From owner-freebsd-net@FreeBSD.ORG Sun Jan 9 09:23:25 2005 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3FEB216A4CE for ; Sun, 9 Jan 2005 09:23:25 +0000 (GMT) Received: from relay02.pair.com (relay02.pair.com [209.68.5.16]) by mx1.FreeBSD.org (Postfix) with SMTP id 959F743D49 for ; Sun, 9 Jan 2005 09:23:24 +0000 (GMT) (envelope-from silby@silby.com) Received: (qmail 6323 invoked from network); 9 Jan 2005 09:23:22 -0000 Received: from unknown (HELO localhost) (unknown) by unknown with SMTP; 9 Jan 2005 09:23:22 -0000 X-pair-Authenticated: 209.68.2.70 Date: Sun, 9 Jan 2005 03:23:21 -0600 (CST) From: Mike Silbersack To: net@freebsd.org Message-ID: <20050109031431.H2669@odysseus.silby.com> MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="0-835642382-1105262178=:2669" Content-ID: <20050109031637.R2669@odysseus.silby.com> Subject: Slipping in the window update X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Jan 2005 09:23:25 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --0-835642382-1105262178=:2669 Content-Type: TEXT/PLAIN; CHARSET=US-ASCII; FORMAT=flowed Content-ID: <20050109031637.E2669@odysseus.silby.com> Ok, here's an updated patch for the SYN case. I've included the patch relative to 6.x, and some text from a tcpdump showing it in action. It responds to each SYN with an ACK like the latest tcpsecure document states, but it uses a global counter to rate limit the number of ACKs of this type that it will send to 200 per second. I was unable to incorporate the connect idle heuristic I wanted to because right now the incoming spoofed syns would reset the idle counter, which sounds like it could cause a problem somehow... best not to use it for now. Maybe a future change can clean up that along with the dropafterack case in tcp_input, but that would make this patch far too complex. Please take a look at the patch and the abbreviated tcpdump from my test and see if it looks correct. Thanks, Mike "Silby" Silbersack --0-835642382-1105262178=:2669 Content-Type: TEXT/PLAIN; CHARSET=US-ASCII; NAME="syn_fix.patch" Content-Transfer-Encoding: BASE64 Content-ID: <20050109031618.H2669@odysseus.silby.com> Content-Description: Content-Disposition: ATTACHMENT; FILENAME="syn_fix.patch" ZGlmZiAtdSAtciAvdXNyL3NyYy9zeXMub2xkL25ldGluZXQvaWNtcF92YXIu aCAvdXNyL3NyYy9zeXMvbmV0aW5ldC9pY21wX3Zhci5oDQotLS0gL3Vzci9z cmMvc3lzLm9sZC9uZXRpbmV0L2ljbXBfdmFyLmgJTW9uIEphbiAgMyAwMDow MzozMSAyMDA1DQorKysgL3Vzci9zcmMvc3lzL25ldGluZXQvaWNtcF92YXIu aAlTdW4gSmFuICA5IDAyOjQ3OjEyIDIwMDUNCkBAIC04MCw5ICs4MCwxMCBA QA0KICNkZWZpbmUgQkFORExJTV9JQ01QX1VOUkVBQ0ggMA0KICNkZWZpbmUg QkFORExJTV9JQ01QX0VDSE8gMQ0KICNkZWZpbmUgQkFORExJTV9JQ01QX1RT VEFNUCAyDQotI2RlZmluZSBCQU5ETElNX1JTVF9DTE9TRURQT1JUIDMgLyog Tm8gY29ubmVjdGlvbiwgYW5kIG5vIGxpc3RlbmVycyAqLw0KLSNkZWZpbmUg QkFORExJTV9SU1RfT1BFTlBPUlQgNCAgIC8qIE5vIGNvbm5lY3Rpb24sIGxp c3RlbmVyICovDQotI2RlZmluZSBCQU5ETElNX01BWCA0DQorI2RlZmluZSBC QU5ETElNX1JTVF9DTE9TRURQT1JUIDMgIC8qIE5vIGNvbm5lY3Rpb24sIGFu ZCBubyBsaXN0ZW5lcnMgKi8NCisjZGVmaW5lIEJBTkRMSU1fUlNUX09QRU5Q T1JUIDQgICAgLyogTm8gY29ubmVjdGlvbiwgbGlzdGVuZXIgKi8NCisjZGVm aW5lIEJBTkRMSU1fU1lOX0VTVEFCTElTSEVEIDUgLyogRXN0YWJsaXNoZWQg Y29ubmVjdCwgU1lOIHJlY2lldmVkICovDQorI2RlZmluZSBCQU5ETElNX01B WCA1DQogI2VuZGlmDQogDQogI2VuZGlmDQpkaWZmIC11IC1yIC91c3Ivc3Jj L3N5cy5vbGQvbmV0aW5ldC9pcF9pY21wLmMgL3Vzci9zcmMvc3lzL25ldGlu ZXQvaXBfaWNtcC5jDQotLS0gL3Vzci9zcmMvc3lzLm9sZC9uZXRpbmV0L2lw X2ljbXAuYwlNb24gSmFuICAzIDAwOjAzOjMxIDIwMDUNCisrKyAvdXNyL3Ny Yy9zeXMvbmV0aW5ldC9pcF9pY21wLmMJU3VuIEphbiAgOSAwMjo0ODo0MCAy MDA1DQpAQCAtODk3LDcgKzg5Nyw4IEBADQogCQl7ICJpY21wIHBpbmcgcmVz cG9uc2UiIH0sDQogCQl7ICJpY21wIHRzdGFtcCByZXNwb25zZSIgfSwNCiAJ CXsgImNsb3NlZCBwb3J0IFJTVCByZXNwb25zZSIgfSwNCi0JCXsgIm9wZW4g cG9ydCBSU1QgcmVzcG9uc2UiIH0NCisJCXsgIm9wZW4gcG9ydCBSU1QgcmVz cG9uc2UiIH0sDQorCQl7ICJBQ0sgZm9yIHVuZXhwZWN0ZWQgU1lOIiB9DQog CX07DQogDQogCS8qDQpkaWZmIC11IC1yIC91c3Ivc3JjL3N5cy5vbGQvbmV0 aW5ldC90Y3BfaW5wdXQuYyAvdXNyL3NyYy9zeXMvbmV0aW5ldC90Y3BfaW5w dXQuYw0KLS0tIC91c3Ivc3JjL3N5cy5vbGQvbmV0aW5ldC90Y3BfaW5wdXQu YwlNb24gSmFuICAzIDAxOjExOjQwIDIwMDUNCisrKyAvdXNyL3NyYy9zeXMv bmV0aW5ldC90Y3BfaW5wdXQuYwlTdW4gSmFuICA5IDAyOjUxOjE3IDIwMDUN CkBAIC0xMzYsNiArMTM2LDExIEBADQogICAgICZ0Y3BfaW5zZWN1cmVfcnN0 LCAwLA0KICAgICAiRm9sbG93IHRoZSBvbGQgKGluc2VjdXJlKSBjcml0ZXJp YSBmb3IgYWNjZXB0aW5nIFJTVCBwYWNrZXRzLiIpOw0KIA0KK3N0YXRpYyBp bnQgdGNwX2luc2VjdXJlX3N5biA9IDA7DQorU1lTQ1RMX0lOVChfbmV0X2lu ZXRfdGNwLCBPSURfQVVUTywgaW5zZWN1cmVfc3luLCBDVExGTEFHX1JXLA0K KyAgICAmdGNwX2luc2VjdXJlX3N5biwgMCwNCisgICAgIkZvbGxvdyB0aGUg b2xkIGNyaXRlcmlhIGFsbG93aW5nIFNZTiBwYWNrZXRzIHRvIHJlc2V0IGEg Y29ubmVjdGlvbi4iKTsNCisNCiBTWVNDVExfTk9ERShfbmV0X2luZXRfdGNw LCBPSURfQVVUTywgcmVhc3MsIENUTEZMQUdfUlcsIDAsDQogCSAgICAiVENQ IFNlZ21lbnQgUmVhc3NlbWJseSBRdWV1ZSIpOw0KIA0KQEAgLTE1NjAsNiAr MTU2NSwyMSBAQA0KIAkJCX0NCiAJCX0NCiAJCWdvdG8gZHJvcDsNCisJfQ0K Kw0KKwlpZiAodGhmbGFncyAmIFRIX1NZTikgew0KKwkJaWYgKHRwLT50X3N0 YXRlID09IFRDUFNfRVNUQUJMSVNIRUQgJiYNCisJCSAgICB0Y3BfaW5zZWN1 cmVfc3luID09IDApIHsNCisJCQlpZiAoYmFkcG9ydF9iYW5kbGltKEJBTkRM SU1fU1lOX0VTVEFCTElTSEVEKSA8IDApDQorCQkJCWdvdG8gZHJvcDsNCisJ CQl0Y3BfcmVzcG9uZCh0cCwgbXRvZChtLCB2b2lkICopLCB0aCwgbSwgdHAt PnJjdl9ueHQsDQorCQkJCXRwLT5zbmRfdW5hLCBUSF9BQ0spOw0KKwkJCWlm ICh0cCkNCisJCQkJSU5QX1VOTE9DSyhpbnApOw0KKwkJCWlmIChoZWFkbG9j a2VkKQ0KKwkJCQlJTlBfSU5GT19XVU5MT0NLKCZ0Y2JpbmZvKTsNCisJCQly ZXR1cm47DQorCQl9DQogCX0NCiANCiAJLyoNCg== --0-835642382-1105262178=:2669 Content-Type: TEXT/PLAIN; CHARSET=US-ASCII; NAME="syn_fix-test.txt" Content-Transfer-Encoding: BASE64 Content-ID: <20050109031618.P2669@odysseus.silby.com> Content-Description: Content-Disposition: ATTACHMENT; FILENAME="syn_fix-test.txt" MDI6NTY6MDMuMzQzNDE5IElQIDEwLjEuMS42LjIyID4gMTAuMS4xLjE1LjMw NDM6IFAgMTcwODk1NTk1OjE3MDg5NTcyMygxMjgpIGFjayAzMzIwNTQ0NTcg d2luIDY1NTM1DQowMjo1NjowMy4zNDM4MDYgSVAgMTAuMS4xLjE1LjMwNDMg PiAxMC4xLjEuNi4yMjogLiBhY2sgMTI4IHdpbiA2NDkxMQ0KMDI6NTY6MDQu MjIzMDQ3IElQIDEwLjEuMS4xNS4zMDQzID4gMTAuMS4xLjYuMjI6IFAgMTo0 OSg0OCkgYWNrIDEyOCB3aW4gNjQ5MTENCjAyOjU2OjA0LjIyMzU1NCBJUCAx MC4xLjEuNi4yMiA+IDEwLjEuMS4xNS4zMDQzOiBQIDEyODoxNzYoNDgpIGFj ayA0OSB3aW4gNjU1MzUNCjAyOjU2OjA0LjIyNDYyOSBJUCAxMC4xLjEuMTUu MzA0MyA+IDEwLjEuMS42LjIyOiBQIDQ5Ojk3KDQ4KSBhY2sgMTc2IHdpbiA2 NDg2Mw0KMDI6NTY6MDQuMjI0OTM3IElQIDEwLjEuMS42LjIyID4gMTAuMS4x LjE1LjMwNDM6IFAgMTc2OjIyNCg0OCkgYWNrIDk3IHdpbiA2NTUzNQ0KMDI6 NTY6MDQuMjI2MjQyIElQIDEwLjEuMS4xNS4zMDQzID4gMTAuMS4xLjYuMjI6 IFAgOTc6MTQ1KDQ4KSBhY2sgMjI0IHdpbiA2NDgxNQ0KMDI6NTY6MDQuMjI2 NTMwIElQIDEwLjEuMS42LjIyID4gMTAuMS4xLjE1LjMwNDM6IFAgMjI0OjI3 Mig0OCkgYWNrIDE0NSB3aW4gNjU1MzUNCjAyOjU2OjA0LjM0OTY5OSBJUCAx MC4xLjEuMTUuMzA0MyA+IDEwLjEuMS42LjIyOiAuIGFjayAyNzIgd2luIDY0 NzY3DQowMjo1NjowNC43NTcwMTIgSVAgMTAuMS4xLjE1LjMwNDMgPiAxMC4x LjEuNi4yMjogUCAxNDU6MTkzKDQ4KSBhY2sgMjcyIHdpbiA2NDc2Nw0KMDI6 NTY6MDQuNzU3MzAzIElQIDEwLjEuMS42LjIyID4gMTAuMS4xLjE1LjMwNDM6 IFAgMjcyOjMyMCg0OCkgYWNrIDE5MyB3aW4gNjU1MzUNCjAyOjU2OjA0Ljg5 NjMyOCBJUCAxMC4xLjEuMTUuMzA0MyA+IDEwLjEuMS42LjIyOiAuIGFjayAz MjAgd2luIDY0NzE5DQowMjo1NjowNS4wMDA0MTAgSVAgMTAuMS4xLjE1LjMw NDMgPiAxMC4xLjEuNi4yMjogUCAxOTM6MjQxKDQ4KSBhY2sgMzIwIHdpbiA2 NDcxOQ0KMDI6NTY6MDUuMDAwNzA5IElQIDEwLjEuMS42LjIyID4gMTAuMS4x LjE1LjMwNDM6IFAgMzIwOjM2OCg0OCkgYWNrIDI0MSB3aW4gNjU1MzUNCjAy OjU2OjA1LjA5MjU2NCBJUCAxMC4xLjEuMTUuMzA0MyA+IDEwLjEuMS42LjIy OiBQIDI0MToyODkoNDgpIGFjayAzNjggd2luIDY0NjcxDQowMjo1NjowNS4w OTI4NTUgSVAgMTAuMS4xLjYuMjIgPiAxMC4xLjEuMTUuMzA0MzogUCAzNjg6 NDE2KDQ4KSBhY2sgMjg5IHdpbiA2NTUzNQ0KMDI6NTY6MDUuMTA2NDk3IElQ IDEwLjEuMS4xNS4zMDQzID4gMTAuMS4xLjYuMjI6IFAgMjg5OjMzNyg0OCkg YWNrIDQxNiB3aW4gNjQ2MjMNCjAyOjU2OjA1LjEwNjc4NCBJUCAxMC4xLjEu Ni4yMiA+IDEwLjEuMS4xNS4zMDQzOiBQIDQxNjo0NjQoNDgpIGFjayAzMzcg d2luIDY1NTM1DQowMjo1NjowNS4xMDgxNDQgSVAgMTAuMS4xLjE1LjMwNDMg PiAxMC4xLjEuNi4yMjogUCAzMzc6Mzg1KDQ4KSBhY2sgNDY0IHdpbiA2NDU3 NQ0KMDI6NTY6MDUuMTA4NDQ1IElQIDEwLjEuMS42LjIyID4gMTAuMS4xLjE1 LjMwNDM6IFAgNDY0OjUxMig0OCkgYWNrIDM4NSB3aW4gNjU1MzUNCjAyOjU2 OjA1LjIxNjgxMyBJUCAxMC4xLjEuMTUuMzA0MyA+IDEwLjEuMS42LjIyOiBQ IDM4NTo0MzMoNDgpIGFjayA1MTIgd2luIDY0NTI3DQowMjo1NjowNS4yMTcx MDEgSVAgMTAuMS4xLjYuMjIgPiAxMC4xLjEuMTUuMzA0MzogUCA1MTI6NTYw KDQ4KSBhY2sgNDMzIHdpbiA2NTUzNQ0KMDI6NTY6MDUuMzAwNTY0IElQIDEw LjEuMS4xNS4zMDQzID4gMTAuMS4xLjYuMjI6IFAgNDMzOjQ4MSg0OCkgYWNr IDU2MCB3aW4gNjQ0NzkNCjAyOjU2OjA1LjMwMDg1MyBJUCAxMC4xLjEuNi4y MiA+IDEwLjEuMS4xNS4zMDQzOiBQIDU2MDo2MDgoNDgpIGFjayA0ODEgd2lu IDY1NTM1DQowMjo1NjowNS4zMDIyMDYgSVAgMTAuMS4xLjE1LjMwNDMgPiAx MC4xLjEuNi4yMjogUCA0ODE6NTI5KDQ4KSBhY2sgNjA4IHdpbiA2NDQzMQ0K MDI6NTY6MDUuMzAyNDk4IElQIDEwLjEuMS42LjIyID4gMTAuMS4xLjE1LjMw NDM6IFAgNjA4OjY1Nig0OCkgYWNrIDUyOSB3aW4gNjU1MzUNCjAyOjU2OjA1 LjQwOTUyNyBJUCAxMC4xLjEuMTUuMzA0MyA+IDEwLjEuMS42LjIyOiBQIDUy OTo1NzcoNDgpIGFjayA2NTYgd2luIDY0MzgzDQowMjo1NjowNS40MDk4MjAg SVAgMTAuMS4xLjYuMjIgPiAxMC4xLjEuMTUuMzA0MzogUCA2NTY6NzA0KDQ4 KSBhY2sgNTc3IHdpbiA2NTUzNQ0KMDI6NTY6MDUuNDY5NTgwIElQIDEwLjEu MS4xNS4zMDQzID4gMTAuMS4xLjYuMjI6IFAgNTc3OjYyNSg0OCkgYWNrIDcw NCB3aW4gNjQzMzUNCjAyOjU2OjA1LjQ2OTg2NyBJUCAxMC4xLjEuNi4yMiA+ IDEwLjEuMS4xNS4zMDQzOiBQIDcwNDo3NTIoNDgpIGFjayA2MjUgd2luIDY1 NTM1DQowMjo1NjowNS40ODI4MzUgSVAgMTAuMS4xLjE1LjMwNDMgPiAxMC4x LjEuNi4yMjogUCA2MjU6NjczKDQ4KSBhY2sgNzUyIHdpbiA2NDI4Nw0KMDI6 NTY6MDUuNDgzMTI4IElQIDEwLjEuMS42LjIyID4gMTAuMS4xLjE1LjMwNDM6 IFAgNzUyOjgwMCg0OCkgYWNrIDY3MyB3aW4gNjU1MzUNCjAyOjU2OjA1LjU2 MDEyNSBJUCAxMC4xLjEuMTUuMzA0MyA+IDEwLjEuMS42LjIyOiBQIDY3Mzo3 MjEoNDgpIGFjayA4MDAgd2luIDY0MjM5DQowMjo1NjowNS41NjA0MTMgSVAg MTAuMS4xLjYuMjIgPiAxMC4xLjEuMTUuMzA0MzogUCA4MDA6ODQ4KDQ4KSBh Y2sgNzIxIHdpbiA2NTUzNQ0KMDI6NTY6MDUuNjUzMjM1IElQIDEwLjEuMS4x NS4zMDQzID4gMTAuMS4xLjYuMjI6IFAgNzIxOjc2OSg0OCkgYWNrIDg0OCB3 aW4gNjQxOTENCjAyOjU2OjA1LjY1MzUyNSBJUCAxMC4xLjEuNi4yMiA+IDEw LjEuMS4xNS4zMDQzOiBQIDg0ODo4OTYoNDgpIGFjayA3Njkgd2luIDY1NTM1 DQowMjo1NjowNS42NjY1ODMgSVAgMTAuMS4xLjE1LjMwNDMgPiAxMC4xLjEu Ni4yMjogUCA3Njk6ODE3KDQ4KSBhY2sgODk2IHdpbiA2NDE0Mw0KMDI6NTY6 MDUuNjY2ODY5IElQIDEwLjEuMS42LjIyID4gMTAuMS4xLjE1LjMwNDM6IFAg ODk2Ojk0NCg0OCkgYWNrIDgxNyB3aW4gNjU1MzUNCjAyOjU2OjA1LjY3OTk0 NCBJUCAxMC4xLjEuMTUuMzA0MyA+IDEwLjEuMS42LjIyOiBQIDgxNzo4NjUo NDgpIGFjayA5NDQgd2luIDY0MDk1DQowMjo1NjowNS42ODAyNDUgSVAgMTAu MS4xLjYuMjIgPiAxMC4xLjEuMTUuMzA0MzogUCA5NDQ6OTkyKDQ4KSBhY2sg ODY1IHdpbiA2NTUzNQ0KMDI6NTY6MDUuNzM3OTA0IElQIDEwLjEuMS4xNS4z MDQzID4gMTAuMS4xLjYuMjI6IFAgODY1OjkxMyg0OCkgYWNrIDk5MiB3aW4g NjU1MzUNCjAyOjU2OjA1LjczODE5OSBJUCAxMC4xLjEuNi4yMiA+IDEwLjEu MS4xNS4zMDQzOiBQIDk5MjoxMDQwKDQ4KSBhY2sgOTEzIHdpbiA2NTUzNQ0K MDI6NTY6MDUuNzM5NTMzIElQIDEwLjEuMS4xNS4zMDQzID4gMTAuMS4xLjYu MjI6IFAgOTEzOjk2MSg0OCkgYWNrIDEwNDAgd2luIDY1NDg3DQowMjo1Njow NS43Mzk4MTkgSVAgMTAuMS4xLjYuMjIgPiAxMC4xLjEuMTUuMzA0MzogUCAx MDQwOjEwODgoNDgpIGFjayA5NjEgd2luIDY1NTM1DQowMjo1NjowNS44MjQx ODAgSVAgMTAuMS4xLjE1LjMwNDMgPiAxMC4xLjEuNi4yMjogUCA5NjE6MTAw OSg0OCkgYWNrIDEwODggd2luIDY1NDM5DQowMjo1NjowNS44MjQ0NjcgSVAg MTAuMS4xLjYuMjIgPiAxMC4xLjEuMTUuMzA0MzogUCAxMDg4OjExMzYoNDgp IGFjayAxMDA5IHdpbiA2NTUzNQ0KMDI6NTY6MDUuODI1ODQwIElQIDEwLjEu MS4xNS4zMDQzID4gMTAuMS4xLjYuMjI6IFAgMTAwOToxMDU3KDQ4KSBhY2sg MTEzNiB3aW4gNjUzOTENCjAyOjU2OjA1LjgyNjEzNSBJUCAxMC4xLjEuNi4y MiA+IDEwLjEuMS4xNS4zMDQzOiBQIDExMzY6MTE4NCg0OCkgYWNrIDEwNTcg d2luIDY1NTM1DQowMjo1NjowNS45MDA0MTUgSVAgMTAuMS4xLjE1LjMwNDMg PiAxMC4xLjEuNi4yMjogUCAxMDU3OjExMDUoNDgpIGFjayAxMTg0IHdpbiA2 NTM0Mw0KMDI6NTY6MDUuOTAwNzA0IElQIDEwLjEuMS42LjIyID4gMTAuMS4x LjE1LjMwNDM6IFAgMTE4NDoxMjMyKDQ4KSBhY2sgMTEwNSB3aW4gNjU1MzUN CjAyOjU2OjA1LjkxMzY3OCBJUCAxMC4xLjEuMTUuMzA0MyA+IDEwLjEuMS42 LjIyOiBQIDExMDU6MTE1Myg0OCkgYWNrIDEyMzIgd2luIDY1Mjk1DQowMjo1 NjowNS45MTM5NzggSVAgMTAuMS4xLjYuMjIgPiAxMC4xLjEuMTUuMzA0Mzog UCAxMjMyOjEyODAoNDgpIGFjayAxMTUzIHdpbiA2NTUzNQ0KMDI6NTY6MDYu MDk4OTI3IElQIDEwLjEuMS4xNS4zMDQzID4gMTAuMS4xLjYuMjI6IC4gYWNr IDEyODAgd2luIDY1MjQ3DQowMjo1NjowOC43MTkzMjQgSVAgMTAuMS4xLjE1 LjMwNDMgPiAxMC4xLjEuNi4yMjogUyAwOjAoMCkgd2luIDANCjAyOjU2OjA4 LjcxOTg1MSBJUCAxMC4xLjEuNi4yMiA+IDEwLjEuMS4xNS4zMDQzOiAuIGFj ayAxMTUzIHdpbiA2NTUzNQ0KMDI6NTY6MDguNzE5ODczIElQIDEwLjEuMS4x NS4zMDQzID4gMTAuMS4xLjYuMjI6IFMgMTYzODQ6MTYzODQoMCkgd2luIDAN CjAyOjU2OjA4LjcxOTg4OCBJUCAxMC4xLjEuMTUuMzA0MyA+IDEwLjEuMS42 LjIyOiBTIDMyNzY4OjMyNzY4KDApIHdpbiAwDQowMjo1NjowOC43MTk5MDIg SVAgMTAuMS4xLjE1LjMwNDMgPiAxMC4xLjEuNi4yMjogUyA0OTE1Mjo0OTE1 MigwKSB3aW4gMA0KMDI6NTY6MDguNzE5OTE1IElQIDEwLjEuMS4xNS4zMDQz ID4gMTAuMS4xLjYuMjI6IFMgNjU1MzY6NjU1MzYoMCkgd2luIDANCjAyOjU2 OjA4LjcxOTkyOSBJUCAxMC4xLjEuMTUuMzA0MyA+IDEwLjEuMS42LjIyOiBT IDgxOTIwOjgxOTIwKDApIHdpbiAwDQowMjo1NjowOC43MTk5NDMgSVAgMTAu MS4xLjE1LjMwNDMgPiAxMC4xLjEuNi4yMjogUyA5ODMwNDo5ODMwNCgwKSB3 aW4gMA0KMDI6NTY6MDguNzE5OTU2IElQIDEwLjEuMS4xNS4zMDQzID4gMTAu MS4xLjYuMjI6IFMgMTE0Njg4OjExNDY4OCgwKSB3aW4gMA0KMDI6NTY6MDgu NzE5OTcwIElQIDEwLjEuMS4xNS4zMDQzID4gMTAuMS4xLjYuMjI6IFMgMTMx MDcyOjEzMTA3MigwKSB3aW4gMA0KMDI6NTY6MDguNzE5OTgzIElQIDEwLjEu MS4xNS4zMDQzID4gMTAuMS4xLjYuMjI6IFMgMTQ3NDU2OjE0NzQ1NigwKSB3 aW4gMA0KMDI6NTY6MDguNzIwMDAxIElQIDEwLjEuMS4xNS4zMDQzID4gMTAu MS4xLjYuMjI6IFMgMTYzODQwOjE2Mzg0MCgwKSB3aW4gMA0KMDI6NTY6MDgu NzIwMDg0IElQIDEwLjEuMS42LjIyID4gMTAuMS4xLjE1LjMwNDM6IC4gYWNr IDExNTMgd2luIDY1NTM1DQowMjo1NjowOC43MjAxNDIgSVAgMTAuMS4xLjYu MjIgPiAxMC4xLjEuMTUuMzA0MzogLiBhY2sgMTE1MyB3aW4gNjU1MzUNCjAy OjU2OjA4LjcyMDIwMCBJUCAxMC4xLjEuNi4yMiA+IDEwLjEuMS4xNS4zMDQz OiAuIGFjayAxMTUzIHdpbiA2NTUzNQ0KMDI6NTY6MDguNzIwMjU4IElQIDEw LjEuMS42LjIyID4gMTAuMS4xLjE1LjMwNDM6IC4gYWNrIDExNTMgd2luIDY1 NTM1DQowMjo1NjowOC43MjAzMTUgSVAgMTAuMS4xLjYuMjIgPiAxMC4xLjEu MTUuMzA0MzogLiBhY2sgMTE1MyB3aW4gNjU1MzUNCjAyOjU2OjA4LjcyMDM3 MyBJUCAxMC4xLjEuNi4yMiA+IDEwLjEuMS4xNS4zMDQzOiAuIGFjayAxMTUz IHdpbiA2NTUzNQ0KMDI6NTY6MDguNzIwNDMxIElQIDEwLjEuMS42LjIyID4g MTAuMS4xLjE1LjMwNDM6IC4gYWNrIDExNTMgd2luIDY1NTM1DQowMjo1Njow OC43MjA0ODggSVAgMTAuMS4xLjYuMjIgPiAxMC4xLjEuMTUuMzA0MzogLiBh Y2sgMTE1MyB3aW4gNjU1MzUNCjAyOjU2OjA4LjcyMDU0NiBJUCAxMC4xLjEu Ni4yMiA+IDEwLjEuMS4xNS4zMDQzOiAuIGFjayAxMTUzIHdpbiA2NTUzNQ0K MDI6NTY6MDguNzIwNjAzIElQIDEwLjEuMS42LjIyID4gMTAuMS4xLjE1LjMw NDM6IC4gYWNrIDExNTMgd2luIDY1NTM1DQowMjo1NjowOC43MjA2MjQgSVAg MTAuMS4xLjE1LjMwNDMgPiAxMC4xLjEuNi4yMjogUyAxODAyMjQ6MTgwMjI0 KDApIHdpbiAwDQowMjo1NjowOC43MjA2MzggSVAgMTAuMS4xLjE1LjMwNDMg PiAxMC4xLjEuNi4yMjogUyAxOTY2MDg6MTk2NjA4KDApIHdpbiAwDQowMjo1 NjowOC43MjA2NTIgSVAgMTAuMS4xLjE1LjMwNDMgPiAxMC4xLjEuNi4yMjog UyAyMTI5OTI6MjEyOTkyKDApIHdpbiAwDQowMjo1NjowOC43MjA2NjYgSVAg MTAuMS4xLjE1LjMwNDMgPiAxMC4xLjEuNi4yMjogUyAyMjkzNzY6MjI5Mzc2 KDApIHdpbiAwDQowMjo1NjowOC43MjA2ODAgSVAgMTAuMS4xLjE1LjMwNDMg PiAxMC4xLjEuNi4yMjogUyAyNDU3NjA6MjQ1NzYwKDApIHdpbiAwDQowMjo1 NjowOC43MjA2OTQgSVAgMTAuMS4xLjE1LjMwNDMgPiAxMC4xLjEuNi4yMjog UyAyNjIxNDQ6MjYyMTQ0KDApIHdpbiAwDQowMjo1NjowOC43MjA3MDggSVAg MTAuMS4xLjE1LjMwNDMgPiAxMC4xLjEuNi4yMjogUyAyNzg1Mjg6Mjc4NTI4 KDApIHdpbiAwDQowMjo1NjowOC43MjA3MjIgSVAgMTAuMS4xLjE1LjMwNDMg PiAxMC4xLjEuNi4yMjogUyAyOTQ5MTI6Mjk0OTEyKDApIHdpbiAwDQowMjo1 NjowOC43MjA3MzYgSVAgMTAuMS4xLjE1LjMwNDMgPiAxMC4xLjEuNi4yMjog UyAzMTEyOTY6MzExMjk2KDApIHdpbiAwDQowMjo1NjowOC43MjA3NTAgSVAg MTAuMS4xLjE1LjMwNDMgPiAxMC4xLjEuNi4yMjogUyAzMjc2ODA6MzI3Njgw KDApIHdpbiAwDQowMjo1NjowOC43MjA3NjMgSVAgMTAuMS4xLjE1LjMwNDMg PiAxMC4xLjEuNi4yMjogUyAzNDQwNjQ6MzQ0MDY0KDApIHdpbiAwDQowMjo1 NjowOC43MjA3OTYgSVAgMTAuMS4xLjE1LjMwNDMgPiAxMC4xLjEuNi4yMjog UyAzNjA0NDg6MzYwNDQ4KDApIHdpbiAwDQowMjo1NjowOC43MjA4NjYgSVAg MTAuMS4xLjYuMjIgPiAxMC4xLjEuMTUuMzA0MzogLiBhY2sgMTE1MyB3aW4g NjU1MzUNCjAyOjU2OjA4LjcyMDkyNCBJUCAxMC4xLjEuNi4yMiA+IDEwLjEu MS4xNS4zMDQzOiAuIGFjayAxMTUzIHdpbiA2NTUzNQ0KMDI6NTY6MDguNzIw OTgyIElQIDEwLjEuMS42LjIyID4gMTAuMS4xLjE1LjMwNDM6IC4gYWNrIDEx NTMgd2luIDY1NTM1DQowMjo1NjowOC43MjEwNDQgSVAgMTAuMS4xLjYuMjIg PiAxMC4xLjEuMTUuMzA0MzogLiBhY2sgMTE1MyB3aW4gNjU1MzUNCjAyOjU2 OjA4LjcyMTEwMSBJUCAxMC4xLjEuNi4yMiA+IDEwLjEuMS4xNS4zMDQzOiAu IGFjayAxMTUzIHdpbiA2NTUzNQ0K --0-835642382-1105262178=:2669--