From 39a54f211e95f42f66e4e7c8d380445c1037c66f Mon Sep 17 00:00:00 2001 From: teastep Date: Wed, 18 May 2005 21:12:46 +0000 Subject: [PATCH] Add Two ISP graphics git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2135 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall-docs2/Multiple_Zones.xml | 109 +++-- Shorewall-docs2/Shorewall_Squid_Usage.xml | 30 +- Shorewall-docs2/Shorewall_and_Routing.xml | 273 ++++++++++- Shorewall-docs2/UPnP.xml | 8 +- Shorewall-docs2/images/TwoISPs.png | Bin 0 -> 27186 bytes Shorewall-docs2/images/TwoISPs.vdx | 442 ++++++++++++++++++ .../starting_and_stopping_shorewall.xml | 107 ++++- 7 files changed, 880 insertions(+), 89 deletions(-) create mode 100755 Shorewall-docs2/images/TwoISPs.png create mode 100755 Shorewall-docs2/images/TwoISPs.vdx diff --git a/Shorewall-docs2/Multiple_Zones.xml b/Shorewall-docs2/Multiple_Zones.xml index 7c7ade943..c89968846 100644 --- a/Shorewall-docs2/Multiple_Zones.xml +++ b/Shorewall-docs2/Multiple_Zones.xml @@ -15,10 +15,10 @@ - 2004-03-15 + 2005-05-15 - 2003 + 2003-2005 Thomas M. Eastep @@ -29,17 +29,18 @@ 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the license is included in the section entitled - GNU Free Documentation License. + GNU Free Documentation + License.
Introduction - While most configurations can be handled with each of the - firewall's network interfaces assigned to a single zone, there are - cases where you will want to divide the hosts accessed through an - interface between two or more zones. + While most configurations can be handled with each of the firewall's + network interfaces assigned to a single zone, there are cases where you + will want to divide the hosts accessed through an interface between two or + more zones. @@ -57,7 +58,8 @@ There are routers accessible through the interface and you want - to treat the networks accessed through that router as a separate zone. + to treat the networks accessed through that router as a separate + zone. @@ -83,8 +85,8 @@ These examples use the local zone but the same - technique works for any zone. Remember that Shorewall - doesn't have any conceptual knowledge of Internet, + technique works for any zone. Remember that Shorewall doesn't + have any conceptual knowledge of Internet, Local, or DMZ so all zones except the firewall itself ($FW) are the same as far as Shorewall is concerned. Also, the examples use private (RFC 1918) addresses but public IP addresses can @@ -119,7 +121,8 @@ The hosts in 192.168.1.0/24 know that the route to - 192.168.2.0/24 is through the router. + 192.168.2.0/24 is through the router. @@ -132,11 +135,11 @@ Will One Zone be Enough? If the firewalling requirements for the two local networks is the - same but the hosts in 192.168.1.0/24 don't know how to route to + same but the hosts in 192.168.1.0/24 don't know how to route to 192.168.2.0/24 then you need to configure the firewall slightly differently. This type of configuration is rather stupid from an IP networking point of view but it is sometimes necessary because you - simply don't want to have to reconfigure all of the hosts in + simply don't want to have to reconfigure all of the hosts in 192.168.1.0/24 to add a persistent route to 192.168.2.0/24. On the firewall: @@ -156,13 +159,32 @@ Restart Shorewall. + + If this still doesn't work at all or if it works for connections + in one direction but not for connections in the other direction + then: + + + + You must be running Shorewall version 2.0.16 or later; + and + + + + You need to set DROPINVALID=No in + /etc/shorewall/shorewall.conf. + +
I Need Separate Zones - If you need to make 192.168.2.0/24 into it's own zone, you can - do it one of two ways; Nested Zones or Parallel Zones. + If you need to make 192.168.2.0/24 into it's own zone, you can do + it one of two ways; Nested Zones or Parallel Zones. Again, it is likely + that you will need to be running Shorewall 2.0.16 or later and that you + will have to set DROPINVALID=No in + /etc/shorewall/shorewall.conf.
Nested Zones @@ -173,13 +195,13 @@ - The advantage of this approach is that the zone loc1 - can use CONTINUE policies such that if a connection request - doesn't match a loc1 rule, it will be matched - against the loc rules. For example, if your - loc1->net policy is CONTINUE then if a connection request from - loc1 to the internet doesn't match any rules for loc1->net - then it will be checked against the loc->net rules. + The advantage of this approach is that the zone + loc1 can use CONTINUE policies such that if a + connection request doesn't match a loc1 rule, it will + be matched against the loc rules. For example, if your + loc1->net policy is CONTINUE then if a connection request from loc1 + to the internet doesn't match any rules for loc1->net then it will + be checked against the loc->net rules. /etc/shorewall/zones @@ -201,9 +223,9 @@ loc eth1 192.168.1.255 #ZONE HOSTS loc1 eth1:192.168.2.0/24 - If you don't need Shorewall to set up infrastructure to - route traffic between loc and loc1, add - these two policies. + If you don't need Shorewall to set up infrastructure to route + traffic between loc and loc1, add these + two policies. /etc/shorewall/policy @@ -227,7 +249,7 @@ loc1 Local1 Hosts accessed Directly from Firewall loc2 Local2 Hosts accessed via the internal Router - Here it doesn't matter which zone is defined first. + Here it doesn't matter which zone is defined first. /etc/shorewall/interfaces @@ -241,7 +263,7 @@ loc2 Local2 Hosts accessed via the internal Router - You don't need Shorewall to set up infrastructure to route + You don't need Shorewall to set up infrastructure to route traffic between loc and loc1, so add these two policies: @@ -256,7 +278,7 @@ loc2 loc1 NONE Some Hosts have Special Firewalling Requirements There are cases where a subset of the addresses associated with an - interface need special handling. Here's an example. + interface need special handling. Here's an example. @@ -281,9 +303,9 @@ loc eth1 192.168.1.255 /etc/shorewall/hosts#ZONE HOSTS loc1 eth1:192.168.1.8/29 - You probably don't want Shorewall to set up infrastructure to - route traffic between loc and loc1 so you - should add these two policies. + You probably don't want Shorewall to set up infrastructure to route + traffic between loc and loc1 so you should + add these two policies. /etc/shorewall/policy @@ -295,16 +317,16 @@ loc1 loc NONE
One-armed Router - Nested zones may also be used to configure a one-armed - router (I don't call it a firewall because it is very - insecure. For example, if you connect to the internet via cable modem, - your next door neighbor has full access to your local systems as does - everyone else connected to the same cable modem head-end controller). Here - eth0 is configured with both a public IP address and an RFC 1918 address - (More on that topic may be found Nested zones may also be used to configure a + one-armed router (I don't call it a firewall + because it is very insecure. For example, if you connect to the internet + via cable modem, your next door neighbor has full access to your local + systems as does everyone else connected to the same cable modem head-end + controller). Here eth0 is configured with both a public IP address and an + RFC 1918 address (More on that topic may be found here). Hosts in the loc zone are configured with their default gateway set to - the Shorewall router's RFC1918 address. + the Shorewall router's RFC1918 address. @@ -333,10 +355,11 @@ loc eth0:192.168.1.0/24 maclist #INTERFACE SUBNET ADDRESS eth0:!192.168.1.0/24 192.168.1.0/24 - Note that the maclist option is specified in /etc/shorewall/interfaces. - This is to help protect your router from unauthorized access by your - friends and neighbors. Start without maclist then add it and configure - your /etc/shorewall/maclist + Note that the maclist option is specified in + /etc/shorewall/interfaces. This is to help protect + your router from unauthorized access by your friends and neighbors. Start + without maclist then add it and configure your /etc/shorewall/maclist file when everything else is working.
\ No newline at end of file diff --git a/Shorewall-docs2/Shorewall_Squid_Usage.xml b/Shorewall-docs2/Shorewall_Squid_Usage.xml index 17d9d8531..d287993f5 100644 --- a/Shorewall-docs2/Shorewall_Squid_Usage.xml +++ b/Shorewall-docs2/Shorewall_Squid_Usage.xml @@ -15,7 +15,7 @@ - 2005-03-01 + 2005-05-16 2003-2005 @@ -174,7 +174,9 @@ REDIRECT loc 3128 tcp www - !206.124.146. already enabled from the local zone to the internet. If you are running a Shorewall version earlier than 2.3.3 OR your - kernel and/or iptables do not have ROUTE target support then: + kernel and/or iptables do not have ROUTE target + support then: @@ -218,17 +220,19 @@ fi If you are running Shorewall 2.3.3 or later and your kernel and - iptables have ROUTE target support then add this entry to + iptables have ROUTE + target support then add this entry to /etc/shorewall/routes:
- #SOURCE DEST PROTO PORT(S) SOURCE INTERFACE GATEWAY + #SOURCE DEST PROTO PORT(S) SOURCE TEST INTERFACE GATEWAY # PORT(S) -eth1 0.0.0.0/0 tcp 80 - eth1 192.168.1.3 +eth1 0.0.0.0/0 tcp 80 - - eth1 192.168.1.3
Regardless of your Shorewall version or your kernel and iptables - ROUTE target support, you need the following: + ROUTE target + support, you need the following: @@ -282,7 +286,9 @@ chkconfig --level 35 iptables on Your DMZ interface is eth1 and your local interface is eth2. If you are running a Shorewall version earlier than 2.3.3 OR your - kernel and/or iptables do not have ROUTE target support then: + kernel and/or iptables do not have ROUTE target + support then: @@ -351,17 +357,19 @@ fi If you are running Shorewall 2.3.3 or later and your kernel and - iptables have ROUTE target support then add this entry to + iptables have ROUTE + target support then add this entry to /etc/shorewall/routes:
- #SOURCE DEST PROTO PORT(S) SOURCE INTERFACE GATEWAY + #SOURCE DEST PROTO PORT(S) SOURCE TEST INTERFACE GATEWAY # PORT(S) -eth2 0.0.0.0/0 tcp 80 - eth1 192.0.2.177 +eth2 0.0.0.0/0 tcp 80 - - eth1 192.0.2.177
Regardless of your Shorewall version or your kernel and iptables - ROUTE target support, you need the following: + ROUTE target + support, you need the following: diff --git a/Shorewall-docs2/Shorewall_and_Routing.xml b/Shorewall-docs2/Shorewall_and_Routing.xml index f04032da2..30bca8b41 100644 --- a/Shorewall-docs2/Shorewall_and_Routing.xml +++ b/Shorewall-docs2/Shorewall_and_Routing.xml @@ -15,7 +15,7 @@ - 2005-05-15 + 2005-05-18 2005 @@ -178,7 +178,7 @@ configure your alternate routing table at boot time and that other than as described in the previous section, there is no connection between Shorewall and routing when using Shorewall versions - prior to 2.3.3. + prior to 2.3.3.
@@ -206,7 +206,194 @@
- Routing with Shorewall 2.3.3 and Later + Multiple Internet Connection Support in Shorewall 2.3.3 and + Later + + Beginning with Shorewall 2.3.3, support is included for multiple + internet connections. + +
+ Overview + + Let's assume that a firewall is connected via two separate + ethernet interfaces to two different ISP as in the following + diagram. + + + + eth0 connects to ISP1. The IP address of eth0 is + 206.124.146.176 and the ISP's gateway router has IP address + 206.124.146.254. + + + + eth1 connects to ISP 2. The IP address of eth1 is + 130.252.99.27 and the ISP's gateway router has IP address + 130.252.99.254. + + + + Each of these providers is described in an + entry in the file /etc/shorewall/providers. + + Entries in /etc/shorewall/providers can + specify that outgoing connections are to be load-balanced between the + two ISPs. Entries in /etc/shorewall/tcrules can be + used to direct particular outgoing connections to one ISP or the + other. + + Connections from the internet are automatically routed back out of + the correct interface and through the correct ISP gateway. This works + whether the connection is handled by the firewall itself or if it is + routed or port-forwarded to a system behind the firewall. + + Shorewall will set up the routing and will update the + /etc/iproute2/rt_tables to include the table names and number of the + tables that it adds. + + + This feature uses packet + marking to control the routing. As a consequence, there are + some restrictions concerning entries in /etc/shorewall/tcrules: + + + + Packet marking for traffic control purposes must be done in + the FORWARD table. + + + + You may not use the SAVE or RESTORE options. + + + + You man not use connection marking. + + + + + The /etc/shorewall/providers file can also be + used in other routing senarios. See the Squid documentation for an + example. +
+ +
+ /etc/shorewall/providers File + + Entries in this file have the following columns. As in all + Shorewall configuration files, enter "-" in a column if you don't want + to enter any value. + + + + /etc/shorewall/providers: + + + NAME + + + The provider name. Must begin with a letter and consist of + letters and digits. The provider name becomes the name of the + generated routing table for this provider. + + + + + NUMBER + + + A number between 1 and 252. This becomes the routing table + number for the generated table for this provider. + + + + + MARK + + + A mark value used in your /etc/shorewall/tcrules file to + direct packets to this provider. Shorewall will also mark + connections that have seen input from this provider with this + value and will restore the packet mark in the PREROUTING + CHAIN. + + + + + DUPLICATE + + + Gives the name and number of a routing table to duplicate. + May be 'main' or the name of a previously declared provider. For + most applications, you want to specify 'main' here. + + + + + INTERFACE + + + The name of the interface to the provider. + + + + + GATEWAY + + + The IP address of the provider's Gateway router. + + + + + OPTIONS + + + A comma-separated list from the following: + + + + track + + + If specified, connections FROM this interface are to + be tracked so that responses may be routed back out this + same interface. + + You want specify 'track' if internet hosts will be + connecting to local servers through this provider. + + + + + balance + + + The providers that have 'default' specified will get + outbound traffic load-balanced among them. + + + + + + + +
+ +
+ Example + + The configuration in the figure at the top of this section would + be specified as follows: + + #NAME NUMBER MARK DUPLICATE INTERFACE GATEWAY OPTIONS +ISP1 1 1 main eth0 206.124.146.254 track,balance +ISP2 2 2 main eth1 130.252.99.254 track,balance +
+
+ +
+ Experimental Routing with Shorewall 2.3.3 and Later Beginning with Shorewall 2.2.3, Shorewall is integrated with the ROUTE target extension available from Netfilter Patch-O-Matic-NG ( As of this writing, I know of no distribution that is shipping a kernel or iptables with the ROUTE target patch included. This means that - you must patch and build your own kernel and iptables. + you must patch and build your own kernel and iptables in order to be + able to use the feature described in this section. This code remains experimental since there is no + intent by the Netfilter team to ever submit the ROUTE target patch for + inclusion in the official kernels from kernel.org. See Shorewall FAQ 42 for @@ -224,7 +415,13 @@ determination. Routing with Shorewall is specified through entries in - /etc/shorewall/routes. Columns in this file are as follows: + /etc/shorewall/routes. Note that entries in the /etc/shorewall/routes file + override the routing specified in your routing tables. These rules + generate Netfilter rules in the mangle tables FORWARD chain or OUTPUT + chain depending whether the packets are being routed through the firewall + or originate on the firewall itself (see figure above). + + Columns in this file are as follows: @@ -330,7 +527,58 @@ Optional) Source port(s). If omitted, any source port is acceptable. Specified as a comma-separated list of port names, port - numbers or port ranges. + numbers or port ranges. + + + + + TEST + + + Defines a test on the existing packet or connection mark. The + rule will match only if the test returns true. Tests have the + format + +
+ [!]<value>[/<mask>][:C] +
+ + where: + + + + ! + + + Inverts the test (not equal) + + + + + <value> + + + Value of the packet or connection mark. + + + + + <mask> + + + A mask to be applied to the mark before testing + + + + + :C + + + Designates a connection mark. If omitted, the packet + mark's value is tested + + + @@ -355,8 +603,8 @@ The idea here is that traffic that matches the SOURCE, DEST, PROTO, - PORT(S) and SOURCE PORT(S) columns is routed out of the INTERFACE through - the optional GATEWAY. + PORT(S), SOURCE PORT(S) and TEST columns is routed out of the INTERFACE + through the optional GATEWAY.
Example: @@ -366,17 +614,12 @@ your DMZ. You would use the following entry in /etc/shorewall/routes: - #SOURCE DEST PROTO PORT(S) SOURCE INTERFACE GATEWAY + #SOURCE DEST PROTO PORT(S) SOURCE TEST INTERFACE GATEWAY # PORT(S) -eth1 0.0.0.0/0 tcp 80 - eth1 192.168.3.22 +eth1 0.0.0.0/0 tcp 80 - - eth1 192.168.3.22 This entry specifies that "traffic coming in through eth1 to TCP port 80 is to be routed out of eth1 to gateway 192.168.3.22".
- - Note that entries in the /etc/shorewall/routes file override the - routing specified in your routing tables. These rules generate Netfilter - rules in the mangle tables FORWARD chain or OUTPUT chain (see figure - above).
\ No newline at end of file diff --git a/Shorewall-docs2/UPnP.xml b/Shorewall-docs2/UPnP.xml index afd1c513c..614233b8c 100644 --- a/Shorewall-docs2/UPnP.xml +++ b/Shorewall-docs2/UPnP.xml @@ -15,7 +15,7 @@ - 2005-05-07 + 2005-05-16 2005 @@ -39,7 +39,7 @@ In Shorewall 2.2.4, support was added for UPnP (Universal Plug and Play) using linux-igd (http://linux-idg.sourceforge.net). + url="http://linux-igd.sourceforge.net">http://linux-igd.sourceforge.net). UPnP is required by a number of popular applications including MSN IM. @@ -83,7 +83,7 @@
- linux-idg Configuration + linux-igd Configuration In /etc/upnpd.conf, you will want: @@ -128,7 +128,7 @@ allowinUPnP loc fw forwardUPnP net loc You must also ensure that you have a route to 224.0.0.0/4 on your - internal (local) interface as described in the linux-idg + internal (local) interface as described in the linux-igd documentation.
\ No newline at end of file diff --git a/Shorewall-docs2/images/TwoISPs.png b/Shorewall-docs2/images/TwoISPs.png new file mode 100755 index 0000000000000000000000000000000000000000..81cfef70d2cf5304d80370489444afe34c0a3996 GIT binary patch literal 27186 zcmeGEMYpp%!Tx%1p_CWzm0Y*VV0V}?fRYySqNTQ&iZh`>F zJN-Cv1jt{g?&=ECC^eH*N5~7HjnsQ76qNcz>_;bPjj&!tu*dlN{XbvJ>n~YHCT(? z6wPH1Neh!a`tmb~N~1=dk{+CrRHFJ!@grQx|GCmGtiJzKp7G#+V9v$$6!`Mb`%!y* z{UE1%O8B8;(x!J3aqK^3>}T|Ls`17~e9CuT|LkGoPW#A*!C~ zbxO89=YLHe`T%83#cKh8|7k)^6?yf4pZ)(gFGl1*7L^RB*U6&UKm?ea*D{u~Mc29e zn#A7c`fMWz9*l~HiOckKzBS}-cY8TJO0Q?;m466Dtqi$3g3?Jw2#W6Z<+ewHv zoXZ+z`228vj9D2^CEQS3TMM4hqz;q3hTy}rOyn!f?m&`k#q#kXrUjWTw&jh3x^|(M zcr<+0DtDYZ;4sPX|DMwo>ehTi2C!LfbKPN^vt11xrtxzuDv<+pg|q<`SC^S>C&I85 zapW#E&G*}wFZd_31#8tu%6O#4UiVqOl%au zHtCSA$aq`e_p%cC_KN;Cj#OM;QF|AH`bDoSqDg6wm6T>;g)C&J9L=S=>+hH=Z>Xr9 zUqD!G78pi_9L*l+Q=-lLIy7sgfmRnAKAGh2bbJh~4Oy>4a3gW4DQY=cAYoDlO35s% z8~8H6u~O62nTgqe6`{!46=?u{VzvGl>MG`OWt9` zzl~gRI^GXV!u0jszK}3$H-ma%M4jii2wjW2Is8`@Sg!+JD;es_D8v(x4Gt62jqh6w zN;0`7z`VWh%r`t}i(!88I>H*};O^uk!%jK1gAqg02#cl_>+vZDt7I|6bY!Hc8p(5YD>q)Pw&`$B9v|A(xI4qc0fo`DX4 z{juUlOY}ceCa(l?ij(RTj+p?ft&u3dcv2B!+hq6E^XGi973Ca^@=W}zj;p5bUnlynIEQ9hT9g#U1Z1K|!-W?)G%^2|OLWlh{1w|IQiM5x?ytIBLg7u5<^9V(WBHacaE>`d0BW&2S)QbWG?I zgA**en4(w@ZwSlVsav+u=^^3Ik&j%jYn>SC{?^sHk9PfitQX@?a$7W(EcP+6_-Ljh z>`Yc`#|LIS(J~oe$7LkiTRwIti=z=tB=gxN?RmF0B4!TO5KNJswLm`%QYEGb9J9LG z%<8s{;pM{5$5=L0++pTV=fHkNh7;nv_b58T%Mk;n$s>m8)q*2~>q?C5)<Pr*n6xp zW?I&iNWWZ0QC7s#bU!P=C80@0FE~@g&hBQQ8lo#!KP}+7t(Bi;YQCXn z>4>-zt9`nOA9JKWYF%DmrBKTTJs?kw^=t?^JHFC<&~I7PQeOgVUDbya#>7$cDKaSm z$xhcRGxF(+lSlFca@Orw6-DH+a5lD#stRHW-vN_Y3mfIEfoTD^y`YD$?12&A_E#Fe z#Qx<0G8}L303)QV^G;KSd+L-Z=2G(u6o^!SBvl2`l!FFjuEg7TgBSg~+V_$;Rf0Eu z&8+pNed+^aGANB$KK_QG=BSuEq(GH9Kkfgm4yFLUbXoNlh@S z2!(}0CAJE;9f}CTCD%ccc2HWz##{N@s;6o7#;yx)o*;;B^yYyUf2c<9s~yecixkrN zu~u`?;!!DN7%lK!{5l&;nPUYbU>sxk_pY>M`i7s32+ubWx=I#eg@P@Jt>ce=#Z}_k z_KF1(WQ=Lqtnf7#i~Q6Z*WuV=;Hje3yUc)MB=_O(x6ihOTgzjOQa|KOx88mI_&xhy zNOx1Glu(hDa)%@eMJ(`m;nS-rE`8eDVum^wAYy%;BqSXB;{d{Cw<66FhB6C(9)v<@ z^>!=7l;kCW+6^cTZ0j42I+wRQ9Hsuue#x$rlj?&4!nZk_7j;P0twv`9R5sr}Yxt1( z>E-|WqzZedIWYo8H6;23AI8;cPc4pfS3m|A(ZL@?oAN2(w;UKQsp<~E3_OkW@@8Q5 z-~Zlyn?Uz+HUre9Bhcb=lZR6iFxC1^zB|b125~63#3Gj4@tg5JC)ZV0-7{=%=efL^ zZzUEtc8BQFf#KHc)}eM&t&&U?*1K^i>;qNfrZIblDGgKDNVsJ@LXyLc+BZ+R6j!`i zq?LnT#t7iJY2^z2SCnwAllumfBmwvK>x@Xc09AVhb346cSIv-rd!d2aPy-wc=m<8? zA%!ri6jGt1)G*k`2fORr8kFCUeFSQoEXg?}Z0+Hy!w~&;8Tt%BH%Yi0y&IV|?h^Yr z12Q@j!`#fQ>Z*fdzuR=8E}4bX*M|HKM=2JsMypI8p_tbOk_6*#%mQ0pdx{g9Ft}S3 zHmjXN07i_PkEegNJmRe~$)n(7vJ#06^&OA1i9*sL*Ic|m{s!y&%oCxeWwlA=G342^ z$yT<2s^+&H^nF_2&5HaUW3R2cHZxPwueK+Ix$X?Lmz%GiIK8djos&i`KBteRE@fJ~ zOH&M`-QREtp2+$(>uz9&ABgWpgP3(zmnod@G3~&O4gJ< zir}}o0jl5|>Ow9ON8ZQ5UGra~%u|YnyOlle)JTM5*R+-8P~&s6WHb8>!S?=w*;?z; z?b1waSc#xlbefd^Osht%fzt?>#+k>w8_^0SsFF(D%h3Zsh-;J8Y3fJ|O6cpHTG!H2 z@FX5x#&SAUwf&>l7TQ;-&bjcb207AIjau@)t;UpJA&?={3fIn+++0}>Bcn|L`oq$q znLYFhXw4eSRJX0{NZPGb@>!JX{zUHeSDadT_>ajFE8dq>Fmk73waS8Jc0zE%~yS*s@6 z_uez4usPMz=Y(!DV=(BCaTpj2(ct;ZJm?-*ylq(bpn1V~hom(1XC5Q;&;3ljP5hRj zw!npTYmSt45Jl@9v)9H9%_yv~M^~Nz%OPa(+~5iX5T8+j=uQAnC#4S1hk+TToxI5= zIq;lFe0|=u7(y~l%RjO+i+fSSdZvNbaqDrXZQj!i3RI8||C6+jxu7Zw$d0gO6DiNg zInP+}BF{H1KQ*BCo9L#B#Gq}`laj!U)bnlNJ_CUPenx%D85@7hHl!0B?*|s*X&Z!y zi8|P!w2_O5w+y$J``hOp^)ij8^lPM+q3EcGf}!pY4+j@!>$^;;631E`*Rwb{qLa*w zwNlFf81dd3A?SB=;$3VBvtqDq`EGV>Ea;9HBjmK11TMPqL13w|L6jwpW#gU_*WCia z%E?VefY6Tf2l9)yc6PDAM?3#{5}5GkqC3tt!z^J+BM5qJ-Un2Jr!RHvk=bNB*cw*X z4x#oZ{{fPCkvf4Tkcz^&6;~tDo&qIoyfY!z>k<#{K=q2_` zXNJu9U`c&S;M+$#<%w0sMT18>cEsbg*#*JnK%s)$4W5>nVcGfp{g@F@8*gdr7z(g> zZl`&p%^8klDyFNO@?j^lAGfk9?5mNnY)(dE6+`&9<28PUy`B&7@%?xHazh{2H#G&I zDw+^?R855RLh(>V34WOv;FGc5PXE}r5>Q(M(yigtLJUoe#4W07B-8q5PruoMPRH<( z&us3?`;O%ifO4e9Qn?UKKM1E+VafC3oirU4aP_0?$r9v4rEe)SL!EEb^4+mngYPfh zW+H&6B>XfsKD`I`T8nz)KNdj)-YUW;hmI|L#LFyC^OOwM$ew8JGn?=%tNr~NQ28BK z$RyJ1SIu`6tz$NZO@THuzZSN6RZsiqV2--w*PzJ2CAH+~@?}kZVq(CYe6YA&wE<-K z<7rlf7x=$H%X2Qig*)w(swFH(y(g{~092vy0luPZJ4wB%LE7mD^-DbSq3e&|D=KTG z3%-EbgrQD6`igfPm)I8WL?OW|dGGgi=)Dirqd4jeO*uI<9wWJ0*7Yn-bZgf{z=SX`61W6P z)*@;}l%{`k04i%w)~kg}7fB2px3bM!*uK&pmAG-v8^i4-=Rs}LKE7bHZi-VYu#4+m zG(2WNWZ?@)!NVrv$7r1KnA{+gy`X*y$-$ExtWw(X%Qygsz3%#(VQ0t3m5y3k^|DBK z8;w85ii!xE+Z+BYJA$aDpLNvB-L2@bhM}aTiRw%-;9VG7CfEOc4My%GcGCy?(8s|$ z`9;f5naW|KO^hxzx9pb{^zdy$iNk2Ayc^WAtT>UfL{JslwEYdpQo!p(_ZH`+&_J?u z-GGm^q9d0f__^_YibU{^st>Mcc%%MQG`xa2vCCnn>*Y7xN2dBwSpfyF@Qkl%ljR3h z8do|FI~`ygA5mem_aUL+l}>j}MLzx^5vp~FS^4wRgTm_mAP?*7Rt+`w`y69SVqz7V zIRe-otl}>MA9b4}O1ghxg38IjRi0@dLSw0u<-JMpE1Xn(z?ZEuh7K7EqUgXC5yva& zso%}RBt=28ER~Mg{D+vTbh||Dw?F42W#|8jG9P^2&X6@aeOF*@C-)!PPoMKNGD00R zVkjTxQwS#32kQiQoHNRf*jrVrO&ZE;jsH)?+%=&6oI}PP>#wZ-N4kI-NcOS)Cvo;j zK^d3102o$p2%PDc9avWnRu_dYh*pED*8e)R-dwr(QEvv?{nINU1qjol?6qZJ_Xv$g zyWoIW|A;l2ME%<2O7}_|RpgqR(gtb=kXz}=_;x}vyf!BZwD;!F0n@1~2tvlH>cx1j zn7LwlyKUN>b42HXBKI*jQ@7uQla>NFU}P`&jA}CHgKT*OPxdm*h>! zI4TU}cjS0M1;rIphUjhr5(E>m&;$)8Wu>Q@O~6P`c)+nHKM(b@QnLLqmqd7X<+0}2i2FPXV(%U0OY?`DhZy4 zFb8>J2Yhvi!FIxid-)%RKRZ<$fX?Yj835RN9nnq}tYwV@x{~@APbFnEFnj%1DX-@% zm`$^dUZ9GaA6~g>y_bJejkL|uknyVJPtLf;?2hXiOHw?)_Cj7^Nhfz_WMb@QLVoXh zal5l0HZQWPj`*=VLv)=-JIx#}PH!K4@F@7p)H_Gb+y)ubxHQ1;y{9eg4b z;?ns4Ciz-MA!k(v>X1WhiJzHYHu9;rXN!2_msY9noJT?--cDiET==HIiX-2tuI?K% zbT!)lz!{0|#{aop>Qj}T*-9#(5Y3#fwGfQ_LlQdoz0e_uT>0BF zX6K6&vP(_MgX&b9WF06i{hCp1*fa={!L!DwwnXLsJ4RH~bydnSNv|f2ycjdaw21%D zt0p#{47l%&f*3>Hn7!s2I}4z)6L?u6!A-Xw0dYWd7kURt5wH1?j)qmO>Zv^|lfTff z_s{z;B{`h-^{WhZ0ngX{c~t2CwoH06{YBqL0V4`NF`<8n!m_dr7-7=pwWFvRMB@8m zCUM;uP!(qQy75<@I0}NeWU#X$Rq7gXG&l69cx-2UZ9=R zB{Hn4r{%FL0O#Eq&Z_!c@XpFd+< z5E%ZbvkTFsQbLnltSMYujkkTYsRyuzgs4TQJR^y&P3{L(W~3~o9QF=tJrspo$q`_z zn2g^yxt?g*UzU%f(F2|Z6&H?5UwfaLzxPr}vWxli7Cb3}Vi(1Ettv5qnTLhht;UaPDMmD39Lj1qr~w) zGH2kz>IwkdNLLZ5OyKY`>bplR0gaRAB1Gexvf3XqLd;9?zt(5p#xfZED&m0X$^jw9 zZ)8okMw<{MT1jvm+!YX6jXia?DLu|SxHN^AN7j_?Z#@>9P`M{u?&!GV?=%fWm!^zO z6}kBuTY3=Jkm}SW(8(V>o%IQLzVkl5z0VqvR~cW zNua6)raWgq2PxCH!04K;$q)^K{E!tTSEGIQXBH%ISAunuf{9_*At|vA7N;OYWP~Z0 z^lSeKk@m;2YprMxIc*Z(PxJ&oMvEz!kvkH7Bnony$5tz27AT(w&I1Io5sW7ce_rt~ zFyM|xnf#<-{YWy$st?qr)&pu2LUc_5obAGe1iGVj^IhIZ_>Hc+_B$3{!JaKLuL9Io zDBm-(f#|M-{y9D~)a4NeaDho-djN+CK4RFMVenja52&i6q1<9Z*3>gaf8CP=wioX* zwa*PW*86!dgN%_}b@O5x|L-)5A~%K6oIHz-{qR*sYi<$^TMh2%K%n2ZRn*RA7BTER z4_?cwsReQHU#Mn4VT`qop*`wcPAFtqN}g*pEzn6VV&S7sliolh9S!ndct|sPvYhW2 z!jTiMU~JMZ7nd#&2F%>$&EZ0HZHshlaNif%s}dmZFolJ5a|5v7H~mHwDr%l8N=u65 zhpE;5lQS)h*3K2?kFF3`1id@>iVwc&LB9NF1z#k~$L3d9s7L+;(tYcsuy7WA&;4np ziW??+x?EN1*NYFx_$FI9NtGo#m&XMBcBu$L_cH;KWZBMT%6u(b{u&nS@fNGl^eh%G zO;|1BZcCu$_XR&`@)bSNNx*-d)B3;8{ol;}pUwS$!Xf759uA8W6R1T60yyU~XOYm? zjE*iBPbPu7Ng6nhYKtz;Yt|nIL&LoJ-!$ZkVzmKgvJ z*fk*pQ`v&fBT4l6&sX1(nYH_Wy)V=(o!c?&+QvS6QlS{v*VoN8VIuBQ(&{{Sbiv~= z2<1-8RRZRb|J$N6shUyX&AF(K&HGGoKd(ki6Tj0p4FO2~Omtj$^SgWk6_yUQ$Fvl8 z*Ev9Z)=1;~2l1nCU)#_tn{9hU+~FM%uUW)i-F}vXalrN5&QQGanK!a;)nuIdq|DHF zR&!c9&6x6WWPSg@>+QGw`8T2)PYy3n|D1KE9(v@WGM&7r1!2$KCEz4SVB%1N6tFs%Ewn;zDuyXtuz zQFL3P$EQDQkRD$RD;4JW8=RtnZ+qa*x`R&w;cBDk|F%IZvzcEAkMsm>iEl`JLqrhmfCMPik5y@MZ z`D>n|xBZQVLoSm*en!Mv`1`xBmN%j=mups5^4WVbYlh~wb2B-vL*zA_CD^IL)kwBd z+jIY$)X3wf#PbE7V^s?2b6WPNj_7hg7nlEM@JAaiqtXgVC7?HD0er=|_sJqreBOLo zK2fsLRSfQqOfkpUaOJ9Ed3%rQL&$ohMldKg|J(hlx?L6}id+rxO6O`2 zB93xB(SIdt z+s7lZ{2}}KA`+VM{wow6`l`!Hlc$&?E??_(QlrOUG+a~v7(w~mb|`&C0WQ7^7iJe7 zHO}&XW=QGW1?hB3H}Z1*&&DxBKs(8$KzWox=hE}<#hGn*b@U`)ES#*1y8+NBg5#mz zYF%PS*ap__LZEEnIF_i1m^lX-^&>bMM{n19bgvn_4D|j|N(73{>SR0j+=>5Non>~u zOME#tdGYXqPTP2eeV?Qn}r3MG~5=p!&5duzbkzo)kWS znp-quC165yr|gY10F8IAXi4*xXEx`O;2ejH1YWknm%Z)4co1QD-{PdFyeyc_Sz zl@F75OiOhLZ-1@P;GBigl08%uc0vBU#~nnE&zOkq&C^eUG!^R4tI5V|pTMccpxv-w zcj3oV=b&->)uDpZX&Jomp$`&I9?w(d`^}SSpRI>u3-tNBM36t*@h9eaXtw9hIKHP) zO((%oew6*p2{Y6NN9mqmxEL4~E$Ldz(PJoMc`oe;91r~qC($42abFO|%I*D0HXiOw zHj0$ZaR@St`)x)*M6@7k?%r5*e)j67nQ&6$cdlWPOkDn4G~m=l4bWo$?u5V!PP)u~ zsK7mhJCd_?)h$_$M6vf=*z_^iXOl|*#@qvfl8jYw%kVmoM=-;0LVmO27em==m|5Gc zyZ(NP`xe3c7wfOa$zDaO6PjT8`Xp)Ie`tVHh3pAl2SnNU&(!QEH>>usq#<&bMVqvl z{qvkR)_XL9I=_jolftoB5>u$o7u!~nJSVBbNj*E36*;U(ND4@3R(W_xZ`S{fN z^TXM&Q(oYfJAB3!xG&m-IJ2VR*m#WM4sojoeDjdPcxyP>R7b090!-~9RDkxk&?_cS zz?5|}9=p#160HoT6?sT=$pP+Gg~@&=^$G@*mqb{}V_*VQgABvCaaes8czIKqETWocBU#G9*~MZa)3 z3c!r0y|e4 zIaC@D%XDuD@SYMq6SJ+lJ?_J#ZTe}uYyN{wWNl|>w*OawAU1D08unMcI;}qi6C`ho zPr;;bF*&FuWN{(qzgvY+BtrV~F&qSFiLgio2OsMq9!aExk8~kJJzOdD=0q{@22E@0 z>_a}s7?~Wci(gjE0*uhk<1>&WcD^ST><^?ad=%+K-?W%K_4Hh8(Ikpa@x-sD=M9|K zT!x$fWE)OUJ<{R!Mtrhz%EA|uu$-FumLaD`Qfk8!P$R4z^hqvG8lo%UYn#3O_;?@@ z^t=4K%TlWMPrG`!z7G5pwCb=k>ljvTCsZ6y=WFcgE_*%&&gl^J#mF|^{TOL8#+sU z7ROVP)Qbi4c5!wvGqh2p`rRgU2eGv+%75C~dseifxt`gyj}(4bR3oxZ}>(yVBhIT%$eBBka6+b zEpuVtq2vX)o)azLd)XX4DK-w@Y>P)jiHp1h30M(a7Q<<_udpH1cs2>(+vj6$1c%?5 zuXrVu{?MC}3&DnUzdW7w9@lg(Qvc50cw{O3{dwKzmG%2*QisVpxJVg_%&*Pi?{dH8 z%dD0PPBrrHi5xD4``E=NcGDX;0mT$oxL$qVTelw<5*+4qG_e&Nh4|93VdN7T<1?JG zm!JFUz|AaBzQA~pkuNW+Bc~2Uy9i(hTXZj@H-#}ZlWgGBc;8XhpEr^fXhw$wFsVK8zx#WtFi}e^GQ;%RDe}{5^i!*Y zYcGox5{IH-Xf7N)`I|VYOV(STRS3-Q_VDE`x^pxIrA{tZnB%@e>)e; zm>}stEw2J(5nZ`%psCz}=?LO^N!Yq$D}z2HPdkK3{sCHxWCVs( z2m{*$1?`5HB||O=j#N;;j9clA)>%l$Y|L(*F1Fr2otR_M~EZ7+fjS#aG+2 z^4rh2^I+OlCb8`*D)9LF;kQojSZP$;iLSzEN2bKnk?NAVvRJDa2%%(F+Bful8PWzt zuQZi%&3#!Epfzx9BqlYm<|)!$8jZu!)RqtY`!%2Ht-tsB@~1nSn#_YWPJIZ|%;aGBEBsuj@(pFwFS< zYw#Ll?{WPw%>ZDW`=zqBXW0ul)VWCP<=d7A8uScIHPTt~`8D}q)V?9IVTAc|7yT+P zY6s>{M)s#plp*%%va}w7g|JDyj@LE9A@y2LMc%;|<9lle%3fEHi)i{$PyQfM==;Ol%gI8)Ifph?JYegT-f2|>HbU|`t`D9Eh2HVSI_tZO3b$`sPogib5s`vH0a^ExK-@MqRh~x9aMDC=C?@Oy}ZgX<)Vxr?LgC3s%lDR zmVbw^Sp>X!mB5+-uOdDH#U+Nzl)d3eE93K2H8oJICyWFyM|J&h3OrdG-j?w9=r4Yp z`n=&ZSuhb-_b60F257u*+{xnP*gEg+h~+hY8KG>uk1ZIZhbo*TQ$J)fY-`8=0sss? zweNxGSgf%qO8Jnyu^9>Juxs6H9iP?~Hh%Y4YcJa{=fhn-L*I|Rbvzjr;ERkMaH)s8 zjR*;kV{><@i2@eh`H5DtiS&*z#1>dY(gq3vz5b5AD*kQq@Vt=FdvTkrnm~0k4c#A@ ze{1Vxa=>Emq&NzSrt&(v+(bWDM^{2AigkN&ih4W&=w^0Jvq$Rr35z#nAFAHfDtjs(9Y5;XyDYA>FkZF2!?k|eSe_R{Z~rJE;3umCPBR5bF*eTIFu9~UBB|FGk)z`nyz`Y5DYRB z+24EKk9`^+q5iF=zhL5n|DWdYsSvNSmf`hwy<3-(d` z$8i@n+7~NDKbYcBBFj7nw-q>h#-g-7JRO&7SgRc6@r@LU0Ietb7A&bdw~I8d)fuK; zriXaEk;X<^W6|=(d=NutNu(}n0cK=JHcQ4V{#YBCpLMPY_Eq|zjt(eJd%0iebu?3i zzk2&!^Gp91q#K81m2>wWW)f_k6YawpfDzcqla7(p&d8FRTU~!r24KrgiNjgY-ZR2k z#=F+WL&_84J`BDm`3U4${FN8VBc zC+?d0Df@!4)2{u$=biO)45wR7$1V4%KOn6p4Cv~N2sip}%c&%83QZp@q!eZJk9 z2tOnw`$NP5ZQ0uVjJ;jJ7j!Uomg7AfjkCnnd;C{U)!3uDaiQa)gz~`SbA2Rb=jP{h zg;v$x>v;ngsMBD2$ih2d+R}J2fP6{X8iX^9WLz)lP2=Q)9(QPWm_Gxpkt9si`h>^8xSshBX_4EKv`0Sz3v(mr{Ex-w z?-IX`Lptg@qNJJlu?L9wWli-e^wIyC^Ki%h!+JXiSTT#Fb`e{ouMx0y2U>H<8XlY6 z&!leyBPMBmPLeCndhdgb&P|Z?1a)nqAo|g4_LJM;vtAWf88*efIDX5dAY+~Se>(=R zH}fsfy7(tjO`0;f8`A*|Za)%9fRkPD;-FCz9MF7tOSiQYaKBCh&*1NYGMCTI7yQMI z?=QK=AJdN~1UDY@U+!qNZD!@;J__Iyz^n=kv?fB{=?D~TSxrboO8pCXCe@<}$&le- zYm@(1L}<(0l=0K7$vwZri&M(Y-==hKzncbJc}JB7-m{gyP(AU#H!IGBgHn_qA2ueiJkv1p^5mr2jd4d?Z( zeQIk&rdg2oDerG{DI7%n){l!>WD`vl%X+dNd7h>lPk%nUX63r{V|`j*D8l#ozN75; z&J<_aMPD-P_{HVvw00wK2|HcPCaN~pl(?Xi(n#lym*@v4T!dj%0$lgZ=Y{Vdci`kU z<&%Fgv5sMKfVgRofpNRlfP=s;pWV$j!Lgq6+Z~wCQAxV)mHXv{U@W|2;gMo5xc6{? z_8EFlWg^nQh&_x(+Nq*P#4s2EneRu!Pq4ew_gpW1>rAUd*6-rp%UMBseBBGMgiv(t z#j?q=*mmPC4xHu13uF~W+HWp8=!$gu=DQOqQo@n^#}V!mF^5!{4;Plnz7N^tmvo5+ zEy;6ZDI;g#l~os(X#u&GtJjs4^8OHyftFh@uDedRCr3UA$^~hhq{KN4?>tBh{PTll zM5N32$K6*FW}>ngZ#|*wd&8Z5{mmtT;oPMxCKaGv;yM}+?eZ7U^wNp53u|>#;Kgwv1{II=(sT8wFej8`Sz1LVg00I!uZIqgj|kT(Nv8TLd!pR)CH=N z?KT1}iGB+1cI5N6g}0%`#+Z0(UF2Hc+z7J7YA)w_+C5%b_MfFii%;f*Kj#Wgx?k5{ zi5=kP=c*+nY2ZLEgX#GW66;RLL|*T z{Z;DMQ<7~))?rMPTWH%B-%TmRQxMZO)uUmzkS+u2>$zg0@C0o;O;^#64O>189-D>= zh=ADQ-?WTrS8}*7^O|&TRxU^c1;j!qp8(h#XY|xum}Ds+0}_ne&=zCHIwj5!eM!?H zOfPcOTd}YZX=^oQzU)z&Fs8W0oamiwg+HGy1|x<`&*|g_IiVIDl^OLP8UxqsI5k7J zy`kHgSB(=pKl;XVr#Xc71$*z}v+?Q(GhMTGK5U&sJNT{1i+^I~`=0kda62w$*2C$b zTp&bGTkMreuj|j1rOn{jp=EBvbMj(~K>D{8ez>6>NbvVaHBm^ZO zxgB9iBg7ET8aj9w)2UnDG*$iQKLkv8Do>Tb%aSxb7wRfJ zAn>k4#^~2reO9K1rMW<+yYmo_r&Il)w)=2jvg0KomTbc>QBs+Y*?4q7$V=e_CUoKb z4?48%;LNB`@}^fdTq2DDia|VIo_=r#_8FkjinBL~^b~MKw6=Ma3A{fHhLh1<3So

cmYucCb#{hQAY~14MjZe!i&ik6Bx)-G6cS+v44ZrLKHG~d(3ALc#amPrXS^05BbUCr$+_Fv(Th}h-nsTmA#ojE@Ae~y7K&DOL$9L0C&W~it-A|H`5h0<#3$I$tHoBoW2sA6BR&L_)3CsCZn zF95-oa?vr#946-K%^UO|Of{w{Q?0I24=8 zzK!Lv71edIMNhh6Hk$QbR;~!&2qj8vOq@Vyt`j(-jcg`a{AZ&cBVq+90lu zr~i55H;qHV&*AjGJUI!S-bKI$B-$givYpVkWEH(5G3srzV~Joh~}`FTNAg{mQ7 z-g%?XMviaCoZef=8%^VgjnRGiZw`IKV7sUd`8Jk;!`d=>t2xY#PyiqOb|DUHI{h1! z{R#;8FV1rNLq27_vOQY8ho+=(O{8=`L;iH@OfCeMtN%JgHW`^H5nq-Rz+{jQf5bFW zD;}Nmpd-g}+O4riX3$G@s z#=av33fx53Uu=jzps%f2r5i0iU}CZuEmU!>`XbV1=dz755wJUM3Kpywm{CbeILa<8 zkI%OAVubw`wmKu7AsTEhkV}k z=wf7bbFte5sPVPzehFDxgL`B)o@7p#eqFw}=y-i=_~qusUP`B`kNIQBmVE^2I&nfU zy`$syV6^w|a;@z-S0eKPRNk*afss@g##b9pTQEE29Y|5daM>bM+Z~sMa@JBG6q=7z7zi%fnq=ovPah7mDY{lMKgh^OSmGC&eOr;;rU&8~0SH zs{#mMsnZYSUkS8Sqf#a?O<~pT`&omogYVftxLEsx`=Gq$B=m2&Q%AXX6O{^Ak7~V0 zc?EOO_>|D%2`md3uw~&yG*&HAE44vS4#w_13#j&eeYO=J8oUBO`3 zzqN~C7dw|;l9?gI4}d{306vELw|_9d3g#pinOCRNw`VE;DekP`t#QuwhK>}sC`{1W~k2qAv2vRu{ z@2&6_nDiLCI1HI6an;OD8n-4PgP81%NS2U91+$8Ewk{%*F+|*NScVv?1`P0O(RwgT zhugAemLyS#!cutanH!}j{jk4v>3dTzyV2`&k66xLM$E(#W-z<2Fx}C+<#Nh2;22bC zhYTduq6^*k4oVb4mbf8>O?W|6BVzFS7&6kT;J> z5(4SlO;E2@I|$ge6@)?$&eyvTg4H8p4gOP+M`M7|dU}!)VZZ*QTJxEJ;woC`pdb1< zG%(mYC4r7N3n4;nLeA(Gu`iSfi!Q76)ffgc$rynlGp6Xq;W#b+uYhPhUq6T(5$4|l zC0fWH1 zG_2lbpqU6Cc}YWrEGFlkf)3M6n+?iB*$IYU1I87TXRMXepO+VU_NVA)6@~l&>hw3Q z*H>=aMmN~|n>-B+7*%rS1a-n7$6tM^ZIl5FFi1}h2}en#FhGEO==Fp!imrTrC-DZ_ zd=R!Xs!h72QQX|S=nl87usZDD_kYuSRV=wB`rW@N?s!9M(cV6`)T98@$}aCF9=3C? z7_m4*28sxC|Bx-US)Ovq*thAAnvh$$8srA&A4kP>55A=g)OP7bIX zeOhe@`h2j|3{t60nAjD?a1qXErE^u8hoYjrxgp&n8F05YxSKSNs;0&}eDpcU9cGC+ zHMa9AR%L>Mmm6k;AiCP`yi%w3vz;fePy(VqcOy@e#=Vh`w8ZntlevY#fQUEsHmHG$LtG9xN3Ph+){H>Rw@-Ym>nuX0tj#Af{p<^iJVY`hP>+C==n??D57RE=0h(L zW8Db3veVO1{)qpy6sD9>SQ4~+J*&HIJULqn68!rk9pEGkEAk1M2#JX+(Ou|5BCq0u z6Kxqsv)xaP5LORRWM*%u;4)G zX9QN?Kkk4d<+wX!3D|2fX+A#WWBRbd{O%j zvMQ56DmHxxA$Adgw`s_Vwx>bYZyUR;d2UySKOGkyQfvLg$>t-JjkOJ&-r%Az=^2og zQo57bF}$H5$VSx0&6VsgZF%2rVoJQL;wY>;inLAp!lzNd^^kBJa#lrVp>c9sFmVs) z!ITywYvSo#U6R{idY3`Ytz_r0DquJBEepFse~uKUrA%|NyxD0}z4);H?``a+X&&p| zC)H$2gd6f7%G|j$%Fg$|oxF82jz0uJFuuH1FE+zlxZkUAFy6YBnbTXIn!m=!$w>*E z#^99F=j!HbiJEj4G9S3&%J0_jUIEe$J*b zlU@5eVIl1-`humOGy!uzzN>1JmXg;5cmbzCcUX>-zp=LS2;}R_4kJ}k#k3> zuy$015=#MC11gvD-E*7zo5cE|*K;~k-hRkq?2 zg1FO!YH_eh6DoRqi~d`)yt^x}NN#u4R56jepXVowTRkxsS^}J%Ji;VPF5+sIMBNj@ zOl*c%nW=vHGn)e!_1W_a>ucybko_*-0odzj(ZDNil?Rzj|GT zxIQ?{TL=fvd1;H+wb@%q-pXlP*py)b^CIS9i6@8Hy#2sE-7*u@Ml=bpo3dK}r~N24 zZk}I{u6_Q{elN6L>1*p7v;|{I0#(O#gpf_s`hqpx z2%E)^`>8_omhJjccq!DcMj%)dstry_t2(Wk`~)9zC#%r29H5Y}Ra^6r1Uui8QNy;j zfqf{EJjbTduMH4114(`nk2FD9o^$7{_kBeqbKt^cgG&V2ljpurMjLs}UE~LT(jV_@ zsE>!0MH2Xq?A78`rzo$h(?|Oq3RstsWN`~QdirC(J<8jF-+22`a*$YXIC;yefP(QS z)sxA2^G9?25V83Hv-RQp&(@F&eQFrqif9BtJ)f@n#jW}^$0Y{d-@_Q7OB{=Sc-cSNs0 zi&i+0&v!}dP;F_4@Mk;;p63uh$oR!X{txNHNJH-)6#EvJ_7kjLb~_NFJgp7;@tQK3 z#%W>5W7H@~|JGzgN^x{n2FI@|=M?m_+;e5J(Wv~GBP5T)j+~*QNE){>X$E^ic8u(v za!{)^LM?L8IrE%ua^z=up5lfO)0@P78S$LZoXhlFQ1?Fc5oGLsMQV*VhweU1vHjh( z*6UE(S!NufApvW>BL;ea!DdgDwx{lkf&*DEN#1VTiC$dm45p0@X)083^shM>RKo+a(aEDtIAe}VDlAsWnVAgE z`Qu|w;UasmjmapQ2d|WDe%3+bZ%RMNiG4wt6jJ|Tu?t?yA}JL7M$YpdJ`n2JvM8!1X@KlBl)Z&|@%KsO@Sp)k4L zD>d@u6*=M`%2oLlso!sA>U`jO&z2U0f!IsHvZuT9L%-n*J-uSeP9h*c;1V1W0-6x! zoRRPS|H>Es)mHqgO8HmM^RL+GzcQ`7q*dVdZcs2)O)1StfFj`ot%p{Bf#Tw&1|;~e z(v_T#m?pbF^~S2t{_+(wZYhS}f0+weU(=!O7wGdR@bWB*L5!!bOjSn=sJQgvl+6yQ z5HvSD9uwz_a1%t;m+yVvhG7|zjkuJh8K|kxxor8QutCXL=5@jwvS+JV;ZhGC=UhEc zl?nbrk?6(!33z-?{}jQJkVShTPy}r4CUD}axASJCPegVHieRq-`>g23T{@T%r6hLw zk-Xqi8-zLEK0p*`JMi%o^-obUVR;G*`e2n~I*o=)MeLWagZR&Walgd3LI8+mYh#04 z1E$~*;|_hApKBjS!b_trrkdT)L`56RPzzEoUwVR05~rcZ?awcD0p z%hlhRVxI$@Ug$|`E}Y7` zaIXK+$Z?~C@V;yG5=>$XAsj1d4e*W(nV_;6=|=+PAgX=PkYyjBC~YDZe)k2?FPlB1 z)BPmv_JqK1A3ZQohui7WGL~^0M!1E(9ok*_f!GK(E&_#*+78} z&bDzoF#J*mXl-6GuN_-!WbfBM^m@$)#Dxdzz2QVh?c1ZNd!0D}m1(kT)dsoKZbyYZ zN2q|^^t6CvOh`GRqX1fA6k*{xw-#(cCdUlb$n_X{T2{$&pr4;qO|QcEw~; z>w2A5&5r1U;Wmg|#+Z_;DNCCoo0ij0>!oa*BsK<3G<+_;s|3~hoW14ltJ*?G!}2cn zY72@^NGoby`YV~838V?!TK`USpP=B&)0(1~tKm!W*)-EhXOdef-26f{wz0BBl+(vH zj2k!Lg2~m~W~g0D?uV8b`i#wHI5ab?gQSAjBTcys0ubBYl zr->@JJgEC_D$J3-5;Tltsp)P?;0pa6lN$05g-+P~fXa-)@s;sM(PMVVavIEY`I~Y5 zbk|(Pkbu&t!=E;)npSZSc{`P@1{>7{jDJ6YwaX=ayRTD2GgMIQUEh4?w61aqaSTC~?y zS(5nvI;OAc2u&;$0VeBOj$fYaS(4pC|C_ah2{)xxgq?quD=iM209yF4EOvxO?TVH^7c6k8_2t%wb}m>z z8Xk2}$+)Yc>0>XNLR{81UpFK{hw#Yh*p%f>bGljdbugmoJ#`*0I!tm?Rxnxz<#9M$ zZR5B(f|yefCGRaFw4iWk_jtmEyKKn6Z6dt?<-9_giCyFC>yFs;(vutDL)-@4{?!G2bKt_8Z+tQp3de$q`CmvK+*GI~gb zm!L;6e6klVjo~t#yAL$L9BO@tHmfyWK^aYAr@8nJx=(!xyg}r0xPn1I>`-llk0kF%ISIkiZhpF@ROv_@S;q>C{4UxYxs}%ZWo(HP0B|f` zQVgiGD0+DXg9KXbZl?~o@O)%A+i2<~*#96o_APL*Ok#gd4b#`51notb4Td*$Z^9vH z*Ij{9_y6$jw0}yw{X@JgzMm%Ju(9^kQZ}Ha_xa5+g=I;^;k5fL)_#}tgJ$NqjH(bh z>P@E{AVr0vrLN7dN$eJfj3#se82G&HlZkm)F;?>=GEHbEHk#UDo$K*Ld?OZ4Q zj174!6`NSi=TmT3719?{{kYA^p|wpor&M>_J+ zpM3UCQn+vnzZ%}$K93>atzmB+IcNQblspd?!1Pg>U-Xl$=EoSm58xu`F;37~d61?> zre{kEgxo5+S2oN=pVRDMUvoP9(1pjLMrgN9CT}_j>My=9@gybStB}G9w;as#arXQN z4t-WGf=8tsDl2M4jZ^=?O_$~~0@nUxa(FG%_r~--whh4ST4+1+d+Yqc_B^~BxRX%* zR@#h)lo$^BK=_y%QDQw$UjK9H42JK&sUw;c;=W0{ZAhVCC0*JNVjSls6FS3t|19WA zUfVB8y2E*UuCH$WoppxFf>WyWmaGA1Zg8*FA?KR^tIj0jVv<64Doexb9?Pw46rM}T zE|>35kn~x%BMJ%22>DQiDIQCK{%7qMfqNnrV6E}Vj7$o|-uBv6KbrQ10I%8pJylv} z&ENi;g4zRMI{yg>2vFlIA6BRlR+!CVeI=Te8m|#ea_gQT+t2jEqilJA@FTd-na@WM zTa-PYa@r6$$FGC)r8hfJ54c>Bq=`fy2hwJ<+b>j4jz5fz-{MyaDh(B=NDBB#XZ}_U zPE*1ONQbW@G!it!2x19%h5#ZaGaXQ`~B^ zOva=3Iy)OCH7iWmq;RRd^vR>F(9`^lu(}MFP4*)ygr4qg-6DCwcq8V~7u#SaVnX!Q zxo>wZbo8>|L=0|@97rb6Z6%*Ig@p@DJ$}}XrK+tRhz}JAzYw+*cs4h(tkrJD z<3CPp$O=A8r+h#O8ip_}_|{CdV-)7Za+=d1gKwItb?YC`q(^A@nqdojj!|;1CBRa( zwlj$+vG%s!W5roAnw)P1NsjNONuFbBVkmy{8g}xay+Febi?M#0OS@8n6hB*2=Rd|v z*<7-@LiRUWf@Gsl~N4%>b{RW!6qhC2;)n>m#? zEfbh&X*g%?Ed-uF`0^iPm=ibtxJ%1WZsCl>+C+ERa^*KKe*V3(xfmJ6B$gRskq^SPX2)oQ%d zrPfzHR}b{R%PV>QPsTZzAGr5=qzb0j2_S-Nk2^{3QzsV@wlJg|&5}Tbxf=WhFmxw0 zDgMi;#|y*{f#n`qI{$3lz3{S+DWG$MZfiXVzy}NBCth#@)Q{fhkoC`E1kp`rj#9Wo zx1hxl1l%(#wB>}-pM+f_;ADPu0FSyH#Fow8>h;pr#7%0n{#Js>fI3s;^HWm974a;s1sW$+%BWQ$`N_Cd#(6ppk8iCteqOE5r>9&6pK1@LIKg_Z0uu=}5diLY;RM<;KWG$x)-W z>=Q$b-q{!lkreRnQ6Yj0_3RC-z;Ng(-u| zKy&t)s-`k3XfT8iI0}b`OmjS{7vC9TGE|}+1>b~a>llcrguMDY;2$O*t%h^R6 z$JN@+?CK{HrJ|{K+NrHqd2oLemYEjwd4rq$t}rj`3W}y+FAZS0c|FIv7zL=<(Gt-H zqj*Z`PMr487R+ge9?x9emNB$_#u19xwZesC*c{UzisDve{zPJ@{y2vK^6U@u{I`EW zSHB>W`bO&m`8_%+Vf*`QAS-^BW>NsZ<-*fZc&V6mdj)JPyJGmbdu8l6VAr1?I;?E~ z8)~Oa8dvJpQ5Sc!6=XzY;os|mn+U)h9Q&lXg%f5dy~I05XYa53hc1M4pC{z9?q#P-@>a*E!j2_ z)uFbr<7H}88DumB(5t2OL;xb_f8xy5PQi@sUHo-9BYT1DgYIjw2yV`lg%6`mqr8O^ z;R8~~N={7se?v09P>%u8t&?==`u75HooF)gvDvv$)-Cwo=P3nOKxEayZ~8{B8#}9d z3?kovBK-pWHXXgtlW34!2Rwl7$Zh`PDe`wUCxKdyjcPnM@HMi3ihO4Hj4kWhDyBUR-mnsho41C2sqkq2NDA0g zhHlmHl1aPZN(!U$w$S=_uli;8Yg%S`k{s4Qa4e_RPp2pq{yEVJ-EWG9p4mR_^5_#A zO%|nlZOeX#pX{CGDTT$j5&t2K=gyVQ&C3wrIa zckZ<=clK^Sf(X`2eSZg_h&;-f7t%k^A^RAUUzEw=W@Bix-(!Cm`A*LQAJqlSM)X0+ z%{R8C-GJ{y`L!qVMOLf>k*wv}5Q@yG<405XcFy<5x2{tq$IlztJU0*!rmpoV0f|mY z{S#U59nBDfJWrEEf1U!%--BfX&^Lcuv~2Gf0dQBh z8VwSV#o|=!)J)&jcP3wR6N>OJv12oTGkynCx)3c>TzPTR31gNYv|Xv*GBA7|T9$gc zNeCU^aoej*{8&#iUQ+m(U1tA=2os`miYZyc`Rqj!FS?toGzkE~Hmuh0d7GdYlNm}W z#oDp{E+U+BnNp5ZlAc5}XJyE`s!44;?r<=6VA!Q)C9S4w@*Mwi(QQeb{2TJJKyaBS znpENExPXNKzhwjztvlYfwv&ZVgAGV7+$ypvuCnyY^o5{}Ke>JvuQ-Ram@gEqG@fYF z=nOms^agWt2TVC_nmD*(#!KZGCB0R5ns;mG)#lM=($(1nV`b|=pHysPp!bIT86&U+ zGDcnw%#cI(HBUz-z3DKSKk2-T%r^!CDc#7jil)AQ zcW3|2amC(#`rF=GoTRR{^s-~d>#rB|1lD-*`~AQSvc6(cNz&t%W6QIi+MednhyeFk|jNSDd*iBYDgA2Au>+QQ1 zSs^k^iZkgiKJt;fImrjvl{MOgs@?LdHfu0Z!NW&t_{1m;pn60QZ-{V+b4lQ2?6?hi z!?^`{si(W`AErYut3mGlR|4X@>>sm1~jro>1+7xtaENDMUa#%;ok!aeYTN;fu6Q zb~mJuug4|8kpM45mYmb;PZ+zgEGb>KrLVkO3~(~R>J9=SA+*VJOG*8;k*`n15wBia z$5k`uLF79y-*HG@D+7D3I`slZcERKpUWcqGQ6lTLxAzvs6&7nn777~zg&T>v40VIe zZYqU6zdl62Xgla6nHsS|Tlq(%O$8Mk3EYC_U@#9;zUY0y70)+9-=pp%<28lEe^lx- z5S01&4JwiJ8fRJeipg#XYnleC`Vmgl>Tw)|NHeets#&e_PEre}iR@)jkBD>K*QV=u8>?jVwJm1{1tl;v^o8Gs(Nn-JFWq>XOW$F0ci!p2 zF-z&^Axiy=H1oR8=}q3(U-^Q%(wb`1I1-ktrgUmoaOy<9Nkqk!Xh5%j4SJ9hODTBv zLMFRe{@36nx`ltN)4%g#yFpaFeIc4xB?gzAjb)BsL%wW?f@!;1ti)ZI;tZSkjpKp^ie}p* z&C*uf2U+S@dbF%!N}3q9dgej1lDtl%9@ySIvaxgCsYTsI&sqT-qr(WSO#M>c#D9*_ r@udad1|p2f=m`G(?f*%?An>=pm1x?HC|}FI20kiq&8Ni*rtkj`O8R8r literal 0 HcmV?d00001 diff --git a/Shorewall-docs2/images/TwoISPs.vdx b/Shorewall-docs2/images/TwoISPs.vdx new file mode 100755 index 000000000..1404fe664 --- /dev/null +++ b/Shorewall-docs2/images/TwoISPs.vdx @@ -0,0 +1,442 @@ + +TEastepHewlett-Packard738201805738201805 +AQAAAIwAAAAAAAAAAAAAAF0AAABIAAAAAAAAAAAAAACYCQAAagcAACBFTUYAAAEAKFIAAAMAAAABA +AAADwAAAGwAAAAAAAAAAAUAAAAEAABSAQAADgEAAAAAAAAAAAAAAAAAAFAoBQCwHgQAVgBJAFMASQ +BPAAAARAByAGEAdwBpAG4AZwAAAAAAAABMAAAAiFEAAAAAAAAAAAAAXQAAAEgAAAAAAAAAAAAAAF4 +AAABJAAAAIADMAAAAAAAAAAAAAACAPwAAAAAAAAAAAACAPwAAAAAAAAAA////AAAAAABkAAAAKAAA +AIwAAAD8UAAAKAAAAF4AAABJAAAAAQAYAAAAAAD8UAAAAAAAAAAAAAAAAAAAAAAAAP/////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////////////////////////////////////wAA////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////////////////AAD//////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////8AAP////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////////////////////////////wAA///////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////AAD/////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////8AAP///////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//////////////////wAA//////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////AAD////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////8AAP//////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////// +/////////////////////////////////////////////////////////////wAA///////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////AAD/////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////////////////////////////8AAP///////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////////wAA//////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////AAAA////AAAA////AAAA////AAAA////AAAA////////////////////// +//19fXl5eX////////////////////AAAA////AAAA////AAAA////AAAA/////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////////////////AAD////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////8AAAD///8AAAD////////////////////////////v7+9wcHAMFyc ++UGE4ODj39/f///////////////////////8AAAD///////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////////////////////8AAP//////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//////////////////////wAAAP///////////////////////////5eXlx8gIFlwhc3k56jN6wcR +H9/f3////////////////////wAAAP/////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////wAA/////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////////////////////////39/fCxAXwNbZzeTnzeTnrtHrCRIf39/f/ +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////////AAD///////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////X1 +9e/v7+/v7+/v7+/v7+/v7+/v7+/v7+/v7+/v7+np6cNEhaaq62QoKKVpqiJoK8HDRenp6e/v7+/v7 ++/v7+/v7+/v7+/v7+/v7+/v7+/v7+/v7+/v7+/v7+/v7/39/f//////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//////////8AAP/////////////////////////////////////////////////////////////// +////////////////////////////////////////////////////////////////////wgICEBAQE +BAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQDg4OAUGCDM5OiYrKyswMS42OgIFCDg4OEBAQEBAQEBAQEB +AQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQCAgIIeHh/////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////wAA////////////////////////////////////////////////////////////////////// +//////////////////////////////////////////////////////////////AAAA/////////// +/////////////////////////39/fERcezeTnzeTnzeTnyOHoDRUe39/f//////////////////// +////////////////////////////f39/f39////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////AA +D//////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////8AAAD///////////////// +///////////////////f398SGB7N5OfF3+iLstYyRVo1Njf39/f////////////////////////// +/////////////// +//////9/f39/f3/////////////////////////////////////////////////////////////// +/////////////////////////////////////////////////////8AAP//////////////////// +///////////////////////////////////////////////////////////////////////////// +//////////////////////////////////wAAAP///////////////////////////////////+fn +5wwRF2SDoylJcwsTH5+fn//////////////////////////////////////////////////////// +39/f39/f///////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////wAA/////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////////AAAA////////////////////////////////////////z8/PU +FBQh4eH9/f3////////////////////////////////////////////////////////////f39/f3 +9//////////////////////////////////////////////////////////////////////////// +/////////////////////////////////////////AAD///////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////////////8AAAD/////////////////////////////////////////////////// +////////////////////////////////////////////////////////////////9/f39/f3///// +///////////////////////////////////////////////////////////////////////////// +//////////////////////////////////8AAP/////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////wAAAP///////////////////////////////////////////////////////// +//////////////////////////////////////////////////////////39/f39/f/////////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////////wAA////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////////AAAA//////////////////////////////////////////////////////////////// +////////////////////////////////////////////////////f39/f39////////////////// +///////////////////////////////////////////////////////////////////////////// +//////////////////////AAD//////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//8AAAD////////////////////////////////////////////////////////////////////// +/////////////////////////////////////////////9/f39/f3//////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////8AAP////////////////////////////////////////////////////////// +/////////////////////////////////////////////////////////////////////////wAAA +P//////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////39/f39/f////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////////wAA///////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////AAAA////// +///////////////////////////////////////////////////////////////////////////// +/////////////////////////////////f39/f39///////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///AAD/////////////////////////////////////////////////////////////////////// +////////////////////////////////////////////////////////////8AAAD//////////// +///////////////////////////////////////////////////////////////////////////// +//////////////////////////9/f39/f3/////////////////////////////////////////// +/////////////////////////////////////////////////////////////////////////8AAP +///////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////////////////////wAAANHR0VBQUN/f3/////// +///////////////////////////////////////////////////////////////////////////// +////////////////////39/f3BwcDg4OFlZWejo6Pb29v7+/v//////////////////////////// +///////////////////////////////////////////////////////////////////wAA/////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////////////////////bW1tPz8/AgICAwMDAAAAJycnaWlp0tLS7Ozs/ +/////////////// +////////////////////////////////////////////////////////////////////m5ubIiIiB +gYGAQEBAwMDJCQkHx8fhISE2tra9fX1////////////////////////////////////////////// +//////////////////////////////////////////////AAD//////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////v7+8XFxcJCQkDAwMAAAAAAAAAAAC5ubl6enofHx+SkpL29vb////////////////// +/////////////////////////////////////////////////////////9NTU0EBAQDAwMAAAAAAA +AUFBRhYWG1tbVjY2MvLy/S0tL//////////////////////////////////////////////////// +///////////////////////////////////////8AAP////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////yMjIwYLBgBKAC9CLz09PXR0dAgICNjY2MjIyKysrBgYGO/v7///////////////////////// +///////////////////////////////////////////////3R0dAMDAwBMABtvGzY2Njc3NzAwMJi +YmNbW1r29vU5OTpqamv///////////wAAAP///wAAAP///wAAAP///wAAAP///wAAAP////////// +/////////////////////////////////wAA///////////////////////////////////////// +///////////////////AAAA////AAAA////AAAA////AAAA////AAAA////////////qKioDg4OBh +AGBo8GA5kDH2IfMTExODg4xcXF/v7+8fHxxcXFAAAA/f39/////////////////////////////// +/////////////////////////////////4ODgFxcXBQUFBHkEBJcEA5ADAAIAGBgYs7Oz+/v79/f3 +5OTkV1dXnp6e///////////////////////////////////////////////////////////////// +///////////////////////////AAD/////////////////////////////////////////////// +////////////////////////////////8AAAD///////////////////////8FBQUDAwMQSRABlwE +WkBZ+rn48PDz09PT09PT09PT5+fna2toAAAD///////////////////////////////////////// +//////////////////////////9DQ0MBAQEGBgYClQISkBKDu4NVVVVoaGjz8/Pz8/Pz8/Pr6+s2N +janp6f///////////////////////////8AAAD/////////////////////////////////////// +////////////////////8AAP///////////////////////////////////////////////////// +//////////////////////wAAAP///////////////////////////wEBAQICAhkeGWaeZvDw8PDw +8AAAAPDw8PDw8Onp6Xx8fCAgIK+vr//////////////////////////////////////////////// +////////////////////ysrKwMDAwMDA0teS+jt6PDw8Hh4eHh4ePDw8Ojo6IuLiyAgII+Pj///// +///////////////////////wAAAP///wAAAP///////////////////////////////////////// +//////////////wAA//////////////////////////////////////////////////////////// +////////////AAAA////AAAA////////////////////////AwMDBQUFcnJy7e3t7e3t7e3tAAAA7 +e3tkZGRICAgf39/9/f3////////////////////////////////////////////////////////// +//////////////Pz8/AQEBRkZG5ubm7Ozs7OzsdnZ2dnZ2pqamKCgocHBw7+/v/////////////// +/////////////////////AAAA////AAAA//////////////////////////////////////////// +////////AAD////////////////////////////////////////////////////////////////// +/////////////////////////////////////////9UVFQhISGlpaXp6enp6enp6ekAAAAvLy9oaG +jn5+f//////////////////////////////////////////////////////////////////////// +////////g4OBBQUE+Pj65ubno6Ojo6OhcXFwbGxtQUFDf39////////////////////////////// +//8AAAD///8AAAD///8AAAD///8AAAD///8AAAD////////////////////////////////////// +/8AAP///////////////////////////////////////////////////////////////wAAAP///w +AAAP///wAAAP///wAAAP///wAAAP///////////9/f31BQUDc3N52dnUZGRgAAAM/Pz////////// +///////////////////////////////////////////////////////////////////////////// +/////////7+/vzg4OFVVVVVVVRwcHGNjY//////////////////////////////////////////// +////////////////////////////////////////////////////////////////////////wAA// +///////////////////////////////////////////////////////////////////////////// +/////////////////////////////////////////x8fHWFhYt7e3AAAA//////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////p6enp6enf39/f39/////////////////////////////////////////////////// +//////////////////////////////////////////////////////////////////AAD//////// +///////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////////////8AAAD////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////9/f39/f3///////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////8AAP////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////// +/////////////////////////wAAAP/////////////////////////////////////////////// +////////////////////////////////////////////////////////////////////39/f39/f/ +///////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////wAA//////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////AAAA////////////////////////////////////////////////////// +//////////////////////////////////////////////////////////////f39/f39//////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////////////AAD////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////8AAAD//////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////9/f39/f3////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////////////////8AAP//////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//////wAAAP////////////////////////////////////////////////////////////////// +/////////////////////////////////////////////////39/f39/f//////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////wAA/////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +AAAA///////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////f39/f39/////////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////AAD///////////////////////////////////////////////////////////// +//////////////////////////////////////////////////////////////////////8wMDAAA +AAAAAAAAAAAAAAQEBDv7+//////////////////////////////////////////////////////// +////////////////////+fn58AAAAAAAAAAAAAAACvr6///////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//////8AAP/////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////yAgIN/f3////////////////////9/f37e3t39/f39/f7e3t8fHx////////////////// +//////////////39/f39/f/////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +wAA////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////////////////////////////////////x8fHaGh +oDAwMOjo6aGhov7+/////n5+fICAgICAgSEhIf39/f39/SEhIODg4GBgYaGhoj4+Pf39/QEBAQEBA +eHh4j4+Pd3d3f39////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////AAD/// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////+Pj484ODiXl5e5ubm/ +v7+Xl5dAQEAQEBBgYGDf39/////////////////////////n5+eXl5dwcHB/f3+/v7+/v7+Hh4dwc +HANDQ1AQED/////////////////////////////////////////////////////////////////// +////////////////////////////////////////////////////////////////8AAP///////// +///////////////////////////////////////////////////////////////////////////// +/////////////////////////////////////////////////5+fn1BQUP/////////////////// +////+/v7/////////////////////////////////////////////////////////////////f394 +ODg2BgYL+/v7+/v9fX1////////////////////////////////////////////////////////// +//////////////////////////////////////////////////////////wAA//////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////5+fnSEhIn5+f////////////////////////// +//////////////////////////////////////////////////////////////////////////j4+ +PQEBAQEBAKCgoUFBQ9/f3//////////////////////////////////////////////////////// +////////////////////////////////////////////////////AAD////////////////////// +/////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////9oaGgYGBhwcHD39/f/////////////////////////////////////////////// +////////////////////////////////////////////////////////////////////+fn59YWFj +///////////////////////////////////////////////////////////////////////////// +//////////////////////////////8AAP/////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///5eXl2BgYP///////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////f39wgICP////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////wAA////////////////////////////////////////////////// +//////////////////////////////////////////////////////////////////////////h4e +HcHBw////////////////////////////////////////////////////AAAA////AAAA////AAAA +////AAAA////////////////////////////////////////////5+fncHBwf39////////////// +///////////////////////////////////////////////////////////////////////////// +//////////////////AAD//////////////////////////////////////////////////////// +////////////////////////////////////////////////////////////////////39/dYWFgo +KCh4eHj39/f///////////////////////////////////////////8AAAD///8AAAD///8AAAD// +/////////////////////////////////////////////8wMDA4ODj/////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////8AAP////////////////////////////////////////////////////////////// +/////////////////////////////////////////////////////////////////////1BQUDg4O +O/v7///////////////////////////////////////////////////////////////////////// +///////////////////////////////////////+/v72BgYHh4eP///////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////wAA///////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////19fXICAg////////// +///////////////////////////////////////////////////////////////////////////// +/////////////////////////////////////r6+vSEhI//////////////////////////////// +////////////////////////////////////////////////////////////////////////////A +AD/////////////////////////////////////////////////////////////////////////// +/////////////////////////////////////////////////////39/c4ODiHh4e/v7+/v7/39/f +///////////////////////////////////////////////////////////////////////////// +///////////////Pz8+/v7+/v79wcHA4ODjf39/////////////////////////////////////// +/////////////////////////////////////////////////////////////////////8AAP//// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////f393h4eEBAQDg4OFhYWP////// +/////////////////8fHx/f39////////////////////////////////8/Pz//////////////// +////5+fnzAwMEBAQEBAQI+Pj+/v7///////////////////////////////////////////////// +///////////////////////////////////////////////////////////////wAA/////////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////////////////////////////////////////UFBQWFhYv7+////// +///v7+/cHBwODg4QEBA19fX////////////////////5+fnaGhoMDAwKCgocHBwf39/eHh4KCgoYG +Bg/////////////////////////////////////////////////////////////////////////// +/////////////////////////////////////////////////////////AAD///////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////////////////////////////////////////////////+np6dAQEAAAAAAAABAQE +CPj4/////Hx8coKCgoKChQUFB/f39wcHA4ODgYGBiXl5f////X19ePj49/f3+Hh4fX19f//////// +///////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////////////////8AAP/////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//////////9fX16+vr39/f4+Pj8fHx/////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////// +/////////////////////////////wAA///////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////AAD/////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////////8AAP///////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//////////wAA//////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////AAD////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////////////////////////////////////////8AA +P//////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +////////////////////////////////////////////////////////////////////wAA////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +//////////////////////////////////////////////////////////////AAD//////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////8AAP////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +///////////////////////////////////////////////////////////////////////////// +/////////////////////////////////////////////////wAADgAAABQAAAAAAAAAEAAAABQAA +AA=TC0104981210332005-05-18T13:21:242005-05-18T14:10:302005-05-18T13:29:142005-05-18T13:21:249295340000011100.010102000201010100000000010000100.500000000000000000000000000000000000103310000032320088000010.50.500001201100000000000000000000000010000.1250.1250.250.250.3750.3750.1250.1250.666666666666670.66666666666667000000.250.250.250.25111100001170000000000000400010.1666666666666667000000000000-11033000-1.2001000-10011100.010002000201000100000000010000000.500000-1.2000000-10011100.0100020002010001000000000111100.055555555555555550.055555555555555550.055555555555555550.05555555555555555100.5001110042302000201000100000000010.055555555555555550.0555555555555555500200.500010000000000000010331111000000000000440010.125000000000000-1103311110.010102000201111410000000001400010.1666666666666667000000000000-1103311100.055555555555555550.055555555555555550.055555555555555550.05555555555555555120.5000.0033333333333333340102000201111410000000001400010.1111111111111111000000000000-1103311110.01010200020#ffffff#c0c0c01#dddddd10000000001400010.1666666666666667000000000000-1103311110.01#ffffff10200020#ffffff#dddddd1#eaeaea10000000001400010.1666666666666667000000000000-1103311110.01#ffffff10200020#ffffff#9696961#eaeaea10000000001400010.1666666666666667000000000000-1103311110.01010200020#dddddd11#dddddd10000000001400010.1666666666666667000000000000-1103311110.01#a78450102000201#c9ba961#dddddd10000000001400010.1666666666666667000000000000-1103311110.01#ffffff10200020#ffffff#e1d8c11#dddddd10000000001400010.1666666666666667000000000000-1103311110.01#ffffff10200020#ffffff#b6a06d1#dddddd10000000001400010.1666666666666667000000000000-1103311110.01#81723d10200020#dcd2b8#8e74371#dddddd10000000001400010.1666666666666667000000000000-1103311110.01#37377310200020#c6d1e3#4e8ec21#dddddd10000000001400010.1666666666666667000000000000-1103311110.01#ffffff10200020#c6d1e3#8baede1#dddddd10000000001400010.1666666666666667000000000000-1103311110.01#ffffff10200020#c6d1e3#6363b11#dddddd10000000001400010.1666666666666667000000000000-1103311110.01#2e2e5a10200020#a9a9d3#4343891#dddddd10000000001400010.1666666666666667000000000000-1103311110.01#dddddd10200020#efefef#ffffff1#dddddd100000000014#dddddd0010.1666666666666667000000000000-1103311110.01#ffffff10200020#fafafa11#dddddd100000000014#dddddd0010.1666666666666667000000000000-1103311110.01#dddddd1020002015#ffffff1#dddddd100000000014#c0c0c00010.1666666666666667000000000000-1103311110.01#dddddd10200020#ffffff#dddddd1#dddddd100000000014#c0c0c00010.1666666666666667000000000000-1103311110.010102000200#ffffff11410000000001400010.1666666666666667000000000000-1103311110.01010200020#000000#ffffff114100000000014#ffffff0010.1666666666666667000000000000-1103311100.055555555555555550.055555555555555550.055555555555555550.05555555555555555100.500400010.1111111111111111000000000000-11033000-1.2001000-10011100.00333333333333333401020002011100.0033333333333333340102000200.055555555555555550.055555555555555550.055555555555555550.05555555555555555100.500400010.1111111111111111000000000000-11033000-1.2001000-10000100.027777777777777780.027777777777777780.027777777777777780.02777777777777778100.500400010.1111111111111111000000000000-11033000-1.2001000-10011100.055555555555555550.055555555555555550.055555555555555550.055555555555555551150.500400010.1111111111111111000000000000-11033000-1.2001000-10011100.0033333333333333340102000200.055555555555555550.055555555555555550.055555555555555550.05555555555555555120.500400010.1111111111111111000000000000-11033000-1.2001000-1001110151101000000000111100.00333333333333333401020002014151010000000001400010.1111111111111111000000000000-11033000-1.2001000-100111018151010000000001111020141010000000001111031510100000000010.00333333333333333431020012011101#8a8aff310100000000010.0033333333333333340002000201110151810100000000010.00166666666666666701020002011100.01110200020#ffffff#96969631#eaeaea10000000001000-1.2001000-1001110#ffffff#dddddd30#eaeaea10000000001000-1.2001000-1001110#ffffff#c0c0c032#dddddd100000000010.01010200020000-1.2001000-10011100.0208333333333333301020002011110.01010200020000-1.2001000-10011100.0016666666666666670102000201940010000000.125-0.12501400010.16666666666666670000000000000103311100.043333333333333010200020400010.22222222222222000000000000-110330000001033

%_P&roperties0000000.54166666666666670.3730.16666666666666670.7460.083333333333333370.3730000#e7e4cd#ff660031#eaeaea10000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.010000.6519999999999994000.16666666666666670.091999999999999890.16666666666666660.74600.6519999999999994 +0.31250.8260.6250.34800000000000060.31250.1740000#e7e4cd#ff660030#eaeaea10000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.010000.2560.458333333333333500.6250.0940.16666666666666670.348000000000000600.256 +0.22916666666666670.4540.45833333333333340.9080.22916666666666670.4540000#e7e4cd#ff660032#dddddd10000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.010000.2560.458333333333333400.45833333333333340.651999999999999400.90800.256 +0.31250.4660.54166666666666650.8360.27083333333333330.41800000.01#e7e4cd10200020#e7e4cd#ff660026010000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.100000.8360.41666666666666680.6040.54166666666666660.6720.41666666666666670.6040.41666666666666680100000.7280.41666666666666670.496100000.620.41666666666666660.388100000.5120.41666666666666670.28100000.40.41666666666666670.168100000.2920.41666666666666670.0600000000000000510000.30416666666666660.2320.30416666666666660.12410000.0750.3560.0750.24810000.18750.4080.18750.29610000.30416666666666660.4480.30416666666666660.34410000.0750.5760.0750.47210000.18750.6240.18750.51610000.0750.7920.0750.6880.31250.50.62510.31250.50000Copyright (c) 2003 Microsoft Corporation. All rights reserved.100000.2560.458333333333333400.6250.092000000000000050.6250.7460.1666666666666667100.90800.256 + +AAABAAEAICAQAAAAAADoAgAAFgAAACgAAAAgAAAAQAAAAAEABAAAAAAAgAIAAAAAAAAAAAAAAAAAA +AAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/w +D/AP//AAD///8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmQkAAAA +AAAAAAAAAAAAAuZsLmwAAAAAAAAAAAAAACZmICbkAAAAAAAAAAAAACJuIuQubAAAAAAAAAAAACbiI +iZkJuQAAAAAAAAAACbmYuYuIC5sAAAAAAAAAALmYiZmImwm5AAAAAAAAAJiYibmIm5kLmwAAAAAAA +Am4i4mYm5mICbkAAAAAAAAJi5mIiJmIuQubAAAAAAAACJmYibiIiZkJuQAAAAAAAAuYibmYuYuIC5 +sAAAAAAAAJiLmYiZmImwm5AAAAAAAACJiYibmIm5kLmwAAAAAAAAuYi4mYm5mICbkAAAAAAAAJi5m +IiJmIuQubAAAAAAAACJmYibiIiZkJuQAAAAAAAAuYibmYm4sAsAsAAAAAAAAJiLmYiZkAm5uQAAAA +AAAACJiYibkAubm5uQAAAAAAAAuYi4mQm5ubmwAAAAAAAAAJi5mACbm5uQAAAAAAAAAACJmQC5ubm +wAAAAAAAAAAAAuQCbm5ubAAAAAAAAAAAAAJC5ubm5AAAAAAAAAAAAAAALm5ubAAAAAAAAAAAAAAAA +AAm5AAAAAAAAAAAAAAAAAAAAkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA +AAAD////////w////wD///4Af//4AH//4AB//4AAf/8AAH/8AAB/8AAAf/AAAH/wAAB/8AAAf/AAA +H/wAAB/8AAAf/AAAH/wAAB/8AAAf/AAAH/wAAB/8AAAf/AAAP/wAAP/8AAP//AAP//wAH//8AH/// +wH////H////7////////w==0.18229166666666680.03125-1.0323299490408541.0065146579804560.16666666666666680.156250.19791666666666690.14062501000.119791666666666800.250.25906346010171040.50.27812692020342080.250.139063460101710400000.01#ffffff10200020#ffffff#dddddd30#eaeaea10000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.000000.1860.07499999999999990.1440.25833333333333330.0420.13075215066244970.07309329980393312-0.0010813142074236271.0557481202690210.333333333333333200.50.092000000000000070.16506066041094740.278126920203420800.1860.41666666666666670.1060.16666666666666680.2120.08333333333333340.10600000.01110200020#ffffff#96969631#eaeaea10000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.0000000.15833333333333340.0880.15833333333333340.1040.16666666666666680.1080.16666666666666680.21200.12000.16666666666666760.1530.33333333333333140.3060.16666666666666570.15300000.01010200020#ffffff#c0c0c032#dddddd10000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.000000.2020.0083333333333313940.1960.0083333333333313940.180.074999999999998050.1440.25833333333333140.0420.13075215066244790.07309329980393314-0.0025292241546406141.055746298365970.333333333333331400.33333333333333140.120.25833333333333140.1620.074999999999998070.2640.13075215066244790.1930932998039332-0.0019628642392290291.05574718503021800.30600.2020.25000000000000060.20.49999999999999910.40.250.200000.020833333333333330102000200#ffffff11410000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.100000.30600.2020.0083333333333323340.1960.0083333333333323340.180.0749999999999990.1440.25833333333333240.0420.13075215066244880.07309329980393313-0.002577649373050111.0557462121769380.333333333333332300.49166666666666560.0880.49166666666666560.1040.49999999999999910.1080.49999999999999910.2120.16666666666666570.400.3060.041666666666666660.25141681921886480.03780606240092480.054833638437729640.01890303120046240.0274168192188648200000.0016666666666666670102000201940010000000.125-0.12501Copyright (c) 2003 Microsoft Corporation. All rights reserved.000000.01939693332491170.0378060624009248200.037806062400924820.0346906692157070400.0548336384377294200.01939693332491170.16666666666666760.1360.33333333333333140.2160.16666666666666570.10800000.01010200020#ffffff#c0c0c032#dddddd10000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.000000.20200.18323116103001070.074999999999998050.1440.25833333333333140.0420.13075215066244790.07309329980393314-0.0025292241546414821.0557462983659710.333333333333331400.33333333333333140.030.25833333333333140.0720.074999999999998070.1740.13075215066244790.1030932998039331-0.0019628642392311141.05574718503021900.21600.2020.14505543850012370.16964561328185240.017063401544964790.046881518307584520.0085317007724823970.0234407591537922600000.01#00990010200020#33996601010000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.10000.017063401544964790.0468815183075845200.039259282798749360.000794632253022579800.16626993178836860.15711452571376370.017063401544964790.050229051427527340.0085317007724823970.0251145257137636700000.01#00990010200020#33996601010000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.10000.017063401544964790.0502290514275273400.042062556971137960.000794632253022579800.18750.14944075915379230.017063401544964790.050881518307584470.0085317007724823970.0254407591537922300000.01#00990010200020#33996601010000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.10000.017063401544964790.0508815183075844700.042608942469852420.000794632253022579800.11250.19704463502759890.017063401544964790.042089270055197690.0085317007724823970.0210446350275988400000.01#00990010200020#33996601010000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.10000.017063401544964790.0420892700551976900.035246182622515740.000794632253022579800.12916666666666670.1821358253936780.017063401544964790.04427165078735590.0085317007724823970.0221358253936779500000.01#00990010200020#33996601010000000001Copyright (c) 2003 Microsoft Corporation. All rights reserved.10000.017063401544964790.044271650787355900.037073740803891450.00079463225302257980 +AAABAAEAICAQAAAAAADoAgAAFgAAACgAAAAgAAAAQAAAAAEABAAAAAAAgAIAAAAAAAAAAAAAAAAAA +AAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/w +D/AP//AAD///8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA +AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA +APAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAiIAAAAAAAAAAAAAHAAAAiId3cAgAAAAAA +AAAAAiIiIiIiIhwAAAAAAAAAAaGiIiIiIiIeIAAAAAAAAhmhniIj//4iHiAAAAAAAAGZob/////// +h4gAAAAAAAZmhoiIiIiIiI+IAAAAAICGZoiIiIiIiIiIjwAAAAAIhoiIiIiIiIiIiIAAAAAIAIiIi +IiIiIiIiIAAAAAAAMD4iIiIiIiIiIAAAAAAAAAIiIiIiIiIiIAAAAAAAAAA+IiIiIiIiIgAAAAAAA +AACIiIiIiIiIgAAAAAAAAAAAAIiIiIiIgAAAAAAAAAAAAAAAiIiIiAAAAAAAAAAAAAAAAACIiAAAA +AAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA +AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA +AAAD///////////////////v////g////gH//8AAf/8AAB/+AAAP/AAAB/gAAAfwAAAH4AAAB4AAA +AeAAAAHAAAABwAAAAcAAAAfAAAAfwAAAP8AAAP/AAAP/4AAH//gAH//8AH///wH////D///////// +////////////////////w==118.50.125-0.12511200000100110000000000010010000.1250.1250.250.250.3750.3750.1250.1250.666666666666670.66666666666667000000.250.250.250.2511110000217Co&lor Schemes...000000Network2552000000025520000000255200000002552000000025520000000Connector2550110011Connector05.48752.10.62510.31250.5000000000#e7e4cd#ff660032010000000001000000000001Firewall0000103310.3125-0.15555555555555550.11111111111111110.31111111111111110.055555555555555550.1555555555555555000.31250.500000.54166666666666670.3730.16666666666666670.7460.083333333333333370.3730000#e7e4cd#ff660031#eaeaea100000000010.31250.8260.6250.34800000000000060.31250.1740000#e7e4cd#ff660030#eaeaea100000000010.22916666666666670.4540.45833333333333340.9080.22916666666666670.4540000#e7e4cd#ff660032#dddddd100000000010.31250.4660.54166666666666650.8360.27083333333333330.41800000.01#e7e4cd10200020#e7e4cd#ff6600260100000000010.31250.50.62510.31250.500003.94.161.41.120.70.56000000000000000000009Router0000103310.7-0.15555555555555550.11111111111111110.31111111111111110.055555555555555550.1555555555555555000.7-0.15555555555555550.7-0.1555555555555555271Reposition Text0.70.5600001.2323095577425760.218750.59795244881848460.43750.29897622440924230.21875000001000.33541666666666700.59791666666666670.306250.5104166666666670.08750000000000008-1.0323299490408411.0065146579804560.4666666666666670.43750.55416666666666710.3937501000.33541666666666700.70.72537768828478911.40.77875537656957810.70.3893776882847890000000000.52080.210.40320.72333333333333310.11760.36610602185485910.2046612394510127-0.0010813142074236211.0557481202690220.933333333333332901.40.25760.46216984915065260.778755376569578100.52081.1666666666666670.29680.4666666666666670.59360.23333333333333350.296800000000000.44333333333333350.24640.44333333333333340.29120.46666666666666710.30240.46666666666666690.593600.336000.46666666666666930.42840.93333333333332780.85680.46666666666666390.42840000000000.56559999999999940.02333333333332790.54880.02333333333332790.5040.20999999999999450.40320.72333333333332780.11760.3661060218548540.2046612394510127-0.0025292241546406061.0557462983659710.933333333333327800.93333333333332780.3360.72333333333332780.45360.20999999999999460.73920.3661060218548540.5406612394510127-0.0019628642392290221.05574718503021800.856800.56559999999999940.70000000000000150.561.41.120.69999999999999870.56000000000000000000001000010331100000.856800.56559999999999930.023333333333330540.54880.023333333333330540.5040.20999999999999720.40320.72333333333333050.11760.36610602185485670.2046612394510127-0.0025776493730500951.0557462121769390.933333333333330501.3766666666666640.24641.3766666666666640.29121.40.30241.40.59360.46666666666666381.1200.85680.11666666666666670.70396709381282140.10585697472258940.1535341876256430.052928487361294710.076767093812821490000000000.054311413309752750.105856974722589500.10585697472258950.097133873803979700.153534187625642400.054311413309752750.46666666666666930.38080.93333333333332780.60480.46666666666666390.30240000000000.565599999999999400.51304725088402980.20999999999999450.40320.72333333333332780.11760.3661060218548540.2046612394510128-0.0025292241546414951.0557462983659710.933333333333327800.93333333333332780.084000000000000060.72333333333332780.20160.20999999999999460.48720.3661060218548540.2886612394510128-0.0019628642392311231.05574718503021900.604800.56559999999999940.40615522780034640.47500771718918670.047777524325901420.13126825126123660.023888762162950710.0656341256306183100000.01#00990010200020#3399660101000000000110000.047777524325901420.131268251261236600.10992599183649820.00222497030846322300.46555580900743190.43992067199853840.047777524325901420.14064134399707650.023888762162950710.0703206719985382700000.01#00990010200020#3399660101000000000110000.047777524325901420.140641343997076500.11777515951918630.00222497030846322300.5250.41843412563061830.047777524325901420.14246825126123650.023888762162950710.0712341256306182300000.01#00990010200020#3399660101000000000110000.047777524325901420.142468251261236500.11930503891558670.00222497030846322300.3150.55172497807727670.047777524325901420.11784995615455350.023888762162950710.0589249780772767400000.01#00990010200020#3399660101000000000110000.047777524325901420.117849956154553500.098689311343044050.00222497030846322300.36166666666666670.50998031110229840.047777524325901420.12396062220459650.023888762162950710.0619803111022982400000.01#00990010200020#3399660101000000000110000.047777524325901420.123960622204596500.1038064742508960.00222497030846322307.54.141.41.120.70.56000000000000000000001Router0000103310.7-0.15555555555555550.11111111111111110.31111111111111110.055555555555555550.1555555555555555000.7-0.15555555555555550.7-0.1555555555555555271Reposition Text0.70.5600001.2323095577425760.218750.59795244881848460.43750.29897622440924230.21875000001000.33541666666666700.59791666666666670.306250.5104166666666670.08750000000000008-1.0323299490408411.0065146579804560.4666666666666670.43750.55416666666666710.3937501000.33541666666666700.70.72537768828478911.40.77875537656957810.70.3893776882847890000000000.52080.210.40320.72333333333333310.11760.36610602185485910.2046612394510127-0.0010813142074236211.0557481202690220.933333333333332901.40.25760.46216984915065260.778755376569578100.52081.1666666666666670.29680.4666666666666670.59360.23333333333333350.296800000000000.44333333333333350.24640.44333333333333340.29120.46666666666666710.30240.46666666666666690.593600.336000.46666666666666930.42840.93333333333332780.85680.46666666666666390.42840000000000.56559999999999940.02333333333332790.54880.02333333333332790.5040.20999999999999450.40320.72333333333332780.11760.3661060218548540.2046612394510127-0.0025292241546406061.0557462983659710.933333333333327800.93333333333332780.3360.72333333333332780.45360.20999999999999460.73920.3661060218548540.5406612394510127-0.0019628642392290221.05574718503021800.856800.56559999999999940.70000000000000150.561.41.120.69999999999999870.560000100000.856800.56559999999999930.023333333333330540.54880.023333333333330540.5040.20999999999999720.40320.72333333333333050.11760.36610602185485670.2046612394510127-0.0025776493730500951.0557462121769390.933333333333330501.3766666666666640.24641.3766666666666640.29121.40.30241.40.59360.46666666666666381.1200.85680.11666666666666670.70396709381282140.10585697472258940.1535341876256430.052928487361294710.076767093812821490000000000.054311413309752750.105856974722589500.10585697472258950.097133873803979700.153534187625642400.054311413309752750.46666666666666930.38080.93333333333332780.60480.46666666666666390.30240000000000.565599999999999400.51304725088402980.20999999999999450.40320.72333333333332780.11760.3661060218548540.2046612394510128-0.0025292241546414951.0557462983659710.933333333333327800.93333333333332780.084000000000000060.72333333333332780.20160.20999999999999460.48720.3661060218548540.2886612394510128-0.0019628642392311231.05574718503021900.604800.56559999999999940.40615522780034640.47500771718918670.047777524325901420.13126825126123660.023888762162950710.0656341256306183100000.01#00990010200020#3399660101000000000110000.047777524325901420.131268251261236600.10992599183649820.00222497030846322300.46555580900743190.43992067199853840.047777524325901420.14064134399707650.023888762162950710.0703206719985382700000.01#00990010200020#3399660101000000000110000.047777524325901420.140641343997076500.11777515951918630.00222497030846322300.5250.41843412563061830.047777524325901420.14246825126123650.023888762162950710.0712341256306182300000.01#00990010200020#3399660101000000000110000.047777524325901420.142468251261236500.11930503891558670.00222497030846322300.3150.55172497807727670.047777524325901420.11784995615455350.023888762162950710.0589249780772767400000.01#00990010200020#3399660101000000000110000.047777524325901420.117849956154553500.098689311343044050.00222497030846322300.36166666666666670.50998031110229840.047777524325901420.12396062220459650.023888762162950710.0619803111022982400000.01#00990010200020#3399660101000000000110000.047777524325901420.123960622204596500.1038064742508960.00222497030846322305.7527559055117996.573228346456714.09448818897641.65354330708662.04724409448820.826771653543310000000000000000000010000103310.789826771653540.0826771653543310100003.33004724409450.197929133858270000Internet +4.197669291338574.994566929133866-0.5953385826771385-1.669133858267732-0.2976692913385692-0.83456692913386600004.4953385826771395.8291338582677313.94.16500000000100220222010010331-0.5953385826771385-0.53689763779529680.55555555555555560.24444444444444440.27777777777777780.12222222222222220-0.5953385826771385-0.5368976377952968-0.5953385826771385-0.5368976377952968500Reposition Text1000000-0.2701771653543315-0.5953385826771385-0.2701771653543315-0.5953385826771385-1.6691338582677327.2677795275590495.0421929133858350.4644409448819005-1.8043858267716690.2322204724409502-0.902192913385834400007.0355590551180995.9443858267716697.54.145000000001002202220100103310.4644409448819005-0.66997244094488420.55555555555555560.24444444444444440.27777777777777780.122222222222222200.4644409448819005-0.66997244094488420.4644409448819005-0.6699724409448842500Reposition Text1000000-0.38542913385826960.4644409448819005-0.38542913385826960.4644409448819005-1.8043858267716694.693752.9074336295642341.5875-1.6148672591284690.7937499999999993-0.807433629564234600003.93.7148672591284695.48752.15000000001002202220100103310-1.6011836295642340.55555555555555560.24444444444444440.27777777777777780.122222222222222200000004000000000-1.6011836295642340-1.601183629564234500Reposition Text1000000-1.6148672591284691.5875-1.6148672591284696.493753.12-2.0125-2.04-1.00625-1.0200007.54.145.48752.15000000001002202220100103310-2.026250.55555555555555560.24444444444444440.27777777777777780.122222222222222200-2.026250-2.02625500Reposition Text1000000-2.04-2.0125-2.042.34.31.41.40.70.7000000000400010.1666666666666667000000000000-110330000001.401.41.401.400ISP 1 Gateway Router +IP 206.124.146.254 +9.34.21.41.40.70.7000000000400010.1666666666666667000000000000-110330000001.401.41.401.400ISP 2 Gateway Router +IP 130.252.99.254 +4.31.61.40.60.70.3000000000400010.1666666666666667000000000000-110330000001.401.40.600.600eth0 +206.124.146.176 +6.71.6142857142857141.20.60.60.3000000000400010.1666666666666667000000000000-110330000001.201.20.600.600eth1 +130.252.99.27 +1101192953400.5100101102103104 \ No newline at end of file diff --git a/Shorewall-docs2/starting_and_stopping_shorewall.xml b/Shorewall-docs2/starting_and_stopping_shorewall.xml index 1be38f2c9..fbaa5b0e4 100644 --- a/Shorewall-docs2/starting_and_stopping_shorewall.xml +++ b/Shorewall-docs2/starting_and_stopping_shorewall.xml @@ -15,7 +15,7 @@ - 2005-04-13 + 2005-05-15 2004 @@ -48,7 +48,45 @@ to interact with Shorewall. Normally the root user's PATH includes /sbin and the program can be run from a shell prompt by simply typing shorewall followed by a - command. To see a list of supported commands, use the + command. + + + In some releases of KDE, the default configuration of the + konsole program is brain dead with + respect to the "Root Console". It executes the command "su" where it + should execute "su -"; the latter will cause a login shell to be + created which will in turn set PATH properly. You can correct this + problem as follows: + + + + Click on "Settings" on the toolbar and select "Configure + Konsole" + + + + Select the "Session" tab. + + + + Click on "Root Console" + + + + Change the Execute command from "su" to "su -" + + + + Click on "Save Session" + + + + Click on "Ok" + + + + + To see a list of supported commands, use the help command: shorewall help @@ -61,10 +99,11 @@ /etc/shorewall — The default directory - where Shorewall looks for configuration files. See the section - entitled Alternate Configuration - Directories for information about how you can direct Shorewall - to look in other directories. + where Shorewall looks for configuration files. See the sections + entitled Additional Configuration + Directories and Alternate + Configuration Directories for information about how you can + direct Shorewall to look in other directories. @@ -237,7 +276,7 @@ is much faster than starting Shorewall using the normal mechanism of reading the configuration files and running iptables dozens or even hundreds of times. - /etc/init.d/shorewall + By default, /etc/init.d/shorewall (/etc/rc.d/firewall.rc) uses the -f option when it is processing a request to start Shorewall. @@ -271,16 +310,52 @@ shell prompt to remove these files). -
- Alternate Configuration Directories +
+ Additional Configuration Directories - As explained above, Shorewall normally looks for configuration files - in the directory /etc/shorewall. - The shorewall start, shorewall - restart, shorewall check, and - shorewall try commands allow you to specify a different - directory for Shorewall to check before looking in /etc/shorewall. + The CONFIG_PATH setting in + /etc/shorewall/shorewall.conf determines where + Shorewall looks for configuration files. The default setting is + CONFIG_PATH=/etc/shorewall:/usr/share/shorewall which means that + /etc/shorewall is searched first + and if the file is not found then /usr/share/shorewall is searched. You can + change the value of CONFIG_PATH to cause additional directories to be + searched but CONFIG_PATH should always include both + /etc/shorewall and /usr/share/shorewall. + + When an alternate configuration directory is specified as described + in the next section, that directory + is searched before those directories listed in + CONFIG_PATH. + + Example - Search /etc/shorewall, /etc/shorewall/actiondir and /usr/share/shorewall in that order: + + CONFIG_PATH=/etc/shorewall:/etc/shorewall/actiondir:/usr/share/shorewall + + The above is the setting that I use and it allows me to place all of + my user-defined 'action.' files in /etc/shorewall/actiondir. +
+ +
+ Alternate Configuration Directories + + As explained above, Shorewall + normally looks for configuration files in the directories specified by the + CONFIG_PATH option in /etc/shorewall/shorewall.conf. The + shorewall start, shorewall restart, + shorewall check, and shorewall try + commands allow you to specify an additional directory for + Shorewall to check before looking in the directories listed in + CONFIG_PATH. Shorewall versions before Shorewall 2.2.0: