From owner-freebsd-net@freebsd.org Tue Dec 10 10:42:16 2019 Return-Path: Delivered-To: freebsd-net@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 2034E1D5F67 for ; Tue, 10 Dec 2019 10:42:16 +0000 (UTC) (envelope-from Axel.Rau@Chaos1.DE) Received: from mailman.nyi.freebsd.org (mailman.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:13]) by mx1.freebsd.org (Postfix) with ESMTP id 47XGpb5xnpz4jZD for ; Tue, 10 Dec 2019 10:42:15 +0000 (UTC) (envelope-from Axel.Rau@Chaos1.DE) Received: by mailman.nyi.freebsd.org (Postfix) id CC0B41D5F66; Tue, 10 Dec 2019 10:42:15 +0000 (UTC) Delivered-To: net@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id CBC471D5F65 for ; Tue, 10 Dec 2019 10:42:15 +0000 (UTC) (envelope-from Axel.Rau@Chaos1.DE) Received: from mailout4.lrau.net (mailout4.lrau.net [91.216.35.73]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mailout4.lrau.net", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 47XGpZ6RpBz4jZ4 for ; Tue, 10 Dec 2019 10:42:11 +0000 (UTC) (envelope-from Axel.Rau@Chaos1.DE) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=chaos1.de; s=email1; h=To:Date:Message-Id:Subject:Mime-Version:Content-Type:From:Sender :Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=VMfzvSKNwRMuaWbSXGTJ8DqVtp1IwMf5crKeYBhxFMQ=; b=Py93nJQhe3f2hbctj/0HfLEFHZ bJZnEuPzszBGHubB3p0ZvnZwFawGNJHDyNHMzn4u2P9LkSq56W4JRK83R/niw+cCSV90pCb2PMgBv NnmNGR1Vv+pvz4N7TUwSs0ZYAb08/g4BrM3Eonazspr7R4CZsiIgh75phw/FeUVxb12hMqqWNgH1Y fBOd1jGPjV7IbFO+cgUh4eYtn3T84oQet6nqJAyM0ceV4xDXvO9K3iTdy9B5ujH0lSoymL6F/jwQZ mzAdzacij+XAsT+iNCKcASQ7XUh86751q9yBlpd1f30T//WwAQUVJfFRBk5IDVTUXV9PgVJiOZQOg hlFfXnQQ==; Received: from [91.216.35.74] (helo=imap.lrau.net) by mailout4.lrau.net with esmtp (Exim 4.92.3 (FreeBSD)) (envelope-from ) id 1iecwo-0004zj-Dq for net@FreeBSD.ORG; Tue, 10 Dec 2019 10:40:54 +0000 Received: from Axel.Rau@Chaos1.DE by imap.lrau.net (Archiveopteryx 3.2.0) with esmtpsa id 1575974453-98966-98962/8/503; Tue, 10 Dec 2019 10:40:53 +0000 From: Axel Rau Content-Type: multipart/signed; protocol="application/pgp-signature"; boundary="Apple-Mail=_C78C3F62-8533-477D-ABFF-F3C11AE915A8"; micalg=pgp-sha256 Mime-Version: 1.0 Subject: TCP 3-way-handshake fails Message-Id: <12A16AC0-651B-4CAC-814A-FD5A8FF68D2F@Chaos1.DE> Date: Tue, 10 Dec 2019 11:40:45 +0100 To: net@FreeBSD.ORG X-Mailer: Apple Mail (2.3445.104.11) X-Rspamd-Queue-Id: 47XGpZ6RpBz4jZ4 X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=chaos1.de header.s=email1 header.b=Py93nJQh; dmarc=none; spf=none (mx1.freebsd.org: domain of Axel.Rau@Chaos1.DE has no SPF policy when checking 91.216.35.73) smtp.mailfrom=Axel.Rau@Chaos1.DE X-Spamd-Result: default: False [-4.93 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_DKIM_ALLOW(-0.20)[chaos1.de:s=email1]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MV_CASE(0.50)[]; HAS_ATTACHMENT(0.00)[]; MIME_GOOD(-0.20)[multipart/signed,multipart/mixed,text/plain]; TO_DN_NONE(0.00)[]; RCVD_DKIM_ARC_DNSWL_MED(-0.50)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCVD_COUNT_THREE(0.00)[3]; DMARC_NA(0.00)[Chaos1.DE]; RCVD_IN_DNSWL_MED(-0.20)[73.35.216.91.list.dnswl.org : 127.0.3.2]; DKIM_TRACE(0.00)[chaos1.de:+]; R_SPF_NA(0.00)[]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:+,4:+,5:+,6:+,7:~]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:197071, ipnet:91.216.35.0/24, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; IP_SCORE(-0.33)[asn: 197071(-1.64), country: DE(-0.01)] X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Dec 2019 10:42:16 -0000 --Apple-Mail=_C78C3F62-8533-477D-ABFF-F3C11AE915A8 Content-Type: multipart/mixed; boundary="Apple-Mail=_F3EF256F-F9ED-4FF8-91AE-73BB57AEFC06" --Apple-Mail=_F3EF256F-F9ED-4FF8-91AE-73BB57AEFC06 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii Hi all I have a fancy behaviour on a FreeBSD 12.1 box, with some servers (e.g. rsyslogd, nginx) which happens with some clients, with others not (both are in the same sub- nets). Everything is dualstack. Disabling IPv6, stops the problem. The traffic is routed via 2 firewalls OpenBSD 6.6) and a VPN. I attach 2 textfiles (tcpdump) with an extracted flow: gw1, the OpenBSD side db3: the FreeBSD side I also include an example, where the problem does not happen: db3,ok.txt Which details needs to be collected to insulate the problem? Any help is very welcome, Axel --Apple-Mail=_F3EF256F-F9ED-4FF8-91AE-73BB57AEFC06 Content-Disposition: attachment; filename=gw1.32404.txt Content-Type: text/plain; x-unix-mode=0644; name="gw1.32404.txt" Content-Transfer-Encoding: quoted-printable 09:02:41.926033 1234:56:78:9a::72.32404 > abcd:2222:3333:4444::200.601: = S [tcp sum ok] 3144001835:3144001835(0) win 65535 [flowlabel 0xd6aca] (len 40, hlim 62) 09:02:41.926553 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [class 0x1] = [flowlabel 0x64353] (len 40, hlim 64) 09:02:42.941912 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [class 0x2] = [flowlabel 0x64353] (len 40, hlim 64) 09:02:44.931650 1234:56:78:9a::72.32404 > abcd:2222:3333:4444::200.601: = S [tcp sum ok] 3144001835:3144001835(0) win 65535 [flowlabel 0xd6aca] (len 40, hlim 62) 09:02:44.932179 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [class 0x1] = [flowlabel 0x64353] (len 40, hlim 64) 09:02:45.947682 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [flowlabel = 0x64353] (len 40, hlim 64) 09:02:48.156565 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [class 0x7] = [flowlabel 0x64353] (len 40, hlim 64) 09:02:48.163491 1234:56:78:9a::72.32404 > abcd:2222:3333:4444::200.601: = S [tcp sum ok] 3144001835:3144001835(0) win 65535 [flowlabel 0xd6aca] (len 40, hlim 62) 09:02:48.164015 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [class 0x2] = [flowlabel 0x64353] (len 40, hlim 64) 09:02:49.164007 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [flowlabel = 0x64353] (len 40, hlim 64) 09:02:51.369689 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [class 0x7] = [flowlabel 0x64353] (len 40, hlim 64) 09:02:51.370872 1234:56:78:9a::72.32404 > abcd:2222:3333:4444::200.601: = S [tcp sum ok] 3144001835:3144001835(0) win 65535 [flowlabel 0xd6aca] (len 40, hlim 62) 09:02:51.371023 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [class 0x2] = [flowlabel 0x64353] (len 40, hlim 64) 09:02:52.388482 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [class 0x5] = [flowlabel 0x64353] (len 40, hlim 64) 09:02:54.602691 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [class 0x5] = [flowlabel 0x64353] (len 40, hlim 64) 09:02:58.809898 abcd:2222:3333:4444::200.601 > 1234:56:78:9a::72.32404: = S [tcp sum ok] 3857072979:3857072979(0) ack 3144001836 win 65535 [flowlabel = 0x64353] (len 40, hlim 64) --Apple-Mail=_F3EF256F-F9ED-4FF8-91AE-73BB57AEFC06 Content-Disposition: attachment; filename=db3.32404.txt Content-Type: text/plain; x-unix-mode=0644; name="db3.32404.txt" Content-Transfer-Encoding: quoted-printable 09:02:41.925105 IP6 (flowlabel 0xd6aca, hlim 62, next-header TCP (6) = payload length: 40) 1234:56:78:9a::72.32404 > = abcd:2222:3333:4444::200.601: Flags [S], cksum 0x9599 (correct), seq = 3144001835, win 65535, options [mss 1440,nop,wscale 6,sackOK,TS val = 1921615380 ecr 0], length 0 09:02:41.925140 IP6 (class 0x01, flowlabel 0x64353, hlim 64, next-header = TCP (6) payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0x06da), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62022082 ecr 1921615380], length 0 09:02:42.940483 IP6 (class 0x02, flowlabel 0x64353, hlim 64, next-header = TCP (6) payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0x02e3), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62023097 ecr 1921615380], length 0 09:02:44.930730 IP6 (flowlabel 0xd6aca, hlim 62, next-header TCP (6) = payload length: 40) 1234:56:78:9a::72.32404 > = abcd:2222:3333:4444::200.601: Flags [S], cksum 0x89db (correct), seq = 3144001835, win 65535, options [mss 1440,nop,wscale 6,sackOK,TS val = 1921618386 ecr 0], length 0 09:02:44.930760 IP6 (class 0x01, flowlabel 0x64353, hlim 64, next-header = TCP (6) payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0xef5d), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62025088 ecr 1921618386], length 0 09:02:45.946251 IP6 (flowlabel 0x64353, hlim 64, next-header TCP (6) = payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0xeb66), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62026103 ecr 1921618386], length 0 09:02:48.155145 IP6 (class 0x07, flowlabel 0x64353, hlim 64, next-header = TCP (6) payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0xe2c5), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62028312 ecr 1921618386], length 0 09:02:48.162563 IP6 (flowlabel 0xd6aca, hlim 62, next-header TCP (6) = payload length: 40) 1234:56:78:9a::72.32404 > = abcd:2222:3333:4444::200.601: Flags [S], cksum 0x7d3b (correct), seq = 3144001835, win 65535, options [mss 1440,nop,wscale 6,sackOK,TS val = 1921621618 ecr 0], length 0 09:02:48.162594 IP6 (class 0x02, flowlabel 0x64353, hlim 64, next-header = TCP (6) payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0xd61d), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62028320 ecr 1921621618], length 0 09:02:49.162606 IP6 (flowlabel 0x64353, hlim 64, next-header TCP (6) = payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0xd235), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62029320 ecr 1921621618], length 0 09:02:51.368270 IP6 (class 0x07, flowlabel 0x64353, hlim 64, next-header = TCP (6) payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0xc998), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62031525 ecr 1921621618], length 0 09:02:51.369530 IP6 (flowlabel 0xd6aca, hlim 62, next-header TCP (6) = payload length: 40) 1234:56:78:9a::72.32404 > = abcd:2222:3333:4444::200.601: Flags [S], cksum 0x70b4 (correct), seq = 3144001835, win 65535, options [mss 1440,nop,wscale 6,sackOK,TS val = 1921624825 ecr 0], length 0 09:02:51.369562 IP6 (class 0x02, flowlabel 0x64353, hlim 64, next-header = TCP (6) payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0xbd0f), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62031527 ecr 1921624825], length 0 09:02:52.387064 IP6 (class 0x05, flowlabel 0x64353, hlim 64, next-header = TCP (6) payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0xb916), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62032544 ecr 1921624825], length 0 09:02:54.601270 IP6 (class 0x05, flowlabel 0x64353, hlim 64, next-header = TCP (6) payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0xb070), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62034758 ecr 1921624825], length 0 09:02:58.808473 IP6 (flowlabel 0x64353, hlim 64, next-header TCP (6) = payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::72.32404: Flags [S.], cksum 0xd48d (incorrect -> 0xa001), = seq 3857072979, ack 3144001836, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 62038965 ecr 1921624825], length 0 --Apple-Mail=_F3EF256F-F9ED-4FF8-91AE-73BB57AEFC06 Content-Disposition: attachment; filename=db3.ok.txt Content-Type: text/plain; x-unix-mode=0644; name="db3.ok.txt" Content-Transfer-Encoding: quoted-printable 10:30:32.636565 IP6 (flowlabel 0xfc3df, hlim 62, next-header TCP (6) = payload length: 40) 1234:56:78:9a::75.35075 > = abcd:2222:3333:4444::200.601: Flags [S], cksum 0x6a5b (correct), seq = 911110344, win 65535, options [mss 1440,nop,wscale 6,sackOK,TS val = 3197376592 ecr 0], length 0 10:30:32.636723 IP6 (flowlabel 0x828b9, hlim 64, next-header TCP (6) = payload length: 40) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::75.35075: Flags [S.], cksum 0xd490 (incorrect -> 0x8f16), = seq 267921593, ack 911110345, win 65535, options [mss 1440,nop,wscale = 6,sackOK,TS val 3070094212 ecr 3197376592], length 0 10:30:32.643382 IP6 (flowlabel 0xfc3df, hlim 62, next-header TCP (6) = payload length: 128) 1234:56:78:9a::75.35075 > = abcd:2222:3333:4444::200.601: Flags [.], cksum 0x754e (correct), seq = 1:97, ack 1, win 1035, options [nop,nop,TS val 3197376600 ecr = 3070094212], length 96 10:30:32.647735 IP6 (flowlabel 0x828b9, hlim 64, next-header TCP (6) = payload length: 134) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::75.35075: Flags [P.], cksum 0xd4ee (incorrect -> 0xc78b), = seq 1:103, ack 97, win 1035, options [nop,nop,TS val 3070094222 ecr = 3197376600], length 102 10:30:32.654236 IP6 (flowlabel 0xfc3df, hlim 62, next-header TCP (6) = payload length: 390) 1234:56:78:9a::75.35075 > = abcd:2222:3333:4444::200.601: Flags [P.], seq 97:455, ack 103, win 1035, = options [nop,nop,TS val 3197376611 ecr 3070094222], length 358 10:30:32.654377 IP6 (flowlabel 0x828b9, hlim 64, next-header TCP (6) = payload length: 47) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::75.35075: Flags [P.], cksum 0xd497 (incorrect -> 0xb0eb), = seq 103:118, ack 455, win 1035, options [nop,nop,TS val 3070094229 ecr = 3197376611], length 15 10:30:32.766567 IP6 (flowlabel 0xfc3df, hlim 62, next-header TCP (6) = payload length: 32) 1234:56:78:9a::75.35075 > = abcd:2222:3333:4444::200.601: Flags [.], cksum 0xb6f4 (correct), ack = 118, win 1034, options [nop,nop,TS val 3197376723 ecr 3070094229], = length 0 10:30:32.766603 IP6 (flowlabel 0x828b9, hlim 64, next-header TCP (6) = payload length: 47) abcd:2222:3333:4444::200.601 > = 1234:56:78:9a::75.35075: Flags [P.], cksum 0xd497 (incorrect -> 0xaefb), = seq 118:133, ack 455, win 1035, options [nop,nop,TS val 3070094342 ecr = 3197376723], length 15 10:30:32.878581 IP6 (flowlabel 0xfc3df, hlim 62, next-header TCP (6) = payload length: 32) 1234:56:78:9a::75.35075 > = abcd:2222:3333:4444::200.601: Flags [.], cksum 0xb604 (correct), ack = 133, win 1034, options [nop,nop,TS val 3197376835 ecr 3070094342], leng= --Apple-Mail=_F3EF256F-F9ED-4FF8-91AE-73BB57AEFC06 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 --- PGP-Key: CDE74120 =E2=98=80 computing @ chaos claudius --Apple-Mail=_F3EF256F-F9ED-4FF8-91AE-73BB57AEFC06-- --Apple-Mail=_C78C3F62-8533-477D-ABFF-F3C11AE915A8 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.2 Comment: GPGTools - http://gpgtools.org iQIzBAEBCAAdFiEEl5evOTfnjZdhkBzKaPxTRM3nQSAFAl3vdi0ACgkQaPxTRM3n QSAmZQ/+NSmjBPzU6y1N681k5rt3jgAo+lP+0CI+KpV9Pq18VsxCx30bT06t/vKn 7bRQzB2fxJltxZxlJKTyNYoHKIACN9+2EdQ4NWCwGv+glKYDCwyfWXDDyP4P9rXZ LNCYRjZKUU+IaUz647bzQpnhn1ZgMJLzlCDI5thBzvo2hSycPU9Xv6AMt+7quhW/ 3OTrq4KWMiS5O0R5gr6tbhb2sUlybxV2RZWmMlvJP89VCg7F9qNZS2xNhg+fPp7V dm8XZNkHtLMux9cH/fhKT8EwXF2LGaBmwqcHE+jkRlBMetkM/bZZMGox4PkbtwYl B8TLJOGi2I/uRSWUsxGK8hMWdHxdNAajR0LdAwYu0eLElYO3vp6ZTczdx9pXlO9I RQ6rrg5Q6yW4vrP6LLQ+dX3zbTD2mWZM7YHbZ4IoNzrEangkKDMUlDKEP2pmpzBN 3hHhWFqiW3EsdfLiQ9h4w6wWsTgGrwnkMFSmWtZc0oXULHSLtjGA5+XoJrSd+/we JX7Auh0aJCUnv+ysrQTOI0DNLl2oRZgYGmsp5TnGyvYc/sKetXvyQmG6x1I5zI0P bU75DxtXixhwbaxwMYpNsQzdlfFxlE7vPg4/Yxe3ZxZ2qarscQ77EmSxd6AscZYp NbNkrMTyLy9GtdEXvhoBtR1JN+e4A75GG6HKep7SXkpvswJQz/g= =/Ld3 -----END PGP SIGNATURE----- --Apple-Mail=_C78C3F62-8533-477D-ABFF-F3C11AE915A8--