diff options
217 files changed, 6273 insertions, 4471 deletions
diff --git a/contrib/bind9/CHANGES b/contrib/bind9/CHANGES index d9b6714..6d1ee31 100644 --- a/contrib/bind9/CHANGES +++ b/contrib/bind9/CHANGES @@ -1,15 +1,81 @@ - --- 9.8.3-P4 released --- + --- 9.8.4-P1 released --- + +3407. [security] Named could die on specific queries with dns64 enabled. + [Addressed in change #3388 for BIND 9.8.5 and 9.9.3.] + + --- 9.8.4 released --- 3383. [security] A certain combination of records in the RBT could cause named to hang while populating the additional section of a response. [RT #31090] - --- 9.8.3-P3 released --- +3373. [bug] win32: open raw files in binary mode. [RT #30944] 3364. [security] Named could die on specially crafted record. [RT #30416] - --- 9.8.3-P2 released --- + --- 9.8.4rc1 released --- + +3369. [bug] nsupdate terminated unexpectedly in interactive mode + if built with readline support. [RT #29550] + +3368. [bug] <dns/iptable.h> and <dns/zone.h> were not C++ safe. + +3367. [bug] dns_dnsseckey_create() result was not being checked. + [RT #30685] + +3366. [bug] Fixed Read-After-Write dependency violation for IA64 + atomic operations. [RT #25181] + +3365. [bug] Removed spurious newlines from log messages in + zone.c [RT #30675] + +3363. [bug] Need to allow "forward" and "fowarders" options + in static-stub zones; this had been overlooked. + [RT #30482] + +3362. [bug] Setting some option values to 0 in named.conf + could trigger an assertion failure on startup. + [RT #27730] + +3360. [bug] 'host -w' could die. [RT #18723] + +3359. [bug] An improperly-formed TSIG secret could cause a + memory leak. [RT #30607] + +3357. [port] Add support for libxml2-2.8.x [RT #30440] + +3356. [bug] Cap the TTL of signed RRsets when RRSIGs are + approaching their expiry, so they don't remain + in caches after expiry. [RT #26429] + + --- 9.8.4b1 released --- + +3354. [func] Improve OpenSSL error logging. [RT #29932] + +3353. [bug] Use a single task for task exclusive operations. + [RT #29872] + +3352. [bug] Ensure that learned server attributes timeout of the + adb cache. [RT #29856] + +3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report + caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX + memory debugging flags are set. [RT #30243] + +3350. [bug] Memory read overrun in isc___mem_reallocate if + ISC_MEM_DEBUGCTX memory debugging flag is set. + [RT #30240] + +3348. [bug] Prevent RRSIG data from being cached if a negative + record matching the covering type exists at a higher + trust level. Such data already can't be retrieved from + the cache since change 3218 -- this prevents it + being inserted into the cache as well. [RT #26809] + +3347. [bug] dnssec-settime: Issue a warning when writing a new + private key file would cause a change in the + permissions of the existing file. [RT #27724] 3346. [security] Bad-cache data could be used before it was initialized, causing an assert. [RT #30025] @@ -18,11 +84,47 @@ resulting in excessive cpu usage in some cases. [RT #29952] - --- 9.8.3-P1 released --- +3337. [bug] Change #3294 broke support for the multiple keys + in controls. [RT #29694] + +3335. [func] nslookup: return a nonzero exit code when unable + to get an answer. [RT #29492] + +3333. [bug] Setting resolver-query-timeout too low can cause + named to not recover if it loses connectivity. + [RT #29623] + +3332. [bug] Re-use cached DS rrsets if possible. [RT #29446] 3331. [security] dns_rdataslab_fromrdataset could produce bad rdataslabs. [RT #29644] - + +3330. [func] Fix missing signatures on NOERROR results despite + RPZ rewriting. Also + - add optional "recursive-only yes|no" to the + response-policy statement + - add optional "max-policy-ttl" to the response-policy + statement to limit the false data that + "recursive-only no" can introduce into + resolvers' caches + - add a RPZ performance test to bin/tests/system/rpz + when queryperf is available. + - the encoding of PASSTHRU action to "rpz-passthru". + (The old encoding is still accepted.) + [RT #26172] + + +3329. [bug] Handle RRSIG signer-name case consistently: We + generate RRSIG records with the signer-name in + lower case. We accept them with any case, but if + they fail to validate, we try again in lower case. + [RT #27451] + +3328. [bug] Fixed inconsistent data checking in dst_parse.c. + [RT #29401] + +3317. [func] Add ECDSA support (RFC 6605). [RT #21918] + --- 9.8.3 released --- 3318. [tuning] Reduce the amount of work performed while holding a diff --git a/contrib/bind9/Makefile.in b/contrib/bind9/Makefile.in index 2a00df4..05d9c43 100644 --- a/contrib/bind9/Makefile.in +++ b/contrib/bind9/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004-2009, 2011 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004-2009, 2011, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2002 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/README b/contrib/bind9/README index ee56344..f797639 100644 --- a/contrib/bind9/README +++ b/contrib/bind9/README @@ -51,6 +51,11 @@ BIND 9 For up-to-date release notes and errata, see http://www.isc.org/software/bind9/releasenotes +BIND 9.8.4 + + BIND 9.8.4 includes several bug fixes and patches security + flaws described in CVE-2012-1667, CVE-2012-3817 and CVE-2012-4244. + BIND 9.8.3 BIND 9.8.3 is a maintenance release. diff --git a/contrib/bind9/acconfig.h b/contrib/bind9/acconfig.h index 736d1bc..3d412d9 100644 --- a/contrib/bind9/acconfig.h +++ b/contrib/bind9/acconfig.h @@ -1,5 +1,5 @@ /* - * Copyright (C) 2004, 2005, 2007, 2008 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004, 2005, 2007, 2008, 2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1999-2003 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -138,6 +138,9 @@ int sigwait(const unsigned int *set, int *sig); /* Define if OpenSSL includes DSA support */ #undef HAVE_OPENSSL_DSA +/* Define if OpenSSL includes ECDSA support */ +#undef HAVE_OPENSSL_ECDSA + /* Define to the length type used by the socket API (socklen_t, size_t, int). */ #undef ISC_SOCKADDR_LEN_T diff --git a/contrib/bind9/bin/Makefile.in b/contrib/bind9/bin/Makefile.in index e480552..89b4673 100644 --- a/contrib/bind9/bin/Makefile.in +++ b/contrib/bind9/bin/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007, 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/bin/check/Makefile.in b/contrib/bind9/bin/check/Makefile.in index 403933b..c191605 100644 --- a/contrib/bind9/bin/check/Makefile.in +++ b/contrib/bind9/bin/check/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004-2007, 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004-2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000-2003 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/bin/check/check-tool.c b/contrib/bind9/bin/check/check-tool.c index 422d9b1..2bf16a6 100644 --- a/contrib/bind9/bin/check/check-tool.c +++ b/contrib/bind9/bin/check/check-tool.c @@ -639,6 +639,9 @@ dump_zone(const char *zonename, dns_zone_t *zone, const char *filename, { isc_result_t result; FILE *output = stdout; + const char *flags; + + flags = (fileformat == dns_masterformat_text) ? "w+" : "wb+"; if (debug) { if (filename != NULL && strcmp(filename, "-") != 0) @@ -649,7 +652,7 @@ dump_zone(const char *zonename, dns_zone_t *zone, const char *filename, } if (filename != NULL && strcmp(filename, "-") != 0) { - result = isc_stdio_open(filename, "w+", &output); + result = isc_stdio_open(filename, flags, &output); if (result != ISC_R_SUCCESS) { fprintf(stderr, "could not open output " diff --git a/contrib/bind9/bin/confgen/Makefile.in b/contrib/bind9/bin/confgen/Makefile.in index 64ddf76..8b3e5aa 100644 --- a/contrib/bind9/bin/confgen/Makefile.in +++ b/contrib/bind9/bin/confgen/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/bin/confgen/unix/Makefile.in b/contrib/bind9/bin/confgen/unix/Makefile.in index 924701e..2ab6d92 100644 --- a/contrib/bind9/bin/confgen/unix/Makefile.in +++ b/contrib/bind9/bin/confgen/unix/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/bin/dig/Makefile.in b/contrib/bind9/bin/dig/Makefile.in index 19dc61c..2a3bc5d 100644 --- a/contrib/bind9/bin/dig/Makefile.in +++ b/contrib/bind9/bin/dig/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2005, 2007, 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2005, 2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000-2002 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/bin/dig/nslookup.c b/contrib/bind9/bin/dig/nslookup.c index 48c390b..2ef8f84 100644 --- a/contrib/bind9/bin/dig/nslookup.c +++ b/contrib/bind9/bin/dig/nslookup.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 2000-2003 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -57,6 +57,7 @@ static isc_boolean_t in_use = ISC_FALSE; static char defclass[MXRD] = "IN"; static char deftype[MXRD] = "A"; static isc_event_t *global_event = NULL; +static int query_error = 1, print_error = 0; static char domainopt[DNS_NAME_MAXTEXT]; @@ -406,6 +407,9 @@ isc_result_t printmessage(dig_query_t *query, dns_message_t *msg, isc_boolean_t headers) { char servtext[ISC_SOCKADDR_FORMATSIZE]; + /* I've we've gotten this far, we've reached a server. */ + query_error = 0; + debug("printmessage()"); isc_sockaddr_format(&query->sockaddr, servtext, sizeof(servtext)); @@ -433,6 +437,9 @@ printmessage(dig_query_t *query, dns_message_t *msg, isc_boolean_t headers) { (msg->rcode != dns_rcode_nxdomain) ? nametext : query->lookup->textname, rcode_totext(msg->rcode)); debug("returning with rcode == 0"); + + /* the lookup failed */ + print_error |= 1; return (ISC_R_SUCCESS); } @@ -887,5 +894,5 @@ main(int argc, char **argv) { destroy_libs(); isc_app_finish(); - return (0); + return (query_error | print_error); } diff --git a/contrib/bind9/bin/dnssec/Makefile.in b/contrib/bind9/bin/dnssec/Makefile.in index 6bfd162..0bca141 100644 --- a/contrib/bind9/bin/dnssec/Makefile.in +++ b/contrib/bind9/bin/dnssec/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2005, 2007-2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2005, 2007-2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000-2002 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/bin/dnssec/dnssec-dsfromkey.8 b/contrib/bind9/bin/dnssec/dnssec-dsfromkey.8 index 437aa37..ae9bb54 100644 --- a/contrib/bind9/bin/dnssec/dnssec-dsfromkey.8 +++ b/contrib/bind9/bin/dnssec/dnssec-dsfromkey.8 @@ -1,4 +1,4 @@ -.\" Copyright (C) 2008-2010 Internet Systems Consortium, Inc. ("ISC") +.\" Copyright (C) 2008-2010, 2012 Internet Systems Consortium, Inc. ("ISC") .\" .\" Permission to use, copy, modify, and/or distribute this software for any .\" purpose with or without fee is hereby granted, provided that the above @@ -55,7 +55,7 @@ Use SHA\-256 as the digest algorithm. .RS 4 Select the digest algorithm. The value of \fBalgorithm\fR -must be one of SHA\-1 (SHA1), SHA\-256 (SHA256) or GOST. These values are case insensitive. +must be one of SHA\-1 (SHA1), SHA\-256 (SHA256), GOST or SHA\-384 (SHA384). These values are case insensitive. .RE .PP \-K \fIdirectory\fR @@ -139,5 +139,5 @@ RFC 4509. .PP Internet Systems Consortium .SH "COPYRIGHT" -Copyright \(co 2008\-2010 Internet Systems Consortium, Inc. ("ISC") +Copyright \(co 2008\-2010, 2012 Internet Systems Consortium, Inc. ("ISC") .br diff --git a/contrib/bind9/bin/dnssec/dnssec-dsfromkey.c b/contrib/bind9/bin/dnssec/dnssec-dsfromkey.c index c4b157c..93d789b 100644 --- a/contrib/bind9/bin/dnssec/dnssec-dsfromkey.c +++ b/contrib/bind9/bin/dnssec/dnssec-dsfromkey.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2008-2011 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC") * * Permission to use, copy, modify, and/or distribute this software for any * purpose with or without fee is hereby granted, provided that the above @@ -296,7 +296,7 @@ usage(void) { fprintf(stderr, " -K <directory>: directory in which to find " "key file or keyset file\n"); fprintf(stderr, " -a algorithm: digest algorithm " - "(SHA-1, SHA-256 or GOST)\n"); + "(SHA-1, SHA-256, GOST or SHA-384)\n"); fprintf(stderr, " -1: use SHA-1\n"); fprintf(stderr, " -2: use SHA-256\n"); fprintf(stderr, " -l: add lookaside zone and print DLV records\n"); @@ -415,6 +415,9 @@ main(int argc, char **argv) { else if (strcasecmp(algname, "GOST") == 0) dtype = DNS_DSDIGEST_GOST; #endif + else if (strcasecmp(algname, "SHA384") == 0 || + strcasecmp(algname, "SHA-384") == 0) + dtype = DNS_DSDIGEST_SHA384; else fatal("unknown algorithm %s", algname); } diff --git a/contrib/bind9/bin/dnssec/dnssec-dsfromkey.docbook b/contrib/bind9/bin/dnssec/dnssec-dsfromkey.docbook index d139ba5..d705033 100644 --- a/contrib/bind9/bin/dnssec/dnssec-dsfromkey.docbook +++ b/contrib/bind9/bin/dnssec/dnssec-dsfromkey.docbook @@ -2,7 +2,7 @@ "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [<!ENTITY mdash "—">]> <!-- - - Copyright (C) 2008-2010 Internet Systems Consortium, Inc. ("ISC") + - Copyright (C) 2008-2010, 2012 Internet Systems Consortium, Inc. ("ISC") - - Permission to use, copy, modify, and/or distribute this software for any - purpose with or without fee is hereby granted, provided that the above @@ -39,6 +39,7 @@ <year>2008</year> <year>2009</year> <year>2010</year> + <year>2012</year> <holder>Internet Systems Consortium, Inc. ("ISC")</holder> </copyright> </docinfo> @@ -107,7 +108,8 @@ <para> Select the digest algorithm. The value of <option>algorithm</option> must be one of SHA-1 (SHA1), - SHA-256 (SHA256) or GOST. These values are case insensitive. + SHA-256 (SHA256), GOST or SHA-384 (SHA384). + These values are case insensitive. </para> </listitem> </varlistentry> diff --git a/contrib/bind9/bin/dnssec/dnssec-dsfromkey.html b/contrib/bind9/bin/dnssec/dnssec-dsfromkey.html index 3031c39..24bc0c1 100644 --- a/contrib/bind9/bin/dnssec/dnssec-dsfromkey.html +++ b/contrib/bind9/bin/dnssec/dnssec-dsfromkey.html @@ -1,5 +1,5 @@ <!-- - - Copyright (C) 2008-2010 Internet Systems Consortium, Inc. ("ISC") + - Copyright (C) 2008-2010, 2012 Internet Systems Consortium, Inc. ("ISC") - - Permission to use, copy, modify, and/or distribute this software for any - purpose with or without fee is hereby granted, provided that the above @@ -32,14 +32,14 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> {-s} [<code class="option">-1</code>] [<code class="option">-2</code>] [<code class="option">-a <em class="replaceable"><code>alg</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-s</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-A</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] {dnsname}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2543465"></a><h2>DESCRIPTION</h2> +<a name="id2543468"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-dsfromkey</strong></span> outputs the Delegation Signer (DS) resource record (RR), as defined in RFC 3658 and RFC 4509, for the given key(s). </p> </div> <div class="refsect1" lang="en"> -<a name="id2543477"></a><h2>OPTIONS</h2> +<a name="id2543480"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-1</span></dt> <dd><p> @@ -54,7 +54,8 @@ <dd><p> Select the digest algorithm. The value of <code class="option">algorithm</code> must be one of SHA-1 (SHA1), - SHA-256 (SHA256) or GOST. These values are case insensitive. + SHA-256 (SHA256), GOST or SHA-384 (SHA384). + These values are case insensitive. </p></dd> <dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt> <dd><p> @@ -100,7 +101,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2543664"></a><h2>EXAMPLE</h2> +<a name="id2543667"></a><h2>EXAMPLE</h2> <p> To build the SHA-256 DS RR from the <strong class="userinput"><code>Kexample.com.+003+26160</code></strong> @@ -115,7 +116,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2543693"></a><h2>FILES</h2> +<a name="id2543697"></a><h2>FILES</h2> <p> The keyfile can be designed by the key identification <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name @@ -129,13 +130,13 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2543729"></a><h2>CAVEAT</h2> +<a name="id2543732"></a><h2>CAVEAT</h2> <p> A keyfile error can give a "file not found" even if the file exists. </p> </div> <div class="refsect1" lang="en"> -<a name="id2543738"></a><h2>SEE ALSO</h2> +<a name="id2543741"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>, @@ -145,7 +146,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2543778"></a><h2>AUTHOR</h2> +<a name="id2543781"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.8 b/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.8 index e3bb48f..9867ff7e 100644 --- a/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.8 +++ b/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.8 @@ -1,4 +1,4 @@ -.\" Copyright (C) 2008-2011 Internet Systems Consortium, Inc. ("ISC") +.\" Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC") .\" .\" Permission to use, copy, modify, and/or distribute this software for any .\" purpose with or without fee is hereby granted, provided that the above @@ -47,7 +47,7 @@ of the key is specified on the command line. This must match the name of the zon .RS 4 Selects the cryptographic algorithm. The value of \fBalgorithm\fR -must be one of RSAMD5, RSASHA1, DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512 or ECCGOST. These values are case insensitive. +must be one of RSAMD5, RSASHA1, DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST, ECDSAP256SHA256 or ECDSAP384SHA384. These values are case insensitive. .sp If no algorithm is specified, then RSASHA1 will be used by default, unless the \fB\-3\fR @@ -215,5 +215,5 @@ RFC 4034. .PP Internet Systems Consortium .SH "COPYRIGHT" -Copyright \(co 2008\-2011 Internet Systems Consortium, Inc. ("ISC") +Copyright \(co 2008\-2012 Internet Systems Consortium, Inc. ("ISC") .br diff --git a/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.c b/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.c index 6a07146..e91e02d 100644 --- a/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.c +++ b/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2007-2011 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2007-2012 Internet Systems Consortium, Inc. ("ISC") * * Permission to use, copy, modify, and/or distribute this software for any * purpose with or without fee is hereby granted, provided that the above @@ -55,7 +55,8 @@ int verbose; static const char *algs = "RSA | RSAMD5 | DH | DSA | RSASHA1 |" " NSEC3DSA | NSEC3RSASHA1 |" - " RSASHA256 | RSASHA512 | ECCGOST"; + " RSASHA256 | RSASHA512 | ECCGOST |" + " ECDSAP256SHA256 | ECDSAP384SHA384"; ISC_PLATFORM_NORETURN_PRE static void usage(void) ISC_PLATFORM_NORETURN_POST; @@ -369,7 +370,8 @@ main(int argc, char **argv) { if (use_nsec3 && alg != DST_ALG_NSEC3DSA && alg != DST_ALG_NSEC3RSASHA1 && alg != DST_ALG_RSASHA256 && alg != DST_ALG_RSASHA512 && - alg != DST_ALG_ECCGOST) { + alg != DST_ALG_ECCGOST && + alg != DST_ALG_ECDSA256 && alg != DST_ALG_ECDSA384) { fatal("%s is incompatible with NSEC3; " "do not use the -3 option", algname); } diff --git a/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.docbook b/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.docbook index 5f3e0e6..4662e87 100644 --- a/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.docbook +++ b/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.docbook @@ -2,7 +2,7 @@ "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [<!ENTITY mdash "—">]> <!-- - - Copyright (C) 2008-2011 Internet Systems Consortium, Inc. ("ISC") + - Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC") - - Permission to use, copy, modify, and/or distribute this software for any - purpose with or without fee is hereby granted, provided that the above @@ -40,6 +40,7 @@ <year>2009</year> <year>2010</year> <year>2011</year> + <year>2012</year> <holder>Internet Systems Consortium, Inc. ("ISC")</holder> </copyright> </docinfo> @@ -94,7 +95,8 @@ <para> Selects the cryptographic algorithm. The value of <option>algorithm</option> must be one of RSAMD5, RSASHA1, - DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512 or ECCGOST. + DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST, + ECDSAP256SHA256 or ECDSAP384SHA384. These values are case insensitive. </para> <para> diff --git a/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.html b/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.html index f2c72c5..0fa3aff 100644 --- a/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.html +++ b/contrib/bind9/bin/dnssec/dnssec-keyfromlabel.html @@ -1,5 +1,5 @@ <!-- - - Copyright (C) 2008-2011 Internet Systems Consortium, Inc. ("ISC") + - Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC") - - Permission to use, copy, modify, and/or distribute this software for any - purpose with or without fee is hereby granted, provided that the above @@ -31,7 +31,7 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-keyfromlabel</code> {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-3</code>] [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-k</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-y</code>] {name}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2543495"></a><h2>DESCRIPTION</h2> +<a name="id2543498"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-keyfromlabel</strong></span> gets keys with the given label from a crypto hardware and builds key files for DNSSEC (Secure DNS), as defined in RFC 2535 @@ -44,14 +44,15 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2543513"></a><h2>OPTIONS</h2> +<a name="id2543516"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt> <dd> <p> Selects the cryptographic algorithm. The value of <code class="option">algorithm</code> must be one of RSAMD5, RSASHA1, - DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512 or ECCGOST. + DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST, + ECDSAP256SHA256 or ECDSAP384SHA384. These values are case insensitive. </p> <p> @@ -163,7 +164,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2543877"></a><h2>TIMING OPTIONS</h2> +<a name="id2543880"></a><h2>TIMING OPTIONS</h2> <p> Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '-', it is interpreted as @@ -210,7 +211,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2544043"></a><h2>GENERATED KEY FILES</h2> +<a name="id2544046"></a><h2>GENERATED KEY FILES</h2> <p> When <span><strong class="command">dnssec-keyfromlabel</strong></span> completes successfully, @@ -249,7 +250,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2544116"></a><h2>SEE ALSO</h2> +<a name="id2544119"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>, @@ -257,7 +258,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2544149"></a><h2>AUTHOR</h2> +<a name="id2544152"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/bin/dnssec/dnssec-keygen.8 b/contrib/bind9/bin/dnssec/dnssec-keygen.8 index 690abf9..689f23d 100644 --- a/contrib/bind9/bin/dnssec/dnssec-keygen.8 +++ b/contrib/bind9/bin/dnssec/dnssec-keygen.8 @@ -1,4 +1,4 @@ -.\" Copyright (C) 2004, 2005, 2007-2010 Internet Systems Consortium, Inc. ("ISC") +.\" Copyright (C) 2004, 2005, 2007-2010, 2012 Internet Systems Consortium, Inc. ("ISC") .\" Copyright (C) 2000-2003 Internet Software Consortium. .\" .\" Permission to use, copy, modify, and/or distribute this software for any @@ -48,7 +48,7 @@ of the key is specified on the command line. For DNSSEC keys, this must match th .RS 4 Selects the cryptographic algorithm. For DNSSEC keys, the value of \fBalgorithm\fR -must be one of RSAMD5, RSASHA1, DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512 or ECCGOST. For TSIG/TKEY, the value must be DH (Diffie Hellman), HMAC\-MD5, HMAC\-SHA1, HMAC\-SHA224, HMAC\-SHA256, HMAC\-SHA384, or HMAC\-SHA512. These values are case insensitive. +must be one of RSAMD5, RSASHA1, DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST, ECDSAP256SHA256 or ECDSAP384SHA384. For TSIG/TKEY, the value must be DH (Diffie Hellman), HMAC\-MD5, HMAC\-SHA1, HMAC\-SHA224, HMAC\-SHA256, HMAC\-SHA384, or HMAC\-SHA512. These values are case insensitive. .sp If no algorithm is specified, then RSASHA1 will be used by default, unless the \fB\-3\fR @@ -63,7 +63,7 @@ Note 2: DH, HMAC\-MD5, and HMAC\-SHA1 through HMAC\-SHA512 automatically set the .PP \-b \fIkeysize\fR .RS 4 -Specifies the number of bits in the key. The choice of key size depends on the algorithm used. RSA keys must be between 512 and 2048 bits. Diffie Hellman keys must be between 128 and 4096 bits. DSA keys must be between 512 and 1024 bits and an exact multiple of 64. HMAC keys must be between 1 and 512 bits. +Specifies the number of bits in the key. The choice of key size depends on the algorithm used. RSA keys must be between 512 and 2048 bits. Diffie Hellman keys must be between 128 and 4096 bits. DSA keys must be between 512 and 1024 bits and an exact multiple of 64. HMAC keys must be between 1 and 512 bits. Elliptic curve algorithms don't need this parameter. .sp The key size does not need to be specified if using a default algorithm. The default key size is 1024 bits for zone signing keys (ZSK's) and 2048 bits for key signing keys (KSK's, generated with \fB\-f KSK\fR). However, if an algorithm is explicitly specified with the @@ -81,7 +81,7 @@ must either be ZONE (for a DNSSEC zone key (KEY/DNSKEY)), HOST or ENTITY (for a .PP \-3 .RS 4 -Use an NSEC3\-capable algorithm to generate a DNSSEC key. If this option is used and no algorithm is explicitly set on the command line, NSEC3RSASHA1 will be used by default. Note that RSASHA256, RSASHA512 and ECCGOST algorithms are NSEC3\-capable. +Use an NSEC3\-capable algorithm to generate a DNSSEC key. If this option is used and no algorithm is explicitly set on the command line, NSEC3RSASHA1 will be used by default. Note that RSASHA256, RSASHA512, ECCGOST, ECDSAP256SHA256 and ECDSAP384SHA384 algorithms are NSEC3\-capable. .RE .PP \-C @@ -298,7 +298,7 @@ RFC 4034. .PP Internet Systems Consortium .SH "COPYRIGHT" -Copyright \(co 2004, 2005, 2007\-2010 Internet Systems Consortium, Inc. ("ISC") +Copyright \(co 2004, 2005, 2007\-2010, 2012 Internet Systems Consortium, Inc. ("ISC") .br Copyright \(co 2000\-2003 Internet Software Consortium. .br diff --git a/contrib/bind9/bin/dnssec/dnssec-keygen.c b/contrib/bind9/bin/dnssec/dnssec-keygen.c index cc1d9b1..8af100c 100644 --- a/contrib/bind9/bin/dnssec/dnssec-keygen.c +++ b/contrib/bind9/bin/dnssec/dnssec-keygen.c @@ -1,5 +1,5 @@ /* - * Portions Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC") + * Portions Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC") * Portions Copyright (C) 1999-2003 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -85,6 +85,7 @@ usage(void) { fprintf(stderr, " RSA | RSAMD5 | DSA | RSASHA1 | NSEC3RSASHA1" " | NSEC3DSA |\n"); fprintf(stderr, " RSASHA256 | RSASHA512 | ECCGOST |\n"); + fprintf(stderr, " ECDSAP256SHA256 | ECDSAP384SHA384 |\n"); fprintf(stderr, " DH | HMAC-MD5 | HMAC-SHA1 | HMAC-SHA224 | " "HMAC-SHA256 | \n"); fprintf(stderr, " HMAC-SHA384 | HMAC-SHA512\n"); @@ -102,6 +103,8 @@ usage(void) { fprintf(stderr, " NSEC3DSA:\t[512..1024] and divisible " "by 64\n"); fprintf(stderr, " ECCGOST:\tignored\n"); + fprintf(stderr, " ECDSAP256SHA256:\tignored\n"); + fprintf(stderr, " ECDSAP384SHA384:\tignored\n"); fprintf(stderr, " HMAC-MD5:\t[1..512]\n"); fprintf(stderr, " HMAC-SHA1:\t[1..160]\n"); fprintf(stderr, " HMAC-SHA224:\t[1..224]\n"); @@ -549,7 +552,8 @@ main(int argc, char **argv) { if (use_nsec3 && alg != DST_ALG_NSEC3DSA && alg != DST_ALG_NSEC3RSASHA1 && alg != DST_ALG_RSASHA256 && alg!= DST_ALG_RSASHA512 && - alg != DST_ALG_ECCGOST) { + alg != DST_ALG_ECCGOST && + alg != DST_ALG_ECDSA256 && alg != DST_ALG_ECDSA384) { fatal("%s is incompatible with NSEC3; " "do not use the -3 option", algname); } @@ -579,9 +583,11 @@ main(int argc, char **argv) { size = 1024; if (verbose > 0) fprintf(stderr, "key size not " - "specified; defaulting " - "to %d\n", size); - } else if (alg != DST_ALG_ECCGOST) + "specified; defaulting" + " to %d\n", size); + } else if (alg != DST_ALG_ECCGOST && + alg != DST_ALG_ECDSA256 && + alg != DST_ALG_ECDSA384) fatal("key size not specified (-b option)"); } @@ -710,6 +716,8 @@ main(int argc, char **argv) { fatal("invalid DSS key size: %d", size); break; case DST_ALG_ECCGOST: + case DST_ALG_ECDSA256: + case DST_ALG_ECDSA384: break; case DST_ALG_HMACMD5: options |= DST_TYPE_KEY; @@ -775,7 +783,8 @@ main(int argc, char **argv) { if (!(alg == DNS_KEYALG_RSAMD5 || alg == DNS_KEYALG_RSASHA1 || alg == DNS_KEYALG_NSEC3RSASHA1 || alg == DNS_KEYALG_RSASHA256 || - alg == DNS_KEYALG_RSASHA512 || alg == DST_ALG_ECCGOST) && + alg == DNS_KEYALG_RSASHA512 || alg == DST_ALG_ECCGOST || + alg == DST_ALG_ECDSA256 || alg == DST_ALG_ECDSA384) && rsa_exp != 0) fatal("specified RSA exponent for a non-RSA key"); @@ -849,6 +858,8 @@ main(int argc, char **argv) { case DNS_KEYALG_DSA: case DNS_KEYALG_NSEC3DSA: case DST_ALG_ECCGOST: + case DST_ALG_ECDSA256: + case DST_ALG_ECDSA384: show_progress = ISC_TRUE; /* fall through */ diff --git a/contrib/bind9/bin/dnssec/dnssec-keygen.docbook b/contrib/bind9/bin/dnssec/dnssec-keygen.docbook index f0cf7f5..0a1926b 100644 --- a/contrib/bind9/bin/dnssec/dnssec-keygen.docbook +++ b/contrib/bind9/bin/dnssec/dnssec-keygen.docbook @@ -2,7 +2,7 @@ "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" [<!ENTITY mdash "—">]> <!-- - - Copyright (C) 2004, 2005, 2007-2010 Internet Systems Consortium, Inc. ("ISC") + - Copyright (C) 2004, 2005, 2007-2010, 2012 Internet Systems Consortium, Inc. ("ISC") - Copyright (C) 2000-2003 Internet Software Consortium. - - Permission to use, copy, modify, and/or distribute this software for any @@ -43,6 +43,7 @@ <year>2008</year> <year>2009</year> <year>2010</year> + <year>2012</year> <holder>Internet Systems Consortium, Inc. ("ISC")</holder> </copyright> <copyright> @@ -114,7 +115,8 @@ <para> Selects the cryptographic algorithm. For DNSSEC keys, the value of <option>algorithm</option> must be one of RSAMD5, RSASHA1, - DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512 or ECCGOST. + DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST, + ECDSAP256SHA256 or ECDSAP384SHA384. For TSIG/TKEY, the value must be DH (Diffie Hellman), HMAC-MD5, HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384, or HMAC-SHA512. These values are @@ -148,7 +150,8 @@ between 512 and 2048 bits. Diffie Hellman keys must be between 128 and 4096 bits. DSA keys must be between 512 and 1024 bits and an exact multiple of 64. HMAC keys must be - between 1 and 512 bits. + between 1 and 512 bits. Elliptic curve algorithms don't need + this parameter. </para> <para> The key size does not need to be specified if using a default @@ -184,7 +187,8 @@ Use an NSEC3-capable algorithm to generate a DNSSEC key. If this option is used and no algorithm is explicitly set on the command line, NSEC3RSASHA1 will be used by - default. Note that RSASHA256, RSASHA512 and ECCGOST algorithms + default. Note that RSASHA256, RSASHA512, ECCGOST, + ECDSAP256SHA256 and ECDSAP384SHA384 algorithms are NSEC3-capable. </para> </listitem> diff --git a/contrib/bind9/bin/dnssec/dnssec-keygen.html b/contrib/bind9/bin/dnssec/dnssec-keygen.html index 4bf1f6b..3bdfa07 100644 --- a/contrib/bind9/bin/dnssec/dnssec-keygen.html +++ b/contrib/bind9/bin/dnssec/dnssec-keygen.html @@ -1,5 +1,5 @@ <!-- - - Copyright (C) 2004, 2005, 2007-2010 Internet Systems Consortium, Inc. ("ISC") + - Copyright (C) 2004, 2005, 2007-2010, 2012 Internet Systems Consortium, Inc. ("ISC") - Copyright (C) 2000-2003 Internet Software Consortium. - - Permission to use, copy, modify, and/or distribute this software for any @@ -32,7 +32,7 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-keygen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-3</code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-C</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-e</code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-g <em class="replaceable"><code>generator</code></em></code>] [<code class="option">-h</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-k</code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-q</code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S <em class="replaceable"><code>key</code></em></code>] [<code class="option">-s <em class="replaceable"><code>strength</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-z</code>] {name}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2543579"></a><h2>DESCRIPTION</h2> +<a name="id2543582"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-keygen</strong></span> generates keys for DNSSEC (Secure DNS), as defined in RFC 2535 and RFC 4034. It can also generate keys for use with @@ -46,14 +46,15 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2543597"></a><h2>OPTIONS</h2> +<a name="id2543601"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt> <dd> <p> Selects the cryptographic algorithm. For DNSSEC keys, the value of <code class="option">algorithm</code> must be one of RSAMD5, RSASHA1, - DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512 or ECCGOST. + DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST, + ECDSAP256SHA256 or ECDSAP384SHA384. For TSIG/TKEY, the value must be DH (Diffie Hellman), HMAC-MD5, HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384, or HMAC-SHA512. These values are @@ -84,7 +85,8 @@ between 512 and 2048 bits. Diffie Hellman keys must be between 128 and 4096 bits. DSA keys must be between 512 and 1024 bits and an exact multiple of 64. HMAC keys must be - between 1 and 512 bits. + between 1 and 512 bits. Elliptic curve algorithms don't need + this parameter. </p> <p> The key size does not need to be specified if using a default @@ -111,7 +113,8 @@ Use an NSEC3-capable algorithm to generate a DNSSEC key. If this option is used and no algorithm is explicitly set on the command line, NSEC3RSASHA1 will be used by - default. Note that RSASHA256, RSASHA512 and ECCGOST algorithms + default. Note that RSASHA256, RSASHA512, ECCGOST, + ECDSAP256SHA256 and ECDSAP384SHA384 algorithms are NSEC3-capable. </p></dd> <dt><span class="term">-C</span></dt> @@ -248,7 +251,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2544166"></a><h2>TIMING OPTIONS</h2> +<a name="id2544169"></a><h2>TIMING OPTIONS</h2> <p> Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '-', it is interpreted as @@ -319,7 +322,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2544356"></a><h2>GENERATED KEYS</h2> +<a name="id2544359"></a><h2>GENERATED KEYS</h2> <p> When <span><strong class="command">dnssec-keygen</strong></span> completes successfully, @@ -365,7 +368,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2544506"></a><h2>EXAMPLE</h2> +<a name="id2544441"></a><h2>EXAMPLE</h2> <p> To generate a 768-bit DSA key for the domain <strong class="userinput"><code>example.com</code></strong>, the following command would be @@ -386,7 +389,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2544550"></a><h2>SEE ALSO</h2> +<a name="id2544485"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>, <em class="citetitle">RFC 2539</em>, @@ -395,7 +398,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2544581"></a><h2>AUTHOR</h2> +<a name="id2544584"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/bin/dnssec/dnssec-settime.c b/contrib/bind9/bin/dnssec/dnssec-settime.c index 7a81490..f7f4486 100644 --- a/contrib/bind9/bin/dnssec/dnssec-settime.c +++ b/contrib/bind9/bin/dnssec/dnssec-settime.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2009-2011 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2009-2012 Internet Systems Consortium, Inc. ("ISC") * * Permission to use, copy, modify, and/or distribute this software for any * purpose with or without fee is hereby granted, provided that the above @@ -38,6 +38,7 @@ #include <dns/keyvalues.h> #include <dns/result.h> +#include <dns/log.h> #include <dst/dst.h> @@ -151,6 +152,7 @@ main(int argc, char **argv) { isc_boolean_t force = ISC_FALSE; isc_boolean_t epoch = ISC_FALSE; isc_boolean_t changed = ISC_FALSE; + isc_log_t *log = NULL; if (argc == 1) usage(); @@ -159,6 +161,8 @@ main(int argc, char **argv) { if (result != ISC_R_SUCCESS) fatal("Out of memory"); + setup_logging(verbose, mctx, &log); + dns_result_register(); isc_commandline_errprint = ISC_FALSE; @@ -578,6 +582,7 @@ main(int argc, char **argv) { cleanup_entropy(&ectx); if (verbose > 10) isc_mem_stats(mctx, stdout); + cleanup_logging(&log); isc_mem_free(mctx, directory); isc_mem_destroy(&mctx); diff --git a/contrib/bind9/bin/dnssec/dnssec-signzone.c b/contrib/bind9/bin/dnssec/dnssec-signzone.c index 953e2b0..2376249 100644 --- a/contrib/bind9/bin/dnssec/dnssec-signzone.c +++ b/contrib/bind9/bin/dnssec/dnssec-signzone.c @@ -3893,7 +3893,10 @@ main(int argc, char *argv[]) { check_result(result, "isc_file_mktemplate"); fp = NULL; - result = isc_file_openunique(tempfile, &fp); + if (outputformat == dns_masterformat_text) + result = isc_file_openunique(tempfile, &fp); + else + result = isc_file_bopenunique(tempfile, &fp); if (result != ISC_R_SUCCESS) fatal("failed to open temporary output file: %s", isc_result_totext(result)); diff --git a/contrib/bind9/bin/named/Makefile.in b/contrib/bind9/bin/named/Makefile.in index 272cf96..ea919ae 100644 --- a/contrib/bind9/bin/named/Makefile.in +++ b/contrib/bind9/bin/named/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2002 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/bin/named/builtin.c b/contrib/bind9/bin/named/builtin.c index 754e73d..14204cd 100644 --- a/contrib/bind9/bin/named/builtin.c +++ b/contrib/bind9/bin/named/builtin.c @@ -99,9 +99,9 @@ static size_t dns64_rdata(unsigned char *v, size_t start, unsigned char *rdata) { size_t i, j = 0; - for (i = 0; i < 4; i++) { + for (i = 0; i < 4U; i++) { unsigned char c = v[start++]; - if (start == 7) + if (start == 7U) start++; if (c > 99) { rdata[j++] = 3; @@ -164,7 +164,7 @@ dns64_cname(const dns_name_t *zone, const dns_name_t *name, i = (nlen % 4) == 2U ? 1 : 0; j = nlen; memset(v, 0, sizeof(v)); - while (j != 0) { + while (j != 0U) { INSIST((i/2) < sizeof(v)); if (ndata[0] != 1) return (ISC_R_NOTFOUND); diff --git a/contrib/bind9/bin/named/config.c b/contrib/bind9/bin/named/config.c index f5e93e4..9e453ad 100644 --- a/contrib/bind9/bin/named/config.c +++ b/contrib/bind9/bin/named/config.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 2001-2003 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -89,7 +89,7 @@ options {\n\ #endif "\ recursive-clients 1000;\n\ - resolver-query-timeout 30;\n\ + resolver-query-timeout 10;\n\ rrset-order {type NS order random; order cyclic; };\n\ serial-queries 20;\n\ serial-query-rate 20;\n\ diff --git a/contrib/bind9/bin/named/controlconf.c b/contrib/bind9/bin/named/controlconf.c index 926c205..daf00d0 100644 --- a/contrib/bind9/bin/named/controlconf.c +++ b/contrib/bind9/bin/named/controlconf.c @@ -373,8 +373,10 @@ control_recvmessage(isc_task_t *task, isc_event_t *event) { if (result == ISC_R_SUCCESS) break; isc_mem_put(listener->mctx, secret.rstart, REGION_SIZE(secret)); - log_invalid(&conn->ccmsg, result); - goto cleanup; + if (result != ISCCC_R_BADAUTH) { + log_invalid(&conn->ccmsg, result); + goto cleanup; + } } if (key == NULL) { diff --git a/contrib/bind9/bin/named/convertxsl.pl b/contrib/bind9/bin/named/convertxsl.pl index 87550b3..f355368 100755 --- a/contrib/bind9/bin/named/convertxsl.pl +++ b/contrib/bind9/bin/named/convertxsl.pl @@ -1,6 +1,6 @@ #!/usr/bin/env perl # -# Copyright (C) 2006-2008 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2006-2008, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/bin/named/query.c b/contrib/bind9/bin/named/query.c index 10a7d6d..9e67f2d 100644 --- a/contrib/bind9/bin/named/query.c +++ b/contrib/bind9/bin/named/query.c @@ -25,6 +25,7 @@ #include <isc/hex.h> #include <isc/mem.h> +#include <isc/serial.h> #include <isc/stats.h> #include <isc/util.h> @@ -2775,11 +2776,12 @@ query_add_cname(ns_client_t *client, dns_name_t *qname, dns_name_t *tname, */ static void mark_secure(ns_client_t *client, dns_db_t *db, dns_name_t *name, - isc_uint32_t ttl, dns_rdataset_t *rdataset, + dns_rdata_rrsig_t *rrsig, dns_rdataset_t *rdataset, dns_rdataset_t *sigrdataset) { isc_result_t result; dns_dbnode_t *node = NULL; + isc_stdtime_t now; rdataset->trust = dns_trust_secure; sigrdataset->trust = dns_trust_secure; @@ -2790,17 +2792,10 @@ mark_secure(ns_client_t *client, dns_db_t *db, dns_name_t *name, result = dns_db_findnode(db, name, ISC_TRUE, &node); if (result != ISC_R_SUCCESS) return; - /* - * Bound the validated ttls then minimise. - */ - if (sigrdataset->ttl > ttl) - sigrdataset->ttl = ttl; - if (rdataset->ttl > ttl) - rdataset->ttl = ttl; - if (rdataset->ttl > sigrdataset->ttl) - rdataset->ttl = sigrdataset->ttl; - else - sigrdataset->ttl = rdataset->ttl; + + isc_stdtime_get(&now); + dns_rdataset_trimttl(rdataset, sigrdataset, rrsig, now, + client->view->acceptexpired); (void)dns_db_addrdataset(db, node, NULL, client->now, rdataset, 0, NULL); @@ -2925,8 +2920,7 @@ validate(ns_client_t *client, dns_db_t *db, dns_name_t *name, client->view->acceptexpired)) { dst_key_free(&key); dns_rdataset_disassociate(&keyrdataset); - mark_secure(client, db, name, - rrsig.originalttl, + mark_secure(client, db, name, &rrsig, rdataset, sigrdataset); return (ISC_TRUE); } @@ -3802,6 +3796,13 @@ rpz_clean(dns_zone_t **zonep, dns_db_t **dbp, dns_dbnode_t **nodep, dns_rdataset_disassociate(*rdatasetp); } +static void +rpz_match_clear(dns_rpz_st_t *st) +{ + rpz_clean(&st->m.zone, &st->m.db, &st->m.node, &st->m.rdataset); + st->m.version = NULL; +} + static inline isc_result_t rpz_ready(ns_client_t *client, dns_zone_t **zonep, dns_db_t **dbp, dns_dbnode_t **nodep, dns_rdataset_t **rdatasetp) @@ -3821,10 +3822,9 @@ static void rpz_st_clear(ns_client_t *client) { dns_rpz_st_t *st = client->query.rpz_st; - rpz_clean(&st->m.zone, &st->m.db, &st->m.node, NULL); - st->m.version = NULL; if (st->m.rdataset != NULL) query_putrdataset(client, &st->m.rdataset); + rpz_match_clear(st); rpz_clean(NULL, &st->r.db, NULL, NULL); if (st->r.ns_rdataset != NULL) @@ -3974,6 +3974,9 @@ rpz_rewrite_ip(ns_client_t *client, dns_rdataset_t *rdataset, for (rpz = ISC_LIST_HEAD(client->view->rpz_zones); rpz != NULL; rpz = ISC_LIST_NEXT(rpz, link)) { + if (!RECURSIONOK(client) && rpz->recursive_only) + continue; + /* * Do not check policy zones that cannot replace a policy * already known to match. @@ -4002,9 +4005,8 @@ rpz_rewrite_ip(ns_client_t *client, dns_rdataset_t *rdataset, * hit, if any. Note the domain name and quality of the * best hit. */ - (void)dns_db_rpz_findips(rpz, rpz_type, zone, db, version, - rdataset, st, - client->query.rpz_st->qname); + dns_db_rpz_findips(rpz, rpz_type, zone, db, version, + rdataset, st, client->query.rpz_st->qname); rpz_clean(&zone, &db, NULL, NULL); } return (ISC_R_SUCCESS); @@ -4109,8 +4111,8 @@ rpz_rewrite_rrsets(ns_client_t *client, dns_rpz_type_t rpz_type, */ static isc_result_t rpz_find(ns_client_t *client, dns_rdatatype_t qtype, dns_name_t *qnamef, - dns_name_t *sname, dns_rpz_type_t rpz_type, dns_zone_t **zonep, - dns_db_t **dbp, dns_dbversion_t **versionp, + dns_name_t *sname, dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type, + dns_zone_t **zonep, dns_db_t **dbp, dns_dbversion_t **versionp, dns_dbnode_t **nodep, dns_rdataset_t **rdatasetp, dns_rpz_policy_t *policyp) { @@ -4149,7 +4151,7 @@ rpz_find(ns_client_t *client, dns_rdatatype_t qtype, dns_name_t *qnamef, if (result != ISC_R_SUCCESS) { dns_db_detachnode(*dbp, nodep); rpz_log_fail(client, DNS_RPZ_ERROR_LEVEL, rpz_type, - qnamef, "allrdatasets()", result); + qnamef, "allrdatasets() ", result); *policyp = DNS_RPZ_POLICY_ERROR; return (DNS_R_SERVFAIL); } @@ -4166,7 +4168,7 @@ rpz_find(ns_client_t *client, dns_rdatatype_t qtype, dns_name_t *qnamef, if (result != ISC_R_SUCCESS) { if (result != ISC_R_NOMORE) { rpz_log_fail(client, DNS_RPZ_ERROR_LEVEL, - rpz_type, qnamef, "rdatasetiter", + rpz_type, qnamef, "rdatasetiter ", result); *policyp = DNS_RPZ_POLICY_ERROR; return (DNS_R_SERVFAIL); @@ -4194,7 +4196,7 @@ rpz_find(ns_client_t *client, dns_rdatatype_t qtype, dns_name_t *qnamef, if ((*rdatasetp)->type != dns_rdatatype_cname) { policy = DNS_RPZ_POLICY_RECORD; } else { - policy = dns_rpz_decode_cname(*rdatasetp, sname); + policy = dns_rpz_decode_cname(rpz, *rdatasetp, sname); if ((policy == DNS_RPZ_POLICY_RECORD || policy == DNS_RPZ_POLICY_WILDCNAME) && qtype != dns_rdatatype_cname && @@ -4265,6 +4267,9 @@ rpz_rewrite_name(ns_client_t *client, dns_rdatatype_t qtype, dns_name_t *qname, for (rpz = ISC_LIST_HEAD(client->view->rpz_zones); rpz != NULL; rpz = ISC_LIST_NEXT(rpz, link)) { + if (!RECURSIONOK(client) && rpz->recursive_only) + continue; + /* * Do not check policy zones that cannot replace a policy * already known to match. @@ -4310,11 +4315,11 @@ rpz_rewrite_name(ns_client_t *client, dns_rdatatype_t qtype, dns_name_t *qname, } /* - * See if the policy record exists. + * See if the policy record exists and get its policy. */ - result = rpz_find(client, qtype, rpz_qname, qname, rpz_type, - &zone, &db, &version, &node, rdatasetp, - &policy); + result = rpz_find(client, qtype, rpz_qname, qname, rpz, + rpz_type, &zone, &db, &version, &node, + rdatasetp, &policy); switch (result) { case DNS_R_NXDOMAIN: case DNS_R_EMPTYNAME: @@ -4350,8 +4355,7 @@ rpz_rewrite_name(ns_client_t *client, dns_rdatatype_t qtype, dns_name_t *qname, continue; } - rpz_clean(&st->m.zone, &st->m.db, &st->m.node, - &st->m.rdataset); + rpz_match_clear(st); st->m.rpz = rpz; st->m.type = rpz_type; st->m.prefix = 0; @@ -4365,9 +4369,11 @@ rpz_rewrite_name(ns_client_t *client, dns_rdatatype_t qtype, dns_name_t *qname, trdataset = st->m.rdataset; st->m.rdataset = *rdatasetp; *rdatasetp = trdataset; - st->m.ttl = st->m.rdataset->ttl; + st->m.ttl = ISC_MIN(st->m.rdataset->ttl, + rpz->max_policy_ttl); } else { - st->m.ttl = DNS_RPZ_TTL_DEFAULT; + st->m.ttl = ISC_MIN(DNS_RPZ_TTL_DEFAULT, + rpz->max_policy_ttl); } st->m.node = node; node = NULL; @@ -4462,13 +4468,13 @@ rpz_rewrite(ns_client_t *client, dns_rdatatype_t qtype, isc_result_t qresult, case DNS_R_BROKENCHAIN: rpz_log_fail(client, DNS_RPZ_DEBUG_LEVEL3, DNS_RPZ_TYPE_QNAME, client->query.qname, - "stop on qresult in rpz_rewrite()", + "stop on qresult in rpz_rewrite() ", qresult); return (ISC_R_SUCCESS); default: rpz_log_fail(client, DNS_RPZ_DEBUG_LEVEL1, DNS_RPZ_TYPE_QNAME, client->query.qname, - "stop on unrecognized qresult in rpz_rewrite()", + "stop on unrecognized qresult in rpz_rewrite() ", qresult); return (ISC_R_SUCCESS); } @@ -4647,10 +4653,11 @@ cleanup: if (st->m.policy == DNS_RPZ_POLICY_MISS || st->m.policy == DNS_RPZ_POLICY_PASSTHRU || st->m.policy == DNS_RPZ_POLICY_ERROR) { - if (st->m.policy == DNS_RPZ_POLICY_PASSTHRU) + if (st->m.policy == DNS_RPZ_POLICY_PASSTHRU && + result != DNS_R_DELEGATION) rpz_log_rewrite(client, "", st->m.policy, st->m.type, st->qname); - rpz_clean(&st->m.zone, &st->m.db, &st->m.node, &st->m.rdataset); + rpz_match_clear(st); } if (st->m.policy == DNS_RPZ_POLICY_ERROR) { st->m.type = DNS_RPZ_TYPE_BAD; @@ -4664,6 +4671,64 @@ cleanup: } /* + * See if response policy zone rewriting is allowed a lack of interest + * by the client in DNSSEC or a lack of signatures. + */ +static isc_boolean_t +rpz_ck_dnssec(ns_client_t *client, isc_result_t result, + dns_rdataset_t *rdataset, dns_rdataset_t *sigrdataset) +{ + dns_fixedname_t fixed; + dns_name_t *found; + dns_rdataset_t trdataset; + dns_rdatatype_t type; + + if (client->view->rpz_break_dnssec) + return (ISC_TRUE); + /* + * sigrdataset == NULL if and only !WANTDNSSEC(client) + */ + if (sigrdataset == NULL) + return (ISC_TRUE); + if (dns_rdataset_isassociated(sigrdataset)) + return (ISC_FALSE); + + /* + * We are happy to rewrite nothing. + */ + if (rdataset == NULL || !dns_rdataset_isassociated(rdataset)) + return (ISC_TRUE); + /* + * Do not rewrite if there is any sign of signatures. + */ + if (rdataset->type == dns_rdatatype_nsec || + rdataset->type == dns_rdatatype_nsec3 || + rdataset->type == dns_rdatatype_rrsig) + return (ISC_FALSE); + + /* + * Look for a signature in a negative cache rdataset. + */ + if ((rdataset->attributes & DNS_RDATASETATTR_NEGATIVE) == 0) + return (ISC_TRUE); + dns_fixedname_init(&fixed); + found = dns_fixedname_name(&fixed); + dns_rdataset_init(&trdataset); + for (result = dns_rdataset_first(rdataset); + result == ISC_R_SUCCESS; + result = dns_rdataset_next(rdataset)) { + dns_ncache_current(rdataset, found, &trdataset); + type = trdataset.type; + dns_rdataset_disassociate(&trdataset); + if (type == dns_rdatatype_nsec || + type == dns_rdatatype_nsec3 || + type == dns_rdatatype_rrsig) + return (ISC_FALSE); + } + return (ISC_TRUE); +} + +/* * Add a CNAME to the query response, including translating foo.evil.com and * *.evil.com CNAME *.example.com * to @@ -4707,7 +4772,8 @@ rpz_add_cname(ns_client_t *client, dns_rpz_st_t *st, * Turn off DNSSEC because the results of a * response policy zone cannot verify. */ - client->attributes &= ~NS_CLIENTATTR_WANTDNSSEC; + client->attributes &= ~(NS_CLIENTATTR_WANTDNSSEC | + DNS_MESSAGEFLAG_AD); return (ISC_R_SUCCESS); } @@ -5117,10 +5183,12 @@ dns64_ttl(dns_db_t *db, dns_dbversion_t *version) { isc_result_t result; isc_uint32_t ttl = ISC_UINT32_MAX; + dns_rdataset_init(&rdataset); + result = dns_db_getoriginnode(db, &node); if (result != ISC_R_SUCCESS) goto cleanup; - dns_rdataset_init(&rdataset); + result = dns_db_findrdataset(db, node, version, dns_rdatatype_soa, 0, 0, &rdataset, NULL); if (result != ISC_R_SUCCESS) @@ -5502,9 +5570,9 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype) CTRACE("query_find: resume"); if (!ISC_LIST_EMPTY(client->view->rpz_zones) && - RECURSIONOK(client) && !RECURSING(client) && - (!WANTDNSSEC(client) || sigrdataset == NULL || - !dns_rdataset_isassociated(sigrdataset)) && + (RECURSIONOK(client) || !client->view->rpz_recursive_only) && + rpz_ck_dnssec(client, result, rdataset, sigrdataset) && + !RECURSING(client) && (client->query.rpz_st == NULL || (client->query.rpz_st->state & DNS_RPZ_REWRITTEN) == 0) && !dns_name_equal(client->query.qname, dns_rootname)) { @@ -5578,10 +5646,22 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype) break; case DNS_RPZ_POLICY_RECORD: result = rpz_st->m.result; - if (type == dns_rdatatype_any && - result != DNS_R_CNAME && - dns_rdataset_isassociated(rdataset)) - dns_rdataset_disassociate(rdataset); + if (qtype == dns_rdatatype_any && + result != DNS_R_CNAME) { + /* + * We will add all of the rdatasets of + * the node by iterating, setting the + * TTL then. + */ + if (dns_rdataset_isassociated(rdataset)) + dns_rdataset_disassociate(rdataset); + } else { + /* + * We will add this rdataset. + */ + rdataset->ttl = ISC_MIN(rdataset->ttl, + rpz_st->m.ttl); + } break; case DNS_RPZ_POLICY_WILDCNAME: result = dns_rdataset_first(rdataset); @@ -5620,7 +5700,8 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype) * Turn off DNSSEC because the results of a * response policy zone cannot verify. */ - client->attributes &= ~NS_CLIENTATTR_WANTDNSSEC; + client->attributes &= ~(NS_CLIENTATTR_WANTDNSSEC | + DNS_MESSAGEFLAG_AD); query_putrdataset(client, &sigrdataset); is_zone = ISC_TRUE; rpz_log_rewrite(client, "", rpz_st->m.policy, @@ -6560,6 +6641,10 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype) noqname = rdataset; else noqname = NULL; + rpz_st = client->query.rpz_st; + if (rpz_st != NULL) + rdataset->ttl = ISC_MIN(rdataset->ttl, + rpz_st->m.ttl); query_addrrset(client, fname != NULL ? &fname : &tname, &rdataset, NULL, @@ -6852,8 +6937,7 @@ query_find(ns_client_t *client, dns_fetchevent_t *event, dns_rdatatype_t qtype) */ rpz_st = client->query.rpz_st; if (rpz_st != NULL && (rpz_st->state & DNS_RPZ_RECURSING) == 0) { - rpz_clean(&rpz_st->m.zone, &rpz_st->m.db, &rpz_st->m.node, - &rpz_st->m.rdataset); + rpz_match_clear(rpz_st); rpz_st->state &= ~DNS_RPZ_DONE_QNAME; } if (rdataset != NULL) diff --git a/contrib/bind9/bin/named/server.c b/contrib/bind9/bin/named/server.c index 666d854..c3eb1ea 100644 --- a/contrib/bind9/bin/named/server.c +++ b/contrib/bind9/bin/named/server.c @@ -1430,15 +1430,14 @@ cleanup: } static isc_result_t -configure_rpz(dns_view_t *view, const cfg_listelt_t *element) { - const cfg_obj_t *rpz_obj, *policy_obj; +configure_rpz(dns_view_t *view, const cfg_listelt_t *element, + isc_boolean_t recursive_only_def, dns_ttl_t ttl_def) +{ + const cfg_obj_t *rpz_obj, *policy_obj, *obj; const char *str; - dns_fixedname_t fixed; - dns_name_t *origin; dns_rpz_zone_t *old, *new; dns_zone_t *zone = NULL; isc_result_t result; - unsigned int l1, l2; new = isc_mem_get(view->mctx, sizeof(*new)); if (new == NULL) { @@ -1447,9 +1446,10 @@ configure_rpz(dns_view_t *view, const cfg_listelt_t *element) { } memset(new, 0, sizeof(*new)); - dns_name_init(&new->nsdname, NULL); dns_name_init(&new->origin, NULL); + dns_name_init(&new->nsdname, NULL); dns_name_init(&new->cname, NULL); + dns_name_init(&new->passthru, NULL); ISC_LIST_INITANDAPPEND(view->rpz_zones, new, link); rpz_obj = cfg_listelt_value(element); @@ -1457,15 +1457,31 @@ configure_rpz(dns_view_t *view, const cfg_listelt_t *element) { if (cfg_obj_isvoid(policy_obj)) { new->policy = DNS_RPZ_POLICY_GIVEN; } else { - str = cfg_obj_asstring(policy_obj); + str = cfg_obj_asstring(cfg_tuple_get(policy_obj, + "policy name")); new->policy = dns_rpz_str2policy(str); INSIST(new->policy != DNS_RPZ_POLICY_ERROR); } - dns_fixedname_init(&fixed); - origin = dns_fixedname_name(&fixed); - str = cfg_obj_asstring(cfg_tuple_get(rpz_obj, "name")); - result = dns_name_fromstring(origin, str, DNS_NAME_DOWNCASE, NULL); + obj = cfg_tuple_get(rpz_obj, "recursive-only"); + if (cfg_obj_isvoid(obj)) { + new->recursive_only = recursive_only_def; + } else { + new->recursive_only = cfg_obj_asboolean(obj); + } + if (!new->recursive_only) + view->rpz_recursive_only = ISC_FALSE; + + obj = cfg_tuple_get(rpz_obj, "max-policy-ttl"); + if (cfg_obj_isuint32(obj)) { + new->max_policy_ttl = cfg_obj_asuint32(obj); + } else { + new->max_policy_ttl = ttl_def; + } + + str = cfg_obj_asstring(cfg_tuple_get(rpz_obj, "zone name")); + result = dns_name_fromstring(&new->origin, str, DNS_NAME_DOWNCASE, + view->mctx); if (result != ISC_R_SUCCESS) { cfg_obj_log(rpz_obj, ns_g_lctx, DNS_RPZ_ERROR_LEVEL, "invalid zone '%s'", str); @@ -1473,31 +1489,28 @@ configure_rpz(dns_view_t *view, const cfg_listelt_t *element) { } result = dns_name_fromstring2(&new->nsdname, DNS_RPZ_NSDNAME_ZONE, - origin, DNS_NAME_DOWNCASE, view->mctx); + &new->origin, DNS_NAME_DOWNCASE, + view->mctx); if (result != ISC_R_SUCCESS) { cfg_obj_log(rpz_obj, ns_g_lctx, DNS_RPZ_ERROR_LEVEL, "invalid zone '%s'", str); goto cleanup; } - /* - * The origin is part of 'nsdname' so we don't need to keep it - * seperately. - */ - l1 = dns_name_countlabels(&new->nsdname); - l2 = dns_name_countlabels(origin); - dns_name_getlabelsequence(&new->nsdname, l1 - l2, l2, &new->origin); + result = dns_name_fromstring(&new->passthru, DNS_RPZ_PASSTHRU_ZONE, + DNS_NAME_DOWNCASE, view->mctx); + if (result != ISC_R_SUCCESS) { + cfg_obj_log(rpz_obj, ns_g_lctx, DNS_RPZ_ERROR_LEVEL, + "invalid zone '%s'", str); + goto cleanup; + } - /* - * Are we configured to with the reponse policy zone? - */ result = dns_view_findzone(view, &new->origin, &zone); if (result != ISC_R_SUCCESS) { cfg_obj_log(rpz_obj, ns_g_lctx, DNS_RPZ_ERROR_LEVEL, "unknown zone '%s'", str); goto cleanup; } - if (dns_zone_gettype(zone) != dns_zone_master && dns_zone_gettype(zone) != dns_zone_slave) { cfg_obj_log(rpz_obj, ns_g_lctx, DNS_RPZ_ERROR_LEVEL, @@ -1521,8 +1534,9 @@ configure_rpz(dns_view_t *view, const cfg_listelt_t *element) { } if (new->policy == DNS_RPZ_POLICY_CNAME) { - str = cfg_obj_asstring(cfg_tuple_get(rpz_obj, "cname")); - result = dns_name_fromstring(&new->cname, str, 0, view->mctx); + str = cfg_obj_asstring(cfg_tuple_get(policy_obj, "cname")); + result = dns_name_fromstring(&new->cname, str, + DNS_NAME_DOWNCASE, view->mctx); if (result != ISC_R_SUCCESS) { cfg_obj_log(rpz_obj, ns_g_lctx, DNS_RPZ_ERROR_LEVEL, "invalid cname '%s'", str); @@ -2876,19 +2890,39 @@ configure_view(dns_view_t *view, cfg_obj_t *config, cfg_obj_t *vconfig, * Make the list of response policy zone names for views that * are used for real lookups and so care about hints. */ - zonelist = NULL; - if (view->rdclass == dns_rdataclass_in && need_hints) { - obj = NULL; - result = ns_config_get(maps, "response-policy", &obj); - if (result == ISC_R_SUCCESS) - cfg_map_get(obj, "zone", &zonelist); - } + obj = NULL; + if (view->rdclass == dns_rdataclass_in && need_hints && + ns_config_get(maps, "response-policy", &obj) == ISC_R_SUCCESS) { + const cfg_obj_t *recursive_only_obj; + const cfg_obj_t *break_dnssec_obj, *ttl_obj; + isc_boolean_t recursive_only_def; + dns_ttl_t ttl_def; + + recursive_only_obj = cfg_tuple_get(obj, "recursive-only"); + if (!cfg_obj_isvoid(recursive_only_obj) && + !cfg_obj_asboolean(recursive_only_obj)) + recursive_only_def = ISC_FALSE; + else + recursive_only_def = ISC_TRUE; - if (zonelist != NULL) { - for (element = cfg_list_first(zonelist); + break_dnssec_obj = cfg_tuple_get(obj, "break-dnssec"); + if (!cfg_obj_isvoid(break_dnssec_obj) && + cfg_obj_asboolean(break_dnssec_obj)) + view->rpz_break_dnssec = ISC_TRUE; + else + view->rpz_break_dnssec = ISC_FALSE; + + ttl_obj = cfg_tuple_get(obj, "max-policy-ttl"); + if (cfg_obj_isuint32(ttl_obj)) + ttl_def = cfg_obj_asuint32(ttl_obj); + else + ttl_def = DNS_RPZ_MAX_TTL_DEFAULT; + + for (element = cfg_list_first(cfg_tuple_get(obj, "zone list")); element != NULL; element = cfg_list_next(element)) { - result = configure_rpz(view, element); + result = configure_rpz(view, element, + recursive_only_def, ttl_def); if (result != ISC_R_SUCCESS) goto cleanup; dns_rpz_set_need(ISC_TRUE); @@ -5434,11 +5468,13 @@ ns_server_create(isc_mem_t *mctx, ns_server_t **serverp) { /* * Setup the server task, which is responsible for coordinating - * startup and shutdown of the server. + * startup and shutdown of the server, as well as all exclusive + * tasks. */ CHECKFATAL(isc_task_create(ns_g_taskmgr, 0, &server->task), "creating server task"); isc_task_setname(server->task, "server", server); + isc_taskmgr_setexcltask(ns_g_taskmgr, server->task); CHECKFATAL(isc_task_onshutdown(server->task, shutdown_server, server), "isc_task_onshutdown"); CHECKFATAL(isc_app_onrun(ns_g_mctx, server->task, run_server, server), diff --git a/contrib/bind9/bin/named/statschannel.c b/contrib/bind9/bin/named/statschannel.c index d0518c9..6ea0be5 100644 --- a/contrib/bind9/bin/named/statschannel.c +++ b/contrib/bind9/bin/named/statschannel.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2008-2011 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2008-2012 Internet Systems Consortium, Inc. ("ISC") * * Permission to use, copy, modify, and/or distribute this software for any * purpose with or without fee is hereby granted, provided that the above @@ -85,16 +85,19 @@ static const char *nsstats_desc[dns_nsstatscounter_max]; static const char *resstats_desc[dns_resstatscounter_max]; static const char *zonestats_desc[dns_zonestatscounter_max]; static const char *sockstats_desc[isc_sockstatscounter_max]; +static const char *dnssecstats_desc[dns_dnssecstats_max]; #ifdef HAVE_LIBXML2 static const char *nsstats_xmldesc[dns_nsstatscounter_max]; static const char *resstats_xmldesc[dns_resstatscounter_max]; static const char *zonestats_xmldesc[dns_zonestatscounter_max]; static const char *sockstats_xmldesc[isc_sockstatscounter_max]; +static const char *dnssecstats_xmldesc[dns_dnssecstats_max]; #else #define nsstats_xmldesc NULL #define resstats_xmldesc NULL #define zonestats_xmldesc NULL #define sockstats_xmldesc NULL +#define dnssecstats_xmldesc NULL #endif /* HAVE_LIBXML2 */ #define TRY0(a) do { xmlrc = (a); if (xmlrc < 0) goto error; } while(0) @@ -108,6 +111,7 @@ static int nsstats_index[dns_nsstatscounter_max]; static int resstats_index[dns_resstatscounter_max]; static int zonestats_index[dns_zonestatscounter_max]; static int sockstats_index[isc_sockstatscounter_max]; +static int dnssecstats_index[dns_dnssecstats_max]; static inline void set_desc(int counter, int maxcounter, const char *fdesc, const char **fdescs, @@ -409,6 +413,33 @@ init_desc(void) { "FDwatchRecvErr"); INSIST(i == isc_sockstatscounter_max); + /* Initialize DNSSEC statistics */ + for (i = 0; i < dns_dnssecstats_max; i++) + dnssecstats_desc[i] = NULL; +#ifdef HAVE_LIBXML2 + for (i = 0; i < dns_dnssecstats_max; i++) + dnssecstats_xmldesc[i] = NULL; +#endif + +#define SET_DNSSECSTATDESC(counterid, desc, xmldesc) \ + do { \ + set_desc(dns_dnssecstats_ ## counterid, \ + dns_dnssecstats_max, \ + desc, dnssecstats_desc,\ + xmldesc, dnssecstats_xmldesc); \ + dnssecstats_index[i++] = dns_dnssecstats_ ## counterid; \ + } while (0) + + i = 0; + SET_DNSSECSTATDESC(asis, "dnssec validation success with signer " + "\"as is\"", "DNSSECasis"); + SET_DNSSECSTATDESC(downcase, "dnssec validation success with signer " + "lower cased", "DNSSECdowncase"); + SET_DNSSECSTATDESC(wildcard, "dnssec validation of wildcard signature", + "DNSSECwild"); + SET_DNSSECSTATDESC(fail, "dnssec validation failures", "DNSSECfail"); + INSIST(i == dns_dnssecstats_max); + /* Sanity check */ for (i = 0; i < dns_nsstatscounter_max; i++) INSIST(nsstats_desc[i] != NULL); @@ -418,6 +449,8 @@ init_desc(void) { INSIST(zonestats_desc[i] != NULL); for (i = 0; i < isc_sockstatscounter_max; i++) INSIST(sockstats_desc[i] != NULL); + for (i = 0; i < dns_dnssecstats_max; i++) + INSIST(dnssecstats_desc[i] != NULL); #ifdef HAVE_LIBXML2 for (i = 0; i < dns_nsstatscounter_max; i++) INSIST(nsstats_xmldesc[i] != NULL); @@ -427,6 +460,8 @@ init_desc(void) { INSIST(zonestats_xmldesc[i] != NULL); for (i = 0; i < isc_sockstatscounter_max; i++) INSIST(sockstats_xmldesc[i] != NULL); + for (i = 0; i < dns_dnssecstats_max; i++) + INSIST(dnssecstats_xmldesc[i] != NULL); #endif } diff --git a/contrib/bind9/bin/named/unix/Makefile.in b/contrib/bind9/bin/named/unix/Makefile.in index 135c634..ff2ecce 100644 --- a/contrib/bind9/bin/named/unix/Makefile.in +++ b/contrib/bind9/bin/named/unix/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007, 2009, 2011 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2009, 2011, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1999-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/bin/nsupdate/Makefile.in b/contrib/bind9/bin/nsupdate/Makefile.in index e86731b..f62ee34 100644 --- a/contrib/bind9/bin/nsupdate/Makefile.in +++ b/contrib/bind9/bin/nsupdate/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2006-2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2006-2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000-2002 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/bin/nsupdate/nsupdate.c b/contrib/bind9/bin/nsupdate/nsupdate.c index 743f321..1f5e3e9 100644 --- a/contrib/bind9/bin/nsupdate/nsupdate.c +++ b/contrib/bind9/bin/nsupdate/nsupdate.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 2000-2003 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -1122,7 +1122,7 @@ parse_name(char **cmdlinep, dns_message_t *msg, dns_name_t **namep) { isc_buffer_t source; word = nsu_strsep(cmdlinep, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { fprintf(stderr, "could not read owner name\n"); return (STATUS_SYNTAX); } @@ -1154,6 +1154,11 @@ parse_rdata(char **cmdlinep, dns_rdataclass_t rdataclass, dns_rdatacallbacks_t callbacks; isc_result_t result; + if (cmdline == NULL) { + rdata->flags = DNS_RDATA_UPDATE; + return (STATUS_MORE); + } + while (*cmdline != 0 && isspace((unsigned char)*cmdline)) cmdline++; @@ -1220,7 +1225,7 @@ make_prereq(char *cmdline, isc_boolean_t ispositive, isc_boolean_t isrrset) { */ if (isrrset) { word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { fprintf(stderr, "could not read class or type\n"); goto failure; } @@ -1236,7 +1241,7 @@ make_prereq(char *cmdline, isc_boolean_t ispositive, isc_boolean_t isrrset) { * Now read the type. */ word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { fprintf(stderr, "could not read type\n"); goto failure; } @@ -1310,7 +1315,7 @@ evaluate_prereq(char *cmdline) { ddebug("evaluate_prereq()"); word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { fprintf(stderr, "could not read operation code\n"); return (STATUS_SYNTAX); } @@ -1344,14 +1349,14 @@ evaluate_server(char *cmdline) { } word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { fprintf(stderr, "could not read server name\n"); return (STATUS_SYNTAX); } server = word; word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) + if (word == NULL || *word == 0) port = dnsport; else { char *endp; @@ -1385,14 +1390,14 @@ evaluate_local(char *cmdline) { struct in6_addr in6; word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { fprintf(stderr, "could not read server name\n"); return (STATUS_SYNTAX); } local = word; word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) + if (word == NULL || *word == 0) port = 0; else { char *endp; @@ -1441,7 +1446,7 @@ evaluate_key(char *cmdline) { char *n; namestr = nsu_strsep(&cmdline, " \t\r\n"); - if (*namestr == 0) { + if (namestr == NULL || *namestr == 0) { fprintf(stderr, "could not read key name\n"); return (STATUS_SYNTAX); } @@ -1465,7 +1470,7 @@ evaluate_key(char *cmdline) { } secretstr = nsu_strsep(&cmdline, "\r\n"); - if (*secretstr == 0) { + if (secretstr == NULL || *secretstr == 0) { fprintf(stderr, "could not read key secret\n"); return (STATUS_SYNTAX); } @@ -1506,7 +1511,7 @@ evaluate_zone(char *cmdline) { isc_result_t result; word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { fprintf(stderr, "could not read zone name\n"); return (STATUS_SYNTAX); } @@ -1532,7 +1537,7 @@ evaluate_realm(char *cmdline) { char buf[1024]; word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { if (realm != NULL) isc_mem_free(mctx, realm); realm = NULL; @@ -1557,7 +1562,7 @@ evaluate_ttl(char *cmdline) { isc_uint32_t ttl; word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { fprintf(stderr, "could not ttl\n"); return (STATUS_SYNTAX); } @@ -1591,7 +1596,7 @@ evaluate_class(char *cmdline) { dns_rdataclass_t rdclass; word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { fprintf(stderr, "could not read class name\n"); return (STATUS_SYNTAX); } @@ -1649,7 +1654,7 @@ update_addordelete(char *cmdline, isc_boolean_t isdelete) { * If it's a delete, ignore a TTL if present (for compatibility). */ word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { if (!isdelete) { fprintf(stderr, "could not read owner ttl\n"); goto failure; @@ -1690,7 +1695,7 @@ update_addordelete(char *cmdline, isc_boolean_t isdelete) { */ word = nsu_strsep(&cmdline, " \t\r\n"); parseclass: - if (*word == 0) { + if (word == NULL || *word == 0) { if (isdelete) { rdataclass = dns_rdataclass_any; rdatatype = dns_rdatatype_any; @@ -1714,7 +1719,7 @@ update_addordelete(char *cmdline, isc_boolean_t isdelete) { * Now read the type. */ word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { if (isdelete) { rdataclass = dns_rdataclass_any; rdatatype = dns_rdatatype_any; @@ -1794,7 +1799,7 @@ evaluate_update(char *cmdline) { ddebug("evaluate_update()"); word = nsu_strsep(&cmdline, " \t\r\n"); - if (*word == 0) { + if (word == NULL || *word == 0) { fprintf(stderr, "could not read operation code\n"); return (STATUS_SYNTAX); } @@ -1884,6 +1889,7 @@ get_next_command(void) { char cmdlinebuf[MAXCMD]; char *cmdline; char *word; + char *tmp; ddebug("get_next_command()"); if (interactive) { @@ -1895,11 +1901,18 @@ get_next_command(void) { isc_app_unblock(); if (cmdline == NULL) return (STATUS_QUIT); + + /* + * Normalize input by removing any eol. + */ + tmp = cmdline; + (void)nsu_strsep(&tmp, "\r\n"); + word = nsu_strsep(&cmdline, " \t\r\n"); if (feof(input)) return (STATUS_QUIT); - if (*word == 0) + if (word == NULL || *word == 0) return (STATUS_SEND); if (word[0] == ';') return (STATUS_MORE); diff --git a/contrib/bind9/bin/rndc/Makefile.in b/contrib/bind9/bin/rndc/Makefile.in index e67bad7..f6100df 100644 --- a/contrib/bind9/bin/rndc/Makefile.in +++ b/contrib/bind9/bin/rndc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007, 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000-2002 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/bin/tools/Makefile.in b/contrib/bind9/bin/tools/Makefile.in index a77376b..a396005 100644 --- a/contrib/bind9/bin/tools/Makefile.in +++ b/contrib/bind9/bin/tools/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009, 2010 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2010, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/config.h.in b/contrib/bind9/config.h.in index bafcadd..e2f5999 100644 --- a/contrib/bind9/config.h.in +++ b/contrib/bind9/config.h.in @@ -1,6 +1,6 @@ /* config.h.in. Generated from configure.in by autoheader. */ /* - * Copyright (C) 2004, 2005, 2007, 2008 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004, 2005, 2007, 2008, 2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1999-2003 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -16,7 +16,7 @@ * PERFORMANCE OF THIS SOFTWARE. */ -/* $Id$ */ +/* $Id: acconfig.h,v 1.53 2008/12/01 23:47:44 tbox Exp $ */ /*! \file */ @@ -138,6 +138,9 @@ int sigwait(const unsigned int *set, int *sig); /* Define if OpenSSL includes DSA support */ #undef HAVE_OPENSSL_DSA +/* Define if OpenSSL includes ECDSA support */ +#undef HAVE_OPENSSL_ECDSA + /* Define to the length type used by the socket API (socklen_t, size_t, int). */ #undef ISC_SOCKADDR_LEN_T @@ -202,6 +205,9 @@ int sigwait(const unsigned int *set, int *sig); /* Define to 1 if you have the `EVP_sha256' function. */ #undef HAVE_EVP_SHA256 +/* Define to 1 if you have the `EVP_sha384' function. */ +#undef HAVE_EVP_SHA384 + /* Define to 1 if you have the `EVP_sha512' function. */ #undef HAVE_EVP_SHA512 diff --git a/contrib/bind9/configure.in b/contrib/bind9/configure.in index 2d7132c..a0ec700 100644 --- a/contrib/bind9/configure.in +++ b/contrib/bind9/configure.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004-2011 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2003 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any @@ -543,6 +543,7 @@ then fi done fi +OPENSSL_ECDSA="" OPENSSL_GOST="" case "$use_openssl" in no) @@ -698,7 +699,40 @@ esac else AC_MSG_RESULT(no) fi - AC_CHECK_FUNCS(EVP_sha256 EVP_sha512) + + AC_CHECK_FUNCS(EVP_sha256 EVP_sha384 EVP_sha512) + + AC_MSG_CHECKING(for OpenSSL ECDSA support) + have_ecdsa="" + AC_TRY_RUN([ +#include <stdio.h> +#include <openssl/ecdsa.h> +#include <openssl/objects.h> +int main() { + EC_KEY *ec256, *ec384; + +#if !defined(HAVE_EVP_SHA256) || !defined(HAVE_EVP_SHA384) + return (1); +#endif + ec256 = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1); + ec384 = EC_KEY_new_by_curve_name(NID_secp384r1); + if (ec256 == NULL || ec384 == NULL) + return (2); + return (0); +} +], + [AC_MSG_RESULT(yes) + have_ecdsa="yes"], + [AC_MSG_RESULT(no) + have_ecdsa="no"]) + case $have_ecdsa in + yes) + OPENSSL_ECDSA="yes" + AC_DEFINE(HAVE_OPENSSL_ECDSA) + ;; + *) + ;; + esac AC_MSG_CHECKING(for OpenSSL GOST support) have_gost="" @@ -772,7 +806,9 @@ AC_SUBST(USE_OPENSSL) AC_SUBST(DST_OPENSSL_INC) AC_SUBST(OPENSSLLINKOBJS) AC_SUBST(OPENSSLLINKSRCS) +AC_SUBST(OPENSSL_ECDSA) AC_SUBST(OPENSSL_GOST) + DNS_CRYPTO_LIBS="$DNS_CRYPTO_LIBS $DNS_OPENSSL_LIBS" # @@ -1222,7 +1258,7 @@ case "$use_libxml2" in ;; auto|yes) case X`(xml2-config --version) 2>/dev/null` in - X2.[[67]].*) + X2.[[678]].*) libxml2_libs=`xml2-config --libs` libxml2_cflags=`xml2-config --cflags` ;; @@ -3462,6 +3498,7 @@ AC_CONFIG_FILES([ bin/tests/system/dlz/prereq.sh bin/tests/system/dlzexternal/Makefile bin/tests/system/dlzexternal/ns1/named.conf + bin/tests/system/ecdsa/prereq.sh bin/tests/system/filter-aaaa/Makefile bin/tests/system/gost/prereq.sh bin/tests/system/lwresd/Makefile diff --git a/contrib/bind9/doc/Makefile.in b/contrib/bind9/doc/Makefile.in index 14d35bc..29074b5 100644 --- a/contrib/bind9/doc/Makefile.in +++ b/contrib/bind9/doc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004-2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000, 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/doc/arm/Bv9ARM-book.xml b/contrib/bind9/doc/arm/Bv9ARM-book.xml index 6137359..f3f862a 100644 --- a/contrib/bind9/doc/arm/Bv9ARM-book.xml +++ b/contrib/bind9/doc/arm/Bv9ARM-book.xml @@ -5212,7 +5212,11 @@ badresp:1,adberr:0,findfail:0,valfail:0] <optional> resolver-query-timeout <replaceable>number</replaceable> ; </optional> <optional> deny-answer-addresses { <replaceable>address_match_list</replaceable> } <optional> except-from { <replaceable>namelist</replaceable> } </optional>;</optional> <optional> deny-answer-aliases { <replaceable>namelist</replaceable> } <optional> except-from { <replaceable>namelist</replaceable> } </optional>;</optional> - <optional> response-policy { <replaceable>zone_name</replaceable> <optional> policy given | disabled | passthru | nxdomain | nodata | cname <replaceable>domain</replaceable> </optional> ; } ; </optional> + <optional> response-policy { <replaceable>zone_name</replaceable> + <optional> policy given | disabled | passthru | nxdomain | nodata | cname <replaceable>domain</replaceable> </optional> + <optional> recursive-only <replaceable>yes_or_no</replaceable> </optional> <optional> max-policy-ttl <replaceable>number</replaceable> </optional> ; + } <optional> recursive-only <replaceable>yes_or_no</replaceable> </optional> <optional> max-policy-ttl <replaceable>number</replaceable> </optional> + <optional> break-dnssec <replaceable>yes_or_no</replaceable> </optional> ; </optional> }; </programlisting> @@ -7280,8 +7284,8 @@ options { <listitem> <para> The amount of time the resolver will spend attempting - to resolve a recursive query before failing. The - default is <literal>10</literal> and the maximum is + to resolve a recursive query before failing. The default + and minimum is <literal>10</literal> and the maximum is <literal>30</literal>. Setting it to <literal>0</literal> will result in the default being used. </para> @@ -9266,17 +9270,15 @@ deny-answer-aliases { "example.net"; }; <sect3> <title>Response Policy Zone (RPZ) Rewriting</title> <para> - <acronym>BIND</acronym> 9 includes an intentionally limited - mechanism to modify DNS responses for recursive requests - somewhat similar to email anti-spam DNS blacklists. + <acronym>BIND</acronym> 9 includes a limited + mechanism to modify DNS responses for requests + analogous to email anti-spam DNS blacklists. Responses can be changed to deny the existence of domains(NXDOMAIN), deny the existence of IP addresses for domains (NODATA), or contain other IP addresses or data. </para> <para> - The actions encoded in a response policy zone (RPZ) are applied - only to queries that ask for recursion (RD=1). Response policy zones are named in the <command>response-policy</command> option for the view or among the global options if there is no response-policy option for the view. @@ -9287,22 +9289,21 @@ deny-answer-aliases { "example.net"; }; </para> <para> - There are four kinds of RPZ records, QNAME, IP, NSIP, + Four policy triggers are encoded in RPZ records, QNAME, IP, NSIP, and NSDNAME. - QNAME records are applied to query names of requests and targets + QNAME RPZ records triggered by query names of requests and targets of CNAME records resolved to generate the response. The owner name of a QNAME RPZ record is the query name relativized to the RPZ. </para> <para> - The second kind of RPZ record, an IP policy record, - is triggered by addresses in A and AAAA records - for the ANSWER sections of responses. - IP policy records have owner names that are - subdomains of <userinput>rpz-ip</userinput> relativized to the - RPZ origin name and encode an IP address or address block. - IPv4 addresses are encoded as + The second kind of RPZ trigger is an IP address in an A and AAAA + record in the ANSWER section of a response. + IP address triggers are encoded in records that have owner names + that are subdomains of <userinput>rpz-ip</userinput> relativized + to the RPZ origin name and encode an IP address or address block. + IPv4 trigger addresses are represented as <userinput>prefixlength.B4.B3.B2.B1.rpz-ip</userinput>. The prefix length must be between 1 and 32. All four bytes, B4, B3, B2, and B1, must be present. @@ -9321,43 +9322,45 @@ deny-answer-aliases { "example.net"; }; </para> <para> - NSDNAME policy records match names of authoritative servers - for the query name, a parent of the query name, a CNAME, - or a parent of a CNAME. + NSDNAME triggers match names of authoritative servers + for the query name, a parent of the query name, a CNAME for + query name, or a parent of a CNAME. They are encoded as subdomains of <userinput>rpz-nsdomain</userinput> relativized to the RPZ origin name. </para> <para> - NSIP policy records match IP addresses in A and AAAA RRsets - for domains that can be checked against NSDNAME policy records. - The are encoded like IP policies except as subdomains of + NSIP triggers match IP addresses in A and + AAAA RRsets for domains that can be checked against NSDNAME + policy records. + NSIP triggers are encoded like IP triggers except as subdomains of <userinput>rpz-nsip</userinput>. </para> <para> The query response is checked against all RPZs, so - two or more policy records can apply to a single response. - Because DNS responses can be rewritten according by at most a - single policy record, a single policy (other than - <command>DISABLED</command> policies) must be chosen. - Policies are chosen in the following order: + two or more policy records can be triggered by a response. + Because DNS responses can be rewritten according to at most one + policy record, a single record encoding an action (other than + <command>DISABLED</command> actions) must be chosen. + Triggers or the records that encode them are chosen in + the following order: <itemizedlist> - <listitem>Among applicable zones, use the RPZ that appears first - in the response-policy option. + <listitem>Choose the triggered record in the zone that appears + first in the response-policy option. </listitem> - <listitem>Prefer QNAME to IP to NSDNAME to NSIP policy records - in a single RPZ + <listitem>Prefer QNAME to IP to NSDNAME to NSIP triggers + in a single zone. </listitem> - <listitem>Among applicable NSDNAME policy records, prefer the - policy record that matches the lexically smallest name + <listitem>Among NSDNAME triggers, prefer the + trigger that matches the smallest name under the DNSSEC ordering. </listitem> - <listitem>Among IP or NSIP policy records, prefer the record + <listitem>Among IP or NSIP triggers, prefer the trigger with the longest prefix. </listitem> - <listitem>Among records with the same prefex length, - prefer the IP or NSIP policy record that matches + <listitem>Among triggers with the same prefex length, + prefer the IP or NSIP trigger that matches the smallest IP address. </listitem> </itemizedlist> @@ -9365,8 +9368,8 @@ deny-answer-aliases { "example.net"; }; <para> When the processing of a response is restarted to resolve - DNAME or CNAME records and an applicable policy record set has - not been found, + DNAME or CNAME records and a policy record set has + not been triggered, all RPZs are again consulted for the DNAME or CNAME names and addresses. </para> @@ -9383,55 +9386,56 @@ deny-answer-aliases { "example.net"; }; </para> <para> - RPZ record sets are special CNAME records or one or more - of any types of DNS record except DNAME or DNSSEC. - Except when a policy record is a CNAME, there can be more - more than one record and more than one type - in a set of policy records. - Except for three kinds of CNAME records that are illegal except - in policy zones, the records in a set are used in the response as if - their owner name were the query name. They are copied to the - response as dictated by their types. + RPZ record sets are sets of any types of DNS record except + DNAME or DNSSEC that encode actions or responses to queries. <itemizedlist> - <listitem>A CNAME whose target is the root domain (.) - specifies the <command>NXDOMAIN</command> policy, - which generates an NXDOMAIN response. + <listitem>The <command>NXDOMAIN</command> response is encoded + by a CNAME whose target is the root domain (.) </listitem> <listitem>A CNAME whose target is the wildcard top-level - domain (*.) specifies the <command>NODATA</command> policy, + domain (*.) specifies the <command>NODATA</command> action, which rewrites the response to NODATA or ANCOUNT=1. </listitem> - <listitem>A CNAME whose target is a wildcard hostname such - as *.example.com is used normally after the astrisk (*) + <listitem>The <command>Local Data</command> action is + represented by a set ordinary DNS records that are used + to answer queries. Queries for record types not the + set are answered with NODATA. + + A special form of local data is a CNAME whose target is a + wildcard such as *.example.com. + It is used as if were an ordinary CNAME after the astrisk (*) has been replaced with the query name. - These records are usually resolved with ordinary CNAMEs - outside the policy zones. They can be useful for logging. + The purpose for this special form is query logging in the + walled garden's authority DNS server. </listitem> <listitem>The <command>PASSTHRU</command> policy is specified - by a CNAME whose target is the variable part of its own - owner name. It causes the response to not be rewritten + by a CNAME whose target is <command>rpz_passthru.</command> + It causes the response to not be rewritten and is most often used to "poke holes" in policies for CIDR blocks. + (A CNAME whose target is the variable part of its owner name + is an obsolete specification of the PASSTHRU policy.) </listitem> </itemizedlist> </para> <para> - The policies specified in individual records - in an RPZ can be overridden with a <command>policy</command> clause - in the <command>response-policy</command> option. + The actions specified in an RPZ can be overridden with a + <command>policy</command> clause in the + <command>response-policy</command> option. An organization using an RPZ provided by another organization might use this mechanism to redirect domains to its own walled garden. <itemizedlist> - <listitem><command>GIVEN</command> says "do not override." + <listitem><command>GIVEN</command> says "do not override but + perform the action specified in the zone." </listitem> <listitem><command>DISABLED</command> causes policy records to do nothing but log what they might have done. The response to the DNS query will be written according to - any matching policy records that are not disabled. - Policy zones overridden with <command>DISABLED</command> should - appear first, because they will often not be logged - if a higher precedence policy is found first. + any triggered policy records that are not disabled. + Disabled policy zones should appear first, + because they will often not be logged + if a higher precedence trigger is found first. </listitem> <listitem><command>PASSTHRU</command> causes all policy records to act as if they were CNAME records with targets the variable @@ -9451,6 +9455,37 @@ deny-answer-aliases { "example.net"; }; </para> <para> + By default, the actions encoded in an RPZ are applied + only to queries that ask for recursion (RD=1). + That default can be changed for a single RPZ or all RPZs in a view + with a <command>recursive-only no</command> clause. + This feature is useful for serving the same zone files + both inside and outside an RFC 1918 cloud and using RPZ to + delete answers that would otherwise contain RFC 1918 values + on the externally visible name server or view. + </para> + + <para> + Also by default, RPZ actions are applied only to DNS requests that + either do not request DNSSEC metadata (DO=0) or when no DNSSEC + records are available for request name in the original zone (not + the response policy zone). + This default can be changed for all RPZs in a view with a + <command>break-dnssec yes</command> clause. + In that case, RPZ actions are applied regardless of DNSSEC. + The name of the clause option reflects the fact that results + rewritten by RPZ actions cannot verify. + </para> + + <para> + The TTL of a record modified by RPZ policies is set from the + TTL of the relevant record in policy zone. It is then limited + to a maximum value. + The <command>max-policy-ttl</command> clause changes that + maximum from its default of 5. + </para> + + <para> For example, you might use this option statement </para> <programlisting> response-policy { zone "badlist"; };</programlisting> @@ -9472,7 +9507,7 @@ bad.domain.com A 10.0.0.1 ; redirect to a walled garden AAAA 2001:2::1 ; do not rewrite (PASSTHRU) OK.DOMAIN.COM -ok.domain.com CNAME ok.domain.com. +ok.domain.com CNAME rpz-passthru. bzone.domain.com CNAME garden.example.com. @@ -9482,7 +9517,7 @@ bzone.domain.com CNAME garden.example.com. ; IP policy records that rewrite all answers for 127/8 except 127.0.0.1 8.0.0.0.127.rpz-ip CNAME . -32.1.0.0.127.rpz-ip CNAME 32.1.0.0.127. ; PASSTHRU for 127.0.0.1 +32.1.0.0.127.rpz-ip CNAME rpz-passthru. ; NSDNAME and NSIP policy records ns.domain.com.rpz-nsdname CNAME . @@ -11527,7 +11562,7 @@ example.com. NS ns2.example.net. (machine$@REALM) for machine in REALM and and converts it machine.realm allowing the machine to update machine.realm. The REALM to be matched - is specified in the <replacable>identity</replacable> + is specified in the <replaceable>identity</replaceable> field. </para> </entry> @@ -11544,7 +11579,7 @@ example.com. NS ns2.example.net. converts it to machine.realm allowing the machine to update subdomains of machine.realm. The REALM to be matched is specified in the - <replacable>identity</replacable> field. + <replaceable>identity</replaceable> field. </para> </entry> </row> @@ -11559,7 +11594,7 @@ example.com. NS ns2.example.net. (host/machine@REALM) for machine in REALM and and converts it machine.realm allowing the machine to update machine.realm. The REALM to be matched - is specified in the <replacable>identity</replacable> + is specified in the <replaceable>identity</replaceable> field. </para> </entry> @@ -11576,7 +11611,7 @@ example.com. NS ns2.example.net. converts it to machine.realm allowing the machine to update subdomains of machine.realm. The REALM to be matched is specified in the - <replacable>identity</replacable> field. + <replaceable>identity</replaceable> field. </para> </entry> </row> diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch04.html b/contrib/bind9/doc/arm/Bv9ARM.ch04.html index 202439f..8e77a6b 100644 --- a/contrib/bind9/doc/arm/Bv9ARM.ch04.html +++ b/contrib/bind9/doc/arm/Bv9ARM.ch04.html @@ -70,33 +70,33 @@ </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch04.html#dnssec.dynamic.zones">DNSSEC, Dynamic Zones, and Automatic Signing</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571421">Converting from insecure to secure</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571459">Dynamic DNS update method</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563508">Fully automatic zone signing</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563590">Private-type records</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563696">DNSKEY rollovers</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563708">Dynamic DNS update method</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563741">Automatic key rollovers</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563836">NSEC3PARAM rollovers via UPDATE</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563846">Converting from NSEC to NSEC3</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563856">Converting from NSEC3 to NSEC</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563868">Converting from secure to insecure</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563906">Periodic re-signing</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563915">NSEC3 and OPTOUT</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571475">Converting from insecure to secure</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571512">Dynamic DNS update method</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563493">Fully automatic zone signing</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563575">Private-type records</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563612">DNSKEY rollovers</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563762">Dynamic DNS update method</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563795">Automatic key rollovers</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563821">NSEC3PARAM rollovers via UPDATE</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563899">Converting from NSEC to NSEC3</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563909">Converting from NSEC3 to NSEC</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563922">Converting from secure to insecure</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571605">Periodic re-signing</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571614">NSEC3 and OPTOUT</a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch04.html#rfc5011.support">Dynamic Trust Anchor Management</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571685">Validating Resolver</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571707">Authoritative Server</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2607510">Validating Resolver</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571692">Authoritative Server</a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch04.html#pkcs11">PKCS #11 (Cryptoki) support</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2609970">Prerequisites</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608219">Building BIND 9 with PKCS#11</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2610529">PKCS #11 Tools</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2610560">Using the HSM</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2635129">Specifying the engine on the command line</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2635243">Running named with automatic zone re-signing</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2610637">Prerequisites</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608477">Building BIND 9 with PKCS#11</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608602">PKCS #11 Tools</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2634916">Using the HSM</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2635114">Specifying the engine on the command line</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2635160">Running named with automatic zone re-signing</a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2572669">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt> <dd><dl> @@ -1067,7 +1067,7 @@ options { from insecure to signed and back again. A secure zone can use either NSEC or NSEC3 chains.</p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2571421"></a>Converting from insecure to secure</h3></div></div></div></div> +<a name="id2571475"></a>Converting from insecure to secure</h3></div></div></div></div> <p>Changing a zone from insecure to secure can be done in two ways: using a dynamic DNS update, or the <span><strong class="command">auto-dnssec</strong></span> zone option.</p> @@ -1093,7 +1093,7 @@ options { well. An NSEC chain will be generated as part of the initial signing process.</p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2571459"></a>Dynamic DNS update method</h3></div></div></div></div> +<a name="id2571512"></a>Dynamic DNS update method</h3></div></div></div></div> <p>To insert the keys via dynamic update:</p> <pre class="screen"> % nsupdate @@ -1129,7 +1129,7 @@ options { <p>While the initial signing and NSEC/NSEC3 chain generation is happening, other updates are possible as well.</p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2563508"></a>Fully automatic zone signing</h3></div></div></div></div> +<a name="id2563493"></a>Fully automatic zone signing</h3></div></div></div></div> <p>To enable automatic signing, add the <span><strong class="command">auto-dnssec</strong></span> option to the zone statement in <code class="filename">named.conf</code>. @@ -1164,7 +1164,7 @@ options { configuration. If this has not been done, the configuration will fail.</p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2563590"></a>Private-type records</h3></div></div></div></div> +<a name="id2563575"></a>Private-type records</h3></div></div></div></div> <p>The state of the signing process is signaled by private-type records (with a default type value of 65534). When signing is complete, these records will have a nonzero value for @@ -1205,12 +1205,12 @@ options { <p> </p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2563696"></a>DNSKEY rollovers</h3></div></div></div></div> +<a name="id2563612"></a>DNSKEY rollovers</h3></div></div></div></div> <p>As with insecure-to-secure conversions, rolling DNSSEC keys can be done in two ways: using a dynamic DNS update, or the <span><strong class="command">auto-dnssec</strong></span> zone option.</p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2563708"></a>Dynamic DNS update method</h3></div></div></div></div> +<a name="id2563762"></a>Dynamic DNS update method</h3></div></div></div></div> <p> To perform key rollovers via dynamic update, you need to add the <code class="filename">K*</code> files for the new keys so that <span><strong class="command">named</strong></span> can find them. You can then add the new @@ -1232,7 +1232,7 @@ options { <span><strong class="command">named</strong></span> will clean out any signatures generated by the old key after the update completes.</p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2563741"></a>Automatic key rollovers</h3></div></div></div></div> +<a name="id2563795"></a>Automatic key rollovers</h3></div></div></div></div> <p>When a new key reaches its activation date (as set by <span><strong class="command">dnssec-keygen</strong></span> or <span><strong class="command">dnssec-settime</strong></span>), if the <span><strong class="command">auto-dnssec</strong></span> zone option is set to @@ -1247,27 +1247,27 @@ options { completes in 30 days, after which it will be safe to remove the old key from the DNSKEY RRset.</p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2563836"></a>NSEC3PARAM rollovers via UPDATE</h3></div></div></div></div> +<a name="id2563821"></a>NSEC3PARAM rollovers via UPDATE</h3></div></div></div></div> <p>Add the new NSEC3PARAM record via dynamic update. When the new NSEC3 chain has been generated, the NSEC3PARAM flag field will be zero. At this point you can remove the old NSEC3PARAM record. The old chain will be removed after the update request completes.</p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2563846"></a>Converting from NSEC to NSEC3</h3></div></div></div></div> +<a name="id2563899"></a>Converting from NSEC to NSEC3</h3></div></div></div></div> <p>To do this, you just need to add an NSEC3PARAM record. When the conversion is complete, the NSEC chain will have been removed and the NSEC3PARAM record will have a zero flag field. The NSEC3 chain will be generated before the NSEC chain is destroyed.</p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2563856"></a>Converting from NSEC3 to NSEC</h3></div></div></div></div> +<a name="id2563909"></a>Converting from NSEC3 to NSEC</h3></div></div></div></div> <p>To do this, use <span><strong class="command">nsupdate</strong></span> to remove all NSEC3PARAM records with a zero flag field. The NSEC chain will be generated before the NSEC3 chain is removed.</p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2563868"></a>Converting from secure to insecure</h3></div></div></div></div> +<a name="id2563922"></a>Converting from secure to insecure</h3></div></div></div></div> <p>To convert a signed zone to unsigned using dynamic DNS, delete all the DNSKEY records from the zone apex using <span><strong class="command">nsupdate</strong></span>. All signatures, NSEC or NSEC3 chains, @@ -1282,14 +1282,14 @@ options { <span><strong class="command">allow</strong></span> instead (or it will re-sign). </p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2563906"></a>Periodic re-signing</h3></div></div></div></div> +<a name="id2571605"></a>Periodic re-signing</h3></div></div></div></div> <p>In any secure zone which supports dynamic updates, named will periodically re-sign RRsets which have not been re-signed as a result of some update action. The signature lifetimes will be adjusted so as to spread the re-sign load over time rather than all at once.</p> <div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"> -<a name="id2563915"></a>NSEC3 and OPTOUT</h3></div></div></div></div> +<a name="id2571614"></a>NSEC3 and OPTOUT</h3></div></div></div></div> <p> <span><strong class="command">named</strong></span> only supports creating new NSEC3 chains where all the NSEC3 records in the zone have the same OPTOUT @@ -1311,7 +1311,7 @@ options { configuration files.</p> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2571685"></a>Validating Resolver</h3></div></div></div> +<a name="id2607510"></a>Validating Resolver</h3></div></div></div> <p>To configure a validating resolver to use RFC 5011 to maintain a trust anchor, configure the trust anchor using a <span><strong class="command">managed-keys</strong></span> statement. Information about @@ -1322,7 +1322,7 @@ options { </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2571707"></a>Authoritative Server</h3></div></div></div> +<a name="id2571692"></a>Authoritative Server</h3></div></div></div> <p>To set up an authoritative zone for RFC 5011 trust anchor maintenance, generate two (or more) key signing keys (KSKs) for the zone. Sign the zone with one of them; this is the "active" @@ -1396,7 +1396,7 @@ $ <strong class="userinput"><code>dnssec-signzone -S -K keys example.net</code>< Debian Linux, Solaris x86 and Windows Server 2003.</p> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2609970"></a>Prerequisites</h3></div></div></div> +<a name="id2610637"></a>Prerequisites</h3></div></div></div> <p>See the HSM vendor documentation for information about installing, initializing, testing and troubleshooting the HSM.</p> @@ -1473,7 +1473,7 @@ $ <strong class="userinput"><code>patch -p1 -d openssl-0.9.8s \ when we configure BIND 9.</p> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2607881"></a>Building OpenSSL for the AEP Keyper on Linux</h4></div></div></div> +<a name="id2608071"></a>Building OpenSSL for the AEP Keyper on Linux</h4></div></div></div> <p>The AEP Keyper is a highly secure key storage device, but does not provide hardware cryptographic acceleration. It can carry out cryptographic operations, but it is probably @@ -1505,7 +1505,7 @@ $ <strong class="userinput"><code>./Configure linux-generic32 -m32 -pthread \ </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2608019"></a>Building OpenSSL for the SCA 6000 on Solaris</h4></div></div></div> +<a name="id2608140"></a>Building OpenSSL for the SCA 6000 on Solaris</h4></div></div></div> <p>The SCA-6000 PKCS #11 provider is installed as a system library, libpkcs11. It is a true crypto accelerator, up to 4 times faster than any CPU, so the flavor shall be @@ -1527,7 +1527,7 @@ $ <strong class="userinput"><code>./Configure solaris64-x86_64-cc \ </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2608068"></a>Building OpenSSL for SoftHSM</h4></div></div></div> +<a name="id2608189"></a>Building OpenSSL for SoftHSM</h4></div></div></div> <p>SoftHSM is a software library provided by the OpenDNSSEC project (http://www.opendnssec.org) which provides a PKCS#11 interface to a virtual HSM, implemented in the form of encrypted @@ -1587,12 +1587,12 @@ $ <strong class="userinput"><code>./Configure linux-x86_64 -pthread \ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2608219"></a>Building BIND 9 with PKCS#11</h3></div></div></div> +<a name="id2608477"></a>Building BIND 9 with PKCS#11</h3></div></div></div> <p>When building BIND 9, the location of the custom-built OpenSSL library must be specified via configure.</p> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2608228"></a>Configuring BIND 9 for Linux with the AEP Keyper</h4></div></div></div> +<a name="id2608486"></a>Configuring BIND 9 for Linux with the AEP Keyper</h4></div></div></div> <p>To link with the PKCS #11 provider, threads must be enabled in the BIND 9 build.</p> <p>The PKCS #11 library for the AEP Keyper is currently @@ -1608,7 +1608,7 @@ $ <strong class="userinput"><code>./configure CC="gcc -m32" --enable-threads \ </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2608260"></a>Configuring BIND 9 for Solaris with the SCA 6000</h4></div></div></div> +<a name="id2608518"></a>Configuring BIND 9 for Solaris with the SCA 6000</h4></div></div></div> <p>To link with the PKCS #11 provider, threads must be enabled in the BIND 9 build.</p> <pre class="screen"> @@ -1626,7 +1626,7 @@ $ <strong class="userinput"><code>./configure CC="cc -xarch=amd64" --enable-thre </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2610481"></a>Configuring BIND 9 for SoftHSM</h4></div></div></div> +<a name="id2608554"></a>Configuring BIND 9 for SoftHSM</h4></div></div></div> <pre class="screen"> $ <strong class="userinput"><code>cd ../bind9</code></strong> $ <strong class="userinput"><code>./configure --enable-threads \ @@ -1643,7 +1643,7 @@ $ <strong class="userinput"><code>./configure --enable-threads \ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2610529"></a>PKCS #11 Tools</h3></div></div></div> +<a name="id2608602"></a>PKCS #11 Tools</h3></div></div></div> <p>BIND 9 includes a minimal set of tools to operate the HSM, including <span><strong class="command">pkcs11-keygen</strong></span> to generate a new key pair @@ -1661,7 +1661,7 @@ $ <strong class="userinput"><code>./configure --enable-threads \ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2610560"></a>Using the HSM</h3></div></div></div> +<a name="id2634916"></a>Using the HSM</h3></div></div></div> <p>First, we must set up the runtime environment so the OpenSSL and PKCS #11 libraries can be loaded:</p> <pre class="screen"> @@ -1749,7 +1749,7 @@ example.net.signed </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2635129"></a>Specifying the engine on the command line</h3></div></div></div> +<a name="id2635114"></a>Specifying the engine on the command line</h3></div></div></div> <p>The OpenSSL engine can be specified in <span><strong class="command">named</strong></span> and all of the BIND <span><strong class="command">dnssec-*</strong></span> tools by using the "-E @@ -1770,7 +1770,7 @@ $ <strong class="userinput"><code>dnssec-signzone -E '' -S example.net</code></s </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2635243"></a>Running named with automatic zone re-signing</h3></div></div></div> +<a name="id2635160"></a>Running named with automatic zone re-signing</h3></div></div></div> <p>If you want <span><strong class="command">named</strong></span> to dynamically re-sign zones using HSM keys, and/or to to sign new records inserted via nsupdate, then diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch06.html b/contrib/bind9/doc/arm/Bv9ARM.ch06.html index 8e7bac3..bda489d 100644 --- a/contrib/bind9/doc/arm/Bv9ARM.ch06.html +++ b/contrib/bind9/doc/arm/Bv9ARM.ch06.html @@ -78,28 +78,28 @@ <dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_definition_and_usage"><span><strong class="command">server</strong></span> Statement Definition and Usage</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#statschannels"><span><strong class="command">statistics-channels</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589481"><span><strong class="command">statistics-channels</strong></span> Statement Definition and +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589534"><span><strong class="command">statistics-channels</strong></span> Statement Definition and Usage</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#trusted-keys"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589689"><span><strong class="command">trusted-keys</strong></span> Statement Definition +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589742"><span><strong class="command">trusted-keys</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589736"><span><strong class="command">managed-keys</strong></span> Statement Grammar</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589858"><span><strong class="command">managed-keys</strong></span> Statement Grammar</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#managed-keys"><span><strong class="command">managed-keys</strong></span> Statement Definition and Usage</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#view_statement_grammar"><span><strong class="command">view</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590162"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590352"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#zone_statement_grammar"><span><strong class="command">zone</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591713"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591902"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt> </dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2595116">Zone File</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2595170">Zone File</a></span></dt> <dd><dl> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them">Types of Resource Records and When to Use Them</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2597415">Discussion of MX Records</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2597537">Discussion of MX Records</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#Setting_TTLs">Setting TTLs</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2597962">Inverse Mapping in IPv4</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598157">Other Zone File Directives</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598430"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598084">Inverse Mapping in IPv4</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598211">Other Zone File Directives</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598552"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch06.html#statistics">BIND9 Statistics</a></span></dt> @@ -2277,7 +2277,11 @@ badresp:1,adberr:0,findfail:0,valfail:0] [<span class="optional"> resolver-query-timeout <em class="replaceable"><code>number</code></em> ; </span>] [<span class="optional"> deny-answer-addresses { <em class="replaceable"><code>address_match_list</code></em> } [<span class="optional"> except-from { <em class="replaceable"><code>namelist</code></em> } </span>];</span>] [<span class="optional"> deny-answer-aliases { <em class="replaceable"><code>namelist</code></em> } [<span class="optional"> except-from { <em class="replaceable"><code>namelist</code></em> } </span>];</span>] - [<span class="optional"> response-policy { <em class="replaceable"><code>zone_name</code></em> [<span class="optional"> policy given | disabled | passthru | nxdomain | nodata | cname <em class="replaceable"><code>domain</code></em> </span>] ; } ; </span>] + [<span class="optional"> response-policy { <em class="replaceable"><code>zone_name</code></em> + [<span class="optional"> policy given | disabled | passthru | nxdomain | nodata | cname <em class="replaceable"><code>domain</code></em> </span>] + [<span class="optional"> recursive-only <em class="replaceable"><code>yes_or_no</code></em> </span>] [<span class="optional"> max-policy-ttl <em class="replaceable"><code>number</code></em> </span>] ; + } [<span class="optional"> recursive-only <em class="replaceable"><code>yes_or_no</code></em> </span>] [<span class="optional"> max-policy-ttl <em class="replaceable"><code>number</code></em> </span>] + [<span class="optional"> break-dnssec <em class="replaceable"><code>yes_or_no</code></em> </span>] ; </span>] }; </pre> </div> @@ -3665,7 +3669,7 @@ options { </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2583643"></a>Forwarding</h4></div></div></div> +<a name="id2583675"></a>Forwarding</h4></div></div></div> <p> The forwarding facility can be used to create a large site-wide cache on a few servers, reducing traffic over links to external @@ -3709,7 +3713,7 @@ options { </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2583702"></a>Dual-stack Servers</h4></div></div></div> +<a name="id2583734"></a>Dual-stack Servers</h4></div></div></div> <p> Dual-stack servers are used as servers of last resort to work around @@ -3911,8 +3915,8 @@ options { <dt><span class="term"><span><strong class="command">resolver-query-timeout</strong></span></span></dt> <dd><p> The amount of time the resolver will spend attempting - to resolve a recursive query before failing. The - default is <code class="literal">10</code> and the maximum is + to resolve a recursive query before failing. The default + and minimum is <code class="literal">10</code> and the maximum is <code class="literal">30</code>. Setting it to <code class="literal">0</code> will result in the default being used. </p></dd> @@ -3920,7 +3924,7 @@ options { </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2584322"></a>Interfaces</h4></div></div></div> +<a name="id2584422"></a>Interfaces</h4></div></div></div> <p> The interfaces and ports that the server will answer queries from may be specified using the <span><strong class="command">listen-on</strong></span> option. <span><strong class="command">listen-on</strong></span> takes @@ -4379,7 +4383,7 @@ avoid-v6-udp-ports {}; </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2585531"></a>UDP Port Lists</h4></div></div></div> +<a name="id2585495"></a>UDP Port Lists</h4></div></div></div> <p> <span><strong class="command">use-v4-udp-ports</strong></span>, <span><strong class="command">avoid-v4-udp-ports</strong></span>, @@ -4421,7 +4425,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; }; </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2585591"></a>Operating System Resource Limits</h4></div></div></div> +<a name="id2585555"></a>Operating System Resource Limits</h4></div></div></div> <p> The server's usage of many system resources can be limited. Scaled values are allowed when specifying resource limits. For @@ -4583,7 +4587,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; }; </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2586082"></a>Periodic Task Intervals</h4></div></div></div> +<a name="id2586114"></a>Periodic Task Intervals</h4></div></div></div> <div class="variablelist"><dl> <dt><span class="term"><span><strong class="command">cleaning-interval</strong></span></span></dt> <dd><p> @@ -5423,7 +5427,7 @@ avoid-v6-udp-ports { 40000; range 50000 60000; }; </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2588188"></a>Content Filtering</h4></div></div></div> +<a name="id2588152"></a>Content Filtering</h4></div></div></div> <p> <acronym class="acronym">BIND</acronym> 9 provides the ability to filter out DNS responses from external DNS servers containing @@ -5546,18 +5550,16 @@ deny-answer-aliases { "example.net"; }; </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2588379"></a>Response Policy Zone (RPZ) Rewriting</h4></div></div></div> +<a name="id2588343"></a>Response Policy Zone (RPZ) Rewriting</h4></div></div></div> <p> - <acronym class="acronym">BIND</acronym> 9 includes an intentionally limited - mechanism to modify DNS responses for recursive requests - somewhat similar to email anti-spam DNS blacklists. + <acronym class="acronym">BIND</acronym> 9 includes a limited + mechanism to modify DNS responses for requests + analogous to email anti-spam DNS blacklists. Responses can be changed to deny the existence of domains(NXDOMAIN), deny the existence of IP addresses for domains (NODATA), or contain other IP addresses or data. </p> <p> - The actions encoded in a response policy zone (RPZ) are applied - only to queries that ask for recursion (RD=1). Response policy zones are named in the <span><strong class="command">response-policy</strong></span> option for the view or among the global options if there is no response-policy option for the view. @@ -5567,21 +5569,20 @@ deny-answer-aliases { "example.net"; }; <span><strong class="command">allow-query { localhost; };</strong></span>. </p> <p> - There are four kinds of RPZ records, QNAME, IP, NSIP, + Four policy triggers are encoded in RPZ records, QNAME, IP, NSIP, and NSDNAME. - QNAME records are applied to query names of requests and targets + QNAME RPZ records triggered by query names of requests and targets of CNAME records resolved to generate the response. The owner name of a QNAME RPZ record is the query name relativized to the RPZ. </p> <p> - The second kind of RPZ record, an IP policy record, - is triggered by addresses in A and AAAA records - for the ANSWER sections of responses. - IP policy records have owner names that are - subdomains of <strong class="userinput"><code>rpz-ip</code></strong> relativized to the - RPZ origin name and encode an IP address or address block. - IPv4 addresses are encoded as + The second kind of RPZ trigger is an IP address in an A and AAAA + record in the ANSWER section of a response. + IP address triggers are encoded in records that have owner names + that are subdomains of <strong class="userinput"><code>rpz-ip</code></strong> relativized + to the RPZ origin name and encode an IP address or address block. + IPv4 trigger addresses are represented as <strong class="userinput"><code>prefixlength.B4.B3.B2.B1.rpz-ip</code></strong>. The prefix length must be between 1 and 32. All four bytes, B4, B3, B2, and B1, must be present. @@ -5599,42 +5600,44 @@ deny-answer-aliases { "example.net"; }; The prefix length must be between 1 and 128. </p> <p> - NSDNAME policy records match names of authoritative servers - for the query name, a parent of the query name, a CNAME, - or a parent of a CNAME. + NSDNAME triggers match names of authoritative servers + for the query name, a parent of the query name, a CNAME for + query name, or a parent of a CNAME. They are encoded as subdomains of <strong class="userinput"><code>rpz-nsdomain</code></strong> relativized to the RPZ origin name. </p> <p> - NSIP policy records match IP addresses in A and AAAA RRsets - for domains that can be checked against NSDNAME policy records. - The are encoded like IP policies except as subdomains of + NSIP triggers match IP addresses in A and + AAAA RRsets for domains that can be checked against NSDNAME + policy records. + NSIP triggers are encoded like IP triggers except as subdomains of <strong class="userinput"><code>rpz-nsip</code></strong>. </p> <p> The query response is checked against all RPZs, so - two or more policy records can apply to a single response. - Because DNS responses can be rewritten according by at most a - single policy record, a single policy (other than - <span><strong class="command">DISABLED</strong></span> policies) must be chosen. - Policies are chosen in the following order: + two or more policy records can be triggered by a response. + Because DNS responses can be rewritten according to at most one + policy record, a single record encoding an action (other than + <span><strong class="command">DISABLED</strong></span> actions) must be chosen. + Triggers or the records that encode them are chosen in + the following order: </p> <div class="itemizedlist"><ul type="disc"> -<li>Among applicable zones, use the RPZ that appears first - in the response-policy option. +<li>Choose the triggered record in the zone that appears + first in the response-policy option. </li> -<li>Prefer QNAME to IP to NSDNAME to NSIP policy records - in a single RPZ +<li>Prefer QNAME to IP to NSDNAME to NSIP triggers + in a single zone. </li> -<li>Among applicable NSDNAME policy records, prefer the - policy record that matches the lexically smallest name +<li>Among NSDNAME triggers, prefer the + trigger that matches the smallest name under the DNSSEC ordering. </li> -<li>Among IP or NSIP policy records, prefer the record +<li>Among IP or NSIP triggers, prefer the trigger with the longest prefix. </li> -<li>Among records with the same prefex length, - prefer the IP or NSIP policy record that matches +<li>Among triggers with the same prefex length, + prefer the IP or NSIP trigger that matches the smallest IP address. </li> </ul></div> @@ -5642,8 +5645,8 @@ deny-answer-aliases { "example.net"; }; </p> <p> When the processing of a response is restarted to resolve - DNAME or CNAME records and an applicable policy record set has - not been found, + DNAME or CNAME records and a policy record set has + not been triggered, all RPZs are again consulted for the DNAME or CNAME names and addresses. </p> @@ -5658,59 +5661,60 @@ deny-answer-aliases { "example.net"; }; on the "configure" command line. </p> <p> - RPZ record sets are special CNAME records or one or more - of any types of DNS record except DNAME or DNSSEC. - Except when a policy record is a CNAME, there can be more - more than one record and more than one type - in a set of policy records. - Except for three kinds of CNAME records that are illegal except - in policy zones, the records in a set are used in the response as if - their owner name were the query name. They are copied to the - response as dictated by their types. + RPZ record sets are sets of any types of DNS record except + DNAME or DNSSEC that encode actions or responses to queries. </p> <div class="itemizedlist"><ul type="disc"> -<li>A CNAME whose target is the root domain (.) - specifies the <span><strong class="command">NXDOMAIN</strong></span> policy, - which generates an NXDOMAIN response. +<li>The <span><strong class="command">NXDOMAIN</strong></span> response is encoded + by a CNAME whose target is the root domain (.) </li> <li>A CNAME whose target is the wildcard top-level - domain (*.) specifies the <span><strong class="command">NODATA</strong></span> policy, + domain (*.) specifies the <span><strong class="command">NODATA</strong></span> action, which rewrites the response to NODATA or ANCOUNT=1. </li> -<li>A CNAME whose target is a wildcard hostname such - as *.example.com is used normally after the astrisk (*) +<li>The <span><strong class="command">Local Data</strong></span> action is + represented by a set ordinary DNS records that are used + to answer queries. Queries for record types not the + set are answered with NODATA. + + A special form of local data is a CNAME whose target is a + wildcard such as *.example.com. + It is used as if were an ordinary CNAME after the astrisk (*) has been replaced with the query name. - These records are usually resolved with ordinary CNAMEs - outside the policy zones. They can be useful for logging. + The purpose for this special form is query logging in the + walled garden's authority DNS server. </li> <li>The <span><strong class="command">PASSTHRU</strong></span> policy is specified - by a CNAME whose target is the variable part of its own - owner name. It causes the response to not be rewritten + by a CNAME whose target is <span><strong class="command">rpz_passthru.</strong></span> + It causes the response to not be rewritten and is most often used to "poke holes" in policies for CIDR blocks. + (A CNAME whose target is the variable part of its owner name + is an obsolete specification of the PASSTHRU policy.) </li> </ul></div> <p> </p> <p> - The policies specified in individual records - in an RPZ can be overridden with a <span><strong class="command">policy</strong></span> clause - in the <span><strong class="command">response-policy</strong></span> option. + The actions specified in an RPZ can be overridden with a + <span><strong class="command">policy</strong></span> clause in the + <span><strong class="command">response-policy</strong></span> option. An organization using an RPZ provided by another organization might use this mechanism to redirect domains to its own walled garden. </p> <div class="itemizedlist"><ul type="disc"> <li> -<span><strong class="command">GIVEN</strong></span> says "do not override." +<span><strong class="command">GIVEN</strong></span> says "do not override but + perform the action specified in the zone." </li> <li> <span><strong class="command">DISABLED</strong></span> causes policy records to do nothing but log what they might have done. The response to the DNS query will be written according to - any matching policy records that are not disabled. - Policy zones overridden with <span><strong class="command">DISABLED</strong></span> should - appear first, because they will often not be logged - if a higher precedence policy is found first. + any triggered policy records that are not disabled. + Disabled policy zones should appear first, + because they will often not be logged + if a higher precedence trigger is found first. </li> <li> <span><strong class="command">PASSTHRU</strong></span> causes all policy records @@ -5734,6 +5738,34 @@ deny-answer-aliases { "example.net"; }; <p> </p> <p> + By default, the actions encoded in an RPZ are applied + only to queries that ask for recursion (RD=1). + That default can be changed for a single RPZ or all RPZs in a view + with a <span><strong class="command">recursive-only no</strong></span> clause. + This feature is useful for serving the same zone files + both inside and outside an RFC 1918 cloud and using RPZ to + delete answers that would otherwise contain RFC 1918 values + on the externally visible name server or view. + </p> +<p> + Also by default, RPZ actions are applied only to DNS requests that + either do not request DNSSEC metadata (DO=0) or when no DNSSEC + records are available for request name in the original zone (not + the response policy zone). + This default can be changed for all RPZs in a view with a + <span><strong class="command">break-dnssec yes</strong></span> clause. + In that case, RPZ actions are applied regardless of DNSSEC. + The name of the clause option reflects the fact that results + rewritten by RPZ actions cannot verify. + </p> +<p> + The TTL of a record modified by RPZ policies is set from the + TTL of the relevant record in policy zone. It is then limited + to a maximum value. + The <span><strong class="command">max-policy-ttl</strong></span> clause changes that + maximum from its default of 5. + </p> +<p> For example, you might use this option statement </p> <pre class="programlisting"> response-policy { zone "badlist"; };</pre> @@ -5755,7 +5787,7 @@ bad.domain.com A 10.0.0.1 ; redirect to a walled garden AAAA 2001:2::1 ; do not rewrite (PASSTHRU) OK.DOMAIN.COM -ok.domain.com CNAME ok.domain.com. +ok.domain.com CNAME rpz-passthru. bzone.domain.com CNAME garden.example.com. @@ -5765,7 +5797,7 @@ bzone.domain.com CNAME garden.example.com. ; IP policy records that rewrite all answers for 127/8 except 127.0.0.1 8.0.0.0.127.rpz-ip CNAME . -32.1.0.0.127.rpz-ip CNAME 32.1.0.0.127. ; PASSTHRU for 127.0.0.1 +32.1.0.0.127.rpz-ip CNAME rpz-passthru. ; NSDNAME and NSIP policy records ns.domain.com.rpz-nsdname CNAME . @@ -5981,7 +6013,7 @@ ns.domain.com.rpz-nsdname CNAME . </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2589481"></a><span><strong class="command">statistics-channels</strong></span> Statement Definition and +<a name="id2589534"></a><span><strong class="command">statistics-channels</strong></span> Statement Definition and Usage</h3></div></div></div> <p> The <span><strong class="command">statistics-channels</strong></span> statement @@ -6041,7 +6073,7 @@ ns.domain.com.rpz-nsdname CNAME . </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2589689"></a><span><strong class="command">trusted-keys</strong></span> Statement Definition +<a name="id2589742"></a><span><strong class="command">trusted-keys</strong></span> Statement Definition and Usage</h3></div></div></div> <p> The <span><strong class="command">trusted-keys</strong></span> statement defines @@ -6081,7 +6113,7 @@ ns.domain.com.rpz-nsdname CNAME . </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2589736"></a><span><strong class="command">managed-keys</strong></span> Statement Grammar</h3></div></div></div> +<a name="id2589858"></a><span><strong class="command">managed-keys</strong></span> Statement Grammar</h3></div></div></div> <pre class="programlisting"><span><strong class="command">managed-keys</strong></span> { <em class="replaceable"><code>string</code></em> initial-key <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>string</code></em> ; [<span class="optional"> <em class="replaceable"><code>string</code></em> initial-key <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>string</code></em> ; [<span class="optional">...</span>]</span>] @@ -6216,7 +6248,7 @@ ns.domain.com.rpz-nsdname CNAME . </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2590162"></a><span><strong class="command">view</strong></span> Statement Definition and Usage</h3></div></div></div> +<a name="id2590352"></a><span><strong class="command">view</strong></span> Statement Definition and Usage</h3></div></div></div> <p> The <span><strong class="command">view</strong></span> statement is a powerful feature @@ -6505,10 +6537,10 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional" </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2591713"></a><span><strong class="command">zone</strong></span> Statement Definition and Usage</h3></div></div></div> +<a name="id2591902"></a><span><strong class="command">zone</strong></span> Statement Definition and Usage</h3></div></div></div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2591720"></a>Zone Types</h4></div></div></div> +<a name="id2591910"></a>Zone Types</h4></div></div></div> <div class="informaltable"><table border="1"> <colgroup> <col> @@ -6768,7 +6800,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional" </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2592402"></a>Class</h4></div></div></div> +<a name="id2592455"></a>Class</h4></div></div></div> <p> The zone's name may optionally be followed by a class. If a class is not specified, class <code class="literal">IN</code> (for <code class="varname">Internet</code>), @@ -6790,7 +6822,7 @@ zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional" </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2592503"></a>Zone Options</h4></div></div></div> +<a name="id2592488"></a>Zone Options</h4></div></div></div> <div class="variablelist"><dl> <dt><span class="term"><span><strong class="command">allow-notify</strong></span></span></dt> <dd><p> @@ -7506,7 +7538,7 @@ example.com. NS ns2.example.net. (machine$@REALM) for machine in REALM and and converts it machine.realm allowing the machine to update machine.realm. The REALM to be matched - is specified in the <font color="red"><replacable>identity</replacable></font> + is specified in the <em class="replaceable"><code>identity</code></em> field. </p> </td> @@ -7524,7 +7556,7 @@ example.com. NS ns2.example.net. converts it to machine.realm allowing the machine to update subdomains of machine.realm. The REALM to be matched is specified in the - <font color="red"><replacable>identity</replacable></font> field. + <em class="replaceable"><code>identity</code></em> field. </p> </td> </tr> @@ -7540,7 +7572,7 @@ example.com. NS ns2.example.net. (host/machine@REALM) for machine in REALM and and converts it machine.realm allowing the machine to update machine.realm. The REALM to be matched - is specified in the <font color="red"><replacable>identity</replacable></font> + is specified in the <em class="replaceable"><code>identity</code></em> field. </p> </td> @@ -7558,7 +7590,7 @@ example.com. NS ns2.example.net. converts it to machine.realm allowing the machine to update subdomains of machine.realm. The REALM to be matched is specified in the - <font color="red"><replacable>identity</replacable></font> field. + <em class="replaceable"><code>identity</code></em> field. </p> </td> </tr> @@ -7667,7 +7699,7 @@ example.com. NS ns2.example.net. </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2595116"></a>Zone File</h2></div></div></div> +<a name="id2595170"></a>Zone File</h2></div></div></div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> <a name="types_of_resource_records_and_when_to_use_them"></a>Types of Resource Records and When to Use Them</h3></div></div></div> @@ -7680,7 +7712,7 @@ example.com. NS ns2.example.net. </p> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2595134"></a>Resource Records</h4></div></div></div> +<a name="id2595188"></a>Resource Records</h4></div></div></div> <p> A domain name identifies a node. Each node has a set of resource information, which may be empty. The set of resource @@ -8417,7 +8449,7 @@ example.com. NS ns2.example.net. </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2596826"></a>Textual expression of RRs</h4></div></div></div> +<a name="id2596880"></a>Textual expression of RRs</h4></div></div></div> <p> RRs are represented in binary form in the packets of the DNS protocol, and are usually represented in highly encoded form @@ -8620,7 +8652,7 @@ example.com. NS ns2.example.net. </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2597415"></a>Discussion of MX Records</h3></div></div></div> +<a name="id2597537"></a>Discussion of MX Records</h3></div></div></div> <p> As described above, domain servers store information as a series of resource records, each of which contains a particular @@ -8876,7 +8908,7 @@ example.com. NS ns2.example.net. </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2597962"></a>Inverse Mapping in IPv4</h3></div></div></div> +<a name="id2598084"></a>Inverse Mapping in IPv4</h3></div></div></div> <p> Reverse name resolution (that is, translation from IP address to name) is achieved by means of the <span class="emphasis"><em>in-addr.arpa</em></span> domain @@ -8937,7 +8969,7 @@ example.com. NS ns2.example.net. </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2598157"></a>Other Zone File Directives</h3></div></div></div> +<a name="id2598211"></a>Other Zone File Directives</h3></div></div></div> <p> The Master File Format was initially defined in RFC 1035 and has subsequently been extended. While the Master File Format @@ -8952,7 +8984,7 @@ example.com. NS ns2.example.net. </p> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2598180"></a>The <span><strong class="command">@</strong></span> (at-sign)</h4></div></div></div> +<a name="id2598233"></a>The <span><strong class="command">@</strong></span> (at-sign)</h4></div></div></div> <p> When used in the label (or name) field, the asperand or at-sign (@) symbol represents the current origin. @@ -8963,7 +8995,7 @@ example.com. NS ns2.example.net. </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2598196"></a>The <span><strong class="command">$ORIGIN</strong></span> Directive</h4></div></div></div> +<a name="id2598249"></a>The <span><strong class="command">$ORIGIN</strong></span> Directive</h4></div></div></div> <p> Syntax: <span><strong class="command">$ORIGIN</strong></span> <em class="replaceable"><code>domain-name</code></em> @@ -8992,7 +9024,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM. </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2598325"></a>The <span><strong class="command">$INCLUDE</strong></span> Directive</h4></div></div></div> +<a name="id2598446"></a>The <span><strong class="command">$INCLUDE</strong></span> Directive</h4></div></div></div> <p> Syntax: <span><strong class="command">$INCLUDE</strong></span> <em class="replaceable"><code>filename</code></em> @@ -9028,7 +9060,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM. </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2598394"></a>The <span><strong class="command">$TTL</strong></span> Directive</h4></div></div></div> +<a name="id2598516"></a>The <span><strong class="command">$TTL</strong></span> Directive</h4></div></div></div> <p> Syntax: <span><strong class="command">$TTL</strong></span> <em class="replaceable"><code>default-ttl</code></em> @@ -9047,7 +9079,7 @@ WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM. </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2598430"></a><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</h3></div></div></div> +<a name="id2598552"></a><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</h3></div></div></div> <p> Syntax: <span><strong class="command">$GENERATE</strong></span> <em class="replaceable"><code>range</code></em> @@ -9471,7 +9503,7 @@ HOST-127.EXAMPLE. MX 0 . </p> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2599384"></a>Name Server Statistics Counters</h4></div></div></div> +<a name="id2599437"></a>Name Server Statistics Counters</h4></div></div></div> <div class="informaltable"><table border="1"> <colgroup> <col> @@ -10028,7 +10060,7 @@ HOST-127.EXAMPLE. MX 0 . </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2600857"></a>Zone Maintenance Statistics Counters</h4></div></div></div> +<a name="id2601047"></a>Zone Maintenance Statistics Counters</h4></div></div></div> <div class="informaltable"><table border="1"> <colgroup> <col> @@ -10182,7 +10214,7 @@ HOST-127.EXAMPLE. MX 0 . </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2601308"></a>Resolver Statistics Counters</h4></div></div></div> +<a name="id2601498"></a>Resolver Statistics Counters</h4></div></div></div> <div class="informaltable"><table border="1"> <colgroup> <col> @@ -10565,7 +10597,7 @@ HOST-127.EXAMPLE. MX 0 . </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2602398"></a>Socket I/O Statistics Counters</h4></div></div></div> +<a name="id2602588"></a>Socket I/O Statistics Counters</h4></div></div></div> <p> Socket I/O statistics counters are defined per socket types, which are @@ -10720,7 +10752,7 @@ HOST-127.EXAMPLE. MX 0 . </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2602840"></a>Compatibility with <span class="emphasis"><em>BIND</em></span> 8 Counters</h4></div></div></div> +<a name="id2602962"></a>Compatibility with <span class="emphasis"><em>BIND</em></span> 8 Counters</h4></div></div></div> <p> Most statistics counters that were available in <span><strong class="command">BIND</strong></span> 8 are also supported in diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch07.html b/contrib/bind9/doc/arm/Bv9ARM.ch07.html index 3900f70..3e0dc22 100644 --- a/contrib/bind9/doc/arm/Bv9ARM.ch07.html +++ b/contrib/bind9/doc/arm/Bv9ARM.ch07.html @@ -46,10 +46,10 @@ <p><b>Table of Contents</b></p> <dl> <dt><span class="sect1"><a href="Bv9ARM.ch07.html#Access_Control_Lists">Access Control Lists</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2603082"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2603136"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2603232">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2603291">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2603285">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2603345">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch07.html#dynamic_update_security">Dynamic Update Security</a></span></dt> </dl> @@ -121,7 +121,7 @@ zone "example.com" { </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2603082"></a><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span> +<a name="id2603136"></a><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span> </h2></div></div></div> <p> On UNIX servers, it is possible to run <acronym class="acronym">BIND</acronym> @@ -147,7 +147,7 @@ zone "example.com" { </p> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2603232"></a>The <span><strong class="command">chroot</strong></span> Environment</h3></div></div></div> +<a name="id2603285"></a>The <span><strong class="command">chroot</strong></span> Environment</h3></div></div></div> <p> In order for a <span><strong class="command">chroot</strong></span> environment to @@ -175,7 +175,7 @@ zone "example.com" { </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2603291"></a>Using the <span><strong class="command">setuid</strong></span> Function</h3></div></div></div> +<a name="id2603345"></a>Using the <span><strong class="command">setuid</strong></span> Function</h3></div></div></div> <p> Prior to running the <span><strong class="command">named</strong></span> daemon, use diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch08.html b/contrib/bind9/doc/arm/Bv9ARM.ch08.html index 8a59dc6..7205d5b 100644 --- a/contrib/bind9/doc/arm/Bv9ARM.ch08.html +++ b/contrib/bind9/doc/arm/Bv9ARM.ch08.html @@ -45,18 +45,18 @@ <div class="toc"> <p><b>Table of Contents</b></p> <dl> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603371">Common Problems</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2603377">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603388">Incrementing and Changing the Serial Number</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603405">Where Can I Get Help?</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603561">Common Problems</a></span></dt> +<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2603566">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd> +<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603578">Incrementing and Changing the Serial Number</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603595">Where Can I Get Help?</a></span></dt> </dl> </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2603371"></a>Common Problems</h2></div></div></div> +<a name="id2603561"></a>Common Problems</h2></div></div></div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2603377"></a>It's not working; how can I figure out what's wrong?</h3></div></div></div> +<a name="id2603566"></a>It's not working; how can I figure out what's wrong?</h3></div></div></div> <p> The best solution to solving installation and configuration issues is to take preventative measures by setting @@ -68,7 +68,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2603388"></a>Incrementing and Changing the Serial Number</h2></div></div></div> +<a name="id2603578"></a>Incrementing and Changing the Serial Number</h2></div></div></div> <p> Zone serial numbers are just numbers — they aren't date related. A lot of people set them to a number that @@ -95,7 +95,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2603405"></a>Where Can I Get Help?</h2></div></div></div> +<a name="id2603595"></a>Where Can I Get Help?</h2></div></div></div> <p> The Internet Systems Consortium (<acronym class="acronym">ISC</acronym>) offers a wide range diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch09.html b/contrib/bind9/doc/arm/Bv9ARM.ch09.html index d627284..3a4245f 100644 --- a/contrib/bind9/doc/arm/Bv9ARM.ch09.html +++ b/contrib/bind9/doc/arm/Bv9ARM.ch09.html @@ -45,31 +45,31 @@ <div class="toc"> <p><b>Table of Contents</b></p> <dl> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2603536">Acknowledgments</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2603657">Acknowledgments</a></span></dt> <dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2603707">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2603761">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt> <dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt> <dd><dl> <dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2607124">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2607177">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch09.html#bind9.library">BIND 9 DNS Library Support</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608280">Prerequisite</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608290">Compilation</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608314">Installation</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608345">Known Defects/Restrictions</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608422">The dns.conf File</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608449">Sample Applications</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609490">Library References</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608265">Prerequisite</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608275">Compilation</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608299">Installation</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608330">Known Defects/Restrictions</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608680">The dns.conf File</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608707">Sample Applications</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609611">Library References</a></span></dt> </dl></dd> </dl> </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2603536"></a>Acknowledgments</h2></div></div></div> +<a name="id2603657"></a>Acknowledgments</h2></div></div></div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> <a name="historical_dns_information"></a>A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym> @@ -172,7 +172,7 @@ </div> <div class="sect1" lang="en"> <div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2603707"></a>General <acronym class="acronym">DNS</acronym> Reference Information</h2></div></div></div> +<a name="id2603761"></a>General <acronym class="acronym">DNS</acronym> Reference Information</h2></div></div></div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> <a name="ipv6addresses"></a>IPv6 addresses (AAAA)</h3></div></div></div> @@ -260,17 +260,17 @@ </p> <div class="bibliography"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2603895"></a>Bibliography</h4></div></div></div> +<a name="id2604017"></a>Bibliography</h4></div></div></div> <div class="bibliodiv"> <h3 class="title">Standards</h3> <div class="biblioentry"> -<a name="id2603906"></a><p>[<abbr class="abbrev">RFC974</abbr>] <span class="author"><span class="firstname">C.</span> <span class="surname">Partridge</span>. </span><span class="title"><i>Mail Routing and the Domain System</i>. </span><span class="pubdate">January 1986. </span></p> +<a name="id2604027"></a><p>[<abbr class="abbrev">RFC974</abbr>] <span class="author"><span class="firstname">C.</span> <span class="surname">Partridge</span>. </span><span class="title"><i>Mail Routing and the Domain System</i>. </span><span class="pubdate">January 1986. </span></p> </div> <div class="biblioentry"> -<a name="id2603929"></a><p>[<abbr class="abbrev">RFC1034</abbr>] <span class="author"><span class="firstname">P.V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Concepts and Facilities</i>. </span><span class="pubdate">November 1987. </span></p> +<a name="id2604051"></a><p>[<abbr class="abbrev">RFC1034</abbr>] <span class="author"><span class="firstname">P.V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Concepts and Facilities</i>. </span><span class="pubdate">November 1987. </span></p> </div> <div class="biblioentry"> -<a name="id2603953"></a><p>[<abbr class="abbrev">RFC1035</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Implementation and +<a name="id2604074"></a><p>[<abbr class="abbrev">RFC1035</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Implementation and Specification</i>. </span><span class="pubdate">November 1987. </span></p> </div> </div> @@ -278,42 +278,42 @@ <h3 class="title"> <a name="proposed_standards"></a>Proposed Standards</h3> <div class="biblioentry"> -<a name="id2603989"></a><p>[<abbr class="abbrev">RFC2181</abbr>] <span class="author"><span class="firstname">R., R. Bush</span> <span class="surname">Elz</span>. </span><span class="title"><i>Clarifications to the <acronym class="acronym">DNS</acronym> +<a name="id2604110"></a><p>[<abbr class="abbrev">RFC2181</abbr>] <span class="author"><span class="firstname">R., R. Bush</span> <span class="surname">Elz</span>. </span><span class="title"><i>Clarifications to the <acronym class="acronym">DNS</acronym> Specification</i>. </span><span class="pubdate">July 1997. </span></p> </div> <div class="biblioentry"> -<a name="id2604016"></a><p>[<abbr class="abbrev">RFC2308</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Andrews</span>. </span><span class="title"><i>Negative Caching of <acronym class="acronym">DNS</acronym> +<a name="id2604137"></a><p>[<abbr class="abbrev">RFC2308</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Andrews</span>. </span><span class="title"><i>Negative Caching of <acronym class="acronym">DNS</acronym> Queries</i>. </span><span class="pubdate">March 1998. </span></p> </div> <div class="biblioentry"> -<a name="id2604041"></a><p>[<abbr class="abbrev">RFC1995</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Ohta</span>. </span><span class="title"><i>Incremental Zone Transfer in <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">August 1996. </span></p> +<a name="id2604163"></a><p>[<abbr class="abbrev">RFC1995</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Ohta</span>. </span><span class="title"><i>Incremental Zone Transfer in <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">August 1996. </span></p> </div> <div class="biblioentry"> -<a name="id2604066"></a><p>[<abbr class="abbrev">RFC1996</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A Mechanism for Prompt Notification of Zone Changes</i>. </span><span class="pubdate">August 1996. </span></p> +<a name="id2604187"></a><p>[<abbr class="abbrev">RFC1996</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A Mechanism for Prompt Notification of Zone Changes</i>. </span><span class="pubdate">August 1996. </span></p> </div> <div class="biblioentry"> -<a name="id2604089"></a><p>[<abbr class="abbrev">RFC2136</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">Y.</span> <span class="surname">Rekhter</span>, and <span class="firstname">J.</span> <span class="surname">Bound</span>. </span><span class="title"><i>Dynamic Updates in the Domain Name System</i>. </span><span class="pubdate">April 1997. </span></p> +<a name="id2604211"></a><p>[<abbr class="abbrev">RFC2136</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">Y.</span> <span class="surname">Rekhter</span>, and <span class="firstname">J.</span> <span class="surname">Bound</span>. </span><span class="title"><i>Dynamic Updates in the Domain Name System</i>. </span><span class="pubdate">April 1997. </span></p> </div> <div class="biblioentry"> -<a name="id2604145"></a><p>[<abbr class="abbrev">RFC2671</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Extension Mechanisms for DNS (EDNS0)</i>. </span><span class="pubdate">August 1997. </span></p> +<a name="id2604266"></a><p>[<abbr class="abbrev">RFC2671</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Extension Mechanisms for DNS (EDNS0)</i>. </span><span class="pubdate">August 1997. </span></p> </div> <div class="biblioentry"> -<a name="id2604171"></a><p>[<abbr class="abbrev">RFC2672</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Non-Terminal DNS Name Redirection</i>. </span><span class="pubdate">August 1999. </span></p> +<a name="id2604293"></a><p>[<abbr class="abbrev">RFC2672</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Non-Terminal DNS Name Redirection</i>. </span><span class="pubdate">August 1999. </span></p> </div> <div class="biblioentry"> -<a name="id2604198"></a><p>[<abbr class="abbrev">RFC2845</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>, <span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, and <span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secret Key Transaction Authentication for <acronym class="acronym">DNS</acronym> (TSIG)</i>. </span><span class="pubdate">May 2000. </span></p> +<a name="id2604320"></a><p>[<abbr class="abbrev">RFC2845</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>, <span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, and <span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secret Key Transaction Authentication for <acronym class="acronym">DNS</acronym> (TSIG)</i>. </span><span class="pubdate">May 2000. </span></p> </div> <div class="biblioentry"> -<a name="id2604260"></a><p>[<abbr class="abbrev">RFC2930</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secret Key Establishment for DNS (TKEY RR)</i>. </span><span class="pubdate">September 2000. </span></p> +<a name="id2604381"></a><p>[<abbr class="abbrev">RFC2930</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secret Key Establishment for DNS (TKEY RR)</i>. </span><span class="pubdate">September 2000. </span></p> </div> <div class="biblioentry"> -<a name="id2604290"></a><p>[<abbr class="abbrev">RFC2931</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DNS Request and Transaction Signatures (SIG(0)s)</i>. </span><span class="pubdate">September 2000. </span></p> +<a name="id2604411"></a><p>[<abbr class="abbrev">RFC2931</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DNS Request and Transaction Signatures (SIG(0)s)</i>. </span><span class="pubdate">September 2000. </span></p> </div> <div class="biblioentry"> -<a name="id2604320"></a><p>[<abbr class="abbrev">RFC3007</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secure Domain Name System (DNS) Dynamic Update</i>. </span><span class="pubdate">November 2000. </span></p> +<a name="id2604441"></a><p>[<abbr class="abbrev">RFC3007</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secure Domain Name System (DNS) Dynamic Update</i>. </span><span class="pubdate">November 2000. </span></p> </div> <div class="biblioentry"> -<a name="id2604346"></a><p>[<abbr class="abbrev">RFC3645</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Kwan</span>, <span class="firstname">P.</span> <span class="surname">Garg</span>, <span class="firstname">J.</span> <span class="surname">Gilroy</span>, <span class="firstname">L.</span> <span class="surname">Esibov</span>, <span class="firstname">J.</span> <span class="surname">Westhead</span>, and <span class="firstname">R.</span> <span class="surname">Hall</span>. </span><span class="title"><i>Generic Security Service Algorithm for Secret +<a name="id2604468"></a><p>[<abbr class="abbrev">RFC3645</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Kwan</span>, <span class="firstname">P.</span> <span class="surname">Garg</span>, <span class="firstname">J.</span> <span class="surname">Gilroy</span>, <span class="firstname">L.</span> <span class="surname">Esibov</span>, <span class="firstname">J.</span> <span class="surname">Westhead</span>, and <span class="firstname">R.</span> <span class="surname">Hall</span>. </span><span class="title"><i>Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS (GSS-TSIG)</i>. </span><span class="pubdate">October 2003. </span></p> </div> @@ -322,19 +322,19 @@ <h3 class="title"> <acronym class="acronym">DNS</acronym> Security Proposed Standards</h3> <div class="biblioentry"> -<a name="id2604428"></a><p>[<abbr class="abbrev">RFC3225</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Conrad</span>. </span><span class="title"><i>Indicating Resolver Support of DNSSEC</i>. </span><span class="pubdate">December 2001. </span></p> +<a name="id2604618"></a><p>[<abbr class="abbrev">RFC3225</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Conrad</span>. </span><span class="title"><i>Indicating Resolver Support of DNSSEC</i>. </span><span class="pubdate">December 2001. </span></p> </div> <div class="biblioentry"> -<a name="id2604455"></a><p>[<abbr class="abbrev">RFC3833</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Atkins</span> and <span class="firstname">R.</span> <span class="surname">Austein</span>. </span><span class="title"><i>Threat Analysis of the Domain Name System (DNS)</i>. </span><span class="pubdate">August 2004. </span></p> +<a name="id2604645"></a><p>[<abbr class="abbrev">RFC3833</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Atkins</span> and <span class="firstname">R.</span> <span class="surname">Austein</span>. </span><span class="title"><i>Threat Analysis of the Domain Name System (DNS)</i>. </span><span class="pubdate">August 2004. </span></p> </div> <div class="biblioentry"> -<a name="id2604491"></a><p>[<abbr class="abbrev">RFC4033</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>DNS Security Introduction and Requirements</i>. </span><span class="pubdate">March 2005. </span></p> +<a name="id2604681"></a><p>[<abbr class="abbrev">RFC4033</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>DNS Security Introduction and Requirements</i>. </span><span class="pubdate">March 2005. </span></p> </div> <div class="biblioentry"> -<a name="id2604625"></a><p>[<abbr class="abbrev">RFC4034</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Resource Records for the DNS Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p> +<a name="id2604746"></a><p>[<abbr class="abbrev">RFC4034</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Resource Records for the DNS Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p> </div> <div class="biblioentry"> -<a name="id2604690"></a><p>[<abbr class="abbrev">RFC4035</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Protocol Modifications for the DNS +<a name="id2604811"></a><p>[<abbr class="abbrev">RFC4035</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Protocol Modifications for the DNS Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p> </div> </div> @@ -342,146 +342,146 @@ <h3 class="title">Other Important RFCs About <acronym class="acronym">DNS</acronym> Implementation</h3> <div class="biblioentry"> -<a name="id2604763"></a><p>[<abbr class="abbrev">RFC1535</abbr>] <span class="author"><span class="firstname">E.</span> <span class="surname">Gavron</span>. </span><span class="title"><i>A Security Problem and Proposed Correction With Widely +<a name="id2604885"></a><p>[<abbr class="abbrev">RFC1535</abbr>] <span class="author"><span class="firstname">E.</span> <span class="surname">Gavron</span>. </span><span class="title"><i>A Security Problem and Proposed Correction With Widely Deployed <acronym class="acronym">DNS</acronym> Software.</i>. </span><span class="pubdate">October 1993. </span></p> </div> <div class="biblioentry"> -<a name="id2604789"></a><p>[<abbr class="abbrev">RFC1536</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Kumar</span>, <span class="firstname">J.</span> <span class="surname">Postel</span>, <span class="firstname">C.</span> <span class="surname">Neuman</span>, <span class="firstname">P.</span> <span class="surname">Danzig</span>, and <span class="firstname">S.</span> <span class="surname">Miller</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Implementation +<a name="id2604910"></a><p>[<abbr class="abbrev">RFC1536</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Kumar</span>, <span class="firstname">J.</span> <span class="surname">Postel</span>, <span class="firstname">C.</span> <span class="surname">Neuman</span>, <span class="firstname">P.</span> <span class="surname">Danzig</span>, and <span class="firstname">S.</span> <span class="surname">Miller</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Implementation Errors and Suggested Fixes</i>. </span><span class="pubdate">October 1993. </span></p> </div> <div class="biblioentry"> -<a name="id2604857"></a><p>[<abbr class="abbrev">RFC1982</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Elz</span> and <span class="firstname">R.</span> <span class="surname">Bush</span>. </span><span class="title"><i>Serial Number Arithmetic</i>. </span><span class="pubdate">August 1996. </span></p> +<a name="id2605047"></a><p>[<abbr class="abbrev">RFC1982</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Elz</span> and <span class="firstname">R.</span> <span class="surname">Bush</span>. </span><span class="title"><i>Serial Number Arithmetic</i>. </span><span class="pubdate">August 1996. </span></p> </div> <div class="biblioentry"> -<a name="id2604892"></a><p>[<abbr class="abbrev">RFC4074</abbr>] <span class="authorgroup"><span class="firstname">Y.</span> <span class="surname">Morishita</span> and <span class="firstname">T.</span> <span class="surname">Jinmei</span>. </span><span class="title"><i>Common Misbehaviour Against <acronym class="acronym">DNS</acronym> +<a name="id2605082"></a><p>[<abbr class="abbrev">RFC4074</abbr>] <span class="authorgroup"><span class="firstname">Y.</span> <span class="surname">Morishita</span> and <span class="firstname">T.</span> <span class="surname">Jinmei</span>. </span><span class="title"><i>Common Misbehaviour Against <acronym class="acronym">DNS</acronym> Queries for IPv6 Addresses</i>. </span><span class="pubdate">May 2005. </span></p> </div> </div> <div class="bibliodiv"> <h3 class="title">Resource Record Types</h3> <div class="biblioentry"> -<a name="id2604938"></a><p>[<abbr class="abbrev">RFC1183</abbr>] <span class="authorgroup"><span class="firstname">C.F.</span> <span class="surname">Everhart</span>, <span class="firstname">L. A.</span> <span class="surname">Mamakos</span>, <span class="firstname">R.</span> <span class="surname">Ullmann</span>, and <span class="firstname">P.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>New <acronym class="acronym">DNS</acronym> RR Definitions</i>. </span><span class="pubdate">October 1990. </span></p> +<a name="id2605128"></a><p>[<abbr class="abbrev">RFC1183</abbr>] <span class="authorgroup"><span class="firstname">C.F.</span> <span class="surname">Everhart</span>, <span class="firstname">L. A.</span> <span class="surname">Mamakos</span>, <span class="firstname">R.</span> <span class="surname">Ullmann</span>, and <span class="firstname">P.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>New <acronym class="acronym">DNS</acronym> RR Definitions</i>. </span><span class="pubdate">October 1990. </span></p> </div> <div class="biblioentry"> -<a name="id2604996"></a><p>[<abbr class="abbrev">RFC1706</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">R.</span> <span class="surname">Colella</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> NSAP Resource Records</i>. </span><span class="pubdate">October 1994. </span></p> +<a name="id2605186"></a><p>[<abbr class="abbrev">RFC1706</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">R.</span> <span class="surname">Colella</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> NSAP Resource Records</i>. </span><span class="pubdate">October 1994. </span></p> </div> <div class="biblioentry"> -<a name="id2605033"></a><p>[<abbr class="abbrev">RFC2168</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Daniel</span> and <span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="title"><i>Resolution of Uniform Resource Identifiers using +<a name="id2605223"></a><p>[<abbr class="abbrev">RFC2168</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Daniel</span> and <span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="title"><i>Resolution of Uniform Resource Identifiers using the Domain Name System</i>. </span><span class="pubdate">June 1997. </span></p> </div> <div class="biblioentry"> -<a name="id2605137"></a><p>[<abbr class="abbrev">RFC1876</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Davis</span>, <span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">T.</span>, and <span class="firstname">I.</span> <span class="surname">Dickinson</span>. </span><span class="title"><i>A Means for Expressing Location Information in the +<a name="id2605258"></a><p>[<abbr class="abbrev">RFC1876</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Davis</span>, <span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">T.</span>, and <span class="firstname">I.</span> <span class="surname">Dickinson</span>. </span><span class="title"><i>A Means for Expressing Location Information in the Domain Name System</i>. </span><span class="pubdate">January 1996. </span></p> </div> <div class="biblioentry"> -<a name="id2605191"></a><p>[<abbr class="abbrev">RFC2052</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A <acronym class="acronym">DNS</acronym> RR for Specifying the +<a name="id2605313"></a><p>[<abbr class="abbrev">RFC2052</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A <acronym class="acronym">DNS</acronym> RR for Specifying the Location of Services.</i>. </span><span class="pubdate">October 1996. </span></p> </div> <div class="biblioentry"> -<a name="id2605229"></a><p>[<abbr class="abbrev">RFC2163</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Allocchio</span>. </span><span class="title"><i>Using the Internet <acronym class="acronym">DNS</acronym> to +<a name="id2605351"></a><p>[<abbr class="abbrev">RFC2163</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Allocchio</span>. </span><span class="title"><i>Using the Internet <acronym class="acronym">DNS</acronym> to Distribute MIXER Conformant Global Address Mapping</i>. </span><span class="pubdate">January 1998. </span></p> </div> <div class="biblioentry"> -<a name="id2605255"></a><p>[<abbr class="abbrev">RFC2230</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Atkinson</span>. </span><span class="title"><i>Key Exchange Delegation Record for the <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">October 1997. </span></p> +<a name="id2605377"></a><p>[<abbr class="abbrev">RFC2230</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Atkinson</span>. </span><span class="title"><i>Key Exchange Delegation Record for the <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">October 1997. </span></p> </div> <div class="biblioentry"> -<a name="id2605281"></a><p>[<abbr class="abbrev">RFC2536</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DSA KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> +<a name="id2605402"></a><p>[<abbr class="abbrev">RFC2536</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DSA KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> </div> <div class="biblioentry"> -<a name="id2605307"></a><p>[<abbr class="abbrev">RFC2537</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> +<a name="id2605429"></a><p>[<abbr class="abbrev">RFC2537</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> </div> <div class="biblioentry"> -<a name="id2605334"></a><p>[<abbr class="abbrev">RFC2538</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Storing Certificates in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> +<a name="id2605456"></a><p>[<abbr class="abbrev">RFC2538</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Storing Certificates in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> </div> <div class="biblioentry"> -<a name="id2605373"></a><p>[<abbr class="abbrev">RFC2539</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> +<a name="id2605495"></a><p>[<abbr class="abbrev">RFC2539</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> </div> <div class="biblioentry"> -<a name="id2605403"></a><p>[<abbr class="abbrev">RFC2540</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Detached Domain Name System (DNS) Information</i>. </span><span class="pubdate">March 1999. </span></p> +<a name="id2605525"></a><p>[<abbr class="abbrev">RFC2540</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Detached Domain Name System (DNS) Information</i>. </span><span class="pubdate">March 1999. </span></p> </div> <div class="biblioentry"> -<a name="id2605433"></a><p>[<abbr class="abbrev">RFC2782</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span>. </span><span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="author"><span class="firstname">L.</span> <span class="surname">Esibov</span>. </span><span class="title"><i>A DNS RR for specifying the location of services (DNS SRV)</i>. </span><span class="pubdate">February 2000. </span></p> +<a name="id2605555"></a><p>[<abbr class="abbrev">RFC2782</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span>. </span><span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="author"><span class="firstname">L.</span> <span class="surname">Esibov</span>. </span><span class="title"><i>A DNS RR for specifying the location of services (DNS SRV)</i>. </span><span class="pubdate">February 2000. </span></p> </div> <div class="biblioentry"> -<a name="id2605476"></a><p>[<abbr class="abbrev">RFC2915</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="author"><span class="firstname">R.</span> <span class="surname">Daniel</span>. </span><span class="title"><i>The Naming Authority Pointer (NAPTR) DNS Resource Record</i>. </span><span class="pubdate">September 2000. </span></p> +<a name="id2605597"></a><p>[<abbr class="abbrev">RFC2915</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="author"><span class="firstname">R.</span> <span class="surname">Daniel</span>. </span><span class="title"><i>The Naming Authority Pointer (NAPTR) DNS Resource Record</i>. </span><span class="pubdate">September 2000. </span></p> </div> <div class="biblioentry"> -<a name="id2605509"></a><p>[<abbr class="abbrev">RFC3110</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</i>. </span><span class="pubdate">May 2001. </span></p> +<a name="id2605630"></a><p>[<abbr class="abbrev">RFC3110</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</i>. </span><span class="pubdate">May 2001. </span></p> </div> <div class="biblioentry"> -<a name="id2605536"></a><p>[<abbr class="abbrev">RFC3123</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Koch</span>. </span><span class="title"><i>A DNS RR Type for Lists of Address Prefixes (APL RR)</i>. </span><span class="pubdate">June 2001. </span></p> +<a name="id2605657"></a><p>[<abbr class="abbrev">RFC3123</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Koch</span>. </span><span class="title"><i>A DNS RR Type for Lists of Address Prefixes (APL RR)</i>. </span><span class="pubdate">June 2001. </span></p> </div> <div class="biblioentry"> -<a name="id2605559"></a><p>[<abbr class="abbrev">RFC3596</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">C.</span> <span class="surname">Huitema</span>, <span class="firstname">V.</span> <span class="surname">Ksinant</span>, and <span class="firstname">M.</span> <span class="surname">Souissi</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Extensions to support IP +<a name="id2605681"></a><p>[<abbr class="abbrev">RFC3596</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">C.</span> <span class="surname">Huitema</span>, <span class="firstname">V.</span> <span class="surname">Ksinant</span>, and <span class="firstname">M.</span> <span class="surname">Souissi</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Extensions to support IP version 6</i>. </span><span class="pubdate">October 2003. </span></p> </div> <div class="biblioentry"> -<a name="id2605617"></a><p>[<abbr class="abbrev">RFC3597</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gustafsson</span>. </span><span class="title"><i>Handling of Unknown DNS Resource Record (RR) Types</i>. </span><span class="pubdate">September 2003. </span></p> +<a name="id2605738"></a><p>[<abbr class="abbrev">RFC3597</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gustafsson</span>. </span><span class="title"><i>Handling of Unknown DNS Resource Record (RR) Types</i>. </span><span class="pubdate">September 2003. </span></p> </div> </div> <div class="bibliodiv"> <h3 class="title"> <acronym class="acronym">DNS</acronym> and the Internet</h3> <div class="biblioentry"> -<a name="id2605649"></a><p>[<abbr class="abbrev">RFC1101</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Network Names +<a name="id2605770"></a><p>[<abbr class="abbrev">RFC1101</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Network Names and Other Types</i>. </span><span class="pubdate">April 1989. </span></p> </div> <div class="biblioentry"> -<a name="id2605674"></a><p>[<abbr class="abbrev">RFC1123</abbr>] <span class="author"><span class="surname">Braden</span>. </span><span class="title"><i>Requirements for Internet Hosts - Application and +<a name="id2605796"></a><p>[<abbr class="abbrev">RFC1123</abbr>] <span class="author"><span class="surname">Braden</span>. </span><span class="title"><i>Requirements for Internet Hosts - Application and Support</i>. </span><span class="pubdate">October 1989. </span></p> </div> <div class="biblioentry"> -<a name="id2605697"></a><p>[<abbr class="abbrev">RFC1591</abbr>] <span class="author"><span class="firstname">J.</span> <span class="surname">Postel</span>. </span><span class="title"><i>Domain Name System Structure and Delegation</i>. </span><span class="pubdate">March 1994. </span></p> +<a name="id2605818"></a><p>[<abbr class="abbrev">RFC1591</abbr>] <span class="author"><span class="firstname">J.</span> <span class="surname">Postel</span>. </span><span class="title"><i>Domain Name System Structure and Delegation</i>. </span><span class="pubdate">March 1994. </span></p> </div> <div class="biblioentry"> -<a name="id2605720"></a><p>[<abbr class="abbrev">RFC2317</abbr>] <span class="authorgroup"><span class="firstname">H.</span> <span class="surname">Eidnes</span>, <span class="firstname">G.</span> <span class="surname">de Groot</span>, and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Classless IN-ADDR.ARPA Delegation</i>. </span><span class="pubdate">March 1998. </span></p> +<a name="id2605842"></a><p>[<abbr class="abbrev">RFC2317</abbr>] <span class="authorgroup"><span class="firstname">H.</span> <span class="surname">Eidnes</span>, <span class="firstname">G.</span> <span class="surname">de Groot</span>, and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Classless IN-ADDR.ARPA Delegation</i>. </span><span class="pubdate">March 1998. </span></p> </div> <div class="biblioentry"> -<a name="id2605766"></a><p>[<abbr class="abbrev">RFC2826</abbr>] <span class="authorgroup"><span class="surname">Internet Architecture Board</span>. </span><span class="title"><i>IAB Technical Comment on the Unique DNS Root</i>. </span><span class="pubdate">May 2000. </span></p> +<a name="id2605888"></a><p>[<abbr class="abbrev">RFC2826</abbr>] <span class="authorgroup"><span class="surname">Internet Architecture Board</span>. </span><span class="title"><i>IAB Technical Comment on the Unique DNS Root</i>. </span><span class="pubdate">May 2000. </span></p> </div> <div class="biblioentry"> -<a name="id2605789"></a><p>[<abbr class="abbrev">RFC2929</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, <span class="firstname">E.</span> <span class="surname">Brunner-Williams</span>, and <span class="firstname">B.</span> <span class="surname">Manning</span>. </span><span class="title"><i>Domain Name System (DNS) IANA Considerations</i>. </span><span class="pubdate">September 2000. </span></p> +<a name="id2605911"></a><p>[<abbr class="abbrev">RFC2929</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, <span class="firstname">E.</span> <span class="surname">Brunner-Williams</span>, and <span class="firstname">B.</span> <span class="surname">Manning</span>. </span><span class="title"><i>Domain Name System (DNS) IANA Considerations</i>. </span><span class="pubdate">September 2000. </span></p> </div> </div> <div class="bibliodiv"> <h3 class="title"> <acronym class="acronym">DNS</acronym> Operations</h3> <div class="biblioentry"> -<a name="id2605847"></a><p>[<abbr class="abbrev">RFC1033</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Lottor</span>. </span><span class="title"><i>Domain administrators operations guide.</i>. </span><span class="pubdate">November 1987. </span></p> +<a name="id2605969"></a><p>[<abbr class="abbrev">RFC1033</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Lottor</span>. </span><span class="title"><i>Domain administrators operations guide.</i>. </span><span class="pubdate">November 1987. </span></p> </div> <div class="biblioentry"> -<a name="id2605870"></a><p>[<abbr class="abbrev">RFC1537</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Beertema</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Data File +<a name="id2605992"></a><p>[<abbr class="abbrev">RFC1537</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Beertema</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Data File Configuration Errors</i>. </span><span class="pubdate">October 1993. </span></p> </div> <div class="biblioentry"> -<a name="id2605897"></a><p>[<abbr class="abbrev">RFC1912</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Barr</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Operational and +<a name="id2606019"></a><p>[<abbr class="abbrev">RFC1912</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Barr</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Operational and Configuration Errors</i>. </span><span class="pubdate">February 1996. </span></p> </div> <div class="biblioentry"> -<a name="id2605924"></a><p>[<abbr class="abbrev">RFC2010</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Operational Criteria for Root Name Servers.</i>. </span><span class="pubdate">October 1996. </span></p> +<a name="id2606045"></a><p>[<abbr class="abbrev">RFC2010</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Operational Criteria for Root Name Servers.</i>. </span><span class="pubdate">October 1996. </span></p> </div> <div class="biblioentry"> -<a name="id2605960"></a><p>[<abbr class="abbrev">RFC2219</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Hamilton</span> and <span class="firstname">R.</span> <span class="surname">Wright</span>. </span><span class="title"><i>Use of <acronym class="acronym">DNS</acronym> Aliases for +<a name="id2606082"></a><p>[<abbr class="abbrev">RFC2219</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Hamilton</span> and <span class="firstname">R.</span> <span class="surname">Wright</span>. </span><span class="title"><i>Use of <acronym class="acronym">DNS</acronym> Aliases for Network Services.</i>. </span><span class="pubdate">October 1997. </span></p> </div> </div> <div class="bibliodiv"> <h3 class="title">Internationalized Domain Names</h3> <div class="biblioentry"> -<a name="id2606006"></a><p>[<abbr class="abbrev">RFC2825</abbr>] <span class="authorgroup"><span class="surname">IAB</span> and <span class="firstname">R.</span> <span class="surname">Daigle</span>. </span><span class="title"><i>A Tangled Web: Issues of I18N, Domain Names, +<a name="id2606128"></a><p>[<abbr class="abbrev">RFC2825</abbr>] <span class="authorgroup"><span class="surname">IAB</span> and <span class="firstname">R.</span> <span class="surname">Daigle</span>. </span><span class="title"><i>A Tangled Web: Issues of I18N, Domain Names, and the Other Internet protocols</i>. </span><span class="pubdate">May 2000. </span></p> </div> <div class="biblioentry"> -<a name="id2606038"></a><p>[<abbr class="abbrev">RFC3490</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Faltstrom</span>, <span class="firstname">P.</span> <span class="surname">Hoffman</span>, and <span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Internationalizing Domain Names in Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p> +<a name="id2606160"></a><p>[<abbr class="abbrev">RFC3490</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Faltstrom</span>, <span class="firstname">P.</span> <span class="surname">Hoffman</span>, and <span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Internationalizing Domain Names in Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p> </div> <div class="biblioentry"> -<a name="id2606084"></a><p>[<abbr class="abbrev">RFC3491</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Hoffman</span> and <span class="firstname">M.</span> <span class="surname">Blanchet</span>. </span><span class="title"><i>Nameprep: A Stringprep Profile for Internationalized Domain Names</i>. </span><span class="pubdate">March 2003. </span></p> +<a name="id2606205"></a><p>[<abbr class="abbrev">RFC3491</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Hoffman</span> and <span class="firstname">M.</span> <span class="surname">Blanchet</span>. </span><span class="title"><i>Nameprep: A Stringprep Profile for Internationalized Domain Names</i>. </span><span class="pubdate">March 2003. </span></p> </div> <div class="biblioentry"> -<a name="id2606119"></a><p>[<abbr class="abbrev">RFC3492</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Punycode: A Bootstring encoding of Unicode +<a name="id2606241"></a><p>[<abbr class="abbrev">RFC3492</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Punycode: A Bootstring encoding of Unicode for Internationalized Domain Names in Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p> </div> @@ -497,47 +497,47 @@ </p> </div> <div class="biblioentry"> -<a name="id2606164"></a><p>[<abbr class="abbrev">RFC1464</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Rosenbaum</span>. </span><span class="title"><i>Using the Domain Name System To Store Arbitrary String +<a name="id2606354"></a><p>[<abbr class="abbrev">RFC1464</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Rosenbaum</span>. </span><span class="title"><i>Using the Domain Name System To Store Arbitrary String Attributes</i>. </span><span class="pubdate">May 1993. </span></p> </div> <div class="biblioentry"> -<a name="id2606186"></a><p>[<abbr class="abbrev">RFC1713</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Romao</span>. </span><span class="title"><i>Tools for <acronym class="acronym">DNS</acronym> Debugging</i>. </span><span class="pubdate">November 1994. </span></p> +<a name="id2606376"></a><p>[<abbr class="abbrev">RFC1713</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Romao</span>. </span><span class="title"><i>Tools for <acronym class="acronym">DNS</acronym> Debugging</i>. </span><span class="pubdate">November 1994. </span></p> </div> <div class="biblioentry"> -<a name="id2606212"></a><p>[<abbr class="abbrev">RFC1794</abbr>] <span class="author"><span class="firstname">T.</span> <span class="surname">Brisco</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Support for Load +<a name="id2606402"></a><p>[<abbr class="abbrev">RFC1794</abbr>] <span class="author"><span class="firstname">T.</span> <span class="surname">Brisco</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Support for Load Balancing</i>. </span><span class="pubdate">April 1995. </span></p> </div> <div class="biblioentry"> -<a name="id2606306"></a><p>[<abbr class="abbrev">RFC2240</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Legal Basis for Domain Name Allocation</i>. </span><span class="pubdate">November 1997. </span></p> +<a name="id2606427"></a><p>[<abbr class="abbrev">RFC2240</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Legal Basis for Domain Name Allocation</i>. </span><span class="pubdate">November 1997. </span></p> </div> <div class="biblioentry"> -<a name="id2606329"></a><p>[<abbr class="abbrev">RFC2345</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>, <span class="firstname">T.</span> <span class="surname">Wolf</span>, and <span class="firstname">G.</span> <span class="surname">Oglesby</span>. </span><span class="title"><i>Domain Names and Company Name Retrieval</i>. </span><span class="pubdate">May 1998. </span></p> +<a name="id2606451"></a><p>[<abbr class="abbrev">RFC2345</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>, <span class="firstname">T.</span> <span class="surname">Wolf</span>, and <span class="firstname">G.</span> <span class="surname">Oglesby</span>. </span><span class="title"><i>Domain Names and Company Name Retrieval</i>. </span><span class="pubdate">May 1998. </span></p> </div> <div class="biblioentry"> -<a name="id2606375"></a><p>[<abbr class="abbrev">RFC2352</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Convention For Using Legal Names as Domain Names</i>. </span><span class="pubdate">May 1998. </span></p> +<a name="id2606497"></a><p>[<abbr class="abbrev">RFC2352</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Convention For Using Legal Names as Domain Names</i>. </span><span class="pubdate">May 1998. </span></p> </div> <div class="biblioentry"> -<a name="id2606398"></a><p>[<abbr class="abbrev">RFC3071</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>. </span><span class="title"><i>Reflections on the DNS, RFC 1591, and Categories of Domains</i>. </span><span class="pubdate">February 2001. </span></p> +<a name="id2606520"></a><p>[<abbr class="abbrev">RFC3071</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>. </span><span class="title"><i>Reflections on the DNS, RFC 1591, and Categories of Domains</i>. </span><span class="pubdate">February 2001. </span></p> </div> <div class="biblioentry"> -<a name="id2606425"></a><p>[<abbr class="abbrev">RFC3258</abbr>] <span class="authorgroup"><span class="firstname">T.</span> <span class="surname">Hardie</span>. </span><span class="title"><i>Distributing Authoritative Name Servers via +<a name="id2606547"></a><p>[<abbr class="abbrev">RFC3258</abbr>] <span class="authorgroup"><span class="firstname">T.</span> <span class="surname">Hardie</span>. </span><span class="title"><i>Distributing Authoritative Name Servers via Shared Unicast Addresses</i>. </span><span class="pubdate">April 2002. </span></p> </div> <div class="biblioentry"> -<a name="id2606451"></a><p>[<abbr class="abbrev">RFC3901</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Durand</span> and <span class="firstname">J.</span> <span class="surname">Ihren</span>. </span><span class="title"><i>DNS IPv6 Transport Operational Guidelines</i>. </span><span class="pubdate">September 2004. </span></p> +<a name="id2606572"></a><p>[<abbr class="abbrev">RFC3901</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Durand</span> and <span class="firstname">J.</span> <span class="surname">Ihren</span>. </span><span class="title"><i>DNS IPv6 Transport Operational Guidelines</i>. </span><span class="pubdate">September 2004. </span></p> </div> </div> <div class="bibliodiv"> <h3 class="title">Obsolete and Unimplemented Experimental RFC</h3> <div class="biblioentry"> -<a name="id2606494"></a><p>[<abbr class="abbrev">RFC1712</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Farrell</span>, <span class="firstname">M.</span> <span class="surname">Schulze</span>, <span class="firstname">S.</span> <span class="surname">Pleitner</span>, and <span class="firstname">D.</span> <span class="surname">Baldoni</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Geographical +<a name="id2606616"></a><p>[<abbr class="abbrev">RFC1712</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Farrell</span>, <span class="firstname">M.</span> <span class="surname">Schulze</span>, <span class="firstname">S.</span> <span class="surname">Pleitner</span>, and <span class="firstname">D.</span> <span class="surname">Baldoni</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Geographical Location</i>. </span><span class="pubdate">November 1994. </span></p> </div> <div class="biblioentry"> -<a name="id2606552"></a><p>[<abbr class="abbrev">RFC2673</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Binary Labels in the Domain Name System</i>. </span><span class="pubdate">August 1999. </span></p> +<a name="id2606674"></a><p>[<abbr class="abbrev">RFC2673</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Binary Labels in the Domain Name System</i>. </span><span class="pubdate">August 1999. </span></p> </div> <div class="biblioentry"> -<a name="id2606579"></a><p>[<abbr class="abbrev">RFC2874</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span> and <span class="firstname">C.</span> <span class="surname">Huitema</span>. </span><span class="title"><i>DNS Extensions to Support IPv6 Address Aggregation +<a name="id2606700"></a><p>[<abbr class="abbrev">RFC2874</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span> and <span class="firstname">C.</span> <span class="surname">Huitema</span>. </span><span class="title"><i>DNS Extensions to Support IPv6 Address Aggregation and Renumbering</i>. </span><span class="pubdate">July 2000. </span></p> </div> </div> @@ -551,39 +551,39 @@ </p> </div> <div class="biblioentry"> -<a name="id2606695"></a><p>[<abbr class="abbrev">RFC2065</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">C.</span> <span class="surname">Kaufman</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">January 1997. </span></p> +<a name="id2606748"></a><p>[<abbr class="abbrev">RFC2065</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">C.</span> <span class="surname">Kaufman</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">January 1997. </span></p> </div> <div class="biblioentry"> -<a name="id2606734"></a><p>[<abbr class="abbrev">RFC2137</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secure Domain Name System Dynamic Update</i>. </span><span class="pubdate">April 1997. </span></p> +<a name="id2606788"></a><p>[<abbr class="abbrev">RFC2137</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secure Domain Name System Dynamic Update</i>. </span><span class="pubdate">April 1997. </span></p> </div> <div class="biblioentry"> -<a name="id2606761"></a><p>[<abbr class="abbrev">RFC2535</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">March 1999. </span></p> +<a name="id2606814"></a><p>[<abbr class="abbrev">RFC2535</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">March 1999. </span></p> </div> <div class="biblioentry"> -<a name="id2606791"></a><p>[<abbr class="abbrev">RFC3008</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Domain Name System Security (DNSSEC) +<a name="id2606844"></a><p>[<abbr class="abbrev">RFC3008</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Domain Name System Security (DNSSEC) Signing Authority</i>. </span><span class="pubdate">November 2000. </span></p> </div> <div class="biblioentry"> -<a name="id2606817"></a><p>[<abbr class="abbrev">RFC3090</abbr>] <span class="authorgroup"><span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>DNS Security Extension Clarification on Zone Status</i>. </span><span class="pubdate">March 2001. </span></p> +<a name="id2606870"></a><p>[<abbr class="abbrev">RFC3090</abbr>] <span class="authorgroup"><span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>DNS Security Extension Clarification on Zone Status</i>. </span><span class="pubdate">March 2001. </span></p> </div> <div class="biblioentry"> -<a name="id2606843"></a><p>[<abbr class="abbrev">RFC3445</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Massey</span> and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Limiting the Scope of the KEY Resource Record (RR)</i>. </span><span class="pubdate">December 2002. </span></p> +<a name="id2606897"></a><p>[<abbr class="abbrev">RFC3445</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Massey</span> and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Limiting the Scope of the KEY Resource Record (RR)</i>. </span><span class="pubdate">December 2002. </span></p> </div> <div class="biblioentry"> -<a name="id2606880"></a><p>[<abbr class="abbrev">RFC3655</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Redefinition of DNS Authenticated Data (AD) bit</i>. </span><span class="pubdate">November 2003. </span></p> +<a name="id2606933"></a><p>[<abbr class="abbrev">RFC3655</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Redefinition of DNS Authenticated Data (AD) bit</i>. </span><span class="pubdate">November 2003. </span></p> </div> <div class="biblioentry"> -<a name="id2606916"></a><p>[<abbr class="abbrev">RFC3658</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Delegation Signer (DS) Resource Record (RR)</i>. </span><span class="pubdate">December 2003. </span></p> +<a name="id2607037"></a><p>[<abbr class="abbrev">RFC3658</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Delegation Signer (DS) Resource Record (RR)</i>. </span><span class="pubdate">December 2003. </span></p> </div> <div class="biblioentry"> -<a name="id2606942"></a><p>[<abbr class="abbrev">RFC3755</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Weiler</span>. </span><span class="title"><i>Legacy Resolver Compatibility for Delegation Signer (DS)</i>. </span><span class="pubdate">May 2004. </span></p> +<a name="id2607064"></a><p>[<abbr class="abbrev">RFC3755</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Weiler</span>. </span><span class="title"><i>Legacy Resolver Compatibility for Delegation Signer (DS)</i>. </span><span class="pubdate">May 2004. </span></p> </div> <div class="biblioentry"> -<a name="id2607037"></a><p>[<abbr class="abbrev">RFC3757</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Kolkman</span>, <span class="firstname">J.</span> <span class="surname">Schlyter</span>, and <span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>Domain Name System KEY (DNSKEY) Resource Record +<a name="id2607091"></a><p>[<abbr class="abbrev">RFC3757</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Kolkman</span>, <span class="firstname">J.</span> <span class="surname">Schlyter</span>, and <span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag</i>. </span><span class="pubdate">April 2004. </span></p> </div> <div class="biblioentry"> -<a name="id2607082"></a><p>[<abbr class="abbrev">RFC3845</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Schlyter</span>. </span><span class="title"><i>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</i>. </span><span class="pubdate">August 2004. </span></p> +<a name="id2607136"></a><p>[<abbr class="abbrev">RFC3845</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Schlyter</span>. </span><span class="title"><i>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</i>. </span><span class="pubdate">August 2004. </span></p> </div> </div> </div> @@ -604,14 +604,14 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2607124"></a>Other Documents About <acronym class="acronym">BIND</acronym> +<a name="id2607177"></a>Other Documents About <acronym class="acronym">BIND</acronym> </h3></div></div></div> <p></p> <div class="bibliography"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2607133"></a>Bibliography</h4></div></div></div> +<a name="id2607187"></a>Bibliography</h4></div></div></div> <div class="biblioentry"> -<a name="id2607136"></a><p><span class="authorgroup"><span class="firstname">Paul</span> <span class="surname">Albitz</span> and <span class="firstname">Cricket</span> <span class="surname">Liu</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></i>. </span><span class="copyright">Copyright © 1998 Sebastopol, CA: O'Reilly and Associates. </span></p> +<a name="id2607189"></a><p><span class="authorgroup"><span class="firstname">Paul</span> <span class="surname">Albitz</span> and <span class="firstname">Cricket</span> <span class="surname">Liu</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></i>. </span><span class="copyright">Copyright © 1998 Sebastopol, CA: O'Reilly and Associates. </span></p> </div> </div> </div> @@ -648,7 +648,7 @@ </ul></div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2608280"></a>Prerequisite</h3></div></div></div> +<a name="id2608265"></a>Prerequisite</h3></div></div></div> <p>GNU make is required to build the export libraries (other part of BIND 9 can still be built with other types of make). In the reminder of this document, "make" means GNU make. Note that @@ -657,7 +657,7 @@ </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2608290"></a>Compilation</h3></div></div></div> +<a name="id2608275"></a>Compilation</h3></div></div></div> <pre class="screen"> $ <strong class="userinput"><code>./configure --enable-exportlib <em class="replaceable"><code>[other flags]</code></em></code></strong> $ <strong class="userinput"><code>make</code></strong> @@ -672,7 +672,7 @@ $ <strong class="userinput"><code>make</code></strong> </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2608314"></a>Installation</h3></div></div></div> +<a name="id2608299"></a>Installation</h3></div></div></div> <pre class="screen"> $ <strong class="userinput"><code>cd lib/export</code></strong> $ <strong class="userinput"><code>make install</code></strong> @@ -694,7 +694,7 @@ $ <strong class="userinput"><code>make install</code></strong> </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2608345"></a>Known Defects/Restrictions</h3></div></div></div> +<a name="id2608330"></a>Known Defects/Restrictions</h3></div></div></div> <div class="itemizedlist"><ul type="disc"> <li><p>Currently, win32 is not supported for the export library. (Normal BIND 9 application can be built as @@ -734,7 +734,7 @@ $ <strong class="userinput"><code>make</code></strong> </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2608422"></a>The dns.conf File</h3></div></div></div> +<a name="id2608680"></a>The dns.conf File</h3></div></div></div> <p>The IRS library supports an "advanced" configuration file related to the DNS library for configuration parameters that would be beyond the capability of the @@ -752,14 +752,14 @@ $ <strong class="userinput"><code>make</code></strong> </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2608449"></a>Sample Applications</h3></div></div></div> +<a name="id2608707"></a>Sample Applications</h3></div></div></div> <p>Some sample application programs using this API are provided for reference. The following is a brief description of these applications. </p> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2608457"></a>sample: a simple stub resolver utility</h4></div></div></div> +<a name="id2608715"></a>sample: a simple stub resolver utility</h4></div></div></div> <p> It sends a query of a given name (of a given optional RR type) to a specified recursive server, and prints the result as a list of @@ -823,7 +823,7 @@ $ <strong class="userinput"><code>make</code></strong> </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2608548"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div> +<a name="id2608806"></a>sample-async: a simple stub resolver, working asynchronously</h4></div></div></div> <p> Similar to "sample", but accepts a list of (query) domain names as a separate file and resolves the names @@ -864,7 +864,7 @@ $ <strong class="userinput"><code>make</code></strong> </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2608601"></a>sample-request: a simple DNS transaction client</h4></div></div></div> +<a name="id2608859"></a>sample-request: a simple DNS transaction client</h4></div></div></div> <p> It sends a query to a specified server, and prints the response with minimal processing. It doesn't act as a @@ -905,7 +905,7 @@ $ <strong class="userinput"><code>make</code></strong> </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2608733"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div> +<a name="id2608992"></a>sample-gai: getaddrinfo() and getnameinfo() test code</h4></div></div></div> <p> This is a test program to check getaddrinfo() and getnameinfo() behavior. It takes a @@ -922,7 +922,7 @@ $ <strong class="userinput"><code>make</code></strong> </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2608748"></a>sample-update: a simple dynamic update client program</h4></div></div></div> +<a name="id2609006"></a>sample-update: a simple dynamic update client program</h4></div></div></div> <p> It accepts a single update command as a command-line argument, sends an update request message to the @@ -1017,7 +1017,7 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm </div> <div class="sect3" lang="en"> <div class="titlepage"><div><div><h4 class="title"> -<a name="id2609426"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div> +<a name="id2609138"></a>nsprobe: domain/name server checker in terms of RFC 4074</h4></div></div></div> <p> It checks a set of domains to see the name servers of the domains behave @@ -1074,7 +1074,7 @@ $ <strong class="userinput"><code>sample-update -a sample-update -k Kxxx.+nnn+mm </div> <div class="sect2" lang="en"> <div class="titlepage"><div><div><h3 class="title"> -<a name="id2609490"></a>Library References</h3></div></div></div> +<a name="id2609611"></a>Library References</h3></div></div></div> <p>As of this writing, there is no formal "manual" of the libraries, except this document, header files (some of them provide pretty detailed explanations), and sample application diff --git a/contrib/bind9/doc/arm/Bv9ARM.html b/contrib/bind9/doc/arm/Bv9ARM.html index b3703f6..b66cccc 100644 --- a/contrib/bind9/doc/arm/Bv9ARM.html +++ b/contrib/bind9/doc/arm/Bv9ARM.html @@ -113,33 +113,33 @@ </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch04.html#dnssec.dynamic.zones">DNSSEC, Dynamic Zones, and Automatic Signing</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571421">Converting from insecure to secure</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571459">Dynamic DNS update method</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563508">Fully automatic zone signing</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563590">Private-type records</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563696">DNSKEY rollovers</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563708">Dynamic DNS update method</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563741">Automatic key rollovers</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563836">NSEC3PARAM rollovers via UPDATE</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563846">Converting from NSEC to NSEC3</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563856">Converting from NSEC3 to NSEC</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563868">Converting from secure to insecure</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563906">Periodic re-signing</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563915">NSEC3 and OPTOUT</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571475">Converting from insecure to secure</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571512">Dynamic DNS update method</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563493">Fully automatic zone signing</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563575">Private-type records</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563612">DNSKEY rollovers</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563762">Dynamic DNS update method</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563795">Automatic key rollovers</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563821">NSEC3PARAM rollovers via UPDATE</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563899">Converting from NSEC to NSEC3</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563909">Converting from NSEC3 to NSEC</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2563922">Converting from secure to insecure</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571605">Periodic re-signing</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571614">NSEC3 and OPTOUT</a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch04.html#rfc5011.support">Dynamic Trust Anchor Management</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571685">Validating Resolver</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571707">Authoritative Server</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2607510">Validating Resolver</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571692">Authoritative Server</a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch04.html#pkcs11">PKCS #11 (Cryptoki) support</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2609970">Prerequisites</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608219">Building BIND 9 with PKCS#11</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2610529">PKCS #11 Tools</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2610560">Using the HSM</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2635129">Specifying the engine on the command line</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2635243">Running named with automatic zone re-signing</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2610637">Prerequisites</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608477">Building BIND 9 with PKCS#11</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2608602">PKCS #11 Tools</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2634916">Using the HSM</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2635114">Specifying the engine on the command line</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2635160">Running named with automatic zone re-signing</a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2572669">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt> <dd><dl> @@ -187,28 +187,28 @@ <dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_definition_and_usage"><span><strong class="command">server</strong></span> Statement Definition and Usage</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#statschannels"><span><strong class="command">statistics-channels</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589481"><span><strong class="command">statistics-channels</strong></span> Statement Definition and +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589534"><span><strong class="command">statistics-channels</strong></span> Statement Definition and Usage</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#trusted-keys"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589689"><span><strong class="command">trusted-keys</strong></span> Statement Definition +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589742"><span><strong class="command">trusted-keys</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589736"><span><strong class="command">managed-keys</strong></span> Statement Grammar</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2589858"><span><strong class="command">managed-keys</strong></span> Statement Grammar</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#managed-keys"><span><strong class="command">managed-keys</strong></span> Statement Definition and Usage</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#view_statement_grammar"><span><strong class="command">view</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590162"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2590352"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#zone_statement_grammar"><span><strong class="command">zone</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591713"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591902"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt> </dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2595116">Zone File</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2595170">Zone File</a></span></dt> <dd><dl> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them">Types of Resource Records and When to Use Them</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2597415">Discussion of MX Records</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2597537">Discussion of MX Records</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#Setting_TTLs">Setting TTLs</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2597962">Inverse Mapping in IPv4</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598157">Other Zone File Directives</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598430"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598084">Inverse Mapping in IPv4</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598211">Other Zone File Directives</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2598552"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch06.html#statistics">BIND9 Statistics</a></span></dt> @@ -217,41 +217,41 @@ <dt><span class="chapter"><a href="Bv9ARM.ch07.html">7. <acronym class="acronym">BIND</acronym> 9 Security Considerations</a></span></dt> <dd><dl> <dt><span class="sect1"><a href="Bv9ARM.ch07.html#Access_Control_Lists">Access Control Lists</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2603082"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2603136"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2603232">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2603291">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2603285">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2603345">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch07.html#dynamic_update_security">Dynamic Update Security</a></span></dt> </dl></dd> <dt><span class="chapter"><a href="Bv9ARM.ch08.html">8. Troubleshooting</a></span></dt> <dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603371">Common Problems</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2603377">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603388">Incrementing and Changing the Serial Number</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603405">Where Can I Get Help?</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603561">Common Problems</a></span></dt> +<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2603566">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd> +<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603578">Incrementing and Changing the Serial Number</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2603595">Where Can I Get Help?</a></span></dt> </dl></dd> <dt><span class="appendix"><a href="Bv9ARM.ch09.html">A. Appendices</a></span></dt> <dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2603536">Acknowledgments</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2603657">Acknowledgments</a></span></dt> <dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2603707">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt> +<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2603761">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt> <dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt> <dd><dl> <dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt> <dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2607124">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2607177">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt> </dl></dd> <dt><span class="sect1"><a href="Bv9ARM.ch09.html#bind9.library">BIND 9 DNS Library Support</a></span></dt> <dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608280">Prerequisite</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608290">Compilation</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608314">Installation</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608345">Known Defects/Restrictions</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608422">The dns.conf File</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608449">Sample Applications</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609490">Library References</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608265">Prerequisite</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608275">Compilation</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608299">Installation</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608330">Known Defects/Restrictions</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608680">The dns.conf File</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2608707">Sample Applications</a></span></dt> +<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2609611">Library References</a></span></dt> </dl></dd> </dl></dd> <dt><span class="reference"><a href="Bv9ARM.ch10.html">I. Manual pages</a></span></dt> diff --git a/contrib/bind9/doc/arm/Bv9ARM.pdf b/contrib/bind9/doc/arm/Bv9ARM.pdf index 3333bcc..98d816b 100644 --- a/contrib/bind9/doc/arm/Bv9ARM.pdf +++ b/contrib/bind9/doc/arm/Bv9ARM.pdf @@ -3323,20 +3323,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1086 0 obj << -/Length 3428 +/Length 3426 /Filter /FlateDecode >> stream -xÚíKs7Çïú<ä ˆÅû±§µ-Ù¥T";²\»å$5–X¡H…¤üȧ_ g - 3*êwüsç×ßéàÔûÿq‡á¬|ñ¡„9Ç;R ¢¤á'Ó÷;¿Ä7ÿº6Í}%,Q–›Ì'á |Æ9±Îøè”#Zp±þ(šp jýAüå \.±–Jl:?;›ÌÎÚëàÛ -C„vº½îýj´ª.ªÙjoÈÝݯ~£”Ï&«É|Öüd4;m^|XŽÎª½¡cf—ì
¥÷ó‡tî±»&´â–hNYÊå
egƒæÅ1Ô*Ø
¡áMn¾\©oÄ´ÏÅ‘‚zgJcŒiˆÖLRÛó¿:t÷ä¼Ê@£)¡Lš†ñùh6«¦9h,‘J…ëÞ/FKÏ‚è^Y¸NÊà é-†bð@ù0x2q`ð Þ<Bí¨‚ððx|!9›/¾eè‘”h{ Iíƒç^*OHo1<ÀƒÊ'm?<™80xPï .ˆa~XðˆÛÃóçUµø6¬‹ùb™HYâ¤íůi^"þh©éå$d²˜`ˆq•R´Ÿ“L '¨÷4—aŒé‹Aä„mžË|YT9*¸ŸÉXÃò3™7‹ÑÅÅhQÿE?ì:ó]°^šB¾‹i†MPOÅúiÊÄÑ„z4içšòiâwCÓæy±dn{ƪ˜×Rj !BMG7„š\ 5¸÷D5ÄRP‚ÄFh.FËU• šêå”ì[NÅ"d zúÞ -Í<ò®à¹ÍZÜ=Vz! ¹,¦b˜@0N2q` Þ)Z«O¤¨¤Ì/k±³¤h'3ÊŒeìi•™ãb‚€!FÔ#(Fê=¤< N‚¾Ÿ¾+‚nQkŒ|Ôµ&䲘`ˆ‘µRªŸ”L )¨÷¸úÖÂÿ Ð÷Ó¡ï÷r>ŸV£VÔ·- ÞƒÛÊeÐ-aé*†b0täè_bçâÀ`@½'üJÆ)®! m ïõ|ñÅÌîžÖ›CIùX—±²WÌ0ÄØ訃ŠL ¨÷ÄSÄYf m›nÿj4 .W£ñ Mx_->׳֡_?É"RU 0Ä@èHÑßìÏÅ€zO PI(£‚ ^ŒÇÕrÙ@ðj>[ëÅ|ZO¨LôbWŒ0Ä°èƒ`‘‰Ãõ ±PŽ×;âb¡,g~ûiäÙØóïÆ Å¸qÿÃGL`) ÐÁ£+éÅ#‚î=áa)¡ºC‡nèø¥ÞÀijÆ‹ÓÓuÉXaÌsÍi+f"ÙaH@Qú÷ý2A`@`®Úê,ƒ@˜ˆóYÕðp²çèîb4[~ZO'”aÏDÄÄ# 1&:¸~(2q`T ÞÊ/?¹á Û`ñaÿ]CÅ»ù¢í=ü4Y®j.äs¥H™+æb\@eLC+Æê=q!%aJÆq
o/«Åhµ^”® ß–«ê¢y}\-çWëe\b.&52VªÇµP,/0Ää… ÆäÍÄÉ‹zOò -¯¨UªÓ…¢~W“›5LoÉïy/!GÅ -øîhÙöÖk‹Ï£iý;-ܶ×ø¤b€!† -4—ÌƱíT.Ó, ž
½ñÎ
n¶y}ÐËQÈt1GÀã*i‘FB&Œ#Ô{äHXo $hAÙ;âhóÁj붡ñ3ZÊ 4Dxé(fûMæâ@xÁ½'^Œ&Jƒ ¥ÛŒ‹ç`²\MÆËaûX…Ü¡|«ˆTÖm¨A’›-¸±9$±˜d‡$²ým…L ˜ëD‡–D9Ðâô>ðØ\Z”ûièÅ d«˜`ˆ -ëe#¤°`ˆÑ%ÂðÈÄñzO€Hék…äöa¯¦£õ ¬ääð`Lh1.Àà -æú7sq`¸ Þ.‚Ç„€¸ˆëõ$>eGðç2u ™+æb\@e\ÿa.Œ Ô{â‚Sâ$W‹öqûßf£‹pÛÓ‡ËS?Ï -7Ò ¾ûì/æV</Eb‹!†$P%’L $¨û W„%#$ª…äíê<Ü.{}õ»ÞN™4“’ñjò¹^®Éžò(²X 0Ä *1Ú6 ê>MW™Ÿ›P©$qùr›Ç{ü+³Wç_ .¨ïІËÉÙ¬¹KK)ö<<ŬC 1¨ ª(T™@0¨P÷ *ê=Bh +xÚíKSIÇï| + æ +Ñʼn‘„ óé·ZÝU•
Õ)j×0 GØw*Sùÿ© YUÝl@ý 6°ŠPáäÀ8Iej0¾Ø¡ƒ3ÿovX{Í0\4„W½<ÙùÇkaŽ8Íõàäx/K¨µlprúëî«·G'G'ï÷~?ùqçà$¾)t̨¨ßñÏ_§ƒSïÿÇ J„³jðÅÿ@ sŽ.v¤DI!Âo¦;ïw~‰oþwmšû JX¢,7™OÂ9ø$ŒsbñÑ)G´àbýQ4á>Ôúƒø˸\0b-•ÞG}Ùt~v6™µ×Á·†ít{ÝûÕhU]T³ÕÞ+º»_ýF)ŸMV“ù¬ùÍhvÚ¼ø° U{CÇÌ.Ù*Jïç éÜÿbwMhÅ-Ñœ²”ËÊ,ÎÍ‹c¨U°BÛZÝ|ÿ:¹R߈#hŸ‹#õΔ$Æ70Ò™¤¶ç¿:t÷ä¼Ê@£)¡Lš†ñùh6«¦9h,‘J…ëÞ/FKÏ‚è^Y¸NÊà é-†bð@ù0x2q`ð Þ<Bí¨‚ððx|Cr6_|ËÐ#)Ñö:<’ÚϽ´<!½Åð +¤y‰ø£¥¦—“ÉbN€!Æ TJÑ~N2q`œ ÞÓX†1b¤o "'lóXæË¢ÊQÁýHÆ– ɼYŒ..F‹úý°Û™ïÒõÒò]L0Äh‚z*ÖOS&Œ&Ô{¤I;×4?‘&~74m K涧¯Šy-¥"ÔttC¨ÉÅPƒ{OÔXC,MØÍÅh¹ª²]S=’}Ó©Ø™‡Þ}o€Úó“ì0|€€Š÷Ós3 ÌubÇ(b…f yWðÜf.î +½„\S 1L V'™80PPï‰-ˆÕŠ'RÔFRæ—µØYR´‡“™
ÍŒeìi53!ÇÅCŒ ¨!FP&Œ Ô{"Hy8œu?}WÝ¢1òQ·5!—Ť +cúg ¹80*Pï 姟Üpˆ…m°ø°ÿ®¡âÝ|ÑÖ ~š,W5ò¹¥H™+æb\@eLA+Æê=q!%aJÂq
o/«Åhµž”®' ß–«ê¢y}\-çWë e\b.&52VªÇµP,/0Ää… ÆäÍÄÉ‹zOò +¯¨UªS…¢~ g“›5LoÉ÷¼—€£b€!F +gâÀ$F½'¥%ºN™œÆ—«¶dý±QT?„Ô½t!IÅ ++ÓÉt +
4D éȆ@“‹÷ž ±”N
ñÍEÛz‰=
5nÓ]0”µOxy'¦»&`ˆÁåtýGKrq`0¡ÞL~<bÁÙvnï„¥Í
Ql{zÕbd’ F ÐÌõ/e‚ÀxÁ\ÇÕ@®4±JÒœ
7Ƹv@íÛeµ>„$žê¦°^6B +‹á +úyD?>™@0~P÷ a“ñÞ<¢ž¾®:œÕ·mG?./#Má Ýá»ÏþbnÅóT$f±`ˆAUB!É‚A‚ºOpE˜Q2B¢ZHÞ®ÎÃqÙë³ßõrʤ”ŒW“ÏõtEHö”{¡ÅbH€! T‰ÑþÓø¹@0HP÷i¸ÊüØ„J• ‰Ó—ÛÜÞã_™µ:ÿJðpA}Bk´.'g³æ”–Rì¹{ŠY/† +bPAUQ¨2`P¡îTÔOz„Ð +™,åØ!˜@0J2Q ¾Ó3+
áŽ9Àˆ,aÄO¦rÛJ4±Òõða”zRÃááRv€ ÂÔÑþmù™(°Gb¾Á³yˆà,¢£ÛqðËãý0Sª úu} |ðuUÍêRÍ?ý ˜ÑÝU4f´'T…Í‘?¼98:8~Q—úNrM’„R!óÈé{*øô!Ð&ª”€d† endobj 1085 0 obj << /Type /Page @@ -3482,7 +3485,7 @@ endobj 1107 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 531.1295 539.579 539.9861] +/Rect [527.6238 531.0298 539.579 539.9861] /Subtype /Link /A << /S /GoTo /D (subsubsection.6.2.16.10) >> >> endobj @@ -3503,7 +3506,7 @@ endobj 1110 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 495.2168 539.579 504.2229] +/Rect [527.6238 495.1172 539.579 504.0735] /Subtype /Link /A << /S /GoTo /D (subsubsection.6.2.16.13) >> >> endobj @@ -3517,7 +3520,7 @@ endobj 1112 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 471.1754 539.579 480.1317] +/Rect [527.6238 471.2751 539.579 480.1317] /Subtype /Link /A << /S /GoTo /D (subsubsection.6.2.16.15) >> >> endobj @@ -3538,7 +3541,7 @@ endobj 1115 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 435.2628 539.579 444.219] +/Rect [527.6238 435.2628 539.579 444.3685] /Subtype /Link /A << /S /GoTo /D (subsubsection.6.2.16.18) >> >> endobj @@ -3559,7 +3562,7 @@ endobj 1118 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 399.3501 539.579 408.4558] +/Rect [527.6238 399.3501 539.579 408.3064] /Subtype /Link /A << /S /GoTo /D (subsection.6.2.17) >> >> endobj @@ -6942,19 +6945,18 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1658 0 obj << -/Length 1741 +/Length 1536 /Filter /FlateDecode >> stream -xÚXÝsÓ8Ï_‘Çtæd,{x*reŽÂ•ðLF±•Äƒc[Iþ÷Û•dÇvÝÚmÖ«Õ~駕èØ„:\ôCg쇎ášÔ G›‘9^Á·×#ªeH-DÚR/f£gW¶?г¼ñlÙÒfÐñ,þ4yù÷åûÙôö‚X®9ñŒ âzæäÅõÍ+Å ÕðòÝÍÕõë·—¾3™]¿»QìÛéÕôvzórzAhàR˜oi
L¸ºþgª¨×·—oß^Þ^|™½Mg/m©i£#ßFŸ¾˜ãÜ~32
; Üñ ~˜
Ck¼9®m¸Žmלtôaôo£°õUN ŠŸk†Xþ@ - 5#tB컡áÙ–-#øé‚x¦9Ù°;RrQ ˆH6\ñ²ífÁKE?WÃô–%”¡ëZmE^ -E%Å œ1‡Åq"’<c)Y–ù†°X«/^Íóržå§Ö§§tE,ZóG(ëV², 1ß%‘VR0±žg¬ŽÎJ0¨Ò -R%ßõ4¤æUÁ£³ýÚ0Ɇ 8YòªâUϱ3¬Y&©à%aðGòŒì Åþlºæ`”~¨aQrö•Ä,53èãÖSŒÿš<¡ sé×<M*]5?ψ˜ái»¯ßï<R”|™ÜÕêqže!n½!‹¢4ᙨ~Çš^~1'Ì9~¥Û˜ÿ1óªí² ŽŒ–VvNùóh[VÉŽC¥¤‡³jãÊý¢žMÓÕ8÷ü„‰²HÅË]QǽùË"Qž ‰_LìâÔ/KØ„«tËû›ç²³i.á¯Ã¸yw3}Ôîá`'ÙÆE : Ÿ…w˜ÚM|ž @½”¯bi+ý'Šã×*Íz•saòÛ–—‡4_=øã¤b‹”–®ò2ëÞá -Ú‡¬sê’Œ;Ì‚U•X—Û3»kƒwÍÌc&X‡ -hOèž=?J¡ßxкñ€Ï®,:n±Äà8ò~ …ðšH=¸3š -/ð˜¬Ôðƒ`‚o -SˆÔâ F¼qŠœ=·à†ialšY©×‘í…¢"®2ãºh6íV$fÖö¼ ÃÁŸ -{n}"¶À0-†ç™ŽÆ’þ¶éÕº¶é: €‚eÃPÁ«-¯-U®X - -~û]÷øèEXÃÐf#Þ[¡_…æ»nßòæø¾éÿÝ!'endstream +xÚµ]s›8ðÝ¿‚GgæDßLŸÜÖé¥sMz©ûÔv<2Ȇ) +² ÷zÿýv`°‰CÜ^ò õ²»ÚoD
þ©âZªfx¦âx¦jiÔRüõHSVðííˆV4¤&"mªW³Ñ‹kÃQ<Õ³u[™-[²\Us]ªÌ‚Ïã×N>̦÷WD·´±^ËÖƯnnßHŒ'—×w·×7o?ÝO® s<»¹»•èûéõô~zûzzE¨kQà×+ 0\ßü5•ÐÛûÉû÷“û«¯³w£é¬±¥m/Õ 4äûèóWM Àìw#M5<×RvðCS©çéÊzdZ†j™†QcâÑÇÑßÀÖ×’µÏ–᪖«;=4iËTsUÏô ű<Õ6t£ôàç+bkÚxÍ HÎE¾'"Zs‰K6ëÏ%üR._ÑbØ–Pªz–¥·Edi.$esü1€‡A$¢4a1Yæéš°å—=/æi>OÒsûÓs²|æ‡üÂ:Šå, @FÀ·‘_ É˜ç «½3@:µÔ‚ÑŠ
¡y‘q°]k&ü¬Y–ñ€€‘9/ +^ 6@›e ž$MÈÖ”è/š¥õzé§\9gßHÀ¦~ÃAŸ·ŸDüÓÄ M˜—vÍ㨨²æß¾ +þ ~æl‡7X _gbÿH[ÒÃKöGºËàí¤ /žŸ6z_U $J<BógÙôƒç)IRR¤Œ_ªÐ‘˜_œÏx‘ÆÛ:sÊ¡5݈‹r1àÉž°¤Øá°Ò ¯ž:„;#ÏD9{èŽ/ÏÆ®R ±c…zEþ~5Àè,M +N²4Žü}GÜ!z¦.Ú½ ˜W0R$ƒ±JÓ ƒÌXQˆ0ßtÉC»¡×È4`‚uPþ!¹Û ;îßê_Ò®CE´Ó®9üÎ 9 ÿƒOÅåÌŒöø NLGuuÍ>Øàã‹k*
z‰¾¶4Õu4«$Âë5µá®´4Ãñ¢·é‚ ¾†Ã@þ|ÿhšž”—9‰Ë˜>lÅ«½ôÖݶÒmÕ¦ºÔgòF¡Öî¿žg1ÒÔœ +3@’aX]ÑRÎ0ÆÇ B›L®«8]àiŒðÁ,ø!R\Íñ‚W ¦9B‹½\ñ¥B•à,Œ*¶£
׬"ÆËË«}Ê$‘/KXªM»‘Áì7l{ÌpqÆp0¡oW›œIïâ7ÄÄ ô°-o|³”HB&QwÌ%#*‡hÈ ÇÚ®êz }Ú³€šsìÙ?@¶gA”å^qÃEœúß$¸‹ðq +Ÿøzâ©5íô—_ϬÐÁ
×Õû3ÃÀJÑ=§V + lYÇš7OŽ§ªÿò¯¿Žendstream endobj 1657 0 obj << /Type /Page @@ -6967,30 +6969,36 @@ endobj /D [1657 0 R /XYZ 85.0394 794.5015 null] >> endobj 470 0 obj << -/D [1657 0 R /XYZ 85.0394 230.156 null] +/D [1657 0 R /XYZ 85.0394 179.8868 null] >> endobj 1326 0 obj << -/D [1657 0 R /XYZ 85.0394 199.9052 null] +/D [1657 0 R /XYZ 85.0394 148.102 null] >> endobj 1656 0 obj << /Font << /F37 1026 0 R /F41 1218 0 R /F21 938 0 R /F22 961 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1662 0 obj << -/Length 3249 +/Length 3141 /Filter /FlateDecode >> stream -xÚ½]sã¸í=¿Âs/«Ì¬¹$%êãî)ÙËnsííµÙ´}¸»™Ê¶œhÖ–|–œl®Óÿ^€ -•ez¶½ˆL(L†²¹øxñ7O°7j§NêOI¡ÃXO(PëžS%L–™Yb2‡:´ -¼,Pˆ7ïLØCU© -¿—0ˆúA°U8ôݾ -Ÿ!94Æãxè8Ûü3†yÛNi †:K†Ñº K¾Î@rÕYz1Ôm2þ#ôˆ\Sþ>uÐÅ%™¨ãÓ¬Õa
‰^˜º¥/öõ¼ªçMŸb6ÁhGÚågPgRÓ³ukS‹Èùð8 ‰Ø¥¾`€Kè -)ÅSw¿] 6¸+pÐÞ¶µUª‚|µ-+°(&Z¯x„Oˆ ÚÑ¢Ü`Ðo_hˆr>X¬j]Š+Ê̯°·eÁÅTÉ5Ò„êG5õŠËeÔ…ÖKhv³¿LƒÃtÆ¢¿z×ÒƒK7%¥âY¨á|ɲðÄ%!ÍûXtG¦&.=ib|
Åàhå,-Mϯì&Vî3%á$
!p
–¦œA¨ì÷ŸÈ0¡³â¤ -¬î†róãk°46‘Êi0û?AŠ–ÄøzMØÃàDœP©Úé a¢‡t:J8$ÊO«ü¡XÍQqg¢Ôioæd°`œc ±"íàchŸ -Â29òi )¡}¬ÂAz”H‚Çš^5R6H -ÃV»Ïeã˜c—K¡1sèã㟮´‰)%‡Pòxæq»>æÚ+ƒCãrz›ôO¸T‹(T.gÛ~ ¦"4±b´â3”Ñ/(òÕªX<†U¨„Š¿è_=¬3æ°|*8ÿŒ±ìUB˜‚óõìÚ ëxñ0„ H¼2ˆƒÕé . Ó.ä‡üì„0LZŠ¶Ó·^:ñ×oh¶8ƒÒ¨Ð{€lu -(v©àƒFƒU[‹ QêvM#Ì+uø—ÿÄ%âßØ€ @¾…A0^ ˆRa€lóÖ¾h8' dÐÕ²Üy¶xÍöø7CþvÅüMÓÄ&Kÿ¤ø?ÿtªû]:nšêisÑI*¢ˆ0S¨t8ÜŽ „cuÌú¦Cä”endstream +xÚ½ZÝÛ6ß¿ÂèK´@ÄðC”¨öi7Ý´)Úä.Ù»{h œl˱[r%y7ÛÃýï7Ã!õá¥7 + ü j8 ‡3?ÎP ?±Ð)Ks™/²<aš ½Xí/øâôýp! Oì™â)×õíÅ‹W*[ä,Oeº¸ÝLdÆ‹Ûõ¯QÊ$» <zùöÍ«×?üãÝÕe–D·¯ß¾¹Œ¥æÑ«×?ßPë‡wW¿ürõî2F‹èåW»½yG]©“qýúÍ÷DÉéqFè»›W7ïnÞ¼¼¹üýö§‹›Ûa-Óõ +®p!\üú;_¬aÙ?]p¦r£÷ð™Ès¹Ø_$Z1(å)»‹÷ NzíÐ ýgR¥2`@)'4‚é<׋Lç,URYõÖÄÓhU¬¶Uýá9¼‰4ê·MWRÇ]UÞwž§ÆFuÛ¢½&r,…£ÂøÝ¥ jf%:†¾q Å£ìË}Ó>¸á¤C š®«–;G®ö;IsçÒ”]³;öUS£íÁ +e7r7¤5DZº÷!\× 75‹þµ-ëqxÀ¹ +‰]55*ùáèb–ôñP äsäI¹‰ùÜ‘F|Ñ ÿñ +§LA‡¯““Ëo=¹/0:JÑ.«¾-Z§)ú®ÃPˆD8àüŸnåUÝ€òà#Jç0ÚJ¦0O9l%t¢ylí
ï~[¤ÍÒ —]ÙSýÕvÙ ‚ß±‰„鎡@êõN +ˆ D‘óÍ0~P^‹éK¿¥7÷ê Í«çô¼vO›ì`ãå)¡©1d혓žë0rP¨HÐ| +…†ò1£G(Ìï©ÔqÆM“ ζ¯HmDš¤§©
H·.;jáÀÐØeáã7®¹ÅOๆñ¬£â `ËÁ#ªÝÐ 1á)‰öv¡’Àù±ÇÆÑý¿¥U$³5;ƒ(0-9æRq +ÙÎ7WßPã?vB?Íl ^¼ J)±5ŽßŽTõ®a=/å|ÌHN÷•1§'³Ñêþû]hÌDã뿦q‹&wT´7>¯žugu}Å[î»à2ä—-ãåSËÿWÃO5> ‚8è?ÿ¼Ô:r rЯè©5:x-è1 +ˆœ½—±iðÜ°±ôGê
ñ +UO¿F ‰ëª?C]j”ð£~.ËZ‡Š\Èó”ñSÿY¶M\7q×çT…MÐÒ‹öéYúq9ËÎÞ4½Í, §éHâ"èKGðù f80âFaB|ìÜ@¯Í±£8JpPùð(ó«ž„£íÆâ(—ëÊAÍ: 2øA-ÌÖ§9|B9¼¦ ~žÀÇI&]ÞÄ1oS0Ø*nÅ +Ì'[—ˆ7µë8£ ¤±ŽÝ汜 q-ïIé5Ù9ç~A¹ ZI.)=¶î=4qŽþÕÝ;1‚ªM’WRà Ðúã¥!eM}c99c'in¦tb!ãíÓ¾øhÓH˜¥¬;פ|
OŸsò¨¼³wÆÕGÝv¿9îpWàœ}ÝÕ–SFDÅz_Õà'PK ´LEÏ\; èGËj‡˜ß?P¥|0YÝ Ç —?*2¿ÀßV¥+¥*W!LRP¯]Œ–r%¡Ýµ—&:†‹0W ÷.§…ôìÒX°Lˆt!ÓÎ.Î\òS<å¢;^¸$ ¸È-œïxÝz2sžÁyfÌÓ3{¦ÀÌS, R¸5›šR©¡®o?’cÂËÚåtÀñÞ>•JEíK<í/” +{Ñ@“Ü° ÏK‹eU¯]b?ôÌöÏ +|ôQ,ü¤*JÎV1m½^1Üñ +`hŒñš›3ñª¥ó4lHÄáu¼w†ÁuCDŸB{}2ߘu¸¡Ì$ø„ɆÊ|Üe†qðFÀûá ÃÖ¼÷Uç•s—eLbþ2™÷?^IRb€²}âûÚx‡ì*ˆÎÿ¡Àgö6õVž²D Ÿ9°ý™hW†) +ÇV~‚bºÊŠb½.×gcˆG%?S3Œ<çÌñ ©`ü ±ÿ4¤8@˜€óõ‰YžÓiU>ƒ Hºr endobj 1661 0 obj << /Type /Page @@ -7003,28 +7011,30 @@ endobj /D [1661 0 R /XYZ 56.6929 794.5015 null] >> endobj 1660 0 obj << -/Font << /F37 1026 0 R /F22 961 0 R /F53 1313 0 R /F21 938 0 R /F41 1218 0 R /F39 1161 0 R >> +/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F53 1313 0 R /F41 1218 0 R /F39 1161 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1666 0 obj << -/Length 3851 +/Length 3769 /Filter /FlateDecode >> stream -xÚ½[ÝsÛ6÷_á·ÊsŒO’xL'uïšöbÝÜÜ´} EÚæD"‘Jêÿþv± -5›‹»‹¿÷F®ë”üŒÊ˜Éd:!@)# -e\¦Æ²DIåØîÊuõç²,heŸÊç.¿g'+ãŒz*¡s’ééôD˘ŠS;¨‘&^>¶m¾«–ë}Y”uWå›1°O,Õ/°ˆ&ØÈÃr–JÀÕS ê`ù¢-ׇ}Õ=Ó×z%²EÏ–«ûZuO¾ôT}±;öß)÷¾üÔ 6•óÀ(ë¼ó”°ò–J4ÉçCÙv° °v'Ó4M¬J0kŒtLÞWRXšLBŸ÷wwËÕÝí{ªÞ¹qš®Y7ÐhiíâÍaOƒ×ÝÆwnj*e‹¿–ûû’ú´Ôfè'âµjj"®<Iþ%¯6ùýÆs×Å€';®†‡eõº¡@çrøÑvÌ4ìöU½®v(p$ðbƚꂘ±r×~ÀõçCEÓU÷Dã Çý‹ò!?l:ªmŸAð[j€]¡J´ŽMùŠ>êf¿Í7 8XÎõ; «5 îÑuÙ¯?íï
#“¢
´†%Zhè‰ `§ðBNU¢›&ˆ ¿ü ®L QÙY%jqï+Ǿ*@ìô}h«ú‘Š]:6¶#w—ËÀÐ`!͹ -Ö¿½ŽÝ¶'mƒ®v£AÈc9ý?Ñ€Y—Ÿ(`\féy— SÍ»üžªßQF?¯æ…¹ÑÄÜ?¯3&” MNff²°I®œïvW|dÑ+ºÆÿê:ß–-Q·•IaÓ6TÑ>åÞåÑ7ùu,=–u¹Ï;jHiN•KI :ăZ¬þzó¯ Ý‘)2µG§üó© K }T꼶CS^o*ðÆk’8Ö¸èc¨ëˆ§T0mxöK–ñ4 Då 맼~t “'‹ÊÏ·ÍŸ©Ðìiº¾Âé)œR?<S³¤ xè¶êåêèaˆæÆJŽÄèµ… öÄâöª)"–-¬þ HpÎŒL“¡€hŸmêçÀ’Ûføí›Ûl3 -Øðµrš -EõXÒNHˆk([sVB`ö¿“Iìâ¶&æ·
:m\Ù:oËöY6.ÿÔˆ–Js¦…VšØÉpbrÉ -ç$úñSÿ%8XR¢³o -ò@~#oå²(•«:Î *7ûO½ò €¬»fßã Vvë»Q4 ”¢Á`0`ŒB¥3¸àË#˜ßSŽ}9T=õcã³V§3MIÅY«‹©æ®§r@%_?•KŸsŽí6=ô˜4¼@51ýÀò@mÉÓáü«§Ð„_ûœØ -ƒù£1é -SÍ+LO…3îªbNM¢6žŸ»§š˜|˜s+&E2œ|\dìVýJ ôèV³)·šöZ‚˜ÑÒ „]ÖÓcÅí[O‡°&•N °Áy27æ`çUÂÓõ; “;¯9æÄý¹Äµ?Д˜áY1T1HM®÷‡úÚéýŸÁVL¥â -8RLüY àI è§`#OÔ…–òÐôùýÔÙ{Y¯7MnWCšQ4Jy üù -z}31*À%C¾ä#t—W›ÖEbí#±‘XžDâp²
MQ$3^\÷×Mgs4|w„:ÍÜ6¿ôfÞÞðu7æ{‹¨ÎØ[ ¢×:ë}Ót³ö¦,“ Оe §šà`§5“:Ɇ,¬Âë¯ÈÞ4%ðôZÌWôWöÐ_yèéªÃ{Al »j:ßèÌÕ½`s)”ÎNP#Îà‰ jÄC§™ÓQ¥™â<›;
rž¾¼ÔY¢þßç£ì Kßx P€ Ä]çµ2¢:£•Š´Òy ¼ÛœÑK#™A<ËBO5ÁÃ0¤øüD ™ -˜¨˜Ó½Å’_1}Ðó (ÄO•às: @ãý^ÍÅ| Ã<U %|+!é “sh´ï¬WŸö°+Ü= vXn¦tZ2aM|Þ$¢Fy,zâ…,†§]‘ƤÓp•G„Tízx æEÊü
õÉž¦E*‡,þÆ
Ç(9V·ðZ;e2MÄ Ø/P/#ò3/À=Ñ -…`Ò1çý_:œ²þo6õk|endstream +xÚ½[ÝsÛ6÷_á·“ç"Ÿ$1÷”&nêöšölÝÜÜ´} DÚæD" ‘Jâÿþv± +|Ú_ñ|Ñ>ì‹ ¼»”jqÓà+æA‹ù¼‚ß”/š–ž»ê©Ø}…okðx
•%Rj”
goŠ]U.¿ÞW{ÇË£AX£c¡UêŽ~›ª*«òo(‚XÔ½£Þ šM_·M±ûçx€Y¬õ¶w¤¦w2÷VÜË¥`<1ÔÆáWkä¤íªýg¶=9Ù\–0
v—ñ,ɸÓÆ옖1íŸ2fÏ…Rô «çåC×Oõš}± ‹À3žÈT¿ Càšb`YšH•Ž¤X¦–’§‹ n¿ÑÔrÂØö¯Œ‰ã@åâ„lqßî‰òþîn¹º»yïúŸJ0—‹å‹›{7úw [ín%µ=«zš³hJÇê¡MLÓD1¦†›è4·±†6Óôu±…]U‚LCI°àž 0_ôh×Jƒ ðP5Ôãd¥‡/õÖÍ°®ˆRl·í—ª$â—†¹y&ÈH”]Ño ëæÈŸöu³©Ÿ‚XnMoœÌ¿·î©ÚÔ¨o» 'íìa¦©LriÎÛeÄ4o–žil•›}ÐëØ2ah¦ÎËàyNeX¥aI& <ÅBX£„ ظÍao] ŸÆ{4ÚÛz¬7®Ù Ç[ÿ¦öc{Ø–Ô.À³l0®Y +¼vG-ZäÓ¡êzØ k€ Î,KåÐ +¡œóH'–†ˆ¥RÞ}¸{=¡k!ƒ°‡˜È’²ÝèNõœAÒayê¸qaû6ébueÄ¢%ÉljÁ†÷¥W¨ÃˆDKágŠò„b:±Ð2¶ïY$`mü4»Cçì¯Øv-µÖ%¸®úþè+H÷{lÇÚy[íG“¸4‚öb³Á^g*aÆÈóÑ>æš÷+¨ï¨£AW2áú…µ=ÓÄÚƒ0¯ò Çhqr3ÀkN + Ô "™„e©gª¾n ‹æÁFL0Ë·+ž©Ñîi¹@°vŠ
kÔ÷ÏÔíi +º«ƒ^-¿ÅÐœ¢ ‘3FmÎù¦=n ’)#V ¼ý+Rg,Ñ"K‡ +¢}6™[[v›á7t
¶Ùä”(°ƒ0 ¶ÖÕDÌâ©N¸2¾bñ{‘2çÍ÷5ΈPôôjæ g•ëÌMð׉5 ed‡§ÙÒdZFÉ'ƒäó¼åþKÝUNK2ƒr0çf×HÒï„”NK2=v
´ ¤%èpZ‚ÖŒ–`EBì pE»#µ<V_©QÖXžMhˆ)h}VCàæiH§Æ(ü®Å o¶)ºª{Ežíðõȉ–R±Dq9J¬´°ÕáÄâ"4àßÄH‘J
¹‹IHðJÉ¿tDòA
ùpW„Ñ]dq°µ~»é±i›eõµ „†‰ŒÝa}œÊ,¶õGWÜzñ/äSú ’s
~†¡œ«D +ÐÁï8ª‰Éó|ú bf\ÆSNÄ}ž'š¬l~Ë]„˜€°M¹ðÖqv´\®ó!¦àûr3‹çö€82v +6òÄ\èUîÛPßO½WÍfÛvþ^Õ—e{ ’ÚŸ½²ž ¡¸ FÉô|¹æChà²8 +/8±vœ ¤J'cÒó® ñ@Ø‘#(Ýj §[í¬~û+¾ð Áfµ÷£Ë?í!ê ÿÓó÷u:ŠžZÇCxØŒ.GµvfêD$‹lÝeÌ|h#´k³oë7ÛáÍ6º…™ª²¡€V©OÁG˜6júŒRgñåÿ éæhpN¦ UN¡g
/é™P/vÌ5oØËâ ‘$žð0ظ³"® †çE`Ñyª‡BP¦c*Æðd1s&Š„ÿ˜:F + !¤‚c‡HÅ}w)}D*©œ±DÐ4g|h‰sÒ +\/Èq:ÛùÐ!K³N˜c®3¡ÃsÙkê¦ÄSÄó)Ñœ pMH0‘ÅPʉ™ŒsbF©=+’Í3ðë¾üpz?ýJqi‘2ÛàÐQ’Ê”?3Åõc®Kß·~žº¥æÞÇÇ ãýdñE$¦%¨^ïªH4:¦6 "
ÝRèÝ ºÎY Ÿ>“ÖxÕÉ|â+›®«6ËmÛ~,:TÁDVÂû^æ/Ô º§`Œá³7éçb[—ô%ÎĬ +qák'w0ÉÁ¡û¢Þv6 +—¹ÏÇâ$ ûSnèŠò1Ÿ‰‚hà*\=×ð$´éÄnóK_Æ̈š%"Kù ß¡ ™Î|†ê˜è³Í¾mûYg“&)àîs«¦Óå‡9Z%™óÁú+ÿ
XäiŠÊxúfÌ‚¯ÅÄ +ŽÉ¢FœÑš9#•*‘Œî6ŽàÑ+yú +Så©üŸ’&gDzéXÉ é?UŸ0øëÌÿOüïø©y>wB$Yšä^Ñ …‚ël,yøtþTôÿ +Oendstream endobj 1665 0 obj << /Type /Page @@ -7032,22 +7042,15 @@ endobj /Resources 1664 0 R /MediaBox [0 0 595.2756 841.8898] /Parent 1655 0 R -/Annots [ 1668 0 R 1669 0 R ] +/Annots [ 1668 0 R ] >> endobj 1668 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [250.9056 225.788 314.5963 235.1976] +/Rect [250.9056 159.9586 314.5963 169.3682] /Subtype /Link /A << /S /GoTo /D (statsfile) >> >> endobj -1669 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [108.9497 73.4705 178.334 85.5301] -/Subtype /Link -/A << /S /GoTo /D (dynamic_update_policies) >> ->> endobj 1667 0 obj << /D [1665 0 R /XYZ 85.0394 794.5015 null] >> endobj @@ -7055,61 +7058,70 @@ endobj /Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F41 1218 0 R /F48 1238 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1673 0 obj << -/Length 3282 +1672 0 obj << +/Length 3345 /Filter /FlateDecode >> stream -xÚ¥]sܶñ]¿B“'j&G ÁÉ“b]§–œJrÚL’ ‰ÓqÌË‘'Yíô¿w»À‘'žÜNí±¹X,Å~/xâ<€¿â\Å~œÉì<É"_BÍYpþ -3Ø7H…8çTˆè‘ -Ó ð~¹È$,^•Dú˜×{Ýó–» ‘z¼Ú¦É‹E¿Éè5RŠÆ¤´(ñp£©Ò€T†F¦îe©bƒI &Li”€—·%‚fšRaБdt8oŒçŒV72@gtHF‡üSFG¼6°(ò£8¾a`#ªW ÌRáæÛn7 oš( d ^ßÔÍl:6ª4ð£,Œ¦›› -ƒÔû|õó›û·?ÓÀ°Pâµûf¥w„ ,m¯w Fש±:D‘©ºz¬ÚB‘þÌ«mé°W7wôêÖ¼Ò
]ÑÕ¼×._#UY`„I#Ã+*
"[ ™Ø!¢¨„"ŠJ=éhÞ$TâuÛL[\“Wmý̸v -ÀJÓ3_Õ ™ð
Ï¢kš}[ùÀO ˜d臺[å¼$ˆþ¤…« ÒiÈ×-|LuÚ žhfÐ5‹R?VÅËDA=‰ñúöŽjfÿi…DF3eÀX»È¯ïöÆä - wkzêv SÜ>å‹Ï‚¹—Œ±nM2(v|Lh·<^
ŸÛ]Õ仪ft«uiW5‡ -L<×0‚ÆkeC£§Me‹9®#E¼¤ÑX‘œá :¦|a¶¯˜ûÌ- ¸I ÁHÄã-þÜW; -aGûLŽ,Æ>œ€b󊡧F¿O{& hW‚7¨=œ]]O[Rýu“ïûA—Ñ:RShH‚£Ä'eW£Øt&©H9ðÍ»hì¸!dð«åÀ à
èç
ù-O¼,Nýjç€Õk´G+”ŸEÑQñ†¢ƒýAf¤WeV -æãÎÑ1’ÀW*bb—!`·!ÿ‚‹ 6éh‹Æ垌ÀqbBÇòÃʵɱ«¶*x‹®E-=ìɲYwyÉ‘#ý!Ÿ -¸1z€ìžÇÐo!²G÷ˆ*WRÓrˆ7ØY×ÖFó–—fi©ÀHëæÓÍÅsÚÌh( ¿ef#ªWÌÌRŸïº<¾ÖÆÏ –xÇƦ_BÔ G5ÃÆÄØ”ò¥ñ”û ¬v ’0% SçÛ[6†B7Æ3ornŠJ˜2n/rÿñª'rñÐm ]ëG]óë Ö´=gÏÔöOð%«n {J ÇÝšÉñÇEdnmj;67ýµ¨÷%ë}ÆwI2C,³àÕ µÿh€u Ñ¡¡Äþ -®8P‘Aý,>W<Û䥞Îpñr êæI»Øgfžéy$Yœ -ìÛMÂI²'“m¹È0Ç@òp»Ãò3¥ÉÍ?®>]_~¸yú±‹wUió ’·7—×Ëñ¡¬ú¢{Ô“4dsškDF‘/¢fÆTj±Ù3ŒÅTq`ÕSIJkK±-«ûn„íG‹AÞTuIt‡·«Ÿ=ÍЕ¾T?åϼÀ¶-˜æ GÆ
sƒÞ5U«gÛ¸æ0 *2 -tU]A¡2<OëÉ5hÛ±ÖÄ¥GW/`37—9-'ì56jSÈJ³ËqÈ.gÓÂ]ÕTu¾3Á?Š,+ÇÂ…GÜ ¦Àh‹@¾«,ÕHi0ÒÍÖ˜w„Ÿ-Jû VUmGð ?6ë
ô$#‹ès -[€®ÚÉô¤™‡Ì‰P¸+>‘45ö‹ü{yó+ßwL„G n:c'®aˆŠI#: iA -–¾èDÂk èJ^¤;¬ÁÆ)Ò6>þ,Æ߃B[Þx¦8
¹K³^¡ðb}K -^Xé æÆ»PnbT|e¦ xx‹®+žú¢2üLŒgßÅ*Mou?ÌhN…~9ú/4—¤~ âŒ_0·è6p$ÁaǶÛ5æ`zèf õI™æø" /fÖ¡ÜôC ˜Ûã÷üd8ð½}t¸M¡ðƒX‰i"²ô‹¼-6$S鼚/ Q´ÛûÉö¢¬ñ@ (÷K%í}²$H÷œÉÌo*=”®Ýr¿µfDcîg$÷3Ò4ÜH€eÚ‰Ÿ…ÊÇßï̸=ückø¿&tø
$¡0MO|Q”` Q -‹0S¨ •¾ šxYËÖÿ%Ù£endstream +xÚ¥ZÝsÛ6÷_¡¹—£g*š ~LŸÜXÉ¥W;=Ûé\§é%B§üPIÊŽïæþ÷ÛÅ.(’¢œ¹¹d‹°Üýa?@‰…ÅB…n˜øÉ"J¤«<¡›òÂ[<Á؇ Á<KË´ rýðxqõ>ˆ‰›„~¸xÜÖŠ]/ŽÅâ1ûÍ ]ß½„<çݧ»÷ ?|¾¿¾Œ¤óøñÓÝåÒWžóþãO+j}¸¿¾½½¾¿\ŠX çÝß®~\ÝÓPÈküðñî†( =Î,z¿z¿º_ݽ[]þþøãÅê±—áû +/Àùóâ·ß½E¯ýã…çI¬/Ðñ\‘$þ¢¼*p• K). .þÑ/85Sçô'Uì*_† ÉÀ
‘ÌkY¸‘ÀIáŠ0 {-ûbNË– µÜê¶Íëjù‡~ýây~¡§ï-|‰Ò‹áâ'"ô\32ø„Ÿ¸"ö±;}¹ „ïìÓnW¥%÷ê-=;;Ìšv^u5µ^vùfÇœ–Ôä ó¥ôx|øøZüÆÔצƓ®t“v:£îúõ0Q` <× }xcå̘køŠË ‰ÜP¨á&Jù†}[7°´òC«©1»‡L\?Œ#»G{ØgiÇ–ÅÌvÊÅ+É +§¥]äP,!•ë!þh›«ç´¹jÕ•Q«ÔEmžJ(”r¥ˆü±ˆ_<å=è¸ÅÂUI¢‘ˆ\_%æœÑXó´ Æý +‚ '|>B›dÚ§M—oEÚLYÞnÅ> #Ã)¤D”¸Qä[ý¢–ûºÈ7sæ +AqÈÌm¼¥®º¿ZTÄCìÀ*-öŠz“Î!4\/ñ,tê½Q:°áIIÜ؇rzRЗб£©—W0P¦d2$¤ëúÐQ³Ûå-µ¶:í4͈‰7ξ2Œ¤Çp˜ßt¨C®óµçš8Tãɦx +$¬Äo ÐsÍH0ÂS +”™Â,Î'Ðá8Å5Ÿ€.°q
xŽq
ørã¾À*,(¥˜ÙÎLE€Ë3éY¯ÓyxY&Üy_7ÝtÇHíaæ[;ZžÓ GáÎseÈÑŽ”cy±óùæç«Çw?SÇÈÈ©åZ7Dí,o«›gK¸µÄJ© $?çÕ‘Èrfj•õÔ›»šº7Sê®ÞÔïÕ¤[¤¡7è[bidEsAŠè…p }‰ŠÈ—¨Ø@„Ö‡4Ad㌶´2Í«â•iUb¾‡# s¢þ‘¥Óm¯ð=ôB‰ä”áК7D2’>q¬%òšÝ.¬œs0|É‹‚¢9Sh¬µq·Œã†ç¦.ËC•oLVˆ„ð 6 +2驨×)/ ª?mðO± +ão€{Àõº-¾Q0¨Ëe¦ŸóÍlE…‘x{ûžkfÿiEhÆ´‹ÄsÚš²
÷1UÂ'¤4Åý+P¿ø\3#À=cŠåè×$@Ýèb(óœÕt1 >÷M^¦M^0¹Ò:³«Äa ô°zÇîΫŒ“1âë=V& +ÑMÌÑcÁ
1çE ºi‰ UÜÕ{"úY<½Æœ¶åèÛÊ fP°ª;ÂS§BLë4ã§Idj1µ ÂM݇ŒígÆíƒ D†ÐÌ‚7Tø# +G‘nY=ªdñ¹æÑ2Íôx„“—# d7/º÷}fä•žGMRŸÕ >—‰çs§£3ù 9Ü( Ÿ–Hýë`§ã\„>ŽZ.ÍcÔ›¶aùkzžX ‰\m°b7'JŽ’Œ¶å\ ÁÁ£ß –ŸIMîþyóéöúãÝ©Gh‡G¼~Î3OØ‘¼»»¾]ñxY?ëQJ»I!2ðDx5 “©…fÏ c3†ž5cH))µú²Ë²¢Ôv°Äà]^dÄwœwüli„.pRñ’¾òû¬`Š/ì8á:Ý”y¥gSÀf7 (€y¼š6”nFåÐ<&¹Ø#}AcøòØgp@‹Ä7´f2‰_Òr™|I9Ÿ®‰†¥· „ % @Áå 'o•µ<¯G^ +Öñ ×Ñèeª¶Lhu³ÎŽIöÀ˜µf½ó @ô{ß÷g hl)%•sm–k-¯Ù˜AÉOŽ§š§›w¦57Œkb¿]l•ì'ãeù’2 zi^þóÒ\Ý@?··>©É?©$i™¶ÙéÍ mO }<arÛõwMìãÉÑå~ùë^Çùä¬ÎåXeüÒsŸ/`17w®¬$|j¬× †µæ#Ç.;›
y™icœ¿”Vl‚ÄàÂ…CÒ eƒÞi“[®Ñ §Ë½·Ä™‡YUUSûä ›õ:zÈ$}Hád Èy5 å 3Àe—9R +WÅg‚æ1Ç>‰¿×w¿ò}ÇŒòîjƒ N£.¹Eɤ/‡ È´ 4F±ú,-´PMÚ}bâ瘛պá7ÃÐü ?%üÒcCüü€ÿóžTá÷íç‡Õç[lQÉÀ>42ù%µ,¥â<v‚6¾+ ¸3 À xøå9 ”û°`èyοÍr2rcß‹Æ‹ÎÖfRŸÓ +æñ—Lÿå{nÏ}óÐöÍòÐêCi»ÿù¾ÿprº5
ÎUOQäúQøâiÀôƯ?˜ÉÜ¥ç-^0/ûLíéço På©7è™N%üŽ\)E<á†DÀ+vûÁ0 }K¤¾$5ƒi͘I B®a‹úå[+R>º ”pn¡ +¶…w¨ÜXúÁøàî‹Ùïê¡+db?«Ïërúa&v!\ûÓë|¶Ó¡Ç_¿Ð- DÂO½ëèÝDY·ö +ɾÛÆsÖÇ÷Ÿöû"gG;÷£¦@¹øK¤ãÂ?èÿýƒ§ã¯Á +e“+cX„…BM©øô`` ú3¢ÿ•MÇÚendstream endobj -1672 0 obj << +1671 0 obj << /Type /Page -/Contents 1673 0 R -/Resources 1671 0 R +/Contents 1672 0 R +/Resources 1670 0 R /MediaBox [0 0 595.2756 841.8898] /Parent 1655 0 R +/Annots [ 1674 0 R ] >> endobj 1674 0 obj << -/D [1672 0 R /XYZ 56.6929 794.5015 null] +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [80.6033 713.4536 149.9876 725.5132] +/Subtype /Link +/A << /S /GoTo /D (dynamic_update_policies) >> >> endobj -1671 0 obj << -/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R >> +1673 0 obj << +/D [1671 0 R /XYZ 56.6929 794.5015 null] +>> endobj +1670 0 obj << +/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R /F48 1238 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1677 0 obj << -/Length 3780 +/Length 3944 /Filter /FlateDecode >> stream -xÚ¥Zësܶÿ®¿Bý”ÓLŽ"ˆ'åNgdYN•Ä²+«é¤ù@Ýñ,ÖwäåÈ“¢tú¿w»àKÔ#©<ãXìó· ŠÃþ‰C§£X¦êЦ*ұЇ‹ÍA|øƾ;<g &Íû³Þ^ ¿—ö0R“˜ÃëUo-ÅΉÃëåO³³¿ž~º>¿:š':ž™èh®M<{{qùŽzRú9ûxùþ⻿_ Y5»¾øxIÝWçïϯÎ/ÏÎæÂiï'¼Â/¼¿øñœZß]~øpzuôóõ÷ç×íYúç±ÄƒürðÓÏñáŽýýA ÉÔéÃ{xˆ#‘¦Éáæ@ii%eèY |>ø[»`oÔ¿:Å?-]¤]b'˜$=ŠÚÊ ZFF&Ò3ð.[ˬÉæ2¶³æÖ7Ììkþp$„˜?”³‹uó¸½ûñ(Mfÿ ‡Ý‘p³|Qùß%Í ëÖ4%ã×.?ÿpþOjÿ+Öq]lŠu¶[?ðòÕ€ ;»Ïx$¼ÿù© ílYå5¬)P&À˜¹QªuâOéD¹¼ø¯ê¼¡fQÓï2Ï7ù’ÚH þÞð«ÍîÈÍöu“/£v ¥.µ~ `ôËÅ€å‘2¹8eYÖu¾˜¯«êkVËœ_èËÈy¢%¿€dÉTÏ<2õ òï(×{G¦‘3iØ$Û‡Iƒ…¥"V<é[«L-%íp³/Öͼà§e¾Êöë† @’{/FØ ÷$!htŠ€ïU›ŒÖ -é™ -Ï+OWµa= -¥g†ztÛ4Ûúäøøþþ Oõ""«ür\Wë=ú¼úx¹¾#rÄ@kˆl,= CšÄïS£Ò‘s6! BÃ_Cë‡Ç¸¤}sÞÕã’w@Bþ2Á:Yål«¹¤Öpx2×È DBζ$Ý;R1¡¸£ºY盚¦Sr1€ÍXê×ÈÕDi"ú® WõÎ7\Uû£XgTÐ9Ô|˜N #áýl]W<·Úl ²5¤¶¤ÞÖÄ O”$öEGi*ÍŸ*1‘P#»Ê×…¼Ö̪’~›[ ¬¦X -Þ.™ÝV÷ bjîÉøÅbðÞ/û`ŒSg3.J”H^öõV‰Àå`}(úô1GñŒ'¬›þ4`ûdt1°Â%fèZ€qßÆáf¶!³Dz^& Õžâ^~¼>?™86œGýŠC]•ˆ«ë|€«©¹ÈwÇhøPoóEŽ}AÏ^³}«ïuÆ&a ·IRù»Ãö :4T›ªÎyÍ AŒƒ2NxÆÁÃoUÉÝ>d„7¼LHµÀé>
ó©AÇ -ç[ræó¡v{o±¾žô OxÍDEÚ&¯pšNµ`d¿ÝV»†K~¾ &ÃQ<NÔäM$m€ÔaÙÔÓøYè¶Ðyzöc0fd4î±Ì›|·)Êœ÷æT‡ÂªDS`)Žd+|XADnâæF|=„4ÂIÀNø¥Å yÁ]¬F‚jý6;΢í÷ùú™{a -å‹8öŒ -ƒ²àíaàmþëb½ŸLœ$09Õ?%8ÏeäÝê8+ö[¯x"ý¬‹šKÍaÀ£:¨2@J§§9Æš¯e0 ÚkXÉRÍŠ/eïªOK*3hÏkH6 è#Ûñ„’ûè±M¥5A‘oxSÎ 5Ž÷:€FÙ`&oB¼m²éK£Ê ØÀÀò éÂÀj;rã - …ˆíkÔAªÔµ)ÅÈÒyË2gc•Ò^ -¡n-»;ŠÀð¼ÇÕUÒ5–¯V4Bw£þCŠm7Ÿúìã¯8F7œIdÒ6‰šÖ -…7å§xéÁŽ£ýv¯9üÁ¥Âл}:\ ÃÎmN›Xi7†µ‹jÓ‚W´„ -J;]qðqBzuõùâ»z˜…¶×ÇìE—¦N¡þgO}µ|8ÖdÒŸhâSÙÈ%ø E‚ Eª” -®Ó1åí7¶Iÿ Ü÷WWendstream +xÚ¥Z[së¶~÷¯ð[噈 .$“Ngœs|R·‰“ú¸ítÒ>Ðŭ"‘²âüúîbàÅ”í¤öƒ@\‹½|»€<ð/ÏS •éó$Ó‘Òœ¯¶gâü3´}s&¹ÏÒwZ{}}wöî£Jγ(³±=¿Û æJ#‘¦òünýãâýŸ/¸»º½XÆF,lt±4V,¾¾¾ù@5ý¼ÿþæãõ7¿½¼Hôâîúûª¾½úxu{uóþêb)S#a|Ì3œðñúÛ+*}s{ùÝw—·ÿ¹ûËÙÕ]ØËp¿R(ÜÈÏg?þGœ¯aÛ9‘ÊRs~„É,‹Ï·gÚ¨Èh¥|MuöéìoaÂA«:Ç?mÒÈÄÚž/Ž”QzžË"¸¶L4¬¤¡ä¹ Ë9.û^ÈåuݶÅjY5ÍOy[®‹é¶¥U0¹UçùŸQzÍHX%vLÃ? Šx¯ãE[t_ ʵ‰2‰“$OÖŽè8ñvû ™.šGèÛÒ:ÝCA…Ǽ*×y×ìéóXvTÊ™¢¼êŠ}w®¿\l‹î¡Yó$M?lj +÷‡²ê–%‹M~¨:ú€“<¸c„õ7¨ XI'…^p [ìêäÜue¾±¶)t £óé•Lyï9hIk¡˜WMýÙ÷s– +¹{Ø~±ê ¢ ½åxûf‘´Æþ&·dDbç‡+9›??Àú£©çNOŽÄ‚yѱ[Ï uÝt= #oô’H„ CÜ95A]òƒîõ +ZˆPp³ÃoÛ‘:µÞŽÿ^‡c§ç"®˜Wz¤ ‰Š”ÔÞÜ—õ:‚éÛ™ýƒ“äèYôÕ €ˆ, +¤c*|oÚnYŽ¤ÆÓ³c'þÐu»öËwïŽÇ#î.*ÛUDZùù]ÛT´yí»uõHäÈ‘ÔZ%Bzzþ8
âxŸYtëHd™¢ð€š:÷¥¿>ÂÈåp¨ F<_ ùÓ tŒ&ArI6’„b¯‘%Cpq‡¼@D!Å#‰˜Ô>b¸¯ŠmK]ʹs•ÐªPæ-çj£,–CÓ³:ã‹ nšC^¬W*¨ K>t'‰„?>¯Ú†û6Û]Iº†ÔÖTT|ÄQ°D1€Ü×졈€ÛvÌO [ˆÛìX×n‹ê©tŽ7± ‡¼4–Î$†|Ô§‚ÇgÛCÇè°ÒxñÐ áö–sMÎËѸŸ^çö&Äiñë¶>ÑÒsÀa9˜ß!Š!}ÌQÜã‰ÄM·Ð}R:¬Hã OÀ8?ÜÃÌ ÔÈÀÊD#¤:Ü›ï﮾œÙ6ìÇXó†M[í7ÝÔ• RçàZ*®Š}GQ |„(pEßN²]ihu¦*au$ã€7ßDƒ†bÓ´¯â ˆqP@ÆIÇ8øÀ˜J Òw&qj"0º§a>h +†:Pçý–Á°4Ÿã€ žp¼íi6@Ⱦ_²ž¥š8Ÿ£-xìØÆ/'}†½N'}B¯øØb{_,¡|Ø?Ïü¤I”é8y™ŒÐk†ŽFÍb0€:>¡„mP ãdñPûܱnÅ–*åêŠH-• óá×1[rž‚ŽgÐÃíÌŸFì£Êϵ;4ø&É‚HרylëR 8IǾԇ#ˆ +jc/ÇOÅœ¬Kà€™DO‚è36 ™1é´9•c´š +¯ÖPÊW«bç,'à•º=û–\ìŸ:{ä» %Ù€gÞ 1¿çX(0´±|=.‘3›v«† N*ú NJ‘Ø…\xl,œA™„„!Çè4ßí*mÀ#VÍ‘œ‘æˆ €E‡¢€ K´åT { +pÍ G’³ó(*m~oì˼XÒ|Õ•Åi[(`||êš!ØÂA¯l¡ïŤ[ýÌöûL–%//zͬ;Öö@Ñ48!vû«¤ x@µ=¹ÜȪkgsG2j©^³¨<‰ +ðaݵó(Zšî¼|ÿWfd4®±.ºb¿-ë‚×怛ü¬D“g)¶äüØ€G÷fâþ‰Z\V„¯Š (ÇÚ°€Cîà®7“ƒ +v›
gê]^¾}á6AZ€"‰Šƒ¾=}õêuO¥eŽÖ%©ßpÆ +eb^;ã4²·?;d—Yw7鋇 GIl“€q ‚™9ã Ÿ¨áÓ%ïSüªXùu}Ä õ„ƒ 1c „½‰”l‰à¸¾{Zè S@>ãƒ.§I¡#Õ—ƒÛÈWåá7‹Cl D iú;ÄÁåeS—
T.¦«èzø Nª,Q ›ú 1jC¥Ð )5]ãb*¬"3Œ%VIhoŽhÞ°Ž 5Ví©br/øÅU›)Žü +³øî’¿-æüì³·ˆg + ¥iÈýáÕŽð‚/;ܳ oR¡éÃ÷C:ROG²ð†˜6N’hš·*ëU³
à5!@ÁQj§O>Hoo?]ÓŽ£ÐàpÏ^õaê >~ŠÍèùXpÈ$?Ñ©÷Þh•šËÿŠ`¾ÿï·àýCy
Ž=MO\¢)a£0‚' +9n²)åì¢Iãd†ôÿÎ xendstream endobj 1676 0 obj << /Type /Page @@ -7122,34 +7134,33 @@ endobj 1679 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[0 1 1] -/Rect [278.4002 642.0816 280.3928 654.1412] +/Rect [278.4002 570.2936 280.3928 582.3532] /Subtype/Link/A<</Type/Action/S/URI/URI()>> >> endobj 1678 0 obj << /D [1676 0 R /XYZ 85.0394 794.5015 null] >> endobj 1675 0 obj << -/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F48 1238 0 R /F41 1218 0 R /F11 1451 0 R >> +/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F48 1238 0 R /F41 1218 0 R /F11 1451 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1682 0 obj << -/Length 3196 +/Length 3076 /Filter /FlateDecode >> stream -xÚÍZKsã6¾ûWè¹jÈàE<’““ØY§6žãÔn*É–(‹;鈒=ÞªýïÛø(y&›Ò Øh4ýøŸ0øñI¦Sí„›§ÒŒñl2[Ÿ±É|ûöŒš$%}ª¯îÎ>¿’fâR§…žÜ-z¼lʬ哻ù/SŠô 8°é×oo®®¿ýéöâܨéÝõÛ›óDdlzuý×Kj}{{ñý÷·ç ·Ÿ~ý—‹¿Ý]ÞÒ' x|u}ó
õ8z az{yuy{yóõåùowß]Þµk鯗3‰ ùýì—ßØdËþÒÙlò /,åΉÉúLe2Í””±guöãÙ-ÃÞW?tTœ¥Bj1¢@Å{ -äƤB1.s©–Bz
6»Å¢|žhƦ_|ñ%®h’(“ZÁÌ$á<uY&<å¿ýÇϯDŸibDj„‘0&K™‘²Ý®SÊfÀ÷«º^yEÊ{û¸-ëª9P O
çz¢u–`td©D”ô©üJBÅmh©P¦|µªŸ“ªxNþUWÅÁü\–iîN ÐRH úº–.å¸o®¤Aeû¤°{ wØ“¼dûìLê¤0æÍy"-Ÿn—¨TfzJ ‚f6å5î zæóy1Í-=7çvº«¶åº áOe>²³Ü±”)©Â¤›j>k9â„#bjØw§âˆzCôóbUl£ ãsÁ@.5ïOEvÈ,¨[ê¡!Ã#È,uF¹À¼Zr6½[dyób‘ïV[z)›‘½Ð~º,Œ¯ê±‚Ä)Ž™±©ÕJ¼bÆ=ªf ©¼ï¶Ë¤z?¯×yY ±Ð©œŸž¾¥™hÄ<UL¨¡ -©×ô%$GhY/¨FKðï/õ.ð
ÒË®)«bjz ú eÀ«‡ú©WsrÊon~¤FS/¶ÏÝê¢Y ±Î_¨QE·Ã°"z÷¶ý0¢5L“ÖÊ0×£~žˆ’:s§ý¼OuÜÏ[* -r˜°fù¶Hê*)ÞÊ2–I¤üÓ2´T#B Ö«Dª4ìÌ@Š;²ÐdíÓ6µŸsßÉaã”áS¡,‘ u×Ô,ªü~bñlYÌÞ‘ÀÛs…ßÛb]o^ˆ û8yàŽjðQÓDÞ¦4ƒàÄÅФ€+ ª:¸u0ˆ˜ úëÉ«°Š,°ýXl@¬õþ8/xsÜ „M… -‘8 |ß?AÄ’ Ìh ࣇ²ŸÇ!MJüŸŸ°T 1 -< ¶!¤.ü´Ìb6/={P‚WVåS*lÒ`aE ™áFH®@SÑYIèB¼OÒ®ïyy -Ãúëjsl …N ãÅo!1)u4u¤õå´ÊðôeþøXT':>Ζ×B1ª|é}_LqšÍS¾zC¯µŸ[EDgûõ Æ2Ññ²È7Û{0Ï$r‹¼P'd*úFSbº¬ ‹ÅŽp/¼Îw›ùEŒk(PhÌ`>ÇÀ ²ç«&@ˆf÷øòySDÌí K<‚èocS¯c¦_ì…P€kß·ƒxXÙÛ O߷Ư%…–©1ö#kÉI"LÅ”D< (±b´F‡„ncÝÕÉý²X¤V¹XÖ¶ÈÇÙ€¥1 Š¡ë¾ ç^†¶”bBô%³€ ÛÚù©,žG$YÊ™Íz2º(+[t~¤Ò -Ú/è~Êut]<ÓÅRüU$¦¶p‰°1Ÿ…óƒAŒj«áiË›~i¼¿œ ~Œ>À§˜4º 2Üw²„©W«ˆ^GA=¨%M 8«z‹jñ–r_23±>À – å§\*2eö¢ƒY”µÑßLëoBÇì°-Ðòš€'ž—hÞî+ôøžÍvwßÂ|«³à€žÑ±Mèö2ÜÞ -î½)}ìƒÊåШ+ŸÆ¡ -dz!Cë9¬Ô I‚‹TÁËGá -•2-¡xÿXv5=ÌS†ùòù¼ ¾³×ôĈ†þ¶[ã
‰óá~yæCUù^S=Û¸‚š £‹p}“ òBÃC^‰Ž¹,`ÍCï =éhlä` -ohðœõ5ÏÀË…¶ÀÓæ` WÝP³
ÜÐ^ƒUåxº96;K¥Uz0{Ȫ"ãöâ ó¦¸3ækY*dÆ÷$T¬•KñN.ÅZ¹è AhÅöážÿHñ[u0;‰¨5b"<¶Vå^›‚70‡ .ä`弿"îeľ(¶DÃÎlf0&”jáÊs$ Ü:&¾<‡ª’ q7©lšÙü}»%í aeÔ9Þ›îàìP¹Y–Zë"*=a$*•Rš¡‘ Ûîšeæeƒg†Í!p?ÐŒ?³¨õà˜ÂIØt<B<ÑtúÚý¬4 -Í8bÈ*‰kJ JŽ‰ãÇŽ"xeªsƒÞ—?õÜ#6•V³d\’%hFG¨¸‘怪‹gýMQFà¥Ý¤/ÿ§T¾âFýO´,€0³|üìªÕ²€ÚO)sò óhú{HoW -Je¥N£…¡²F¬ê„²úr|ÂÚ|( ¬ö´¶¬Iqâ•Œÿªm w¾ Ÿ®rÒnöŠ¶L–:¡ø+9üˆ¶> bõÅø„MK#(¯„,®%ôY×Î\g§ü±'Ο¥´î¯eÿ,Ä<ôñŸ>½+œƒ« ,ÖŠã¶ø›Ivä+À½ôÊ!Ô‘Q¾©·íqJ‡H:¤Ó/÷áyÿ„þÌà·½(8yÜ! ‚z÷ÕCAZê΋^±a‰h4?}ÃÖ#:~Á‰|ùŸ¿+’ ‹|Æ& +xÚÍZÝsÛ¸÷_¡><"ø" +™1-¹œXm™±–,˜ÏVç‰á|ºYÌD& Ýü›.‚¿t¯™I&Œ{)L °8ðRÈpÿŸ×h
P)‘Še¸{?¯£‰ÁèWWWÙ›W¯^f&®‚3@'¹$B°,M¥Ÿ7[•EµmÚäÕÓÁZý9ëüþ¾˜¦ü!ìêõsÈÅÇÙj7/"új‡É¯^-àï‡?ÿ_÷d\±f·X” ã\bIF·Mó_^ÉþÁ%`i+‚9)ãV©úÂ0€¦oêzUäôýý¶¬«æ +´\#È>žUÆúÆ@…· ² v}Vð^äYžH³}q–eJÚÀóâ<QNL·ËLªR3¥
™NgyEÄmA×|>GÜyrK×͹›îªm¹.húC™œ¬È8ãZé°è¦šÏZ‰¸àˆšÎ=ÓqF½!þy±*¶Q‡ñµ`¢PFô—" ræVfDxD•²Ìê,ÈÈ©ŸÞ, BÞ¼Xä»Õ–nÊfä,Œ_.
ó«zì(‚"q‰c0Ö3{Å Ó &áÝv™T çõ:/«K1 vjí–épñ!~Ó\êÁê£ð͘UÅO¡×õÐ+[ôr‡Ô$ œHm#$..Æä:–YnK„7·x²þš¯ ó§@7Å–«+¸þûwïß]¼½¦»Í¹pÓ¢¹‡¸T4AÁ⡼傮¨¨Ò›‡bÓ®æ¡*´`Òº½˜YÕ7—A*Ûî =…;8Çz + pÊò¡ +o˜ªfù¶Hê*)>ÂŽr•e +ªÓ:´\#J ö«%ÓNf Å
á,Yû„Môcîœq<2<ê +TG,ˆîšÈ¢ÊoW! +Ï–ÅìWÜ-0Kø³-Öõæ‰Ø¡Xø5. ¤£|<´Ç”áÌ!‡.Êãò®ªƒ[@Ä4ÐßO^…]Ä`ô}±µÖûó¼âÍq<hÀ–2ö<ô¸Nà!rùÒ±X7[Ͷœ –-βÓË·\#ë +%ÁÔ÷tð_VöNÂó÷Ñøù]¤4ŠYë>³‹œ$Ò¦ÐL)¬gB¡B¬íÎ!¡»ØwuAr¿!–Ìé,6´m哹PKc8 ÃÐmA×½ í(Å„è5¢Jê ~l»æ‡²x ÑD¦Lp—ö +¬y}¢+½y1e-“F?ïøY¡mpcÉ
‚épÂ]7D¶è5 *¿Ã·›c«s¦œ6ƒÕCnTÐEÙlÿü}Þ4wÆ|-eR¥bOCÍ[½´èôÒ¼Õ‹žP ù~¹ç RüÖ]‡ƒÄÔ‚˜€Çö +s ÝkSð¦â´Ã ì\ôw$²C q,ª†ôj8’Í æ„V-¼…òÉFG'·Ž‰7¡«äGÜMiÇRןänI;iØuŽ÷¢{qvhÜ4eÎe±*=Í”RvûÏ]²Ì¼lðasX¸ XÆ¿³˜õà5E¦àЙƒH—Ÿôõ[Y(GEš
¿~ÿ¾YQ^ì=ªÍã +qÆPT÷”@ƒ~Í ù™e”ÝD*ÊzxßþÔs_±éô´™Ì&%£#\Â*{ÀÕųþ¡h+ñsݤ¯ÿÿf4¾Vw.û¬ ”ørüÕUkdÍO9ùžPˆˆü½B?®@áŒo–Ç¡ý vDAÔ¨ñ:µ¾¬í¾(B±iÆ=c<éð—)úÄë5üˆÔUry:‹= ~Ùo-ÕSâ+6I©æSá¯+´“§«…¡µF`uÊZ==¾bkqÎ 7úkqpºL=“ðŸÅÖ '$5Ò¯ÛXÎ1“ +uÚV™„úÍfÏ$ð#¶ú„xÕSâëµ”Å/Fœ¶”ãLºÐ6†’ù÷ì„'ö”ùRë~±÷ÿ(‚ð³‚3ʘB~½á“gõS¨ØýŠS[¨þœ /”¤…2Ä)‰¿"Òñ‡lüðƒWøEcàê©þ_ì¶A endstream endobj 1681 0 obj << /Type /Page @@ -7162,42 +7173,41 @@ endobj /D [1681 0 R /XYZ 56.6929 794.5015 null] >> endobj 474 0 obj << -/D [1681 0 R /XYZ 56.6929 720.5366 null] +/D [1681 0 R /XYZ 56.6929 636.8504 null] >> endobj 1370 0 obj << -/D [1681 0 R /XYZ 56.6929 693.0249 null] +/D [1681 0 R /XYZ 56.6929 609.3387 null] >> endobj 1684 0 obj << -/D [1681 0 R /XYZ 56.6929 256.4221 null] +/D [1681 0 R /XYZ 56.6929 172.736 null] >> endobj 1685 0 obj << -/D [1681 0 R /XYZ 56.6929 244.467 null] +/D [1681 0 R /XYZ 56.6929 160.7808 null] >> endobj 1680 0 obj << /Font << /F37 1026 0 R /F41 1218 0 R /F21 938 0 R /F22 961 0 R /F48 1238 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1689 0 obj << -/Length 3769 +/Length 3726 /Filter /FlateDecode >> stream -xÚ]sÛ¸ñÝ¿Bo'ÏD<|’àô)—sRß4Nk»Óiïî¦(‹ŠTD*Šû뻋 ’¢äË\Çã¸X`À~|ÆàÏŒŽ˜LÕ,IU¤×³|sÅfÏÐ÷áŠ;œ…GZô±~z¼úñ½Lfi”Æ"ž=®zs™ˆÃgË_çïþúöï7÷× ¡Ù<Ž®:fóŸnï~&HJ?ï>ݽ¿ýðÏû·×‰š?Þ~º#ðýÍû›û›»w7× n4‡ñÂÍpfÀûÛ¿ÝPëÃýÛ ßÞ_ÿþøËÕÍcXK½œI\È—«_g³%,û—+ÉÔèÙ>XÄÓTÌ6WJËH+)=¤ºz¸úG˜°×k‡NíŸÒ&ÒBų KÉÓé]fÓ°k‹DñˆÇi vYð©]öX¸Ë«¢Ë׋çj_ŒÌ%ƒ¡±™õg=¡ °&ˆ‹ q.u”*`r@ýq]¶°ë±™7Û®ljl'ó -89ËùmM`'Ð2oé ß+Ó§¤u¤ŒŒ¿Ñ1có—¢¥AöL IgaÇäÙ¾-–D£[ÄU[ì¾;lè7ëºb³íÁ-E¤1Cpdd -ÛÄ£Tkag'^Djæ»knæEÛìm# @óÆþ.[– ý.Ëeýƒk¯³¯nÈa]ÔÔÊ›ºív×f¾Ï»²~& ÙrYâ>g•›-ë2jµEî -ÓÇ:¯0 ×úcrß®ÿmê¢]4õ¢]ï»es¨ÇœÆ#¡Dz™•€5ÁK_@ˆCfþeÏ]JIG,¥˜×٦𢊠ŷ²k©k¹/æ$¬(¿ZÁ¾‡Û`l?¾!·HêjÜLËÆQhº!–õøKŒŠzV¿ÐIm‹zIâ ¸uÔ:ìÊ®hQ¿9)rÐe±ÊöU$ŠÔµ2<I"Á¥rúzñLÆæ›(NwCëfÂø%ÊyS*R±yMÆzXdÌc!Åu«¨–‹¼*‹ºkO,³þ’Ä\f `Mp0X¬Žaµ) ²@*-“8Xfl 2,¯ù¼å$©«^ |³Š
0ºnn$)4¶Àh/KH×-ŠŸó¹n‚@ÀyOAZbcæ×)ˆ&ÉžJ"Æ% É^¾. 4<e¤ Ø(µz‰ð«X!½,€¾ÁðM›0‘RqâÄaâpF"0úÜ ç´ÃáI”Jáç„-LÌÛm‘—«—ËÝ¡¡F[l³]Ö90ˤv( Aåå7ÛwëEýmÙl²rJ#À¹òˆ¥#Õf[°H‰ wx„äSð¥‰÷¥»U.$3‹îe[ð©Í‘ {5 –J§¥ÿVd˳J©Sˆ¶—•²u^)–=÷¦ím—ueÛ•ù©R*P#«Ë ¬ †J G'ÉA4{ôŽ¨Léœæó¢Îž*ï ?ÅÖ™]N^ ~{k°H«f熂Óx¡&.–z»uÖyÎ>£‹qSù˜Ú¨Y»,' -Õ¡ìÖÎÚß5ÞÀ÷M†Ô'1ÀùÓÕOâäµÓîa]8m…œ¢®tð¿(¿¬QZ<eíiŒ ªžÆê2 é”
ˆ ûAB„¬G|øÐJ #dhL†y*¢…Ì!aiða )øü¶£ñÖŽcÃŹ8¥›Úﺚ¢aÃZø\ݦ$×0äØÑGF?Ý.«[°ÛÕªy&àZ Gr$–ÅATm
-’GhÜÖ9ù”²ð?<(† €Í‘â -Ø€d×~Å- -ñ4‰í©µÕ7¿ üðׂ •ÊHÉWÒ Òy½óHVíʺÜdÕbçÒS3› -ö9¸]Ml[ -Ѧ‰ÿ€C7=‡®4™V
´ÏÐ õ Ò^ÜIA<È®ZBq–V÷ì+ÌPVhêê…`ÏQã4g<ÁÞtÙ~á‚u?ÕC!îÖ
„ã83ù”‰I>L1‰ ”QrŸ2¶w ”ÖOøIˆ-Sû˾<æ‚€òÓ¬ˆžv¡©ŠçÌΊ;(5(~Û<°{Cy4¥Çtt“½'cÇ6_½ryg¶-v`p6Y{ ]0Ü!8 ój¢2 ª ™Vÿ‡l4✙W4®‡uAå<–Õ9XB >x‘ÛÜñÔÇñH¦B_f `Mp0Xl G2‘fÈ‚;±T ½ ´É7¤±÷R -À$Q -9q0.hå°*c©ÓùݧÇÛ÷ÿ&4ÐØ6{ÆÁž`q±«…°‚Zdœ-(ÊÀуžP4Š©Œg±÷äÈ[m -Ò7[$ŒÒ.`âÑþàf·Ã䉵¢€ ’ùTÉ‘a³ù[n£q)•/,ª`°},0*¬ÞÖ]‰vÁ²$)• }øô– ²M; ZzñÆè¤vãíâá×VäZú‹ Q:
GUê¬j›ÅÑFŒb‰DGMn(rÀu0F*É¥8Ñ$‰iÃ6Z;¥ë(Ñ¡’b뮩µ`vcp¢/ ¼Q؇`''ÂåJ -§@[Åë.¡ÎX&¼Ã2Ì/¾m«2/» .!5‚%ßÁ¥çM~9 (Ù4ž -¯°œoO»²#éØí
4üÞHºÌBäu¹„ gê&<¤J‰½ŠGsú¼ßeÞ -%îÚ »íd‰ñvè"Û‡0ª'È› € 2{Ž‰—¡d°= -ï|Úf2ýÀ‹t¡N_ùM¤|Wq/ïÙ$g¾+J ‹¸üÌòˆtá•¥Cš|1Œu$1í»D; >`‘TCâ^-ðú’rÛj¦ c@Ê3ýZÔœšÔo<Y8œÐ&,žJAbêDDÐþR ‚-ªN%§µt šUg_
&N\E‰Å£±¾°G\%éPÝ3Ö¿R²5l´äí÷_ípBÚžþ©‡d¾Š#|<qð,Lñ§ß c+ðÆœyy›‘&ž)d<>Z-
Ä0"™`ýü %endstream +xÚZÝsã¶÷_á·È3' LŸ.ßÕž¯ñ9ÓI“<ÐeqŽ"‘:û×w @¤DÉÉ´ãñÀûõÛ%Å5‡?qm4ãÊ&×™M˜æB_ë+~ý c ®„§™¢ùêûÇ«¿¼WÙµe6•éõãr°–aÜqý¸øeöîooÿùxûp3—šÏRv3×)Ÿ}wÿõXúy÷éþý݇Ÿ ÞÞdÉìñîÓ=u?ܾ¿}¸½w{3F ˜/ý +g&¼¿ûÇ-µ><¼ýøñíÃÍo¿º}ŒgžWp…ùýê—ßøõŽý÷+Δ5úzœ kåõú*ÑŠéD©ÐS_}¾ú1.8uS§îO +ˤµÙõ\%̤°Æ€ê„Z!µQpÛÚ²TIo[ÊÁm í$½ÎTIânû¾íK:¿Ê{j5ív×Ô¾ÿôx÷þgjo¶7ÂÌڢ캪y¦¾ª süä|‰D˲èËõ<½à3bÀŒL4KlšÁ E•×»§2--3Yf<;‘g\ƒâdÎdD2žh>¤¢ûSÚ¨pÇeþ¥œW¿ïÊíËñÞB&RÒÅÍ#ÕÄî#é$Š -Æ»ß5p…Fõ7É̼_›€´ÜÍÃX»é«¶¡Ñ²ÉŸjwï0ÐUë]÷$*xîW%QµO][—NîÐýÃýgjÐ! Eÿ²ñ£w?þ¶¨²ÙÏ7BÀˆ
æ·*¨˜äN+˜ÕZ:æ›òk¹%X´¥×“Ázî90Ù6ge›¦–e™’—e;¤:/ÛHåd[öÅjþ\ïÊSÑr˜ššË{Gª‰ÍG¢U oxÜý‘$˜šƒÓlû¼ŒàÂUªH Û_<´@œµ$f¸“«2*õæ28à<å|öR851“2¥Ñ ¹9E¾ëœÁ ¤1ÀUWnI–ØÙÒoÞ÷åzÓAèt;’J@73ÊŽu‚x‘ÖÌœ/)»vçŨ·hÝΪ§ßEµh¾óíUþÕOٯʆZEÛtýöÆÌv…×zÎ +Æ ûôi¶%g‰Œv‡"œØÞB,ÍB,Ý. ©¸™#œS—%™‰w5m \¿¶ž¤‚øVæ‹óF ,Þ|)
©.e rro»~Þõ€Óº¾*N232ir™H5ÁÁØ(Ai–Yp2ºCttPz<†Á_ ¿”åÆ»]AQ ~gpDËvë§~%ð M<ì8% E`,†ã— +˜ÚhYÛ¼ ‹ +NÎ7D½?[÷†žw]9U8€ +œH¨l¶íWÀФ°§ VV2Iú:௞D&L¥ /ÛÛ€ê‚Å*gsUSóz¾õYÆ©wÍ€CÄ—YˆT<ŒƒoÊ bÀwˉ˳€3MúB¹„r¡³tÆ Cngбm(Fèt”WuDâ}¬ xVX¡ªkšÑ6õ õA&GÓlèHË廹‡é€ñ¬=ªRô«€8® ðžr0%ÆÉ"¦”,*’ÅŽúý•‹ab‹º©ýû®:d@ò+×¼dÏÎÆÐÓÔ峫8ÕWÌ +Ÿ]† Ô£»‚©‚MÙä!]ç/1¼PÉîk¬ñ•!'Ù.±Ê×ÁR—G^Þϼš¢ŒG‚=(®“ÿCž¡2Î4W¯„¹!Õy³‹TÎìàDßyá²ÆÓ'˜²R_f RMp0:lš2•)3fÁKÌjxЦaÓ« «òCÞÕCˉÓuxÌëÚ °I? ñ:*Y 7Їꉎ×@”ïîß~¼%cÌ(‘˜A
uìÔà¤"}ZªäQ·Ó(è&‚*4B€°f‘û5œ
DX£àuüÍ> m”×ûü¥ kl+J½p¤l–¯#uG» ŽtT¸q…¢ˆŸÚ~5†`ë À¶/»@’-#i,Ô,^àf«ÂG«
øÌçÏ)²HYª¬}E‘T9P‘uõ˜7 ë¯,Z]Þ7RMl<6ÖŒ¥6MÇ;O
ÁÄ +]4¸}¾¦ÆÃP.~>œ0!—“u‘¯Ï¡ž‰¼%LœTç‡ Ùš7§Õ¹@õ +§«y +ÃÕ‰·"XI¥MÔ‘csù[á0¹RI()&Ñ `ûPZL°nÛôúÇ’¢„b4õó§·Ôøè\kº õ"¨7¢“ÆÏw‡‡_W7<l×ÑC<üÑN§ +CÌ +G°»½žHŸ1aW”tº(¾ì•ÉÏ„op
›—ß6uUTý—IÆŒäÙŸà2ð&#¿J¾'tŒå¥‹Á#ðR{à¤Mi‚æ‰RØ]¦3 êQåœ@TÕI6ÈŽÑMßRb” czÞzÄÁñš\´ŒhX“oöê…EýLÈ ^Ö#¢É”³TêdgΨq1Òe8(Àˆ±—D§’~]Ù1š±ÇZ80m\XBÄô›¸€2ß4ÓJN°æäR^,þ*wدªbEÍ«,®…ïºð ûv N¦»Ä
$ìŠñ$㸪£siìùëJ3ô1‹è¶eJu˜¼owõ‚š>ý2Æ][¹Ä/rzgl [Âp¿Û6~ +U˜ý°am/¬Í¬ò£•ß0¾}„±®”ÚÅÅÖÓ#C*¶y·: »D†…(þJItHu vEªƒÎûvÞµùiA_æssyûH5±ÿ¸l˜@2b`Òz
\—Á :ú6|¯%¹ñŸo@£X•ÅlZ¡q0¾Vë¨ÃAdnÙÃïÃCWö4;ÆTDèb"6\Ld~¶ûÞ„â¾K‡ø,_¦ª_£ ï'DA•‡ýtŽ,0pzyȤç>.cãìÿôp÷áî c4=ç~ñª oÖí6›–Ô×oi¿¢m° HÙ—TÁtã²OÊTJ‰’J=ƒ*›aJ¶vï:°ÛǸPðÓ³Ïíº‚’Šv¶j÷¥OÕ}ON3QÓ± K×øòÊÇxt';lú»F¸E¯±xU- +Ó!mŒÔÎ&ð“4´‰óþ‰ endobj 1688 0 obj << /Type /Page @@ -7210,7 +7220,7 @@ endobj 1691 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [182.6146 369.0217 231.8861 381.0814] +/Rect [182.6146 300.8791 231.8861 312.9387] /Subtype /Link /A << /S /GoTo /D (notify) >> >> endobj @@ -7218,33 +7228,29 @@ endobj /D [1688 0 R /XYZ 85.0394 794.5015 null] >> endobj 1687 0 obj << -/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F48 1238 0 R /F39 1161 0 R >> +/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F48 1238 0 R /F39 1161 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1694 0 obj << -/Length 3788 +/Length 3742 /Filter /FlateDecode >> stream -xÚ]sã6î=¿ÂÎÌš?DQé~ôrs»{—Mç:ÓöA±åD³²äZr²¹_ -„A_@ÉYr–Zas•Ï²Üˆ4‘él¹¹Hf÷0÷Ó…dœE@Z ±~¼½øáƒÎf¹È²³Ûõ€–‰srv»úun…—@!™¿ýüéÃõO?ß\]ff~{ýùÓåB¥ÉüÃõ¿ÞÓ觛« ¯n.Ò¥rþö Wÿ¾}CS–iüxýé Arz¼@ôæý‡÷7ï?½}ùûí?/Þßƽ ÷+ùãâ×ß“Ù -¶ýÏ‹DèÜ¥³'xI„Ìs5Û\˜T‹Ôh õÅ—‹ÿD‚ƒYÿÓ)ùå„Õ6ƒ‘JïXV;/E7½lÊÂ&6}™ý.Z< ¿“Z8)Ò<Og ›a³ÔEõ*5“RäiªP¿.*s@Fk‘ Ôû ìs‘Z#O&"ÕÊ -9£Q‰= Õ‡X/‡õˆOÚopÊ -œC†—Btvá€tºðè˜Í-dwZŽ¦cVgy<fq a/ ³¹ZY›gx>@ž“ÌŸÛ=hJoÔ0òÖÏUÕwÞêáåú—7ãé‚ Ûb¦¼¯‹ ç—s:%ðµÝ 8£‘Þ˜,;& ù¦‰»JÕ¬Ûݦ8˜ZxN;œK!ã}nwícµ:èêØÁ`9gBL%.͉![°pÈÙR®`)y;ãY}1ÄŸ0ècª~¥„tÇÜhˆþÝÒ;'–±^áâ”Ú÷ m TeÉw‹%â¿ÆÑ ÝÁ@}RÈT@ ñŠT"Ö+<œR; lÀf!6½’ձΛ€5eÄ£€ˆÆ_Ÿ]=bM,?>áÁ-Tž£õ£PƒUÙ-wÕÀ]Úõ„#æ™H”ùS®héѱûÁ ‡a:Úè9ÿ ø¯lù”î÷z …̆ºšôÀ€õ -§ÔÎÚšqPÈ<=okC¬—m-bù¼ª„rªë§m-úUB½wvõˆ5±üØÖŒÈлFëÿ=¶v¼‹c[ƒhl¾lk™'G=gkÿ•-ŸÒý^[Ó™p*}Eïë6N©·µ4&·¯ÙÚ -î}q¢LB(€p{FŽ ˜ásS|-âí×$‡j~¯°kz]»]UÜó/hË[zÇbø7¥ 0TŽÃó¿$ Åd3áP¥‚˜p-\– -¸ŽÌ×C±+– ÊÉ´³"ÉÜ8%ë!‹Ã^\è -dÙ¼+6%ž°Âà LôJúõCLq¦/î@KYl/C~¨œ&¡ÂܺXVu…õ-½×m±Â"ÑS€hàTÑãˆÊ)^Ú+Y¡ÇÏŸ®avŸ¡€Ûø-&ãÚµ ýÀF¨[PÒÛ}Ù”»‚Ú’†û -Ç;Záß´îKhÇúQ)Ñ”OuÕ„ÎaÕ{Üa\.Ë-hú
¿z™ ¥© guß´Dpõb,Õ N€³±tˆõr,X¸±bµª¥¢^¬wífQìû‡ÀýÑÔìñ$̪Ž¦L»ó F¬ ÇU¾ óšB¹aùuô²l -Œ-6drÍ — [DÅcå«GüÑšžèqþ {lwªÇP@:%’³¾Q¯…C0TÑ󧇲Á‘2 8¸$8mä --ƒ°|Ÿ‡ÀAÉ?ˆ‚¤ìib)kµwú!õd¾nëº}ŠÔß~ºúø>¬»‡ bò a Æ VM'"–ÚBF¬ÿú´T .päå"}/‘šnr _€G3Ç—ïY<v;ÕÌñJoXI‘è<8= RÜ S¡ÍH‰_¹Yñ€ØâV=B*fî®ô2"ì.D\þÙ¡ïç÷|$É ›•ÇQû` -³òÐqq"ù”@·
÷û¸ ÎW?t¢«›Ð³À=½9šÚƒÏTiEÿ›å(_õÀ<hÅohœ[è0qWN†?Ïjjy甂äŽû¤ zënxíp0jÓ»#Wñ³±íî8¾lø{þùÜG 8¿LšÒù°®ÝðlWõû‚Í~æ#bžs§ùx?ûRúj‡]%³ çÝ MåŠ2ˆ -¾áVv˜TX;¿ª»r§â±8;²A…-’¢€4¼¯ÛÝ”nXwNÛÉ`d0Ãö -°nëÛ…Üoé³]‡Aó%6 $ÙÓ“˜„mÛu•o."¸ü¶-›Ž§¼ªNØP1JOñÞÝ«këGö·'JèpÔîk>ʽs<U]]îÉ°S±ŠÀñÙìöììGá:ó<}@«’à -å·ïµQI 8Æ¡Ã"NrXÄaÑ}íh´¦Ÿ:Ü!àã/ôd»nƒ9 Î:¬óÐv=ÇõÑ…’Ö"sy¸ÞY·`ŽÄ²ÝLÝVåÂZ=¸D¶½Ùâ*^¸î)/Èø>àq -e›é0Þñ¹â Ðþ’ùü£ÓßاŽE¯àH…¼ŽÙm€¥]–æê8UÚ KzaWäË4| Ù/@|HÅû®²®Q ù!èkÓ>5 + }Äõ÷]íþ Äôñô™ÉÄ( /ÿrƒ¯¾T¸#ÃÁЪ< -,:ãMüS…ÏÔý-xö# -¡Ao¤ˆ½’n_ž)lýICGOCýDiLJÎÿý Ô,˜+t½ÇÒï(Aä³ô
ЂÅ4uhòáÖñzáL»+¡pÇ ó´-¿ÑÈo )6Ïî&+zŒÞþ»ç÷VÉ Á·ÌñãP -~Že€¡,iGÉ“ƒÞÕ1\ ©(€6eÌ¡†Á1%‰6’¾[ +xÚ]sã¶ñÝ¿Bo¥gŽñA|tîìÔž¯µi:I hŠ²9G‘ŠHYq}w± + o¿Ü]†"Ž‚›Û^Sí‡û«ÏŸ¯î/Cnb |üûÕ¿ ¯ïiH»9¾¿½ûD=)'&½¿¾¹¾¿¾ûx}ùëã?.® ûµ ×Ë#‰ ùíâç_£Å–ý‹ˆÉÔÄ‹=4"ÆÓT,Ö*–,VRúžêâáâßý„ƒQûé,ÿxÄ„Ôb†B h8‹Ó4^$qÊ´Ò20«aI2ŠÕ%7ÁªÈ;lë YQ^•Eíú~Û—<Ø–E ü’‘>fùKY?ä:{£JÛ•UåfÉóÝ–z³Ö•5
ÆA÷RÐ@[l_ ø8þ7÷MYwŶÎ*j5›b›ueSÀv´»ü7¸rÎÒ8´´–vëîËãíÍ©ž-—[Ä[´n°jš¯»]‚‡¢ppUÛàœÀB>`!ך¥F(@…VE—¿„Ïð…`‡ìV†)n¸Ížš×‚Mä…³„s½H8Ì+sb ( BÑöò9ýðPˆv»Ê…ŒLؽm +~Œó„E\Ëóè{¨üÃõr¼O=&à¡è:+"2J`ËÖÕ w•Ì Kt;Ž½í WEú
Ø[Ià ól× KAâé%É!´e[ÔKªÝ=PIò7¶\¶ôiV5žè}Ù½Œ&N‚‡/W6þÖ +aÈ…f\%éXWÍ–$«.žAx_½œÕí¾Øzñ{|qÝËb•íªŽe;Ã+JœðÔ‹WÝÌðÊã'‰ðy{ ÁŒ0ú[¬•4Öøšyk¡Œ0 éøô\ô]s¹ªÿb<Uè© uÄ™ ê©ë9 V-a kb¡!1è¦]ëÝ€±VÜr#b±ìU÷Ëe¨yðÿE01ãléBó˜)¢^ü¶à,Ri* hP·k=ðÀv|w»‹O
¬h1\”›8 Îl¥Çª$ÁB+¹ÐB€AÆÙE5(‰ Þ.E®Q®7U±],]GM¥sfPK'[¯tÊ„IÍbÈÜ?·_6B§àóƒ«úsÒŠ”ƒŠ$À0$<9o ãD³(æéyëØC!GÁd„å2Ü4M5±‘aI”Ä‹á´SÛ衦Øe:ÒDØP\èý£5‡¨âÍýY¯îÔ÷Ô6UÑ͹`›ŠµéÛIð’UûìõõªÉ³®pMðäÛ7ªÞ~r}+kÄšµû€ +dÍI¯«˜ÉHèwöe +ö/eþBß¹ Xîà<°ÞP6dM +–äI¶{IŸÎ +n·6„8Äûý"¶„nÞéÀª¤Œ
ä$¸ Ùˆ7”‡ G)S2± ‘·ÏÎß‹‡‡ ÌX—ɼ烯0œM¢s¡$ÈØ›!‚‰•ë¡Þ¡c:ÛlLè¶J 8¬÷$C¨Ó¦½‡ê]îïàkŽ§îÅÜœG즈GÞ6ÕéI>FLÎV&iïl±Þ÷v¶©`’NôñDÁ[³£ ê +5Ô¬ôC¹,ÛìÉJ=4nº¹ gTl²-ˆò®Ê¶4akØtl&žŒ<G ʨ8‡–›Ö)"Ç‘“²†cÇ:;ˆš/çÎĹun¶Ík¹<ìÕ±‚:£¼M…/õDáЬbA§ãLnøŒfyðp?#ÐdzÎè•`Ü S#Áúƒu‹GäL$‡z‡Šélßjp¤6,VÑ7³¥‡¢É¼Æ(&'8@ ñWz¨wh˜ÎvÞØÈõR¾clPgŒ‡šâqò ³½>‹½‡šA?öð NŸ#ü½ +oAŒ$¦ÂØ*Ë˪Ä3-µ«&[Ò
Ì`ou “NñX£#”Cm7I¡âǻ۟ ¹oph[/YèѽÐþÀB(CPP빨ñ–†dÁå. ;såÝ#•viP~úò@•µ½R*ì“ n ¸! ¤ ¨|j0+5G%ÔNí?O(Ùùû_Ïì?ìªéS[ÎÒ¯ç;·„øIÌàØ•þA) ¯d(…Ñ:\.B2påGLJºØWeís†Y¿½Ç¹Å</6°Ó ü•ÆòÈ Íe7ËçšnMŠåi[ +‡£Óô [:€:cK=”½Œ[.K$)«ÂÕ¶Y‡Ù®{ùÐ_Ž†rlj™1¸¥DšóöP3$ŽO2–ù|L£O¥Êñ¯¥FÞÔdL¤ÒeYRL ½d¯¥=1âG+*Qãl kl¶hðò‰F°(ÆHo¸ëÞ+YŸ¢ÆwUÖà +\Ó‡£‘¡<Ø•0ÚoòQ¤j;{ãA76‰
ý.mOÅœ`XVQš;¥$5.7j»|>Ý /< „RóæHUìhŸj7ξAßð{ã“üi`-ø/Çä¿ ¯mÖn´-»]æÄ>³1M]vùøî†`¾Üb&ÉÞ&Hzî +q#g´ +¼›Ý^k³ÿ€ªIŸhÌwÛ–>˜d)œœØø±â°{å‡(iÛÅàQÅ€‡ÓeϧH˜´Ž“£pø >ÃókÕ<ÞÂì³mM±4Ö`ÿ²çbV˜ ÎqCf¸ö'‚ùã&DºâÔK‚„qÝÛÇ,‡h’ xÀ•U^
¡B,SÂÅÖƒ‘¶ÎÕ~:RLå™tóÄ“g3…—®3'ᨠ+ï<Uö¸˜&ÜËéâÿ ëpendstream endobj 1693 0 obj << /Type /Page @@ -7257,35 +7263,35 @@ endobj 1696 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [180.4479 582.568 244.1386 591.9975] +/Rect [180.4479 508.2615 244.1386 517.691] /Subtype /Link /A << /S /GoTo /D (statsfile) >> >> endobj 1697 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [265.4578 537.6597 326.6578 549.7193] +/Rect [265.4578 462.9269 326.6578 474.9865] /Subtype /Link /A << /S /GoTo /D (server_statement_definition_and_usage) >> >> endobj 1698 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [367.5441 537.6597 416.2908 549.7193] +/Rect [367.5441 462.9269 416.2908 474.9865] /Subtype /Link /A << /S /GoTo /D (incremental_zone_transfers) >> >> endobj 1699 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [280.9692 507.3368 342.1692 519.3964] +/Rect [280.9692 432.1776 342.1692 444.2372] /Subtype /Link /A << /S /GoTo /D (server_statement_definition_and_usage) >> >> endobj 1700 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [277.6219 477.0138 338.8219 489.0734] +/Rect [277.6219 401.4283 338.8219 413.4879] /Subtype /Link /A << /S /GoTo /D (server_statement_definition_and_usage) >> >> endobj @@ -7293,22 +7299,34 @@ endobj /D [1693 0 R /XYZ 56.6929 794.5015 null] >> endobj 1692 0 obj << -/Font << /F37 1026 0 R /F22 961 0 R /F62 1361 0 R /F21 938 0 R /F39 1161 0 R /F48 1238 0 R /F14 964 0 R /F41 1218 0 R >> +/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F48 1238 0 R /F62 1361 0 R /F39 1161 0 R /F14 964 0 R /F41 1218 0 R >> /XObject << /Im2 1350 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1704 0 obj << -/Length 3756 +/Length 3806 /Filter /FlateDecode >> stream -xÚ¥Mwã6îž_‘Û:ïÕ¬ø¡¯ãtšiÓ·ÎÎdÞ Ú d‹Žµ#K®%ÇMý¨/Ëžæ59ˆA -¢Å -O(ˆ9Ò -z‚¡Ñzk×_&å¾ye™=èOT)‘ݽ ¨çÔËá½ Ï´ä œë[éã| -'ø› f8ãûð¦mNö0®žÚÆÛM/Êë¦Ç@ òÈgŒûbò¯M$ÂT_ÏýH—S„ŒR ³Ü êÝ2o -ëOz:$«}:íÑ(ڱϘ
19‰O°ÜZ®%d{ 'hãj›Ð'q¤‹^‡Ý’¨Çx Ä!çÜó(¼fyqß@•Ž²†0M×òUÆ×RLèÄø¯†€ÿ«X ¤Ž?ló ’éîš~7àî|²¼9*cèî0|8»¢m=ΙÂ7¯OUCåq›íx T‰†&fÍü#“OÇ'*@R ws TböNøÎUåBºo(V€Þùª¢©¢5Üé»âaª3ã_2Æ6*pþQy±&4\Ïåv¨W\< ÅC° –Ì^6-çq*òÖU®5%Ëð%儆ýso)+
© -Í×Ä ŠXk Ñ9>®Na¾ýlÇ/k“¤´&ñ0×/>våô‹Q´ŒµL _£‡X—ãèË
v-–½èFq³Ñ"J’äúî ÖÌö£ÈÙ$"Š9Þÿ±+Nu?3‰)Â,—¢ø Z/õ‘pøùËZÈþô=ÇKCH¤@è×èÃn¯st‘ê+aÓ—®8¶qî/RÝKÖûñÇãºÕÄ9!å1†ßë-8kWJå…*e½îÇ3ÞGhé¯<"ƒÇa—”p1&ö¯^1fOÔ`‘ÇÞŸÄ®^Vd~Âq·rrv=Fìsl»óÅ…éÌ¡e'à1ƒ0ž¼É0ºœy2à»—Ž+ šÄx×ǃ?m³fúæÝ=f±žŸfC$H¯yͺdÊàÚ%RxÝ”XWLÙc9te~ð=·åT(@½¾}‡5³ÿˆÕÐà/äâ1÷-É & í渇X ¥Îü;
œ Rõµ³
à6×Qÿ^h‚hñÙ¿¯&>:K¼¥N1‚ësölfq’~] “@ùǾ•Ýr,ŸPIÐ bÃ_&™Þ°…¶H~F)¡'•þ^˜ «$eAר³y']òwDqùs± +xÚ¥Ërã6òî¯ðm媈K +Bã…1R]}¹úÏ°àd”¦®ñ/4‰&:^a Ö* ÚAt ‡©mˆEÖe7[g®šæ©?¶Ð ÓÍCß14«Ú†[ç½y1Ëú‘Áý‘ÝÞÊŒº=Û2˜™ts¿/[ *eõ¾í³ªzaà0±°myºQÉÆB„ÝgÏes’ɵ[ ¹Gß*å¥a¨é Yßí›SÙe]ùl·M«ãEµöô ÔPNÀës—6ÆFÞœžwµm[6»%V–ï‘2l3×°U +:P%ý¶·Þ@aâÜ Rø ñO«`ƒS•ÙÔÙÁ2` ´ Àê¦Þ +Uý©…Cщ +›3Þ#`Á{2KSƒ';Ä?úÑÜ"”mÉÔä šªÇ›™‘”ƒ¡ô.ÜŸïù!xf°úž¯ýxÝÝ ÒvŠÅÞJ¸û sȺ|¿=dÇ£-¶ 1' .aA†ö}/J‚ôm:¬B¦‚¦ýЋ¢ÈÌ)¹Û±LÉ”f/ ý@ú… [:áØKN%P“b’kHØÀ÷îÓs çD@Š€HPàØ|/-Dn‰ØãzaØú©*ÛŽäo«´†ÈÁ„sekç„ÜwZn…U JZCÑ‚ñ "‰# «îqÔ•æè¤
Ζ °RHðŠ>gM<7§'FgqoúZ02þ<ÙSm+§¸%c§d~I9rš´µ½Q›| +¼ î&fX¢¼º‘¢8G)…®Q>pÊYæÖ.ƒH·Ô(ÜcìX”mÞô§ì Ô+&5 ´gT¾mR§X¯›Ô ŽŽ±ê80ÞfðÁó®fA‡ +QWMô6!Ö +%3+/ÀöÎH`ôÈ%h3 ‡cz€dÏ ) œ`—lIâ”ç¸õ j:–Ù
œÀîÚh4-̸ŽS/H#gÈ·[[ãnÛ]‰ŒÚ²Å4F{iš…ÁߊØéÈK “‡Ó¥ÁÆ}ÙBC^0x-=«GÁ8ç8ddÜ S•5†™DHw ƒè¼øù¬ +ˆd'á»·Õq±›r$gŒ)±'Ö;
q :µ;ÈÒä¡oò£ÍÞ K¤€Çò™M)´ Z<73<H4Â÷»_'¯Jp?2Ú×û/èÀˆìl ¢e”‰‘<Y‘Ï:ÛÿŽÔ×vÞš
{êûr` ºà/A¸‹@G¶³ +–(W£™ã¤ì4˜‰HEl&p´°»¬¯ºa³KI4* +¤h¬Ïº‡¦¼Î«¾°b†B ÅÓxn‡€_nßÃe'ñÃŽ¬ŠçÓiäâlÎ(d†Æ;øã–Sî1¥B¼!‚Na+Kv&–z,dÃ*|4ÎZ;·ƒŽwlqùã±*—q$k—f¦tLÆhå¡èT,2»±ð5+ˆ¬°„¿"ŸqªŒ\æÃÉfOۢ˯i„òâ!Ë×\T?e„ßغà7~cgà7¤úþd )D"“AíRV`_™~&›wmûÇGÛvõnå…Z/|79¯HÉ]J ‡j à`ô=Ùv†¨LSéB`LQ¹có/K=XÎûç{
² @ 7»&o*)QÈŽc8s +àNÞ%!Ä9t…o¦ZÑæ`ó}V—-…µ!ø5Ã-'s“4}Ëm Ù€(52„µ5ì°Ð†N Éÿ[n‰¢Áॢ
3IEKYY¬dK_k¸Ì5=™ÔHI«ô¤œ +m‰õ õи–x³é!Ò„’Oê`TèÀe€Ð @Ð!¾áz¢t@´Ó;€ +=+ÄKR6Of—âƒ+Ì–¹´«TN¶°uéü«ã´¿Æi_‰ ±d'¥s ÎL““ ‰È·…@EÓ Ñ íXIt`¶sÅ´˜¨–Šð\ɲuµ©æ@¬ˆ_ÌQËCâ ¤‹ïxÎà±VI'Y¹…I˜Ë× -Ž¤$C, v2Ђ¡¡ãÈÙé4.u€tOðE}P[®)]Sšáô-
]¼ Ž¢Í$® fp#Á“Ð(ßÛüiQî[–UËñ…+%jð›€zI½šúMø¸C+ Ê¥¾Å1Îp)hUoWWÇÂjš¾6ݽy,ö MNp%¶NÊÒKÛ¹bû†GYõÔ¶NoFV¾z´å³»—™r¿šüƒÛðT¬ÞÎý'H¯§þ ZþÉ1 ×Û °ÐÙÙ“óËšª‚},~¾EË€tIÌ,šj_ψùex$˜§â)ÖøÍ›Á±V…s˜JHfÂd|í +é2„€s£(ÐòKUÃL4•Œ–G2 `ò ?’P"Ï!U¨(
Æ‘éâÐ L°Ð~BÍ[aÚDoJ0.'W{ä*› ‹‡äÈDTLqúµ¸rXŸ8ÒÓ)éRí3éˆÆÑŽ}.AÝxHÈI\Ê€åÖ*ï+ÈöÎЖj›Ðgv¤›Q†ù.§"f‡’s¯£ÈšCäÉľ2W
„‘¨ºAÀ¶*pµ” $6þ£eà› ëƒÜqw‚myA +_3® +ö \Ρì:GSø͹n¹<n³ƒìƒ"ÑòĬ]dréøB$È"Ažc"«>á[ªÊ…ìo8V€Þ媃 é‰ µÒmøû Ã\gÆ)®dŒmàâ¢ò2g4\r;”+) †“â!h†pf?€4m×.õ\ô0íN–}ydžýóh9+õùe ÃÙ2)‡›ÍûO?Ë +µ@öÐЃ0´!Œlûƒµ²Oà ÿh"ˆÀà &hZW¢ì: >¬Ü½ªxšªNgn Š‡ ®Ek~ÑÃ
K5ä")&\ìǫ́*7dÅJã: œ¤¿®¹2Ó¶ôéíH’YWJD £³"»î½f7{çiË¿,¿ò°’ñä©HhHᡬÝK’›8®(ˆpÄʽ%¹G%ao:°p°pò <`»¿BIWÎ$›]k= ›Sv*‡(T,'+ÈyKØtÊ^Èæî^ÝcÃ’×î‡2\] eÿÛ˜aá›ÓÄ3c%HŠƒi,Xíʆa©yèJž¢— ã™4Š&N¥rÁƒ JŠì$WkóÚ7‹ãWÐU"¡%ÞAl`ZîTOUÒ>ïK²îi<y \¶ÈxzóÛÿjÆÆ^»Rn·(¹J
dœfÕZñ3I½X
7ô:¿µ—êÈmØœÖؼ$ +ƒ¿cwèÅƸˆŽ,ø¼:…ù6ýÚiò²v·HJfœúÅåÀTN5Š†“j£ÌÛQôéõ(Ú!Ç`Ër;òm4Æ‹’$ysëérïYÐ $^ûj¶ùýP–~`i„Y)BÉ ´^šžqäá Zx€cåzt–‘XtТñG Þ`âܯš²xÓÊb;2|‘ Þ°Ò¯ƒÅ ìÒ,!å1Þù Ì4U€RõJ}2»‹¾îg+vÇ3*2ó| ª‡C:"e˜Ø½wŘ_<rCX ;KS¥¬ÌÜ„þð@|v3G ³
lÓýâÂüþEhò È[é‡ñâ5îŒqåÊãO +!D!á‘YR>ü<÷’ôÿÚßÌtendstream endobj 1703 0 obj << /Type /Page @@ -7325,23 +7343,20 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1708 0 obj << -/Length 3516 +/Length 3567 /Filter /FlateDecode >> stream -xÚÍZKsã6¾ûWè(W¼A u*ã™ØÞÝT%9p$ÊVD:"eóë·
P¤DI™JkU™`£ 4Ð_¿@Š‡ŸË¬—~ä¼f† 3š®Îøèú~8‘g’˜&]®ï ξ»Vnä™·ÒŽ æ±2ƳLŒ f¿Ž-“ì FàãË·×7?üûîâÜéñÃÍÇÛó‰4||}óÓµ~¸»øðáâî|"2#Æ—ÿºøôpuG]6ŽñýÍí{¢xº ôîêúêîêöòêü÷‡ Ï® Úµt×+¸Â…üqöëï|4ƒeÿxÆ™ò™½Â
gÂ{9Zi£˜ÑJ%ÊòìþìçvÀNoxtpÿgRY9°Rv60ÌxoFÎxf•TaõùDy?.Êü󲘽;ŸheÇy9Cr6ΩwVÌóͲ¡›f}ž7u3ÉËéSµ&Æ95 ÷© ÆûÛ{êZŸ‹l\Uñé?«22ÐÔ8T18ãÆ7s"ÕEš«Â-þîZg…(«™´^Ãòq oEML½Õ -Ǽ’.òÄuL÷W—È=š¨L2É%l Ì#ãK¾\ÌòfQ• €Õ$$\·û£¼Þ4DÎé’¶$Ó¾@{ÕR?‘’—›|¹|£»iUþƹ|Ü„]*fDÝÔ‹ò1Í@kÝ
-oÓâš5LRÌ&_Š·¡°œqkTdÁöœháaKe/@ÒüñȸSF¥që&oŠUQ6 J%øøq€ÆÒboõ€>L*PAŸYäa{–'˜ÂŽ ×Ì íX -1Mº\d(bÈÓ$.œqVÖu1äÓiñÜLŠ¯Ï‹5hkG -J—eÇÅh¹äè-Ù¾X.ú‚\ `“•1Zà(>®eÞD0ÕÄôúT”ÔûR¬ó7‚tDkíþƒèÁI bïÖþáfP‡à{˜µÜ&‘{.«!MFˆ%M¸ÜMC”4OhvتžÉuÈxhjåŽBGr¦¥JîbYä/-[WíÒ3gÀÊ|EêÝK)¦3 ú²Y–Å=C+b¸Ò6>/ó7ºÏ›&Ÿ~©¢ÖZÉ„t Em—ë0j[.ðM±~[V»{ǬÉüñ‰ÓÀÄ=}rɬæ²?óýs1°Áú5GB\ -wýPEÃ@CÀÎÀ¶òþžìx÷ÝÊD2 -à.×ᄪåÚšÜló<Y£ŠfûixOç!¼ ¡å¡ü´aÎ/î q‰B édÛÚ1”a“¢œßö °Õú¾@ŽéA -æû ÖŽ… 'ÓÖL¸ÌöQ«¼l -î.×+I\[+Y}Ý+¸=/ž Ÿ81
LÜ/¸5¤ KoæhÒ¨N¹mTÊ](`áµoDg^äë:>Quçí@‘œÓåæS¼Íbö b…ðéèOu³%«U5ŒP(G˜ç^~+Ba6B(å’ÞA¿[Étp >´ÅáGp›Aê3}¶,êS°U¦Åÿ߅ʳÖÛã°ír †m˵…íëb9›æëýcMi™æâøô‰i`úÞ¦):’ª??•ËRé퉟¢Ãw¼R¹,UÄ P¦ìФ<eUNè $øQ Äõl®#8iÐ8ãüØóñèF{Á(ë'.íØè#Â%æ|«ª~²¾åkþ‘¡Ž·‰….Ñp¢W$JêÖw›6ù‘qùpÝ”×
%p2Ù84º+&Ê*o¦Ot²D{¬Ö‹æiE`ƒ©÷@æ"¸Ò”hL´ÉÒyÇ#YXN<Ò€Û<ÈiƒKó~—¡3Äåv„‚¶^n”lR9ˆXòøG¿¾_¬¥÷J< Æzßbš” p¾«kèêa%•c’Yav’rÚôPþÕ›èTrº Û‚>l¾(²‡e 7ß×óM\[ó]”MñÚ}Û·_Ã7ÇçOLó÷í—3™YÕàS±†½
¨âèpž¡:¨òÑèµ ¶¶R– zM]Áîáš „ý B¨µè%€cû”HI>PC„ƒk´ Ñ6dÂe6ëks?KT¢ø”’T¬¹éˆ€à½ &ˆ‰P(ñÉÁÑ©‚TIpl=.7=±7ÇàÅ×E %H+¬ßñ ¡³ï]kn
v‡Îa2KÛ•¹¸]@ØÖ@Ý/Æ€£*Cº -Ý‹ru -äî¹Øú,è ª -þzpÇæiþjÓLªy;Œë 3P%nêÁÓ1.„îžýOÂŒaÔ}§AÇsi:NÓj¯ã®p1Æ#MÉt‡qýЖ ÄÏŲz%jS=GÆ9ââ µÝ.:›=ÛMÁ;›`ë3æ…òûueJb’?"…óûª¬ E9Ç+¹@ûÐ>jyŠù{yúÅoÿÀU0‰¿àäO¾ö•Ê2e½9îY»\‡=kËÕÍç'ÓPÊï:V%™ö°„£ó·\ô]«cÚyÝ—`ðå”gFò”.xÿ‘q£ë½¢û odfÒ;' aÆñŽ "äàd§Ñ^CöÚZ¶‰þÃ{Šè•3Ó+#²xNäËÛ‹W÷ñäSÀŠ3“©>ÊB©÷>¸)Åœ•êÛêˆ ^1Ë>ª.×aPµ\[…Õë—£¨:>b˜ -ŠÝL›i`—ë®WWPìb¿÷Ö3c‚ƒ¼G§o¹æï¿õTŒg/zü—´®íø™B*<´ëe}:&õ;ê‹gÊÐJ©ºnýÓz99 ‡ ˆ2ÃT\ +xÚÅZÝsÛ6÷_áGy&BñMðÑMœž;'g»wiûÀH”‰Dº"Çýëo ðC‚¤xz3Ï„àb],~ûˆâœÃŸ87–Ù\æçY®™áÂœÏÖgüüú~:g™¦C® ïÏ~x¯²óœåVÚóûÅ`.Ǹsâü~þÛÄ2É.`>yûñæýõO¿Ü^^dzrýñæb*
Ÿ¼¿þçµ~º½üðáòöb*œ“·ÿ¸ütuK]6ÌñãõÍ;¢äô80éíÕû«Û«›·WÜÿ|vuße¸^Á.äϳßþàçsXöÏgœ©Ü™ógxáLä¹<_Ÿi£˜ÑJEÊêìîì_Ý„ƒ^?4e?m 3R[°¤b™i# – <™æ,s¼72 H9r¡‘çUÓ”³iYŸWåî’…äÌeb0$%¾ãJÈ—ùB挒c®HòT:9ywswwõ–ÚÍöé©Þ´ô²¬Pµõ©™æ`Vî'ªŠu9lC±Š³<´ As;ù¥Z•M$•AJ[ÓpíÃaÆä* )›„‘±\É(âMBWÃT–ŸRT1Ç¥\ŸËÇâkT,Âs¹Ï ñ¼Ž UÝâ”çS%%LM…`¹1ÒÏÕÛ +êíB +¡2sî¸ WBÑ’-ØÅr1VäÒk€QUL¼ rŸ4ˇªhšbz~,+êýZn–‹Âtô Hì ĤղßCìíý ^’{U<³âóAßM\îʶõŠ!JÚG @¡U?… ŠÔT,È¡©»œt0sh©b’[•¾xÚ÷™³ÌºÓ•˜v:BõëvU•›P¥’ŠþIf|Z/ô^´m1ûÒ DÉ +þ¹-7/«úaWpž1k\~\pdJ í'—Ìjˆ¤#ÉwOå Àë× !yaƒI*'ˆš=Ю½y¬·«9uø¼Ž´¶Ø´å¼›%UI
ELÎÅéSŽë>\mÚÆçe‹i'e ÓÖF˜
¹31ˆW¦+l=rAY¬ºi `ˆiH9à$Fíæœ%f +’ÒLÊ?·>ŒKK c$1ê¤t +‘Ç«?5¬–T8ª4Bá8+é~°ûn„‚4B(Õ’ygüÝ“Ì +ªõ¦¥NF ‡ÆpÅDYíì‘nv¼jõfÙ>®I +ðràÈ&UK ÿE@ãÕo>>¬Åß•x¸ŒÍó+Фâ€óݽ†®VâqL2+L>ÎÜdtük¶!¨ôÀ°¦>ì¾àæ:ß;î¾®#î¹z÷]Vmù +|*7`[*Ž×ãNu1'ýì‡^KÏâUo¨‹~>å „°?Bw-D àèG‰XäÕg8x¿ÝÁ†\Š g]ò¢aP%*1L|JÉð£¶f:" x/©I7b Š829; UT [«mI#öd$§(¿-›0” ðüŽ-Ý}ï ±:GëÐ=Œ³d.—s¡?uÿ0 uåËU‡_(LÞyxï€v1 úüVùø
=h±E”_oÛi½è¦ÉÓ$Ò¶I˜ãBèáÝÿÔKô³î
ç¿Ê0ƒ eu®ƒU¸˜à•¦ä‰½Ãΰ~èŽËâçrU?µŸã‚aqÐêÂÅÀ(ÐÓŒâa›C'T¾®ŒELŒG"_W
+æ
õ…{dhÅò\w1ˆq%ž }ÝCÕ`<P endobj 1707 0 obj << /Type /Page @@ -7354,26 +7369,27 @@ endobj /D [1707 0 R /XYZ 56.6929 794.5015 null] >> endobj 1706 0 obj << -/Font << /F37 1026 0 R /F22 961 0 R /F48 1238 0 R /F21 938 0 R >> +/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F48 1238 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1712 0 obj << -/Length 3461 +/Length 3339 /Filter /FlateDecode >> stream -xÚ¥ZÝsÛ6÷_¡·“g"–~\ŸÜÔI}½º9Û›~=Ð"$qB‘*IYQÿúÛÅ. ’¢ìv.™„K`,ûñÃRÁ̇¿Á,Qž/Óp§¡§ü@Í–Û+¶†¾Wó,,Ó¢ÏõÍÓÕW d<K½4ÑìiÕ›+ñü$ fOù¯ó÷ßÝ|zº}¸^åÏ#ïz¡"þÍÝý·Ô’Òãý÷ î>þôps ‡ó§» ï©ùáöÃíÃíýûÛëE¨ -fý¹Ï$p\"ˆžAì{qdøïFW× )Ãy«;$Ô¼«©¡Ûh"r½Êö%÷¾dåžÛëJüÕ‡°¿Ó L¼XE( ÎÔ-1dñR)bæyÓ)57z`ìÒß?~OÄsÁë,®Î–¢>ëãPð\wºÙ•Æ•g !b8l_€ª/UŠ6¾©dsf-$Ì<H´›z_æD?sç¾ÕÜr0Cj+Ýd]QÙð ï>¶D¯ê†ˆŒçÔË}s $sžïϺҞ‘Ï }OÀ #׆+/ª¬)ÊãuF?qj†,Úb]™¥’(qKÔo¾ò»MÖÑ[Ñš!IáPt°+î'õAê‚Ô XÌÐKf%ÆÒ€^3/È2šPW]Áƒxo}ã@2¦ Å¢ÔD‚§mqCKnëô†{ ŠÎ ³$ÌpÀ·|©«òH &NTóñëë`^õ-z¿½üþög¢ ÐA›¢ËÌÂnT`vIMÙNÐ'ýxþ]}Ð/ºÁÀg4 -–b±}«ÊÀªÒg@–uU“"ó¯Ivà從†a+ôA-ï»^*Fñ2&
ÈE8RËA»é ýZÚ³*§¦ÓrÐÊÇ”9Fè&‹4-ž¤g‘¦ƒ ÎDÍŸHó(IkÇo‹2k†“âT¤Ö¾êe(=q—õšW-¸¸±c>˜añçÄy,ÜÈo,ëí–¶ XÇ ²‰ÉHÁ¡[)6!©BgBØJmŠ;tNšP -¥ “êN[ 8FI*‘ -¤¹Jò.˜?½ÿDBaìûé[nøc¯›B·ô²ÊŠ )ñRÀÕ “PØÿ.£ÏEYt½{£Ã¯XÑ€„•ým“´Qôz¢½4”‰³ùK:ý· âÄôŠ=0S?`à
[/ºzQTDÅ~€N ¿*‡c:¤¿cáGžð‡‚Ü”%dâ_ -(Ç*ÛKjc èÖ‰Ý]“UmÁˆ ÚÉvê-õöKn<y{¶81ÑžöðÀùd€¯°1a¶HA\• s×¾"N¾ð'ñüM:IÀ*JMu
lÍ0!Q¯¨›QtÜCÑ1›ÿ’ÂBÞ"ì‚b+M‰†—ìŽÞ'mM‚ò“$ù{ñ—!t ó]E¬§L9ñ’ÈᬿbÊ Ñ¦gÀOWV|:Ÿ’1 ÀžfÉ«\žÒ
À‚ó©`` -6/ÊȪ©e›"’\#ê©8c&ã<ðÌܨºá\±««œ¼-¢Ã”ý9ú.qQì®#’%œë/;p-½¤ oòŒ$"W#׋·ÅóËŸ.ÍU¦¬Cy¢Ô6WûnPÛ$oÐÚ3±eÂ@îk<2¬Â°¤~DÎ-½r¼„†
Ú6=kSò€¦e]ýæûb½w—Rì77ˆ „é ,CÙ˜‘í!IPÖ É(wðo* øß}(ø¶B
Kîšâ%³{áJ4Ÿ¸Ež€Ý” Œìj‰]<c).OT¦°€[R)”.{Ô.ꦗÞCöœÁ(Öœ)™kã³ÄÜüpÂìçvùt!l‘‰Jéx…b;…àGÞ9O纔€$’PŽák—5 ÃÈѼp÷dêd áâÈŒÃÏIüw½€³ñ ²&ç;èhE4:˜ÂÃÐÇÓY™A\h_ÓÙ²%A'ñÌØОy—¿}þÌ€,®ÚIïu—4ñš[áÀôâPäl!Ëli…¨«¹¯ôGèæE7¦„ ؃Ï÷K4BÔ°ÂF´ÿåT´ª_L*4× Ï-‘ôq$…HÑé¦2A Zñ¨ˆâUñK]œÎM|VR–²MFê™`È æyovÃFÈ‚ÅAGZWáAäù@å<ÜÜ8‘Ød/“_rŽVKä1;Ñ„ª,:†» -·jJ]‚»¹×"á0èÜ
‰çe]&j¿# £¦Â€mhE5ñ*Yu<d䀨«P°öŒ ¸ê% 4 Aœ´®¦Ž«ÛÔ-GN§³ËÅ>m/}9åÉò øø+qÕXM“½çµ ³e§\zpÓÛ»_Ç
_ùA’z¡zësiŸë2Ìw\¨'rÚüìº'OÅAúúÂŽkbåA¼‘§””Ã¥©¾!M¸{JßhL 0´lu†… Õ¾¤ “ÑR{ „†^à!7€¶²0•æÞ„äÐ ·»ÎÙZ,Õü†ÚíGX\|ê#¬Œp·)GÚUÑ´ÝDtXs\êömè'ž ‡bò¾ˆ¨
P†>h‘ý„3͈îÆøDÃ>ŽøƺÀ6Œi(,½À5Œ(²ÞˆîÉ4IÆLhÏÕ?:ËÇfÛ_ÖnñÐÞMâJÔIê$´(Q–E!{É/uë–Å‚~×êrÇ¡+ûœ}´‹…Ó»T'òâ0ÔzPÊ^¨$º¸zÞÅ
pµ(PÄëæx’>Ñ…Â ãPyx6—} ¼ -ì$zÃ×{\¯øºåêù:ÚÅØÝeè% å«K[¦‰¥Î.Á$:{íG§cS¹µ–¾v÷‰²<gäÞ:žšX¨L¸2mÀæ’#Ð"C®=ÂÀS!†Á`e -¦ÂRx¨xÝ]ø³yöèL{‹#*÷ìù{© *¢ã”&„"(€_È„âëäÇÖÚòÓcGß½ymP1Mµô @2tp«‘Ö„u2 Öeýœ•®÷L>ŠÌ-ª'+Û&"Hš"ÏoGôuÛ3z¼d„º£êæxÛËŽŽÿŒ×ÊzOí¤–ˆ?ƒ-;À³ÅrOÕox§
·ÄEÑ”ñ¹·0`nÅ_Í%, -GhÂ- Ɔ:/¡#¾O9Q -‰½Xù6¼ØÔJõ^_Ù@<Q„^„Ÿô}V)ƒ8‰Ø€ã›¾èí…Ñ…û`X¾³pæ¬Z'££%f‘ò¤0?j¢®f=#â¡çñŽ{qb?wøñœÆÝLºú6^. éŒD¼ˆÚŠ{¢œÿ\Ìò¼*Àx¦ér)GD©<üÚÄj¾«Ùÿß?…;ýNLB&‰¸ 9?ò‘ÆV(sScÉ•ý&"žý£COûendstream +xÚ]sã¶ñÝ¿Bo•g"– +oùO»mu³h›bÑuÕøÔBÇQ–‹lÖ_új‚Ùã@h eF‰! ÿ~´5\½óí¹Èæ¶Ûmëò\Ìë»î±Ù–]Ñ•ÏQñ¼¶áÍOkŸšºµ-¡º†o?^âÝ–4Ï[Û1Ù#/xw÷aš5!xD¸àRPQ.
žVD¹ÖÄ;m½lÜsE +t<…eLYÓ“À é@¯]veã‰z‚dp¡ôV!‡~îÊ®‹]ÕñÊ-27´4I$Q!bÇãÁz¢,’(OTÆ4Ñ ugJó4Jóܼ®x}ªÓŠ¨&o±,–p±ú™ ŒMg¯³¨&ø 9KÀ½1d„ÔOäÉ Y(QëD®æ᎚†o}M#2”Ž0¹Ó7Ä£¾ ç´
'~ tÚæ0<»'k™ ’5⽬‚TE"‚’—œT€<JEmÝLI_D +wÜ=ŠÎ.@äËO‹Oí§‚OÁSˆô
Õ ƒÓš82¹ñ@‚WŠ%¤”vò@„“ÁØpô¹¨vŒ7á.5“Ê"£Ó7ìÎD¹’†i¾‚å´ž»{`üÖßß~OÀ}Éû—Ì®=%è“= _ÙÎn7emIe¤4cb9tZÍ~äÜ:Î=6»Š½Ö=îZïÇöä©z°µÝ‚a8 ñöæöêCKð¼!y¹àÝvd8ìØšÚ:ƒ; + G:Õú/øë¬ç¯3§9GÿÌ7»¶£
ï-= Þ·²… êö
-)¡Àqï¥4yMÐV4ZT˜%>nh„¶|Z‚A„’ bÙDBÚ‚èËÊŠ™i +¸Á ÇwÃù ” çˆ9Æw7Ãé)ŽóŽ †²A7b‚IŽ«†¸0Åu7^t£ÝÙ“D‘|Â@$e2÷IB½ì%ïe`øB[äœ!@Ì{MrÄqžÀäªËM öWeP”õ +ý¢\Mߧ¡dl"K»ßu#wRäpq.ÛNC] #i¯šŸŽ¤Ô,Ε8Iaæâó”€zšÜG®¿@1êG±‘é0~AW!•‘Îý%U¥» «õÄb"‰L’¤_dö=Nì«^.-ºpÍ/í\A†(Sùv†({f~201 ÃÁig/$°go8û Õ+ÎÞS!‡Ýö°è–O‹]omû8Õ®S +üñ« ª Æí:%ôƒ»ó ÂKP—C>ü®9ùxäAªŒ|U \)Éœ˜ß½û‰ +)…4â=eH‚›À8'#èÿ£÷e…-µP7†üÕ5ïTšý×Û*Ùj"ÒôÿÑGSie(ÎW5¢OuZ#Ußg`‘m]³(k‚ÇœÈXDª’×Y T¼ô-ã4’ñˆ—‹ªÂÖ‚9ÖþJ‚[9ÔŦ\Žõ@Pí‰Ãݶ¨Û’óvÀ“5í7Â,xò ýPb¸)#¡Ø¹ré¯ôža¶ÈSì‰5`W%—ý™™ß£bgèFe©»Ø#Íš†9—6½\ÚŒzÁ-&¿R’‡¥%QÝ Ôîè}Rã\–e_æeqʱ
W<Èb3¥Ð ¬4d[E¡áFXžÓ~*\ñ,KÈ_Ülˆ–R…4@—fHÉQU*Ÿfà¤9G O'»B§,3’-w{õ縘Àõíå;Zy$æTBr*!C–Ð<[^á¨yøæO7ÑÄá|ŸƒÁÞVÕd…zåZ ©ï1¤¡5âò´–pȶrm Úéœz)÷ «Ú†0µ]Ú¶-¶^›ÑtQƒý4ýÓy.ç7?Ò —€½ó¾àrªé|ªà££Jýµ"´,vØGL#í]qÁDÎxàY„YÍöØP_‘µ¥$LÕ_£oR)·Æ®:¢ ^’¹ýü¦e—Tö¦ ×fÄ™ÚøL'kÆ—% §«]sgðA‡;œë]7èpŒu´œo(ˆÛüºA‰a+†S²-ÀôÊî¨nˆº·®ï¨eSÿÇòa*S weÄDšKìEy—Qì LPÜ Å0[îàoÊÄqdâØ»ò±oSÖOÛò¹ðgáv i¸O?!ÓñèóY±D….ï± +õ*|Ö¨ J +võ¢ä“"ÒFä¯o ¨&v ¸{™FZ+5Üšz +r‰ÐdÏé;Ñ€³±6ƒÖ»ŠF\@Ë}%ˆžã!3 +í«iãCªL ¹ÎŸÿdÚ'¥ endobj 1711 0 obj << /Type /Page @@ -7381,122 +7397,119 @@ endobj /Resources 1710 0 R /MediaBox [0 0 595.2756 841.8898] /Parent 1686 0 R -/Annots [ 1715 0 R ] ->> endobj -1715 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [367.5469 61.6747 428.747 73.5749] -/Subtype /Link -/A << /S /GoTo /D (zone_statement_grammar) >> >> endobj 1713 0 obj << /D [1711 0 R /XYZ 85.0394 794.5015 null] >> endobj 478 0 obj << -/D [1711 0 R /XYZ 85.0394 305.8415 null] +/D [1711 0 R /XYZ 85.0394 227.0652 null] >> endobj 1714 0 obj << -/D [1711 0 R /XYZ 85.0394 275.0663 null] +/D [1711 0 R /XYZ 85.0394 197.3345 null] >> endobj 1710 0 obj << /Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1719 0 obj << -/Length 2636 +1717 0 obj << +/Length 2753 /Filter /FlateDecode >> stream -xÚÕZ_sÛ6÷§ÐÛÑ3ŠÁéSš89w®Nj»Om h‰²9¡HG”âú>ýíb -¤(9sIgî’c¹ -Ø…sž¼Ýõ¼Û‹O4Ó›ró¥Üt8O&#i|6—È•QNÜQ)“t®ã¹H:ú.€¶II »®\"•&E7ïˆÙ®ˆYÝ–8Ô¹k7[ªÙ¶Äj7Ÿbùí®YÒ÷#
¬,i¸«Ëµ ¨j¨$‰Å⡸«êjûLò–;¯áö¡Ä9ã,…`yšÒ,ëÞ0¨#–ÝîñÑ©… «vCDY -¡Ñ„ -±
;þ u¸y,Õ œË—M§Þ.J›¤)Ö‰öIJX.½ƒtTeÈ… Ê[Ñwx‚e¡úb±€ÖÄuμ»–jS¿dN´ó'¨tk† 17’¥BÛà„CÛMÑtè @‰É¡=*Ù¤À"wú£æĬ:ââ>xu>×B`ß8®~½s³î]Iœ\™8Nkà„Q ¾mÇ©`4÷ôÕ6õ3QG¼¼Ÿ x¢•Iåˇ'§yæ&‡ r[ ¼™}ûŽJt$¤Tâ¼ÉMUæÎÙ›}B–Ø+ÁûY®¬µŽûãÈlÊd*B—‡â‹×¥i©,Wh¦U¹ðsÙ55®¿[PØïLØ\<ÄmÏ–ÊÂFöÁ=[øfweé÷ó²êp¥–Gvù¢]¯gáGM†êžò’ݳ)›XÀìŒ?A\Zß}®'Ì¡aÿ[ÌrŔй - –êÌ…VªÜÜψ¸ŽP¯o?; ÂÞ¡\{àŸU˜!8%‡èïc},þDFpZ‹€ÿiYFî3‚>ˆ-ËmQÕÝЇ Ú§ážèªWÏ!²ù2X çä Bã‘X–‚¿Z“å§cYÜêx,ë[¹M\×íÓ¼i·¨á8Š Å ÙéÑûVÃ☰L -ÅŽ£Pßjïöx6 ®©t~zð¾ÕÄèCÊF
‡ ¢ÐÞ‡!§èQ·YBÀߣ¥TÓ1»OÄh]ÓeÕ›gªz{uCU^Áq'³˜ Ò4Ógv#»Œƒ“eR£ h@»N 9bèv.€e `2 ÔA9V‚,¿ - [k§¯P 3Í3ÚœEý8Èòdè15ÚáÙ.ãmØÛœ tÏÀÍ5×° 3óU´\©ÑÂ-4g©‚8KËõàU$·ðW&7KÖ` Õ3•æÌ’YfŸgâZž+jÑn¢{8Æ—k9{ÛÂtfñŒ¼Üy$ØÍP$òH© ·TÆ@+«ûý{.àXíü Éó|Q,ÎŽm§´ /³ÂöwþÖ†„Ð]
IÀÅrŸ`âq:œ+¢ää ëÀ«´óÍí,Z·oóklr{i3÷m~ -gc0-`6ì–Ƨã9ä+ÆœŽC}«ÞÎ)Õ„"‰® -“ íS$)'Àk³|ºDÊ"Ùƒ ~àù ˪Áü¯Ü4E=_ wõürŒÐþn·%¯ö2Á××Cå_[’6u“F d©ì<žã=X»ó0Þ”¸¥ŠMr©OMûÔ÷ê¡ß)Øuè´Å»×]
l*ò£^9¦·êˆ'ŽÜraˆ -<U¨ÿÕ +xÚÍZKsã6¾ûWè¶rÕC<’ÇÉŒ'ëÔffÖã=l%9Ðm³†" Q²×ûë÷k4@ñ%;µIªR®2ÁF£Ñht÷× +ÏjDYì“L…ŽmæX?TÅ *^®óšyÕ6Ür‹¥®¦&{Ý Ø*¦6Ÿ k¸i¶yé»nò¶lß #ˆš§n6¶l4îªæ&¯ºÞ‰~ÍþlêÖjÜꢡœ¾V/›Çb·+7›‚Ô°féÔ=çÇc¾+ gnô5·L|ÊŸ[ì™F8þû oLg³€±-öLyÈwûr}¨ò ¿ó‚[ær~"üÃ÷–·´Ž[¶NQ·B„™ÈÚ¥³ :ïóÇb¸>ÎN9§‹©HðŽâÎ$"Aˆ@B/àxxSWÏoi?wmÙšT k2éGÞP¦„bHXoüø ?ëfÏÞZ˜ûl¹ ÓÅ8Ôµ¡ EÁÅÂDYF1Ì»»7®zAßñ¯ú¦A?•ë‚¾X“û„ü¬„J& +eø(4É= ×kjL¤‘bf«°2E¹T»„k £¤¤´B`¢(Z~8äÕªÝçëo¼†¯ÅîÑ'ÐÑÌp‹Øãäôjm±x.—ëÞyç +~á´¦5¢ºí±3oì‚…ˆUN9Š(>O6»=÷ÿý©Ù}ëËoõ†ß hnGº©ŠŸ…"”ž,._ßç7eURŒ’°ÍÁ«GÉb&î«Î*.šÉßN'ïŸÜ(JðíË/fèÏ Ø!üäÜ„Æ}ÓzY[èVÖ…˜ µ‡Cii^ÆÌ>×iÌì¸h›nWíqëØ©3!í/ª˜fT §AÁC È©Mìí¢]Öù6Éžô ¡(q9ÿA—·¢ ð„máþ|½7S'vÓpoì·Ì‰v΄N·g笱4éÐ1ö»¼nÉ(µÛ ü¤@’R&ÕIæô'Í™H¨LT +ä-#=@S Ûœû··jPo +¦äpe¦8A qQ=†Ž{Ïæ£yJÄá½QZæÖ /ïOLÕ²ôÏûœg¢Ä-Ž(ì¶hx3{þ–ŸäHÔÒKçMn©*sÎ^ ÇOÓ¼_d:U æýqŒ%±P± C ¬¹\Uƒgálí×r¨+Ú·¡ˆw!ÓÌŒ Ð{ˆ ÏÆÃŒíÙ‡b6÷l7EQàli§6'¢|Ýl·Î³è¥báEeX!îæR·JQW&‘õ ¤õÃWfÆ ñŸê`Ž®H›à€¶ + Ê`úáPÉåÓ}¹¾§¦rˆà©]aDt§2Ÿ|üaO¿Ç°¿/ý8 G¾`V àÔòŸ'¹( +ñùIц•Îõ8#âÔ«”¡Nð
I-ª4äå¹ “¥"K2ŸˆÆÛ1²¡„–: %¶ù3Kçc"µnü|mg×
\Uçu›ê µBia‚`§÷tv¤/›Ä3ppä!|†Â ~©¹FVòöBºL2™
V:ìVá芼îųj&(Îm´ìN¡4æÃÁÈÒÚ‰êTŠ$¨f¼ ¥ð °]ä5Ráí¡¢wÃàæã‡s$n’Ñ‚¼[&ѱÌ-_&Ø”nú +Úa+$*g«úqØy!¼)*Ÿk•¡÷×ÁŸz†BYºŽPwiyÃ>#ÁÊå5þ«åäŠ>µ„¤Gº¥î&zñëBÚ²L3S¯íÖz´#¼½ÜªÅ‡+Zôå¯ú’Ý¢Iz^©´°ØD±6VIÃçGkç“tdX>¯Öùú àÜvpRËè»@H·phY¿ø+oÈ¥ç±È¤#u8[ôØCå5š5ñ,c3T•.ú{÷ûÜAcŸm! Ž_9~Ÿ³ú ÷Ì]§km^)‰•ÞhýÊ'‘Žk”tW\ï
ðH‘3@»¾ä) ®x¤6’C
†x¤x„fլݥN&ßFtê‹š]àaÏíÂ`=0ÂÏ.¯¹tÖT±~ BK/ç¡iýG8¢S± âJ[â@ÿ†* ãë$Cu'rl½t¾IÊB&¤f— é…Qô,k*‹]W«Û|íN£ž^ì@ü7‡=7è>á(ξ +,þ³gis×9a®˜ŠÖ'uº k>—×ÅT¾+CAõßPúùß)XçU´§Û×Pb
6lþ£á·¡©'ŽÜ±‘É endobj -1718 0 obj << +1716 0 obj << /Type /Page -/Contents 1719 0 R -/Resources 1717 0 R +/Contents 1717 0 R +/Resources 1715 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1724 0 R -/Annots [ 1723 0 R ] +/Parent 1723 0 R +/Annots [ 1719 0 R 1722 0 R ] >> endobj -1723 0 obj << +1719 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [339.2005 701.7636 400.4005 713.6638] +/Subtype /Link +/A << /S /GoTo /D (zone_statement_grammar) >> +>> endobj +1722 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [455.0966 581.7418 511.2325 593.8015] +/Rect [455.0966 503.2689 511.2325 515.3285] /Subtype /Link /A << /S /GoTo /D (address_match_lists) >> >> endobj -1720 0 obj << -/D [1718 0 R /XYZ 56.6929 794.5015 null] +1718 0 obj << +/D [1716 0 R /XYZ 56.6929 794.5015 null] >> endobj 482 0 obj << -/D [1718 0 R /XYZ 56.6929 769.5949 null] +/D [1716 0 R /XYZ 56.6929 686.5799 null] >> endobj -1721 0 obj << -/D [1718 0 R /XYZ 56.6929 751.5831 null] +1720 0 obj << +/D [1716 0 R /XYZ 56.6929 663.4862 null] >> endobj 486 0 obj << -/D [1718 0 R /XYZ 56.6929 630.1466 null] +/D [1716 0 R /XYZ 56.6929 548.1865 null] >> endobj -1722 0 obj << -/D [1718 0 R /XYZ 56.6929 605.1375 null] +1721 0 obj << +/D [1716 0 R /XYZ 56.6929 525.2522 null] >> endobj -1717 0 obj << +1715 0 obj << /Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F63 1364 0 R /F62 1361 0 R >> /XObject << /Im2 1350 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1727 0 obj << -/Length 3417 +/Length 3497 /Filter /FlateDecode >> stream -xÚZKsã6¾ûWhO+W¼•Ó$™I&µ™$ ï)É’(‹‰tDÊŽwkÿûv£¤(yR»öA`£ 4_?Ð ˜qø³"c\Y=ËfÙlµ¿á³èûöFxžE`Z¤\_Ýß|ñ^å3ˬ‘fv¿IÆ*/ -1»_ÿ2ÿú»·?Ý¿»»]ÈŒÏ
»]d†Ï¿úðñ¢XúùúÇï?|ûÏ»··¹žßøñ#‘ïÞ½w÷îã×ïn¢È¼/ý^xÿá ï¨õíÝÛ ~x{wûÛý÷7ïîãZÒõ -®p!ÜüòŸaÙßßp¦l‘Ížá3aœíot¦X¦• -”Ýͧ›Ÿã€I¯{uJ:+X&µ™-”f…1&µÌÏ@k‹<³Ì(©¢–¥˜ÒràB-—»]û¼øãX ^«rµm3^º(@ReÕ, ÿLŠÈ5!†LÄ®‰›¡ Ÿ «Uý+ç²ê`x>ÞÖ«-6Í|×®Ê QËõúp+ŠyÕuÄh櫲¡¾‡ú©"RÙtÏÕÁ´q/´{êê·‘ÝbÒšù‡
u6mO]”fýµk¡sÜ!˜Í2鄦Á -ÝÞ\1ÃÐÜEdt†‚݃h‘œ¢Ã“W”À‰,ós£ÉH’ËQe·;‹*(í%8HÎŒ-Ì+pH¸®À!pàp|\—}uA ’öúì‘kbú2Hª”–ÃùG9FqÊ1ò໑}·{¾™Ü -TÁyÊ KžˆÛ{s׋(…¥-H72·¬2š~X>9
Á¸vÎI¤$ <Vi ËBq;¿¿µrÞOÕ”Ëç‹Së<U,Œü†˜]ÜݼLéÉÂù)“jN‚Öx›ìU ¶ Ù//ªVÅãÒÔ@øݼ8
(ÅçOåîè2åóGj‚®› Ñ…²à¤dþ׶8ǺJ¶ib\Ɍѣa“åM -Š,;IšQîcw}¾Ðê=6€æG -GëãʃC ÐŒ:;OC ƒ#«›î
–ð1ã±mºzYïêþ…È;CD1esáÚ+pßpL!!vDë¶íq·¦¶ ¸§Qžë~;š9n|1ž¹¼¨t òìÑÎù rÙ®« -'p -–Ò¥p𳫻žZíÆwŒk–áˆFŠ1ß“Ò ·°åË“2)nÊäâ N¶ìæô# ]–(ép‹/A»{ª‚¸tp‚µY£‡–Kx!ÄÜCêç´b™ÄT‚R(¤ïýœß‰h\Via -ë%úÖÏw ŸçG"Üóp&j.›<^¿r%&- OKWšr]jä¢b?—»žâô¢„¿)ÀšB×Eˆ\2Œ!kŒC!†5Ü0iá ë’€ÍÅ &OnqÂÙÁ -/Fμh›Å“žºÀ´ZÛôV%x|ÜQµþ/âApË2™ñ.uê&I€Uñx~Ô¨ìkpH¸®À!p¹CY"i‡îÛúz_µÇþ –c±(¿.Käšf°n«™µF ¥qÚÅ"N¹ÇJ ->šŒ -).)DZû0ɾü³Þ ÷W&[Œå 59ƒ_å©«øTõ^‡0IÝûYÛ‰ñd°„€ü© ,Vjƒ~ÓD¸-뼊ŒKpñLAæšg¹ f(c\V1—÷˜ã+n6–úP&Wt0Æ~ðNõv!8‡ä+Q›rUM}&‡ I¨Ÿžœ‚ÅŒ-¾ã -At`‚ŽÇöà -ÍV„¢¨•¡^$bÄŶSîeü,…¨§‹:xHž+6½yé«OÃLÕâ½4)ÄM>• ji_ï³Ñ Wáúu´ðEä Xe”“Éz™§Î>ch -–2Ÿý¿É}bendstream +xÚZMsã6½ûWø¶rUÄà‹ +¥¯— ¬µ•ùUf+aÕ–F±¢’BÄU<·ÊA +W¹Þnûçå ‡fÿ²\Õ«M3Ÿ7× ‚-“×r*D©Œ"ј´ÑfªÄ§ÇfÕþʘh†›¥”|ñ¼iW*núaôµõþ†W‹Æ? âÍ Øbì©ò¡}k7<7{ÿÞ½{¯ßÑÓ¸ñ=¸é"*J¹xóž-˜dºJ—0ÅùR¡ôõRj6FÀüyaË’f—q6wQŠ©Ê÷Ö¢r¥XtýH…¡ñP°Ëh£
Z(³oV‡ýÐö]f8£Šª²v6Üapk¥ö>Žû” ¬Œ¼n‡&3:ç +Q‰†QñâÄz?£Z‚ŸsùÁ¥RçQ”Ê:£%!{â*ð 0ËZD©ŒT¡ƒezªÇÄ fF@›jëõš<Ò0 uÔöÐ>5T]V ]69`upEÂjtE®Ñ9l ¢6€%·g”6Ò-£Î €EDá"ÑCâ¯[b*’ŸrE\ò¶ñ¢hUN´{ñ…ã<¿È SH^pŪ9:3`T¢¨L´¥º[çÀnÑÑL°ŽØÎõÆ +«t0ðópýÀsòWàšH]€k:ãƒ'H-u¡Ä+ã¡ÌøœjÁCÈ©Ó¸©«èË â&q bÜ„7áwWÿî›IÔÍèÉWEp¸76„àÃÃ&T´¾ihöOÍ i Yë2 T—%̤Ôr +ÞÏ +g¬R&q°Âpo$Ƈ¬9=ÑËñL$?+ Œ¥å³ñ(†á€Ã°†Â§0ærø*Á%Ÿ>™*/MôœWÅŸ.¥W
ùrœ È:ˆs!‡k`§\eB¾u1ä8µ´˜„œÔ] .À–¯—Tê¼µF© Är¡ÅðBj`huˆR%¦T×±G>Õbj²"†)bhÁÚYhÁVZ\ÛjÕ<ŽT97WhöæŠÄV1MPh¦˜EÇ@FÂ?¸ pE'púÜh2Óä|TÙnO¢ +j{Ž[¢|Åy§Rऎp8<®ëñôÌ£JˆAÂ^ =Je†Ÿ +¹=€Êáp·kG*ûÒÕ»vEß~øDµ4ÉÀ@ú=Õîêal|ù_ÀjÏ?n ¼‚‡çà +öÏm÷@õÇ ¡é®&gˆ¼ºó:l|´`€½aÄ©B8ú›ëýOnblzŽ8œ‚¼íijkónohN°"€?3£ÊëNHð`Ô¸¸¦ÂÇ5Q~™¾pŠšÓ~ jšÕØS2…<ÑFÃYETf¢Í r£Ôk:hYHŽ–“ê@rqd¬ÛíyÛUÆB¨·¯¸òTê¼íF©¹í.Açz¿F ̃1 ¦ºº¬H”Êh2Y V‚õ¦Ó:5c-£C1˜1fŒÑŒálG ÍÊG3ÆgÆPHl*ym[?y{µ _%fîÛY6n—NÝw
=Ó¡^k§ ¦ z/ºñ2ÞI§“Ü8ïàZ’¸“_¾ƒ¨˜,˜Ðã*0ù)dÌ ]ñ?9î# c«À ¾ îÚ¢B
œ§¼²ä) ²ój{oîZ¥05Ÿ©°gøÞi!LŸœŒ‚`Ü:ç¤*Z$¨ylöÐÓ ËR2»¸½±bÑ“LÓÕw[/‡V&]Xèù vq÷þ%·NÎO¥n˜7Ì#ÈN6Ù/- ØÂÊ~uvie<.-a¿÷/n0“öTo”…óüÑ'Ø6u—Q Ìó׶Ø`’7èÛ”éWZ«Y·Éôr½Â +«å`iç§wAê ”Â|¶”S "9Øõé’¿F$œy¹‘â2UH¥ÎS…(uô¦Oz9¼t +’w~.Ú릃n¹©üÜDHM‰ '¿n ý霒ϑ²yr4°ú¸P¦
p‡Ò¡@Mûr¤ ÆìøÛ…CoûÐy˜{·áÝ5zƒ~ׄQö]ôJ;ð*õÃ…/8ñ¢dF¿b ‰ÔKRGKpÀ¹oö§G^[Q] >e†Ÿ xU!˜•Óñ'LY‰2°:,z¦¬„>2e¬L oøë÷§qy¬@ŽëEüì|_G«p/•&*3·~eYh¼ªNé˜' +àv+—ú™`+YÒ¹Ÿ6H¹B¾Û…7!m€” Í„ß$+Cx;…¿ã&›NÎ,2Ðd· +¯A¿}j‚ºtd‚©Y¦6K©wÎùƒéç4W™DSQH¡ÏoüœÇ؈8¼kÒ”( Ö!>Œ½ ïö 2OCÌ@f’è3Ǝߥ¼r&ÜE%¼¤R@¤(ÍÏÄv¤½¬á/‡V]ñê² +Q*£Ã ±ZK>UbšÁ
óײ.üߟÝÉ`ìä3nNó¢ñJädÂ˾[>©ÜÕj•~‰á4x|ÜRžþ/â3[”ÂTñ5w‡ÄÁuÊx0? ¤«Òhu©Ôy8D)úBÃY"Ý´í®éã .,Ã4‘¹¬K”Ê(3™·U…µšOµq«‹é›z‡9 +] œŽbÁ7•ñã™ ÄO?&§ðFùS3Žñ õ×ã
_ô™AJ[#âscTà1b†Èm¨ÿ†ÃY•Ë' GSì.QŠ»&2üx»9¿ø†@d™Öȃ endobj 1726 0 obj << /Type /Page /Contents 1727 0 R /Resources 1725 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1724 0 R +/Parent 1723 0 R /Annots [ 1729 0 R 1730 0 R ] >> endobj 1729 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [213.0783 594.2578 261.825 605.0422] +/Rect [213.0783 507.6843 261.825 518.4687] /Subtype /Link /A << /S /GoTo /D (dynamic_update_security) >> >> endobj 1730 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [398.1622 472.4648 446.9089 484.5244] +/Rect [398.1622 385.1227 446.9089 397.1824] /Subtype /Link /A << /S /GoTo /D (dynamic_update_security) >> >> endobj @@ -7504,198 +7517,200 @@ endobj /D [1726 0 R /XYZ 85.0394 794.5015 null] >> endobj 490 0 obj << -/D [1726 0 R /XYZ 85.0394 221.6017 null] +/D [1726 0 R /XYZ 85.0394 131.4374 null] >> endobj 1731 0 obj << -/D [1726 0 R /XYZ 85.0394 198.5809 null] +/D [1726 0 R /XYZ 85.0394 107.8521 null] >> endobj 1725 0 obj << /Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F48 1238 0 R /F41 1218 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1735 0 obj << -/Length 2993 +/Length 2819 /Filter /FlateDecode >> stream -xÚËr#·ñ®¯`N¦R&Œç -z5>¢ìŒžn!î—cì눉N” - Ž÷GlŠ-áÍÔÁÚuA®·¦ˆ8é˜/àäB¢ÑÂv½C([.`ür
¹-
“Ë¢ÂA±ijĺõÇ|ؤ†3³‚¥àúÆã²xȸŽ,6qo<2˜¶Jx3åϘçPdŸãt„ˆþd”ŸàÏ{Ò¢
lH9(Kz\{àx”̬|SâJ"ŒŠaxŸ ¡‚¤ùÛ§ãt(*Þä}Ø´%(Ý„ÛÔà6ÁQ½ÚmZÑ!£Û$îâuF¾| -ñ~lD@þÜÉñ·"èþ—Áu‘[¦´rãè>â'†÷ÓxÿvÊ.Dã -#!• û“ä\¼Yݺ7o¾Ròíô§)D 餎ûa¦¤¸¯YÜn‚BrMš À*š_ -Ш– -¿£˜ÂÌûú
§F7ƒ þ°aIgËqOEûD!(šoÅlÈÖµ±LÙÑÍy.ç5êò¶øä_(H0Ox¦ ‰·š’ßçüÐçÓßg
¤ª+ÿ;ô7†1-ž-á,7¯÷™”èÈôII§e*>D/A÷ÅÊ@,»2F,u'K-Žr%˜:TJÕ“F¡™ã)\LÛ,7zX–Fq &{š%ˆ5c¥zìj˜±@-Ë$ÑH38‡ÕÄÎJ3iŒ 쌡ð¡þ]+ÔôáÞNÉgZÛüÅC f2ž ‘ 7%cº8Å>Ô}VX÷*ö3Â" »¤K D0ò€ -lâ Á4ÓÊÚ®$@{ÁUp0› ¡t%3½èk½S3‚*ÅHe2#•\‚¸eDÌЫ/ZœøTÕG¸EÕ<".ÖûaM?¡Œn¨FQÖÄ´Vu]B̆%5fJa§ã£™’‚ÊA]dgÞ‘Ò¢©û¥Ÿ8ð¢C §Mê„KɨŒR™c˜Á@ºtÀÁ>G€aàƒAsˆ‰ LR >3s‰€Ðu"vì,ìÅ
0JäqÊÄIZܧƒ§2Ô¥¡l¦½_j‰ ½ Ã+˜4Uwê´¥plK–i'Nè”ÿÚÂøókŒk“8 A´ - -‚«4n¬?}—rœ%R®§:uÇ™v) ¤2ü˜#Álèо *ÒxÞ¥ñÓº¢r›z)Q+ ´ŽZ%o¯±´ÃÉ=˜u½E„]¬D[üQ ¶·ž(ÜEõHh´’’¾Å²®‚¹?ôe Ý{?ÞWB’·BØaG´*ˆtKmˆ -¹2Ùø&¨³š§nInS‘ t¦¦«ŠÍ^ä•Že‘¯ØÞ óé´©˜È¸\ (UBñ“yaÊeÉ0€ÉŃ^ V»öoO/Êqˆ_Z
¬ú.]W¨ßo6 -h"S0Œ[£†ûe ›äÌåGÍ«—X9s©Í1+JŠèŠ‘%eªƒþ¨ jÂåæ°Š¨0‰qÖD7<JLö{BŒ¹Kœu¹úœ óÐ=ìä8-,Ïr;&Û‰ Œ*ïò;äF&¤ Ó£ B8v[>øMRF܉Ö+“¾Ó£žÃ´œÀÏY#Äë~…»$r¦ŒÕôž
–¦ó£n†ÿfªQ -NE #œø]~ ”tA&´E2)º2…|Ïëib‹rÇjTONø¸lèSŸV”oÝ[E ¿\ûå§0Ì°iíLj»šQ æ»Î/LaP«É9€l™qÇÎá¡\E§LÌDUêÔ÷ûb‹Oha.”;Pé- @bq +xÚµ]sÛ¸ñÝ¿B}:¹!ø$€äÉ—8©o_Îu§Ó¹»Z¢-Ž%R'Jöe:ýïÝÅIÑŽÓkG‹Åb±ß¢˜pø‰‰ÉX楟X¯™áÂLæë>¹ƒ¹'"âÌÒ¬‹õýõÉëÊN<ó™Ì&×· ZŽqçÄäzñó4c’>}÷ã凋¿:;µzz}ñãåéL>ýpñ×s}¼:ûôéìêt&œÓw9û|}~ESY¤ñýÅå{‚xz<AôêüÃùÕùå»óÓ_¯89¿nÏÒ=¯à +òÛÉÏ¿òÉŽýà gÊ;3y„΄÷r²>ÑF1£•JÕÉßN~j vfÃÒQù ΤÊäˆ +NšSTùÍ +`Õt·,XåëjŠíC±%(ò…0â !F䶎(-…‹Ï4“/$⦉KH¯ðÍOójñm:3Âê[‚äÕ4i1í>"Öu>_–U¼ä²¢gUìh +£p]™<-»øü “xvÅö6Ÿ
v–f-zÀŽ†_/ÇlRxÆ3}tØÙC6r^4x¡r½Ù•) …¯ütß ‚ìj‚iÜ~‰À Ý嘰H¥Z € +”>…é.¿àîsJ‡cA´s a?O¯%$ZQ°®ÂJBÅ£s„DjÑI°0‘ =QƳ,!-C…„ !íž7Å2@_ –¹> ? ±¡\@y3v°CØ¿M jϨ[>ÃÔP’ÑÂH„Ô! ü»r¾_ +’æo¾ s¡ xý“ÿe ñ¤×´¢E&¯™ ·Ø*R|ÿ¶Â[¦´r}MëñÓÍü;Ñþù¢]ø\!9o7îÍ›×J¾ ßá%•„â¦$u +%t+eMHjUÛðˆÈ,.©)·@hŒ:- ͘”u‘yJ³¦ÞoçÅÈg-z?ijU/%‹E”ÊLßq†â â¥õ8FqÍ>¤y0Û ð™±”J BÛUØ¡«€Ø5‰`1qV_RƒqÊÄIZ|H5¤{Ê®lƽ_j‡t½ £+5Uw긡0´%Ë´ 'tL JmLÄøókŒk“8Úƒ nËæ>;¨Uð ^.ƒø¾.w;òÒ$.œì§ˆšœÙ°! +?®(ÊÛÔF *UuP ¨v*ª:šÜ‚M×kBØ„"tG/Õ~}SD +·A7Z\¾”ÿè=îö‡ +€î]ÑßSB‚· Ø~iUE ›Øà•4`bKÕ§F‰·©¾yR‡»ÕF…./ñe‰¯ÐÙˆ¶Ó2hS
~¥ˆ(UB)F“Ô˒U +–@„Túàö&I¹;mgSzÈê¬ Y…-i›uQb&¬b ÏŽÙÓŠiücøÿËÝ0‹ ‚¡“ö¨ + ‹;F8ñM^ T´?F”E2)Ú +%zž—Ó¤Þ&¤U¯” ñpY×£>Y¨(¨ÜÚ?b òóe1¿ÇaFÝjgR¿Õôºç0߶|aŠBZ ]™7T‹‡rÜ›2! U©óQßmó5ýs†sXé@8 $Ôð$Ùm±å[<¤Ée v`fý]Ü$z†¸œ+.£7òÓ0(6Ëby2Ô\ ·¾»ÐTÙ +¿‡ù‚·Zý‡?»8|“‚>Ñ99þE…´Rg ™ +…ž;â<}ŸqÌú endobj 1734 0 obj << /Type /Page /Contents 1735 0 R /Resources 1733 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1724 0 R +/Parent 1723 0 R >> endobj 1736 0 obj << /D [1734 0 R /XYZ 56.6929 794.5015 null] >> endobj 494 0 obj << -/D [1734 0 R /XYZ 56.6929 386.3456 null] +/D [1734 0 R /XYZ 56.6929 291.4983 null] >> endobj 1737 0 obj << -/D [1734 0 R /XYZ 56.6929 358.3341 null] +/D [1734 0 R /XYZ 56.6929 263.1273 null] >> endobj 1733 0 obj << /Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F41 1218 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1740 0 obj << -/Length 2557 +/Length 2567 /Filter /FlateDecode >> stream -xÚÍYÝoÛÈ÷_¡·Ò@ÅÛo’—§\â¤>ôœÔ§ -ærvvvv8ó›™•œ ø“³ÔÆBgf–d&¶BÚÙrs&f·0÷öLžyÇ4 rý°8ûîNfYœ9åf‹Õ@V‹4•³EñKôê//ß/.®ÏçÊŠÈÅçsëDôÃåÕk¦düxõîêÍåÛ×/Ï-.ß]1ùúâÍÅõÅÕ«‹ó¹L„õ*H8±àÍå_/xôöúåO?½¼>ÿuñãÙÅ¢?Ëð¼Rh<Èdz_~³Žý㙈u–ÚÙ¼ˆXf™šmΌձ5Zw”õÙÏgëfié”ý¬Nc›ªd€JMÐf±ÓJ“Û;'’.j>5ßü©Á·$*ü*߯[žÚåÕgúo|Á£Mþ‰'o‚¨¶®™Ðlòõši«zÇ´ö®l˜´Ýï¶uãÿ oJGyUt yØ·×m @ØÌEþž5¡má3€-æRÆ™µŠ¶¼ÃE$Ó€Ú嚸À$r`çbm4Z—Tù0×ÐpZÇR¹,p±ú&ڧѾªÊêöž W×D•,Þ6z(Ù&Ê÷m½ÉÛr ¶ùĤ›°0ßn×åAg8à—*«DÄFØ?ª³L#¿®óÂ1Ymn„Ž…Pcã]ÂÐJÒ:|újYïw9ÙßÛšŸËºú',¾Ý³à u¥±*QAðšù½™ï‹í|[ïÚfBóTÄÎ%6,@·˜0‚ˆ…³f(Ô}…PøßÀÎ˲Eûã1šp v= y Ð' VȧœÍµÔ±VIÒŽñ¨Ù¯²,}E; ^¬y-y¼²³ã ˆ¤ çM]å7ݲ*üÖÿªeŠ¸ê
¿±ÏáÚ 'ŽChÂè&H©ovD [‚ÿÕU÷“ÆÒ¤ŒWuë¿ÞÔ²t@¥¨Þú -É×L8|x"3ñ79婃-”}ÊmUœ%i`âkX8>¶l€»ò¦l™ÂFtð M½ r @w•éè
býoùf»¢/ªd1#ì8>\]þ ã[„lø%Ä3ŒªºåÄsý0ut…Ö5úéˆUÂ%£³#ºtûµwõ¾Û‰ lˆnûí®¼”#<mÏeTóÌB, 4\û&ŒÀé+ I¡ ˜H ]®Â™÷Ë;¶Žt2Öàå#ãZÙƒ'keÀk—ë}Áhaá©!¨lÔlý²Dÿañb~œ,|ë—/€&y¶ñ-OágEÂǽß}bi -i êpÖò2Å jjÕë e2Håi’Ìö¨Y•f¿ELÌ™Fˆ@ÎOB*šƒTXP~j -ô¿ød G¨µpú£ *I¸ƒÂF ª Âä
D:@OßøeÎð -Sü•÷
ƒ¶è*B`kòMàé †eØ"p¹îP¢+©aŽ“ PnÏd;øe€ -“ -´ 3ÙuǾ[~î`4FÕ~sãw\²ZNˆ Ý°…zÔ$ÚM·Øi>äâQNtˆ=×é( ª h!4ØñQ z® %†Ö• ô÷PµXptRf щfîh!(OZp5Ö‰[gÈuÚ:=Wï-½e¹ad Ø I3ý¸=ׄ#û€ I"ÜXçÚÇ$B‡ô„}\ا㚰Ï~[䇌âw÷ùŽ¤Þ_Xý¸:=ׄ>CC)•Å& )ôG
Õ NÉ8q©ùª« ÝL†mêÔÕ -äx`&O¡j@%©kìºydÞÒ††˜Î·N
ÏÕ¥,d¯™Bº áxl>¡K^? cŽ‡ü6À”7UÁÂlB½ÝŽPý–` ¼
2¹·-˜ÜŸà‹85Y;Pk6Œ„熱Í\6› .aŸ ú -j¨ç¾‰¬ÄÅ.Qîwœ´[q -F”¶ÿé0¢²zû-QDY§ÿ ~C MÄ©p))üsMEªä.@§"Gˆ%é ->ð@ í˜RÔ>ðSùŽîaº¨#ŠoÃUBn°ˆÊõ,ïÐA¾ô@/r1ÔÔKŒ÷á?߆= ÃOü<¯ùÿèœ4¿ç¤aÅ©ø:³+ýD|ÈÌÅ•ô· iU¬L¦¿}„ %?"Òf±3pˆxψœ¯›z"… Ô]¯ÔB{Ó¬â=¥ÏÇó(´YÚô-\M3NѸ»3…hƒfó‰ä ¾"twCq:<†_øyNóíÃcì‡ -¹Ç r)@m$ðGNéâ+!¢ÔUhAt)I_úÌék#ˆJe ùªH;Ýå
6 t+›Mx§ Rxn×9ašs|méð~tYžKÀÌ6o=“>“&ÄÔ+A¯Œ´0àÛL¬ËMÙ†Ù:lŠì›z_FºöÄu^ð.tÏ9u/rØ“únV™Z‚ã‹Nþ +xÚµY_sÛF÷§ÐÛÑ3§íþ'Ù<¥‰“s§ur®2s3m (‘²9•HE$íúnî» ° +•¦z²>³Îgé)«³_Îþ¹8˜
KÇüçL"\¢ãj=æ@— +o´ ,«¶Ø.³Eû‚½–
~]”Ýeå*›¯Š¿ãAJp±· %Tٺșk¨Îë¤çº/W+RÑ5éhoYé¢ÞnÏUͦ®ò²º¡ùæ¡i‹5±äÅ2ëV-Ml³ê¦xã$Žj²½/0~˨dž}eÛ ™“©Ò©0Ò&0R"uN ëûŠÎ–u5ßÓ¦ìpër2ÕZèD§a
ÈžÞÙi—o¦›z ò§^Êè?ô fÒPImiä3î
ÿû&Ø#í2ýëd h0Vh“Wu[|>µÚGëìfd 5 þJèhpô54ž3é–Èú›”zQU»z ú* "nXâ²Þ2±è¶eûp®”Š Álb£·4•My®@ D3—ÿ.ú¹MQ嬻®è{—m˺câ&›Ž9p AÝ`DXÍ; “F÷
¬Šm¶B³‘Lû^Ôë5¨#Ž’W,êªÍÊŠ~d-M®Š¬áyåMbiÈG… ¿IÈA&ÏK¢¦Q½¤YpXÐXo €Q ÜŠgÂjVMM£öT ì0òFyN¿¡R¦8N~[TD„ÈÊi´Î hr΢ں&B³ÎBâ +ïcÇ 0,Fœ …ôÎ…úõ¼ øü¼( l`
o‡BF
v˜ãl¿KÀ@e„Ñq|˜Ncp†e` +kRÓ‚,\W`¸* AÐW4Â& ”].yÏÝâ–û ¯„(?p 4Úí#ÙhèüªÅªË - WªˆÊIÍئX”?ÄaC• &s¨·‹¶È± ÑlS´4…ÇŠ„¯]±} R° +Ôø„7kèÐÈpQì/ðȼ +¡ô šš««P¦½&J° Ç:ðvèÍ Hòê 3Üä+À27Ö´âKz¸>…‘гÅxëÝ°LºÎæDÞíàQžÚ4 Ìš SáuÙ…iìRŸN¦û?•¼:õš<îý[ÈŠ½ð1ÄÞËwÚ¯8…#)^C ðŸ†åbaµÖßF”‚~<Iô·‡‘¡ä'`Di‡ºƒþR‡ÖTQïoA(EÃðn‡ƒ‚y ‹¶DÉë‚ùCÓŽº¹ôy(EËï1?[*u±¤¡/ü±ƒ +üI7òZÑÔ Ìø?ð¿¢å,=•!ƒC~]Øü_Äá;YbÇê¿Üã«ÿ +ºy 3ŒŽÃç8éE¢Óš-²Ð×>=öìîÏ¥Ì50ý9”© +endstream endobj 1739 0 obj << /Type /Page /Contents 1740 0 R /Resources 1738 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1724 0 R +/Parent 1723 0 R >> endobj 1741 0 obj << /D [1739 0 R /XYZ 85.0394 794.5015 null] >> endobj -498 0 obj << -/D [1739 0 R /XYZ 85.0394 116.8816 null] ->> endobj -1371 0 obj << -/D [1739 0 R /XYZ 85.0394 95.2452 null] ->> endobj 1738 0 obj << /Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F41 1218 0 R /F62 1361 0 R /F63 1364 0 R >> /XObject << /Im2 1350 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1744 0 obj << -/Length 3662 +/Length 3435 /Filter /FlateDecode >> stream -xÚÝZK“㶾ϯ˜[4U‚' ×ö®3®x×Ù”+±} $Έe‰ ‹ÒŽ'¿>Ýè ¥™ RåÒ Ð¯Ÿº–ðS×.YÐá:V8©Üõr{%¯ `ì»+Å4óD4 R}}wõ×w&¿"d:»¾» Ìå…ô^]ß~žeB‹˜AξùðþÝíwÿüøæ&·³»ÛïoæÚÉÙ»Û¿¿¥Öw ßüðÛ7såš}ó·7?Þ½ýHCÏñõíûo©'Ðã̤ ß¾{ûñíûoÞÞüz÷ýÕÛ»n/Ãý*ip#¿_ýü«¼^Á¶¿¿’ÂﮟàE -‚¾Þ^Yg„³Æ¤žÍÕ§«tFã§Sò³Î §m’ÔÂç~ZÈJäJMn•È´é…¬Õ” -¹Ø´Í¼nöÕýóñ†•t"Ø<¿ N{²xG5±º ¬®”'«[þ"¥®Ëöfn´ŸøÈg›fQl¨kSµ{j5÷4zû#¯V»ågeÛÒ÷9“øY]lKjµåîs¹ãáýºà¹ -ú’_@DЖ5¼ÿpwûî_ÔÞ -Ŭò¹žë Œ6®DpŽ ú´.ë‚ -lB¹ÐJæ¼R1ˆP·j Ž5›’H -8d®Û’û -iÄÝMÐ3
8üMµi¬â2 öu\@;rBš‘haXqÒZ¥b)ЄÁ”íÑœV4;/÷´ÆlqÉ¢„bá'’¤Ú¾´”Êê”ù 5©ØDñ&²+õ™$[gÂ…”M¢þ®9då™%å¸k¥fÑ%ÂBU½/ÑSÂIðHÔyɵ6$éƒL¸"ŠÄl¿w©8?ÄîÇDז˦^EØ(Êï¤Þ¹#w:iÖ´ìqà…”>çбžj…øFJã±”¶'‹½ÙPh`Rµ|žÐúôá
wÅCT2±³ß›”Rq¤jÛC,•!û©Ó -Nx¯ò/;¯LËaAæ ì%U uÇvZš‰ãÝA«`QZ#T¡™òöh·ûzwûs2 $´H$
»‡E³_'¯Áv ?ö ?c-wTzmϺ鄳>\vCªóî £:tEE•‘/ -m ©4- V¸ ¡ -[|(ñ£§†+,Ãûo¨#¥µ_Mù1“ lŠ;€90ðL”- ²K¤¨1Sz!¼ ©@ÙÏ7©àC]§`˜*”=ªßMÃ.€½ì:s–ǸSÂeþÄÆ:ÏI ÃGêI#¬C~àó.Ì
=We,)ÔLÞù圀â'^‡‘ =Ú—Qx(~p&,éên,›³çéŒV]ÀA±½‰ÛŠ×ùìÛ÷Ÿ¨‡#ê¡ ö²lè6tY{Ó*}’DOc«©=iÐ?àß¾AXÕ]€=Ëߘ÷¢¥c NÁR¦ÁÉÚ£Rà)ïZåÇ·ÁÔYðó±iÛj±aRˆ §ËHLâPc0øZÔC”«LºÕªxõmÓç9Dªø¯7*¾ÓÓf¶ˆé¡Ê»š:fœÐjxZ®Ø@ëƒSG>ý™J´Ò¦Øƒ;Ž—ÓS´'ä/6)_Åû-m9cÄþx2…AØ"MçÊaÌ‹?˜˜êÇr0fEŽ:›ú©èïæ!Î:£ê&°ÖEÌçO#aJ)¦Äo‚¾ƒV§—˜.µôäÐ\šTã -[°±`ÊÑ…#Œ’þ7 ¦F÷E£Efò3%#S¥%6“ÚØ£¿QxcØ•œ¾És'}˜ÛÜBDNú\s:‹4Ù‘’¤s<›@£Â $z&ŽÛÇ2&RÐ<<â“ã|ìþS¨^rg< ü
´äÿ ¡éÊè ¢(öœÖ‡wdGdã3|Ö¬ªßnÙ+]¨7Åj¬´ƒ¡eºŠoŸ!,ÚžW £„rò…û¬!ÕJTcÁO]8 -HÖÚ}› -±kÁ”'¨}¿cs%êõqP6¨5rÿðH‰ 5Û&9àþþŠ-væ`›ãEFà-‡!œB§pNÚ‚¶g*n=eEÈólàŒ|•? -çUï-tÎÞoöDÇ VŠ=”ÒG~a°¤b¿€Dñ/¬Cn†‡ˆü f¥G‡xæ?éÆ ü#ù„‚ÈNÏÿçÿ«÷æ·¹€ÐÓª¦sÐHoLb -eŸËSó"1´Ò¬ÿíNBvendstream +xÚÝZÝsÛ6÷_¡·£f*Ÿ$ø˜6NÏ«ÓK|Ó¹kû@K´Å‰D*"×ýëo» H‰rÒëÃÍt<c€À»Xüö€ÔLŸš¹T¤¹ÎgYn…“ÊÍ–Û+9{„¾ï®Ó,"ÑbHõÍÝÕ×oL6ËEžêtv÷0˜Ë 齚Ý~NR¡Å fÉ·ooßÜ|÷¯w¯æ™MînÞÞÎÚÉäÍÍ?®©öÝ»W?üðêÝ|¡¼SÉ·õãÝõ;êJyŽonn_SKNÅ…Iß]¿¹~w}ûíõü׻ﯮïúµ ׫¤Á…|¼úùW9[Á²¿¿’ÂäÞÍžàC +•çz¶½²Îg‰-›«÷Wÿì' ô†¡Súëi@6a¤S_ÄVi‘çÎN³•°J¤©²—ç¢qæâj 1žê¸½iž gŽ»«õL)‘;§q{S-L¦ÒYæ lyJÛ{‹ +”¹p©UH¨$Ì¢Að@ñv¾HUrÿur¶ 0§Ìt’)áFγ3%¤ÍsC4ƒzXéQ¡á뛞½n`=³Á’⼋ÁÄaI© +DÈ *>Mƒ¼ïË0”ù¤Ø´
.5ƒAVÁê +€9bþÏ¡y AeÒÕ„‡© âÓÞèTdà7¤”Éšº$'p7WJ%aƒÊ}; +S$ú² å +p ÂÒƒ|Î%ër³ãjʲn½Z±´
5XyU2uX{èe2”…ûžªÍ†j ÕòÚ
¯Qµ0ó# *€–Xlº5ÐòÅ”i¿
¦Xl`Jtq Wm 6Ù5ûŽjÛâ™*÷%•í®\VQT%6<UÈke±\³‹ ™– +OIRG|Ž W§Eêòl¬¸d0˜rUVS#³/ ŠÃ&’>P#$g q™'7ÔÃΡR/´vé—*"ÓR1-Ù<Î\µÄò±úT²lUMMÅOˆ¿ØcdVuÎKƒÿqýµ}¶`÷_Ñ´s&,bK¨ÚW«’ôi”C éØ\Pa*È„V2¦&}80V
Ô!pJ#9$NI‰i½×ÉOkT‡±rR
>6“ùP
éeõ§ yÆŒFaf©)úB¥k¦ØZC¦OÄ&ø€Ê ñŽÞ-5ì `ÒàØ<qì¤u KÒ: £8ø5g€ +ŽsÑ\I’Õ_†ELÛõ‹89{'¨ÁPªÜ¾:Æ
héãÔv‰_Í>J[01î l¨Í=åØÖ[ ~TíqAà¼à< éïHåv×qnÁ¦µ_`GkÎ4b@Å:®=Ú² PG½º˜~Xi¨»pZëÓ!Õåô£§BÑ·Åo‹˜ýàž/ºj[.ªú,qpFò/ËÁ4bŒ0§1—NGrÜÔ÷2b¼ô6Z Ô†i¨7}r¨ëáa÷¦© CÐGÒà=©öÍc<©Ÿi䶪]ÉÍŒ$Oq& )÷ÛjA{œU8ìLrušo ½³£ÌK¥%Uz–
šªk8µ´Ûãé`/ªíaK ŸŠÍ¡ Ϭ=³-ž³ZiN8¾Œ$“a|ôŸAÒ€ê$EªI$U«Í$’l&<$/KÒSMˆ2F“Y®üX–#šT&5F“Bt| $)ŒçTî‚ìÍã1ÀVrt=²T,åPéà \ªO¢ƒK€KÁqVð?‚+½„-uÄÖÿ
Z&w¸êeh
©.C«§ºì¤šCwî¥R¡T®^¥§še„-8´Ã Ý…y{è\²w>Câ1`pz…Ï¡«Âï
€„½U ¦\/Ô* B˜ +µ~{áƒ3!¨ÝGVC@å ×økz+¹n*3ûH
¨^€T¤ºì&!ed?Ÿ¥§še쮼0º…9BÊÈ)#åÈ_IuôWR‘¿‚rÂ_ÁÀà¯dÄ
þJ¶æˆ!îa% ^a«„–Š ¼Ø`0É_ÄgÁª¬6Ùg +eÓ—£Á€èr0ˆD'Z®èFe +ùÑþCËÑdñ… š,t“ÕÁ8–‡=mwØæ0
‡Ã9‰‚cÔYìó°ˆÞ<ŒïOBá" zÂU9”!ÓâVÛJ(BêŽ:([2ýÅ'öᡯÿ2 Þ ?§bÕ?ÏwS@ÎA °]3¿¸jì‡UO„‘‘Dä©Ygþ<€§uÃþá &.C=lmîÌ ØZ%u:ÚZ75^üS¬Òtc; +Qñž d9
Q–žîÆm§á,¿à0ŽË½ìŠ6fžôÅhûWÀKWÃ^8PÉ óƒ™Íü‰B.8e2!Ýgž D— I$¾†ôü¡Ùo‹óóŠv0‚ÑKôDç"ŒK)Ò̦#è¹Zånx<ÁÏ%†o¬Üs?íÖx; §†*+¼z÷ ¯¦'¥Uµ_MÅ.Âç6æ Çx‚ &.‘-l¯S§?\8±áe /¥ñ„ÄóMšÄM×›…~LMƒ§ á÷np9xÊ^ yŠ8%\êϼ«óœ„d!e¤–ØÃÖã0ëSÛ@ÐP¹*Ã5BÍä},Îx ˜—øFaód]Fá¦øÁž°j¤G”»±n.î a´ê“ ÊçMXVxrÌ’×·ï©…³j
é ¶²lè4üÔ¡o¯¨4$ªžúVSkÒ`{ ¿ýBdäªþÑkW,?°ìá7À1œ½)AŸùà;ÈÄ[ïPv²Ó`j,¸Ü5m[Ýo˜òå†û©` ‰I jL +ë‡*æý§ž|Ê(¦Ôor!}Þ.ñˆÔRÉé¸4†Ô – £þ +•ö‡åÁ+ô…_‰'ðg›1_ö¿ŒüÓ¿ =þøÍfÂx!{ÐbY“°P¸‚Lž'LR€6ô„èÿ=?}endstream endobj 1743 0 obj << /Type /Page /Contents 1744 0 R /Resources 1742 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1724 0 R +/Parent 1723 0 R >> endobj 1745 0 obj << /D [1743 0 R /XYZ 56.6929 794.5015 null] >> endobj +498 0 obj << +/D [1743 0 R /XYZ 56.6929 676.1712 null] +>> endobj +1371 0 obj << +/D [1743 0 R /XYZ 56.6929 654.351 null] +>> endobj 1742 0 obj << -/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R >> +/Font << /F37 1026 0 R /F22 961 0 R /F62 1361 0 R /F63 1364 0 R /F21 938 0 R >> +/XObject << /Im2 1350 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1748 0 obj << -/Length 2725 +/Length 3130 /Filter /FlateDecode >> stream -xÚÝ]oÛ8ò=¿Âo§ -,O”–…VR¦‘ÅÉo'ÿÞmØ›
KÇø§¥+´v„‚÷ÈÀÊL¬ö…‘Bv›rÕΫM›¯«Í)wY¾jñV°VôÖZ]h
caѲ|8Í¥ÙM…Ìš»j³©g³jEãMlKšN[·ÕãÒ²Û>Ú¶WŸi¨»"ýå -Œdìh !XÉÂ(Ÿ0×·›²"ms:müˆ\WX¥'9ç…×Z„õ‘ðÃc$¼š1: ÓveW-«UW +˜™µÜ†s;®)ïc ¾ãNÈVŸÄçf»™Vû4p- -/Ô3Dì°ž¡‚k[x¦_Fƾ4׬s‘k³ª«6ËzU8ɲûÛzzK࢙– yVÎfaתMhõbAJah›íjFØ]CC îAׯ?0mV«jÚÕ
:>´+8HÆðÉ·m…{iG{A;¯º@€5D-ÎÆqqI½J´h Ä;`ÞVDiÓæFJ•]t4Q.ÚxÖ€'ƒµÀS<iûñ‚pLA¯ÂÅXº™Ê’è1Y³ÆË—‹ÅõãÞ6ûø欛M÷ŠÆl6o6|“Ñqóxê-
~ÙV›šÈ6gÂâû2 ÎÒ~³‡U¹¬§4¿]Ï@uZ䇀KÍ eÕtÛ$m ÔbŒ6—ÛE×R/<˜Ö›ö¡$ ¿ d4‹E ÆîÊŶ"0‰ ‚$^ -:¹ðÜ‹¡È“¥}f®bç¦ -nBH±¯|(ÒdõœZ7mi ]WÓúc¢B¦I¦"ÓÂ\²Ý´d,NŒû ÉDa„ÞóDÏš=Á¸ˆkHŸà€’ì˜ «ò*2ÄŠÂ ³g”n¶øŽ\gÓ9È
y`x`ìÇù’ºÉßÕÕ}DØBšù+p g’gFðêÕt±‘w†árT( ö_Ë^0aÔ¾ûL2A‡r~È‚ûº»EÉÅ(lüi”-¬f‰ÍáƇ' ÏgµÍfd 8Õˆ ü݇Yo"Ò
8¬?‰¶> -ŽÇ„ãhJÔC:òt‰¢’.IR„wá8FDÂ9$bølà±%Ø>gè†EjªÍª ‘•5Ï&û1=ö1~Á–t ÐÉ5ÃÈ¢†Pv±Vc2
3Ö}62-™—õ¢Dƒáq¯øx•Œ5ä9²:ºl¯ -çå^öüâèHÚ»£€ñ{Ò;*1’¶ßÅ;:,¨¯°qaôO:G)}Á Ö9*X ½–ßÕ;J£!pàò¸ÇþÖGü£t -Ð$] :ÉXö€§ÙRgÖ`Ë£ëc˜Ñc‰I> -2ÎÞTÑ;£$héǾ4HCÛ¶¢’Í.ß__¼ý.Žòs(’#S½&†õ^Ĥz/N¥z¯qTï5)Àcå]ã—9«²ñ’¯·-Äã@0÷£ßÝð[¤b¯h† Oi3,ðNå6|—“Š -’Ð2±,:æF€ ˆ=Í òL¢0B‹öø½¤StVøÀËóà¸^Ý7tCÝ¡ñâ"W?û]Éòb&ÓõK¾¸w(ù"K¾¹Ô*wapZÆhØ€Á´Ü+Çh¬_ò
}¬‘ÇØŽšam7àl†3TìŪoˆ ¨íU}iÓ·nÁFje^ÎæÙÁçRÚWÙ©ïØÇY‰©µæC†¼¨4û‚ï‹JÅß»ÄË•…¼Wª¿i‰\½eÌ=—Är r ¾oëÁ?1ÿ2ØÇ䯜‚œÿëúnï‰ÿ~å]Uxf0ÇQ ©~4’`“äR¾ùç6¿EBtNŒGÂ’È&¼H
Q›$_fù>‡w?ÌIh=âÿÝSÿàendstream +xÚÅZßsÛ6~÷_¡·“f" +¾Þ·'¤ãHj‘^Þ¾£Ùh@i$† 8 Ò2;Xu‚i%Ü¥Ñô&D=6!jõLˆÈÙ„h™5î<eß„ˆôŒ ±å€YkÔðæÿë6uwè7å /ñû¾hÚ&(?‹?EãÇè Ãû/7Ð4×|*×^îŠþš«}S,#ROÁ¢¢©Î‚©ã-Øm:fÁ1\¯È¤ú>§…¸iÇò-ìQ]ÐÂ@5ÔÂ-Ûì¼jN”11‘M3s™‹Žj„Á‰Œ¬Ù–°e¤NPF%2¾C)îœ:¬‹Ôêé¢ë:]¤÷œ.ÒЧ<ѽÁû;ï4œpÀJgC¾rïÕÄ_&¦9?îËÇ¢â&/»©Û‚ûU¾ñ¦Ø‘[„‡&G2䬯TÙA©²3J¥´Ž¬‘Ԙώ2kMbñY¨ +›À.û›*Ž>ÒxZ?’R.—¤a4^ûgÎÓaiÏ¿ŠKn|ó™Éö
‡/j9D9â š %±‰`„aØÑY Ü>ìX¸ÄÛŠwßb ›±h2´(Ïøé61‚_c¿MÓæ€iìY ™d +©z©ûTç}dG՗˹ÞïÅ©‹TQ¦ô LtT/p!e"ù<6Žµ R³iꥶ,Úb·)a4°L¸§‡rñÀÍÅrš/—¬òM cLŒ½Ó¤§÷¹ nk ºùø¨¹uûö#7`ÆU±hËš.`Í82ÿ¦pYÊká¹*ZÇšÎÄýlðÉŽ9ÿÊÁÿ'™SoGÉ +ú~m;ýéÛ<²wí+ b°ÓU½Ð›ƒø] xaήd¶ÍaO¼ü”;ÂeXoù —U.x~¿]Ât’‡Â¡VLRÕíð$Á w tñ‘Rî¹ SÎûЃƒgnãò[FÇõÚ1‚±€fhÕ£&«Zûfï…¥Øã¹= |c¨—Šý‹Rð/39e¢ú€ë\å ÿÎ/Jéźnæc÷„(‘¤€j¢£¶ßŽn EEñ_YÜ>8 +šKD´Ù‡5óí¶Èw<ZV~Ÿ¿Öpí˜ÖþG3â#ci¢Dš€ÃNý4ï,ÿÔÜ´PÁ³úñ¤S ‚ã(C.uNN~q {ƒ0+ß¹+ L(d²GÆGZ›i¹bBŽ»@V6< +‘Ý!Ã`Í÷áDâói10@`êûùœ» ËâÉì˜ Ìø¢f2S󙉢¬÷KFg ç£JP_* eô1|@Сӣ°ì©l Ê^ª|ʉ¶‘MD³;ñéÎ +Q¡²Ûz7²vMM˜sò]GØ,²w +O³.]Œ‘e]xz‚:×höÛ-Ù¦†êø‘¢mÙôÐagM£lS¼ >;{tV39Þ¯ A Ç@–¢ˆÅL‰éoô ˜:ÑAY$N¶û·üuŠƒ4,2™ˆ'óCUøëÔ©\D“sØaŠSž«±»FòO9ÁŨº£:ãÅææD'
^1X¿Ãi` ¨FhÄmu|ÄIWÝi8YG+ ÃæÄDReò‹¼0ð9M»*î«Cijë‹Hž¶|ÍŠC:?$¦m +_ÏôÙ 5¤š³) +Å&¯¬òrÝx¦«åÆ"úÉtðØHæ$mÛl1‹“ñBË!Rl;Ì-½šÁž…HåÌEÈ¿"SªÄÙxºðÆ9ˆ”´%N÷D*ú&²ôoÅH…˜ âü_€dé (‰ød–íàÆ}_Óg‚zÏ%•Ã„ô +Ÿf[ѵÇI¤‘”]|^ Gܧ:ÒR«!89ÆÇÁ ®Ò +Û'6
§œ*«¿×ž
ŽÙ€ó]Mù8…°E*4Œx¡ÜÛ§º EêÔ]Žoèê
]ý%f:ªnŠ„äÈèÔ ÙùÉ}×Nƒ“H³J¥i_¥Ò¬§R
O×~~Í}xJ¸ˆJß¿dlb¼WÊáÙ–+9iÚ/Òx=Vå‡ÕX¡ÌPªzì㧆Ê]ªq¾ +ÚƲ4݉¹ÕÓñŠ¯ÉèLJïpô£ŸÝbúEW¬Žjfc¿4£’P<š)‹.@þê_¡ ~¢§mØWãN
!!€ÙšgŠx·ò˜ó„üaý/´5ݲendstream endobj 1747 0 obj << /Type /Page /Contents 1748 0 R /Resources 1746 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1724 0 R +/Parent 1723 0 R >> endobj 1749 0 obj << /D [1747 0 R /XYZ 85.0394 794.5015 null] >> endobj 1746 0 obj << -/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F62 1361 0 R /F63 1364 0 R >> +/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R /F62 1361 0 R /F63 1364 0 R >> /XObject << /Im2 1350 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1752 0 obj << -/Length 3066 +/Length 3275 /Filter /FlateDecode >> stream -xÚ¥ZÝsÛF÷_¡·Ê3ûÉåå)M\:©“³Ý§^ (‰¶9‘HU¤¬¨ûßX`)’¢ìäÒL‡Ë%vÅÇÀÊbÃ?116²©L'Iª# 3Y¬/âÉ|{w!˜fˆf]ªŸî.þñV%“4J´“»ûÎ^.Š“»åïSÉèvˆ§o>^¿}ÿî·›×—‰žÞ½ÿx}9“&ž¾}ÿáŠFïn^ÿúëë›Ë™pFLßüëõ§»«údyŸÞ_ÿL3)=ÎlzsõöêæêúÍÕå w¿\\ݵgéžWÄ -òçÅïÄ“% û—‹8R©3“=¼Ä‘HS9Y_h£"£• -3«‹Û‹·v¾ú¥cúÓÆEFj šÔ‘R挖E”D‰NÖ¶J–bLÉL„:.«¦¸?Ìêj·]ä³';<´Pq䌞t6>á hN¹Ëw¡Lä”Q=ö ŠÏ9² H*á<èñ©ŒLÝÝÙ‚þ¤ -Ô?’细Ùf³*òš^šŠž´%×y]g¢Î˦Oûþ¨…¶Z.·—ÂMaA^G#rÏ„‘4 -,¡\$u’´Ž,läÀ=ã8žþöó'ÚïSµe^ Šº©qC8ÄL&à-šb`WƒUôl·ÜÌ6@] ?I"m]Ú ÿT, 9ë$dOU±|iO{j¡¿vO/¥ý&)gR¥Ó¬\ŽY_è¼ÏïîÒ(IcËKêM¾ ó*;Íè±
ãÈL«{š»j¯ò™²&JÓ<Xˆ(5Fcn&¥ S¶ L‘ ~Ø<f
öÅjEtóœf@/¼Gµ¥'8 ‘ ?e¼ú7z×"'Šû°¼ 8-€›ŠÕô6χ‘«µŠ’ÂÂZ%6–ôqû0¡ÁMiý¬»à4ŽO÷EeÝ拦¨JŽýýLŒˆ#мì‰4fLõ‚ άø*%£Í«øÕžù1çø}ÊŠU6_ñkP0~¡¸¦—eÞäÛuQæKÔ®€<ãÕ_ò/Ùz³ÊböEó8àp_VÕ¾( èuQ•ÿ‰cù°Ûf^;Þqu××!Ü•ˆ´„X
¤™Àø› Û¬|Èi¨db
1ʼ¢ñ_ é9òiu·Õ€Iñ«§™E‡‚X L18…÷R%[
+)|ÔáÎ qç wqþÞÛ¢Z ƒHÀµ\p©ÌÖùrD ÚYÅT–ÈÃ9%½WeÞÎÛÑËp´#Î{µÔÿ¼„t,‚î‘ S~W)ü÷#‰÷Õ‰Iú6@%‹~^Ñ´ˆüÏc!Uè¼Ç²
š9T…“~=°Ãí‚jÆñW¸È%Pž}þv¶]d± Œe -¸'´ú©i -Y´Mgͬ"ЖaªÖm<ŸÅcUÕ‡ÀÍC,Ì>Þa º$Ï…ò%–ik0´ kBcaBÑ®3Á -÷¼QºTçÒRyɲ&;c”“ͳŒÑãQ
îÙcLÊLEÇ(ðBé–ÆÞ,iìEdÒ|]aS…ã&¬oAÀïÅ_ÁñôRòÈçh4x5š‚ -,IóÍFF -ùðj7WMe”8+7kHd cl«ÿôXÀÐã><çÒƒª“‘'ôïïiŽ•Ñ]¥K8³¹UÕLUñÀlh xIwï‚yç_GYž–GQŽ ›·8 rØÀ‚’XjÃ57Œî¡¼òÔŠ•AgÙp–%€F|·åÑ*÷½µŸ Û ið¸ZC‚Šž€÷7ÖôòóõíqU± ús˜îð2£ž *,UÓ©1sn£q˜Ûr÷àûmë ðû b·Uþþç2zì3¦ñùÂrš Ì·!{ 9G@—4˜ˆY,‰Á L{ á™k V4YüÛ ýÀ…EeC¿gPÓÜ,§!_)V'Po³¢æ¾—ÓM'§Û¯0bˆí–¸¶-q-¥#,z«Šé×tµ…ò è¡Oéý}ÄÕoè c+jô'p-º2L[¾8åæZŒ‰¹Ó„¹6âö˜ Kû - Ò IF -äTG‰JR -¥À+‹U^ù&P÷ÇR=Ï7ð Ügi§lŸ/WµI·!L¦ån=§"3៓VBÿÒ„eÇr4a@ƒn“nýâïÍ`´¨J°AGÙ +xÚ¥Z_sÛ8ϧðÛ935—ÿE]ŸºmÚëÎnÚK³O{û ÛJ¢©my-9ÞìÍ}÷P–m9ÍNÛ™ˆ"A +m¼ 0 Ö=%\ž»Qærá6Ñ€³E±mÊˉ1v\oèYðiÆÅ +×\T‹Ï…õʃhœ^,õn²ªÛêû"AR–ÇÄ$+ÚZo ª†Ä5mÑ–ËrÕòkÙò@ûP( ¬2÷‰)Éž4õv3+TðFxSߥ5‚âÔø«^•Í+h;;žnY‡-}„fyv4QJäÎéÈe +ÓY×åfSÍçåŠßã3ôº.7—*Œ'(‚ 6‡#U¹£)Ó¢A{ààô‰žÕj¶ØΫÕ=½¶Ðœ3gýËm!s™¨{vGþ»ª}¨xÖkdB[0Â5âòN…i+d–'a°òT"xg™$c×YÚî颞}%/ŒÊ•Y½ú”ú~»)ÚªæQìYÀ¡;òÔΤüæ%®jBDž0ìªüÜ?Ïò¢yxq3Í8d5IÚMÀBK ú ÝÙ \ö# z临ͣ…®{6tÞªhh)œÑÉП.'è€ðWO ,x‘£=¼u”ŒþËÙ<7DÓkÇ•î-;~ø¸Ô£w5¬gÔ_óôÇùþf+
îj¬y— dˆ +©xŽrãˆ> ká„¢f±šS£dšEUn¨g^—LžAf»^£Z87ÜS¶mt2|‰g)ö’‘„ù|S6ÌéîÒH>͸å}G¸}û™\©©g—ZŽ¿â D3Pêä +f„çO׬$ŠžŒ»4½S ZHèŒ4ã/ey‚qÖ`þy±†(«lLˆipsÏã¦çÇ ý¤?áÔ‘OùÆ(QÎ8ìƒr|ÞOð¤K–ûžI©ŸW$AÒ—ó¦Mëäøõî(G) ‹jQLüš Œ#ä×ô2/Ûr³¬Vå « Ž‰æ‡‘òÏb¹^” 1˜´ I¸«1'§´q )Š×öÏ:¸»QàkYv$DÕñé±)V÷%5Î| ¦wθ×Ôþßë¡Ð8àA}¶0I¾>á°›Eô(HÄÑV "žR£; ¢×a9öìqû w±ÿ.îE½ ÊY!øBÜN¸´*–å|@ ‰yð†©È-Qº%Jˆ5¼ÇÒ ¯ e ¨Ã~ ±?š¥ù'd.P½²í‘ CŽ› þ½"0Ñp mæ²Ã=@#«Ã¸bi¿ˆ5ŽL}D7x(Úà6CA˜ãÛ‹ &ØL3Œ¿*@VåÿßÃß [¬à&Z*ÂA©ØI²ö¬Éá q×O5È!=s]°8»ÍPQI™Š“îØD9³‡ºnÈAZ„X袿ClèœNVRH mØ[Bcja@±¡×Á +¦ÅìëŽ8ÌSØ_®Á§Õ¢jŸŽ +ìUð ˜s@œÔÂì¯û”„èmUÐvèVN&oŠl»Š _ŠÞªi©1?Bé+Ö/¦Om9Xi…·R zÐvÅ›8 ”ÍDZ³R´ +oéý7ƒƒ… b»{èó›b2!Ý7nó{DÏl EµŠ¶8³#Fšç¤&šS©Gû‘Y§¤’sÕÛx¡@Kí¸!¹Œú1i¹¬±œÂv›æwî yñ(}°¶Fïåì· ^· ¿gyæþöv Ã_Æ÷Ì5s-²à¾»Æµ8¨»¼?ßhFćç~]¶·pG2Ê„Šõã õ±1ú“ iiaÖ—`ª†©j +“é³_‘NUÿ?Õ!¿$endstream endobj 1751 0 obj << /Type /Page /Contents 1752 0 R /Resources 1750 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1759 0 R +/Parent 1758 0 R /Annots [ 1755 0 R 1757 0 R ] >> endobj 1755 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [442.7768 658.9634 511.2325 671.023] +/Rect [442.7768 519.0086 511.2325 531.0682] /Subtype /Link /A << /S /GoTo /D (query_address) >> >> endobj 1757 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [361.118 379.7056 409.8647 391.7652] +/Rect [361.118 239.5449 409.8647 251.6045] /Subtype /Link /A << /S /GoTo /D (configuration_file_elements) >> >> endobj @@ -7703,204 +7718,192 @@ endobj /D [1751 0 R /XYZ 56.6929 794.5015 null] >> endobj 502 0 obj << -/D [1751 0 R /XYZ 56.6929 718.5752 null] +/D [1751 0 R /XYZ 56.6929 578.6855 null] >> endobj 1754 0 obj << -/D [1751 0 R /XYZ 56.6929 694.0112 null] +/D [1751 0 R /XYZ 56.6929 554.0828 null] >> endobj 506 0 obj << -/D [1751 0 R /XYZ 56.6929 463.2277 null] +/D [1751 0 R /XYZ 56.6929 323.1321 null] >> endobj 1756 0 obj << -/D [1751 0 R /XYZ 56.6929 436.1931 null] ->> endobj -510 0 obj << -/D [1751 0 R /XYZ 56.6929 121.1271 null] ->> endobj -1758 0 obj << -/D [1751 0 R /XYZ 56.6929 96.5632 null] +/D [1751 0 R /XYZ 56.6929 296.0587 null] >> endobj 1750 0 obj << -/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R >> +/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F62 1361 0 R /F41 1218 0 R >> +/XObject << /Im2 1350 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1762 0 obj << -/Length 3462 +1761 0 obj << +/Length 3222 /Filter /FlateDecode >> stream -xÚ¥]“Û¶ñý~ŽU7±ø" NŸl×I/“8îùÒ<¤y $èÄš"‘òYùõÝÅ. RGéšéxÎ\,–Àb±ß”¼ðOÞÚ4º0·ya’TÈôv¹½·O0÷Ýdšy š©Þ>Þüõ[ßI‘©ìöq=XË&ÂZyû¸úuöî o>>¾¸›«T̲änžfbööþÃß SÐãÝO ¾½ÿîç‡7w¹™=ÞÿôÐï¿}ÿðþû÷wsiS ï+^á ßÞÿðž ï Þüø㛇»ß ¿¿yÿÏ2<¯òûͯ¿‰Û ûû‘覷Ï0‰, -u»½1©NR£uÀÔ7Ÿnþ ÌúW§ägR›¤Êd·s Îmf¦¥,‘‚Ôæ¹I.S¥¬ä””Jy[~W_×û;igóº}šwÕ îüì2“°»(n‡¼`#RMð¡|È,Kò P#F 7Uw7×…žµ»¾j„Õ,â][»Þýínn23«úñt¹\º]ïV<jV<ýÔ´þdaf
C !%IJÝîʾZTuÕ ï¤”3З\[àË‹n K¬ÌœS&Eš*Ï5ó -gÂÖ2ÑB¡l‚”ÿÓ öMYGŸI%·‰MÁ*è…Û¯ÛŽT²¤GWm«ºÜÓ`}h–$' Uü ØGòBƒYM²"O¬Í³ëº4¤º¬K‘êÒ)ÏÕÈe®s©&X8W#mµ óðÉõ¨Æ
ÀTµ=lià¹òi -·<ì»ê‹›/ë -˜ë^ÜgZ$¹‚œç* ‘j‚‡q 0I.ŠbÌD´ÃÓ%A /
b Ã*ØiÙ¸öÐY5 ‚ˆê¶ý|ر¹‘ -Ì_£'X;{ë–å¡s´8ED„rhž†ÜÑ4¼ÑTÒ京ö„XTýðTr¶'¹§ÄÊ;q#3X!í86PLÁàà™X¡”µ$‡h%hü¹ªÛűw ¬ªuÞËg_Êú–Xªß¸‰LMZ ^Xd,‘Iå=ÏÕ "¦*ø혯JKŽ÷Ú”_xw4nÄ,x¼rK’kÙù´Å¢PÒ¨L§cQ é‚ŽõÖG¤â'á^´öTC¹¡‹W²¾!ÕekTþ¦–»‹v®¬«òë›Gª‰ÝGv®sØþlw²"˜9 ¢™ì5žgf˜¨Ë -9T¼q#éÆrx„!+\î«]ßî;B
Ò è5_àê‚T:* výªjNó™ë—à2È8ùò[;·bm Ÿ GK.ª'öþi¢õ¹sM{xB{6†R -c¡V,äYC‚¹S™âNÍVe_ä5 ž\þ)Ú–@Î踑I ò -S>SÃœ7KO¯Æ `Î ü‚”„Ç—œýòRT'ª™ûº«ˆ€Æ;¶‚2èôt³bA§½$%53oŽ0þáág"¸·/{÷t¤ ê+˜¥á0 -fïÊ öèP¡P(½>É—"Cdä¤
ÈéŠxò©7 ¨óÝn‰š•L†«E°mê#AϬFž®ÚÓ?ðV§[ñ 2={RØøÂfù@ôÒgw|f>ÙÅÚAðj_(O²¢!ÅÔQ[›NRÈù6EfˆÒj¾íôCÓUO
5Ë¥O1žÜžD-¾’¯»þ :qL—T«|wÕóq¤…šÐѼt”ë&ºŠ -zø"ÌbÅ¿ÜTpÕëÂR%¿Ñ v»vσm•ƒˆø}è rá¼°¬8¹*\jÙ~$nú8¥›»¶«úŠ -AMÂÇ¥áˆtÒ›!Ôo xFþÑ-à€*Gsö9Cê˜Ãö¼TKhX%!Ì}C˜’†Áë ŠJIÄbYTíêÀeåž©˜Ñ[ž +Ú»ÀnM –o5îJt57#ûvÔ.Ñaš/Ül -é.åÈsH+nª©%sQ\ç RM°pÞÔ’)¤P# 8¨œ¬LÜ̵—Õ®ßø gO´Q€> -+Ùì#éÌ—ª=tulžúFÇS"‰ðs{¨WžÊ"Þ0æ&«|Á«dgAñ¤¥ iéJ1‘Wr7¥ÁO - -‘ÃnÂÐ A·IžÚ³f >ŽÜLnCx΋¡süÉÇxÛ,¸·…S§áíLÐx`Ïð΃+»¶)5¿³f€OÅ ¼ vZzJB¯ÊÉ`‡å‹4«Ì<
[r»É§ô‹€tÐ ËOÍ°<¥ÌPÊÒöa .m„VÖÎ|6…„ô)>§61"„ÿ¦ÈÜ +xÚ¥]sÛ6òÝ¿BoGÏT,¾‚sOIÎ鹓¦=ǽ>ôú@QÍ Eª"Çýõ·‹ R¦ävn2ÀXì÷.Å þñ…ÉR& µÈ •fŒg‹j{Å°öÝ÷8Ë€´ c½½¿úö½ÌEZh¡÷›Ñ^&eÆðÅýú×äÝ?ßütsw½Ktz½Ì4KÞÞ~üÍôx÷ãÇ÷·ßý|÷æ:WÉýí iúîæýÍÝÍÇw7×Kn2ï ¿Ã™Þß~¸!è»»7?üðæîú·ûï¯nîã]Æ÷åLâE~¿úõ7¶Xõ¿¿b©,L¶x‚KyQˆÅöJe2Í””a¦¹útõ¯¸áhÕ½:Ç?•™4J/–€Ì„”ó\f)Ë€kË\ñTåFD. >Ç倅\þc¢±ýémᆩQ&_Œ·|qpÄš9YŒNæ̤FN¾´Ào™'Ûòk½=liÐ ¶+»'¸ÛÐ3èCx·û/s[>#`’Çò‹_îv¶%¨êÚê°ß_s“Øvhž¯9ç (ƒdÙ‘ˆµÝ”‡f ]êkž8Ž|û^(s™*-
\ oph›z[vM¨“ƒ¸@™…ÇL_(“—XÎy*µ)^ëë‚XžØeõ¹¯ÿ°/+²´È3}ùèˆ5söD°’¥E¦‹éáÄU0¥£haPn»C;ìD OG¦ÇµÛnÿLð6ˆBv›ùÕCoQ|œ :Šõ¬ì€Rìô /¼” è¨Q’%wÂð¥â`•Zƒ[“ ÿ™Q] ×àÀå0Æ’O#Úïlß ö•§öªM?s6[Àz*´ÎŽ|”¢H6]ÓtOuû€Cº=Ô]ÛÓZoÚ•0ZšÂ‘àóþæ_$‹è;Pöƒƒ+ Ó ¶îŒ°KéÏ(é%:Ķ›Î¿¸¦åº ì¾-027^=ã%ñZ E–‘åÏJw_Âô>ˆ¿lOÌ0 Ü›Ïý`·gÍJsð¸y¡/›Õë¼YE,$ zYݸ[/›îa9kbš§¹aÅe2"Ö Ó:Í5LM¹¬QŒ…ôÊ€°Hâܪï;Ø¿_/•VI=L—˪²»Á
GíÚ/?´$Ï°‚âu +^\foÄz…Š—»Qr•qL;
K~y´žòÉg8èlG +žj•Sã)w;g ˆÀeCyȆ +$îûš6uìhrå÷ý Á e¬eò±È„4¡ó«_½Ý5v {9#ù‹q@åÄÁ_‰c¬óXÎ(,”'}ýÅ.«¦â^ÖbY‘æ*Ä‹$D¬¦@¥9+Š)s);? +iœ²Ãr3”í=a‘UûKRÓuŸ»~’ÄñI¾ç½™oB¡ì +vû3'6¶ïÑ®FgŸáÆX]/?ùÂ÷e
,…ÈJ¯=°ò´J/š¨Ûãí|fÁ@sò“ªss¨;hÓXÑA…›)>êCQ‡îØ_y,ûw‡¡ñnÜnp›
D‹i…õËu,l×ÝÓùr +Òþ´ + ˜ +«éùþ ~r)d~ñðˆôòô‰Fg&eyÆ'ÇS{W™qÓ¥ˆmr\p©"øÞ8®» æ\Š€ïÍ„f/Ìœ6{aÊ]“¾\:ÉãœKA‹4XWhOG}P fQœ8’ØÄ×—m"Y—CIÓ)xú’Oбú,Î÷.4$§:°ä²3Ìsuv|5f
+í²A¾e`ð¶lÑUÏt]|û^ñ—,ÃÉcO_Ÿâ×€—nÃu»»-a{%ãA´vkøôäÕÈáÕ{Úàþþƒ?ê(דÉà‚kû㪿½ôÙ>?y:½s5Ó%c±]ìå©.ŠLM=µ²é& ™ ̆B¨ b §¤X®B ýÐöõCK
rî’‹»÷¢kf_ÉË]þÝ7&J"ŽÕ®£êèx¦ÚÐÅ´O ª•Lè$З[,ŽÑã“ÑÃ^«üê¿r¶¶[•þþ°Ûu{?ØvQ9Lø.ƒô\Ñ'Cí÷FpU¸Õò.ü0ÀHz¶#¸ëúz¨©ø“Ä|Ü+ ‚"Ž;3Äøá-OH?º Pµ¨N>ap³×ÁoÕÑ4ì’ÒÌmK3%
ƒ×Á)* qK¡z×*kûD4‹ÞòD!£½3lÛ6”Z¹öâ®D—Ñ„ÝÉw®à0G
ß` +Š¶9³2†ø·¦¹º³ãp{Á9™=Oeí?Ú€ŠD +ò8çÀýO endobj -1761 0 obj << +1760 0 obj << /Type /Page -/Contents 1762 0 R -/Resources 1760 0 R +/Contents 1761 0 R +/Resources 1759 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1759 0 R +/Parent 1758 0 R /Annots [ 1764 0 R ] >> endobj 1764 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [375.4723 694.0819 432.5882 706.1416] +/Rect [375.4723 564.3095 432.5882 576.3691] /Subtype /Link /A << /S /GoTo /D (journal) >> >> endobj +1762 0 obj << +/D [1760 0 R /XYZ 85.0394 794.5015 null] +>> endobj +510 0 obj << +/D [1760 0 R /XYZ 85.0394 692.8552 null] +>> endobj 1763 0 obj << -/D [1761 0 R /XYZ 85.0394 794.5015 null] +/D [1760 0 R /XYZ 85.0394 670.2188 null] >> endobj 514 0 obj << -/D [1761 0 R /XYZ 85.0394 225.0247 null] +/D [1760 0 R /XYZ 85.0394 102.3833 null] >> endobj 1765 0 obj << -/D [1761 0 R /XYZ 85.0394 198.6174 null] +/D [1760 0 R /XYZ 85.0394 77.0969 null] >> endobj -1760 0 obj << +1759 0 obj << /Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R /F48 1238 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1768 0 obj << -/Length 2558 +/Length 2691 /Filter /FlateDecode >> stream -xÚ]sÛ8î=¿B÷¦ÌT*¿%MŸ²mÚëÎmz—æžv÷A±iGSYJ%¹ifçþû)K¶’n§N*A -e³& ÜB÷C{Oí䬆Cw–šÍôÆñpWÝ•_,AÛ¶ñPùP>žsÎãô$ÊúPfŒH³ü‰p3Æ»)ÕÓo¤BµûÔí‡jÕ?òTjòâBŒT RÌ‚ž,R“±#1®Ê :ËGçuð( Ž3 -M¸cgðÀ -æB·üo¡:D}H =¡oKˆ¶Ÿ÷e
7RAqNÅ[¢ ‘«»¶ígQÒ§q±g”Ü]uÄaº~$Ô†ín²ZøŠÐ º!Œã·P -÷ «‹‚Ǭ’àù”½íf!InœqéŒ0¥'®
™±ZAJ¤©UŠ
aÞÓ½7ÍŒKÉãLÏÀkŒ¿’ÃÓÇ£TÊd—CÐw.ï÷ƒú®üd½te³°8§ÂžÖ—kª–é‹ëLÍ+Àugû~!V² ¢‹‚Ø_0ý·Z$‘Ïz·c˜L9žzwšg‡]]þ*‡ÕÝI^ç"•P³ÿ<GŽßsÈÈà™Î3O’gi&Ѹz0£ -Ë;ãÐ{ÜæðkÐåqØßÛUUÖ48”Z‰Îx|Y‚aÜøRRC
QÓZº'8aëà9ÈÚoUö}µm¬ÆoðP6+›’¯d&•(ç·êªm’ÆnK|A¯À ùBŒÞbFtIãÀ’·e –¹J\¸ª¿êußöµ8ጠ-Ì -í0>7ûŽò˜ï^šÐ =†JrâÆ¡"È;ôq÷|ë)†Sfž…/k߶~™ýZbéò‚¢„âól %©–RÌCb •ÿ唆 -©À—ª™êœ½Ì_-Ùä êùR¨WK.ÿ1š—ܼ¢DNú Iw¤ÉÓb‚Ä—³>I·4öI‚ºM@ ^€`À}ýs€ˆw»qø°iCKØRã÷žå–`©g‹MÌîÊþ-Z§øØŠ,Y‹|@© [%c‰B)
Êw4M"`¿®ì½J "ˆ‚*zˆÀ© Gå•ÎÅ ¦5t÷¸»÷}XSyÞ›‡·Œÿ¨m ¾õm7éH:9ͱ埿¨7 .êïÝ©S üç×vŸº…Ò -Íój2ýû™G.½ß -ØDæBü\ÈïP^«g;9Á¿·7ÀG•ÄøPÎñqÃ@=³ÜÊ8ðŒ›H@%¤ùÏhå€'ËDqcRƳü§µrq2å|ÚÊ9t¥ìŸI ÏFrJ9{ÙH‹ñb^ ›£Z8—<¶áfe”UñÛ´?¥7œžÖ9 - ÿ°ÛðÙ¬ŠÝî†9W‘ÀB÷ö¿¶P‚æpœ„õz8 ù
õ¹ÝôÛAo-Ë/Õ p®uD]r$mç ¹Œf©€žê´‡u¿Q4Ç×Pp1¾Îa{ÅѽiªÛúÐt=y° ©“ùésí1Oä£]ùb„›¡N¤É5ôv°äÀþäÑx¤y^†#NÞäôkŽñž¢¬êj´NpÒš<gÛµ§ƒvc_¯§teוÍvrn@z"kJ*)•bQp þIô²ðÍ-ÏÅöÉòTåÀ$H…ÊÔéo àN÷–„ÿ?™äŠÀendstream +xÚ]sÛ6òÝ¿‚÷tôLÄà‹$8yrS'çÎÕé¹¾§¶´IœP¤"Rv|ûï·‹(P¢”Îä&ãX,»‹ý„xÄà Ò,É +QDy¡’”ñ4šo®X´‚µWÜáÌ<Ò,Äúáñêí™GERd"‹ —-0yô¸ø-Α\¿ÿtÿáîã¿ n®s?Þ}º¿ž‰”Å îþyK£7?ÿ|óp=ã:åñûÜüòxû@K™£ñÃÝý)ès†èÃí‡Û‡Ûû÷·×<þtuû8ÈÊË™DA¾\ýö‹ öOW,‘…N£˜°„…ˆ6W*•Iª¤ôúê׫
ƒU»uJ*ÕI*TͤJ4œ?ežäœRžI&… ´,ø”–=jy^›²©šÕ¬jz³{.ëc¹9œÌ3®£ø Ö"àË"áJò1못žI-â š9¨Y^s /ͼ¯žMýJÀö©kkÓ_óØÀ ç,‹Ù!šy®Ú}XœóøÍõLñ4î׆6u@ÝìhüÒîë
iã¦}vhæë¶"Øõ*Îñ®@Åœ'Eš +Ë6atíÞæ¸7- tÞÚï¢#àÒÎÚ
͈ Ì˹ àë;º5ž§‰Pª +¸šÂHºk
Î;çŠÎ pH–f v>ßäëìLº>xb€uÁ=òhcYÎÍO„Låée ¬ &ÆžÈ ¯h=æ‚÷D‘ ôÐyÙШ÷ˆé_ÚÝg „ µÂ>Îe7!$Ö"wž6„ÓôÆS}’ݤԖ}›´dB¥ùØ ·âEf
¿èVø=… =X°·o^äÞ¾Ãíhßø%ûÆQ`ß]gßHíW¬}ã +Ó̦ •²·LÉcqðe9Þ4©¨ +9w4'uݾxJO£';ÎZ£/¥Î&€ÀíTÊð¸#Á®å
…$[ £T×·[ÑICõâëPn +{eïK–gÿV<ñ„—’Šå³A/…ìžkþò#Ä: ô,»ëA\,
»‹ýG¦‹o01`MpqÜd9;bã¾Üै ÌáÜ$¸òä°ëvµ²Âôùú½H¡¿>^‘x¢‚Ïdzã”–®J`‡* ( y>Ž
¾˜ÍHÎ||gAÞ†‰ÏÛh:n‡ÍÛðuy;e£¼ÆyhÛ¼m‹\gl½+‹Ù›q™ *vlÙOŽ Rì‰=‚ZÒ¢H#Uð$Ë@ƿЄ£¿1
yn² ‡ø“-–¥çiÑ>´ÜÐï“šyî ZBm›B‘˜ààìp¹y"r-"•ëDI¥É+H3Åé@n”B9+ø ៼Nè,)òBE@/h¬ñèèK„`QHB +ÆVÖƒ,àíÝFD?¶ Q +åÏBÊV¨läWBB;¯d¤O¤¢bâ¾µœŽ_¯4GnRm¶µÙ˜Æ6ƒÐÐ×=ÑÀ¨8¹y• ¤ …ºý¾ë‚2"ƒ–åð +ƒÁ}‹á˜ ~ChxW£·æpǘ1pX¯9ŒÃN^ªÖpnyEÅ)O €åbáÞ® ¶–œ!Ñc° iB¸—u…z Ïå~GÌ5.oƒ^}˜±ïÜó+ôqãämë Á˜#á*ÚþÝÈ|-±jyCQBñq <ÑÆ)a–AÿÓ +
µQ?l—³·úÝ”NþÆ¡o…š\ý“Î[ž½£‰DJvôßwîÍ~êDZ<-#Bö}Ã΃DKs—ŽéÎ6š +È*KdJ¥ l¿¦ebæëÜø‡ÀÄ ‚`Ϩ¢7\ +(*˨¤á˜M@ôlZV}c§;Û‡=•£}ÐyøãÓ‘Lµ)½Á·®ã‚²føu#¼Í¡Û^¾¨-ó&êüîÔ¨û¹dÚöS·PT¡zÞs¿YäÔ©2Mð×ωnž
ÝÒwÿÈzøZåTkO> lÅ4qL¡¸¹:}a‰€:q‚õÿ)æÈ÷endstream endobj 1767 0 obj << /Type /Page /Contents 1768 0 R /Resources 1766 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1759 0 R -/Annots [ 1772 0 R ] ->> endobj -1772 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [213.6732 61.5153 286.8984 73.5749] -/Subtype /Link -/A << /S /GoTo /D (rrset_ordering) >> +/Parent 1758 0 R >> endobj 1769 0 obj << /D [1767 0 R /XYZ 56.6929 794.5015 null] >> endobj 518 0 obj << -/D [1767 0 R /XYZ 56.6929 525.3716 null] +/D [1767 0 R /XYZ 56.6929 390.3986 null] >> endobj 1770 0 obj << -/D [1767 0 R /XYZ 56.6929 500.6989 null] ->> endobj -522 0 obj << -/D [1767 0 R /XYZ 56.6929 129.7873 null] ->> endobj -1771 0 obj << -/D [1767 0 R /XYZ 56.6929 107.5853 null] +/D [1767 0 R /XYZ 56.6929 360.9106 null] >> endobj 1766 0 obj << -/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F62 1361 0 R /F41 1218 0 R /F63 1364 0 R >> +/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F62 1361 0 R /F41 1218 0 R >> /XObject << /Im2 1350 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1775 0 obj << -/Length 2731 +1773 0 obj << +/Length 2947 /Filter /FlateDecode >> stream -xÚÅ]sÛ6òÝ¿BoGÏD ñE‚“§4g'î´NëºÓ‡¶´D[œH¤#Òq2™ûï·‹]P EÉž&77 Àb±X,ö‹³þÄÌš8Q¹že¹ŽM"Ìl±9Ifw0÷öD0ÎÜ#ÍC¬ ®O^ž«l–Çy*ÓÙõm@ËƉµbv½ü3zóîõ/×gW§si’(Oç&M¢ ..ÿM#95oÞ_ž_¼ýýêõi¦£ë‹÷—4|uv~vuvùæìt.¬°^2… Î/~:#èíÕëŸ~}uú÷õ'g×ýYÂóŠDáA>žüùw2[±<Ib•[3{„N‹<—³Í‰6*6Z)?²>ùíäמ`0ë–NÉÏ(+³ J9%@“Ç©’Ê °há@™ˆŠûûí©°Qs¿Š®|£iÔŠŽæ«Ö
eÑC[Õw¼¦þÂÀré—m[2½¦¦¶[•¬›E±&°.=QF¢ËÛ’ÚzÁkº†‰•íÄVp[ -.è]óX~ -§raže8„ê-Ìæ¡õô»¶\ß’Êè¨%Ú M:Zr•I4Њ¨ü|¿®U7ÁNªc
¨Çmˆ°:ÎDi–ÇY¯í[ŸgOq ’ÜžÂfq.A,=ÚA"QK¬É¿ “=Å'˜”à D†Z 2yȆ@TŠÆ“þXu+º«¦.é²0ŠÀî±! \;åB ÖÔ¹#‡ˆÖc‹J ù“<®ª“Þ_¸á•¤2ºø…´HK¡‡JøjðŸ -" -yŠ\‹ïà1˜â<$9å14ØÑÄìv>ìÖ2«Õê;2é)>Ådfb™«0yH%u ø9 œwc·Ô–Îú!ä¬ lý XŠÈ©!t0˜Ãv±* èzéDÇiÊP¿îŠªn»Q Ö6/¸ h!
Sƒ Êí ê®âÈ® †®Å¸m êåd ÷Þ% D ¥å Dp2 -W0;ˆ¼*é¦tA -Ž·wA3.Eû1ݳ]À
%Çðàì¢bÑ=`Ö fUÕ¦êªO%uw–D$œØá0sNžÎ@>BŒä#) >´ýÚ†Zpbàçý6××Sq=]¾Ì}‚vßÔ-¸\ÚMói4Ò/º)諸¦,B’šæC¢.7SÑÅ'ôù’ô Û‚÷Ð†Ä ™ oÍ1'Q Ö;ÒØ–pãNt6¼Ë’µQGì 8ó„¤l/@…ÇI¬3¨',n’Ç´vfrX -qÏ·3Oq ’œJ$ÀèIGv$‘HbmóïÈ#|ŠE®u–Ù!‹‡Ó£¥eqc¸èîhÊ‚uR=+¶7Œc{,S ¾:Ýpv#Cæ‚pÈçô¤áÀ“m'„žEÛVwµKöS²±Ð,á”Õbp°^îÂ_˜p¤VSËbüŠaŠâ¢Ò¦ª«ÍÃfjÏŠ ã›÷»7S©w¡ ˜r*C0á+.ðÖ¬åÇÀm³†ìÝQT6ƒ»Øܯ±>¦¥¢ -b¡w¨\Vß×9eå¸vD¨¶¶¡^¿Ê9™p³Q!
‰íá¬ç”â„ÁÁÖ>º+»)Óž Åš› ìÆ¥—\ï•ò -jXÃUq u§|@a Í -ë«Læu à`®Ï]Ç*oèqŠƒ“
ɺ@ÃxhÆ÷áˆ:ÏjÆBù‰—ÏÄEì¤eò±´Ìàï –ÆÕ50cy¿»æÝ}²4bÆ Ò´¡õá.=caæ,̉ӌß2ĺ7ˆÕ–Àe5¨ccÑ4xÁX^
%öò\‡Žld=ûªÇ<M’è«cJª8Ço!Ö^¾$”‹sj<àª7‚N°:æ×^¿;»$è¶Úú=o+ð¤Ê!Çn%½ ¡}
ø@^ >DˆŠäBT=ä9|7¯Žlªò«áÚ
ýg¿¥ª‘«yfÇEí³Xè¸|3ÜIŒåûв cñ‚‰ly@ŽújêÆF‡Û á˜Xaëÿ½àÄ?œ<,89œ8.¸#‡{®àä!Á ¹”ÿ“ƩÂSO N>CpêàÄs°õ3ôó~“àb=:«Ëé~K~€,]Ñõ¶íÈ3 ñ¯÷ù7þ'ÄëO1©†49Jd&¾½A<Ÿ†V» ^S‡œ Bw®Š'ÅmS7 ï¦\Ÿ*ƒ9Š t~ÿ%@rÖq>CC-ôm" »DÙ¹ÄÃAû -mtáj_)¦²¨6ÕºØÒ +ZÏœ0=JX‚éQ,u.–èºt FüÏ ÒHÇyü™¹¸ -b}\F9_ÀAŸ² >²9”\A2éåˆ ûEAtT|rá
R†£¸Ô¨ò ¡hq$ˆ6°Æ¯Y géŽbCí.ó‚NÎçñ¿&°ª¿{+ù ·rÉ/4# -ƒ3GnƒÁí$}–#TÐ ¨b²” ï&ǹ¯ ‡K¦•õ˜§ðûøM_ŒÝvåò Æs©‰3£ôSQÓ84:bM¾ Ež6‘™úí21þ`fâ«!üó®ßü»œÝ–𳟵òÀ÷Ç$3Ÿgž)ä<3cÎû ðì³þ_@÷endstream +xÚÅ]sÛ6òÝ¿BoGÏD4>Ipò”&NêNë´Žoî¡í-Q6'©T O§ÿýv± +àÜb|<'<º†ÿEt>ÖÐTܲÆc#ž<û2ã1SY& '€íU÷"°g1{WÃ…fÁ<Ýy@Ø^)År‘Æ,Ux¼‰MÆ¥eøú® K%2ÄPjw§®ÞÖëúöÁá…4•‚ó¸G¬·]YW`’©‰Ê–ƪîÜÄf».6EÕK7á0Ýû +OÔ!ÑÑŪ ±Z¸=Ö™ 1 ÒL ²“¯üXß(! +´‚.Q`)[¿ÕÊÇx3ý²+ ®£ÔK$žbýé¤7FVIBä"ý@ú ó!ŽØlãžHO=å% I¢|²Õ‡ÈC'!w‡,úÐÁIˆ±èU3Å›b]ß»¸”òòÏxw\É«)$&OYâ(£lA®‡þ ’àÔ¤38¦ és² È1Œ1GrŒžâ<$y˜dHð—:Iõþdds“w‹»&){ß‘IOñ)&UÁøÉ#ªäi ÷¯–¤2ÉÆù¦Îi¬ìH‰àp*šÙÔÞ-àW»-%ÚóÂÆyò¼î¢¤z%ðø¨~$Ø¢@r:™!¸Ç'¸˜ˆ´@{YÛwµšäAÔ•” +ŒƒƒRÉSa×ãÏÃ
q÷€î0ð&¼¼âаYl¸°4w é >hQ,):ÏÁfIõ–€5hvM‰²|T] Nf}¡ò¸ãà²÷0›]ëéwm±^‘É(Ô˜ÒC·‡ž\¦Â¦{‚añm».e7ÁN¢b¨ûnaPHkxÂdêÅϳ§8I >OnÒ8 – í¨h%FgßÉžâL +Œ)ZqÈä1 b ô5þ¹bâNºª«‚”…YNt÷5«1Á›Rˆˆè=4Š +ݾהܘªí&lý îð +n‚ +.f¿]CÁ±ÉkÒ!.¹$E§C²6ÑÐ> ê±>,QYõX!TŸxùL˜Ó^Z:KKžñ¾àqÒ¼º¢ÇXÖŸ®Üé¾Xš@ÑciÙ‹ÐøŒp_ž9afN˜Ê¿etˆUïˆÀe9èccÓ4xÁØ^
%vö^ñá Cï¹ÿ‹bÂXô—eJÈ8ß X;;#”‹÷4Zy àºÞZÁN(Éï½þñü’ UÙø3W¥ð¦Ê#ÇÏ +[zBû+à9x}ü!*’ QÕçðݼ~äØД_§ä~êïѺF¶ç™>.j/˜Å:ÇÀàÛáI|,ß]ëdóWŽHã&Äè[Nilt¹½ ë1lõ¿ ÿ/'Ž NŒÇ Ü#—{®àÄ1Á=¢”ÿ“ÅÉã‚“O N<Cpò˜àøs°Õ3ìó˜¾Hp±ÝUå´m(§Ë»Þ·=ò Gü«Cþõ€ÿ#?ù’:Æß`MtçYÿ+§ÿ lÿÃl¯#ŽôùYâÌRÏÞ6ÕcÎ5ÔpÚˆt‚õˆ^§—endstream endobj -1774 0 obj << +1772 0 obj << /Type /Page -/Contents 1775 0 R -/Resources 1773 0 R +/Contents 1773 0 R +/Resources 1771 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1759 0 R -/Annots [ 1777 0 R ] +/Parent 1758 0 R +/Annots [ 1776 0 R 1777 0 R ] +>> endobj +1776 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [242.0197 604.364 315.2448 616.4237] +/Subtype /Link +/A << /S /GoTo /D (rrset_ordering) >> >> endobj 1777 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [238.0484 687.9287 311.8142 699.9884] +/Rect [238.0484 525.4389 311.8142 537.4985] /Subtype /Link /A << /S /GoTo /D (topology) >> >> endobj -1776 0 obj << -/D [1774 0 R /XYZ 85.0394 794.5015 null] +1774 0 obj << +/D [1772 0 R /XYZ 85.0394 794.5015 null] >> endobj -1773 0 obj << -/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F41 1218 0 R >> +522 0 obj << +/D [1772 0 R /XYZ 85.0394 674.157 null] +>> endobj +1775 0 obj << +/D [1772 0 R /XYZ 85.0394 651.0501 null] +>> endobj +1771 0 obj << +/Font << /F37 1026 0 R /F22 961 0 R /F62 1361 0 R /F63 1364 0 R /F21 938 0 R /F41 1218 0 R >> +/XObject << /Im2 1350 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1780 0 obj << -/Length 3032 +/Length 2656 /Filter /FlateDecode >> stream -xÚÅZÝsÛ6÷_¡É“|S!ø$ˆæÉMìœ;sçèææ&Í-Ñ6§©ŠT ÷æþ÷[`);izs“‰ác±»Øýaw!6£ðÍTBÃÍLIej¶ÚœÐÙ Œ½=a~Î"LZij~Xž¼¼zfˆIx2[ÞF´RBӔ͖ëó„pr -èüõ»«‹Ë·ÿ¸>;Õr¾¼|wuºàŠÎ/.:ÇÖÛ볟>»>]°T±ùë¿žýmy~C‰§ñÃåÕì1øq„èõùÅùõùÕëóÓË OΗ,±¼Œ -+Èo' >ÒÙÄþñ„aR5{€/”0cøls"• J -zÊ“÷'ïF£né¤þ%\$|BœM)P’.:²„0 z¡D»nò¥|·[绢º³B) ‘¢³—ÄH& ‘Þç¬IÔ|³/Ûb[æö[2ß²tž¯j÷¹npJ†½ñŒv¿«ò5ŽdžbV5ùε8¶É ±ãÆ“Ù7ùí¾Ä¾¶Æ¾Õ)›×Õ/”ò»}¼e{ŸãDÏOæõ_„{Pƒœ1b”âNðm™ ãR -Ͷ®š LLÐt¾„1Ôg|4L0ÂU’}Kv·ƒCXÔVÿÊW”(
çˆs›6kóM^µ¸å6ßmŠ¶AFVüY[ÔÎprÂgÇe§{ÖnÝhÊ”*ÀI¹ÑA%è‘îüÀz2üˆ ¾
éÄ}½’¿Ïýü¬ljlµÓzK5¸‡TAõ®-‹¦Pš„BÇξ;t`Á"88š§Ò)u®„ƒ»»6®#ßëæ/âè{ƒíGt- ïó•?Bè‰bÄ“ÑĤF x¡@7ë9NFÔ,'TH°C“H8R˜%¸vƒgÕ”êB–×hg«1ã°S’¦z¨CR©Ó/CÌ¥é4.ÁELq t -ôÊÂm>¬Ê¬ip#%âw óu³b…1&ˆVcЕG}«Æ:Š‹˜¤SÙ€9Ç©¹UY˜f™¬²M>¥2S¨ô’|DÕ|h ·ù„Ø€l,áÁN¤ÔôHÓäO”:P|NjcÀܵü©ûÉC©4eÀóëz“Õȱ)# êϼ£øŒà‚J’PF‚¿˜’Üð:3”¼¿='¤ç„[?°a:Ž°hOÜAÅ.t ×Pf^Õö3õ¾âº -¸Ô}Óúsa½4_=©¿Ùí‚u~›Á½ã—4“è•‚7êp@gWÿš††ÄÈ ArÈ\ê™3`ÑÀÒ6ïörƒGy31oéÞ´ ’w—ÚS¼%OóæŒ3Úô
¦HY2 c†ì†ëÖ¡g×~ èø çrŠqš‚¡@Ø‹Lýe‚m ’‰àCŽ ¤ŠfM fÒü -mæ¯#‹^‚ -=¼Ž–·2¿ËJl~ÊÊ}Þôn‚¹4 -J<o“pjÓ…W>Zý~ZÔf‰U¤`_ë ™MõA¬ÿÇVFl(îé p Z¾V âfj¡@]”³#÷+SDÚ[ŠBr’øS±æóî˱B…–† -½ ä’Fù€d‡ù -÷µ@æ½aÛBY¶oòPt{Œk_X”qu;íÂ*, 9mëìh™/éêx^I¶i•d)µ÷™/äÝgŸ<©>¤ ‡ ^h¶CNˆiIl]rbZÑ<~4û[Ë šÙ¡‘áŠg\uš•Ù£Gß›g÷‰KÎU¸ÎJ ¸Ö -KÐ’O9íkÆ”$šu‰uT]·ûëÜ3æÌÕ6šývk‘Ñ&Øãb ‹+§?äë€l¶,´aÆ$²3ûôa’ÄÌo,{؆ÜÒ±I¸ÅÈe. -O'L¬_áã‰ñï#fnÃ-K³ ‹€MGÁ—¶Øäc\0sûè“åQ¾t¸Ã"’}Øiˆ6+üD_†† êƒÇ¼Ÿ Œm -BÈ©z" Tæ@*F}”PTû6opkwÙVëƒy“}.6ûMTŠ{Š 7"°ÃÒi~"»ÇËŽ³ ”M#(Ä8?[ušþ ŸD[L|Kwfá½×NÚ@ZÜÆ/ 2@"´Þ\½þÛ b±îžTÕü6+JŸúú—ר%Ñ×ýp<V„H ¤+S8Û©·öÁ[ÐGoô] ŽÇ?Þd¾#¸‚͇@ E(˜·£«S^Tõí~ƒW4aeVM²EŽ‚e„¥‰z¤¢YO€T˜å•}^TNÒ)¨b\ -úƒr`¥z®²zLÕ ¦Ž•¤a=”‰rŒâ¬WÎ
IÒî‰Ñi4„ôÂÜ.Åê]^#6bó¾Þïz`<|ÿ€ÅÖZþçPúüLÏóÏ« !Fϵחόµ³_eûû +xÚÅ]sÛ¸ñÝ¿‚“'ºsBðIÉ“/g§¾¹sZÅN'—Z¢mÎQ¢"Rqt™þ÷.° +Ñ9{–&Á‡S@8Ÿ7…“Ä»íD¾gÒ_q0'ÉÉ?ï ëT¼ÚUmÙ¹(§!µ}.Éq6„hwÛµUø\®½ràëæÁžùæ¼Ó*ßãÄC³kŠÛ]…sÖ‚Sí©×¿QÊïvá–Îñ©Ø‘U8‡h‹Y„ú‰SÙTùÂ.nw–Òa€)§ØV?ãu5®ýðP˜`¼Oø
ÚíaVùO_Q¢RˆÛ´y[¬ÐÁ–›b»*É!‹Žÿ¼-U„åž • 0ÎÀº)Q@Ìg$ã: Šý.µn BÀÛO8× ‰Ñø}áàóª©qÔNË-K!”KåeáMñPhB +#™ý0N6O¶Š,à‚7„}ü¸½‹p0ò„~.°yÂpû¼†Ž÷à.ñ\l„–(hÒàm2-4 d, Ôc” `3”<R!Au"‡ îl=%ú„PÀå$ÚéjH8ì”dY)€åIš>%uã@\–M'n3pbD¤QÈÊÒTõÛCß‹ ÅàœHª¼5•.0, c8蔌 ºiÌÇšWÎé™jª†Âú°¨ò¦Á”7JäÃÌmÔA…cLT +"yÔ¾E[òmÚ¬r¼!`ŠŒ%Ø=$ׇ[ç ¹æÅ{Çß8—S„Ó Jt$ê/dKàLx²h!U4oZP“æw3ŽŒ÷T¤SÕ1¬ªŠ»Ü¥ïŸójWtNz;A\–% ×I©îÒ+—¾:pZT" ¦.ãO±]!3’Bê=´Þÿn•'„ö}†£à: +¸ÜWˆ¿é™šIP åÕ‘ +rä|›¯—ØàøŽóS¡Ø»l¾;?E»‚ ©W 7…‘TÆÇ¥ ²ó<õR—)”/ô{PúÇ¥®+IÔ·….4¤D,ŦÀb¿¨ÊÅÿLè® +s»ôÀõn½œáèÆà ÅØ6.]]èzj¦èµ6̃JÓ’âJ⇲½ U’ÆçÃoRØåÌ9™x]<0%éÆ׫<ÎÛ)RõjSÚ²R€Q›´`U˜Ø%lù½vóvWqy]¶¥‚Žë]ŽM¸¼ï‚ˆ®E“«¼]ÜOu—º`i\ +êz P‡çÑþÑÁ>æpzžšöšß7¾ÿ ‹%šˆ’Ï$–ðLÃzö ®åiV#¸©µû<›®ký5 fXÖ^Ô®ëç:篎´ó oap{/AGÏ' C%ÄÄÔ@]^áÓ8vt†ÌÁÌè…iúG ~óÁ^è_O¶0{(´f×ù›$ìØ%ƒ $M4Æëþþ`‘ïšÂwÝöaó«o&ipu`y4£³£}¾¤kä9!™¡’ÁÔbW×\/äþê¢Ï)§Ã5ea>o‹p‚MH"Ù(Ç4¬9"r|4»[Cu@Æq¤Ì÷Ž!IÎe|ÔØÊ«‡|ß ›ÄÇ ï7bœmqùÆsК>ãÓ }èá8ò@É#»s‡ù²„˜ÖW°v$¡Õ¸»æ9ØlŠÜÒÒû æº<œ+%Ï!œ`:rž QíÈãÂ&UY4äØí!S’)ŸÔƒ’ ŠläÑ„; bB‡Kö+F.¹¿¦Ã¤tàÚ:݃\ÀÚ@1i2‰¾í*8Q‚{Ýî‚Å×ð—Çת€2¿4Ò&…Çâ!ú1B¥Öa‚±å´—€xy¹âÑO5ð,y¼³ endobj 1779 0 obj << /Type /Page /Contents 1780 0 R /Resources 1778 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1759 0 R +/Parent 1758 0 R /Annots [ 1782 0 R ] >> endobj 1782 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [325.3322 706.9749 398.9856 719.0345] +/Rect [325.3322 530.3947 398.9856 542.4544] /Subtype /Link /A << /S /GoTo /D (the_sortlist_statement) >> >> endobj @@ -7908,616 +7911,618 @@ endobj /D [1779 0 R /XYZ 56.6929 794.5015 null] >> endobj 526 0 obj << -/D [1779 0 R /XYZ 56.6929 769.5949 null] +/D [1779 0 R /XYZ 56.6929 600.9849 null] >> endobj 1304 0 obj << -/D [1779 0 R /XYZ 56.6929 749.9737 null] +/D [1779 0 R /XYZ 56.6929 573.3935 null] >> endobj 1783 0 obj << -/D [1779 0 R /XYZ 56.6929 624.285 null] +/D [1779 0 R /XYZ 56.6929 447.7048 null] >> endobj 1784 0 obj << -/D [1779 0 R /XYZ 56.6929 612.3298 null] ->> endobj -530 0 obj << -/D [1779 0 R /XYZ 56.6929 226.7842 null] ->> endobj -1785 0 obj << -/D [1779 0 R /XYZ 56.6929 202.1811 null] +/D [1779 0 R /XYZ 56.6929 435.7497 null] >> endobj 1778 0 obj << -/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F53 1313 0 R /F41 1218 0 R /F62 1361 0 R /F63 1364 0 R >> +/Font << /F37 1026 0 R /F41 1218 0 R /F22 961 0 R /F21 938 0 R /F53 1313 0 R /F62 1361 0 R /F63 1364 0 R >> /XObject << /Im2 1350 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1788 0 obj << -/Length 3344 +1787 0 obj << +/Length 3112 /Filter /FlateDecode >> stream -xÚ½]sã6î=¿Âo§ÌTZ~Jâcº›í¥×f{IÚ™›¶²Í$ºµ%¯%%M}‚”%YöÞLgn3³A -'&|¼ùáš ïî®~üñêîò÷‡ï/® ú½ ÷Ë™Ä|¹øõw¶Xö¿¿`‰4¹^¼B‡%ܱØ^(-¤ ˜ÍÅýÅ¿û£nêœþ”Î-Tºˆ˜gi>¯e–0
Z‹3Å)TÖkYð9-*Ôò¶ø#^«g·ífºg®t"•ÈÃ…Ø÷T3üÅ€?× GùX€{Û6¨ø4jŸ- S¹í¶ØÑQ[n=ú±Þðú\®žGstÔØý‹
ãåfCÛ0™çѺ¬Šýa~cšíê¦lËK ½Xèr(ªæÕî0)òèV -™æ:zµö3¡YFàºxk¬¯¸Œ®ûRl:ë§?Òì?“¹&ì¶x#`Ut§,ÜFôKg÷¥õì[?ÃͶm·¯¨· TõËG4ý«› ¾¡¹KK+â&Ùxw(‰”y´©›!CmK£&*«Öî·v]¥‘»»Æ +¸ó¦ÃCÚÂcoï©-ª5
<¹í#ê -þ½»"˜¶°ò‡×ÐO"p€¢lêM×–u5Þ 9” ise8ÚéíöW(Í4ÜÕT¿gCªÓ÷¬§r÷¬¬â}]ƒR¦wL˜Dr¸=gY÷T3¼GwLªDÅÇÌ èä(E¸Y&ªºí’® %¶¤¢º% -ºT
µÏEK3s Tþ¥+ XÓ¨¿¦p´c*Û´y͈k>áZÉÒ_B¡À×L/a±ZÙ]k×xc9 ÛeƒË Ò©þÝG•õÅÒ$×™-ãB‚HF*Õ‰É²Ô g@ :•<ѹÌþ—¸ sæòù¸ -ü=ŠÁ]à ^pñâŒ;ÃÔµÉÌyoÖS¡ -›ò)†€U®Ëö-vî zGç.(Ës±28öljFŽÑY‚¸YjôXû]•¿1&\ìËBBeïHçÝ -™1ò‚ö½)·%EèÛº«|öK >‹V›zõ™Àæ³}½4":©#²•¡9q“-¹·•“YÀÄÂŒÄr?¤Ð
¨d³Y=Ö )‹ -_qllÑ´ ×X(œaÁÀnC éZ3¬WL(!òèþÓa>Ÿú$Tøa¥PQNAqÞ=˲ñõòu -óf_4pâË/-ܲE{€XÚª}ßiCòRì˺k<ÎÕ/éÊ^‚Û'£…˜~²4•™HrÆÓó¥éêt2×S…côW:®êµ=.QÓ4‘¹LÏ‹ÐSÍÈ0ò7ËT™±.‘{DEð“ñ¡‹àƒŒ`wþ@@òÒ¤šPK8k?Ýþ)Så®8‡ëNÒ½ æKWTmXÞç{@€Êð¹\ÊÅs3‰’Î÷á)Ró'Ýv€^Ëöy4TÙW ‡ü×õ.9çQB˜¯T©ÃcP¥.½ãlÖg‰‘";U¨öf$Y_¨ž1£Õ3 -TS3 -ŽuÆ–ò4·ž—£§šd´gu]>–ã`IB»cð}îò\;רޚ -ãaÛÛú…ñ)4§£€fTÁÃ0¾"R|æø&¿²¡ R÷~‘¦…ØL¨ç‚'xÚÜE–䊉¯˜û€êŒ¹ªþÁØ>‚ }Ž1qø†Ž¿×Ì¡ u»;¦
È£¢< 4xϳ[è©fö0*Ê
”R‰ñ&À$± ‚ çkë†:B·ä47„p ð .Ð?|º/rXÚ½
³³¥}.^J—¢I¹S†–ö1x{º1€/¨ñŽTÒ÷˜/ ¦ -û7O¥|Æt”M°‚zïÉúïŽÑ~Ȩí'Cb^”g˜ - -ñô¬¸õ@ ?VSë”áh¨ß8q8÷*ØžbgbzÒÞ^ .ä´¤·¥óN± -…j<{? ·eSlwsÇÞ×C¾LcÇÚUEm…Â)ÔPõ¤Â¿«¸’
ütá=Ø$šCIoqýkKCƒÅn׫p¦–:Q9O*S7=2! -hP^ÿÈ
=oyè<ÁøXL\þ é[_ Ř°!W*µN25ÍBÑ*Ÿ_ZûÙy»9±Tšdæ‡; F—‰P©I”ʃ¢4óO3ý¾û#?æ”'uÐñQ ›pÊðKLȹ`&p£nTL6z2²Cà’Ëó}@t:®"wÁ×Uwë ¤² §° -(y®Îò™¿})ü2”¸û [°ðú@± Û–”‹Bÿú~šGèç?°ì ñ>>:ÇÄÀ3 ènÄ%`Hñæ¿Fø'+hǾ|Èñ0¾m€§+VŸÁáò¨¡¾Ïomù‚oØôã …/O“7¿_Ðz×%¡M±{ƒÍN8U`!„A“èçA¿îÚ¦\["ó©)þº +xÚ½ZKsã6¾ûWèHW… <€<:3žYgOÖönÕV’-Á6k$R#Rö8¿~è_¢ä¤¦jíA n4>ô‹â ÿ|‘©„É<]˜<Mãj±Üœ±Å#Œ}:ãD¢xHõãÝÙ»Ò,ò$×B/î ke Ë2¾¸[ý½ÿÇůw—7ç±P,ÒÉy¬4‹~¼ºþ€=9>Þ¾þxõéß7ç&î®>_c÷ÍåÇË›Ëë÷—ç1χù‚V82áãÕÏ—ØútsñË/7çÜýtvy×íe¸_ΤÛÈ׳ßþ`‹lû§3–È<S‹xa Ïs±Øœ¥J&*•2ô¬ÏnÏþÕ-8õSçô§d–¨L˜ +>§@•'Z +éèöÌuÂè€1Ýs‘Gûª¬ 6Ǧ@ï†Ã|
ÙÃ$¢xHuB–@ådY·ízʘ –¤©–§9wT3¬Å€5*I…ÑcÞ·¶màhSµOÖ5dTí7÷v‡õ>»¬«UƒmËb‰sDTàˆÛI˜°{‹”Õª\mYW +œt–6ICªã&©£ +š>n‘Rpú©ÈN³ï¨fø-¢"åc(xR:˜x=ô×*Ü5èÆ»—§rù4š303nœŽQ÷^EGhyVeUì^±ÇAs[7e[ÂÕ{¶!‚н!Š¥ðN1“‚ø&›@¦o2r˜ð¬+Ç4SÑ‹µ_°Ë13Øt Ák§\FØâ’Œ <Ìþ½q½›âËbßeá7 +¤_÷–|&ô¶4ƒ,×~Wáû-$; ªÿ|t™ÉÅÕÏ?àÜ{‹+Ž<;š '‰”Y´®›ÖµrÔhƒ½8šƒoìª4ãÈÍMãÕµÝΛ½;0G[Pïõ->½Sq~û®ëþÞ]`;D˜xxå!O$ð ++ÇÃ¥ý¾ôØáÀ3pP˜ÄøÚãÌ +âB©LA/¥ +Ìaôž¨&Ì‘Ìoù»3Â,_;p$Á~øò¹Açí¹¢þ}»×´›ÐA§f¢*gþpëæd&TÕ Bø¡`Äð&Œ“4o^<V`Èà£_¼†Uw/e·`;^j$,rħϊ]à‘ø]0F}जÙØ@æ<›ÏÞS“n2r×r.wçi’ Ú¬÷X>»:¾o;Û”:áØÁ¡ á<
Nàï¾»e •¤=B_ŸåÁ‹Ï~ˆs_Ÿ„_æ…¥^m±k¨8".s3†®¯3hÍú<¼/Á²P} FÃBŒq]eå"I*ôˆ®Ð#¨x$\ö¨,ÑPx“Þ×”%€Ðp§‹á…÷¤AŠå~‡ýU;e–N΂„‚ÓÌÍ¥ªÂºÜ”]m¢«*³Ëu½üB•‰/öÅUêè°HÃóD(ª.G£€ ÂréÒþA7 ’õ*õ.Õ,*(áXÛ¢i©¯±x`ÁÀnC¹Åï ]ºªŒÐqûù{z›ï($øa¥P N= 8„‡Ê˜ ¢(MaQ¨u‰߯ç·lÜž/µìW“bõs±+ë}(Dùî&ß(‚ÙGЂO?š™r<Á뽑™©Žs U8FºÒqU¯ìa†ª5ÙRŸ¡£š‘ado +†. ṧ b2>4|ÑAÛŸ? ¼8©Æ®{8kšn¿AÈTùë +†uK™NÀ¬›ÓrtT3‚Œö 9˜ÈÆrôHrŸècÆÅ.Oõš¾ath‚¶G“+ÃOƒ{?ÕÛ&" ßgw€+_ìò ?úºB£gìFPÊ +&ôØ™½T‚©ÓÁKC®#Ó¹ïÞ®°Ð•Ëèk G²T#ˆ+ÇŒSMœ+çé MDcœ†kå[b[ìŠÅX›‡z74¼ÂxØö¦~ÆE(„æxðeð0슈蟹+É/m`h‡TȽ[¤iÁ7cJ\Ü &Ç~¬#Uâ~a35Öݘïþ!Oÿ+'ˆç¥+–Ì'Æ®– ±rÊ‚1SÉ»_ü Šþ?¿õ5Dendstream endobj -1787 0 obj << +1786 0 obj << /Type /Page -/Contents 1788 0 R -/Resources 1786 0 R +/Contents 1787 0 R +/Resources 1785 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1759 0 R +/Parent 1758 0 R /Annots [ 1790 0 R ] >> endobj 1790 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [315.1789 519.5601 363.5077 531.6197] +/Rect [315.1789 349.0138 363.5077 361.0735] /Subtype /Link /A << /S /GoTo /D (dynamic_update) >> >> endobj +1788 0 obj << +/D [1786 0 R /XYZ 85.0394 794.5015 null] +>> endobj +530 0 obj << +/D [1786 0 R /XYZ 85.0394 769.5949 null] +>> endobj 1789 0 obj << -/D [1787 0 R /XYZ 85.0394 794.5015 null] +/D [1786 0 R /XYZ 85.0394 748.9943 null] >> endobj -1786 0 obj << -/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F48 1238 0 R /F62 1361 0 R /F41 1218 0 R >> +1785 0 obj << +/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R /F48 1238 0 R /F62 1361 0 R >> /XObject << /Im2 1350 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1793 0 obj << -/Length 3990 +/Length 3955 /Filter /FlateDecode >> stream -xÚ¥:k“Û¸‘ßçWÌGM•ÅŃ Àº««òzíSïž=¹ºT’”ˆ1¦H(y<ûë¯Ý€H‰šI*å) F£Ñè7(oü“·¦ÈŠR•·¶Ì3#¤¹]ooÄí#Ìý|#f–c¨ ïo~ø ím™•…*nï F¸\&œ“·÷õ_E¦²;À ï~ùôáãÏþüöÎæ‹û¿|º[*# >þ÷{jýüùíŸþôöóÝR:#ïþðö×û÷Ÿiª` ?~üô”ôséç÷ Þ~ÿéÝû»¿ßÿñæý}:Ëø¼Rh<Èo7ý»¸áؼ™.¹}‚ŽÈdYªÛíMntfrãH{óåæÂÑlX:Ë?)2¥ 5Ã@¥F t23ein)³B+ xèï–Z‹Å®j 6û;éýñqC+êõ õÿ&„ -Cþ©jÛ´ª:0xÛ¯¿Róa_=n}wðuÜdýÕ xEÕÕ?ôû‹5þé×à€ ˜
'^J™•Æ¨@~E„е<R§:ø=
ÀªŽZF*j¬ž~ÈpGŽ¸ƒˆ]–Û¢ ˆ»j Tؘ‰ZgVÛÀê©i[ÀkÍâX±ªðÊ«8z šî‘†ˆ ÐXó@CÍ~ ý&*ê~ßDØžaÍÖ÷ÇÇ Ï;À%MÕRÿ[Õ =H·v‰‚âDì<®.ã±&ÌízDoÊÅÊÓ1 d -¹øß»R-ª¶© >( -Üš©$¢‹œtD†ì" ä¢,¨õ7ac }P¡©=ƒo ÞWÝ##cª¡µb°¡iÁ ¶Ï4ZÕÿ8` ³ê £÷^[û‡*ˆ1v¶ԤmL +›³ˆ„A¢í9¢À&ÛÅ¡ï¨ÿì®Ds8 j_^“T6sÖY¾€sy<»üŽÆŠ“Oìýt}·< âq¤¡ãH“– ˆ
’)DÒ
O~¼U¸SYÂç7fÂć)¡'>L‰üÒ‡!ù° -T7“¾;p°¤ ¤‹y9õFQ±•Õ×îÆäYY -ûÊÕ -nÜžÅÁëX´[ ÷\‰ÓXÜÛBÐ[u¾?4²'L¬£>©54ªî™°º£&154O©«œèˆ´±2Š×Î Ílžê ¿¡)|óŽðÿºåòÃRö¶HAʽ†“9¨ËhÄuÉ7€ T3¨eHhÉ(AN–C\|_¬×~¼ -¶HCAC›P±¨-Ar¡…âJu~iÀšmQ0tðK¢.éU -u䨒X6“¢n:—LÿKAH©ä™ÔAì9 Ç»U|Ù
¤ašj_µ¬2Å_‚|.H™U_–ÅÔ`a!“9¶ë»hŠÅÉÝ“ÄÀ“CQi|¢|:]}ˆ“ -b惵 iºzî w;>ÐkLž©:L2ö7sw‹{@¸Ì”æB@XÛ V w‹c~ - -?ö -¿¥9ÎCÊ‘-…—¿"‰°ê‰J€¹,’áùøi.N -z鸂XA/-³² qÍÀÍ = T9„x!k€±çþH ªÄ¥‹Kí¢£ ‡x§ºªU;Áœž0¤¶g©O¬™êÂÑgR:Ïãc`~b’Æ’ªÇGùR-8•@q|C ËŒ×%•ž¹•ã͸×L
¾I¤ÒÄüL›Ö˜|«.D -8^uôë¿ïÚf ² èÅu†lŒ\Ë¥*ÀŸ¸ò,Ü{ÁJYFÓzòêà5Ö›äÈ££ Wbæ"A‹†ºxåÓ‚Ðõ80¦yTûî|ÓŸ3^Þ“A.·<{Á̵Փ-9ÐriïÐ9ÄѤ؎Õhó£r¿?ðꦢÿÄ´Ç:ŽG8C¥äÒCb¢otÊ5˜žìŠ§´øymzâáªîò¼óW -uíÓýÿÝÏÙ0hjóâc¼<¹Ñ9EÉÑÅ«×l¹Í -•\2Æ»¥âp§ žúK~ŠÂŸÔR/]vRdí :a]Ä0þ\fiuA <<Ïq¦ØΞ]ïÃo
s^£€Íæ'â6êè¿ý ö)>Èm¦SWJí¼–$L ĺK}æ¶/Iÿ Íìendstream +xÚ¥:Ûnãȱïþ +¿EVܾò˜ìÎl&Hf73Þ¼$y ĶÍ3©){¼_Ÿª®êIQr XÕÍbWuuÝ›òVÀŸ¼µi’ª¸Í +“X!íívw#n áÙO7’qÖi=ÆúÓýÍ÷ tv[$EªÒÛû‡ÑZy"ò\ÞÞWÿ\¥‰Jî`±úáçO >þôëçww™YÝüùÓÝZY±úðñ¯ï úéó»¿ýíÝ绵Ì\ýðçw¿Ü¿ÿLR^ãO ?ýH3ý\Xôóûï?¿ÿôÃû»ßÿåæý}ÜËx¿RhÜÈo7ÿü·¸`Û¹‰.r{û‘È¢P·»cubÖa¦¹ùró÷¸àè©uI~Ææ‰U&½]k“ä@YÊ2ɤ¤ÌIª•ŽRVrIÊ ¥¼«ÛõÁ= \ÿ´ êûŽÄ°+¿-N{ìáðzŽ&çrÓ©LR‘šÛ1sg[ˆX {P£=è4MlžeÓMÜ?¹ÞÁébÕ퇺k{l»v8ÜÉ|Õ541<1ZïÏîp·†³ÿC,ß®Un’•o-eRX«üÒ÷T>× *W]K¿~QÿéŸêö‘æKúù½k Bfõ/aÅ\ývt‡WÆ2«‡°Ü—Ÿß°}*ÛG׶dB‡1¡!¾¬WeݸŠàáP¶ýƒ;ô äZØÕ¯ýˆ•MóJ„p»¸71Ý‘-ŠÕsÙ ]O01Uä$#œá] +µòÓ–”ѨÕcÓm¼rI8#¯ry.‚ƒÓÑà +5#C T[›dF›©Î¡ 4$»ç¾z'·Ä–I“L3Ùù8¨Ì˜J‹Ä˜<Ê"Cþ¼Â¾ã‰ŸSÊ€lb"€+”2GœfŒ.•(Ò5àFÕl£ÉYÁ±:•yRhùF@ c]èË›xÕöëcµ_÷õïgÁ˜OòL×ÉG¬úcÁHe“Üj5eà‹CUWB±PVàg‡º÷6ã÷?~úBЯ?þBÀæø€Fùན +žt.=¯°‚!Ñ +0wìeC í³ì}îcòà +]¼‰lÛ—·±:Ú€]tS(éŠ&)k(V®ÝvG8rGþ&:# To<2Îb®PȯÎV_v¥—. °ÃˆTÛ/þ{XœO ÎwÈX`ì}'ÑZʛܷëûú™ÕçØ3àe
¿÷?ür'U±ºÅL‘%JÛëAl„t9†¤‘/F05RBÝwtD:§=_:…N'Ä)|éœs@
^ópÐ)JÅaL§(d« +áà5AóaÊŸ)dá‰Ñ©šžé$xaÞ3^J˜óà…H¼<:"ÇÁ ß eP:¯É;&äszŠ|Zþ® +UÈ ›ì… o ø<nü7vu¾.)Ûƒ8JHƒÎøÉ¡ÔZ_—mÄz‹‹³ÕN6Zb‚ÏGq +΃Æ.ÞÃÂŽRCþ•p`ÓØå7PÀÑì‡qï?€h Ž Y*ïóSŸ‡{ê"|ÒR‘H<¸i¥Kþ ÇG¼Õâ& ÏžîPâ 6·ÆRÌnÊ¥Ó«nîQp\“iäÀþ RÆŠ`Z|‘†‚¦ž|ÇB¢µxÍÕ•:üÒ‚7ÛñBÞÑÁ/©º¤û +÷¤10ÅìÀT0@šŸŸŽGŸÐ7^´šO Þ}¤ôHÓÑëx^H=P| k.x83uxÈ«·Ô'F.3§FHkkÿUOø( ç\zù6×mN†4ž ¯Á/¶„±ágM÷rº&¾ä‡JÐâÉÑßá$Þ…y$æî ó\Ïœ_bWÖ-§·3U=¶ä&ª¥oR@® ¥O¢„ +™åÅ°|žJ\<)“á +§6Ýåƒ 7 èý²%Ôz·ï|—Ü#¿.åÆRZˆGj! ›^Ê ÁÍ‹à¿.fªY–¨ ’¼ëŸ¼ž®|ñÊH|©[?¼®+×”¯ç—‹*±˜Æ5Òéœöä,eyÓcâŽ3ðž<~††’sž¥ãï—rìº /ÎÅG-—HYêG€¨Ÿ“òÆhŽ¯#ùêœÂ(L—ôƒ^Û7ÓŠ1C!?€Aì,ؤÈ̬)ˆõE¸.Á Ór6wú *¹ôí4~ܦ? endobj 1792 0 obj << /Type /Page /Contents 1793 0 R /Resources 1791 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1798 0 R -/Annots [ 1795 0 R 1797 0 R ] +/Parent 1796 0 R +/Annots [ 1795 0 R ] >> endobj 1795 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [324.9335 574.3224 381.8296 586.382] +/Rect [324.9335 395.6435 381.8296 407.7032] /Subtype /Link /A << /S /GoTo /D (zonefile_format) >> >> endobj -1797 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [55.6967 139.768 116.59 151.8277] -/Subtype /Link -/A << /S /GoTo /D (view_statement_grammar) >> ->> endobj 1794 0 obj << /D [1792 0 R /XYZ 56.6929 794.5015 null] >> endobj -534 0 obj << -/D [1792 0 R /XYZ 56.6929 208.8923 null] ->> endobj -1796 0 obj << -/D [1792 0 R /XYZ 56.6929 185.7817 null] ->> endobj 1791 0 obj << -/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F41 1218 0 R /F11 1451 0 R >> +/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R /F11 1451 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1803 0 obj << -/Length 2494 +1800 0 obj << +/Length 3069 /Filter /FlateDecode >> stream -xÚZ]sÛ¸}÷¯Ð[噟ühŸ¼±j§QRÙíìtw h‰Ž9‘IHÅu}/p¤!Òšv2‚—÷à -ß>^0ë³pN ßë§û‹ oE<KIñhvÿèÅJM6»ßþ:ÿð׫/÷7ëËWt ‘Ë…Šèü§åê-)>>|^Ý.?þc}uËùýòó -Íë›Û›õÍêÃÍå‚%ŠAn#œèp»üÛ
¶>®¯>}ºZ_þ~ÿóÅÍ}ËÅç˨ÐDþ¸øõw:ÛíŸ/(i¢f/ðB KS>{¾J%…p–ÝÅÝÅßÛ€ÞWÓ54J$D%<L çÞ2 -mÍb•’Hpa&p[ÔÙÃ.¯‘ÖþpÉ’yµÉëº(¿¢zÄgó”cãc~(òš¼!O U°.1‡øJ°ðb[§…ï…ce¡Åv^z¬OUÝ”Ùs>fà$˜vNàÞ$ Ix*È÷†{uC0o3×ùá{~°í§ê¸Ûêv<7Ó™ï«Cƒß¾6ìCOå+6Í4û1 Ó o¥?3<aDÆQ -¬ü9!E¹E÷ ˜oYß—¢y² ¯{»7ë ‘D¶Ìc$Uʲÿå>™AS(ú‡Kè«æ›]V×À‚’”Ã~ nÓ~¾ D1‰x[/‚!Z·¢ù6ÌŽ»¦F{SÙ§ž/ý¹[mÖÓé}VóçlóT”ž¯Iðž‹ëݧ¶f†dnBd"ÝÌp3ÆÇêX꥖ñüA¯£LìúákÞ¸!ýF…¿ = å¦)ªR¤©Í-è°?Ï™Iýr<ì«:Ç &7ÀX 7Oh±{Í…}ê)Ñ ‹m^6Å£ôòT¸^GS¡}:a _qï ÷øj0ᙕ¯›¬nðçEÃÑaµÇ¦9f»Ý«ó¯_`lF=àõµ: °ÕÊÆ‚§ÑünŸo`ˆÚ/.[<áj㧬Êü/쉉µ²Ð¾®™µ© TÒ¨Ÿ×ÿµ‹#°cĸÚù^§Õ®õÒ£³9#\Û·’§Ñ ‡o½ø}Ñ£„‹Tõ€‰™Äóå5>ghåN·Ü%¹Ktêå¥ÿe“ßq¦Á”ác… ;/êÒ¤ðo”rgÑ{hu·¼¶û,(žŒ1><çÕÁE6‹Î”V¨Þš[Åe)3KÍR»ÔÚpBqµ„*æ’qyMînÖÿ¼YRP)¥‘êÉ|Bn%œíiìôî}*«ÃRY ë$ŸÊFÊê÷8´!mmEHÁébV„´Å‰Îv§L£¾¶í¦ Õž4é7+Mºiôž><1ê}ub¤_Z12í³#ôoÅH¿¢éV'F2š£Zö·%(K|Z‘$ì~úF‘LŸ¡öh›a™Ú}¦Ý(cÅÇGÉ$S{véD44Ðò–§mÚîvØe“ ëe‚ PF°þÖÒÑC%TT)“.‡M&¤r®Ck]vl¥€ƒ9«ÑjXmÒG¬6Ù "|ÄšNÝKŠÙí¶„ 9’©@ƒiX|œ$Ô÷"u›¨íÆ…äŒ(Ö æN–@@ÎA:dÒîÊP<ظ”A"‘\`8}gaP´Å°%)…»Ï±Ø5‹¢ÄÃëæyß¼bó_€[€!½á” ±’&ÞÊ,âB(12K 伮̢€é¡®ßrŒ®]þc¢«^‰»ÏWhÏJlu‡O{Tæ¹µ -6¸Š
„úèÓqSd°Y¹^i&d;f°o*<T…Ùi¦¢„¦Þ2õ>Ûä¶ÎCs<”ø}õËõçOW˾á×z_•5vHKH?f§V‚J ‰ûìЛEˆÆqË ls|w¡ þvƒvÕ¹¶á 4Ç ¿ô8€Ãce»dÛ qÝ~ÃY~F‡õí4Ãy–XôÖ&Y*¬
s -Ò -bCí>Û¾¢!ÿwQëK¦n›¥Ð±ì;TÅwÛQO<æ©“ŽG” -kù‚¶]h‘ ÍçÓÞB¶9Ôx‡L a¶Þõ§ÔδPw ±±$šÜùâ3ï -ú^ææ' W¹@3^,=êß( ‡Ã …*$’ñ8jëõ6øSZ–Q²\-®®¯×äjýå2åó«SÔE’Âe•OP÷½NSo½&©¢vÔßÀ©÷`MÂßO?f$† þ}Ïk„¾óš¦?†êÑ Â†éû°,>¾$¦rŠ¾ç5BßyMÓ CõèaÃô}XŒ³è ¸n$TLÐ÷¼Fè;¯iúc¨ ý!l˜¾ Wô³èC¶D*š¢ïyÐw^ÓôÇP=úCØ0} –Ó³èóÔüëƒ §ï{¦ßzMÒ Eíè¿
ÒïÁÂ%ï,ú ƒ[\2Eßó¡ï¼¦é¡zô‡°aú>,Ü[Ï¢ éŸ)äÄ?ú^#ô×4ý1Tþ6L߇åâ<úRÑ)úž×}ç5M Õ£?„
Ó÷a¹<>‰Q4Aßó¡ï¼¦é¡zô‡°aú>,WçчŠñ)úž×}ç5M Õ£?„
Ó÷aùyU \¶‰L’ ú¾×iú×$ýQÔŽþØ ý ,?¯êc± RcÓ÷¼Fè;¯iúc¨ ý!l˜¾ËÏ«ú˜RDÂ}i‚¾ç5BßyMÓ CõèaÃô}X~^ÕÇDL$‹’ úž×}ç5M Õ£?„
Ó÷aÅyU ƒ"Y¤|Š¾ç5BßyMÓ CõèaÃô}Xq^ÕÇ(#"JÒ úž×}ç5M Õ£?„
Ó÷a! KßÏ?DH9Aßs:ÍÞ9M’ ƒì¸1ƒÔ}Ì÷ÿÆ)"¦~áé|N3¶>“„Gð:¾À ]Á÷þ_5ˆ ÿ?økïüŸÿ?œ÷»`LDrêWA#’ð4vƒÒ\ât8òö?ν ú²Mj¿endstream +xÚZmsã¶þî_¡o•gN,^ùÒ|rξT™žîj«´I>Ð"mqB“ŠHÙq}w± +š{»r" „tã |¹P± ‰c§µ)Ó¦Á +*ìxg¹q]DJX•ï:ôñû
…ó´z%…Dz¾OKa ©Ý$\¤qGrÄ4 àÙáÒ6Tif +’hžŽùÌbÇÖ!àßú…¨rÄy°,Y§›Õd¡ª[*¤»]ùJ¶h*AÖRô`ÑD TóåÉ^ë ò¼ìzÐUnX EÖRV4é}ÙÙL áD”QØ' cfR†ñü`BX)ËHPè&I*=¿Ïöe"æF ÂxOò-ì _Ò#ë/®L|ŽjxÀŽgIG~%£Yþ c¢*ªG’§}ó?ve±)Zª¹~š8$§¶åB„:ˆâD÷§g‚ 9O µ u856Ûî wçô¦,ào‚7TÆ +BÑÎÀ!263‚BG×XA¢ÇoëZiÚÓ’jÝ’a¥Kr l¢Èôs#Øu„´ F2œßíòMñðŠ9r>1
D4X +k˜h2¤12ìS¹e9i6ÕÛ@mÁ$à.㶙4n"? …Zc~«’é(ôµNGa§…¾n!·t{³†tIÈÏ&
;¥Ã½=ù¶HÔÀ2a ]0µÖ‰»(IJ‹B ö^BE!ìÇE!Í4ûcžŠÂ˜9„‰]zçЩ0„ù–a?ÑÈxB~
ÑkÙß#ßÐWŸÎ§ áL¾;ð`È5…H ºÈkHŽÇ´ùÒ•Å_Ó5¢kÖp¢l¶Eåéґ竸ޡwýÑ6“ ùV¬úDóPÃm¦TEæ@ʱ( óÖ¹„¸M>AãáP™t²Äî-è°ÛO©ÙX9ìwµIf”ehÚôJÅ.I\دÉ\ òˆªî ©ËKiœ‘{îEðãÑÞÍvT56á iá&mZªÐ¼ 9“YÔØ´8¢_~ó¾ö€*ä\{*u´ Õ9zƒ½%b¡{œÆA~ûnìÀÓ™…õyÒØDL±÷ý_ØNEQÀáhœf;_ë4ÛuZ^’
.Šì-å!;ÅbÚ|§5b¿Oz n³õ Góå5}['èèËŽîâÝŸõòÊoÙäÅ3Í4ˆRú¬ha¡tçº4[SS'ÁZÝ-¯m „È“sŽìƒ9|½w#›E +ª·æ–qyB/
<±K‚Œ‹ª¹ÛŒËëàîæöŸ7·cW¸l&a?çÁOå<2ÐIwˆËâp'Ó›7ù·±lxdY rMsÀŽ$„ÒŽ„°…¦‹[B‰#!šíN• 21ÃÝL[Ã÷HMX³Ô„EÃ×ðMéã‘Q¯Õ‘V:22Ûï‘ŒH¿##¬aéHF*<CF¶ì‡%0Ktš‘D?{ÃH¦Ï{PFYaä²ÉÈó2ÒbÚKÁa3ÅÞ+äÐIG¢cŽ&°oEÒmÛ²¤.›ôÐœHd +²oç´ËÍQFN ÆœZz@~ÕÁ|=ˬÇM×v|y…ÛO I §Ylw2Åie´@fõ\GpxÂÚð×æul·¥eSS÷¢Ú”‡,ïÐQ¡ Ú(ä˯Ï!•ÌÆ´. ±‘ +kùB–-äÆö‹§ÓÝA² 2¼½ùÝÌf»þ”Úy€ñ¾‹ZîÇÑÔÎn~< +ß°&{÷µÌÅ@/qb,½±èg 8‡÷%IH¨¢i«Ö[³£¿X÷Ìr,W‹«ëëÛàêö+¾ï_„Ž?ÌHœîiM@wZç¡OYõ ÍŽC÷ÍšD|3| Ø ŠÕ4zOé4x§tû”É#ô¡ÍQä¾M ½x¤%!«›FîiM@wZç±OYõÀÍŽ£÷ÍW¼ ¾† jÌäøžÖ|§u þ”UþÐì8|ß,ÜÍß ÿRDœÝ÷žÖ|§u þ”UþÐì8|߬`ïƒú2 +Ã3ð= øNë<ü)« ü¡Ùqø¾Y¸Ý½ >êÌqçkMÀwZçáOYõàÍŽÃ÷Í +ñ.ø± BØ9Óè=¥ÓàÒYìS&Ї6G‘û6…|ðPgÿ¨s¶Õ9‹zÂÞôÀà(fÏ Pï‚,ñˆå[øßÞ+þç¿@<ΞŠÇ'ž¶% ƒX$‘s +áDÉÐóîOߺþ_,ÉF–endstream endobj -1802 0 obj << +1799 0 obj << /Type /Page -/Contents 1803 0 R -/Resources 1801 0 R +/Contents 1800 0 R +/Resources 1798 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1798 0 R +/Parent 1796 0 R +/Annots [ 1803 0 R ] >> endobj -1804 0 obj << -/D [1802 0 R /XYZ 85.0394 794.5015 null] +1803 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [84.0431 671.8392 144.9365 683.8988] +/Subtype /Link +/A << /S /GoTo /D (view_statement_grammar) >> +>> endobj +1801 0 obj << +/D [1799 0 R /XYZ 85.0394 794.5015 null] +>> endobj +534 0 obj << +/D [1799 0 R /XYZ 85.0394 740.6547 null] +>> endobj +1802 0 obj << +/D [1799 0 R /XYZ 85.0394 717.7278 null] >> endobj 538 0 obj << -/D [1802 0 R /XYZ 85.0394 576.499 null] +/D [1799 0 R /XYZ 85.0394 401.004 null] >> endobj -1805 0 obj << -/D [1802 0 R /XYZ 85.0394 548.9529 null] +1804 0 obj << +/D [1799 0 R /XYZ 85.0394 372.9762 null] >> endobj -1801 0 obj << +1798 0 obj << /Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F41 1218 0 R /F14 964 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1808 0 obj << -/Length 2487 +/Length 2192 /Filter /FlateDecode >> stream -xÚ½ZßsÛ¸~÷_Á¹—R3‚ ¶ONl§¾é9©ãN .÷ÀPT̉TDÊ®ï¯ï D‘N3Óñ$v¿‹Ý%PøcŒIœò4HÒˆHÊdo/hð
Æ>\0+³tBK_êÝÃÅÛ‘)Ic ko-E¨R,xXý Æ„“¬@Ã÷ ïnn?üëþr‘DáÃíǻŒKÞÜþã[ î/ûíò~±dJ²ðýß/?=\ßãPl×xw{w…=)~œYôþúæúþúîýõâ‡_/® :,>^F…òýâ÷?h°Ø¿^P"R%ƒgx „¥)¶‘DFB¸žÍÅç‹v z£fêÌRDDþ–eJbÁEÇ2‹<–ƒ1 pRšå/”%ÇPX) øË(uB§J9÷”*FdšÊ¡R.Ã8%·wËË««{ryÿi‘òðò,ç#§s>æIM wR³è§”öè•Ž£÷•r¢ý¿ =„S•Ì ÷¤&Ð;©YôSJ{ôÇJÇÑûJ¥D2 @½ž -I¥ä¢5AÈ°¬ ‹}Ùš•D ®Íœz‹ƒõ®-ëªÁ¡r€²£º{^`¬ª±sÕ›½Î<pæAo³+òò ¥Üé64¢ì°4 -K#@T†zÿ¬žú©ØïËÕFŒu¸ \Þ{ð°)›Öv¯ñÓ³žŒo°ýR °‘gÕ@ :ÈYÝö+`+k- m†dÕ¬ë=6ŠÿdÛݦø«Fóö&bÃã”8òvŒ~mmYv—¨5¦4ü…üò7\ap6–#KÜj -ÒØMýÍ„‡Ã‚…MY}Ã'¡eV+”2N û¬úVØv®wÄŒ®°Ã9˽yI¯©y¬+“mP&[i/Ieø˜=Ye8 -”ñÚjOéx{»åÁU
€“[wé-l Å~pKÔ¸ h‡‹N’H,ø ÌF'*Üè™i¸ËöEÕb/챎IáÓ‚CŠBwUáz]xnÒþ¨ðÏ…ÉÜ…ëÂH™@¼à:¨ã`¶Ù`Ã%>róqàPŠ=6ÏœñÎR%ý¹ -ƒ({Á§! --¨Oq …7 åR*4,º… ëd Ñ©I%6j!÷‰Ø.mÄ¡Ü´K TŸæ=‹4hß® <— ]ÕG°zk[µÛI}Nሆ•ë0UÀ‚Á‘ß4CùUQì ÑeÕŽ}Qtöù¾ Å)á*UŽ~îhê õ»¾eÿ^ÿçÇJWÅ„©a™J£ñb r>ƒ“¾ä±€ã'½ûù¦¥“Ò;„uFÂc†`MÅPûëžhï¤FÔû§—qF¢êöþϺ>\ëœ)ÒðÙäݲ™¶ÎkvÜ8‘naªÆ¶Þrý‰‰ãÁ‡*XtÏç—þP^›O;h¨nX×ÖMS€è¯Àƒ ~2בBhJÓ¡‡W] XÚÚÓ«xßt¹¨:ÊJzý¿Ø ˆO·ì!–ËP¼¬Nó“ÝoÎ)I¹à3NáIM8…“ê"¯«V—Ç^’J±dZ}'5¢è’¨X õwN¡C:…Ž7Î ÓmYƒnËšŠ:¯Ðm¯lPŒŽ¼B¯è‡z¯Ðƒëê¥ýQÌ‹:LjàBæ #Šøtô3Žñ…Ã×ÿýOŽÀEelÚ|©óŽÐIõŽ`0/uÜÞ'Þ)"e’NÛÐI1ðý§€(8°âºê¯cî5¸£eŽ-·Q³$dŒw/®Ú\g‡MÛ³oû3¿*DœdØí9²=© ²Ô™«Þ Ù1$À¦mè¤FŒ’͈J ó ¬¸êˆúJ°*ŸÊÕÁ”ðÜÝñYÏ/_èóø5¯ *»Œ÷ö€u7q3W¸Ap}ƒ‡#—x|Äë8LøŠ¥Ó2¡„'ò(þß/ÀömÁ€r×ÝÞËmþÑô/…DD¨´ß3èß @:cj±dnÙ—«U©_+dÖ¿>y‹ê_dù£¾ÖÞ¡ -‚°&$óJTI}Mí–QYÎ.§sXÎ\ c][65ŠäàÛ +xÚ½š]oÛ8†ïó+„¹Y¨Y~ˆ¹{•6N׃´›z¯fæBµåF€-¹–læ×ï¡HJ´,“1 +,‚ÀùŠ/ŸÃOK&†?ñ¥’Ê(“ â˜ðh¹½ÁÑw(ûtCŒfjESWõaqóþže‘D2¥i´X;u „… Ñbõ{œ"Š&PŽ?~~¸ŸúÏãí$KâÅüóÃdJ9ŽïçÿšéÔ§ÇÛß~»}œL‰à$þøÏÛ/‹Ù£.JM æw:Gê •>Îîg³‡³ÉŸ‹_of‹ŽÅå%˜) 7¿ÿ‰£`ÿzƒ“‚G/p‘’FÛ›„3ÄÆlÎææëÍ¿» +ÒöÖ±øuš)K +S °*å?0Ɇ¨ÔGÜêÎLèÜ”RÇTĥ䧦”#’Q4˜ÞÞÝ=¢ÛÇ/IãÛ‹!O¢‚‡à •Þª‚ð>Ó ~h:ïšÒô:xJ‘d"ï¨<ðV„÷™öðCÓqx×”f×ÁcX6$ Á;*¼Uá}¦=üÐt Þ5¥â*øTÀ˜$xWu¾S…ས ü™é(ü‰)•×Á§2#xGå·ª ¼Ï´‡ šŽÃ»¦ _ŸHÄa» À;*¼Uá}¦=üÐt Þ5eä:xÐSÌBðŽÊoUAxŸi?4 ‡wMI +“^^AO(<
À÷"»Ñ=Ž=ùÀq ÜqÄo&æíÑPú‰ Ñeb+ +û ;â¡ã(±ëH`o{33Ø4°²;"³™=Ž=óÀqœÙq¤ é|;7‡E1ô]Áy¸(Èíq칎ãÜŽ#EøªYÍ™DIš…¹£ò[UÝgÚ³MÇá]S‚1Ⱘ÷µ7€‚žg¹£òÀª‚ð™öšŽÀ5%„Á +‰HPBÓ@\Õå(tªP¼¦]ÎLG£pbŠÑÏýÍ¿¤áˆ¥)™ˆ9*OĬ*1Ÿi ±¡éxÄ\SòÿˆX’¡ŒÑPÄ •'bVŒ˜Ï´ØÐt<b®©@ ÐÚlZ~ú¶ÀW-&x(ŽÊ« +FÀgÚG`h: ×ôÝ+Ú·‘ˆY€ÜQyÈ*Hî3íɇ¦ã䮩@³+Ø GRIì®ê2{§ +±{M;ö3ÓQöSy {– ó&Àî¨<ìVd÷™öìCÓqv×ôö:vØ¥ÌBìŽÊÃnUAvŸiÏ>4 gwM?\d¦4A§i4%‚ež¬Ì¶»ÃëdJ ÿª«¢QÉ$Î÷"âBç7ÅáÛ˜«ü %‡'“ñ\/:µ)ž‹© Z鼺ژêóÝN'áÞº¿µ1ºµ.ZnòÆdÍ NÜ•ò_iE1ÒbÞµX‘b@$HróÀØ4ñ¸¬žŠ}yhkbi¼nï©·º°Þ ʺjtQ¹Ö™@Ù…²û¸@YUëÌUß<ȵ̓Û<ÈmvŲücj½Û0jaÂÈLa /TÿŸú¹ØïËÕ€Qw£®†c‡.6es0Ùkýé´®Ú¾Óé×ú¨Ë¼:Ñê‹Î@Ǭ>ô5èT~
j†26ëz¯ÅóínSü]Ѽ¿OÈétÊL†ÃTw¢iÌ´
ïTۦǿ _þ¡«8™ Ó±:æ*25¨ÒíN¸8NHÜ”Õw}¥1”fµÒªvXBÆ>¯¾&½T}Ò–®t† .ïT÷e½SóT 7F“o´&_©q"yü”?3] +)"w&ýÜäTË +ÇW#]ca–^xÅÛ>¹>Í2D³ÔyÓDÆ~/cDªôÁB¯„Ãø@(IÕ«í¾Ö3ëNtîíÎ\B JõjÛ1ÿªŽ‡kµa2¿´›J™Ö´iµ©™òvü¨”Þ§uZõ¶úÔ»2$ôçR»ŠÊùúùÖ-ZÖí§)lwO•0£Z%ÛÓ‡ú 8<µß"˜DÖµÓÉ[uÇÀÒ =ï»n#ª[’ªÿoæͧRf~@ÊnŽprY¡Ë_àú…ÏH—ànøé 9O?2ÄÄ¥ßlÀ,C‰€JL£ÚÇø¬å°ÑÀžŽ4ýU„oendstream endobj 1807 0 obj << /Type /Page /Contents 1808 0 R /Resources 1806 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1798 0 R +/Parent 1796 0 R >> endobj 1809 0 obj << /D [1807 0 R /XYZ 56.6929 794.5015 null] >> endobj -542 0 obj << -/D [1807 0 R /XYZ 56.6929 118.0298 null] ->> endobj -1281 0 obj << -/D [1807 0 R /XYZ 56.6929 92.838 null] ->> endobj 1806 0 obj << /Font << /F37 1026 0 R /F14 964 0 R /F22 961 0 R /F41 1218 0 R /F62 1361 0 R /F21 938 0 R >> /XObject << /Im2 1350 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1812 0 obj << -/Length 3902 +/Length 3381 /Filter /FlateDecode >> stream -xÚZIwã6¾ûWè6ò{- v’/'§ãN<¯»“q;“C’%A6'”¨ˆ”må×O -à"Qvgºíƒ°£P¨å«Å„ÿ˜¤†q•éI’if¸0“Åú‚Oî¡ïû ÆÌâ YÔ·wÿ|§’IÆ2+íänÕ[+e<MÅänùëôíW?Ý]ß^ΤáSË.gÆòé·7 ¿£–Œ~ÞþøñÝÍ÷?ß^]&zzwóãGj¾½~w}{ýñíõåL¤FÀ|V83áÝÍûk*}{õáÃÕíåïwÿº¸¾kÏÒ?¯à -òçů¿óÉŽý¯ ÎT–šÉT8Y&'ë m3Z©ØR^|ºøw»`¯×O ãŸQ)3©LF(åMƬ’Ê3°©à@2™6Ž -ùrY4EµÉK¬§ÓÚ-°J‹jÓ¸MC•Uµ£‚Ë48ßÔO.´ÞÞ2*|¬7Éd&z„ÉÄ0 ÊÀq¤|ë¹0® -Oâ‰IõôéÁ!©‰rm5ä d 6äuhÙ„ú¾y¨vE“ÇuL'!ÐMŠ†ã¨ï¯jvó -åÛ ò°6 ö@MKWºû ™ ºžŠæºü ‘Kº/÷Aná®GòÆËžî(÷¾yÞäEäIz.Öû5UW‚
½û\“ B㊚œ| †d.’ÁDE -º†îÆÏÛÏж̛|T8ôz¡,ˆácQíkª,‹:_>‚²ç÷±{ŒIBq–i©>à IÅeß Á’A¡T„_º«?÷E0KÔºÞ{_‰%R!Gvní ~ Òw¿h ¸çÛ æ)[†Ãµ¼˜ «˜HºË!žÜ=ìë7h™ÁC¢…¶¹Êœøèj§mÝŠ‰nšàÖ¯÷6¸Fìôc#8”z¿Þ¡´ä7ý x¿F{x?l_±ÈË7c6©ioap[–™LÈϸ,kDÕÁ€™LÒàQÀsÍ 5 ÌKÏY¨ÍÔ{Þœˆ„³TgC"fnƒ‹ŒÐb-Ó\«ˆ`Úró¢ JqF -ê Ðì¥hÎ˺¢–mU×Òãk žà™¶nQ¬¡18lpÉ#íÞo·ª”ź8RòVnÍѽ{®Âļ§½ó0z_sUÁŒR6^Zþ< œ‹¿Æøš(Àµ&i9Bg‘ - 9’Ó¢FÇÝÌ]Ýtk:À;5U½Ý‚1QÀ )hZo$r6Z[ʳ>G!£8'B™©i¯ 5 Ñœ!š,Ã*ó0æ 2`ÉK7®¿_,œ["V‹Óú>§SÛ}N{”®®Ã¦«=ºµÅ±÷ˆG¹ÛÁ”YµCI<•YB@Ù"2ŒýA4îHŽì@Á•H(À蕽8C -‡æ͇á JˆXø¥ ï×.ŒDQþœáBKw ¡_ñ§‡`È$ã^GpñXµ"€DíÀø2@’Q,y—\U%„¤íz1P»_¯óè -í¨ -—Ñ67öˆ\õr^PÉ×ÕÞ'm LUu3”ÉÓT ržŠjð»¯Ã‚'«ˆ“U«
Àë„Ytz¸mm³é/ TÆ)þîÀ¢ -ÁõQ,P‡ð‘<˜öi*›°Ô½X.‚9¬··% +¾!,ÚÎíòÞ-~„’—/*ö’"¸Õý}€‹5Ä å!,RŽò¦£m$.jÃUÌ·Œ@L1Áí–ÁkŸÖÄæœ~::eÌšBëÔ¬ØzÛµÇÂ=yscÂEË|»- â .¸Íw -IÒ=¢%¶ŸH³é'LÛÐÓE^.P -SKb"1Z -KC¨‚Ÿ¨ /D? ¾âkqt½E æÏíµ,êE@>q3„|”úÊÜà Þñ[ªã}ÃãÞ§ë[üîâ?ï0Ÿ}uó><|©Îz¤SWwòYð¢,à\ìÜ÷ãÊ0üè{$?Í'‘ú/þ¶¼ûð bl•¦r<Ñ¸Ä 9…\KÅ1åíG觤ÿâa=_endstream +xÚZKsÛF¾ëWð¶TUˆ'€9*Žœ(•ØYY© ’ +4ãz•î¯Øê ú¾¿ânÌÆÚŒG}ûpõÏ÷2Z™À„"\=lGkÅ‹c¾zÈ~_¿ûáæ—‡ÛûëÐl × ²õ·w ¾#Š¡Ç» Þß}ÿëýÍu¤Öw ?ùþöýíýí‡w·× kó…[áÌ„÷w?ÝRëûû›Ÿ¾¹¿þóáÇ«Û‡þ,ãór&ñ ]ýþ'[epì ¯X M¬W/ðÂnŒXí¯”–VRzJyõéê_ý‚£^;uI~JÇ*\m`°dB-K™LƒÔ6‘â¸ï¥,ø’”ý(”r¾?´§MZWm’¶ó3se!`åñ¯¶ïG-ì/FûsÁæ |:äi±=ìcµ~Ù%-¶ôÚsdÉU²Ï‰üR”%Ñ’Ã!OŽÔ.*êmw9Ž×<^çmw¬òŒº>}¼w¥µ}ºÎmí²Ò 旺ʰÅÕún‹’uÀB æÌy`´ö +"RÀÕ0 ð0à1äÆØú&ËŠ8Jœ}}ÊÓ–Ä “¤»¢zr‹%Ë`y „QH"}Àø#•^'£å¤RëÆ/‡),—ƒèdƒA75
IÁ¶áh¯ÀcH8"†<a÷Hìô^„ â(2n˜[ Enªh—¢jó£cËqB mM¤b°:¬ŸÝQZ?‚TÛ êªq]‡ü¸¥8º!Å ®ÆB1ÕÜ>©RÔRdÖõƒkŸÆbÐ:L¼þ"$ô¡ìÀ<zm +¹´÷X˜Ü ‡=U6òŠmyºæœ¯mL×ë;·EvˆÉ±-Ò®LŽ0náLùwÜâIžsùr‡Þœ Íð_ãÀ^ã(•{ïZðÑ¢Mü:z°èîñ\B}_(AÅŠ ÊÒv‰[{"R–—ùS‚Bv]/E»£.;hr 2·§²sv ºž$ ùÎÚžôO¯6Þ"ù±M +7ÄÙ
²ô¹Øw{z™¨ #}îɸ%’›3É?‘&ÛE’#hï`2ŠaoÛùOóÛø´Ã²›í±ÞoÎÅ ÎT*ésœu!‰ äÆǦª^ZFZÇãð%îü ŸÙx¯ +U C&ô Ëô † ® ¤É „4cRTÖ + ñóñÓѲ¤M£åGn!˜ásQw
½ pËžÁÙ“'ß½$$.Y`”_‘…Ô®ã,K:O„Vឤ«¿ºÂ…%¢î;›+±UèS¼Ÿ¨‡üÝ.ê å6x³œeîp½,6<”æÊyØu
¢' +ª‹àÍÂ<SKD—°!š@ǃ‘Su‡ƒ‡*e±/fNÞÛžéÝú´¯z“‘÷>žüÍÀ²T…æ–2ôJK>oœd›âË’\# E©Žz‰ÐY NÒ¡‘Óìu³ B(Û
zœ¥Ï¬’²/¼ï‹ŠüSò?uÑJ="Ñ„˜ˆ6Le¸}{ü2…HÚsçÀÉo×B~»Û,%îºk
4ˆ"]©÷¥Öë… +LИ$|6†½ØéVzÉËrJ¡ùœõuˆí´! +eú5]‡—7XIOÃâ&½ë ê— Ñ@[„³Ü66$=6$èA¤ùÙFí
†Ì¬A÷ÀÑêx˜ylÚaÍÜU‡Ú!Gã
Lû[¿ñ&Èäf1¤zÎ͇£‘Q©ãQ‡0rÝÐe¥yeÁFù"Ô( +¡ðü°e×ïÒ4Ïm
ì§ÓNã6&ÚݸdeÞ4nÓí„ Õ‡cßû&Ê; aʦ>¢%¾¶YCMÙƒ2¼TÓ ‹ N \òˆj Ž‰Ùš3P +-s¿‹«þÆ‹¿ì +@ –Œ{Íãܵ<†™î ÃÐÍ[º[„“~Ém]BUگ篇k»ý>ñ9ÐçÅúà ¯3× ‰Â5ã2úïÂõÙû^÷ŽZðË÷½ãQçï{ûQ‹8gú% ÌÅíûQ ûOK&‰ø-ž2p·äõ&à¡ö á +_€N + +MѾè/ê pž åyu•&¨œœ}øöW§ig³ÝY›å`p ³‹6; uÞfûQgª…‰©ê8`‘~ƒ~Ôå@ÁÍt8cÀ“£k/xIöugïm M U53´)ÓUžZJž’îÔàÙ5nA‡“¥Çɲ÷õ?Ü,:=~é
û á§XÝADåœÍ>úzî>RSöfZE5–jTÎy0‡ï=Æ-\Ë–‹ßíçWß=~„–µ/jŽîEp«§'¨Ê“[¤ö{%íÀÛB]ÔW¬Ü…oá1 +q +ÔñW:¾~.òN`Œ; o™ eArÁÉ endobj 1811 0 obj << /Type /Page /Contents 1812 0 R /Resources 1810 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1798 0 R +/Parent 1796 0 R >> endobj 1813 0 obj << /D [1811 0 R /XYZ 85.0394 794.5015 null] >> endobj +542 0 obj << +/D [1811 0 R /XYZ 85.0394 637.344 null] +>> endobj +1281 0 obj << +/D [1811 0 R /XYZ 85.0394 611.827 null] +>> endobj 546 0 obj << -/D [1811 0 R /XYZ 85.0394 316.8843 null] +/D [1811 0 R /XYZ 85.0394 133.1815 null] >> endobj 1814 0 obj << -/D [1811 0 R /XYZ 85.0394 288.1782 null] +/D [1811 0 R /XYZ 85.0394 105.0145 null] >> endobj 1810 0 obj << -/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F41 1218 0 R >> +/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1817 0 obj << -/Length 3438 +/Length 3447 /Filter /FlateDecode >> stream -xÚ¥ksÛ¸ñ»…ç¾ =Ñ|?.½v|‰óµqrŽ;íÜãEAÇ©”_§ÿ½ûJtï¦M&°X,‹Å¾(ÿ܃¿þyœ¸I äçi ¹±çÇçåæÌ;_ÁÜ»3_pfifc}÷pvy¦ç¹›'Arþ°´he®—eþùÃâg'q÷(xΛw7·ïþ~u‘FÎÃ퇻‹Y{ÎÍíß®¹÷îþêýû«û‹™ŸÅ¾óæû«×÷<•ïnïÞ2$çæ¢÷×7×÷×wo®/~}øáìúa8‹}^ß ñ ŸÏ~þÕ;_À±8óÜ0Ïâó= <×Ïóà|sÅ¡Gah õÙ§³ ‚Ö,-”Ÿï¹A˜ ‚)ƹ›„AH|XWúb&¾ó‹çu¯ºªY1€'§jzÕ,Ô‚¡}Ëí¶»ð3G=©¦—õA½½ûÄkxr^5‹\Ñ÷Eù¨_!žlÐp»_Wåš×¬:”û+ -3ý®k4¯.„ÞíG/°æ‰}Õ¯yÓÌynw ÷Ú½áCõû¶{¨á·™:YQW…F…Œ„û Žòeò%òâ#»È|ä\™ÅÕ“Yæ ›ó9÷Zu h…’.»jÛ3¬lwõ‚Á 4ÙVj†»¢áñ®Tit ~ʬPí—ç ß÷ñÒ –Öu»' -¼ˆ¯&ðâƒzÐï Û•ê¯(K’·=ILÀ ²Ð5EÍЦ]ÉvÉó"4€Ôm9 ™[!ŠëBö!4_÷ Ÿ %õvÀ³Ì¦n
¶®A ýÜ6ñaᨅÓuûJ+¸ -šÃ ~m‘‡vÇÆÎ` _ê‚»h…’ -Æv‘–5‹¢ìhimh ÄÞi¥\È · Ÿ„’i4í_¦”ÑϤçz—AôŠåÀ§@ùU«µIoUY-Ÿ$¶l†ÝEæìj¥¿á+ŠŽuÉäB5ϳ¢Ñ{ÕÍÐ@â+€3$žçü‹›±× ú77êK©¶ýlÙµ›ÑŠ¯,Q~e–¼ž:ôhw´¡G{¿LéHñ€n~9eûu»”·ØpKf€®Œ_¨±X8ªU¯Î
^ìŒ /*!Ǻ@‹Ù.awP†·ÒÛmǬ°BÄvGdu„kÔ>ÛéºFe»Á¹WS’<z<È2,ýZ^¤>èäUîÏð,ß)Dl°ñï©«Get¯ú#úeرáòE^õËŸ¾V›9ë4‘¸ -T³ÌùT5¥:¦ã,Š¾à!Ê›ç)¼2ªdkµ`Ø/^ì
øöhg¸+ÇÜ Ä&Z¢s©³)úrôÑîôrñù+¡ü?XfuújöU]so.jÕˆá]¸Ã–8?àm©ètÈïa7qÖ`ùpÓPŒª6ŽH -£š=FU€k5f0I ƒyúnÛ†ßvÆ,C»Võ–{敦ll0±Ea -ÐÙdLb:´;-„ŒÁlåA_˜ömO¥ïPtó ?H!Ì‚¿—ùê-‡žŒ)E‘u•0hçOU»Ó 3œ:P*?€÷¥RF„î·Ì£W¡}o°RKúkèñVfÄÑGD7T%öˆ,ƒÁíN<]Ýr
2 ª‘¹È67ï)6OnŸ Å&ÎMuxÉ€ šÜ¤‘ùQ¢¤ˆ5Yˆ†eæòòqDAL€' ä‰K
/sQÏIÍ6¬OèèQ€Šå€BÉhø2áà äl „ß÷£làc ¤¤ òSÛÓ¾û?qRG Ô¾¯‡›ŒÙ!"NDúœ3@ŒŒ9w!4¯w J®~bË^tPD¬«ME=ÎoT IX¥7<¤(p6í‚ê?ã :vŽ£+ìÃ\¹ë4Õ– Ï;¥{=)hП=;´ Ò¦B?5 2Q#,©@(X3žo5ÓÛbÃ3¬$X?©ÁBÕìjA´àçùÒsñc@ÏË8—T €X"Ù>*ç - U‚3ˆ¢b ŸXˆXìPdJù¥ ?¼åïTøß•µ/¯ˆÍ[‘ÈèOÜí {§vÎsŒÝÆrƤ•¦ )È°oŒO‚«,[v»YDåÂ๣D9ÀRžôã§x㧑ٖ2ƒgv -¾qb¸¿ÏØdL -º•a -%ž'œ› ²þ ðrùÛendstream +xÚksã¶ñ»…&_BÏœx$Àg®q.öÕiâ¤wn¿$ù@IÅš"‘²ìvúß»/P DÝ]›ŒÇ`,vûNø 'qâ'¹Ê'i ùqÆ“ùú"˜<ÀÜ»‹PÖLí¢©»êëû‹×7:ä~ž¨dr¿tpe~eáä~ñ“—øÊ¿ ÷ö‡»›Ûwu™FÞýíw—SÞÍíw×Ü{÷þêûï¯Þ_NÃ,½·¹úñþú=O%‚ãëÛ»o’sséûë›ë÷×wo¯/¹ÿöâú¾çÅå7 42òëÅO¿“°ýíEàë<‹'{~˜çj²¾ˆbíÇ‘ÖR]|¸ø[Й¥£ò _éDP©1ƹŸh¥I€Í¦+›ø‚À»í€¿,ðæEÐ+ª¶aÐö2Ì<óO3—%o﮾¿æn³åö›ˆWÏj-Ë%·ÝÊpçg¥¢¢*‹; ª‹µá£â ôÿ +‡éa“s0íuiiÜ f†~ ÇŠ¸lw³¶+»]g°nú×Ù¾pWŽLBo±3 ên‰# $äáºèæ+ÓÊš•ìz(ŸL‡¾¾‰BGÜ*‰ý,ÈS IÀcª²íxåðb? +u( ›åá +î¥ § +Qz~Ʋù’Fu=„HIÚç ’¨#tõ2¢1$;ijÝH¹9¡ óþÝdÛ#ü¸pu6 +ÓÃÉt‹1õüä)\œ:ʶ¬ I«Äë–5§-Ös‚à?N¢äȃb2‡57‡ÐM9@Ö`ŽÅƒ (ë—aÝE)X&U +v°JÑRóPÇa¸(0Ö¨OŠ` +è-ûLþÜY‹²KÚcÃ|¯Ùu<˜™3IƼ€<lñÊj†„¥‚›PeDZ÷¬¡¯n¿c¨áÜ¥9Nà Ue±¼ 3¯Jàk®ˆžû±” D +ÄFÁ! ÔƒF¤íÐ>˜Ž×azFµˆ3IDÀ ’°Å + u³”” ½Ð + Ò[-ÍSveôÏy Ãý ß 7åÙûƒÔ¤mùÁ]§©óÀçž>|”Ày‡ Î9&uübNsÑ“ÿèf~À»Vö#t(ìa7ñVàøðP->Õ]6LH`1*{Ës¨íØÜTæ¡ìJˆlu|'ìãÀ½RB |¿ß_æê ÷—Œ¨É%«ôÜW“_x,©¡ ?š«Ÿ|ZJÏkýÉûÐ>®îêÓf%:}Hmån•æ»…ÖyüU +J;Òvœ[ÒùX¤Ú¦¤Ðû„pµó±Hp>Ðhû*íŸÍ>ñlžøQœ$èX*ëƒîÔ~%ýTÑð6 +GJ¦»¦ë½e‚Qî ¿LçòœÛß8g}8aŸ ÙGq¿©-ãºN€l¬ß¤¼P‡</æÞ²˜w½‰7×qHXõ*¹g¢!î¶iÒð%”-…®f4w¥" \<•\)ç¼8^›
û˜Xæl&=ÄgPÊ?XG%ÌK¤”k
\Ð×giÿ) Kfd-„¬„.=a~Ó”T’"¢%·O¥aõC? á·Ûæl¾“@Ñ6ïvraIÎêP)PžÊ¿Ÿgöuž +J <îØm7
ÙHµ×î°Ê%ü-o“ýøˆ0Û=<È7‘$ö®ZAÈ÷…'D¾¥f$ñÒΖíG**K0bQã…»Œ(ßFè{uj˜ o•æì`Hjó¬Ù endobj 1816 0 obj << /Type /Page /Contents 1817 0 R /Resources 1815 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1798 0 R +/Parent 1796 0 R /Annots [ 1819 0 R ] >> endobj 1819 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[0 1 1] -/Rect [63.4454 698.4707 65.4379 708.1104] +/Rect [63.4454 494.9289 65.4379 504.5687] /Subtype/Link/A<</Type/Action/S/URI/URI()>> >> endobj 1818 0 obj << /D [1816 0 R /XYZ 56.6929 794.5015 null] >> endobj -550 0 obj << -/D [1816 0 R /XYZ 56.6929 281.3776 null] ->> endobj -1820 0 obj << -/D [1816 0 R /XYZ 56.6929 255.886 null] ->> endobj 1815 0 obj << -/Font << /F37 1026 0 R /F22 961 0 R /F11 1451 0 R /F41 1218 0 R /F21 938 0 R /F14 964 0 R >> +/Font << /F37 1026 0 R /F22 961 0 R /F41 1218 0 R /F21 938 0 R /F11 1451 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1823 0 obj << -/Length 3824 +1822 0 obj << +/Length 3643 /Filter /FlateDecode >> stream -xÚ¥ZYsã6~÷¯ð£œ!$Á3Uû 3ñVÆãØÎzk3y $Jb
E*"åë×o7ºA‚$ÕÖÚel4®Æ‡¾@÷Ü_÷<„#ÿ<J|8np>[Ÿ9çK¨ûræ2ÏX3M®Ë§³Ÿ?Ëè<Iè…çO £¯X8qìž?Íÿ ]ý:¹ºy¸{3 -ÅÅ8ÑåíÝ5Qz\}»û|ûå‡ÉEäžn¿ÝùáæóÍÃÍÝÕÍÅØÚ{Üßo»¡Ò—‡Éׯ“‡‹¿žþyvóÔ®Å\¯ëH\ÈßgþåœÏaÙÿ<s„Lâàü^ á&‰w¾>ó)_JM)Î Ï~o;4jUS›ü‹ ö"‹ -9šÕìl˜ô#hýâï±e5®ë|¬—2v]‘§V”ngÀšÓKZ“8z #¹°=$ŽÍ6[äoEV.›•¸ôÅ¥—ž¸tÅAqÀ„t—;Ài{ÁèiÅØÐl¾;Ž÷†”pDSízW7TšfúÙ¼fYI/.Ï»äH€±Z¸èq<_öW>) -à“îhQí¶Tš¾7Yý ËÁèÒש hà¿t™Â3“ Í ªx%uV6¸HLJ©&¯éIpÂ<›åë”'󒻌ºªÆ"KiwTçË2G1ÍÒ²é&ß6Äu;z½¤#¨› ”úXB?hƒxt{7ž\_?\¸#1y¸¿H¼ÑDpÍýK¸×I¦»é@™ Ò =Õv6T®óu^¤[zQg -Ÿ4éxT7 uêwÞ_ í&Ï' GMö†=&ŸVc'àÜVå' ¬]èÊ‹ýȆëçX<Gâ9ÏxöųϞx>‚q˜7h˜ÐÀ¸Gó&h‚j_azÏñ'!ħg—g é9q]ˆ<")=ª2£ -Ÿ Ø…_|™ƒºi¨¸ÊÞÒXH(wëiÆ|{‚ÉË%Õ¸!=§y£öÕlÕ€+ ™$ædÂGø‰»Üksx÷›´gar`ϨN ž¼×aÜÇ žE°SÓ]¯«—l[“¦NÞð$Ü»‡m¨&Í -˜<Ñ¿;óË/ðß%Tç¼¼½-IEŽ²g=¸àL0 ¤T`²FÕé:Ú>8{öÁ1ìƒÓÚ‡íƒcڇ샣í¼{±h· ΞŒÕ„î ¯ï&_ÁÁ‘à mª"Ÿ½S™Æžuû‚DP_x®±ˆž©êÐÀ3Ý5+pĸËHª³-B’^hÕ±@' -ï²ÏQý¦e¤Ô¥š
£ -0C[SC¼Ydú|©œ×¡ %D 29±sבÓ\§wîبÆÎ
‡µïœ9¬¡±4æ«íÿp ->õ"œEg¿2;ÑTÔ×gƒÀlÙÊß —ê.ßD„'ö¡c:²
ÌtzŽ ilÂ`Lû cê-hcÿY?pgqEZ\@ª9+›t‚£w -,9§ÐÛ³=¥kÎÎ&z«#c«÷fC4>f˜Oh÷|ò\i8a…Nu‚ðœ0ì9¸ÏœrÐÙ4(Ðzª4$'h*ÊjJ¯})*qÙÕ4鶡è‚Óu@e¢ÜªPi
xÕZ ‡ØÒóª#Y"¨ˆCtUà9uºÐ"œN£YŽI ›œ5T¹RÁʪ¡ª)et¹v¥r8“„\y$¢+O¥ÎwƒVÊï':fqv j(HK4B — 3H€¤—Ÿ8œ3°¸´m–¢:Ú"Ó çTÖ ½d[N SâL‚Ó×õŽR,[ŘnsÅS3SÉ ýþæi“!*(P~—Tù\@^7œ“hƒ È9ŽˆÎ†eûhFR™iÄDRZÑ ˆG_T¦œZùˆX-T¤‚Åy¾ÀuŒñ}AÇ`oÞ^²æpÇjÉè±¢Ú“ ¶…µ1 îãKšdÍUê¦,8ÍCA,Ñ… ÖªhƒŠ]^4̦”— Z1Lõ¹¡ -¨ÌðJª -5L¾]OðêöIÝßÚï¼Ðñí`q ¡#rD˜Ä¶«$Ìwë,îEÓ¦½pVøÉþ›ô““»«oÜ=ýÃ=*7ñÆpG1e0 †”f:‰¨cCv€ŽiÅ“9檫á$CGà ©&œð]y ¡J -¹¬ßàU•à‚r,‰¤þý<Ö±÷.ÝmÜ^7-^©O¡êÌì¥ÍĆَ]½ã…´Ž¤ -¼çT? -°xŽt[“j“«vH;滦Îçüº™¹RÎÇž…ži=ªoB@â‹]¡/4¶:?µ\æåò0øýDÄnt -ý×øk®Óø?6ªq -_ªn÷rûãE‘¯Š¾² œ.Ö¬ú–i™èüPw”Å¢¾h'qùú“Ô -äM!R@‡K±ò=3òÛ;^çËU£ÇÈøŒð, g挡u6ƒ7¯×}—‚öxžó^s"¸÷Å„fUÇRiòWÖȯ˜<æ°gÉ65;|›Â ½>mÇsXÿ2ÏIí{d¼N÷ì!Fk^cÀ/·ÿº±2±Ó~Ï]§ïu—}š³ +xÚ]Sã8ò_Á£©t–eËöìSø˜9¶v˜YàŠ«ÝÙ“˜Ä5Ž øõ×nÙ²ãÀUÝAõÑê–Zþ’䱿ò8‰„¯Òð8NCù2:ž¯üã%ô}>’ sjN]¨³»£|Rñq*R èã»GW"ü$‘Çw‹?½óξÝ]Þœœ‘ïiqriß;»º¾ –”>ç_¯?]}þ×Íì$½»«¯×Ô|sùéòæòúüòäT&‘„ñc80àÓÕo—Tú|3ûòevsò×ݯG—wÝZÜõJ_áBþ>úó/ÿxËþõÈ*M¢ãg¨øB¦ip¼> +#%¢P)ÛR Ý ýÞ!tzÍÐ)þE*QÄ ä£Th(Ã@\³„>ðÀ÷'y³©«&§e~«ËbþBå?êŠ[¿û‘óíøHfdþ¼-Ú¢Z"?€jàPõO-"å=ÚåǸ7ø)ªy¹[ä
Õ2ú”źhóVoÏWYU4kêkkú®ëEñøBå‹ë[*lOdâñåc½uûþÞåMk©UYY/ë]ãb˜uVœH¯¤ZVµÅ). —"¥H£(0Ki6Ù× ù +½‡2›ÿ( +$RÚ2¥S&²/ëq öc†¯7mQ3B¢d¦ôTäÏÔd»²u
'hµ,뇬d¸
‰!ðC‹X‡r(ŽH ™¦àLá.ªÄ3 ¦…›fî®júº‡Å.ÊŒ³3G Ún(È@ÁÌ<
<q_{ oÖKpUPYU¶}¡n:%PàÁ"Kª3êæ¦ÉátNJlÖLêó!J% "h€#½-Ì!‚JUo×YY¾PÍp@¡¥~Î0åPIïŠ1†Àw×ììÄÚp·9ðe>µÛbn{VµQ‘ +u
ÖÑDá×1Q È +|½Î€øIÖ@”çñÝ÷ƒŸÔBÈ©¼Þ‘±
ј›µƒD‡j¸ø‡¼}Îsä¸L=I Ú((¶•YYRË#™ (=¼´¹±àlœ…¦ ½3e[népI9} Ž2½³zŒ²€/Éù¼Xg<™§¬Üq»Ñ9Hû–yfˆªÈkŠeU ÓÀÛá&\ +• Yù:) +ÇÂᦛ/I5€^ŸÎ..nÄìæ:q3ÑaÐ<`(^¦©³ÎP鳃5£Ï#i‰Épimô +’ÙŒ½Ì‘½€–Î^@Ùî„Ï;á÷–+œ2ÚÜÔƒdäRŠ]t³R7¨)sd¡h½ö7bÞAè·-PbÁÃ~Ê©µÉ·O +õCk
`F‰2 ‡æÄCˆwÝhyK©ÝyÆB˸jt“.>À"…íI…`Ñ`{y ; ¬÷²ï¼°Z*aöŠ1ö •Þ{LŒ¯a¾ŽŸg1ï‹p`FR9ž ¤m .»!„B ùBIyÐõ;=ØL¹~6a+`qŽäÇx}‰ëMcÍ + ¨/`bCF;ÔŒ>ä~`¢(q&Ä”I¤`XÇJCÚxÖX2,WVùü‡Ñˆ8ƒ%Ži§D¨?“; ÔØéG'ˆí²¡ßY6Œìýèêýè1yÓL#ƒÁHÕ©Mƒ…Û\‘Áöÿ‡ÈLZì@‰³ôƒ †m ì÷5kö(«psQKÁîRÏ}tȘûT1*0iflxz55µÏ\ ¸!òÖuïv…ýà_qn <bœšÀ®ë® ÌotA¤N|ï,Ÿg;³<PX”dÕ^’ šˆxÌÄ;¼hsîÊæó.)¸$(ãåÀ×2€¬kÃ)h!G(vÖ ¥øú¤G®¤eþ~Þ† ³5?lxÙ\gsÎ{Bš·.Eù’¬šJëDH?°ÑÓÅÕíìì·Ë‹)ÝA˜Úè•(5ö +eßÅ€ýÄ c%èLÜ` ² Ü1ÿßMlà0̇ž‹Ñ$× Ø±ŽåС³-«Ä5ÛÏÞñy œ¶©FÚó±Æ”%3Ò·Iß|ûñÐ͘’J€‹¡Þ¾ t¡ÌEÖ {™B1Q.\Éw_Æc¢Òa¸FoRí öÉ] Ê¡ ’=_Õu“¸2:y“`cn¾vWlœ5Á½ØlòlÛù\~°µ ÐÞðé|>n‹Éç‹C{á·ðu¾½'.Ôá=é ÞÝ“7©ö{²GvrOd¿# m¶ÒIJZóooœl½3„ÃÆÌ9z=ã9çÉš§ÛÁÃ|Ž¡&ú >;PoðÙB½Ïç·¨:| “æ³KvFVÔÿdÔq }MÐ]w;¤½Ô”ºO¸R«‘xÉN”Él! ƒ™Ä[ ºš‘Ú戡}W-…º½<ŸÌ›Z{vxŸB¦ø½ãн±K ôþ&½AÒÙ£Íé-rhÚ r$Þ^¨î ÷‡A +âã7Íysؘ3Ì»¦ü
z½! œ4ãÁ»é·`©º»|¶/í&Scþ(M9H÷I¥}ùÐgKñ¾ "Šó>y^õáe÷,äÀ +R5uë>ÏësõÂ$…å‘ÀW¦Œ„?–ÿù1k/a,T’Ó{¢|-’ í¤‰Ï¼{õº?õÿ endobj -1822 0 obj << +1821 0 obj << /Type /Page -/Contents 1823 0 R -/Resources 1821 0 R +/Contents 1822 0 R +/Resources 1820 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1798 0 R +/Parent 1796 0 R +>> endobj +1823 0 obj << +/D [1821 0 R /XYZ 85.0394 794.5015 null] +>> endobj +550 0 obj << +/D [1821 0 R /XYZ 85.0394 769.5949 null] >> endobj 1824 0 obj << -/D [1822 0 R /XYZ 85.0394 794.5015 null] +/D [1821 0 R /XYZ 85.0394 749.4664 null] >> endobj -1821 0 obj << -/Font << /F37 1026 0 R /F48 1238 0 R /F22 961 0 R /F21 938 0 R /F14 964 0 R >> +1820 0 obj << +/Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F14 964 0 R /F48 1238 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1827 0 obj << -/Length 1980 +/Length 3566 /Filter /FlateDecode >> stream -xÚ¥X[sÛ¶~ׯÐtú@uJ -áPƒ{ŸS±ìî:#œ†rÝW'q7T»´V-ð¢!åm -\ÇÛ~K P"ð»Æ<xº†pGLú>Ø$ -õ9@õ
G| O_9D0â„ìì ,I Ñs \Õ1Äò±…¼aŠ0ó¸HÔF+aúð’€ûÖÈ[úö-9Ϙ$×ç_iø7"ÛàNµÖ; Œ~EòhÐÅè¶í¼ó?š(ø{'ÝX¯cz÷ÈSºy¦áž‰‡™}šZa~F‡Lø×Ñ¡¹:r.þ08ͪC{Žß$i -ýJY}—–dÿw |¯½IÖv™¾ê[z³zÔÐ~…õUüü} -ª2~Vgüùݤm·
9¶Ò……_)ªuȘ- Š|ÿ[;½ØB³»y´Ñ‡c hPôøÏÛ-_K¸Nïþ¥}÷©yä„!Ý}x™ý+
Bä†ÕN‰²ç xmu|Úâú¿:J3¦endstream +xÚ¥ko7ò»…Q pr±KîESl'q‘؉ múa-¬EV»ÊîÊŠ{è¿Îp %õîÄä‡äp^œJž;ðOžûbŸ‡±'|Gúç³Õ™sþcoÏ$ãŒ
Ò¸õzzöÃ7<E ¨à|ºè 'ŠäùtþÛ(J\À +ÎèòîöÍÍÛ_î'¡7šÞÜÝ^Œ•ïŒÞܼ¿¦ÞÛûɇ“û‹±Œ|9º|7ù8½¾§¡€×x}s{E˜š‹Þ_¿¹¾¿¾½¼¾ø}úóÙõ´=Kÿ¼Òqñ _Ï~ûÝ9ŸÃ±>s„Gþù> !ãX¯Î<߾纒Ÿ=œ}jìê©6þµ8c×ì‚Ë~,W¹-—¥×ãr(a0€,äògG†»G
a=©óþr{›¤ýM•êmIáDZ?Üt¼v@·“(AGŽ¶Ë²N Ú$Õ…ŒFOiCCYÍð%#l³|>#¤9¡4åzœ§ÏiNór•d
}v|ç{%|Çî¨^§³ì³ã¨´·,œ È–=²]¥D¤BgE‚oï®&±MñÏ„ñûÇôB¡œÀgôdÖdeñ +6@î2›-q +1t„ã‚ꥱï+O’n«¬Ñ4ùæ¨Ð¡¡z]5Cš’ZMj.þ™¬¬¨Ü^Þýr;ýIŠƒJ¬@1r\zXGÔÉ`T§c›vê´»©]ú›N"” :‹ä}9K@=$Èï*i›cúžˆ& bKÒX³PÒ¢Iç4ðøBmBMª‹’”4+’Š1®n úk̓7h– Ï$õNécS›Púz¸¨·iEý¯›´ÊÒZŠ‘p=/jØ'B¹» ð Tì I Xó²6xEÙ0 µ;ú\*Ž;êÊ´ €ÙfÍ’zC-œðjh‰(&jE½rAmNÃî ¦{ <¥cŽG7z¡q'Øew‚ݾ;q½H á<ièLRofKF©iÊ÷"ý–¬Öy*få +€_¹i'c ’Q7 F¼CÚr G  ¨ÆàL$2ãC`ð¢AYc— Âê¦Êê/ô¡} »8ø\"ØyLÓ‚z¬¹y2C*B2¬‰ŠôBÝ"Y¥(-èNiXŽÖ›j]^ÈQÍßZhŒ74"µœ‡ŒÞ)c'g¶óQÖOOYñÄãÅŽÜ&y®É†þ‹*-þÎË$›fY‚ï䥴a§N«g`èÝA/®ˆ¢88îûX‡½`‹uÊ Ý´õ‚{›Z½à`S»TŽð#ãÔ>j3|x˜¾»ÿÅâáŠv‚@2òºÌ³pÕeˆmw{Î ðÈ 5ÆãöFGèÀi5 ¡Ê^{¼{µþc—ƒž#… +£`ÀÂS1˜qEölÜ®háwŸ6Ïñ„ +BoÈðuR×ͲÚûeAḃ¹áƒÏpÌJŽ;0(" e8ôiÛßubíû±e¿ ƒySÛÅ
Ú;‚’bN -8hWeͳÊE‹Å>«·ögºü /Ë<Ÿ’ ÁZ1ø:‰Íu.o®î™0ðÝ_øBÚqèª0Z ýÎÃùmôÚ9ˆþ`ˆ\‹o¼”?zNª,yÌùkT
MÄ{COhxF¹-ÈmúÚõ—ó´ÖH5 ²áÑV½g ÝþeÑQ`9ÑG ²MiÏÆ#¥ Qà©Å ê
ÑJ9•t½ÖfáFU n q`:+ÃQíõµOíýÇ_ sf ¼N >¯Êæó”áìæ5±Ùœ ŠP)hñûÚìJ!]ǘæ,G5îS&DÑ>„`ž2Þ§bu Ü'„$Çk P¹Fžp\ËåI5´’‰–‘ ´ž’"û£•œý¦K%dΈ8 +ÌœôVÔ,Aœ)ïÈÉ÷, [ÝgZÌL„y9H9å¦`ãeÒúL/„{Òiö±›j‹uÊTnÚšêÞ¦VS lz*ðÇ0 wÍÕ‡t•dõ4#´h¡ÏÚ죢7<•HšQ«ýŒá&<´0‡0¸Bš=Éó†:( ³óYŠÁ#úy +}*4°ûΪö‚5*c2`©3`N.9hhÒYs²P· \¾Q Ó6¿Åàà‰ÑªyA€>èD©·uDó ÖIÍ;¶i§y»›Ú5¯¿éí¿®î>Lnl×6äR1de{Zçs8\ó ›ft’¾™,£vÃ.7Õ1+·½²Fàvë·
ÖIn Û´ãöî¦vn÷7ý+uêÐq ÏM,Äü4–ÖÓk[™¹ ß u á9Ç ghëC
ÖI† Û´cèî¦v†ö7mSûª`ÉZ ×÷Tô—ô¸s£'t:1.&á¬sW<¿ïF)Øq¢ÛRKÉ»e3Ϊ¤ã ǃ³²Ò×/T«œ§‹d“ãõËÀ^Ð媈7n97¥O]!@Œ‚¾õ±uÕ³+Aä™™R9ï¦k0üµ-V{&¶¡²ê§‚ƒ×Þ›ªÖ1:‚°¼põ“Ä´ÛZ˜r¸™ÃáGÈy4@u8-;i¥J'@j0Ìñ Â3-\Z4-v üøkMKdÅ`…ç,ÝÒ +{OL¨!_…=~×ÓC_»"ŒZ§óX¥É—ñ¼¨ëtÆ…nƒ0éKZ[ ˜Ä(¾}¼í X Œn4§c“öBo–Ô)æ ‘oê{=…Ö pãN¡UhjSCÿÄ3¨è³ÞB槰¸{‡Çbºâ(ê&ß´| ËË?xF2ŠÝ·ÿEÒeI3H3@Èu ÐU|²ôAÌѱ³¤hKaàK0lÖ…ê¡÷p{Õiáäô=v$ W)ºÆäÞ 2ÊyW% MŽ25k +øîr;æ¤^©€=~üó¿?i?óÛ?*…n–sîèÂß´‘âÖòÍœþq1–nÃwÂ{w9yÿîîa*è ë|¼zªú¿¸ !¼7%¯¾äÖç1×™SG-Û7é¹ï¼é_ߨáÆäž
6±‡ÎÃ|üD9 vûšV¡‡ÁLŠV#¯X\‰é`ô¡§£-1Ò0á ¤idúuG`~hƒ ®CŽÔÖÊmñr<Áæ”ët¿«“Èj /FŸ¥«ŽôŽcUQbœ5XÚë~²§ùK¡"=ˆÐs}=í{=ä‹8 ƒó ¨ˆ¼ wW“éd†±ŒC¡œ=Z@ë„ýˆH$ ÿ€™^ÔmPá;›®Ò «jVSc^Ï°7?¾• ¨e¸¾À _ZŠ +ðŸ)ü¿Ú+Š„Â"eÿÍÂÛ™‰BÎDû/MFPä}Òÿ#Îë.endstream endobj 1826 0 obj << /Type /Page /Contents 1827 0 R /Resources 1825 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1830 0 R +/Parent 1829 0 R >> endobj 1828 0 obj << /D [1826 0 R /XYZ 56.6929 794.5015 null] >> endobj -554 0 obj << -/D [1826 0 R /XYZ 56.6929 205.9349 null] ->> endobj -1829 0 obj << -/D [1826 0 R /XYZ 56.6929 178.7228 null] ->> endobj 1825 0 obj << -/Font << /F37 1026 0 R /F14 964 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R >> +/Font << /F37 1026 0 R /F14 964 0 R /F22 961 0 R /F21 938 0 R /F41 1218 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1833 0 obj << -/Length 3434 +1832 0 obj << +/Length 1742 /Filter /FlateDecode >> stream -xÚµ]sÛ6òÝ¿ÂòM„’ø éSÚ8½t®I/uoî&Ídh‘²x‘HU¤ì¸wýï·‹]ðËTì´s£ `±»ØO@ñy¿øÜ)§ÏS§…‰bs¾ÚEç70öÝYÌs–aÒr8뛫³¯^ªôÜ —Èäüj=ÀeEdm|~•¿[|û×ç?^]¾½XJ-q±4I´øæÕëqôùöÍë—¯¾ûùíó‹T/®^½yMà·—//ß^¾þöòb[ÃzÉN,xùêo—Ôúîíó ~xþöâýÕ÷g—W /C~ãH!#¿ž½{ çÀö÷g‘PΚó;èD"vNžïδQÂh¥d{öÓÙß;„ƒQ¿tN~FYa¬Lg¨ã -§]zž'%•—໋eE‹Å}CÿЧieuCí¯éóîôˆâý{jÿ>y":—q,œ1r¸g{Ȫf] –M}<¬ -þ™¨ÜëYž ò_"NP25€I¤Zè/~È—¦Éù -¹’~˜¡ï¦ f½æUž¦†¦T«éDZr TEzñ¦ÚÞÓ ¥Æ®nÚÉÎ+BÓi¢Úf` ÔÎöûmYð „ÿ&óß|ë] -.Âf”œv©i~P¶²¢3 åFf¹4q|æ(ÿ\¬êj=£ <Ap S{ ð©‘㉈é3jè0—Ó©¡Â”/gÔ0U‹UVQ£^Žjf<FŒƒÊ´õž Ûâ¶Øòüõh`ª+<‡›ã!c{ B¶<¡fôeÕ”9cÎfØR±1ä¢LðmYÜÍ—ÖØ\¡Î¤Ž´ûþ¥²NØ(8žÓû¤¤¸¥gRä¹Í€ ìÙE]öœ`G3{v:65O9<©ãÛ7hfÆÁ–Þ6`¯vS7¼=êz€Öb ¶Ä%Í"Wh¡qÏ“êý’N˜#l<I¼jï±TZ¼y-oªº·ZFþü4šp[‚7Á±Ó‹
gTõœ|Òœ'*Ë'qVÎÉGÅ)ñ†›Œx›îkÈÜ´ü£{ÍÈüNÎà†¤©À3€y±ÎŽÛ¶ãX½¡6‹ûúH¼lÈ=ú^»ACU:ñ2ÀÐûc?øBl£{ÅïMyëk.l×G^å¼AÖf(¹Ä-vÙác7³lé›1–ëúæÈÍ»r»¥‡[o ˆv}<€Þ æ|*f äŽÁ‘’’‚CõÖGÞÝy‹‡:K ƒ'^Ïš–¯QÊçC4Ξbœ$aVÙÌ`‚¸ wþ§SO9R-5ñÝ&X_Y>ê»e$´îÔ{¨oÁ'.ËOë9Å3ÀXbÂn!¬¡ŸË‹£åbW’]ènSx©ûŽ·{•ÚŶ^a*†°>€£Ö nÈ;è¤aП0ÌßeM;˜‡s†)tÌÍ ¶Ñ‡øM}&âT$ ¨²#âÈÇ–ÕŠ•”ÄÓ%‹ß¼ßÄV¨±g‘Šáž -!(xhÖ<½Ï®R#LÜåg™(„+£‚=×{N -<™›¤1;ÕläAgãËɬR[¢ÜÌå$ÛF¸^'º„ÛJòLì–¤{·„ƒ,‹8¸%„ XºÞ-á<Ï•¥bç²QKë‚òX94oZ5kup¬:rf¬Oäƒ@2c=6‹5YÛŽI›MpD+¶™ðÁ4üޣ¢eÚ„-3amõ+ÛgCùÀXÐV×=
3ž PË.h=~l61´°—ì¾!焜ȩ¥PH##Îu£^‡Öé0t‚c€geG^KŸ®¯þù¯ç•ž¸q0ò602¨(5çG8œó0Iç ÷t]ƒ£=bV%€eǶÞA ÚIŧ^¬ÉÕAë:ó
ö}(5¯6\¾®9!ö±7ÿ¾˜¦CTü:ô»ðµ‹ªðí€éXu ´@4/©þÅh_®6Ô 0o‡ ºŽCÇI?ŒÖQJ<l_·_CK÷
CÝñ*;ÈÊpõ\*¦ñ%Á9óÙ@¹ìf X³©[¤’Ðl{—ás¶ïêÃG´œ$áü`ûãaOeOâÈ@wÊ[)´RæÉî\§2$‰(µYGitgD[\êÜÈO2_%ýIûÄû£gÈú¬Ûsɽ›GÙ”É`3“À%BFSm8=ht^™B^§óÐ*È‘YÅùκ®ý½ÀØiù6é4¼÷¥™ÀI¹ãÍj í4:%Åßx±®Kñ)Ûaêh,™"rÀVu$ò1NM¥×òC¹>ÞÜÜOnøV‡¬Ù„#x©U}8\ØÅqßò -Ì•‰'÷I˜ìLiyÌ÷˦ümî^Hr ¢IÄT©Ï1}ÍÊ”´“-€~~ñ#ÏB´¾Åe;ÆÚ† Y¢jKº2€þõý ¹p*1vx³8WÝ¢Vu -àôWô\åu98‘ š8‘Qm»ña -“JÓ_ éØßg4´KG”''Øtö|“ ^‰8çBþm +xÚ¥X[WÛ8~ϯÈcسºX–Ô>Q +-ݺ>QNk+Á§ŽíÚ·Ýþ÷ Yrb§„ ¬Œæúi4‰Œ1ü“±ä3å…òÇ„£Åç0÷nD ×2y]®7ÓÑþ1c…T@ƒñtÖÑ%–’Œ§ñÕäðýÁÇéÑÅžG9žhÏãž¼99{k)Ê~ÏÏŽOÞ}º8Øþdzr~fÉGÇGGg‡G{ ‘œ€<u¶ Ÿü}dGï.NO.ö®§ FGÓU,Ýx f&k<Ž!ì#Œ˜’||?0"JÑñbäs†¸ÏXKIG—£V +;³è~œIÄ% +ºÎ}}Ì3ÝÓáË
ó°Œu†ô}¸(Rm˜64±n˜¥Ž“RG.Æ{ôÔ€¡×ù¶yôÔÜ*p†%ƒÆÚ
‘#%D0&HøÌÆ3`A12·ˆÂ o-¶Uݶà=¢¢Äî1ŽdÀy„“ö[äi=´ÀDyW.þ›p( Â4uƒ¬ºÓ¥cžå¥ *ö¥ êûHõŠŒ0ü“¡ ‘ÍL“Ɇ¤è!b—õ%i#É("OEñîÖË‹³Ë·Vʆ·ÔŸA5àTVusÅϪ8 Ú¹ólT¾DPµÌÎuò&.Ÿ ï S2^IÏŒ.N‘¤T5ºLõ# (•.ouikÝe Öz¡³Ú•¾2\,ÂÒj샕€’¡D£°Õa@HŠ/a —WûE©gÉ}ª³k;ñoV q/¸+Ëñ5Ÿ/]î<èêK^~ÉÜ~s‹q=”)N¸(óÛ$Ö^r?+_ £ç@©¿/uUÿ– g¿ ƒ‘õ–qáUÉ£ÛZÙrñµ…vë‹ðþ÷Ô%ìáÙj?/M†¤=Øû‹¶T˜3ÂŽ Äy¶DØßÿµNg^¯t¬’ÖèÏ|þ¦ ª6ÇšOU—I6ï)¸Ú>ƒºv9úãÅ8yU¾,£Îi˜~³Ú›Ú-bJô–ÚÍ»µ{ ûU‘—õjW™ ×þy“á'+býônƒ®«ÁSWWçCãßrÌð_s•b†(jRè0’ÙÃn€1Aý×*‚Ÿõñy0_rf¿ÜMEmºÁu‡BVö±tÆG]U›[Ó•í®÷”8&p0 +-2ƒ¹Ðºç+ä3 ⸎°çšì +×=WKÇÖñ
“Il}Ó•ýÝ„edIU'‘#š Žù~Õö r % &¶¿ï’úÆÍØO¹GäD/òº ÛÓšç$\«áªM›œÌz’…5>Ý[ÙTï‘I6 ÍjAË˸ýÕJŒ£ ´:JŒ¬Žÿ4wm g´1 +»Ž†#IÔÆ[QS±†,q±5{4™gùz×ú7+аY†Ûª‰1m~¬a3 p%ÀG(ž’ï€O $ ‡ac3Fz±mÚ">´n>ýU[x@݉ Ù¾@xŒ›6V‘~ÒÅz.ÓºBÛ^4Gæràý¯Èß~í\?ûÐÉKIW™ñpÃàœj^†ø¦ç«gѧ®ÿQÀœendstream endobj -1832 0 obj << +1831 0 obj << /Type /Page -/Contents 1833 0 R -/Resources 1831 0 R +/Contents 1832 0 R +/Resources 1830 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1830 0 R +/Parent 1829 0 R +>> endobj +1833 0 obj << +/D [1831 0 R /XYZ 85.0394 794.5015 null] +>> endobj +554 0 obj << +/D [1831 0 R /XYZ 85.0394 525.2179 null] >> endobj 1834 0 obj << -/D [1832 0 R /XYZ 85.0394 794.5015 null] +/D [1831 0 R /XYZ 85.0394 495.5406 null] >> endobj 558 0 obj << -/D [1832 0 R /XYZ 85.0394 585.8777 null] +/D [1831 0 R /XYZ 85.0394 193.8668 null] >> endobj 1701 0 obj << -/D [1832 0 R /XYZ 85.0394 553.7893 null] +/D [1831 0 R /XYZ 85.0394 161.2246 null] >> endobj -1831 0 obj << +1830 0 obj << /Font << /F37 1026 0 R /F41 1218 0 R /F21 938 0 R /F22 961 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1837 0 obj << -/Length 3590 +/Length 3988 /Filter /FlateDecode >> stream -xÚÅ]“Û¶ñý~…ÞªëX,> ~r Û¹Lã¸öeúd2<‰wDZD*"eçÚæ¿w P EÝG™Ž „ÏÅîb¿A>cðã3g¹nfœÊ4ãz¶Üœ±Ù
̽9ãaÍ".Z¤«¾¾<ûÛkif.s¹Èg—× ,›1kùìrõÓ<ÏDvØüåo__¼ùñý‹s£æ—?¼=_Íæ¯/þþŠZoÞ¿øþûïÏÜj>ùí‹w—¯ÞÓT `|}ñöqôwèûW¯_½õöå«ó_.¿;{uÙÓ’ÒË™DB~;ûé6[Ùß±L:«gŸ¡Ã2mΔ–™VRÆ‘õÙ‡³ô -›°YŒ->ïYW›ª£&îõ~sÌôëšk[6õr¿ó öäàXU_5ûzE5u@÷hù‰k¿©ÙŒð ·µåîœ -Ê'aIÜlI°ªn&øÃef„U#©8Á )YdÏr] -Àäùád¯,« .p‘ÙÃ5J¤ºö¦CÓÿÓ7œÛÌJ=bÀ˜É mÓ‘Ù@h¤— N`<©1¶ÀØ…£QpŠ% -
´%èkuêxG‚"‚·=УŸ™f— .Þ<ߊµYþ°—™eÎû
šÛÝ̨ñ>q4qù"]ìgŽ " ʈ·5s¶1*\æp;¹ àräêúU p -ðŸoKJ>ïŠõG¯Å8ìï -`ƒlá¦éJZ=°_F°ù? j‘ìøm_¶
xïç·ÖÝý§À=†ƒLrÐ3ºY kd>¼X<S»Ñ™0ÐV7uÑíi ‡,¹%?é þo漆 ®¨»o‰
ÚÄ`Ê1 8R¸-ÀÁ$Ôa¸ØnËzuHÑ -“9•›¾.s0‡“þíï„ÃR)ÌPR¢UBlaÅ%ŒmõŠà;ÿ!\fÚ(,gdFIªMü5LÐd‚Š¸;œ‚YSûÐù%¨¤ƒZ89‰ O#5°”‘–‚†þº)ºåí¯ë -sn?ñG -U£É°úÖ·——ï¨Õ3ÚUøOª#˜ÍÎ/|И«Vauw[tÔ -/˜Ðrôçÿ@õ¶ZÓ;Œ™?¶ÖÕÕ -/;–Ø$ð%Çw/_¾£~Û,?zí‡6z‚²¦Š+¬)Â0qÒŠðD òL÷¡mµ=Jº•ËcÄ]x÷ÅÏA=ÄE -òø9ŸÎœ3üp2bèmÅDiŸÙ¢Õ÷Æâñ,€ôŸÙ><fÒ*ƒäÑþy,è!>À¥MÆsw,ðQÊ4 dÔT_Ô’óÏ·Õò6F¨ .ZÙ©JØo}¬›Ç~HPaħ4’S+É°ž(ô mÈzHzO2ƒT+ DãVîâOxjŒ)ȉ§Fá2˹>œ| c1ÖQ‘³±”6ˆL¥9„ÀÇqâ8Ò -=t4aÅzªÞ±¯u2Ý(ÞР“ÓGÐTjËè)ìej#ý±Íáøþ¹üõ(§ çl ïœÏ×Ô/â =v¶ånSuD¡ƒô© ér–ÂgN}¹ÄXfDï¦BµàÈå:ürFÂ3I»ûòX¦‡¸HAN¸\Á1¶ûeˆ¦/f ÅœÂ#‘«?É âHB$AX †HúZË„J(| -s½J@X'ÉÂ%M~'AUÿ*~Rm¦¸uã¯á\ -ËÁØ¡zûI_Ó˜HèE-À;8œñ‚·ÕÍmü¾ÅbCø"&£¤VgT0<J%•Ó’ïW -T= @RH¹Í0Ÿ £þ_²ç—endstream +xÚÅËrã¸ñî¯ðQ®1Ä‹ +7òŸ«þœ^¯`Û?^¥‰Ê¹~„4y.¯wWÚ¨Äh¥d{õåêÏa¯×OäŸH©29Á@)§hò$SRyÞ®oæJ›ÙSs¤Æªj—ÍCy ¯î¾è°•Í + n„›•»¦+é»-qpÕÒï¦z¨ê
µ›#Ï_+^ èŠwÐÌòÙ®8|#«Ž~ Ʋh6Gn>VÛ-µö´þCY3ÚõñÐÝpÀ¹InŒô[ûϱ<TeKGÖ5ô[upÖJ¤³»û’ «r] · }<Û#Û5" Š …v‰q©…µp ¢‘†õYà0³,ŒªÚ LpB9 Q7H`/ÐR<$ñ[œƒŒ$¹³æz.e"´ âfΗi¢5
!Ø š‡jUΫoëÃÄj6–™°Úr[ [<b›ƒ:`°˜íª¹‰ ÇûÒsÝt÷~ ›m›e±%‹h
µvËŽN:ý Ãø]Ñv½A"œ3 ¡cn÷°lS¯xѪ»g51ÃæIŠL {U/YHAH<=i6ûoS—ÔêEÝ®=í©ÁÔ ¿ç ½6vø ìJ‰Ü+·ÅC‰ ™ò ½¶k©×‹œ¶–tÍ£éxÍfâÔ”Kks>ˆ§rJ¾„NrÂ^y¼qÏ"•›ÄJ´®Ä#2›'&H«˜íÒÊÙ¢$©™——F•aƾiÛj±-:HÜ‚ýÆÏäƤ²`Rýz™‡Øܬ òT$»åφ½*òýó"zãM*Þ¤ê91Iê<ôõ9AÂC”‚öê,ÌF:s!+͆‡w“*¬IŒ0ù+UÔ& ¡AŸ›}W55a¯êÓ*DAU>2úÝl›jƒ‡ù©-},@m¿2ꯘ3J%Ëõ3Õb`A“`„_¶L"O´S’wr u¹¸m“ä'™–I:I–‰Í’tâd–°“y!‚YBØ@e~2K8Îï +<–•Zº<“}õ¦Y“ZǪÓÜ •Žl´ÙPŽÍlMÚ¶ãN’f †‚mFû`šaÜÉ¢¢fºŒ53ciõ3»w}þ@_VèmÖ'&, –Ñi½|l.3gÒ +Ø+6ßZ¨¸«†ÂÕÇÌ2Œ®ø@¿Q†e>‚ £ƒg—a’Ò×Këíß?bH¨ôÈŒƒµ â}K a÷Š»‰Ó8î¸ß7î=!fQXqìš]ÑU Û'ê\“©ƒÖ¢ðêû P$Ô¼C!GúÖ
ýâ‘*¯þô=yƨ í.üºY]z„VÀp¬>ZÀ›W^ÄzûjyOÍÞæ]‡yÜ!zçõ÷æ5¤£ÐZ…å›î·ÐÒÁ|CW<^è>Ee8{*Ó +"–<7Ï:Êy 5PÅö¾9n‘JB‹ícñÔRû±9|EÍÉ2Ž¶? ÀÝñ‡W,¿dÎL X7¯6çÚÊ$"×&
¥ÑQ‰^Ö8›ç;Éûªøן´¼¿ú
9 uû]²Gã(z&9FH +êÂéA#ZeryQæ¡U’!sŠã- µh0šC-ß&Ù†·¾4vRíx±†{£äÁGEþWÌÖ
c)¿; SDëñªr’òžAY 7›'¶$5›–å¡hïCŠ¬Ô²9 nÜì¸ï¸3 jñö¡Å̬·¹P§E°Å媞©«£<Æ ^¸ëTÂö"zè¤X !¢XLô Íq: (º®Üí;žÖÐ//bg ¾ÿô…gPœ
°e³Û k0zÞñ’ €¬Õ5TQŠö}ê ÂÀ Â÷É >›ÓM¦_"³I*…~C˜ 20Tb¦ôÊ LF•ÄCš Wûy[ý·œXHÊE#©¬1}ÎÒy ¿|ÿB´¾Åi;úÚ– Å +XÕUÞ)â÷âiŠ\8 •™˜•»r5•Ý¢TÅ€ŒpbÂýÄY^Œ!ÀˆdhèÔȈ r+‘Ó +8x£Ñ‘hÁÄ‘téX $
vGúÉé‡fÀyü;‚ƒEôöx[¾ÁS¼2°„l,ÿ•¦’º ),®î%›P…‡f} ŽQ"…ûðµ%)Ú í·UÙ¾Í +[“+²+¾=«ß\éwšýi(C ‹þVíŽ;ú†4eeÇþ²m‹
î-8̸qƾ¬Ï©ZÏr頻W˜õ:7TÆ4(#©·#çä8EŒ+%©¨„äÙûo +ëÆ–CÂá¤&ZŽú‰75ˆd.Ñ1«€Ì°¥¥}f Ëáì>1Ï“8šÜü±œA9‚ð2‹¸‰?S[˜‹\ù3C.½¼È0N•qŸîš¨5ZBZ‹ (Ë +´Ý††Œop0M‚<£özÔÄš€žzÍE>ø>Ö+ £kšÃŸÎW= +¹jóØRÛlìŽÛ®ÚoyâÄdK9 Ë἞î“ìF™è
¥z-êeþb»âª‚Ètb…™½°bË\äìóµs‰ýTDˆ©Órªx9¨’¹{é¶F‰XÀÀ;È&PCD-2kÏ.nðyUH +¤7à +´ Zò©ŽhÌà‰Â©z¥G/gÌø匋|Ðœ?”Û ÿs
.ìcïs|jØh¿âÕçx}R8•ëp&.{Ó‘Ï㬡¾.Ä „ßžUóU&9ûQ߶8ôÊ¡*\OÉlFóm839ºß—£‡F8÷¶¤ ÄHóf‰SIn3^±ŸDº=%ê?*I +PÓ†~à¡,°@Yy-ü+‰—b 8|Þ €œa Ä@ôvÌ D)czðâ;³Ò§ç,Šƒž§â W¿Pˆ×aø(äµvW¨ø +„Sè5 TöÒª˜Ë¡JæÏ]½úTM6tå¸Ø¢ õ0£S7*Vÿ H¢ýµæõfà\³×ªÏÔÿb(ƒo²¦Ü_z „åWÿŸÆéŸX´M”srÚ‘Jëðá« +Dá¦\vFyø‡ŽsÒÿj¤Q©endstream endobj 1836 0 obj << /Type /Page /Contents 1837 0 R /Resources 1835 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1830 0 R +/Parent 1829 0 R /Annots [ 1839 0 R 1840 0 R ] >> endobj 1839 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [87.6538 680.0038 137.7628 692.0635] +/Rect [87.6538 269.6318 137.7628 281.6914] /Subtype /Link /A << /S /GoTo /D (tsig) >> >> endobj 1840 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [370.941 568.3155 439.613 580.3752] +/Rect [370.941 153.6184 439.613 165.678] /Subtype /Link /A << /S /GoTo /D (zone_transfers) >> >> endobj 1838 0 obj << /D [1836 0 R /XYZ 56.6929 794.5015 null] >> endobj -562 0 obj << -/D [1836 0 R /XYZ 56.6929 461.551 null] ->> endobj -1841 0 obj << -/D [1836 0 R /XYZ 56.6929 434.206 null] ->> endobj -566 0 obj << -/D [1836 0 R /XYZ 56.6929 334.6837 null] ->> endobj -1842 0 obj << -/D [1836 0 R /XYZ 56.6929 301.5645 null] ->> endobj 1835 0 obj << -/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F41 1218 0 R >> +/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1845 0 obj << -/Length 2868 +1843 0 obj << +/Length 3264 /Filter /FlateDecode >> stream -xÚµZÝsÜ6÷_±o'ÏdU‰%êòä$vϽ6¹³Ý›¹IóÀ]Ñ»šèc»ÒÚunî?€ -2ËvÊ)ÞÿÁE ùjfÙË“Ûn_ÔšV ª•Ùÿ>=žÿÚ²
C2‹§ó¾¯m>ú¾ÿé“Ýc9+û_“2¦ªydàË4 )Y¼TÉïÌ/A ê¢+ššFtñs«7†7Ïkÿnkz©†IaæÇIª`òÉ
r,.à$T—“„¦¥î»÷··—o‰nÍú°/º'êíÏCå5MׂcÅA8™Y´ŽY»Þ+“óp}ìUq"À7bµHDà‹Pì›>î7 "nFÑÏ_ŽCŒxÊzkÖ¬x&öÕ±42 -`UxNŸK²¾Xľ²djé½²£°W6õ¬z¡uw…êïqkjúБXbwX•Åšh°"î›=ššº©—úÐmØOwůýÒÔ†»ý>×Ícý -ié,ÌZ×µlÅK¥ Ȧ|š:1yV³êtaåŽÂ¤¥ã 6[ -,HYP£Ñ¶) ð-Þu€6»Žá±
yï {„,Ë~20KUðœö°Ê› -lŠù6÷¼–?È%änPù™ -”=Ë…Ý-J=Æp ~ d@0
u³çCíš:·1‡ÑNZ˜R·,èÆ&Ô;lé§Yš¼±LÎRžÌ&JÜsàÍ;u
µæ7ØžHšº¡%yiZ>“U´[Í3G–O!QBÆ‘¥G1ўĉ×j²D¼ó ón‹ª(õ¾|¢¯2@ÐõÁ -ª×ÐóÚI!êÅÊQJe<¹© -@:fLY |¦ÜÃq¶”ᆥ¡:§5s@@§h>ãJÄoËÎz0òÐ -AJ×OD”M½1ûר{AE5 ºÍÝ‹
è—§£í2jn/oÎ¥ôþu…Vxqýãx––-o¸nr¬ª¥ŒÁ£<´Ï\6 ùzQ \ý +xÚµ]sÛ6òÝ¿Bo•o,”ø $Oiê´î]Óœí>Ü$™EÑ'©”]ß]ÿû-° ~HTìNz£.¾»‹Å~A|ÀÏtÈiÔ,6Š…géö,˜aì‡3Ns~Òb8ë»Û³oßÈxf˜‰D4»½àÒ,КÏnWïç¯|õîöòú|!Â` ±óEóï®Þ~=?¯yûæê‡_¯_Çj~{õË[ì¾¾|sy}ùöõåù‚ëÃzAN,xsõK„~¸~õóϯ®Ï?ÞþtvyÛñ2ä—Ò2òùìýÇ`¶¶: ˜4:œ=@#`Ü1Ûž©P²PIé{Š³›³v£né”üB©Y¨E<!@Ágœ3†b$ÁаH +é$h™æ ' Á¼i“6oÚ<mé&)ˬhßȶYÙûu²Ý&µeÿÛ7ŠN)˜-„bFqå°O"Œ`§ÿص3 3#-å •°æ=ÎÈˬEèCÔ·û-YjlüQpP 4,8‹•ÄmÿFCˆt0 +¾Àõ./¬ÆØÖCÞn*òåïÛBÀZ;nµ_ñ +“ï£ÇL†JÏBÉ™2`žwàPëé¨cÑa\ Qú¢§Lj@À”wÓ,…ÎV Up˜ÈÎZ<_1,ÖàUNÉ@ižZÉ¿N Æ'd ¬ +¹äc¸0eZÒ_U{W¤œ?lòtCªãa â±ÙKʃAqæG›¹o_½»WØ·À÷D9œUkÀê)ž¸p/byR°" °—"ÅøjÁvC”Ç‚¡f<ŒM¿ó—+™ ”¿±à8CSi$AbØŠ‡¡xö ž
fÙ +»Ž;ü:²,€QÎ7
ÎC" žž¤Ì*P¤!:7b^á8Z4\…» ¢=¯ }°ÍšuÄ:;¬®‘a:ŽO›B AôÉ!`W&d‘ˆÕWkk‡q1Dy¬<Ï&ªßùËÚÂ?¡BÅ~Ê‹S^ŠT§0Ÿ²Àe1RŽãÁ+Š$K +=)œ³A'Ÿó{q8Gã¹,[èÎ +ÀøRpЄÇnÏ6ÉiC`±ÉÛüÞ-Ùëí]UãdJåò8ùOÚäëËðFbm¹!+WÞ–ûJÊÐê ”Lš + +i6®©Œ„Ö¡ø¼,´{²£JÆ®Î!§.0Á,· ÜëÄ`ÑÔŸ«v‚‡r5㲜—Îúe‹»Tã”zIp·Zù蟲qÇmf Ç ½äÆ%Ÿ‘ÏŸ(E‚ñU,Œ´½áŠÅÞƒ¹’$§’d[ï!<X->e_Yq cêKÍ6A°%ùÑ5²c½œVî·Ë¬þ2<œÿrJß Ïûóx±>ÍûHußIÚŸ_÷Ïòÿ±à«¢Ø«óˆŒ‰ÈÎ +‘}Q”"†ÂRðG8X¯g\^bºù‹át`£ŠÝ^ËêMgŽ€Åôq +’QfDÌñcMz‚‚#\Þ9‚š¼òòôIŒ sQ/lÉ;ac CAÞ•‹ƒùÃÆYé½ +{Ë5]Òv»ÉxN6 WœrfiUS»ª\Q;=i¨r%c,ÞЊ|²*hBpÔqôL‹a²ñ¥Š>Oì«,Ûú0‹çÙïî]Ô‚8uM¢Ÿ ÓÐlFB3š.1„˜ÂÄ>Ññ T4o ¯AVhæ7ù6/’ÚE“0ŠF endobj -1844 0 obj << +1842 0 obj << /Type /Page -/Contents 1845 0 R -/Resources 1843 0 R +/Contents 1843 0 R +/Resources 1841 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1830 0 R +/Parent 1829 0 R /Annots [ 1849 0 R ] >> endobj 1849 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[1 0 0] -/Rect [461.1985 616.4281 510.2452 628.4877] +/Rect [461.1985 234.8652 510.2452 246.9249] /Subtype /Link /A << /S /GoTo /D (DNSSEC) >> >> endobj +1844 0 obj << +/D [1842 0 R /XYZ 85.0394 794.5015 null] +>> endobj +562 0 obj << +/D [1842 0 R /XYZ 85.0394 769.5949 null] +>> endobj +1845 0 obj << +/D [1842 0 R /XYZ 85.0394 752.4085 null] +>> endobj +566 0 obj << +/D [1842 0 R /XYZ 85.0394 660.0457 null] +>> endobj 1846 0 obj << -/D [1844 0 R /XYZ 85.0394 794.5015 null] +/D [1842 0 R /XYZ 85.0394 629.9318 null] >> endobj 570 0 obj << -/D [1844 0 R /XYZ 85.0394 769.5949 null] +/D [1842 0 R /XYZ 85.0394 388.2848 null] >> endobj 1847 0 obj << -/D [1844 0 R /XYZ 85.0394 748.9522 null] +/D [1842 0 R /XYZ 85.0394 360.9804 null] >> endobj 574 0 obj << -/D [1844 0 R /XYZ 85.0394 667.6879 null] +/D [1842 0 R /XYZ 85.0394 283.5376 null] >> endobj 1848 0 obj << -/D [1844 0 R /XYZ 85.0394 636.0345 null] ->> endobj -578 0 obj << -/D [1844 0 R /XYZ 85.0394 425.9376 null] ->> endobj -1850 0 obj << -/D [1844 0 R /XYZ 85.0394 394.4436 null] ->> endobj -582 0 obj << -/D [1844 0 R /XYZ 85.0394 313.1793 null] ->> endobj -1477 0 obj << -/D [1844 0 R /XYZ 85.0394 281.526 null] +/D [1842 0 R /XYZ 85.0394 253.4237 null] >> endobj -1843 0 obj << +1841 0 obj << /Font << /F37 1026 0 R /F21 938 0 R /F41 1218 0 R /F22 961 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1853 0 obj << -/Length 3670 +1852 0 obj << +/Length 3794 /Filter /FlateDecode >> stream -xÚZ_sܶקÐ[O3>” -Æ'áÃ$Ÿuå¢m–Ôùï$Qe½Äi•šA_T
͹ÿÄ΀÷ûÖÏ·¤%¤“»\(›Z^è«¢ÆÇž‰<Ó)…Nž]‡‰ö ÷‹Ã¥ùþªcïoùUÑ ,ËË×wÕ -œd¢Œ‰¶j*¦r*¾}N¤5ùY»ç„ÝçÁ(¿ªÙ•D uoü³Rgvæ©Qÿ×<ôdE ÑêèÚëöŽ>‘³•ïiבMPÊ •¥kŠu¹ÀÏ*Îtžgv¤r LÌ"áÝ«~õZ€=¼ _&63i%¹6–68 Gr…ߘ\ÓLdYš>Ó,HÓÔ=6K?KG¿mS£ÔÀ!’hÏä,l<ød7ÞS`Ød¹az-›ÌÁ¤–çTô2³è½Ÿ£àYëÖ WÉ=óÕ_Jîò{ ÕmÁ¢ñzŠ
^9= ²U):P—MõtYôÅMÑ•ä΋fI
Ƕ§&“_ñšàX%µ¾x¥‚ÆŒº/›Â›vïhe× ?ó:0eý¼Þ %ì=ú‡m×ÓC_ËÈÆ‚:eÆè±æE„«•p‰ ÂõûÕtD÷¾êo©UÐÏ "Éêç ÍÈÎç ™¿•‹x¤\ -k²¯³•¤~K‘úªì·%óÙ©¼y÷þoçÿ¢öÕUWöl -¢©Å›îaEü.zÒV»·bÿD;_Û†[ŦüÉ5ï9ôÝM‚:xƒG¯sý Ùé˜í;4ºM¹¨¼‹g"Þ>yèãÔ -ƒanŸm¢™ ù`¢àѵIg—+– Äcäÿ ´6HÒk°—¤o’…'´èšµ¸«>7%†*Öû†Ç |³ëJ6“¢;°0¥0ŠÌÑOSÞ[Ì3ᘂ`‰Qs¹6T+œ®è©µi«†›mƒ~V[ `MyA, ÀÉ4{Ê’@Ëì€oØ’˜zÅÓueÙnb[k¡À!>#%™R‡;ÍS‚},¾„ÉZú]ƒ'dFØZYd*´ÌÌT¼ëÒ©f×¥S6z울.ì¸õ †5%½)Q%ðÕÃp ñ•ßmlZ€!ÓÀ7˧Â5CVç)èm×ò/`ì¨Ö›úaP†Q<Äp,J
›ŽøÆ9Æ7ÐCë‚Æt~èðøNê#û%MˆY??z:›_[17MÛSƒ,ÄOÖÒop.ôT4Ý}¹í^âJÉb/ ^rÆEì6„Ææ ÄÀ¤6î.LÌéæáÀ ‡¬qop]ß~Þ›wsðí×ê5¹È Ìý—žZG‚šA±O5Ê£ †t‹U_n¹ÉsjyQ*ð’^”¸¢¤{¸2† ·TãØ’ Q¦4iòlã·˜ª™ˆñ+P
¬dÑn‰ÍyÀŠ¼Ô#]Ø@æA+ ´î«º¦Ö
÷L¡oîÆ ËC¬ƒÆ^ r´ -ð´’{%Ž¦ p"l× -÷Nœ3z8î/®çÀ -ôäC%ü.n °k_ÉMø*áìÊÙnƒasɽâÏ)¡Ñ>e{ mK˜˜œ¦ 7ÕRú‰^PŒ%V:ê'?‰›’{¶UßûåÁ¸€–ZýüÔî¶MÁŸÐ_ÄjY.”ÌbÀßKZüÔÔ1i+Hé•S£ZŽñµœf"Ô2t"m×!4X%òô Ó]ã2–\âj'¥.ôÉwÕñÕ·PškÛ†F†žMÛuÕÍ0cñ=±³DGgr®§¹}=mAZ -ÊÐ,v=„¨ 5 ):Z;âž\pÛ•¡Ê– íyåÝ·biÏ: -© _iB½›•¿ -†i}òé%JKgXû<ˆ¯ uÑu iü¢u‹¢_ÜÎuœtaœÿ)–Ë-lù'?âSíý2öÿ÷eÌ'eÙõUã‘æï'¶-!VvÕ]9'øŽã ÊîS»ý„‰>¾Œ-éÃH<ä™^Râcl:þ -˜ø?Ô ¹ l¯æ)
xS¢ò¡y¶ÍAåÿÇüOD)Tã:^DrB)‰Ÿ>âkSÈ/¬¼0þÏçÃϦ½/·«OòÙª§~`8Á‚>„R82œX:±6ƒ‡2\õSª\'Éð¤r{GÙµá¢Ôdà›wï©ù*…_sp€GŒ ¹›*¥¸!ÊM9ªKdpËø¥âªBÑ!ððBÏ.ûéËM±…²«‹m >—„“‡c$ î± -yºnSWL‹V„}e¿Ût¡8Hk×Çôõ¶¸#2YÂ~=á*×Èvu_mê!ÓEqÆO|΋Åm ¤€ë²'4&*•‘³:-ˆÖë2UD)/^R}ly¬-%cm©H؃jÐmŠ÷sU]ªIN‚ §ãŠ¤òÆÑ<ÝîÆ£ñLìá|e6›½b
Á«æ %£‘ˆsrD ÂÚÜë @â;Ðv²axÀJ1¾«z Ôµd >xÂóåü18@:¹ï² ‘ PÙ£Mª!î³=¼Õ¡3ð/Y.}LKœ±Ï¹×¡„óæ »Õ1 (ÎÇ$ý• :ÃÃg³ŸxðÝx´@€4 âS<:H;„â “> -âÿýºÆçc’1]ƒ¬Ï†a¿¡l¾xþ@&ŧ˜tR¤nÊâ1UË1I“#U {ãGU
p(ÀVó U£x7AdѤtC
“ô
¯›žÇŒQëp€¤'‡WXüÈÒÙ
¤ÎÑM‰hBN˜<®ó&Ò¸€ý‹¡Ä7QOØ›M)>±4‡Ÿ jY®Š]Í+ñ¥&‰NHòç`w"Å+d[-|¾ˆ÷>öVUvœƒ]6û·…\ËÑiîøHpH'¶Tˆ¾¹ òÞ'¥§Eª‡kgqéáå&£ÿ‡ô,~¢GT„…Ö]»¿ö™Ê ý'h^) +×ìÜߺ¿·t‘€sÎ;¬>à©’¿¨„/Ö%–F«nMtÄkÂ/ IqøƶßgxÙ•u¹}aà¾Ä>7™Hà‡2FABaJZ³öwLorŒ‹Cb9«‹$\¹MD{!ÛñAn‚|T.A …?rÌeÀÔùpÊ}\Ÿ¢)Æ]€™»ž? ŸÉ½-xRCBˆ¯Â9 M{ä‚)¤Jx+4r 4Ò¤ß}ùt37Íñ¤Šß+,-R D˜)”§µ8·T ³þ?'›k€endstream +xÚZ[wܶ~ׯÐ[Wçx\Hhž GJ•&N++íéqü@íR#.¹Yr-+=ýïÁ xYQöÆíÙb‡¸ sùf@u*á§NS+¬×þ4ó‰H¥JOW›yú Þ}w¢¸Ï2vZŽ{}s}òÕ…ÉN½ðVÛÓëÛÑ\NHçÔéõúí +-Î`¹xõÓë‹Ëï~¾zy–%‹ëËŸ^Ÿ-u*—?œS뻫—?þøòêl©\ª¯þòòo×çWôÊò ß\¾þ–(ž ÏLzu~q~uþúÕùÙ»ëïOίû½Œ÷«¤Áüvòö<]ö¿?‘Âx—ž>À )”÷úts’¤F¤‰1‘R¼9ù{?áèm:+?%…6VÏP«S¥„OS=‘`ê…5ÚôÔ¤"¥\lò:_¬—÷ÅcK[}Óå]±)ꎅ¸Ë7›|‡ûþê"Q£ã‘§KŸ¨$L;ÉÂÜÿÆA§Ú¯drºìù‚Îm·+ë÷ԬˮÌ+ H„z¿¹)vŸn'ø:¬#ã +¤'oŸöû?, o…ïÞ…E—³»ûÏ×$®éa +=’&²§k9ÀÀ«U‘·<Õ¾¥èC9\‘§ÍÈùaä|5ÎÓ‚‘¶<ëÐë¦ü§±‘Ë `Æñß¡+¤•& å ÐÞ…ß’ +™^ IyoÆ@Š›±âÓóп5u@j2"Ü î3PË
<ãT„°€&ê`ãÙ˜u|») +N ô‡µ”Ö †8T‚ëãx"4ú²/´NC>šK£‘^¶Ìâà ¿ÊÛƒm±§#M‚%Öiœž:¤€»¼ž?> Þ˜£³$3ø¥Qb +<9`al¢=S‹xð_]?ÁJØ4‹È±a“9Xüó:vú3™RŒÝ¼*ú°K¦”ÌW—ßL"` È¢ÉY4ìÅ}Ü9ýàs‚5YŸNe H-¿ oRŽyìa×ÕÅ+j¤R©ÐµÉ±SçT•´UѶbÎÛ{T^ ÿ h˜9XP§ÔZó9ìù¤´Q¸á¼0 㼘T°ÇðèE¤XýB´ÙyÏá_ƒÊÍx¤L gÓ/³-“p¤8ûmÑî +泋Rùöõ›¿žÿ‹ÚWWmÁÎèD(eüÁrx[V²n\C³1-„§…ãNññÁ.:s EàÞÒß sÖEÔ?™ˆÎ í¶X•ÁÅó$Á>ísÀÇh †™;ÚDScž”jŠ@Nt!
Äk•ž…4²—dÐà Iª;r…:lºb-Æ_ÀÛ¬÷\‘,Æìû¤#olL)öº¥˜ü 22O¹jåÑgÍå¢?P£eŸ}™5eÍͦF? é3fÔ¡t2 À©¾˜ñ¬%–¹ ß°%ñì%/×E¹™Å¸F@šš ‘dªõLQ —ûXÝÇÅznòP +EF"%mP –êíT‚ëÂZ"¹.,„ö͉ë¢*hK]òŠÀú1V"CÂœè)fÅWTV J§zjøfÝàR¸'ókœé–Þ¶
¿)¹ +hËŽ3ɆkdQaF…øÆ{Æ7*j¡1]_qåV™gÎKY)Riþ@Râdôµ%sS7 5ÈBÂb
=GUebU +ÿ3`EÖ¤Šãð(\п*±J}—×\ÛÍb È|CÙwTñþŽzÉù R¶GêHÕ²p„=“Ó4áô¦\¡QÒUè Š±ÄJKtò“Ø +Uh¤ìÊ® Ûƒ?àjåôøµÙïÂU
þ!¡¿˜« ¤™Ð*þAÒâ׺š“¶†”^{=ªåØPËyd&b-ÃÈp-CƒÓ"K2Ý
ncÍ%®fRêòQŸ1ªN¨¾ÅÒ\ +ìÚ÷”mÓ¶åMßcñ±³FGg3®§ù¡ž¶â›.QKmƒëÔ>^©LbŒIÜL•“ô–c›Ã\m ¾¶šØ(5{«‡¶‘ô¤" ~f’ètñá§öÙ§²mœÆWhÎ&j
‰3 +ÊÐì? ¡¿ ñÀ n¸i‹XeK…ñòàò¿{h(ÄÒ™ñ—0ô¹J êý¢øX¸‹1œn6ZÒeg™ ‚þC³»ïQÄ_7»¡î-UÃé„O'Ìˇ
³‘o¨ ¯‚‘¶ŒºøiO\mLצpr7ÜpÅ“Wyħ‘††Ëו„Œg@¿Ë„tV}îH¥ðÞÄH7TЗZ9!3ï¦À2sˆ"깯
ð¢¯ÒëqY5Í=¤Îë¹¢™ƒÐ§úëéfË7F°@8<)ÀÒ ä{Ü_Z!mtب|ó±Üã—Ï£†D8í“Ïë>têïÈÉ.ñc‘É·PÄ{ŸArz AÒ¨xÁ aÞ RŠÒ©JÍT[Bø˜ñ¾Ð×öwßëêƒ(Û•hvï©ž#f»Ž¥EN§|7]_+ ”K“øf¼Åq’gq‡eC?.N+±7 endobj -1852 0 obj << +1851 0 obj << /Type /Page -/Contents 1853 0 R -/Resources 1851 0 R +/Contents 1852 0 R +/Resources 1850 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1830 0 R +/Parent 1829 0 R >> endobj -1854 0 obj << -/D [1852 0 R /XYZ 56.6929 794.5015 null] +1853 0 obj << +/D [1851 0 R /XYZ 56.6929 794.5015 null] >> endobj -586 0 obj << -/D [1852 0 R /XYZ 56.6929 385.917 null] +578 0 obj << +/D [1851 0 R /XYZ 56.6929 769.5949 null] >> endobj -1800 0 obj << -/D [1852 0 R /XYZ 56.6929 359.8019 null] +1854 0 obj << +/D [1851 0 R /XYZ 56.6929 749.4437 null] >> endobj -590 0 obj << -/D [1852 0 R /XYZ 56.6929 227.5779 null] +582 0 obj << +/D [1851 0 R /XYZ 56.6929 672.0805 null] >> endobj -1855 0 obj << -/D [1852 0 R /XYZ 56.6929 195.848 null] +1477 0 obj << +/D [1851 0 R /XYZ 56.6929 641.9666 null] >> endobj -1851 0 obj << -/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F41 1218 0 R /F39 1161 0 R /F48 1238 0 R >> +1850 0 obj << +/Font << /F37 1026 0 R /F21 938 0 R /F41 1218 0 R /F22 961 0 R /F39 1161 0 R /F48 1238 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1858 0 obj << -/Length 2085 +1857 0 obj << +/Length 2928 /Filter /FlateDecode >> stream -xÚksÛ¸ñ»~…&Ÿä™ÀwýÉÉ99ß4º«ã¶3Íe24Ùœ£HHÉQ;÷ß»‹]ð!ѱ}íè pß/Pj*᧦q ¤—øÓ(ñE U0ÍÖ9½ƒ½ÅgæîмêíÍäÍ{/š&" u8½YõhÅBƱšÞ,?ÏÞýxñËÍåõÙ\rŠ³yÊÙÛ«Å„IèñîçÅû«¿¾8‹üÙÍÕÏ B__¾¿¼¾\¼»<›«8Pð¾f -¼ðþꯗ}¸¾øøñâúìËÍO“Ë›V—¾¾Jz¨Èï“Ï_ät jÿ4‘ÂKâ`ú -zÁ¬Úž©x¶4[^®èÙÀ>è ”U2x$†]§%I‡úìµ/ü(â3u“6fmʦ&º9?ëü®Ì•RgiÙêW#„üYJˆ¬ÈÛ´Ršßw¦fÄC^Ýšþ‘º*öfÉÌÊNK8«ÊÆ|kZUAøé\iOxR -ƒpe(ц}>j¶L›”ˆ@Üê–ùÜå{Ã(´£==FN:óZžÉlŒªJ§"Ló-]ƒŒ¯9ˆµösˆým™6-—Ý6äÅÑvçFŒ×’ß¡G½)\ÿ°øÄ8Óì6¢¦Á ÓýxT_àÉéˆM“WeM ¶‚yÙ l?*ð]î9"§Á9{€9m m}€@ZÔA·,Ö®¶9ôr ω@ÐÆ‘~º ±:–úÇwŽ°Ú– ¸a(|O îfc“0I\:ôpoPW1, -Jæ6·åO‚.Å.+×k ~ÍþÙ+«îÀ¼Þ˜Œê5#ÓbgÌ™¸u ¥â<:>Wã´«³#F
Eä·9þ ÷FB®Äg±|çI€RƤôXšU -™Œzûzv!ðšz#¥+ é‚- -h8¾½¼õ*Ö¦oÜ™…Ë Æ,èj0×6‡
fûC.ÓE*(‹á1zWó½ãø^÷f˜þœž¡³þ XàV/dì ©MÅ.„È{å†ýW´þ5–Àí28ºè¾yCGnlò!TßW»bI0ß٬С8Ú´*MóPm뵎^ÎÛ×çíE‚D±%…ý½‰Ï ñǹ# -C¥adç& >+ô=oqh -xaLǃ&TR3+vK;í[~Ëå®ä¦ Ò z f¹¦ Uµ£ûª'É÷bˆKûac\¼ÔÀê|Œø*/ŽˆÏ\byûêœóy,FÿßTýÍ£Àéå‚»Ù>‡³ïÇ.êí<w,eÕôòÃp²Ü :w~Ç{›ÙçÕ®î¢aÔçô“G’fŠ×fµ«_3ÎP…Ÿ“eõ─0m¶yÖ8Ûý?“‚'ë6+hN¶¦ßÝBv«þ÷«ÇC=71t"â8JŽn·21œ'z‰qD_}/1úYc{Q‹^!s nÍ!ÆoáøÝUÉÖ„ØÊ>õ¿”ÈÙ‡mº^§Û‘V„.„ÔQtd(„¾ÒÇ3\~¶£ð—Å8T^n±ÏmnVsüÂqæUÁ¯6ƒ¾yÝ´ÙbŸ_Æ\|JsîÂû%dÇþ% -¸×‹c=þç€'áâaÌd¡Põ89–¼ý«áTôÿ-ºÈªendstream +xÚZYsÛF~ׯ`ùe¡* Ìcý¤$r¢ÔZÉ:ÊnÕ:.D-”I€!@)ÚýïÛ=݃ƒšÚ$Åô èéîù¦“™€_2ËM,T¡gY¡c#3[lÎÄìŒ}{–𜹟4 ÏúêæìÕ•ÍŠ¸He:»Yxå±Èódv³| }ýÝÅ7—ïÎçÒˆ(Ïç&ÑWW×ßPOA¯¸~sõíÏï.Î3 Ý\ýpMÝï.ß\¾»¼þúò|žä&÷%s8ò›«¿]õí»‹·o/Þ¸ùþìò¦×e¬o"*òëÙûb¶µ¿?±*r3{€†ˆ“¢³Í™6*6Z)ß³>ûéìï=ÃѨ{5d?£òØä2 P&³$‰ cäÄ‚¦ˆS%•³ *-
X@ÝWöü©+;»±uÇúîÊͦܡ¾¯Þèd´-bbcò̱#)óúX—‹/Í”‰óÔ˜Ù¼—&¿_¬Ë¶ý@óÿãæ‰éŒMÙ-îæ‹u’´~ž{”ËåζíG7ããºj;êÿïë)ŸdÄgiÛ®ªË®jêßÇl,ÔÎ.ö»¶º·ó¦^?ÒüGÛ~lv 놚Á·ßÌÓlQ–×ÔÇñ‡ìü¿›Ú~lý¶ ¾3˜ä?Äð×y¬3 +¦ž²^ñs[~²¼<›;ÛK3LJŠXÊÁÜÃç)'©ã4ÏsžÔŽ%K£ª¥gImó`w«ý[Y´²ewžDûÝy’G–úšÍô~"%?‘FÝ]É<׶›ru@vo·vwow<X·=Mo®"â×½Ý=¹¬V¸üÊ:)æ´aZÅE’Ó½¥K2Ë£¥ÝÚzYÕŸ¨é¬Ï‡»†§6<Ëö3LÇ¥ +]uÓÁm¹ëªÅ~]î<Û}kÉ8@¯š Oßl×΢ýrív]1/Òûl·ß2㇪»kö]àwå=±ht
=wç°2ãf³_w¬G-2g÷œòXrM—åâ.€ +•H°¬ƒ²m±™àÆa/! )Ät +•ÎŒ”q¢À<#&ʸp§=ç=Çù˜¥ wù` 6…ÔÃʽï>RèD)ÅŸ&dÏñ„Z&±Ha“'Bº +H8¬!1 +¶Ô`sSÇ`ÃŽ lØ8647ýÊGÁ¦b•)93 lKùã`cŽó1ËØÒX¥£…¿€µ4Îu–ýy2ö OÈþ0Îq÷&B ÃZøíÃ2ù©Ü{Äü8ÖR‘X?k“”ì© +ñ7Ë¡¸y¦õT¬•_´ +ÅþVb…û’1 !¬èïêrôÁuvÁ±8 ¶áê¯@¸†åb¯I¨üT,‡ªÚ·eí®ßC(¸ cËWSØ` YÕÃÄ +ª<Á<CO¼È?ÎÁ‹ WLTö÷›3…²åþAc
X5á€ôtnÅO]™èñðÕõt ì7vÉ|¯›ŽW÷!.åÒÄ-VÏýë÷ƒÐ›½K_P +ÈDÊð™` n‡=,"’ y[
ÛC €÷ÂW×Þs“È¥dbÑl¶ÕÚ.ç~ôòbÁIg=ƒv¸PNFÖ‡1°l ,V°Ãâ~Që"”+_’Ô»è + êÊâé'^bâspù¦¦g=G4[YÛ{»¦> È£IIoâýŽï±p”,Mt¿ó<»–ŒŒ¥O§³835»K
sAžxKO]ê!ˆáó10³!>½¤[Z +•ù1ÿ“düOñ¬È!Š"ôyxsÎ ”¸¹è5àËG/æ9€‹ÚãH* dQ3ûäL‹ª Ö¥Šû¢È%Û³# endobj -1857 0 obj << +1856 0 obj << /Type /Page -/Contents 1858 0 R -/Resources 1856 0 R +/Contents 1857 0 R +/Resources 1855 0 R /MediaBox [0 0 595.2756 841.8898] -/Parent 1830 0 R +/Parent 1829 0 R >> endobj -1859 0 obj << -/D [1857 0 R /XYZ 85.0394 794.5015 null] +1858 0 obj << +/D [1856 0 R /XYZ 85.0394 794.5015 null] >> endobj -594 0 obj << -/D [1857 0 R /XYZ 85.0394 146.1982 null] +586 0 obj << +/D [1856 0 R /XYZ 85.0394 769.5949 null] >> endobj -1716 0 obj << -/D [1857 0 R /XYZ 85.0394 118.9629 null] +1805 0 obj << +/D [1856 0 R /XYZ 85.0394 752.2115 null] >> endobj -1856 0 obj << -/Font << /F37 1026 0 R /F22 961 0 R /F21 938 0 R /F41 1218 0 R >> +590 0 obj << +/D [1856 0 R /XYZ 85.0394 622.2614 null] +>> endobj +1859 0 obj << +/D [1856 0 R /XYZ 85.0394 591.5303 null] +>> endobj +1855 0 obj << +/Font << /F37 1026 0 R /F21 938 0 R /F41 1218 0 R /F22 961 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1862 0 obj << -/Length 1168 +/Length 1239 /Filter /FlateDecode >> stream -xÚµX[sâ6~çWø:#Õ²ñmò”MIšnvKéSÊ0Š-5¶å•D)ûß+[6˜à$†°Ãx,tùt¾ãs“aª 2 º^0„Ž‰ #L{¦1WcW=TÍõ$ÐœõiÒûõÒöŒ -ôMèš -ÊsèÚ–]*ðv -©ûœé÷´P‚’ DZöay„%9¨†9Kh¸Ò] q¢›ë}ôÜ™ž;㋤ãB8}sK´ËC01IãÕ<Íg“ -3g\nú‹?Õg%²oC×wQ+¥®8åK‰^KÜB -D$ÁÕ"AB–Eâ@ad@0|x´Ìwdµ¯¦×Úï›[?¡"HH¶!€æÆ»®K +xÚµX[sÛ(~÷¯Ðä)Ùˆ.Ömú”vn:›´ëzŸ²"¡”$TÀvܺÿ}A€-Ùj"§Ýñx>¾s87äX¶ø9– À vc+ŒÇз ßJË‘m=ˆwoGŽžÌ$Оõz6:¿ôB+†qàÖ,oaEÐŽ"Çše·§tá™@°Oß¼¿¹¼zû÷ôâ, ŸÎ®Þߜ׷O/¯þœ¨ÖÛéÅõõÅô 8‘ùãâÃl2U¯ñúêæw5«Ç@§“ËÉtrófrv7{7šÌ¶²´åulO +òet{g[™ûÝȆ^ ùÖJtlèık•£±ïAìyf¤} ýµl½m–öêϱ¡ënÇNŸýžë5 +üþJÊ €€ëÁرÇÍè£Õlûô=rD«¤8QýoÍtχQàûp û¾:‹ós5å:áé'ÕLŠB5Ò£Š3Õ©WRÎD™êܯՓB†’Bw;è5EKLJ…}ÓhÐÙö›æT_©Ö¾ì^g£)Ê ©6Eé‚2¼Ô]†è§ºÃ‰zEuîå¦ÑHeÔñ$”,q¦7K Æ)N¹ÑÝî¼H¾Ó¢¦•”u`JʧÔú•TzAJ*žà +W±*ôÉÔ‹û§¦—¤)b ßzÝ'ÂäU†±Ã>i±é”Ã( +ã.7¾®‘1&”ûªO€ {àÀœÌîOÔ°‡ï´m ìY³Ûzy~é:Öv8—›Các¡·
?n(BŠ½U¡Œ yÂQ)Î_G š”eB^Ç%å‘ûÐñ|oOQ²5¯’RwoÓ"a쮣1m* ‰iìvë›d¾,]wý#Ë„y±yãAó3¾õ–æy7 ó~¬sËiR± Ñ_ÌvQgâ´~¨‚5®¢[Ô„…Mg 5w®æÎéÂXò-„ðîõ0DPÅy÷$q=—’hÌšP¾ — ½ƒ²‘ȃA$sHHCqš‡ n÷ +d¨HÖ¦ìµaÆŽ$ 8Œ$ÇGKQn~FëC5ý¨ý¼¹õÉÇD1¥¼ ¸ ·ÜuÓ endobj 1861 0 obj << /Type /Page @@ -8529,17 +8534,26 @@ endobj 1863 0 obj << /D [1861 0 R /XYZ 56.6929 794.5015 null] >> endobj +594 0 obj << +/D [1861 0 R /XYZ 56.6929 540.8995 null] +>> endobj +1724 0 obj << +/D [1861 0 R /XYZ 56.6929 513.5566 null] +>> endobj 1860 0 obj << -/Font << /F37 1026 0 R /F41 1218 0 R /F22 961 0 R >> +/Font << /F37 1026 0 R /F41 1218 0 R /F21 938 0 R /F22 961 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1867 0 obj << -/Length 1132 +/Length 1226 /Filter /FlateDecode >> stream -xÚÍXßsâ6~ç¯ðcèŒK²,kî)—’47=®¥ô)Í0Ž-'îÛ'‰&ä¸ÿ½òÀC ÜM; #Yö~Úý´»Z Y¶ù!Ë£Ð&ܱw µµ‚i϶ Ì»ë ª¿Ë@ó«÷ãÞùa‡ÜÅ®5ŽX ´=Yãðöìò—‹ßƃQ `jŸ¹°¨kŸ½¿þ\ðª¹ü4¼º¹þstÑgÎÙøæÓ°
®£ÁðrÐÈ£ÈÈãa‡ÀÕͯƒªw=ºøøñbÔ¿è
Æ+[šö"›†|éÝÞÙVhÌþг!á µžÌƒ
çØšö J uYŽ$½?z¿¯ -ƒÍ¬ +xÚµX]s£6}÷¯à1îŒT$ñ¥ÉS6uÒìt³[×}r= "¡ÁˆEò&Îzÿ{;¸'; ÆB £s¯î¹W¦ú!ó¡I¨e¸Ô‚¶‰l#X Lã^=» ê P¿šo}˜ ~½"®A!u°cL¢–MÏCÆ$œž]þ~ñe2¶Í3í˜g nnÓ=Tÿ]~¾½º¹þ{|1t³ÉÍç[Ý= ]Æ£ÛËÑ ÏFj<® ¸ºùc¤[×ã‹OŸ.ÆÃÙäã`4ÙØÒ´™¤0äë`:3P™ýq`BB=ÛxR7&D”bc1°lm‹º'ü5øsØxZmóŸM<h{Ømq …D¦©E]õ)t&¥§Cà˜æ™ˆïºÒ8½r•1Ý›.w,×ísý7+lV„ µmÜ }éßù¢,d®Ð:^Ä)ÈY”3ñ +²:5ö÷¢ŸÞ¦ž8›Ë[É6ã¹Üô7³šaìèxnµ¸+Nù!¬·Ø›gÇ HE¦Û0PA›®#?NÖj½yΊÅî^ób?YfÍöœg2®¥Ûaµ£89±búB²¼^HOÉkk’dÏrûO½Lù—/óÔOºryUx«ñj ñR¤Zs‘± ÃìUöØÚPhg Ź½¬¨pX.v"õýÝñs”ƒ“7Aåè(ç Uú#•¨YÔ‘ÚG®%Œ\d Olí§NŠ`Ïžþ¹GG©8âñﯳr9¬Q/Ö»+ẌlZÈÝ×zË$m–ª ½ÙjͶy~Dz©Šö4s`î JÏ%ü¾¡‡v‘uÉq¨t^W©¶Å»@|)ßN©ØÛö t¨¥ ãšei/<«aÏYñn é +Ý´ž +„,ñ«Aª.ó4}d¹¥î¿3È–w›¨mºéP»gúÙ,ˆP©<hì”âÌjä͵ŸK!Á® k»ú¥|dC꺎Ñèß +ëXÒ奾¥‰Ô…'øæ4©:¯©Rb§ü|((Y¨Z§QÅ&˜¸ôÀ~^‚^nm ý·b“B¬R×]Þ+®G]‹1‚È5îtK ® ]ÓsŽ'î¶Ð°(´uÚ¿}Þ§†VJí¤Ç…ÄÅÖ! ØoS‚K ±(=Îò¸¶¢ú :@A\ Dµ¬Kñ‰„ô¥ªçq NÝMt;bj;“#ª\Òv‚¦®j¢7Ÿ×m3-ž‡7Gq7Žâˆé@S·&UHÑ>óÍÁÞkêÿqA”½endstream endobj 1866 0 obj << /Type /Page @@ -8556,16 +8570,12 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1871 0 obj << -/Length 1134 +/Length 1013 /Filter /FlateDecode >> stream -xÚÍXKsÛ6¾ëWð(u† Äk|r Ùu¦qE¹Tñh( ²9¥H… ìªMþ{ -¼ñbÒg -'ŸAØ_…:W™vÉ:Ír'Fë©m\»Ö?îóRØZ6#].ø^¯ ‹Ìòã!JA€¸±! )ÅNq‡;îMûSmÝ,#\×ú‘“NJƒ -Ü°»ú¬·w~Ÿ&aeád ‡Z×w^ñ]°ùv]ûØÄÌÜ„Îfvr€Ž0ŽÓ{ÿÛFeÛÖ…jóKi=]…ùü¶q™þx?Zew&äK¥[À“ömÜäË\™øKuY¦:õØõ‡Ñ«ï?òó2ÍîÃlqr€£rÊî -z - w¯ŠòBpDãÆt +xÚÍX]sÚ8}çWøvFŠ>,Ûš<¥Y’Òii˲O,Ã8 OM%Ñ”–ü÷•±
6˜‚¡;ÙÉd,®¬sÏ=ºâ^„-dþ°Å èpÂ-—Û!̬ñ¬¬G3wßÀÙ; ßzÓo\ÝQ×â;ıúÓ–‘ça«?4 H`Ë æíÇî]çþïÞM˵›ýÎÇn †šw÷íttß»ùðá¦×Øc¸yûöæS¿ÝK§œ ãM§ûgjáéã +õt0©5ZÌ „LÇ×éc˜„lüŒ!gŒ”@üï¿dÍDËe-¼Ï£.D™Å"Ô˜ùJç‹–Bb9Šâ“1~ƒ(*öÖáq@(äÙå ^®s ùtbýGYdÉhùy ƒqè+5L?ü\/„ÕËy¶â)ˆôuU Ó Ì^QZÑcNùpÈŠG_qâ(\ÖP®´ã'1þ’˜Tjø1ôìËh5õƒp<F±Æ†w׫«ôÙu:èÌ桘‰H‹ ¬Ô™TêL/Õ™ìè¬ôâáWâùa?ƒ¯ !—9jjŸLÌ‘R£™¯ÇO£0PY\/'(YÀ4;r ,ù ô‹Ì üp1/ŽGñ<I¤““æüÜ+9”ô'|û%_Ér0¥Qu«ŒßõJúÏÇ)Åc@Œ¢“-JÕjH¥k)›á©JÛŸÍóQ’™m K½±' †%7ÂÒQ{9YuÄÁÏm˜¥e…¼\• ' 1cÐÆ.ÙѯÂI¿/"K3nü—… ˜+ƒ»¾÷*¡–~¤¦B‚`bR"ˆÎ.e ¤šÕ endobj 1870 0 obj << /Type /Page @@ -8577,52 +8587,55 @@ endobj 1872 0 obj << /D [1870 0 R /XYZ 56.6929 794.5015 null] >> endobj -598 0 obj << -/D [1870 0 R /XYZ 56.6929 254.285 null] ->> endobj -1873 0 obj << -/D [1870 0 R /XYZ 56.6929 224.1711 null] ->> endobj -602 0 obj << -/D [1870 0 R /XYZ 56.6929 224.1711 null] ->> endobj -1874 0 obj << -/D [1870 0 R /XYZ 56.6929 199.7598 null] ->> endobj -1875 0 obj << -/D [1870 0 R /XYZ 56.6929 199.7598 null] ->> endobj -1876 0 obj << -/D [1870 0 R /XYZ 56.6929 187.8046 null] ->> endobj 1869 0 obj << -/Font << /F37 1026 0 R /F41 1218 0 R /F21 938 0 R /F22 961 0 R >> +/Font << /F37 1026 0 R /F41 1218 0 R /F22 961 0 R >> /ProcSet [ /PDF /Text ] >> endobj -1879 0 obj << -/Length 2617 +1875 0 obj << +/Length 2961 /Filter /FlateDecode >> stream -xÚ¥]sÛ6òÝ¿BôLÄ€ -<
c›Å(°0QíïJéo¤_)–÷ŒØ¶|þºÿ…g‹å’Ñ]çW®d» uåþ™¥‰~Sô’Cœ0·hfR3׋ÞmÐâhƒa·,zYVñ¤…õ»ã˜ëNñ"6F_EzD 2Š².·eã·*FuמóÄ^ümSlñöâ¡4©{3¯)ÂãY 0 -> ·,WÅP÷ Xûý¾hº•_P8±2˜e9%œµ[`7‚]»Çû¤:H cÚ†G - -Éœ»‚ªf%éO¹8 -ˆ ž~ð¨#ãF»ûMWeÑc¼¯“rl]2?9= +xÚ¥]sÛ¸ñÝ¿BôLÄ€ ’“§\ÎN}Óø®Žï¥i&KÅ Eª"E×éï~¢lú¦×LÆÃÅb±X,öJ2Sð/™•y¬t•ÍŠ*‹s•ä³ÅæBÍ aîýE"4sO4 SýpñúZ³*®Ljf÷«¯2Ve™Ìî—Ÿ¢wyûËýÕÝå<ÍUdâËynTôÃÍ팩øóîçÛë›÷¿Þ½½,²èþæç[Fß]]_Ý]ݾ»ºœ'ežÀúT8¼°àúæ¯W ½¿{ûáÃÛ»ËÏ÷?]\݇³ŒÏ›(ù×ŧÏj¶„cÿt¡b]•ùì +þ•=+Û2Ú6}7åpà†s
ªÅ„Ó3ˆ›ÒvÝ!X†›"<îÕƒpCÑGÆ-ÝÊî›áßþ°\…Ö«]“Á,'=Å~¾q‹$âôi”kÆPZ/« +„óâ'OâZ)Ü7Ú#³œ¨&L‰%rê«Žúq=ð.ÛÆ.œÏ NêŠTÅYž>é®Ä“!.Cr 8¿â¨n)0 +Å ¬Ãº&3ÑGÑãSÛ–ð™0Î)Dü¶“Äjy ɳ]2…$Î¥¢YIöS>ŒâÇÛoêȸ÷Àtåì° ãCiµ˜Ôcçs©¸ÉéY³Æx†U“ñÔjÒ +„–ú&B¯Àb€)( ê±Ù ¾éìÉMO] +½UXùÇ +ʱ)×Mœóð#ñ Š?Ae)‡VþiÁ™¢B¢Dˆ ˜S1¾Ég¶O•Î•|žû(j8µ<ß(™°Æ× * =é +¥)̼ôJÆ™eü,}ª?Cîë%þª`ˆˆä3å*œ)WÏÎôGÙQ•!;ªR²# +¥^ì©ìÃ1å0\€¢Ýùã>ÓÐeNêèšó¼ñ
à+~+“Š endobj -1878 0 obj << +1874 0 obj << /Type /Page -/Contents 1879 0 R -/Resources 1877 0 R +/Contents 1875 0 R +/Resources 1873 0 R /MediaBox [0 0 595.2756 841.8898] /Parent 1864 0 R >> endobj -1880 0 obj << -/D [1878 0 R /XYZ 85.0394 794.5015 null] +1876 0 obj << +/D [1874 0 R /XYZ 85.0394 794.5015 null] +>> endobj +598 0 obj << +/D [1874 0 R /XYZ 85.0394 648.8056 null] >> endobj 1877 0 obj << -/Font << /F37 1026 0 R /F41 1218 0 R /F22 961 0 R /F21 938 0 R >> +/D [1874 0 R /XYZ 85.0394 618.6917 null] +>> endobj +602 0 obj << +/D [1874 0 R /XYZ 85.0394 618.6917 null] +>> endobj +1878 0 obj << +/D [1874 0 R /XYZ 85.0394 594.2803 null] +>> endobj +1879 0 obj << +/D [1874 0 R /XYZ 85.0394 594.2803 null] +>> endobj +1880 0 obj << +/D [1874 0 R /XYZ 85.0394 582.3251 null] +>> endobj +1873 0 obj << +/Font << /F37 1026 0 R /F41 1218 0 R /F21 938 0 R /F22 961 0 R >> /ProcSet [ /PDF /Text ] >> endobj 1883 0 obj << @@ -9160,19 +9173,23 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 1958 0 obj << -/Length 2356 +/Length 2360 /Filter /FlateDecode >> stream -xÚÕZKsã6¾ûWð°i+‚ñ&x[elÏ:Éx¼ŠS9ÌÎ’èk$Réqüï·
R”LùQÖ¤²å*h4Þß×Ý -Šÿå\fË9"KIXm_×:†ÍÓM ¿´ÇÝʘ •ìöJóÍÃüó/E¹ -7Èæ?øÕÂÒ5sØóΪ§w54°fP-Ê;ß ä§¦´xªô;Œ¹´¢´_„æÌ€ÕK6Fã ö7ƽݘ Xi@ ›E ÀÓHj¾°Í*E»õÃ× í‘–ƒUYÕ$¹«²Û»%I `(M—ËòÞŠtBVÊ"ôô5{ É:ÛôaŠ© le‰© -°üa8ÒÂc™Î(è,B†ºí…ßînU8 ¨ÛöÝU:8 ©ì ŠAIÙiÝAæ™›¯¸=€J!$Xî^p°`DlÃŒ{” Æ cVël–û#÷u TÏ;±Ìq‹Éb´ïGv†ÑB- R†§Ùæ´ª³M^}™ I jjoq07K«ŒíÛnm€`3¢®Å{›UÚ1¾ -æX"¸~E—ÔB=a˜-gškõ´a¶±a‰¶¢%Ru7}¡m–à[Û ?h„U¾Ê—醄 -+Ý^¬k<{zƧu 3¾'{:°<.{Žêsp¾ÂZó {¸c&VìÝLÍk¼ÜS;щ/òø|ÒŸ³Í”nheSÕâÌ—¶ ê0òiWÌÓЦK 'Ñ3[RâÅ<fÖPÔ"̯C,(‘ËyŒfèzE5]¯ã¯ãº^‡ðéݺ×&4ÔŠûIcƒËA…†46Ô ¤± —ƒºL캜žÝ^ÞþÒtÑø7&JbhÍŸy’Ó0…8‰“i^ét¾3sä÷gŽh^ûa$(!a¤”„NÙ«auÇ÷È«Éî,º]ßÓ³º»ˆŒÃS£í¥‘Ñ<Dn ÐzÔ¹IzÆÁrC£žášŽ=OÄÿZuñy, •0É}EŸ¡‰9L$ðÑ ¿<M$åÆ¥$,Õ³õËœÏñƒÐMhâ_¤]¸±¢x‘~Ë(7ÍèBØ’}ËSÊܼ»¦Œw -·DÛ• åE^çiݪ]^SšÎ焈ª"A^x -lÛ‚îU¯ŸMØxr=Lä` \Š -l¼¢àEpþè—5ø½WÈ‚Zgîÿ†X¶Dendstream +xÚÕZKsã6¾ûWð°i+‚ñ&x[elÏ:Éx¼Š·öÍ’èk$Réqüï·
R”DùQÖTeËUÐh¼¿¯»JD þDd,³‰L¢8ÑÌpa¢ÙêŒG_ îã™:£FiÔÕúñîìüJÅQÂ+mtwßéË1îæ¿
,“l=ðÁ‡Ï7W× ÿ=c=¸»þ|3 IÃW׿\RîãdüéÓx2 gÄàÃ?Ç·w—ª²¡ ¯o.H’Pr¤ÓÉåÕåäòæÃåð÷»ŸÎ.ïÚµt×+¸Â…üqöÛï<šÃ²:ãL%ÎDPàL$‰ŒVgÚ(f´RdyöëÙ¿Ú;µ¾ißþi.˜FE#! gÝñqi ㆬSÌ:»?ìHð„Aop(Öi¦„ŽÛCÑ¢s(B¦] Å&aVIå¥Ê–÷¸3çWRvtcΩptTº[äœE6C7xXfX°ƒUZÏY¨y\dåêE¨/ÒUF¢i–_Hø°ž§u6'ùNØfcÂæ°Ä韕E5()©å=¥Aùü +ör;m›0)D ¦Ï¡]^?õ¬ÏÆu¢‚â9—ÙrŽÈRVÛ×µŽaótÓÂ/í°[3¡’Ý^i¾y˜þ¥(7CáÙü¿ZXºf{ÞYõô¡†Ö ªEùà;ü4ÔO•~‡1—V”öï‹Ðœ°zÍÆhœÃþÆX£·³+
èãq³è#xIÀ¶Y¥h·±~Zã´ =Òr°*«š$Uvÿ°$) ¥érY>z@‘NÈÊAY„ž¾fO$Yg›>L2•ƒ,1U–? GZx,ÓEÈP· ½ðÛÝ +'uÛ¾»JG'!• ÔC1();
¢‡5È<S`ó·GP)„ËÝ+Œˆm˜ñH˜òÂ8aÌjÍrä¾Îƒêð¼Ë ·x,ÖJûþþÞ{ä`g¸Ñ-Ñ’ exZmN«:ÛäÕW ’䡦ös³´ÊؾíÖØ6#êZ¼÷YQ¥ Sà«`ÞŠ%‚ë7tI-Ô3†Ùr¦¹VÏf–h+Z"UÓWÚf ±µÍ°ñƒFXå«|™nH`ï9OT9ù<¥e:±ýÈþœe뚨iM½Ãlçå*Í‹0tyß3š·ÿæ"¸‚8˪¤œç ¤Á<ƒ”μïX÷‘¢NŠ…;_ +sÆè‘’ÀR÷âûôHÁ\Y,ŸÂ Ìøš>ÌŒ„Ô,‰Íž‹|ª\„ñ[ļ 'Û8LÀƱyK¤×´8 +[ `íó8‘£M²Ñ«jô†`ÏÅj Ãé¥_³ O)ùÏÐ0Øóò±"•U:[äEFµëM^Ìòuº¤"šýU:ê
ð°Ñßþ1¹ ÿò‰<$ÜC˜µí 9x«‚²^ŸtÓbN²6AãÞXdU¿e I +ˆÄŒ¢íŸ‘ÇO—+ªî D~ Äíl°ü6f WÎñun‡Áh3Þ¯”rÍz”Š)(Q1Å{ª “çTð|…tÇ[cè;}ëÞHao2ÏG +JˆƒØøaºP| ¼÷“œ”1 “–/¸`ca +àéZÆ4öéÿ6J +¢’¼Tzh@Ú` ²ž*¨TiXš5¥ä +^ZRÚó ëß³@¼êIãň8ÜÓ¼BXfý(&æÞm™ƒB +)Ý^œk<szÆ?r•²ˆQûª€ûM4êàó´4:©ãÁù +kÍ 4⎙XQÄÿu35oq=pYí„(¾XäóiHÎ6Sº¦•MU 8_ÚR©ÉH¬Ü3ÏC›.œTÄ#ÌlÙ‰·wr?˜
C¤R~ˆa0¿Ã D~çÖÐõŠjº®Ç5®Çu] Ó‡u¯qh8÷³Ç¿ƒ +
{l 8Øc;~ t£Øõ;=»½Áõ±GÆÝ{ÄéØÓ…å_˜=*‰¡5áNÃâ$N:ìy£úΒߟB¢yû Ì‘ „Ì‘RLeoä†Õ o$Cä&»³èv¼QÏêvn&2¶—OFóÇBëcC 'éQË
Ÿz†kž;ö|O1"Eé“ó© ÔSñI¨„Inìú MÌqFûfø‘àyF)—0.%ªž_çŽÆ$|›n¢ÿPíÂEÅ‹ô[F¹iFÏß]Àì[žRæîÃ-e¼K@%Ï
”<.òÙ‚²Gž «Z¥ nþY‘¼^¾¡pOü]Q‰ÐÁQ^äužÖÚõ-¥é|NÈ*ä…ç¶-èÞôú”ñÅÅ„'·ÃDÆá ¦(½¾µÝ*ø×Íjβ endobj 1957 0 obj << /Type /Page @@ -9602,7 +9619,7 @@ endobj 670 0 obj << /D [2022 0 R /XYZ 56.6929 306.3415 null] >> endobj -1799 0 obj << +1797 0 obj << /D [2022 0 R /XYZ 56.6929 275.1221 null] >> endobj 2021 0 obj << @@ -9662,7 +9679,7 @@ endobj 678 0 obj << /D [2027 0 R /XYZ 85.0394 255.5751 null] >> endobj -1670 0 obj << +1669 0 obj << /D [2027 0 R /XYZ 85.0394 232.5802 null] >> endobj 2026 0 obj << @@ -11513,7 +11530,7 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 2424 0 obj << -/Length 2027 +/Length 2037 /Filter /FlateDecode >> stream @@ -11528,7 +11545,7 @@ xÚµËrÛ8ò®¯Ðm¥ª!‚A‚G%–³šÉØ^SÙÚL´I¬¡H
I9ãýúm<H‘,';µ¥ƒ€F³»Ñï™bø‘)PÑhF>â˜ð 9ôx¹«/WBçÁ_[Š¤[Ñn•8¸¨xó»¾&Éw®Ä&`„ÀÁ˜Eî 7ì£liº¤8D³A Û,—¯Z ÙÀØÁb=W,Öb½n1~PÏ3˜È:;ý¢y[Ñt¶ê”/‰r ZyNþßÖûâÕÝjã &,„9ó‡¹}“'uýýn½}SêÖ…Æô`ÒTã÷ˆÞâëµ 8 9ãÿK‚ßçô8¬$TMç„Œ*ÉÍ2þð¸zX¯îï Õlœí éy”†G&$ô0~jŽ'ÝVRnÛ#Ìnd.wmn…ƒ8Ûº±ƒµª7±mº· Oz±‘Ë@7¦ÕLÏ_>>¶u>M,߶‹²xºi…ãÇÛÀ.ÌÊNNSÏ^bа|(>Ç‘-uº‰LŽ»ìYÚ’úQ2Õ£*øjí¸×F¸|ɱi„0¸"ºžkúXæáÅ•k:,=D“1Ë ='ùIœrë¬É! -ê¼áø55D$¤m¥=œZÞO–UYœé +ê¼áø55D$¤m¥=œZÞO–UYœé endobj 2423 0 obj << /Type /Page @@ -11611,18 +11628,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 2445 0 obj << -/Length 2546 +/Length 2556 /Filter /FlateDecode >> stream -xÚµßs›ÌñÝ…fúPy&û \Þ[Iü%±]K™6Mò€²#P²ëþõÝ»½C€”Nç=°ÜííîíïEtDàGG2ðÅÔ(T—„ÊÑbuFF°÷ñŒZ Ï!ym¬÷ó³· x8R¾ -X0š/[´"ŸD Í“ ã÷¾ðÏ_^ÏfÓ ïóôû‡»›¯_&ï§_Î=*£(Ono§×—Wÿ8÷˜$p2þ:¹þ6ù‚k·çŠ' §³ó_ó?ΦóF¸ö(áZ²ýøEF Üã3âsÉÑ ¼Ÿ*ÅF«3!¹/çn%?›ý!ØÚ5GB‰ÏxÀ4Âèˆ -Ÿ Øl«D*ŸE!s*‹¸aRTUºðžÒ×å¦\åñ}šëûK_W8p ¯R½ÔYK߀Ŕ/‰šn;§ÑØ4úûÉXˆšaÀEà!-ÒM\geïuYæ–#܇úJJfYòÀ”Š ËÙkQ®«¬ê…S?Œ> -4 AÚ%R¸“ æöCJƒ‘×&a,è€Ë5X}E4J@Ýž½pÝ‘ <ôE$ðÕ‡#ô8=¢@J‹õÃã¿æ/ ->QÀ-vœ?”›¬~\
ÐL%ÂÀb6D'D»"$q¾-—Ë*ÈôÁEŸìb€,¸ZèGâÕk,
gy\U”Áå¢(ê¾üsäž$›Y‘ž4XCqy’â2 †î-|F¬Oïc]
Pî^ëSN WRçRѵÍï©aûù¤û%Ù&]ÔåæuÈý„ 0Iû·*Nj©€œT¿®‡4/À û4oÿ YŸ$»Þ”u¹(óßõn0LBHT„Îô·eÞsÂú¤ÌTË [è*×£÷|’^ž>¦µáh~µP±+<2à1ø4R•eÎ_NgwW·ó«›ëæT·\:XHféýDgô‡´®Î!_Q]¹,ô‰¡ú1Eà!{N
2›Îͪ«Šøãc±y]×%±ÁH^ði‰ÅE‚Àý6Ë“ {~Âò´BfËrƒQë¤îm»ðþ$’ÌÒÅÖ1²…–é|‹+|&©fQ¤ ¾f¶@ß}°” „J{¢Hz{‚ph¾lCA#hB¬óÇ!ç‚ŠL¹ˆZ>`ø<p8å‰5ÏD` -XÉ*|Vët‘é˜ -žÓëùÕü;îîdPXõÛtãª*™uox·=©¢ˆÉÆ¥¹éN„ ïvïÛlz§/ËÚ7G®³\ƒ × áP‡ …zÓ㇎âÍüS›ÓN->.â°hÀf<ÔŒ›ñ^ìxû×ÖÌ8²aè³0 Ç#¶…t8` ’‰×‹½Îv Gù9œ}~m?™O#uø]tg]fWe’¾Ãßµ¶ˆm.óÄ«ê×ÜÖv×;j—$hÑr[»#ŽjZÇ0|Ķڿ·Ëͼÿ•´È]€þÞgTýÒgj÷?^ÓN¦¦¿b‘o“_lù2ŸóþZáÚýÄþG¨WÓ8ãáÞ9w+\®`¶2‡|·_lw$Ô®ìÙ’ ÚŠãÜ}€¤óŠFIŒöü¬ÿ:僟¯Hóîÿþ›x÷§¸} ElعX=„Ø -¥µNÛ û‡ò¾ìÿƒ"¿Ãendstream +xÚµÛrÛºñÝ_¡™>Tž \I"oŽ$>Il×r¦M“<Ð"esL‘ªHÙu¿¾ ,À›()ÎϘ `±»Xì¢t"?PLMB%|I¨œ,V'dò +®âUªç:ëè°˜òE QÓ]b§4š:‚F? Âk@pxH‹t×YYà¸.ËÜr„óP_IÉ,K ø‘R‘a9-Êu•UÃKáÔ£€O
HvD‰Â$¨y†ýÒ`âuI :br
ÖPP·gÏ\[”‡¾ˆ„ +•vG‘ ÖáP|Ù‚‚FP*„˜!ï ÇŒ 22å"ê8øÈ…°ÀçÃ)—ÀH„¨y&[PÀLVá·Z§‹LŸÀ +dt4VÛª¶P\/ ³Ùoä4JÓYúOYXHߌY{yÌ€‚¹$!¡rcQÿ’po·4ÊìEܧYñЫ–ÒÄÿéÚøÃnÝj žÄ—@
Š+0wë DÑìšrDvo–@=¦äX9Ò•‰2 +U*„ÃýB5(C©º6BÁHÀTó4‡¤5ɘÕ1 +¨±T³ð ç[ –˱@FC(ÛÅž’«' (P—ò¬qÙ{G¾hù˜ïíüìë…|c2øð +ûf(óOgÆw ›^ÌÏ +ôê![òè°h
Öˆl½8J$ +¤m¸`É5\¸m¼á¢¡d£ïý~‹øBqÞo¸€l +‘ e´…>pýçõÕ gtÄÃ
±+9CÍŠõKÎ&+æZ~eŸhô”&ôyöý- ÁGGL÷ÌXŸtoeÐ +øήî.ï¾ãj+ƒÂ¬ß¥WU¹È¬yÃØÖ¤Š"&›>–æ¤-ï‘rïÛ|v«Ëº'G®³\ƒ× áP‡ ‰z3à‡ Žâõݧ.§V->Nºö0`m{¨7í! l{iGë×NÏ8æ²aè³0 ‡=¶ƒ´ßa ’ñ×óÊV ù9œ]~];™O#õø÷{fWe’¾Ãß•¶ˆm‚.óÄ«ê×ÜævW;ÚŽ_ßh¹ÝG5ch>b›íßÛé¦
Þ}oå-rç ¿÷Þª 5}¦Ú ð˜¶3¥Ðý‹|›¤8°é˼ûýµÂ¹Ú‰ý1QÏ$¦pÆ̓}îT8]Aoe6'8¶O»í ¹+{¶ä‚®â8w/µ€Tb\Ñ(‰ÑþžßŒõo¬|ô‹4zÿ÷ïÉí¯ç"ôy±qãb!Ô +`+”Ö:l×{ì/Ï»²ÿ#ÉRendstream endobj 2444 0 obj << /Type /Page @@ -11743,26 +11763,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 2469 0 obj << -/Length 3022 +/Length 3070 /Filter /FlateDecode >> stream -xÚ¥Évã6òî¯ð-ô{ƒ•KæäØN·ÓwOKyo² ( ¶ù"KŠIµã|ýÔŠ”iõaì -@U(Ô -JŸ*øק…O•-Ýi^ºÔ+íO'êô æÞhÁ™D¤I ëûÙÉ·?Øü´LËÌd§³»Þ^EªŠBŸÎ–¿%Ÿ>]ß^Ýü÷lb¼J¾OÏ&^©ä§‹ÛŸ/þÍcŸÎJ“\¼»žžMtYø<¢e*¹ºN¯/' ®yw}{öÇìÇ“ëYÇVŸu,òô×Éo¨Ó%œàÇ•ZØíô:*ÕeiN Oœ·©wÖÆ‘ÕÉôä?݆½YZ:& -o‹Ô& ‘…ѧZ§¥÷f _¦™5–„qu=½ü|óivó‘NCköòS§S¤ÚiGÈËuÓ„ÅäÏðr Ö‚nzè¹J}îa"JxªÚÐœMlfX$ÐÝ扖%ÿ+¯¦a±{:ÓEºyÖçÜ«dù2ü®”Y‡%wë5·ŸŒ·^V¬—sNY™¹2¹iñ -X_T¸iî“jÕlŠ§áž &wrÚ52÷\· ͦ7ïÂÓÍÎJ•<Uë¦Z´õFLëûuÕžéDÞà…vÃmÿ¼Ðe%Ÿ -‰æ A0<îšV ª]< ìOg!&¥r>ÍK=T*F¹ý³Y DʃÀóCM»Ø¡ñYQðr óP¯ïŒÚ¸L;£í:\‡3à0r¾ŽdÝÓWÎJ¥ÊƒKô¥M•Qù¸Ÿ¤I +ú–×~¶ÃBº“Š™ó¾¯*%ˆ>¢ZÝožÀ^ ™Ó|”É¿Â]‡5Â^_«´wi¦Àø›†UX´(ÜÂŠØ —,ž^¶íæþ©ÚÂð\Ç%èÓJôp;½)l§79d/›|©V;Ù–5ãÀ$¬¹å™ “ÆÁ|'ÕÑzH YÓT–ÚL 8°9ú"
T×X²$ ø<½øé -Ý…5%v¦ï/È¿ZˆlÓ‹sF¾…CÙá$
í1xÒøL¦¹–;æuØÝ—Éõåå»ÓÙxM4À\‰Sè)¿%¯>$9çA#¢‰qŒ
¡¹L^½ç>ú¶«ú½(û} V+°ýFJùéârÂ2pö©;äšE(‡7eÎ8x^ãGH¦Ìº[D V’gÀ7Ñ$UÈXt‘
iFΧk·’ð7ÂÏ¢jBtÄMX7u[ £î÷½f^$ë
¶eOh˜Ü “ëÎHZKdºÈPækF“ûgÜçzµâa;¶î–<7á‘e¸«v«V6ÚW¡ix¦ Œ7Wº•žØ×.ÍAF1 l%b œ‚ïîÛ¥ÎîM¥Qwçã§8\Y°õõ>Ær<7BóÐ…ù%G~¸†6TKL' -Žð7c6짹×GOéÓ¬TNPêfHÉK C@LKº¥” (›:ÌÕŠ³‘tÉbªVB}O50 ñ5S¬ávñÆ WP·U[ÏëUݾĥ0’bJéĈrÞnÚÀ7§¿‹fNÜÀï -™„³Áø[ÿ^%P åy^ çÃanè,s©‡ÜM; kX7Xœ -†ðè²÷0T㤄ê·(ZöIÔöÈiS0Hn$ùpªÌÐÆuG \·Ø½ŽdrÉ ^ˆm$ >à‰ïЉVÆí7fH&
9j C•Åà#ÄÆÜ÷¨²ÄÌKlÎ<D<y æ°çœ÷ B'okqÖ̱Wrî7Ê´‰1…T -‹cÀÉ¡gûÚ)p¾Nœ†„¿Ð±PšÄÂ2” ¶ K+ò´´&æWx¬MÂÔæ9|·–pÎÆCf5ë æV"´áïíª^Ô-Æì/ ÖK`Õ9Ÿñ6µªìr¾jŒm9£ƒ’—òÆñ)FÖ(Ùµª§:6–ЀEªƒ… J³T—y>TšÎrÞHW!IË|,Àb@:ÌVóƒm`¯ìZ߈¦ÐP Bòv4vö±ÞŽ ±ºþjìÄŒöeû:x:È¿½wÇ™ë°F¸Š~›åCöÁÓdE|V\æy èrDdŽï°zÓf^|,‰µ7¯QE0½OÌû"8,½UêJë†× -Û†št‘à¹Pýõãí5 ÙsB›¡÷“=OAAÌÐz»W„ÒÄ·¡2>uÁùë_¾4hÐŒ¥šE¬÷XP‘‚öúvv3û…g÷<ÀDu°oÕ4›EÍŽûb»€RñÀÆNºgaO{Äçþ<½þ̯i½“3ÕÌć»ªYG5ÓŒä逞<ëÉŽ gïû”öbIy0–Ö -±ËIþÌu´–2Õp%8YTÛj¾ŠSýÊU“ ³ÿºNš€ƒÝç|g¶ð‰ƒÖ?pµlº· å1ÝUÐ&VКÂ
-݃p|ÍD§ŠŽn³kãÚÊŽÐV˪ðzU™|/ĺ·´×Ÿä@‹SUÆÈýµ/rA¿ó •DÞµ4~NZ¬vËÀ )3äý›†Ç¬ -•˜Œ,ÙPµ|‹ê¯‹Çáá¦Ýðâ%÷åËØ~O¶OõÙ.ëKÌZ ÓoŸl8Î"Ê’Ä>V U”êI$†–íÓæıà¯[Ð>²=Ë‘z»›ƒuË!q áÍ90†E‹LŽM…v!‘Ǫ ¿¢Éæò¦Ô;ùòpÝt{T õ ©_a½èâ* ¾´Â ;Î7À ˜/%Iømûæöê_Ç’Z£<æ1·aSÍj‹Ã7XسÙm·òÙ² MGçñM Q”)dãö¸‹è!½í!"q½ÿα|Z¬ ïx•ÝŸj_GÙê^ó5’…ÂÚ)=`ìf½D"Ñ8•ÂÅMŽ¾p#`º‡Gj—<¹Ø¬Ûªæ’r°Š“) -3~iV9ÈvJ ™ÂCjçYï~`ñš÷ÿºc˜endstream +xÚ¥ËrãFîî¯Ð-t•Åô“ìɱ=cgv<³#¥jó:PTÛfE–‘ÇùúhŠ¤hÍaËU&º‰n ÑxSr"àON2 ›Iš›Ø +i'åó™˜<»÷g’q¦iÚÅúq~öý;Nò8OT2™?töÊb‘er2_þ]~þ|s}÷ßó©²"ú1>ŸZ!¢—÷?_þ›æ>Ÿç*º|3;ŸÊ<³9 YDKDt}?›Ý\M?ÜüòþæþüùOg7ó–.ëRhä鯳ßþ“%œà§3kØmòË<W“ç3culÖafu6;ûO»aç_:& +«³Øf* ‘…’)ãÜZÕ†ÍãD+í…q}3»úr÷y~÷ɟƯ9ÈOL¦*E¢2¼\×µ+§º×G·ftÕAOElS «PÜ®h\}>Õ‰Ž`C› $K‚VÌ\¹ßË,rí{˜–4*xùÒý.„Z»%
«5=¿¼ã”Õ–W¬—ƒwFh™˜<ºkð + +X/ Ü4µQ±ª7…ÓЈ“> Lík~÷R5OÍgwï ÂÓÍÏsíŠu]”Mµa³êq]4ç2âƒ×x`¦]Ó³{^V¼’΀ʌ‘D—9¨§?èŸk”
Tøî•ã +3”†"wဴàõèEÕ=÷5L +¹ +F3„¸yq_I1.È0ý…iI6¡û9‡æ( O÷÷vU•Uƒ± Çý‹‡õœahñF>©¬ŽµÈÛ|²c›F(Ì ç¼´q›rkÙ²æi-:ª£CX^u°VñB„Ê0–yšö•¦µÊ7RaH +¥kŠeѨ "~dbmïøK"Ø@,òô¿õ!"*XGš©¾Šq¯MâW°rµ_:pñš ïßÕ4W’*lœ0³$3—ü ». ‡¦ëfC‹—4æz‡6Ú¼]Ò•˜Ö2¤í6ÚP”F”¥ûXÅVø‘ã8<ɺuÚO43ú(Ïç-WSœßîàø8‰„ðæ $ÑeƒLŽ½rMÉqK‹?þñæÜgê|iºªÛ= +‚ºŒœ Ö³.®Ü°û +ç8hAPƒ Ý|Š…Ÿäïî¯ÿu*VÂb +2#2µÑl8ö…aÏz¿Ýò×Ö:ôÑÎó›>"ËcÈâõiÑAzÛC$Ïu9þy BÙU® k9JŒ•¥‹?ÅV‹tÌWOHZÄÒÙcìn½Dò¢1:(… ßÈŒÿ0€j›¡þ¹¤—åfÝ•¢½U”ŠPƒGY1öSñÕõðÔ ¬Ã Q 1Å2ÿåæ¨/€›!6·÷þˆÂÈáçN_›$êÁ»û~v¼<⋃ò †1"jÑ~yý¿íqøU‹IcejüÒ´0+å20…‡”ÆYorÌûÿ endobj 2468 0 obj << /Type /Page @@ -11775,10 +11790,10 @@ endobj /D [2468 0 R /XYZ 85.0394 794.5015 null] >> endobj 2471 0 obj << -/D [2468 0 R /XYZ 85.0394 751.3869 null] +/D [2468 0 R /XYZ 85.0394 751.7313 null] >> endobj 2472 0 obj << -/D [2468 0 R /XYZ 85.0394 624.8718 null] +/D [2468 0 R /XYZ 85.0394 629.4849 null] >> endobj 2467 0 obj << /Font << /F37 1026 0 R /F21 938 0 R /F22 961 0 R /F41 1218 0 R /F55 1321 0 R >> @@ -13193,7 +13208,7 @@ endobj stream xÚíte\Ôí¶6Ò ˆtÃÐÝÝÝÝ¡Ä0 00Ì ÝÝÝÝ ’‚R" ‚´t ÒÈ‹>ïÞûüž³?³?½¿w¾Ìÿ^×Z׺î7¶ ‡Œ5Ü ¬‡¹rðpr‹ t´P(ÐWç…CfL9g0ЇÉ]Á¢ -Äü{fX E +Äü{fX E 0Üú÷äè¹aÖÃöOÃoäæìüØã?ûÿxýœÿŒ=ì a.ÌÁAb¡ö™9Y®
Ä£ò/z{xÂœ*Þè—ÖÁ»2#×Dj,ïêÃ8›ÇEµyÍî;Ýoª²n
öA™ºÓÁß‹(üèX>ã.3v±ms™W`g Åú Ϩ¯"› rnêèš—ß¡RŽwð9£ _²Ò¹Ð_8=óe4%v>oFÀk(Ù?`LÙ½¼`ê ú4ð±ûåÃ&9[~ƒ˜;26cLà«|r)Sƒj…×Íl(ßÛ b¬Å7ÎßÊçÏVð™h9Žù,¢I‚°RÊ• e®äß·RÆ%=²ìÙ
êt›œ(†Ì%³LÇî)®Ž>1Ù¥‘„µ…^Ñ2¼éˆO£Ý %õ‰>•pjÕr{2–ÂwÍ<–g¬™-j—!3cäáakIè,AŒ$ÁLˆÇÆ‹J¯³nöùU» Ïm›Þ‰D3 @@ -13216,7 +13231,7 @@ $OíœàÅ€DÈ t‡Í=žÝbóÆÃwî6ß"£“˵?”JËOP2RÐ oQo+†â1) ©w†¦ÜèådîI½È Z¿VÍ(e÷åû È"[vQÔüFØs(úF$'‘qL ®/¶!õÔ
¤HvkÖ‰Œh¼È‰¬ê؉á¶o?Ùa:Šÿ±qêcŒ° gã!_QÇ~ÏWê¡1üaœ¯UÝGmã§Yñmn%ìRãr9÷¬ß0qˆ5†/‚E…(êÚ“†,W‚˜$Ù½ï¶åçLxËÎÔ|ú 奕£w†Z|ÂV€ãž÷,éOd ÞyŠGÝ
ŽÎ¨Ý3lÍ4©¿Î\×T2Zª½Ag—.7Ù#ÏPæï™v¼eŦQLÞ»±Oþ¼Ô\’ ¬ÿĵJÅñ¾(š3Ç].Å*,MÎ>ÛBx(ÃSÃó|D³uû‚Þ¡ï†{:Ò‘Á¨2G9¡Cê{É•<|?ÒK áéá@F)Ø,êw÷ó?È ¸ ¢Ëa„Çh%Ù±o ^Œñ{‹6™Ý @¥-«ä%Å~jÉwXjz1îi´·î¬%uÕ3^¿±g¸`d+ÎK[ŽDe—„]âò†YèÖýÇ?Ï>£³HjË,èkѸÍhÔ8Š” ™v_Å
[ªJÖ®²9m=·âú?\‹k>¼à¬‡¤*³Ñ³ž,Y
ê<‹ý¹uÓ Z/ZV$S·é#ƒmNOš¨5M@¿§rãÝ0Hõ7¬&7[àçŽAØñêOõƧÈêÚ5±pE6~d»Ž^.x¨T1¬µ¤$£Í7¿ÿ4òÆêüj§‹G1¬èípoóÌ3³QýÐZ:œNÍÆéç,0½‹ Š‡Zg‹ðâ£à)‹Q©¯³‹X""œÛÆ0ÏÁ¾äBvFA‚)Y9(ÎYÖý…ì¬S…|¸Ôü¾“qbæÇN.LÔX§…_ï‚¿œ%%½¥åŒìé|°D>W²7}C –Í#—ZR¸$º`bÛGο…a¿9gÝS%\”Á/œ îñhC|?s§ Ø…šg¯ÎÙÈ)ª¬m}ÐvÖËk†Ÿ.bÉ&O üõí+uqfº`Îa‡„°£â,I§ã¯½/‘˜÷ÇÝ›Á¤'P6ߢH‚Ú?÷›½šÙ¹˜Žà9¦ŠmHr7:pMRYŸ#£ 'æW¥¿ðKCß|-¡mWÝ躖nᲶË0–«ÞÐ3äÛÙ=j’¸Ë-,n–³e±€¢üb½iÙ;‘˜Hâ°l<)žL.ßÐYÖÿ°Ú·)wL=(‚Œ£± L|)=å'ÀÆ-Å@²öò¾µ<ÃNrä³6îµEôʃ3±d¶kÓ»¬ÿ‹%ôµøü·(kD~ô(¬_yñ‡Í; ¯åä²fùOî{&*‰äyÒ¯9ÛB±T¨d>è.<Sâ¢éX3p7«Á~ ª"럽Ÿ“lË´ÍÔDQÿfŒ°Ì -*s"}Y
;Ò‰¢ú{YÌÝÇí]p¶Òݯ€ Ž¶Xo³êÙ} +*s"}Y
;Ò‰¢ú{YÌÝÇí]p¶Òݯ€ Ž¶Xo³êÙ} endobj 2086 0 obj << /Type /Font @@ -13225,14 +13240,14 @@ endobj /FirstChar 67 /LastChar 85 /Widths 2730 0 R -/BaseFont /GWWTTH+URWPalladioL-Bold-Slant_167 +/BaseFont /ZZAPBD+URWPalladioL-Bold-Slant_167 /FontDescriptor 2084 0 R >> endobj 2084 0 obj << /Ascent 708 /CapHeight 672 /Descent -266 -/FontName /GWWTTH+URWPalladioL-Bold-Slant_167 +/FontName /ZZAPBD+URWPalladioL-Bold-Slant_167 /ItalicAngle -9 /StemV 123 /XHeight 471 @@ -13252,35 +13267,34 @@ endobj /Filter /FlateDecode >> stream -xÚíVuTÔí¶VA!¤†” ºQº¤»{€!f€J¤SJº !¤‘RBpé–NI%‰‹~÷;ßYß=ÝsþºëÎZ3ë÷îgïg?;~ïFZu-Ik¸%DCrpsr‰€t4õÔ- -¬¡pe)¸£µ"ÒÂtñ¥]!H( &c„ˆ€ô Ö ˆˆ‡Ä-,, `Iý\¡¶vHó
û_–_. K¯?‘›HÔbºyp‡8Â 0ä
Åÿ:P !í ¨#$¦n ¨*b–WÕÉC`×›"ÔÝ, ¡V e¨†€°€là® Ç? +8Ìú«4ç
—$dB8C¬ 7aO+ˆó/ˆ ä qu‚"7Ï (dëjCÞô -ý-Ã
…Ùþ¥€ ä -±µpµv„ 747Ü¿ºóW ªÞÂÙÙÑëw4ü·×?4@‘ˆ£
'€›ç&§ò&·- -âàæâú¦mµr€ýj?ÿ fýwí7ƒú ,¥)©ýLší_ß®¿}Õo¶ -—™_T†pÖŠ\5yo;_®*±®õv9>nO†ìåQùг¼Ï'šgz'ȶ6-ÆOûªå½?¦¼€i(À¥»¶Ô¯¡iZtq8øŽ×{ÿ”ÅŸÞ=ߟ”áÄ™À×*åí«-„µ·ˆ« -¶¿2%lžž<îêûØÓÝ~x÷ý*%[ö+ FQwL|¦H—lʧ†:¥²åoUoÇå !±:±àáWòž/¯åÞb°Î4Ћ¥lb<Ô‰<1 ËÄOƒ® ¼Ûòרfß©J±¹–†ìÂSj–ìcÓ÷%:YÙ(h}õß]ôsùƒD“Â{Yûñà.™u -ñîÉØ變Ì!s]%Öu…h&¾EÓu`ÑÀšHô^9zˆUæó~nØ@L~¢È© µíŒxzò”³÷‡Ç Ge{îOtÏÉ ‰ƒ>¿•ûÎî«pOÄJl.{¸j =þ:mŸ -)£ žŒ³,†‡í™œ¾ŒËoo£L >p˜Ö DzAªÓ×Ñ#âÞF]uãŽ$ULeçÁKEúÅÚš‘ÀíöP T›ù[×Mîª -˜]M/„ª¡Q°˜ -‰ÆpJðÉ@{žÞ~~ÜiЋ“”¼—.Dteà¿ûÞ-k¤þ¬µî*a¶o¬lêÞ ÷}L˔Ϩä|¤}¦GU,°~Ù(6®¨ Ñçº3š!í ÿètoSè”ÁˆD> -v×Vâ#– ´W>£’
pHOê@ÙPZ¬v–BT rדôɪ®éœ9Jl¢–x–4!©a9êì¸w_>µúÉÑrd7S½êê@¯RUÜfÙúŽÎò b -hÿTÍÎV^‘3/®ïN~®þÓTëxìKÜÎÈë:ç
Ü‹·[^œÂKËé:ñå#”½{‰•Á²]ĹóZ^"8Ð%âô#!gìLrªqÀãiµª‘w×øÒ)j#ÉЇx>ÎPoD;j¦K77ZþvÖNhÍWu†¸6×Qõ³ãû<K+ûSh~„t‘¢bZ]£µªòB^(i;‡\àöƒsc|P=•‚þ»×ÃÍ %¸2öfÈÖT‚p‰Ïj$å9ƒb=ÖK³Ïî‚*Yž¹îgÔ¨&Dï‹“U39ù¥ŠóîïŒFVQ²ÃeµÂ)³>¼Ùy¹|˜’‘Ƀ º>—Ólèqû *ÉЋšI Þ - óó83S€“ÔdäÒ@¡©Ã¦Þ‡N·Š<ì Mm(qG.:µcºq)øûëä÷h%µaŽ^ hè$
&BÞ™*¬í
² stÕ| V‰È;K!¯¢Á7ÙÐÀdÎ!3aFnÕ;´zh:ÛKÎkoÐJŠ²H´øYíb"S“{ ÂÃ=1áwžÇÆ/ïu’ÔÃak<%)í¯3.ò<Ž«j‰d|†³û
ìÖ -d4} d䣮6ó胦˜ Ö¢(Bŵê}®¿€ ´í¤páÈœM¢t¥ÁÝ;_‹LÅñøŠLòO‚ä$*`"–ÑÑD$ÏŸí²û{Ÿw§Ï-Ô ¾HadÓ$¤„óžÕ¾™ÓM4‘$rGQ„+œy h2¬2bZ¦p À¾f ˆº—õ‹o„ÖÅ°äP‡éRÔ§Õ±uay+;=jÞiãßÅQSr’¶ÎĘLORˆ”Ç5 ïUÒ©&Õ?c‹Ô%VÆ“ê¿Ä¥N!.Wo}Ü(Þ¾EÓC˜zyRgjDIdš’º+æ2éÉëDQÅÄqöŽ™5‰¨FÉmE¢@©Œ’- -‡æëðsÉƺ“Jµ$Í€‚*vylµ™ s$a`F é úÀ Õ
(X×Ñ |
| -=<G¥]Ü<V,~Uaÿs2˜Ñ³ßÇi†¿ÎŽ¦mõçV|:Ës7v1YsX’áT{ÑC®oßÑꌤӪdŒÅ[8‚l˜vÒ²ZE¶*bWÐèg -¥ºŸ0ÞÓLs=šA.ÉSŸ‘<Ýkîå);”ˆú“7g_á軽çiŽ‡ñ•üè$+ùN7crȵq=œb'Rpû|@0k\l 7jKý'x6ìQë×.4c®-böB*‹eÕgƒZø›’Ç„·@®!J¸ö_ |m `{sÞ°¡žvÌÒìbûz+†9•FPŽrÔ|d4HâüT£¯Êß…ÎC·kŸb…&J3?
ãõ‡MÊ&í(g ['’½M2yR ;ß‘ñÄú1N\xŸ¹*˜¿f?c»O`üÁÁë!TÇÖÔ« ÊHÇÜÊ
<ƒæ' á¸A”{í}ˆ¡zÆ, Üg¦kXiažµ‹È”!"‘P"SYà“éÉy’jcÿ|wÕwt /¥iˆB¸y½¼°¤6_|kÞÄþÉX×K—t‡÷ñ«1½›Ž`†L„±ÕÆ=w©5Vjæq7'a=È€]f
5ˆôeûºØ†õ³eÍ'!¾xdíZô‘¼9¿â(°U â;ò<„aÉ¿g§IQ•jy{oqäû!nÉÍ_6¹MªòÜF[ µ. -`¹¿œ€JfL„/&kË¢E§ÝŠÞš'§Û$ý°ì–(qqZÓgZÉÖûáfõ/xa”U9ï QÜñox ö6Ȭß6à *¼Å[Æc]gŠQn=0oÏò›T_‡y5,©ïQæâJF•UIL™cÙìÂg4¾ÙɃ« ¢q¶†‰ªž¦o~ÓÏ{ Ê««:Ç ¢ ¢´PÇ>¼[QNç
mh a ¸˜¨¸;Œ3ܼ nq%‡ÓÅÅ;7£Ñ¸ú†Öëí -Ù{¼&¼+¢Bo`Ïs%2º6\ŒÐC8,kn!+86¹ÕV°g;n„É©]1A`ï|œÜÂ)ÈJX¾z/ òa_ÈÊÆ C5âg!Äd*¿‡‰9_ Üép;Å—ƒD\`Úª=Ô¶wîIЧG¦'»¢v2¤[íø#MûŸD…÷N‘cœvH ¾xèÞó@!Ç]&óîÀpÁ:·€“K{E#íÅ‘ïðô…[:ÎçòX÷?f…FyCÎnà|ª1ü€ -Oéž8L. Ï 2PnÚëâ*6»RMˆ{j¼YGÓµØå<Ÿ¨_Ó?ÜêžSN
G rQ D¿-‹È õ~vÃÀ²öȉ¬Ü8ý1ÁüÓn¥"íƒÇ¸Œ/ß%Ü7NKˆ”:½>GÑ0 ûQµMo]”ôWóé - Œ¼åÇ°üg<ž¢BÉžmaNYî)ËLêò³}!ÞŸˆ³– xõê?þ"r¯èYÒrÈ&*aÜÎí–Ü Ð¢D–*£|µð`šP Å¥Iñ¢?¤ê
)7 I”ZiÏï¤`W*¶mªª}_®S›(…\9b±ŒÏ‹µWOT›ºˆ$6 »”£Ý»ˆ%ZêÆ -ˆ`ž7 0'Š%â‹ ß”°ž®ÒìÙw¯]ÎÉ¿šÀ§ÎˆÈº¼Û¥,û‚ êïÇm…)‘·HW»
+¸ü"¿ µ¼ûª;¥Ö¹À{ÆŒÚÞEÍ> :i¤Ý0A]_„3—·¾ÙžE9¹Ú¦»–w@b …¬ö¸b ,oiËkk!_•/4>œT’D^ÞÛ~“„³äRÈA.×=~|ún6óÅ=Á³µ0ÍãÁÖ–\^-Už&( -–ËÓ»\IFÙØS˜õOW_ºhýÐj-® -X{$¬½‰¼û£@†rlZ‰âéžËŠ1O($¶ˆmèö¡àé»÷ÝõäIŒ]Œ_-ô‹ 8ßû ò%zŸT¶n76Gت”·& øì‰Ç†‹5 ÎÔ‰Šd¾<B‡›&ª½úøמ¶É‡Æc˧ œ?µÆ(_¹à™q3áNZ¬/ˆ]c24íŒË —'{.ö%¥×î§Çz̓¯ÛKÃ{u`‡:s±¹ Á<º'—0— HMq±tåRnC@x«Ôs̈W6ß>uä3¾õˆ;)EO4,Ÿj& l‰#õŽ¾„˜¬Ù¶³ -¾höânF] Ÿx'´ÅfÊ`\ñè{Ý?¬¹¶=ê3‹ XTÑW©(¬§ _ E e¶){‘@ù‡„{:ƒ!¡X¾BK ”G½ èßj²¾F!Ææ!ÆØœÍ*ªÞAO^ÕîÊ…¼ -3Îôä¬I'4tùÀþÝ-CœýöMÇ[9èHïr}Üo_¿¿¨æ}>ç_`—Ôy[8¶.χãZð-ôü’Òg]}ÖŽŽl¹'4ã!DI½º+ju¹õ8å ™òT°CHÖ‘_e‘‰ÿð:û5r€ë3.ñ4v—W”Ò]ª[)ïó–äXÁ—â݈HÞ÷ó§ qWru?̦hÌ‘ê¼7ôòÀ…U^ÎK8%į
v›AŸ7°ë1ÌÇÛtOn4 -ºØËc‹í—R°£36‚FÅ -ݹÎ%:¢‰»•¯·0Î&SwªR V‹C%#ìN^©Û™KuÓšˆ<~f‚â¢Ï8”‹qyœ_U æ=¢¦#fœÞ*¨4í¶²(‚柘\oi›–•`ûljYÛWʈ¹ºœ2Ž(IwŒpyˆ ¥6Í]š†}„¯j¾Ÿ“&cðÓ½ö¢õníio=|_{ÅŠ{²¬>l¦H ðãä:XàÊ£ånMçxºýu+ÙVDɲéõýV“¥bððÁÁÈ·©e—¶Ê]œjwÆ«(öe"æ}Õ„§8$‰, -ùHaÒDÚ]|¾"`N„ ¨L=s÷ ,¢Á’Ú•¦QÀ˜¯|[Ö ¦§†IP˜þîqÖ*oûƒÆÆnåÉf,ÅÛ p™|Ä€(SÖ~ž²GøÝTfÞˆ‘†g“¡Á‡ÚõÉ&®v^ó3
X]î)˜C ãû&5ÀI©[hû5¼z¥pOŠÌå£Cïêt}æyjö i!–†o\38˜·œá¦ÑU“!4+£ +»×øúÖ¢ÏÇP~nd*[Çw;r¤Ûqôß5=ò–WÛÜFa›®¢ÙíÏdî2§Î#ȧ$†üsƒBLe-)ÖTùf°ÁÔ1‰ÇÞ£W¦¹t %g\ÿæðÿÿ'¬ !®H¸“…«à¿ +xÚíVuTÔí¶VA!¤†n†n”.IéΆ˜f(‘N)én$†FJ Á!¤[:%•$.úÝï|g}÷üuÏùë®;kͬ߻Ÿ½Ÿýìø½ki5´8¥¬á–y8 ÉÉÃÅ- +Òy¦§aáèha
…«pJà •Ž H +±@Bá0Y $D¤±ÉB¬@¼¼ +µµC‚XnxXÙÙ9þ²ürYzý‰ÜD" ¶0Ó̓;Äîì!o(þ×ZiÙ@ ! u
%5‹‚šHƒ¸Þ¡áf鵩@ 0„dw9þq +³rt³þ%àÆnÿ-ÈÙ~ãátƒÝiÀH„•+Ô ºÉª!+ÿ‡N¤òWnôÁmn<áVn¿JúÝÐÜ H ( BB<‘¿rYB@ÖP„³£…×Mî2gWèon(Ìö/ Wˆ…«µ#¸¡¹áþÕ¿êýSõÎÎŽ^¿£á¿½þ¡ŠD@ m¸ +šÚ²2ìÿúvýí«q³Hm/gè¿é©ÂÿqøÅ$-
÷ysòqƒ8ùnäðp ñDø|þEÖßD<U-®PO777èæ÷Ïï_'“¿ÑÈÁ¬àÖ¿öF i³¾Yµ~ÁVn®®7þýößþçù÷ÒC ž+ÀôÜJ,Ø>5#
YEžÓÓ/kô¡ƒ£'ŸFûu¾¼Ý/5|Q¤Ìü¢2„«vPôªÉk|ÛùrU™m·ƒÌ‘¹=²—GåCÏú>ŸhžéûZ Ø´?í«^”÷þ˜Ê¦¡ ·îÚR¿æ3Ó¢‹{ÀÁw|®Øû§¬þôîùþ¤ 'ξV)o_=h!¬½E\U°ý•)aóô„¹«ïcOwûáÝ÷«”ìÙ¯pÅÜ1ñ™"ý]²)Ÿê”Ê•¿U» —w„ÄêÄ‚‡_)x¾¼–‹ À:7ÒD/–²‹ó P'òÆ€,?
N¸vðIn+\£š}§Z(Åç^XrˆL©GXrŒMß—ìdc§ õÕwÑÏíK +ïeë[ă»4fÖ)Æ»'c£»¶*2‡Ìu•ÙÖ£™øM×E; +at +½’•sJÜkŒ "êC 3ó®cUÉÙ4eHÎH~0+¾÷ì +£Šà> ä>-e™÷CL\¸³Äù¯“7ôwÂI:HÁ®óÚÊüÄRö*gTréïI (J‹ÕÏÀÒˆª1! øRb’>¹`ÕÕâ13W@‰MÔïÒ335,Gƒ÷î Ã'V? 9ZŽ fjW] èUªŠÛ¬[ßÑY@ÞCLAíŸjÙÙ*+òæÅõ ÁÉÏ5~šj }‰Ûy]ç¼cñvË‹ Bxi9]'±|¤“²w/±2X®‹‚8w^+ÐKºDœ~$ìl‚Ý‚I®J5`žV¯ipw/¢6’ +}ˆçã õF´£ögºts£ng]á„Ö|Õ`ˆks Õ8;¾Ï»´²?…&@È™!*¦54[«*/„“¶sÈo?87Æ…ÑS)ê¿{=ܼP‚+»Ñho†lMe$—ü¬NRž3(Þc½4ûô.¨’õ©ë~FZBô¾Y5““_ªßþÎhd%\N+œ2‹ÐèÛ—ˇ)™¼¢{ás9͆ ·ß¡’ ½¨™”qá
'N_Φíc%}#0~?3¸¦fSwß2 œ]aµo1ŸJ(Ïá®óc¨ƒ~ P ʽ]HϨ}æKU«Ù0¼Q[»SÊvåg à¶"hÉþÄêYáÿ/¤g¹iŠWœeM¬”…¨AˇêžÒGªrÌ,ÒÔ‡ Øn¹äV¥õ†¡¯ø]mÔÅbüÒ&‹’j´¥‚Ls Nù£97œ{xØ4()Ûó’:ÍÕJ QɉÓ4âQxŸ6êw´êú|©:T™$·Ü½Ê·ƒ +Õý‘–”øц1 öã9ã^Ìæ‰ÍDqf +pR°‚šL\(<uØÔûÐéV‘‡ ᣩ
ež¨ÓE§vìA7nEŸbü ¤6ÌÑ
ä¡ÁDÈ;Cŵ½AŽcήšÏêYcg)äµU4ø&š˜,9D +V1-S¸`_3ÄÝËú%6BëbØ
r¨Ãt©a*Óغ0ɼ• uï´ñï¨Î)y©@[gbL¦Ç)Ä?ÊDâÐ÷*éԒꟲGê«àI÷_â‚R§—«·>noߢiŒ!L½<©35¢$2MIÝw™ôäs¢¨bâ< ûVÇ–DT£ì¶"Y \FÉ …Cóuø9TcÝI¥zÒ³€‚*lõ™ s$a`F é úÀ µ
(X×Ñ |
| +5ÌÄ÷
o榯‰‹ûȯg¥Ï.š%~2Œþ
Í“ 60×Ò3îeÐiÁeø¬O3KG·l¯„šÊé:ÐgyÐóud6pD‰+v°Ìb¦N f‹ Mh¯Ëaˆ >.`È.kŠI¡iøòØ"ÌSˆå0ÙÒ—ûbûj¹Dä§ Éj§×òáøg”ŸV0½Ð +½c–$îSÓ5¬´0ÏÚEdÊŒ0ƒh(‘© ðñôä‚Iµ±¾»Ú» :—2´Ä!<|^Þ‚X2›/¾5obÿd¬ë¥KºÃwƒø‰Õ˜ÞMG0C&ÊØjãž;áÔ+=ÃÜãÍEXr#à]Cg
"}Yá¾.¶aýìY³ÆIˆ/^Y»}$oί8 lU†ø„=O'aFX²Åï9hRÔ¤[ÞÞ[ ù~ˆ[ró—M~“j…<·ÑVG½‹Xî//¨šá‹ÉVà²hÑi·¢·æÉå6I?,·%F\œÖô™–@êõ~ø†Yý E>eUλGwü^‚}«
2ë$¶Íð‚ +ïcñ•ñZ×™b”[DÌÛ³>Â&Õ—ÂaY
Kê{@”¹¸’QeUSæX6»ð¯CvòàªÇ£hœ½a¢ª§é›ßôó ƒòêªÎ1‡(‡(-Ô±ßV”ÓyCC..& +®Æã +7/ƒ[\ÉcçtFqóÍÍhF4®¾¡õz»Bö ¯ ÐØóÜE™Œ®
#ôÃëÅš[È +ŽM®Aµì)ÅŽ¡ArjgWLØ; '·p +²R +Øêa³!ß™ŠxW_FÅyë"3Lêû¸Ž>ê‚*8VŠ í_ŠÀÊëó<"•{•îÛá[w õ(FïVqQß¼óq–Qõ vÕ’Tw͇\÷Yd›fÜÞ>ÄO¯Þû9÷aZjüm µ=!À›œÝ>ÜüïQ3Ù¹åÔ«^ ü9â@"ñF/h•>þl`|ò\ÕIh=n‚ÜL'¿õkµf9VÒjt‹ƒS~÷Ò¤&ÀŒTú'§$à3ã!Ê5vÿÃJ +ƃ>³ÖÕ;À'uãá`:?Ó+Ôx` ïq–Î ¢vIÀr= +ȘóiÀù ÿK1â Ýc‡É…ã9áU¦ +ÐíC¡Ówï»ëÉ“º¿Zèp½÷ äOô>/¨lÝ4nlŽ°U-oMôÙ“ˆ
o:œ©Í|y„7MT{õ ¯=i3RÇVHA9jQ¾rÁ3ãaÂ3œ´X_¿ÆdhÚ—E/Oö\ìKɬÝOõš_·— &†÷ê$ÀuæbsAƒytN. `.šâb™Ê¥Ü†€ð6é瘯l¾}êÈg|ëwRŠžhXŠs×L84ØGê } 1Y³mgzÑìÅÓŒ$ »9ñNh‹Í”ŸâÕ÷ºXsm{Ôg" 'H±¨ª®RU\O¹<Š>ÊlSñ" + ‰ôt.CB±|…—(z?п)|Æö…›‡8csa4«ªy=~U»+ jð*Ì8Ó“«&ÐÐåÇw?´,IpöÛ7 oå¡#½Ëõqw¾}eüJü¢šïUølœ]Rçm‘LغÂ= Îk¡·ÐóKJ;œuY8:B.²åžðŒC\„0&õê®X¨ÕåsÊ;2•©`‡¬#¿Ê"ÿÿátökä +¹Ø+`‹ï—Rp 36‚FŊݹÎ%:b‰»•¯·0Î&SwjÒ V‹C%# N^©Û™KuÓÏy,ÅEŸq &¨ãò8¿ªÊ{D LGÌ8½UTmÚ5leUÍ?6¹6ÞÒ6!-+Áö Ž·¶¯T(wu9e Q–éáö :Jmš»4
û_}ö~N†ŒÁOkôÚ‹Ö»µ§½Mìð}íîɲư™qÀ“ë`Á+–»5ãéö×d[%˦×÷[M–ŠÁÃ#ߦT\Ú*wqªÝ¯¢Øg”‰˜÷Õž à$²dß]Í|®yó9¾è?)ì#IiwñùŠ€%z :õÔÝ3°ˆKzW†Fc¾òm={‚ú³8uL‚ÂôwÌY«|í»U&›±”n{ÀeóbL=Xûy* áwSYø"FžN† j×'›<ºÚyÍ7Ì4`u¹§h‚Žï›Ô +M0 V”µ@¦ØRšÁSÇ8$ {^™æÒu”œqÿ› ÀÿüŸ °r„X¸"áN®€ÿjRy—endstream endobj 2067 0 obj << /Type /Font @@ -13289,14 +13303,14 @@ endobj /FirstChar 66 /LastChar 78 /Widths 2731 0 R -/BaseFont /BRATKC+URWPalladioL-BoldItal +/BaseFont /KGQTDC+URWPalladioL-BoldItal /FontDescriptor 2065 0 R >> endobj 2065 0 obj << /Ascent 728 /CapHeight 669 /Descent -256 -/FontName /BRATKC+URWPalladioL-BoldItal +/FontName /KGQTDC+URWPalladioL-BoldItal /ItalicAngle -9.9 /StemV 114 /XHeight 469 @@ -13316,13 +13330,10 @@ endobj /Filter /FlateDecode >> stream -xÚíRkTSW‘ª¡¬òRIÕzX%2yj @ÄX0<å!1÷†Ü’ÜK/74€ˆ*©Ê²ˆ.yŠŠRaU¨”Zb¦€/Ò* -ŒÃ -ÁÐ G ð«uÀ]Ø|!o…ǧÐ@0–nÀ‘T5¼‚é“$>ia Q*P SjXKÖP*4@Ž)˜00H£ë&od€upŒg“Âá --¢1üÎÀ´é:Æ ƒ` N…ߊ“Á¢ÓNÏJ …QŠÐT
œ•LöÊ·8’!Aô0J5P)4ð£Ðt%¤S:XÒЩ$Òû÷¯JF(”ˆ2¤Ã€ý{*æü“&ሠ$°™l6‡$’ûÝ)iZ31ªÄ M\žPà¸Â@!‡ˆŒxÀÈ -Áz -!=…a=¬¤XobJ¿Ÿî;½½&W\ÕyÌžž±Ð|dkûùm§Ì~Ìá^?—ëxãOQðG¿9osþ9îT2þ
Rñú¨§EÙ£œµÇÙâèF¯Ø/ŸõP9œ˜<ãrY[ëÚƒ;îY¦7z?üÙóÙÝÌóöukîsø•Ô‘™5·n¾z’›¶©£Ïêð5ä9TBI*;³f/ óÏ»EW' „bU˜µúòüÄýÏ\_[©wºÓn;š¦2™Ý
³ÿË9lº^ÕßAá H[l+¬– g/ô¹ Sn6 ú{˜ãš›Âe¿Î è¢ <ÌïwKósJÂb¥Ñ£ ŽU¸(khüC«©¶p}ëúm - ëuXejÓþ=°?»yLâ7òÜn ýÂÓʥ܎k÷•ÿM¶ÞûÛ&ËžD±ÞF ý¸¿òÑ¿.µ˜p“%Á ½)g£ny_®m¸PâZ[03ÉÒ$‘T-išõ Í÷p]è7×I”8Ô»¬»õEÔç²]xã‹Ž }v¿ôú©$ÚÒ8rÄgQ®ýЖi»˜¢–}µ; ^›bèô=iùqÞ²}PT6#r_ÚñšðšíZÃcÁœ½Çõ8våÙ瞊š~P•áE Î+|Ó³åô6Ú†+µ §¢ˆ•)L<>ðlK+Š£ƒ'ƙܳŸlàù%¦¾î8²îPµq÷¦‡o\´cEèÐß3 ¦‹?/É}³u´'Tçà,njO°¢÷Ž™ïü؇¶œ;ä¬óôûfi@ µîÂ?ÆVE2¸Îª(#[ï]hÛ?Aƒš+µµn4Èmðr"ÕËên‘¹~/}êŽZšÓMÛ%íð«“U%1¬ÜÁžU§|<ˆ5c•BT¾TzZ³ÜfÆ™cOJÜŸá›^ ã7”ï‚oWD¬ ˜ð¿Û5¡Ës½2RØñË™2•ìM‚|oÊ|U–Aß9/«©«tS¹>˜áµõÌ'Æ/¹_65n¶™‡¯•F@ßÙªÛ·_w½ã¨ål‰è¹ÏÆuäÛ½ŸS¸šJý 5-Óï¯ + ì;ºóRVô‡–»^1î¥â’׶ñ1uCí¶e‰‡¹B—Fec½iÏÅÊbÇc4ÁxiT¾²ívò–Õòº†» vp©³‹»æ4ÏZ¸sóÏn—eÊ+¾^ pžŸŸsNÂë œó½çâ"5%çœ *W L½'î Ë~ øÃÐ{ö!£KžÄž5¼T÷žñ-/–_éÝjÝC«íÒ4U—ì‘ÍqÙð^¨Óáö+ÂkNþ»Û‹ÛyŸµS—/_'œZîö!¥ˆÒmzÚ²& B´`!Žk{]Ú™yy¢Ò ®»FÔÉ
×Ëò~A£å
Ô‰¶ªýs8Ñy¬€¶Yøbݬû ]ÿü»”jþÀØqKÒµž/G#wò_Z“Xô¤"†‚XÕÍ›gÝø4+âp~µ¶Ÿý .Êÿ üOPj`N`ZžFù7hKŒendstream +xÚíRiTSבª¡¬2©¤j=,Œy5„„
£ soÈ-ɽôrID ¨¤*Ë"6ºd¥Âª"P”Zb^'Ò*Â#,ŸEªVEÀ©¬««ôgûëwΟ³¿ý½¿óMs‹”1D¶ÆP‚Áar„ P*•pØ€<³Ù-‡å‚¡ArŽ@à´jÀ]Ø|!o…ǧÐ@ –®Ç‘T<é“$>i` QÈQ •*XCÖPÈÕ@†)˜Ð3Hk'od€µpŒg“Âá + BÐTÀåy9ŽËõrˆÈˆ²9 +#°zß×Íç×Ò .ýeö`7]0èf|·GR[+‰ ]p´ÒIQ»@íRCµ†ÚÖµjüÐ …–†5Ni
]\ßNzÓ ÚÚ”ñ—´_—ì˜ù$éùó¾g¯
ÔÖŠl7+×ã3b=½÷ûgzxÓ;ØTÛ«Ÿ™Üâåª/î"ÿÐ>»U†vÍ¿ýrZƤ Np=ßåÆ‘ÏÜÍ\Ê=á¸foÅ¿¤ë<¿n6íNë¬ñѪ þ|±Õ°Ÿ› ˜Ð—r&ê¦ç¥ºÆóÕAÎu…3“LÍÁÁÕKšgc½ƒóÝüœúÌu%Z¢€j§ùB®ø¾êlŽob|Ñ1¡×ž>C?”F›šF{-ʳ Ú¼ m'ó~Ôòlï_l΅ץ軼ëN˜¾Ÿ·l/•ÃX³7íXmxí6þ‘`Ξ£‚†‡ ›Šœ³ODÍß)ËñbPï¾ñérz;mýåºG„Cqäóª& 例
ÅQËññìLî™Öó|S_õø ^{°&{×Æn®\´}=Eh7Ð;( ¦‹?-Í{½e´7Dkç(nîH0£woß7Ÿ=è¨u÷ûj©_+µþüÆVap •QÙlu¼g‘õÀ
j©ÒԹР˥ +©Rú:A¶'e¾2K¯ëš—ÕÜ]¶À¡BÈðØrú£ìϹ_œ24m²š‡¯–DBßX«:¶]s¾c¯álŽè¸ÏŽÄuؼ›[F¥~‚–ÖéöÕ‡–Yú츘ý~¡éŽGŒk™¸ô•u|LýP‡uyâ!®Ð©IÑÔ`Ø}¡ªÄþÃu ^U h¿•¼9lXZßx|—ÝvÎAUNI÷Ü–Y wlúÑåѲLYå—ëüÎñ 2cÎóúýç|뾸XE@ɹ'†ŠÅ5RïŠ{Csžù÷ ôŽmÐè’DZgŒE…Ï-ª¾ÓÞ%’áË]¢›m»iuÝêæš²ÂÝÒ¹µNëß q8ÔqYxÕÁwWGIï“öqê2âÅ«„“Ë]¾Ö§s‚z CZ#² ôp+d¿º¯É©ÝŸ™Ÿ/* è¾¾sD•ÜØy<ÿ'4ZÖHh¯Þ7‡ÏòkŸ…/Ø̺÷Á•øO¿I©áŽ·&]íý|tÍþ s‹žTÌ«zxóÌždE *¨¦Ö
°ÿæ¢ü¿ÀÿD…–㦑ãi”ß endobj 1451 0 obj << /Type /Font @@ -13331,14 +13342,14 @@ endobj /FirstChar 60 /LastChar 62 /Widths 2733 0 R -/BaseFont /IGPIFQ+CMMI10 +/BaseFont /LJYLGY+CMMI10 /FontDescriptor 1449 0 R >> endobj 1449 0 obj << /Ascent 694 /CapHeight 683 /Descent -194 -/FontName /IGPIFQ+CMMI10 +/FontName /LJYLGY+CMMI10 /ItalicAngle -14.04 /StemV 72 /XHeight 431 @@ -13358,20 +13369,23 @@ endobj /Length1 1199 /Length2 2269 /Length3 544 -/Length 3059 +/Length 3058 /Filter /FlateDecode >> stream -xÚíWi<”k2e$[–ƒxÈ2Â,vSÙ
:a4v*cæ™1Œf±/E'[YJ$KŽlEh±$ZL)"4”¥¢
Y¢Sï£NõžÞ¾½ßÞßû< žû¾þ×õ¿®ë_÷‡G]Oе$3ýA “ÁÑÅ ÑXÀ‰ìÏeˆŒíº;@*×C¤`H„««»Ò8tð—.h͉ “aCä@>®\À‘ÈôÐ -°f†D²hÔ -¡AȆdS ƒÒ‚Šµe™ÁËlø²~64H‚‹DýJà 3œýKˆBc¿´Gæ† Ü´P.è`ów -b€l6t(_ Aþ)©-ƒÄ$ÓT€ÀF”È"7,Ã$.‹éôå¤ Øo{ -
*#@œ?È$mÞX¿¯eጥB¸î³ÛúFnsŸ¹Êð4ºÀR°ÃI.蔂Añ¬IN¡
þf€YÏJÇ•É™ -¶iÆáA¦VÈÕ’RI’‚ö)ò¯g·8a×¾[ƒèBwÊg ”Ë+zi yÍþJÕœ—º™õ-IB2S:~Â÷ó¡Î0¥ªÒaçƒZ¦2‹ oœíéq.XØ]^›
:0ažÈ¶KMw>hnóiz5/UÓ*é70xÅJÔ0þn² œSÿÎ_Áë”1¶íÖ%½Å€ÊfÊâ^H©á6ý!#:=g=ioÚ¬´®?Ã}þJ.Ñso•jGYleÙ›öŠÅ·µÔ1Ï4”î-µïo•ä·¶ ICjòùƒú -O9‡Îä«XÃ-–‹VyH=BÞ链'åŽ)½Ï+‚…*Yªvãº2ºÔØçÝãìÎÈKoä˜_Ñ)è{<é¹Áqú¬ð%/Âú U -™ ›^5:”“o&3²VfwñrÙ²V ¢_Sè•‹j%µ
„“‹¯t(ãEŒäžÅL–¸›ðßíXq ezSˆ:ØÊjk öñ{½+aÆìxŸÍ F8*·Ô¼Ãg¦ v Ä;U4=Éz¾wöAHÆËF~A‡_d¦öÔÄ>ßk¯xìáž|÷°Â‹-ÝÊ16gë$dõ¶|òó4ð|i~.·Ìâ)ZîJÏ ÜÔõ‚«dÆpÕ·6••' Jæ,™üQ'ìýFΟDäó÷=ŠKÕœ6èVŸ,M¿W$w{e›‘í¼w³HÉàý¸ @¹`
á–³U†Ÿì‘O¹fg¹Îí ”®#Ž£ƒë#õfä¥sZtÍdÂuÖõ,õ®.V•ŸX:È׺ìU§2Ϋüëñþ£–†} …ûs
6H*¢Õä7Ç+°S iØ짞šÞïã¨pϘy„ѽv ªrâ¥ù̆z‰©pøËçXÜE†äû“©¾e’Šƒþ©â8lg‚a/¾jaZ\k²ŸÑš Ùãpݾ¿žýIþnüjd
|3+¬Ìzó>1:Á{ÝŠu ç$Tá´"“7ã‰:VõDåï©ÀÈðøR¹¿=]}Z¿@Þ.œ`LÅÑýÑ7½3’svÁëC ~GöXí ¾sóU b3B¼/UidIÅó€?æ©ëzFø^>eSÙVü¸Î_F9ùñ²ÁÔ=ñ©«(§;M–åá ƒÝ×åÊ d:äÙª»†ªÂýBS-D£Û ná®Êœ.åØ«uË®*>gXŠ(»à´ç±)*Îeñ™åLéRºyvil—¯x‰¶·?%Z>±¶ˆ!e -ן67z¸{h ÌË7÷Øšr?èlæŸÕðŠÏíß5šJ?¹ˆlgš‹p½VïN-<ˆikHW"‡}þcüdÓ‹‡œæ±9ÌyQ ‡sÌÔ·æ ªE ½lëÕ Ï—ƒÖ\ãßî Zm>êy}+:hè<#Ï¥ëcW÷E‰þ·|m÷ÎJçÛhM©é^3öGÕ…ôÓf‰ÝÇÉïáx±UÞš·ß–# ‡;†‹W´±M‡q¯‹?}°}’^t¹è×ÿV` l–âß–[ëÐ&•é˜A%ªoèI=,88kÖ;ØlJÁÅ”¯óèâ¥"?ËJmí?vM,€
+† wª·P×ÄÛ{ß;Ù¦&B²Û²kÓ5¥´S¶GhÊá6«3whTo+Ç.©4EG_G4¯Bä)òöfðìîåÆ ·Ð Wj ”q™RpýøD¿B÷xæÑ,9äèfù‡æz™ÝeǛǤU^§k<ª#œøŒröš÷u3,!ä» ƒyì¸Ì9`Ñ¿û¡à Wš<†2U·ûRW¶i@pÔ|ÆÞ>—÷qûZâN7;ýÄJ²ÏïYtâúN*e
¹¼Œt¹zâN oõByZŠJÒn5ó ç=»Ç´Îï©žà# n"öÀœŒÆIUó¦›Â}tÞú*–øږżè1œ5ú½ ¶¹Þª±õÙiž£:w§UyÑœ’û=^Æ«g`IFu©»«ÔÛ®û0på
•ócÂ-IáÎ"^vÁFa OábòOý÷jlß`yþRF“oöeÑò@n‘(my¡——Ÿ[?ƒž•eJï• @¹;jmÝ œ–¼3Œž¡>w[L:T‘â6.èuU cجÒû¨bL+¦ÏÚRZÛ·×Íÿƒ«XÂú·þÃÃ;yý¬Ìôõ•Qév9©ÊaTýˆê -àn +xÚíWWXSÙ”(AŠô„R‚@ +¨ÔÐ `è ’“ ¤P¤ +‚ÂHSŠ"ˆ¤)Ø¥ˆ`!Š‚Tv,)‚£÷€£ÞñúvßîwÏy8{¯õïµ Ž†*ž gEf€vLGƒDcgZH +¥AȆdS ƒÒ†Šµem˜!Klø’~8 $AE¡~¥a0ƒÁˆþ%D¡1ÈË푹¡(w-Œ :âþ€Lð 6*ÈŒÐúh3´) +â™lÚÒ‡BŒ0?an4R0d³¡CY†@ù§¤¶ “LcPQ"‹üÝ°“¸,¤ÓòIA±ßöT"F‚$8€IÚ´7¨aoÓüi+Žw
ÚÝg¿pU áét¤`›³|ðIEÃ’ÓÜ" þv yïJ§•)YŠ¶é&ÁfÖÍÈÕ’RÉ’‚© +og6;c×N¬AtO¢Û²È翶‰ºáð^µzÖ[ÃÜæŽ$!…)¿~Þçå«0˜¢ruY°Ë«m3Ù…Äw.ô8W,¬×‚C%îËÙzåü½Z[}Dο™“ªm–ôï ¸f-jß—bç4L(zŸ4Á¶Ü¹¢¿XÕHY8Í -3Új°#tX·ëŒ'"ý}b‹µÎéÓÜ—o䓼öT«µ•ÇV•¿k|Xr眶慦òýÅÖ}¢’üæV!è@M¿|ÔXá%ïØž2o ‹3Úlµ`Ô'äŸ:áwBþ¨ò‡übX˜²ejQ§]Gf‡:û¢GœýyñÂ~‹kº…=OǽÖ;Õ˜¾âM S0—ó`“q掘~ø R˜¢XrÅíÑ/|-7¢½Õ8gèÌ>Xª(YívÃÙ# »§ä›÷~‘H ÷F׊Vû‰¸Ï&y´%¿½ï»þY1KÀs㛵Æs3ãÍe‡×êÁì/_- CÖCŠÔyç¡šI-ýáÄ”’km*xkù1㥠¦ü‰íb‘GQf·…¨Í¬Öð¦pa_ÿ·;§Íõàþ0¶Ó¬vOË?xzÒqǼsåùgÙ/÷Ì< Í|}Ž_Øæ •¥39¶×ïÆ {¨k?ß#¼èrS§J îLý:9ýÍŸý½ ½^[\È+·|Ž–¿ÖõÊnòfáU²£gíjî¬*¯H<˜ÂY4ý£^Ø1ú +œ?Ž(àï},—¦5e,Щ1^–q¿XþîÊcÛ9ŸF‘Ò[ûìŽå_µ„;.Ö™þŠ°'¾ÁZíºw·Sö»
;=ŽRÒŸVÉmÒ3—ÐëZìZ]¢¦0¶x€'¡}Õ»^u6‚Wõ×Ó}G¬Œz8ŠfÏâTD³éoN×`'çÓ±9Ͻ´|>ÄQáž_ú1sãwŽúTÕZ¥gž‹sYgÖ•Š€¿~‰µ»Ìüp"ͯ\RiàÏ?U†ìMñ lÃåWƒMLKÃç ¦µÇ†† oÌõ6°?+ôůFÑÊgq‰¸¢ªÌÁw ’¢}ÄVˆy^X§§›¾mNÒ
zx ºkwÁÎáJŒ,/•÷ÛóÕ§ +ì³À1æà‰4;z +(Ë·àGuÿ2Î-X/BMÀHL6Yïv¾wÞª"¢c¸ë²Xn‚@6¨KÞ”Ó¬¶s°:Â?,ÍR4ú·M– :iÌ©2Žƒz§Üª’ FeˆòKÎ OÍPq® /¬¦Ë3DÈ3‹#;ý$J±Ý½©Ñ +IuÅ )CàýÙ 9˜ð„×7e琉æ {ƒvHF=½T–íG¨Mó}ÕvŽI¸zH)þF¥äù#›y*¯íÛ$X+ a4óÎŽ3}I±~DœÞî7 óëíŽ=¢Û.µ=ÒëpÊB«—˜?õ:'lH( “ ñ4ÖúšÙ·òW4Î΢†f€šäÛ ðùHƒN¯•1!-¡7×,̶eÚ8òú†ê¦Ñüš³øñ+EÒ§,Œ ï óó$,|¶¤>>“õgs
|ƒÒK%‡‰sf2Ï.#[™" d·õÄÉù‡1--*BäðOÂŒžv~õéÜAg9l.óVþnÏC¹æ[rÑÔw ¹jëÝÏ—«…›€6\“ß Zo:âus :xð$<3ßµãSGçåu½ïù: íU.wÑZRSÝæìOjó§Ì-“:‘?Àñâ«|´î,¼¯Aµ
•¬ha%™
Ù½-ùüÑöYFaòÕâÃÜ€;A¥°J@K^c‹T–S&•¨±¾+íàÀŒy÷ €Û˜jS!æÙ=ÉKC~*)‘“ÚÒ{ô†x VnW¿h©¡…wð¹¢E]„d¿yçÆgêÊé'mÓT"p«³¶kÖlÀ.ª´D” ½l\…ÈWâíÉäÙßÏ'Œ>m9®I<¦Ü6 ë:©èöé™A¥Þ±¬#ÙòÈG›p +-ô³:Ë5ŽÈ¨¾ÍÐ|RO8þåâ=çç"nT.B(p? +óÜ~•/²ß²w×cÁ{n4 e²~וŽ C³ÀÝs™ y{]?ÄímBH8ßBìð/͹˜°à:ÈõWÎ t7| .èzýø½&ÞêùŠôTÕä]êÁFσºvh_L¨ã# o$uÁœGIÕsÂO¦Æ}rÑæ:–ø֖Ǽè1œ5݉¶y>j±
9é^tû¦ÔxÑœÒÐ]Þ&«gæaÉÆõi»ª5Znú2ì*ÎVÍ7%G¸ˆxÛ‡‡{>‡·‹+<W +Ø£¹m½ÕÅ+™çýr®ŠVq‹-A«Kݼ‚¼†iôŒ Sf\?ÊÃI“hëñð”佩ô4õ¥ûBòÁÊT÷QAïëÚ£FÕî'•#Ú1=6ˆ¸°¦²ÊØž=î ÝÄçÑ'¹
ßËïeeeH PAeØ禩„S
"k*¾@¸ñpúÊ2NÖkŸêܳâ5dSž]|x,Qº¿üÜ™/ùúï/0”º˜'e„"OToë`ž>šÑ+êÛCÌ'¾Œ‹¨ºeh<&n¦?–&iá’@–ÜXÄîÞ—h+UÄ’ÇS\Ò~Ÿx[l#(Þ*וÔkßtéÁAl~Mwß•
ÁÇâ§ìDǪ]‹‰þã]ì™´âRYD\¶¶)+¦./'Æ©À¥>¹¿Îg…keÍÈÆéÒx½"K †b΄a)+Uö¶Äp‰ñáGê…xª[½zp‰ôlݺØ-nZw#×P×eeZÒr-’§ö…]Ë}S'ï7 [òt«ýŒ8ñ)äË7|Av®•+‘õ©Þ®óûéÓ¼öCÞ–1»”£á5Êd ˜œïõ¥ökž/5_ ¯â®ÙU)|kP5C¨¿¤Sý_>ðÿüOè ‘Åa†YÁðhȆ~(—þÍàÿ;@µendstream endobj 1440 0 obj << /Type /Font @@ -13380,14 +13394,14 @@ endobj /FirstChar 97 /LastChar 110 /Widths 2734 0 R -/BaseFont /KQFWUW+NimbusSanL-ReguItal +/BaseFont /NQJRHU+NimbusSanL-ReguItal /FontDescriptor 1438 0 R >> endobj 1438 0 obj << /Ascent 712 /CapHeight 712 /Descent -213 -/FontName /KQFWUW+NimbusSanL-ReguItal +/FontName /NQJRHU+NimbusSanL-ReguItal /ItalicAngle -12 /StemV 88 /XHeight 523 @@ -13410,39 +13424,42 @@ stream xÚívgPTݶ-HPPÉ™&çÐÉ™–œƒº–††î&K(HÎQÉH ’sÎ 9#$ˆ€øÐïžsn}ïüº÷üzõvÕ®ÚkÎ¹Æ sŽ¹VmVF-]^Yª„p@óùž4`ö–Î(]°ƒ¯ ÜEXYå‘P0†pP G8ÚC зÿãºP( ²B р۬Z -JñDÛ‚Ñ¿s£`·n -uƒZ|™BX‰¼LLIB—Qdt
(<okbu:æ}Ò{ŸíûÑ쓼,Vôâº4¯rèéMûäŽãÏõg\=-äpöæxèA3gkö£¶Qî
~ó<¤]ÃpÏà µ%l“Ç+Ú:æ¹×w醄x‡ß9}™]²}IYÎ ‰¼*"É Vb—åìì²Å|ý~ÎÞÑÛÝÕÙ|ŒÓºNà ‰Ï*î‚MÈæë”N#m¢_äa™ ŒéøÛÔªÏ!´0sL^µ$0ÙÂÿTh5ë¹[Fúù{ª\™ÏíßÉúÐâ¦Ùé%üföC ~–fí*!Î:‰EvýÔzð´÷Û6гßÕ•Ü ê³º£Âgü«e‰;}ƒv©b]ùßÖÒï6”‡ùÚ}sø.Gj¢T«$Kñ£•I
âQ–®‹Â~ÒìEÛ1w.ì*Çbr|¬½}$oÖ‡·Gs]> Ã?V1ñŸx£+w¿³^õ9’e‡Ð†ŠÚ¥ÍäÊu””7œœ¸äNÑ ÷ˆ¨/ùŠõ.‹ú…'Ð)á0äPùÝÚ…k e -¸ éÛR§ö -]8sô&sß±|*åŸî#>cÕ¯‡‹úœ‚ œEëÑymeê÷AÆ€>8m„ 1œ4¬jõõr¦XÜâd8„²³¤¿V>M ¼çÀ7ÁÜ&N\€*ÄJÒÜOµøï8•^Ýçôáö¼J%qõ‡ ‘®.µ&у;ìXBÒ0ÊÚcVKŸ0-S۷ߌG?óí·Eƒòñ(€(§¸Ëš’=´øô•ú+y\J6.æê” ‹‚œÞ»ó^eúÞ‚·V„(õb*$Ã=AÁžéÌmEéïa9ž oñ€Rý3™ÙÑS×!÷8ÎãÒ9‹ÅÕçÜrƒÅ£‘C™Äù\‹-ÕÕ²k±ò¡øáÃÍ8 -ušÅ?Ó<–“G¬ -hEá$=k -jK‹ê\ô#Œ²Ô_j$ø>Û}~';Äë 08~Ⱥ:{¤j7l˜ŒEÖÉ/‘ÕØô 5³î*Tô#ÛýêŒm¥(Ÿ¡\B½MÈ b\Zk³u -ÂKJ^'W²Ù3FÁå¤éÉ.ðÊüÊÕúìðã‹’c=,®¬3jÉ/Ì ¬}橃”.‡Ó6Š& êÝîU¸¨Ûkh•kgݺKÙ!ì`M«a'x0¡ƒÌ ùts«,t-¥§†ìC+µýÝû¡ÝÒ^aâBý" ðf°Üpû š±›õvV¥³ƒÃ÷Ì
×pJs®a¯—ÀœÉAgÔ6tå„è/ZÅkQ^î›íF“’Ô¯[t#¾]°rÛÅ‹60^Ùý” ðzFYËP’OI*ÄmÉ×d«òñ¦¾âWfÖòûé!ou¾qÊÜCZhµ ÐÞ“iQ'÷|(D¦¶xÙ*ª÷d_R½˜Ñ%8Z?Èb+ - à‹)קw&¬š>òÕäø° DxùAt€næ£`öVkøqvëð1']/¸t ¡yô8,TÎ.a Os%/i5 -ÉzY`yÖP@-ª¤9¯ŸÇæžÓçý¤>Vo€Ì¢éªd>Í/ˆöõÏ}êY -³¸~h—•¸8˸ƒŒFF¹õ•Šû?ih -vžj ×`Ú[›öÇ|-…>°ë=].žàŽJ,}”›ûÈi±ð!æÛ‹õÛ‰ÌJ«—–r• øœEk ±9,ð”ˆO’ܽ…n®Ðq !páxÓ“1¶¥©~à]ÙDXÞÑTtÿ Xwd‰–¸rϽ”T…³k«eÛ?ƒ6òg¶òõPªj~«YÏZš{JÃÁp´hü@AÓœlú)ÿ€úBè×@aS‡ž”Y2(õ¡r‹¼û^*84å¹uÞVi¢¾¡HÑÂé…ØÊÏ–)ŸÃ;c4¢ž/{Ž¬Ûe/HìEˆ…jŽÚ¼9CÖ •Š ‚ŒüsB—W¨Èòè!&÷E*l.\ÙÈL4´ÚËÚ÷h„¢Æ·GñZÍŽ<çYÎz9†CÅŸäᦠTKñÅ3c/ÕQYV;Ò+Q%_Vªdá¸ô¿ð‘8ܳ
v4e$2iä*õ Œ9csõ3k~YžØaí¼zf ¡ äö•Á’±¥;Éb1ª"(GO_XLô>ÅGçë%:}¨= Â[#™µ¿Nôp½vCžªÂíu>N1
¬Ê¼íQù„8¬ì¨`æWn-aö§m+´Y¬~5A”XĽh§"hV לÞ_9æJqB—¡Ìh'·ïžrs)¤<ÃÑ!]‚ŒšÙZ~\ÍHÒzU´NÏh“[€Hái3 -RgT$vÊ®éï9‡á׺ù§ßWŸa|…psØ´"ÀÅÑÁñgð~¸¿Õxy¿oA‹z¾Â¼âÕëPúí -GZ÷± Z6ÂlƒÝI§(²‡ -?Uôü¬Ë÷ -žä¶5Äõv!.[7$›\ÙÌù ö %Ü-DÇ9øÓ\¯ÔÍŸÄ7 & Oâ×ÏžÅÚÅ8“£òÅff\Æ
--â×6™…ÈXÓØø¬ï¾ÆÇ„)h}YÆ ð–êA±>–?qhY êJÁoȯü¸"Š˜‰œñµŠýVw$ˆÇÑ5-C¶Ãö&šg ŸI}2Ñ»5ãùáö¶DăuéBÿ;¤»¥ªïÕ\rþhüæx€Í?‚^z:“Å„ê!Ïå¨Ú -DЃqB[äßTœB<ug(°Ø˦×ý9J~¿|º#ß*ý2üÌ‘ÔLÉ{¾OO±ÏïùƒiÌ‚øœÎ'=Ú‰d ž•TŸT¿ÇÍ8ÕíÌ¿Þó£œÁ8©È«ÚÁZ±€,m³2ÓDŽñC£{p›®
Î>*«ic:5uª ÍÐåS;ùEÑÎÙÀHoÑÏWçx ×ØÄИ0uÎlPÎ5 —¢ú½»<>ÕW:‹ƒoY2’˜HJyf€ÇòTcª§Y½ªÄæ'Jçx{êI_Í[¾ÆuE^n¥ñÙ±pmËISDx°ñ¸U -JŠ+Y–¾^#Y%ÿ GpXŽÒ0Nãˆ&^-`iªiðŸ;ÐNU‡UîS ’7K±Åüð[Žç&“vñ;ÁsZ §â§u‰ö´{§¸àôò‡ëòÔˆBW
×B‹CóáiòT£ÊÚÿ“±'ŒÒÞÚ¾
ZwÕ¢‰?U Û.[
h‡)qŒÐÇ -¯5Áƒ ¨“¹Ýa%µxkÐÏ_WÃp)ÉâüdÃS<C&fåc—Åo FÏT±Õ„ú° -)è@#{ë>Y]K ¢þäWOk‹à0É -m›Hi‘œô
d„†q. „WôâPløFûÐÀî ±Ü"“[¹É`¬?sòŠô£NÙêqüiv Ž&#‘ÑPb6G¨4Ùpòã¹>¼¾_$”ì¹J‘N x?~«=!ädœGû¥ªw³ -‡¯0&;ì8u¶IýÚ¼ü?"¦ûø}¶lÞK©#«ÞÓBüFçõ'Ã÷bc-~Žò8îêÜÕ, |¦,kÏ%äq†Ö‰~^÷ŽÓ×™E°~r¥¡˜[©¹Ùéù _T¾lÌâÍî -ù¡M½Þöxhá,ÿ -áHQ þY»Bå <GJÞ,6]JOU?ÀÕ«Uh´\ï MNñÂçzŽùy¬˜+߸+¤ „#äoàùØÈ)ÏøÅ PØ -Û9ÔB1®¥Ò[Yù=cÁöâS§¹óp—ü›ÏUÞYKf†mˆ¡ãž\%¬,Ü1õ È<o« »—ÆØ1D*@„ã¯O‡¿q¡ùî)uô¼ÍÌâýükjgWØ!›ÖöÎÏb¶wéÜ/žbmS`¼•9yì>ÕjªâD^ûÐ."߷ƽú5Zï°Æ溱@²¬®fµ4ðÎ^‚›M²¸©ým|ÿ ¯©‰É«ê4 -$L¦nW`6»SN™’h܉¥::`í ?ä·¾:*Q “ן”„y ·±,ˆÅ’·õç ?‘²}ùT{·BV°£3ëÉZmmsÇBkÙ-’Ãøá+@™d× Ä¾€ËM¥Üšô³lŒ~‹ûÛ«/xôñTpïÅM~âÓ¶•˜IÓA éoc_3¥KNI/6V à&âûßÕ{´adÂ{Þ@:C&] [°A=Ûe¾¶5YØøJ>ªí®(íPãHš(b"»,ŸÚšíÑ)„Ï\˺_ºw‘©¿cð>b»¨Oœ»ÛybôÃ$ N`ðöL~kñ^óÛSïž]Þ ÙXƒ‚AW°}´e•!]¨µØìà×fÏH Í·Œš’ ƒGïa:Õsg«1ì8ñÍÑ –äiöÉñhCìò´g¯Ë8ßêô-Ì–~‘9V|T±&Nn·äML† ‘§ÚDü” ¹Ú>I^Ž”[û•ÞJ¶½ÕÉò<
ë•Zv·yÁ<ü0ˆ¤5ºŒ„hO!ƒÈ÷sÿððd‡åÁúÌ´Jb+"ä(2mfƒ77Ê¿”Í -8*v4ºÏÄ^±ûà+h5zê2¶;šÞþ,-õQü! C$yw9†CšJO ™Åˆq\`±"H,Þ)T<icº ¿ª}ZþK§{«Þ®ûªè&4CSQ~åâ7 ê -QH;ǘ¢&šùŸe“ô¿žUÙ|µ°Sc0R2YE]¨ -‡á{__ bçâ.°ßþ -LóÃI8GU–¿Bã¡\‚–Ÿˆ{éõ´Sû›7M‹Š–…;ûÛ䃵h¹0GQœ&÷
<‹"œ_ý¼ÈAze‰ÀN2ÿPÜJ"u ]©¶ÕLòs.}æQùü‰iõHö5¨ñ‹‚‘öqLðëƒýUj[’ =Á®…1Ñè²YÆHOŠåoq ’„!¿‡RÒ¯¸ð%ê«~u¯ ³¿0Š×·6î;>nE=m½aÔ\{\ÄcïQq”&T/bµ^þü‹}m“¹ò
A’ü陈×O/ÍI>c×b%ÒÌ&ìýºªú· ¶mJ;û7žb{ª6eC‰Æô_è<@ÀbW’+Q'‘šäçÚU›‚ݧ/ˆ+ƒË°a -<¤þdÑ
_IÒõ.˜ê¢Ï\9¾§é-xÚÖ-9?›ìÐv_ wóý}¾éH` …Ñ'>Êß4¬>äŽT‹¬ÌÛúGäµGÔà…$Í ï‚7LI›u`žUJ2ì„΃79ç¯~f´láÊΚìïW 5?|¸':U—.ûrJo ÇÓlÔË5áAÜçxE ³º×Ø §‰3Ç•ÚTñ#åKþtâ•.iKW@ö/É›ÔÑ÷ ûj&Q ¦ Œ²È˜¥t°Èð§Äh-ؤ1íý b?e¾™F Š– ÉXrÙ/&Šjz©¨rAÁM°re.2Òe%ÉÍ£™6"5[¹(H4 :\mdb“™[i: ýP½2“¿Ýä÷ö0JÑ»pÕh¯Qš Q¨ý±Qó_»Ã7;mþã«÷Aú^ÁÐ; Ó èvñ¡Õñ¥ã«*’Hóß¹,QëtT½}…ÁbWý€g”ùxÔ$Ó¬GÞ×™®'}¡uÞói õ´’D§ùõ; ¼x ðÞÔ¡Æ°~.
°öâ%ÅÅ4O”˜»ª¡ Þ»Bï\ÿÆÈæ -†ìvm…$t§³ÎLd?莑ˆ+í–«I&VñZ"-¿35MGöÊìä§7À Ñ4‰>ÅauA×W¯½r‚…`Hã×W{Ûw1Û®¹E¥^["W¬%BŽ… >«íÜMÑ#nNCuy‹¼Hû %Tž,TÜþ0]4.ïdîžk0œPañœ„5ðY ÓëF–?ªU'?Õ‹«žäfü¸Š·Ö¤qC r®až1j, †º¿÷2Ó“=²õáÿ¶D4ÏØeÊÀ¿I
Üóv¼ vþ´b„dîÿ¼ø)xý)\+"oÜ´¦ÜD1å[|)h$úØûe GUeŸ?õ¾†Ó<åízznKB†Éd–¬ö…Àÿò!øÿ +JñDÛ‚Ñ¿s£`·n +œ6B†NšVµúz9S,nq2 BÙYÒ_+Ÿ¦Þsà›`n'.@b%iî§ZüwœJ¯îsúð {^¥’¸úCHW —Z “èŒÁ v,!ieí1«¥O˜–©í[oF‹£ ‡y‚öƒÛ¢Aùx@”SÜeMIƒ Z| +úˆJý€•<.%sõ JŽÅ?ANïÝy¯2}oÁ[+B”z1’áž ‚`Ïtf¶¢tÈwŒ° ÏŽ·xÀ©þ™Ììè)‰ë{ çqéœÅâêsn¹ÁâÑÈ!áLâ|®Å–êjÙµXùPüðáæN …:ÍâŸi ËÉ#V +.¡Þ&ä± .µÙ:á%%¯ÆƒÀ+Ùì£àrÒôdxå ~åj}vøñÅ +E“õî
÷*\ÔíÀ5´Êµ³nÝ¥¿ìv°¦Õ°“@<˜ÐÀÁæ„|º‡¹Uº–ÒSCö¡•Z„þîýÐni¯0q¡~‘ +5¿Õ¬g-Í=¥á`8Z4~ iN6ý”@}!ôk °)„COÊ,”úP¹EÞ}/ šòÜ:o«4QßФháôBlågË”O„á1
QÏ—= GÖíÎ2‹$ö"Ä‚B5GmÞœ!kÊ€ÅÁFþ9¡Ë+TdùGô“Àû"6®ld&Zíeí{4BQãÛ£xæ +Çžó,g½ Ã!‰âŒOòpÓª¥øℱ—ê¨,« 镨’/+U²ðN\ú_øH îÙ;š2™´@r•zPÆœ±¹ú™5¿,Oì°v^=³ŽÐŽrûÊ`ÉØÒd±‡U”£'„/,&z ‰â£óõ¾ Ô áÌÚ_'z8ƒ^»‚!OUáö: §˜VeÞö¨|B VvÔ0ó+·–0ûÖÓ¶Ú,V¿š J,â^´S´+kNï¯ s¥8¡ËÐ f´“[„wO¹¹Ržáè.ÁFFM„l-¿?®f$i½*Z§g´É-@$ˆð‰´…G©3ªV;eW„ôÆwœÃðÇkÝüÓï«Ï0¾B¸9lZàâèàø3 x?Üßj¼¼ß· E=_a^ñêu(ýv +-gھ蟖¤§I„²kZKéä”ð +›û,¥ñº“Ûý ÙU@žXÒÖrÝ}Â;´w`D.à™Œ«ž¥ÅÇ3\™»ølð…Ébñƒ¥‚U³¢ÌöMÌœÞÎÛJ”…¶WkÓhý j¢’«qµD¹Kz瑳³B|óG\Caî+þ¹*ÊÛ~¡ñ¥ ÎGÙ§}–ΪJæÄäû§ W÷HíÚ>ÛÀaòœúò4ó üN$ÕYYšžÇï_œ••W+vqƒÛSš:± 0ZÌ©„›a‚â[‹”%sˆ{¬ Þd?zä7~ÞÛsý3M{öži17ÍÖ‚\"éýGeã3mì7 +Kygm/®SÉ çÍÄ\ÊqÈbO;z¸‰ð «-4'¤§€+k=ž~(6¸hLìÈÒúô<6»¯´yjÊ^"þxNLÝ°Ç%3jz˾‘e2 ÃÏfĺEÎ>_žÝ(¸š¤²uy•“®ƒ›{!Þ4l"ùíóQtñÚIÝE°ºÙu² ¯‡Ån¹¹ÄùÂGˈÃÄ › +?y“w¾ G$ÜË×ß™‹<Ê™2ãtÏ¢Þ}ÿ† @´yIGbc‚²Kê·HŸ|ëÖ
x°–Ñx½Ùþ2—€_M”+=‘Û~d˜„“•/tŸ†ò³vLFd*°Ä¾ù±b«&} ¢¥çË/à¥2 ?‘©"B¾,|BÊ1û楛æŽÈkf}°¿Åø«þŒ„g“IÆÞyã8‚© .ͲmhïF`”ÜN‚”ƺʨjÊ éž=wþ¼æuußÆ?ÀTÓˆ½~.%º·2¢_ ½¥’()“5”ôe-èÍÜhxlšŒS+é\d®ýÞ¢Ïd=ºñbfýFÇO¹!3‚"Ž±6÷'íjCœ´¾X‰Œ]Š*ÅÂBùwK‡õiŽ€hn"d²¦…Œ·âg쎓š™Îë`ÎÓp¦»²'UJfaþ»f[Ĉ]ˆ•á®þÍz´&—À$ñZ¼¡®i¾—fG‹LßÇzbÕû\dÊÅï격|X“Ý\sÉ•ŠØÊ+¾ÿ fÜŸ|>„%ýHÎÌÚ` =6"æ’P«ô9#Ñ\ Ó#3z-Rô|%ñ¨$¾Gc ^¤‹M ]÷²³Ôú{'¢_ýDÊû1éÍ*õ,θÈêÝþ²â³Gƒg¸LMa2B Æ»é»*+M[TÏ•´lm§ 2!ž7V¦Ôˆ·nŠæ‘’¸†pj7ŒÙ>ò"$›XêÐ:{—¶^˜u^9Ì’„‡DW¬9%%^ ÑËå,W0ß²¦ÜÝ™ZÒ×ý/õ{øúÆ>²Ý” à/"ŽDkúmù0§_ì>WTxìÑéƹœ ‹› +zƒ½Ê- %¯Oà¸L5“‡û’ªV,î½øÊáÃz‡>ò&ïw¼´rY6Ç—ÆJwŽGƒ ±Â*ÜA5ƒ +ëšSùSÕi…Ÿ*z~Öå{OrÛÎâ¿z»—’M®læ|Pû„î"‡ã üi®WêæˆOâ›Ð'ñëgÏbíbœŒÉQùb³ 3.ã…ñk›ÌBd¬ilüÖw_ãcÂŒ´¾,ã
Ž +¢&tG÷ü©Ï¾2¤ûôþÌÓ(v'«.Š +òôÿÑü0íû¾€Žˆtß +sožbrÌûvE ²ÁÅ/ÍWRÙu/w¦ØÒÕÛïòxœ‘ h<LšøÖ‘pí Çâa
®”Y +Kqh|>6œÊ³(æÀ’ßë. + a‰ñµoWkrŸÔgÔ ÅÖº›Ð˜wÜ6î ÂÞN¾Ùö
i± XüÐ~ýÅ´á´ÙÞVó Þ³6÷³Ý>EŽ +‹^±Šî±nl#šñ‰65%,ç_°Oê”+µNý%Ùz¯>W7¶]•fzã}A}H›ÎÀSÝÀ~ƒQrNÉ)îs¬þr]Lf¸á“ +<á¼ØËûò
Aê)¡³k¯×ývuSøGlVªs#Nu¥¬·OŠE•?.j?ø ÿ©ÓwGä“øݺ23oªkvSÛë>Ñ=¶ Ðz¸^"èÁ8¡-òo*N¡žº3Xl‰eÓk‹þœ %¿_> +Ý‘o•~~æHj¦ä=ß‚§§Øç÷üÁ4fA|Nç“ž@íD2ÏJªÏ ªßãfœêvæ_ïùQÎ`œTäUí`Ø@–¶Y™i"Çø¡Ñ=¸M×g •Õ´1š:Uпƒfèò©ü¢hçˆ Šl`‡N¤·èç«s¼„klbhL˜:g6(皊…KQ}ÈÞ] Ÿjƒ+ÅÁ7„,IL$¥<³
Àãyª1ÕÓ¬^Ubó¥s¼=õ¤¯æ-_ãº"/·ÒøìX¸¶å¤)"<XŠxÜ*%Å•€,Kß‹?¯‘¬’ÿ„Ç#8,Gi§ñ +D¯°4Õ4øO‰ h§ª‚Ã*÷)É›%ŠØb~ø-GÈs“I»øNà9-ŽSqÈÓºD
{Ú½S\pzùÃuyjD¡«†k!ÈÅ¡ùð4yªQemˆÿÉX‡Fiomß¿»jÑÄŒŸ*m—´Ã”8Fèc…ךÆàAÔÉÜî°’Z¼5è篫a¸”dñF~²á)ž!“F³ò±Ëâ7£gªØjB}X€‰/‘'™“š"ZtÍCöEqË’¼R7ö¿Õð®ÒÂö@.)¨F…t ‘½uŸ¬®%Qò«§µEp˜Çd€™ÑÛkï#Ý ýFø‡‰0A³KE*3Æ€F ‚é®0BÖLqÄ`nÿ‚Š%P爉䅟Ú*›X‹²Å·jÔi÷b¶‹ôRáó"¿¬žû6vTZRœÌ°T3 Séèv\ã«%øÜýI ¯”Þ¯é¡ëæ®ZÖ·mpßú”Qn?ø&Å—Â#Ôߟ›ì}ÅÀ^í° ª"Á"çt{RH:†×¼woŽ¸ÏhFO°™§éç€oÊC£B÷~”… + sœçã¸!q?Oƒ¶•G¯îW̳ŒÔ)HænÉøoÌF–A£Êå{Ç‘æä8£jýäUu;W+Aà¢ïóÇ;X;{¥ð”ÇÎwÆ}x"
Æš=×N¿nc}& ±Éy[µ ~œ ¿öµh¨»š«¢³ñ©"Ì‹üEmÊ`;µ +Lj +â³ß +Ì Q=w¾?‰¦6ª~ûá¤àõd‰xW/aéÒÛ‹†Cú\»UÒâàfÒ~…¶‡Í +¤´HNú2HBÃ8—GÂ+zq(6|£}h`wŽXn‘ÉÖ\ƒd0ÖŸ9yEúQ§lõ8þ4»G“‘Èh(1›‚#Tšl8ùñ\ ^ß/Jö\¥H§¼ ¿Õž‹r2Σ}‰RÕ»Y€|áCžÓ |ƒi
xCª ݪÌZ-›Çð0ÜJ LÕ—D9dkùåΞ‹üÀu !!‘}U?³9Ü«eŒiÒF̦ì½Äõ–çwNRi¸Ž~ÑqÂzÊ—eh )¶ M# ±M¤µ.?¶%aÿ5ßóÀ€L]t“ö´ƒÓÈÙ‹CM³Sꣲlµ^÷³²ÚfÉÔë'7±‹÷bqÛG2®K œ¾’j…Ã×?“ vœ:Û¤~í ^~Œ Ó}ü>[6ï¥Ô‘Uïi!~£óú“á{±±?Gy wuîj>S–µ¿ƒÆçò8CëD?¯‹{ÇéëˆLŠ"X?¹ÒPÌÔÜìô|/*_6fñfw +=ÂRŸó>Íj óðÔv)Ùyÿ¹[G¼Ü5)…ðwÃä¼Ar«òqsV +…üЦ^o{<´p–…p¤(„¬Ý¡òž#% +o– ›.%§ª¿ƒ àêÕÎ*4Z®÷„&§xás=G‡ü<ṼǕoÜRŠÂò7ð|lä”güâ(l€Â(Ù‘(8Å|)ÿ¿wÆô/þQL™ uG«ØâÐÏœÎÎ~N*{cÀt(û6HÝB=viˆÀ%ŒÐ/ÌÐà>^P䶊ŧ¡¯ÕrȈ=ÂÆé2¾ ldÔD4“kêœÐw§3\Wd†@$B}vÓmwÝK&à#ýÁ?¡e6êœÿ¸¥*IÖÔ*Àií¨²Q„É¿åAFÜd@+íy‡í j¡×Ré¬üž±àV{ñ)„ÓÜy¸K þÍç*ï¬%3Ã6ÄÐqO®Vîz +Pdž·ÕŽÝKcì" ÂñקÃ߸Ð|÷”:
úaAÞffñ~þµGµ³+ìMk{çg1Û»tîO±¶)0ÞÊœ<vŸj5Uq"¯}h‘ïÎ[
ã^ýŒwXcsÝX YVW³Zxg/ÁÍ& YÜÔŠþ6¾ÿ„×ÔĈäUu&S·+0›Ý)§LI4îÄR °v ò[_ •(ÉëOJ¼‡ŽÛXÄbÉÛú󅟃HÙ¾üª½[!+ØÑ™õd¶¶¹c
¡µìÉŠaüð L²ëb_Àå¦RnMúY6F¿ÅýíÕ<úx*¸÷â&?ñiÛJÌ¤éŠ Žô·Î±¯‰Ò%§¤+Ž pñýïê=Ú02á=o !“®…-‰NØ ží2_Ûš,l|% ÕvW”v¨q$M1‘]–OmÍöèÂg®eÝ/Ý»ÈÔß1x ±]Ô'ÎÝíÎ<± úa’'0x{&¿µx¯ùí©wÏ.o†l¬AÁ +Øο>Ú²Ê.ÔZlvp‡k³g¤…æ[FMIÁ‹£÷0ê¹³ÕvœøæhPKò´ ûäx´!vyÚ³×eœï?uúfK¿ŠÈ +>ªX'·[ò&&ÇŒÈSm"~Ê\mŸ$¯ GÊ-ˆýJo%ÛÞêdyž†õJ-»Û¼` ~DÒ]FB´§Aäû¹xx²Ãò`}fZ%±ÆÈr™6³Á‡å_Êf +í&2Pƒ óuíIŸ[^|uÊàïíŽl«0x¦ŸøpÙ(ÈÅ%mé…ÆÃð½/¯ ±sqØo +ŠÉËQfþNÒúðÄCzòÛgêg_åD6ºq¸I“ª¸ÊFØ2ËvÖ¦™˜¤Pé¿g¦Uu䂱~Õ#ÉUz$¼ +ÇHÄ•vËÕ$«x-‘–ß™š¦#{eöòÓ`ÐhšDŸâ°º ë«×^9ÁB0¤ñ뫽‡í»˜m×ÖÜ¢Ò ¯-‘+ÖŒ!ÇBPŸÕvî¦è ·?§¡ºƒ¼E^$‡ý…’*O*n˜.—Çw2wÏ5N¨°xNÂø,†éõG#Ë Õ€ª“ŸêÅUOr3~\Å[kÒ¸! 9×0ϵ +CÝ_‹{™éÉ YŠúð["šgì2eàß$‹îy;Þ;Ú +_ƒ
ÃižòÆv==·%!Ãd2KVûBàùü€ÿ' endobj 1364 0 obj << /Type /Font @@ -13451,14 +13468,14 @@ endobj /FirstChar 36 /LastChar 121 /Widths 2735 0 R -/BaseFont /EYNFEW+NimbusSanL-Bold +/BaseFont /CBGEIZ+NimbusSanL-Bold /FontDescriptor 1362 0 R >> endobj 1362 0 obj << /Ascent 722 /CapHeight 722 /Descent -217 -/FontName /EYNFEW+NimbusSanL-Bold +/FontName /CBGEIZ+NimbusSanL-Bold /ItalicAngle 0 /StemV 141 /XHeight 532 @@ -13482,7 +13499,7 @@ xÚízU\\kö% ‚»înA‚»»;PHî®!x 8 îîîîîÁƒ<$ýý¿ÝÓ·{žæm~Sõp¾o}ÖÞ{}ûœz) U
1Kˆ9Pveá`e „8 l)qøCÀùÏ$AÎ@‹×¦¼Øþî› âöùØ -¶ü³%K7G6-0ÈÉ
('ù?Á¯ò¿0k +€‡“Ÿ +¶ü³%K7G6-0ÈÉ
('ù?Á¯ò¿0k +€‡“Ÿ qýñ$X8x8þÆiÚ€,ìÀ@—׳ø“‚-ÿ–R l±®¯SiælùOàÚÂÍÙùÕž?èõÞ¿öV ×@O òÊ"ÄB0Ô¶6´ý¡ZŒØƒe’«Wëî·97rŒ=ô7V˜^e»bîÜÛwŸ³$UÇl„+
`•`¡Ã㉥bø<ìøÅ;X°°Ã°`d#‰NYë„”P/駯Øûˆ¢ R¾ Kx
Ê^P”ÝéÑKL`i„CpH ôœTà‰ÉÊò+TŽøñž‚ÏUdíýÕàçG:%Ùmƒ#RPä»g éäõQOï±+:°LûÅÑxæÃe]k/͉õJø:'º8ŸlJÛ¬žªG óy乌 טòQK6‡
Ñ+íLvþ˜ð‰Å16(ÎñkX„Éßš†+…¨pœ º–QÄ´Ô ß^î)RêÔ[W,,¨Þ‘õÉ»ãp%n×)iuGYÖǚπñZ¬Õˆv4¹›îµ:®uľõ«GZýÖ:„<=Ÿ@‡ª˜yÝ—l:GBÎÚOAs½À:rÁ Uuiw™ª¨,w‘ʽVç±ÌwZ6ç]ºš½žWßÆe ͹„縤h£öÙ8âØYWÑtÔ¸c}ü5æ?°5&Jt” ùËÞ ¨—OÉËÛòÁHÌîZ‚pr_‘\OœÅ±„4šß²~òIÝbâí‡y"ûÊ“¬4òŽZ¦¿;‚Àždz™RÑ t[ ^cíÆ=ðàæ÷Ÿ‘øÜÏ•ä
=X}§^ÍóâÓÌ:Ë;}ß %[µ, ýÉЛ>µÞܱ^4AXç%ä#¬wÛ±W:eÅNã¥S¶SÈ“H f÷ÖϦŠKuP ·}.óF!Ö§•"k¯“/ ågö«ÉФÁ ê2³Õ°"Ý ÝkÇÃñJ @@ -13512,7 +13529,7 @@ g~nM"up^ÅÃÓíÓêè” ,{!5ÿ8¿UËn Ðú‡ä9¬PjK¢!zóÙ!ñHaŸ´Þãïÿ¼£êOß,?€úVÐz¾’¢Œ¤ñ¸gTW-Š«XÑèƒðN¨PÊ94X}chAc~‡ ^ÅûI8Y½-°Ji ¾á.˜<®¯ÇIâšo,¦ÙNì¥#ÊͽÊûÊàùk¤lùnýh2³ÒþÝu< Aíâ$FŒþ¦ÏD!þ:ƒêj%FDõŠ‚QúPÀ„´èÖ#מbG¡³°ï\ùe%mËf›‘g'CÕ䦨 Ñ)Ê $‰‡x`A%*›H« ¶#Ì'å;…p‘ûÚ9ß/iÔ¤ N…ï #‰yà E×Óz˜8ƒÄÛ¼êpXe€N®Ñ †µ§r%ç˜û7¯¼Çé&ï`Foùª’׬ó›}tW™ë',4Ó‘õÊ™‘8‘ À`Z*\-šðú[Ü‚JåÕ®{i!Ux„T
û•ˆ ¼‘‡ômÙ85û)îÛ¼e¢ý¾KµÔÌ;¨žè{ÜÈ¡¾è{´Ñe¼Žò»~!–±l ˜×R¡^n`žTG?ÂŽÎCMž—û[©s¬ ;ZWÀá¤ì`±3iSw-iUÉCW ÚVâ>xj„E‹ŒwêIo³}‚üH—ã Örú ãkÑnT‚e¿S< ¢x
K»«- 1 …‹54ËÆa«÷-ÕÜ@ÚUóªîÐsL/}8ÀѶ›Ñl¡ò‰ó9È+ß©O¹È¨qD‹£RKˆ7hëÀûÚë,l³Ž[‹x³#‹³ÆÒ4 -¶ÿÚ®½–ZJS•ñ~´õÓp+S!¨yWC6Æjy.Lä“X 5 ^g˜Â£˜ýÿòƒüÿþŸ°°š9»B Ìœí}œ.®ç?þ€‡ü¿ +¶ÿÚ®½–ZJS•ñ~´õÓp+S!¨yWC6Æjy.Lä“X 5 ^g˜Â£˜ýÿòƒüÿþŸ°°š9»B Ìœí}œ.®ç?þ€‡ü¿ endobj 1361 0 obj << /Type /Font @@ -13521,14 +13538,14 @@ endobj /FirstChar 2 /LastChar 151 /Widths 2736 0 R -/BaseFont /SHLYSS+NimbusSanL-Regu +/BaseFont /MNZWGF+NimbusSanL-Regu /FontDescriptor 1359 0 R >> endobj 1359 0 obj << /Ascent 712 /CapHeight 712 /Descent -213 -/FontName /SHLYSS+NimbusSanL-Regu +/FontName /MNZWGF+NimbusSanL-Regu /ItalicAngle 0 /StemV 85 /XHeight 523 @@ -13544,50 +13561,57 @@ endobj /Length1 1624 /Length2 9769 /Length3 532 -/Length 10633 +/Length 10632 /Filter /FlateDecode >> stream -xÚíveP\í–.î xÒ¸Kã.ÁÝ -T!æ®.*PGe¶7P{K5s{ààÅ £“rƒ`¨£4è-Ò` -bH©©(¨ÊåTu -…=»0þϺÌþïkò¿¡Åÿ–ÿ[Úû¿kî¿öè¿\âÿí}þWjYW{{UÃó -PüÙ3€?‹æ+øÿ²9@ì=ÿ«UÔÿ é ²Å` çrH:Z?·„
ÈÅÎù·â" ñ - Ÿv==noŸIÐßÈËKÄDÔŸf1ù'ALа™°y¾ù}ï4(Y—
ôUrüBpSû -Äâog;ðµ[¬;QŠˆŒ¯Ûwîó=Ö¯ ¼`ó¼W¯åçL¾q3>ÅW‡èS{àVýd‹&ï•Ï<—ÏÔ=7D|Ãý ¬ZTô0 èÿ”¨ŸÇUÓ©äó{š±Ý®$&“vÙ|G~ðy›VØ\™+ -Í1ÆŒCïÈ`"&¿g!¦¬¢5º vIN§¶L/òëñ‰S£MÀËTpÛ.KŒ…¾þÚÒN‰ µ§g CèÆåa€hFظ´GôÆJ#Ô8VZõ»tHÉÚ8Eq”B×…‰¢uæI-?msÙrP™–v)Ú·Ð4v<Š½úš×t¯(æôuƒœ;0®¬R ºkIãcŠg‹euÁ–'¨'QÉn§·º>š‰A«Ãö?‚¥/ö‹ìÞÖ¼¶VOl\š6óšƒó345ÅškniP1 ‡Úž¯g~zysJ´ ¤–æOWñ² H“-À !º “rá<”LyáD—Fo•€ ݲçÞbùÂKê[H±3JÊüògŠpcêÖZÂÍឨª¸’Þ ¤íoÕKŠU¢s›Ñ—¸IßíÔá5½0ßç -’Q(øf´ÕÆv» Îîócqà25•:Hø8™ïd‘_¡Ý’ö¿ˆd¯,Š!*éïÈ?ºf›]æU -cíÙÐââD <%d)‘Y€äû#TG™z‡7[¦3BV‡•Dßµi%³M‘›á -ê»WosDV hHd¯ãå¿~òôÛ ¦¿üíKýت@Î5¤Š¼ -—±wOhW]k(òW¬õëÞÝÞX!Þ]?sÀ&yh7v¡¹×Ÿ˜‰á<Ä$½AÍŸBŒí8»©ÒÍ%ýDûÝIÃ%®¢x!EÐ:¸ çB«eVc^*mÔOþBÁs
:òµ ˆVžÍ<Šfs=Q‹•]Ò8mÊ~)„Ò…ß<òY§ ó‘˜ -„í€ÎÑ—ð€\&.Mý˜ØÝ»ôÚ¦„é¼¥&lÕ,,8Õº£Qr…™ª&¼œÞ3ô'6ZÝm¿Ä÷ošý—>tÚ{º*¶]¯dh•Þ -Pâf1|Ô݇çå;Úd{$ƒ×FêY̖ѤÁÚL›¼.g“J{Ä!Æ@ýM1¬û~k÷Ë˪s'1ú㑽ټbÒZRåMýž… •j—Z;Õ¬N>ÈS÷Õ$Úº/”Oï~|EÐ1†± fñiå·tKÈkâ%UÓâ,“ä@ÆreÝá$„H‘ç„+mäOʦêmÁ0¸0W
IôLÛÐ븫™ÜÔ0¤÷ÕíE(Ÿµ¶¨ì,:wQØé¾¼¿]ÚD¨Ô3Îz²œÖ¯æQæ\ -Œ¡Žb¤I÷ûz¢ è4ñ -×Å>zÙ/=Ü›m an¬3m WÎ…ªKd;8±¹Ž“ ~ÛÖzåXkNëþ5 ,±u«°<F‚ƒÀÓðíGqOZù²ÙØc9•xrL¿d'Ë«Áv»;»n}C|×`-Õ‡U\ïñŠÆLÿìHíbô°²ƒ‹¢c¶¦¸xsñi«GB72û¼âW`c컦éÇp¤˜RMÆ… ´ 4)äTIrûŸcÈ‘¢¦]ç|QG®««{y-CøMózã±(™ho'>Äž“
,'8Ь ›áµßaÀ ¤Ò]ˆc·_e–K¤ÓdS~z˜Àl2 Sù´©ëÓ 4•nThS(²loŸ®´fSYSÀ:¢{e„©–lÇâ¡éÍ ýˆîõ †ž–‡<H¿sºñ½UÙ§:ø°¾"¥q~I ÌM ±¾»-§âB2³clJ[/ Ü¥SN|<Thk©?áDÍ)ÂÓ}™+„|(“e]ß<ñ0iu+Ö%nϳUÎzÿãS‰#yă]weÂdêk <÷ìö›_ò¿ñZ:
U¢–ႦyfÝN݇ŽT:Ó@ƒøYš‡—{ÝŸ—ÚB èÙ~³Mc -Z:•¾LçlçDUr"´2Uú…癉{JÖvEãÖã¦Çõ ûDÃD„ …ÔOŠ9ÄÎX\ç.–6 ÝŽôþÝ
äüR8¹’ð½c -ôõ¸¥)•3Øß{•ÈñªwÏ·¼ƒ‘Ïþ»õ’ÑzÏ“
¬e†?Ó³:›Šãír s èÓáæ- º«¹¾0Ó§±ÙÙa^Êä„òˆ7ÜU·FCò ðbŠj }ﻺd.·#BWhô¼œŠYÅetäPÓœ®çí#+¥—C™Ó%ºÒ6&‰ Cn°Ñ|;)oòÕo vf*#J‡ŽÃ'´f„D‰HÖd?¢PµUb ê9&ó ªüJÎ)Œ6kù6jħء"’džmC–(#©™$cŠ“ecPµ«—¢}c0‰õÕ$ÎÏujeF¶Šä \ÛÏ—ùÂc×*ý -ýîë£ôSG$7ZB‹• ·µ§ç´’%ëêDŠ!¦¤+Ž¨P^à' à -^+êÃP[FñKrùÔÑôÕp‚ªà/—ÀËtH 0Nòëù¯òñm‹”siÐüLcie:®”^¯ áS;Sõ/ôªÑ™ -ÖûJ!x;ïRÛÍ.É«™Œ”©$CBu%’`’X¥Ç„¾hvü<LµÁiµbÊIï1ãìC ¤éDely‘r÷y‹F¹k `ÊU]®TÜ}#§Ún%<DôÐ?<N”ý£}œ+‚ þõ ‘ó÷°»ûGèë´Kªp®FeþF±R[¦þ#C·t ´A<·ƒ´¢ =3Ëï—^h£á%C-Y*½ô"ÑÞ¥±ú¢ò;ãˆÀÉvX9ÍØÖ!¿Ü$ží—½qbÕš9y3ˆ7±s0”ÈiH&zqÜ?·ï)òŠ ÛX§y÷áœ5‡æ‹?ÌD@üw‹CG¿æ@…€?¥òëÕÔT¾-
º
Š»¸¬_T+ÉùÈH)=åV„ ñbcg„¶&Ä“œ
7HÞ¢…_B4YÕ)¿â·ô: ªßöÈ6”4øÐ-˜¿vÕUvMGk?0vï¦F4Ñ—‚ÃrL óÍw¦¤ &˜hƒªØ R²X"
NÞPe&YLʱÖǼðˆ#I¸YžU¢ºŠpHz3\'ÇêZ:‡òd~QF…vy°*ößÿ 0åRˆ¸äM ¥Ôµ¨v6 ÁÞBý…æª Bmp9%u±ÏnŠ<yc&ä@³×ÞuŸ¬%%Ðñö—'þý S”ÅbÄÉм„p´`ÁD夘æÕx÷Â^Ã;„‚é}¯‘˜>¸íW*‹]M½.¹$'戄M…y¸"X˜Ûèù(0ªu¶v ˜ëù1{¦/›[
Wղ󜯷å9þ&¶ÌiS >÷O\Ô÷¶M…Q}füFJå
„÷áÅ¢puÑ5);B&çëÎT¼ 5°ñÈiþ±nе`[/qsÙÑqµßt¶xªÀÂ€Ê ¦y¹ÒÚšI§.צó2 î 4¦ì°¸á¼µžlߟe¼|ët Ý07l[oÙ·QåÈ¡óãÅk¤k¸ÌfývUî]h$]¦Y5\œ¾iNBy›…vÊ G²…tæI¹:¡Ê)j§ 7½Í¬ØË2ñ'‹ÐÏ%ŠxOÃì4ïÓðÜ!ÍŽ‚d÷l¬Ñâ&ÜÎÌNÐ
CT$Î,?oªr•À¨›oš0¾N‡ø^ áŒ)~ù€ò'S²ˆ\ѯúÞ\j—`ÚõEú1·lñKp?JÆÈŸ›È:¯ÊötãWÍ löBÍßň.䋈OÕ¢ 5‰Ä«¥º5̲ùÁ L4r·ýÁÔŠßL lƒ“T¸ï1wùFWÃÅ(¤û ×pcö§Xè¾p,ÌØG JÁÐfûÜUM©9›îtzÌC#4Ýy?à|ÿöù‹¨S§‘¤a˜ŽåÊ -£4+@bÂ_`±:Þï¯dÞÎ8/ë†xcJ œ†I™žëµv°¶‰!ÞOðˆVñúajB³Ð÷r‚&ó F¦ìô0Iî3ë/6°÷¥ñ,y0&¹>jxSñú_7úXêáõóä~„ÁÂD§°BsëN¢·p4
ñzãöRe©ŠÈΧD7áG÷ˆ!©K² b‚Ú} RŒŠê|v¨]£¿HšR¿z«]åjdmÎN|ïÌ$ Ž>¸¬ êš&Q4ÑV%_øv0:ÐÀäÐÎ>¹¤5Çà“ŒŒ}ŸU;™ ìŽc9”_=¾1õŒWŽá©ƒ¥™¡›ŠJŸÚèÍÚ Æüæw@üøš'þ–º#Fñ”9'$Û
IÙ€drÍ݉aáuY†M¡tsj&Kz§XU€]ü‡õê4¨Øûà&„Ûàø¸u>J",ÚÈB…÷U»•næ;$l„˜Š'Ãxh‹Ž^#A -vi´×®Ø®(OÁή<'ð&öç¶Åý·ßã¾4câ¤é¯èD;ˆÒ$#¶ïCü^¸(÷´À{KÅš·JPw1®;‚744Ú·Î7FŒæêÒÔáðêÈ$šWFÕïæ„ÄXâ×á2xÏ×™²°.ÚYØqø 2?Ç C©K%> ¡—:€KÄò Ï›\׌I6ìúex“s/°±}zsÜn‘¸%=Ði–‘ð:[ë·^aQ”Šd0¡D1šØLA€LÃäq“¾qö»Úþn ˆ „ZIDd”¨ù†èª1RXHVtà˜4ã kÐû
‘ú´÷ÅQßÉÌKè¬(FOªü˜#P#ÎBÇ›ŒU"Ëìë¼D>êE›ëþšÎ"A’gAˆÏÍy:–ËÚê^ÔMdm&rS î Àoda. ”í)½&ž˜Q6`¬0ÏôLÐîÀZº ›vdãÂZÈ‹ä%1üå-cÒ¹žâ÷=SÉ4B*Ç‘Lä/Žý¤ßwʪíú5J›úŠ›Ýñ J£¤Ž.ÖGîn vr^ä¾3ï`Uººž µ@ …6.Ì”$4}ßÂba7ÌÛ™Æà¬4
ž%ó÷7Þã, Î[Òüë$' <t0¶ä‘ˆŒŠ×BNuíéD&qgµ¯9Xû÷÷ÖŒE¬l&«ùÛL_SòŒÆƒ./ýJ=‰Å~êó5Éá}|;s~àÔš†óÓÑ]+VÔB |~†óZT»æçq4ŠÖØ"ûeÖ¤s'm¼Ù`룿õÅPh7¾ Y‘>!H«“oà~d ™øóóiÁM†*æ0‡Ä/öR¼M\”ÔÖ:š^_•¿áS‡[~èžÚXò/Pûq ú×U;“_UWÆ,Ù8*ݬ±¼–C·§·ôÝQj¸ø¢ò°|šœùa£dHÖ4ã} -Ä8ü.)>³"äŒãÇë]°¤ºÜˆÁœ,:x3RÑù{J]J¬åôMÐÖm7 -\§mG‹ŒDO¬äI<3Œúó§´°_«6Ï<k…TÞ+"tª.¼ïyÈa´…ž ’Žâï*…æ|)!®M2heùÜÒâ¢Hxþëýs8Þ8(ÿêfÖ]zvf“Œ4…Lëáç¶;q -R`«å¾V®xÙ0*¡{òeñ Á5®a±ß*[‡àñ3ûo»( ´–°ùJ1NÙ‰ -žØ=å1žâX™eïÉÇ©Õä¤<\½Ú'N•44Eíe6)Ý(î8pù ß{½ÙÏI8*ï¡Ý2ŸKÚ>£<ô ù’iVªøÙf ý9÷“Tâj¤¥]†ôBøÓõöa"unáQaÝ,«v”FÝÑûÃ)'Ñ£»æ[¤$ëêj€ÞFuÙ¡>dò–M×~Ÿõ½Bœ–™k½®èMƒGµ -‰ÃG”0µé éØЀBBV…BZ_Âë /m9Lú‚ßkˆÏ–œ2}Â) :ª2}2jUd^=èΨoDÒœ6š_›ÊXÒÞÜêÚÐÓx¢šÌn M¢Á+ª[ÍäŽî$9Jœ )o¥ÇH÷“q\£³œ‡_žÝÛg -,^?yŽÁI×Ïú\³ì'´A›C4îs_çj%Râ „*ß ã£3ëúµ|”²Œ$ßÔ•¦9yóY½7-áB”[—^çÎv5u$®MžÚ E¢ˆârBvŒt2 jLArôvCÒìzAŸON¿_ä‡t©Ï°Ò‹šâ=Êíµ"ËŸÞÜîár–ý%*<#ö¡îˆ¼'!éJ Y^GjŽÞ`¢ !’+”¸yx,å„èò1ý=,ö@Pí€*þÈÛ -ÓL=M{*ä)qÒ( iI"\ÄuSý 6[þËÕ¨±Ób¦eˆ
UγÔnºÅÂÑB4:èuDé…$“dtevö0¸¸ÑéÕÑg¶³ ¼¥NN2îƒi@6 ´š<-Ótfù·@Èjã¬Í ׸>Ïš/|YMV©Mù¯Ta"cw,\†êÔþõÞ* ˜÷Ý~U¢Ò’Žr{ ^ý·U™”ã6ÄÕÉ ©ÞE\5$¥fX²A…aíÁr³>zgé¹Ù¬u=ñ¦Ó=_ˆíÙHÏ@ÚãË]Ý»žmD ©IŸ<¬æ—©J¦k w˜ã¤Ç:½—ƒÚ•ÊŠµŽè8ÕmT)-‡9Y¡¾:ä–Ç!øŒk£YwŸ=âd|æêDÇ.±hìÍä4Îb¹Ô2:HH3buì•fïMwKµ®õ-ãY^ -é2£äª.WÁP¸kSÞI!ÜÊ¨Ô -#çtûui˜"Çî½ÝSk·×éS?€+xû)dQ d‘uä+Û!f.D¬Ö ».œ©’u0ôU0â±6$5‹¢&&ãæÛ±¯AÙfsDŒ)d ?Óܧâ¢Òæ8LmGpÛŸxºË6ÇiÇ(¾7<t§êõ·óRÏ -/$]näû?J$ÔÛÞmö!’Ÿ&ð²P‘c§e“[v $Â)+»NNçérÖuÓ_®…Í@+²H¶_÷÷»Rfžhãs“^Bj˜wrˆ€[‡–í ª%ñuƒ4Ü»Fì«¡lñ,Ö±JL¹ì¦Ç2áÂͨŒñ}WŸ$î'`47 ‡vP]චÁp ì í°iô]ˆ0W -El‹RŸ KRÁ—&ù$JSü4Ÿ–F…×Á™Ù®8·`ðLïÀå "i½ihDÈG4¼K»ÙT2þ D§Œ©ž}s<µÇHzÊ<WÓèÃÖ Öf¼TãI½ÔqßrPµSTn\´ Ž?3 p¡àNØþdÀ¡=Ž³-7J> 4Ú[PšyjÈ |ý¹ñöàxÊ;/8{!£…gÇœ³"ÐóØ‚öW6¦¹ÀÞJb%°`ˆ&»x`w{A¯šlvŒ‹‚RRí–[Û`U)(—A1ܹ—“waræ4ëÀÙ`Vm§²ý¾9§¬ü–éå¢ I—ÆfU}s )O5<Ž ¡ì -Š–Õ¦IsÉ|³±jã¸yª7Ÿœ7‰a ²CTx»+ß¹ÓÀUF\÷ -/qZƒ(ï¿UbfG\}Â)¶jo -iRŸ*"ß‘Ö_ Hþ¬2X³EDµFÞo[]ù¼ æP.×ÀC³JOQ1pßŠ× ?NU3öŽº¿N‡JHÓN»›ºVk4rDQ¬á×›GO–ËOœrJòíp@rw;tzjgùZ¶ Ô là/^eœY{è§F¤‡Äåì}»ªßØ“äVEP»ãÊ „‚i"û‚o6%‡•‹ýšý¡Ì-”fÛ¹òœiekAö8UË“ç–¯69ï¿Ë'AÚøg¿.:»œÈnéñb -¬œ6¥á7Â…Ç*WÅ DA‘
djj n {3=˜³ntœ.a°ÀxDúKw1 HPÅÚI§wò;áŠS$-íG²$ñþÀí%RѵìÜäi -½T/>V‡™»Eº ãÁ¦–ÓjÐAúî²ðÙÈ ¯ –Q^^ŒŒMJŸ9Ö¹X -?âf,œÿ4“áÈE’3i‚è;++ÞˆÛ—p °tl1/JŒBnbbÛ ÁÚ¥¬*<½Lc¿üA‚ú éjô G…» +xÚíveP\í–.î xÒ¸»;ww4t5Æ5¸Á=×àÜÝ‚»k°>äûî™3uîüš9¿nÝ]Õ»ö»žµž¥ïª¦£ÒÐf“A-ÀrPG;§0@
â`áê¢ +uTa{µ©[ØC +ÈÉú¬áðŒ=“i@]`.–Î'àÙ«†ŒÜßqÂl€°?¾] Ï0 +ÃÕâhýÏXÎ`k 3È ìâòLóÌý§:ÿÌð_²:9Ù{þe
ýKë?c€À\ÀöVì\ÜÏ>-aϾ!Ž †EÑÑ + +àâü[ruúævþ«@Œf†é9 êhï +ktòó* íþ)áëB¥æ÷•!ìµcÂMž3‡NÛJÌ; /íÚ“À'¹¾4Lyø+ô-,; ¦…Ø©GúÑÞ§ßUÖŒø9õv6F4µL îQ(ÇZxœÑN¯™hÜòi¯œpü,“¿Æ}ë…{Qõùðˆ>aÿúŠ¡g°¿¯·ý ¹s›œ%+NÄ
›>*à]¹„‘n©w¸ìà0>¦I‚Ôõ’7¶_„›üë%^ÍœKüÉâWöIñ‘ë¨âx&CêŒm +ä¿àh×ñ€F3>ÒaáÓ®GÀÇíí3IúYbɘ¨•šâÓ,&ÿ$ˆ)66ï7¿ï†%ër¾Ê_îoj_Yüíl§¾v‹w'J‘ñwÛàÎ}¾ÇÁú„l±•÷êµÂœé7 ƧøêjܪŸl±Óä½ +™ç +™zçFˆox DÔŠ +’ ÆýŸ
ò¸K`º•ü~O3¶Û•Äd2.›ïÈ "oÓª›+sÅ¡9&˜qè LÄä÷,Ä”U´Æ—ÀÃâÂ.©éÔ–ÉâEƒ€"~ j´ xÙ + ÛrɱÐ×_[Ú)±£öô-bݸ= ñÍ —öˆÞXi†šÄʨ}— )Y§(ŽRìº0U²Î<©¨m.[*ÓÖ)EûšÆŽG±W_óâšîÅœ^sÆ•U*âCw-ib|Lñl±œ t‚z•ìqz«ç£©•´:lÿ#Xæb¿ÈîmÍ«akÔÊÆ¥is¯Iq8?#33¬YÁ±æ–Ö +U£p¨íùz槗÷7§DË\Ô2éª^ €4¹œ¢Ë0i΃@©”NtiôV øÑ-{î- ^ÒßúCŠQRæ—?S„›P·Öh
÷DUÅ•ôm| m«QR¬Û|Œ¾ÄCún§¯yè…Å>p>7ðÝÀoì#O!ÿë˜V©Ã¥ ÉBMb˹ ëgj„“ñ¹ü·]Ìį?y¿ZìtpKqtŸáçí¨84Îd‹Syþ¾¬Ÿtv´‰ ß®U—^òȧò
²®4-íÌ’ÏŸDáYÜ›wöjt¿Âî}Ä{µó ÉŸü^9ƒ›‚'¦Ežbõè>Ý L»âï¹8j¯(¸¿Ò10#·ŸÞy¨”¯_Q˜qÊ ýªRM¶#_ì<Ð'Þ:^ìö³¾#ý½¨¡&QZz±ÆÓnš +0L_ÅÈ™a攣×w¾js¾ƒ¯kc‰ÓoÌòAoÔH”¾•Ým<ì è·WpÔ
Ç>£E/óMæ¨ +¢Ãü)Ä‘‹™”!‚¬QMžZVçü£ÅÙ?f t˯f'+jÉ
2& Ÿí¬1~»3Ù]*¦eæPˆÁà +´(®×áú7¾õu³°XDsÎФ-ÃŸæ ‚ä< ]¤UO_CÑ÷ßC}Þ„©Õ7ã«$³$~©T)*üſתŒ?p3Q©}ÇéÉ“h†Ì ?‡'²½KµƒgòëÎA¸t,´ïG—½Æ2Õq Jv¶"ùÄÓ/$zÀ¨Âo>Óxùå„ ?æe“`µl˜&eo^äk bMšn«Ä6-ý…ù.Ìúo$KÅž
=_Í@ Ÿq¿úܳ}ïð¾)
î†QZ}GN޾Ȁ"Ÿ× k¾Åš{7&H¢ñ©5ÞbTü®ãÔw6”ˆø×g¬F¼×ØNF´b¸ú ¢L¥p1–Eñ‹ +[=@{TÌÏ à¹ä„á£úVBØW +e?«ïÀï9Ìüï†LßÓ;Rñ÷†yá ZEåÍ´%
¢ ÕÚeªÄ&Ù—d wàšÂ#ºŸ1X*Bè$XË5Qt*Ñ"ŽNÙ²”äÞÆx©º…”éÙ)Ÿà7,5Í<²wážÿð€¿($ò/ öý²ÉG +©^0 ?J¹Þ%S0F½¹a[A3ª_NáÒŸ5VÿBÏ~ +þm!u‚±Ý.óû<¥X ¸L-åÀ£~Næ;9äWh·¤ý/"Ù+‹bˆJú;ò®Ùf—ùMØÅÆ©ƒ’™Š”µÔ›ãÂYO±"X{6´¸8ÑO YÊd–`+…þµQ¦ÞáÍ–éŒÕae±ÁwmÚÉlSäæøFBîÕÛ ‘GšR™Áëxù¯Ÿ<ýö‡é/ûR#¶*w
©"/@€P+JcÞ‹¯_¨L$¿mìS
©—áV瘛hòÈüÀ Ê[†;{Øå\I±Ú>k¸ŸÍ6ò®LèWhÊÛ§d¨n%ôÛB%ÎK÷78äÇ© )ˆ ¹S‘£ª/OjÛœSNÕ[7’•ªq®÷ç„ñ'Æ °88<ÉŽê
Æóß>q`™“a
Î*($}RÚTžPÐio £·f›oa?ÖxXž“`gôß%î;P»®ùÜ°R>)5Ë5) ÀÚPoX`¢ø`*7…ÛÄ»'´«®5ùÇ+Öúuïno¬ï®Ÿ9`Ó<´»ÐÜëOÌÄp â’ÞÀæO!&vœÝTéR~býî¤á’ŠWQ|Œ\!EÐ:¸ çB«eV>* EÔOþÂÁs
º +µ‚ ˆVžÍ¼Jæs=Q‹•]28m*~)„2…ß<òY§ ó‘˜ +D츜£/3à¹LÜZ‚(1±»wéµM ÓyKMØjY,XpjuG£äŠ3UMx9½gèOl´zÛ~‰ïß4û/}è´÷tUj»^É0Ô.½¤ÄÍ6fø¨·ÏÇ´ÉöH¯ƒÔ³˜-«Eƒµ™6y]Î(.öˆCŒú› +þbXïýÖî——UçN âô7&#ú³yź)¤µ ¤*›= A+ Õ/µwªY|§î«Itô^¨œÞýøŠ kc!@Ìâ×Îoé–TÐÂKª¦ÅY&ÉŒåʹÃI +“Z#ω,VÚ(œ”MÕÛ‚apa®šR虶¡#ÖqW3¹©aþHï«Û‹P>koQÙYvÓ}y»´7ˆP%¤o&Ê5ëÉFpJX¿šG™sÈè’ºñÑ Ìã‹AøÖzŽcøáC ô5slì‹vRuÆê=|aOLÙ!ePÇyLŸ< ïíïaàŠ)æ¥:K,…_îãþ+t2†:Šu’&½ïë‰ÚxÀCÒÄüTœîS$°#géDèxúl+ÍãÌÍqä]‡çÏsº÷=5¸Ù³˜–ŸÎÕ{À¥pYqBx; µ Dj/YØ —ý–3¿¯&„¬¥d±ìTâ”qÙ+W{|°[TNôƒñ—SÿP¶§Äh™ïE? ÐC–Êt#½l +Ëc$9h +XGô.£Œ1Õ“MáX<´¼¢y¢ ѽâ ÞÃÐÓò™wN7¾·ªûT ÂW¤
.Î/ Dxh!Öw·%ãTÜHævŒMië„»t*‰‡Šm-õ'œ¨²Exz/s…‘e³Œ£ë›'>À&.`Å:¡Äíy¶*9Âï¼s*q$x°ë®L˜L}ÍÏ3û„ýÆæ—Âo¼–N#Õ¨åc¸ „iÞY·S÷¡#ÕÎt@ +æ@à§ÃÍ[tW a¦Oc³%r"|”É åoxªn‡8àÅ•Ô6úÞwuÉ^ oG„$®Ðè{9³IÈêÊ£¦9]ÏÛ/FVÊ,‡2§Kv¥mLA†Ü`£ùvÒÞä«ß>ìÌTF” ‡OhÏ‹#¬É}D¡j«Ä>ÔwLæEUý•œSm×òm Õ˜_©C=D4É"Û†,QVJ;2IÖ 'ËÆ°jW?EçÆpë«iœŸëÔÊ(ŒlÉ—km?\æ ]«ü+ô»¯òOõR ÑÜhImV‚ÜÖvÞžÓJ–¬«i†˜’®ü9~.Åò?AEWðZQ †ú2Šo]’˧Ž¦¯F$PEy¸>¦ëD’à€q’_Ï•o[¤KƒægK+Óq¥õ{MÁŸÚyª¡WÎT°ÞW +ÛÚy—ÚnvI]Íd¤L%úk(““¬Àj@ bÙñó0µ§ÕŠ)'ýÇŒ³Rf•±åE*Ýç-å®}€)W
ùR Wôœj»•ð±Cÿð81fôêôq®úø×'DÎßÃîî ¡¯Ó.©Â¹U´ûÅKmM™úŒÜÒ¹d¬ây d”„è™Y~¿ôÊ@=/jÉR½è¥ö.5SØGäšl‡e‘ÓŒm +ÈOâÙ~Ù'V«™S0‡xÓ™8C‰œ†d£Çýsûž"¯¸±]¸ê´î>œ³æÐ|ñ‡™ +Jünqèèרô§Ty½šƒÊ¿¥I·Aq—õá‹Z%9?)¥§üŠp¢#^lÌáŒðÖ„„I’³ÑÉ!´ðKˆ«åWü–¾UÇCÛ ¹†’ º‹×®z*®éhíç&îÝÔˆ¦ÒpXNƒéÁc¾ù."”ôÃmPU›AJÒàäÝ +Uf’å¤<k}Ì 8’„›åy1eª«‡¤7óÈu’p¬®¥s(OeTh—{ÀbÿýßS.…ˆKÞ”PJ=ËjgóÜê-Ô_h®*!Ô†—óXÒûìfÈ“7æÂ4{í]ùÉÚÒ‚ oyâߟ0EY.Fœ ÍKŠô@ LUOŠi^w/Üê7¼C(˜ÞÚ÷‰éƒÛ~õ¨ºØØÕÔë’K‚qbHØÔX˜‡+…Ù¹=€ž£Zgk·„¹ž ³gú²¹ÕpW-;ÏùzƒÎñ7°eO›âðy~⢾ï´m*Œê30V.o ¼/ƒ«ëŒF¨±L¡Ø65<_w¦âchĨGN Œ}tƒ®ÛzIXÈŽ«‡ü¦³ÅƒP†P^è2Õ(È—ÖÖL:u¹6—qéÍq‘Æ” 7œ·Ö“íû“¢Œ—oŽ£å†më/û6ª 9r~¼xtM—ÙlЮƳ ¤Ë4¯†‹30ËI(o³ÔIäÈ@¶Ô„Î<©´U'T9Eí”㦷™{²ÿ|Ð\¢ˆ÷4ÊNó>
Ï Òê(HvÏÆ-nÂíÌìä`Þ0DEâÌ +ð¥ªT Žºù&¡‰àëvHìÅÎø—â—¨|2#‹ÈûjàÍ~ v ]_¤ sË–¸÷£dLý¶‰¬óªl?@7~ÕìÁf/Ôý]ŒéB¾ˆúT-êS“H¾Zª[Ã,› ìÁD#wÛ LøÍ”PÀ68I…û s—t5\œB¦Ïq
G)fŠ…î ÇÂŒ}”ðª4,m¶Ï]ÍŒš£±éŽ@·Ç"4BËý˜ïÎ÷oŸ¿ˆ9uK…é‚V¨‹Q2dY’㇠•oÐXë\\ÁT7ôéL§ æ“Å=„«ßKì»×…ãåÞB^¼ïñ:e:ºûA¾ºÖˆ…Ø× %YäÜ´évJ÷\«æØ YûùJV},6>Þšv½øÈÏi÷°6™’^¸OøM– !kÚ^Ù»<l‚'ƒvØCÜZ{óâË!3’î‚UDpì廚ŽgŒ}ÞLªzî…’b_V©ò-DÔ7™ h~úÐcÅn» aV¼þŠäãôî´Ô8Të/Añ^»»£öQÁ*I9ŒëMö|±s£[CËÈP¿Üù†«Ëeõ+tÐÍ ^‹$¾qobC!,cˆqÕÇ_ÎÌuMÔÌß`ÒÔ0Ù˜ú¦BÃညàŸJ}!éGs19lÏñ»Ö—³˜ZéGÓ*HËH"$o—¿Ub-;¶e ;žÑœôGé?Õ¥AÉP§ãè}/¸½B
°}¬<‰6Çz«ë=ƒS`ü¤4#\žÀÁhRoÜ;½¡ó”sTo cíLÀä¤MøX÷ÓÃQ‰ +½å>V·.— +ÒÜîªQè]‹*ðåVäIw8¶ñÂi›M‰œÌ¿$a|
ÙòȱV¼ó i×6\…¼“Dýð¹¢\ý£¡J©ÔK•¹¡áXl¥ÝöVƒoÓÞ$âbÌegž#ñò¢ïF’pÌ
¯Úè‰Ñ^rÅ +¥›S+YÊ;Ūìâ?¬_§IÅ>Ø7!ÒÇÏ£ûQ +aÑF"$²¯Ö|3ß!i#ÌT<ÆK[tô p;w»Ô.Š[° + £M~Ñg<ÇÿšâNÜ~¬Š$’ +œ\7±?·-ï¿ý ÷¥“ MEo,ÖA„&±} â÷ÂE¥§Þ[:Ö¢•P’º‹qݼ¡©Ù¾u¾1b’0W—¦‡WG&Ù¼2ª¡t7· ,Îĸ—Áw¾Î”…uÑÎŽÕý9f8xºH]*ùY=ŤÔ\">_xÞä¾dB²a×/Ë—œ{íÓ›ã¾p‹Ä#åN³Œ„„×ÙZ¿5ð +‹¢T4ƒ %ŠÑÔfj ÂÅ4L 7¹ág¿«“qàïÖÈ@¨DDF‰šO`„®vÓ(…dE^€É0Þ±½ßO{_ õÌ¢„Îú‡Rô¤ê quâ at¼ÉXe²Ì¾ÎKä£^´¹î¯é,’Ôªy–„ø<œ§c9\`9[B½‹º‰¬ÍD ªc£ø,̅ò=åÃÄ3ª"&‚Œ™ž : XKdÓNBl|ÂX y‘|$F¿¼EcL;×Sü¾g*›EHç8’‰¾óűŸôûNYµ]¿FiS_q³;¾‚AiœôÂÑÅúÈÝÃNÞ‹Üwæ ¬J¯@Ï“¡–ËG±M· 3% ÍÀ·°XÄ
óv¦18+M“wÉâý÷8K‡ó–ŒÀ:ÉÉ/ Œ-y$"£âµ°S]{:‘)EÜYíkN +Ä¢ƒ7Ó*e¿§Ô¥Ä‚¦o‚¶n»éPà:m;Zd%«xc¥Nâ™aÔŸ?¥=€ýZuxçY+¤ó^¡Supã}ÏC£Õ,ô\r”xW)<çK qm’E+Ëç‘‘DÂó_ïŸÃñÆ@V7³îÒ³3›”a¤)dÚ?·Ý‰@xäÄ Àc”´Ï0̓ºÏó"óâ½û™µrJóòZ˜JÅ›=2Ónñgkù"áz@éóa⵬彵?ÝæöP¤!}•-ҾфýG¨ÈVËsRñ² aTRïäËâ‚k\Ãb¿U¶.ÁãgößvQ¼h-aó•âœrfAÞ€ÊUÁèDZ$ù('€»¯LM£/hj¸ÒRöâfòg ¶ËŽ§ÝÞ»'ûêºn ³XÍw‡W×6>y~ëF—Æ”§üŽÓúÝ—HÒN•Ûë{Bk}ÒLþo†ô&‰¨¶ßgÎ~Á¼Ù „¨;¥rÁΑ½‚ãi?:±{Êc<ű26ÏÞSˆS¯ÉIy¸z/´Oœ*kYi‰ÙË6lRºQÜqà +8¾÷z³ ž“pT ÞC»e1—´}FyèAò%Ó¼&Té³ ÌPæsî'éÄÕH]†ÌBøÓõöa"unáQaÝ,«N”:FÝÑû£i'Ñ£1»Ö[¤$ëêj€þFuÙ¡dò–MÏ~Ÿõ½bœ¶¹k½žØMƒGµ*‰ÃG”0õé ™ØЀBBVÅBZ_Âë / y LæBÀkˆß–œ2}Â)<ª2{2nUb^=èΗx¨oDÒš6ž_›ÊXÒÙÜêÚÐ× x¢–ÌnM¢É'¦WÍäŽî$ 9Jœ )o¥ÇH—ð“ q\£ÍÃ/Ïîí3 +†µËÏú蟥çf³ÖõÄ›M÷|!¶g#=êŒ.wtCìz¶u¥'}ò°˜_¦*› PtÜaŽw’ ëöR\v^ èTª(Õ:¢_ àT·Q¥´ æd…úê’ƒŽCð×F³î>{ÄÉúÌÕ‰&Ž]bÑØ›Ë+jžÅýr¨gt2fÄêÚ+ÏÞ›í–j_€âY^ +ë1£äª
.WÁPxjSÞI#Üʪ֊ çtûuiš!Çî½ÝSo·×íÓ8€+zqõSÈ¡,È!ë*T¶CÌ]ˆX9v]&8S/¤ê`諺aÄcmHê–ELL.&Í·c_ƒ²ÍçˆSÈ <:~¦¹OÅ;E¥5 Íq˜ÙŽà¶?ñv— nŽÓŽQ|oyèNÕïo磞YHºÜÈ÷”L¨·½ÛìC$?Màc¡"ÇN7ÎâbLnÙq: +§¬ì:9§ËY×ûM¹6È"Ù~ÝßïJ™uz¢ƒÏCz ©aÞÉ!âÚª8µs¨•<Ä×
Òð쳯†²Å³XcÄ*3å²› Ëj†Gˆ4£j2Æ÷Q@\}’Tyž¸¢i¼á8t‚ê·ý†ó`gh‡M£ïBD¸ëÙ›0Âp^*•-ºkjÚ·Z»æãÜd¨ ÅüîÇ&n»$q‡˜,[ijK„½½ %¡“îe6eS. âú˜ˆfÄ®ý>e¾î–â ¹¶« ŠØ£>;–¢‚/MòI”¡øi1-ƒ +¯‹ 3ÿ²]inÁà ÞËDÒ>{ÓЈ dx—v³©lò9 ‰N‰+¶¦zöÍñÔ #é)ó\M£[s@Z›ÉR'õRÇ}ËAÕNQ¹IuÒ.8þÌÀˆ‚;a?ú“‡ö8ζÜ8ùx ÐxoAy橵"wðõçÆÛƒã)ï¼àì…ŒÞ ÎŠ@ÌcKÚ_Ù¼Z‚{+ˆ•\£\hr‹v·ñjÉæǸ((%Õn¹ð·
V•BòÃ{9y¦gN°œ
fµv*Ûï›s**o™^þ(Ú‘r)`lV3°ð‘öTÇãèή hYmš´0”ÚÊ÷8K¯6ù€›§vóÉy“Æ 7D倷»ò§1
\eÌ}¯ø§5ˆòþ[%fvÄÕ'œbÛ©ö¦&©"òƒõ4ìË*Ã5[Dô`1käý¶Õ•Ï ê`•rM<4{áôUC÷øwݲðãT5cï¨ûët©„U0í ¶»©kµG#G”Ä~}±yôd¹üÄI!ß©¬ÐGÀEîn‡NOí¬PË$‰šÍµÃ‡WgÞ ú©é!q@¥{ß®ê7ö$¹UÔî¸ò¡Pšè¾Ð›ÍA©a•bg¿fD(s ¥ùv®gZÙZP€=NÕòä9èÕ&çýw…$H›Àì×Eg—ó¹-}>LÁ•Ó¦4üF¸pâX•*À¢„ƒ0¸LM+ª[‹Àãco®OóbÖŽÓ% Hé.. Ê X;éôN~'R‘`&‹¤óH–$Ñ ¸½¤[*¶–›<
ZG„‹m8Blà ‚`•‰ +& ùf¾±<£>W†2<퀔ã*õˆ¦ ¸ïÞºÑbï)£(]|Ͳ7.ÅBêOo_™íí—I>Ĺ=à[väÍ$ø¸ºBÎk[œ y¸; ª$Ô¶VÔ¶¨ì+ Qý †$·fø‰AÙuõ€•ô퇚|ÄS)¬ß©ãb +ÞëÇáØ(>§"´Ô?"¸ÔvÂj“øÓ‹©OïDkº§«wèKêfhÔuÐàÕ–®L~vsÜLðw~ùŽø›f ÷ÀG Y¯y²™)¿ÓbOú©ogɺeÁ]ñ¡—êÅÇêá0 ·H—c<ØÔrZ
:ÁÀ]>Ùã‚!ååÅÈؤüð¹‘c›€ù«ð#®QÆÂùOsYŽ\$yÓ&ˆ³±Ò„} ÏK÷ØÈó¢ä(ä&&¶¬SÊŠ¡ÊÛË4öË (d®NÏpT¸ #;®±õæü_>ÿŸàÿ K{0Ðu endobj 1321 0 obj << /Type /Font @@ -13596,14 +13620,14 @@ endobj /FirstChar 35 /LastChar 122 /Widths 2737 0 R -/BaseFont /PTTGXS+NimbusMonL-BoldObli +/BaseFont /MCRCVV+NimbusMonL-BoldObli /FontDescriptor 1319 0 R >> endobj 1319 0 obj << /Ascent 624 /CapHeight 552 /Descent -126 -/FontName /PTTGXS+NimbusMonL-BoldObli +/FontName /MCRCVV+NimbusMonL-BoldObli /ItalicAngle -12 /StemV 103 /XHeight 439 @@ -13628,7 +13652,7 @@ xÚíteT\ë–mpw÷‚àÜÝÝ-@€ www4Xp×àNp×à®yœs»ûö¸¯u÷¯7^±kìo͵撹öGC©¦É"nî` ’q°‡°°³² ° -˜Î K ³¹-ÈÅåæû¯éü³OÀê èèhëùw´Ãß^ÿQâ²µ`EfçxËiyËm ¶GþðײÈÛ[8 +˜Î K ³¹-ÈÅåæû¯éü³OÀê èèhëùw´Ãß^ÿQâ²µ`EfçxËiyËm ¶GþðײÈÛ[8 Œ»C]ø¶ti ÓRß÷ Ý…X«´m¼L»A ŒJÑ2uc¼Ïf•ÖaõyØtv7GÕ5ŒJžáÉÆÛ8ÏîÞ»àRß:¢û™¥×Åãµc6¼Ãþöåè˜6ùàî–®oxp ¿ó®{‡„)7 ‰FÐ
6:À)—DT_»Â;’iºv—"®;)ˆmq*ó‚?˜1û5_ÝN[ë’ǯ=×ç³"/LIê}Ä£› k¼¶lBñ«¨¯¾-š|oRkÜó&[Þ&±ÝñreéòDQnßô?ª[K79Ð7/Ù/–_!ýmÛÑŸ ·¥Ê“žHÕ]Çy÷A8\¼ÙŸ.¶h¬æèú†ô“Bj£Öè®{ŽúÈ£÷ öÖt=¿ !æ¢DÚ–¶bO„t8&óïû·ù#¿-L.Ii§¼µ\’îžhRºª®
xïN ®°V (Š0¢™PÁ´i—µ…½g`
äÒWDWN=%&j c6–K…Á ×M囑êæ>vEÂëÁ |Ž¹Eʯ#«îu€U•ý9å™x¼.dávÈ!ý: 8ò¾€Ù€;pñJ#WT ¢Âª^Û à'áHðmAFr4”,=gK3M¨Ì(R @@ -13660,7 +13684,7 @@ L„³Â”%$6$n”% I1YÈcó³:Áì/÷HÅ uÎÂüÕÏÍ{1T¨—t+jªNìpC4ç@ÖîÅfÙä:)0ýôðt<P‹b¥7ŠÔÒ·š‚ù(23¬õÙMö+&c Ól.^85^Z £ L uü‰ ê EªÊqÓëTéCòâ¯yÇõ•+«ûv©FZpÇZòU1ì´‚îâD¨4ùÓ£Bªg9Œ¤ÁÆ{¾Púé™S›vÑ$ ‡¾\ñxllË5çÍiéõ$éTlFÚ—}GÈØf<ü È -ü%ë2bh{açògôCÿ£ÜïW{e1¯éF¾'GŠ)Æa.¨³BG=(”ˆüªCÞÛjHk_×iêPtkºé7ïze›¶ý“tå9¬)U1M¯ž6¾¬ 4*k?¦‘<ꮢ±²àN|×P’.n¹||£ÜU+¶3F”MhÆœ ¡¦9Ÿ?hHû›ç—nr Þ-ä0±Å‡ÝÖà’U·¢PA7ÄÜFwæ°'ŽÁìÓÖ ‘–º@çPú)B²àFpéœ=ç(®é…àÎÂL „N·Í-þÄYØÒ .ŽF¹ÏîÀ1ÇN4.ì—{œH¶/ªB¥0¿Næ%@»&ZëÑ»Bh Ùœæ¹áí„WèºÑ$Kí[Êit9œßë;*ø¢FÜíƒPk—×xøOyŒüøŠ¼ÂÛ/¯OwÙóp»B"6àl:ˆ›ŠÕ ‚U‘eP -Ç^; áµ³†˜¸ÔÕñXðÞŸÀ»b’¨®k€*G/·O3( |ý hÉ›ÐÅØ%§Yæ6ÈËM‘~OŽ¿Æñÿü
½}»—%Kƒï¦|º9W¼ø+[Xìè¤P˸—úòbhê~ƒÐT¥:J‹ìÛÔ +Ç^; áµ³†˜¸ÔÕñXðÞŸÀ»b’¨®k€*G/·O3( |ý hÉ›ÐÅØ%§Yæ6ÈËM‘~OŽ¿Æñÿü
½}»—%Kƒï¦|º9W¼ø+[Xìè¤P˸—úòbhê~ƒÐT¥:J‹ìÛÔ endobj 1313 0 obj << /Type /Font @@ -13669,14 +13693,14 @@ endobj /FirstChar 34 /LastChar 122 /Widths 2738 0 R -/BaseFont /XZHWIU+NimbusMonL-ReguObli +/BaseFont /AOETMX+NimbusMonL-ReguObli /FontDescriptor 1311 0 R >> endobj 1311 0 obj << /Ascent 625 /CapHeight 557 /Descent -147 -/FontName /XZHWIU+NimbusMonL-ReguObli +/FontName /AOETMX+NimbusMonL-ReguObli /ItalicAngle -12 /StemV 43 /XHeight 426 @@ -13696,7 +13720,7 @@ endobj /Filter /FlateDecode >> stream -xÚ¬µc”¦ÍÒ%\¶»Ì»ªË¶mÛ¶m]¶.vÙ¶mÛ¶ñõsÎ̼³Î7¿fÞ ×ZWFDîØ;2“„P^‰FÀØÎÐDÔÎÖ™†–ž kacèâ$cg+M#hgm økd!!r41p¶°³6p6ᨙ„MŒ +xÚ¬µc”¦ÍÒ%\¶»Ì»ªË¶mÛ¶m]¶.vÙ¶mÛ¶ñõsÎ̼³Î7¿fÞ ×ZWFDîØ;2“„P^‰FÀØÎÐDÔÎÖ™†–ž kacèâ$cg+M#hgm økd!!r41p¶°³6p6ᨙ„MŒ Ú¹¼h˜™ ÿ ßtþFÄÖÈÎøŸ)Qr6°5þ;XÿËðÛÈÅÑñ¯žÿ:ë þŸë¸‰‰»‰Ìê’W°eZfºs
FîЄ°V_èPˆ}I½rQ•]·_Ú¯ Ž ýêÚ†)ίVÅ3ûÏIÊÑ tk²î“«|\ŸŸ½È›¤ílT‡tº%ðéçjQ^× ÒÛ`š¬ôª‡» @@ -13756,7 +13780,7 @@ Z®ËoÛ4ëŠ*s³°ütg†©NeÔú#‡ßìF¹¤¹K¸]C•f/ZЪ}¿@ôFêbM̼¦K ´ØËJ®?L›^ëåɼo¬àÜ^Såõš¾q VÍ]êAy³XH±ÔŒèyÒLåýkoù"-Õ6_XŸs(GÕjØwOÎÃIÕÕ\‘›"NÚGvB<dÎ2æUøõÇͨa'nœ"dáõj›K†·…éÀaµ*»Üz^YCOs´’âUerÕ3“®©¿*Ì ¶^qèåSøm Ä“—´¿Ìm+V#.MïäîuS³°¢º ½7Rz·Ú•DÊ£{ót§UYEzØ”Qù-t²y˜’…[ O[UÜW¨‡³!¨ï 5ý
¹yK=n¸±u».5®°Rë¡fð¨,¸V2›è>ÓˆŽ…¤Yô·ØfàÄØ(ßÁx‰!´à‰%žM>¯Z) å"UØð;z¯Ãg«Ô«¼L’"¤Ú-Û‚ Ÿ‚xwÒ×~ e]bþL‚¸=V›Ïóð¨-ÁÅû”Cª³;ÓÖoä®Í ¨ÐÒ&CdÊÜÞ<_}9Ížsßú–M©’£ê˜Eä‡S+ø{ðåÅ1Kg¥V£2¾ÒÁ5«È–eé ýê õÏŠ½SÅöÁ…®ÙK¼TùГ®°zc†\wír,Ö™yÆTôfDÇãF^±–ýtÚ|¶«w]’ÂйP ¿,:Fp\îŽr|0`Ï!ÛÍéy¾.Nï è ^(%×½ñ>Ü0Ø]^ÒC ‘$®Çž5~<ðrpÊÃz>ŠPãuÍx{¿šècAÊûß·™ÍZÆ~œe·9^|Ø™ª´:öÛ9½0 *ÿ}ôõW'¼D>½ ³}=à -zžûcêÈ^‡õsa`ÔúþçBº&¿¯ÈÀ}Ü–#üÝ×õ,¶…ð€5nXœ`KÃ|Úªup´ëqª£¦Ws•³Fþ»‰ûë»Õ nË·+1§!NqM;Ú¦”+1Åôä@2Z
œXÞ%ÉŠû:bj -XãÙS9´½ AÄŠ›˜ì \¿j‹Gq‘ñ
YÔ4Ûûª2x"…þ€¦Æ">5IåñOù¼Ðù)þþbZòZj ÷Ö›ŒEŒ×©8Œ†–BY‡tç÷]Ü þ×™¢Ë€9£ýd%ut o¥tÃØ_‹Òs¼#Žp9Ä RsˆNóÊ Aα›‘my_êB[öéNU9Wɶ¿~›ê? +XãÙS9´½ AÄŠ›˜ì \¿j‹Gq‘ñ
YÔ4Ûûª2x"…þ€¦Æ">5IåñOù¼Ðù)þþbZòZj ÷Ö›ŒEŒ×©8Œ†–BY‡tç÷]Ü þ×™¢Ë€9£ýd%ut o¥tÃØ_‹Òs¼#Žp9Ä RsˆNóÊ Aα›‘my_êB[öéNU9Wɶ¿~›ê? endobj 1238 0 obj << /Type /Font @@ -13765,14 +13789,14 @@ endobj /FirstChar 34 /LastChar 125 /Widths 2739 0 R -/BaseFont /QCARHR+NimbusMonL-Bold +/BaseFont /AXOYUR+NimbusMonL-Bold /FontDescriptor 1236 0 R >> endobj 1236 0 obj << /Ascent 624 /CapHeight 552 /Descent -126 -/FontName /QCARHR+NimbusMonL-Bold +/FontName /AXOYUR+NimbusMonL-Bold /ItalicAngle 0 /StemV 101 /XHeight 439 @@ -13793,7 +13817,7 @@ endobj >> stream xÚ¬·ctåßÖ&›£’ Û¶mWœT²cÛ¶m§bÛ¶]±*¶[ÿsºûíqnß/}ß{Œßšxæ3ç3×c“)ªÐ ÛþŠÛÚ8Ñ1Ñ3räÍ:;ÊÙÚÈÒ)Mlpdd"@C's[QC' 7@h ˜™L\\\pd -ŠšRò +ŠšRò üªm{|ÓÂv¸* Þk‚駹?ÛÜ—Ní>ö¥©F{1(zR€—ùøÞ$T}¨›ä 4 z%ˆégQžW‹²ÛZìŒê»“JÊzÅïPߧ;X `®ž¨üH\ üÐI í|ŒRëc1:QA¾Õžž‘' ?=R Ž õÜ@öíãÑäÄÂ’ñ¸@ ’GúÙçà h©Ux†SA¥7!àÝ´_}jt{êå‘‘â’FX˾*šæ¯Ù´Ë¾'A¦· ð&Ê9H¶îWþÀ¼žŸŽäJœæšËýZw&sÄâmŸ 쿵$
œÉ„®'~ @@ -13874,7 +13898,7 @@ i¿5xÑ@>,Ïu> w?ti Ó¶0ûôIÏä#%(ù‰ö ^hâŒð·¹ œ£“hZ™Í/øÅ_à7œÀ+P¸¸&&êåî$+Nȶp®Ô
~ I(–»c¹ÚŸYªÓÅg¶%ø¥p%ö>’ H¾iL¿\ÚõÐß(¦µâ_«8Cƒ—R{‹ Žµrð¦ëØíû‹0Ê{‡˜ÊQê¸2‰«Zœa‰ƒ†*7Äc¹äJî„I›ÏüìÒ]©æÁ 1=Š¡å©òñS€MX¡¥GMøªéþP¢‹:*½ÙOT9†ÜD¨*ÀzÞÃ*Úž“¬ÿ°Ë_hg ‚œ«ê9ŸjˆŠ"J7Þ®(ðhT(ìâ ª¦ ¼ÜðÊ™§Ä‹V¬áÝq -oò]ç }£¯9B‘7õ· öœH{È’ëæi`T&éVÇãs"¹‡‡ªÃßÛçVMo¼iá÷׈â{C„^×;¿_g¿`,·÷þ2
Ún“
R ɫǶ]ÅjÍuib°ƒãÏV!QÏÆ>²¦aO<ö”ñOÁxƒªH²$áófe °§Åû›ê¥úКxÇÑiêÅà>ò$–Ìy"-Ú-ŵ ôý‰¤Ëq ¸ŠÖˆÕ"™[Ø m¥cA¸ ¶¹"t8Q+PK¥ìó÷Ñ”¶ëÛãh_“ ®$+ƒº‡¼S¾ÎúÜþµ$áØ™éezv~7EhÅZÞ‚¥ÓªãHÝåûm®Ý‘(ãŸÄ"Þïòwnúê›»ÉÕ”^«¦ +oò]ç }£¯9B‘7õ· öœH{È’ëæi`T&éVÇãs"¹‡‡ªÃßÛçVMo¼iá÷׈â{C„^×;¿_g¿`,·÷þ2
Ún“
R ɫǶ]ÅjÍuib°ƒãÏV!QÏÆ>²¦aO<ö”ñOÁxƒªH²$áófe °§Åû›ê¥úКxÇÑiêÅà>ò$–Ìy"-Ú-ŵ ôý‰¤Ëq ¸ŠÖˆÕ"™[Ø m¥cA¸ ¶¹"t8Q+PK¥ìó÷Ñ”¶ëÛãh_“ ®$+ƒº‡¼S¾ÎúÜþµ$áØ™éezv~7EhÅZÞ‚¥ÓªãHÝåûm®Ý‘(ãŸÄ"Þïòwnúê›»ÉÕ”^«¦ endobj 1218 0 obj << /Type /Font @@ -13883,14 +13907,14 @@ endobj /FirstChar 33 /LastChar 125 /Widths 2740 0 R -/BaseFont /VJKFYL+NimbusMonL-Regu +/BaseFont /SQDHVH+NimbusMonL-Regu /FontDescriptor 1216 0 R >> endobj 1216 0 obj << /Ascent 625 /CapHeight 557 /Descent -147 -/FontName /VJKFYL+NimbusMonL-Regu +/FontName /SQDHVH+NimbusMonL-Regu /ItalicAngle 0 /StemV 41 /XHeight 426 @@ -13910,7 +13934,7 @@ endobj /Filter /FlateDecode >> stream -xÚ¬ºct¤]·. Ûv*I§cul' [ £b§bÛ¶mÛ¶Ží¤cwý¼ï·÷>cŸóëœý£jÜk^s^×Zë 5FQ’)ª0›Ø%ìlA ,ŒÌ< +xÚ¬ºct¤]·. Ûv*I§cul' [ £b§bÛ¶mÛ¶Ží¤cwý¼ï·÷>cŸóëœý£jÜk^s^×Zë 5FQ’)ª0›Ø%ìlA ,ŒÌ< šþô¯œtGLz¥ÈéQž7K²;P?8˜Õö¦””õJ>`ˆg:Y ánžiü(\ ü°¾<Ù£ø§6Äbw¡5aÔž_|M<}~¢ î½…î?$¤Ë‰…§äuBþéçC(øCB¼ªùÕi{Ju ¡glŸÏÏìC(»ƒ¢ÈbÓËZÁçjð§fÌÁpC@¶ ¦éÂú”/é„ÐaF)¹ìÉT_Äü AÇDF@’_²–
z¿IÂ>^"ò “£œŸpÖ j×Ñm¡HNZ¬¹Šù—;Ão{ô«OŠ—© š }¾ŽÈïqM gÀÁõ@‰Î @@ -13984,7 +14008,7 @@ K› ÀöYt^¬evQ&57Ñ„t9Æ©‘;ØQLV2²ûËI2U^¹¨%Ô~ŸŒ×ˆzW p íSß»bò7+Ö˜ß áænÍwˆ'£#µE°n x‹¢PšL~|ö4KQ¦–!¯jn£ÕªîØãVBGE”}œœ ŽýÐ{ƒéV³”Vã0¾ô.¶Tv‚Ì|` °SU[¸U! &ýø7 >hI£YÉì0 …òÇ*껪¦úݳj€í¨ž¨ß`Ù?8sGx9g3ÎîèñÙt÷:n:—S úluHx‹œ›ÍÉPo·«ÃJAüÕh€ß¾ÅW'ˆÃô´B ¶q…¡Jˆ`“ý kaæ®´bg>–MO”¶æB8uk—ÄþÙ7)Çê®Ü¿5GVQ(ë¿Pm-FG*åTA¸¡WK2z)· Ž×?3Ì›QOl s¹ -¹ƒ%ÔÕÝÙêjýn…âendstream +¹ƒ%ÔÕÝÙêjýÀâendstream endobj 1161 0 obj << /Type /Font @@ -13993,14 +14017,14 @@ endobj /FirstChar 2 /LastChar 151 /Widths 2741 0 R -/BaseFont /IRCWTN+URWPalladioL-Ital +/BaseFont /APNYSM+URWPalladioL-Ital /FontDescriptor 1159 0 R >> endobj 1159 0 obj << /Ascent 722 /CapHeight 693 /Descent -261 -/FontName /IRCWTN+URWPalladioL-Ital +/FontName /APNYSM+URWPalladioL-Ital /ItalicAngle -9.5 /StemV 78 /XHeight 482 @@ -14025,7 +14049,7 @@ xÚ¬¹eTœm“-Œ»kðÆÝ ‚{pw×Æ¥qwwwBpwwwwn‚÷/Ïûž™9kÎùu¾ùÕ÷U»jW]µë®^½š’TI•QÄÌÁÄ\ÒÁ ÄÈ R ššÛ»˜Ó, œ¶ÿ> üfîajîøÄ -hjcÿOó9ÿ
™Û›ý÷úÿÊô¯ê™UDE%Ôéÿ½Ê¨jûw¾ Y¹¸ÿ ¡ôw@jžŽæ€ÿ•NSÞÁì?ÿð‰Š:x +hjcÿOó9ÿ
™Û›ý÷úÿÊô¯ê™U4´t$¥èÿ½Ê¨jûw¾ Y¹¸ÿ ¡ôw@jžŽæ€ÿ•NSÞÁì?ÿð‰Š:x 2¶7û;nÿiø6uuvþ«ò¿6ÀßëÿÇù_ƒonîanŠ°¾â`Ê b‘ ªÃÍ ™× èc… u,mT+* ¨qèõψØå4z«
ejšáûh÷\>s|?üFw4Ö‡cKÝ›f~ùЗœ¶¿ý'U'7ýQ³A)ræ¹fŒ÷Õ’Ü”‹ÆÑÞ”²ŠAÉ ÑL'»3ÜÕ#m ‰ªV¶ý^]n?É÷oŠ üÐìæÇÕQÿÑŠ´Këñ¯0AÙ ¬ŒÚ#Ûõ½ü¶Sz_“Ò¶Âæ°Â¯£Z¬ 4¦×âÚpj~¿H]c}jÇyŒ{ì|yz0Òä$·‘×ù³›'È úKåWµ0wïèåóä»÷ ¦¤†®ßë ÓôäNg@«ÔËfR~7øX3X¯§º<†ž‡:;D݇ Y‹’‡±ÇƲ ¾qv"©Î.嶱8Á[Ö†¸gÛyŽ ‡Ø @@ -14079,7 +14103,7 @@ T S!õ\¶ZãÒJ)¡#¢:sÌæÀŽ_îR·è¢#Ô¦Bò êOqÚô¡9U¤ $Ö=6Ððü|Hò‹°s%nS,{¨üˆ&õÊ’—8$²cå’6¿ p[Žx7íj£\k@?®ð¶ "Ü<4s=3Ña½BÚ_Z¼–âç0h^×IÓ¡gÀDFÌû"O,v}V%t ïæûüH¦¼¯¸Êi¹ò¢Œ Vº<3ÿiúü`+zв±ƒõ¤âBy¿e5m¨á^[ÄyaS©aŠ€()ÞŸíÆÜ=7w3ÔV³Md& ðÑÈå’½Teöä´þe¢QŽh¬õ äØîαÿ”øg ´>»6¹”¼g´(>\PóÔkºßo†‘vÝ8‹¥‡HZR¯±˜(rÔs•Ì7R¶s×»LíªøŠæüz!ÁÈ
U[–Õ²69§QŽƒ.[¿’6çÏhüS—Wse®÷±dßbfïyîI‡dÁFbNþ%ÕgÔÆGœ¢,bœrü(šÙÂ%+'‹
Òl£g"îuªrC`Wro¦1€5Ç CÈ…çpû¶šÍÄ]sG¹ÑOnäàrqœìZI=…M}…)äCQÊ~ ê!µŸ¾Dz9·%eÞ!û©ÆÁ”,Ý,>׿¿âb‰lGûrs
RøV0' uV·ƒÔ) É ²;^%! #úㆹå"à÷È“µ ‚i4Í p#Öo·¤_Œä%±!¥Óæ`…(`¢ix¸ü={Pìr {[£3þÝɶ*\Ôvµv ÈÆe~0{zŠJ"É®Ñc µÄÀ‹í_~ …U¢÷íýwõœÅ6o¸JÚè¨OÊÿ7E®Õ?ÿm]~»úàD¾?œñ Ž¹,à¾$ôƒc2‹™‹ãé¸æß‹M|&ìšp{³×Ó\Ì «e
•Œ¤·Æý:®s”CrªÞr±[G^…_x[ ´?ÒØæå'®Öܬž ¥Škv5‰GlŸ 뽺>QÄè5ó†…¼ ~šÒÙŽÝ ÙvnÂ|*ÑÐaòÝ¥ÉÿÞ^á=tønÚÖ•_ÎïxPðdòùCß•bRæw WbgÖJ?~årοþC¬[BýädƯ{ñ h§úÍwÓ‰Ï'}2~Ñ]Ø6å°âÙŒ9û ²&ÜÔîNÖñûö¡î±`luî‹)G2O=ßùEßCùä”Õùù[ -¹ÓÏ™wŸ˜sìÇÆâ@•»¯M·åöMXvºóEÿÿu9~Û¤k²¹¶…ê¼ ª?yÉg“º”òÌÜ{ç; OÛ«YŸ$3iÕæ#ÛÏn•8²oväóŽ7¯ã}ËÏëÕýÜá?÷þ¹ësÿ„æÕäÈ© Ù÷pö.Õ`¹fýO©a›K<ÛNîêè=|ˆuÖïD©â¹µßýÝ^Ú(šDªM?T¹CÂxÝ;)ñ´g¥ÙE NÓ/Û¾}õ%×ÊÛJ®Q†…É9©‰E%ù¹‰EÙ\ +¹ÓÏ™wŸ˜sìÇÆâ@•»¯M·åöMXvºóEÿÿu9~Û¤k²¹¶…ê¼ ª?yÉg“º”òÌÜ{ç; OÛ«YŸ$3iÕæ#ÛÏn•8²oväóŽ7¯ã}ËÏëÕýÜá?÷þ¹ësÿ„æÕäÈ© Ù÷pö.Õ`¹fýO©a›K<ÛNîêè=|ˆuÖïD©â¹µßýÝ^Ú(šDªM?T¹CÂxÝ;)ñ´g¥ÙE NÓ/Û¾}õ%×ÊÛJ®Q†…É9©‰E%ù¹‰EÙ\ endobj 1026 0 obj << /Type /Font @@ -14088,14 +14112,14 @@ endobj /FirstChar 35 /LastChar 90 /Widths 2742 0 R -/BaseFont /SNBBEU+URWPalladioL-Roma-Slant_167 +/BaseFont /RVXZFG+URWPalladioL-Roma-Slant_167 /FontDescriptor 1024 0 R >> endobj 1024 0 obj << /Ascent 715 /CapHeight 680 /Descent -282 -/FontName /SNBBEU+URWPalladioL-Roma-Slant_167 +/FontName /RVXZFG+URWPalladioL-Roma-Slant_167 /ItalicAngle -9 /StemV 84 /XHeight 469 @@ -14111,20 +14135,20 @@ endobj /Length1 862 /Length2 1251 /Length3 532 -/Length 1860 +/Length 1861 /Filter /FlateDecode >> stream -xÚíUkTgnõJÀ+Å€€¸ -æ2%P4-wTP¤2$H20I0@¹,P ‚A…ÊE ÒJi½ -& X¹ê -ºè±KîþÚ³3æ}žç{¿gž÷;ç33ñô!8²‘ ØŠ ¤Nn>A2 -ø“‰d2ˆ ±÷íWÀŠÍ>²6O P¨¶ -³p½ÝË>)$¯:¹"ö³s·¿ÿ€¤õ¢RÝ«ÙìW›ÏcÇøPÏz™‹KG‹•WŽËñ¡ -ýÏYö'uÑËîé_N—è^¸’VTî—Om"öøà#Ódk^Y™2åáN|4¤7¡Ï|³m{ïô¶¸6³lãйƹÁní–Þ',M7ÓzÏk¼¿ 9ð¸sëdm\Þõ¬‰[÷\™žx‘Kš¹‚ã 4
Í>Âp" -+¯Ç–»*åQ}öüzô&éãTÓ³g>åÒ™´XÃèßo†iâ癩eÏ|å¡…k2f\¸-Oº®$eÆïi4v5j{hÍ}¹¹ÍÊ]öQ0yÐzÕÅ‘ZƒöGû®S^«47—Å>/‡B jrŸD…W¿sn?>#†øEõ©ƒOKëåÚÝõz î®»½N™/ -µÜ;4Ò(n’+³²Zîñ1~xܦ£ûöžÒ‡ñ‚÷t ¾ýÊ+ —á¹¼ÒÈh <v-Œ¢e*뢙yà%suùZQ‰Å&QÉÅø±DzÿQ°êFgx_5žq8'–9ÉLÓË
¾š -!üm94¡ÜÜ›=7âfp¢ŒûLéQg_]flB쵧%õ„Dà PYR»rÍü
ëÀÎC{ïSŒÃ㲎„™xjèz”Ë.Ûk'$Ô\×-”…ÌîЉМV*¦…FÔ=3À5½[w8O~¨}©À{ääŽ ÕKIë·5ûØ÷§«÷ozyàYC?÷£ÐèÎú©_†çÍ V SyÈúä—pïç7J¿üñ·¡ÒÉðõùWoʯʉ.„Ö‰Öþ›E¶TÅÑ“Êk•×Ç$
7ìÍe$å-Êþ„ÓYlÿÒ<ß ?¨="Y—Uªš{êæSE aÐ]EÕÇôy”óÔe¼Â~²²ÔŸþ©ÏÞ_ã¨bÎ Çç¿œ$½Nì~®Q×*5*óeT¥LM—hµ¾Þê™Õ>ä1¨'›³²dPª×Hö6€4»Ýý†;œ9sç—Úµ¬÷U$FÛéx7:á,?ÔyòÓæݯ¸ùOiD§È‡‹øÄuþ÷T«TêSFaô{ò€Š1b]aÚù_Ýw*S’ç#¶ä]k¬Øu ÙìÓò€vlÃlÓËD Õ7™Už¦«‹ûJ*ƶábuÁÀ$ñö²·p}Â(5ñiQBCG¸çÀ\—$§!7!Ç]~9Šœù¸)ökµÑ)Ç÷D_uo€£ŒÚjnÿ=Õáh׺™;wáÔúBÙ˜«jU´fŸîN—²QÝÖ…Zöî–[£!CŽWµ$Aü6ÍŸd‡š@Â!ß¼tÍ›
‰ˆINzÀxwÁv}ÃuÙF{H ¾?>¬i ÿ˜ú`v«× íøT6Ý1¿é0S x }Î䇯£Ž¨Fü׆þÜ×¢¯ª«;rª³+Ù7ÖÕt®]šrZ9µqg{7áø®lGÌ}Ÿ3\OkôÏɵV'•Ç²;Bêmиƒ’ž˜lo^·`m`onç= òøàþßà¢vuC¨@h(î_uþIendstream +xÚíUkTgnõJÀ+Õ€€¸T +æ2¼%X4-@TPLuH&H20I0rY bQDƒ +UQ ÒJi½ + VÀh,, â@HøJ Iä8Ò”#–\ˆ +pÃL~`ˆ\ª°G +B°½`ÌÉÃÔÌæþ*©4’MµŸNé/<$“H5oˆ,Z¥„Q À¨|¦4~m.HT²™,K I%|†\$…èE${R_…¿D
8%_ !©žÆa¹`¦,¾i#$nÐÖm ®Ç›¹N“ H"WnÒDà +ña),ü3ìù~=ôw¸7†Cè; +)¤OÃ
ŽÉDÔñŠ@ðñÆ~½šðoB¾ +Ea¹rúlbñ¿…ld0¬†ù¸Îv„ï›™W±»4ñ³S׿ÿ€dõ¬©ÌÜiÙV•˜/$p©Ç‚EÊ¢þBã…ý:|”Áîs¾ï![ô¼}fо/GOÚž¹q¢$ì@2µžØÁÅkR3´s^z¬ègéb¶ .øÚè@¯Gï ýfùÊÎÑåIM6Ç&æ¶Su=íÖ ÝCº»,¡už¶ì~1^Óý°uÙpURÞåÕü¡k·X ¼Â?c…A¸Æ:b€ã c
à>FãM“q—`r>{_}¸ú‘Ó —t×'zn‰z,#Ñ!þ÷«Ñ–ø{2 Ǿb[áꘗº¯ëÒ.IYÉêœ ›î{ŠŸ/iòÒ~$"÷xÎ:ÛWeß ù`óÏå`ú+“å’âħ%PTAe®ÓúGq1ßÕ¬žØŒÏL ~Qqxëã¢u{Í"ÐvíÍN¿¬gÇ‚Z,2(ª ãÚ*ñþ¾wЫ¥ýú†¢ûɲ÷lì¿ý*˜W‰ËdCþ/-2{{ö^Š¦X¹hÛhŽ+¾Üòœ5»d®â¤ÛbÅɳɩôÛ»Àò+mà]Ó`æöœDÖ0+cQ®èb +Œ#'û”»7,ÔV/ê¨<ªÕuÙ8YÞ6 ˆ[dpÖ–)wJ„G¬Ç³öerxAÁa_X$moÈKã±yOÌ殧¥‹‘£«–¦ „šw³öëŸõ yŒ(¹Öô³mEaé+4ðÙÚ5^c–Œ’£óM,’Ó|…vfS›øøîlqÜÈžc¿¹<Kêùcø»…'" ?ƻ߲@®nÌ Kê ´?X,~bdWûV;9;}ii ‘±¸5¨6Ù8çþŠçÎÖmïRœb’ìˆpæXزK´ç}SRdfqÀRÊ‹¬ö¨¡¨œ–FåzGêÇœLpNç²Uë‡?´>WÒwhÕfŠ»Jÿmå&Áλ£›¿ÊÚò¤…i—ûQÔ?lÇÃÌÏcò&wôš÷šØÚ.Ý9ÜûùuêïeüíNÑpÌüü‹WuuD‚~Hûê oªa×½a㥲˪Ú+¾+´$ã5Êæ”#áEy¡g~0³5üó&·åõu Õ“é;{/¢¡›†ò铨ð±ÿ`©ïpYQ8ýSîÆ_“¨JáAÆÓ_‘^¥¶?µ¨Ö« ‹C™åé#£'ô¯–q4ßa÷,ÒNx¸3)sT@†ÏºÛ«Ö 'Nÿ®öiœ7jH÷± ÕùáÜ?´yôÓ†u/Åù÷ZħëzO0ñ©óÂo™f™Ì‡ £é·t¼ÒbõñŒÓ¿=nLß=»4ÿÎ¥ºÒµ[òX
ÜÆ{´½ Æ럧º™¾É*ç¸Ìv*ìzq² `.ï-4t@R®,#ôÓùCŸžH©m‰átO´©rjsSr‚tçãÈY‹Â0½—M ¾°#þœ¢} çØTYË»þ÷=kvµÍ»qÞSs\;`šoÙeo{£Õ¿¸ßVÿ¢J°®ñZÿšÈ;Œ‹Vªi“åO/´Ûêy a[hÞ>Ë1¯©ˆsÎ>Þ`{ÁJ;‡yÙŽHBi8>º~ÿzo|Yp÷àH6‘_¿%3<ÅŸrþáë¸ ¦¾ð¹1ý?w5Ú™ª«w nmÛ šà2ѬN?b Y¸º¹°m6ûë`×çÌ€#·'tV³ÓJ-‘5^hÒVUGBvˆE§V\0wggn©ð=òøàþßà¢vuC¨‘Ahî_EÖþ}endstream endobj 964 0 obj << /Type /Font @@ -14133,14 +14157,14 @@ endobj /FirstChar 13 /LastChar 110 /Widths 2744 0 R -/BaseFont /DMRGDF+CMSY10 +/BaseFont /SNYZAS+CMSY10 /FontDescriptor 962 0 R >> endobj 962 0 obj << /Ascent 750 /CapHeight 683 /Descent -194 -/FontName /DMRGDF+CMSY10 +/FontName /SNYZAS+CMSY10 /ItalicAngle -14.035 /StemV 85 /XHeight 431 @@ -14164,7 +14188,7 @@ endobj /Filter /FlateDecode >> stream -xÚ¬ºc”¤]°%\]î²,Û¶mÛvuÙ¶mÛ¶»lW—mÛúú}ïܹ³î̯ùæG®õœˆ8;vÄ>'Öz2“„@^‰FÀØÎÐDÔÎÖ‰†–ž ¢¨&o`mm`la'M£hgc +xÚ¬ºc”¤]°%\]î²,Û¶mÛvuÙ¶mÛ¶»lW—mÛúú}ïܹ³î̯ùæG®õœˆ8;vÄ>'Öz2“„@^‰FÀØÎÐDÔÎÖ‰†–ž ¢¨&o`mm`la'M£hgc áàUûZRR Ž_&½þ’ÞŸfx¯%Ê3® ôEþsÈC®” ô“‘Bå0²TU’?…šÜ¡ˆhÍÒVùòýåm»T úÃ8Z§ä‚Û°ý ³:I?Ôöz"6›Èbœ^% yá×h}×¹Z ypÓ‚u=jëé 3\xœa(74nŠïRýƒ&cx£aYKÜ¿‰~ػբÉI·XiêS¨“2ø ú›G²¨†lkÕ›$ñé³øI ñƒ<½*;:̽¤PœT1]š«ÚowŽ0~,A¸ÕO˜Ó%/‡ìdccÅ÷‹k×{GKÌ‘›j™(+ÔBUÞD# ¡6ª:Mð%¿s¾†I¼;v #wïRUèB&%Ô øªÕ(cÊïZB™ª³/7í¿ '|8¾—}Z£ 6Ã*DLi´¯kâ'/rn¶èXÐ60µ!~Èaïގا*\Dxc(uè³?^NWù ±CVØñ Áá´ÅÚ Q[´¬5üŠvȈ0Kïø^•vµÚ*V¦°cœ
(p3“¸µMÖiÒ|#Óƒ}5ãByE¦Ç•yÖÌÞ¢º<^×<;>3ý ÎÈ;V<g5j‡ùôIH ›C„ÿæaTÓ€ @@ -14267,7 +14291,7 @@ PÔ3)lmŒ;œ¸—ü“5|—î”+ÀTÅv‰¼Ô_òF^›b QãLT?yÇ¥ðb²èewïA© !ÅdYò]mÝ ÏÈÍ[Ÿ ‡)Í1p’}l‹ÈÙ¤û¨¯šð1ônQ“Öü:”ƒ‘96êì(…+õƒ<“4Ã7Q|ÿF1°²¨üñ#\õl1ï ,äÝ?7Âeì7®Œ½nØ<É„3ÄÓ›rhNBRòÂÑC ^[ÜÀ!ÄŠxMcOÝ—ÙPFt>l¿‹JF¢‡ßÂöð1’£†°åïxDÑv hÇÚ ¥åã—r¢fY—òU·zifÁUÆz*JfU¤ËÞ ½ ýä|ÿ:Ð(Pk<’¥WÝìo*Á]ö…gP³Šþ,ÚFjî¶%™;ɘ¹á9L9.DœÇǦÝ@sOµhòÚ³Bãt ÑsÒ~ˆ®›×)-ÉA -ÇГöÞVMýͲ:“®³m›ÓWBÖþü/ùÁÿ ±©¡“‹½¡“5Ìÿ +ÇГöÞVMýͲ:“®³m›ÓWBÖþü/ùÁÿ ±©¡“‹½¡“5Ìÿ endobj 961 0 obj << /Type /Font @@ -14276,14 +14300,14 @@ endobj /FirstChar 2 /LastChar 216 /Widths 2745 0 R -/BaseFont /EJFWLR+URWPalladioL-Roma +/BaseFont /KNFIKS+URWPalladioL-Roma /FontDescriptor 959 0 R >> endobj 959 0 obj << /Ascent 715 /CapHeight 680 /Descent -282 -/FontName /EJFWLR+URWPalladioL-Roma +/FontName /KNFIKS+URWPalladioL-Roma /ItalicAngle 0 /StemV 84 /XHeight 469 @@ -14303,7 +14327,7 @@ endobj /Filter /FlateDecode >> stream -xÚ¬zcteß³mlÛN:¶“ŽmÛö‰mÛN:¶mÛ¶ŽÙq^ÿþWoÜ÷>½w?ì1öªª5kVÍZkœ3Æ&'VP¦4™Šìœé˜è¹‰T•Ô ml M,2tB +xÚ¬zcteß³mlÛN:¶“ŽmÛö‰mÛN:¶mÛ¶ŽÙq^ÿþWoÜ÷>½w?ì1öªª5kVÍZkœ3Æ&'VP¦4™Šìœé˜è¹‰T•Ô ml M,2tB Ѫ&ðëöÜ(ÞÃÇ‘œåRMyû©i¯MH>c¸¤bq›‹bgÜë㤸>· +Zµ‹¥{ü‹q=v¾ ™«O¼—«Ñ )X!íÁ/$ä±)$§ÁØ^‘w?í¦‘ù]€§“X.2)§©Êer[¤ .©»¹™ ;þÄýI‰ŽBà A¦¸¯»àÐaÁôÞ®|û³ 5 ï8sêÓ† "ŸÍëã-ö .TÞ; ”Ïè*Yp§«© ‹ÕÀKÀk" !œÑE¾[O žKA3æTv7‰.ѧü™"Ç S"V™bIÆ@Ζӧ @@ -14406,7 +14430,7 @@ V‘<}6j]'» EVîhû‚}6¡ÝÀ6àÛ·o÷CfÀ¿ièﬕò1e·)(+‚§l¦…ãƒÖˆç\àíÈìk}/y»—ìǸoÕ ¥`M/\oõÛþJXSù6”¿ü'ŽOØLaà¨oÍZNõµáø÷P³¬æ#À«-’·^=èCp§“´ñ»wÓ^»±òž,àìÎ-3à rg‡lÖ:G> ‡ û$Ëú*Ï[¾'е5Ø̽þ^¿‚@rG{XÎN3?Ü&Óvj½ìÖfl3OˆÐ¥\á" ÝJ)P\°7À«J&zgT‘š|†ñhÝh^r×X&âhŒç]CŠÒ÷ˆÂú%#ÅŸß’ïçUUÒÙ$ïRDäü¾Rk¤zwŒñã—Z UßD„j%‘{7¹’&LoÅLó´T0‰* -Ë—ÌF+uå| ã_ìŽ'¬gk"¸qáD] ² +Ë—ÌF+uå| ã_ìŽ'¬gk"¸qáD] ² endobj 938 0 obj << /Type /Font @@ -14415,14 +14439,14 @@ endobj /FirstChar 2 /LastChar 151 /Widths 2746 0 R -/BaseFont /FVCGIL+URWPalladioL-Bold +/BaseFont /YHPRZJ+URWPalladioL-Bold /FontDescriptor 936 0 R >> endobj 936 0 obj << /Ascent 708 /CapHeight 672 /Descent -266 -/FontName /FVCGIL+URWPalladioL-Bold +/FontName /YHPRZJ+URWPalladioL-Bold /ItalicAngle 0 /StemV 123 /XHeight 471 @@ -14498,7 +14522,7 @@ endobj /Type /Pages /Count 6 /Parent 2748 0 R -/Kids [1652 0 R 1657 0 R 1661 0 R 1665 0 R 1672 0 R 1676 0 R] +/Kids [1652 0 R 1657 0 R 1661 0 R 1665 0 R 1671 0 R 1676 0 R] >> endobj 1686 0 obj << /Type /Pages @@ -14506,35 +14530,35 @@ endobj /Parent 2748 0 R /Kids [1681 0 R 1688 0 R 1693 0 R 1703 0 R 1707 0 R 1711 0 R] >> endobj -1724 0 obj << +1723 0 obj << /Type /Pages /Count 6 /Parent 2749 0 R -/Kids [1718 0 R 1726 0 R 1734 0 R 1739 0 R 1743 0 R 1747 0 R] +/Kids [1716 0 R 1726 0 R 1734 0 R 1739 0 R 1743 0 R 1747 0 R] >> endobj -1759 0 obj << +1758 0 obj << /Type /Pages /Count 6 /Parent 2749 0 R -/Kids [1751 0 R 1761 0 R 1767 0 R 1774 0 R 1779 0 R 1787 0 R] +/Kids [1751 0 R 1760 0 R 1767 0 R 1772 0 R 1779 0 R 1786 0 R] >> endobj -1798 0 obj << +1796 0 obj << /Type /Pages /Count 6 /Parent 2749 0 R -/Kids [1792 0 R 1802 0 R 1807 0 R 1811 0 R 1816 0 R 1822 0 R] +/Kids [1792 0 R 1799 0 R 1807 0 R 1811 0 R 1816 0 R 1821 0 R] >> endobj -1830 0 obj << +1829 0 obj << /Type /Pages /Count 6 /Parent 2749 0 R -/Kids [1826 0 R 1832 0 R 1836 0 R 1844 0 R 1852 0 R 1857 0 R] +/Kids [1826 0 R 1831 0 R 1836 0 R 1842 0 R 1851 0 R 1856 0 R] >> endobj 1864 0 obj << /Type /Pages /Count 6 /Parent 2749 0 R -/Kids [1861 0 R 1866 0 R 1870 0 R 1878 0 R 1882 0 R 1889 0 R] +/Kids [1861 0 R 1866 0 R 1870 0 R 1874 0 R 1882 0 R 1889 0 R] >> endobj 1922 0 obj << /Type /Pages @@ -14636,7 +14660,7 @@ endobj /Type /Pages /Count 36 /Parent 2753 0 R -/Kids [1724 0 R 1759 0 R 1798 0 R 1830 0 R 1864 0 R 1922 0 R] +/Kids [1723 0 R 1758 0 R 1796 0 R 1829 0 R 1864 0 R 1922 0 R] >> endobj 2750 0 obj << /Type /Pages @@ -16329,7 +16353,7 @@ endobj /Count -4 >> endobj 2755 0 obj << -/Names [(Access_Control_Lists) 2079 0 R (Bv9ARM.ch01) 1230 0 R (Bv9ARM.ch02) 1274 0 R (Bv9ARM.ch03) 1292 0 R (Bv9ARM.ch04) 1355 0 R (Bv9ARM.ch05) 1536 0 R (Bv9ARM.ch06) 1547 0 R (Bv9ARM.ch07) 2078 0 R (Bv9ARM.ch08) 2103 0 R (Bv9ARM.ch09) 2119 0 R (Bv9ARM.ch10) 2380 0 R (Configuration_File_Grammar) 1570 0 R (DNSSEC) 1421 0 R (Doc-Start) 935 0 R (Setting_TTLs) 1999 0 R (acache) 1281 0 R (access_control) 1722 0 R (acl) 1579 0 R (address_match_lists) 1552 0 R (admin_tools) 1314 0 R (appendix.A) 750 0 R (appendix.B) 842 0 R (bibliography) 2127 0 R (bind9.library) 2335 0 R (boolean_options) 1370 0 R (builtin) 1796 0 R (chapter*.1) 969 0 R (chapter.1) 6 0 R (chapter.2) 66 0 R (chapter.3) 90 0 R (chapter.4) 130 0 R (chapter.5) 350 0 R (chapter.6) 362 0 R (chapter.7) 706 0 R (chapter.8) 730 0 R (cite.RFC1033) 2254 0 R (cite.RFC1034) 2139 0 R (cite.RFC1035) 2141 0 R (cite.RFC1101) 2236 0 R (cite.RFC1123) 2238 0 R (cite.RFC1183) 2198 0 R (cite.RFC1464) 2276 0 R (cite.RFC1535) 2184 0 R (cite.RFC1536) 2186 0 R (cite.RFC1537) 2256 0 R (cite.RFC1591) 2240 0 R (cite.RFC1706) 2200 0 R (cite.RFC1712) 2296 0 R (cite.RFC1713) 2278 0 R (cite.RFC1794) 2280 0 R (cite.RFC1876) 2202 0 R (cite.RFC1912) 2258 0 R (cite.RFC1982) 2188 0 R (cite.RFC1995) 2146 0 R (cite.RFC1996) 2148 0 R (cite.RFC2010) 2260 0 R (cite.RFC2052) 2204 0 R (cite.RFC2065) 2308 0 R (cite.RFC2136) 2150 0 R (cite.RFC2137) 2310 0 R (cite.RFC2163) 2206 0 R (cite.RFC2168) 2208 0 R (cite.RFC2181) 2152 0 R (cite.RFC2219) 2262 0 R (cite.RFC2230) 2210 0 R (cite.RFC2240) 2282 0 R (cite.RFC2308) 2154 0 R (cite.RFC2317) 2242 0 R (cite.RFC2345) 2284 0 R (cite.RFC2352) 2286 0 R (cite.RFC2535) 2312 0 R (cite.RFC2536) 2212 0 R (cite.RFC2537) 2214 0 R (cite.RFC2538) 2216 0 R (cite.RFC2539) 2218 0 R (cite.RFC2540) 2220 0 R (cite.RFC2671) 2156 0 R (cite.RFC2672) 2158 0 R (cite.RFC2673) 2298 0 R (cite.RFC2782) 2222 0 R (cite.RFC2825) 2266 0 R (cite.RFC2826) 2244 0 R (cite.RFC2845) 2160 0 R (cite.RFC2874) 2300 0 R (cite.RFC2915) 2224 0 R (cite.RFC2929) 2246 0 R (cite.RFC2930) 2162 0 R (cite.RFC2931) 2164 0 R (cite.RFC3007) 2166 0 R (cite.RFC3008) 2314 0 R (cite.RFC3071) 2288 0 R (cite.RFC3090) 2316 0 R (cite.RFC3110) 2226 0 R (cite.RFC3123) 2228 0 R (cite.RFC3225) 2172 0 R (cite.RFC3258) 2290 0 R (cite.RFC3445) 2318 0 R (cite.RFC3490) 2268 0 R (cite.RFC3491) 2270 0 R (cite.RFC3492) 2272 0 R (cite.RFC3596) 2230 0 R (cite.RFC3597) 2232 0 R (cite.RFC3645) 2168 0 R (cite.RFC3655) 2320 0 R (cite.RFC3658) 2322 0 R (cite.RFC3755) 2324 0 R (cite.RFC3757) 2326 0 R (cite.RFC3833) 2174 0 R (cite.RFC3845) 2328 0 R (cite.RFC3901) 2292 0 R (cite.RFC4033) 2176 0 R (cite.RFC4034) 2178 0 R (cite.RFC4035) 2180 0 R (cite.RFC4074) 2190 0 R (cite.RFC974) 2143 0 R (cite.id2512154) 2333 0 R (clients-per-query) 2053 0 R (configuration_file_elements) 1548 0 R (controls_statement_definition_and_usage) 1338 0 R (diagnostic_tools) 1262 0 R (dnssec.dynamic.zones) 1441 0 R (dynamic_update) 1365 0 R (dynamic_update_policies) 1327 0 R (dynamic_update_security) 1732 0 R (empty) 1805 0 R (historical_dns_information) 2121 0 R (id2466567) 1231 0 R (id2466590) 1232 0 R (id2467233) 1405 0 R (id2467243) 1406 0 R (id2467280) 1411 0 R (id2467337) 1412 0 R (id2467481) 1233 0 R (id2467491) 1234 0 R (id2467731) 1244 0 R (id2467752) 1245 0 R (id2467786) 1246 0 R (id2467870) 1249 0 R (id2467963) 1242 0 R (id2470268) 1256 0 R (id2470292) 1259 0 R (id2470390) 1260 0 R (id2470411) 1261 0 R (id2470441) 1267 0 R (id2470476) 1268 0 R (id2470571) 1269 0 R (id2470605) 1275 0 R (id2470632) 1276 0 R (id2470713) 1277 0 R (id2470739) 1280 0 R (id2470749) 1286 0 R (id2470781) 1294 0 R (id2470797) 1295 0 R (id2470820) 1300 0 R (id2470837) 1301 0 R (id2471242) 1309 0 R (id2471248) 1310 0 R (id2473363) 1343 0 R (id2473374) 1344 0 R (id2473876) 1380 0 R (id2473894) 1386 0 R (id2474464) 1402 0 R (id2474481) 1403 0 R (id2474519) 1404 0 R (id2474896) 1414 0 R (id2474909) 1415 0 R (id2475027) 1420 0 R (id2475163) 1422 0 R (id2475310) 1427 0 R (id2475392) 1428 0 R (id2475612) 1442 0 R (id2475786) 1447 0 R (id2475822) 1448 0 R (id2475905) 1454 0 R (id2475942) 1461 0 R (id2475955) 1462 0 R (id2476056) 1463 0 R (id2476083) 1468 0 R (id2476092) 1469 0 R (id2476170) 1470 0 R (id2476183) 1471 0 R (id2476220) 1472 0 R (id2476230) 1473 0 R (id2476336) 1475 0 R (id2476358) 1482 0 R (id2476528) 1488 0 R (id2476692) 1494 0 R (id2476761) 1495 0 R (id2476878) 1500 0 R (id2477097) 1501 0 R (id2477106) 1502 0 R (id2477138) 1507 0 R (id2477174) 1508 0 R (id2477222) 1509 0 R (id2477253) 1510 0 R (id2477588) 1520 0 R (id2477634) 1521 0 R (id2477825) 1526 0 R (id2477955) 1528 0 R (id2477976) 1529 0 R (id2478009) 1537 0 R (id2478225) 1549 0 R (id2479049) 1557 0 R (id2479077) 1562 0 R (id2479351) 1563 0 R (id2479366) 1564 0 R (id2479396) 1569 0 R (id2479539) 1571 0 R (id2480073) 1578 0 R (id2480116) 1580 0 R (id2480263) 1582 0 R (id2480622) 1589 0 R (id2480640) 1595 0 R (id2480663) 1596 0 R (id2480686) 1597 0 R (id2480845) 1601 0 R (id2480971) 1606 0 R (id2481024) 1607 0 R (id2481649) 1618 0 R (id2482477) 1629 0 R (id2482539) 1630 0 R (id2482997) 1636 0 R (id2483070) 1637 0 R (id2483134) 1644 0 R (id2483178) 1645 0 R (id2483193) 1646 0 R (id2486547) 1684 0 R (id2488798) 1714 0 R (id2488857) 1721 0 R (id2489340) 1731 0 R (id2490618) 1754 0 R (id2490678) 1756 0 R (id2491032) 1765 0 R (id2491671) 1783 0 R (id2493275) 1814 0 R (id2493398) 1820 0 R (id2494636) 1842 0 R (id2494844) 1848 0 R (id2494891) 1850 0 R (id2495249) 1855 0 R (id2496936) 1873 0 R (id2496944) 1874 0 R (id2496949) 1875 0 R (id2497420) 1886 0 R (id2497453) 1892 0 R (id2499608) 1954 0 R (id2500272) 1964 0 R (id2500290) 1965 0 R (id2500310) 1968 0 R (id2500615) 1974 0 R (id2501785) 1981 0 R (id2501913) 1987 0 R (id2501934) 1988 0 R (id2502365) 1990 0 R (id2502502) 1992 0 R (id2502520) 1997 0 R (id2502924) 2000 0 R (id2503117) 2002 0 R (id2503132) 2003 0 R (id2503244) 2009 0 R (id2503267) 2010 0 R (id2503351) 2011 0 R (id2503412) 2012 0 R (id2503481) 2017 0 R (id2503517) 2018 0 R (id2503593) 2019 0 R (id2504036) 2031 0 R (id2504539) 2039 0 R (id2504545) 2040 0 R (id2506081) 2047 0 R (id2506087) 2048 0 R (id2506464) 2050 0 R (id2506469) 2051 0 R (id2507554) 2058 0 R (id2507586) 2059 0 R (id2507927) 2068 0 R (id2508169) 2088 0 R (id2508387) 2089 0 R (id2508515) 2090 0 R (id2508595) 2104 0 R (id2508600) 2105 0 R (id2508612) 2106 0 R (id2508629) 2107 0 R (id2508691) 2120 0 R (id2508862) 2126 0 R (id2509118) 2131 0 R (id2509121) 2137 0 R (id2509129) 2142 0 R (id2509153) 2138 0 R (id2509176) 2140 0 R (id2509212) 2151 0 R (id2509239) 2153 0 R (id2509265) 2145 0 R (id2509289) 2147 0 R (id2509313) 2149 0 R (id2509368) 2155 0 R (id2509395) 2157 0 R (id2509421) 2159 0 R (id2509483) 2161 0 R (id2509513) 2163 0 R (id2509543) 2165 0 R (id2509570) 2167 0 R (id2509644) 2170 0 R (id2509652) 2171 0 R (id2509678) 2173 0 R (id2509715) 2175 0 R (id2509780) 2177 0 R (id2509845) 2179 0 R (id2509910) 2182 0 R (id2509918) 2183 0 R (id2509944) 2185 0 R (id2510081) 2187 0 R (id2510116) 2189 0 R (id2510156) 2196 0 R (id2510162) 2197 0 R (id2510219) 2199 0 R (id2510257) 2207 0 R (id2510292) 2201 0 R (id2510346) 2203 0 R (id2510385) 2205 0 R (id2510410) 2209 0 R (id2510436) 2211 0 R (id2510462) 2213 0 R (id2510489) 2215 0 R (id2510529) 2217 0 R (id2510558) 2219 0 R (id2510588) 2221 0 R (id2510631) 2223 0 R (id2510664) 2225 0 R (id2510691) 2227 0 R (id2510714) 2229 0 R (id2510772) 2231 0 R (id2510796) 2234 0 R (id2510804) 2235 0 R (id2510829) 2237 0 R (id2510852) 2239 0 R (id2510875) 2241 0 R (id2510921) 2243 0 R (id2510945) 2245 0 R (id2510995) 2252 0 R (id2511002) 2253 0 R (id2511026) 2255 0 R (id2511052) 2257 0 R (id2511079) 2259 0 R (id2511115) 2261 0 R (id2511156) 2264 0 R (id2511161) 2265 0 R (id2511193) 2267 0 R (id2511239) 2269 0 R (id2511274) 2271 0 R (id2511301) 2274 0 R (id2511319) 2275 0 R (id2511341) 2277 0 R (id2511367) 2279 0 R (id2511393) 2281 0 R (id2511416) 2283 0 R (id2511462) 2285 0 R (id2511485) 2287 0 R (id2511512) 2289 0 R (id2511538) 2291 0 R (id2511575) 2294 0 R (id2511581) 2295 0 R (id2511707) 2297 0 R (id2511734) 2299 0 R (id2511770) 2306 0 R (id2511782) 2307 0 R (id2511821) 2309 0 R (id2511848) 2311 0 R (id2511878) 2313 0 R (id2511904) 2315 0 R (id2511930) 2317 0 R (id2511966) 2319 0 R (id2512003) 2321 0 R (id2512029) 2323 0 R (id2512056) 2325 0 R (id2512101) 2327 0 R (id2512142) 2330 0 R (id2512152) 2332 0 R (id2512154) 2334 0 R (id2512310) 2341 0 R (id2512320) 2342 0 R (id2512344) 2343 0 R (id2512443) 2344 0 R (id2512588) 2349 0 R (id2512615) 2351 0 R (id2512692) 2352 0 R (id2512782) 2357 0 R (id2512836) 2358 0 R (id2512900) 2359 0 R (id2512915) 2364 0 R (id2513046) 2369 0 R (id2513110) 2370 0 R (incremental_zone_transfers) 1377 0 R (internet_drafts) 2329 0 R (ipv6addresses) 1531 0 R (journal) 1376 0 R (lwresd) 1538 0 R (man.arpaname) 2689 0 R (man.ddns-confgen) 2678 0 R (man.dig) 2381 0 R (man.dnssec-dsfromkey) 2429 0 R (man.dnssec-keyfromlabel) 2447 0 R (man.dnssec-keygen) 1455 0 R (man.dnssec-revoke) 2490 0 R (man.dnssec-settime) 1456 0 R (man.dnssec-signzone) 2518 0 R (man.genrandom) 2695 0 R (man.host) 2413 0 R (man.isc-hmac-fixup) 2706 0 R (man.named) 2575 0 R (man.named-checkconf) 2542 0 R (man.named-checkzone) 2554 0 R (man.named-journalprint) 2597 0 R (man.nsec3hash) 2718 0 R (man.nsupdate) 2608 0 R (man.rndc) 2633 0 R (man.rndc-confgen) 2662 0 R (man.rndc.conf) 2645 0 R (managed-keys) 1477 0 R (notify) 1356 0 R (options) 1326 0 R (page.1) 934 0 R (page.10) 1318 0 R (page.100) 1959 0 R (page.101) 1963 0 R (page.102) 1973 0 R (page.103) 1980 0 R (page.104) 1986 0 R (page.105) 1996 0 R (page.106) 2008 0 R (page.107) 2016 0 R (page.108) 2024 0 R (page.109) 2029 0 R (page.11) 1331 0 R (page.110) 2037 0 R (page.111) 2045 0 R (page.112) 2057 0 R (page.113) 2064 0 R (page.114) 2072 0 R (page.115) 2077 0 R (page.116) 2083 0 R (page.117) 2094 0 R (page.118) 2098 0 R (page.119) 2102 0 R (page.12) 1335 0 R (page.120) 2113 0 R (page.121) 2118 0 R (page.122) 2125 0 R (page.123) 2135 0 R (page.124) 2194 0 R (page.125) 2250 0 R (page.126) 2304 0 R (page.127) 2340 0 R (page.128) 2348 0 R (page.129) 2356 0 R (page.13) 1342 0 R (page.130) 2363 0 R (page.131) 2368 0 R (page.132) 2374 0 R (page.133) 2379 0 R (page.134) 2388 0 R (page.135) 2394 0 R (page.136) 2399 0 R (page.137) 2403 0 R (page.138) 2408 0 R (page.139) 2420 0 R (page.14) 1349 0 R (page.140) 2425 0 R (page.141) 2437 0 R (page.142) 2446 0 R (page.143) 2455 0 R (page.144) 2460 0 R (page.145) 2470 0 R (page.146) 2476 0 R (page.147) 2480 0 R (page.148) 2486 0 R (page.149) 2497 0 R (page.15) 1354 0 R (page.150) 2507 0 R (page.151) 2514 0 R (page.152) 2524 0 R (page.153) 2530 0 R (page.154) 2534 0 R (page.155) 2538 0 R (page.156) 2548 0 R (page.157) 2560 0 R (page.158) 2567 0 R (page.159) 2571 0 R (page.16) 1375 0 R (page.160) 2583 0 R (page.161) 2587 0 R (page.162) 2594 0 R (page.163) 2607 0 R (page.164) 2615 0 R (page.165) 2620 0 R (page.166) 2624 0 R (page.167) 2632 0 R (page.168) 2641 0 R (page.169) 2653 0 R (page.17) 1385 0 R (page.170) 2658 0 R (page.171) 2670 0 R (page.172) 2676 0 R (page.173) 2686 0 R (page.174) 2700 0 R (page.175) 2714 0 R (page.176) 2727 0 R (page.18) 1390 0 R (page.19) 1396 0 R (page.2) 958 0 R (page.20) 1401 0 R (page.21) 1410 0 R (page.22) 1419 0 R (page.23) 1426 0 R (page.24) 1432 0 R (page.25) 1437 0 R (page.26) 1446 0 R (page.27) 1460 0 R (page.28) 1467 0 R (page.29) 1481 0 R (page.3) 1255 0 R (page.30) 1487 0 R (page.31) 1493 0 R (page.32) 1499 0 R (page.33) 1506 0 R (page.34) 1514 0 R (page.35) 1519 0 R (page.36) 1525 0 R (page.37) 1535 0 R (page.38) 1542 0 R (page.39) 1546 0 R (page.4) 1266 0 R (page.40) 1556 0 R (page.41) 1561 0 R (page.42) 1568 0 R (page.43) 1577 0 R (page.44) 1586 0 R (page.45) 1594 0 R (page.46) 1605 0 R (page.47) 1611 0 R (page.48) 1617 0 R (page.49) 1624 0 R (page.5) 1273 0 R (page.50) 1628 0 R (page.51) 1635 0 R (page.52) 1643 0 R (page.53) 1650 0 R (page.54) 1654 0 R (page.55) 1659 0 R (page.56) 1663 0 R (page.57) 1667 0 R (page.58) 1674 0 R (page.59) 1678 0 R (page.6) 1285 0 R (page.60) 1683 0 R (page.61) 1690 0 R (page.62) 1695 0 R (page.63) 1705 0 R (page.64) 1709 0 R (page.65) 1713 0 R (page.66) 1720 0 R (page.67) 1728 0 R (page.68) 1736 0 R (page.69) 1741 0 R (page.7) 1291 0 R (page.70) 1745 0 R (page.71) 1749 0 R (page.72) 1753 0 R (page.73) 1763 0 R (page.74) 1769 0 R (page.75) 1776 0 R (page.76) 1781 0 R (page.77) 1789 0 R (page.78) 1794 0 R (page.79) 1804 0 R (page.8) 1299 0 R (page.80) 1809 0 R (page.81) 1813 0 R (page.82) 1818 0 R (page.83) 1824 0 R (page.84) 1828 0 R (page.85) 1834 0 R (page.86) 1838 0 R (page.87) 1846 0 R (page.88) 1854 0 R (page.89) 1859 0 R (page.9) 1308 0 R (page.90) 1863 0 R (page.91) 1868 0 R (page.92) 1872 0 R (page.93) 1880 0 R (page.94) 1884 0 R (page.95) 1891 0 R (page.96) 1911 0 R (page.97) 1926 0 R (page.98) 1937 0 R (page.99) 1953 0 R (page.i) 968 0 R (page.ii) 1023 0 R (page.iii) 1087 0 R (page.iv) 1150 0 R (page.v) 1212 0 R (pkcs11) 1483 0 R (proposed_standards) 1381 0 R (query_address) 1737 0 R (rfc5011.support) 1474 0 R (rfcs) 1251 0 R (rndc) 1590 0 R (root_delegation_only) 1887 0 R (rrset_ordering) 1304 0 R (sample_configuration) 1293 0 R (section*.10) 2263 0 R (section*.100) 2595 0 R (section*.101) 2596 0 R (section*.102) 2598 0 R (section*.103) 2599 0 R (section*.104) 2600 0 R (section*.105) 2601 0 R (section*.106) 2602 0 R (section*.107) 2609 0 R (section*.108) 2610 0 R (section*.109) 2611 0 R (section*.11) 2273 0 R (section*.110) 2616 0 R (section*.111) 2625 0 R (section*.112) 2626 0 R (section*.113) 2627 0 R (section*.114) 2628 0 R (section*.115) 2634 0 R (section*.116) 2635 0 R (section*.117) 2636 0 R (section*.118) 2637 0 R (section*.119) 2642 0 R (section*.12) 2293 0 R (section*.120) 2643 0 R (section*.121) 2644 0 R (section*.122) 2646 0 R (section*.123) 2647 0 R (section*.124) 2648 0 R (section*.125) 2654 0 R (section*.126) 2659 0 R (section*.127) 2660 0 R (section*.128) 2661 0 R (section*.129) 2663 0 R (section*.13) 2305 0 R (section*.130) 2664 0 R (section*.131) 2665 0 R (section*.132) 2666 0 R (section*.133) 2671 0 R (section*.134) 2672 0 R (section*.135) 2677 0 R (section*.136) 2679 0 R (section*.137) 2680 0 R (section*.138) 2681 0 R (section*.139) 2682 0 R (section*.14) 2331 0 R (section*.140) 2687 0 R (section*.141) 2688 0 R (section*.142) 2690 0 R (section*.143) 2691 0 R (section*.144) 2692 0 R (section*.145) 2693 0 R (section*.146) 2694 0 R (section*.147) 2696 0 R (section*.148) 2701 0 R (section*.149) 2702 0 R (section*.15) 2382 0 R (section*.150) 2703 0 R (section*.151) 2704 0 R (section*.152) 2705 0 R (section*.153) 2707 0 R (section*.154) 2708 0 R (section*.155) 2709 0 R (section*.156) 2715 0 R (section*.157) 2716 0 R (section*.158) 2717 0 R (section*.159) 2719 0 R (section*.16) 2383 0 R (section*.160) 2720 0 R (section*.161) 2721 0 R (section*.162) 2722 0 R (section*.163) 2723 0 R (section*.164) 2728 0 R (section*.17) 2384 0 R (section*.18) 2389 0 R (section*.19) 2390 0 R (section*.2) 2130 0 R (section*.20) 2395 0 R (section*.21) 2404 0 R (section*.22) 2409 0 R (section*.23) 2410 0 R (section*.24) 2411 0 R (section*.25) 2412 0 R (section*.26) 2414 0 R (section*.27) 2415 0 R (section*.28) 2421 0 R (section*.29) 2426 0 R (section*.3) 2136 0 R (section*.30) 2427 0 R (section*.31) 2428 0 R (section*.32) 2430 0 R (section*.33) 2431 0 R (section*.34) 2432 0 R (section*.35) 2433 0 R (section*.36) 2438 0 R (section*.37) 2439 0 R (section*.38) 2440 0 R (section*.39) 2441 0 R (section*.4) 2144 0 R (section*.40) 2442 0 R (section*.41) 2448 0 R (section*.42) 2449 0 R (section*.43) 2450 0 R (section*.44) 2451 0 R (section*.45) 2456 0 R (section*.46) 2461 0 R (section*.47) 2462 0 R (section*.48) 2463 0 R (section*.49) 2464 0 R (section*.5) 2169 0 R (section*.50) 2465 0 R (section*.51) 2471 0 R (section*.52) 2472 0 R (section*.53) 2481 0 R (section*.54) 2482 0 R (section*.55) 2487 0 R (section*.56) 2488 0 R (section*.57) 2489 0 R (section*.58) 2491 0 R (section*.59) 2492 0 R (section*.6) 2181 0 R (section*.60) 2493 0 R (section*.61) 2498 0 R (section*.62) 2499 0 R (section*.63) 2500 0 R (section*.64) 2501 0 R (section*.65) 2502 0 R (section*.66) 2503 0 R (section*.67) 2508 0 R (section*.68) 2509 0 R (section*.69) 2515 0 R (section*.7) 2195 0 R (section*.70) 2516 0 R (section*.71) 2517 0 R (section*.72) 2519 0 R (section*.73) 2520 0 R (section*.74) 2525 0 R (section*.75) 2526 0 R (section*.76) 2539 0 R (section*.77) 2540 0 R (section*.78) 2541 0 R (section*.79) 2543 0 R (section*.8) 2233 0 R (section*.80) 2544 0 R (section*.81) 2549 0 R (section*.82) 2550 0 R (section*.83) 2551 0 R (section*.84) 2552 0 R (section*.85) 2553 0 R (section*.86) 2555 0 R (section*.87) 2561 0 R (section*.88) 2562 0 R (section*.89) 2563 0 R (section*.9) 2251 0 R (section*.90) 2572 0 R (section*.91) 2573 0 R (section*.92) 2574 0 R (section*.93) 2576 0 R (section*.94) 2577 0 R (section*.95) 2578 0 R (section*.96) 2579 0 R (section*.97) 2588 0 R (section*.98) 2589 0 R (section*.99) 2590 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.1.4) 22 0 R (section.2.1) 70 0 R (section.2.2) 74 0 R (section.2.3) 78 0 R (section.2.4) 82 0 R (section.2.5) 86 0 R (section.3.1) 94 0 R (section.3.2) 106 0 R (section.3.3) 110 0 R (section.4.1) 134 0 R (section.4.10) 274 0 R (section.4.11) 286 0 R (section.4.12) 338 0 R (section.4.2) 138 0 R (section.4.3) 146 0 R (section.4.4) 150 0 R (section.4.5) 158 0 R (section.4.6) 194 0 R (section.4.7) 198 0 R (section.4.8) 202 0 R (section.4.9) 218 0 R (section.5.1) 354 0 R (section.5.2) 358 0 R (section.6.1) 366 0 R (section.6.2) 394 0 R (section.6.3) 618 0 R (section.6.4) 674 0 R (section.7.1) 710 0 R (section.7.2) 714 0 R (section.7.3) 726 0 R (section.8.1) 734 0 R (section.8.2) 742 0 R (section.8.3) 746 0 R (section.A.1) 754 0 R (section.A.2) 762 0 R (section.A.3) 770 0 R (section.A.4) 786 0 R (section.B.1) 846 0 R (section.B.10) 882 0 R (section.B.11) 886 0 R (section.B.12) 890 0 R (section.B.13) 894 0 R (section.B.14) 898 0 R (section.B.15) 902 0 R (section.B.16) 906 0 R (section.B.17) 910 0 R (section.B.18) 914 0 R (section.B.19) 918 0 R (section.B.2) 850 0 R (section.B.20) 922 0 R (section.B.21) 926 0 R (section.B.3) 854 0 R (section.B.4) 858 0 R (section.B.5) 862 0 R (section.B.6) 866 0 R (section.B.7) 870 0 R (section.B.8) 874 0 R (section.B.9) 878 0 R (server_resource_limits) 1758 0 R (server_statement_definition_and_usage) 1701 0 R (server_statement_grammar) 1829 0 R (statistics) 2030 0 R (statistics_counters) 2038 0 R (statschannels) 1841 0 R (statsfile) 1670 0 R (subsection.1.4.1) 26 0 R (subsection.1.4.2) 30 0 R (subsection.1.4.3) 34 0 R (subsection.1.4.4) 38 0 R (subsection.1.4.5) 54 0 R (subsection.1.4.6) 62 0 R (subsection.3.1.1) 98 0 R (subsection.3.1.2) 102 0 R (subsection.3.3.1) 114 0 R (subsection.3.3.2) 126 0 R (subsection.4.10.1) 278 0 R (subsection.4.10.2) 282 0 R (subsection.4.11.1) 290 0 R (subsection.4.11.2) 306 0 R (subsection.4.11.3) 322 0 R (subsection.4.11.4) 326 0 R (subsection.4.11.5) 330 0 R (subsection.4.11.6) 334 0 R (subsection.4.12.1) 342 0 R (subsection.4.12.2) 346 0 R (subsection.4.2.1) 142 0 R (subsection.4.4.1) 154 0 R (subsection.4.5.1) 162 0 R (subsection.4.5.2) 174 0 R (subsection.4.5.3) 178 0 R (subsection.4.5.4) 182 0 R (subsection.4.5.5) 186 0 R (subsection.4.5.6) 190 0 R (subsection.4.8.1) 206 0 R (subsection.4.8.2) 210 0 R (subsection.4.8.3) 214 0 R (subsection.4.9.1) 222 0 R (subsection.4.9.10) 258 0 R (subsection.4.9.11) 262 0 R (subsection.4.9.12) 266 0 R (subsection.4.9.13) 270 0 R (subsection.4.9.2) 226 0 R (subsection.4.9.3) 230 0 R (subsection.4.9.4) 234 0 R (subsection.4.9.5) 238 0 R (subsection.4.9.6) 242 0 R (subsection.4.9.7) 246 0 R (subsection.4.9.8) 250 0 R (subsection.4.9.9) 254 0 R (subsection.6.1.1) 370 0 R (subsection.6.1.2) 382 0 R (subsection.6.2.1) 398 0 R (subsection.6.2.10) 434 0 R (subsection.6.2.11) 450 0 R (subsection.6.2.12) 454 0 R (subsection.6.2.13) 458 0 R (subsection.6.2.14) 462 0 R (subsection.6.2.15) 466 0 R (subsection.6.2.16) 470 0 R (subsection.6.2.17) 554 0 R (subsection.6.2.18) 558 0 R (subsection.6.2.19) 562 0 R (subsection.6.2.2) 402 0 R (subsection.6.2.20) 566 0 R (subsection.6.2.21) 570 0 R (subsection.6.2.22) 574 0 R (subsection.6.2.23) 578 0 R (subsection.6.2.24) 582 0 R (subsection.6.2.25) 586 0 R (subsection.6.2.26) 590 0 R (subsection.6.2.27) 594 0 R (subsection.6.2.28) 598 0 R (subsection.6.2.3) 406 0 R (subsection.6.2.4) 410 0 R (subsection.6.2.5) 414 0 R (subsection.6.2.6) 418 0 R (subsection.6.2.7) 422 0 R (subsection.6.2.8) 426 0 R (subsection.6.2.9) 430 0 R (subsection.6.3.1) 622 0 R (subsection.6.3.2) 634 0 R (subsection.6.3.3) 638 0 R (subsection.6.3.4) 642 0 R (subsection.6.3.5) 646 0 R (subsection.6.3.6) 666 0 R (subsection.6.3.7) 670 0 R (subsection.6.4.1) 682 0 R (subsection.7.2.1) 718 0 R (subsection.7.2.2) 722 0 R (subsection.8.1.1) 738 0 R (subsection.A.1.1) 758 0 R (subsection.A.2.1) 766 0 R (subsection.A.3.1) 774 0 R (subsection.A.3.2) 778 0 R (subsection.A.3.3) 782 0 R (subsection.A.4.1) 790 0 R (subsection.A.4.2) 794 0 R (subsection.A.4.3) 798 0 R (subsection.A.4.4) 802 0 R (subsection.A.4.5) 806 0 R (subsection.A.4.6) 810 0 R (subsection.A.4.7) 838 0 R (subsubsection.1.4.4.1) 42 0 R (subsubsection.1.4.4.2) 46 0 R (subsubsection.1.4.4.3) 50 0 R (subsubsection.1.4.5.1) 58 0 R (subsubsection.3.3.1.1) 118 0 R (subsubsection.3.3.1.2) 122 0 R (subsubsection.4.11.1.1) 294 0 R (subsubsection.4.11.1.2) 298 0 R (subsubsection.4.11.1.3) 302 0 R (subsubsection.4.11.2.1) 310 0 R (subsubsection.4.11.2.2) 314 0 R (subsubsection.4.11.2.3) 318 0 R (subsubsection.4.5.1.1) 166 0 R (subsubsection.4.5.1.2) 170 0 R (subsubsection.6.1.1.1) 374 0 R (subsubsection.6.1.1.2) 378 0 R (subsubsection.6.1.2.1) 386 0 R (subsubsection.6.1.2.2) 390 0 R (subsubsection.6.2.10.1) 438 0 R (subsubsection.6.2.10.2) 442 0 R (subsubsection.6.2.10.3) 446 0 R (subsubsection.6.2.16.1) 474 0 R (subsubsection.6.2.16.10) 510 0 R (subsubsection.6.2.16.11) 514 0 R (subsubsection.6.2.16.12) 518 0 R (subsubsection.6.2.16.13) 522 0 R (subsubsection.6.2.16.14) 526 0 R (subsubsection.6.2.16.15) 530 0 R (subsubsection.6.2.16.16) 534 0 R (subsubsection.6.2.16.17) 538 0 R (subsubsection.6.2.16.18) 542 0 R (subsubsection.6.2.16.19) 546 0 R (subsubsection.6.2.16.2) 478 0 R (subsubsection.6.2.16.20) 550 0 R (subsubsection.6.2.16.3) 482 0 R (subsubsection.6.2.16.4) 486 0 R (subsubsection.6.2.16.5) 490 0 R (subsubsection.6.2.16.6) 494 0 R (subsubsection.6.2.16.7) 498 0 R (subsubsection.6.2.16.8) 502 0 R (subsubsection.6.2.16.9) 506 0 R (subsubsection.6.2.28.1) 602 0 R (subsubsection.6.2.28.2) 606 0 R (subsubsection.6.2.28.3) 610 0 R (subsubsection.6.2.28.4) 614 0 R (subsubsection.6.3.1.1) 626 0 R (subsubsection.6.3.1.2) 630 0 R (subsubsection.6.3.5.1) 650 0 R (subsubsection.6.3.5.2) 654 0 R (subsubsection.6.3.5.3) 658 0 R (subsubsection.6.3.5.4) 662 0 R (subsubsection.6.4.0.1) 678 0 R (subsubsection.6.4.1.1) 686 0 R (subsubsection.6.4.1.2) 690 0 R (subsubsection.6.4.1.3) 694 0 R (subsubsection.6.4.1.4) 698 0 R (subsubsection.6.4.1.5) 702 0 R (subsubsection.A.4.6.1) 814 0 R (subsubsection.A.4.6.2) 818 0 R (subsubsection.A.4.6.3) 822 0 R (subsubsection.A.4.6.4) 826 0 R (subsubsection.A.4.6.5) 830 0 R (subsubsection.A.4.6.6) 834 0 R (table.1.1) 1235 0 R (table.1.2) 1243 0 R (table.3.1) 1302 0 R (table.3.2) 1345 0 R (table.6.1) 1550 0 R (table.6.10) 1969 0 R (table.6.11) 1975 0 R (table.6.12) 1982 0 R (table.6.13) 1989 0 R (table.6.14) 1991 0 R (table.6.15) 1998 0 R (table.6.16) 2001 0 R (table.6.17) 2004 0 R (table.6.18) 2020 0 R (table.6.19) 2032 0 R (table.6.2) 1572 0 R (table.6.20) 2041 0 R (table.6.21) 2049 0 R (table.6.22) 2052 0 R (table.6.23) 2060 0 R (table.6.3) 1581 0 R (table.6.4) 1619 0 R (table.6.5) 1631 0 R (table.6.6) 1685 0 R (table.6.7) 1784 0 R (table.6.8) 1876 0 R (table.6.9) 1955 0 R (the_category_phrase) 1613 0 R (the_sortlist_statement) 1771 0 R (topology) 1770 0 R (trusted-keys) 1847 0 R (tsig) 1397 0 R (tuning) 1785 0 R (types_of_resource_records_and_when_to_use_them) 1250 0 R (view_statement_grammar) 1800 0 R (zone_statement_grammar) 1716 0 R (zone_transfers) 1371 0 R (zonefile_format) 1799 0 R] +/Names [(Access_Control_Lists) 2079 0 R (Bv9ARM.ch01) 1230 0 R (Bv9ARM.ch02) 1274 0 R (Bv9ARM.ch03) 1292 0 R (Bv9ARM.ch04) 1355 0 R (Bv9ARM.ch05) 1536 0 R (Bv9ARM.ch06) 1547 0 R (Bv9ARM.ch07) 2078 0 R (Bv9ARM.ch08) 2103 0 R (Bv9ARM.ch09) 2119 0 R (Bv9ARM.ch10) 2380 0 R (Configuration_File_Grammar) 1570 0 R (DNSSEC) 1421 0 R (Doc-Start) 935 0 R (Setting_TTLs) 1999 0 R (acache) 1281 0 R (access_control) 1721 0 R (acl) 1579 0 R (address_match_lists) 1552 0 R (admin_tools) 1314 0 R (appendix.A) 750 0 R (appendix.B) 842 0 R (bibliography) 2127 0 R (bind9.library) 2335 0 R (boolean_options) 1370 0 R (builtin) 1802 0 R (chapter*.1) 969 0 R (chapter.1) 6 0 R (chapter.2) 66 0 R (chapter.3) 90 0 R (chapter.4) 130 0 R (chapter.5) 350 0 R (chapter.6) 362 0 R (chapter.7) 706 0 R (chapter.8) 730 0 R (cite.RFC1033) 2254 0 R (cite.RFC1034) 2139 0 R (cite.RFC1035) 2141 0 R (cite.RFC1101) 2236 0 R (cite.RFC1123) 2238 0 R (cite.RFC1183) 2198 0 R (cite.RFC1464) 2276 0 R (cite.RFC1535) 2184 0 R (cite.RFC1536) 2186 0 R (cite.RFC1537) 2256 0 R (cite.RFC1591) 2240 0 R (cite.RFC1706) 2200 0 R (cite.RFC1712) 2296 0 R (cite.RFC1713) 2278 0 R (cite.RFC1794) 2280 0 R (cite.RFC1876) 2202 0 R (cite.RFC1912) 2258 0 R (cite.RFC1982) 2188 0 R (cite.RFC1995) 2146 0 R (cite.RFC1996) 2148 0 R (cite.RFC2010) 2260 0 R (cite.RFC2052) 2204 0 R (cite.RFC2065) 2308 0 R (cite.RFC2136) 2150 0 R (cite.RFC2137) 2310 0 R (cite.RFC2163) 2206 0 R (cite.RFC2168) 2208 0 R (cite.RFC2181) 2152 0 R (cite.RFC2219) 2262 0 R (cite.RFC2230) 2210 0 R (cite.RFC2240) 2282 0 R (cite.RFC2308) 2154 0 R (cite.RFC2317) 2242 0 R (cite.RFC2345) 2284 0 R (cite.RFC2352) 2286 0 R (cite.RFC2535) 2312 0 R (cite.RFC2536) 2212 0 R (cite.RFC2537) 2214 0 R (cite.RFC2538) 2216 0 R (cite.RFC2539) 2218 0 R (cite.RFC2540) 2220 0 R (cite.RFC2671) 2156 0 R (cite.RFC2672) 2158 0 R (cite.RFC2673) 2298 0 R (cite.RFC2782) 2222 0 R (cite.RFC2825) 2266 0 R (cite.RFC2826) 2244 0 R (cite.RFC2845) 2160 0 R (cite.RFC2874) 2300 0 R (cite.RFC2915) 2224 0 R (cite.RFC2929) 2246 0 R (cite.RFC2930) 2162 0 R (cite.RFC2931) 2164 0 R (cite.RFC3007) 2166 0 R (cite.RFC3008) 2314 0 R (cite.RFC3071) 2288 0 R (cite.RFC3090) 2316 0 R (cite.RFC3110) 2226 0 R (cite.RFC3123) 2228 0 R (cite.RFC3225) 2172 0 R (cite.RFC3258) 2290 0 R (cite.RFC3445) 2318 0 R (cite.RFC3490) 2268 0 R (cite.RFC3491) 2270 0 R (cite.RFC3492) 2272 0 R (cite.RFC3596) 2230 0 R (cite.RFC3597) 2232 0 R (cite.RFC3645) 2168 0 R (cite.RFC3655) 2320 0 R (cite.RFC3658) 2322 0 R (cite.RFC3755) 2324 0 R (cite.RFC3757) 2326 0 R (cite.RFC3833) 2174 0 R (cite.RFC3845) 2328 0 R (cite.RFC3901) 2292 0 R (cite.RFC4033) 2176 0 R (cite.RFC4034) 2178 0 R (cite.RFC4035) 2180 0 R (cite.RFC4074) 2190 0 R (cite.RFC974) 2143 0 R (cite.id2512276) 2333 0 R (clients-per-query) 2053 0 R (configuration_file_elements) 1548 0 R (controls_statement_definition_and_usage) 1338 0 R (diagnostic_tools) 1262 0 R (dnssec.dynamic.zones) 1441 0 R (dynamic_update) 1365 0 R (dynamic_update_policies) 1327 0 R (dynamic_update_security) 1732 0 R (empty) 1804 0 R (historical_dns_information) 2121 0 R (id2466567) 1231 0 R (id2466590) 1232 0 R (id2467233) 1405 0 R (id2467243) 1406 0 R (id2467280) 1411 0 R (id2467337) 1412 0 R (id2467481) 1233 0 R (id2467491) 1234 0 R (id2467731) 1244 0 R (id2467752) 1245 0 R (id2467786) 1246 0 R (id2467870) 1249 0 R (id2467963) 1242 0 R (id2470268) 1256 0 R (id2470292) 1259 0 R (id2470390) 1260 0 R (id2470411) 1261 0 R (id2470441) 1267 0 R (id2470476) 1268 0 R (id2470571) 1269 0 R (id2470605) 1275 0 R (id2470632) 1276 0 R (id2470713) 1277 0 R (id2470739) 1280 0 R (id2470749) 1286 0 R (id2470781) 1294 0 R (id2470797) 1295 0 R (id2470820) 1300 0 R (id2470837) 1301 0 R (id2471242) 1309 0 R (id2471248) 1310 0 R (id2473363) 1343 0 R (id2473374) 1344 0 R (id2473876) 1380 0 R (id2473894) 1386 0 R (id2474464) 1402 0 R (id2474481) 1403 0 R (id2474519) 1404 0 R (id2474896) 1414 0 R (id2474909) 1415 0 R (id2475027) 1420 0 R (id2475163) 1422 0 R (id2475310) 1427 0 R (id2475392) 1428 0 R (id2475612) 1442 0 R (id2475786) 1447 0 R (id2475822) 1448 0 R (id2475905) 1454 0 R (id2475942) 1461 0 R (id2475955) 1462 0 R (id2476056) 1463 0 R (id2476083) 1468 0 R (id2476092) 1469 0 R (id2476170) 1470 0 R (id2476183) 1471 0 R (id2476220) 1472 0 R (id2476230) 1473 0 R (id2476336) 1475 0 R (id2476358) 1482 0 R (id2476528) 1488 0 R (id2476692) 1494 0 R (id2476761) 1495 0 R (id2476878) 1500 0 R (id2477097) 1501 0 R (id2477106) 1502 0 R (id2477138) 1507 0 R (id2477174) 1508 0 R (id2477222) 1509 0 R (id2477253) 1510 0 R (id2477588) 1520 0 R (id2477634) 1521 0 R (id2477825) 1526 0 R (id2477955) 1528 0 R (id2477976) 1529 0 R (id2478009) 1537 0 R (id2478225) 1549 0 R (id2479049) 1557 0 R (id2479077) 1562 0 R (id2479351) 1563 0 R (id2479366) 1564 0 R (id2479396) 1569 0 R (id2479539) 1571 0 R (id2480073) 1578 0 R (id2480116) 1580 0 R (id2480263) 1582 0 R (id2480622) 1589 0 R (id2480640) 1595 0 R (id2480663) 1596 0 R (id2480686) 1597 0 R (id2480845) 1601 0 R (id2480971) 1606 0 R (id2481024) 1607 0 R (id2481649) 1618 0 R (id2482477) 1629 0 R (id2482539) 1630 0 R (id2482997) 1636 0 R (id2483070) 1637 0 R (id2483134) 1644 0 R (id2483178) 1645 0 R (id2483193) 1646 0 R (id2486510) 1684 0 R (id2488830) 1714 0 R (id2488957) 1720 0 R (id2489509) 1731 0 R (id2490718) 1754 0 R (id2490778) 1756 0 R (id2491132) 1765 0 R (id2491703) 1783 0 R (id2493307) 1814 0 R (id2493498) 1824 0 R (id2494690) 1846 0 R (id2494829) 1848 0 R (id2494876) 1854 0 R (id2495234) 1859 0 R (id2496921) 1877 0 R (id2496929) 1878 0 R (id2496934) 1879 0 R (id2497474) 1886 0 R (id2497507) 1892 0 R (id2499730) 1954 0 R (id2500393) 1964 0 R (id2500480) 1965 0 R (id2500500) 1968 0 R (id2500668) 1974 0 R (id2501838) 1981 0 R (id2501966) 1987 0 R (id2502056) 1988 0 R (id2502419) 1990 0 R (id2502555) 1992 0 R (id2502573) 1997 0 R (id2503114) 2000 0 R (id2503239) 2002 0 R (id2503254) 2003 0 R (id2503366) 2009 0 R (id2503388) 2010 0 R (id2503404) 2011 0 R (id2503465) 2012 0 R (id2503534) 2017 0 R (id2503571) 2018 0 R (id2503646) 2019 0 R (id2504226) 2031 0 R (id2504661) 2039 0 R (id2504666) 2040 0 R (id2506134) 2047 0 R (id2506140) 2048 0 R (id2506517) 2050 0 R (id2506522) 2051 0 R (id2507607) 2058 0 R (id2507639) 2059 0 R (id2508049) 2068 0 R (id2508222) 2088 0 R (id2508372) 2089 0 R (id2508432) 2090 0 R (id2508512) 2104 0 R (id2508517) 2105 0 R (id2508529) 2106 0 R (id2508546) 2107 0 R (id2508744) 2120 0 R (id2509052) 2126 0 R (id2509172) 2131 0 R (id2509174) 2137 0 R (id2509182) 2142 0 R (id2509206) 2138 0 R (id2509298) 2140 0 R (id2509334) 2151 0 R (id2509361) 2153 0 R (id2509386) 2145 0 R (id2509411) 2147 0 R (id2509434) 2149 0 R (id2509490) 2155 0 R (id2509516) 2157 0 R (id2509543) 2159 0 R (id2509605) 2161 0 R (id2509635) 2163 0 R (id2509665) 2165 0 R (id2509691) 2167 0 R (id2509766) 2170 0 R (id2509773) 2171 0 R (id2509800) 2173 0 R (id2509836) 2175 0 R (id2509901) 2177 0 R (id2510035) 2179 0 R (id2510100) 2182 0 R (id2510108) 2183 0 R (id2510134) 2185 0 R (id2510202) 2187 0 R (id2510237) 2189 0 R (id2510278) 2196 0 R (id2510283) 2197 0 R (id2510341) 2199 0 R (id2510378) 2207 0 R (id2510413) 2201 0 R (id2510468) 2203 0 R (id2510506) 2205 0 R (id2510532) 2209 0 R (id2510557) 2211 0 R (id2510584) 2213 0 R (id2510611) 2215 0 R (id2510650) 2217 0 R (id2510680) 2219 0 R (id2510710) 2221 0 R (id2510753) 2223 0 R (id2510786) 2225 0 R (id2510812) 2227 0 R (id2510836) 2229 0 R (id2510893) 2231 0 R (id2510918) 2234 0 R (id2510925) 2235 0 R (id2510951) 2237 0 R (id2510973) 2239 0 R (id2510997) 2241 0 R (id2511043) 2243 0 R (id2511066) 2245 0 R (id2511116) 2252 0 R (id2511124) 2253 0 R (id2511147) 2255 0 R (id2511174) 2257 0 R (id2511201) 2259 0 R (id2511237) 2261 0 R (id2511277) 2264 0 R (id2511283) 2265 0 R (id2511315) 2267 0 R (id2511361) 2269 0 R (id2511396) 2271 0 R (id2511422) 2274 0 R (id2511441) 2275 0 R (id2511531) 2277 0 R (id2511557) 2279 0 R (id2511582) 2281 0 R (id2511606) 2283 0 R (id2511652) 2285 0 R (id2511675) 2287 0 R (id2511702) 2289 0 R (id2511728) 2291 0 R (id2511765) 2294 0 R (id2511771) 2295 0 R (id2511829) 2297 0 R (id2511856) 2299 0 R (id2511892) 2306 0 R (id2511904) 2307 0 R (id2511943) 2309 0 R (id2511970) 2311 0 R (id2512000) 2313 0 R (id2512025) 2315 0 R (id2512052) 2317 0 R (id2512088) 2319 0 R (id2512124) 2321 0 R (id2512151) 2323 0 R (id2512178) 2325 0 R (id2512222) 2327 0 R (id2512264) 2330 0 R (id2512274) 2332 0 R (id2512276) 2334 0 R (id2512432) 2341 0 R (id2512441) 2342 0 R (id2512466) 2343 0 R (id2512497) 2344 0 R (id2512642) 2349 0 R (id2512668) 2351 0 R (id2512677) 2352 0 R (id2512768) 2357 0 R (id2512821) 2358 0 R (id2512885) 2359 0 R (id2512968) 2364 0 R (id2513099) 2369 0 R (id2513300) 2370 0 R (incremental_zone_transfers) 1377 0 R (internet_drafts) 2329 0 R (ipv6addresses) 1531 0 R (journal) 1376 0 R (lwresd) 1538 0 R (man.arpaname) 2689 0 R (man.ddns-confgen) 2678 0 R (man.dig) 2381 0 R (man.dnssec-dsfromkey) 2429 0 R (man.dnssec-keyfromlabel) 2447 0 R (man.dnssec-keygen) 1455 0 R (man.dnssec-revoke) 2490 0 R (man.dnssec-settime) 1456 0 R (man.dnssec-signzone) 2518 0 R (man.genrandom) 2695 0 R (man.host) 2413 0 R (man.isc-hmac-fixup) 2706 0 R (man.named) 2575 0 R (man.named-checkconf) 2542 0 R (man.named-checkzone) 2554 0 R (man.named-journalprint) 2597 0 R (man.nsec3hash) 2718 0 R (man.nsupdate) 2608 0 R (man.rndc) 2633 0 R (man.rndc-confgen) 2662 0 R (man.rndc.conf) 2645 0 R (managed-keys) 1477 0 R (notify) 1356 0 R (options) 1326 0 R (page.1) 934 0 R (page.10) 1318 0 R (page.100) 1959 0 R (page.101) 1963 0 R (page.102) 1973 0 R (page.103) 1980 0 R (page.104) 1986 0 R (page.105) 1996 0 R (page.106) 2008 0 R (page.107) 2016 0 R (page.108) 2024 0 R (page.109) 2029 0 R (page.11) 1331 0 R (page.110) 2037 0 R (page.111) 2045 0 R (page.112) 2057 0 R (page.113) 2064 0 R (page.114) 2072 0 R (page.115) 2077 0 R (page.116) 2083 0 R (page.117) 2094 0 R (page.118) 2098 0 R (page.119) 2102 0 R (page.12) 1335 0 R (page.120) 2113 0 R (page.121) 2118 0 R (page.122) 2125 0 R (page.123) 2135 0 R (page.124) 2194 0 R (page.125) 2250 0 R (page.126) 2304 0 R (page.127) 2340 0 R (page.128) 2348 0 R (page.129) 2356 0 R (page.13) 1342 0 R (page.130) 2363 0 R (page.131) 2368 0 R (page.132) 2374 0 R (page.133) 2379 0 R (page.134) 2388 0 R (page.135) 2394 0 R (page.136) 2399 0 R (page.137) 2403 0 R (page.138) 2408 0 R (page.139) 2420 0 R (page.14) 1349 0 R (page.140) 2425 0 R (page.141) 2437 0 R (page.142) 2446 0 R (page.143) 2455 0 R (page.144) 2460 0 R (page.145) 2470 0 R (page.146) 2476 0 R (page.147) 2480 0 R (page.148) 2486 0 R (page.149) 2497 0 R (page.15) 1354 0 R (page.150) 2507 0 R (page.151) 2514 0 R (page.152) 2524 0 R (page.153) 2530 0 R (page.154) 2534 0 R (page.155) 2538 0 R (page.156) 2548 0 R (page.157) 2560 0 R (page.158) 2567 0 R (page.159) 2571 0 R (page.16) 1375 0 R (page.160) 2583 0 R (page.161) 2587 0 R (page.162) 2594 0 R (page.163) 2607 0 R (page.164) 2615 0 R (page.165) 2620 0 R (page.166) 2624 0 R (page.167) 2632 0 R (page.168) 2641 0 R (page.169) 2653 0 R (page.17) 1385 0 R (page.170) 2658 0 R (page.171) 2670 0 R (page.172) 2676 0 R (page.173) 2686 0 R (page.174) 2700 0 R (page.175) 2714 0 R (page.176) 2727 0 R (page.18) 1390 0 R (page.19) 1396 0 R (page.2) 958 0 R (page.20) 1401 0 R (page.21) 1410 0 R (page.22) 1419 0 R (page.23) 1426 0 R (page.24) 1432 0 R (page.25) 1437 0 R (page.26) 1446 0 R (page.27) 1460 0 R (page.28) 1467 0 R (page.29) 1481 0 R (page.3) 1255 0 R (page.30) 1487 0 R (page.31) 1493 0 R (page.32) 1499 0 R (page.33) 1506 0 R (page.34) 1514 0 R (page.35) 1519 0 R (page.36) 1525 0 R (page.37) 1535 0 R (page.38) 1542 0 R (page.39) 1546 0 R (page.4) 1266 0 R (page.40) 1556 0 R (page.41) 1561 0 R (page.42) 1568 0 R (page.43) 1577 0 R (page.44) 1586 0 R (page.45) 1594 0 R (page.46) 1605 0 R (page.47) 1611 0 R (page.48) 1617 0 R (page.49) 1624 0 R (page.5) 1273 0 R (page.50) 1628 0 R (page.51) 1635 0 R (page.52) 1643 0 R (page.53) 1650 0 R (page.54) 1654 0 R (page.55) 1659 0 R (page.56) 1663 0 R (page.57) 1667 0 R (page.58) 1673 0 R (page.59) 1678 0 R (page.6) 1285 0 R (page.60) 1683 0 R (page.61) 1690 0 R (page.62) 1695 0 R (page.63) 1705 0 R (page.64) 1709 0 R (page.65) 1713 0 R (page.66) 1718 0 R (page.67) 1728 0 R (page.68) 1736 0 R (page.69) 1741 0 R (page.7) 1291 0 R (page.70) 1745 0 R (page.71) 1749 0 R (page.72) 1753 0 R (page.73) 1762 0 R (page.74) 1769 0 R (page.75) 1774 0 R (page.76) 1781 0 R (page.77) 1788 0 R (page.78) 1794 0 R (page.79) 1801 0 R (page.8) 1299 0 R (page.80) 1809 0 R (page.81) 1813 0 R (page.82) 1818 0 R (page.83) 1823 0 R (page.84) 1828 0 R (page.85) 1833 0 R (page.86) 1838 0 R (page.87) 1844 0 R (page.88) 1853 0 R (page.89) 1858 0 R (page.9) 1308 0 R (page.90) 1863 0 R (page.91) 1868 0 R (page.92) 1872 0 R (page.93) 1876 0 R (page.94) 1884 0 R (page.95) 1891 0 R (page.96) 1911 0 R (page.97) 1926 0 R (page.98) 1937 0 R (page.99) 1953 0 R (page.i) 968 0 R (page.ii) 1023 0 R (page.iii) 1087 0 R (page.iv) 1150 0 R (page.v) 1212 0 R (pkcs11) 1483 0 R (proposed_standards) 1381 0 R (query_address) 1737 0 R (rfc5011.support) 1474 0 R (rfcs) 1251 0 R (rndc) 1590 0 R (root_delegation_only) 1887 0 R (rrset_ordering) 1304 0 R (sample_configuration) 1293 0 R (section*.10) 2263 0 R (section*.100) 2595 0 R (section*.101) 2596 0 R (section*.102) 2598 0 R (section*.103) 2599 0 R (section*.104) 2600 0 R (section*.105) 2601 0 R (section*.106) 2602 0 R (section*.107) 2609 0 R (section*.108) 2610 0 R (section*.109) 2611 0 R (section*.11) 2273 0 R (section*.110) 2616 0 R (section*.111) 2625 0 R (section*.112) 2626 0 R (section*.113) 2627 0 R (section*.114) 2628 0 R (section*.115) 2634 0 R (section*.116) 2635 0 R (section*.117) 2636 0 R (section*.118) 2637 0 R (section*.119) 2642 0 R (section*.12) 2293 0 R (section*.120) 2643 0 R (section*.121) 2644 0 R (section*.122) 2646 0 R (section*.123) 2647 0 R (section*.124) 2648 0 R (section*.125) 2654 0 R (section*.126) 2659 0 R (section*.127) 2660 0 R (section*.128) 2661 0 R (section*.129) 2663 0 R (section*.13) 2305 0 R (section*.130) 2664 0 R (section*.131) 2665 0 R (section*.132) 2666 0 R (section*.133) 2671 0 R (section*.134) 2672 0 R (section*.135) 2677 0 R (section*.136) 2679 0 R (section*.137) 2680 0 R (section*.138) 2681 0 R (section*.139) 2682 0 R (section*.14) 2331 0 R (section*.140) 2687 0 R (section*.141) 2688 0 R (section*.142) 2690 0 R (section*.143) 2691 0 R (section*.144) 2692 0 R (section*.145) 2693 0 R (section*.146) 2694 0 R (section*.147) 2696 0 R (section*.148) 2701 0 R (section*.149) 2702 0 R (section*.15) 2382 0 R (section*.150) 2703 0 R (section*.151) 2704 0 R (section*.152) 2705 0 R (section*.153) 2707 0 R (section*.154) 2708 0 R (section*.155) 2709 0 R (section*.156) 2715 0 R (section*.157) 2716 0 R (section*.158) 2717 0 R (section*.159) 2719 0 R (section*.16) 2383 0 R (section*.160) 2720 0 R (section*.161) 2721 0 R (section*.162) 2722 0 R (section*.163) 2723 0 R (section*.164) 2728 0 R (section*.17) 2384 0 R (section*.18) 2389 0 R (section*.19) 2390 0 R (section*.2) 2130 0 R (section*.20) 2395 0 R (section*.21) 2404 0 R (section*.22) 2409 0 R (section*.23) 2410 0 R (section*.24) 2411 0 R (section*.25) 2412 0 R (section*.26) 2414 0 R (section*.27) 2415 0 R (section*.28) 2421 0 R (section*.29) 2426 0 R (section*.3) 2136 0 R (section*.30) 2427 0 R (section*.31) 2428 0 R (section*.32) 2430 0 R (section*.33) 2431 0 R (section*.34) 2432 0 R (section*.35) 2433 0 R (section*.36) 2438 0 R (section*.37) 2439 0 R (section*.38) 2440 0 R (section*.39) 2441 0 R (section*.4) 2144 0 R (section*.40) 2442 0 R (section*.41) 2448 0 R (section*.42) 2449 0 R (section*.43) 2450 0 R (section*.44) 2451 0 R (section*.45) 2456 0 R (section*.46) 2461 0 R (section*.47) 2462 0 R (section*.48) 2463 0 R (section*.49) 2464 0 R (section*.5) 2169 0 R (section*.50) 2465 0 R (section*.51) 2471 0 R (section*.52) 2472 0 R (section*.53) 2481 0 R (section*.54) 2482 0 R (section*.55) 2487 0 R (section*.56) 2488 0 R (section*.57) 2489 0 R (section*.58) 2491 0 R (section*.59) 2492 0 R (section*.6) 2181 0 R (section*.60) 2493 0 R (section*.61) 2498 0 R (section*.62) 2499 0 R (section*.63) 2500 0 R (section*.64) 2501 0 R (section*.65) 2502 0 R (section*.66) 2503 0 R (section*.67) 2508 0 R (section*.68) 2509 0 R (section*.69) 2515 0 R (section*.7) 2195 0 R (section*.70) 2516 0 R (section*.71) 2517 0 R (section*.72) 2519 0 R (section*.73) 2520 0 R (section*.74) 2525 0 R (section*.75) 2526 0 R (section*.76) 2539 0 R (section*.77) 2540 0 R (section*.78) 2541 0 R (section*.79) 2543 0 R (section*.8) 2233 0 R (section*.80) 2544 0 R (section*.81) 2549 0 R (section*.82) 2550 0 R (section*.83) 2551 0 R (section*.84) 2552 0 R (section*.85) 2553 0 R (section*.86) 2555 0 R (section*.87) 2561 0 R (section*.88) 2562 0 R (section*.89) 2563 0 R (section*.9) 2251 0 R (section*.90) 2572 0 R (section*.91) 2573 0 R (section*.92) 2574 0 R (section*.93) 2576 0 R (section*.94) 2577 0 R (section*.95) 2578 0 R (section*.96) 2579 0 R (section*.97) 2588 0 R (section*.98) 2589 0 R (section*.99) 2590 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.1.4) 22 0 R (section.2.1) 70 0 R (section.2.2) 74 0 R (section.2.3) 78 0 R (section.2.4) 82 0 R (section.2.5) 86 0 R (section.3.1) 94 0 R (section.3.2) 106 0 R (section.3.3) 110 0 R (section.4.1) 134 0 R (section.4.10) 274 0 R (section.4.11) 286 0 R (section.4.12) 338 0 R (section.4.2) 138 0 R (section.4.3) 146 0 R (section.4.4) 150 0 R (section.4.5) 158 0 R (section.4.6) 194 0 R (section.4.7) 198 0 R (section.4.8) 202 0 R (section.4.9) 218 0 R (section.5.1) 354 0 R (section.5.2) 358 0 R (section.6.1) 366 0 R (section.6.2) 394 0 R (section.6.3) 618 0 R (section.6.4) 674 0 R (section.7.1) 710 0 R (section.7.2) 714 0 R (section.7.3) 726 0 R (section.8.1) 734 0 R (section.8.2) 742 0 R (section.8.3) 746 0 R (section.A.1) 754 0 R (section.A.2) 762 0 R (section.A.3) 770 0 R (section.A.4) 786 0 R (section.B.1) 846 0 R (section.B.10) 882 0 R (section.B.11) 886 0 R (section.B.12) 890 0 R (section.B.13) 894 0 R (section.B.14) 898 0 R (section.B.15) 902 0 R (section.B.16) 906 0 R (section.B.17) 910 0 R (section.B.18) 914 0 R (section.B.19) 918 0 R (section.B.2) 850 0 R (section.B.20) 922 0 R (section.B.21) 926 0 R (section.B.3) 854 0 R (section.B.4) 858 0 R (section.B.5) 862 0 R (section.B.6) 866 0 R (section.B.7) 870 0 R (section.B.8) 874 0 R (section.B.9) 878 0 R (server_resource_limits) 1763 0 R (server_statement_definition_and_usage) 1701 0 R (server_statement_grammar) 1834 0 R (statistics) 2030 0 R (statistics_counters) 2038 0 R (statschannels) 1845 0 R (statsfile) 1669 0 R (subsection.1.4.1) 26 0 R (subsection.1.4.2) 30 0 R (subsection.1.4.3) 34 0 R (subsection.1.4.4) 38 0 R (subsection.1.4.5) 54 0 R (subsection.1.4.6) 62 0 R (subsection.3.1.1) 98 0 R (subsection.3.1.2) 102 0 R (subsection.3.3.1) 114 0 R (subsection.3.3.2) 126 0 R (subsection.4.10.1) 278 0 R (subsection.4.10.2) 282 0 R (subsection.4.11.1) 290 0 R (subsection.4.11.2) 306 0 R (subsection.4.11.3) 322 0 R (subsection.4.11.4) 326 0 R (subsection.4.11.5) 330 0 R (subsection.4.11.6) 334 0 R (subsection.4.12.1) 342 0 R (subsection.4.12.2) 346 0 R (subsection.4.2.1) 142 0 R (subsection.4.4.1) 154 0 R (subsection.4.5.1) 162 0 R (subsection.4.5.2) 174 0 R (subsection.4.5.3) 178 0 R (subsection.4.5.4) 182 0 R (subsection.4.5.5) 186 0 R (subsection.4.5.6) 190 0 R (subsection.4.8.1) 206 0 R (subsection.4.8.2) 210 0 R (subsection.4.8.3) 214 0 R (subsection.4.9.1) 222 0 R (subsection.4.9.10) 258 0 R (subsection.4.9.11) 262 0 R (subsection.4.9.12) 266 0 R (subsection.4.9.13) 270 0 R (subsection.4.9.2) 226 0 R (subsection.4.9.3) 230 0 R (subsection.4.9.4) 234 0 R (subsection.4.9.5) 238 0 R (subsection.4.9.6) 242 0 R (subsection.4.9.7) 246 0 R (subsection.4.9.8) 250 0 R (subsection.4.9.9) 254 0 R (subsection.6.1.1) 370 0 R (subsection.6.1.2) 382 0 R (subsection.6.2.1) 398 0 R (subsection.6.2.10) 434 0 R (subsection.6.2.11) 450 0 R (subsection.6.2.12) 454 0 R (subsection.6.2.13) 458 0 R (subsection.6.2.14) 462 0 R (subsection.6.2.15) 466 0 R (subsection.6.2.16) 470 0 R (subsection.6.2.17) 554 0 R (subsection.6.2.18) 558 0 R (subsection.6.2.19) 562 0 R (subsection.6.2.2) 402 0 R (subsection.6.2.20) 566 0 R (subsection.6.2.21) 570 0 R (subsection.6.2.22) 574 0 R (subsection.6.2.23) 578 0 R (subsection.6.2.24) 582 0 R (subsection.6.2.25) 586 0 R (subsection.6.2.26) 590 0 R (subsection.6.2.27) 594 0 R (subsection.6.2.28) 598 0 R (subsection.6.2.3) 406 0 R (subsection.6.2.4) 410 0 R (subsection.6.2.5) 414 0 R (subsection.6.2.6) 418 0 R (subsection.6.2.7) 422 0 R (subsection.6.2.8) 426 0 R (subsection.6.2.9) 430 0 R (subsection.6.3.1) 622 0 R (subsection.6.3.2) 634 0 R (subsection.6.3.3) 638 0 R (subsection.6.3.4) 642 0 R (subsection.6.3.5) 646 0 R (subsection.6.3.6) 666 0 R (subsection.6.3.7) 670 0 R (subsection.6.4.1) 682 0 R (subsection.7.2.1) 718 0 R (subsection.7.2.2) 722 0 R (subsection.8.1.1) 738 0 R (subsection.A.1.1) 758 0 R (subsection.A.2.1) 766 0 R (subsection.A.3.1) 774 0 R (subsection.A.3.2) 778 0 R (subsection.A.3.3) 782 0 R (subsection.A.4.1) 790 0 R (subsection.A.4.2) 794 0 R (subsection.A.4.3) 798 0 R (subsection.A.4.4) 802 0 R (subsection.A.4.5) 806 0 R (subsection.A.4.6) 810 0 R (subsection.A.4.7) 838 0 R (subsubsection.1.4.4.1) 42 0 R (subsubsection.1.4.4.2) 46 0 R (subsubsection.1.4.4.3) 50 0 R (subsubsection.1.4.5.1) 58 0 R (subsubsection.3.3.1.1) 118 0 R (subsubsection.3.3.1.2) 122 0 R (subsubsection.4.11.1.1) 294 0 R (subsubsection.4.11.1.2) 298 0 R (subsubsection.4.11.1.3) 302 0 R (subsubsection.4.11.2.1) 310 0 R (subsubsection.4.11.2.2) 314 0 R (subsubsection.4.11.2.3) 318 0 R (subsubsection.4.5.1.1) 166 0 R (subsubsection.4.5.1.2) 170 0 R (subsubsection.6.1.1.1) 374 0 R (subsubsection.6.1.1.2) 378 0 R (subsubsection.6.1.2.1) 386 0 R (subsubsection.6.1.2.2) 390 0 R (subsubsection.6.2.10.1) 438 0 R (subsubsection.6.2.10.2) 442 0 R (subsubsection.6.2.10.3) 446 0 R (subsubsection.6.2.16.1) 474 0 R (subsubsection.6.2.16.10) 510 0 R (subsubsection.6.2.16.11) 514 0 R (subsubsection.6.2.16.12) 518 0 R (subsubsection.6.2.16.13) 522 0 R (subsubsection.6.2.16.14) 526 0 R (subsubsection.6.2.16.15) 530 0 R (subsubsection.6.2.16.16) 534 0 R (subsubsection.6.2.16.17) 538 0 R (subsubsection.6.2.16.18) 542 0 R (subsubsection.6.2.16.19) 546 0 R (subsubsection.6.2.16.2) 478 0 R (subsubsection.6.2.16.20) 550 0 R (subsubsection.6.2.16.3) 482 0 R (subsubsection.6.2.16.4) 486 0 R (subsubsection.6.2.16.5) 490 0 R (subsubsection.6.2.16.6) 494 0 R (subsubsection.6.2.16.7) 498 0 R (subsubsection.6.2.16.8) 502 0 R (subsubsection.6.2.16.9) 506 0 R (subsubsection.6.2.28.1) 602 0 R (subsubsection.6.2.28.2) 606 0 R (subsubsection.6.2.28.3) 610 0 R (subsubsection.6.2.28.4) 614 0 R (subsubsection.6.3.1.1) 626 0 R (subsubsection.6.3.1.2) 630 0 R (subsubsection.6.3.5.1) 650 0 R (subsubsection.6.3.5.2) 654 0 R (subsubsection.6.3.5.3) 658 0 R (subsubsection.6.3.5.4) 662 0 R (subsubsection.6.4.0.1) 678 0 R (subsubsection.6.4.1.1) 686 0 R (subsubsection.6.4.1.2) 690 0 R (subsubsection.6.4.1.3) 694 0 R (subsubsection.6.4.1.4) 698 0 R (subsubsection.6.4.1.5) 702 0 R (subsubsection.A.4.6.1) 814 0 R (subsubsection.A.4.6.2) 818 0 R (subsubsection.A.4.6.3) 822 0 R (subsubsection.A.4.6.4) 826 0 R (subsubsection.A.4.6.5) 830 0 R (subsubsection.A.4.6.6) 834 0 R (table.1.1) 1235 0 R (table.1.2) 1243 0 R (table.3.1) 1302 0 R (table.3.2) 1345 0 R (table.6.1) 1550 0 R (table.6.10) 1969 0 R (table.6.11) 1975 0 R (table.6.12) 1982 0 R (table.6.13) 1989 0 R (table.6.14) 1991 0 R (table.6.15) 1998 0 R (table.6.16) 2001 0 R (table.6.17) 2004 0 R (table.6.18) 2020 0 R (table.6.19) 2032 0 R (table.6.2) 1572 0 R (table.6.20) 2041 0 R (table.6.21) 2049 0 R (table.6.22) 2052 0 R (table.6.23) 2060 0 R (table.6.3) 1581 0 R (table.6.4) 1619 0 R (table.6.5) 1631 0 R (table.6.6) 1685 0 R (table.6.7) 1784 0 R (table.6.8) 1880 0 R (table.6.9) 1955 0 R (the_category_phrase) 1613 0 R (the_sortlist_statement) 1775 0 R (topology) 1770 0 R (trusted-keys) 1847 0 R (tsig) 1397 0 R (tuning) 1789 0 R (types_of_resource_records_and_when_to_use_them) 1250 0 R (view_statement_grammar) 1805 0 R (zone_statement_grammar) 1724 0 R (zone_transfers) 1371 0 R (zonefile_format) 1797 0 R] /Limits [(Access_Control_Lists) (zonefile_format)] >> endobj 2756 0 obj << @@ -16348,7 +16372,7 @@ endobj >> endobj 2759 0 obj << /Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfeTeX-1.21a)/Keywords() -/CreationDate (D:20120322172405Z) +/CreationDate (D:20120720044330Z) /PTEX.Fullbanner (This is pdfeTeX, Version 3.141592-1.21a-2.2 (Web2C 7.5.4) kpathsea version 3.5.4) >> endobj xref @@ -16359,928 +16383,928 @@ xref 0000000004 00000 f 0000000000 00000 f 0000000009 00000 n -0000348640 00000 n -0001181592 00000 n +0000348639 00000 n +0001182928 00000 n 0000000054 00000 n 0000000086 00000 n -0000348767 00000 n -0001181520 00000 n +0000348766 00000 n +0001182856 00000 n 0000000133 00000 n 0000000173 00000 n -0000348895 00000 n -0001181434 00000 n +0000348894 00000 n +0001182770 00000 n 0000000221 00000 n 0000000273 00000 n -0000349023 00000 n -0001181348 00000 n +0000349022 00000 n +0001182684 00000 n 0000000321 00000 n 0000000377 00000 n -0000353309 00000 n -0001181238 00000 n +0000353308 00000 n +0001182574 00000 n 0000000425 00000 n 0000000478 00000 n -0000353436 00000 n -0001181164 00000 n +0000353435 00000 n +0001182500 00000 n 0000000531 00000 n 0000000572 00000 n -0000353564 00000 n -0001181077 00000 n +0000353563 00000 n +0001182413 00000 n 0000000625 00000 n 0000000674 00000 n -0000353691 00000 n -0001180990 00000 n +0000353690 00000 n +0001182326 00000 n 0000000727 00000 n 0000000757 00000 n -0000357988 00000 n -0001180866 00000 n +0000357987 00000 n +0001182202 00000 n 0000000810 00000 n 0000000861 00000 n -0000358116 00000 n -0001180792 00000 n +0000358115 00000 n +0001182128 00000 n 0000000919 00000 n 0000000964 00000 n -0000358244 00000 n -0001180705 00000 n +0000358243 00000 n +0001182041 00000 n 0000001022 00000 n 0000001062 00000 n -0000358372 00000 n -0001180631 00000 n +0000358371 00000 n +0001181967 00000 n 0000001120 00000 n 0000001162 00000 n -0000361357 00000 n -0001180507 00000 n +0000361356 00000 n +0001181843 00000 n 0000001215 00000 n 0000001260 00000 n -0000361485 00000 n -0001180446 00000 n +0000361484 00000 n +0001181782 00000 n 0000001318 00000 n 0000001355 00000 n -0000361613 00000 n -0001180372 00000 n +0000361612 00000 n +0001181708 00000 n 0000001408 00000 n 0000001463 00000 n -0000364560 00000 n -0001180247 00000 n +0000364559 00000 n +0001181583 00000 n 0000001509 00000 n 0000001556 00000 n -0000364688 00000 n -0001180173 00000 n +0000364687 00000 n +0001181509 00000 n 0000001604 00000 n 0000001648 00000 n -0000364816 00000 n -0001180086 00000 n +0000364815 00000 n +0001181422 00000 n 0000001696 00000 n 0000001735 00000 n -0000364944 00000 n -0001179999 00000 n +0000364943 00000 n +0001181335 00000 n 0000001783 00000 n 0000001825 00000 n -0000365071 00000 n -0001179912 00000 n +0000365070 00000 n +0001181248 00000 n 0000001873 00000 n 0000001936 00000 n -0000366148 00000 n -0001179838 00000 n +0000366147 00000 n +0001181174 00000 n 0000001984 00000 n 0000002034 00000 n -0000367807 00000 n -0001179710 00000 n +0000367806 00000 n +0001181046 00000 n 0000002080 00000 n 0000002126 00000 n -0000367934 00000 n -0001179597 00000 n +0000367933 00000 n +0001180933 00000 n 0000002174 00000 n 0000002218 00000 n -0000368062 00000 n -0001179521 00000 n +0000368061 00000 n +0001180857 00000 n 0000002271 00000 n 0000002323 00000 n -0000368190 00000 n -0001179444 00000 n +0000368189 00000 n +0001180780 00000 n 0000002377 00000 n 0000002436 00000 n -0000370639 00000 n -0001179353 00000 n +0000370638 00000 n +0001180689 00000 n 0000002485 00000 n 0000002523 00000 n -0000373977 00000 n -0001179236 00000 n +0000373976 00000 n +0001180572 00000 n 0000002572 00000 n 0000002618 00000 n -0000374105 00000 n -0001179118 00000 n +0000374104 00000 n +0001180454 00000 n 0000002672 00000 n 0000002739 00000 n -0000374233 00000 n -0001179039 00000 n +0000374232 00000 n +0001180375 00000 n 0000002798 00000 n 0000002842 00000 n -0000374362 00000 n -0001178960 00000 n +0000374361 00000 n +0001180296 00000 n 0000002901 00000 n 0000002949 00000 n -0000389228 00000 n -0001178881 00000 n +0000389227 00000 n +0001180217 00000 n 0000003003 00000 n 0000003036 00000 n -0000394852 00000 n -0001178748 00000 n +0000394851 00000 n +0001180084 00000 n 0000003083 00000 n 0000003126 00000 n -0000394981 00000 n -0001178669 00000 n +0000394980 00000 n +0001180005 00000 n 0000003175 00000 n 0000003205 00000 n -0000395110 00000 n -0001178537 00000 n +0000395109 00000 n +0001179873 00000 n 0000003254 00000 n 0000003292 00000 n -0000399482 00000 n -0001178472 00000 n +0000399481 00000 n +0001179808 00000 n 0000003346 00000 n 0000003388 00000 n -0000399611 00000 n -0001178379 00000 n +0000399610 00000 n +0001179715 00000 n 0000003437 00000 n 0000003496 00000 n -0000399740 00000 n -0001178247 00000 n +0000399739 00000 n +0001179583 00000 n 0000003545 00000 n 0000003578 00000 n -0000403460 00000 n -0001178182 00000 n +0000403459 00000 n +0001179518 00000 n 0000003632 00000 n 0000003681 00000 n -0000406614 00000 n -0001178050 00000 n +0000406613 00000 n +0001179386 00000 n 0000003730 00000 n 0000003758 00000 n -0000409559 00000 n -0001177932 00000 n +0000409558 00000 n +0001179268 00000 n 0000003812 00000 n 0000003881 00000 n -0000409688 00000 n -0001177853 00000 n +0000409687 00000 n +0001179189 00000 n 0000003940 00000 n 0000003988 00000 n -0000409817 00000 n -0001177774 00000 n +0000409816 00000 n +0001179110 00000 n 0000004047 00000 n 0000004092 00000 n -0000409946 00000 n -0001177681 00000 n +0000409945 00000 n +0001179017 00000 n 0000004146 00000 n 0000004214 00000 n -0000410075 00000 n -0001177588 00000 n +0000410074 00000 n +0001178924 00000 n 0000004268 00000 n 0000004338 00000 n -0000413538 00000 n -0001177495 00000 n +0000413537 00000 n +0001178831 00000 n 0000004392 00000 n 0000004455 00000 n -0000413667 00000 n -0001177402 00000 n +0000413666 00000 n +0001178738 00000 n 0000004509 00000 n 0000004564 00000 n -0000413796 00000 n -0001177323 00000 n +0000413795 00000 n +0001178659 00000 n 0000004618 00000 n 0000004650 00000 n -0000413925 00000 n -0001177230 00000 n +0000413924 00000 n +0001178566 00000 n 0000004699 00000 n 0000004727 00000 n -0000417785 00000 n -0001177137 00000 n +0000417784 00000 n +0001178473 00000 n 0000004776 00000 n 0000004808 00000 n -0000417914 00000 n -0001177005 00000 n +0000417913 00000 n +0001178341 00000 n 0000004857 00000 n 0000004887 00000 n -0000418042 00000 n -0001176926 00000 n +0000418041 00000 n +0001178262 00000 n 0000004941 00000 n 0000004982 00000 n -0000421945 00000 n -0001176833 00000 n +0000421944 00000 n +0001178169 00000 n 0000005036 00000 n 0000005078 00000 n -0000422073 00000 n -0001176754 00000 n +0000422072 00000 n +0001178090 00000 n 0000005132 00000 n 0000005177 00000 n -0000427213 00000 n -0001176621 00000 n +0000427212 00000 n +0001177957 00000 n 0000005226 00000 n 0000005294 00000 n -0000427342 00000 n -0001176542 00000 n +0000427341 00000 n +0001177878 00000 n 0000005348 00000 n 0000005408 00000 n -0000431147 00000 n -0001176449 00000 n +0000431146 00000 n +0001177785 00000 n 0000005462 00000 n 0000005513 00000 n -0000431276 00000 n -0001176356 00000 n +0000431275 00000 n +0001177692 00000 n 0000005567 00000 n 0000005621 00000 n -0000431405 00000 n -0001176263 00000 n +0000431404 00000 n +0001177599 00000 n 0000005675 00000 n 0000005721 00000 n -0000434523 00000 n -0001176170 00000 n +0000434522 00000 n +0001177506 00000 n 0000005775 00000 n 0000005817 00000 n -0000434652 00000 n -0001176077 00000 n +0000434651 00000 n +0001177413 00000 n 0000005871 00000 n 0000005922 00000 n -0000434781 00000 n -0001175984 00000 n +0000434780 00000 n +0001177320 00000 n 0000005976 00000 n 0000006025 00000 n -0000437879 00000 n -0001175891 00000 n +0000437878 00000 n +0001177227 00000 n 0000006079 00000 n 0000006136 00000 n -0000438008 00000 n -0001175798 00000 n +0000438007 00000 n +0001177134 00000 n 0000006190 00000 n 0000006245 00000 n -0000438136 00000 n -0001175705 00000 n +0000438135 00000 n +0001177041 00000 n 0000006300 00000 n 0000006356 00000 n -0000438265 00000 n -0001175612 00000 n +0000438264 00000 n +0001176948 00000 n 0000006411 00000 n 0000006472 00000 n -0000438393 00000 n -0001175519 00000 n +0000438392 00000 n +0001176855 00000 n 0000006527 00000 n 0000006573 00000 n -0000438521 00000 n -0001175440 00000 n +0000438520 00000 n +0001176776 00000 n 0000006628 00000 n 0000006671 00000 n -0000438650 00000 n -0001175308 00000 n +0000438649 00000 n +0001176644 00000 n 0000006721 00000 n 0000006777 00000 n -0000438779 00000 n -0001175229 00000 n +0000438778 00000 n +0001176565 00000 n 0000006832 00000 n 0000006878 00000 n -0000442371 00000 n -0001175150 00000 n +0000442370 00000 n +0001176486 00000 n 0000006933 00000 n 0000006980 00000 n -0000442500 00000 n -0001175018 00000 n +0000442499 00000 n +0001176354 00000 n 0000007030 00000 n 0000007087 00000 n -0000445660 00000 n -0001174900 00000 n +0000445659 00000 n +0001176236 00000 n 0000007142 00000 n 0000007182 00000 n -0000448355 00000 n -0001174821 00000 n +0000448354 00000 n +0001176157 00000 n 0000007242 00000 n 0000007315 00000 n -0000448484 00000 n -0001174728 00000 n +0000448483 00000 n +0001176064 00000 n 0000007375 00000 n 0000007448 00000 n -0000451265 00000 n -0001174649 00000 n +0000451264 00000 n +0001175985 00000 n 0000007508 00000 n 0000007565 00000 n -0000451394 00000 n -0001174517 00000 n +0000451393 00000 n +0001175853 00000 n 0000007620 00000 n 0000007678 00000 n -0000451523 00000 n -0001174438 00000 n +0000451522 00000 n +0001175774 00000 n 0000007738 00000 n 0000007815 00000 n -0000454017 00000 n -0001174345 00000 n +0000454016 00000 n +0001175681 00000 n 0000007875 00000 n 0000007952 00000 n -0000454146 00000 n -0001174266 00000 n +0000454145 00000 n +0001175602 00000 n 0000008012 00000 n 0000008071 00000 n -0000454275 00000 n -0001174173 00000 n +0000454274 00000 n +0001175509 00000 n 0000008126 00000 n 0000008170 00000 n -0000454404 00000 n -0001174080 00000 n +0000454403 00000 n +0001175416 00000 n 0000008225 00000 n 0000008265 00000 n -0000460724 00000 n -0001173987 00000 n +0000460723 00000 n +0001175323 00000 n 0000008320 00000 n 0000008388 00000 n -0000460853 00000 n -0001173908 00000 n +0000460852 00000 n +0001175244 00000 n 0000008443 00000 n 0000008514 00000 n -0000463644 00000 n -0001173790 00000 n +0000463643 00000 n +0001175126 00000 n 0000008564 00000 n 0000008611 00000 n -0000463773 00000 n -0001173711 00000 n +0000463772 00000 n +0001175047 00000 n 0000008666 00000 n 0000008727 00000 n -0000463902 00000 n -0001173632 00000 n +0000463901 00000 n +0001174968 00000 n 0000008782 00000 n 0000008852 00000 n -0000466344 00000 n -0001173499 00000 n +0000466343 00000 n +0001174835 00000 n 0000008899 00000 n 0000008952 00000 n -0000466473 00000 n -0001173420 00000 n +0000466472 00000 n +0001174756 00000 n 0000009001 00000 n 0000009057 00000 n -0000466602 00000 n -0001173341 00000 n +0000466601 00000 n +0001174677 00000 n 0000009106 00000 n 0000009155 00000 n -0000470872 00000 n -0001173208 00000 n +0000470871 00000 n +0001174544 00000 n 0000009202 00000 n 0000009254 00000 n -0000471001 00000 n -0001173090 00000 n +0000471000 00000 n +0001174426 00000 n 0000009303 00000 n 0000009354 00000 n -0000475693 00000 n -0001172972 00000 n +0000475692 00000 n +0001174308 00000 n 0000009408 00000 n 0000009453 00000 n -0000475821 00000 n -0001172893 00000 n +0000475820 00000 n +0001174229 00000 n 0000009512 00000 n 0000009546 00000 n -0000479414 00000 n -0001172814 00000 n +0000479413 00000 n +0001174150 00000 n 0000009605 00000 n 0000009653 00000 n -0000479543 00000 n -0001172696 00000 n +0000479542 00000 n +0001174032 00000 n 0000009707 00000 n 0000009747 00000 n -0000479672 00000 n -0001172617 00000 n +0000479671 00000 n +0001173953 00000 n 0000009806 00000 n 0000009840 00000 n -0000482524 00000 n -0001172538 00000 n +0000482523 00000 n +0001173874 00000 n 0000009899 00000 n 0000009947 00000 n -0000482653 00000 n -0001172405 00000 n +0000482652 00000 n +0001173741 00000 n 0000009996 00000 n 0000010046 00000 n -0000485723 00000 n -0001172326 00000 n +0000485722 00000 n +0001173662 00000 n 0000010100 00000 n 0000010147 00000 n -0000485851 00000 n -0001172233 00000 n +0000485850 00000 n +0001173569 00000 n 0000010201 00000 n 0000010261 00000 n -0000486110 00000 n -0001172140 00000 n +0000486109 00000 n +0001173476 00000 n 0000010315 00000 n 0000010367 00000 n -0000491292 00000 n -0001172047 00000 n +0000491291 00000 n +0001173383 00000 n 0000010421 00000 n 0000010486 00000 n -0000491421 00000 n -0001171954 00000 n +0000491420 00000 n +0001173290 00000 n 0000010540 00000 n 0000010591 00000 n -0000494898 00000 n -0001171861 00000 n +0000494897 00000 n +0001173197 00000 n 0000010645 00000 n 0000010709 00000 n -0000495027 00000 n -0001171768 00000 n +0000495026 00000 n +0001173104 00000 n 0000010763 00000 n 0000010810 00000 n -0000495156 00000 n -0001171675 00000 n +0000495155 00000 n +0001173011 00000 n 0000010864 00000 n 0000010924 00000 n -0000495285 00000 n -0001171582 00000 n +0000495284 00000 n +0001172918 00000 n 0000010978 00000 n 0000011029 00000 n -0000499303 00000 n -0001171450 00000 n +0000499302 00000 n +0001172786 00000 n 0000011084 00000 n 0000011149 00000 n -0000499432 00000 n -0001171371 00000 n +0000499431 00000 n +0001172707 00000 n 0000011209 00000 n 0000011256 00000 n -0000506253 00000 n -0001171278 00000 n +0000506252 00000 n +0001172614 00000 n 0000011316 00000 n 0000011364 00000 n -0000513362 00000 n -0001171199 00000 n +0000513361 00000 n +0001172535 00000 n 0000011424 00000 n 0000011478 00000 n -0000516959 00000 n -0001171106 00000 n +0000516958 00000 n +0001172442 00000 n 0000011533 00000 n 0000011583 00000 n -0000517088 00000 n -0001171013 00000 n +0000517087 00000 n +0001172349 00000 n 0000011638 00000 n 0000011701 00000 n -0000519025 00000 n -0001170920 00000 n +0000519024 00000 n +0001172256 00000 n 0000011756 00000 n 0000011808 00000 n -0000519154 00000 n -0001170827 00000 n +0000519153 00000 n +0001172163 00000 n 0000011863 00000 n 0000011928 00000 n -0000519283 00000 n -0001170734 00000 n +0000519282 00000 n +0001172070 00000 n 0000011983 00000 n 0000012035 00000 n -0000524634 00000 n -0001170601 00000 n +0000524428 00000 n +0001171937 00000 n 0000012090 00000 n 0000012155 00000 n -0000544648 00000 n -0001170522 00000 n +0000544388 00000 n +0001171858 00000 n 0000012215 00000 n 0000012259 00000 n -0000566543 00000 n -0001170429 00000 n +0000565985 00000 n +0001171765 00000 n 0000012319 00000 n 0000012358 00000 n -0000569882 00000 n -0001170336 00000 n +0000569620 00000 n +0001171672 00000 n 0000012418 00000 n 0000012465 00000 n -0000570011 00000 n -0001170243 00000 n +0000569749 00000 n +0001171579 00000 n 0000012525 00000 n 0000012568 00000 n -0000574357 00000 n -0001170150 00000 n +0000574175 00000 n +0001171486 00000 n 0000012628 00000 n 0000012667 00000 n -0000577879 00000 n -0001170057 00000 n +0000577523 00000 n +0001171393 00000 n 0000012727 00000 n 0000012769 00000 n -0000580951 00000 n -0001169964 00000 n +0000584483 00000 n +0001171300 00000 n 0000012829 00000 n 0000012872 00000 n -0000592154 00000 n -0001169871 00000 n +0000592253 00000 n +0001171207 00000 n 0000012932 00000 n 0000012975 00000 n -0000592283 00000 n -0001169778 00000 n +0000592382 00000 n +0001171114 00000 n 0000013035 00000 n 0000013096 00000 n -0000592412 00000 n -0001169685 00000 n +0000596338 00000 n +0001171021 00000 n 0000013157 00000 n 0000013209 00000 n -0000596564 00000 n -0001169592 00000 n +0000596467 00000 n +0001170928 00000 n 0000013270 00000 n 0000013323 00000 n -0000599832 00000 n -0001169499 00000 n +0000599686 00000 n +0001170835 00000 n 0000013384 00000 n 0000013422 00000 n -0000599961 00000 n -0001169406 00000 n +0000603538 00000 n +0001170742 00000 n 0000013483 00000 n 0000013535 00000 n -0000607050 00000 n -0001169313 00000 n +0000606956 00000 n +0001170649 00000 n 0000013596 00000 n 0000013640 00000 n -0000607308 00000 n -0001169220 00000 n +0000610967 00000 n +0001170556 00000 n 0000013701 00000 n 0000013737 00000 n -0000616212 00000 n -0001169127 00000 n +0000619337 00000 n +0001170463 00000 n 0000013798 00000 n 0000013861 00000 n -0000619235 00000 n -0001169034 00000 n +0000619466 00000 n +0001170370 00000 n 0000013922 00000 n 0000013972 00000 n -0000622249 00000 n -0001168941 00000 n +0000626008 00000 n +0001170277 00000 n 0000014033 00000 n 0000014089 00000 n -0000626720 00000 n -0001168848 00000 n +0000626135 00000 n +0001170184 00000 n 0000014150 00000 n 0000014197 00000 n -0000630845 00000 n -0001168769 00000 n +0000634312 00000 n +0001170105 00000 n 0000014258 00000 n 0000014326 00000 n -0000637589 00000 n -0001168676 00000 n +0000640547 00000 n +0001170012 00000 n 0000014381 00000 n 0000014432 00000 n -0000641551 00000 n -0001168583 00000 n +0000640676 00000 n +0001169919 00000 n 0000014487 00000 n 0000014551 00000 n -0000645997 00000 n -0001168490 00000 n +0000649330 00000 n +0001169826 00000 n 0000014606 00000 n 0000014670 00000 n -0000646124 00000 n -0001168397 00000 n +0000649459 00000 n +0001169733 00000 n 0000014725 00000 n 0000014802 00000 n -0000649682 00000 n -0001168304 00000 n +0000649588 00000 n +0001169640 00000 n 0000014857 00000 n 0000014914 00000 n -0000649811 00000 n -0001168211 00000 n +0000649717 00000 n +0001169547 00000 n 0000014969 00000 n 0000015039 00000 n -0000649940 00000 n -0001168118 00000 n +0000654026 00000 n +0001169454 00000 n 0000015094 00000 n 0000015151 00000 n -0000650069 00000 n -0001168025 00000 n +0000654155 00000 n +0001169361 00000 n 0000015206 00000 n 0000015276 00000 n -0000654253 00000 n -0001167932 00000 n +0000657626 00000 n +0001169268 00000 n 0000015331 00000 n 0000015380 00000 n -0000654381 00000 n -0001167839 00000 n +0000657755 00000 n +0001169175 00000 n 0000015435 00000 n 0000015497 00000 n -0000657008 00000 n -0001167746 00000 n +0000659509 00000 n +0001169082 00000 n 0000015552 00000 n 0000015601 00000 n -0000661703 00000 n -0001167628 00000 n +0000665970 00000 n +0001168964 00000 n 0000015656 00000 n 0000015718 00000 n -0000661831 00000 n -0001167549 00000 n +0000666099 00000 n +0001168885 00000 n 0000015778 00000 n 0000015817 00000 n -0000669071 00000 n -0001167456 00000 n +0000670336 00000 n +0001168792 00000 n 0000015877 00000 n 0000015911 00000 n -0000674993 00000 n -0001167363 00000 n +0000676258 00000 n +0001168699 00000 n 0000015971 00000 n 0000016012 00000 n -0000690633 00000 n -0001167284 00000 n +0000691898 00000 n +0001168620 00000 n 0000016072 00000 n 0000016124 00000 n -0000701315 00000 n -0001167152 00000 n +0000702584 00000 n +0001168488 00000 n 0000016173 00000 n 0000016206 00000 n -0000701444 00000 n -0001167034 00000 n +0000702713 00000 n +0001168370 00000 n 0000016260 00000 n 0000016332 00000 n -0000701573 00000 n -0001166955 00000 n +0000702842 00000 n +0001168291 00000 n 0000016391 00000 n 0000016435 00000 n -0000712174 00000 n -0001166876 00000 n +0000713443 00000 n +0001168212 00000 n 0000016494 00000 n 0000016547 00000 n -0000712563 00000 n -0001166783 00000 n +0000713832 00000 n +0001168119 00000 n 0000016601 00000 n 0000016651 00000 n -0000716417 00000 n -0001166690 00000 n +0000717686 00000 n +0001168026 00000 n 0000016705 00000 n 0000016743 00000 n -0000716676 00000 n -0001166597 00000 n +0000717945 00000 n +0001167933 00000 n 0000016797 00000 n 0000016846 00000 n -0000719449 00000 n -0001166465 00000 n +0000720718 00000 n +0001167801 00000 n 0000016900 00000 n 0000016952 00000 n -0000719574 00000 n -0001166386 00000 n +0000720843 00000 n +0001167722 00000 n 0000017011 00000 n 0000017056 00000 n -0000719703 00000 n -0001166293 00000 n +0000720972 00000 n +0001167629 00000 n 0000017115 00000 n 0000017167 00000 n -0000719832 00000 n -0001166200 00000 n +0000721101 00000 n +0001167536 00000 n 0000017226 00000 n 0000017279 00000 n -0000722284 00000 n -0001166121 00000 n +0000723553 00000 n +0001167457 00000 n 0000017338 00000 n 0000017387 00000 n -0000722413 00000 n -0001166028 00000 n +0000723682 00000 n +0001167364 00000 n 0000017441 00000 n 0000017521 00000 n -0000726728 00000 n -0001165949 00000 n +0000727997 00000 n +0001167285 00000 n 0000017575 00000 n 0000017624 00000 n -0000730234 00000 n -0001165831 00000 n +0000731503 00000 n +0001167167 00000 n 0000017673 00000 n 0000017713 00000 n -0000730493 00000 n -0001165752 00000 n +0000731762 00000 n +0001167088 00000 n 0000017772 00000 n 0000017819 00000 n -0000733925 00000 n -0001165634 00000 n +0000735194 00000 n +0001166970 00000 n 0000017873 00000 n 0000017918 00000 n -0000734054 00000 n -0001165555 00000 n +0000735323 00000 n +0001166891 00000 n 0000017977 00000 n 0000018036 00000 n -0000737409 00000 n -0001165462 00000 n +0000738678 00000 n +0001166798 00000 n 0000018095 00000 n 0000018159 00000 n -0000737668 00000 n -0001165369 00000 n +0000738937 00000 n +0001166705 00000 n 0000018218 00000 n 0000018274 00000 n -0000741825 00000 n -0001165276 00000 n +0000743094 00000 n +0001166612 00000 n 0000018333 00000 n 0000018391 00000 n -0000743846 00000 n -0001165197 00000 n +0000745115 00000 n +0001166533 00000 n 0000018450 00000 n 0000018512 00000 n -0000746014 00000 n -0001165064 00000 n +0000747283 00000 n +0001166400 00000 n 0000018559 00000 n 0000018611 00000 n -0000746142 00000 n -0001164985 00000 n +0000747411 00000 n +0001166321 00000 n 0000018660 00000 n 0000018704 00000 n -0000750177 00000 n -0001164853 00000 n +0000751446 00000 n +0001166189 00000 n 0000018753 00000 n 0000018794 00000 n -0000750306 00000 n -0001164774 00000 n +0000751575 00000 n +0001166110 00000 n 0000018848 00000 n 0000018896 00000 n -0000750434 00000 n -0001164695 00000 n +0000751703 00000 n +0001166031 00000 n 0000018950 00000 n 0000019001 00000 n -0000750563 00000 n -0001164616 00000 n +0000751832 00000 n +0001165952 00000 n 0000019050 00000 n 0000019097 00000 n -0000755162 00000 n -0001164483 00000 n +0000756431 00000 n +0001165819 00000 n 0000019144 00000 n 0000019181 00000 n -0000755291 00000 n -0001164365 00000 n +0000756560 00000 n +0001165701 00000 n 0000019230 00000 n 0000019269 00000 n -0000755420 00000 n -0001164300 00000 n +0000756689 00000 n +0001165636 00000 n 0000019323 00000 n 0000019401 00000 n -0000755549 00000 n -0001164207 00000 n +0000756818 00000 n +0001165543 00000 n 0000019450 00000 n 0000019517 00000 n -0000755678 00000 n -0001164128 00000 n +0000756947 00000 n +0001165464 00000 n 0000019566 00000 n 0000019611 00000 n -0000759119 00000 n -0001163995 00000 n +0000760388 00000 n +0001165331 00000 n 0000019659 00000 n 0000019691 00000 n -0000759248 00000 n -0001163877 00000 n +0000760517 00000 n +0001165213 00000 n 0000019740 00000 n 0000019779 00000 n -0000759377 00000 n -0001163812 00000 n +0000760646 00000 n +0001165148 00000 n 0000019833 00000 n 0000019894 00000 n -0000763059 00000 n -0001163680 00000 n +0000764328 00000 n +0001165016 00000 n 0000019943 00000 n 0000020000 00000 n -0000763188 00000 n -0001163615 00000 n +0000764457 00000 n +0001164951 00000 n 0000020054 00000 n 0000020103 00000 n -0000763317 00000 n -0001163483 00000 n +0000764586 00000 n +0001164819 00000 n 0000020152 00000 n 0000020214 00000 n -0000763446 00000 n -0001163404 00000 n +0000764715 00000 n +0001164740 00000 n 0000020268 00000 n 0000020323 00000 n -0000788288 00000 n -0001163311 00000 n +0000789557 00000 n +0001164647 00000 n 0000020377 00000 n 0000020418 00000 n -0000788417 00000 n -0001163232 00000 n +0000789686 00000 n +0001164568 00000 n 0000020472 00000 n 0000020524 00000 n -0000788806 00000 n -0001163114 00000 n +0000790075 00000 n +0001164450 00000 n 0000020573 00000 n 0000020623 00000 n -0000791627 00000 n -0001163035 00000 n +0000792896 00000 n +0001164371 00000 n 0000020677 00000 n 0000020715 00000 n -0000791756 00000 n -0001162942 00000 n +0000793025 00000 n +0001164278 00000 n 0000020769 00000 n 0000020806 00000 n -0000791885 00000 n -0001162849 00000 n +0000793154 00000 n +0001164185 00000 n 0000020860 00000 n 0000020898 00000 n -0000792014 00000 n -0001162756 00000 n +0000793283 00000 n +0001164092 00000 n 0000020952 00000 n 0000021004 00000 n -0000795250 00000 n -0001162663 00000 n +0000796519 00000 n +0001163999 00000 n 0000021058 00000 n 0000021101 00000 n -0000795378 00000 n -0001162531 00000 n +0000796647 00000 n +0001163867 00000 n 0000021155 00000 n 0000021200 00000 n -0000795506 00000 n -0001162452 00000 n +0000796775 00000 n +0001163788 00000 n 0000021259 00000 n 0000021325 00000 n -0000798492 00000 n -0001162359 00000 n +0000799761 00000 n +0001163695 00000 n 0000021384 00000 n 0000021472 00000 n -0000798621 00000 n -0001162266 00000 n +0000799890 00000 n +0001163602 00000 n 0000021531 00000 n 0000021606 00000 n -0000798750 00000 n -0001162173 00000 n +0000800019 00000 n +0001163509 00000 n 0000021665 00000 n 0000021750 00000 n -0000801659 00000 n -0001162080 00000 n +0000802928 00000 n +0001163416 00000 n 0000021809 00000 n 0000021890 00000 n -0000804120 00000 n -0001162001 00000 n +0000805389 00000 n +0001163337 00000 n 0000021949 00000 n 0000022033 00000 n -0000804249 00000 n -0001161922 00000 n +0000805518 00000 n +0001163258 00000 n 0000022087 00000 n 0000022131 00000 n -0000807078 00000 n -0001161802 00000 n +0000808347 00000 n +0001163138 00000 n 0000022179 00000 n 0000022213 00000 n -0000807207 00000 n -0001161723 00000 n +0000808476 00000 n +0001163059 00000 n 0000022262 00000 n 0000022289 00000 n -0000825174 00000 n -0001161630 00000 n +0000826443 00000 n +0001162966 00000 n 0000022338 00000 n 0000022366 00000 n -0000832722 00000 n -0001161537 00000 n +0000834001 00000 n +0001162873 00000 n 0000022415 00000 n 0000022455 00000 n -0000838996 00000 n -0001161444 00000 n +0000840285 00000 n +0001162780 00000 n 0000022504 00000 n 0000022547 00000 n -0000845531 00000 n -0001161351 00000 n +0000846820 00000 n +0001162687 00000 n 0000022596 00000 n 0000022633 00000 n -0000858774 00000 n -0001161258 00000 n +0000860111 00000 n +0001162594 00000 n 0000022682 00000 n 0000022719 00000 n -0000861650 00000 n -0001161165 00000 n +0000862987 00000 n +0001162501 00000 n 0000022768 00000 n 0000022806 00000 n -0000868436 00000 n -0001161072 00000 n +0000869773 00000 n +0001162408 00000 n 0000022855 00000 n 0000022894 00000 n -0000881930 00000 n -0001160979 00000 n +0000883267 00000 n +0001162315 00000 n 0000022943 00000 n 0000022982 00000 n -0000884911 00000 n -0001160886 00000 n +0000886248 00000 n +0001162222 00000 n 0000023032 00000 n 0000023072 00000 n -0000894401 00000 n -0001160793 00000 n +0000895738 00000 n +0001162129 00000 n 0000023122 00000 n 0000023152 00000 n -0000903297 00000 n -0001160700 00000 n +0000904634 00000 n +0001162036 00000 n 0000023202 00000 n 0000023245 00000 n -0000907586 00000 n -0001160607 00000 n +0000908923 00000 n +0001161943 00000 n 0000023295 00000 n 0000023328 00000 n -0000921539 00000 n -0001160514 00000 n +0000922876 00000 n +0001161850 00000 n 0000023378 00000 n 0000023407 00000 n -0000924769 00000 n -0001160421 00000 n +0000926106 00000 n +0001161757 00000 n 0000023457 00000 n 0000023491 00000 n -0000930683 00000 n -0001160328 00000 n +0000932020 00000 n +0001161664 00000 n 0000023541 00000 n 0000023578 00000 n -0000937443 00000 n -0001160235 00000 n +0000938780 00000 n +0001161571 00000 n 0000023628 00000 n 0000023665 00000 n -0000939799 00000 n -0001160142 00000 n +0000941136 00000 n +0001161478 00000 n 0000023715 00000 n 0000023748 00000 n -0000940253 00000 n -0001160049 00000 n +0000941590 00000 n +0001161385 00000 n 0000023798 00000 n 0000023832 00000 n -0000943019 00000 n -0001159956 00000 n +0000944356 00000 n +0001161292 00000 n 0000023882 00000 n 0000023921 00000 n -0000945629 00000 n -0001159877 00000 n +0000946966 00000 n +0001161213 00000 n 0000023971 00000 n 0000024005 00000 n 0000024378 00000 n @@ -17289,10 +17313,10 @@ xref 0000024058 00000 n 0000289175 00000 n 0000289238 00000 n -0001154099 00000 n -0001128014 00000 n -0001153925 00000 n -0001155137 00000 n +0001155435 00000 n +0001129350 00000 n +0001155261 00000 n +0001156473 00000 n 0000025809 00000 n 0000026002 00000 n 0000026082 00000 n @@ -17312,12 +17336,12 @@ xref 0000290546 00000 n 0000289401 00000 n 0000290668 00000 n -0001126778 00000 n -0001100159 00000 n -0001126604 00000 n -0001099474 00000 n -0001097330 00000 n -0001099310 00000 n +0001128114 00000 n +0001101495 00000 n +0001127940 00000 n +0001100810 00000 n +0001098665 00000 n +0001100646 00000 n 0000302473 00000 n 0000293782 00000 n 0000290816 00000 n @@ -17377,9 +17401,9 @@ xref 0000305912 00000 n 0000302558 00000 n 0000315916 00000 n -0001096742 00000 n -0001079321 00000 n -0001096556 00000 n +0001098077 00000 n +0001080656 00000 n +0001097891 00000 n 0000306562 00000 n 0000306726 00000 n 0000306889 00000 n @@ -17437,1689 +17461,1689 @@ xref 0000315431 00000 n 0000315593 00000 n 0000315754 00000 n -0000330137 00000 n -0000319590 00000 n +0000330136 00000 n +0000319588 00000 n 0000316081 00000 n -0000330072 00000 n -0000320258 00000 n -0000320422 00000 n -0000320591 00000 n -0000320760 00000 n -0000320928 00000 n -0000321092 00000 n -0000321255 00000 n -0000321419 00000 n -0000321583 00000 n -0000321747 00000 n -0000321910 00000 n -0000322079 00000 n -0000322248 00000 n -0000322416 00000 n -0000322585 00000 n -0000322754 00000 n -0000322923 00000 n -0000323092 00000 n -0000323261 00000 n -0000323429 00000 n -0000323599 00000 n -0000323769 00000 n -0000323939 00000 n -0000324109 00000 n -0000324279 00000 n -0000324449 00000 n -0000324619 00000 n -0000324789 00000 n -0000324958 00000 n -0000325128 00000 n -0000325297 00000 n -0000325461 00000 n -0000325625 00000 n -0000325789 00000 n -0000325953 00000 n -0000326117 00000 n -0000326280 00000 n -0000326444 00000 n -0000326608 00000 n -0000326771 00000 n -0000326935 00000 n -0000327099 00000 n -0000327263 00000 n -0000327432 00000 n -0000327601 00000 n -0000327769 00000 n -0000327938 00000 n -0000328096 00000 n -0000328258 00000 n -0000328426 00000 n -0000328593 00000 n -0000328756 00000 n -0000328919 00000 n -0000329082 00000 n -0000329245 00000 n -0000329413 00000 n -0000329580 00000 n -0000329746 00000 n -0000329911 00000 n -0000343319 00000 n -0000333745 00000 n -0000330237 00000 n -0000343254 00000 n -0000334377 00000 n -0000334540 00000 n -0000334698 00000 n -0000334866 00000 n -0000335029 00000 n -0000335197 00000 n -0000335365 00000 n -0000335532 00000 n -0001078430 00000 n -0001057096 00000 n -0001078254 00000 n -0000335698 00000 n -0000335865 00000 n -0000336021 00000 n -0000336178 00000 n -0000336336 00000 n -0000336499 00000 n -0000336662 00000 n -0000336820 00000 n -0000336976 00000 n -0000337134 00000 n -0000337297 00000 n -0000337455 00000 n -0000337613 00000 n -0000337770 00000 n -0000337928 00000 n -0000338091 00000 n -0000338249 00000 n -0000338412 00000 n -0000338570 00000 n -0000338733 00000 n -0000338896 00000 n -0000339059 00000 n -0000339217 00000 n -0000339380 00000 n -0000339543 00000 n -0000339706 00000 n -0000339869 00000 n -0000340032 00000 n -0000340195 00000 n -0000340363 00000 n -0000340531 00000 n -0000340698 00000 n -0000340865 00000 n -0000341033 00000 n -0000341201 00000 n -0000341364 00000 n -0000341520 00000 n -0000341678 00000 n -0000341836 00000 n -0000341994 00000 n -0000342152 00000 n -0000342310 00000 n -0000342468 00000 n -0000342626 00000 n -0000342784 00000 n -0000342940 00000 n -0000343097 00000 n -0000346158 00000 n -0000344279 00000 n -0000343433 00000 n -0000346093 00000 n -0000344507 00000 n -0000344666 00000 n -0000344825 00000 n -0001056128 00000 n -0001036158 00000 n -0001055953 00000 n -0000344983 00000 n -0000345142 00000 n -0000345300 00000 n -0000345459 00000 n -0000345618 00000 n -0000345777 00000 n -0000345934 00000 n -0001155258 00000 n -0000349281 00000 n -0000348514 00000 n -0000346259 00000 n -0000348702 00000 n -0000348830 00000 n -0000348958 00000 n -0000349086 00000 n -0000349151 00000 n -0000349216 00000 n -0001035341 00000 n -0001016876 00000 n -0001035166 00000 n -0000353818 00000 n -0000352677 00000 n -0000349409 00000 n -0000353179 00000 n -0000353244 00000 n -0000353371 00000 n -0000353499 00000 n -0000353627 00000 n -0000352833 00000 n -0000353027 00000 n -0000353753 00000 n -0000701508 00000 n -0000763510 00000 n -0000358500 00000 n -0000357442 00000 n -0000353946 00000 n -0000357923 00000 n -0000358051 00000 n -0000357598 00000 n -0000357761 00000 n -0000358179 00000 n -0000358307 00000 n -0000358435 00000 n -0000374297 00000 n -0000361741 00000 n -0000361166 00000 n -0000358628 00000 n -0000361292 00000 n -0000361420 00000 n -0000361548 00000 n -0000361676 00000 n -0000365199 00000 n -0000364033 00000 n -0000361855 00000 n -0000364495 00000 n -0000364623 00000 n -0000364751 00000 n -0000364879 00000 n -0000365007 00000 n -0000364189 00000 n -0000364342 00000 n -0000365134 00000 n -0000622313 00000 n -0000366276 00000 n -0000365957 00000 n -0000365285 00000 n -0000366083 00000 n -0000366211 00000 n -0001155383 00000 n -0000368319 00000 n -0000367616 00000 n -0000366376 00000 n -0000367742 00000 n -0000367870 00000 n -0000367997 00000 n -0000368125 00000 n -0000368254 00000 n -0000370898 00000 n -0000370268 00000 n -0000368419 00000 n -0000370574 00000 n -0000370703 00000 n -0000370768 00000 n -0000370833 00000 n -0000370415 00000 n -0000607114 00000 n -0000374491 00000 n -0000373786 00000 n -0000371012 00000 n -0000373912 00000 n -0000374041 00000 n -0000374168 00000 n -0001016193 00000 n -0001004131 00000 n -0001016014 00000 n -0000374426 00000 n -0000379098 00000 n -0000378208 00000 n -0000374619 00000 n -0000379033 00000 n -0001003558 00000 n -0000992624 00000 n -0001003379 00000 n -0000378382 00000 n -0000378537 00000 n -0000378707 00000 n -0000378862 00000 n -0000524697 00000 n -0000690695 00000 n -0000382463 00000 n -0000382272 00000 n -0000379267 00000 n -0000382398 00000 n -0000387242 00000 n -0000386844 00000 n -0000382605 00000 n -0000387177 00000 n -0000386991 00000 n -0001155508 00000 n -0000491356 00000 n -0000389485 00000 n -0000389037 00000 n -0000387398 00000 n -0000389163 00000 n -0000389291 00000 n -0000389356 00000 n -0000389421 00000 n -0000389954 00000 n -0000389763 00000 n -0000389613 00000 n -0000389889 00000 n -0000392649 00000 n -0000395239 00000 n -0000392484 00000 n -0000389996 00000 n -0000394787 00000 n -0000394916 00000 n -0000395045 00000 n -0000394292 00000 n -0000394454 00000 n -0000991718 00000 n -0000981698 00000 n -0000991544 00000 n -0000981134 00000 n -0000972048 00000 n -0000980959 00000 n -0000395174 00000 n -0000394616 00000 n -0000394121 00000 n -0000394179 00000 n -0000394269 00000 n -0000544712 00000 n -0000581015 00000 n -0000399869 00000 n -0000398933 00000 n -0000395410 00000 n -0000399417 00000 n -0000399546 00000 n -0000399675 00000 n -0000399089 00000 n -0000399255 00000 n -0000399804 00000 n -0000767541 00000 n -0000403589 00000 n -0000403269 00000 n -0000400025 00000 n -0000403395 00000 n -0000403524 00000 n -0000405165 00000 n -0000404785 00000 n -0000403730 00000 n -0000405100 00000 n -0000404932 00000 n -0001155633 00000 n -0000406742 00000 n -0000406423 00000 n -0000405266 00000 n -0000406549 00000 n -0000406678 00000 n -0000410204 00000 n -0000409368 00000 n -0000406856 00000 n -0000409494 00000 n -0000409623 00000 n -0000409752 00000 n -0000409881 00000 n -0000410010 00000 n -0000410139 00000 n -0000414053 00000 n -0000413156 00000 n -0000410346 00000 n -0000413473 00000 n -0000413602 00000 n -0000413731 00000 n -0000413303 00000 n -0000413860 00000 n -0000413989 00000 n -0000418171 00000 n -0000417594 00000 n -0000414194 00000 n -0000417720 00000 n -0000417849 00000 n -0000417977 00000 n -0000418106 00000 n -0000422202 00000 n -0000421754 00000 n -0000418313 00000 n -0000421880 00000 n -0000422009 00000 n -0000422137 00000 n -0000424202 00000 n -0000424011 00000 n -0000422330 00000 n -0000424137 00000 n -0001155758 00000 n -0000427471 00000 n -0000427022 00000 n -0000424303 00000 n -0000427148 00000 n -0000971773 00000 n -0000968413 00000 n -0000971594 00000 n -0000427277 00000 n -0000427406 00000 n -0000431534 00000 n -0000430597 00000 n -0000427642 00000 n -0000431082 00000 n -0000431211 00000 n -0000431340 00000 n -0000968058 00000 n -0000966060 00000 n -0000967893 00000 n -0000430753 00000 n -0000430918 00000 n -0000431469 00000 n -0000845595 00000 n -0000861714 00000 n -0000434909 00000 n -0000434332 00000 n -0000431662 00000 n -0000434458 00000 n -0000434587 00000 n -0000434716 00000 n -0000434845 00000 n -0000438907 00000 n -0000437511 00000 n -0000435023 00000 n -0000437814 00000 n -0000437943 00000 n -0000438071 00000 n -0000438200 00000 n -0000438329 00000 n -0000438456 00000 n -0000438585 00000 n -0000438714 00000 n -0000438843 00000 n -0000437658 00000 n -0000650133 00000 n -0000442629 00000 n -0000442180 00000 n -0000439035 00000 n -0000442306 00000 n -0000442435 00000 n -0000442564 00000 n -0000445789 00000 n -0000445469 00000 n -0000442743 00000 n -0000445595 00000 n -0000445724 00000 n -0001155883 00000 n -0000448612 00000 n -0000448164 00000 n -0000445959 00000 n -0000448290 00000 n -0000448419 00000 n -0000448547 00000 n -0000451650 00000 n -0000451074 00000 n -0000448769 00000 n -0000451200 00000 n -0000451329 00000 n -0000451458 00000 n -0000451587 00000 n -0000454532 00000 n -0000453826 00000 n -0000451764 00000 n -0000453952 00000 n -0000454081 00000 n -0000454210 00000 n -0000454339 00000 n -0000454468 00000 n -0000457226 00000 n -0000457035 00000 n -0000454646 00000 n -0000457161 00000 n -0000459733 00000 n -0000460981 00000 n -0000459607 00000 n -0000457340 00000 n -0000460659 00000 n -0000460788 00000 n -0000460916 00000 n -0000464031 00000 n -0000463272 00000 n -0000461152 00000 n -0000463579 00000 n -0000463708 00000 n -0000463419 00000 n -0000463837 00000 n -0000463966 00000 n -0001156008 00000 n -0000763252 00000 n -0000466731 00000 n -0000466153 00000 n -0000464159 00000 n -0000466279 00000 n -0000466408 00000 n -0000466537 00000 n -0000466666 00000 n -0000467172 00000 n -0000466981 00000 n -0000466831 00000 n -0000467107 00000 n -0000471259 00000 n -0000470493 00000 n -0000467214 00000 n -0000470807 00000 n -0000470936 00000 n -0000471064 00000 n -0000471129 00000 n -0000471194 00000 n -0000470640 00000 n -0000475757 00000 n -0000475949 00000 n -0000475502 00000 n -0000471359 00000 n -0000475628 00000 n -0000475884 00000 n -0000479801 00000 n -0000479223 00000 n -0000476077 00000 n -0000479349 00000 n -0000479478 00000 n -0000479607 00000 n -0000479736 00000 n -0000482911 00000 n -0000482333 00000 n -0000479942 00000 n -0000482459 00000 n -0000482588 00000 n -0000482717 00000 n -0000482782 00000 n -0000482846 00000 n -0001156133 00000 n -0000486236 00000 n -0000485532 00000 n -0000483068 00000 n -0000485658 00000 n -0000485787 00000 n -0000485915 00000 n -0000485980 00000 n -0000486045 00000 n -0000486171 00000 n -0000491549 00000 n -0000490761 00000 n -0000486350 00000 n -0000491227 00000 n -0000490917 00000 n -0000491068 00000 n -0000491485 00000 n -0000947039 00000 n -0000495414 00000 n -0000494143 00000 n -0000491690 00000 n -0000494833 00000 n -0000494962 00000 n -0000495091 00000 n -0000495220 00000 n -0000494308 00000 n -0000494460 00000 n -0000494646 00000 n -0000495349 00000 n -0000499561 00000 n -0000499112 00000 n -0000495542 00000 n -0000499238 00000 n -0000499367 00000 n -0000499496 00000 n -0000503467 00000 n -0000503088 00000 n -0000499689 00000 n -0000503402 00000 n -0000503235 00000 n -0000506317 00000 n -0000506512 00000 n -0000506062 00000 n -0000503581 00000 n -0000506188 00000 n -0000506382 00000 n -0000506447 00000 n -0001156258 00000 n -0000510073 00000 n -0000509882 00000 n -0000506626 00000 n -0000510008 00000 n -0000513620 00000 n -0000513171 00000 n -0000510187 00000 n -0000513297 00000 n -0000513425 00000 n -0000513490 00000 n -0000513555 00000 n -0000517216 00000 n -0000516433 00000 n -0000513734 00000 n -0000516894 00000 n -0000517023 00000 n -0000517151 00000 n -0000516589 00000 n -0000516742 00000 n -0000519412 00000 n -0000518834 00000 n -0000517330 00000 n -0000518960 00000 n -0000519089 00000 n -0000519218 00000 n -0000519347 00000 n -0000520992 00000 n -0000520801 00000 n -0000519526 00000 n -0000520927 00000 n -0000522520 00000 n -0000522329 00000 n -0000521093 00000 n -0000522455 00000 n -0001156383 00000 n -0000524762 00000 n -0000524443 00000 n -0000522621 00000 n -0000524569 00000 n -0000528397 00000 n -0000528206 00000 n -0000524876 00000 n -0000528332 00000 n -0000533016 00000 n -0000532471 00000 n -0000528539 00000 n -0000532951 00000 n -0000532627 00000 n -0000532783 00000 n -0000730557 00000 n -0000536698 00000 n -0000536507 00000 n -0000533144 00000 n -0000536633 00000 n -0000541038 00000 n -0000540673 00000 n -0000536812 00000 n -0000540973 00000 n -0000540820 00000 n -0000544906 00000 n -0000544457 00000 n -0000541180 00000 n -0000544583 00000 n -0000544777 00000 n -0000544842 00000 n -0001156508 00000 n -0000549250 00000 n -0000548884 00000 n -0000545034 00000 n -0000549185 00000 n -0000549031 00000 n -0000554380 00000 n -0000553247 00000 n -0000549378 00000 n -0000554315 00000 n -0000553430 00000 n -0000553586 00000 n -0000553771 00000 n -0000553945 00000 n -0000554130 00000 n -0000641615 00000 n -0000558606 00000 n -0000558415 00000 n -0000554578 00000 n -0000558541 00000 n -0000562508 00000 n -0000562317 00000 n -0000558720 00000 n -0000562443 00000 n -0000566672 00000 n -0000566164 00000 n -0000562622 00000 n -0000566478 00000 n -0000566607 00000 n -0000566311 00000 n -0000657072 00000 n -0000570140 00000 n -0000569503 00000 n -0000566786 00000 n -0000569817 00000 n -0000569946 00000 n -0000570075 00000 n -0000569650 00000 n -0001156633 00000 n -0000574486 00000 n -0000573795 00000 n -0000570297 00000 n -0000574292 00000 n -0000573951 00000 n -0000574121 00000 n -0000574421 00000 n -0000750627 00000 n -0000578008 00000 n -0000577688 00000 n -0000574614 00000 n -0000577814 00000 n -0000577943 00000 n -0000581079 00000 n -0000580760 00000 n -0000578122 00000 n -0000580886 00000 n -0000585184 00000 n -0000584993 00000 n -0000581250 00000 n -0000585119 00000 n -0000588295 00000 n -0000588104 00000 n -0000585298 00000 n -0000588230 00000 n -0000592540 00000 n -0000591599 00000 n -0000588452 00000 n -0000592089 00000 n -0000592218 00000 n -0000591755 00000 n -0000592347 00000 n -0000591915 00000 n -0000592476 00000 n -0001156758 00000 n -0000596693 00000 n -0000596197 00000 n -0000592654 00000 n -0000596499 00000 n -0000596344 00000 n -0000596628 00000 n -0000600090 00000 n -0000599460 00000 n -0000596821 00000 n -0000599767 00000 n -0000599896 00000 n -0000600025 00000 n -0000599607 00000 n -0000603441 00000 n -0000603073 00000 n -0000600261 00000 n -0000603376 00000 n -0000603220 00000 n -0000607437 00000 n -0000606668 00000 n -0000603555 00000 n -0000606985 00000 n -0000606815 00000 n -0000607179 00000 n -0000607243 00000 n -0000607372 00000 n -0000611421 00000 n -0000611047 00000 n -0000607622 00000 n -0000611356 00000 n -0000611194 00000 n -0000616341 00000 n -0000615663 00000 n -0000611592 00000 n -0000616147 00000 n -0000615819 00000 n -0000616276 00000 n -0000615981 00000 n -0001156883 00000 n -0000726792 00000 n -0000654316 00000 n -0000619363 00000 n -0000619044 00000 n -0000616469 00000 n -0000619170 00000 n -0000619298 00000 n -0000622376 00000 n -0000622058 00000 n -0000619490 00000 n -0000622184 00000 n -0000626849 00000 n -0000626529 00000 n -0000622546 00000 n -0000626655 00000 n -0000626784 00000 n -0000630973 00000 n -0000630482 00000 n -0000626963 00000 n -0000630780 00000 n -0000630629 00000 n -0000630909 00000 n -0000635210 00000 n -0000635019 00000 n -0000631114 00000 n -0000635145 00000 n -0000637718 00000 n -0000637398 00000 n -0000635337 00000 n -0000637524 00000 n -0000637653 00000 n -0001157008 00000 n -0000641680 00000 n -0000641360 00000 n -0000637845 00000 n -0000641486 00000 n -0000646253 00000 n -0000645465 00000 n -0000641794 00000 n -0000645932 00000 n -0000645621 00000 n -0000645772 00000 n -0000646060 00000 n -0000646188 00000 n -0000650197 00000 n -0000649316 00000 n -0000646367 00000 n -0000649617 00000 n -0000649746 00000 n -0000649875 00000 n -0000649463 00000 n -0000650004 00000 n -0000654509 00000 n -0000654062 00000 n -0000650311 00000 n -0000654188 00000 n -0000654445 00000 n -0000657137 00000 n -0000656817 00000 n -0000654651 00000 n -0000656943 00000 n -0000658691 00000 n -0000658500 00000 n -0000657251 00000 n -0000658626 00000 n -0001157133 00000 n -0000660196 00000 n -0000660005 00000 n -0000658792 00000 n -0000660131 00000 n -0000662090 00000 n -0000661512 00000 n -0000660297 00000 n -0000661638 00000 n -0000661766 00000 n -0000661895 00000 n -0000661960 00000 n -0000662025 00000 n -0000665093 00000 n -0000664902 00000 n -0000662204 00000 n -0000665028 00000 n -0000669200 00000 n -0000668692 00000 n -0000665207 00000 n -0000669006 00000 n -0000668839 00000 n -0000669135 00000 n -0000947006 00000 n -0000675122 00000 n -0000672215 00000 n -0000669314 00000 n -0000674928 00000 n -0000675057 00000 n -0000672488 00000 n -0000672650 00000 n -0000672812 00000 n -0000672974 00000 n -0000673136 00000 n -0000673298 00000 n -0000673469 00000 n -0000673631 00000 n -0000673794 00000 n -0000673954 00000 n -0000674115 00000 n -0000674278 00000 n -0000674441 00000 n -0000674604 00000 n -0000674767 00000 n -0000680220 00000 n -0000678303 00000 n -0000675236 00000 n -0000680155 00000 n -0000678531 00000 n -0000678692 00000 n -0000678860 00000 n -0000679030 00000 n -0000679191 00000 n -0000679353 00000 n -0000679515 00000 n -0000679677 00000 n -0000679840 00000 n -0000679994 00000 n -0001157258 00000 n -0000684752 00000 n -0000683390 00000 n -0000680348 00000 n -0000684687 00000 n -0000683591 00000 n -0000683745 00000 n -0000683899 00000 n -0000684053 00000 n -0000684207 00000 n -0000684369 00000 n -0000684529 00000 n -0000690760 00000 n -0000688396 00000 n -0000684880 00000 n -0000690568 00000 n -0000688642 00000 n -0000688803 00000 n -0000688965 00000 n -0000689127 00000 n -0000689289 00000 n -0000689443 00000 n -0000689606 00000 n -0000689761 00000 n -0000689926 00000 n -0000690092 00000 n -0000690254 00000 n -0000690408 00000 n -0000694855 00000 n -0000694534 00000 n -0000690888 00000 n -0000694660 00000 n -0000694725 00000 n -0000694790 00000 n -0000697625 00000 n -0000697434 00000 n -0000694997 00000 n -0000697560 00000 n -0000701832 00000 n -0000700762 00000 n -0000697783 00000 n -0000701250 00000 n -0000701379 00000 n -0000701637 00000 n -0000700918 00000 n -0000701088 00000 n -0000701702 00000 n -0000701767 00000 n -0000705283 00000 n -0000704963 00000 n -0000701960 00000 n -0000705089 00000 n -0000705154 00000 n -0000705218 00000 n -0001157383 00000 n -0000708771 00000 n -0000708450 00000 n -0000705384 00000 n -0000708576 00000 n -0000708641 00000 n -0000708706 00000 n -0000712692 00000 n -0000711983 00000 n -0000708886 00000 n -0000712109 00000 n -0000712238 00000 n -0000712303 00000 n -0000712368 00000 n -0000712433 00000 n -0000712498 00000 n -0000712627 00000 n -0000716933 00000 n -0000716096 00000 n -0000712806 00000 n -0000716222 00000 n -0000716287 00000 n -0000716352 00000 n -0000716481 00000 n -0000716546 00000 n -0000716611 00000 n -0000716740 00000 n -0000716805 00000 n -0000716869 00000 n -0000719960 00000 n -0000719258 00000 n -0000717061 00000 n -0000719384 00000 n -0000719511 00000 n -0000719638 00000 n -0000719767 00000 n -0000719895 00000 n -0000722670 00000 n -0000722093 00000 n -0000720159 00000 n -0000722219 00000 n -0000722348 00000 n -0000722477 00000 n -0000722542 00000 n -0000722606 00000 n -0000726857 00000 n -0000726537 00000 n -0000722855 00000 n -0000726663 00000 n -0001157508 00000 n -0000730622 00000 n -0000729862 00000 n -0000726984 00000 n -0000730169 00000 n -0000730298 00000 n -0000730363 00000 n -0000730428 00000 n -0000730009 00000 n -0000734313 00000 n -0000733734 00000 n -0000730736 00000 n -0000733860 00000 n -0000733989 00000 n -0000734118 00000 n -0000734183 00000 n -0000734248 00000 n -0000737927 00000 n -0000737032 00000 n -0000734427 00000 n -0000737344 00000 n -0000737179 00000 n -0000737473 00000 n -0000737538 00000 n -0000737603 00000 n -0000737732 00000 n -0000737797 00000 n -0000737862 00000 n -0000946973 00000 n -0000742084 00000 n -0000741634 00000 n -0000738041 00000 n -0000741760 00000 n -0000741889 00000 n -0000741954 00000 n -0000742019 00000 n -0000743975 00000 n -0000743655 00000 n -0000742212 00000 n -0000743781 00000 n -0000965779 00000 n -0000958495 00000 n -0000965599 00000 n -0000743910 00000 n -0000744458 00000 n -0000744267 00000 n -0000744117 00000 n -0000744393 00000 n -0001157633 00000 n -0000746270 00000 n -0000745823 00000 n -0000744500 00000 n -0000745949 00000 n -0000746078 00000 n -0000746205 00000 n -0000750692 00000 n -0000749749 00000 n -0000746384 00000 n -0000750112 00000 n -0000958174 00000 n -0000948961 00000 n -0000957988 00000 n -0000749896 00000 n -0000750241 00000 n -0000750369 00000 n -0000750498 00000 n -0000752051 00000 n -0000751860 00000 n -0000750933 00000 n -0000751986 00000 n -0000752492 00000 n -0000752301 00000 n -0000752151 00000 n -0000752427 00000 n -0000755806 00000 n -0000754580 00000 n -0000752534 00000 n -0000755097 00000 n -0000755226 00000 n -0000755355 00000 n -0000755484 00000 n -0000755613 00000 n -0000755742 00000 n -0000754736 00000 n -0000754908 00000 n -0000756261 00000 n -0000756070 00000 n -0000755920 00000 n -0000756196 00000 n -0001157758 00000 n -0000759506 00000 n -0000758928 00000 n -0000756303 00000 n -0000759054 00000 n -0000759183 00000 n -0000759312 00000 n -0000759441 00000 n -0000763703 00000 n -0000762484 00000 n -0000759592 00000 n -0000762994 00000 n -0000763123 00000 n -0000763381 00000 n -0000762640 00000 n -0000762819 00000 n -0000763575 00000 n -0000763639 00000 n -0000770593 00000 n -0000766765 00000 n -0000763859 00000 n -0000766891 00000 n -0000766956 00000 n -0000767021 00000 n -0000767086 00000 n -0000767151 00000 n -0000767216 00000 n -0000767281 00000 n -0000767346 00000 n -0000767411 00000 n -0000767476 00000 n -0000767606 00000 n -0000767671 00000 n -0000767736 00000 n -0000767801 00000 n -0000767866 00000 n -0000767931 00000 n -0000767996 00000 n -0000768061 00000 n -0000768126 00000 n -0000768191 00000 n -0000768256 00000 n -0000768321 00000 n -0000768386 00000 n -0000768451 00000 n -0000768516 00000 n -0000768581 00000 n -0000768646 00000 n -0000768711 00000 n -0000768776 00000 n -0000768841 00000 n -0000768906 00000 n -0000768971 00000 n -0000769036 00000 n -0000769101 00000 n -0000769165 00000 n -0000769230 00000 n -0000769295 00000 n -0000769360 00000 n -0000769425 00000 n -0000769490 00000 n -0000769555 00000 n -0000769620 00000 n -0000769685 00000 n -0000769750 00000 n -0000769815 00000 n -0000769880 00000 n -0000769945 00000 n -0000770010 00000 n -0000770075 00000 n -0000770140 00000 n -0000770205 00000 n -0000770270 00000 n -0000770335 00000 n -0000770400 00000 n -0000770465 00000 n -0000770529 00000 n -0000777241 00000 n -0000773677 00000 n -0000770707 00000 n -0000773803 00000 n -0000773868 00000 n -0000773933 00000 n -0000773998 00000 n -0000774063 00000 n -0000774128 00000 n -0000774193 00000 n -0000774258 00000 n -0000774323 00000 n -0000774388 00000 n -0000774453 00000 n -0000774518 00000 n -0000774582 00000 n -0000774647 00000 n -0000774712 00000 n -0000774777 00000 n -0000774842 00000 n -0000774907 00000 n -0000774972 00000 n -0000775037 00000 n -0000775102 00000 n -0000775167 00000 n -0000775232 00000 n -0000775297 00000 n -0000775361 00000 n -0000775426 00000 n -0000775491 00000 n -0000775556 00000 n -0000775621 00000 n -0000775686 00000 n -0000775751 00000 n -0000775816 00000 n -0000775881 00000 n -0000775946 00000 n -0000776011 00000 n -0000776076 00000 n -0000776141 00000 n -0000776206 00000 n -0000776271 00000 n -0000776336 00000 n -0000776400 00000 n -0000776464 00000 n -0000776528 00000 n -0000776593 00000 n -0000776658 00000 n -0000776723 00000 n -0000776788 00000 n -0000776853 00000 n -0000776918 00000 n -0000776983 00000 n -0000777048 00000 n -0000777113 00000 n -0000777177 00000 n -0000783416 00000 n -0000779978 00000 n -0000777355 00000 n -0000780104 00000 n -0000780169 00000 n -0000780234 00000 n -0000780299 00000 n -0000780364 00000 n -0000780429 00000 n -0000780494 00000 n -0000780559 00000 n -0000780624 00000 n -0000780689 00000 n -0000780754 00000 n -0000780819 00000 n -0000780884 00000 n -0000780949 00000 n -0000781014 00000 n -0000781079 00000 n -0000781144 00000 n -0000781209 00000 n -0000781274 00000 n -0000781339 00000 n -0000781404 00000 n -0000781469 00000 n -0000781534 00000 n -0000781599 00000 n -0000781664 00000 n -0000781729 00000 n -0000781794 00000 n -0000781859 00000 n -0000781924 00000 n -0000781989 00000 n -0000782054 00000 n -0000782119 00000 n -0000782184 00000 n -0000782249 00000 n -0000782313 00000 n -0000782378 00000 n -0000782443 00000 n -0000782508 00000 n -0000782573 00000 n -0000782638 00000 n -0000782703 00000 n -0000782768 00000 n -0000782833 00000 n -0000782898 00000 n -0000782963 00000 n -0000783028 00000 n -0000783093 00000 n -0000783158 00000 n -0000783223 00000 n -0000783288 00000 n -0000783352 00000 n -0000788935 00000 n -0000786539 00000 n -0000783530 00000 n -0000786665 00000 n -0000786730 00000 n -0000786795 00000 n -0000786860 00000 n -0000786925 00000 n -0000786990 00000 n -0000787055 00000 n -0000787120 00000 n -0000787185 00000 n -0000787250 00000 n -0000787315 00000 n -0000787380 00000 n -0000787445 00000 n -0000787509 00000 n -0000787574 00000 n -0000787639 00000 n -0000787704 00000 n -0000787769 00000 n -0000787834 00000 n -0000787899 00000 n -0000787964 00000 n -0000788029 00000 n -0000788094 00000 n -0000788159 00000 n -0000788224 00000 n -0000788352 00000 n -0000788481 00000 n -0000788546 00000 n -0000788611 00000 n -0000788676 00000 n -0000788741 00000 n -0000788870 00000 n -0001157883 00000 n -0000792143 00000 n -0000791436 00000 n -0000789062 00000 n -0000791562 00000 n -0000791691 00000 n -0000791820 00000 n -0000791949 00000 n -0000792078 00000 n -0000795635 00000 n -0000794878 00000 n -0000792270 00000 n -0000795185 00000 n -0000795314 00000 n -0000795025 00000 n -0000795442 00000 n -0000795570 00000 n -0000798879 00000 n -0000798301 00000 n -0000795762 00000 n -0000798427 00000 n -0000798556 00000 n -0000798685 00000 n -0000798814 00000 n -0000801788 00000 n -0000801468 00000 n -0000798993 00000 n -0000801594 00000 n -0000801723 00000 n -0000804378 00000 n -0000803929 00000 n -0000801958 00000 n -0000804055 00000 n -0000804184 00000 n -0000804313 00000 n -0000804819 00000 n -0000804628 00000 n -0000804478 00000 n -0000804754 00000 n -0001158008 00000 n -0000807531 00000 n -0000806887 00000 n -0000804861 00000 n -0000807013 00000 n -0000807142 00000 n -0000807271 00000 n -0000807336 00000 n -0000807401 00000 n -0000807466 00000 n -0000811871 00000 n -0000811551 00000 n -0000807645 00000 n -0000811677 00000 n -0000811742 00000 n -0000811807 00000 n -0000815474 00000 n -0000815219 00000 n -0000812027 00000 n -0000815345 00000 n -0000815410 00000 n -0000818725 00000 n -0000818534 00000 n -0000815616 00000 n -0000818660 00000 n -0000822446 00000 n -0000822190 00000 n -0000818853 00000 n -0000822316 00000 n -0000822381 00000 n -0000825431 00000 n -0000824723 00000 n -0000822588 00000 n -0000824849 00000 n -0000824914 00000 n -0000824979 00000 n -0000825044 00000 n -0000825109 00000 n -0000825238 00000 n -0000825303 00000 n -0000825367 00000 n -0001158133 00000 n -0000830100 00000 n -0000829844 00000 n -0000825573 00000 n -0000829970 00000 n -0000830035 00000 n -0000833109 00000 n -0000832336 00000 n -0000830228 00000 n -0000832462 00000 n -0000832527 00000 n -0000832592 00000 n -0000832657 00000 n -0000832786 00000 n -0000832851 00000 n -0000832914 00000 n -0000832979 00000 n -0000833044 00000 n -0000836022 00000 n -0000835507 00000 n -0000833265 00000 n -0000835633 00000 n -0000835698 00000 n -0000835763 00000 n -0000835828 00000 n -0000835893 00000 n -0000835958 00000 n -0000839385 00000 n -0000838805 00000 n -0000836178 00000 n -0000838931 00000 n -0000839060 00000 n -0000839125 00000 n -0000839190 00000 n -0000839255 00000 n -0000839320 00000 n -0000842837 00000 n -0000842581 00000 n -0000839527 00000 n -0000842707 00000 n -0000842772 00000 n -0000845789 00000 n -0000845145 00000 n -0000842965 00000 n -0000845271 00000 n -0000845336 00000 n -0000845401 00000 n -0000845466 00000 n -0000845660 00000 n -0000845725 00000 n -0001158258 00000 n -0000849382 00000 n -0000849061 00000 n -0000845958 00000 n -0000849187 00000 n -0000849252 00000 n -0000849317 00000 n -0000852973 00000 n -0000852782 00000 n -0000849510 00000 n -0000852908 00000 n -0000856439 00000 n -0000856118 00000 n -0000853101 00000 n -0000856244 00000 n -0000856309 00000 n -0000856374 00000 n -0000859097 00000 n -0000858388 00000 n -0000856580 00000 n -0000858514 00000 n -0000858579 00000 n -0000858644 00000 n -0000858709 00000 n -0000858838 00000 n -0000858903 00000 n -0000858968 00000 n -0000859033 00000 n -0000861974 00000 n -0000861264 00000 n -0000859253 00000 n -0000861390 00000 n -0000861455 00000 n -0000861520 00000 n -0000861585 00000 n -0000861779 00000 n -0000861844 00000 n -0000861909 00000 n -0000865546 00000 n -0000865225 00000 n -0000862130 00000 n -0000865351 00000 n -0000865416 00000 n -0000865481 00000 n -0001158383 00000 n -0000868695 00000 n -0000868050 00000 n -0000865674 00000 n -0000868176 00000 n -0000868241 00000 n -0000868306 00000 n -0000868371 00000 n -0000868500 00000 n -0000868565 00000 n -0000868630 00000 n -0000872226 00000 n -0000871905 00000 n -0000868851 00000 n -0000872031 00000 n -0000872096 00000 n -0000872161 00000 n -0000875809 00000 n -0000875618 00000 n -0000872368 00000 n -0000875744 00000 n -0000879294 00000 n -0000879103 00000 n -0000875937 00000 n -0000879229 00000 n -0000882188 00000 n -0000881544 00000 n -0000879436 00000 n -0000881670 00000 n -0000881735 00000 n -0000881800 00000 n -0000881865 00000 n -0000881994 00000 n -0000882059 00000 n -0000882124 00000 n -0000885101 00000 n -0000884396 00000 n -0000882344 00000 n -0000884522 00000 n -0000884587 00000 n -0000884652 00000 n -0000884717 00000 n -0000884782 00000 n -0000884847 00000 n -0000884973 00000 n -0000885038 00000 n -0001158508 00000 n -0000888306 00000 n -0000887921 00000 n -0000885243 00000 n -0000888047 00000 n -0000888112 00000 n -0000888177 00000 n -0000888242 00000 n -0000891608 00000 n -0000891417 00000 n -0000888448 00000 n -0000891543 00000 n -0000894790 00000 n -0000894016 00000 n -0000891736 00000 n -0000894142 00000 n -0000894207 00000 n -0000894272 00000 n -0000894337 00000 n -0000894465 00000 n -0000894530 00000 n -0000894595 00000 n -0000894660 00000 n -0000894725 00000 n -0000898038 00000 n -0000897847 00000 n -0000894946 00000 n -0000897973 00000 n -0000901197 00000 n -0000900812 00000 n -0000898251 00000 n -0000900938 00000 n -0000901003 00000 n -0000901068 00000 n -0000901133 00000 n -0000903749 00000 n -0000902976 00000 n -0000901438 00000 n -0000903102 00000 n -0000903167 00000 n -0000903232 00000 n -0000903361 00000 n -0000903425 00000 n -0000903490 00000 n -0000903555 00000 n -0000903620 00000 n -0000903685 00000 n -0001158633 00000 n -0000907910 00000 n -0000907395 00000 n -0000903905 00000 n -0000907521 00000 n -0000907650 00000 n -0000907715 00000 n -0000907780 00000 n -0000907845 00000 n -0000912126 00000 n -0000911870 00000 n -0000908038 00000 n -0000911996 00000 n -0000912061 00000 n -0000915461 00000 n -0000915270 00000 n -0000912254 00000 n -0000915396 00000 n -0000918079 00000 n -0000917629 00000 n -0000915589 00000 n -0000917755 00000 n -0000917820 00000 n -0000917885 00000 n -0000917950 00000 n -0000918015 00000 n -0000921928 00000 n -0000921348 00000 n -0000918234 00000 n -0000921474 00000 n -0000921603 00000 n -0000921668 00000 n -0000921733 00000 n -0000921798 00000 n -0000921863 00000 n -0000925093 00000 n -0000924383 00000 n -0000922070 00000 n -0000924509 00000 n -0000924574 00000 n -0000924639 00000 n -0000924704 00000 n -0000924833 00000 n -0000924898 00000 n -0000924963 00000 n -0000925028 00000 n -0001158758 00000 n -0000927814 00000 n -0000927558 00000 n -0000925249 00000 n -0000927684 00000 n -0000927749 00000 n -0000931070 00000 n -0000930297 00000 n -0000927942 00000 n -0000930423 00000 n -0000930488 00000 n -0000930553 00000 n -0000930618 00000 n -0000930747 00000 n -0000930812 00000 n -0000930877 00000 n -0000930941 00000 n -0000931006 00000 n -0000934360 00000 n -0000934041 00000 n -0000931226 00000 n -0000934167 00000 n -0000934232 00000 n -0000934297 00000 n -0000937830 00000 n -0000937187 00000 n -0000934516 00000 n -0000937313 00000 n -0000937378 00000 n -0000937507 00000 n -0000937571 00000 n -0000937636 00000 n -0000937701 00000 n -0000937765 00000 n -0000940445 00000 n -0000939478 00000 n -0000937972 00000 n -0000939604 00000 n -0000939669 00000 n -0000939734 00000 n -0000939863 00000 n -0000939928 00000 n -0000939993 00000 n -0000940058 00000 n -0000940123 00000 n -0000940188 00000 n -0000940316 00000 n -0000940381 00000 n -0000943338 00000 n -0000942503 00000 n -0000940601 00000 n -0000942629 00000 n -0000942694 00000 n -0000942759 00000 n -0000942824 00000 n -0000942889 00000 n -0000942954 00000 n -0000943082 00000 n -0000943145 00000 n -0000943209 00000 n -0000943274 00000 n -0001158883 00000 n -0000946082 00000 n -0000945243 00000 n -0000943480 00000 n -0000945369 00000 n -0000945434 00000 n -0000945499 00000 n -0000945564 00000 n -0000945693 00000 n -0000945758 00000 n -0000945823 00000 n -0000945888 00000 n -0000945953 00000 n -0000946018 00000 n -0000946873 00000 n -0000946617 00000 n -0000946224 00000 n -0000946743 00000 n -0000946808 00000 n -0000947072 00000 n -0000958416 00000 n -0000966005 00000 n -0000968305 00000 n -0000968274 00000 n -0000971993 00000 n -0000981433 00000 n -0000992168 00000 n -0001003864 00000 n -0001016581 00000 n -0001035815 00000 n -0001056711 00000 n -0001078859 00000 n -0001097115 00000 n -0001099961 00000 n -0001099731 00000 n -0001127379 00000 n -0001154645 00000 n -0001158981 00000 n -0001159106 00000 n -0001159232 00000 n -0001159358 00000 n -0001159484 00000 n -0001159610 00000 n -0001159690 00000 n -0001159800 00000 n -0001181702 00000 n -0001205895 00000 n -0001205936 00000 n -0001205976 00000 n -0001206110 00000 n +0000330071 00000 n +0000320256 00000 n +0000320420 00000 n +0000320589 00000 n +0000320758 00000 n +0000320926 00000 n +0000321090 00000 n +0000321253 00000 n +0000321417 00000 n +0000321581 00000 n +0000321745 00000 n +0000321908 00000 n +0000322077 00000 n +0000322246 00000 n +0000322414 00000 n +0000322583 00000 n +0000322752 00000 n +0000322921 00000 n +0000323090 00000 n +0000323259 00000 n +0000323427 00000 n +0000323597 00000 n +0000323767 00000 n +0000323937 00000 n +0000324107 00000 n +0000324277 00000 n +0000324447 00000 n +0000324617 00000 n +0000324787 00000 n +0000324957 00000 n +0000325127 00000 n +0000325296 00000 n +0000325460 00000 n +0000325624 00000 n +0000325788 00000 n +0000325952 00000 n +0000326116 00000 n +0000326279 00000 n +0000326443 00000 n +0000326607 00000 n +0000326770 00000 n +0000326934 00000 n +0000327098 00000 n +0000327262 00000 n +0000327431 00000 n +0000327600 00000 n +0000327768 00000 n +0000327937 00000 n +0000328095 00000 n +0000328257 00000 n +0000328425 00000 n +0000328592 00000 n +0000328755 00000 n +0000328918 00000 n +0000329081 00000 n +0000329244 00000 n +0000329412 00000 n +0000329579 00000 n +0000329745 00000 n +0000329910 00000 n +0000343318 00000 n +0000333744 00000 n +0000330236 00000 n +0000343253 00000 n +0000334376 00000 n +0000334539 00000 n +0000334697 00000 n +0000334865 00000 n +0000335028 00000 n +0000335196 00000 n +0000335364 00000 n +0000335531 00000 n +0001079765 00000 n +0001058431 00000 n +0001079589 00000 n +0000335697 00000 n +0000335864 00000 n +0000336020 00000 n +0000336177 00000 n +0000336335 00000 n +0000336498 00000 n +0000336661 00000 n +0000336819 00000 n +0000336975 00000 n +0000337133 00000 n +0000337296 00000 n +0000337454 00000 n +0000337612 00000 n +0000337769 00000 n +0000337927 00000 n +0000338090 00000 n +0000338248 00000 n +0000338411 00000 n +0000338569 00000 n +0000338732 00000 n +0000338895 00000 n +0000339058 00000 n +0000339216 00000 n +0000339379 00000 n +0000339542 00000 n +0000339705 00000 n +0000339868 00000 n +0000340031 00000 n +0000340194 00000 n +0000340362 00000 n +0000340530 00000 n +0000340697 00000 n +0000340864 00000 n +0000341032 00000 n +0000341200 00000 n +0000341363 00000 n +0000341519 00000 n +0000341677 00000 n +0000341835 00000 n +0000341993 00000 n +0000342151 00000 n +0000342309 00000 n +0000342467 00000 n +0000342625 00000 n +0000342783 00000 n +0000342939 00000 n +0000343096 00000 n +0000346157 00000 n +0000344278 00000 n +0000343432 00000 n +0000346092 00000 n +0000344506 00000 n +0000344665 00000 n +0000344824 00000 n +0001057463 00000 n +0001037493 00000 n +0001057288 00000 n +0000344982 00000 n +0000345141 00000 n +0000345299 00000 n +0000345458 00000 n +0000345617 00000 n +0000345776 00000 n +0000345933 00000 n +0001156594 00000 n +0000349280 00000 n +0000348513 00000 n +0000346258 00000 n +0000348701 00000 n +0000348829 00000 n +0000348957 00000 n +0000349085 00000 n +0000349150 00000 n +0000349215 00000 n +0001036676 00000 n +0001018211 00000 n +0001036501 00000 n +0000353817 00000 n +0000352676 00000 n +0000349408 00000 n +0000353178 00000 n +0000353243 00000 n +0000353370 00000 n +0000353498 00000 n +0000353626 00000 n +0000352832 00000 n +0000353026 00000 n +0000353752 00000 n +0000702777 00000 n +0000764779 00000 n +0000358499 00000 n +0000357441 00000 n +0000353945 00000 n +0000357922 00000 n +0000358050 00000 n +0000357597 00000 n +0000357760 00000 n +0000358178 00000 n +0000358306 00000 n +0000358434 00000 n +0000374296 00000 n +0000361740 00000 n +0000361165 00000 n +0000358627 00000 n +0000361291 00000 n +0000361419 00000 n +0000361547 00000 n +0000361675 00000 n +0000365198 00000 n +0000364032 00000 n +0000361854 00000 n +0000364494 00000 n +0000364622 00000 n +0000364750 00000 n +0000364878 00000 n +0000365006 00000 n +0000364188 00000 n +0000364341 00000 n +0000365133 00000 n +0000626071 00000 n +0000366275 00000 n +0000365956 00000 n +0000365284 00000 n +0000366082 00000 n +0000366210 00000 n +0001156719 00000 n +0000368318 00000 n +0000367615 00000 n +0000366375 00000 n +0000367741 00000 n +0000367869 00000 n +0000367996 00000 n +0000368124 00000 n +0000368253 00000 n +0000370897 00000 n +0000370267 00000 n +0000368418 00000 n +0000370573 00000 n +0000370702 00000 n +0000370767 00000 n +0000370832 00000 n +0000370414 00000 n +0000607020 00000 n +0000374490 00000 n +0000373785 00000 n +0000371011 00000 n +0000373911 00000 n +0000374040 00000 n +0000374167 00000 n +0001017528 00000 n +0001005466 00000 n +0001017349 00000 n +0000374425 00000 n +0000379097 00000 n +0000378207 00000 n +0000374618 00000 n +0000379032 00000 n +0001004893 00000 n +0000993960 00000 n +0001004714 00000 n +0000378381 00000 n +0000378536 00000 n +0000378706 00000 n +0000378861 00000 n +0000524492 00000 n +0000691960 00000 n +0000382462 00000 n +0000382271 00000 n +0000379266 00000 n +0000382397 00000 n +0000387241 00000 n +0000386843 00000 n +0000382604 00000 n +0000387176 00000 n +0000386990 00000 n +0001156844 00000 n +0000491355 00000 n +0000389484 00000 n +0000389036 00000 n +0000387397 00000 n +0000389162 00000 n +0000389290 00000 n +0000389355 00000 n +0000389420 00000 n +0000389953 00000 n +0000389762 00000 n +0000389612 00000 n +0000389888 00000 n +0000392648 00000 n +0000395238 00000 n +0000392483 00000 n +0000389995 00000 n +0000394786 00000 n +0000394915 00000 n +0000395044 00000 n +0000394291 00000 n +0000394453 00000 n +0000993054 00000 n +0000983034 00000 n +0000992880 00000 n +0000982470 00000 n +0000973384 00000 n +0000982295 00000 n +0000395173 00000 n +0000394615 00000 n +0000394120 00000 n +0000394178 00000 n +0000394268 00000 n +0000544452 00000 n +0000584547 00000 n +0000399868 00000 n +0000398932 00000 n +0000395409 00000 n +0000399416 00000 n +0000399545 00000 n +0000399674 00000 n +0000399088 00000 n +0000399254 00000 n +0000399803 00000 n +0000768810 00000 n +0000403588 00000 n +0000403268 00000 n +0000400024 00000 n +0000403394 00000 n +0000403523 00000 n +0000405164 00000 n +0000404784 00000 n +0000403729 00000 n +0000405099 00000 n +0000404931 00000 n +0001156969 00000 n +0000406741 00000 n +0000406422 00000 n +0000405265 00000 n +0000406548 00000 n +0000406677 00000 n +0000410203 00000 n +0000409367 00000 n +0000406855 00000 n +0000409493 00000 n +0000409622 00000 n +0000409751 00000 n +0000409880 00000 n +0000410009 00000 n +0000410138 00000 n +0000414052 00000 n +0000413155 00000 n +0000410345 00000 n +0000413472 00000 n +0000413601 00000 n +0000413730 00000 n +0000413302 00000 n +0000413859 00000 n +0000413988 00000 n +0000418170 00000 n +0000417593 00000 n +0000414193 00000 n +0000417719 00000 n +0000417848 00000 n +0000417976 00000 n +0000418105 00000 n +0000422201 00000 n +0000421753 00000 n +0000418312 00000 n +0000421879 00000 n +0000422008 00000 n +0000422136 00000 n +0000424201 00000 n +0000424010 00000 n +0000422329 00000 n +0000424136 00000 n +0001157094 00000 n +0000427470 00000 n +0000427021 00000 n +0000424302 00000 n +0000427147 00000 n +0000973109 00000 n +0000969750 00000 n +0000972930 00000 n +0000427276 00000 n +0000427405 00000 n +0000431533 00000 n +0000430596 00000 n +0000427641 00000 n +0000431081 00000 n +0000431210 00000 n +0000431339 00000 n +0000969395 00000 n +0000967397 00000 n +0000969230 00000 n +0000430752 00000 n +0000430917 00000 n +0000431468 00000 n +0000846884 00000 n +0000863051 00000 n +0000434908 00000 n +0000434331 00000 n +0000431661 00000 n +0000434457 00000 n +0000434586 00000 n +0000434715 00000 n +0000434844 00000 n +0000438906 00000 n +0000437510 00000 n +0000435022 00000 n +0000437813 00000 n +0000437942 00000 n +0000438070 00000 n +0000438199 00000 n +0000438328 00000 n +0000438455 00000 n +0000438584 00000 n +0000438713 00000 n +0000438842 00000 n +0000437657 00000 n +0000654219 00000 n +0000442628 00000 n +0000442179 00000 n +0000439034 00000 n +0000442305 00000 n +0000442434 00000 n +0000442563 00000 n +0000445788 00000 n +0000445468 00000 n +0000442742 00000 n +0000445594 00000 n +0000445723 00000 n +0001157219 00000 n +0000448611 00000 n +0000448163 00000 n +0000445958 00000 n +0000448289 00000 n +0000448418 00000 n +0000448546 00000 n +0000451649 00000 n +0000451073 00000 n +0000448768 00000 n +0000451199 00000 n +0000451328 00000 n +0000451457 00000 n +0000451586 00000 n +0000454531 00000 n +0000453825 00000 n +0000451763 00000 n +0000453951 00000 n +0000454080 00000 n +0000454209 00000 n +0000454338 00000 n +0000454467 00000 n +0000457225 00000 n +0000457034 00000 n +0000454645 00000 n +0000457160 00000 n +0000459732 00000 n +0000460980 00000 n +0000459606 00000 n +0000457339 00000 n +0000460658 00000 n +0000460787 00000 n +0000460915 00000 n +0000464030 00000 n +0000463271 00000 n +0000461151 00000 n +0000463578 00000 n +0000463707 00000 n +0000463418 00000 n +0000463836 00000 n +0000463965 00000 n +0001157344 00000 n +0000764521 00000 n +0000466730 00000 n +0000466152 00000 n +0000464158 00000 n +0000466278 00000 n +0000466407 00000 n +0000466536 00000 n +0000466665 00000 n +0000467171 00000 n +0000466980 00000 n +0000466830 00000 n +0000467106 00000 n +0000471258 00000 n +0000470492 00000 n +0000467213 00000 n +0000470806 00000 n +0000470935 00000 n +0000471063 00000 n +0000471128 00000 n +0000471193 00000 n +0000470639 00000 n +0000475756 00000 n +0000475948 00000 n +0000475501 00000 n +0000471358 00000 n +0000475627 00000 n +0000475883 00000 n +0000479800 00000 n +0000479222 00000 n +0000476076 00000 n +0000479348 00000 n +0000479477 00000 n +0000479606 00000 n +0000479735 00000 n +0000482910 00000 n +0000482332 00000 n +0000479941 00000 n +0000482458 00000 n +0000482587 00000 n +0000482716 00000 n +0000482781 00000 n +0000482845 00000 n +0001157469 00000 n +0000486235 00000 n +0000485531 00000 n +0000483067 00000 n +0000485657 00000 n +0000485786 00000 n +0000485914 00000 n +0000485979 00000 n +0000486044 00000 n +0000486170 00000 n +0000491548 00000 n +0000490760 00000 n +0000486349 00000 n +0000491226 00000 n +0000490916 00000 n +0000491067 00000 n +0000491484 00000 n +0000948376 00000 n +0000495413 00000 n +0000494142 00000 n +0000491689 00000 n +0000494832 00000 n +0000494961 00000 n +0000495090 00000 n +0000495219 00000 n +0000494307 00000 n +0000494459 00000 n +0000494645 00000 n +0000495348 00000 n +0000499560 00000 n +0000499111 00000 n +0000495541 00000 n +0000499237 00000 n +0000499366 00000 n +0000499495 00000 n +0000503466 00000 n +0000503087 00000 n +0000499688 00000 n +0000503401 00000 n +0000503234 00000 n +0000506316 00000 n +0000506511 00000 n +0000506061 00000 n +0000503580 00000 n +0000506187 00000 n +0000506381 00000 n +0000506446 00000 n +0001157594 00000 n +0000510072 00000 n +0000509881 00000 n +0000506625 00000 n +0000510007 00000 n +0000513619 00000 n +0000513170 00000 n +0000510186 00000 n +0000513296 00000 n +0000513424 00000 n +0000513489 00000 n +0000513554 00000 n +0000517215 00000 n +0000516432 00000 n +0000513733 00000 n +0000516893 00000 n +0000517022 00000 n +0000517150 00000 n +0000516588 00000 n +0000516741 00000 n +0000519411 00000 n +0000518833 00000 n +0000517329 00000 n +0000518959 00000 n +0000519088 00000 n +0000519217 00000 n +0000519346 00000 n +0000520991 00000 n +0000520800 00000 n +0000519525 00000 n +0000520926 00000 n +0000522519 00000 n +0000522328 00000 n +0000521092 00000 n +0000522454 00000 n +0001157719 00000 n +0000524556 00000 n +0000524237 00000 n +0000522620 00000 n +0000524363 00000 n +0000528083 00000 n +0000527892 00000 n +0000524670 00000 n +0000528018 00000 n +0000532444 00000 n +0000532075 00000 n +0000528225 00000 n +0000532379 00000 n +0000532222 00000 n +0000731826 00000 n +0000536380 00000 n +0000535998 00000 n +0000532572 00000 n +0000536315 00000 n +0000536145 00000 n +0000540898 00000 n +0000540533 00000 n +0000536508 00000 n +0000540833 00000 n +0000540680 00000 n +0000544646 00000 n +0000544197 00000 n +0000541040 00000 n +0000544323 00000 n +0000544517 00000 n +0000544581 00000 n +0001157844 00000 n +0000548947 00000 n +0000548581 00000 n +0000544774 00000 n +0000548882 00000 n +0000548728 00000 n +0000554031 00000 n +0000552898 00000 n +0000549075 00000 n +0000553966 00000 n +0000553081 00000 n +0000553237 00000 n +0000553422 00000 n +0000553596 00000 n +0000553781 00000 n +0000640740 00000 n +0000558307 00000 n +0000558116 00000 n +0000554229 00000 n +0000558242 00000 n +0000562260 00000 n +0000562069 00000 n +0000558421 00000 n +0000562195 00000 n +0000566114 00000 n +0000565794 00000 n +0000562374 00000 n +0000565920 00000 n +0000566049 00000 n +0000569878 00000 n +0000569062 00000 n +0000566228 00000 n +0000569555 00000 n +0000569218 00000 n +0000569684 00000 n +0000569813 00000 n +0000569388 00000 n +0001157969 00000 n +0000659573 00000 n +0000574304 00000 n +0000573613 00000 n +0000570035 00000 n +0000574110 00000 n +0000573769 00000 n +0000573939 00000 n +0000574239 00000 n +0000751896 00000 n +0000577652 00000 n +0000577332 00000 n +0000574432 00000 n +0000577458 00000 n +0000577587 00000 n +0000580605 00000 n +0000580414 00000 n +0000577766 00000 n +0000580540 00000 n +0000584611 00000 n +0000584292 00000 n +0000580776 00000 n +0000584418 00000 n +0000588170 00000 n +0000587979 00000 n +0000584768 00000 n +0000588105 00000 n +0000592511 00000 n +0000591697 00000 n +0000588341 00000 n +0000592188 00000 n +0000592317 00000 n +0000591853 00000 n +0000592446 00000 n +0000592014 00000 n +0001158094 00000 n +0000596595 00000 n +0000595971 00000 n +0000592668 00000 n +0000596273 00000 n +0000596402 00000 n +0000596118 00000 n +0000596531 00000 n +0000599815 00000 n +0000599495 00000 n +0000596723 00000 n +0000599621 00000 n +0000599750 00000 n +0000603666 00000 n +0000603000 00000 n +0000599972 00000 n +0000603473 00000 n +0000603601 00000 n +0000603156 00000 n +0000603317 00000 n +0000607215 00000 n +0000606574 00000 n +0000603837 00000 n +0000606891 00000 n +0000606721 00000 n +0000607085 00000 n +0000607150 00000 n +0000611096 00000 n +0000610593 00000 n +0000607400 00000 n +0000610902 00000 n +0000611031 00000 n +0000610740 00000 n +0000615678 00000 n +0000615303 00000 n +0000611267 00000 n +0000615613 00000 n +0000615450 00000 n +0001158219 00000 n +0000728061 00000 n +0000619594 00000 n +0000618956 00000 n +0000615806 00000 n +0000619272 00000 n +0000619401 00000 n +0000619103 00000 n +0000619529 00000 n +0000657690 00000 n +0000622185 00000 n +0000621994 00000 n +0000619721 00000 n +0000622120 00000 n +0000626264 00000 n +0000625817 00000 n +0000622355 00000 n +0000625943 00000 n +0000626199 00000 n +0000630269 00000 n +0000629906 00000 n +0000626378 00000 n +0000630204 00000 n +0000630053 00000 n +0000634441 00000 n +0000634121 00000 n +0000630397 00000 n +0000634247 00000 n +0000634376 00000 n +0000638406 00000 n +0000638215 00000 n +0000634568 00000 n +0000638341 00000 n +0001158344 00000 n +0000640805 00000 n +0000640356 00000 n +0000638533 00000 n +0000640482 00000 n +0000640611 00000 n +0000645519 00000 n +0000644988 00000 n +0000640919 00000 n +0000645454 00000 n +0000645144 00000 n +0000645295 00000 n +0000649846 00000 n +0000648964 00000 n +0000645619 00000 n +0000649265 00000 n +0000649394 00000 n +0000649523 00000 n +0000649652 00000 n +0000649781 00000 n +0000649111 00000 n +0000654284 00000 n +0000653835 00000 n +0000649960 00000 n +0000653961 00000 n +0000654090 00000 n +0000657884 00000 n +0000657435 00000 n +0000654426 00000 n +0000657561 00000 n +0000657819 00000 n +0000659638 00000 n +0000659318 00000 n +0000657998 00000 n +0000659444 00000 n +0001158469 00000 n +0000661250 00000 n +0000661059 00000 n +0000659752 00000 n +0000661185 00000 n +0000662636 00000 n +0000662445 00000 n +0000661351 00000 n +0000662571 00000 n +0000666358 00000 n +0000665779 00000 n +0000662737 00000 n +0000665905 00000 n +0000666034 00000 n +0000666163 00000 n +0000666228 00000 n +0000666293 00000 n +0000670465 00000 n +0000669957 00000 n +0000666472 00000 n +0000670271 00000 n +0000670104 00000 n +0000670400 00000 n +0000948343 00000 n +0000676387 00000 n +0000673480 00000 n +0000670579 00000 n +0000676193 00000 n +0000676322 00000 n +0000673753 00000 n +0000673915 00000 n +0000674077 00000 n +0000674239 00000 n +0000674401 00000 n +0000674563 00000 n +0000674734 00000 n +0000674896 00000 n +0000675059 00000 n +0000675219 00000 n +0000675380 00000 n +0000675543 00000 n +0000675706 00000 n +0000675869 00000 n +0000676032 00000 n +0000681485 00000 n +0000679568 00000 n +0000676501 00000 n +0000681420 00000 n +0000679796 00000 n +0000679957 00000 n +0000680125 00000 n +0000680295 00000 n +0000680456 00000 n +0000680618 00000 n +0000680780 00000 n +0000680942 00000 n +0000681105 00000 n +0000681259 00000 n +0001158594 00000 n +0000686017 00000 n +0000684655 00000 n +0000681613 00000 n +0000685952 00000 n +0000684856 00000 n +0000685010 00000 n +0000685164 00000 n +0000685318 00000 n +0000685472 00000 n +0000685634 00000 n +0000685794 00000 n +0000692025 00000 n +0000689661 00000 n +0000686145 00000 n +0000691833 00000 n +0000689907 00000 n +0000690068 00000 n +0000690230 00000 n +0000690392 00000 n +0000690554 00000 n +0000690708 00000 n +0000690871 00000 n +0000691026 00000 n +0000691191 00000 n +0000691357 00000 n +0000691519 00000 n +0000691673 00000 n +0000696120 00000 n +0000695799 00000 n +0000692153 00000 n +0000695925 00000 n +0000695990 00000 n +0000696055 00000 n +0000698894 00000 n +0000698703 00000 n +0000696262 00000 n +0000698829 00000 n +0000703101 00000 n +0000702031 00000 n +0000699052 00000 n +0000702519 00000 n +0000702648 00000 n +0000702906 00000 n +0000702187 00000 n +0000702357 00000 n +0000702971 00000 n +0000703036 00000 n +0000706552 00000 n +0000706232 00000 n +0000703229 00000 n +0000706358 00000 n +0000706423 00000 n +0000706487 00000 n +0001158719 00000 n +0000710040 00000 n +0000709719 00000 n +0000706653 00000 n +0000709845 00000 n +0000709910 00000 n +0000709975 00000 n +0000713961 00000 n +0000713252 00000 n +0000710155 00000 n +0000713378 00000 n +0000713507 00000 n +0000713572 00000 n +0000713637 00000 n +0000713702 00000 n +0000713767 00000 n +0000713896 00000 n +0000718202 00000 n +0000717365 00000 n +0000714075 00000 n +0000717491 00000 n +0000717556 00000 n +0000717621 00000 n +0000717750 00000 n +0000717815 00000 n +0000717880 00000 n +0000718009 00000 n +0000718074 00000 n +0000718138 00000 n +0000721229 00000 n +0000720527 00000 n +0000718330 00000 n +0000720653 00000 n +0000720780 00000 n +0000720907 00000 n +0000721036 00000 n +0000721164 00000 n +0000723939 00000 n +0000723362 00000 n +0000721428 00000 n +0000723488 00000 n +0000723617 00000 n +0000723746 00000 n +0000723811 00000 n +0000723875 00000 n +0000728126 00000 n +0000727806 00000 n +0000724124 00000 n +0000727932 00000 n +0001158844 00000 n +0000731891 00000 n +0000731131 00000 n +0000728253 00000 n +0000731438 00000 n +0000731567 00000 n +0000731632 00000 n +0000731697 00000 n +0000731278 00000 n +0000735582 00000 n +0000735003 00000 n +0000732005 00000 n +0000735129 00000 n +0000735258 00000 n +0000735387 00000 n +0000735452 00000 n +0000735517 00000 n +0000739196 00000 n +0000738301 00000 n +0000735696 00000 n +0000738613 00000 n +0000738448 00000 n +0000738742 00000 n +0000738807 00000 n +0000738872 00000 n +0000739001 00000 n +0000739066 00000 n +0000739131 00000 n +0000948310 00000 n +0000743353 00000 n +0000742903 00000 n +0000739310 00000 n +0000743029 00000 n +0000743158 00000 n +0000743223 00000 n +0000743288 00000 n +0000745244 00000 n +0000744924 00000 n +0000743481 00000 n +0000745050 00000 n +0000967116 00000 n +0000959832 00000 n +0000966936 00000 n +0000745179 00000 n +0000745727 00000 n +0000745536 00000 n +0000745386 00000 n +0000745662 00000 n +0001158969 00000 n +0000747539 00000 n +0000747092 00000 n +0000745769 00000 n +0000747218 00000 n +0000747347 00000 n +0000747474 00000 n +0000751961 00000 n +0000751018 00000 n +0000747653 00000 n +0000751381 00000 n +0000959511 00000 n +0000950298 00000 n +0000959325 00000 n +0000751165 00000 n +0000751510 00000 n +0000751638 00000 n +0000751767 00000 n +0000753320 00000 n +0000753129 00000 n +0000752202 00000 n +0000753255 00000 n +0000753761 00000 n +0000753570 00000 n +0000753420 00000 n +0000753696 00000 n +0000757075 00000 n +0000755849 00000 n +0000753803 00000 n +0000756366 00000 n +0000756495 00000 n +0000756624 00000 n +0000756753 00000 n +0000756882 00000 n +0000757011 00000 n +0000756005 00000 n +0000756177 00000 n +0000757530 00000 n +0000757339 00000 n +0000757189 00000 n +0000757465 00000 n +0001159094 00000 n +0000760775 00000 n +0000760197 00000 n +0000757572 00000 n +0000760323 00000 n +0000760452 00000 n +0000760581 00000 n +0000760710 00000 n +0000764972 00000 n +0000763753 00000 n +0000760861 00000 n +0000764263 00000 n +0000764392 00000 n +0000764650 00000 n +0000763909 00000 n +0000764088 00000 n +0000764844 00000 n +0000764908 00000 n +0000771862 00000 n +0000768034 00000 n +0000765128 00000 n +0000768160 00000 n +0000768225 00000 n +0000768290 00000 n +0000768355 00000 n +0000768420 00000 n +0000768485 00000 n +0000768550 00000 n +0000768615 00000 n +0000768680 00000 n +0000768745 00000 n +0000768875 00000 n +0000768940 00000 n +0000769005 00000 n +0000769070 00000 n +0000769135 00000 n +0000769200 00000 n +0000769265 00000 n +0000769330 00000 n +0000769395 00000 n +0000769460 00000 n +0000769525 00000 n +0000769590 00000 n +0000769655 00000 n +0000769720 00000 n +0000769785 00000 n +0000769850 00000 n +0000769915 00000 n +0000769980 00000 n +0000770045 00000 n +0000770110 00000 n +0000770175 00000 n +0000770240 00000 n +0000770305 00000 n +0000770370 00000 n +0000770434 00000 n +0000770499 00000 n +0000770564 00000 n +0000770629 00000 n +0000770694 00000 n +0000770759 00000 n +0000770824 00000 n +0000770889 00000 n +0000770954 00000 n +0000771019 00000 n +0000771084 00000 n +0000771149 00000 n +0000771214 00000 n +0000771279 00000 n +0000771344 00000 n +0000771409 00000 n +0000771474 00000 n +0000771539 00000 n +0000771604 00000 n +0000771669 00000 n +0000771734 00000 n +0000771798 00000 n +0000778510 00000 n +0000774946 00000 n +0000771976 00000 n +0000775072 00000 n +0000775137 00000 n +0000775202 00000 n +0000775267 00000 n +0000775332 00000 n +0000775397 00000 n +0000775462 00000 n +0000775527 00000 n +0000775592 00000 n +0000775657 00000 n +0000775722 00000 n +0000775787 00000 n +0000775851 00000 n +0000775916 00000 n +0000775981 00000 n +0000776046 00000 n +0000776111 00000 n +0000776176 00000 n +0000776241 00000 n +0000776306 00000 n +0000776371 00000 n +0000776436 00000 n +0000776501 00000 n +0000776566 00000 n +0000776630 00000 n +0000776695 00000 n +0000776760 00000 n +0000776825 00000 n +0000776890 00000 n +0000776955 00000 n +0000777020 00000 n +0000777085 00000 n +0000777150 00000 n +0000777215 00000 n +0000777280 00000 n +0000777345 00000 n +0000777410 00000 n +0000777475 00000 n +0000777540 00000 n +0000777605 00000 n +0000777669 00000 n +0000777733 00000 n +0000777797 00000 n +0000777862 00000 n +0000777927 00000 n +0000777992 00000 n +0000778057 00000 n +0000778122 00000 n +0000778187 00000 n +0000778252 00000 n +0000778317 00000 n +0000778382 00000 n +0000778446 00000 n +0000784685 00000 n +0000781247 00000 n +0000778624 00000 n +0000781373 00000 n +0000781438 00000 n +0000781503 00000 n +0000781568 00000 n +0000781633 00000 n +0000781698 00000 n +0000781763 00000 n +0000781828 00000 n +0000781893 00000 n +0000781958 00000 n +0000782023 00000 n +0000782088 00000 n +0000782153 00000 n +0000782218 00000 n +0000782283 00000 n +0000782348 00000 n +0000782413 00000 n +0000782478 00000 n +0000782543 00000 n +0000782608 00000 n +0000782673 00000 n +0000782738 00000 n +0000782803 00000 n +0000782868 00000 n +0000782933 00000 n +0000782998 00000 n +0000783063 00000 n +0000783128 00000 n +0000783193 00000 n +0000783258 00000 n +0000783323 00000 n +0000783388 00000 n +0000783453 00000 n +0000783518 00000 n +0000783582 00000 n +0000783647 00000 n +0000783712 00000 n +0000783777 00000 n +0000783842 00000 n +0000783907 00000 n +0000783972 00000 n +0000784037 00000 n +0000784102 00000 n +0000784167 00000 n +0000784232 00000 n +0000784297 00000 n +0000784362 00000 n +0000784427 00000 n +0000784492 00000 n +0000784557 00000 n +0000784621 00000 n +0000790204 00000 n +0000787808 00000 n +0000784799 00000 n +0000787934 00000 n +0000787999 00000 n +0000788064 00000 n +0000788129 00000 n +0000788194 00000 n +0000788259 00000 n +0000788324 00000 n +0000788389 00000 n +0000788454 00000 n +0000788519 00000 n +0000788584 00000 n +0000788649 00000 n +0000788714 00000 n +0000788778 00000 n +0000788843 00000 n +0000788908 00000 n +0000788973 00000 n +0000789038 00000 n +0000789103 00000 n +0000789168 00000 n +0000789233 00000 n +0000789298 00000 n +0000789363 00000 n +0000789428 00000 n +0000789493 00000 n +0000789621 00000 n +0000789750 00000 n +0000789815 00000 n +0000789880 00000 n +0000789945 00000 n +0000790010 00000 n +0000790139 00000 n +0001159219 00000 n +0000793412 00000 n +0000792705 00000 n +0000790331 00000 n +0000792831 00000 n +0000792960 00000 n +0000793089 00000 n +0000793218 00000 n +0000793347 00000 n +0000796904 00000 n +0000796147 00000 n +0000793539 00000 n +0000796454 00000 n +0000796583 00000 n +0000796294 00000 n +0000796711 00000 n +0000796839 00000 n +0000800148 00000 n +0000799570 00000 n +0000797031 00000 n +0000799696 00000 n +0000799825 00000 n +0000799954 00000 n +0000800083 00000 n +0000803057 00000 n +0000802737 00000 n +0000800262 00000 n +0000802863 00000 n +0000802992 00000 n +0000805647 00000 n +0000805198 00000 n +0000803227 00000 n +0000805324 00000 n +0000805453 00000 n +0000805582 00000 n +0000806088 00000 n +0000805897 00000 n +0000805747 00000 n +0000806023 00000 n +0001159344 00000 n +0000808800 00000 n +0000808156 00000 n +0000806130 00000 n +0000808282 00000 n +0000808411 00000 n +0000808540 00000 n +0000808605 00000 n +0000808670 00000 n +0000808735 00000 n +0000813140 00000 n +0000812820 00000 n +0000808914 00000 n +0000812946 00000 n +0000813011 00000 n +0000813076 00000 n +0000816743 00000 n +0000816488 00000 n +0000813296 00000 n +0000816614 00000 n +0000816679 00000 n +0000819994 00000 n +0000819803 00000 n +0000816885 00000 n +0000819929 00000 n +0000823715 00000 n +0000823459 00000 n +0000820122 00000 n +0000823585 00000 n +0000823650 00000 n +0000826700 00000 n +0000825992 00000 n +0000823857 00000 n +0000826118 00000 n +0000826183 00000 n +0000826248 00000 n +0000826313 00000 n +0000826378 00000 n +0000826507 00000 n +0000826572 00000 n +0000826636 00000 n +0001159469 00000 n +0000831369 00000 n +0000831113 00000 n +0000826842 00000 n +0000831239 00000 n +0000831304 00000 n +0000834388 00000 n +0000833615 00000 n +0000831497 00000 n +0000833741 00000 n +0000833806 00000 n +0000833871 00000 n +0000833936 00000 n +0000834065 00000 n +0000834130 00000 n +0000834193 00000 n +0000834258 00000 n +0000834323 00000 n +0000837301 00000 n +0000836786 00000 n +0000834544 00000 n +0000836912 00000 n +0000836977 00000 n +0000837042 00000 n +0000837107 00000 n +0000837172 00000 n +0000837237 00000 n +0000840674 00000 n +0000840094 00000 n +0000837457 00000 n +0000840220 00000 n +0000840349 00000 n +0000840414 00000 n +0000840479 00000 n +0000840544 00000 n +0000840609 00000 n +0000844126 00000 n +0000843870 00000 n +0000840816 00000 n +0000843996 00000 n +0000844061 00000 n +0000847078 00000 n +0000846434 00000 n +0000844254 00000 n +0000846560 00000 n +0000846625 00000 n +0000846690 00000 n +0000846755 00000 n +0000846949 00000 n +0000847014 00000 n +0001159594 00000 n +0000850719 00000 n +0000850398 00000 n +0000847247 00000 n +0000850524 00000 n +0000850589 00000 n +0000850654 00000 n +0000854310 00000 n +0000854119 00000 n +0000850847 00000 n +0000854245 00000 n +0000857776 00000 n +0000857455 00000 n +0000854438 00000 n +0000857581 00000 n +0000857646 00000 n +0000857711 00000 n +0000860434 00000 n +0000859725 00000 n +0000857917 00000 n +0000859851 00000 n +0000859916 00000 n +0000859981 00000 n +0000860046 00000 n +0000860175 00000 n +0000860240 00000 n +0000860305 00000 n +0000860370 00000 n +0000863311 00000 n +0000862601 00000 n +0000860590 00000 n +0000862727 00000 n +0000862792 00000 n +0000862857 00000 n +0000862922 00000 n +0000863116 00000 n +0000863181 00000 n +0000863246 00000 n +0000866883 00000 n +0000866562 00000 n +0000863467 00000 n +0000866688 00000 n +0000866753 00000 n +0000866818 00000 n +0001159719 00000 n +0000870032 00000 n +0000869387 00000 n +0000867011 00000 n +0000869513 00000 n +0000869578 00000 n +0000869643 00000 n +0000869708 00000 n +0000869837 00000 n +0000869902 00000 n +0000869967 00000 n +0000873563 00000 n +0000873242 00000 n +0000870188 00000 n +0000873368 00000 n +0000873433 00000 n +0000873498 00000 n +0000877146 00000 n +0000876955 00000 n +0000873705 00000 n +0000877081 00000 n +0000880631 00000 n +0000880440 00000 n +0000877274 00000 n +0000880566 00000 n +0000883525 00000 n +0000882881 00000 n +0000880773 00000 n +0000883007 00000 n +0000883072 00000 n +0000883137 00000 n +0000883202 00000 n +0000883331 00000 n +0000883396 00000 n +0000883461 00000 n +0000886438 00000 n +0000885733 00000 n +0000883681 00000 n +0000885859 00000 n +0000885924 00000 n +0000885989 00000 n +0000886054 00000 n +0000886119 00000 n +0000886184 00000 n +0000886310 00000 n +0000886375 00000 n +0001159844 00000 n +0000889643 00000 n +0000889258 00000 n +0000886580 00000 n +0000889384 00000 n +0000889449 00000 n +0000889514 00000 n +0000889579 00000 n +0000892945 00000 n +0000892754 00000 n +0000889785 00000 n +0000892880 00000 n +0000896127 00000 n +0000895353 00000 n +0000893073 00000 n +0000895479 00000 n +0000895544 00000 n +0000895609 00000 n +0000895674 00000 n +0000895802 00000 n +0000895867 00000 n +0000895932 00000 n +0000895997 00000 n +0000896062 00000 n +0000899375 00000 n +0000899184 00000 n +0000896283 00000 n +0000899310 00000 n +0000902534 00000 n +0000902149 00000 n +0000899588 00000 n +0000902275 00000 n +0000902340 00000 n +0000902405 00000 n +0000902470 00000 n +0000905086 00000 n +0000904313 00000 n +0000902775 00000 n +0000904439 00000 n +0000904504 00000 n +0000904569 00000 n +0000904698 00000 n +0000904762 00000 n +0000904827 00000 n +0000904892 00000 n +0000904957 00000 n +0000905022 00000 n +0001159969 00000 n +0000909247 00000 n +0000908732 00000 n +0000905242 00000 n +0000908858 00000 n +0000908987 00000 n +0000909052 00000 n +0000909117 00000 n +0000909182 00000 n +0000913463 00000 n +0000913207 00000 n +0000909375 00000 n +0000913333 00000 n +0000913398 00000 n +0000916798 00000 n +0000916607 00000 n +0000913591 00000 n +0000916733 00000 n +0000919416 00000 n +0000918966 00000 n +0000916926 00000 n +0000919092 00000 n +0000919157 00000 n +0000919222 00000 n +0000919287 00000 n +0000919352 00000 n +0000923265 00000 n +0000922685 00000 n +0000919571 00000 n +0000922811 00000 n +0000922940 00000 n +0000923005 00000 n +0000923070 00000 n +0000923135 00000 n +0000923200 00000 n +0000926430 00000 n +0000925720 00000 n +0000923407 00000 n +0000925846 00000 n +0000925911 00000 n +0000925976 00000 n +0000926041 00000 n +0000926170 00000 n +0000926235 00000 n +0000926300 00000 n +0000926365 00000 n +0001160094 00000 n +0000929151 00000 n +0000928895 00000 n +0000926586 00000 n +0000929021 00000 n +0000929086 00000 n +0000932407 00000 n +0000931634 00000 n +0000929279 00000 n +0000931760 00000 n +0000931825 00000 n +0000931890 00000 n +0000931955 00000 n +0000932084 00000 n +0000932149 00000 n +0000932214 00000 n +0000932278 00000 n +0000932343 00000 n +0000935697 00000 n +0000935378 00000 n +0000932563 00000 n +0000935504 00000 n +0000935569 00000 n +0000935634 00000 n +0000939167 00000 n +0000938524 00000 n +0000935853 00000 n +0000938650 00000 n +0000938715 00000 n +0000938844 00000 n +0000938908 00000 n +0000938973 00000 n +0000939038 00000 n +0000939102 00000 n +0000941782 00000 n +0000940815 00000 n +0000939309 00000 n +0000940941 00000 n +0000941006 00000 n +0000941071 00000 n +0000941200 00000 n +0000941265 00000 n +0000941330 00000 n +0000941395 00000 n +0000941460 00000 n +0000941525 00000 n +0000941653 00000 n +0000941718 00000 n +0000944675 00000 n +0000943840 00000 n +0000941938 00000 n +0000943966 00000 n +0000944031 00000 n +0000944096 00000 n +0000944161 00000 n +0000944226 00000 n +0000944291 00000 n +0000944419 00000 n +0000944482 00000 n +0000944546 00000 n +0000944611 00000 n +0001160219 00000 n +0000947419 00000 n +0000946580 00000 n +0000944817 00000 n +0000946706 00000 n +0000946771 00000 n +0000946836 00000 n +0000946901 00000 n +0000947030 00000 n +0000947095 00000 n +0000947160 00000 n +0000947225 00000 n +0000947290 00000 n +0000947355 00000 n +0000948210 00000 n +0000947954 00000 n +0000947561 00000 n +0000948080 00000 n +0000948145 00000 n +0000948409 00000 n +0000959753 00000 n +0000967342 00000 n +0000969642 00000 n +0000969611 00000 n +0000973329 00000 n +0000982769 00000 n +0000993504 00000 n +0001005199 00000 n +0001017916 00000 n +0001037150 00000 n +0001058046 00000 n +0001080194 00000 n +0001098450 00000 n +0001101297 00000 n +0001101067 00000 n +0001128715 00000 n +0001155981 00000 n +0001160317 00000 n +0001160442 00000 n +0001160568 00000 n +0001160694 00000 n +0001160820 00000 n +0001160946 00000 n +0001161026 00000 n +0001161136 00000 n +0001183038 00000 n +0001207231 00000 n +0001207272 00000 n +0001207312 00000 n +0001207446 00000 n trailer << /Size 2760 /Root 2758 0 R /Info 2759 0 R -/ID [<043A5ABB3220F4DDF742DF411E794D61> <043A5ABB3220F4DDF742DF411E794D61>] +/ID [<56A51CE89D72B9E1A2B24B6DA534816F> <56A51CE89D72B9E1A2B24B6DA534816F>] >> startxref -1206368 +1207704 %%EOF diff --git a/contrib/bind9/doc/arm/Makefile.in b/contrib/bind9/doc/arm/Makefile.in index c003e92..3ecf4af 100644 --- a/contrib/bind9/doc/arm/Makefile.in +++ b/contrib/bind9/doc/arm/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004-2007, 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004-2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2001, 2002 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/doc/arm/man.arpaname.html b/contrib/bind9/doc/arm/man.arpaname.html index 44f1dbf..814e0b8 100644 --- a/contrib/bind9/doc/arm/man.arpaname.html +++ b/contrib/bind9/doc/arm/man.arpaname.html @@ -50,20 +50,20 @@ <div class="cmdsynopsis"><p><code class="command">arpaname</code> {<em class="replaceable"><code>ipaddress </code></em>...}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2614792"></a><h2>DESCRIPTION</h2> +<a name="id2618405"></a><h2>DESCRIPTION</h2> <p> <span><strong class="command">arpaname</strong></span> translates IP addresses (IPv4 and IPv6) to the corresponding IN-ADDR.ARPA or IP6.ARPA names. </p> </div> <div class="refsect1" lang="en"> -<a name="id2614807"></a><h2>SEE ALSO</h2> +<a name="id2618420"></a><h2>SEE ALSO</h2> <p> <em class="citetitle">BIND 9 Administrator Reference Manual</em>. </p> </div> <div class="refsect1" lang="en"> -<a name="id2652026"></a><h2>AUTHOR</h2> +<a name="id2618434"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.ddns-confgen.html b/contrib/bind9/doc/arm/man.ddns-confgen.html index ff6d9be..3724304 100644 --- a/contrib/bind9/doc/arm/man.ddns-confgen.html +++ b/contrib/bind9/doc/arm/man.ddns-confgen.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">ddns-confgen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [ -s <em class="replaceable"><code>name</code></em> | -z <em class="replaceable"><code>zone</code></em> ] [<code class="option">-q</code>] [name]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2651677"></a><h2>DESCRIPTION</h2> +<a name="id2641910"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">ddns-confgen</strong></span> generates a key for use by <span><strong class="command">nsupdate</strong></span> and <span><strong class="command">named</strong></span>. It simplifies configuration @@ -77,7 +77,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2651765"></a><h2>OPTIONS</h2> +<a name="id2641997"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt> <dd><p> @@ -144,7 +144,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2651965"></a><h2>SEE ALSO</h2> +<a name="id2642608"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">nsupdate</span>(1)</span>, <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>, <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, @@ -152,7 +152,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2652004"></a><h2>AUTHOR</h2> +<a name="id2642646"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.dig.html b/contrib/bind9/doc/arm/man.dig.html index b028d77..e5796ca 100644 --- a/contrib/bind9/doc/arm/man.dig.html +++ b/contrib/bind9/doc/arm/man.dig.html @@ -52,7 +52,7 @@ <div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2610001"></a><h2>DESCRIPTION</h2> +<a name="id2609644"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dig</strong></span> (domain information groper) is a flexible tool for interrogating DNS name servers. It performs DNS lookups and @@ -98,7 +98,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2610096"></a><h2>SIMPLE USAGE</h2> +<a name="id2609808"></a><h2>SIMPLE USAGE</h2> <p> A typical invocation of <span><strong class="command">dig</strong></span> looks like: </p> @@ -144,7 +144,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2610889"></a><h2>OPTIONS</h2> +<a name="id2610055"></a><h2>OPTIONS</h2> <p> The <code class="option">-b</code> option sets the source IP address of the query to <em class="parameter"><code>address</code></em>. This must be a valid @@ -248,7 +248,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2662636"></a><h2>QUERY OPTIONS</h2> +<a name="id2662690"></a><h2>QUERY OPTIONS</h2> <p><span><strong class="command">dig</strong></span> provides a number of query options which affect the way in which lookups are made and the results displayed. Some of @@ -579,7 +579,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2663651"></a><h2>MULTIPLE QUERIES</h2> +<a name="id2663772"></a><h2>MULTIPLE QUERIES</h2> <p> The BIND 9 implementation of <span><strong class="command">dig </strong></span> supports @@ -625,7 +625,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr </p> </div> <div class="refsect1" lang="en"> -<a name="id2663804"></a><h2>IDN SUPPORT</h2> +<a name="id2663858"></a><h2>IDN SUPPORT</h2> <p> If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized domain name) support, it can accept and display non-ASCII domain names. @@ -639,14 +639,14 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr </p> </div> <div class="refsect1" lang="en"> -<a name="id2663833"></a><h2>FILES</h2> +<a name="id2663886"></a><h2>FILES</h2> <p><code class="filename">/etc/resolv.conf</code> </p> <p><code class="filename">${HOME}/.digrc</code> </p> </div> <div class="refsect1" lang="en"> -<a name="id2663854"></a><h2>SEE ALSO</h2> +<a name="id2663908"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>, <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, @@ -654,7 +654,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr </p> </div> <div class="refsect1" lang="en"> -<a name="id2663892"></a><h2>BUGS</h2> +<a name="id2663945"></a><h2>BUGS</h2> <p> There are probably too many query options. </p> diff --git a/contrib/bind9/doc/arm/man.dnssec-dsfromkey.html b/contrib/bind9/doc/arm/man.dnssec-dsfromkey.html index 302125c..d63d6da 100644 --- a/contrib/bind9/doc/arm/man.dnssec-dsfromkey.html +++ b/contrib/bind9/doc/arm/man.dnssec-dsfromkey.html @@ -51,14 +51,14 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> {-s} [<code class="option">-1</code>] [<code class="option">-2</code>] [<code class="option">-a <em class="replaceable"><code>alg</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-s</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-A</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] {dnsname}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2611846"></a><h2>DESCRIPTION</h2> +<a name="id2611633"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-dsfromkey</strong></span> outputs the Delegation Signer (DS) resource record (RR), as defined in RFC 3658 and RFC 4509, for the given key(s). </p> </div> <div class="refsect1" lang="en"> -<a name="id2611860"></a><h2>OPTIONS</h2> +<a name="id2611646"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-1</span></dt> <dd><p> @@ -73,7 +73,8 @@ <dd><p> Select the digest algorithm. The value of <code class="option">algorithm</code> must be one of SHA-1 (SHA1), - SHA-256 (SHA256) or GOST. These values are case insensitive. + SHA-256 (SHA256), GOST or SHA-384 (SHA384). + These values are case insensitive. </p></dd> <dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt> <dd><p> @@ -119,7 +120,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2612526"></a><h2>EXAMPLE</h2> +<a name="id2611835"></a><h2>EXAMPLE</h2> <p> To build the SHA-256 DS RR from the <strong class="userinput"><code>Kexample.com.+003+26160</code></strong> @@ -134,7 +135,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2612563"></a><h2>FILES</h2> +<a name="id2611872"></a><h2>FILES</h2> <p> The keyfile can be designed by the key identification <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name @@ -148,13 +149,13 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2612604"></a><h2>CAVEAT</h2> +<a name="id2611913"></a><h2>CAVEAT</h2> <p> A keyfile error can give a "file not found" even if the file exists. </p> </div> <div class="refsect1" lang="en"> -<a name="id2612614"></a><h2>SEE ALSO</h2> +<a name="id2611923"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>, @@ -164,7 +165,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2612858"></a><h2>AUTHOR</h2> +<a name="id2611962"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.dnssec-keyfromlabel.html b/contrib/bind9/doc/arm/man.dnssec-keyfromlabel.html index 8b16a79..38cba98 100644 --- a/contrib/bind9/doc/arm/man.dnssec-keyfromlabel.html +++ b/contrib/bind9/doc/arm/man.dnssec-keyfromlabel.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-keyfromlabel</code> {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-3</code>] [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-k</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-y</code>] {name}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2613302"></a><h2>DESCRIPTION</h2> +<a name="id2612614"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-keyfromlabel</strong></span> gets keys with the given label from a crypto hardware and builds key files for DNSSEC (Secure DNS), as defined in RFC 2535 @@ -63,14 +63,15 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2613322"></a><h2>OPTIONS</h2> +<a name="id2612634"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt> <dd> <p> Selects the cryptographic algorithm. The value of <code class="option">algorithm</code> must be one of RSAMD5, RSASHA1, - DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512 or ECCGOST. + DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST, + ECDSAP256SHA256 or ECDSAP384SHA384. These values are case insensitive. </p> <p> @@ -182,7 +183,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2614168"></a><h2>TIMING OPTIONS</h2> +<a name="id2613344"></a><h2>TIMING OPTIONS</h2> <p> Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '-', it is interpreted as @@ -229,7 +230,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2614266"></a><h2>GENERATED KEY FILES</h2> +<a name="id2615080"></a><h2>GENERATED KEY FILES</h2> <p> When <span><strong class="command">dnssec-keyfromlabel</strong></span> completes successfully, @@ -268,7 +269,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2615589"></a><h2>SEE ALSO</h2> +<a name="id2615447"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>, @@ -276,7 +277,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2615622"></a><h2>AUTHOR</h2> +<a name="id2615480"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.dnssec-keygen.html b/contrib/bind9/doc/arm/man.dnssec-keygen.html index be8e0f5..3a3a839 100644 --- a/contrib/bind9/doc/arm/man.dnssec-keygen.html +++ b/contrib/bind9/doc/arm/man.dnssec-keygen.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-keygen</code> [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-3</code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-C</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-e</code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-g <em class="replaceable"><code>generator</code></em></code>] [<code class="option">-h</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-k</code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-q</code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S <em class="replaceable"><code>key</code></em></code>] [<code class="option">-s <em class="replaceable"><code>strength</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-z</code>] {name}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2614596"></a><h2>DESCRIPTION</h2> +<a name="id2613979"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-keygen</strong></span> generates keys for DNSSEC (Secure DNS), as defined in RFC 2535 and RFC 4034. It can also generate keys for use with @@ -64,14 +64,15 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2614684"></a><h2>OPTIONS</h2> +<a name="id2614068"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt> <dd> <p> Selects the cryptographic algorithm. For DNSSEC keys, the value of <code class="option">algorithm</code> must be one of RSAMD5, RSASHA1, - DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512 or ECCGOST. + DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECCGOST, + ECDSAP256SHA256 or ECDSAP384SHA384. For TSIG/TKEY, the value must be DH (Diffie Hellman), HMAC-MD5, HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384, or HMAC-SHA512. These values are @@ -102,7 +103,8 @@ between 512 and 2048 bits. Diffie Hellman keys must be between 128 and 4096 bits. DSA keys must be between 512 and 1024 bits and an exact multiple of 64. HMAC keys must be - between 1 and 512 bits. + between 1 and 512 bits. Elliptic curve algorithms don't need + this parameter. </p> <p> The key size does not need to be specified if using a default @@ -129,7 +131,8 @@ Use an NSEC3-capable algorithm to generate a DNSSEC key. If this option is used and no algorithm is explicitly set on the command line, NSEC3RSASHA1 will be used by - default. Note that RSASHA256, RSASHA512 and ECCGOST algorithms + default. Note that RSASHA256, RSASHA512, ECCGOST, + ECDSAP256SHA256 and ECDSAP384SHA384 algorithms are NSEC3-capable. </p></dd> <dt><span class="term">-C</span></dt> @@ -266,7 +269,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2668243"></a><h2>TIMING OPTIONS</h2> +<a name="id2666124"></a><h2>TIMING OPTIONS</h2> <p> Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '-', it is interpreted as @@ -337,7 +340,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2668501"></a><h2>GENERATED KEYS</h2> +<a name="id2666314"></a><h2>GENERATED KEYS</h2> <p> When <span><strong class="command">dnssec-keygen</strong></span> completes successfully, @@ -383,7 +386,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2668609"></a><h2>EXAMPLE</h2> +<a name="id2666422"></a><h2>EXAMPLE</h2> <p> To generate a 768-bit DSA key for the domain <strong class="userinput"><code>example.com</code></strong>, the following command would be @@ -404,7 +407,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2668665"></a><h2>SEE ALSO</h2> +<a name="id2666478"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>, <em class="citetitle">RFC 2539</em>, @@ -413,7 +416,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2668696"></a><h2>AUTHOR</h2> +<a name="id2666509"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.dnssec-revoke.html b/contrib/bind9/doc/arm/man.dnssec-revoke.html index f78532f..e1ff637 100644 --- a/contrib/bind9/doc/arm/man.dnssec-revoke.html +++ b/contrib/bind9/doc/arm/man.dnssec-revoke.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2615650"></a><h2>DESCRIPTION</h2> +<a name="id2614416"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-revoke</strong></span> reads a DNSSEC key file, sets the REVOKED bit on the key as defined in RFC 5011, and creates a new pair of key files containing the @@ -58,7 +58,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2615664"></a><h2>OPTIONS</h2> +<a name="id2614429"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-h</span></dt> <dd><p> @@ -96,14 +96,14 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2615784"></a><h2>SEE ALSO</h2> +<a name="id2614550"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>, <em class="citetitle">RFC 5011</em>. </p> </div> <div class="refsect1" lang="en"> -<a name="id2615809"></a><h2>AUTHOR</h2> +<a name="id2614574"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.dnssec-settime.html b/contrib/bind9/doc/arm/man.dnssec-settime.html index 8d4b150..cd14fe2 100644 --- a/contrib/bind9/doc/arm/man.dnssec-settime.html +++ b/contrib/bind9/doc/arm/man.dnssec-settime.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-settime</code> [<code class="option">-f</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] {keyfile}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2615924"></a><h2>DESCRIPTION</h2> +<a name="id2614758"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-settime</strong></span> reads a DNSSEC private key file and sets the key timing metadata as specified by the <code class="option">-P</code>, <code class="option">-A</code>, @@ -76,7 +76,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2616051"></a><h2>OPTIONS</h2> +<a name="id2614817"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-f</span></dt> <dd><p> @@ -109,7 +109,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2616145"></a><h2>TIMING OPTIONS</h2> +<a name="id2615184"></a><h2>TIMING OPTIONS</h2> <p> Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the argument begins with a '+' or '-', it is interpreted as @@ -188,7 +188,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2616488"></a><h2>PRINTING OPTIONS</h2> +<a name="id2615322"></a><h2>PRINTING OPTIONS</h2> <p> <span><strong class="command">dnssec-settime</strong></span> can also be used to print the timing metadata associated with a key. @@ -214,7 +214,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2616636"></a><h2>SEE ALSO</h2> +<a name="id2615607"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>, @@ -222,7 +222,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2617693"></a><h2>AUTHOR</h2> +<a name="id2615640"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.dnssec-signzone.html b/contrib/bind9/doc/arm/man.dnssec-signzone.html index cd7a80b..3132c54 100644 --- a/contrib/bind9/doc/arm/man.dnssec-signzone.html +++ b/contrib/bind9/doc/arm/man.dnssec-signzone.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">dnssec-signzone</code> [<code class="option">-a</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-e <em class="replaceable"><code>end-time</code></em></code>] [<code class="option">-f <em class="replaceable"><code>output-file</code></em></code>] [<code class="option">-g</code>] [<code class="option">-h</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-j <em class="replaceable"><code>jitter</code></em></code>] [<code class="option">-N <em class="replaceable"><code>soa-serial-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-O <em class="replaceable"><code>output-format</code></em></code>] [<code class="option">-p</code>] [<code class="option">-P</code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-S</code>] [<code class="option">-s <em class="replaceable"><code>start-time</code></em></code>] [<code class="option">-T <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-t</code>] [<code class="option">-u</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-x</code>] [<code class="option">-z</code>] [<code class="option">-3 <em class="replaceable"><code>salt</code></em></code>] [<code class="option">-H <em class="replaceable"><code>iterations</code></em></code>] [<code class="option">-A</code>] {zonefile} [key...]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2617803"></a><h2>DESCRIPTION</h2> +<a name="id2616228"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">dnssec-signzone</strong></span> signs a zone. It generates NSEC and RRSIG records and produces a signed version of the @@ -61,7 +61,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2617822"></a><h2>OPTIONS</h2> +<a name="id2616247"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-a</span></dt> <dd><p> @@ -397,7 +397,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2672553"></a><h2>EXAMPLE</h2> +<a name="id2667564"></a><h2>EXAMPLE</h2> <p> The following command signs the <strong class="userinput"><code>example.com</code></strong> zone with the DSA key generated by <span><strong class="command">dnssec-keygen</strong></span> @@ -427,14 +427,14 @@ db.example.com.signed %</pre> </div> <div class="refsect1" lang="en"> -<a name="id2672632"></a><h2>SEE ALSO</h2> +<a name="id2667643"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>, <em class="citetitle">RFC 4033</em>. </p> </div> <div class="refsect1" lang="en"> -<a name="id2672657"></a><h2>AUTHOR</h2> +<a name="id2667668"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.genrandom.html b/contrib/bind9/doc/arm/man.genrandom.html index d046423..0b72a6e 100644 --- a/contrib/bind9/doc/arm/man.genrandom.html +++ b/contrib/bind9/doc/arm/man.genrandom.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">genrandom</code> [<code class="option">-n <em class="replaceable"><code>number</code></em></code>] {<em class="replaceable"><code>size</code></em>} {<em class="replaceable"><code>filename</code></em>}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2652195"></a><h2>DESCRIPTION</h2> +<a name="id2642837"></a><h2>DESCRIPTION</h2> <p> <span><strong class="command">genrandom</strong></span> generates a file or a set of files containing a specified quantity @@ -59,7 +59,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2652210"></a><h2>ARGUMENTS</h2> +<a name="id2642852"></a><h2>ARGUMENTS</h2> <div class="variablelist"><dl> <dt><span class="term">-n <em class="replaceable"><code>number</code></em></span></dt> <dd><p> @@ -77,14 +77,14 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2652270"></a><h2>SEE ALSO</h2> +<a name="id2642913"></a><h2>SEE ALSO</h2> <p> <span class="citerefentry"><span class="refentrytitle">rand</span>(3)</span>, <span class="citerefentry"><span class="refentrytitle">arc4random</span>(3)</span> </p> </div> <div class="refsect1" lang="en"> -<a name="id2652980"></a><h2>AUTHOR</h2> +<a name="id2642939"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.host.html b/contrib/bind9/doc/arm/man.host.html index 90a7c9f..dd70d66 100644 --- a/contrib/bind9/doc/arm/man.host.html +++ b/contrib/bind9/doc/arm/man.host.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">host</code> [<code class="option">-aCdlnrsTwv</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-N <em class="replaceable"><code>ndots</code></em></code>] [<code class="option">-R <em class="replaceable"><code>number</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-W <em class="replaceable"><code>wait</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] {name} [server]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2611091"></a><h2>DESCRIPTION</h2> +<a name="id2610871"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">host</strong></span> is a simple utility for performing DNS lookups. It is normally used to convert names to IP addresses and vice versa. @@ -202,7 +202,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2611537"></a><h2>IDN SUPPORT</h2> +<a name="id2611317"></a><h2>IDN SUPPORT</h2> <p> If <span><strong class="command">host</strong></span> has been built with IDN (internationalized domain name) support, it can accept and display non-ASCII domain names. @@ -216,12 +216,12 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2611565"></a><h2>FILES</h2> +<a name="id2611346"></a><h2>FILES</h2> <p><code class="filename">/etc/resolv.conf</code> </p> </div> <div class="refsect1" lang="en"> -<a name="id2611579"></a><h2>SEE ALSO</h2> +<a name="id2611360"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">dig</span>(1)</span>, <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>. </p> diff --git a/contrib/bind9/doc/arm/man.isc-hmac-fixup.html b/contrib/bind9/doc/arm/man.isc-hmac-fixup.html index 6bed852..d089af0 100644 --- a/contrib/bind9/doc/arm/man.isc-hmac-fixup.html +++ b/contrib/bind9/doc/arm/man.isc-hmac-fixup.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">isc-hmac-fixup</code> {<em class="replaceable"><code>algorithm</code></em>} {<em class="replaceable"><code>secret</code></em>}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2615000"></a><h2>DESCRIPTION</h2> +<a name="id2619705"></a><h2>DESCRIPTION</h2> <p> Versions of BIND 9 up to and including BIND 9.6 had a bug causing HMAC-SHA* TSIG keys which were longer than the digest length of the @@ -76,7 +76,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2653052"></a><h2>SECURITY CONSIDERATIONS</h2> +<a name="id2643899"></a><h2>SECURITY CONSIDERATIONS</h2> <p> Secrets that have been converted by <span><strong class="command">isc-hmac-fixup</strong></span> are shortened, but as this is how the HMAC protocol works in @@ -87,14 +87,14 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2653068"></a><h2>SEE ALSO</h2> +<a name="id2643915"></a><h2>SEE ALSO</h2> <p> <em class="citetitle">BIND 9 Administrator Reference Manual</em>, <em class="citetitle">RFC 2104</em>. </p> </div> <div class="refsect1" lang="en"> -<a name="id2653085"></a><h2>AUTHOR</h2> +<a name="id2643932"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.named-checkconf.html b/contrib/bind9/doc/arm/man.named-checkconf.html index 6397402..d3dc621 100644 --- a/contrib/bind9/doc/arm/man.named-checkconf.html +++ b/contrib/bind9/doc/arm/man.named-checkconf.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">named-checkconf</code> [<code class="option">-h</code>] [<code class="option">-v</code>] [<code class="option">-j</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] {filename} [<code class="option">-p</code>] [<code class="option">-z</code>]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2617986"></a><h2>DESCRIPTION</h2> +<a name="id2617093"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">named-checkconf</strong></span> checks the syntax, but not the semantics, of a <span><strong class="command">named</strong></span> configuration file. The file is parsed @@ -70,7 +70,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2618056"></a><h2>OPTIONS</h2> +<a name="id2617163"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-h</span></dt> <dd><p> @@ -109,21 +109,21 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2618190"></a><h2>RETURN VALUES</h2> +<a name="id2617298"></a><h2>RETURN VALUES</h2> <p><span><strong class="command">named-checkconf</strong></span> returns an exit status of 1 if errors were detected and 0 otherwise. </p> </div> <div class="refsect1" lang="en"> -<a name="id2618204"></a><h2>SEE ALSO</h2> +<a name="id2617312"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>, <em class="citetitle">BIND 9 Administrator Reference Manual</em>. </p> </div> <div class="refsect1" lang="en"> -<a name="id2618234"></a><h2>AUTHOR</h2> +<a name="id2617341"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.named-checkzone.html b/contrib/bind9/doc/arm/man.named-checkzone.html index dcaa061..12b7897 100644 --- a/contrib/bind9/doc/arm/man.named-checkzone.html +++ b/contrib/bind9/doc/arm/man.named-checkzone.html @@ -51,7 +51,7 @@ <div class="cmdsynopsis"><p><code class="command">named-compilezone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-r <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {<code class="option">-o <em class="replaceable"><code>filename</code></em></code>} {zonename} {filename}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2633185"></a><h2>DESCRIPTION</h2> +<a name="id2618775"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">named-checkzone</strong></span> checks the syntax and integrity of a zone file. It performs the same checks as <span><strong class="command">named</strong></span> does when loading a @@ -71,7 +71,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2633235"></a><h2>OPTIONS</h2> +<a name="id2618825"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-d</span></dt> <dd><p> @@ -265,14 +265,14 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2673464"></a><h2>RETURN VALUES</h2> +<a name="id2671342"></a><h2>RETURN VALUES</h2> <p><span><strong class="command">named-checkzone</strong></span> returns an exit status of 1 if errors were detected and 0 otherwise. </p> </div> <div class="refsect1" lang="en"> -<a name="id2673478"></a><h2>SEE ALSO</h2> +<a name="id2671356"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>, <em class="citetitle">RFC 1035</em>, @@ -280,7 +280,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2673511"></a><h2>AUTHOR</h2> +<a name="id2671389"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.named-journalprint.html b/contrib/bind9/doc/arm/man.named-journalprint.html index 3eed5e8..c6d1b11 100644 --- a/contrib/bind9/doc/arm/man.named-journalprint.html +++ b/contrib/bind9/doc/arm/man.named-journalprint.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">named-journalprint</code> {<em class="replaceable"><code>journal</code></em>}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2612358"></a><h2>DESCRIPTION</h2> +<a name="id2616312"></a><h2>DESCRIPTION</h2> <p> <span><strong class="command">named-journalprint</strong></span> prints the contents of a zone journal file in a human-readable @@ -76,7 +76,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2638618"></a><h2>SEE ALSO</h2> +<a name="id2621956"></a><h2>SEE ALSO</h2> <p> <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">nsupdate</span>(8)</span>, @@ -84,7 +84,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2638649"></a><h2>AUTHOR</h2> +<a name="id2621987"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.named.html b/contrib/bind9/doc/arm/man.named.html index aa1f2670..729a9af 100644 --- a/contrib/bind9/doc/arm/man.named.html +++ b/contrib/bind9/doc/arm/man.named.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine-name</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-S <em class="replaceable"><code>#max-socks</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-V</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2635533"></a><h2>DESCRIPTION</h2> +<a name="id2619008"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">named</strong></span> is a Domain Name System (DNS) server, part of the BIND 9 distribution from ISC. For more @@ -65,7 +65,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2635564"></a><h2>OPTIONS</h2> +<a name="id2619038"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-4</span></dt> <dd><p> @@ -246,7 +246,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2660284"></a><h2>SIGNALS</h2> +<a name="id2638843"></a><h2>SIGNALS</h2> <p> In routine operation, signals should not be used to control the nameserver; <span><strong class="command">rndc</strong></span> should be used @@ -267,7 +267,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2660334"></a><h2>CONFIGURATION</h2> +<a name="id2660602"></a><h2>CONFIGURATION</h2> <p> The <span><strong class="command">named</strong></span> configuration file is too complex to describe in detail here. A complete description is provided @@ -284,7 +284,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2660384"></a><h2>FILES</h2> +<a name="id2660651"></a><h2>FILES</h2> <div class="variablelist"><dl> <dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt> <dd><p> @@ -297,7 +297,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2660427"></a><h2>SEE ALSO</h2> +<a name="id2660695"></a><h2>SEE ALSO</h2> <p><em class="citetitle">RFC 1033</em>, <em class="citetitle">RFC 1034</em>, <em class="citetitle">RFC 1035</em>, @@ -310,7 +310,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2675585"></a><h2>AUTHOR</h2> +<a name="id2675716"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.nsec3hash.html b/contrib/bind9/doc/arm/man.nsec3hash.html index 53063a9..d266a22 100644 --- a/contrib/bind9/doc/arm/man.nsec3hash.html +++ b/contrib/bind9/doc/arm/man.nsec3hash.html @@ -48,7 +48,7 @@ <div class="cmdsynopsis"><p><code class="command">nsec3hash</code> {<em class="replaceable"><code>salt</code></em>} {<em class="replaceable"><code>algorithm</code></em>} {<em class="replaceable"><code>iterations</code></em>} {<em class="replaceable"><code>domain</code></em>}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2653133"></a><h2>DESCRIPTION</h2> +<a name="id2643980"></a><h2>DESCRIPTION</h2> <p> <span><strong class="command">nsec3hash</strong></span> generates an NSEC3 hash based on a set of NSEC3 parameters. This can be used to check the validity @@ -56,7 +56,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2653148"></a><h2>ARGUMENTS</h2> +<a name="id2643995"></a><h2>ARGUMENTS</h2> <div class="variablelist"><dl> <dt><span class="term">salt</span></dt> <dd><p> @@ -80,14 +80,14 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2653210"></a><h2>SEE ALSO</h2> +<a name="id2644125"></a><h2>SEE ALSO</h2> <p> <em class="citetitle">BIND 9 Administrator Reference Manual</em>, <em class="citetitle">RFC 5155</em>. </p> </div> <div class="refsect1" lang="en"> -<a name="id2653227"></a><h2>AUTHOR</h2> +<a name="id2644142"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.nsupdate.html b/contrib/bind9/doc/arm/man.nsupdate.html index fde52b2..1542215 100644 --- a/contrib/bind9/doc/arm/man.nsupdate.html +++ b/contrib/bind9/doc/arm/man.nsupdate.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">nsupdate</code> [<code class="option">-d</code>] [<code class="option">-D</code>] [[<code class="option">-g</code>] | [<code class="option">-o</code>] | [<code class="option">-l</code>] | [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]keyname:secret</code></em></code>] | [<code class="option">-k <em class="replaceable"><code>keyfile</code></em></code>]] [<code class="option">-t <em class="replaceable"><code>timeout</code></em></code>] [<code class="option">-u <em class="replaceable"><code>udptimeout</code></em></code>] [<code class="option">-r <em class="replaceable"><code>udpretries</code></em></code>] [<code class="option">-R <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-v</code>] [filename]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2639154"></a><h2>DESCRIPTION</h2> +<a name="id2626656"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">nsupdate</strong></span> is used to submit Dynamic DNS Update requests as defined in RFC 2136 to a name server. @@ -210,7 +210,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2639897"></a><h2>INPUT FORMAT</h2> +<a name="id2633475"></a><h2>INPUT FORMAT</h2> <p><span><strong class="command">nsupdate</strong></span> reads input from <em class="parameter"><code>filename</code></em> @@ -498,7 +498,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2678629"></a><h2>EXAMPLES</h2> +<a name="id2678828"></a><h2>EXAMPLES</h2> <p> The examples below show how <span><strong class="command">nsupdate</strong></span> @@ -552,7 +552,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2678679"></a><h2>FILES</h2> +<a name="id2678878"></a><h2>FILES</h2> <div class="variablelist"><dl> <dt><span class="term"><code class="constant">/etc/resolv.conf</code></span></dt> <dd><p> @@ -575,7 +575,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2678762"></a><h2>SEE ALSO</h2> +<a name="id2678962"></a><h2>SEE ALSO</h2> <p> <em class="citetitle">RFC 2136</em>, <em class="citetitle">RFC 3007</em>, @@ -590,7 +590,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2678820"></a><h2>BUGS</h2> +<a name="id2679019"></a><h2>BUGS</h2> <p> The TSIG key is redundantly stored in two separate files. This is a consequence of nsupdate using the DST library diff --git a/contrib/bind9/doc/arm/man.rndc-confgen.html b/contrib/bind9/doc/arm/man.rndc-confgen.html index 9fbc795..b245907 100644 --- a/contrib/bind9/doc/arm/man.rndc-confgen.html +++ b/contrib/bind9/doc/arm/man.rndc-confgen.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">rndc-confgen</code> [<code class="option">-a</code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-c <em class="replaceable"><code>keyfile</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [<code class="option">-s <em class="replaceable"><code>address</code></em></code>] [<code class="option">-t <em class="replaceable"><code>chrootdir</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>]</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2642617"></a><h2>DESCRIPTION</h2> +<a name="id2641110"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">rndc-confgen</strong></span> generates configuration files for <span><strong class="command">rndc</strong></span>. It can be used as a @@ -66,7 +66,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2642683"></a><h2>OPTIONS</h2> +<a name="id2641176"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-a</span></dt> <dd> @@ -173,7 +173,7 @@ </dl></div> </div> <div class="refsect1" lang="en"> -<a name="id2650101"></a><h2>EXAMPLES</h2> +<a name="id2641835"></a><h2>EXAMPLES</h2> <p> To allow <span><strong class="command">rndc</strong></span> to be used with no manual configuration, run @@ -190,7 +190,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2652410"></a><h2>SEE ALSO</h2> +<a name="id2643189"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>, <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, @@ -198,7 +198,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2652449"></a><h2>AUTHOR</h2> +<a name="id2643842"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.rndc.conf.html b/contrib/bind9/doc/arm/man.rndc.conf.html index ad84d76..8a3d4e2 100644 --- a/contrib/bind9/doc/arm/man.rndc.conf.html +++ b/contrib/bind9/doc/arm/man.rndc.conf.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">rndc.conf</code> </p></div> </div> <div class="refsect1" lang="en"> -<a name="id2641106"></a><h2>DESCRIPTION</h2> +<a name="id2639872"></a><h2>DESCRIPTION</h2> <p><code class="filename">rndc.conf</code> is the configuration file for <span><strong class="command">rndc</strong></span>, the BIND 9 name server control utility. This file has a similar structure and syntax to @@ -135,7 +135,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2641346"></a><h2>EXAMPLE</h2> +<a name="id2640180"></a><h2>EXAMPLE</h2> <pre class="programlisting"> options { default-server localhost; @@ -209,7 +209,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2641672"></a><h2>NAME SERVER CONFIGURATION</h2> +<a name="id2640301"></a><h2>NAME SERVER CONFIGURATION</h2> <p> The name server must be configured to accept rndc connections and to recognize the key specified in the <code class="filename">rndc.conf</code> @@ -219,7 +219,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2641698"></a><h2>SEE ALSO</h2> +<a name="id2640327"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">mmencode</span>(1)</span>, @@ -227,7 +227,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2642419"></a><h2>AUTHOR</h2> +<a name="id2640365"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/arm/man.rndc.html b/contrib/bind9/doc/arm/man.rndc.html index 41f4617..0583287 100644 --- a/contrib/bind9/doc/arm/man.rndc.html +++ b/contrib/bind9/doc/arm/man.rndc.html @@ -50,7 +50,7 @@ <div class="cmdsynopsis"><p><code class="command">rndc</code> [<code class="option">-b <em class="replaceable"><code>source-address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key-file</code></em></code>] [<code class="option">-s <em class="replaceable"><code>server</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y <em class="replaceable"><code>key_id</code></em></code>] {command}</p></div> </div> <div class="refsect1" lang="en"> -<a name="id2640665"></a><h2>DESCRIPTION</h2> +<a name="id2638953"></a><h2>DESCRIPTION</h2> <p><span><strong class="command">rndc</strong></span> controls the operation of a name server. It supersedes the <span><strong class="command">ndc</strong></span> utility @@ -79,7 +79,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2640715"></a><h2>OPTIONS</h2> +<a name="id2639003"></a><h2>OPTIONS</h2> <div class="variablelist"><dl> <dt><span class="term">-b <em class="replaceable"><code>source-address</code></em></span></dt> <dd><p> @@ -151,7 +151,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2640940"></a><h2>LIMITATIONS</h2> +<a name="id2639228"></a><h2>LIMITATIONS</h2> <p><span><strong class="command">rndc</strong></span> does not yet support all the commands of the BIND 8 <span><strong class="command">ndc</strong></span> utility. @@ -165,7 +165,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2640971"></a><h2>SEE ALSO</h2> +<a name="id2639259"></a><h2>SEE ALSO</h2> <p><span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>, <span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>, <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, @@ -175,7 +175,7 @@ </p> </div> <div class="refsect1" lang="en"> -<a name="id2641027"></a><h2>AUTHOR</h2> +<a name="id2639315"></a><h2>AUTHOR</h2> <p><span class="corpauthor">Internet Systems Consortium</span> </p> </div> diff --git a/contrib/bind9/doc/misc/Makefile.in b/contrib/bind9/doc/misc/Makefile.in index ebd16aa..0ddd14d 100644 --- a/contrib/bind9/doc/misc/Makefile.in +++ b/contrib/bind9/doc/misc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007, 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/doc/misc/format-options.pl b/contrib/bind9/doc/misc/format-options.pl index b0b8d52..c405ee2 100644 --- a/contrib/bind9/doc/misc/format-options.pl +++ b/contrib/bind9/doc/misc/format-options.pl @@ -1,6 +1,6 @@ #!/usr/bin/perl # -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/doc/misc/options b/contrib/bind9/doc/misc/options index 3fd74e9..51d2506 100644 --- a/contrib/bind9/doc/misc/options +++ b/contrib/bind9/doc/misc/options @@ -196,10 +196,11 @@ options { request-nsid <boolean>; reserved-sockets <integer>; resolver-query-timeout <integer>; - response-policy { - zone <string> [ policy ( given | disabled | passthru | - no-op | nxdomain | nodata | cname <domain> ) ]; - }; + response-policy { zone <quoted_string> [ policy ( given | disabled + | passthru | no-op | nxdomain | nodata | cname <quoted_string> + ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ]; + ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [ + max-policy-ttl <integer> ]; rfc2308-type1 <boolean>; // not yet implemented root-delegation-only [ exclude { <quoted_string>; ... } ]; rrset-order { [ class <string> ] [ type <string> ] [ name @@ -400,10 +401,11 @@ view <string> <optional_class> { request-ixfr <boolean>; request-nsid <boolean>; resolver-query-timeout <integer>; - response-policy { - zone <string> [ policy ( given | disabled | passthru | - no-op | nxdomain | nodata | cname <domain> ) ]; - }; + response-policy { zone <quoted_string> [ policy ( given | disabled + | passthru | no-op | nxdomain | nodata | cname <quoted_string> + ) ] [ recursive-only <boolean> ] [ max-policy-ttl <integer> ]; + ... } [ recursive-only <boolean> ] [ break-dnssec <boolean> ] [ + max-policy-ttl <integer> ]; rfc2308-type1 <boolean>; // not yet implemented root-delegation-only [ exclude { <quoted_string>; ... } ]; rrset-order { [ class <string> ] [ type <string> ] [ name diff --git a/contrib/bind9/doc/misc/sort-options.pl b/contrib/bind9/doc/misc/sort-options.pl index 4251521..0030525 100755 --- a/contrib/bind9/doc/misc/sort-options.pl +++ b/contrib/bind9/doc/misc/sort-options.pl @@ -1,6 +1,6 @@ #!/bin/perl # -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/isc-config.sh.in b/contrib/bind9/isc-config.sh.in index 0eafca7..26b7d64 100644 --- a/contrib/bind9/isc-config.sh.in +++ b/contrib/bind9/isc-config.sh.in @@ -1,6 +1,6 @@ #!/bin/sh # -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000, 2001, 2003 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/Makefile.in b/contrib/bind9/lib/Makefile.in index e46aef2..e3f0bdb 100644 --- a/contrib/bind9/lib/Makefile.in +++ b/contrib/bind9/lib/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2001, 2003 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/bind9/Makefile.in b/contrib/bind9/lib/bind9/Makefile.in index 35c4022..73285e1 100644 --- a/contrib/bind9/lib/bind9/Makefile.in +++ b/contrib/bind9/lib/bind9/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007, 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/bind9/api b/contrib/bind9/lib/bind9/api index 089e782..7e9b115 100644 --- a/contrib/bind9/lib/bind9/api +++ b/contrib/bind9/lib/bind9/api @@ -4,5 +4,5 @@ # 9.8: 80-89 # 9.9: 90-109 LIBINTERFACE = 80 -LIBREVISION = 5 +LIBREVISION = 7 LIBAGE = 0 diff --git a/contrib/bind9/lib/bind9/check.c b/contrib/bind9/lib/bind9/check.c index 26eaa1a..f765604 100644 --- a/contrib/bind9/lib/bind9/check.c +++ b/contrib/bind9/lib/bind9/check.c @@ -287,10 +287,6 @@ disabled_algorithms(const cfg_obj_t *disabled, isc_log_t *logctx) { tresult = dns_secalg_fromtext(&alg, &r); if (tresult != ISC_R_SUCCESS) { - isc_uint8_t ui; - result = isc_parse_uint8(&ui, r.base, 10); - } - if (tresult != ISC_R_SUCCESS) { cfg_obj_log(cfg_listelt_value(element), logctx, ISC_LOG_ERROR, "invalid algorithm '%s'", r.base); @@ -1259,6 +1255,29 @@ typedef struct { } optionstable; static isc_result_t +check_nonzero(const cfg_obj_t *options, isc_log_t *logctx) { + isc_result_t result = ISC_R_SUCCESS; + const cfg_obj_t *obj = NULL; + unsigned int i; + + static const char *nonzero[] = { "max-retry-time", "min-retry-time", + "max-refresh-time", "min-refresh-time" }; + /* + * Check if value is zero. + */ + for (i = 0; i < sizeof(nonzero) / sizeof(nonzero[0]); i++) { + obj = NULL; + if (cfg_map_get(options, nonzero[i], &obj) == ISC_R_SUCCESS && + cfg_obj_asuint32(obj) == 0) { + cfg_obj_log(obj, logctx, ISC_LOG_ERROR, + "'%s' must not be zero", nonzero[i]); + result = ISC_R_FAILURE; + } + } + return (result); +} + +static isc_result_t check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions, const cfg_obj_t *config, isc_symtab_t *symtab, dns_rdataclass_t defclass, cfg_aclconfctx_t *actx, @@ -1267,7 +1286,7 @@ check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions, const char *znamestr; const char *typestr; unsigned int ztype; - const cfg_obj_t *zoptions; + const cfg_obj_t *zoptions, *goptions = NULL; const cfg_obj_t *obj = NULL; isc_result_t result = ISC_R_SUCCESS; isc_result_t tresult; @@ -1288,8 +1307,10 @@ check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions, { "also-notify", MASTERZONE | SLAVEZONE }, { "dialup", MASTERZONE | SLAVEZONE | STUBZONE }, { "delegation-only", HINTZONE | STUBZONE | DELEGATIONZONE }, - { "forward", MASTERZONE | SLAVEZONE | STUBZONE | FORWARDZONE }, - { "forwarders", MASTERZONE | SLAVEZONE | STUBZONE | FORWARDZONE }, + { "forward", MASTERZONE | SLAVEZONE | STUBZONE | + STATICSTUBZONE | FORWARDZONE }, + { "forwarders", MASTERZONE | SLAVEZONE | STUBZONE | + STATICSTUBZONE | FORWARDZONE }, { "maintain-ixfr-base", MASTERZONE | SLAVEZONE }, { "max-ixfr-log-size", MASTERZONE | SLAVEZONE }, { "notify-source", MASTERZONE | SLAVEZONE }, @@ -1345,10 +1366,14 @@ check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions, { "passive", SLAVEZONE | STUBZONE }, }; + znamestr = cfg_obj_asstring(cfg_tuple_get(zconfig, "name")); zoptions = cfg_tuple_get(zconfig, "options"); + if (config != NULL) + cfg_map_get(config, "options", &goptions); + obj = NULL; (void)cfg_map_get(zoptions, "type", &obj); if (obj == NULL) { @@ -1430,6 +1455,12 @@ check_zoneconf(const cfg_obj_t *zconfig, const cfg_obj_t *voptions, } /* + * Check if value is zero. + */ + if (check_nonzero(zoptions, logctx) != ISC_R_SUCCESS) + result = ISC_R_FAILURE; + + /* * Look for inappropriate options for the given zone type. * Check that ACLs expand correctly. */ @@ -2170,6 +2201,14 @@ check_viewconf(const cfg_obj_t *config, const cfg_obj_t *voptions, } /* + * Check non-zero options at the global and view levels. + */ + if (options != NULL && check_nonzero(options, logctx) != ISC_R_SUCCESS) + result = ISC_R_FAILURE; + if (voptions != NULL &&check_nonzero(voptions, logctx) != ISC_R_SUCCESS) + result = ISC_R_FAILURE; + + /* * Check that dual-stack-servers is reasonable. */ if (voptions == NULL) { @@ -2196,15 +2235,15 @@ check_viewconf(const cfg_obj_t *config, const cfg_obj_t *voptions, tresult = isc_symtab_create(mctx, 1000, freekey, mctx, ISC_FALSE, &symtab); if (tresult != ISC_R_SUCCESS) - return (ISC_R_NOMEMORY); + goto cleanup; (void)cfg_map_get(config, "key", &keys); tresult = check_keylist(keys, symtab, mctx, logctx); if (tresult == ISC_R_EXISTS) result = ISC_R_FAILURE; else if (tresult != ISC_R_SUCCESS) { - isc_symtab_destroy(&symtab); - return (tresult); + result = tresult; + goto cleanup; } if (voptions != NULL) { @@ -2214,8 +2253,8 @@ check_viewconf(const cfg_obj_t *config, const cfg_obj_t *voptions, if (tresult == ISC_R_EXISTS) result = ISC_R_FAILURE; else if (tresult != ISC_R_SUCCESS) { - isc_symtab_destroy(&symtab); - return (tresult); + result = tresult; + goto cleanup; } } @@ -2336,7 +2375,11 @@ check_viewconf(const cfg_obj_t *config, const cfg_obj_t *voptions, if (tresult != ISC_R_SUCCESS) result = tresult; - cfg_aclconfctx_detach(&actx); + cleanup: + if (symtab != NULL) + isc_symtab_destroy(&symtab); + if (actx != NULL) + cfg_aclconfctx_detach(&actx); return (result); } diff --git a/contrib/bind9/lib/bind9/include/Makefile.in b/contrib/bind9/lib/bind9/include/Makefile.in index 65eecb0..0a7436c 100644 --- a/contrib/bind9/lib/bind9/include/Makefile.in +++ b/contrib/bind9/lib/bind9/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/bind9/include/bind9/Makefile.in b/contrib/bind9/lib/bind9/include/bind9/Makefile.in index 8abfaf6..11ae586 100644 --- a/contrib/bind9/lib/bind9/include/bind9/Makefile.in +++ b/contrib/bind9/lib/bind9/include/bind9/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/dns/Makefile.in b/contrib/bind9/lib/dns/Makefile.in index cfaf775..a01bb41 100644 --- a/contrib/bind9/lib/dns/Makefile.in +++ b/contrib/bind9/lib/dns/Makefile.in @@ -47,7 +47,8 @@ LIBS = @LIBS@ # Alphabetically OPENSSLLINKOBJS = openssl_link.@O@ openssldh_link.@O@ openssldsa_link.@O@ \ - opensslgost_link.@O@ opensslrsa_link.@O@ + opensslecdsa_link.@O@ opensslgost_link.@O@ \ + opensslrsa_link.@O@ DSTOBJS = @DST_EXTRA_OBJS@ @OPENSSLLINKOBJS@ \ dst_api.@O@ dst_lib.@O@ dst_parse.@O@ dst_result.@O@ \ @@ -76,7 +77,7 @@ OBJS= ${DNSOBJS} ${OTHEROBJS} ${DSTOBJS} # Alphabetically OPENSSLLINKSRCS = openssl_link.c openssldh_link.c openssldsa_link.c \ - opensslgost_link.c opensslrsa_link.c + opensslecdsa_link.c opensslgost_link.c opensslrsa_link.c DSTSRCS = @DST_EXTRA_SRCS@ @OPENSSLLINKSRCS@ \ dst_api.c dst_lib.c dst_parse.c \ diff --git a/contrib/bind9/lib/dns/adb.c b/contrib/bind9/lib/dns/adb.c index 1dba252..531d112 100644 --- a/contrib/bind9/lib/dns/adb.c +++ b/contrib/bind9/lib/dns/adb.c @@ -111,6 +111,7 @@ struct dns_adb { isc_taskmgr_t *taskmgr; isc_task_t *task; + isc_task_t *excl; isc_interval_t tick_interval; int next_cleanbucket; @@ -1627,10 +1628,12 @@ new_adbname(dns_adb_t *adb, dns_name_t *dnsname) { LOCK(&adb->namescntlock); adb->namescnt++; - if (!adb->grownames_sent && adb->namescnt > (adb->nnames * 8)) { + if (!adb->grownames_sent && adb->excl != NULL && + adb->namescnt > (adb->nnames * 8)) + { isc_event_t *event = &adb->grownames; inc_adb_irefcnt(adb); - isc_task_send(adb->task, &event); + isc_task_send(adb->excl, &event); adb->grownames_sent = ISC_TRUE; } UNLOCK(&adb->namescntlock); @@ -1751,8 +1754,9 @@ new_adbentry(dns_adb_t *adb) { ISC_LINK_INIT(e, plink); LOCK(&adb->entriescntlock); adb->entriescnt++; - if (!adb->growentries_sent && - adb->entriescnt > (adb->nentries * 8)) { + if (!adb->growentries_sent && adb->growentries_sent && + adb->entriescnt > (adb->nentries * 8)) + { isc_event_t *event = &adb->growentries; inc_adb_irefcnt(adb); isc_task_send(adb->task, &event); @@ -2327,6 +2331,7 @@ destroy(dns_adb_t *adb) { adb->magic = 0; isc_task_detach(&adb->task); + isc_task_detach(&adb->excl); isc_mempool_destroy(&adb->nmp); isc_mempool_destroy(&adb->nhmp); @@ -2410,6 +2415,7 @@ dns_adb_create(isc_mem_t *mem, dns_view_t *view, isc_timermgr_t *timermgr, adb->aimp = NULL; adb->afmp = NULL; adb->task = NULL; + adb->excl = NULL; adb->mctx = NULL; adb->view = view; adb->taskmgr = taskmgr; @@ -2445,6 +2451,16 @@ dns_adb_create(isc_mem_t *mem, dns_view_t *view, isc_timermgr_t *timermgr, adb, NULL, NULL); adb->grownames_sent = ISC_FALSE; + result = isc_taskmgr_excltask(adb->taskmgr, &adb->excl); + if (result != ISC_R_SUCCESS) { + DP(ISC_LOG_INFO, "adb: task-exclusive mode unavailable, " + "intializing table sizes to %u\n", + nbuckets[11]); + adb->nentries = nbuckets[11]; + adb->nnames= nbuckets[11]; + + } + isc_mem_attach(mem, &adb->mctx); result = isc_mutex_init(&adb->lock); @@ -2557,6 +2573,7 @@ dns_adb_create(isc_mem_t *mem, dns_view_t *view, isc_timermgr_t *timermgr, result = isc_task_create(adb->taskmgr, 0, &adb->task); if (result != ISC_R_SUCCESS) goto fail3; + isc_task_setname(adb->task, "ADB", adb); /* @@ -3904,8 +3921,10 @@ dns_adb_adjustsrtt(dns_adb_t *adb, dns_adbaddrinfo_t *addr, addr->entry->srtt = new_srtt; addr->srtt = new_srtt; - isc_stdtime_get(&now); - addr->entry->expires = now + ADB_ENTRY_WINDOW; + if (addr->entry->expires == 0) { + isc_stdtime_get(&now); + addr->entry->expires = now + ADB_ENTRY_WINDOW; + } UNLOCK(&adb->entrylocks[bucket]); } @@ -3915,6 +3934,7 @@ dns_adb_changeflags(dns_adb_t *adb, dns_adbaddrinfo_t *addr, unsigned int bits, unsigned int mask) { int bucket; + isc_stdtime_t now; REQUIRE(DNS_ADB_VALID(adb)); REQUIRE(DNS_ADBADDRINFO_VALID(addr)); @@ -3923,6 +3943,11 @@ dns_adb_changeflags(dns_adb_t *adb, dns_adbaddrinfo_t *addr, LOCK(&adb->entrylocks[bucket]); addr->entry->flags = (addr->entry->flags & ~mask) | (bits & mask); + if (addr->entry->expires == 0) { + isc_stdtime_get(&now); + addr->entry->expires = now + ADB_ENTRY_WINDOW; + } + /* * Note that we do not update the other bits in addr->flags with * the most recent values from addr->entry->flags. @@ -4001,15 +4026,16 @@ dns_adb_freeaddrinfo(dns_adb_t *adb, dns_adbaddrinfo_t **addrp) { entry = addr->entry; REQUIRE(DNS_ADBENTRY_VALID(entry)); - isc_stdtime_get(&now); - *addrp = NULL; overmem = isc_mem_isovermem(adb->mctx); bucket = addr->entry->lock_bucket; LOCK(&adb->entrylocks[bucket]); - entry->expires = now + ADB_ENTRY_WINDOW; + if (entry->expires == 0) { + isc_stdtime_get(&now); + entry->expires = now + ADB_ENTRY_WINDOW; + } want_check_exit = dec_entry_refcnt(adb, overmem, entry, ISC_FALSE); diff --git a/contrib/bind9/lib/dns/api b/contrib/bind9/lib/dns/api index 9e783a5..325781a 100644 --- a/contrib/bind9/lib/dns/api +++ b/contrib/bind9/lib/dns/api @@ -3,6 +3,6 @@ # 9.7: 60-79 # 9.8: 80-89 # 9.9: 90-109 -LIBINTERFACE = 87 +LIBINTERFACE = 89 LIBREVISION = 1 -LIBAGE = 6 +LIBAGE = 1 diff --git a/contrib/bind9/lib/dns/db.c b/contrib/bind9/lib/dns/db.c index 1252c81..0cf2c27 100644 --- a/contrib/bind9/lib/dns/db.c +++ b/contrib/bind9/lib/dns/db.c @@ -952,14 +952,13 @@ dns_db_rpz_enabled(dns_db_t *db, dns_rpz_st_t *st) (db->methods->rpz_enabled)(db, st); } -isc_result_t +void dns_db_rpz_findips(dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type, dns_zone_t *zone, dns_db_t *db, dns_dbversion_t *version, dns_rdataset_t *ardataset, dns_rpz_st_t *st, dns_name_t *query_qname) { - if (db->methods->rpz_findips == NULL) - return (ISC_R_NOTIMPLEMENTED); - return ((db->methods->rpz_findips)(rpz, rpz_type, zone, db, version, - ardataset, st, query_qname)); + if (db->methods->rpz_findips != NULL) + (db->methods->rpz_findips)(rpz, rpz_type, zone, db, version, + ardataset, st, query_qname); } diff --git a/contrib/bind9/lib/dns/dnssec.c b/contrib/bind9/lib/dns/dnssec.c index b72e82d..3569ad7 100644 --- a/contrib/bind9/lib/dns/dnssec.c +++ b/contrib/bind9/lib/dns/dnssec.c @@ -44,10 +44,13 @@ #include <dns/rdataset.h> #include <dns/rdatastruct.h> #include <dns/result.h> +#include <dns/stats.h> #include <dns/tsig.h> /* for DNS_TSIG_FUDGE */ #include <dst/result.h> +LIBDNS_EXTERNAL_DATA isc_stats_t *dns_dnssec_stats; + #define is_response(msg) (msg->flags & DNS_MESSAGEFLAG_QR) #define RETERR(x) do { \ @@ -77,6 +80,12 @@ digest_callback(void *arg, isc_region_t *data) { return (dst_context_adddata(ctx, data)); } +static inline void +inc_stat(isc_statscounter_t counter) { + if (dns_dnssec_stats != NULL) + isc_stats_increment(dns_dnssec_stats, counter); +} + /* * Make qsort happy. */ @@ -153,7 +162,9 @@ dns_dnssec_keyfromrdata(dns_name_t *name, dns_rdata_t *rdata, isc_mem_t *mctx, } static isc_result_t -digest_sig(dst_context_t *ctx, dns_rdata_t *sigrdata, dns_rdata_rrsig_t *sig) { +digest_sig(dst_context_t *ctx, isc_boolean_t downcase, dns_rdata_t *sigrdata, + dns_rdata_rrsig_t *rrsig) +{ isc_region_t r; isc_result_t ret; dns_fixedname_t fname; @@ -165,11 +176,16 @@ digest_sig(dst_context_t *ctx, dns_rdata_t *sigrdata, dns_rdata_rrsig_t *sig) { ret = dst_context_adddata(ctx, &r); if (ret != ISC_R_SUCCESS) return (ret); - dns_fixedname_init(&fname); - RUNTIME_CHECK(dns_name_downcase(&sig->signer, - dns_fixedname_name(&fname), NULL) - == ISC_R_SUCCESS); - dns_name_toregion(dns_fixedname_name(&fname), &r); + if (downcase) { + dns_fixedname_init(&fname); + + RUNTIME_CHECK(dns_name_downcase(&rrsig->signer, + dns_fixedname_name(&fname), + NULL) == ISC_R_SUCCESS); + dns_name_toregion(dns_fixedname_name(&fname), &r); + } else + dns_name_toregion(&rrsig->signer, &r); + return (dst_context_adddata(ctx, &r)); } @@ -191,6 +207,7 @@ dns_dnssec_sign(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, isc_uint32_t flags; unsigned int sigsize; dns_fixedname_t fnewname; + dns_fixedname_t fsigner; REQUIRE(name != NULL); REQUIRE(dns_name_countlabels(name) <= 255); @@ -218,8 +235,14 @@ dns_dnssec_sign(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, sig.common.rdtype = dns_rdatatype_rrsig; ISC_LINK_INIT(&sig.common, link); + /* + * Downcase signer. + */ dns_name_init(&sig.signer, NULL); - dns_name_clone(dst_key_name(key), &sig.signer); + dns_fixedname_init(&fsigner); + RUNTIME_CHECK(dns_name_downcase(dst_key_name(key), + dns_fixedname_name(&fsigner), NULL) == ISC_R_SUCCESS); + dns_name_clone(dns_fixedname_name(&fsigner), &sig.signer); sig.covered = set->type; sig.algorithm = dst_key_alg(key); @@ -259,7 +282,7 @@ dns_dnssec_sign(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, /* * Digest the SIG rdata. */ - ret = digest_sig(ctx, &tmpsigrdata, &sig); + ret = digest_sig(ctx, ISC_FALSE, &tmpsigrdata, &sig); if (ret != ISC_R_SUCCESS) goto cleanup_context; @@ -332,7 +355,7 @@ dns_dnssec_sign(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, memcpy(sig.signature, r.base, sig.siglen); ret = dns_rdata_fromstruct(sigrdata, sig.common.rdclass, - sig.common.rdtype, &sig, buffer); + sig.common.rdtype, &sig, buffer); cleanup_array: isc_mem_put(mctx, rdatas, nrdatas * sizeof(dns_rdata_t)); @@ -363,6 +386,7 @@ dns_dnssec_verify2(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, dst_context_t *ctx = NULL; int labels = 0; isc_uint32_t flags; + isc_boolean_t downcase = ISC_FALSE; REQUIRE(name != NULL); REQUIRE(set != NULL); @@ -377,8 +401,10 @@ dns_dnssec_verify2(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, if (set->type != sig.covered) return (DNS_R_SIGINVALID); - if (isc_serial_lt(sig.timeexpire, sig.timesigned)) + if (isc_serial_lt(sig.timeexpire, sig.timesigned)) { + inc_stat(dns_dnssecstats_fail); return (DNS_R_SIGINVALID); + } if (!ignoretime) { isc_stdtime_get(&now); @@ -386,10 +412,13 @@ dns_dnssec_verify2(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, /* * Is SIG temporally valid? */ - if (isc_serial_lt((isc_uint32_t)now, sig.timesigned)) + if (isc_serial_lt((isc_uint32_t)now, sig.timesigned)) { + inc_stat(dns_dnssecstats_fail); return (DNS_R_SIGFUTURE); - else if (isc_serial_lt(sig.timeexpire, (isc_uint32_t)now)) + } else if (isc_serial_lt(sig.timeexpire, (isc_uint32_t)now)) { + inc_stat(dns_dnssecstats_fail); return (DNS_R_SIGEXPIRED); + } } /* @@ -400,16 +429,22 @@ dns_dnssec_verify2(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, case dns_rdatatype_ns: case dns_rdatatype_soa: case dns_rdatatype_dnskey: - if (!dns_name_equal(name, &sig.signer)) + if (!dns_name_equal(name, &sig.signer)) { + inc_stat(dns_dnssecstats_fail); return (DNS_R_SIGINVALID); + } break; case dns_rdatatype_ds: - if (dns_name_equal(name, &sig.signer)) + if (dns_name_equal(name, &sig.signer)) { + inc_stat(dns_dnssecstats_fail); return (DNS_R_SIGINVALID); + } /* FALLTHROUGH */ default: - if (!dns_name_issubdomain(name, &sig.signer)) + if (!dns_name_issubdomain(name, &sig.signer)) { + inc_stat(dns_dnssecstats_fail); return (DNS_R_SIGINVALID); + } break; } @@ -417,11 +452,16 @@ dns_dnssec_verify2(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, * Is the key allowed to sign data? */ flags = dst_key_flags(key); - if (flags & DNS_KEYTYPE_NOAUTH) + if (flags & DNS_KEYTYPE_NOAUTH) { + inc_stat(dns_dnssecstats_fail); return (DNS_R_KEYUNAUTHORIZED); - if ((flags & DNS_KEYFLAG_OWNERMASK) != DNS_KEYOWNER_ZONE) + } + if ((flags & DNS_KEYFLAG_OWNERMASK) != DNS_KEYOWNER_ZONE) { + inc_stat(dns_dnssecstats_fail); return (DNS_R_KEYUNAUTHORIZED); + } + again: ret = dst_context_create(key, mctx, &ctx); if (ret != ISC_R_SUCCESS) goto cleanup_struct; @@ -429,7 +469,7 @@ dns_dnssec_verify2(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, /* * Digest the SIG rdata (not including the signature). */ - ret = digest_sig(ctx, sigrdata, &sig); + ret = digest_sig(ctx, downcase, sigrdata, &sig); if (ret != ISC_R_SUCCESS) goto cleanup_context; @@ -508,21 +548,40 @@ dns_dnssec_verify2(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, r.base = sig.signature; r.length = sig.siglen; ret = dst_context_verify(ctx, &r); - if (ret == DST_R_VERIFYFAILURE) - ret = DNS_R_SIGINVALID; + if (ret == ISC_R_SUCCESS && downcase) { + char namebuf[DNS_NAME_FORMATSIZE]; + dns_name_format(&sig.signer, namebuf, sizeof(namebuf)); + isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL, + DNS_LOGMODULE_DNSSEC, ISC_LOG_INFO, + "sucessfully validated after lower casing " + "signer '%s'", namebuf); + inc_stat(dns_dnssecstats_downcase); + } else if (ret == ISC_R_SUCCESS) + inc_stat(dns_dnssecstats_asis); cleanup_array: isc_mem_put(mctx, rdatas, nrdatas * sizeof(dns_rdata_t)); cleanup_context: dst_context_destroy(&ctx); + if (ret == DST_R_VERIFYFAILURE && !downcase) { + downcase = ISC_TRUE; + goto again; + } cleanup_struct: dns_rdata_freestruct(&sig); + if (ret == DST_R_VERIFYFAILURE) + ret = DNS_R_SIGINVALID; + + if (ret != ISC_R_SUCCESS) + inc_stat(dns_dnssecstats_fail); + if (ret == ISC_R_SUCCESS && labels - sig.labels > 0) { if (wild != NULL) RUNTIME_CHECK(dns_name_concatenate(dns_wildcardname, dns_fixedname_name(&fnewname), wild, NULL) == ISC_R_SUCCESS); + inc_stat(dns_dnssecstats_wildcard); ret = DNS_R_FROMWILDCARD; } return (ret); @@ -1325,11 +1384,12 @@ dns_dnssec_findmatchingkeys(dns_name_t *origin, const char *directory, * the keys in the keyset, regardless of whether they have * metadata indicating they should be deactivated or removed. */ -static void +static isc_result_t addkey(dns_dnsseckeylist_t *keylist, dst_key_t **newkey, isc_boolean_t savekeys, isc_mem_t *mctx) { dns_dnsseckey_t *key; + isc_result_t result; /* Skip duplicates */ for (key = ISC_LIST_HEAD(*keylist); @@ -1357,10 +1417,12 @@ addkey(dns_dnsseckeylist_t *keylist, dst_key_t **newkey, } key->source = dns_keysource_zoneapex; - return; + return (ISC_R_SUCCESS); } - dns_dnsseckey_create(mctx, newkey, &key); + result = dns_dnsseckey_create(mctx, newkey, &key); + if (result != ISC_R_SUCCESS) + return (result); if (key->legacy || savekeys) { key->force_publish = ISC_TRUE; key->force_sign = dst_key_isprivate(key->key); @@ -1368,6 +1430,7 @@ addkey(dns_dnsseckeylist_t *keylist, dst_key_t **newkey, key->source = dns_keysource_zoneapex; ISC_LIST_APPEND(*keylist, key, link); *newkey = NULL; + return (ISC_R_SUCCESS); } @@ -1457,7 +1520,7 @@ dns_dnssec_keylistfromrdataset(dns_name_t *origin, goto skip; if (public) { - addkey(keylist, &pubkey, savekeys, mctx); + RETERR(addkey(keylist, &pubkey, savekeys, mctx)); goto skip; } @@ -1510,7 +1573,7 @@ dns_dnssec_keylistfromrdataset(dns_name_t *origin, } if (result == ISC_R_FILENOTFOUND || result == ISC_R_NOPERM) { - addkey(keylist, &pubkey, savekeys, mctx); + RETERR(addkey(keylist, &pubkey, savekeys, mctx)); goto skip; } RETERR(result); @@ -1519,7 +1582,7 @@ dns_dnssec_keylistfromrdataset(dns_name_t *origin, if ((dst_key_flags(privkey) & DNS_KEYTYPE_NOAUTH) != 0) goto skip; - addkey(keylist, &privkey, savekeys, mctx); + RETERR(addkey(keylist, &privkey, savekeys, mctx)); skip: if (pubkey != NULL) dst_key_free(&pubkey); diff --git a/contrib/bind9/lib/dns/ds.c b/contrib/bind9/lib/dns/ds.c index 3c74d1d..e72ecbb 100644 --- a/contrib/bind9/lib/dns/ds.c +++ b/contrib/bind9/lib/dns/ds.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2004-2007, 2010 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2007, 2010, 2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 2002, 2003 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -52,12 +52,13 @@ dns_ds_buildrdata(dns_name_t *owner, dns_rdata_t *key, { dns_fixedname_t fname; dns_name_t *name; - unsigned char digest[ISC_SHA256_DIGESTLENGTH]; + unsigned char digest[ISC_SHA384_DIGESTLENGTH]; isc_region_t r; isc_buffer_t b; dns_rdata_ds_t ds; isc_sha1_t sha1; isc_sha256_t sha256; + isc_sha384_t sha384; #ifdef HAVE_OPENSSL_GOST EVP_MD_CTX ctx; const EVP_MD *md; @@ -86,17 +87,18 @@ dns_ds_buildrdata(dns_name_t *owner, dns_rdata_t *key, isc_sha1_update(&sha1, r.base, r.length); isc_sha1_final(&sha1, digest); break; + #ifdef HAVE_OPENSSL_GOST #define CHECK(x) \ if ((x) != 1) { \ EVP_MD_CTX_cleanup(&ctx); \ - return (DST_R_OPENSSLFAILURE); \ + return (DST_R_CRYPTOFAILURE); \ } case DNS_DSDIGEST_GOST: md = EVP_gost(); if (md == NULL) - return (DST_R_OPENSSLFAILURE); + return (DST_R_CRYPTOFAILURE); EVP_MD_CTX_init(&ctx); CHECK(EVP_DigestInit(&ctx, md)); dns_name_toregion(name, &r); @@ -111,6 +113,18 @@ dns_ds_buildrdata(dns_name_t *owner, dns_rdata_t *key, CHECK(EVP_DigestFinal(&ctx, digest, NULL)); break; #endif + + case DNS_DSDIGEST_SHA384: + isc_sha384_init(&sha384); + dns_name_toregion(name, &r); + isc_sha384_update(&sha384, r.base, r.length); + dns_rdata_toregion(key, &r); + INSIST(r.length >= 4); + isc_sha384_update(&sha384, r.base, r.length); + isc_sha384_final(digest, &sha384); + break; + + case DNS_DSDIGEST_SHA256: default: isc_sha256_init(&sha256); dns_name_toregion(name, &r); @@ -132,11 +146,18 @@ dns_ds_buildrdata(dns_name_t *owner, dns_rdata_t *key, case DNS_DSDIGEST_SHA1: ds.length = ISC_SHA1_DIGESTLENGTH; break; + #ifdef HAVE_OPENSSL_GOST case DNS_DSDIGEST_GOST: ds.length = ISC_GOST_DIGESTLENGTH; break; #endif + + case DNS_DSDIGEST_SHA384: + ds.length = ISC_SHA384_DIGESTLENGTH; + break; + + case DNS_DSDIGEST_SHA256: default: ds.length = ISC_SHA256_DIGESTLENGTH; break; @@ -152,9 +173,11 @@ dns_ds_digest_supported(unsigned int digest_type) { #ifdef HAVE_OPENSSL_GOST return (ISC_TF(digest_type == DNS_DSDIGEST_SHA1 || digest_type == DNS_DSDIGEST_SHA256 || - digest_type == DNS_DSDIGEST_GOST)); + digest_type == DNS_DSDIGEST_GOST || + digest_type == DNS_DSDIGEST_SHA384)); #else return (ISC_TF(digest_type == DNS_DSDIGEST_SHA1 || - digest_type == DNS_DSDIGEST_SHA256)); + digest_type == DNS_DSDIGEST_SHA256 || + digest_type == DNS_DSDIGEST_SHA384)); #endif } diff --git a/contrib/bind9/lib/dns/dst_api.c b/contrib/bind9/lib/dns/dst_api.c index a14b268..f5dd89a 100644 --- a/contrib/bind9/lib/dns/dst_api.c +++ b/contrib/bind9/lib/dns/dst_api.c @@ -56,6 +56,7 @@ #include <isc/string.h> #include <isc/time.h> #include <isc/util.h> +#include <isc/file.h> #include <dns/fixedname.h> #include <dns/keyvalues.h> @@ -226,6 +227,10 @@ dst_lib_init2(isc_mem_t *mctx, isc_entropy_t *ectx, #ifdef HAVE_OPENSSL_GOST RETERR(dst__opensslgost_init(&dst_t_func[DST_ALG_ECCGOST])); #endif +#ifdef HAVE_OPENSSL_ECDSA + RETERR(dst__opensslecdsa_init(&dst_t_func[DST_ALG_ECDSA256])); + RETERR(dst__opensslecdsa_init(&dst_t_func[DST_ALG_ECDSA384])); +#endif #endif /* OPENSSL */ #ifdef GSSAPI RETERR(dst__gssapi_init(&dst_t_func[DST_ALG_GSSAPI])); @@ -1110,6 +1115,12 @@ dst_key_sigsize(const dst_key_t *key, unsigned int *n) { case DST_ALG_ECCGOST: *n = DNS_SIG_GOSTSIGSIZE; break; + case DST_ALG_ECDSA256: + *n = DNS_SIG_ECDSA256SIZE; + break; + case DST_ALG_ECDSA384: + *n = DNS_SIG_ECDSA384SIZE; + break; case DST_ALG_HMACMD5: *n = 16; break; @@ -1415,6 +1426,8 @@ issymmetric(const dst_key_t *key) { case DST_ALG_NSEC3DSA: case DST_ALG_DH: case DST_ALG_ECCGOST: + case DST_ALG_ECDSA256: + case DST_ALG_ECDSA384: return (ISC_FALSE); case DST_ALG_HMACMD5: case DST_ALG_GSSAPI: @@ -1691,7 +1704,8 @@ algorithm_status(unsigned int alg) { alg == DST_ALG_HMACMD5 || alg == DST_ALG_NSEC3DSA || alg == DST_ALG_NSEC3RSASHA1 || alg == DST_ALG_RSASHA256 || alg == DST_ALG_RSASHA512 || - alg == DST_ALG_ECCGOST) + alg == DST_ALG_ECCGOST || + alg == DST_ALG_ECDSA256 || alg == DST_ALG_ECDSA384) return (DST_R_NOCRYPTO); #endif return (DST_R_UNSUPPORTEDALG); diff --git a/contrib/bind9/lib/dns/dst_internal.h b/contrib/bind9/lib/dns/dst_internal.h index d9f6ac8..2f4f946 100644 --- a/contrib/bind9/lib/dns/dst_internal.h +++ b/contrib/bind9/lib/dns/dst_internal.h @@ -217,6 +217,9 @@ isc_result_t dst__gssapi_init(struct dst_func **funcp); #ifdef HAVE_OPENSSL_GOST isc_result_t dst__opensslgost_init(struct dst_func **funcp); #endif +#ifdef HAVE_OPENSSL_ECDSA +isc_result_t dst__opensslecdsa_init(struct dst_func **funcp); +#endif /*% * Destructors diff --git a/contrib/bind9/lib/dns/dst_openssl.h b/contrib/bind9/lib/dns/dst_openssl.h index 7237a5e..a30fd6a 100644 --- a/contrib/bind9/lib/dns/dst_openssl.h +++ b/contrib/bind9/lib/dns/dst_openssl.h @@ -39,6 +39,9 @@ ISC_LANG_BEGINDECLS isc_result_t dst__openssl_toresult(isc_result_t fallback); +isc_result_t +dst__openssl_toresult2(const char *funcname, isc_result_t fallback); + #ifdef USE_ENGINE ENGINE * dst__openssl_getengine(const char *engine); diff --git a/contrib/bind9/lib/dns/dst_parse.c b/contrib/bind9/lib/dns/dst_parse.c index 8e9efbd..95896c4 100644 --- a/contrib/bind9/lib/dns/dst_parse.c +++ b/contrib/bind9/lib/dns/dst_parse.c @@ -44,8 +44,10 @@ #include <isc/stdtime.h> #include <isc/string.h> #include <isc/util.h> +#include <isc/file.h> #include <dns/time.h> +#include <dns/log.h> #include "dst_internal.h" #include "dst_parse.h" @@ -106,6 +108,8 @@ static struct parse_map map[] = { {TAG_GOST_PRIVASN1, "GostAsn1:"}, + {TAG_ECDSA_PRIVATEKEY, "PrivateKey:"}, + {TAG_HMACMD5_KEY, "Key:"}, {TAG_HMACMD5_BITS, "Bits:"}, @@ -251,6 +255,15 @@ check_gost(const dst_private_t *priv) { } static int +check_ecdsa(const dst_private_t *priv) { + if (priv->nelements != ECDSA_NTAGS) + return (-1); + if (priv->elements[0].tag != TAG(DST_ALG_ECDSA256, 0)) + return (-1); + return (0); +} + +static int check_hmac_md5(const dst_private_t *priv, isc_boolean_t old) { int i, j; @@ -302,13 +315,20 @@ check_data(const dst_private_t *priv, const unsigned int alg, switch (alg) { case DST_ALG_RSAMD5: case DST_ALG_RSASHA1: + case DST_ALG_NSEC3RSASHA1: + case DST_ALG_RSASHA256: + case DST_ALG_RSASHA512: return (check_rsa(priv)); case DST_ALG_DH: return (check_dh(priv)); case DST_ALG_DSA: + case DST_ALG_NSEC3DSA: return (check_dsa(priv)); case DST_ALG_ECCGOST: return (check_gost(priv)); + case DST_ALG_ECDSA256: + case DST_ALG_ECDSA384: + return (check_ecdsa(priv)); case DST_ALG_HMACMD5: return (check_hmac_md5(priv, old)); case DST_ALG_HMACSHA1: @@ -345,7 +365,7 @@ isc_result_t dst__privstruct_parse(dst_key_t *key, unsigned int alg, isc_lex_t *lex, isc_mem_t *mctx, dst_private_t *priv) { - int n = 0, major, minor; + int n = 0, major, minor, check; isc_buffer_t b; isc_token_t token; unsigned char *data = NULL; @@ -515,8 +535,14 @@ dst__privstruct_parse(dst_key_t *key, unsigned int alg, isc_lex_t *lex, data = NULL; } done: - if (check_data(priv, alg, ISC_TRUE) < 0) + check = check_data(priv, alg, ISC_TRUE); + if (check < 0) { + ret = DST_R_INVALIDPRIVATEKEY; + goto fail; + } else if (check != ISC_R_SUCCESS) { + ret = check; goto fail; + } return (ISC_R_SUCCESS); @@ -533,7 +559,6 @@ dst__privstruct_writefile(const dst_key_t *key, const dst_private_t *priv, const char *directory) { FILE *fp; - int ret, i; isc_result_t result; char filename[ISC_DIR_NAMEMAX]; char buffer[MAXFIELDSIZE * 2]; @@ -543,16 +568,32 @@ dst__privstruct_writefile(const dst_key_t *key, const dst_private_t *priv, isc_buffer_t b; isc_region_t r; int major, minor; + mode_t mode; + int i, ret; REQUIRE(priv != NULL); - if (check_data(priv, dst_key_alg(key), ISC_FALSE) < 0) + ret = check_data(priv, dst_key_alg(key), ISC_FALSE); + if (ret < 0) return (DST_R_INVALIDPRIVATEKEY); + else if (ret != ISC_R_SUCCESS) + return (ret); isc_buffer_init(&b, filename, sizeof(filename)); - ret = dst_key_buildfilename(key, DST_TYPE_PRIVATE, directory, &b); - if (ret != ISC_R_SUCCESS) - return (ret); + result = dst_key_buildfilename(key, DST_TYPE_PRIVATE, directory, &b); + if (result != ISC_R_SUCCESS) + return (result); + + result = isc_file_mode(filename, &mode); + if (result == ISC_R_SUCCESS && mode != 0600) { + /* File exists; warn that we are changing its permissions */ + isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL, + DNS_LOGMODULE_DNSSEC, ISC_LOG_WARNING, + "Permissions on the file %s " + "have changed from 0%o to 0600 as " + "a result of this operation.", + filename, (unsigned int)mode); + } if ((fp = fopen(filename, "w")) == NULL) return (DST_R_WRITEERROR); @@ -603,6 +644,12 @@ dst__privstruct_writefile(const dst_key_t *key, const dst_private_t *priv, case DST_ALG_ECCGOST: fprintf(fp, "(ECC-GOST)\n"); break; + case DST_ALG_ECDSA256: + fprintf(fp, "(ECDSAP256SHA256)\n"); + break; + case DST_ALG_ECDSA384: + fprintf(fp, "(ECDSAP384SHA384)\n"); + break; case DST_ALG_HMACMD5: fprintf(fp, "(HMAC_MD5)\n"); break; diff --git a/contrib/bind9/lib/dns/dst_parse.h b/contrib/bind9/lib/dns/dst_parse.h index 91b072f..f048bf0 100644 --- a/contrib/bind9/lib/dns/dst_parse.h +++ b/contrib/bind9/lib/dns/dst_parse.h @@ -1,5 +1,5 @@ /* - * Portions Copyright (C) 2004-2010 Internet Systems Consortium, Inc. ("ISC") + * Portions Copyright (C) 2004-2010, 2012 Internet Systems Consortium, Inc. ("ISC") * Portions Copyright (C) 2000-2002 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -81,6 +81,9 @@ #define GOST_NTAGS 1 #define TAG_GOST_PRIVASN1 ((DST_ALG_ECCGOST << TAG_SHIFT) + 0) +#define ECDSA_NTAGS 1 +#define TAG_ECDSA_PRIVATEKEY ((DST_ALG_ECDSA256 << TAG_SHIFT) + 0) + #define OLD_HMACMD5_NTAGS 1 #define HMACMD5_NTAGS 2 #define TAG_HMACMD5_KEY ((DST_ALG_HMACMD5 << TAG_SHIFT) + 0) diff --git a/contrib/bind9/lib/dns/dst_result.c b/contrib/bind9/lib/dns/dst_result.c index 429dbb2..297e809 100644 --- a/contrib/bind9/lib/dns/dst_result.c +++ b/contrib/bind9/lib/dns/dst_result.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2004, 2005, 2007, 2008 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004, 2005, 2007, 2008, 2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1999-2001 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -30,7 +30,7 @@ static const char *text[DST_R_NRESULTS] = { "algorithm is unsupported", /*%< 0 */ - "openssl failure", /*%< 1 */ + "crypto failure", /*%< 1 */ "built with no crypto support", /*%< 2 */ "illegal operation for a null key", /*%< 3 */ "public key is invalid", /*%< 4 */ diff --git a/contrib/bind9/lib/dns/include/Makefile.in b/contrib/bind9/lib/dns/include/Makefile.in index b52cb98..10d798d 100644 --- a/contrib/bind9/lib/dns/include/Makefile.in +++ b/contrib/bind9/lib/dns/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/dns/include/dns/db.h b/contrib/bind9/lib/dns/include/dns/db.h index 6aa02d2..fe268f4 100644 --- a/contrib/bind9/lib/dns/include/dns/db.h +++ b/contrib/bind9/lib/dns/include/dns/db.h @@ -172,7 +172,7 @@ typedef struct dns_dbmethods { isc_boolean_t (*isdnssec)(dns_db_t *db); dns_stats_t *(*getrrsetstats)(dns_db_t *db); void (*rpz_enabled)(dns_db_t *db, dns_rpz_st_t *st); - isc_result_t (*rpz_findips)(dns_rpz_zone_t *rpz, + void (*rpz_findips)(dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type, dns_zone_t *zone, dns_db_t *db, dns_dbversion_t *version, @@ -1507,7 +1507,7 @@ dns_db_rpz_enabled(dns_db_t *db, dns_rpz_st_t *st); * DNS_RPZ_TYPE_NSDNAME records. */ -isc_result_t +void dns_db_rpz_findips(dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type, dns_zone_t *zone, dns_db_t *db, dns_dbversion_t *version, dns_rdataset_t *ardataset, dns_rpz_st_t *st, @@ -1524,10 +1524,6 @@ dns_db_rpz_findips(dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type, * \li 'ardataset' is an A or AAAA rdataset of addresses to check * \li 'found' specifies the previous best match if any or * or NULL, an empty name, 0, DNS_RPZ_POLICY_MISS, and 0 - * - * Returns: - * \li #ISC_R_SUCCESS - * \li #ISC_R_UNEXPECTED */ ISC_LANG_ENDDECLS diff --git a/contrib/bind9/lib/dns/include/dns/dnssec.h b/contrib/bind9/lib/dns/include/dns/dnssec.h index b87fd5c..e986d40 100644 --- a/contrib/bind9/lib/dns/include/dns/dnssec.h +++ b/contrib/bind9/lib/dns/include/dns/dnssec.h @@ -24,6 +24,7 @@ #include <isc/lang.h> #include <isc/stdtime.h> +#include <isc/stats.h> #include <dns/diff.h> #include <dns/types.h> @@ -32,6 +33,8 @@ ISC_LANG_BEGINDECLS +LIBDNS_EXTERNAL_DATA extern isc_stats_t *dns_dnssec_stats; + /*%< Maximum number of keys supported in a zone. */ #define DNS_MAXZONEKEYS 32 @@ -96,8 +99,8 @@ dns_dnssec_sign(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, isc_stdtime_t *inception, isc_stdtime_t *expire, isc_mem_t *mctx, isc_buffer_t *buffer, dns_rdata_t *sigrdata); /*%< - * Generates a SIG record covering this rdataset. This has no effect - * on existing SIG records. + * Generates a RRSIG record covering this rdataset. This has no effect + * on existing RRSIG records. * * Requires: *\li 'name' (the owner name of the record) is a valid name @@ -130,9 +133,9 @@ dns_dnssec_verify2(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key, isc_boolean_t ignoretime, isc_mem_t *mctx, dns_rdata_t *sigrdata, dns_name_t *wild); /*%< - * Verifies the SIG record covering this rdataset signed by a specific - * key. This does not determine if the key's owner is authorized to - * sign this record, as this requires a resolver or database. + * Verifies the RRSIG record covering this rdataset signed by a specific + * key. This does not determine if the key's owner is authorized to sign + * this record, as this requires a resolver or database. * If 'ignoretime' is ISC_TRUE, temporal validity will not be checked. * * Requires: diff --git a/contrib/bind9/lib/dns/include/dns/ds.h b/contrib/bind9/lib/dns/include/dns/ds.h index b20b408..03ab0ed 100644 --- a/contrib/bind9/lib/dns/include/dns/ds.h +++ b/contrib/bind9/lib/dns/include/dns/ds.h @@ -1,5 +1,5 @@ /* - * Copyright (C) 2004-2007, 2010 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2007, 2010, 2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 2002 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -27,15 +27,16 @@ #define DNS_DSDIGEST_SHA1 (1) #define DNS_DSDIGEST_SHA256 (2) #define DNS_DSDIGEST_GOST (3) +#define DNS_DSDIGEST_SHA384 (4) /* should not be here... */ #define ISC_GOST_DIGESTLENGTH 32U /* - * Assuming SHA-256 digest type. + * Assuming SHA-384 digest type. */ -#define DNS_DS_BUFFERSIZE (36) +#define DNS_DS_BUFFERSIZE (52) ISC_LANG_BEGINDECLS diff --git a/contrib/bind9/lib/dns/include/dns/iptable.h b/contrib/bind9/lib/dns/include/dns/iptable.h index d7eb140..2ce8e18 100644 --- a/contrib/bind9/lib/dns/include/dns/iptable.h +++ b/contrib/bind9/lib/dns/include/dns/iptable.h @@ -1,5 +1,5 @@ /* - * Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") * * Permission to use, copy, modify, and/or distribute this software for any * purpose with or without fee is hereby granted, provided that the above @@ -23,6 +23,8 @@ #include <isc/magic.h> #include <isc/radix.h> +#include <dns/types.h> + struct dns_iptable { unsigned int magic; isc_mem_t *mctx; diff --git a/contrib/bind9/lib/dns/include/dns/keyvalues.h b/contrib/bind9/lib/dns/include/dns/keyvalues.h index 55c0b8f..0c392ca 100644 --- a/contrib/bind9/lib/dns/include/dns/keyvalues.h +++ b/contrib/bind9/lib/dns/include/dns/keyvalues.h @@ -1,5 +1,5 @@ /* - * Copyright (C) 2004-2010 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2010, 2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1999-2001, 2003 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -71,6 +71,8 @@ #define DNS_KEYALG_RSASHA256 8 #define DNS_KEYALG_RSASHA512 10 #define DNS_KEYALG_ECCGOST 12 +#define DNS_KEYALG_ECDSA256 13 +#define DNS_KEYALG_ECDSA384 14 #define DNS_KEYALG_INDIRECT 252 #define DNS_KEYALG_PRIVATEDNS 253 #define DNS_KEYALG_PRIVATEOID 254 /*%< Key begins with OID giving alg */ @@ -101,4 +103,10 @@ #define DNS_SIG_GOSTSIGSIZE 64 +#define DNS_SIG_ECDSA256SIZE 64 +#define DNS_SIG_ECDSA384SIZE 96 + +#define DNS_KEY_ECDSA256SIZE 64 +#define DNS_KEY_ECDSA384SIZE 96 + #endif /* DNS_KEYVALUES_H */ diff --git a/contrib/bind9/lib/dns/include/dns/log.h b/contrib/bind9/lib/dns/include/dns/log.h index b73b17f..689b148 100644 --- a/contrib/bind9/lib/dns/include/dns/log.h +++ b/contrib/bind9/lib/dns/include/dns/log.h @@ -75,6 +75,7 @@ LIBDNS_EXTERNAL_DATA extern isc_logmodule_t dns_modules[]; #define DNS_LOGMODULE_ACACHE (&dns_modules[25]) #define DNS_LOGMODULE_DLZ (&dns_modules[26]) #define DNS_LOGMODULE_DNSSEC (&dns_modules[27]) +#define DNS_LOGMODULE_CRYPTO (&dns_modules[28]) ISC_LANG_BEGINDECLS diff --git a/contrib/bind9/lib/dns/include/dns/rdataset.h b/contrib/bind9/lib/dns/include/dns/rdataset.h index 7918551..b2b8370 100644 --- a/contrib/bind9/lib/dns/include/dns/rdataset.h +++ b/contrib/bind9/lib/dns/include/dns/rdataset.h @@ -56,6 +56,7 @@ #include <isc/stdtime.h> #include <dns/types.h> +#include <dns/rdatastruct.h> ISC_LANG_BEGINDECLS @@ -651,6 +652,25 @@ dns_rdataset_expire(dns_rdataset_t *rdataset); * Mark the rdataset to be expired in the backing database. */ +void +dns_rdataset_trimttl(dns_rdataset_t *rdataset, dns_rdataset_t *sigrdataset, + dns_rdata_rrsig_t *rrsig, isc_stdtime_t now, + isc_boolean_t acceptexpired); +/*%< + * Trim the ttl of 'rdataset' and 'sigrdataset' so that they will expire + * at or before 'rrsig->expiretime'. If 'acceptexpired' is true and the + * signature has expired or will expire in the next 120 seconds, limit + * the ttl to be no more than 120 seconds. + * + * The ttl is further limited by the original ttl as stored in 'rrsig' + * and the original ttl values of 'rdataset' and 'sigrdataset'. + * + * Requires: + * \li 'rdataset' is a valid rdataset. + * \li 'sigrdataset' is a valid rdataset. + * \li 'rrsig' is non NULL. + */ + const char * dns_trust_totext(dns_trust_t trust); /* diff --git a/contrib/bind9/lib/dns/include/dns/rpz.h b/contrib/bind9/lib/dns/include/dns/rpz.h index 59d4f87..4227dd4 100644 --- a/contrib/bind9/lib/dns/include/dns/rpz.h +++ b/contrib/bind9/lib/dns/include/dns/rpz.h @@ -30,6 +30,7 @@ ISC_LANG_BEGINDECLS #define DNS_RPZ_IP_ZONE "rpz-ip" #define DNS_RPZ_NSIP_ZONE "rpz-nsip" #define DNS_RPZ_NSDNAME_ZONE "rpz-nsdname" +#define DNS_RPZ_PASSTHRU_ZONE "rpz-passthru" typedef isc_uint8_t dns_rpz_cidr_bits_t; @@ -66,11 +67,14 @@ typedef struct dns_rpz_zone dns_rpz_zone_t; struct dns_rpz_zone { ISC_LINK(dns_rpz_zone_t) link; - int num; + int num; /* ordinal in list of policy zones */ dns_name_t origin; /* Policy zone name */ dns_name_t nsdname; /* DNS_RPZ_NSDNAME_ZONE.origin */ - dns_rpz_policy_t policy; /* DNS_RPZ_POLICY_GIVEN or override */ + dns_name_t passthru;/* DNS_RPZ_PASSTHRU_ZONE. */ dns_name_t cname; /* override value for ..._CNAME */ + dns_ttl_t max_policy_ttl; + dns_rpz_policy_t policy; /* DNS_RPZ_POLICY_GIVEN or override */ + isc_boolean_t recursive_only; }; /* @@ -143,6 +147,7 @@ typedef struct { } dns_rpz_st_t; #define DNS_RPZ_TTL_DEFAULT 5 +#define DNS_RPZ_MAX_TTL_DEFAULT DNS_RPZ_TTL_DEFAULT /* * So various response policy zone messages can be turned up or down. @@ -152,6 +157,7 @@ typedef struct { #define DNS_RPZ_DEBUG_LEVEL1 ISC_LOG_DEBUG(1) #define DNS_RPZ_DEBUG_LEVEL2 ISC_LOG_DEBUG(2) #define DNS_RPZ_DEBUG_LEVEL3 ISC_LOG_DEBUG(3) +#define DNS_RPZ_DEBUG_QUIET (DNS_RPZ_DEBUG_LEVEL3+1) const char * dns_rpz_type2str(dns_rpz_type_t type); @@ -192,7 +198,8 @@ dns_rpz_cidr_find(dns_rpz_cidr_t *cidr, const isc_netaddr_t *netaddr, dns_name_t *search_name, dns_rpz_cidr_bits_t *prefix); dns_rpz_policy_t -dns_rpz_decode_cname(dns_rdataset_t *, dns_name_t *selfname); +dns_rpz_decode_cname(dns_rpz_zone_t *rpz, dns_rdataset_t *rdataset, + dns_name_t *selfname); ISC_LANG_ENDDECLS diff --git a/contrib/bind9/lib/dns/include/dns/stats.h b/contrib/bind9/lib/dns/include/dns/stats.h index bc77d1e..5364267 100644 --- a/contrib/bind9/lib/dns/include/dns/stats.h +++ b/contrib/bind9/lib/dns/include/dns/stats.h @@ -64,6 +64,16 @@ enum { dns_resstatscounter_max = 30, + /* + * DNSSEC stats. + */ + dns_dnssecstats_asis = 0, + dns_dnssecstats_downcase = 1, + dns_dnssecstats_wildcard = 2, + dns_dnssecstats_fail = 3, + + dns_dnssecstats_max = 4, + /*% * Zone statistics counters. */ diff --git a/contrib/bind9/lib/dns/include/dns/view.h b/contrib/bind9/lib/dns/include/dns/view.h index 7db600b..4a04867 100644 --- a/contrib/bind9/lib/dns/include/dns/view.h +++ b/contrib/bind9/lib/dns/include/dns/view.h @@ -162,6 +162,8 @@ struct dns_view { dns_dns64list_t dns64; unsigned int dns64cnt; ISC_LIST(dns_rpz_zone_t) rpz_zones; + isc_boolean_t rpz_recursive_only; + isc_boolean_t rpz_break_dnssec; /* * Configurable data for server use only, diff --git a/contrib/bind9/lib/dns/include/dns/zone.h b/contrib/bind9/lib/dns/include/dns/zone.h index 9eada59..9db825c 100644 --- a/contrib/bind9/lib/dns/include/dns/zone.h +++ b/contrib/bind9/lib/dns/include/dns/zone.h @@ -1815,7 +1815,7 @@ dns_zone_setsignatures(dns_zone_t *zone, isc_uint32_t signatures); isc_result_t dns_zone_signwithkey(dns_zone_t *zone, dns_secalg_t algorithm, - isc_uint16_t keyid, isc_boolean_t delete); + isc_uint16_t keyid, isc_boolean_t deleteit); /*%< * Initiate/resume signing of the entire zone with the zone DNSKEY(s) * that match the given algorithm and keyid. diff --git a/contrib/bind9/lib/dns/include/dst/Makefile.in b/contrib/bind9/lib/dns/include/dst/Makefile.in index 4ed4ec0..cece67d 100644 --- a/contrib/bind9/lib/dns/include/dst/Makefile.in +++ b/contrib/bind9/lib/dns/include/dst/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/dns/include/dst/dst.h b/contrib/bind9/lib/dns/include/dst/dst.h index bf314f3..b0fa690 100644 --- a/contrib/bind9/lib/dns/include/dst/dst.h +++ b/contrib/bind9/lib/dns/include/dst/dst.h @@ -59,6 +59,8 @@ typedef struct dst_context dst_context_t; #define DST_ALG_RSASHA256 8 #define DST_ALG_RSASHA512 10 #define DST_ALG_ECCGOST 12 +#define DST_ALG_ECDSA256 13 +#define DST_ALG_ECDSA384 14 #define DST_ALG_HMACMD5 157 #define DST_ALG_GSSAPI 160 #define DST_ALG_HMACSHA1 161 /* XXXMPA */ diff --git a/contrib/bind9/lib/dns/include/dst/result.h b/contrib/bind9/lib/dns/include/dst/result.h index d77b72e..00640a1 100644 --- a/contrib/bind9/lib/dns/include/dst/result.h +++ b/contrib/bind9/lib/dns/include/dst/result.h @@ -1,5 +1,5 @@ /* - * Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2008, 2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1999-2001 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -34,7 +34,9 @@ #include <isc/result.h> /* Contractual promise. */ #define DST_R_UNSUPPORTEDALG (ISC_RESULTCLASS_DST + 0) -#define DST_R_OPENSSLFAILURE (ISC_RESULTCLASS_DST + 1) +#define DST_R_CRYPTOFAILURE (ISC_RESULTCLASS_DST + 1) +/* compat */ +#define DST_R_OPENSSLFAILURE DST_R_CRYPTOFAILURE #define DST_R_NOCRYPTO (ISC_RESULTCLASS_DST + 2) #define DST_R_NULLKEY (ISC_RESULTCLASS_DST + 3) #define DST_R_INVALIDPUBLICKEY (ISC_RESULTCLASS_DST + 4) diff --git a/contrib/bind9/lib/dns/log.c b/contrib/bind9/lib/dns/log.c index 8f3774f..d286d10 100644 --- a/contrib/bind9/lib/dns/log.c +++ b/contrib/bind9/lib/dns/log.c @@ -81,6 +81,7 @@ LIBDNS_EXTERNAL_DATA isc_logmodule_t dns_modules[] = { { "dns/acache", 0 }, { "dns/dlz", 0 }, { "dns/dnssec", 0 }, + { "dns/crypto", 0 }, { NULL, 0 } }; diff --git a/contrib/bind9/lib/dns/master.c b/contrib/bind9/lib/dns/master.c index 7f6cf58..8304507 100644 --- a/contrib/bind9/lib/dns/master.c +++ b/contrib/bind9/lib/dns/master.c @@ -2076,19 +2076,21 @@ load_raw(dns_loadctx_t *lctx) { unsigned int loop_cnt = 0; dns_rdatacallbacks_t *callbacks; unsigned char namebuf[DNS_NAME_MAXWIRE]; - isc_region_t r; - dns_name_t name; + dns_fixedname_t fixed; + dns_name_t *name; rdatalist_head_t head, dummy; dns_rdatalist_t rdatalist; isc_mem_t *mctx = lctx->mctx; dns_rdata_t *rdata = NULL; unsigned int rdata_size = 0; int target_size = TSIZ; - isc_buffer_t target; + isc_buffer_t target, buf; unsigned char *target_mem = NULL; + dns_decompress_t dctx; REQUIRE(DNS_LCTX_VALID(lctx)); callbacks = lctx->callbacks; + dns_decompress_init(&dctx, -1, DNS_DECOMPRESS_NONE); if (lctx->first) { dns_masterrawheader_t header; @@ -2145,6 +2147,9 @@ load_raw(dns_loadctx_t *lctx) { } isc_buffer_init(&target, target_mem, target_size); + dns_fixedname_init(&fixed); + name = dns_fixedname_name(&fixed); + /* * In the following loop, we regard any error fatal regardless of * whether "MANYERRORS" is set in the context option. This is because @@ -2156,7 +2161,7 @@ load_raw(dns_loadctx_t *lctx) { for (loop_cnt = 0; (lctx->loop_cnt == 0 || loop_cnt < lctx->loop_cnt); loop_cnt++) { - unsigned int i, rdcount, consumed_name; + unsigned int i, rdcount; isc_uint16_t namelen; isc_uint32_t totallen; size_t minlen, readlen; @@ -2246,12 +2251,11 @@ load_raw(dns_loadctx_t *lctx) { lctx->f); if (result != ISC_R_SUCCESS) goto cleanup; + isc_buffer_setactive(&target, (unsigned int)namelen); - isc_buffer_activeregion(&target, &r); - dns_name_init(&name, NULL); - dns_name_fromregion(&name, &r); - isc_buffer_forward(&target, (unsigned int)namelen); - consumed_name = isc_buffer_consumedlength(&target); + result = dns_name_fromwire(name, &target, &dctx, 0, NULL); + if (result != ISC_R_SUCCESS) + goto cleanup; /* Rdata contents. */ if (rdcount > rdata_size) { @@ -2282,7 +2286,7 @@ load_raw(dns_loadctx_t *lctx) { /* Partial Commit. */ ISC_LIST_APPEND(head, &rdatalist, link); - result = commit(callbacks, lctx, &head, &name, + result = commit(callbacks, lctx, &head, name, NULL, 0); for (j = 0; j < i; j++) { ISC_LIST_UNLINK(rdatalist.rdata, @@ -2294,8 +2298,6 @@ load_raw(dns_loadctx_t *lctx) { /* Rewind the buffer and continue */ isc_buffer_clear(&target); - isc_buffer_add(&target, consumed_name); - isc_buffer_forward(&target, consumed_name); rdcount -= i; @@ -2315,11 +2317,20 @@ load_raw(dns_loadctx_t *lctx) { if (result != ISC_R_SUCCESS) goto cleanup; isc_buffer_setactive(&target, (unsigned int)rdlen); - isc_buffer_activeregion(&target, &r); - isc_buffer_forward(&target, (unsigned int)rdlen); - dns_rdata_fromregion(&rdata[i], rdatalist.rdclass, - rdatalist.type, &r); - + /* + * It is safe to have the source active region and + * the target available region be the same if + * decompression is disabled (see dctx above) and we + * are not downcasing names (options == 0). + */ + isc_buffer_init(&buf, isc_buffer_current(&target), + (unsigned int)rdlen); + result = dns_rdata_fromwire(&rdata[i], + rdatalist.rdclass, + rdatalist.type, &target, + &dctx, 0, &buf); + if (result != ISC_R_SUCCESS) + goto cleanup; ISC_LIST_APPEND(rdatalist.rdata, &rdata[i], link); } @@ -2336,7 +2347,7 @@ load_raw(dns_loadctx_t *lctx) { ISC_LIST_APPEND(head, &rdatalist, link); /* Commit this RRset. rdatalist will be unlinked. */ - result = commit(callbacks, lctx, &head, &name, NULL, 0); + result = commit(callbacks, lctx, &head, name, NULL, 0); for (i = 0; i < rdcount; i++) { ISC_LIST_UNLINK(rdatalist.rdata, &rdata[i], link); diff --git a/contrib/bind9/lib/dns/masterdump.c b/contrib/bind9/lib/dns/masterdump.c index 0c17c1a..a10e6f2 100644 --- a/contrib/bind9/lib/dns/masterdump.c +++ b/contrib/bind9/lib/dns/masterdump.c @@ -1545,7 +1545,8 @@ dns_master_dumptostream2(isc_mem_t *mctx, dns_db_t *db, } static isc_result_t -opentmp(isc_mem_t *mctx, const char *file, char **tempp, FILE **fp) { +opentmp(isc_mem_t *mctx, dns_masterformat_t format, const char *file, + char **tempp, FILE **fp) { FILE *f = NULL; isc_result_t result; char *tempname = NULL; @@ -1560,7 +1561,10 @@ opentmp(isc_mem_t *mctx, const char *file, char **tempp, FILE **fp) { if (result != ISC_R_SUCCESS) goto cleanup; - result = isc_file_openunique(tempname, &f); + if (format == dns_masterformat_text) + result = isc_file_openunique(tempname, &f); + else + result = isc_file_bopenunique(tempname, &f); if (result != ISC_R_SUCCESS) { isc_log_write(dns_lctx, ISC_LOGCATEGORY_GENERAL, DNS_LOGMODULE_MASTERDUMP, ISC_LOG_ERROR, @@ -1604,7 +1608,7 @@ dns_master_dumpinc2(isc_mem_t *mctx, dns_db_t *db, dns_dbversion_t *version, if (file == NULL) return (ISC_R_NOMEMORY); - result = opentmp(mctx, filename, &tempname, &f); + result = opentmp(mctx, format, filename, &tempname, &f); if (result != ISC_R_SUCCESS) goto cleanup; @@ -1658,7 +1662,7 @@ dns_master_dump2(isc_mem_t *mctx, dns_db_t *db, dns_dbversion_t *version, char *tempname; dns_dumpctx_t *dctx = NULL; - result = opentmp(mctx, filename, &tempname, &f); + result = opentmp(mctx, format, filename, &tempname, &f); if (result != ISC_R_SUCCESS) return (result); diff --git a/contrib/bind9/lib/dns/openssl_link.c b/contrib/bind9/lib/dns/openssl_link.c index 59626f2..d186761 100644 --- a/contrib/bind9/lib/dns/openssl_link.c +++ b/contrib/bind9/lib/dns/openssl_link.c @@ -45,6 +45,8 @@ #include <isc/thread.h> #include <isc/util.h> +#include <dns/log.h> + #include <dst/result.h> #include "dst_internal.h" @@ -172,6 +174,8 @@ dst__openssl_init(const char *engine) { CRYPTO_set_locking_callback(lock_callback); CRYPTO_set_id_callback(id_callback); + ERR_load_crypto_strings(); + rm = mem_alloc(sizeof(RAND_METHOD)); if (rm == NULL) { result = ISC_R_NOMEMORY; @@ -285,7 +289,7 @@ dst__openssl_destroy() { isc_result_t dst__openssl_toresult(isc_result_t fallback) { isc_result_t result = fallback; - int err = ERR_get_error(); + unsigned long err = ERR_get_error(); switch (ERR_GET_REASON(err)) { case ERR_R_MALLOC_FAILURE: @@ -298,6 +302,40 @@ dst__openssl_toresult(isc_result_t fallback) { return (result); } +isc_result_t +dst__openssl_toresult2(const char *funcname, isc_result_t fallback) { + isc_result_t result = fallback; + unsigned long err = ERR_peek_error(); + const char *file, *data; + int line, flags; + char buf[256]; + + switch (ERR_GET_REASON(err)) { + case ERR_R_MALLOC_FAILURE: + result = ISC_R_NOMEMORY; + goto done; + default: + break; + } + isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL, + DNS_LOGMODULE_CRYPTO, ISC_LOG_WARNING, + "%s failed", funcname); + for (;;) { + err = ERR_get_error_line_data(&file, &line, &data, &flags); + if (err == 0U) + goto done; + ERR_error_string_n(err, buf, sizeof(buf)); + isc_log_write(dns_lctx, DNS_LOGCATEGORY_GENERAL, + DNS_LOGMODULE_CRYPTO, ISC_LOG_INFO, + "%s:%s:%d:%s", buf, file, line, + (flags & ERR_TXT_STRING) ? data : ""); + } + + done: + ERR_clear_error(); + return (result); +} + #if defined(USE_ENGINE) ENGINE * dst__openssl_getengine(const char *engine) { diff --git a/contrib/bind9/lib/dns/openssldh_link.c b/contrib/bind9/lib/dns/openssldh_link.c index 71b4b12..9fe9bb5 100644 --- a/contrib/bind9/lib/dns/openssldh_link.c +++ b/contrib/bind9/lib/dns/openssldh_link.c @@ -1,5 +1,5 @@ /* - * Portions Copyright (C) 2004-2009, 2011 Internet Systems Consortium, Inc. ("ISC") + * Portions Copyright (C) 2004-2009, 2011, 2012 Internet Systems Consortium, Inc. ("ISC") * Portions Copyright (C) 1999-2002 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -94,7 +94,8 @@ openssldh_computesecret(const dst_key_t *pub, const dst_key_t *priv, return (ISC_R_NOSPACE); ret = DH_compute_key(r.base, dhpub->pub_key, dhpriv); if (ret == 0) - return (dst__openssl_toresult(DST_R_COMPUTESECRETFAILURE)); + return (dst__openssl_toresult2("DH_compute_key", + DST_R_COMPUTESECRETFAILURE)); isc_buffer_add(secret, len); return (ISC_R_SUCCESS); } @@ -204,7 +205,7 @@ openssldh_generate(dst_key_t *key, int generator, void (*callback)(int)) { #if OPENSSL_VERSION_NUMBER > 0x00908000L dh = DH_new(); if (dh == NULL) - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + return (dst__openssl_toresult(ISC_R_NOMEMORY)); if (callback == NULL) { BN_GENCB_set_old(&cb, NULL, NULL); @@ -216,7 +217,9 @@ openssldh_generate(dst_key_t *key, int generator, void (*callback)(int)) { if (!DH_generate_parameters_ex(dh, key->key_size, generator, &cb)) { DH_free(dh); - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + return (dst__openssl_toresult2( + "DH_generate_parameters_ex", + DST_R_OPENSSLFAILURE)); } #else dh = DH_generate_parameters(key->key_size, generator, @@ -225,11 +228,13 @@ openssldh_generate(dst_key_t *key, int generator, void (*callback)(int)) { } if (dh == NULL) - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + return (dst__openssl_toresult2("DH_generate_parameters", + DST_R_OPENSSLFAILURE)); if (DH_generate_key(dh) == 0) { DH_free(dh); - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + return (dst__openssl_toresult2("DH_generate_key", + DST_R_OPENSSLFAILURE)); } dh->flags &= ~DH_FLAG_CACHE_MONT_P; @@ -460,6 +465,7 @@ openssldh_tofile(const dst_key_t *key, const char *directory) { dh = key->keydata.dh; + memset(bufs, 0, sizeof(bufs)); for (i = 0; i < 4; i++) { bufs[i] = isc_mem_get(key->mctx, BN_num_bytes(dh->p)); if (bufs[i] == NULL) { diff --git a/contrib/bind9/lib/dns/openssldsa_link.c b/contrib/bind9/lib/dns/openssldsa_link.c index 39c0615..e2cf8cd 100644 --- a/contrib/bind9/lib/dns/openssldsa_link.c +++ b/contrib/bind9/lib/dns/openssldsa_link.c @@ -168,7 +168,8 @@ openssldsa_sign(dst_context_t *dctx, isc_buffer_t *sig) { if (!EVP_SignFinal(evp_md_ctx, sigbuf, &siglen, pkey)) { EVP_PKEY_free(pkey); free(sigbuf); - return (ISC_R_FAILURE); + return (dst__openssl_toresult2("EVP_SignFinal", + ISC_R_FAILURE)); } INSIST(EVP_PKEY_size(pkey) >= (int) siglen); EVP_PKEY_free(pkey); @@ -181,23 +182,26 @@ openssldsa_sign(dst_context_t *dctx, isc_buffer_t *sig) { sb = sigbuf; if (d2i_DSA_SIG(&dsasig, &sb, (long) siglen) == NULL) { free(sigbuf); - return (ISC_R_FAILURE); + return (dst__openssl_toresult2("d2i_DSA_SIG", ISC_R_FAILURE)); } free(sigbuf); #elif 0 /* Only use EVP for the Digest */ if (!EVP_DigestFinal_ex(evp_md_ctx, digest, &siglen)) { - return (ISC_R_FAILURE); + return (dst__openssl_toresult2("EVP_DigestFinal_ex", + ISC_R_FAILURE)); } dsasig = DSA_do_sign(digest, ISC_SHA1_DIGESTLENGTH, dsa); if (dsasig == NULL) - return (dst__openssl_toresult(DST_R_SIGNFAILURE)); + return (dst__openssl_toresult2("DSA_do_sign", + DST_R_SIGNFAILURE)); #else isc_sha1_final(sha1ctx, digest); dsasig = DSA_do_sign(digest, ISC_SHA1_DIGESTLENGTH, dsa); if (dsasig == NULL) - return (dst__openssl_toresult(DST_R_SIGNFAILURE)); + return (dst__openssl_toresult2("DSA_do_sign", + DST_R_SIGNFAILURE)); #endif *r.base++ = (key->key_size - 512)/64; BN_bn2bin_fixed(dsasig->r, r.base, ISC_SHA1_DIGESTLENGTH); @@ -276,10 +280,15 @@ openssldsa_verify(dst_context_t *dctx, const isc_region_t *sig) { status = DSA_do_verify(digest, ISC_SHA1_DIGESTLENGTH, dsasig, dsa); #endif DSA_SIG_free(dsasig); - if (status != 1) + switch (status) { + case 1: + return (ISC_R_SUCCESS); + case 0: return (dst__openssl_toresult(DST_R_VERIFYFAILURE)); - - return (ISC_R_SUCCESS); + default: + return (dst__openssl_toresult2("DSA_do_verify", + DST_R_VERIFYFAILURE)); + } } static isc_boolean_t @@ -370,19 +379,22 @@ openssldsa_generate(dst_key_t *key, int unused, void (*callback)(int)) { &cb)) { DSA_free(dsa); - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + return (dst__openssl_toresult2("DSA_generate_parameters_ex", + DST_R_OPENSSLFAILURE)); } #else dsa = DSA_generate_parameters(key->key_size, rand_array, ISC_SHA1_DIGESTLENGTH, NULL, NULL, NULL, NULL); if (dsa == NULL) - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + return (dst__openssl_toresult2("DSA_generate_parameters", + DST_R_OPENSSLFAILURE)); #endif if (DSA_generate_key(dsa) == 0) { DSA_free(dsa); - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + return (dst__openssl_toresult2("DSA_generate_key", + DST_R_OPENSSLFAILURE)); } dsa->flags &= ~DSA_FLAG_CACHE_MONT_P; diff --git a/contrib/bind9/lib/dns/opensslecdsa_link.c b/contrib/bind9/lib/dns/opensslecdsa_link.c new file mode 100644 index 0000000..e6c9b67 --- /dev/null +++ b/contrib/bind9/lib/dns/opensslecdsa_link.c @@ -0,0 +1,596 @@ +/* + * Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC") + * + * Permission to use, copy, modify, and/or distribute this software for any + * purpose with or without fee is hereby granted, provided that the above + * copyright notice and this permission notice appear in all copies. + * + * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH + * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY + * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, + * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM + * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE + * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR + * PERFORMANCE OF THIS SOFTWARE. + */ + +/* $Id$ */ + +#include <config.h> + +#ifdef HAVE_OPENSSL_ECDSA + +#if !defined(HAVE_EVP_SHA256) || !defined(HAVE_EVP_SHA384) +#error "ECDSA without EVP for SHA2?" +#endif + +#include <isc/entropy.h> +#include <isc/mem.h> +#include <isc/sha2.h> +#include <isc/string.h> +#include <isc/util.h> + +#include <dns/keyvalues.h> +#include <dst/result.h> + +#include "dst_internal.h" +#include "dst_openssl.h" +#include "dst_parse.h" + +#include <openssl/err.h> +#include <openssl/objects.h> +#include <openssl/ecdsa.h> +#include <openssl/bn.h> + +#ifndef NID_X9_62_prime256v1 +#error "P-256 group is not known (NID_X9_62_prime256v1)" +#endif +#ifndef NID_secp384r1 +#error "P-384 group is not known (NID_secp384r1)" +#endif + +#define DST_RET(a) {ret = a; goto err;} + +static isc_result_t opensslecdsa_todns(const dst_key_t *key, + isc_buffer_t *data); + +static isc_result_t +opensslecdsa_createctx(dst_key_t *key, dst_context_t *dctx) { + EVP_MD_CTX *evp_md_ctx; + const EVP_MD *type = NULL; + + UNUSED(key); + REQUIRE(dctx->key->key_alg == DST_ALG_ECDSA256 || + dctx->key->key_alg == DST_ALG_ECDSA384); + + evp_md_ctx = EVP_MD_CTX_create(); + if (evp_md_ctx == NULL) + return (ISC_R_NOMEMORY); + if (dctx->key->key_alg == DST_ALG_ECDSA256) + type = EVP_sha256(); + else + type = EVP_sha384(); + + if (!EVP_DigestInit_ex(evp_md_ctx, type, NULL)) { + EVP_MD_CTX_destroy(evp_md_ctx); + return (dst__openssl_toresult2("EVP_DigestInit_ex", + ISC_R_FAILURE)); + } + + dctx->ctxdata.evp_md_ctx = evp_md_ctx; + + return (ISC_R_SUCCESS); +} + +static void +opensslecdsa_destroyctx(dst_context_t *dctx) { + EVP_MD_CTX *evp_md_ctx = dctx->ctxdata.evp_md_ctx; + + REQUIRE(dctx->key->key_alg == DST_ALG_ECDSA256 || + dctx->key->key_alg == DST_ALG_ECDSA384); + + if (evp_md_ctx != NULL) { + EVP_MD_CTX_destroy(evp_md_ctx); + dctx->ctxdata.evp_md_ctx = NULL; + } +} + +static isc_result_t +opensslecdsa_adddata(dst_context_t *dctx, const isc_region_t *data) { + EVP_MD_CTX *evp_md_ctx = dctx->ctxdata.evp_md_ctx; + + REQUIRE(dctx->key->key_alg == DST_ALG_ECDSA256 || + dctx->key->key_alg == DST_ALG_ECDSA384); + + if (!EVP_DigestUpdate(evp_md_ctx, data->base, data->length)) + return (dst__openssl_toresult2("EVP_DigestUpdate", + ISC_R_FAILURE)); + + return (ISC_R_SUCCESS); +} + +static int +BN_bn2bin_fixed(BIGNUM *bn, unsigned char *buf, int size) { + int bytes = size - BN_num_bytes(bn); + + while (bytes-- > 0) + *buf++ = 0; + BN_bn2bin(bn, buf); + return (size); +} + +static isc_result_t +opensslecdsa_sign(dst_context_t *dctx, isc_buffer_t *sig) { + isc_result_t ret; + dst_key_t *key = dctx->key; + isc_region_t r; + ECDSA_SIG *ecdsasig; + EVP_MD_CTX *evp_md_ctx = dctx->ctxdata.evp_md_ctx; + EVP_PKEY *pkey = key->keydata.pkey; + EC_KEY *eckey = EVP_PKEY_get1_EC_KEY(pkey); + unsigned int dgstlen, siglen; + unsigned char digest[EVP_MAX_MD_SIZE]; + + REQUIRE(key->key_alg == DST_ALG_ECDSA256 || + key->key_alg == DST_ALG_ECDSA384); + + if (eckey == NULL) + return (ISC_R_FAILURE); + + if (key->key_alg == DST_ALG_ECDSA256) + siglen = DNS_SIG_ECDSA256SIZE; + else + siglen = DNS_SIG_ECDSA384SIZE; + + isc_buffer_availableregion(sig, &r); + if (r.length < siglen) + DST_RET(ISC_R_NOSPACE); + + if (!EVP_DigestFinal(evp_md_ctx, digest, &dgstlen)) + DST_RET(dst__openssl_toresult2("EVP_DigestFinal", + ISC_R_FAILURE)); + + ecdsasig = ECDSA_do_sign(digest, dgstlen, eckey); + if (ecdsasig == NULL) + DST_RET(dst__openssl_toresult2("ECDSA_do_sign", + DST_R_SIGNFAILURE)); + BN_bn2bin_fixed(ecdsasig->r, r.base, siglen / 2); + r.base += siglen / 2; + BN_bn2bin_fixed(ecdsasig->s, r.base, siglen / 2); + r.base += siglen / 2; + ECDSA_SIG_free(ecdsasig); + isc_buffer_add(sig, siglen); + ret = ISC_R_SUCCESS; + + err: + if (eckey != NULL) + EC_KEY_free(eckey); + return (ret); +} + +static isc_result_t +opensslecdsa_verify(dst_context_t *dctx, const isc_region_t *sig) { + isc_result_t ret; + dst_key_t *key = dctx->key; + int status; + unsigned char *cp = sig->base; + ECDSA_SIG *ecdsasig = NULL; + EVP_MD_CTX *evp_md_ctx = dctx->ctxdata.evp_md_ctx; + EVP_PKEY *pkey = key->keydata.pkey; + EC_KEY *eckey = EVP_PKEY_get1_EC_KEY(pkey); + unsigned int dgstlen, siglen; + unsigned char digest[EVP_MAX_MD_SIZE]; + + REQUIRE(key->key_alg == DST_ALG_ECDSA256 || + key->key_alg == DST_ALG_ECDSA384); + + if (eckey == NULL) + return (ISC_R_FAILURE); + + if (key->key_alg == DST_ALG_ECDSA256) + siglen = DNS_SIG_ECDSA256SIZE; + else + siglen = DNS_SIG_ECDSA384SIZE; + + if (sig->length != siglen) + return (DST_R_VERIFYFAILURE); + + if (!EVP_DigestFinal_ex(evp_md_ctx, digest, &dgstlen)) + DST_RET (dst__openssl_toresult2("EVP_DigestFinal_ex", + ISC_R_FAILURE)); + + ecdsasig = ECDSA_SIG_new(); + if (ecdsasig == NULL) + DST_RET (ISC_R_NOMEMORY); + ecdsasig->r = BN_bin2bn(cp, siglen / 2, NULL); + cp += siglen / 2; + ecdsasig->s = BN_bin2bn(cp, siglen / 2, NULL); + /* cp += siglen / 2; */ + + status = ECDSA_do_verify(digest, dgstlen, ecdsasig, eckey); + switch (status) { + case 1: + ret = ISC_R_SUCCESS; + break; + case 0: + ret = dst__openssl_toresult(DST_R_VERIFYFAILURE); + break; + default: + ret = dst__openssl_toresult2("ECDSA_do_verify", + DST_R_VERIFYFAILURE); + break; + } + + err: + if (ecdsasig != NULL) + ECDSA_SIG_free(ecdsasig); + if (eckey != NULL) + EC_KEY_free(eckey); + return (ret); +} + +static isc_boolean_t +opensslecdsa_compare(const dst_key_t *key1, const dst_key_t *key2) { + isc_boolean_t ret; + int status; + EVP_PKEY *pkey1 = key1->keydata.pkey; + EVP_PKEY *pkey2 = key2->keydata.pkey; + EC_KEY *eckey1 = NULL; + EC_KEY *eckey2 = NULL; + const BIGNUM *priv1, *priv2; + + if (pkey1 == NULL && pkey2 == NULL) + return (ISC_TRUE); + else if (pkey1 == NULL || pkey2 == NULL) + return (ISC_FALSE); + + eckey1 = EVP_PKEY_get1_EC_KEY(pkey1); + eckey2 = EVP_PKEY_get1_EC_KEY(pkey2); + if (eckey1 == NULL && eckey2 == NULL) { + DST_RET (ISC_TRUE); + } else if (eckey1 == NULL || eckey2 == NULL) + DST_RET (ISC_FALSE); + + status = EVP_PKEY_cmp(pkey1, pkey2); + if (status != 1) + DST_RET (ISC_FALSE); + + priv1 = EC_KEY_get0_private_key(eckey1); + priv2 = EC_KEY_get0_private_key(eckey2); + if (priv1 != NULL || priv2 != NULL) { + if (priv1 == NULL || priv2 == NULL) + DST_RET (ISC_FALSE); + if (BN_cmp(priv1, priv2) != 0) + DST_RET (ISC_FALSE); + } + ret = ISC_TRUE; + + err: + if (eckey1 != NULL) + EC_KEY_free(eckey1); + if (eckey2 != NULL) + EC_KEY_free(eckey2); + return (ret); +} + +static isc_result_t +opensslecdsa_generate(dst_key_t *key, int unused, void (*callback)(int)) { + isc_result_t ret; + EVP_PKEY *pkey; + EC_KEY *eckey = NULL; + int group_nid; + + REQUIRE(key->key_alg == DST_ALG_ECDSA256 || + key->key_alg == DST_ALG_ECDSA384); + UNUSED(unused); + UNUSED(callback); + + if (key->key_alg == DST_ALG_ECDSA256) + group_nid = NID_X9_62_prime256v1; + else + group_nid = NID_secp384r1; + + eckey = EC_KEY_new_by_curve_name(group_nid); + if (eckey == NULL) + return (dst__openssl_toresult2("EC_KEY_new_by_curve_name", + DST_R_OPENSSLFAILURE)); + + if (EC_KEY_generate_key(eckey) != 1) + DST_RET (dst__openssl_toresult2("EC_KEY_generate_key", + DST_R_OPENSSLFAILURE)); + + pkey = EVP_PKEY_new(); + if (pkey == NULL) + DST_RET (ISC_R_NOMEMORY); + if (!EVP_PKEY_set1_EC_KEY(pkey, eckey)) { + EVP_PKEY_free(pkey); + DST_RET (ISC_R_FAILURE); + } + key->keydata.pkey = pkey; + ret = ISC_R_SUCCESS; + + err: + if (eckey != NULL) + EC_KEY_free(eckey); + return (ret); +} + +static isc_boolean_t +opensslecdsa_isprivate(const dst_key_t *key) { + isc_boolean_t ret; + EVP_PKEY *pkey = key->keydata.pkey; + EC_KEY *eckey = EVP_PKEY_get1_EC_KEY(pkey); + + ret = ISC_TF(eckey != NULL && EC_KEY_get0_private_key(eckey) != NULL); + if (eckey != NULL) + EC_KEY_free(eckey); + return (ret); +} + +static void +opensslecdsa_destroy(dst_key_t *key) { + EVP_PKEY *pkey = key->keydata.pkey; + + EVP_PKEY_free(pkey); + key->keydata.pkey = NULL; +} + +static isc_result_t +opensslecdsa_todns(const dst_key_t *key, isc_buffer_t *data) { + isc_result_t ret; + EVP_PKEY *pkey; + EC_KEY *eckey = NULL; + isc_region_t r; + int len; + unsigned char *cp; + unsigned char buf[DNS_KEY_ECDSA384SIZE + 1]; + + REQUIRE(key->keydata.pkey != NULL); + + pkey = key->keydata.pkey; + eckey = EVP_PKEY_get1_EC_KEY(pkey); + if (eckey == NULL) + return (dst__openssl_toresult(ISC_R_FAILURE)); + len = i2o_ECPublicKey(eckey, NULL); + /* skip form */ + len--; + + isc_buffer_availableregion(data, &r); + if (r.length < (unsigned int) len) + DST_RET (ISC_R_NOSPACE); + cp = buf; + if (!i2o_ECPublicKey(eckey, &cp)) + DST_RET (dst__openssl_toresult(ISC_R_FAILURE)); + memcpy(r.base, buf + 1, len); + isc_buffer_add(data, len); + ret = ISC_R_SUCCESS; + + err: + if (eckey != NULL) + EC_KEY_free(eckey); + return (ret); +} + +static isc_result_t +opensslecdsa_fromdns(dst_key_t *key, isc_buffer_t *data) { + isc_result_t ret; + EVP_PKEY *pkey; + EC_KEY *eckey = NULL; + isc_region_t r; + int group_nid; + unsigned int len; + const unsigned char *cp; + unsigned char buf[DNS_KEY_ECDSA384SIZE + 1]; + + REQUIRE(key->key_alg == DST_ALG_ECDSA256 || + key->key_alg == DST_ALG_ECDSA384); + + if (key->key_alg == DST_ALG_ECDSA256) { + len = DNS_KEY_ECDSA256SIZE; + group_nid = NID_X9_62_prime256v1; + } else { + len = DNS_KEY_ECDSA384SIZE; + group_nid = NID_secp384r1; + } + + isc_buffer_remainingregion(data, &r); + if (r.length == 0) + return (ISC_R_SUCCESS); + if (r.length < len) + return (DST_R_INVALIDPUBLICKEY); + + eckey = EC_KEY_new_by_curve_name(group_nid); + if (eckey == NULL) + return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + + buf[0] = POINT_CONVERSION_UNCOMPRESSED; + memcpy(buf + 1, r.base, len); + cp = buf; + if (o2i_ECPublicKey(&eckey, + (const unsigned char **) &cp, + (long) len + 1) == NULL) + DST_RET (dst__openssl_toresult(DST_R_INVALIDPUBLICKEY)); + if (EC_KEY_check_key(eckey) != 1) + DST_RET (dst__openssl_toresult(DST_R_INVALIDPUBLICKEY)); + + pkey = EVP_PKEY_new(); + if (pkey == NULL) + DST_RET (ISC_R_NOMEMORY); + if (!EVP_PKEY_set1_EC_KEY(pkey, eckey)) { + EVP_PKEY_free(pkey); + DST_RET (dst__openssl_toresult(ISC_R_FAILURE)); + } + + isc_buffer_forward(data, len); + key->keydata.pkey = pkey; + ret = ISC_R_SUCCESS; + + err: + if (eckey != NULL) + EC_KEY_free(eckey); + return (ret); +} + +static isc_result_t +opensslecdsa_tofile(const dst_key_t *key, const char *directory) { + isc_result_t ret; + EVP_PKEY *pkey; + EC_KEY *eckey = NULL; + const BIGNUM *privkey; + dst_private_t priv; + unsigned char *buf = NULL; + + if (key->keydata.pkey == NULL) + return (DST_R_NULLKEY); + + pkey = key->keydata.pkey; + eckey = EVP_PKEY_get1_EC_KEY(pkey); + if (eckey == NULL) + return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + privkey = EC_KEY_get0_private_key(eckey); + if (privkey == NULL) + DST_RET (ISC_R_FAILURE); + + buf = isc_mem_get(key->mctx, BN_num_bytes(privkey)); + if (buf == NULL) + DST_RET (ISC_R_NOMEMORY); + + priv.elements[0].tag = TAG_ECDSA_PRIVATEKEY; + priv.elements[0].length = BN_num_bytes(privkey); + BN_bn2bin(privkey, buf); + priv.elements[0].data = buf; + priv.nelements = ECDSA_NTAGS; + ret = dst__privstruct_writefile(key, &priv, directory); + + err: + if (eckey != NULL) + EC_KEY_free(eckey); + if (buf != NULL) + isc_mem_put(key->mctx, buf, BN_num_bytes(privkey)); + return (ret); +} + +static isc_result_t +ecdsa_check(EC_KEY *eckey, dst_key_t *pub) +{ + isc_result_t ret = ISC_R_FAILURE; + EVP_PKEY *pkey; + EC_KEY *pubeckey = NULL; + const EC_POINT *pubkey; + + if (pub == NULL) + return (ISC_R_SUCCESS); + pkey = pub->keydata.pkey; + if (pkey == NULL) + return (ISC_R_SUCCESS); + pubeckey = EVP_PKEY_get1_EC_KEY(pkey); + if (pubeckey == NULL) + return (ISC_R_SUCCESS); + pubkey = EC_KEY_get0_public_key(pubeckey); + if (pubkey == NULL) + DST_RET (ISC_R_SUCCESS); + if (EC_KEY_set_public_key(eckey, pubkey) != 1) + DST_RET (ISC_R_SUCCESS); + if (EC_KEY_check_key(eckey) == 1) + DST_RET (ISC_R_SUCCESS); + + err: + if (pubeckey != NULL) + EC_KEY_free(pubeckey); + return (ret); +} + +static isc_result_t +opensslecdsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) { + dst_private_t priv; + isc_result_t ret; + EVP_PKEY *pkey; + EC_KEY *eckey = NULL; + BIGNUM *privkey; + int group_nid; + isc_mem_t *mctx = key->mctx; + + REQUIRE(key->key_alg == DST_ALG_ECDSA256 || + key->key_alg == DST_ALG_ECDSA384); + + if (key->key_alg == DST_ALG_ECDSA256) + group_nid = NID_X9_62_prime256v1; + else + group_nid = NID_secp384r1; + + eckey = EC_KEY_new_by_curve_name(group_nid); + if (eckey == NULL) + return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + + /* read private key file */ + ret = dst__privstruct_parse(key, DST_ALG_ECDSA256, lexer, mctx, &priv); + if (ret != ISC_R_SUCCESS) + goto err; + + privkey = BN_bin2bn(priv.elements[0].data, + priv.elements[0].length, NULL); + if (privkey == NULL) + DST_RET(ISC_R_NOMEMORY); + if (!EC_KEY_set_private_key(eckey, privkey)) + DST_RET(ISC_R_NOMEMORY); + if (ecdsa_check(eckey, pub) != ISC_R_SUCCESS) + DST_RET(DST_R_INVALIDPRIVATEKEY); + dst__privstruct_free(&priv, mctx); + memset(&priv, 0, sizeof(priv)); + + pkey = EVP_PKEY_new(); + if (pkey == NULL) + DST_RET (ISC_R_NOMEMORY); + if (!EVP_PKEY_set1_EC_KEY(pkey, eckey)) { + EVP_PKEY_free(pkey); + DST_RET (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + } + key->keydata.pkey = pkey; + ret = ISC_R_SUCCESS; + + err: + if (eckey != NULL) + EC_KEY_free(eckey); + dst__privstruct_free(&priv, mctx); + memset(&priv, 0, sizeof(priv)); + return (ret); +} + +static dst_func_t opensslecdsa_functions = { + opensslecdsa_createctx, + opensslecdsa_destroyctx, + opensslecdsa_adddata, + opensslecdsa_sign, + opensslecdsa_verify, + NULL, /*%< computesecret */ + opensslecdsa_compare, + NULL, /*%< paramcompare */ + opensslecdsa_generate, + opensslecdsa_isprivate, + opensslecdsa_destroy, + opensslecdsa_todns, + opensslecdsa_fromdns, + opensslecdsa_tofile, + opensslecdsa_parse, + NULL, /*%< cleanup */ + NULL, /*%< fromlabel */ + NULL, /*%< dump */ + NULL, /*%< restore */ +}; + +isc_result_t +dst__opensslecdsa_init(dst_func_t **funcp) { + REQUIRE(funcp != NULL); + if (*funcp == NULL) + *funcp = &opensslecdsa_functions; + return (ISC_R_SUCCESS); +} + +#else /* HAVE_OPENSSL_ECDSA */ + +#include <isc/util.h> + +EMPTY_TRANSLATION_UNIT + +#endif /* HAVE_OPENSSL_ECDSA */ +/*! \file */ diff --git a/contrib/bind9/lib/dns/opensslgost_link.c b/contrib/bind9/lib/dns/opensslgost_link.c index e92d50f..8a55a6b 100644 --- a/contrib/bind9/lib/dns/opensslgost_link.c +++ b/contrib/bind9/lib/dns/opensslgost_link.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2010, 2011 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2010-2012 Internet Systems Consortium, Inc. ("ISC") * * Permission to use, copy, modify, and/or distribute this software for any * purpose with or without fee is hereby granted, provided that the above @@ -121,10 +121,15 @@ opensslgost_verify(dst_context_t *dctx, const isc_region_t *sig) { EVP_PKEY *pkey = key->keydata.pkey; status = EVP_VerifyFinal(evp_md_ctx, sig->base, sig->length, pkey); - if (status != 1) + switch (status) { + case 1: + return (ISC_R_SUCCESS); + case 0: return (dst__openssl_toresult(DST_R_VERIFYFAILURE)); - - return (ISC_R_SUCCESS); + default: + return (dst__openssl_toresult2("EVP_VerifyFinal", + DST_R_VERIFYFAILURE)); + } } static isc_boolean_t @@ -168,22 +173,27 @@ opensslgost_generate(dst_key_t *key, int unused, void (*callback)(int)) { void (*fptr)(int); } u; EVP_PKEY *pkey = NULL; + isc_result_t ret; UNUSED(unused); ctx = EVP_PKEY_CTX_new_id(NID_id_GostR3410_2001, NULL); if (ctx == NULL) - goto err; + DST_RET(dst__openssl_toresult2("EVP_PKEY_CTX_new_id", + DST_R_OPENSSLFAILURE)); if (callback != NULL) { u.fptr = callback; EVP_PKEY_CTX_set_app_data(ctx, u.dptr); EVP_PKEY_CTX_set_cb(ctx, &progress_cb); } if (EVP_PKEY_keygen_init(ctx) <= 0) - goto err; + DST_RET(dst__openssl_toresult2("EVP_PKEY_keygen_init", + DST_R_OPENSSLFAILURE)); if (EVP_PKEY_CTX_ctrl_str(ctx, "paramset", "A") <= 0) - goto err; + DST_RET(dst__openssl_toresult2("EVP_PKEY_CTX_ctrl_str", + DST_R_OPENSSLFAILURE)); if (EVP_PKEY_keygen(ctx, &pkey) <= 0) - goto err; + DST_RET(dst__openssl_toresult2("EVP_PKEY_keygen", + DST_R_OPENSSLFAILURE)); key->keydata.pkey = pkey; EVP_PKEY_CTX_free(ctx); return (ISC_R_SUCCESS); @@ -193,7 +203,7 @@ err: EVP_PKEY_free(pkey); if (ctx != NULL) EVP_PKEY_CTX_free(ctx); - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + return (ret); } static isc_boolean_t @@ -267,7 +277,8 @@ opensslgost_fromdns(dst_key_t *key, isc_buffer_t *data) { p = der; if (d2i_PUBKEY(&pkey, &p, (long) sizeof(der)) == NULL) - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + return (dst__openssl_toresult2("d2i_PUBKEY", + DST_R_OPENSSLFAILURE)); key->keydata.pkey = pkey; return (ISC_R_SUCCESS); @@ -293,7 +304,8 @@ opensslgost_tofile(const dst_key_t *key, const char *directory) { p = der; if (i2d_PrivateKey(pkey, &p) != len) { - result = dst__openssl_toresult(DST_R_OPENSSLFAILURE); + result = dst__openssl_toresult2("i2d_PrivateKey", + DST_R_OPENSSLFAILURE); goto fail; } @@ -328,7 +340,8 @@ opensslgost_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) { p = priv.elements[0].data; if (d2i_PrivateKey(NID_id_GostR3410_2001, &pkey, &p, (long) priv.elements[0].length) == NULL) - DST_RET(DST_R_INVALIDPRIVATEKEY); + DST_RET(dst__openssl_toresult2("d2i_PrivateKey", + DST_R_INVALIDPRIVATEKEY)); key->keydata.pkey = pkey; key->key_size = EVP_PKEY_bits(pkey); dst__privstruct_free(&priv, mctx); @@ -377,35 +390,47 @@ static dst_func_t opensslgost_functions = { isc_result_t dst__opensslgost_init(dst_func_t **funcp) { + isc_result_t ret; + REQUIRE(funcp != NULL); /* check if the gost engine works properly */ e = ENGINE_by_id("gost"); if (e == NULL) - return (DST_R_OPENSSLFAILURE); + return (dst__openssl_toresult2("ENGINE_by_id", + DST_R_OPENSSLFAILURE)); if (ENGINE_init(e) <= 0) { ENGINE_free(e); e = NULL; - return (DST_R_OPENSSLFAILURE); + return (dst__openssl_toresult2("ENGINE_init", + DST_R_OPENSSLFAILURE)); } /* better than to rely on digest_gost symbol */ opensslgost_digest = ENGINE_get_digest(e, NID_id_GostR3411_94); + if (opensslgost_digest == NULL) + DST_RET(dst__openssl_toresult2("ENGINE_get_digest", + DST_R_OPENSSLFAILURE)); /* from openssl.cnf */ - if ((opensslgost_digest == NULL) || - (ENGINE_register_pkey_asn1_meths(e) <= 0) || - (ENGINE_ctrl_cmd_string(e, - "CRYPT_PARAMS", - "id-Gost28147-89-CryptoPro-A-ParamSet", - 0) <= 0)) { - ENGINE_finish(e); - ENGINE_free(e); - e = NULL; - return (DST_R_OPENSSLFAILURE); - } + if (ENGINE_register_pkey_asn1_meths(e) <= 0) + DST_RET(dst__openssl_toresult2( + "ENGINE_register_pkey_asn1_meths", + DST_R_OPENSSLFAILURE)); + if (ENGINE_ctrl_cmd_string(e, + "CRYPT_PARAMS", + "id-Gost28147-89-CryptoPro-A-ParamSet", + 0) <= 0) + DST_RET(dst__openssl_toresult2("ENGINE_ctrl_cmd_string", + DST_R_OPENSSLFAILURE)); if (*funcp == NULL) *funcp = &opensslgost_functions; return (ISC_R_SUCCESS); + + err: + ENGINE_finish(e); + ENGINE_free(e); + e = NULL; + return (ret); } #else /* HAVE_OPENSSL_GOST */ diff --git a/contrib/bind9/lib/dns/opensslrsa_link.c b/contrib/bind9/lib/dns/opensslrsa_link.c index a245618..80c3f57 100644 --- a/contrib/bind9/lib/dns/opensslrsa_link.c +++ b/contrib/bind9/lib/dns/opensslrsa_link.c @@ -156,7 +156,8 @@ opensslrsa_createctx(dst_key_t *key, dst_context_t *dctx) { if (!EVP_DigestInit_ex(evp_md_ctx, type, NULL)) { EVP_MD_CTX_destroy(evp_md_ctx); - return (ISC_R_FAILURE); + return (dst__openssl_toresult2("EVP_DigestInit_ex", + ISC_R_FAILURE)); } dctx->ctxdata.evp_md_ctx = evp_md_ctx; #else @@ -304,7 +305,8 @@ opensslrsa_adddata(dst_context_t *dctx, const isc_region_t *data) { #if USE_EVP if (!EVP_DigestUpdate(evp_md_ctx, data->base, data->length)) { - return (ISC_R_FAILURE); + return (dst__openssl_toresult2("EVP_DigestUpdate", + ISC_R_FAILURE)); } #else switch (dctx->key->key_alg) { @@ -374,10 +376,6 @@ opensslrsa_sign(dst_context_t *dctx, isc_buffer_t *sig) { int status; int type = 0; unsigned int digestlen = 0; - char *message; - unsigned long err; - const char* file; - int line; #if OPENSSL_VERSION_NUMBER < 0x00908000L unsigned int prefixlen = 0; const unsigned char *prefix = NULL; @@ -397,7 +395,8 @@ opensslrsa_sign(dst_context_t *dctx, isc_buffer_t *sig) { return (ISC_R_NOSPACE); if (!EVP_SignFinal(evp_md_ctx, r.base, &siglen, pkey)) { - return (ISC_R_FAILURE); + return (dst__openssl_toresult2("EVP_SignFinal", + ISC_R_FAILURE)); } #else if (r.length < (unsigned int) RSA_size(rsa)) @@ -489,13 +488,9 @@ opensslrsa_sign(dst_context_t *dctx, isc_buffer_t *sig) { INSIST(type != 0); status = RSA_sign(type, digest, digestlen, r.base, &siglen, rsa); #endif - if (status == 0) { - err = ERR_peek_error_line(&file, &line); - if (err != 0U) { - message = ERR_error_string(err, NULL); - } - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); - } + if (status == 0) + return (dst__openssl_toresult2("RSA_sign", + DST_R_OPENSSLFAILURE)); #endif isc_buffer_add(sig, siglen); @@ -615,7 +610,9 @@ opensslrsa_verify(dst_context_t *dctx, const isc_region_t *sig) { original, rsa, RSA_PKCS1_PADDING); if (status <= 0) - return (DST_R_VERIFYFAILURE); + return (dst__openssl_toresult2( + "RSA_public_decrypt", + DST_R_VERIFYFAILURE)); if (status != (int)(prefixlen + digestlen)) return (DST_R_VERIFYFAILURE); if (memcmp(original, prefix, prefixlen)) @@ -636,7 +633,8 @@ opensslrsa_verify(dst_context_t *dctx, const isc_region_t *sig) { #endif #endif if (status != 1) - return (dst__openssl_toresult(DST_R_VERIFYFAILURE)); + return (dst__openssl_toresult2("RSA_verify", + DST_R_VERIFYFAILURE)); return (ISC_R_SUCCESS); } @@ -727,6 +725,7 @@ progress_cb(int p, int n, BN_GENCB *cb) static isc_result_t opensslrsa_generate(dst_key_t *key, int exp, void (*callback)(int)) { #if OPENSSL_VERSION_NUMBER > 0x00908000L + isc_result_t ret = DST_R_OPENSSLFAILURE; BN_GENCB cb; union { void *dptr; @@ -776,6 +775,8 @@ opensslrsa_generate(dst_key_t *key, int exp, void (*callback)(int)) { #endif return (ISC_R_SUCCESS); } + ret = dst__openssl_toresult2("RSA_generate_key_ex", + DST_R_OPENSSLFAILURE); err: #if USE_EVP @@ -786,7 +787,7 @@ err: BN_free(e); if (rsa != NULL) RSA_free(rsa); - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + return (dst__openssl_toresult(ret)); #else RSA *rsa; unsigned long e; @@ -810,7 +811,8 @@ err: #if USE_EVP EVP_PKEY_free(pkey); #endif - return (dst__openssl_toresult(DST_R_OPENSSLFAILURE)); + return (dst__openssl_toresult2("RSA_generate_key", + DST_R_OPENSSLFAILURE)); } SET_FLAGS(rsa); #if USE_EVP @@ -1009,6 +1011,7 @@ opensslrsa_tofile(const dst_key_t *key, const char *directory) { rsa = key->keydata.rsa; #endif + memset(bufs, 0, sizeof(bufs)); for (i = 0; i < 8; i++) { bufs[i] = isc_mem_get(key->mctx, BN_num_bytes(rsa->n)); if (bufs[i] == NULL) { @@ -1162,7 +1165,7 @@ opensslrsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) { /* read private key file */ ret = dst__privstruct_parse(key, DST_ALG_RSA, lexer, mctx, &priv); if (ret != ISC_R_SUCCESS) - return (ret); + goto err; for (i = 0; i < priv.nelements; i++) { switch (priv.elements[i].tag) { @@ -1188,10 +1191,10 @@ opensslrsa_parse(dst_key_t *key, isc_lex_t *lexer, dst_key_t *pub) { if (e == NULL) DST_RET(DST_R_NOENGINE); pkey = ENGINE_load_private_key(e, label, NULL, NULL); - if (pkey == NULL) { - /* ERR_print_errors_fp(stderr); */ - DST_RET(ISC_R_NOTFOUND); - } + if (pkey == NULL) + DST_RET(dst__openssl_toresult2( + "ENGINE_load_private_key", + ISC_R_NOTFOUND)); key->engine = isc_mem_strdup(key->mctx, engine); if (key->engine == NULL) DST_RET(ISC_R_NOMEMORY); @@ -1336,7 +1339,8 @@ opensslrsa_fromlabel(dst_key_t *key, const char *engine, const char *label, } pkey = ENGINE_load_private_key(e, label, NULL, NULL); if (pkey == NULL) - DST_RET(ISC_R_NOTFOUND); + DST_RET(dst__openssl_toresult2("ENGINE_load_private_key", + ISC_R_NOTFOUND)); if (engine != NULL) { key->engine = isc_mem_strdup(key->mctx, engine); if (key->engine == NULL) diff --git a/contrib/bind9/lib/dns/rbtdb.c b/contrib/bind9/lib/dns/rbtdb.c index a2523ba..ef721b8 100644 --- a/contrib/bind9/lib/dns/rbtdb.c +++ b/contrib/bind9/lib/dns/rbtdb.c @@ -113,6 +113,8 @@ typedef isc_uint32_t rbtdb_rdatatype_t; RBTDB_RDATATYPE_VALUE(dns_rdatatype_rrsig, dns_rdatatype_cname) #define RBTDB_RDATATYPE_SIGDNAME \ RBTDB_RDATATYPE_VALUE(dns_rdatatype_rrsig, dns_rdatatype_dname) +#define RBTDB_RDATATYPE_SIGDDS \ + RBTDB_RDATATYPE_VALUE(dns_rdatatype_rrsig, dns_rdatatype_ds) #define RBTDB_RDATATYPE_NCACHEANY \ RBTDB_RDATATYPE_VALUE(0, dns_rdatatype_any) @@ -4572,7 +4574,7 @@ get_rpz_enabled(dns_db_t *db, dns_rpz_st_t *st) * configured earlier than this policy zone and does not have a higher * precedence type. */ -static isc_result_t +static void rpz_findips(dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type, dns_zone_t *zone, dns_db_t *db, dns_dbversion_t *version, dns_rdataset_t *ardataset, dns_rpz_st_t *st, @@ -4597,7 +4599,7 @@ rpz_findips(dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type, if (rbtdb->rpz_cidr == NULL) { RWUNLOCK(&rbtdb->tree_lock, isc_rwlocktype_read); - return (ISC_R_UNEXPECTED); + return; } dns_fixedname_init(&selfnamef); @@ -4659,7 +4661,7 @@ rpz_findips(dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type, dns_name_format(qname, namebuf, sizeof(namebuf)); isc_log_write(dns_lctx, DNS_LOGCATEGORY_RPZ, DNS_LOGMODULE_RBTDB, DNS_RPZ_ERROR_LEVEL, - "rpz_findips findnode(%s): %s", + "rpz_findips findnode(%s) failed: %s", namebuf, isc_result_totext(result)); continue; } @@ -4680,7 +4682,8 @@ rpz_findips(dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type, if (zrdataset.type != dns_rdatatype_cname) { rpz_policy = DNS_RPZ_POLICY_RECORD; } else { - rpz_policy = dns_rpz_decode_cname(&zrdataset, + rpz_policy = dns_rpz_decode_cname(rpz, + &zrdataset, selfname); if (rpz_policy == DNS_RPZ_POLICY_RECORD || rpz_policy == DNS_RPZ_POLICY_WILDCNAME) @@ -4738,7 +4741,7 @@ rpz_findips(dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type, st->m.type = rpz_type; st->m.prefix = prefix; st->m.policy = rpz_policy; - st->m.ttl = ttl; + st->m.ttl = ISC_MIN(ttl, rpz->max_policy_ttl); st->m.result = result; dns_name_copy(qname, st->qname, NULL); if ((rpz_policy == DNS_RPZ_POLICY_RECORD || @@ -4755,7 +4758,6 @@ rpz_findips(dns_rpz_zone_t *rpz, dns_rpz_type_t rpz_type, } RWUNLOCK(&rbtdb->tree_lock, isc_rwlocktype_read); - return (ISC_R_SUCCESS); } #endif @@ -5914,13 +5916,12 @@ add(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion, negtype = 0; if (rbtversion == NULL && !newheader_nx) { rdtype = RBTDB_RDATATYPE_BASE(newheader->type); + covers = RBTDB_RDATATYPE_EXT(newheader->type); + sigtype = RBTDB_RDATATYPE_VALUE(dns_rdatatype_rrsig, covers); if (NEGATIVE(newheader)) { /* * We're adding a negative cache entry. */ - covers = RBTDB_RDATATYPE_EXT(newheader->type); - sigtype = RBTDB_RDATATYPE_VALUE(dns_rdatatype_rrsig, - covers); for (topheader = rbtnode->data; topheader != NULL; topheader = topheader->next) { @@ -5953,14 +5954,20 @@ add(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion, * We're adding something that isn't a * negative cache entry. Look for an extant * non-stale NXDOMAIN/NODATA(QTYPE=ANY) negative - * cache entry. + * cache entry. If we're adding an RRSIG, also + * check for an extant non-stale NODATA ncache + * entry which covers the same type as the RRSIG. */ for (topheader = rbtnode->data; topheader != NULL; topheader = topheader->next) { - if (topheader->type == - RBTDB_RDATATYPE_NCACHEANY) - break; + if ((topheader->type == + RBTDB_RDATATYPE_NCACHEANY) || + (newheader->type == sigtype && + topheader->type == + RBTDB_RDATATYPE_VALUE(0, covers))) { + break; + } } if (topheader != NULL && EXISTS(topheader) && topheader->rdh_ttl > now) { @@ -5983,7 +5990,7 @@ add(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion, } /* * The new rdataset is better. Expire the - * NXDOMAIN/NODATA(QTYPE=ANY). + * ncache entry. */ set_ttl(rbtdb, topheader, 0); topheader->attributes |= RDATASET_ATTR_STALE; @@ -6145,7 +6152,9 @@ add(dns_rbtdb_t *rbtdb, dns_rbtnode_t *rbtnode, rbtdb_version_t *rbtversion, } if (IS_CACHE(rbtdb) && header->rdh_ttl > now && (header->type == dns_rdatatype_a || - header->type == dns_rdatatype_aaaa) && + header->type == dns_rdatatype_aaaa || + header->type == dns_rdatatype_ds || + header->type == RBTDB_RDATATYPE_SIGDDS) && !header_nx && !newheader_nx && header->trust >= newheader->trust && dns_rdataslab_equal((unsigned char *)header, diff --git a/contrib/bind9/lib/dns/rcode.c b/contrib/bind9/lib/dns/rcode.c index 09f6d83..0b7fe8c 100644 --- a/contrib/bind9/lib/dns/rcode.c +++ b/contrib/bind9/lib/dns/rcode.c @@ -108,6 +108,8 @@ { DNS_KEYALG_RSASHA256, "RSASHA256", 0 }, \ { DNS_KEYALG_RSASHA512, "RSASHA512", 0 }, \ { DNS_KEYALG_ECCGOST, "ECCGOST", 0 }, \ + { DNS_KEYALG_ECDSA256, "ECDSAP256SHA256", 0 }, \ + { DNS_KEYALG_ECDSA384, "ECDSAP384SHA384", 0 }, \ { DNS_KEYALG_INDIRECT, "INDIRECT", 0 }, \ { DNS_KEYALG_PRIVATEDNS, "PRIVATEDNS", 0 }, \ { DNS_KEYALG_PRIVATEOID, "PRIVATEOID", 0 }, \ diff --git a/contrib/bind9/lib/dns/rdata.c b/contrib/bind9/lib/dns/rdata.c index d200f1b..60890e0 100644 --- a/contrib/bind9/lib/dns/rdata.c +++ b/contrib/bind9/lib/dns/rdata.c @@ -436,6 +436,8 @@ dns_rdata_fromwire(dns_rdata_t *rdata, dns_rdataclass_t rdclass, REQUIRE(DNS_RDATA_INITIALIZED(rdata)); REQUIRE(DNS_RDATA_VALIDFLAGS(rdata)); } + REQUIRE(source != NULL); + REQUIRE(target != NULL); if (type == 0) return (DNS_R_FORMERR); @@ -536,13 +538,11 @@ rdata_validate(isc_buffer_t *src, isc_buffer_t *dest, dns_rdataclass_t rdclass, dns_rdatatype_t type) { dns_decompress_t dctx; - dns_rdata_t rdata = DNS_RDATA_INIT; isc_result_t result; dns_decompress_init(&dctx, -1, DNS_DECOMPRESS_NONE); isc_buffer_setactive(src, isc_buffer_usedlength(src)); - result = dns_rdata_fromwire(&rdata, rdclass, type, src, - &dctx, 0, dest); + result = dns_rdata_fromwire(NULL, rdclass, type, src, &dctx, 0, dest); dns_decompress_invalidate(&dctx); return (result); @@ -1167,7 +1167,8 @@ txt_fromwire(isc_buffer_t *source, isc_buffer_t *target) { if (n > tregion.length) return (ISC_R_NOSPACE); - memcpy(tregion.base, sregion.base, n); + if (tregion.base != sregion.base) + memcpy(tregion.base, sregion.base, n); isc_buffer_forward(source, n); isc_buffer_add(target, n); return (ISC_R_SUCCESS); @@ -1341,7 +1342,8 @@ mem_tobuffer(isc_buffer_t *target, void *base, unsigned int length) { isc_buffer_availableregion(target, &tr); if (length > tr.length) return (ISC_R_NOSPACE); - memcpy(tr.base, base, length); + if (tr.base != base) + memcpy(tr.base, base, length); isc_buffer_add(target, length); return (ISC_R_SUCCESS); } diff --git a/contrib/bind9/lib/dns/rdata/generic/dlv_32769.c b/contrib/bind9/lib/dns/rdata/generic/dlv_32769.c index f447e7c..4dbcb1e 100644 --- a/contrib/bind9/lib/dns/rdata/generic/dlv_32769.c +++ b/contrib/bind9/lib/dns/rdata/generic/dlv_32769.c @@ -84,6 +84,9 @@ fromtext_dlv(ARGS_FROMTEXT) { case DNS_DSDIGEST_GOST: length = ISC_GOST_DIGESTLENGTH; break; + case DNS_DSDIGEST_SHA384: + length = ISC_SHA384_DIGESTLENGTH; + break; default: length = -1; break; @@ -162,7 +165,9 @@ fromwire_dlv(ARGS_FROMWIRE) { (sr.base[3] == DNS_DSDIGEST_SHA256 && sr.length < 4 + ISC_SHA256_DIGESTLENGTH) || (sr.base[3] == DNS_DSDIGEST_GOST && - sr.length < 4 + ISC_GOST_DIGESTLENGTH)) + sr.length < 4 + ISC_GOST_DIGESTLENGTH) || + (sr.base[3] == DNS_DSDIGEST_SHA384 && + sr.length < 4 + ISC_SHA384_DIGESTLENGTH)) return (ISC_R_UNEXPECTEDEND); /* @@ -176,6 +181,8 @@ fromwire_dlv(ARGS_FROMWIRE) { sr.length = 4 + ISC_SHA256_DIGESTLENGTH; else if (sr.base[3] == DNS_DSDIGEST_GOST) sr.length = 4 + ISC_GOST_DIGESTLENGTH; + else if (sr.base[3] == DNS_DSDIGEST_SHA384) + sr.length = 4 + ISC_SHA384_DIGESTLENGTH; isc_buffer_forward(source, sr.length); return (mem_tobuffer(target, sr.base, sr.length)); @@ -228,6 +235,9 @@ fromstruct_dlv(ARGS_FROMSTRUCT) { case DNS_DSDIGEST_GOST: REQUIRE(dlv->length == ISC_GOST_DIGESTLENGTH); break; + case DNS_DSDIGEST_SHA384: + REQUIRE(dlv->length == ISC_SHA384_DIGESTLENGTH); + break; } UNUSED(type); diff --git a/contrib/bind9/lib/dns/rdata/generic/ds_43.c b/contrib/bind9/lib/dns/rdata/generic/ds_43.c index cece442..20bac85 100644 --- a/contrib/bind9/lib/dns/rdata/generic/ds_43.c +++ b/contrib/bind9/lib/dns/rdata/generic/ds_43.c @@ -84,6 +84,9 @@ fromtext_ds(ARGS_FROMTEXT) { case DNS_DSDIGEST_GOST: length = ISC_GOST_DIGESTLENGTH; break; + case DNS_DSDIGEST_SHA384: + length = ISC_SHA384_DIGESTLENGTH; + break; default: length = -1; break; @@ -162,7 +165,9 @@ fromwire_ds(ARGS_FROMWIRE) { (sr.base[3] == DNS_DSDIGEST_SHA256 && sr.length < 4 + ISC_SHA256_DIGESTLENGTH) || (sr.base[3] == DNS_DSDIGEST_GOST && - sr.length < 4 + ISC_GOST_DIGESTLENGTH)) + sr.length < 4 + ISC_GOST_DIGESTLENGTH) || + (sr.base[3] == DNS_DSDIGEST_SHA384 && + sr.length < 4 + ISC_SHA384_DIGESTLENGTH)) return (ISC_R_UNEXPECTEDEND); /* @@ -176,6 +181,8 @@ fromwire_ds(ARGS_FROMWIRE) { sr.length = 4 + ISC_SHA256_DIGESTLENGTH; else if (sr.base[3] == DNS_DSDIGEST_GOST) sr.length = 4 + ISC_GOST_DIGESTLENGTH; + else if (sr.base[3] == DNS_DSDIGEST_SHA384) + sr.length = 4 + ISC_SHA384_DIGESTLENGTH; isc_buffer_forward(source, sr.length); return (mem_tobuffer(target, sr.base, sr.length)); @@ -228,6 +235,9 @@ fromstruct_ds(ARGS_FROMSTRUCT) { case DNS_DSDIGEST_GOST: REQUIRE(ds->length == ISC_GOST_DIGESTLENGTH); break; + case DNS_DSDIGEST_SHA384: + REQUIRE(ds->length == ISC_SHA384_DIGESTLENGTH); + break; } UNUSED(type); diff --git a/contrib/bind9/lib/dns/rdataset.c b/contrib/bind9/lib/dns/rdataset.c index 8c86549..026d771 100644 --- a/contrib/bind9/lib/dns/rdataset.c +++ b/contrib/bind9/lib/dns/rdataset.c @@ -26,6 +26,7 @@ #include <isc/buffer.h> #include <isc/mem.h> #include <isc/random.h> +#include <isc/serial.h> #include <isc/util.h> #include <dns/name.h> @@ -772,3 +773,30 @@ dns_rdataset_expire(dns_rdataset_t *rdataset) { if (rdataset->methods->expire != NULL) (rdataset->methods->expire)(rdataset); } + +void +dns_rdataset_trimttl(dns_rdataset_t *rdataset, dns_rdataset_t *sigrdataset, + dns_rdata_rrsig_t *rrsig, isc_stdtime_t now, + isc_boolean_t acceptexpired) +{ + isc_uint32_t ttl = 0; + + REQUIRE(DNS_RDATASET_VALID(rdataset)); + REQUIRE(DNS_RDATASET_VALID(sigrdataset)); + REQUIRE(rrsig != NULL); + + /* + * If we accept expired RRsets keep them for no more than 120 seconds. + */ + if (acceptexpired && + (isc_serial_le(rrsig->timeexpire, ((now + 120) & 0xffffffff)) || + isc_serial_le(rrsig->timeexpire, now))) + ttl = 120; + else if (isc_serial_ge(rrsig->timeexpire, now)) + ttl = rrsig->timeexpire - now; + + ttl = ISC_MIN(ISC_MIN(rdataset->ttl, sigrdataset->ttl), + ISC_MIN(rrsig->originalttl, ttl)); + rdataset->ttl = ttl; + sigrdataset->ttl = ttl; +} diff --git a/contrib/bind9/lib/dns/resolver.c b/contrib/bind9/lib/dns/resolver.c index 4c8b144..503f1d2 100644 --- a/contrib/bind9/lib/dns/resolver.c +++ b/contrib/bind9/lib/dns/resolver.c @@ -105,8 +105,21 @@ #define QTRACE(m) #endif +#define US_PER_SEC 1000000U +/* + * The maximum time we will wait for a single query. + */ +#define MAX_SINGLE_QUERY_TIMEOUT 9U +#define MAX_SINGLE_QUERY_TIMEOUT_US (MAX_SINGLE_QUERY_TIMEOUT*US_PER_SEC) + +/* + * We need to allow a individual query time to complete / timeout. + */ +#define MINIMUM_QUERY_TIMEOUT (MAX_SINGLE_QUERY_TIMEOUT + 1U) + +/* The default time in seconds for the whole query to live. */ #ifndef DEFAULT_QUERY_TIMEOUT -#define DEFAULT_QUERY_TIMEOUT 30 /* The default time in seconds for the whole query to live. */ +#define DEFAULT_QUERY_TIMEOUT MINIMUM_QUERY_TIMEOUT #endif #ifndef MAXIMUM_QUERY_TIMEOUT @@ -821,8 +834,8 @@ fctx_cancelquery(resquery_t **queryp, dns_dispatchevent_t **deventp, */ INSIST(no_response); rtt = query->addrinfo->srtt + 200000; - if (rtt > 10000000) - rtt = 10000000; + if (rtt > MAX_SINGLE_QUERY_TIMEOUT_US) + rtt = MAX_SINGLE_QUERY_TIMEOUT_US; /* * Replace the current RTT with our value. */ @@ -1336,12 +1349,18 @@ fctx_setretryinterval(fetchctx_t *fctx, unsigned int rtt) { us = (800000 << (fctx->restarts - 2)); /* - * Double the round-trip time. + * Add a fudge factor to the expected rtt based on the current + * estimate. */ - rtt *= 2; + if (rtt < 50000) + rtt += 50000; + else if (rtt < 100000) + rtt += 100000; + else + rtt += 200000; /* - * Always wait for at least the doubled round-trip time. + * Always wait for at least the expected rtt. */ if (us < rtt) us = rtt; @@ -1349,11 +1368,11 @@ fctx_setretryinterval(fetchctx_t *fctx, unsigned int rtt) { /* * But don't ever wait for more than 10 seconds. */ - if (us > 10000000) - us = 10000000; + if (us > MAX_SINGLE_QUERY_TIMEOUT_US) + us = MAX_SINGLE_QUERY_TIMEOUT_US; - seconds = us / 1000000; - us -= seconds * 1000000; + seconds = us / US_PER_SEC; + us -= seconds * US_PER_SEC; isc_interval_set(&fctx->interval, seconds, us * 1000); } @@ -1375,6 +1394,11 @@ fctx_query(fetchctx_t *fctx, dns_adbaddrinfo_t *addrinfo, task = res->buckets[fctx->bucketnum].task; srtt = addrinfo->srtt; + + /* + * A forwarder needs to make multiple queries. Give it at least + * a second to do these in. + */ if (ISFORWARDER(addrinfo) && srtt < 1000000) srtt = 1000000; @@ -8211,8 +8235,8 @@ dns_resolver_logfetch(dns_fetch_t *fetch, isc_log_t *lctx, "timeout:%u,lame:%u,neterr:%u,badresp:%u," "adberr:%u,findfail:%u,valfail:%u]", __FILE__, fctx->exitline, fctx->info, - fctx->duration / 1000000, - fctx->duration % 1000000, + fctx->duration / US_PER_SEC, + fctx->duration % US_PER_SEC, isc_result_totext(fctx->result), isc_result_totext(fctx->vresult), domainbuf, fctx->referrals, fctx->restarts, @@ -8818,6 +8842,8 @@ dns_resolver_settimeout(dns_resolver_t *resolver, unsigned int seconds) { seconds = DEFAULT_QUERY_TIMEOUT; if (seconds > MAXIMUM_QUERY_TIMEOUT) seconds = MAXIMUM_QUERY_TIMEOUT; + if (seconds < MINIMUM_QUERY_TIMEOUT) + seconds = MINIMUM_QUERY_TIMEOUT; resolver->query_timeout = seconds; } diff --git a/contrib/bind9/lib/dns/rpz.c b/contrib/bind9/lib/dns/rpz.c index e3f4989..7865859 100644 --- a/contrib/bind9/lib/dns/rpz.c +++ b/contrib/bind9/lib/dns/rpz.c @@ -118,9 +118,9 @@ struct dns_rpz_cidr { isc_mem_t *mctx; isc_boolean_t have_nsdname; /* zone has NSDNAME record */ dns_rpz_cidr_node_t *root; - dns_name_t ip_name; /* RPZ_IP_ZONE.LOCALHOST. */ - dns_name_t nsip_name; /* RPZ_NSIP_ZONE.LOCALHOST. */ - dns_name_t nsdname_name; /* RPZ_NSDNAME_ZONE.LOCALHOST */ + dns_name_t ip_name; /* RPZ_IP_ZONE.origin. */ + dns_name_t nsip_name; /* RPZ_NSIP_ZONE.origin. */ + dns_name_t nsdname_name; /* RPZ_NSDNAME_ZONE.origin */ }; static isc_boolean_t have_rpz_zones = ISC_FALSE; @@ -183,7 +183,7 @@ dns_rpz_policy2str(dns_rpz_policy_t policy) { str = "NODATA"; break; case DNS_RPZ_POLICY_RECORD: - str = "records"; + str = "Local-Data"; break; case DNS_RPZ_POLICY_CNAME: case DNS_RPZ_POLICY_WILDCNAME: @@ -255,6 +255,8 @@ dns_rpz_view_destroy(dns_view_t *view) { ISC_LIST_UNLINK(view->rpz_zones, zone, link); if (dns_name_dynamic(&zone->origin)) dns_name_free(&zone->origin, view->mctx); + if (dns_name_dynamic(&zone->passthru)) + dns_name_free(&zone->passthru, view->mctx); if (dns_name_dynamic(&zone->nsdname)) dns_name_free(&zone->nsdname, view->mctx); if (dns_name_dynamic(&zone->cname)) @@ -427,14 +429,16 @@ new_node(dns_rpz_cidr_t *cidr, const dns_rpz_cidr_key_t *ip, } static void -badname(int level, dns_name_t *name, const char *comment) { +badname(int level, dns_name_t *name, const char *str1, const char *str2) { char printname[DNS_NAME_FORMATSIZE]; - if (isc_log_wouldlog(dns_lctx, level)) { + if (level < DNS_RPZ_DEBUG_QUIET + && isc_log_wouldlog(dns_lctx, level)) { dns_name_format(name, printname, sizeof(printname)); isc_log_write(dns_lctx, DNS_LOGCATEGORY_RPZ, DNS_LOGMODULE_RBTDB, level, - "invalid rpz \"%s\"%s", printname, comment); + "invalid rpz IP address \"%s\"%s%s", + printname, str1, str2); } } @@ -566,11 +570,11 @@ name2ipkey(dns_rpz_cidr_t *cidr, int level, dns_name_t *src_name, dns_rpz_type_t type, dns_rpz_cidr_key_t *tgt_ip, dns_rpz_cidr_bits_t *tgt_prefix) { - isc_buffer_t buffer; - unsigned char data[DNS_NAME_MAXWIRE+1]; + isc_result_t result; dns_fixedname_t fname; - dns_name_t *name; - const char *cp, *end; + dns_name_t *ipname; + char ipstr[DNS_NAME_FORMATSIZE]; + const char *prefix_str, *cp, *end; char *cp2; int ip_labels; dns_rpz_cidr_bits_t bits; @@ -585,37 +589,43 @@ name2ipkey(dns_rpz_cidr_t *cidr, int level, dns_name_t *src_name, ip_labels -= dns_name_countlabels(&cidr->ip_name); ip_labels--; if (ip_labels < 1) { - badname(level, src_name, ", too short"); + badname(level, src_name, "; too short", ""); return (ISC_R_FAILURE); } /* - * Get text for the IP address without RPZ_x_ZONE.rpz.LOCALHOST. + * Get text for the IP address */ dns_fixedname_init(&fname); - name = dns_fixedname_name(&fname); + ipname = dns_fixedname_name(&fname); dns_name_split(src_name, dns_name_countlabels(&cidr->ip_name), - name, NULL); - isc_buffer_init(&buffer, data, sizeof(data)); - dns_name_totext(name, ISC_TRUE, &buffer); - isc_buffer_putuint8(&buffer, '\0'); - cp = isc_buffer_base(&buffer); - - prefix = strtoul(cp, &cp2, 10); - if (prefix < 1U || prefix > 128U || *cp2 != '.') { - badname(level, src_name, ", bad prefix length"); + ipname, NULL); + dns_name_format(ipname, ipstr, sizeof(ipstr)); + end = &ipstr[strlen(ipstr)+1]; + prefix_str = ipstr; + + prefix = strtoul(prefix_str, &cp2, 10); + if (*cp2 != '.') { + badname(level, src_name, + "; invalid leading prefix length", ""); + return (ISC_R_FAILURE); + } + *cp2 = '\0'; + if (prefix < 1U || prefix > 128U) { + badname(level, src_name, + "; invalid prefix length of ", prefix_str); return (ISC_R_FAILURE); } cp = cp2+1; - end = isc_buffer_used(&buffer); if (ip_labels == 4 && !strchr(cp, 'z')) { /* * Convert an IPv4 address * from the form "prefix.w.z.y.x" */ if (prefix > 32U) { - badname(level, src_name, "; bad IPv4 prefix length"); + badname(level, src_name, + "; invalid IPv4 prefix length of ", prefix_str); return (ISC_R_FAILURE); } prefix += 96; @@ -627,7 +637,10 @@ name2ipkey(dns_rpz_cidr_t *cidr, int level, dns_name_t *src_name, for (i = 0; i < 32; i += 8) { l = strtoul(cp, &cp2, 10); if (l > 255U || (*cp2 != '.' && *cp2 != '\0')) { - badname(level, src_name, "; bad IPv4 address"); + if (*cp2 == '.') + *cp2 = '\0'; + badname(level, src_name, + "; invalid IPv4 octet ", cp); return (ISC_R_FAILURE); } tgt_ip->w[3] |= l << i; @@ -654,7 +667,10 @@ name2ipkey(dns_rpz_cidr_t *cidr, int level, dns_name_t *src_name, l = strtoul(cp, &cp2, 16); if (l > 0xffffu || (*cp2 != '.' && *cp2 != '\0')) { - badname(level, src_name, ""); + if (*cp2 == '.') + *cp2 = '\0'; + badname(level, src_name, + "; invalid IPv6 word ", cp); return (ISC_R_FAILURE); } if ((i & 1) == 0) @@ -667,7 +683,7 @@ name2ipkey(dns_rpz_cidr_t *cidr, int level, dns_name_t *src_name, } } if (cp != end) { - badname(level, src_name, ""); + badname(level, src_name, "", ""); return (ISC_R_FAILURE); } @@ -681,7 +697,8 @@ name2ipkey(dns_rpz_cidr_t *cidr, int level, dns_name_t *src_name, i = bits % DNS_RPZ_CIDR_WORD_BITS; aword = tgt_ip->w[bits / DNS_RPZ_CIDR_WORD_BITS]; if ((aword & ~DNS_RPZ_WORD_MASK(i)) != 0) { - badname(level, src_name, "; wrong prefix length"); + badname(level, src_name, + "; too small prefix length of ", prefix_str); return (ISC_R_FAILURE); } bits -= i; @@ -689,13 +706,13 @@ name2ipkey(dns_rpz_cidr_t *cidr, int level, dns_name_t *src_name, } /* - * Convert the IPv6 address back to a canonical policy domain name + * Convert the address back to a canonical policy domain name * to ensure that it is in canonical form. */ - if (ISC_R_SUCCESS != ip2name(cidr, tgt_ip, (dns_rpz_cidr_bits_t)prefix, - type, NULL, name) || - !dns_name_equal(src_name, name)) { - badname(level, src_name, "; not canonical"); + result = ip2name(cidr, tgt_ip, (dns_rpz_cidr_bits_t) prefix, + type, NULL, ipname); + if (result != ISC_R_SUCCESS || !dns_name_equal(src_name, ipname)) { + badname(level, src_name, "; not canonical", ""); return (ISC_R_FAILURE); } @@ -934,6 +951,7 @@ search(dns_rpz_cidr_t *cidr, const dns_rpz_cidr_key_t *tgt_ip, */ void dns_rpz_cidr_addip(dns_rpz_cidr_t *cidr, dns_name_t *name) { + isc_result_t result; dns_rpz_cidr_key_t tgt_ip; dns_rpz_cidr_bits_t tgt_prefix; dns_rpz_type_t type; @@ -956,19 +974,22 @@ dns_rpz_cidr_addip(dns_rpz_cidr_t *cidr, dns_name_t *name) { case DNS_RPZ_TYPE_BAD: return; } - if (ISC_R_SUCCESS != name2ipkey(cidr, DNS_RPZ_ERROR_LEVEL, name, - type, &tgt_ip, &tgt_prefix)) + result = name2ipkey(cidr, DNS_RPZ_ERROR_LEVEL, name, + type, &tgt_ip, &tgt_prefix); + if (result != ISC_R_SUCCESS) return; - if (ISC_R_EXISTS == search(cidr, &tgt_ip, tgt_prefix, type, - ISC_TRUE, NULL) && - isc_log_wouldlog(dns_lctx, DNS_RPZ_ERROR_LEVEL)) { + result = search(cidr, &tgt_ip, tgt_prefix, type, ISC_TRUE, NULL); + if (result == ISC_R_EXISTS && + isc_log_wouldlog(dns_lctx, DNS_RPZ_ERROR_LEVEL)) + { char printname[DNS_NAME_FORMATSIZE]; dns_name_format(name, printname, sizeof(printname)); isc_log_write(dns_lctx, DNS_LOGCATEGORY_RPZ, DNS_LOGMODULE_RBTDB, DNS_RPZ_ERROR_LEVEL, - "duplicate rpz name \"%s\"", printname); + "rpz add failed; \"%s\" is a duplicate name", + printname); } } @@ -978,6 +999,7 @@ dns_rpz_cidr_addip(dns_rpz_cidr_t *cidr, dns_name_t *name) { */ void dns_rpz_cidr_deleteip(dns_rpz_cidr_t *cidr, dns_name_t *name) { + isc_result_t result; dns_rpz_cidr_key_t tgt_ip; dns_rpz_cidr_bits_t tgt_prefix; dns_rpz_type_t type; @@ -1010,19 +1032,14 @@ dns_rpz_cidr_deleteip(dns_rpz_cidr_t *cidr, dns_name_t *name) { /* * Do not get excited about the deletion of interior rbt nodes. */ - if (ISC_R_SUCCESS != name2ipkey(cidr, DNS_RPZ_DEBUG_LEVEL3, name, - type, &tgt_ip, &tgt_prefix)) + result = name2ipkey(cidr, DNS_RPZ_DEBUG_QUIET, name, + type, &tgt_ip, &tgt_prefix); + if (result != ISC_R_SUCCESS) return; - if (ISC_R_SUCCESS != search(cidr, &tgt_ip, tgt_prefix, type, - ISC_FALSE, &tgt)) { - if (isc_log_wouldlog(dns_lctx, DNS_RPZ_ERROR_LEVEL)) { - char printname[DNS_NAME_FORMATSIZE]; - - dns_name_format(name, printname, sizeof(printname)); - isc_log_write(dns_lctx, DNS_LOGCATEGORY_RPZ, - DNS_LOGMODULE_RBTDB, DNS_RPZ_ERROR_LEVEL, - "missing rpz node \"%s\"", printname); - } + + result = search(cidr, &tgt_ip, tgt_prefix, type, ISC_FALSE, &tgt); + if (result != ISC_R_SUCCESS) { + badname(DNS_RPZ_ERROR_LEVEL, name, "; missing rpz node", ""); return; } @@ -1135,7 +1152,9 @@ dns_rpz_cidr_find(dns_rpz_cidr_t *cidr, const isc_netaddr_t *netaddr, * Translate CNAME rdata to a QNAME response policy action. */ dns_rpz_policy_t -dns_rpz_decode_cname(dns_rdataset_t *rdataset, dns_name_t *selfname) { +dns_rpz_decode_cname(dns_rpz_zone_t *rpz, dns_rdataset_t *rdataset, + dns_name_t *selfname) +{ dns_rdata_t rdata = DNS_RDATA_INIT; dns_rdata_cname_t cname; isc_result_t result; @@ -1171,7 +1190,13 @@ dns_rpz_decode_cname(dns_rdataset_t *rdataset, dns_name_t *selfname) { } /* - * 128.1.0.127.rpz-ip CNAME 128.1.0.0.127. means "do not rewrite" + * CNAME PASSTHRU.origin means "do not rewrite. + */ + if (dns_name_equal(&cname.cname, &rpz->passthru)) + return (DNS_RPZ_POLICY_PASSTHRU); + + /* + * 128.1.0.127.rpz-ip CNAME 128.1.0.0.127. is obsolete PASSTHRU */ if (selfname != NULL && dns_name_equal(&cname.cname, selfname)) return (DNS_RPZ_POLICY_PASSTHRU); diff --git a/contrib/bind9/lib/dns/spnego_asn1.pl b/contrib/bind9/lib/dns/spnego_asn1.pl index 93dd676..0aaa57f 100755 --- a/contrib/bind9/lib/dns/spnego_asn1.pl +++ b/contrib/bind9/lib/dns/spnego_asn1.pl @@ -1,6 +1,6 @@ #!/bin/bin/perl -w # -# Copyright (C) 2006, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2006, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/dns/validator.c b/contrib/bind9/lib/dns/validator.c index 3f9aae7..674675f 100644 --- a/contrib/bind9/lib/dns/validator.c +++ b/contrib/bind9/lib/dns/validator.c @@ -2075,15 +2075,13 @@ validate(dns_validator_t *val, isc_boolean_t resume) { validator_log(val, ISC_LOG_DEBUG(3), "failed to verify rdataset"); else { - isc_uint32_t ttl; isc_stdtime_t now; isc_stdtime_get(&now); - ttl = ISC_MIN(event->rdataset->ttl, - ISC_MIN(val->siginfo->originalttl, - val->siginfo->timeexpire - now)); - event->rdataset->ttl = ttl; - event->sigrdataset->ttl = ttl; + dns_rdataset_trimttl(event->rdataset, + event->sigrdataset, + val->siginfo, now, + val->view->acceptexpired); } if (val->keynode != NULL) diff --git a/contrib/bind9/lib/dns/view.c b/contrib/bind9/lib/dns/view.c index 4590693..6750058 100644 --- a/contrib/bind9/lib/dns/view.c +++ b/contrib/bind9/lib/dns/view.c @@ -193,6 +193,8 @@ dns_view_create(isc_mem_t *mctx, dns_rdataclass_t rdclass, view->v4_aaaa = dns_v4_aaaa_ok; view->v4_aaaa_acl = NULL; ISC_LIST_INIT(view->rpz_zones); + view->rpz_recursive_only = ISC_TRUE; + view->rpz_break_dnssec = ISC_FALSE; dns_fixedname_init(&view->dlv_fixed); view->managed_keys = NULL; #ifdef BIND9 diff --git a/contrib/bind9/lib/dns/zone.c b/contrib/bind9/lib/dns/zone.c index efe31eb..22db239 100644 --- a/contrib/bind9/lib/dns/zone.c +++ b/contrib/bind9/lib/dns/zone.c @@ -3082,7 +3082,7 @@ zone_journal(dns_zone_t *zone, dns_diff_t *diff, const char *caller) { ISC_TRUE, &journal); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "%s:dns_journal_open -> %s\n", + "%s:dns_journal_open -> %s", caller, dns_result_totext(result)); return (result); } @@ -3091,7 +3091,7 @@ zone_journal(dns_zone_t *zone, dns_diff_t *diff, const char *caller) { dns_journal_destroy(&journal); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "%s:dns_journal_write_transaction -> %s\n", + "%s:dns_journal_write_transaction -> %s", caller, dns_result_totext(result)); return (result); } @@ -3116,7 +3116,7 @@ add_soa(dns_zone_t *zone, dns_db_t *db) { result = dns_db_newversion(db, &ver); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "add_soa:dns_db_newversion -> %s\n", + "add_soa:dns_db_newversion -> %s", dns_result_totext(result)); goto failure; } @@ -3126,7 +3126,7 @@ add_soa(dns_zone_t *zone, dns_db_t *db) { 0, 0, 0, 0, 0, buf, &rdata); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "add_soa:dns_soa_buildrdata -> %s\n", + "add_soa:dns_soa_buildrdata -> %s", dns_result_totext(result)); goto failure; } @@ -3178,7 +3178,7 @@ sync_keyzone(dns_zone_t *zone, dns_db_t *db) { result = dns_db_newversion(db, &ver); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "sync_keyzone:dns_db_newversion -> %s\n", + "sync_keyzone:dns_db_newversion -> %s", dns_result_totext(result)); goto failure; } @@ -4939,7 +4939,7 @@ zone_resigninc(dns_zone_t *zone) { result = dns_db_newversion(db, &version); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_resigninc:dns_db_newversion -> %s\n", + "zone_resigninc:dns_db_newversion -> %s", dns_result_totext(result)); goto failure; } @@ -4948,7 +4948,7 @@ zone_resigninc(dns_zone_t *zone) { zone_keys, &nkeys); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_resigninc:find_zone_keys -> %s\n", + "zone_resigninc:find_zone_keys -> %s", dns_result_totext(result)); goto failure; } @@ -4972,7 +4972,7 @@ zone_resigninc(dns_zone_t *zone) { result = dns_db_getsigningtime(db, &rdataset, name); if (result != ISC_R_SUCCESS && result != ISC_R_NOTFOUND) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_resigninc:dns_db_getsigningtime -> %s\n", + "zone_resigninc:dns_db_getsigningtime -> %s", dns_result_totext(result)); } @@ -4996,7 +4996,7 @@ zone_resigninc(dns_zone_t *zone) { zone_keys, nkeys, now, ISC_TRUE); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_resigninc:del_sigs -> %s\n", + "zone_resigninc:del_sigs -> %s", dns_result_totext(result)); break; } @@ -5006,7 +5006,7 @@ zone_resigninc(dns_zone_t *zone) { expire, check_ksk, keyset_kskonly); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_resigninc:add_sigs -> %s\n", + "zone_resigninc:add_sigs -> %s", dns_result_totext(result)); break; } @@ -5018,7 +5018,7 @@ zone_resigninc(dns_zone_t *zone) { } if (result != ISC_R_SUCCESS) dns_zone_log(zone, ISC_LOG_ERROR, - "zone_resigninc:dns_db_getsigningtime -> %s\n", + "zone_resigninc:dns_db_getsigningtime -> %s", dns_result_totext(result)); } @@ -5029,7 +5029,7 @@ zone_resigninc(dns_zone_t *zone) { &sig_diff, zone_keys, nkeys, now, ISC_TRUE); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_resigninc:del_sigs -> %s\n", + "zone_resigninc:del_sigs -> %s", dns_result_totext(result)); goto failure; } @@ -5044,7 +5044,7 @@ zone_resigninc(dns_zone_t *zone) { result = increment_soa_serial(db, version, &sig_diff, zone->mctx); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_resigninc:increment_soa_serial -> %s\n", + "zone_resigninc:increment_soa_serial -> %s", dns_result_totext(result)); goto failure; } @@ -5058,7 +5058,7 @@ zone_resigninc(dns_zone_t *zone) { soaexpire, check_ksk, keyset_kskonly); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_resigninc:add_sigs -> %s\n", + "zone_resigninc:add_sigs -> %s", dns_result_totext(result)); goto failure; } @@ -5753,7 +5753,7 @@ update_sigs(dns_diff_t *diff, dns_db_t *db, dns_dbversion_t *version, zone_keys, nkeys, now, ISC_FALSE); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "update_sigs:del_sigs -> %s\n", + "update_sigs:del_sigs -> %s", dns_result_totext(result)); return (result); } @@ -5763,7 +5763,7 @@ update_sigs(dns_diff_t *diff, dns_db_t *db, dns_dbversion_t *version, expire, check_ksk, keyset_kskonly); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "update_sigs:add_sigs -> %s\n", + "update_sigs:add_sigs -> %s", dns_result_totext(result)); return (result); } @@ -5848,7 +5848,7 @@ zone_nsec3chain(dns_zone_t *zone) { result = dns_db_newversion(db, &version); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_nsec3chain:dns_db_newversion -> %s\n", + "zone_nsec3chain:dns_db_newversion -> %s", dns_result_totext(result)); goto failure; } @@ -5857,7 +5857,7 @@ zone_nsec3chain(dns_zone_t *zone) { DNS_MAXZONEKEYS, zone_keys, &nkeys); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_nsec3chain:find_zone_keys -> %s\n", + "zone_nsec3chain:find_zone_keys -> %s", dns_result_totext(result)); goto failure; } @@ -6003,7 +6003,7 @@ zone_nsec3chain(dns_zone_t *zone) { &nsec3_diff); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "dns_nsec3_addnsec3 -> %s\n", + "dns_nsec3_addnsec3 -> %s", dns_result_totext(result)); goto failure; } @@ -6061,7 +6061,7 @@ zone_nsec3chain(dns_zone_t *zone) { } else if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "dns_dbiterator_next -> %s\n", + "dns_dbiterator_next -> %s", dns_result_totext(result)); goto failure; } else if (delegation) { @@ -6119,7 +6119,7 @@ zone_nsec3chain(dns_zone_t *zone) { if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "need_nsec_chain -> %s\n", + "need_nsec_chain -> %s", dns_result_totext(result)); goto failure; } @@ -6144,7 +6144,7 @@ zone_nsec3chain(dns_zone_t *zone) { if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "fixup_nsec3param -> %s\n", + "fixup_nsec3param -> %s", dns_result_totext(result)); goto failure; } @@ -6159,7 +6159,7 @@ zone_nsec3chain(dns_zone_t *zone) { if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "deletematchingnsec3 -> %s\n", + "deletematchingnsec3 -> %s", dns_result_totext(result)); goto failure; } @@ -6260,7 +6260,7 @@ zone_nsec3chain(dns_zone_t *zone) { if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "fixup_nsec3param -> %s\n", + "fixup_nsec3param -> %s", dns_result_totext(result)); goto failure; } @@ -6268,7 +6268,7 @@ zone_nsec3chain(dns_zone_t *zone) { } else if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "dns_dbiterator_next -> %s\n", + "dns_dbiterator_next -> %s", dns_result_totext(result)); goto failure; } else if (delegation) { @@ -6305,7 +6305,7 @@ zone_nsec3chain(dns_zone_t *zone) { result = dns_db_allrdatasets(db, node, version, 0, &iterator); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "dns_db_allrdatasets -> %s\n", + "dns_db_allrdatasets -> %s", dns_result_totext(result)); goto failure; } @@ -6331,7 +6331,7 @@ zone_nsec3chain(dns_zone_t *zone) { if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "updatesecure -> %s\n", + "updatesecure -> %s", dns_result_totext(result)); goto failure; } @@ -6344,7 +6344,7 @@ zone_nsec3chain(dns_zone_t *zone) { if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "dns_nsec3_addnsec3s -> %s\n", + "dns_nsec3_addnsec3s -> %s", dns_result_totext(result)); goto failure; } @@ -6359,7 +6359,7 @@ zone_nsec3chain(dns_zone_t *zone) { check_ksk, keyset_kskonly, &sig_diff); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "update_sigs -> %s\n", dns_result_totext(result)); + "update_sigs -> %s", dns_result_totext(result)); goto failure; } @@ -6372,7 +6372,7 @@ zone_nsec3chain(dns_zone_t *zone) { check_ksk, keyset_kskonly, &sig_diff); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "update_sigs -> %s\n", dns_result_totext(result)); + "update_sigs -> %s", dns_result_totext(result)); goto failure; } @@ -6383,7 +6383,7 @@ zone_nsec3chain(dns_zone_t *zone) { zone->minimum, ISC_FALSE, &nsec_diff); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "updatesecure -> %s\n", + "updatesecure -> %s", dns_result_totext(result)); goto failure; } @@ -6394,7 +6394,7 @@ zone_nsec3chain(dns_zone_t *zone) { check_ksk, keyset_kskonly, &sig_diff); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "update_sigs -> %s\n", dns_result_totext(result)); + "update_sigs -> %s", dns_result_totext(result)); goto failure; } @@ -6409,14 +6409,14 @@ zone_nsec3chain(dns_zone_t *zone) { &sig_diff, zone_keys, nkeys, now, ISC_FALSE); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "del_sigs -> %s\n", dns_result_totext(result)); + "del_sigs -> %s", dns_result_totext(result)); goto failure; } result = increment_soa_serial(db, version, &sig_diff, zone->mctx); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "increment_soa_serial -> %s\n", + "increment_soa_serial -> %s", dns_result_totext(result)); goto failure; } @@ -6426,7 +6426,7 @@ zone_nsec3chain(dns_zone_t *zone) { soaexpire, check_ksk, keyset_kskonly); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain:" - "add_sigs -> %s\n", dns_result_totext(result)); + "add_sigs -> %s", dns_result_totext(result)); goto failure; } @@ -6470,7 +6470,7 @@ zone_nsec3chain(dns_zone_t *zone) { failure: if (result != ISC_R_SUCCESS) - dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain: %s\n", + dns_zone_log(zone, ISC_LOG_ERROR, "zone_nsec3chain: %s", dns_result_totext(result)); /* * On error roll back the current nsec3chain. @@ -6673,7 +6673,7 @@ zone_sign(dns_zone_t *zone) { result = dns_db_newversion(db, &version); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_sign:dns_db_newversion -> %s\n", + "zone_sign:dns_db_newversion -> %s", dns_result_totext(result)); goto failure; } @@ -6682,7 +6682,7 @@ zone_sign(dns_zone_t *zone) { DNS_MAXZONEKEYS, zone_keys, &nkeys); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_sign:find_zone_keys -> %s\n", + "zone_sign:find_zone_keys -> %s", dns_result_totext(result)); goto failure; } @@ -6903,7 +6903,7 @@ zone_sign(dns_zone_t *zone) { if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "updatesecure -> %s\n", + "updatesecure -> %s", dns_result_totext(result)); goto failure; } @@ -6915,8 +6915,7 @@ zone_sign(dns_zone_t *zone) { &post_diff); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "updatesignwithkey " - "-> %s\n", + "updatesignwithkey -> %s", dns_result_totext(result)); goto failure; } @@ -6924,7 +6923,7 @@ zone_sign(dns_zone_t *zone) { goto next_signing; } else if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_sign:dns_dbiterator_next -> %s\n", + "zone_sign:dns_dbiterator_next -> %s", dns_result_totext(result)); goto failure; } else if (delegation) { @@ -6950,7 +6949,7 @@ zone_sign(dns_zone_t *zone) { check_ksk, keyset_kskonly, &sig_diff); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, "zone_sign:" - "update_sigs -> %s\n", + "update_sigs -> %s", dns_result_totext(result)); goto failure; } @@ -6970,7 +6969,7 @@ zone_sign(dns_zone_t *zone) { &sig_diff, zone_keys, nkeys, now, ISC_FALSE); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_sign:del_sigs -> %s\n", + "zone_sign:del_sigs -> %s", dns_result_totext(result)); goto failure; } @@ -6978,7 +6977,7 @@ zone_sign(dns_zone_t *zone) { result = increment_soa_serial(db, version, &sig_diff, zone->mctx); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_sign:increment_soa_serial -> %s\n", + "zone_sign:increment_soa_serial -> %s", dns_result_totext(result)); goto failure; } @@ -6992,7 +6991,7 @@ zone_sign(dns_zone_t *zone) { soaexpire, check_ksk, keyset_kskonly); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "zone_sign:add_sigs -> %s\n", + "zone_sign:add_sigs -> %s", dns_result_totext(result)); goto failure; } @@ -8034,7 +8033,7 @@ zone_maintenance(dns_zone_t *zone) { DNS_ZONE_FLAG(zone, DNS_ZONEFLG_LOADED) && DNS_ZONE_FLAG(zone, DNS_ZONEFLG_NEEDDUMP)) { dumping = was_dumping(zone); - } else + } else dumping = ISC_TRUE; UNLOCK_ZONE(zone); if (!dumping) { @@ -14008,7 +14007,7 @@ sign_apex(dns_zone_t *zone, dns_db_t *db, dns_dbversion_t *ver, zone_keys, &nkeys); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "sign_apex:find_zone_keys -> %s\n", + "sign_apex:find_zone_keys -> %s", dns_result_totext(result)); return (result); } @@ -14039,7 +14038,7 @@ sign_apex(dns_zone_t *zone, dns_db_t *db, dns_dbversion_t *ver, zone_keys, nkeys, now, ISC_FALSE); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "sign_apex:del_sigs -> %s\n", + "sign_apex:del_sigs -> %s", dns_result_totext(result)); goto failure; } @@ -14049,7 +14048,7 @@ sign_apex(dns_zone_t *zone, dns_db_t *db, dns_dbversion_t *ver, keyset_kskonly); if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "sign_apex:add_sigs -> %s\n", + "sign_apex:add_sigs -> %s", dns_result_totext(result)); goto failure; } @@ -14061,7 +14060,7 @@ sign_apex(dns_zone_t *zone, dns_db_t *db, dns_dbversion_t *ver, if (result != ISC_R_SUCCESS) { dns_zone_log(zone, ISC_LOG_ERROR, - "sign_apex:update_sigs -> %s\n", + "sign_apex:update_sigs -> %s", dns_result_totext(result)); goto failure; } diff --git a/contrib/bind9/lib/export/Makefile.in b/contrib/bind9/lib/export/Makefile.in index fc9d4ad..1fd7216 100644 --- a/contrib/bind9/lib/export/Makefile.in +++ b/contrib/bind9/lib/export/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/dns/Makefile.in b/contrib/bind9/lib/export/dns/Makefile.in index cd72988..6df36fe 100644 --- a/contrib/bind9/lib/export/dns/Makefile.in +++ b/contrib/bind9/lib/export/dns/Makefile.in @@ -44,7 +44,7 @@ LIBS = @LIBS@ # Alphabetically OPENSSLLINKOBJS = openssl_link.@O@ openssldh_link.@O@ openssldsa_link.@O@ \ - opensslgost_link.@O@ opensslrsa_link.@O@ + opensslecdsa_link.@O@ opensslgost_link.@O@ opensslrsa_link.@O@ DSTOBJS = @OPENSSLLINKOBJS@ \ dst_api.@O@ dst_lib.@O@ dst_parse.@O@ dst_result.@O@ \ @@ -72,7 +72,7 @@ OBJS= ${DNSOBJS} ${OTHEROBJS} ${DSTOBJS} ${PORTDNSOBJS} # Alphabetically OPENSSLLINKSRCS = openssl_link.c openssldh_link.c openssldsa_link.c \ - opensslgost_link.c opensslrsa_link.c + opensslecdsa_link.c opensslgost_link.c opensslrsa_link.c DSTSRCS = @OPENSSLLINKSRCS@ \ dst_api.c dst_lib.c dst_parse.c \ diff --git a/contrib/bind9/lib/export/dns/include/Makefile.in b/contrib/bind9/lib/export/dns/include/Makefile.in index 9fc0b66..6bf1205 100644 --- a/contrib/bind9/lib/export/dns/include/Makefile.in +++ b/contrib/bind9/lib/export/dns/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/dns/include/dns/Makefile.in b/contrib/bind9/lib/export/dns/include/dns/Makefile.in index 2d7f2c7..b7f51b4 100644 --- a/contrib/bind9/lib/export/dns/include/dns/Makefile.in +++ b/contrib/bind9/lib/export/dns/include/dns/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/dns/include/dst/Makefile.in b/contrib/bind9/lib/export/dns/include/dst/Makefile.in index 259e62e..f6f540a 100644 --- a/contrib/bind9/lib/export/dns/include/dst/Makefile.in +++ b/contrib/bind9/lib/export/dns/include/dst/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/irs/include/irs/Makefile.in b/contrib/bind9/lib/export/irs/include/irs/Makefile.in index c850757..530e67c 100644 --- a/contrib/bind9/lib/export/irs/include/irs/Makefile.in +++ b/contrib/bind9/lib/export/irs/include/irs/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/isc/Makefile.in b/contrib/bind9/lib/export/isc/Makefile.in index a55a1f4..86726ab 100644 --- a/contrib/bind9/lib/export/isc/Makefile.in +++ b/contrib/bind9/lib/export/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009, 2010 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2010, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/isc/include/isc/Makefile.in b/contrib/bind9/lib/export/isc/include/isc/Makefile.in index 2499185..91f538c 100644 --- a/contrib/bind9/lib/export/isc/include/isc/Makefile.in +++ b/contrib/bind9/lib/export/isc/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/isc/nls/Makefile.in b/contrib/bind9/lib/export/isc/nls/Makefile.in index a9e779f..2515685 100644 --- a/contrib/bind9/lib/export/isc/nls/Makefile.in +++ b/contrib/bind9/lib/export/isc/nls/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/isc/nothreads/Makefile.in b/contrib/bind9/lib/export/isc/nothreads/Makefile.in index 93b2109..994da63 100644 --- a/contrib/bind9/lib/export/isc/nothreads/Makefile.in +++ b/contrib/bind9/lib/export/isc/nothreads/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009, 2010 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2010, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/isc/nothreads/include/isc/Makefile.in b/contrib/bind9/lib/export/isc/nothreads/include/isc/Makefile.in index eb25c88..9bda987 100644 --- a/contrib/bind9/lib/export/isc/nothreads/include/isc/Makefile.in +++ b/contrib/bind9/lib/export/isc/nothreads/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/isc/pthreads/Makefile.in b/contrib/bind9/lib/export/isc/pthreads/Makefile.in index 92788ec..f08e5c6 100644 --- a/contrib/bind9/lib/export/isc/pthreads/Makefile.in +++ b/contrib/bind9/lib/export/isc/pthreads/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/isc/pthreads/include/isc/Makefile.in b/contrib/bind9/lib/export/isc/pthreads/include/isc/Makefile.in index 77d5c07..4319768 100644 --- a/contrib/bind9/lib/export/isc/pthreads/include/isc/Makefile.in +++ b/contrib/bind9/lib/export/isc/pthreads/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/isc/unix/Makefile.in b/contrib/bind9/lib/export/isc/unix/Makefile.in index 5a8eed8..f5cf7e8 100644 --- a/contrib/bind9/lib/export/isc/unix/Makefile.in +++ b/contrib/bind9/lib/export/isc/unix/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/isc/unix/include/isc/Makefile.in b/contrib/bind9/lib/export/isc/unix/include/isc/Makefile.in index f19b8c6..7159c76 100644 --- a/contrib/bind9/lib/export/isc/unix/include/isc/Makefile.in +++ b/contrib/bind9/lib/export/isc/unix/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/isccfg/include/isccfg/Makefile.in b/contrib/bind9/lib/export/isccfg/include/isccfg/Makefile.in index 5e9ea78..57a344c 100644 --- a/contrib/bind9/lib/export/isccfg/include/isccfg/Makefile.in +++ b/contrib/bind9/lib/export/isccfg/include/isccfg/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/samples/Makefile-postinstall.in b/contrib/bind9/lib/export/samples/Makefile-postinstall.in index 174aed6..5b1aafb 100644 --- a/contrib/bind9/lib/export/samples/Makefile-postinstall.in +++ b/contrib/bind9/lib/export/samples/Makefile-postinstall.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/export/samples/Makefile.in b/contrib/bind9/lib/export/samples/Makefile.in index c60baac..cdc66b1 100644 --- a/contrib/bind9/lib/export/samples/Makefile.in +++ b/contrib/bind9/lib/export/samples/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/irs/Makefile.in b/contrib/bind9/lib/irs/Makefile.in index ed86967..d3c47b0 100644 --- a/contrib/bind9/lib/irs/Makefile.in +++ b/contrib/bind9/lib/irs/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/irs/include/Makefile.in b/contrib/bind9/lib/irs/include/Makefile.in index eca1945..91099f1 100644 --- a/contrib/bind9/lib/irs/include/Makefile.in +++ b/contrib/bind9/lib/irs/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/irs/include/irs/Makefile.in b/contrib/bind9/lib/irs/include/irs/Makefile.in index 3c3b612..63e7fd6 100644 --- a/contrib/bind9/lib/irs/include/irs/Makefile.in +++ b/contrib/bind9/lib/irs/include/irs/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/alpha/Makefile.in b/contrib/bind9/lib/isc/alpha/Makefile.in index 324db07..9c24cdf 100644 --- a/contrib/bind9/lib/isc/alpha/Makefile.in +++ b/contrib/bind9/lib/isc/alpha/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/alpha/include/Makefile.in b/contrib/bind9/lib/isc/alpha/include/Makefile.in index f1d8bdd..e399559 100644 --- a/contrib/bind9/lib/isc/alpha/include/Makefile.in +++ b/contrib/bind9/lib/isc/alpha/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/alpha/include/isc/Makefile.in b/contrib/bind9/lib/isc/alpha/include/isc/Makefile.in index 5f116ca..4927e21 100644 --- a/contrib/bind9/lib/isc/alpha/include/isc/Makefile.in +++ b/contrib/bind9/lib/isc/alpha/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/api b/contrib/bind9/lib/isc/api index 3b91551..18de29c 100644 --- a/contrib/bind9/lib/isc/api +++ b/contrib/bind9/lib/isc/api @@ -3,6 +3,6 @@ # 9.7: 60-79 # 9.8: 80-89 # 9.9: 90-109 -LIBINTERFACE = 83 -LIBREVISION = 5 -LIBAGE = 0 +LIBINTERFACE = 85 +LIBREVISION = 0 +LIBAGE = 1 diff --git a/contrib/bind9/lib/isc/ia64/Makefile.in b/contrib/bind9/lib/isc/ia64/Makefile.in index 324db07..9c24cdf 100644 --- a/contrib/bind9/lib/isc/ia64/Makefile.in +++ b/contrib/bind9/lib/isc/ia64/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/ia64/include/Makefile.in b/contrib/bind9/lib/isc/ia64/include/Makefile.in index f1d8bdd..e399559 100644 --- a/contrib/bind9/lib/isc/ia64/include/Makefile.in +++ b/contrib/bind9/lib/isc/ia64/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/ia64/include/isc/Makefile.in b/contrib/bind9/lib/isc/ia64/include/isc/Makefile.in index 5f116ca..4927e21 100644 --- a/contrib/bind9/lib/isc/ia64/include/isc/Makefile.in +++ b/contrib/bind9/lib/isc/ia64/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/ia64/include/isc/atomic.h b/contrib/bind9/lib/isc/ia64/include/isc/atomic.h index 74df4c5..557941d 100644 --- a/contrib/bind9/lib/isc/ia64/include/isc/atomic.h +++ b/contrib/bind9/lib/isc/ia64/include/isc/atomic.h @@ -1,5 +1,5 @@ /* - * Copyright (C) 2006, 2007, 2009 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2006, 2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC") * * Permission to use, copy, modify, and/or distribute this software for any * purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/include/Makefile.in b/contrib/bind9/lib/isc/include/Makefile.in index 04778d7..70c165e 100644 --- a/contrib/bind9/lib/isc/include/Makefile.in +++ b/contrib/bind9/lib/isc/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isc/include/isc/file.h b/contrib/bind9/lib/isc/include/isc/file.h index 8794065..38f78b7 100644 --- a/contrib/bind9/lib/isc/include/isc/file.h +++ b/contrib/bind9/lib/isc/include/isc/file.h @@ -25,6 +25,7 @@ #include <stdio.h> #include <isc/lang.h> +#include <isc/stat.h> #include <isc/types.h> ISC_LANG_BEGINDECLS @@ -33,6 +34,9 @@ isc_result_t isc_file_settime(const char *file, isc_time_t *time); isc_result_t +isc_file_mode(const char *file, mode_t *modep); + +isc_result_t isc_file_getmodtime(const char *file, isc_time_t *time); /*!< * \brief Get the time of last modification of a file. @@ -97,15 +101,22 @@ isc_file_mktemplate(const char *path, char *buf, size_t buflen); * of the path with the internal template string. */ - isc_result_t isc_file_openunique(char *templet, FILE **fp); isc_result_t isc_file_openuniqueprivate(char *templet, FILE **fp); isc_result_t isc_file_openuniquemode(char *templet, int mode, FILE **fp); +isc_result_t +isc_file_bopenunique(char *templet, FILE **fp); +isc_result_t +isc_file_bopenuniqueprivate(char *templet, FILE **fp); +isc_result_t +isc_file_bopenuniquemode(char *templet, int mode, FILE **fp); /*!< * \brief Create and open a file with a unique name based on 'templet'. + * isc_file_bopen*() open the file in binary mode in Windows. + * isc_file_open*() open the file in text mode in Windows. * * Notes: *\li 'template' is a reserved work in C++. If you want to complain diff --git a/contrib/bind9/lib/isc/include/isc/namespace.h b/contrib/bind9/lib/isc/include/isc/namespace.h index 158cfe5..ae1801d 100644 --- a/contrib/bind9/lib/isc/include/isc/namespace.h +++ b/contrib/bind9/lib/isc/include/isc/namespace.h @@ -146,6 +146,8 @@ #define isc_task_getcurrenttime isc__task_getcurrenttime #define isc_taskmgr_create isc__taskmgr_create #define isc_taskmgr_destroy isc__taskmgr_destroy +#define isc_taskmgr_setexcltask isc__taskmgr_setexcltask +#define isc_taskmgr_excltask isc__taskmgr_excltask #define isc_task_beginexclusive isc__task_beginexclusive #define isc_task_endexclusive isc__task_endexclusive diff --git a/contrib/bind9/lib/isc/include/isc/task.h b/contrib/bind9/lib/isc/include/isc/task.h index 36fca36..19d4783 100644 --- a/contrib/bind9/lib/isc/include/isc/task.h +++ b/contrib/bind9/lib/isc/include/isc/task.h @@ -106,6 +106,8 @@ typedef struct isc_taskmgrmethods { isc_result_t (*taskcreate)(isc_taskmgr_t *manager, unsigned int quantum, isc_task_t **taskp); + void (*setexcltask)(isc_taskmgr_t *mgr, isc_task_t *task); + isc_result_t (*excltask)(isc_taskmgr_t *mgr, isc_task_t **taskp); } isc_taskmgrmethods_t; typedef struct isc_taskmethods { @@ -697,6 +699,31 @@ isc_taskmgr_destroy(isc_taskmgr_t **managerp); * have been freed. */ +void +isc_taskmgr_setexcltask(isc_taskmgr_t *mgr, isc_task_t *task); +/*%< + * Set a task which will be used for all task-exclusive operations. + * + * Requires: + *\li 'manager' is a valid task manager. + * + *\li 'task' is a valid task. + */ + +isc_result_t +isc_taskmgr_excltask(isc_taskmgr_t *mgr, isc_task_t **taskp); +/*%< + * Attach '*taskp' to the task set by isc_taskmgr_getexcltask(). + * This task should be used whenever running in task-exclusive mode, + * so as to prevent deadlock between two exclusive tasks. + * + * Requires: + *\li 'manager' is a valid task manager. + + *\li taskp != NULL && *taskp == NULL + */ + + #ifdef HAVE_LIBXML2 void diff --git a/contrib/bind9/lib/isc/mem.c b/contrib/bind9/lib/isc/mem.c index 5b4b16c..1964b7a 100644 --- a/contrib/bind9/lib/isc/mem.c +++ b/contrib/bind9/lib/isc/mem.c @@ -1191,7 +1191,7 @@ isc___mem_putanddetach(isc_mem_t **ctxp, void *ptr, size_t size FLARG) { oldsize -= ALIGNMENT_SIZE; INSIST(oldsize == size); } - isc_mem_free((isc_mem_t *)ctx, ptr); + isc__mem_free((isc_mem_t *)ctx, ptr FLARG_PASS); MCTXLOCK(ctx, &ctx->lock); ctx->references--; @@ -1327,7 +1327,7 @@ isc___mem_put(isc_mem_t *ctx0, void *ptr, size_t size FLARG) { oldsize -= ALIGNMENT_SIZE; INSIST(oldsize == size); } - isc_mem_free((isc_mem_t *)ctx, ptr); + isc__mem_free((isc_mem_t *)ctx, ptr FLARG_PASS); return; } @@ -1592,7 +1592,11 @@ isc___mem_reallocate(isc_mem_t *ctx0, void *ptr, size_t size FLARG) { oldsize = (((size_info *)ptr)[-1]).u.size; INSIST(oldsize >= ALIGNMENT_SIZE); oldsize -= ALIGNMENT_SIZE; - copysize = oldsize > size ? size : oldsize; + if ((isc_mem_debugging & ISC_MEM_DEBUGCTX) != 0) { + INSIST(oldsize >= ALIGNMENT_SIZE); + oldsize -= ALIGNMENT_SIZE; + } + copysize = (oldsize > size) ? size : oldsize; memcpy(new_ptr, ptr, copysize); isc__mem_free(ctx0, ptr FLARG_PASS); } diff --git a/contrib/bind9/lib/isc/mips/Makefile.in b/contrib/bind9/lib/isc/mips/Makefile.in index 324db07..9c24cdf 100644 --- a/contrib/bind9/lib/isc/mips/Makefile.in +++ b/contrib/bind9/lib/isc/mips/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/mips/include/Makefile.in b/contrib/bind9/lib/isc/mips/include/Makefile.in index f1d8bdd..e399559 100644 --- a/contrib/bind9/lib/isc/mips/include/Makefile.in +++ b/contrib/bind9/lib/isc/mips/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/mips/include/isc/Makefile.in b/contrib/bind9/lib/isc/mips/include/isc/Makefile.in index 5f116ca..4927e21 100644 --- a/contrib/bind9/lib/isc/mips/include/isc/Makefile.in +++ b/contrib/bind9/lib/isc/mips/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/nls/Makefile.in b/contrib/bind9/lib/isc/nls/Makefile.in index aca4a27..7bacf1c 100644 --- a/contrib/bind9/lib/isc/nls/Makefile.in +++ b/contrib/bind9/lib/isc/nls/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007, 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1999-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isc/noatomic/Makefile.in b/contrib/bind9/lib/isc/noatomic/Makefile.in index 324db07..9c24cdf 100644 --- a/contrib/bind9/lib/isc/noatomic/Makefile.in +++ b/contrib/bind9/lib/isc/noatomic/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/noatomic/include/Makefile.in b/contrib/bind9/lib/isc/noatomic/include/Makefile.in index f1d8bdd..e399559 100644 --- a/contrib/bind9/lib/isc/noatomic/include/Makefile.in +++ b/contrib/bind9/lib/isc/noatomic/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/noatomic/include/isc/Makefile.in b/contrib/bind9/lib/isc/noatomic/include/isc/Makefile.in index 5f116ca..4927e21 100644 --- a/contrib/bind9/lib/isc/noatomic/include/isc/Makefile.in +++ b/contrib/bind9/lib/isc/noatomic/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/nothreads/Makefile.in b/contrib/bind9/lib/isc/nothreads/Makefile.in index 7e7abd6..540b243 100644 --- a/contrib/bind9/lib/isc/nothreads/Makefile.in +++ b/contrib/bind9/lib/isc/nothreads/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007, 2009, 2010 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2009, 2010, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000, 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isc/nothreads/include/Makefile.in b/contrib/bind9/lib/isc/nothreads/include/Makefile.in index a52310a..662a72d 100644 --- a/contrib/bind9/lib/isc/nothreads/include/Makefile.in +++ b/contrib/bind9/lib/isc/nothreads/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000, 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isc/nothreads/include/isc/Makefile.in b/contrib/bind9/lib/isc/nothreads/include/isc/Makefile.in index 3c9eab0..a2c347e 100644 --- a/contrib/bind9/lib/isc/nothreads/include/isc/Makefile.in +++ b/contrib/bind9/lib/isc/nothreads/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000, 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isc/powerpc/Makefile.in b/contrib/bind9/lib/isc/powerpc/Makefile.in index 324db07..9c24cdf 100644 --- a/contrib/bind9/lib/isc/powerpc/Makefile.in +++ b/contrib/bind9/lib/isc/powerpc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/powerpc/include/Makefile.in b/contrib/bind9/lib/isc/powerpc/include/Makefile.in index f1d8bdd..e399559 100644 --- a/contrib/bind9/lib/isc/powerpc/include/Makefile.in +++ b/contrib/bind9/lib/isc/powerpc/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/powerpc/include/isc/Makefile.in b/contrib/bind9/lib/isc/powerpc/include/isc/Makefile.in index 5f116ca..4927e21 100644 --- a/contrib/bind9/lib/isc/powerpc/include/isc/Makefile.in +++ b/contrib/bind9/lib/isc/powerpc/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/pthreads/Makefile.in b/contrib/bind9/lib/isc/pthreads/Makefile.in index d6e7c76..9f66ef3 100644 --- a/contrib/bind9/lib/isc/pthreads/Makefile.in +++ b/contrib/bind9/lib/isc/pthreads/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007, 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isc/pthreads/condition.c b/contrib/bind9/lib/isc/pthreads/condition.c index 50281a2..9053cf0 100644 --- a/contrib/bind9/lib/isc/pthreads/condition.c +++ b/contrib/bind9/lib/isc/pthreads/condition.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004, 2005, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1998-2001 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -43,7 +43,14 @@ isc_condition_waituntil(isc_condition_t *c, isc_mutex_t *m, isc_time_t *t) { * POSIX defines a timespec's tv_sec as time_t. */ result = isc_time_secondsastimet(t, &ts.tv_sec); - if (result != ISC_R_SUCCESS) + + /* + * If we have a range error ts.tv_sec is most probably a signed + * 32 bit value. Set ts.tv_sec to INT_MAX. This is a kludge. + */ + if (result == ISC_R_RANGE) + ts.tv_sec = INT_MAX; + else if (result != ISC_R_SUCCESS) return (result); /*! diff --git a/contrib/bind9/lib/isc/pthreads/include/Makefile.in b/contrib/bind9/lib/isc/pthreads/include/Makefile.in index 0303ab1..46c243e 100644 --- a/contrib/bind9/lib/isc/pthreads/include/Makefile.in +++ b/contrib/bind9/lib/isc/pthreads/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isc/pthreads/include/isc/Makefile.in b/contrib/bind9/lib/isc/pthreads/include/isc/Makefile.in index 11675ec..7cadcf4 100644 --- a/contrib/bind9/lib/isc/pthreads/include/isc/Makefile.in +++ b/contrib/bind9/lib/isc/pthreads/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isc/sparc64/Makefile.in b/contrib/bind9/lib/isc/sparc64/Makefile.in index 324db07..9c24cdf 100644 --- a/contrib/bind9/lib/isc/sparc64/Makefile.in +++ b/contrib/bind9/lib/isc/sparc64/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/sparc64/include/Makefile.in b/contrib/bind9/lib/isc/sparc64/include/Makefile.in index f1d8bdd..e399559 100644 --- a/contrib/bind9/lib/isc/sparc64/include/Makefile.in +++ b/contrib/bind9/lib/isc/sparc64/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/sparc64/include/isc/Makefile.in b/contrib/bind9/lib/isc/sparc64/include/isc/Makefile.in index 5f116ca..4927e21 100644 --- a/contrib/bind9/lib/isc/sparc64/include/isc/Makefile.in +++ b/contrib/bind9/lib/isc/sparc64/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/task.c b/contrib/bind9/lib/isc/task.c index f4e1265..a5f6ef9 100644 --- a/contrib/bind9/lib/isc/task.c +++ b/contrib/bind9/lib/isc/task.c @@ -152,6 +152,7 @@ struct isc__taskmgr { unsigned int tasks_running; isc_boolean_t exclusive_requested; isc_boolean_t exiting; + isc__task_t *excl; #ifdef USE_SHARED_MANAGER unsigned int refs; #endif /* ISC_PLATFORM_USETHREADS */ @@ -221,6 +222,10 @@ isc__taskmgr_create(isc_mem_t *mctx, unsigned int workers, unsigned int default_quantum, isc_taskmgr_t **managerp); ISC_TASKFUNC_SCOPE void isc__taskmgr_destroy(isc_taskmgr_t **managerp); +ISC_TASKFUNC_SCOPE void +isc__taskmgr_setexcltask(isc_taskmgr_t *mgr0, isc_task_t *task0); +ISC_TASKFUNC_SCOPE isc_result_t +isc__taskmgr_excltask(isc_taskmgr_t *mgr0, isc_task_t **taskp); ISC_TASKFUNC_SCOPE isc_result_t isc__task_beginexclusive(isc_task_t *task); ISC_TASKFUNC_SCOPE void @@ -261,7 +266,9 @@ static struct isc__taskmethods { static isc_taskmgrmethods_t taskmgrmethods = { isc__taskmgr_destroy, - isc__task_create + isc__task_create, + isc__taskmgr_setexcltask, + isc__taskmgr_excltask }; /*** @@ -1262,6 +1269,7 @@ isc__taskmgr_create(isc_mem_t *mctx, unsigned int workers, manager->tasks_running = 0; manager->exclusive_requested = ISC_FALSE; manager->exiting = ISC_FALSE; + manager->excl = NULL; isc_mem_attach(mctx, &manager->mctx); @@ -1344,6 +1352,12 @@ isc__taskmgr_destroy(isc_taskmgr_t **managerp) { */ /* + * Detach the exclusive task before acquiring the manager lock + */ + if (manager->excl != NULL) + isc__task_detach((isc_task_t **) &manager->excl); + + /* * Unlike elsewhere, we're going to hold this lock a long time. * We need to do so, because otherwise the list of tasks could * change while we were traversing it. @@ -1440,12 +1454,41 @@ isc__taskmgr_dispatch(isc_taskmgr_t *manager0) { #endif /* USE_WORKER_THREADS */ +ISC_TASKFUNC_SCOPE void +isc__taskmgr_setexcltask(isc_taskmgr_t *mgr0, isc_task_t *task0) { + isc__taskmgr_t *mgr = (isc__taskmgr_t *) mgr0; + isc__task_t *task = (isc__task_t *) task0; + + REQUIRE(VALID_MANAGER(mgr)); + REQUIRE(VALID_TASK(task)); + if (mgr->excl != NULL) + isc__task_detach((isc_task_t **) &mgr->excl); + isc__task_attach(task0, (isc_task_t **) &mgr->excl); +} + +ISC_TASKFUNC_SCOPE isc_result_t +isc__taskmgr_excltask(isc_taskmgr_t *mgr0, isc_task_t **taskp) { + isc__taskmgr_t *mgr = (isc__taskmgr_t *) mgr0; + + REQUIRE(VALID_MANAGER(mgr)); + REQUIRE(taskp != NULL && *taskp == NULL); + + if (mgr->excl == NULL) + return (ISC_R_NOTFOUND); + + isc__task_attach((isc_task_t *) mgr->excl, taskp); + return (ISC_R_SUCCESS); +} + ISC_TASKFUNC_SCOPE isc_result_t isc__task_beginexclusive(isc_task_t *task0) { #ifdef USE_WORKER_THREADS isc__task_t *task = (isc__task_t *)task0; isc__taskmgr_t *manager = task->manager; + REQUIRE(task->state == task_state_running); + /* XXX: Require task == manager->excl? */ + LOCK(&manager->lock); if (manager->exclusive_requested) { UNLOCK(&manager->lock); diff --git a/contrib/bind9/lib/isc/task_api.c b/contrib/bind9/lib/isc/task_api.c index 551d0d37..06a8d24 100644 --- a/contrib/bind9/lib/isc/task_api.c +++ b/contrib/bind9/lib/isc/task_api.c @@ -187,6 +187,17 @@ isc_task_purge(isc_task_t *task, void *sender, isc_eventtype_t type, void *tag) return (task->methods->purgeevents(task, sender, type, tag)); } +void +isc_taskmgr_setexcltask(isc_taskmgr_t *mgr, isc_task_t *task) { + REQUIRE(ISCAPI_TASK_VALID(task)); + return (mgr->methods->setexcltask(mgr, task)); +} + +isc_result_t +isc_taskmgr_excltask(isc_taskmgr_t *mgr, isc_task_t **taskp) { + return (mgr->methods->excltask(mgr, taskp)); +} + isc_result_t isc_task_beginexclusive(isc_task_t *task) { REQUIRE(ISCAPI_TASK_VALID(task)); diff --git a/contrib/bind9/lib/isc/unix/Makefile.in b/contrib/bind9/lib/isc/unix/Makefile.in index 9884ca9..c1411cb 100644 --- a/contrib/bind9/lib/isc/unix/Makefile.in +++ b/contrib/bind9/lib/isc/unix/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007, 2009 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2009, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isc/unix/file.c b/contrib/bind9/lib/isc/unix/file.c index 0538761..99c02ec 100644 --- a/contrib/bind9/lib/isc/unix/file.c +++ b/contrib/bind9/lib/isc/unix/file.c @@ -98,6 +98,20 @@ file_stats(const char *file, struct stat *stats) { } isc_result_t +isc_file_mode(const char *file, mode_t *modep) { + isc_result_t result; + struct stat stats; + + REQUIRE(modep != NULL); + + result = file_stats(file, &stats); + if (result == ISC_R_SUCCESS) + *modep = (stats.st_mode & 07777); + + return (result); +} + +isc_result_t isc_file_getmodtime(const char *file, isc_time_t *time) { isc_result_t result; struct stat stats; @@ -313,6 +327,23 @@ isc_file_openuniquemode(char *templet, int mode, FILE **fp) { } isc_result_t +isc_file_bopenunique(char *templet, FILE **fp) { + int mode = S_IWUSR|S_IRUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH; + return (isc_file_openuniquemode(templet, mode, fp)); +} + +isc_result_t +isc_file_bopenuniqueprivate(char *templet, FILE **fp) { + int mode = S_IWUSR|S_IRUSR; + return (isc_file_openuniquemode(templet, mode, fp)); +} + +isc_result_t +isc_file_bopenuniquemode(char *templet, int mode, FILE **fp) { + return (isc_file_openuniquemode(templet, mode, fp)); +} + +isc_result_t isc_file_remove(const char *filename) { int r; diff --git a/contrib/bind9/lib/isc/unix/include/Makefile.in b/contrib/bind9/lib/isc/unix/include/Makefile.in index 0303ab1..46c243e 100644 --- a/contrib/bind9/lib/isc/unix/include/Makefile.in +++ b/contrib/bind9/lib/isc/unix/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isc/unix/include/isc/Makefile.in b/contrib/bind9/lib/isc/unix/include/isc/Makefile.in index 2f4d216..d3b5084 100644 --- a/contrib/bind9/lib/isc/unix/include/isc/Makefile.in +++ b/contrib/bind9/lib/isc/unix/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 1998-2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isc/x86_32/Makefile.in b/contrib/bind9/lib/isc/x86_32/Makefile.in index 324db07..9c24cdf 100644 --- a/contrib/bind9/lib/isc/x86_32/Makefile.in +++ b/contrib/bind9/lib/isc/x86_32/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/x86_32/include/Makefile.in b/contrib/bind9/lib/isc/x86_32/include/Makefile.in index f1d8bdd..e399559 100644 --- a/contrib/bind9/lib/isc/x86_32/include/Makefile.in +++ b/contrib/bind9/lib/isc/x86_32/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/x86_32/include/isc/Makefile.in b/contrib/bind9/lib/isc/x86_32/include/isc/Makefile.in index 5f116ca..4927e21 100644 --- a/contrib/bind9/lib/isc/x86_32/include/isc/Makefile.in +++ b/contrib/bind9/lib/isc/x86_32/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/x86_64/Makefile.in b/contrib/bind9/lib/isc/x86_64/Makefile.in index 324db07..9c24cdf 100644 --- a/contrib/bind9/lib/isc/x86_64/Makefile.in +++ b/contrib/bind9/lib/isc/x86_64/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/x86_64/include/Makefile.in b/contrib/bind9/lib/isc/x86_64/include/Makefile.in index f1d8bdd..e399559 100644 --- a/contrib/bind9/lib/isc/x86_64/include/Makefile.in +++ b/contrib/bind9/lib/isc/x86_64/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isc/x86_64/include/isc/Makefile.in b/contrib/bind9/lib/isc/x86_64/include/isc/Makefile.in index f33ae99..9a988bb 100644 --- a/contrib/bind9/lib/isc/x86_64/include/isc/Makefile.in +++ b/contrib/bind9/lib/isc/x86_64/include/isc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # # Permission to use, copy, modify, and/or distribute this software for any # purpose with or without fee is hereby granted, provided that the above diff --git a/contrib/bind9/lib/isccc/api b/contrib/bind9/lib/isccc/api index a629bf7..ba19dd9 100644 --- a/contrib/bind9/lib/isccc/api +++ b/contrib/bind9/lib/isccc/api @@ -4,5 +4,5 @@ # 9.8: 80-89 # 9.9: 90-109 LIBINTERFACE = 80 -LIBREVISION = 1 +LIBREVISION = 2 LIBAGE = 0 diff --git a/contrib/bind9/lib/isccc/cc.c b/contrib/bind9/lib/isccc/cc.c index b549d6cb..1ab9479 100644 --- a/contrib/bind9/lib/isccc/cc.c +++ b/contrib/bind9/lib/isccc/cc.c @@ -399,8 +399,6 @@ table_fromwire(isccc_region_t *source, isccc_region_t *secret, first_tag = ISC_FALSE; } - *alistp = alist; - if (secret != NULL) { if (checksum_rstart != NULL) result = verify(alist, checksum_rstart, @@ -412,7 +410,9 @@ table_fromwire(isccc_region_t *source, isccc_region_t *secret, result = ISC_R_SUCCESS; bad: - if (result != ISC_R_SUCCESS) + if (result == ISC_R_SUCCESS) + *alistp = alist; + else isccc_sexpr_free(&alist); return (result); diff --git a/contrib/bind9/lib/isccc/include/Makefile.in b/contrib/bind9/lib/isccc/include/Makefile.in index 9f727c3..6b222a5 100644 --- a/contrib/bind9/lib/isccc/include/Makefile.in +++ b/contrib/bind9/lib/isccc/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isccc/include/isccc/Makefile.in b/contrib/bind9/lib/isccc/include/isccc/Makefile.in index ae5bec7..c4af19a 100644 --- a/contrib/bind9/lib/isccc/include/isccc/Makefile.in +++ b/contrib/bind9/lib/isccc/include/isccc/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isccfg/api b/contrib/bind9/lib/isccfg/api index 9f3d38c..cde1e2f 100644 --- a/contrib/bind9/lib/isccfg/api +++ b/contrib/bind9/lib/isccfg/api @@ -4,5 +4,5 @@ # 9.8: 80-89 # 9.9: 90-109 LIBINTERFACE = 82 -LIBREVISION = 2 +LIBREVISION = 3 LIBAGE = 0 diff --git a/contrib/bind9/lib/isccfg/include/Makefile.in b/contrib/bind9/lib/isccfg/include/Makefile.in index 1f24003..5c6976a 100644 --- a/contrib/bind9/lib/isccfg/include/Makefile.in +++ b/contrib/bind9/lib/isccfg/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isccfg/include/isccfg/Makefile.in b/contrib/bind9/lib/isccfg/include/isccfg/Makefile.in index a6fd412..211583a 100644 --- a/contrib/bind9/lib/isccfg/include/isccfg/Makefile.in +++ b/contrib/bind9/lib/isccfg/include/isccfg/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2005, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2001, 2002 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/isccfg/namedconf.c b/contrib/bind9/lib/isccfg/namedconf.c index 3f9454d..4d09f11 100644 --- a/contrib/bind9/lib/isccfg/namedconf.c +++ b/contrib/bind9/lib/isccfg/namedconf.c @@ -1014,66 +1014,60 @@ static cfg_type_t cfg_type_masterformat = { -/* +/*% * response-policy { * zone <string> [ policy (given|disabled|passthru| - * nxdomain|nodata|cname <domain> ) ]; - * }; - * - * this is a chimera of doc_optional_keyvalue() and cfg_doc_enum() + * nxdomain|nodata|cname <domain> ) ] + * [ recursive-only yes|no ] + * [ max-policy-ttl number ] ; + * } [ recursive-only yes|no ] [ break-dnssec yes|no ] + * [ max-policy-ttl number ] ; */ + static void -doc_rpz_policies(cfg_printer_t *pctx, const cfg_type_t *type) { - const keyword_type_t *kw; +doc_rpz_policy(cfg_printer_t *pctx, const cfg_type_t *type) { const char * const *p; - - kw = type->of; - cfg_print_chars(pctx, "[ ", 2); - cfg_print_cstr(pctx, kw->name); - cfg_print_chars(pctx, " ", 1); - + /* + * This is cfg_doc_enum() without the trailing " )". + */ cfg_print_chars(pctx, "( ", 2); - for (p = kw->type->of; *p != NULL; p++) { + for (p = type->of; *p != NULL; p++) { cfg_print_cstr(pctx, *p); if (p[1] != NULL) cfg_print_chars(pctx, " | ", 3); } } -/* - * print_qstring() from parser.c - */ -static void -print_rpz_cname(cfg_printer_t *pctx, const cfg_obj_t *obj) -{ - cfg_print_chars(pctx, "\"", 1); - cfg_print_ustring(pctx, obj); - cfg_print_chars(pctx, "\"", 1); -} - static void doc_rpz_cname(cfg_printer_t *pctx, const cfg_type_t *type) { cfg_doc_terminal(pctx, type); - cfg_print_chars(pctx, " ) ]", 4); + cfg_print_chars(pctx, " )", 2); } +/* + * Parse + * given|disabled|passthru|nxdomain|nodata|cname <domain> + */ static isc_result_t -parse_rpz(cfg_parser_t *pctx, const cfg_type_t *type, cfg_obj_t **ret) { +cfg_parse_rpz_policy(cfg_parser_t *pctx, const cfg_type_t *type, + cfg_obj_t **ret) +{ isc_result_t result; - cfg_obj_t *obj = NULL; - const cfg_tuplefielddef_t *fields = type->of; + cfg_obj_t *obj; + const cfg_tuplefielddef_t *fields; CHECK(cfg_create_tuple(pctx, type, &obj)); + + fields = type->of; CHECK(cfg_parse_obj(pctx, fields[0].type, &obj->value.tuple[0])); - CHECK(cfg_parse_obj(pctx, fields[1].type, &obj->value.tuple[1])); /* * parse cname domain only after "policy cname" */ - if (cfg_obj_isvoid(obj->value.tuple[1]) || - strcasecmp("cname", cfg_obj_asstring(obj->value.tuple[1]))) { - CHECK(cfg_parse_void(pctx, NULL, &obj->value.tuple[2])); + if (strcasecmp("cname", cfg_obj_asstring(obj->value.tuple[0])) != 0) { + CHECK(cfg_parse_void(pctx, NULL, &obj->value.tuple[1])); } else { - CHECK(cfg_parse_obj(pctx, fields[2].type, &obj->value.tuple[2])); + CHECK(cfg_parse_obj(pctx, fields[1].type, + &obj->value.tuple[1])); } *ret = obj; @@ -1084,50 +1078,160 @@ cleanup: return (result); } +/* + * Parse a tuple consisting of any kind of required field followed + * by 2 or more optional keyvalues that can be in any order. + */ +static isc_result_t +cfg_parse_kv_tuple(cfg_parser_t *pctx, const cfg_type_t *type, cfg_obj_t **ret) { + const cfg_tuplefielddef_t *fields, *f; + cfg_obj_t *obj; + int fn; + isc_result_t result; + + obj = NULL; + CHECK(cfg_create_tuple(pctx, type, &obj)); + + /* + * The zone first field is required and always first. + */ + fields = type->of; + CHECK(cfg_parse_obj(pctx, fields[0].type, &obj->value.tuple[0])); + + for (;;) { + CHECK(cfg_peektoken(pctx, CFG_LEXOPT_QSTRING)); + if (pctx->token.type != isc_tokentype_string) + break; + + for (fn = 1, f = &fields[1]; ; ++fn, ++f) { + if (f->name == NULL) { + cfg_parser_error(pctx, 0, "unexpected '%s'", + TOKEN_STRING(pctx)); + result = ISC_R_UNEXPECTEDTOKEN; + goto cleanup; + } + if (obj->value.tuple[fn] == NULL && + strcasecmp(f->name, TOKEN_STRING(pctx)) == 0) + break; + } + + CHECK(cfg_gettoken(pctx, 0)); + CHECK(cfg_parse_obj(pctx, f->type, &obj->value.tuple[fn])); + } + + for (fn = 1, f = &fields[1]; f->name != NULL; ++fn, ++f) { + if (obj->value.tuple[fn] == NULL) + CHECK(cfg_parse_void(pctx, NULL, + &obj->value.tuple[fn])); + } + + *ret = obj; + return (ISC_R_SUCCESS); + +cleanup: + CLEANUP_OBJ(obj); + return (result); +} + +static void +cfg_print_kv_tuple(cfg_printer_t *pctx, const cfg_obj_t *obj) { + unsigned int i; + const cfg_tuplefielddef_t *fields, *f; + const cfg_obj_t *fieldobj; + + fields = obj->type->of; + for (f = fields, i = 0; f->name != NULL; f++, i++) { + fieldobj = obj->value.tuple[i]; + if (fieldobj->type->print == cfg_print_void) + continue; + if (i != 0) { + cfg_print_chars(pctx, " ", 1); + cfg_print_cstr(pctx, f->name); + cfg_print_chars(pctx, " ", 1); + } + cfg_print_obj(pctx, fieldobj); + } +} + +static void +cfg_doc_kv_tuple(cfg_printer_t *pctx, const cfg_type_t *type) { + const cfg_tuplefielddef_t *fields, *f; + + fields = type->of; + for (f = fields; f->name != NULL; f++) { + if (f != fields) { + cfg_print_chars(pctx, " [ ", 3); + cfg_print_cstr(pctx, f->name); + if (f->type->doc != cfg_doc_void) + cfg_print_chars(pctx, " ", 1); + } + cfg_doc_obj(pctx, f->type); + if (f != fields) + cfg_print_chars(pctx, " ]", 2); + } +} + +static keyword_type_t zone_kw = {"zone", &cfg_type_qstring}; +static cfg_type_t cfg_type_rpz_zone = { + "zone", parse_keyvalue, print_keyvalue, + doc_keyvalue, &cfg_rep_string, + &zone_kw +}; static const char *rpz_policies[] = { "given", "disabled", "passthru", "no-op", "nxdomain", "nodata", "cname", NULL }; -static cfg_type_t cfg_type_rpz_policylist = { - "policies", cfg_parse_enum, cfg_print_ustring, cfg_doc_enum, - &cfg_rep_string, &rpz_policies +static cfg_type_t cfg_type_rpz_policy_name = { + "policy name", cfg_parse_enum, cfg_print_ustring, + doc_rpz_policy, &cfg_rep_string, + &rpz_policies }; -static keyword_type_t rpz_policies_kw = { - "policy", &cfg_type_rpz_policylist +static cfg_type_t cfg_type_rpz_cname = { + "quoted_string", cfg_parse_astring, NULL, + doc_rpz_cname, &cfg_rep_string, + NULL }; -static cfg_type_t cfg_type_rpz_policy = { - "optional_policy", parse_optional_keyvalue, print_keyvalue, - doc_rpz_policies, &cfg_rep_string, &rpz_policies_kw +static cfg_tuplefielddef_t rpz_policy_fields[] = { + { "policy name", &cfg_type_rpz_policy_name, 0 }, + { "cname", &cfg_type_rpz_cname, 0 }, + { NULL, NULL, 0 } }; -static cfg_type_t cfg_type_cname = { - "domain", cfg_parse_astring, print_rpz_cname, doc_rpz_cname, - &cfg_rep_string, NULL +static cfg_type_t cfg_type_rpz_policy = { + "policy tuple", cfg_parse_rpz_policy, + cfg_print_tuple, cfg_doc_tuple, &cfg_rep_tuple, + rpz_policy_fields }; -static cfg_tuplefielddef_t rpzone_fields[] = { - { "name", &cfg_type_astring, 0 }, +static cfg_tuplefielddef_t rpz_zone_fields[] = { + { "zone name", &cfg_type_rpz_zone, 0 }, { "policy", &cfg_type_rpz_policy, 0 }, - { "cname", &cfg_type_cname, 0 }, + { "recursive-only", &cfg_type_boolean, 0 }, + { "max-policy-ttl", &cfg_type_uint32, 0 }, { NULL, NULL, 0 } }; -static cfg_type_t cfg_type_rpzone = { - "rpzone", parse_rpz, cfg_print_tuple, cfg_doc_tuple, - &cfg_rep_tuple, rpzone_fields +static cfg_type_t cfg_type_rpz_tuple = { + "rpz tuple", cfg_parse_kv_tuple, + cfg_print_kv_tuple, cfg_doc_kv_tuple, &cfg_rep_tuple, + rpz_zone_fields }; -static cfg_clausedef_t rpz_clauses[] = { - { "zone", &cfg_type_rpzone, CFG_CLAUSEFLAG_MULTI }, - { NULL, NULL, 0 } +static cfg_type_t cfg_type_rpz_list = { + "zone list", cfg_parse_bracketed_list, cfg_print_bracketed_list, + cfg_doc_bracketed_list, &cfg_rep_list, + &cfg_type_rpz_tuple }; -static cfg_clausedef_t *rpz_clausesets[] = { - rpz_clauses, - NULL +static cfg_tuplefielddef_t rpz_fields[] = { + { "zone list", &cfg_type_rpz_list, 0 }, + { "recursive-only", &cfg_type_boolean, 0 }, + { "break-dnssec", &cfg_type_boolean, 0 }, + { "max-policy-ttl", &cfg_type_uint32, 0 }, + { NULL, NULL, 0 } }; static cfg_type_t cfg_type_rpz = { - "rpz", cfg_parse_map, cfg_print_map, cfg_doc_map, - &cfg_rep_map, rpz_clausesets + "rpz", cfg_parse_kv_tuple, + cfg_print_kv_tuple, cfg_doc_kv_tuple, &cfg_rep_tuple, + rpz_fields }; - /*% * dnssec-lookaside */ diff --git a/contrib/bind9/lib/lwres/Makefile.in b/contrib/bind9/lib/lwres/Makefile.in index 858b325..0cf873b 100644 --- a/contrib/bind9/lib/lwres/Makefile.in +++ b/contrib/bind9/lib/lwres/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2005, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2005, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000, 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/lwres/api b/contrib/bind9/lib/lwres/api index ba19dd9..1e51baa 100644 --- a/contrib/bind9/lib/lwres/api +++ b/contrib/bind9/lib/lwres/api @@ -4,5 +4,5 @@ # 9.8: 80-89 # 9.9: 90-109 LIBINTERFACE = 80 -LIBREVISION = 2 +LIBREVISION = 3 LIBAGE = 0 diff --git a/contrib/bind9/lib/lwres/getaddrinfo.c b/contrib/bind9/lib/lwres/getaddrinfo.c index 8e916f3..811a2fe 100644 --- a/contrib/bind9/lib/lwres/getaddrinfo.c +++ b/contrib/bind9/lib/lwres/getaddrinfo.c @@ -1,5 +1,5 @@ /* - * Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004-2008, 2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1999-2001 Internet Software Consortium. * * This code is derived from software contributed to ISC by @@ -398,7 +398,7 @@ lwres_getaddrinfo(const char *hostname, const char *servname, goto inet6_addr; } addrsize = sizeof(struct in_addr); - addroff = (char *)(&SIN(0)->sin_addr) - (char *)0; + addroff = offsetof(struct sockaddr_in, sin_addr); family = AF_INET; goto common; #ifdef LWRES_HAVE_SIN6_SCOPE_ID @@ -408,7 +408,7 @@ lwres_getaddrinfo(const char *hostname, const char *servname, if (family && family != AF_INET6) return (EAI_NONAME); addrsize = sizeof(struct in6_addr); - addroff = (char *)(&SIN6(0)->sin6_addr) - (char *)0; + addroff = offsetof(struct sockaddr_in6, sin6_addr); family = AF_INET6; goto common; #endif @@ -417,7 +417,7 @@ lwres_getaddrinfo(const char *hostname, const char *servname, return (EAI_NONAME); inet6_addr: addrsize = sizeof(struct in6_addr); - addroff = (char *)(&SIN6(0)->sin6_addr) - (char *)0; + addroff = offsetof(struct sockaddr_in6, sin6_addr); family = AF_INET6; common: diff --git a/contrib/bind9/lib/lwres/include/Makefile.in b/contrib/bind9/lib/lwres/include/Makefile.in index 4750a5e..6c3d07f 100644 --- a/contrib/bind9/lib/lwres/include/Makefile.in +++ b/contrib/bind9/lib/lwres/include/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000, 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/lwres/include/lwres/Makefile.in b/contrib/bind9/lib/lwres/include/lwres/Makefile.in index fc3126f..36b8b03 100644 --- a/contrib/bind9/lib/lwres/include/lwres/Makefile.in +++ b/contrib/bind9/lib/lwres/include/lwres/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2000, 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/lib/lwres/man/Makefile.in b/contrib/bind9/lib/lwres/man/Makefile.in index cb723c2..80db9f2 100644 --- a/contrib/bind9/lib/lwres/man/Makefile.in +++ b/contrib/bind9/lib/lwres/man/Makefile.in @@ -1,4 +1,4 @@ -# Copyright (C) 2004, 2007 Internet Systems Consortium, Inc. ("ISC") +# Copyright (C) 2004, 2007, 2012 Internet Systems Consortium, Inc. ("ISC") # Copyright (C) 2001 Internet Software Consortium. # # Permission to use, copy, modify, and/or distribute this software for any diff --git a/contrib/bind9/make/rules.in b/contrib/bind9/make/rules.in index b952bdb..cd4cf4f 100644 --- a/contrib/bind9/make/rules.in +++ b/contrib/bind9/make/rules.in @@ -88,7 +88,7 @@ testdirs: install:: all install clean distclean maintainer-clean doc docclean man manclean:: - @for i in ${ALL_SUBDIRS}; do \ + @for i in ${ALL_SUBDIRS} ${ALL_TESTDIRS}; do \ if [ "$$i" != "nulldir" -a -d $$i ]; then \ echo "making $@ in `pwd`/$$i"; \ (cd $$i; ${MAKE} ${MAKEDEFS} DESTDIR="${DESTDIR}" $@) || exit 1; \ diff --git a/contrib/bind9/version b/contrib/bind9/version index b841ff8..1090bee 100644 --- a/contrib/bind9/version +++ b/contrib/bind9/version @@ -5,6 +5,6 @@ # MAJORVER=9 MINORVER=8 -PATCHVER=3 +PATCHVER=4 RELEASETYPE=-P -RELEASEVER=4 +RELEASEVER=1 diff --git a/lib/bind/config.h b/lib/bind/config.h index 22d76bc..5e9d74b 100644 --- a/lib/bind/config.h +++ b/lib/bind/config.h @@ -3,7 +3,7 @@ /* config.h. Generated from config.h.in by configure. */ /* config.h.in. Generated from configure.in by autoheader. */ /* - * Copyright (C) 2004, 2005, 2007, 2008 Internet Systems Consortium, Inc. ("ISC") + * Copyright (C) 2004, 2005, 2007, 2008, 2012 Internet Systems Consortium, Inc. ("ISC") * Copyright (C) 1999-2003 Internet Software Consortium. * * Permission to use, copy, modify, and/or distribute this software for any @@ -141,6 +141,9 @@ int sigwait(const unsigned int *set, int *sig); /* Define if OpenSSL includes DSA support */ #define HAVE_OPENSSL_DSA 1 +/* Define if OpenSSL includes ECDSA support */ +#define HAVE_OPENSSL_ECDSA 1 + /* Define to the length type used by the socket API (socklen_t, size_t, int). */ #define ISC_SOCKADDR_LEN_T socklen_t @@ -202,6 +205,9 @@ int sigwait(const unsigned int *set, int *sig); /* Define to 1 if you have the `EVP_sha256' function. */ #define HAVE_EVP_SHA256 1 +/* Define to 1 if you have the `EVP_sha384' function. */ +#define HAVE_EVP_SHA384 1 + /* Define to 1 if you have the `EVP_sha512' function. */ #define HAVE_EVP_SHA512 1 diff --git a/lib/bind/config.mk b/lib/bind/config.mk index ebac59a..88ec258 100644 --- a/lib/bind/config.mk +++ b/lib/bind/config.mk @@ -27,10 +27,10 @@ INTERNALLIB= .endif .endif -# GSSAPI support is incomplete in 9.3.0 -#.if ${MK_KERBEROS} != "no" -#CFLAGS+= -DGSSAPI -#.endif +# Enable GSSAPI support if available +.if ${MK_KERBEROS} != "no" +CFLAGS+= -DGSSAPI +.endif # Enable IPv6 support if available .if ${MK_INET6_SUPPORT} != "no" diff --git a/lib/bind/dns/Makefile b/lib/bind/dns/Makefile index 159de00..89dfd40 100644 --- a/lib/bind/dns/Makefile +++ b/lib/bind/dns/Makefile @@ -26,6 +26,7 @@ SRCS+= acache.c acl.c adb.c byaddr.c \ name.c ncache.c nsec.c nsec3.c \ openssl_link.c openssldh_link.c \ openssldsa_link.c opensslgost_link.c opensslrsa_link.c \ + opensslecdsa_link.c \ order.c peer.c portlist.c private.c \ rbt.c rbtdb.c rbtdb64.c rcode.c rdata.c rdatalist.c \ rdataset.c rdatasetiter.c rdataslab.c request.c \ diff --git a/lib/bind/isc/isc/platform.h b/lib/bind/isc/isc/platform.h index 7dab495..61630f4 100644 --- a/lib/bind/isc/isc/platform.h +++ b/lib/bind/isc/isc/platform.h @@ -17,7 +17,7 @@ * PERFORMANCE OF THIS SOFTWARE. */ -/* $Id: platform.h.in,v 1.56 2010-12-18 01:56:23 each Exp $ */ +/* $Id: platform.h.in,v 1.56 2010/12/18 01:56:23 each Exp $ */ #ifndef ISC_PLATFORM_H #define ISC_PLATFORM_H 1 @@ -219,19 +219,19 @@ * Defined to <gssapi.h> or <gssapi/gssapi.h> for how to include * the GSSAPI header. */ - +#define ISC_PLATFORM_GSSAPIHEADER <gssapi/gssapi.h> /* * Defined to <gssapi_krb5.h> or <gssapi/gssapi_krb5.h> for how to * include the GSSAPI KRB5 header. */ - +#define ISC_PLATFORM_GSSAPI_KRB5_HEADER <gssapi/gssapi_krb5.h> /* * Defined to <krb5.h> or <krb5/krb5.h> for how to include * the KRB5 header. */ - +#define ISC_PLATFORM_KRB5HEADER <krb5.h> /* * Type used for resource limits. |
