From nobody Mon Sep 15 12:59:35 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cQQ9C5yhmz67KTS for ; Mon, 15 Sep 2025 12:59:43 +0000 (UTC) (envelope-from karl@denninger.net) Received: from colo1.denninger.net (colo1.denninger.net [104.236.120.189]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4cQQ9B3Bbyz3CVZ for ; Mon, 15 Sep 2025 12:59:42 +0000 (UTC) (envelope-from karl@denninger.net) Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=pass (policy=none) header.from=denninger.net; spf=pass (mx1.freebsd.org: domain of karl@denninger.net designates 104.236.120.189 as permitted sender) smtp.mailfrom=karl@denninger.net Received: from denninger.net (unknown [162.81.137.111]) by colo1.denninger.net (Postfix) with ESMTP id DE173B05B1 for ; Mon, 15 Sep 2025 08:58:30 -0400 (EDT) Received: by denninger.net (Postfix, from userid 58) id EF66C456ABE; Mon, 15 Sep 2025 08:59:35 -0400 (EDT) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on NewFS.denninger.net X-Spam-Level: X-Spam-Status: No, score=-4.9 required=3.0 tests=ALL_TRUSTED,BAYES_00, HTML_MESSAGE autolearn=no autolearn_force=no version=4.0.1 X-Spam-Report: * -3.0 ALL_TRUSTED Passed through trusted hosts only via SMTP * -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% * [score: 0.0000] * 0.0 HTML_MESSAGE BODY: HTML included in message Received: from [192.168.10.15] (D5.Denninger.Net [192.168.10.15]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by denninger.net (Postfix) with ESMTPSA id 8714D456BCA for ; Mon, 15 Sep 2025 08:59:35 -0400 (EDT) Message-ID: <092f8b7a-9b98-4e2a-b6c5-361b40549cce@denninger.net> Date: Mon, 15 Sep 2025 08:59:35 -0400 List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: IPv6 networking problems in 14.3 To: freebsd-net@freebsd.org References: <4C00D174-21FE-47C4-A30A-A382138571A5@keehole.org> <6fce77fb-9ba8-4c7b-bb9b-0e337d91f278@denninger.net> <1780EFAC-DA9C-4593-BE37-28E7FFCE4388@distal.com> <6e7a8fc6-12c8-4097-ad70-bcb1e4967ade@denninger.net> Content-Language: en-US From: Karl Denninger In-Reply-To: <6e7a8fc6-12c8-4097-ad70-bcb1e4967ade@denninger.net> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms020603070909040007020900" X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.84 / 15.00]; SIGNED_SMIME(-2.00)[]; NEURAL_HAM_LONG(-0.99)[-0.990]; NEURAL_HAM_MEDIUM(-0.99)[-0.987]; NEURAL_SPAM_SHORT(0.93)[0.934]; DMARC_POLICY_ALLOW(-0.50)[denninger.net,none]; R_SPF_ALLOW(-0.20)[+mx]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; MIME_BASE64_TEXT(0.10)[]; RCVD_TLS_LAST(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[]; ARC_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; FREEFALL_USER(0.00)[karl]; PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; MID_RHS_MATCH_FROM(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; TO_DN_NONE(0.00)[]; HAS_ATTACHMENT(0.00)[] X-Rspamd-Queue-Id: 4cQQ9B3Bbyz3CVZ This is a cryptographically signed message in MIME format. --------------ms020603070909040007020900 Content-Type: multipart/alternative; boundary="------------wsFs4jN7ljLk9wimzIDnnbp4" --------------wsFs4jN7ljLk9wimzIDnnbp4 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 SG1tbW1tLi4uLiBqdXN0IGNhbWUgaW4gdmlhIGdpdCBwdWxsOg0KDQpjb21taXQgZmZkOTU2 YTM5MThjZDVlNjRjODg1MGViNzcyNDc0MjhhMjlmNzIyMQ0KQXV0aG9yOiBNaWNoYWVsIFR1 ZXhlbiA8dHVleGVuQEZyZWVCU0Qub3JnPg0KRGF0ZTrCoCDCoFdlZCBTZXAgMTAgMTc6MTM6 MzUgMjAyNSArMDIwMA0KDQogwqAgwqAgZGhjbGllbnQ6IGltcHJvdmUgVURQIGNoZWNrc3Vt IGhhbmRsaW5nDQoNCiDCoCDCoCBXaGVuIHNlbmRpbmcgVURQIHBhY2tldHM6DQogwqAgwqAg KiBjb21wdXRlIHRoZSBjaGVja3N1bSBpbiB0aGUgY29ycmVjdCBvcmRlci4gVGhpcyBvbmx5 IGhhcyBhbiBpbXBhY3QNCiDCoCDCoCDCoCBpZiB0aGUgbGVuZ3RoIG9mIHRoZSBwYXlsb2Fk IGlzIG9kZC4NCiDCoCDCoCAqIGRvbid0IHNlbmQgcGFja2V0IHdpdGggYSBjaGVja3N1bSBv ZiB6ZXJvLCB1c2UgMHhmZmZmIGluc3RlYWQgYXMNCiDCoCDCoCDCoCByZXF1aXJlZC4NCiDC oCDCoCBXaGVuIHJlY2VpdmluZyBVRFAgcGFja2V0czoNCiDCoCDCoCAqIGRvbid0IGRvIGFu eSBjb21wdXRhdGlvbnMgd2hlbiB0aGUgY2hlY2tzdW0gaXMgemVyby4NCiDCoCDCoCAqIGNv bXB1dGUgdGhlIGNoZWNrc3VtIGluIHRoZSBjb3JyZWN0IG9yZGVyLiBUaGlzIG9ubHkgaGFz IGFuIGltcGFjdA0KIMKgIMKgIMKgIGlmIHRoZSBsZW5ndGggb2YgdGhlIHBheWxvYWQgaXMg b2RkLg0KIMKgIMKgICogd2hlbiBjb21wdXRpbmcgdGhlIGNoZWNrc3VtLCBzdG9yZSB0aGUg cHNldWRvIGhlYWRlciBjaGVja3N1bQ0KIMKgIMKgICogaWYgdGhlIGNoZWNrc3VtIGlzIGNv bXB1dGVkIGFzIHplcm8sIHVzZSAweGZmZmYgaW5zdGVhZC4NCiDCoCDCoCAqIGFsc28gYWNj ZXB0IHBhY2tldHMsIHdoZW4gdGhlIGNoZWNrc3VtIGluIHRoZSBwYWNrZXQgaXMgdGhlIHBz ZXVkbw0KIMKgIMKgIMKgIGhlYWRlciBjaGVja3N1bS4NCipUaGUgbGFzdCBwb2ludCBmaXhl cyBhIHByb2JsZW0gd2hlbiB0aGUgREhDUCBjbGllbnQgcnVucyBpbiBhIFZNLA0KIMKgIMKg IHRoZSBESENQIHNlcnZlciBydW5zIG9uIHRoZSBob3N0IHNlcnZpbmcgdGhlIFZNIF9hbmQg dGhlIG5ldHdvcmsNCiDCoCDCoCBpbnRlcmZhY2Ugc3VwcG9ydHMgdHJhbnNtaXQgY2hlY2tz dW0gb2ZmbG9hZGluZ18uIFNpbmNlIGRoY2xpZW50DQogwqAgwqAgZG9lc24ndCB1c2UgVURQ IHNvY2tldHMgYnV0IGJwZiBkZXZpY2VzIHRvIHJlYWQgdGhlIHBhY2tldHMsIHRoZQ0KIMKg IMKgIGNoZWNrc3VtIHdpbGwgYmUgaW5jb3JyZWN0IGFuZCBvbmx5IGNvbnRhaW4gdGhlIGNo ZWNrc3VtIG9mIHRoZQ0KIMKgIMKgIHBzZXVkbyBoZWFkZXIuKg0KDQpUaGlzIGNvdWxkIHBv dGVudGlhbGx5IGFwcGx5IHRvIG90aGVyIGJwZi11c2luZyB0aGluZ3MgLS0gd2hpY2ggaW5j bHVkZXMgDQpkaGNwY2QuwqAgQW5kIHlvdSBoYXZlIHRzby9scm8gdHVybmVkIG9uLg0KDQpJ dCBpcyBhIHBhdGNoIHRvIGRoY2xpZW50LCBub3QgZGhjcGNkIGJ1dCBkb2VzIHRoZSBzYW1l IGlzc3VlIA0KcG90ZW50aWFsbHkgYXBwbHk/DQoNCk9uIDkvMTQvMjAyNSAxMzowMCwgS2Fy bCBEZW5uaW5nZXIgd3JvdGU6DQo+IE9uIDkvMTQvMjAyNSAxMjozOCwgQ2hyaXMgUm9zcyB3 cm90ZToNCj4+PiBPbiBTZXAgMTQsIDIwMjUsIGF0IDEyOjI5LCBLYXJsIERlbm5pbmdlcjxr YXJsQGRlbm5pbmdlci5uZXQ+IHdyb3RlOg0KPj4+IFJvbGxpbmcgdGhpcyBhcm91bmQgaW4g bXkgaGVhZCBzb21lIG1vcmUuLi4uLiB3aGF0IGlzIHRoZSB1bmRlcmx5aW5nIGludGVyZmFj ZT8NCj4+PiBJIGFzayBiZWNhdXNlIEkgc2F3IHRoaXMgaGFwcGVuIHdpdGggInJlIiBkcml2 ZXIgaW50ZXJmYWNlcyAoYm90aCBJUHY0IGFuZCA2KSB3aGVyZSBpdCB3b3VsZCBub3QgZ2V0 IGFuIEFSUCBtYXAgYW5kIHRodXMgY291bGRuJ3Qgc2VlIGFueXRoaW5nIGF0IGFsbCBvbiB0 aGUgb3V0c2lkZSAtIHRoZXJlIHdlcmUgZW5vdWdoIG90aGVyIHNjcmV3YmFsbCB0aGluZ3Mg Z29pbmcgb24gd2l0aCB0aGUgInJlIiBkcml2ZXIgKHRpbWVvdXRzIGFuZCBzaW1pbGFyKSB0 aGF0IEkgdG9zc2VkIHRoYXQgYW5kIG5vdyBydW4gb24gaXggYW5kIGEgY291cGxlIG9mIFNG UCsgdHJhbnNjZWl2ZXJzIHdoaWNoIGhhcyBiZWVuIGVudGlyZWx5LXN0YWJsZSAoYWx0aG91 Z2ggaWdiIGFsc28gYXBwZWFycyB0byB3b3JrIGFzIEkndmUgZ290dGVuIG15IGhhbmRzIG9u IGEgYm94IHdpdGggYSBjb3VwbGUgb2YgdGhvc2UgYW5kIHRlc3RlZCB0aGF0IHRvby4pDQo+ PiBJbiBteSBjYXNlIGl04oCZcyBhbiBpeC4gIENvbm5lY3RlZCB0byBhIDFnYnBzIHN3aXRj aCBpbnRlcmZhY2UsIGJ1dCBhbiBpeCBpbnRlcmZhY2UuICBBbmQsIHRoZSBzYW1lIGhhcmR3 YXJlIHRoYXQgd2FzIGRvaW5nIHRoaXMgZmluZSBhIGZldyBtb250aHMgYWdvLg0KPj4NCj4+ IHZsYW4wOiBmbGFncz0xMDA4ODQzPFVQLEJST0FEQ0FTVCxSVU5OSU5HLFNJTVBMRVgsTVVM VElDQVNULExPV0VSX1VQPiBtZXRyaWMgMCBtdHUgMTUwMA0KPj4gICAgICAgICAgb3B0aW9u cz00NjAwNzAzPFJYQ1NVTSxUWENTVU0sVFNPNCxUU082LExSTyxSWENTVU1fSVBWNixUWENT VU1fSVBWNixNRVhUUEc+DQo+PiAgICAgICAgICBldGhlciBhNDo1MzowZTo3OTpiOTo4Mg0K Pj4gICAgICAgICAgaW5ldCBBLkIuQy5EIG5ldG1hc2sgMHhmZmZmZmYwMCBicm9hZGNhc3Qg QS5CLkMuMjU1DQo+PiAgICAgICAgICBpbmV0NiBmZTgwOjo2ZTg6ZTY3NTpmMzU5OjM0NjUl dmxhbjAgcHJlZml4bGVuIDY0IHNjb3BlaWQgMHg0DQo+PiAgICAgICAgICBncm91cHM6IHZs YW4NCj4+ICAgICAgICAgIHZsYW46IDYgdmxhbnByb3RvOiA4MDIuMXEgdmxhbnBjcDogMCBw YXJlbnQgaW50ZXJmYWNlOiBpeDANCj4+ICAgICAgICAgIG1lZGlhOiBFdGhlcm5ldCBhdXRv c2VsZWN0ICgxMDAwYmFzZVQgPGZ1bGwtZHVwbGV4PikNCj4+ICAgICAgICAgIHN0YXR1czog YWN0aXZlDQo+PiAgICAgICAgICBuZDYgb3B0aW9ucz0xPFBFUkZPUk1OVUQ+DQo+Pg0KPj4g aXgwOiBmbGFncz0xMDA4ODQzPFVQLEJST0FEQ0FTVCxSVU5OSU5HLFNJTVBMRVgsTVVMVElD QVNULExPV0VSX1VQPiBtZXRyaWMgMCBtdHUgMTUwMA0KPj4gCW9wdGlvbnM9NGU1M2ZiYjxS WENTVU0sVFhDU1VNLFZMQU5fTVRVLFZMQU5fSFdUQUdHSU5HLEpVTUJPX01UVSxWTEFOX0hX Q1NVTSxUU080LFRTTzYsTFJPLFdPTF9VQ0FTVCxXT0xfTUNBU1QsV09MX01BR0lDLFZMQU5f SFdGSUxURVIsVkxBTl9IV1RTTyxSWENTVU1fSVBWNixUWENTVU1fSVBWNixIV1NUQVRTLE1F WFRQRz4NCj4+ICAgICAgICAgIGV0aGVyIGE0OjUzOjBlOjc5OmI5OjgyDQo+PiAgICAgICAg ICBtZWRpYTogRXRoZXJuZXQgYXV0b3NlbGVjdCAoMTAwMGJhc2VUIDxmdWxsLWR1cGxleD4p DQo+PiAgICAgICAgICBzdGF0dXM6IGFjdGl2ZQ0KPj4gICAgICAgICAgbmQ2IG9wdGlvbnM9 Mjk8UEVSRk9STU5VRCxJRkRJU0FCTEVELEFVVE9fTElOS0xPQ0FMPg0KPj4NCj4gSWYgeW91 IGZpbmQgYW55dGhpbmcgYSBub3RlIGJhY2sgaGVyZSB3b3VsZCBiZSBncmVhdGx5IGV4Y2Vs bGVudC7CoCBJIA0KPiBkbyBub3RlIHRoYXQgcGVyIHRoZSB2YXJpb3VzIG5vdGVzIGZyb20g bG9uZyBhZ28gSSBoYXZlIGJvdGggdHNvIGFuZCANCj4gbHJvIHR1cm5lZCBvZmYgKGJ1dCBJ IHVzZSBpcGZ3LCB3aGljaCBpcyB3aGVyZSB0aGF0IGFwcGFyZW50bHkgY29tZXMgDQo+IGZy b20pIG9uIHRoZSBvdXRzaWRlIGludGVyZmFjZSAtLSBidXQgSSBkb3VidCB0aGF0IGlzIGlu dm9sdmVkIGFzIEkgDQo+IGRpZCB0cnkgd2l0aCBpdCBvbiBhbmQgaXQgZGlkbid0IGNoYW5n ZSBhbnl0aGluZy4NCj4NCj4NCj4gLS0gDQo+IEthcmwgRGVubmluZ2VyDQo+IGthcmxAZGVu bmluZ2VyLm5ldA0KPiAvVGhlIE1hcmtldCBUaWNrZXIvDQo+IC9bUy9NSU1FIGVuY3J5cHRl ZCBlbWFpbCBwcmVmZXJyZWRdLw0KLS0gDQpLYXJsIERlbm5pbmdlcg0Ka2FybEBkZW5uaW5n ZXIubmV0DQovVGhlIE1hcmtldCBUaWNrZXIvDQovW1MvTUlNRSBlbmNyeXB0ZWQgZW1haWwg cHJlZmVycmVkXS8NCg== --------------wsFs4jN7ljLk9wimzIDnnbp4 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Hmmmmm.... just came in via git pull:

commit ffd956a3918cd5e64c8850eb77247428a29f7221
Author: Michael Tuexen <tuexen@FreeBSD.org>
Date:=C2=A0 =C2=A0Wed Sep 10 17:13:35 2025 +0200

=C2=A0 =C2=A0 dhclient: improve UDP checksum handling

=C2=A0 =C2=A0 When sending UDP packets:
=C2=A0 =C2=A0 * compute the checksum in the correct order. This onl= y has an impact
=C2=A0 =C2=A0 =C2=A0 if the length of the payload is odd.
=C2=A0 =C2=A0 * don't send packet with a checksum of zero, use 0xff= ff instead as
=C2=A0 =C2=A0 =C2=A0 required.
=C2=A0 =C2=A0 When receiving UDP packets:
=C2=A0 =C2=A0 * don't do any computations when the checksum is zero= =2E
=C2=A0 =C2=A0 * compute the checksum in the correct order. This onl= y has an impact
=C2=A0 =C2=A0 =C2=A0 if the length of the payload is odd.
=C2=A0 =C2=A0 * when computing the checksum, store the pseudo heade= r checksum
=C2=A0 =C2=A0 * if the checksum is computed as zero, use 0xffff ins= tead.
=C2=A0 =C2=A0 * also accept packets, when the checksum in the packe= t is the pseudo
=C2=A0 =C2=A0 =C2=A0 header checksum.
=C2=A0 =C2=A0 The last point fixes a problem when the DHCP clien= t runs in a VM,
=C2=A0 =C2=A0 the DHCP server runs on the host serving the VM = and the network
=C2=A0 =C2=A0 interface supports transmit checksum offloading. Since dhclient
=C2=A0 =C2=A0 doesn't use UDP sockets but bpf devices to read the= packets, the
=C2=A0 =C2=A0 checksum will be incorrect and only contain the che= cksum of the
=C2=A0 =C2=A0 pseudo header.

This could potentially apply to other bpf-using things -- which includes dhcpcd.=C2=A0 And you have tso/lro turned on.

It is a patch to dhclient, not dhcpcd but does the same issue potentially apply?

On 9/14/2025 13:00, Karl Denninger wrote:
On 9/14/2025 12:38, Chris Ross wrote= : 
On Sep 14, 2025, at 12:2=
9, Karl Denninger <karl@denninger.net> wrote:
Rolling this around in my head some more..... what is the underlying inte=
rface?
I ask because I saw this happen with "re" driver interfaces (both IPv4 an=
d 6) where it would not get an ARP map and thus couldn't see anything at =
all on the outside - there were enough other screwball things going on wi=
th the "re" driver (timeouts and similar) that I tossed that and now run =
on ix and a couple of SFP+ transceivers which has been entirely-stable (a=
lthough igb also appears to work as I've gotten my hands on a box with a =
couple of those and tested that too.)

In my case it=E2=80=99s an=
 ix.  Connected to a 1gbps switch interface, but an ix interface.  And, t=
he same hardware that was doing this fine a few months ago.

vlan0: flags=3D1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP=
> metric 0 mtu 1500
        options=3D4600703<RXCSUM,TXCSUM,TSO4,TSO6,LRO,RXCSUM_IPV6,TXCS=
UM_IPV6,MEXTPG>
        ether a4:53:0e:79:b9:82
        inet A.B.C.D netmask 0xffffff00 broadcast A.B.C.255
        inet6 fe80::6e8:e675:f359:3465%vlan0 prefixlen 64 scopeid 0x4
        groups: vlan
        vlan: 6 vlanproto: 802.1q vlanpcp: 0 parent interface: ix0
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
        nd6 options=3D1<PERFORMNUD>

ix0: flags=3D1008843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,LOWER_UP&g=
t; metric 0 mtu 1500
	options=3D4e53fbb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLA=
N_HWCSUM,TSO4,TSO6,LRO,WOL_UCAST,WOL_MCAST,WOL_MAGIC,VLAN_HWFILTER,VLAN_H=
WTSO,RXCSUM_IPV6,TXCSUM_IPV6,HWSTATS,MEXTPG>
        ether a4:53:0e:79:b9:82
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
        nd6 options=3D29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>

If you find anything a note back here would be greatly excellent.=C2=A0 I do note that per the various notes from long a= go I have both tso and lro turned off (but I use ipfw, which is where that apparently comes from) on the outside interface -- but I doubt that is involved as I did try with it on and it didn't change anything.


--
Karl Denninger
karl@d= enninger.net
The Market Ticker
[S/MIME encrypted email preferred]
--
Karl Denninger
karl@denninger.net
The Market Ticker
[S/MIME encrypted email preferred]<= /div> --------------wsFs4jN7ljLk9wimzIDnnbp4-- --------------ms020603070909040007020900 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC C4owggWZMIIDgaADAgECAhRZU8dKdMneRI1Vq5kv0k54Q5rQuDANBgkqhkiG9w0BAQsFADB2 MQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRYwFAYDVQQKDA1EZW5uaW5nZXIu TmV0MRcwFQYDVQQDDA5EZW5uaW5nZXIgUm9vdDEiMCAGCSqGSIb3DQEJARYTYWRtaW5AZGVu bmluZ2VyLm5ldDAeFw0yNDA1MDkyMTA4MDNaFw00NDA1MDQyMTA4MDNaMF0xCzAJBgNVBAYT AlVTMRIwEAYDVQQIDAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNV BAMMGURlbm5pbmdlci5OZXQgU2lnbmluZyBJbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDbR0tSiuLG5HPfo+cWtdeYQ8jc8Bjfuo0GTcNRT0glHnH1apUtInIktUknEZDH ohahInN+mMBdKg54FCHOiYZrJbyxBIo9FwX7hRmOc+spxmSYWnOd2E/YcGInMK4ZpjPzldzB Yt1n3zygkhx2bssxTJS3x4nv1qAXfLSZd1VwqoQufifEoPyTtymkkvHLv86vLgqAqooM/cXc 4LSIQ5u2uM308n42r8RkKtp7X1v9fJW8oRZN2XnFZtiUPH44YY2rHqyN2Hea9Y3+TXbldXjo xhPHTA+JYVFq8KTmbQBqU7YcMhlIG0cSxPeFLMxnP6pqPcIVTAlK+a6YGRFppfjZAgMBAAGj ggE2MIIBMjAdBgNVHQ4EFgQUH+VuxXhBxaJAQrvDekwkH91hBi4wgbMGA1UdIwSBqzCBqIAU RFYC4p6L6KITnEvrpx2cyt+PcMmheqR4MHYxCzAJBgNVBAYTAlVTMRIwEAYDVQQIDAlUZW5u ZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5OZXQxFzAVBgNVBAMMDkRlbm5pbmdlciBSb290 MSIwIAYJKoZIhvcNAQkBFhNhZG1pbkBkZW5uaW5nZXIubmV0ghQZE7NBItWtQsCouuwU6jZ+ HPPwnjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vd3d3LmRlbm5pbmdlci5uZXQvcm9vdC1yZXZva2VkLmNybDANBgkqhkiG9w0B AQsFAAOCAgEAfFbhPc82AfhyUqONs7IccYD36w+OP4nQgwfC4IWf3y/aQAZ2Zk6IITzYqwf7 PFM0bJRT3zi7xyetolqHDhfMJvnOQWpITZiyM/FSKwIvuBsy/uJUqPuqui4XQMYoSbAA1qmI MW/z7VZZHwaRFoeWE40UirYcf0fNcooBZ72bmd+iBaVyjtZvky0Vgcz0eC6e6LR5kNb23yC6 TkyQIlGyQkK5/afXUYFzk49rOHVbVyxW3oXRfq8Ow6HCrpDGAS8p84S04MFwBVAUfbe4aXs3 bampaI2LzKgkVywyFP14LSvvdjCfLYfnLy1Z9hm2EHMqNHA2tCGdRhWp2d7aZC1MYFqng0ZS fjPJjqHrI1qPU0p6k9A1GxAtrQlL2v/IUzUnMZkiawFV3qlxMGZf/kTYTUOcJhx1KU4zSLHu 80qO7ldRpp5gHssCAGFbeTu2gp6LxfmaFhLPDBJ1VGfdPx9lUrU/9OcoHczcl5x2Rb8IUZyX 9elzP5WdAU8p5R/DLlOAq24VcabhFtYBCA2dOESLupSfWKNQuJCN/1gz7ysSc+mjnnPV77IO mpszJfkFFJEDNJlGIVKX1vwwygtC/9Ulox8frgbZlRAYAgDc/YbOBFxticVVre0Y3Ujx6Kzb tkgZRlgfdZWbT1W5smncqJxg5qAL8e/yTb3fCe2nJ0jhiP4wggXpMIIE0aADAgECAhMAmNFt CiCF3j+FwQLYtBTmGjzkMA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNVBAYTAlVTMRIwEAYDVQQI DAlUZW5uZXNzZWUxFjAUBgNVBAoMDURlbm5pbmdlci5uZXQxIjAgBgNVBAMMGURlbm5pbmdl ci5OZXQgU2lnbmluZyBJbnQwHhcNMjQwNTEwMTkyNjU5WhcNMjkwNTA5MTkyNjU5WjBXMQsw CQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2VlMRcwFQYDVQQKDA5LYXJsIERlbm5pbmdl cjEbMBkGA1UEAwwSa2FybEBkZW5uaW5nZXIubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAvh1UssVbSYctzobPjwBkbjv/w4WvQNepeRTwE6+sLnXvc41+X9pa5EclPL4Q l02Vu1m71mSqXGfK9HbWZoivbhefBHOoYb35MSc24PelhwcORbpneWoWc7giQ7QgFlvEe/yj fs8M0H9fgdzFS5m2lwBQbis8kioSjHB2yt/8I1GE4Mvt1Cur9kga6ML5FAQvo8TYN1stdhrE 13FEv/BWCF4FVT4H2Wa2ySW+R1jkKb74SC6Twg98bGCRTShD5bVylh0+0LXNhzaopIDcI/KK jm/j3mRjIlmqbGrSpvJsbjjhjhAYQKE1U8FB5TDU4OkFAibblhQit/KjgspPR2o/vOpVFPER uhZEV1oDGzUJtZlkREIcN2sYBi0p7Y4585ya+b7L10mEenPlyi3eSkGXEuiy/BR2DY6lShwW DPoQ5602TKmttCSwBdWGoLrQ4jEVEVNt4lku2wPbTHF3KpHJU0g7RbcWoUYn10SOxKathkir hF3v9U32+QhPELGwqRrH0sL9rWf0qalRtPDHUYl8TebZmYkFqNeSMlqHijl5f4SsQPSj7gx5 4F19Ntm9ZcvuWTmW8QQGWTKHeMuG+BYkVIUSPe6/ZQsbD/xDx7rkyGfNgWIa4W7Wm/B7kaNq H53tk3wFmNgZQOxMTPF0oTHfW0T2azU6JD0D1AlgoAnSAE0CAwEAAaOCAaYwggGiMDoGCCsG AQUFBwEBBC4wLDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AuZGVubmluZ2VyLm5ldDo3Nzc3 MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggr BgEFBQcDBDAzBglghkgBhvhCAQ0EJhYkT3BlblNTTCBHZW5lcmF0ZWQgQ2xpZW50IENlcnRp ZmljYXRlMB0GA1UdDgQWBBSxJZjVnlYLAT3uzvDYgc4742J6UTCBswYDVR0jBIGrMIGogBQf 5W7FeEHFokBCu8N6TCQf3WEGLqF6pHgwdjELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5l c3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLk5ldDEXMBUGA1UEAwwORGVubmluZ2VyIFJvb3Qx IjAgBgkqhkiG9w0BCQEWE2FkbWluQGRlbm5pbmdlci5uZXSCFFlTx0p0yd5EjVWrmS/STnhD mtC4MB0GA1UdEQQWMBSBEmthcmxAZGVubmluZ2VyLm5ldDANBgkqhkiG9w0BAQsFAAOCAQEA TrQ45/tBN3SiuqItFv/V+CF3h7Hxe0YLsL+A/P+q9ZhxIscaNjaclgQhPA+rUr+l8DGoXJ/w yAl1E0SSBK+9phIc/9xFOBg3rCy4ngubzP+lHS1t03nMCBSUNsu5qPzqLBPiKaPabUu3Gr9o koRezSszgM3/zNJfr8cMO93csCK/fBccsMx5q+3nxB5XeT7UciicjfEzUA4m2mQxBmGk9SSU 147Gy8UmdSq57Tw82KqUrQ1pJ6IOzVPLREpwlqGbHykSU3MwtPYPtfQeFVjvO/XcWvoFQjbV UyhzAqMMYFudxoVLlJQiAgU38OScTLDgKxCO41h7VOjb2mss0zHndzGCBZUwggWRAgEBMHQw XTELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2Vy Lm5ldDEiMCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC 2LQU5ho85DANBglghkgBZQMEAgMFAKCCAvIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc BgkqhkiG9w0BCQUxDxcNMjUwOTE1MTI1OTM1WjBPBgkqhkiG9w0BCQQxQgRAFSzYPXVfLEvX DGaAXt8glFeyt7PBaVzxADI8cXttHR2vPCU6ASsZ14ppfm56mJUPTbNFk2laTTyJfjzCqrjS DzCBgwYJKwYBBAGCNxAEMXYwdDBdMQswCQYDVQQGEwJVUzESMBAGA1UECAwJVGVubmVzc2Vl MRYwFAYDVQQKDA1EZW5uaW5nZXIubmV0MSIwIAYDVQQDDBlEZW5uaW5nZXIuTmV0IFNpZ25p bmcgSW50AhMAmNFtCiCF3j+FwQLYtBTmGjzkMIGFBgsqhkiG9w0BCRACCzF2oHQwXTELMAkG A1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTEWMBQGA1UECgwNRGVubmluZ2VyLm5ldDEi MCAGA1UEAwwZRGVubmluZ2VyLk5ldCBTaWduaW5nIEludAITAJjRbQoghd4/hcEC2LQU5ho8 5DCCAVcGCSqGSIb3DQEJDzGCAUgwggFEMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYI KoZIhvcNAwcwDQYIKoZIhvcNAwICAQUwDQYIKoZIhvcNAwICAQUwBwYFKw4DAgcwDQYIKoZI hvcNAwICAQUwBwYFKw4DAhowCwYJYIZIAWUDBAIBMAsGCWCGSAFlAwQCAjALBglghkgBZQME AgMwCwYJYIZIAWUDBAIEMAsGCWCGSAFlAwQCBzALBglghkgBZQMEAggwCwYJYIZIAWUDBAIJ MAsGCWCGSAFlAwQCCjALBgkqhkiG9w0BAQEwCwYJK4EFEIZIPwACMAgGBiuBBAELADAIBgYr gQQBCwEwCAYGK4EEAQsCMAgGBiuBBAELAzALBgkrgQUQhkg/AAMwCAYGK4EEAQ4AMAgGBiuB BAEOATAIBgYrgQQBDgIwCAYGK4EEAQ4DMA0GCSqGSIb3DQEBAQUABIICAGfemrs2jLbn0BAD 2gl3JmokvBC58klP+2AiSzjNROTApv+TaRL1++HuaMQFnRCvd2NnUJ8ELtsRZeOciA6wTTJj rjHQmisaluGenKRxYFi/32knM5R3KxMVdv0maEwnm7HPZmvTA0/l+nxFhx0GM8KZkkZ4HbkP CSrHryP7gvwQUmC8coDSo8Q2RFjcvihLghl64uH0+k/NYW93fHV1JhBUIycXWTRO8984bwOi sJeCbFFMp7lN1EXIk3A1g/GpViUrVWzaCeu+S3H8OK2VvXHMcJmONTdr79A/PMcqBtdBWkU/ nMesrOc8uzciRzBMkPGMsFasVmySFtbJqxlIPxlShqKZhchWSfLbuqhrrrtP6c07ODDpftvd VvV2h2d8933UexPCbJhXEnJa9hilk50DId3tixiAB8Qv7BRx9/yXn1eJTXd3DIfgAvsCSt5R HBrTM3e5Zz7xl5ftcqpnCAj7C/Qc+M9t+xIBg91bYeLqokFyVlHzY9cO1Wr91aIowjTlfPTj nYVIgw31Soc40+A5S8Hb3S78qz+WHBT/76Fu3mShHkgICJer/UujmbAeQwKJ8j6JEC7suAWe DplvQmR4S388sA85yMJQ1BkUnLE00fEgBw7dXhv6qgDRzQDKs5/WxpZrEYnfw4o6Cigccc9Q w7GtE2YANdThSfKtDN8QAAAAAAAA --------------ms020603070909040007020900--