Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 22 Jan 2013 13:53:05 +0100 (CET)
From:      Richard Kojedzinszky <krichy@cflinux.hu>
To:        VANHULLEBUS Yvan <vanhu@FreeBSD.org>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Tov?bb?t?s: [Ipsec-tools-users] freebsd & linux setup question
Message-ID:  <alpine.BSF.2.00.1301221332190.48971@pi.nmdps.net>
In-Reply-To: <20130122104420.GA3111@zeninc.net>
References:  <20130121165355.E2D61F41@hub.freebsd.org> <20130122104420.GA3111@zeninc.net>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
Dear Yvan,

I've recompiled racoon with NATT, but as you've said, only pure Internet 
is between A and B without NAT, and thus it did not solve my problem.

I've attached racoon's output from
# racoon -ddd -F
on the freebsd's side.

I can confirm, that setkey -D and -DP's output were full, so only the two 
entries existed for the SA's and policices.

I've tried a simple road-warrior setup, with transport mode, thus only 
traffic between A and B was protected, but that worked.
My server's racoon.conf is simple:
--
path certificate "/usr/local/etc/racoon/certs";

remote anonymous {
 	exchange_mode main,aggressive;
#	nat_traversal off;

 	certificate_type x509 "A.crt "A.key";
 	ca_type x509 "ca.crt";
 	my_identifier asn1dn;
 	peers_identifier asn1dn;
 	proposal_check strict ;

 	lifetime time 24 hour;

 	proposal {
 		encryption_algorithm aes256;
 		hash_algorithm sha1;
 		authentication_method rsasig;
 		dh_group 2;
 	}

 	generate_policy on ;
 	passive on ;

 	dpd_delay 60;
}

sainfo anonymous {
 	lifetime time 4 hour;

 	encryption_algorithm aes128 ;
 	authentication_algorithm hmac_md5 ;
 	compression_algorithm deflate;
}

log debug ;
--

And the client's is the same except the generate_policy and passive 
statements.

Thanks in advance,

Kojedzinszky Richard

On Tue, 22 Jan 2013, VANHULLEBUS Yvan wrote:

> Hi.
>
>
> On Mon, Jan 21, 2013 at 05:53:49PM +0100, krichy@cflinux.hu wrote:
>> Dear users,
>>
>> I've a working tunnel setup between two linux hosts.
>>
>> One end (A) has a fix address, while the other (B) has a dynamic one.
>> A is my server, B is my home router. Behind B, I've a private network.
>> What I've setup is that my private network reaches A through an IPSEC
>> tunnel.
> [....]
>> Now, I've decided to switc to freebsd on server side, and the same
>> configuration on the server simply does not work. It installs the
>> policies, and the tunnels, but it seems, that when a reply packet is
>> leaving the server, it tries to initiate a new tunnel. If I've "passive
>> on" on my server's remote section, then I've the following error:
>>
>> Jan 21 16:06:11 pi racoon: ERROR: no configuration found for B.
>> Jan 21 16:06:11 pi racoon: ERROR: failed to begin ipsec sa negotication.
>>
>> If I disable passive mode, then racoon tries to establish another tunnel,
>> but for some reason it does not succeed also. But I think, as in linux
>> it should work with passive on.
>>
>> FreeBSD is 9.1-RELEASE, the linux side is a linux 3.5.4.
>>
>> racoon on linux is:
>> # racoon -V
>> @(#)ipsec-tools 0.8.0 (http://ipsec-tools.sourceforge.net)
>>
>> Compiled with:
>> - OpenSSL 1.0.0e 6 Sep 2011 (http://www.openssl.org/)
>> - Dead Peer Detection
>> - IKE fragmentation
>> - NAT Traversal
>> - Monotonic clock
>>
>>
>> racoon on freebsd is:
>> # racoon -V
>> @(#)ipsec-tools 0.8.0 (http://ipsec-tools.sourceforge.net)
>>
>> Compiled with:
>> - OpenSSL 0.9.8x 10 May 2012 (http://www.openssl.org/)
>> - Dead Peer Detection
>> - IKE fragmentation
>> - Hybrid authentication
>> - Monotonic clock
>
> You have NAT-T compiled/enabled on Linux side, but not on FreeBSD side
> (probably because it is not activated as a kernel option).
> If you have "something that does NAT" on the wire between A and B, it
> is probably the origin of your problem.
>
> However, as it seems that there is only "Internet" between A and B,
> I'll suppose that the issue is somewhere else...
>
>
>> Unfortunately I've no idea.
>>
>> Before the first packet, on the server:
>> # setkey -D
>> No SAD entries.
>>
>> After an icmp packet sent from my private network to A:
>> # setkey -D
>> A B
>>  	esp mode=tunnel spi=76859998(0x0494ca5e) reqid=0(0x00000000)
>>  	E: rijndael-cbc  1c80b80d b006e3a3 772c2a9b 5c475213
>>  	A: hmac-md5  d43ff29c 034c896a fb2e7d1c 95f73ff5
>>  	seq=0x00000000 replay=4 flags=0x00000000 state=mature
>>  	created: Jan 21 17:03:39 2013	current: Jan 21 17:05:54 2013
>>  	diff: 135(s)	hard: 14400(s)	soft: 11520(s)
>>  	last:                     	hard: 0(s)	soft: 0(s)
>>  	current: 0(bytes)	hard: 0(bytes)	soft: 0(bytes)
>>  	allocated: 0	hard: 0	soft: 0
>>  	sadb_seq=1 pid=93091 refcnt=1
>> B A
>>  	esp mode=tunnel spi=144790000(0x08a151f0) reqid=0(0x00000000)
>>  	E: rijndael-cbc  8bd59c29 9800d10f 8f9d7e84 a720aa9c
>>  	A: hmac-md5  188070e2 a3220772 78efcb06 3457db62
>>  	seq=0x00000037 replay=4 flags=0x00000000 state=mature
>>  	created: Jan 21 17:03:39 2013	current: Jan 21 17:05:54 2013
>>  	diff: 135(s)	hard: 14400(s)	soft: 11520(s)
>>  	last: Jan 21 17:04:50 2013	hard: 0(s)	soft: 0(s)
>>  	current: 5720(bytes)	hard: 0(bytes)	soft: 0(bytes)
>>  	allocated: 55	hard: 0	soft: 0
>>  	sadb_seq=0 pid=93091 refcnt=1
>> # setkey -DP
>> 10.0.0.0/24[any] A[any] any
>>  	in ipsec
>>  	esp/tunnel/B-A/require
>>  	created: Jan 21 17:03:39 2013  lastused: Jan 21 17:03:39 2013
>>  	lifetime: 14400(s) validtime: 0(s)
>>  	spid=25 seq=1 pid=5232
>>  	refcnt=1
>> A[any] 10.0.0.0/24[any] any
>>  	out ipsec
>>  	esp/tunnel/A-B/require
>>  	created: Jan 21 17:03:39 2013  lastused: Jan 21 17:04:50 2013
>>  	lifetime: 14400(s) validtime: 0(s)
>>  	spid=26 seq=0 pid=5232
>>  	refcnt=1
>>
>> Everything seems fine, as well it is in linux, howewer, the attached log
>> shows that the kernel or racoon does not try to use the new tunnel,
>> instead it wants another one.
>
> Looks good.....
>
> Could you run racoon (on server's side) in debug mode (-dd) and send
> the few lines that talk about trying to negociate a new tunnel ?
> (Be careful, such racoon's debug contains sensitive informations)
>
> What I'd like to have is the profil of the tunnel that kernel asks for
> negociation.
>
> Also, can you confirm that your setkey -DP output is the whole full
> output ?
Yes, it was the full.
>
>
>> Is it a bug in freebsd, or a feature in linux? Do somebody have experience
>> with such a setup?
>
> Afaik, none of them, I use such setup and it works....
> The only difference in my configuration is that I have a network
> behind both peers, but it should also work in your case.
>
>
> Yvan.
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
>
[-- Attachment #2 --]
7zXZִF!t/VQK]#FgQА]J-qjFf`$Pcip~&jV8'mJPqV3Rů./Uo
_Hi7v,c*<h"f|»^_vy:y4M(h%nR崅H\b1k(]I#3=p$Sz)YO<H@K9[yq]GQcdP9;]m<[]nw+݂V6R/J?5=ذ"!/0ާٜNMsAQ\Y@ʉw?f2oYB~L3\z&PJ-M{OǠQRG
ɚWZ*u>""lNޞٴS]_S

7~{~	G3Nf1TT$,{MiFv>4dz\`c͉++6
u"FS|98ӌd%2G>kEĐj;=Z>N,=(F3ӂkiд¯FTו5
>#dBQ{?WC2iSZs<PF-q!,tj\x9ɰhtKܹޑMUW0w5zo7ՍK
ӛv
ji(ѡ2e~\Ċ݅IdY[4Mh{A?c:0Gl7*odps(i|3`dKD	2iA4UgYg(͟A9	\E[c7Ow{aRk?yb'fm;	psV\	+NfaDQ囷"Y`-1FEH㓐'ᡈӝ‹ebM}ЁR^e0mShn
,+@:bZHeĈ(‹^V$_ !)f#sl<n|Yh<v>R4b&zHksZMU.3!D[:h+E(}fhRB>X-<qAllIֲ]WE{Nw!]>(
K#-BA7bu$H7o%2!:]W>HF:@YoKz?K{)hf|siRw=yѺWM}#r	[fs2Fz"Y0d@NJ$8&
1;]++vN5a7"NW6n|JI;Xb80
Aak#jv-r>vԙ44/?]6b3
Sw)J.Gk_]bCQzANE#Qyzr~S.T皰*a(O
 aiKIw]‡po'5A!hEČ)|Ff%{n	u70GQ>H*"n	@xyLL^jnIG!b_k5.,( \wZRydoY)*\Gּe/Vd$Sͻ5}F)Ͳ>:nB;1;<c}c&PKK,+lʎAS\Xd,2a*zsL<p^I.r)(fƝխϬw{O.|iE^3{ǁf¤H_R;Id(u=˲9}[Eʑ4ӹZ4FKfX9hyFV
@1B~'"n"O~LuwcQ0E-Ng׹:hju4Cx1,rh3UChovM9-f '&#Y-vKcԷ68A9"nunMuO&HM%%:#4?pǰ!.5!S&s&k*w7S

v0_ba
CaOG~IElL. Wϓ%~
G3ӡk9hR/㲵ڒb>-N?*#40gڴc|LJ.?sQT.oދUtHG=7]7Qi%^	kXb AaQCVr1WD
a2ݖӈ6<l!1g

mzK^.^I\х~4ꈭt0nk7cߜ%HLM~M{׌,Uw9H]M<7]k:1?Gfy#	~(p%ψ*YU>Io@X>TN㮡W_qiQx@ާ$2Oa
.CՊ/ϓ:MyOvz_Nh5g,e!iԆqڱ<fd	Ik2IuQe7nU+瘬^?i2KlJJ?BΡC\.֑?Xp4vaNJfǁW*KN.m.+U왲#zz_HU%GB)nݫ.~ٯUHO<SJ}6gk{z޸ yh,|qRKM1eg"^d)/p+U\]Ii (+Y+JQ[uOUOܴ'}rGǜ6awҐxgʫЎ|w1qoi	2:GDtX fB ZAZs88*TS~-jN{Ψ/jX+?/@P׺896#̜Zh+%s,S"/v{׋/ᐏ}-Bn+$D
bHa.+ٙV.\1/ɽf%I0t~;;f75 `1
 QFyG,Ϻvgl@ZxliQt*Pcy7U™/z7V6.Ufn'E#sH%zLF;Gp{=uMT32u;#cFȗLFCbNs.4z+=5e'PtÐz	BlR.u.@{9*h.g?Ow,?3rNuzyMq7=6=G2 Jf<7t[ Y)0qzroMy5
M#[ t9VOdٽ$K{Zұ}d<|^8C1]"@k=DfWҲf$G<r%du<i^`'ƍsq^p$iԫ}Ԯ4E	:^ea-X5԰lmw}+L͖-G/nΎ5Fmp>,:kJ7E?
 ThIedΕjgwϳiÑt7NyYcP8t)f4C{VO7Z*ô
7?+-G|?ܫ0dEY;Uj&"7z-CӆoM3^v
A.CdAG(ɋ:Hlzlx+_K;Gݰr
(c=U.n
?PVvBdX46NQFtV#9+ir!lhm.%!qFG9mc[
wFzbrGz*k(l%oںKclks}*RmY.9Y+XliZV<*>Yؾ"VݾN,:<naKȎAUVpWT
ih!D'05y%.]ZF`I7*H<FNdٶ$fC-֢$K|X0,6$1r
P|.('Z'n{iNB0XsAl Kě[rN0{-w{dEdϖM?)klto~Yc*0 ?sHZ},? z-z@є&CKFZT6VTg4H¨Lq	bW7G
(]iMhPAY[\x])PVԭ-=jF7me11Z@JmgP}8'c֧Rs1o<z@S>6|RuLa@*si>d{Ž@aN&fݰ벡|p }+$~5k_Gb%S
Nta+)͹PkYm*;&t:.j-eS:cGb>ҫgMNEe*jR0`R}E
VS,@Rj$"{߈oKWgœS˛
<E)ߡJq)>aR='AcEQ6yfF+ziOBg"tW'[_3QBB6z˜ָYg"^]XTh炔&yO0
Zm>C/(^
sSJƐk?_J<տ	``KʇGfNtS^
;MSjf21 a*3aSzc2D8-%&le#l4AŹ`
oTg+~
F/ژڭt0'8΂\rGIjlMYF'/Pi~m;VtG186`:IJ}H=Zd0{!~
׿W3ϿȯjmreuS,YyZcTv
%t_;.~QmRе;^U:"]Vg',Y=YROYMѽ2~rԴ^p|P.ZGOtJ8WAsx;`¥9=CӼFW@u;h \R!ԉsQC>d4!cK_'F2P/KEf]y'1jKzh==3se}Pb`Z)#'cm
Th2Y}ln9@?DpV72u
c[:,+|8ZV6ե9F{2vhۛO9
PXO6Pe-Bz,ըAD9uךZ{,w|N<5"䜁w	p{3eF"N(m_Ii*7ǣ*aܟ:<p8vZa.ӧplI{#8)ٰ|<Bѻ'k?n#d!ʀ= #qfIw?tᲜ4I"hU0aL^2brjH]bNd	2y톯x;_MQm~&߷tf$Oh!.];dr{iUkd77He}wN)Bj;gT`ƲL
(p:; N;a֥ 1L-U
;rAQ K}\^fnrսK={7|X>`xc. @7W"d.4\ȨݞKXV$N&\RI=~}lx_CuzFWdAP=^c@/EŅ	#[2b}/`/ڞ
@?T	0i:܉W,vyj<ʦ<|<H;iqcBKD$
<e&g-dɓ*7:M
d⯯,7Fq1lhTE2kXjVc&`&*:`o6	Lj.`o=K%ޚ`SBԋsk3	6["L)j+)`ϠQ@$(apsB31v@.E
tWmMW|kWOJ~nt($9g}Bɉ\+
v
_=ß-Gq=្"ܺԒC e4sP>*1'XX&b{AwM4!2:y2,wEt$Z= SVK0T%z_b*ǙԎh20U".NMyi)4>;ѣ
;%i.Y*mO"D+sə'YR*63ѐWr1ضg$_@2,᳙$4_YafĜf"ˍ4uQ,.at
tѕyah;n@0XoI% M_C/$\ #EV6e~G=I:e*^8ΉQo頹KNk?}:e$j0Ƥ"R}=K<ذ"&IwI
3^!Nir]vVf1v*2&YZԚ=iK8ێ0C=t]?~Fh..ʦ3J]f-1Q
Wa'})֘׋#-Kv`[t[OI-v};`ˡ܍HpON1!(p691ԳVGZ	aսۣlҾ-<Y]ǤwkݕbVDYy&S ݖ	OWKCp‚gUGHhgi(ad ƚkҢt{fl&9n(SfkZ63|gc(b,<[$K͈PsW6ڵNf2Qk.0M¢X]rHVJK1¼.>L+[A,rHA$tWjaG{8X٢nhyjJ+γWN-Vqڊ:	9x"$HR~#6ԃx)j271Z}:T+1>=qX5EB}Қ^6j'Y	n{|*h">smi&}ֹ%DM:d
zh0<{lxxL]%my[R0bPL=c"d9β$:PlM>zJz#ڋZU8+
j_ )IGV*uj-xif\E<7ۗ0Ν7E@$s6o蚽6gϴpitl`?o=#fGkgP$&W7Rfq`~^=X[$#+OxQdDꇳ&3"AVb-)!Ka
dV ]E^s#+b`=Ủ-n$>VljV	Fkد/8ؤ`4-PU'h(lv;ۋl)ؐژ- Lc)ѳ<5#Mp=M*b3ְ.=ءO	ZYٚCĬf\NuCҟ.kt1wEjbaS~s/ob},
i#ohDo<U.UDk4GY9el@,A˜V67	!VD<ͶF`FvL 
گFGjJJ ]Ds^jf>u-
m;3317i߮i@*
ż1r29w8;̚ѻ݌W D0q**ă>YɛAIi?[X$3d݉ \~iL7dnN"݇cY<~mB?5"L\~8LRwTp({.zh_o
Qz.5bxϠd|ܠ2 AA1^tn]GoTi%,\}[ׂ4ptLkDpkY(uB
Npڟlo:QFӐgKf1FKmg<`عRAd,˼(Ikyx/A
ʣw/$8`H#`e.B1n\v$}nM_5|z;A\=_ACǣ3;-͛8odȑ>$<Az}
'*,SX
|)%Lj
b!?V{楈7n_4J'z3V*YG8>R(/J&f]mZz”	XluQr ؝I>^vO!=Y
P	Ҽ"(20q󜎻'pd)SAQN=IHֹ&v$S(ƚj$熐
.vmPtVDsfAQA]u`i0d9'h!euZtb\Q3yU]=qyH"_py<Yt)̗ P?Lv=gUʙc4>-aiӀ$(H숅Kܭ1ncinCYʣLk-0x^և!kY[%-+֡G$J;"[4Wf4<q$cPN^9~[{
sG#
"J|`x!֒HFzXtb擏c1M+(gfZՐ8Um#/qk9v噠>]ȹ-GYN6`51OjbŠ	*L 88	AЊTK]#}*9s 3_;+(+lRH6S3HXNS)339t9΋lx5}"…zX-ڮ$e|$GxM330\'ȥ@"X/cCOIÚ5yi_E)lL*k)CFX?5)
[`kܚ,"IDϯ)}WLh@iz)F^k|ܜeޜ4IA`/og,D}zXK^SR$~UrQ^E,|
"y2('`џ
 ]&M;"<n>75O~ichlb
[w%y͆%}cz+2FS>Ucms>`=+}')e˯^B?^_()X1e]P2'\4=kDCWWˀǤԡ~GñiU	bcg"!+%PÐ˕(e Ecta8G Cz-n`O'Ů)#Af.2bSTs65
_0=6(p{=;a2Y-ʞF"dӇ97_5 !(3
qNTUn(QfuVXab8`0[7-Aū
@Pl'V9FS6,b[IA|02A	aٿ#}5,_0d'SiWqĮ0t7o
-5#]ULd`Wv'!&0|Y
2NV;ڃajhw.%n΀SwQ
_ZR`TNd\}o.Spn,Nn9ޝ}5EAGCH!HyTATj.^J̷tUJG<(n
凟mw,Yx!*MGַ1_يߓaWOF
C@BGX(uҧgCjP9P;w\EKVR,ƌSJHf)u:BP
\Ckg
`e({ Q1ߡ=o~򥋏]kvC-6B㒭1F/n)pJp^7|jDL"2wExuJsz9go$X9l8q2+۷#r9_N*ZyX*ޚ!93agfe	̝{Kȵ#sTMAb/C*/5
dnXo3!hoI؁Y^xJ7%u}kWR9^[PY^Jnj'Bs*pe[-y</PQE;6vd!C$..|y3s*n2$C
~}peqq51_7j͛>fmB)Wtg?y7Hd1ᓤ
*=Q)́/a9Ob7F}z:.D{	,癮%Nj
}1eXE"訷fv<P5)Zd$Fð0S0(v5Bv_8ù`:\T207G3n*xEzϥ+zVfNвdyk*~X4Fxى0rSPyqTT,
(ڳa[O1|C?iQՇ2L&k?,r:d).cA.W+ϔ"Ln&LlЙ8idYNZi)S$Ey[2.["ѦҪB:)M
Q+yCB
mauSRxR8kK#e@n~GM|Z5Ns&(Vjwd
xOa6Pa#d/lZAK\~8$[	AW5vo
/p˽٩9!]Q.qqy/AD#OƬ}9T%e
UՑMTFBJ{
:h`\F-XdFR}Q>S@|]~Gdɠ	f	AM1"0fd}(8k1nQaguZK<C3#^ lłEղǵkp+\ER.=k!FU[
7;DS:$'W#/킡VAEmlf{_Oî<{y[<P85
A+rTH'7xgT/X^yi7;'F\u:Y}xJ׆)Ӈ [.'0I~cۼ@¯\G?1*j4)mBbƪ_x4x͋lW?1'ws`lO#}FhצPy#JF(k	׫[uf3-L-31<:g-BnUG_(޵3%aƟѳQ4s?#:cYQ1bv 4)E=0WSFRi;$(EHΊMbNFe^"{HJ鍕R&J\CJ00/cJġYȽ3⑌pD	H<BzJ6kfiDe \;3LOK&V4{6:J[
AF_Nn
8_%֥.DvcvZ#ln=5V'C1nk%~`ZPqtm8+G3m#㸯	k߁Un@fԏk3n[y<5ގ
i7>G5=WkIiSO}Υ?'{wW}g#rh
<PQᡛt
/ARe!9,/yL@њ9']kRIDK[ls?&d>g%H&6 ސpcak:O<笗@Nᝦz>8Ơπp6.IZ]&reZZ?K,d(R74fi
0ɳm)>m{^I(]^ꂣg*]aM=֖;>
|C
cwO/}2Tο4
a4UEu
jdr㢮i
VVLHAL]+aPT =Ấӻt)YAʙZDW{3tJJG=5&z*fzQHq/c[̰X,nRTx/)2ĩBqN	)7Z	&7 6&c~Vi]?n0c&%[wu瑶A*g{S
l*|82<Kν5&srC{[a+\Ku)oyy6*roߴ! =+qjv+h)D`m
}|l~8,N	
|4&*_D~Eu-);Ėۭegbn֔BTn<	Md@; ~ٿnU)8懧o(b
[/B?g
׾;;}{@l&D.ގ+%g3`ǗeTJ2ٯpPx1EJHj}0%;B{NW?xJ#Z	7;f10>&
8JpQ0D>i([zZ*DbŸd-4YR!scP&i_P4Dw㩰\O!eSmS<фkJH%-Ķ "}dBwpklJDMo
~LVimo
d
h'8Aؙ*8NGicS@<.GM!65G~\bdcei:8yǁ7DhŊv*Z0[npf9Xa26i2&a2gXu0V?*pDeY!ܼbNìcKEV3O2^U
WL&b=[J:'9UϡgB%]3XMDفκ"XHqMJ:OOUɌqQlVc
X_+`LGQeYsvnnor7;}Ov%>ɪäM5n5#lЦۛ-)m>Gd_!c1&]VB|AccΡCoeoi,GWD}\xK-eTMhAƧ)WϠd_?J4_AIfB/6Gެ~<I:I䱐޼_{̫3>:qsؖZN<ir 
D]*{BE2󵓝"cdʫ`S/iݖL3=&LmIcHB~^dÓB{:2CHB<7*ִ2ݾeN8=~1@ocڇA,;c*LV;ٽrr:re-us-W86[q+Nuǿ64}LF+#HԡkN$oY]˽֌O83j7oT<nhRɱ9@K?@Mč+160zbZԥwc6C0_F8[1E#B1
,=oM.RE^`wN@H9K
YG_)cۆE]{4O$Ehޕp3vDIQnSES8YPکDŽ0HnR“q\W*&~"!e2bk-.7
>ÆI73.ƨhVh\iX
TCbqYf\^A/E`Ha1w4=!PugSΎTI[dC8B	᫡~*Nօn39/f4>%[)B|CvеF=L8v ~Kʍj]wVUC<`a^
kK?qŐCzj8ϦV$S1RaZyrr&&jy-)$ԝ/`.OZz(l
i;x)$$tϖn%M4ǚx`)Z3ů.0»`4YX%5&Q-8H`}U7n3IoQi	]}Y'/^AsȆF*ѩ
S}D}Pj$?4HJP<'2*lih'%v(f5ey)eMY/i?'Y)"t)bC#-t+c62N2
Sw]AIۊ~Ne,"2[[V\sޝpW0[w;!͖#HOJVSm.`k҉ɆO;w͡5eY6ϓ<Tj֊@
To^g.XMn;aȾԸc0#^?2 Cz&>QY)|].Ȃu
\jsE}NGD!p1~'{1ZKxר6&կ<)D01( 5?NLԼ'vu2ԕcbцHty>y~4j\Sz]87	TTR+O<*tvDnih 6JhNQyT7|qBƉKU?F4stN-q~$^Z6?Gaϑ*2)*O _4<VARq\M׎ՄV_w
'O"<9	PytΞ铞}9ŔsSvtBuh-]{;g?\J)?sh%B Υ SQ[(CO];ڡf.ݘmH ̛J1_narW"~cQ$!!„\!5Cv3F(2^-Es
]G+JyҘ>?gW]u.&y;f]2d-[iqRF:l"]F&kEht營Cc*U$SIB˒h;v!F{?xjٵKV!Hb,Nf7z	J=}ŬovЩ:	F=-v;k(ԢFl(T`Dz6Ru٤y-lH/.=
8T9olQd=<jȚi KGԴ699C_fx6a+?EAԿzE|̺S}:G؋P;z]2%BT,Ї{Z"<GMNT-V~B["E"Ac+5)Y_A׈
u#<Z,^UugϠ)[.=ԏi]$Ǭj.0yj bFNUC	4!^L?Jagq/s?xMLe43/=^m]R}?]-;%45/$`NnHJZvƥ?FXUn&
GTb~VA:[VCLY5"'[yEsnV
<w^T~G2H]W|7	Oeus{orQ_A@xUBrO@$K__?C{&:^ܿcj(mD6VzZ\;*Y߶\5|H仌0cY:0#YN|"yzl̍r3suF϶m}-u<Hv)ߪ&$^)K… %*԰ۄDBx\~(lWe}	%̷Ls:,tYlԍAG_UF =~W H/]gMmͩ;9OUrބtmbFxc>n`UDkOɰ곖?@3á܋agfTyA^4>u#'t+}S
aEQ6ơ؀MGp=Q=Y m,S9ƨI#P61L{IZbĦL4zoe>nY>.#*K#'Gb.DOPz2aaHv@9IWkl+\<"%qDw:m\9
oܽ8&EjڦeC=6 ec.Tâm	GTaukM*D$_OjW>Æ8,d2d=)dMi--A!H7^N8d,33e̐ӳBaKH8u/B7\Mn	Y:0'eUOQV HYuż6(تWB}֗C0kp6{:%E0a#VBڒNy9D6ij
'p89_x#/w
5HP۩27+sA8x~@3$HDD(&+vۗH^Glꐑ<V+(V[Ɔː~dwo4\#4xm p
șo
lЋFtVVCּx]-Ӓt!q;#L	Y4'gѵPi:ydϴ/
qtpN;DC%3Z\'Wđ\G)L0>f3}8K7p7LD/+gJ*YLP1ndAњÓB֯3Jۈ^;lr,8w~%"{miyB]jWuJ#af%ZޭÒf'™KRDE(4>_3j8 zrGoGBP8	7wTE-4x}Iыy"
|~bز$j=9D׿	+
LqpL^zRNM'NR"`cj4QZΉOL
+_c aICm`3L
}ɢG,m0AdP*caz#g$u-X`k9k<V">1j3	~^飒UkSNP#`{aK,97_l_5$>]J툔߸-hGn
-L
>hxeTQ)?֯Po?`Vwz5hT?֦_lܢp6FO ʪt(!cb\=,;ƨٌqy>[j3AŌ8mj]X/ULgZ"nWYEJՀ1F*A$6=\`ڜ6`\c[GePOi@ZC<hPH	>j
+<gVϙK<HFF/VJU<ZUyaf-Yup2y3Hza@YXQG7q-<_Tٷ~FZgt[	R7c"!@iS"]@s$c]I$Lg@Kz	{itBD|
З0r
aVz.zi(%F`Yܱ=ӱ(p
%^pZ}%8w^iTϩas_߱d4g]i%Duj/I8Pʐ]ưw>7Zu)^UiD,Bx#
H ڱZ-H29SQDLfG#03.+^pPXQ9WN!g=u[l&[jgX3q֓#M	Y@3yܦ/G>
҆vjGzJx4%K/7ΉkNC.!eY@3?t<!`,X5V}Zt-}mn(RW0Fë9}|&4zkZg9U|y|^}6
X"w9h.ET3zLVIE:ӧ[WM*N!]M~tJ~]|"중v=E>#Ҫ!xVXI>4"$vK#|sMdXE"$p+Sc_d}bLr=H}{ݝ*}jTo/9:`(^BWLo|-*36E!'gD6,xgc=R`v6ZvٽRA=ؚs.0.SD`d(nN&8{u!*~5	avk5*iwf!SKC|6<">mI,Dr@֊w֤'KP})-zI](KD?T_;  /^s>5Tvv/ײ=
o
b[8E~Yb/'1Q`<oW&e@Un)uItx6>#Z5{m+x;V</e16Vr{JꖡENYU.#K.)KxfA;9+;kzsqNk1Oظ0+H@
0
itHT#@]^sؘ;f;nsE`ccG-U7`Fjکe9pXEbvtZal҈{fx\Ro''`1-|ɞ\LJ'>K
E-,()hhQӇDH]Iiy߼\hV=dpqd9`gn"Aңj>zDA1;N8gAU @FD}@J/P"Lk\@+И
Δn]/K]i'p2e݃lD6Z(f;&[*FSB%QZ<Ag6̛A3X@)rUec Cb{N 'ISH㱾ON^Jr.ْ 3l\GwOn*6OT	i`->xo#DrO
ndZ0gGf70_/dJǁ,4Pk(\>LRb{,!f>2a8>!WuIF@<H	fVoK?IH@Bs[5G调JfSR砐EnR;rj@Nx.#0kz	аt]p`}AC.x4ܠib>P$1k-rz69qNRH/[,#g੣rшYlX7G6K#%̉dc!ݯ,<+˹WurC[aWm3w'k2:
dFr%
5%@Oqdɵ
1:/R|]RG}<Seqơ;RazƂ#*jE!TZA_9+̌!k G8XpީhǻK1J*H	>xJmR&/ޯGs]:y,7	,5oԭlke!;&6
a&}&끙FlsRu9^%IJRnm1AF>L`g1P٤_I=Zw1O^sZ!m`rɈD	'dˡFzo@Wo\	R
yq	$EX+$=>IyN\5U+4WE:ѻ|~)qm9ї)bT"ѓXq55\dpE:P1%hA| O[*<<&Ӌ]	)KSA^izT6-9:-T£?MgF{'I-߉k;PRu\A:OwARX&3d
$;<cQ9xWuGBB?-4+gr`9jAfRt%hsOSIyKCՊ?xvT8^xPBhgYZ

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1301221332190.48971>