 Ndbx0Nley9dejW9IB6XpCCXekFeej6ZAlIL6dzRhleWdnhXU/kig9nIJQR5yeecac33cv/RrRNK+ 5y0+6raLLt5jz/H982ThL7wsEXLpBPM/zBdtzxvw94sDWeNzJSI0NlUv92z/x5BjrURYbrY1SN// LA3S5/viPvg8Atz2v4fHzW2jEuRz3nXnz/oS1vr8D5UeDzkcS2sLp5XObI3QaaUzKwpDhULV+tj3 w4DXfROO9c6hY9/kFt4Qjj0ToD5x7A+7OPZfDBseIThGR5VQU3QphI2aIrpsdFajTEFyEv2qTzaI CaayuTWSKclOhPp6W4R6INkDlLX2xYtZPtvaF4PSMxrkgZKNuinnq5kirM/M1orKdKOFvprxv6xh Yuddp2xYawDIFjyT+D1XBpmgLPRtXOCar15O0RpNPgxUFPznnrMvPvoEVf6teZW//j8vFK5KCmVu ZHN0cmVhbQplbmRvYmoKNCAwIG9iagoxMTg4OQplbmRvYmoKMSAwIG9iago8PCAvVHlwZSAvUGFn ZSAvUGFyZW50IDEyIDAgUiAvUmVzb3VyY2VzIDMgMCBSIC9Db250ZW50cyAyIDAgUiAvTWVkaWFC b3gKWzAgMCA2MTIgNzkyXSA+PgplbmRvYmoKMyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1Rl eHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxCjUgMCBSID4+ IC9Gb250IDw8IC9GMS4xIDcgMCBSIC9GMi4wIDEwIDAgUiAvRjMuMCAxMSAwIFIgPj4gL1hPYmpl Y3QKPDwgL0ltMSA4IDAgUiA+PiA+PgplbmRvYmoKOCAwIG9iago8PCAvTGVuZ3RoIDkgMCBSIC9U eXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggMzQ1IC9IZWlnaHQKNzAgL0NvbG9y U3BhY2UgNSAwIFIgL0ludGVycG9sYXRlIHRydWUgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVy Ci9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNqkvXd4VFeWLyrAcbrnu9+bf+57796Z+WbuTE+37e5p N27bgHKoKuVEdsA2ziAhlConSWRMNBhjTLAxBrtJCpVzkgCRRI5CASGEhHLlU/uttU9VqSTovuP7 3OdzG1E6tc/ea/3Wb8UTIgxDgoQwgYAvRPwB4vaQgUFy9xaxNg1s23ThQ4k9W2RLF9tSJdZkeqWL /8sXfFhmgV9MFdhTq5ypAkeyyJYqN3PhUlg4Ykua1JYmsafBB+ASWdIltgy4+La0aieP37qg7OxH C3VLX/9mwf+oy3lmRcr0srRpKxKnlc2ZtnLWtJVvzFgxBy74SdzKBLjg589/Pid7a8kwCRD6T4hE /2HwCsFz+sdI34/nt8g0hbA2uZUjN2cojWkb9AvveU4FyCj7Mfx4+N/wR7hbAP8YYv9F8I/Ejz+H i/0k/asgvSJfhR/y0Su8lMhv+ujHQuEfMuzP6d8z9KI3x/t78WLYb6E3JYHoRT8Z+cZQZLVMeOWh yOd8hAlG9wE/w0RXG11eIHxnPwnC13kJvXP0duyqgvTfMT8Of2kw8kXhX2G3K/JEweiTEia8Vwz9 DPwwRDzE2/zomFw9X2LJFNmTxbZkuTVDpsnS3PvKS8YCxN8ZOrdZ97lSVygzZ0rM2RJrjtDI2XVm hZt00e+kSwjhNXFkJPx0E4ceObvYE/zbV/Q+E7sa/gs/KEiQ3R/4YTAsGyES8434+Ezkz0z4KPEX J84rcoqBAN4NrvAdQhPLCwvw5GVNHEf0ihzrxAeivxTd/FDk59EtAgVvvPOVRDNXZMnhWzkSS4bM gnqKxwPyhncGHBjzkr6rQ9bDrRtXNS6VquYJdDkiK1dsz6BQkCqz/wIciKBBKvwuIIDAno6QAsdN v1pigrtxQB+F5lQWAQAZJDaOyJHJd+aWO4sXHOO8vPY//6Hyd79a+afpJW9MX5k4vSxpWhmqPHtR KEj4hVDgHSe9h89vkmnzo1CgMKav0y++6wUoGJvY3on9D5DIDycdOmEPnZkiY9EPRQ89shRcA/vD 4NRTnoQGkdUGIhcTKwxToCAUq+mhqbgUo4xP+UAgupiwqgL++CNQMEkYJ+PJxLdOwNEk7XsSCqJA waoPCwXu5kdHFaq5CAU2FBI4DoSCjh1eMhog3s7Qmc36j5X6XJmZK7ZkSqxZESi4PwEFk/d88n/G 4PLT/3bywUVW/sSHon+EbQ9MwC8TVc+YzYlRxlgoiH4s5mgYCgKBUOz3TojBlH+YKdfEZ56CFVMk i0x5rgkosGbzQUNjoIBQ2+Mmo0PkbmPbl+sa3qlpKqg1FCrMuTJrrtSeCYZbZE0RmtNAkX8RDoDu Ax/Ag6bfCNgOZyrGc0+U2lKAEgiNqVJHltjG45vS5Q4u3L/SnvepcV7C9tn/7bN/fvGzl/6u9E3A gRkVc6ZVvAlX3MpZcSvnICAAPYhc/3UoCBGvh3T/dH69TJsLS5Jas0AOpeb01YbFd7xnvcQbjNnJ iNLFmuwpm8zECn+MXQjECElEr1EewgI8SaGYCbgOTdbf0NPOMWJlYjU7yiUCYcl/ihhPUQom9BQ0 eooterpQhREpZg9C5Al7NFlco2wqskjQ95ZHRxTqIgoFaCPkliypJkfdud1LBgJkuJM4NxnfVxh5 aE1AfmwcoTH969MABQ+mmL+YA2KettonVx6IIHms2kZQl4lCJUOvGBY3Fd6ncolghG5Fdgf+30s5 3pR9jFX/WL7HkKdvPjPxgdj7hGJhOcwqI/DCPB3WcEEDTXe+kmmKQBmF1rQIdU+mpM3vIWP95N53 zlr5saJVpmypPlFuTgcdAVUVGJNF5kSk8TaO2Mr9RWgAR8x3IB9A5DFnyoDmURMgsidKHaliS4rU zgEQEDmy4arQJilOL/rU9Na/KV7+1af/+n9VzH5xecK0ZQnPlKfElb4ZBzhQ/gbgAGo9IkDy/xkU eEn3z+fCUACGBnYDHJNVxsW3vee9yNamqBgzlWXFcIDghB2PhYXAlJOdfNxPIDlrKyMyMJlDxroS sQoVmKy2cPRR6xOYWMkT9HKyOjBTaHOsfQ/9FUQKTXxjYIIkxOxN1OSFoo8/8bsxUIACOdzSf6hG nQ+CAUIlsYDbmCvV5KmRFfQFyEAncQAUyEzgnCYiKQXeaAAoWOkhD/+a/D+FEkxeA4l6Q3AxE95Z jNPHxLAmZuopTGVBU7cmOOF2TWKDk9nUU09nkrF4mlGgv8VMcoWecHnYbQ9MOd8pnM1LBpvu7EQf 2cIV2pKQ7VMoCMI/xD1Abh9sXiU/WVRrywWvTepKFlmTQP3BI6DmOwWJgS1DYM74pVAArAChwJwN OMC6BnAH9uewDPaIEQ3suULX/Pfri/9J9OqLJa/O+Hzm8yviZ6xInF6ePL0yOa5sTlw5XKDyyXiV wRVBgF8MBb1Hz26Ua/JxhTYeuD9AeFYZF972XvBSDvBUy/ik5xil+sGokIdiDQ0zVfFjVhLjgMNn 3ISMUdtBf5deMeydCU0hrszTFfwJC+Kn9/SGrdIUGzThekQcnNDkyMNUvuGPbCATDK88uhj22aPP FQhNtV+TfNjol/rIwOn+72rUlP9bkTHKzYVSdaG64ysv6Q+Qwa5Q8ybDB2CPRPYElEnwIg3p37RU eMnjyS48y8MDT+DAJOR5CjCGdSoK2rGb5o+1+/97zsTQvWMmsCIUw5fYIMATYhCJQU1lTVOdkUm7 yEw4JhHIihzHxNqivDT2n0Dk0WDnB9W3d4IKgD6KrAkAAjKMAaYGiR8IA/gFiuPFq2zZ1ebZ1fak clsC35YC+y8BJm9JAFYA+oJQYMv4pbECdAcAPcDXs2RiiADJHhdvZU8XOJIF1kSZiye0Zwlc85eq 5/0v2R9eXP7n51emPVOWFFcaH1cWH7cyHplARVJceSJeYShIjF6/EArgYfuOtm6RafPRbbFzYCUs FNzxtAUmc6q/BQVTcTtCL5lYoGYm2c0YMQjiKTOs9aSn4w5zyJi4X8SdfOKgJ7SACZ/4k6sNa0dU qgMTODCBAJPYyERAIMRMZiB+ujxvVCIjyh79GPtFgalEd3I4a/JOMqxAslAgj0KBqViqLo5AwXBX 6Mwm/adSE0/gSITDklo5Ej1nT3OVH6AgGBt0jbrkT0LB05jYFJYTDtJOeV7/JOCNKGboqfcJbx9D A4kTXCXsa8RCAZlCAwKTzy4mEkhX8tfFL9ZdZaYGuELM013XyC75yDBAgQL4GNrlBJoLwFiNhwxf HbKvOfnWKhNQ5Xhhc3Klg1vtyhU4eOBHwCdloK12jO2DKa+mXtsvzCBgnBAjh/Zkyigyol4GnK+i mVtpSBI4Cz9QF/2T+KUXlr8yoyQ+bkUKqnZlQlwVMIHZqOmVqRQEEqmDMIt1E+LKUuECT+EXQkH/ z2e3goOA67HjQ4Gfstaw+N741dBEmJ2Z4rVFjCkNrIUCT/ztU7BiMn+exNZi0T4UGz1gpqgPE4MG T3ByFgoY5skgXjCWUsbEB2JpQMyvTA5Hs59hyCQtC8f/Y81ohFdM2mHmiQeZooUT3+4jo6f7fqxR FVIoABcyM8IKvqaxgtEu5sImXYnYWCiwAXPjSq08mY73bXOFn/SH2Ugoij/eKBQ8ReMnhzpjNjYS MiXME/FDJgYK8CvAYvpo6GBKlCAYdiGjYd4Jm/60lATzJB+b4hFMgtBJNCY2zskEo7mh2GhwaErW gHlq9sSLrOArhRp2PmMCCqzpw6TjYMtaRUNOLfzRnlBpmyNszi83ZwtsGMxBVmBPAm4GDjUYUAlG 9n4JFFgy4KARfGyJIjtgO96EOoYZ7D3B45CdWbSkMf9/yV96oeR301e8PgPdAVDt2XEVs+Iq4d/x SAlQ2SkOlL8RV/46RQOAgnS4wlBQPue/CAUe0vfTuS0SXRgKMHhoTlmrfzsCBaxcjYXIMHBUH174 H+C6BslAiAwSTDh6Y1glM1XcGdZ9QLEJxXqmoah2Axy5fcTNal9YcydJMNpZmrfy+sgYLABUAxAM GDVdTCAYdQmj4vcEFExATehJe4RrCNCbe/Hm+JhghUO4JP8T3J6NUgZiQqneWG9oInk3mYGHMAY7 BhoNa/bhv+EaozkaLxuB8ZKxlr6jNU3zaawgHWMFlhypuoCygigUrBAbiwEKwHzILTy5jkOh4FEk tYe7RJcNp4NEIvJFowHiDkQiP0965dTEM7ExF3ajYmL77M1RDIL09GGXPGTUQ7yBibQge5oBH174 +RjB8FP0CLt4wTCMx8ZzApGVhHfJi5fbG01WTjqFQGxGMjQlJDs5g0wjFeAFj9EzhW0cDJLRIF12 VDA8ZCACBVyxJYnFAVDM28SwRv1+jb5AYeGgF+DkVFm5wNhRZ8O1BKmguRhes2aKfmHYkGUFUnOa lLobGB9wpE2wBVu2wDnv/abif1W8NuOz3z5b8TqqOSo7XLMwOBBGANYFwFqCaStfhwuhAL0DYAXp 08tS0I+oiJ++Mh6gIGvL8qGIw/W0ZKJ7nPQcOrdWosumeQ2EI0AqYAUdnosgPAyey2Mf6R0mtzoZ 15XRpivDjZeHGq6PabuDLUPkNo1ojfmJjy3GIKEgvUCQQsEgq5BwE884GRslo24USzd8KUN8IZQ9 AKKRIdLVHjhzbdjR774VJCMM5YEMC9ohuIWPFQ9QnDHS10dudASbb3o118abbvvMnaEzj8jNMXLf g5I54iPjYdGKMXzBEMMyU1+QUlPKUQmJhiAY+MVx0veIXO8kp657TFfGtDfHLd2Bs8Pkrgdl3u+L mCe/H1aCIWUPZl7gF0FQR0NkiGHG8ZGDYfsUNVSsjngR64bHSfcDcvaWx3jTrb/tsdzzn+4l12Dz KabB08Etxuw9f1E0LFBa84UWFDO5lRPJIMAmD99nzm7WLZMacwUY1EpXgoOgTtt3qspDHgaxAMLn wRqYsRHyoDdwtt1jvOHRXhvXdoRcvaRtjPSMk8FxMu5j1Secs2eNsp9dtTsYDESwIsiEN2csNO7F 54Xf7e0jV+76HLc8hhvj+ltu+31yfYQMuonPh2lXH6v7IYKfH8ezAPBx+8lICCM/fvgGFq/h5yOI 4ajsHjIECOxHHAb0ACjGXeoJnrsxZr7mNt70ujqCF0fwcAHWQH/9DD3TgN8btQ4sBOA+B9noTTA0 EfWFPfHAzo+Snh5y6bbPetWtvu7FDRkg1+HEYSVu/FLvCOlRt++SqwqVlmy5NU1gTJZST7nh0Vq5 huYNzZlCc4bUjmSMxQG2loDWFEWhIPMX5xPNqXIHEINUoSkJDLHQmSK0plBikClxLPxIteifJa+8 UDbzmYrEuNI3aJrg9Ri7nxgJD4bLiug1a1oZ/SuECJpHwBjC7Onls5/7bHbOtlJgBaFQ6G9Bwdn1 CAXosKSLzQgFqw2Lb3tbqCL0drjP6K59u9vC32z4ZLX6LeWJuXCtaXpnu2n5vmaF6vqem6OngFrQ Q/dG0TsQQLsZDIGEjD0Yv32q19Q6bLowZLo4YLzYY+4YaXOTR49JZ3PXiX0O5QbNJ6uOfqg5s5cy Da8v4GWPMoB2YcBDerr8F2x3j524uGu3TbxRs3R104K6hnmrG95d2/jRTkvl0bbNLT0nHpCrHjxf 4AmeqIMY8NEqJybATNABtOwMih8q9UPSde6R/ofWL3ZayzfqPljd+DZc6xo/3KItOeBSnmz7+qb7 HAj8SAiF1h0avN3fdnWw+cwjw/nHjguPbFd6DEO+myCWIKUMW97DimsAjSwgxhAZ6CbX1TcP7m9R fmkuWdf0bt2JBatOvr1R/cluh+Cn8xtbHzYMkrtDpG+E9DU/Pq5oWiQ354INAqMjt2ZINVkRKBi8 z5zZrPtUZsaTklqSFJYMpT5rlwvO9x54tcOkr224peHSwQPOtTsMJesa31rVuLC2cdE61fvwaIfP rnf2HH9Ibo+j8gJJoJl9tl4r6EMNoqjlY50han59xDdCHo+R3nvMeUP7D/tcq7abK+FuqxoWra5/ a13jB18aqvc6NljvqToCqFmwSIYMe4K9bb22S0O2833mywP2a49tt/tbgqEhQmuHOgfvnO0xXR2x nn+kO/tQe3341PWh1hHSP0wedQavWduPHmxetd1Quk69pKZhcW3Te1vMK/Y7Fcab+7v850ZJLzK3 cKWHn+5xJHoA/7DPgtwjAKjopgjQ7m413jy4167Yol++VvXuKtViuL7QL91j45+88OWlARMg5Bjp HyT3Gtq3yVSFMmMWWmTAAUsaaP2m8wvEhnRM88Gem9Ajk9C6ILa2kAUEMYsGSAm4vxQKaBYyA+sH 7Bz4b74lQebMEFo4Qtd8wIF/kbz+YunrccvfQMtehfY9XExYFs4ORGuK2IKiGeE0IusUzMJrRfx0 9CDCUJC7fQVAAcMwf63acJwMHGrdLNNliu1zJDbqKFky6kwLr4esgKVN13etOfE+sFa5rkCgyRIa spXWQpmpQGrMlxjy+E0ccX3WFvP7R87WdgXOgHYHqE0PhOPNgQAZd5M+2+2jipPvidXFkqYceUOe 4i/F37r47cR09Oa6WnVxdX2yzMxVauc2XfoWOD+Dlh3JpJt4RsmjDnLmxI0NG/XvKBoLRA1Zwkae WMeTmzLlpmyZIVdmAG+6QNKYD/fZbv7U1LGvj9ykVjsa0qc8gIm4lFRBGcrSR0j3mf6GHdZKWcMC ubYIwVDLkRoywQrgw6qyxWqOUpdfp37r2LWt98nFMdI9RO7sbBJJfy6u1c1VqItq6+dvOLLk3L0T QeTkbGALrGmAir0XlO4euXTizq41pqViTYFQnSXSZMp1eUpDgUKfK9XyJNp0mSpzdcP8Q6cV5/pV j8l15/BBuXq+1JRFhSSRQkEOTSayYcNTm/UfI4m1J9TY0xRGjljF291a8ZhcvRVs/v7c6rXGj4Qn C8SN2TINV6zjigx5UvM8qb5Aps2XqbKlJ3O3GZdZuw49Ih1eNNlsmIYGfBgvE8TAIKUFDF2/302G HpKbDbd3rTW+L1TniPW5An2WWI/brjTmyPVZMnWOVJMn0xStM31o6Pqun9yC47v56NSa45/KGxcq NAsk9UWyE4VbVMvuuy/D+j3kUeO5vXXHlyjq85UNBXWqecpji/adkT0gZ8wDP2yxlinVi2DxUi0X XSQzj6/jSgxZUjVX2Zi/Vf+Z+e53wADdyPMD/tDk4CEL/UHgYUCNhgG+bnkcP19Yv07ztqwpV67N lOl4oOawbJmGJ1dnYZrmZM5a9YJ9p0XXfZZH5HJ992aJKl9pywO/DKwhmmwrV+ZMw5ieCc203JIF Ukr5fNokKJhAg1+cQYBTpvWEvGpjGqKBg1OhT5S3Ln6vsehfZH94oeTP00uSplUkIw6Amlckg+6z NYQRHIhCAeLAjNJUuGKg4A34AEJBOQJITKzgb0DB4JHWbTJtNuKADbNUsEiFpajZe2i3S6g4Ob/O OFds4FSbUmQtuXw7t8qcChffyhHaeRIH7FiKWJ+iaMreaSw929vkQSPuZTlyECk5eN/9tns/iRuL heY0kSW+1pFeY8zcee7972+Wixo5Ql28zJEgdsZL9Tmam3sBTILokGK9NxgaS8fhL3SfyTW5Ih3N ndlxx2QOLmKpOZXekCO1AWJniHRJcgNX3lC4yya6MtwyRkaBsgbZ0AFYCSTrDEo7IhVQ00d95NpP rZslR+cq9PlCI2sFUpD1UaCW2PBcxI4kTC0ZM8T1OdtNKy66T3YQ69euCqUxW2hKEJmT4UFWH88/ 3f0D0FfgGT7krGz6YBjYVPP9kxv1JVUncyu16AaiJ2iHO/NA2DD4b0/DeJElXqFPk57grjrxLlh/ h+cbUC5YTwwU5NGwIcj/WBetNlSYs/C3rClSkB9D1teXVjSPHvzSWgYqKdBzYVukDrAySRJ7isCR xYfNsWbi11lTgUWgUhyfu7957c2xs+iMMzQ1ADyajf2yDg4zHkKT+uDGWPMOi4B/Il9k5omb04Su VJEzHbaFltPQzJcF9iep2hwvBw06Oe+ni5tAp66N6JXqBWBDBSYsgqqx8b4wv9cdOA8n6yHdJy5s rdMWivUA/rh+wJOdFz851lsnVReLNNmAgUog4eZEgTUevhFzahbg6kkgJApNpuJ48fctNfdJmwcP NxQlYEwg4pmiBQF2dFd759uN6o8UjflyQ5rIOFtkmSN1oOaCCEnN6XJzRp0jq8bMkWiTFZrcdaqP bMPfn+hdA1gnNPDA9MN2oTyAjIGbZk8DGg8/gQshwkwrAy0Z4VQgXsn0Sv3FmUS6h/BFSAPsWWw1 kdBVtKQx/5+lr7648rW4ZeALJE6vTAMcmFGVGocgkDyjNDm2diiaNGT/agaFCBpCxGs6uAnAJSrh Y2+ysYK/CQVgvAYACuS0B4HtpxA4MH5YZ8lXaPMAIuSWHLGdA+cidHEqrUlwRiJXKt+RWg2Uxp4h dGSIbKmYkK3PWNf0tq3jECVdI1SwGD+D4RrT7Z8U2oXgaoHwyABO9ckSQzpcQm3iqpYMmSNJYE2U qHNVV3YDbvipj/mY3P753EbwR2Sgd+Y0sYsmW+F0aDyHXumwKqmTxweHy8kDABdaEkGQJE1Z69Uf uh4cG8dbjTMhbyS75weZoRmTgc7g2W8sIvmJuWvt8+BYQUlp0CaDjZpigAge05EEz1hlQZ2SmNKk Tbxtjvednl3bznwoMMLZcQQ2rsKau1pV1NyzHxxS/0QiYXSUtGuu7lzTsBisv9yZLXRyy60pVbZU vo0WqVqSQQAwWePkiBHcEmssKWvMRSC6G1wL4Z5ANdFGWJMVFh5mEO7toYXH7i6MFXwORhkWCdso MyeBp7nKVfCF423+CS7fwMX7u7BcTWiJB/kEzYUzgi+SOjP45iSBKUVuz4JfV6jmb9WvaHus95Be PwAvKFGQZdduGh/GYvvz/Y0bVB8r9XOljrxqW/pKa2KFJZ5vx7oXlF6ss00XO1Lg61AAzDy5sUD4 c9axi8rWsb24QidWzOJhGZI3mN/qZdp86Gx2Hz+/CYyy3JZS66RG1sAFZJPogYxxwezKLTw4wbDZ hZXTCn+JM0niiAeHWmHk1WoKdprLOpkLHgwdRALPVJj9QQ9s0YPA1R8uKOv0xeKm9DorTwmSacU6 XoAUgSUVU/+wKgtWaUpNHFgAcpvGojrDW6ucC8ALALOCWG0N5wdltkwRHL0NQ/pselFCY/sT7sD/ PyiQ0lIEgTlD4soV2nL4znkfqIv+Vfa7Z5e9NH0lVg5Mq06NK4mfthL7C6aXJVEcSJ7AgUlQkBjB geiFjQlxpbMRCla8AVBQsLN8iK2H+StQAP71kbNbFOpCGcIdPiDfgfVOwIWUAIZmREWwBUJrGgCX zJGFygLCYAUzlwEaQQEBFAcONxPYV83xxZbOQ+MoY+N+DO8EgIobbxxS6OajqbXCbVNkNjDrHEzI Yi1HosCYCPtfo1ukvgwy3wsWcIzcP3p2k/LE3BpTTrUxge9IFjhT+DYs5IBPYnU0+G5mPFP4Cd+Y LGNF3ZEIYiMwxst1OWub3jvVc4JGMMYmAs4h8IpHu8j5vS0y6YlC9ImMKeCgVdviRdQG4Q3NaLXF KO2pmLBzZAHQAQdQmtOVBs56R/G60/MrTWnVTg7fngmEWanKc/Xu9WBcGrfXj05NF3pVTW8B+Yfd g/tXgVY2o57CNioAtUDNLVy6fp4ArI9jjtA6C5iV0pQJninInsSeCbpG7fhUKNik/1yiLwAVUzrS 5LYkgTlBCApuADOXI3Vyha50AGqgavC9AF/saQrMYLtTADNFDm6lORl+FzQOaPN247IbbpOb9GN2 IMQG4OG8BsdJT9uQYW3DUrmqAIhxhSlB3MITt3AAWGCfAXzw19kqWQtY7VT4Xr4RQQbIUl1T1jbX Ypk9b6UlTYBakyY2Jm2xLekJtPnJYy/paby8o8aQh8s2p4EsYZbEzgN+JTEl0zacNFBPysPR+CIz t3GENiAesyXOVIQIQwps+I+t6x6Te5gQCbJ+AkPjA2MPya2fzm2SqQsqtfEgZrBFImM8cAyli8uW z1XDtluzJfZcsQWYEg+fxcqpseahV+jI5hvT4AKeCVAgdaDR33X9c6EhUwb4gKVHSYCxIOcg+TRI SFsGwmgQ9RH+D4hButKVWW1IFTjngV/wj6LfPb/8ty/yZ8ct/zP6BeUp0ytT4kpms52GM6J8oHzO pCtcPJAQhoJw2DAGCsrefO6z2e8eVNCwYfCvQ0HvkbNfAFMC4EU0sCKr5NPHl6IRT4RLApxNlwR+ OuyzpClPqsqWaDhg1sWWFNwcZwoY1ipjEiipUle4rvEDkLFR7JEJV86Y7hxUaAuQ3oN4mHAnQY/Q hGEYFvCZV6XOFp1Y3HRx/xjpHCY3mq5jfVetMR9VxglsJLXakSB1JsF6pLoMiYoHbp1InS/UcQTa FKCgoNEgdVjG6UxB0gI8QZu9vvGDtgGNF5UUKSRlkN4hcvfAObFMmwtkQ+nMQSG0p8iaaZ2nNUNk zBTpwKPPFatyRE3Z4ImLdTyxmQPiKjengw8CulmtY5NKoMLZEnNenabY1fcdMhAaIgiQXuvD77C7 UJVfZysG64NUH+i6LRG2FyixUJMhbOSImrgiTSZGJ0xcIFqiZppNNiELVbiyyrVJoLkRKChQ39vt wbTgWCc5tUn/sdRcWGlKYd1VLJgHEm5B/wg2E9S2Sp8o0qeB5VU05cqaMG4g0aYqbFz4ompjhsjF EzgBnWYrbOmi4xlfWVaCozSCmcew0w0e/c2QZYPxQ4WmWGHKR7aMlfCJNJ2BmihUpQjq09Gj1+SJ tVkiLRwfrcO3oeMAhFxu5lbasvjNOaC8+NSmtG3WpQ+8lwOYVug72fa1UJ0laUlnK3VB78C8gqmV AyWzpAiNqRJDllCbLdDwxHoERiz1N2fInNlVZmBQYD5Sa8y81fVvXRhQgysaLfj0Eu8A6Wi49aWk vkBqzAb+KXPwkOSzIXo7p0qbDNLC12UK1Dl8bbZIxxPAs5gxOAbiDVAPvFRoTVE24+8KTUnAMMHW awa3gQkDkoNOgT2Jb48HwgwWEOsKMF8wESdkmSobMaAVAmF8kND6gZifTwIBADdYIZBMeevbSxqK /0X2+xdKXn5mxRugudMrwJTHo0aDX1CeyMYGI8o+5wkomEMbkfCaYAsABRVJSC3KE58ti/+7T18r ObFmBOPbgaf0oUQ6E4+c20BjBSCu6XD62KppycLMtTUDVECiTgPGtf9ila5rh7Pv4KnHh229+366 Ugs+IGKCEVgcB0ut0BHmYECvIe8bW8UgueanwTQveWzrOAz+PtgC6oBwq208gALYOoAOcWPuesPS AxdXqdsP3Bg5PULunB76Eeu99TlKKxfgBSwdUGus39Ck1Khztxk/PHK+Rtux29Cz59ittd+eq1it WVCjzgdgh28HeAGKgs4yGHFN0U5TVR+57SN+yt4ZDD60fy9T5yGCmdPR+4P1WNJAU8Q68CzyNlo/ +u5STeO9HaaefYbOr3++WPeVfTkQSLkuDyRcaqTZPZBhC8oD38oDKFA0Frj6DgLg0ETZYJfHtVq7 WGbNlZhzAFgAykAOAQRQRxqzNurf2XemurF9i6l3j7pz+/fnZJutnwrVRQJTntAE1ieTBkBS0YLT MlSAAlgtbVJm25EQCkTGHGAXoBQgwDJXJvpH1gwF2DI4CG3OGuNbe06X119bb+nYY2j/tv765m+a S2GLJOA4mwsBvqrtSQLnHAw82rKUTcVHL2wCh84fKeQbIQ++bRUDTIHbXmPPBt0ECof80MQFkrNG O/9rZ+nRq2sN3d8Y7+9puL3px0uyLZZ3kP8Ys9GvMaeAPa2yZ1bYOWAjpJYEhTF9s/6DB55LQYzl 9h9v2yUx5FXZaEUNlrhzARCAZoCPIFFnrzK+vfeCsLFru+bB14evrd5kXiprypcb86Tgolpzq8GV s8TLLalw3AdPK93kAcaUApgyGCMDrSNqeX0xBlLMPNY3wZ5f0FktF26y0fzB/gui+o6t2gd7TrRv PXBRusG0RKrGM4VFiq3xUhcGc2AzBabUmmYeeLIABe3E9oVhGZg/mYkjsiYInUngKwmd2eAbUm6Q wjYisaXCwJApT+CyZcMiezLtZcjAMnKgmvbMKnPYCQUPEaAPzKvUFA9WRuh6+63Gxf9TNnPaZy89 VxEPyv5MWRJcSADKYnyBSNaAVfxIVSHbdIAVyOBTTC+fPb38zWkr34grpX9bAV7GrGcr0md8/Mb/ Uzrzi+YdY2SYRHyEmO51tm7Di/MKLmwS67OxJcqWgmhgTqdl8FyxKVveVPzTldXXxs1jpDtS1TPg IY9GSO8DclV196s1undkpgI0nVawa8lgodbY8qQnsi3de71objClbrl7GAub7WjFgDcK0N1IB+mq bcg/eXFLp/fiGHk8TkbBtt4nF7fYlslNOTJDSg2wCOqtY3GdNu8L3SegyP3Baz7am+Mj/R7y0EO6 290tIM+KhrlI80CpLSnUzUxH5WpaqL12wIN6hASyM3Rmo/ZDiR5bQcEswoKRghoz5eqcTYYPbPd/ uOc/O4a3BRPcF8Rv6Rsmt1r7ju2wlALNYFkrC+YSWnMuMmeD393c95OXDAUxp9915OwaUF7aa8aV UDcTjYIuo1Y97+TlbbdHnV5aSEBTb/AIfX3kuu3+0Q2GEiH2gHDZm1PPFK0GQIFclae7tyOA6xmk hcfgIGQCUUdBMqcAJgBDAC8GzKiyfsHJK5vbx5vhpALhLRqEwxol926Mmb9rkSsbFwDdBWkEhwhM tsCUrjQXrW58+5pbj4UNIT94T657JxUN80E34SiREzq4QlTVLNHJ7APNkguPVKOYuOyPVGH1B0hP b+Cc4eaeNdr3ZIZ87I+wpvCtVC8o5VMYsjbrP37ouxLCUGrPiUtbQdL4SJMywEcQ2kHpMhW6rLqG eQfPrL3paQb3ykM3B76lx39FdWV3XUOxTM9BpbZgrS/QfqkubYP2/Q5/G0hvEGsh3A/IlS3WFTXG QmBW4OWJnVnguaAt1nHXaBdrr++5778E7NeNhzsI8uAmfQ+Cl/R3965TLxE3pilBPa1p1RaQtyza 74lcAtY/RDp+OrelprFYgewuhY/EgFsJXqQTnw7gAraIphvQ4rNQgOBmxzkk2KQQgQLqqWFBAmy+ zMXDZzel0KhIhshRuKRxwf8r/sPzK2c+W0n5PPX6p/oC1NBHQgFRHEhkoWDayqTpKxOnrZwVV/pa XNnrMyrmIKnA38WKxBkl8b9eNvO11Yk7z20dRyrljRbeT4YCHF1y6PwXIl0OGxQCHgjqDDRMqM1c ZVpienBggNzyYo1ZIBgKRJxKtjJndIR0nRupX61ZwtpNDAubkoFIyA3c3S1l/eQOrd8bjEIB7bpK FziRGUrrOapbG0bIXVoIF7ba1q4f+SdzgZnUODhi0xxw0KTgkqvzvmypuu13jKMh8NLMIFvIBL5i AL5imHSd6j+8Sr0QhAo2X2BMxuCGHWxNwRZdaWfwrJeMgABo7u5QqPNR/e309PVJMnNmrXH+l+YV dwN2EFQgscFwICoYSVKP+EhvL2n97pwQk3Q2sH0Z0fiJ2JItU82zP/iRrU68MqbfoP8IXA8JrdhE UAXSqOOtNb3nenTYTe7TUTD+iYp5/JfbTR51kYvftIrAMUGxsaZGrnRMYKkLdPe+CpLeEEABjRUA TgqMiXBMgGYYCXTlAO/dYF16dujEILkVpLER1h/EBiMGqxzdWLRws+Ha1lr9QoGRByvnA4zYM8Wm LElTzpG2OlpvM9ZPbu1zyMGVw8WDY+hIrjYkyc25MlXxyVtbH5LLQPCwqoeJ1PUF2dpLOOLeKx79 Oj3CLEZCwFBa2NparsyYtWkCCrpPXNoMUACaAoiHARmg1sbMWlXh4XPKfizoGg0QD5UFrBSgCc37 qtub67T5EmMG8A1w6ODBwekAaD330ODB+i4A+UF7/2GlfgF8FyqmjQdMA3AGNmqz5cMLoydpCRaW dOLK2doPPGD3CLl/w2sGEgWeL/jFIkcmwAjmR8w0fo49CGN3PWfX1C9cbeGBE1RlTZCezkICAO6k JQn4idKcjnkZWi0Mz0KvNIw5W5JoeiUFa5ItYJVw/gAbVRDQ3ITCkQkHIWxetKRp7j+Kfvdi6Utx pa+CXzCjEjyCWZOif5T/43CSlYmU/9NGA/whDQiEw4aYO5hRNgvRANyKMtqdhP4F/Dzh71bM/Iey 3yw5Pv+bS2vhoCdYweTuEzZWcLh1o0SXj8+IIwt4wDaV+mxl4zzj/b2A0iAkTGw3SpDFkwCcmgcr AHtPDRytaVok1edQ54LKpyND2pjfNmCBY/KCgt89JNdguxMLBRhzNmZ9afu0izh9aLKxDg2+BXyK XaaKGmOx0ByO5IP5A4f0K6foVuAUrDNIpyqFojUCWC0Rom2woFAPXPd/qlUtkJuygdmCJ4j80JwN Doi+exf8bl/oxmbLR+h+0n4r4OFAfUF4vjAt7Qie96FQeZmQLzgx3iDc6UxVqb+PXPnaLpToi5B8 GtFIhdsE1EW2BwfAvoO8Hb+1RdCUi6VilM8gPzFya7WLnL3HRnHxblZJQxMDUrBomWXOQIf2nZIq dDkY7jYmwoNjlbs1R6TFHgSw8gAFnaGzG/XLwIWHxUcT2fCM4JKcevwz7ECAVkrTHG6kpJCWV9Hk 7OgY6TrUtkasKQTtA1caEzpmDpjROvXiLl8b+ImgNXDoqFBwUtYEDHFYMqRNBT9f3tJLbtItCrAt RmwbCC1FCNAqzjEAtLZRwyr9InRqkBJzWB8ZMH+d6YNe37Ugxgp6j17eLtZjiTs6TaA1gJbG7M3G pde92jEkG7Ab4Sq1EC474MYCrdZttuUSPXDsFERgamdljXP1N350I+0cGyWde88IwKmh3wvilw6E XGnJW6dbcn3c7MW4qButGJ1JFKkM99M9AUrcf2nMvM1eDqYQQAD0FIgQSogZzbofcabfdOcr+fHM WguSsXJjIvjCtAAsVWFNQ6tHS/JgVfC7lP9j4QE8mpROH2I9AoxH2ZFFCE0YBRJZM6uNXNnpd95u mPc/pX8AHHi2dCZOICmPjyvFKAEtEaTqXB6GAlo5kBCGgphQIcsNMLNQEv9MWfwzFZRLrKBdiuUp 8PMXy2a98Pk/J3+TWGlfvOeSHBSBJo6fMrkhSJuUD59ZJ9XnYe4bw6dZIMByVcGh1tphchsMJRMe 8BY71gyuIMoYVWGQscMX1onUBWJbltiZA0QLfA2JOrPxyh4PZgR6bHcPKtSF0TZtMRgOfcHPVzaM kXYvChjeDw7lxrhuTeOiWlMB+GtAt4TUrKwxvnN+SO/BQx9BqYN/mHDFOxNTZuINgaR1H7m8Cvi5 wkpDvqY0VHYzd9eZ0hHSfnnIolTPY7NCoKpVFjidPFBkR/8PmLXH6sDgRAskth8Fo8FVXwBrYq+M WmXqhcAEapyFIOoglmxllPXhftjDAXJ7e3O5wIjeIlBZqRO9D+BCP19bD86UD4Qc+Euk98oXis5K ojIZGgdeccfnWqNfBHIlxwxpCh2alyPQFqsQCvrBqgIUbADXFXi4I4tvpXJr50ibshpvAvHrwnJu gOxggJba0NUzEfAPheC/QZcBcNbpPq2zFcPi2XF5IN5SVb6r+8QwuXPy7jqpJgvwHKS32ooZT4U5 Z5P5407mApxyMBgWIX8IpzsFqeVG8wrPRWP4o6Sn6d4WqSobwATdfwoFcIhrze8D1Q/QuvG/XN4p 1hVi9hlrKQEK0uBxvjsjHSG3KSVge6X9kcFoAVql3Hvs2g45Tg/D0C5GMk088MvqL+z2sEWY/vPg pQJtQPcQdBPYoCELHFsrJnn7aDzBxzKZCKdlgowXKxVDIVpROdg80KjQLABUxPvTSWIYTbIlAtaF EKi7jp/fVNNYKNSmAIRKHFwgVPTfSAAwvGNlDVwaO3Amkmpk243p0EKcRpIMLBejtZZ0Pjhcp+a/ dTLv/xb95wsrX5+2/M24Usr2S+Y8U5Ect2IO0v6VkassHuz7jJIEuCJsgToOFbSekHoKz9A8Y7jk gP1MBWd6efqLJXP+7rPfzdzy52X2eZW27G/bqt2kZ0rTfTRyGMI+oJ6fTq9RGHliRyLyOvB3wIvX vnVpwIKEOeAJNxIy4ekB4WL7iYZ0Bj4GiqbQLuZbaXu1LYNvTwAp+sYuHSQ3vaTDdvd7hbooYshw r2SaImPHQTAl2NfDsC0h/fo722tV+TJYCXzGibk2kSb70MUaYDUBLINhYueBBGI6YGmjAYjNwC2v aa3qXakJM4A4Bwb4uTl9tWnRbeK09f4sVReimbNyaKECV6DL2eUSD5K7PjI00Rk3qbk28qTYruMZ Jz3726TolTsKMDWAuQ8OhYLvYIW3x88pNO/A46OzCeIBHqsxf4P58zvE5cVYTbgFD7WSHa3CRIK3 VPx9Ph/I7c9X60SqDIUri4UCZK3aQgoFAyEyykKBVF+ADqmDh4hqSNlmfb+XXAqQ8chIMTzUaI9h iJnojw5hOVmf7u5+qSo33HFjQWWUa4t+Pr+1n7R9faFcaABPlocpWitHasmVNOTpO3ah/LDtY0x4 fwLRcSUxs6fADe8hp9fo3lXoc2kqCpEf9mGN5YP7gcs+dCcBCnZJtEUSLPVJwQoTAGR1nubWN+No Mvy+cIMaQ+fIgScCzBMQZqSlV63QFmGlBEZTcdCWQjX357NbxjGw8OB8XxPmPa3pbBUQ/FtpyNth KRsi1/2hgfAozjBNoqDF+Ce6FAkgZKCfdO09I4LfQtmwJFPJAT6fDCsJAWjgNLP2oxc2rtG8A3sl 0GcJTVmYCLansrkz2t2POVx2/gDbjyCwZQrCUIAVU0CxFHacWCgEHGh56z1V8f8Q/Sbu85dokD95 RkVG3PL4Z8pTsChoRfy0lSlhHEB6gAjwTGnyM1TTI4nCcD1hGA0AK1amTluRGrc8CZgDBgrKkuI+ e/PXn7/yp3Wzl9kWlbtyqy3cvRexXSVmqgATnIACEMkxgIKfz6xVGLKEtngQDFp4ydvs+Pwx6UAd xWJ0GoOnTT1BJkZBwBK4g+x+9oVubXYtg/3hmzCgiokkY+YW/fIe0uol7Y4738PZxdRpZ4D72Xz/ JJhabFrC+DUGCn44L1VoeXWOHDH1udD+aha29P8FPsbWxLPzQ0MTIxHYaQGEwfJGQu3O3QPNMrkx j29OYr1R7PMyFJ7yHD96a7tEi1AAtgPcB8zCawqM9w6PoffkBUMKJgAZR0xHe4hKZdhLwNmDfY7H hySqAqEWs+FoPoxcgDhb3wHwks49tIgb5+HABxpYFpq4Ul3xDxc2DJFOMKlUWZBvhh3tcAttuH0u 5MH99JORy56GGu1cvj5d5IRtxPlyUnWB5t7XbD8ddRA+BzMqoFl7MExSTerPV+TIgYMT+h+utg4P BUCIC/oDkSkiYzfHnHWaufJIxSZWlurzd9vEHcS++dRSvgF+iHfGsltT3hrNkjt+C2AsHjkLATG9 jdGRqn4vQ0eAeIfJ3e/P1sp1ecjkWRJo4aw1AxRc8aGH0nf0UhgKMHNtTsKIh7rwdG897UuKeqBB HDAbYskG3DhwZagZ5EfhRCIE2ALemUxVCFQWWCWYbP3NfRiJsqbgcYPPrk+u0xebOvaNk04smmKQ voKlYEU3Oh0igpTonAKIWe7vh6PEtiNLMg4spX49yjzjQ5zGhrV+572GjapSpXqRDIlrOsA1hgdx dkQ81kWY0uR0qJHQzhM4sujFQaxwJmGQ1pykcPIwPuBc9M6Juf+96nfPr/jj8/yEuGVvTC9PBTQA PjCtZNaMFXOm08jhRO6A+gLTy3CmMe03jA4pmoM4UPE6XitmzahIiVuRHlea8lx58vQVb05b/trf l//xP1f/ucz2boW9QOTKERg5e88J8Cj9T4eCIFbh9vx09guFrpiWtaSzhUZfnysHI8iE1S88R9TH UAygehjpOmTv6PWQnj0X+VifA06QBSM8UkPmBs1H7YzVS+447hwERoepFpptwYCYqtDe/hdsBEZz jyLcTzq/PVWp0HMlhlRa2ZUMYLJe92EnaQVYZtjpdGwHOo2GRcvMooTHF/KAUmhu7hUAR3Vx6LPQ kdGGHOvQ/v3n5SDzCkzfJyttND6vWXB50Ab+dTCAAhOaGMzF4B+ZQOxwFWAFwOGvjGnXaN+TGrJw mJgdXABujTrf+WjvCOmytR/HsYRg6awJUjsIOQek19RxZARLqZGLsp57hNawPbJMpEMQVQ0es5uc /tK6HBbMjtRWWDg1TTnGu1/RrnCaATF8LDfl0LE5GKmo1eQYO3dQcsVGT0jkW2grROCJsTOMb4jc 3ub8tNrAzspIB8qq1Gd/aS67ROrX2d+GExRgIRnWhcq1vN32qj5yiYZoJs03CPcDTf5ZIDjmJg80 t/fIdQVsyQ1yMHP6BtP79wPXfJhh6T3RtkOsKRBh+iZNbkkFQ1mjLb40aMI2xmDsYIdww7SPwce4 M3q2Tr1QirWmaVipZeMAlzh8Zs0YuTNGOv5ybptMXyyk7gYWZti4isaiK0NGOC9smA3FDKyYmB0R Po9QeK7c4DW3vla1WGZCM4SBGsxWZEx4WCD8IXClh7tDF1U3d28xl9bq3hapioTqHImGK2nMkNfn 1jUWKBqywF8TqvIFqsJqdaFAnS9U5YlVOeKmPKkmj1/PU1gXvXs44x/L//uvP/+n50t/N33Zb58p fWXGsleeL/nDs8t+9/zyl15Y9tsXS195ftnLzy1/+RmsMXh5+opXppfNpJPMkyegoCySVWShAJ2F xDhai/j8yuTpn73665Uvv7L+tRXWt/iOIr6di46/Iev7C3IAvb/GCoLYKNpz5OxmmW6h0JSJeXMs tOaBWzFKutHPYrzYFRr0ReeHsyJH+XQwIngBwJPvr0gEhgylJRsLaUwpSkve6oZ3b/rBzW+33Tks V89niZOIZsqA0TV3HwvgwtwhP3YPDpD7XzlLpLo0TJFbsYpeauBuMZT0kLYga1VD0dl7EcsXdi1R bWnHMZC9YVvXMRAMLBg2pdU6s6r0iVJjtq7/q+/aZApdDkB3DUbzEuTWjNWGt++5L3iC42zIOvp0 YV+Vzj0IYaTMy04tgNXeY5rXqZYC68BiS+AtZk6dttDZ/+0QVhofXKUrkprnyG2JEvMcwJwa1dxT DzXjsMNBdyjWWGN6IjxLmbCN2DTgD4vvJ1e+slVgctaOMY0aM2dVY5bp7g46KSIMBUoTWK5E1FYD p05d1Nx7gPZwxcxIQAvuYw8JaR01h9H+HSCB212fi7ABn0sjq0k1+qxt5uWnvIdXWeZj852Nh7zd mijXZHxrFY6SdhrwDM8lwrvB/kTmUtBwHBN21zDuNGDpBOKUL4lM4YAN32hact9/w4dNpr31bdtl mkIRLeVFYmBNVmqK2vqNAcoqJsZph9iwYbiTpWP8wjrdu9X6RLaVAyysUpd/+OzaYXJ7DKeLbJAa igEi2LodhTVT2TjvnucMzQcxvsjQe/bxw8NdKF/ysxEbBljIYHvQtdH0CZyswJSCvA7Xzw1MmlCN 3SsBGgZ/SNqvj52xdderb36nvvqN7voe49VvjZf36K99q77yNfxEe2tf4/Vv1Df3q67tV185oLt2 QHt9T1P7jn1X5AU7X0/Y8JukHa/N3vqnWdtnztr22pytr+MF/7FtZvzW1+Cavfm15B2zZ217/U+b X5u9O+2/Vf7mhdLfv1g+O9yAXJoEKv8sqDxmEGbHlb+JY0zKZ8eVxc8oT3q+ZM6vl//+PzfOLHMt qqKvacDqLwvWsx08V4ME++lQgIxxjHT9dHGLXP+WwIQFvYADwMx3ni0fJT00YhzWdl/AHx1oiYme EKgGywwYJgjmuPvAJRFAgcKchaNgMOKUu7bpvdsBMzh01js/ydVz2ZIS6gKnKtT5LfePBjDL6Qbx AqDpJw92tZRLdRk1Nh7fkKBwpcqMvM365b3kcoCMsJIXDHORCEFlwvMuaJ8RoU3Hg64H9VJdEd+W osDaGHSHxfpM7cMdhy4pZJos0NA6W5rUlCg1pwEUdPnA5LGDmGjXaxQKwmjAiifbaRTwk8e3ffZ1 qvdlxmw2GwL0SanKAygYIR3qK9/Xagrk1gQJRQPMMTUUunqaxlF+fGGLHZ3fBhIagQIm/BRIUwfJ 9V32Sokhj92lp0KB3MClXnOawpqtaMhz9uwDKGBnMoTCuukPT3MKRw9DEzkL3Kn7XzYvwxyNjTcF CtY738LGLgstCTDHAxQcbFGMkLssFMSMDAvEGNbIREp8Ni8WcXUeAocayPPfhgJ2Vo+EQsHVIWsA v4J5ckQe6390uy+s078NQgWEnG/HukqZNvfw2fUjpH2Y3DvculmiL8JYPS0Yg0eAk70z1uLHPgXc XG8oMoeBhKOSkYQxXTcD7tNjBHn9h6AvEppgorfKDL/SYmJeCiwSUN1Lpyv43ZihHqTFNn0BbHh5 5KMVCz7SO066PeTROP4V9mN6sSvnZjuxbGspk9nekbS8xXfOEzTPFbrm4+VcKHDBNV8Q+aPYsUji XAw/rHAtXuZc+ptVr75Q8vKM5cgNQNkBBKaVxMctw+6k6eXJ0zDa8GZc1ZwZlfHTSmYCDszcGL/M Or/CzqPVvNjHhxOVtdkHzyuorzdpIm5sBgGW/f3pNUBp+JYsiTVHbMoCP3ej/eN+chuHVgX8fn8w 4hsGQ2FDFgp7BiH2nRF+OJSdZ1ZIwLc18cAcy10cYNGbDcvuERc4Gpa7P8k0RWwmkdZkJgMUNHf/ BSdxURnAQj3y+JsWvpwtN7VhbxGsHxyEOwEn+hExST74UpxEG4ooUYh9f02AZkP6T176SqTNkzjS McFtwk4lOF/H6Pc/XqqTqbGCUWZOAc8OnOWIgzAWHcsfJJGGN7bRZWIsToA6CAOX3Vpl40KlJZft wsD6B3W+o+9bgFPHvRPgg0uBVztTaN1mRq12AViNUUxmeandhxsGI/ksdi5AKNJfRw03GQEHAesJ dVnsizYUFl6sg9BBEAokeh4wWJxeYuHWaXNPXFnrxfwCdZ1C4VFsONyDjfIxYf7kD4/28g0w17fY P2bz3SDwSnuGTMPbaS2/Qho3upaAg4AlH7TEt9aYs9O8coBcdZPHoZgMboidRzXlzTXoc2Pl6rEr X4KDBtv+pIOAUHBxh0RbSGt0sQ8Fn1HLQsHYpHe1TJq05O12n2OhQGSPQkH+4daNgMAgvccufCnW 5mFvlDUFDl3hyJTUF5zrU3vJYzp8CR/cT41auGeBrSsIAuNlLQtw2r6LQ41rdBhwxq5h2p0KKwyy 8xsnTbb0xg5+DOEQnhF2rEoQjYUvgEAxGmKRLfw7I25y6x7R7Wj5jK/NrjZn8e2Z1TjSkMf2MsAl sGViz6+Di40t7E/MmVUmXrWzqNT13r/X/em50lefqQAaED9t5awZZTSkUJKEb0Qqy8DUYXni9Io5 05a/9mLpS3/Y8MfltnmilkKMKtPRzeA04Tt09LyDF8QAU5OHfzIxs6kDo6Tz0Lk1MmuBqDlDaKG1 FpY0uaYQDsiLQ73wFxkPOzMwEELCxbCcM0iBgB1C1eG5sMq0RORAFwCTgI50gYazyyZ6SK6gpQAo 0ObjcE57MvveH4SCrhNeMsRubACTicOHLtQBh6915AnNkX439VzXo8M40ZeV5sBEBiEUNkt4uD4P FpCAKo2SO/tb5OBrC+gUIBAe5Cf6wguBxqZ7X4PLhqlnWkyLcymbcq3df6FFF2OsmcYJJ8zUIY1B P83MY6F7v7rjK1FjrtKWJzJhxQgmEzVFjr4DmJR/aJWrFqKKWVOAwQKcyvRzdztlw1iYMcJOUYJ7 hKJDZCJD1TDmGWCp+/Cp/sOypgKlo6DKnBoJGxZGw4YABRuMn8oM+eH5uqDF+tTdzuVj5EEwkv5g wrOUKFxTQg9HRvvCaDsvGbsx6sD4mJ0TroQH06zO3o/Nv6e2nP4YnESpnZbMWdJkprzV6nfvBK1o SlgXgJk6Do1FaDQWqMdecJSwsd1U+NSwIWz18Us7KRSkT4YCS2BiLB4z+c0sTIQVLAa3RYTdnTRO Ag5C66YR0ukhvYYbB+ARpA5shUAjAs6prrDh6jY36QJKD0LrD7jZ0ViETMzCZf0yuMD5xYFmd76U q/LkFh4NP9KCVVtqaNLMtNjJljExBzoGx0+HbcEeeBlfmF36aGLI6w6S/m7Gvs30EdhlmYNXTcsP 2MoE2u/MZVue6SB09jVJGWyeCxsDbTnLbIv/rfbV6ctmxpUkYLviij9jJVJ5Aq1MTqUXhhzjlr0K OPDHTW9+biviN2eJqR2kI9wxpYIOgp7z/UWhD5NBgdhXDkU3Go4QrPYPZ1fzdZwqWyL2SwJvtCXL tZlHL2waJt1+Mk5pIKFJhECkVCmMBpRlgS3ot9w9LNHMrbICheMJHJxqa7JEl3vk7OZRcp/+7U90 jGoCiwM4n0dT2Hy/wce+iC2cTBw1dexTNhUKdRyZKxNugh0f2qx9p0WwQl/IEx0iGvNmgUllk6Cq 1z369Zp3cc4PTSZi7kafvNa8uIOcPj3QAMDC7jzmdm1pIkPeDrtgEAduPI4O2QsbkRAJTHrFD3EH R0DwtreU4TwNnFaNvjwmEzXFzr6DHtLXPn5xleF9rKwAa+jgIOYb8mrUSy579V4yyKBkhEemYz0V DueK6i5NaQUwqnagVaQwYDG/gFX2cF3BbjpJchihwPC5zFjEN6Xz2R5nY9Ja/fxrwzYckxj0sIv1 h8Iz1Rhm0usnfGR8mNxX3dkjU+dJbeESejaZePLKV4/J1W8vVUkM+CIMoYXDxxLoXJmqsOnOlx7S 42fGYvc/5mVwE8MQAcouu3VrDO+Faw6fSCaGMwi6/CgU4FsCtUVXhq2BSRMyp7zIwN/pvgisAIs8 bfTgAAq0hT+e+QJYAZDzS4+0AMjsG4WwHsCSIgeXx7jsPjmDszfDOx8Z44+uXzQYjoUYXuJ9RO7u tJfKdDipgJ1URusKkqeMqZ+Y4U+rKp58xV4o8m4dYNIkHKEZ6Pac2m2vBMQTmbhVxmRlc3a1LglI F7aZWyJvRrOmUpczNVyZYMSKZbk1Q2jLKbW//R+rX3uudBZOMKaDy2iNcRIWE66Y/ezKpBfKU2Z8 9savl7/y6qaZJc551S05GDYxp4fvjKjCi0AB30e6p0JBBA0ACkbI/cPnN4J/CqAEp4Pd2ZYEpSlj jebt1qH6MawG9zFsOH1iAEjA68MpoDRoP9xNzm8xlMjNhYB41TaUIngopa7Y1dXgxuaCAVp4nCum 0/vZqlq5ush5v8HLVg+yzJWM3Ry3rWv8AAeuWrnV2NGPaSOFam7rgGoch2UNMbTQJcBOqaAWiQ4P ZegrzcaBpR+8qBCrcoAOsSlmDBcYuHvPV46RjlvjLesM76AKR/qJMEOtyjfe3+NBgo1lJzSRHYrO b8cMFFxBjO6D4bB0/KQwLMY3ZpookltS2KYnx8PvQSDRILbyhVSRkd7TdnupPm9/q3SIdGIdIMO+ sJGJUSV2XpCbTvXsP91bv1o3H9bMNybTeQggCbl87bzGzt20xGiwM4RQACclASZJy1qkjnSJhnvg tOQxuYHjU4I+L+MJYoQzmv9gi0KCAcbrAY+YnKnTLK2xFLJd2JjosaXVaItbe5uGyB3Dgx1yTa7E yAUoEznT8SkMvE3Wj266XXBSQcbD4GZgjMhPglGWDPsGYkAr93q+vyAF2yc2cFij9mSJ0dHLOwAK 2Px7BAqKrwzZaawgOq6ZiSFNOFoZoQDYO632ZwdWUCjY4MFui4G+YNsm84cifYYSB2LgS4Vg2UCu mm5t82LBtpc9Way8QlrLpsN8PgwXwx+8I6RPc/eApDEf+zctlOxhNwGFgqdMVp804D1ES1D8NKzM htGoA8USV7efPOryu3ZbKsT1uVJLDr71DI7VkIaZaOw0SWMnotD/BlhOQZnBsm2ewsoG8NPAcSi1 Lvj32t8/W/rnZ8rTgA88U0nriksTqFOQMH3FmzM+/9Ovl//+z5sSl1nnVjl5mIa2Usm089jRizQO DH4370Cb0DuZFZDJUDCOE483YWcueo48qTFDrMfxOPyGwvWmijbPmWEUVEoBI6woiPLGjr581Edu fteqkNPXe6E1tGMBD5jLtfol4CF6MYWEPQj4ypUwDmCYFz5v7zrJ1pBHRiK7h8nd75rragzzqwzs hIQUmTNNpONtMpde99ncpDOIDYCs98cGxdhygwCd7dll7TokbyqWmnhyexZOnABeZMyUqwqAwHtR VTu+dq0Uaamposk4LFO3ZK0zLLk0ZKG9zDg9KWJSmci87vA8pbvB02vVn0gwts8JUwtYng0Lj609 BwI0dqTuAB8kH4ACX4hpxRcYic2cWv1Cze294CZgSjTkDWDJSpCNacN/M2ScTvrque62bLesAEog NCWAhobnbFhzRRqWFbCFx2c26j+X6LJldM42dtzYMV4hbSpQ3d0xigUMOMuX9VtR8rHqECPwASwk Gxwgt/efVwo1OLVJwr6/w4wDZDYY3utlcCzkHcawRrVYZsT7C6zxQlsCRpw0hT+cW9tNwKwP0nmz 7GzkaPA5QKvUhodIt63niEJTLDGlKZ1ZfGNKuDM3pvAYaM/xS9vRKNBJWeykfbl23pUhZziDEJr0 Mj52hiEIBrifG7RLZEYcJcEOqQAoOHRmrQddgEEPuX/owmpRYx7bwUG9Hh54/au1b59+eGIcS77H KKQEQpHXobIT5wJYyvig+dGxtbql2BxtSaYzmjJoy0AGQkFo8mv1opnFYLiRgUx+Pw6aKfoBL1bm DbQzzYBRUi2GX1Bs7JkCMxf8L3ATKnWJsuiwdJx8ws4/xxEZqLZmHnasm9PEzqyVzvn/VvsfM5a/ BBwALtq8PAfnm1XxplWkTi/5869Xvjxzyxsl9oXVjtxqWLmVAzCCATc6uooWSIDXkw1Gav9FuQfd 4SnvMYy+gADp/eHWzViva+NINBxxY/YG20dfXhB9eWO10ilaZ62zPDINkKFhOuYXt5TxhNAEDMMv 3g227DslFZ4EQ8wFGZY7U+S2FJkpHVz+I5dXASWgLYEsFBRG3wGB5EddZOs6BiiBRWrhd5H4QaLO PFCJ6+fKHFmAkyLLHNgiTCVrc7c4S4D8D5LbbECGOvU0+osEbxTUXNf5TY1qLh01Ru0Cht14YIB2 Wasekjbw1mEZpo5va1RFoP7sPGE6PCGjxlK8QbP0/OCJUdJOR6QydP5veChRgCZb4as3mT+W0zL1 akxEIqTjlBt7nrxpnr3nEPXlh295bVssQOCzFa7MMMkE+m3KltQXaDt2D5I7dKC6NxR57SC1SnD/ 3rZR3XoD5iix+dEaXhsWwVpygKLr7n1FOxMH2M5ErGoAWmXDkQVAb8QuHEQAtlV1a8fD0CX4ikDQ zbCeaoj9CjfY60fk4o9na0Bf+CaOvJmLv2jniBAq845dXkNnJ46NknuHTq3BkRTo42OBHE7dNPCE DbnfnhJ1BE+Bu8f29URTkyGMdAwDUbd0H5Q3LsSmD5blsi/UAF5kmmhHAnZa37ZVocmmgwFhAbiH cs2CK0PNgWjMMPLqk8hgdlDY4Q5v6wYtJm4QClhWoMs/dGaVl3QQPLKB1kHtasOnYtpzKm/OrGK5 gS5jtWaB6+EPtBHMPTmPgyc7QO6eenRsi/l9iTYdjqyCNghgJ4IhhY2lTMllTJnqj+lOxhvzXgwW eBlfCLtxb/mav3JUgIcLj4ntz7Y0Ac3a0KhszEDU8BykRIoGySwUSOhkFayjsPNW2Iv/Y9V/vFD6 yjO0Anl6OX0VQkXStPL0uM8AB37/h42vlTrmVSHCZOG4Nso02Kry8IQl2jIp1Ofuv6jwYKD+Ke/2 Zfuz3OThifM7a+vnSxqyN7s+a3r8bePwz7Uta/K/e3fm2oyXRbN+v/L1kgNlLY+dN8fbHjI3H5Nb PYHLlx47T17eu1m/HMiPwkon9NoSFPYkiTGp1pxbp154zWdANMYy70HajlTIjnGgr6nNUICD0HUc oMDHVtoFw6+ufkzavzktkupz5MZUJd0ioZM2vepz67TvN17f1T52BkMHaIWxSfkhc/3sI+3eFgW+ gFjPQZBxIP8XsR3E6sWOjp99WLWLGtFLLmw3lIBVxQFollSsEHPwBIYMqTpznWbxsUub2h4bh0gP nfP8MEB6RknHPc+phkvb1mveA3stMOJ0CyxeMiVLqECCqgIUNPcdBnFlsDmru/7KVqkqX0rLMySR YhXsqmvM39esOHW/sZ/cAjs1ioP++odJe/t48/G2beu0S3FGCuvn0pZDKS33wsysqkDXjj0IQexB QCignY/JYhMiksSRXmFKELo4QvBZ6ov2NctOdTX0Bq95sBW6z4Pf8rDLf851/6dt+hJpQ6EMTsrJ qbTMxoEz5oxa09yNug+ujxt9OC0QteP8Q12tahG+YQHfIpqKOUE7B1iWRJ29VbfMcGNft69tjDyg 3b4DbtI7SG5deqg5fGaNvGkBjiS1IufnO9IrLWyyNSO2SdlHehoubsURoywUOJCEKzTzrg5OgYJA zJtT0EC0+05TVoCjk1goAGpx5CwLBUCE3I9Jzzctq9i3gQMOYFW5Fd9qKjNxlE3FP5/bdHXA+pjc GcWkHub4Hoc6LvWZgKLUnlwg12SApAmpz4h9xOYMIPBs63GEr8a8JpLEvMs7xrqy0WZK9gJu8uhu wLnNuAwkQY5zPzJiBpuEex6j00siXaj42rUwWWKTsDauwITTKVc6Fv57ze+eL/kDti2zBcll+BqU 6Ste/1XZK3/a+Kdyx0KBjSthIw/mSO+DIxl7H+gX0RIOoPqZ+9uk4zTZFIlyTLwJgrICYL+dx059 uf7Ix/U3dl4nV3bd+XFmbcHff/LajE9mxn326nMlf372o3//z9o/Vxk/UWo/2GL7bIv947Wmd3Ge raoINh8nD1NiJrVjMARbgFX5x25+MUbaES2D8L8B692DGKqiM1FpJVtajWY+CC2dDMDEvlHdT4Zu +izrVO/XqLLqzFy+KVHkSq00J4scOPBEZMhbq31nt7XsUKvy8MVVe89Ub3Z+ItYUCsE/NWUBXQd2 CqyAUoIs4OoHz9W50ZC52XZdACV75xGg0zSogp1x4RQD7KSeJ2rKrNUv3mpfvq9VfOSS8lCbeGfL J2v083F6hi4H/SYLenPooeMkTDQfcNCShlznw+8DWBqNlSoPyNkvLEvRSbHwaJ4CObyQNqti84J+ 3kbrJ1+fFnzfpvyhTfq167P1urnwvWBM5ZZUqSleSZvExUacOwQ/wW44VaHm3m5KV8Y64OaGZaBx yCQtdEy9g8e+VAszm7bsShVPpCra4Ph49/mq7y/Jvz8n+6a5fLPpXaUqDw5FZinCAXqOdKETbVCN LUteXwzqMIa44aO82Q9exv4LEhxdAtzGmVdtTKMzRrBIA6fVqQo36N7d5Sw7eFH2wxXlN2ertzo+ UTRk1RlzqnXo5yqcOCC0yp5d5czBpLYpWWHkbDF81Ou9HMS3YDw8eWEH3ERG8yw4o8wSX6spuDRg wYbEiaZXJlofSAuP3Xd9rXDu6CDYs6sR7bkyVfaR07UeLC32+tHJHb3sdqzRvYW6AC4qmoNUOroE g0Uge0r1vG3OT/de4H93SfntOel2R7lS9baoPrfGlFuLuTZaph72rDm0oQxLsGJfrBOa9FbZMK/2 +0i0Gp/Bui5YyWB7oAVgs05fXMt2yGItOlbUsMMuWN2PeStKOhs2DJN5lioAmWR9QEcWMP9/q3np 78pexelkJQnYb1iZPL30tV+VvfSnTW+UWOZXWylLtCSzQUIRG3MOQwHejR1AJDbwngoF0XYSfOkA 6T/p2tfc0dhDOiXGHf/wYeKvPkl89vPE51amxZXMmVGZOH3Fy3/Y/Mcy1yKRJU+gTePrw6OG0QOi vah0DmSayJyssGaK1Pm7TvHB/oJJorUnYI4H7fcOgwDAgqtNaFjBkQcy39JZ7yZDHhL0x8ZhMIxz 39l9ZF3DO7IGbo09G7AdjHilOXGFLb7cngwWFmQSgUWTI9JnVOmT6OvqcIglMCKwpwr2KLV5my0r bgdPY76SrT1lsG5whHTtPS2VqHOlhswaRybfkCC0JLIzqOn0TuTDOO1KnVHZlFSlmyMwJ6BGmwAu wPKm4KAkYxq6clhBwVFacmu0xfaH+7FbFh1z2MzesyN/Wa1dDGZUZsvGKUzOFGxvd6RIHTihqFqf Xq3n8nWZfA1OeQXjjolXC2xdktKcLNOnK6w08AhyYk6UGtMAbJvav2InHneEzmGTsiUPsc7MwQZM Y4bIkMI3JOEsPuDbzvRqW3qFMbVSmyrQZkg0XJk2Q6BJUFCujpP9XNhuX2Wag8p4nLvLWvGQXB2j 9f8YCQ/4cHp5yPSF+dMa3SKpoRA7KZxoYeHC4W/03V5AvGHx1doMfBZDMrgqOBnMgVVtInUifGCl mVdhz2ILJuERtpiXPvBdoq5QX/3FXUpNMagAO85OZk2s0xZeG7YFJkFB9G1r4RfK3PXBg7+DVawW TjVVqBpd/s+t4NdgPyZtjw2MkD5z9z7pyXxwSQSmVDqEE4cuslER2PkqbSKIbpUmo1KdLtDzKAnn 4EwJU7LUmApeLU5WxEFS+CYCJOo23qS3c8bQabaJNfrKGzZsRWfX9N0LntptqZKfzJPqMBjIojR9 D+kUKAhXY0avaEsjpc1oqnDCmzO71LHoN3WvPFf2x7jS2YAD2IdY8trfr3x55hczl9sWCJqLaAY/ 4nFMnbaawUIBvo4tAgWx7wWb8g5KANX2wc4+Mrz1zA+/WjLn+c9Sn1uW9FxJ4rPLE54tiX9h5awX S3/7x/UvVTrmSW25cisnnPS0ZOLkKDqYToz8KhG5QVMejgoJnWXnF7F5ljEyYrn7l9r6uTVmHJoB oqW0cusaillW4KHTxsID+Sk59GGpwyPDzT0b1e/KVJkSAw7zAWUUtvD4Lg6bVpCYga6jQ4QVRDg8 EEuSwL2VWxNkhiSZNnu94ZPLPtcIVqH7w9109FC9ZLSTadvjkolOFADhxFIoVwrrtOLwZCuQ53Qc tubIBjcNd9iOUz7A8UTOb+KschSta5mvMOdgH7cpW6HPr1UtsD08NIYjg2hANTTqJb2WOz+sVb0r auJi8zsOLsCBseDy1FDiB7etsnLpt2RKXJn41jO4vzG1zppTa5xfa1tUbkgTNWeIXDj1FxS/qXPr /9fed4BHdZ1pC/UGGNspdrLJJtlssptsminSdPUCotjYBmMbUGMkzYx674hqG2y6bXA37saAUC8j jSQ6iCqKqBJCvY805c6d85/vnDujO0Ik8f8/f5J9HvTMaomsmblzdc57vvJ+7zsGactgG3vuzaoE nErkNeB7ElhQE1xYGbLzzEtrawIKMezXSGGOpp6UQxtCMSzj5Y1vdUFTcDYJTjIafNM0gHsgZVa+ eGeN6oq2mhgPETUViMoZFrgZ95v7KzYcjC4se7FQsxAYGsf90xt9s47hwAzkebMsm4veNFjkoOge kl8VuqFs4e6Tr+Y3hmUcC4UeEEi4+G2tW9mubzYQym7xhT3ZJQvT8KHQFEj6xT75pUsujzSOgfkF 3yqXK0uSJWS8M968peKl/CoyuH0UIue8sgWfnVynQ+0scEKoKqNxDHWXX9mXU7wQPrs6iAgzBkHW 3Ag0kuymYKrIQbXI8pr8QBSuWojvJD6+Nx9/rlCzAByNGxak1/qTMXB/rjrK82C1Fg24qWdCXgKp LgbDad9tY9NudWJRydJ1tWFQzGmUpNSJso9yCQIPCqjgYZB172dTIq7lf4IWCk5C1ZLsplBVw4pf Ff3eUfUn0CVIAf6AR/xv5rzpFa95IePoIrx4QAuF2LRxmooWqzULvNAEAaDgo/O5OlsomGSHTRTt UHXfhV/EBXoo/OyVPjgrcUmUOWAcSBA7KWZPV/1m9tY/ZJ1cnkp1P9QyKp1BlS2h/4Ij1Zr5OCnb 15R533SGiM7p8R3UER0KHLxp7hwoOrIM72g4FqulBTX+GAqa7h7QgbINw3DUD4YqexAzFOBANrXv 31yyKr94UVHV4qK6+fgjp2pIoawBlJbxsQKuUo3A5yk6HgIBf43v+tqQvEOhextTb5qPaSGZ1XNs MSqFAZw/COHums6/q8nOwehUv4jIXRJNlTpfokoXmNLgDy3RhiB6n/OPhaZXBuI0YfeJ2JPsh7vP xuRUhZDFFpJfs7CgdJmm+wstEIMts8Asjg16am9+vKk8PL9yIXAv1QF51T7r8OatJcOSONlpCk6q 909WQxkE6niahfnlYWvLlzXq9793OSe9Zn5KvTStQZpWK8uqCDpy9y0dKB4M30cX3yiNLVIvzKgS bDoagpPcjdVLTzD7Prmchtf/2ur5ebUQm5FkLQgDQkYNUG5wkgVJCnG4wAF8diW4RWyrVF0crAY1 CfMIISCYuGYxqdjrUV9zT9kbJTEwYFUTgm8ChoJkDTyAAwNTk744XspQCwk5ISSrNiwPx8NHlhVf 3nTe8MnauiUptUTeHx9MNT6v1b7cabpInC57vju7o6h2KX56ar1fKnHlw6liy3gT6SWxPHtZi/My cdO7Z7z4VvUrhTXAJ8SAhpfc2urnv2h+A6c2JmppzbnzGYfRneLW7QWlL2QcCsbBPyizcb1jv3SN D4gw4LSliTg41Ahy68RrcdZZvGBz/aoT6L03Tq7Mqw6DeA/G2EGrk7RLGL4nuMXlk0sZ9AZKRBnH 0eAdfeO7jUm5RxYW1oYA6fSYNEk9J+8kyH7yoYDSfqxQQHGVeqfSf1uq6/75ZMgxrm7ZLwv/6Ijz 9OTAaYq5nom/m7ttdmLTC5mNYYQvCvudslA491WadBDhaCsUQIHCCgU2dsM27pl6s6kfGVe9nzkj ei4OA6jlip3Syy5e5JwkcY6fZxf18//e9N9Jx5enaEIxouYdw7GoOEsjwN9x6Jta5YOz9c2lUaXn 3x0yXzexvdSDm4EHOw4Oen21Nz/NLlmSSTSlIa/BW+Pw4obb35DRVMbS5jSRUwmeRUwGwVbp6ujR T09sKDiwNLcEinW5TeL8JhyBiFLrxRlNPllHpSDTpwnIrPTNrQwoKAnbUrqm4uoHXfpWAxphTFqO W8IaCF+QJfI+9JUH+9H1A+e3FR5YXlS5NK8WeLY5oJ0ug1erC4SQQx1MK/k42M4ve+Hg2bd60fl7 6PhbGiXO+nGoAFus2j+7eGFD1349zuWNFg0HIzeYc65fvbMuGa80DH2FGhnO5ojyVVCGGlgB+LDA dxIayjUBmYdDdjYkndWVdKPLbx/NSysJyyEysBDEloaV3to1DnKIg/fNp9+qlOPDFyZhK70Kq4PX Hn71rL7iHrr+xeV3cw+/AJzkBpxySoimekjOscB04o1C2jEiHAnnEQnEL05vvWu8iAMkg1k/YSBl 8XyElJcoDl0dadhVk559cGm+GhrNGfUiHKjgvyD4OKhl+U0+a4+KczRCjO3pFfM3VEbVtn06gm61 jjfkl7yYVx+WSVTF8L19o2Z1B3NpHLp+PQebd+YfCcbbkPYZs6t8MNSfH6wg1I5xNMnnl6zPcTR+ U9+8qWRZXiUUGyELxodC8cL3j70+ACqIDIMm2mHE9Or+sZ4j26riCw4vKawMyqkR5zVKYcXW4+0Z xOkK1geu0wTlV8hyDoXsPbnuKjrZgtSv1clzSxfh9CeP6LllqSUWt27GNqhmTJbxLhK0QFbVxp58 F/+tDy0orJuPl01GnSBV45V9TJbW4JNBsgM6kDsJCqyOHhZ+EVcuyAVKTCD+q+FsCJ/+v1n/R/uY v9jHenvG/37udiFOGdLIID9tUUHkMwEF/oRs7G8RVIQX5wQ2p4ACm9YIkShkT4/c/HVCgGvcHHuV wD5Z6pgscUqU2su9naOE/5YU8uf8sGUfvZRWGZFVtgym9fGfstQ/t9w/pzQAL9QtdZGHW3dd1TYa IPYgDF6eex2xJx5svHVoc2VMQfWyDdUv4TPi9dqVr5fEXOhWkz44Y5Xe4vIw0hY3UzkENNJhvnK0 48t9R1PWl2FACM4u9geh2urQrKognK7ijDijNCSv9LktVRFfn3vt8lADEOYpVwGIsoxJD4OHBAog kBtntBbv5iEdun95qOaDhly8O7KPhGSV+aaVSkA5pGJxQfnzOUeW5BSHFZYs2XM66Wj/V1pISwcH 0M296rWv18k3aV7dVLcCf5At5fJTXQdhjJe18FIhMGAMZiM+6e6jK2W338HJcl5xSHZxcE5ZGDiy VSzJLV+QUxaSUxqcezj0zdpVZXe2t6Mzw+geXsYfq998vUyxrmLlZvXqzVXhW4+s0dz8grDcx++P N79Xlb2h7FV8G7fUrdhSEb6jNO/icPMA0vagvsa+g3uO4dU4Hycm2eWL08oXpFcGgV9SeWBeeWh+ WSj+LO80ppzo/a4fjNK0XOjL4QBr1BtIHYwS0PDHALfKAXSruv3TbfVKfIfzKxdklwVklwTkV8wv qFyALz7rsF9mccCmulc+u7K+xaAeASbV6N3By1tLkjZUrX69LnJ91Ssbylbsrkrt1F03AvF4oOLi Z1tLwl+rXo4/3caalZuqXt5epbgy0AgTcw+BArwe2sevvl2R9FrZSxtrVqxXr8CH+PrSNQeaPxwE Y1+S2DCUFG0kcyj6QdR9z9xcdn33a6WvrC1ZiAEws8QPx3JZ5SEZxUHZR8Iw/uQdXLJbE6O+934v ujuE+tpRyzs1Ba8fid5WG/FG9fLXa5e/VvuSxeWZZwRPuAQmE0djZiACHGwznNpenZBb8iwOh7Jq gV2W3iCGWYljAaByDJlmiAUKfHkJghUESI4PBDwJnc4ALwYyFYUzspRjz/1uw29c5b+blTB33jbv hIblaU3PpoBDRABlWdM6J40HAAegleDLg5qHQIGtuTzx92QHEPNBc8WMKIGdwsslzc8u1tteJXZT yJ6Sh2xsOnhitPOGqf+Oue3aWPOJtvKSc+991/zWgbOvH7mw/ejtz1oH6vqMLWQaSztOjKpJ2mYk MhcgPUiEB9l+pu+esaUDXWjTn79nuNBuPNdhuNSnv2fiTMApmccii0RY4pzaDyCLnox3dV0fPqZu /eKLY6+/V5+9pyZpe5Vyd13ah6cLv7z8WkPP1+2mS2MwAjZO2lJGqECQ2ROzkf4pmXFmjHJvaB7K QEN8nNBjenEqWnXzo0/O5u89nry7TrGrSvV2Veb+xs21rfsvDagHQXWtnzUB89mEtAOm9vumq/hU xZ+oXXepfbRZBwwuLY1QLYVZxkgSHgNIRw5pUceFvpqylvc+PrZuV03Knrqkd9RJe9Xph5q3nek4 1GHEr9DJgJCsljGPDuk6e4y38Yu36S/gu9Q1fnnMeM9iSj7co7vZzly5Z77Sbrh8Z+hyz9g9MHVl 8acA5OlDbS3DjaVX3v+gMX+3OnlXXcJOtXKXOvmzsxsrbn5webR+ELVT+1TLPCYoE+LvjEnHaUOZ LMQZ+Kce7xEt6utE18/11xy8sPvTY0V71anv1Cburk5+V53z1bld9e2HWnXNg6iTVIeGcVJoNA3e N7TeMV68pb94z3S1k23p0l0l9wdufu/4/W7j9XvGS7eZy7fYS23oPF4So+YBUKmySRB4+86I14au e/Rql+HyPcP1O/oWnC90Mi0943fgLwh6F4xlmJS1+MAyZEH2dpgvHb138JtzO/Y1Fb5ZmbRbk/62 Juu9xsLiS3ub+2rvm29oYWQJDKEwzg8b7naNXsTr+e7w6R5TS6f+ErlFLG8gYqIdj+8YYwYJi5tj Te/UZ0BDTb0wG6exakKoOBqA8wIStwcBDtTZQAEt6FG5M5rdE98laCaSikEILVIBy7ohILlxwW/z f/SE6hdzt/omN64A57uGMDC/I46roDGi4ThvdOib8lKImBKXfdBmIo4YPzmXq4dxEn6tgGOS6xE7 jNhuxMZ/+ZaHXGgX722XKHFI9rNTiF1jZC/v33QDmfsg2YcKLRApzUMmyPjwjsN7v08PfjejeqAb MYPI1IvY22jklnGgzTDYbx7H8cEQ1HVh5EwLwjQw4EmMlRlC9NKZOTVLQAMdpPDsGKGh64nohoEI CIzBxKKhH+nb2J4eNDgE4V/fEOroQbe60c0edIc87g6AHNYYV8616hWbJ8pQOhZ8E3UgmG8cRaYx EgtBp5NMCeuRbgT147OyC13pRBfx9z5wZukag2rDiBbpR0EX2ow/SBs7cBv13EODvbBN2FGILjD4 wBYm7ktwAWNQv8JvBPR3fNT1IN1NY9dd1NWGOu6j9vvoRgdq6UIto+gOGW4dguk2cHOjCTsc0ORf DGEMGjhPQ8K7wMvPxI3H6hnblWnmtgAOp0cJ2fv+AGrtNJ/rRpdG0O0h1DYGBHIgiRm4MMxkmSjB b60jfxRWbzXOIboEhIzBUttxHXC0+nSofRhd7WUv9qCrGFVG0dAoqGDBpRqp/SKxaNcjg574pMPV mnWERcZYZz+By01kBHSgVYSfPs6fj7OeU2arfgH3w4npUXK3R8l4u4HDAcrwscl8oZBI9FJGR1Hv IKyZmx3ocje6PozaMb6Nw9KljWyWfFDCWuWog0ZuZt1s0bYzc5MdyKp/An+CntvGpl11qsziBfma JaBUBkOFIVmWGiDd1xwOkKEVznSVuIHg/wpuGtDHDKBmjqCdqwlNrw/OblqQqvanWlXJ9SH/kztD tO33SQ0v41eDaQXyslDIsopCkI5DHmfqKiORhpXMMBUUIKoRzNDyEN4LI4ADxttIt/TdNOfoucBp TJFR2WScHWy4eOg6wgcS2wf3iCFkLYbQ2IiiEdnjXYg5bbi3+3xxxJfrArfK5659+Q9ZL/whc5mg KGrhjpTkIzu/uNV4A40Owx9RT3IHooxFSFlwPw3Q7x81jl4Ybjs13n5a331yvPOU/t5lOBnx9kSX mPtra/f5bVv9TM6il19TtaPhdjR6frTtFNvWxLSeMd48rWs9NXbzBtMLk5N6y2JgjHw5O4asm9bh AfwuZ0fvntK2Nevvnx5pvT7WNspqaXWijx09N9p6lm09brp8Bl0/oW+5YLjVBbAzfg+NfXvzWOLX O0K2Jv4xf9l/Zi/5S9FLfltikw7sKu3AuGEYgURGR0IOQJhRZMa3u7rjcm7xvud2p84revkPuYt/ lxs2Z93zC96JSyh/7UBv/T2ANXA2h+lBk946EE30SBlO3Yh3QJL+L0vqKtwW45+bHIKSEMvELWtY 2QbYC0byLNbanrOdLWQsT9STbM6qFMdMpqdy78KZKhIwxy/OMBO/bFULtGbX1lkelm4uE/8sMvOn e6YIWc02jDjWxjQZrkQL33mFL/MEC4ibMUcce5zjGIPXA0EeMkfMxYeWeRyWXz2zDB1MyECxLO/W wXf89P67xoZtVTHr1Etwtp5e608TAZoLZFm6A9YegdWNnUIBBYpMcvTT7D63NjizOpiYqNIR5tBc zfzM2tC0qoWrvxQrK4MzGhZAbbxORs2YCBQEWeqEk3CA79Y0BRRYR6vIRAmQ/FrHel7ZlOK/Lvxn iUGeKrFDvNBO4U3k1KSu8bL/WbvC7zW5b2H0gsyoptazY1CF44IlsNaD1X4lZv8b/5m8yD1ijlP0 M9Mi/mQvn+ukEDvEih3kIqdob6dVs58MF/jkrXyren8H26+F/UJ2qkV1j3axWrpuSOKX/1a5+L/i n/tNwnP/mbDoD/FLjg21ld89PyfthekRs+1i/mAf8T/CjBdvIO3bmtJnol/8rWrpb1KW/il56Z8U z/4+evEbJZ/rrKMVpolKr4EFeWSMWl2sOXxj/h+jwv4U/+zvEp77rXLh/yjnB2WsuNJ7ewxsuFHD 9Utzo577vWLJfyUs/O+ksN/HLxSmLTtnvlfdc27hVsUPwyUeq0WOOIeSz4ZB0ajZTtHCmVGyH63y fWVnbtPAjSFk0EJ0ZMKhQlXbueVvZvx8deD0lULH1bOnyZ+xj3vGOX6eo8LbPmquZ4x45kqvBZtj D9843ge7ycLgNVn03GmaZEb88o6Jm30DNDDzt94EDZ6iAWdyRFUHJ2/8B6izPHYfwyuM8xQtJrmW m1n+S02M/bLsJKkBm58jZEkDefr5psnb/69CAe84JhRErrDA+2UeW4Z9sDZuS7Ll4xvDvyuThhBZ 2og2GU2QvyAq3EHOjsF25tQudVxOaWB6DalkNliGCuu5Lh5HGOBRCnlGqwH0ZCcmpFCdBi5WfRiY aoFduA/V1c+reTaz5Plv7m/b3pxU2Lg4V+NHOwuw3xtkVq4CwQFJjgbGfumYc0aDVXg5gJtDx79W GfxpM0ABN0oJWg0smSwz49j7ylj3n9eEzYoUuCq8XBUCZxVRU0yCCWgXlQ9e+c5R3s4x4umveBVf 02A4ZY1QgsOh8g3zUNK3236m8AcEUMx2SRJMU8x1TKCWLiCxggHBXSnxVIhmKUWPyb0ee3W2uGjl FzeaiGgRooEFXe86ZGzovvB0pI9rlLenXOq6RuwiF86Ik2Yd/eK3yc97RItdVRL7eC+POKF31ks3 kGGD5suZywRucol9rLdD9LzpsZIZqwT5ZfvGyLCzeWKXYLwz0IEyvNM7EeuXFTFzpcB1jdBJLnCL FbtHiX4RHXJhtAsDHA7jS280//AV/EP4Tw7RXi4Rgl+kL847+ekvEwJdov7sppznHCN0UeIPKHRK FE9PCXKMETvFidzjJG6r5vw+aeG3Vxt7EdOB9G/VffWr+GCMAB4KP8/EICcFmSHFGKvytosHtti0 RKlLvMR19TNPrRatrfyoDapzRIbUOttGax20rz5RPJnqoJx8cLP8eX9rK5y35pnJO8s2on5wMzz0 J3z1Mda2Is3tRBJ1T4hSW5qDVLfQzEwNTVbLHt4Q0CQaDJqIO9jJ4gn8euNkKGAQYh/AwHESEdk8 3cR7UEU7OmDOkE6FkRkHXTvdiT11KTkloaBcSrx9U+pEuU0B1BCK9/Cd4BXX8w2XA7iogM4j1Plk qWW5tZSt5wf+d7V+hdULcw4tP3h7Twe68P75tVkVgWBWRQ2ONZYKAw0JONKyBONAeqM/8T6m7OUH oSDfCgXcyQOwhlNa9kz/rb8ol7hGedmrBHjHuRDNNLsEmVOCr71C5KQUuYACs9hNLjpwvV6HM31I 6o1H+1tDNys8V85xipljlzDbLmmOXfxshxQRyDjjzCIRug+O8UJ8CJLHPIe4ua7xAnwgPhnju6n2 8y4IoTmdKBPEeUxFx9mfJQTjt3NQCaYpvaclCN1T/GYo/RwjhBhSMMLgl3WNEUkKw8+hkbUnvn4s WgqjGWkiu0SBvULoFu2dWrp70GrawjX3acuAMZnxeW28g7TStRHTFTIiFUu6JHGiXyYtOtF/e4Qk 9aXtzY9HApsC3CoTfZxUfh4J/o8nBjjHetklzLVP8bZX4bvhg3HALmaOfYzIWQm+M/h/uiXK3CK9 fy0P+rbj5JZjB34SLnOMfgZ86xLEdnECanlvpyLuNilgjGun9HZM9XFNkHrGiHDYkPjtjl7aDuNi JEJdowP1rGXC2MxObgDZ7mgzf+B0YschSzWA4UUOxolz8MHjmJ26zTTp3ESTEGlqKKBSJ3x9Cesv 6PnNggff4mFQ8DcfNqDyYFRgE+FwkkRkOmwCBCZ952kAMiZujHTwpvboO41JueWgIZzVGJR3NCSl WpJ/PABMZOpl1u3PK+LJHjBe51wAKP0DzCAwjNSLM9XCAk3guvrQwnK/DcVLy1s/6kNtvej2vhPr so/Mz6eTnnR0sZ64aGkkXF5AmAkECqj4ib+VwUhHwyZBgcUmg2ZPAAUXRtq9U5bNjPN1TvJxipfC ok0gru4JQocEbyell3Oi2CHVxy1acKC1cZAUysrbz/0uY+m0iNluCrFHsi+YtqTIQHs5RUKkluY5 Jsx1SJiLt880HCoQI1fi8uDtnOlrpxDgXZNSvLMfqm2cwjA+so/33/iJ3N9Fid907rTEufgAnRYn 8IyX4UDFI1nimCiwU+LDWioojDiLtDnHPvNcI7JTeIEZXJIUw5drpDC78gMtVc9gqYIEQwTo9OPm UfwDDF9tSOu7PtI1TmQX72UHHtM4BBL+Onn+heHbOigJMkdun5oeKQDTSVCSlE2Lxa/s50hMZ2AW TCkEjdlEKf4F5ySZe4o/UDHB2A4jg8Q9PsBVLngqLeixOBmOOpyVc12SvZ2SvBwTvfAv2KuoG6bE Lm4eDg8wnjgopfZxvq7x/o5xkplRku1HDw5xYa+ZlqlsB3Vtt+rEdkO2aj+Ws9Imp7Zk4hNiXLwk gv8sa8LOTjr3WV7uTGUMJ4b30dSYYVM3sKQ2E4okpC4xTgWC+BoaZlstGv5LmXkXYOJNBJingirL dU71XyfHNiz/fR/4zmnlQUbMGghpob/NcOq9hqys4uD8ppD0ekJFI0F+dh2YZU+CgonJAhvj9QC+ /XpGLaFGg42CpOAoSNjll4W+XrasrOUtLcIh6/AAuvfB8Q3gXgfpP+x0OrpIoYZAAVckJKkBzVO4 sIQ2E4GmXg+1Aj4U6E0W6QazGZ+V1ww9v4sOdV3lhdekPfiziOxSZeC+qpqLNyDeia4kCH8yWnbw +tF+xDQM3vLKXeW4hji7qcDtHVSVlCKMJDhcx7/sLp/rHP5n1+jZLnjZ4yMe7x1q65ZEpFkTvd1S ZDNWz9mm3j8MaTJrNLNa1nSi+8bTawJw2DwteR7EGIlC1xRfiCji5uKIwkXl7aGSub7sNS/5pRak Lzz1FYYCZ5B6xsGMyFUldQn3Ti/dq6XmbWTVQenMTOt4UA3WovF2AgUusSJAJ5UAY4ijSvzLhODz wzdIedxYcQegAGANwFDsmhzgoMAnODjU4xgJ3x+cKDmvIQWQNV44RHFRijGY4AtwSAi0U0jBsJJE AiQoEtvF/sUlYZ5rvJdLjMAlWuAcLsTpD85xPJQCZ4UIEEbl75QaZBcvxIj62/glDX3X9ZYI1tKw NpqsSkH0fOfn6eapkn5r2Gzm72iWdzIaLQ/+E62RA/sADkykFebJj4kLYGzZAJM2qcki8sNMuPAY TVYc4L2d2VrEmwINJgoa5ilxwKaC8bCXekgEMvUXRxOBcXXyMloQob2xtzEt+3BofkMoMQIOgmq/ hs7ByfLq+ef+RJpgbR1aqMUcEYi6dOGn4MwiRQ2zOWCmU+K3HuPA5T1ElUWrh/ZHxyfH1xdWLsqs k9Aho2xKRyR8Qh4/wVKpmKhPyqy+hFYooDKnXN5GgzegdjEXR9oFCS/8WO6H17YDWLHg4FlEjJhF eI+7RYl+FOP3VKTfT18UVlw/cQ/pFmxNwvvODcYkBWDrphLgI9ItwWfaqtk4aP+FYr5P0Zpnt6bg 9OF3qUs9w4UOkfMcVRI7HPkn49hYio9X+9h5jyt9fh7tX9LRPMKJ7aCmjqv/pgqzw0d2IpFxxtdA LKFxuO4cI/CI8P6JPDhwbUzGvq3tyLjp1DfOr862h9EMb5ckiVucYFasJKfi3XFkoOU1PWsbGbI4 AtF1I4MsP9wh0tspNcBB5euSFGgXK/ppwoLTAzf10B8x1dw++3ikCDiWSUK4A0oBBjq8r/Gx7iyf NytaPCdjeeiG2LBtimcKXvBcPQ+H905x3u5pvnCp8SLnDJwO/IlWXCHDSpQ5xHi7RM77ZVKY7+aY +a8n4vTkp3Jfl1V/8QB4FNql+sB7JQqdlAKXlXNyyvcNcxUUI/VfMLM80TCulWY086c4Le3/qZJi BvHS3qlO+SnzAxvxLtuKxFTbyqoXyhH1aTrAIjRFudLy/zkgsvHfZCeql/wiwFSVBPaBPczYQhFr fviWt8Qe1rrrVLGW7TWYOS9X+HhjqO/I1XfzS5eAMEidNF1NDL4bwoibGMyVc90BOgVgM2TE4cBE Q8GyWzEUZKilnG5D0/ycyvlFpS+W3dg9BrOikEYzZpDL2H9yY3ZJUE6DlIMCDeUTAvXdSinkNOLq uK4ll5KQxCGz0Y8fFVhXBGsAJyByGLD9SFfTef6r7pOSHbHT4oR2SSJ4JEOa4BQryTvxxTf3z5R1 XaxsP38bDW1v/Hp6OI5+SVSMQ4IUkGF3ihN5Ror+krk8v+x9HDPcQbpOhO4h5gLq/fCq+rm3M2dE 4DRfYq+UAiAkynBQjYOKmWukAZti7gEJBO9Ttqnz2o+UoVBVw3swSTiN7C8nnH1Ee/0kLjD+4Paq visdUKJHfci0qfGL6VFCJ8i7hfbxXu4qkWeUd3b5nlHoMrM2ByBdZkboeXWg8YB1a9zk4BnhGO83 TQHff5G6pHn47hi5hqqbp5+IEkNxj0IB504ldlnj/V+pC3c2H7rK9vUgph2NXUCdH7bWiIpW4/d1 ioPEwQ68sJ9xTBMSs0uJY1KAfaTwZ6r5GRV763W3b4HlN3sDDR9oP7FsbwZ+1jSFl0MaRgywuMIp mJtS+IeM59rRkJGwCDgrlklGHmYq6MHwctgHi4RTQ8HDT0+bchk/Sp8CCqZOzmm3jpYEWa6sMXW2 zlkJIL4P7/eFAvNkFHpg57JmNEXewg+BzJz82F+BAiPvGkh1BSgu2mvM8XXlEQXV84nboxinA2Qc OMSy9XyJbieU7yy6HJT6C3xCkORS+1FwyKoNICJmAUQ5DQTl0qqloB5WEVRYvLSs9b1h1EFsZDnz Mj3q+vTYRiINKsuyFAyt0h/8XMMm9dDQJIVMHzQQh4iqEGKJ0md+QLmE0DyMI7BQ9S/sSnOLIfas yWISG4jxdjt090Q/zHewvYhtRt1/TH1uZpyvg1LsRFJmqLypoMW28v2iy2P3Rwk/QwclOBOhFQFp AT/93WPF/x63AIfW4AObBEVFB6UIB/yPr/L++GzZIDLg31f3XPmhIgiyaZU38YoV4xPZPU72E3ng Zxdr++EioZdjhtdkNjZ86RFNjCGSYVbCRSl0j/LOqHhnxPr3ZfntKpYYs7K30bjv+mg3uYiaSoCF vVL8q+TFzQO3DYR6VH775IwoON8hl8FgSFwpPWJlv1Ytru682AOTFLAsRoBMZcDXc1XfHfZG/PQI kUOs0B7SCgE568G5xkXhi8OYby43DEK3hR2D/j5+C9MwMrUjXcTH62dGQp0B7jbOcRJFLvGiH8pl 1e3ndHRbkeiNZR/YDpas2TaIfVhk+zcD4IcVA7/vF4vQQ6sGD7w6++A03AP9PvZ7vvv3esrf/H2b X2A5QVRw8TvS9m5m+eLsahB1gQHYegk96ym9h5sK1NA6oXXaiBscpiZuMBOtCYJZp1oYYIHsgPQO 1jaGFFYvXFey/Mi1nVp0fxxoGxM+hhQKQPBz8gDy33iAbKCaNB8h6gjgQQGv3muprhCJGP0A0r+y Pc1TTnwYybmG98vMSOGhS3U6GLXAIYXptaNf4SDZSS6ADavwwnmBi0rqvNor8tPNHUB+I6uXMSGe Fq4RBKExMjAftqh/nhiGA2b8+jSbxmiAoWbJZkUbGutHbG3vlR+rguwUApB5T4Biu2OcaEa0JKf6 o06kparrlImnJVDgDlAgA9RKxAm72C1aQKCAsfHUYClPDCLqEQIFfuuiPQAKODdqDAW/Tlp4vv+u gezW0jsnp0cKSIWT1EzSfTAsPC4PSP1uTz8xJmYtzGg92ao6xFZ0XfqlcoFnvB/UFeOFNGOyV0Gb Mq3k3R5qI0J3tGW+FQc2pw0dv41f5KnCcOoFkVWyFCc7M6IEn5yrGgVOIXeyETYgy+fi/tXt/+jr /8uXlaMyiO7saFKkVwZm187PrQ8FnZB6CSXzQPmuzn9CnKQugA4HcZYfZE4wV+2ztjE4Ww1iF3Q0 EgRmG/0za8Xw88qgguIXi1v2aVGXDo2YJ3o94G6ME4RPjq+3yER/PyiguihEXM4KBf2T1E0tUACc tAFkfHlHmoecM2im5oz4iCxu0dCxwS6kD3hT5SIXOivEzglSJ5zFK8U4hQ/dorqBhoZAydvmi6pr gpQZY9RBUMHkle71XAMdedKAw4tf5K4QP71aWj/c2ouMDT1Xf5oYSthNEJxjKHBRSp5WBNaO3xyG C7C+PAcFOCqApmcSHwr2ahFXWDPbBkBm0itpw1CwNsqTBCd/BQpcknEKD6USfNA7xAl+EhtaPXR9 mPOQ58r1NIAeh2SBWbQ7Dac/0DRMkoJrVRI0ZH+eOL9mtFVLqZ3kXpsYA/VvIgwH5oU9mc7RXo6p UkAP4pg5PdL7jYpPR0gdlVfuewQF/+wvS/LSrj9fVPEi0QOHQQPYYvVcuM6DghCiig+YkN5A6/nc fgSbTmJGkE1VBYgbSFqNEAcYhTXz80tePNyKzzKMA0SOFeJrDgqI9GjXRxwU+P5fQEEOlZPFIUp1 MPVM5DG6WT4lDGaFELMCoEBIT21wcSUJAoUCnNpdGOn4t/j5ToQbgw90nB3MSPR9Ksrn65uNw2T0 iPhzWfzricATdTQDFxDWhHfNDTQ4b/2rzgqgHpFMQeKaIJ0VLX3j6Lc9yHCs+9pTqiBiAEdSdair S7zXr74GjGU9g+Nryx+GJgjTo8Bj2i5RwqXzE1Aw2VLcYkCG7mE0K1yDocDiUD8ZCnCC8FiUCDoC 0BaB/ohLrPDPWS9fBytw1koIZC15pR6Z8GsWHf3cJVpkp8AoJ6WfyyFGIFwf3gpTeBNZM6eyC27D 5l5kKKr60CNagLMhexCrlOBYaHq0IPvrXSMTiuXIbDbxW3KPoOCfBQXEA2SspV9dUE5sshvng22Q xTLemrZTJjBGCagiciHBhP4ACP7UAldwbQNIVKWrfTObpLmNsvzqgILDz5Xf+XQYhCghHoB51gmW M17T4D330XFIEGyZCd8LCgItUJCrA6FdK5ONBwWgBIXjf+al7akYCoBOEM9BgUe08NuLtbS6fvBK k+ca+CHeKbBZ8IkZ7eW3IaoNJKq4iQaOmGExomJYE2N5G5z84kWeXb3PJdLLKY47l/HGd10jXPFh IX73413XnozxhUogaLpCpO0U7T1/q/I+FPQsLTbiy4KRZ30jQIGzErzmrVCQXrl3yFLvYnicFrOl 9IOTdL+1a1xjRJxRNYGCXyUvbLaFgmlxAqd4KY587BVCzxhR2Jake8gwZoU41spwBZ4/jnb2XCj1 lIOHHf59Z5CiFTmvESzdldoJXCzO041vPIH/D6PZnmPfTSdQAPcBo0GCcMYaYfrn24ZJP4XmFBaN 7kdQ8E+HAhzjjjZ3V2AoSKvzSyeyOZaS4ATBGNp2gAacQTBt7VkHAUBSoNYvvx5mjog4/wIo5dX4 rit9vuLWO4Mw+AaS9XT6lT+jQdwl+j45thncJTSS7O8fGIDLPAcFgZ+cy7aBAl7PiEIBXtLLdqRD 2TARoMDBEhUcuqIhE3bsjrpv3GOkJDcXAgNfKfSIlaV8twOYQmYjGWEjG5C1mDNbq9/4ywgBvhYZ D3WeeTJG5hIrckzyoUQm+xiB7xYFQEHnlR/G+XPspiR4d7y752+K6YKOv4GHXTDqSKHARQEsPuj0 kdwcRwUDlnEb1jxJlxKg4B7S+RZGAxQkSf4KFGBgcVRJnOIlOP7Bu/Wl3TndpBxqIrYoPNY/a0QM vpgPL1dhkAQGkQoqgXhfu8eIw9/L7yX1E+r1Ck4NZiM3fgXZiuHDk0dmRAkckzlCl128N86e0r/Y PkTnD6lS1qOo4F+iWEC4xmjwfF9FftkL6fWBIEXS5EfadiGcSkAdlSHibM4y+MrG9f5kaCgEPzET xwaNATnVPgXq0MK6sNQSv4LSpVWt+7SoXQdDUqCrQweuzUQ71cx5fBjHAAo25leE5IAO1feEAtJi IENP4Lj0yflMPVBr/wYUuMoFNEGgW2wGhoKrDfgI60PM2uL33eSkro6j90SBfZLMNUKwreGrQRhu pU4QLCeOZw1s2AnLY7yo8cHaqL31q4QFbrFSgIJ4KEo4KyEL6ERjx7uvQtlQJSC6STI7pcAzRrxo Y2w/iA5Y1GVhdA+gYF0j1AoI7xeu000hnhEhyimDqMCEJvWGrAZeqAPpAvJJB4FAAXxMAgVnB+7q LVAwM1JI6hgk0oiXeEZ4rXobb2pGz2fcTGxQHKLov7nRiHEJPwUHEnYxXvjFnaO85R+sHSBzRtaD BaCAVhtIRvbZmfInYqV2inmOqaBei287zhcyvtwxSPSDpmARP4KCf2axQG9EIy1DYIiZ0xCS3gim jZTvZxUMoZ1E3lASN4BAJxAxFGQ0BoIkO0hA+66rDy0oD1tXtqL89j7KIyIDnjSfNlJPUmtqSQQb uz45vj6/Yn5Ovez/BQowCn16Ll1PnZQf6DRZoeBFKxTA/pLgvYD3xbeX1EPI2I/YorKP3KLgPJ2W Ioa+f6J0uly6rf5LnJ5DIs/jn4MTFQEBOmML9qqkjKdF6PjYnf9MCHOPIyX6eOhF4qhgdsHLPUh/ svf6kwp/vI9wko4TEKAtRXov2hAzQAZsSZZt5kOBezTUCsilit0V4lmrRXmle4et1p4PgQL/gr8G BaV3oJlI8yMMCE5K0WNrRFF7i3og1Of1py1SVmbyrC8v13pGiuxJVIAvHr+4h1yk+Gj9IDKMUw9z rqsCE/W0pInv1/7TZR7hUDYE9INASOQa5ZX65fYBaDuSBcCaHt72egQF/8gvoBno0dh9dGVj5QrI BcC0y4+4EILnI9HXlUGvsIG0BqghO+kqUmd2kPrHOUVjQLrGL436d1cFFB1+tqL1AzC9hZ3BPqiL MuFLi8ZG0d3PT2/IPBKca3G8/V5QAH6+1AmrXLr/XLqBqhghNFkohqzMHhwV7MygCYIVCmZFCA9c 1WAo6EOmLfVfu632xoc1cG8ADYCIWHCY69+Zx/S0umKyaMRjaOOggBNKgtG/mv4rP5X7uylkhI0M Ifo0ubfsdXz0M5r2C08lhsAPVUIy3iieES1asiF2gFcrsPR0jGs1n3vG+djF4VcA6PBQSh4PF2cX vz2Mgcds5o+uW5MUHKvfQtq5aStwIk9ycyhdTgkFHOsgCa7BM8o7/N1CGhVM9suCDwtshK8vq3FU MI1UGmkNxH2NMPaDoiEaFVjSFSOJ/OmL4Lf7+HQp/oCEiiAmZUyh+xpByhfbhogKxAMMn0dQ8M+F ApA1GEb39x1Pzq8KSa2Q5TcFg5FrtSyjBo5pcPcAWwqYKoJpgjof6ksLE0Z1Phk1EsInpLMAgfl1 C/KLF5W0bh9D95kH5qwfZFMTd7m7n54oyisHk3RbQtHf8VCDIj2dQcivDtrfnA1QwJoRj/VtXW84 OMEH34NQgKOCb1rqhqHVyO47VfaE3IfmwjS9dY+TPL8ttR+U8IycLoUZ6cBzhNpcWXyxzdBBMICS D/PB5Sp8fLsqfYgJLLD9nWOEYTtT8FF4ovv6k/GBwC9K4ri+eKcsJgmCzjrkTlg3+Ho2Hv3aNVLo kOhrl+oDMwhxoumRgpj9m0coYhBuOxUTg4ELckeHkeGkrv1PWctdlBIoSxIocFJMAQUEoySUWeE+ JRSYJwhaGKZw4IShAKOHPWlnUCiI+bBo4AEoMFhiCh1iPzpTChNViY+g4H9FgkCPs2FNx/68w6C8 naOWFGp8CxvBLC9Tzdkc0NogqLI3BuVpgIoMzuz1stwGaUGTPxCKNCCen3tkUenN94dRpxF4xZQ/ wNJjdPIaY2k9flSH2j87tSm38lmrkOnf/wDbRA2EMdnqwLyyBV+dW2/ESYDturLm9AZktEIB6SAQ zYEEqBVgKNASYa66+1d+rgh1VoimKclmiRe6qKS/TgzTjFwf4wymOaKskUuIifGZwUA/IWUmrNiX 85gcuEN2KjL0FDvPPUaaDKc5e7zz6hOqADglU2WEashBQS8kSjbeSTgOefPYAfdwgZ1KCjR+ldAZ 5+kxwtCdiTh3AJ4eyxlU6Ig0EOmFAtuwpPfSrCgfJ5izmAIKJtiGMERA2YZit+jJUMBH7ElQMM1S jZwMBSY6JGVmLFCAP9GHZ0pxHvEICv63fBH1m/EO86UdVUnrKxfn18jyaoSgFkJG/zIbgsGdk5qD EHEAvO+yoHXoTwcTMmulBZrAAvWCgiOLi1u3D4PNHGi4EaoJUeQ22yotTNBlwQdAh7pxNpFV+ix+ l+8bFeQ1BGapwYgnrz4st/i5ypvvGaFW8OAcCsuHAkszUWLlFXx7pX4UJnzRXTQqzFuJFzk+VWHu HijHYs9Igeq7bZ3Q9zQSahyyGFOS0U6W9OChzgaihRXtzT+PC3CLEzkncHQ+j1T/WdHSL+4cw/v0 WPvlH8UHQYciRUJGpMX40FzEhwJkhQL9vjNlT0bLIEEg8ghQr4sV/LnolevGXj1LNHv1Bq4TZ4Jr MJmMOPDYcvoQcBTjYQM+mCBMhoKUCSjot4UCHm+fg4IZkZOhQP5hUf/fDQXkAWXDtM8fAgWPyob/ xAaCmVa9QCJ7HI0eaytZe+D5dZXB6zV+eWppRi0xKQamAXCJwYSoMRj/EGzCNED6xWEAeG3XBePg vLD42cobH2hR1zgag8SZk/xnrYKNNlBgtoSU0MAabhltKihZnqOe/32hAOaX1TCUtFazdG1x+IWR OiLNbX5wJI2fIHiuwTgACQKwDRMk+LD79krDGFmcQ8icdfDtx1Z5z0zwwzE5kAZVApx3PxXj/8mV OnJuWmS4uLEUy7+NoDt8Cw2EbpTjeNsxnjQrQR4Epn1npy+7xPZiqDnddePHCaF2QAkW0VP7YVCg RbpDrceejsTZio+dJeuHikGE9ycXa0bI1dI7bDaMUw12/AG7kdHvNYV7nIxU9kT0WfYq8S9TJqCg gnQQJkFBxDuFtJTHrxqaHg4F+JU9ooUxH6zvp8+yJAgM4uRDKfWRnyA8goJ/9ZDARCULQABzBPUd vPhmUfHiQuKVAMIjDaEpdYHp9YEFhIFMK/Z5Db5gPKH2xVCQX7cgryJs7ZHny1p3jaEuIwiEEql2 NDFmYjmXbScyzEbOpgSNdaPWnXWJOWVh2eBH9ndDAfjQyYjjtn925ZK31Nn3wYhcb4EC1hYKuLLh 8p0ZMwgUENYxBAZ4hX/TohkjgvhjCDX0X/uPNYH4yMNQYBc3zzkZWvAesZKfx4Z8fLWuC8YGQZZ3 nNFR4QgtMHOAWXTN0PP8WykzV3u7wTzjXIckKXDz8OtHCTeUfzAEAqGm0z23fqgIom0Fu3g4tfGh SaFAZ2ELWHoBzPGea78I93dVgnncNKrISthKwuxV503dPRx6cOPtOmiGGneePPyk3N8hVgjaRwle OPiBsFwl/vfUhWcGgVegJ1AwK4L8nAcFkW8XDlkdNyxCHA9CAZCdCBRghMHRFIaCAeuzWDp0Z7ZK 4uhsy4aPoOBfnFbAUn0P1kCEevVd6Ppn5zYVlIRllEugON8Ykkq6dWubfHNqhLlqPxwYZIJ/gSTr qBS6h+VBRUeWV7d+PAbq1qCYpNdze5xlmcmzWhNDAQzRBoeRagbptKiz9s4n60peyquZn1Xn9/dD Qb5Gih84W8kpf6H07pf9MIvE8GRtWFsogGbiBBQkQdEMpwmzIgAKRkm9C0fIOPlN2L8ZOIcJEsdU fA564Z3rmCB1lkuflAcmHNx9THunl0ipjxDuDYaXq2h46+mSv+Stco4ibXflHLuEOfhQxjjgGif+ bdKilrEOhngzHe9q/UFcIN6G+NdA8MQCBUTsiOWrSzGIuWvq98+PcF7D8ZGArhwvcFKKZsh9xZti v+260M6Jrhvx01vRyLbm0qdiQ+xj8K+BjqsTUCPI6c+DAowwVbdOPh4uJF0AqBXQsmH0nsJhMhfM qxYixhYKZkYCE8MKBRjiYh8GBSbKWAYomGmFgqQJKKBsQ96WfwQF/wp0Q5NVN0bHgmVzH2r97tqW zdWvZBYvyKldnF23IFMdAIJCanGu2ie/IZj4l4FjY9qRgC21EZqO/eOo10jFo0wc/9ZMS+zmB9Uk OP00g1lPtQdJQDLcg1p2VaYWVj6Xq7aQFqhyssb68LUdUiDetXViHL0UVIVtqVe1oxtaYl9Iu9wT kuA8KCAzCBn4nIKNQCYTKRTgBMECBeYxxFww3PuvlOdcYiXTlDApQMTK8DKWOSp93cNFv1EtXr4t o6j4va21XxQe3if/ePO8vFUe4TIHuQzMoBO87VNxSOw9TSn0jPdxe3XeW6e+o7QEkC4BvYJgexBE gvl9fBnWqEBvK4WB9yzem1lf7fRYDQxhWtaA8oVK5KCUOq+R/Jsq7Pk92evL3n+r5rPUb7cHvBbn 8qrQVRkwLdHPjugLTVPNo1BgSRBuTwEFpIPgiaHg7XwCBSwfCixm9FwzEd8oKxTQBOFBKGCt5zwX FZQDFMQLyN2GZ+FYwhoVTIaCR2XDf+YXdViYEIYiR4AWp/znBio/Or5+3ZFV2cWLc6pCcqp9Myq8 M6vE2TW+meWBWYfDNldEfH1xy1VtA4kHjDZz2GZ2Qrph6mgEZMnpn5sqEOrNQ9cGmjaXvZJfGZhb JcFnPZjl1YMLW3o9iJOkE2GTnEaiiw6dzUCMGEUaWWG535aKyDMDZVo0bLBkzxavB5bftmCgXcgs 25qCoQDCY9jmYvsUH89I0YHrGAoMBk4Uj+1Dhq+uNf0k3N9NDhNJjml+0FiEKAKEC3Du7xrh5Rnh 7RHuhR/u+Ltc5K70cYyDsQWgKycKHZNlLgqZ+yph+PvrOiF6B/ouTiuO9l5/PNYf9H9IzI9TD3wx IRvWdEOthmwpk3U6A5/4ujPau3+IX+IRIQSiUbKvXTzoIzkkiZ2UAtdYoVuk9/SV82as8poe7uUS OY+IE/raJ/jZqcjEUAJOgrxxcOIWL/2lKvT80F09GHMwZTePPxElJi0SaDjia54ZLYzcnWuBAnaS Qi9JgpgvWwAKXBJ9AApIrcM9TmJNEBiDiUsrzFxb0wgmKaaPzlbgWwSz2JkBdiqBU6IU367kL7f1 wzKz9npND1EeeAQF/1go4Ks+WkYDDKBTPTiAbl0erj1ybefeo2nbNGu2NUZtrQ/f2RT7cXNe1Z29 18cbhsGQbpjmBQ+RS3roX9NaSbAUGNEo6q7v2I+jkfyy4A0NoVnVMpws5B5bkKbxT6sHrmNmE4AD EAs1wbn1gQV1wQWl/kUHnzva8aUW9YxTQVc6JsiZX7B8RVkDZNMGHBVMl0uBNZfqAwm7CrSJvr1S P06qJSYzPPRADzBsbzjwxCpY8HaxAugFAG+WDBQk49NZZE/Iw/SYtlOAJphzkgyfxThJB/2iKC/P cPHit9KuMP1aggPEWoWp67j4dMJ8KO/HzbOj9J41ogWbY7vBZIc6/AKrmfwJ8GUA0WhH3dc/Xe3r JpfZKWVw4uO3U87DaQstaTooRW6JEpd4qHDC5SXKHBQ+TgqpvYLAXTJcrUus8DeJC5sH28ZBa8UA Q8rh3qDVTCAOX/9ja0QRb+cNIgMzlWA4oZ0YMRTMXA19SRhtJrmVc5S34uNN3eC7YdHNYThtQOKx AeIJHzdXzoqG2S6qnmqvED4eI03+ensnfF7LdOUjKPhXqBlOKQNFNigRa9USe+j+EdTZi250MFfu GVv60B0t6sY/NBDnO7NVYpqn7Waa8pVtOhdmqyeO9d8G4gWp6S3eXC7POriwQB2WrSYe8Y2clmm6 2gf8ajVkULpallcetEMtP9n97SCMOYzTPJfIbjB8KOCN6rDdiFm+KxOoxQqIkPHKxFsGpE0vN+jB q4vbjIwBwvVexGw/+d3T0b6e4UIPBcQDDklk7h5n7oSWDEEv6cvDoAF+NTKvh2Fheqxk1quCl3fn XjP343gANgiME0Nx72hny0+UITjaB3lw2tOXi8I2Qa3AhFhrbdVEfByInyZoLOQeeHtWuI+H0h9v c4gK0qR2qUI6JUHQydtO6eVIr0QldY2RPZ25xCPJDwCH9CsdY4W/Tlp4eqR9GPRVjKXtpx9bI8bX iVEFg6FLsg9OEFbszuolcqwTUxu2UcGBq5onV0s9lTIc/GCsc06QQtnw/XUDFj1zk5EL84wmA20f jyLmkzMVT0aKcViC77Nrkq+HSjorQpj02Zv9tGxoIj5pU+kQPoKCf/AXM2EZMClrozUEE/Gns0ox cyO6+NxkWKN1oMzM8hmzXLmJ+atQgGwMhalnFrhKjCHjEBq8Zjj+yan1RcWvFJY9n1MWllM5P7c2 tLBuPgaHgqqw/PIl2YcWbaxa/v6pjMujNSQeGKMFLugBABLoJyUIVijoQcwL21JnRkinq3w846TT ldLH4v2eXCUqvtQwDoYwDLcPuRkcXQ/SH7xzVJq38rGXvWZES1xiRS4qKZ3xJ3p9IhIqi0l0Ae17 fGi6hM/7WZRfUfn77Ug7amOiBWZ/JztafiYPwsDirMBBvghjEd5QC4qiBygUkHIqT/4X7u04MtxH 42urP3l8pdQjSuokJ3LoCfMAB1LFdqk4cQA/aBxmuCf4OId7CzZG5Z360mnVHM94mbNChEMCj1jJ f6jCzgy3jwAdkSm+eeyHkWJPldRNAZ/IXSF+PEoY8U5+jwUKzLZQYAYoMH59vvpHr0pmKXwwdkFu Eid6PFyo/GADaUHyBKMo8Yq6NyJ2/8nyWSvmzoiT4I/sGiPyjBE9sRrGkQYsowoANYxh8sAIspX6 fPT1D4kKbEGYsfi5MJxLI0/1ERwAjSzPRcLiB2HmjMWn6ub/1ZIlFb+xDUkYyJoHtKjj0kD916d3 vFOfvflIeOHBZ9ceXrj2u8WvHXl1X13WoXN7zvfVa0EDQTuGdNRzhFIALZUKTl3fZNtMxBth5esp jz0/d/orc2et9Jr5ypyZK71+8ILXkYs4KmAnRHdZmLBjiD/gGNJfN3QWHtozL2u5x4rZUHKMmutK xntxRkAIPCL7WG/7yDl4Uz8t91m5L7ext2UIgm1yQxiOkoRfEJ+cZ9tafvWq78wVc34YLnrs1bmP RXg/8YrXovyobuochHMTE0uVxAjbw0jgzTBGGBHfXm+S5Yc/HRvguPovjnFznRNp4A29TneVyC1q 7oxX5wVtkjeMtn5+re7HKwT4Az4ZJZr+6hz8j9/LFzTfv0HqoqbaayefWjr38Ve9Hl8p/EGE6LHV Xj9YPlu+PWfAYg/9IBTgkOnr0xU/XiHyXO3lvnrezGjhjCjB4y/Nke/K60M6WqKBWrGZqzlS5RN8 w788Xv7Uy94eq+a6h3t5RgqmR3pjZEj9eEsvFbfklKnZR1Dwr9BMtI0HGEu5j9ja0s1umphX5Wm3 moFdBiQ3YvHMST3/vbKT/OyAfzVmbmwRn+uQmGjRvTumE63mykvGzy8wH1zUfdjKHOxBZ8fQfR2I IoKJCxnDgek4ep1mvZFCgZnXm+P09okdcE372Y9u1u++VbHnZsW7d6reblPvu1rdquvSAgSZmAmQ hO4GjFTDTtR3I/1x1Lbl0uEF76c9szXiB+nBOOgFkyOl6LG0wF9teNH/g+SkhncPjVxoQ+P9kD4b OclBExd9GUhwdV/f9+7p4p2Xi3ddLt7ZcviNC99uu3Dwm+t1vWBhYKSh1LiRMXEjexw+G4lhcRfS XUEj26+WLv4s879fX/Z4BnFZUordE2RPZy0IeDdh/fH9V9AQBo1zo7d3nTm4/fLhrZe+23bl8Fst h98+U9zP+WSxd0c79545/Pa1sh0tJVsuwi/sPHeg/PoJrcVk04wmhNXolsR34Jqxc8vp7968Xf7a jSMbrx/ccOXAGxcOVHWeG0LMqMnA28MsHZUiXq7spaG7r5384vVbRzZeO7TxRvG6a9+9cek7dU/L MFUxokcMyzwUCsyP9ug/6Ov/AH8FeI4KZW5kc3RyZWFtCmVuZG9iago5IDAgb2JqCjM4NzAyCmVu ZG9iagoxMyAwIG9iago8PCAvTGVuZ3RoIDE0IDAgUiAvTiAzIC9BbHRlcm5hdGUgL0RldmljZVJH QiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNp9kk9IFFEcx7+zJUKsBWUmUvBOtgdX Bu1gHYzd9W/Ktqxrpgiyzr7ZHZ2dnd7MbiUeQoguQdYxuljRSTqGBw8dAg8RgmJdIugoGQSCl5Dt NzO77ojagzfvM7//v997QF0obZp6gAF5wxbJ/ii7Oz7B6jdQhwYEQSutWGYkkRh2mWxxZO19heSc m+Hj9f9dDYISAhJVgMasx9ccnvZ4wOH7tmkTTzqs5NIZYpO4TaSSMeJXxGezPp72cYZbCvEy8U3F FBQnkCIeKClZJ+YOsWxkNIPkl4m7MpaSJybfwFNnFl6Z9hDQfQU49bkmm7CA5XfApdaaLNQMXBwD Vjprst2kOx+pad1SOztckRSMAnU/yuXdVqD+BbD/vFz++7pc3n9DOb4DH3WlKEqVGUnSF8Drw12N /dzgQlOYc18JUVA1nftGerza69eLR/Ulq3QSezNxVxewRPcwdgYYegy8/AlcfQ9c+AAkGoDUdQQe obpt/sDNEyuYD4WWzdmsQ5Y7WNg5OlmEXghnsULeLNpcsEFDaW9jaV1nrqnFBLe4KPFMO/J6sdrv OdpBboyO0EnzCqjc6q2wNJNJ99DdoJ14I8N7ep13Qbyoan2DzoXQ/qSKvlGPpfOaPZjyONBt6PHh CsMoxG97MbFj2tFkNb5VGumtymfStxJ0tpD8xmxhyLFpIt/QXC415rGUmsvF4hVexTh0cGgw6GuA IYl+RBGGCYECVNJoZKGRlLs2gtjC7LGWOhI+ZqTfJp9t1+ceiuTteN1BNI6FtoMITP4m/5a35CX5 rfxrsaUYqmkWxJSmrD/7Q3GdzNW4FW2lJi++QnkjpNWRJWn+oCfLV6mvOtVYbKlFcnLwJ/E9X5fc lymMaTfSrJup5Oos+kZ82U6aHtmuza8213JtnV6Z3AyuzR+aVeFIV/ygq8P/NTu/P/8HzbABaApl bmRzdHJlYW0KZW5kb2JqCjE0IDAgb2JqCjcwNgplbmRvYmoKNSAwIG9iagpbIC9JQ0NCYXNlZCAx MyAwIFIgXQplbmRvYmoKMTIgMCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9NZWRpYUJveCBbMCAwIDYx MiA3OTJdIC9Db3VudCAxIC9LaWRzIFsgMSAwIFIgXSA+PgplbmRvYmoKMTUgMCBvYmoKPDwgL1R5 cGUgL0NhdGFsb2cgL1BhZ2VzIDEyIDAgUiA+PgplbmRvYmoKMTYgMCBvYmoKPDwgL0xlbmd0aCAx NyAwIFIgL0xlbmd0aDEgMTQwMjQgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCnja7Zpp WFPX+vbXSkIChJAEmSRAggGqBcRZHCqRSZCiIsQmOIGAYutAUZxRqm21tHaydq7a0bZ02Gxtxdaq nUdra+dZO0+22ul0Qv733g+PtV7n9Mt5v7zXdUJ+ue/nWUPWXnuv5UIVUghhFa3CKAbUzq9pFDYx Fpk9ILF2yWLPg5t2/Qb/thAh4bMb58z/5ZeyCPhPhQhLmDNv+ez7Zz4aLYQdVYymhvqauuMDn5kp RJQJiWENSNg2mHcjHo04tWH+4mU2g3gQcTVix7yFtTWGVDkPcSPi8Pk1yxq9t6Vdi3gVYs+Cmvn1 X0RWX474Zi1ubKpv7P7688OIMb5UK3JSaOMXIkKYhQOaguuQwCCEZYsQJzaJU1+TxLliEa61VVws NopNYp94T8wS6+BuENvEXeIeoYjHxfPiLfH/8HViech8EWHchRH2EqL79+6jJ+4CnSGRp2Q2Iepl 8vyV6XZ0f3da7rsTm7odJzrNUSJcb2szHEL2R9nV/bshV4u7h2mxYT28XW9x3LLlxIMntp82B+Wi SkwV08R0US1qcP11okHMxcycJ+aJ+WKBHi1A2Rx8zkY0E7VqUUvzf9VaKBpBk1gsmsUS/DTCL+qJ tLLz9bhZLMXPMrFcrBArxSrR0vO5VM+sQskKPV4GVos1uDMXiLW6Y6XMOnGhuAh3bb3YIC75x+iS k65NXCouw32+XFzxH/3Gv0VX4ucqcTWeh2vEZnGtuB7PxU3i5tOy1+n5G8UWsRXPjFa2GZmtutNK 94hnxEPiATznD+tzWYtZoxnheZmtz2Ej5mAVrnDdKSOm+Vt6crZW49q1a2vrudJlyK89pcWSnnnU aq5DTeqF7oPWS8tpM3ElroH8X1dE0Wb9+v/Knjor/5Tl+bj5lJm5SY80d3r2P/lrxS1YgbfiU5tV zd0GT26r7k/NbzlZd5se3y7uEHfiXmzXHStl7oLfLu7G2r5XtIv78POXP9WRPiDu1++cIjqEKnaI nbiTD4tdolPP/1PZv8vv6MmrJzO7xSPiUTwhe8V+7DRP4IczjyG3ryf7lJ6j+AnxJGKtFkXPiGex Q70gXhQviYPiaUQv65/PIXpFHBKvibekDe5V8RU+u4DwjaubOWP6tKlVwYC/smJy+aSJE8rOLh1f UjyuqLAgP2+sL3fMWaNHjRyRM3zY0Oz+WZl909NSvX3c8dFOh91mDQ8LtZhDTEaDFJmF3qJqj5Je rZjSvcXFWVrsrUGi5pREteJBqujvdRRPtV7N8/eaPtScfVpNH9X0nawpHZ7RYnRWpqfQ61EOFHg9 nbKqPAC/scAb9ChHdV+me1O6HtgQpKSghacwvqHAo8hqT6FStKShrbC6AP11WMPzvfn14VmZoiPc CmuFU/p6Gztk3zFSN4a+hSM7DCLUpn2tYkwrrKlTJpUHCgtcKSlBPSfy9b4Uc75i0fvyzNXGLC71 dGTub7us0yFmVWdE1HnraqYFFGMNGrUZC9va1ivODKWft0Dpt+LTeFxyvZLpLShUMrzorHTyyS+Q Skiaw+tp+1lg8N6j3/49U9OTMac5fhaa1S7x5DShnL3A2DBCXF9KijaWSzt9YhYCpbU8QLFHzHKp wpedEVQM1VrJfi6J8WslrVxysnm1N0W7VYXVPe8lDfFK6yxPViZmX3+n4Y1yj2JMr55V26BpTX2b t6CA5q0yoPgKYHw1Pdda2DEgG/VrqnERc7VpKA8o2d5GJdqbRxWQ8Gj3YG5FQG/S00yJzldEdW1P KyW7sEAbl6ewrbqABqj15S0P7BaDuw93DPG4dgwWQ0RQG4cSm4+bkl7YFqibrbirXXV4Pmd7Aq4U xRfE9AW9gfqgdpe8DqXfYXxdiv6Neitc22m1ubJ25Za0UE/A4DIGtbuFhKcIH9680Shw4HbpoXZH 80Z7AtIluBq+paeG5v7WDwJjWn6xVmTUmuYXu1KCKfT6hyG5esYUkqaEntKXA4mTY6Lv+Y9Do9ra gPp5CusLThng3zoN6RlgT2//fpwGbS56vhgtQrXbWcxFxjSsXOQM6EZPaXcx3qOISZ6At94b9OIZ 8k0KaNemzbV+f0srvKXlVQH9bvc8JZV/i6g8hyJFpKCYA0M+nsGiDBffVj0ep8cnw+LTiku42NMW 6i2taNM69/Z0KDxYQbhoc3pJzaU5UUOwNIuwu3mLarweh6eoraazu3VWW4fP19ZYWN0wUuvDW1LX 5q0IjHbpY50caHGt0L4qSpTK0sq8rEzsPXkdXrmhvMMnN1RUBXbjcOvZUBlQDdKQX50X7EhFWWC3 B5u7njVoWS2pBR4t0HqajCBUr+/a7ROiVS816Qk9ru2UQs+Fck6K2k4D5RycMyBnopxPz2kv3KT4 BkwxtttCT512e1YFG9qqg9riErG4lXhLRXrHCMXgHdMhDeYIJdxbn6dYvXlaPlfL51LerOUteDBk rMTkaHtSW7UX+xQeqIBwSXoUjVqXns7u7spAygHX0WAKHrVpoCqghGVg7w9JG4964zSqkR6ntNbW aOMQ/oDW1pJWUhvEY8sdokqJEoYewnp6QI0ivY32OKJRLe4NbqDevhWB0hpUghnalwbmBvXH2aGI Yu9I3HbqMyRd+6LsYFuUd5C+NrEUwtPWaxKGsYmKAGVcCPFlQZokSwRGXutFUW21B7NtErUVeNRp Lw13UaYeW6IpvV4n3NVTKLTLMqZZbeFKWH90iLfmrf21JRmSZgkGafB6tL6nAr7boVgxovRTprKn AWYHRSXaWPBej6FqVR/XuinvFJO9y7CzaIPWe7KgWLGlldRg86f2VmS8Odw4VNsjrD19PEVZi3bl EZh3Y1plZ/d27/KUU15ZmV7tDwftwRQu/M7oE8G20xPK1IyszNDTszY93dYWavv3DWi+Qm0nVUt6 CvGnBiqG4De0RcZD+I3KKCxihCgTE8TUPcImJ4tYMVI+9FBMQUFolmWvzMdC8MhKESqkzPfZTQbb roSEXO+uoeaNRmdJp8zamWvZaDCI3K4Pu17O7vrwaNSI7KMy+4MjHx5xHH/ZOSJ78JHXjwwcIJ0p Tp3oSIPFEm329ulvGHpG+rDBgweNMQwdku7tE2nQc0OGDR9jHDwo2WCM5swYgxZL46E/q4wTu8yG 1d7cKYNDkhPs0TZziCExPiprdJqjYmra6P5JFqPFbAwJtfQdntendF5hn3ctzqSY2KSo0NCopNiY JKel672QyN9/CIn8I980749rjOZR03JTjdeHhxpMZnNncnzvM0ellEyx93KYrL0czthQS5Qzom/B tK6LYxK1PhJjYqivrjL6LfzEF8bwkL0iRoR2OEJEdvbAAXGRRm3UwyVdheVuky06KaZ3SpTJbJhu svVKjuntiTKFHLfZQ00WWy+beaXNHma0RETb0N8DQhi3hsSJ/uIzX2pqskxNkqmJ0uuSqQkytbdM j5fpcbJflOznlFEehywb0Nm932ezG8qqB0jhscoy0a+z+8sdKIEe22HvUZuuv+yI0PXXHVZNDU5f ZHK81ijeqn1anZ3dh7Um0Nd3oE/ofq2rU/L7tS6gx3xhaLENd7RXVKfM3eGd3M/RKS0d5kqRe3RQ btcBmT09Q38dyHgqY/Bx3T6dMXDA9AyRIaeffKVp9ziFb3KK02I2p6drfngaTV+MU38UtprDbZau aZYIq9kcZguVkb/3iosMMZqtYfJMU0RUfFS8J8r8dWhkWEhBrwSHxeJI6BWV4Awzvr053GRLjnPG OyLM+4wmkzRZrOY/rghzJgj9/gntb0wmJxbnz7SP/ln0DtX/quDZ+L3X/6X6KtmLMEyrK3raWbZ0 vStE+IQ/B564LOzhnr+N+etlMkWi2kHczTgh4XFf8RvbbeIFubbne0347SkEv3lZ0KtDZIt6Ibzx qVbkpV4jqqdPs0BPxRMnTyqoysivmTd3VtNcNczo6TRcuDMsXo6HWcdmLZsL2LSyWcNmNZsWNqvY rGSzgs1yNsvYLGWzhE0zm8VsFrE5n00jm4VsFrCZz2Yem/PYnMtmLpsGNnPYzGZTz6aOTS2bWWxq 2FSzmclmBpvpbKaxmcqmik2QTYDNOWymsPGzqWRTwWYym3I2k9hMZDOBTRmbs9mUshnPpoRNMZtx bIrYFLIpYJPPJo/NWDY+NrlsxrA5i81oNqPYjGQzgk0Om+FshrEZymYIm8FsBrEZyGYAm2w2/dlk sclkk8HmTDb92PRlcwabdDZpbFLZeNn0YZPCxsPGzSaZTRKbRDYuNglserOJZxPHJpZNDJtoNr3Y RLFxsnGwsbOJZGNjE8HGyiacTRibUDYWNmY2IWxMbIxsDGwkG9FjZDebE2y62PzJ5g82v7P5jc2v bP7F5hc2P7P5ic2PbH5gc5zNMTbfs/mOzVE237L5hs3XbL5i8yWbL9h8zuYzNp+y+YTNx2yOsDnM 5iM2H7L5gM37bN5j8y6bd9i8zeYtNm+yeYPN62xeY3OIzatsXmFzkM3LbA6weYnNi2xeYPM8m+fY PMvmGTZPs3mKzZNsnmDzOJv9bPax2cvmMTZ72DzK5hE2u9l0stnF5mE2D7HZyWYHG5VNBxuFzYNs HmBzP5v72LSzuZfNPWzuZrOdzV1s7mRzB5vb2dzG5lY229hsZbOFzS1sbmZzE5sb2dzA5no217G5 ls1mNtew2cTmajZXsbmSzRVsLmezkc1lbC5l08bmEjYb2KxnczGbi9jwsUfysUfysUfysUfysUfy sUfysUfysUfysUfysUfysUfysUfysUfysUfysUfysUfysUfysUc2seHzj+Tzj+Tzj+Tzj+Tzj+Tz j+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tz j+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Rjj+Rjj+Rjj+TTjuTTjuTTjuTTjuTTjuTTjuTTjuTTjuTT jszfoRmcmtXkMW6cmdXkGMhaii5Qk0dCWilaQ7JaTY6AtFC0imQlyQqS5WrSWMgyNSkfspRkCUkz lS2maBFJEyXPV5PyII0kC0kWUJX5JPNIzlMTCyHnkswlaSCZQzJbTSyA1FNUR1JLMoukhqSaZCbJ DGo3naJpJFNJqkiCJAGSc0imkPhJKkkqSCaTlJNMIplIMoGkjORsklKS8aqrBFJCUqy6xkPGkRSp rlJIoeo6G1JAkk+SR2VjqZ2PJJfajSE5i2Q01RxFMpKajyDJIRlOMoxkKHU2hGQw9TKIZCDJAOos m6Q/tcsiySTJIDmTpB9JX5IzqOt0kjTqM5XES9KHuk4h8VA7N0kySRJJIomLJEFNmADpTRKvJkyE xJHEUjKGJJqSvUiiSJxU5iCxUzKSxEYSQWVWknCSMCoLJbGQmNXekyAhau9yiInESEkDRZJE6CK7 SU7oVWQXRX+S/EHyO5X9RtGvJP8i+YXkZzW+EvKTGl8B+ZGiH0iOkxyjsu8p+o7kKMm3VPYNydeU /IrkS5IvSD6nKp9R9ClFn1D0MckRksNU9hHJh5T8gOR9kvdI3qUq71D0Nslbatw5kDfVuCmQN0he p+RrJIdIXiV5haocJHmZkgdIXiJ5keQFqvI8yXOUfJbkGZKnSZ4ieZJqPkHR4yT7SfZR2V6Sxyi5 h+RRkkdIdpN0Us1dFD1M8hDJTpIdamwuRFVjp0I6SBSSB0keILmf5D6SdpJ71Vjs1/Ie6uVuku1U dhfJnSR3kNxOchvJrSTbSLZSZ1uol1tIbqaym0huJLmB5HpqcB1F15JsJrmGyjZRL1eTXEVlV5Jc QXI5yUaSy6jmpRS1kVxCsoFkPcnFakwN5CI1ZhbkQpJ1asxsyFqSC9QYP6RVjcFmLNeoMcMgq0la qPkqareSZIUaUwdZTs2XkSwlWULSTLKYZBF13UTNzydpVGNqIQupswVUcz7JPJLzSM4lmUvtGkjm 0MhmU/N6kjqqWUsyi6SGpJpkJskMuujpNLJpJFPpoquo6yB9UYDkHBruFPoiP/VSSVJBMpmkXI32 QSap0do3TFSjtcd7ghq9DlKmRmdBzqYqpSTj1WicC2QJRcUk4yhZpEavhhSq0eshBWr0Gki+Gt0K yVOjiiBjSXwkuSRj1Cj8+S7Pomi06gxCRpGMVJ3aozGCJEd1joMMV50ByDDVWQUZSmVDSAarzkzI IKo5UHVqFzZAdWprM5ukPzXPom/IJMmgzs4k6Ued9SU5gySdJE11arOUSuKlPvtQnynUmYd6cZMk U7skkkQSF0kCSW/VMR0SrzpmQOJUx0xILEkMSTRJL5IoauCkBg5K2kkiSWwkEVTTSjXDKRlGEkpi ITFTzRCqaaKkkcRAIkmEr9s+y61xwl7r7rLXuf+E/wP8Dn5D7lfk/gV+AT+Dn5D/EfyAsuOIj4Hv wXfgKPLfgm9Q9jXir8CX4AvweeQc92eRDe5PwSfgY3AEucPQj8CH4APE70PfA++Cd8DbtvPcb9kG ut+EvmGb537dlu5+DRyCf9WW4X4FHAQvo/wAci/Z5rtfhH8B/nn452znup+1zXU/Y2twP22b434K bZ9Ef0+Ax4Gvez8+94G94LGI8917Iprcj0Yscj8Ssdi9G3SCXcg/DB5C2U6U7UBOBR1AAQ9al7sf sK5w329d5b7P2uJut6523wvuAXeD7eAucKc1y30H9HZwG9rcCt1mPc+9FX4L/C3gZvib0NeN6OsG 9HU9cteBa8FmcA3YBK5Gu6vQ35XhE9xXhE90Xx4+x70x/E73ZeHb3RcZ09wXGnPc62SOe62/1X9B e6t/jb/Fv7q9xW9tkdYWV0tpy8qW9pb3Wnxl5vBV/hX+le0r/Mv9S/3L2pf6l7Q3+03N0c2Lm40/ Ncv2ZlnQLAc0S4NodjR7mo0Ri/1N/kXtTX7RNKmptUlpMo1Smg43GUSTDNf+wabJlVyk/SvRqiab o+h8/0J/Y/tC/4LZ8/3nYlhzc+b4G9rn+Gfn1Pnr2+v8tTmz/DU51f6ZOdP9M9qn+6flVPmntlf5 gzkB/zmoPyWn0u9vr/RX5JT7J7eX+yfmTPBPQL4sp9R/dnupf3xOsb+kvdg/LqfIX4hLFomORE+i 0aENYEIiRiJcMm+Ay+c67DrmMgmX4trvMkbZE9wJhn723jJ/Ym+5sPea3lf0NtrjD8YbfPH9Movs cQfjPor7Ps7UyxfXr3+RiHXEemKNMdq1xZZVFumaW0A6cKh+rWWx3vQie4y0x7hjDIXuGCmch53H nMaYfY6DDoPdLu32brvBZ0d1e6Q70qB9dEcafZEDhxfZbW6bQfvothljfTZktB7PiJhUWWS3uq0G f651otXgs+bmF/msWQOKhFF6pBTSATGGou5OGeMuMu7R/4tuiJDyyo7KioyM0s5QMblUCZ00VZEb lLQK7dNXXqWYNyjCXzU10CHl5cEOacivVKK1/2Shxxdt3CiS8kqVpIqAaty2LSkvWKq0at7n0323 5gWqBDNmLGpelJGxeAY+ZixanKG/EclmLcrQktp70WLE2k+zHouMf3xRNcjMRXgt7sktzvj/+iUz /vf6L18dQvu/QWO7DReKOsM6sBZcAFrBGrAatIBVYCVYAZaDZWApWAKawWKwCJwPGsFCsADMB/PA eeBcMBc0gDlgNqgHdaAWzAI1oBrMBDPAdDANTAVVIAgC4BwwBfhBJagAk0E5mAQmggmgDJwNSsF4 UAKKwThQBApBAcgHeWAs8IFcMAacBUaDUWAkGAFywHAwDAwFQ8BgMAgMBANANugPskAmyABngn6g LzgDpIM0kAq8oA9IAR7gBskgCSQCF0gAvUE8iAOxIAZEg14gCjiBA9hBJLCBCGAF4SAMhAILMIMQ YBrbjU8jMAAJhKiTyMkToAv8Cf4Av4PfwK/gX+AX8DP4CfwIfgDHwTHwPfgOHAXfgm/A1+Ar8CX4 AnwOPgOfgk/Ax+AIOAw+Ah+CD8D74D3wLngHvA3eAm+CN8Dr4DVwCLwKXgEHwcvgAHgJvAheAM+D 58Cz4BnwNHgKPAmeAI+D/WAf2AseA3vAo+ARsBt0gl3gYfAQ2Al2ABV0AAU8CB4A94P7QDu4F9wD 7gbbwV3gTnAHuB3cBm4F28BWsAXcAm4GN4EbwQ3genAduBZsBteATeBqcBW4ElwBLgcbwWXgUtAG LgEbwHpwMbhI1I1tlVj/EutfYv1LrH+J9S+x/iXWv8T6l1j/EutfYv1LrH+J9S+x/iXWv8T6l1j/ EutfNgHsARJ7gMQeILEHSOwBEnuAxB4gsQdI7AESe4DEHiCxB0jsARJ7gMQeILEHSOwBEnuAxB4g sQdI7AESe4DEHiCxB0jsARJ7gMQeILEHSOwBEnuAxB4gsQdIrH+J9S+x/iXWvsTal1j7EmtfYu1L rH2JtS+x9iXWvsTa/9+fBP/VK/i/KfivXvEzZ4j/A86y2JwKZW5kc3RyZWFtCmVuZG9iagoxNyAw IG9iago2MzEwCmVuZG9iagoxOCAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0FzY2Vu dCA5NTIgL0NhcEhlaWdodCA2MzggL0Rlc2NlbnQgLTI2OSAvRmxhZ3MKNCAvRm9udEJCb3ggWyAt NDc3IC0xOTQgMTIxNCA5NTMgXSAvRm9udE5hbWUgL0hPUlBEWitDYWxpYnJpIC9JdGFsaWNBbmds ZQowIC9TdGVtViAwIC9NYXhXaWR0aCAxMjg4IC9YSGVpZ2h0IDQ3MSAvRm9udEZpbGUyIDE2IDAg UiA+PgplbmRvYmoKMTkgMCBvYmoKWyAyMjYgNTA3IDM4NiBdCmVuZG9iagoyMCAwIG9iago8PCAv TGVuZ3RoIDIxIDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNqN2Mtu21YURuG5 n0LDdBBYh+cOGASKFAE86AV1+wDnxsBALQuyMvDbd5Ex8xdpBhlsAVsSLX2L5kC8/XD/y/3p8Xq4 /ePy3B7G9bA8nvplvDx/vrRxqOPT4+nGTIf+2K5v2/bYnsr55paDH15fruPp/rQ8H+7ubg6H2z95 +eV6eT28+7k/1/HT+tzvlz4uj6dPh3d/f3jYnnn4fD7/M57G6Xo43szzoY+FP/drOf9Wnsbhdjv0 /X3n9cfr63uO0jv+ej2Pw7Tt5stXas99vJxLG5dy+jRu7o7H+e7jx/lmnPo3L/njlyPq8p+3rrOk uMysZt5mX6d5m3218zb76uZt9tXP2+xrmLfZ1zhvs69p3mZf87zNvpZ5m32t8zb72uZt9rXP2+zr mLfZ12Xe5m01WI28BquR12A18hqsRl6D1chrsBp5DVYjr8Fq5DVYjbwGq5HXYDXyGqxGXoPVyGuw GnkNViOvwWrknbBO8k5YtzlOeV2xrnM8WrOuWNc5HqftzVgneSesk7wT1kneCesk74R1kpdP22Zf sU7yTlgneSesk7wT1kneCeskL990m7fVYrXywtrmy8r1sP/j/+9CsGSwOvWWDFan3pLBKoUlg1UK SwarFJYMViksGaxSWDJYpbBksEphyWCVwpLBKoUlg1UKSwarFJYMVikcGZxSODI4/as7rE5eh9XJ 67A6eR1WJ6/D6uR1WJ28DquT12F18jqsTl6H1cnrsDp5HVYnr8Pq5HVYnbweq5fXY/XyeqxeXo/V y+uxenk9Vi+vx+rl9Vi9vB6rl9dj9fJ6rF5ej9XL67F6eT1WL6/H6uX1WL28AWuQN2AN8gasQd6A NdgfuRACGYJSBDIEpQhkCEoRyBCUIpAhKEUgQ1CKQIagFIEMQSkCGYJSBDIEpQhkCEoRyBCUIpIh KkUkQ1SKSIaoFJEMUac+Yo3yRqxR3og1yhuxRnkj1ihvxBrljVijvBFrlDdijfJGrFHeiDXKy8M2 b2vCmuRNWJO8CWuSN2FN8iasSd6ENcmbsCZ5E9Ykb8Ka5E1Yk7wJa5I3YU3yJqxJ3oQ1yZuwJnkT 1iRvxprlzVizvBlrljdjzfJmrFnejDX7H7kQMhmyUmQyZKXIZMhKkcmQlSKTIStFJkNWikyGrBSZ DFkpMhmyUmQyZKUoZChKUchQlKKQoShFIUNRikKGohSFDEWnvmAt8hasRd6CtchbsBZ5C9Yib8Fa 5C1Yi7wFa5G3YC3yFqxF3oq1yluxVnkr1ipvxVrlrVirvBVrlbdirfJWrFXeirXKW7FWeSvWKm/F WuWtWKu8FWuVt2Kt8lasVd6GtcnbsDZ5G9Ymb8Pa5G1Ym7wNa5O3YW3yNqwt/siF0MjQlKKRoSlF I0NTikaGphSNDE0pGhmaUjQyNKVoZGhK0cnQlaKToStFJ0NXik6GrhSdDF0pOhm6UnQydKXoZOg6 9R1rl7dj7fJ2rF3ejrXL27F2eTvWLm/H2uXtWLu8A+uQd2Ad8g6sQ96Bdcg7sA55B9Yh78A65B1Y h7wD65B3YB3yDqxD3oF1yDuwDnkH1iHvwDrkHViHvMtqlXdZrfIuq1XeZbXKu6xWeZfVKu+yWuVd Vqu8y2bVulrzdy6E8M11sKwVVGJZK6jEslZQiWWtoBLLWkEllrXC8p3PXH+yr7cWvt4KaJ8vl3G6 bvcftp//6w//x9P4eovi/Hxej9rmX6tjZyYKZW5kc3RyZWFtCmVuZG9iagoyMSAwIG9iagoxMjky CmVuZG9iago3IDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZv bnQgL0hPUlBEWitDYWxpYnJpIC9Gb250RGVzY3JpcHRvcgoxOCAwIFIgL1dpZHRocyAxOSAwIFIg L0ZpcnN0Q2hhciAzMyAvTGFzdENoYXIgMzUgL1RvVW5pY29kZSAyMCAwIFIKPj4KZW5kb2JqCjIy IDAgb2JqCjw8IC9MZW5ndGggMjMgMCBSIC9MZW5ndGgxIDE0NzQ4IC9GaWx0ZXIgL0ZsYXRlRGVj b2RlID4+CnN0cmVhbQp42qV6CXzURZb/q/pd3Z2+03eO/nV3ujtJJySEDiEQyS8hiUAEwmkazZAA QRgPgoAoM0JEFA0eQRHwJLoKiAedDmLCMUZdr5lxxHHGQddZszM4qGNWZkbRVdK9r34dEHbd/Xz2 /+/O+7063rfq1atXr6p+aSAAoIdO4EBZcm1bB3xMfoIlv0Z6ZckNa+Qvn9mOadINIE1c1nHVtb5b 3JjWYJkw86prblr21g1N+wCM2QDu7uXtbUu/f+g9L0D4WcSPX44F1lf1L2L+JObzll+75sZlVNsE kK/B/JXXrFzSVj2vfiHml2K+9Nq2GzvE9y3fYH475uXr2q5t37W56zHMH8R8sGPl6jXkz9zTmP8I 800d17d31PiWcgAFRQDmlVhGgI2HjUiEQ6wNWDBa8n/70P+Sxz6ARxIuKBMvkpBA8z+2pgUdZKBO htG8EUwqN4MFrGoqE2xgBwd2cBiyVdoL2XwI0K6pk+couSJ1ktUxTj/HweakafSTgGfhDySfyNBH vgMnfEvcZCxMQ72/Qf0PwAg8gL3Mgx3ECnnY13yYRniUicBd5OHUDanP4BK4D55IvUg2pfZj/b3w OnyLGvwrT6ACZqL8fGiHz7hPIJZ6CEe7Bcc0CeYQB7TB+/j9GnW4H7bDL8jPU99irzbYhO1VQQ3U pF5OnYVCuIvvFk5oX4BtcISIqSWpFZALfuiikdT7qY8hBDH4J3gWdYqQQX4q+OBquA12ETf3OqYe gCchSfS0hZsivIQ9TcOZvQ7WQRfsh18SK2kSTginUz9LncJ5yYR81GkFfEbKyQz6FK9PTU59CFfA ALyJ42XfQf4Kfq9wRbI69WjqFbT8i0RHjpKXhTLhnpFbUo+nnsfZCsFYtMhM7Gcx3Aovw1vwN/g7 3ZjaCFNhLvb8GskhMgmhxd+nbrqBbuDegzE42hbUdi3shjjOyGE4AsfQNv8CQ/AJsZEsMp0sJtvI 36meLqXvcA9zB7nf8YR/Gu0dgCDaaA08hZ77a3gb3iECtl9KmshPyUqykzxKhmicfkG/4TX8rfz3 /IgQSg4lv0/NTH0NLvDAZbAeNqJt/wn64CD8Bn4Pf4d/wBliJhPIcvI4iZMh8gXVUj+dRTvoDvoU fY6byW3jXubL+Vr+av5t/kPhdmGr1CYlz+5J3p98Lvlu6sXUu+g7Rmw/BA1o0VvQK56Cl+A9bP0D +CP8ifkPtj+JLCQ/wV5WkzvIdvIceY28Sz7HUYL69dNJtA57XUmvRzttovfT7dj7O/g9Tj+kf6R/ pV9zAufnxnOruMe5ONfPHef+wpv5ED+GH8vP4hfyKZyZMuFSYa6wT3hGeEU4LVaJS8UO8VNpk7RZ 8+uRwpF/TUJyeTKe7EPf1aAnrUdLPAZPoN8fxDn4JVr0N6jxEHyFs+AhPhJGvStJA2kkM8jl5ErS TjaRLeQ+sos8TJ4gz+MIcAxUQt0jtIbOpW20nW6mW+jd9CB+D9O36Pv0BB1GzZ1cgItwY7lp3ELu Cu46HMMabgO3GS27jdvPvcO9x53iPuWGcdacfC6/ll/PP8jv5Q/y7wqXCdfi9wnhJWFQeFc4K5wV qegRs8US8afiPvFPkiiNl5qkO6XfSf/QdJBsUoiayxeFKTeuwVy6n9r4jWQYC3IIj7FlG0RwHubi qvgHVHNJnBcjq0fd7NTNZ6rBS+HjiF9DjkA5eQ02ipTDOMkPQYJ8RIf4V+kl8HvSStz8Xu464ZfU B89gNOqmR+kRUgsHaRVdQB/hgHxC9sEn6O83wnZyNVkNz5BhMpHcTCrIRvgddXBzyWaoSj1BeaIl 08hpQA3gFn4p/OR/D7+kEj6Cz5KP8Qb+5xif+mEHzuizuDc9Dd8RIfUFRjcOo1EbRpm70N9vAxb1 WnCdbcT16MYIco34DhwkGKGlCnEyvx5Ow3/AZ8Jh9KhajKSnkiv4x/g/pypSxbjCcJXBPlx3y+FS XDGfoJccwzzLXYkrXYexpAxXdRMshKVwM0a9bal46pHUrambUivhV4j9jhSR70gProh+RFTBm/i9 Fz4gW3EdXgr/T5/kUhiEz4mLBEkZrodh4QahW9gvHBR+IbwtjkVrb4aH0aP/hN6swxEsgXfhc/iG aHBu3FAEUdR3AureDNfQGHcMphAPdOCazcc4Xjs6ktXYyia03iO4no/h2jiNceJK+AWcIJQ4cURL sH8NttOIdl6E0ntwBm8lfViyFKN2IfwVx20kE+ga7E/BlnZg1BpEnT6Cv6C1U6peRRgX6sgCbOsb uByWYg/joYn0QkPqEEaqmVDH/RrtnUfMUEv85EnEteIKNUIOVAp/JhSKkjNTE+gK7hjuMSks78Hd KwsuIatQCxOOYwTsZBaUJ+egDu8BKDXzlOrJl1RNmlg5oaI8Oq5sbGnJmOKiSGFBfjgUzAv4fbI3 Nyc7y+N2OR12W6bVYjYZDfoMnVYjiQLPUQJF9YGGVjkeao3zocDUqcUsH2jDgrYLClrjMhY1XCwT l1tVMfliSQUll/0XSSUtqZyXJGa5CqqKi+T6gBx/uy4g95OFs5sxfXddICbHh9X0DDXdraYNmPb5 ECDXu5bXyXHSKtfHG25Y3lXfWofN9WbopgSmtOuKi6BXl4HJDEzFnYGOXuKcTNQEddZP7KWgMaBS cU+grj7uDtQxDeJcsL5tabxpdnN9XZbPFysuipMpSwKL4xCojZsiqghMUbuJi1PiktqNvIKNBrbK vUWDXXf1m2Fxa0S/NLC07crmONcWY31YIthvXdy5/qTrhyw2bp3SvOXC2iyuq961QmbZrq4tcnxw dvOFtT72jMWwDcTSYENrVwN2fRcasXGujL3R22LNcXIbdimzkbBRpcfXHqhnJa0/lePaQG1geddP W3FqPF1xmHOTL+HxKAOpIfDUy13zmgO+eHVWINZWl91rg645N/W5Fdl9cU1xUa/ZkjZsr9E0mtAb Lky0n69TU6o4SzXOOW9ZwjQKTEOHiMtLZNSkOYBjmsAe7ROga8kEFMNPjCAqvhRnZEVcO6W1yzyR lTN8XAiaA3LX14AeEBj+4uKSttESMWj+GliS+cl5V8P6c+l4JBIvLGQuIk3BOUUdJ6v58uKiG/rp +ECHWUaG5oMmtG1bbGIJmt/nYxO8tV+BxZiJd85uTudlWJyVAKUkEovTVlYzeK7GPp/VdJ6rOQ9v DaAnH1SP6fa4JnT+z2R2ZNYvnxgnjv+luj1d3zg30Dh7YbNc39U6atvGeRfl0vUTzteNpuKZU5q5 LDqaolmcWotOeeV5YZZp1sf5IP6JqlMvjXPolGoBkRvi5tap6WdM5/P9j5h+SXMBqD91mqFU9gNs VMv4xMjF+UkX5S/STt/Fob58iDbOW9jVpbuorgEDUFdXQ0Bu6GrtautPdS4OyOZA1wDdS/d2ddS3 npvQ/tThrVnxhrtiOIjlZCI6K4XaYna8IOqVR2D3HwlqD1KSFKV+Wq1kgsAnOdBJfJKAWyMKScod JSHQ4iHTBa6I+UzVSNVM81dVM0aqoBrT5rP4GFvqs/gsQXwQ3LjPytzgWUWA70HmB9mN6y3c9/+E pwzW1xgli5tARHECr9Me4CgVQ0QWSgUqHNC8/Qxrv4U1WnUGqoerh8eWZmK7BOkt4k6ewguDgfGz /2DP9O1tB45jMd6dMvFGWAQnlOp1hWS58cbCv/BneF7rs2vF/CJf0GH12mfZaan9gJ3a7baAP2jN 1Mi2IAGaFe4QO/F41pgfPqAn+v7UYJ82I6rvp3cpvtIxypimMa1jOsZ0juke0zNGI48pHUPH2Pwy yJmlmTSzn27tKx471xVBk7Qwm8wwt6w6E1k1Y/irlmHVPowslSUtq9BvBsCe6kzkVNqxk4SHsc7e zMpIJBJDIWKxVgLS2FLSGM+Y2xg3oYP06uQJMdICLZm+slxqt4mSA/c3UcRdzUcs48oqxo8vj4bC oQBn8Y1mQoEddPrzz2xZuHLR7d0tj98wPflJ0kDyX3mu8LLLG6cXvbufWHsitXOVm34pHM658sFF Vz0bCR/duPTYKoOG8q8nnxO0l19aN18rjAwkb9TqW2bWXlnI5hDv7UIb2tkMXtiojMsX8nWXOtv5 dr1Q6Kx0TnXEHMsdQqVzfNaWrAeFHRmC18KMm2kNmswad/iARKRRy0rMspmdPiL7Sn3UZ7GiLc2l ZmpmtpR/1JbnDTm2FFpWEWYMp8NhtdvwHI3fQNoUkykbPdpiO815sfWW/tbiimUzbl385Mh7JP+P P6+Yuqiq6pq5k18QDmeHXkme+s0Lt/YsaSz08q+cLTdaF7y2f/+hZVajekSFnXhe3oxj1cL1SrVG 4EUhKMmaUs1Lmo81fImmW0M1GuD4ICVUCxqpWpyF/jOHw1VFPXJGaQbN4LUynh9L0W5sVLoLRzXT 3II+PgMzOCw2KCvzDuScYK7CEY6z+Ow+lXZywyOT6NKRR4TD3yaf+nZkG9PtUdTtKeF5XLqXKJ4m Cc90lOeCAmh4wSNR7sJuxbEDF3abZB3OYIZEF2vBbrCTR0k+HRKe/37aN6zt6am/8H8X3oMicly5 ZMDSn3Mo//UiXsqU7M5Mp90VaRfa89eINxrW5H+gfz+gj+nmG+f7Y4Hl+mXWq3wr8q8qWpdze84O n94a6E8N9eV6o4wr7W5PdLZ/duBl/8sBfpV/VeAW/y2Bf/P/W0CM6AoNef68QKUhGmjUNRrq/FMC PzW0B24yrPffaejy79HtNezzZ2p1WoPoFwNundvg8Ev+gM7AE+cCl+KWoytdZKVrt4u6DtN2yEoN KnpPpTeLZBXbOJhK0OWUaR45WkoUvGy3km7Sg3FsEI/T/84rnkoz3s+LC7WuL1NO4lQynVFnoxQO ecZ4wz3mOHpkI/nSkjanu/i3o1PYOLe5F5QJMXWFzzSfQR65Hj10ZFXkq5bIyTS/PnLS6qxsaVl1 fSSirns/2iMrZzLa4/go/3Mis9KP5kGGubcSVpY7rpislQbZWqlTycTKPlWMeiwzVOpcjNR48cMn 1ivSKfOaFftE3URDub8c7TjNMMXfENije9qvg5bYuSUTdDjGlaWDBfuWR8ePHyfzTgHjhV8S7Tan g1dDCx+QYTqRPbu33LvtksuiA//eumXjl0/j1dopJU9k3nzzLdNKiiaQ+Dtr70rBS8nPk++TP2Zv u+Om2dFpWdYxkxbc9HzHq8v+/kvDqiXl/sposGTZtce2bvjoakKYfxWh7w7gupJwXQVKtKV8qdCk 7dB2aru1kkgEGsSTugQardPp4TcKROgnxYpOlGRSipcK9GnMWjhjE+2gnbSb8tStGXl2dFZmN/dS nBV1XY1U4aO+ve7k6AKrUh0e3b2crSrycXIGf3dyJv/Kt99+P1l9Izgt9Sk/hp8MASgjq5TlkkeT LeQ4PNOzpmZPC/6L+WOLdry7wX15aJn7qtDtofvc93v2eAay3vC8maUXRYPdIbodYbHAHnOvo7fT PeIL4uui/qXoB2aak1c21lJkyFMiY6J5ij8fH+6c6Mq8s3k0ryGHeWep0RS9JIdAjjknnvMfOXxO ThEZBwqWmjDQUpjvU7It1T4ly4wPlyfq66drXuAlvUFXxOIp1qkcq1WOEkUooSi2jNyxIU2BNt8Q 8+p366lXT1K4uylGR1TvmRUl0Vacj3tKCSHjCnyLnORjJ5nlXORc6eSc7nEratJWXXU9eveq4RYW siLp3Em27Q+j46FpR5Axn1cDWCTtiImSHLIqNpzODEBeavDFrJzovLylebQlEmtBBG5xnNGcnpRV Lcw5w+iKZeh8nM3h9DHvFMWAX/XQivF420MHFQnb8uw2B9vxKsaXk/ZU5LfvHO1v5LKCyc8zzBI3 9cmWJ48tePi+1y5rWtk4j/xk/Od5Fc11l9WPM2fQP415aHvszheT/Xfddll2hVvT0JC4Y+HdjdlB OXt2/aTkb61lrnDVpAVloYq8dtUftqA/bEc/NUE2PDoA1tS3ytiMyoqsS7OodYG4QLfAscAVy/5G Esv5SYZJmeVZ9XyjoTGzPmu79KBWpzdiUAYPTkNCkGxsNjIzMkygc/o0no5ckmsuoFzI1E8KFD3p gE4WXXKq0xZfVTVjeKTqLzPNq86oux47A7FwDataSMuUZiVjmbhMt8yxzLUiW2iJQUuERXE0Ht53 AU0WtmfiOk4vczTaFuLelHglmRwZuKJXsUan3dRy6+ar2m8XDo+c3p48lfyP5Onkh1fEHqGFT83q 2P3MoccfZWt0Po69GteCG/5Nmd1sillxYzetsK5w3Oy6yb2T7tS/bn7d9Qfz+67PxM80n2V+Zv9W zJyQOcE+3Trd0eCK6VfopYnWCkeFi1snrDNtEW433eneZ93rGLAecmiNqo9mRRl/wWqLGscZWIk7 N6pykyVqOEx40KHNrJYMUFAUFJSDcd3oqYcxivBYJTslwkqJD0oMLGHwzTISoydL8tncnua0KWew 4NwyYzjy1XAEo/NXLSfRZ0e+ikSQp2Mi2lSNfmm/Gl8hMLcDtCQ6Iz82+Vfjklkrbt54ddMyO7FF vnr7s+RfiWP4lU/oF2Vz523bf+yRK1aW/OIVEiI8kUhwL/ObeWi7tlG/6VaKrTExpotZ096yC13j W622I7czl07kovqJ9qh7Olenn26vcz+o1dpUd8lgXqMYMySjCadC5ywwGkKEeYrJBJ57me/4NO6c 5qrzI1x1Ju0xaqRLn5ihBUeGvmJYIa7QrbCmvUVsifl85aMDtI4rc+JJ/UJX4duS39f0Lnwx+X3y lcQm4h6xltStb7tj81VLtzxyRYyEccc0Evd2aj7bsf+y65568sXHd+N4a3C8YfQVG2STfxoAM66T hozKB7UPGXaY9wl7dUe0Rwz9Ho3GRqbSS8UG3azcfYZD4iHPG7o39e/rTui/lb4xGLJN2XYFY4Rd MVqiJvtL9nfsnF31htxqlRudyOndit5ktDYZW43U6LKynf2QOytKxlmByeTIUZX7C9I8UpzmrmyV KyYMqD3spmlGtRdZrWjmPj7D6mLmzsuQwEdK7GknKsldlLsyd3cun2vyaRSDKYoGH42HEWbxFuZU X+HiHMaNXbG5lHxbtUvJNeEDg7CLRWt1X64eUTd+KyqBElamDApZR4M144lzohho1b1cBQBW4EWA 1TsZi/dpdZPVbI2vOgJM/iSLoS1q90YFrWRknRpZ90YFjQVqoyVVGJ7x+IH3inFs+1uF0YIwF5dx 82c+DpxPPRJkpk8ATvodcY3/7EDyr7etILb3holVHFG4TW21C8PcjQuurKoiZE7JQ4+/sO2P6AuR 5BvJYzdvnUquWb9xypTVzPfvx+DxLPo+u+OtGwAtGr3aoqtWtE1a2qmNawe1x7VfagWvtlW7UduD BQInSnjZ5NDTFTgOQ4hswbgpCqLE66iE64pNnNaXF+Xdmuq0y0dGr53qvo6HZvXIbB7dSq6PnLss 3p++LPKHCJ88+/10PvT9hyyup55IziZ7VB3tsFWZ4ZBCkuwcLx3SCJ1OwvEC2G0Gs96s/a868XZx kZmY79GaiC1EzXgy8dzL9kviNIwz467qdjich+nV4KM/7UVF1b3TPeOkaya7wLSkdR5uOac0Tp5l 3EWaM73tFpu67YUr1FkZX265m7jLd64tbJsw1hYwRSqs6eF0f//9r/b+xGQ6zQvB6CbuaxazNwCI u3AdhsmkAShAq7Wg5XGu9XbRoY9yUU3UFQ3U0XpNvasuoJe5koK52taCzoLdBU+Ke6U9+hfEF/Tx guMFQwVGKCgpaMKKlwo+LhALFE92tBrznWqlIPl4yZPjYKFKJ7GTiJLLS2aLJZyVnR0K63DyTOaQ 1aIsLG+1kJU4Ff20QTF5skI52Vi2Mpu0ZpNsLDsYxHsai2sJgLC61LXVjCvjUe8wioaVGqQqpLxw NKxMvCRaEn4n/HGYM4W94c4wB2E5XBpOhfmwO//PVecOK6NHYrw3DptHqs7gqsLD35lVLYypToMG Z18WJy+4bV8fYccQEsn02dk5xKmeRpwOO05KNMyCo6gmQ+eSGwi3dXDZjtKGJ65c+0R+TvJUTnj2 pOVjkqdyq8fXLC9OnuJD256eN3/+vEVX1u0aidFFj42pmrp1R5LShocXFjVsfnDkLM4ZXub4GM6Z A3YrLinTmblQs1zD9/MEZ8tcp6kzfWYWRGbiHItkNIj6jAzcECgJOUCR86IHgKSwEY+LWc3hz4t2 u3pctMN12kW/dBGXLiOkNzL7Ggx6NfwhpEdPTjNfdY6uJbTXqKWYm14fOaMWqJZiNqo6v5f4Lhy8 RTVSLrXzseSpvNmV09ZEcKkJW99reWiWl+Y+2z6haXMi6eVDjxycsnzzz9L/cZ+D+8RDOFYDnip2 KlM/Jac032R+Y+ffoJ8K1OoW3FoaMy/IXOCIuXbSXeIuzU59v/b39F+Ej7S/158STomfGsx7Nb+i vxZf1byuF9Zq7hQ3aziL6ocZTmYkGy/ZKiVPa1ZHFs0y+uCiY0D6MJXeHNlBahXujtoV5mW4N65w 8YQdpPCCFLXiwDAC4EEqLxS0/bA3zukaeeRvJJp864v7kt90EXnHddc98MB11+2g/ruI2JV848u/ JV/dnNr32L59PY/s28fW4xYArgLHa4Z9Sv5OgWiNZK6wTFgrcCXWZuNyY4eV12lNeq+e3qtP6Wm1 fpae6vvpOqVAknCWOSrq8kFr1pbi5YjXejZad1vpIutG6wHrcStvNUOIcOxQkEFpJ15oKXFbqgdI Npw7Qp6f1DMsCoErfTbAOa4sYzsBnn2gMe6c2xgvV98wlU1AA/jUmUULOCV1qi2kh83rlKvrWmOX X3rJpDklfGjn1XXlX4+p2Z/8G46xFOfUjGMspK8og6JFDGjCToszsMu6y7Yz/EChVrI12Kj1iGHA +Ibvk8C3hjN+scAw39BueCBjp3Wvf0Av1QSUvLrQVf6loS3WLbbb/bfmaStC9WJDxnTDLFODrxZv +nnhUIW+3MfuteV5kqgTLFqfyxDW+/3+gJTnV4pW62+03WS/oWBt4R32zYUP2R8oPOg/GDB0knud d7keLHy6MF4kOn0OxReIOpRsb9TrIB87iGOcxtcUvDdIg4orJxr0sKuT4sTY01RESotISREpyvWV YsQfh0fM0fikchRRjxNarSEK7siN/czkZzHmqPek0XWkvv1j0WgYRi/n5SIhInGQkH+8r8E3j8Sc S8kK5xmiI07Ke3x+mp9p0NN8zyKe8A35GU0e4mnIlKpHWvDPYnVWnqOWVVnsVcKv+vIL8SKY5n71 VUseyw/1efPSebdHzStZmLjaQMb7G/y7DNv9/+z/nV/0+fUGnvewcbyAJygYx85Sfc7iajJ62FDz /mBUfXuSgzsAkPT7E76VdJLThANiVt+m8KpkpgMlCVFmAE8W8ad5yobgULBpxzingu06FWzUqZRX RJ3sHuxUggX4wHZNTq965eSd8z0KxjCThzR5Uh46Onj1hYr6ORlh2a8iozGenX+YMUbfgKTvkavw 09KiHqHyUm8p2gxrtSkfH2iHLw4ZKvU2fSVLJvTsncrnvRmV6jGJIB5jQvrtCF4sMeCH89S3I2wP uPDlCPu/ItufS4nHet2SayuCNvu05LNXbPjwkw9/l5/8xrKoeWWpnB0iL8eav/rygxFSEpkzPz+7 RLbbLI2TFzzYdfSerWMn13odgVx79rLpjbff99u4+q7Rm/qUbhMexcj4tlIgg0wCugLTRON0Y8wk ue3g4hx2cFozbcRppTbi4rSSTtK7mMFN4Oxxxp1cK7JBvLf3Ez6BVxV2tAU7e5uPNwl9hrZEVwJQ QhZhnEAJJd/FhZzW+fZq227bARvXauu0dduO207bBLCZbbKt1MbjJerGnnObamO8AiPFJIwUA2BL DbJXLGfTb1jMX7lZcBlW/wuAoifVg40JPyzKEHvAYlOt6mRmY6+cLIHyceVBC10/mBHODk93Lf75 ZesrM7S33EI8fGgoOW9TJDvrw8Jxs+vHPkDeGXrvyeSdaJ+7Mc7M5UO4Tz6iOC+3XGXZIXBa0S1W 0SpLI220nKKSiQ3Vwmc4QGe32XRaMdMWstuBhUijQ90tHSSFq/5/2S21mvPbpIac1hDNxdvkhXvk jOEq83/bJVvSl6sQDtKXHjY7wfks3MyJx1Zcvf8y4vbOqZ56fSFx756/+Cf7d9CepGuofdKstSfJ IDucsn/HcPq3/7B0955FpqqvNe70T87ecP1i1znOTq/iLuE9lNWe/+UbcmlyciZMMcN33yVnm+v/ 22/inCIW0UrchvfDW8IbsANpO/9n2In0qLAApiMv4lfDNORbkM9HPg95DWLup5WpJ6Qc2IBl25Dm cDmqTCm25cX83ey3gPhdSlzkHvIR1XETudv5ewS9sF/0S/nSeukvmkHteO3zOjnjn/Xz9G+q2jnh 73iuXgICngzMUALz8fQ607wSy6g6IuvoGNivvaB2+tQ5dZdGaq5f0XZNce3Ka5bOmHfBr/hSYfjD j/7Mwqn+bygHghCGAuxjPFRAHdRDA1wKU+EymAFNMBvmYN8L4HJo/gXM4x4CE2HLcZDb1We2lSn9 3IN9pswypcbMPQBNSBTi3AwYRKKwktsGG5EoijcmiseWDbBEn85YZkb5rSAjdSJx0INPouYVJCa/ FUMma/7WhMmi4n6WKI2mE31mV1lTjY27EQjXzl0HAfByG5DnIl+CPAf5Ym4pHqSYnkqfyVzWif1V o3g1Z8eRerkazgFlyOs4D2SpYmsTxnQ/axP5hWU1Om4K51JFTJwBosg1nJQo88pHOAU1Vbg7+rQZ TL87EmZ72THuNk7CC76X60Qpp9d0jNNBCRIbybw+raGsu0bPzcNhzkOzeFFHArvVp8Jdl8CGsL96 LhuXr5e7Gt3HjryBy03YvYNHuPtVsftYK9jf5IRmHGN9BmPZYI2Wm4y1ce4etPg9am/dfaEJZVAT 4vKhFImiUTdiir0ZNnNdmOrCaerCqenCqelCLbrYDzm5O7HmTpQp4dZDB7cOupF2Y5rHJu0JtOCA msjLLxvg3JwLLWE+grYjWOrp0xqZZq6ENVMVc/XpjWXVx7jVMAuJovJr+pyuspVHuEJ1KEV9riwG 6Eho9Wg6Z3ouEOhgc3CMy+ZyVUvkqBaI13gxT8DEeYHQX9LjzDr0Pfp7Nr/sJ3Qq/9Uof3uU/ybN U4P0eB/2ovTT3zI+VJNNP8HGFtE/wm5MUXqEvgqlCPiQ9jMt6Ad0AKqRn8D8UuQDyMchP5zwvent p/19yFD3hxMGBxssfTURKRlNeIOjCWfWaMLqKKsJ0lfoy5CNTfwBeR7yl+kg+JG/hNyFfJCugTeR v0DLYRLyg6P8n+lR5tP0RXoIJiDvSxiZCvGExNiBhMjY8wlI55pKvEfp8/QZ8KDoc4mQB0v39YXy vKYj2B6hT+E9IMdrrdHRx0kz+QqFeuAE42ClTyQqWCPdiaOyd4B2027FVaEElWJlD1caLC0u3cPJ QblYrpD3yDVmeg8Gpd0UFyzdis8KkCl6D5KC1E3vTPAV8ZoRHBMbF4VOfPaoqVZ8dqgpwKf5fO1p NVVNb4NZSBTb2IC0EakT6Rbg8bke6WdIP0e6WS1Zg7QWaR2Gjw5EdCCiAxEdKqIDER2I6EBEh4ro UHtfi8QQrYhoRUQrIlpVRCsiWhHRiohWFcH0bUVEq4poQkQTIpoQ0aQimhDRhIgmRDSpiCZENCGi SUUoiFAQoSBCUREKIhREKIhQVISCCAURioooRUQpIkoRUaoiShFRiohSRJSqiFJElCKiVEXIiJAR ISNCVhEyImREyIiQVYSMCBkRsoowI8KMCDMizCrCjAgzIsyIMKsIszo/a5EYYggRQ4gYQsSQihhC xBAihhAxpCKGEDGEiCG6rpc7XvMaQo4j5DhCjquQ4wg5jpDjCDmuQo4j5DhCjo8OfY1qDIpuswFp I1InEsMOInYQsYOIHVSxg6p7rUVi2Dgi4oiIIyKuIuKIiCMijoi4iogjIo6IuIroQUQPInoQ0aMi ehDRg4geRPSoiB7VcdciMcT/3Sn/z1NDbyHNGtxc8b5aoPKN8IXKN8AJld8MvSr/OexR+c9gk8rX Q4XK10FI5dieyteAV0MS3gpTjQNDwCykRUgrkXYjHUB6CUlSU+8gfYyUouWKnzdJs6Td0gHpJUk4 IA1J1CTOEneLB8SXROGAOCRSuSaLGtQ4iqEF7lWfG/H5JRJuIvisVlPVNIr9RjHOluM3SqOKZVj+ spC8U0heKiQHCsm9haRGSy8lvBrpZKigqDhpVvShyd4TSBWh8GSMTPcc+sLpTYTGe/vJ0TQrUCLI v0DqRdqDtAmpAqkMqRgpiORVywpRvlnxjzZ5FCmM5EOSWRfgcOBByGrRKAPUQPb0vWYALesnnI+4 I4lwKbL+RHgWshcT4cXeGi05BGF2DCIv4Mw9g/xAwnsSq59Ls2cT3iPI9iXwKt1PWhLhMciuSITf 9tYYyHw8FDLovFE+F8fN+JyEdwGKzU54C5BFEuEQky7EjoJYW0Ca4STy4CgqL91TIOGdhMyf8FYy aQ2E2cQTEYpV9QQkxrk+VOjLAdLMEyXDO+y93/sFwv+KhkX3+EDu55G9E+wnCxSd92jxYyhc403U 6Jg87g+9ozzO+AvePcE7vQ9jWyR4yPugd4z3nuJ+DRbfjXrfqXaR8G6S++kzSqa301vqXVN80rva O93b5p3jbQliecJ7pfcoUxNipJk+c8jbhA1Ow1EEE95Lg/2qig3em7yKN+ytlI8y+8KEdLsVxUeZ BaAs3XsR2rcw2M98fH5FP7EohdJpqVu6QqqVJkkByS/lSjmSTWPVmDVGjV6j02g0oobXUA1obOzi H2EHaZtoZkzk2ZNX02bKnulzNlCioTAd4pkcXqTm1pLG+OASaFwsx8/MDfQT3eyFcSFQS+LWRmic VxufEGnsl1Jz4hWRxrjUdEVzLyH3xLA0Tu/oJzCvuZ+kWNFtWeyHn70Ebrs7awAIcd92dywGLscN 1a5q62RLZUPdjzxaR58X/LDBdWEyJ76jcW5zfH9OLF7GEqmcWGP8Fvaz0AFqoob6ugFqZCzWPMB3 UFP9HFbOd9TFUOykKobebEQxCDOGYppakJkYxpNaJoZzlJYLIRzlfIyhnM4AIVUupDOocjxhcr0n 5Pq6XllWZYIAJ1SZE0G4QAY9BrF1vaGQKhWQSTOTIs0BWVWsQG3I60WRYq8qQvBcpzbkJWpn8ZIf RIKjIuXnRcrVvjjyg4w3LWPLPydjy0eZyP/np702QvrGrt3wKvulbWugvh2pNb71huWueOdiWe7d sHb0J7ih1sVLljPe1h5fG2ivi28I1Mm9Y1/9kepXWfXYQF0vvFo/r7n3VaW9LjFWGVsfaKuL9VVX Nddc1Ned5/tqrvqRxqpYY82sr+qaH6muYdXVrK8a1lcN66taqVb7ql/B/L6puVcDtbEpV6Z5H83Q oQ+3ZvlitQ5zx2Tm0AOTfK4NWYd5IPsgIxKL6wO1cQMSqyquKa5hVbjOWJWR/Zx6tMq1YZIv6zDZ N1plxmJLoBbOmRaYEHsP2xj3zV3YzFwlrrT9+JytZh+12gX1K+rwD/NrVMLvhZKw+kc/a37ss3bt 2tXssTayGqAxXji3MT6evRWWJOyqtS6GZWPOlXGcWtar1db3pwaxMoJKkDWsO5aKEPYfTEWHty6J 9og9EmVXhTV9npyylcdwB9+IhPc4ui5Rot6X6bo+f5DdX9b0lZSnOd5PGU94fGXs1WIFQhkPprli KcZEd7C7uLuiJ9hT3FMhsn8D78FC7x62lSZK9nCwJrL6nCEwuSYG6X+sYn+PJ7Jz1I57WCISiUVW E9Ve/93Y5JzR1/xg/lGuNr/m3ISky1dDWjhdGVl7DrR2FKJWrlUhaof/CQduxhoKZW5kc3RyZWFt CmVuZG9iagoyMyAwIG9iagoxMDQwNwplbmRvYmoKMjQgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNj cmlwdG9yIC9Bc2NlbnQgOTA1IC9DYXBIZWlnaHQgNzIyIC9EZXNjZW50IC0yMTIgL0ZsYWdzCjMy IC9Gb250QkJveCBbIC02MjggLTM3NyAyMDM0IDEwMTEgXSAvRm9udE5hbWUgL0JKSFJERytBcmlh bC1Cb2xkTVQKL0l0YWxpY0FuZ2xlIDAgL1N0ZW1WIDAgL0xlYWRpbmcgMzMgL01heFdpZHRoIDIw MDAgL1hIZWlnaHQgNTI1IC9Gb250RmlsZTIKMjIgMCBSID4+CmVuZG9iagoyNSAwIG9iagpbIDI3 OCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUw IDc1MCA3NTAKNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgMzMzIDc1MCA3NTAg NzUwIDc1MCA3NTAgNzUwIDc1MAo3MjIgNzUwIDcyMiA3NTAgNjExIDc1MCA3NTAgNzUwIDc1MCA3 NTAgNjExIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwCjY2NyA2MTEgNzUwIDc1MCA3NTAgNzUwIDc1 MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNTU2IDYxMSA1NTYKNjExIDU1NiA3NTAgNzUw IDc1MCAyNzggMjc4IDc1MCA3NTAgODg5IDYxMSA2MTEgNzUwIDc1MCAzODkgNTU2IDMzMwo2MTEg XQplbmRvYmoKMTAgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNl Rm9udCAvQkpIUkRHK0FyaWFsLUJvbGRNVCAvRm9udERlc2NyaXB0b3IKMjQgMCBSIC9XaWR0aHMg MjUgMCBSIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDExNyAvRW5jb2RpbmcgL01hY1JvbWFuRW5j b2RpbmcKPj4KZW5kb2JqCjI2IDAgb2JqCjw8IC9MZW5ndGggMjcgMCBSIC9MZW5ndGgxIDM0MjYw IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp42rS9CXwURfo/XFV99/TM9NxnJjOZzOSY cOUgBKJp5BIh3CBBIkFuEEkAERQ0KJeIiu56X3jjgQQIGFBXdFldDxbWaz3WY3fxXKOsy7KukJn/ U9UzIejv9777/7yfdybTXX1X1XN9n6ee6iCMENJQK+KQMWvxzOb7Js3vB3veRAg7Z61YHr29+a0V UP4MIbHv3OZ5i6c+/I/BCMk6QsIf5126au7qe274I0LWYwgtOD1/zszZp99/O4bQFXA+6j8fdjgX a79HaKUftgvnL16+snJFMAzbtXBP/6VLZs0cVd8b7rVqEhy/afHMlc3877TbYBvuh6KXzVw856Ng 03KEruTpdvOSZculu+RzYLsQtp9pXjqneUL60New/Q5Cagb2YUTbQ1uEsIj+Xz84uyYcQrwgIklW VAvSrDY7QjpyIKfL7fH6/IFgKJwXyY/GClC8MIGSRag4e2FJaaqsV+8+ffuVV1RW9a8eUDNwUO05 59YZg89D/398hqChw/7vrhAOoAD8gsLjKMAnEdAh8yX8vqLr9ILMV/Q4XZNv4OSO7A+h7WgHXoB2 oBfRy/g4XLUT7Uft6PfIh4aie9Fq9Gu0EYloGuy5Hk2ArwD7f40DmXbUBz0IvPQgOgznXoiuRgeQ F/szX6Nr0HrubbhqPbKiAjQYjUNL0I14dOZyNB19yl+HqtFodBlqxq2ZqZmbMrdmHkGPov3c7zNd yIKCaBZ8D2e+E97P/Bn1gituQ3ehT/Gtyl5kwFNa4cz70FJ0N9fI48y8zE9Qgxi6AurAo3p0GB8k Kbj7HPQl9uPV3BC4y8OZtswhOCuMGtF8dDc6gKvwCBITpmfqM4eRF56xEu56F9qN9sG3A72APsSa cDzzSOY4CqAyNBLa047+gA9y6a616Tra0dBLJagGjixBv0GvoqM4jl8iSwRNKBcM4crMO8iN+qHJ UNvH4cov8L/J1fC9hnuFH545D9mgX26hvY1+h/6Cg7gPHounkBKyhNzPLUUyPLEffGejBdDfd8Ld P8EpvI9o5Aj3MP8Uf0rMS3+WsQFFkugedB96CVuhpVG8DF+L38N/I0PIDHIP+Sv3a/4J/i1pJrT6 YrQY3YieQv/GTjwAj8cX4fl4Nd6Ib8F34cP4KP6KDCaTyCLyPTefa+Fe4M+D70R+GX+dsEG4Qfwq PTV9KP3H9L8z5ZkNaDzww1qo/W3ofmjZfnQEfQDfT9FfsYAt2AbfKI7hyfgq+F6Nb8QP4e34CdwO TzmK/4q/xj/gf+FTBMFXJCESIwXwjZOl5Arya3IvOQLfo+Rb8h/OxxVwKa6Kq+UauCVQq43cVvju 5f7CB/kjfAb6uVy4XXhA2C48JbwsHBc16VoZyW+efrirtOuTNEpvSt+e3p1uz/wFeYCGQeiFfFQL tZ8J34VA79uB43ait7EGfRfEpfhcPBp6ZgZeiFvwSujJdfhu/Cir+zP4eeilP+Hvoc5WEmZ17k2q yHlkLHwvJnNIC9lKbiXt5D3yEydxFs7OebhSbgTXyM3hlnOruNu5Nu5N7mPur9xJ7jR8M7zK5/MF fJJP8SP4Gfzl/P38l/yXwnThDeFzURUXixvEDvEfUn/pXGmcNF5qlG6W9knvyE3Anb9Fe9GzZ2m1 z7i13DBuL7qJVPAB8gfyB+DnGWg2V0+AU8l2vImswe2kUFgpDiKD8Bh0nE9CX79CHiAnySCuHo/C E9FC0s+8m+jmn4RVLf9b1Mk/D237A9x5pajhq8n3ooZ2Y0Rq4Jm/4/ryKe4N9CH3KZb4B9FHvIp9 uJM8zo0DLniBP1eYimLcvegZrgWvQXsJ6DH1lLwF+HgMfhL0wiRcjn/kMogjY4CLqrm/oevQIvI+ 6gQ53oTuwLP5eegmVIFXoy/RYyAVJcJlYqnowa+RBfxm4sLtiPBPQOtqcCHmBDdahxu5u8XvyQfo cnSEV9En3NNQ+yPkGa6ePy5MwPNBAtagDaglsxatEqbyb+F5iMNTUIL/DLTbaq6cj8H6GtAq00Gn 7QPpPgB6YDBXD3v8wDmjgS8mg4a4G753gp7ggYMWgIxfCFrsD6hdnEQ60DzBhkHrgG15Iz0BTcs8 hu7KzEOXZW5FvUAfbMyshjtuR5+jm9F2vD59FWpGEZCcT/BoYTg5IgzP9CKbyQdkIrn9bPpCbyew H30D32fQcHSu8BzazP8JTUR1mS2Zd4G7i0HD3oUuQRegY9DK7+AJ53MHUUV6DNmVGc41Q3s/ReMz j2fysYrmZy5FY9Hz6FFJQDOllDFk8qTBRt2559QOGlgzoLqqsqK8X98+vXuVpUpLiouSicJ4QSya H8kLh4IBv8/rcbucDt1us2oWVZElUeA5glHZsPjwpmhbsqmNT8bPP78X3Y7PhB0ze+xoaovCruFn n9MWbWKnRc8+04Az5/7sTMM80+g+E+vRWlTbqyw6LB5tOzw0Hu3A08ZPhfKNQ+MN0bZOVq5n5a2s bIVyLAYXRIf55w+NtuGm6LC24Svmbx7WNBRut8uiDokPmaP2KkO7VAsULVBq88Wbd2HfuZgViG/Y wF0EyVaoVFswPnRYWyA+lNagjUsMmzm7bdz4qcOGhmKxhl5lbXjIrPglbSh+Xps9xU5BQ9hj2sQh bRJ7THQBbQ26Ibqr7ODmLR06uqQppc2Oz545fWobN7OBPsORgucObfNdecx/ZhNu7hwydWPPoyFu 8zD/gijd3Lx5Y7Rt2/ipPY/G6LKhAe4B15LE8KbNw+HRW6ATR02MwtPI+oapbXg9PDJKW0JbZbZv TnwY3dO0MNqmxM+Lz9+8sAlIE9zchiasiu0OBo39mc9QcFh086Sp8VhbXSjeMHNoeJcbbZ6wak/A iAbOPtKrbJfuMDt2l82eLWjWnoU53cdYiZ1OS6MmdPcspjWKjwSGaIvOikJNpsahTQPoYs4AtHnW ADgNPg0YrmqbDRRZ0KYMadqsD6T76fVtQkKPRzf/CwEHxDu/PXvPzOweMaH/C9Ei5ZNuVoPjuXJb KtVWWkpZRBoCNIU6nsu2q3qVregg8XizHoUVdB8aB307s2FgH+j+WIwS+IYOA10CG22t46ea21F0 SWg3MvqkGtpIEz1yMHfEM5keac0d6b68KQ6c3M4QradNTnb/2XWva9j8gW3Y+/9weI55fNTE+Kjx 06ZGh21uyvbtqElnbZnHB3Qfy5baXEOmciGSLZEQx44CU07vPpluTNXa+AT8iYypZ3dIMnAl24Oj w9v0pvPNZYMai/2XF3VkjtOr2OrMZdlqtg1Mnb096Kzts6qnbeagwmAGR02atnmzetYxYDXzgSOz K+B4NGlqLDqkDU0GyUzAX0fm4AD6awi1GdBlQ+gJwH/mruzmWSeGsuUG+FDu7FU2HBTd5s3D49Hh m5s2z+zItF4Sj+rxzfvJy+Tlzc3DmnKM05E5cEOobfiWBuir+XggCAVB51ExHjJpak8CMa5v6MXc G8wAqoAA8UrovHaCj4lSB7nLcCGBP8YhVeKPYRSQReEY4Z4Hw68ADOyN/Cn9ZG1X7Rj9RG19Vy2q g7J+Ghb9+sYcMUcCFhjM3ukod/C0IaBTKMofpC7V6vR40iS8DQ7UOYZaZMdId0qyrnfgij3oAZsM a8MhPWC7GHE6F+U47mnHfVvooxq7TnbqJzvhOXXwCNyIk8RRWd2/ukKU4OvRMf70tj/UT3t+7aqi c+IpnEqPfx7/iG3ffdh16mjD5tufeyGdn46e9fw5hlZMinWiqDpGToXWQH2Aw7BuRw9wF9uAb9p1 nUyGwo/tdjsrHGu3WlnhW8OuqmSy3ZZvI7anndk6puDzs3q64shRWZSEb4UXLKJOutbiVKrgnKIr 1z4/rf5Iejz+DP/l+f23b5721qmuD79L/5CWmev5ZPoTfB34KCoas1cFwjwlduBxRhJztYRgFdci lXCwgcQB0sCxgN+WABrZBkTcZnnwTqjLicYTx/TOWh0IQ5d6p97ViR3Omn59K6oqPG5RKurfv3rf 4XEXltf05w4fbrkhWR+YeRE8dzDuIAvJYuCFMiPQTJo5Uo/r4ZFxRIJCM5wQ4Jtv9KfG6Mca9S9Q n/rOfn1RCzSzKuYZTEpwx969put8ABYbof4cShh+Qqtba1ZyJ+K3wfFtPKvnycZG6KtOs1oHDh8+ DPyIJme+5B3CQaBRHp68i1DeNdRghBfcEavVp3RkvmL0oAUjQAmiOJBG9yCvpsFSo/tQHyDGYVgc hvvTJ4R2ib+80wm4k0jv9AVQlhW+MwIWi0hvqdM9SNc0uqT7um955p7tYjSgh4FVdpOo5Tdg3rzw c8LPnvnMuIQXN5JNlk3212yCIln8ZJhrtOeCwJDQJNd0z/TAhNAiaZFllutSz6JAU2gVuUJcYbnS vlG8U7pdf83/IXlPfM/ykT3YXd1lihGLV/ZVMFJ0hShb8x3LEGgJwwZ7o+DqErQ18uoNJiMCDza2 pDqz1cSNLeDKDqAfDL+GBpfu7F9R7vU6gSHFeEFR0qV7K8r7O/RkvEASJy96e9uK3cvPW/j2g++s umX/E6tXP/HE1asvaCRvYx6f8/SMPenMh+l0+rc77nwW35e+4/vj4B8u/G7BBkr3T4GAp4B2Ktpp RDnD6qhcxF9DbiZ3yfzTPFaQKBBOEbBG8Osqq71K24Qwlc2OzGdM4qDwjeFgBA0zgtoYQaGXjQAl V44mjD5BTTCs9koh1xN9BRwFn5oIAcsBXIvXI5NZW1LQLynzAxumzqrz1WBHDe0f1JiKxR2iKFWB XFSQU+2D3550x1/7LOevOnd1/jMjXp9B21YLWF2CtkXwq1leUhy61e9yiZOtlJUcDlb4zlB0HUoR txChLOqjJ0Qi9GgkbIMjEY3WPNJBnjM0ovp80XzdQUg0H+SzzzuH6fIw6tNJa1pHl4fKKfOS7gdq TidhDzQUu4PknvOZYXG6yOSIm+6j994Nt6aiYrGQyT6qsVgv/k9Po/xMn0efxh5m9B8kDBKfE14U n5NelV8LSyO1Bm2SbZE223al80rX9c7nnZ8HPw8dD2ovWp51kZAe1vP0iC7+JnMcScD8MqwVoFYw ouqyKL4eDrrD4aAcDnKYyMEwZ43oHeSRPWMd2NGB/XtpCxDrDjsmmrrM9zb0NuV1/BxZi6JIxwMM zbG3jswgS8g1hCcHSCHKxzfvMpn9BDB7qlY/0cmMUF1nV+Mxh5NSFhYbbb1TtjX6IVP3oZwEDECN uHFpQ0PCE0tWA8X796+qBNZnahHkAhQkGBVR4qXT1cSXePju77ffddW19+L9rh//+PbJ8x9/+aHp kR07BtfOOnj1oc/nLvrVvZtdRz74ZsfUJ59/ZNPMfkz/Tcl8wXuBV1K4IUs6S8BvUAr4wwhTZk1p sIFL4qrVrtkjqlriiYT5SElYKLHGrZo/AEYpqlP2j0pJSkd6erIP1T+H+9AvctbU1YFi7wQKdr6i v+Ks0Q+lyumPUrBYsHqtw6wbrPwwx4WOFSFugvdSfaF7tvdy6yr3Butm9/WhR62qEOUY51g0q42X MDwXU8IY0IDnMA1ZWXFVu6Z5eP8B8ggKkPlGEdRSgGpanctmRJdESdRPeTnaKi1LMu2UxCipJwnU +MSz9Ehyay9/Bx6wO/A2PoAHIAQNt5zRV2Ud+NZdOZXF6Ei11olUo6m5uo5R9gTbRSlqEhSEFUgI 8opbGlzVXqq1GOmk6u5ijoqUjBJdonhBckp7/m2Lrtn50JqK0W6nZVnHhoULtrjbY988s/L1RXNn X7s1/dV7L2Xwdf67NrZdu/pB9/1k5ZpZ165bF9376rzds2fc2zvywk0H0//6guIlFAQ9oAsHQMdZ cdLo75yqzdfu1p7QXtOE0dxo6695zgl8jjSRkwTVwklIA4F/nePdHMdzVkQ0Ky9xz5HnkAzga5uh Ip6HU9DrKt9B5j4rCKqRl1+p5rShahonVviOWSm1A1cbVskoiFdKrbEqaaudUIayWN2ViOgkSjhC L6bXQOHYPnoN2WvrwFtYX38LGpApwxNUxdTqX+hMFwKQO1nrqKHdXFOzsXeKB7Gx2+3Q4YCz9yNr 5pPdzhpQO+8YlooarqBXDcfn5dXSWzQAOeAcw60ZlhqtdVyNZiRrtIIwrHvVMI3bAHCwClc4Kjxx B+fA5PaudeS+X73ySnu6Cs94lNt3+oJH0w+CYN/WtQj6tx7svwdkJw+V4rFZ6cm343w8A3M4VBwx rNhqBaUXEgoibqsawSihU3XIsIAe8enUdPiY7PgYFvBlDffhdw7rv2OcBWzV2KkfaqSi0mtRAA+V DM/QwNDoNOek6CJutjRbXuicHV0uXx5eL28Ivye/43VIUdqPRWbPipPjTHBoKcYOSPRAUTQejdED DlrLcVYC9Qzht2dQ4wbCo+TqDChzgOFEexPLdCY1gEB1oDW04viz1LbpW8tUKi4RXGN463wzfEt8 1/h4n5ce83np43wdpHBPyjT3QM/ObtnJSg6TGGgjk5cBAygRqNQ0YAmwKDXyokSFxElVXbwAOfRq KjLYfUaiRO7UHn/ZyEVTBk++hAx+fl571xVH1/0lfey+67/a8XFX9dibxix95KGrrnySn2hb2Le+ 77nf/XlWU/rfb23uvBqPwqvxEy9tf/n0x41PNnTcf+fOnUwnzgS58QqPIytqNmyHrJiHPyLzCsgE Vf59CeYVzbqM4wjtlLFM3XMkaJeXKX9HY4H6MwhXB6sl+BoAIgFbVnmAC9LYUlt/onOMfpJadh26 gFqCGkeNqfZxC8OnIuJEKd7f6ayeye3dku4c1d++n7v2n9fzP+3YclvamT7V8dEO/A1+9V7qCU0E HgwAD/pQHPUlyOTCdg2FIr2prIFNJ5N793bGIqJQHHFaI4pG2Y0iyn0Mkabs1H+gjGjPGWFaYAft fi7nXHC5s7huBuYKPRo93cPu6GEM7DmDPM+GtdR6d9bUdKPbZ1lFxFxFRLMixxjKted0Qfb5dB8U ThsFdCd9LL3Sw8CJh7X0TPtyD4Nn4T7ZCuR+VIaqq7y4xDvSOzL5hfZ1X0Hpi9egNXg1v1xusSzV Lrde6bsBbcZb+A3yWss6bYP1Rt+bjldczgKQld3haJCuotE+dNUrmqQCFCmJaijiRxpUY1tv3KOn l72oYKWDzDP01DK7EQXpAS/SrtuJvQPfsq/cv6wNHCM4vrtwmacbHnsMD/Fs7dcNj0+A9J9g8pI1 Nc6aRtY4qvyyMsPAQuPSFtTS0ICTyarKLDTI2RQEe1zuHvLSU3jwwuZLv3jx4DeLFm+8MX3ygw/S J2+5ZMOi+euvnztv08CRWyeu3b7j2mse50Ildy7c9uGn2+beUVJ2aNPzGYTxwZtfwpPmr7tuxqyN 605n6reOfaz12ie35/wiypMR0IvPZOltyfeD+nP4OzInGUH9FIhSCvopXC6mFPU7GEkdDDU7/I6y lKU4Qj3XsTbOZnOjcRgzQGLVAaFiPhK2FlBARnvlUKqxnKmRctYxQG3KfjrVox//rhuV9qjEN4yZ acEoZWDHwbj4f3nq2c/62aP69HyQUTkwONprxC/yXhify13qXRycF78yuCayJXhD5G7vE8Hng994 v4iejLrO8d7v3eHlBpbMFknRAcCicWAmfywqRosjY20zwFu3hekj8dvjTKXcTiuRfwDXIAvoZIef 6WNojl/3E//WMqqp26midnTzksNwEMfW1Ks9cQtlJcpIoHezxiXLRKgRvOOGLFQ5l1RVFlF9C2sE zOR0MPcriRnLeBgvNe/wrp45cc24/rj/c4v3ncbSKzd3XnXlPx56+kPyxqPLV+5+YvWaB/FE/crL Rl/zfrPmn7IIy+9/ivW7039L/5D+Mr3nmRe5ynv2Hbp3C1W6GDWjv/KD+N/S8VhDu5lrBfdLEDmZ CM+RabCTI9N2E0M8gMcBFBlneNBT+KkoT4IyX8tcssulC6exZtZS7YoCfYL1nfDxBynwzAIyBNoV ezD2NHNvnE5zhKzdju/ekz6UfmmPGQs4qw6t5GYeLD0GbERoHTDioQ6CgWkdBLMO4lNRjqsVUVCO CljI1uGLRqhBbX0nrcT/UAeMq+gfP+h0FYdPZ7g3yNr0zD24DtfuSc9lcS60JD1eeld4F41AF6J/ GxfyMT3qjcUSVdYK2zDbSP/Q2PDC4SNHTJlku7LE5k2U4KRSmpcsqQr2rxmSmOJvyLsoNqVkysiG KXP8cxJzS1YEr8xbWrjevy64Je+G2MZkwKaPsyFuIjVlqr2or2WchVgk73PkfDQEjSLPtQ8ZyKn5 cPTZgTiaak6R1AFcj4rIc/v6nF9ol7DUQa4z7Pq4c1Ghc5u9sK/eDIDgAH4Chcj97XUDSgvhfAXF yf2GEq3CVYGpF24xbV99ZxfwICiyE13HACp3gi/X2QgSdQy6p67xGLBj1g5SpydB2Y8qMxYA8FVX cCbfVfd3VlWSwngBTzxuJ18RLayuEEU+XlBYWARnVztRrJynASyJXl+UxO4sPwPn2gh//eAHxzds X/DwD0svvL+mYM/WSEle1ZSl659K7zj8TXrNu+/iX/0Li/iSqXsrfkw/+Y9P0tenfxwyafaV+CVs /IhvWDrzzX3vD5vstqa9104asLrl/I0zjZaFxsOjLpr//toHcN22ixrv6Zq5xR4qOmcctt78OC54 5qP0vG/+lb7/ibarF3x4zdLPb3vhoxMfYzuOvvHajjfSn/zl9dKiAB59/Z1D1r0xd9Ptg7f+Aeif 6UJIaADcLiEbnrcP2+w6A8g/tGcLPzLFSaglbmBGlBlEgS376H31efJ8pUnfxG3VXxNeEQ/qx3WL LDTgKWScPt/Spv9T+6f1nzaF13grb+MsqiLwPPhVsihJGpRlUZMwQvAYw86iGlFJc8MhwnF0n4fu 46K85oarlIggyBGREztIs6EgWfvaIJiQA9gCBsJiOLUomiNxE8bxR/hPeW4rj/kOjA3LOO2g9KnG bdWwRrd1u3REItdIrRKRfmV/708sLtgSgB/8+YE7ggEdtJa/rjYI3FJL44WdG4XeqRQg/429/WzN lDF4BRv1Q4dshw5tFMw1aLdRbZaJo9oi46dNbeftnCwdAKcfZX6kSq8BL21pNGMtcVyB41yMc8W4 ZJEocaTij2Tqx0913fPgB/gfdw0vCFcIB34ajp9PDyXT8O37r7jxBiqrHLodsOLXQCsH8wJc+xEP VBlBo3A8Pzw+JT43vkxZp4gLgpcLzcoyy3XCdRaxyKtw/qLSiDdPUVzOSGlpSQkK50Wg5/IjEQeS /UlRo6BLBI/KqKCGSnRSIyWKtO9Fmd5dZNQW3ZQTxEmJpBamV2gqPU+jnOGhZ2nBsrxIlGnIaDZi dZJZPlbIRqt+amdkNguiGb9SWcyqMTVour87HtXIwuh0o77zRDZElY1lwA+MSS04aDV9HDXUBzZd YBqvqnDEevi4NhLHsXIzkJGMg7tVXs2kE8q3k+T2N5bNnbf+5gtbX9qS/hU+Z+2AC0YNv/b+9Ed4 8cXJIdMGTrptS3qHcKBh/5yLH6soer513q6mftwEh3du/cglJae2SdqARcMnrOpHdfnczJfCCuFt oMrbe2eRhXkEm/CWte8rYwYtRVG5dRZo/eV5rWhd3lZ0t/AU96h1P9dufdV6FB3L+2eew+bMc+Tl caVisaM0HM0fYZ3ivtAzJTBfWJR3lfMG593cXba7w9vxI2S7412bC7lRUHfrQR5k85PdxTUMrvQq rtHtCPMhV0TjQhFe0ZP2C1AyCrgimO9LRmUsa7Q2ciAyazrTlClQldDRsMx6SQ7WmUABGh8FB2kp 9jGVBx3nLKwAfSclqWGmGpGaZr795XPSv/28M/2ne3biIS//GZcNerHi5V898bfpi7/Y8PBfCen3 /amX8GVvfY4n7/rsjV7bbn0o/f0tz6W/3vy8aX/uB/0zDXjaDr33udEnmo+HyCZ/OvSIHclQaQXn syCRwthKUVmc28/2MOZjaimYn6f/18z37xzz/ZhjvsjPmS9bbjzDdP36Dlll9OdCkizKgszLvBjw B/1EtKggCSqYDK/b6/JyYojzxbDTBgu/HI5hr+qIIejHVKoUPmtxI+VRn9fnBTeTAIcmYuXZWBv4 oLH78X+emnZ1w/JlY6685fD69C5cc8uj/YbV33HpmB3pN4UDnrzRl6SPHHo8nX5iZvmO/v2Gff3Y F/8ujUCrHwLdQHPTLOg2wyMKEVmWJMTxtCNVJWJBskT5I093VkqTuAuiatRK1KCVV/4/CKw26CKT hbKdVs9EtrH+xLHUzyW1X19otSeW/T3EF56+n0udfpdbJxzYka57Om3dQeUIAD2/HtqgoBuNFGvD zQABcs2AJtwbJVELIUHLf1Fvw2KOe2TFMP2L6quDpveofo/6HzNdZYpYf1737dzHpz8nbV3jaL0H 7uiay7DcYpD//SD/CewygiF3yEOaivDFsgs7ucJCFHP6SAJFCBPQKK0FxqIvYuPAe1MwThYlCgHZ QcuKmliQ6hhrC7PB2WjVh4wGzAaH6PVkaWsRLspLRlWsMgdGDSRnXdQtzvV648lsi6D6NOTR7RbX sm0zblhD4Q+w9FA+HgoHw4EwJ2pJPeFJ5iflBJ+MJ/zWvBjy2l0xONntikqwVSAkYjhsAd52O2AR UWIxVMjBArFgCngntXptKveh3A74qirhOEuDeH1SbwIqhI5RUlgF/O/gRpPFN6ePbns//UD7Hjzu owcwvjW5M3bJviXrX74iNmAjJrdcffxcUvc07vps6bL9+OL338PL2ud1/Lpvc2v9+HVjNz1wKP1j 68xq7AB6PAI6pYDJwvs0RnfQCLo8lTwXUdRt6lGVqAIhFhlkOCpJIo0fMqsH/U1DV1BiQTKROtx+ Zv0ws36NrVZsJZZodlTmoKHCTf8LBpSzDNhD53iz8hO14qh1nLXJ2mzlBzX4U40t3cMxpg4y6Ziq ZcFIkCfwx5kiwmDogCnhF4flIy+Tn15+uUsUDnQ9Rqb9NJzs6apnfPkiLNZCP3Dozb1UfggdENoz 4Bw2MLSnotJc9+prrotLzHU8Ya7zIubaHzQHkkqtemVU2CrsFIBbAbTdjLahNsT3QQYahz5Fx5Hg jMLOrYgTzMgr7Qd/tn++zfXPd7n+OWnoJuJj/fMQ/15DDwU8ZPrU3a0A6xobWpbWdjXmOoWGZKk4 VjhefJlCJGhjdeZLbibDRE8Y+hwyT1xOLhc3WTc5RIVJXLuFClwHDhoWPmJXlKSqykkLdcppzViB VshiaghWME033WOw4KKlMerCUZfhGudqcvEunERs6MFUi9/kyPrnrF4Z5dyXa0mn3thitoiiSBDC zlQdcw3NGH3/KmgICzUmB+2UmmeNXFj8csNL1750GG/zb189ZNnV3A+nAx2vL/yE0hKwnzCB8jRO GxGuoLpGVgYWqVVif3WEeiG3gfsTJ61QP+A+AENE9QQzj8XCFn6z8CT/jSyoPK7i3+OJQtlaccYq uShdAHTYo9U46d49sC1n1zxd57H1wT1OL93/iXFOAJ6ZSJwjK4HAOSC8iqrIqsDxfFRQ3YIAWyBQ IqB3UVWRQHhMJIuMZJUjFvBnO8hAw95XwNuENuGg8JnACxfIdJ+lr4SjgMbbJA6cvQ2GZon+3xqk H84YpO0Uzmd5qLOrsQU8wJZOqpNqqQDV1tIf6EEK6OkIGKz9LKYvyXqtXAvw3Q/wPQTwnWLr9wc0 mAElunF8j+ag/XXc8EFB1G2OSlm36ZUKLak6yAYyn9vA0BP70Pi/QymAfisL1PD0VxCqAeH4ZJ8X it4akXarxVkjF7hreMNdQ7t5bwKKnprUmU8DvTFuWdqYQtSBoNyPYxj+JMftL5P3sdR1F7k2g7pO HgcFUEL+1PXM6TvJF9+keZTlG74U+EZAiw0NE9CCApKj1Dkijxt2iXD/NQA4+QvQJP4CNH3RaFp+ U0hjHqjgWyCo/9zB6nInQqId6qKTY2aQbD+SQQ8wPSnbrA5m40BBQEGgQ8bFtKQ56WHBrnEKwkRW LDYkK0S1iEx+9azw/rSPCa+O6MBQti0/5tpyuv2s5AcaJq47eFA/evQgDZSkUibFUC4ZIl9iOklk S44tebYU2FKmHBenJcLABZhNapNtZ7xjlS2lnPMs0y7LZwN/AtaiqrPSzhaCxiFsA2gmA0ajDad3 YwV2k+fIFOSEvppiWLMoRswRgN0W0aBz6kQf4HdmHGrNxjSe4b+UyZIh4xpE7LKbhGR+hbZB+z10 pTZSG2nnSviEtcw2lbuIX2FdadtolS1EkGus/W1jyShuqGTI9dbzbOqd5C7udul2eTv3uCQ6id1m 6ysQkHgia1ZrX0GGoqxNsE/ABrjjMp0QArrfZtMpnZqcrU7iPEC2Iyvut1uIyh24n6Fqiho1tGss 2HIAGmnDFjhCOsCJV+zAivZmHesdZMqzUaFJaBXAnJDtexzUQAZoDk9jrR84jfnpUA52bxxrBK8d ukHv8Q2CL0+FfeMa5rzDCvTvGSf9BaRlTgEPvodI5j3mo49q0+BYMdMA1syPu2wq3Zsd7HtnX6zG VhZjA377qmts5dWsuLcX7M0O6qUawMsHOaXxTRAA7PX1r8YxMNM4jh134kJ8UV9voArPwMJz6Sk7 01OFA6d+uOX8cfdwp38azr9xqor/7FSUycq9oO/zKRbGa3Y5LTm8Ifs1LxsX+cqI0ZJMwBZLMihd mUgcJys8IYok81xUFIWc1RW6oY1gyhKAESPIGLoxasFRyzhLk6XZ0moRLDLgagZurPCw/w5g87/E N90Au4dJTzWmGKJpOXEWomFxuJqajTyjUU7dcpnPngUtK0dhgZhKpeASqNAuG8NroPkH9w2vkY1y s1heI4GOpW7wvgAUy80i3RtnRcMSr5Fsbvi56PaJfS4o5pnFPCh6aPHHXd1KF/cQHiBiBaY4Czvu fZUjB149nQaSreWvAXK1nmo1fdhZgP8/Ft5BNhRCrxvjgnbs1t3ukC8U4nmdd1t8lhD/hG+f7RUb 5/P5QySaZzjGusb6jOBUYapyoT7ZMcM1zTfDPyV4YegG311ED0Q4zhmxKJ5klMZAAW1QMkg59CTR kSra+RLFH7T/pdwIh0QJE2PqJ9iah/PsSUpFsYf6CIRznr/p+jfm9Hf9WZlR4P67dBrfpG4qQ+/V OqooR45KAu4/moU34f5v4OFPtaf3vXgkfWD773Henz7CoVVf3/KH9J/I63gxvu/l9KN//jS9be/v 8bTfpP+dPoIrcWgPtvwq/bnp9/NdwN9W5Ee7jbI5jkVuMkof5b5Iv8jNW7QIaBnk85t+nzMps1iT rGf1b9YPkoPRIIa/oN/6f+sO/tKbDfQ0Ztn4U0ujGYHqdghN9A1ODXPiIwT6JhZzQLnbfyclt9Zf emvDd+nX0pvwVc/f3zi637r09cIBm3POvsXPpbu6nubwlmumX+exmrzzIMj5DugHPyrAp42Y02LD zv7haflz5cX5vMLSuWS2lNiykEJa2hKWXEULWq5gyRWcHZm/7nEGK2F9fE9BUaWDbucVVerZtT27 huPv78lLmsfhfD27pseNkVBI2C4IXxCdaJkeXhxeqqy0rbKvVzfZ77A+Ye+wf2X70q6DzYs67G6H w+6wa4ozRGJBryo6aT6W4FcUry8YiPioOmHpgz4fihUwivr9drtNjiRt94q5xEUxRyzmeBUwF0xk AcfGaGFzYWshV1jg/2+pLP6vOilOIeLPnP6sCASO+Wmwh5qNLLVTcKy2pg/LmzLTpgTAipQBUj0/ KOuxGKps2Gvs+kCHcyBVHbiF2Q0baKBgoMYBOsoJP5sRrtEB8OkF+fDrVjoNPUKXPq/PFed6E2Co OGMuNn4ae5BsPvTmla+/XV88eXTmxMuTL7uwV2zUX/CD628fc8fD6b7CgbG/X3Xve3mJwjGXp1tw v3VbBlikrsu5iupVI+azPMTpmS/5vwtvo77EYxTN4mbxy7jlPJ8oquJqwkO4kdLovGH5QwuHF03k GqTpeRcWX++yxWkYgvZ3Ya6QyBWSuUJRrhBnpDBPNguJXCGZKxRRz284LRVbk4WkkCtK9LdXxocm hvWZFp0Sn5y41LLQusg21z3Hv8pypfVK+xr98sJliQ3cZsv11s32G/X1hdclbrXebr/dE8nitV6x pDOUDCrJEnDNUEnQyZf3S6I5IFzWXqtC14dIKOG19ooUJXBC8ApUe5hjGJFeSiTi5ZjWSzmcNY1m aISuGtkQWp9O8xsyeiUKbVaLEAvnRUKyJPIcEXGisAD2iUIk1CtoULa7GTRRpxf1YoEeZml1HMXj cBNuxluxCE5om+HqRR9JHw01vkBJohJcQpW4zUYml9CqWel1JcFyaBNOOqkJp4ecOSZ3dg+VOCdR WQj0ywZ+GuuPMY+zk0XNz4RzdfCe6QhY6gRtEbAxHbugEfMG6om2nOFi0Pqu6gipKM/GIguL2PA+ SxrLxnw9bp+X9zEmBae1MDn9WeuM369Z8uTEcdMHpS8dv2De1T/8+uH/bBAO2Hc80fZgzQD8wdTW Kzecuu/V9D/vwn/SL7vxwvOWDR02L+6bmap+eM6Sl2YveHOt7Yab1l40tqJiUfGgvSsuP7Js+dfm +GhfsA8H2LjU9YZVIBHocsSmSykdZNmeqDm686wYxaQPTW3AeC/ORma+MixMQchZ7fBDzoH5a05N nM6phbQJpOkd5X139fRloEMBoxxr/EJn+eJ1uST+KhoFJK50Hr85HRKsO3b89E+zvgro8eE0/w2f m83OcgoYycx+gTusyAImQp+PD+sfH3ZUVMAd69jwY8go7CPgUlTMJdQ+Wl+tSbtevl7Zqh3UjoMn rI3TCE8sMskmNihYA3cBbllXx8ag4GpVUaKy4JZlAUEHEMFNiKDAo76OqoC/58h4DpFZOKa4ZpyM W+WtMmxjbFiJUVwzg+CbyQOEELrHERXGCaQvYO6t4KEfFwTA3Zv2WJq2m7i7heYL05+fDjGDogwG Ov11tRRdZ4fG6MiYia3dgJ93Izv4Mv/YrTgxXYH7AfDFTCChMLsYTuvPYDZikzoY7KDJWDFcYaLm CkwGd/3+Lbymd35BL7zlla6XAXn9qbV55Uq+5KfhtM8DCEkrqO3EHxnJEpR0lDiT/hrU31Hj7O8f iUY4RjpH+KeiCx1TnRf69TvlO+3ZjjQqdBwMpDyVQqU2VBiqjfJMEiZpF3lmC7O1RZ7lwnLtKo9d 8FD/zCkDIxFGx7o6RjUf0w608yMcD16QKEHnq2B4FKvNbtfcLqeTToH3ezoytXsE5I/SteZ00LUx zQMQGwmEAM52Y4z8gixHPH63x+N3aooS8Tih6HRodntUd7h13eFUNNnvEewOXUMEqiRwft1uVxRZ JlAnv9PpcCA56PMF9cEKHo+iSIOlB34GEvD4fVE69BMIdOAbdpmGrzEYqO8Cp6krGOjyjxk2Z+gX 3TYv5zRRe0cHOHM/gOf1PV2os1cgLhtt+qFDsKg9lCv1XACx7UBsB+UJp0qTckwOSMDO0jMckHXL bLBnj2YIxgCTKZY2AkO4TIZwOWHlqgBXig6bYnx/+qpXPy0MDlCx75u3xsbDvb74bfqy59JvFEk+ d/o14cDpujtu+3sh90lXMP3tP29o554B0N64JTpnxKmHmcyKWZnV8MJ9sjKQ4wcpHZkv9zh9NOD1 pWGDAh+ABUcXCkVLfhYje98YBAW+GBbOJF8il6p9bPx8PF+cb/lE5AWe40RZUkRRETlF1eiYVVS1 uFXVInKiwlED6KV7uSjBIK5Y1CwiBvWGLR0kYCiqqnAEtIatg/gNRVMmGGqrStQOvNewWixaFHET xpKbmdDuNRTgIXcODxkWpvK0rJr7a1bxEf8+q+3lGBXk1EnT+6KpXl3m6guq3cBrPsHiB0D4jb1T KRlkWWDD3bS0kQ5y67AY1eYDEoXp8LasKRp/IHMCfLUTLKmnwcyloDhIYTEv+PHgfe0KUIjT0G1n Yo4zAu4gg7re+BbHxg0772Ic/mvXs2QxV58evnr1sq145+k9Xb8yMfIFma/4MH8uKkbVpJdRpliV 0oA1WFpiLS2tsfb3VIcGlo4sbbQ2li60Liht6rvZuqHkbu89wSesnuJcNLeIzYuhpccCTxbvCzxX fChwpPgtz8fF8lAvjlDL66BGwek8k95QRZHoZFrK9+X7U2WllTV8TdlI/vyyKXJDaq68ILVC26i9 pv3H+p+Uo7rShnm9T2Glrzzm9s8oWVJCSsJ9bHW2m20P2DI24QHbTtv3Ns6mZWdNfZObR3XC8NCZ ETaWj2YTab6azRbmfB3kyX3+29zhsIToSUFmsoYVqeVhzlIyU5+JREbmRKyQgoQsRPvW9PMLeUr5 QjqWRLMmC6lnQNteSMPUFvq4QvagwpwtLOwgFxm2IoPmqUeTfZM7k0IN9TQo9gDo9t4+VuhXw0ID kXhl35qDNWRbDa7x0boNpnf0JfwFfQpfFI+IJF+sE4loY7CeMaPoZ3iepXCKzAUTbQzbs9Ersd+A HtNQALikdDAzLIP3RHfkvyv1+ecU0BxL5VLgc+e3mLCtpjvriaEZGipFLWZmD4Ux1exbVVlkJsOf Sxiu8Xo8bq8vnuREyUbMXDM4iaudvX/hzudHLDu/atGH83DFsE3XrMpr81929PpNT47TFV/B82Hf JYeWTC9fvGD+Q8m86yYPf2r9mLVj3DZrsDChXtbrnIYWf8sNo4yZF/ReefzU+nMG4I+Lw3pxfZ/z my4ae84VjKc3AE/T+A6dz9Vq3IMFzV4oVAnDBKEuvy2f5OcXhCvC54Wb87fmiwNdtd7a4Gjv6GCj 3Gidam/0XhxcKF9qnW+/zHtZ8GD+B9qHvg8Df3V96/s28Le8z/Iz+YGo0Mfex91XqLMbwmj7OGGu 8GHev/ifdE332HiRoFAYFKjqCdss/sKjFqxbDEuTpdXCmyPtFsalFn82uHoy518ez42MmFPELDS9 m42QUC7oQylqWY4dFYg3I0MMXFVwCUIOYkDA23AbPo75fFyHx2IOU/hF2RbTdNs8ymCYMQtm40LY SZkFM2bBNORJeYyd6qWPxn42kMpSUnAgMqK6p1fH+GIpHf2EPQB+z+xkmBj+WN6IqbBalqKWWNxR 4QCkCw69juIFRRwA3TNZq70eb1+665KdLUb6hxeeX0QqJ9+y4ulHL1/xtHCg6183j7359WXp79Pv 3Ydvf3HyDYffOPrKYWZbxmW+4jpBZwXxtCwerLRdY8d2C6bDZc2IQ7wzbJH8Yd6CbR5Jpu2XWPsl lh0q6bT9EuPyw++8YmL5Q43l9Edh4whFw/nhIa4hvomuib4mV5PvHnIPd7f1Ef2RoCZbA+pCsoBb KFyuNVtbrY9pe5V96l5N82obtL8RzlYww77Efo2ds2NQM8aqvmwMrwmqtRVtQ5+h4wBn7XYLOlPH MFS90CYzHVUQgvYVWlL5YHswTbGiJDIYfc5nVAkyqowMewqPSDhfqpOIZGNRKpWeJDEVK/ULVR7K Im46RmOOWC/NzsfdjzDFBJ1LT6Q6l+ZGrx01ffTGY/DHPBegXAP2mYn62cS9nJdCacfV7sr7/pkP 0/9e+vX1O/6cvzNwzbRNTz6ybuFNeL3v2SM4D6tPY7J254OhRZf+9u33Xr6WyuRwoNmnZn4Vnmw8 ohLemrBWWodahSp3VfhCMkmd4J4YnkdmC3OUWe6m8MH8d4R3XR8HPnd97v7e9/fA50z2vPn5qSAV 2FFBKr1Sb1Jo7e0dSKqso8gw63D3yPCF6hTrPOvn4pfen/AJm449nM2i20EmLZIDgVByFn8FzR22 J3T9qAPrDsPR5Gh1gHBSnjBF1OGksuNghosKq0OkHORgIutgAV/a4w4b7XFHbkzBQb3H81ji83Jn 4YvSEelTKSPxlERjJU6KMJZjulqKmKzIyMZMk8QskBSIVI7rmfXRUt/Z1VPs2LTa2mOUZrX0d0bS aFw8VnVWpiUdyuqZLD5gzqFr3r184TvXNd3eZ09X9OnLVzy6/aqVD264f8uphx/A3Obxg4ntp+HE +ebrL73y4ZuHKM1GgR6NgJx5gGYTDV8+CnsAWTUKjcpkyxxukbBEmWORPeYsZdYBx4wJtJQXZjNX nB8IP7lPBvl+zoGBfuHBzvrg4PB45/TAhPBM5+LgzPBKcaXnJDnp15EX260+3zhvk7fZy3nD9q36 Np3oOh8KqxI6QJ6kHJvTZwdBGqDfdZCO21wgPT7DCpaXuZ/W3IQla27s2ErPV4pKK9us2BrMp0Ou iWQlXRuDqanNx/neCr1QMgpLK3OUivagVJhRyhSwMKMRyy+glOqpFRtT9V3Hxujg8Z9kXn+9mZoN CtJMzq7taqllfo0zl0zHRh1zImYGf91SjA1d4xibMSNyFx8o+27/1+nvsfvP72IbPv2Vunv9rC1d H5Lx2oAp169+Ak/xPdyO80Hda7g4/Un6P3p054H5+LYNQ+Y/xvSkC4jYKryNfNhqRNwKtgf6BPoG jEBz4B7tXusTVjloLba2BQ4G+ADtkeJgfmWebOU0e1jFHpJyu3hOROoDbuzOuAzel+ARR27FbBBj T78BlWwwIxXOr9yKcMCgghIwrCAoWdBczABzARUdVJaFzT9kg4jubBDxG2Z62MAim2jbkfmJzUdC D/sDz+MDKIZOYhXlsHX3aAdF2eBMga/c2WhCbDoPs8ZhJt24dYeoSKIMOElXnCHkEO0hnMKp0rVr cQokZWmFI15VUVVZTQMwoNioXvPQmWK7H3jAFbxuxejpoQHlE4YeOcLdvaVlUeXwC533qcObLtly ei7IxHnp8dw3IBN0TsQSo8liEdxlloR7tGWYW1TyAnlllqS7LF5j6e++wDLcPUWaaplv+Un9l8fW O15WdG783KLRRVvLtpVJ/WP9S+rKhluGx4aVTIpNKlkgzYrNKmkqay37sOir2Hfx74scPq/o6SC7 2ovDLonZEj2K+jJL0ooOoqMIwCtZY5QL4bBdHVYQ1lSvpyJRoSb8/qM+rPsMX5Ov1ceXQZeTyWVM sfmYYvN1KzYfU2x0ghfb+42p2OhZdMJXVrH5KDC4gM0BW27HCVSQX/ii/Yj9U3vGzufb6+xjwdQx mbEHKW3tBWzKUZjeyc60m51pN3sgVbY8RhVcakwPBXeiU/+Zjus6dpK+ReBYdnLDMfO9Bi1glnw0 tY/ByCJzTgPVdL6qXKJHz7kxc3dayocsX7PJb8Mr2j46ftkfb3z+ysfmfLTtN9/c9dia1dt3XLly +9Tg+ET57GnVbTfg2o/vxHjLna2nF/54ZOVTXOkfD7745m9f+S2VoY0IcTT3z41n7kdeYHyPr5LN YWUgO8FXccO4A1ae7RroC1T6ZIfmcHMCRvawILktqpZQjIr+lRkFH1Swl1kZr8GSLYvZ0k1JoFD3 wsHSLhm+U4L0PIX5neztAG5KEoWaGDYFkCZqsu2T+9jQ+BgvmyRW2b+yzXvcS5q927xt3oyX9xJ3 whx01KEOx+kbV6LAOZ8hno3TZJ3bnwwfk1I+l1TVY+jxJxMTIsLEkjDYOcYzYlyP8Rw2v52NP6ZO 9Izdmy8EqDUhIfV+mXTaRJuUsIlaCFtlkEtEhwTXIhBqM/HKnEjriDsYGUWPY2P71QdXPDOq/fJF 426sBVj4w62Nj9zbNYM8uPGqiTet6XoOZHITEKqW5WJJ6LBxsdKftmCsslXZprQpB5VPleOKhJR8 pVlpVR7I7vpMyShqvgIoS+IJp4jc1RiJgsiropQQEP8Av41v4w/yn/HiQf44TxAf5Y/CFs+beJlM 5rv7jWf9xqv0qTzTbHxOs/G5OChPhUilfciPkX/ee0tr2YRY6CmcCwxRll/aknJVVXg46JVN7e3t /N+PHDnl4ZOnPqRzCx5Kj8cDWZud6F1jGC8khEF8hbBBEHyyIEg8T3jBhbDVQji3xjsEi0RbaBGl sMO+FTS6zwdSaU2o6lYLzrfUWcZaOJrqYVTTFmVTP5izYGGepSXCvBONNsoiM7+EybYl4HLviI3o KdVMiml25BidhsBaUF099QtYUmR3+xwVFRt12cz7tcm6PSnraggrNimETI6gr/io8GBzljXN5aLz QDa0p+cX9M+v7t9eMfiOkfzXf/zjf666yzbyVn76qW2H6mdTeQVe4H6kuVxkphESTXQlThGnKZzd +k/hpMgpuZR8c0BPzRWUXIFlALABwcncFSpxilEXi0wd3+MsopGq4+2wdgpsR4ztMNbBHpHnBV6s VkYAKcRe6lT1Cu5y9UPub6L0mIjjYlJKyDXiAKXOOtbawDeIU6UGZQ2/SrhLeUV8i39PPCZ+Lf1b /I/scaqqwHE8oVlgigwbiiwnzNwvjucTZj6YCgzL02A1L9AQqcWCVL4D2w1F4FmMpUCmW7Eo8w90 c8h6K0AgSwKRBPiLCNehsSA5NA+vH5N9RnFkpg0yTkZOpgGYQ4GYc4ICmvUvsRFze9KakZqNjLSc ZCMjqTPjfABQfTU0hs3n0sFoXpgEZJdrObbMRoytoxScr6zjiOK30qQE8D7MWeCGqpTl1ShyXl4t zefanUfTut7ZHWWrXbHsXG+WE9KCWE7YfiRmDu6OseSF3V66+mS3zpLBYMW2NLbaZcnllOBsMpnz Yx7Lbi88ze2uZQs6bLrbTy/+dleoJjuQ02DGQOiQjpkuVoFxHEsgofjJr9ML8YufpB+8Rjhw+nnc ll7RNZvkX5m+iPLldbCoZvL6t30CU1AsAbR6gJkIWlllrvv2M9cFZqKokQBzYxfyhQeETwV+LCyO C1y+0Cy0ChmBB22uEs5U8PROTNF7ANk8gPBBcDRJT23/4xltn9dD25u0NvGYnAVjuaGbTCY3mJPV XWgMf7buosqLBpDM5FHMtuiH9sx17SyN1LShYhIwUxy/SlN9TuQyt07k3oHzvlFvsVYm+GP8MeUv vs+jwrvCySjxydG44g9FFY6LR8Kih0IKCYvxYEBXjybw1sS2BEmAHrMltjqwg2c+m5/5ayxYx3w2 N5sNyt6KQhvqIMxzY2rMwcJ0jly+giOX++XowI2G5k9sDeEQu12o+3YhdrsQzZ9z0NuFmJUMMdc7 RGWJGeeQRm8cysX/QvR+XkQq4gl8FGEaBSD5iMofx+Qv7xfyxzQu8mYt8OkcRj5huJkpNklhM0Wy MNGBV+75uQY2YzRdx3qEbXoE/GCjiw1PtCw1MzfrTCF2+Hrmrts0tyvp1hwh7LR6coY667zQNyuw 4Usfm6PMzDXD0T0N94Pljy1ccUf+1a/f/+Se+PRzm3/dPnX26LUD+eRtY2ZcMvXAzn1dReS+S2cM vO2RrjvI7pUrx919S9cHOcz1BfCLF68xXAInush2vUP/G/el6zh30iXyVOXWAsOs0vGd+lH/Z/6M n4/Kbpvb6wTMhUWvVbXaNFuhn+EsP8NcFoa2LAxtWbrRloUJgaWAnUF7mKEtC0NbsP0fk6AWNRuR O2kwdWhhgM6C4c8yxk+FLkiRl/+4nzT7t/nb/Af9vJ8jFR4vk82T7Q5HNt3zfwRc6s8Al6MH4OKz knjQcP4cwI3xsWnAqTNh3NoTDISdtddMkGYJYWCDu1GYV3QoqqxKKifqSYdoC2G76swSmU4taKFa mFE5G8vtQeKND13+cdOD43S1vXTR+cse55N37BzWXF++pmsZ2XDZ4sG3vtmVnX80NPMVXwR0tKIA XrTPw97c4qKjBswroEK5jJYC7IBTUgPaCPF8eYrYIM8TF8hypT7QOdBb5R+mj3KO8g7zTxemKxP0 Rmejd4J/sbBYma0vdi72zvZfgT2KKFgv4iYJk9SLtEu5OcIc9VJN9YV5yQFKw10YYt5PiDGC1P2y J4kFdLLBwFwAlhWy2V7mKwuyGWGscNBwFSYq+0oYSboUlTip36egJej+kTScAGVbIdJs1PFlM/0Q izeiMKMwCyNk5ZZpIMRS4JEBt6QKgaB+QRpWyL7YzaSd3pJqPNnYIymmO5OMxnzYiNBEYaJyiXCJ wlPrRE9xsZdroOyrNnq6RUMfuf53H2HvVX+/4dN05/7dGzfs3rN+427iwkU3rUj/pevw36/FEWx9 8403//i7N15nNNyYXsDHgIZOFMGXGDdpei/9HH2UztdF26IkP1qixfPKPeV55+U1R7dG5YG+gaEL fBeEGuSLtOm+6aGF8iJtgb7Ytyh0MPq2+2P/x8G3I8fcxyKfRTNRb5xP6SlPFT9QH85foE/TP7f8 PS+tWxw2zhumIXTRG7ZZkC1QeFTFumqoTWqrykcZEaNG9gU1X5jjcqo/u/1TDtR1Z/ya4XSVcluc 5f4ux64KUuFMIPQ/R85zAXO9R8BcPytgfvLnAXM2pAVqkgXM80dU+/FZEfNcwPzn4XIWL3fU9IyW u3KK1etxs6n6RQ6uB/02PjLw1vmbji68/NOrpt3c2/HYipVPPb582a70AuGFzePHb8nc+XD61A2j B3ad4h45fOiNd994/U+UhuenF3CfAQ11FMb9jZssJEVK/YPIKLJKE+s8dYFRga2RbRGh0lUZqosM dQ0NTXRNDM1yzQo1RVoj74jvOr8Qv9a+8eslpEBLeWpIlTaSDNemkQXkA+0j/9+8Xwe+CJ0mdsxb 3cGwRbKJ7jAPhPPZKhCNstqxbjfsTfZWOx9hwYgIo56dBSPs3cEIOwtG2Fkwws6MKQsneGlf281Z IaJ5eh3TH8sdv4yyFjJZZnEIicUhJK8Jfs2oXV7k7AjE/xBh7TpR+0vCoBbsyEbD+2dDDmfFVstK 75j8Qvr7JW9f/buWh7piT69c9tjOFZc/nF5A5EFjcG8sbUtf99hNPw3hdhw+/NtX33nvVTOvZT0Q 5xWgiwO9Zgzq48I6j+N8JT+En8jP5ZfzouKQFVmxuhyKFXEytjChQKpSvFXGckHUhV2kwPG/+/fd iO9Hw9HD3IhMGZ2FK0wXX+wB9cc4Rxz6hYt/TG88sZTO4KOdU5N7dRPSX9toY8nfjUvpDEyTgc24 mgTmYv1D5y6ou+jic887b9DF7giffLDl/IGPF42oa1ra9Y7ZD3WZr7hd0A99OZ9xFV/gLhioXKAM LZxSMKdgtXKTsq7wMddTZS9zVsUX9Pv6jip7zyeEyGRC9HKs+qfL05Xp6nTLdG26daG8UFmoLrQs 1BZa25PtRXaaalVY0r9wmtpgmZ2cXbw8vrywtfBX6r3arcV3lN3W9xH1Ce3hokeK9yR/l/QW5xBp Qa4QzxUKc4Vi00vMnkML8VyhMFfIo3nRzkjNNLkooal8MJr08JbeeUEawisIlLFxhkBdYGxgRmBn 4EhAtAfyA0sCnwb4/MDNARJ4AajjAc5gUW/DTU/Xafq/jo+Cw4d1zOZe7XF7K81ouM1RiXHv6XmX 5pG8sEfizQFpFqD4IheE+MJwURLz4d6W/CAOFgYMl7+ynF7eh8Vt/eaSSkyAvdMyEKVXBqL0qgBz IAMs8h3oIBftlgpL4dK94ZqjpbiUPoVeUZrLNi3NySoUvmHv/ykNskfFikorm8oPlpO68tZyUk4j +IXIb+JexnRRs5dBvdMCrUCUvaWIViJaaGdK2M6qZ49mtcRPRpTpDjZDJBtuLPg0594G+mXD9CDo WXVMX3Cow2rpmOxAeCrV0mMefMocE2OvQmxhA+HUp6FJfnTVPb/TZ6Ioo6hXJC64y5IO3am7dE4s sEZDSCmWQljoBYuIGzZjtngIFcStmlyihnBxkaKKKT6E8vU8irfMWZ1swXLjS1Nr165FPVQSjQM1 dr95rihZ1JtUVfav/kXyIHxpzjSLhNbttl9/1eqVVYlfvXLX2MEDSm+ZuOaFaY42bdmC1Qu93j6h dS/eMWXBK2uOfIDPCS9aOmfoOXF/onzk2jEjVhXnp86/ap5/wvQJ1fFwnkstrBi8evq0By58mspp YeYHUirchXx07qdKpzMmafzjoDEYCq0BjLBmVTGHvLqSsqtgvjmLXS9ABdjqTGg4I8nDlGFNUrPU Km2VeAT4aZvUJh2UjkoiS7/P5uGfYFwk0eRCNnBr+mXZQjYz/yfGHRSZUftPQzxZgGZiS+kAWYj8 uP+uuT9zVtlLartq9WNUy3fSzEOq5R0VFfprZupxwmcOotERAkc1e38ce8sS0YOjay+5tGzduj17 97pSxZEHH9DPnfMQmbUFS5emb9zS9av6siDz80GXfUb/twkeux8F6egTePAk6vLS1O/jRoXTXZly 4ULZ5dWwy2sBde6AbkIV3oTfR92KIPNZfMxb8TlZeL479cTHFLiv20/xubOB+mxU2MccTx/1U6y0 PzI+fNCHfWOCLC5AXZTg8SBpDm4LtgUzQT6oJZRu00Hf8hpVjiqfKbySMx1Kt+nIRqVVFotmSVYs /sx8FIUFhZUxgbNCAzT4+0tnBGwIyxKozb0iBoQoyOs2q91Kc/3o5H9wSHgthKyywwwFlpauBRtM k5vM8c2iJAsH+s5M8+TqVr978cNjdUu7xXHZ+PE3DWq/t/38xWOrlpFbu/bc2G/E+Ik3byI1NGwK 9AnSeD7QR8XfZHMHfIKMVFnEYncqaSGb2dMn1TOjlCWUPlslYFTgqFGphrc6ahRwOCtluiCg6/bA GmfXKg1qKJFYJSqGBUOfSkGiEnlhAVsfGlcX965EUVjYtRJUrCTVGlSlno9GqFPwFNIgT1Xm4rlk gbxAWYmuwFeQVfJK5Qp1I95INnDXS5vkzcp96E7lFvVp9JD6AnpW2qW+hn6nfojeVb9Ff1NPoRNq GTRH9SOvWoySarU6FhmqIhhOb6UAzFKZe58szaMVKaigTGVnL3tETIvSvqD7GKilvcL2EkHQLDRB 6OMU9A38DqcOp1Cf7oTbalWS5YSiuhVFRRwhCTMTU1BVpJpplaKkKhzCQh8NawWyYRhKq0KUDhza awitAhGgZChRYuACyzdvUX7qDAa6Grsag/7OY43mEGpNd4TRUXP2BDSaJ5fNT+oxhYDlvbI0R1cF xs+kL/3NsUS+P/Xt/vRlfLJr3bwlk1aQTYw9snmLzwJ/OPm83DxKJ0WoTAOZaWFi1td4h70ilWdZ 0bTkiGrmgYPtNnOAAMwrLTkMtv1/GrsW6KiKNF1Vt3Nffd/deXfSnVfn0UhiEgwNkdzEhABZSCAR 0wEEBBxFHGAS4IgMNDOggy9Gdg6i7hGXnRkRdw6dDoQmeDYoLmoUYRwGd/EBjngGdw+iLj4QSe9f 1Z2As+w5c7u/+v9b9Vfde/9btx73Vv0lmxxGCrSJMK+DPlSFmYFRTEwcssOUk2+qEoWdSQ3dHTNO HTNOsimVydGx7PpG5lFlw1PoxmWOUplMM+eYT5ic6UuY60yajHSMMCYteiRvXrXhyUm8w7YPeAur HbwiufhsKdNKcSAH75ScmmgZyMW5BY+Y7cyBvmyRUCYGtGo0TpggTtQauWbeFqaLLc7b9GZzmjVH n2XdJywWf2I9wK8VesSD/IDeb33NX5FKnGYJKlGLtRK92Cp3j0c11hrxIXEH95TyAt5Ndjt/r+xH /fyA9objFP+f0nnHef2v1iX+e8njZDNTFOYafGLgHqvWmWslM262rOkOC5miIBYJepFGu3OawKlY KVJj8VN2DS2pVMh/ZazPpmK3i5edpl8OmB2OWfJcc5m5znzElE3ZAbmR3o7EjfnbgcjlgUvlieH9 xjn6S7QA4J9tuzk2QFlIkWRZhL6KbJgmlPEtfSnIgnbLVPtuWdd8R0xB9AmmZQVSBHdKiqDBfS5S NbeqaiJ0ewKy6IbodNRy8llBBAuWQ9RNRVPZ6VlQllOLI/ThsXQ6d0t2f2OomJo2CKucGsMv2LKv VcbL5Q10LCu53ZZaTbzc3GASk+45jRS8gL0z5uDxemE//sb1zd2sWZQ5/dK8eRnQtoE/fczmZdx4 xHLyuTOZ+3cMWBY0o5aC8hQtEW975z7Vp/jIy/Gz0K49i7T4iX2oQvdZkEdHrR+GWiLV7Wzm8ole gdqzA4+89pZIFRu2JMbP9gq+hK+VnGVKpwCd6IfmIKQN5dWJqFBBU4yi8WQgcaTRxEfjpbN4Zvxs n+xz+ND45Gjo5ISik/1WEI0B0E8MrmvjaxPvtunjx2ag0iKFlSiudDZsmivmcMvwoYEX6xxVLx7c Oe7W/r3D+w69WPoeFDHPnjOHyE+v7njrGLn7ymmybv8Px1lZo0Nd9CWUNQb+IFkXperYyTuIxBNe hTyps3a5Xh5g2ZJZD8o+oFtYz89MTHBvywx26dsd28WntWf0wymH+cPCW7qk22nBLM4lpapZxjg8 wbkRP+EUy607HCEh5OzUnsI75B3OAySmvOEc0t42TnN/lv6ovm98Klsjj5dTQZapZ6jQvKCzyGyN cjqPiIpkmfBseinNFFAQJYbr383znCBKEuZ5iQ7ShlYZ1Ooq1nXVcELTgqhOTjFkXie6bBxFRyVi FCHJjZDEEfWoitUihXMrCidLEscRHvoDioLkVgtbU9X1Sr6sL+Sl9bYMtcMBm2/jw8xU2W225uPW k/xW0OVUc91rSevcrMKA+sL41Lh0gc2av5ajaX0xL5lf5/3ceA3R09f1h0WWTxMuEJp5a8XaZLbY p2XkBJ1stmtOUMlPD3IAuh/NCxps+nBqEOfnBSXbM2pcIMReobIvRlDpVKXT6qeGfiviirGONw0/ /fG/jPWMKep7b/hJ/OiHpycMf0ZK8PDl5oqGqivDytV38LTQ8Dy4rrzhmdznkEey8LfJPJIju3XO yXkydYt38i7b0n1OW/El80pmeSDrw6yMY1mZBiWss84qjuw+3YN1ehH3e4Il7tn6XpmzVRtuiK+k otqgjqBIVpqaYRU7i5Vi9RblFnWc9rTpLLFKXFPSQlbIFUq917rXdW/qA/xq9QFzrXtt6mb1EfMx 6zHXFvcOebfzZeOQOeD+L/mv7q/Vq8Zld9yTO5Kj0lxOT7ZDb9Q36ZyeOXr6iZcJ1ui0jxpdVwwo LaH1kOl2uYos2Q07ugLFYZFThs6w7KLDyJ08TQB5DA8p9wx6iCdG6vbroAvbHSMdtrPOsi0y3xq0 iBXDDf06zkdN2TINYtqyfUqF0qpwbUpcIQpI9JXroBtSty/btw6KRlDeVWqzDjIRnf2eYVw6l0lt +l/IyjAuMA5l0O7DSI4Sr//ASbPUwyz/QLmnQXmTAeXNIaTEzyNn/Dy+vrRxxz/qrwnK+TVBDZ6y /alBMzlpMURbzdQkBWQfV3FizEsNm6aRbMZQc/EF+RvcE8fUTkk3/SnO4ftf/TCQ7w18sm94WX1h xbrZ1cM/edEoKcy+T89xlFx9etXGdavJfVfe2NsQaqdlTwmUPSchX2l4r61aMfKmSCxcmZie8Y4t AYMn5bLv3q/a04ApJSVSuRHEQXkqnkwmi1OlVmMu7iAdYpfUZizDi8gican0IO4RH5QexZvFLdJl fIlkZ4p+XCoGpKD4O/E9LNCn5YCRWk2ggJWoae8C6E6TCZJMRFkuwgQqQIKpCUOyMCUAlygvVFFi 5QFWnwc0mcSwvg+qwxT+EJkDpahAX1+xF/f56vMaRpqtLdDC2hdaChv/X0iDtB4kr8d4L8KtaDmK Iw4x40MoUzd68mixQd8HJr9kX6XMuQAbX2Zcpa8Cao1PoaP4KRtsmWxuGtprScMWK+ehpDWS/aXY L9JXMwntiVSXsPfqAapFqsqEGaeVITaPg9ZmH0V1qoQkOX8gOyiJadm30uZZND3IOl9yWpC4AVlp 1wqWqnGYL6CT5bBwS1Veagn5bXfncCu3+Ooryx9Yiv97Gyfy29ZcvfNB6Vm4z/Ef8JBjOWiKQ7m2 jsfRVVXY3EZH39ofr6rCQYoORzceevJJ+s64nfsf0pXyJ+SkvX177s7MvZnkonDRRc4IZ1zkuHDc RQaFQRfZK+x1kZ3CThfZKmx1kfXCehe5Il5xk2XiMjfpErvcRBEVN3G7RAH6p07E6Zc17jLRVIKV WhXVUtvkbXa5a7mwQdgqcAJ2jXfXaqpSC00dOz2rWluFhfFiLcGoluO2EkwyM1a+kHipw0aZGFfP seUYGIfq6OTyCwazS5M010rvGzLepD189LOVK1filckNz8OpBXQYYE06zwt51/HY/YqvbM6YmmoO /2aEc7z2x989VNtWOjl9zh3XOPaNpJn7jMxIeZPp6n17BtPVF+IXboJF7CZnhbMuckI44SKHhcMu EhEiLrJL2OUi24RtLvIL4RcuskJY4SJLxCVu0i62J3WlK04OuV9yUe0oKihNA3Vh8SWBelRgUCFB tRhreq0CGitW0ycpikoVpq4ihKtFoLRiRGeoLWX6oiZ16QeIWqascwbj2WI9dKmeEfpjdY1qauVK 0FxiRI5bSKzlU3Udf8cr3sCcMbeM4/5jhHF8ByqaOLO0OW1++zUuscQtpxxL3RhvmK/Xfi1mi2wF wdcz/m3HCKUjm5jVXGgbjC6JC1SYNDwD3Wag7/cOVxkTRkNGtsk8Sqz9SPagdQxBtAdoPdABRze6 HXAGUAuYDcgCTAcsBLSz8H9FKyhEL1qeMjt+NWU22p7yOrob8BzwuxyfoN18EN0P+7+FNAcdCNVQ GYi7nd+DdoD/P0H4IvB7Dvh/BjoX4lQAlYTHUSZQHmSnAR6CuG1AJwNaIC0X0AbAw/h19Cv8enwX hANFv4R0H6b+gMYknQLXtBnC6yBeIez/EvgsOB4PVAfkAUoc3fEfQK4d0EzXPobfajSEeVyGpxA/ +Q23x7EjZQpfzT8inBQ/lyqkHrnHOU1JU/apneqAlqZ9pN+lnzSmmIvNPS7bneaOpFanLU0/nJGR 8W7mV1lHPRU5vpzvc0969/nuzJudX5K/q2Bs4drC7/yG/1LxqZJY6SboNX4w5qc3TRo7o2LTzdsr X63qr3q3+p7q4eQyx5Mxtbm6CKXA02OgcjQbIYcq05KZMAkreX95pCHU1TWjY/L0QP3P7l24bHoH k4AtXkztL91gm8zsuTqRAu1rumwyteaZitLg2aTrrGazlVbzUAGCzi3yI7p6cikqQwE0Bt2ExsK5 VKCbUSWqQuNAazUoiCagWtSImiDdZjQFTUXTUAv6BzQdzUCtqA3NRLNQO+pAt8M13IE6UQh1oTlo LpqHomgf2o9Qb4den8+lo4uAOIBDXnDLAa2A+YCtgJ0AHulJn+WADYBBwBcsxObSo9uq7BiQRxnp W7qsku0uTOzOncd2++4IJej0mQnaODUhNiEhdnN1wntsQ4IWj0lQq6gyTKmsVh6uT+PS0AkAQSvA xeQ1pEPH1Iue51JRBEA4Puljc1Zfob9y5yDnQJgjHEaLkTd+mMNR1aysl0mcXIR76SWfkwuJEHKh TzMrd9ZPI39BewGDAI78BX4fk4/RBgJdNmSAWwfYCRgEHAdcBPDkLPzOwO8j8hHSyYeoHFAHmA/Y CRgEXAQI5ENwDfIBzUbMpXwdgJAPwDXI+3BZ74Ork9PAnSan4dT+FK0JVh5kTKA8yXiLkkx6dpKx 0ipj5N3o5VJvjHzS5wt4n6+vICdRBAA5E1wD4AO0ARYAVgB44E4BdwqFAb8GPA+IAHiIcwrinII4 Q4C3AadQBcAGtAFEciIKh4mR41F/g7c+jbxDXofM7CXHyBuMvk2OMvoW+XdG3wSaC3SIHI3melG9 E8IRxDGAGkDLITyFvNJXaHnj9SYZBPV4wS0H1AFaAfMBWwE8GST50cVeCxI5hIagtPaSKPqM0d+j XSKyl3pt/22Qx3zU8U+4FThwdvp2+ont3/407FLH/8Q24Kjj3/QYcNTxr90IHHX8y1YDRx3/4qXA UcffNR846vhbO4ADJ0aeO1BY7K1pvQ/76nWyBrS0BrS0BrS0BjnIGvpDlx303J6NlpWBxp6xA6Vl 3vAADr+Mw7NweBcOL8Hh9Ti8EYdrcfhOHA7gsAeHc3HYxuFDeDyoIoztfT/aDdoZODyEw3/A4W4c 9uNwEQ4X4rAP19gxkhedWsVIEyN99fS5AnrrpEodzjEPNJoH2ToPHvtBcI8D4mzPBiFffkI4M5fS /L6yusT+2AmVy+unkCMQ8QjchiPoDMABN+gIZKMjkMgRSEAHtw4wH3AYcBEQJ9To/RmSDye+lbk6 uOWAOsB8wAbARQDPTucigKDlyVPcy06sPHnSrXSPHIEfXQI7j+TZOYbHCBhTuK3Qj8zFrbnxXFKD 0tKguLVM0Yxhtf9b9btvVSTVS+QJshXlwI34dZJujV7O8cbwjqj/kLc+FT+Fch2Q63AQ+XER0PGo m+2PQx6R0mrkIS8BrYx6ZkM0Peof4x3AGo3V773sOef9DHp8wJ73HPK+54s5cNT7Z/B5qd970rPF +2Z5TASfl/0xDGTAx0QPesZ7/zDERDdCwDNR73pK+r0/9zR77/OwgCWJgDu7Yc/WvbP8Xd4pkF6j 5y6v3Q1p9nvrPHd6axNS42icfm8FnEIgwZbByZZ62EELclmCt9fE8D32GGG70Cm0CrcIlcIYIU/w CjlCtuAWLdEQNVERZVEUedEhEhGJbjqRIEDrQDdvsBfSDuo6GG8Q6iaqSAStSwKVUcTFtZCW9gbc Ejm8CLXc5Yt8014Qw/LMrkhKQQOOWC2opaMhMj7QEhPisyI1gZaI0DansxfjJ0LgGyG/imHU0RnD ceq1OZuu3nsQYWxufjyb0pLNj4dCKCNtdV1GnTXJDE5uvIGzIOle99o940d8TmR7S3tnZE9OKFJJ mXhOqCXyj3R534P4K/xFU+NB/CUloc6D3CT8VdMs6s9NagyFWmJ4NpODxuyXIAc55ksmJ+YiH5VD PjE3IfdMQq4I4oNcISUgJ0moiMkVSRKTc2Aq19td2NTYW1jIZNJ9qJvJdKf7rpcZKgKZoiImkxZG Q0xmKC1MZSKTmIjHAyK5HiaCs5CHiXhwFhOZfU2kPCmyZVRkCzsSh6/JeBIy6tkRGfUsyAT+3m1J A3Qw+yaGFs2lSyMvKGhaAlgQeXT1PRmR8F0+X++iUHLNZP+CuxbdQ+nCJZFQwZLGyKKCRl/vxLk3 CJ5LgycWNPaiuU0dnb1z7SWN0Yn2xKaChY2hvua26pofHWvL6LGq226QWBtNrJoeq7nmBsE1NLiZ HquGHquGHqvZbmbHQiyPt3X2iqghBD1oRvuIU4b8uiA7L9SQZqyYxDLvxLyM9dkD0CDZjZyBUEQp aIioABp0U/1N9TQInikapNH1r5NBGesn5mUP4N3JIAO8zYIGFOhZ1b0KZTTd25j4d8MGXj2rqMIT bqD7/9sgrCliL2zs7kGoJVLW3hKpm9nV2SsI4LuAXlJkwoif09kUix9OeI4FzwnUk+NGBalfLfWT pKTg/73/q67ZRj0IDY1DfdjOxT2oO8RFcls6CBQFHcmFhgeguUSrh+4QXGA3DuDukTTYaSc/MiF6 vSPoWZXkknroSdJELIjSPaKO0Y1qCf0vXH7oHQplbmRzdHJlYW0KZW5kb2JqCjI3IDAgb2JqCjIz NDgwCmVuZG9iagoyOCAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0FzY2VudCA5MDUg L0NhcEhlaWdodCA3MjMgL0Rlc2NlbnQgLTIxMiAvRmxhZ3MKMzIgL0ZvbnRCQm94IFsgLTY2NSAt MzI1IDIwMjkgMTAwNiBdIC9Gb250TmFtZSAvWlpOVEZNK0FyaWFsTVQgL0l0YWxpY0FuZ2xlCjAg L1N0ZW1WIDAgL0xlYWRpbmcgMzMgL01heFdpZHRoIDIwMDAgL1hIZWlnaHQgNTI1IC9Gb250Rmls ZTIgMjYgMCBSCj4+CmVuZG9iagoyOSAwIG9iagpbIDI3OCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1 MCA3NTAgMzMzIDMzMyA3NTAgNzUwIDI3OCAzMzMgMjc4IDc1MCA1NTYKNTU2IDU1NiA1NTYgNTU2 IDc1MCA1NTYgNTU2IDU1NiA1NTYgNzUwIDc1MCA1ODQgNzUwIDU4NCA3NTAgMTAxNSA2NjcKNjY3 IDcyMiA3MjIgNjY3IDYxMSA3NzggNzIyIDI3OCA1MDAgNjY3IDU1NiA4MzMgNzIyIDc3OCA2Njcg NzUwIDcyMgo2NjcgNjExIDc1MCA2NjcgOTQ0IDc1MCA2NjcgNzUwIDc1MCA3NTAgNzUwIDc1MCA3 NTAgNzUwIDU1NiA1NTYgNTAwCjU1NiA1NTYgMjc4IDU1NiA1NTYgMjIyIDIyMiA1MDAgMjIyIDgz MyA1NTYgNTU2IDU1NiA1NTYgMzMzIDUwMCAyNzgKNTU2IDUwMCA3MjIgNTAwIDUwMCA1MDAgNzUw IDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MAo3NTAgNzUwIDc1MCA3NTAg NzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwCjc1MCA3 NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1 MCA3NTAKNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUw IDc1MCA3NTAgNzUwIDc1MAo3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAg NzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwCjc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDU1NiA3 NTAgMzMzIDMzMyBdCmVuZG9iagoxMSAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1 ZVR5cGUgL0Jhc2VGb250IC9aWk5URk0rQXJpYWxNVCAvRm9udERlc2NyaXB0b3IKMjggMCBSIC9X aWR0aHMgMjkgMCBSIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDIxMSAvRW5jb2RpbmcgL01hY1Jv bWFuRW5jb2RpbmcKPj4KZW5kb2JqCjMwIDAgb2JqCjw8IC9BdXRob3IgKFJvYmluIE1lcnNoKSAv Q3JlYXRvciAoTWljcm9zb2Z0IFdvcmQpIC9DcmVhdGlvbkRhdGUgKEQ6MjAwOTExMDUxMjQwNDAt MDUnMDAnKQovTW9kRGF0ZSAoRDoyMDA5MTEwNTEyNDA0MC0wNScwMCcpIC9Qcm9kdWNlciAoTWFj IE9TIFggMTAuNC4xMSBRdWFydHogUERGQ29udGV4dCkKL1RpdGxlIChNaWNyb3NvZnQgV29yZCAt IERvY3VtZW50MikgPj4KZW5kb2JqCnhyZWYKMCAzMQowMDAwMDAwMDAwIDAwMDAwIG4gCjAwMDAw MTIwMDYgMDAwMDAgbiAKMDAwMDAwMDAyMiAwMDAwMCBuIAowMDAwMDEyMTExIDAwMDAwIG4gCjAw MDAwMTE5ODUgMDAwMDAgbiAKMDAwMDA1MjAyMCAwMDAwMCBuIAowMDAwMDAwMDAwIDAwMDAwIG4g CjAwMDAwNjAyNTcgMDAwMDAgbiAKMDAwMDAxMjI4NSAwMDAwMCBuIAowMDAwMDUxMTcwIDAwMDAw IG4gCjAwMDAwNzE1NDQgMDAwMDAgbiAKMDAwMDA5NjI5MyAwMDAwMCBuIAowMDAwMDUyMDU2IDAw MDAwIG4gCjAwMDAwNTExOTEgMDAwMDAgbiAKMDAwMDA1MjAwMCAwMDAwMCBuIAowMDAwMDUyMTQw IDAwMDAwIG4gCjAwMDAwNTIxOTEgMDAwMDAgbiAKMDAwMDA1ODU5MiAwMDAwMCBuIAowMDAwMDU4 NjEzIDAwMDAwIG4gCjAwMDAwNTg4MzYgMDAwMDAgbiAKMDAwMDA1ODg2OCAwMDAwMCBuIAowMDAw MDYwMjM2IDAwMDAwIG4gCjAwMDAwNjA0MTggMDAwMDAgbiAKMDAwMDA3MDkxNiAwMDAwMCBuIAow MDAwMDcwOTM4IDAwMDAwIG4gCjAwMDAwNzExODAgMDAwMDAgbiAKMDAwMDA3MTcyMiAwMDAwMCBu IAowMDAwMDk1MjkzIDAwMDAwIG4gCjAwMDAwOTUzMTUgMDAwMDAgbiAKMDAwMDA5NTU1MiAwMDAw MCBuIAowMDAwMDk2NDY2IDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgMzEgL1Jvb3QgMTUgMCBS IC9JbmZvIDMwIDAgUiAvSUQgWyA8ZDFhYWEyNjEyY2E4Yzc3YzQ5NTc1MjJjMmYyMGE2NTE+Cjxk MWFhYTI2MTJjYThjNzdjNDk1NzUyMmMyZjIwYTY1MT4gXSA+PgpzdGFydHhyZWYKOTY2OTQKJSVF T0YK --Apple-Mail-284--20577921 Content-Type: text/html; charset=US-ASCII Content-Transfer-Encoding: 7bit

--Apple-Mail-284--20577921-- --Apple-Mail-283--20577923-- From shemant@cisco.com Thu Nov 5 14:37:08 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4A88E3A68CC; Thu, 5 Nov 2009 14:37:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.097 X-Spam-Level: X-Spam-Status: No, score=-5.097 tagged_above=-999 required=5 tests=[AWL=1.202, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cmyWp2Zxj4xX; Thu, 5 Nov 2009 14:37:07 -0800 (PST) Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72]) by core3.amsl.com (Postfix) with ESMTP id 15FF23A6836; Thu, 5 Nov 2009 14:37:07 -0800 (PST) Authentication-Results: sj-iport-3.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AtwEAFvi8kqrR7Hu/2dsb2JhbACCJS2CIZU9rnyHEoIVCY4/AoJSgRZTBIFm X-IronPort-AV: E=Sophos;i="4.44,688,1249257600"; d="scan'208,217";a="201499300" Received: from sj-core-5.cisco.com ([171.71.177.238]) by sj-iport-3.cisco.com with ESMTP; 05 Nov 2009 22:37:30 +0000 Received: from xbh-rcd-202.cisco.com (xbh-rcd-202.cisco.com [72.163.62.201]) by sj-core-5.cisco.com (8.13.8/8.14.3) with ESMTP id nA5MbTSl025601; Thu, 5 Nov 2009 22:37:29 GMT Received: from xmb-rcd-114.cisco.com ([72.163.62.156]) by xbh-rcd-202.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 5 Nov 2009 16:37:29 -0600 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CA5E68.8E865061" Date: Thu, 5 Nov 2009 16:37:28 -0600 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcpeZtIVuNWrTGm6Rq6EZWyTq8GaggAAFI4g References: From: "Hemant Singh (shemant)" To: "Fred Baker (fred)" , "Erik Nordmark" , "Hesham Soliman" , =?UTF-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= , "Thomas Narten" , "Susan Thomson (sethomso)" , X-OriginalArrivalTime: 05 Nov 2009 22:37:29.0279 (UTC) FILETIME=[8E6FECF0:01CA5E68] X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: 6man-ads@tools.ietf.org, IETF IPv6 Mailing List , savi-ads@tools.ietf.org, Robin Mersh , v6ops-ads@tools.ietf.org, IPv6 Operations , SAVI Mailing List Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2009 22:37:08 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01CA5E68.8E865061 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 WWVzLCBpbiBhIGNhYmxlIGRlcGxveW1lbnQgZXZlbiBpZiB0d28gY2FibGUgbW9kZW1zIChDTSkg aW4gdHdvIGRpZmZlcmVudCBob21lcyBvbiB0aGUgc2FtZSB1cHN0cmVhbSBwaHlzaWNhbCBsYXll ciB0byB0aGUgQ2FibGUgZWRnZSByb3V0ZXIgKENNVFMpIGNhbm5vdCB0YWxrIGRpcmVjdGx5IHRv IGVhY2ggb3RoZXIg4oCTIHRoZXkgaGF2ZSB0byBzZW5kIHRoZWlyIGRhdGEgdG8gdGhlIENNVFMg d2hvIHRoZW4gZm9yd2FyZHMgdGhlIGRhdGEgdG8gdGhlIG90aGVyIG1vZGVtLiAgIFN0aWxsIEkg YW0gbm90IGNvbnZpbmNlZCBvZiBhbnkgaW1wbGljYXRpb25zIGZvciBEQUQgaW4gU0xBQUM/ICBX aXRob3V0IGFueSBsb3NzIG9mIGdlbmVyYWxpdHksIEkgd2lsbCBvbmx5IHJlZmVyIHRvIGEgQ01U UyBmb3IgdGhlIHJlc3Qgb2YgdGhlIGRpc2N1c3Npb24gYnV0IHRoZSBzYW1lIGlzIGFwcGxpY2Fi bGUgdG8gYSBEU0xBTSAob3Igd2hhdGV2ZXIgTDMgcm91dGVyIHNpdHMgdXBzdHJlYW0gb2YgdGhl IERMQU0gYXMgdGhlIGZpcnN0LWhvcCBJUHY2IHJvdXRlcikuICBTaW5jZSB0aGUgQ01UUyBzZWVz IGFsbCBEQUQgbWVzc2FnZXMgZnJvbSBjbGllbnQgaW4gdGhlIGRvd25zdHJlYW0sIGlmIHRoZSBD TVRTIGRldGVjdHMgYSBkdXAsIHRoZSBDTVRTIHNlbmRzIGEgTkEgdG8gdGhlIGNsaWVudCAgLSBw cm9ibGVtIHNvbHZlZC4gICBPZiBjb3Vyc2UsIG5vdyB0aGUgQ01UUyBpcyBkb2luZyBORCBQcm94 eSB3aGljaCBpcyBhbHJlYWR5IHNwZWNpZmllZCBpbiBjYWJsZSBzdGFuZGFyZHMgYW5kIGltcGxl bWVudGVkIG9uIERvY3NpcyAzLjAgSVB2NiBDTVRTIHJvdXRlcnMuICBXaGF0IGRpZCBJIG1pc3M/ IA0KDQogDQoNCklmIHRoZSBCQkYgaGFzIGFueSBuZXcgbXVsdGljYXN0IGFyY2hpdGVjdHVyZSBm b3IgTkQgdGhhdCBJIGhhdmUgbm90IGFjY291bnRlZCBmb3IsIHBsZWFzZSBzZW5kIG1lIHlvdXIg YXJjaCBkb2MgYW5kIEkgY2FuIGxvb2sgYXQgaXQgYW5kIHJlcGx5IHRvIHRoYXQgYXMgd2VsbC4N Cg0KIA0KDQpIZW1hbnQNCg0KIA0KDQpGcm9tOiBvd25lci12Nm9wc0BvcHMuaWV0Zi5vcmcgW21h aWx0bzpvd25lci12Nm9wc0BvcHMuaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBGcmVkIEJha2VyIChm cmVkKQ0KU2VudDogVGh1cnNkYXksIE5vdmVtYmVyIDA1LCAyMDA5IDU6MTggUE0NClRvOiBFcmlr IE5vcmRtYXJrOyBIZXNoYW0gU29saW1hbjsgSklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiTsg VGhvbWFzIE5hcnRlbjsgU3VzYW4gVGhvbXNvbiAoc2V0aG9tc28pOyB3aWxsaWFtLmFsbGVuLnNp bXBzb25AZ21haWwuY29tDQpDYzogU0FWSSBNYWlsaW5nIExpc3Q7IElFVEYgSVB2NiBNYWlsaW5n IExpc3Q7IElQdjYgT3BlcmF0aW9uczsgc2F2aS1hZHNAdG9vbHMuaWV0Zi5vcmc7IHY2b3BzLWFk c0B0b29scy5pZXRmLm9yZzsgNm1hbi1hZHNAdG9vbHMuaWV0Zi5vcmc7IFJvYmluIE1lcnNoDQpT dWJqZWN0OiBGd2Q6IEJyb2FkYmFuZCBGb3J1bSBsaWFpc29uIHRvIElFVEYgb24gSVB2NiBzZWN1 cml0eQ0KDQogDQoNCkdlbnRsZW1lbjoNCg0KIA0KDQpJJ20gd3JpdGluZyB0byB5b3UgYXMgdGhl IGF1dGhvcnMgb2YgUkZDcyA0ODYxIGFuZCA0ODYyLiBJbiBhIHBhc3QgbWVldGluZywgSSB0aGlu ayB0aGUgb25lIGluIE1hcmNoLCBhbiBpc3N1ZSBjYW1lIHVwIGluIFNhdmkgdGhhdCBoYXMgbm93 IGJlZW4gYnJvdWdodCB0byBvdXIgYXR0ZW50aW9uIGluIGEgZm9ybWFsIG1hbm5lci4gVGhlIHBy b2JsZW0gaXMgdGhhdCBpbiBjZXJ0YWluIGFjY2VzcyBuZXR3b3JrIHRlY2hub2xvZ2llcywgbm90 YWJseSBEU0wgYW5kIEkgYmVsaWV2ZSBDYWJsZSBNb2RlbSwgdGhlIGNvbm5lY3Rpdml0eSBiZXR3 ZWVuIHRoZSBDUEUgaG9zdCBvciByb3V0ZXIgYW5kIHRoZSBJU1AncyBmaXJzdCBob3Agcm91dGVy IGlzIHNpbG9lZCAtIGl0IGxvb2tzIGxpa2UgYW4gRXRoZXJuZXQgdG8gdGhlIGhvc3QgYnV0IGlu IGZhY3QgaXMgc2VwYXJhdGVkIGludG8gc2VwYXJhdGUgY2hhbm5lbHMuIFRoZSBlZmZlY3QgaXMg dGhhdCB3aGlsZSB0aGUgSVNQIHJvdXRlciBjYW4gc3BlYWsgdG8gYW5kIGhlYXIgYWxsIG9mIHRo ZSBDUEVzIGl0IGlzIGNvbm5lY3RlZCB0bywgdGhlIENQRXMgY2Fubm90IGhlYXIgZWFjaCBvdGhl ci4gVGhpcyBoYXMgaW1wbGljYXRpb25zIGZvciBEdXBsaWNhdGUgQWRkcmVzcyBEZXRlY3Rpb24g aW4gU0xBQUMuDQoNCiANCg0KV2UgbG9vayBmb3J3YXJkIHRvIHlvdXIgYWR2aWNlLg0KDQogDQoN CkZyZWQgQmFrZXINCg0KSVB2NiBPcGVyYXRpb25zDQoNCiANCg0KQmVnaW4gZm9yd2FyZGVkIG1l c3NhZ2U6DQoNCg0KDQoNCg0KRnJvbTogUm9iaW4gTWVyc2ggPHJtZXJzaEBicm9hZGJhbmQtZm9y dW0ub3JnPg0KDQpEYXRlOiBOb3ZlbWJlciA2LCAyMDA5IDE6NDI6MDUgQU0gR01UKzA4OjAwDQoN ClRvOiBmZW5uZXJAZmVucm9uLmNvbSwgY2hyaXN0aWFuLnZvZ3RAZXJpY3Nzb24uY29tLCBmcmVk LmJha2VyQGNpc2NvLmNvbSwga3VydGlzQGt1cnRpcy5wcC5zZSwgZHJvbWFzY2FAYXZheWEuY29t LCByYm9uaWNhQGp1bmlwZXIubmV0LCByZHJvbXNAY2lzY28uY29tLCBqYXJpLmFya2tvQHBpdWhh Lm5ldCwgTWFyayBUb3duc2xleSA8dG93bnNsZXlAY2lzY28uY29tPg0KDQpTdWJqZWN0OiBCcm9h ZGJhbmQgRm9ydW0gbGlhaXNvbiB0byBJRVRGIG9uIElQdjYgc2VjdXJpdHkNCg0KIA0KDQpEZWFy IGNvbGxlYWd1ZXMsDQoNCiANCg0KRm9yIHlvdXIgcmV2aWV3LCBwbGVhc2Ugc2VlIHRoZSBsaWFp c29uIGZyb20gdGhlIEJyb2FkYmFuZCBGb3J1bSBhdHRhY2hlZCBiZWxvdy4NCg0KIA0KDQpCZXN0 IHJlZ2FyZHMsDQoNClJvYmluIE1lcnNoDQoNCkNPTw0KDQpUaGUgQnJvYWRiYW5kIEZvcnVtDQoN CnBob25lOiArMSAzMzYgMjg4IDgwMTMNCg0KY2VsbDogKzEgMzAzIDU5NiA3NDQ4DQoNCmVtYWls OiBybWVyc2hAYnJvYWRiYW5kLWZvcnVtLm9yZw0KDQogDQoNCg0KDQoNCg0K ------_=_NextPart_001_01CA5E68.8E865061 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQoNCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj1Db250ZW50LVR5cGUg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9R2VuZXJhdG9y IGNvbnRlbnQ9Ik1pY3Jvc29mdCBXb3JkIDEyIChmaWx0ZXJlZCBtZWRpdW0pIj4NCjxzdHlsZT4N CjwhLS0NCiAvKiBGb250IERlZmluaXRpb25zICovDQogQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRhaG9tYTsN CglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJNUyBVSSBHb3RoaWMiOw0KCXBhbm9zZS0xOjIgMTEgNiAwIDcgMiA1IDggMiA0O30NCkBm b250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxATVMgVUkgR290aGljIjsNCglwYW5vc2UtMToyIDEx IDYgMCA3IDIgNSA4IDIgNDt9DQogLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCiBwLk1zb05vcm1h bCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5l dyBSb21hbiIsInNlcmlmIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7 fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlv cml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpz cGFuLmFwcGxlLXN0eWxlLXNwYW4NCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtc3R5bGUtc3Bhbjt9 DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEw LjBwdDt9DQpAcGFnZSBTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4w aW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LlNlY3Rpb24xDQoJe3BhZ2U6U2VjdGlvbjE7fQ0K LS0+DQo8L3N0eWxlPg0KPCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQogPG86c2hhcGVkZWZhdWx0 cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1b aWYgZ3RlIG1zbyA5XT48eG1sPg0KIDxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCiAgPG86 aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQogPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwh W2VuZGlmXS0tPg0KPC9oZWFkPg0KDQo8Ym9keSBsYW5nPUVOLVVTIGxpbms9Ymx1ZSB2bGluaz1w dXJwbGUgc3R5bGU9J3dvcmQtd3JhcDogYnJlYWstd29yZDsNCi13ZWJraXQtbmJzcC1tb2RlOiBz cGFjZTstd2Via2l0LWxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlJz4NCg0KPGRpdiBjbGFz cz1TZWN0aW9uMT4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQpjb2xvcjojMUY0OTdE Jz5ZZXMsIGluIGEgY2FibGUgZGVwbG95bWVudCBldmVuIGlmIHR3byBjYWJsZSBtb2RlbXMgKENN KSBpbiB0d28NCmRpZmZlcmVudCBob21lcyBvbiB0aGUgc2FtZSB1cHN0cmVhbSBwaHlzaWNhbCBs YXllciB0byB0aGUgQ2FibGUgZWRnZSByb3V0ZXIgKENNVFMpDQpjYW5ub3QgdGFsayBkaXJlY3Rs eSB0byBlYWNoIG90aGVyIOKAkyB0aGV5IGhhdmUgdG8gc2VuZCB0aGVpciBkYXRhIHRvIHRoZSBD TVRTDQp3aG8gdGhlbiBmb3J3YXJkcyB0aGUgZGF0YSB0byB0aGUgb3RoZXIgbW9kZW0uwqAgwqBT dGlsbCBJIGFtIG5vdCBjb252aW5jZWQgb2YNCmFueSBpbXBsaWNhdGlvbnMgZm9yIERBRCBpbiBT TEFBQz/CoCBXaXRob3V0IGFueSBsb3NzIG9mIGdlbmVyYWxpdHksIEkgd2lsbCBvbmx5DQpyZWZl ciB0byBhIENNVFMgZm9yIHRoZSByZXN0IG9mIHRoZSBkaXNjdXNzaW9uIGJ1dCB0aGUgc2FtZSBp cyBhcHBsaWNhYmxlIHRvIGENCkRTTEFNIChvciB3aGF0ZXZlciBMMyByb3V0ZXIgc2l0cyB1cHN0 cmVhbSBvZiB0aGUgRExBTSBhcyB0aGUgZmlyc3QtaG9wIElQdjYNCnJvdXRlcikuwqAgU2luY2Ug dGhlIENNVFMgc2VlcyBhbGwgREFEIG1lc3NhZ2VzIGZyb20gY2xpZW50IGluIHRoZSBkb3duc3Ry ZWFtLA0KaWYgdGhlIENNVFMgZGV0ZWN0cyBhIGR1cCwgdGhlIENNVFMgc2VuZHMgYSBOQSB0byB0 aGUgY2xpZW50wqAgLSBwcm9ibGVtDQpzb2x2ZWQuwqDCoCBPZiBjb3Vyc2UsIG5vdyB0aGUgQ01U UyBpcyBkb2luZyBORCBQcm94eSB3aGljaCBpcyBhbHJlYWR5IHNwZWNpZmllZA0KaW4gY2FibGUg c3RhbmRhcmRzIGFuZCBpbXBsZW1lbnRlZCBvbiBEb2NzaXMgMy4wIElQdjYgQ01UUyByb3V0ZXJz LsKgIFdoYXQgZGlkIEkNCm1pc3M/IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCg0KPHAgY2xhc3M9 TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7DQpjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KY29sb3I6IzFGNDk3RCc+SWYg dGhlIEJCRiBoYXMgYW55IG5ldyBtdWx0aWNhc3QgYXJjaGl0ZWN0dXJlIGZvciBORCB0aGF0IEkg aGF2ZQ0Kbm90IGFjY291bnRlZCBmb3IsIHBsZWFzZSBzZW5kIG1lIHlvdXIgYXJjaCBkb2MgYW5k IEkgY2FuIGxvb2sgYXQgaXQgYW5kIHJlcGx5DQp0byB0aGF0IGFzIHdlbGwuPG86cD48L286cD48 L3NwYW4+PC9wPg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCmNvbG9yOiMxRjQ5N0Qn PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJp ZiI7DQpjb2xvcjojMUY0OTdEJz5IZW1hbnQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQoNCjxwIGNs YXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToi Q2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KY29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KDQo8ZGl2Pg0KDQo8ZGl2IHN0eWxlPSdib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbic+DQoNCjxwIGNs YXNzPU1zb05vcm1hbD48Yj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eToiVGFob21hIiwic2Fucy1zZXJpZiInPkZyb206PC9zcGFuPjwvYj48c3Bhbg0Kc3R5bGU9J2Zv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz4NCm93bmVy LXY2b3BzQG9wcy5pZXRmLm9yZyBbbWFpbHRvOm93bmVyLXY2b3BzQG9wcy5pZXRmLm9yZ10gPGI+ T24gQmVoYWxmIE9mIDwvYj5GcmVkDQpCYWtlciAoZnJlZCk8YnI+DQo8Yj5TZW50OjwvYj4gVGh1 cnNkYXksIE5vdmVtYmVyIDA1LCAyMDA5IDU6MTggUE08YnI+DQo8Yj5Ubzo8L2I+IEVyaWsgTm9y ZG1hcms7IEhlc2hhbSBTb2xpbWFuOyBKSU5NRUkgVGF0dXlhIC8gPC9zcGFuPjxzcGFuDQpzdHls ZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiTVMgVUkgR290aGljIiwic2Fucy1zZXJp ZiInPuelnuaYjumBlOWTiTwvc3Bhbj48c3Bhbg0Kc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz47IFRob21hcyBOYXJ0ZW47DQpTdXNhbiBU aG9tc29uIChzZXRob21zbyk7IHdpbGxpYW0uYWxsZW4uc2ltcHNvbkBnbWFpbC5jb208YnI+DQo8 Yj5DYzo8L2I+IFNBVkkgTWFpbGluZyBMaXN0OyBJRVRGIElQdjYgTWFpbGluZyBMaXN0OyBJUHY2 IE9wZXJhdGlvbnM7DQpzYXZpLWFkc0B0b29scy5pZXRmLm9yZzsgdjZvcHMtYWRzQHRvb2xzLmll dGYub3JnOyA2bWFuLWFkc0B0b29scy5pZXRmLm9yZzsNClJvYmluIE1lcnNoPGJyPg0KPGI+U3Vi amVjdDo8L2I+IEZ3ZDogQnJvYWRiYW5kIEZvcnVtIGxpYWlzb24gdG8gSUVURiBvbiBJUHY2IHNl Y3VyaXR5PG86cD48L286cD48L3NwYW4+PC9wPg0KDQo8L2Rpdj4NCg0KPC9kaXY+DQoNCjxwIGNs YXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFs PkdlbnRsZW1lbjo8bzpwPjwvbzpwPjwvcD4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFs PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNv Tm9ybWFsPkknbSB3cml0aW5nIHRvIHlvdSBhcyB0aGUgYXV0aG9ycyBvZiBSRkNzIDQ4NjEgYW5k IDQ4NjIuIEluDQphIHBhc3QgbWVldGluZywgSSB0aGluayB0aGUgb25lIGluIE1hcmNoLCBhbiBp c3N1ZSBjYW1lIHVwIGluIFNhdmkgdGhhdCBoYXMgbm93DQpiZWVuIGJyb3VnaHQgdG8gb3VyIGF0 dGVudGlvbiBpbiBhIGZvcm1hbCBtYW5uZXIuIFRoZSBwcm9ibGVtIGlzIHRoYXQgaW4NCmNlcnRh aW4gYWNjZXNzIG5ldHdvcmsgdGVjaG5vbG9naWVzLCBub3RhYmx5IERTTCBhbmQgSSBiZWxpZXZl IENhYmxlIE1vZGVtLCB0aGUNCmNvbm5lY3Rpdml0eSBiZXR3ZWVuIHRoZSBDUEUgaG9zdCBvciBy b3V0ZXIgYW5kIHRoZSBJU1AncyBmaXJzdCBob3Agcm91dGVyIGlzDQpzaWxvZWQgLSBpdCBsb29r cyBsaWtlIGFuIEV0aGVybmV0IHRvIHRoZSBob3N0IGJ1dCBpbiBmYWN0IGlzIHNlcGFyYXRlZCBp bnRvDQpzZXBhcmF0ZSBjaGFubmVscy4gVGhlIGVmZmVjdCBpcyB0aGF0IHdoaWxlIHRoZSBJU1Ag cm91dGVyIGNhbiBzcGVhayB0byBhbmQNCmhlYXIgYWxsIG9mIHRoZSBDUEVzIGl0IGlzIGNvbm5l Y3RlZCB0bywgdGhlIENQRXMgY2Fubm90IGhlYXIgZWFjaCBvdGhlci4gVGhpcw0KaGFzIGltcGxp Y2F0aW9ucyBmb3IgRHVwbGljYXRlIEFkZHJlc3MgRGV0ZWN0aW9uIGluIFNMQUFDLjxvOnA+PC9v OnA+PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPldl IGxvb2sgZm9yd2FyZCB0byB5b3VyIGFkdmljZS48bzpwPjwvbzpwPjwvcD4NCg0KPC9kaXY+DQoN CjxkaXY+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCg0KPC9k aXY+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD5GcmVkIEJha2VyPG86cD48L286cD48 L3A+DQoNCjwvZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+SVB2NiBPcGVyYXRp b25zPG86cD48L286cD48L3A+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPkJlZ2luIGZvcndh cmRlZCBtZXNzYWdlOjxvOnA+PC9vOnA+PC9wPg0KDQo8L2Rpdj4NCg0KPHAgY2xhc3M9TXNvTm9y bWFsPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KDQo8ZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBj bGFzcz1Nc29Ob3JtYWw+PGI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eToiSGVsdmV0aWNhIiwic2Fucy1zZXJpZiI7DQpjb2xvcjpibGFjayc+RnJvbTogPC9zcGFuPjwv Yj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiJIZWx2ZXRpY2EiLCJz YW5zLXNlcmlmIic+Um9iaW4NCk1lcnNoICZsdDs8YSBocmVmPSJtYWlsdG86cm1lcnNoQGJyb2Fk YmFuZC1mb3J1bS5vcmciPnJtZXJzaEBicm9hZGJhbmQtZm9ydW0ub3JnPC9hPiZndDs8L3NwYW4+ PG86cD48L286cD48L3A+DQoNCjwvZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+ PGI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseToiSGVsdmV0aWNhIiwi c2Fucy1zZXJpZiI7DQpjb2xvcjpibGFjayc+RGF0ZTogPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiJIZWx2ZXRpY2EiLCJzYW5zLXNlcmlmIic+Tm92 ZW1iZXINCjYsIDIwMDkgMTo0MjowNSBBTSBHTVQrMDg6MDA8L3NwYW4+PG86cD48L286cD48L3A+ DQoNCjwvZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGI+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseToiSGVsdmV0aWNhIiwic2Fucy1zZXJpZiI7DQpj b2xvcjpibGFjayc+VG86IDwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseToiSGVsdmV0aWNhIiwic2Fucy1zZXJpZiInPjxhDQpocmVmPSJtYWlsdG86ZmVu bmVyQGZlbnJvbi5jb20iPmZlbm5lckBmZW5yb24uY29tPC9hPiwgPGENCmhyZWY9Im1haWx0bzpj aHJpc3RpYW4udm9ndEBlcmljc3Nvbi5jb20iPmNocmlzdGlhbi52b2d0QGVyaWNzc29uLmNvbTwv YT4sIDxhDQpocmVmPSJtYWlsdG86ZnJlZC5iYWtlckBjaXNjby5jb20iPmZyZWQuYmFrZXJAY2lz Y28uY29tPC9hPiwgPGENCmhyZWY9Im1haWx0bzprdXJ0aXNAa3VydGlzLnBwLnNlIj5rdXJ0aXNA a3VydGlzLnBwLnNlPC9hPiwgPGENCmhyZWY9Im1haWx0bzpkcm9tYXNjYUBhdmF5YS5jb20iPmRy b21hc2NhQGF2YXlhLmNvbTwvYT4sIDxhDQpocmVmPSJtYWlsdG86cmJvbmljYUBqdW5pcGVyLm5l dCI+cmJvbmljYUBqdW5pcGVyLm5ldDwvYT4sIDxhDQpocmVmPSJtYWlsdG86cmRyb21zQGNpc2Nv LmNvbSI+cmRyb21zQGNpc2NvLmNvbTwvYT4sIDxhDQpocmVmPSJtYWlsdG86amFyaS5hcmtrb0Bw aXVoYS5uZXQiPmphcmkuYXJra29AcGl1aGEubmV0PC9hPiwgTWFyayBUb3duc2xleSAmbHQ7PGEN CmhyZWY9Im1haWx0bzp0b3duc2xleUBjaXNjby5jb20iPnRvd25zbGV5QGNpc2NvLmNvbTwvYT4m Z3Q7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9 TXNvTm9ybWFsPjxiPjxzcGFuIHN0eWxlPSdmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6Ikhl bHZldGljYSIsInNhbnMtc2VyaWYiOw0KY29sb3I6YmxhY2snPlN1YmplY3Q6IDwvc3Bhbj48L2I+ PGI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseToNCiJIZWx2ZXRpY2Ei LCJzYW5zLXNlcmlmIic+QnJvYWRiYW5kIEZvcnVtIGxpYWlzb24gdG8gSUVURiBvbiBJUHY2IHNl Y3VyaXR5PC9zcGFuPjwvYj48bzpwPjwvbzpwPjwvcD4NCg0KPC9kaXY+DQoNCjxkaXY+DQoNCjxw IGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCg0KPC9kaXY+DQoNCjwvZGl2 Pg0KDQo8ZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+RGVhciBjb2xsZWFndWVz LDxvOnA+PC9vOnA+PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFs PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNv Tm9ybWFsPkZvciB5b3VyIHJldmlldywgcGxlYXNlIHNlZSB0aGUgbGlhaXNvbiBmcm9tIHRoZSBC cm9hZGJhbmQNCkZvcnVtIGF0dGFjaGVkIGJlbG93LjxvOnA+PC9vOnA+PC9wPg0KDQo8L2Rpdj4N Cg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KDQo8 L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPkJlc3QgcmVnYXJkcyw8bzpwPjwv bzpwPjwvcD4NCg0KPC9kaXY+DQoNCjxkaXY+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1zb05vcm1h bD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiJIZWx2ZXRpY2EiLCJz YW5zLXNlcmlmIjsNCmNvbG9yOmJsYWNrJz5Sb2JpbiBNZXJzaDxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCg0KPC9kaXY+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiJIZWx2ZXRpY2EiLCJzYW5zLXNlcmlmIjsNCmNv bG9yOmJsYWNrJz5DT088bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQoNCjwvZGl2Pg0KDQo8ZGl2Pg0K DQo8cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseToiSGVsdmV0aWNhIiwic2Fucy1zZXJpZiI7DQpjb2xvcjpibGFjayc+VGhlIEJyb2FkYmFu ZCBGb3J1bTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCg0KPC9kaXY+DQoNCjxkaXY+DQoNCjxwIGNs YXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiJI ZWx2ZXRpY2EiLCJzYW5zLXNlcmlmIjsNCmNvbG9yOmJsYWNrJz5waG9uZTogKzEgMzM2IDI4OCA4 MDEzPG86cD48L286cD48L3NwYW4+PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9 TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6IkhlbHZl dGljYSIsInNhbnMtc2VyaWYiOw0KY29sb3I6YmxhY2snPmNlbGw6ICsxIDMwMyA1OTYgNzQ0ODxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCg0KPC9kaXY+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1zb05v cm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiJIZWx2ZXRpY2Ei LCJzYW5zLXNlcmlmIjsNCmNvbG9yOmJsYWNrJz5lbWFpbDombmJzcDs8YSBocmVmPSJtYWlsdG86 cm1lcnNoQGJyb2FkYmFuZC1mb3J1bS5vcmciPnJtZXJzaEBicm9hZGJhbmQtZm9ydW0ub3JnPC9h PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCg0KPC9kaXY+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiJIZWx2ZXRp Y2EiLCJzYW5zLXNlcmlmIjsNCmNvbG9yOmJsYWNrJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQoNCjwvZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZTo5LjBwdDtmb250LWZhbWlseToiSGVsdmV0aWNhIiwic2Fucy1zZXJpZiI7DQpjb2xvcjpibGFj ayc+PGJyPg0KPGJyPg0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KDQo8L2Rpdj4NCg0KPC9kaXY+ DQoNCjwvZGl2Pg0KDQo8L2Rpdj4NCg0KPC9kaXY+DQoNCjwvYm9keT4NCg0KPC9odG1sPg0K ------_=_NextPart_001_01CA5E68.8E865061-- From jdunn@mitre.org Thu Nov 5 15:34:14 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A003528C128; Thu, 5 Nov 2009 15:34:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.449 X-Spam-Level: X-Spam-Status: No, score=-6.449 tagged_above=-999 required=5 tests=[AWL=-0.151, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EecFkG9eN2SJ; Thu, 5 Nov 2009 15:34:13 -0800 (PST) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id D221828C13A; Thu, 5 Nov 2009 15:34:12 -0800 (PST) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA5NYXAB031360; Thu, 5 Nov 2009 18:34:34 -0500 Received: from imchub1.MITRE.ORG (imchub1.mitre.org [129.83.29.73]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA5NYXn0031357; Thu, 5 Nov 2009 18:34:33 -0500 Received: from IMCMBX1.MITRE.ORG ([129.83.29.204]) by imchub1.MITRE.ORG ([129.83.29.73]) with mapi; Thu, 5 Nov 2009 18:34:32 -0500 From: "Dunn, Jeffrey H." To: "Hemant Singh (shemant)" , "Fred Baker (fred)" , Erik Nordmark , Hesham Soliman , =?utf-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= , Thomas Narten , "Susan Thomson (sethomso)" , "william.allen.simpson@gmail.com" Date: Thu, 5 Nov 2009 18:34:34 -0500 Thread-Topic: Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcpeZtIVuNWrTGm6Rq6EZWyTq8GaggAAFI4gAAI8l1A= Message-ID: <3C6F21684E7C954193E6C7C4573B762703676D7FCE@IMCMBX1.MITRE.ORG> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/alternative; boundary="_000_3C6F21684E7C954193E6C7C4573B762703676D7FCEIMCMBX1MITREO_" MIME-Version: 1.0 X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, List , IETF, "savi-ads@tools.ietf.org" , IPv6 Operations , "v6ops-ads@tools.ietf.org" , SAVI, Robin Mersh , Mailing List , "Dunn, Jeffrey H." Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 05 Nov 2009 23:34:14 -0000 --_000_3C6F21684E7C954193E6C7C4573B762703676D7FCEIMCMBX1MITREO_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Q29sbGVhZ3VlcywNCg0KSSBtYXkgYmUgbWlzc2luZyBzb21ldGhpbmcsIGJ1dCBpdCBhcHBlYXJz IHRoYXQsIGluIHRoZSBjYXNlcyBkZXNjcmliZWQsIHRoZSB0d28gaG9zdHMgZG93bnN0cmVhbSBv ZiB0d28gc2VwYXJhdGUgY2FibGUgbW9kZW1zIGFyZSBvZmYgbGluayB0byBlYWNoIG90aGVyLiBU aGlzIGJyaW5ncyB1cCB0aGUgcXVlc3Rpb246IERvIHRoZXJlIHR3byBjYWJsZSBtb2RlbXMgY29u c3RpdHV0ZSB0d28gdmlydHVhbCBpbnRlcmZhY2VzLCBsaWtlIHR3byBWTEFOcyBvbiB0aGUgc2Ft ZSBwaHlzaWNhbCByb3V0ZXIgaW50ZXJmYWNlPyBJZiBzbywgdGhpcyBpcyBhbiBhcmNoaXRlY3R1 cmFsLCByYXRoZXIgdGhhbiBhbiBpbXBsZW1lbnRhdGlvbiwgcXVlc3Rpb24uIFRob3VnaHRzPw0K DQpCZXN0IFJlZ2FyZHMsDQoNCkplZmZyZXkgRHVubg0KSW5mbyBTeXN0ZW1zIEVuZy4sIExlYWQN Ck1JVFJFIENvcnBvcmF0aW9uLg0KKDMwMSkgNDQ4LTY5NjUgKG1vYmlsZSkNCg0KRnJvbTogaXB2 Ni1ib3VuY2VzQGlldGYub3JnIFttYWlsdG86aXB2Ni1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhh bGYgT2YgSGVtYW50IFNpbmdoIChzaGVtYW50KQ0KU2VudDogVGh1cnNkYXksIE5vdmVtYmVyIDA1 LCAyMDA5IDU6MzcgUE0NClRvOiBGcmVkIEJha2VyIChmcmVkKTsgRXJpayBOb3JkbWFyazsgSGVz aGFtIFNvbGltYW47IEpJTk1FSSBUYXR1eWEgLyDnpZ7mmI7pgZTlk4k7IFRob21hcyBOYXJ0ZW47 IFN1c2FuIFRob21zb24gKHNldGhvbXNvKTsgd2lsbGlhbS5hbGxlbi5zaW1wc29uQGdtYWlsLmNv bQ0KQ2M6IDZtYW4tYWRzQHRvb2xzLmlldGYub3JnOyBJRVRGIElQdjYgTWFpbGluZyBMaXN0OyBz YXZpLWFkc0B0b29scy5pZXRmLm9yZzsgUm9iaW4gTWVyc2g7IHY2b3BzLWFkc0B0b29scy5pZXRm Lm9yZzsgSVB2NiBPcGVyYXRpb25zOyBTQVZJIE1haWxpbmcgTGlzdA0KU3ViamVjdDogUkU6IEJy b2FkYmFuZCBGb3J1bSBsaWFpc29uIHRvIElFVEYgb24gSVB2NiBzZWN1cml0eQ0KDQpZZXMsIGlu IGEgY2FibGUgZGVwbG95bWVudCBldmVuIGlmIHR3byBjYWJsZSBtb2RlbXMgKENNKSBpbiB0d28g ZGlmZmVyZW50IGhvbWVzIG9uIHRoZSBzYW1lIHVwc3RyZWFtIHBoeXNpY2FsIGxheWVyIHRvIHRo ZSBDYWJsZSBlZGdlIHJvdXRlciAoQ01UUykgY2Fubm90IHRhbGsgZGlyZWN0bHkgdG8gZWFjaCBv dGhlciDigJMgdGhleSBoYXZlIHRvIHNlbmQgdGhlaXIgZGF0YSB0byB0aGUgQ01UUyB3aG8gdGhl biBmb3J3YXJkcyB0aGUgZGF0YSB0byB0aGUgb3RoZXIgbW9kZW0uICAgU3RpbGwgSSBhbSBub3Qg Y29udmluY2VkIG9mIGFueSBpbXBsaWNhdGlvbnMgZm9yIERBRCBpbiBTTEFBQz8gIFdpdGhvdXQg YW55IGxvc3Mgb2YgZ2VuZXJhbGl0eSwgSSB3aWxsIG9ubHkgcmVmZXIgdG8gYSBDTVRTIGZvciB0 aGUgcmVzdCBvZiB0aGUgZGlzY3Vzc2lvbiBidXQgdGhlIHNhbWUgaXMgYXBwbGljYWJsZSB0byBh IERTTEFNIChvciB3aGF0ZXZlciBMMyByb3V0ZXIgc2l0cyB1cHN0cmVhbSBvZiB0aGUgRExBTSBh cyB0aGUgZmlyc3QtaG9wIElQdjYgcm91dGVyKS4gIFNpbmNlIHRoZSBDTVRTIHNlZXMgYWxsIERB RCBtZXNzYWdlcyBmcm9tIGNsaWVudCBpbiB0aGUgZG93bnN0cmVhbSwgaWYgdGhlIENNVFMgZGV0 ZWN0cyBhIGR1cCwgdGhlIENNVFMgc2VuZHMgYSBOQSB0byB0aGUgY2xpZW50ICAtIHByb2JsZW0g c29sdmVkLiAgIE9mIGNvdXJzZSwgbm93IHRoZSBDTVRTIGlzIGRvaW5nIE5EIFByb3h5IHdoaWNo IGlzIGFscmVhZHkgc3BlY2lmaWVkIGluIGNhYmxlIHN0YW5kYXJkcyBhbmQgaW1wbGVtZW50ZWQg b24gRG9jc2lzIDMuMCBJUHY2IENNVFMgcm91dGVycy4gIFdoYXQgZGlkIEkgbWlzcz8NCg0KSWYg dGhlIEJCRiBoYXMgYW55IG5ldyBtdWx0aWNhc3QgYXJjaGl0ZWN0dXJlIGZvciBORCB0aGF0IEkg aGF2ZSBub3QgYWNjb3VudGVkIGZvciwgcGxlYXNlIHNlbmQgbWUgeW91ciBhcmNoIGRvYyBhbmQg SSBjYW4gbG9vayBhdCBpdCBhbmQgcmVwbHkgdG8gdGhhdCBhcyB3ZWxsLg0KDQpIZW1hbnQNCg0K RnJvbTogb3duZXItdjZvcHNAb3BzLmlldGYub3JnIFttYWlsdG86b3duZXItdjZvcHNAb3BzLmll dGYub3JnXSBPbiBCZWhhbGYgT2YgRnJlZCBCYWtlciAoZnJlZCkNClNlbnQ6IFRodXJzZGF5LCBO b3ZlbWJlciAwNSwgMjAwOSA1OjE4IFBNDQpUbzogRXJpayBOb3JkbWFyazsgSGVzaGFtIFNvbGlt YW47IEpJTk1FSSBUYXR1eWEgLyDnpZ7mmI7pgZTlk4k7IFRob21hcyBOYXJ0ZW47IFN1c2FuIFRo b21zb24gKHNldGhvbXNvKTsgd2lsbGlhbS5hbGxlbi5zaW1wc29uQGdtYWlsLmNvbQ0KQ2M6IFNB VkkgTWFpbGluZyBMaXN0OyBJRVRGIElQdjYgTWFpbGluZyBMaXN0OyBJUHY2IE9wZXJhdGlvbnM7 IHNhdmktYWRzQHRvb2xzLmlldGYub3JnOyB2Nm9wcy1hZHNAdG9vbHMuaWV0Zi5vcmc7IDZtYW4t YWRzQHRvb2xzLmlldGYub3JnOyBSb2JpbiBNZXJzaA0KU3ViamVjdDogRndkOiBCcm9hZGJhbmQg Rm9ydW0gbGlhaXNvbiB0byBJRVRGIG9uIElQdjYgc2VjdXJpdHkNCg0KR2VudGxlbWVuOg0KDQpJ J20gd3JpdGluZyB0byB5b3UgYXMgdGhlIGF1dGhvcnMgb2YgUkZDcyA0ODYxIGFuZCA0ODYyLiBJ biBhIHBhc3QgbWVldGluZywgSSB0aGluayB0aGUgb25lIGluIE1hcmNoLCBhbiBpc3N1ZSBjYW1l IHVwIGluIFNhdmkgdGhhdCBoYXMgbm93IGJlZW4gYnJvdWdodCB0byBvdXIgYXR0ZW50aW9uIGlu IGEgZm9ybWFsIG1hbm5lci4gVGhlIHByb2JsZW0gaXMgdGhhdCBpbiBjZXJ0YWluIGFjY2VzcyBu ZXR3b3JrIHRlY2hub2xvZ2llcywgbm90YWJseSBEU0wgYW5kIEkgYmVsaWV2ZSBDYWJsZSBNb2Rl bSwgdGhlIGNvbm5lY3Rpdml0eSBiZXR3ZWVuIHRoZSBDUEUgaG9zdCBvciByb3V0ZXIgYW5kIHRo ZSBJU1AncyBmaXJzdCBob3Agcm91dGVyIGlzIHNpbG9lZCAtIGl0IGxvb2tzIGxpa2UgYW4gRXRo ZXJuZXQgdG8gdGhlIGhvc3QgYnV0IGluIGZhY3QgaXMgc2VwYXJhdGVkIGludG8gc2VwYXJhdGUg Y2hhbm5lbHMuIFRoZSBlZmZlY3QgaXMgdGhhdCB3aGlsZSB0aGUgSVNQIHJvdXRlciBjYW4gc3Bl YWsgdG8gYW5kIGhlYXIgYWxsIG9mIHRoZSBDUEVzIGl0IGlzIGNvbm5lY3RlZCB0bywgdGhlIENQ RXMgY2Fubm90IGhlYXIgZWFjaCBvdGhlci4gVGhpcyBoYXMgaW1wbGljYXRpb25zIGZvciBEdXBs aWNhdGUgQWRkcmVzcyBEZXRlY3Rpb24gaW4gU0xBQUMuDQoNCldlIGxvb2sgZm9yd2FyZCB0byB5 b3VyIGFkdmljZS4NCg0KRnJlZCBCYWtlcg0KSVB2NiBPcGVyYXRpb25zDQoNCkJlZ2luIGZvcndh cmRlZCBtZXNzYWdlOg0KDQpGcm9tOiBSb2JpbiBNZXJzaCA8cm1lcnNoQGJyb2FkYmFuZC1mb3J1 bS5vcmc8bWFpbHRvOnJtZXJzaEBicm9hZGJhbmQtZm9ydW0ub3JnPj4NCkRhdGU6IE5vdmVtYmVy IDYsIDIwMDkgMTo0MjowNSBBTSBHTVQrMDg6MDANClRvOiBmZW5uZXJAZmVucm9uLmNvbTxtYWls dG86ZmVubmVyQGZlbnJvbi5jb20+LCBjaHJpc3RpYW4udm9ndEBlcmljc3Nvbi5jb208bWFpbHRv OmNocmlzdGlhbi52b2d0QGVyaWNzc29uLmNvbT4sIGZyZWQuYmFrZXJAY2lzY28uY29tPG1haWx0 bzpmcmVkLmJha2VyQGNpc2NvLmNvbT4sIGt1cnRpc0BrdXJ0aXMucHAuc2U8bWFpbHRvOmt1cnRp c0BrdXJ0aXMucHAuc2U+LCBkcm9tYXNjYUBhdmF5YS5jb208bWFpbHRvOmRyb21hc2NhQGF2YXlh LmNvbT4sIHJib25pY2FAanVuaXBlci5uZXQ8bWFpbHRvOnJib25pY2FAanVuaXBlci5uZXQ+LCBy ZHJvbXNAY2lzY28uY29tPG1haWx0bzpyZHJvbXNAY2lzY28uY29tPiwgamFyaS5hcmtrb0BwaXVo YS5uZXQ8bWFpbHRvOmphcmkuYXJra29AcGl1aGEubmV0PiwgTWFyayBUb3duc2xleSA8dG93bnNs ZXlAY2lzY28uY29tPG1haWx0bzp0b3duc2xleUBjaXNjby5jb20+Pg0KU3ViamVjdDogQnJvYWRi YW5kIEZvcnVtIGxpYWlzb24gdG8gSUVURiBvbiBJUHY2IHNlY3VyaXR5DQoNCkRlYXIgY29sbGVh Z3VlcywNCg0KRm9yIHlvdXIgcmV2aWV3LCBwbGVhc2Ugc2VlIHRoZSBsaWFpc29uIGZyb20gdGhl IEJyb2FkYmFuZCBGb3J1bSBhdHRhY2hlZCBiZWxvdy4NCg0KQmVzdCByZWdhcmRzLA0KUm9iaW4g TWVyc2gNCkNPTw0KVGhlIEJyb2FkYmFuZCBGb3J1bQ0KcGhvbmU6ICsxIDMzNiAyODggODAxMw0K Y2VsbDogKzEgMzAzIDU5NiA3NDQ4DQplbWFpbDogcm1lcnNoQGJyb2FkYmFuZC1mb3J1bS5vcmc8 bWFpbHRvOnJtZXJzaEBicm9hZGJhbmQtZm9ydW0ub3JnPg0KDQoNCg== --_000_3C6F21684E7C954193E6C7C4573B762703676D7FCEIMCMBX1MITREO_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9z b2Z0LWNvbTpvZmZpY2U6ZXhjZWwiIHhtbG5zOnA9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206 b2ZmaWNlOnBvd2VycG9pbnQiIHhtbG5zOmE9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2Zm aWNlOmFjY2VzcyIgeG1sbnM6ZHQ9InV1aWQ6QzJGNDEwMTAtNjVCMy0xMWQxLUEyOUYtMDBBQTAw QzE0ODgyIiB4bWxuczpzPSJ1dWlkOkJEQzZFM0YwLTZEQTMtMTFkMS1BMkEzLTAwQUEwMEMxNDg4 MiIgeG1sbnM6cnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206cm93c2V0IiB4bWxuczp6PSIj Um93c2V0U2NoZW1hIiB4bWxuczpiPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpw dWJsaXNoZXIiIHhtbG5zOnNzPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpzcHJl YWRzaGVldCIgeG1sbnM6Yz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6Y29tcG9u ZW50OnNwcmVhZHNoZWV0IiB4bWxuczpvZGM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2Zm aWNlOm9kYyIgeG1sbnM6b2E9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOmFjdGl2 YXRpb24iIHhtbG5zOmh0bWw9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiIHhtbG5z OnE9Imh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3NvYXAvZW52ZWxvcGUvIiB4bWxuczpydGM9 Imh0dHA6Ly9taWNyb3NvZnQuY29tL29mZmljZW5ldC9jb25mZXJlbmNpbmciIHhtbG5zOkQ9IkRB VjoiIHhtbG5zOlJlcGw9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vcmVwbC8iIHhtbG5z Om10PSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29hcC9tZWV0aW5n cy8iIHhtbG5zOngyPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS9leGNlbC8y MDAzL3htbCIgeG1sbnM6cHBkYT0iaHR0cDovL3d3dy5wYXNzcG9ydC5jb20vTmFtZVNwYWNlLnhz ZCIgeG1sbnM6b2lzPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29h cC9vaXMvIiB4bWxuczpkaXI9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2lu dC9zb2FwL2RpcmVjdG9yeS8iIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3ht bGRzaWcjIiB4bWxuczpkc3A9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2lu dC9kc3AiIHhtbG5zOnVkYz0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9kYXRhL3VkYyIg eG1sbnM6eHNkPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6c3ViPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29hcC8yMDAyLzEvYWxlcnRz LyIgeG1sbnM6ZWM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jIyIgeG1sbnM6c3A9 Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2ludC8iIHhtbG5zOnNwcz0iaHR0 cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvIiB4bWxuczp4c2k9Imh0 dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp1ZGNzPSJodHRw Oi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2RhdGEvdWRjL3NvYXAiIHhtbG5zOnVkY3hmPSJodHRw Oi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2RhdGEvdWRjL3htbGZpbGUiIHhtbG5zOnVkY3AycD0i aHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9kYXRhL3VkYy9wYXJ0dG9wYXJ0IiB4bWxuczp3 Zj0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvd29ya2Zsb3cv IiB4bWxuczpkc3NzPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA2L2Rp Z3NpZy1zZXR1cCIgeG1sbnM6ZHNzaT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZp Y2UvMjAwNi9kaWdzaWciIHhtbG5zOm1kc3NpPSJodHRwOi8vc2NoZW1hcy5vcGVueG1sZm9ybWF0 cy5vcmcvcGFja2FnZS8yMDA2L2RpZ2l0YWwtc2lnbmF0dXJlIiB4bWxuczptdmVyPSJodHRwOi8v c2NoZW1hcy5vcGVueG1sZm9ybWF0cy5vcmcvbWFya3VwLWNvbXBhdGliaWxpdHkvMjAwNiIgeG1s bnM6bT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4 bWxuczptcmVscz0iaHR0cDovL3NjaGVtYXMub3BlbnhtbGZvcm1hdHMub3JnL3BhY2thZ2UvMjAw Ni9yZWxhdGlvbnNoaXBzIiB4bWxuczpzcHdwPSJodHRwOi8vbWljcm9zb2Z0LmNvbS9zaGFyZXBv aW50L3dlYnBhcnRwYWdlcyIgeG1sbnM6ZXgxMnQ9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5j b20vZXhjaGFuZ2Uvc2VydmljZXMvMjAwNi90eXBlcyIgeG1sbnM6ZXgxMm09Imh0dHA6Ly9zY2hl bWFzLm1pY3Jvc29mdC5jb20vZXhjaGFuZ2Uvc2VydmljZXMvMjAwNi9tZXNzYWdlcyIgeG1sbnM6 cHB0c2w9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2ludC9zb2FwL1NsaWRl TGlicmFyeS8iIHhtbG5zOnNwc2w9Imh0dHA6Ly9taWNyb3NvZnQuY29tL3dlYnNlcnZpY2VzL1No YXJlUG9pbnRQb3J0YWxTZXJ2ZXIvUHVibGlzaGVkTGlua3NTZXJ2aWNlIiB4bWxuczpaPSJ1cm46 c2NoZW1hcy1taWNyb3NvZnQtY29tOiIgeG1sbnM6c3Q9IiYjMTsiIHhtbG5zPSJodHRwOi8vd3d3 LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCg0KPGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PUNvbnRl bnQtVHlwZSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1ldGEgbmFtZT1H ZW5lcmF0b3IgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0K PHN0eWxlPg0KPCEtLQ0KIC8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCiBAZm9udC1mYWNlDQoJe2Zv bnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMToyIDExIDYgNCAyIDIgMiAyIDIgNDt9DQpA Zm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJNUyBNaW5jaG8iOw0KCXBhbm9zZS0xOjIgMiA2IDkg NCAyIDUgOCAzIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiTVMgTWluY2hvIjsNCglw YW5vc2UtMToyIDIgNiA5IDQgMiA1IDggMyA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpA Zm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQE1TIE1pbmNobyI7DQoJcGFub3NlLTE6MiAyIDYg OSA0IDIgNSA4IDMgNDt9DQogLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCiBwLk1zb05vcm1hbCwg bGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRv bTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBS b21hbiIsInNlcmlmIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LmFwcGxlLXN0eWxlLXNwYW4NCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtc3R5bGUtc3Bhbjt9DQpz cGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0 eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IlRp bWVzIE5ldyBSb21hbiIsInNlcmlmIjsNCgljb2xvcjpibGFjazt9DQouTXNvQ2hwRGVmYXVsdA0K CXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdl IFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBp biAxLjBpbjt9DQpkaXYuU2VjdGlvbjENCgl7cGFnZTpTZWN0aW9uMTt9DQotLT4NCjwvc3R5bGU+ DQo8IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCiA8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0 IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDld Pjx4bWw+DQogPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KICA8bzppZG1hcCB2OmV4dD0i ZWRpdCIgZGF0YT0iMSIgLz4NCiA8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8 L2hlYWQ+DQoNCjxib2R5IGxhbmc9RU4tVVMgbGluaz1ibHVlIHZsaW5rPXB1cnBsZSBzdHlsZT0n d29yZC13cmFwOiBicmVhay13b3JkOw0KLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOy13ZWJraXQt bGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2UnPg0KDQo8ZGl2IGNsYXNzPVNlY3Rpb24xPg0K DQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGNvbG9yPWJsYWNrIGZhY2U9IlRpbWVz IE5ldyBSb21hbiI+PHNwYW4NCnN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrJz5D b2xsZWFndWVzLDxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNsYXNzPU1zb05v cm1hbD48Zm9udCBzaXplPTMgY29sb3I9YmxhY2sgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3Bh bg0Kc3R5bGU9J2ZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2snPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBzaXplPTMgY29s b3I9YmxhY2sgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3Bhbg0Kc3R5bGU9J2ZvbnQtc2l6ZTox Mi4wcHQ7Y29sb3I6YmxhY2snPkkgbWF5IGJlIG1pc3Npbmcgc29tZXRoaW5nLCBidXQgaXQgYXBw ZWFycw0KdGhhdCwgaW4gdGhlIGNhc2VzIGRlc2NyaWJlZCwgdGhlIHR3byBob3N0cyBkb3duc3Ry ZWFtIG9mIHR3byBzZXBhcmF0ZSBjYWJsZQ0KbW9kZW1zIGFyZSBvZmYgbGluayB0byBlYWNoIG90 aGVyLiBUaGlzIGJyaW5ncyB1cCB0aGUgcXVlc3Rpb246IERvIHRoZXJlIHR3bw0KY2FibGUgbW9k ZW1zIGNvbnN0aXR1dGUgdHdvIHZpcnR1YWwgaW50ZXJmYWNlcywgbGlrZSB0d28gVkxBTnMgb24g dGhlIHNhbWUNCnBoeXNpY2FsIHJvdXRlciBpbnRlcmZhY2U/IElmIHNvLCB0aGlzIGlzIGFuIGFy Y2hpdGVjdHVyYWwsIHJhdGhlciB0aGFuIGFuIGltcGxlbWVudGF0aW9uLA0KcXVlc3Rpb24uIFRo b3VnaHRzPzxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1h bD48Zm9udCBzaXplPTMgY29sb3I9YmxhY2sgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3Bhbg0K c3R5bGU9J2ZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2snPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvZm9udD48L3A+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBzaXpl PTMgY29sb3I9YmxhY2sgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3Bhbg0Kc3R5bGU9J2ZvbnQt c2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2snPkJlc3QgUmVnYXJkcywgPGJyPg0KJm5ic3A7IDxicj4N CkplZmZyZXkgRHVubiA8YnI+DQpJbmZvIFN5c3RlbXMgRW5nLiwgTGVhZCA8YnI+DQpNSVRSRSBD b3Jwb3JhdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPg0KDQo8cCBjbGFzcz1Nc29O b3JtYWw+PGZvbnQgc2l6ZT0zIGNvbG9yPWJsYWNrIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+PHNw YW4NCnN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrJz4oMzAxKSA0NDgtNjk2NSAo bW9iaWxlKTxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjwvZGl2Pg0KDQo8cCBjbGFz cz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGNvbG9yPWJsYWNrIGZhY2U9IlRpbWVzIE5ldyBSb21h biI+PHNwYW4NCnN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrJz48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPg0KDQo8ZGl2Pg0KDQo8ZGl2IHN0eWxlPSdib3JkZXI6 bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGlu IDBpbic+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Yj48Zm9udCBzaXplPTIgZmFjZT1UYWhvbWE+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7DQpmb250LWZhbWlseToiVGFob21hIiwic2Fu cy1zZXJpZiI7Zm9udC13ZWlnaHQ6Ym9sZCc+RnJvbTo8L3NwYW4+PC9mb250PjwvYj48Zm9udA0K c2l6ZT0yIGZhY2U9VGFob21hPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIic+DQppcHY2LWJvdW5jZXNAaWV0Zi5vcmcgW21haWx0 bzppcHY2LWJvdW5jZXNAaWV0Zi5vcmddIDxiPjxzcGFuIHN0eWxlPSdmb250LXdlaWdodDoNCmJv bGQnPk9uIEJlaGFsZiBPZiA8L3NwYW4+PC9iPkhlbWFudCBTaW5naCAoc2hlbWFudCk8YnI+DQo8 Yj48c3BhbiBzdHlsZT0nZm9udC13ZWlnaHQ6Ym9sZCc+U2VudDo8L3NwYW4+PC9iPiBUaHVyc2Rh eSwgTm92ZW1iZXIgMDUsIDIwMDkNCjU6MzcgUE08YnI+DQo8Yj48c3BhbiBzdHlsZT0nZm9udC13 ZWlnaHQ6Ym9sZCc+VG86PC9zcGFuPjwvYj4gRnJlZCBCYWtlciAoZnJlZCk7IEVyaWsNCk5vcmRt YXJrOyBIZXNoYW0gU29saW1hbjsgSklOTUVJIFRhdHV5YSAvIDwvc3Bhbj48L2ZvbnQ+PGZvbnQg c2l6ZT0yDQpmYWNlPSJNUyBNaW5jaG8iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiJNUyBNaW5jaG8iJz7npZ7mmI7pgZTlk4k8L3NwYW4+PC9mb250Pjxmb250DQpz aXplPTIgZmFjZT1UYWhvbWE+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz47DQpUaG9tYXMgTmFydGVuOyBTdXNhbiBUaG9tc29u IChzZXRob21zbyk7IHdpbGxpYW0uYWxsZW4uc2ltcHNvbkBnbWFpbC5jb208YnI+DQo8Yj48c3Bh biBzdHlsZT0nZm9udC13ZWlnaHQ6Ym9sZCc+Q2M6PC9zcGFuPjwvYj4gNm1hbi1hZHNAdG9vbHMu aWV0Zi5vcmc7IElFVEYNCklQdjYgTWFpbGluZyBMaXN0OyBzYXZpLWFkc0B0b29scy5pZXRmLm9y ZzsgUm9iaW4gTWVyc2g7DQp2Nm9wcy1hZHNAdG9vbHMuaWV0Zi5vcmc7IElQdjYgT3BlcmF0aW9u czsgU0FWSSBNYWlsaW5nIExpc3Q8YnI+DQo8Yj48c3BhbiBzdHlsZT0nZm9udC13ZWlnaHQ6Ym9s ZCc+U3ViamVjdDo8L3NwYW4+PC9iPiBSRTogQnJvYWRiYW5kIEZvcnVtDQpsaWFpc29uIHRvIElF VEYgb24gSVB2NiBzZWN1cml0eTxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjwvZGl2 Pg0KDQo8L2Rpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MyBmYWNlPSJUaW1l cyBOZXcgUm9tYW4iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6DQoxMi4wcHQnPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBzaXpl PTIgY29sb3I9IiMxZjQ5N2QiIGZhY2U9Q2FsaWJyaT48c3Bhbg0Kc3R5bGU9J2ZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5Z ZXMsDQppbiBhIGNhYmxlIGRlcGxveW1lbnQgZXZlbiBpZiB0d28gY2FibGUgbW9kZW1zIChDTSkg aW4gdHdvIGRpZmZlcmVudCBob21lcyBvbg0KdGhlIHNhbWUgdXBzdHJlYW0gcGh5c2ljYWwgbGF5 ZXIgdG8gdGhlIENhYmxlIGVkZ2Ugcm91dGVyIChDTVRTKSBjYW5ub3QgdGFsaw0KZGlyZWN0bHkg dG8gZWFjaCBvdGhlciDigJMgdGhleSBoYXZlIHRvIHNlbmQgdGhlaXIgZGF0YSB0byB0aGUgQ01U UyB3aG8gdGhlbg0KZm9yd2FyZHMgdGhlIGRhdGEgdG8gdGhlIG90aGVyIG1vZGVtLiZuYnNwOyAm bmJzcDtTdGlsbCBJIGFtIG5vdCBjb252aW5jZWQgb2YNCmFueSBpbXBsaWNhdGlvbnMgZm9yIERB RCBpbiBTTEFBQz8mbmJzcDsgV2l0aG91dCBhbnkgbG9zcyBvZiBnZW5lcmFsaXR5LCBJIHdpbGwN Cm9ubHkgcmVmZXIgdG8gYSBDTVRTIGZvciB0aGUgcmVzdCBvZiB0aGUgZGlzY3Vzc2lvbiBidXQg dGhlIHNhbWUgaXMgYXBwbGljYWJsZQ0KdG8gYSBEU0xBTSAob3Igd2hhdGV2ZXIgTDMgcm91dGVy IHNpdHMgdXBzdHJlYW0gb2YgdGhlIERMQU0gYXMgdGhlIGZpcnN0LWhvcA0KSVB2NiByb3V0ZXIp LiZuYnNwOyBTaW5jZSB0aGUgQ01UUyBzZWVzIGFsbCBEQUQgbWVzc2FnZXMgZnJvbSBjbGllbnQg aW4gdGhlDQpkb3duc3RyZWFtLCBpZiB0aGUgQ01UUyBkZXRlY3RzIGEgZHVwLCB0aGUgQ01UUyBz ZW5kcyBhIE5BIHRvIHRoZSBjbGllbnQmbmJzcDsNCi0gcHJvYmxlbSBzb2x2ZWQuJm5ic3A7Jm5i c3A7IE9mIGNvdXJzZSwgbm93IHRoZSBDTVRTIGlzIGRvaW5nIE5EIFByb3h5IHdoaWNoDQppcyBh bHJlYWR5IHNwZWNpZmllZCBpbiBjYWJsZSBzdGFuZGFyZHMgYW5kIGltcGxlbWVudGVkIG9uIERv Y3NpcyAzLjAgSVB2NiBDTVRTDQpyb3V0ZXJzLiZuYnNwOyBXaGF0IGRpZCBJIG1pc3M/IDxvOnA+ PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBzaXpl PTIgY29sb3I9IiMxZjQ5N2QiIGZhY2U9Q2FsaWJyaT48c3Bhbg0Kc3R5bGU9J2ZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+ PGZvbnQgc2l6ZT0yIGNvbG9yPSIjMWY0OTdkIiBmYWNlPUNhbGlicmk+PHNwYW4NCnN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6 IzFGNDk3RCc+SWYNCnRoZSBCQkYgaGFzIGFueSBuZXcgbXVsdGljYXN0IGFyY2hpdGVjdHVyZSBm b3IgTkQgdGhhdCBJIGhhdmUgbm90IGFjY291bnRlZA0KZm9yLCBwbGVhc2Ugc2VuZCBtZSB5b3Vy IGFyY2ggZG9jIGFuZCBJIGNhbiBsb29rIGF0IGl0IGFuZCByZXBseSB0byB0aGF0IGFzDQp3ZWxs LjxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9u dCBzaXplPTIgY29sb3I9IiMxZjQ5N2QiIGZhY2U9Q2FsaWJyaT48c3Bhbg0Kc3R5bGU9J2ZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0 OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPg0KDQo8cCBjbGFzcz1Nc29O b3JtYWw+PGZvbnQgc2l6ZT0yIGNvbG9yPSIjMWY0OTdkIiBmYWNlPUNhbGlicmk+PHNwYW4NCnN0 eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7 Y29sb3I6IzFGNDk3RCc+SGVtYW50PG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPHAg Y2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MiBjb2xvcj0iIzFmNDk3ZCIgZmFjZT1DYWxpYnJp PjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNh bnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48 L3A+DQoNCjxkaXY+DQoNCjxkaXYgc3R5bGU9J2JvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluJz4NCg0KPHAgY2xhc3M9TXNv Tm9ybWFsPjxiPjxmb250IHNpemU9MiBmYWNlPVRhaG9tYT48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjEwLjBwdDsNCmZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjtmb250LXdlaWdodDpi b2xkJz5Gcm9tOjwvc3Bhbj48L2ZvbnQ+PC9iPjxmb250DQpzaXplPTIgZmFjZT1UYWhvbWE+PHNw YW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2Vy aWYiJz4NCm93bmVyLXY2b3BzQG9wcy5pZXRmLm9yZyBbbWFpbHRvOm93bmVyLXY2b3BzQG9wcy5p ZXRmLm9yZ10gPGI+PHNwYW4NCnN0eWxlPSdmb250LXdlaWdodDpib2xkJz5PbiBCZWhhbGYgT2Yg PC9zcGFuPjwvYj5GcmVkIEJha2VyIChmcmVkKTxicj4NCjxiPjxzcGFuIHN0eWxlPSdmb250LXdl aWdodDpib2xkJz5TZW50Ojwvc3Bhbj48L2I+IFRodXJzZGF5LCBOb3ZlbWJlciAwNSwgMjAwOQ0K NToxOCBQTTxicj4NCjxiPjxzcGFuIHN0eWxlPSdmb250LXdlaWdodDpib2xkJz5Ubzo8L3NwYW4+ PC9iPiBFcmlrIE5vcmRtYXJrOyBIZXNoYW0gU29saW1hbjsNCkpJTk1FSSBUYXR1eWEgLyA8L3Nw YW4+PC9mb250Pjxmb250IHNpemU9MiBmYWNlPSJNUyBNaW5jaG8iPjxzcGFuDQpzdHlsZT0nZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiTVMgTWluY2hvIic+56We5piO6YGU5ZOJPC9zcGFu PjwvZm9udD48Zm9udA0Kc2l6ZT0yIGZhY2U9VGFob21hPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIic+Ow0KVGhvbWFzIE5hcnRl bjsgU3VzYW4gVGhvbXNvbiAoc2V0aG9tc28pOyB3aWxsaWFtLmFsbGVuLnNpbXBzb25AZ21haWwu Y29tPGJyPg0KPGI+PHNwYW4gc3R5bGU9J2ZvbnQtd2VpZ2h0OmJvbGQnPkNjOjwvc3Bhbj48L2I+ IFNBVkkgTWFpbGluZyBMaXN0OyBJRVRGIElQdjYNCk1haWxpbmcgTGlzdDsgSVB2NiBPcGVyYXRp b25zOyBzYXZpLWFkc0B0b29scy5pZXRmLm9yZzsgdjZvcHMtYWRzQHRvb2xzLmlldGYub3JnOw0K Nm1hbi1hZHNAdG9vbHMuaWV0Zi5vcmc7IFJvYmluIE1lcnNoPGJyPg0KPGI+PHNwYW4gc3R5bGU9 J2ZvbnQtd2VpZ2h0OmJvbGQnPlN1YmplY3Q6PC9zcGFuPjwvYj4gRndkOiBCcm9hZGJhbmQgRm9y dW0NCmxpYWlzb24gdG8gSUVURiBvbiBJUHY2IHNlY3VyaXR5PG86cD48L286cD48L3NwYW4+PC9m b250PjwvcD4NCg0KPC9kaXY+DQoNCjwvZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQg c2l6ZT0zIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToNCjEy LjBwdCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPHAgY2xhc3M9TXNv Tm9ybWFsPjxmb250IHNpemU9MyBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuIHN0eWxlPSdm b250LXNpemU6DQoxMi4wcHQnPkdlbnRsZW1lbjo8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9w Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGZhY2U9IlRpbWVz IE5ldyBSb21hbiI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToNCjEyLjBwdCc+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPC9kaXY+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1z b05vcm1hbD48Zm9udCBzaXplPTMgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3BhbiBzdHlsZT0n Zm9udC1zaXplOg0KMTIuMHB0Jz5JJ20gd3JpdGluZyB0byB5b3UgYXMgdGhlIGF1dGhvcnMgb2Yg UkZDcyA0ODYxIGFuZCA0ODYyLiBJbiBhIHBhc3QNCm1lZXRpbmcsIEkgdGhpbmsgdGhlIG9uZSBp biBNYXJjaCwgYW4gaXNzdWUgY2FtZSB1cCBpbiBTYXZpIHRoYXQgaGFzIG5vdyBiZWVuDQpicm91 Z2h0IHRvIG91ciBhdHRlbnRpb24gaW4gYSBmb3JtYWwgbWFubmVyLiBUaGUgcHJvYmxlbSBpcyB0 aGF0IGluIGNlcnRhaW4NCmFjY2VzcyBuZXR3b3JrIHRlY2hub2xvZ2llcywgbm90YWJseSBEU0wg YW5kIEkgYmVsaWV2ZSBDYWJsZSBNb2RlbSwgdGhlDQpjb25uZWN0aXZpdHkgYmV0d2VlbiB0aGUg Q1BFIGhvc3Qgb3Igcm91dGVyIGFuZCB0aGUgSVNQJ3MgZmlyc3QgaG9wIHJvdXRlciBpcw0Kc2ls b2VkIC0gaXQgbG9va3MgbGlrZSBhbiBFdGhlcm5ldCB0byB0aGUgaG9zdCBidXQgaW4gZmFjdCBp cyBzZXBhcmF0ZWQgaW50bw0Kc2VwYXJhdGUgY2hhbm5lbHMuIFRoZSBlZmZlY3QgaXMgdGhhdCB3 aGlsZSB0aGUgSVNQIHJvdXRlciBjYW4gc3BlYWsgdG8gYW5kDQpoZWFyIGFsbCBvZiB0aGUgQ1BF cyBpdCBpcyBjb25uZWN0ZWQgdG8sIHRoZSBDUEVzIGNhbm5vdCBoZWFyIGVhY2ggb3RoZXIuIFRo aXMNCmhhcyBpbXBsaWNhdGlvbnMgZm9yIER1cGxpY2F0ZSBBZGRyZXNzIERldGVjdGlvbiBpbiBT TEFBQy48bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0K PHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MyBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxz cGFuIHN0eWxlPSdmb250LXNpemU6DQoxMi4wcHQnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv Zm9udD48L3A+DQoNCjwvZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQg c2l6ZT0zIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToNCjEy LjBwdCc+V2UgbG9vayBmb3J3YXJkIHRvIHlvdXIgYWR2aWNlLjxvOnA+PC9vOnA+PC9zcGFuPjwv Zm9udD48L3A+DQoNCjwvZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQg c2l6ZT0zIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToNCjEy LjBwdCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPC9kaXY+DQoNCjxk aXY+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBzaXplPTMgZmFjZT0iVGltZXMgTmV3IFJv bWFuIj48c3BhbiBzdHlsZT0nZm9udC1zaXplOg0KMTIuMHB0Jz5GcmVkIEJha2VyPG86cD48L286 cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPC9kaXY+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1zb05v cm1hbD48Zm9udCBzaXplPTMgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3BhbiBzdHlsZT0nZm9u dC1zaXplOg0KMTIuMHB0Jz5JUHY2IE9wZXJhdGlvbnM8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+ PC9wPg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGZhY2U9IlRp bWVzIE5ldyBSb21hbiI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToNCjEyLjBwdCc+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFs Pjxmb250IHNpemU9MyBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuIHN0eWxlPSdmb250LXNp emU6DQoxMi4wcHQnPkJlZ2luIGZvcndhcmRlZCBtZXNzYWdlOjxvOnA+PC9vOnA+PC9zcGFuPjwv Zm9udD48L3A+DQoNCjwvZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1i b3R0b206MTIuMHB0Jz48Zm9udCBzaXplPTMNCmZhY2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMi4wcHQnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48 L3A+DQoNCjxkaXY+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Yj48Zm9udCBzaXpl PTEgY29sb3I9YmxhY2sgZmFjZT1IZWx2ZXRpY2E+PHNwYW4NCnN0eWxlPSdmb250LXNpemU6OS4w cHQ7Zm9udC1mYW1pbHk6IkhlbHZldGljYSIsInNhbnMtc2VyaWYiO2NvbG9yOmJsYWNrOw0KZm9u dC13ZWlnaHQ6Ym9sZCc+RnJvbTogPC9zcGFuPjwvZm9udD48L2I+PGZvbnQgc2l6ZT0xIGZhY2U9 SGVsdmV0aWNhPjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiJIZWx2 ZXRpY2EiLCJzYW5zLXNlcmlmIic+Um9iaW4gTWVyc2ggJmx0OzxhDQpocmVmPSJtYWlsdG86cm1l cnNoQGJyb2FkYmFuZC1mb3J1bS5vcmciPnJtZXJzaEBicm9hZGJhbmQtZm9ydW0ub3JnPC9hPiZn dDs8L3NwYW4+PC9mb250PjxvOnA+PC9vOnA+PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAg Y2xhc3M9TXNvTm9ybWFsPjxiPjxmb250IHNpemU9MSBjb2xvcj1ibGFjayBmYWNlPUhlbHZldGlj YT48c3Bhbg0Kc3R5bGU9J2ZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseToiSGVsdmV0aWNhIiwi c2Fucy1zZXJpZiI7Y29sb3I6YmxhY2s7DQpmb250LXdlaWdodDpib2xkJz5EYXRlOiA8L3NwYW4+ PC9mb250PjwvYj48Zm9udCBzaXplPTEgZmFjZT1IZWx2ZXRpY2E+PHNwYW4NCnN0eWxlPSdmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6IkhlbHZldGljYSIsInNhbnMtc2VyaWYiJz5Ob3ZlbWJl ciA2LCAyMDA5DQoxOjQyOjA1IEFNIEdNVCswODowMDwvc3Bhbj48L2ZvbnQ+PG86cD48L286cD48 L3A+DQoNCjwvZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGI+PGZvbnQgc2l6 ZT0xIGNvbG9yPWJsYWNrIGZhY2U9SGVsdmV0aWNhPjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OiJIZWx2ZXRpY2EiLCJzYW5zLXNlcmlmIjtjb2xvcjpibGFjazsNCmZv bnQtd2VpZ2h0OmJvbGQnPlRvOiA8L3NwYW4+PC9mb250PjwvYj48Zm9udCBzaXplPTEgZmFjZT1I ZWx2ZXRpY2E+PHNwYW4NCnN0eWxlPSdmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6IkhlbHZl dGljYSIsInNhbnMtc2VyaWYiJz48YQ0KaHJlZj0ibWFpbHRvOmZlbm5lckBmZW5yb24uY29tIj5m ZW5uZXJAZmVucm9uLmNvbTwvYT4sIDxhDQpocmVmPSJtYWlsdG86Y2hyaXN0aWFuLnZvZ3RAZXJp Y3Nzb24uY29tIj5jaHJpc3RpYW4udm9ndEBlcmljc3Nvbi5jb208L2E+LCA8YQ0KaHJlZj0ibWFp bHRvOmZyZWQuYmFrZXJAY2lzY28uY29tIj5mcmVkLmJha2VyQGNpc2NvLmNvbTwvYT4sIDxhDQpo cmVmPSJtYWlsdG86a3VydGlzQGt1cnRpcy5wcC5zZSI+a3VydGlzQGt1cnRpcy5wcC5zZTwvYT4s IDxhDQpocmVmPSJtYWlsdG86ZHJvbWFzY2FAYXZheWEuY29tIj5kcm9tYXNjYUBhdmF5YS5jb208 L2E+LCA8YQ0KaHJlZj0ibWFpbHRvOnJib25pY2FAanVuaXBlci5uZXQiPnJib25pY2FAanVuaXBl ci5uZXQ8L2E+LCA8YQ0KaHJlZj0ibWFpbHRvOnJkcm9tc0BjaXNjby5jb20iPnJkcm9tc0BjaXNj by5jb208L2E+LCA8YQ0KaHJlZj0ibWFpbHRvOmphcmkuYXJra29AcGl1aGEubmV0Ij5qYXJpLmFy a2tvQHBpdWhhLm5ldDwvYT4sIE1hcmsgVG93bnNsZXkgJmx0OzxhDQpocmVmPSJtYWlsdG86dG93 bnNsZXlAY2lzY28uY29tIj50b3duc2xleUBjaXNjby5jb208L2E+Jmd0Ozwvc3Bhbj48L2ZvbnQ+ PG86cD48L286cD48L3A+DQoNCjwvZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+ PGI+PGZvbnQgc2l6ZT0xIGNvbG9yPWJsYWNrIGZhY2U9SGVsdmV0aWNhPjxzcGFuDQpzdHlsZT0n Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiJIZWx2ZXRpY2EiLCJzYW5zLXNlcmlmIjtjb2xv cjpibGFjazsNCmZvbnQtd2VpZ2h0OmJvbGQnPlN1YmplY3Q6IDwvc3Bhbj48L2ZvbnQ+PC9iPjxi Pjxmb250IHNpemU9MSBmYWNlPUhlbHZldGljYT48c3Bhbg0Kc3R5bGU9J2ZvbnQtc2l6ZTo5LjBw dDtmb250LWZhbWlseToiSGVsdmV0aWNhIiwic2Fucy1zZXJpZiI7Zm9udC13ZWlnaHQ6Ym9sZCc+ QnJvYWRiYW5kDQpGb3J1bSBsaWFpc29uIHRvIElFVEYgb24gSVB2NiBzZWN1cml0eTwvc3Bhbj48 L2ZvbnQ+PC9iPjxvOnA+PC9vOnA+PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9 TXNvTm9ybWFsPjxmb250IHNpemU9MyBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuIHN0eWxl PSdmb250LXNpemU6DQoxMi4wcHQnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+ DQoNCjwvZGl2Pg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9y bWFsPjxmb250IHNpemU9MyBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6DQoxMi4wcHQnPkRlYXIgY29sbGVhZ3Vlcyw8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+ PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9 MyBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6DQoxMi4wcHQn PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjwvZGl2Pg0KDQo8ZGl2Pg0K DQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToNCjEyLjBwdCc+Rm9yIHlvdXIgcmV2aWV3LCBwbGVhc2Ug c2VlIHRoZSBsaWFpc29uIGZyb20gdGhlIEJyb2FkYmFuZCBGb3J1bQ0KYXR0YWNoZWQgYmVsb3cu PG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPC9kaXY+DQoNCjxkaXY+DQoNCjxwIGNs YXNzPU1zb05vcm1hbD48Zm9udCBzaXplPTMgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3BhbiBz dHlsZT0nZm9udC1zaXplOg0KMTIuMHB0Jz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+ PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9 MyBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6DQoxMi4wcHQn PkJlc3QgcmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPg0KDQo8L2Rpdj4NCg0K PGRpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MSBjb2xvcj1i bGFjayBmYWNlPUhlbHZldGljYT48c3Bhbg0Kc3R5bGU9J2ZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseToiSGVsdmV0aWNhIiwic2Fucy1zZXJpZiI7Y29sb3I6YmxhY2snPlJvYmluDQpNZXJzaDxv OnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjwvZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFz cz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0xIGNvbG9yPWJsYWNrIGZhY2U9SGVsdmV0aWNhPjxzcGFu DQpzdHlsZT0nZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiJIZWx2ZXRpY2EiLCJzYW5zLXNl cmlmIjtjb2xvcjpibGFjayc+Q09PPG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPC9k aXY+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBzaXplPTEgY29sb3I9Ymxh Y2sgZmFjZT1IZWx2ZXRpY2E+PHNwYW4NCnN0eWxlPSdmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6IkhlbHZldGljYSIsInNhbnMtc2VyaWYiO2NvbG9yOmJsYWNrJz5UaGUNCkJyb2FkYmFuZCBG b3J1bTxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjwvZGl2Pg0KDQo8ZGl2Pg0KDQo8 cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0xIGNvbG9yPWJsYWNrIGZhY2U9SGVsdmV0aWNh PjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiJIZWx2ZXRpY2EiLCJz YW5zLXNlcmlmIjtjb2xvcjpibGFjayc+cGhvbmU6DQorMSAzMzYgMjg4IDgwMTM8bzpwPjwvbzpw Pjwvc3Bhbj48L2ZvbnQ+PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9y bWFsPjxmb250IHNpemU9MSBjb2xvcj1ibGFjayBmYWNlPUhlbHZldGljYT48c3Bhbg0Kc3R5bGU9 J2ZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseToiSGVsdmV0aWNhIiwic2Fucy1zZXJpZiI7Y29s b3I6YmxhY2snPmNlbGw6DQorMSAzMDMgNTk2IDc0NDg8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+ PC9wPg0KDQo8L2Rpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9 MSBjb2xvcj1ibGFjayBmYWNlPUhlbHZldGljYT48c3Bhbg0Kc3R5bGU9J2ZvbnQtc2l6ZTo5LjBw dDtmb250LWZhbWlseToiSGVsdmV0aWNhIiwic2Fucy1zZXJpZiI7Y29sb3I6YmxhY2snPmVtYWls OiZuYnNwOzxhDQpocmVmPSJtYWlsdG86cm1lcnNoQGJyb2FkYmFuZC1mb3J1bS5vcmciPnJtZXJz aEBicm9hZGJhbmQtZm9ydW0ub3JnPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoN CjwvZGl2Pg0KDQo8ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0xIGNvbG9y PWJsYWNrIGZhY2U9SGVsdmV0aWNhPjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjkuMHB0O2ZvbnQt ZmFtaWx5OiJIZWx2ZXRpY2EiLCJzYW5zLXNlcmlmIjtjb2xvcjpibGFjayc+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPC9kaXY+DQoNCjxwIGNsYXNzPU1zb05vcm1hbCBz dHlsZT0nbWFyZ2luLWJvdHRvbToxMi4wcHQnPjxmb250IHNpemU9Mw0KZmFjZT0iVGltZXMgTmV3 IFJvbWFuIj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEyLjBwdCc+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9mb250PjwvcD4NCg0KPC9kaXY+DQoNCjwvZGl2Pg0KDQo8L2Rpdj4NCg0KPC9kaXY+ DQoNCjwvZGl2Pg0KDQo8L2JvZHk+DQoNCjwvaHRtbD4NCg== --_000_3C6F21684E7C954193E6C7C4573B762703676D7FCEIMCMBX1MITREO_-- From shemant@cisco.com Thu Nov 5 16:38:54 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 675553A6822; Thu, 5 Nov 2009 16:38:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.247 X-Spam-Level: X-Spam-Status: No, score=-5.247 tagged_above=-999 required=5 tests=[AWL=0.451, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_13=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iwX5WFyzVCXx; Thu, 5 Nov 2009 16:38:53 -0800 (PST) Received: from rtp-iport-1.cisco.com (rtp-iport-1.cisco.com [64.102.122.148]) by core3.amsl.com (Postfix) with ESMTP id EAC7C3A67DB; Thu, 5 Nov 2009 16:38:52 -0800 (PST) Authentication-Results: rtp-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AsYEAMv+8kqtJV2Y/2dsb2JhbACCJiyCIZU9riaHEoIVCY5Kgj8VgRZTBIFm X-IronPort-AV: E=Sophos;i="4.44,689,1249257600"; d="scan'208,217";a="66633982" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by rtp-iport-1.cisco.com with ESMTP; 06 Nov 2009 00:39:14 +0000 Received: from xbh-rcd-201.cisco.com (xbh-rcd-201.cisco.com [72.163.62.200]) by rcdn-core-1.cisco.com (8.14.3/8.14.3) with ESMTP id nA60dE00002217; Fri, 6 Nov 2009 00:39:14 GMT Received: from xmb-rcd-114.cisco.com ([72.163.62.156]) by xbh-rcd-201.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 5 Nov 2009 18:39:14 -0600 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CA5E79.90B310CA" Date: Thu, 5 Nov 2009 18:39:13 -0600 Message-ID: In-Reply-To: <3C6F21684E7C954193E6C7C4573B762703676D7FCE@IMCMBX1.MITRE.ORG> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcpeZtIVuNWrTGm6Rq6EZWyTq8GaggAAFI4gAAI8l1AAAd33sA== References: <3C6F21684E7C954193E6C7C4573B762703676D7FCE@IMCMBX1.MITRE.ORG> From: "Hemant Singh (shemant)" To: "Dunn, Jeffrey H." , "Fred Baker (fred)" , "Erik Nordmark" , "Hesham Soliman" , =?UTF-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= , "Thomas Narten" , "Susan Thomson (sethomso)" , X-OriginalArrivalTime: 06 Nov 2009 00:39:14.0211 (UTC) FILETIME=[90841730:01CA5E79] X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: 6man-ads@tools.ietf.org, IETF IPv6 Mailing List , savi-ads@tools.ietf.org, IPv6 Operations , v6ops-ads@tools.ietf.org, Robin Mersh , SAVI Mailing List Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 00:38:54 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01CA5E79.90B310CA Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 Q291bGQgYmUgVkxBTiBsaWtlIG9uZSBoYXMgTDIgVlBOIGluIHRoZSBjYWJsZSBzcGVjaWZpY2F0 aW9ucy4gICBCdXQgTDIgVlBOIHdpbGwgbGltaXQgb25lIHRvICAxMDI0IG1heCBwZXIgY2FibGUg bGluZSBjYXJkIG9uIGEgIENNVFMg4oCTIGl04oCZcyBhIHZlcnkgbGltaXRlZCBmb3Igc2Vydmlj ZXMgYXJjaCBpbiBjYWJsZSBhbmQgSSBkb27igJl0IHRoaW5rIGRlcGxveWVkIHZlcnkgd2lkZWx5 LiAgVGhlIHBvaW50IGlzIGEgY2FibGUgbW9kZW0gcmVjZWl2ZXIgY2hpcCBpcyBidWlsdCB0byBz ZW5kIGl0cyB1cHN0cmVhbSBkYXRhIG9ubHkgdG8gdGhlIENNVFMgYW5kIGxpa2V3aXNlIHJlY2Vp dmUgZGF0YSBmcm9tIHRoZSBDTVRTIOKAkyBzbyBob3cgY2FuIHR3byBtb2RlbXMgZXZlbiB0YWxr IHRvIGVhY2ggb3RoZXI/ICAgDQoNCiANCg0KVGhlIGxpbmstbG9jYWwgZG9tYWluIG9uIHRoZSBD TVRTIGlzIGFsc28gYSB3ZWxsLWRlZmluZWQgYW5kIHRpZWQgdG8gYSB2aXJ0dWFsIEwzIG5ldHdv cmsgaW50ZXJmYWNlIHRoYXQgYWdncmVnYXRlcyBzZXZlcmFsIHBoeXNpY2FsIGNhYmxlIG5ldHdv cmsgaW50ZXJmYWNlcyBhbmQgYWxsIHRoZSBtb2RlbXMuICBBcyBvZiBGYWxsIDIwMDcsIENhYmxl TGFicyBpbiB0aGUgVS5TLiB0aGF0IGNlcnRpZmllcyBDTVRTIGFuZCBDTSBlcXVpcG1lbnQgaGFz IGNlcnRpZmllZCBtb3JlIHRoYW4gb25lIENNVFMgdmVuZG9yIGZvciBEb2NzaXMgMy4wIElQdjYg d2l0aCBORCBQcm94eSBzdXBwb3J0IG9uIHRoZSBDTVRTLg0KDQogDQoNCkkgd2lsbCBiZSBpbiBI aXJvc2hpbWEsIHNvIGlmIGFueW9uZSB3b3VsZCBsaWtlIHRvIHVuZGVyc3RhbmQgdGhlIGNhYmxl IGFuZCBDTVRTIGxpbmstbG9jYWwgbW9kZWwgYW5kIG1jYXN0IGZvciBORCBpbiBjYWJsZSwgIHBs ZWFzZSBmaW5kIG1lIOKAkyBJIGFtIGhhbmdpbmcgb3V0IGluIDZtYW4sIHY2b3BzLCBJTlQgYXJl YSBhbmQgdGhlIGxpa2UuDQoNCiANCg0KUmVnYXJkcywNCg0KIA0KDQpIZW1hbnQNCg0KIA0KDQpG cm9tOiBEdW5uLCBKZWZmcmV5IEguIFttYWlsdG86amR1bm5AbWl0cmUub3JnXSANClNlbnQ6IFRo dXJzZGF5LCBOb3ZlbWJlciAwNSwgMjAwOSA2OjM1IFBNDQpUbzogSGVtYW50IFNpbmdoIChzaGVt YW50KTsgRnJlZCBCYWtlciAoZnJlZCk7IEVyaWsgTm9yZG1hcms7IEhlc2hhbSBTb2xpbWFuOyBK SU5NRUkgVGF0dXlhIC8g56We5piO6YGU5ZOJOyBUaG9tYXMgTmFydGVuOyBTdXNhbiBUaG9tc29u IChzZXRob21zbyk7IHdpbGxpYW0uYWxsZW4uc2ltcHNvbkBnbWFpbC5jb20NCkNjOiA2bWFuLWFk c0B0b29scy5pZXRmLm9yZzsgSUVURiBJUHY2IE1haWxpbmcgTGlzdDsgc2F2aS1hZHNAdG9vbHMu aWV0Zi5vcmc7IFJvYmluIE1lcnNoOyB2Nm9wcy1hZHNAdG9vbHMuaWV0Zi5vcmc7IElQdjYgT3Bl cmF0aW9uczsgU0FWSSBNYWlsaW5nIExpc3Q7IER1bm4sIEplZmZyZXkgSC4NClN1YmplY3Q6IFJF OiBCcm9hZGJhbmQgRm9ydW0gbGlhaXNvbiB0byBJRVRGIG9uIElQdjYgc2VjdXJpdHkNCg0KIA0K DQpDb2xsZWFndWVzLA0KDQogDQoNCkkgbWF5IGJlIG1pc3Npbmcgc29tZXRoaW5nLCBidXQgaXQg YXBwZWFycyB0aGF0LCBpbiB0aGUgY2FzZXMgZGVzY3JpYmVkLCB0aGUgdHdvIGhvc3RzIGRvd25z dHJlYW0gb2YgdHdvIHNlcGFyYXRlIGNhYmxlIG1vZGVtcyBhcmUgb2ZmIGxpbmsgdG8gZWFjaCBv dGhlci4gVGhpcyBicmluZ3MgdXAgdGhlIHF1ZXN0aW9uOiBEbyB0aGVyZSB0d28gY2FibGUgbW9k ZW1zIGNvbnN0aXR1dGUgdHdvIHZpcnR1YWwgaW50ZXJmYWNlcywgbGlrZSB0d28gVkxBTnMgb24g dGhlIHNhbWUgcGh5c2ljYWwgcm91dGVyIGludGVyZmFjZT8gSWYgc28sIHRoaXMgaXMgYW4gYXJj aGl0ZWN0dXJhbCwgcmF0aGVyIHRoYW4gYW4gaW1wbGVtZW50YXRpb24sIHF1ZXN0aW9uLiBUaG91 Z2h0cz8NCg0KIA0KDQpCZXN0IFJlZ2FyZHMsIA0KICANCkplZmZyZXkgRHVubiANCkluZm8gU3lz dGVtcyBFbmcuLCBMZWFkIA0KTUlUUkUgQ29ycG9yYXRpb24uDQoNCigzMDEpIDQ0OC02OTY1ICht b2JpbGUpDQoNCiANCg0KIA0KDQo= ------_=_NextPart_001_01CA5E79.90B310CA Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9z b2Z0LWNvbTpvZmZpY2U6ZXhjZWwiIHhtbG5zOnA9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206 b2ZmaWNlOnBvd2VycG9pbnQiIHhtbG5zOmE9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2Zm aWNlOmFjY2VzcyIgeG1sbnM6ZHQ9InV1aWQ6QzJGNDEwMTAtNjVCMy0xMWQxLUEyOUYtMDBBQTAw QzE0ODgyIiB4bWxuczpzPSJ1dWlkOkJEQzZFM0YwLTZEQTMtMTFkMS1BMkEzLTAwQUEwMEMxNDg4 MiIgeG1sbnM6cnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206cm93c2V0IiB4bWxuczp6PSIj Um93c2V0U2NoZW1hIiB4bWxuczpiPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpw dWJsaXNoZXIiIHhtbG5zOnNzPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpzcHJl YWRzaGVldCIgeG1sbnM6Yz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6Y29tcG9u ZW50OnNwcmVhZHNoZWV0IiB4bWxuczpvZGM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2Zm aWNlOm9kYyIgeG1sbnM6b2E9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOmFjdGl2 YXRpb24iIHhtbG5zOmh0bWw9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiIHhtbG5z OnE9Imh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3NvYXAvZW52ZWxvcGUvIiB4bWxuczpydGM9 Imh0dHA6Ly9taWNyb3NvZnQuY29tL29mZmljZW5ldC9jb25mZXJlbmNpbmciIHhtbG5zOkQ9IkRB VjoiIHhtbG5zOlJlcGw9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vcmVwbC8iIHhtbG5z Om10PSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29hcC9tZWV0aW5n cy8iIHhtbG5zOngyPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS9leGNlbC8y MDAzL3htbCIgeG1sbnM6cHBkYT0iaHR0cDovL3d3dy5wYXNzcG9ydC5jb20vTmFtZVNwYWNlLnhz ZCIgeG1sbnM6b2lzPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29h cC9vaXMvIiB4bWxuczpkaXI9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2lu dC9zb2FwL2RpcmVjdG9yeS8iIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3ht bGRzaWcjIiB4bWxuczpkc3A9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2lu dC9kc3AiIHhtbG5zOnVkYz0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9kYXRhL3VkYyIg eG1sbnM6eHNkPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6c3ViPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29hcC8yMDAyLzEvYWxlcnRz LyIgeG1sbnM6ZWM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jIyIgeG1sbnM6c3A9 Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2ludC8iIHhtbG5zOnNwcz0iaHR0 cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvIiB4bWxuczp4c2k9Imh0 dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp1ZGNzPSJodHRw Oi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2RhdGEvdWRjL3NvYXAiIHhtbG5zOnVkY3hmPSJodHRw Oi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2RhdGEvdWRjL3htbGZpbGUiIHhtbG5zOnVkY3AycD0i aHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9kYXRhL3VkYy9wYXJ0dG9wYXJ0IiB4bWxuczp3 Zj0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvd29ya2Zsb3cv IiB4bWxuczpkc3NzPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA2L2Rp Z3NpZy1zZXR1cCIgeG1sbnM6ZHNzaT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZp Y2UvMjAwNi9kaWdzaWciIHhtbG5zOm1kc3NpPSJodHRwOi8vc2NoZW1hcy5vcGVueG1sZm9ybWF0 cy5vcmcvcGFja2FnZS8yMDA2L2RpZ2l0YWwtc2lnbmF0dXJlIiB4bWxuczptdmVyPSJodHRwOi8v c2NoZW1hcy5vcGVueG1sZm9ybWF0cy5vcmcvbWFya3VwLWNvbXBhdGliaWxpdHkvMjAwNiIgeG1s bnM6bT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4 bWxuczptcmVscz0iaHR0cDovL3NjaGVtYXMub3BlbnhtbGZvcm1hdHMub3JnL3BhY2thZ2UvMjAw Ni9yZWxhdGlvbnNoaXBzIiB4bWxuczpzcHdwPSJodHRwOi8vbWljcm9zb2Z0LmNvbS9zaGFyZXBv aW50L3dlYnBhcnRwYWdlcyIgeG1sbnM6ZXgxMnQ9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5j b20vZXhjaGFuZ2Uvc2VydmljZXMvMjAwNi90eXBlcyIgeG1sbnM6ZXgxMm09Imh0dHA6Ly9zY2hl bWFzLm1pY3Jvc29mdC5jb20vZXhjaGFuZ2Uvc2VydmljZXMvMjAwNi9tZXNzYWdlcyIgeG1sbnM6 cHB0c2w9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2ludC9zb2FwL1NsaWRl TGlicmFyeS8iIHhtbG5zOnNwc2w9Imh0dHA6Ly9taWNyb3NvZnQuY29tL3dlYnNlcnZpY2VzL1No YXJlUG9pbnRQb3J0YWxTZXJ2ZXIvUHVibGlzaGVkTGlua3NTZXJ2aWNlIiB4bWxuczpaPSJ1cm46 c2NoZW1hcy1taWNyb3NvZnQtY29tOiIgeG1sbnM6c3Q9IiYjMTsiIHhtbG5zPSJodHRwOi8vd3d3 LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCg0KPGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PUNvbnRl bnQtVHlwZSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1ldGEgbmFtZT1H ZW5lcmF0b3IgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0K PHN0eWxlPg0KPCEtLQ0KIC8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCiBAZm9udC1mYWNlDQoJe2Zv bnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAyIDQ7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAy IDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9z ZS0xOjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Ik1T IFVJIEdvdGhpYyI7DQoJcGFub3NlLTE6MiAxMSA2IDAgNyAyIDUgOCAyIDQ7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiXEBNUyBVSSBHb3RoaWMiOw0KCXBhbm9zZS0xOjIgMTEgNiAwIDcg MiA1IDggMiA0O30NCiAvKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KIHAuTXNvTm9ybWFsLCBsaS5N c29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFu Iiwic2VyaWYiO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnNwYW4uYXBw bGUtc3R5bGUtc3Bhbg0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1zdHlsZS1zcGFuO30NCnNwYW4u RW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUx OQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJv bWFuIiwic2VyaWYiOw0KCWNvbG9yOmJsYWNrO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21zby1z dHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1z ZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlw ZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFNlY3Rpb24xDQoJe3Np emU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYu U2VjdGlvbjENCgl7cGFnZTpTZWN0aW9uMTt9DQotLT4NCjwvc3R5bGU+DQo8IS0tW2lmIGd0ZSBt c28gOV0+PHhtbD4NCiA8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2 IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQogPG86c2hh cGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KICA8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIg Lz4NCiA8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQoNCjxib2R5 IGxhbmc9RU4tVVMgbGluaz1ibHVlIHZsaW5rPXB1cnBsZSBzdHlsZT0nd29yZC13cmFwOiBicmVh ay13b3JkOw0KLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOy13ZWJraXQtbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2UnPg0KDQo8ZGl2IGNsYXNzPVNlY3Rpb24xPg0KDQo8cCBjbGFzcz1Nc29O b3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjsNCmNvbG9yOiMxRjQ5N0QnPkNvdWxkIGJlIFZMQU4gbGlrZSBvbmUgaGFz IEwyIFZQTiBpbiB0aGUgY2FibGUgc3BlY2lmaWNhdGlvbnMuwqAgwqBCdXQNCkwyIFZQTiB3aWxs IGxpbWl0IG9uZSB0byDCoDEwMjQgbWF4IHBlciBjYWJsZSBsaW5lIGNhcmQgb24gYcKgIENNVFMg 4oCTIGl04oCZcyBhIHZlcnkNCmxpbWl0ZWQgZm9yIHNlcnZpY2VzIGFyY2ggaW4gY2FibGUgYW5k IEkgZG9u4oCZdCB0aGluayBkZXBsb3llZCB2ZXJ5IHdpZGVseS7CoCBUaGUNCnBvaW50IGlzIGEg Y2FibGUgbW9kZW0gcmVjZWl2ZXIgY2hpcCBpcyBidWlsdCB0byBzZW5kIGl0cyB1cHN0cmVhbSBk YXRhIG9ubHkgdG8NCnRoZSBDTVRTIGFuZCBsaWtld2lzZSByZWNlaXZlIGRhdGEgZnJvbSB0aGUg Q01UUyDigJMgc28gaG93IGNhbiB0d28gbW9kZW1zIGV2ZW4NCnRhbGsgdG8gZWFjaCBvdGhlcj/C oMKgIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7 DQpjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQoNCjxwIGNsYXNz PU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2Fs aWJyaSIsInNhbnMtc2VyaWYiOw0KY29sb3I6IzFGNDk3RCc+VGhlIGxpbmstbG9jYWwgZG9tYWlu IG9uIHRoZSBDTVRTIGlzIGFsc28gYSB3ZWxsLWRlZmluZWQgYW5kDQp0aWVkIHRvIGEgdmlydHVh bCBMMyBuZXR3b3JrIGludGVyZmFjZSB0aGF0IGFnZ3JlZ2F0ZXMgc2V2ZXJhbCBwaHlzaWNhbCBj YWJsZQ0KbmV0d29yayBpbnRlcmZhY2VzIGFuZCBhbGwgdGhlIG1vZGVtcy7CoCBBcyBvZiBGYWxs IDIwMDcsIENhYmxlTGFicyBpbiB0aGUgVS5TLg0KdGhhdCBjZXJ0aWZpZXMgQ01UUyBhbmQgQ00g ZXF1aXBtZW50IGhhcyBjZXJ0aWZpZWQgbW9yZSB0aGFuIG9uZSBDTVRTIHZlbmRvcg0KZm9yIERv Y3NpcyAzLjAgSVB2NiB3aXRoIE5EIFByb3h5IHN1cHBvcnQgb24gdGhlIENNVFMuPG86cD48L286 cD48L3NwYW4+PC9wPg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCmNvbG9yOiMxRjQ5 N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1z ZXJpZiI7DQpjb2xvcjojMUY0OTdEJz5JIHdpbGwgYmUgaW4gSGlyb3NoaW1hLCBzbyBpZiBhbnlv bmUgd291bGQgbGlrZSB0byB1bmRlcnN0YW5kDQp0aGUgY2FibGUgYW5kIENNVFMgbGluay1sb2Nh bCBtb2RlbCBhbmQgbWNhc3QgZm9yIE5EIGluIGNhYmxlLCDCoHBsZWFzZSBmaW5kIG1lIOKAkw0K SSBhbSBoYW5naW5nIG91dCBpbiA2bWFuLCB2Nm9wcywgSU5UIGFyZWEgYW5kIHRoZSBsaWtlLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQpjb2xv cjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQoNCjxwIGNsYXNzPU1zb05v cm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiOw0KY29sb3I6IzFGNDk3RCc+UmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KY29sb3I6IzFGNDk3RCc+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCmNv bG9yOiMxRjQ5N0QnPkhlbWFudDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCg0KPHAgY2xhc3M9TXNv Tm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJp Iiwic2Fucy1zZXJpZiI7DQpjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQoNCjxkaXY+DQoNCjxkaXYgc3R5bGU9J2JvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluJz4NCg0KPHAgY2xhc3M9TXNv Tm9ybWFsPjxiPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJUYWhv bWEiLCJzYW5zLXNlcmlmIic+RnJvbTo8L3NwYW4+PC9iPjxzcGFuDQpzdHlsZT0nZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiInPiBEdW5uLCBKZWZmcmV5 IEguDQpbbWFpbHRvOmpkdW5uQG1pdHJlLm9yZ10gPGJyPg0KPGI+U2VudDo8L2I+IFRodXJzZGF5 LCBOb3ZlbWJlciAwNSwgMjAwOSA2OjM1IFBNPGJyPg0KPGI+VG86PC9iPiBIZW1hbnQgU2luZ2gg KHNoZW1hbnQpOyBGcmVkIEJha2VyIChmcmVkKTsgRXJpayBOb3JkbWFyazsgSGVzaGFtDQpTb2xp bWFuOyBKSU5NRUkgVGF0dXlhIC8gPC9zcGFuPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiJNUyBVSSBHb3RoaWMiLCJzYW5zLXNlcmlmIic+56We5piO6YGU5ZOJPC9z cGFuPjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiVGFob21hIiwi c2Fucy1zZXJpZiInPjsgVGhvbWFzIE5hcnRlbjsNClN1c2FuIFRob21zb24gKHNldGhvbXNvKTsg d2lsbGlhbS5hbGxlbi5zaW1wc29uQGdtYWlsLmNvbTxicj4NCjxiPkNjOjwvYj4gNm1hbi1hZHNA dG9vbHMuaWV0Zi5vcmc7IElFVEYgSVB2NiBNYWlsaW5nIExpc3Q7DQpzYXZpLWFkc0B0b29scy5p ZXRmLm9yZzsgUm9iaW4gTWVyc2g7IHY2b3BzLWFkc0B0b29scy5pZXRmLm9yZzsgSVB2Ng0KT3Bl cmF0aW9uczsgU0FWSSBNYWlsaW5nIExpc3Q7IER1bm4sIEplZmZyZXkgSC48YnI+DQo8Yj5TdWJq ZWN0OjwvYj4gUkU6IEJyb2FkYmFuZCBGb3J1bSBsaWFpc29uIHRvIElFVEYgb24gSVB2NiBzZWN1 cml0eTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCg0KPC9kaXY+DQoNCjwvZGl2Pg0KDQo8cCBjbGFz cz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286cD48L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48 c3BhbiBzdHlsZT0nY29sb3I6YmxhY2snPkNvbGxlYWd1ZXMsPG86cD48L286cD48L3NwYW4+PC9w Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2NvbG9yOmJsYWNrJz48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Y29sb3I6YmxhY2snPkkgbWF5IGJlIG1pc3Npbmcgc29tZXRoaW5nLCBidXQgaXQNCmFwcGVhcnMg dGhhdCwgaW4gdGhlIGNhc2VzIGRlc2NyaWJlZCwgdGhlIHR3byBob3N0cyBkb3duc3RyZWFtIG9m IHR3byBzZXBhcmF0ZQ0KY2FibGUgbW9kZW1zIGFyZSBvZmYgbGluayB0byBlYWNoIG90aGVyLiBU aGlzIGJyaW5ncyB1cCB0aGUgcXVlc3Rpb246IERvIHRoZXJlIHR3bw0KY2FibGUgbW9kZW1zIGNv bnN0aXR1dGUgdHdvIHZpcnR1YWwgaW50ZXJmYWNlcywgbGlrZSB0d28gVkxBTnMgb24gdGhlIHNh bWUNCnBoeXNpY2FsIHJvdXRlciBpbnRlcmZhY2U/IElmIHNvLCB0aGlzIGlzIGFuIGFyY2hpdGVj dHVyYWwsIHJhdGhlciB0aGFuIGFuDQppbXBsZW1lbnRhdGlvbiwgcXVlc3Rpb24uIFRob3VnaHRz PzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxl PSdjb2xvcjpibGFjayc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KDQo8ZGl2Pg0KDQo8 cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2NvbG9yOmJsYWNrJz5CZXN0IFJlZ2FyZHMs IDxicj4NCiZuYnNwOyA8YnI+DQpKZWZmcmV5IER1bm4gPGJyPg0KSW5mbyBTeXN0ZW1zIEVuZy4s IExlYWQgPGJyPg0KTUlUUkUgQ29ycG9yYXRpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0KDQo8 cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2NvbG9yOmJsYWNrJz4oMzAxKSA0NDgtNjk2 NSAobW9iaWxlKTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCg0KPC9kaXY+DQoNCjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nY29sb3I6YmxhY2snPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCg0KPGRpdj4NCg0KPGRpdj4NCg0KPGRpdj4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNv Tm9ybWFsIHN0eWxlPSdtYXJnaW4tYm90dG9tOjEyLjBwdCc+PG86cD4mbmJzcDs8L286cD48L3A+ DQoNCjwvZGl2Pg0KDQo8L2Rpdj4NCg0KPC9kaXY+DQoNCjwvZGl2Pg0KDQo8L2Rpdj4NCg0KPC9i b2R5Pg0KDQo8L2h0bWw+DQo= ------_=_NextPart_001_01CA5E79.90B310CA-- From jdunn@mitre.org Thu Nov 5 16:49:48 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A5F6C3A692E; Thu, 5 Nov 2009 16:49:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.803 X-Spam-Level: X-Spam-Status: No, score=-5.803 tagged_above=-999 required=5 tests=[AWL=-0.105, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_13=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tCyjO+NgKy-n; Thu, 5 Nov 2009 16:49:47 -0800 (PST) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id 1B82B3A6928; Thu, 5 Nov 2009 16:49:47 -0800 (PST) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA60o8mX001530; Thu, 5 Nov 2009 19:50:10 -0500 Received: from imchub2.MITRE.ORG (imchub2.mitre.org [129.83.29.74]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA60o8co001527; Thu, 5 Nov 2009 19:50:08 -0500 Received: from IMCMBX1.MITRE.ORG ([129.83.29.204]) by imchub2.MITRE.ORG ([129.83.29.74]) with mapi; Thu, 5 Nov 2009 19:50:07 -0500 From: "Dunn, Jeffrey H." To: "Hemant Singh (shemant)" , "Fred Baker (fred)" , Erik Nordmark , Hesham Soliman , =?utf-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= , Thomas Narten , "Susan Thomson (sethomso)" , "william.allen.simpson@gmail.com" Date: Thu, 5 Nov 2009 19:50:10 -0500 Thread-Topic: Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcpeZtIVuNWrTGm6Rq6EZWyTq8GaggAAFI4gAAI8l1AAAd33sAAAtz6A Message-ID: <3C6F21684E7C954193E6C7C4573B762703676D7FE4@IMCMBX1.MITRE.ORG> References: <3C6F21684E7C954193E6C7C4573B762703676D7FCE@IMCMBX1.MITRE.ORG> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/alternative; boundary="_000_3C6F21684E7C954193E6C7C4573B762703676D7FE4IMCMBX1MITREO_" MIME-Version: 1.0 X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, List , IETF, "savi-ads@tools.ietf.org" , IPv6 Operations , "v6ops-ads@tools.ietf.org" , SAVI, Robin Mersh , Mailing List , "Dunn, Jeffrey H." Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 00:49:48 -0000 --_000_3C6F21684E7C954193E6C7C4573B762703676D7FE4IMCMBX1MITREO_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVtYW50LA0KDQpUaGF0IGlzIGZpbmUgaWYgb25seSBob3N0cyBhcmUgY29ubmVjdGVkIHRvIHRo ZSBDTS4gSWYgdGhlIENNIGlzIGNvbm5lY3RlZCB0byBhIGNoZWFwIENQRSByb3V0ZXIsIHRoZW4g dGhlIHJvdXRlciBzZWVuIHRoZSBDTSBvbiBvbmUgbGluayAoaXRzIGRlZmF1bHQgcm91dGUgb3V0 KSBhbmQgdGhlIGhvc3RzIGF0dGFjaGVkIHRvIGl0IG9uIG90aGVyIGxpbmtzLiBJbiB0aGUgY2Fz ZSB3aGVyZSB0aGVyZSBhcmUgaG9zdHMgY29ubmVjdGVkIHRvIGFuIGludGVncmF0ZWQgRXRoZXJu ZXQgaHViIGFuZCB2aWEgV2lGaSwgdGhlcmUgd2lsbCBiZSB0d28gZG93bnN0cmVhbSBicm9hZGNh c3QgZG9tYWlucyBpbiB0aGUgaG9tZSB0aGF0IGNhbm5vdCBoZWFyIGVhY2ggb3RoZXLigJlzIE5E IG1lc3NhZ2VzLiBBcyBhIHJlc3VsdCwgZm9yIFNMQUFDIHRvIHdvcmssIHRoZSBjaGVhcCBDUEUg cm91dGVyIG11c3QgaGF2ZSB0d28gLzY0IHByZWZpeGVzIGFzc2lnbmVkIHRvIGl0IG9yIGEgLzYz IGFzc2lnbmVkIHRvIHRoZSBDTVRTIHZpcnR1YWwgaW50ZXJmYWNlIGNvbm5lY3RlZCB0byB0aGUg Q00uDQoNCkFtIEkgbWlzc2luZyBzb21ldGhpbmc/DQoNCkJlc3QgUmVnYXJkcywNCg0KSmVmZnJl eSBEdW5uDQpJbmZvIFN5c3RlbXMgRW5nLiwgTGVhZA0KTUlUUkUgQ29ycG9yYXRpb24uDQooMzAx KSA0NDgtNjk2NSAobW9iaWxlKQ0KDQpGcm9tOiBIZW1hbnQgU2luZ2ggKHNoZW1hbnQpIFttYWls dG86c2hlbWFudEBjaXNjby5jb21dDQpTZW50OiBUaHVyc2RheSwgTm92ZW1iZXIgMDUsIDIwMDkg NzozOSBQTQ0KVG86IER1bm4sIEplZmZyZXkgSC47IEZyZWQgQmFrZXIgKGZyZWQpOyBFcmlrIE5v cmRtYXJrOyBIZXNoYW0gU29saW1hbjsgSklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiTsgVGhv bWFzIE5hcnRlbjsgU3VzYW4gVGhvbXNvbiAoc2V0aG9tc28pOyB3aWxsaWFtLmFsbGVuLnNpbXBz b25AZ21haWwuY29tDQpDYzogNm1hbi1hZHNAdG9vbHMuaWV0Zi5vcmc7IElFVEYgSVB2NiBNYWls aW5nIExpc3Q7IHNhdmktYWRzQHRvb2xzLmlldGYub3JnOyBSb2JpbiBNZXJzaDsgdjZvcHMtYWRz QHRvb2xzLmlldGYub3JnOyBJUHY2IE9wZXJhdGlvbnM7IFNBVkkgTWFpbGluZyBMaXN0DQpTdWJq ZWN0OiBSRTogQnJvYWRiYW5kIEZvcnVtIGxpYWlzb24gdG8gSUVURiBvbiBJUHY2IHNlY3VyaXR5 DQoNCkNvdWxkIGJlIFZMQU4gbGlrZSBvbmUgaGFzIEwyIFZQTiBpbiB0aGUgY2FibGUgc3BlY2lm aWNhdGlvbnMuICAgQnV0IEwyIFZQTiB3aWxsIGxpbWl0IG9uZSB0byAgMTAyNCBtYXggcGVyIGNh YmxlIGxpbmUgY2FyZCBvbiBhICBDTVRTIOKAkyBpdOKAmXMgYSB2ZXJ5IGxpbWl0ZWQgZm9yIHNl cnZpY2VzIGFyY2ggaW4gY2FibGUgYW5kIEkgZG9u4oCZdCB0aGluayBkZXBsb3llZCB2ZXJ5IHdp ZGVseS4gIFRoZSBwb2ludCBpcyBhIGNhYmxlIG1vZGVtIHJlY2VpdmVyIGNoaXAgaXMgYnVpbHQg dG8gc2VuZCBpdHMgdXBzdHJlYW0gZGF0YSBvbmx5IHRvIHRoZSBDTVRTIGFuZCBsaWtld2lzZSBy ZWNlaXZlIGRhdGEgZnJvbSB0aGUgQ01UUyDigJMgc28gaG93IGNhbiB0d28gbW9kZW1zIGV2ZW4g dGFsayB0byBlYWNoIG90aGVyPw0KDQpUaGUgbGluay1sb2NhbCBkb21haW4gb24gdGhlIENNVFMg aXMgYWxzbyBhIHdlbGwtZGVmaW5lZCBhbmQgdGllZCB0byBhIHZpcnR1YWwgTDMgbmV0d29yayBp bnRlcmZhY2UgdGhhdCBhZ2dyZWdhdGVzIHNldmVyYWwgcGh5c2ljYWwgY2FibGUgbmV0d29yayBp bnRlcmZhY2VzIGFuZCBhbGwgdGhlIG1vZGVtcy4gIEFzIG9mIEZhbGwgMjAwNywgQ2FibGVMYWJz IGluIHRoZSBVLlMuIHRoYXQgY2VydGlmaWVzIENNVFMgYW5kIENNIGVxdWlwbWVudCBoYXMgY2Vy dGlmaWVkIG1vcmUgdGhhbiBvbmUgQ01UUyB2ZW5kb3IgZm9yIERvY3NpcyAzLjAgSVB2NiB3aXRo IE5EIFByb3h5IHN1cHBvcnQgb24gdGhlIENNVFMuDQoNCkkgd2lsbCBiZSBpbiBIaXJvc2hpbWEs IHNvIGlmIGFueW9uZSB3b3VsZCBsaWtlIHRvIHVuZGVyc3RhbmQgdGhlIGNhYmxlIGFuZCBDTVRT IGxpbmstbG9jYWwgbW9kZWwgYW5kIG1jYXN0IGZvciBORCBpbiBjYWJsZSwgIHBsZWFzZSBmaW5k IG1lIOKAkyBJIGFtIGhhbmdpbmcgb3V0IGluIDZtYW4sIHY2b3BzLCBJTlQgYXJlYSBhbmQgdGhl IGxpa2UuDQoNClJlZ2FyZHMsDQoNCkhlbWFudA0KDQpGcm9tOiBEdW5uLCBKZWZmcmV5IEguIFtt YWlsdG86amR1bm5AbWl0cmUub3JnXQ0KU2VudDogVGh1cnNkYXksIE5vdmVtYmVyIDA1LCAyMDA5 IDY6MzUgUE0NClRvOiBIZW1hbnQgU2luZ2ggKHNoZW1hbnQpOyBGcmVkIEJha2VyIChmcmVkKTsg RXJpayBOb3JkbWFyazsgSGVzaGFtIFNvbGltYW47IEpJTk1FSSBUYXR1eWEgLyDnpZ7mmI7pgZTl k4k7IFRob21hcyBOYXJ0ZW47IFN1c2FuIFRob21zb24gKHNldGhvbXNvKTsgd2lsbGlhbS5hbGxl bi5zaW1wc29uQGdtYWlsLmNvbQ0KQ2M6IDZtYW4tYWRzQHRvb2xzLmlldGYub3JnOyBJRVRGIElQ djYgTWFpbGluZyBMaXN0OyBzYXZpLWFkc0B0b29scy5pZXRmLm9yZzsgUm9iaW4gTWVyc2g7IHY2 b3BzLWFkc0B0b29scy5pZXRmLm9yZzsgSVB2NiBPcGVyYXRpb25zOyBTQVZJIE1haWxpbmcgTGlz dDsgRHVubiwgSmVmZnJleSBILg0KU3ViamVjdDogUkU6IEJyb2FkYmFuZCBGb3J1bSBsaWFpc29u IHRvIElFVEYgb24gSVB2NiBzZWN1cml0eQ0KDQpDb2xsZWFndWVzLA0KDQpJIG1heSBiZSBtaXNz aW5nIHNvbWV0aGluZywgYnV0IGl0IGFwcGVhcnMgdGhhdCwgaW4gdGhlIGNhc2VzIGRlc2NyaWJl ZCwgdGhlIHR3byBob3N0cyBkb3duc3RyZWFtIG9mIHR3byBzZXBhcmF0ZSBjYWJsZSBtb2RlbXMg YXJlIG9mZiBsaW5rIHRvIGVhY2ggb3RoZXIuIFRoaXMgYnJpbmdzIHVwIHRoZSBxdWVzdGlvbjog RG8gdGhlcmUgdHdvIGNhYmxlIG1vZGVtcyBjb25zdGl0dXRlIHR3byB2aXJ0dWFsIGludGVyZmFj ZXMsIGxpa2UgdHdvIFZMQU5zIG9uIHRoZSBzYW1lIHBoeXNpY2FsIHJvdXRlciBpbnRlcmZhY2U/ IElmIHNvLCB0aGlzIGlzIGFuIGFyY2hpdGVjdHVyYWwsIHJhdGhlciB0aGFuIGFuIGltcGxlbWVu dGF0aW9uLCBxdWVzdGlvbi4gVGhvdWdodHM/DQoNCkJlc3QgUmVnYXJkcywNCg0KSmVmZnJleSBE dW5uDQpJbmZvIFN5c3RlbXMgRW5nLiwgTGVhZA0KTUlUUkUgQ29ycG9yYXRpb24uDQooMzAxKSA0 NDgtNjk2NSAobW9iaWxlKQ0KDQoNCg== --_000_3C6F21684E7C954193E6C7C4573B762703676D7FE4IMCMBX1MITREO_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9z b2Z0LWNvbTpvZmZpY2U6ZXhjZWwiIHhtbG5zOnA9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206 b2ZmaWNlOnBvd2VycG9pbnQiIHhtbG5zOmE9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2Zm aWNlOmFjY2VzcyIgeG1sbnM6ZHQ9InV1aWQ6QzJGNDEwMTAtNjVCMy0xMWQxLUEyOUYtMDBBQTAw QzE0ODgyIiB4bWxuczpzPSJ1dWlkOkJEQzZFM0YwLTZEQTMtMTFkMS1BMkEzLTAwQUEwMEMxNDg4 MiIgeG1sbnM6cnM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206cm93c2V0IiB4bWxuczp6PSIj Um93c2V0U2NoZW1hIiB4bWxuczpiPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpw dWJsaXNoZXIiIHhtbG5zOnNzPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpzcHJl YWRzaGVldCIgeG1sbnM6Yz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6Y29tcG9u ZW50OnNwcmVhZHNoZWV0IiB4bWxuczpvZGM9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2Zm aWNlOm9kYyIgeG1sbnM6b2E9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOmFjdGl2 YXRpb24iIHhtbG5zOmh0bWw9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiIHhtbG5z OnE9Imh0dHA6Ly9zY2hlbWFzLnhtbHNvYXAub3JnL3NvYXAvZW52ZWxvcGUvIiB4bWxuczpydGM9 Imh0dHA6Ly9taWNyb3NvZnQuY29tL29mZmljZW5ldC9jb25mZXJlbmNpbmciIHhtbG5zOkQ9IkRB VjoiIHhtbG5zOlJlcGw9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vcmVwbC8iIHhtbG5z Om10PSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29hcC9tZWV0aW5n cy8iIHhtbG5zOngyPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS9leGNlbC8y MDAzL3htbCIgeG1sbnM6cHBkYT0iaHR0cDovL3d3dy5wYXNzcG9ydC5jb20vTmFtZVNwYWNlLnhz ZCIgeG1sbnM6b2lzPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29h cC9vaXMvIiB4bWxuczpkaXI9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2lu dC9zb2FwL2RpcmVjdG9yeS8iIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3ht bGRzaWcjIiB4bWxuczpkc3A9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2lu dC9kc3AiIHhtbG5zOnVkYz0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9kYXRhL3VkYyIg eG1sbnM6eHNkPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6c3ViPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL3NoYXJlcG9pbnQvc29hcC8yMDAyLzEvYWxlcnRz LyIgeG1sbnM6ZWM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jIyIgeG1sbnM6c3A9 Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2ludC8iIHhtbG5zOnNwcz0iaHR0 cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvIiB4bWxuczp4c2k9Imh0 dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp1ZGNzPSJodHRw Oi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2RhdGEvdWRjL3NvYXAiIHhtbG5zOnVkY3hmPSJodHRw Oi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL2RhdGEvdWRjL3htbGZpbGUiIHhtbG5zOnVkY3AycD0i aHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9kYXRhL3VkYy9wYXJ0dG9wYXJ0IiB4bWxuczp3 Zj0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9zaGFyZXBvaW50L3NvYXAvd29ya2Zsb3cv IiB4bWxuczpkc3NzPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA2L2Rp Z3NpZy1zZXR1cCIgeG1sbnM6ZHNzaT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZp Y2UvMjAwNi9kaWdzaWciIHhtbG5zOm1kc3NpPSJodHRwOi8vc2NoZW1hcy5vcGVueG1sZm9ybWF0 cy5vcmcvcGFja2FnZS8yMDA2L2RpZ2l0YWwtc2lnbmF0dXJlIiB4bWxuczptdmVyPSJodHRwOi8v c2NoZW1hcy5vcGVueG1sZm9ybWF0cy5vcmcvbWFya3VwLWNvbXBhdGliaWxpdHkvMjAwNiIgeG1s bnM6bT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4 bWxuczptcmVscz0iaHR0cDovL3NjaGVtYXMub3BlbnhtbGZvcm1hdHMub3JnL3BhY2thZ2UvMjAw Ni9yZWxhdGlvbnNoaXBzIiB4bWxuczpzcHdwPSJodHRwOi8vbWljcm9zb2Z0LmNvbS9zaGFyZXBv aW50L3dlYnBhcnRwYWdlcyIgeG1sbnM6ZXgxMnQ9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5j b20vZXhjaGFuZ2Uvc2VydmljZXMvMjAwNi90eXBlcyIgeG1sbnM6ZXgxMm09Imh0dHA6Ly9zY2hl bWFzLm1pY3Jvc29mdC5jb20vZXhjaGFuZ2Uvc2VydmljZXMvMjAwNi9tZXNzYWdlcyIgeG1sbnM6 cHB0c2w9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vc2hhcmVwb2ludC9zb2FwL1NsaWRl TGlicmFyeS8iIHhtbG5zOnNwc2w9Imh0dHA6Ly9taWNyb3NvZnQuY29tL3dlYnNlcnZpY2VzL1No YXJlUG9pbnRQb3J0YWxTZXJ2ZXIvUHVibGlzaGVkTGlua3NTZXJ2aWNlIiB4bWxuczpaPSJ1cm46 c2NoZW1hcy1taWNyb3NvZnQtY29tOiIgeG1sbnM6c3Q9IiYjMTsiIHhtbG5zPSJodHRwOi8vd3d3 LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCg0KPGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PUNvbnRl bnQtVHlwZSBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1ldGEgbmFtZT1H ZW5lcmF0b3IgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0K PHN0eWxlPg0KPCEtLQ0KIC8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCiBAZm9udC1mYWNlDQoJe2Zv bnQtZmFtaWx5OiJNUyBNaW5jaG8iOw0KCXBhbm9zZS0xOjIgMiA2IDkgNCAyIDUgOCAzIDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiTVMgTWluY2hvIjsNCglwYW5vc2UtMToyIDIgNiA5 IDQgMiA1IDggMyA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5v c2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRh aG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpAZm9udC1mYWNlDQoJe2Zv bnQtZmFtaWx5OiJcQE1TIE1pbmNobyI7DQoJcGFub3NlLTE6MiAyIDYgOSA0IDIgNSA4IDMgNDt9 DQogLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCiBwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBk aXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZv bnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLmFwcGxlLXN0eWxlLXNw YW4NCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtc3R5bGUtc3Bhbjt9DQpzcGFuLkVtYWlsU3R5bGUx OA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNh bnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0 eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlm IjsNCgljb2xvcjpibGFjazt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpw ZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMx RjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVw bHk7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjsNCgljb2xvcjpibGFj azt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250 LXNpemU6MTAuMHB0O30NCkBwYWdlIFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1h cmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuU2VjdGlvbjENCgl7cGFnZTpTZWN0 aW9uMTt9DQotLT4NCjwvc3R5bGU+DQo8IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCiA8bzpzaGFw ZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZd LS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQogPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQi Pg0KICA8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCiA8L286c2hhcGVsYXlvdXQ+ PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQoNCjxib2R5IGxhbmc9RU4tVVMgbGluaz1ibHVl IHZsaW5rPXB1cnBsZSBzdHlsZT0nd29yZC13cmFwOiBicmVhay13b3JkOw0KLXdlYmtpdC1uYnNw LW1vZGU6IHNwYWNlOy13ZWJraXQtbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3BhY2UnPg0KDQo8 ZGl2IGNsYXNzPVNlY3Rpb24xPg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGNv bG9yPWJsYWNrIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4NCnN0eWxlPSdmb250LXNpemU6 MTIuMHB0O2NvbG9yOmJsYWNrJz5IZW1hbnQsPG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4N Cg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MyBjb2xvcj1ibGFjayBmYWNlPSJUaW1l cyBOZXcgUm9tYW4iPjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayc+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFs Pjxmb250IHNpemU9MyBjb2xvcj1ibGFjayBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuDQpz dHlsZT0nZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayc+VGhhdCBpcyBmaW5lIGlmIG9ubHkg aG9zdHMgYXJlIGNvbm5lY3RlZA0KdG8gdGhlIENNLiBJZiB0aGUgQ00gaXMgY29ubmVjdGVkIHRv IGEgY2hlYXAgQ1BFIHJvdXRlciwgdGhlbiB0aGUgcm91dGVyIHNlZW4NCnRoZSBDTSBvbiBvbmUg bGluayAoaXRzIGRlZmF1bHQgcm91dGUgb3V0KSBhbmQgdGhlIGhvc3RzIGF0dGFjaGVkIHRvIGl0 IG9uDQpvdGhlciBsaW5rcy4gSW4gdGhlIGNhc2Ugd2hlcmUgdGhlcmUgYXJlIGhvc3RzIGNvbm5l Y3RlZCB0byBhbiBpbnRlZ3JhdGVkDQpFdGhlcm5ldCBodWIgYW5kIHZpYSBXaUZpLCB0aGVyZSB3 aWxsIGJlIHR3byBkb3duc3RyZWFtIGJyb2FkY2FzdCBkb21haW5zIGluDQp0aGUgaG9tZSB0aGF0 IGNhbm5vdCBoZWFyIGVhY2ggb3RoZXLigJlzIE5EIG1lc3NhZ2VzLiBBcyBhIHJlc3VsdCwgZm9y IFNMQUFDIHRvDQp3b3JrLCB0aGUgY2hlYXAgQ1BFIHJvdXRlciBtdXN0IGhhdmUgdHdvIC82NCBw cmVmaXhlcyBhc3NpZ25lZCB0byBpdCBvciBhIC82Mw0KYXNzaWduZWQgdG8gdGhlIENNVFMgdmly dHVhbCBpbnRlcmZhY2UgY29ubmVjdGVkIHRvIHRoZSBDTS48bzpwPjwvbzpwPjwvc3Bhbj48L2Zv bnQ+PC9wPg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGNvbG9yPWJsYWNrIGZh Y2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4NCnN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9y OmJsYWNrJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPg0KDQo8cCBjbGFzcz1N c29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGNvbG9yPWJsYWNrIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+ PHNwYW4NCnN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrJz5BbSBJIG1pc3Npbmcg c29tZXRoaW5nPzxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNsYXNzPU1zb05v cm1hbD48Zm9udCBzaXplPTMgY29sb3I9YmxhY2sgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3Bh bg0Kc3R5bGU9J2ZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2snPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvZm9udD48L3A+DQoNCjxkaXY+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBz aXplPTMgY29sb3I9YmxhY2sgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3Bhbg0Kc3R5bGU9J2Zv bnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2snPkJlc3QgUmVnYXJkcywgPGJyPg0KJm5ic3A7IDxi cj4NCkplZmZyZXkgRHVubiA8YnI+DQpJbmZvIFN5c3RlbXMgRW5nLiwgTGVhZCA8YnI+DQpNSVRS RSBDb3Jwb3JhdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPg0KDQo8cCBjbGFzcz1N c29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGNvbG9yPWJsYWNrIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+ PHNwYW4NCnN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrJz4oMzAxKSA0NDgtNjk2 NSAobW9iaWxlKTxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjwvZGl2Pg0KDQo8cCBj bGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGNvbG9yPWJsYWNrIGZhY2U9IlRpbWVzIE5ldyBS b21hbiI+PHNwYW4NCnN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrJz48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPg0KDQo8ZGl2Pg0KDQo8ZGl2IHN0eWxlPSdib3Jk ZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4g MGluIDBpbic+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Yj48Zm9udCBzaXplPTIgZmFjZT1UYWhv bWE+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7DQpmb250LWZhbWlseToiVGFob21hIiwi c2Fucy1zZXJpZiI7Zm9udC13ZWlnaHQ6Ym9sZCc+RnJvbTo8L3NwYW4+PC9mb250PjwvYj48Zm9u dA0Kc2l6ZT0yIGZhY2U9VGFob21hPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIic+DQpIZW1hbnQgU2luZ2ggKHNoZW1hbnQpIFtt YWlsdG86c2hlbWFudEBjaXNjby5jb21dIDxicj4NCjxiPjxzcGFuIHN0eWxlPSdmb250LXdlaWdo dDpib2xkJz5TZW50Ojwvc3Bhbj48L2I+IFRodXJzZGF5LCBOb3ZlbWJlciAwNSwgMjAwOQ0KNzoz OSBQTTxicj4NCjxiPjxzcGFuIHN0eWxlPSdmb250LXdlaWdodDpib2xkJz5Ubzo8L3NwYW4+PC9i PiBEdW5uLCBKZWZmcmV5IEguOyBGcmVkIEJha2VyDQooZnJlZCk7IEVyaWsgTm9yZG1hcms7IEhl c2hhbSBTb2xpbWFuOyBKSU5NRUkgVGF0dXlhIC8gPC9zcGFuPjwvZm9udD48Zm9udA0Kc2l6ZT0y IGZhY2U9Ik1TIE1pbmNobyI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6Ik1TIE1pbmNobyInPuelnuaYjumBlOWTiTwvc3Bhbj48L2ZvbnQ+PGZvbnQNCnNpemU9MiBm YWNlPVRhaG9tYT48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiVGFo b21hIiwic2Fucy1zZXJpZiInPjsNClRob21hcyBOYXJ0ZW47IFN1c2FuIFRob21zb24gKHNldGhv bXNvKTsgd2lsbGlhbS5hbGxlbi5zaW1wc29uQGdtYWlsLmNvbTxicj4NCjxiPjxzcGFuIHN0eWxl PSdmb250LXdlaWdodDpib2xkJz5DYzo8L3NwYW4+PC9iPiA2bWFuLWFkc0B0b29scy5pZXRmLm9y ZzsgSUVURg0KSVB2NiBNYWlsaW5nIExpc3Q7IHNhdmktYWRzQHRvb2xzLmlldGYub3JnOyBSb2Jp biBNZXJzaDsNCnY2b3BzLWFkc0B0b29scy5pZXRmLm9yZzsgSVB2NiBPcGVyYXRpb25zOyBTQVZJ IE1haWxpbmcgTGlzdDxicj4NCjxiPjxzcGFuIHN0eWxlPSdmb250LXdlaWdodDpib2xkJz5TdWJq ZWN0Ojwvc3Bhbj48L2I+IFJFOiBCcm9hZGJhbmQgRm9ydW0NCmxpYWlzb24gdG8gSUVURiBvbiBJ UHY2IHNlY3VyaXR5PG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPC9kaXY+DQoNCjwv ZGl2Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGZhY2U9IlRpbWVzIE5ldyBS b21hbiI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToNCjEyLjBwdCc+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9mb250PjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MiBjb2xv cj0iIzFmNDk3ZCIgZmFjZT1DYWxpYnJpPjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkNvdWxkDQpi ZSBWTEFOIGxpa2Ugb25lIGhhcyBMMiBWUE4gaW4gdGhlIGNhYmxlIHNwZWNpZmljYXRpb25zLiZu YnNwOyAmbmJzcDtCdXQgTDIgVlBODQp3aWxsIGxpbWl0IG9uZSB0byAmbmJzcDsxMDI0IG1heCBw ZXIgY2FibGUgbGluZSBjYXJkIG9uIGEmbmJzcDsgQ01UUyDigJMgaXTigJlzIGENCnZlcnkgbGlt aXRlZCBmb3Igc2VydmljZXMgYXJjaCBpbiBjYWJsZSBhbmQgSSBkb27igJl0IHRoaW5rIGRlcGxv eWVkIHZlcnkNCndpZGVseS4mbmJzcDsgVGhlIHBvaW50IGlzIGEgY2FibGUgbW9kZW0gcmVjZWl2 ZXIgY2hpcCBpcyBidWlsdCB0byBzZW5kIGl0cw0KdXBzdHJlYW0gZGF0YSBvbmx5IHRvIHRoZSBD TVRTIGFuZCBsaWtld2lzZSByZWNlaXZlIGRhdGEgZnJvbSB0aGUgQ01UUyDigJMgc28gaG93DQpj YW4gdHdvIG1vZGVtcyBldmVuIHRhbGsgdG8gZWFjaCBvdGhlcj8mbmJzcDsmbmJzcDsgPG86cD48 L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9 MiBjb2xvcj0iIzFmNDk3ZCIgZmFjZT1DYWxpYnJpPjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48 Zm9udCBzaXplPTIgY29sb3I9IiMxZjQ5N2QiIGZhY2U9Q2FsaWJyaT48c3Bhbg0Kc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz5UaGUNCmxpbmstbG9jYWwgZG9tYWluIG9uIHRoZSBDTVRTIGlzIGFsc28gYSB3ZWxs LWRlZmluZWQgYW5kIHRpZWQgdG8gYSB2aXJ0dWFsIEwzDQpuZXR3b3JrIGludGVyZmFjZSB0aGF0 IGFnZ3JlZ2F0ZXMgc2V2ZXJhbCBwaHlzaWNhbCBjYWJsZSBuZXR3b3JrIGludGVyZmFjZXMgYW5k DQphbGwgdGhlIG1vZGVtcy4mbmJzcDsgQXMgb2YgRmFsbCAyMDA3LCBDYWJsZUxhYnMgaW4gdGhl IFUuUy4gdGhhdCBjZXJ0aWZpZXMNCkNNVFMgYW5kIENNIGVxdWlwbWVudCBoYXMgY2VydGlmaWVk IG1vcmUgdGhhbiBvbmUgQ01UUyB2ZW5kb3IgZm9yIERvY3NpcyAzLjANCklQdjYgd2l0aCBORCBQ cm94eSBzdXBwb3J0IG9uIHRoZSBDTVRTLjxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoN CjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBzaXplPTIgY29sb3I9IiMxZjQ5N2QiIGZhY2U9Q2Fs aWJyaT48c3Bhbg0Kc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2Zv bnQ+PC9wPg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGNvbG9yPSIjMWY0OTdk IiBmYWNlPUNhbGlicmk+PHNwYW4NCnN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+SQ0Kd2lsbCBiZSBpbiBIaXJv c2hpbWEsIHNvIGlmIGFueW9uZSB3b3VsZCBsaWtlIHRvIHVuZGVyc3RhbmQgdGhlIGNhYmxlIGFu ZCBDTVRTDQpsaW5rLWxvY2FsIG1vZGVsIGFuZCBtY2FzdCBmb3IgTkQgaW4gY2FibGUsICZuYnNw O3BsZWFzZSBmaW5kIG1lIOKAkyBJIGFtIGhhbmdpbmcNCm91dCBpbiA2bWFuLCB2Nm9wcywgSU5U IGFyZWEgYW5kIHRoZSBsaWtlLjxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNs YXNzPU1zb05vcm1hbD48Zm9udCBzaXplPTIgY29sb3I9IiMxZjQ5N2QiIGZhY2U9Q2FsaWJyaT48 c3Bhbg0Kc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9w Pg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGNvbG9yPSIjMWY0OTdkIiBmYWNl PUNhbGlicmk+PHNwYW4NCnN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+UmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bh bj48L2ZvbnQ+PC9wPg0KDQo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGNvbG9yPSIj MWY0OTdkIiBmYWNlPUNhbGlicmk+PHNwYW4NCnN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9 MiBjb2xvcj0iIzFmNDk3ZCIgZmFjZT1DYWxpYnJpPjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkhl bWFudDxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48 Zm9udCBzaXplPTIgY29sb3I9IiMxZjQ5N2QiIGZhY2U9Q2FsaWJyaT48c3Bhbg0Kc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPg0KDQo8ZGl2Pg0KDQo8 ZGl2IHN0eWxlPSdib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFk ZGluZzozLjBwdCAwaW4gMGluIDBpbic+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48Yj48Zm9udCBz aXplPTIgZmFjZT1UYWhvbWE+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7DQpmb250LWZh bWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7Zm9udC13ZWlnaHQ6Ym9sZCc+RnJvbTo8L3NwYW4+ PC9mb250PjwvYj48Zm9udA0Kc2l6ZT0yIGZhY2U9VGFob21hPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIic+DQpEdW5uLCBKZWZm cmV5IEguIFttYWlsdG86amR1bm5AbWl0cmUub3JnXSA8YnI+DQo8Yj48c3BhbiBzdHlsZT0nZm9u dC13ZWlnaHQ6Ym9sZCc+U2VudDo8L3NwYW4+PC9iPiBUaHVyc2RheSwgTm92ZW1iZXIgMDUsIDIw MDkNCjY6MzUgUE08YnI+DQo8Yj48c3BhbiBzdHlsZT0nZm9udC13ZWlnaHQ6Ym9sZCc+VG86PC9z cGFuPjwvYj4gSGVtYW50IFNpbmdoIChzaGVtYW50KTsgRnJlZA0KQmFrZXIgKGZyZWQpOyBFcmlr IE5vcmRtYXJrOyBIZXNoYW0gU29saW1hbjsgSklOTUVJIFRhdHV5YSAvIDwvc3Bhbj48L2ZvbnQ+ PGZvbnQNCnNpemU9MiBmYWNlPSJNUyBNaW5jaG8iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiJNUyBNaW5jaG8iJz7npZ7mmI7pgZTlk4k8L3NwYW4+PC9mb250Pjxm b250DQpzaXplPTIgZmFjZT1UYWhvbWE+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz47DQpUaG9tYXMgTmFydGVuOyBTdXNhbiBU aG9tc29uIChzZXRob21zbyk7IHdpbGxpYW0uYWxsZW4uc2ltcHNvbkBnbWFpbC5jb208YnI+DQo8 Yj48c3BhbiBzdHlsZT0nZm9udC13ZWlnaHQ6Ym9sZCc+Q2M6PC9zcGFuPjwvYj4gNm1hbi1hZHNA dG9vbHMuaWV0Zi5vcmc7IElFVEYNCklQdjYgTWFpbGluZyBMaXN0OyBzYXZpLWFkc0B0b29scy5p ZXRmLm9yZzsgUm9iaW4gTWVyc2g7IHY2b3BzLWFkc0B0b29scy5pZXRmLm9yZzsNCklQdjYgT3Bl cmF0aW9uczsgU0FWSSBNYWlsaW5nIExpc3Q7IER1bm4sIEplZmZyZXkgSC48YnI+DQo8Yj48c3Bh biBzdHlsZT0nZm9udC13ZWlnaHQ6Ym9sZCc+U3ViamVjdDo8L3NwYW4+PC9iPiBSRTogQnJvYWRi YW5kIEZvcnVtDQpsaWFpc29uIHRvIElFVEYgb24gSVB2NiBzZWN1cml0eTxvOnA+PC9vOnA+PC9z cGFuPjwvZm9udD48L3A+DQoNCjwvZGl2Pg0KDQo8L2Rpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFs Pjxmb250IHNpemU9MyBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuIHN0eWxlPSdmb250LXNp emU6DQoxMi4wcHQnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNs YXNzPU1zb05vcm1hbD48Zm9udCBzaXplPTMgY29sb3I9YmxhY2sgZmFjZT0iVGltZXMgTmV3IFJv bWFuIj48c3Bhbg0Kc3R5bGU9J2ZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2snPkNvbGxlYWd1 ZXMsPG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxm b250IHNpemU9MyBjb2xvcj1ibGFjayBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuDQpzdHls ZT0nZm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9mb250PjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MyBjb2xvcj1ibGFj ayBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjEyLjBwdDtj b2xvcjpibGFjayc+SSBtYXkgYmUgbWlzc2luZyBzb21ldGhpbmcsIGJ1dCBpdCBhcHBlYXJzDQp0 aGF0LCBpbiB0aGUgY2FzZXMgZGVzY3JpYmVkLCB0aGUgdHdvIGhvc3RzIGRvd25zdHJlYW0gb2Yg dHdvIHNlcGFyYXRlIGNhYmxlDQptb2RlbXMgYXJlIG9mZiBsaW5rIHRvIGVhY2ggb3RoZXIuIFRo aXMgYnJpbmdzIHVwIHRoZSBxdWVzdGlvbjogRG8gdGhlcmUgdHdvDQpjYWJsZSBtb2RlbXMgY29u c3RpdHV0ZSB0d28gdmlydHVhbCBpbnRlcmZhY2VzLCBsaWtlIHR3byBWTEFOcyBvbiB0aGUgc2Ft ZQ0KcGh5c2ljYWwgcm91dGVyIGludGVyZmFjZT8gSWYgc28sIHRoaXMgaXMgYW4gYXJjaGl0ZWN0 dXJhbCwgcmF0aGVyIHRoYW4gYW4NCmltcGxlbWVudGF0aW9uLCBxdWVzdGlvbi4gVGhvdWdodHM/ PG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250 IHNpemU9MyBjb2xvcj1ibGFjayBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuDQpzdHlsZT0n Zm9udC1zaXplOjEyLjBwdDtjb2xvcjpibGFjayc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9m b250PjwvcD4NCg0KPGRpdj4NCg0KPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MyBjb2xv cj1ibGFjayBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuDQpzdHlsZT0nZm9udC1zaXplOjEy LjBwdDtjb2xvcjpibGFjayc+QmVzdCBSZWdhcmRzLCA8YnI+DQombmJzcDsgPGJyPg0KSmVmZnJl eSBEdW5uIDxicj4NCkluZm8gU3lzdGVtcyBFbmcuLCBMZWFkIDxicj4NCk1JVFJFIENvcnBvcmF0 aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+DQoNCjxwIGNsYXNzPU1zb05vcm1hbD48 Zm9udCBzaXplPTMgY29sb3I9YmxhY2sgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3Bhbg0Kc3R5 bGU9J2ZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2snPigzMDEpIDQ0OC02OTY1IChtb2JpbGUp PG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPC9kaXY+DQoNCjxwIGNsYXNzPU1zb05v cm1hbD48Zm9udCBzaXplPTMgY29sb3I9YmxhY2sgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3Bh bg0Kc3R5bGU9J2ZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2snPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvZm9udD48L3A+DQoNCjxkaXY+DQoNCjxkaXY+DQoNCjxkaXY+DQoNCjxkaXY+DQoN CjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbWFyZ2luLWJvdHRvbToxMi4wcHQnPjxmb250IHNp emU9Mw0KZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEyLjBw dCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250PjwvcD4NCg0KPC9kaXY+DQoNCjwvZGl2 Pg0KDQo8L2Rpdj4NCg0KPC9kaXY+DQoNCjwvZGl2Pg0KDQo8L2JvZHk+DQoNCjwvaHRtbD4NCg== --_000_3C6F21684E7C954193E6C7C4573B762703676D7FE4IMCMBX1MITREO_-- From swmike@swm.pp.se Thu Nov 5 22:36:12 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6BC1D3A685E; Thu, 5 Nov 2009 22:36:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zehUNLRFZ3SG; Thu, 5 Nov 2009 22:36:11 -0800 (PST) Received: from uplift.swm.pp.se (ipv6.swm.pp.se [IPv6:2a00:801::f]) by core3.amsl.com (Postfix) with ESMTP id 431203A67B4; Thu, 5 Nov 2009 22:36:11 -0800 (PST) Received: by uplift.swm.pp.se (Postfix, from userid 501) id 02DF19C; Fri, 6 Nov 2009 07:36:32 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 01C759A; Fri, 6 Nov 2009 07:36:32 +0100 (CET) Date: Fri, 6 Nov 2009 07:36:31 +0100 (CET) From: Mikael Abrahamsson To: "Dunn, Jeffrey H." In-Reply-To: <3C6F21684E7C954193E6C7C4573B762703676D7FCE@IMCMBX1.MITRE.ORG> Message-ID: References: <3C6F21684E7C954193E6C7C4573B762703676D7FCE@IMCMBX1.MITRE.ORG> User-Agent: Alpine 1.10 (DEB 962 2008-03-14) Organization: People's Front Against WWW MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , "Hemant Singh \(shemant\)" , List , SAVI@core3.amsl.com, "william.allen.simpson@gmail.com" , Hesham Soliman , "savi-ads@tools.ietf.org" , Robin Mersh , "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, "Susan Thomson \(sethomso\)" , "v6ops-ads@tools.ietf.org" , IETF@core3.amsl.com, IPv6 Operations , Mailing List , =?ISO-2022-JP?Q?JINMEI_Tatuya_=2F_=1B$B=3F=40L=40C#=3AH=1B=28J?= Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 06:36:12 -0000 On Thu, 5 Nov 2009, Dunn, Jeffrey H. wrote: > I may be missing something, but it appears that, in the cases described, > the two hosts downstream of two separate cable modems are off link to > each other. This brings up the question: Do there two cable modems > constitute two virtual interfaces, like two VLANs on the same physical > router interface? If so, this is an architectural, rather than an > implementation, question. Thoughts? This is basically "forced forwarding" for the L2 aggregation layer. It's often done on ETTH deployments as well as cable environments, in IPv4 it's done in conjunction with local-proxy-arp (in your IP subnet, the ISP router will answer all ARP requests with its own MAC and all traffic between clients within the subnet is done via the router which does not send out ICMP redirects). In my mind it's unsuitable for clients to run SLAAC in these environments and the only real alternative is full DHCPv6(-PD) with SAVI-like functionality in the L2 equipment along the way (in v4 the L2 equipment does DHCP-snooping and installs L3 filters accordingly). -- Mikael Abrahamsson email: swmike@swm.pp.se From swmike@swm.pp.se Thu Nov 5 22:36:17 2009 Return-Path: X-Original-To: SAVI@core3.amsl.com Delivered-To: SAVI@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8720A3A67B4; Thu, 5 Nov 2009 22:36:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vLbiBUZvKdg1; Thu, 5 Nov 2009 22:36:17 -0800 (PST) Received: from uplift.swm.pp.se (swm.pp.se [212.247.200.143]) by core3.amsl.com (Postfix) with ESMTP id 439733A68D2; Thu, 5 Nov 2009 22:36:10 -0800 (PST) Received: by uplift.swm.pp.se (Postfix, from userid 501) id 02DF19C; Fri, 6 Nov 2009 07:36:32 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by uplift.swm.pp.se (Postfix) with ESMTP id 01C759A; Fri, 6 Nov 2009 07:36:32 +0100 (CET) Date: Fri, 6 Nov 2009 07:36:31 +0100 (CET) From: Mikael Abrahamsson To: "Dunn, Jeffrey H." In-Reply-To: <3C6F21684E7C954193E6C7C4573B762703676D7FCE@IMCMBX1.MITRE.ORG> Message-ID: References: <3C6F21684E7C954193E6C7C4573B762703676D7FCE@IMCMBX1.MITRE.ORG> User-Agent: Alpine 1.10 (DEB 962 2008-03-14) Organization: People's Front Against WWW MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , "Hemant Singh \(shemant\)" , List , SAVI@core3.amsl.com, "william.allen.simpson@gmail.com" , Hesham Soliman , "savi-ads@tools.ietf.org" , Robin Mersh , "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, "Susan Thomson \(sethomso\)" , "v6ops-ads@tools.ietf.org" , IETF@core3.amsl.com, IPv6 Operations , Mailing List , =?ISO-2022-JP?Q?JINMEI_Tatuya_=2F_=1B$B=3F=40L=40C#=3AH=1B=28J?= Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 06:36:17 -0000 On Thu, 5 Nov 2009, Dunn, Jeffrey H. wrote: > I may be missing something, but it appears that, in the cases described, > the two hosts downstream of two separate cable modems are off link to > each other. This brings up the question: Do there two cable modems > constitute two virtual interfaces, like two VLANs on the same physical > router interface? If so, this is an architectural, rather than an > implementation, question. Thoughts? This is basically "forced forwarding" for the L2 aggregation layer. It's often done on ETTH deployments as well as cable environments, in IPv4 it's done in conjunction with local-proxy-arp (in your IP subnet, the ISP router will answer all ARP requests with its own MAC and all traffic between clients within the subnet is done via the router which does not send out ICMP redirects). In my mind it's unsuitable for clients to run SLAAC in these environments and the only real alternative is full DHCPv6(-PD) with SAVI-like functionality in the L2 equipment along the way (in v4 the L2 equipment does DHCP-snooping and installs L3 filters accordingly). -- Mikael Abrahamsson email: swmike@swm.pp.se From elevyabe@cisco.com Fri Nov 6 01:43:43 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DFB0728C15B; Fri, 6 Nov 2009 01:43:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.591 X-Spam-Level: X-Spam-Status: No, score=-9.591 tagged_above=-999 required=5 tests=[AWL=1.008, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OJe45zf22AQ8; Fri, 6 Nov 2009 01:43:43 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id 888C428C148; Fri, 6 Nov 2009 01:43:42 -0800 (PST) Authentication-Results: ams-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ak0AAHN+80qQ/uCWe2dsb2JhbACEc5Z9AQEWJAaoGocSkHqBMoI4UwSBZw X-IronPort-AV: E=Sophos;i="4.44,691,1249257600"; d="scan'208";a="53782011" Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 06 Nov 2009 09:44:04 +0000 Received: from xbh-ams-101.cisco.com (xbh-ams-101.cisco.com [144.254.74.71]) by ams-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA69i4eE019771; Fri, 6 Nov 2009 09:44:04 GMT Received: from xmb-ams-105.cisco.com ([144.254.74.80]) by xbh-ams-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 6 Nov 2009 10:44:04 +0100 Received: from [144.254.53.124] ([144.254.53.124]) by xmb-ams-105.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 6 Nov 2009 10:44:04 +0100 Message-ID: <4AF3EFE3.7000404@cisco.com> Date: Fri, 06 Nov 2009 10:44:03 +0100 From: Eric Levy-Abegnoli User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Mikael Abrahamsson References: <3C6F21684E7C954193E6C7C4573B762703676D7FCE@IMCMBX1.MITRE.ORG> In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-OriginalArrivalTime: 06 Nov 2009 09:44:04.0137 (UTC) FILETIME=[AD3AF190:01CA5EC5] X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , "Hemant Singh \(shemant\)" , List , SAVI@core3.amsl.com, "william.allen.simpson@gmail.com" , Hesham Soliman , "savi-ads@tools.ietf.org" , Robin Mersh , "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, "Susan Thomson \(sethomso\)" , "v6ops-ads@tools.ietf.org" , IETF@core3.amsl.com, IPv6 Operations , Mailing List , =?UTF-8?B?SklOTUVJIFRhdHV5YSAv?=, "Dunn, Jeffrey H." , =?UTF-8?B?IOelnuaYjumBlOWTiQ==?= Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 09:43:44 -0000 Mikael Abrahamsson a écrit : > On Thu, 5 Nov 2009, Dunn, Jeffrey H. wrote: > >> I may be missing something, but it appears that, in the cases >> described, the two hosts downstream of two separate cable modems are >> off link to each other. This brings up the question: Do there two >> cable modems constitute two virtual interfaces, like two VLANs on the >> same physical router interface? If so, this is an architectural, >> rather than an implementation, question. Thoughts? > > This is basically "forced forwarding" for the L2 aggregation layer. > It's often done on ETTH deployments as well as cable environments, in > IPv4 it's done in conjunction with local-proxy-arp (in your IP subnet, > the ISP router will answer all ARP requests with its own MAC and all > traffic between clients within the subnet is done via the router which > does not send out ICMP redirects). > > In my mind it's unsuitable for clients to run SLAAC in these > environments and the only real alternative is full DHCPv6(-PD) with > SAVI-like functionality in the L2 equipment along the way (in v4 the > L2 equipment does DHCP-snooping and installs L3 filters accordingly). > The initial question mentionned link-local duplicate. For a reason: ther are not assigned by DHCPv6 which preq their existence and unicity. SLACC is your only choice. Eric From elevyabe@cisco.com Fri Nov 6 01:44:48 2009 Return-Path: X-Original-To: SAVI@core3.amsl.com Delivered-To: SAVI@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1F4D528C17F; Fri, 6 Nov 2009 01:44:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.591 X-Spam-Level: X-Spam-Status: No, score=-9.591 tagged_above=-999 required=5 tests=[AWL=1.008, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BlCs7HfbK229; Fri, 6 Nov 2009 01:44:48 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id 99A5328C16B; Fri, 6 Nov 2009 01:44:43 -0800 (PST) Authentication-Results: ams-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ak0AAHN+80qQ/uCWe2dsb2JhbACEc5Z9AQEWJAaoGocSkHqBMoI4UwSBZw X-IronPort-AV: E=Sophos;i="4.44,691,1249257600"; d="scan'208";a="53782011" Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 06 Nov 2009 09:44:04 +0000 Received: from xbh-ams-101.cisco.com (xbh-ams-101.cisco.com [144.254.74.71]) by ams-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA69i4eE019771; Fri, 6 Nov 2009 09:44:04 GMT Received: from xmb-ams-105.cisco.com ([144.254.74.80]) by xbh-ams-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 6 Nov 2009 10:44:04 +0100 Received: from [144.254.53.124] ([144.254.53.124]) by xmb-ams-105.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 6 Nov 2009 10:44:04 +0100 Message-ID: <4AF3EFE3.7000404@cisco.com> Date: Fri, 06 Nov 2009 10:44:03 +0100 From: Eric Levy-Abegnoli User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Mikael Abrahamsson References: <3C6F21684E7C954193E6C7C4573B762703676D7FCE@IMCMBX1.MITRE.ORG> In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-OriginalArrivalTime: 06 Nov 2009 09:44:04.0137 (UTC) FILETIME=[AD3AF190:01CA5EC5] X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , "Hemant Singh \(shemant\)" , List , SAVI@core3.amsl.com, "william.allen.simpson@gmail.com" , Hesham Soliman , "savi-ads@tools.ietf.org" , Robin Mersh , "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, "Susan Thomson \(sethomso\)" , "v6ops-ads@tools.ietf.org" , IETF@core3.amsl.com, IPv6 Operations , Mailing List , =?UTF-8?B?SklOTUVJIFRhdHV5YSAv?=, "Dunn, Jeffrey H." , =?UTF-8?B?IOelnuaYjumBlOWTiQ==?= Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 09:44:48 -0000 Mikael Abrahamsson a écrit : > On Thu, 5 Nov 2009, Dunn, Jeffrey H. wrote: > >> I may be missing something, but it appears that, in the cases >> described, the two hosts downstream of two separate cable modems are >> off link to each other. This brings up the question: Do there two >> cable modems constitute two virtual interfaces, like two VLANs on the >> same physical router interface? If so, this is an architectural, >> rather than an implementation, question. Thoughts? > > This is basically "forced forwarding" for the L2 aggregation layer. > It's often done on ETTH deployments as well as cable environments, in > IPv4 it's done in conjunction with local-proxy-arp (in your IP subnet, > the ISP router will answer all ARP requests with its own MAC and all > traffic between clients within the subnet is done via the router which > does not send out ICMP redirects). > > In my mind it's unsuitable for clients to run SLAAC in these > environments and the only real alternative is full DHCPv6(-PD) with > SAVI-like functionality in the L2 equipment along the way (in v4 the > L2 equipment does DHCP-snooping and installs L3 filters accordingly). > The initial question mentionned link-local duplicate. For a reason: ther are not assigned by DHCPv6 which preq their existence and unicity. SLACC is your only choice. Eric From narten@us.ibm.com Fri Nov 6 05:58:32 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 423913A6A96; Fri, 6 Nov 2009 05:58:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.024 X-Spam-Level: X-Spam-Status: No, score=-6.024 tagged_above=-999 required=5 tests=[AWL=0.576, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JOHRjouXpGv3; Fri, 6 Nov 2009 05:58:31 -0800 (PST) Received: from e31.co.us.ibm.com (e31.co.us.ibm.com [32.97.110.149]) by core3.amsl.com (Postfix) with ESMTP id 7CAC03A6A43; Fri, 6 Nov 2009 05:58:31 -0800 (PST) Received: from d03relay05.boulder.ibm.com (d03relay05.boulder.ibm.com [9.17.195.107]) by e31.co.us.ibm.com (8.14.3/8.13.1) with ESMTP id nA6Dpwnr011802; Fri, 6 Nov 2009 06:51:58 -0700 Received: from d03av03.boulder.ibm.com (d03av03.boulder.ibm.com [9.17.195.169]) by d03relay05.boulder.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id nA6Dwb9w173736; Fri, 6 Nov 2009 06:58:40 -0700 Received: from d03av03.boulder.ibm.com (loopback [127.0.0.1]) by d03av03.boulder.ibm.com (8.14.3/8.13.1/NCO v10.0 AVout) with ESMTP id nA6DwaI5015136; Fri, 6 Nov 2009 06:58:37 -0700 Received: from cichlid.raleigh.ibm.com (sig-9-65-223-3.mts.ibm.com [9.65.223.3]) by d03av03.boulder.ibm.com (8.14.3/8.13.1/NCO v10.0 AVin) with ESMTP id nA6DwZV7015115 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 6 Nov 2009 06:58:36 -0700 Received: from cichlid.raleigh.ibm.com (localhost [127.0.0.1]) by cichlid.raleigh.ibm.com (8.14.3/8.12.5) with ESMTP id nA6DwXNq025458; Fri, 6 Nov 2009 08:58:33 -0500 Message-Id: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> To: Fred Baker In-reply-to: References: Comments: In-reply-to Fred Baker message dated "Fri, 06 Nov 2009 06:18:16 +0800." Date: Fri, 06 Nov 2009 08:58:32 -0500 From: Thomas Narten X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: 6man-ads@tools.ietf.org, SAVI Mailing List , william.allen.simpson@gmail.com, Hesham Soliman , savi-ads@tools.ietf.org, Robin Mersh , Susan Thomson , v6ops-ads@tools.ietf.org, IPv6 Operations , IETF IPv6 Mailing List , =?UTF-8?Q?JINMEI_Tatuya_/_=E7=A5=9E=E6=98=8E=E9=81=94=E5=93=89?= Subject: Re: [savi] Fwd: Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 13:58:32 -0000 Is there a problem statement somewhere that describes the actual problem for which a solution is needed? Has this been put into an ID, for instance? I haven't been able to get my head around the actual problem from the (few) emails I've seen. Thomas From jdunn@mitre.org Fri Nov 6 09:37:57 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 717423A6856; Fri, 6 Nov 2009 09:37:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.038 X-Spam-Level: X-Spam-Status: No, score=-6.038 tagged_above=-999 required=5 tests=[AWL=0.561, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JDGb0sQNheFq; Fri, 6 Nov 2009 09:37:56 -0800 (PST) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id 7DE603A6806; Fri, 6 Nov 2009 09:37:56 -0800 (PST) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA6HcIQP027146; Fri, 6 Nov 2009 12:38:19 -0500 Received: from imchub1.MITRE.ORG (imchub1.mitre.org [129.83.29.73]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA6HcIZC027139; Fri, 6 Nov 2009 12:38:18 -0500 Received: from IMCMBX1.MITRE.ORG ([129.83.29.204]) by imchub1.MITRE.ORG ([129.83.29.73]) with mapi; Fri, 6 Nov 2009 12:38:17 -0500 From: "Dunn, Jeffrey H." To: Thomas Narten , Fred Baker Date: Fri, 6 Nov 2009 12:38:14 -0500 Thread-Topic: Fwd: Broadband Forum liaison to IETF on IPv6 security Thread-Index: Acpe6UwkEt37UYiVRS60SetEVXKNkwAHfZKw Message-ID: <3C6F21684E7C954193E6C7C4573B76270367855A0E@IMCMBX1.MITRE.ORG> References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> In-Reply-To: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, SAVI Mailing List , "william.allen.simpson@gmail.com" , Hesham Soliman , IETF, "savi-ads@tools.ietf.org" , IPv6 Operations , Thomson , "v6ops-ads@tools.ietf.org" , Robin Mersh , Mailing List , "Dunn, Jeffrey H." , Susan, =?utf-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= Subject: Re: [savi] Fwd: Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 17:37:57 -0000 VGhvbWFzLA0KDQpUaGUgcHJvYmxlbSBpcyBJTUhPIHRoZSBmb2xsb3dpbmc6IEhvdyB0byBhc3Np Z24gYW4gSVB2NiBVR0EgdG8gQ1BFIGhvc3RzIGF0dGFjaGVkIHRvIGEgQk1BIExBTiAodXN1YWxs eSBFdGhlcm5ldCBvciBXaS1GaSkgdGhhdCBpcyBpbiB0dXJuIGNvbm5lY3RlZCB2aWEgYSBDUEUg cm91dGVyIHRocm91Z2ggYW4gTkJNQSBsaW5rIChjYWJsZSBtb2RlbSBvciBEU0wpIHRvIGFuIElT UCByb3V0ZXIgdGhhdCBwcm92aWRlcyBJbnRlcm5ldCBhY2Nlc3MuIEN1cnJlbnRseSwgdGhlcmUg YXJlIHR3byBtZXRob2RzOiBTTEFBQyBhbmQgREhDUHY2LiBFYWNoIGhhcyBpdHMgb3duIHByb2Js ZW1zLiBUaG91Z2h0cz8NCg0KQmVzdCBSZWdhcmRzLCANCsKgIA0KSmVmZnJleSBEdW5uIA0KSW5m byBTeXN0ZW1zIEVuZy4sIExlYWQgDQpNSVRSRSBDb3Jwb3JhdGlvbi4NCigzMDEpIDQ0OC02OTY1 IChtb2JpbGUpDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IGlwdjYtYm91 bmNlc0BpZXRmLm9yZyBbbWFpbHRvOmlwdjYtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9m IFRob21hcyBOYXJ0ZW4NClNlbnQ6IEZyaWRheSwgTm92ZW1iZXIgMDYsIDIwMDkgODo1OSBBTQ0K VG86IEZyZWQgQmFrZXINCkNjOiA2bWFuLWFkc0B0b29scy5pZXRmLm9yZzsgU0FWSSBNYWlsaW5n IExpc3Q7IHdpbGxpYW0uYWxsZW4uc2ltcHNvbkBnbWFpbC5jb207IEhlc2hhbSBTb2xpbWFuOyBF cmlrIE5vcmRtYXJrOyBzYXZpLWFkc0B0b29scy5pZXRmLm9yZzsgUm9iaW4gTWVyc2g7IFN1c2Fu IFRob21zb247IHY2b3BzLWFkc0B0b29scy5pZXRmLm9yZzsgSVB2NiBPcGVyYXRpb25zOyBJRVRG IElQdjYgTWFpbGluZyBMaXN0OyBKSU5NRUkgVGF0dXlhIC8g56We5piO6YGU5ZOJDQpTdWJqZWN0 OiBSZTogRndkOiBCcm9hZGJhbmQgRm9ydW0gbGlhaXNvbiB0byBJRVRGIG9uIElQdjYgc2VjdXJp dHkNCg0KSXMgdGhlcmUgYSBwcm9ibGVtIHN0YXRlbWVudCBzb21ld2hlcmUgdGhhdCBkZXNjcmli ZXMgdGhlIGFjdHVhbA0KcHJvYmxlbSBmb3Igd2hpY2ggYSBzb2x1dGlvbiBpcyBuZWVkZWQ/DQoN CkhhcyB0aGlzIGJlZW4gcHV0IGludG8gYW4gSUQsIGZvciBpbnN0YW5jZT8NCg0KSSBoYXZlbid0 IGJlZW4gYWJsZSB0byBnZXQgbXkgaGVhZCBhcm91bmQgdGhlIGFjdHVhbCBwcm9ibGVtIGZyb20g dGhlDQooZmV3KSBlbWFpbHMgSSd2ZSBzZWVuLg0KDQpUaG9tYXMNCi0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpJRVRG IElQdjYgd29ya2luZyBncm91cCBtYWlsaW5nIGxpc3QNCmlwdjZAaWV0Zi5vcmcNCkFkbWluaXN0 cmF0aXZlIFJlcXVlc3RzOiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2lw djYNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tDQo= From jhw@apple.com Fri Nov 6 10:22:43 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 47E933A69D6; Fri, 6 Nov 2009 10:22:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.547 X-Spam-Level: X-Spam-Status: No, score=-106.547 tagged_above=-999 required=5 tests=[AWL=2.052, BAYES_00=-2.599, GB_I_LETTER=-2, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lkgt7GJ+fFcZ; Fri, 6 Nov 2009 10:22:42 -0800 (PST) Received: from mail-out3.apple.com (mail-out3.apple.com [17.254.13.22]) by core3.amsl.com (Postfix) with ESMTP id 8C62F3A6998; Fri, 6 Nov 2009 10:22:42 -0800 (PST) Received: from relay16.apple.com (relay16.apple.com [17.128.113.55]) by mail-out3.apple.com (Postfix) with ESMTP id 5D85D78AEE24; Fri, 6 Nov 2009 10:23:06 -0800 (PST) X-AuditID: 11807137-b7bd4ae000000f0d-c7-4af46989289d Received: from [17.116.221.39] (Unknown_Domain [17.116.221.39]) (using TLS with cipher AES128-SHA (AES128-SHA/128 bits)) (Client did not present a certificate) by relay16.apple.com (Apple SCV relay) with SMTP id 0A.C0.03853.A8964FA4; Fri, 6 Nov 2009 10:23:06 -0800 (PST) Mime-Version: 1.0 (Apple Message framework v1076) Content-Type: text/plain; charset=us-ascii; format=flowed; delsp=yes From: james woodyatt In-Reply-To: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> Date: Fri, 6 Nov 2009 10:23:05 -0800 Content-Transfer-Encoding: 7bit Message-Id: References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> To: Thomas Narten X-Mailer: Apple Mail (2.1076) X-Brightmail-Tracker: AAAAAQAAAZE= X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: 6man-ads@tools.ietf.org, SAVI Mailing List , savi-ads@tools.ietf.org, v6ops-ads@tools.ietf.org, IPv6 Operations , IETF IPv6 Mailing List Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 18:22:43 -0000 On Nov 6, 2009, at 05:58, Thomas Narten wrote: > Is there a problem statement somewhere that describes the actual > problem for which a solution is needed? > Has this been put into an ID, for instance? > I haven't been able to get my head around the actual problem from > the (few) emails I've seen. The letter from the Broadband Forum Technical Chair in the message that originated this thread mentions an attachment that includes a revised Problem Statement on Duplicate Link Local Addresses, but it wasn't forwarded with the letter. I'd like to read that problem statement. Where is it? -- james woodyatt member of technical staff, communications engineering From tony@lava.net Fri Nov 6 10:34:21 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4D7143A685B; Fri, 6 Nov 2009 10:34:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LQOKExbhMBJw; Fri, 6 Nov 2009 10:34:21 -0800 (PST) Received: from outgoing01.lava.net (outgoing01.lava.net [IPv6:2001:1888:0:1:230:48ff:fe5b:3b50]) by core3.amsl.com (Postfix) with ESMTP id 209D63A697D; Fri, 6 Nov 2009 10:34:18 -0800 (PST) Received: from [2001:1888::a:214:51ff:fe29:1e4e] (unknown [IPv6:2001:1888:0:a:214:51ff:fe29:1e4e]) by outgoing01.lava.net (Postfix) with ESMTPS id 28321D25B1; Fri, 6 Nov 2009 08:34:37 -1000 (HST) Date: Fri, 6 Nov 2009 08:34:35 -1000 (HST) From: Antonio Querubin To: "Dunn, Jeffrey H." In-Reply-To: <3C6F21684E7C954193E6C7C4573B76270367855A0E@IMCMBX1.MITRE.ORG> Message-ID: References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> <3C6F21684E7C954193E6C7C4573B76270367855A0E@IMCMBX1.MITRE.ORG> User-Agent: Alpine 1.00 (OSX 882 2007-12-20) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, SAVI Mailing List , "william.allen.simpson@gmail.com" , Hesham Soliman , Susan@core3.amsl.com, "savi-ads@tools.ietf.org" , Robin Mersh , Thomson , "v6ops-ads@tools.ietf.org" , IETF@core3.amsl.com, IPv6 Operations , Mailing List , =?ISO-2022-JP?Q?JINMEI_Tatuya_=2F_=1B$B=3F=40L=40C#=3AH=1B=28J?= Subject: Re: [savi] Fwd: Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 18:34:21 -0000 On Fri, 6 Nov 2009, Dunn, Jeffrey H. wrote: > The problem is IMHO the following: How to assign an IPv6 UGA to CPE > hosts attached to a BMA LAN (usually Ethernet or Wi-Fi) that is in turn > connected via a CPE router through an NBMA link (cable modem or DSL) to > an ISP router that provides Internet access. Currently, there are two And what happens when there are multiple CPE routers a) connected via a BMA LAN to the DSL or cable modem and/or b) 'connected' via separate NBMA links but are on the same WAN subnet (assigned by the ISP) I think in the latter, if the ISP decides to silo the individual NBMA links then they need to adjust for that in how they do the sub-delegation which is I think what the issue is. But if the ISP actually bridges the separate NBMA links, then there's no silo issue and the CPE can pretend they're in 'a'. Antonio Querubin 808-545-5282 x3003 e-mail/xmpp: tony@lava.net From bs7652@att.com Fri Nov 6 10:56:00 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5DFB33A6831; Fri, 6 Nov 2009 10:56:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -108.599 X-Spam-Level: X-Spam-Status: No, score=-108.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, GB_I_LETTER=-2, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OKXklgcBcdvZ; Fri, 6 Nov 2009 10:55:59 -0800 (PST) Received: from mail121.messagelabs.com (mail121.messagelabs.com [216.82.242.3]) by core3.amsl.com (Postfix) with ESMTP id 425EB3A6824; Fri, 6 Nov 2009 10:55:59 -0800 (PST) X-VirusChecked: Checked X-Env-Sender: bs7652@att.com X-Msg-Ref: server-3.tower-121.messagelabs.com!1257533770!35490735!1 X-StarScan-Version: 6.1.3; banners=-,-,- X-Originating-IP: [144.160.20.146] Received: (qmail 16915 invoked from network); 6 Nov 2009 18:56:12 -0000 Received: from sbcsmtp7.sbc.com (HELO mlpd194.enaf.sfdc.sbc.com) (144.160.20.146) by server-3.tower-121.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 6 Nov 2009 18:56:12 -0000 Received: from enaf.sfdc.sbc.com (localhost.localdomain [127.0.0.1]) by mlpd194.enaf.sfdc.sbc.com (8.14.3/8.14.3) with ESMTP id nA6Iu96B031515; Fri, 6 Nov 2009 13:56:09 -0500 Received: from 01GAF5142010621.AD.BLS.COM (01GAF5142010621.ad.bls.com [139.76.131.79]) by mlpd194.enaf.sfdc.sbc.com (8.14.3/8.14.3) with SMTP id nA6ItmWV031345; Fri, 6 Nov 2009 13:56:04 -0500 Received: from 01NC27689010627.AD.BLS.COM ([90.144.44.202]) by 01GAF5142010621.AD.BLS.COM with Microsoft SMTPSVC(6.0.3790.3959); Fri, 6 Nov 2009 13:56:03 -0500 Received: from 01NC27689010641.AD.BLS.COM ([90.144.44.103]) by 01NC27689010627.AD.BLS.COM with Microsoft SMTPSVC(6.0.3790.3959); Fri, 6 Nov 2009 13:56:04 -0500 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4325 Content-Class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Fri, 6 Nov 2009 13:56:02 -0500 Message-ID: <7582BC68E4994F4ABF0BD4723975C3FA10C3768C@crexc41p> In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Broadband Forum liaison to IETF on IPv6 security thread-index: AcpfDjizWgSln0R8SgCVASZyKw59NAABGP2g References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> From: "Stark, Barbara" To: "james woodyatt" , "Thomas Narten" X-OriginalArrivalTime: 06 Nov 2009 18:56:04.0213 (UTC) FILETIME=[CA557A50:01CA5F12] X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: 6man-ads@tools.ietf.org, SAVI Mailing List , savi-ads@tools.ietf.org, v6ops-ads@tools.ietf.org, IPv6 Operations , IETF IPv6 Mailing List Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 18:56:00 -0000 The liaison was posted in March 2009. It can be found here: https://datatracker.ietf.org/documents/LIAISON/file621.doc Yes, this is very much about dealing with potential duplicate link local addresses. Thanks, Barbara > -----Original Message----- > From: ipv6-bounces@ietf.org [mailto:ipv6-bounces@ietf.org] On Behalf Of > james woodyatt > Sent: Friday, November 06, 2009 1:23 PM > To: Thomas Narten > Cc: 6man-ads@tools.ietf.org; SAVI Mailing List; savi- > ads@tools.ietf.org; v6ops-ads@tools.ietf.org; IPv6 Operations; IETF > IPv6 Mailing List > Subject: Re: Broadband Forum liaison to IETF on IPv6 security >=20 > On Nov 6, 2009, at 05:58, Thomas Narten wrote: >=20 > > Is there a problem statement somewhere that describes the actual > > problem for which a solution is needed? > > Has this been put into an ID, for instance? > > I haven't been able to get my head around the actual problem from > > the (few) emails I've seen. >=20 > The letter from the Broadband Forum Technical Chair in the message > that originated this thread mentions an attachment that includes a > revised Problem Statement on Duplicate Link Local Addresses, but it > wasn't forwarded with the letter. >=20 > I'd like to read that problem statement. Where is it? >=20 >=20 > -- > james woodyatt > member of technical staff, communications engineering >=20 >=20 > -------------------------------------------------------------------- > IETF IPv6 working group mailing list > ipv6@ietf.org > Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 > -------------------------------------------------------------------- ***** The information transmitted is intended only for the person or entity to = which it is addressed and may contain confidential, proprietary, and/or = privileged material. Any review, retransmission, dissemination or other = use of, or taking of any action in reliance upon this information by = persons or entities other than the intended recipient is prohibited. If = you received this in error, please contact the sender and delete the = material from all computers. GA621 From narten@us.ibm.com Fri Nov 6 11:17:39 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8163D3A6966; Fri, 6 Nov 2009 11:17:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.033 X-Spam-Level: X-Spam-Status: No, score=-4.033 tagged_above=-999 required=5 tests=[AWL=-1.433, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5Go2YeYAY24y; Fri, 6 Nov 2009 11:17:38 -0800 (PST) Received: from e7.ny.us.ibm.com (e7.ny.us.ibm.com [32.97.182.137]) by core3.amsl.com (Postfix) with ESMTP id 9E18D3A6959; Fri, 6 Nov 2009 11:17:38 -0800 (PST) Received: from d01relay05.pok.ibm.com (d01relay05.pok.ibm.com [9.56.227.237]) by e7.ny.us.ibm.com (8.14.3/8.13.1) with ESMTP id nA6JEHwN030197; Fri, 6 Nov 2009 14:14:17 -0500 Received: from d01av02.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by d01relay05.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id nA6JI1P0071058; Fri, 6 Nov 2009 14:18:01 -0500 Received: from d01av02.pok.ibm.com (loopback [127.0.0.1]) by d01av02.pok.ibm.com (8.14.3/8.13.1/NCO v10.0 AVout) with ESMTP id nA6FE0I8031231; Fri, 6 Nov 2009 10:14:00 -0500 Received: from cichlid.raleigh.ibm.com (sig-9-65-223-3.mts.ibm.com [9.65.223.3]) by d01av02.pok.ibm.com (8.14.3/8.13.1/NCO v10.0 AVin) with ESMTP id nA6FDxSx031160 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 6 Nov 2009 10:14:00 -0500 Received: from cichlid.raleigh.ibm.com (localhost [127.0.0.1]) by cichlid.raleigh.ibm.com (8.14.3/8.12.5) with ESMTP id nA6JHwVf005230; Fri, 6 Nov 2009 14:17:59 -0500 Message-Id: <200911061917.nA6JHwVf005230@cichlid.raleigh.ibm.com> To: "Stark, Barbara" In-reply-to: <7582BC68E4994F4ABF0BD4723975C3FA10C3768C@crexc41p> References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> <7582BC68E4994F4ABF0BD4723975C3FA10C3768C@crexc41p> Comments: In-reply-to "Stark, Barbara" message dated "Fri, 06 Nov 2009 13:56:02 -0500." Date: Fri, 06 Nov 2009 14:17:58 -0500 From: Thomas Narten X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: 6man-ads@tools.ietf.org, SAVI Mailing List , savi-ads@tools.ietf.org, james woodyatt , v6ops-ads@tools.ietf.org, IPv6 Operations , IETF IPv6 Mailing List Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 19:17:39 -0000 > The liaison was posted in March 2009. It can be found here: > https://datatracker.ietf.org/documents/LIAISON/file621.doc This is too skimpy of problem statement for me to understand the details of the problem. I don't know that a lot is needed. Maybe 2-3 pages is enough. But show me a diagram, label the pieces, show me the properties of the pieces and explain what the *exact* problem is. Who needs to do DAD? Why doesn't it work? etc. And note that comments like (quoting from the above statement): "We can envision a number of scenarios, both malice or vendor incompetence by which this can happen." There is very little anyone can do to prevent "vendor incompetence". I hope you aren't asking the IETF to solve this problem! :-) Thomas From jdunn@mitre.org Fri Nov 6 11:18:02 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 932EF3A6A75; Fri, 6 Nov 2009 11:18:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.105 X-Spam-Level: X-Spam-Status: No, score=-6.105 tagged_above=-999 required=5 tests=[AWL=0.494, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A3F+UVgZAsWo; Fri, 6 Nov 2009 11:18:01 -0800 (PST) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id AE31B3A69F0; Fri, 6 Nov 2009 11:18:01 -0800 (PST) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA6JINrW028184; Fri, 6 Nov 2009 14:18:25 -0500 Received: from imchub1.MITRE.ORG (imchub1.mitre.org [129.83.29.73]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA6JINbm028178; Fri, 6 Nov 2009 14:18:23 -0500 Received: from IMCMBX1.MITRE.ORG ([129.83.29.204]) by imchub1.MITRE.ORG ([129.83.29.73]) with mapi; Fri, 6 Nov 2009 14:18:22 -0500 From: "Dunn, Jeffrey H." To: Antonio Querubin Date: Fri, 6 Nov 2009 14:18:19 -0500 Thread-Topic: Fwd: Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcpfD9ATPsDVSCGmTqCpJYWjx52aqwABaHbA Message-ID: <3C6F21684E7C954193E6C7C4573B76270367855B2F@IMCMBX1.MITRE.ORG> References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> <3C6F21684E7C954193E6C7C4573B76270367855A0E@IMCMBX1.MITRE.ORG> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, SAVI Mailing List , "william.allen.simpson@gmail.com" , Hesham Soliman , "Susan@core3.amsl.com" , "savi-ads@tools.ietf.org" , Robin Mersh , Thomson , "v6ops-ads@tools.ietf.org" , "IETF@core3.amsl.com" , IPv6 Operations , Mailing List , "Dunn, Jeffrey H." , =?utf-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= Subject: Re: [savi] Fwd: Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 19:18:02 -0000 QW50b25pbywNCg0KUmVnYXJkbGVzcyBvZiB3aGV0aGVyIHRoZSBJU1AgYnJpZGdlcyB0aGUgTkJN QSBsaW5rcyBvciBub3QsIHRoZSBDUEUgcm91dGVyIHdpbGwgbm90IHByb3BhZ2F0ZSB0aGUgTkQg b3IgTlMgbWVzc2FnZXMgb250byB0aGVzZSBsaW5rcy4gVGhlIEV0aGVybmV0IGFuZCBXaS1GaSBC TUEgTEFOIHNlZ21lbnRzIGFyZSBzZXBhcmF0ZSBsb2dpY2FsIGxpbmtzIGZyb20gZWFjaCBvdGhl ciBhbmQgdGhlIElTUCBsaW5rKHMpLiBIb3cgd2lsbCB0aGUgQ1BFIHJvdXRlciBiZSAiY29udmlu Y2VkIiB0byBicmlkZ2UgdGhlc2UgbGluay1sb2NhbCBzY29wZWQgbWVzc2FnZXMgb2ZmIGxpbms/ DQoNCkJlc3QgUmVnYXJkcywgDQrCoCANCkplZmZyZXkgRHVubiANCkluZm8gU3lzdGVtcyBFbmcu LCBMZWFkIA0KTUlUUkUgQ29ycG9yYXRpb24uDQooMzAxKSA0NDgtNjk2NSAobW9iaWxlKQ0KDQoN Ci0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBBbnRvbmlvIFF1ZXJ1YmluIFttYWls dG86dG9ueUBsYXZhLm5ldF0gDQpTZW50OiBGcmlkYXksIE5vdmVtYmVyIDA2LCAyMDA5IDE6MzUg UE0NClRvOiBEdW5uLCBKZWZmcmV5IEguDQpDYzogVGhvbWFzIE5hcnRlbjsgRnJlZCBCYWtlcjsg Nm1hbi1hZHNAdG9vbHMuaWV0Zi5vcmc7IFNBVkkgTWFpbGluZyBMaXN0OyB3aWxsaWFtLmFsbGVu LnNpbXBzb25AZ21haWwuY29tOyBIZXNoYW0gU29saW1hbjsgSUVURkBjb3JlMy5hbXNsLmNvbTsg RXJpayBOb3JkbWFyazsgc2F2aS1hZHNAdG9vbHMuaWV0Zi5vcmc7IElQdjYgT3BlcmF0aW9uczsg VGhvbXNvbjsgdjZvcHMtYWRzQHRvb2xzLmlldGYub3JnOyBSb2JpbiBNZXJzaDsgTWFpbGluZyBM aXN0OyBTdXNhbkBjb3JlMy5hbXNsLmNvbTsgSklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ0K U3ViamVjdDogUkU6IEZ3ZDogQnJvYWRiYW5kIEZvcnVtIGxpYWlzb24gdG8gSUVURiBvbiBJUHY2 IHNlY3VyaXR5DQoNCk9uIEZyaSwgNiBOb3YgMjAwOSwgRHVubiwgSmVmZnJleSBILiB3cm90ZToN Cg0KPiBUaGUgcHJvYmxlbSBpcyBJTUhPIHRoZSBmb2xsb3dpbmc6IEhvdyB0byBhc3NpZ24gYW4g SVB2NiBVR0EgdG8gQ1BFIA0KPiBob3N0cyBhdHRhY2hlZCB0byBhIEJNQSBMQU4gKHVzdWFsbHkg RXRoZXJuZXQgb3IgV2ktRmkpIHRoYXQgaXMgaW4gdHVybiANCj4gY29ubmVjdGVkIHZpYSBhIENQ RSByb3V0ZXIgdGhyb3VnaCBhbiBOQk1BIGxpbmsgKGNhYmxlIG1vZGVtIG9yIERTTCkgdG8gDQo+ IGFuIElTUCByb3V0ZXIgdGhhdCBwcm92aWRlcyBJbnRlcm5ldCBhY2Nlc3MuIEN1cnJlbnRseSwg dGhlcmUgYXJlIHR3bw0KDQpBbmQgd2hhdCBoYXBwZW5zIHdoZW4gdGhlcmUgYXJlIG11bHRpcGxl IENQRSByb3V0ZXJzDQoNCmEpICBjb25uZWN0ZWQgdmlhIGEgQk1BIExBTiB0byB0aGUgRFNMIG9y IGNhYmxlIG1vZGVtDQoNCmFuZC9vcg0KDQpiKSAgJ2Nvbm5lY3RlZCcgdmlhIHNlcGFyYXRlIE5C TUEgbGlua3MgYnV0IGFyZSBvbiB0aGUgc2FtZSBXQU4gc3VibmV0IA0KKGFzc2lnbmVkIGJ5IHRo ZSBJU1ApDQoNCkkgdGhpbmsgaW4gdGhlIGxhdHRlciwgaWYgdGhlIElTUCBkZWNpZGVzIHRvIHNp bG8gdGhlIGluZGl2aWR1YWwgTkJNQSANCmxpbmtzIHRoZW4gdGhleSBuZWVkIHRvIGFkanVzdCBm b3IgdGhhdCBpbiBob3cgdGhleSBkbyB0aGUgc3ViLWRlbGVnYXRpb24gDQp3aGljaCBpcyBJIHRo aW5rIHdoYXQgdGhlIGlzc3VlIGlzLiAgQnV0IGlmIHRoZSBJU1AgYWN0dWFsbHkgYnJpZGdlcyB0 aGUgDQpzZXBhcmF0ZSBOQk1BIGxpbmtzLCB0aGVuIHRoZXJlJ3Mgbm8gc2lsbyBpc3N1ZSBhbmQg dGhlIENQRSBjYW4gcHJldGVuZCANCnRoZXkncmUgaW4gJ2EnLg0KDQpBbnRvbmlvIFF1ZXJ1Ymlu DQo4MDgtNTQ1LTUyODIgeDMwMDMNCmUtbWFpbC94bXBwOiAgdG9ueUBsYXZhLm5ldA0K From jhw@apple.com Fri Nov 6 11:19:45 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EBD7D3A697D; Fri, 6 Nov 2009 11:19:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -107.599 X-Spam-Level: X-Spam-Status: No, score=-107.599 tagged_above=-999 required=5 tests=[AWL=1.000, BAYES_00=-2.599, GB_I_LETTER=-2, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DfoI2MoAPDXY; Fri, 6 Nov 2009 11:19:45 -0800 (PST) Received: from mail-out3.apple.com (mail-out3.apple.com [17.254.13.22]) by core3.amsl.com (Postfix) with ESMTP id 4249D3A6966; Fri, 6 Nov 2009 11:19:45 -0800 (PST) Received: from relay14.apple.com (relay14.apple.com [17.128.113.52]) by mail-out3.apple.com (Postfix) with ESMTP id 2F21978B0F5E; Fri, 6 Nov 2009 11:20:09 -0800 (PST) X-AuditID: 11807134-b7cd9ae000001002-7a-4af476e8175e Received: from il0602a-dhcp117.apple.com (il0602a-dhcp117.apple.com [17.206.23.245]) (using TLS with cipher AES128-SHA (AES128-SHA/128 bits)) (Client did not present a certificate) by relay14.apple.com (Apple SCV relay) with SMTP id 43.3B.04098.9E674FA4; Fri, 6 Nov 2009 11:20:09 -0800 (PST) Mime-Version: 1.0 (Apple Message framework v1076) Content-Type: text/plain; charset=us-ascii; format=flowed; delsp=yes From: james woodyatt In-Reply-To: <7582BC68E4994F4ABF0BD4723975C3FA10C3768C@crexc41p> Date: Fri, 6 Nov 2009 11:20:08 -0800 Content-Transfer-Encoding: 7bit Message-Id: <4FB2EACA-D938-4DC5-97D5-51915B094025@apple.com> References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> <7582BC68E4994F4ABF0BD4723975C3FA10C3768C@crexc41p> To: "Stark, Barbara" X-Mailer: Apple Mail (2.1076) X-Brightmail-Tracker: AAAAAQAAAZE= X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: 6man-ads@tools.ietf.org, SAVI Mailing List , savi-ads@tools.ietf.org, v6ops-ads@tools.ietf.org, IPv6 Operations , IETF IPv6 Mailing List Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 19:19:46 -0000 On Nov 6, 2009, at 10:56, Stark, Barbara wrote: > > The liaison was posted in March 2009. It can be found here: > https://datatracker.ietf.org/documents/LIAISON/file621.doc That document is just the letter, i.e. it does not include the attachment it references. My feeble search-fu isn't strong enough to find the attachment on datatracker.ietf.org, so perhaps we need BBF to send it again? -- james woodyatt member of technical staff, communications engineering From wbeebee@cisco.com Fri Nov 6 13:47:34 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 868363A68D6; Fri, 6 Nov 2009 13:47:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.336 X-Spam-Level: X-Spam-Status: No, score=-6.336 tagged_above=-999 required=5 tests=[AWL=0.263, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HD2VbKtrIFZP; Fri, 6 Nov 2009 13:47:33 -0800 (PST) Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72]) by core3.amsl.com (Postfix) with ESMTP id 99A0E3A67EC; Fri, 6 Nov 2009 13:47:33 -0800 (PST) Authentication-Results: sj-iport-3.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApwEAF8o9EqrRN+K/2dsb2JhbACEc5U/qmWHEoIUCY5egTKBIoEWVASBZw X-IronPort-AV: E=Sophos;i="4.44,695,1249257600"; d="scan'208";a="201711999" Received: from sj-core-4.cisco.com ([171.68.223.138]) by sj-iport-3.cisco.com with ESMTP; 06 Nov 2009 21:47:57 +0000 Received: from xbh-rtp-201.amer.cisco.com (xbh-rtp-201.cisco.com [64.102.31.12]) by sj-core-4.cisco.com (8.13.8/8.14.3) with ESMTP id nA6Llvvu011453; Fri, 6 Nov 2009 21:47:57 GMT Received: from xmb-rtp-211.amer.cisco.com ([64.102.31.118]) by xbh-rtp-201.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 6 Nov 2009 16:47:56 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 Date: Fri, 6 Nov 2009 16:47:55 -0500 Message-ID: In-Reply-To: <3C6F21684E7C954193E6C7C4573B76270367855B2F@IMCMBX1.MITRE.ORG> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Fwd: Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcpfD9ATPsDVSCGmTqCpJYWjx52aqwABaHbAAAUHVrA= References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> <3C6F21684E7C954193E6C7C4573B76270367855A0E@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855B2F@IMCMBX1.MITRE.ORG> From: "Wes Beebee (wbeebee)" To: "Dunn, Jeffrey H." , "Antonio Querubin" X-OriginalArrivalTime: 06 Nov 2009 21:47:56.0988 (UTC) FILETIME=[CD3A0FC0:01CA5F2A] X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , 6man-ads@tools.ietf.org, SAVI Mailing List , william.allen.simpson@gmail.com, Hesham Soliman , Susan@core3.amsl.com, savi-ads@tools.ietf.org, Robin Mersh , "Susan Thomson \(sethomso\)" , v6ops-ads@tools.ietf.org, IETF@core3.amsl.com, IPv6 Operations , Mailing List , =?UTF-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= Subject: Re: [savi] Fwd: Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Nov 2009 21:47:34 -0000 VGhlIGtleSBpcyB0aGF0IHRoZSBhY2Nlc3Mgcm91dGVyICh3aGljaCBpcyB0aGUgb25seSByb3V0 ZXIgdGhhdCBrbm93cyB0aGlzIGlzIGFuIE5CTUEgbGluayBhbmQgbm90IGEgQk1BIGxpbmspIGNh biBzZWxlY3RpdmVseSBkZWNpZGUgdG8gc2VuZCBORCBtZXNzYWdlcyAoZWl0aGVyIE5BJ3Mgb3Ig TlMoREFEKSBtZXNzYWdlcykgd2hlbiB0aGUgYWNjZXNzIHJvdXRlciBkZXRlY3RzIHRoYXQgdGhl cmUgaXMgYSBkdXBsaWNhdGUgb24gdGhlIGxpbmsuICBUaGlzIGlzIHRoZSBtaW5pbXVtIHJlcXVp cmVtZW50IHRvIHN1cHBvcnQgREFEIG9uIGFuIE5CTUEgbGluay4gIFRoaXMgd291bGQgbmVlZCB0 byBzcGVjaWZpZWQgaW4gYW4gTkJNQS1zcGVjaWZpYyBkb2N1bWVudCBhbmQgcHJvYmFibHkgZG9l c24ndCBuZWVkIHRvIGJlIG1lbnRpb25lZCBpbiBhIGRvY3VtZW50IGxpa2UgUkZDIDQ4NjEuDQoN Ci0gV2VzIA0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogb3duZXItdjZvcHNA b3BzLmlldGYub3JnIFttYWlsdG86b3duZXItdjZvcHNAb3BzLmlldGYub3JnXSBPbiBCZWhhbGYg T2YgRHVubiwgSmVmZnJleSBILg0KU2VudDogRnJpZGF5LCBOb3ZlbWJlciAwNiwgMjAwOSAyOjE4 IFBNDQpUbzogQW50b25pbyBRdWVydWJpbg0KQ2M6IFRob21hcyBOYXJ0ZW47IEZyZWQgQmFrZXIg KGZyZWQpOyA2bWFuLWFkc0B0b29scy5pZXRmLm9yZzsgU0FWSSBNYWlsaW5nIExpc3Q7IHdpbGxp YW0uYWxsZW4uc2ltcHNvbkBnbWFpbC5jb207IEhlc2hhbSBTb2xpbWFuOyBJRVRGQGNvcmUzLmFt c2wuY29tOyBFcmlrIE5vcmRtYXJrOyBzYXZpLWFkc0B0b29scy5pZXRmLm9yZzsgSVB2NiBPcGVy YXRpb25zOyBTdXNhbiBUaG9tc29uIChzZXRob21zbyk7IHY2b3BzLWFkc0B0b29scy5pZXRmLm9y ZzsgUm9iaW4gTWVyc2g7IE1haWxpbmcgTGlzdDsgU3VzYW5AY29yZTMuYW1zbC5jb207IEpJTk1F SSBUYXR1eWEgLyDnpZ7mmI7pgZTlk4k7IER1bm4sIEplZmZyZXkgSC4NClN1YmplY3Q6IFJFOiBG d2Q6IEJyb2FkYmFuZCBGb3J1bSBsaWFpc29uIHRvIElFVEYgb24gSVB2NiBzZWN1cml0eQ0KDQpB bnRvbmlvLA0KDQpSZWdhcmRsZXNzIG9mIHdoZXRoZXIgdGhlIElTUCBicmlkZ2VzIHRoZSBOQk1B IGxpbmtzIG9yIG5vdCwgdGhlIENQRSByb3V0ZXIgd2lsbCBub3QgcHJvcGFnYXRlIHRoZSBORCBv ciBOUyBtZXNzYWdlcyBvbnRvIHRoZXNlIGxpbmtzLiBUaGUgRXRoZXJuZXQgYW5kIFdpLUZpIEJN QSBMQU4gc2VnbWVudHMgYXJlIHNlcGFyYXRlIGxvZ2ljYWwgbGlua3MgZnJvbSBlYWNoIG90aGVy IGFuZCB0aGUgSVNQIGxpbmsocykuIEhvdyB3aWxsIHRoZSBDUEUgcm91dGVyIGJlICJjb252aW5j ZWQiIHRvIGJyaWRnZSB0aGVzZSBsaW5rLWxvY2FsIHNjb3BlZCBtZXNzYWdlcyBvZmYgbGluaz8N Cg0KQmVzdCBSZWdhcmRzLCANCsKgIA0KSmVmZnJleSBEdW5uDQpJbmZvIFN5c3RlbXMgRW5nLiwg TGVhZA0KTUlUUkUgQ29ycG9yYXRpb24uDQooMzAxKSA0NDgtNjk2NSAobW9iaWxlKQ0KDQoNCi0t LS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBBbnRvbmlvIFF1ZXJ1YmluIFttYWlsdG86 dG9ueUBsYXZhLm5ldF0NClNlbnQ6IEZyaWRheSwgTm92ZW1iZXIgMDYsIDIwMDkgMTozNSBQTQ0K VG86IER1bm4sIEplZmZyZXkgSC4NCkNjOiBUaG9tYXMgTmFydGVuOyBGcmVkIEJha2VyOyA2bWFu LWFkc0B0b29scy5pZXRmLm9yZzsgU0FWSSBNYWlsaW5nIExpc3Q7IHdpbGxpYW0uYWxsZW4uc2lt cHNvbkBnbWFpbC5jb207IEhlc2hhbSBTb2xpbWFuOyBJRVRGQGNvcmUzLmFtc2wuY29tOyBFcmlr IE5vcmRtYXJrOyBzYXZpLWFkc0B0b29scy5pZXRmLm9yZzsgSVB2NiBPcGVyYXRpb25zOyBUaG9t c29uOyB2Nm9wcy1hZHNAdG9vbHMuaWV0Zi5vcmc7IFJvYmluIE1lcnNoOyBNYWlsaW5nIExpc3Q7 IFN1c2FuQGNvcmUzLmFtc2wuY29tOyBKSU5NRUkgVGF0dXlhIC8g56We5piO6YGU5ZOJDQpTdWJq ZWN0OiBSRTogRndkOiBCcm9hZGJhbmQgRm9ydW0gbGlhaXNvbiB0byBJRVRGIG9uIElQdjYgc2Vj dXJpdHkNCg0KT24gRnJpLCA2IE5vdiAyMDA5LCBEdW5uLCBKZWZmcmV5IEguIHdyb3RlOg0KDQo+ IFRoZSBwcm9ibGVtIGlzIElNSE8gdGhlIGZvbGxvd2luZzogSG93IHRvIGFzc2lnbiBhbiBJUHY2 IFVHQSB0byBDUEUgDQo+IGhvc3RzIGF0dGFjaGVkIHRvIGEgQk1BIExBTiAodXN1YWxseSBFdGhl cm5ldCBvciBXaS1GaSkgdGhhdCBpcyBpbiANCj4gdHVybiBjb25uZWN0ZWQgdmlhIGEgQ1BFIHJv dXRlciB0aHJvdWdoIGFuIE5CTUEgbGluayAoY2FibGUgbW9kZW0gb3IgDQo+IERTTCkgdG8gYW4g SVNQIHJvdXRlciB0aGF0IHByb3ZpZGVzIEludGVybmV0IGFjY2Vzcy4gQ3VycmVudGx5LCB0aGVy ZSANCj4gYXJlIHR3bw0KDQpBbmQgd2hhdCBoYXBwZW5zIHdoZW4gdGhlcmUgYXJlIG11bHRpcGxl IENQRSByb3V0ZXJzDQoNCmEpICBjb25uZWN0ZWQgdmlhIGEgQk1BIExBTiB0byB0aGUgRFNMIG9y IGNhYmxlIG1vZGVtDQoNCmFuZC9vcg0KDQpiKSAgJ2Nvbm5lY3RlZCcgdmlhIHNlcGFyYXRlIE5C TUEgbGlua3MgYnV0IGFyZSBvbiB0aGUgc2FtZSBXQU4gc3VibmV0IChhc3NpZ25lZCBieSB0aGUg SVNQKQ0KDQpJIHRoaW5rIGluIHRoZSBsYXR0ZXIsIGlmIHRoZSBJU1AgZGVjaWRlcyB0byBzaWxv IHRoZSBpbmRpdmlkdWFsIE5CTUEgbGlua3MgdGhlbiB0aGV5IG5lZWQgdG8gYWRqdXN0IGZvciB0 aGF0IGluIGhvdyB0aGV5IGRvIHRoZSBzdWItZGVsZWdhdGlvbiB3aGljaCBpcyBJIHRoaW5rIHdo YXQgdGhlIGlzc3VlIGlzLiAgQnV0IGlmIHRoZSBJU1AgYWN0dWFsbHkgYnJpZGdlcyB0aGUgc2Vw YXJhdGUgTkJNQSBsaW5rcywgdGhlbiB0aGVyZSdzIG5vIHNpbG8gaXNzdWUgYW5kIHRoZSBDUEUg Y2FuIHByZXRlbmQgdGhleSdyZSBpbiAnYScuDQoNCkFudG9uaW8gUXVlcnViaW4NCjgwOC01NDUt NTI4MiB4MzAwMw0KZS1tYWlsL3htcHA6ICB0b255QGxhdmEubmV0DQo= From shemant@cisco.com Fri Nov 6 16:23:21 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C714228C133; Fri, 6 Nov 2009 16:23:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.667 X-Spam-Level: X-Spam-Status: No, score=-5.667 tagged_above=-999 required=5 tests=[AWL=0.932, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sTDVLckV28+q; Fri, 6 Nov 2009 16:23:20 -0800 (PST) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 8B96228C12F; Fri, 6 Nov 2009 16:23:20 -0800 (PST) Authentication-Results: sj-iport-6.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApwEACpN9EqrR7Ht/2dsb2JhbACEcpU/qgeHEoIUCY5hgTKBIoEWVASBZw X-IronPort-AV: E=Sophos;i="4.44,697,1249257600"; d="scan'208";a="426815182" Received: from sj-core-1.cisco.com ([171.71.177.237]) by sj-iport-6.cisco.com with ESMTP; 07 Nov 2009 00:23:44 +0000 Received: from xbh-rcd-101.cisco.com (xbh-rcd-101.cisco.com [72.163.62.138]) by sj-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nA70Nhpq012954; Sat, 7 Nov 2009 00:23:44 GMT Received: from xmb-rcd-114.cisco.com ([72.163.62.156]) by xbh-rcd-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 6 Nov 2009 18:23:43 -0600 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 Date: Fri, 6 Nov 2009 18:23:41 -0600 Message-ID: In-Reply-To: <3C6F21684E7C954193E6C7C4573B76270367855CA1@IMCMBX1.MITRE.ORG> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Fwd: Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcpfD9ATPsDVSCGmTqCpJYWjx52aqwABaHbAAAUHVrAAAurLsAACWa5A References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> <3C6F21684E7C954193E6C7C4573B76270367855A0E@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855B2F@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855CA1@IMCMBX1.MITRE.ORG> From: "Hemant Singh (shemant)" To: "Dunn, Jeffrey H." , "Wes Beebee (wbeebee)" , "Antonio Querubin" X-OriginalArrivalTime: 07 Nov 2009 00:23:43.0526 (UTC) FILETIME=[90329460:01CA5F40] X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , 6man-ads@tools.ietf.org, SAVI Mailing List , william.allen.simpson@gmail.com, Hesham Soliman , Susan@core3.amsl.com, savi-ads@tools.ietf.org, Robin Mersh , "Susan Thomson \(sethomso\)" , v6ops-ads@tools.ietf.org, IETF@core3.amsl.com, IPv6 Operations , Mailing List , =?UTF-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= Subject: Re: [savi] Fwd: Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2009 00:23:21 -0000 VGhpcyBpcyB0aGUgc2FtZSB0aG91Z2h0IEkgZW1haWxlZCBhYm91dCB0aGF0IHRoZSBhY2Nlc3Mg Y29uY2VudHJhdG9yIGluIHRoZSBOQk1BIGxpbmsgcGVyZm9ybWluZyBORCBQcm94eSAtIFdlcyBh bmQgSSBhcmUgc2F5aW5nIHRoZSBzYW1lIHRoaW5nIC0gaGUgcHV0IGlzIHZlcnkgbmljZWx5IGlu IGNvbmNpc2UgZm9ybS4gIFRoZSBhY2Nlc3MgY29uY2VudHJhdG9yIGlzIGFsc28gdGhlIGZpcnN0 IGhvcCBJUHY2IHJvdXRlciB0byB0aGUgYnJvYWRiYW5kIGVuYWJsZWQgaG9tZSBhbmQgbm90ZSB0 aGF0IGEgcm91dGVyIGludGVyZmFjZSBqb2lucyBvbmx5IHRoZSBhbGwtbm9kZXMgbWNhc3QgYWRk cmVzcyBhbmQgdGhlIGludGVyZmFjZSBzb2xpY2l0ZWQtbm9kZSBtY2FzdCBhZGRyZXNzLiAgU3Vj aCBhbiBpbnRlcmZhY2UgbWNhc3Qgam9pbiB3aWxsIG5vdCBsZXQgdGhlIHJvdXRlciBzZWUgYWxs IE5TKERBRClzIG9uIHRoZSBsaW5rLiAgVGhhdCBpcyB3aHkgd2hlbiBhIHJvdXRlciBpbiB0aGUg Qk1BIG9yIE5CTUEgbGluayBzdGFydHMgc25pZmZpbmcgYWxsIG1jYXN0IHRyYWZmaWMsIHRoZW4g dGhlIHJvdXRlciBzZWVzIGFsbCB0aGUgTlMoREFEKXMgb24gaXRzIGxpbmsgYW5kIHRoaXMgc25p ZmZpbmcgZm9yIGFsbCBtY2FzdCB0cmFmZmljIGhhcHBlbnMgdG8gYmUgdGhlIGZpcnN0IHJlcXVp cmVtZW50IG9mIGEgTkQgUHJveHkhDQoNCkFzIGZvciB5b3VyIHF1ZXN0aW9uIGJlbG93LCB0aGUg Q1BFIFJvdXRlciBpbiB0aGUgaG9tZSBoYXMgZ290IHRvIGhhdmUgYmVlbiBkZWxlZ2F0ZWQgYSBw cmVmaXggYW5kIGVhY2ggaG9tZSBnZXRzIGEgZGlmZmVyZW50IHByZWZpeCwgc28gaG93IGNhbiB0 aGUgVUdBIGZyb20gdGhlIGhvbWUgZGV2aWNlIGZyb20gb25lIGhvbWUgZXZlciBlbmNvdW50ZXIg YSBkdXAgYXQgdGhlIGFjY2VzcyBjb25jZW50cmF0b3I/ICBJZiBhbnl0aGluZyBkdXBzIGNhbiBl eGlzdCB3aXRoaW4gdGhlIHNhbWUgaG9tZSwgYnV0IHRoZSBDUEUgUm91dGVyIGFscmVhZHkgdGFr ZXMgY2FyZSBvZiB0aG9zZSBkdXBzIGluIHRoZSBob21lIExBTiBsaW5rLg0KDQpIZW1hbnQNCg0K LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IG93bmVyLXY2b3BzQG9wcy5pZXRmLm9y ZyBbbWFpbHRvOm93bmVyLXY2b3BzQG9wcy5pZXRmLm9yZ10gT24gQmVoYWxmIE9mIER1bm4sIEpl ZmZyZXkgSC4NClNlbnQ6IEZyaWRheSwgTm92ZW1iZXIgMDYsIDIwMDkgNjoyNiBQTQ0KVG86IFdl cyBCZWViZWUgKHdiZWViZWUpOyBBbnRvbmlvIFF1ZXJ1YmluDQpDYzogVGhvbWFzIE5hcnRlbjsg RnJlZCBCYWtlciAoZnJlZCk7IDZtYW4tYWRzQHRvb2xzLmlldGYub3JnOyBTQVZJIE1haWxpbmcg TGlzdDsgd2lsbGlhbS5hbGxlbi5zaW1wc29uQGdtYWlsLmNvbTsgSGVzaGFtIFNvbGltYW47IElF VEZAY29yZTMuYW1zbC5jb207IEVyaWsgTm9yZG1hcms7IHNhdmktYWRzQHRvb2xzLmlldGYub3Jn OyBJUHY2IE9wZXJhdGlvbnM7IFN1c2FuIFRob21zb24gKHNldGhvbXNvKTsgdjZvcHMtYWRzQHRv b2xzLmlldGYub3JnOyBSb2JpbiBNZXJzaDsgTWFpbGluZyBMaXN0OyBTdXNhbkBjb3JlMy5hbXNs LmNvbTsgSklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiTsgRHVubiwgSmVmZnJleSBILg0KU3Vi amVjdDogUkU6IEZ3ZDogQnJvYWRiYW5kIEZvcnVtIGxpYWlzb24gdG8gSUVURiBvbiBJUHY2IHNl Y3VyaXR5DQoNCldlcywNCg0KVGhhdCBpcyBhbiBpbnRlcmVzdGluZyBpZGVhLiBPbmUgcXVlc3Rp b24gb2NjdXJzIHRvIG1lIHRoYXQgeW91IGNhbiBwcm9iYWJseSBhbnN3ZXIuIFdoYXQgaGFwcGVu cyBpZiBhIGhvc3QgYmVoaW5kIHRoZSBDUEUgcm91dGVyIGRvZXMgU0xBQUMsIGNvbmZpZ3VyZXMg YSBVR0E/IFNpbmNlIGl0IGhhcyBhbHJlYWR5IGRvbmUgREFELCB0aGUgaG9zdCBhc3N1bWVzIGl0 IGhhcyBhbiB1bnVzZWQgYWRkcmVzcy4gV2hlbiB0aGUgaG9zdCBmaW5hbGx5IHRyaWVzIHRvIHVz ZSB0aGUgVUdBIHRvIGFjY2VzcyB0aGUgSW50ZXJuZXQgYW5kIHRoZSBhY2Nlc3Mgcm91dGVyIHNl bmRzIGFuIE5BIG9yIE5TKERBRCksIHdoYXQgc2hvdWxkIHRoZSBob3N0IGRvPyBJdCBoYXMgYWxy ZWFkeSB2YWxpZGF0ZWQgdGhlIFVHQSB1c2luZyBEQUQuIE15IGludGVycHJldGF0aW9uIGlzIHRo YXQgaXQgc2hvdWxkIHJlcGx5IHRvIHRoZSBOUyhEQUQpIHdpdGggYW4gTkEgKGJhc2VkIG9uIFJG QyA0ODYyKS4gSSBhbSBub3Qgc3VyZSBhYm91dCBhIGR1cGxpY2F0ZSBOQSwgc2luY2UgREFEIGlz IHN1cHBvc2VkIHRvIHByZXZlbnQgdGhpcy4gDQoNCkJlc3QgUmVnYXJkcywgDQrCoCANCkplZmZy ZXkgRHVubiANCkluZm8gU3lzdGVtcyBFbmcuLCBMZWFkIA0KTUlUUkUgQ29ycG9yYXRpb24uDQoo MzAxKSA0NDgtNjk2NSAobW9iaWxlKQ0KDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpG cm9tOiBXZXMgQmVlYmVlICh3YmVlYmVlKSBbbWFpbHRvOndiZWViZWVAY2lzY28uY29tXSANClNl bnQ6IEZyaWRheSwgTm92ZW1iZXIgMDYsIDIwMDkgNDo0OCBQTQ0KVG86IER1bm4sIEplZmZyZXkg SC47IEFudG9uaW8gUXVlcnViaW4NCkNjOiBUaG9tYXMgTmFydGVuOyBGcmVkIEJha2VyIChmcmVk KTsgNm1hbi1hZHNAdG9vbHMuaWV0Zi5vcmc7IFNBVkkgTWFpbGluZyBMaXN0OyB3aWxsaWFtLmFs bGVuLnNpbXBzb25AZ21haWwuY29tOyBIZXNoYW0gU29saW1hbjsgSUVURkBjb3JlMy5hbXNsLmNv bTsgRXJpayBOb3JkbWFyazsgc2F2aS1hZHNAdG9vbHMuaWV0Zi5vcmc7IElQdjYgT3BlcmF0aW9u czsgU3VzYW4gVGhvbXNvbiAoc2V0aG9tc28pOyB2Nm9wcy1hZHNAdG9vbHMuaWV0Zi5vcmc7IFJv YmluIE1lcnNoOyBNYWlsaW5nIExpc3Q7IFN1c2FuQGNvcmUzLmFtc2wuY29tOyBKSU5NRUkgVGF0 dXlhIC8g56We5piO6YGU5ZOJDQpTdWJqZWN0OiBSRTogRndkOiBCcm9hZGJhbmQgRm9ydW0gbGlh aXNvbiB0byBJRVRGIG9uIElQdjYgc2VjdXJpdHkNCg0KVGhlIGtleSBpcyB0aGF0IHRoZSBhY2Nl c3Mgcm91dGVyICh3aGljaCBpcyB0aGUgb25seSByb3V0ZXIgdGhhdCBrbm93cyB0aGlzIGlzIGFu IE5CTUEgbGluayBhbmQgbm90IGEgQk1BIGxpbmspIGNhbiBzZWxlY3RpdmVseSBkZWNpZGUgdG8g c2VuZCBORCBtZXNzYWdlcyAoZWl0aGVyIE5BJ3Mgb3IgTlMoREFEKSBtZXNzYWdlcykgd2hlbiB0 aGUgYWNjZXNzIHJvdXRlciBkZXRlY3RzIHRoYXQgdGhlcmUgaXMgYSBkdXBsaWNhdGUgb24gdGhl IGxpbmsuICBUaGlzIGlzIHRoZSBtaW5pbXVtIHJlcXVpcmVtZW50IHRvIHN1cHBvcnQgREFEIG9u IGFuIE5CTUEgbGluay4gIFRoaXMgd291bGQgbmVlZCB0byBzcGVjaWZpZWQgaW4gYW4gTkJNQS1z cGVjaWZpYyBkb2N1bWVudCBhbmQgcHJvYmFibHkgZG9lc24ndCBuZWVkIHRvIGJlIG1lbnRpb25l ZCBpbiBhIGRvY3VtZW50IGxpa2UgUkZDIDQ4NjEuDQoNCi0gV2VzIA0KDQotLS0tLU9yaWdpbmFs IE1lc3NhZ2UtLS0tLQ0KRnJvbTogb3duZXItdjZvcHNAb3BzLmlldGYub3JnIFttYWlsdG86b3du ZXItdjZvcHNAb3BzLmlldGYub3JnXSBPbiBCZWhhbGYgT2YgRHVubiwgSmVmZnJleSBILg0KU2Vu dDogRnJpZGF5LCBOb3ZlbWJlciAwNiwgMjAwOSAyOjE4IFBNDQpUbzogQW50b25pbyBRdWVydWJp bg0KQ2M6IFRob21hcyBOYXJ0ZW47IEZyZWQgQmFrZXIgKGZyZWQpOyA2bWFuLWFkc0B0b29scy5p ZXRmLm9yZzsgU0FWSSBNYWlsaW5nIExpc3Q7IHdpbGxpYW0uYWxsZW4uc2ltcHNvbkBnbWFpbC5j b207IEhlc2hhbSBTb2xpbWFuOyBJRVRGQGNvcmUzLmFtc2wuY29tOyBFcmlrIE5vcmRtYXJrOyBz YXZpLWFkc0B0b29scy5pZXRmLm9yZzsgSVB2NiBPcGVyYXRpb25zOyBTdXNhbiBUaG9tc29uIChz ZXRob21zbyk7IHY2b3BzLWFkc0B0b29scy5pZXRmLm9yZzsgUm9iaW4gTWVyc2g7IE1haWxpbmcg TGlzdDsgU3VzYW5AY29yZTMuYW1zbC5jb207IEpJTk1FSSBUYXR1eWEgLyDnpZ7mmI7pgZTlk4k7 IER1bm4sIEplZmZyZXkgSC4NClN1YmplY3Q6IFJFOiBGd2Q6IEJyb2FkYmFuZCBGb3J1bSBsaWFp c29uIHRvIElFVEYgb24gSVB2NiBzZWN1cml0eQ0KDQpBbnRvbmlvLA0KDQpSZWdhcmRsZXNzIG9m IHdoZXRoZXIgdGhlIElTUCBicmlkZ2VzIHRoZSBOQk1BIGxpbmtzIG9yIG5vdCwgdGhlIENQRSBy b3V0ZXIgd2lsbCBub3QgcHJvcGFnYXRlIHRoZSBORCBvciBOUyBtZXNzYWdlcyBvbnRvIHRoZXNl IGxpbmtzLiBUaGUgRXRoZXJuZXQgYW5kIFdpLUZpIEJNQSBMQU4gc2VnbWVudHMgYXJlIHNlcGFy YXRlIGxvZ2ljYWwgbGlua3MgZnJvbSBlYWNoIG90aGVyIGFuZCB0aGUgSVNQIGxpbmsocykuIEhv dyB3aWxsIHRoZSBDUEUgcm91dGVyIGJlICJjb252aW5jZWQiIHRvIGJyaWRnZSB0aGVzZSBsaW5r LWxvY2FsIHNjb3BlZCBtZXNzYWdlcyBvZmYgbGluaz8NCg0KQmVzdCBSZWdhcmRzLCANCsKgIA0K SmVmZnJleSBEdW5uDQpJbmZvIFN5c3RlbXMgRW5nLiwgTGVhZA0KTUlUUkUgQ29ycG9yYXRpb24u DQooMzAxKSA0NDgtNjk2NSAobW9iaWxlKQ0KDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t DQpGcm9tOiBBbnRvbmlvIFF1ZXJ1YmluIFttYWlsdG86dG9ueUBsYXZhLm5ldF0NClNlbnQ6IEZy aWRheSwgTm92ZW1iZXIgMDYsIDIwMDkgMTozNSBQTQ0KVG86IER1bm4sIEplZmZyZXkgSC4NCkNj OiBUaG9tYXMgTmFydGVuOyBGcmVkIEJha2VyOyA2bWFuLWFkc0B0b29scy5pZXRmLm9yZzsgU0FW SSBNYWlsaW5nIExpc3Q7IHdpbGxpYW0uYWxsZW4uc2ltcHNvbkBnbWFpbC5jb207IEhlc2hhbSBT b2xpbWFuOyBJRVRGQGNvcmUzLmFtc2wuY29tOyBFcmlrIE5vcmRtYXJrOyBzYXZpLWFkc0B0b29s cy5pZXRmLm9yZzsgSVB2NiBPcGVyYXRpb25zOyBUaG9tc29uOyB2Nm9wcy1hZHNAdG9vbHMuaWV0 Zi5vcmc7IFJvYmluIE1lcnNoOyBNYWlsaW5nIExpc3Q7IFN1c2FuQGNvcmUzLmFtc2wuY29tOyBK SU5NRUkgVGF0dXlhIC8g56We5piO6YGU5ZOJDQpTdWJqZWN0OiBSRTogRndkOiBCcm9hZGJhbmQg Rm9ydW0gbGlhaXNvbiB0byBJRVRGIG9uIElQdjYgc2VjdXJpdHkNCg0KT24gRnJpLCA2IE5vdiAy MDA5LCBEdW5uLCBKZWZmcmV5IEguIHdyb3RlOg0KDQo+IFRoZSBwcm9ibGVtIGlzIElNSE8gdGhl IGZvbGxvd2luZzogSG93IHRvIGFzc2lnbiBhbiBJUHY2IFVHQSB0byBDUEUgDQo+IGhvc3RzIGF0 dGFjaGVkIHRvIGEgQk1BIExBTiAodXN1YWxseSBFdGhlcm5ldCBvciBXaS1GaSkgdGhhdCBpcyBp biANCj4gdHVybiBjb25uZWN0ZWQgdmlhIGEgQ1BFIHJvdXRlciB0aHJvdWdoIGFuIE5CTUEgbGlu ayAoY2FibGUgbW9kZW0gb3IgDQo+IERTTCkgdG8gYW4gSVNQIHJvdXRlciB0aGF0IHByb3ZpZGVz IEludGVybmV0IGFjY2Vzcy4gQ3VycmVudGx5LCB0aGVyZSANCj4gYXJlIHR3bw0KDQpBbmQgd2hh dCBoYXBwZW5zIHdoZW4gdGhlcmUgYXJlIG11bHRpcGxlIENQRSByb3V0ZXJzDQoNCmEpICBjb25u ZWN0ZWQgdmlhIGEgQk1BIExBTiB0byB0aGUgRFNMIG9yIGNhYmxlIG1vZGVtDQoNCmFuZC9vcg0K DQpiKSAgJ2Nvbm5lY3RlZCcgdmlhIHNlcGFyYXRlIE5CTUEgbGlua3MgYnV0IGFyZSBvbiB0aGUg c2FtZSBXQU4gc3VibmV0IChhc3NpZ25lZCBieSB0aGUgSVNQKQ0KDQpJIHRoaW5rIGluIHRoZSBs YXR0ZXIsIGlmIHRoZSBJU1AgZGVjaWRlcyB0byBzaWxvIHRoZSBpbmRpdmlkdWFsIE5CTUEgbGlu a3MgdGhlbiB0aGV5IG5lZWQgdG8gYWRqdXN0IGZvciB0aGF0IGluIGhvdyB0aGV5IGRvIHRoZSBz dWItZGVsZWdhdGlvbiB3aGljaCBpcyBJIHRoaW5rIHdoYXQgdGhlIGlzc3VlIGlzLiAgQnV0IGlm IHRoZSBJU1AgYWN0dWFsbHkgYnJpZGdlcyB0aGUgc2VwYXJhdGUgTkJNQSBsaW5rcywgdGhlbiB0 aGVyZSdzIG5vIHNpbG8gaXNzdWUgYW5kIHRoZSBDUEUgY2FuIHByZXRlbmQgdGhleSdyZSBpbiAn YScuDQoNCkFudG9uaW8gUXVlcnViaW4NCjgwOC01NDUtNTI4MiB4MzAwMw0KZS1tYWlsL3htcHA6 ICB0b255QGxhdmEubmV0DQo= From jdunn@mitre.org Fri Nov 6 16:30:50 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1E3F03A6808; Fri, 6 Nov 2009 16:30:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.127 X-Spam-Level: X-Spam-Status: No, score=-6.127 tagged_above=-999 required=5 tests=[AWL=0.472, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rA2wbGXlEEfZ; Fri, 6 Nov 2009 16:30:49 -0800 (PST) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id D04233A6824; Fri, 6 Nov 2009 16:30:48 -0800 (PST) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA70VADu006388; Fri, 6 Nov 2009 19:31:12 -0500 Received: from imchub2.MITRE.ORG (imchub2.mitre.org [129.83.29.74]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA70VA2x006385; Fri, 6 Nov 2009 19:31:10 -0500 Received: from IMCMBX1.MITRE.ORG ([129.83.29.204]) by imchub2.MITRE.ORG ([129.83.29.74]) with mapi; Fri, 6 Nov 2009 19:31:10 -0500 From: "Dunn, Jeffrey H." To: "Hemant Singh (shemant)" , "Wes Beebee (wbeebee)" , Antonio Querubin Date: Fri, 6 Nov 2009 19:31:08 -0500 Thread-Topic: Fwd: Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcpfD9ATPsDVSCGmTqCpJYWjx52aqwABaHbAAAUHVrAAAurLsAACWa5AAACk0zA= Message-ID: <3C6F21684E7C954193E6C7C4573B76270367855CBC@IMCMBX1.MITRE.ORG> References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> <3C6F21684E7C954193E6C7C4573B76270367855A0E@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855B2F@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855CA1@IMCMBX1.MITRE.ORG> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, SAVI Mailing List , "william.allen.simpson@gmail.com" , Hesham Soliman , "Susan@core3.amsl.com" , "savi-ads@tools.ietf.org" , Robin Mersh , "Susan Thomson \(sethomso\)" , "v6ops-ads@tools.ietf.org" , "IETF@core3.amsl.com" , IPv6 Operations , Mailing List , "Dunn, Jeffrey H." , =?utf-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= Subject: Re: [savi] Fwd: Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2009 00:30:50 -0000 T0suIFRoZW4gdGhlIENQRSByb3V0ZXIgaGFzIGEgdW5pcXVlIC82NCBmb3IgYWxsIG9mIGl0cyBi cm9hZGNhc3QgZG9tYWlucz8gRG9lcyB0aGF0IG1lYW4gdGhhdCB0aGUgY3VzdG9tZXIgbmVlZHMg dG8gdGVsbCB0aGUgSVNQIGhvdyBtYW55IC82NCBwcmVmaXhlcyB0aGV5IG5lZWQ/DQoNCkJlc3Qg UmVnYXJkcywgDQrCoCANCkplZmZyZXkgRHVubiANCkluZm8gU3lzdGVtcyBFbmcuLCBMZWFkIA0K TUlUUkUgQ29ycG9yYXRpb24uDQooMzAxKSA0NDgtNjk2NSAobW9iaWxlKQ0KDQoNCi0tLS0tT3Jp Z2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBIZW1hbnQgU2luZ2ggKHNoZW1hbnQpIFttYWlsdG86 c2hlbWFudEBjaXNjby5jb21dIA0KU2VudDogRnJpZGF5LCBOb3ZlbWJlciAwNiwgMjAwOSA3OjI0 IFBNDQpUbzogRHVubiwgSmVmZnJleSBILjsgV2VzIEJlZWJlZSAod2JlZWJlZSk7IEFudG9uaW8g UXVlcnViaW4NCkNjOiBUaG9tYXMgTmFydGVuOyBGcmVkIEJha2VyIChmcmVkKTsgNm1hbi1hZHNA dG9vbHMuaWV0Zi5vcmc7IFNBVkkgTWFpbGluZyBMaXN0OyB3aWxsaWFtLmFsbGVuLnNpbXBzb25A Z21haWwuY29tOyBIZXNoYW0gU29saW1hbjsgSUVURkBjb3JlMy5hbXNsLmNvbTsgRXJpayBOb3Jk bWFyazsgc2F2aS1hZHNAdG9vbHMuaWV0Zi5vcmc7IElQdjYgT3BlcmF0aW9uczsgU3VzYW4gVGhv bXNvbiAoc2V0aG9tc28pOyB2Nm9wcy1hZHNAdG9vbHMuaWV0Zi5vcmc7IFJvYmluIE1lcnNoOyBN YWlsaW5nIExpc3Q7IFN1c2FuQGNvcmUzLmFtc2wuY29tOyBKSU5NRUkgVGF0dXlhIC8g56We5piO 6YGU5ZOJDQpTdWJqZWN0OiBSRTogRndkOiBCcm9hZGJhbmQgRm9ydW0gbGlhaXNvbiB0byBJRVRG IG9uIElQdjYgc2VjdXJpdHkNCg0KVGhpcyBpcyB0aGUgc2FtZSB0aG91Z2h0IEkgZW1haWxlZCBh Ym91dCB0aGF0IHRoZSBhY2Nlc3MgY29uY2VudHJhdG9yIGluIHRoZSBOQk1BIGxpbmsgcGVyZm9y bWluZyBORCBQcm94eSAtIFdlcyBhbmQgSSBhcmUgc2F5aW5nIHRoZSBzYW1lIHRoaW5nIC0gaGUg cHV0IGlzIHZlcnkgbmljZWx5IGluIGNvbmNpc2UgZm9ybS4gIFRoZSBhY2Nlc3MgY29uY2VudHJh dG9yIGlzIGFsc28gdGhlIGZpcnN0IGhvcCBJUHY2IHJvdXRlciB0byB0aGUgYnJvYWRiYW5kIGVu YWJsZWQgaG9tZSBhbmQgbm90ZSB0aGF0IGEgcm91dGVyIGludGVyZmFjZSBqb2lucyBvbmx5IHRo ZSBhbGwtbm9kZXMgbWNhc3QgYWRkcmVzcyBhbmQgdGhlIGludGVyZmFjZSBzb2xpY2l0ZWQtbm9k ZSBtY2FzdCBhZGRyZXNzLiAgU3VjaCBhbiBpbnRlcmZhY2UgbWNhc3Qgam9pbiB3aWxsIG5vdCBs ZXQgdGhlIHJvdXRlciBzZWUgYWxsIE5TKERBRClzIG9uIHRoZSBsaW5rLiAgVGhhdCBpcyB3aHkg d2hlbiBhIHJvdXRlciBpbiB0aGUgQk1BIG9yIE5CTUEgbGluayBzdGFydHMgc25pZmZpbmcgYWxs IG1jYXN0IHRyYWZmaWMsIHRoZW4gdGhlIHJvdXRlciBzZWVzIGFsbCB0aGUgTlMoREFEKXMgb24g aXRzIGxpbmsgYW5kIHRoaXMgc25pZmZpbmcgZm9yIGFsbCBtY2FzdCB0cmFmZmljIGhhcHBlbnMg dG8gYmUgdGhlIGZpcnN0IHJlcXVpcmVtZW50IG9mIGEgTkQgUHJveHkhDQoNCkFzIGZvciB5b3Vy IHF1ZXN0aW9uIGJlbG93LCB0aGUgQ1BFIFJvdXRlciBpbiB0aGUgaG9tZSBoYXMgZ290IHRvIGhh dmUgYmVlbiBkZWxlZ2F0ZWQgYSBwcmVmaXggYW5kIGVhY2ggaG9tZSBnZXRzIGEgZGlmZmVyZW50 IHByZWZpeCwgc28gaG93IGNhbiB0aGUgVUdBIGZyb20gdGhlIGhvbWUgZGV2aWNlIGZyb20gb25l IGhvbWUgZXZlciBlbmNvdW50ZXIgYSBkdXAgYXQgdGhlIGFjY2VzcyBjb25jZW50cmF0b3I/ICBJ ZiBhbnl0aGluZyBkdXBzIGNhbiBleGlzdCB3aXRoaW4gdGhlIHNhbWUgaG9tZSwgYnV0IHRoZSBD UEUgUm91dGVyIGFscmVhZHkgdGFrZXMgY2FyZSBvZiB0aG9zZSBkdXBzIGluIHRoZSBob21lIExB TiBsaW5rLg0KDQpIZW1hbnQNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IG93 bmVyLXY2b3BzQG9wcy5pZXRmLm9yZyBbbWFpbHRvOm93bmVyLXY2b3BzQG9wcy5pZXRmLm9yZ10g T24gQmVoYWxmIE9mIER1bm4sIEplZmZyZXkgSC4NClNlbnQ6IEZyaWRheSwgTm92ZW1iZXIgMDYs IDIwMDkgNjoyNiBQTQ0KVG86IFdlcyBCZWViZWUgKHdiZWViZWUpOyBBbnRvbmlvIFF1ZXJ1Ymlu DQpDYzogVGhvbWFzIE5hcnRlbjsgRnJlZCBCYWtlciAoZnJlZCk7IDZtYW4tYWRzQHRvb2xzLmll dGYub3JnOyBTQVZJIE1haWxpbmcgTGlzdDsgd2lsbGlhbS5hbGxlbi5zaW1wc29uQGdtYWlsLmNv bTsgSGVzaGFtIFNvbGltYW47IElFVEZAY29yZTMuYW1zbC5jb207IEVyaWsgTm9yZG1hcms7IHNh dmktYWRzQHRvb2xzLmlldGYub3JnOyBJUHY2IE9wZXJhdGlvbnM7IFN1c2FuIFRob21zb24gKHNl dGhvbXNvKTsgdjZvcHMtYWRzQHRvb2xzLmlldGYub3JnOyBSb2JpbiBNZXJzaDsgTWFpbGluZyBM aXN0OyBTdXNhbkBjb3JlMy5hbXNsLmNvbTsgSklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiTsg RHVubiwgSmVmZnJleSBILg0KU3ViamVjdDogUkU6IEZ3ZDogQnJvYWRiYW5kIEZvcnVtIGxpYWlz b24gdG8gSUVURiBvbiBJUHY2IHNlY3VyaXR5DQoNCldlcywNCg0KVGhhdCBpcyBhbiBpbnRlcmVz dGluZyBpZGVhLiBPbmUgcXVlc3Rpb24gb2NjdXJzIHRvIG1lIHRoYXQgeW91IGNhbiBwcm9iYWJs eSBhbnN3ZXIuIFdoYXQgaGFwcGVucyBpZiBhIGhvc3QgYmVoaW5kIHRoZSBDUEUgcm91dGVyIGRv ZXMgU0xBQUMsIGNvbmZpZ3VyZXMgYSBVR0E/IFNpbmNlIGl0IGhhcyBhbHJlYWR5IGRvbmUgREFE LCB0aGUgaG9zdCBhc3N1bWVzIGl0IGhhcyBhbiB1bnVzZWQgYWRkcmVzcy4gV2hlbiB0aGUgaG9z dCBmaW5hbGx5IHRyaWVzIHRvIHVzZSB0aGUgVUdBIHRvIGFjY2VzcyB0aGUgSW50ZXJuZXQgYW5k IHRoZSBhY2Nlc3Mgcm91dGVyIHNlbmRzIGFuIE5BIG9yIE5TKERBRCksIHdoYXQgc2hvdWxkIHRo ZSBob3N0IGRvPyBJdCBoYXMgYWxyZWFkeSB2YWxpZGF0ZWQgdGhlIFVHQSB1c2luZyBEQUQuIE15 IGludGVycHJldGF0aW9uIGlzIHRoYXQgaXQgc2hvdWxkIHJlcGx5IHRvIHRoZSBOUyhEQUQpIHdp dGggYW4gTkEgKGJhc2VkIG9uIFJGQyA0ODYyKS4gSSBhbSBub3Qgc3VyZSBhYm91dCBhIGR1cGxp Y2F0ZSBOQSwgc2luY2UgREFEIGlzIHN1cHBvc2VkIHRvIHByZXZlbnQgdGhpcy4gDQoNCkJlc3Qg UmVnYXJkcywgDQrCoCANCkplZmZyZXkgRHVubiANCkluZm8gU3lzdGVtcyBFbmcuLCBMZWFkIA0K TUlUUkUgQ29ycG9yYXRpb24uDQooMzAxKSA0NDgtNjk2NSAobW9iaWxlKQ0KDQoNCi0tLS0tT3Jp Z2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBXZXMgQmVlYmVlICh3YmVlYmVlKSBbbWFpbHRvOndi ZWViZWVAY2lzY28uY29tXSANClNlbnQ6IEZyaWRheSwgTm92ZW1iZXIgMDYsIDIwMDkgNDo0OCBQ TQ0KVG86IER1bm4sIEplZmZyZXkgSC47IEFudG9uaW8gUXVlcnViaW4NCkNjOiBUaG9tYXMgTmFy dGVuOyBGcmVkIEJha2VyIChmcmVkKTsgNm1hbi1hZHNAdG9vbHMuaWV0Zi5vcmc7IFNBVkkgTWFp bGluZyBMaXN0OyB3aWxsaWFtLmFsbGVuLnNpbXBzb25AZ21haWwuY29tOyBIZXNoYW0gU29saW1h bjsgSUVURkBjb3JlMy5hbXNsLmNvbTsgRXJpayBOb3JkbWFyazsgc2F2aS1hZHNAdG9vbHMuaWV0 Zi5vcmc7IElQdjYgT3BlcmF0aW9uczsgU3VzYW4gVGhvbXNvbiAoc2V0aG9tc28pOyB2Nm9wcy1h ZHNAdG9vbHMuaWV0Zi5vcmc7IFJvYmluIE1lcnNoOyBNYWlsaW5nIExpc3Q7IFN1c2FuQGNvcmUz LmFtc2wuY29tOyBKSU5NRUkgVGF0dXlhIC8g56We5piO6YGU5ZOJDQpTdWJqZWN0OiBSRTogRndk OiBCcm9hZGJhbmQgRm9ydW0gbGlhaXNvbiB0byBJRVRGIG9uIElQdjYgc2VjdXJpdHkNCg0KVGhl IGtleSBpcyB0aGF0IHRoZSBhY2Nlc3Mgcm91dGVyICh3aGljaCBpcyB0aGUgb25seSByb3V0ZXIg dGhhdCBrbm93cyB0aGlzIGlzIGFuIE5CTUEgbGluayBhbmQgbm90IGEgQk1BIGxpbmspIGNhbiBz ZWxlY3RpdmVseSBkZWNpZGUgdG8gc2VuZCBORCBtZXNzYWdlcyAoZWl0aGVyIE5BJ3Mgb3IgTlMo REFEKSBtZXNzYWdlcykgd2hlbiB0aGUgYWNjZXNzIHJvdXRlciBkZXRlY3RzIHRoYXQgdGhlcmUg aXMgYSBkdXBsaWNhdGUgb24gdGhlIGxpbmsuICBUaGlzIGlzIHRoZSBtaW5pbXVtIHJlcXVpcmVt ZW50IHRvIHN1cHBvcnQgREFEIG9uIGFuIE5CTUEgbGluay4gIFRoaXMgd291bGQgbmVlZCB0byBz cGVjaWZpZWQgaW4gYW4gTkJNQS1zcGVjaWZpYyBkb2N1bWVudCBhbmQgcHJvYmFibHkgZG9lc24n dCBuZWVkIHRvIGJlIG1lbnRpb25lZCBpbiBhIGRvY3VtZW50IGxpa2UgUkZDIDQ4NjEuDQoNCi0g V2VzIA0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogb3duZXItdjZvcHNAb3Bz LmlldGYub3JnIFttYWlsdG86b3duZXItdjZvcHNAb3BzLmlldGYub3JnXSBPbiBCZWhhbGYgT2Yg RHVubiwgSmVmZnJleSBILg0KU2VudDogRnJpZGF5LCBOb3ZlbWJlciAwNiwgMjAwOSAyOjE4IFBN DQpUbzogQW50b25pbyBRdWVydWJpbg0KQ2M6IFRob21hcyBOYXJ0ZW47IEZyZWQgQmFrZXIgKGZy ZWQpOyA2bWFuLWFkc0B0b29scy5pZXRmLm9yZzsgU0FWSSBNYWlsaW5nIExpc3Q7IHdpbGxpYW0u YWxsZW4uc2ltcHNvbkBnbWFpbC5jb207IEhlc2hhbSBTb2xpbWFuOyBJRVRGQGNvcmUzLmFtc2wu Y29tOyBFcmlrIE5vcmRtYXJrOyBzYXZpLWFkc0B0b29scy5pZXRmLm9yZzsgSVB2NiBPcGVyYXRp b25zOyBTdXNhbiBUaG9tc29uIChzZXRob21zbyk7IHY2b3BzLWFkc0B0b29scy5pZXRmLm9yZzsg Um9iaW4gTWVyc2g7IE1haWxpbmcgTGlzdDsgU3VzYW5AY29yZTMuYW1zbC5jb207IEpJTk1FSSBU YXR1eWEgLyDnpZ7mmI7pgZTlk4k7IER1bm4sIEplZmZyZXkgSC4NClN1YmplY3Q6IFJFOiBGd2Q6 IEJyb2FkYmFuZCBGb3J1bSBsaWFpc29uIHRvIElFVEYgb24gSVB2NiBzZWN1cml0eQ0KDQpBbnRv bmlvLA0KDQpSZWdhcmRsZXNzIG9mIHdoZXRoZXIgdGhlIElTUCBicmlkZ2VzIHRoZSBOQk1BIGxp bmtzIG9yIG5vdCwgdGhlIENQRSByb3V0ZXIgd2lsbCBub3QgcHJvcGFnYXRlIHRoZSBORCBvciBO UyBtZXNzYWdlcyBvbnRvIHRoZXNlIGxpbmtzLiBUaGUgRXRoZXJuZXQgYW5kIFdpLUZpIEJNQSBM QU4gc2VnbWVudHMgYXJlIHNlcGFyYXRlIGxvZ2ljYWwgbGlua3MgZnJvbSBlYWNoIG90aGVyIGFu ZCB0aGUgSVNQIGxpbmsocykuIEhvdyB3aWxsIHRoZSBDUEUgcm91dGVyIGJlICJjb252aW5jZWQi IHRvIGJyaWRnZSB0aGVzZSBsaW5rLWxvY2FsIHNjb3BlZCBtZXNzYWdlcyBvZmYgbGluaz8NCg0K QmVzdCBSZWdhcmRzLCANCsKgIA0KSmVmZnJleSBEdW5uDQpJbmZvIFN5c3RlbXMgRW5nLiwgTGVh ZA0KTUlUUkUgQ29ycG9yYXRpb24uDQooMzAxKSA0NDgtNjk2NSAobW9iaWxlKQ0KDQoNCi0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBBbnRvbmlvIFF1ZXJ1YmluIFttYWlsdG86dG9u eUBsYXZhLm5ldF0NClNlbnQ6IEZyaWRheSwgTm92ZW1iZXIgMDYsIDIwMDkgMTozNSBQTQ0KVG86 IER1bm4sIEplZmZyZXkgSC4NCkNjOiBUaG9tYXMgTmFydGVuOyBGcmVkIEJha2VyOyA2bWFuLWFk c0B0b29scy5pZXRmLm9yZzsgU0FWSSBNYWlsaW5nIExpc3Q7IHdpbGxpYW0uYWxsZW4uc2ltcHNv bkBnbWFpbC5jb207IEhlc2hhbSBTb2xpbWFuOyBJRVRGQGNvcmUzLmFtc2wuY29tOyBFcmlrIE5v cmRtYXJrOyBzYXZpLWFkc0B0b29scy5pZXRmLm9yZzsgSVB2NiBPcGVyYXRpb25zOyBUaG9tc29u OyB2Nm9wcy1hZHNAdG9vbHMuaWV0Zi5vcmc7IFJvYmluIE1lcnNoOyBNYWlsaW5nIExpc3Q7IFN1 c2FuQGNvcmUzLmFtc2wuY29tOyBKSU5NRUkgVGF0dXlhIC8g56We5piO6YGU5ZOJDQpTdWJqZWN0 OiBSRTogRndkOiBCcm9hZGJhbmQgRm9ydW0gbGlhaXNvbiB0byBJRVRGIG9uIElQdjYgc2VjdXJp dHkNCg0KT24gRnJpLCA2IE5vdiAyMDA5LCBEdW5uLCBKZWZmcmV5IEguIHdyb3RlOg0KDQo+IFRo ZSBwcm9ibGVtIGlzIElNSE8gdGhlIGZvbGxvd2luZzogSG93IHRvIGFzc2lnbiBhbiBJUHY2IFVH QSB0byBDUEUgDQo+IGhvc3RzIGF0dGFjaGVkIHRvIGEgQk1BIExBTiAodXN1YWxseSBFdGhlcm5l dCBvciBXaS1GaSkgdGhhdCBpcyBpbiANCj4gdHVybiBjb25uZWN0ZWQgdmlhIGEgQ1BFIHJvdXRl ciB0aHJvdWdoIGFuIE5CTUEgbGluayAoY2FibGUgbW9kZW0gb3IgDQo+IERTTCkgdG8gYW4gSVNQ IHJvdXRlciB0aGF0IHByb3ZpZGVzIEludGVybmV0IGFjY2Vzcy4gQ3VycmVudGx5LCB0aGVyZSAN Cj4gYXJlIHR3bw0KDQpBbmQgd2hhdCBoYXBwZW5zIHdoZW4gdGhlcmUgYXJlIG11bHRpcGxlIENQ RSByb3V0ZXJzDQoNCmEpICBjb25uZWN0ZWQgdmlhIGEgQk1BIExBTiB0byB0aGUgRFNMIG9yIGNh YmxlIG1vZGVtDQoNCmFuZC9vcg0KDQpiKSAgJ2Nvbm5lY3RlZCcgdmlhIHNlcGFyYXRlIE5CTUEg bGlua3MgYnV0IGFyZSBvbiB0aGUgc2FtZSBXQU4gc3VibmV0IChhc3NpZ25lZCBieSB0aGUgSVNQ KQ0KDQpJIHRoaW5rIGluIHRoZSBsYXR0ZXIsIGlmIHRoZSBJU1AgZGVjaWRlcyB0byBzaWxvIHRo ZSBpbmRpdmlkdWFsIE5CTUEgbGlua3MgdGhlbiB0aGV5IG5lZWQgdG8gYWRqdXN0IGZvciB0aGF0 IGluIGhvdyB0aGV5IGRvIHRoZSBzdWItZGVsZWdhdGlvbiB3aGljaCBpcyBJIHRoaW5rIHdoYXQg dGhlIGlzc3VlIGlzLiAgQnV0IGlmIHRoZSBJU1AgYWN0dWFsbHkgYnJpZGdlcyB0aGUgc2VwYXJh dGUgTkJNQSBsaW5rcywgdGhlbiB0aGVyZSdzIG5vIHNpbG8gaXNzdWUgYW5kIHRoZSBDUEUgY2Fu IHByZXRlbmQgdGhleSdyZSBpbiAnYScuDQoNCkFudG9uaW8gUXVlcnViaW4NCjgwOC01NDUtNTI4 MiB4MzAwMw0KZS1tYWlsL3htcHA6ICB0b255QGxhdmEubmV0DQo= From shemant@cisco.com Fri Nov 6 17:06:12 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 071023A68F9; Fri, 6 Nov 2009 17:06:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.783 X-Spam-Level: X-Spam-Status: No, score=-5.783 tagged_above=-999 required=5 tests=[AWL=0.816, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cEuuqhNC2luy; Fri, 6 Nov 2009 17:06:11 -0800 (PST) Received: from rtp-iport-1.cisco.com (rtp-iport-1.cisco.com [64.102.122.148]) by core3.amsl.com (Postfix) with ESMTP id E7BF73A67E2; Fri, 6 Nov 2009 17:06:10 -0800 (PST) Authentication-Results: rtp-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApwEAEdX9EpAZnwN/2dsb2JhbACEcZU/qXCHEoIUCY5igTKBIoEWVASBZw X-IronPort-AV: E=Sophos;i="4.44,697,1249257600"; d="scan'208";a="66802478" Received: from rtp-core-2.cisco.com ([64.102.124.13]) by rtp-iport-1.cisco.com with ESMTP; 07 Nov 2009 01:06:34 +0000 Received: from xbh-rcd-102.cisco.com ([72.163.62.188]) by rtp-core-2.cisco.com (8.13.8/8.14.3) with ESMTP id nA716YrG027123; Sat, 7 Nov 2009 01:06:34 GMT Received: from xmb-rcd-114.cisco.com ([72.163.62.156]) by xbh-rcd-102.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 6 Nov 2009 19:06:34 -0600 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 Date: Fri, 6 Nov 2009 19:06:32 -0600 Message-ID: In-Reply-To: <3C6F21684E7C954193E6C7C4573B76270367855CBC@IMCMBX1.MITRE.ORG> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Fwd: Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcpfD9ATPsDVSCGmTqCpJYWjx52aqwABaHbAAAUHVrAAAurLsAACWa5AAACk0zAAAQdzgA== References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> <3C6F21684E7C954193E6C7C4573B76270367855A0E@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855B2F@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855CA1@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855CBC@IMCMBX1.MITRE.ORG> From: "Hemant Singh (shemant)" To: "Dunn, Jeffrey H." , "Wes Beebee (wbeebee)" , "Antonio Querubin" X-OriginalArrivalTime: 07 Nov 2009 01:06:34.0103 (UTC) FILETIME=[8C618070:01CA5F46] X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , 6man-ads@tools.ietf.org, SAVI Mailing List , william.allen.simpson@gmail.com, Hesham Soliman , Susan@core3.amsl.com, savi-ads@tools.ietf.org, Robin Mersh , "Susan Thomson \(sethomso\)" , v6ops-ads@tools.ietf.org, IETF@core3.amsl.com, IPv6 Operations , Mailing List , =?UTF-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= Subject: Re: [savi] Fwd: Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2009 01:06:12 -0000 SmVmZnJleSwNCg0KVGhlIGFuc3dlciB0byB5b3VyIHF1ZXN0aW9uIGlzIGEgeWVzLiAgQWx0ZXJu YXRpdmVseSwgdGhlIElTUCBtYXkganVzdCBkb2xlIG91dCBhIGRlbGVnYXRlZCBwcmVmaXggc2hv cnRlciB0aGFuIGEgLzY0IGFuZCB0aGUgQ1BFIFJ0ciBoYXMgdG8gbGl2ZSB3aXRoIGl0IGJ1dCB0 aGUgSVNQIG1heSB1c2Ugc29tZXRoaW5nIGxpa2UgYSAvNTUgdGhhdCBnaXZlcyBzdWZmaWNpZW50 IG51bWJlciBvZiBsaW5rcyBpbiB0aGUgaG9tZSBMQU4uICBJIHdpbGwgcmVwbHkgdG8gYW55IG1v cmUgZGlzY3Vzc2lvbiBvbiB0aGlzIHRocmVhZCBvbmNlIEkgcmVhY2ggSGlyb3NoaW1hLiANCg0K SGVtYW50DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBEdW5uLCBKZWZmcmV5 IEguIFttYWlsdG86amR1bm5AbWl0cmUub3JnXSANClNlbnQ6IEZyaWRheSwgTm92ZW1iZXIgMDYs IDIwMDkgNzozMSBQTQ0KVG86IEhlbWFudCBTaW5naCAoc2hlbWFudCk7IFdlcyBCZWViZWUgKHdi ZWViZWUpOyBBbnRvbmlvIFF1ZXJ1YmluDQpDYzogVGhvbWFzIE5hcnRlbjsgRnJlZCBCYWtlciAo ZnJlZCk7IDZtYW4tYWRzQHRvb2xzLmlldGYub3JnOyBTQVZJIE1haWxpbmcgTGlzdDsgd2lsbGlh bS5hbGxlbi5zaW1wc29uQGdtYWlsLmNvbTsgSGVzaGFtIFNvbGltYW47IElFVEZAY29yZTMuYW1z bC5jb207IEVyaWsgTm9yZG1hcms7IHNhdmktYWRzQHRvb2xzLmlldGYub3JnOyBJUHY2IE9wZXJh dGlvbnM7IFN1c2FuIFRob21zb24gKHNldGhvbXNvKTsgdjZvcHMtYWRzQHRvb2xzLmlldGYub3Jn OyBSb2JpbiBNZXJzaDsgTWFpbGluZyBMaXN0OyBTdXNhbkBjb3JlMy5hbXNsLmNvbTsgSklOTUVJ IFRhdHV5YSAvIOelnuaYjumBlOWTiTsgRHVubiwgSmVmZnJleSBILg0KU3ViamVjdDogUkU6IEZ3 ZDogQnJvYWRiYW5kIEZvcnVtIGxpYWlzb24gdG8gSUVURiBvbiBJUHY2IHNlY3VyaXR5DQoNCk9L LiBUaGVuIHRoZSBDUEUgcm91dGVyIGhhcyBhIHVuaXF1ZSAvNjQgZm9yIGFsbCBvZiBpdHMgYnJv YWRjYXN0IGRvbWFpbnM/IERvZXMgdGhhdCBtZWFuIHRoYXQgdGhlIGN1c3RvbWVyIG5lZWRzIHRv IHRlbGwgdGhlIElTUCBob3cgbWFueSAvNjQgcHJlZml4ZXMgdGhleSBuZWVkPw0KDQpCZXN0IFJl Z2FyZHMsIA0KwqAgDQpKZWZmcmV5IER1bm4gDQpJbmZvIFN5c3RlbXMgRW5nLiwgTGVhZCANCk1J VFJFIENvcnBvcmF0aW9uLg0KKDMwMSkgNDQ4LTY5NjUgKG1vYmlsZSkNCg0KDQo= From jdunn@mitre.org Fri Nov 6 20:52:11 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 356583A6886; Fri, 6 Nov 2009 20:52:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.112 X-Spam-Level: X-Spam-Status: No, score=-6.112 tagged_above=-999 required=5 tests=[AWL=0.487, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RbMHC8c8Vteh; Fri, 6 Nov 2009 20:52:10 -0800 (PST) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id 102883A67A4; Fri, 6 Nov 2009 20:52:08 -0800 (PST) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA71TTEK028254; Fri, 6 Nov 2009 20:29:30 -0500 Received: from imchub2.MITRE.ORG (imchub2.mitre.org [129.83.29.74]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA71TTcc028251; Fri, 6 Nov 2009 20:29:29 -0500 Received: from IMCMBX1.MITRE.ORG ([129.83.29.204]) by imchub2.MITRE.ORG ([129.83.29.74]) with mapi; Fri, 6 Nov 2009 20:29:28 -0500 From: "Dunn, Jeffrey H." To: "Hemant Singh (shemant)" , "Wes Beebee (wbeebee)" , Antonio Querubin Date: Fri, 6 Nov 2009 20:29:25 -0500 Thread-Topic: Fwd: Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcpfD9ATPsDVSCGmTqCpJYWjx52aqwABaHbAAAUHVrAAAurLsAACWa5AAACk0zAAAQdzgAABAHUA Message-ID: <3C6F21684E7C954193E6C7C4573B76270367855CBF@IMCMBX1.MITRE.ORG> References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> <3C6F21684E7C954193E6C7C4573B76270367855A0E@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855B2F@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855CA1@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855CBC@IMCMBX1.MITRE.ORG> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, SAVI Mailing List , "william.allen.simpson@gmail.com" , Hesham Soliman , "Susan@core3.amsl.com" , "savi-ads@tools.ietf.org" , Robin Mersh , "Susan Thomson \(sethomso\)" , "v6ops-ads@tools.ietf.org" , "IETF@core3.amsl.com" , IPv6 Operations , Mailing List , "Dunn, Jeffrey H." , =?utf-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= Subject: Re: [savi] Fwd: Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2009 04:52:11 -0000 SGVtYW50LA0KDQpGYWlyIGVub3VnaC4gSSBzdXBwb3NlIHRoYXQgdGhlcmUgYXJlIGVub3VnaCAv NTUncyBvciAvNTYncyB0aGF0IGV2ZXJ5IGhvdXNlaG9sZCBjYW4gaGF2ZSBvbmU7IGhvd2V2ZXIs IGl0IGRvZXMgbWFrZSAicmlnaHQgc2l6aW5nIiB0aGUgaW5pdGlhbCBhbGxvY2F0aW9uIHRvIHRo ZSBJU1AgdmVyeSBpbXBvcnRhbnQuIFdlIHdvdWxkIG5vdCB3YW50IHRvIGJlIGFsbG9jYXRpbmcg bm9uLWNvbnRpZ3VvdXMgLzI4J3Mgb24gYSByZWd1bGFyIGJhc2lzIDotKQ0KDQpCZXN0IFJlZ2Fy ZHMsIA0KwqAgDQpKZWZmcmV5IER1bm4gDQpJbmZvIFN5c3RlbXMgRW5nLiwgTGVhZCANCk1JVFJF IENvcnBvcmF0aW9uLg0KKDMwMSkgNDQ4LTY5NjUgKG1vYmlsZSkNCg0KDQotLS0tLU9yaWdpbmFs IE1lc3NhZ2UtLS0tLQ0KRnJvbTogSGVtYW50IFNpbmdoIChzaGVtYW50KSBbbWFpbHRvOnNoZW1h bnRAY2lzY28uY29tXSANClNlbnQ6IEZyaWRheSwgTm92ZW1iZXIgMDYsIDIwMDkgODowNyBQTQ0K VG86IER1bm4sIEplZmZyZXkgSC47IFdlcyBCZWViZWUgKHdiZWViZWUpOyBBbnRvbmlvIFF1ZXJ1 YmluDQpDYzogVGhvbWFzIE5hcnRlbjsgRnJlZCBCYWtlciAoZnJlZCk7IDZtYW4tYWRzQHRvb2xz LmlldGYub3JnOyBTQVZJIE1haWxpbmcgTGlzdDsgd2lsbGlhbS5hbGxlbi5zaW1wc29uQGdtYWls LmNvbTsgSGVzaGFtIFNvbGltYW47IElFVEZAY29yZTMuYW1zbC5jb207IEVyaWsgTm9yZG1hcms7 IHNhdmktYWRzQHRvb2xzLmlldGYub3JnOyBJUHY2IE9wZXJhdGlvbnM7IFN1c2FuIFRob21zb24g KHNldGhvbXNvKTsgdjZvcHMtYWRzQHRvb2xzLmlldGYub3JnOyBSb2JpbiBNZXJzaDsgTWFpbGlu ZyBMaXN0OyBTdXNhbkBjb3JlMy5hbXNsLmNvbTsgSklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWT iQ0KU3ViamVjdDogUkU6IEZ3ZDogQnJvYWRiYW5kIEZvcnVtIGxpYWlzb24gdG8gSUVURiBvbiBJ UHY2IHNlY3VyaXR5DQoNCkplZmZyZXksDQoNClRoZSBhbnN3ZXIgdG8geW91ciBxdWVzdGlvbiBp cyBhIHllcy4gIEFsdGVybmF0aXZlbHksIHRoZSBJU1AgbWF5IGp1c3QgZG9sZSBvdXQgYSBkZWxl Z2F0ZWQgcHJlZml4IHNob3J0ZXIgdGhhbiBhIC82NCBhbmQgdGhlIENQRSBSdHIgaGFzIHRvIGxp dmUgd2l0aCBpdCBidXQgdGhlIElTUCBtYXkgdXNlIHNvbWV0aGluZyBsaWtlIGEgLzU1IHRoYXQg Z2l2ZXMgc3VmZmljaWVudCBudW1iZXIgb2YgbGlua3MgaW4gdGhlIGhvbWUgTEFOLiAgSSB3aWxs IHJlcGx5IHRvIGFueSBtb3JlIGRpc2N1c3Npb24gb24gdGhpcyB0aHJlYWQgb25jZSBJIHJlYWNo IEhpcm9zaGltYS4gDQoNCkhlbWFudA0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJv bTogRHVubiwgSmVmZnJleSBILiBbbWFpbHRvOmpkdW5uQG1pdHJlLm9yZ10gDQpTZW50OiBGcmlk YXksIE5vdmVtYmVyIDA2LCAyMDA5IDc6MzEgUE0NClRvOiBIZW1hbnQgU2luZ2ggKHNoZW1hbnQp OyBXZXMgQmVlYmVlICh3YmVlYmVlKTsgQW50b25pbyBRdWVydWJpbg0KQ2M6IFRob21hcyBOYXJ0 ZW47IEZyZWQgQmFrZXIgKGZyZWQpOyA2bWFuLWFkc0B0b29scy5pZXRmLm9yZzsgU0FWSSBNYWls aW5nIExpc3Q7IHdpbGxpYW0uYWxsZW4uc2ltcHNvbkBnbWFpbC5jb207IEhlc2hhbSBTb2xpbWFu OyBJRVRGQGNvcmUzLmFtc2wuY29tOyBFcmlrIE5vcmRtYXJrOyBzYXZpLWFkc0B0b29scy5pZXRm Lm9yZzsgSVB2NiBPcGVyYXRpb25zOyBTdXNhbiBUaG9tc29uIChzZXRob21zbyk7IHY2b3BzLWFk c0B0b29scy5pZXRmLm9yZzsgUm9iaW4gTWVyc2g7IE1haWxpbmcgTGlzdDsgU3VzYW5AY29yZTMu YW1zbC5jb207IEpJTk1FSSBUYXR1eWEgLyDnpZ7mmI7pgZTlk4k7IER1bm4sIEplZmZyZXkgSC4N ClN1YmplY3Q6IFJFOiBGd2Q6IEJyb2FkYmFuZCBGb3J1bSBsaWFpc29uIHRvIElFVEYgb24gSVB2 NiBzZWN1cml0eQ0KDQpPSy4gVGhlbiB0aGUgQ1BFIHJvdXRlciBoYXMgYSB1bmlxdWUgLzY0IGZv ciBhbGwgb2YgaXRzIGJyb2FkY2FzdCBkb21haW5zPyBEb2VzIHRoYXQgbWVhbiB0aGF0IHRoZSBj dXN0b21lciBuZWVkcyB0byB0ZWxsIHRoZSBJU1AgaG93IG1hbnkgLzY0IHByZWZpeGVzIHRoZXkg bmVlZD8NCg0KQmVzdCBSZWdhcmRzLCANCsKgIA0KSmVmZnJleSBEdW5uIA0KSW5mbyBTeXN0ZW1z IEVuZy4sIExlYWQgDQpNSVRSRSBDb3Jwb3JhdGlvbi4NCigzMDEpIDQ0OC02OTY1IChtb2JpbGUp DQoNCg0K From jdunn@mitre.org Fri Nov 6 20:52:11 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CF1E73A67A4; Fri, 6 Nov 2009 20:52:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.137 X-Spam-Level: X-Spam-Status: No, score=-6.137 tagged_above=-999 required=5 tests=[AWL=0.462, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qx5h2rHgdTWG; Fri, 6 Nov 2009 20:52:10 -0800 (PST) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id BEBDC3A6867; Fri, 6 Nov 2009 20:52:10 -0800 (PST) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA6NPv9c012940; Fri, 6 Nov 2009 18:25:59 -0500 Received: from imchub1.MITRE.ORG (imchub1.mitre.org [129.83.29.73]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id nA6NPvCb012937; Fri, 6 Nov 2009 18:25:57 -0500 Received: from IMCMBX1.MITRE.ORG ([129.83.29.204]) by imchub1.MITRE.ORG ([129.83.29.73]) with mapi; Fri, 6 Nov 2009 18:25:57 -0500 From: "Dunn, Jeffrey H." To: "Wes Beebee (wbeebee)" , Antonio Querubin Date: Fri, 6 Nov 2009 18:25:55 -0500 Thread-Topic: Fwd: Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcpfD9ATPsDVSCGmTqCpJYWjx52aqwABaHbAAAUHVrAAAurLsA== Message-ID: <3C6F21684E7C954193E6C7C4573B76270367855CA1@IMCMBX1.MITRE.ORG> References: <200911061358.nA6DwXNq025458@cichlid.raleigh.ibm.com> <3C6F21684E7C954193E6C7C4573B76270367855A0E@IMCMBX1.MITRE.ORG> <3C6F21684E7C954193E6C7C4573B76270367855B2F@IMCMBX1.MITRE.ORG> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Mailman-Approved-At: Fri, 06 Nov 2009 23:13:20 -0800 Cc: Thomas Narten , "6man-ads@tools.ietf.org" <6man-ads@tools.ietf.org>, SAVI Mailing List , "william.allen.simpson@gmail.com" , Hesham Soliman , "Susan@core3.amsl.com" , "savi-ads@tools.ietf.org" , Robin Mersh , "Susan Thomson \(sethomso\)" , "v6ops-ads@tools.ietf.org" , "IETF@core3.amsl.com" , IPv6 Operations , Mailing List , "Dunn, Jeffrey H." , =?utf-8?B?SklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiQ==?= Subject: Re: [savi] Fwd: Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2009 04:52:11 -0000 V2VzLA0KDQpUaGF0IGlzIGFuIGludGVyZXN0aW5nIGlkZWEuIE9uZSBxdWVzdGlvbiBvY2N1cnMg dG8gbWUgdGhhdCB5b3UgY2FuIHByb2JhYmx5IGFuc3dlci4gV2hhdCBoYXBwZW5zIGlmIGEgaG9z dCBiZWhpbmQgdGhlIENQRSByb3V0ZXIgZG9lcyBTTEFBQywgY29uZmlndXJlcyBhIFVHQT8gU2lu Y2UgaXQgaGFzIGFscmVhZHkgZG9uZSBEQUQsIHRoZSBob3N0IGFzc3VtZXMgaXQgaGFzIGFuIHVu dXNlZCBhZGRyZXNzLiBXaGVuIHRoZSBob3N0IGZpbmFsbHkgdHJpZXMgdG8gdXNlIHRoZSBVR0Eg dG8gYWNjZXNzIHRoZSBJbnRlcm5ldCBhbmQgdGhlIGFjY2VzcyByb3V0ZXIgc2VuZHMgYW4gTkEg b3IgTlMoREFEKSwgd2hhdCBzaG91bGQgdGhlIGhvc3QgZG8/IEl0IGhhcyBhbHJlYWR5IHZhbGlk YXRlZCB0aGUgVUdBIHVzaW5nIERBRC4gTXkgaW50ZXJwcmV0YXRpb24gaXMgdGhhdCBpdCBzaG91 bGQgcmVwbHkgdG8gdGhlIE5TKERBRCkgd2l0aCBhbiBOQSAoYmFzZWQgb24gUkZDIDQ4NjIpLiBJ IGFtIG5vdCBzdXJlIGFib3V0IGEgZHVwbGljYXRlIE5BLCBzaW5jZSBEQUQgaXMgc3VwcG9zZWQg dG8gcHJldmVudCB0aGlzLiANCg0KQmVzdCBSZWdhcmRzLCANCsKgIA0KSmVmZnJleSBEdW5uIA0K SW5mbyBTeXN0ZW1zIEVuZy4sIExlYWQgDQpNSVRSRSBDb3Jwb3JhdGlvbi4NCigzMDEpIDQ0OC02 OTY1IChtb2JpbGUpDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IFdlcyBC ZWViZWUgKHdiZWViZWUpIFttYWlsdG86d2JlZWJlZUBjaXNjby5jb21dIA0KU2VudDogRnJpZGF5 LCBOb3ZlbWJlciAwNiwgMjAwOSA0OjQ4IFBNDQpUbzogRHVubiwgSmVmZnJleSBILjsgQW50b25p byBRdWVydWJpbg0KQ2M6IFRob21hcyBOYXJ0ZW47IEZyZWQgQmFrZXIgKGZyZWQpOyA2bWFuLWFk c0B0b29scy5pZXRmLm9yZzsgU0FWSSBNYWlsaW5nIExpc3Q7IHdpbGxpYW0uYWxsZW4uc2ltcHNv bkBnbWFpbC5jb207IEhlc2hhbSBTb2xpbWFuOyBJRVRGQGNvcmUzLmFtc2wuY29tOyBFcmlrIE5v cmRtYXJrOyBzYXZpLWFkc0B0b29scy5pZXRmLm9yZzsgSVB2NiBPcGVyYXRpb25zOyBTdXNhbiBU aG9tc29uIChzZXRob21zbyk7IHY2b3BzLWFkc0B0b29scy5pZXRmLm9yZzsgUm9iaW4gTWVyc2g7 IE1haWxpbmcgTGlzdDsgU3VzYW5AY29yZTMuYW1zbC5jb207IEpJTk1FSSBUYXR1eWEgLyDnpZ7m mI7pgZTlk4kNClN1YmplY3Q6IFJFOiBGd2Q6IEJyb2FkYmFuZCBGb3J1bSBsaWFpc29uIHRvIElF VEYgb24gSVB2NiBzZWN1cml0eQ0KDQpUaGUga2V5IGlzIHRoYXQgdGhlIGFjY2VzcyByb3V0ZXIg KHdoaWNoIGlzIHRoZSBvbmx5IHJvdXRlciB0aGF0IGtub3dzIHRoaXMgaXMgYW4gTkJNQSBsaW5r IGFuZCBub3QgYSBCTUEgbGluaykgY2FuIHNlbGVjdGl2ZWx5IGRlY2lkZSB0byBzZW5kIE5EIG1l c3NhZ2VzIChlaXRoZXIgTkEncyBvciBOUyhEQUQpIG1lc3NhZ2VzKSB3aGVuIHRoZSBhY2Nlc3Mg cm91dGVyIGRldGVjdHMgdGhhdCB0aGVyZSBpcyBhIGR1cGxpY2F0ZSBvbiB0aGUgbGluay4gIFRo aXMgaXMgdGhlIG1pbmltdW0gcmVxdWlyZW1lbnQgdG8gc3VwcG9ydCBEQUQgb24gYW4gTkJNQSBs aW5rLiAgVGhpcyB3b3VsZCBuZWVkIHRvIHNwZWNpZmllZCBpbiBhbiBOQk1BLXNwZWNpZmljIGRv Y3VtZW50IGFuZCBwcm9iYWJseSBkb2Vzbid0IG5lZWQgdG8gYmUgbWVudGlvbmVkIGluIGEgZG9j dW1lbnQgbGlrZSBSRkMgNDg2MS4NCg0KLSBXZXMgDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0t LS0tDQpGcm9tOiBvd25lci12Nm9wc0BvcHMuaWV0Zi5vcmcgW21haWx0bzpvd25lci12Nm9wc0Bv cHMuaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBEdW5uLCBKZWZmcmV5IEguDQpTZW50OiBGcmlkYXks IE5vdmVtYmVyIDA2LCAyMDA5IDI6MTggUE0NClRvOiBBbnRvbmlvIFF1ZXJ1YmluDQpDYzogVGhv bWFzIE5hcnRlbjsgRnJlZCBCYWtlciAoZnJlZCk7IDZtYW4tYWRzQHRvb2xzLmlldGYub3JnOyBT QVZJIE1haWxpbmcgTGlzdDsgd2lsbGlhbS5hbGxlbi5zaW1wc29uQGdtYWlsLmNvbTsgSGVzaGFt IFNvbGltYW47IElFVEZAY29yZTMuYW1zbC5jb207IEVyaWsgTm9yZG1hcms7IHNhdmktYWRzQHRv b2xzLmlldGYub3JnOyBJUHY2IE9wZXJhdGlvbnM7IFN1c2FuIFRob21zb24gKHNldGhvbXNvKTsg djZvcHMtYWRzQHRvb2xzLmlldGYub3JnOyBSb2JpbiBNZXJzaDsgTWFpbGluZyBMaXN0OyBTdXNh bkBjb3JlMy5hbXNsLmNvbTsgSklOTUVJIFRhdHV5YSAvIOelnuaYjumBlOWTiTsgRHVubiwgSmVm ZnJleSBILg0KU3ViamVjdDogUkU6IEZ3ZDogQnJvYWRiYW5kIEZvcnVtIGxpYWlzb24gdG8gSUVU RiBvbiBJUHY2IHNlY3VyaXR5DQoNCkFudG9uaW8sDQoNClJlZ2FyZGxlc3Mgb2Ygd2hldGhlciB0 aGUgSVNQIGJyaWRnZXMgdGhlIE5CTUEgbGlua3Mgb3Igbm90LCB0aGUgQ1BFIHJvdXRlciB3aWxs IG5vdCBwcm9wYWdhdGUgdGhlIE5EIG9yIE5TIG1lc3NhZ2VzIG9udG8gdGhlc2UgbGlua3MuIFRo ZSBFdGhlcm5ldCBhbmQgV2ktRmkgQk1BIExBTiBzZWdtZW50cyBhcmUgc2VwYXJhdGUgbG9naWNh bCBsaW5rcyBmcm9tIGVhY2ggb3RoZXIgYW5kIHRoZSBJU1AgbGluayhzKS4gSG93IHdpbGwgdGhl IENQRSByb3V0ZXIgYmUgImNvbnZpbmNlZCIgdG8gYnJpZGdlIHRoZXNlIGxpbmstbG9jYWwgc2Nv cGVkIG1lc3NhZ2VzIG9mZiBsaW5rPw0KDQpCZXN0IFJlZ2FyZHMsIA0KwqAgDQpKZWZmcmV5IER1 bm4NCkluZm8gU3lzdGVtcyBFbmcuLCBMZWFkDQpNSVRSRSBDb3Jwb3JhdGlvbi4NCigzMDEpIDQ0 OC02OTY1IChtb2JpbGUpDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEFu dG9uaW8gUXVlcnViaW4gW21haWx0bzp0b255QGxhdmEubmV0XQ0KU2VudDogRnJpZGF5LCBOb3Zl bWJlciAwNiwgMjAwOSAxOjM1IFBNDQpUbzogRHVubiwgSmVmZnJleSBILg0KQ2M6IFRob21hcyBO YXJ0ZW47IEZyZWQgQmFrZXI7IDZtYW4tYWRzQHRvb2xzLmlldGYub3JnOyBTQVZJIE1haWxpbmcg TGlzdDsgd2lsbGlhbS5hbGxlbi5zaW1wc29uQGdtYWlsLmNvbTsgSGVzaGFtIFNvbGltYW47IElF VEZAY29yZTMuYW1zbC5jb207IEVyaWsgTm9yZG1hcms7IHNhdmktYWRzQHRvb2xzLmlldGYub3Jn OyBJUHY2IE9wZXJhdGlvbnM7IFRob21zb247IHY2b3BzLWFkc0B0b29scy5pZXRmLm9yZzsgUm9i aW4gTWVyc2g7IE1haWxpbmcgTGlzdDsgU3VzYW5AY29yZTMuYW1zbC5jb207IEpJTk1FSSBUYXR1 eWEgLyDnpZ7mmI7pgZTlk4kNClN1YmplY3Q6IFJFOiBGd2Q6IEJyb2FkYmFuZCBGb3J1bSBsaWFp c29uIHRvIElFVEYgb24gSVB2NiBzZWN1cml0eQ0KDQpPbiBGcmksIDYgTm92IDIwMDksIER1bm4s IEplZmZyZXkgSC4gd3JvdGU6DQoNCj4gVGhlIHByb2JsZW0gaXMgSU1ITyB0aGUgZm9sbG93aW5n OiBIb3cgdG8gYXNzaWduIGFuIElQdjYgVUdBIHRvIENQRSANCj4gaG9zdHMgYXR0YWNoZWQgdG8g YSBCTUEgTEFOICh1c3VhbGx5IEV0aGVybmV0IG9yIFdpLUZpKSB0aGF0IGlzIGluIA0KPiB0dXJu IGNvbm5lY3RlZCB2aWEgYSBDUEUgcm91dGVyIHRocm91Z2ggYW4gTkJNQSBsaW5rIChjYWJsZSBt b2RlbSBvciANCj4gRFNMKSB0byBhbiBJU1Agcm91dGVyIHRoYXQgcHJvdmlkZXMgSW50ZXJuZXQg YWNjZXNzLiBDdXJyZW50bHksIHRoZXJlIA0KPiBhcmUgdHdvDQoNCkFuZCB3aGF0IGhhcHBlbnMg d2hlbiB0aGVyZSBhcmUgbXVsdGlwbGUgQ1BFIHJvdXRlcnMNCg0KYSkgIGNvbm5lY3RlZCB2aWEg YSBCTUEgTEFOIHRvIHRoZSBEU0wgb3IgY2FibGUgbW9kZW0NCg0KYW5kL29yDQoNCmIpICAnY29u bmVjdGVkJyB2aWEgc2VwYXJhdGUgTkJNQSBsaW5rcyBidXQgYXJlIG9uIHRoZSBzYW1lIFdBTiBz dWJuZXQgKGFzc2lnbmVkIGJ5IHRoZSBJU1ApDQoNCkkgdGhpbmsgaW4gdGhlIGxhdHRlciwgaWYg dGhlIElTUCBkZWNpZGVzIHRvIHNpbG8gdGhlIGluZGl2aWR1YWwgTkJNQSBsaW5rcyB0aGVuIHRo ZXkgbmVlZCB0byBhZGp1c3QgZm9yIHRoYXQgaW4gaG93IHRoZXkgZG8gdGhlIHN1Yi1kZWxlZ2F0 aW9uIHdoaWNoIGlzIEkgdGhpbmsgd2hhdCB0aGUgaXNzdWUgaXMuICBCdXQgaWYgdGhlIElTUCBh Y3R1YWxseSBicmlkZ2VzIHRoZSBzZXBhcmF0ZSBOQk1BIGxpbmtzLCB0aGVuIHRoZXJlJ3Mgbm8g c2lsbyBpc3N1ZSBhbmQgdGhlIENQRSBjYW4gcHJldGVuZCB0aGV5J3JlIGluICdhJy4NCg0KQW50 b25pbyBRdWVydWJpbg0KODA4LTU0NS01MjgyIHgzMDAzDQplLW1haWwveG1wcDogIHRvbnlAbGF2 YS5uZXQNCg== From junbi@cernet.edu.cn Sat Nov 7 06:51:16 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 621953A68D4 for ; Sat, 7 Nov 2009 06:51:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.098 X-Spam-Level: X-Spam-Status: No, score=0.098 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_HAS_XAIMC=2.696, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DNHE7qIqhwHm for ; Sat, 7 Nov 2009 06:51:14 -0800 (PST) Received: from cernet.edu.cn (sea.net.edu.cn [202.112.3.66]) by core3.amsl.com (Postfix) with SMTP id 954813A67B4 for ; Sat, 7 Nov 2009 06:51:11 -0800 (PST) Received: from junbiVAIO([133.93.112.217]) by cernet.edu.cn(AIMC 3.2.0.0) with SMTP id jm74af5b0ec; Sat, 07 Nov 2009 22:51:32 +0800 Message-ID: <2D7030B75D9D415DB5F2C58F840713C8@junbiVAIO> From: "Bi Jun" To: "Eric Levy-Abegnoli" , "SAVI Mailing List" References: <001D73EA1D454F0BAE91F989B597D73D@junbiVAIO><4AEEDCAD.1000800@cisco.com> <56F4AA901B6841CEA6C0C127FAA54677@junbiVAIO> <4AF45B05.9060403@cisco.com> In-Reply-To: <4AF45B05.9060403@cisco.com> Date: Sat, 7 Nov 2009 22:51:36 +0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_004C_01CA5FFC.DC091320" X-Priority: 3 X-MSMail-Priority: Normal Importance: Normal X-Mailer: Microsoft Windows Live Mail 14.0.8064.206 X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8064.206 X-AIMC-AUTH: junbi X-AIMC-MAILFROM: junbi@cernet.edu.cn X-AIMC-Msg-ID: yG8dmGXB Subject: Re: [savi] SAVI Solution for DHCPv4/v6 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 07 Nov 2009 14:51:16 -0000 ÕâÊÇÒ»·â MIME ¸ñʽµÄ¶à·½Óʼþ¡£ ------=_NextPart_000_004C_01CA5FFC.DC091320 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: quoted-printable Dear Eric, Thank you for the comment. See my reply inline. thanks, Jun Bi From: Eric Levy-Abegnoli=20 Sent: Saturday, November 07, 2009 1:21 AM To: Bi Jun=20 Cc: SAVI Mailing List=20 Subject: Re: [savi] SAVI Solution for DHCPv4/v6 Hi Jun Bi, Bi Jun a =A8=A6crit :=20 Dear Eric, In response your comment on using option 82 to store the port info to = reduce the "START" state,=20 we consulted some vendors, not all DHCP servers support option 82, so = that might be a problem when the SAVI=A1=A1 device is widely deployed.=20 ack. Another response from the switch vendor is that inserting the option = in DHCP packet=20 is estimated to consume the similar or more CPU resource than creating = a "START" state. For the record, I believe we should be cautious in not driving this = specification from too many implementation considerations, as there seem = to be more and more such arguments brought up. I'd prefer a solid reliable secure protocol than one that can be = prototyped.=20 CPU was not my concern: It's rather early/temporary state creation. = There are numerous examples (tcp syn attack is the best known) where = creating states before the clinet is "confirmed" (in our case before the = client is granted with an address) opened the door for nasty attacks. bj: Thank you for the comment. But please note that I = proposed many times that it's very important to have a port type = SAVI-host (ONE host is directly attached at ONE port). At this port, if = there is a binding table limitation, then there will be no attack, = because there is only ONE host at the port, it can only attack himself. = I strongly propose to have the SAVI-host port at both the DHCP and SLAAC = document, because then we will achieve the strictly security, tracing = and billing (and make solution at this type of port simplified). At the = DHCP document, we also defined a SAVI-poly port (to connect ONE hub for = several hosts usually owned by one person), this port is not = recommended. But if some operators like it, it's OK. If those hosts are = owned by one person, then it not a big deal if his one host attacking = his another host. For SAVI switch port to connect an nonSAVI switch, we = suggest the operators configure two VLANs to separate them. We have run = this mode and currently it looks OK. There is one situation that if the anchor is MAC (need the MAC is = unspoofable, by deploying some IEEE tech such 802.1ae/af,=20 which is not the common case), then the "START" state is not needed. Anyway, thank you very much for your valuable comments, and we are = considering to adopt your suggestion as=20 an option (or open issue) in the draft. As I said, as long as the state is clearly qualified, issues discussed = and cases where it can be avoided listed, I am all fine. Thank you. Eric thanks, Jun Bi From: Bi Jun=20 Sent: Tuesday, November 03, 2009 6:45 PM To: Eric Levy-Abegnoli=20 Cc: SAVI Mailing List=20 Subject: Re: [savi] SAVI Solution for DHCPv4/v6 Dear Eric, Thank you very much for your comments. Please see my reply below. Best Regards, Jun Bi From: Eric Levy-Abegnoli=20 Sent: Monday, November 02, 2009 9:20 PM To: Bi Jun=20 Cc: SAVI Mailing List=20 Subject: Re: [savi] SAVI Solution for DHCPv4/v6 Jun Bi and all, I think the document is a reasonnably good shape. I had however a few = substantial comments made offline, that I'd like to repeat=20 the mailing list (note that they are all listed already in the doc as = open issues, but the RA filtering) - Section 9.4: Router Advertisements have nothing to do with the SAVI = charter. For that, there is draft-ietf-v6ops-ra-guard. So I don't think it belongs here or in the framework document. bj: A good suggestion. The address prefix configuration security is = very important for source address validation, so the SAVI draft must=20 mention it. Since there is a related draft, we plan to move this = part into the "security consideration". After the = draft-ietf-v6ops-ra-guard is finalized (as a RFC), if at that time, the = solution in that rfc works for SAVI requirement, then we remove the text = and state that the SAVI device must conform to that rfc. - Section 7 (and subsequent) I don't like the idea of creating a state = "START" on the request, and I think in most cases, the state creation could happen on the reply. Otherwise, there is an obvious DoS attack = that would fill the binding table with as many "START" entries as allowed (max described in section 16 help = protecting the box, but not the anchor) and prevent legitimate entries to be created. =20 From my reading, a state "START" is created upon receiving a REQUEST = message. In most cases, creating the state on the REPLY should work and be a lot safer. That is whenever the REPLY have enough = information to create the entry and associate it with the requesting = anchor.=20 For instance, if the anchor is the MAC, then the response has it. If = the anchor is the port, upon receiving the REPLY, it can be found in the option 82. And if there is no option 82 (I am wondering if the = switch could not insert it all the time?), then there is the switch L2 = mapping table.=20 So I'd like this state to be removed or a least used as an = "optionnal but dangerous" correlation mechanism. bj: In our opinion, the most scenarios will be SAVI-host = connections. In that case, host directly attached to SAVI-host port, so = there is be no=20 security threaten in this case. If a non-savi switch is connected = to SAVI-poly port, what you mentioned might be a problem. But please = note that=20 if we remove this state, then if the MAC-port mapping table is = poisoned by an attacked launched between REQUEST and REPLY, the SAVI = switch=20 will lost the source port, there will another security threaten (with = this "START" state, the REPLY can be forwarded to the correct source = port by=20 the binding table when the MAP-port mapping table is changed). = Therefore by trading off, we intend to keep it (but will consider to = mentioned the potential problem for SAVI-poly port).=20 Actually, the SAVI-ploy port (A SAVI switch connects to a non-SAVI = switch) is really not recommend indeed in our opinion, because it can = not achieve the host-granularity anti-spoofing, which is very import for = security, management and billing purposes. The only case I believe the = SAVI-poly case is useful is that a person in a office connect a hub to = SAVI-switch, then connect his multiple hosts to the hub (as the case we = discussed with Marcelo, Erik, Christian on the last day of IETF 75). In = this case, I think the user should be reasonable for the attacking = between his own hosts). - My other substantial comment is about the interactions between ND = (or ARP) and DHCP. My understanding of DHCP is=20 that it is the client responsability to verify the address = uniqueness and to DHCPDECLINE in case of a collision. So it should be sufficient to refer to DHCP messages, and if not, i'd like to see = the rational for it. I have also suggested that whatever additional interactions there = maybe should rather be described in the=20 framework document. =20 bj: Even it is a client's resposability to verify the address = uniqueness, the SAVI device must make sure the client have done it. If the client didn't complete the DAD procedure, the SAVI = device has the right to drop the packets as a punishment. Eric Bi Jun a =A8=A6crit :=20 Dear WG members, Please read the SAVI solution for DHCP. =20 This draft is for DHCP case. We removed the text on SLAAC of CPS-01 = and contributed to SAVI SLAAC draft. This version have taken the suggestions from Christian, Eric = Levy-Abegnoli , Alberto Garc=A8=AAa, etc. Thanks to all of them. Please provide your comments. thanks, Jun Bi http://www.ietf.org/id/draft-bi-savi-cps-02.txt =20 SAVI Solution for DHCPv4/v6 draft-bi-savi-cps-02.txt Abstract This document specifies the procedure of setting up bindings = between DHCPv4 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address and anchor (refer to [SAVI-framework]) on SAVI (Source Address = Validation Improvements) device. The bindings can be used to filter packets = with forged IP addresses. -------------------------------------------------------------------------= --- _______________________________________________ savi mailing list savi@ietf.org https://www.ietf.org/mailman/listinfo/savi =20 -------------------------------------------------------------------------= ----- _______________________________________________ savi mailing list savi@ietf.org https://www.ietf.org/mailman/listinfo/savi ------=_NextPart_000_004C_01CA5FFC.DC091320 Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable
Dear Eric,
 
Thank you for the comment. See my reply=20 inline.
 
thanks,
Jun Bi

From: Eric Levy-Abegnoli
Sent: Saturday, November 07, 2009 1:21 AM
To: Bi Jun
Subject: Re: [savi] SAVI Solution for = DHCPv4/v6

Hi Jun = Bi,
Bi Jun a=20 =A8=A6crit :=20
Dear Eric,
 
In response your comment on using option 82 = to store=20 the port info to reduce the "START" state,
we consulted some vendors, not all DHCP = servers=20 support option 82, so that might be a problem when the = SAVI=A1=A1
device is widely deployed.=20
ack.
Another response from the switch vendor = is that=20 inserting the option in DHCP packet
is estimated to consume the similar or more = CPU=20 resource than creating a "START" state.
For the record, I believe we should be cautious in not driving this = specification from too many implementation considerations, as there seem = to be=20 more and more such arguments brought up.
I'd prefer a solid reliable = secure=20 protocol than one that can be prototyped.

CPU was not my = concern: It's=20 rather early/temporary state creation. There are numerous examples (tcp = syn=20 attack is the best known) where creating states before the clinet is = "confirmed"=20 (in our case before the client is granted with an address) opened the = door for=20 nasty attacks.
 
 
         &nbs= p;    =20 bj:  Thank you for the comment. But please note that I proposed = many times=20 that it's very important to have a port type SAVI-host (ONE host is = directly=20 attached at ONE port). At this port, if there is a binding table = limitation,=20 then there will be no attack, because there is only ONE host at the = port, it can=20 only attack himself. I strongly propose to have the SAVI-host port at = both the=20 DHCP and SLAAC document, because then we will achieve the strictly = security,=20 tracing and billing (and make solution at this type of port = simplified). =20 At the DHCP document, we also defined a SAVI-poly port (to connect ONE = hub for=20 several hosts usually owned by one person), this port is not = recommended. But if=20 some operators like it, it's OK. If those hosts are owned by one person, = then it=20 not a big deal if his one host attacking his another host. For SAVI = switch port=20 to connect an nonSAVI switch, we suggest the operators configure two = VLANs to=20 separate them. We have run this mode and currently it looks = OK.
 
 
 

There is one situation that if the anchor is = MAC (need=20 the MAC is unspoofable, by deploying some IEEE tech such 802.1ae/af,=20
which is not the common case), then the = "START" state=20 is not needed.
Anyway, thank you very much for your = valuable=20 comments, and we are considering to adopt your suggestion as =
an option (or open issue) in the=20 draft.
As I said, as long as the state is = clearly=20 qualified, issues discussed and cases where it can be avoided listed, I = am all=20 fine.
Thank you.
Eric
 
thanks,
Jun Bi

From: Bi = Jun
Sent: Tuesday, November 03, 2009 6:45 PM
Subject: Re: [savi] SAVI Solution for = DHCPv4/v6

Dear Eric,
 
Thank you very much for your = comments.
Please see my reply below.
 
Best Regards,
Jun Bi

Sent: Monday, November 02, 2009 9:20 PM
To: Bi Jun
Subject: Re: [savi] SAVI Solution for = DHCPv4/v6

Jun Bi and all,
I think the document is a reasonnably = good=20 shape. I had however a few substantial comments made offline, that I'd = like to=20 repeat
the mailing list (note that they are all listed already in = the doc=20 as open issues, but the RA filtering)

- Section 9.4: Router=20 Advertisements have nothing to do with the SAVI charter. For that, = there is=20 draft-ietf-v6ops-ra-guard. So
I don't think it belongs here or in = the=20 framework document.
 
  bj: A good suggestion. The address prefix=20 configuration security is very important for source address = validation, so the=20 SAVI draft must
     mention it. Since there = is a=20 related draft, we plan to move this part into the "security = consideration".=20 After the = draft-ietf-v6ops-ra-guard is=20 finalized (as a RFC), if at that time, the solution in that rfc works = for SAVI=20 requirement, then we remove the text and state that the SAVI device=20 must conform to that=20 rfc.


- Section 7 (and subsequent) I don't like the idea = of=20 creating a state "START" on the request, and I think in most cases, = the state=20 creation
  could happen on the reply. Otherwise, there is an = obvious=20 DoS attack that would fill the binding table with as
  many = "START"=20 entries as allowed (max described in section 16 help protecting the = box, but=20 not the anchor) and prevent legitimate entries
  to be = created. =20
  From my reading, a state "START" is created upon receiving = a=20 REQUEST message. In most cases, creating the state on the REPLY=20 should
  work and be a lot safer. That is whenever the REPLY = have=20 enough information to create the entry and associate it with the = requesting=20 anchor.
  For instance, if the anchor is the MAC, then the = response=20 has it. If the anchor is the port, upon receiving the REPLY, it can be = found=20 in the
  option 82. And if there is no option 82 (I am = wondering if=20 the switch could not insert it all the time?), then there is the = switch L2=20 mapping table.
  So I'd like this state to be removed or a = least used=20 as an "optionnal but dangerous" correlation mechanism.
 
 
 
   bj:  In = our opinion,=20 the most scenarios will be SAVI-host connections. In that case, host = directly=20 attached to SAVI-host port, so there is be no
    security = threaten in=20 this case. If a non-savi switch is connected to SAVI-poly port, what = you=20 mentioned might be a problem. But please note that =
  if we remove this = state, then if=20 the MAC-port mapping table is poisoned by an attacked launched between = REQUEST=20 and REPLY, the SAVI switch
 will lost the source = port, there=20 will another security threaten (with this "START" state, the = REPLY can be=20 forwarded to the correct source port by
the binding table when the = MAP-port=20 mapping table is changed). Therefore by trading off, we intend to keep = it (but=20 will consider to mentioned the
  potential problem for SAVI-poly port).
 
  Actually, the = SAVI-ploy port (A=20 SAVI switch connects to a non-SAVI switch) is really not = recommend indeed=20 in our opinion, because it can not achieve the host-granularity = anti-spoofing,=20 which is very import for security, management and billing = purposes. The=20 only case I believe the SAVI-poly case is useful = is that a person in  a office connect = a hub to=20 SAVI-switch, then connect his multiple hosts to the hub (as the case = we=20 discussed with Marcelo, Erik, = Christian on the=20 last day of IETF 75). In this case, I think the user = should be=20 reasonable for the attacking between his own hosts).
 
 
 

- My other substantial comment is about the = interactions=20 between ND (or ARP) and DHCP. My understanding of DHCP is
  = that it=20 is the client responsability to verify the address uniqueness and to=20 DHCPDECLINE in case of a collision. So it should be
  = sufficient to=20 refer to DHCP messages, and if not, i'd like to see the rational for=20 it.
  I have also suggested that whatever additional = interactions=20 there maybe should rather be described in the
  framework=20 document.     
 
 
 
  bj: Even it is a client's resposability to = verify=20 the address uniqueness, the SAVI device must make sure the client have = done=20 it.
        If the client didn't complete = the DAD=20 procedure, the SAVI device has the right to drop the packets as a=20 punishment.
 
 

Eric


Bi Jun a =A8=A6crit : =
Dear WG members,
 
Please read the SAVI solution for = DHCP. =20
This draft is for DHCP case. We removed the text on SLAAC of = CPS-01 and=20 contributed to SAVI SLAAC draft.
This version have taken the = suggestions=20 from Christian, Eric Levy-Abegnoli , Alberto Garc=A8=AAa, etc. = Thanks to all of=20 them.
Please provide your = comments.
thanks,
Jun=20 Bi
 
  http://www.ietf.org/id/draft-bi-savi-cps-02.txt<= /A>        
 
        =        SAVI Solution for=20 = DHCPv4/v6
          =             &= nbsp; =20 draft-bi-savi-cps-02.txt
 
Abstract

   This document = specifies=20 the procedure of setting up bindings between
   DHCPv4=20 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address = and
  =20 anchor (refer to [SAVI-framework]) on SAVI (Source Address=20 Validation
   Improvements) device. The bindings can be = used to=20 filter packets with
   forged IP = addresses.

_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi

_______________________________________________
savi mailing = list
savi@ietf.org
https://www.ietf.org/= mailman/listinfo/savi

------=_NextPart_000_004C_01CA5FFC.DC091320-- From christian.vogt@ericsson.com Sun Nov 8 05:26:28 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5D4AE3A681C for ; Sun, 8 Nov 2009 05:26:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.522 X-Spam-Level: X-Spam-Status: No, score=-6.522 tagged_above=-999 required=5 tests=[AWL=0.077, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iFzoGjnkBSZb for ; Sun, 8 Nov 2009 05:26:27 -0800 (PST) Received: from imr1.ericy.com (imr1.ericy.com [198.24.6.9]) by core3.amsl.com (Postfix) with ESMTP id A12B63A63C9 for ; Sun, 8 Nov 2009 05:26:27 -0800 (PST) Received: from eusrcmw751.eamcs.ericsson.se (eusrcmw751.exu.ericsson.se [138.85.77.51]) by imr1.ericy.com (8.13.1/8.13.1) with ESMTP id nA8DQolB009143 for ; Sun, 8 Nov 2009 07:26:52 -0600 Received: from eusrcmw750.eamcs.ericsson.se ([138.85.77.50]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Sun, 8 Nov 2009 07:26:31 -0600 Received: from eusaamw0707.eamcs.ericsson.se ([147.117.20.32]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Sun, 8 Nov 2009 07:26:31 -0600 Received: from EUSAACMS0701.eamcs.ericsson.se ([169.254.1.35]) by eusaamw0707.eamcs.ericsson.se ([147.117.20.32]) with mapi; Sun, 8 Nov 2009 08:26:31 -0500 From: Christian Vogt To: SAVI Mailing List Date: Sun, 8 Nov 2009 08:27:05 -0500 Thread-Topic: Materials for tomorrow's meeting Thread-Index: AcpgdxS4LqAiTQ8UQzGCvwee4kOwBA== Message-ID: <747B2952-1A7D-4B5B-AE61-F82B62D898DC@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 08 Nov 2009 13:26:31.0879 (UTC) FILETIME=[15EE3D70:01CA6077] Subject: [savi] Materials for tomorrow's meeting X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Nov 2009 13:26:28 -0000 Folks - Most presentation slides for tomorrow's SAVI working group meeting are now available at the meeting materials web page [1]. A few presentation slides are missing. Presenters, please send them. Please also take a look at the slightly updated meeting agenda, which now contains an item on the liaison [2] we received from the Broadband Forum. We should discuss potential impacts on the current SAVI protocol specifications, and how to respond. - Christian [1] https://datatracker.ietf.org/meeting/76/materials.html [2] http://www.ietf.org/proceedings/09nov/agenda/savi.txt From christian.vogt@ericsson.com Sun Nov 8 05:45:52 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D2CDA3A6774 for ; Sun, 8 Nov 2009 05:45:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.528 X-Spam-Level: X-Spam-Status: No, score=-6.528 tagged_above=-999 required=5 tests=[AWL=0.071, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8XvjycBTU9fO for ; Sun, 8 Nov 2009 05:45:52 -0800 (PST) Received: from imr2.ericy.com (imr2.ericy.com [198.24.6.3]) by core3.amsl.com (Postfix) with ESMTP id 162173A63C9 for ; Sun, 8 Nov 2009 05:45:51 -0800 (PST) Received: from eusrcmw751.eamcs.ericsson.se (eusrcmw751.exu.ericsson.se [138.85.77.51]) by imr2.ericy.com (8.13.1/8.13.1) with ESMTP id nA8DkHhr015448 for ; Sun, 8 Nov 2009 07:46:17 -0600 Received: from eusrcmw751.eamcs.ericsson.se ([138.85.77.56]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Sun, 8 Nov 2009 07:45:15 -0600 Received: from eusaamw0712.eamcs.ericsson.se ([147.117.20.181]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Sun, 8 Nov 2009 07:45:15 -0600 Received: from EUSAACMS0701.eamcs.ericsson.se ([169.254.1.35]) by eusaamw0712.eamcs.ericsson.se ([147.117.20.181]) with mapi; Sun, 8 Nov 2009 08:45:14 -0500 From: Christian Vogt To: SAVI Mailing List Date: Sun, 8 Nov 2009 08:45:58 -0500 Thread-Topic: Materials for tomorrow's meeting Thread-Index: AcpgebKXKoU0y/8OSwe+yrMeFBwI9Q== Message-ID: <8313FA05-08E7-4ACF-918E-07FAAD7D2C68@ericsson.com> References: <747B2952-1A7D-4B5B-AE61-F82B62D898DC@ericsson.com> In-Reply-To: <747B2952-1A7D-4B5B-AE61-F82B62D898DC@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 08 Nov 2009 13:45:15.0295 (UTC) FILETIME=[B389EAF0:01CA6079] Subject: Re: [savi] Materials for tomorrow's meeting X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Nov 2009 13:45:52 -0000 FYI: The meeting materials are now complete. - Christian On Nov 8, 2009, Christian Vogt wrote: > Folks - > > Most presentation slides for tomorrow's SAVI working group meeting are > now available at the meeting materials web page [1]. A few =20 > presentation > slides are missing. Presenters, please send them. > > Please also take a look at the slightly updated meeting agenda, which > now contains an item on the liaison [2] we received from the Broadband > Forum. We should discuss potential impacts on the current SAVI =20 > protocol > specifications, and how to respond. > > - Christian > > [1] https://datatracker.ietf.org/meeting/76/materials.html > [2] http://www.ietf.org/proceedings/09nov/agenda/savi.txt From junbi@cernet.edu.cn Sun Nov 8 14:32:21 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6A7023A69DE for ; Sun, 8 Nov 2009 14:32:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.398 X-Spam-Level: * X-Spam-Status: No, score=1.398 tagged_above=-999 required=5 tests=[AWL=-1.300, BAYES_50=0.001, FH_HAS_XAIMC=2.696, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AD92M3jekfq7 for ; Sun, 8 Nov 2009 14:32:18 -0800 (PST) Received: from cernet.edu.cn (sea.net.edu.cn [202.112.3.66]) by core3.amsl.com (Postfix) with SMTP id 9BD643A6782 for ; Sun, 8 Nov 2009 14:32:17 -0800 (PST) Received: from junbiVAIO([133.93.112.217]) by cernet.edu.cn(AIMC 3.2.0.0) with SMTP id jm74af76e81; Mon, 09 Nov 2009 06:32:42 +0800 Message-ID: From: "Bi Jun" To: "SAVI Mailing List" Date: Mon, 9 Nov 2009 07:32:37 +0900 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0048_01CA610E.CFAC6A60" X-Priority: 1 X-MSMail-Priority: High Importance: High X-Mailer: Microsoft Windows Live Mail 14.0.8064.206 X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8064.206 X-AIMC-AUTH: junbi X-AIMC-MAILFROM: junbi@cernet.edu.cn X-AIMC-Msg-ID: yZYTQHXB Subject: [savi] The latest version of SAVI solution for DHCP X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 08 Nov 2009 22:32:21 -0000 ÕâÊÇÒ»·â MIME ¸ñʽµÄ¶à·½Óʼþ¡£ ------=_NextPart_000_0048_01CA610E.CFAC6A60 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0049_01CA610E.CFAC6A60" ------=_NextPart_001_0049_01CA610E.CFAC6A60 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: quoted-printable Folks, The attached file is the latest version of SAVI solution for DHCP = draft-bi-savi-dhcp-00. Thank you very much for your comments. Best Regards, Jun Bi ------=_NextPart_001_0049_01CA610E.CFAC6A60 Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable
Folks,
 
The attached file is the latest version of = SAVI solution=20 for DHCP draft-bi-savi-dhcp-00.
 
Thank you very much for your = comments.
 
Best Regards,
Jun Bi
------=_NextPart_001_0049_01CA610E.CFAC6A60-- ------=_NextPart_000_0048_01CA610E.CFAC6A60 Content-Type: text/plain; name="draft-bi-savi-dhcp-00.txt" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="draft-bi-savi-dhcp-00.txt" SAVI J. Bi, J. Wu, G. Yao Internet Draft CERNET Intended status: Standard Tracks F. Baker Expires: May 2010 Cisco November 9, 2009 SAVI Solution for DHCPv4/v6 draft-bi-savi-dhcp-00.txt Status of this Memo This Internet-Draft is submitted to IETF in full conformance with the provisions of BCP 78 and BCP 79. This document may not be modified, and derivative works of it may not be created, except to publish it as an RFC and to translate it into languages other than English. This document may contain material from IETF Documents or IETF Contributions published or made publicly available before November = 10, 2008. The person(s) controlling the copyright in some of this material may not have granted the IETF Trust the right to allow modifications of such material outside the IETF Standards Process. Without obtaining an adequate license from the person(s) controlling the copyright in such materials, this document may not be modified outside the IETF Standards Process, and derivative works of it may not be created outside the IETF Standards Process, except to format it for publication as an RFC or to translate it into languages other than English. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as = Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html This Internet-Draft will expire on May 9, 2010. Bi Expires May 9, 2010 [Page 1] =0C Internet-Draft savi-dhcp November 2009 Copyright Notice Copyright (c) 2009 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents in effect on the date of publication of this document (http://trustee.ietf.org/license-info). Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Abstract This document specifies the procedure for creating bindings between a DHCPv4 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address and an anchor (refer to [SAVI-framework]) on SAVI (Source Address Validation Improvements) device. The bindings can be used to filter packets with forged IP addresses generated on the local link. Table of Contents 1. Introduction ................................................ 3 2. Conventions used in this document............................ 4 3. Mechanism Overview .......................................... 4 4. Background and Related Protocols............................. 4 5. Terminology ................................................. 5 6. Conceptual Data Structures................................... 5 6.1. Binding State Table (BST)............................... 5 6.2. Filtering Table (FT).................................... 5 7. Binding States Description................................... 6 8. DHCP Scenario ............................................... 6 9. Anchor Attributes ........................................... 7 9.1. SAVI-Host Attribute..................................... 7 9.2. SAVI-Poly Attribute..................................... 7 9.3. SAVI-DHCP-Trust Attribute............................... 7 9.4. SAVI-RA-Trust Attribute................................. 8 9.5. SAVI-SAVI Attribute..................................... 8 10. Prefix Configuration........................................ 8 11. Binding Set Up ............................................. 9 11.1. Process of DHCP Snooping............................... 9 11.1.1. Initialization.................................... 9 11.1.1.1. Trigger Event................................ 9 11.1.1.2. Message Validation........................... 9 11.1.1.3. Following Actions........................... 10 11.1.2. From START to LIVE............................... 10 11.1.2.1. Trigger Event............................... 10 Bi Expires May 9, 2010 [Page 2] =0C Internet-Draft savi-dhcp November 2009 11.1.2.2. Message Validation.......................... 10 11.1.2.3. Following Actions........................... 10 11.1.3. From LIVE to DETECTION........................... 11 11.1.3.2. Message Validation.......................... 11 11.1.3.3. Following Actions........................... 12 11.1.4. From DETECTION to BOUND.......................... 12 11.1.4.1. Trigger Event............................... 12 11.1.4.2. Following Actions........................... 12 11.1.5. After BOUND...................................... 12 11.2. State Machine of DHCP Snooping ....................... 13 12. Filtering Specification.................................... 13 12.1. Filter Data Packet.................................... 13 12.2. Filter Control Packet................................. 14 13. Format and Delivery of Probe Messages ..................... 14 14. Data packet trigger on SAVI-Poly anchor ................... 15 15. Binding Remove ............................................ 16 16. Handle port DOWN event..................................... 16 17. About Collision in Detection............................... 16 17.1. Whether to notify the DHCP server .................... 16 17.2. The result of detection without host aware ........... 16 18. Filtering during detection................................. 17 19. Binding Number Limitation.................................. 17 20. MLD Consideration ......................................... 17 21. Constants ................................................. 17 22. Summary of to-be-removed sections and open issues ......... 18 23. Security Considerations.................................... 18 24. IANA Considerations........................................ 18 25. References ................................................ 18 25.1. Normative References.................................. 18 25.2. Informative References................................ 19 26. Acknowledgments ........................................... 19 1. Introduction This document describes the procedure for creating bindings between DHCP assigned addresses and an anchor (refer to [savi-framework]). Other related details about this procedure are also specified in this document. These bindings can be used to filter packets with forged IP = addresses. How to use these bindings is specified in [savi-framework], depending on the environment and configuration. The definition and examples of anchor is also specified in [savi-framework]. The binding process is inspired by the work of IP source guard. This specification differs from IP source guard in the specification for Bi Expires May 9, 2010 [Page 3] =0C Internet-Draft savi-dhcp November 2009 collision detection, which is quite useful in an environment with multiple address assignment methods. 2. Conventions used in this document The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119]. 3. Mechanism Overview The mechanism specified in this document is designed to provide a host level source IP address validation granularity, as a supplement to BCP38 [BCP38]. This mechanism is deployed on the access device (including access switch, wireless access point/controller, etc), and performs mainly DHCPv4/v6 snooping to set up bindings between DHCP assigned IP address and corresponding anchors. The bindings can be used to validate the source address in the packets. 4. Background and Related Protocols This mechanism is an instance of a SAVI [savi-framework] solution, specialized for addresses assigned using the DHCP protocol. Dynamic Host Configuration Protocol version 4 [RFC2131] and Dynamic Host Configuration Protocol version 6 [RFC3315] specify the procedures for providing a client with assigned address and other configuration information from a DHCP server. If a client gets an address through the DHCP protocol, the address should be regarded as a potential "authorized" or "registered" address of the client. In IPv6, IPv6 Stateless Autoconfiguration [RFC4862] is used as another address assignment mechanism. A node can use this mechanism to auto-configure an IPv6 address. A DHCPv6 client may use a stateless address to send message to DHCP server. Even in a DHCPv6- only environment, a node must assign its link-local address through this mechanism. [RFC4862] also clearly requires that duplicated address detection must be performed on any IPv6 address, including DHCPv6 address. [RFC4861] specifies the Neighbor Discovery protocol, which is an essential part of IPv6 address assignment. [RFC5227] specifies the procedure to detect IPv4 address collision. It is not required currently. However, this feature is useful to determine the uniqueness of an IPv4 address on the link. Bi Expires May 9, 2010 [Page 4] =0C Internet-Draft savi-dhcp November 2009 5. Terminology The terms used in this document are described in [savi-framework], [RFC2131] and [RFC3315]. 6. Conceptual Data Structures (To be removed and merged with data structures used by other mechanisms in [savi-framework] if possible) This section describes the possible conceptual data structures used in this mechanism. Two main data structures are used to record bindings and their states respectively. There is redundancy between the two structures, for the consideration of separation of data plane and control plane. 6.1. Binding State Table (BST) This table contains the state of binding between source address and anchor. Entries are keyed on the anchor and source IP address. Each entry has a lifetime field recording the remaining lifetime of the entry, a state field recording the state of the binding and a field for recording other information. +---------+----------+-------+-----------+-------+ | Anchor | Address | State | Lifetime |Other | +---------+----------+-------+-----------+-------+ | A | IP_1 | Bound | 65535 | | +---------+----------+-------+-----------+-------+ | A | IP_2 | Bound | 10000 | | +---------+----------+-------+-----------+-------+ | B | IP_3 |_Start | 1 | | +---------+----------+-------+-----------+-------+ Figure 1 Instance of BST 6.2. Filtering Table (FT) This table contains the bindings between anchor and address, keyed on anchor. This table doesn't contain any state of the binding. This table is only used to filter packets. An Access Control List can be regarded as a practical instance of this table. Bi Expires May 9, 2010 [Page 5] =0C Internet-Draft savi-dhcp November 2009 +---------+----------+ |Anchor |Address | +---------+----------+ |A |IP_1 | +---------+----------+ |A |IP_2 | +---------+----------+ Figure 2 Instance of FT 7. Binding States Description This section describes the binding states of this mechanism. START A DHCP request (or a DHCPv6 Confirm) has been received from host, and it may trigger a new binding. LIVE A DHCP address has been acknowledged by a DHCP server. DETECTION A gratuitous ARP or Duplicate Address Detection NSOL has been sent by the host (or the SAVI device). BOUND The address has passed duplicate detection and it is bound with the anchor. 8. DHCP Scenario (This section should be removed and merged with other scenarios in [savi-framework]) This section specifies the deployment scenarios of this mechanism. Bi Expires May 9, 2010 [Page 6] =0C Internet-Draft savi-dhcp November 2009 +--------+ | DHCP | | Server | +-------,+ `. `. `. +----'-----+ | SAVI | | Device | +-/------/-+ | | +----\-+ +\-----+ |DHCP | |Client| |Relay | | | +------+ +------+ Figure 3 DHCP Scenario 9. Anchor Attributes This section specifies the anchor attributes involved in this mechanism. 9.1. SAVI-Host Attribute (This attribute should be described in the [savi-framework]) If and only if an anchor is exclusively associated with a single = host, this anchor can be set to have SAVI-Host attribute. 9.2. SAVI-Poly Attribute (This attribute should be described in the [savi-framework]) If an anchor is associated with a small number of hosts through a converged device, this anchor can be set to have the SAVI-Poly attribute. The SAVI-Poly attribute is mutually exclusive with the SAVI-Host attribute. The main difference in process on an anchor with the SAVI-Poly attribute from one with the SAVI-Host attribute is the policy of binding consistency. 9.3. SAVI-DHCP-Trust Attribute If and only if an anchor is associated with a trustable DHCP server/relay, it can be set to have this attribute. Bi Expires May 9, 2010 [Page 7] =0C Internet-Draft savi-dhcp November 2009 If DHCP is used to assign address in the network, there MUST be at least one anchor with this attribute. DHCP Reply message not coming from such ports MUST be dropped. 9.4. SAVI-RA-Trust Attribute (This attribute should be described in the [savi-framework]) If and only if an anchor is associated with a trustable router, it can be set to have this attribute. There MAY be no SAVI-RA-Trust anchor on a SAVI device. Router Advertisement not received from a SAVI-RA-Trust anchor MUST be discarded. 9.5. SAVI-SAVI Attribute (This attribute should be described in the [savi-framework]) If and only if an anchor is associated with another SAVI device, it can be set to have this attribute. This attribute is mutually exclusive with SAVI-Host and SAVI-Poly attribute. 10. Prefix Configuration (This section should be included in [SAVI-framework] but not this document.) Before setting up a host-level granularity binding table, it is important to configure correct prefixes on the SAVI device. At least two prefix scopes must be set: the IPv4 prefix and IPv6 prefixes. This document suggests set 3 prefix scopes: IPv4 Prefix: The allowed scope of any kind of IPv4 addresses. It can be set manually. IPv6 SLAAC Prefixes: The allowed scope of SLAAC and manually configured IPv6 addresses. It can be set through snooping RA message from port with SAVI-RA-Trust attribute, or manual configuration. Bi Expires May 9, 2010 [Page 8] =0C Internet-Draft savi-dhcp November 2009 FE80::/64 MUST be set to a feasible prefix. IPv6 DHCPv6 Prefixes: The allowed scope of DHCPv6 addresses. It can be set through RA snooping, DHCP-PD protocol, or manual configuration. If some of the prefix scope is set to have non prefix, it implies corresponding address assignment method is not allowed in the = network. There is no need to explicitly present these prefix scopes. But these restrictions MUST be used as premier check in binding set up. Refer to security consideration for other discussions. 11. Binding Set Up This section specifies the procedure of setting up bindings based on control packet snooping. 11.1. Process of DHCP Snooping 11.1.1. Initialization This procedure will not be performed if: 1. Option 82 is used to keep anchor in DHCP Request and Reply, or 2. Unspoofable MAC is used as anchor(802.11i,802.1ae/af), or 3. The mapping table from MAC to anchor is secure. If none of these three requirements are satisfied, this procedure MUST be performed. 11.1.1.1. Trigger Event A DHCPv4/v6 Request or a DHCPv6 Confirm is received with an anchor which has the attribute of SAVI-Host or SAVI-Poly. 11.1.1.2. Message Validation The SAVI device checks the Request or Confirm as follows: 1. Whether the limitation on binding entry number of this anchor will be exceeded. Bi Expires May 9, 2010 [Page 9] =0C Internet-Draft savi-dhcp November 2009 11.1.1.3. Following Actions Forward the REQUEST message if binding entry limitation will not be exceeded. Generate an entry in the Binding State Table (BST) and set the state field to START. The lifetime of this entry is set to be MAX_DHCP_RESPONSE_TIME. The Transaction ID (Refer to Section 2 in [RFC2131] and Section 4.2 in [RFC3315]) field of the request packet is also recorded in the entry. +---------+----------+-------+-----------------------+-------+ | Anchor | Address | State | Lifetime |Other | +---------+----------+-------+-----------------------+-------+ | A | | Start |MAX_DHCP_RESPONSE_TIME | TID | +---------+----------+-------+-----------------------+-------+ Figure 4 Binding entry in BST on initialization The TID is kept for assurance that the response from the DHCP server can be delivered to the request host. This is left as an open issue for future discussion. 11.1.2. From START to LIVE 11.1.2.1. Trigger Event A DHCPv4 DHCPACK or DHCPv6 REPLY message is received. 11.1.2.2. Message Validation The SAVI device checks the message as follows: 1. Whether the message is received with an anchor which has the SAVI- DHCP-Trust attribute; 2. Whether the entry in the BST with corresponding TID is in the START state. 11.1.2.3. Following Actions Deliver the message to the destination. Set the state of the corresponding entry to be LIVE. The lifetime of the entry is set to be MAX_ARP_PREPARE_DELAY or MAX_DAD_PREPARE_DELAY respectively. The lease time is also recorded in the entry. Bi Expires May 9, 2010 [Page 10] =0C Internet-Draft savi-dhcp November 2009 +---------+----------+-------+------------------------+-------+ | Anchor | Address | State | Lifetime |Other | +---------+----------+-------+------------------------+-------+ | A | Addr | LIVE |MAX_ARP_PREPARE_DELAY or| Lease | | | | |MAX_DAD_PREPARE_DELAY | Time | +---------+----------+-------+------------------------+-------+ Figure 5 Binding entry in BST on assignment Or set the state of the corresponding entry to be DETECTION, and send an ARP Request or NSOL for the assigned address. +---------+----------+-----------+-----------------+-------+ | Anchor | Address | State | Lifetime |Other | +---------+----------+-----------+-----------------+-------+ | A | Addr | DETECTION |MAX_ARP_DELAY or | Lease | | | | |MAX_DAD_DELAY | Time | +---------+----------+-----------+-----------------+-------+ Figure 6 Binding entry in BST on assignment: another case Insert an entry into the Filtering Table if the assigned address is not bound with another anchor. +---------+----------+ |Anchor |Address | +---------+----------+ |A |Addr | +---------+----------+ Figure 7 Binding entry in FT on assignment 11.1.3. From LIVE to DETECTION (This section should be removed or modified if all the DAD related procedures are to be described in SLAAC document) 11.1.3.1. Trigger Event A gratuitous ARP Request or Duplicate Address Detection Neighbor Solicitation is received from the host. Or a timeout event of an entry with state LIVE occurs. 11.1.3.2. Message Validation The SAVI device checks the message as follows: 1. Whether the Target IP address field of the ARP Request or Neighbor Solicitation has been bound with the corresponding anchor in BST or FT. Bi Expires May 9, 2010 [Page 11] =0C Internet-Draft savi-dhcp November 2009 11.1.3.3. Following Actions If timeout event of an entry with state LIVE happens, send an ARP Request or a DAD NSOL, with target address set to the recorded address in the entry. Set the state of the entry to be DETECTION. The lifetime of the entry is set to be MAX_ARP_DELAY or MAX_DAD_DELAY respectively. +---------+----------+-----------+-----------------+-------+ | Anchor | Address | State | Lifetime |Other | +---------+----------+-----------+-----------------+-------+ | A | Addr | DETECTION |MAX_ARP_DELAY or| Lease | | | | |MAX_DAD_DELAY | Time | +---------+----------+-----------+-----------------+-------+ Figure 8 Binding entry in BST on detection 11.1.4. From DETECTION to BOUND 11.1.4.1. Trigger Event A timeout event of an entry with state DETECTION occurs or an ARP Response or NA for an address in BST with state DETECTION is = received. 11.1.4.2. Following Actions If a timeout event of an entry with state DETECTION occurs, set the state of the entry to be BOUND. The lifetime of the entry is set to be the Lease time acknowledged by DHCP server. +---------+----------+-----------+----------------+-------+ | Anchor | Address | State | Lifetime |Other | +---------+----------+-----------+----------------+-------+ | A | Addr | BOUND | Lease time | | +---------+----------+-----------+----------------+-------+ Figure 9 Binding entry in BST on finalization If an ARP Response or NA for an address in BST with state DETECTION is received, remove the corresponding entry in BST and FT. 11.1.5. After BOUND Whenever a DHCP Decline is received from the host, delete the entry in BST and FT. Whenever a DHCP Release is received from the host, if the state of the entry is BOUND, delete the entry in BST and FT. Bi Expires May 9, 2010 [Page 12] =0C Internet-Draft savi-dhcp November 2009 If a DHCPv4 Acknowledgement or DHCPv6 Reply with Renew/Rebind sign is received from the server, set lifetime of the entry in BST to be the new lease time. If the lifetime of an entry with state BOUND expires, delete the entry in BST and Filter Table. 11.2. State Machine of DHCP Snooping State Packet/Event Action Next State -* REQUEST/CONFIRM Set up new entry START START ACK Record lease time LIVE START Timeout Remove entry - LIVE Gra ARP REQ/DAD NS - DETECTION LIVE DECLINE Remove entry - LIVE Timeout Send ARP Req/DAD NS DETECTION DETECTION Timeout - BOUND DETECTION ARP RESPONSE Remove entry - DETECTION DECLINE Remove entry - BOUND RELEASE/DECLINE Remove entry - BOUND Timeout Remove entry - BOUND RENEW/REBOUND Set new lifetime BOUND *: optional. 12. Filtering Specification This section specifies how to use bindings to filter packets. 12.1. Filter Data Packet Data packets with an anchor which has attribute SAVI-Host or SAVI- Poly are filtered. There can be an anchor with neither attribute. Bi Expires May 9, 2010 [Page 13] =0C Internet-Draft savi-dhcp November 2009 If the source of a packet associated with its anchor is in the FT, this packet will be forwarded; or else the packet MUST be discarded. 12.2. Filter Control Packet The source address of DHCPv4 Request/Discovery must be set to all zeros. The source address of DHCPv6 Request/Confirm must be an address associated with the corresponding anchor in FT. The source address of IPv6 NS and IPv6 gratuitous ARP must pass the check on FT. The source address of DAD NS MUST be unspecified = address. All DHCP Reply/Ack packets MUST be from an anchor with the SAVI-DHCP- Trust attribute. The target address and source address in all the Neighbor Advertisement packets and ARP replies must also pass the checks on = FT, if they are associated with anchors which have SAVI-Host or SAVI-Poly attribute. 13. Format and Delivery of Probe Messages 1. Duplicate detection on behavior of host; Message Type: DAD NS, Gratuitous ARP Request Format: Link layer source - link layer address of host; Link layer destination - For IPv6, use multicast = address specified in [RFC3307]; For IPv4, use broadcast address; IP source - Unspecified address for IPv6; The = tentative address for IPv4; IP destination - For IPv6, multicast address = specified in section 5.4.2 of [RFC4861]; For IPv4, the tentative address; Delivery: MUST not deliver to the host which the SAVI device is performing DAD on behavior of. Bi Expires May 9, 2010 [Page 14] =0C Internet-Draft savi-dhcp November 2009 2. Send reply on behavior of host to hold bound address for inactive node; Message Type: NA, ARP Response Link layer source - link layer address of host; Link layer destination - The source address of the detecting node; IP source - The target address in the detection message; IP destination -The source address of the detecting node; 3. Send probe to detect whether an address is still in use (generally in case of port down/up event). Message Type: NUD, ARP Request Link layer source - link layer address of the SAVI device; Link layer destination - The link layer address of the node; IP source - The manage IP address of the SAVI device; IP destination - The address is suspicious to be inactive. 14. Data packet trigger on SAVI-Poly anchor To handle the case of movement from one SAVI-Poly port to another, data packet based binding MUST be performed on SAVI-Poly anchor. Whenever a packet with source address not bound locally is received from a SAVI-Poly anchor, the SAVI device MUST send a DHCP CONFIRM to the DHCP server to ensure the address can be used on the link; if the address can be used, the SAVI device MUST send a DAD NS on behavior of the host to check the uniqueness of the address. If the address passes these two checks, it can be bound with the anchor. Data packet triggered binging will cause heavy burden and unpredictable danger on the SAVI device. It is not suggested to configure SAVI-Poly anchor and allow mobility between SAVI-Poly anchors. If this function is turned off, the administrator must be aware of the packets from SAVI-Poly anchor may be filtered incorrectly after movement. Bi Expires May 9, 2010 [Page 15] =0C Internet-Draft savi-dhcp November 2009 15. Binding Remove If the lifetime of an entry with state BOUND expires, the entry MUST be removed. When the SAVI device receives a DAD NS/Gra ARP request target at an address bound and there is no reply from the anchor, if the anchor is a SAVI-Host anchor, hold the binding entry through sending NA/ARP Reply; if the anchor is a SAVI-Poly anchor, remove this binding or hold it. 16. Handle port DOWN event Whenever a port with attribute SAVI-Poly or SAVI-Host turns down, the bindings with the anchor MUST be kept for a short time. To handle movement, if receiving DAD NS/Gra ARP request target at the address during the period, remove the entry. If port turns UP during the period: ?Optionally send probes to SAVI-host port for assurance; ?MUST send probes to SAVI-Poly port for assurance. 17. About Collision in Detection The SAVI device may receive a response in detection. Some related details are specified here. 17.1. Whether to notify the DHCP server It is unnecessary for the SAVI device to notify the DHCP server, because the host will send a DECLINE message to it once it finds the advertised address is conflict. 17.2. The result of detection without host aware In case the SAVI device send detection packet instead of the host, the host will not be aware of the detection result. If the detection succeeds, there is no problem. However, if the detection fails, the packets from the host with the assigned address will be filtered out. This result can be regarded as a reasonable punishment for not performing duplicate detection and using a collision address. Bi Expires May 9, 2010 [Page 16] =0C Internet-Draft savi-dhcp November 2009 18. Filtering during detection In this mechanism, whenever the DHCP server replies an address, this address will be allowed immediately even before duplicate detection is completed. This design is in consideration of a host may start to send packets straightway without detection. Also this design is to be compatible with optimistic DAD [RFC4429]. However, this feature may allow an attacker to send quantities of packets with source addresses already assigned to other nodes. A practical solution for this vulnerability is configuring the address pool and allocation algorithm of the DHCP server carefully. 19. Binding Number Limitation It is suggested to configure some mechanism in order to prevent a single node from exhausting the binding table entries on the SAVI device. Either of the following mechanism is sufficient to prevent such attack. 1. Set the upper bound of binding number for each anchor with SAVI- Host or SAVI-Poly attribute. 2. Reserve a number of binding entries for each anchor with SAVI-Host or SAVI-Poly attribute and all anchors share a pool of the other binding entries. 3. Limit DHCP Request rate per anchor, using the bound entry number of each anchor as reverse indicator. 20. MLD Consideration The SAVI device MUST join the tentative address multicast group whenever perform duplicate detection on behavior of host. 21. Constants MAX_DHCP_RESPONSE_TIME 120s MAX_ARP_PREPARE_DELAY Default 1s but configurable MAX_ARP_DELAY Default 1s but configurable MAX_DAD_PREPARE_DELAY Default 1s but configurable MAX_DAD_DELAY Default 1s but configurable Bi Expires May 9, 2010 [Page 17] =0C Internet-Draft savi-dhcp November 2009 22. Summary of to-be-removed sections and open issues To-be-removed sections: 1. Section 6: Conceptual data structures 2. Section 8: DHCP scenario 3. Part of Section 9: Anchor attributes 4. Section 10: Prefix configuration Open issues (discussed but not finished): 1. Whether to keep state START Should the procedure be initialized based on client request or server response? From Eric Levy-Abegnoli and Christian Vogt. 2. Whether to keep state DETECTION Should DHCP interact with NDP to detect collision or should all the collision detection be left to NDP and the DHCP solution just snoop DHCP only? From Eric Levy-Abegnoli. 23. Security Considerations For prefix level granularity filtering is the basis of host level granularity filtering, to learn and configure correct prefix is of great importance to this mechanism. Thus, it's important to keep RA and DHCP-PD secure. [draft-ietf-v6ops-ra-guard-03] describes a mechanism to improve the security of RA message. 24. IANA Considerations There is no IANA consideration currently. 25. References 25.1. Normative References [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. Bi Expires May 9, 2010 [Page 18] =0C Internet-Draft savi-dhcp November 2009 [RFC4862] Thomson, S., Narten, T. and Jinmei, T., "IPv6 Stateless Autoconfiguration", RFC4862, September, 2007. [RFC5227] S. Cheshire, "IPv4 Address Conflict Detection", RFC5227, July 2008. 25.2. Informative References 26. Acknowledgments Thanks to Christian Vogt, Eric Levy-Abegnoli, Mark Williams, Erik Nordmark, Marcelo Bagnulo Braun, Alberto Garcia, Jari Arkko, David Harrington, Pekka Savola, Xing Li, Lixia Zhang, Robert Raszuk, Greg Daley, Joel M. Halpern and Tao Lin for their valuable contributions. Bi Expires May 9, 2010 [Page 19] =0C Internet-Draft savi-dhcp November 2009 Authors' Addresses Jun Bi CERNET Network Research Center, Tsinghua University Beijing 100084 China Email: junbi@cernet.edu.cn Jianping Wu CERNET Computer Science, Tsinghua University Beijing 100084 China Email: jianping@cernet.edu.cn Guang Yao CERNET Network Research Center, Tsinghua University Beijing 100084 China Email: yaog@netarchlab.tsinghua.edu.cn Fred Baker Cisco Systems Email: fred@cisco.com Bi Expires May 9, 2010 [Page 20] =0C ------=_NextPart_000_0048_01CA610E.CFAC6A60-- From christian.vogt@ericsson.com Mon Nov 9 00:40:47 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 59E3F28C1F1 for ; Mon, 9 Nov 2009 00:40:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.532 X-Spam-Level: X-Spam-Status: No, score=-6.532 tagged_above=-999 required=5 tests=[AWL=0.067, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w52QoYxtZBGV for ; Mon, 9 Nov 2009 00:40:46 -0800 (PST) Received: from imr1.ericy.com (imr1.ericy.com [198.24.6.9]) by core3.amsl.com (Postfix) with ESMTP id 589F528C1E5 for ; Mon, 9 Nov 2009 00:40:46 -0800 (PST) Received: from eusrcmw751.eamcs.ericsson.se (eusrcmw751.exu.ericsson.se [138.85.77.51]) by imr1.ericy.com (8.13.1/8.13.1) with ESMTP id nA98fBC8032048 for ; Mon, 9 Nov 2009 02:41:12 -0600 Received: from eusrcmw751.eamcs.ericsson.se ([138.85.77.56]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Mon, 9 Nov 2009 02:40:48 -0600 Received: from eusaamw0711.eamcs.ericsson.se ([147.117.20.178]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Mon, 9 Nov 2009 02:40:48 -0600 Received: from EUSAACMS0701.eamcs.ericsson.se ([169.254.1.35]) by eusaamw0711.eamcs.ericsson.se ([147.117.20.178]) with mapi; Mon, 9 Nov 2009 03:40:47 -0500 From: Christian Vogt To: SAVI Mailing List Date: Mon, 9 Nov 2009 03:41:16 -0500 Thread-Topic: [savi] Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcphGFVktpEUxkMqRo6ZTXJhNuVVQA== Message-ID: References: <058861F3-5E50-42FD-A6CC-220EE213629C@ericsson.com> In-Reply-To: <058861F3-5E50-42FD-A6CC-220EE213629C@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 09 Nov 2009 08:40:48.0104 (UTC) FILETIME=[55DB8680:01CA6118] Cc: David Allan I Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2009 08:40:47 -0000 Folks - Thank you all for a productive working group meeting this morning! As mentioned during our the meeting, the presentation of David Allan is the problem statement that was missing in the liaison we had earlier received from the Broadband Forum. You find David's slides on the meeting materials web page: http://www.ietf.org/proceedings/09nov/slides/savi-8.pdf The meeting materials web page now also includes last-minute updates to the presentation slides you saw during our meeting this morning. Meeting minutes will follow shortly. - Christian From christian.vogt@ericsson.com Mon Nov 9 02:26:27 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7563528C1DA for ; Mon, 9 Nov 2009 02:26:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.236 X-Spam-Level: X-Spam-Status: No, score=-6.236 tagged_above=-999 required=5 tests=[AWL=-0.237, BAYES_00=-2.599, J_CHICKENPOX_13=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HHfJiuy9C3Ul for ; Mon, 9 Nov 2009 02:26:26 -0800 (PST) Received: from imr1.ericy.com (imr1.ericy.com [198.24.6.9]) by core3.amsl.com (Postfix) with ESMTP id 17A0728C1D3 for ; Mon, 9 Nov 2009 02:26:25 -0800 (PST) Received: from eusrcmw750.eamcs.ericsson.se (eusrcmw750.exu.ericsson.se [138.85.77.50]) by imr1.ericy.com (8.13.1/8.13.1) with ESMTP id nA9AQIK4001507; Mon, 9 Nov 2009 04:26:18 -0600 Received: from eusrcmw750.eamcs.ericsson.se ([138.85.77.53]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Mon, 9 Nov 2009 04:26:13 -0600 Received: from eusaamw0711.eamcs.ericsson.se ([147.117.20.178]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Mon, 9 Nov 2009 04:26:13 -0600 Received: from EUSAACMS0701.eamcs.ericsson.se ([169.254.1.35]) by eusaamw0711.eamcs.ericsson.se ([147.117.20.178]) with mapi; Mon, 9 Nov 2009 05:26:12 -0500 From: Christian Vogt To: Bob Hinden , Brian Haberman Date: Mon, 9 Nov 2009 05:26:39 -0500 Thread-Topic: Broadband Forum liaison on IPv6 security Thread-Index: AcphJw77qRsw7OKPRz6XIpviAp6ZWg== Message-ID: <527DA1D0-A043-46BE-A294-A14F593F3B43@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/mixed; boundary="_003_527DA1D0A04346BEA294A14F593F3B43ericssoncom_" MIME-Version: 1.0 X-OriginalArrivalTime: 09 Nov 2009 10:26:13.0255 (UTC) FILETIME=[0FF0F970:01CA6127] X-Mailman-Approved-At: Mon, 09 Nov 2009 02:28:52 -0800 Cc: SAVI Mailing List , David Allan I , Gavin Young , Ralph Droms , Dan Romascanu , Robin Mersh Subject: [savi] Broadband Forum liaison on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2009 10:26:27 -0000 --_003_527DA1D0A04346BEA294A14F593F3B43ericssoncom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Bob and Brian - The SAVI and V6OPS working groups received the attached liaison from the Broadband Forum, asking the IETF to tackle an IPv6 security issue that occurs in broadband networks. Specifically, this issue is about the failure of Duplicate Address Detection to protect against link-local IP address duplicates on NBMA links, which are common in broadband networks. Today, the SAVI working group meeting discussed the BBF liaison and concluded that the issue calls for a proxy DAD method, the specification of which may best fit into the 6man working group. As a co-chair of the SAVI working group, I am therefore contacting you to ask you to consider the adoption of said work item in the 6man working group. Perhaps you want to raise this topic tomorrow at the 6man working group meeting? Dave Allan (CC'ed) from the BBF agreed to re-deliver his attached problem statement presentation, if desired. The presentation takes about 15 minutes. Please keep me and the SAVI working group in the loop on this matter. - Christian PS: The BBF liaison mentions an attachment. This attachment is Dave Allan's problem statement presentation. --_003_527DA1D0A04346BEA294A14F593F3B43ericssoncom_ Content-Type: application/pdf; name="Liaison from Broadband Forum (Gavin Young).pdf" Content-Description: Liaison from Broadband Forum (Gavin Young).pdf Content-Disposition: attachment; filename="Liaison from Broadband Forum (Gavin Young).pdf"; size=97473; creation-date="Mon, 09 Nov 2009 05:26:11 GMT"; modification-date="Mon, 09 Nov 2009 05:26:11 GMT" Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjIgMCBvYmoKPDwgL0xlbmd0aCA0IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeNrtfV2THMeR5Hv9it67F8lMauX3h+zsTKAo6njHW1EiTbQ1 0ws4GAIQAQyEGYCH+/UXntOd2ZWZXlMDct9u90GrLUx1d1VkhEeEh8e/Dn89/OuQD04dvck5HXx2 h+jC0eXDu+vDd4c3h9/98VYfrm4Pqvzv7ZX8e3U0TuF/7v+f5/+2RHPURmlziCrLHXI+XL0+fPbt wfnyD0//8e3rw+++0Ed90Idvfzj86t9+ffj2n4c/fVu+SbvX6s4Hk9PRGRUPNh2NzjnuufN/Od15 +Sv/zger7DFnn/bdebm/83+dfufhznJH59z8zsv2d96+s7bHpLOvd14e95xxbx3DMYZD8HIrczA+ HaM5eHP0YTm/+K+v311dv717//TV4d1L+ZPTP8K9yz/s7iHf4XdfvtaHz29OH5GXX8SsDs56+UOv l/JB+ueYVWewVoVisYfg7C9rsPUoBKuOyj/uzpsG2+6swzEFfl9zVAe94L6flfu2f2LtUeVs4/2/ /NW77rJXx2x9Ol++OV1eTpdjkssm5NPlp91fa+XkqNrT1Wf9VWuOTue03F/+vr8clFwOkd07+WNW 56tvui9m5FhkZRP5aOO0XFbhdPnQX/buGKwLp2/2RX85GbmsXfdQ6iPV6hjk31w+0uXishH/Fdz5 q73v/9rL0ZD3ebr8ur+co5xzd35o/Td34m2zq+/rq/6yjXLZn2/+svtqTl53iNmTR+7kjOuQ8+Vf X15OqTzz01e77U1Ju6PNTpOn5p2RyypfvtCLr+ajOtoUE3ljPlk5Cvp8+dvuctBysuTZLPPPDjYf ta03//0ef2GM/I0Et31nr5zpw+O8hRweG7e8hR3uvM9b+KyPITxw37m3ECceVbXdwQLUMXqrz9b3 qjuUnTN5Nbyko5ZTzV5xFIfv5WSSQ6mVPiaXz4fyur9s4tHK4SHmpSWKJds5k3pR3Jw1ypJbyxUJ RersLXoXKlH5qKI9H6rf9JetfG8V3eWvXoqN4B/o7XCo5YXIR2v6SpfBVH4YHswxyoMJ5McBVhhn 5Fgus0cT7DFqF8iDS/lolMu6u/fZHrR4hJC9IbFHywkTNHb+6z8Mb0UcpVjE6bEPvwsfrrNhL00+ W06vJ/YgD/iogVbIO/UCQ4IJxJeZJJYuaGeZPxZADefs2Z6OQ/yAZ4nnb37Vxw9xlCrbzKJPiEef nFnFj2JPMJZsFp8lroaDxBHBo7+VEwvUKIFUwNgPeyCYkfglUTuebG7Z7Z6ozR364I2HG+tR/qb3 9eEoUaYGkie90YVjUCmdH/7f+8/WUZ5uvfmXM6PT9d0cej8hDz+4eL783QyUmHrzP+/KZ5IWPx/z Prf8Ke6+oLQHAskpm/njNjx8MYRdsbUcEoE6Z5dNwkVy8iJ9xYe3g0cPcor0+UXeDS8yH0PyDI3g RaaQwiWWWTl8f5RYlJnLlxMs0cSQWKSzlR9uDbEx8ZhH7S11D06+uTs/lee99UcvYMSdn8rd4Fsi ftf6m3XxYqHxwrmjCXL6d9lEsbbl3gGtfp2ckBCYTTiBtypMXOdyjhhBrnry2jqT6W0iI8vMRjOb EPjrlTXMJtYmM9iEkycfg6EwQNBxCJ64bS0QVB6zP321DwNKCAAgntkEYICpT+15H498BATRzCgi MkvHQqUViCqB9GyuQ4xHRInak2Bn8dnWOZI0lICjo74MV6uERcKNrZlY/0KdJGrWK0eSBmeDGGxk SYMkSoI4K3jqo7gkQmL6MZI3Jln+MacKV/tv7sXQU05uYQmLoMJU0exloJVTZnHG4lG+muQdx5RK pDVKCTpedkdaiSZKUkV6WpfHx9pvhgd8tMq58498MjmOsfnBv88SfOdXwXShsfawHWuHYCofrnMF /H/eVQ6zHikqeWTLdjg97AunAQn6Htgz1A0k+ZZgabtztrRXYXyuxZT+lIYkpk7qGdnhe1pNqgIl ksYaUj4bCjFygl3N6ga3KC5b4vT5DP44wzy+nqIRaGsxkeqxByRtxKNLjkCzoyzeo4bpx2ZHAGs6 nF7ZL5AdvaNvdJn9di8RIcVaKOrfGkw0xpo9HTt7EDgYJUU6v7XvJ0BWDJLWx4BUW6Qc3lrwgMns rWn5cFUrPb2lllgWdCbhxiCZru9sgA+Cb5LycZnHaDi9nBIDhaikZ+W7ey8VriKK6shyI0QybVje hSBai35jHBPYw1M+pwX2eJMvo8FySrvkRYgJepzuXCBKSJ+QeC2Shh+NRBxqzvuDAcGt52Bw+hFh 4oGyq07oL72fWAeDrwcvI9FMV/D1zcQgfQqWubB1Dea7wY1I7qTMKvFaHmzKWDl/2e95nssnRQo5 /wIAdgTt/7VdZ3s/yYCDipn41CgJpbEVqN5N0i7fYG6f4gJiZ13LcF8NJiRWmDRNu1DUD/UUDRha TqCE9MxaAsDQrlaE/tWjYBx+688/7MMMQzd/OngWwFwfLYGakheJOdS6ygixBc3JM78MVJdfDTDX 6byVlh220rKUjF3mFjM72T9uJ2Xvf73sS8oOs6Ss++0LKm3K1krcy7HiIifX0zT+IidbxjJeKefU g/3j5NxnV0HR+y6bNPA5NtoDr71GxdMmGKt1euEGE3RgqYuBx5LE6DKcXFqEfHNJXc6X3w5H3CJ1 SeyyYGNT2zxDqEL/qtYAhhgplpxyF9tLtagYmoBj9GzdIctbV3g6LTfZH4xsEhfl42G/yf7/YLQZ jJRAE+R6Dz/PTwtGYjLK7M8gd9/XyLOQ2y4Pvf7Pt0uLT7uT3ZUW30yCGOsUSQRLuoD2gsr/tp12 3gwOycPb9Q3Y5aL0F5RnPdLS7cnVsG5nMUgbT0BmiUGmptvDzRFkNG1aWI2WeM6ssywW4Joz/M0A jh3qjusccncEC0ry7uSrOdxb2cLNYWjJg9ghLoh48nNrkXVwg3wVWwHT6+06xZDhwiIkOWARDPmM r+f5avAGHkXJhbwzpQH8HcuVnMCKFjyfDkHEHk2sp2BAPGLqpmG1p0MQkRRShfMr/TgYhJP82DNr Qz6kG9rq45tN8lRCZk/FKY8fRit3gtXkh52LO5fVMzEluJUILowu5KJ9ydKyqp2Jg0rosa0NcsM/ XZ6HhTepDvMm1V9IM3uZxx+0elJWrMVVQLavB33oQllxE7m2lJ/Molc433twfzkJ2LPn2PanIXgJ 8Gj12ie7uFOouuXwiIfNYswyjzHi2LbJXu3OfxtKAqswc7PdwZqGmeWhMDOvqoFxkNyKJdQzDqJL W5yD4Bnk1km+t4uJxREU3VqLafBJFp21+tlDLoP+VKtsPzISwBYEWi2PeWlD698LdDan5t0ylL46 nskDweBNhyxQV7M8mwGRRFIpz7y9EQhta+tvKLt5heTbM9ICjMZX4tk/hwQ3CjxQLIIjX/FKswYV mkRZUneWzghk1q0K/HaIJUgC3YoIsnSshGYzQ5NIXJLTtNViJcxpX8P3wIiIqNQyroYVj6WtWXdE 7/MZe88rC+YAr+Y+IZORh2oLE+RRBrvZZVmGaFBaRfXRfj2pA3tf4ew3fSBCAm18oF2UVax4MgMv lkHhNV9hiAUaNN3cx4JN2gHMSCnEgj2Pc0xldriYFheU/F+nXGnZFRUeTD7us6IuKrya5J7RWJa7 oxsTTDzZwotJE1q8F3ubKElU1/t5bwqnvJQxptashRvSgl7mINkIHJQscd16fyDya4kkgtkvX8TP KgL8t+HoFy42o4hJyhLlScfLcuKFIcjjMJ6mFFmepfa0I68FPMOQydOSvzwaRWswOsFIq7v8Q+/o BShJdKc9Eq8FwSVaySxtb00rmYJaQjXeoZGhCkGMUbotjkb01I+jeUN7OxYnQ1wVydIsTkarurwe cgIQwmtJ7L+3ukk58WJl6ii+SmKYHJGzq4cf2N9BCfLK3dpxyH+5n2NQU3s9fPnv3x6e/O1PT/Zw udCd8sbmx3xAc6qPcX0gW9OexXL5Af9zu1L89CH6zrJVKX6AvtOd9mVdKX4yo+Z5NopwHhc4udUf J2Ub25oeszqy+IK1a8TbXDagLDyAhMjth73iSj3AvnjAvf2zQ6rA4UFV4NO/KhDFvPKsOV2KRby6 reU0+VwT9IHOBGKOrdWioWRi0zGZmsCOAB6Jk+VVfUlA5H9YcxrEHLFRFseQe6uQmW+NAuCtozA3 Hp2pKPjlxDsGdcapQwmt4IZa038xlNCAGyLjHFpkk7G2kAbfWhJKBu6dnFurDONwOdSRsmE9Pxcw flWf6OBaC1MqFHyR3Ce5VkyWBAEuq7PyC7pWA5uI/WH8T3GtEThoj2v93xOyvNJsGgquMxujiWft soAfZ/MNUUfiWQuXXlXn+e2MDaIMxToSt1U2Z9/606SGqeWrs7zThGNIZmwALrWc4JuTezVgHcHD raF8PeGDmFjt/uOe5oSWOK+yPMr5q/wE2hxz3ISH6k2poTGOPlrJpqa7Pw1jEYLijWVDFfeQ22Za rEb9rtJQXw1vOiMqWMr7cZjhOn/2x961SoROrpJg/jBpX9iQGaES1GWTas335cwzhzotMnQ1DSbA fKRjEegXGjqUV/qFhtYnkoZ/jAsrZqN/YNnNXekf2BUV9JKGisKL9Svne7h0voKa5N5ywjBTOzjf 5eESBhq+IXaua+4bzxn3pu/tm5PGym1tf/vlYde7r4cIGm8yy8+oG0/vuzjxPHrPZN6DTM2OTeFR AqQdRIBgQU5+nuYUV+0bNvr9Lo+m0AeS1Gj9k5bHDhvSNwCnkva8gT8PmEcSWRV6jLpc9EFcm7P6 sNHGfTkvozAm0SPKKP/Re1gwWhtt/IYU11kVVmNuJWnyxUBZ9ZKCr8Y7HiyjeESEcHoPn95BYcOk ztids0Wf9fWANRVt6Ms+cBROVDRSLe9aKM8mpU2r1gzY1bwGMK8LjAGL3mlydMQno4pX5wefTWZ4 TPCetf9syWDOl7/oAyUa+Tmwx1Ia+SmwzM2id+pqoW7MQrSE+Mya3RYh3q2RYte31ZEiRSfoQ8cK 5oY8A+c9GNZ4csiA2gT5OBskR6cVF4Yhb1S6g2KdGY8j7wwrPmGCPPjMbM0jCrvMaroYGLDWsJYr hvNUG/7p5+QCJr5CbcQPHSlk8j4YUksMmOlqk6795WjA9+weSpVgwISMq8CmR6LRgWReLW24jEpi m12+HjoT4Jgrhs0lW5WURjMmaUKebiq/oH9mCbZi6vHtbSXBVuSFMddRaIWejXrlMuoVVwz2hzhY YFNIAmb3eMtP4mA5yBCkPenIP371uI4IuBZWAM/0A2Zu/vk2/eZph3gwup9U5RR8GBGPPPBAIvki b1IrYyPzxHiVHJuXKGDCuZ/ycUht0Sz2rBmMqb1Ysff7vqECAo0Llma26BXX0/N8Qt4x+N7LNBvK YHg6OhinJWuOitbhxZvpoDX5Zpi6C147dlk+W7vab72eTCsEaxh1x0ky5FLvM+qckpfImOrr+mEo NaGHTWObk/BjYvXSw8iMiiBTJeJxvJWY3iJEz0nyYgs500eOEJC1olwQQZxOaU1It0G+mq6d/fdD dUd8ofHrimepPeFwmntlllQI8O5TKmylT60lc3/EIf/Hr3cpmUgEiVHO9v4bPw58on/v/hMG223y m1TZpnr0+aPavz0p6G4IuasmR2+jOUs2b2qL5Pd7npX8TZDfpB/8TWPFanncoOfGdCHo1AtvaadW nBznrnHmM9P5KLSVyjJ4PfPQYtlszg0uWhwKcRiFbJ11ZhMAa6rTYZvqpCezarqCiDjAdAyE53M9 ayDUagyEW5aiSkiD6ND5sulhupffZWovQQ2MGXFG7aupoWCFem86A868B6YY+RsbbCI2+POp4hYJ WeBc8Va8+GbvPFTjiodYwcv3k/mU4KqB/XM8rybXdP56wveKKVHyryAjE9MKfi8dFdNVNa99tR4t f6NiOj2vX0Bg5cttgZWvtwVWPpCx1WU+mFG41oEqdXVjq7dDTq9AnKUyTuux1atZ5aZpRE0rN7zD XKivMTF1tDKLHDQV5vAG4+rmMCdbn2U9CJm0k/UYa+PpqLwmanf39VlNPQ1SxFi/2fcDlBSQGzzT r4KnUa2edTPxNF6nSHqeEgiPLYF8NpQLitYic/0OppZyZBm9KkSQOQL2qMlH1YsPVi2youDUKQA+ 5CB9mS/0jziYb7bTrOuJQtpFmnW3qbb1EymmLYzPtCqmvZuJADSljR8HR4aKVSfj8WA+7Y8pyzN+ rCPbW9+36Gq7wy9036ZZC7ZqMnvuy4AlcUAzvaTDtl7SQvWSpml044k+JyNvbKYNxdRWHruZFVPl rF9G4KUrplrl6RwmlHUpFCoiEKZO5r6aYTjNuOzBYKqp1wtYLtrHjSl+t+lWDxMhz5hqBWqos6K0 lgJLVS1oajFqxqcGnyFESthACFeaSWeBDSKghPUgHAjH0XliCmg4puBYhdgBMLX50Z8mZVjJ0DVL 0aGilKpszqDUCZK6MY4qiklE0IaFk1DkHyxBJgED4JRGHoqOkWEROED+IQQWiwLooj4wenwEV8xR 8RYIHvsG9t8MhADBvgL2yVcTI5QIrZn6S9Lgua5H8ldlWCgw1bBxO7TgoMBUwcPVAJ6LAlMmHi1h msJTGmwGLSW6TNBeRtDJOtAOoPik6BjvJJewUoHo8wHXQzHHZQZEFYZkUmbIXaEBVJ3tixHlZgnG lEehBO4ZRQeIBcIeW/1h4HAUCohfUdhWskroEtJUXmu00y0dYNGwJk9pgYUCUqkOoyAOCHLrSu9q khIMEa/58Iy41BDpKIPgQa80sTWNkfpGJBqemsXkjkrkhGqLgaxMzcEi8+BTwRaZR3UeP4zoSTyu pz/MFj0dzXSyHCRka+9pGFaX03u0tIeu3b1AG8vHUHFNhjUytSuOjTkPEEwFF7AytPalF0l1Er04 lxwCHZZCq5JPtni0KpkIkUCZKH9MT2AA0dlRccmAznVghyAgB66O59lIl9OQfmCWFlEO4zgtoh5G 80gd0dBwTB9JR2Qulva8IT1riACzjmKGWtnHJD0NFAt+FCPbAYq/3zfavXzSNN/TcZK2TPORNn4p NxjHSkPgRUpKRQfDAxidfEgTI3O5ertnEy0AnTxDQpCryZoqVmOazymqWA0R+kw8AvgDyWbWR0fn SZnaHHo3oxe0abWbiUB9jI4JtYNeYII3bMYDYCREBh4dGji+lqEHXBshJhdZGRr0At0EHfvukMvI I6iTBvsguEwvI39O9uwyvhuKZiBGeCaoBv6A9kzxOMD/Z4Y8TZYPpvLjwbtjirWFP8yqyfdSzVe9 HFCvOBsbSD0iKvSpAsPbsfTJqQuO4Kr5qvR2mHAPUsqUmhAx12lX9IDVbBcKhezwgHoQmgPvPzpZ kD1qefztgHkRjhNrYaYIjY/1Z1+CWgV+n2bgLgsMkTybdo+8gf4do71lwRkuMgqMVgKBRjH3pWHa II+cxltl0YZiCEiJJdXm6A8j4AU1mEp9qowSfiKDegJ4QXFhjDt5z/oCo7wdAa/E25qnvxpDQLzA KCPgFSzutCe8YkG0SmyFlR+0kbCYKjX+bgS8CWkjbS6IkSvHR3slE4+JRXPwVRrHbFRiQ7/aeUoj R8Pa+mXdr97mARfEZcIJC+zpEP12z30d5gvgmOt9H1QTGl6yeIPUNtHcdB0isNaiVYzx0NXlns5Z qsvMui6HfYnyah6G7ZYpTfXZTCwvRrsllhciq9t3JbnrGb/RqEQyc1BbJKlhom6d4PRwc+QUTVV4 oPJDLLNxWw4TAKIbrHo9CE5LPMysd48ZU3GflrRhHPJTExgmc+g0BsWK5IAnqbmS3vMDnthGERnE rGErdl1D7emNhk5ulIZGQ9F3M/ajjXpUyt2D7Q3IK3sIby+3z92bCTv84tyNlcbVsOnttpDl9XbD 42rGELcqsKCCNMuoTHYXdA2Pl9ti8HfbYvAft8XgD9srY4ZGJPqUPrA6SGlERkMlyATxqcTJxRgL jZSABdaCikoTt9HVxI+zVqOhwm2lZO6r6uF3k7MbLS24Owhom+4EXPYaJbVoTudq0mtMMVJKELYx BUr6x+FMPjH4g8Pps2EFA/DSVGPUDTfHtolIi94Q96/a/gO+x2xeduyEFWKy1qzjFDCbx3d2Bczm NdA3VLXRP4mO4n90rVViT7wwl4dy3XJJXLa0ng7esqmX3094y1HXVO71QExWyBM9o5MUOVSfKPyX tCYHJlmRy5A7q0Jm2FG2pIWbMePeJod+GPxhAieICvtCHaTVnUadViiSUtmIkjvIC2dIVhWvQ9Em 0oNAZe405ps0nWSX9EAChaa+WENNo5aNh8SlDKPTucKSHijFGGIai6TiMKx50VWH0JxmbQLg/6YW NcH/9iJ7GDdgyWertIp/DwqJiukHCcmPiOkP1Os+ThQiTGte9A8ME1+hTQT9tImXiTjOwnf6XOg0 Xm3rNL4YyrIJxEwK1VGib72Ju+0tby8m3CHbiC4vZ3sMkg0Mba+b2AfCHWIDP0WqIbAQUNhBupaX ng9t7AyGjiFPrcTkNuh0NwzOIre2DMmcu9zkqTmYWisLDFokcMSudprfDnA7YDkEU3rwaAcZuuIA CpNOsx1tkEjOjbN63MMf8fKgbUR6/PDR+zQiNTjkj7vtsgP9Y/B6D+97GRRbOl7mG6JTPxjHMpNw frrNOX42cxWxVtefbY+FvJyp/LrkKG8zIa9xFP2v1BlvZr7C16/2ZuYrnGfAB9tnm6voqz5QHVc6 ReoqBCP76uRmquPGMXyB1bSxue67mYBwiAzF2gCqdQx0JMWgds/09aEXq1M9jwPhRQv0CXTW07nS MM+XD22F/cW328jqbA7EuqhZxxx8mJBqtXgYG9FAPomMe4sngW6BYs18j3UoUdGxRPls5S3TW/Ig x9uq8Hs15AaowBvmX0MRAF6XFJaOMNMYTENqgcVfnjLGAoQAWzN/TA4wZK083fYKfWC6dCzCFH1k mC5CiCJaukoW5HlBpES9IwrqSm2AdhhMhClaQ0p6CZZoDDtDCQwHH1ikL2ybXHkjAxmnbFRlndJC tskDyajuEwLBoakT3c0aD0ZTNaniEWtJb3DWaIVGR8W7VFndkYiuiMB/UGt5FRWGqjWdPoGhOs/w vwIBgkIUrVCsDJQHJH9+bPspRsAK+dBMWQhFjiVRHpAG8YvvcNISmT2t0UruoaBlxRIbA2ZXTU1G No280VR3hr2etQ/a9MrbWfugYe27UaEa+45oxmZL+KVcG5AYLPMc2mF/rqH5HNRYrKX5nCvbDmk3 yEG7x7OShnZlqZ+nJFoM9tMYpz3Cr7YsQYF8dqSNXoEs7qgzlbzAGqNc9TK+HJsJUJPTjGMUQCKs Xu3DuANOEvTqb8PIl0kXNx++WkAlN7PhMh1QyU2MPCwfCzHFxIS0o5WM19LRtIj4G2lXMyL+BuZw dSwqEZkqhaCLwvad6wRRZE/JUQk9lhSogij092soeD/utxa3lWn3L4O3tXb2K742wq/mKlBukyPE EhQoj8Zdk6nWqF2znkmMEs9/z52XHaNQL7fVMPuY2TUoDhOV/wt1m7eTVdRWGza/gu0GmkfcTkD+ bntS6uVMiFzRcnfh8+sqIP9+1jxUNfMeGPkSE1OjWg5bK8BXTJoJ7673Hx8mhH688mW+vgCtRdea ol9Mih2u8RX/OExVBpTSabkCrUVVhYHcpLcYc31oacJtMikxJ4nmYYz1helJ89AEmtgV6RRleH8C inSWVTOwMKIVjp8NeTqilg1M+wS2oqov+dswFx/koVUA9cVAynfAT+eH9sdJFuFasXE4YQms3Bp4 XJ8HKLBy6wtLkyxCN1X6MAioll3xZ6BhhjxAkEJO7hF0yQWgKufoP8kVbgtgoggoEGH/nft6S+cK n07UK02T1xnpcZLdp7q66HZ7U/DbyVB8aLNLr4YEIENyK28s7r5o5d7t02IWOKTEs+9+Xr/dUzXD UJBHRNh521EAviuv30ye88UM4LA/fU2HHQSYAY3batb/S7QJ6Izg/XILyvZeLbc4zBYFN1m119ub kG5mQ2CuDns+m3S1DeXKApW3JG2omWHago/HYozfRUqWRT5fv9btRBE4OprPWyfvo+NurorrGkOq gZFl11pcb7e1uF7NyCrOM83XQlaxtRP5cSDLAtk6NtBUyCqN5vtsMgRmGu9tOgSWMq1qlU0la73Z Zd0Pl9/NgniJR5nuoyx0Wl1bcu9ndFpFp2dC0W5VrFsSS4KnHhMyLtAzrGGXCOP1tkt5sz1W/Dj1 psNZvYnwzDrPPnUp3rOddcWlOLoSoJNivP5ZUoyziX1Bm4415VbiH8fJwP6DPmWZa+yhzh5cTVlf kE18pPaJ9Z6WryV9XEfu5czleMWk6MpgqTe8I2cxgGlJ2lAwrKFLrYrLURVeX2/Pnd7OCHCaDrVi 4N+6xNq7HQXnxZyCQxI5lNlVoH0TjKXGVpcdGubYu9LWkj+bzaUazXwlALJRjg2mBawtt3U+s79c 8HPztMNUK/Bz87TvJlOtjgshRfgz7RmVPYJNrFg5GkOt2hH2TzJledphXupKiIut7fj1pMYume+5 kv1hl5RB8vfSgPc+eg/zOWz76ANB36RTvpZ+uBmmcGEDA8VlmRca7rZd9O1MGaApsI/FPQHEKlCC zHpf6sBlBOkoJeYxinBAVJldhuymt2HhIq0p0Y7kudJACoudJMvdzMUrY6h4wIqUMYiulP0ZlNra +fhBwxWUJa8obwKaLE6zobeiyWK1Y7gRpqgpt7s0S9W6fMNJGeOIVga0Y0lAWebWRJ8PE86GbXT6 q1mrtZvh7Vut42bf5sVRYfH0MtCCiow3C2AYcmRUCABDATNMxBXG0prAVwNAk6Sv+bunMxHXWOPm bJDKa814MBikUsowT1uKBkygORWvRUdQUimfZgIcMWUVIl38gF4nhnjJXE7WaOMk1mrJ8GnasLZ6 LhtUPeNnZ+Qnls7l5EL+TozNmLMEGE+/WumFpmw/rcKOfuIuLcW7bX3AF9vVn+t5/KGjfCDT1KPz p015wOGLrZTcX8x4PI4vrIB4oLV0CAYLDlsu+Ga2J7WTcFk64ZlGgLib1LGjpmMshdTnqtDCELuw 87LtrhsaE2haa0V3fZeudLct5iFhOUgKakHn90a0PKoktnlfrGjxbtlvnA+Mb/Xyw90YycdxfEt+ lwpzG+nlhx9IYI+TLo06q07MNnytSmZfbstq9btou5LZ7cx8WzfjjnRpFj7ipVv9+umsDZMSW564 Tn9/8zPS3xfbypfjgPlK+fJ2Qkj1ztnNWnAP3x28mzG/tOUXRbjk7SMs/8Fq8Kbw9qzqntusz924 b680IFkcW1v+1Wyz7Hkz0zJWdk55AS3drGz3db8VCsYZ2XBWsc3AdbnL6rvANDKK6Jelq+nhO5tO 2tPJAsyLiu7ddkX35UQdIQRKsISgiadjKw7aOo724dBftJGmM6XeGyKL4KXe6xNdIAcORhP9fjZT P2gbrW4nwtuo9x521XuH4guCuKkKNjczkqOmbL6iCdZqhD1QLKJgrd38buBAxiPGMBiLEVFa1yHb 25kqmHWGDjAKAPYqkxdayittQ8nTWXuy6Xa+mbQndfCMixQxCNuI+0ORBLbWyoRf9/IKZZedZc3A MiJlq639acDuGuUSxs3OZSq6Rp5BuKtMRTM16YLNI6VB5aImXY/Y32ZTTklbyhUscxxscEzwmLtg +42aYaDEmkhFwUCJ1YlOOcEvpYXCEGwjfVQzGgMJGfa1Pzw9MhtxRZ/gF1d2B4FEhT10n+9GmXNB zgwK9pu7x2wXpSzL/BTq0xdchRekS82GvSYDxwc6cDyISq3D6Q/bhJ0bAgUXppK+kja+nuz1y16z uITuq2TDbF4SMwc6ej5RDOpgLZS9mhXKmjd4OZtesjrQBquARaOpUFJZOUj320BlM7fZ2sOs/5o8 KxCiV+I0HaxCryQr2gMtvZK2c/N2sidD0j+m5tqtSno50xIw64rvsh5+So6WNiF15GMwjIp0WpXE dDbhgJViTW20Z02jlr2bNUu8DTRcq6NyNm+JeEq4JraGbkikhbIykqBiP4XXJpIzil3soZVo3WYt fpoMFRhn2KAcpgqiNbRFu55Y7iFQKhsJjWEDDcgDDO2nl0qbr+9zVmmLWbGVXxkC+YmqMmZsR4m0 hpLR/20KvV/O9I7EeS2s7gTsV4/3t2M0z3I5kB1uRaQz0aFMXRZo16rCN+NgALT2zuH8yUyks6nk /30MJaC7ZCYYaVQh9FHdICgl6EBnluWdJM2FwmMh9FFaqpzvNi8xCIVbDVX2QJn/xl3oh46qRB79 57wwDWsxl8AlXa2Yi62P5fnAmNUgqVEFdAwOaOpaNPYeBRMYY9aBqajZ4F3R0QyKdae11+liVuP1 SP0PZQMr09EEU9FaUs0WZCHWEikPPcBa1Mpa1iss1MUpGaUyA0oUiepsJoQ55td0VPnIhVBAAhJI SGdzosXiW0o9ifLVrKeaZFHcokqJsbNB/e8ky3rqf5MsGxTNErZee4r1E1b2GkrATxmdLEOyTp01 pE7oM882XCh/HQfuv4PUSf40jpJkIftUQHci82UbmR/myPwp0dniEnCoZdIyq0RXlQPZxFZ2uCRK 8SuzwEaxs9npBtwS6Xuy9X1OlV/mDeyPszIY1VUtxEYVLV0yiknE+JgFGQsaAQljfPdW8pguVT+u QQtouzjKjM6yblN9mJRDE8e1pdLfBhNezfYrBC43BZpEKwUNCiiY83VcFPi0rHZLzI2XgrpltdM+ VisFvZg0AoyxNH+DRmijC8x4EPLQ9YY4RbCK77KFlPl6nH1Zc92sYUcPOxRSKwVdTdK3av7T5C3Q +hc2lutMqSPniXG2IlEszRmeX4Gu07bF/kOw+Vy74vT3n0/GOXybDOp3dZSR8qa7NCRg6IlmxrgJ WLeWNKu8d8XWqwm5NrbBoGG7A7hsUdP1NyifKU43Q7E1c7lZpG+m6gZ+NSm2DlOhLbfDLIFhlfco YN1m5sPLvLjKrHeewMZpRf+vZgPj1jJLK1q0xjFhS4hRZadYhblo0TacMbIkoCXE8FMu1N16Bp70 dVoM8TYrfDambpDRyvQyLCkz7ohWKNsHw9cvYBe0YYPT65Hv26ncVPJ0phui9rQlIJldkG9+/mw5 vXZUnMUBb/hsGTcwpESTnLKBoTq9DmYtJbnLVPbzPrnLG4qzyIFOHb8BrSO34/GxbFCYbY1b7hco WIj0su9lC9ObLilQRQ7ipMH6dMzc5PDStVnyvjAcx9Z53o98W/qzysi3MXwBoJIIxnib2qPZTWk1 YgW6PdFnw4qDsuXx04A6SEa7Ot1P9xFVlzkEezeMGkLRlgpzd8sDP4xLWTCP67nSW+NiTM71acUV XQmxYqo+I1whxnNd6+l+vS0A9m7Q03XicSwTS+n0dL/f1tN9NdH7j4aK6hdB/6bNN9PTdW0PwWG7 Z/3NbFGVsYx8+DiFrz7BB9c08DS5I5O+nrFFY6XGX08kvlKTFBpmZstGF8dqD6XKzb10qXK3FP1m ewjpzfYQ0mGmvGMra+jzYQgJHomqqcfikaIm+C8WllhktlZU+5ViMxyF858Ma8Z3TelBaBsMh5SZ lkOCCEWztYExWnhgNBNJIEA0W/uqR1IgQFg6T5/LThe6jz2XnS6VU/3jRLnTGVbcKNo61S991QMp MOg3BqwURJ4cJfEo6J3UiuqkcAIVJ4L2i2xntIwcXFT9Xd2J9mTasrZU3lxjKZqJfHPLpTbOu5ls v0ls04GBW6L6UEW1v83aj5dhScpR1c7Sm3N8DxXorvqSObcukKM3R0ueENZpqHoEWaA/BCZbKDBK 4q+nqNqBK+PZ63QluXOsbeBK9kbt0JXsjeqVlEVSFaMNluYlS8ousHKqh+CXpQJRRRonsuaa9rCV yF5ngK0E9sXWe6SuhuJgYV2xZ1KEbzxffI4aMRWHjYAzdIeJuOh4ofAySGrFQoTxtDZe1qrTalUq a9U5rbqsVX9MCbltV8VCd72rOHhLxFqIiXViLc+3uZLPB9b+qvp3Tap/W0NSueLauxn0NLwrVt6V ZoMrurwrTeeYyrvSVPAd4mkq0SGpIp5mWEguPHRrmAZZgZ6ONnDKpodECTVnZLpsrJpSdJV4Aa6d Tt+yVmuRsMwoMWUTVVtE+tNkNbVvS7LGAmAA4ZGNk543V5Ovttpc/ZLMQDHmBxjlMVs6Wr+agRpE cdczUO9mqLbpdN/MtOZ9RZYDvQJQw0U28VAmqAxdLdCN1vdpSkSAMIahuwgaER3eQgEv+cjURSEI qdos6vOBKyngztbcblhFhQqe0YwHVLgbnsqApZIxZzYomErGnOkODFhSJ1C1rNXmjbKsU1gkIY1i 03gZO80ah2EoD4K7ka2n7RQkzLQZ0y1Yfba9YPW4S/LFFF1P94gQ8zheYlnrYfbLkO0t1hT/P952 +dSm6kh3XHY0VV+NqxVDyoN1LPOm6s1ktWII1QX+OEoGlq7qsqur+sNMrL0RIobRXfgp5xiFxRRa UGSuv9AdVWDEAIPefKNTvJsUY0IgFb2y2sgrLhdjsdabzh6AEK6pEHGp1Ci63q1sRmqB/sVsusCa tLGZMfEq6Xn1EQGMZaV4Q/8vJ8MH0WcmX2IKF8oS7+wBvSzf23gSN1vY7Nhq4fjNbLhg4IMvl9pm ba/9u9l2lbaoZyzjoG1UFZLfzSaK+XJFsGrbXGQ/8o8iT3ULsxKPb1Z4Q6IhyTG7aHg7Wb3oXAyP WVpRmhJQyiSOcNxZcdyWeTxMatqh+aq/THZW6ORZxSwVmbhEmdvY+BIpVNTAc8pHKil7ST653iaf /J+ZPk5T4LgjklsM+kNdoZnv69kiqeyZOEhH+77epn0PvgxwTuVMeQEB9GdP94qJBbcy4/OZPkKk a6ktBL4VFTYvEjkpJ9LgK6xwFVjKU1jhTjHl8s6PviF+dEsF0tXi7Gez1KENbQ4b5gD3VDKkyFJ4 3TmFLV53OwVvZ7lBzKyaUXKDkKkqF2JuClSKfp0b/GZgBigsDqO5wb34wumb/Y9tdYX3RF2BDGKX VVOhVpWfz1ZNeTqDW8asXGLaWqX5r2sR5+NsE5Wvbr6vNBYFheTCJ/UPtUefb0//8N+HpB49OhsJ bOx2bX6YYFKTouWdfUgJMNHy9YjN99tlluvtMsu7mVjAhm7tesTGbk9bq118Oou+gNVlTLzOb5UK ljr/x5RP1/5JgoS069rTD83zOwih6JMJ/GJbXlEik2PebvvgktfPty3ruhsp7izrajvbud6mkM5M SzfnODOtkNZDi51piV82W6blaG3jNCu9XKoSP4So5JzA7cwtZ3mE5Ry2LWdZfSrIfhi3mpvOJ4jU mm0CqNqUKVHbMll5BtQa3jnuQq7lrLhdv3jZGrGkfljszu85g4+8rTX3k5sPHsJvtnc+vezeXyl2 Ndbx0Nley9dejW9IB6XpCCXekFeej6ZAlIL6dzRhleWdnhXU/kig9nIJQR5yeecac33cv/RrRNK+ 5y0+6raLLt5jz/H982ThL7wsEXLpBPM/zBdtzxvw94sDWeNzJSI0NlUv92z/x5BjrURYbrY1SN// LA3S5/viPvg8Atz2v4fHzW2jEuRz3nXnz/oS1vr8D5UeDzkcS2sLp5XObI3QaaUzKwpDhULV+tj3 w4DXfROO9c6hY9/kFt4Qjj0ToD5x7A+7OPZfDBseIThGR5VQU3QphI2aIrpsdFajTEFyEv2qTzaI CaayuTWSKclOhPp6W4R6INkDlLX2xYtZPtvaF4PSMxrkgZKNuinnq5kirM/M1orKdKOFvprxv6xh Yuddp2xYawDIFjyT+D1XBpmgLPRtXOCar15O0RpNPgxUFPznnrMvPvoEVf6teZW//j8vFK5KCmVu ZHN0cmVhbQplbmRvYmoKNCAwIG9iagoxMTg4OQplbmRvYmoKMSAwIG9iago8PCAvVHlwZSAvUGFn ZSAvUGFyZW50IDEyIDAgUiAvUmVzb3VyY2VzIDMgMCBSIC9Db250ZW50cyAyIDAgUiAvTWVkaWFC b3gKWzAgMCA2MTIgNzkyXSA+PgplbmRvYmoKMyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1Rl eHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxCjUgMCBSID4+ IC9Gb250IDw8IC9GMS4xIDcgMCBSIC9GMi4wIDEwIDAgUiAvRjMuMCAxMSAwIFIgPj4gL1hPYmpl Y3QKPDwgL0ltMSA4IDAgUiA+PiA+PgplbmRvYmoKOCAwIG9iago8PCAvTGVuZ3RoIDkgMCBSIC9U eXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggMzQ1IC9IZWlnaHQKNzAgL0NvbG9y U3BhY2UgNSAwIFIgL0ludGVycG9sYXRlIHRydWUgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVy Ci9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNqkvXd4VFeWLyrAcbrnu9+bf+57796Z+WbuTE+37e5p N27bgHKoKuVEdsA2ziAhlConSWRMNBhjTLAxBrtJCpVzkgCRRI5CASGEhHLlU/uttU9VqSTovuP7 3OdzG1E6tc/ea/3Wb8UTIgxDgoQwgYAvRPwB4vaQgUFy9xaxNg1s23ThQ4k9W2RLF9tSJdZkeqWL /8sXfFhmgV9MFdhTq5ypAkeyyJYqN3PhUlg4Ykua1JYmsafBB+ASWdIltgy4+La0aieP37qg7OxH C3VLX/9mwf+oy3lmRcr0srRpKxKnlc2ZtnLWtJVvzFgxBy74SdzKBLjg589/Pid7a8kwCRD6T4hE /2HwCsFz+sdI34/nt8g0hbA2uZUjN2cojWkb9AvveU4FyCj7Mfx4+N/wR7hbAP8YYv9F8I/Ejz+H i/0k/asgvSJfhR/y0Su8lMhv+ujHQuEfMuzP6d8z9KI3x/t78WLYb6E3JYHoRT8Z+cZQZLVMeOWh yOd8hAlG9wE/w0RXG11eIHxnPwnC13kJvXP0duyqgvTfMT8Of2kw8kXhX2G3K/JEweiTEia8Vwz9 DPwwRDzE2/zomFw9X2LJFNmTxbZkuTVDpsnS3PvKS8YCxN8ZOrdZ97lSVygzZ0rM2RJrjtDI2XVm hZt00e+kSwjhNXFkJPx0E4ceObvYE/zbV/Q+E7sa/gs/KEiQ3R/4YTAsGyES8434+Ezkz0z4KPEX J84rcoqBAN4NrvAdQhPLCwvw5GVNHEf0ihzrxAeivxTd/FDk59EtAgVvvPOVRDNXZMnhWzkSS4bM gnqKxwPyhncGHBjzkr6rQ9bDrRtXNS6VquYJdDkiK1dsz6BQkCqz/wIciKBBKvwuIIDAno6QAsdN v1pigrtxQB+F5lQWAQAZJDaOyJHJd+aWO4sXHOO8vPY//6Hyd79a+afpJW9MX5k4vSxpWhmqPHtR KEj4hVDgHSe9h89vkmnzo1CgMKav0y++6wUoGJvY3on9D5DIDycdOmEPnZkiY9EPRQ89shRcA/vD 4NRTnoQGkdUGIhcTKwxToCAUq+mhqbgUo4xP+UAgupiwqgL++CNQMEkYJ+PJxLdOwNEk7XsSCqJA waoPCwXu5kdHFaq5CAU2FBI4DoSCjh1eMhog3s7Qmc36j5X6XJmZK7ZkSqxZESi4PwEFk/d88n/G 4PLT/3bywUVW/sSHon+EbQ9MwC8TVc+YzYlRxlgoiH4s5mgYCgKBUOz3TojBlH+YKdfEZ56CFVMk i0x5rgkosGbzQUNjoIBQ2+Mmo0PkbmPbl+sa3qlpKqg1FCrMuTJrrtSeCYZbZE0RmtNAkX8RDoDu Ax/Ag6bfCNgOZyrGc0+U2lKAEgiNqVJHltjG45vS5Q4u3L/SnvepcV7C9tn/7bN/fvGzl/6u9E3A gRkVc6ZVvAlX3MpZcSvnICAAPYhc/3UoCBGvh3T/dH69TJsLS5Jas0AOpeb01YbFd7xnvcQbjNnJ iNLFmuwpm8zECn+MXQjECElEr1EewgI8SaGYCbgOTdbf0NPOMWJlYjU7yiUCYcl/ihhPUQom9BQ0 eooterpQhREpZg9C5Al7NFlco2wqskjQ95ZHRxTqIgoFaCPkliypJkfdud1LBgJkuJM4NxnfVxh5 aE1AfmwcoTH969MABQ+mmL+YA2KettonVx6IIHms2kZQl4lCJUOvGBY3Fd6ncolghG5Fdgf+30s5 3pR9jFX/WL7HkKdvPjPxgdj7hGJhOcwqI/DCPB3WcEEDTXe+kmmKQBmF1rQIdU+mpM3vIWP95N53 zlr5saJVpmypPlFuTgcdAVUVGJNF5kSk8TaO2Mr9RWgAR8x3IB9A5DFnyoDmURMgsidKHaliS4rU zgEQEDmy4arQJilOL/rU9Na/KV7+1af/+n9VzH5xecK0ZQnPlKfElb4ZBzhQ/gbgAGo9IkDy/xkU eEn3z+fCUACGBnYDHJNVxsW3vee9yNamqBgzlWXFcIDghB2PhYXAlJOdfNxPIDlrKyMyMJlDxroS sQoVmKy2cPRR6xOYWMkT9HKyOjBTaHOsfQ/9FUQKTXxjYIIkxOxN1OSFoo8/8bsxUIACOdzSf6hG nQ+CAUIlsYDbmCvV5KmRFfQFyEAncQAUyEzgnCYiKQXeaAAoWOkhD/+a/D+FEkxeA4l6Q3AxE95Z jNPHxLAmZuopTGVBU7cmOOF2TWKDk9nUU09nkrF4mlGgv8VMcoWecHnYbQ9MOd8pnM1LBpvu7EQf 2cIV2pKQ7VMoCMI/xD1Abh9sXiU/WVRrywWvTepKFlmTQP3BI6DmOwWJgS1DYM74pVAArAChwJwN OMC6BnAH9uewDPaIEQ3suULX/Pfri/9J9OqLJa/O+Hzm8yviZ6xInF6ePL0yOa5sTlw5XKDyyXiV wRVBgF8MBb1Hz26Ua/JxhTYeuD9AeFYZF972XvBSDvBUy/ik5xil+sGokIdiDQ0zVfFjVhLjgMNn 3ISMUdtBf5deMeydCU0hrszTFfwJC+Kn9/SGrdIUGzThekQcnNDkyMNUvuGPbCATDK88uhj22aPP FQhNtV+TfNjol/rIwOn+72rUlP9bkTHKzYVSdaG64ysv6Q+Qwa5Q8ybDB2CPRPYElEnwIg3p37RU eMnjyS48y8MDT+DAJOR5CjCGdSoK2rGb5o+1+/97zsTQvWMmsCIUw5fYIMATYhCJQU1lTVOdkUm7 yEw4JhHIihzHxNqivDT2n0Dk0WDnB9W3d4IKgD6KrAkAAjKMAaYGiR8IA/gFiuPFq2zZ1ebZ1fak clsC35YC+y8BJm9JAFYA+oJQYMv4pbECdAcAPcDXs2RiiADJHhdvZU8XOJIF1kSZiye0Zwlc85eq 5/0v2R9eXP7n51emPVOWFFcaH1cWH7cyHplARVJceSJeYShIjF6/EArgYfuOtm6RafPRbbFzYCUs FNzxtAUmc6q/BQVTcTtCL5lYoGYm2c0YMQjiKTOs9aSn4w5zyJi4X8SdfOKgJ7SACZ/4k6sNa0dU qgMTODCBAJPYyERAIMRMZiB+ujxvVCIjyh79GPtFgalEd3I4a/JOMqxAslAgj0KBqViqLo5AwXBX 6Mwm/adSE0/gSITDklo5Ej1nT3OVH6AgGBt0jbrkT0LB05jYFJYTDtJOeV7/JOCNKGboqfcJbx9D A4kTXCXsa8RCAZlCAwKTzy4mEkhX8tfFL9ZdZaYGuELM013XyC75yDBAgQL4GNrlBJoLwFiNhwxf HbKvOfnWKhNQ5Xhhc3Klg1vtyhU4eOBHwCdloK12jO2DKa+mXtsvzCBgnBAjh/Zkyigyol4GnK+i mVtpSBI4Cz9QF/2T+KUXlr8yoyQ+bkUKqnZlQlwVMIHZqOmVqRQEEqmDMIt1E+LKUuECT+EXQkH/ z2e3goOA67HjQ4Gfstaw+N741dBEmJ2Z4rVFjCkNrIUCT/ztU7BiMn+exNZi0T4UGz1gpqgPE4MG T3ByFgoY5skgXjCWUsbEB2JpQMyvTA5Hs59hyCQtC8f/Y81ohFdM2mHmiQeZooUT3+4jo6f7fqxR FVIoABcyM8IKvqaxgtEu5sImXYnYWCiwAXPjSq08mY73bXOFn/SH2Ugoij/eKBQ8ReMnhzpjNjYS MiXME/FDJgYK8CvAYvpo6GBKlCAYdiGjYd4Jm/60lATzJB+b4hFMgtBJNCY2zskEo7mh2GhwaErW gHlq9sSLrOArhRp2PmMCCqzpw6TjYMtaRUNOLfzRnlBpmyNszi83ZwtsGMxBVmBPAm4GDjUYUAlG 9n4JFFgy4KARfGyJIjtgO96EOoYZ7D3B45CdWbSkMf9/yV96oeR301e8PgPdAVDt2XEVs+Iq4d/x SAlQ2SkOlL8RV/46RQOAgnS4wlBQPue/CAUe0vfTuS0SXRgKMHhoTlmrfzsCBaxcjYXIMHBUH174 H+C6BslAiAwSTDh6Y1glM1XcGdZ9QLEJxXqmoah2Axy5fcTNal9YcydJMNpZmrfy+sgYLABUAxAM GDVdTCAYdQmj4vcEFExATehJe4RrCNCbe/Hm+JhghUO4JP8T3J6NUgZiQqneWG9oInk3mYGHMAY7 BhoNa/bhv+EaozkaLxuB8ZKxlr6jNU3zaawgHWMFlhypuoCygigUrBAbiwEKwHzILTy5jkOh4FEk tYe7RJcNp4NEIvJFowHiDkQiP0965dTEM7ExF3ajYmL77M1RDIL09GGXPGTUQ7yBibQge5oBH174 +RjB8FP0CLt4wTCMx8ZzApGVhHfJi5fbG01WTjqFQGxGMjQlJDs5g0wjFeAFj9EzhW0cDJLRIF12 VDA8ZCACBVyxJYnFAVDM28SwRv1+jb5AYeGgF+DkVFm5wNhRZ8O1BKmguRhes2aKfmHYkGUFUnOa lLobGB9wpE2wBVu2wDnv/abif1W8NuOz3z5b8TqqOSo7XLMwOBBGANYFwFqCaStfhwuhAL0DYAXp 08tS0I+oiJ++Mh6gIGvL8qGIw/W0ZKJ7nPQcOrdWosumeQ2EI0AqYAUdnosgPAyey2Mf6R0mtzoZ 15XRpivDjZeHGq6PabuDLUPkNo1ojfmJjy3GIKEgvUCQQsEgq5BwE884GRslo24USzd8KUN8IZQ9 AKKRIdLVHjhzbdjR774VJCMM5YEMC9ohuIWPFQ9QnDHS10dudASbb3o118abbvvMnaEzj8jNMXLf g5I54iPjYdGKMXzBEMMyU1+QUlPKUQmJhiAY+MVx0veIXO8kp657TFfGtDfHLd2Bs8Pkrgdl3u+L mCe/H1aCIWUPZl7gF0FQR0NkiGHG8ZGDYfsUNVSsjngR64bHSfcDcvaWx3jTrb/tsdzzn+4l12Dz KabB08Etxuw9f1E0LFBa84UWFDO5lRPJIMAmD99nzm7WLZMacwUY1EpXgoOgTtt3qspDHgaxAMLn wRqYsRHyoDdwtt1jvOHRXhvXdoRcvaRtjPSMk8FxMu5j1Secs2eNsp9dtTsYDESwIsiEN2csNO7F 54Xf7e0jV+76HLc8hhvj+ltu+31yfYQMuonPh2lXH6v7IYKfH8ezAPBx+8lICCM/fvgGFq/h5yOI 4ajsHjIECOxHHAb0ACjGXeoJnrsxZr7mNt70ujqCF0fwcAHWQH/9DD3TgN8btQ4sBOA+B9noTTA0 EfWFPfHAzo+Snh5y6bbPetWtvu7FDRkg1+HEYSVu/FLvCOlRt++SqwqVlmy5NU1gTJZST7nh0Vq5 huYNzZlCc4bUjmSMxQG2loDWFEWhIPMX5xPNqXIHEINUoSkJDLHQmSK0plBikClxLPxIteifJa+8 UDbzmYrEuNI3aJrg9Ri7nxgJD4bLiug1a1oZ/SuECJpHwBjC7Onls5/7bHbOtlJgBaFQ6G9Bwdn1 CAXosKSLzQgFqw2Lb3tbqCL0drjP6K59u9vC32z4ZLX6LeWJuXCtaXpnu2n5vmaF6vqem6OngFrQ Q/dG0TsQQLsZDIGEjD0Yv32q19Q6bLowZLo4YLzYY+4YaXOTR49JZ3PXiX0O5QbNJ6uOfqg5s5cy Da8v4GWPMoB2YcBDerr8F2x3j524uGu3TbxRs3R104K6hnmrG95d2/jRTkvl0bbNLT0nHpCrHjxf 4AmeqIMY8NEqJybATNABtOwMih8q9UPSde6R/ofWL3ZayzfqPljd+DZc6xo/3KItOeBSnmz7+qb7 HAj8SAiF1h0avN3fdnWw+cwjw/nHjguPbFd6DEO+myCWIKUMW97DimsAjSwgxhAZ6CbX1TcP7m9R fmkuWdf0bt2JBatOvr1R/cluh+Cn8xtbHzYMkrtDpG+E9DU/Pq5oWiQ354INAqMjt2ZINVkRKBi8 z5zZrPtUZsaTklqSFJYMpT5rlwvO9x54tcOkr224peHSwQPOtTsMJesa31rVuLC2cdE61fvwaIfP rnf2HH9Ibo+j8gJJoJl9tl4r6EMNoqjlY50han59xDdCHo+R3nvMeUP7D/tcq7abK+FuqxoWra5/ a13jB18aqvc6NljvqToCqFmwSIYMe4K9bb22S0O2833mywP2a49tt/tbgqEhQmuHOgfvnO0xXR2x nn+kO/tQe3341PWh1hHSP0wedQavWduPHmxetd1Quk69pKZhcW3Te1vMK/Y7Fcab+7v850ZJLzK3 cKWHn+5xJHoA/7DPgtwjAKjopgjQ7m413jy4167Yol++VvXuKtViuL7QL91j45+88OWlARMg5Bjp HyT3Gtq3yVSFMmMWWmTAAUsaaP2m8wvEhnRM88Gem9Ajk9C6ILa2kAUEMYsGSAm4vxQKaBYyA+sH 7Bz4b74lQebMEFo4Qtd8wIF/kbz+YunrccvfQMtehfY9XExYFs4ORGuK2IKiGeE0IusUzMJrRfx0 9CDCUJC7fQVAAcMwf63acJwMHGrdLNNliu1zJDbqKFky6kwLr4esgKVN13etOfE+sFa5rkCgyRIa spXWQpmpQGrMlxjy+E0ccX3WFvP7R87WdgXOgHYHqE0PhOPNgQAZd5M+2+2jipPvidXFkqYceUOe 4i/F37r47cR09Oa6WnVxdX2yzMxVauc2XfoWOD+Dlh3JpJt4RsmjDnLmxI0NG/XvKBoLRA1Zwkae WMeTmzLlpmyZIVdmAG+6QNKYD/fZbv7U1LGvj9ykVjsa0qc8gIm4lFRBGcrSR0j3mf6GHdZKWcMC ubYIwVDLkRoywQrgw6qyxWqOUpdfp37r2LWt98nFMdI9RO7sbBJJfy6u1c1VqItq6+dvOLLk3L0T QeTkbGALrGmAir0XlO4euXTizq41pqViTYFQnSXSZMp1eUpDgUKfK9XyJNp0mSpzdcP8Q6cV5/pV j8l15/BBuXq+1JRFhSSRQkEOTSayYcNTm/UfI4m1J9TY0xRGjljF291a8ZhcvRVs/v7c6rXGj4Qn C8SN2TINV6zjigx5UvM8qb5Aps2XqbKlJ3O3GZdZuw49Ih1eNNlsmIYGfBgvE8TAIKUFDF2/302G HpKbDbd3rTW+L1TniPW5An2WWI/brjTmyPVZMnWOVJMn0xStM31o6Pqun9yC47v56NSa45/KGxcq NAsk9UWyE4VbVMvuuy/D+j3kUeO5vXXHlyjq85UNBXWqecpji/adkT0gZ8wDP2yxlinVi2DxUi0X XSQzj6/jSgxZUjVX2Zi/Vf+Z+e53wADdyPMD/tDk4CEL/UHgYUCNhgG+bnkcP19Yv07ztqwpV67N lOl4oOawbJmGJ1dnYZrmZM5a9YJ9p0XXfZZH5HJ992aJKl9pywO/DKwhmmwrV+ZMw5ieCc203JIF Ukr5fNokKJhAg1+cQYBTpvWEvGpjGqKBg1OhT5S3Ln6vsehfZH94oeTP00uSplUkIw6Amlckg+6z NYQRHIhCAeLAjNJUuGKg4A34AEJBOQJITKzgb0DB4JHWbTJtNuKADbNUsEiFpajZe2i3S6g4Ob/O OFds4FSbUmQtuXw7t8qcChffyhHaeRIH7FiKWJ+iaMreaSw929vkQSPuZTlyECk5eN/9tns/iRuL heY0kSW+1pFeY8zcee7972+Wixo5Ql28zJEgdsZL9Tmam3sBTILokGK9NxgaS8fhL3SfyTW5Ih3N ndlxx2QOLmKpOZXekCO1AWJniHRJcgNX3lC4yya6MtwyRkaBsgbZ0AFYCSTrDEo7IhVQ00d95NpP rZslR+cq9PlCI2sFUpD1UaCW2PBcxI4kTC0ZM8T1OdtNKy66T3YQ69euCqUxW2hKEJmT4UFWH88/ 3f0D0FfgGT7krGz6YBjYVPP9kxv1JVUncyu16AaiJ2iHO/NA2DD4b0/DeJElXqFPk57grjrxLlh/ h+cbUC5YTwwU5NGwIcj/WBetNlSYs/C3rClSkB9D1teXVjSPHvzSWgYqKdBzYVukDrAySRJ7isCR xYfNsWbi11lTgUWgUhyfu7957c2xs+iMMzQ1ADyajf2yDg4zHkKT+uDGWPMOi4B/Il9k5omb04Su VJEzHbaFltPQzJcF9iep2hwvBw06Oe+ni5tAp66N6JXqBWBDBSYsgqqx8b4wv9cdOA8n6yHdJy5s rdMWivUA/rh+wJOdFz851lsnVReLNNmAgUog4eZEgTUevhFzahbg6kkgJApNpuJ48fctNfdJmwcP NxQlYEwg4pmiBQF2dFd759uN6o8UjflyQ5rIOFtkmSN1oOaCCEnN6XJzRp0jq8bMkWiTFZrcdaqP bMPfn+hdA1gnNPDA9MN2oTyAjIGbZk8DGg8/gQshwkwrAy0Z4VQgXsn0Sv3FmUS6h/BFSAPsWWw1 kdBVtKQx/5+lr7648rW4ZeALJE6vTAMcmFGVGocgkDyjNDm2diiaNGT/agaFCBpCxGs6uAnAJSrh Y2+ysYK/CQVgvAYACuS0B4HtpxA4MH5YZ8lXaPMAIuSWHLGdA+cidHEqrUlwRiJXKt+RWg2Uxp4h dGSIbKmYkK3PWNf0tq3jECVdI1SwGD+D4RrT7Z8U2oXgaoHwyABO9ckSQzpcQm3iqpYMmSNJYE2U qHNVV3YDbvipj/mY3P753EbwR2Sgd+Y0sYsmW+F0aDyHXumwKqmTxweHy8kDABdaEkGQJE1Z69Uf uh4cG8dbjTMhbyS75weZoRmTgc7g2W8sIvmJuWvt8+BYQUlp0CaDjZpigAge05EEz1hlQZ2SmNKk Tbxtjvednl3bznwoMMLZcQQ2rsKau1pV1NyzHxxS/0QiYXSUtGuu7lzTsBisv9yZLXRyy60pVbZU vo0WqVqSQQAwWePkiBHcEmssKWvMRSC6G1wL4Z5ANdFGWJMVFh5mEO7toYXH7i6MFXwORhkWCdso MyeBp7nKVfCF423+CS7fwMX7u7BcTWiJB/kEzYUzgi+SOjP45iSBKUVuz4JfV6jmb9WvaHus95Be PwAvKFGQZdduGh/GYvvz/Y0bVB8r9XOljrxqW/pKa2KFJZ5vx7oXlF6ss00XO1Lg61AAzDy5sUD4 c9axi8rWsb24QidWzOJhGZI3mN/qZdp86Gx2Hz+/CYyy3JZS66RG1sAFZJPogYxxwezKLTw4wbDZ hZXTCn+JM0niiAeHWmHk1WoKdprLOpkLHgwdRALPVJj9QQ9s0YPA1R8uKOv0xeKm9DorTwmSacU6 XoAUgSUVU/+wKgtWaUpNHFgAcpvGojrDW6ucC8ALALOCWG0N5wdltkwRHL0NQ/pselFCY/sT7sD/ PyiQ0lIEgTlD4soV2nL4znkfqIv+Vfa7Z5e9NH0lVg5Mq06NK4mfthL7C6aXJVEcSJ7AgUlQkBjB geiFjQlxpbMRCla8AVBQsLN8iK2H+StQAP71kbNbFOpCGcIdPiDfgfVOwIWUAIZmREWwBUJrGgCX zJGFygLCYAUzlwEaQQEBFAcONxPYV83xxZbOQ+MoY+N+DO8EgIobbxxS6OajqbXCbVNkNjDrHEzI Yi1HosCYCPtfo1ukvgwy3wsWcIzcP3p2k/LE3BpTTrUxge9IFjhT+DYs5IBPYnU0+G5mPFP4Cd+Y LGNF3ZEIYiMwxst1OWub3jvVc4JGMMYmAs4h8IpHu8j5vS0y6YlC9ImMKeCgVdviRdQG4Q3NaLXF KO2pmLBzZAHQAQdQmtOVBs56R/G60/MrTWnVTg7fngmEWanKc/Xu9WBcGrfXj05NF3pVTW8B+Yfd g/tXgVY2o57CNioAtUDNLVy6fp4ArI9jjtA6C5iV0pQJninInsSeCbpG7fhUKNik/1yiLwAVUzrS 5LYkgTlBCApuADOXI3Vyha50AGqgavC9AF/saQrMYLtTADNFDm6lORl+FzQOaPN247IbbpOb9GN2 IMQG4OG8BsdJT9uQYW3DUrmqAIhxhSlB3MITt3AAWGCfAXzw19kqWQtY7VT4Xr4RQQbIUl1T1jbX Ypk9b6UlTYBakyY2Jm2xLekJtPnJYy/paby8o8aQh8s2p4EsYZbEzgN+JTEl0zacNFBPysPR+CIz t3GENiAesyXOVIQIQwps+I+t6x6Te5gQCbJ+AkPjA2MPya2fzm2SqQsqtfEgZrBFImM8cAyli8uW z1XDtluzJfZcsQWYEg+fxcqpseahV+jI5hvT4AKeCVAgdaDR33X9c6EhUwb4gKVHSYCxIOcg+TRI SFsGwmgQ9RH+D4hButKVWW1IFTjngV/wj6LfPb/8ty/yZ8ct/zP6BeUp0ytT4kpms52GM6J8oHzO pCtcPJAQhoJw2DAGCsrefO6z2e8eVNCwYfCvQ0HvkbNfAFMC4EU0sCKr5NPHl6IRT4RLApxNlwR+ OuyzpClPqsqWaDhg1sWWFNwcZwoY1ipjEiipUle4rvEDkLFR7JEJV86Y7hxUaAuQ3oN4mHAnQY/Q hGEYFvCZV6XOFp1Y3HRx/xjpHCY3mq5jfVetMR9VxglsJLXakSB1JsF6pLoMiYoHbp1InS/UcQTa FKCgoNEgdVjG6UxB0gI8QZu9vvGDtgGNF5UUKSRlkN4hcvfAObFMmwtkQ+nMQSG0p8iaaZ2nNUNk zBTpwKPPFatyRE3Z4ImLdTyxmQPiKjengw8CulmtY5NKoMLZEnNenabY1fcdMhAaIgiQXuvD77C7 UJVfZysG64NUH+i6LRG2FyixUJMhbOSImrgiTSZGJ0xcIFqiZppNNiELVbiyyrVJoLkRKChQ39vt wbTgWCc5tUn/sdRcWGlKYd1VLJgHEm5B/wg2E9S2Sp8o0qeB5VU05cqaMG4g0aYqbFz4ompjhsjF EzgBnWYrbOmi4xlfWVaCozSCmcew0w0e/c2QZYPxQ4WmWGHKR7aMlfCJNJ2BmihUpQjq09Gj1+SJ tVkiLRwfrcO3oeMAhFxu5lbasvjNOaC8+NSmtG3WpQ+8lwOYVug72fa1UJ0laUlnK3VB78C8gqmV AyWzpAiNqRJDllCbLdDwxHoERiz1N2fInNlVZmBQYD5Sa8y81fVvXRhQgysaLfj0Eu8A6Wi49aWk vkBqzAb+KXPwkOSzIXo7p0qbDNLC12UK1Dl8bbZIxxPAs5gxOAbiDVAPvFRoTVE24+8KTUnAMMHW awa3gQkDkoNOgT2Jb48HwgwWEOsKMF8wESdkmSobMaAVAmF8kND6gZifTwIBADdYIZBMeevbSxqK /0X2+xdKXn5mxRugudMrwJTHo0aDX1CeyMYGI8o+5wkomEMbkfCaYAsABRVJSC3KE58ti/+7T18r ObFmBOPbgaf0oUQ6E4+c20BjBSCu6XD62KppycLMtTUDVECiTgPGtf9ila5rh7Pv4KnHh229+366 Ugs+IGKCEVgcB0ut0BHmYECvIe8bW8UgueanwTQveWzrOAz+PtgC6oBwq208gALYOoAOcWPuesPS AxdXqdsP3Bg5PULunB76Eeu99TlKKxfgBSwdUGus39Ck1Khztxk/PHK+Rtux29Cz59ittd+eq1it WVCjzgdgh28HeAGKgs4yGHFN0U5TVR+57SN+yt4ZDD60fy9T5yGCmdPR+4P1WNJAU8Q68CzyNlo/ +u5STeO9HaaefYbOr3++WPeVfTkQSLkuDyRcaqTZPZBhC8oD38oDKFA0Frj6DgLg0ETZYJfHtVq7 WGbNlZhzAFgAykAOAQRQRxqzNurf2XemurF9i6l3j7pz+/fnZJutnwrVRQJTntAE1ieTBkBS0YLT MlSAAlgtbVJm25EQCkTGHGAXoBQgwDJXJvpH1gwF2DI4CG3OGuNbe06X119bb+nYY2j/tv765m+a S2GLJOA4mwsBvqrtSQLnHAw82rKUTcVHL2wCh84fKeQbIQ++bRUDTIHbXmPPBt0ECof80MQFkrNG O/9rZ+nRq2sN3d8Y7+9puL3px0uyLZZ3kP8Ys9GvMaeAPa2yZ1bYOWAjpJYEhTF9s/6DB55LQYzl 9h9v2yUx5FXZaEUNlrhzARCAZoCPIFFnrzK+vfeCsLFru+bB14evrd5kXiprypcb86Tgolpzq8GV s8TLLalw3AdPK93kAcaUApgyGCMDrSNqeX0xBlLMPNY3wZ5f0FktF26y0fzB/gui+o6t2gd7TrRv PXBRusG0RKrGM4VFiq3xUhcGc2AzBabUmmYeeLIABe3E9oVhGZg/mYkjsiYInUngKwmd2eAbUm6Q wjYisaXCwJApT+CyZcMiezLtZcjAMnKgmvbMKnPYCQUPEaAPzKvUFA9WRuh6+63Gxf9TNnPaZy89 VxEPyv5MWRJcSADKYnyBSNaAVfxIVSHbdIAVyOBTTC+fPb38zWkr34grpX9bAV7GrGcr0md8/Mb/ Uzrzi+YdY2SYRHyEmO51tm7Di/MKLmwS67OxJcqWgmhgTqdl8FyxKVveVPzTldXXxs1jpDtS1TPg IY9GSO8DclV196s1undkpgI0nVawa8lgodbY8qQnsi3de71objClbrl7GAub7WjFgDcK0N1IB+mq bcg/eXFLp/fiGHk8TkbBtt4nF7fYlslNOTJDSg2wCOqtY3GdNu8L3SegyP3Baz7am+Mj/R7y0EO6 290tIM+KhrlI80CpLSnUzUxH5WpaqL12wIN6hASyM3Rmo/ZDiR5bQcEswoKRghoz5eqcTYYPbPd/ uOc/O4a3BRPcF8Rv6Rsmt1r7ju2wlALNYFkrC+YSWnMuMmeD393c95OXDAUxp9915OwaUF7aa8aV UDcTjYIuo1Y97+TlbbdHnV5aSEBTb/AIfX3kuu3+0Q2GEiH2gHDZm1PPFK0GQIFclae7tyOA6xmk hcfgIGQCUUdBMqcAJgBDAC8GzKiyfsHJK5vbx5vhpALhLRqEwxol926Mmb9rkSsbFwDdBWkEhwhM tsCUrjQXrW58+5pbj4UNIT94T657JxUN80E34SiREzq4QlTVLNHJ7APNkguPVKOYuOyPVGH1B0hP b+Cc4eaeNdr3ZIZ87I+wpvCtVC8o5VMYsjbrP37ouxLCUGrPiUtbQdL4SJMywEcQ2kHpMhW6rLqG eQfPrL3paQb3ykM3B76lx39FdWV3XUOxTM9BpbZgrS/QfqkubYP2/Q5/G0hvEGsh3A/IlS3WFTXG QmBW4OWJnVnguaAt1nHXaBdrr++5778E7NeNhzsI8uAmfQ+Cl/R3965TLxE3pilBPa1p1RaQtyza 74lcAtY/RDp+OrelprFYgewuhY/EgFsJXqQTnw7gAraIphvQ4rNQgOBmxzkk2KQQgQLqqWFBAmy+ zMXDZzel0KhIhshRuKRxwf8r/sPzK2c+W0n5PPX6p/oC1NBHQgFRHEhkoWDayqTpKxOnrZwVV/pa XNnrMyrmIKnA38WKxBkl8b9eNvO11Yk7z20dRyrljRbeT4YCHF1y6PwXIl0OGxQCHgjqDDRMqM1c ZVpienBggNzyYo1ZIBgKRJxKtjJndIR0nRupX61ZwtpNDAubkoFIyA3c3S1l/eQOrd8bjEIB7bpK FziRGUrrOapbG0bIXVoIF7ba1q4f+SdzgZnUODhi0xxw0KTgkqvzvmypuu13jKMh8NLMIFvIBL5i AL5imHSd6j+8Sr0QhAo2X2BMxuCGHWxNwRZdaWfwrJeMgABo7u5QqPNR/e309PVJMnNmrXH+l+YV dwN2EFQgscFwICoYSVKP+EhvL2n97pwQk3Q2sH0Z0fiJ2JItU82zP/iRrU68MqbfoP8IXA8JrdhE UAXSqOOtNb3nenTYTe7TUTD+iYp5/JfbTR51kYvftIrAMUGxsaZGrnRMYKkLdPe+CpLeEEABjRUA TgqMiXBMgGYYCXTlAO/dYF16dujEILkVpLER1h/EBiMGqxzdWLRws+Ha1lr9QoGRByvnA4zYM8Wm LElTzpG2OlpvM9ZPbu1zyMGVw8WDY+hIrjYkyc25MlXxyVtbH5LLQPCwqoeJ1PUF2dpLOOLeKx79 Oj3CLEZCwFBa2NparsyYtWkCCrpPXNoMUACaAoiHARmg1sbMWlXh4XPKfizoGg0QD5UFrBSgCc37 qtub67T5EmMG8A1w6ODBwekAaD330ODB+i4A+UF7/2GlfgF8FyqmjQdMA3AGNmqz5cMLoydpCRaW dOLK2doPPGD3CLl/w2sGEgWeL/jFIkcmwAjmR8w0fo49CGN3PWfX1C9cbeGBE1RlTZCezkICAO6k JQn4idKcjnkZWi0Mz0KvNIw5W5JoeiUFa5ItYJVw/gAbVRDQ3ITCkQkHIWxetKRp7j+Kfvdi6Utx pa+CXzCjEjyCWZOif5T/43CSlYmU/9NGA/whDQiEw4aYO5hRNgvRANyKMtqdhP4F/Dzh71bM/Iey 3yw5Pv+bS2vhoCdYweTuEzZWcLh1o0SXj8+IIwt4wDaV+mxl4zzj/b2A0iAkTGw3SpDFkwCcmgcr AHtPDRytaVok1edQ54LKpyND2pjfNmCBY/KCgt89JNdguxMLBRhzNmZ9afu0izh9aLKxDg2+BXyK XaaKGmOx0ByO5IP5A4f0K6foVuAUrDNIpyqFojUCWC0Rom2woFAPXPd/qlUtkJuygdmCJ4j80JwN Doi+exf8bl/oxmbLR+h+0n4r4OFAfUF4vjAt7Qie96FQeZmQLzgx3iDc6UxVqb+PXPnaLpToi5B8 GtFIhdsE1EW2BwfAvoO8Hb+1RdCUi6VilM8gPzFya7WLnL3HRnHxblZJQxMDUrBomWXOQIf2nZIq dDkY7jYmwoNjlbs1R6TFHgSw8gAFnaGzG/XLwIWHxUcT2fCM4JKcevwz7ECAVkrTHG6kpJCWV9Hk 7OgY6TrUtkasKQTtA1caEzpmDpjROvXiLl8b+ImgNXDoqFBwUtYEDHFYMqRNBT9f3tJLbtItCrAt RmwbCC1FCNAqzjEAtLZRwyr9InRqkBJzWB8ZMH+d6YNe37Ugxgp6j17eLtZjiTs6TaA1gJbG7M3G pde92jEkG7Ab4Sq1EC474MYCrdZttuUSPXDsFERgamdljXP1N350I+0cGyWde88IwKmh3wvilw6E XGnJW6dbcn3c7MW4qButGJ1JFKkM99M9AUrcf2nMvM1eDqYQQAD0FIgQSogZzbofcabfdOcr+fHM WguSsXJjIvjCtAAsVWFNQ6tHS/JgVfC7lP9j4QE8mpROH2I9AoxH2ZFFCE0YBRJZM6uNXNnpd95u mPc/pX8AHHi2dCZOICmPjyvFKAEtEaTqXB6GAlo5kBCGgphQIcsNMLNQEv9MWfwzFZRLrKBdiuUp 8PMXy2a98Pk/J3+TWGlfvOeSHBSBJo6fMrkhSJuUD59ZJ9XnYe4bw6dZIMByVcGh1tphchsMJRMe 8BY71gyuIMoYVWGQscMX1onUBWJbltiZA0QLfA2JOrPxyh4PZgR6bHcPKtSF0TZtMRgOfcHPVzaM kXYvChjeDw7lxrhuTeOiWlMB+GtAt4TUrKwxvnN+SO/BQx9BqYN/mHDFOxNTZuINgaR1H7m8Cvi5 wkpDvqY0VHYzd9eZ0hHSfnnIolTPY7NCoKpVFjidPFBkR/8PmLXH6sDgRAskth8Fo8FVXwBrYq+M WmXqhcAEapyFIOoglmxllPXhftjDAXJ7e3O5wIjeIlBZqRO9D+BCP19bD86UD4Qc+Euk98oXis5K ojIZGgdeccfnWqNfBHIlxwxpCh2alyPQFqsQCvrBqgIUbADXFXi4I4tvpXJr50ibshpvAvHrwnJu gOxggJba0NUzEfAPheC/QZcBcNbpPq2zFcPi2XF5IN5SVb6r+8QwuXPy7jqpJgvwHKS32ooZT4U5 Z5P5407mApxyMBgWIX8IpzsFqeVG8wrPRWP4o6Sn6d4WqSobwATdfwoFcIhrze8D1Q/QuvG/XN4p 1hVi9hlrKQEK0uBxvjsjHSG3KSVge6X9kcFoAVql3Hvs2g45Tg/D0C5GMk088MvqL+z2sEWY/vPg pQJtQPcQdBPYoCELHFsrJnn7aDzBxzKZCKdlgowXKxVDIVpROdg80KjQLABUxPvTSWIYTbIlAtaF EKi7jp/fVNNYKNSmAIRKHFwgVPTfSAAwvGNlDVwaO3Amkmpk243p0EKcRpIMLBejtZZ0Pjhcp+a/ dTLv/xb95wsrX5+2/M24Usr2S+Y8U5Ect2IO0v6VkassHuz7jJIEuCJsgToOFbSekHoKz9A8Y7jk gP1MBWd6efqLJXP+7rPfzdzy52X2eZW27G/bqt2kZ0rTfTRyGMI+oJ6fTq9RGHliRyLyOvB3wIvX vnVpwIKEOeAJNxIy4ekB4WL7iYZ0Bj4GiqbQLuZbaXu1LYNvTwAp+sYuHSQ3vaTDdvd7hbooYshw r2SaImPHQTAl2NfDsC0h/fo722tV+TJYCXzGibk2kSb70MUaYDUBLINhYueBBGI6YGmjAYjNwC2v aa3qXakJM4A4Bwb4uTl9tWnRbeK09f4sVReimbNyaKECV6DL2eUSD5K7PjI00Rk3qbk28qTYruMZ Jz3726TolTsKMDWAuQ8OhYLvYIW3x88pNO/A46OzCeIBHqsxf4P58zvE5cVYTbgFD7WSHa3CRIK3 VPx9Ph/I7c9X60SqDIUri4UCZK3aQgoFAyEyykKBVF+ADqmDh4hqSNlmfb+XXAqQ8chIMTzUaI9h iJnojw5hOVmf7u5+qSo33HFjQWWUa4t+Pr+1n7R9faFcaABPlocpWitHasmVNOTpO3ah/LDtY0x4 fwLRcSUxs6fADe8hp9fo3lXoc2kqCpEf9mGN5YP7gcs+dCcBCnZJtEUSLPVJwQoTAGR1nubWN+No Mvy+cIMaQ+fIgScCzBMQZqSlV63QFmGlBEZTcdCWQjX357NbxjGw8OB8XxPmPa3pbBUQ/FtpyNth KRsi1/2hgfAozjBNoqDF+Ce6FAkgZKCfdO09I4LfQtmwJFPJAT6fDCsJAWjgNLP2oxc2rtG8A3sl 0GcJTVmYCLansrkz2t2POVx2/gDbjyCwZQrCUIAVU0CxFHacWCgEHGh56z1V8f8Q/Sbu85dokD95 RkVG3PL4Z8pTsChoRfy0lSlhHEB6gAjwTGnyM1TTI4nCcD1hGA0AK1amTluRGrc8CZgDBgrKkuI+ e/PXn7/yp3Wzl9kWlbtyqy3cvRexXSVmqgATnIACEMkxgIKfz6xVGLKEtngQDFp4ydvs+Pwx6UAd xWJ0GoOnTT1BJkZBwBK4g+x+9oVubXYtg/3hmzCgiokkY+YW/fIe0uol7Y4738PZxdRpZ4D72Xz/ JJhabFrC+DUGCn44L1VoeXWOHDH1udD+aha29P8FPsbWxLPzQ0MTIxHYaQGEwfJGQu3O3QPNMrkx j29OYr1R7PMyFJ7yHD96a7tEi1AAtgPcB8zCawqM9w6PoffkBUMKJgAZR0xHe4hKZdhLwNmDfY7H hySqAqEWs+FoPoxcgDhb3wHwks49tIgb5+HABxpYFpq4Ul3xDxc2DJFOMKlUWZBvhh3tcAttuH0u 5MH99JORy56GGu1cvj5d5IRtxPlyUnWB5t7XbD8ddRA+BzMqoFl7MExSTerPV+TIgYMT+h+utg4P BUCIC/oDkSkiYzfHnHWaufJIxSZWlurzd9vEHcS++dRSvgF+iHfGsltT3hrNkjt+C2AsHjkLATG9 jdGRqn4vQ0eAeIfJ3e/P1sp1ecjkWRJo4aw1AxRc8aGH0nf0UhgKMHNtTsKIh7rwdG897UuKeqBB HDAbYskG3DhwZagZ5EfhRCIE2ALemUxVCFQWWCWYbP3NfRiJsqbgcYPPrk+u0xebOvaNk04smmKQ voKlYEU3Oh0igpTonAKIWe7vh6PEtiNLMg4spX49yjzjQ5zGhrV+572GjapSpXqRDIlrOsA1hgdx dkQ81kWY0uR0qJHQzhM4sujFQaxwJmGQ1pykcPIwPuBc9M6Juf+96nfPr/jj8/yEuGVvTC9PBTQA PjCtZNaMFXOm08jhRO6A+gLTy3CmMe03jA4pmoM4UPE6XitmzahIiVuRHlea8lx58vQVb05b/trf l//xP1f/ucz2boW9QOTKERg5e88J8Cj9T4eCIFbh9vx09guFrpiWtaSzhUZfnysHI8iE1S88R9TH UAygehjpOmTv6PWQnj0X+VifA06QBSM8UkPmBs1H7YzVS+447hwERoepFpptwYCYqtDe/hdsBEZz jyLcTzq/PVWp0HMlhlRa2ZUMYLJe92EnaQVYZtjpdGwHOo2GRcvMooTHF/KAUmhu7hUAR3Vx6LPQ kdGGHOvQ/v3n5SDzCkzfJyttND6vWXB50Ab+dTCAAhOaGMzF4B+ZQOxwFWAFwOGvjGnXaN+TGrJw mJgdXABujTrf+WjvCOmytR/HsYRg6awJUjsIOQek19RxZARLqZGLsp57hNawPbJMpEMQVQ0es5uc /tK6HBbMjtRWWDg1TTnGu1/RrnCaATF8LDfl0LE5GKmo1eQYO3dQcsVGT0jkW2grROCJsTOMb4jc 3ub8tNrAzspIB8qq1Gd/aS67ROrX2d+GExRgIRnWhcq1vN32qj5yiYZoJs03CPcDTf5ZIDjmJg80 t/fIdQVsyQ1yMHP6BtP79wPXfJhh6T3RtkOsKRBh+iZNbkkFQ1mjLb40aMI2xmDsYIdww7SPwce4 M3q2Tr1QirWmaVipZeMAlzh8Zs0YuTNGOv5ybptMXyyk7gYWZti4isaiK0NGOC9smA3FDKyYmB0R Po9QeK7c4DW3vla1WGZCM4SBGsxWZEx4WCD8IXClh7tDF1U3d28xl9bq3hapioTqHImGK2nMkNfn 1jUWKBqywF8TqvIFqsJqdaFAnS9U5YlVOeKmPKkmj1/PU1gXvXs44x/L//uvP/+n50t/N33Zb58p fWXGsleeL/nDs8t+9/zyl15Y9tsXS195ftnLzy1/+RmsMXh5+opXppfNpJPMkyegoCySVWShAJ2F xDhai/j8yuTpn73665Uvv7L+tRXWt/iOIr6di46/Iev7C3IAvb/GCoLYKNpz5OxmmW6h0JSJeXMs tOaBWzFKutHPYrzYFRr0ReeHsyJH+XQwIngBwJPvr0gEhgylJRsLaUwpSkve6oZ3b/rBzW+33Tks V89niZOIZsqA0TV3HwvgwtwhP3YPDpD7XzlLpLo0TJFbsYpeauBuMZT0kLYga1VD0dl7EcsXdi1R bWnHMZC9YVvXMRAMLBg2pdU6s6r0iVJjtq7/q+/aZApdDkB3DUbzEuTWjNWGt++5L3iC42zIOvp0 YV+Vzj0IYaTMy04tgNXeY5rXqZYC68BiS+AtZk6dttDZ/+0QVhofXKUrkprnyG2JEvMcwJwa1dxT DzXjsMNBdyjWWGN6IjxLmbCN2DTgD4vvJ1e+slVgctaOMY0aM2dVY5bp7g46KSIMBUoTWK5E1FYD p05d1Nx7gPZwxcxIQAvuYw8JaR01h9H+HSCB212fi7ABn0sjq0k1+qxt5uWnvIdXWeZj852Nh7zd mijXZHxrFY6SdhrwDM8lwrvB/kTmUtBwHBN21zDuNGDpBOKUL4lM4YAN32hact9/w4dNpr31bdtl mkIRLeVFYmBNVmqK2vqNAcoqJsZph9iwYbiTpWP8wjrdu9X6RLaVAyysUpd/+OzaYXJ7DKeLbJAa igEi2LodhTVT2TjvnucMzQcxvsjQe/bxw8NdKF/ysxEbBljIYHvQtdH0CZyswJSCvA7Xzw1MmlCN 3SsBGgZ/SNqvj52xdderb36nvvqN7voe49VvjZf36K99q77yNfxEe2tf4/Vv1Df3q67tV185oLt2 QHt9T1P7jn1X5AU7X0/Y8JukHa/N3vqnWdtnztr22pytr+MF/7FtZvzW1+Cavfm15B2zZ217/U+b X5u9O+2/Vf7mhdLfv1g+O9yAXJoEKv8sqDxmEGbHlb+JY0zKZ8eVxc8oT3q+ZM6vl//+PzfOLHMt qqKvacDqLwvWsx08V4ME++lQgIxxjHT9dHGLXP+WwIQFvYADwMx3ni0fJT00YhzWdl/AHx1oiYme EKgGywwYJgjmuPvAJRFAgcKchaNgMOKUu7bpvdsBMzh01js/ydVz2ZIS6gKnKtT5LfePBjDL6Qbx AqDpJw92tZRLdRk1Nh7fkKBwpcqMvM365b3kcoCMsJIXDHORCEFlwvMuaJ8RoU3Hg64H9VJdEd+W osDaGHSHxfpM7cMdhy4pZJos0NA6W5rUlCg1pwEUdPnA5LGDmGjXaxQKwmjAiifbaRTwk8e3ffZ1 qvdlxmw2GwL0SanKAygYIR3qK9/Xagrk1gQJRQPMMTUUunqaxlF+fGGLHZ3fBhIagQIm/BRIUwfJ 9V32Sokhj92lp0KB3MClXnOawpqtaMhz9uwDKGBnMoTCuukPT3MKRw9DEzkL3Kn7XzYvwxyNjTcF CtY738LGLgstCTDHAxQcbFGMkLssFMSMDAvEGNbIREp8Ni8WcXUeAocayPPfhgJ2Vo+EQsHVIWsA v4J5ckQe6390uy+s078NQgWEnG/HukqZNvfw2fUjpH2Y3DvculmiL8JYPS0Yg0eAk70z1uLHPgXc XG8oMoeBhKOSkYQxXTcD7tNjBHn9h6AvEppgorfKDL/SYmJeCiwSUN1Lpyv43ZihHqTFNn0BbHh5 5KMVCz7SO066PeTROP4V9mN6sSvnZjuxbGspk9nekbS8xXfOEzTPFbrm4+VcKHDBNV8Q+aPYsUji XAw/rHAtXuZc+ptVr75Q8vKM5cgNQNkBBKaVxMctw+6k6eXJ0zDa8GZc1ZwZlfHTSmYCDszcGL/M Or/CzqPVvNjHhxOVtdkHzyuorzdpIm5sBgGW/f3pNUBp+JYsiTVHbMoCP3ej/eN+chuHVgX8fn8w 4hsGQ2FDFgp7BiH2nRF+OJSdZ1ZIwLc18cAcy10cYNGbDcvuERc4Gpa7P8k0RWwmkdZkJgMUNHf/ BSdxURnAQj3y+JsWvpwtN7VhbxGsHxyEOwEn+hExST74UpxEG4ooUYh9f02AZkP6T176SqTNkzjS McFtwk4lOF/H6Pc/XqqTqbGCUWZOAc8OnOWIgzAWHcsfJJGGN7bRZWIsToA6CAOX3Vpl40KlJZft wsD6B3W+o+9bgFPHvRPgg0uBVztTaN1mRq12AViNUUxmeandhxsGI/ksdi5AKNJfRw03GQEHAesJ dVnsizYUFl6sg9BBEAokeh4wWJxeYuHWaXNPXFnrxfwCdZ1C4VFsONyDjfIxYf7kD4/28g0w17fY P2bz3SDwSnuGTMPbaS2/Qho3upaAg4AlH7TEt9aYs9O8coBcdZPHoZgMboidRzXlzTXoc2Pl6rEr X4KDBtv+pIOAUHBxh0RbSGt0sQ8Fn1HLQsHYpHe1TJq05O12n2OhQGSPQkH+4daNgMAgvccufCnW 5mFvlDUFDl3hyJTUF5zrU3vJYzp8CR/cT41auGeBrSsIAuNlLQtw2r6LQ41rdBhwxq5h2p0KKwyy 8xsnTbb0xg5+DOEQnhF2rEoQjYUvgEAxGmKRLfw7I25y6x7R7Wj5jK/NrjZn8e2Z1TjSkMf2MsAl sGViz6+Di40t7E/MmVUmXrWzqNT13r/X/em50lefqQAaED9t5awZZTSkUJKEb0Qqy8DUYXni9Io5 05a/9mLpS3/Y8MfltnmilkKMKtPRzeA04Tt09LyDF8QAU5OHfzIxs6kDo6Tz0Lk1MmuBqDlDaKG1 FpY0uaYQDsiLQ73wFxkPOzMwEELCxbCcM0iBgB1C1eG5sMq0RORAFwCTgI50gYazyyZ6SK6gpQAo 0ObjcE57MvveH4SCrhNeMsRubACTicOHLtQBh6915AnNkX439VzXo8M40ZeV5sBEBiEUNkt4uD4P FpCAKo2SO/tb5OBrC+gUIBAe5Cf6wguBxqZ7X4PLhqlnWkyLcymbcq3df6FFF2OsmcYJJ8zUIY1B P83MY6F7v7rjK1FjrtKWJzJhxQgmEzVFjr4DmJR/aJWrFqKKWVOAwQKcyvRzdztlw1iYMcJOUYJ7 hKJDZCJD1TDmGWCp+/Cp/sOypgKlo6DKnBoJGxZGw4YABRuMn8oM+eH5uqDF+tTdzuVj5EEwkv5g wrOUKFxTQg9HRvvCaDsvGbsx6sD4mJ0TroQH06zO3o/Nv6e2nP4YnESpnZbMWdJkprzV6nfvBK1o SlgXgJk6Do1FaDQWqMdecJSwsd1U+NSwIWz18Us7KRSkT4YCS2BiLB4z+c0sTIQVLAa3RYTdnTRO Ag5C66YR0ukhvYYbB+ARpA5shUAjAs6prrDh6jY36QJKD0LrD7jZ0ViETMzCZf0yuMD5xYFmd76U q/LkFh4NP9KCVVtqaNLMtNjJljExBzoGx0+HbcEeeBlfmF36aGLI6w6S/m7Gvs30EdhlmYNXTcsP 2MoE2u/MZVue6SB09jVJGWyeCxsDbTnLbIv/rfbV6ctmxpUkYLviij9jJVJ5Aq1MTqUXhhzjlr0K OPDHTW9+biviN2eJqR2kI9wxpYIOgp7z/UWhD5NBgdhXDkU3Go4QrPYPZ1fzdZwqWyL2SwJvtCXL tZlHL2waJt1+Mk5pIKFJhECkVCmMBpRlgS3ot9w9LNHMrbICheMJHJxqa7JEl3vk7OZRcp/+7U90 jGoCiwM4n0dT2Hy/wce+iC2cTBw1dexTNhUKdRyZKxNugh0f2qx9p0WwQl/IEx0iGvNmgUllk6Cq 1z369Zp3cc4PTSZi7kafvNa8uIOcPj3QAMDC7jzmdm1pIkPeDrtgEAduPI4O2QsbkRAJTHrFD3EH R0DwtreU4TwNnFaNvjwmEzXFzr6DHtLXPn5xleF9rKwAa+jgIOYb8mrUSy579V4yyKBkhEemYz0V DueK6i5NaQUwqnagVaQwYDG/gFX2cF3BbjpJchihwPC5zFjEN6Xz2R5nY9Ja/fxrwzYckxj0sIv1 h8Iz1Rhm0usnfGR8mNxX3dkjU+dJbeESejaZePLKV4/J1W8vVUkM+CIMoYXDxxLoXJmqsOnOlx7S 42fGYvc/5mVwE8MQAcouu3VrDO+Faw6fSCaGMwi6/CgU4FsCtUVXhq2BSRMyp7zIwN/pvgisAIs8 bfTgAAq0hT+e+QJYAZDzS4+0AMjsG4WwHsCSIgeXx7jsPjmDszfDOx8Z44+uXzQYjoUYXuJ9RO7u tJfKdDipgJ1URusKkqeMqZ+Y4U+rKp58xV4o8m4dYNIkHKEZ6Pac2m2vBMQTmbhVxmRlc3a1LglI F7aZWyJvRrOmUpczNVyZYMSKZbk1Q2jLKbW//R+rX3uudBZOMKaDy2iNcRIWE66Y/ezKpBfKU2Z8 9savl7/y6qaZJc551S05GDYxp4fvjKjCi0AB30e6p0JBBA0ACkbI/cPnN4J/CqAEp4Pd2ZYEpSlj jebt1qH6MawG9zFsOH1iAEjA68MpoDRoP9xNzm8xlMjNhYB41TaUIngopa7Y1dXgxuaCAVp4nCum 0/vZqlq5ush5v8HLVg+yzJWM3Ry3rWv8AAeuWrnV2NGPaSOFam7rgGoch2UNMbTQJcBOqaAWiQ4P ZegrzcaBpR+8qBCrcoAOsSlmDBcYuHvPV46RjlvjLesM76AKR/qJMEOtyjfe3+NBgo1lJzSRHYrO b8cMFFxBjO6D4bB0/KQwLMY3ZpookltS2KYnx8PvQSDRILbyhVSRkd7TdnupPm9/q3SIdGIdIMO+ sJGJUSV2XpCbTvXsP91bv1o3H9bMNybTeQggCbl87bzGzt20xGiwM4RQACclASZJy1qkjnSJhnvg tOQxuYHjU4I+L+MJYoQzmv9gi0KCAcbrAY+YnKnTLK2xFLJd2JjosaXVaItbe5uGyB3Dgx1yTa7E yAUoEznT8SkMvE3Wj266XXBSQcbD4GZgjMhPglGWDPsGYkAr93q+vyAF2yc2cFij9mSJ0dHLOwAK 2Px7BAqKrwzZaawgOq6ZiSFNOFoZoQDYO632ZwdWUCjY4MFui4G+YNsm84cifYYSB2LgS4Vg2UCu mm5t82LBtpc9Way8QlrLpsN8PgwXwx+8I6RPc/eApDEf+zctlOxhNwGFgqdMVp804D1ES1D8NKzM htGoA8USV7efPOryu3ZbKsT1uVJLDr71DI7VkIaZaOw0SWMnotD/BlhOQZnBsm2ewsoG8NPAcSi1 Lvj32t8/W/rnZ8rTgA88U0nriksTqFOQMH3FmzM+/9Ovl//+z5sSl1nnVjl5mIa2Usm089jRizQO DH4370Cb0DuZFZDJUDCOE483YWcueo48qTFDrMfxOPyGwvWmijbPmWEUVEoBI6woiPLGjr581Edu fteqkNPXe6E1tGMBD5jLtfol4CF6MYWEPQj4ypUwDmCYFz5v7zrJ1pBHRiK7h8nd75rragzzqwzs hIQUmTNNpONtMpde99ncpDOIDYCs98cGxdhygwCd7dll7TokbyqWmnhyexZOnABeZMyUqwqAwHtR VTu+dq0Uaamposk4LFO3ZK0zLLk0ZKG9zDg9KWJSmci87vA8pbvB02vVn0gwts8JUwtYng0Lj609 BwI0dqTuAB8kH4ACX4hpxRcYic2cWv1Cze294CZgSjTkDWDJSpCNacN/M2ScTvrque62bLesAEog NCWAhobnbFhzRRqWFbCFx2c26j+X6LJldM42dtzYMV4hbSpQ3d0xigUMOMuX9VtR8rHqECPwASwk Gxwgt/efVwo1OLVJwr6/w4wDZDYY3utlcCzkHcawRrVYZsT7C6zxQlsCRpw0hT+cW9tNwKwP0nmz 7GzkaPA5QKvUhodIt63niEJTLDGlKZ1ZfGNKuDM3pvAYaM/xS9vRKNBJWeykfbl23pUhZziDEJr0 Mj52hiEIBrifG7RLZEYcJcEOqQAoOHRmrQddgEEPuX/owmpRYx7bwUG9Hh54/au1b59+eGIcS77H KKQEQpHXobIT5wJYyvig+dGxtbql2BxtSaYzmjJoy0AGQkFo8mv1opnFYLiRgUx+Pw6aKfoBL1bm DbQzzYBRUi2GX1Bs7JkCMxf8L3ATKnWJsuiwdJx8ws4/xxEZqLZmHnasm9PEzqyVzvn/VvsfM5a/ BBwALtq8PAfnm1XxplWkTi/5869Xvjxzyxsl9oXVjtxqWLmVAzCCATc6uooWSIDXkw1Gav9FuQfd 4SnvMYy+gADp/eHWzViva+NINBxxY/YG20dfXhB9eWO10ilaZ62zPDINkKFhOuYXt5TxhNAEDMMv 3g227DslFZ4EQ8wFGZY7U+S2FJkpHVz+I5dXASWgLYEsFBRG3wGB5EddZOs6BiiBRWrhd5H4QaLO PFCJ6+fKHFmAkyLLHNgiTCVrc7c4S4D8D5LbbECGOvU0+osEbxTUXNf5TY1qLh01Ru0Cht14YIB2 Wasekjbw1mEZpo5va1RFoP7sPGE6PCGjxlK8QbP0/OCJUdJOR6QydP5veChRgCZb4as3mT+W0zL1 akxEIqTjlBt7nrxpnr3nEPXlh295bVssQOCzFa7MMMkE+m3KltQXaDt2D5I7dKC6NxR57SC1SnD/ 3rZR3XoD5iix+dEaXhsWwVpygKLr7n1FOxMH2M5ErGoAWmXDkQVAb8QuHEQAtlV1a8fD0CX4ikDQ zbCeaoj9CjfY60fk4o9na0Bf+CaOvJmLv2jniBAq845dXkNnJ46NknuHTq3BkRTo42OBHE7dNPCE DbnfnhJ1BE+Bu8f29URTkyGMdAwDUbd0H5Q3LsSmD5blsi/UAF5kmmhHAnZa37ZVocmmgwFhAbiH cs2CK0PNgWjMMPLqk8hgdlDY4Q5v6wYtJm4QClhWoMs/dGaVl3QQPLKB1kHtasOnYtpzKm/OrGK5 gS5jtWaB6+EPtBHMPTmPgyc7QO6eenRsi/l9iTYdjqyCNghgJ4IhhY2lTMllTJnqj+lOxhvzXgwW eBlfCLtxb/mav3JUgIcLj4ntz7Y0Ac3a0KhszEDU8BykRIoGySwUSOhkFayjsPNW2Iv/Y9V/vFD6 yjO0Anl6OX0VQkXStPL0uM8AB37/h42vlTrmVSHCZOG4Nso02Kry8IQl2jIp1Ofuv6jwYKD+Ke/2 Zfuz3OThifM7a+vnSxqyN7s+a3r8bePwz7Uta/K/e3fm2oyXRbN+v/L1kgNlLY+dN8fbHjI3H5Nb PYHLlx47T17eu1m/HMiPwkon9NoSFPYkiTGp1pxbp154zWdANMYy70HajlTIjnGgr6nNUICD0HUc oMDHVtoFw6+ufkzavzktkupz5MZUJd0ioZM2vepz67TvN17f1T52BkMHaIWxSfkhc/3sI+3eFgW+ gFjPQZBxIP8XsR3E6sWOjp99WLWLGtFLLmw3lIBVxQFollSsEHPwBIYMqTpznWbxsUub2h4bh0gP nfP8MEB6RknHPc+phkvb1mveA3stMOJ0CyxeMiVLqECCqgIUNPcdBnFlsDmru/7KVqkqX0rLMySR YhXsqmvM39esOHW/sZ/cAjs1ioP++odJe/t48/G2beu0S3FGCuvn0pZDKS33wsysqkDXjj0IQexB QCignY/JYhMiksSRXmFKELo4QvBZ6ov2NctOdTX0Bq95sBW6z4Pf8rDLf851/6dt+hJpQ6EMTsrJ qbTMxoEz5oxa09yNug+ujxt9OC0QteP8Q12tahG+YQHfIpqKOUE7B1iWRJ29VbfMcGNft69tjDyg 3b4DbtI7SG5deqg5fGaNvGkBjiS1IufnO9IrLWyyNSO2SdlHehoubsURoywUOJCEKzTzrg5OgYJA zJtT0EC0+05TVoCjk1goAGpx5CwLBUCE3I9Jzzctq9i3gQMOYFW5Fd9qKjNxlE3FP5/bdHXA+pjc GcWkHub4Hoc6LvWZgKLUnlwg12SApAmpz4h9xOYMIPBs63GEr8a8JpLEvMs7xrqy0WZK9gJu8uhu wLnNuAwkQY5zPzJiBpuEex6j00siXaj42rUwWWKTsDauwITTKVc6Fv57ze+eL/kDti2zBcll+BqU 6Ste/1XZK3/a+Kdyx0KBjSthIw/mSO+DIxl7H+gX0RIOoPqZ+9uk4zTZFIlyTLwJgrICYL+dx059 uf7Ix/U3dl4nV3bd+XFmbcHff/LajE9mxn326nMlf372o3//z9o/Vxk/UWo/2GL7bIv947Wmd3Ge raoINh8nD1NiJrVjMARbgFX5x25+MUbaES2D8L8B692DGKqiM1FpJVtajWY+CC2dDMDEvlHdT4Zu +izrVO/XqLLqzFy+KVHkSq00J4scOPBEZMhbq31nt7XsUKvy8MVVe89Ub3Z+ItYUCsE/NWUBXQd2 CqyAUoIs4OoHz9W50ZC52XZdACV75xGg0zSogp1x4RQD7KSeJ2rKrNUv3mpfvq9VfOSS8lCbeGfL J2v083F6hi4H/SYLenPooeMkTDQfcNCShlznw+8DWBqNlSoPyNkvLEvRSbHwaJ4CObyQNqti84J+ 3kbrJ1+fFnzfpvyhTfq167P1urnwvWBM5ZZUqSleSZvExUacOwQ/wW44VaHm3m5KV8Y64OaGZaBx yCQtdEy9g8e+VAszm7bsShVPpCra4Ph49/mq7y/Jvz8n+6a5fLPpXaUqDw5FZinCAXqOdKETbVCN LUteXwzqMIa44aO82Q9exv4LEhxdAtzGmVdtTKMzRrBIA6fVqQo36N7d5Sw7eFH2wxXlN2ertzo+ UTRk1RlzqnXo5yqcOCC0yp5d5czBpLYpWWHkbDF81Ou9HMS3YDw8eWEH3ERG8yw4o8wSX6spuDRg wYbEiaZXJlofSAuP3Xd9rXDu6CDYs6sR7bkyVfaR07UeLC32+tHJHb3sdqzRvYW6AC4qmoNUOroE g0Uge0r1vG3OT/de4H93SfntOel2R7lS9baoPrfGlFuLuTZaph72rDm0oQxLsGJfrBOa9FbZMK/2 +0i0Gp/Bui5YyWB7oAVgs05fXMt2yGItOlbUsMMuWN2PeStKOhs2DJN5lioAmWR9QEcWMP9/q3np 78pexelkJQnYb1iZPL30tV+VvfSnTW+UWOZXWylLtCSzQUIRG3MOQwHejR1AJDbwngoF0XYSfOkA 6T/p2tfc0dhDOiXGHf/wYeKvPkl89vPE51amxZXMmVGZOH3Fy3/Y/Mcy1yKRJU+gTePrw6OG0QOi vah0DmSayJyssGaK1Pm7TvHB/oJJorUnYI4H7fcOgwDAgqtNaFjBkQcy39JZ7yZDHhL0x8ZhMIxz 39l9ZF3DO7IGbo09G7AdjHilOXGFLb7cngwWFmQSgUWTI9JnVOmT6OvqcIglMCKwpwr2KLV5my0r bgdPY76SrT1lsG5whHTtPS2VqHOlhswaRybfkCC0JLIzqOn0TuTDOO1KnVHZlFSlmyMwJ6BGmwAu wPKm4KAkYxq6clhBwVFacmu0xfaH+7FbFh1z2MzesyN/Wa1dDGZUZsvGKUzOFGxvd6RIHTihqFqf Xq3n8nWZfA1OeQXjjolXC2xdktKcLNOnK6w08AhyYk6UGtMAbJvav2InHneEzmGTsiUPsc7MwQZM Y4bIkMI3JOEsPuDbzvRqW3qFMbVSmyrQZkg0XJk2Q6BJUFCujpP9XNhuX2Wag8p4nLvLWvGQXB2j 9f8YCQ/4cHp5yPSF+dMa3SKpoRA7KZxoYeHC4W/03V5AvGHx1doMfBZDMrgqOBnMgVVtInUifGCl mVdhz2ILJuERtpiXPvBdoq5QX/3FXUpNMagAO85OZk2s0xZeG7YFJkFB9G1r4RfK3PXBg7+DVawW TjVVqBpd/s+t4NdgPyZtjw2MkD5z9z7pyXxwSQSmVDqEE4cuslER2PkqbSKIbpUmo1KdLtDzKAnn 4EwJU7LUmApeLU5WxEFS+CYCJOo23qS3c8bQabaJNfrKGzZsRWfX9N0LntptqZKfzJPqMBjIojR9 D+kUKAhXY0avaEsjpc1oqnDCmzO71LHoN3WvPFf2x7jS2YAD2IdY8trfr3x55hczl9sWCJqLaAY/ 4nFMnbaawUIBvo4tAgWx7wWb8g5KANX2wc4+Mrz1zA+/WjLn+c9Sn1uW9FxJ4rPLE54tiX9h5awX S3/7x/UvVTrmSW25cisnnPS0ZOLkKDqYToz8KhG5QVMejgoJnWXnF7F5ljEyYrn7l9r6uTVmHJoB oqW0cusaillW4KHTxsID+Sk59GGpwyPDzT0b1e/KVJkSAw7zAWUUtvD4Lg6bVpCYga6jQ4QVRDg8 EEuSwL2VWxNkhiSZNnu94ZPLPtcIVqH7w9109FC9ZLSTadvjkolOFADhxFIoVwrrtOLwZCuQ53Qc tubIBjcNd9iOUz7A8UTOb+KschSta5mvMOdgH7cpW6HPr1UtsD08NIYjg2hANTTqJb2WOz+sVb0r auJi8zsOLsCBseDy1FDiB7etsnLpt2RKXJn41jO4vzG1zppTa5xfa1tUbkgTNWeIXDj1FxS/qXPr /9fed4BHdZ1pC/UGGNspdrLJJtlssptsminSdPUCotjYBmMbUGMkzYx674hqG2y6bXA37saAUC8j jSQ6iCqKqBJCvY805c6d85/vnDujO0Ik8f8/f5J9HvTMaomsmblzdc57vvJ+7zsGactgG3vuzaoE nErkNeB7ElhQE1xYGbLzzEtrawIKMezXSGGOpp6UQxtCMSzj5Y1vdUFTcDYJTjIafNM0gHsgZVa+ eGeN6oq2mhgPETUViMoZFrgZ95v7KzYcjC4se7FQsxAYGsf90xt9s47hwAzkebMsm4veNFjkoOge kl8VuqFs4e6Tr+Y3hmUcC4UeEEi4+G2tW9mubzYQym7xhT3ZJQvT8KHQFEj6xT75pUsujzSOgfkF 3yqXK0uSJWS8M968peKl/CoyuH0UIue8sgWfnVynQ+0scEKoKqNxDHWXX9mXU7wQPrs6iAgzBkHW 3Ag0kuymYKrIQbXI8pr8QBSuWojvJD6+Nx9/rlCzAByNGxak1/qTMXB/rjrK82C1Fg24qWdCXgKp LgbDad9tY9NudWJRydJ1tWFQzGmUpNSJso9yCQIPCqjgYZB172dTIq7lf4IWCk5C1ZLsplBVw4pf Ff3eUfUn0CVIAf6AR/xv5rzpFa95IePoIrx4QAuF2LRxmooWqzULvNAEAaDgo/O5OlsomGSHTRTt UHXfhV/EBXoo/OyVPjgrcUmUOWAcSBA7KWZPV/1m9tY/ZJ1cnkp1P9QyKp1BlS2h/4Ij1Zr5OCnb 15R533SGiM7p8R3UER0KHLxp7hwoOrIM72g4FqulBTX+GAqa7h7QgbINw3DUD4YqexAzFOBANrXv 31yyKr94UVHV4qK6+fgjp2pIoawBlJbxsQKuUo3A5yk6HgIBf43v+tqQvEOhextTb5qPaSGZ1XNs MSqFAZw/COHums6/q8nOwehUv4jIXRJNlTpfokoXmNLgDy3RhiB6n/OPhaZXBuI0YfeJ2JPsh7vP xuRUhZDFFpJfs7CgdJmm+wstEIMts8Asjg16am9+vKk8PL9yIXAv1QF51T7r8OatJcOSONlpCk6q 909WQxkE6niahfnlYWvLlzXq9793OSe9Zn5KvTStQZpWK8uqCDpy9y0dKB4M30cX3yiNLVIvzKgS bDoagpPcjdVLTzD7Prmchtf/2ur5ebUQm5FkLQgDQkYNUG5wkgVJCnG4wAF8diW4RWyrVF0crAY1 CfMIISCYuGYxqdjrUV9zT9kbJTEwYFUTgm8ChoJkDTyAAwNTk744XspQCwk5ISSrNiwPx8NHlhVf 3nTe8MnauiUptUTeHx9MNT6v1b7cabpInC57vju7o6h2KX56ar1fKnHlw6liy3gT6SWxPHtZi/My cdO7Z7z4VvUrhTXAJ8SAhpfc2urnv2h+A6c2JmppzbnzGYfRneLW7QWlL2QcCsbBPyizcb1jv3SN D4gw4LSliTg41Ahy68RrcdZZvGBz/aoT6L03Tq7Mqw6DeA/G2EGrk7RLGL4nuMXlk0sZ9AZKRBnH 0eAdfeO7jUm5RxYW1oYA6fSYNEk9J+8kyH7yoYDSfqxQQHGVeqfSf1uq6/75ZMgxrm7ZLwv/6Ijz 9OTAaYq5nom/m7ttdmLTC5mNYYQvCvudslA491WadBDhaCsUQIHCCgU2dsM27pl6s6kfGVe9nzkj ei4OA6jlip3Syy5e5JwkcY6fZxf18//e9N9Jx5enaEIxouYdw7GoOEsjwN9x6Jta5YOz9c2lUaXn 3x0yXzexvdSDm4EHOw4Oen21Nz/NLlmSSTSlIa/BW+Pw4obb35DRVMbS5jSRUwmeRUwGwVbp6ujR T09sKDiwNLcEinW5TeL8JhyBiFLrxRlNPllHpSDTpwnIrPTNrQwoKAnbUrqm4uoHXfpWAxphTFqO W8IaCF+QJfI+9JUH+9H1A+e3FR5YXlS5NK8WeLY5oJ0ug1erC4SQQx1MK/k42M4ve+Hg2bd60fl7 6PhbGiXO+nGoAFus2j+7eGFD1349zuWNFg0HIzeYc65fvbMuGa80DH2FGhnO5ojyVVCGGlgB+LDA dxIayjUBmYdDdjYkndWVdKPLbx/NSysJyyEysBDEloaV3to1DnKIg/fNp9+qlOPDFyZhK70Kq4PX Hn71rL7iHrr+xeV3cw+/AJzkBpxySoimekjOscB04o1C2jEiHAnnEQnEL05vvWu8iAMkg1k/YSBl 8XyElJcoDl0dadhVk559cGm+GhrNGfUiHKjgvyD4OKhl+U0+a4+KczRCjO3pFfM3VEbVtn06gm61 jjfkl7yYVx+WSVTF8L19o2Z1B3NpHLp+PQebd+YfCcbbkPYZs6t8MNSfH6wg1I5xNMnnl6zPcTR+ U9+8qWRZXiUUGyELxodC8cL3j70+ACqIDIMm2mHE9Or+sZ4j26riCw4vKawMyqkR5zVKYcXW4+0Z xOkK1geu0wTlV8hyDoXsPbnuKjrZgtSv1clzSxfh9CeP6LllqSUWt27GNqhmTJbxLhK0QFbVxp58 F/+tDy0orJuPl01GnSBV45V9TJbW4JNBsgM6kDsJCqyOHhZ+EVcuyAVKTCD+q+FsCJ/+v1n/R/uY v9jHenvG/37udiFOGdLIID9tUUHkMwEF/oRs7G8RVIQX5wQ2p4ACm9YIkShkT4/c/HVCgGvcHHuV wD5Z6pgscUqU2su9naOE/5YU8uf8sGUfvZRWGZFVtgym9fGfstQ/t9w/pzQAL9QtdZGHW3dd1TYa IPYgDF6eex2xJx5svHVoc2VMQfWyDdUv4TPi9dqVr5fEXOhWkz44Y5Xe4vIw0hY3UzkENNJhvnK0 48t9R1PWl2FACM4u9geh2urQrKognK7ijDijNCSv9LktVRFfn3vt8lADEOYpVwGIsoxJD4OHBAog kBtntBbv5iEdun95qOaDhly8O7KPhGSV+aaVSkA5pGJxQfnzOUeW5BSHFZYs2XM66Wj/V1pISwcH 0M296rWv18k3aV7dVLcCf5At5fJTXQdhjJe18FIhMGAMZiM+6e6jK2W338HJcl5xSHZxcE5ZGDiy VSzJLV+QUxaSUxqcezj0zdpVZXe2t6Mzw+geXsYfq998vUyxrmLlZvXqzVXhW4+s0dz8grDcx++P N79Xlb2h7FV8G7fUrdhSEb6jNO/icPMA0vagvsa+g3uO4dU4Hycm2eWL08oXpFcGgV9SeWBeeWh+ WSj+LO80ppzo/a4fjNK0XOjL4QBr1BtIHYwS0PDHALfKAXSruv3TbfVKfIfzKxdklwVklwTkV8wv qFyALz7rsF9mccCmulc+u7K+xaAeASbV6N3By1tLkjZUrX69LnJ91Ssbylbsrkrt1F03AvF4oOLi Z1tLwl+rXo4/3caalZuqXt5epbgy0AgTcw+BArwe2sevvl2R9FrZSxtrVqxXr8CH+PrSNQeaPxwE Y1+S2DCUFG0kcyj6QdR9z9xcdn33a6WvrC1ZiAEws8QPx3JZ5SEZxUHZR8Iw/uQdXLJbE6O+934v ujuE+tpRyzs1Ba8fid5WG/FG9fLXa5e/VvuSxeWZZwRPuAQmE0djZiACHGwznNpenZBb8iwOh7Jq gV2W3iCGWYljAaByDJlmiAUKfHkJghUESI4PBDwJnc4ALwYyFYUzspRjz/1uw29c5b+blTB33jbv hIblaU3PpoBDRABlWdM6J40HAAegleDLg5qHQIGtuTzx92QHEPNBc8WMKIGdwsslzc8u1tteJXZT yJ6Sh2xsOnhitPOGqf+Oue3aWPOJtvKSc+991/zWgbOvH7mw/ejtz1oH6vqMLWQaSztOjKpJ2mYk MhcgPUiEB9l+pu+esaUDXWjTn79nuNBuPNdhuNSnv2fiTMApmccii0RY4pzaDyCLnox3dV0fPqZu /eKLY6+/V5+9pyZpe5Vyd13ah6cLv7z8WkPP1+2mS2MwAjZO2lJGqECQ2ROzkf4pmXFmjHJvaB7K QEN8nNBjenEqWnXzo0/O5u89nry7TrGrSvV2Veb+xs21rfsvDagHQXWtnzUB89mEtAOm9vumq/hU xZ+oXXepfbRZBwwuLY1QLYVZxkgSHgNIRw5pUceFvpqylvc+PrZuV03Knrqkd9RJe9Xph5q3nek4 1GHEr9DJgJCsljGPDuk6e4y38Yu36S/gu9Q1fnnMeM9iSj7co7vZzly5Z77Sbrh8Z+hyz9g9MHVl 8acA5OlDbS3DjaVX3v+gMX+3OnlXXcJOtXKXOvmzsxsrbn5webR+ELVT+1TLPCYoE+LvjEnHaUOZ LMQZ+Kce7xEt6utE18/11xy8sPvTY0V71anv1Cburk5+V53z1bld9e2HWnXNg6iTVIeGcVJoNA3e N7TeMV68pb94z3S1k23p0l0l9wdufu/4/W7j9XvGS7eZy7fYS23oPF4So+YBUKmySRB4+86I14au e/Rql+HyPcP1O/oWnC90Mi0943fgLwh6F4xlmJS1+MAyZEH2dpgvHb138JtzO/Y1Fb5ZmbRbk/62 Juu9xsLiS3ub+2rvm29oYWQJDKEwzg8b7naNXsTr+e7w6R5TS6f+ErlFLG8gYqIdj+8YYwYJi5tj Te/UZ0BDTb0wG6exakKoOBqA8wIStwcBDtTZQAEt6FG5M5rdE98laCaSikEILVIBy7ohILlxwW/z f/SE6hdzt/omN64A57uGMDC/I46roDGi4ThvdOib8lKImBKXfdBmIo4YPzmXq4dxEn6tgGOS6xE7 jNhuxMZ/+ZaHXGgX722XKHFI9rNTiF1jZC/v33QDmfsg2YcKLRApzUMmyPjwjsN7v08PfjejeqAb MYPI1IvY22jklnGgzTDYbx7H8cEQ1HVh5EwLwjQw4EmMlRlC9NKZOTVLQAMdpPDsGKGh64nohoEI CIzBxKKhH+nb2J4eNDgE4V/fEOroQbe60c0edIc87g6AHNYYV8616hWbJ8pQOhZ8E3UgmG8cRaYx EgtBp5NMCeuRbgT147OyC13pRBfx9z5wZukag2rDiBbpR0EX2ow/SBs7cBv13EODvbBN2FGILjD4 wBYm7ktwAWNQv8JvBPR3fNT1IN1NY9dd1NWGOu6j9vvoRgdq6UIto+gOGW4dguk2cHOjCTsc0ORf DGEMGjhPQ8K7wMvPxI3H6hnblWnmtgAOp0cJ2fv+AGrtNJ/rRpdG0O0h1DYGBHIgiRm4MMxkmSjB b60jfxRWbzXOIboEhIzBUttxHXC0+nSofRhd7WUv9qCrGFVG0dAoqGDBpRqp/SKxaNcjg574pMPV mnWERcZYZz+By01kBHSgVYSfPs6fj7OeU2arfgH3w4npUXK3R8l4u4HDAcrwscl8oZBI9FJGR1Hv IKyZmx3ocje6PozaMb6Nw9KljWyWfFDCWuWog0ZuZt1s0bYzc5MdyKp/An+CntvGpl11qsziBfma JaBUBkOFIVmWGiDd1xwOkKEVznSVuIHg/wpuGtDHDKBmjqCdqwlNrw/OblqQqvanWlXJ9SH/kztD tO33SQ0v41eDaQXyslDIsopCkI5DHmfqKiORhpXMMBUUIKoRzNDyEN4LI4ADxttIt/TdNOfoucBp TJFR2WScHWy4eOg6wgcS2wf3iCFkLYbQ2IiiEdnjXYg5bbi3+3xxxJfrArfK5659+Q9ZL/whc5mg KGrhjpTkIzu/uNV4A40Owx9RT3IHooxFSFlwPw3Q7x81jl4Ybjs13n5a331yvPOU/t5lOBnx9kSX mPtra/f5bVv9TM6il19TtaPhdjR6frTtFNvWxLSeMd48rWs9NXbzBtMLk5N6y2JgjHw5O4asm9bh AfwuZ0fvntK2Nevvnx5pvT7WNspqaXWijx09N9p6lm09brp8Bl0/oW+5YLjVBbAzfg+NfXvzWOLX O0K2Jv4xf9l/Zi/5S9FLfltikw7sKu3AuGEYgURGR0IOQJhRZMa3u7rjcm7xvud2p84revkPuYt/ lxs2Z93zC96JSyh/7UBv/T2ANXA2h+lBk946EE30SBlO3Yh3QJL+L0vqKtwW45+bHIKSEMvELWtY 2QbYC0byLNbanrOdLWQsT9STbM6qFMdMpqdy78KZKhIwxy/OMBO/bFULtGbX1lkelm4uE/8sMvOn e6YIWc02jDjWxjQZrkQL33mFL/MEC4ibMUcce5zjGIPXA0EeMkfMxYeWeRyWXz2zDB1MyECxLO/W wXf89P67xoZtVTHr1Etwtp5e608TAZoLZFm6A9YegdWNnUIBBYpMcvTT7D63NjizOpiYqNIR5tBc zfzM2tC0qoWrvxQrK4MzGhZAbbxORs2YCBQEWeqEk3CA79Y0BRRYR6vIRAmQ/FrHel7ZlOK/Lvxn iUGeKrFDvNBO4U3k1KSu8bL/WbvC7zW5b2H0gsyoptazY1CF44IlsNaD1X4lZv8b/5m8yD1ijlP0 M9Mi/mQvn+ukEDvEih3kIqdob6dVs58MF/jkrXyren8H26+F/UJ2qkV1j3axWrpuSOKX/1a5+L/i n/tNwnP/mbDoD/FLjg21ld89PyfthekRs+1i/mAf8T/CjBdvIO3bmtJnol/8rWrpb1KW/il56Z8U z/4+evEbJZ/rrKMVpolKr4EFeWSMWl2sOXxj/h+jwv4U/+zvEp77rXLh/yjnB2WsuNJ7ewxsuFHD 9Utzo577vWLJfyUs/O+ksN/HLxSmLTtnvlfdc27hVsUPwyUeq0WOOIeSz4ZB0ajZTtHCmVGyH63y fWVnbtPAjSFk0EJ0ZMKhQlXbueVvZvx8deD0lULH1bOnyZ+xj3vGOX6eo8LbPmquZ4x45kqvBZtj D9843ge7ycLgNVn03GmaZEb88o6Jm30DNDDzt94EDZ6iAWdyRFUHJ2/8B6izPHYfwyuM8xQtJrmW m1n+S02M/bLsJKkBm58jZEkDefr5psnb/69CAe84JhRErrDA+2UeW4Z9sDZuS7Ll4xvDvyuThhBZ 2og2GU2QvyAq3EHOjsF25tQudVxOaWB6DalkNliGCuu5Lh5HGOBRCnlGqwH0ZCcmpFCdBi5WfRiY aoFduA/V1c+reTaz5Plv7m/b3pxU2Lg4V+NHOwuw3xtkVq4CwQFJjgbGfumYc0aDVXg5gJtDx79W GfxpM0ABN0oJWg0smSwz49j7ylj3n9eEzYoUuCq8XBUCZxVRU0yCCWgXlQ9e+c5R3s4x4umveBVf 02A4ZY1QgsOh8g3zUNK3236m8AcEUMx2SRJMU8x1TKCWLiCxggHBXSnxVIhmKUWPyb0ee3W2uGjl FzeaiGgRooEFXe86ZGzovvB0pI9rlLenXOq6RuwiF86Ik2Yd/eK3yc97RItdVRL7eC+POKF31ks3 kGGD5suZywRucol9rLdD9LzpsZIZqwT5ZfvGyLCzeWKXYLwz0IEyvNM7EeuXFTFzpcB1jdBJLnCL FbtHiX4RHXJhtAsDHA7jS280//AV/EP4Tw7RXi4Rgl+kL847+ekvEwJdov7sppznHCN0UeIPKHRK FE9PCXKMETvFidzjJG6r5vw+aeG3Vxt7EdOB9G/VffWr+GCMAB4KP8/EICcFmSHFGKvytosHtti0 RKlLvMR19TNPrRatrfyoDapzRIbUOttGax20rz5RPJnqoJx8cLP8eX9rK5y35pnJO8s2on5wMzz0 J3z1Mda2Is3tRBJ1T4hSW5qDVLfQzEwNTVbLHt4Q0CQaDJqIO9jJ4gn8euNkKGAQYh/AwHESEdk8 3cR7UEU7OmDOkE6FkRkHXTvdiT11KTkloaBcSrx9U+pEuU0B1BCK9/Cd4BXX8w2XA7iogM4j1Plk qWW5tZSt5wf+d7V+hdULcw4tP3h7Twe68P75tVkVgWBWRQ2ONZYKAw0JONKyBONAeqM/8T6m7OUH oSDfCgXcyQOwhlNa9kz/rb8ol7hGedmrBHjHuRDNNLsEmVOCr71C5KQUuYACs9hNLjpwvV6HM31I 6o1H+1tDNys8V85xipljlzDbLmmOXfxshxQRyDjjzCIRug+O8UJ8CJLHPIe4ua7xAnwgPhnju6n2 8y4IoTmdKBPEeUxFx9mfJQTjt3NQCaYpvaclCN1T/GYo/RwjhBhSMMLgl3WNEUkKw8+hkbUnvn4s WgqjGWkiu0SBvULoFu2dWrp70GrawjX3acuAMZnxeW28g7TStRHTFTIiFUu6JHGiXyYtOtF/e4Qk 9aXtzY9HApsC3CoTfZxUfh4J/o8nBjjHetklzLVP8bZX4bvhg3HALmaOfYzIWQm+M/h/uiXK3CK9 fy0P+rbj5JZjB34SLnOMfgZ86xLEdnECanlvpyLuNilgjGun9HZM9XFNkHrGiHDYkPjtjl7aDuNi JEJdowP1rGXC2MxObgDZ7mgzf+B0YschSzWA4UUOxolz8MHjmJ26zTTp3ESTEGlqKKBSJ3x9Cesv 6PnNggff4mFQ8DcfNqDyYFRgE+FwkkRkOmwCBCZ952kAMiZujHTwpvboO41JueWgIZzVGJR3NCSl WpJ/PABMZOpl1u3PK+LJHjBe51wAKP0DzCAwjNSLM9XCAk3guvrQwnK/DcVLy1s/6kNtvej2vhPr so/Mz6eTnnR0sZ64aGkkXF5AmAkECqj4ib+VwUhHwyZBgcUmg2ZPAAUXRtq9U5bNjPN1TvJxipfC ok0gru4JQocEbyell3Oi2CHVxy1acKC1cZAUysrbz/0uY+m0iNluCrFHsi+YtqTIQHs5RUKkluY5 Jsx1SJiLt880HCoQI1fi8uDtnOlrpxDgXZNSvLMfqm2cwjA+so/33/iJ3N9Fid907rTEufgAnRYn 8IyX4UDFI1nimCiwU+LDWioojDiLtDnHPvNcI7JTeIEZXJIUw5drpDC78gMtVc9gqYIEQwTo9OPm UfwDDF9tSOu7PtI1TmQX72UHHtM4BBL+Onn+heHbOigJMkdun5oeKQDTSVCSlE2Lxa/s50hMZ2AW TCkEjdlEKf4F5ySZe4o/UDHB2A4jg8Q9PsBVLngqLeixOBmOOpyVc12SvZ2SvBwTvfAv2KuoG6bE Lm4eDg8wnjgopfZxvq7x/o5xkplRku1HDw5xYa+ZlqlsB3Vtt+rEdkO2aj+Ws9Imp7Zk4hNiXLwk gv8sa8LOTjr3WV7uTGUMJ4b30dSYYVM3sKQ2E4okpC4xTgWC+BoaZlstGv5LmXkXYOJNBJingirL dU71XyfHNiz/fR/4zmnlQUbMGghpob/NcOq9hqys4uD8ppD0ekJFI0F+dh2YZU+CgonJAhvj9QC+ /XpGLaFGg42CpOAoSNjll4W+XrasrOUtLcIh6/AAuvfB8Q3gXgfpP+x0OrpIoYZAAVckJKkBzVO4 sIQ2E4GmXg+1Aj4U6E0W6QazGZ+V1ww9v4sOdV3lhdekPfiziOxSZeC+qpqLNyDeia4kCH8yWnbw +tF+xDQM3vLKXeW4hji7qcDtHVSVlCKMJDhcx7/sLp/rHP5n1+jZLnjZ4yMe7x1q65ZEpFkTvd1S ZDNWz9mm3j8MaTJrNLNa1nSi+8bTawJw2DwteR7EGIlC1xRfiCji5uKIwkXl7aGSub7sNS/5pRak Lzz1FYYCZ5B6xsGMyFUldQn3Ti/dq6XmbWTVQenMTOt4UA3WovF2AgUusSJAJ5UAY4ijSvzLhODz wzdIedxYcQegAGANwFDsmhzgoMAnODjU4xgJ3x+cKDmvIQWQNV44RHFRijGY4AtwSAi0U0jBsJJE AiQoEtvF/sUlYZ5rvJdLjMAlWuAcLsTpD85xPJQCZ4UIEEbl75QaZBcvxIj62/glDX3X9ZYI1tKw NpqsSkH0fOfn6eapkn5r2Gzm72iWdzIaLQ/+E62RA/sADkykFebJj4kLYGzZAJM2qcki8sNMuPAY TVYc4L2d2VrEmwINJgoa5ilxwKaC8bCXekgEMvUXRxOBcXXyMloQob2xtzEt+3BofkMoMQIOgmq/ hs7ByfLq+ef+RJpgbR1aqMUcEYi6dOGn4MwiRQ2zOWCmU+K3HuPA5T1ElUWrh/ZHxyfH1xdWLsqs k9Aho2xKRyR8Qh4/wVKpmKhPyqy+hFYooDKnXN5GgzegdjEXR9oFCS/8WO6H17YDWLHg4FlEjJhF eI+7RYl+FOP3VKTfT18UVlw/cQ/pFmxNwvvODcYkBWDrphLgI9ItwWfaqtk4aP+FYr5P0Zpnt6bg 9OF3qUs9w4UOkfMcVRI7HPkn49hYio9X+9h5jyt9fh7tX9LRPMKJ7aCmjqv/pgqzw0d2IpFxxtdA LKFxuO4cI/CI8P6JPDhwbUzGvq3tyLjp1DfOr862h9EMb5ckiVucYFasJKfi3XFkoOU1PWsbGbI4 AtF1I4MsP9wh0tspNcBB5euSFGgXK/ppwoLTAzf10B8x1dw++3ikCDiWSUK4A0oBBjq8r/Gx7iyf NytaPCdjeeiG2LBtimcKXvBcPQ+H905x3u5pvnCp8SLnDJwO/IlWXCHDSpQ5xHi7RM77ZVKY7+aY +a8n4vTkp3Jfl1V/8QB4FNql+sB7JQqdlAKXlXNyyvcNcxUUI/VfMLM80TCulWY086c4Le3/qZJi BvHS3qlO+SnzAxvxLtuKxFTbyqoXyhH1aTrAIjRFudLy/zkgsvHfZCeql/wiwFSVBPaBPczYQhFr fviWt8Qe1rrrVLGW7TWYOS9X+HhjqO/I1XfzS5eAMEidNF1NDL4bwoibGMyVc90BOgVgM2TE4cBE Q8GyWzEUZKilnG5D0/ycyvlFpS+W3dg9BrOikEYzZpDL2H9yY3ZJUE6DlIMCDeUTAvXdSinkNOLq uK4ll5KQxCGz0Y8fFVhXBGsAJyByGLD9SFfTef6r7pOSHbHT4oR2SSJ4JEOa4BQryTvxxTf3z5R1 XaxsP38bDW1v/Hp6OI5+SVSMQ4IUkGF3ihN5Ror+krk8v+x9HDPcQbpOhO4h5gLq/fCq+rm3M2dE 4DRfYq+UAiAkynBQjYOKmWukAZti7gEJBO9Ttqnz2o+UoVBVw3swSTiN7C8nnH1Ee/0kLjD+4Paq visdUKJHfci0qfGL6VFCJ8i7hfbxXu4qkWeUd3b5nlHoMrM2ByBdZkboeXWg8YB1a9zk4BnhGO83 TQHff5G6pHn47hi5hqqbp5+IEkNxj0IB504ldlnj/V+pC3c2H7rK9vUgph2NXUCdH7bWiIpW4/d1 ioPEwQ68sJ9xTBMSs0uJY1KAfaTwZ6r5GRV763W3b4HlN3sDDR9oP7FsbwZ+1jSFl0MaRgywuMIp mJtS+IeM59rRkJGwCDgrlklGHmYq6MHwctgHi4RTQ8HDT0+bchk/Sp8CCqZOzmm3jpYEWa6sMXW2 zlkJIL4P7/eFAvNkFHpg57JmNEXewg+BzJz82F+BAiPvGkh1BSgu2mvM8XXlEQXV84nboxinA2Qc OMSy9XyJbieU7yy6HJT6C3xCkORS+1FwyKoNICJmAUQ5DQTl0qqloB5WEVRYvLSs9b1h1EFsZDnz Mj3q+vTYRiINKsuyFAyt0h/8XMMm9dDQJIVMHzQQh4iqEGKJ0md+QLmE0DyMI7BQ9S/sSnOLIfas yWISG4jxdjt090Q/zHewvYhtRt1/TH1uZpyvg1LsRFJmqLypoMW28v2iy2P3Rwk/QwclOBOhFQFp AT/93WPF/x63AIfW4AObBEVFB6UIB/yPr/L++GzZIDLg31f3XPmhIgiyaZU38YoV4xPZPU72E3ng Zxdr++EioZdjhtdkNjZ86RFNjCGSYVbCRSl0j/LOqHhnxPr3ZfntKpYYs7K30bjv+mg3uYiaSoCF vVL8q+TFzQO3DYR6VH775IwoON8hl8FgSFwpPWJlv1Ytru682AOTFLAsRoBMZcDXc1XfHfZG/PQI kUOs0B7SCgE568G5xkXhi8OYby43DEK3hR2D/j5+C9MwMrUjXcTH62dGQp0B7jbOcRJFLvGiH8pl 1e3ndHRbkeiNZR/YDpas2TaIfVhk+zcD4IcVA7/vF4vQQ6sGD7w6++A03AP9PvZ7vvv3esrf/H2b X2A5QVRw8TvS9m5m+eLsahB1gQHYegk96ym9h5sK1NA6oXXaiBscpiZuMBOtCYJZp1oYYIHsgPQO 1jaGFFYvXFey/Mi1nVp0fxxoGxM+hhQKQPBz8gDy33iAbKCaNB8h6gjgQQGv3muprhCJGP0A0r+y Pc1TTnwYybmG98vMSOGhS3U6GLXAIYXptaNf4SDZSS6ADavwwnmBi0rqvNor8tPNHUB+I6uXMSGe Fq4RBKExMjAftqh/nhiGA2b8+jSbxmiAoWbJZkUbGutHbG3vlR+rguwUApB5T4Biu2OcaEa0JKf6 o06kparrlImnJVDgDlAgA9RKxAm72C1aQKCAsfHUYClPDCLqEQIFfuuiPQAKODdqDAW/Tlp4vv+u gezW0jsnp0cKSIWT1EzSfTAsPC4PSP1uTz8xJmYtzGg92ao6xFZ0XfqlcoFnvB/UFeOFNGOyV0Gb Mq3k3R5qI0J3tGW+FQc2pw0dv41f5KnCcOoFkVWyFCc7M6IEn5yrGgVOIXeyETYgy+fi/tXt/+jr /8uXlaMyiO7saFKkVwZm187PrQ8FnZB6CSXzQPmuzn9CnKQugA4HcZYfZE4wV+2ztjE4Ww1iF3Q0 EgRmG/0za8Xw88qgguIXi1v2aVGXDo2YJ3o94G6ME4RPjq+3yER/PyiguihEXM4KBf2T1E0tUACc tAFkfHlHmoecM2im5oz4iCxu0dCxwS6kD3hT5SIXOivEzglSJ5zFK8U4hQ/dorqBhoZAydvmi6pr gpQZY9RBUMHkle71XAMdedKAw4tf5K4QP71aWj/c2ouMDT1Xf5oYSthNEJxjKHBRSp5WBNaO3xyG C7C+PAcFOCqApmcSHwr2ahFXWDPbBkBm0itpw1CwNsqTBCd/BQpcknEKD6USfNA7xAl+EhtaPXR9 mPOQ58r1NIAeh2SBWbQ7Dac/0DRMkoJrVRI0ZH+eOL9mtFVLqZ3kXpsYA/VvIgwH5oU9mc7RXo6p UkAP4pg5PdL7jYpPR0gdlVfuewQF/+wvS/LSrj9fVPEi0QOHQQPYYvVcuM6DghCiig+YkN5A6/nc fgSbTmJGkE1VBYgbSFqNEAcYhTXz80tePNyKzzKMA0SOFeJrDgqI9GjXRxwU+P5fQEEOlZPFIUp1 MPVM5DG6WT4lDGaFELMCoEBIT21wcSUJAoUCnNpdGOn4t/j5ToQbgw90nB3MSPR9Ksrn65uNw2T0 iPhzWfzricATdTQDFxDWhHfNDTQ4b/2rzgqgHpFMQeKaIJ0VLX3j6Lc9yHCs+9pTqiBiAEdSdair S7zXr74GjGU9g+Nryx+GJgjTo8Bj2i5RwqXzE1Aw2VLcYkCG7mE0K1yDocDiUD8ZCnCC8FiUCDoC 0BaB/ohLrPDPWS9fBytw1koIZC15pR6Z8GsWHf3cJVpkp8AoJ6WfyyFGIFwf3gpTeBNZM6eyC27D 5l5kKKr60CNagLMhexCrlOBYaHq0IPvrXSMTiuXIbDbxW3KPoOCfBQXEA2SspV9dUE5sshvng22Q xTLemrZTJjBGCagiciHBhP4ACP7UAldwbQNIVKWrfTObpLmNsvzqgILDz5Xf+XQYhCghHoB51gmW M17T4D330XFIEGyZCd8LCgItUJCrA6FdK5ONBwWgBIXjf+al7akYCoBOEM9BgUe08NuLtbS6fvBK k+ca+CHeKbBZ8IkZ7eW3IaoNJKq4iQaOmGExomJYE2N5G5z84kWeXb3PJdLLKY47l/HGd10jXPFh IX73413XnozxhUogaLpCpO0U7T1/q/I+FPQsLTbiy4KRZ30jQIGzErzmrVCQXrl3yFLvYnicFrOl 9IOTdL+1a1xjRJxRNYGCXyUvbLaFgmlxAqd4KY587BVCzxhR2Jake8gwZoU41spwBZ4/jnb2XCj1 lIOHHf59Z5CiFTmvESzdldoJXCzO041vPIH/D6PZnmPfTSdQAPcBo0GCcMYaYfrn24ZJP4XmFBaN 7kdQ8E+HAhzjjjZ3V2AoSKvzSyeyOZaS4ATBGNp2gAacQTBt7VkHAUBSoNYvvx5mjog4/wIo5dX4 rit9vuLWO4Mw+AaS9XT6lT+jQdwl+j45thncJTSS7O8fGIDLPAcFgZ+cy7aBAl7PiEIBXtLLdqRD 2TARoMDBEhUcuqIhE3bsjrpv3GOkJDcXAgNfKfSIlaV8twOYQmYjGWEjG5C1mDNbq9/4ywgBvhYZ D3WeeTJG5hIrckzyoUQm+xiB7xYFQEHnlR/G+XPspiR4d7y752+K6YKOv4GHXTDqSKHARQEsPuj0 kdwcRwUDlnEb1jxJlxKg4B7S+RZGAxQkSf4KFGBgcVRJnOIlOP7Bu/Wl3TndpBxqIrYoPNY/a0QM vpgPL1dhkAQGkQoqgXhfu8eIw9/L7yX1E+r1Ck4NZiM3fgXZiuHDk0dmRAkckzlCl128N86e0r/Y PkTnD6lS1qOo4F+iWEC4xmjwfF9FftkL6fWBIEXS5EfadiGcSkAdlSHibM4y+MrG9f5kaCgEPzET xwaNATnVPgXq0MK6sNQSv4LSpVWt+7SoXQdDUqCrQweuzUQ71cx5fBjHAAo25leE5IAO1feEAtJi IENP4Lj0yflMPVBr/wYUuMoFNEGgW2wGhoKrDfgI60PM2uL33eSkro6j90SBfZLMNUKwreGrQRhu pU4QLCeOZw1s2AnLY7yo8cHaqL31q4QFbrFSgIJ4KEo4KyEL6ERjx7uvQtlQJSC6STI7pcAzRrxo Y2w/iA5Y1GVhdA+gYF0j1AoI7xeu000hnhEhyimDqMCEJvWGrAZeqAPpAvJJB4FAAXxMAgVnB+7q LVAwM1JI6hgk0oiXeEZ4rXobb2pGz2fcTGxQHKLov7nRiHEJPwUHEnYxXvjFnaO85R+sHSBzRtaD BaCAVhtIRvbZmfInYqV2inmOqaBei287zhcyvtwxSPSDpmARP4KCf2axQG9EIy1DYIiZ0xCS3gim jZTvZxUMoZ1E3lASN4BAJxAxFGQ0BoIkO0hA+66rDy0oD1tXtqL89j7KIyIDnjSfNlJPUmtqSQQb uz45vj6/Yn5Ovez/BQowCn16Ll1PnZQf6DRZoeBFKxTA/pLgvYD3xbeX1EPI2I/YorKP3KLgPJ2W Ioa+f6J0uly6rf5LnJ5DIs/jn4MTFQEBOmML9qqkjKdF6PjYnf9MCHOPIyX6eOhF4qhgdsHLPUh/ svf6kwp/vI9wko4TEKAtRXov2hAzQAZsSZZt5kOBezTUCsilit0V4lmrRXmle4et1p4PgQL/gr8G BaV3oJlI8yMMCE5K0WNrRFF7i3og1Of1py1SVmbyrC8v13pGiuxJVIAvHr+4h1yk+Gj9IDKMUw9z rqsCE/W0pInv1/7TZR7hUDYE9INASOQa5ZX65fYBaDuSBcCaHt72egQF/8gvoBno0dh9dGVj5QrI BcC0y4+4EILnI9HXlUGvsIG0BqghO+kqUmd2kPrHOUVjQLrGL436d1cFFB1+tqL1AzC9hZ3BPqiL MuFLi8ZG0d3PT2/IPBKca3G8/V5QAH6+1AmrXLr/XLqBqhghNFkohqzMHhwV7MygCYIVCmZFCA9c 1WAo6EOmLfVfu632xoc1cG8ADYCIWHCY69+Zx/S0umKyaMRjaOOggBNKgtG/mv4rP5X7uylkhI0M Ifo0ubfsdXz0M5r2C08lhsAPVUIy3iieES1asiF2gFcrsPR0jGs1n3vG+djF4VcA6PBQSh4PF2cX vz2Mgcds5o+uW5MUHKvfQtq5aStwIk9ycyhdTgkFHOsgCa7BM8o7/N1CGhVM9suCDwtshK8vq3FU MI1UGmkNxH2NMPaDoiEaFVjSFSOJ/OmL4Lf7+HQp/oCEiiAmZUyh+xpByhfbhogKxAMMn0dQ8M+F ApA1GEb39x1Pzq8KSa2Q5TcFg5FrtSyjBo5pcPcAWwqYKoJpgjof6ksLE0Z1Phk1EsInpLMAgfl1 C/KLF5W0bh9D95kH5qwfZFMTd7m7n54oyisHk3RbQtHf8VCDIj2dQcivDtrfnA1QwJoRj/VtXW84 OMEH34NQgKOCb1rqhqHVyO47VfaE3IfmwjS9dY+TPL8ttR+U8IycLoUZ6cBzhNpcWXyxzdBBMICS D/PB5Sp8fLsqfYgJLLD9nWOEYTtT8FF4ovv6k/GBwC9K4ri+eKcsJgmCzjrkTlg3+Ho2Hv3aNVLo kOhrl+oDMwhxoumRgpj9m0coYhBuOxUTg4ELckeHkeGkrv1PWctdlBIoSxIocFJMAQUEoySUWeE+ JRSYJwhaGKZw4IShAKOHPWlnUCiI+bBo4AEoMFhiCh1iPzpTChNViY+g4H9FgkCPs2FNx/68w6C8 naOWFGp8CxvBLC9Tzdkc0NogqLI3BuVpgIoMzuz1stwGaUGTPxCKNCCen3tkUenN94dRpxF4xZQ/ wNJjdPIaY2k9flSH2j87tSm38lmrkOnf/wDbRA2EMdnqwLyyBV+dW2/ESYDturLm9AZktEIB6SAQ zYEEqBVgKNASYa66+1d+rgh1VoimKclmiRe6qKS/TgzTjFwf4wymOaKskUuIifGZwUA/IWUmrNiX 85gcuEN2KjL0FDvPPUaaDKc5e7zz6hOqADglU2WEashBQS8kSjbeSTgOefPYAfdwgZ1KCjR+ldAZ 5+kxwtCdiTh3AJ4eyxlU6Ig0EOmFAtuwpPfSrCgfJ5izmAIKJtiGMERA2YZit+jJUMBH7ElQMM1S jZwMBSY6JGVmLFCAP9GHZ0pxHvEICv63fBH1m/EO86UdVUnrKxfn18jyaoSgFkJG/zIbgsGdk5qD EHEAvO+yoHXoTwcTMmulBZrAAvWCgiOLi1u3D4PNHGi4EaoJUeQ22yotTNBlwQdAh7pxNpFV+ix+ l+8bFeQ1BGapwYgnrz4st/i5ypvvGaFW8OAcCsuHAkszUWLlFXx7pX4UJnzRXTQqzFuJFzk+VWHu HijHYs9Igeq7bZ3Q9zQSahyyGFOS0U6W9OChzgaihRXtzT+PC3CLEzkncHQ+j1T/WdHSL+4cw/v0 WPvlH8UHQYciRUJGpMX40FzEhwJkhQL9vjNlT0bLIEEg8ghQr4sV/LnolevGXj1LNHv1Bq4TZ4Jr MJmMOPDYcvoQcBTjYQM+mCBMhoKUCSjot4UCHm+fg4IZkZOhQP5hUf/fDQXkAWXDtM8fAgWPyob/ xAaCmVa9QCJ7HI0eaytZe+D5dZXB6zV+eWppRi0xKQamAXCJwYSoMRj/EGzCNED6xWEAeG3XBePg vLD42cobH2hR1zgag8SZk/xnrYKNNlBgtoSU0MAabhltKihZnqOe/32hAOaX1TCUtFazdG1x+IWR OiLNbX5wJI2fIHiuwTgACQKwDRMk+LD79krDGFmcQ8icdfDtx1Z5z0zwwzE5kAZVApx3PxXj/8mV OnJuWmS4uLEUy7+NoDt8Cw2EbpTjeNsxnjQrQR4Epn1npy+7xPZiqDnddePHCaF2QAkW0VP7YVCg RbpDrceejsTZio+dJeuHikGE9ycXa0bI1dI7bDaMUw12/AG7kdHvNYV7nIxU9kT0WfYq8S9TJqCg gnQQJkFBxDuFtJTHrxqaHg4F+JU9ooUxH6zvp8+yJAgM4uRDKfWRnyA8goJ/9ZDARCULQABzBPUd vPhmUfHiQuKVAMIjDaEpdYHp9YEFhIFMK/Z5Db5gPKH2xVCQX7cgryJs7ZHny1p3jaEuIwiEEql2 NDFmYjmXbScyzEbOpgSNdaPWnXWJOWVh2eBH9ndDAfjQyYjjtn925ZK31Nn3wYhcb4EC1hYKuLLh 8p0ZMwgUENYxBAZ4hX/TohkjgvhjCDX0X/uPNYH4yMNQYBc3zzkZWvAesZKfx4Z8fLWuC8YGQZZ3 nNFR4QgtMHOAWXTN0PP8WykzV3u7wTzjXIckKXDz8OtHCTeUfzAEAqGm0z23fqgIom0Fu3g4tfGh SaFAZ2ELWHoBzPGea78I93dVgnncNKrISthKwuxV503dPRx6cOPtOmiGGneePPyk3N8hVgjaRwle OPiBsFwl/vfUhWcGgVegJ1AwK4L8nAcFkW8XDlkdNyxCHA9CAZCdCBRghMHRFIaCAeuzWDp0Z7ZK 4uhsy4aPoOBfnFbAUn0P1kCEevVd6Ppn5zYVlIRllEugON8Ykkq6dWubfHNqhLlqPxwYZIJ/gSTr qBS6h+VBRUeWV7d+PAbq1qCYpNdze5xlmcmzWhNDAQzRBoeRagbptKiz9s4n60peyquZn1Xn9/dD Qb5Gih84W8kpf6H07pf9MIvE8GRtWFsogGbiBBQkQdEMpwmzIgAKRkm9C0fIOPlN2L8ZOIcJEsdU fA564Z3rmCB1lkuflAcmHNx9THunl0ipjxDuDYaXq2h46+mSv+Stco4ibXflHLuEOfhQxjjgGif+ bdKilrEOhngzHe9q/UFcIN6G+NdA8MQCBUTsiOWrSzGIuWvq98+PcF7D8ZGArhwvcFKKZsh9xZti v+260M6Jrhvx01vRyLbm0qdiQ+xj8K+BjqsTUCPI6c+DAowwVbdOPh4uJF0AqBXQsmH0nsJhMhfM qxYixhYKZkYCE8MKBRjiYh8GBSbKWAYomGmFgqQJKKBsQ96WfwQF/wp0Q5NVN0bHgmVzH2r97tqW zdWvZBYvyKldnF23IFMdAIJCanGu2ie/IZj4l4FjY9qRgC21EZqO/eOo10jFo0wc/9ZMS+zmB9Uk OP00g1lPtQdJQDLcg1p2VaYWVj6Xq7aQFqhyssb68LUdUiDetXViHL0UVIVtqVe1oxtaYl9Iu9wT kuA8KCAzCBn4nIKNQCYTKRTgBMECBeYxxFww3PuvlOdcYiXTlDApQMTK8DKWOSp93cNFv1EtXr4t o6j4va21XxQe3if/ePO8vFUe4TIHuQzMoBO87VNxSOw9TSn0jPdxe3XeW6e+o7QEkC4BvYJgexBE gvl9fBnWqEBvK4WB9yzem1lf7fRYDQxhWtaA8oVK5KCUOq+R/Jsq7Pk92evL3n+r5rPUb7cHvBbn 8qrQVRkwLdHPjugLTVPNo1BgSRBuTwEFpIPgiaHg7XwCBSwfCixm9FwzEd8oKxTQBOFBKGCt5zwX FZQDFMQLyN2GZ+FYwhoVTIaCR2XDf+YXdViYEIYiR4AWp/znBio/Or5+3ZFV2cWLc6pCcqp9Myq8 M6vE2TW+meWBWYfDNldEfH1xy1VtA4kHjDZz2GZ2Qrph6mgEZMnpn5sqEOrNQ9cGmjaXvZJfGZhb JcFnPZjl1YMLW3o9iJOkE2GTnEaiiw6dzUCMGEUaWWG535aKyDMDZVo0bLBkzxavB5bftmCgXcgs 25qCoQDCY9jmYvsUH89I0YHrGAoMBk4Uj+1Dhq+uNf0k3N9NDhNJjml+0FiEKAKEC3Du7xrh5Rnh 7RHuhR/u+Ltc5K70cYyDsQWgKycKHZNlLgqZ+yph+PvrOiF6B/ouTiuO9l5/PNYf9H9IzI9TD3wx IRvWdEOthmwpk3U6A5/4ujPau3+IX+IRIQSiUbKvXTzoIzkkiZ2UAtdYoVuk9/SV82as8poe7uUS OY+IE/raJ/jZqcjEUAJOgrxxcOIWL/2lKvT80F09GHMwZTePPxElJi0SaDjia54ZLYzcnWuBAnaS Qi9JgpgvWwAKXBJ9AApIrcM9TmJNEBiDiUsrzFxb0wgmKaaPzlbgWwSz2JkBdiqBU6IU367kL7f1 wzKz9npND1EeeAQF/1go4Ks+WkYDDKBTPTiAbl0erj1ybefeo2nbNGu2NUZtrQ/f2RT7cXNe1Z29 18cbhsGQbpjmBQ+RS3roX9NaSbAUGNEo6q7v2I+jkfyy4A0NoVnVMpws5B5bkKbxT6sHrmNmE4AD EAs1wbn1gQV1wQWl/kUHnzva8aUW9YxTQVc6JsiZX7B8RVkDZNMGHBVMl0uBNZfqAwm7CrSJvr1S P06qJSYzPPRADzBsbzjwxCpY8HaxAugFAG+WDBQk49NZZE/Iw/SYtlOAJphzkgyfxThJB/2iKC/P cPHit9KuMP1aggPEWoWp67j4dMJ8KO/HzbOj9J41ogWbY7vBZIc6/AKrmfwJ8GUA0WhH3dc/Xe3r JpfZKWVw4uO3U87DaQstaTooRW6JEpd4qHDC5SXKHBQ+TgqpvYLAXTJcrUus8DeJC5sH28ZBa8UA Q8rh3qDVTCAOX/9ja0QRb+cNIgMzlWA4oZ0YMRTMXA19SRhtJrmVc5S34uNN3eC7YdHNYThtQOKx AeIJHzdXzoqG2S6qnmqvED4eI03+ensnfF7LdOUjKPhXqBlOKQNFNigRa9USe+j+EdTZi250MFfu GVv60B0t6sY/NBDnO7NVYpqn7Waa8pVtOhdmqyeO9d8G4gWp6S3eXC7POriwQB2WrSYe8Y2clmm6 2gf8ajVkULpallcetEMtP9n97SCMOYzTPJfIbjB8KOCN6rDdiFm+KxOoxQqIkPHKxFsGpE0vN+jB q4vbjIwBwvVexGw/+d3T0b6e4UIPBcQDDklk7h5n7oSWDEEv6cvDoAF+NTKvh2Fheqxk1quCl3fn XjP343gANgiME0Nx72hny0+UITjaB3lw2tOXi8I2Qa3AhFhrbdVEfByInyZoLOQeeHtWuI+H0h9v c4gK0qR2qUI6JUHQydtO6eVIr0QldY2RPZ25xCPJDwCH9CsdY4W/Tlp4eqR9GPRVjKXtpx9bI8bX iVEFg6FLsg9OEFbszuolcqwTUxu2UcGBq5onV0s9lTIc/GCsc06QQtnw/XUDFj1zk5EL84wmA20f jyLmkzMVT0aKcViC77Nrkq+HSjorQpj02Zv9tGxoIj5pU+kQPoKCf/AXM2EZMClrozUEE/Gns0ox cyO6+NxkWKN1oMzM8hmzXLmJ+atQgGwMhalnFrhKjCHjEBq8Zjj+yan1RcWvFJY9n1MWllM5P7c2 tLBuPgaHgqqw/PIl2YcWbaxa/v6pjMujNSQeGKMFLugBABLoJyUIVijoQcwL21JnRkinq3w846TT ldLH4v2eXCUqvtQwDoYwDLcPuRkcXQ/SH7xzVJq38rGXvWZES1xiRS4qKZ3xJ3p9IhIqi0l0Ae17 fGi6hM/7WZRfUfn77Ug7amOiBWZ/JztafiYPwsDirMBBvghjEd5QC4qiBygUkHIqT/4X7u04MtxH 42urP3l8pdQjSuokJ3LoCfMAB1LFdqk4cQA/aBxmuCf4OId7CzZG5Z360mnVHM94mbNChEMCj1jJ f6jCzgy3jwAdkSm+eeyHkWJPldRNAZ/IXSF+PEoY8U5+jwUKzLZQYAYoMH59vvpHr0pmKXwwdkFu Eid6PFyo/GADaUHyBKMo8Yq6NyJ2/8nyWSvmzoiT4I/sGiPyjBE9sRrGkQYsowoANYxh8sAIspX6 fPT1D4kKbEGYsfi5MJxLI0/1ERwAjSzPRcLiB2HmjMWn6ub/1ZIlFb+xDUkYyJoHtKjj0kD916d3 vFOfvflIeOHBZ9ceXrj2u8WvHXl1X13WoXN7zvfVa0EDQTuGdNRzhFIALZUKTl3fZNtMxBth5esp jz0/d/orc2et9Jr5ypyZK71+8ILXkYs4KmAnRHdZmLBjiD/gGNJfN3QWHtozL2u5x4rZUHKMmutK xntxRkAIPCL7WG/7yDl4Uz8t91m5L7ext2UIgm1yQxiOkoRfEJ+cZ9tafvWq78wVc34YLnrs1bmP RXg/8YrXovyobuochHMTE0uVxAjbw0jgzTBGGBHfXm+S5Yc/HRvguPovjnFznRNp4A29TneVyC1q 7oxX5wVtkjeMtn5+re7HKwT4Az4ZJZr+6hz8j9/LFzTfv0HqoqbaayefWjr38Ve9Hl8p/EGE6LHV Xj9YPlu+PWfAYg/9IBTgkOnr0xU/XiHyXO3lvnrezGjhjCjB4y/Nke/K60M6WqKBWrGZqzlS5RN8 w788Xv7Uy94eq+a6h3t5RgqmR3pjZEj9eEsvFbfklKnZR1Dwr9BMtI0HGEu5j9ja0s1umphX5Wm3 moFdBiQ3YvHMST3/vbKT/OyAfzVmbmwRn+uQmGjRvTumE63mykvGzy8wH1zUfdjKHOxBZ8fQfR2I IoKJCxnDgek4ep1mvZFCgZnXm+P09okdcE372Y9u1u++VbHnZsW7d6reblPvu1rdquvSAgSZmAmQ hO4GjFTDTtR3I/1x1Lbl0uEF76c9szXiB+nBOOgFkyOl6LG0wF9teNH/g+SkhncPjVxoQ+P9kD4b OclBExd9GUhwdV/f9+7p4p2Xi3ddLt7ZcviNC99uu3Dwm+t1vWBhYKSh1LiRMXEjexw+G4lhcRfS XUEj26+WLv4s879fX/Z4BnFZUordE2RPZy0IeDdh/fH9V9AQBo1zo7d3nTm4/fLhrZe+23bl8Fst h98+U9zP+WSxd0c79545/Pa1sh0tJVsuwi/sPHeg/PoJrcVk04wmhNXolsR34Jqxc8vp7968Xf7a jSMbrx/ccOXAGxcOVHWeG0LMqMnA28MsHZUiXq7spaG7r5384vVbRzZeO7TxRvG6a9+9cek7dU/L MFUxokcMyzwUCsyP9ug/6Ov/AH8FeI4KZW5kc3RyZWFtCmVuZG9iago5IDAgb2JqCjM4NzAyCmVu ZG9iagoxMyAwIG9iago8PCAvTGVuZ3RoIDE0IDAgUiAvTiAzIC9BbHRlcm5hdGUgL0RldmljZVJH QiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNp9kk9IFFEcx7+zJUKsBWUmUvBOtgdX Bu1gHYzd9W/Ktqxrpgiyzr7ZHZ2dnd7MbiUeQoguQdYxuljRSTqGBw8dAg8RgmJdIugoGQSCl5Dt NzO77ojagzfvM7//v997QF0obZp6gAF5wxbJ/ii7Oz7B6jdQhwYEQSutWGYkkRh2mWxxZO19heSc m+Hj9f9dDYISAhJVgMasx9ccnvZ4wOH7tmkTTzqs5NIZYpO4TaSSMeJXxGezPp72cYZbCvEy8U3F FBQnkCIeKClZJ+YOsWxkNIPkl4m7MpaSJybfwFNnFl6Z9hDQfQU49bkmm7CA5XfApdaaLNQMXBwD Vjprst2kOx+pad1SOztckRSMAnU/yuXdVqD+BbD/vFz++7pc3n9DOb4DH3WlKEqVGUnSF8Drw12N /dzgQlOYc18JUVA1nftGerza69eLR/Ulq3QSezNxVxewRPcwdgYYegy8/AlcfQ9c+AAkGoDUdQQe obpt/sDNEyuYD4WWzdmsQ5Y7WNg5OlmEXghnsULeLNpcsEFDaW9jaV1nrqnFBLe4KPFMO/J6sdrv OdpBboyO0EnzCqjc6q2wNJNJ99DdoJ14I8N7ep13Qbyoan2DzoXQ/qSKvlGPpfOaPZjyONBt6PHh CsMoxG97MbFj2tFkNb5VGumtymfStxJ0tpD8xmxhyLFpIt/QXC415rGUmsvF4hVexTh0cGgw6GuA IYl+RBGGCYECVNJoZKGRlLs2gtjC7LGWOhI+ZqTfJp9t1+ceiuTteN1BNI6FtoMITP4m/5a35CX5 rfxrsaUYqmkWxJSmrD/7Q3GdzNW4FW2lJi++QnkjpNWRJWn+oCfLV6mvOtVYbKlFcnLwJ/E9X5fc lymMaTfSrJup5Oos+kZ82U6aHtmuza8213JtnV6Z3AyuzR+aVeFIV/ygq8P/NTu/P/8HzbABaApl bmRzdHJlYW0KZW5kb2JqCjE0IDAgb2JqCjcwNgplbmRvYmoKNSAwIG9iagpbIC9JQ0NCYXNlZCAx MyAwIFIgXQplbmRvYmoKMTIgMCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9NZWRpYUJveCBbMCAwIDYx MiA3OTJdIC9Db3VudCAxIC9LaWRzIFsgMSAwIFIgXSA+PgplbmRvYmoKMTUgMCBvYmoKPDwgL1R5 cGUgL0NhdGFsb2cgL1BhZ2VzIDEyIDAgUiA+PgplbmRvYmoKMTYgMCBvYmoKPDwgL0xlbmd0aCAx NyAwIFIgL0xlbmd0aDEgMTQwMjQgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCnja7Zpp WFPX+vbXSkIChJAEmSRAggGqBcRZHCqRSZCiIsQmOIGAYutAUZxRqm21tHaydq7a0bZ02Gxtxdaq nUdra+dZO0+22ul0Qv733g+PtV7n9Mt5v7zXdUJ+ue/nWUPWXnuv5UIVUghhFa3CKAbUzq9pFDYx Fpk9ILF2yWLPg5t2/Qb/thAh4bMb58z/5ZeyCPhPhQhLmDNv+ez7Zz4aLYQdVYymhvqauuMDn5kp RJQJiWENSNg2mHcjHo04tWH+4mU2g3gQcTVix7yFtTWGVDkPcSPi8Pk1yxq9t6Vdi3gVYs+Cmvn1 X0RWX474Zi1ubKpv7P7688OIMb5UK3JSaOMXIkKYhQOaguuQwCCEZYsQJzaJU1+TxLliEa61VVws NopNYp94T8wS6+BuENvEXeIeoYjHxfPiLfH/8HViech8EWHchRH2EqL79+6jJ+4CnSGRp2Q2Iepl 8vyV6XZ0f3da7rsTm7odJzrNUSJcb2szHEL2R9nV/bshV4u7h2mxYT28XW9x3LLlxIMntp82B+Wi SkwV08R0US1qcP11okHMxcycJ+aJ+WKBHi1A2Rx8zkY0E7VqUUvzf9VaKBpBk1gsmsUS/DTCL+qJ tLLz9bhZLMXPMrFcrBArxSrR0vO5VM+sQskKPV4GVos1uDMXiLW6Y6XMOnGhuAh3bb3YIC75x+iS k65NXCouw32+XFzxH/3Gv0VX4ucqcTWeh2vEZnGtuB7PxU3i5tOy1+n5G8UWsRXPjFa2GZmtutNK 94hnxEPiATznD+tzWYtZoxnheZmtz2Ej5mAVrnDdKSOm+Vt6crZW49q1a2vrudJlyK89pcWSnnnU aq5DTeqF7oPWS8tpM3ElroH8X1dE0Wb9+v/Knjor/5Tl+bj5lJm5SY80d3r2P/lrxS1YgbfiU5tV zd0GT26r7k/NbzlZd5se3y7uEHfiXmzXHStl7oLfLu7G2r5XtIv78POXP9WRPiDu1++cIjqEKnaI nbiTD4tdolPP/1PZv8vv6MmrJzO7xSPiUTwhe8V+7DRP4IczjyG3ryf7lJ6j+AnxJGKtFkXPiGex Q70gXhQviYPiaUQv65/PIXpFHBKvibekDe5V8RU+u4DwjaubOWP6tKlVwYC/smJy+aSJE8rOLh1f UjyuqLAgP2+sL3fMWaNHjRyRM3zY0Oz+WZl909NSvX3c8dFOh91mDQ8LtZhDTEaDFJmF3qJqj5Je rZjSvcXFWVrsrUGi5pREteJBqujvdRRPtV7N8/eaPtScfVpNH9X0nawpHZ7RYnRWpqfQ61EOFHg9 nbKqPAC/scAb9ChHdV+me1O6HtgQpKSghacwvqHAo8hqT6FStKShrbC6AP11WMPzvfn14VmZoiPc CmuFU/p6Gztk3zFSN4a+hSM7DCLUpn2tYkwrrKlTJpUHCgtcKSlBPSfy9b4Uc75i0fvyzNXGLC71 dGTub7us0yFmVWdE1HnraqYFFGMNGrUZC9va1ivODKWft0Dpt+LTeFxyvZLpLShUMrzorHTyyS+Q Skiaw+tp+1lg8N6j3/49U9OTMac5fhaa1S7x5DShnL3A2DBCXF9KijaWSzt9YhYCpbU8QLFHzHKp wpedEVQM1VrJfi6J8WslrVxysnm1N0W7VYXVPe8lDfFK6yxPViZmX3+n4Y1yj2JMr55V26BpTX2b t6CA5q0yoPgKYHw1Pdda2DEgG/VrqnERc7VpKA8o2d5GJdqbRxWQ8Gj3YG5FQG/S00yJzldEdW1P KyW7sEAbl6ewrbqABqj15S0P7BaDuw93DPG4dgwWQ0RQG4cSm4+bkl7YFqibrbirXXV4Pmd7Aq4U xRfE9AW9gfqgdpe8DqXfYXxdiv6Neitc22m1ubJ25Za0UE/A4DIGtbuFhKcIH9680Shw4HbpoXZH 80Z7AtIluBq+paeG5v7WDwJjWn6xVmTUmuYXu1KCKfT6hyG5esYUkqaEntKXA4mTY6Lv+Y9Do9ra gPp5CusLThng3zoN6RlgT2//fpwGbS56vhgtQrXbWcxFxjSsXOQM6EZPaXcx3qOISZ6At94b9OIZ 8k0KaNemzbV+f0srvKXlVQH9bvc8JZV/i6g8hyJFpKCYA0M+nsGiDBffVj0ep8cnw+LTiku42NMW 6i2taNM69/Z0KDxYQbhoc3pJzaU5UUOwNIuwu3mLarweh6eoraazu3VWW4fP19ZYWN0wUuvDW1LX 5q0IjHbpY50caHGt0L4qSpTK0sq8rEzsPXkdXrmhvMMnN1RUBXbjcOvZUBlQDdKQX50X7EhFWWC3 B5u7njVoWS2pBR4t0HqajCBUr+/a7ROiVS816Qk9ru2UQs+Fck6K2k4D5RycMyBnopxPz2kv3KT4 BkwxtttCT512e1YFG9qqg9riErG4lXhLRXrHCMXgHdMhDeYIJdxbn6dYvXlaPlfL51LerOUteDBk rMTkaHtSW7UX+xQeqIBwSXoUjVqXns7u7spAygHX0WAKHrVpoCqghGVg7w9JG4964zSqkR6ntNbW aOMQ/oDW1pJWUhvEY8sdokqJEoYewnp6QI0ivY32OKJRLe4NbqDevhWB0hpUghnalwbmBvXH2aGI Yu9I3HbqMyRd+6LsYFuUd5C+NrEUwtPWaxKGsYmKAGVcCPFlQZokSwRGXutFUW21B7NtErUVeNRp Lw13UaYeW6IpvV4n3NVTKLTLMqZZbeFKWH90iLfmrf21JRmSZgkGafB6tL6nAr7boVgxovRTprKn AWYHRSXaWPBej6FqVR/XuinvFJO9y7CzaIPWe7KgWLGlldRg86f2VmS8Odw4VNsjrD19PEVZi3bl EZh3Y1plZ/d27/KUU15ZmV7tDwftwRQu/M7oE8G20xPK1IyszNDTszY93dYWavv3DWi+Qm0nVUt6 CvGnBiqG4De0RcZD+I3KKCxihCgTE8TUPcImJ4tYMVI+9FBMQUFolmWvzMdC8MhKESqkzPfZTQbb roSEXO+uoeaNRmdJp8zamWvZaDCI3K4Pu17O7vrwaNSI7KMy+4MjHx5xHH/ZOSJ78JHXjwwcIJ0p Tp3oSIPFEm329ulvGHpG+rDBgweNMQwdku7tE2nQc0OGDR9jHDwo2WCM5swYgxZL46E/q4wTu8yG 1d7cKYNDkhPs0TZziCExPiprdJqjYmra6P5JFqPFbAwJtfQdntendF5hn3ctzqSY2KSo0NCopNiY JKel672QyN9/CIn8I980749rjOZR03JTjdeHhxpMZnNncnzvM0ellEyx93KYrL0czthQS5Qzom/B tK6LYxK1PhJjYqivrjL6LfzEF8bwkL0iRoR2OEJEdvbAAXGRRm3UwyVdheVuky06KaZ3SpTJbJhu svVKjuntiTKFHLfZQ00WWy+beaXNHma0RETb0N8DQhi3hsSJ/uIzX2pqskxNkqmJ0uuSqQkytbdM j5fpcbJflOznlFEehywb0Nm932ezG8qqB0jhscoy0a+z+8sdKIEe22HvUZuuv+yI0PXXHVZNDU5f ZHK81ijeqn1anZ3dh7Um0Nd3oE/ofq2rU/L7tS6gx3xhaLENd7RXVKfM3eGd3M/RKS0d5kqRe3RQ btcBmT09Q38dyHgqY/Bx3T6dMXDA9AyRIaeffKVp9ziFb3KK02I2p6drfngaTV+MU38UtprDbZau aZYIq9kcZguVkb/3iosMMZqtYfJMU0RUfFS8J8r8dWhkWEhBrwSHxeJI6BWV4Awzvr053GRLjnPG OyLM+4wmkzRZrOY/rghzJgj9/gntb0wmJxbnz7SP/ln0DtX/quDZ+L3X/6X6KtmLMEyrK3raWbZ0 vStE+IQ/B564LOzhnr+N+etlMkWi2kHczTgh4XFf8RvbbeIFubbne0347SkEv3lZ0KtDZIt6Ibzx qVbkpV4jqqdPs0BPxRMnTyqoysivmTd3VtNcNczo6TRcuDMsXo6HWcdmLZsL2LSyWcNmNZsWNqvY rGSzgs1yNsvYLGWzhE0zm8VsFrE5n00jm4VsFrCZz2Yem/PYnMtmLpsGNnPYzGZTz6aOTS2bWWxq 2FSzmclmBpvpbKaxmcqmik2QTYDNOWymsPGzqWRTwWYym3I2k9hMZDOBTRmbs9mUshnPpoRNMZtx bIrYFLIpYJPPJo/NWDY+NrlsxrA5i81oNqPYjGQzgk0Om+FshrEZymYIm8FsBrEZyGYAm2w2/dlk sclkk8HmTDb92PRlcwabdDZpbFLZeNn0YZPCxsPGzSaZTRKbRDYuNglserOJZxPHJpZNDJtoNr3Y RLFxsnGwsbOJZGNjE8HGyiacTRibUDYWNmY2IWxMbIxsDGwkG9FjZDebE2y62PzJ5g82v7P5jc2v bP7F5hc2P7P5ic2PbH5gc5zNMTbfs/mOzVE237L5hs3XbL5i8yWbL9h8zuYzNp+y+YTNx2yOsDnM 5iM2H7L5gM37bN5j8y6bd9i8zeYtNm+yeYPN62xeY3OIzatsXmFzkM3LbA6weYnNi2xeYPM8m+fY PMvmGTZPs3mKzZNsnmDzOJv9bPax2cvmMTZ72DzK5hE2u9l0stnF5mE2D7HZyWYHG5VNBxuFzYNs HmBzP5v72LSzuZfNPWzuZrOdzV1s7mRzB5vb2dzG5lY229hsZbOFzS1sbmZzE5sb2dzA5no217G5 ls1mNtew2cTmajZXsbmSzRVsLmezkc1lbC5l08bmEjYb2KxnczGbi9jwsUfysUfysUfysUfysUfy sUfysUfysUfysUfysUfysUfysUfysUfysUfysUfysUfysUfysUc2seHzj+Tzj+Tzj+Tzj+Tzj+Tz j+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tz j+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Tzj+Rjj+Rjj+Rjj+TTjuTTjuTTjuTTjuTTjuTTjuTTjuTTjuTT jszfoRmcmtXkMW6cmdXkGMhaii5Qk0dCWilaQ7JaTY6AtFC0imQlyQqS5WrSWMgyNSkfspRkCUkz lS2maBFJEyXPV5PyII0kC0kWUJX5JPNIzlMTCyHnkswlaSCZQzJbTSyA1FNUR1JLMoukhqSaZCbJ DGo3naJpJFNJqkiCJAGSc0imkPhJKkkqSCaTlJNMIplIMoGkjORsklKS8aqrBFJCUqy6xkPGkRSp rlJIoeo6G1JAkk+SR2VjqZ2PJJfajSE5i2Q01RxFMpKajyDJIRlOMoxkKHU2hGQw9TKIZCDJAOos m6Q/tcsiySTJIDmTpB9JX5IzqOt0kjTqM5XES9KHuk4h8VA7N0kySRJJIomLJEFNmADpTRKvJkyE xJHEUjKGJJqSvUiiSJxU5iCxUzKSxEYSQWVWknCSMCoLJbGQmNXekyAhau9yiInESEkDRZJE6CK7 SU7oVWQXRX+S/EHyO5X9RtGvJP8i+YXkZzW+EvKTGl8B+ZGiH0iOkxyjsu8p+o7kKMm3VPYNydeU /IrkS5IvSD6nKp9R9ClFn1D0MckRksNU9hHJh5T8gOR9kvdI3qUq71D0Nslbatw5kDfVuCmQN0he p+RrJIdIXiV5haocJHmZkgdIXiJ5keQFqvI8yXOUfJbkGZKnSZ4ieZJqPkHR4yT7SfZR2V6Sxyi5 h+RRkkdIdpN0Us1dFD1M8hDJTpIdamwuRFVjp0I6SBSSB0keILmf5D6SdpJ71Vjs1/Ie6uVuku1U dhfJnSR3kNxOchvJrSTbSLZSZ1uol1tIbqaym0huJLmB5HpqcB1F15JsJrmGyjZRL1eTXEVlV5Jc QXI5yUaSy6jmpRS1kVxCsoFkPcnFakwN5CI1ZhbkQpJ1asxsyFqSC9QYP6RVjcFmLNeoMcMgq0la qPkqareSZIUaUwdZTs2XkSwlWULSTLKYZBF13UTNzydpVGNqIQupswVUcz7JPJLzSM4lmUvtGkjm 0MhmU/N6kjqqWUsyi6SGpJpkJskMuujpNLJpJFPpoquo6yB9UYDkHBruFPoiP/VSSVJBMpmkXI32 QSap0do3TFSjtcd7ghq9DlKmRmdBzqYqpSTj1WicC2QJRcUk4yhZpEavhhSq0eshBWr0Gki+Gt0K yVOjiiBjSXwkuSRj1Cj8+S7Pomi06gxCRpGMVJ3aozGCJEd1joMMV50ByDDVWQUZSmVDSAarzkzI IKo5UHVqFzZAdWprM5ukPzXPom/IJMmgzs4k6Ued9SU5gySdJE11arOUSuKlPvtQnynUmYd6cZMk U7skkkQSF0kCSW/VMR0SrzpmQOJUx0xILEkMSTRJL5IoauCkBg5K2kkiSWwkEVTTSjXDKRlGEkpi ITFTzRCqaaKkkcRAIkmEr9s+y61xwl7r7rLXuf+E/wP8Dn5D7lfk/gV+AT+Dn5D/EfyAsuOIj4Hv wXfgKPLfgm9Q9jXir8CX4AvweeQc92eRDe5PwSfgY3AEucPQj8CH4APE70PfA++Cd8DbtvPcb9kG ut+EvmGb537dlu5+DRyCf9WW4X4FHAQvo/wAci/Z5rtfhH8B/nn452znup+1zXU/Y2twP22b434K bZ9Ef0+Ax4Gvez8+94G94LGI8917Iprcj0Yscj8Ssdi9G3SCXcg/DB5C2U6U7UBOBR1AAQ9al7sf sK5w329d5b7P2uJut6523wvuAXeD7eAucKc1y30H9HZwG9rcCt1mPc+9FX4L/C3gZvib0NeN6OsG 9HU9cteBa8FmcA3YBK5Gu6vQ35XhE9xXhE90Xx4+x70x/E73ZeHb3RcZ09wXGnPc62SOe62/1X9B e6t/jb/Fv7q9xW9tkdYWV0tpy8qW9pb3Wnxl5vBV/hX+le0r/Mv9S/3L2pf6l7Q3+03N0c2Lm40/ Ncv2ZlnQLAc0S4NodjR7mo0Ri/1N/kXtTX7RNKmptUlpMo1Smg43GUSTDNf+wabJlVyk/SvRqiab o+h8/0J/Y/tC/4LZ8/3nYlhzc+b4G9rn+Gfn1Pnr2+v8tTmz/DU51f6ZOdP9M9qn+6flVPmntlf5 gzkB/zmoPyWn0u9vr/RX5JT7J7eX+yfmTPBPQL4sp9R/dnupf3xOsb+kvdg/LqfIX4hLFomORE+i 0aENYEIiRiJcMm+Ay+c67DrmMgmX4trvMkbZE9wJhn723jJ/Ym+5sPea3lf0NtrjD8YbfPH9Movs cQfjPor7Ps7UyxfXr3+RiHXEemKNMdq1xZZVFumaW0A6cKh+rWWx3vQie4y0x7hjDIXuGCmch53H nMaYfY6DDoPdLu32brvBZ0d1e6Q70qB9dEcafZEDhxfZbW6bQfvothljfTZktB7PiJhUWWS3uq0G f651otXgs+bmF/msWQOKhFF6pBTSATGGou5OGeMuMu7R/4tuiJDyyo7KioyM0s5QMblUCZ00VZEb lLQK7dNXXqWYNyjCXzU10CHl5cEOacivVKK1/2Shxxdt3CiS8kqVpIqAaty2LSkvWKq0at7n0323 5gWqBDNmLGpelJGxeAY+ZixanKG/EclmLcrQktp70WLE2k+zHouMf3xRNcjMRXgt7sktzvj/+iUz /vf6L18dQvu/QWO7DReKOsM6sBZcAFrBGrAatIBVYCVYAZaDZWApWAKawWKwCJwPGsFCsADMB/PA eeBcMBc0gDlgNqgHdaAWzAI1oBrMBDPAdDANTAVVIAgC4BwwBfhBJagAk0E5mAQmggmgDJwNSsF4 UAKKwThQBApBAcgHeWAs8IFcMAacBUaDUWAkGAFywHAwDAwFQ8BgMAgMBANANugPskAmyABngn6g LzgDpIM0kAq8oA9IAR7gBskgCSQCF0gAvUE8iAOxIAZEg14gCjiBA9hBJLCBCGAF4SAMhAILMIMQ YBrbjU8jMAAJhKiTyMkToAv8Cf4Av4PfwK/gX+AX8DP4CfwIfgDHwTHwPfgOHAXfgm/A1+Ar8CX4 AnwOPgOfgk/Ax+AIOAw+Ah+CD8D74D3wLngHvA3eAm+CN8Dr4DVwCLwKXgEHwcvgAHgJvAheAM+D 58Cz4BnwNHgKPAmeAI+D/WAf2AseA3vAo+ARsBt0gl3gYfAQ2Al2ABV0AAU8CB4A94P7QDu4F9wD 7gbbwV3gTnAHuB3cBm4F28BWsAXcAm4GN4EbwQ3genAduBZsBteATeBqcBW4ElwBLgcbwWXgUtAG LgEbwHpwMbhI1I1tlVj/EutfYv1LrH+J9S+x/iXWv8T6l1j/EutfYv1LrH+J9S+x/iXWv8T6l1j/ EutfNgHsARJ7gMQeILEHSOwBEnuAxB4gsQdI7AESe4DEHiCxB0jsARJ7gMQeILEHSOwBEnuAxB4g sQdI7AESe4DEHiCxB0jsARJ7gMQeILEHSOwBEnuAxB4gsQdIrH+J9S+x/iXWvsTal1j7EmtfYu1L rH2JtS+x9iXWvsTa/9+fBP/VK/i/KfivXvEzZ4j/A86y2JwKZW5kc3RyZWFtCmVuZG9iagoxNyAw IG9iago2MzEwCmVuZG9iagoxOCAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0FzY2Vu dCA5NTIgL0NhcEhlaWdodCA2MzggL0Rlc2NlbnQgLTI2OSAvRmxhZ3MKNCAvRm9udEJCb3ggWyAt NDc3IC0xOTQgMTIxNCA5NTMgXSAvRm9udE5hbWUgL0hPUlBEWitDYWxpYnJpIC9JdGFsaWNBbmds ZQowIC9TdGVtViAwIC9NYXhXaWR0aCAxMjg4IC9YSGVpZ2h0IDQ3MSAvRm9udEZpbGUyIDE2IDAg UiA+PgplbmRvYmoKMTkgMCBvYmoKWyAyMjYgNTA3IDM4NiBdCmVuZG9iagoyMCAwIG9iago8PCAv TGVuZ3RoIDIxIDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeNqN2Mtu21YURuG5 n0LDdBBYh+cOGASKFAE86AV1+wDnxsBALQuyMvDbd5Ex8xdpBhlsAVsSLX2L5kC8/XD/y/3p8Xq4 /ePy3B7G9bA8nvplvDx/vrRxqOPT4+nGTIf+2K5v2/bYnsr55paDH15fruPp/rQ8H+7ubg6H2z95 +eV6eT28+7k/1/HT+tzvlz4uj6dPh3d/f3jYnnn4fD7/M57G6Xo43szzoY+FP/drOf9Wnsbhdjv0 /X3n9cfr63uO0jv+ej2Pw7Tt5stXas99vJxLG5dy+jRu7o7H+e7jx/lmnPo3L/njlyPq8p+3rrOk uMysZt5mX6d5m3218zb76uZt9tXP2+xrmLfZ1zhvs69p3mZf87zNvpZ5m32t8zb72uZt9rXP2+zr mLfZ12Xe5m01WI28BquR12A18hqsRl6D1chrsBp5DVYjr8Fq5DVYjbwGq5HXYDXyGqxGXoPVyGuw GnkNViOvwWrknbBO8k5YtzlOeV2xrnM8WrOuWNc5HqftzVgneSesk7wT1kneCesk74R1kpdP22Zf sU7yTlgneSesk7wT1kneCeskL990m7fVYrXywtrmy8r1sP/j/+9CsGSwOvWWDFan3pLBKoUlg1UK SwarFJYMViksGaxSWDJYpbBksEphyWCVwpLBKoUlg1UKSwarFJYMVikcGZxSODI4/as7rE5eh9XJ 67A6eR1WJ6/D6uR1WJ28DquT12F18jqsTl6H1cnrsDp5HVYnr8Pq5HVYnbweq5fXY/XyeqxeXo/V y+uxenk9Vi+vx+rl9Vi9vB6rl9dj9fJ6rF5ej9XL67F6eT1WL6/H6uX1WL28AWuQN2AN8gasQd6A NdgfuRACGYJSBDIEpQhkCEoRyBCUIpAhKEUgQ1CKQIagFIEMQSkCGYJSBDIEpQhkCEoRyBCUIpIh KkUkQ1SKSIaoFJEMUac+Yo3yRqxR3og1yhuxRnkj1ihvxBrljVijvBFrlDdijfJGrFHeiDXKy8M2 b2vCmuRNWJO8CWuSN2FN8iasSd6ENcmbsCZ5E9Ykb8Ka5E1Yk7wJa5I3YU3yJqxJ3oQ1yZuwJnkT 1iRvxprlzVizvBlrljdjzfJmrFnejDX7H7kQMhmyUmQyZKXIZMhKkcmQlSKTIStFJkNWikyGrBSZ DFkpMhmyUmQyZKUoZChKUchQlKKQoShFIUNRikKGohSFDEWnvmAt8hasRd6CtchbsBZ5C9Yib8Fa 5C1Yi7wFa5G3YC3yFqxF3oq1yluxVnkr1ipvxVrlrVirvBVrlbdirfJWrFXeirXKW7FWeSvWKm/F WuWtWKu8FWuVt2Kt8lasVd6GtcnbsDZ5G9Ymb8Pa5G1Ym7wNa5O3YW3yNqwt/siF0MjQlKKRoSlF I0NTikaGphSNDE0pGhmaUjQyNKVoZGhK0cnQlaKToStFJ0NXik6GrhSdDF0pOhm6UnQydKXoZOg6 9R1rl7dj7fJ2rF3ejrXL27F2eTvWLm/H2uXtWLu8A+uQd2Ad8g6sQ96Bdcg7sA55B9Yh78A65B1Y h7wD65B3YB3yDqxD3oF1yDuwDnkH1iHvwDrkHViHvMtqlXdZrfIuq1XeZbXKu6xWeZfVKu+yWuVd Vqu8y2bVulrzdy6E8M11sKwVVGJZK6jEslZQiWWtoBLLWkEllrXC8p3PXH+yr7cWvt4KaJ8vl3G6 bvcftp//6w//x9P4eovi/Hxej9rmX6tjZyYKZW5kc3RyZWFtCmVuZG9iagoyMSAwIG9iagoxMjky CmVuZG9iago3IDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZv bnQgL0hPUlBEWitDYWxpYnJpIC9Gb250RGVzY3JpcHRvcgoxOCAwIFIgL1dpZHRocyAxOSAwIFIg L0ZpcnN0Q2hhciAzMyAvTGFzdENoYXIgMzUgL1RvVW5pY29kZSAyMCAwIFIKPj4KZW5kb2JqCjIy IDAgb2JqCjw8IC9MZW5ndGggMjMgMCBSIC9MZW5ndGgxIDE0NzQ4IC9GaWx0ZXIgL0ZsYXRlRGVj b2RlID4+CnN0cmVhbQp42qV6CXzURZb/q/pd3Z2+03eO/nV3ujtJJySEDiEQyS8hiUAEwmkazZAA QRgPgoAoM0JEFA0eQRHwJLoKiAedDmLCMUZdr5lxxHHGQddZszM4qGNWZkbRVdK9r34dEHbd/Xz2 /+/O+7063rfq1atXr6p+aSAAoIdO4EBZcm1bB3xMfoIlv0Z6ZckNa+Qvn9mOadINIE1c1nHVtb5b 3JjWYJkw86prblr21g1N+wCM2QDu7uXtbUu/f+g9L0D4WcSPX44F1lf1L2L+JObzll+75sZlVNsE kK/B/JXXrFzSVj2vfiHml2K+9Nq2GzvE9y3fYH475uXr2q5t37W56zHMH8R8sGPl6jXkz9zTmP8I 800d17d31PiWcgAFRQDmlVhGgI2HjUiEQ6wNWDBa8n/70P+Sxz6ARxIuKBMvkpBA8z+2pgUdZKBO htG8EUwqN4MFrGoqE2xgBwd2cBiyVdoL2XwI0K6pk+couSJ1ktUxTj/HweakafSTgGfhDySfyNBH vgMnfEvcZCxMQ72/Qf0PwAg8gL3Mgx3ECnnY13yYRniUicBd5OHUDanP4BK4D55IvUg2pfZj/b3w OnyLGvwrT6ACZqL8fGiHz7hPIJZ6CEe7Bcc0CeYQB7TB+/j9GnW4H7bDL8jPU99irzbYhO1VQQ3U pF5OnYVCuIvvFk5oX4BtcISIqSWpFZALfuiikdT7qY8hBDH4J3gWdYqQQX4q+OBquA12ETf3OqYe gCchSfS0hZsivIQ9TcOZvQ7WQRfsh18SK2kSTginUz9LncJ5yYR81GkFfEbKyQz6FK9PTU59CFfA ALyJ42XfQf4Kfq9wRbI69WjqFbT8i0RHjpKXhTLhnpFbUo+nnsfZCsFYtMhM7Gcx3Aovw1vwN/g7 3ZjaCFNhLvb8GskhMgmhxd+nbrqBbuDegzE42hbUdi3shjjOyGE4AsfQNv8CQ/AJsZEsMp0sJtvI 36meLqXvcA9zB7nf8YR/Gu0dgCDaaA08hZ77a3gb3iECtl9KmshPyUqykzxKhmicfkG/4TX8rfz3 /IgQSg4lv0/NTH0NLvDAZbAeNqJt/wn64CD8Bn4Pf4d/wBliJhPIcvI4iZMh8gXVUj+dRTvoDvoU fY6byW3jXubL+Vr+av5t/kPhdmGr1CYlz+5J3p98Lvlu6sXUu+g7Rmw/BA1o0VvQK56Cl+A9bP0D +CP8ifkPtj+JLCQ/wV5WkzvIdvIceY28Sz7HUYL69dNJtA57XUmvRzttovfT7dj7O/g9Tj+kf6R/ pV9zAufnxnOruMe5ONfPHef+wpv5ED+GH8vP4hfyKZyZMuFSYa6wT3hGeEU4LVaJS8UO8VNpk7RZ 8+uRwpF/TUJyeTKe7EPf1aAnrUdLPAZPoN8fxDn4JVr0N6jxEHyFs+AhPhJGvStJA2kkM8jl5ErS TjaRLeQ+sos8TJ4gz+MIcAxUQt0jtIbOpW20nW6mW+jd9CB+D9O36Pv0BB1GzZ1cgItwY7lp3ELu Cu46HMMabgO3GS27jdvPvcO9x53iPuWGcdacfC6/ll/PP8jv5Q/y7wqXCdfi9wnhJWFQeFc4K5wV qegRs8US8afiPvFPkiiNl5qkO6XfSf/QdJBsUoiayxeFKTeuwVy6n9r4jWQYC3IIj7FlG0RwHubi qvgHVHNJnBcjq0fd7NTNZ6rBS+HjiF9DjkA5eQ02ipTDOMkPQYJ8RIf4V+kl8HvSStz8Xu464ZfU B89gNOqmR+kRUgsHaRVdQB/hgHxC9sEn6O83wnZyNVkNz5BhMpHcTCrIRvgddXBzyWaoSj1BeaIl 08hpQA3gFn4p/OR/D7+kEj6Cz5KP8Qb+5xif+mEHzuizuDc9Dd8RIfUFRjcOo1EbRpm70N9vAxb1 WnCdbcT16MYIco34DhwkGKGlCnEyvx5Ow3/AZ8Jh9KhajKSnkiv4x/g/pypSxbjCcJXBPlx3y+FS XDGfoJccwzzLXYkrXYexpAxXdRMshKVwM0a9bal46pHUrambUivhV4j9jhSR70gProh+RFTBm/i9 Fz4gW3EdXgr/T5/kUhiEz4mLBEkZrodh4QahW9gvHBR+IbwtjkVrb4aH0aP/hN6swxEsgXfhc/iG aHBu3FAEUdR3AureDNfQGHcMphAPdOCazcc4Xjs6ktXYyia03iO4no/h2jiNceJK+AWcIJQ4cURL sH8NttOIdl6E0ntwBm8lfViyFKN2IfwVx20kE+ga7E/BlnZg1BpEnT6Cv6C1U6peRRgX6sgCbOsb uByWYg/joYn0QkPqEEaqmVDH/RrtnUfMUEv85EnEteIKNUIOVAp/JhSKkjNTE+gK7hjuMSks78Hd KwsuIatQCxOOYwTsZBaUJ+egDu8BKDXzlOrJl1RNmlg5oaI8Oq5sbGnJmOKiSGFBfjgUzAv4fbI3 Nyc7y+N2OR12W6bVYjYZDfoMnVYjiQLPUQJF9YGGVjkeao3zocDUqcUsH2jDgrYLClrjMhY1XCwT l1tVMfliSQUll/0XSSUtqZyXJGa5CqqKi+T6gBx/uy4g95OFs5sxfXddICbHh9X0DDXdraYNmPb5 ECDXu5bXyXHSKtfHG25Y3lXfWofN9WbopgSmtOuKi6BXl4HJDEzFnYGOXuKcTNQEddZP7KWgMaBS cU+grj7uDtQxDeJcsL5tabxpdnN9XZbPFysuipMpSwKL4xCojZsiqghMUbuJi1PiktqNvIKNBrbK vUWDXXf1m2Fxa0S/NLC07crmONcWY31YIthvXdy5/qTrhyw2bp3SvOXC2iyuq961QmbZrq4tcnxw dvOFtT72jMWwDcTSYENrVwN2fRcasXGujL3R22LNcXIbdimzkbBRpcfXHqhnJa0/lePaQG1geddP W3FqPF1xmHOTL+HxKAOpIfDUy13zmgO+eHVWINZWl91rg645N/W5Fdl9cU1xUa/ZkjZsr9E0mtAb Lky0n69TU6o4SzXOOW9ZwjQKTEOHiMtLZNSkOYBjmsAe7ROga8kEFMNPjCAqvhRnZEVcO6W1yzyR lTN8XAiaA3LX14AeEBj+4uKSttESMWj+GliS+cl5V8P6c+l4JBIvLGQuIk3BOUUdJ6v58uKiG/rp +ECHWUaG5oMmtG1bbGIJmt/nYxO8tV+BxZiJd85uTudlWJyVAKUkEovTVlYzeK7GPp/VdJ6rOQ9v DaAnH1SP6fa4JnT+z2R2ZNYvnxgnjv+luj1d3zg30Dh7YbNc39U6atvGeRfl0vUTzteNpuKZU5q5 LDqaolmcWotOeeV5YZZp1sf5IP6JqlMvjXPolGoBkRvi5tap6WdM5/P9j5h+SXMBqD91mqFU9gNs VMv4xMjF+UkX5S/STt/Fob58iDbOW9jVpbuorgEDUFdXQ0Bu6GrtautPdS4OyOZA1wDdS/d2ddS3 npvQ/tThrVnxhrtiOIjlZCI6K4XaYna8IOqVR2D3HwlqD1KSFKV+Wq1kgsAnOdBJfJKAWyMKScod JSHQ4iHTBa6I+UzVSNVM81dVM0aqoBrT5rP4GFvqs/gsQXwQ3LjPytzgWUWA70HmB9mN6y3c9/+E pwzW1xgli5tARHECr9Me4CgVQ0QWSgUqHNC8/Qxrv4U1WnUGqoerh8eWZmK7BOkt4k6ewguDgfGz /2DP9O1tB45jMd6dMvFGWAQnlOp1hWS58cbCv/BneF7rs2vF/CJf0GH12mfZaan9gJ3a7baAP2jN 1Mi2IAGaFe4QO/F41pgfPqAn+v7UYJ82I6rvp3cpvtIxypimMa1jOsZ0juke0zNGI48pHUPH2Pwy yJmlmTSzn27tKx471xVBk7Qwm8wwt6w6E1k1Y/irlmHVPowslSUtq9BvBsCe6kzkVNqxk4SHsc7e zMpIJBJDIWKxVgLS2FLSGM+Y2xg3oYP06uQJMdICLZm+slxqt4mSA/c3UcRdzUcs48oqxo8vj4bC oQBn8Y1mQoEddPrzz2xZuHLR7d0tj98wPflJ0kDyX3mu8LLLG6cXvbufWHsitXOVm34pHM658sFF Vz0bCR/duPTYKoOG8q8nnxO0l19aN18rjAwkb9TqW2bWXlnI5hDv7UIb2tkMXtiojMsX8nWXOtv5 dr1Q6Kx0TnXEHMsdQqVzfNaWrAeFHRmC18KMm2kNmswad/iARKRRy0rMspmdPiL7Sn3UZ7GiLc2l ZmpmtpR/1JbnDTm2FFpWEWYMp8NhtdvwHI3fQNoUkykbPdpiO815sfWW/tbiimUzbl385Mh7JP+P P6+Yuqiq6pq5k18QDmeHXkme+s0Lt/YsaSz08q+cLTdaF7y2f/+hZVajekSFnXhe3oxj1cL1SrVG 4EUhKMmaUs1Lmo81fImmW0M1GuD4ICVUCxqpWpyF/jOHw1VFPXJGaQbN4LUynh9L0W5sVLoLRzXT 3II+PgMzOCw2KCvzDuScYK7CEY6z+Ow+lXZywyOT6NKRR4TD3yaf+nZkG9PtUdTtKeF5XLqXKJ4m Cc90lOeCAmh4wSNR7sJuxbEDF3abZB3OYIZEF2vBbrCTR0k+HRKe/37aN6zt6am/8H8X3oMicly5 ZMDSn3Mo//UiXsqU7M5Mp90VaRfa89eINxrW5H+gfz+gj+nmG+f7Y4Hl+mXWq3wr8q8qWpdze84O n94a6E8N9eV6o4wr7W5PdLZ/duBl/8sBfpV/VeAW/y2Bf/P/W0CM6AoNef68QKUhGmjUNRrq/FMC PzW0B24yrPffaejy79HtNezzZ2p1WoPoFwNundvg8Ev+gM7AE+cCl+KWoytdZKVrt4u6DtN2yEoN KnpPpTeLZBXbOJhK0OWUaR45WkoUvGy3km7Sg3FsEI/T/84rnkoz3s+LC7WuL1NO4lQynVFnoxQO ecZ4wz3mOHpkI/nSkjanu/i3o1PYOLe5F5QJMXWFzzSfQR65Hj10ZFXkq5bIyTS/PnLS6qxsaVl1 fSSirns/2iMrZzLa4/go/3Mis9KP5kGGubcSVpY7rpislQbZWqlTycTKPlWMeiwzVOpcjNR48cMn 1ivSKfOaFftE3URDub8c7TjNMMXfENije9qvg5bYuSUTdDjGlaWDBfuWR8ePHyfzTgHjhV8S7Tan g1dDCx+QYTqRPbu33LvtksuiA//eumXjl0/j1dopJU9k3nzzLdNKiiaQ+Dtr70rBS8nPk++TP2Zv u+Om2dFpWdYxkxbc9HzHq8v+/kvDqiXl/sposGTZtce2bvjoakKYfxWh7w7gupJwXQVKtKV8qdCk 7dB2aru1kkgEGsSTugQardPp4TcKROgnxYpOlGRSipcK9GnMWjhjE+2gnbSb8tStGXl2dFZmN/dS nBV1XY1U4aO+ve7k6AKrUh0e3b2crSrycXIGf3dyJv/Kt99+P1l9Izgt9Sk/hp8MASgjq5TlkkeT LeQ4PNOzpmZPC/6L+WOLdry7wX15aJn7qtDtofvc93v2eAay3vC8maUXRYPdIbodYbHAHnOvo7fT PeIL4uui/qXoB2aak1c21lJkyFMiY6J5ij8fH+6c6Mq8s3k0ryGHeWep0RS9JIdAjjknnvMfOXxO ThEZBwqWmjDQUpjvU7It1T4ly4wPlyfq66drXuAlvUFXxOIp1qkcq1WOEkUooSi2jNyxIU2BNt8Q 8+p366lXT1K4uylGR1TvmRUl0Vacj3tKCSHjCnyLnORjJ5nlXORc6eSc7nEratJWXXU9eveq4RYW siLp3Em27Q+j46FpR5Axn1cDWCTtiImSHLIqNpzODEBeavDFrJzovLylebQlEmtBBG5xnNGcnpRV Lcw5w+iKZeh8nM3h9DHvFMWAX/XQivF420MHFQnb8uw2B9vxKsaXk/ZU5LfvHO1v5LKCyc8zzBI3 9cmWJ48tePi+1y5rWtk4j/xk/Od5Fc11l9WPM2fQP415aHvszheT/Xfddll2hVvT0JC4Y+HdjdlB OXt2/aTkb61lrnDVpAVloYq8dtUftqA/bEc/NUE2PDoA1tS3ytiMyoqsS7OodYG4QLfAscAVy/5G Esv5SYZJmeVZ9XyjoTGzPmu79KBWpzdiUAYPTkNCkGxsNjIzMkygc/o0no5ckmsuoFzI1E8KFD3p gE4WXXKq0xZfVTVjeKTqLzPNq86oux47A7FwDataSMuUZiVjmbhMt8yxzLUiW2iJQUuERXE0Ht53 AU0WtmfiOk4vczTaFuLelHglmRwZuKJXsUan3dRy6+ar2m8XDo+c3p48lfyP5Onkh1fEHqGFT83q 2P3MoccfZWt0Po69GteCG/5Nmd1sillxYzetsK5w3Oy6yb2T7tS/bn7d9Qfz+67PxM80n2V+Zv9W zJyQOcE+3Trd0eCK6VfopYnWCkeFi1snrDNtEW433eneZ93rGLAecmiNqo9mRRl/wWqLGscZWIk7 N6pykyVqOEx40KHNrJYMUFAUFJSDcd3oqYcxivBYJTslwkqJD0oMLGHwzTISoydL8tncnua0KWew 4NwyYzjy1XAEo/NXLSfRZ0e+ikSQp2Mi2lSNfmm/Gl8hMLcDtCQ6Iz82+Vfjklkrbt54ddMyO7FF vnr7s+RfiWP4lU/oF2Vz523bf+yRK1aW/OIVEiI8kUhwL/ObeWi7tlG/6VaKrTExpotZ096yC13j W622I7czl07kovqJ9qh7Olenn26vcz+o1dpUd8lgXqMYMySjCadC5ywwGkKEeYrJBJ57me/4NO6c 5qrzI1x1Ju0xaqRLn5ihBUeGvmJYIa7QrbCmvUVsifl85aMDtI4rc+JJ/UJX4duS39f0Lnwx+X3y lcQm4h6xltStb7tj81VLtzxyRYyEccc0Evd2aj7bsf+y65568sXHd+N4a3C8YfQVG2STfxoAM66T hozKB7UPGXaY9wl7dUe0Rwz9Ho3GRqbSS8UG3azcfYZD4iHPG7o39e/rTui/lb4xGLJN2XYFY4Rd MVqiJvtL9nfsnF31htxqlRudyOndit5ktDYZW43U6LKynf2QOytKxlmByeTIUZX7C9I8UpzmrmyV KyYMqD3spmlGtRdZrWjmPj7D6mLmzsuQwEdK7GknKsldlLsyd3cun2vyaRSDKYoGH42HEWbxFuZU X+HiHMaNXbG5lHxbtUvJNeEDg7CLRWt1X64eUTd+KyqBElamDApZR4M144lzohho1b1cBQBW4EWA 1TsZi/dpdZPVbI2vOgJM/iSLoS1q90YFrWRknRpZ90YFjQVqoyVVGJ7x+IH3inFs+1uF0YIwF5dx 82c+DpxPPRJkpk8ATvodcY3/7EDyr7etILb3holVHFG4TW21C8PcjQuurKoiZE7JQ4+/sO2P6AuR 5BvJYzdvnUquWb9xypTVzPfvx+DxLPo+u+OtGwAtGr3aoqtWtE1a2qmNawe1x7VfagWvtlW7UduD BQInSnjZ5NDTFTgOQ4hswbgpCqLE66iE64pNnNaXF+Xdmuq0y0dGr53qvo6HZvXIbB7dSq6PnLss 3p++LPKHCJ88+/10PvT9hyyup55IziZ7VB3tsFWZ4ZBCkuwcLx3SCJ1OwvEC2G0Gs96s/a868XZx kZmY79GaiC1EzXgy8dzL9kviNIwz467qdjich+nV4KM/7UVF1b3TPeOkaya7wLSkdR5uOac0Tp5l 3EWaM73tFpu67YUr1FkZX265m7jLd64tbJsw1hYwRSqs6eF0f//9r/b+xGQ6zQvB6CbuaxazNwCI u3AdhsmkAShAq7Wg5XGu9XbRoY9yUU3UFQ3U0XpNvasuoJe5koK52taCzoLdBU+Ke6U9+hfEF/Tx guMFQwVGKCgpaMKKlwo+LhALFE92tBrznWqlIPl4yZPjYKFKJ7GTiJLLS2aLJZyVnR0K63DyTOaQ 1aIsLG+1kJU4Ff20QTF5skI52Vi2Mpu0ZpNsLDsYxHsai2sJgLC61LXVjCvjUe8wioaVGqQqpLxw NKxMvCRaEn4n/HGYM4W94c4wB2E5XBpOhfmwO//PVecOK6NHYrw3DptHqs7gqsLD35lVLYypToMG Z18WJy+4bV8fYccQEsn02dk5xKmeRpwOO05KNMyCo6gmQ+eSGwi3dXDZjtKGJ65c+0R+TvJUTnj2 pOVjkqdyq8fXLC9OnuJD256eN3/+vEVX1u0aidFFj42pmrp1R5LShocXFjVsfnDkLM4ZXub4GM6Z A3YrLinTmblQs1zD9/MEZ8tcp6kzfWYWRGbiHItkNIj6jAzcECgJOUCR86IHgKSwEY+LWc3hz4t2 u3pctMN12kW/dBGXLiOkNzL7Ggx6NfwhpEdPTjNfdY6uJbTXqKWYm14fOaMWqJZiNqo6v5f4Lhy8 RTVSLrXzseSpvNmV09ZEcKkJW99reWiWl+Y+2z6haXMi6eVDjxycsnzzz9L/cZ+D+8RDOFYDnip2 KlM/Jac032R+Y+ffoJ8K1OoW3FoaMy/IXOCIuXbSXeIuzU59v/b39F+Ej7S/158STomfGsx7Nb+i vxZf1byuF9Zq7hQ3aziL6ocZTmYkGy/ZKiVPa1ZHFs0y+uCiY0D6MJXeHNlBahXujtoV5mW4N65w 8YQdpPCCFLXiwDAC4EEqLxS0/bA3zukaeeRvJJp864v7kt90EXnHddc98MB11+2g/ruI2JV848u/ JV/dnNr32L59PY/s28fW4xYArgLHa4Z9Sv5OgWiNZK6wTFgrcCXWZuNyY4eV12lNeq+e3qtP6Wm1 fpae6vvpOqVAknCWOSrq8kFr1pbi5YjXejZad1vpIutG6wHrcStvNUOIcOxQkEFpJ15oKXFbqgdI Npw7Qp6f1DMsCoErfTbAOa4sYzsBnn2gMe6c2xgvV98wlU1AA/jUmUULOCV1qi2kh83rlKvrWmOX X3rJpDklfGjn1XXlX4+p2Z/8G46xFOfUjGMspK8og6JFDGjCToszsMu6y7Yz/EChVrI12Kj1iGHA +Ibvk8C3hjN+scAw39BueCBjp3Wvf0Av1QSUvLrQVf6loS3WLbbb/bfmaStC9WJDxnTDLFODrxZv +nnhUIW+3MfuteV5kqgTLFqfyxDW+/3+gJTnV4pW62+03WS/oWBt4R32zYUP2R8oPOg/GDB0knud d7keLHy6MF4kOn0OxReIOpRsb9TrIB87iGOcxtcUvDdIg4orJxr0sKuT4sTY01RESotISREpyvWV YsQfh0fM0fikchRRjxNarSEK7siN/czkZzHmqPek0XWkvv1j0WgYRi/n5SIhInGQkH+8r8E3j8Sc S8kK5xmiI07Ke3x+mp9p0NN8zyKe8A35GU0e4mnIlKpHWvDPYnVWnqOWVVnsVcKv+vIL8SKY5n71 VUseyw/1efPSebdHzStZmLjaQMb7G/y7DNv9/+z/nV/0+fUGnvewcbyAJygYx85Sfc7iajJ62FDz /mBUfXuSgzsAkPT7E76VdJLThANiVt+m8KpkpgMlCVFmAE8W8ad5yobgULBpxzingu06FWzUqZRX RJ3sHuxUggX4wHZNTq965eSd8z0KxjCThzR5Uh46Onj1hYr6ORlh2a8iozGenX+YMUbfgKTvkavw 09KiHqHyUm8p2gxrtSkfH2iHLw4ZKvU2fSVLJvTsncrnvRmV6jGJIB5jQvrtCF4sMeCH89S3I2wP uPDlCPu/ItufS4nHet2SayuCNvu05LNXbPjwkw9/l5/8xrKoeWWpnB0iL8eav/rygxFSEpkzPz+7 RLbbLI2TFzzYdfSerWMn13odgVx79rLpjbff99u4+q7Rm/qUbhMexcj4tlIgg0wCugLTRON0Y8wk ue3g4hx2cFozbcRppTbi4rSSTtK7mMFN4Oxxxp1cK7JBvLf3Ez6BVxV2tAU7e5uPNwl9hrZEVwJQ QhZhnEAJJd/FhZzW+fZq227bARvXauu0dduO207bBLCZbbKt1MbjJerGnnObamO8AiPFJIwUA2BL DbJXLGfTb1jMX7lZcBlW/wuAoifVg40JPyzKEHvAYlOt6mRmY6+cLIHyceVBC10/mBHODk93Lf75 ZesrM7S33EI8fGgoOW9TJDvrw8Jxs+vHPkDeGXrvyeSdaJ+7Mc7M5UO4Tz6iOC+3XGXZIXBa0S1W 0SpLI220nKKSiQ3Vwmc4QGe32XRaMdMWstuBhUijQ90tHSSFq/5/2S21mvPbpIac1hDNxdvkhXvk jOEq83/bJVvSl6sQDtKXHjY7wfks3MyJx1Zcvf8y4vbOqZ56fSFx756/+Cf7d9CepGuofdKstSfJ IDucsn/HcPq3/7B0955FpqqvNe70T87ecP1i1znOTq/iLuE9lNWe/+UbcmlyciZMMcN33yVnm+v/ 22/inCIW0UrchvfDW8IbsANpO/9n2In0qLAApiMv4lfDNORbkM9HPg95DWLup5WpJ6Qc2IBl25Dm cDmqTCm25cX83ey3gPhdSlzkHvIR1XETudv5ewS9sF/0S/nSeukvmkHteO3zOjnjn/Xz9G+q2jnh 73iuXgICngzMUALz8fQ607wSy6g6IuvoGNivvaB2+tQ5dZdGaq5f0XZNce3Ka5bOmHfBr/hSYfjD j/7Mwqn+bygHghCGAuxjPFRAHdRDA1wKU+EymAFNMBvmYN8L4HJo/gXM4x4CE2HLcZDb1We2lSn9 3IN9pswypcbMPQBNSBTi3AwYRKKwktsGG5EoijcmiseWDbBEn85YZkb5rSAjdSJx0INPouYVJCa/ FUMma/7WhMmi4n6WKI2mE31mV1lTjY27EQjXzl0HAfByG5DnIl+CPAf5Ym4pHqSYnkqfyVzWif1V o3g1Z8eRerkazgFlyOs4D2SpYmsTxnQ/axP5hWU1Om4K51JFTJwBosg1nJQo88pHOAU1Vbg7+rQZ TL87EmZ72THuNk7CC76X60Qpp9d0jNNBCRIbybw+raGsu0bPzcNhzkOzeFFHArvVp8Jdl8CGsL96 LhuXr5e7Gt3HjryBy03YvYNHuPtVsftYK9jf5IRmHGN9BmPZYI2Wm4y1ce4etPg9am/dfaEJZVAT 4vKhFImiUTdiir0ZNnNdmOrCaerCqenCqelCLbrYDzm5O7HmTpQp4dZDB7cOupF2Y5rHJu0JtOCA msjLLxvg3JwLLWE+grYjWOrp0xqZZq6ENVMVc/XpjWXVx7jVMAuJovJr+pyuspVHuEJ1KEV9riwG 6Eho9Wg6Z3ouEOhgc3CMy+ZyVUvkqBaI13gxT8DEeYHQX9LjzDr0Pfp7Nr/sJ3Qq/9Uof3uU/ybN U4P0eB/2ovTT3zI+VJNNP8HGFtE/wm5MUXqEvgqlCPiQ9jMt6Ad0AKqRn8D8UuQDyMchP5zwvent p/19yFD3hxMGBxssfTURKRlNeIOjCWfWaMLqKKsJ0lfoy5CNTfwBeR7yl+kg+JG/hNyFfJCugTeR v0DLYRLyg6P8n+lR5tP0RXoIJiDvSxiZCvGExNiBhMjY8wlI55pKvEfp8/QZ8KDoc4mQB0v39YXy vKYj2B6hT+E9IMdrrdHRx0kz+QqFeuAE42ClTyQqWCPdiaOyd4B2027FVaEElWJlD1caLC0u3cPJ QblYrpD3yDVmeg8Gpd0UFyzdis8KkCl6D5KC1E3vTPAV8ZoRHBMbF4VOfPaoqVZ8dqgpwKf5fO1p NVVNb4NZSBTb2IC0EakT6Rbg8bke6WdIP0e6WS1Zg7QWaR2Gjw5EdCCiAxEdKqIDER2I6EBEh4ro UHtfi8QQrYhoRUQrIlpVRCsiWhHRiohWFcH0bUVEq4poQkQTIpoQ0aQimhDRhIgmRDSpiCZENCGi SUUoiFAQoSBCUREKIhREKIhQVISCCAURioooRUQpIkoRUaoiShFRiohSRJSqiFJElCKiVEXIiJAR ISNCVhEyImREyIiQVYSMCBkRsoowI8KMCDMizCrCjAgzIsyIMKsIszo/a5EYYggRQ4gYQsSQihhC xBAihhAxpCKGEDGEiCG6rpc7XvMaQo4j5DhCjquQ4wg5jpDjCDmuQo4j5DhCjo8OfY1qDIpuswFp I1InEsMOInYQsYOIHVSxg6p7rUVi2Dgi4oiIIyKuIuKIiCMijoi4iogjIo6IuIroQUQPInoQ0aMi ehDRg4geRPSoiB7VcdciMcT/3Sn/z1NDbyHNGtxc8b5aoPKN8IXKN8AJld8MvSr/OexR+c9gk8rX Q4XK10FI5dieyteAV0MS3gpTjQNDwCykRUgrkXYjHUB6CUlSU+8gfYyUouWKnzdJs6Td0gHpJUk4 IA1J1CTOEneLB8SXROGAOCRSuSaLGtQ4iqEF7lWfG/H5JRJuIvisVlPVNIr9RjHOluM3SqOKZVj+ spC8U0heKiQHCsm9haRGSy8lvBrpZKigqDhpVvShyd4TSBWh8GSMTPcc+sLpTYTGe/vJ0TQrUCLI v0DqRdqDtAmpAqkMqRgpiORVywpRvlnxjzZ5FCmM5EOSWRfgcOBByGrRKAPUQPb0vWYALesnnI+4 I4lwKbL+RHgWshcT4cXeGi05BGF2DCIv4Mw9g/xAwnsSq59Ls2cT3iPI9iXwKt1PWhLhMciuSITf 9tYYyHw8FDLovFE+F8fN+JyEdwGKzU54C5BFEuEQky7EjoJYW0Ca4STy4CgqL91TIOGdhMyf8FYy aQ2E2cQTEYpV9QQkxrk+VOjLAdLMEyXDO+y93/sFwv+KhkX3+EDu55G9E+wnCxSd92jxYyhc403U 6Jg87g+9ozzO+AvePcE7vQ9jWyR4yPugd4z3nuJ+DRbfjXrfqXaR8G6S++kzSqa301vqXVN80rva O93b5p3jbQliecJ7pfcoUxNipJk+c8jbhA1Ow1EEE95Lg/2qig3em7yKN+ytlI8y+8KEdLsVxUeZ BaAs3XsR2rcw2M98fH5FP7EohdJpqVu6QqqVJkkByS/lSjmSTWPVmDVGjV6j02g0oobXUA1obOzi H2EHaZtoZkzk2ZNX02bKnulzNlCioTAd4pkcXqTm1pLG+OASaFwsx8/MDfQT3eyFcSFQS+LWRmic VxufEGnsl1Jz4hWRxrjUdEVzLyH3xLA0Tu/oJzCvuZ+kWNFtWeyHn70Ebrs7awAIcd92dywGLscN 1a5q62RLZUPdjzxaR58X/LDBdWEyJ76jcW5zfH9OLF7GEqmcWGP8Fvaz0AFqoob6ugFqZCzWPMB3 UFP9HFbOd9TFUOykKobebEQxCDOGYppakJkYxpNaJoZzlJYLIRzlfIyhnM4AIVUupDOocjxhcr0n 5Pq6XllWZYIAJ1SZE0G4QAY9BrF1vaGQKhWQSTOTIs0BWVWsQG3I60WRYq8qQvBcpzbkJWpn8ZIf RIKjIuXnRcrVvjjyg4w3LWPLPydjy0eZyP/np702QvrGrt3wKvulbWugvh2pNb71huWueOdiWe7d sHb0J7ih1sVLljPe1h5fG2ivi28I1Mm9Y1/9kepXWfXYQF0vvFo/r7n3VaW9LjFWGVsfaKuL9VVX Nddc1Ned5/tqrvqRxqpYY82sr+qaH6muYdXVrK8a1lcN66taqVb7ql/B/L6puVcDtbEpV6Z5H83Q oQ+3ZvlitQ5zx2Tm0AOTfK4NWYd5IPsgIxKL6wO1cQMSqyquKa5hVbjOWJWR/Zx6tMq1YZIv6zDZ N1plxmJLoBbOmRaYEHsP2xj3zV3YzFwlrrT9+JytZh+12gX1K+rwD/NrVMLvhZKw+kc/a37ss3bt 2tXssTayGqAxXji3MT6evRWWJOyqtS6GZWPOlXGcWtar1db3pwaxMoJKkDWsO5aKEPYfTEWHty6J 9og9EmVXhTV9npyylcdwB9+IhPc4ui5Rot6X6bo+f5DdX9b0lZSnOd5PGU94fGXs1WIFQhkPprli KcZEd7C7uLuiJ9hT3FMhsn8D78FC7x62lSZK9nCwJrL6nCEwuSYG6X+sYn+PJ7Jz1I57WCISiUVW E9Ve/93Y5JzR1/xg/lGuNr/m3ISky1dDWjhdGVl7DrR2FKJWrlUhaof/CQduxhoKZW5kc3RyZWFt CmVuZG9iagoyMyAwIG9iagoxMDQwNwplbmRvYmoKMjQgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNj cmlwdG9yIC9Bc2NlbnQgOTA1IC9DYXBIZWlnaHQgNzIyIC9EZXNjZW50IC0yMTIgL0ZsYWdzCjMy IC9Gb250QkJveCBbIC02MjggLTM3NyAyMDM0IDEwMTEgXSAvRm9udE5hbWUgL0JKSFJERytBcmlh bC1Cb2xkTVQKL0l0YWxpY0FuZ2xlIDAgL1N0ZW1WIDAgL0xlYWRpbmcgMzMgL01heFdpZHRoIDIw MDAgL1hIZWlnaHQgNTI1IC9Gb250RmlsZTIKMjIgMCBSID4+CmVuZG9iagoyNSAwIG9iagpbIDI3 OCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUw IDc1MCA3NTAKNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgMzMzIDc1MCA3NTAg NzUwIDc1MCA3NTAgNzUwIDc1MAo3MjIgNzUwIDcyMiA3NTAgNjExIDc1MCA3NTAgNzUwIDc1MCA3 NTAgNjExIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwCjY2NyA2MTEgNzUwIDc1MCA3NTAgNzUwIDc1 MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNTU2IDYxMSA1NTYKNjExIDU1NiA3NTAgNzUw IDc1MCAyNzggMjc4IDc1MCA3NTAgODg5IDYxMSA2MTEgNzUwIDc1MCAzODkgNTU2IDMzMwo2MTEg XQplbmRvYmoKMTAgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNl Rm9udCAvQkpIUkRHK0FyaWFsLUJvbGRNVCAvRm9udERlc2NyaXB0b3IKMjQgMCBSIC9XaWR0aHMg MjUgMCBSIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDExNyAvRW5jb2RpbmcgL01hY1JvbWFuRW5j b2RpbmcKPj4KZW5kb2JqCjI2IDAgb2JqCjw8IC9MZW5ndGggMjcgMCBSIC9MZW5ndGgxIDM0MjYw IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp42rS9CXwURfo/XFV99/TM9NxnJjOZzOSY cOUgBKJp5BIh3CBBIkFuEEkAERQ0KJeIiu56X3jjgQQIGFBXdFldDxbWaz3WY3fxXKOsy7KukJn/ U9UzIejv9777/7yfdybTXX1X1XN9n6ee6iCMENJQK+KQMWvxzOb7Js3vB3veRAg7Z61YHr29+a0V UP4MIbHv3OZ5i6c+/I/BCMk6QsIf5126au7qe274I0LWYwgtOD1/zszZp99/O4bQFXA+6j8fdjgX a79HaKUftgvnL16+snJFMAzbtXBP/6VLZs0cVd8b7rVqEhy/afHMlc3877TbYBvuh6KXzVw856Ng 03KEruTpdvOSZculu+RzYLsQtp9pXjqneUL60New/Q5Cagb2YUTbQ1uEsIj+Xz84uyYcQrwgIklW VAvSrDY7QjpyIKfL7fH6/IFgKJwXyY/GClC8MIGSRag4e2FJaaqsV+8+ffuVV1RW9a8eUDNwUO05 59YZg89D/398hqChw/7vrhAOoAD8gsLjKMAnEdAh8yX8vqLr9ILMV/Q4XZNv4OSO7A+h7WgHXoB2 oBfRy/g4XLUT7Uft6PfIh4aie9Fq9Gu0EYloGuy5Hk2ArwD7f40DmXbUBz0IvPQgOgznXoiuRgeQ F/szX6Nr0HrubbhqPbKiAjQYjUNL0I14dOZyNB19yl+HqtFodBlqxq2ZqZmbMrdmHkGPov3c7zNd yIKCaBZ8D2e+E97P/Bn1gituQ3ehT/Gtyl5kwFNa4cz70FJ0N9fI48y8zE9Qgxi6AurAo3p0GB8k Kbj7HPQl9uPV3BC4y8OZtswhOCuMGtF8dDc6gKvwCBITpmfqM4eRF56xEu56F9qN9sG3A72APsSa cDzzSOY4CqAyNBLa047+gA9y6a616Tra0dBLJagGjixBv0GvoqM4jl8iSwRNKBcM4crMO8iN+qHJ UNvH4cov8L/J1fC9hnuFH545D9mgX26hvY1+h/6Cg7gPHounkBKyhNzPLUUyPLEffGejBdDfd8Ld P8EpvI9o5Aj3MP8Uf0rMS3+WsQFFkugedB96CVuhpVG8DF+L38N/I0PIDHIP+Sv3a/4J/i1pJrT6 YrQY3YieQv/GTjwAj8cX4fl4Nd6Ib8F34cP4KP6KDCaTyCLyPTefa+Fe4M+D70R+GX+dsEG4Qfwq PTV9KP3H9L8z5ZkNaDzww1qo/W3ofmjZfnQEfQDfT9FfsYAt2AbfKI7hyfgq+F6Nb8QP4e34CdwO TzmK/4q/xj/gf+FTBMFXJCESIwXwjZOl5Arya3IvOQLfo+Rb8h/OxxVwKa6Kq+UauCVQq43cVvju 5f7CB/kjfAb6uVy4XXhA2C48JbwsHBc16VoZyW+efrirtOuTNEpvSt+e3p1uz/wFeYCGQeiFfFQL tZ8J34VA79uB43ait7EGfRfEpfhcPBp6ZgZeiFvwSujJdfhu/Cir+zP4eeilP+Hvoc5WEmZ17k2q yHlkLHwvJnNIC9lKbiXt5D3yEydxFs7OebhSbgTXyM3hlnOruNu5Nu5N7mPur9xJ7jR8M7zK5/MF fJJP8SP4Gfzl/P38l/yXwnThDeFzURUXixvEDvEfUn/pXGmcNF5qlG6W9knvyE3Anb9Fe9GzZ2m1 z7i13DBuL7qJVPAB8gfyB+DnGWg2V0+AU8l2vImswe2kUFgpDiKD8Bh0nE9CX79CHiAnySCuHo/C E9FC0s+8m+jmn4RVLf9b1Mk/D237A9x5pajhq8n3ooZ2Y0Rq4Jm/4/ryKe4N9CH3KZb4B9FHvIp9 uJM8zo0DLniBP1eYimLcvegZrgWvQXsJ6DH1lLwF+HgMfhL0wiRcjn/kMogjY4CLqrm/oevQIvI+ 6gQ53oTuwLP5eegmVIFXoy/RYyAVJcJlYqnowa+RBfxm4sLtiPBPQOtqcCHmBDdahxu5u8XvyQfo cnSEV9En3NNQ+yPkGa6ePy5MwPNBAtagDaglsxatEqbyb+F5iMNTUIL/DLTbaq6cj8H6GtAq00Gn 7QPpPgB6YDBXD3v8wDmjgS8mg4a4G753gp7ggYMWgIxfCFrsD6hdnEQ60DzBhkHrgG15Iz0BTcs8 hu7KzEOXZW5FvUAfbMyshjtuR5+jm9F2vD59FWpGEZCcT/BoYTg5IgzP9CKbyQdkIrn9bPpCbyew H30D32fQcHSu8BzazP8JTUR1mS2Zd4G7i0HD3oUuQRegY9DK7+AJ53MHUUV6DNmVGc41Q3s/ReMz j2fysYrmZy5FY9Hz6FFJQDOllDFk8qTBRt2559QOGlgzoLqqsqK8X98+vXuVpUpLiouSicJ4QSya H8kLh4IBv8/rcbucDt1us2oWVZElUeA5glHZsPjwpmhbsqmNT8bPP78X3Y7PhB0ze+xoaovCruFn n9MWbWKnRc8+04Az5/7sTMM80+g+E+vRWlTbqyw6LB5tOzw0Hu3A08ZPhfKNQ+MN0bZOVq5n5a2s bIVyLAYXRIf55w+NtuGm6LC24Svmbx7WNBRut8uiDokPmaP2KkO7VAsULVBq88Wbd2HfuZgViG/Y wF0EyVaoVFswPnRYWyA+lNagjUsMmzm7bdz4qcOGhmKxhl5lbXjIrPglbSh+Xps9xU5BQ9hj2sQh bRJ7THQBbQ26Ibqr7ODmLR06uqQppc2Oz545fWobN7OBPsORgucObfNdecx/ZhNu7hwydWPPoyFu 8zD/gijd3Lx5Y7Rt2/ipPY/G6LKhAe4B15LE8KbNw+HRW6ATR02MwtPI+oapbXg9PDJKW0JbZbZv TnwY3dO0MNqmxM+Lz9+8sAlIE9zchiasiu0OBo39mc9QcFh086Sp8VhbXSjeMHNoeJcbbZ6wak/A iAbOPtKrbJfuMDt2l82eLWjWnoU53cdYiZ1OS6MmdPcspjWKjwSGaIvOikJNpsahTQPoYs4AtHnW ADgNPg0YrmqbDRRZ0KYMadqsD6T76fVtQkKPRzf/CwEHxDu/PXvPzOweMaH/C9Ei5ZNuVoPjuXJb KtVWWkpZRBoCNIU6nsu2q3qVregg8XizHoUVdB8aB307s2FgH+j+WIwS+IYOA10CG22t46ea21F0 SWg3MvqkGtpIEz1yMHfEM5keac0d6b68KQ6c3M4QradNTnb/2XWva9j8gW3Y+/9weI55fNTE+Kjx 06ZGh21uyvbtqElnbZnHB3Qfy5baXEOmciGSLZEQx44CU07vPpluTNXa+AT8iYypZ3dIMnAl24Oj w9v0pvPNZYMai/2XF3VkjtOr2OrMZdlqtg1Mnb096Kzts6qnbeagwmAGR02atnmzetYxYDXzgSOz K+B4NGlqLDqkDU0GyUzAX0fm4AD6awi1GdBlQ+gJwH/mruzmWSeGsuUG+FDu7FU2HBTd5s3D49Hh m5s2z+zItF4Sj+rxzfvJy+Tlzc3DmnKM05E5cEOobfiWBuir+XggCAVB51ExHjJpak8CMa5v6MXc G8wAqoAA8UrovHaCj4lSB7nLcCGBP8YhVeKPYRSQReEY4Z4Hw68ADOyN/Cn9ZG1X7Rj9RG19Vy2q g7J+Ghb9+sYcMUcCFhjM3ukod/C0IaBTKMofpC7V6vR40iS8DQ7UOYZaZMdId0qyrnfgij3oAZsM a8MhPWC7GHE6F+U47mnHfVvooxq7TnbqJzvhOXXwCNyIk8RRWd2/ukKU4OvRMf70tj/UT3t+7aqi c+IpnEqPfx7/iG3ffdh16mjD5tufeyGdn46e9fw5hlZMinWiqDpGToXWQH2Aw7BuRw9wF9uAb9p1 nUyGwo/tdjsrHGu3WlnhW8OuqmSy3ZZvI7anndk6puDzs3q64shRWZSEb4UXLKJOutbiVKrgnKIr 1z4/rf5Iejz+DP/l+f23b5721qmuD79L/5CWmev5ZPoTfB34KCoas1cFwjwlduBxRhJztYRgFdci lXCwgcQB0sCxgN+WABrZBkTcZnnwTqjLicYTx/TOWh0IQ5d6p97ViR3Omn59K6oqPG5RKurfv3rf 4XEXltf05w4fbrkhWR+YeRE8dzDuIAvJYuCFMiPQTJo5Uo/r4ZFxRIJCM5wQ4Jtv9KfG6Mca9S9Q n/rOfn1RCzSzKuYZTEpwx969put8ABYbof4cShh+Qqtba1ZyJ+K3wfFtPKvnycZG6KtOs1oHDh8+ DPyIJme+5B3CQaBRHp68i1DeNdRghBfcEavVp3RkvmL0oAUjQAmiOJBG9yCvpsFSo/tQHyDGYVgc hvvTJ4R2ib+80wm4k0jv9AVQlhW+MwIWi0hvqdM9SNc0uqT7um955p7tYjSgh4FVdpOo5Tdg3rzw c8LPnvnMuIQXN5JNlk3212yCIln8ZJhrtOeCwJDQJNd0z/TAhNAiaZFllutSz6JAU2gVuUJcYbnS vlG8U7pdf83/IXlPfM/ykT3YXd1lihGLV/ZVMFJ0hShb8x3LEGgJwwZ7o+DqErQ18uoNJiMCDza2 pDqz1cSNLeDKDqAfDL+GBpfu7F9R7vU6gSHFeEFR0qV7K8r7O/RkvEASJy96e9uK3cvPW/j2g++s umX/E6tXP/HE1asvaCRvYx6f8/SMPenMh+l0+rc77nwW35e+4/vj4B8u/G7BBkr3T4GAp4B2Ktpp RDnD6qhcxF9DbiZ3yfzTPFaQKBBOEbBG8Osqq71K24Qwlc2OzGdM4qDwjeFgBA0zgtoYQaGXjQAl V44mjD5BTTCs9koh1xN9BRwFn5oIAcsBXIvXI5NZW1LQLynzAxumzqrz1WBHDe0f1JiKxR2iKFWB XFSQU+2D3550x1/7LOevOnd1/jMjXp9B21YLWF2CtkXwq1leUhy61e9yiZOtlJUcDlb4zlB0HUoR txChLOqjJ0Qi9GgkbIMjEY3WPNJBnjM0ovp80XzdQUg0H+SzzzuH6fIw6tNJa1pHl4fKKfOS7gdq TidhDzQUu4PknvOZYXG6yOSIm+6j994Nt6aiYrGQyT6qsVgv/k9Po/xMn0efxh5m9B8kDBKfE14U n5NelV8LSyO1Bm2SbZE223al80rX9c7nnZ8HPw8dD2ovWp51kZAe1vP0iC7+JnMcScD8MqwVoFYw ouqyKL4eDrrD4aAcDnKYyMEwZ43oHeSRPWMd2NGB/XtpCxDrDjsmmrrM9zb0NuV1/BxZi6JIxwMM zbG3jswgS8g1hCcHSCHKxzfvMpn9BDB7qlY/0cmMUF1nV+Mxh5NSFhYbbb1TtjX6IVP3oZwEDECN uHFpQ0PCE0tWA8X796+qBNZnahHkAhQkGBVR4qXT1cSXePju77ffddW19+L9rh//+PbJ8x9/+aHp kR07BtfOOnj1oc/nLvrVvZtdRz74ZsfUJ59/ZNPMfkz/Tcl8wXuBV1K4IUs6S8BvUAr4wwhTZk1p sIFL4qrVrtkjqlriiYT5SElYKLHGrZo/AEYpqlP2j0pJSkd6erIP1T+H+9AvctbU1YFi7wQKdr6i v+Ks0Q+lyumPUrBYsHqtw6wbrPwwx4WOFSFugvdSfaF7tvdy6yr3Butm9/WhR62qEOUY51g0q42X MDwXU8IY0IDnMA1ZWXFVu6Z5eP8B8ggKkPlGEdRSgGpanctmRJdESdRPeTnaKi1LMu2UxCipJwnU +MSz9Ehyay9/Bx6wO/A2PoAHIAQNt5zRV2Ud+NZdOZXF6Ei11olUo6m5uo5R9gTbRSlqEhSEFUgI 8opbGlzVXqq1GOmk6u5ijoqUjBJdonhBckp7/m2Lrtn50JqK0W6nZVnHhoULtrjbY988s/L1RXNn X7s1/dV7L2Xwdf67NrZdu/pB9/1k5ZpZ165bF9376rzds2fc2zvywk0H0//6guIlFAQ9oAsHQMdZ cdLo75yqzdfu1p7QXtOE0dxo6695zgl8jjSRkwTVwklIA4F/nePdHMdzVkQ0Ky9xz5HnkAzga5uh Ip6HU9DrKt9B5j4rCKqRl1+p5rShahonVviOWSm1A1cbVskoiFdKrbEqaaudUIayWN2ViOgkSjhC L6bXQOHYPnoN2WvrwFtYX38LGpApwxNUxdTqX+hMFwKQO1nrqKHdXFOzsXeKB7Gx2+3Q4YCz9yNr 5pPdzhpQO+8YlooarqBXDcfn5dXSWzQAOeAcw60ZlhqtdVyNZiRrtIIwrHvVMI3bAHCwClc4Kjxx B+fA5PaudeS+X73ySnu6Cs94lNt3+oJH0w+CYN/WtQj6tx7svwdkJw+V4rFZ6cm343w8A3M4VBwx rNhqBaUXEgoibqsawSihU3XIsIAe8enUdPiY7PgYFvBlDffhdw7rv2OcBWzV2KkfaqSi0mtRAA+V DM/QwNDoNOek6CJutjRbXuicHV0uXx5eL28Ivye/43VIUdqPRWbPipPjTHBoKcYOSPRAUTQejdED DlrLcVYC9Qzht2dQ4wbCo+TqDChzgOFEexPLdCY1gEB1oDW04viz1LbpW8tUKi4RXGN463wzfEt8 1/h4n5ce83np43wdpHBPyjT3QM/ObtnJSg6TGGgjk5cBAygRqNQ0YAmwKDXyokSFxElVXbwAOfRq KjLYfUaiRO7UHn/ZyEVTBk++hAx+fl571xVH1/0lfey+67/a8XFX9dibxix95KGrrnySn2hb2Le+ 77nf/XlWU/rfb23uvBqPwqvxEy9tf/n0x41PNnTcf+fOnUwnzgS58QqPIytqNmyHrJiHPyLzCsgE Vf59CeYVzbqM4wjtlLFM3XMkaJeXKX9HY4H6MwhXB6sl+BoAIgFbVnmAC9LYUlt/onOMfpJadh26 gFqCGkeNqfZxC8OnIuJEKd7f6ayeye3dku4c1d++n7v2n9fzP+3YclvamT7V8dEO/A1+9V7qCU0E HgwAD/pQHPUlyOTCdg2FIr2prIFNJ5N793bGIqJQHHFaI4pG2Y0iyn0Mkabs1H+gjGjPGWFaYAft fi7nXHC5s7huBuYKPRo93cPu6GEM7DmDPM+GtdR6d9bUdKPbZ1lFxFxFRLMixxjKted0Qfb5dB8U ThsFdCd9LL3Sw8CJh7X0TPtyD4Nn4T7ZCuR+VIaqq7y4xDvSOzL5hfZ1X0Hpi9egNXg1v1xusSzV Lrde6bsBbcZb+A3yWss6bYP1Rt+bjldczgKQld3haJCuotE+dNUrmqQCFCmJaijiRxpUY1tv3KOn l72oYKWDzDP01DK7EQXpAS/SrtuJvQPfsq/cv6wNHCM4vrtwmacbHnsMD/Fs7dcNj0+A9J9g8pI1 Nc6aRtY4qvyyMsPAQuPSFtTS0ICTyarKLDTI2RQEe1zuHvLSU3jwwuZLv3jx4DeLFm+8MX3ygw/S J2+5ZMOi+euvnztv08CRWyeu3b7j2mse50Ildy7c9uGn2+beUVJ2aNPzGYTxwZtfwpPmr7tuxqyN 605n6reOfaz12ie35/wiypMR0IvPZOltyfeD+nP4OzInGUH9FIhSCvopXC6mFPU7GEkdDDU7/I6y lKU4Qj3XsTbOZnOjcRgzQGLVAaFiPhK2FlBARnvlUKqxnKmRctYxQG3KfjrVox//rhuV9qjEN4yZ acEoZWDHwbj4f3nq2c/62aP69HyQUTkwONprxC/yXhify13qXRycF78yuCayJXhD5G7vE8Hng994 v4iejLrO8d7v3eHlBpbMFknRAcCicWAmfywqRosjY20zwFu3hekj8dvjTKXcTiuRfwDXIAvoZIef 6WNojl/3E//WMqqp26midnTzksNwEMfW1Ks9cQtlJcpIoHezxiXLRKgRvOOGLFQ5l1RVFlF9C2sE zOR0MPcriRnLeBgvNe/wrp45cc24/rj/c4v3ncbSKzd3XnXlPx56+kPyxqPLV+5+YvWaB/FE/crL Rl/zfrPmn7IIy+9/ivW7039L/5D+Mr3nmRe5ynv2Hbp3C1W6GDWjv/KD+N/S8VhDu5lrBfdLEDmZ CM+RabCTI9N2E0M8gMcBFBlneNBT+KkoT4IyX8tcssulC6exZtZS7YoCfYL1nfDxBynwzAIyBNoV ezD2NHNvnE5zhKzdju/ekz6UfmmPGQs4qw6t5GYeLD0GbERoHTDioQ6CgWkdBLMO4lNRjqsVUVCO CljI1uGLRqhBbX0nrcT/UAeMq+gfP+h0FYdPZ7g3yNr0zD24DtfuSc9lcS60JD1eeld4F41AF6J/ GxfyMT3qjcUSVdYK2zDbSP/Q2PDC4SNHTJlku7LE5k2U4KRSmpcsqQr2rxmSmOJvyLsoNqVkysiG KXP8cxJzS1YEr8xbWrjevy64Je+G2MZkwKaPsyFuIjVlqr2or2WchVgk73PkfDQEjSLPtQ8ZyKn5 cPTZgTiaak6R1AFcj4rIc/v6nF9ol7DUQa4z7Pq4c1Ghc5u9sK/eDIDgAH4Chcj97XUDSgvhfAXF yf2GEq3CVYGpF24xbV99ZxfwICiyE13HACp3gi/X2QgSdQy6p67xGLBj1g5SpydB2Y8qMxYA8FVX cCbfVfd3VlWSwngBTzxuJ18RLayuEEU+XlBYWARnVztRrJynASyJXl+UxO4sPwPn2gh//eAHxzds X/DwD0svvL+mYM/WSEle1ZSl659K7zj8TXrNu+/iX/0Li/iSqXsrfkw/+Y9P0tenfxwyafaV+CVs /IhvWDrzzX3vD5vstqa9104asLrl/I0zjZaFxsOjLpr//toHcN22ixrv6Zq5xR4qOmcctt78OC54 5qP0vG/+lb7/ibarF3x4zdLPb3vhoxMfYzuOvvHajjfSn/zl9dKiAB59/Z1D1r0xd9Ptg7f+Aeif 6UJIaADcLiEbnrcP2+w6A8g/tGcLPzLFSaglbmBGlBlEgS376H31efJ8pUnfxG3VXxNeEQ/qx3WL LDTgKWScPt/Spv9T+6f1nzaF13grb+MsqiLwPPhVsihJGpRlUZMwQvAYw86iGlFJc8MhwnF0n4fu 46K85oarlIggyBGREztIs6EgWfvaIJiQA9gCBsJiOLUomiNxE8bxR/hPeW4rj/kOjA3LOO2g9KnG bdWwRrd1u3REItdIrRKRfmV/708sLtgSgB/8+YE7ggEdtJa/rjYI3FJL44WdG4XeqRQg/429/WzN lDF4BRv1Q4dshw5tFMw1aLdRbZaJo9oi46dNbeftnCwdAKcfZX6kSq8BL21pNGMtcVyB41yMc8W4 ZJEocaTij2Tqx0913fPgB/gfdw0vCFcIB34ajp9PDyXT8O37r7jxBiqrHLodsOLXQCsH8wJc+xEP VBlBo3A8Pzw+JT43vkxZp4gLgpcLzcoyy3XCdRaxyKtw/qLSiDdPUVzOSGlpSQkK50Wg5/IjEQeS /UlRo6BLBI/KqKCGSnRSIyWKtO9Fmd5dZNQW3ZQTxEmJpBamV2gqPU+jnOGhZ2nBsrxIlGnIaDZi dZJZPlbIRqt+amdkNguiGb9SWcyqMTVour87HtXIwuh0o77zRDZElY1lwA+MSS04aDV9HDXUBzZd YBqvqnDEevi4NhLHsXIzkJGMg7tVXs2kE8q3k+T2N5bNnbf+5gtbX9qS/hU+Z+2AC0YNv/b+9Ed4 8cXJIdMGTrptS3qHcKBh/5yLH6soer513q6mftwEh3du/cglJae2SdqARcMnrOpHdfnczJfCCuFt oMrbe2eRhXkEm/CWte8rYwYtRVG5dRZo/eV5rWhd3lZ0t/AU96h1P9dufdV6FB3L+2eew+bMc+Tl caVisaM0HM0fYZ3ivtAzJTBfWJR3lfMG593cXba7w9vxI2S7412bC7lRUHfrQR5k85PdxTUMrvQq rtHtCPMhV0TjQhFe0ZP2C1AyCrgimO9LRmUsa7Q2ciAyazrTlClQldDRsMx6SQ7WmUABGh8FB2kp 9jGVBx3nLKwAfSclqWGmGpGaZr795XPSv/28M/2ne3biIS//GZcNerHi5V898bfpi7/Y8PBfCen3 /amX8GVvfY4n7/rsjV7bbn0o/f0tz6W/3vy8aX/uB/0zDXjaDr33udEnmo+HyCZ/OvSIHclQaQXn syCRwthKUVmc28/2MOZjaimYn6f/18z37xzz/ZhjvsjPmS9bbjzDdP36Dlll9OdCkizKgszLvBjw B/1EtKggCSqYDK/b6/JyYojzxbDTBgu/HI5hr+qIIejHVKoUPmtxI+VRn9fnBTeTAIcmYuXZWBv4 oLH78X+emnZ1w/JlY6685fD69C5cc8uj/YbV33HpmB3pN4UDnrzRl6SPHHo8nX5iZvmO/v2Gff3Y F/8ujUCrHwLdQHPTLOg2wyMKEVmWJMTxtCNVJWJBskT5I093VkqTuAuiatRK1KCVV/4/CKw26CKT hbKdVs9EtrH+xLHUzyW1X19otSeW/T3EF56+n0udfpdbJxzYka57Om3dQeUIAD2/HtqgoBuNFGvD zQABcs2AJtwbJVELIUHLf1Fvw2KOe2TFMP2L6quDpveofo/6HzNdZYpYf1737dzHpz8nbV3jaL0H 7uiay7DcYpD//SD/CewygiF3yEOaivDFsgs7ucJCFHP6SAJFCBPQKK0FxqIvYuPAe1MwThYlCgHZ QcuKmliQ6hhrC7PB2WjVh4wGzAaH6PVkaWsRLspLRlWsMgdGDSRnXdQtzvV648lsi6D6NOTR7RbX sm0zblhD4Q+w9FA+HgoHw4EwJ2pJPeFJ5iflBJ+MJ/zWvBjy2l0xONntikqwVSAkYjhsAd52O2AR UWIxVMjBArFgCngntXptKveh3A74qirhOEuDeH1SbwIqhI5RUlgF/O/gRpPFN6ePbns//UD7Hjzu owcwvjW5M3bJviXrX74iNmAjJrdcffxcUvc07vps6bL9+OL338PL2ud1/Lpvc2v9+HVjNz1wKP1j 68xq7AB6PAI6pYDJwvs0RnfQCLo8lTwXUdRt6lGVqAIhFhlkOCpJIo0fMqsH/U1DV1BiQTKROtx+ Zv0ws36NrVZsJZZodlTmoKHCTf8LBpSzDNhD53iz8hO14qh1nLXJ2mzlBzX4U40t3cMxpg4y6Ziq ZcFIkCfwx5kiwmDogCnhF4flIy+Tn15+uUsUDnQ9Rqb9NJzs6apnfPkiLNZCP3Dozb1UfggdENoz 4Bw2MLSnotJc9+prrotLzHU8Ya7zIubaHzQHkkqtemVU2CrsFIBbAbTdjLahNsT3QQYahz5Fx5Hg jMLOrYgTzMgr7Qd/tn++zfXPd7n+OWnoJuJj/fMQ/15DDwU8ZPrU3a0A6xobWpbWdjXmOoWGZKk4 VjhefJlCJGhjdeZLbibDRE8Y+hwyT1xOLhc3WTc5RIVJXLuFClwHDhoWPmJXlKSqykkLdcppzViB VshiaghWME033WOw4KKlMerCUZfhGudqcvEunERs6MFUi9/kyPrnrF4Z5dyXa0mn3thitoiiSBDC zlQdcw3NGH3/KmgICzUmB+2UmmeNXFj8csNL1750GG/zb189ZNnV3A+nAx2vL/yE0hKwnzCB8jRO GxGuoLpGVgYWqVVif3WEeiG3gfsTJ61QP+A+AENE9QQzj8XCFn6z8CT/jSyoPK7i3+OJQtlaccYq uShdAHTYo9U46d49sC1n1zxd57H1wT1OL93/iXFOAJ6ZSJwjK4HAOSC8iqrIqsDxfFRQ3YIAWyBQ IqB3UVWRQHhMJIuMZJUjFvBnO8hAw95XwNuENuGg8JnACxfIdJ+lr4SjgMbbJA6cvQ2GZon+3xqk H84YpO0Uzmd5qLOrsQU8wJZOqpNqqQDV1tIf6EEK6OkIGKz9LKYvyXqtXAvw3Q/wPQTwnWLr9wc0 mAElunF8j+ag/XXc8EFB1G2OSlm36ZUKLak6yAYyn9vA0BP70Pi/QymAfisL1PD0VxCqAeH4ZJ8X it4akXarxVkjF7hreMNdQ7t5bwKKnprUmU8DvTFuWdqYQtSBoNyPYxj+JMftL5P3sdR1F7k2g7pO HgcFUEL+1PXM6TvJF9+keZTlG74U+EZAiw0NE9CCApKj1Dkijxt2iXD/NQA4+QvQJP4CNH3RaFp+ U0hjHqjgWyCo/9zB6nInQqId6qKTY2aQbD+SQQ8wPSnbrA5m40BBQEGgQ8bFtKQ56WHBrnEKwkRW LDYkK0S1iEx+9azw/rSPCa+O6MBQti0/5tpyuv2s5AcaJq47eFA/evQgDZSkUibFUC4ZIl9iOklk S44tebYU2FKmHBenJcLABZhNapNtZ7xjlS2lnPMs0y7LZwN/AtaiqrPSzhaCxiFsA2gmA0ajDad3 YwV2k+fIFOSEvppiWLMoRswRgN0W0aBz6kQf4HdmHGrNxjSe4b+UyZIh4xpE7LKbhGR+hbZB+z10 pTZSG2nnSviEtcw2lbuIX2FdadtolS1EkGus/W1jyShuqGTI9dbzbOqd5C7udul2eTv3uCQ6id1m 6ysQkHgia1ZrX0GGoqxNsE/ABrjjMp0QArrfZtMpnZqcrU7iPEC2Iyvut1uIyh24n6Fqiho1tGss 2HIAGmnDFjhCOsCJV+zAivZmHesdZMqzUaFJaBXAnJDtexzUQAZoDk9jrR84jfnpUA52bxxrBK8d ukHv8Q2CL0+FfeMa5rzDCvTvGSf9BaRlTgEPvodI5j3mo49q0+BYMdMA1syPu2wq3Zsd7HtnX6zG VhZjA377qmts5dWsuLcX7M0O6qUawMsHOaXxTRAA7PX1r8YxMNM4jh134kJ8UV9voArPwMJz6Sk7 01OFA6d+uOX8cfdwp38azr9xqor/7FSUycq9oO/zKRbGa3Y5LTm8Ifs1LxsX+cqI0ZJMwBZLMihd mUgcJys8IYok81xUFIWc1RW6oY1gyhKAESPIGLoxasFRyzhLk6XZ0moRLDLgagZurPCw/w5g87/E N90Au4dJTzWmGKJpOXEWomFxuJqajTyjUU7dcpnPngUtK0dhgZhKpeASqNAuG8NroPkH9w2vkY1y s1heI4GOpW7wvgAUy80i3RtnRcMSr5Fsbvi56PaJfS4o5pnFPCh6aPHHXd1KF/cQHiBiBaY4Czvu fZUjB149nQaSreWvAXK1nmo1fdhZgP8/Ft5BNhRCrxvjgnbs1t3ukC8U4nmdd1t8lhD/hG+f7RUb 5/P5QySaZzjGusb6jOBUYapyoT7ZMcM1zTfDPyV4YegG311ED0Q4zhmxKJ5klMZAAW1QMkg59CTR kSra+RLFH7T/pdwIh0QJE2PqJ9iah/PsSUpFsYf6CIRznr/p+jfm9Hf9WZlR4P67dBrfpG4qQ+/V OqooR45KAu4/moU34f5v4OFPtaf3vXgkfWD773Henz7CoVVf3/KH9J/I63gxvu/l9KN//jS9be/v 8bTfpP+dPoIrcWgPtvwq/bnp9/NdwN9W5Ee7jbI5jkVuMkof5b5Iv8jNW7QIaBnk85t+nzMps1iT rGf1b9YPkoPRIIa/oN/6f+sO/tKbDfQ0Ztn4U0ujGYHqdghN9A1ODXPiIwT6JhZzQLnbfyclt9Zf emvDd+nX0pvwVc/f3zi637r09cIBm3POvsXPpbu6nubwlmumX+exmrzzIMj5DugHPyrAp42Y02LD zv7haflz5cX5vMLSuWS2lNiykEJa2hKWXEULWq5gyRWcHZm/7nEGK2F9fE9BUaWDbucVVerZtT27 huPv78lLmsfhfD27pseNkVBI2C4IXxCdaJkeXhxeqqy0rbKvVzfZ77A+Ye+wf2X70q6DzYs67G6H w+6wa4ozRGJBryo6aT6W4FcUry8YiPioOmHpgz4fihUwivr9drtNjiRt94q5xEUxRyzmeBUwF0xk AcfGaGFzYWshV1jg/2+pLP6vOilOIeLPnP6sCASO+Wmwh5qNLLVTcKy2pg/LmzLTpgTAipQBUj0/ KOuxGKps2Gvs+kCHcyBVHbiF2Q0baKBgoMYBOsoJP5sRrtEB8OkF+fDrVjoNPUKXPq/PFed6E2Co OGMuNn4ae5BsPvTmla+/XV88eXTmxMuTL7uwV2zUX/CD628fc8fD6b7CgbG/X3Xve3mJwjGXp1tw v3VbBlikrsu5iupVI+azPMTpmS/5vwtvo77EYxTN4mbxy7jlPJ8oquJqwkO4kdLovGH5QwuHF03k GqTpeRcWX++yxWkYgvZ3Ya6QyBWSuUJRrhBnpDBPNguJXCGZKxRRz284LRVbk4WkkCtK9LdXxocm hvWZFp0Sn5y41LLQusg21z3Hv8pypfVK+xr98sJliQ3cZsv11s32G/X1hdclbrXebr/dE8nitV6x pDOUDCrJEnDNUEnQyZf3S6I5IFzWXqtC14dIKOG19ooUJXBC8ApUe5hjGJFeSiTi5ZjWSzmcNY1m aISuGtkQWp9O8xsyeiUKbVaLEAvnRUKyJPIcEXGisAD2iUIk1CtoULa7GTRRpxf1YoEeZml1HMXj cBNuxluxCE5om+HqRR9JHw01vkBJohJcQpW4zUYml9CqWel1JcFyaBNOOqkJp4ecOSZ3dg+VOCdR WQj0ywZ+GuuPMY+zk0XNz4RzdfCe6QhY6gRtEbAxHbugEfMG6om2nOFi0Pqu6gipKM/GIguL2PA+ SxrLxnw9bp+X9zEmBae1MDn9WeuM369Z8uTEcdMHpS8dv2De1T/8+uH/bBAO2Hc80fZgzQD8wdTW Kzecuu/V9D/vwn/SL7vxwvOWDR02L+6bmap+eM6Sl2YveHOt7Yab1l40tqJiUfGgvSsuP7Js+dfm +GhfsA8H2LjU9YZVIBHocsSmSykdZNmeqDm686wYxaQPTW3AeC/ORma+MixMQchZ7fBDzoH5a05N nM6phbQJpOkd5X139fRloEMBoxxr/EJn+eJ1uST+KhoFJK50Hr85HRKsO3b89E+zvgro8eE0/w2f m83OcgoYycx+gTusyAImQp+PD+sfH3ZUVMAd69jwY8go7CPgUlTMJdQ+Wl+tSbtevl7Zqh3UjoMn rI3TCE8sMskmNihYA3cBbllXx8ag4GpVUaKy4JZlAUEHEMFNiKDAo76OqoC/58h4DpFZOKa4ZpyM W+WtMmxjbFiJUVwzg+CbyQOEELrHERXGCaQvYO6t4KEfFwTA3Zv2WJq2m7i7heYL05+fDjGDogwG Ov11tRRdZ4fG6MiYia3dgJ93Izv4Mv/YrTgxXYH7AfDFTCChMLsYTuvPYDZikzoY7KDJWDFcYaLm CkwGd/3+Lbymd35BL7zlla6XAXn9qbV55Uq+5KfhtM8DCEkrqO3EHxnJEpR0lDiT/hrU31Hj7O8f iUY4RjpH+KeiCx1TnRf69TvlO+3ZjjQqdBwMpDyVQqU2VBiqjfJMEiZpF3lmC7O1RZ7lwnLtKo9d 8FD/zCkDIxFGx7o6RjUf0w608yMcD16QKEHnq2B4FKvNbtfcLqeTToH3ezoytXsE5I/SteZ00LUx zQMQGwmEAM52Y4z8gixHPH63x+N3aooS8Tih6HRodntUd7h13eFUNNnvEewOXUMEqiRwft1uVxRZ JlAnv9PpcCA56PMF9cEKHo+iSIOlB34GEvD4fVE69BMIdOAbdpmGrzEYqO8Cp6krGOjyjxk2Z+gX 3TYv5zRRe0cHOHM/gOf1PV2os1cgLhtt+qFDsKg9lCv1XACx7UBsB+UJp0qTckwOSMDO0jMckHXL bLBnj2YIxgCTKZY2AkO4TIZwOWHlqgBXig6bYnx/+qpXPy0MDlCx75u3xsbDvb74bfqy59JvFEk+ d/o14cDpujtu+3sh90lXMP3tP29o554B0N64JTpnxKmHmcyKWZnV8MJ9sjKQ4wcpHZkv9zh9NOD1 pWGDAh+ABUcXCkVLfhYje98YBAW+GBbOJF8il6p9bPx8PF+cb/lE5AWe40RZUkRRETlF1eiYVVS1 uFXVInKiwlED6KV7uSjBIK5Y1CwiBvWGLR0kYCiqqnAEtIatg/gNRVMmGGqrStQOvNewWixaFHET xpKbmdDuNRTgIXcODxkWpvK0rJr7a1bxEf8+q+3lGBXk1EnT+6KpXl3m6guq3cBrPsHiB0D4jb1T KRlkWWDD3bS0kQ5y67AY1eYDEoXp8LasKRp/IHMCfLUTLKmnwcyloDhIYTEv+PHgfe0KUIjT0G1n Yo4zAu4gg7re+BbHxg0772Ic/mvXs2QxV58evnr1sq145+k9Xb8yMfIFma/4MH8uKkbVpJdRpliV 0oA1WFpiLS2tsfb3VIcGlo4sbbQ2li60Liht6rvZuqHkbu89wSesnuJcNLeIzYuhpccCTxbvCzxX fChwpPgtz8fF8lAvjlDL66BGwek8k95QRZHoZFrK9+X7U2WllTV8TdlI/vyyKXJDaq68ILVC26i9 pv3H+p+Uo7rShnm9T2Glrzzm9s8oWVJCSsJ9bHW2m20P2DI24QHbTtv3Ns6mZWdNfZObR3XC8NCZ ETaWj2YTab6azRbmfB3kyX3+29zhsIToSUFmsoYVqeVhzlIyU5+JREbmRKyQgoQsRPvW9PMLeUr5 QjqWRLMmC6lnQNteSMPUFvq4QvagwpwtLOwgFxm2IoPmqUeTfZM7k0IN9TQo9gDo9t4+VuhXw0ID kXhl35qDNWRbDa7x0boNpnf0JfwFfQpfFI+IJF+sE4loY7CeMaPoZ3iepXCKzAUTbQzbs9Ersd+A HtNQALikdDAzLIP3RHfkvyv1+ecU0BxL5VLgc+e3mLCtpjvriaEZGipFLWZmD4Ux1exbVVlkJsOf Sxiu8Xo8bq8vnuREyUbMXDM4iaudvX/hzudHLDu/atGH83DFsE3XrMpr81929PpNT47TFV/B82Hf JYeWTC9fvGD+Q8m86yYPf2r9mLVj3DZrsDChXtbrnIYWf8sNo4yZF/ReefzU+nMG4I+Lw3pxfZ/z my4ae84VjKc3AE/T+A6dz9Vq3IMFzV4oVAnDBKEuvy2f5OcXhCvC54Wb87fmiwNdtd7a4Gjv6GCj 3Gidam/0XhxcKF9qnW+/zHtZ8GD+B9qHvg8Df3V96/s28Le8z/Iz+YGo0Mfex91XqLMbwmj7OGGu 8GHev/ifdE332HiRoFAYFKjqCdss/sKjFqxbDEuTpdXCmyPtFsalFn82uHoy518ez42MmFPELDS9 m42QUC7oQylqWY4dFYg3I0MMXFVwCUIOYkDA23AbPo75fFyHx2IOU/hF2RbTdNs8ymCYMQtm40LY SZkFM2bBNORJeYyd6qWPxn42kMpSUnAgMqK6p1fH+GIpHf2EPQB+z+xkmBj+WN6IqbBalqKWWNxR 4QCkCw69juIFRRwA3TNZq70eb1+665KdLUb6hxeeX0QqJ9+y4ulHL1/xtHCg6183j7359WXp79Pv 3Ydvf3HyDYffOPrKYWZbxmW+4jpBZwXxtCwerLRdY8d2C6bDZc2IQ7wzbJH8Yd6CbR5Jpu2XWPsl lh0q6bT9EuPyw++8YmL5Q43l9Edh4whFw/nhIa4hvomuib4mV5PvHnIPd7f1Ef2RoCZbA+pCsoBb KFyuNVtbrY9pe5V96l5N82obtL8RzlYww77Efo2ds2NQM8aqvmwMrwmqtRVtQ5+h4wBn7XYLOlPH MFS90CYzHVUQgvYVWlL5YHswTbGiJDIYfc5nVAkyqowMewqPSDhfqpOIZGNRKpWeJDEVK/ULVR7K Im46RmOOWC/NzsfdjzDFBJ1LT6Q6l+ZGrx01ffTGY/DHPBegXAP2mYn62cS9nJdCacfV7sr7/pkP 0/9e+vX1O/6cvzNwzbRNTz6ybuFNeL3v2SM4D6tPY7J254OhRZf+9u33Xr6WyuRwoNmnZn4Vnmw8 ohLemrBWWodahSp3VfhCMkmd4J4YnkdmC3OUWe6m8MH8d4R3XR8HPnd97v7e9/fA50z2vPn5qSAV 2FFBKr1Sb1Jo7e0dSKqso8gw63D3yPCF6hTrPOvn4pfen/AJm449nM2i20EmLZIDgVByFn8FzR22 J3T9qAPrDsPR5Gh1gHBSnjBF1OGksuNghosKq0OkHORgIutgAV/a4w4b7XFHbkzBQb3H81ji83Jn 4YvSEelTKSPxlERjJU6KMJZjulqKmKzIyMZMk8QskBSIVI7rmfXRUt/Z1VPs2LTa2mOUZrX0d0bS aFw8VnVWpiUdyuqZLD5gzqFr3r184TvXNd3eZ09X9OnLVzy6/aqVD264f8uphx/A3Obxg4ntp+HE +ebrL73y4ZuHKM1GgR6NgJx5gGYTDV8+CnsAWTUKjcpkyxxukbBEmWORPeYsZdYBx4wJtJQXZjNX nB8IP7lPBvl+zoGBfuHBzvrg4PB45/TAhPBM5+LgzPBKcaXnJDnp15EX260+3zhvk7fZy3nD9q36 Np3oOh8KqxI6QJ6kHJvTZwdBGqDfdZCO21wgPT7DCpaXuZ/W3IQla27s2ErPV4pKK9us2BrMp0Ou iWQlXRuDqanNx/neCr1QMgpLK3OUivagVJhRyhSwMKMRyy+glOqpFRtT9V3Hxujg8Z9kXn+9mZoN CtJMzq7taqllfo0zl0zHRh1zImYGf91SjA1d4xibMSNyFx8o+27/1+nvsfvP72IbPv2Vunv9rC1d H5Lx2oAp169+Ak/xPdyO80Hda7g4/Un6P3p054H5+LYNQ+Y/xvSkC4jYKryNfNhqRNwKtgf6BPoG jEBz4B7tXusTVjloLba2BQ4G+ADtkeJgfmWebOU0e1jFHpJyu3hOROoDbuzOuAzel+ARR27FbBBj T78BlWwwIxXOr9yKcMCgghIwrCAoWdBczABzARUdVJaFzT9kg4jubBDxG2Z62MAim2jbkfmJzUdC D/sDz+MDKIZOYhXlsHX3aAdF2eBMga/c2WhCbDoPs8ZhJt24dYeoSKIMOElXnCHkEO0hnMKp0rVr cQokZWmFI15VUVVZTQMwoNioXvPQmWK7H3jAFbxuxejpoQHlE4YeOcLdvaVlUeXwC533qcObLtly ei7IxHnp8dw3IBN0TsQSo8liEdxlloR7tGWYW1TyAnlllqS7LF5j6e++wDLcPUWaaplv+Un9l8fW O15WdG783KLRRVvLtpVJ/WP9S+rKhluGx4aVTIpNKlkgzYrNKmkqay37sOir2Hfx74scPq/o6SC7 2ovDLonZEj2K+jJL0ooOoqMIwCtZY5QL4bBdHVYQ1lSvpyJRoSb8/qM+rPsMX5Ov1ceXQZeTyWVM sfmYYvN1KzYfU2x0ghfb+42p2OhZdMJXVrH5KDC4gM0BW27HCVSQX/ii/Yj9U3vGzufb6+xjwdQx mbEHKW3tBWzKUZjeyc60m51pN3sgVbY8RhVcakwPBXeiU/+Zjus6dpK+ReBYdnLDMfO9Bi1glnw0 tY/ByCJzTgPVdL6qXKJHz7kxc3dayocsX7PJb8Mr2j46ftkfb3z+ysfmfLTtN9/c9dia1dt3XLly +9Tg+ET57GnVbTfg2o/vxHjLna2nF/54ZOVTXOkfD7745m9f+S2VoY0IcTT3z41n7kdeYHyPr5LN YWUgO8FXccO4A1ae7RroC1T6ZIfmcHMCRvawILktqpZQjIr+lRkFH1Swl1kZr8GSLYvZ0k1JoFD3 wsHSLhm+U4L0PIX5neztAG5KEoWaGDYFkCZqsu2T+9jQ+BgvmyRW2b+yzXvcS5q927xt3oyX9xJ3 whx01KEOx+kbV6LAOZ8hno3TZJ3bnwwfk1I+l1TVY+jxJxMTIsLEkjDYOcYzYlyP8Rw2v52NP6ZO 9Izdmy8EqDUhIfV+mXTaRJuUsIlaCFtlkEtEhwTXIhBqM/HKnEjriDsYGUWPY2P71QdXPDOq/fJF 426sBVj4w62Nj9zbNYM8uPGqiTet6XoOZHITEKqW5WJJ6LBxsdKftmCsslXZprQpB5VPleOKhJR8 pVlpVR7I7vpMyShqvgIoS+IJp4jc1RiJgsiropQQEP8Av41v4w/yn/HiQf44TxAf5Y/CFs+beJlM 5rv7jWf9xqv0qTzTbHxOs/G5OChPhUilfciPkX/ee0tr2YRY6CmcCwxRll/aknJVVXg46JVN7e3t /N+PHDnl4ZOnPqRzCx5Kj8cDWZud6F1jGC8khEF8hbBBEHyyIEg8T3jBhbDVQji3xjsEi0RbaBGl sMO+FTS6zwdSaU2o6lYLzrfUWcZaOJrqYVTTFmVTP5izYGGepSXCvBONNsoiM7+EybYl4HLviI3o KdVMiml25BidhsBaUF099QtYUmR3+xwVFRt12cz7tcm6PSnraggrNimETI6gr/io8GBzljXN5aLz QDa0p+cX9M+v7t9eMfiOkfzXf/zjf666yzbyVn76qW2H6mdTeQVe4H6kuVxkphESTXQlThGnKZzd +k/hpMgpuZR8c0BPzRWUXIFlALABwcncFSpxilEXi0wd3+MsopGq4+2wdgpsR4ztMNbBHpHnBV6s VkYAKcRe6lT1Cu5y9UPub6L0mIjjYlJKyDXiAKXOOtbawDeIU6UGZQ2/SrhLeUV8i39PPCZ+Lf1b /I/scaqqwHE8oVlgigwbiiwnzNwvjucTZj6YCgzL02A1L9AQqcWCVL4D2w1F4FmMpUCmW7Eo8w90 c8h6K0AgSwKRBPiLCNehsSA5NA+vH5N9RnFkpg0yTkZOpgGYQ4GYc4ICmvUvsRFze9KakZqNjLSc ZCMjqTPjfABQfTU0hs3n0sFoXpgEZJdrObbMRoytoxScr6zjiOK30qQE8D7MWeCGqpTl1ShyXl4t zefanUfTut7ZHWWrXbHsXG+WE9KCWE7YfiRmDu6OseSF3V66+mS3zpLBYMW2NLbaZcnllOBsMpnz Yx7Lbi88ze2uZQs6bLrbTy/+dleoJjuQ02DGQOiQjpkuVoFxHEsgofjJr9ML8YufpB+8Rjhw+nnc ll7RNZvkX5m+iPLldbCoZvL6t30CU1AsAbR6gJkIWlllrvv2M9cFZqKokQBzYxfyhQeETwV+LCyO C1y+0Cy0ChmBB22uEs5U8PROTNF7ANk8gPBBcDRJT23/4xltn9dD25u0NvGYnAVjuaGbTCY3mJPV XWgMf7buosqLBpDM5FHMtuiH9sx17SyN1LShYhIwUxy/SlN9TuQyt07k3oHzvlFvsVYm+GP8MeUv vs+jwrvCySjxydG44g9FFY6LR8Kih0IKCYvxYEBXjybw1sS2BEmAHrMltjqwg2c+m5/5ayxYx3w2 N5sNyt6KQhvqIMxzY2rMwcJ0jly+giOX++XowI2G5k9sDeEQu12o+3YhdrsQzZ9z0NuFmJUMMdc7 RGWJGeeQRm8cysX/QvR+XkQq4gl8FGEaBSD5iMofx+Qv7xfyxzQu8mYt8OkcRj5huJkpNklhM0Wy MNGBV+75uQY2YzRdx3qEbXoE/GCjiw1PtCw1MzfrTCF2+Hrmrts0tyvp1hwh7LR6coY667zQNyuw 4Usfm6PMzDXD0T0N94Pljy1ccUf+1a/f/+Se+PRzm3/dPnX26LUD+eRtY2ZcMvXAzn1dReS+S2cM vO2RrjvI7pUrx919S9cHOcz1BfCLF68xXAInush2vUP/G/el6zh30iXyVOXWAsOs0vGd+lH/Z/6M n4/Kbpvb6wTMhUWvVbXaNFuhn+EsP8NcFoa2LAxtWbrRloUJgaWAnUF7mKEtC0NbsP0fk6AWNRuR O2kwdWhhgM6C4c8yxk+FLkiRl/+4nzT7t/nb/Af9vJ8jFR4vk82T7Q5HNt3zfwRc6s8Al6MH4OKz knjQcP4cwI3xsWnAqTNh3NoTDISdtddMkGYJYWCDu1GYV3QoqqxKKifqSYdoC2G76swSmU4taKFa mFE5G8vtQeKND13+cdOD43S1vXTR+cse55N37BzWXF++pmsZ2XDZ4sG3vtmVnX80NPMVXwR0tKIA XrTPw97c4qKjBswroEK5jJYC7IBTUgPaCPF8eYrYIM8TF8hypT7QOdBb5R+mj3KO8g7zTxemKxP0 Rmejd4J/sbBYma0vdi72zvZfgT2KKFgv4iYJk9SLtEu5OcIc9VJN9YV5yQFKw10YYt5PiDGC1P2y J4kFdLLBwFwAlhWy2V7mKwuyGWGscNBwFSYq+0oYSboUlTip36egJej+kTScAGVbIdJs1PFlM/0Q izeiMKMwCyNk5ZZpIMRS4JEBt6QKgaB+QRpWyL7YzaSd3pJqPNnYIymmO5OMxnzYiNBEYaJyiXCJ wlPrRE9xsZdroOyrNnq6RUMfuf53H2HvVX+/4dN05/7dGzfs3rN+427iwkU3rUj/pevw36/FEWx9 8403//i7N15nNNyYXsDHgIZOFMGXGDdpei/9HH2UztdF26IkP1qixfPKPeV55+U1R7dG5YG+gaEL fBeEGuSLtOm+6aGF8iJtgb7Ytyh0MPq2+2P/x8G3I8fcxyKfRTNRb5xP6SlPFT9QH85foE/TP7f8 PS+tWxw2zhumIXTRG7ZZkC1QeFTFumqoTWqrykcZEaNG9gU1X5jjcqo/u/1TDtR1Z/ya4XSVcluc 5f4ux64KUuFMIPQ/R85zAXO9R8BcPytgfvLnAXM2pAVqkgXM80dU+/FZEfNcwPzn4XIWL3fU9IyW u3KK1etxs6n6RQ6uB/02PjLw1vmbji68/NOrpt3c2/HYipVPPb582a70AuGFzePHb8nc+XD61A2j B3ad4h45fOiNd994/U+UhuenF3CfAQ11FMb9jZssJEVK/YPIKLJKE+s8dYFRga2RbRGh0lUZqosM dQ0NTXRNDM1yzQo1RVoj74jvOr8Qv9a+8eslpEBLeWpIlTaSDNemkQXkA+0j/9+8Xwe+CJ0mdsxb 3cGwRbKJ7jAPhPPZKhCNstqxbjfsTfZWOx9hwYgIo56dBSPs3cEIOwtG2Fkwws6MKQsneGlf281Z IaJ5eh3TH8sdv4yyFjJZZnEIicUhJK8Jfs2oXV7k7AjE/xBh7TpR+0vCoBbsyEbD+2dDDmfFVstK 75j8Qvr7JW9f/buWh7piT69c9tjOFZc/nF5A5EFjcG8sbUtf99hNPw3hdhw+/NtX33nvVTOvZT0Q 5xWgiwO9Zgzq48I6j+N8JT+En8jP5ZfzouKQFVmxuhyKFXEytjChQKpSvFXGckHUhV2kwPG/+/fd iO9Hw9HD3IhMGZ2FK0wXX+wB9cc4Rxz6hYt/TG88sZTO4KOdU5N7dRPSX9toY8nfjUvpDEyTgc24 mgTmYv1D5y6ou+jic887b9DF7giffLDl/IGPF42oa1ra9Y7ZD3WZr7hd0A99OZ9xFV/gLhioXKAM LZxSMKdgtXKTsq7wMddTZS9zVsUX9Pv6jip7zyeEyGRC9HKs+qfL05Xp6nTLdG26daG8UFmoLrQs 1BZa25PtRXaaalVY0r9wmtpgmZ2cXbw8vrywtfBX6r3arcV3lN3W9xH1Ce3hokeK9yR/l/QW5xBp Qa4QzxUKc4Vi00vMnkML8VyhMFfIo3nRzkjNNLkooal8MJr08JbeeUEawisIlLFxhkBdYGxgRmBn 4EhAtAfyA0sCnwb4/MDNARJ4AajjAc5gUW/DTU/Xafq/jo+Cw4d1zOZe7XF7K81ouM1RiXHv6XmX 5pG8sEfizQFpFqD4IheE+MJwURLz4d6W/CAOFgYMl7+ynF7eh8Vt/eaSSkyAvdMyEKVXBqL0qgBz IAMs8h3oIBftlgpL4dK94ZqjpbiUPoVeUZrLNi3NySoUvmHv/ykNskfFikorm8oPlpO68tZyUk4j +IXIb+JexnRRs5dBvdMCrUCUvaWIViJaaGdK2M6qZ49mtcRPRpTpDjZDJBtuLPg0594G+mXD9CDo WXVMX3Cow2rpmOxAeCrV0mMefMocE2OvQmxhA+HUp6FJfnTVPb/TZ6Ioo6hXJC64y5IO3am7dE4s sEZDSCmWQljoBYuIGzZjtngIFcStmlyihnBxkaKKKT6E8vU8irfMWZ1swXLjS1Nr165FPVQSjQM1 dr95rihZ1JtUVfav/kXyIHxpzjSLhNbttl9/1eqVVYlfvXLX2MEDSm+ZuOaFaY42bdmC1Qu93j6h dS/eMWXBK2uOfIDPCS9aOmfoOXF/onzk2jEjVhXnp86/ap5/wvQJ1fFwnkstrBi8evq0By58mspp YeYHUirchXx07qdKpzMmafzjoDEYCq0BjLBmVTGHvLqSsqtgvjmLXS9ABdjqTGg4I8nDlGFNUrPU Km2VeAT4aZvUJh2UjkoiS7/P5uGfYFwk0eRCNnBr+mXZQjYz/yfGHRSZUftPQzxZgGZiS+kAWYj8 uP+uuT9zVtlLartq9WNUy3fSzEOq5R0VFfprZupxwmcOotERAkc1e38ce8sS0YOjay+5tGzduj17 97pSxZEHH9DPnfMQmbUFS5emb9zS9av6siDz80GXfUb/twkeux8F6egTePAk6vLS1O/jRoXTXZly 4ULZ5dWwy2sBde6AbkIV3oTfR92KIPNZfMxb8TlZeL479cTHFLiv20/xubOB+mxU2MccTx/1U6y0 PzI+fNCHfWOCLC5AXZTg8SBpDm4LtgUzQT6oJZRu00Hf8hpVjiqfKbySMx1Kt+nIRqVVFotmSVYs /sx8FIUFhZUxgbNCAzT4+0tnBGwIyxKozb0iBoQoyOs2q91Kc/3o5H9wSHgthKyywwwFlpauBRtM k5vM8c2iJAsH+s5M8+TqVr978cNjdUu7xXHZ+PE3DWq/t/38xWOrlpFbu/bc2G/E+Ik3byI1NGwK 9AnSeD7QR8XfZHMHfIKMVFnEYncqaSGb2dMn1TOjlCWUPlslYFTgqFGphrc6ahRwOCtluiCg6/bA GmfXKg1qKJFYJSqGBUOfSkGiEnlhAVsfGlcX965EUVjYtRJUrCTVGlSlno9GqFPwFNIgT1Xm4rlk gbxAWYmuwFeQVfJK5Qp1I95INnDXS5vkzcp96E7lFvVp9JD6AnpW2qW+hn6nfojeVb9Ff1NPoRNq GTRH9SOvWoySarU6FhmqIhhOb6UAzFKZe58szaMVKaigTGVnL3tETIvSvqD7GKilvcL2EkHQLDRB 6OMU9A38DqcOp1Cf7oTbalWS5YSiuhVFRRwhCTMTU1BVpJpplaKkKhzCQh8NawWyYRhKq0KUDhza awitAhGgZChRYuACyzdvUX7qDAa6Grsag/7OY43mEGpNd4TRUXP2BDSaJ5fNT+oxhYDlvbI0R1cF xs+kL/3NsUS+P/Xt/vRlfLJr3bwlk1aQTYw9snmLzwJ/OPm83DxKJ0WoTAOZaWFi1td4h70ilWdZ 0bTkiGrmgYPtNnOAAMwrLTkMtv1/GrsW6KiKNF1Vt3Nffd/deXfSnVfn0UhiEgwNkdzEhABZSCAR 0wEEBBxFHGAS4IgMNDOggy9Gdg6i7hGXnRkRdw6dDoQmeDYoLmoUYRwGd/EBjngGdw+iLj4QSe9f 1Z2As+w5c7u/+v9b9Vfde/9btx73Vv0lmxxGCrSJMK+DPlSFmYFRTEwcssOUk2+qEoWdSQ3dHTNO HTNOsimVydGx7PpG5lFlw1PoxmWOUplMM+eYT5ic6UuY60yajHSMMCYteiRvXrXhyUm8w7YPeAur HbwiufhsKdNKcSAH75ScmmgZyMW5BY+Y7cyBvmyRUCYGtGo0TpggTtQauWbeFqaLLc7b9GZzmjVH n2XdJywWf2I9wK8VesSD/IDeb33NX5FKnGYJKlGLtRK92Cp3j0c11hrxIXEH95TyAt5Ndjt/r+xH /fyA9objFP+f0nnHef2v1iX+e8njZDNTFOYafGLgHqvWmWslM262rOkOC5miIBYJepFGu3OawKlY KVJj8VN2DS2pVMh/ZazPpmK3i5edpl8OmB2OWfJcc5m5znzElE3ZAbmR3o7EjfnbgcjlgUvlieH9 xjn6S7QA4J9tuzk2QFlIkWRZhL6KbJgmlPEtfSnIgnbLVPtuWdd8R0xB9AmmZQVSBHdKiqDBfS5S NbeqaiJ0ewKy6IbodNRy8llBBAuWQ9RNRVPZ6VlQllOLI/ThsXQ6d0t2f2OomJo2CKucGsMv2LKv VcbL5Q10LCu53ZZaTbzc3GASk+45jRS8gL0z5uDxemE//sb1zd2sWZQ5/dK8eRnQtoE/fczmZdx4 xHLyuTOZ+3cMWBY0o5aC8hQtEW975z7Vp/jIy/Gz0K49i7T4iX2oQvdZkEdHrR+GWiLV7Wzm8ole gdqzA4+89pZIFRu2JMbP9gq+hK+VnGVKpwCd6IfmIKQN5dWJqFBBU4yi8WQgcaTRxEfjpbN4Zvxs n+xz+ND45Gjo5ISik/1WEI0B0E8MrmvjaxPvtunjx2ag0iKFlSiudDZsmivmcMvwoYEX6xxVLx7c Oe7W/r3D+w69WPoeFDHPnjOHyE+v7njrGLn7ymmybv8Px1lZo0Nd9CWUNQb+IFkXperYyTuIxBNe hTyps3a5Xh5g2ZJZD8o+oFtYz89MTHBvywx26dsd28WntWf0wymH+cPCW7qk22nBLM4lpapZxjg8 wbkRP+EUy607HCEh5OzUnsI75B3OAySmvOEc0t42TnN/lv6ovm98Klsjj5dTQZapZ6jQvKCzyGyN cjqPiIpkmfBseinNFFAQJYbr383znCBKEuZ5iQ7ShlYZ1Ooq1nXVcELTgqhOTjFkXie6bBxFRyVi FCHJjZDEEfWoitUihXMrCidLEscRHvoDioLkVgtbU9X1Sr6sL+Sl9bYMtcMBm2/jw8xU2W225uPW k/xW0OVUc91rSevcrMKA+sL41Lh0gc2av5ajaX0xL5lf5/3ceA3R09f1h0WWTxMuEJp5a8XaZLbY p2XkBJ1stmtOUMlPD3IAuh/NCxps+nBqEOfnBSXbM2pcIMReobIvRlDpVKXT6qeGfiviirGONw0/ /fG/jPWMKep7b/hJ/OiHpycMf0ZK8PDl5oqGqivDytV38LTQ8Dy4rrzhmdznkEey8LfJPJIju3XO yXkydYt38i7b0n1OW/El80pmeSDrw6yMY1mZBiWss84qjuw+3YN1ehH3e4Il7tn6XpmzVRtuiK+k otqgjqBIVpqaYRU7i5Vi9RblFnWc9rTpLLFKXFPSQlbIFUq917rXdW/qA/xq9QFzrXtt6mb1EfMx 6zHXFvcOebfzZeOQOeD+L/mv7q/Vq8Zld9yTO5Kj0lxOT7ZDb9Q36ZyeOXr6iZcJ1ui0jxpdVwwo LaH1kOl2uYos2Q07ugLFYZFThs6w7KLDyJ08TQB5DA8p9wx6iCdG6vbroAvbHSMdtrPOsi0y3xq0 iBXDDf06zkdN2TINYtqyfUqF0qpwbUpcIQpI9JXroBtSty/btw6KRlDeVWqzDjIRnf2eYVw6l0lt +l/IyjAuMA5l0O7DSI4Sr//ASbPUwyz/QLmnQXmTAeXNIaTEzyNn/Dy+vrRxxz/qrwnK+TVBDZ6y /alBMzlpMURbzdQkBWQfV3FizEsNm6aRbMZQc/EF+RvcE8fUTkk3/SnO4ftf/TCQ7w18sm94WX1h xbrZ1cM/edEoKcy+T89xlFx9etXGdavJfVfe2NsQaqdlTwmUPSchX2l4r61aMfKmSCxcmZie8Y4t AYMn5bLv3q/a04ApJSVSuRHEQXkqnkwmi1OlVmMu7iAdYpfUZizDi8gican0IO4RH5QexZvFLdJl fIlkZ4p+XCoGpKD4O/E9LNCn5YCRWk2ggJWoae8C6E6TCZJMRFkuwgQqQIKpCUOyMCUAlygvVFFi 5QFWnwc0mcSwvg+qwxT+EJkDpahAX1+xF/f56vMaRpqtLdDC2hdaChv/X0iDtB4kr8d4L8KtaDmK Iw4x40MoUzd68mixQd8HJr9kX6XMuQAbX2Zcpa8Cao1PoaP4KRtsmWxuGtprScMWK+ehpDWS/aXY L9JXMwntiVSXsPfqAapFqsqEGaeVITaPg9ZmH0V1qoQkOX8gOyiJadm30uZZND3IOl9yWpC4AVlp 1wqWqnGYL6CT5bBwS1Veagn5bXfncCu3+Ooryx9Yiv97Gyfy29ZcvfNB6Vm4z/Ef8JBjOWiKQ7m2 jsfRVVXY3EZH39ofr6rCQYoORzceevJJ+s64nfsf0pXyJ+SkvX177s7MvZnkonDRRc4IZ1zkuHDc RQaFQRfZK+x1kZ3CThfZKmx1kfXCehe5Il5xk2XiMjfpErvcRBEVN3G7RAH6p07E6Zc17jLRVIKV WhXVUtvkbXa5a7mwQdgqcAJ2jXfXaqpSC00dOz2rWluFhfFiLcGoluO2EkwyM1a+kHipw0aZGFfP seUYGIfq6OTyCwazS5M010rvGzLepD189LOVK1filckNz8OpBXQYYE06zwt51/HY/YqvbM6YmmoO /2aEc7z2x989VNtWOjl9zh3XOPaNpJn7jMxIeZPp6n17BtPVF+IXboJF7CZnhbMuckI44SKHhcMu EhEiLrJL2OUi24RtLvIL4RcuskJY4SJLxCVu0i62J3WlK04OuV9yUe0oKihNA3Vh8SWBelRgUCFB tRhreq0CGitW0ycpikoVpq4ihKtFoLRiRGeoLWX6oiZ16QeIWqascwbj2WI9dKmeEfpjdY1qauVK 0FxiRI5bSKzlU3Udf8cr3sCcMbeM4/5jhHF8ByqaOLO0OW1++zUuscQtpxxL3RhvmK/Xfi1mi2wF wdcz/m3HCKUjm5jVXGgbjC6JC1SYNDwD3Wag7/cOVxkTRkNGtsk8Sqz9SPagdQxBtAdoPdABRze6 HXAGUAuYDcgCTAcsBLSz8H9FKyhEL1qeMjt+NWU22p7yOrob8BzwuxyfoN18EN0P+7+FNAcdCNVQ GYi7nd+DdoD/P0H4IvB7Dvh/BjoX4lQAlYTHUSZQHmSnAR6CuG1AJwNaIC0X0AbAw/h19Cv8enwX hANFv4R0H6b+gMYknQLXtBnC6yBeIez/EvgsOB4PVAfkAUoc3fEfQK4d0EzXPobfajSEeVyGpxA/ +Q23x7EjZQpfzT8inBQ/lyqkHrnHOU1JU/apneqAlqZ9pN+lnzSmmIvNPS7bneaOpFanLU0/nJGR 8W7mV1lHPRU5vpzvc0969/nuzJudX5K/q2Bs4drC7/yG/1LxqZJY6SboNX4w5qc3TRo7o2LTzdsr X63qr3q3+p7q4eQyx5Mxtbm6CKXA02OgcjQbIYcq05KZMAkreX95pCHU1TWjY/L0QP3P7l24bHoH k4AtXkztL91gm8zsuTqRAu1rumwyteaZitLg2aTrrGazlVbzUAGCzi3yI7p6cikqQwE0Bt2ExsK5 VKCbUSWqQuNAazUoiCagWtSImiDdZjQFTUXTUAv6BzQdzUCtqA3NRLNQO+pAt8M13IE6UQh1oTlo LpqHomgf2o9Qb4den8+lo4uAOIBDXnDLAa2A+YCtgJ0AHulJn+WADYBBwBcsxObSo9uq7BiQRxnp W7qsku0uTOzOncd2++4IJej0mQnaODUhNiEhdnN1wntsQ4IWj0lQq6gyTKmsVh6uT+PS0AkAQSvA xeQ1pEPH1Iue51JRBEA4Puljc1Zfob9y5yDnQJgjHEaLkTd+mMNR1aysl0mcXIR76SWfkwuJEHKh TzMrd9ZPI39BewGDAI78BX4fk4/RBgJdNmSAWwfYCRgEHAdcBPDkLPzOwO8j8hHSyYeoHFAHmA/Y CRgEXAQI5ENwDfIBzUbMpXwdgJAPwDXI+3BZ74Ork9PAnSan4dT+FK0JVh5kTKA8yXiLkkx6dpKx 0ipj5N3o5VJvjHzS5wt4n6+vICdRBAA5E1wD4AO0ARYAVgB44E4BdwqFAb8GPA+IAHiIcwrinII4 Q4C3AadQBcAGtAFEciIKh4mR41F/g7c+jbxDXofM7CXHyBuMvk2OMvoW+XdG3wSaC3SIHI3melG9 E8IRxDGAGkDLITyFvNJXaHnj9SYZBPV4wS0H1AFaAfMBWwE8GST50cVeCxI5hIagtPaSKPqM0d+j XSKyl3pt/22Qx3zU8U+4FThwdvp2+ont3/407FLH/8Q24Kjj3/QYcNTxr90IHHX8y1YDRx3/4qXA UcffNR846vhbO4ADJ0aeO1BY7K1pvQ/76nWyBrS0BrS0BrS0BjnIGvpDlx303J6NlpWBxp6xA6Vl 3vAADr+Mw7NweBcOL8Hh9Ti8EYdrcfhOHA7gsAeHc3HYxuFDeDyoIoztfT/aDdoZODyEw3/A4W4c 9uNwEQ4X4rAP19gxkhedWsVIEyN99fS5AnrrpEodzjEPNJoH2ToPHvtBcI8D4mzPBiFffkI4M5fS /L6yusT+2AmVy+unkCMQ8QjchiPoDMABN+gIZKMjkMgRSEAHtw4wH3AYcBEQJ9To/RmSDye+lbk6 uOWAOsB8wAbARQDPTucigKDlyVPcy06sPHnSrXSPHIEfXQI7j+TZOYbHCBhTuK3Qj8zFrbnxXFKD 0tKguLVM0Yxhtf9b9btvVSTVS+QJshXlwI34dZJujV7O8cbwjqj/kLc+FT+Fch2Q63AQ+XER0PGo m+2PQx6R0mrkIS8BrYx6ZkM0Peof4x3AGo3V773sOef9DHp8wJ73HPK+54s5cNT7Z/B5qd970rPF +2Z5TASfl/0xDGTAx0QPesZ7/zDERDdCwDNR73pK+r0/9zR77/OwgCWJgDu7Yc/WvbP8Xd4pkF6j 5y6v3Q1p9nvrPHd6axNS42icfm8FnEIgwZbByZZ62EELclmCt9fE8D32GGG70Cm0CrcIlcIYIU/w CjlCtuAWLdEQNVERZVEUedEhEhGJbjqRIEDrQDdvsBfSDuo6GG8Q6iaqSAStSwKVUcTFtZCW9gbc Ejm8CLXc5Yt8014Qw/LMrkhKQQOOWC2opaMhMj7QEhPisyI1gZaI0DansxfjJ0LgGyG/imHU0RnD ceq1OZuu3nsQYWxufjyb0pLNj4dCKCNtdV1GnTXJDE5uvIGzIOle99o940d8TmR7S3tnZE9OKFJJ mXhOqCXyj3R534P4K/xFU+NB/CUloc6D3CT8VdMs6s9NagyFWmJ4NpODxuyXIAc55ksmJ+YiH5VD PjE3IfdMQq4I4oNcISUgJ0moiMkVSRKTc2Aq19td2NTYW1jIZNJ9qJvJdKf7rpcZKgKZoiImkxZG Q0xmKC1MZSKTmIjHAyK5HiaCs5CHiXhwFhOZfU2kPCmyZVRkCzsSh6/JeBIy6tkRGfUsyAT+3m1J A3Qw+yaGFs2lSyMvKGhaAlgQeXT1PRmR8F0+X++iUHLNZP+CuxbdQ+nCJZFQwZLGyKKCRl/vxLk3 CJ5LgycWNPaiuU0dnb1z7SWN0Yn2xKaChY2hvua26pofHWvL6LGq226QWBtNrJoeq7nmBsE1NLiZ HquGHquGHqvZbmbHQiyPt3X2iqghBD1oRvuIU4b8uiA7L9SQZqyYxDLvxLyM9dkD0CDZjZyBUEQp aIioABp0U/1N9TQInikapNH1r5NBGesn5mUP4N3JIAO8zYIGFOhZ1b0KZTTd25j4d8MGXj2rqMIT bqD7/9sgrCliL2zs7kGoJVLW3hKpm9nV2SsI4LuAXlJkwoif09kUix9OeI4FzwnUk+NGBalfLfWT pKTg/73/q67ZRj0IDY1DfdjOxT2oO8RFcls6CBQFHcmFhgeguUSrh+4QXGA3DuDukTTYaSc/MiF6 vSPoWZXkknroSdJELIjSPaKO0Y1qCf0vXH7oHQplbmRzdHJlYW0KZW5kb2JqCjI3IDAgb2JqCjIz NDgwCmVuZG9iagoyOCAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0FzY2VudCA5MDUg L0NhcEhlaWdodCA3MjMgL0Rlc2NlbnQgLTIxMiAvRmxhZ3MKMzIgL0ZvbnRCQm94IFsgLTY2NSAt MzI1IDIwMjkgMTAwNiBdIC9Gb250TmFtZSAvWlpOVEZNK0FyaWFsTVQgL0l0YWxpY0FuZ2xlCjAg L1N0ZW1WIDAgL0xlYWRpbmcgMzMgL01heFdpZHRoIDIwMDAgL1hIZWlnaHQgNTI1IC9Gb250Rmls ZTIgMjYgMCBSCj4+CmVuZG9iagoyOSAwIG9iagpbIDI3OCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1 MCA3NTAgMzMzIDMzMyA3NTAgNzUwIDI3OCAzMzMgMjc4IDc1MCA1NTYKNTU2IDU1NiA1NTYgNTU2 IDc1MCA1NTYgNTU2IDU1NiA1NTYgNzUwIDc1MCA1ODQgNzUwIDU4NCA3NTAgMTAxNSA2NjcKNjY3 IDcyMiA3MjIgNjY3IDYxMSA3NzggNzIyIDI3OCA1MDAgNjY3IDU1NiA4MzMgNzIyIDc3OCA2Njcg NzUwIDcyMgo2NjcgNjExIDc1MCA2NjcgOTQ0IDc1MCA2NjcgNzUwIDc1MCA3NTAgNzUwIDc1MCA3 NTAgNzUwIDU1NiA1NTYgNTAwCjU1NiA1NTYgMjc4IDU1NiA1NTYgMjIyIDIyMiA1MDAgMjIyIDgz MyA1NTYgNTU2IDU1NiA1NTYgMzMzIDUwMCAyNzgKNTU2IDUwMCA3MjIgNTAwIDUwMCA1MDAgNzUw IDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MAo3NTAgNzUwIDc1MCA3NTAg NzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwCjc1MCA3 NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1 MCA3NTAKNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUw IDc1MCA3NTAgNzUwIDc1MAo3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAg NzUwIDc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwCjc1MCA3NTAgNzUwIDc1MCA3NTAgNzUwIDU1NiA3 NTAgMzMzIDMzMyBdCmVuZG9iagoxMSAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1 ZVR5cGUgL0Jhc2VGb250IC9aWk5URk0rQXJpYWxNVCAvRm9udERlc2NyaXB0b3IKMjggMCBSIC9X aWR0aHMgMjkgMCBSIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDIxMSAvRW5jb2RpbmcgL01hY1Jv bWFuRW5jb2RpbmcKPj4KZW5kb2JqCjMwIDAgb2JqCjw8IC9BdXRob3IgKFJvYmluIE1lcnNoKSAv Q3JlYXRvciAoTWljcm9zb2Z0IFdvcmQpIC9DcmVhdGlvbkRhdGUgKEQ6MjAwOTExMDUxMjQwNDAt MDUnMDAnKQovTW9kRGF0ZSAoRDoyMDA5MTEwNTEyNDA0MC0wNScwMCcpIC9Qcm9kdWNlciAoTWFj IE9TIFggMTAuNC4xMSBRdWFydHogUERGQ29udGV4dCkKL1RpdGxlIChNaWNyb3NvZnQgV29yZCAt IERvY3VtZW50MikgPj4KZW5kb2JqCnhyZWYKMCAzMQowMDAwMDAwMDAwIDAwMDAwIG4gCjAwMDAw MTIwMDYgMDAwMDAgbiAKMDAwMDAwMDAyMiAwMDAwMCBuIAowMDAwMDEyMTExIDAwMDAwIG4gCjAw MDAwMTE5ODUgMDAwMDAgbiAKMDAwMDA1MjAyMCAwMDAwMCBuIAowMDAwMDAwMDAwIDAwMDAwIG4g CjAwMDAwNjAyNTcgMDAwMDAgbiAKMDAwMDAxMjI4NSAwMDAwMCBuIAowMDAwMDUxMTcwIDAwMDAw IG4gCjAwMDAwNzE1NDQgMDAwMDAgbiAKMDAwMDA5NjI5MyAwMDAwMCBuIAowMDAwMDUyMDU2IDAw MDAwIG4gCjAwMDAwNTExOTEgMDAwMDAgbiAKMDAwMDA1MjAwMCAwMDAwMCBuIAowMDAwMDUyMTQw IDAwMDAwIG4gCjAwMDAwNTIxOTEgMDAwMDAgbiAKMDAwMDA1ODU5MiAwMDAwMCBuIAowMDAwMDU4 NjEzIDAwMDAwIG4gCjAwMDAwNTg4MzYgMDAwMDAgbiAKMDAwMDA1ODg2OCAwMDAwMCBuIAowMDAw MDYwMjM2IDAwMDAwIG4gCjAwMDAwNjA0MTggMDAwMDAgbiAKMDAwMDA3MDkxNiAwMDAwMCBuIAow MDAwMDcwOTM4IDAwMDAwIG4gCjAwMDAwNzExODAgMDAwMDAgbiAKMDAwMDA3MTcyMiAwMDAwMCBu IAowMDAwMDk1MjkzIDAwMDAwIG4gCjAwMDAwOTUzMTUgMDAwMDAgbiAKMDAwMDA5NTU1MiAwMDAw MCBuIAowMDAwMDk2NDY2IDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgMzEgL1Jvb3QgMTUgMCBS IC9JbmZvIDMwIDAgUiAvSUQgWyA8ZDFhYWEyNjEyY2E4Yzc3YzQ5NTc1MjJjMmYyMGE2NTE+Cjxk MWFhYTI2MTJjYThjNzdjNDk1NzUyMmMyZjIwYTY1MT4gXSA+PgpzdGFydHhyZWYKOTY2OTQKJSVF T0YK --_003_527DA1D0A04346BEA294A14F593F3B43ericssoncom_ Content-Type: application/pdf; name="Liaison from Broadband Forum (David Allan).pdf" Content-Description: Liaison from Broadband Forum (David Allan).pdf Content-Disposition: attachment; filename="Liaison from Broadband Forum (David Allan).pdf"; size=45785; creation-date="Mon, 09 Nov 2009 05:26:11 GMT"; modification-date="Mon, 09 Nov 2009 05:26:11 GMT" Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAGlWUuTEzcQvutX6OhNFYPe0hyBIoFUoEJwThSHxCzP3RC8 Saj8xPyrfK1Rt8bjNbZh9+DpHqnV6pe+1nzSz/QnfffBjdWbG23r/81GG20Gg79kjY826WzHYcSf jr49bC/16+/0GF3UnzHrvaoyHjynqfh//gBiJxm55GBsrOw7S1YMRm+utQ0hF2N0DNY4Y9S1zmlM eGKOvtLPoSoWcaTotAgU/YS1ibA6+MHpMI5DzpFE3l/rEOo7/FgThwDh+k4Ian2t735vB5q0fq1f 6NWT3y40NHN69efewzvm/MEPb/hBX6g6aX2BnWLyJb/YXu/P+sgvr/hBOE2gWv2rL/RLvf5RP1xP e61OMUP29Q+rlFyCt9jWUEZjx2Q1bOBi0a4UnYtOsbopq8k9Rr/XRT85yxXe5ZRgeOeTIweMowE5 WF18sWRekn3EFy4VGMQHN6TmClsmN9HPHRDsA8U+uLfZiP1ubnYM0X3sciS5zojcGk9Orzd6scLC y6unH19dQur6/ZnG9emAbc8J7xAzmfJbTOopxM6y6C8caN2uEpav9t5JeP/VovndhZpyQpJDIveA d1Aadp3zZZcg8X5oa8kSvLio/JkVlSE1SRQnCSoPkvvMEOdq4xDQoVYbCfqJ06pNDzwbauAlN4RT A/qnPc1veHewXy0YvUyIaWXjKC69FMwUianGgTmqiFS360v2pHhd4kCsunDpskwjaZcsVG6FMhtc mmK7WY4qN2Kdon3HlnzEfLGaKVQzn4z2iJxrebqanlwexmCtRhkawmi89sjNYEr93cjTFU6CMEQz JlUHxISC0aYGIiAbo9vT8re/gRwaY8pgYhkVCwXHTGvht60641R9dt5Ae1EYL7A9xUJlh33XvHv+ 3ei3dM6eWmyqR2qx6faHjxYc2ho5DWPSiOOk6FBCGF3GUTKaeg7bYlH1FdMbHSeOjLjSESyXvXBi Hm2tck2m0C3LIINHtMg4Ru/PwKqTDOVGuCc60cKbAMWBF5qeTHfNmbMYoRY0nLrkwF7NPixD7Ne0 aLTimKcwahZuez1Gk6Nnp6q6BeEgJgac9SMCfpQDcFFj5WCV9L/3htNfgMtWqoywpBBwjZISITCl nRBqtagVDMA8Hc5VPZtPU0/hCHjKZVJ0Yg2k9IsG2w87S++VFMCxWwES6kQJFc+GGUga9deBpJ5j gJsR5WAfI1XRM29W7GMIq/VKXg9068uQSCDQ6lFPPmJTiUHkRLnbTpRH7GsZgurfsO2O7boeYRwA 6wDtrU2H3LYAU3AbhNUjbCsL/c3rsP9k4e185alPIAh/HNa67rYytR2CcMnC6ozCSKc2cKPBcS9e szZU7zVgO54CbIPF8Vu9djYOcGwgtt3vzNhKsskJLYkphzfPkrSQSWzwtyxvbu9ZxLlIIKa6+dSQ ExDjZ7Kr42UxUVAwjDRRPQJ2Af1e4lI/M3U2lMK9s0FJR8K2zEVniD609jecuucciwmIgHKVc9a6 ERAGuQs0iJ/jTU20tHHr4+kZ+/A2f/Z0hLyD1TSaUJ3lD+XkstKrlQD+c3NS+n/JyUOVNKIBrMXC OwuEtkPibJa3EUC5AKIBCg42ZKs8NachtMkgNrvklU5pHEp0gHM0tOW79iKpcRStjMkyAORhYjEQ q/A8h4dox6JkXZdC14mImYp772QvuwMVkVilbRv4KnSr8JKdM+2lmw17YaLukwmULtp0hYJndzyU 64LJc7EEYPc5V30M8Go0FomXY0m4WjARFzhGA8iAD0zY6A1zZMSVLtFk661wSk61xLomU+hJDwUZ PKJpdozen4FVJxkK0N4anGSshY8mEiJtmiOYJrprzpzFCLWgYfslB/Zq9mEZbGPWotHKtZ1tuoUb h2fwiCV9AiZMKBO+wFve2wFZdRqSeNxurn7+Jy3rulR8QYRyMyDFbOd8oWKuTjnPE+7gGtDICMAd EinT3iq0I1w7Uq0d2mYkZjRtMggk5pzEZEDPWjvq0HFaZyapcXD2ZZo8Jw8TfaCieViF55VYS0df FsAcR4uZqSmcma7MU6I9c/p+hHPLvFpYmk14nGK7IeibUnMzQ8qcPEwg1M6FU3JD67Ozraa0O9uJ o6imTJwwZueppuDC2KCmhBRKzUzcHmTMZRp5tuBQTSm4/rSKx5TiR5rLMpmOTQ/IaCOYs6DVgqbs XszAqszJ2ZZaU6oWsOcEI5qesP9Ed82Zwzs5RO/NIHs1+/Actl9sWggte11yGq1478v3i5pyW2eC S/+ppljcm5RToeLj1hEcrilqdU5Nqdf8X+oR6LKIAKIrQGUdG+ZvaOvY7HxRO8OInq6+T0CJoWTg NpwJQzjVcvd7EyUGklrbmoTTbTfv7OotvEM9vf1g2G/rvrYbV/QViS8CgLDJBCYfWncJXecXwe3S mXsaaSGk7RET7X4t6cu72qO5GE73wK98CspZJ81M67LU6oOowp2YaMIMmS0AfHstg0QifzY6sf3r 7cJt98Ftsx54+9RwW7dEnXVwfQ20iF6v7j3lewTemgyW/VBLVztB4TDjdXvRDKZW4jseIdEtPaxY TF6JuWUh+SIhdmZ5IobD5j+86eb6KsjMF3Y+Fkvwl666C76FAmrVu0fbPhJIM1tLKV1g407HOouL UaCS5BM+ZtJFNJUp3AXjm5hHU+Ayuh0gSLAqqn9Bt8RYBUvg8+VLyHp11qVvyibSVzv+kAF81Tjc 704fUM/pmD2+O9JlMN+bYB+NgyKX6M35Mlu33UU2xq7EZ/8DTRQZ1wplbmRzdHJlYW0KZW5kb2Jq CjUgMCBvYmoKMjA3MQplbmRvYmoKMiAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBS IC9SZXNvdXJjZXMgNiAwIFIgL0NvbnRlbnRzIDQgMCBSIC9NZWRpYUJveCBbMCAwIDcyMCA1NDBd Cj4+CmVuZG9iago2IDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNl IDw8IC9DczEgNyAwIFIgL0NzMiA4IDAgUiA+PiAvRm9udCA8PAovRjEuMCA5IDAgUiA+PiA+Pgpl bmRvYmoKMTAgMCBvYmoKPDwgL0xlbmd0aCAxMSAwIFIgL04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VS R0IgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBhVTPaxNBFP42bqnQIghaaw6yeJAi SVmraEXUNv0RYmsM2x+2RZBkM0nWbjbr7ia1pYjk4tEq3kXtoQf/gB568GQvSoVaRSjeqyhioRct 8c1uTLal6sDOfvPeN+99b3bfAA1y0jT1gATkDcdSohFpbHxCavyIAI6iCUE0JVXb7E4kBkGDc/l7 59h6D4FbVsN7+3eyd62a0raaB4T9QOBHmtkqsO8XcQpZEgKIPN+hKcd0CN/j2PLsjzlOeXjBtQ8r PcRZInxANS3Of024U80l00CDSDiU9XFSPpzXi5TXHQdpbmbGyBC9T5Cmu8zuq2KhnE72DpC9nfR+ TrPePsIhwgsZrT9GuI2e9YzVP+Jh4aTmxIY9HBg19PhgFbcaqfg1whRfEE0nolRx2S4N8Ziu/Vby SoJwkDjKZGGAc1pIT9dMbvi6hwV9JtcTr+J3VlHheY8TZ97U3e9F2gKvMA4dDBoMmg1IUBBFBGGY sFBAhjwaMTSycj8jqwYbk3sydSRqu3RiRLFBezbcPbdRpN08/igicZRDtQiS/EH+Kq/JT+V5+ctc sNhW95Stm5q68uA7xeWZuRoe19PI43NNXnyV1HaTV0eWrHl6vJrsGj/sV5cx5oI1j8RzsPvxLV+V zJcpjBTF41Xz6kuEdVoxN9+fbH87PeIuzy611nOtiYs3VpuXZ/1qSPvuqryT5lX5T1718fxnzcRj 4ikxJnaK5yGJl8Uu8ZLYS6sL4mBtxwidlYYp0m2R+iTVYGCavPUvXT9beL1Gfwz1UZQZzNJUifd/ wipkNJ25Dm/6j9vH/Bfk94rnnygCL2zgyJm6bVNx7xChZaVuc64CF7/RffC2bmujfjj8BFg8qxat UjWfILwBHHaHeh7oKZjTlpbNOVKHLJ+TuunKYlLMUNtDUlLXJddlSxazmVVi6XbYmdMdbhyhOUL3 xKdKZZP6r/ERsP2wUvn5rFLZfk4a1oGX+m/AvP1FCmVuZHN0cmVhbQplbmRvYmoKMTEgMCBvYmoK NzM3CmVuZG9iago3IDAgb2JqClsgL0lDQ0Jhc2VkIDEwIDAgUiBdCmVuZG9iagoxMiAwIG9iago8 PCAvTGVuZ3RoIDEzIDAgUiAvTiAzIC9BbHRlcm5hdGUgL0RldmljZVJHQiAvRmlsdGVyIC9GbGF0 ZURlY29kZSA+PgpzdHJlYW0KeAGdlndUFNcXx9/MbC+0XZYiZem9twWkLr1IlSYKy+4CS1nWZRew N0QFIoqICFYkKGLAaCgSK6JYCAgW7AEJIkoMRhEVlczGHPX3Oyf5/U7eH3c+8333nnfn3vvOGQAo ASECYQ6sAEC2UCKO9PdmxsUnMPG9AAZEgAM2AHC4uaLQKL9ogK5AXzYzF3WS8V8LAuD1LYBaAK5b BIQzmX/p/+9DkSsSSwCAwtEAOx4/l4tyIcpZ+RKRTJ9EmZ6SKWMYI2MxmiDKqjJO+8Tmf/p8Yk8Z 87KFPNRHlrOIl82TcRfKG/OkfJSREJSL8gT8fJRvoKyfJc0WoPwGZXo2n5MLAIYi0yV8bjrK1ihT xNGRbJTnAkCgpH3FKV+xhF+A5gkAO0e0RCxIS5cwjbkmTBtnZxYzgJ+fxZdILMI53EyOmMdk52SL OMIlAHz6ZlkUUJLVlokW2dHG2dHRwtYSLf/n9Y+bn73+GWS9/eTxMuLPnkGMni/al9gvWk4tAKwp tDZbvmgpOwFoWw+A6t0vmv4+AOQLAWjt++p7GLJ5SZdIRC5WVvn5+ZYCPtdSVtDP6386fPb8e/jq PEvZeZ9rx/Thp3KkWRKmrKjcnKwcqZiZK+Jw+UyL/x7ifx34VVpf5WEeyU/li/lC9KgYdMoEwjS0 3UKeQCLIETIFwr/r8L8M+yoHGX6aaxRodR8BPckSKPTRAfJrD8DQyABJ3IPuQJ/7FkKMAbKbF6s9 9mnuUUb3/7T/YeAy9BXOFaQxZTI7MprJlYrzZIzeCZnBAhKQB3SgBrSAHjAGFsAWOAFX4Al8QRAI A9EgHiwCXJAOsoEY5IPlYA0oAiVgC9gOqsFeUAcaQBM4BtrASXAOXARXwTVwE9wDQ2AUPAOT4DWY gSAID1EhGqQGaUMGkBlkC7Egd8gXCoEioXgoGUqDhJAUWg6tg0qgcqga2g81QN9DJ6Bz0GWoH7oD DUPj0O/QOxiBKTAd1oQNYSuYBXvBwXA0vBBOgxfDS+FCeDNcBdfCR+BW+Bx8Fb4JD8HP4CkEIGSE geggFggLYSNhSAKSioiRlUgxUonUIk1IB9KNXEeGkAnkLQaHoWGYGAuMKyYAMx/DxSzGrMSUYqox hzCtmC7MdcwwZhLzEUvFamDNsC7YQGwcNg2bjy3CVmLrsS3YC9ib2FHsaxwOx8AZ4ZxwAbh4XAZu Ga4UtxvXjDuL68eN4KbweLwa3gzvhg/Dc/ASfBF+J/4I/gx+AD+Kf0MgE7QJtgQ/QgJBSFhLqCQc JpwmDBDGCDNEBaIB0YUYRuQRlxDLiHXEDmIfcZQ4Q1IkGZHcSNGkDNIaUhWpiXSBdJ/0kkwm65Kd yRFkAXk1uYp8lHyJPEx+S1GimFLYlESKlLKZcpBylnKH8pJKpRpSPakJVAl1M7WBep76kPpGjiZn KRcox5NbJVcj1yo3IPdcnihvIO8lv0h+qXyl/HH5PvkJBaKCoQJbgaOwUqFG4YTCoMKUIk3RRjFM MVuxVPGw4mXFJ0p4JUMlXyWeUqHSAaXzSiM0hKZHY9O4tHW0OtoF2igdRzeiB9Iz6CX07+i99Ell JWV75RjlAuUa5VPKQwyEYcgIZGQxyhjHGLcY71Q0VbxU+CqbVJpUBlSmVeeoeqryVYtVm1Vvqr5T Y6r5qmWqbVVrU3ugjlE3VY9Qz1ffo35BfWIOfY7rHO6c4jnH5tzVgDVMNSI1lmkc0OjRmNLU0vTX FGnu1DyvOaHF0PLUytCq0DqtNa5N03bXFmhXaJ/RfspUZnoxs5hVzC7mpI6GToCOVGe/Tq/OjK6R 7nzdtbrNug/0SHosvVS9Cr1OvUl9bf1Q/eX6jfp3DYgGLIN0gx0G3QbThkaGsYYbDNsMnxipGgUa LTVqNLpvTDX2MF5sXGt8wwRnwjLJNNltcs0UNnUwTTetMe0zg80czQRmu836zbHmzuZC81rzQQuK hZdFnkWjxbAlwzLEcq1lm+VzK32rBKutVt1WH60drLOs66zv2SjZBNmstemw+d3W1JZrW2N7w45q 52e3yq7d7oW9mT3ffo/9bQeaQ6jDBodOhw+OTo5ixybHcSd9p2SnXU6DLDornFXKuuSMdfZ2XuV8 0vmti6OLxOWYy2+uFq6Zroddn8w1msufWzd3xE3XjeO2323Ineme7L7PfchDx4PjUevxyFPPk+dZ 7znmZeKV4XXE67m3tbfYu8V7mu3CXsE+64P4+PsU+/T6KvnO9632fein65fm1+g36e/gv8z/bAA2 IDhga8BgoGYgN7AhcDLIKWhFUFcwJTgquDr4UYhpiDikIxQODQrdFnp/nsE84by2MBAWGLYt7EG4 Ufji8B8jcBHhETURjyNtIpdHdkfRopKiDke9jvaOLou+N994vnR+Z4x8TGJMQ8x0rE9seexQnFXc irir8erxgvj2BHxCTEJ9wtQC3wXbF4wmOiQWJd5aaLSwYOHlReqLshadSpJP4iQdT8YmxyYfTn7P CePUcqZSAlN2pUxy2dwd3Gc8T14Fb5zvxi/nj6W6pZanPklzS9uWNp7ukV6ZPiFgC6oFLzICMvZm TGeGZR7MnM2KzWrOJmQnZ58QKgkzhV05WjkFOf0iM1GRaGixy+LtiyfFweL6XCh3YW67hI7+TPVI jaXrpcN57nk1eW/yY/KPFygWCAt6lpgu2bRkbKnf0m+XYZZxl3Uu11m+ZvnwCq8V+1dCK1NWdq7S W1W4anS1/+pDa0hrMtf8tNZ6bfnaV+ti13UUahauLhxZ77++sUiuSFw0uMF1w96NmI2Cjb2b7Dbt 3PSxmFd8pcS6pLLkfSm39Mo3Nt9UfTO7OXVzb5lj2Z4tuC3CLbe2emw9VK5YvrR8ZFvottYKZkVx xavtSdsvV9pX7t1B2iHdMVQVUtW+U3/nlp3vq9Orb9Z41zTv0ti1adf0bt7ugT2ee5r2au4t2ftu n2Df7f3++1trDWsrD+AO5B14XBdT1/0t69uGevX6kvoPB4UHhw5FHupqcGpoOKxxuKwRbpQ2jh9J PHLtO5/v2pssmvY3M5pLjoKj0qNPv0/+/tax4GOdx1nHm34w+GFXC62luBVqXdI62ZbeNtQe395/ IuhEZ4drR8uPlj8ePKlzsuaU8qmy06TThadnzyw9M3VWdHbiXNq5kc6kznvn487f6Iro6r0QfOHS Rb+L57u9us9ccrt08rLL5RNXWFfarjpebe1x6Gn5yeGnll7H3tY+p772a87XOvrn9p8e8Bg4d93n +sUbgTeu3px3s//W/Fu3BxMHh27zbj+5k3Xnxd28uzP3Vt/H3i9+oPCg8qHGw9qfTX5uHnIcOjXs M9zzKOrRvRHuyLNfcn95P1r4mPq4ckx7rOGJ7ZOT437j154ueDr6TPRsZqLoV8Vfdz03fv7Db56/ 9UzGTY6+EL+Y/b30pdrLg6/sX3VOhU89fJ39ema6+I3am0NvWW+738W+G5vJf49/X/XB5EPHx+CP 92ezZ2f/AAOY8/wKZW5kc3RyZWFtCmVuZG9iagoxMyAwIG9iagoyNjE1CmVuZG9iago4IDAgb2Jq ClsgL0lDQ0Jhc2VkIDEyIDAgUiBdCmVuZG9iagoxNSAwIG9iago8PCAvTGVuZ3RoIDE2IDAgUiAv RmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAG1WsuO2zYU3fMr2B1dxBpJlsd2d5lkBpgC BZrAQRdJFqmTadLEScbKo/mg/k83/Z9eUfcc0iKlOAUyA4xo8fLyPs59kJ5b+8De2rN7bWV3ra38 b7uzpS2LUn7Oq3KxrM7tqtoUG/mxy4UODi/szY/dwrpbKPSmtLLwVjjIB/m7qIraLutFsba7vb3Y 2qZ7X3aPuq6L+rxa2bl82O7t2VVVdEu2N/axdRfPZmZeymK3e/3HzPbDwzuMPmLwFoPnGNiZiC3r 5PnUbn+2l1v7wAwkalZLSlSvvUTyqFZNUYmwdi4fEomeuCvP2bggxh6bXVz0k35bv30NecpksMGb YmY87RovVsmgUG3IpQLJk1msob01sHmzEPWbqiwatXnd29w/5uLHY9Xc3zO7/dObKXJcYGJ6xwUm KwFFtVmKmcCrLjrMiOPcD9/Iq+6YlWUdeMUguFbl6WSY+x3AcaDbX8AuBxB90NUEDSZIqnyNe4bF v2PwBgMSYzWE+vXTOWgwtaNclJgD8tlBrldY/okjTH25o1ADZ67+xNHhCyZfghE1bcEIJPuPsFgy daNmohCHhIR8e1rTxZYHLu1Gc3EgJAy/CFerbt1iUwGcJuCqzINgd6DK3A7qcaYXKHIkJKQ8VI8e eT3nJBXc6RbGcQ6cuDkhx0GQsG1B/sQpU+NgYUxBevptoIZ1B25GaTUJGpcQI/NcMo0wWfykfsLz TD8rco1rAB2fTbxPU0NBblopH3V9LoNyJMZqqkTLckDaz704HmDj6FnVQI/9OnoYknuJAa0jNCp1 hd+tg/yconBvEULQKJpRxpihrnjRkp3ubRyrGs2QeJYzw9XWvS7UlXZmcpby+XtRr/OWqsti5St5 UgrMSCnIswql4JijLwhmuiDkOYaCEHE0x73BVlUfj5/38HQo1Tu1rnEMW+IhxC/8hZCli1lVjtKR tigJZggwOhmMR11q3FQ+st+Qj6RBIZLaNgwhAsHEXEWLkBiJnrTUiCRclPAlLWYeInKQqu7BP0KR Q29fJcqG6PWNaG23u2HEmwGCm/V5LUxTFCcspaX0nccRz6W8bNZr39sMWT+unp7EOOQkSVT1uuuc pVMacJMWN0RwX0x/G4X1wKBRmRvMWHetTDLdSerLD9p/0qcH4J4JDGETGlu2SFwlbY/Pf8bt+Y7Y CpySKAm9DIBCESEZJrQwWEcKBhIHoIUOJO0amr44Ccko3MRThFtwYaYpMeI7qGwdPZCWEBqDNDRG b4tMMafQsNa/CBVa9FpdTK4Js1PcCC73wR/m+4xgTURhvgUpZOQENQbFm4QZpf7GdPcenEJySxz9 F7ZFnsGTDZG2SMahI8LzTI3Knr6BXQqdEd457PhCWzfSkiQHJcFOVMTiA+7EmSvParLQfuXkleeY LbSxjILyrao+9G84AABF9CogQSRMY7EPS3BJsAgPp2WYkcSdpRHy/eslRBhKLW01iSkeiIEcBb0J cQ0KLpnWqM/ljB2J2l4slsvAh0QhEZIK8sACaGQkx2IKgqV6guLyEUAMC88jfGvzIsQ5XPt6WVcj DSRO/jitdzmR6lAJqkq7Q2bSQj++eME4hxZ0NTNgy/6OO3BPMuo5myBWSosduIZyYuYhDHilbow7 Fw833vM0II1MHI4F0ybW1JFtSRaV3KGtNtF1C4xu3eN6vCXxvkty0mKxKJbV0rckg4ugTEuyPU4A kTHpi1TbOTsE2hVuh1lfwcl0G51DF2ANmWSgom0Hm3PSkgt2BLfQ8yckFKrTbdRf1WZzQpvQnX3E nql6B4r4vYK+AQ55HRA7ZHBigXkoFa0Cg9Exw7RnXNob/nI3iQ9GL23BASq5cW1bTFfZ1Uaujap1 uNOs+ltb/5hLlpK7abmY3u7jo6L7J9uvj7OSO9OyKleN9OvKse/av3K/OSGc3HEv9X7ziCNDWEBy paqnRY62/4tW3DP1sbUiFXoZOJWL6FTMDN1teO1BZkN3S8/LObDJulsRRi9zAHdbcTc4sDHjYM4L 7ov55QZ5Yr5MUX0R1jAJ3QcZNuDBgfdAzAA8OFBCLGICizWOMgKv2qtSTni2WoYqeYzLplhkrlnE 53v1jXH0JwfcNJELMUmkQGBywwsahNkgTgJalsAOi64ViAqX/wkKcIlc0XdAdBdL5sDXKtYcAYEn X1wKDBReIblNwiBKK75a3yXy+P0StI/gmUIEprqTTVNDPDS83pac5b9d0jw1igfwfwn9CAKIR7QO Y1fuAvMX2WopLgQnpgXii4PIBjQU72SJutQ8ZIA9shHkPYBG6oTbauIkpASkOMkMWvsBEjxBgc+X aeYASUCOhotxBG0EnCjw+b2mP/V10Z/9jg2nvsGdz8SpL88qPfWdVI8mhEtPfQMZJTc9Qg5l2aB7 iUp2XC3BsCN2AYLMJQk5EcVAPl8ozKITWBtFnccQaW9COPoJMBseicKBlUupHNYE3cCVgRJXvj6X ZSuf5i/qyEEurI66TS88LUnRKOwtXEIaStvbJigIdYYmiG6qxD85TPsT30pKWdewJAeHzEVY1+GO bwcUPE9S2kk9MNMWjaBm+V4X5ZCXHQM3pigcgJYIYTPWMkuCZjwV0plDhxs34fAiYD7rxa69XcoZ xbedu72Rf7o4LkKhWY6veyaaZXBTTARuab/cHylP6ZdHmaYtc3pOvY94oI8kxLTe8ft1OIA0NHMa GwGSPaBzV+xxFkj/xcQ++A/D28QxCmVuZHN0cmVhbQplbmRvYmoKMTYgMCBvYmoKMjA0MwplbmRv YmoKMTQgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDE3IDAg UiAvQ29udGVudHMgMTUgMCBSIC9NZWRpYUJveApbMCAwIDcyMCA1NDBdID4+CmVuZG9iagoxNyAw IG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBS IC9DczIgOCAwIFIgPj4gL0ZvbnQgPDwKL0YxLjAgOSAwIFIgL0YyLjEgMTkgMCBSID4+ID4+CmVu ZG9iagoyMSAwIG9iago8PCAvTGVuZ3RoIDIyIDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+Pgpz dHJlYW0KeAHdms+S20QQxu96iuFAlZZaC0m21za3bAjUUgVFCufEckhMlj9hgZUhVC68De/DIzGS 5vv1SCM5u0WKA6QKazU9Pd1ff93TM/ade+ru3IePj5U7HF3V/TseXOnKovT/XVTlcl1duE21K3b+ P7dehofmpbv5oJ1YtxO9fFY6P/HOa/B/+P8vq6J263pZbN3h1l3u3ap9X7Yf22K921ysL9zC/7G/ dR9+UhXtlP2N+9rlj8+yRenn5r+fuf6haV7q8Wc9/HbmTfRCLnwe9eL5UCLLmSvRXyRxM9IhFd9L YDQ1y1HeSFZKf9AcLNTIs2TkB3l4pyFcZUXU8OZ49Bq/cfvP3JN9F7UB0qvNuthmPdL1tkPaf1Tb i6LyQXAL/0eC9HX+SUCgAZPb3uwsv7zUoBypZW2ZPOz0pggKt3qxka8bvZEIWiqNXJ/NeLha+lCv qrJYycOeS3X7sfD8HLqW/3Xm9j+OYTIlPSGzbnbp/MfGk73arT1M0lUXbS54QubvPVBX3Sory9p0 xeTeB3zAW+D+KhB8KAL/RTEYcNAbTYKO32k2bwIfsxwikSGafUD4yBItx7q8+kMao2QIdlk2Slh2 RbIhdSVxFdQGa7JcU1i5UTZi1YGxsZaPZZw7y4bWgisZ9ZNkv9WDtIFMmGRGSeKFpsSWTKXgprVi uauKVcKtKYL6Kod9WEEFGVeFqISdBxhloGD98vWFTNUQeoHkWxELb4h2Eo2ELJIIIY5swu5GSxNB IOfBuNOVMw9blmMgJkvRaFGX1vIYgEBPTSbwGIj+V5IhCsexUJaTU154PuabWjFvC0n7LylKmXY2 aMuyZH1qrGWnUHip+Mn6R8DKQ4qvy1mWuP8W0oYXVBZgmA/KtSl8FFRn+fVZMaLmPvxNTUD1Sdb1 +SwP0zkghu0UDkxubsNglgOMNApMhDWAPlhyJEweVSPXPBfWb+dCt6lkD8v/iPbYhoNKI2dppEIq z+QykcBVSQT2ZTl4s9CrBdQEMqMmY9IUUj8CnghMUROVrCdFZnRAfs5oN2V0MSLjVfd3tBlqGXPF 9kCNmQlhM4tMyOZZsFy+tSLQ6yZ2aU2Wgt0U1VPborG02xYJJylHNGwBhF7zLkhldNeiVNInOjby eXZ9/oiWXtDiDPbwENPkfBTGHp0sT9dK+AMzcQ+RAaUDYsYDJnpb54NcreaCnA17UZ/q93QW9AnW 8XuVHfKEkoSZAJdgi0jo5aLjyxvWmGxxOvKwFMAB5Z3sQgbjfeY9ELVl7cvm0jfevvkegdfyb6aR rzc0W8ONty6LTXtUHav664Gq7Eww1Hifk8G0cXYyGGqcOh+kDE/CS+QCObLcEljC7JaWuFY+YA5R VO5lOfzgHAAFG7onxog+lONBHTrcgU2ykfTQC9XABrtCNxo1ndiuSZiA/tcsac4z6DuEkPm80rLF qOg8VmcNAsmU5rm0NW+8QbMJUK82c2UjOsJm/T2I7GFZufpuAMMJkNOChJWV25D3jRm4MwuKEXKm vVEf5uwU2i+S5ecjlBOnoLdFDxmseCHcGcItZBLYDpYC1j39LE04dhqO/pQMxdp8IeyZ3YJ1B8O6 3t4j7OH6i2NHMCRqWjDN8y20JIDOQ0vArn4jAyQKInnFiHxNUi7qPUeATtklNVMM+sgCDlDRdeFm 50/QdemBClc8VX+J1X0sqm3hryD9/eNwc83/nirqJ1T5K6SyKjcrv9cMNL6lqJ/Q6DevdbjuGWiM izqRUGhuw5ssJ2ww6cATeUS8qMr2BpZw+pZyl0MFxaWrTh059IY1ZNrxVyUCQzyoC5Rs4tfYm4gj g6YrkHe66RqSN7AuOlBok3K5Ze+13QwUgWfkkV7IamrGXKmuytpzsdparR5ycVUs2wYDLnK+P4AU icUDuZsetZH5TtDL1ATgL9mMJDIbSLYkSVpBhWGkNGBhJkP99Cy/xTmGEA6XxlGri08IywwP0njn Fa+wC3PgecMYmoOQHVIStDyXxyc3y65k0YPK45jF0e71ahGV+ah6Bcr4aq8LwNOU4QDIWqCbJMWE g4DKw1RSoBLI5KFIM99lGtFmL+W7oui/XHhXFXta1b+p2NMa/28V+ya0ZimVIAA0URLOEcC4BmdI cs2Z2tyllzG+4tIsqCbRJFuxn5GGFMcIzcY8KsQt9Q1htkSAEFZezVQTEtLYf3UZ0tjvAt2dbuhC Zis/AFOmVF70aUbxhA89RoY9SKAN0Xtto6YJKDGQh7hiYNLx3Lq0bh/+ScUakVRlaiX1W+GShwRC A2jTi4+Tko3vrMPWBlCajX7BroGvsL+xc6HOARN4ibb6xM4Dp1/WwkBfXk+wqrJ7wdOs4o5Yi5M7 OCG3Lr8QXJ9a4KZs6Ir17qJYtb3qu+mwZ7X9m5I9q/Q+VfsqYDAMvn2tR3UidMKRrADhlCW+39T+ SUCgBZ0GD2iK6NEfzGaTIVWb3uhMcGJ06XvEKDt+y88nE9NDi9QEO6NLFglrdnuRG6T1irVAkAdf YIJl1qcjzkmGN17jFHH7krzx162euctJ5o6rMs3VRD9ut/wn7jCJmAqE/cwE5ow5RnGyycjepqQQ tClL9N2cELbjHJrZ82QEIHK4CCJZbmV+XNplAqzDFi1NeQ3O/RfHuXkOrP15rOVA+DnRZA0dXfr6 y3foiHd2lLDsQkquq1EghvQSCWyArxHpiCgREkESZksaQcakhqpFFIgLD5LFFkaOeCCZqE8aVQ4I xhzeLOAcr3Av/F4hs9804MO57UpdO0Ei2KWeFVqCQOHgjWxnTSGZDFBYwtyonL0t8PPUW/lz3ezG OVt+FFvzlXOyknw+9548U6m9Chgu+InHSkO999HXtgBGBAiXEANCmccLYG+KUdj24W/MZQ5wMxQo GH2FEBFufBzHuiSOkSeBpcjex5OwEFqEFAmC4bxBf2ILI/GGEqyyGoIU4MwHgfQMV3RdBzrPP/8r yo5/p0pfeh2lANsWMP5lUXS7i/VCV4gdbRNEBswspSgZQu/avpfX/hd9AclGBVgoTw4Pf67E9/f1 oEaMVeWrVsfCmcv+wI8wP7pdJGYpQYbITF12+Wj2X5PgA+5N8ES2Si+y6tvan9V4IePF038Avk1u mgplbmRzdHJlYW0KZW5kb2JqCjIyIDAgb2JqCjIzMzIKZW5kb2JqCjIwIDAgb2JqCjw8IC9UeXBl IC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyAyMyAwIFIgL0NvbnRlbnRzIDIxIDAgUiAv TWVkaWFCb3gKWzAgMCA3MjAgNTQwXSA+PgplbmRvYmoKMjMgMCBvYmoKPDwgL1Byb2NTZXQgWyAv UERGIC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiAvQ3MyIDggMCBSID4+IC9Gb250 IDw8Ci9GMS4wIDkgMCBSIC9GMi4xIDE5IDAgUiA+PiA+PgplbmRvYmoKMjUgMCBvYmoKPDwgL0xl bmd0aCAyNiAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBlZnbcts2EIbv8RTo HdyJaJ5kSb2LU6WHmaZNRtObOheJYrepo6Qm05zeJ+/TRypI4v9AE5ISOzMRRex5/90FoBv72N7Y 0wdtYbetLfp/7dbmNs9y/3dW5NW8OLOLYpWt/J+dV+GhubRX33aMZcfo6U1uPeONl+C/+P+rIivt vKyypd3u7PnG1t37vPsoiyqrVvXczvyXzc6ePiyyjmVzZf+w7sGJmeWe1705scPD7h89vdLDSz1s n+np7Yk32rOxFPiNey0SG0j851O7+dmuN737t0yuF3NMLpe9yf6jWNRZ4b2xs3JpEpMv3MMguYlG S9n5uRb1ppQ9uVzN9WalhywIXOrFInkQSWA2rhDJxckBD+vKR6gu8qwOSSnrwcPuY1YW2bzL8sRB 9/nEbv6eBuuIqGVW52VV11OJZdYBzGfZfXNHieWih2M5lTjGzfrdpfxPEg4mriICerAMoDHuL7Ei Q8na/qulVgiLOYa6EfmlUnojNvgxAjjv4Mdi6RjkGfdeYsB5K1XPtZRKQdWfonktu8SNPFS/EG1C QtkpXE3qFNFB99bL2Vdmiy7y1bLuQWh8Z9gLwrQxEAoBv9GDzNJ3OYBrREjhRRa5bK7F9Vyhggt0 ELR3eIkAQtLcuwUy4wgsTA2it7JI2ok1uj5C7FFmetjSQcSF8jYSzyQaE2djstBlO+QeztLc1/Kx VkGWjNr3Fm27HepIBBE42reDaXDJS7ipgagNYnmtVmwcIeWBIJGaRAXytPJMsNAL6k+arCNnyIWI pSB4BAsJhGS7xcC2c/Vwfqoyq80wX7+yivALFQrYezlIBsc1EWbxRxkbexdmI9rbPOAUSdO+29ID yQnJlT2zUHYm7gQaiD4hGq2yTLqgaKh2ctiQICQih55571YdW4fNIXTGHS+e/Owri8cWZtj7bILG J2rFM2Z6mPI2TvlsYl4AipnsavpBXS4PzfxFVp1RxWE8fw7j2XSbQ+2OjsgZDfwobjLt72DWaNpH cXHUG3ef+gd7Sn7srC3dB4gJWTGxA0whSMFwPWMRPMXexZoAv6cfgSsKjp6PujhOBhONo87QihyU QoPkD0hkHFOLdCKoFQ7KgxUeUHoAXP0sL+vVVwM9bPLfhgbBZEWjEskKAcAlkYTkjzb4VLVI5CLS Ej3nj1RrPwSbTkNdQYpUOgNL0hNHQECdcVINLdsVMW2CotS4iGIBKyZW3KSGAGmFfFIdASnGpb3R Mx0cL6U/vh0d/5OTgj+9yevUJ1mHJzgQ4mvi0S3WA7GnmnGKOpBkdL7RJAMyNAzZlwTtGnNYCnE0 TgoILJpIruSmKxwNDmOeQsa3MQCGYy3+tyGAI9iDy2PJLFaLuyYzDT4jkOCTztgV5SjBUfxSJoJ+ rM+OdnCSRKAwkYcYujZuhkP+TdyhgQgY8SRKoFNLL9jgkBB1NO+wSmhAJHw4PJEYS9MvHCzIYlEc z6Gf5Ob2dQoKyQZGARtAy4wI9hoH7BoCJuca3FVX0ScauiNguJQJe3qkgKRRtMEHWkkO1r9QbWdx +7M3Xit/yizqeYzXcP9Udh+zsswW+646/tt3MbE4LKoosqKscn+VdVviZPMzvTw5ItHLmfubt+6q Y7+NvsmuCQuRVlIAWtwqk6ZXCp2yEncru7idBzAS+V0MdJ/LTf99dGeCESQ3fYNUDJR4TThyDilS 0rsU4CBXBmmjo4IW0uu3wX7r2GTv22MHuN6b+I5tWBsDl+wBrOsC8tSkN41FXnbo9LeqjNcxOovl ZEfucx5qYzQksYWbC+qHlI/uDkhOiJ1xH6h7Ik0D4E1M01DJ+j7inZY2QsgSxBgWJzyACCEdTlU9 0i4cErKQCHqWXijPP2ob9zBQco8sChQxkX/7NdA+EvPFyTTjweLRtKX4JHhPSMJpmZjH4Ti+iNvX twZodLPadwF/K9/fnfdNy1+c971rhA5uXdKQy7gY6EZ2gl2yQWcg7Z+IfOIuXJInVcP3UWNAhiiA LCuSwdYqZun6pfoVbGRfAkE8AuMtMGsDsXF3gdMva+FIqtabAJYnMmu91tp4E0AI4yWOJzucav97 Q5fqStc4X2oE5AOXk7ELxrBFYeYFYSa2U+CHXx6M4+aBW8csRILGCSQwTpG5cHClv3bMY9mJ/n77 cTSLZHYcZmFHYdzvPwUjvpeQAw7YLzsw2hbSqU6D+MO+MpVkO60C5LWE+SgE5sNdePcr2aTS0wNW vNZgB8UD2ih1maYtOe4BBFrUDm6SCMJwqPtlyUQsP/4f52Bz+QplbmRzdHJlYW0KZW5kb2JqCjI2 IDAgb2JqCjE3MDQKZW5kb2JqCjI0IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIg L1Jlc291cmNlcyAyNyAwIFIgL0NvbnRlbnRzIDI1IDAgUiAvTWVkaWFCb3gKWzAgMCA3MjAgNTQw XSA+PgplbmRvYmoKMjcgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9yU3Bh Y2UgPDwgL0NzMSA3IDAgUiAvQ3MyIDggMCBSID4+IC9Gb250IDw8Ci9GMS4wIDkgMCBSIC9GMi4x IDE5IDAgUiA+PiA+PgplbmRvYmoKMjkgMCBvYmoKPDwgL0xlbmd0aCAzMCAwIFIgL0ZpbHRlciAv RmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBnVZNc9MwFLzrVzxuNoNVS7Zj55oMZeDAUPAMB8qhmARK CTR2CdMfxP9EdrTrJI4zgXQmUqSnp919H+parmQtF/PGSNWI6f6aSmKJdew+ExMnmZlIbqZ66j6S JX5SL2T5tD1o24POXsXiDq6dB/fDfSdGW8lsogupVjIrJW3X43Yw00xnuU0kcj/KlVxcGt0eKZfy QYJ5qKLYnQ1+hrKd/MCkWWC2xuQXJtyidbWAp0ZCR8i5dONHKV/J87LjvYc1zTNitUWH1Q0mT7Vx NCSyhRpgvQ4uveeaaFe4bDbDJlYswMZAFmNlion2Dgss5IMJTPxhFRiYXIcjDNPE0U9NrFMfjcR2 DLshct+gprowBH9CKb8dynTCiXHRjhNjhb6sNt7Xk3/0ZfMu93Z8ufTY+nLp8d7r8xWch4GH3J8H JvfbFRV8xxbD9niLJSbQF6zA4c3hwj3iSH80GbqDl5eewZvNZN+fCvosYl4/eGvSrOEHO1SCdz+E CunejcTSFsKxAshbsyS3Y+kxzHyKRAEBB/AaUvgEmk1V30IxLvbEIhL4jRNcqWn2zAsiniSjTJZL b4GRR3snhL9FrdrO0ElFMcmrATF2kQsiOCFmkuhUbTvfWK2x5b0F3RfeM6+ihg2FI/RBegIoOZA4 2DVeTxWsBntMYerIm+4iblKWiq64h1sYNIaGkz4CzclctO6JOFs+ZgvBUTaPTQVEAJBIDp6p3Xvh HxzYHBHUv02w+K+C9Vf2SUcMG0KoScqVjIcFODQCCtT70cCP1rvNJufXe0WM9U4MfT899lZ7wVVA +EynQeKSEE1AtX4Ex2H+Ywe2R9l3Rf0aCvqLdkARC0+zMfWM3U3jKpri/EydAwhLpOK9xKb79tKh Lw9bExVlm0AxSkAF0R5ZnRSZdw9qAkqSOSS+QdfGwgATvaOu4Asn6HN58Di949F6Q2Z7tTiqvSnc PzTnNlnSBjKM3KjudI+tv/TqLya4KTwKZW5kc3RyZWFtCmVuZG9iagozMCAwIG9iago3NDIKZW5k b2JqCjI4IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyAzMSAw IFIgL0NvbnRlbnRzIDI5IDAgUiAvTWVkaWFCb3gKWzAgMCA3MjAgNTQwXSA+PgplbmRvYmoKMzEg MCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAg UiAvQ3MyIDggMCBSID4+IC9Gb250IDw8Ci9GMS4wIDkgMCBSIC9GMi4xIDE5IDAgUiA+PiA+Pgpl bmRvYmoKMzMgMCBvYmoKPDwgL0xlbmd0aCAzNCAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4K c3RyZWFtCngBlVdNc9MwEL3rVyw3hSGuJdtxcg3TMsOhM8xkhgPlUExLoaRQm/Lxg/g//CTWtt5T bCcppDO1ol097b59Kzn38kru5eR546RqxHV/TSWppEmqn4VLs8ItpHSrZKUfKbIwqK/k+mm70LcL 1d+kogvvFUG/6P/MJV4KnyVLqbay3kjezqftwy0XSZkWTub6ZbOVkzOXtEs21/JG7OuZSXWpvZnJ vBtcYvBtpmGpRcLzIwwNZs4xc9UPjA0Dse9Hpp0ZrNbnW9m8lNNNx8ogk7wskqXpM/HLLhN9uDJP nCYpc/0yyeTCnoVI6y/YfdtvZux6DSO29/BJJ4MVZpIAuMREOTM9SyVm4EIUB8vF7ECGeaa0ZqVP 8pBh5rsMu8dcS74o2+IPE7S/Z7L5NCbrCJRTRaSZ8zJC9EmrOy2+ffKfiL7sVDpBHMqpFw3lRGnc gRcUgBMPsGwpn1hBGqm6G9SAVW4gVfo03J9yrgmOAILJWEYCyykACcPFNZ05BWeZmX2CLtsuyvwi yUNrDsvtR4XWnnzXE2JspIFpsLEqTjF9hE8fMrS9BGnsYubxbNTnSGeaO/DX50B7EdaehCc5YQgf UFyagILkjGWNsTV9a3U+yKlfloc4NcPmUU6ZLrE5YKyUD+II/BmegQ1D/Yq8OCDZNZYjU1ZKFdId qVHoFVmmEyNlqZpwjIkFclhlLFfBcpSwfPXvhJEexhOTj71EykjiA7RBYj6DKiYUtYuwuRs4C4uM 5SLGcTsnIjmPiLQBKVBk4p3EWHfyaBgBU4qY3Dqwa0Z3Vtfi3qWH2D3Y4qI3ZrhREO4RQTBu5sig gykqtSI1dcyyAt0E+IVtf4yKZMZaE0tENgHgAEKeGFfF/JqGWq1Z00EcBxvdtXelHp5G32sePTxJ EmOgEDlzB9LpzIiYAg8uJMf06dJbjI1c02e6Z830wRr3/B4Ci9WjLytGZ24xCoPXhlgtan/OYCdq igxo6IfpzvJDQp6eq4RmXLyO2kbau8lKL8RVkeT6yusnL3mpvrDkSTm+Fu2ffW8r5VEoVyRF6X05 QHzk/ec4ovdJ0UY9QNx9/4FYWC6UACWhgccMa/KTomFb0LviqAc0lj5s4djn92hmdiqXR6fJkYFQ WUkkwy6ZWBrO6JUWDjLAUBncm4qd9BbWBLiuEfZJx6VetVP02sH7VPyBoNoZ/zIwevfr20/4cXNL spEbdp5GywIF085ly0JxQFzmOBD/q7+0Ebq1CmVuZHN0cmVhbQplbmRvYmoKMzQgMCBvYmoKOTMy CmVuZG9iagozMiAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMg MzUgMCBSIC9Db250ZW50cyAzMyAwIFIgL01lZGlhQm94ClswIDAgNzIwIDU0MF0gPj4KZW5kb2Jq CjM1IDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8IC9DczEg NyAwIFIgL0NzMiA4IDAgUiA+PiAvRm9udCA8PAovRjEuMCA5IDAgUiAvRjIuMSAxOSAwIFIgPj4g Pj4KZW5kb2JqCjMgMCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9NZWRpYUJveCBbMCAwIDcyMCA1NDBd IC9Db3VudCA2IC9LaWRzIFsgMiAwIFIgMTQgMCBSIDIwIDAgUgoyNCAwIFIgMjggMCBSIDMyIDAg UiBdID4+CmVuZG9iagozNiAwIG9iago8PCAvVHlwZSAvQ2F0YWxvZyAvUGFnZXMgMyAwIFIgPj4K ZW5kb2JqCjM3IDAgb2JqCjw8IC9MZW5ndGggMzggMCBSIC9MZW5ndGgxIDMzNzQwIC9GaWx0ZXIg L0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Aax9eWAURfZ/VXX33EfPZO6ZzJFJJoQJBJJwBCJpjoCK 3IcJEgkCyiFyBPBE4sEhoKC74i1444EMIWBA9ktWWV0PFlZddz1BxXNFWZdFBTLz+1TNBNDd7/HH L0NVv66u7q6qd9R7r141ixYunkEspJlIRJs2d+p8Iv4CNxBCb522ZFE0e271EaIbf/n8K+Zmz/Ou JET57oorr708ex76LSGXT5o5Y+r07Dk5jWPvmSjIntNKHAtnzl10TfbcPxnPj145b1rueogX3zV3 6jW595MPcR69aurcGfwCIbc8hyw6f17TInFKbj6G4575C2fk6tM6Qsz/lclkspdFbsMrAJxPfiDV 5CGiJ4yopIxMJESeKecTBef8usLW3fXD2hNT7NX/MgQN4s5HPyvuyoGX5fnrT27tuEIlBgtOjaI+ v4D79APSI8lglZzcevI6NfsmfqXz7/xdZLzUZXvCFzm4Ryohh5GYVNKSzI/skoql/Jb+Ea1Nim93 usvtA7tJUTyxTORR5POQtiLtRZLJFCmMqyryZUjNSFuR9iIdRNIRgpxfjSLNQ9qIdBhJJ+VLoZZo RB1YLPlxrx/9tUte8j1SBkkiEeRlSKOQpiCtQ9qIpBP1eMk8pGVIe5GOIemIJnlb7qpA270ta8Rh ++wry8Xp1Ozp5AZxuv3i+uxxxJjsccgF2Wr9stV6VmaLuw/KHotLs0dnUXkzHr7dZC1vH+iRPOik Bw2fj5yyfcROKYmQTZKbpJCYhKaKEk1ybi9MlG/cK8mESkyiZDqJZNol2mJ1lA80sQz7njhJhH3H jmavsKPbbY7yjQMvZJ+SrUh7kST2KX6fsE/IMnaYjznyGqSNSHuRDiB9j6Rjh/E7hN/H7GNiZx+R MqQapClIG5H2In2PpGcfIVfZh5xiRM7hGiTGPkSusg/QrQ+Q29n7gN5n72fa2dstfarKdwkgWZYD IkU5wBvMAU5PeRt7q+XnElBUApgGRb0oFZABpEIqaCnqGWmTfC3VsyJt7LPt0WRk08Ae7B2SQmJo yTt48zskijQaqRFpPpIO0LuA3iXNSOuRNiGlkEBlyFWkKHsd6U2kd0kPJA1pNJKBHWzBa9rYgZbE oMhAD/sTe5V4MeL72R/F8U32iji+wf4gjq/hGMb119krLeEIGWjGdYJ7VBxVHMtwXWG/317ojGQG OthejGAEeRlSDdIopClI65B0bC8raJkeceIhL5LXwcMR1kK+FscnyaMGos2OaInBIMAozxL9zgOE bGN0Y4JpiQ334ZRniTvuAsSzxK1rAfEscd1NgHiWuHIJIJ4lps8GxLPEpCmAeJYYNR4Qsjb28AuF xZE+o+bQ6EA7uxqjdDVG6WqM0tVEZlfzH/lZ5m18oKVrV4zY/VqypGukeTdt3kObx9LmR2nzDNp8 I22+iTZX0+ZLaXOSNodoc5g2a7T5RdoXQ9FMtdZfnFZpPtr8Om3eQpubaHOCNhfR5kLaHKV9tDYW a7kAXIdDrThsH8iZjsW2nzcA0sfOYhjRGGg+BpmwF/kBpIw401ApWpCt7A/zY8H2rjXZ8+79yucN PJ+9jBtfBhpeJoeQZCDoZZDRy3jIy3icHXkN0hSkdqTvkTJIOtQuQD/WidyOvAypBmkK0jKk75F0 ojnfoymMzEPOm7hVNKwMeQ3SKH7GXsavAL8Yi2n5akhNqudL60LUHqajwpkw60M8Hshlp8PgaKPW nT9af/rRSowDjewOto7kAxHrc8d1LT/nR9rovS2JFyMD3fQeEpZBdbSKJGgRjn1JkzjvRUIGXl5J QuxZHMtbQhNxm70lURrZTW38rp2Rn0NHIl+H2hjAr0IvRv4abZNpS+QvKHl2Z+Sd0G2R18raDCjZ k2ijOOyOiqq7Qn0jW14XVW/ChftbIjfyw87I0tCwyJyQuDAje+HSJpxp9sjYxKTI+XjekNBlEa0J z9wZqQldGqnO1urF79kZ6YEmJLNgVzS2JCReGg+LB07o00ZnaqX6Dfo6/Sh9b325vlQf00f0+fqg 3mVwGlSDzWAxmAwGg84gG5iBGFxtmcNaks96Lp2Y/HQgaEpkAauQMJSLGeSEUQMjF5JUnjScDR83 iA5PtU8jwy+Lpk6Mi7dR05hJKSU+iKacw8nw8YNSfZPD2/SZsak+yeEp/ehL6rZRekc9SlNsVRsl 4+vaaIYXLQ+mnIPrdhFKHctvD/Jjl+W319cTn2dJja/GOcBRNXTIf8gaRWHjkOTZP99ZMOlL5qc2 DB9Xl3omvz5VzoFMfv3w1G/GRSfX7aI/0GO1Q3bRf/BDfd0uaQD9oXYsL5cGDKmvH95GJ4p6JEr/ gXqgGBxQz4CJmdcjUUM4W+/+bL0i3I96hfyAekYjKRL1ioxGUU+mvN62psLaIdsKkaGON0qaRJ0m b/TcOq8XoU4RMtTxNJPXRZ3XPc28TmqAeEwohCphZKhCAyQkqoRoQFQRLd8mqpTlqtx2pspt4k1S tjWiDs/wGOvhzjrWw6hzzkD+z+CMQckk3d6/ftrk2hnx2sZ47QykxtSaJTN9qebLotFt0+r5hWhK SjReNm0mP06dkaqPzxiSmhYfEt3WX9z3q8uT+eX+8SHbyOTa8XXbJmszhrT01/rXxqcOqd8+bHRl n1+867Yz76oc/R/eNZo/rJK/a5i471fv6sMvD+Pv6sPf1Ye/a5g2TLyLCBofXbfNQAbVDwb++HE7 M5tAr43BWP0gjzp/gCDe/jHfjcHd0FY2E3OyPmWJD0pZkThddxvYbSC/BJ7il2wotucu+W7sHwvu pptzl1QUO+KDSHLR4qbFxFc7a0j2XxP+ULRoMUdFNk/ysv/4hyq1KW3qEK5bD091HTc8VTNmUt02 vR6ljUPqUdavs8xsrm3LtGcLu6OwH68oSWcq8rJqXmY05ir+Oy2INqEYo7MLisaL26kWpotIU72U Cg8fzyAKxk/CMEyeVLcbuhSfJJrq0cEmmqRNnU/j/RAwyZYQdLupMy1anINyY7EodxRVm5Ik2dQ5 JJ2PS/LBEpkYq0VJiDZlN/EjBZSniF9OENg/mS+RvuLH9KzMV/w6P7JvIOjacomQzWQLnUW2kL3k JXoMd20lu0gr4SrQEPIguYH8lqzEtDYJJbeRsfgpKP8t9WdaYZk8ggnzEbIfdS8mN5LdxEN9ma/J MrJceht3LSdWUkAGktFkHrmdXpRZTCaTQ/ItpA+5iFxF5tPmTF3mjsxdmcfJE2SX9MdMBzGTAJmG 3/7Md8rfMh+SbrjjbnIfOUTvMu4gGt7SjJoPkYXkfqlBppkrMifRghi5Gm2QyQiyn7azJJ4+g3xJ ffQGaTCe8lgmldmHWiHSQGaS+8lu2osOYzFlcmZEZj/x4B3X4Kn3kRayE7828jvyPrUoxzKPZ44R PyklF6A/reRPtF1Kd9yUrsG4KRilElKFK/PIf5FXyUEap79n8xSLUq5oynWZd4iL9CQT0NqncOcX 9Ed2I37LpFfkoZlBxIZxuZOPNvkD+YQGaBkdRSeyEjaPPSwtJAa8sSd+08ksjPe9ePrHIKOdzMIO SI/Jz8qndPnpwxkbMJIgD5CHyO+pFT2N0iZ6M32XfsYGsynsAfap9Fv5afkt/VT0+lIyl9xOniU/ UiftS8fQS+hMegNdSe+k99H99CD9ig1k49kc9r00U1og/U4ehN84uUm+RVmhrNF9la5L70v/Of1j pjyzgowBPdyE1t9NHkbPdpED5D38DpFPqULN1IZflMboBHo9fjfS2+mjdDN9mrbiLQfpp/RrTEn/ oqcYZlqmY0EoP1wFirOF0DB/yx5kB/A7yL5lP0teqUBKSr2kaqlemodWrZTW47dD+kQOyAfkDMa5 XNmgbFQ2K88qLynHdBb9zZjj3zz9WEfXjo/TJL0qvSHdkm7NfELcwCFmD5hg1Wj9VPxmA98bQHFb ydvUgrEL0K50AL0IIzOFzqYL6DUYyVvp/fQJ0fbn6R6M0l/p92izlYVEm7uzXmwQG4XfpWwGWwBl 7C7Wyt5lJyW9ZJbsklvqKg2TGqQZ0iLpWmmDlJLelD6SPpVOSKfxy8gmOSIXyAk5KQ+Tp8iL5Yfl L+UvlcnKG8rnOpNurm6Frk33D2g1A/Sj9WP0Dfp1+p36dwyNoM6XyQ7yAijwzB89LN0k1Uo7yB2s QvbDhPkT6HkKmS6NYKBUtpmuYktpKytUrtH1Z/3pSHJMTmCsX2Eb2QnWXxpBh9NxZDbrmX2gziU/ A6hafpkclfegb3/Ck6/RWeiN7HudhbRAR6qCjvQHqYeclN4g70uHqF5+hHwgm6iXHmVPSaNBBb+T Byh1JCY9SJ6XFtClZAerJcR0yrAWdDySPgO5MJ6W05+kDNTgkaCiPtJn5BYyh/2NHAUfryL30Ony FeQOUkFvIF+SJ8EVJcpVuq46N32NzZJXszzaSpj8NHpXRQuppLjIrbRBul/3PXuPLCYHZBP5WHoO rT/AnpdGyMeUsXQmOGApWUEWZG4i1yp18lv0CiLRiaRIPgzpdoNULsdwXAapMhkybSe4ezfkwEBp BEp8oJyLQBcTICHux+9eyAkZFDQLPH4xpNifSKtuPGsjVyg2CqkDT80b6bFkUuZJcl/mCnJV5i7S DfJgZeYGPHEz+ZysI5vp8vT1ZD5MyffA2xcpQ9kBZWimG1vN3mPj2IZf4hejXUR95Bv8ngdmBigv ktXyX8k4UpNZm/kLqLsLJOx95DIorEfQy+/whvOldlKRHsm2ZYZK89HfQ2RM5qlMhJrIzMyVZBTZ Q57QK2SqPgkcp+hb6O/1ZAYbm1kkzUjPwjiswyhoGK3FkD+3aYMnjB+o1Qw4r7p/v6q+fXpVVpT3 7FHWvVtpsmtJl+JEUWG8IBaNhPNDwYDf5/W4XXlOh2q3WS1mk9Gg1ymyxCgprY0PbYymEo0pORE/ //xu/Dw+FQVTzyloTEVRNPSXdVJRft9UXPpFTQ01L/9VTS1bUztTk6rRalLdrTRaG4+m9g+JR9vo pDF1gG8fEq+Ppo4KeISA1wvYCjgWww3RWt/MIdEUbYzWpoYumbm6tnFIt1K6zWwaHB88w9StlGwz mQGaAaW88fnbqHcAFQDz1vbbxojBii6mAvEhtSl/HLfiMVJR7dTpqdFj6mqHBGOx+m6lKTp4Wvyy FOGaUlJUIYPFa1K6wSm9eE10FnScFFkT3Vbavnptm0oua0xapsenT51cl5Km4hm1KUcS7x2S8l53 xHf2FA+HTrby3KtBaXWtb1aUV169emU0tWlM3Tn3BmP8CfX1eAbuZUVDG1cPxavXAlPDuS6eYsvr 61J0OV4JxbJI9Crbv6zWW9Q4O5oyxgfFZ66e3QjUBFanyNhrYy2BgLYrc5gEaqOrx9fFY6maYLx+ 6pDQNhdZPfba7X4t6v/llW6l21RHdmC32ew5wGI9F5iBQc9eE5CozqHhY8+MLOVtjF8ATTAVnRZF S+ri6FNfns3oS1ZP6wsE4K+e4q7UdGBkVso4uHG12o+Xo4s0pRSp8ejqfxFQQPzot78smZor0RWp /yL8IqeTM6SWolM74VQymeralZOIfjBwijYOEOe9upUuaWPx+HwV9jM3GshojO3U+n5lGP5YjCN4 TZtGLsNJqnlMXfY8Si4LthCtDLo1a+RX2juvuCfwK82dV87c3hgHJbdye5a4U4bEmX921ZNXO7Nf inr+h8szsteHj4sPh2ocrV3dmKPa4eN/cZa9zgcU44ZrOSiVN7hOCjKUcYgFJXE1qyF3VoG6XGdJ yUX4pxNEPb1NbwBVihIaHZpSG8/P5vWmWCzHM//bTW2ZY/wucTh7W64bqX7JXEOzzU71/8X5L5pn WS0NHw+Rw6DZr15t+sU1kFq2lRfkDqB4GPqx6OAUmQDOLMI/mBx9eaoPpjQMGa6MBxeJ4vpg7vQX FYO5m+rxx6mzW+lQyMzVq4fGo0NXN66e2pZpviweVeOrd7GX2Eur59dC2mUJpy2ze00wNXRtPUZs Ju0H9mBk0LY4XTVmm0ZXjZtUtwsujuiq8XUtjLLBjYPqOVrY4PF1uWERCOGkDxxixQQUw+d4fT65 mj1DbhCpijyD40CU7+bX5CYyAekQUjXSRKQAEi8bgTQVCfojmYC6u5SJmQ5lItmgvEouR3oY8KPy Z2SzrorMxfnjqLMXdTfoniH34vxBlE9DnYcBP4LjZNTtkYON+tuJH/XXIBXjnguRVsCqHI3jUKTh KM/DcRDSSvoqWYVrq3C8Bc9eycuQhuSO56M/y3G9BvcUouwWwAG8hzuF7EgxpC7yc+Ritp/MhVf2 e7kpcxrPwhoSBogzFcEKlI4uwTGKGTRbwku5EwkLHNwSxp+CAdVDpzcSE2wbC+whG7FjTcdBnCRP 1OjMXJjLPbCjfEJfDUJj5X/53OGMN8QAF5A4KSRF0PuLxTW0EMeSHNyVJGE5dCPdocH0gP1QjvIK Ukl6kd6wt/rCWulH+kMHPg/u9hrM7wPJoNydg3PH/z+HIf9/HkOgM57zN/QMPExAbozW17QEdkwb /YD+zHpC614q36Us05XpLfofDSOM95i2mQ6ZWy3N1nzr721x2432ofbX1P5qs9Pt/CbvVpfefZ7n Ls/X3ut9vfzj/bf5XwwWhvJCR/NfDT8ZGR09PxaI/bbgcPzSwiVF9Yl+xaHiL7vM7jqg68HkxtLn u39W9q+esXJ3+YzyNeV7yz+oAN/Aa4hMwQ+414OAHDFHETJ4GMnpqNR+WlPIKRKV23mlqzOv6zYq b4MivCQIbFZQvWZa718fYDMNgWCQ+9ftPr/L5/P7gm67P9Az6dzDNhIjFEwL26iZpYDfL9Ggz1fU hZdHUN6dbWwpMof2sPtJEi3pye7fXvBcLx0/d+PcjkcaoyDTxZUXT/Il1RMNR48fVU8gIzVHO46q 1Wp1DZIKmDqcVVU8reyeXKru69nDN/habSytKAknI6Qi2jNCuyUAlRUCsjJ7hHhld4Q6TIDyDIC6 5neBfzmGrLS4e4T0iCOzUUuEehRkqtkZIS49spwfBJ61Tp/GTbQhr7J3RTm0SF28IEELdG6Xp6K8 d6/KhEQrKP1vrl398IbVO15YsXwbrRpcP2nQECSp4K7Tn9DPH74HF1biQj9eWFs/SZ700Id/2Lv7 tVfoHxY9cHvTovvvaDrZpDP+/CO94+EP+IVX6b5FD6xdxC9gsG5Ij2GNwJNKztNMxXYsrzn1BlVt oxXbyUabAUfNod9ou5RIqhSVJOk5x0NrxeB2nOCDS2owqD170AaaYI7KPr37VOj0+LlVSg/d/acR k/bcdG3xeXH0Pz1mD/2J2r57v+PUwfrVG178XTqS5sg6+/4ZmqUL66Iyo0mlxGnkLTBtlED8Fa1Y /7zUhhmvVVXZBAA/tdrtAjjSarUK4FvNbjKxCXZbxMZszzlzbeSj/qt25sWJo7I4gV+FB7q8yjpu AnIKziu+7qY9k0YcSI+hh+kne3ZtWD3prVMd73+X/iFtQCufSX9Mb4H/xURG7jCB+J/VtdHRWoJK 1YxRE60mJixuStVE11ffbxRs03mwtDaBCzaZH7kXo3W84fgR9SiID5QoSFDN0mDPHhW9KkAJ+uLe vfvs3D/64vKq3tL+/QvWJEb4p16C9w6kbWw2mwt+K9X889l8iY2gI/DKOGEBZT4q+OX5t/uSI9Uj DeoXpGzE0Z49yAKQWK+YeyAroW07dnBZvhvZSrReIkWaj/HGVmebuJXIm3B9kyxaeaKhgbNKtlG7 9+/fz++FX41VgT4kMm4XkTIft7iqWFvmYy3qqrpHokzaKG3Fwu4SQl2oDQEhEZP0FWFfAW9P4+Xy 9uvQ/2oVnJillZVK92SD4DnakEy6Oc0/vT5d51e+PYknMDIh86XsUNpBj/l0wjbGJ3HNFAjLiits tXqNbZmvBO45oPk58o0OYuHUQDwWC3ILLyNlQPx+ZPvRH96j4Dbdvz/pOJ6km4AnfQEqEsB3mt9s BuQgKi8hqsXCc1525pFnn9mqi/rVEMiyhUUR5XCYeJCcSHYsw1wm61ayVeZV9tdsilFv9rHavIvc F/oHB8fnTXZP9o8NztHPMU/Lu9I9x98YvJZdrVtivs6+UnevfoP6mu999q7uXfMH9sCZjjcZtVi8 soeREqNqZMb1EUcTgfKl2VAaxVTHyPrwq2sEYybBlw0LkhyVvOu0YQGcgn35H0Wqr89TnVwAeZwg fsig4kSeyiWQQ03EC/S6CXPe3rSkZdGg2W8/8s61d+56+oYbnn76xhsubGBvU5me99yU7enM++l0 +uUt975AH0rf8/0xeNpmfzdrBaeVQ0DgKeDORLZqUUmzOirnyMvYOnafQX5OpkaiU5hkVKiF0ddN ovUm3idCo7gXS1eCuwF8ozkEQkMCoTaBUIyy5ufo6sSJwE/AomhWe6XSORI9FBqFd5IpfvNuWk2X kyxrLEhiNshJYIxM9YgOMGKNt4o6qvj4kIZkLO7Q6fS9wIUV7FTrwLfH3/Np2SL5+gE3RJ4f9voU 3rdq0LIefQvTV3O0ZHSoVl9enm6CtS1zvNXhEMB3mlFVAYVdSpiTqJdXCIf51XDIhithECjyNvai ZmEmrxeRIA7GohHMRmXv7Of5flJ2lDe2huf74IoI5tiAv9DidDLxQs1odwDKvuewZnbmsQlhFy/j z27BozmrmM1sAoBvNTGK/+ltnEf4+/jbxMu03v2V/roXlb26F/WvGl4L6S+w1FvG2+ZYptuuc16X d5tzj/PzwOfBYwHLXvMLeSyIhd18Nazq/guuZD2I34CjEdgKhE2qQad7PRRwhUIBQygAaWEIhCRr WG1jj28f5aBY9vXt4D0gYjjslFlMTd63Mdqc1umL7CYSJSrtq1kcO2rg8p3HljGZ7WaF0AbWbcsS O5/hk1y8YCLqqMY833DE4eSYRbbS1j1pg6jhsz3kYicH9CUNtGFhfX2RO5boA4z35pNvvEAI4ezE jAlMp5f1p/swb9Fj93+/+b7rb36Q7sr76c9vnzj/qZcenRzesmVg9bT2G/d9fvmc3zy4Ou/Ae99s qXtmz+OrpvYEpUzMfCF7QClJWp9DnNnv0zgV+0KEclJNWnBCS+Imq91iD5tMJe5wSA6XhJQSa9xq 8fkx/UUhetiEqD7BscirJ8q4QNtfxn/EWVVTo0KiglqOvqK+4qxS9yXLeQKxaF0Uq8daa11hlWsd FzuWBKWxnivV2a7pnsXWa10rrKtdtwWfsJqUqMRXi81mi9Um6ynei6nm8e0aOvAinHElxEp7tVos btm3mz0Om2SmVoxWKmim1dk0JTovyqI+TsnRZn1TQsimBCUJNcHQ4uMv8CuJ9d18bbRvi/9tupv2 xUTSrpnPSqvSNnpXDodJoaclucw6nhRTEPAINKJzqsBnFp1gVYgwcCtdUJ/Xx5PTmiCz+pwBO3HI tSu9BzmBjjWxNXL3nGVbH11acZHLaW5qWzF71lpXa+yb5695fc7l029en/7q3d9n6C2++1ambr7h EdfD7Jql026+9dbojlevaJk+5cHu4d/d0Z7+1xcQsQHIAFXZDflmpQmtt7POMtNyv+Vpy2sW5SLp IutvZckJGicWnaRXTGZJTyxg9tcl2SVJsmQlzGKV9dKLCIYxQJXepJmILKMKed0kt7HLX1AUk5Yf qTR1SkIAfGJiEwB8J2YoUxvto1n1WkG8Ut8c66Vfb8dUjFG1uioJU1mUSTg/LO4BcGQnxwLbYWuj a8VIf5tMNghBeJyLl2r1C1XIQfV49YlqRxUfZKEQy2AZu92O4RZrgVbM+c4qyLh3NHNFlVTQrUqS 8/Or+SPqgQzU0VwWzVxlaR5dZdESVZaCEI7dqniFZD3Mg160wlHhjjskB2UbOm5lD/3mlVda073o lCeknacvfCL9CJj67o45IDw+98eUJyFjJ2Y5BzEE6J+VDwIN2Uxhtzvk5JLTbJflcMhqo0Tvw3wh NAIBCC7j8z7nEj7/gYg69oEzOGOUOIXstYt8eODa/NX5G/KeynvZ8q7lg6DBmOezdQ1Ixh5KD/Nu yDEJ3KHmmdzOvLzXbXaXLc9ls1vBIloeb4hm2wRF02bX3DTXqBfsMn2bsw+kmhblzXNMUeepy9R1 qqyCSXyCSXyU+FQfQ2OzTOJbH3Xuob0QL3c3iKpvi23Hf2IWhLGcyyxC6Al2aeAaJXhEdLTBUVXW ALFwZKWhe1IBFokQfHzW70sXQNv6BduAV/Ji7pgEXYC4XXpujUz4nfu+K29u3bL24rVdnr6Dvdfx wqhb72ynhkW3H/9jB21WV6/Z9+j9LaNqPOwfz6WXTE6f+POrd7Yc5lrbCGDODZmXT7rSUTmpF7HT CJabYMR1CWtWarViSgwqBWGX1RSmpEjFEGQ1ODXsVfmE7xUyzwv0AM5pcPvf2a/+oROTDUfVfQ0c k93m+OkQveYe4h8SneQcH50jTddPN8x2To8uMiwOLTesCL1reMfj0Ec5BxRneUI3IS4EHi+KiQt6 fqE4Go/G+AUHb+VoK0M7g/TtKRyREHrGzjZDn+2rOcmOoiZVIBI2igprBL049gLXEtX1pSYu5sK0 SvPUeKd453mXeWUvlFLdBK+Hv9Tbxgq3J7NKGjjxKJ+5BBKzmlpW0pU1cJWNY4yzD5d29VQPa4Wr Zjp9byDLCdkGZBGH2gdnHuo6Kwl10qntvtIL5kwcOOEyNnDPFa0dVx+89ZP0kYdu+2rLRx19Rt0x cuHjj15/3TPyONvsHiN6DPjuw2mN6R/fWn30RiyR3UCf/v3ml05/1PBMfdvD927digGYCnnnwUq7 lczXbPusVMY/ZpCNkGWcC3swKhst1iZJYnxIRokpWmIBu6HJ+HcyCrifwqQaHObRZVAe/RBEgopH wh5aUD3i+NGR6gmujXHLgM/eVQ4hg9D/BcKC0RFJp4/3djr7TJV2rE0fHd7bvku6+Z+3ySe3rL07 7UyfavtgC/2Gvvog90eMAwX6QYFeeJB6MJKlwVYLCYa7cxkJPYxN6N7dGQvrlC5hpzVstPAJFsr/ cYhJAEk7ty85GQLIKk4cEBftPsyVWeNTALwWgBz5SoVuC9ez3OKJbkG+7hz5Zq2Qc0wRyKPk0Sqo IzmL5AXREGF88IYA4A05IiwTDoiy3Pu5+ovXntYKeEX+Wk5c/IU85z09279OlsG7qJCH2ZYIm4hz UJ9eHlriucBzQeILy9c9FGMPLGIupTfIiwwLzAsti63XedeQ1XStvMJwk/lWywrr7d43Ha/kOQvA KS2haIAfotEyfugWxYx/WAuXRC0k7CMWNGNTd3q2JeGmvUZqbGNXaGqyya5FofHDy2BX7czeRu/c We5rSsF0xvWWwiZ3pyIfdWtu5l7f84xJcxy8D6qBhpBTEJxVDWW8c3zSynGMkHMNCxeQBfX1NJHo 1elL6dQECEryOr0tUPikc1mHzp5/5Rd727+ZM3fl7ekT772XPnHnZSvmzFx+2+VXrOp3wfpxN23e cvOyp6Rgyb2zN71/aNPl95SU7lu1J0MobV/3ezp+5q23TJm28tbTmRHrRz3ZfPMzmzttWU6TYUjF 57NWwwvmCKaAIgcmgBMCyXwmEJM7gGNaF45Rn0Og1CGsT4fPUZo0dwlzz8Yom2SzuchoSoUaaVVh VVA+00CoKgLj+5IN5SCxhqPlYmCAeU6IKpeiH/2BE50wqM9pxNm5U+sqJk+HoOL/5q2/fNevXoU3 nX2RVtkvcJFHi1/iuTh+uXSlZ27givh1gaXhtYE14fs9Twf2BL7xfBE9Ec07z/OwZ4tH6lcyXceK +bwbBzH5YlFdtEt4lG0Kn2RDvHv07dFZkdzKG4GAzipihkR2/HJaXV/K5XQrF9OOM7Tk0BzMsT4n eRuy2iYnJS53z8ydnWKXNMB/AiNZKJgDWK/KYi5tcSQQtlj35SZzggqDIeu5m7/Fc8PUcUtH96a9 X5y78zTVv7Lu6PXX/ePR595nbzyx6JqWp29Y+ggdp1531UXL/jbf4ps4hxr+doiq96c/g2/py/T2 5/dKlQ/s3PfgWohczKS7YP6sQGQT97D2hR4B77reyHTVslRNdTI8N9BrCItiLB4x5HxLC7j8hDUg UC7YIQ9eJQlpF5w4Uv3+/aefgjOHIfaIKPXQX/VwVl6xk9rs8KZBUfyhNQf8JAgRJce1ek6IXEbq JigiL1N7qFcYZhob1VXSevU15RVdu3pMNRuUegT2jFZnmlPqPy3/tP7TZpQtslW2SVgcV2QZ1oVB p9dbABsQwQJ/Erx3ml1Y9lG9xYVLTIJQ+0mDNINUjcoWF+4yhhXFENZJujY2XzNin8fXGlZ22G5q BsOZNaclSmbopbGjEShzSJbWy1RG5KxmHm1p1x+ySOst1MLPVbv+gJ4t0zfrmf439nf/KjxxC/yQ I/jnw4gF/CqowFdTHThacwSeYfzj/inuE17ZHUGoOeMRE1PVSnXfPtu+fSuV7BEiZ3jKjLi6MBYP W2W7ZNDvhuFLMj9xKVRPF3J9i//F4eGKSzEpLyYlinV6iVX8mdV99GzHA4+8R/9x39CCUIWy++RQ uic9hE2iG3ZdffsaPpttwMz7NTDlEBpV3i4iAyfDuB9KlofGJ8YvjzcZbzXqZgUWK/ONTeZblFvM umKPUfIVdw178o3GPGe4a9eSEhLKD2PcInBAEIMvobNw/6kOdoVWwecwnZOzvE7HR15n4E8HCIzr XHxK0Y0vSlhC/A6LidezcLpw81qWQGl+OCrcNlF+HTjlwiwH8LooOQnr8QwAvw0Xb3gOoIZk/8nc U5UdoAbM/FAEcDIC5l/2DwTNrXkkCLNqmClVZQ7ur6ew6jHy3GNT4YjBh9Vp59lYnMbKs6Z8Ig6j o7wP590E4A0ssfmNpsuvWL7u4ubfr03/hp53U98Lhw+9+eH0B3TupYnBk/qNv3tteouyu37XjEuf rCje03zFtsae0liH5/IRF8wrObVJb+k7Z+jYaxE+RMnlmS+VJfCG5pO3d0xjs/MZBDFXFkT/vtKm cChKyq3TEPuyKL+Z3Jq/ntyvPCs9Yd0ltVpftR4kR/L/me+wOfMd+flSV10XR9dQNDLMOtF1sXui f6YyJ/965xrn/dJ9tvtDm+njbLPjL7Y8ROEEVJcakMGZH7d0qRLCv1uXKtVOqBzMC1ukYFg2qgn7 hSQRxdwQiHgTUQM1QCvRTTD4w9Mw2tC5kg0juMaFXKyI1Bx1iMGEKso9hFA2F1KvTo4XFGLgnIUV 5bJXj/Er0DG3y8ktbLn1pfPSL39+NP3XB7bSwS99SEv776146TdPfzZ57hcrHvuUsZ7fn/o9veqt z+G3PfxGt013PZr+/s4X01+v3sPl2sOQPZNA0XaM3edaWTRCBxuy1OlQw3ZiQJONNCLcJEZBVEYT pygjnAxZNY0LCIikQCRf/T+T3o+gQYGanzpJL/xr0suRIdcqciTXswcWg3pLQT3i6hVE1ss6vy/g YzqzCXxgknRuj8uT55F0Qckbo04bMp8hFKMekyOG9R4sJnTFH9Z5OIV6scYAhZ2BPoti5TlfUzGo 8mH687OTbqxf1DTyujv3L09jXefOJ3rWjrjnypFb0m8qu935F12WPrDvqXT66anlW3r3rP36yS9+ 7Mp3nD0KycCjXM3kbs2tU8IGg15PJJmzuckYNhMDrJp2bLdwVurHSxdGTVErMwWssvH/PGacb3/J rpb+l2QJSDBnA3efCjo6fiR5ZtByfIq1AweMylx6VC48/bCUPP0X6VZl95Z0zXNp6xbORVCO5OXo g5HcriVFH9bp6ZluoAsPRuFRZyxg/j+0WzMLOSOIHUIm/W/NN3GUc/rP/p1t/5Gs2cH1JS5jzm37 Zumj05+zVMdo3u5+WzouR6vngvd3gfeLaJ4WCLqCbtZYTC815FGnVFhIYk4vKyJAAx/+KB9CSnXe sE2CxWGkNFFcVIjlM/SruFG4abiKn5t9OYWDtd8XAlPMvkF+P1vYXEyL8xNREzUJVdDkT0zLYQJM PEJtEBIU/UHjIRzPODySIGScc3mJxH2fIOghcjwYCoT8IUlnSahF7kQkYShCqFqRz5ofIx57XgyV XXlRPc4KlKIYDZlB2S4HsrAxFiOFEjKxngkK52upueEEuYPW4ZTrVeT4hfTwePXdGcQHXw10OWUI kD4O6SI2d1364Ka/pTe2bqejP9hI6V2JrbHLds5b/tLVsb4rKbvzxmMDWM1ztOPwwqZd9NK/vUub Wq9o+22P+c0jxtw6atXGfemfmqf2oQ7g43FIlALBCX/bRawY9UCeu1KWwkbTJtNBEzMpjJkN4OCo Xo8p7zsx3gB+gL8MA64TzgacQ9vkclJH+ZjrGprhqWDmLLdwVJrwUPI/zHI58hOzJ8jvHInjyU52 lqiVRuFYaLTOt8r9632w+TunPoheoCqHRzjkuDsOsx4sGxRjnsMkB3ZCiiN//CV28qWXOnTK7o4n 2aSTQ9n2jhEYhb1gqJswChJ5cwdFWB7jiyHb+54nFkW2V1Rmj916ZI9dSrLHeFH2mB/OHn0BcYQN oFZGlfXKVgW0CmVtHVYxU0QuwwrTaCzvHCOKM4rC9UQSay5iJOHQyuoA33bqANxbmVUGNDHKJCpm yEfld9H9zs5zz2FLM9S5hvoFC6s7cuoS/JLgSs6KFY69L3HVCH3k2lBX9FEhczULZcCxQgxRrvSx pzS7nqGpUVT7H7AkWAvoOdEpHc5MCLp/mxC+aMhKtWwjYu4NL7G30JB/bsEr7kX0kB0tUdmRTg+l IXMiSwMGmxWrL+BfdB8ABug7rQuHLE4uoRS7RcJWZWYwmm3EYGQms46PmxkrjcihL+3ktcwqWvlF 50pYdp0bJaezI8qNOW7C8zXImvZ29eDBdr7QkYR7k0cYkM5lzohejLhO5JLIZZErIjdwLohznDAh NiESuLyx8Tyr85uEHoipJGsS4IaftAin5wSW76ImZ6VdZIpFItSGSceA2Yd3nD9TAPxRphfZRMQA qWyiZiVZ+SxehP5kH0u4ayJ5vAyiWRA+pBbvDFx8vDfiLxtBEdSWEWY3uFjQIC+xrLD8EUNpucBy gV0qkYuspbY66RJ5ifUa20qrwcwUQ5W1t20UGy7BRWgYYR1kM93L7pM26DcYNktP6XVOZrfZeijM pSjMAEu7h2IAaLCMtY+lGowMg8FoMoOybTZsMDeyRmezkzl3s83wz/ZsUaIIieipmSxGU1SzLDNT 82500kbNuMLaYJoY4dyI2uerFKtcE1+IKo1KswJmYZu3Ozjz+3ksQEO1D2wvrA/AgTMnRxpgi9RU 8wiBM78ALBRuk6xcKkwSHLCUddb0+B2xZE5hze1dmHfvCstjeMoCs6QLzBIuFX/aZjNxeyTnyn9n Z6zKVhoT7vydfaps5X0EuKMbSnMu+2Q9bBeyAGtk9fWQPtTj7d2HxiCCsAHEcS+i0S/p4fHDe0+V F9MTt6brlN2nfrjz/NEPSKdPDpXfONVLPnyKMyOcckoEnGKkS7c5Qd5ZSWrwWTzCd/aVFuOQAcZf VG+AGWhgekkyGGXGjHqDLEV1OjBQVqIAyAltJctJELNagJOa0hA106h5tLnRPN/cbFbMBug5IC+s GUBs/y8yISe5ZSGbfiG5c2aKiSOsU1xh6UTI6gW5xZOcrIa5jVXkqpWywFDWx8PjJA6/YHFUGqLI QMH1PXtwxRA4aDVoQ6tg7rbvHFpl0MqzYHmVvsAvoip2+gGWZ0FeGs/GWpjjVXqbCymPnx/fmQcw PwvmA3Rz8Kdt7uySi1BBOe8I1gEKKyifQajjwVcltvvV02kg7CZ5GZDVfKqZa+bToNd8pLyDqL0g eV0bHbBTl+pyBb3BoCyrssvsNQflp707ba/YJK/XF2TRfM0xKm+UVwvUKXXGi9UJjil5k7xTfBMD FwfXeO9jqj8sSc6w2ehORKHWcQOJCzoA2XkBwDEhjwF8IyQGgKwPDMBJEAZkhz7QnE/z7QmOQ53A UFZ0+EOd1kzWnMnqQJAZI6DAn413gEmTp5JYucyVb2HT9FHhwEHoD4NJQ6bRVbT3G3Tos63pnXsP pHdv/iPN/+sHNHjt13f+Kf1X9jqdSx96Kf3Eh4fSm3b8kU76r/SP6QO0kga3U/Nv0p9nrRm5A9Rt RSxji1Y6wzHHxYarw12XqJe4ZLMF3job8fq4Uk4MzoQBBAVaF3EkEKXHNaHfGQLRAMW/gM/6v85f v1Jy/11H9587jQm1YqS6QAwOH5hOS1poFVDWhGkShmHHYjEHzBS+Ai6sElZy14gr76r/Lv1aehW9 fs/DDRf1vDV9m7Lb5pyxc+6L6Y6O5yS6dtnkW9xWTjmPgMdhOGMMCuhpLeY026izd2hS5HLD3AgM Uj5fGESuF3kh6F4gXgRM8NmOuxRECQREFnC2ZT7d7gxU4nhse0FxJbx4n27PL67EOos4wicujrj+ t+35iex11BfXceTXtQsAFNkuDF0YHWeeHJobWmi8xnatfblplf0e69P2NvtXti/tKma7qMPucjjs DrvF6MROrYDHpIOHz2pRfEajxxvwhxE60Z4NCfJ6SaxA4NPns9tthnDC9iCUx2wwEoATYoIW6mQB 75lOx3uva4gWzi9sLpQKC3z/Vxxnqf0/yaN4/83/ZsjklEf/ER83YPm0kcN1EjMM3CaYUCnsfB4K wVcEMbOeUbTOzK9iDddk0OxVdrWfw9kPF+rpAjFj2BDpFfBXOSCfnEg2LVSlFriQIkhnBA6fJzqd MbB48+JSdwZyigvSEtEVsUfY6n1vXvf62yO6TLgoc/ylCVdd3C02/BP6yPINI+95LN1D2T3qj9c+ +G5+UeHIxekFtOeta/ua9R2LpYo+1w6bKWKLJmN95++wvnowt1Y8TZomN0mLZLmouJdUFRosXaC/ KL82MqRwaPE4qV4/Of/iLrfl2eLctclFDwgvCxR1AolOoLgTQGXgMFs5C6ByFkDlLIDKJ7ShvFIX a6KQFUrFRb3t2JFcVFs2KToxPqHoSvNs6xzb5a4ZvmvN11mvsy9VFxc2Fa2QVptvs662364uL7yl 6C7rBvsGdzgXRNQtlnAGEwFjooQmEOgccMrlPRPY2smItdu1wduCLFjksXYLFxfRIsWDifC4lvXJ hrsZw2GPJGReElZeQ9bg44cGGHJexE5kf1gsLSq0Wc1KDN6WILYrYbeSjhYVFqAMpnewWwBPZBPW QQ4dxT5RYb6KWValUTqaNtL5dD3Vwaue0vK68VcqeDVafKExQUpoCRfhNhubAOC4ZuVPKgmUo080 AQ79VlwCgOGDAASQc/1iyRZy3d8zZ842jDgCmoM/VvgBzzqoEP2RPMKz47xHIGP0TvgAMaHCTy8I WGSIccvrE2awMbOSrLBYLP/w9VGYocKL5XZ5PViO5R5DePALE5NfsE7549J5z4wbPbl/+soxs664 8YffPvbzCmW3fcvTqUeq+tL36pqvW3HqoVfT/7yP/lW96vaLBzUNqb0i7p2a7PPYjHm/nz7rzZts a+646ZJRFRVzuvTfsWTxgaZFXxN0qwesld2QinrsLLMqLIwBh0sD28SwCNa0XZgtlL6gi1JWxhe+ KN1BhfkCaaKZhSllyPlSfxCyEfrMp50G1WmUCOdMGiUcwBMNO+87q6bAkwGVUu040vAFFwZZ0d+z Bw/D4H4ZlpfOl1eng4p1y5aT/+StfQSzP7eiXeQ9zZSw18l1htcMsocLPg90qEq5v2GofKFhif1J 5Su73kKYA0u/rTqjKwGlI6ufAcjpZ0yYezg/rIX4pM0aoh4a9Yz2sEbPfE8zPhxkFe4M/nRuWJuE yQaDIes+FgCnFAAns1OeSahnOM8a1gBylpupwc3Vs7N+HayowyXSsEA4RbLagAhMTsI3UeHIaQG9 oAplV/0ccuNL09On3vlT+uT8l4ZtWfruTmX36W0fpU8/dge1fi2NOt2yd8dlL4moVvipiDIUY2Si A3KxDU6FwtTms7uJKEaDQplS9hHW2PY7Kiow5jUgVL7KWlim0K6ki1RkKrP0sDRabjPcZlxvabcc s5ijltEWBL6YDSy3MGikFhhSeGRNjVjIwd0mozFqUFxwYsBMjjLFxZhixKu+jppgmcww0BkM6gQC gLpUjTbQZsN6fAWEr3tYmdalagqj67ADlsEqoZojqoxWWA9YI+uVduWYosAiWbXd3IgJhVskC46A m3jy8agyTCQB/1GsinC7I7cUwldCslaHC5ZFC7EDE/9oMTohL/7RAsMMyh2sD/zVo1oXGCC9hQGC oC9EnPJZBzZFQ30MiyHCnqigbGDHH9+iS7tHCrrRta90wNQ/9dfm+ddcI5fA5OfCAftzlnDdgn6g JUpIwlHiTPiqSG9HlbO37wIyzHGBc5ivjlzsqHNe7FPvNdxrzw2kVqHSgD/prlQqLUOUIZbh7vHK eMsl7unKdMsc9yJlkeV6t11xc8vVif3UdibwCJxxrHmF9KyqCmphSYZ9qNNj8E3wMBqtNrvdgp2f TrfH6/Nhobp6O7bIR/nR4nTwozbJDfMDX0diUXyAhSLQRzEYwm6fy+32OS1GY9jtBOh0IFo5qjpc qupwGi0Gn1uxY6WXMDRJkXwIhDEaDQaEeDOf0+nAsk3A6w2oA410DIkSC3I3kkYUOmZnlDv7/f42 umZbVjFoCPhHdMCc7Aj4O3wja2cM+eKMTtBpUHJ9AEKUC1KRYLqMONe45MteZ01NCNeVNix4Iavm mYDOzYBsO5Dt4DThNPFF7SwFFKGw61kKyBmsNpRst2iKhkqcKBY2gCDysgSR54SdmYe1MrhKdXpK H05f/+qhwkBf7Lr+5q1R8VC3L15OX/Vi+o1ivdeVfg28WnPP3X8vlD7uCKS//eeaVul5GDQNa6Mz hp16DNSzJj2L+YQMHqolZSlJmarokkTvlBjT656XlSKYFXy2Ah8ZEWeJW54zPDSTy1HoRzD0jnMr HKOXXYXq2SMPLu04wtjW0NsRGzBLP+bun9+7m9NpcXoWbRVvqtG8spLU61QJn2egTp0CqfC8LBXp IcC/hceAv+054wN8a8rx//QKGusFO61XjLamm957j96ennW3rhjvwId6Ml/JIXkA9kL1Yd20UqPV 2NVvDXQtsXbtCleHu0+wX9cLujZYG7rOts7q2thjtXVFyf2eBwJPW91dOpenoLogXp7L5Cf9z3TZ 6X+xyz7/gS5vuT/qYhjioQhVPq5h5V83wYm5v3PJtxeX4xP4ecQb8SVLu1ZWyVWlF8jnl0401Ccv N8xKLrGsRPDjz9afk44+lTYqq2WFld7ymMs3pWReCSsJldlqbOtsG20Zm7LRttX2PeIXRKw+tnB8 IzQzAFhT5BHTNhHzYNPxIBcs+UuIlnpmp+9uxA7z8TuuBcTEV1tsKg9J5pKp6lQCDRsjWhSDdvdt p5r3bda5Wyjz0caFIyICGsBxYWgC+JDPsboJheJFOM/OqIVt7BLNVqzxCNZookdia0KpgmQV+gvU v3d3ch0n0ZOXadYwQliq2qvYpipaBQvhuDaQP9Fb5CsoK9yrO6BjEV2NjukgMGAHoFvIfbw9OvjA sjksAwRkIxd+fV3Pvme9DAuwOpdUIYoxj2EDU6eOU92R/Pxzru0dQaR2NjhWXGpYcHQBGJnzslD7 uGLEL4h4P7KgiCs7PBIGS0/8h3AGvqSnLx4AZQm6kceNIAZvPIFAKxvMQb7Mh0pS9fRds7fuGdZ0 fq85719BK2pXLbs2P+W76uBtq54ZrRq9BXtC3sv2zZtcPnfWzEcT+bdMGPrs8pE3jXTZrIHCItNV 3c6rX+BbsGa4NvXC7tccO7X8vL70oy4htcuIsvMbLxl13tWg6BWgaO4d4rs8mrUHqGKxFyq9lFpF qYmkIiwSwbp4aFBofmR9RNcvr9pTjWCSiwINhgZrnb3Bc2lgtuFK60z7VZ6rAu2R9yzve9/3f5r3 rfdb/2f5hyOZiD+qlNnLXD2UGrumXGQfrVyuvJ//L/mkalHdNlnHSDAEEWNyh2xmX+FBMzZsafAg NZvl7PqjWdCoWaw8wjDlPmPhoT0maEiYqpxKARwW6hgv0co4Ps2L4GshgviILBS0CqmIsXYKHXoT TdFjVI7QGnwLBduasFLFlT0Ap7V8Tl5UkAoVKhR1clKBRgCGRY2fUFUApzUPfzUFPSF38VdQf3hY n18oQiAceNSxKgTqgfrcSUIgFU5A+CfW0jmlYFpeSBZg80OFA7oyHAIqAqaLJajKIIRsVDzt9lTr wm2XbV2gpX/43Z45rHLCnUuee2LxkuewDvGvdaPWvd6U/j797kN0w94Ja/a/cfCV/ZCJozNfSUch rwJ0Uk5fqrQts1O7mfJlhPlYq5CdIbPeF5LxPRW33sB7rxe918O6AQxPCXLuHE7uf+cVYeQg8hMR 7g0iwn2Y0UIjocF5g73j8sZ5G/MavQ+wB6T7rY+rjwcsBqvfNJvNkmYriy3zrc3WJy07jDtNOywW DxzHnzHJVjDFPs++zC7ZEfD+jHZtD7G20Yhmrcdix2GscRiJ3W6GEt/ZxhCaXmgz8MG2FQTRv0Jz MoL5HbOvJhCkCeycL3ASEDi5IOQuPKCnEX0NQk9svJLexCvphXjV9wxW7svp7MBKlvkbFuY2K4ug 5771RxceTx5dKPqOtT2E9qoNR/BPWD7AWz0W68Hb8GiJ3TxnrByOOal6W/73z7+f/nHh17dt+TCy 1b9s0qpnHr919h10ufeFAzSfmp6j7KatjwTnXPny2+++dDOfY4YCZ4fAkYg4oRO0x01MthZZK61D rEovV6/QxWy8aaxrXOgKNl2ZYZzmagy1R95R/pL3kf/zvM9d33v/7v9ccJ4nEkkGOLsOD3DexQpg obW7px/rZR3Oaq1DXReELjZNtF5h/Vz3peckPW5TqVuymRHIEAQ9OAhYUjL7KniAnL1IVQ86qIrg rUZHswOsyWkiy6AOJ+ccuIYwaXEh69BxCnIIhkUpjBE+4g4bH3Gcfye4FMBP2iCOHcciZ+FeRAYd 0mf0MkfRKL2kDwuSE3Jaj51mnCAF2sS0pBezj94frhx9Dqc1LBhx9Ax3caaDTx9reFhWPoplPKSz fMY96rFeXBZDGGcRBp5D7O4ZPpP6zti37C+LZ79zS+OGsu0d0ecWL3li8/XXPLLi4bWnHttIpdVj BjIbVv2cb77++1fef3Mfx9lwSNEw+MwNnI3TvBEScsO53qA0GCeYZ0hzlHnGGWYDVFW+S1KMxBFt LIfyQzwvdr6nnHSdCMg9nf38PUMDnSMCA0NjnNibFprqnBuYGrpGd437BDvhU/HJK7vV6x3t4Vac 5AnZ16ubEPqsysGQSY/98s/wMP1OadYObsC4YwMovTsPHO7V4O77UBiwALIbGQB8I5ACoF0zFnet TGHZNRDB2faiRCU/agP5NBuhEU+FWqjXCrtWdmIKS1jAThZT6AjgLINhuxgYTKy6ckydKxMbkiM6 jsAhmkwi4Bh/wjzkS465wPnqjgXVwujiZpsIL+IzKI+HESyWdR279DERak1jIh5bJ126u/S7XV+n v6euD/+Cr0Kd/srUsnza2o732RhL34m33fA0neh9rBUx8BI+wdQl/XH6ZzW6dfdMeveKwTOfhBTB 3njWDI+Wl1q1sMtI7f4yfw8/tnn6H7A8aH3aaghYu1hT/na/7Ofj0SUQqcw3WCWLPWSibpZ05cn4 zq5po4u6Mnma7C2S8a2huyCW+CD27FvJj1oyFKlcT6hf42zi16xgE+ISPoYuwsdQwBmHlApNSjAO F7/ExSkf93MdTQBfYGVXACdFrDt5zOffQ3eTGDmBL+4gTk7Y3Hxg8YdRhQ8C2jMsyaNYSsV6Ftei jyKITgQiuBC1atTrDNCQVLhdiUNnD+KrSQgjwEZc8MlCrgRX9MJeYkxJEGtQV9xuvn+kZePGvMAt Sy6aHOxbPnbIgQPS/WsXzKkcerHzIdPQxsvWnr4cHDEoPUb6BhzBI27naY1ms+IqNRe5LjLXunTG fH9+qTnhKo1XmXu7LjQPdU3U15lnmk+a/uW2dY+XFg+IDyi+qHh96aZSfe9Y75Ka0qHmobHakvGx 8SWz9NNi00oaS5tL3y/+KvZd/Ptih9ejc7exba1dQnl6MZOoUbh++DzSTNrJQbh/2thSrVwJheym 2oKQxeRxVxRVmIp8voNeqno1b6O32SuXws3BJpSKuCevEGtCoxRizSvEGt88IDbxfZMVa7wW30yQ E2sATmsXcn72LrLTIlIQKdxrP2A/ZM/Y5Yi9xj4KE53gGDtkGILbETuOXHhnshtheLlugt2fLF0U 4+ItOTKndHLxhp0mv5JwHUdOwC46CsYRobNHsru/EUC2wMuDnYQCWQyu4UFkHIGwaYTHLXFu5PXl W83lgxctXeWz0SWpD45d9efb91z35IwPNv3XN/c9ufSGzVuuu2ZzXWBMUfn0SX1Sa2j1R/dSuvbe 5tOzfzpwzbNS1z+3733z5Vde5tbXSgRL8mgoF526C9tv27e7vZVYXjvM9zvqJhTJvfDdsN1WWRT1 8/orvQaHxeGS4L2xhxS9CyFdRUatondlxkjbjdSDEWYTPBBgCDnrInIXZxDsEvhWc/CBQ3ArBtGI xUdRipV/zipGsBRyPsFg3RgQQtfE+Qms6QMYKdxp3srelSnPMQ+b79nkSXkyHtnDXLBDOZ+qaMMx 9Ac2/kHoIDIKTwqBygHNK7g0q1Yi0AQc2rloeTKrD2JrGd6Dj7fh5WSkexjQeMai4HtMsiuXyTPW hOBTsUWYz1OYprhTQHCnTWfTF9l0liC1GsCX2MSYTN5EwNTZYBRgFC5ULAaLAGid27Gy9cb2Jc8P b108Z/Tt1VAJf7ir4fEHO6awR1ZeP+6OpR0vgidXAVG4BK1PT/Zrlxp78x6MMq43bjKmjO3GQ8Zj Rj0xRozzjc3Gjbmiw8aM0RTBbmd8ew17hnXSjbDXFcQ/6/RFCpE3ypvklNwuH5Z17fIxmRE5Kh/E mSxndWU2AUBu3BBNDJTJWNJHLiQbrmUlG4CsHxXAaW6hI7x2pOHXo4fgFOFHrTn72Qg+SSxckBRh 1pjHV7W2tsp/P3DglFtOnHqf0yX6LP2EPpvZVC3IbUDMTLqJuklGyW79p3JCh/AFTl5YL8oue8Gb lgVARFkAJPuVJpbNJkhXm5hTF82LVcLbd2y7s7gStY614ujEigAKYqJAuxUlOllWZF0f4zC4OHTd THWmq6XFpvelz3T6J3U0rkvoiwxVur7GGusoa71cr6vT1xuXytcq9xlf0b0lv6s7ovta/6PuZ4Pb aTIhBEhmCN+CPwoncEoV6XVYqNdJWHZRTAiZMJmAGJm7LGWFO8rMZoKdjNSOTVMYc3gRCuCNtGux qNCChamrD6zHRG8uIqwINhGhNfhWGwONp7WegsbRYVC3MIGIwBiBIQSaFmozvjnG6dtvsX4SG3b5 OZKKq14juOcSUzz2VPE44rOrYVDDsP4FTybf14ijT+wJ1quGakO1JPLcUox1OAJQjbdKDDGnfNke OjbwjGUwzWQsza8yGrDrEQj7uCW/Cod3WqLisC2W2+koYiYWYNFdLJzpMu0tMbG83+Lhh49bVF6d H8SZRRy2mXNr9vU84IW/yvmRTA0uD97mclWLDHedaPHxm7/dFsxWR2hG1srHBrEFIkiMf0YhTvWg RPrM1+nZdO/H6UeWwUm2h6bSSzqms8h16Us4Xd6CrI/gxc92KoIRQUHt2/v0zYaBVfbKHnv0zB4L smFiWhHEqh3hHBuVQ4o8CtkxRYoo8xHaklHw7W3+9YusIONPEgLNjRl8I6HtMKfYuVKNW7LAMOdO YfTmjOUsrrN6B74+Aix3siaAjFAVAeR4lIyUf8mjQNVC4bWDtsFZk5/xPx5Edgucc1mPMuYKXQK6 QZy+yiNjshEHfDleaMdgqb9pI8zWyiL5iHzE+In386jyF+VElHkN0bjRF4waJSkeDuncfOrUU10c ewdMB4vo+qJNRawIPlpb0XpsaZd59xxYIhb2CdxRnKwdLi6CYIDgewBcDDkYJ2oHRABy4YjCteya PrdScto6bdAsvqL1QXwEhz8uyCch8bigeBzOv9Mc/HFBMRsEhYGJ0nR2EgrCi6Hjd2U9XME2PA// Z0NFvIgeJOC9TYRFsJVkFOQyvyeLjXP5T3iriEfwH39KDi3HNZdQBoW4JGKeJf7CojZ6zfYYR8sZ /QEIEH6IjiNnYm9RctalhZMO4aSGD4IridAUBRODXbku3jkhwemecFkcQeq0ujsnpJyKDvy6uZYI DzKy7LQk9MVzJ6hHyp+cveSeyI2vP/zM9vjkAfN/21o3/aKb+smJu0dOuaxu99adHcXsoSun9Lv7 8Y57WMs114y+/86O9zivcN3iC9CLhy7V8hRJl8c2q23qZ9KXecekE3k6zBnHtGoQzLUqvVc96Dvs y/jkqMFlc3mc0C2ozmM1WW0WW6FP6BM+oVuYhVZhFloF3EY5rcIspihzAUemcCYJrcIstAqc/5xF qFloFTg/gf0vEK9mobiYaQZBaCPhekcALNcwfMd8bL5vky/la/fJPuw3cXsEb57AJyqynHeWBc9V LLIseFaxgAoKNswqFllfFn+F89eKykiv+NqI4DeeYbKE8s/9l0jn/mU/fwMsHz2rbXh0DqPJYNIj ql5NwIoPUrvJmUMyDyuGOG1YILCc81YKxGZRvPLRxR81PjJaNbV2nXN+01Ny4p6ttfNHlC/taGIr rpo78K43O8S+gyGwkYuBRSvx0zk73eKbBXncK87nEkSLfKU1ccgvLjj1Jr9lmO58w0RdveEK3SyD oVLt5+zn6eWrVYc7h3tqfZOVycaxaoOzwTPWN1eZa5yuznXO9Uz3XU3dRp1ivUTCYpPpEsuV0gxl hulKi8kbkvUOiAxXYVDo+EFBBnpoIFnXhV44LXIOLz6rc3bD5WOifQLgeBAARzqAdi2vsKiyB/ZS 6VV9FK6LnocgI3j5BdxkBmwrJBYbRAYR+3vwiQFIH4JGIBemco5rhfzhn80BnjU8kosDRnoGuOks 1kFy6DsKw7kBHwc6i03hSDwKUcv9GnzaMo5TxhkvUy4zynxu4hXzxPZk7CwXJvS5yv+Qx2/7wwfU c/3f1xxKH93VsnJFy/blK1vwydviO5akP+nY//ebaZha33zjzT//4Y3X0aCV6VlyDBh0Ym/1Zdod FrWbep46XJVroqkoi0RLLPF8fKcsf1D+/Oj6qKGft1/wQu+FwXrDJZbJ3snB2YY5llnqXO+cYHv0 bddHvo8Cb4ePuI6ED0czUU9cTqpJdy+5n4o1bnWS+rn57/lp1eywwcnBXcQ6D1zExOYvPGiiqkkz NZqaTXJUoDAq0Am97Qt8jQBjbRKIxDmX47lvNnBcCs2OoxDAV1qcD7ZpEc2rYBXOIkL+s2e40yEs pHHOISxcomccwieENBa+46xDWESFQESClKk/AocwPXdpPCuI4RD+tTsY2j/nRy5rO73BeZ1CFaES YrNjsQMbZc/4qVY+3u+umasOzl586PpJ67o7nlxyzbNPLWralp6l/G71mDFrM/c+lj615qJ+Haek x/fve+Mvb7z+V+6pOj89SzoMHKokRHtrd5hZknX19WfD2bUWXY27xj/cvz68KaxU5lUGa8JD8oYE 4dgNTsubFmwMN4ff0f3F+YXua8s3PrWEFViSiHfsZbmADbVMYrPYe5YPfJ95vvZ/ETzN7Nih7grA k2jTueB5IjavrQIfGlAP2qlq1+yN9ma7HBYGN7b6czNYGNwQAjk/ol0Y3HZhcKMUEylHpd3DZz4u KoQeIqrXCOmxyPHvfsRCzmbcX4hc2Np6wWB64RfW+/PDv7Sy/4MPseM4Nzd+hRh81QtfKBL+XuEX gVn9C+9hadd7Jvwu/f28t2/8w4JHO2LPXdP05NYlix/DMqih/0janeo3pW958o6Tg6Ut+/e//Oo7 777KZ7jlQM0rwIqDvKb1L8ujqkzjcqU8GJ9Gv1xeJOuMDoPRYLTmOYxWIhmoWbAEMRm7rMfusoJo Hs1jBY7/3oI9o+v9pDnOsWAR4CbmoXM0CkHDfEH2/zV27eFRlWf+fGdmzv3MucxkJjOTkGGSzAxM JJQkxEAgBxTDZSEICAQSxVXQxCAGUERShV28W7toqfC0fbx2kad9llsgXOpKbcsj2ijdRV3ZxbKP uKVs2bI+0a1Lk+zv/WaC9Gn/2EnmzHfmes53vu/93svv/b2QRHklf57bPOIh52IHi0kjFIn2gbWU tUNjlpIyuc9OsE8+HuSw6Pa1lHWV1wnyniPknjiPvjK1o2n5rVOnT598a3iUP/1y98xJuzLNTSvW Dp6mXmiC53sfemG8L+pt8qfCqUnqbPXGisWplake9Vl1a8Xfh35U9ZbPVKPx4uj4OVUfRgMJ4PxF ewLTituUNrVNa9PbjDazU+lUO7VOvdPoNHvTvRkrk67IVIyZWLFMa9XvTN+ZXV++HmDA57XvG89l X6jaPv41bbfxauY11CP7RTqCUG1eE02NNMpHGhUjDf4e6iX+Hmrw91CDv4capbAyPHdUwzIlU2lo /ngyXeTXx5XGKdiRilVR55fFmmItsdtie2LvxyQrVhZbE/t1zF8W+3ZMjL2Ba1OEccF9uh40chGu XMDibbDbiwKzwfGGpeZAOFJLj54ddGoZG9dW2lUqlpYUydCKKNTKDXBKY4BFTSIyRBLQXzJOLwPO rCLmhYprJ9DHq0l0xrh+Sysw2pgt2Cbpk7EkfSrGDccY9+vGEKbdL1eMxUcPljScGsvQ+g8ub9HI YzF5g/oBjYuHaJqOjfOfGg0v84oJxyeITRM2TxAnkH+6QuC/WSB7S+Z7GWgAatABUCPPOpassLgA tvjhWUkuPciIwSFCQvDMiYI7LfXrEbM29o2CExqTvOB6IUovG1C3tfMKId5crvuavFd6Bc41vKnp UjeiPlyD5hA4mDTEiIT/QpgXKV1e5rpR5XBwph3btUO2T0qZyYSgZuUEC1yHzagwdkcHyxNCCvRO yhgtwbIZVZNy/oRQZpeSnpXP5CJwCDl6kMuV27IF7p6RG+XCIxvgKttSJp1BXYBaxIi5I+hq0Ik8 f1HCE5OISjftt57c1PNgXeXzJ3a2TLt+7LaF33xjmbPXWNfR0xmJVCe2vvnC4o4T33z/Yzal5J61 K2+cUl5cOWHWlnnNG7NluZmb7ipe0LagvrykNKRV1EzraVv24hKUGUTUbfhzcWxgJxg+kO+lYQyW p8nvgUgBGptBmoUAqsZ8QsQGh4aGpdunW3YK0GTTrTTYsKzMUGeskO9DNvjfyX4BmtNL8l75uHwK fJXkTCXDDQ0iBeSNz3nwH8+QPcaf+QMfaXiGXHN5nYzWfrS45MILea1SPip2Arc0cR98FF+74bAG cxJI4HLPk4RHfAhpelh6ARmzT5LZmstVRqn/0nXkAXfqIcnK82g10Y7/VeNfd1Vt3Xrg4MFQLjvq 5RftqStfEe94hsldQ996ZvD5uVUgp4J9D1l2juqisJYjQhx9o8JyF5OhCAGjL3s1brg2F2IVSihi sFBER/zAQTcJNZHK4iiZE3Fuq0S5lRJ1SWjDvwyzk3ogyq0U7p7m9kk0TL2A/YLXM8oNTux/SUBQ 6ZbhKDseZdF5IAs57hWRaRK/HBfvi78U3xsfjvvjcL3SK9z1SbyGSfWUek4FSpKHu7l/tbBwFLyu sFDyXtW801PltonKnZ7qvNifuASwXFz6cyMEKwj1OzLs+MrBHZ5xvx00LZOQXpTuC0PEbyQEU3ES yHZEVGLsFihGmA+F6F0GFwce7SiPBE2ktq+p54NbX22x9V7duffmm5+d3Pv93pmrW+rWic8NHvjW N5pvXvjtJ8QGuAWZgEvku4Cro7GLhbh4NKAImiIx6SqMsIKGX6A6dy2akNSzRF9dgAkpp0Ej+W46 DSrMzFqFNgDfXTyARwhk/oh3/IunjhpdK2Sxwd4FT4UnR4hgg70z3sPZcchpxMYyxghZNa01CHXa TKFZWwwuh1ZlqbqKrRI7lA71QWED2yBuVB5UN2iPs8fFx3xPyk8oT6k/EHao27QfC69obwh98j7t pPAL7YzwgfY74VPtijCgVeF0tGIhomWFtFavtQhwoQU8N1IbwFCqLfjbwAQp0KkLOKYBzyJRrRF9 J3QAeBvpOa7OEriSPysGAoYOAVh9NgekJe79uf6cUH0VbFmvwQdZqWphVdUQCoOHkaPw4KaEysIh dZKsqYD9BarBD5FSPM+Dx1kE0WzioAdXFjInWQIMwqLHUvrFf6K5ixStwfbB9njxpfOErMZkbbiK qHO4U/FrrBychRCcHHczIj6Rg8MxjxziBmwb+4ehrn88Xwks1e+ODN3rTw9uvWvNogfEJ/I+Ywko 0z6MDtdfOpJb6JJmyqVPHuzEt+iu05wSECsrEMNEDugkaYsXgFiCGMMLWFqp5Xh8X3N8DLR0Mnrb Qm+YBse+GSBkQ50Wh0PTCo4nfASrTn+//WG/fZqnGRZwkfzs6MRoMiQwA8NsrH+MJs52ljvPgtsN SyK3cYh+ji/6+Qa+9rKnlo2utUuQxYG5fdnrK6uo9UuGGpISaswNoKCWpCMnUnFtIeQLyyVKQi+F BVspj1VyQZB7y5OUycEbfc2SJ89V5ug3WM3ObHe5tcC9B5xfd7kbpYfk9coR6ah1yP1CuqJmdScr ZM1MMGtl3Orw9UK9u0F5TNnhe8HYxV4XX9cBCBEOSUeDb8Pf/bF6wX/B+o07IP2vWqLznA2Db22+ DfKtxbduYdgmtKDldwVHkeEQtyqDZMYFZZ/JjEpEsz/06klKmRh9Y6mBykXhkKTpTlrLOYv8C7Q2 p8vpcZ5yNEfzYyzS5chfGFJrr4WgViMxMg98t8/TX371xzbhIYBF0FQ5oGqaAhtFs5HFcnh4DhCp LnSWWd4qzQomf+bIyH12XDeHSFcgIAdxnSvNYBiZjQqcOzlNCePjhFctzBSQEsquX7EcI2jyw3Mh x4lfAGhUyUXWS1DQwl/aJqNU5s2mzzzMdnlaskVja7RHkHB9WLzFU8HrucZ5BIQ7tKfbAbaC+4mR Asl2HWRfhr7EogjQdmzuQHt78WB7N/5pkrUX/2WsamHWQdfH3Pt/QFVlIFXpTmBVus/ZW7Zwaa+Z NJLiT0AuxHAPDp/qFcZbSaQjnONMaxy2PGdv7UJkTCrDp/bJRMCGGn2jAWKt4SBWZfjcPjmZf9bF s0T6coS+6BBUQXw3pNWp/fJ4+sb9wvUi0Rjhl65+Of82+lyUf84ZPndAS/qTxEjKcbA8YhAcPn3I bRCqcMcE3xciV38rTTgy3rElrYxnZRJmlmNlQ1EOmPVlfGzO0LGju5v8NbuPvFg35dCeod5ju8d8 BAHzvfPOO+K9gzve7RdXXTkj9hz84/tYhyysQ/8NSWOzfyusQ0UW0yW/qCIob2JEWlwjt6qRlktj knhCEn2WyyzkAFEUw5sfa1hmfdf/XQVEJdbxwHHpuPyupVpepCHuC6lFZtyuY5P0LexZXal2l/hb 5VZ9afAFtkPbofeJh4239XeCv7TP+D5Qf2X+q/2Z5o5MLt1APVCr2IRigd+5gDAuWpaEyKYAem8J whfhHIwEiCF6SHirJJBtAsPLJAlRJx9UPmR2mSazLNPWoVSIpu4zbE0C25hmnxBOqKJdKahhVI32 ieYJxKIqDV/YMHyA2oPGToLHBYScWovL3Fnmw0ZKs26X1Ic9EG8m+jxpvrSZUxLd4AWTvofFVAv6 cpbTww3V9oH8YoG1wv4MfLQ8izyfj0VbCkC1FxYLor8masYGy3pc4aM0v/258nMauohLYS2hwFNv sLi0AQ7fTzy9FLyaUbBvRvk+QktIeEMORVEDS41uUJGWRQOFbq3caYr+aW/FglMDvXxifT1Fh3wZ ZrGtQzv//dVxJVWVBz4a2saePntm0tBvxSwb+qp5/PSaK0PG4HtsdutQO85rNJAU/4UxEmf/Uxgj pVrYQumvkpjlSroU8lzgCjwjWRgrsepc/Gy8uB9hEXrgRjrA5hg4ByzUfKWTWF3SkA0vtvZooIb2 cEGS2fG1Nm1AD+VGzGI3o2eMjDnRmGjWBXc6etbNhmZGWt3WUGtRh9sR6ijaKD1gbnQeCj9U9Kj5 lPOM+0zoyfAO7XX9J/Yx52j4ovab8BfmoP1VeLhk1MiIioT0koTfutHaCiBE7Orh550I+WQpGkf1 QPcDkO9Cc4iFQ6FKVwtjB/S8jlGpazCDNUD/DUOX6PyFErtErC55s0RE3dimgxb6wgsfFhd5epPr ueJt7pvIGD/Mph+yWEqYkYBgXJTvLRCDjDdaDN98Y9gQQVE1/UA1sIX4jt5EsgeCEZ03SNxUGERE TVVsD5yPgdq9+1IciRm8hQRxGA4jI0q5NqRJQwoiD+MHUi8IaVMMaXMM+eEXBH34AgmvwrA6IoSH P0H2t5ZCBjhm2cEiJPjlk/kweiBpwF2F4RPKkNeP44YLKH2oMNAhYKI8Ep5c1Tgz6qQD+tDqt87m UmW5T3uHuqZVjO9ZXDt01247W5G4xyr1Zwd33r+l5wHxnitv75neupAslCxkz2mMqyDb45kgcz2p iC6b4EYptv2ep6LBpkJrxd5b3mw0xohZtdoG0lqbxW4Sb1JmqS12G1skLlKWqfPtLnaHeAfcLpvY emWT+jR7FAk2X7EBMRFT0myMklMblB8qHzGZZkufXVQrQrxCCTntlcOQFiepmojYdiUTka4hMqIq E28nCL+k3W4KWM0HPJWv5rmghjQaqxeLYUA6JiKUCqrrAY/HxuDlewlEtEEvuCK4OXg5GOCYdrgB gRZdL2gPMwYqzRZUBEAtOIFTjQgxy14/msQGxcoKsetBapxHagBd3EFyAjTan8FE/IyDCEl8QHrY QWKyJQ0Mjnea7RASB5E5iBSWkd5TqC+x91Yf9SJ1JX8jOJMZ5XnSCvfJfos6ofBwoS+BaHMkMYWU s/1RegUpVpEGEVFoMR75WrDU1CHqSWlkTJ5YM7ooK762bulQi+/OwZ+u2djJ/vM5nyI9t2Hw1k3q 9+g6LxGv8y/23S9EhFvIi+SPJPRwxG8mc8ZkDH0kvHGUjg4Fz06qpw3hdBiE1OJSJCOaRhwUibFo N+pMQFNotAE4qp47QGHESzaZdQg8CCAIJRdE3g6rL+J+hzSgYks6f9y49aEZM8qnPT3R+9sFjasv tXjd4nX9D5bXlrrzJp9unFjSWU/Ht5qdEu9GfT9dKEO+PuCTQVX6JSG4ROF+Y8kuHgG5BGZ0pH6M 8EjCNF+9/e6O7ds77t4uvtfxne90oI3hLPwew8Hl9RVkfF+jh9wPUKNqjaQ7+f0+TWuEkRHbLzdC CYr1oUzEu8bHX9AvDNJfwaKwL0UBbqZ6EMgD4fff97NP+tnZ90Dihxs0ij+yd/xrMPp8wijPYnVU AyKJU4nxIgvX1oDw4Sr5/evYO9u20bl2+X7LpgRO4tjWe+l/lj+VxX3yz2Txc4U9r7ysiOuUv1GQ nr4SWUfw6+o+QfmRTOUtRjHfV1D9cEaol4Sjlq9XMoLAk46MH2zkF4fIhyioAH8G5RsT/pWjZAQ4 NIS13bix7m6CyYBgmBe56PlpWW55FVIM/H/41Q8fm3zzmObIbZALFCPgt+EMsb38hdtMPIcjwzkY 0F9Gqgv9eUWh0qv1g7IgMc9XDBqpFlTzJ5WCpgoeqrzOEG4SmoWZqHM6W5iDqqrzEBGfjyqaC1B/ cBHqmy4WlghLhVbUhl2OmoHt4MQFSxHqI/YpK7u6Ou5b17GODhaM7bjTTQKPgjDjhhk3zbohN21t x+1dcxf9H6VpLxYKZW5kc3RyZWFtCmVuZG9iagozOCAwIG9iagoyMzgxNAplbmRvYmoKMzkgMCBv YmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Bc2NlbnQgOTA1IC9DYXBIZWlnaHQgNzE2IC9E ZXNjZW50IC0yMTIgL0ZsYWdzIDMyCi9Gb250QkJveCBbLTY2NSAtMzI1IDIwMDAgMTAwNl0gL0Zv bnROYW1lIC9FQ0VGSUMrQXJpYWxNVCAvSXRhbGljQW5nbGUgMCAvU3RlbVYKMCAvQXZnV2lkdGgg NDQxIC9MZWFkaW5nIDMzIC9NYXhXaWR0aCAyMDAwIC9YSGVpZ2h0IDUxOSAvRm9udEZpbGUyIDM3 IDAgUgo+PgplbmRvYmoKNDAgMCBvYmoKWyAyNzggMCAwIDAgMCA4ODkgMCAwIDMzMyAzMzMgMCAw IDI3OCAzMzMgMjc4IDI3OCA1NTYgNTU2IDU1NiA1NTYgNTU2IDU1Ngo1NTYgNTU2IDU1NiA1NTYg Mjc4IDAgMCAwIDAgMCAwIDY2NyA2NjcgNzIyIDcyMiA2NjcgNjExIDc3OCA3MjIgMjc4IDAgMCA1 NTYKODMzIDcyMiA3NzggNjY3IDAgNzIyIDY2NyA2MTEgNzIyIDY2NyA5NDQgMCAwIDAgMjc4IDAg Mjc4IDAgMCAwIDU1NiA1NTYgNTAwCjU1NiA1NTYgMjc4IDU1NiA1NTYgMjIyIDAgNTAwIDIyMiA4 MzMgNTU2IDU1NiA1NTYgNTU2IDMzMyA1MDAgMjc4IDU1NiA1MDAKNzIyIDUwMCA1MDAgNTAwIDAg MCAwIDU4NCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMAow IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMzUwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwCjAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAxMDAwIDAgMCAwIDAg MCAwIDU1NiAwIDAgMCAwIDIyMiBdCmVuZG9iago5IDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0 eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL0VDRUZJQytBcmlhbE1UIC9Gb250RGVzY3JpcHRvcgoz OSAwIFIgL1dpZHRocyA0MCAwIFIgL0ZpcnN0Q2hhciAzMiAvTGFzdENoYXIgMjEzIC9FbmNvZGlu ZyAvTWFjUm9tYW5FbmNvZGluZwo+PgplbmRvYmoKNDEgMCBvYmoKPDwgL0xlbmd0aCA0MiAwIFIg L0xlbmd0aDEgNTA2NCAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAG9WHtwVNUd/p37 2N2QUJMAsklY7t1elrw2QqJSIJQsYTfkARgI0F0E2U2yMYlEMhhSwYHuKFhZkGoRquCo9GGFFLnZ MPQGlEZGq06roo5UrTNKfXU6MvZFR0Vz+527yUoYZfIH4z1z7u95zvnOd86ee+92rd8QpbEUI5Hq V0Y6W8i6xj0M4W3qiHQm7eynIHOburvUpC0XEIlrWzpv7kjajgeIxrhuXrtxqH32e/C3tkYjzck4 fQk5gzuSNrsOckprR9ftSTv7KKRj7bqmoXj2m7BtHZHbh8and2Crt0Y6osn8cbzdlM51t3UN2dWQ 0zvXR4fyWRD4XiEGr0DrKI1uITu0TJTVRPa/j3GRhCiP42r2pu9ec9Wc85TlsOw1i35myT+6nzrz WfTL/PT7HZ/DkTacz6WtcLCQKIMhfi79/lTEaoebYFBDsUE1qBWo16MWF89zUow9TvehPoYqUhvb QRtRt6M+hCqltIOw+tmOhOTwHWcbKZfV+tIlZdn4HMU5Jl15zWC2o48obznfP8FysHpnWU5iLKXN G8MeY49SMynsN+Rhm6iaCti+vsK1Shihg9SJGkMVrTtjBxOTy5STzEseiaHNVJossWPKx6Ulyoel hsASyql8Q4J4ZjIs31XKgOsR5Q+um5WTqD3J0KFCZBxTDrrWKrsnG2xfQvm5y2Boc39SbHCh6TGl o3Cv0lxqxRfuNYSehDIL8RW+dGXGTLdyvesDZVq+4WCwS1wLlaLSl5QpaIg0FZ16fFnKJNduZTZC k12B/NmoJ9ghtp+K2P6Ep1Y5DhXT7aspnLnXYHf0VReUegy2yTejumBvYXW+p3Ch4imsys+HvuIF +1b7jfZ59jJ7sb3APtXutufZxzuyHZmO7zkyHGMcDofdYL9LVCi2E6yHKkBLT5/D5pAN9iSc0gl2 2HIe/r1DcggOcow3zPeweRmNN1jP0UyuQTlmszSbwQ73JV2HfYrENckKZApcxw13EphDoFrS2b2G jbZd3V3hrMiemzWryv9tt7AVGb4Xf/vlZC59b11DUD/kCullXDFdoeF057DyrbJrA0LRyuLiuqUb +7o721sCUS0Q1gJR1LC+o7vVqccaVbW3vZMHVF2cGm5sauUyEtU7tahfb9f8am+31e6ScAsPd2v+ XmoJLAv2tvii/kS3rzugRfyhvsbK9atHjLU9Ndb6ym8Yq5J3tp6P1Wi1u2Ss1TzcyMdazcdazcdq 9DVaY/HJB9oaKm/rwu5UA211ql7QoNcsWRnU1UjIb7DH4fRvIHmAMuWnqUCOUa40jRQi8y3Ut7kc XG5+JD9PmYMd5r/EcixqP6/CYMUcGqB7aT8dIRs9Ab2AbqIH6UXWjt/2KjpKZ9hkugZnr0QGLaQ/ M9N8lVro18jvolO0h3opA206aAKiu5jH3ATbB72Rtpq/pCk0k+6mp2kWet1F58yDZh+iS2k5HaIe tP8T04ReaZz5pPkBOWgJ+tyKyKvmQvMIZZOXKqke3q10knnEt81WclI50D1Mj9IBeoY+YXeyo2ar 2W2eNs9iqzppEjWgbGZH2VnxiHS3+bD5D3MQTBRQEUYN0276Ffo/gjKAozXAbmFdbDfbI/iEO4Wj 0jZ54uBX4KGQFqBU41S+Bwz007P0b/qcfSo4xUyxS3zOvN78D6VTHWbJZxKlbpSfouzCnE4wG5vO 5rN6tpk9wPaw14UiYbkQFH4s3C58JC4WV4kbxdel26SEvFN+0JY+eN48YT5vvkETyUU30nragtmd otP0X/qCiehrEvOwclbJbkKJsf1CPzvA+oV6NsBOC4fYu+x99im7IMhChjBBKBa6hN1Cj3BKeFls E/eID4nviuelubIgH5A/tHnsfx1sHNw++LJZbp41P8MR6yA3VqaSFtMaimC2nXQd/QSzOIxyBKv2 LD1HL1rlfTaJztFnYIFYNstlZWwRymJ2A2thbewRdhzlpIXlfwIWQkgTsoSJwiShQWgUOoSY8IYQ E/PEIrFWXCkeQXlBPCNeEC9IsjROmiAtkGpop9Qh7UN5XHpCSkivyLPkufJieYUck7fLO8Um+VX5 jG2LbZctYfvU9k8ciwvt6+w7sTovYs8+g7389SWxKUBfRrdSE/OzRtqL1TjAIhTH7mpm94CvTiow V4tbxAXCdOyGk3QHdus+2kzbxVV0wHxTPER/wU5Ziy5j9FupklzyL7A6d9J07KKh4issKizIn+qZ on3freLIn5SXm+OcePWE8eOyszLHZqSPSXPYbbIkCoy8Aa0qrOpTw7o0VauuLuG2FoEjcpEjjJ+y qleNzNFV3i6C0IhMHzJbLsn0JTN9qUyWqc6hOSVeNaCp+kt+TTXYyiVB6Pf6tZCqn7P0RZZ+n6WP he52o4EacLb6VZ2F1YBe1d0aD4T9JV7W7wMdY0q8/ODwUTrvWKf5kc04YGk+zwjouZo/oOdo0BET PYFIs16/JBjw57ndIfjgWhrEGCXeNh04aUdGs9a8w/BRY5hrkVVBXYyEdCHM+8oq1idqfn3ipg+d X5vDWmDnRUFd8FRFovEq3RfeAXK5GeZWZCesugYV3QrbQkGdbRsCwTG2AymHm3wmeMLtqp6mVWqt 8fYwyKWlwUSuL9c6fHWqDyZyfDmWUeLtd24pd2P2/SXzSuZxWe52bknKj+9K+l8b4NK55dn3IOuW pghgnAGtBjh1tckaRAPYmfwWnUnxppngCVeIYZptwDNfF7BnRI8ue2oieqxhGEarPwku3O5PpOXk Wg+hyhDyw/HM2Vgp5Gdqavw8ntZh7dwnIz2RIY/Nk3meeJAvdGqv6CwyrHfzh6UHs251aq18fbut NYWtOQMXOWBzajhmfTwe4PVBt66G4MDbpLfOoLT6YC9ju0IGM7cZ5Hf14x1VXHMTwl6+1dr8GB9G iReOIje0a7xqFUau4ntFjavxmua4WqW2YjNJHksiEI2HpoHBhiB4omUY0RfKS6nRUGg2+pnG+0ET pMdD6KF9qAdIyzXtKyRN9+JhKk6tDy4J6jF/nu7zh7AK2L4D9UF9ADs3FEJWaQopEG9ucw5hLgPm 0iLEr032gneXGLoIxeO8z4ag5tYH4vG8OP+9JW2D0aUO35DDIJ7CKTdYrB5tITR3nrUGbs0NWCHO 6XXY0sM7Cu/sl2d4Rgo3Wv4AaGdYDM+8QgzPGg3Ds0fFcHkK6QiG5wBzOWf4h98dw3NHMFxxeYZ9 KdwAOQ9ofRbDlVeI4fmjYdg/KoYDKaQjGK4C5gBneMF3x3D1CIZrLs9wbQo3QNYBba3F8MIrxPCi 0TC8eFQM35BCOoLhemC+gTO85LtjeOkIhhsuz/CyFG6AXA60yyyGV1whhn80GoaDo2I4lEI6guGV wBziDN+YYtiXp9PF53DskmOXrvjBvOoiyvGmJGdTJXNB4Z/P+IDGlYEviwxId8pDeN/m/zIJeAcn 6TS+3UT8B1SR/F/GMQ0PT1RHpkF0GpXb0MV3DJJQCbr9HTqOFkQrio+jFxlyeum1We6sfNRKaZfx 5d/kp7+Yb0iLLuAbHxnWZUbxzfJNF+JMsG+4ta1selmVlcDwFZZEb8P/UlQbrF7QsKK4Orq2O9rV 1hRBTjLKkxGnSebQxR0pnanTuP1/mbNjrwplbmRzdHJlYW0KZW5kb2JqCjQyIDAgb2JqCjI3MTYK ZW5kb2JqCjQzIDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvQXNjZW50IDc3MCAvQ2Fw SGVpZ2h0IDcxNyAvRGVzY2VudCAtMjMwIC9GbGFncyA0Ci9Gb250QkJveCBbLTk1MSAtNDgxIDE0 NDUgMTEyMl0gL0ZvbnROYW1lIC9KWEhHU1YrSGVsdmV0aWNhIC9JdGFsaWNBbmdsZSAwCi9TdGVt ViAwIC9BdmdXaWR0aCAtNDQxIC9NYXhXaWR0aCAxNTAwIC9YSGVpZ2h0IDUyMyAvRm9udEZpbGUy IDQxIDAgUiA+PgplbmRvYmoKNDQgMCBvYmoKWyAxMzkgXQplbmRvYmoKNDUgMCBvYmoKPDwgL0xl bmd0aCA0NiAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBXZDBbsMgEETvfMUe k0OE7TNCqlJF8qFtVCcfgGGxkGpAa3zw3xeIk0o97IGZeTAsP/fvvXcJ+JWCHjCBdd4QLmEljTDi 5DxrOzBOp/1UNT2ryHiGh21JOPfeBhCCAfDvjCyJNji8mTDisWhfZJCcn+BwPw9VGdYYf3BGn6Bh UoJBm6/7UPFTzQi8oqfeZN+l7ZSpv8Rtiwi5USbaRyUdDC5RaSTlJ2SiaaS4XCRDb/5ZOzDaPdm1 UtRpOlvzT6eg5YuvSnolym3qHmrRUsB5fK0qhlgerPMLftpwSgplbmRzdHJlYW0KZW5kb2JqCjQ2 IDAgb2JqCjIyMgplbmRvYmoKMTkgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVU eXBlIC9CYXNlRm9udCAvSlhIR1NWK0hlbHZldGljYSAvRm9udERlc2NyaXB0b3IKNDMgMCBSIC9X aWR0aHMgNDQgMCBSIC9GaXJzdENoYXIgMzMgL0xhc3RDaGFyIDMzIC9Ub1VuaWNvZGUgNDUgMCBS ID4+CmVuZG9iago0NyAwIG9iagooTGlhaXNvbiBmcm9tIEJyb2FkYmFuZCBGb3J1bSBcKERhdmlk IEFsbGFuXCkucHB0KQplbmRvYmoKNDggMCBvYmoKKE1hYyBPUyBYIDEwLjYuMSBRdWFydHogUERG Q29udGV4dCkKZW5kb2JqCjQ5IDAgb2JqCigpCmVuZG9iago1MCAwIG9iagooKQplbmRvYmoKNTEg MCBvYmoKKE1pY3Jvc29mdCBQb3dlclBvaW50KQplbmRvYmoKNTIgMCBvYmoKKEQ6MjAwOTExMDkw ODE0MjhaMDAnMDAnKQplbmRvYmoKNTMgMCBvYmoKKCkKZW5kb2JqCjU0IDAgb2JqClsgKCkgXQpl bmRvYmoKMSAwIG9iago8PCAvVGl0bGUgNDcgMCBSIC9BdXRob3IgNDkgMCBSIC9TdWJqZWN0IDUw IDAgUiAvUHJvZHVjZXIgNDggMCBSIC9DcmVhdG9yCjUxIDAgUiAvQ3JlYXRpb25EYXRlIDUyIDAg UiAvTW9kRGF0ZSA1MiAwIFIgL0tleXdvcmRzIDUzIDAgUiAvQUFQTDpLZXl3b3Jkcwo1NCAwIFIg Pj4KZW5kb2JqCnhyZWYKMCA1NQowMDAwMDAwMDAwIDY1NTM1IGYgCjAwMDAwNDQzNTIgMDAwMDAg biAKMDAwMDAwMjE4NyAwMDAwMCBuIAowMDAwMDE1NDU3IDAwMDAwIG4gCjAwMDAwMDAwMjIgMDAw MDAgbiAKMDAwMDAwMjE2NyAwMDAwMCBuIAowMDAwMDAyMjkxIDAwMDAwIG4gCjAwMDAwMDMyNjAg MDAwMDAgbiAKMDAwMDAwNjAzNSAwMDAwMCBuIAowMDAwMDQwMzI4IDAwMDAwIG4gCjAwMDAwMDI0 MDAgMDAwMDAgbiAKMDAwMDAwMzI0MCAwMDAwMCBuIAowMDAwMDAzMjk2IDAwMDAwIG4gCjAwMDAw MDYwMTQgMDAwMDAgbiAKMDAwMDAwODIxMSAwMDAwMCBuIAowMDAwMDA2MDcxIDAwMDAwIG4gCjAw MDAwMDgxOTAgMDAwMDAgbiAKMDAwMDAwODMxOCAwMDAwMCBuIAowMDAwMDAwMDAwIDAwMDAwIG4g CjAwMDAwNDM5MDggMDAwMDAgbiAKMDAwMDAxMDg3MCAwMDAwMCBuIAowMDAwMDA4NDQxIDAwMDAw IG4gCjAwMDAwMTA4NDkgMDAwMDAgbiAKMDAwMDAxMDk3NyAwMDAwMCBuIAowMDAwMDEyOTAxIDAw MDAwIG4gCjAwMDAwMTExMDAgMDAwMDAgbiAKMDAwMDAxMjg4MCAwMDAwMCBuIAowMDAwMDEzMDA4 IDAwMDAwIG4gCjAwMDAwMTM5NjkgMDAwMDAgbiAKMDAwMDAxMzEzMSAwMDAwMCBuIAowMDAwMDEz OTQ5IDAwMDAwIG4gCjAwMDAwMTQwNzYgMDAwMDAgbiAKMDAwMDAxNTIyNyAwMDAwMCBuIAowMDAw MDE0MTk5IDAwMDAwIG4gCjAwMDAwMTUyMDcgMDAwMDAgbiAKMDAwMDAxNTMzNCAwMDAwMCBuIAow MDAwMDE1NTc1IDAwMDAwIG4gCjAwMDAwMTU2MjUgMDAwMDAgbiAKMDAwMDAzOTUzMCAwMDAwMCBu IAowMDAwMDM5NTUyIDAwMDAwIG4gCjAwMDAwMzk4MDEgMDAwMDAgbiAKMDAwMDA0MDUwMCAwMDAw MCBuIAowMDAwMDQzMzA2IDAwMDAwIG4gCjAwMDAwNDMzMjcgMDAwMDAgbiAKMDAwMDA0MzU2NiAw MDAwMCBuIAowMDAwMDQzNTkwIDAwMDAwIG4gCjAwMDAwNDM4ODggMDAwMDAgbiAKMDAwMDA0NDA3 MiAwMDAwMCBuIAowMDAwMDQ0MTM5IDAwMDAwIG4gCjAwMDAwNDQxOTEgMDAwMDAgbiAKMDAwMDA0 NDIxMCAwMDAwMCBuIAowMDAwMDQ0MjI5IDAwMDAwIG4gCjAwMDAwNDQyNjggMDAwMDAgbiAKMDAw MDA0NDMxMCAwMDAwMCBuIAowMDAwMDQ0MzI5IDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgNTUg L1Jvb3QgMzYgMCBSIC9JbmZvIDEgMCBSIC9JRCBbIDxjYzQyYzA3ZjAyMTIwMjUzN2RiMTI2YjUx MTNhOGEwYj4KPGNjNDJjMDdmMDIxMjAyNTM3ZGIxMjZiNTExM2E4YTBiPiBdID4+CnN0YXJ0eHJl Zgo0NDUyNwolJUVPRgo= --_003_527DA1D0A04346BEA294A14F593F3B43ericssoncom_-- From christian.vogt@ericsson.com Mon Nov 9 02:44:09 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5792728C1F2 for ; Mon, 9 Nov 2009 02:44:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.529 X-Spam-Level: X-Spam-Status: No, score=-6.529 tagged_above=-999 required=5 tests=[AWL=0.070, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O+4Zoqs-ZXe1 for ; Mon, 9 Nov 2009 02:44:06 -0800 (PST) Received: from imr2.ericy.com (imr2.ericy.com [198.24.6.3]) by core3.amsl.com (Postfix) with ESMTP id 1EC9F3A680D for ; Mon, 9 Nov 2009 02:44:06 -0800 (PST) Received: from eusrcmw750.eamcs.ericsson.se (eusrcmw750.exu.ericsson.se [138.85.77.50]) by imr2.ericy.com (8.13.1/8.13.1) with ESMTP id nA9AiFRp007993; Mon, 9 Nov 2009 04:44:16 -0600 Received: from eusrcmw751.eamcs.ericsson.se ([138.85.77.51]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Mon, 9 Nov 2009 04:44:03 -0600 Received: from eusaamw0712.eamcs.ericsson.se ([147.117.20.181]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Mon, 9 Nov 2009 04:44:02 -0600 Received: from EUSAACMS0701.eamcs.ericsson.se ([169.254.1.35]) by eusaamw0712.eamcs.ericsson.se ([147.117.20.181]) with mapi; Mon, 9 Nov 2009 05:44:01 -0500 From: Christian Vogt To: SAVI Mailing List Date: Mon, 9 Nov 2009 05:44:48 -0500 Thread-Topic: Consensus call on adopting draft-bi-savi-dhcp-00 Thread-Index: AcphKYykBweRl4U0TzWRbcJgNS7IOw== Message-ID: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/mixed; boundary="_002_4432803818404B14B616CF33E023FBC6ericssoncom_" MIME-Version: 1.0 X-OriginalArrivalTime: 09 Nov 2009 10:44:02.0847 (UTC) FILETIME=[8D77C2F0:01CA6129] Cc: Guang Yao Subject: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2009 10:44:09 -0000 --_002_4432803818404B14B616CF33E023FBC6ericssoncom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Folks - During the SAVI working group meeting today, we made a consensus check about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group document, showing a clear majority of attendees in favor. I would now like to initiate a confirming consensus call here on the mailing list. Please answer the following question with either "yes" or "no": Should the SAVI working group adopt Internet draft "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol specification for DHCP-assigned IP addresses? Please respond before Friday, November 20. I am attaching Internet draft "draft-bi-savi-dhcp-00" for your convenience. - Christian --_002_4432803818404B14B616CF33E023FBC6ericssoncom_ Content-Type: text/plain; name="draft-bi-savi-dhcp-00.txt" Content-Description: draft-bi-savi-dhcp-00.txt Content-Disposition: attachment; filename="draft-bi-savi-dhcp-00.txt"; size=37648; creation-date="Mon, 09 Nov 2009 05:44:01 GMT"; modification-date="Mon, 09 Nov 2009 05:44:01 GMT" Content-Transfer-Encoding: base64 U0FWSSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBKLiBCaSwg Si4gV3UsIEcuIFlhbw0KSW50ZXJuZXQgRHJhZnQgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgQ0VSTkVUDQpJbnRlbmRlZCBzdGF0dXM6IFN0YW5kYXJkIFRy YWNrcyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRi4gQmFrZXINCkV4cGlyZXM6IE1heSAy MDEwICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBDaXNjbw0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTm92 ZW1iZXIgOSwgMjAwOQ0KDQoNCg0KICAgICAgICAgICAgICAgICAgICAgICAgU0FWSSBTb2x1dGlv biBmb3IgREhDUHY0L3Y2DQogICAgICAgICAgICAgICAgICAgICAgICAgZHJhZnQtYmktc2F2aS1k aGNwLTAwLnR4dA0KDQoNClN0YXR1cyBvZiB0aGlzIE1lbW8NCg0KICAgVGhpcyBJbnRlcm5ldC1E cmFmdCBpcyBzdWJtaXR0ZWQgdG8gSUVURiBpbiBmdWxsIGNvbmZvcm1hbmNlIHdpdGggdGhlDQog ICBwcm92aXNpb25zIG9mIEJDUCA3OCBhbmQgQkNQIDc5LiBUaGlzIGRvY3VtZW50IG1heSBub3Qg YmUgbW9kaWZpZWQsDQogICBhbmQgZGVyaXZhdGl2ZSB3b3JrcyBvZiBpdCBtYXkgbm90IGJlIGNy ZWF0ZWQsIGV4Y2VwdCB0byBwdWJsaXNoIGl0DQogICBhcyBhbiBSRkMgYW5kIHRvIHRyYW5zbGF0 ZSBpdCBpbnRvIGxhbmd1YWdlcyBvdGhlciB0aGFuIEVuZ2xpc2guDQoNCiAgIFRoaXMgZG9jdW1l bnQgbWF5IGNvbnRhaW4gbWF0ZXJpYWwgZnJvbSBJRVRGIERvY3VtZW50cyBvciBJRVRGDQogICBD b250cmlidXRpb25zIHB1Ymxpc2hlZCBvciBtYWRlIHB1YmxpY2x5IGF2YWlsYWJsZSBiZWZvcmUg Tm92ZW1iZXIgMTAsDQogICAyMDA4LiBUaGUgcGVyc29uKHMpIGNvbnRyb2xsaW5nIHRoZSBjb3B5 cmlnaHQgaW4gc29tZSBvZiB0aGlzDQogICBtYXRlcmlhbCBtYXkgbm90IGhhdmUgZ3JhbnRlZCB0 aGUgSUVURiBUcnVzdCB0aGUgcmlnaHQgdG8gYWxsb3cNCiAgIG1vZGlmaWNhdGlvbnMgb2Ygc3Vj aCBtYXRlcmlhbCBvdXRzaWRlIHRoZSBJRVRGIFN0YW5kYXJkcyBQcm9jZXNzLg0KICAgV2l0aG91 dCBvYnRhaW5pbmcgYW4gYWRlcXVhdGUgbGljZW5zZSBmcm9tIHRoZSBwZXJzb24ocykgY29udHJv bGxpbmcNCiAgIHRoZSBjb3B5cmlnaHQgaW4gc3VjaCBtYXRlcmlhbHMsIHRoaXMgZG9jdW1lbnQg bWF5IG5vdCBiZSBtb2RpZmllZA0KICAgb3V0c2lkZSB0aGUgSUVURiBTdGFuZGFyZHMgUHJvY2Vz cywgYW5kIGRlcml2YXRpdmUgd29ya3Mgb2YgaXQgbWF5DQogICBub3QgYmUgY3JlYXRlZCBvdXRz aWRlIHRoZSBJRVRGIFN0YW5kYXJkcyBQcm9jZXNzLCBleGNlcHQgdG8gZm9ybWF0DQogICBpdCBm b3IgcHVibGljYXRpb24gYXMgYW4gUkZDIG9yIHRvIHRyYW5zbGF0ZSBpdCBpbnRvIGxhbmd1YWdl cyBvdGhlcg0KICAgdGhhbiBFbmdsaXNoLg0KDQogICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdvcmtp bmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZw0KICAgVGFzayBGb3JjZSAo SUVURiksIGl0cyBhcmVhcywgYW5kIGl0cyB3b3JraW5nIGdyb3Vwcy4gIE5vdGUgdGhhdA0KICAg b3RoZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1dGUgd29ya2luZyBkb2N1bWVudHMgYXMgSW50 ZXJuZXQtRHJhZnRzLg0KDQogICBJbnRlcm5ldC1EcmFmdHMgYXJlIGRyYWZ0IGRvY3VtZW50cyB2 YWxpZCBmb3IgYSBtYXhpbXVtIG9mIHNpeCBtb250aHMNCiAgIGFuZCBtYXkgYmUgdXBkYXRlZCwg cmVwbGFjZWQsIG9yIG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55DQogICB0aW1l LiAgSXQgaXMgaW5hcHByb3ByaWF0ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5j ZQ0KICAgbWF0ZXJpYWwgb3IgdG8gY2l0ZSB0aGVtIG90aGVyIHRoYW4gYXMgIndvcmsgaW4gcHJv Z3Jlc3MuIg0KDQogICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LURyYWZ0cyBjYW4gYmUg YWNjZXNzZWQgYXQNCiAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvaWV0Zi8xaWQtYWJzdHJhY3RzLnR4 dA0KDQogICBUaGUgbGlzdCBvZiBJbnRlcm5ldC1EcmFmdCBTaGFkb3cgRGlyZWN0b3JpZXMgY2Fu IGJlIGFjY2Vzc2VkIGF0DQogICBodHRwOi8vd3d3LmlldGYub3JnL3NoYWRvdy5odG1sDQoNCiAg IFRoaXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gTWF5IDksIDIwMTAuDQoNCg0KDQoN CkJpICAgICAgICAgICAgICAgICAgICAgIEV4cGlyZXMgTWF5IDksIDIwMTAgICAgICAgICAgICAg ICAgICBbUGFnZSAxXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgc2F2aS1kaGNw ICAgICAgICAgICAgICAgICAgTm92ZW1iZXIgMjAwOQ0KDQoNCkNvcHlyaWdodCBOb3RpY2UNCg0K ICAgQ29weXJpZ2h0IChjKSAyMDA5IElFVEYgVHJ1c3QgYW5kIHRoZSBwZXJzb25zIGlkZW50aWZp ZWQgYXMgdGhlDQogICBkb2N1bWVudCBhdXRob3JzLiBBbGwgcmlnaHRzIHJlc2VydmVkLg0KDQog ICBUaGlzIGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4IGFuZCB0aGUgSUVURiBUcnVzdCdz IExlZ2FsDQogICBQcm92aXNpb25zIFJlbGF0aW5nIHRvIElFVEYgRG9jdW1lbnRzIGluIGVmZmVj dCBvbiB0aGUgZGF0ZSBvZg0KICAgcHVibGljYXRpb24gb2YgdGhpcyBkb2N1bWVudCAoaHR0cDov L3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKS4NCiAgIFBsZWFzZSByZXZpZXcgdGhlc2Ug ZG9jdW1lbnRzIGNhcmVmdWxseSwgYXMgdGhleSBkZXNjcmliZSB5b3VyIHJpZ2h0cw0KICAgYW5k IHJlc3RyaWN0aW9ucyB3aXRoIHJlc3BlY3QgdG8gdGhpcyBkb2N1bWVudC4NCg0KQWJzdHJhY3QN Cg0KICAgVGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgdGhlIHByb2NlZHVyZSBmb3IgY3JlYXRpbmcg YmluZGluZ3MgYmV0d2VlbiBhDQogICBESENQdjQgW1JGQzIxMzFdL0RIQ1B2NiBbUkZDMzMxNV0g YXNzaWduZWQgc291cmNlIElQIGFkZHJlc3MgYW5kIGFuDQogICBhbmNob3IgKHJlZmVyIHRvIFtT QVZJLWZyYW1ld29ya10pIG9uIFNBVkkgKFNvdXJjZSBBZGRyZXNzIFZhbGlkYXRpb24NCiAgIElt cHJvdmVtZW50cykgZGV2aWNlLiBUaGUgYmluZGluZ3MgY2FuIGJlIHVzZWQgdG8gZmlsdGVyIHBh Y2tldHMgd2l0aA0KICAgZm9yZ2VkIElQIGFkZHJlc3NlcyBnZW5lcmF0ZWQgb24gdGhlIGxvY2Fs IGxpbmsuDQoNClRhYmxlIG9mIENvbnRlbnRzDQoNCg0KICAgMS4gSW50cm9kdWN0aW9uIC4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiAzDQogICAyLiBDb252 ZW50aW9ucyB1c2VkIGluIHRoaXMgZG9jdW1lbnQuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u IDQNCiAgIDMuIE1lY2hhbmlzbSBPdmVydmlldyAuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4gNA0KICAgNC4gQmFja2dyb3VuZCBhbmQgUmVsYXRlZCBQcm90b2NvbHMu Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiA0DQogICA1LiBUZXJtaW5vbG9neSAuLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDUNCiAgIDYuIENvbmNl cHR1YWwgRGF0YSBTdHJ1Y3R1cmVzLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4g NQ0KICAgICAgNi4xLiBCaW5kaW5nIFN0YXRlIFRhYmxlIChCU1QpLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLiA1DQogICAgICA2LjIuIEZpbHRlcmluZyBUYWJsZSAoRlQpLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDUNCiAgIDcuIEJpbmRpbmcgU3RhdGVzIERlc2Ny aXB0aW9uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gNg0KICAgOC4gREhDUCBT Y2VuYXJpbyAuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiA2 DQogICA5LiBBbmNob3IgQXR0cmlidXRlcyAuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uIDcNCiAgICAgIDkuMS4gU0FWSS1Ib3N0IEF0dHJpYnV0ZS4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gNw0KICAgICAgOS4yLiBTQVZJLVBvbHkgQXR0cmli dXRlLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiA3DQogICAgICA5LjMuIFNB VkktREhDUC1UcnVzdCBBdHRyaWJ1dGUuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDcN CiAgICAgIDkuNC4gU0FWSS1SQS1UcnVzdCBBdHRyaWJ1dGUuLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4gOA0KICAgICAgOS41LiBTQVZJLVNBVkkgQXR0cmlidXRlLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiA4DQogICAxMC4gUHJlZml4IENvbmZpZ3VyYXRpb24u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDgNCiAgIDExLiBCaW5kaW5n IFNldCBVcCAuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gOQ0K ICAgICAgMTEuMS4gUHJvY2VzcyBvZiBESENQIFNub29waW5nLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLiA5DQogICAgICAgICAxMS4xLjEuIEluaXRpYWxpemF0aW9uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDkNCiAgICAgICAgICAgIDExLjEuMS4xLiBUcmlnZ2Vy IEV2ZW50Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gOQ0KICAgICAgICAgICAgMTEu MS4xLjIuIE1lc3NhZ2UgVmFsaWRhdGlvbi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiA5DQog ICAgICAgICAgICAxMS4xLjEuMy4gRm9sbG93aW5nIEFjdGlvbnMuLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4gMTANCiAgICAgICAgIDExLjEuMi4gRnJvbSBTVEFSVCB0byBMSVZFLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLiAxMA0KICAgICAgICAgICAgMTEuMS4yLjEuIFRyaWdnZXIg RXZlbnQuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDEwDQoNCg0KQmkgICAgICAgICAg ICAgICAgICAgICAgRXhwaXJlcyBNYXkgOSwgMjAxMCAgICAgICAgICAgICAgICAgIFtQYWdlIDJd DQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICBzYXZpLWRoY3AgICAgICAgICAgICAg ICAgICBOb3ZlbWJlciAyMDA5DQoNCg0KICAgICAgICAgICAgMTEuMS4yLjIuIE1lc3NhZ2UgVmFs aWRhdGlvbi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDEwDQogICAgICAgICAgICAxMS4xLjIu My4gRm9sbG93aW5nIEFjdGlvbnMuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gMTANCiAgICAg ICAgIDExLjEuMy4gRnJvbSBMSVZFIHRvIERFVEVDVElPTi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLiAxMQ0KICAgICAgICAgICAgMTEuMS4zLjIuIE1lc3NhZ2UgVmFsaWRhdGlvbi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uIDExDQogICAgICAgICAgICAxMS4xLjMuMy4gRm9sbG93aW5nIEFj dGlvbnMuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gMTINCiAgICAgICAgIDExLjEuNC4gRnJv bSBERVRFQ1RJT04gdG8gQk9VTkQuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiAxMg0KICAgICAg ICAgICAgMTEuMS40LjEuIFRyaWdnZXIgRXZlbnQuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uIDEyDQogICAgICAgICAgICAxMS4xLjQuMi4gRm9sbG93aW5nIEFjdGlvbnMuLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4gMTINCiAgICAgICAgIDExLjEuNS4gQWZ0ZXIgQk9VTkQuLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiAxMg0KICAgICAgMTEuMi4gU3RhdGUgTWFj aGluZSBvZiBESENQIFNub29waW5nIC4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDEzDQogICAxMi4g RmlsdGVyaW5nIFNwZWNpZmljYXRpb24uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4gMTMNCiAgICAgIDEyLjEuIEZpbHRlciBEYXRhIFBhY2tldC4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLiAxMw0KICAgICAgMTIuMi4gRmlsdGVyIENvbnRyb2wgUGFja2V0Li4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDE0DQogICAxMy4gRm9ybWF0IGFuZCBEZWxp dmVyeSBvZiBQcm9iZSBNZXNzYWdlcyAuLi4uLi4uLi4uLi4uLi4uLi4uLi4gMTQNCiAgIDE0LiBE YXRhIHBhY2tldCB0cmlnZ2VyIG9uIFNBVkktUG9seSBhbmNob3IgLi4uLi4uLi4uLi4uLi4uLi4u LiAxNQ0KICAgMTUuIEJpbmRpbmcgUmVtb3ZlIC4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uIDE2DQogICAxNi4gSGFuZGxlIHBvcnQgRE9XTiBldmVudC4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gMTYNCiAgIDE3LiBBYm91dCBDb2xsaXNpb24g aW4gRGV0ZWN0aW9uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiAxNg0KICAgICAgMTcu MS4gV2hldGhlciB0byBub3RpZnkgdGhlIERIQ1Agc2VydmVyIC4uLi4uLi4uLi4uLi4uLi4uLi4u IDE2DQogICAgICAxNy4yLiBUaGUgcmVzdWx0IG9mIGRldGVjdGlvbiB3aXRob3V0IGhvc3QgYXdh cmUgLi4uLi4uLi4uLi4gMTYNCiAgIDE4LiBGaWx0ZXJpbmcgZHVyaW5nIGRldGVjdGlvbi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiAxNw0KICAgMTkuIEJpbmRpbmcgTnVtYmVyIExp bWl0YXRpb24uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDE3DQogICAyMC4gTUxE IENvbnNpZGVyYXRpb24gLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4g MTcNCiAgIDIxLiBDb25zdGFudHMgLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uLiAxNw0KICAgMjIuIFN1bW1hcnkgb2YgdG8tYmUtcmVtb3ZlZCBzZWN0aW9u cyBhbmQgb3BlbiBpc3N1ZXMgLi4uLi4uLi4uIDE4DQogICAyMy4gU2VjdXJpdHkgQ29uc2lkZXJh dGlvbnMuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gMTgNCiAgIDI0LiBJQU5B IENvbnNpZGVyYXRpb25zLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiAx OA0KICAgMjUuIFJlZmVyZW5jZXMgLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4u Li4uLi4uLi4uLi4uIDE4DQogICAgICAyNS4xLiBOb3JtYXRpdmUgUmVmZXJlbmNlcy4uLi4uLi4u Li4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4gMTgNCiAgICAgIDI1LjIuIEluZm9ybWF0aXZlIFJl ZmVyZW5jZXMuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLiAxOQ0KICAgMjYuIEFja25v d2xlZGdtZW50cyAuLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uLi4uIDE5 DQoNCjEuIEludHJvZHVjdGlvbg0KDQogICBUaGlzIGRvY3VtZW50IGRlc2NyaWJlcyB0aGUgcHJv Y2VkdXJlIGZvciBjcmVhdGluZyBiaW5kaW5ncyBiZXR3ZWVuDQogICBESENQIGFzc2lnbmVkIGFk ZHJlc3NlcyBhbmQgYW4gYW5jaG9yIChyZWZlciB0byBbc2F2aS1mcmFtZXdvcmtdKS4NCiAgIE90 aGVyIHJlbGF0ZWQgZGV0YWlscyBhYm91dCB0aGlzIHByb2NlZHVyZSBhcmUgYWxzbyBzcGVjaWZp ZWQgaW4gdGhpcw0KICAgZG9jdW1lbnQuDQoNCiAgIFRoZXNlIGJpbmRpbmdzIGNhbiBiZSB1c2Vk IHRvIGZpbHRlciBwYWNrZXRzIHdpdGggZm9yZ2VkIElQIGFkZHJlc3Nlcy4NCiAgIEhvdyB0byB1 c2UgdGhlc2UgYmluZGluZ3MgaXMgc3BlY2lmaWVkIGluIFtzYXZpLWZyYW1ld29ya10sIGRlcGVu ZGluZw0KICAgb24gdGhlIGVudmlyb25tZW50IGFuZCBjb25maWd1cmF0aW9uLiBUaGUgZGVmaW5p dGlvbiBhbmQgZXhhbXBsZXMgb2YNCiAgIGFuY2hvciBpcyBhbHNvIHNwZWNpZmllZCBpbiBbc2F2 aS1mcmFtZXdvcmtdLg0KDQogICBUaGUgYmluZGluZyBwcm9jZXNzIGlzIGluc3BpcmVkIGJ5IHRo ZSB3b3JrIG9mIElQIHNvdXJjZSBndWFyZC4gVGhpcw0KICAgc3BlY2lmaWNhdGlvbiBkaWZmZXJz IGZyb20gSVAgc291cmNlIGd1YXJkIGluIHRoZSBzcGVjaWZpY2F0aW9uIGZvcg0KDQoNCg0KQmkg ICAgICAgICAgICAgICAgICAgICAgRXhwaXJlcyBNYXkgOSwgMjAxMCAgICAgICAgICAgICAgICAg IFtQYWdlIDNdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICBzYXZpLWRoY3AgICAg ICAgICAgICAgICAgICBOb3ZlbWJlciAyMDA5DQoNCg0KICAgY29sbGlzaW9uIGRldGVjdGlvbiwg d2hpY2ggaXMgcXVpdGUgdXNlZnVsIGluIGFuIGVudmlyb25tZW50IHdpdGgNCiAgIG11bHRpcGxl IGFkZHJlc3MgYXNzaWdubWVudCBtZXRob2RzLg0KDQoyLiBDb252ZW50aW9ucyB1c2VkIGluIHRo aXMgZG9jdW1lbnQNCg0KICAgVGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFV SVJFRCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLA0KICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwg IlJFQ09NTUVOREVEIiwgIk1BWSIsIGFuZCAiT1BUSU9OQUwiIGluIHRoaXMNCiAgIGRvY3VtZW50 IGFyZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4gW1JGQzIxMTldLg0KDQozLiBN ZWNoYW5pc20gT3ZlcnZpZXcNCg0KICAgVGhlIG1lY2hhbmlzbSBzcGVjaWZpZWQgaW4gdGhpcyBk b2N1bWVudCBpcyBkZXNpZ25lZCB0byBwcm92aWRlIGENCiAgIGhvc3QgbGV2ZWwgc291cmNlIElQ IGFkZHJlc3MgdmFsaWRhdGlvbiBncmFudWxhcml0eSwgYXMgYSBzdXBwbGVtZW50DQogICB0byBC Q1AzOCBbQkNQMzhdLiBUaGlzIG1lY2hhbmlzbSBpcyBkZXBsb3llZCBvbiB0aGUgYWNjZXNzIGRl dmljZQ0KICAgKGluY2x1ZGluZyBhY2Nlc3Mgc3dpdGNoLCB3aXJlbGVzcyBhY2Nlc3MgcG9pbnQv Y29udHJvbGxlciwgZXRjKSwgYW5kDQogICBwZXJmb3JtcyBtYWlubHkgREhDUHY0L3Y2IHNub29w aW5nIHRvIHNldCB1cCBiaW5kaW5ncyBiZXR3ZWVuIERIQ1ANCiAgIGFzc2lnbmVkIElQIGFkZHJl c3MgYW5kIGNvcnJlc3BvbmRpbmcgYW5jaG9ycy4gVGhlIGJpbmRpbmdzIGNhbiBiZQ0KICAgdXNl ZCB0byB2YWxpZGF0ZSB0aGUgc291cmNlIGFkZHJlc3MgaW4gdGhlIHBhY2tldHMuDQoNCjQuIEJh Y2tncm91bmQgYW5kIFJlbGF0ZWQgUHJvdG9jb2xzDQoNCiAgIFRoaXMgbWVjaGFuaXNtIGlzIGFu IGluc3RhbmNlIG9mIGEgU0FWSSBbc2F2aS1mcmFtZXdvcmtdIHNvbHV0aW9uLA0KICAgc3BlY2lh bGl6ZWQgZm9yIGFkZHJlc3NlcyBhc3NpZ25lZCB1c2luZyB0aGUgREhDUCBwcm90b2NvbC4NCg0K ICAgRHluYW1pYyBIb3N0IENvbmZpZ3VyYXRpb24gUHJvdG9jb2wgdmVyc2lvbiA0IFtSRkMyMTMx XSBhbmQgRHluYW1pYw0KICAgSG9zdCBDb25maWd1cmF0aW9uIFByb3RvY29sIHZlcnNpb24gNiBb UkZDMzMxNV0gc3BlY2lmeSB0aGUNCiAgIHByb2NlZHVyZXMgZm9yIHByb3ZpZGluZyBhIGNsaWVu dCB3aXRoIGFzc2lnbmVkIGFkZHJlc3MgYW5kIG90aGVyDQogICBjb25maWd1cmF0aW9uIGluZm9y bWF0aW9uIGZyb20gYSBESENQIHNlcnZlci4gSWYgYSBjbGllbnQgZ2V0cyBhbg0KICAgYWRkcmVz cyB0aHJvdWdoIHRoZSBESENQIHByb3RvY29sLCB0aGUgYWRkcmVzcyBzaG91bGQgYmUgcmVnYXJk ZWQgYXMNCiAgIGEgcG90ZW50aWFsICJhdXRob3JpemVkIiBvciAicmVnaXN0ZXJlZCIgYWRkcmVz cyBvZiB0aGUgY2xpZW50Lg0KDQogICBJbiBJUHY2LCBJUHY2IFN0YXRlbGVzcyBBdXRvY29uZmln dXJhdGlvbiBbUkZDNDg2Ml0gaXMgdXNlZCBhcw0KICAgYW5vdGhlciBhZGRyZXNzIGFzc2lnbm1l bnQgbWVjaGFuaXNtLiBBIG5vZGUgY2FuIHVzZSB0aGlzIG1lY2hhbmlzbQ0KICAgdG8gYXV0by1j b25maWd1cmUgYW4gSVB2NiBhZGRyZXNzLiBBIERIQ1B2NiBjbGllbnQgbWF5IHVzZSBhDQogICBz dGF0ZWxlc3MgYWRkcmVzcyB0byBzZW5kIG1lc3NhZ2UgdG8gREhDUCBzZXJ2ZXIuIEV2ZW4gaW4g YSBESENQdjYtDQogICBvbmx5IGVudmlyb25tZW50LCBhIG5vZGUgbXVzdCBhc3NpZ24gaXRzIGxp bmstbG9jYWwgYWRkcmVzcyB0aHJvdWdoDQogICB0aGlzIG1lY2hhbmlzbS4gW1JGQzQ4NjJdIGFs c28gY2xlYXJseSByZXF1aXJlcyB0aGF0IGR1cGxpY2F0ZWQNCiAgIGFkZHJlc3MgZGV0ZWN0aW9u IG11c3QgYmUgcGVyZm9ybWVkIG9uIGFueSBJUHY2IGFkZHJlc3MsIGluY2x1ZGluZw0KICAgREhD UHY2IGFkZHJlc3MuDQoNCiAgIFtSRkM0ODYxXSBzcGVjaWZpZXMgdGhlIE5laWdoYm9yIERpc2Nv dmVyeSBwcm90b2NvbCwgd2hpY2ggaXMgYW4NCiAgIGVzc2VudGlhbCBwYXJ0IG9mIElQdjYgYWRk cmVzcyBhc3NpZ25tZW50Lg0KDQogICBbUkZDNTIyN10gc3BlY2lmaWVzIHRoZSBwcm9jZWR1cmUg dG8gZGV0ZWN0IElQdjQgYWRkcmVzcyBjb2xsaXNpb24uDQogICBJdCBpcyBub3QgcmVxdWlyZWQg Y3VycmVudGx5LiBIb3dldmVyLCB0aGlzIGZlYXR1cmUgaXMgdXNlZnVsIHRvDQogICBkZXRlcm1p bmUgdGhlIHVuaXF1ZW5lc3Mgb2YgYW4gSVB2NCBhZGRyZXNzIG9uIHRoZSBsaW5rLg0KDQoNCg0K QmkgICAgICAgICAgICAgICAgICAgICAgRXhwaXJlcyBNYXkgOSwgMjAxMCAgICAgICAgICAgICAg ICAgIFtQYWdlIDRdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICBzYXZpLWRoY3Ag ICAgICAgICAgICAgICAgICBOb3ZlbWJlciAyMDA5DQoNCg0KNS4gVGVybWlub2xvZ3kNCg0KICAg VGhlIHRlcm1zIHVzZWQgaW4gdGhpcyBkb2N1bWVudCBhcmUgZGVzY3JpYmVkIGluIFtzYXZpLWZy YW1ld29ya10sDQogICBbUkZDMjEzMV0gYW5kIFtSRkMzMzE1XS4NCg0KNi4gQ29uY2VwdHVhbCBE YXRhIFN0cnVjdHVyZXMNCg0KICAgKFRvIGJlIHJlbW92ZWQgYW5kIG1lcmdlZCB3aXRoIGRhdGEg c3RydWN0dXJlcyB1c2VkIGJ5IG90aGVyDQogICBtZWNoYW5pc21zIGluIFtzYXZpLWZyYW1ld29y a10gaWYgcG9zc2libGUpDQoNCiAgIFRoaXMgc2VjdGlvbiBkZXNjcmliZXMgdGhlIHBvc3NpYmxl IGNvbmNlcHR1YWwgZGF0YSBzdHJ1Y3R1cmVzIHVzZWQNCiAgIGluIHRoaXMgbWVjaGFuaXNtLg0K DQogICBUd28gbWFpbiBkYXRhIHN0cnVjdHVyZXMgYXJlIHVzZWQgdG8gcmVjb3JkIGJpbmRpbmdz IGFuZCB0aGVpciBzdGF0ZXMNCiAgIHJlc3BlY3RpdmVseS4gVGhlcmUgaXMgcmVkdW5kYW5jeSBi ZXR3ZWVuIHRoZSB0d28gc3RydWN0dXJlcywgZm9yIHRoZQ0KICAgY29uc2lkZXJhdGlvbiBvZiBz ZXBhcmF0aW9uIG9mIGRhdGEgcGxhbmUgYW5kIGNvbnRyb2wgcGxhbmUuDQoNCjYuMS4gIEJpbmRp bmcgU3RhdGUgVGFibGUgKEJTVCkNCg0KICAgVGhpcyB0YWJsZSBjb250YWlucyB0aGUgc3RhdGUg b2YgYmluZGluZyBiZXR3ZWVuIHNvdXJjZSBhZGRyZXNzIGFuZA0KICAgYW5jaG9yLiBFbnRyaWVz IGFyZSBrZXllZCBvbiB0aGUgYW5jaG9yIGFuZCBzb3VyY2UgSVAgYWRkcmVzcy4gRWFjaA0KICAg ZW50cnkgaGFzIGEgbGlmZXRpbWUgZmllbGQgcmVjb3JkaW5nIHRoZSByZW1haW5pbmcgbGlmZXRp bWUgb2YgdGhlDQogICBlbnRyeSwgYSBzdGF0ZSBmaWVsZCByZWNvcmRpbmcgdGhlIHN0YXRlIG9m IHRoZSBiaW5kaW5nIGFuZCBhIGZpZWxkDQogICBmb3IgcmVjb3JkaW5nIG90aGVyIGluZm9ybWF0 aW9uLg0KDQogICAgICAgICAgICAgKy0tLS0tLS0tLSstLS0tLS0tLS0tKy0tLS0tLS0rLS0tLS0t LS0tLS0rLS0tLS0tLSsNCiAgICAgICAgICAgICB8IEFuY2hvciAgfCBBZGRyZXNzICB8IFN0YXRl IHwgTGlmZXRpbWUgIHxPdGhlciAgfA0KICAgICAgICAgICAgICstLS0tLS0tLS0rLS0tLS0tLS0t LSstLS0tLS0tKy0tLS0tLS0tLS0tKy0tLS0tLS0rDQogICAgICAgICAgICAgfCBBICAgICAgIHwg SVBfMSAgICAgfCBCb3VuZCB8ICA2NTUzNSAgICB8ICAgICAgIHwNCiAgICAgICAgICAgICArLS0t LS0tLS0tKy0tLS0tLS0tLS0rLS0tLS0tLSstLS0tLS0tLS0tLSstLS0tLS0tKw0KICAgICAgICAg ICAgIHwgQSAgICAgICB8IElQXzIgICAgIHwgQm91bmQgfCAgMTAwMDAgICAgfCAgICAgICB8DQog ICAgICAgICAgICAgKy0tLS0tLS0tLSstLS0tLS0tLS0tKy0tLS0tLS0rLS0tLS0tLS0tLS0rLS0t LS0tLSsNCiAgICAgICAgICAgICB8IEIgICAgICAgfCBJUF8zICAgICB8X1N0YXJ0IHwgICAgICAx ICAgIHwgICAgICAgfA0KICAgICAgICAgICAgICstLS0tLS0tLS0rLS0tLS0tLS0tLSstLS0tLS0t Ky0tLS0tLS0tLS0tKy0tLS0tLS0rDQogICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJlIDEg SW5zdGFuY2Ugb2YgQlNUDQoNCg0KNi4yLiAgRmlsdGVyaW5nIFRhYmxlIChGVCkNCg0KICAgVGhp cyB0YWJsZSBjb250YWlucyB0aGUgYmluZGluZ3MgYmV0d2VlbiBhbmNob3IgYW5kIGFkZHJlc3Ms IGtleWVkIG9uDQogICBhbmNob3IuIFRoaXMgdGFibGUgZG9lc24ndCBjb250YWluIGFueSBzdGF0 ZSBvZiB0aGUgYmluZGluZy4gVGhpcw0KICAgdGFibGUgaXMgb25seSB1c2VkIHRvIGZpbHRlciBw YWNrZXRzLiBBbiBBY2Nlc3MgQ29udHJvbCBMaXN0IGNhbiBiZQ0KICAgcmVnYXJkZWQgYXMgYSBw cmFjdGljYWwgaW5zdGFuY2Ugb2YgdGhpcyB0YWJsZS4NCg0KDQoNCg0KDQoNCkJpICAgICAgICAg ICAgICAgICAgICAgIEV4cGlyZXMgTWF5IDksIDIwMTAgICAgICAgICAgICAgICAgICBbUGFnZSA1 XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgc2F2aS1kaGNwICAgICAgICAgICAg ICAgICAgTm92ZW1iZXIgMjAwOQ0KDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0t LS0tLSstLS0tLS0tLS0tKw0KICAgICAgICAgICAgICAgICAgICAgICAgICB8QW5jaG9yICAgfEFk ZHJlc3MgICB8DQogICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLS0rLS0tLS0tLS0t LSsNCiAgICAgICAgICAgICAgICAgICAgICAgICAgfEEgICAgICAgIHxJUF8xICAgICAgfA0KICAg ICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tKy0tLS0tLS0tLS0rDQogICAgICAgICAg ICAgICAgICAgICAgICAgIHxBICAgICAgICB8SVBfMiAgICAgIHwNCiAgICAgICAgICAgICAgICAg ICAgICAgICAgKy0tLS0tLS0tLSstLS0tLS0tLS0tKw0KICAgICAgICAgICAgICAgICAgICAgICAg ICBGaWd1cmUgMiBJbnN0YW5jZSBvZiBGVA0KDQo3LiBCaW5kaW5nIFN0YXRlcyBEZXNjcmlwdGlv bg0KDQogICBUaGlzIHNlY3Rpb24gZGVzY3JpYmVzIHRoZSBiaW5kaW5nIHN0YXRlcyBvZiB0aGlz IG1lY2hhbmlzbS4NCg0KICAgU1RBUlQgICAgICAgIEEgREhDUCByZXF1ZXN0IChvciBhIERIQ1B2 NiBDb25maXJtKSBoYXMgYmVlbiByZWNlaXZlZA0KICAgZnJvbSBob3N0LCBhbmQgaXQgbWF5IHRy aWdnZXIgYSBuZXcgYmluZGluZy4NCg0KICAgTElWRSAgICAgICBBIERIQ1AgYWRkcmVzcyBoYXMg YmVlbiBhY2tub3dsZWRnZWQgYnkgYSBESENQIHNlcnZlci4NCg0KICAgREVURUNUSU9OICAgIEEg Z3JhdHVpdG91cyBBUlAgb3IgRHVwbGljYXRlIEFkZHJlc3MgRGV0ZWN0aW9uIE5TT0wNCiAgIGhh cyBiZWVuIHNlbnQgYnkgdGhlIGhvc3QgKG9yIHRoZSBTQVZJIGRldmljZSkuDQoNCiAgIEJPVU5E ICAgICAgIFRoZSBhZGRyZXNzIGhhcyBwYXNzZWQgZHVwbGljYXRlIGRldGVjdGlvbiBhbmQNCiAg ICAgICAgICAgICBpdCBpcyBib3VuZCB3aXRoIHRoZSBhbmNob3IuDQoNCjguIERIQ1AgU2NlbmFy aW8NCg0KICAgKFRoaXMgc2VjdGlvbiBzaG91bGQgYmUgcmVtb3ZlZCBhbmQgbWVyZ2VkIHdpdGgg b3RoZXIgc2NlbmFyaW9zIGluDQogICBbc2F2aS1mcmFtZXdvcmtdKQ0KDQogICBUaGlzIHNlY3Rp b24gc3BlY2lmaWVzIHRoZSBkZXBsb3ltZW50IHNjZW5hcmlvcyBvZiB0aGlzIG1lY2hhbmlzbS4N Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkJpICAgICAgICAgICAgICAgICAg ICAgIEV4cGlyZXMgTWF5IDksIDIwMTAgICAgICAgICAgICAgICAgICBbUGFnZSA2XQ0KDA0KSW50 ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgc2F2aS1kaGNwICAgICAgICAgICAgICAgICAgTm92 ZW1iZXIgMjAwOQ0KDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0t Kw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8IERIQ1AgICB8DQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHwgU2VydmVyIHwNCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgKy0tLS0tLS0sKw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg YC4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGAuDQogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBgLg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICstLS0tJy0tLS0tKw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgIFNBVkkgICAg fA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgIERldmljZSAgfA0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICstLy0tLS0tLS8tKw0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgfCAgICAgIHwNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLVwt KyAgICtcLS0tLS0rDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgfERIQ1AgIHwgICB8Q2xp ZW50fA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIHxSZWxheSB8ICAgfCAgICAgIHwNCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tKyAgICstLS0tLS0rDQogICAgICAgICAg ICAgICAgICAgICAgICAgIEZpZ3VyZSAzIERIQ1AgU2NlbmFyaW8NCg0KOS4gQW5jaG9yIEF0dHJp YnV0ZXMNCg0KICAgVGhpcyBzZWN0aW9uIHNwZWNpZmllcyB0aGUgYW5jaG9yIGF0dHJpYnV0ZXMg aW52b2x2ZWQgaW4gdGhpcw0KICAgbWVjaGFuaXNtLg0KDQo5LjEuIFNBVkktSG9zdCBBdHRyaWJ1 dGUNCg0KICAgIChUaGlzIGF0dHJpYnV0ZSBzaG91bGQgYmUgZGVzY3JpYmVkIGluIHRoZSBbc2F2 aS1mcmFtZXdvcmtdKQ0KDQogICBJZiBhbmQgb25seSBpZiBhbiBhbmNob3IgaXMgZXhjbHVzaXZl bHkgYXNzb2NpYXRlZCB3aXRoIGEgc2luZ2xlIGhvc3QsDQogICB0aGlzIGFuY2hvciBjYW4gYmUg c2V0IHRvIGhhdmUgU0FWSS1Ib3N0IGF0dHJpYnV0ZS4NCg0KOS4yLiBTQVZJLVBvbHkgQXR0cmli dXRlDQoNCiAgIChUaGlzIGF0dHJpYnV0ZSBzaG91bGQgYmUgZGVzY3JpYmVkIGluIHRoZSBbc2F2 aS1mcmFtZXdvcmtdKQ0KDQogICBJZiBhbiBhbmNob3IgaXMgYXNzb2NpYXRlZCB3aXRoIGEgc21h bGwgbnVtYmVyIG9mIGhvc3RzIHRocm91Z2ggYQ0KICAgY29udmVyZ2VkIGRldmljZSwgdGhpcyBh bmNob3IgY2FuIGJlIHNldCB0byBoYXZlIHRoZSBTQVZJLVBvbHkNCiAgIGF0dHJpYnV0ZS4gVGhl IFNBVkktUG9seSBhdHRyaWJ1dGUgaXMgbXV0dWFsbHkgZXhjbHVzaXZlIHdpdGggdGhlDQogICBT QVZJLUhvc3QgYXR0cmlidXRlLg0KDQogICBUaGUgbWFpbiBkaWZmZXJlbmNlIGluIHByb2Nlc3Mg b24gYW4gYW5jaG9yIHdpdGggdGhlIFNBVkktUG9seQ0KICAgYXR0cmlidXRlIGZyb20gb25lIHdp dGggdGhlIFNBVkktSG9zdCBhdHRyaWJ1dGUgaXMgdGhlIHBvbGljeSBvZg0KICAgYmluZGluZyBj b25zaXN0ZW5jeS4NCg0KOS4zLiBTQVZJLURIQ1AtVHJ1c3QgQXR0cmlidXRlDQoNCiAgIElmIGFu ZCBvbmx5IGlmIGFuIGFuY2hvciBpcyBhc3NvY2lhdGVkIHdpdGggYSB0cnVzdGFibGUgREhDUA0K ICAgc2VydmVyL3JlbGF5LCBpdCBjYW4gYmUgc2V0IHRvIGhhdmUgdGhpcyBhdHRyaWJ1dGUuDQoN Cg0KQmkgICAgICAgICAgICAgICAgICAgICAgRXhwaXJlcyBNYXkgOSwgMjAxMCAgICAgICAgICAg ICAgICAgIFtQYWdlIDddDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICBzYXZpLWRo Y3AgICAgICAgICAgICAgICAgICBOb3ZlbWJlciAyMDA5DQoNCg0KICAgSWYgREhDUCBpcyB1c2Vk IHRvIGFzc2lnbiBhZGRyZXNzIGluIHRoZSBuZXR3b3JrLCB0aGVyZSBNVVNUIGJlIGF0DQogICBs ZWFzdCBvbmUgYW5jaG9yIHdpdGggdGhpcyBhdHRyaWJ1dGUuIERIQ1AgUmVwbHkgbWVzc2FnZSBu b3QgY29taW5nDQogICBmcm9tIHN1Y2ggcG9ydHMgTVVTVCBiZSBkcm9wcGVkLg0KDQo5LjQuIFNB VkktUkEtVHJ1c3QgQXR0cmlidXRlDQoNCiAgIChUaGlzIGF0dHJpYnV0ZSBzaG91bGQgYmUgZGVz Y3JpYmVkIGluIHRoZSBbc2F2aS1mcmFtZXdvcmtdKQ0KDQogICBJZiBhbmQgb25seSBpZiBhbiBh bmNob3IgaXMgYXNzb2NpYXRlZCB3aXRoIGEgdHJ1c3RhYmxlIHJvdXRlciwgaXQNCiAgIGNhbiBi ZSBzZXQgdG8gaGF2ZSB0aGlzIGF0dHJpYnV0ZS4NCg0KICAgVGhlcmUgTUFZIGJlIG5vIFNBVkkt UkEtVHJ1c3QgYW5jaG9yIG9uIGEgU0FWSSBkZXZpY2UuDQoNCiAgIFJvdXRlciBBZHZlcnRpc2Vt ZW50IG5vdCByZWNlaXZlZCBmcm9tIGEgU0FWSS1SQS1UcnVzdCBhbmNob3IgTVVTVCBiZQ0KICAg ZGlzY2FyZGVkLg0KDQo5LjUuIFNBVkktU0FWSSBBdHRyaWJ1dGUNCg0KICAgKFRoaXMgYXR0cmli dXRlIHNob3VsZCBiZSBkZXNjcmliZWQgaW4gdGhlIFtzYXZpLWZyYW1ld29ya10pDQoNCiAgIElm IGFuZCBvbmx5IGlmIGFuIGFuY2hvciBpcyBhc3NvY2lhdGVkIHdpdGggYW5vdGhlciBTQVZJIGRl dmljZSwgaXQNCiAgIGNhbiBiZSBzZXQgdG8gaGF2ZSB0aGlzIGF0dHJpYnV0ZS4NCg0KICAgVGhp cyBhdHRyaWJ1dGUgaXMgbXV0dWFsbHkgZXhjbHVzaXZlIHdpdGggU0FWSS1Ib3N0IGFuZCBTQVZJ LVBvbHkNCiAgIGF0dHJpYnV0ZS4NCg0KMTAuIFByZWZpeCBDb25maWd1cmF0aW9uDQoNCiAgIChU aGlzIHNlY3Rpb24gc2hvdWxkIGJlIGluY2x1ZGVkIGluIFtTQVZJLWZyYW1ld29ya10gYnV0IG5v dCB0aGlzDQogICBkb2N1bWVudC4pDQoNCiAgIEJlZm9yZSBzZXR0aW5nIHVwIGEgaG9zdC1sZXZl bCBncmFudWxhcml0eSBiaW5kaW5nIHRhYmxlLCBpdCBpcw0KICAgaW1wb3J0YW50IHRvIGNvbmZp Z3VyZSBjb3JyZWN0IHByZWZpeGVzIG9uIHRoZSBTQVZJIGRldmljZS4gQXQgbGVhc3QNCiAgIHR3 byBwcmVmaXggc2NvcGVzIG11c3QgYmUgc2V0OiB0aGUgSVB2NCBwcmVmaXggYW5kIElQdjYgcHJl Zml4ZXMuDQogICBUaGlzIGRvY3VtZW50IHN1Z2dlc3RzIHNldCAzIHByZWZpeCBzY29wZXM6DQoN CiAgSVB2NCBQcmVmaXg6DQoNCiAgICAgICAgIFRoZSBhbGxvd2VkIHNjb3BlIG9mIGFueSBraW5k IG9mIElQdjQgYWRkcmVzc2VzLiBJdCBjYW4gYmUgc2V0DQogICAgICAgICBtYW51YWxseS4NCg0K ICAgSVB2NiBTTEFBQyBQcmVmaXhlczoNCg0KICAgICAgICAgVGhlIGFsbG93ZWQgc2NvcGUgb2Yg U0xBQUMgYW5kIG1hbnVhbGx5IGNvbmZpZ3VyZWQgSVB2Ng0KICAgICAgICAgYWRkcmVzc2VzLiBJ dCBjYW4gYmUgc2V0IHRocm91Z2ggc25vb3BpbmcgUkEgbWVzc2FnZSBmcm9tIHBvcnQNCiAgICAg ICAgIHdpdGggU0FWSS1SQS1UcnVzdCBhdHRyaWJ1dGUsIG9yIG1hbnVhbCBjb25maWd1cmF0aW9u Lg0KDQoNCg0KQmkgICAgICAgICAgICAgICAgICAgICAgRXhwaXJlcyBNYXkgOSwgMjAxMCAgICAg ICAgICAgICAgICAgIFtQYWdlIDhdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICBz YXZpLWRoY3AgICAgICAgICAgICAgICAgICBOb3ZlbWJlciAyMDA5DQoNCg0KICAgICAgICAgRkU4 MDo6LzY0IE1VU1QgYmUgc2V0IHRvIGEgZmVhc2libGUgcHJlZml4Lg0KDQogICBJUHY2IERIQ1B2 NiBQcmVmaXhlczoNCg0KICAgICAgICAgVGhlIGFsbG93ZWQgc2NvcGUgb2YgREhDUHY2IGFkZHJl c3Nlcy4gSXQgY2FuIGJlIHNldCB0aHJvdWdoIFJBDQogICAgICAgICBzbm9vcGluZywgREhDUC1Q RCBwcm90b2NvbCwgb3IgbWFudWFsIGNvbmZpZ3VyYXRpb24uDQoNCiAgIElmIHNvbWUgb2YgdGhl IHByZWZpeCBzY29wZSBpcyBzZXQgdG8gaGF2ZSBub24gcHJlZml4LCBpdCBpbXBsaWVzDQogICBj b3JyZXNwb25kaW5nIGFkZHJlc3MgYXNzaWdubWVudCBtZXRob2QgaXMgbm90IGFsbG93ZWQgaW4g dGhlIG5ldHdvcmsuDQoNCiAgIFRoZXJlIGlzIG5vIG5lZWQgdG8gZXhwbGljaXRseSBwcmVzZW50 IHRoZXNlIHByZWZpeCBzY29wZXMuIEJ1dCB0aGVzZQ0KICAgcmVzdHJpY3Rpb25zIE1VU1QgYmUg dXNlZCBhcyBwcmVtaWVyIGNoZWNrIGluIGJpbmRpbmcgc2V0IHVwLg0KDQogICBSZWZlciB0byBz ZWN1cml0eSBjb25zaWRlcmF0aW9uIGZvciBvdGhlciBkaXNjdXNzaW9ucy4NCg0KMTEuIEJpbmRp bmcgU2V0IFVwDQoNCiAgIFRoaXMgc2VjdGlvbiBzcGVjaWZpZXMgdGhlIHByb2NlZHVyZSBvZiBz ZXR0aW5nIHVwIGJpbmRpbmdzIGJhc2VkIG9uDQogICBjb250cm9sIHBhY2tldCBzbm9vcGluZy4N Cg0KMTEuMS4gUHJvY2VzcyBvZiBESENQIFNub29waW5nDQoNCjExLjEuMS4gSW5pdGlhbGl6YXRp b24NCg0KICAgVGhpcyBwcm9jZWR1cmUgd2lsbCBub3QgYmUgcGVyZm9ybWVkIGlmOg0KDQogICAx LiBPcHRpb24gODIgaXMgdXNlZCB0byBrZWVwIGFuY2hvciBpbiBESENQIFJlcXVlc3QgYW5kIFJl cGx5LCBvcg0KDQogICAyLiBVbnNwb29mYWJsZSBNQUMgaXMgdXNlZCBhcyBhbmNob3IoODAyLjEx aSw4MDIuMWFlL2FmKSwgb3INCg0KICAgMy4gVGhlIG1hcHBpbmcgdGFibGUgZnJvbSBNQUMgdG8g YW5jaG9yIGlzIHNlY3VyZS4NCg0KICAgSWYgbm9uZSBvZiB0aGVzZSB0aHJlZSByZXF1aXJlbWVu dHMgYXJlIHNhdGlzZmllZCwgdGhpcyBwcm9jZWR1cmUNCiAgIE1VU1QgYmUgcGVyZm9ybWVkLg0K DQoxMS4xLjEuMS4gVHJpZ2dlciBFdmVudA0KDQogICBBIERIQ1B2NC92NiBSZXF1ZXN0IG9yIGEg REhDUHY2IENvbmZpcm0gaXMgcmVjZWl2ZWQgd2l0aCBhbiBhbmNob3INCiAgIHdoaWNoIGhhcyB0 aGUgYXR0cmlidXRlIG9mIFNBVkktSG9zdCBvciBTQVZJLVBvbHkuDQoNCjExLjEuMS4yLiBNZXNz YWdlIFZhbGlkYXRpb24NCg0KICAgVGhlIFNBVkkgZGV2aWNlIGNoZWNrcyB0aGUgUmVxdWVzdCBv ciBDb25maXJtIGFzIGZvbGxvd3M6DQoNCiAgIDEuIFdoZXRoZXIgdGhlIGxpbWl0YXRpb24gb24g YmluZGluZyBlbnRyeSBudW1iZXIgb2YgdGhpcyBhbmNob3Igd2lsbA0KICAgICAgYmUgZXhjZWVk ZWQuDQoNCg0KDQpCaSAgICAgICAgICAgICAgICAgICAgICBFeHBpcmVzIE1heSA5LCAyMDEwICAg ICAgICAgICAgICAgICAgW1BhZ2UgOV0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg IHNhdmktZGhjcCAgICAgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMDkNCg0KDQoxMS4xLjEuMy4g Rm9sbG93aW5nIEFjdGlvbnMNCg0KICAgRm9yd2FyZCB0aGUgUkVRVUVTVCBtZXNzYWdlIGlmIGJp bmRpbmcgZW50cnkgbGltaXRhdGlvbiB3aWxsIG5vdCBiZQ0KICAgZXhjZWVkZWQuDQoNCiAgIEdl bmVyYXRlIGFuIGVudHJ5IGluIHRoZSBCaW5kaW5nIFN0YXRlIFRhYmxlIChCU1QpIGFuZCBzZXQg dGhlIHN0YXRlDQogICBmaWVsZCB0byBTVEFSVC4gVGhlIGxpZmV0aW1lIG9mIHRoaXMgZW50cnkg aXMgc2V0IHRvIGJlDQogICBNQVhfREhDUF9SRVNQT05TRV9USU1FLiBUaGUgVHJhbnNhY3Rpb24g SUQgKFJlZmVyIHRvIFNlY3Rpb24gMiBpbg0KICAgW1JGQzIxMzFdIGFuZCBTZWN0aW9uIDQuMiBp biBbUkZDMzMxNV0pIGZpZWxkIG9mIHRoZSByZXF1ZXN0IHBhY2tldA0KICAgaXMgYWxzbyByZWNv cmRlZCBpbiB0aGUgZW50cnkuDQoNCiAgICstLS0tLS0tLS0rLS0tLS0tLS0tLSstLS0tLS0tKy0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0rDQogICB8IEFuY2hvciAgfCBBZGRyZXNzICB8 IFN0YXRlIHwgTGlmZXRpbWUgICAgICAgICAgICAgIHxPdGhlciAgfA0KICAgKy0tLS0tLS0tLSst LS0tLS0tLS0tKy0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLSsNCiAgIHwg QSAgICAgICB8ICAgICAgICAgIHwgU3RhcnQgfE1BWF9ESENQX1JFU1BPTlNFX1RJTUUgfCBUSUQg ICB8DQogICArLS0tLS0tLS0tKy0tLS0tLS0tLS0rLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0t LS0tLSstLS0tLS0tKw0KICAgICAgICAgICAgICBGaWd1cmUgNCBCaW5kaW5nIGVudHJ5IGluIEJT VCBvbiBpbml0aWFsaXphdGlvbg0KDQogICBUaGUgVElEIGlzIGtlcHQgZm9yIGFzc3VyYW5jZSB0 aGF0IHRoZSByZXNwb25zZSBmcm9tIHRoZSBESENQIHNlcnZlcg0KICAgY2FuIGJlIGRlbGl2ZXJl ZCB0byB0aGUgcmVxdWVzdCBob3N0LiBUaGlzIGlzIGxlZnQgYXMgYW4gb3BlbiBpc3N1ZQ0KICAg Zm9yIGZ1dHVyZSBkaXNjdXNzaW9uLg0KDQoxMS4xLjIuIEZyb20gU1RBUlQgdG8gTElWRQ0KDQox MS4xLjIuMS4gVHJpZ2dlciBFdmVudA0KDQogICBBIERIQ1B2NCBESENQQUNLIG9yIERIQ1B2NiBS RVBMWSBtZXNzYWdlIGlzIHJlY2VpdmVkLg0KDQoxMS4xLjIuMi4gTWVzc2FnZSBWYWxpZGF0aW9u DQoNCiAgIFRoZSBTQVZJIGRldmljZSBjaGVja3MgdGhlIG1lc3NhZ2UgYXMgZm9sbG93czoNCg0K ICAgMS4gV2hldGhlciB0aGUgbWVzc2FnZSBpcyByZWNlaXZlZCB3aXRoIGFuIGFuY2hvciB3aGlj aCBoYXMgdGhlIFNBVkktDQogICAgICBESENQLVRydXN0IGF0dHJpYnV0ZTsNCg0KICAgMi4gV2hl dGhlciB0aGUgZW50cnkgaW4gdGhlIEJTVCB3aXRoIGNvcnJlc3BvbmRpbmcgVElEIGlzIGluIHRo ZQ0KICAgICAgU1RBUlQgc3RhdGUuDQoNCjExLjEuMi4zLiBGb2xsb3dpbmcgQWN0aW9ucw0KDQog ICBEZWxpdmVyIHRoZSBtZXNzYWdlIHRvIHRoZSBkZXN0aW5hdGlvbi4NCg0KICAgU2V0IHRoZSBz dGF0ZSBvZiB0aGUgY29ycmVzcG9uZGluZyBlbnRyeSB0byBiZSBMSVZFLiBUaGUgbGlmZXRpbWUg b2YNCiAgIHRoZSBlbnRyeSBpcyBzZXQgdG8gYmUgTUFYX0FSUF9QUkVQQVJFX0RFTEFZIG9yIE1B WF9EQURfUFJFUEFSRV9ERUxBWQ0KICAgcmVzcGVjdGl2ZWx5LiBUaGUgbGVhc2UgdGltZSBpcyBh bHNvIHJlY29yZGVkIGluIHRoZSBlbnRyeS4NCg0KDQoNCg0KQmkgICAgICAgICAgICAgICAgICAg ICAgRXhwaXJlcyBNYXkgOSwgMjAxMCAgICAgICAgICAgICAgICAgW1BhZ2UgMTBdDQoMDQpJbnRl cm5ldC1EcmFmdCAgICAgICAgICAgICAgICBzYXZpLWRoY3AgICAgICAgICAgICAgICAgICBOb3Zl bWJlciAyMDA5DQoNCg0KICAgKy0tLS0tLS0tLSstLS0tLS0tLS0tKy0tLS0tLS0rLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0rDQogICB8IEFuY2hvciAgfCBBZGRyZXNzICB8IFN0YXRl IHwgTGlmZXRpbWUgICAgICAgICAgICAgICB8T3RoZXIgIHwNCiAgICstLS0tLS0tLS0rLS0tLS0t LS0tLSstLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tKw0KICAgfCBBICAg ICAgIHwgQWRkciAgICAgfCBMSVZFICB8TUFYX0FSUF9QUkVQQVJFX0RFTEFZIG9yfCBMZWFzZSB8 DQogICB8ICAgICAgICAgfCAgICAgICAgICB8ICAgICAgIHxNQVhfREFEX1BSRVBBUkVfREVMQVkg ICB8IFRpbWUgIHwNCiAgICstLS0tLS0tLS0rLS0tLS0tLS0tLSstLS0tLS0tKy0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLSstLS0tLS0tKw0KICAgICAgICAgICAgICAgIEZpZ3VyZSA1IEJpbmRpbmcg ZW50cnkgaW4gQlNUIG9uIGFzc2lnbm1lbnQNCg0KICAgT3Igc2V0IHRoZSBzdGF0ZSBvZiB0aGUg Y29ycmVzcG9uZGluZyBlbnRyeSB0byBiZSBERVRFQ1RJT04sIGFuZCBzZW5kDQogICBhbiBBUlAg UmVxdWVzdCBvciBOU09MIGZvciB0aGUgYXNzaWduZWQgYWRkcmVzcy4NCg0KICAgKy0tLS0tLS0t LSstLS0tLS0tLS0tKy0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0rDQogICB8 IEFuY2hvciAgfCBBZGRyZXNzICB8IFN0YXRlICAgICB8IExpZmV0aW1lICAgICAgICB8T3RoZXIg IHwNCiAgICstLS0tLS0tLS0rLS0tLS0tLS0tLSstLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0t LSstLS0tLS0tKw0KICAgfCBBICAgICAgIHwgQWRkciAgICAgfCBERVRFQ1RJT04gfE1BWF9BUlBf REVMQVkgb3IgfCBMZWFzZSB8DQogICB8ICAgICAgICAgfCAgICAgICAgICB8ICAgICAgICAgICB8 TUFYX0RBRF9ERUxBWSAgICB8IFRpbWUgIHwNCiAgICstLS0tLS0tLS0rLS0tLS0tLS0tLSstLS0t LS0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLSstLS0tLS0tKw0KICAgICAgICAgRmlndXJlIDYgQmlu ZGluZyBlbnRyeSBpbiBCU1Qgb24gYXNzaWdubWVudDogYW5vdGhlciBjYXNlDQoNCiAgIEluc2Vy dCBhbiBlbnRyeSBpbnRvIHRoZSBGaWx0ZXJpbmcgVGFibGUgaWYgdGhlIGFzc2lnbmVkIGFkZHJl c3MgaXMNCiAgIG5vdCBib3VuZCB3aXRoIGFub3RoZXIgYW5jaG9yLg0KDQogICAgICAgICAgICAg ICAgICAgICAgICAgICstLS0tLS0tLS0rLS0tLS0tLS0tLSsNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgfEFuY2hvciAgIHxBZGRyZXNzICAgfA0KICAgICAgICAgICAgICAgICAgICAgICAgICAr LS0tLS0tLS0tKy0tLS0tLS0tLS0rDQogICAgICAgICAgICAgICAgICAgICAgICAgIHxBICAgICAg ICB8QWRkciAgICAgIHwNCiAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLSstLS0t LS0tLS0tKw0KICAgICAgICAgICAgICAgIEZpZ3VyZSA3IEJpbmRpbmcgZW50cnkgaW4gRlQgb24g YXNzaWdubWVudA0KDQoxMS4xLjMuIEZyb20gTElWRSB0byBERVRFQ1RJT04NCg0KICAgKFRoaXMg c2VjdGlvbiBzaG91bGQgYmUgcmVtb3ZlZCBvciBtb2RpZmllZCBpZiBhbGwgdGhlIERBRCByZWxh dGVkDQogICBwcm9jZWR1cmVzIGFyZSB0byBiZSBkZXNjcmliZWQgaW4gU0xBQUMgZG9jdW1lbnQp DQoNCjExLjEuMy4xLiBUcmlnZ2VyIEV2ZW50DQoNCiAgIEEgZ3JhdHVpdG91cyBBUlAgUmVxdWVz dCBvciBEdXBsaWNhdGUgQWRkcmVzcyBEZXRlY3Rpb24gTmVpZ2hib3INCiAgIFNvbGljaXRhdGlv biBpcyByZWNlaXZlZCBmcm9tIHRoZSBob3N0LiBPciBhIHRpbWVvdXQgZXZlbnQgb2YgYW4NCiAg IGVudHJ5IHdpdGggc3RhdGUgTElWRSBvY2N1cnMuDQoNCjExLjEuMy4yLiBNZXNzYWdlIFZhbGlk YXRpb24NCg0KICAgVGhlIFNBVkkgZGV2aWNlIGNoZWNrcyB0aGUgbWVzc2FnZSBhcyBmb2xsb3dz Og0KDQogICAxLiBXaGV0aGVyIHRoZSBUYXJnZXQgSVAgYWRkcmVzcyBmaWVsZCBvZiB0aGUgQVJQ IFJlcXVlc3Qgb3IgTmVpZ2hib3INCiAgICAgIFNvbGljaXRhdGlvbiBoYXMgYmVlbiBib3VuZCB3 aXRoIHRoZSBjb3JyZXNwb25kaW5nIGFuY2hvciBpbiBCU1QNCiAgICAgIG9yIEZULg0KDQoNCkJp ICAgICAgICAgICAgICAgICAgICAgIEV4cGlyZXMgTWF5IDksIDIwMTAgICAgICAgICAgICAgICAg IFtQYWdlIDExXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgc2F2aS1kaGNwICAg ICAgICAgICAgICAgICAgTm92ZW1iZXIgMjAwOQ0KDQoNCjExLjEuMy4zLiBGb2xsb3dpbmcgQWN0 aW9ucw0KDQogICBJZiB0aW1lb3V0IGV2ZW50IG9mIGFuIGVudHJ5IHdpdGggc3RhdGUgTElWRSBo YXBwZW5zLCBzZW5kIGFuIEFSUA0KICAgUmVxdWVzdCBvciBhIERBRCBOU09MLCB3aXRoIHRhcmdl dCBhZGRyZXNzIHNldCB0byB0aGUgcmVjb3JkZWQNCiAgIGFkZHJlc3MgaW4gdGhlIGVudHJ5Lg0K DQogICBTZXQgdGhlIHN0YXRlIG9mIHRoZSBlbnRyeSB0byBiZSBERVRFQ1RJT04uIFRoZSBsaWZl dGltZSBvZiB0aGUgZW50cnkNCiAgIGlzIHNldCB0byBiZSBNQVhfQVJQX0RFTEFZIG9yIE1BWF9E QURfREVMQVkgcmVzcGVjdGl2ZWx5Lg0KDQogICArLS0tLS0tLS0tKy0tLS0tLS0tLS0rLS0tLS0t LS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0rLS0tLS0tLSsNCiAgIHwgQW5jaG9yICB8IEFkZHJlc3Mg IHwgU3RhdGUgICAgICB8IExpZmV0aW1lICAgICAgIHxPdGhlciAgfA0KICAgKy0tLS0tLS0tLSst LS0tLS0tLS0tKy0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0rDQogICB8IEEg ICAgICAgfCBBZGRyICAgICB8IERFVEVDVElPTiAgfE1BWF9BUlBfREVMQVkgb3J8IExlYXNlIHwN CiAgIHwgICAgICAgICB8ICAgICAgICAgIHwgICAgICAgICAgICB8TUFYX0RBRF9ERUxBWSAgIHwg VGltZSAgfA0KICAgKy0tLS0tLS0tLSstLS0tLS0tLS0tKy0tLS0tLS0tLS0tKy0tLS0tLS0tLS0t LS0tLS0tKy0tLS0tLS0rDQogICAgICAgICAgICAgICAgRmlndXJlIDggQmluZGluZyBlbnRyeSBp biBCU1Qgb24gZGV0ZWN0aW9uDQoNCjExLjEuNC4gRnJvbSBERVRFQ1RJT04gdG8gQk9VTkQNCg0K MTEuMS40LjEuIFRyaWdnZXIgRXZlbnQNCg0KICAgQSB0aW1lb3V0IGV2ZW50IG9mIGFuIGVudHJ5 IHdpdGggc3RhdGUgREVURUNUSU9OIG9jY3VycyBvciBhbiBBUlANCiAgIFJlc3BvbnNlIG9yIE5B IGZvciBhbiBhZGRyZXNzIGluIEJTVCB3aXRoIHN0YXRlIERFVEVDVElPTiBpcyByZWNlaXZlZC4N Cg0KMTEuMS40LjIuIEZvbGxvd2luZyBBY3Rpb25zDQoNCiAgIElmIGEgdGltZW91dCBldmVudCBv ZiBhbiBlbnRyeSB3aXRoIHN0YXRlIERFVEVDVElPTiBvY2N1cnMsIHNldCB0aGUNCiAgIHN0YXRl IG9mIHRoZSBlbnRyeSB0byBiZSBCT1VORC4gVGhlIGxpZmV0aW1lIG9mIHRoZSBlbnRyeSBpcyBz ZXQgdG8NCiAgIGJlIHRoZSBMZWFzZSB0aW1lIGFja25vd2xlZGdlZCBieSBESENQIHNlcnZlci4N Cg0KICAgKy0tLS0tLS0tLSstLS0tLS0tLS0tKy0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0r LS0tLS0tLSsNCiAgIHwgQW5jaG9yICB8IEFkZHJlc3MgIHwgU3RhdGUgICAgIHwgTGlmZXRpbWUg ICAgICAgfE90aGVyICB8DQogICArLS0tLS0tLS0tKy0tLS0tLS0tLS0rLS0tLS0tLS0tLS0rLS0t LS0tLS0tLS0tLS0tLSstLS0tLS0tKw0KICAgfCBBICAgICAgIHwgQWRkciAgICAgfCBCT1VORCAg ICAgfCBMZWFzZSB0aW1lICAgICB8ICAgICAgIHwNCiAgICstLS0tLS0tLS0rLS0tLS0tLS0tLSst LS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0tKy0tLS0tLS0rDQogICAgICAgICAgICAgICBGaWd1 cmUgOSBCaW5kaW5nIGVudHJ5IGluIEJTVCBvbiBmaW5hbGl6YXRpb24NCg0KICAgSWYgYW4gQVJQ IFJlc3BvbnNlIG9yIE5BIGZvciBhbiBhZGRyZXNzIGluIEJTVCB3aXRoIHN0YXRlIERFVEVDVElP Tg0KICAgaXMgcmVjZWl2ZWQsIHJlbW92ZSB0aGUgY29ycmVzcG9uZGluZyBlbnRyeSBpbiBCU1Qg YW5kIEZULg0KDQoxMS4xLjUuIEFmdGVyIEJPVU5EDQoNCiAgIFdoZW5ldmVyIGEgREhDUCBEZWNs aW5lIGlzIHJlY2VpdmVkIGZyb20gdGhlIGhvc3QsIGRlbGV0ZSB0aGUgZW50cnkNCiAgIGluIEJT VCBhbmQgRlQuDQoNCiAgIFdoZW5ldmVyIGEgREhDUCBSZWxlYXNlIGlzIHJlY2VpdmVkIGZyb20g dGhlIGhvc3QsIGlmIHRoZSBzdGF0ZSBvZg0KICAgdGhlIGVudHJ5IGlzIEJPVU5ELCBkZWxldGUg dGhlIGVudHJ5IGluIEJTVCBhbmQgRlQuDQoNCg0KQmkgICAgICAgICAgICAgICAgICAgICAgRXhw aXJlcyBNYXkgOSwgMjAxMCAgICAgICAgICAgICAgICAgW1BhZ2UgMTJdDQoMDQpJbnRlcm5ldC1E cmFmdCAgICAgICAgICAgICAgICBzYXZpLWRoY3AgICAgICAgICAgICAgICAgICBOb3ZlbWJlciAy MDA5DQoNCg0KICAgSWYgYSBESENQdjQgQWNrbm93bGVkZ2VtZW50IG9yIERIQ1B2NiBSZXBseSB3 aXRoIFJlbmV3L1JlYmluZCBzaWduIGlzDQogICByZWNlaXZlZCBmcm9tIHRoZSBzZXJ2ZXIsIHNl dCBsaWZldGltZSBvZiB0aGUgZW50cnkgaW4gQlNUIHRvIGJlIHRoZQ0KICAgbmV3IGxlYXNlIHRp bWUuDQoNCiAgIElmIHRoZSBsaWZldGltZSBvZiBhbiBlbnRyeSB3aXRoIHN0YXRlIEJPVU5EIGV4 cGlyZXMsIGRlbGV0ZSB0aGUNCiAgIGVudHJ5IGluIEJTVCBhbmQgRmlsdGVyIFRhYmxlLg0KDQox MS4yLiBTdGF0ZSBNYWNoaW5lIG9mIERIQ1AgU25vb3BpbmcNCg0KICAgU3RhdGUgICAgIFBhY2tl dC9FdmVudCAgICAgIEFjdGlvbiAgICAgICAgICAgICAgICAgTmV4dCBTdGF0ZQ0KDQogICAtKiAg ICAgICAgIFJFUVVFU1QvQ09ORklSTSAgIFNldCB1cCBuZXcgZW50cnkgICAgICAgICAgICAgICAg ICBTVEFSVA0KDQogICBTVEFSVCAgICAgIEFDSyAgICAgICAgICAgICAgICBSZWNvcmQgbGVhc2Ug dGltZSAgICAgICAgICAgICAgICAgIExJVkUNCg0KICAgU1RBUlQgICAgICBUaW1lb3V0ICAgICAg ICAgICAgUmVtb3ZlIGVudHJ5ICAgICAgICAgICAgICAgICAgICAgICAgICAtDQoNCiAgIExJVkUg ICAgICAgR3JhIEFSUCBSRVEvREFEIE5TICAgIC0gICAgICAgICAgICAgICAgICAgICAgICAgIERF VEVDVElPTg0KDQogICBMSVZFICAgICAgIERFQ0xJTkUgICAgICAgICAgICAgUmVtb3ZlIGVudHJ5 ICAgICAgICAgICAgICAgICAgICAgICAgIC0NCg0KICAgTElWRSAgICAgICBUaW1lb3V0ICAgICAg ICAgICAgU2VuZCBBUlAgUmVxL0RBRCBOUyAgICAgICAgIERFVEVDVElPTg0KDQogICBERVRFQ1RJ T04gIFRpbWVvdXQgICAgICAgICAgICAgLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg Qk9VTkQNCg0KICAgREVURUNUSU9OICBBUlAgUkVTUE9OU0UgICAgICAgIFJlbW92ZSBlbnRyeSAg ICAgICAgICAgICAgICAgICAgICAgICAtDQoNCiAgIERFVEVDVElPTiAgREVDTElORSAgICAgICAg ICAgICBSZW1vdmUgZW50cnkgICAgICAgICAgICAgICAgICAgICAgICAgLQ0KDQogICBCT1VORCAg ICAgIFJFTEVBU0UvREVDTElORSAgICAgUmVtb3ZlIGVudHJ5ICAgICAgICAgICAgICAgICAgICAg ICAgIC0NCg0KICAgQk9VTkQgICAgICBUaW1lb3V0ICAgICAgICAgICAgIFJlbW92ZSBlbnRyeSAg ICAgICAgICAgICAgICAgICAgICAgICAtDQoNCiAgIEJPVU5EICAgICAgUkVORVcvUkVCT1VORCAg ICAgICBTZXQgbmV3IGxpZmV0aW1lICAgICAgICAgICAgICAgICBCT1VORA0KDQogICAqOiBvcHRp b25hbC4NCg0KMTIuIEZpbHRlcmluZyBTcGVjaWZpY2F0aW9uDQoNCiAgIFRoaXMgc2VjdGlvbiBz cGVjaWZpZXMgaG93IHRvIHVzZSBiaW5kaW5ncyB0byBmaWx0ZXIgcGFja2V0cy4NCg0KMTIuMS4g RmlsdGVyIERhdGEgUGFja2V0DQoNCiAgIERhdGEgcGFja2V0cyB3aXRoIGFuIGFuY2hvciB3aGlj aCBoYXMgYXR0cmlidXRlIFNBVkktSG9zdCBvciBTQVZJLQ0KICAgUG9seSBhcmUgZmlsdGVyZWQu IFRoZXJlIGNhbiBiZSBhbiBhbmNob3Igd2l0aCBuZWl0aGVyIGF0dHJpYnV0ZS4NCg0KDQoNCg0K QmkgICAgICAgICAgICAgICAgICAgICAgRXhwaXJlcyBNYXkgOSwgMjAxMCAgICAgICAgICAgICAg ICAgW1BhZ2UgMTNdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICBzYXZpLWRoY3Ag ICAgICAgICAgICAgICAgICBOb3ZlbWJlciAyMDA5DQoNCg0KICAgSWYgdGhlIHNvdXJjZSBvZiBh IHBhY2tldCBhc3NvY2lhdGVkIHdpdGggaXRzIGFuY2hvciBpcyBpbiB0aGUgRlQsDQogICB0aGlz IHBhY2tldCB3aWxsIGJlIGZvcndhcmRlZDsgb3IgZWxzZSB0aGUgcGFja2V0IE1VU1QgYmUgZGlz Y2FyZGVkLg0KDQoxMi4yLiBGaWx0ZXIgQ29udHJvbCBQYWNrZXQNCg0KICAgVGhlIHNvdXJjZSBh ZGRyZXNzIG9mIERIQ1B2NCBSZXF1ZXN0L0Rpc2NvdmVyeSBtdXN0IGJlIHNldCB0byBhbGwNCiAg IHplcm9zLg0KDQogICBUaGUgc291cmNlIGFkZHJlc3Mgb2YgREhDUHY2IFJlcXVlc3QvQ29uZmly bSBtdXN0IGJlIGFuIGFkZHJlc3MNCiAgIGFzc29jaWF0ZWQgd2l0aCB0aGUgY29ycmVzcG9uZGlu ZyBhbmNob3IgaW4gRlQuDQoNCiAgIFRoZSBzb3VyY2UgYWRkcmVzcyBvZiBJUHY2IE5TIGFuZCBJ UHY2IGdyYXR1aXRvdXMgQVJQIG11c3QgcGFzcyB0aGUNCiAgIGNoZWNrIG9uIEZULiBUaGUgc291 cmNlIGFkZHJlc3Mgb2YgREFEIE5TIE1VU1QgYmUgdW5zcGVjaWZpZWQgYWRkcmVzcy4NCg0KICAg QWxsIERIQ1AgUmVwbHkvQWNrIHBhY2tldHMgTVVTVCBiZSBmcm9tIGFuIGFuY2hvciB3aXRoIHRo ZSBTQVZJLURIQ1AtDQogICBUcnVzdCBhdHRyaWJ1dGUuDQoNCiAgIFRoZSB0YXJnZXQgYWRkcmVz cyBhbmQgc291cmNlIGFkZHJlc3MgaW4gYWxsIHRoZSBOZWlnaGJvcg0KICAgQWR2ZXJ0aXNlbWVu dCBwYWNrZXRzIGFuZCBBUlAgcmVwbGllcyBtdXN0IGFsc28gcGFzcyB0aGUgY2hlY2tzIG9uIEZU LA0KICAgaWYgdGhleSBhcmUgYXNzb2NpYXRlZCB3aXRoIGFuY2hvcnMgd2hpY2ggaGF2ZSBTQVZJ LUhvc3Qgb3IgU0FWSS1Qb2x5DQogICBhdHRyaWJ1dGUuDQoNCjEzLiBGb3JtYXQgYW5kIERlbGl2 ZXJ5IG9mIFByb2JlIE1lc3NhZ2VzDQoNCiAgIDEuIER1cGxpY2F0ZSBkZXRlY3Rpb24gb24gYmVo YXZpb3Igb2YgaG9zdDsNCg0KICAgICAgTWVzc2FnZSBUeXBlOiBEQUQgTlMsIEdyYXR1aXRvdXMg QVJQIFJlcXVlc3QNCg0KICAgICAgRm9ybWF0Og0KDQogICAgICAgICAgICAgICAgICAgTGluayBs YXllciBzb3VyY2UgLSBsaW5rIGxheWVyIGFkZHJlc3Mgb2YgaG9zdDsNCg0KICAgICAgICAgICAg ICAgICAgIExpbmsgbGF5ZXIgZGVzdGluYXRpb24gLSBGb3IgSVB2NiwgdXNlIG11bHRpY2FzdCBh ZGRyZXNzDQogICAgICBzcGVjaWZpZWQgaW4gW1JGQzMzMDddOyBGb3IgSVB2NCwgdXNlIGJyb2Fk Y2FzdCBhZGRyZXNzOw0KDQogICAgICAgICAgICAgICAgICAgSVAgc291cmNlIC0gVW5zcGVjaWZp ZWQgYWRkcmVzcyBmb3IgSVB2NjsgVGhlIHRlbnRhdGl2ZSBhZGRyZXNzDQogICAgICBmb3IgSVB2 NDsNCg0KICAgICAgICAgICAgICAgICAgIElQIGRlc3RpbmF0aW9uIC0gRm9yIElQdjYsIG11bHRp Y2FzdCBhZGRyZXNzIHNwZWNpZmllZCBpbg0KICAgICAgc2VjdGlvbiA1LjQuMiBvZiBbUkZDNDg2 MV07IEZvciBJUHY0LCB0aGUgdGVudGF0aXZlIGFkZHJlc3M7DQoNCiAgICAgIERlbGl2ZXJ5Og0K DQogICAgICAgICBNVVNUIG5vdCBkZWxpdmVyIHRvIHRoZSBob3N0IHdoaWNoIHRoZSBTQVZJIGRl dmljZSBpcw0KICAgICAgcGVyZm9ybWluZyBEQUQgb24gYmVoYXZpb3Igb2YuDQoNCg0KDQoNCkJp ICAgICAgICAgICAgICAgICAgICAgIEV4cGlyZXMgTWF5IDksIDIwMTAgICAgICAgICAgICAgICAg IFtQYWdlIDE0XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgc2F2aS1kaGNwICAg ICAgICAgICAgICAgICAgTm92ZW1iZXIgMjAwOQ0KDQoNCiAgIDIuIFNlbmQgcmVwbHkgb24gYmVo YXZpb3Igb2YgaG9zdCB0byBob2xkIGJvdW5kIGFkZHJlc3MgZm9yIGluYWN0aXZlDQogICAgICBu b2RlOw0KDQogICAgICBNZXNzYWdlIFR5cGU6IE5BLCBBUlAgUmVzcG9uc2UNCg0KICAgICAgTGlu ayBsYXllciBzb3VyY2UgLSBsaW5rIGxheWVyIGFkZHJlc3Mgb2YgaG9zdDsNCg0KICAgICAgTGlu ayBsYXllciBkZXN0aW5hdGlvbiAtIFRoZSBzb3VyY2UgYWRkcmVzcyBvZiB0aGUgZGV0ZWN0aW5n IG5vZGU7DQoNCiAgICAgIElQIHNvdXJjZSAtIFRoZSB0YXJnZXQgYWRkcmVzcyBpbiB0aGUgZGV0 ZWN0aW9uIG1lc3NhZ2U7DQoNCiAgICAgIElQIGRlc3RpbmF0aW9uIC1UaGUgc291cmNlIGFkZHJl c3Mgb2YgdGhlIGRldGVjdGluZyBub2RlOw0KDQogICAzLiBTZW5kIHByb2JlIHRvIGRldGVjdCB3 aGV0aGVyIGFuIGFkZHJlc3MgaXMgc3RpbGwgaW4gdXNlIChnZW5lcmFsbHkNCiAgICAgIGluIGNh c2Ugb2YgcG9ydCBkb3duL3VwIGV2ZW50KS4NCg0KICAgICAgTWVzc2FnZSBUeXBlOiBOVUQsIEFS UCBSZXF1ZXN0DQoNCiAgICAgIExpbmsgbGF5ZXIgc291cmNlIC0gbGluayBsYXllciBhZGRyZXNz IG9mIHRoZSBTQVZJIGRldmljZTsNCg0KICAgICAgTGluayBsYXllciBkZXN0aW5hdGlvbiAtIFRo ZSBsaW5rIGxheWVyIGFkZHJlc3Mgb2YgdGhlIG5vZGU7DQoNCiAgICAgIElQIHNvdXJjZSAtIFRo ZSBtYW5hZ2UgSVAgYWRkcmVzcyBvZiB0aGUgU0FWSSBkZXZpY2U7DQoNCiAgICAgIElQIGRlc3Rp bmF0aW9uIC0gVGhlIGFkZHJlc3MgaXMgc3VzcGljaW91cyB0byBiZSBpbmFjdGl2ZS4NCg0KMTQu IERhdGEgcGFja2V0IHRyaWdnZXIgb24gU0FWSS1Qb2x5IGFuY2hvcg0KDQogICBUbyBoYW5kbGUg dGhlIGNhc2Ugb2YgbW92ZW1lbnQgZnJvbSBvbmUgU0FWSS1Qb2x5IHBvcnQgdG8gYW5vdGhlciwN CiAgIGRhdGEgcGFja2V0IGJhc2VkIGJpbmRpbmcgTVVTVCBiZSBwZXJmb3JtZWQgb24gU0FWSS1Q b2x5IGFuY2hvci4NCg0KICAgV2hlbmV2ZXIgYSBwYWNrZXQgd2l0aCBzb3VyY2UgYWRkcmVzcyBu b3QgYm91bmQgbG9jYWxseSBpcyByZWNlaXZlZA0KICAgZnJvbSBhIFNBVkktUG9seSBhbmNob3Is IHRoZSBTQVZJIGRldmljZSBNVVNUIHNlbmQgYSBESENQIENPTkZJUk0gdG8NCiAgIHRoZSBESENQ IHNlcnZlciB0byBlbnN1cmUgdGhlIGFkZHJlc3MgY2FuIGJlIHVzZWQgb24gdGhlIGxpbms7IGlm IHRoZQ0KICAgYWRkcmVzcyBjYW4gYmUgdXNlZCwgdGhlIFNBVkkgZGV2aWNlIE1VU1Qgc2VuZCBh IERBRCBOUyBvbiBiZWhhdmlvcg0KICAgb2YgdGhlIGhvc3QgdG8gY2hlY2sgdGhlIHVuaXF1ZW5l c3Mgb2YgdGhlIGFkZHJlc3MuIElmIHRoZSBhZGRyZXNzDQogICBwYXNzZXMgdGhlc2UgdHdvIGNo ZWNrcywgaXQgY2FuIGJlIGJvdW5kIHdpdGggdGhlIGFuY2hvci4NCg0KICAgRGF0YSBwYWNrZXQg dHJpZ2dlcmVkIGJpbmdpbmcgd2lsbCBjYXVzZSBoZWF2eSBidXJkZW4gYW5kDQogICB1bnByZWRp Y3RhYmxlIGRhbmdlciBvbiB0aGUgU0FWSSBkZXZpY2UuIEl0IGlzIG5vdCBzdWdnZXN0ZWQgdG8N CiAgIGNvbmZpZ3VyZSBTQVZJLVBvbHkgYW5jaG9yIGFuZCBhbGxvdyBtb2JpbGl0eSBiZXR3ZWVu IFNBVkktUG9seQ0KICAgYW5jaG9ycy4gSWYgdGhpcyBmdW5jdGlvbiBpcyB0dXJuZWQgb2ZmLCB0 aGUgYWRtaW5pc3RyYXRvciBtdXN0IGJlDQogICBhd2FyZSBvZiB0aGUgcGFja2V0cyBmcm9tIFNB VkktUG9seSBhbmNob3IgbWF5IGJlIGZpbHRlcmVkDQogICBpbmNvcnJlY3RseSBhZnRlciBtb3Zl bWVudC4NCg0KDQoNCg0KDQpCaSAgICAgICAgICAgICAgICAgICAgICBFeHBpcmVzIE1heSA5LCAy MDEwICAgICAgICAgICAgICAgICBbUGFnZSAxNV0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAg ICAgICAgIHNhdmktZGhjcCAgICAgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMDkNCg0KDQoxNS4g QmluZGluZyBSZW1vdmUNCg0KICAgSWYgdGhlIGxpZmV0aW1lIG9mIGFuIGVudHJ5IHdpdGggc3Rh dGUgQk9VTkQgZXhwaXJlcywgdGhlIGVudHJ5IE1VU1QNCiAgIGJlIHJlbW92ZWQuDQoNCiAgIFdo ZW4gdGhlIFNBVkkgZGV2aWNlIHJlY2VpdmVzIGEgREFEIE5TL0dyYSBBUlAgcmVxdWVzdCB0YXJn ZXQgYXQgYW4NCiAgIGFkZHJlc3MgYm91bmQgYW5kIHRoZXJlIGlzIG5vIHJlcGx5IGZyb20gdGhl IGFuY2hvciwgaWYgdGhlIGFuY2hvciBpcw0KICAgYSBTQVZJLUhvc3QgYW5jaG9yLCBob2xkIHRo ZSBiaW5kaW5nIGVudHJ5IHRocm91Z2ggc2VuZGluZyBOQS9BUlANCiAgIFJlcGx5OyBpZiB0aGUg YW5jaG9yIGlzIGEgU0FWSS1Qb2x5IGFuY2hvciwgcmVtb3ZlIHRoaXMgYmluZGluZyBvcg0KICAg aG9sZCBpdC4NCg0KMTYuIEhhbmRsZSBwb3J0IERPV04gZXZlbnQNCg0KICAgV2hlbmV2ZXIgYSBw b3J0IHdpdGggYXR0cmlidXRlIFNBVkktUG9seSBvciBTQVZJLUhvc3QgdHVybnMgZG93biwgdGhl DQogICBiaW5kaW5ncyB3aXRoIHRoZSBhbmNob3IgTVVTVCBiZSBrZXB0IGZvciBhIHNob3J0IHRp bWUuDQoNCiAgIFRvIGhhbmRsZSBtb3ZlbWVudCwgaWYgcmVjZWl2aW5nIERBRCBOUy9HcmEgQVJQ IHJlcXVlc3QgdGFyZ2V0IGF0IHRoZQ0KICAgYWRkcmVzcyBkdXJpbmcgdGhlIHBlcmlvZCwgcmVt b3ZlIHRoZSBlbnRyeS4NCg0KICAgSWYgcG9ydCB0dXJucyBVUCBkdXJpbmcgdGhlIHBlcmlvZDoN Cg0KICAgICAgICA/T3B0aW9uYWxseSBzZW5kIHByb2JlcyB0byBTQVZJLWhvc3QgcG9ydCBmb3Ig YXNzdXJhbmNlOw0KDQogICAgICAgID9NVVNUIHNlbmQgcHJvYmVzIHRvIFNBVkktUG9seSBwb3J0 IGZvciBhc3N1cmFuY2UuDQoNCjE3LiBBYm91dCBDb2xsaXNpb24gaW4gRGV0ZWN0aW9uDQoNCiAg IFRoZSBTQVZJIGRldmljZSBtYXkgcmVjZWl2ZSBhIHJlc3BvbnNlIGluIGRldGVjdGlvbi4gU29t ZSByZWxhdGVkDQogICBkZXRhaWxzIGFyZSBzcGVjaWZpZWQgaGVyZS4NCg0KMTcuMS4gV2hldGhl ciB0byBub3RpZnkgdGhlIERIQ1Agc2VydmVyDQoNCiAgIEl0IGlzIHVubmVjZXNzYXJ5IGZvciB0 aGUgU0FWSSBkZXZpY2UgdG8gbm90aWZ5IHRoZSBESENQIHNlcnZlciwNCiAgIGJlY2F1c2UgdGhl IGhvc3Qgd2lsbCBzZW5kIGEgREVDTElORSBtZXNzYWdlIHRvIGl0IG9uY2UgaXQgZmluZHMgdGhl DQogICBhZHZlcnRpc2VkIGFkZHJlc3MgaXMgY29uZmxpY3QuDQoNCjE3LjIuIFRoZSByZXN1bHQg b2YgZGV0ZWN0aW9uIHdpdGhvdXQgaG9zdCBhd2FyZQ0KDQogICBJbiBjYXNlIHRoZSBTQVZJIGRl dmljZSBzZW5kIGRldGVjdGlvbiBwYWNrZXQgaW5zdGVhZCBvZiB0aGUgaG9zdCwNCiAgIHRoZSBo b3N0IHdpbGwgbm90IGJlIGF3YXJlIG9mIHRoZSBkZXRlY3Rpb24gcmVzdWx0LiBJZiB0aGUgZGV0 ZWN0aW9uDQogICBzdWNjZWVkcywgdGhlcmUgaXMgbm8gcHJvYmxlbS4gSG93ZXZlciwgaWYgdGhl IGRldGVjdGlvbiBmYWlscywgdGhlDQogICBwYWNrZXRzIGZyb20gdGhlIGhvc3Qgd2l0aCB0aGUg YXNzaWduZWQgYWRkcmVzcyB3aWxsIGJlIGZpbHRlcmVkIG91dC4NCiAgIFRoaXMgcmVzdWx0IGNh biBiZSByZWdhcmRlZCBhcyBhIHJlYXNvbmFibGUgcHVuaXNobWVudCBmb3Igbm90DQogICBwZXJm b3JtaW5nIGR1cGxpY2F0ZSBkZXRlY3Rpb24gYW5kIHVzaW5nIGEgY29sbGlzaW9uIGFkZHJlc3Mu DQoNCg0KDQoNCg0KQmkgICAgICAgICAgICAgICAgICAgICAgRXhwaXJlcyBNYXkgOSwgMjAxMCAg ICAgICAgICAgICAgICAgW1BhZ2UgMTZdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAg ICBzYXZpLWRoY3AgICAgICAgICAgICAgICAgICBOb3ZlbWJlciAyMDA5DQoNCg0KMTguIEZpbHRl cmluZyBkdXJpbmcgZGV0ZWN0aW9uDQoNCiAgIEluIHRoaXMgbWVjaGFuaXNtLCB3aGVuZXZlciB0 aGUgREhDUCBzZXJ2ZXIgcmVwbGllcyBhbiBhZGRyZXNzLCB0aGlzDQogICBhZGRyZXNzIHdpbGwg YmUgYWxsb3dlZCBpbW1lZGlhdGVseSBldmVuIGJlZm9yZSBkdXBsaWNhdGUgZGV0ZWN0aW9uDQog ICBpcyBjb21wbGV0ZWQuIFRoaXMgZGVzaWduIGlzIGluIGNvbnNpZGVyYXRpb24gb2YgYSBob3N0 IG1heSBzdGFydCB0bw0KICAgc2VuZCBwYWNrZXRzIHN0cmFpZ2h0d2F5IHdpdGhvdXQgZGV0ZWN0 aW9uLiBBbHNvIHRoaXMgZGVzaWduIGlzIHRvIGJlDQogICBjb21wYXRpYmxlIHdpdGggb3B0aW1p c3RpYyBEQUQgW1JGQzQ0MjldLg0KDQogICBIb3dldmVyLCB0aGlzIGZlYXR1cmUgbWF5IGFsbG93 IGFuIGF0dGFja2VyIHRvIHNlbmQgcXVhbnRpdGllcyBvZg0KICAgcGFja2V0cyB3aXRoIHNvdXJj ZSBhZGRyZXNzZXMgYWxyZWFkeSBhc3NpZ25lZCB0byBvdGhlciBub2Rlcy4gQQ0KICAgcHJhY3Rp Y2FsIHNvbHV0aW9uIGZvciB0aGlzIHZ1bG5lcmFiaWxpdHkgaXMgY29uZmlndXJpbmcgdGhlIGFk ZHJlc3MNCiAgIHBvb2wgYW5kIGFsbG9jYXRpb24gYWxnb3JpdGhtIG9mIHRoZSBESENQIHNlcnZl ciBjYXJlZnVsbHkuDQoNCjE5LiBCaW5kaW5nIE51bWJlciBMaW1pdGF0aW9uDQoNCiAgIEl0IGlz IHN1Z2dlc3RlZCB0byBjb25maWd1cmUgc29tZSBtZWNoYW5pc20gaW4gb3JkZXIgdG8gcHJldmVu dCBhDQogICBzaW5nbGUgbm9kZSBmcm9tIGV4aGF1c3RpbmcgdGhlIGJpbmRpbmcgdGFibGUgZW50 cmllcyBvbiB0aGUgU0FWSQ0KICAgZGV2aWNlLiBFaXRoZXIgb2YgdGhlIGZvbGxvd2luZyBtZWNo YW5pc20gaXMgc3VmZmljaWVudCB0byBwcmV2ZW50DQogICBzdWNoIGF0dGFjay4NCg0KICAgMS4g U2V0IHRoZSB1cHBlciBib3VuZCBvZiBiaW5kaW5nIG51bWJlciBmb3IgZWFjaCBhbmNob3Igd2l0 aCBTQVZJLQ0KICAgICAgSG9zdCBvciBTQVZJLVBvbHkgYXR0cmlidXRlLg0KDQogICAyLiBSZXNl cnZlIGEgbnVtYmVyIG9mIGJpbmRpbmcgZW50cmllcyBmb3IgZWFjaCBhbmNob3Igd2l0aCBTQVZJ LUhvc3QNCiAgICAgIG9yIFNBVkktUG9seSBhdHRyaWJ1dGUgYW5kIGFsbCBhbmNob3JzIHNoYXJl IGEgcG9vbCBvZiB0aGUgb3RoZXINCiAgICAgIGJpbmRpbmcgZW50cmllcy4NCg0KICAgMy4gTGlt aXQgREhDUCBSZXF1ZXN0IHJhdGUgcGVyIGFuY2hvciwgdXNpbmcgdGhlIGJvdW5kIGVudHJ5IG51 bWJlcg0KICAgICAgb2YgZWFjaCBhbmNob3IgYXMgcmV2ZXJzZSBpbmRpY2F0b3IuDQoNCjIwLiBN TEQgQ29uc2lkZXJhdGlvbg0KDQogICBUaGUgU0FWSSBkZXZpY2UgTVVTVCBqb2luIHRoZSB0ZW50 YXRpdmUgYWRkcmVzcyBtdWx0aWNhc3QgZ3JvdXANCiAgIHdoZW5ldmVyIHBlcmZvcm0gZHVwbGlj YXRlIGRldGVjdGlvbiBvbiBiZWhhdmlvciBvZiBob3N0Lg0KDQoyMS4gQ29uc3RhbnRzDQoNCiAg IE1BWF9ESENQX1JFU1BPTlNFX1RJTUUgICAgIDEyMHMNCg0KICAgTUFYX0FSUF9QUkVQQVJFX0RF TEFZICAgICAgRGVmYXVsdCAxcyBidXQgY29uZmlndXJhYmxlDQoNCiAgIE1BWF9BUlBfREVMQVkg ICAgICAgICAgICAgIERlZmF1bHQgMXMgYnV0IGNvbmZpZ3VyYWJsZQ0KDQogICBNQVhfREFEX1BS RVBBUkVfREVMQVkgICAgICBEZWZhdWx0IDFzIGJ1dCBjb25maWd1cmFibGUNCg0KICAgTUFYX0RB RF9ERUxBWSAgICAgICAgICAgICAgRGVmYXVsdCAxcyBidXQgY29uZmlndXJhYmxlDQoNCg0KDQpC aSAgICAgICAgICAgICAgICAgICAgICBFeHBpcmVzIE1heSA5LCAyMDEwICAgICAgICAgICAgICAg ICBbUGFnZSAxN10NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgIHNhdmktZGhjcCAg ICAgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMDkNCg0KDQoyMi4gU3VtbWFyeSBvZiB0by1iZS1y ZW1vdmVkIHNlY3Rpb25zIGFuZCBvcGVuIGlzc3Vlcw0KDQogICBUby1iZS1yZW1vdmVkIHNlY3Rp b25zOg0KDQogICAxLiBTZWN0aW9uIDY6IENvbmNlcHR1YWwgZGF0YSBzdHJ1Y3R1cmVzDQoNCiAg IDIuIFNlY3Rpb24gODogREhDUCBzY2VuYXJpbw0KDQogICAzLiBQYXJ0IG9mIFNlY3Rpb24gOTog QW5jaG9yIGF0dHJpYnV0ZXMNCg0KICAgNC4gU2VjdGlvbiAxMDogUHJlZml4IGNvbmZpZ3VyYXRp b24NCg0KICAgT3BlbiBpc3N1ZXMgKGRpc2N1c3NlZCBidXQgbm90IGZpbmlzaGVkKToNCg0KICAg MS4gV2hldGhlciB0byBrZWVwIHN0YXRlIFNUQVJUDQoNCiAgICAgIFNob3VsZCB0aGUgcHJvY2Vk dXJlIGJlIGluaXRpYWxpemVkIGJhc2VkIG9uIGNsaWVudCByZXF1ZXN0IG9yDQogICAgICBzZXJ2 ZXIgcmVzcG9uc2U/DQoNCiAgICAgIEZyb20gRXJpYyBMZXZ5LUFiZWdub2xpIGFuZCBDaHJpc3Rp YW4gVm9ndC4NCg0KICAgMi4gV2hldGhlciB0byBrZWVwIHN0YXRlIERFVEVDVElPTg0KDQogICAg ICBTaG91bGQgREhDUCBpbnRlcmFjdCB3aXRoIE5EUCB0byBkZXRlY3QgY29sbGlzaW9uIG9yIHNo b3VsZCBhbGwNCiAgICAgIHRoZSBjb2xsaXNpb24gZGV0ZWN0aW9uIGJlIGxlZnQgdG8gTkRQIGFu ZCB0aGUgREhDUCBzb2x1dGlvbiBqdXN0DQogICAgICBzbm9vcCBESENQIG9ubHk/DQoNCiAgICAg IEZyb20gRXJpYyBMZXZ5LUFiZWdub2xpLg0KDQoyMy4gU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMN Cg0KICAgRm9yIHByZWZpeCBsZXZlbCBncmFudWxhcml0eSBmaWx0ZXJpbmcgaXMgdGhlIGJhc2lz IG9mIGhvc3QgbGV2ZWwNCiAgIGdyYW51bGFyaXR5IGZpbHRlcmluZywgdG8gbGVhcm4gYW5kIGNv bmZpZ3VyZSBjb3JyZWN0IHByZWZpeCBpcyBvZg0KICAgZ3JlYXQgaW1wb3J0YW5jZSB0byB0aGlz IG1lY2hhbmlzbS4gVGh1cywgaXQncyBpbXBvcnRhbnQgdG8ga2VlcCBSQQ0KICAgYW5kIERIQ1At UEQgc2VjdXJlLiBbZHJhZnQtaWV0Zi12Nm9wcy1yYS1ndWFyZC0wM10gZGVzY3JpYmVzIGENCiAg IG1lY2hhbmlzbSB0byBpbXByb3ZlIHRoZSBzZWN1cml0eSBvZiBSQSBtZXNzYWdlLg0KDQoyNC4g SUFOQSBDb25zaWRlcmF0aW9ucw0KDQogICBUaGVyZSBpcyBubyBJQU5BIGNvbnNpZGVyYXRpb24g Y3VycmVudGx5Lg0KDQoyNS4gUmVmZXJlbmNlcw0KDQoyNS4xLiBOb3JtYXRpdmUgUmVmZXJlbmNl cw0KDQogICBbUkZDMjExOV0gQnJhZG5lciwgUy4sICJLZXkgd29yZHMgZm9yIHVzZSBpbiBSRkNz IHRvIEluZGljYXRlDQogICAgICAgICAgICAgUmVxdWlyZW1lbnQgTGV2ZWxzIiwgQkNQIDE0LCBS RkMgMjExOSwgTWFyY2ggMTk5Ny4NCg0KDQpCaSAgICAgICAgICAgICAgICAgICAgICBFeHBpcmVz IE1heSA5LCAyMDEwICAgICAgICAgICAgICAgICBbUGFnZSAxOF0NCgwNCkludGVybmV0LURyYWZ0 ICAgICAgICAgICAgICAgIHNhdmktZGhjcCAgICAgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMDkN Cg0KDQogICBbUkZDNDg2Ml0gVGhvbXNvbiwgUy4sIE5hcnRlbiwgVC4gYW5kIEppbm1laSwgVC4s ICJJUHY2IFN0YXRlbGVzcw0KICAgICAgICAgICAgIEF1dG9jb25maWd1cmF0aW9uIiwgUkZDNDg2 MiwgU2VwdGVtYmVyLCAyMDA3Lg0KDQogICBbUkZDNTIyN10gUy4gQ2hlc2hpcmUsICJJUHY0IEFk ZHJlc3MgQ29uZmxpY3QgRGV0ZWN0aW9uIiwgUkZDNTIyNywNCiAgICAgICAgICAgICBKdWx5IDIw MDguDQoNCg0KDQoyNS4yLiBJbmZvcm1hdGl2ZSBSZWZlcmVuY2VzDQoNCjI2LiBBY2tub3dsZWRn bWVudHMNCg0KVGhhbmtzIHRvIENocmlzdGlhbiBWb2d0LCBFcmljIExldnktQWJlZ25vbGksIE1h cmsgV2lsbGlhbXMsIEVyaWsNCk5vcmRtYXJrLCBNYXJjZWxvIEJhZ251bG8gQnJhdW4sIEFsYmVy dG8gR2FyY2lhLCBKYXJpIEFya2tvLCBEYXZpZA0KSGFycmluZ3RvbiwgUGVra2EgU2F2b2xhLCBY aW5nIExpLCBMaXhpYSBaaGFuZywgUm9iZXJ0IFJhc3p1aywgR3JlZw0KRGFsZXksIEpvZWwgTS4g SGFscGVybiBhbmQgVGFvIExpbiBmb3IgdGhlaXIgdmFsdWFibGUgY29udHJpYnV0aW9ucy4NCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQpCaSAgICAgICAgICAgICAgICAgICAgICBFeHBpcmVzIE1heSA5LCAyMDEwICAgICAgICAg ICAgICAgICBbUGFnZSAxOV0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgIHNhdmkt ZGhjcCAgICAgICAgICAgICAgICAgIE5vdmVtYmVyIDIwMDkNCg0KDQpBdXRob3JzJyBBZGRyZXNz ZXMNCg0KICAgSnVuIEJpDQogICBDRVJORVQNCiAgIE5ldHdvcmsgUmVzZWFyY2ggQ2VudGVyLCBU c2luZ2h1YSBVbml2ZXJzaXR5DQogICBCZWlqaW5nIDEwMDA4NA0KICAgQ2hpbmENCiAgIEVtYWls OiBqdW5iaUBjZXJuZXQuZWR1LmNuDQoNCiAgIEppYW5waW5nIFd1DQogICBDRVJORVQNCiAgIENv bXB1dGVyIFNjaWVuY2UsIFRzaW5naHVhIFVuaXZlcnNpdHkNCiAgIEJlaWppbmcgMTAwMDg0DQog ICBDaGluYQ0KICAgRW1haWw6IGppYW5waW5nQGNlcm5ldC5lZHUuY24NCg0KICAgR3VhbmcgWWFv DQogICBDRVJORVQNCiAgIE5ldHdvcmsgUmVzZWFyY2ggQ2VudGVyLCBUc2luZ2h1YSBVbml2ZXJz aXR5DQogICBCZWlqaW5nIDEwMDA4NA0KICAgQ2hpbmENCiAgIEVtYWlsOiB5YW9nQG5ldGFyY2hs YWIudHNpbmdodWEuZWR1LmNuDQoNCg0KICAgRnJlZCBCYWtlcg0KICAgQ2lzY28gU3lzdGVtcw0K ICAgRW1haWw6IGZyZWRAY2lzY28uY29tDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQpCaSAgICAgICAgICAgICAgICAgICAgICBFeHBpcmVzIE1heSA5LCAyMDEwICAg ICAgICAgICAgICAgICBbUGFnZSAyMF0NCgwNCg== --_002_4432803818404B14B616CF33E023FBC6ericssoncom_-- From miw@computer.org Mon Nov 9 03:08:54 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8B6733A680D for ; Mon, 9 Nov 2009 03:08:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UK+-qpr+xlkp for ; Mon, 9 Nov 2009 03:08:53 -0800 (PST) Received: from out4.smtp.messagingengine.com (out4.smtp.messagingengine.com [66.111.4.28]) by core3.amsl.com (Postfix) with ESMTP id 0FC523A684F for ; Mon, 9 Nov 2009 03:08:53 -0800 (PST) Received: from compute1.internal (compute1.internal [10.202.2.41]) by gateway1.messagingengine.com (Postfix) with ESMTP id B804BBD4FA; Mon, 9 Nov 2009 06:09:17 -0500 (EST) Received: from heartbeat1.messagingengine.com ([10.202.2.160]) by compute1.internal (MEProxy); Mon, 09 Nov 2009 06:09:17 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=messagingengine.com; h=message-id:date:from:reply-to:mime-version:to:cc:subject:references:in-reply-to:content-type; s=smtpout; bh=oq462sLZWB9dwuHPFFu9LCpezsA=; b=rvRllRJa2yHMQkhrT7nc6BSxU8zorF59+nZvAwQYUPbpRbl+LlVvbyAldiDGnPzwtHRTmYxowulIpQBLxHdW43PXd2IC1BI34KXV78WMCm4ceYKyB5dH6+OUgIMHWUGPuR3lkkcsEeuq9GfTl6WgcqgC2zjYiCbt9Sa6GMYQxNY= X-Sasl-enc: 2w3jKAcsuUYDhKAb7w9DQ+GIrZh7qfG9QEqThFee0llG 1257764957 Received: from [172.23.4.107] (nat-service4.juniper.net [66.129.225.151]) by mail.messagingengine.com (Postfix) with ESMTPSA id 687264A97CB; Mon, 9 Nov 2009 06:09:16 -0500 (EST) Message-ID: <4AF7F859.70005@computer.org> Date: Mon, 09 Nov 2009 19:09:13 +0800 From: Mark Williams User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.4pre) Gecko/20090915 Thunderbird/3.0b4 MIME-Version: 1.0 To: Christian Vogt References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> In-Reply-To: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> Content-Type: multipart/alternative; boundary="------------020802070906020405090807" Cc: SAVI Mailing List , Guang Yao Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: miw@computer.org List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2009 11:08:54 -0000 This is a multi-part message in MIME format. --------------020802070906020405090807 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Yes Mark On 9/11/2009 6:44 PM, Christian Vogt wrote: > Folks - > > During the SAVI working group meeting today, we made a consensus check > about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group > document, showing a clear majority of attendees in favor. I would now > like to initiate a confirming consensus call here on the mailing list. > > Please answer the following question with either "yes" or "no": > > Should the SAVI working group adopt Internet draft > "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol > specification for DHCP-assigned IP addresses? > > Please respond before Friday, November 20. I am attaching Internet > draft "draft-bi-savi-dhcp-00" for your convenience. > > - Christian > > > > > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > --------------020802070906020405090807 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Yes

Mark

On 9/11/2009 6:44 PM, Christian Vogt wrote: 
Folks -

During the SAVI working group meeting today, we made a consensus check
about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group
document, showing a clear majority of attendees in favor.  I would now
like to initiate a confirming consensus call here on the mailing list.

Please answer the following question with either "yes" or "no":

   Should the SAVI working group adopt Internet draft
   "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol
   specification for DHCP-assigned IP addresses?

Please respond before Friday, November 20.  I am attaching Internet
draft "draft-bi-savi-dhcp-00" for your convenience.

- Christian


  

_______________________________________________
savi mailing list
savi@ietf.org
https://www.ietf.org/mailman/listinfo/savi
--------------020802070906020405090807-- From jmh@joelhalpern.com Mon Nov 9 05:22:52 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 933253A683B for ; Mon, 9 Nov 2009 05:22:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.47 X-Spam-Level: X-Spam-Status: No, score=-3.47 tagged_above=-999 required=5 tests=[AWL=0.129, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4DuUnpwzQwyk for ; Mon, 9 Nov 2009 05:22:51 -0800 (PST) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id D1F163A67E2 for ; Mon, 9 Nov 2009 05:22:51 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id 5E5834302AF; Mon, 9 Nov 2009 05:23:18 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [133.93.112.158] (host-112-158.meeting.ietf.org [133.93.112.158]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id 913AA4302A0; Mon, 9 Nov 2009 05:23:17 -0800 (PST) Message-ID: <4AF817C5.60509@joelhalpern.com> Date: Mon, 09 Nov 2009 08:23:17 -0500 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Christian Vogt References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> In-Reply-To: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: SAVI Mailing List , Guang Yao Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2009 13:22:52 -0000 Yes, the working group should adopt this document as the starting point for our work on this topic. Yours, Joel M. Halpern Christian Vogt wrote: > Folks - > > During the SAVI working group meeting today, we made a consensus check > about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group > document, showing a clear majority of attendees in favor. I would now > like to initiate a confirming consensus call here on the mailing list. > > Please answer the following question with either "yes" or "no": > > Should the SAVI working group adopt Internet draft > "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol > specification for DHCP-assigned IP addresses? > > Please respond before Friday, November 20. I am attaching Internet > draft "draft-bi-savi-dhcp-00" for your convenience. > > - Christian > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi From xiayangsong@huawei.com Mon Nov 9 07:37:08 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 42D1E3A68D2 for ; Mon, 9 Nov 2009 07:37:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.406 X-Spam-Level: X-Spam-Status: No, score=-2.406 tagged_above=-999 required=5 tests=[AWL=0.192, BAYES_00=-2.599, STOX_REPLY_TYPE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p3NQQPfGUJb5 for ; Mon, 9 Nov 2009 07:37:07 -0800 (PST) Received: from usaga04-in.huawei.com (usaga04-in.huawei.com [206.16.17.180]) by core3.amsl.com (Postfix) with ESMTP id 701333A684A for ; Mon, 9 Nov 2009 07:37:07 -0800 (PST) Received: from huawei.com (usaga04-in [172.18.4.101]) by usaga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KSU004J1M2KCZ@usaga04-in.huawei.com> for savi@ietf.org; Mon, 09 Nov 2009 09:37:33 -0600 (CST) Received: from X24512z ([10.124.12.62]) by usaga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KSU002F5M2JAL@usaga04-in.huawei.com> for savi@ietf.org; Mon, 09 Nov 2009 09:37:32 -0600 (CST) Date: Mon, 09 Nov 2009 09:37:30 -0600 From: Frank Xia To: Christian Vogt , SAVI Mailing List Message-id: <005e01ca6152$8d8cade0$3e0c7c0a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Outlook Express 6.00.2900.3598 Content-type: text/plain; format=flowed; charset=iso-8859-1; reply-type=original Content-transfer-encoding: 7BIT X-Priority: 3 X-MSMail-priority: Normal References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> Cc: Guang Yao Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2009 15:37:08 -0000 Hi Christian I am fine with adopting this document as a WG draft. However, this draft, imho, is limited when applying for public access networks, especially broadband networks. I would like to ask WG to consider to adopt DHCP-PD based solution as a compliment. http://tools.ietf.org/id/draft-kaippallimalil-savi-dhcp-pd-00.txt BR Frank ----- Original Message ----- From: "Christian Vogt" To: "SAVI Mailing List" Cc: "Guang Yao" Sent: Monday, November 09, 2009 4:44 AM Subject: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 Folks - During the SAVI working group meeting today, we made a consensus check about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group document, showing a clear majority of attendees in favor. I would now like to initiate a confirming consensus call here on the mailing list. Please answer the following question with either "yes" or "no": Should the SAVI working group adopt Internet draft "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol specification for DHCP-assigned IP addresses? Please respond before Friday, November 20. I am attaching Internet draft "draft-bi-savi-dhcp-00" for your convenience. - Christian -------------------------------------------------------------------------------- > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > From jmh@joelhalpern.com Mon Nov 9 14:10:53 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 421F528C246 for ; Mon, 9 Nov 2009 14:10:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.507 X-Spam-Level: X-Spam-Status: No, score=-3.507 tagged_above=-999 required=5 tests=[AWL=0.092, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XPxvdqgTiK2Q for ; Mon, 9 Nov 2009 14:10:51 -0800 (PST) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id 71FD228C1E9 for ; Mon, 9 Nov 2009 14:10:51 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id 5DB6643044A; Mon, 9 Nov 2009 14:11:18 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [133.93.112.158] (host-112-158.meeting.ietf.org [133.93.112.158]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id 831B143041F; Mon, 9 Nov 2009 14:11:17 -0800 (PST) Message-ID: <4AF89385.1040604@joelhalpern.com> Date: Mon, 09 Nov 2009 17:11:17 -0500 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Frank Xia References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> <005e01ca6152$8d8cade0$3e0c7c0a@china.huawei.com> In-Reply-To: <005e01ca6152$8d8cade0$3e0c7c0a@china.huawei.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: SAVI Mailing List , Christian Vogt , Guang Yao Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2009 22:10:53 -0000 You make a good argument in your draft that we need to support SAVI applied to prefixes delegated with DHCP to CPE rotuers. If we do need to handle it, I would ask that we still have only one document that describes DHCP handling. This would include describing how the SAVI devices knows which mode is applicable (either by configuration or by sniffing, if that is effective.) I think it would do the group a disservice, and confuse readers, if we had two different DHCP documents for different cases. Yours, Joel Frank Xia wrote: > Hi Christian > > I am fine with adopting this document as a WG draft. > > However, this draft, imho, is limited when applying > for public access networks, especially broadband networks. > > I would like to ask WG to consider to adopt > DHCP-PD based solution as a compliment. > http://tools.ietf.org/id/draft-kaippallimalil-savi-dhcp-pd-00.txt > > BR > Frank > > ----- Original Message ----- From: "Christian Vogt" > > To: "SAVI Mailing List" > Cc: "Guang Yao" > Sent: Monday, November 09, 2009 4:44 AM > Subject: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 > > > Folks - > > During the SAVI working group meeting today, we made a consensus check > about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group > document, showing a clear majority of attendees in favor. I would now > like to initiate a confirming consensus call here on the mailing list. > > Please answer the following question with either "yes" or "no": > > Should the SAVI working group adopt Internet draft > "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol > specification for DHCP-assigned IP addresses? > > Please respond before Friday, November 20. I am attaching Internet > draft "draft-bi-savi-dhcp-00" for your convenience. > > - Christian > > > > > > -------------------------------------------------------------------------------- > > > >> _______________________________________________ >> savi mailing list >> savi@ietf.org >> https://www.ietf.org/mailman/listinfo/savi >> > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > From xiayangsong@huawei.com Mon Nov 9 14:42:56 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DB56F28C263 for ; Mon, 9 Nov 2009 14:42:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.416 X-Spam-Level: X-Spam-Status: No, score=-2.416 tagged_above=-999 required=5 tests=[AWL=0.183, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ijoNcG3OxaNS for ; Mon, 9 Nov 2009 14:42:56 -0800 (PST) Received: from usaga02-in.huawei.com (usaga02-in.huawei.com [206.16.17.70]) by core3.amsl.com (Postfix) with ESMTP id ECE6128C0E3 for ; Mon, 9 Nov 2009 14:42:55 -0800 (PST) Received: from huawei.com (localhost [127.0.0.1]) by usaga02-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KSV00IVA5S9V0@usaga02-in.huawei.com> for savi@ietf.org; Mon, 09 Nov 2009 14:43:22 -0800 (PST) Received: from X24512z ([10.124.12.62]) by usaga02-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KSV00HAA5S98F@usaga02-in.huawei.com> for savi@ietf.org; Mon, 09 Nov 2009 14:43:21 -0800 (PST) Date: Mon, 09 Nov 2009 16:43:20 -0600 From: Frank Xia To: "Joel M. Halpern" Message-id: <000a01ca618e$097a9800$3e0c7c0a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Outlook Express 6.00.2900.3598 Content-type: text/plain; format=flowed; charset=ISO-8859-1; reply-type=response Content-transfer-encoding: 7BIT X-Priority: 3 X-MSMail-priority: Normal References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> <005e01ca6152$8d8cade0$3e0c7c0a@china.huawei.com> <4AF89385.1040604@joelhalpern.com> Cc: SAVI Mailing List , Christian Vogt , Guang Yao Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2009 22:42:56 -0000 Hi Joel Thank your comments. Please see my response. BR Frank ----- Original Message ----- From: "Joel M. Halpern" To: "Frank Xia" Cc: "Christian Vogt" ; "SAVI Mailing List" ; "Guang Yao" Sent: Monday, November 09, 2009 4:11 PM Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 > You make a good argument in your draft that we need to support SAVI > applied to prefixes delegated with DHCP to CPE rotuers. Frank=>Thank you. This is a real deployment scenario for public access network. > > If we do need to handle it, I would ask that we still have only one > document that describes DHCP handling. This would include describing how > the SAVI devices knows which mode is applicable (either by configuration > or by sniffing, if that is effective.) Frank=>It is a little bit difficult to fit these two into one document. First of all, there are architctural difference. Secondly, if you look into the details of Bi's document, the whole state machine is not applicable to the scenario we mention. The reasons are CPE acting as a router terminates all ARP/DAD messages, and DHCP messages (RFC3315) are different from DHCP-PD (RFC3633). > > I think it would do the group a disservice, and confuse readers, if we had > two different DHCP documents for different cases. Frank=>We can document the relationship between the two documents. We can also try to keep these document consistent in style. > > Yours, > Joel > > Frank Xia wrote: >> Hi Christian >> >> I am fine with adopting this document as a WG draft. >> >> However, this draft, imho, is limited when applying >> for public access networks, especially broadband networks. >> >> I would like to ask WG to consider to adopt >> DHCP-PD based solution as a compliment. >> http://tools.ietf.org/id/draft-kaippallimalil-savi-dhcp-pd-00.txt >> >> BR >> Frank >> >> ----- Original Message ----- From: "Christian Vogt" >> >> To: "SAVI Mailing List" >> Cc: "Guang Yao" >> Sent: Monday, November 09, 2009 4:44 AM >> Subject: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 >> >> >> Folks - >> >> During the SAVI working group meeting today, we made a consensus check >> about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group >> document, showing a clear majority of attendees in favor. I would now >> like to initiate a confirming consensus call here on the mailing list. >> >> Please answer the following question with either "yes" or "no": >> >> Should the SAVI working group adopt Internet draft >> "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol >> specification for DHCP-assigned IP addresses? >> >> Please respond before Friday, November 20. I am attaching Internet >> draft "draft-bi-savi-dhcp-00" for your convenience. >> >> - Christian >> >> >> >> >> >> -------------------------------------------------------------------------------- >> >> >> >>> _______________________________________________ >>> savi mailing list >>> savi@ietf.org >>> https://www.ietf.org/mailman/listinfo/savi >>> >> >> _______________________________________________ >> savi mailing list >> savi@ietf.org >> https://www.ietf.org/mailman/listinfo/savi >> From jkaippal@huawei.com Mon Nov 9 15:02:31 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 886B83A69CA for ; Mon, 9 Nov 2009 15:02:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 014UUFFxu0jL for ; Mon, 9 Nov 2009 15:02:30 -0800 (PST) Received: from usaga03-in.huawei.com (usaga03-in.huawei.com [206.16.17.220]) by core3.amsl.com (Postfix) with ESMTP id C266D3A68F4 for ; Mon, 9 Nov 2009 15:02:30 -0800 (PST) Received: from huawei.com (usaga03-in [172.18.4.17]) by usaga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KSV00NKK6OW26@usaga03-in.huawei.com> for savi@ietf.org; Mon, 09 Nov 2009 17:02:57 -0600 (CST) Received: from Kaippal73647 (s78.GosakaFL6.vectant.ne.jp [202.215.111.78]) by usaga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KSV00AAW6OU54@usaga03-in.huawei.com> for savi@ietf.org; Mon, 09 Nov 2009 17:02:56 -0600 (CST) Date: Mon, 09 Nov 2009 17:02:51 -0600 From: John Kaippallimalil In-reply-to: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> To: 'Christian Vogt' , 'SAVI Mailing List' Message-id: <006001ca6190$c4f313d0$070310ac@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Office Outlook 11 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Thread-index: AcphKYykBweRl4U0TzWRbcJgNS7IOwAZw++g Cc: 'Guang Yao' Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2009 23:02:31 -0000 Yes. John K. -----Original Message----- From: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] On Behalf Of Christian Vogt Sent: Monday, November 09, 2009 4:45 AM To: SAVI Mailing List Cc: Guang Yao Subject: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 Folks - During the SAVI working group meeting today, we made a consensus check about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group document, showing a clear majority of attendees in favor. I would now like to initiate a confirming consensus call here on the mailing list. Please answer the following question with either "yes" or "no": Should the SAVI working group adopt Internet draft "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol specification for DHCP-assigned IP addresses? Please respond before Friday, November 20. I am attaching Internet draft "draft-bi-savi-dhcp-00" for your convenience. - Christian From marcelo@it.uc3m.es Mon Nov 9 15:25:31 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4B0803A69DF for ; Mon, 9 Nov 2009 15:25:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TTRqdmJ4bA4G for ; Mon, 9 Nov 2009 15:25:30 -0800 (PST) Received: from smtp02.uc3m.es (smtp02.uc3m.es [163.117.176.132]) by core3.amsl.com (Postfix) with ESMTP id 4AD403A69DA for ; Mon, 9 Nov 2009 15:25:30 -0800 (PST) Received: from host-17-49.meeting.ietf.org (host-17-49.meeting.ietf.org [133.93.17.49]) by smtp02.uc3m.es (Postfix) with ESMTP id 61E196C2BB5 for ; Tue, 10 Nov 2009 00:25:53 +0100 (CET) Message-ID: <4AF8A4FF.5050803@it.uc3m.es> Date: Tue, 10 Nov 2009 00:25:51 +0100 From: marcelo bagnulo braun User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) MIME-Version: 1.0 To: SAVI Mailing List References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> <4AF817C5.60509@joelhalpern.com> In-Reply-To: <4AF817C5.60509@joelhalpern.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-TM-AS-Product-Ver: IMSS-7.0.0.3116-6.0.0.1038-17000.002 Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2009 23:25:31 -0000 I also support adopting this document as a WG item Joel M. Halpern escribió: > Yes, the working group should adopt this document as the starting > point for our work on this topic. > > Yours, > Joel M. Halpern > > Christian Vogt wrote: >> Folks - >> >> During the SAVI working group meeting today, we made a consensus check >> about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group >> document, showing a clear majority of attendees in favor. I would now >> like to initiate a confirming consensus call here on the mailing list. >> >> Please answer the following question with either "yes" or "no": >> >> Should the SAVI working group adopt Internet draft >> "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol >> specification for DHCP-assigned IP addresses? >> >> Please respond before Friday, November 20. I am attaching Internet >> draft "draft-bi-savi-dhcp-00" for your convenience. >> >> - Christian >> >> >> >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> savi mailing list >> savi@ietf.org >> https://www.ietf.org/mailman/listinfo/savi > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > From junbi@tsinghua.edu.cn Mon Nov 9 15:26:48 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 64D5C3A6808 for ; Mon, 9 Nov 2009 15:26:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.104 X-Spam-Level: X-Spam-Status: No, score=-1.104 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, DNS_FROM_RFC_DSN=1.495] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TnS8ANDoPxBA for ; Mon, 9 Nov 2009 15:26:47 -0800 (PST) Received: from smtp.tsinghua.edu.cn (smtp.tsinghua.edu.cn [166.111.8.81]) by core3.amsl.com (Postfix) with ESMTP id A4C5828C0DC for ; Mon, 9 Nov 2009 15:26:46 -0800 (PST) Received: from host-112-217.meeting.ietf.org ([133.93.112.217] helo=junbiVAIO) by smtp.tsinghua.edu.cn with esmtpa (Exim 4.69) (envelope-from ) id 1N7ddY-0007bn-35; Tue, 10 Nov 2009 07:27:04 +0800 Message-ID: <2F0056B4E2664BD7B8065122656DEE46@junbiVAIO> From: "Jun Bi" To: "Frank Xia" , "Joel M. Halpern" References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com><005e01ca6152$8d8cade0$3e0c7c0a@china.huawei.com><4AF89385.1040604@joelhalpern.com> <000a01ca618e$097a9800$3e0c7c0a@china.huawei.com> In-Reply-To: <000a01ca618e$097a9800$3e0c7c0a@china.huawei.com> Date: Tue, 10 Nov 2009 08:27:04 +0900 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=response Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal Importance: Normal X-Mailer: Microsoft Windows Live Mail 14.0.8064.206 X-MIMEOLE: Produced By Microsoft MimeOLE V14.0.8064.206 Cc: SAVI Mailing List , Christian Vogt , Guang Yao Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2009 23:26:48 -0000 -------------------------------------------------- From: "Frank Xia" Sent: Tuesday, November 10, 2009 7:43 AM To: "Joel M. Halpern" Cc: "SAVI Mailing List" ; "Christian Vogt" ; "Guang Yao" Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 > Hi Joel > > Thank your comments. > Please see my response. > > BR > Frank > > ----- Original Message ----- > From: "Joel M. Halpern" > To: "Frank Xia" > Cc: "Christian Vogt" ; "SAVI Mailing List" > ; "Guang Yao" > Sent: Monday, November 09, 2009 4:11 PM > Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 > > >> You make a good argument in your draft that we need to support SAVI >> applied to prefixes delegated with DHCP to CPE rotuers. > Frank=>Thank you. This is a real deployment scenario for public > access network. > >> >> If we do need to handle it, I would ask that we still have only one >> document that describes DHCP handling. This would include describing how >> the SAVI devices knows which mode is applicable (either by configuration >> or by sniffing, if that is effective.) > Frank=>It is a little bit difficult to fit these two into one document. > First of all, there are architctural difference. Secondly, if you look > into the details of Bi's document, the whole state machine is not > applicable to the scenario we mention. The reasons are CPE acting > as a router terminates all ARP/DAD messages, and DHCP messages > (RFC3315) are different from DHCP-PD (RFC3633). Agree. My consideration is that: in the most cases, the two documents will be implemented by different products (switch for Enterprise networks, campus networks vs. devices for broadband networks). If we mixed both of them, it might make the draft too complex, and the vendors will actually implement different part of the mixed document. >> >> I think it would do the group a disservice, and confuse readers, if we >> had two different DHCP documents for different cases. > Frank=>We can document the relationship between the two documents. > We can also try to keep these document consistent in style. > Joel raised a good question that we should not confuse readers. I agree with Frank's suggestion. We'd like to collaborate with Frank Xia and John Kaippallimalil, the relationship could be considered as a part of the framework, and we will work with them to keep these document consistent. thanks, Jun >> >> Yours, >> Joel >> >> Frank Xia wrote: >>> Hi Christian >>> >>> I am fine with adopting this document as a WG draft. >>> >>> However, this draft, imho, is limited when applying >>> for public access networks, especially broadband networks. >>> >>> I would like to ask WG to consider to adopt >>> DHCP-PD based solution as a compliment. >>> http://tools.ietf.org/id/draft-kaippallimalil-savi-dhcp-pd-00.txt >>> >>> BR >>> Frank >>> >>> ----- Original Message ----- From: "Christian Vogt" >>> >>> To: "SAVI Mailing List" >>> Cc: "Guang Yao" >>> Sent: Monday, November 09, 2009 4:44 AM >>> Subject: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 >>> >>> >>> Folks - >>> >>> During the SAVI working group meeting today, we made a consensus check >>> about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group >>> document, showing a clear majority of attendees in favor. I would now >>> like to initiate a confirming consensus call here on the mailing list. >>> >>> Please answer the following question with either "yes" or "no": >>> >>> Should the SAVI working group adopt Internet draft >>> "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol >>> specification for DHCP-assigned IP addresses? >>> >>> Please respond before Friday, November 20. I am attaching Internet >>> draft "draft-bi-savi-dhcp-00" for your convenience. >>> >>> - Christian >>> >>> >>> >>> >>> >>> -------------------------------------------------------------------------------- >>> >>> >>> >>>> _______________________________________________ >>>> savi mailing list >>>> savi@ietf.org >>>> https://www.ietf.org/mailman/listinfo/savi >>>> >>> >>> _______________________________________________ >>> savi mailing list >>> savi@ietf.org >>> https://www.ietf.org/mailman/listinfo/savi >>> > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > From lint@h3c.com Mon Nov 9 17:40:31 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 70B0C28C197 for ; Mon, 9 Nov 2009 17:40:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.352 X-Spam-Level: * X-Spam-Status: No, score=1.352 tagged_above=-999 required=5 tests=[AWL=1.847, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U7XDnDeRTMhZ for ; Mon, 9 Nov 2009 17:40:30 -0800 (PST) Received: from huawei-3com.com (unknown [60.191.123.56]) by core3.amsl.com (Postfix) with ESMTP id 8F9183A68E0 for ; Mon, 9 Nov 2009 17:40:29 -0800 (PST) Received: from huawei-3com.com (localhost [127.0.0.1]) by h3cml02-in.huawei-3com.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0KSV00IF5EFTKS@h3cml02-in.huawei-3com.com> for savi@ietf.org; Tue, 10 Nov 2009 09:50:17 +0800 (CST) Received: from h3cmta02-ds.h3c.com ([172.25.12.70]) by h3cml02-in.huawei-3com.com (iPlanet Messaging Server 5.2 HotFix 1.25 (built Mar 3 2004)) with ESMTP id <0KSV00IRYEFTFR@h3cml02-in.huawei-3com.com> for savi@ietf.org; Tue, 10 Nov 2009 09:50:17 +0800 (CST) Received: from smtp2.h3c.com ([172.25.14.252]) by h3cmta02-ds.h3c.com (Lotus Domino Release 8.5FP1) with ESMTP id 2009111009365590-748461 ; Tue, 10 Nov 2009 09:36:55 +0800 Received: from unknown (HELO l00450) ([10.153.17.51]) by smtp2.h3c.com with ESMTP; Tue, 10 Nov 2009 09:38:29 +0800 Date: Tue, 10 Nov 2009 09:39:40 +0800 From: Lin Tao To: Christian Vogt , SAVI Mailing List Message-id: <006101ca61a6$ac1fc8b0$3311990a@h3c.huawei3com.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Outlook Express 6.00.2900.3598 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-Priority: 3 (Normal) X-MSMail-priority: Normal X-MIMETrack: Itemize by SMTP Server on h3cmta02-ds/h3c(Release 8.5FP1|June 15, 2009) at 2009-11-10 09:36:55, Serialize by Router on h3cmta02-ds/h3c(Release 8.5FP1|June 15, 2009) at 2009-11-10 09:36:56, Serialize complete at 2009-11-10 09:36:56 References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> Cc: Guang Yao Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 01:40:31 -0000 Yes! Yours' Tao ----- Original Message ----- From: "Christian Vogt" To: "SAVI Mailing List" Cc: "Guang Yao" Sent: Monday, November 09, 2009 6:44 PM Subject: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 Folks - During the SAVI working group meeting today, we made a consensus check about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group document, showing a clear majority of attendees in favor. I would now like to initiate a confirming consensus call here on the mailing list. Please answer the following question with either "yes" or "no": Should the SAVI working group adopt Internet draft "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol specification for DHCP-assigned IP addresses? Please respond before Friday, November 20. I am attaching Internet draft "draft-bi-savi-dhcp-00" for your convenience. - Christian -------------------------------------------------------------------------------- > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > From jeanmichel.combes@gmail.com Mon Nov 9 18:20:24 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B43D43A67A2 for ; Mon, 9 Nov 2009 18:20:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rMZhO3WvLLdx for ; Mon, 9 Nov 2009 18:20:24 -0800 (PST) Received: from mail-iw0-f202.google.com (mail-iw0-f202.google.com [209.85.223.202]) by core3.amsl.com (Postfix) with ESMTP id EE5B83A676A for ; Mon, 9 Nov 2009 18:20:23 -0800 (PST) Received: by iwn40 with SMTP id 40so3063198iwn.32 for ; Mon, 09 Nov 2009 18:20:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=0NbrxGnRZXcrutmegqqTjTidyqGoPtTGR3M4LKxDPCs=; b=M/mD4k6GYypiZF1X90qYE1yMTPRNjlptaNY3WuIIpJHcbbgOH0sLerVe1nrUGOjro0 XjKL229YEZAv4ntAPwiusadJI7EpKxut/GqikplGCwy2JO/wqTYBmSpoj96skB5kUEv5 MqSvDobRqoUc2ltEizsuXzHC1O/BsvbDJspdY= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=boSaV3SCDDJuA3TLiy2AqPZAPkvDtu+3vfc8fgxFN4nehHFapJ1u/iT7AMGt/L3++F 4DKwOiaZ5lcvYGeMJk8Ga5A44mKOjjs5tTf/A+bbGLOdy+d42O+KLjRc628jwCopLA5b H3CkskgA98OdPuE7IDKDsETOW5kSJoZZja0qY= MIME-Version: 1.0 Received: by 10.231.24.208 with SMTP id w16mr894412ibb.38.1257819647505; Mon, 09 Nov 2009 18:20:47 -0800 (PST) Date: Tue, 10 Nov 2009 03:20:47 +0100 Message-ID: <729b68be0911091820t53301ed0s355a748f6fcb05b5@mail.gmail.com> From: Jean-Michel Combes To: savi@ietf.org Content-Type: text/plain; charset=ISO-8859-1 Subject: [savi] IKEv2 address assignment method and SAVI X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 02:20:24 -0000 Hi, as promised yesterday, here is an email regarding IKEv2 address assignment method and SAVI interaction. The scenario I have in mind is concerning Mobile IPv6 bootstrapping [RFC5026] where the Home Agent (HA) is providing the Home Address (HoA) to the Mobile Node (MN) via IKEv2. I assume the following architecture where the HA is the default router (and also a SAVI device) and the MN is on a Foreign Network (i.e. out of its Home Network). Internet-----MN | +----+ | HA | +----+ | --------------------------- Home Network | Node In this scenario, the HA will provide the HoA to the MN even if the MN is outside of its Home Network (the HoA is linked to the Home Network, i.e. the network prefix of the HoA is advertised on the Home Network). Unlike SLAAC or DHCP address assignment methods, there is no signaling on the Home Network (i.e. all the exchanges are done via IKEv2 directly between the HA and the MN) and there is no DAD process. The HA, as a SAVI device, should be able to block any flow coming from a Node on the Home Network that tries to spoof the MN's HoA and present proposals (i.e. FCFS, DHCP, SEND, etc.) may not be applied (worse, IMHO, FCFS mechanism may corrupt the SAVI policy database) because there is no signaling on the Home Network. Comments are welcome. Thanks in advance. Best regards. JMC. From jeanmichel.combes@gmail.com Mon Nov 9 19:17:20 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 030873A6824 for ; Mon, 9 Nov 2009 19:17:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 94aWmYhp-iyr for ; Mon, 9 Nov 2009 19:17:19 -0800 (PST) Received: from mail-iw0-f202.google.com (mail-iw0-f202.google.com [209.85.223.202]) by core3.amsl.com (Postfix) with ESMTP id 372DB3A686C for ; Mon, 9 Nov 2009 19:17:19 -0800 (PST) Received: by iwn40 with SMTP id 40so3100271iwn.32 for ; Mon, 09 Nov 2009 19:17:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=w1ODHVBSLg1qy6hsQ0X+72IgRemuEeKgShZ/n1FWZOE=; b=fZXbciRmf1YUxfqHpo4SUBTxkNxXHTd9WPvAxVNiYwkkD5vEad8CPCRGVa4tzlZxiW qonEwz730wBlb/9klKSSGvDQTmswCKoY0xSgxPxu0/B/i6cl8i0fIci/rHwc4UFNrtrJ woDAnPXUIDovUS4hh+3M0wpQyOznXrwShaLKM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=Pwt1VtT5YnumDgg429lnjN0Lmo9sFAk8gD9b2Y71bmD7Ocw3ieyixFJ6gpyYbvKNLP qddBCB5phY/T9BDDBKUqTXi3sAICCKPkzRQne6uFho573e2aeDqd6JMPNdzEygaS+5NM vesG8f9ntRTEXDjpCfZzcm2Px/f0EwPxeyNHc= MIME-Version: 1.0 Received: by 10.231.123.41 with SMTP id n41mr711640ibr.46.1257823063374; Mon, 09 Nov 2009 19:17:43 -0800 (PST) In-Reply-To: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> Date: Tue, 10 Nov 2009 04:17:43 +0100 Message-ID: <729b68be0911091917h50e2fc47nd7a47104f66d9dd8@mail.gmail.com> From: Jean-Michel Combes To: Christian Vogt Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: SAVI Mailing List , Guang Yao Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 03:17:20 -0000 Yes, I agree. Best regards. JMC. 2009/11/9 Christian Vogt : > Folks - > > During the SAVI working group meeting today, we made a consensus check > about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group > document, showing a clear majority of attendees in favor. =A0I would now > like to initiate a confirming consensus call here on the mailing list. > > Please answer the following question with either "yes" or "no": > > =A0 Should the SAVI working group adopt Internet draft > =A0 "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol > =A0 specification for DHCP-assigned IP addresses? > > Please respond before Friday, November 20. =A0I am attaching Internet > draft "draft-bi-savi-dhcp-00" for your convenience. > > - Christian > > > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > > From yaoa02@mails.tsinghua.edu.cn Mon Nov 9 20:36:43 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 50C573A6915 for ; Mon, 9 Nov 2009 20:36:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.415 X-Spam-Level: X-Spam-Status: No, score=0.415 tagged_above=-999 required=5 tests=[BAYES_40=-0.185, J_CHICKENPOX_34=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z0vwHK3QWF3F for ; Mon, 9 Nov 2009 20:36:42 -0800 (PST) Received: from smtp.tsinghua.edu.cn (smtp.tsinghua.edu.cn [166.111.8.80]) by core3.amsl.com (Postfix) with ESMTP id 5BDB93A690B for ; Mon, 9 Nov 2009 20:36:41 -0800 (PST) Received: from host-18-196.meeting.ietf.org ([133.93.18.196] helo=yaoguangPC) by smtp.tsinghua.edu.cn with esmtpa (Exim 4.69) (envelope-from ) id 1N7iTW-0000u1-U1 for savi@ietf.org; Tue, 10 Nov 2009 12:37:03 +0800 From: "Guang Yao" To: References: <729b68be0911091820t53301ed0s355a748f6fcb05b5@mail.gmail.com> In-Reply-To: <729b68be0911091820t53301ed0s355a748f6fcb05b5@mail.gmail.com> Date: Tue, 10 Nov 2009 13:36:56 +0900 Message-ID: <004701ca61bf$6fda3660$4f8ea320$@tsinghua.edu.cn> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcphrHUU975y1uCZRAmKdXm/3Vh7SAAEssRw Content-Language: zh-cn Subject: Re: [savi] IKEv2 address assignment method and SAVI X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 04:36:43 -0000 Hi, JMC I really think this is an important scenario. And as a minor supplement, not only the HA should filter spoofing of HoA, but also the MN MUST permit the packets with source HoA(with no DAD or DHCP, either). I think this scenario should be included in the framework. Pre-registered address(static address, HoA), should have the highest priority. This means it cannot be hijacked using any other kind of mechanism, but only manual configuration on SAVI device. Best regards, Guang > -----Original Message----- > From: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] On Behalf Of > Jean-Michel Combes > Sent: Tuesday, November 10, 2009 11:21 AM > To: savi@ietf.org > Subject: [savi] IKEv2 address assignment method and SAVI > > Hi, > > as promised yesterday, here is an email regarding IKEv2 address > assignment method and SAVI interaction. The scenario I have in mind is > concerning Mobile IPv6 bootstrapping [RFC5026] where the Home Agent > (HA) is providing the Home Address (HoA) to the Mobile Node (MN) via > IKEv2. > > I assume the following architecture where the HA is the default router > (and also a SAVI device) and the MN is on a Foreign Network (i.e. out > of its Home Network). > > Internet-----MN > | > +----+ > | HA | > +----+ > | > --------------------------- Home Network > | > Node > > In this scenario, the HA will provide the HoA to the MN even if the MN > is outside of its Home Network (the HoA is linked to the Home Network, > i.e. the network prefix of the HoA is advertised on the Home Network). > Unlike SLAAC or DHCP address assignment methods, there is no signaling > on the Home Network (i.e. all the exchanges are done via IKEv2 > directly between the HA and the MN) and there is no DAD process. > > The HA, as a SAVI device, should be able to block any flow coming from > a Node on the Home Network that tries to spoof the MN's HoA and > present proposals (i.e. FCFS, DHCP, SEND, etc.) may not be applied > (worse, IMHO, FCFS mechanism may corrupt the SAVI policy database) > because there is no signaling on the Home Network. > > Comments are welcome. > > Thanks in advance. > > Best regards. > > JMC. > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi From yaoa02@mails.tsinghua.edu.cn Mon Nov 9 21:01:38 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A63853A69E3 for ; Mon, 9 Nov 2009 21:01:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.508 X-Spam-Level: X-Spam-Status: No, score=0.508 tagged_above=-999 required=5 tests=[AWL=-0.093, BAYES_50=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_32=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6+yZBzAwUQgG for ; Mon, 9 Nov 2009 21:01:34 -0800 (PST) Received: from smtp.tsinghua.edu.cn (smtp.tsinghua.edu.cn [166.111.8.80]) by core3.amsl.com (Postfix) with ESMTP id 88BC13A67CF for ; Mon, 9 Nov 2009 21:01:34 -0800 (PST) Received: from host-18-196.meeting.ietf.org ([133.93.18.196] helo=yaoguangPC) by smtp.tsinghua.edu.cn with esmtpa (Exim 4.69) (envelope-from ) id 1N7irb-0001S7-Kc; Tue, 10 Nov 2009 13:01:56 +0800 From: "Guang Yao" To: Date: Tue, 10 Nov 2009 14:01:48 +0900 Message-ID: <004f01ca61c2$e99f4780$bcddd680$@tsinghua.edu.cn> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0050_01CA620E.5986EF80" X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcphwugWTSNtRqkKQ7uTvBHVtSeLuw== Content-Language: zh-cn Subject: [savi] Add an IPv4 section into the SLAAC doc? X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 05:01:38 -0000 This is a multi-part message in MIME format. ------=_NextPart_000_0050_01CA620E.5986EF80 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Folks, This is a comment not made yesterday. Manually configured IPv4 address is not handled in any document currently. Manual configuration on SAVI device actually wouldn't handle the whole scenario, because it will only handle static configuration; however, IPv4 address may be configured freely in an allowed prefix scope, and there may be movement. As mention in the slides of Christian, this scenario is similar as stateless scenario. I suggest to add an IPv4 section into the SLAAC doc. Actually we have posted a proposal in the mailing list; unfortunately, without response. And Marcelo, I really think it is improper to name current SLAAC doc as FCFS. FCFS is a universal concept for SAVI. FCFS concept works not only in SLAAC scenario, but also other scenarios, including DHCP, mixed, even manual configuration. I mean, the one assigned an address first, always has the right to use the address in the lifetime. No address assignment mechanism can(or should) break this restrict, for there is no address recycle procedure that can be triggered other than timeout. I think the FCFS concept should be expatiated in the framework doc. And the SLAAC doc should be named "SLAAC". Best regards, Guang ------=_NextPart_000_0050_01CA620E.5986EF80 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Folks,

 

This is a comment not made = yesterday.

 

Manually configured IPv4 address = is not handled in any document currently. Manual configuration on SAVI device = actually wouldn’t handle the whole scenario, because it will only handle = static configuration; however, IPv4 address may be configured freely in an = allowed prefix scope, and there may be movement.

 

As mention in the slides of = Christian, this scenario is similar as stateless scenario. I suggest to add an IPv4 = section into the SLAAC doc. Actually we have posted a proposal in the mailing = list; unfortunately, without response.

 

And

Marcelo,

 

I really think it is improper to = name current SLAAC doc as FCFS. FCFS is a universal concept for SAVI. FCFS = concept works not only in SLAAC scenario, but also other scenarios, including = DHCP, mixed, even manual configuration. I mean, the one assigned an address first, = always has the right to use the address in the lifetime. No address assignment mechanism can(or should) break this restrict, for there is no address = recycle procedure that can be triggered other than timeout.

 

I think the FCFS concept should = be expatiated in the framework doc. And the SLAAC doc should be named = “SLAAC”.

 

Best = regards,

Guang

------=_NextPart_000_0050_01CA620E.5986EF80-- From elevyabe@cisco.com Tue Nov 10 00:00:53 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8D28E28C13E for ; Tue, 10 Nov 2009 00:00:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.558 X-Spam-Level: X-Spam-Status: No, score=-9.558 tagged_above=-999 required=5 tests=[AWL=1.041, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jtcWwYXXxlG5 for ; Tue, 10 Nov 2009 00:00:52 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id 1464728C12F for ; Tue, 10 Nov 2009 00:00:51 -0800 (PST) Authentication-Results: ams-iport-1.cisco.com; dkim=neutral (message not signed) header.i=none X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AjYAABKs+EqQ/uCWe2dsb2JhbACbfAEBFiQGqCWYA4Q+BA X-IronPort-AV: E=Sophos;i="4.44,715,1249257600"; d="scan'208";a="54023079" Received: from ams-core-1.cisco.com ([144.254.224.150]) by ams-iport-1.cisco.com with ESMTP; 10 Nov 2009 08:01:17 +0000 Received: from xbh-ams-101.cisco.com (xbh-ams-101.cisco.com [144.254.74.71]) by ams-core-1.cisco.com (8.13.8/8.14.3) with ESMTP id nAA81HRa022981; Tue, 10 Nov 2009 08:01:17 GMT Received: from xmb-ams-105.cisco.com ([144.254.74.80]) by xbh-ams-101.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 10 Nov 2009 09:01:17 +0100 Received: from [144.254.53.124] ([144.254.53.124]) by xmb-ams-105.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 10 Nov 2009 09:01:17 +0100 Message-ID: <4AF91DC7.2000600@cisco.com> Date: Tue, 10 Nov 2009 09:01:11 +0100 From: Eric Levy-Abegnoli User-Agent: Thunderbird 2.0.0.23 (Windows/20090812) MIME-Version: 1.0 To: Christian Vogt References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> In-Reply-To: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-OriginalArrivalTime: 10 Nov 2009 08:01:17.0439 (UTC) FILETIME=[FB3E80F0:01CA61DB] Cc: SAVI Mailing List , Guang Yao Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 08:00:53 -0000 Yes Eric Levy-Abegnoli Christian Vogt a écrit : > Folks - > > During the SAVI working group meeting today, we made a consensus check > about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group > document, showing a clear majority of attendees in favor. I would now > like to initiate a confirming consensus call here on the mailing list. > > Please answer the following question with either "yes" or "no": > > Should the SAVI working group adopt Internet draft > "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol > specification for DHCP-assigned IP addresses? > > Please respond before Friday, November 20. I am attaching Internet > draft "draft-bi-savi-dhcp-00" for your convenience. > > - Christian > > > > ------------------------------------------------------------------------ > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi From alberto@it.uc3m.es Tue Nov 10 02:12:31 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E26AC28C16D for ; Tue, 10 Nov 2009 02:12:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.299 X-Spam-Level: X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YcuRmxb-aIwo for ; Tue, 10 Nov 2009 02:12:29 -0800 (PST) Received: from smtp03.uc3m.es (smtp03.uc3m.es [163.117.176.133]) by core3.amsl.com (Postfix) with ESMTP id 3ABAC28C116 for ; Tue, 10 Nov 2009 02:12:28 -0800 (PST) X-uc3m-safe: yes Received: from bombo (bombo.it.uc3m.es [163.117.139.125]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by smtp03.uc3m.es (Postfix) with ESMTP id 55CB872E248; Tue, 10 Nov 2009 11:12:54 +0100 (CET) From: =?ISO-8859-15?Q?Alberto_Garc=EDa?= To: "'Christian Vogt'" , "'SAVI Mailing List'" References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> Date: Tue, 10 Nov 2009 11:12:54 +0100 Message-ID: <3E0C0102CF7E46F59C31557BBE81609C@bombo> MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-15" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 Thread-Index: AcphKYykBweRl4U0TzWRbcJgNS7IOwAw9ZQA X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579 In-Reply-To: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> X-TM-AS-Product-Ver: IMSS-7.0.0.3116-6.0.0.1038-17000.003 Cc: 'Guang Yao' Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 10:12:31 -0000 Yes, Regards, Alberto | -----Mensaje original----- | De: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] En nombre de | Christian Vogt | Enviado el: lunes, 09 de noviembre de 2009 11:45 | Para: SAVI Mailing List | CC: Guang Yao | Asunto: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 | | Folks - | | During the SAVI working group meeting today, we made a consensus check | about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group | document, showing a clear majority of attendees in favor. I would now | like to initiate a confirming consensus call here on the mailing list. | | Please answer the following question with either "yes" or "no": | | Should the SAVI working group adopt Internet draft | "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol | specification for DHCP-assigned IP addresses? | | Please respond before Friday, November 20. I am attaching Internet | draft "draft-bi-savi-dhcp-00" for your convenience. | | - Christian | From alberto@it.uc3m.es Tue Nov 10 04:37:23 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CE1483A6AB9 for ; Tue, 10 Nov 2009 04:37:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.299 X-Spam-Level: X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id epftdQo6BMMo for ; Tue, 10 Nov 2009 04:37:22 -0800 (PST) Received: from smtp01.uc3m.es (smtp01.uc3m.es [163.117.176.131]) by core3.amsl.com (Postfix) with ESMTP id 911F53A6862 for ; Tue, 10 Nov 2009 04:37:22 -0800 (PST) X-uc3m-safe: yes Received: from bombo (bombo.it.uc3m.es [163.117.139.125]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by smtp01.uc3m.es (Postfix) with ESMTP id 45DEFBA6975; Tue, 10 Nov 2009 13:37:48 +0100 (CET) From: =?ISO-8859-15?Q?Alberto_Garc=EDa?= To: "'Jean-Michel Combes'" , References: <729b68be0911091820t53301ed0s355a748f6fcb05b5@mail.gmail.com> Date: Tue, 10 Nov 2009 13:37:49 +0100 Message-ID: <94EB4EFF86094C60874A23F6EC344013@bombo> MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-15" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 Thread-Index: AcphrG6FSTh/WaC9TtWzdToyHuA55gARnLmQ X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579 In-Reply-To: <729b68be0911091820t53301ed0s355a748f6fcb05b5@mail.gmail.com> X-TM-AS-Product-Ver: IMSS-7.0.0.3116-6.0.0.1038-17000.003 Subject: Re: [savi] IKEv2 address assignment method and SAVI X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 12:37:23 -0000 Hi | -----Mensaje original----- | De: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] En nombre de Jean- | Michel Combes | Enviado el: martes, 10 de noviembre de 2009 3:21 | Para: savi@ietf.org | Asunto: [savi] IKEv2 address assignment method and SAVI | | Hi, | | as promised yesterday, here is an email regarding IKEv2 address | assignment method and SAVI interaction. The scenario I have in mind is | concerning Mobile IPv6 bootstrapping [RFC5026] where the Home Agent | (HA) is providing the Home Address (HoA) to the Mobile Node (MN) via | IKEv2. | | I assume the following architecture where the HA is the default router | (and also a SAVI device) and the MN is on a Foreign Network (i.e. out | of its Home Network). | | Internet-----MN | | | +----+ | | HA | | +----+ | | | --------------------------- Home Network | | | Node | | In this scenario, the HA will provide the HoA to the MN even if the MN | is outside of its Home Network (the HoA is linked to the Home Network, | i.e. the network prefix of the HoA is advertised on the Home Network). | Unlike SLAAC or DHCP address assignment methods, there is no signaling | on the Home Network (i.e. all the exchanges are done via IKEv2 | directly between the HA and the MN) and there is no DAD process. I assume that RFC5026 is heavily relying in DHCP assignment, although it is weakly expressed in the specification: "The Home Agent could consult a DHCP server on the home link for the actual home address allocation." Note that DHCPv6 recommends "The client SHOULD perform duplicate address detection [17] on each of the addresses in any IAs it receives in the Reply message before using that address for traffic." If it does not check for duplicates and the address was in use by other host in the network, there is going to be some trouble, isn't it? Are you saying that the HA assigns an address without caring about if it is duplicated or not? This is a problem that may exceed SAVI scope. | | The HA, as a SAVI device, should be able to block any flow coming from | a Node on the Home Network that tries to spoof the MN's HoA and | present proposals (i.e. FCFS, DHCP, SEND, etc.) may not be applied | (worse, IMHO, FCFS mechanism may corrupt the SAVI policy database) | because there is no signaling on the Home Network. If the address is supposed to be unique (I understand that is the assumption of RFC5026, although I don't fully understand why, if DAD is not performed), and the HA is also a SAVI device, then (1)- it could be specified that the HA created the SAVI binding when a MIPv6 binding is created, and (2)- it should defend it as specified in FCFS, sending DAD NADV if someone sends a DAD NSOL Condition (2) is the natural result of a HA with a MIPv6 binding: the HA acts as a proxy ND and defends the HoA of a registered MN by sending DAD NADV when required. Condition (1) should be specifically stated in SAVI for this case (and the requirement for the HA to be a SAVI device if RFC5026 is used). Does this make sense? Regards, Alberto | | Comments are welcome. | | Thanks in advance. | | Best regards. | | JMC. | _______________________________________________ | savi mailing list | savi@ietf.org | https://www.ietf.org/mailman/listinfo/savi From alberto@it.uc3m.es Tue Nov 10 04:39:48 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6553D3A6ABC for ; Tue, 10 Nov 2009 04:39:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.298 X-Spam-Level: X-Spam-Status: No, score=-6.298 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7vhioM8RZl5r for ; Tue, 10 Nov 2009 04:39:43 -0800 (PST) Received: from smtp03.uc3m.es (smtp03.uc3m.es [163.117.176.133]) by core3.amsl.com (Postfix) with ESMTP id 8E3943A6AB9 for ; Tue, 10 Nov 2009 04:39:29 -0800 (PST) X-uc3m-safe: yes Received: from bombo (bombo.it.uc3m.es [163.117.139.125]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by smtp03.uc3m.es (Postfix) with ESMTP id 430E07F2857 for ; Tue, 10 Nov 2009 13:39:54 +0100 (CET) From: =?ISO-8859-15?Q?Alberto_Garc=EDa?= To: "'SAVI Mailing List'" Date: Tue, 10 Nov 2009 13:39:55 +0100 Message-ID: <1C22234FE5B446D288E07133176792FC@bombo> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00EF_01CA620B.49B966D0" X-Mailer: Microsoft Office Outlook 11 Thread-Index: AcpiAtw4IFZKZGFAQgSaNVyWlE8gKQ== X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579 X-TM-AS-Product-Ver: IMSS-7.0.0.3116-6.0.0.1038-17000.003 Subject: [savi] MIPv6 and SAVI X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 12:39:48 -0000 This is a multi-part message in MIME format. ------=_NextPart_000_00EF_01CA620B.49B966D0 Content-Type: text/plain; charset="ISO-8859-15" Content-Transfer-Encoding: 7bit Hi, While I was answering to the 'IKEv2 address assignment method and SAVI' mail, I realized that there may be a fundamental issue with SAVI affecting its interaction with MIPv6 (regardless the way addresses are obtained from the HA to be assigned to MN). While the HA has a binding for the MN to a CoA, the HA defends the HoA for the MN with DAD NADVs (if any node performs DAD NSOLs). Either if the HA is a SAVI device or it is just a node outside the SAVI perimeter, the result would be that SAVI would prevent hosts connecting through other ports to use the HoA as source address. However, the mechanisms specified in 11.5.4 for informing the HA that the MN is back in the Home Network is (In RFC 3775, section 11.5.4): The mobile node SHOULD then send a Binding Update to its home agent, to instruct its home agent to no longer intercept or tunnel packets for it. [.] The mobile node MUST use its home address as the source address in the Binding Update. This would not be allowed by default by FCFS SAVI (and in general, by any reasonable SAVI deployment). Do you think this is a problem? A solution could be to make SAVI devices to just let pass this type of MIPv6 Binding Update messages. This would make the HA stop defending the address, and the MN could gain the SAVI binding by the mechanisms currently defined to support mobility in the L2 network. This still provides good protection: the SAVI binding is not released until the SAVI device is convinced that the legitimate MN is in the network, and this (the Binding Update) is protected by IPsec. Hosts not using MIPv6 are not affected, since they are not going to give up its binding regardless the Binding Update messages that could issued by attackers. Regards, alberto ------=_NextPart_000_00EF_01CA620B.49B966D0 Content-Type: text/html; charset="ISO-8859-15" Content-Transfer-Encoding: quoted-printable

Hi,

While I was answering to the ‘IKEv2 = address assignment method and SAVI’ mail, I realized that there may be a = fundamental issue with SAVI affecting its interaction with MIPv6 (regardless the way addresses are obtained from the HA to be assigned to MN). =

 

While the HA has a binding for the MN to a = CoA, the HA defends the HoA for the MN with DAD NADVs (if any node performs DAD = NSOLs).

Either if the HA is a SAVI device or it is = just a node outside the SAVI perimeter, the result would be that SAVI would = prevent hosts connecting through other ports to use the HoA as source address. =

However, the mechanisms specified in 11.5.4 = for informing the HA that the MN is back in the Home Network is (In RFC = 3775, section 11.5.4):

=A0=A0=A0The mobile node SHOULD then send a =
Binding Update to its home =
agent,
=A0=A0 to instruct its home agent to no =
longer intercept or tunnel =
packets
=A0=A0 for it.=A0 […] The mobile node =
MUST use its home
=A0=A0 address as the source address in the =
Binding Update.

 

This would not be allowed by default by FCFS = SAVI (and in general, by any reasonable SAVI deployment). =

Do you think this is a = problem?

 

A solution could be to make SAVI devices to = just let pass this type of MIPv6 Binding Update messages. This would make the HA = stop defending the address, and the MN could gain the SAVI binding by the = mechanisms currently defined to support mobility in the L2 = network.

This still provides good protection: the SAVI = binding is not released until the SAVI device is convinced that the legitimate = MN is in the network, and this (the Binding Update) is protected by IPsec. =

Hosts not using MIPv6 are not affected, since = they are not going to give up its binding regardless the Binding Update = messages that could issued by attackers.

 

Regards,

alberto

------=_NextPart_000_00EF_01CA620B.49B966D0-- From alberto@it.uc3m.es Tue Nov 10 07:40:13 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AA3FB3A6AFB for ; Tue, 10 Nov 2009 07:40:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.299 X-Spam-Level: X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8Y31+1CVmGlp for ; Tue, 10 Nov 2009 07:40:12 -0800 (PST) Received: from smtp01.uc3m.es (smtp01.uc3m.es [163.117.176.131]) by core3.amsl.com (Postfix) with ESMTP id 5EFD03A6897 for ; Tue, 10 Nov 2009 07:40:12 -0800 (PST) X-uc3m-safe: yes Received: from bombo (bombo.it.uc3m.es [163.117.139.125]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by smtp01.uc3m.es (Postfix) with ESMTP id 1196DBA800F; Tue, 10 Nov 2009 16:40:38 +0100 (CET) From: =?ISO-8859-15?Q?Alberto_Garc=EDa?= To: "'Christian Vogt'" , "'SAVI Mailing List'" References: <058861F3-5E50-42FD-A6CC-220EE213629C@ericsson.com> Date: Tue, 10 Nov 2009 16:40:38 +0100 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-15" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 Thread-Index: AcphGFVktpEUxkMqRo6ZTXJhNuVVQAA/qVcg X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579 In-Reply-To: X-TM-AS-Product-Ver: IMSS-7.0.0.3116-6.0.0.1038-17000.003 Cc: 'David Allan I' Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 15:40:13 -0000 Hi, After looking at the presentation, I have some questions: - Is address uniqueness enforced in just one BNG? Or an address must be unique also across many BNGs? - Is mobility assumed to occur among channels (i.e. is reasonable to have Residential Gateways (RG) which are in one channel to move other channel)? - What is the RG address used for? (frequent use)? At least, does NUD exchange occurs between the RG and the BNG? Current SAVI proposal for SLAAC is complex because it deals with uniqueness across multiple SAVI devices, and considers that hosts may move to different SAVI devices. My bet is that this is not the case for Broadband Forum problem. Therefore, I assume that it is enough to enforce address uniqueness on each BNG. The first host using an address as source address forces the creation of the binding between the address and this channel. Receiving packets with this source address from the RG extends the life of the binding. Since there is no RG mobility, the binding can be kept until the timer associated to the binding expires (there is no need to be too fast to change, or to probe aggressively if the RG of the first binding is still there). This time can be very long (of course, higher that the time to expire NUD state). The BNG should perform proxy ND, i.e. answer to DAD NSOL with DAD NADV if a binding exists and a new RG tries to configure a new address. Data packets coming from channels for which there is no binding (the binding is associated to other channel) are discarded. Does this make sense? Regards, Alberto | -----Mensaje original----- | De: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] En nombre de | Christian Vogt | Enviado el: lunes, 09 de noviembre de 2009 9:41 | Para: SAVI Mailing List | CC: David Allan I | Asunto: Re: [savi] Broadband Forum liaison to IETF on IPv6 security | | Folks - | | Thank you all for a productive working group meeting this morning! | | As mentioned during our the meeting, the presentation of David Allan is | the problem statement that was missing in the liaison we had earlier | received from the Broadband Forum. You find David's slides on the | meeting materials web page: | | http://www.ietf.org/proceedings/09nov/slides/savi-8.pdf | | The meeting materials web page now also includes last-minute updates to | the presentation slides you saw during our meeting this morning. | Meeting minutes will follow shortly. | | - Christian | | | _______________________________________________ | savi mailing list | savi@ietf.org | https://www.ietf.org/mailman/listinfo/savi From jianping@cernet.edu.cn Tue Nov 10 08:32:38 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 88E8928C17B for ; Tue, 10 Nov 2009 08:32:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.098 X-Spam-Level: X-Spam-Status: No, score=0.098 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_HAS_XAIMC=2.696, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hzk9dTw0wlDf for ; Tue, 10 Nov 2009 08:32:34 -0800 (PST) Received: from cernet.edu.cn (sea.net.edu.cn [202.112.3.66]) by core3.amsl.com (Postfix) with SMTP id 8AC3228C162 for ; Tue, 10 Nov 2009 08:32:32 -0800 (PST) Received: from cernet.edu.cn([59.66.32.61]) by cernet.edu.cn(AIMC 3.2.0.0) with SMTP id jm384af9f8d0; Wed, 11 Nov 2009 00:32:55 +0800 Message-ID: <4AF995BC.2080606@cernet.edu.cn> Date: Wed, 11 Nov 2009 00:33:00 +0800 From: Jianping Wu User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.0.1) Gecko/20020823 Netscape/7.0 X-Accept-Language: zh-cn MIME-Version: 1.0 To: Christian Vogt References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> Content-Type: multipart/alternative; boundary="------------020104010609090300030507" X-AIMC-AUTH: jianping X-AIMC-MAILFROM: jianping@cernet.edu.cn X-AIMC-Msg-ID: L0TetHXB Cc: SAVI Mailing List , Guang, Yao Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 16:32:38 -0000 --------------020104010609090300030507 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Yes, I support it becomes a WG item. Jianping WU Christian Vogt wrote: >Folks - > >During the SAVI working group meeting today, we made a consensus check >about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group >document, showing a clear majority of attendees in favor. I would now >like to initiate a confirming consensus call here on the mailing list. > >Please answer the following question with either "yes" or "no": > > Should the SAVI working group adopt Internet draft > "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol > specification for DHCP-assigned IP addresses? > >Please respond before Friday, November 20. I am attaching Internet >draft "draft-bi-savi-dhcp-00" for your convenience. > >- Christian > > > > >------------------------------------------------------------------------ > >SAVI J. Bi, J. Wu, G. Yao >Internet Draft CERNET >Intended status: Standard Tracks F. Baker >Expires: May 2010 Cisco > November 9, 2009 > > > > SAVI Solution for DHCPv4/v6 > draft-bi-savi-dhcp-00.txt > > >Status of this Memo > > This Internet-Draft is submitted to IETF in full conformance with the > provisions of BCP 78 and BCP 79. This document may not be modified, > and derivative works of it may not be created, except to publish it > as an RFC and to translate it into languages other than English. > > This document may contain material from IETF Documents or IETF > Contributions published or made publicly available before November 10, > 2008. The person(s) controlling the copyright in some of this > material may not have granted the IETF Trust the right to allow > modifications of such material outside the IETF Standards Process. > Without obtaining an adequate license from the person(s) controlling > the copyright in such materials, this document may not be modified > outside the IETF Standards Process, and derivative works of it may > not be created outside the IETF Standards Process, except to format > it for publication as an RFC or to translate it into languages other > than English. > > Internet-Drafts are working documents of the Internet Engineering > Task Force (IETF), its areas, and its working groups. Note that > other groups may also distribute working documents as Internet-Drafts. > > Internet-Drafts are draft documents valid for a maximum of six months > and may be updated, replaced, or obsoleted by other documents at any > time. It is inappropriate to use Internet-Drafts as reference > material or to cite them other than as "work in progress." > > The list of current Internet-Drafts can be accessed at > http://www.ietf.org/ietf/1id-abstracts.txt > > The list of Internet-Draft Shadow Directories can be accessed at > http://www.ietf.org/shadow.html > > This Internet-Draft will expire on May 9, 2010. > > > > >Bi Expires May 9, 2010 [Page 1] > >Internet-Draft savi-dhcp November 2009 > > >Copyright Notice > > Copyright (c) 2009 IETF Trust and the persons identified as the > document authors. All rights reserved. > > This document is subject to BCP 78 and the IETF Trust's Legal > Provisions Relating to IETF Documents in effect on the date of > publication of this document (http://trustee.ietf.org/license-info). > Please review these documents carefully, as they describe your rights > and restrictions with respect to this document. > >Abstract > > This document specifies the procedure for creating bindings between a > DHCPv4 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address and an > anchor (refer to [SAVI-framework]) on SAVI (Source Address Validation > Improvements) device. The bindings can be used to filter packets with > forged IP addresses generated on the local link. > >Table of Contents > > > 1. Introduction ................................................ 3 > 2. Conventions used in this document............................ 4 > 3. Mechanism Overview .......................................... 4 > 4. Background and Related Protocols............................. 4 > 5. Terminology ................................................. 5 > 6. Conceptual Data Structures................................... 5 > 6.1. Binding State Table (BST)............................... 5 > 6.2. Filtering Table (FT).................................... 5 > 7. Binding States Description................................... 6 > 8. DHCP Scenario ............................................... 6 > 9. Anchor Attributes ........................................... 7 > 9.1. SAVI-Host Attribute..................................... 7 > 9.2. SAVI-Poly Attribute..................................... 7 > 9.3. SAVI-DHCP-Trust Attribute............................... 7 > 9.4. SAVI-RA-Trust Attribute................................. 8 > 9.5. SAVI-SAVI Attribute..................................... 8 > 10. Prefix Configuration........................................ 8 > 11. Binding Set Up ............................................. 9 > 11.1. Process of DHCP Snooping............................... 9 > 11.1.1. Initialization.................................... 9 > 11.1.1.1. Trigger Event................................ 9 > 11.1.1.2. Message Validation........................... 9 > 11.1.1.3. Following Actions........................... 10 > 11.1.2. From START to LIVE............................... 10 > 11.1.2.1. Trigger Event............................... 10 > > >Bi Expires May 9, 2010 [Page 2] > >Internet-Draft savi-dhcp November 2009 > > > 11.1.2.2. Message Validation.......................... 10 > 11.1.2.3. Following Actions........................... 10 > 11.1.3. From LIVE to DETECTION........................... 11 > 11.1.3.2. Message Validation.......................... 11 > 11.1.3.3. Following Actions........................... 12 > 11.1.4. From DETECTION to BOUND.......................... 12 > 11.1.4.1. Trigger Event............................... 12 > 11.1.4.2. Following Actions........................... 12 > 11.1.5. After BOUND...................................... 12 > 11.2. State Machine of DHCP Snooping ....................... 13 > 12. Filtering Specification.................................... 13 > 12.1. Filter Data Packet.................................... 13 > 12.2. Filter Control Packet................................. 14 > 13. Format and Delivery of Probe Messages ..................... 14 > 14. Data packet trigger on SAVI-Poly anchor ................... 15 > 15. Binding Remove ............................................ 16 > 16. Handle port DOWN event..................................... 16 > 17. About Collision in Detection............................... 16 > 17.1. Whether to notify the DHCP server .................... 16 > 17.2. The result of detection without host aware ........... 16 > 18. Filtering during detection................................. 17 > 19. Binding Number Limitation.................................. 17 > 20. MLD Consideration ......................................... 17 > 21. Constants ................................................. 17 > 22. Summary of to-be-removed sections and open issues ......... 18 > 23. Security Considerations.................................... 18 > 24. IANA Considerations........................................ 18 > 25. References ................................................ 18 > 25.1. Normative References.................................. 18 > 25.2. Informative References................................ 19 > 26. Acknowledgments ........................................... 19 > >1. Introduction > > This document describes the procedure for creating bindings between > DHCP assigned addresses and an anchor (refer to [savi-framework]). > Other related details about this procedure are also specified in this > document. > > These bindings can be used to filter packets with forged IP addresses. > How to use these bindings is specified in [savi-framework], depending > on the environment and configuration. The definition and examples of > anchor is also specified in [savi-framework]. > > The binding process is inspired by the work of IP source guard. This > specification differs from IP source guard in the specification for > > > >Bi Expires May 9, 2010 [Page 3] > >Internet-Draft savi-dhcp November 2009 > > > collision detection, which is quite useful in an environment with > multiple address assignment methods. > >2. Conventions used in this document > > The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", > "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this > document are to be interpreted as described in [RFC2119]. > >3. Mechanism Overview > > The mechanism specified in this document is designed to provide a > host level source IP address validation granularity, as a supplement > to BCP38 [BCP38]. This mechanism is deployed on the access device > (including access switch, wireless access point/controller, etc), and > performs mainly DHCPv4/v6 snooping to set up bindings between DHCP > assigned IP address and corresponding anchors. The bindings can be > used to validate the source address in the packets. > >4. Background and Related Protocols > > This mechanism is an instance of a SAVI [savi-framework] solution, > specialized for addresses assigned using the DHCP protocol. > > Dynamic Host Configuration Protocol version 4 [RFC2131] and Dynamic > Host Configuration Protocol version 6 [RFC3315] specify the > procedures for providing a client with assigned address and other > configuration information from a DHCP server. If a client gets an > address through the DHCP protocol, the address should be regarded as > a potential "authorized" or "registered" address of the client. > > In IPv6, IPv6 Stateless Autoconfiguration [RFC4862] is used as > another address assignment mechanism. A node can use this mechanism > to auto-configure an IPv6 address. A DHCPv6 client may use a > stateless address to send message to DHCP server. Even in a DHCPv6- > only environment, a node must assign its link-local address through > this mechanism. [RFC4862] also clearly requires that duplicated > address detection must be performed on any IPv6 address, including > DHCPv6 address. > > [RFC4861] specifies the Neighbor Discovery protocol, which is an > essential part of IPv6 address assignment. > > [RFC5227] specifies the procedure to detect IPv4 address collision. > It is not required currently. However, this feature is useful to > determine the uniqueness of an IPv4 address on the link. > > > >Bi Expires May 9, 2010 [Page 4] > >Internet-Draft savi-dhcp November 2009 > > >5. Terminology > > The terms used in this document are described in [savi-framework], > [RFC2131] and [RFC3315]. > >6. Conceptual Data Structures > > (To be removed and merged with data structures used by other > mechanisms in [savi-framework] if possible) > > This section describes the possible conceptual data structures used > in this mechanism. > > Two main data structures are used to record bindings and their states > respectively. There is redundancy between the two structures, for the > consideration of separation of data plane and control plane. > >6.1. Binding State Table (BST) > > This table contains the state of binding between source address and > anchor. Entries are keyed on the anchor and source IP address. Each > entry has a lifetime field recording the remaining lifetime of the > entry, a state field recording the state of the binding and a field > for recording other information. > > +---------+----------+-------+-----------+-------+ > | Anchor | Address | State | Lifetime |Other | > +---------+----------+-------+-----------+-------+ > | A | IP_1 | Bound | 65535 | | > +---------+----------+-------+-----------+-------+ > | A | IP_2 | Bound | 10000 | | > +---------+----------+-------+-----------+-------+ > | B | IP_3 |_Start | 1 | | > +---------+----------+-------+-----------+-------+ > Figure 1 Instance of BST > > >6.2. Filtering Table (FT) > > This table contains the bindings between anchor and address, keyed on > anchor. This table doesn't contain any state of the binding. This > table is only used to filter packets. An Access Control List can be > regarded as a practical instance of this table. > > > > > > >Bi Expires May 9, 2010 [Page 5] > >Internet-Draft savi-dhcp November 2009 > > > +---------+----------+ > |Anchor |Address | > +---------+----------+ > |A |IP_1 | > +---------+----------+ > |A |IP_2 | > +---------+----------+ > Figure 2 Instance of FT > >7. Binding States Description > > This section describes the binding states of this mechanism. > > START A DHCP request (or a DHCPv6 Confirm) has been received > from host, and it may trigger a new binding. > > LIVE A DHCP address has been acknowledged by a DHCP server. > > DETECTION A gratuitous ARP or Duplicate Address Detection NSOL > has been sent by the host (or the SAVI device). > > BOUND The address has passed duplicate detection and > it is bound with the anchor. > >8. DHCP Scenario > > (This section should be removed and merged with other scenarios in > [savi-framework]) > > This section specifies the deployment scenarios of this mechanism. > > > > > > > > > > > > > > > > > > >Bi Expires May 9, 2010 [Page 6] > >Internet-Draft savi-dhcp November 2009 > > > +--------+ > | DHCP | > | Server | > +-------,+ > `. > `. > `. > +----'-----+ > | SAVI | > | Device | > +-/------/-+ > | | > +----\-+ +\-----+ > |DHCP | |Client| > |Relay | | | > +------+ +------+ > Figure 3 DHCP Scenario > >9. Anchor Attributes > > This section specifies the anchor attributes involved in this > mechanism. > >9.1. SAVI-Host Attribute > > (This attribute should be described in the [savi-framework]) > > If and only if an anchor is exclusively associated with a single host, > this anchor can be set to have SAVI-Host attribute. > >9.2. SAVI-Poly Attribute > > (This attribute should be described in the [savi-framework]) > > If an anchor is associated with a small number of hosts through a > converged device, this anchor can be set to have the SAVI-Poly > attribute. The SAVI-Poly attribute is mutually exclusive with the > SAVI-Host attribute. > > The main difference in process on an anchor with the SAVI-Poly > attribute from one with the SAVI-Host attribute is the policy of > binding consistency. > >9.3. SAVI-DHCP-Trust Attribute > > If and only if an anchor is associated with a trustable DHCP > server/relay, it can be set to have this attribute. > > >Bi Expires May 9, 2010 [Page 7] > >Internet-Draft savi-dhcp November 2009 > > > If DHCP is used to assign address in the network, there MUST be at > least one anchor with this attribute. DHCP Reply message not coming > from such ports MUST be dropped. > >9.4. SAVI-RA-Trust Attribute > > (This attribute should be described in the [savi-framework]) > > If and only if an anchor is associated with a trustable router, it > can be set to have this attribute. > > There MAY be no SAVI-RA-Trust anchor on a SAVI device. > > Router Advertisement not received from a SAVI-RA-Trust anchor MUST be > discarded. > >9.5. SAVI-SAVI Attribute > > (This attribute should be described in the [savi-framework]) > > If and only if an anchor is associated with another SAVI device, it > can be set to have this attribute. > > This attribute is mutually exclusive with SAVI-Host and SAVI-Poly > attribute. > >10. Prefix Configuration > > (This section should be included in [SAVI-framework] but not this > document.) > > Before setting up a host-level granularity binding table, it is > important to configure correct prefixes on the SAVI device. At least > two prefix scopes must be set: the IPv4 prefix and IPv6 prefixes. > This document suggests set 3 prefix scopes: > > IPv4 Prefix: > > The allowed scope of any kind of IPv4 addresses. It can be set > manually. > > IPv6 SLAAC Prefixes: > > The allowed scope of SLAAC and manually configured IPv6 > addresses. It can be set through snooping RA message from port > with SAVI-RA-Trust attribute, or manual configuration. > > > >Bi Expires May 9, 2010 [Page 8] > >Internet-Draft savi-dhcp November 2009 > > > FE80::/64 MUST be set to a feasible prefix. > > IPv6 DHCPv6 Prefixes: > > The allowed scope of DHCPv6 addresses. It can be set through RA > snooping, DHCP-PD protocol, or manual configuration. > > If some of the prefix scope is set to have non prefix, it implies > corresponding address assignment method is not allowed in the network. > > There is no need to explicitly present these prefix scopes. But these > restrictions MUST be used as premier check in binding set up. > > Refer to security consideration for other discussions. > >11. Binding Set Up > > This section specifies the procedure of setting up bindings based on > control packet snooping. > >11.1. Process of DHCP Snooping > >11.1.1. Initialization > > This procedure will not be performed if: > > 1. Option 82 is used to keep anchor in DHCP Request and Reply, or > > 2. Unspoofable MAC is used as anchor(802.11i,802.1ae/af), or > > 3. The mapping table from MAC to anchor is secure. > > If none of these three requirements are satisfied, this procedure > MUST be performed. > >11.1.1.1. Trigger Event > > A DHCPv4/v6 Request or a DHCPv6 Confirm is received with an anchor > which has the attribute of SAVI-Host or SAVI-Poly. > >11.1.1.2. Message Validation > > The SAVI device checks the Request or Confirm as follows: > > 1. Whether the limitation on binding entry number of this anchor will > be exceeded. > > > >Bi Expires May 9, 2010 [Page 9] > >Internet-Draft savi-dhcp November 2009 > > >11.1.1.3. Following Actions > > Forward the REQUEST message if binding entry limitation will not be > exceeded. > > Generate an entry in the Binding State Table (BST) and set the state > field to START. The lifetime of this entry is set to be > MAX_DHCP_RESPONSE_TIME. The Transaction ID (Refer to Section 2 in > [RFC2131] and Section 4.2 in [RFC3315]) field of the request packet > is also recorded in the entry. > > +---------+----------+-------+-----------------------+-------+ > | Anchor | Address | State | Lifetime |Other | > +---------+----------+-------+-----------------------+-------+ > | A | | Start |MAX_DHCP_RESPONSE_TIME | TID | > +---------+----------+-------+-----------------------+-------+ > Figure 4 Binding entry in BST on initialization > > The TID is kept for assurance that the response from the DHCP server > can be delivered to the request host. This is left as an open issue > for future discussion. > >11.1.2. From START to LIVE > >11.1.2.1. Trigger Event > > A DHCPv4 DHCPACK or DHCPv6 REPLY message is received. > >11.1.2.2. Message Validation > > The SAVI device checks the message as follows: > > 1. Whether the message is received with an anchor which has the SAVI- > DHCP-Trust attribute; > > 2. Whether the entry in the BST with corresponding TID is in the > START state. > >11.1.2.3. Following Actions > > Deliver the message to the destination. > > Set the state of the corresponding entry to be LIVE. The lifetime of > the entry is set to be MAX_ARP_PREPARE_DELAY or MAX_DAD_PREPARE_DELAY > respectively. The lease time is also recorded in the entry. > > > > >Bi Expires May 9, 2010 [Page 10] > >Internet-Draft savi-dhcp November 2009 > > > +---------+----------+-------+------------------------+-------+ > | Anchor | Address | State | Lifetime |Other | > +---------+----------+-------+------------------------+-------+ > | A | Addr | LIVE |MAX_ARP_PREPARE_DELAY or| Lease | > | | | |MAX_DAD_PREPARE_DELAY | Time | > +---------+----------+-------+------------------------+-------+ > Figure 5 Binding entry in BST on assignment > > Or set the state of the corresponding entry to be DETECTION, and send > an ARP Request or NSOL for the assigned address. > > +---------+----------+-----------+-----------------+-------+ > | Anchor | Address | State | Lifetime |Other | > +---------+----------+-----------+-----------------+-------+ > | A | Addr | DETECTION |MAX_ARP_DELAY or | Lease | > | | | |MAX_DAD_DELAY | Time | > +---------+----------+-----------+-----------------+-------+ > Figure 6 Binding entry in BST on assignment: another case > > Insert an entry into the Filtering Table if the assigned address is > not bound with another anchor. > > +---------+----------+ > |Anchor |Address | > +---------+----------+ > |A |Addr | > +---------+----------+ > Figure 7 Binding entry in FT on assignment > >11.1.3. From LIVE to DETECTION > > (This section should be removed or modified if all the DAD related > procedures are to be described in SLAAC document) > >11.1.3.1. Trigger Event > > A gratuitous ARP Request or Duplicate Address Detection Neighbor > Solicitation is received from the host. Or a timeout event of an > entry with state LIVE occurs. > >11.1.3.2. Message Validation > > The SAVI device checks the message as follows: > > 1. Whether the Target IP address field of the ARP Request or Neighbor > Solicitation has been bound with the corresponding anchor in BST > or FT. > > >Bi Expires May 9, 2010 [Page 11] > >Internet-Draft savi-dhcp November 2009 > > >11.1.3.3. Following Actions > > If timeout event of an entry with state LIVE happens, send an ARP > Request or a DAD NSOL, with target address set to the recorded > address in the entry. > > Set the state of the entry to be DETECTION. The lifetime of the entry > is set to be MAX_ARP_DELAY or MAX_DAD_DELAY respectively. > > +---------+----------+-----------+-----------------+-------+ > | Anchor | Address | State | Lifetime |Other | > +---------+----------+-----------+-----------------+-------+ > | A | Addr | DETECTION |MAX_ARP_DELAY or| Lease | > | | | |MAX_DAD_DELAY | Time | > +---------+----------+-----------+-----------------+-------+ > Figure 8 Binding entry in BST on detection > >11.1.4. From DETECTION to BOUND > >11.1.4.1. Trigger Event > > A timeout event of an entry with state DETECTION occurs or an ARP > Response or NA for an address in BST with state DETECTION is received. > >11.1.4.2. Following Actions > > If a timeout event of an entry with state DETECTION occurs, set the > state of the entry to be BOUND. The lifetime of the entry is set to > be the Lease time acknowledged by DHCP server. > > +---------+----------+-----------+----------------+-------+ > | Anchor | Address | State | Lifetime |Other | > +---------+----------+-----------+----------------+-------+ > | A | Addr | BOUND | Lease time | | > +---------+----------+-----------+----------------+-------+ > Figure 9 Binding entry in BST on finalization > > If an ARP Response or NA for an address in BST with state DETECTION > is received, remove the corresponding entry in BST and FT. > >11.1.5. After BOUND > > Whenever a DHCP Decline is received from the host, delete the entry > in BST and FT. > > Whenever a DHCP Release is received from the host, if the state of > the entry is BOUND, delete the entry in BST and FT. > > >Bi Expires May 9, 2010 [Page 12] > >Internet-Draft savi-dhcp November 2009 > > > If a DHCPv4 Acknowledgement or DHCPv6 Reply with Renew/Rebind sign is > received from the server, set lifetime of the entry in BST to be the > new lease time. > > If the lifetime of an entry with state BOUND expires, delete the > entry in BST and Filter Table. > >11.2. State Machine of DHCP Snooping > > State Packet/Event Action Next State > > -* REQUEST/CONFIRM Set up new entry START > > START ACK Record lease time LIVE > > START Timeout Remove entry - > > LIVE Gra ARP REQ/DAD NS - DETECTION > > LIVE DECLINE Remove entry - > > LIVE Timeout Send ARP Req/DAD NS DETECTION > > DETECTION Timeout - BOUND > > DETECTION ARP RESPONSE Remove entry - > > DETECTION DECLINE Remove entry - > > BOUND RELEASE/DECLINE Remove entry - > > BOUND Timeout Remove entry - > > BOUND RENEW/REBOUND Set new lifetime BOUND > > *: optional. > >12. Filtering Specification > > This section specifies how to use bindings to filter packets. > >12.1. Filter Data Packet > > Data packets with an anchor which has attribute SAVI-Host or SAVI- > Poly are filtered. There can be an anchor with neither attribute. > > > > >Bi Expires May 9, 2010 [Page 13] > >Internet-Draft savi-dhcp November 2009 > > > If the source of a packet associated with its anchor is in the FT, > this packet will be forwarded; or else the packet MUST be discarded. > >12.2. Filter Control Packet > > The source address of DHCPv4 Request/Discovery must be set to all > zeros. > > The source address of DHCPv6 Request/Confirm must be an address > associated with the corresponding anchor in FT. > > The source address of IPv6 NS and IPv6 gratuitous ARP must pass the > check on FT. The source address of DAD NS MUST be unspecified address. > > All DHCP Reply/Ack packets MUST be from an anchor with the SAVI-DHCP- > Trust attribute. > > The target address and source address in all the Neighbor > Advertisement packets and ARP replies must also pass the checks on FT, > if they are associated with anchors which have SAVI-Host or SAVI-Poly > attribute. > >13. Format and Delivery of Probe Messages > > 1. Duplicate detection on behavior of host; > > Message Type: DAD NS, Gratuitous ARP Request > > Format: > > Link layer source - link layer address of host; > > Link layer destination - For IPv6, use multicast address > specified in [RFC3307]; For IPv4, use broadcast address; > > IP source - Unspecified address for IPv6; The tentative address > for IPv4; > > IP destination - For IPv6, multicast address specified in > section 5.4.2 of [RFC4861]; For IPv4, the tentative address; > > Delivery: > > MUST not deliver to the host which the SAVI device is > performing DAD on behavior of. > > > > >Bi Expires May 9, 2010 [Page 14] > >Internet-Draft savi-dhcp November 2009 > > > 2. Send reply on behavior of host to hold bound address for inactive > node; > > Message Type: NA, ARP Response > > Link layer source - link layer address of host; > > Link layer destination - The source address of the detecting node; > > IP source - The target address in the detection message; > > IP destination -The source address of the detecting node; > > 3. Send probe to detect whether an address is still in use (generally > in case of port down/up event). > > Message Type: NUD, ARP Request > > Link layer source - link layer address of the SAVI device; > > Link layer destination - The link layer address of the node; > > IP source - The manage IP address of the SAVI device; > > IP destination - The address is suspicious to be inactive. > >14. Data packet trigger on SAVI-Poly anchor > > To handle the case of movement from one SAVI-Poly port to another, > data packet based binding MUST be performed on SAVI-Poly anchor. > > Whenever a packet with source address not bound locally is received > from a SAVI-Poly anchor, the SAVI device MUST send a DHCP CONFIRM to > the DHCP server to ensure the address can be used on the link; if the > address can be used, the SAVI device MUST send a DAD NS on behavior > of the host to check the uniqueness of the address. If the address > passes these two checks, it can be bound with the anchor. > > Data packet triggered binging will cause heavy burden and > unpredictable danger on the SAVI device. It is not suggested to > configure SAVI-Poly anchor and allow mobility between SAVI-Poly > anchors. If this function is turned off, the administrator must be > aware of the packets from SAVI-Poly anchor may be filtered > incorrectly after movement. > > > > > >Bi Expires May 9, 2010 [Page 15] > >Internet-Draft savi-dhcp November 2009 > > >15. Binding Remove > > If the lifetime of an entry with state BOUND expires, the entry MUST > be removed. > > When the SAVI device receives a DAD NS/Gra ARP request target at an > address bound and there is no reply from the anchor, if the anchor is > a SAVI-Host anchor, hold the binding entry through sending NA/ARP > Reply; if the anchor is a SAVI-Poly anchor, remove this binding or > hold it. > >16. Handle port DOWN event > > Whenever a port with attribute SAVI-Poly or SAVI-Host turns down, the > bindings with the anchor MUST be kept for a short time. > > To handle movement, if receiving DAD NS/Gra ARP request target at the > address during the period, remove the entry. > > If port turns UP during the period: > > ?Optionally send probes to SAVI-host port for assurance; > > ?MUST send probes to SAVI-Poly port for assurance. > >17. About Collision in Detection > > The SAVI device may receive a response in detection. Some related > details are specified here. > >17.1. Whether to notify the DHCP server > > It is unnecessary for the SAVI device to notify the DHCP server, > because the host will send a DECLINE message to it once it finds the > advertised address is conflict. > >17.2. The result of detection without host aware > > In case the SAVI device send detection packet instead of the host, > the host will not be aware of the detection result. If the detection > succeeds, there is no problem. However, if the detection fails, the > packets from the host with the assigned address will be filtered out. > This result can be regarded as a reasonable punishment for not > performing duplicate detection and using a collision address. > > > > > >Bi Expires May 9, 2010 [Page 16] > >Internet-Draft savi-dhcp November 2009 > > >18. Filtering during detection > > In this mechanism, whenever the DHCP server replies an address, this > address will be allowed immediately even before duplicate detection > is completed. This design is in consideration of a host may start to > send packets straightway without detection. Also this design is to be > compatible with optimistic DAD [RFC4429]. > > However, this feature may allow an attacker to send quantities of > packets with source addresses already assigned to other nodes. A > practical solution for this vulnerability is configuring the address > pool and allocation algorithm of the DHCP server carefully. > >19. Binding Number Limitation > > It is suggested to configure some mechanism in order to prevent a > single node from exhausting the binding table entries on the SAVI > device. Either of the following mechanism is sufficient to prevent > such attack. > > 1. Set the upper bound of binding number for each anchor with SAVI- > Host or SAVI-Poly attribute. > > 2. Reserve a number of binding entries for each anchor with SAVI-Host > or SAVI-Poly attribute and all anchors share a pool of the other > binding entries. > > 3. Limit DHCP Request rate per anchor, using the bound entry number > of each anchor as reverse indicator. > >20. MLD Consideration > > The SAVI device MUST join the tentative address multicast group > whenever perform duplicate detection on behavior of host. > >21. Constants > > MAX_DHCP_RESPONSE_TIME 120s > > MAX_ARP_PREPARE_DELAY Default 1s but configurable > > MAX_ARP_DELAY Default 1s but configurable > > MAX_DAD_PREPARE_DELAY Default 1s but configurable > > MAX_DAD_DELAY Default 1s but configurable > > > >Bi Expires May 9, 2010 [Page 17] > >Internet-Draft savi-dhcp November 2009 > > >22. Summary of to-be-removed sections and open issues > > To-be-removed sections: > > 1. Section 6: Conceptual data structures > > 2. Section 8: DHCP scenario > > 3. Part of Section 9: Anchor attributes > > 4. Section 10: Prefix configuration > > Open issues (discussed but not finished): > > 1. Whether to keep state START > > Should the procedure be initialized based on client request or > server response? > > From Eric Levy-Abegnoli and Christian Vogt. > > 2. Whether to keep state DETECTION > > Should DHCP interact with NDP to detect collision or should all > the collision detection be left to NDP and the DHCP solution just > snoop DHCP only? > > From Eric Levy-Abegnoli. > >23. Security Considerations > > For prefix level granularity filtering is the basis of host level > granularity filtering, to learn and configure correct prefix is of > great importance to this mechanism. Thus, it's important to keep RA > and DHCP-PD secure. [draft-ietf-v6ops-ra-guard-03] describes a > mechanism to improve the security of RA message. > >24. IANA Considerations > > There is no IANA consideration currently. > >25. References > >25.1. Normative References > > [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate > Requirement Levels", BCP 14, RFC 2119, March 1997. > > >Bi Expires May 9, 2010 [Page 18] > >Internet-Draft savi-dhcp November 2009 > > > [RFC4862] Thomson, S., Narten, T. and Jinmei, T., "IPv6 Stateless > Autoconfiguration", RFC4862, September, 2007. > > [RFC5227] S. Cheshire, "IPv4 Address Conflict Detection", RFC5227, > July 2008. > > > >25.2. Informative References > >26. Acknowledgments > >Thanks to Christian Vogt, Eric Levy-Abegnoli, Mark Williams, Erik >Nordmark, Marcelo Bagnulo Braun, Alberto Garcia, Jari Arkko, David >Harrington, Pekka Savola, Xing Li, Lixia Zhang, Robert Raszuk, Greg >Daley, Joel M. Halpern and Tao Lin for their valuable contributions. > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > >Bi Expires May 9, 2010 [Page 19] > >Internet-Draft savi-dhcp November 2009 > > >Authors' Addresses > > Jun Bi > CERNET > Network Research Center, Tsinghua University > Beijing 100084 > China > Email: junbi@cernet.edu.cn > > Jianping Wu > CERNET > Computer Science, Tsinghua University > Beijing 100084 > China > Email: jianping@cernet.edu.cn > > Guang Yao > CERNET > Network Research Center, Tsinghua University > Beijing 100084 > China > Email: yaog@netarchlab.tsinghua.edu.cn > > > Fred Baker > Cisco Systems > Email: fred@cisco.com > > > > > > > > > > > > > > > > > > > > > >Bi Expires May 9, 2010 [Page 20] > > > --------------020104010609090300030507 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: 7bit 
Yes, I support it becomes a WG item.
Jianping WU

Christian Vogt wrote:
Folks -

During the SAVI working group meeting today, we made a consensus check
about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group
document, showing a clear majority of attendees in favor.  I would now
like to initiate a confirming consensus call here on the mailing list.

Please answer the following question with either "yes" or "no":

   Should the SAVI working group adopt Internet draft
   "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol
   specification for DHCP-assigned IP addresses?

Please respond before Friday, November 20.  I am attaching Internet
draft "draft-bi-savi-dhcp-00" for your convenience.

- Christian


  

SAVI                                              J. Bi, J. Wu, G. Yao
Internet Draft                                                 CERNET
Intended status: Standard Tracks                             F. Baker
Expires: May 2010                                               Cisco
                                                      November 9, 2009



                        SAVI Solution for DHCPv4/v6
                         draft-bi-savi-dhcp-00.txt


Status of this Memo

   This Internet-Draft is submitted to IETF in full conformance with the
   provisions of BCP 78 and BCP 79. This document may not be modified,
   and derivative works of it may not be created, except to publish it
   as an RFC and to translate it into languages other than English.

   This document may contain material from IETF Documents or IETF
   Contributions published or made publicly available before November 10,
   2008. The person(s) controlling the copyright in some of this
   material may not have granted the IETF Trust the right to allow
   modifications of such material outside the IETF Standards Process.
   Without obtaining an adequate license from the person(s) controlling
   the copyright in such materials, this document may not be modified
   outside the IETF Standards Process, and derivative works of it may
   not be created outside the IETF Standards Process, except to format
   it for publication as an RFC or to translate it into languages other
   than English.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF), its areas, and its working groups.  Note that
   other groups may also distribute working documents as Internet-Drafts.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   The list of current Internet-Drafts can be accessed at
   http://www.ietf.org/ietf/1id-abstracts.txt

   The list of Internet-Draft Shadow Directories can be accessed at
   http://www.ietf.org/shadow.html

   This Internet-Draft will expire on May 9, 2010.




Bi                      Expires May 9, 2010                  [Page 1]

Internet-Draft                savi-dhcp                  November 2009


Copyright Notice

   Copyright (c) 2009 IETF Trust and the persons identified as the
   document authors. All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents in effect on the date of
   publication of this document (http://trustee.ietf.org/license-info).
   Please review these documents carefully, as they describe your rights
   and restrictions with respect to this document.

Abstract

   This document specifies the procedure for creating bindings between a
   DHCPv4 [RFC2131]/DHCPv6 [RFC3315] assigned source IP address and an
   anchor (refer to [SAVI-framework]) on SAVI (Source Address Validation
   Improvements) device. The bindings can be used to filter packets with
   forged IP addresses generated on the local link.

Table of Contents


   1. Introduction ................................................ 3
   2. Conventions used in this document............................ 4
   3. Mechanism Overview .......................................... 4
   4. Background and Related Protocols............................. 4
   5. Terminology ................................................. 5
   6. Conceptual Data Structures................................... 5
      6.1. Binding State Table (BST)............................... 5
      6.2. Filtering Table (FT).................................... 5
   7. Binding States Description................................... 6
   8. DHCP Scenario ............................................... 6
   9. Anchor Attributes ........................................... 7
      9.1. SAVI-Host Attribute..................................... 7
      9.2. SAVI-Poly Attribute..................................... 7
      9.3. SAVI-DHCP-Trust Attribute............................... 7
      9.4. SAVI-RA-Trust Attribute................................. 8
      9.5. SAVI-SAVI Attribute..................................... 8
   10. Prefix Configuration........................................ 8
   11. Binding Set Up ............................................. 9
      11.1. Process of DHCP Snooping............................... 9
         11.1.1. Initialization.................................... 9
            11.1.1.1. Trigger Event................................ 9
            11.1.1.2. Message Validation........................... 9
            11.1.1.3. Following Actions........................... 10
         11.1.2. From START to LIVE............................... 10
            11.1.2.1. Trigger Event............................... 10


Bi                      Expires May 9, 2010                  [Page 2]

Internet-Draft                savi-dhcp                  November 2009


            11.1.2.2. Message Validation.......................... 10
            11.1.2.3. Following Actions........................... 10
         11.1.3. From LIVE to DETECTION........................... 11
            11.1.3.2. Message Validation.......................... 11
            11.1.3.3. Following Actions........................... 12
         11.1.4. From DETECTION to BOUND.......................... 12
            11.1.4.1. Trigger Event............................... 12
            11.1.4.2. Following Actions........................... 12
         11.1.5. After BOUND...................................... 12
      11.2. State Machine of DHCP Snooping ....................... 13
   12. Filtering Specification.................................... 13
      12.1. Filter Data Packet.................................... 13
      12.2. Filter Control Packet................................. 14
   13. Format and Delivery of Probe Messages ..................... 14
   14. Data packet trigger on SAVI-Poly anchor ................... 15
   15. Binding Remove ............................................ 16
   16. Handle port DOWN event..................................... 16
   17. About Collision in Detection............................... 16
      17.1. Whether to notify the DHCP server .................... 16
      17.2. The result of detection without host aware ........... 16
   18. Filtering during detection................................. 17
   19. Binding Number Limitation.................................. 17
   20. MLD Consideration ......................................... 17
   21. Constants ................................................. 17
   22. Summary of to-be-removed sections and open issues ......... 18
   23. Security Considerations.................................... 18
   24. IANA Considerations........................................ 18
   25. References ................................................ 18
      25.1. Normative References.................................. 18
      25.2. Informative References................................ 19
   26. Acknowledgments ........................................... 19

1. Introduction

   This document describes the procedure for creating bindings between
   DHCP assigned addresses and an anchor (refer to [savi-framework]).
   Other related details about this procedure are also specified in this
   document.

   These bindings can be used to filter packets with forged IP addresses.
   How to use these bindings is specified in [savi-framework], depending
   on the environment and configuration. The definition and examples of
   anchor is also specified in [savi-framework].

   The binding process is inspired by the work of IP source guard. This
   specification differs from IP source guard in the specification for



Bi                      Expires May 9, 2010                  [Page 3]

Internet-Draft                savi-dhcp                  November 2009


   collision detection, which is quite useful in an environment with
   multiple address assignment methods.

2. Conventions used in this document

   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
   document are to be interpreted as described in [RFC2119].

3. Mechanism Overview

   The mechanism specified in this document is designed to provide a
   host level source IP address validation granularity, as a supplement
   to BCP38 [BCP38]. This mechanism is deployed on the access device
   (including access switch, wireless access point/controller, etc), and
   performs mainly DHCPv4/v6 snooping to set up bindings between DHCP
   assigned IP address and corresponding anchors. The bindings can be
   used to validate the source address in the packets.

4. Background and Related Protocols

   This mechanism is an instance of a SAVI [savi-framework] solution,
   specialized for addresses assigned using the DHCP protocol.

   Dynamic Host Configuration Protocol version 4 [RFC2131] and Dynamic
   Host Configuration Protocol version 6 [RFC3315] specify the
   procedures for providing a client with assigned address and other
   configuration information from a DHCP server. If a client gets an
   address through the DHCP protocol, the address should be regarded as
   a potential "authorized" or "registered" address of the client.

   In IPv6, IPv6 Stateless Autoconfiguration [RFC4862] is used as
   another address assignment mechanism. A node can use this mechanism
   to auto-configure an IPv6 address. A DHCPv6 client may use a
   stateless address to send message to DHCP server. Even in a DHCPv6-
   only environment, a node must assign its link-local address through
   this mechanism. [RFC4862] also clearly requires that duplicated
   address detection must be performed on any IPv6 address, including
   DHCPv6 address.

   [RFC4861] specifies the Neighbor Discovery protocol, which is an
   essential part of IPv6 address assignment.

   [RFC5227] specifies the procedure to detect IPv4 address collision.
   It is not required currently. However, this feature is useful to
   determine the uniqueness of an IPv4 address on the link.



Bi                      Expires May 9, 2010                  [Page 4]

Internet-Draft                savi-dhcp                  November 2009


5. Terminology

   The terms used in this document are described in [savi-framework],
   [RFC2131] and [RFC3315].

6. Conceptual Data Structures

   (To be removed and merged with data structures used by other
   mechanisms in [savi-framework] if possible)

   This section describes the possible conceptual data structures used
   in this mechanism.

   Two main data structures are used to record bindings and their states
   respectively. There is redundancy between the two structures, for the
   consideration of separation of data plane and control plane.

6.1.  Binding State Table (BST)

   This table contains the state of binding between source address and
   anchor. Entries are keyed on the anchor and source IP address. Each
   entry has a lifetime field recording the remaining lifetime of the
   entry, a state field recording the state of the binding and a field
   for recording other information.

             +---------+----------+-------+-----------+-------+
             | Anchor  | Address  | State | Lifetime  |Other  |
             +---------+----------+-------+-----------+-------+
             | A       | IP_1     | Bound |  65535    |       |
             +---------+----------+-------+-----------+-------+
             | A       | IP_2     | Bound |  10000    |       |
             +---------+----------+-------+-----------+-------+
             | B       | IP_3     |_Start |      1    |       |
             +---------+----------+-------+-----------+-------+
                         Figure 1 Instance of BST


6.2.  Filtering Table (FT)

   This table contains the bindings between anchor and address, keyed on
   anchor. This table doesn't contain any state of the binding. This
   table is only used to filter packets. An Access Control List can be
   regarded as a practical instance of this table.






Bi                      Expires May 9, 2010                  [Page 5]

Internet-Draft                savi-dhcp                  November 2009


                          +---------+----------+
                          |Anchor   |Address   |
                          +---------+----------+
                          |A        |IP_1      |
                          +---------+----------+
                          |A        |IP_2      |
                          +---------+----------+
                          Figure 2 Instance of FT

7. Binding States Description

   This section describes the binding states of this mechanism.

   START        A DHCP request (or a DHCPv6 Confirm) has been received
   from host, and it may trigger a new binding.

   LIVE       A DHCP address has been acknowledged by a DHCP server.

   DETECTION    A gratuitous ARP or Duplicate Address Detection NSOL
   has been sent by the host (or the SAVI device).

   BOUND       The address has passed duplicate detection and
             it is bound with the anchor.

8. DHCP Scenario

   (This section should be removed and merged with other scenarios in
   [savi-framework])

   This section specifies the deployment scenarios of this mechanism.


















Bi                      Expires May 9, 2010                  [Page 6]

Internet-Draft                savi-dhcp                  November 2009


                                +--------+
                                | DHCP   |
                                | Server |
                                +-------,+
                                    `.
                                    `.
                                    `.
                               +----'-----+
                               |  SAVI    |
                               |  Device  |
                               +-/------/-+
                                 |      |
                            +----\-+   +\-----+
                            |DHCP  |   |Client|
                            |Relay |   |      |
                            +------+   +------+
                          Figure 3 DHCP Scenario

9. Anchor Attributes

   This section specifies the anchor attributes involved in this
   mechanism.

9.1. SAVI-Host Attribute

    (This attribute should be described in the [savi-framework])

   If and only if an anchor is exclusively associated with a single host,
   this anchor can be set to have SAVI-Host attribute.

9.2. SAVI-Poly Attribute

   (This attribute should be described in the [savi-framework])

   If an anchor is associated with a small number of hosts through a
   converged device, this anchor can be set to have the SAVI-Poly
   attribute. The SAVI-Poly attribute is mutually exclusive with the
   SAVI-Host attribute.

   The main difference in process on an anchor with the SAVI-Poly
   attribute from one with the SAVI-Host attribute is the policy of
   binding consistency.

9.3. SAVI-DHCP-Trust Attribute

   If and only if an anchor is associated with a trustable DHCP
   server/relay, it can be set to have this attribute.


Bi                      Expires May 9, 2010                  [Page 7]

Internet-Draft                savi-dhcp                  November 2009


   If DHCP is used to assign address in the network, there MUST be at
   least one anchor with this attribute. DHCP Reply message not coming
   from such ports MUST be dropped.

9.4. SAVI-RA-Trust Attribute

   (This attribute should be described in the [savi-framework])

   If and only if an anchor is associated with a trustable router, it
   can be set to have this attribute.

   There MAY be no SAVI-RA-Trust anchor on a SAVI device.

   Router Advertisement not received from a SAVI-RA-Trust anchor MUST be
   discarded.

9.5. SAVI-SAVI Attribute

   (This attribute should be described in the [savi-framework])

   If and only if an anchor is associated with another SAVI device, it
   can be set to have this attribute.

   This attribute is mutually exclusive with SAVI-Host and SAVI-Poly
   attribute.

10. Prefix Configuration

   (This section should be included in [SAVI-framework] but not this
   document.)

   Before setting up a host-level granularity binding table, it is
   important to configure correct prefixes on the SAVI device. At least
   two prefix scopes must be set: the IPv4 prefix and IPv6 prefixes.
   This document suggests set 3 prefix scopes:

  IPv4 Prefix:

         The allowed scope of any kind of IPv4 addresses. It can be set
         manually.

   IPv6 SLAAC Prefixes:

         The allowed scope of SLAAC and manually configured IPv6
         addresses. It can be set through snooping RA message from port
         with SAVI-RA-Trust attribute, or manual configuration.



Bi                      Expires May 9, 2010                  [Page 8]

Internet-Draft                savi-dhcp                  November 2009


         FE80::/64 MUST be set to a feasible prefix.

   IPv6 DHCPv6 Prefixes:

         The allowed scope of DHCPv6 addresses. It can be set through RA
         snooping, DHCP-PD protocol, or manual configuration.

   If some of the prefix scope is set to have non prefix, it implies
   corresponding address assignment method is not allowed in the network.

   There is no need to explicitly present these prefix scopes. But these
   restrictions MUST be used as premier check in binding set up.

   Refer to security consideration for other discussions.

11. Binding Set Up

   This section specifies the procedure of setting up bindings based on
   control packet snooping.

11.1. Process of DHCP Snooping

11.1.1. Initialization

   This procedure will not be performed if:

   1. Option 82 is used to keep anchor in DHCP Request and Reply, or

   2. Unspoofable MAC is used as anchor(802.11i,802.1ae/af), or

   3. The mapping table from MAC to anchor is secure.

   If none of these three requirements are satisfied, this procedure
   MUST be performed.

11.1.1.1. Trigger Event

   A DHCPv4/v6 Request or a DHCPv6 Confirm is received with an anchor
   which has the attribute of SAVI-Host or SAVI-Poly.

11.1.1.2. Message Validation

   The SAVI device checks the Request or Confirm as follows:

   1. Whether the limitation on binding entry number of this anchor will
      be exceeded.



Bi                      Expires May 9, 2010                  [Page 9]

Internet-Draft                savi-dhcp                  November 2009


11.1.1.3. Following Actions

   Forward the REQUEST message if binding entry limitation will not be
   exceeded.

   Generate an entry in the Binding State Table (BST) and set the state
   field to START. The lifetime of this entry is set to be
   MAX_DHCP_RESPONSE_TIME. The Transaction ID (Refer to Section 2 in
   [RFC2131] and Section 4.2 in [RFC3315]) field of the request packet
   is also recorded in the entry.

   +---------+----------+-------+-----------------------+-------+
   | Anchor  | Address  | State | Lifetime              |Other  |
   +---------+----------+-------+-----------------------+-------+
   | A       |          | Start |MAX_DHCP_RESPONSE_TIME | TID   |
   +---------+----------+-------+-----------------------+-------+
              Figure 4 Binding entry in BST on initialization

   The TID is kept for assurance that the response from the DHCP server
   can be delivered to the request host. This is left as an open issue
   for future discussion.

11.1.2. From START to LIVE

11.1.2.1. Trigger Event

   A DHCPv4 DHCPACK or DHCPv6 REPLY message is received.

11.1.2.2. Message Validation

   The SAVI device checks the message as follows:

   1. Whether the message is received with an anchor which has the SAVI-
      DHCP-Trust attribute;

   2. Whether the entry in the BST with corresponding TID is in the
      START state.

11.1.2.3. Following Actions

   Deliver the message to the destination.

   Set the state of the corresponding entry to be LIVE. The lifetime of
   the entry is set to be MAX_ARP_PREPARE_DELAY or MAX_DAD_PREPARE_DELAY
   respectively. The lease time is also recorded in the entry.




Bi                      Expires May 9, 2010                 [Page 10]

Internet-Draft                savi-dhcp                  November 2009


   +---------+----------+-------+------------------------+-------+
   | Anchor  | Address  | State | Lifetime               |Other  |
   +---------+----------+-------+------------------------+-------+
   | A       | Addr     | LIVE  |MAX_ARP_PREPARE_DELAY or| Lease |
   |         |          |       |MAX_DAD_PREPARE_DELAY   | Time  |
   +---------+----------+-------+------------------------+-------+
                Figure 5 Binding entry in BST on assignment

   Or set the state of the corresponding entry to be DETECTION, and send
   an ARP Request or NSOL for the assigned address.

   +---------+----------+-----------+-----------------+-------+
   | Anchor  | Address  | State     | Lifetime        |Other  |
   +---------+----------+-----------+-----------------+-------+
   | A       | Addr     | DETECTION |MAX_ARP_DELAY or | Lease |
   |         |          |           |MAX_DAD_DELAY    | Time  |
   +---------+----------+-----------+-----------------+-------+
         Figure 6 Binding entry in BST on assignment: another case

   Insert an entry into the Filtering Table if the assigned address is
   not bound with another anchor.

                          +---------+----------+
                          |Anchor   |Address   |
                          +---------+----------+
                          |A        |Addr      |
                          +---------+----------+
                Figure 7 Binding entry in FT on assignment

11.1.3. From LIVE to DETECTION

   (This section should be removed or modified if all the DAD related
   procedures are to be described in SLAAC document)

11.1.3.1. Trigger Event

   A gratuitous ARP Request or Duplicate Address Detection Neighbor
   Solicitation is received from the host. Or a timeout event of an
   entry with state LIVE occurs.

11.1.3.2. Message Validation

   The SAVI device checks the message as follows:

   1. Whether the Target IP address field of the ARP Request or Neighbor
      Solicitation has been bound with the corresponding anchor in BST
      or FT.


Bi                      Expires May 9, 2010                 [Page 11]

Internet-Draft                savi-dhcp                  November 2009


11.1.3.3. Following Actions

   If timeout event of an entry with state LIVE happens, send an ARP
   Request or a DAD NSOL, with target address set to the recorded
   address in the entry.

   Set the state of the entry to be DETECTION. The lifetime of the entry
   is set to be MAX_ARP_DELAY or MAX_DAD_DELAY respectively.

   +---------+----------+-----------+-----------------+-------+
   | Anchor  | Address  | State      | Lifetime       |Other  |
   +---------+----------+-----------+-----------------+-------+
   | A       | Addr     | DETECTION  |MAX_ARP_DELAY or| Lease |
   |         |          |            |MAX_DAD_DELAY   | Time  |
   +---------+----------+-----------+-----------------+-------+
                Figure 8 Binding entry in BST on detection

11.1.4. From DETECTION to BOUND

11.1.4.1. Trigger Event

   A timeout event of an entry with state DETECTION occurs or an ARP
   Response or NA for an address in BST with state DETECTION is received.

11.1.4.2. Following Actions

   If a timeout event of an entry with state DETECTION occurs, set the
   state of the entry to be BOUND. The lifetime of the entry is set to
   be the Lease time acknowledged by DHCP server.

   +---------+----------+-----------+----------------+-------+
   | Anchor  | Address  | State     | Lifetime       |Other  |
   +---------+----------+-----------+----------------+-------+
   | A       | Addr     | BOUND     | Lease time     |       |
   +---------+----------+-----------+----------------+-------+
               Figure 9 Binding entry in BST on finalization

   If an ARP Response or NA for an address in BST with state DETECTION
   is received, remove the corresponding entry in BST and FT.

11.1.5. After BOUND

   Whenever a DHCP Decline is received from the host, delete the entry
   in BST and FT.

   Whenever a DHCP Release is received from the host, if the state of
   the entry is BOUND, delete the entry in BST and FT.


Bi                      Expires May 9, 2010                 [Page 12]

Internet-Draft                savi-dhcp                  November 2009


   If a DHCPv4 Acknowledgement or DHCPv6 Reply with Renew/Rebind sign is
   received from the server, set lifetime of the entry in BST to be the
   new lease time.

   If the lifetime of an entry with state BOUND expires, delete the
   entry in BST and Filter Table.

11.2. State Machine of DHCP Snooping

   State     Packet/Event      Action                 Next State

   -*         REQUEST/CONFIRM   Set up new entry                  START

   START      ACK                Record lease time                  LIVE

   START      Timeout            Remove entry                          -

   LIVE       Gra ARP REQ/DAD NS    -                          DETECTION

   LIVE       DECLINE             Remove entry                         -

   LIVE       Timeout            Send ARP Req/DAD NS         DETECTION

   DETECTION  Timeout             -                                BOUND

   DETECTION  ARP RESPONSE        Remove entry                         -

   DETECTION  DECLINE             Remove entry                         -

   BOUND      RELEASE/DECLINE     Remove entry                         -

   BOUND      Timeout             Remove entry                         -

   BOUND      RENEW/REBOUND       Set new lifetime                 BOUND

   *: optional.

12. Filtering Specification

   This section specifies how to use bindings to filter packets.

12.1. Filter Data Packet

   Data packets with an anchor which has attribute SAVI-Host or SAVI-
   Poly are filtered. There can be an anchor with neither attribute.




Bi                      Expires May 9, 2010                 [Page 13]

Internet-Draft                savi-dhcp                  November 2009


   If the source of a packet associated with its anchor is in the FT,
   this packet will be forwarded; or else the packet MUST be discarded.

12.2. Filter Control Packet

   The source address of DHCPv4 Request/Discovery must be set to all
   zeros.

   The source address of DHCPv6 Request/Confirm must be an address
   associated with the corresponding anchor in FT.

   The source address of IPv6 NS and IPv6 gratuitous ARP must pass the
   check on FT. The source address of DAD NS MUST be unspecified address.

   All DHCP Reply/Ack packets MUST be from an anchor with the SAVI-DHCP-
   Trust attribute.

   The target address and source address in all the Neighbor
   Advertisement packets and ARP replies must also pass the checks on FT,
   if they are associated with anchors which have SAVI-Host or SAVI-Poly
   attribute.

13. Format and Delivery of Probe Messages

   1. Duplicate detection on behavior of host;

      Message Type: DAD NS, Gratuitous ARP Request

      Format:

                   Link layer source - link layer address of host;

                   Link layer destination - For IPv6, use multicast address
      specified in [RFC3307]; For IPv4, use broadcast address;

                   IP source - Unspecified address for IPv6; The tentative address
      for IPv4;

                   IP destination - For IPv6, multicast address specified in
      section 5.4.2 of [RFC4861]; For IPv4, the tentative address;

      Delivery:

         MUST not deliver to the host which the SAVI device is
      performing DAD on behavior of.




Bi                      Expires May 9, 2010                 [Page 14]

Internet-Draft                savi-dhcp                  November 2009


   2. Send reply on behavior of host to hold bound address for inactive
      node;

      Message Type: NA, ARP Response

      Link layer source - link layer address of host;

      Link layer destination - The source address of the detecting node;

      IP source - The target address in the detection message;

      IP destination -The source address of the detecting node;

   3. Send probe to detect whether an address is still in use (generally
      in case of port down/up event).

      Message Type: NUD, ARP Request

      Link layer source - link layer address of the SAVI device;

      Link layer destination - The link layer address of the node;

      IP source - The manage IP address of the SAVI device;

      IP destination - The address is suspicious to be inactive.

14. Data packet trigger on SAVI-Poly anchor

   To handle the case of movement from one SAVI-Poly port to another,
   data packet based binding MUST be performed on SAVI-Poly anchor.

   Whenever a packet with source address not bound locally is received
   from a SAVI-Poly anchor, the SAVI device MUST send a DHCP CONFIRM to
   the DHCP server to ensure the address can be used on the link; if the
   address can be used, the SAVI device MUST send a DAD NS on behavior
   of the host to check the uniqueness of the address. If the address
   passes these two checks, it can be bound with the anchor.

   Data packet triggered binging will cause heavy burden and
   unpredictable danger on the SAVI device. It is not suggested to
   configure SAVI-Poly anchor and allow mobility between SAVI-Poly
   anchors. If this function is turned off, the administrator must be
   aware of the packets from SAVI-Poly anchor may be filtered
   incorrectly after movement.





Bi                      Expires May 9, 2010                 [Page 15]

Internet-Draft                savi-dhcp                  November 2009


15. Binding Remove

   If the lifetime of an entry with state BOUND expires, the entry MUST
   be removed.

   When the SAVI device receives a DAD NS/Gra ARP request target at an
   address bound and there is no reply from the anchor, if the anchor is
   a SAVI-Host anchor, hold the binding entry through sending NA/ARP
   Reply; if the anchor is a SAVI-Poly anchor, remove this binding or
   hold it.

16. Handle port DOWN event

   Whenever a port with attribute SAVI-Poly or SAVI-Host turns down, the
   bindings with the anchor MUST be kept for a short time.

   To handle movement, if receiving DAD NS/Gra ARP request target at the
   address during the period, remove the entry.

   If port turns UP during the period:

        ?Optionally send probes to SAVI-host port for assurance;

        ?MUST send probes to SAVI-Poly port for assurance.

17. About Collision in Detection

   The SAVI device may receive a response in detection. Some related
   details are specified here.

17.1. Whether to notify the DHCP server

   It is unnecessary for the SAVI device to notify the DHCP server,
   because the host will send a DECLINE message to it once it finds the
   advertised address is conflict.

17.2. The result of detection without host aware

   In case the SAVI device send detection packet instead of the host,
   the host will not be aware of the detection result. If the detection
   succeeds, there is no problem. However, if the detection fails, the
   packets from the host with the assigned address will be filtered out.
   This result can be regarded as a reasonable punishment for not
   performing duplicate detection and using a collision address.





Bi                      Expires May 9, 2010                 [Page 16]

Internet-Draft                savi-dhcp                  November 2009


18. Filtering during detection

   In this mechanism, whenever the DHCP server replies an address, this
   address will be allowed immediately even before duplicate detection
   is completed. This design is in consideration of a host may start to
   send packets straightway without detection. Also this design is to be
   compatible with optimistic DAD [RFC4429].

   However, this feature may allow an attacker to send quantities of
   packets with source addresses already assigned to other nodes. A
   practical solution for this vulnerability is configuring the address
   pool and allocation algorithm of the DHCP server carefully.

19. Binding Number Limitation

   It is suggested to configure some mechanism in order to prevent a
   single node from exhausting the binding table entries on the SAVI
   device. Either of the following mechanism is sufficient to prevent
   such attack.

   1. Set the upper bound of binding number for each anchor with SAVI-
      Host or SAVI-Poly attribute.

   2. Reserve a number of binding entries for each anchor with SAVI-Host
      or SAVI-Poly attribute and all anchors share a pool of the other
      binding entries.

   3. Limit DHCP Request rate per anchor, using the bound entry number
      of each anchor as reverse indicator.

20. MLD Consideration

   The SAVI device MUST join the tentative address multicast group
   whenever perform duplicate detection on behavior of host.

21. Constants

   MAX_DHCP_RESPONSE_TIME     120s

   MAX_ARP_PREPARE_DELAY      Default 1s but configurable

   MAX_ARP_DELAY              Default 1s but configurable

   MAX_DAD_PREPARE_DELAY      Default 1s but configurable

   MAX_DAD_DELAY              Default 1s but configurable



Bi                      Expires May 9, 2010                 [Page 17]

Internet-Draft                savi-dhcp                  November 2009


22. Summary of to-be-removed sections and open issues

   To-be-removed sections:

   1. Section 6: Conceptual data structures

   2. Section 8: DHCP scenario

   3. Part of Section 9: Anchor attributes

   4. Section 10: Prefix configuration

   Open issues (discussed but not finished):

   1. Whether to keep state START

      Should the procedure be initialized based on client request or
      server response?

      From Eric Levy-Abegnoli and Christian Vogt.

   2. Whether to keep state DETECTION

      Should DHCP interact with NDP to detect collision or should all
      the collision detection be left to NDP and the DHCP solution just
      snoop DHCP only?

      From Eric Levy-Abegnoli.

23. Security Considerations

   For prefix level granularity filtering is the basis of host level
   granularity filtering, to learn and configure correct prefix is of
   great importance to this mechanism. Thus, it's important to keep RA
   and DHCP-PD secure. [draft-ietf-v6ops-ra-guard-03] describes a
   mechanism to improve the security of RA message.

24. IANA Considerations

   There is no IANA consideration currently.

25. References

25.1. Normative References

   [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
             Requirement Levels", BCP 14, RFC 2119, March 1997.


Bi                      Expires May 9, 2010                 [Page 18]

Internet-Draft                savi-dhcp                  November 2009


   [RFC4862] Thomson, S., Narten, T. and Jinmei, T., "IPv6 Stateless
             Autoconfiguration", RFC4862, September, 2007.

   [RFC5227] S. Cheshire, "IPv4 Address Conflict Detection", RFC5227,
             July 2008.



25.2. Informative References

26. Acknowledgments

Thanks to Christian Vogt, Eric Levy-Abegnoli, Mark Williams, Erik
Nordmark, Marcelo Bagnulo Braun, Alberto Garcia, Jari Arkko, David
Harrington, Pekka Savola, Xing Li, Lixia Zhang, Robert Raszuk, Greg
Daley, Joel M. Halpern and Tao Lin for their valuable contributions.
































Bi                      Expires May 9, 2010                 [Page 19]

Internet-Draft                savi-dhcp                  November 2009


Authors' Addresses

   Jun Bi
   CERNET
   Network Research Center, Tsinghua University
   Beijing 100084
   China
   Email: junbi@cernet.edu.cn

   Jianping Wu
   CERNET
   Computer Science, Tsinghua University
   Beijing 100084
   China
   Email: jianping@cernet.edu.cn

   Guang Yao
   CERNET
   Network Research Center, Tsinghua University
   Beijing 100084
   China
   Email: yaog@netarchlab.tsinghua.edu.cn


   Fred Baker
   Cisco Systems
   Email: fred@cisco.com





















Bi                      Expires May 9, 2010                 [Page 20]

--------------020104010609090300030507-- From rg03@mails.tsinghua.edu.cn Tue Nov 10 10:00:34 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 69EB83A67E9 for ; Tue, 10 Nov 2009 10:00:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.79 X-Spam-Level: ** X-Spam-Status: No, score=2.79 tagged_above=-999 required=5 tests=[BAYES_50=0.001, CN_BODY_35=0.339, MIME_CHARSET_FARAWAY=2.45] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gpz5V-1izXAH for ; Tue, 10 Nov 2009 10:00:33 -0800 (PST) Received: from smtp.tsinghua.edu.cn (smtp.tsinghua.edu.cn [166.111.8.81]) by core3.amsl.com (Postfix) with ESMTP id 96FAC3A6781 for ; Tue, 10 Nov 2009 10:00:33 -0800 (PST) Received: from host-113-111.meeting.ietf.org ([133.93.113.111] helo=rgPC) by smtp.tsinghua.edu.cn with esmtpa (Exim 4.69) (envelope-from ) id 1N7v1U-00031G-KJ; Wed, 11 Nov 2009 02:00:56 +0800 From: "rengang" To: "'Christian Vogt'" , "'SAVI Mailing List'" References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> In-Reply-To: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> Date: Wed, 11 Nov 2009 02:00:48 +0800 Message-ID: <81C489C177E74E758C55DC5EAC745E9E@rgPC> MIME-Version: 1.0 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook 11 Thread-Index: AcphKYykBweRl4U0TzWRbcJgNS7IOwBBaWAA X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049 Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 18:00:34 -0000 Yes, I think the working group should adopt "draft-bi-savi-dhcp-00" as a = WG draft for the SAVI protocol specification for DHCP-assigned IP = addresses. Ren Gang -----=D3=CA=BC=FE=D4=AD=BC=FE----- =B7=A2=BC=FE=C8=CB: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] = =B4=FA=B1=ED Christian Vogt =B7=A2=CB=CD=CA=B1=BC=E4: 2009=C4=EA11=D4=C29=C8=D5 18:45 =CA=D5=BC=FE=C8=CB: SAVI Mailing List =B3=AD=CB=CD: Guang Yao =D6=F7=CC=E2: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 Folks - During the SAVI working group meeting today, we made a consensus check about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group document, showing a clear majority of attendees in favor. I would now like to initiate a confirming consensus call here on the mailing list. Please answer the following question with either "yes" or "no": Should the SAVI working group adopt Internet draft "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol specification for DHCP-assigned IP addresses? Please respond before Friday, November 20. I am attaching Internet draft "draft-bi-savi-dhcp-00" for your convenience. - Christian From christian.vogt@ericsson.com Wed Nov 11 05:13:02 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E7E6028C284 for ; Wed, 11 Nov 2009 05:13:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.54 X-Spam-Level: X-Spam-Status: No, score=-6.54 tagged_above=-999 required=5 tests=[AWL=0.059, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bjcrrNFo4Frl for ; Wed, 11 Nov 2009 05:13:01 -0800 (PST) Received: from imr2.ericy.com (imr2.ericy.com [198.24.6.3]) by core3.amsl.com (Postfix) with ESMTP id 2855328C328 for ; Wed, 11 Nov 2009 05:12:58 -0800 (PST) Received: from eusrcmw751.eamcs.ericsson.se (eusrcmw751.exu.ericsson.se [138.85.77.51]) by imr2.ericy.com (8.13.1/8.13.1) with ESMTP id nABDDNeG031255 for ; Wed, 11 Nov 2009 07:13:25 -0600 Received: from eusrcmw750.eamcs.ericsson.se ([138.85.77.50]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Wed, 11 Nov 2009 07:12:24 -0600 Received: from eusaamw0707.eamcs.ericsson.se ([147.117.20.32]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Wed, 11 Nov 2009 07:12:24 -0600 Received: from EUSAACMS0701.eamcs.ericsson.se ([169.254.1.35]) by eusaamw0707.eamcs.ericsson.se ([147.117.20.32]) with mapi; Wed, 11 Nov 2009 08:12:23 -0500 From: Christian Vogt To: SAVI Mailing List Date: Wed, 11 Nov 2009 08:13:16 -0500 Thread-Topic: Minutes of working group meeting at IETF 76 Thread-Index: Acpi0JrSc3j8gzh5RMGHIUtCoTXhdQ== Message-ID: <1A27B8C2-A454-4FAF-B544-0A786D8FCE9A@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 11 Nov 2009 13:12:24.0456 (UTC) FILETIME=[9C110080:01CA62D0] Subject: [savi] Minutes of working group meeting at IETF 76 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Nov 2009 13:13:03 -0000 Folks - The minutes from Monday's working group meeting are now online: http://www.ietf.org/proceedings/09nov/minutes/savi.txt Please speak up should you find something missing. Thanks to our minutes takers and Jabber scribe for their indispensable help! - Christian From alberto@it.uc3m.es Wed Nov 11 07:27:50 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 533AF3A6900 for ; Wed, 11 Nov 2009 07:27:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.299 X-Spam-Level: X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ST6UuqZvBufW for ; Wed, 11 Nov 2009 07:27:49 -0800 (PST) Received: from smtp01.uc3m.es (smtp01.uc3m.es [163.117.176.131]) by core3.amsl.com (Postfix) with ESMTP id E59BA3A68DB for ; Wed, 11 Nov 2009 07:27:48 -0800 (PST) X-uc3m-safe: yes Received: from bombo (bombo.it.uc3m.es [163.117.139.125]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by smtp01.uc3m.es (Postfix) with ESMTP id 67B12BA6C41; Wed, 11 Nov 2009 16:28:15 +0100 (CET) From: =?iso-8859-15?Q?Alberto_Garc=EDa?= To: "'David Allan I'" , "'Christian Vogt'" , "'SAVI Mailing List'" References: <058861F3-5E50-42FD-A6CC-220EE213629C@ericsson.com> <60C093A41B5E45409A19D42CF7786DFD4DEDEE5170@EUSAACMS0703.eamcs.ericsson.se> Date: Wed, 11 Nov 2009 16:28:16 +0100 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-15" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook 11 In-Reply-To: <60C093A41B5E45409A19D42CF7786DFD4DEDEE5170@EUSAACMS0703.eamcs.ericsson.se> Thread-Index: AcphGFVktpEUxkMqRo6ZTXJhNuVVQAA/qVcgABPM0HAAEwUdkA== X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579 X-TM-AS-Product-Ver: IMSS-7.0.0.3116-6.0.0.1038-17004.000 Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Nov 2009 15:27:50 -0000 Hi | -----Mensaje original----- | De: David Allan I [mailto:david.i.allan@ericsson.com] | Enviado el: mi=E9rcoles, 11 de noviembre de 2009 1:42 | Para: Alberto Garc=EDa; Christian Vogt; 'SAVI Mailing List' | Asunto: RE: [savi] Broadband Forum liaison to IETF on IPv6 security | =20 | HI Alberto: | =20 | The unfortunate answer to all of your question is "it depends..." | =20 | I believe it would be safe to suggest that one BNG would enforce uniqueness, | although architectures could be considered where a second BNG was effectively a | warm standby for a given broadcast domain... One BNG will be the repository for | all active customer facing "state" any any given time... Well, the problem would be to enforce uniqueness across several BNGs operating in parallel. The event of having a backup BNG assuming the role of a failed BNG could = be handled in a specific way, or just not handled at all. In this last = case, if a new BNG replaces an old one, even if it does not have the state of the first BNG, it will learn it from the data packets it is receiving. Every = RG would be unprotected (in the sense that a different RG could obtain the address of another RG that was operating successfully with that address) = for some time (until each RG sends its first packet). ICMPs should be used = to inform the RGs. But it would never occur that two addresses were in use = at the same time. Would this be a problem? | =20 | We do have scenarios where a service provider test set may move = around the | network, but the common case is the RG association with a single port = is very | long lived.... Maybe manual special bindings could be set for the addresses of these = test devices (e.g. a binding to ANY port, instead of to one particular port, meaning that an RG in any port could use this address).=20 Or make the test devices changing its address each time the move. Or make the test devices using SEND to validate securely, and make BNGs = to check the signature of a DAD NSOL to change the binding immediately for = the new port through which DAD NSOL is received. It depends on if you don't care very much to configure the BNG/the test devices Is this reasonable? | =20 | W.r.t. NUD, we have had discussions of the role of NUD vs. our use of = BFD or | other protocols for IPv4, but others will have to comment on the = current state of | play.... The real requirement would be to have packets sent from the RG = (containing its source address) periodically, to be able to create/refresh the = binding. They can either result from NUD exchange, BFD, whatever, while they = contain the IPv6 source address of the RG. Regards, Alberto | =20 | My second answer above would tend to complicate any form of sticky | binding...although a coupling to a PHY outage as a binding = invalidation would | likely address that scenario, but that would require messaging that = is not | necessarily deployed today (ANCP notwithstanding)... | =20 | Hope that helps | D | =20 | -----Original Message----- | From: Alberto Garc=EDa [mailto:alberto@it.uc3m.es] | Sent: Tuesday, November 10, 2009 10:41 AM | To: Christian Vogt; 'SAVI Mailing List' | Cc: David Allan I | Subject: RE: [savi] Broadband Forum liaison to IETF on IPv6 security | =20 | Hi, | After looking at the presentation, I have some questions: | - Is address uniqueness enforced in just one BNG? Or an address must = be unique | also across many BNGs? | - Is mobility assumed to occur among channels (i.e. is reasonable to = have | Residential Gateways (RG) which are in one channel to move other channel)? | - What is the RG address used for? (frequent use)? At least, does NUD exchange | occurs between the RG and the BNG? | =20 | Current SAVI proposal for SLAAC is complex because it deals with uniqueness | across multiple SAVI devices, and considers that hosts may move to different | SAVI devices. | =20 | My bet is that this is not the case for Broadband Forum problem. | Therefore, I assume that it is enough to enforce address uniqueness = on each | BNG. The first host using an address as source address forces the creation of the | binding between the address and this channel. Receiving packets with = this source | address from the RG extends the life of the binding. Since there is = no RG mobility, | the binding can be kept until the timer associated to the binding = expires (there is | no need to be too fast to change, or to probe aggressively if the RG = of the first | binding is still there). This time can be very long (of course, = higher that the time | to expire NUD state). | The BNG should perform proxy ND, i.e. answer to DAD NSOL with DAD = NADV if a | binding exists and a new RG tries to configure a new address. | Data packets coming from channels for which there is no binding (the binding is | associated to other channel) are discarded. | =20 | Does this make sense? | =20 | Regards, | Alberto | =20 | =20 | | -----Mensaje original----- | | De: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] En nombre = de | | Christian Vogt Enviado el: lunes, 09 de noviembre de 2009 9:41 | | Para: SAVI Mailing List | | CC: David Allan I | | Asunto: Re: [savi] Broadband Forum liaison to IETF on IPv6 = security | | | | Folks - | | | | Thank you all for a productive working group meeting this morning! | | | | As mentioned during our the meeting, the presentation of David = Allan | | is the problem statement that was missing in the liaison we had | | earlier received from the Broadband Forum. You find David's = slides | | on the meeting materials web page: | | | | http://www.ietf.org/proceedings/09nov/slides/savi-8.pdf | | | | The meeting materials web page now also includes last-minute = updates | | to the presentation slides you saw during our meeting this = morning. | | Meeting minutes will follow shortly. | | | | - Christian | | | | | | _______________________________________________ | | savi mailing list | | savi@ietf.org | | https://www.ietf.org/mailman/listinfo/savi From david.i.allan@ericsson.com Tue Nov 10 16:43:10 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B56A73A68C1 for ; Tue, 10 Nov 2009 16:43:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.309 X-Spam-Level: X-Spam-Status: No, score=-6.309 tagged_above=-999 required=5 tests=[AWL=-0.010, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GjQCYQOCvrYs for ; Tue, 10 Nov 2009 16:43:09 -0800 (PST) Received: from imr2.ericy.com (imr2.ericy.com [198.24.6.3]) by core3.amsl.com (Postfix) with ESMTP id B82D73A68A2 for ; Tue, 10 Nov 2009 16:43:09 -0800 (PST) Received: from eusrcmw750.eamcs.ericsson.se (eusrcmw750.exu.ericsson.se [138.85.77.50]) by imr2.ericy.com (8.13.1/8.13.1) with ESMTP id nAB0hN8h030323; Tue, 10 Nov 2009 18:43:32 -0600 Received: from eusrcmw750.eamcs.ericsson.se ([138.85.77.53]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Tue, 10 Nov 2009 18:42:07 -0600 Received: from eusaamw0711.eamcs.ericsson.se ([147.117.20.178]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.3959); Tue, 10 Nov 2009 18:42:07 -0600 Received: from EUSAACMS0703.eamcs.ericsson.se ([169.254.1.4]) by eusaamw0711.eamcs.ericsson.se ([147.117.20.178]) with mapi; Tue, 10 Nov 2009 19:42:06 -0500 From: David Allan I To: =?iso-8859-1?Q?Alberto_Garc=EDa?= , Christian Vogt , "'SAVI Mailing List'" Date: Tue, 10 Nov 2009 19:42:04 -0500 Thread-Topic: [savi] Broadband Forum liaison to IETF on IPv6 security Thread-Index: AcphGFVktpEUxkMqRo6ZTXJhNuVVQAA/qVcgABPM0HA= Message-ID: <60C093A41B5E45409A19D42CF7786DFD4DEDEE5170@EUSAACMS0703.eamcs.ericsson.se> References: <058861F3-5E50-42FD-A6CC-220EE213629C@ericsson.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 11 Nov 2009 00:42:07.0328 (UTC) FILETIME=[CBC46600:01CA6267] X-Mailman-Approved-At: Wed, 11 Nov 2009 16:52:46 -0800 Subject: Re: [savi] Broadband Forum liaison to IETF on IPv6 security X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 11 Nov 2009 00:43:10 -0000 HI Alberto: The unfortunate answer to all of your question is "it depends..." I believe it would be safe to suggest that one BNG would enforce uniqueness= , although architectures could be considered where a second BNG was effecti= vely a warm standby for a given broadcast domain... One BNG will be the rep= ository for all active customer facing "state" any any given time... We do have scenarios where a service provider test set may move around the = network, but the common case is the RG association with a single port is ve= ry long lived.... W.r.t. NUD, we have had discussions of the role of NUD vs. our use of BFD o= r other protocols for IPv4, but others will have to comment on the current = state of play.... My second answer above would tend to complicate any form of sticky binding.= ..although a coupling to a PHY outage as a binding invalidation would likel= y address that scenario, but that would require messaging that is not neces= sarily deployed today (ANCP notwithstanding)... Hope that helps D -----Original Message----- From: Alberto Garc=EDa [mailto:alberto@it.uc3m.es]=20 Sent: Tuesday, November 10, 2009 10:41 AM To: Christian Vogt; 'SAVI Mailing List' Cc: David Allan I Subject: RE: [savi] Broadband Forum liaison to IETF on IPv6 security Hi, After looking at the presentation, I have some questions: - Is address uniqueness enforced in just one BNG? Or an address must be uni= que also across many BNGs? - Is mobility assumed to occur among channels (i.e. is reasonable to have R= esidential Gateways (RG) which are in one channel to move other channel)? - What is the RG address used for? (frequent use)? At least, does NUD excha= nge occurs between the RG and the BNG? Current SAVI proposal for SLAAC is complex because it deals with uniqueness= across multiple SAVI devices, and considers that hosts may move to differe= nt SAVI devices. My bet is that this is not the case for Broadband Forum problem.=20 Therefore, I assume that it is enough to enforce address uniqueness on each= BNG. The first host using an address as source address forces the creation= of the binding between the address and this channel. Receiving packets wit= h this source address from the RG extends the life of the binding. Since th= ere is no RG mobility, the binding can be kept until the timer associated t= o the binding expires (there is no need to be too fast to change, or to pro= be aggressively if the RG of the first binding is still there). This time c= an be very long (of course, higher that the time to expire NUD state).=20 The BNG should perform proxy ND, i.e. answer to DAD NSOL with DAD NADV if a= binding exists and a new RG tries to configure a new address.=20 Data packets coming from channels for which there is no binding (the bindin= g is associated to other channel) are discarded. Does this make sense? Regards, Alberto | -----Mensaje original----- | De: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] En nombre de =20 | Christian Vogt Enviado el: lunes, 09 de noviembre de 2009 9:41 | Para: SAVI Mailing List | CC: David Allan I | Asunto: Re: [savi] Broadband Forum liaison to IETF on IPv6 security | =20 | Folks - | =20 | Thank you all for a productive working group meeting this morning! | =20 | As mentioned during our the meeting, the presentation of David Allan=20 | is the problem statement that was missing in the liaison we had=20 | earlier received from the Broadband Forum. You find David's slides=20 | on the meeting materials web page: | =20 | http://www.ietf.org/proceedings/09nov/slides/savi-8.pdf | =20 | The meeting materials web page now also includes last-minute updates=20 | to the presentation slides you saw during our meeting this morning. | Meeting minutes will follow shortly. | =20 | - Christian | =20 | =20 | _______________________________________________ | savi mailing list | savi@ietf.org | https://www.ietf.org/mailman/listinfo/savi From jeanmichel.combes@gmail.com Fri Nov 20 02:01:34 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0203F3A68D6 for ; Fri, 20 Nov 2009 02:01:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W59SolL8Wg8d for ; Fri, 20 Nov 2009 02:01:33 -0800 (PST) Received: from mail-iw0-f186.google.com (mail-iw0-f186.google.com [209.85.223.186]) by core3.amsl.com (Postfix) with ESMTP id DC3013A68A0 for ; Fri, 20 Nov 2009 02:01:32 -0800 (PST) Received: by iwn16 with SMTP id 16so2426871iwn.29 for ; Fri, 20 Nov 2009 02:01:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=5+Jy4lbRcBKRcjcJgaintTeHQHlnPOtSv5D/sPplyl8=; b=KapR7Rf6NEzi6K9PdYX9ylselVBlExPim4jWpjGYMWGsc7jkdrXrpyb9Vge+VhQrwe +jtVSteDbVHgtJFjoY7qAe/OLQT6yh9DEEWvqMkIcYLdTfSipdKYjNPSRTesQ3mbslaf 4PBK81He37ygghGbLiKIJR/hJbYXuJXXjHyw0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=Xn4uvCVajix188Khmg3OvxBTnMzgH4f/lYQYi0LOrPQ12IrPnlz3RXRYz5FOwmf/Ed K3Ti8ob7JRumVz3479dNWEy/nBqg4KlHMkrr9zq5k1y/dsHQasUX+fYIWZkMnEcGFuJM wyHWrQpncQ1p2THFeVu5htVx+8HVqhPNMbrtM= MIME-Version: 1.0 Received: by 10.231.83.75 with SMTP id e11mr2522951ibl.11.1258711282469; Fri, 20 Nov 2009 02:01:22 -0800 (PST) In-Reply-To: <94EB4EFF86094C60874A23F6EC344013@bombo> References: <729b68be0911091820t53301ed0s355a748f6fcb05b5@mail.gmail.com> <94EB4EFF86094C60874A23F6EC344013@bombo> Date: Fri, 20 Nov 2009 11:01:22 +0100 Message-ID: <729b68be0911200201q36ae7c2bx49e841821d4e5e97@mail.gmail.com> From: Jean-Michel Combes To: =?ISO-8859-1?Q?Alberto_Garc=EDa?= Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: savi@ietf.org Subject: Re: [savi] IKEv2 address assignment method and SAVI X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Nov 2009 10:01:34 -0000 Hi Alberto, at first sorry for the delayed reply and thanks for your comments. 2009/11/10 Alberto Garc=EDa : > Hi > > | =A0-----Mensaje original----- > | =A0De: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] En nombre d= e > Jean- > | =A0Michel Combes > | =A0Enviado el: martes, 10 de noviembre de 2009 3:21 > | =A0Para: savi@ietf.org > | =A0Asunto: [savi] IKEv2 address assignment method and SAVI > | > | =A0Hi, > | > | =A0as promised yesterday, here is an email regarding IKEv2 address > | =A0assignment method and SAVI interaction. The scenario I have in mind = is > | =A0concerning Mobile IPv6 bootstrapping [RFC5026] where the Home Agent > | =A0(HA) is providing the Home Address (HoA) to the Mobile Node (MN) via > | =A0IKEv2. > | > | =A0I assume the following architecture where the HA is the default rout= er > | =A0(and also a SAVI device) and the MN is on a Foreign Network (i.e. ou= t > | =A0of its Home Network). > | > | =A0 =A0 =A0 Internet-----MN > | =A0 =A0 =A0 =A0 | > | =A0 =A0 =A0 +----+ > | =A0 =A0 =A0 | HA | > | =A0 =A0 =A0 +----+ > | =A0 =A0 =A0 =A0 | > | =A0 =A0 =A0--------------------------- Home Network > | =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 | > | =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Node > | > | =A0In this scenario, the HA will provide the HoA to the MN even if the = MN > | =A0is outside of its Home Network (the HoA is linked to the Home Networ= k, > | =A0i.e. the network prefix of the HoA is advertised on the Home Network= ). > | =A0Unlike SLAAC or DHCP address assignment methods, there is no signali= ng > | =A0on the Home Network (i.e. all the exchanges are done via IKEv2 > | =A0directly between the HA and the MN) and there is no DAD process. > > I assume that RFC5026 is heavily relying in DHCP assignment, although it = is > weakly expressed in the specification: "The Home Agent could consult a DH= CP > server on the home link for the actual home address allocation." That may be a solution but the IKEv2 implementation could also use an internal address pool (e.g. IIRC this is the case for IKEv2 StrongSwan implementation). > Note that DHCPv6 recommends "The client SHOULD perform duplicate address > detection [17] on each of the addresses in any IAs it receives in the Rep= ly > message before using that address for traffic." In the case where IKEv2 uses a DHCP server to get the HoA for the MN, I agr= ee. > > If it does not check for duplicates and the address was in use by other h= ost > in the network, there is going to be some trouble, isn't it? > Are you saying that the HA assigns an address without caring about if it = is > duplicated or not? In the case where an internal address pool is used, there is no DAD for the assigned address. In the case where the assigned address is provided by a DHCP server, I would say the HA should do a DAD as a DHCP client. > This is a problem that may exceed SAVI scope. > > | > | =A0The HA, as a SAVI device, should be able to block any flow coming fr= om > | =A0a Node on the Home Network that tries to spoof the MN's HoA and > | =A0present proposals (i.e. FCFS, DHCP, SEND, etc.) may not be applied > | =A0(worse, IMHO, FCFS mechanism may corrupt the SAVI policy database) > | =A0because there is no signaling on the Home Network. > > > If the address is supposed to be unique (I understand that is the assumpt= ion > of RFC5026, although I don't fully understand why, if DAD is not performe= d), > and the HA is also a SAVI device, then > (1)- it could be specified that the HA created the SAVI binding when a MI= Pv6 > binding is created, and > (2)- it should defend it as specified in FCFS, sending DAD NADV if someon= e > sends a DAD NSOL > > Condition (2) is the natural result of a HA with a MIPv6 binding: the HA > acts as a proxy ND and defends the HoA of a registered MN by sending DAD > NADV when required. Condition (1) should be specifically stated in SAVI f= or > this case (and the requirement for the HA to be a SAVI device if RFC5026 = is > used). > > Does this make sense? IMHO, the problem is more complex. Explanations: - When the MN is not in its Home Network, all the flows where the src addr is the MN's HoA should be blocked - When the MN is in its Home Network, all the flows where the src addr is the MN's HoA and are going through a trusted anchor should be allowed A potential solution would be to update the SAVI policy in using the Binding Update messages. Now we can extend the issue when the SAVI device is not collocated with the= HA: Internet-----MN | +----+ | HA | +----+ | +-------+ | SAVI | +-------+ | --------------------------- Home Network | Node In this case, a potential solution would be to update the SAVI policy in the Binding Update (BU) AND Binding Acknowledgment (BA) messages because the SAVI device is not able to check whether the BU messages are correctly secured or not (i.e. the IPsec SA are set up between the HA and the MN). If the SAVI sees a BA message from the HA replying to a BU message, it may assume that the BU message was correct. Comments? Best regards. JMC. > > Regards, > Alberto > > | > | =A0Comments are welcome. > | > | =A0Thanks in advance. > | > | =A0Best regards. > | > | =A0JMC. > | =A0_______________________________________________ > | =A0savi mailing list > | =A0savi@ietf.org > | =A0https://www.ietf.org/mailman/listinfo/savi > > From jeanmichel.combes@gmail.com Fri Nov 20 02:03:22 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C581C3A68A9 for ; Fri, 20 Nov 2009 02:03:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.149 X-Spam-Level: X-Spam-Status: No, score=-2.149 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, J_CHICKENPOX_34=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QvrOWDuIDtjX for ; Fri, 20 Nov 2009 02:03:21 -0800 (PST) Received: from mail-iw0-f186.google.com (mail-iw0-f186.google.com [209.85.223.186]) by core3.amsl.com (Postfix) with ESMTP id D00F43A67F1 for ; Fri, 20 Nov 2009 02:03:21 -0800 (PST) Received: by iwn16 with SMTP id 16so2427583iwn.29 for ; Fri, 20 Nov 2009 02:03:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=l2RlBKRHjTSct6eOaNBktIUiHHAzgn4sKVslF9LghjY=; b=LI+WCl/HMbtozZEOa5BGiHzSnetBMZfNBs2yQ3UKpXR9Gm3jSKyr4gCQFWGcy1u1Iw MV3EGXEdWoOgR3SamerooJcDfNpt/2oE3d0n31cJDHw7ZTxnEoT/UHe/xwBb1anoicBr ztPu0S563qDMXGgjyXp7GAt8ZHTbFaRSse19s= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=EeQ7ShazNBR9rffOEGczYx9LoIYS3TXPd6hyfC9pbvHwf8T0VzGYiBTxm/sqcsSk2/ YO3246+kBEpS6/mhWzhNBIj/EsUEstmM9/mpq0+1vrASmw21k78Qt+hkXgU92aGnrVdZ yfF5H2YeFMuhgYJa7e+4WBkaAIUbSbRp0xlQ8= MIME-Version: 1.0 Received: by 10.231.1.22 with SMTP id 22mr2368894ibd.56.1258711395827; Fri, 20 Nov 2009 02:03:15 -0800 (PST) In-Reply-To: <004701ca61bf$6fda3660$4f8ea320$@tsinghua.edu.cn> References: <729b68be0911091820t53301ed0s355a748f6fcb05b5@mail.gmail.com> <004701ca61bf$6fda3660$4f8ea320$@tsinghua.edu.cn> Date: Fri, 20 Nov 2009 11:03:15 +0100 Message-ID: <729b68be0911200203od6b80e7ma4daf16c30354cae@mail.gmail.com> From: Jean-Michel Combes To: Guang Yao Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: savi@ietf.org Subject: Re: [savi] IKEv2 address assignment method and SAVI X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Nov 2009 10:03:22 -0000 Hi Guang, at first, sorry for the delayed reply and thanks for your comment. 2009/11/10 Guang Yao : > Hi, JMC > > I really think this is an important scenario. And as a minor supplement, = not > only the HA should filter spoofing of HoA, but also the MN MUST permit th= e > packets with source HoA(with no DAD or DHCP, either). Sorry, but I don't understand your point here :( Best regards. JMC. > > I think this scenario should be included in the framework. > > Pre-registered address(static address, HoA), should have the highest > priority. This means it cannot be hijacked using any other kind of > mechanism, but only manual configuration on SAVI device. > > Best regards, > Guang > >> -----Original Message----- >> From: savi-bounces@ietf.org [mailto:savi-bounces@ietf.org] On Behalf Of >> Jean-Michel Combes >> Sent: Tuesday, November 10, 2009 11:21 AM >> To: savi@ietf.org >> Subject: [savi] IKEv2 address assignment method and SAVI >> >> Hi, >> >> as promised yesterday, here is an email regarding IKEv2 address >> assignment method and SAVI interaction. The scenario I have in mind is >> concerning Mobile IPv6 bootstrapping [RFC5026] where the Home Agent >> (HA) is providing the Home Address (HoA) to the Mobile Node (MN) via >> IKEv2. >> >> I assume the following architecture where the HA is the default router >> (and also a SAVI device) and the MN is on a Foreign Network (i.e. out >> of its Home Network). >> >> =A0 =A0 =A0 Internet-----MN >> =A0 =A0 =A0 =A0 | >> =A0 =A0 =A0 +----+ >> =A0 =A0 =A0 | HA | >> =A0 =A0 =A0 +----+ >> =A0 =A0 =A0 =A0 | >> =A0 =A0 --------------------------- Home Network >> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 | >> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Node >> >> In this scenario, the HA will provide the HoA to the MN even if the MN >> is outside of its Home Network (the HoA is linked to the Home Network, >> i.e. the network prefix of the HoA is advertised on the Home Network). >> Unlike SLAAC or DHCP address assignment methods, there is no signaling >> on the Home Network (i.e. all the exchanges are done via IKEv2 >> directly between the HA and the MN) and there is no DAD process. >> >> The HA, as a SAVI device, should be able to block any flow coming from >> a Node on the Home Network that tries to spoof the MN's HoA and >> present proposals (i.e. FCFS, DHCP, SEND, etc.) may not be applied >> (worse, IMHO, FCFS mechanism may corrupt the SAVI policy database) >> because there is no signaling on the Home Network. >> >> Comments are welcome. >> >> Thanks in advance. >> >> Best regards. >> >> JMC. >> _______________________________________________ >> savi mailing list >> savi@ietf.org >> https://www.ietf.org/mailman/listinfo/savi > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > From jeanmichel.combes@gmail.com Fri Nov 20 02:07:33 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BF0F63A68A0 for ; Fri, 20 Nov 2009 02:07:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.224 X-Spam-Level: X-Spam-Status: No, score=-2.224 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S+5eGFtZSYwf for ; Fri, 20 Nov 2009 02:07:32 -0800 (PST) Received: from mail-iw0-f186.google.com (mail-iw0-f186.google.com [209.85.223.186]) by core3.amsl.com (Postfix) with ESMTP id BD9473A6814 for ; Fri, 20 Nov 2009 02:07:32 -0800 (PST) Received: by iwn16 with SMTP id 16so2429226iwn.29 for ; Fri, 20 Nov 2009 02:07:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=C1Xua52ujoNL/V/1MG9u/WYeTajI1uHXGlV3OCXYDGE=; b=xeHEcSil9OG4CVyIKFJnRlsvbq4qVONkAq3iNyg+lOKkmQhMIM9jbYQvSZti1CqYXM uHKtQydk5AdwDrMboDhnrZtctq9uCN5S5NRZOQN8tUYnDywkUI/pMbvhfv5sqhDRpEuK BqxkSrrvHmmFwte8GGFmGkFhG90GrcpKyYo2c= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=WadJTyA44ZrhYHd3Wj+gDst7VK8bdTauiDgjej55H3KYAp5zzRALmAv2IexfqVHfxc JU3ID0wIgy5wGUpfP3VszSw+jBbyVRspWqk94sva/OfEKqmxugmvzTR+uqkg1RQHCCLf X11Sm9Ub1xDTL7umbfq6L2RI6vLF4X0DWi+Lw= MIME-Version: 1.0 Received: by 10.231.20.230 with SMTP id g38mr2419471ibb.49.1258711647677; Fri, 20 Nov 2009 02:07:27 -0800 (PST) In-Reply-To: <1C22234FE5B446D288E07133176792FC@bombo> References: <1C22234FE5B446D288E07133176792FC@bombo> Date: Fri, 20 Nov 2009 11:07:27 +0100 Message-ID: <729b68be0911200207y36dc7e2ak903bab9aa4fdd68d@mail.gmail.com> From: Jean-Michel Combes To: =?ISO-8859-1?Q?Alberto_Garc=EDa?= Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Cc: SAVI Mailing List Subject: Re: [savi] MIPv6 and SAVI X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Nov 2009 10:07:33 -0000 Hi again Alberto, I agree with you and I have sent my comments on this issue in a previous mail (I missed this email before my previous reply). Best regards. JMC. 2009/11/10 Alberto Garc=EDa : > Hi, > > While I was answering to the =91IKEv2 address assignment method and SAVI= =92 > mail, I realized that there may be a fundamental issue with SAVI affectin= g > its interaction with MIPv6 (regardless the way addresses are obtained fro= m > the HA to be assigned to MN). > > > > While the HA has a binding for the MN to a CoA, the HA defends the HoA fo= r > the MN with DAD NADVs (if any node performs DAD NSOLs). > > Either if the HA is a SAVI device or it is just a node outside the SAVI > perimeter, the result would be that SAVI would prevent hosts connecting > through other ports to use the HoA as source address. > > However, the mechanisms specified in 11.5.4 for informing the HA that the= MN > is back in the Home Network is (In RFC 3775, section 11.5.4): > > =A0=A0=A0The mobile node SHOULD then send a Binding Update to its home ag= ent, > > =A0=A0 to instruct its home agent to no longer intercept or tunnel packet= s > > =A0=A0 for it.=A0 [=85] The mobile node MUST use its home > > =A0=A0 address as the source address in the Binding Update. > > > > This would not be allowed by default by FCFS SAVI (and in general, by any > reasonable SAVI deployment). > > Do you think this is a problem? > > > > A solution could be to make SAVI devices to just let pass this type of MI= Pv6 > Binding Update messages. This would make the HA stop defending the addres= s, > and the MN could gain the SAVI binding by the mechanisms currently define= d > to support mobility in the L2 network. > > This still provides good protection: the SAVI binding is not released unt= il > the SAVI device is convinced that the legitimate MN is in the network, an= d > this (the Binding Update) is protected by IPsec. > > Hosts not using MIPv6 are not affected, since they are not going to give = up > its binding regardless the Binding Update messages that could issued by > attackers. > > > > Regards, > > alberto > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > > From xuke@mail.tsinghua.edu.cn Fri Nov 20 02:10:34 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A19853A6A50 for ; Fri, 20 Nov 2009 02:10:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.001 X-Spam-Level: X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[BAYES_50=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DiEpaBIwVLSW for ; Fri, 20 Nov 2009 02:10:31 -0800 (PST) Received: from smtp.tsinghua.edu.cn (smtp.tsinghua.edu.cn [166.111.8.81]) by core3.amsl.com (Postfix) with ESMTP id CC8FD28C119 for ; Fri, 20 Nov 2009 02:10:30 -0800 (PST) Received: from [61.48.59.180] (helo=xuke-sony) by smtp.tsinghua.edu.cn with esmtpa (Exim 4.69) (envelope-from ) id 1NBQRb-0004Tl-Jd for savi@ietf.org; Fri, 20 Nov 2009 18:10:23 +0800 Date: Fri, 20 Nov 2009 18:10:22 +0800 From: "xuke" To: "SAVI Mailing List" References: <44328038-1840-4B14-B616-CF33E023FBC6@ericsson.com> Message-ID: <200911201810218121222@mail.tsinghua.edu.cn> Organization: Institute of Computer Network and Technology, Tsinghua University X-mailer: Foxmail 6, 15, 201, 22 [cn] Mime-Version: 1.0 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: 7bit X-Mailman-Approved-At: Fri, 20 Nov 2009 11:05:42 -0800 Subject: Re: [savi] Consensus call on adopting draft-bi-savi-dhcp-00 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: xuke@mail.tsinghua.edu.cn List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Nov 2009 10:10:34 -0000 Yes, xuke >Folks - > >During the SAVI working group meeting today, we made a consensus check >about adopting Internet draft "draft-bi-savi-dhcp-00" as a working group >document, showing a clear majority of attendees in favor. I would now >like to initiate a confirming consensus call here on the mailing list. > >Please answer the following question with either "yes" or "no": > > Should the SAVI working group adopt Internet draft > "draft-bi-savi-dhcp-00" as a starting point for the SAVI protocol > specification for DHCP-assigned IP addresses? > >Please respond before Friday, November 20. I am attaching Internet >draft "draft-bi-savi-dhcp-00" for your convenience. > >- Christian > > > >_______________________________________________ >savi mailing list >savi@ietf.org >https://www.ietf.org/mailman/listinfo/savi > From robin@huawei.com Thu Nov 26 18:09:01 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 52A313A67E1 for ; Thu, 26 Nov 2009 18:09:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.66 X-Spam-Level: ** X-Spam-Status: No, score=2.66 tagged_above=-999 required=5 tests=[BAYES_05=-1.11, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1, SARE_RECV_IP_219128=1.666] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TSmw4dZGEcCF for ; Thu, 26 Nov 2009 18:09:00 -0800 (PST) Received: from szxga03-in.huawei.com (unknown [119.145.14.66]) by core3.amsl.com (Postfix) with ESMTP id 8BE7D3A67DD for ; Thu, 26 Nov 2009 18:09:00 -0800 (PST) Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KTQ002K3WMKNC@szxga03-in.huawei.com> for savi@ietf.org; Fri, 27 Nov 2009 10:08:45 +0800 (CST) Received: from huawei.com ([172.24.2.119]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KTQ00DLFWMKNF@szxga03-in.huawei.com> for savi@ietf.org; Fri, 27 Nov 2009 10:08:44 +0800 (CST) Received: from [172.24.1.6] (Forwarded-For: [219.133.197.20]) by szxmc03-in.huawei.com (mshttpd); Fri, 27 Nov 2009 10:08:44 +0800 Date: Fri, 27 Nov 2009 10:08:44 +0800 From: zhengruobin 35664 To: savi@ietf.org Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-type: text/plain; charset=us-ascii Content-language: zh-CN Content-transfer-encoding: 7BIT Content-disposition: inline X-Accept-Language: zh-CN Priority: normal Subject: [savi] about draft-ietf-savi-fcfs-02 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Nov 2009 02:09:01 -0000 Hi There, In the draft-ietf-savi-fcfs-01, there is a description as follows in 3.2.2. Processing of control packets of draft-ietf-savi-fcfs-01: "If no NADV message for that Target Address is received in DADTimeout, then the status of the entry is change to valid and the lifetime of the entry is set to LIFETIME. In addition, if the address contained in the newly created entry is a link local address, FCFS SAVI MAY as well create entries for the global addresses resulting from concatenating the Interface Identifier of the link local address and the global prefixes contained in the Prefix List for the Interface through which the NSOL message was received." But the above is not covered in the draft-ietf-savi-fcfs-02. I wonder what happened to this. Best regards, Robin From marcelo@it.uc3m.es Thu Nov 26 23:26:22 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DE2053A6995 for ; Thu, 26 Nov 2009 23:26:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.645 X-Spam-Level: X-Spam-Status: No, score=-6.645 tagged_above=-999 required=5 tests=[AWL=-0.046, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2yOB7ZyNJEBP for ; Thu, 26 Nov 2009 23:26:22 -0800 (PST) Received: from smtp01.uc3m.es (smtp01.uc3m.es [163.117.176.131]) by core3.amsl.com (Postfix) with ESMTP id 0AE373A698B for ; Thu, 26 Nov 2009 23:26:20 -0800 (PST) Received: from marcelo-bagnulos-macbook-pro.local (unknown [95.18.31.218]) by smtp01.uc3m.es (Postfix) with ESMTP id 31B08B48A75; Fri, 27 Nov 2009 08:26:13 +0100 (CET) Message-ID: <4B0F7F0A.5080002@it.uc3m.es> Date: Fri, 27 Nov 2009 08:26:02 +0100 From: marcelo bagnulo braun User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) MIME-Version: 1.0 To: zhengruobin 35664 References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-TM-AS-Product-Ver: IMSS-7.0.0.3116-6.0.0.1038-17004.003 Cc: savi@ietf.org Subject: Re: [savi] about draft-ietf-savi-fcfs-02 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Nov 2009 07:26:23 -0000 zhengruobin 35664 escribió: > Hi There, > > In the draft-ietf-savi-fcfs-01, there is a description as follows in 3.2.2. Processing of control packets of draft-ietf-savi-fcfs-01: > > "If no NADV message for that Target Address is received in > DADTimeout, then the status of the entry is change to valid and > the lifetime of the entry is set to LIFETIME. In addition, if > the address contained in the newly created entry is a link > local address, FCFS SAVI MAY as well create entries for the > global addresses resulting from concatenating the Interface > Identifier of the link local address and the global prefixes > contained in the Prefix List for the Interface through which > the NSOL message was received." > > But the above is not covered in the draft-ietf-savi-fcfs-02. I wonder what happened to this. > > i understand you are talking about the optimization defined by the MAY, right? since the version 01 has been through a major rewriting, this was dropped unitentionally. I will include it in the next version if people still think it is a good idea regards, marcelo > Best regards, > > Robin > > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > > From robin@huawei.com Fri Nov 27 18:51:10 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E84AD3A6917 for ; Fri, 27 Nov 2009 18:51:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ThqMLDaRMYKS for ; Fri, 27 Nov 2009 18:51:10 -0800 (PST) Received: from szxga03-in.huawei.com (szxga03-in.huawei.com [119.145.14.66]) by core3.amsl.com (Postfix) with ESMTP id F13293A68E9 for ; Fri, 27 Nov 2009 18:51:09 -0800 (PST) Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KTS00KI7T92E8@szxga03-in.huawei.com> for savi@ietf.org; Sat, 28 Nov 2009 10:51:02 +0800 (CST) Received: from huawei.com ([172.24.2.119]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KTS00HD4T92YU@szxga03-in.huawei.com> for savi@ietf.org; Sat, 28 Nov 2009 10:51:02 +0800 (CST) Received: from z35564 ([10.70.40.122]) by szxml06-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KTS00CLGT92AQ@szxml06-in.huawei.com> for savi@ietf.org; Sat, 28 Nov 2009 10:51:02 +0800 (CST) Date: Sat, 28 Nov 2009 10:51:01 +0800 From: robin In-reply-to: <4B0F7F0A.5080002@it.uc3m.es> To: 'marcelo bagnulo braun' Message-id: <000501ca6fd5$9f08ed40$7a28460a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Office Outlook 11 Content-type: text/plain; charset=iso-8859-1 Content-transfer-encoding: quoted-printable Thread-index: AcpvMvv6Ui2AlB+fQcOhetGtDE8VMgAoZUAQ Cc: savi@ietf.org Subject: Re: [savi] about draft-ietf-savi-fcfs-02 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 28 Nov 2009 02:51:11 -0000 Hi marcelo, In IPv4 world, there is a binding of IPv4 address and port in BRAS for = the sake of security. When migration to IPv6, we do need a method to bind = the IPv6 address and its corresponding port.=20 The optimization defined by the MAY in draft-ietf-savi-fcfs-01 provided = a practical solution for this.=20 Best Regards, Robin -----Original Message----- From: marcelo bagnulo braun [mailto:marcelo@it.uc3m.es]=20 Sent: Friday, November 27, 2009 3:26 PM To: zhengruobin 35664 Cc: savi@ietf.org Subject: Re: [savi] about draft-ietf-savi-fcfs-02 zhengruobin 35664 escribi=F3: > Hi There, > > In the draft-ietf-savi-fcfs-01, there is a description as follows in 3.2.2. Processing of control packets of draft-ietf-savi-fcfs-01: > > "If no NADV message for that Target Address is received in > DADTimeout, then the status of the entry is change to valid = and > the lifetime of the entry is set to LIFETIME. In addition, = if > the address contained in the newly created entry is a link > local address, FCFS SAVI MAY as well create entries for the > global addresses resulting from concatenating the Interface > Identifier of the link local address and the global prefixes > contained in the Prefix List for the Interface through which > the NSOL message was received." > > But the above is not covered in the draft-ietf-savi-fcfs-02. I wonder = what happened to this. > > =20 i understand you are talking about the optimization defined by the MAY,=20 right? since the version 01 has been through a major rewriting, this was=20 dropped unitentionally. I will include it in the next version if people still think it is a good = idea regards, marcelo > Best regards, > > Robin > > > _______________________________________________ > savi mailing list > savi@ietf.org > https://www.ietf.org/mailman/listinfo/savi > > =20 From marcelo@it.uc3m.es Sat Nov 28 00:27:19 2009 Return-Path: X-Original-To: savi@core3.amsl.com Delivered-To: savi@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8ABE33A6840 for ; Sat, 28 Nov 2009 00:27:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.642 X-Spam-Level: X-Spam-Status: No, score=-6.642 tagged_above=-999 required=5 tests=[AWL=-0.043, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gjzZ1rY7ZetL for ; Sat, 28 Nov 2009 00:27:18 -0800 (PST) Received: from smtp01.uc3m.es (smtp01.uc3m.es [163.117.176.131]) by core3.amsl.com (Postfix) with ESMTP id 6CBC73A6820 for ; Sat, 28 Nov 2009 00:27:18 -0800 (PST) Received: from marcelo-bagnulos-macbook-pro.local (unknown [95.18.31.194]) by smtp01.uc3m.es (Postfix) with ESMTP id B4D0DBA7B90; Sat, 28 Nov 2009 09:27:10 +0100 (CET) Message-ID: <4B10DED3.5070001@it.uc3m.es> Date: Sat, 28 Nov 2009 09:26:59 +0100 From: marcelo bagnulo braun User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) MIME-Version: 1.0 To: robin References: <000501ca6fd5$9f08ed40$7a28460a@china.huawei.com> In-Reply-To: <000501ca6fd5$9f08ed40$7a28460a@china.huawei.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-TM-AS-Product-Ver: IMSS-7.0.0.3116-6.0.0.1038-17004.003 Cc: savi@ietf.org Subject: Re: [savi] about draft-ietf-savi-fcfs-02 X-BeenThere: savi@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Mailing list for the SAVI working group at IETF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 28 Nov 2009 08:27:19 -0000 robin escribió: > Hi marcelo, > In IPv4 world, there is a binding of IPv4 address and port in BRAS what is bras? > for the > sake of security. When migration to IPv6, we do need a method to bind the > IPv6 address and its corresponding port. > The optimization defined by the MAY in draft-ietf-savi-fcfs-01 provided a > practical solution for this. > > i am not sure i follow (fwiwi i am not oposing to this, i simply fail to understnad what you are saying) even without this optimization, we can create a binding for any IPv6 address and a port, so i am not sure i understnad what is your point. The only potential issue that i understnad this optimization is addressing, is the case of legacy implementations, that follow 2462 instead of 4862 that may not do the DAD for the global address if they have done so for the corresponding link local. Regards, marcelo > Best Regards, > > Robin > > -----Original Message----- > From: marcelo bagnulo braun [mailto:marcelo@it.uc3m.es] > Sent: Friday, November 27, 2009 3:26 PM > To: zhengruobin 35664 > Cc: savi@ietf.org > Subject: Re: [savi] about draft-ietf-savi-fcfs-02 > > zhengruobin 35664 escribió: > >> Hi There, >> >> In the draft-ietf-savi-fcfs-01, there is a description as follows in >> > 3.2.2. Processing of control packets of draft-ietf-savi-fcfs-01: > >> "If no NADV message for that Target Address is received in >> DADTimeout, then the status of the entry is change to valid and >> the lifetime of the entry is set to LIFETIME. In addition, if >> the address contained in the newly created entry is a link >> local address, FCFS SAVI MAY as well create entries for the >> global addresses resulting from concatenating the Interface >> Identifier of the link local address and the global prefixes >> contained in the Prefix List for the Interface through which >> the NSOL message was received." >> >> But the above is not covered in the draft-ietf-savi-fcfs-02. I wonder what >> > happened to this. > >> >> > > i understand you are talking about the optimization defined by the MAY, > right? > since the version 01 has been through a major rewriting, this was > dropped unitentionally. > > I will include it in the next version if people still think it is a good > idea > > regards, marcelo > > > > >> Best regards, >> >> Robin >> >> >> _______________________________________________ >> savi mailing list >> savi@ietf.org >> https://www.ietf.org/mailman/listinfo/savi >> >> >> > > >