diff options
Diffstat (limited to 'contrib/bind9/doc/arm')
27 files changed, 0 insertions, 51959 deletions
diff --git a/contrib/bind9/doc/arm/Bv9ARM-book.xml b/contrib/bind9/doc/arm/Bv9ARM-book.xml deleted file mode 100644 index e30ca3f..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM-book.xml +++ /dev/null @@ -1,12326 +0,0 @@ -<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN" - "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd" - [<!ENTITY mdash "—">]> -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and/or distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> - -<!-- File: $Id: Bv9ARM-book.xml,v 1.241.18.82 2007/09/26 03:28:27 marka Exp $ --> -<book xmlns:xi="http://www.w3.org/2001/XInclude"> - <title>BIND 9 Administrator Reference Manual</title> - - <bookinfo> - <copyright> - <year>2004</year> - <year>2005</year> - <year>2006</year> - <year>2007</year> - <holder>Internet Systems Consortium, Inc. ("ISC")</holder> - </copyright> - <copyright> - <year>2000</year> - <year>2001</year> - <year>2002</year> - <year>2003</year> - <holder>Internet Software Consortium.</holder> - </copyright> - </bookinfo> - - <chapter id="Bv9ARM.ch01"> - <title>Introduction</title> - <para> - The Internet Domain Name System (<acronym>DNS</acronym>) - consists of the syntax - to specify the names of entities in the Internet in a hierarchical - manner, the rules used for delegating authority over names, and the - system implementation that actually maps names to Internet - addresses. <acronym>DNS</acronym> data is maintained in a - group of distributed - hierarchical databases. - </para> - - <sect1> - <title>Scope of Document</title> - - <para> - The Berkeley Internet Name Domain - (<acronym>BIND</acronym>) implements a - domain name server for a number of operating systems. This - document provides basic information about the installation and - care of the Internet Systems Consortium (<acronym>ISC</acronym>) - <acronym>BIND</acronym> version 9 software package for - system administrators. - </para> - - <para> - This version of the manual corresponds to BIND version 9.4. - </para> - - </sect1> - <sect1> - <title>Organization of This Document</title> - <para> - In this document, <emphasis>Section 1</emphasis> introduces - the basic <acronym>DNS</acronym> and <acronym>BIND</acronym> concepts. <emphasis>Section 2</emphasis> - describes resource requirements for running <acronym>BIND</acronym> in various - environments. Information in <emphasis>Section 3</emphasis> is - <emphasis>task-oriented</emphasis> in its presentation and is - organized functionally, to aid in the process of installing the - <acronym>BIND</acronym> 9 software. The task-oriented - section is followed by - <emphasis>Section 4</emphasis>, which contains more advanced - concepts that the system administrator may need for implementing - certain options. <emphasis>Section 5</emphasis> - describes the <acronym>BIND</acronym> 9 lightweight - resolver. The contents of <emphasis>Section 6</emphasis> are - organized as in a reference manual to aid in the ongoing - maintenance of the software. <emphasis>Section 7</emphasis> addresses - security considerations, and - <emphasis>Section 8</emphasis> contains troubleshooting help. The - main body of the document is followed by several - <emphasis>appendices</emphasis> which contain useful reference - information, such as a <emphasis>bibliography</emphasis> and - historic information related to <acronym>BIND</acronym> - and the Domain Name - System. - </para> - </sect1> - <sect1> - <title>Conventions Used in This Document</title> - - <para> - In this document, we use the following general typographic - conventions: - </para> - - <informaltable> - <tgroup cols="2"> - <colspec colname="1" colnum="1" colwidth="3.000in"/> - <colspec colname="2" colnum="2" colwidth="2.625in"/> - <tbody> - <row> - <entry colname="1"> - <para> - <emphasis>To describe:</emphasis> - </para> - </entry> - <entry colname="2"> - <para> - <emphasis>We use the style:</emphasis> - </para> - </entry> - </row> - <row> - <entry colname="1"> - <para> - a pathname, filename, URL, hostname, - mailing list name, or new term or concept - </para> - </entry> - <entry colname="2"> - <para> - <filename>Fixed width</filename> - </para> - </entry> - </row> - <row> - <entry colname="1"> - <para> - literal user - input - </para> - </entry> - <entry colname="2"> - <para> - <userinput>Fixed Width Bold</userinput> - </para> - </entry> - </row> - <row> - <entry colname="1"> - <para> - program output - </para> - </entry> - <entry colname="2"> - <para> - <computeroutput>Fixed Width</computeroutput> - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - - <para> - The following conventions are used in descriptions of the - <acronym>BIND</acronym> configuration file:<informaltable colsep="0" frame="all" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="2Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="3.000in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="2.625in"/> - <tbody> - <row rowsep="0"> - <entry colname="1" colsep="1" rowsep="1"> - <para> - <emphasis>To describe:</emphasis> - </para> - </entry> - <entry colname="2" rowsep="1"> - <para> - <emphasis>We use the style:</emphasis> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1" colsep="1" rowsep="1"> - <para> - keywords - </para> - </entry> - <entry colname="2" rowsep="1"> - <para> - <literal>Fixed Width</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1" colsep="1" rowsep="1"> - <para> - variables - </para> - </entry> - <entry colname="2" rowsep="1"> - <para> - <varname>Fixed Width</varname> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1" colsep="1"> - <para> - Optional input - </para> - </entry> - <entry colname="2"> - <para> - <optional>Text is enclosed in square brackets</optional> - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - </para> - </sect1> - <sect1> - <title>The Domain Name System (<acronym>DNS</acronym>)</title> - <para> - The purpose of this document is to explain the installation - and upkeep of the <acronym>BIND</acronym> (Berkeley Internet - Name Domain) software package, and we - begin by reviewing the fundamentals of the Domain Name System - (<acronym>DNS</acronym>) as they relate to <acronym>BIND</acronym>. - </para> - - <sect2> - <title>DNS Fundamentals</title> - - <para> - The Domain Name System (DNS) is a hierarchical, distributed - database. It stores information for mapping Internet host names to - IP - addresses and vice versa, mail routing information, and other data - used by Internet applications. - </para> - - <para> - Clients look up information in the DNS by calling a - <emphasis>resolver</emphasis> library, which sends queries to one or - more <emphasis>name servers</emphasis> and interprets the responses. - The <acronym>BIND</acronym> 9 software distribution - contains a - name server, <command>named</command>, and two resolver - libraries, <command>liblwres</command> and <command>libbind</command>. - </para> - - </sect2><sect2> - <title>Domains and Domain Names</title> - - <para> - The data stored in the DNS is identified by <emphasis>domain names</emphasis> that are organized as a tree according to - organizational or administrative boundaries. Each node of the tree, - called a <emphasis>domain</emphasis>, is given a label. The domain - name of the - node is the concatenation of all the labels on the path from the - node to the <emphasis>root</emphasis> node. This is represented - in written form as a string of labels listed from right to left and - separated by dots. A label need only be unique within its parent - domain. - </para> - - <para> - For example, a domain name for a host at the - company <emphasis>Example, Inc.</emphasis> could be - <literal>ourhost.example.com</literal>, - where <literal>com</literal> is the - top level domain to which - <literal>ourhost.example.com</literal> belongs, - <literal>example</literal> is - a subdomain of <literal>com</literal>, and - <literal>ourhost</literal> is the - name of the host. - </para> - - <para> - For administrative purposes, the name space is partitioned into - areas called <emphasis>zones</emphasis>, each starting at a node and - extending down to the leaf nodes or to nodes where other zones - start. - The data for each zone is stored in a <emphasis>name server</emphasis>, which answers queries about the zone using the - <emphasis>DNS protocol</emphasis>. - </para> - - <para> - The data associated with each domain name is stored in the - form of <emphasis>resource records</emphasis> (<acronym>RR</acronym>s). - Some of the supported resource record types are described in - <xref linkend="types_of_resource_records_and_when_to_use_them"/>. - </para> - - <para> - For more detailed information about the design of the DNS and - the DNS protocol, please refer to the standards documents listed in - <xref linkend="rfcs"/>. - </para> - </sect2> - - <sect2> - <title>Zones</title> - <para> - To properly operate a name server, it is important to understand - the difference between a <emphasis>zone</emphasis> - and a <emphasis>domain</emphasis>. - </para> - - <para> - As stated previously, a zone is a point of delegation in - the <acronym>DNS</acronym> tree. A zone consists of - those contiguous parts of the domain - tree for which a name server has complete information and over which - it has authority. It contains all domain names from a certain point - downward in the domain tree except those which are delegated to - other zones. A delegation point is marked by one or more - <emphasis>NS records</emphasis> in the - parent zone, which should be matched by equivalent NS records at - the root of the delegated zone. - </para> - - <para> - For instance, consider the <literal>example.com</literal> - domain which includes names - such as <literal>host.aaa.example.com</literal> and - <literal>host.bbb.example.com</literal> even though - the <literal>example.com</literal> zone includes - only delegations for the <literal>aaa.example.com</literal> and - <literal>bbb.example.com</literal> zones. A zone can - map - exactly to a single domain, but could also include only part of a - domain, the rest of which could be delegated to other - name servers. Every name in the <acronym>DNS</acronym> - tree is a - <emphasis>domain</emphasis>, even if it is - <emphasis>terminal</emphasis>, that is, has no - <emphasis>subdomains</emphasis>. Every subdomain is a domain and - every domain except the root is also a subdomain. The terminology is - not intuitive and we suggest that you read RFCs 1033, 1034 and 1035 - to - gain a complete understanding of this difficult and subtle - topic. - </para> - - <para> - Though <acronym>BIND</acronym> is called a "domain name - server", - it deals primarily in terms of zones. The master and slave - declarations in the <filename>named.conf</filename> file - specify - zones, not domains. When you ask some other site if it is willing to - be a slave server for your <emphasis>domain</emphasis>, you are - actually asking for slave service for some collection of zones. - </para> - </sect2> - - <sect2> - <title>Authoritative Name Servers</title> - - <para> - Each zone is served by at least - one <emphasis>authoritative name server</emphasis>, - which contains the complete data for the zone. - To make the DNS tolerant of server and network failures, - most zones have two or more authoritative servers, on - different networks. - </para> - - <para> - Responses from authoritative servers have the "authoritative - answer" (AA) bit set in the response packets. This makes them - easy to identify when debugging DNS configurations using tools like - <command>dig</command> (<xref linkend="diagnostic_tools"/>). - </para> - - <sect3> - <title>The Primary Master</title> - - <para> - The authoritative server where the master copy of the zone - data is maintained is called the - <emphasis>primary master</emphasis> server, or simply the - <emphasis>primary</emphasis>. Typically it loads the zone - contents from some local file edited by humans or perhaps - generated mechanically from some other local file which is - edited by humans. This file is called the - <emphasis>zone file</emphasis> or - <emphasis>master file</emphasis>. - </para> - - <para> - In some cases, however, the master file may not be edited - by humans at all, but may instead be the result of - <emphasis>dynamic update</emphasis> operations. - </para> - </sect3> - - <sect3> - <title>Slave Servers</title> - <para> - The other authoritative servers, the <emphasis>slave</emphasis> - servers (also known as <emphasis>secondary</emphasis> servers) - load - the zone contents from another server using a replication process - known as a <emphasis>zone transfer</emphasis>. Typically the data - are - transferred directly from the primary master, but it is also - possible - to transfer it from another slave. In other words, a slave server - may itself act as a master to a subordinate slave server. - </para> - </sect3> - - <sect3> - <title>Stealth Servers</title> - - <para> - Usually all of the zone's authoritative servers are listed in - NS records in the parent zone. These NS records constitute - a <emphasis>delegation</emphasis> of the zone from the parent. - The authoritative servers are also listed in the zone file itself, - at the <emphasis>top level</emphasis> or <emphasis>apex</emphasis> - of the zone. You can list servers in the zone's top-level NS - records that are not in the parent's NS delegation, but you cannot - list servers in the parent's delegation that are not present at - the zone's top level. - </para> - - <para> - A <emphasis>stealth server</emphasis> is a server that is - authoritative for a zone but is not listed in that zone's NS - records. Stealth servers can be used for keeping a local copy of - a - zone to speed up access to the zone's records or to make sure that - the - zone is available even if all the "official" servers for the zone - are - inaccessible. - </para> - - <para> - A configuration where the primary master server itself is a - stealth server is often referred to as a "hidden primary" - configuration. One use for this configuration is when the primary - master - is behind a firewall and therefore unable to communicate directly - with the outside world. - </para> - - </sect3> - - </sect2> - <sect2> - - <title>Caching Name Servers</title> - - <!-- - - Terminology here is inconsistent. Probably ought to - - convert to using "recursive name server" everywhere - - with just a note about "caching" terminology. - --> - - <para> - The resolver libraries provided by most operating systems are - <emphasis>stub resolvers</emphasis>, meaning that they are not - capable of - performing the full DNS resolution process by themselves by talking - directly to the authoritative servers. Instead, they rely on a - local - name server to perform the resolution on their behalf. Such a - server - is called a <emphasis>recursive</emphasis> name server; it performs - <emphasis>recursive lookups</emphasis> for local clients. - </para> - - <para> - To improve performance, recursive servers cache the results of - the lookups they perform. Since the processes of recursion and - caching are intimately connected, the terms - <emphasis>recursive server</emphasis> and - <emphasis>caching server</emphasis> are often used synonymously. - </para> - - <para> - The length of time for which a record may be retained in - the cache of a caching name server is controlled by the - Time To Live (TTL) field associated with each resource record. - </para> - - <sect3> - <title>Forwarding</title> - - <para> - Even a caching name server does not necessarily perform - the complete recursive lookup itself. Instead, it can - <emphasis>forward</emphasis> some or all of the queries - that it cannot satisfy from its cache to another caching name - server, - commonly referred to as a <emphasis>forwarder</emphasis>. - </para> - - <para> - There may be one or more forwarders, - and they are queried in turn until the list is exhausted or an - answer - is found. Forwarders are typically used when you do not - wish all the servers at a given site to interact directly with the - rest of - the Internet servers. A typical scenario would involve a number - of internal <acronym>DNS</acronym> servers and an - Internet firewall. Servers unable - to pass packets through the firewall would forward to the server - that can do it, and that server would query the Internet <acronym>DNS</acronym> servers - on the internal server's behalf. - </para> - </sect3> - - </sect2> - - <sect2> - <title>Name Servers in Multiple Roles</title> - - <para> - The <acronym>BIND</acronym> name server can - simultaneously act as - a master for some zones, a slave for other zones, and as a caching - (recursive) server for a set of local clients. - </para> - - <para> - However, since the functions of authoritative name service - and caching/recursive name service are logically separate, it is - often advantageous to run them on separate server machines. - - A server that only provides authoritative name service - (an <emphasis>authoritative-only</emphasis> server) can run with - recursion disabled, improving reliability and security. - - A server that is not authoritative for any zones and only provides - recursive service to local - clients (a <emphasis>caching-only</emphasis> server) - does not need to be reachable from the Internet at large and can - be placed inside a firewall. - </para> - - </sect2> - </sect1> - - </chapter> - - <chapter id="Bv9ARM.ch02"> - <title><acronym>BIND</acronym> Resource Requirements</title> - - <sect1> - <title>Hardware requirements</title> - - <para> - <acronym>DNS</acronym> hardware requirements have - traditionally been quite modest. - For many installations, servers that have been pensioned off from - active duty have performed admirably as <acronym>DNS</acronym> servers. - </para> - <para> - The DNSSEC features of <acronym>BIND</acronym> 9 - may prove to be quite - CPU intensive however, so organizations that make heavy use of these - features may wish to consider larger systems for these applications. - <acronym>BIND</acronym> 9 is fully multithreaded, allowing - full utilization of - multiprocessor systems for installations that need it. - </para> - </sect1> - <sect1> - <title>CPU Requirements</title> - <para> - CPU requirements for <acronym>BIND</acronym> 9 range from - i486-class machines - for serving of static zones without caching, to enterprise-class - machines if you intend to process many dynamic updates and DNSSEC - signed zones, serving many thousands of queries per second. - </para> - </sect1> - - <sect1> - <title>Memory Requirements</title> - <para> - The memory of the server has to be large enough to fit the - cache and zones loaded off disk. The <command>max-cache-size</command> - option can be used to limit the amount of memory used by the cache, - at the expense of reducing cache hit rates and causing more <acronym>DNS</acronym> - traffic. - Additionally, if additional section caching - (<xref linkend="acache"/>) is enabled, - the <command>max-acache-size</command> option can be used to - limit the amount - of memory used by the mechanism. - It is still good practice to have enough memory to load - all zone and cache data into memory — unfortunately, the best - way - to determine this for a given installation is to watch the name server - in operation. After a few weeks the server process should reach - a relatively stable size where entries are expiring from the cache as - fast as they are being inserted. - </para> - <!-- - - Add something here about leaving overhead for attacks? - - How much overhead? Percentage? - --> - </sect1> - - <sect1> - <title>Name Server Intensive Environment Issues</title> - <para> - For name server intensive environments, there are two alternative - configurations that may be used. The first is where clients and - any second-level internal name servers query a main name server, which - has enough memory to build a large cache. This approach minimizes - the bandwidth used by external name lookups. The second alternative - is to set up second-level internal name servers to make queries - independently. - In this configuration, none of the individual machines needs to - have as much memory or CPU power as in the first alternative, but - this has the disadvantage of making many more external queries, - as none of the name servers share their cached data. - </para> - </sect1> - - <sect1> - <title>Supported Operating Systems</title> - <para> - ISC <acronym>BIND</acronym> 9 compiles and runs on a large - number - of Unix-like operating system and on NT-derived versions of - Microsoft Windows such as Windows 2000 and Windows XP. For an - up-to-date - list of supported systems, see the README file in the top level - directory - of the BIND 9 source distribution. - </para> - </sect1> - </chapter> - - <chapter id="Bv9ARM.ch03"> - <title>Name Server Configuration</title> - <para> - In this section we provide some suggested configurations along - with guidelines for their use. We suggest reasonable values for - certain option settings. - </para> - - <sect1 id="sample_configuration"> - <title>Sample Configurations</title> - <sect2> - <title>A Caching-only Name Server</title> - <para> - The following sample configuration is appropriate for a caching-only - name server for use by clients internal to a corporation. All - queries - from outside clients are refused using the <command>allow-query</command> - option. Alternatively, the same effect could be achieved using - suitable - firewall rules. - </para> - -<programlisting> -// Two corporate subnets we wish to allow queries from. -acl corpnets { 192.168.4.0/24; 192.168.7.0/24; }; -options { - directory "/etc/namedb"; // Working directory - allow-query { corpnets; }; -}; -// Provide a reverse mapping for the loopback address 127.0.0.1 -zone "0.0.127.in-addr.arpa" { - type master; - file "localhost.rev"; - notify no; -}; -</programlisting> - - </sect2> - - <sect2> - <title>An Authoritative-only Name Server</title> - <para> - This sample configuration is for an authoritative-only server - that is the master server for "<filename>example.com</filename>" - and a slave for the subdomain "<filename>eng.example.com</filename>". - </para> - -<programlisting> -options { - directory "/etc/namedb"; // Working directory - allow-query-cache { none; }; // Do not allow access to cache - allow-query { any; }; // This is the default - recursion no; // Do not provide recursive service -}; - -// Provide a reverse mapping for the loopback address 127.0.0.1 -zone "0.0.127.in-addr.arpa" { - type master; - file "localhost.rev"; - notify no; -}; -// We are the master server for example.com -zone "example.com" { - type master; - file "example.com.db"; - // IP addresses of slave servers allowed to transfer example.com - allow-transfer { - 192.168.4.14; - 192.168.5.53; - }; -}; -// We are a slave server for eng.example.com -zone "eng.example.com" { - type slave; - file "eng.example.com.bk"; - // IP address of eng.example.com master server - masters { 192.168.4.12; }; -}; -</programlisting> - - </sect2> - </sect1> - - <sect1> - <title>Load Balancing</title> - <!-- - - Add explanation of why load balancing is fragile at best - - and completely pointless in the general case. - --> - - <para> - A primitive form of load balancing can be achieved in - the <acronym>DNS</acronym> by using multiple records - (such as multiple A records) for one name. - </para> - - <para> - For example, if you have three WWW servers with network addresses - of 10.0.0.1, 10.0.0.2 and 10.0.0.3, a set of records such as the - following means that clients will connect to each machine one third - of the time: - </para> - - <informaltable colsep="0" rowsep="0"> - <tgroup cols="5" colsep="0" rowsep="0" tgroupstyle="2Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="0.500in"/> - <colspec colname="3" colnum="3" colsep="0" colwidth="0.750in"/> - <colspec colname="4" colnum="4" colsep="0" colwidth="0.750in"/> - <colspec colname="5" colnum="5" colsep="0" colwidth="2.028in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - Name - </para> - </entry> - <entry colname="2"> - <para> - TTL - </para> - </entry> - <entry colname="3"> - <para> - CLASS - </para> - </entry> - <entry colname="4"> - <para> - TYPE - </para> - </entry> - <entry colname="5"> - <para> - Resource Record (RR) Data - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <literal>www</literal> - </para> - </entry> - <entry colname="2"> - <para> - <literal>600</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>IN</literal> - </para> - </entry> - <entry colname="4"> - <para> - <literal>A</literal> - </para> - </entry> - <entry colname="5"> - <para> - <literal>10.0.0.1</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para/> - </entry> - <entry colname="2"> - <para> - <literal>600</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>IN</literal> - </para> - </entry> - <entry colname="4"> - <para> - <literal>A</literal> - </para> - </entry> - <entry colname="5"> - <para> - <literal>10.0.0.2</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para/> - </entry> - <entry colname="2"> - <para> - <literal>600</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>IN</literal> - </para> - </entry> - <entry colname="4"> - <para> - <literal>A</literal> - </para> - </entry> - <entry colname="5"> - <para> - <literal>10.0.0.3</literal> - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - <para> - When a resolver queries for these records, <acronym>BIND</acronym> will rotate - them and respond to the query with the records in a different - order. In the example above, clients will randomly receive - records in the order 1, 2, 3; 2, 3, 1; and 3, 1, 2. Most clients - will use the first record returned and discard the rest. - </para> - <para> - For more detail on ordering responses, check the - <command>rrset-order</command> substatement in the - <command>options</command> statement, see - <xref endterm="rrset_ordering_title" linkend="rrset_ordering"/>. - </para> - - </sect1> - - <sect1> - <title>Name Server Operations</title> - - <sect2> - <title>Tools for Use With the Name Server Daemon</title> - <para> - This section describes several indispensable diagnostic, - administrative and monitoring tools available to the system - administrator for controlling and debugging the name server - daemon. - </para> - <sect3 id="diagnostic_tools"> - <title>Diagnostic Tools</title> - <para> - The <command>dig</command>, <command>host</command>, and - <command>nslookup</command> programs are all command - line tools - for manually querying name servers. They differ in style and - output format. - </para> - - <variablelist> - <varlistentry> - <term id="dig"><command>dig</command></term> - <listitem> - <para> - The domain information groper (<command>dig</command>) - is the most versatile and complete of these lookup tools. - It has two modes: simple interactive - mode for a single query, and batch mode which executes a - query for - each in a list of several query lines. All query options are - accessible - from the command line. - </para> - <cmdsynopsis label="Usage"> - <command>dig</command> - <arg>@<replaceable>server</replaceable></arg> - <arg choice="plain"><replaceable>domain</replaceable></arg> - <arg><replaceable>query-type</replaceable></arg> - <arg><replaceable>query-class</replaceable></arg> - <arg>+<replaceable>query-option</replaceable></arg> - <arg>-<replaceable>dig-option</replaceable></arg> - <arg>%<replaceable>comment</replaceable></arg> - </cmdsynopsis> - <para> - The usual simple use of dig will take the form - </para> - <simpara> - <command>dig @server domain query-type query-class</command> - </simpara> - <para> - For more information and a list of available commands and - options, see the <command>dig</command> man - page. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>host</command></term> - <listitem> - <para> - The <command>host</command> utility emphasizes - simplicity - and ease of use. By default, it converts - between host names and Internet addresses, but its - functionality - can be extended with the use of options. - </para> - <cmdsynopsis label="Usage"> - <command>host</command> - <arg>-aCdlnrsTwv</arg> - <arg>-c <replaceable>class</replaceable></arg> - <arg>-N <replaceable>ndots</replaceable></arg> - <arg>-t <replaceable>type</replaceable></arg> - <arg>-W <replaceable>timeout</replaceable></arg> - <arg>-R <replaceable>retries</replaceable></arg> - <arg>-m <replaceable>flag</replaceable></arg> - <arg>-4</arg> - <arg>-6</arg> - <arg choice="plain"><replaceable>hostname</replaceable></arg> - <arg><replaceable>server</replaceable></arg> - </cmdsynopsis> - <para> - For more information and a list of available commands and - options, see the <command>host</command> man - page. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>nslookup</command></term> - <listitem> - <para><command>nslookup</command> - has two modes: interactive and - non-interactive. Interactive mode allows the user to - query name servers for information about various - hosts and domains or to print a list of hosts in a - domain. Non-interactive mode is used to print just - the name and requested information for a host or - domain. - </para> - <cmdsynopsis label="Usage"> - <command>nslookup</command> - <arg rep="repeat">-option</arg> - <group> - <arg><replaceable>host-to-find</replaceable></arg> - <arg>- <arg>server</arg></arg> - </group> - </cmdsynopsis> - <para> - Interactive mode is entered when no arguments are given (the - default name server will be used) or when the first argument - is a - hyphen (`-') and the second argument is the host name or - Internet address - of a name server. - </para> - <para> - Non-interactive mode is used when the name or Internet - address - of the host to be looked up is given as the first argument. - The - optional second argument specifies the host name or address - of a name server. - </para> - <para> - Due to its arcane user interface and frequently inconsistent - behavior, we do not recommend the use of <command>nslookup</command>. - Use <command>dig</command> instead. - </para> - </listitem> - - </varlistentry> - </variablelist> - </sect3> - - <sect3 id="admin_tools"> - <title>Administrative Tools</title> - <para> - Administrative tools play an integral part in the management - of a server. - </para> - <variablelist> - <varlistentry id="named-checkconf" xreflabel="Named Configuration Checking application"> - - <term><command>named-checkconf</command></term> - <listitem> - <para> - The <command>named-checkconf</command> program - checks the syntax of a <filename>named.conf</filename> file. - </para> - <cmdsynopsis label="Usage"> - <command>named-checkconf</command> - <arg>-jvz</arg> - <arg>-t <replaceable>directory</replaceable></arg> - <arg><replaceable>filename</replaceable></arg> - </cmdsynopsis> - </listitem> - </varlistentry> - <varlistentry id="named-checkzone" xreflabel="Zone Checking application"> - - <term><command>named-checkzone</command></term> - <listitem> - <para> - The <command>named-checkzone</command> program - checks a master file for - syntax and consistency. - </para> - <cmdsynopsis label="Usage"> - <command>named-checkzone</command> - <arg>-djqvD</arg> - <arg>-c <replaceable>class</replaceable></arg> - <arg>-o <replaceable>output</replaceable></arg> - <arg>-t <replaceable>directory</replaceable></arg> - <arg>-w <replaceable>directory</replaceable></arg> - <arg>-k <replaceable>(ignore|warn|fail)</replaceable></arg> - <arg>-n <replaceable>(ignore|warn|fail)</replaceable></arg> - <arg>-W <replaceable>(ignore|warn)</replaceable></arg> - <arg choice="plain"><replaceable>zone</replaceable></arg> - <arg><replaceable>filename</replaceable></arg> - </cmdsynopsis> - </listitem> - </varlistentry> - <varlistentry id="named-compilezone" xreflabel="Zone Compilation aplication"> - <term><command>named-compilezone</command></term> - <listitem> - <para> - Similar to <command>named-checkzone,</command> but - it always dumps the zone content to a specified file - (typically in a different format). - </para> - </listitem> - </varlistentry> - <varlistentry id="rndc" xreflabel="Remote Name Daemon Control application"> - - <term><command>rndc</command></term> - <listitem> - <para> - The remote name daemon control - (<command>rndc</command>) program allows the - system - administrator to control the operation of a name server. - Since <acronym>BIND</acronym> 9.2, <command>rndc</command> - supports all the commands of the BIND 8 <command>ndc</command> - utility except <command>ndc start</command> and - <command>ndc restart</command>, which were also - not supported in <command>ndc</command>'s - channel mode. - If you run <command>rndc</command> without any - options - it will display a usage message as follows: - </para> - <cmdsynopsis label="Usage"> - <command>rndc</command> - <arg>-c <replaceable>config</replaceable></arg> - <arg>-s <replaceable>server</replaceable></arg> - <arg>-p <replaceable>port</replaceable></arg> - <arg>-y <replaceable>key</replaceable></arg> - <arg choice="plain"><replaceable>command</replaceable></arg> - <arg rep="repeat"><replaceable>command</replaceable></arg> - </cmdsynopsis> - <para>The <command>command</command> - is one of the following: - </para> - - <variablelist> - - <varlistentry> - <term><userinput>reload</userinput></term> - <listitem> - <para> - Reload configuration file and zones. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>reload <replaceable>zone</replaceable> - <optional><replaceable>class</replaceable> - <optional><replaceable>view</replaceable></optional></optional></userinput></term> - <listitem> - <para> - Reload the given zone. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>refresh <replaceable>zone</replaceable> - <optional><replaceable>class</replaceable> - <optional><replaceable>view</replaceable></optional></optional></userinput></term> - <listitem> - <para> - Schedule zone maintenance for the given zone. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>retransfer <replaceable>zone</replaceable> - - <optional><replaceable>class</replaceable> - <optional><replaceable>view</replaceable></optional></optional></userinput></term> - <listitem> - <para> - Retransfer the given zone from the master. - </para> - </listitem> - </varlistentry> - - <varlistentry> - - <term><userinput>freeze - <optional><replaceable>zone</replaceable> - <optional><replaceable>class</replaceable> - <optional><replaceable>view</replaceable></optional></optional></optional></userinput></term> - <listitem> - <para> - Suspend updates to a dynamic zone. If no zone is - specified, - then all zones are suspended. This allows manual - edits to be made to a zone normally updated by dynamic - update. It - also causes changes in the journal file to be synced - into the master - and the journal file to be removed. All dynamic - update attempts will - be refused while the zone is frozen. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>thaw - <optional><replaceable>zone</replaceable> - <optional><replaceable>class</replaceable> - <optional><replaceable>view</replaceable></optional></optional></optional></userinput></term> - <listitem> - <para> - Enable updates to a frozen dynamic zone. If no zone - is - specified, then all frozen zones are enabled. This - causes - the server to reload the zone from disk, and - re-enables dynamic updates - after the load has completed. After a zone is thawed, - dynamic updates - will no longer be refused. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>notify <replaceable>zone</replaceable> - <optional><replaceable>class</replaceable> - <optional><replaceable>view</replaceable></optional></optional></userinput></term> - <listitem> - <para> - Resend NOTIFY messages for the zone. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>reconfig</userinput></term> - <listitem> - <para> - Reload the configuration file and load new zones, - but do not reload existing zone files even if they - have changed. - This is faster than a full <command>reload</command> when there - is a large number of zones because it avoids the need - to examine the - modification times of the zones files. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>stats</userinput></term> - <listitem> - <para> - Write server statistics to the statistics file. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>querylog</userinput></term> - <listitem> - <para> - Toggle query logging. Query logging can also be enabled - by explicitly directing the <command>queries</command> - <command>category</command> to a - <command>channel</command> in the - <command>logging</command> section of - <filename>named.conf</filename> or by specifying - <command>querylog yes;</command> in the - <command>options</command> section of - <filename>named.conf</filename>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>dumpdb - <optional>-all|-cache|-zone</optional> - <optional><replaceable>view ...</replaceable></optional></userinput></term> - <listitem> - <para> - Dump the server's caches (default) and/or zones to - the - dump file for the specified views. If no view is - specified, all - views are dumped. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>stop <optional>-p</optional></userinput></term> - <listitem> - <para> - Stop the server, making sure any recent changes - made through dynamic update or IXFR are first saved to - the master files of the updated zones. - If -p is specified named's process id is returned. - This allows an external process to determine when named - had completed stopping. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>halt <optional>-p</optional></userinput></term> - <listitem> - <para> - Stop the server immediately. Recent changes - made through dynamic update or IXFR are not saved to - the master files, but will be rolled forward from the - journal files when the server is restarted. - If -p is specified named's process id is returned. - This allows an external process to determine when named - had completed halting. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>trace</userinput></term> - <listitem> - <para> - Increment the servers debugging level by one. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>trace <replaceable>level</replaceable></userinput></term> - <listitem> - <para> - Sets the server's debugging level to an explicit - value. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>notrace</userinput></term> - <listitem> - <para> - Sets the server's debugging level to 0. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>flush</userinput></term> - <listitem> - <para> - Flushes the server's cache. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>flushname</userinput> <replaceable>name</replaceable></term> - <listitem> - <para> - Flushes the given name from the server's cache. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>status</userinput></term> - <listitem> - <para> - Display status of the server. - Note that the number of zones includes the internal <command>bind/CH</command> zone - and the default <command>./IN</command> - hint zone if there is not an - explicit root zone configured. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><userinput>recursing</userinput></term> - <listitem> - <para> - Dump the list of queries named is currently recursing - on. - </para> - </listitem> - </varlistentry> - - </variablelist> - - <para> - A configuration file is required, since all - communication with the server is authenticated with - digital signatures that rely on a shared secret, and - there is no way to provide that secret other than with a - configuration file. The default location for the - <command>rndc</command> configuration file is - <filename>/etc/rndc.conf</filename>, but an - alternate - location can be specified with the <option>-c</option> - option. If the configuration file is not found, - <command>rndc</command> will also look in - <filename>/etc/rndc.key</filename> (or whatever - <varname>sysconfdir</varname> was defined when - the <acronym>BIND</acronym> build was - configured). - The <filename>rndc.key</filename> file is - generated by - running <command>rndc-confgen -a</command> as - described in - <xref linkend="controls_statement_definition_and_usage"/>. - </para> - - <para> - The format of the configuration file is similar to - that of <filename>named.conf</filename>, but - limited to - only four statements, the <command>options</command>, - <command>key</command>, <command>server</command> and - <command>include</command> - statements. These statements are what associate the - secret keys to the servers with which they are meant to - be shared. The order of statements is not - significant. - </para> - - <para> - The <command>options</command> statement has - three clauses: - <command>default-server</command>, <command>default-key</command>, - and <command>default-port</command>. - <command>default-server</command> takes a - host name or address argument and represents the server - that will - be contacted if no <option>-s</option> - option is provided on the command line. - <command>default-key</command> takes - the name of a key as its argument, as defined by a <command>key</command> statement. - <command>default-port</command> specifies the - port to which - <command>rndc</command> should connect if no - port is given on the command line or in a - <command>server</command> statement. - </para> - - <para> - The <command>key</command> statement defines a - key to be used - by <command>rndc</command> when authenticating - with - <command>named</command>. Its syntax is - identical to the - <command>key</command> statement in named.conf. - The keyword <userinput>key</userinput> is - followed by a key name, which must be a valid - domain name, though it need not actually be hierarchical; - thus, - a string like "<userinput>rndc_key</userinput>" is a valid - name. - The <command>key</command> statement has two - clauses: - <command>algorithm</command> and <command>secret</command>. - While the configuration parser will accept any string as the - argument - to algorithm, currently only the string "<userinput>hmac-md5</userinput>" - has any meaning. The secret is a base-64 encoded string - as specified in RFC 3548. - </para> - - <para> - The <command>server</command> statement - associates a key - defined using the <command>key</command> - statement with a server. - The keyword <userinput>server</userinput> is followed by a - host name or address. The <command>server</command> statement - has two clauses: <command>key</command> and <command>port</command>. - The <command>key</command> clause specifies the - name of the key - to be used when communicating with this server, and the - <command>port</command> clause can be used to - specify the port <command>rndc</command> should - connect - to on the server. - </para> - - <para> - A sample minimal configuration file is as follows: - </para> - -<programlisting> -key rndc_key { - algorithm "hmac-md5"; - secret "c3Ryb25nIGVub3VnaCBmb3IgYSBtYW4gYnV0IG1hZGUgZm9yIGEgd29tYW4K"; -}; -options { - default-server 127.0.0.1; - default-key rndc_key; -}; -</programlisting> - - <para> - This file, if installed as <filename>/etc/rndc.conf</filename>, - would allow the command: - </para> - - <para> - <prompt>$ </prompt><userinput>rndc reload</userinput> - </para> - - <para> - to connect to 127.0.0.1 port 953 and cause the name server - to reload, if a name server on the local machine were - running with - following controls statements: - </para> - -<programlisting> -controls { - inet 127.0.0.1 allow { localhost; } keys { rndc_key; }; -}; -</programlisting> - - <para> - and it had an identical key statement for - <literal>rndc_key</literal>. - </para> - - <para> - Running the <command>rndc-confgen</command> - program will - conveniently create a <filename>rndc.conf</filename> - file for you, and also display the - corresponding <command>controls</command> - statement that you need to - add to <filename>named.conf</filename>. - Alternatively, - you can run <command>rndc-confgen -a</command> - to set up - a <filename>rndc.key</filename> file and not - modify - <filename>named.conf</filename> at all. - </para> - - </listitem> - </varlistentry> - </variablelist> - - </sect3> - </sect2> - <sect2> - - <title>Signals</title> - <para> - Certain UNIX signals cause the name server to take specific - actions, as described in the following table. These signals can - be sent using the <command>kill</command> command. - </para> - <informaltable frame="all"> - <tgroup cols="2"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.125in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="4.000in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para><command>SIGHUP</command></para> - </entry> - <entry colname="2"> - <para> - Causes the server to read <filename>named.conf</filename> and - reload the database. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>SIGTERM</command></para> - </entry> - <entry colname="2"> - <para> - Causes the server to clean up and exit. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>SIGINT</command></para> - </entry> - <entry colname="2"> - <para> - Causes the server to clean up and exit. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - </sect2> - </sect1> - </chapter> - - <chapter id="Bv9ARM.ch04"> - <title>Advanced DNS Features</title> - - <sect1 id="notify"> - - <title>Notify</title> - <para> - <acronym>DNS</acronym> NOTIFY is a mechanism that allows master - servers to notify their slave servers of changes to a zone's data. In - response to a <command>NOTIFY</command> from a master server, the - slave will check to see that its version of the zone is the - current version and, if not, initiate a zone transfer. - </para> - - <para> - For more information about <acronym>DNS</acronym> - <command>NOTIFY</command>, see the description of the - <command>notify</command> option in <xref linkend="boolean_options"/> and - the description of the zone option <command>also-notify</command> in - <xref linkend="zone_transfers"/>. The <command>NOTIFY</command> - protocol is specified in RFC 1996. - </para> - - <note> - As a slave zone can also be a master to other slaves, named, - by default, sends <command>NOTIFY</command> messages for every zone - it loads. Specifying <command>notify master-only;</command> will - cause named to only send <command>NOTIFY</command> for master - zones that it loads. - </note> - - </sect1> - - <sect1 id="dynamic_update"> - <title>Dynamic Update</title> - - <para> - Dynamic Update is a method for adding, replacing or deleting - records in a master server by sending it a special form of DNS - messages. The format and meaning of these messages is specified - in RFC 2136. - </para> - - <para> - Dynamic update is enabled by - including an <command>allow-update</command> or - <command>update-policy</command> clause in the - <command>zone</command> statement. - </para> - - <para> - Updating of secure zones (zones using DNSSEC) follows - RFC 3007: RRSIG and NSEC records affected by updates are automatically - regenerated by the server using an online zone key. - Update authorization is based - on transaction signatures and an explicit server policy. - </para> - - <sect2 id="journal"> - <title>The journal file</title> - - <para> - All changes made to a zone using dynamic update are stored - in the zone's journal file. This file is automatically created - by the server when the first dynamic update takes place. - The name of the journal file is formed by appending the extension - <filename>.jnl</filename> to the name of the - corresponding zone - file unless specifically overridden. The journal file is in a - binary format and should not be edited manually. - </para> - - <para> - The server will also occasionally write ("dump") - the complete contents of the updated zone to its zone file. - This is not done immediately after - each dynamic update, because that would be too slow when a large - zone is updated frequently. Instead, the dump is delayed by - up to 15 minutes, allowing additional updates to take place. - </para> - - <para> - When a server is restarted after a shutdown or crash, it will replay - the journal file to incorporate into the zone any updates that - took - place after the last zone dump. - </para> - - <para> - Changes that result from incoming incremental zone transfers are - also - journalled in a similar way. - </para> - - <para> - The zone files of dynamic zones cannot normally be edited by - hand because they are not guaranteed to contain the most recent - dynamic changes — those are only in the journal file. - The only way to ensure that the zone file of a dynamic zone - is up to date is to run <command>rndc stop</command>. - </para> - - <para> - If you have to make changes to a dynamic zone - manually, the following procedure will work: Disable dynamic updates - to the zone using - <command>rndc freeze <replaceable>zone</replaceable></command>. - This will also remove the zone's <filename>.jnl</filename> file - and update the master file. Edit the zone file. Run - <command>rndc thaw <replaceable>zone</replaceable></command> - to reload the changed zone and re-enable dynamic updates. - </para> - - </sect2> - - </sect1> - - <sect1 id="incremental_zone_transfers"> - <title>Incremental Zone Transfers (IXFR)</title> - - <para> - The incremental zone transfer (IXFR) protocol is a way for - slave servers to transfer only changed data, instead of having to - transfer the entire zone. The IXFR protocol is specified in RFC - 1995. See <xref linkend="proposed_standards"/>. - </para> - - <para> - When acting as a master, <acronym>BIND</acronym> 9 - supports IXFR for those zones - where the necessary change history information is available. These - include master zones maintained by dynamic update and slave zones - whose data was obtained by IXFR. For manually maintained master - zones, and for slave zones obtained by performing a full zone - transfer (AXFR), IXFR is supported only if the option - <command>ixfr-from-differences</command> is set - to <userinput>yes</userinput>. - </para> - - <para> - When acting as a slave, <acronym>BIND</acronym> 9 will - attempt to use IXFR unless - it is explicitly disabled. For more information about disabling - IXFR, see the description of the <command>request-ixfr</command> clause - of the <command>server</command> statement. - </para> - </sect1> - - <sect1> - <title>Split DNS</title> - <para> - Setting up different views, or visibility, of the DNS space to - internal and external resolvers is usually referred to as a - <emphasis>Split DNS</emphasis> setup. There are several - reasons an organization would want to set up its DNS this way. - </para> - <para> - One common reason for setting up a DNS system this way is - to hide "internal" DNS information from "external" clients on the - Internet. There is some debate as to whether or not this is actually - useful. - Internal DNS information leaks out in many ways (via email headers, - for example) and most savvy "attackers" can find the information - they need using other means. - However, since listing addresses of internal servers that - external clients cannot possibly reach can result in - connection delays and other annoyances, an organization may - choose to use a Split DNS to present a consistent view of itself - to the outside world. - </para> - <para> - Another common reason for setting up a Split DNS system is - to allow internal networks that are behind filters or in RFC 1918 - space (reserved IP space, as documented in RFC 1918) to resolve DNS - on the Internet. Split DNS can also be used to allow mail from outside - back in to the internal network. - </para> - <sect2> - <title>Example split DNS setup</title> - <para> - Let's say a company named <emphasis>Example, Inc.</emphasis> - (<literal>example.com</literal>) - has several corporate sites that have an internal network with - reserved - Internet Protocol (IP) space and an external demilitarized zone (DMZ), - or "outside" section of a network, that is available to the public. - </para> - <para> - <emphasis>Example, Inc.</emphasis> wants its internal clients - to be able to resolve external hostnames and to exchange mail with - people on the outside. The company also wants its internal resolvers - to have access to certain internal-only zones that are not available - at all outside of the internal network. - </para> - <para> - In order to accomplish this, the company will set up two sets - of name servers. One set will be on the inside network (in the - reserved - IP space) and the other set will be on bastion hosts, which are - "proxy" - hosts that can talk to both sides of its network, in the DMZ. - </para> - <para> - The internal servers will be configured to forward all queries, - except queries for <filename>site1.internal</filename>, <filename>site2.internal</filename>, <filename>site1.example.com</filename>, - and <filename>site2.example.com</filename>, to the servers - in the - DMZ. These internal servers will have complete sets of information - for <filename>site1.example.com</filename>, <filename>site2.example.com</filename>,<emphasis/> <filename>site1.internal</filename>, - and <filename>site2.internal</filename>. - </para> - <para> - To protect the <filename>site1.internal</filename> and <filename>site2.internal</filename> domains, - the internal name servers must be configured to disallow all queries - to these domains from any external hosts, including the bastion - hosts. - </para> - <para> - The external servers, which are on the bastion hosts, will - be configured to serve the "public" version of the <filename>site1</filename> and <filename>site2.example.com</filename> zones. - This could include things such as the host records for public servers - (<filename>www.example.com</filename> and <filename>ftp.example.com</filename>), - and mail exchange (MX) records (<filename>a.mx.example.com</filename> and <filename>b.mx.example.com</filename>). - </para> - <para> - In addition, the public <filename>site1</filename> and <filename>site2.example.com</filename> zones - should have special MX records that contain wildcard (`*') records - pointing to the bastion hosts. This is needed because external mail - servers do not have any other way of looking up how to deliver mail - to those internal hosts. With the wildcard records, the mail will - be delivered to the bastion host, which can then forward it on to - internal hosts. - </para> - <para> - Here's an example of a wildcard MX record: - </para> - <programlisting>* IN MX 10 external1.example.com.</programlisting> - <para> - Now that they accept mail on behalf of anything in the internal - network, the bastion hosts will need to know how to deliver mail - to internal hosts. In order for this to work properly, the resolvers - on - the bastion hosts will need to be configured to point to the internal - name servers for DNS resolution. - </para> - <para> - Queries for internal hostnames will be answered by the internal - servers, and queries for external hostnames will be forwarded back - out to the DNS servers on the bastion hosts. - </para> - <para> - In order for all this to work properly, internal clients will - need to be configured to query <emphasis>only</emphasis> the internal - name servers for DNS queries. This could also be enforced via - selective - filtering on the network. - </para> - <para> - If everything has been set properly, <emphasis>Example, Inc.</emphasis>'s - internal clients will now be able to: - </para> - <itemizedlist> - <listitem> - <simpara> - Look up any hostnames in the <literal>site1</literal> - and - <literal>site2.example.com</literal> zones. - </simpara> - </listitem> - <listitem> - <simpara> - Look up any hostnames in the <literal>site1.internal</literal> and - <literal>site2.internal</literal> domains. - </simpara> - </listitem> - <listitem> - <simpara>Look up any hostnames on the Internet.</simpara> - </listitem> - <listitem> - <simpara>Exchange mail with both internal and external people.</simpara> - </listitem> - </itemizedlist> - <para> - Hosts on the Internet will be able to: - </para> - <itemizedlist> - <listitem> - <simpara> - Look up any hostnames in the <literal>site1</literal> - and - <literal>site2.example.com</literal> zones. - </simpara> - </listitem> - <listitem> - <simpara> - Exchange mail with anyone in the <literal>site1</literal> and - <literal>site2.example.com</literal> zones. - </simpara> - </listitem> - </itemizedlist> - - <para> - Here is an example configuration for the setup we just - described above. Note that this is only configuration information; - for information on how to configure your zone files, see <xref linkend="sample_configuration"/>. - </para> - - <para> - Internal DNS server config: - </para> - -<programlisting> - -acl internals { 172.16.72.0/24; 192.168.1.0/24; }; - -acl externals { <varname>bastion-ips-go-here</varname>; }; - -options { - ... - ... - forward only; - forwarders { // forward to external servers - <varname>bastion-ips-go-here</varname>; - }; - allow-transfer { none; }; // sample allow-transfer (no one) - allow-query { internals; externals; }; // restrict query access - allow-recursion { internals; }; // restrict recursion - ... - ... -}; - -zone "site1.example.com" { // sample master zone - type master; - file "m/site1.example.com"; - forwarders { }; // do normal iterative - // resolution (do not forward) - allow-query { internals; externals; }; - allow-transfer { internals; }; -}; - -zone "site2.example.com" { // sample slave zone - type slave; - file "s/site2.example.com"; - masters { 172.16.72.3; }; - forwarders { }; - allow-query { internals; externals; }; - allow-transfer { internals; }; -}; - -zone "site1.internal" { - type master; - file "m/site1.internal"; - forwarders { }; - allow-query { internals; }; - allow-transfer { internals; } -}; - -zone "site2.internal" { - type slave; - file "s/site2.internal"; - masters { 172.16.72.3; }; - forwarders { }; - allow-query { internals }; - allow-transfer { internals; } -}; -</programlisting> - - <para> - External (bastion host) DNS server config: - </para> - -<programlisting> -acl internals { 172.16.72.0/24; 192.168.1.0/24; }; - -acl externals { bastion-ips-go-here; }; - -options { - ... - ... - allow-transfer { none; }; // sample allow-transfer (no one) - allow-query { any; }; // default query access - allow-query-cache { internals; externals; }; // restrict cache access - allow-recursion { internals; externals; }; // restrict recursion - ... - ... -}; - -zone "site1.example.com" { // sample slave zone - type master; - file "m/site1.foo.com"; - allow-transfer { internals; externals; }; -}; - -zone "site2.example.com" { - type slave; - file "s/site2.foo.com"; - masters { another_bastion_host_maybe; }; - allow-transfer { internals; externals; } -}; -</programlisting> - - <para> - In the <filename>resolv.conf</filename> (or equivalent) on - the bastion host(s): - </para> - -<programlisting> -search ... -nameserver 172.16.72.2 -nameserver 172.16.72.3 -nameserver 172.16.72.4 -</programlisting> - - </sect2> - </sect1> - <sect1 id="tsig"> - <title>TSIG</title> - <para> - This is a short guide to setting up Transaction SIGnatures - (TSIG) based transaction security in <acronym>BIND</acronym>. It describes changes - to the configuration file as well as what changes are required for - different features, including the process of creating transaction - keys and using transaction signatures with <acronym>BIND</acronym>. - </para> - <para> - <acronym>BIND</acronym> primarily supports TSIG for server - to server communication. - This includes zone transfer, notify, and recursive query messages. - Resolvers based on newer versions of <acronym>BIND</acronym> 8 have limited support - for TSIG. - </para> - - <para> - TSIG can also be useful for dynamic update. A primary - server for a dynamic zone should control access to the dynamic - update service, but IP-based access control is insufficient. - The cryptographic access control provided by TSIG - is far superior. The <command>nsupdate</command> - program supports TSIG via the <option>-k</option> and - <option>-y</option> command line options or inline by use - of the <command>key</command>. - </para> - - <sect2> - <title>Generate Shared Keys for Each Pair of Hosts</title> - <para> - A shared secret is generated to be shared between <emphasis>host1</emphasis> and <emphasis>host2</emphasis>. - An arbitrary key name is chosen: "host1-host2.". The key name must - be the same on both hosts. - </para> - <sect3> - <title>Automatic Generation</title> - <para> - The following command will generate a 128-bit (16 byte) HMAC-MD5 - key as described above. Longer keys are better, but shorter keys - are easier to read. Note that the maximum key length is 512 bits; - keys longer than that will be digested with MD5 to produce a - 128-bit key. - </para> - <para> - <userinput>dnssec-keygen -a hmac-md5 -b 128 -n HOST host1-host2.</userinput> - </para> - <para> - The key is in the file <filename>Khost1-host2.+157+00000.private</filename>. - Nothing directly uses this file, but the base-64 encoded string - following "<literal>Key:</literal>" - can be extracted from the file and used as a shared secret: - </para> - <programlisting>Key: La/E5CjG9O+os1jq0a2jdA==</programlisting> - <para> - The string "<literal>La/E5CjG9O+os1jq0a2jdA==</literal>" can - be used as the shared secret. - </para> - </sect3> - <sect3> - <title>Manual Generation</title> - <para> - The shared secret is simply a random sequence of bits, encoded - in base-64. Most ASCII strings are valid base-64 strings (assuming - the length is a multiple of 4 and only valid characters are used), - so the shared secret can be manually generated. - </para> - <para> - Also, a known string can be run through <command>mmencode</command> or - a similar program to generate base-64 encoded data. - </para> - </sect3> - </sect2> - <sect2> - <title>Copying the Shared Secret to Both Machines</title> - <para> - This is beyond the scope of DNS. A secure transport mechanism - should be used. This could be secure FTP, ssh, telephone, etc. - </para> - </sect2> - <sect2> - <title>Informing the Servers of the Key's Existence</title> - <para> - Imagine <emphasis>host1</emphasis> and <emphasis>host 2</emphasis> - are - both servers. The following is added to each server's <filename>named.conf</filename> file: - </para> - -<programlisting> -key host1-host2. { - algorithm hmac-md5; - secret "La/E5CjG9O+os1jq0a2jdA=="; -}; -</programlisting> - - <para> - The algorithm, hmac-md5, is the only one supported by <acronym>BIND</acronym>. - The secret is the one generated above. Since this is a secret, it - is recommended that either <filename>named.conf</filename> be non-world - readable, or the key directive be added to a non-world readable - file that is included by - <filename>named.conf</filename>. - </para> - <para> - At this point, the key is recognized. This means that if the - server receives a message signed by this key, it can verify the - signature. If the signature is successfully verified, the - response is signed by the same key. - </para> - </sect2> - - <sect2> - <title>Instructing the Server to Use the Key</title> - <para> - Since keys are shared between two hosts only, the server must - be told when keys are to be used. The following is added to the <filename>named.conf</filename> file - for <emphasis>host1</emphasis>, if the IP address of <emphasis>host2</emphasis> is - 10.1.2.3: - </para> - -<programlisting> -server 10.1.2.3 { - keys { host1-host2. ;}; -}; -</programlisting> - - <para> - Multiple keys may be present, but only the first is used. - This directive does not contain any secrets, so it may be in a - world-readable - file. - </para> - <para> - If <emphasis>host1</emphasis> sends a message that is a request - to that address, the message will be signed with the specified key. <emphasis>host1</emphasis> will - expect any responses to signed messages to be signed with the same - key. - </para> - <para> - A similar statement must be present in <emphasis>host2</emphasis>'s - configuration file (with <emphasis>host1</emphasis>'s address) for <emphasis>host2</emphasis> to - sign request messages to <emphasis>host1</emphasis>. - </para> - </sect2> - <sect2> - <title>TSIG Key Based Access Control</title> - <para> - <acronym>BIND</acronym> allows IP addresses and ranges - to be specified in ACL - definitions and - <command>allow-{ query | transfer | update }</command> - directives. - This has been extended to allow TSIG keys also. The above key would - be denoted <command>key host1-host2.</command> - </para> - <para> - An example of an allow-update directive would be: - </para> - -<programlisting> -allow-update { key host1-host2. ;}; -</programlisting> - - <para> - This allows dynamic updates to succeed only if the request - was signed by a key named - "<command>host1-host2.</command>". - </para> - <para> - You may want to read about the more - powerful <command>update-policy</command> statement in <xref linkend="dynamic_update_policies"/>. - </para> - - </sect2> - <sect2> - <title>Errors</title> - - <para> - The processing of TSIG signed messages can result in - several errors. If a signed message is sent to a non-TSIG aware - server, a FORMERR (format error) will be returned, since the server will not - understand the record. This is a result of misconfiguration, - since the server must be explicitly configured to send a TSIG - signed message to a specific server. - </para> - - <para> - If a TSIG aware server receives a message signed by an - unknown key, the response will be unsigned with the TSIG - extended error code set to BADKEY. If a TSIG aware server - receives a message with a signature that does not validate, the - response will be unsigned with the TSIG extended error code set - to BADSIG. If a TSIG aware server receives a message with a time - outside of the allowed range, the response will be signed with - the TSIG extended error code set to BADTIME, and the time values - will be adjusted so that the response can be successfully - verified. In any of these cases, the message's rcode (response code) is set to - NOTAUTH (not authenticated). - </para> - - </sect2> - </sect1> - <sect1> - <title>TKEY</title> - - <para><command>TKEY</command> - is a mechanism for automatically generating a shared secret - between two hosts. There are several "modes" of - <command>TKEY</command> that specify how the key is generated - or assigned. <acronym>BIND</acronym> 9 implements only one of - these modes, the Diffie-Hellman key exchange. Both hosts are - required to have a Diffie-Hellman KEY record (although this - record is not required to be present in a zone). The - <command>TKEY</command> process must use signed messages, - signed either by TSIG or SIG(0). The result of - <command>TKEY</command> is a shared secret that can be used to - sign messages with TSIG. <command>TKEY</command> can also be - used to delete shared secrets that it had previously - generated. - </para> - - <para> - The <command>TKEY</command> process is initiated by a - client - or server by sending a signed <command>TKEY</command> - query - (including any appropriate KEYs) to a TKEY-aware server. The - server response, if it indicates success, will contain a - <command>TKEY</command> record and any appropriate keys. - After - this exchange, both participants have enough information to - determine the shared secret; the exact process depends on the - <command>TKEY</command> mode. When using the - Diffie-Hellman - <command>TKEY</command> mode, Diffie-Hellman keys are - exchanged, - and the shared secret is derived by both participants. - </para> - - </sect1> - <sect1> - <title>SIG(0)</title> - - <para> - <acronym>BIND</acronym> 9 partially supports DNSSEC SIG(0) - transaction signatures as specified in RFC 2535 and RFC2931. - SIG(0) - uses public/private keys to authenticate messages. Access control - is performed in the same manner as TSIG keys; privileges can be - granted or denied based on the key name. - </para> - - <para> - When a SIG(0) signed message is received, it will only be - verified if the key is known and trusted by the server; the server - will not attempt to locate and/or validate the key. - </para> - - <para> - SIG(0) signing of multiple-message TCP streams is not - supported. - </para> - - <para> - The only tool shipped with <acronym>BIND</acronym> 9 that - generates SIG(0) signed messages is <command>nsupdate</command>. - </para> - - </sect1> - <sect1 id="DNSSEC"> - <title>DNSSEC</title> - - <para> - Cryptographic authentication of DNS information is possible - through the DNS Security (<emphasis>DNSSEC-bis</emphasis>) extensions, - defined in RFC 4033, RFC 4034, and RFC 4035. - This section describes the creation and use of DNSSEC signed zones. - </para> - - <para> - In order to set up a DNSSEC secure zone, there are a series - of steps which must be followed. <acronym>BIND</acronym> - 9 ships - with several tools - that are used in this process, which are explained in more detail - below. In all cases, the <option>-h</option> option prints a - full list of parameters. Note that the DNSSEC tools require the - keyset files to be in the working directory or the - directory specified by the <option>-d</option> option, and - that the tools shipped with BIND 9.2.x and earlier are not compatible - with the current ones. - </para> - - <para> - There must also be communication with the administrators of - the parent and/or child zone to transmit keys. A zone's security - status must be indicated by the parent zone for a DNSSEC capable - resolver to trust its data. This is done through the presence - or absence of a <literal>DS</literal> record at the - delegation - point. - </para> - - <para> - For other servers to trust data in this zone, they must - either be statically configured with this zone's zone key or the - zone key of another zone above this one in the DNS tree. - </para> - - <sect2> - <title>Generating Keys</title> - - <para> - The <command>dnssec-keygen</command> program is used to - generate keys. - </para> - - <para> - A secure zone must contain one or more zone keys. The - zone keys will sign all other records in the zone, as well as - the zone keys of any secure delegated zones. Zone keys must - have the same name as the zone, a name type of - <command>ZONE</command>, and must be usable for - authentication. - It is recommended that zone keys use a cryptographic algorithm - designated as "mandatory to implement" by the IETF; currently - the only one is RSASHA1. - </para> - - <para> - The following command will generate a 768-bit RSASHA1 key for - the <filename>child.example</filename> zone: - </para> - - <para> - <userinput>dnssec-keygen -a RSASHA1 -b 768 -n ZONE child.example.</userinput> - </para> - - <para> - Two output files will be produced: - <filename>Kchild.example.+005+12345.key</filename> and - <filename>Kchild.example.+005+12345.private</filename> - (where - 12345 is an example of a key tag). The key filenames contain - the key name (<filename>child.example.</filename>), - algorithm (3 - is DSA, 1 is RSAMD5, 5 is RSASHA1, etc.), and the key tag (12345 in - this case). - The private key (in the <filename>.private</filename> - file) is - used to generate signatures, and the public key (in the - <filename>.key</filename> file) is used for signature - verification. - </para> - - <para> - To generate another key with the same properties (but with - a different key tag), repeat the above command. - </para> - - <para> - The public keys should be inserted into the zone file by - including the <filename>.key</filename> files using - <command>$INCLUDE</command> statements. - </para> - - </sect2> - <sect2> - <title>Signing the Zone</title> - - <para> - The <command>dnssec-signzone</command> program is used - to - sign a zone. - </para> - - <para> - Any <filename>keyset</filename> files corresponding - to secure subzones should be present. The zone signer will - generate <literal>NSEC</literal> and <literal>RRSIG</literal> - records for the zone, as well as <literal>DS</literal> - for - the child zones if <literal>'-d'</literal> is specified. - If <literal>'-d'</literal> is not specified, then - DS RRsets for - the secure child zones need to be added manually. - </para> - - <para> - The following command signs the zone, assuming it is in a - file called <filename>zone.child.example</filename>. By - default, all zone keys which have an available private key are - used to generate signatures. - </para> - - <para> - <userinput>dnssec-signzone -o child.example zone.child.example</userinput> - </para> - - <para> - One output file is produced: - <filename>zone.child.example.signed</filename>. This - file - should be referenced by <filename>named.conf</filename> - as the - input file for the zone. - </para> - - <para><command>dnssec-signzone</command> - will also produce a keyset and dsset files and optionally a - dlvset file. These are used to provide the parent zone - administrators with the <literal>DNSKEYs</literal> (or their - corresponding <literal>DS</literal> records) that are the - secure entry point to the zone. - </para> - - </sect2> - - <sect2> - <title>Configuring Servers</title> - - <para> - To enable <command>named</command> to respond appropriately - to DNS requests from DNSSEC aware clients, - <command>dnssec-enable</command> must be set to yes. - </para> - - <para> - To enable <command>named</command> to validate answers from - other servers both <command>dnssec-enable</command> and - <command>dnssec-validation</command> must be set and some - <command>trusted-keys</command> must be configured - into <filename>named.conf</filename>. - </para> - - <para> - <command>trusted-keys</command> are copies of DNSKEY RRs - for zones that are used to form the first link in the - cryptographic chain of trust. All keys listed in - <command>trusted-keys</command> (and corresponding zones) - are deemed to exist and only the listed keys will be used - to validated the DNSKEY RRset that they are from. - </para> - - <para> - <command>trusted-keys</command> are described in more detail - later in this document. - </para> - - <para> - Unlike <acronym>BIND</acronym> 8, <acronym>BIND</acronym> - 9 does not verify signatures on load, so zone keys for - authoritative zones do not need to be specified in the - configuration file. - </para> - - <para> - After DNSSEC gets established, a typical DNSSEC configuration - will look something like the following. It has a one or - more public keys for the root. This allows answers from - outside the organization to be validated. It will also - have several keys for parts of the namespace the organization - controls. These are here to ensure that named is immune - to compromises in the DNSSEC components of the security - of parent zones. - </para> - -<programlisting> -trusted-keys { - - /* Root Key */ -"." 257 3 3 "BNY4wrWM1nCfJ+CXd0rVXyYmobt7sEEfK3clRbGaTwSJxrGkxJWoZu6I7PzJu/ - E9gx4UC1zGAHlXKdE4zYIpRhaBKnvcC2U9mZhkdUpd1Vso/HAdjNe8LmMlnzY3 - zy2Xy4klWOADTPzSv9eamj8V18PHGjBLaVtYvk/ln5ZApjYghf+6fElrmLkdaz - MQ2OCnACR817DF4BBa7UR/beDHyp5iWTXWSi6XmoJLbG9Scqc7l70KDqlvXR3M - /lUUVRbkeg1IPJSidmK3ZyCllh4XSKbje/45SKucHgnwU5jefMtq66gKodQj+M - iA21AfUVe7u99WzTLzY3qlxDhxYQQ20FQ97S+LKUTpQcq27R7AT3/V5hRQxScI - Nqwcz4jYqZD2fQdgxbcDTClU0CRBdiieyLMNzXG3"; - -/* Key for our organization's forward zone */ -example.com. 257 3 5 "AwEAAaxPMcR2x0HbQV4WeZB6oEDX+r0QM65KbhTjrW1ZaARmPhEZZe - 3Y9ifgEuq7vZ/zGZUdEGNWy+JZzus0lUptwgjGwhUS1558Hb4JKUbb - OTcM8pwXlj0EiX3oDFVmjHO444gLkBO UKUf/mC7HvfwYH/Be22GnC - lrinKJp1Og4ywzO9WglMk7jbfW33gUKvirTHr25GL7STQUzBb5Usxt - 8lgnyTUHs1t3JwCY5hKZ6CqFxmAVZP20igTixin/1LcrgX/KMEGd/b - iuvF4qJCyduieHukuY3H4XMAcR+xia2 nIUPvm/oyWR8BW/hWdzOvn - SCThlHf3xiYleDbt/o1OTQ09A0="; - -/* Key for our reverse zone. */ -2.0.192.IN-ADDRPA.NET. 257 3 5 "AQOnS4xn/IgOUpBPJ3bogzwcxOdNax071L18QqZnQQQA - VVr+iLhGTnNGp3HoWQLUIzKrJVZ3zggy3WwNT6kZo6c0 - tszYqbtvchmgQC8CzKojM/W16i6MG/ea fGU3siaOdS0 - yOI6BgPsw+YZdzlYMaIJGf4M4dyoKIhzdZyQ2bYQrjyQ - 4LB0lC7aOnsMyYKHHYeRv PxjIQXmdqgOJGq+vsevG06 - zW+1xgYJh9rCIfnm1GX/KMgxLPG2vXTD/RnLX+D3T3UL - 7HJYHJhAZD5L59VvjSPsZJHeDCUyWYrvPZesZDIRvhDD - 52SKvbheeTJUm6EhkzytNN2SN96QRk8j/iI8ib"; -}; - -options { - ... - dnssec-enable yes; - dnssec-validation yes; -}; -</programlisting> - - <note> - None of the keys listed in this example are valid. In particular, - the root key is not valid. - </note> - - </sect2> - - </sect1> - <sect1> - <title>IPv6 Support in <acronym>BIND</acronym> 9</title> - - <para> - <acronym>BIND</acronym> 9 fully supports all currently - defined forms of IPv6 - name to address and address to name lookups. It will also use - IPv6 addresses to make queries when running on an IPv6 capable - system. - </para> - - <para> - For forward lookups, <acronym>BIND</acronym> 9 supports - only AAAA records. RFC 3363 deprecated the use of A6 records, - and client-side support for A6 records was accordingly removed - from <acronym>BIND</acronym> 9. - However, authoritative <acronym>BIND</acronym> 9 name servers still - load zone files containing A6 records correctly, answer queries - for A6 records, and accept zone transfer for a zone containing A6 - records. - </para> - - <para> - For IPv6 reverse lookups, <acronym>BIND</acronym> 9 supports - the traditional "nibble" format used in the - <emphasis>ip6.arpa</emphasis> domain, as well as the older, deprecated - <emphasis>ip6.int</emphasis> domain. - Older versions of <acronym>BIND</acronym> 9 - supported the "binary label" (also known as "bitstring") format, - but support of binary labels has been completely removed per - RFC 3363. - Many applications in <acronym>BIND</acronym> 9 do not understand - the binary label format at all any more, and will return an - error if given. - In particular, an authoritative <acronym>BIND</acronym> 9 - name server will not load a zone file containing binary labels. - </para> - - <para> - For an overview of the format and structure of IPv6 addresses, - see <xref linkend="ipv6addresses"/>. - </para> - - <sect2> - <title>Address Lookups Using AAAA Records</title> - - <para> - The IPv6 AAAA record is a parallel to the IPv4 A record, - and, unlike the deprecated A6 record, specifies the entire - IPv6 address in a single record. For example, - </para> - -<programlisting> -$ORIGIN example.com. -host 3600 IN AAAA 2001:db8::1 -</programlisting> - - <para> - Use of IPv4-in-IPv6 mapped addresses is not recommended. - If a host has an IPv4 address, use an A record, not - a AAAA, with <literal>::ffff:192.168.42.1</literal> as - the address. - </para> - </sect2> - <sect2> - <title>Address to Name Lookups Using Nibble Format</title> - - <para> - When looking up an address in nibble format, the address - components are simply reversed, just as in IPv4, and - <literal>ip6.arpa.</literal> is appended to the - resulting name. - For example, the following would provide reverse name lookup for - a host with address - <literal>2001:db8::1</literal>. - </para> - -<programlisting> -$ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 14400 IN PTR host.example.com. -</programlisting> - - </sect2> - </sect1> - </chapter> - - <chapter id="Bv9ARM.ch05"> - <title>The <acronym>BIND</acronym> 9 Lightweight Resolver</title> - <sect1> - <title>The Lightweight Resolver Library</title> - <para> - Traditionally applications have been linked with a stub resolver - library that sends recursive DNS queries to a local caching name - server. - </para> - <para> - IPv6 once introduced new complexity into the resolution process, - such as following A6 chains and DNAME records, and simultaneous - lookup of IPv4 and IPv6 addresses. Though most of the complexity was - then removed, these are hard or impossible - to implement in a traditional stub resolver. - </para> - <para> - <acronym>BIND</acronym> 9 therefore can also provide resolution - services to local clients - using a combination of a lightweight resolver library and a resolver - daemon process running on the local host. These communicate using - a simple UDP-based protocol, the "lightweight resolver protocol" - that is distinct from and simpler than the full DNS protocol. - </para> - </sect1> - <sect1 id="lwresd"> - <title>Running a Resolver Daemon</title> - - <para> - To use the lightweight resolver interface, the system must - run the resolver daemon <command>lwresd</command> or a - local - name server configured with a <command>lwres</command> - statement. - </para> - - <para> - By default, applications using the lightweight resolver library will - make - UDP requests to the IPv4 loopback address (127.0.0.1) on port 921. - The - address can be overridden by <command>lwserver</command> - lines in - <filename>/etc/resolv.conf</filename>. - </para> - - <para> - The daemon currently only looks in the DNS, but in the future - it may use other sources such as <filename>/etc/hosts</filename>, - NIS, etc. - </para> - - <para> - The <command>lwresd</command> daemon is essentially a - caching-only name server that responds to requests using the - lightweight - resolver protocol rather than the DNS protocol. Because it needs - to run on each host, it is designed to require no or minimal - configuration. - Unless configured otherwise, it uses the name servers listed on - <command>nameserver</command> lines in <filename>/etc/resolv.conf</filename> - as forwarders, but is also capable of doing the resolution - autonomously if - none are specified. - </para> - <para> - The <command>lwresd</command> daemon may also be - configured with a - <filename>named.conf</filename> style configuration file, - in - <filename>/etc/lwresd.conf</filename> by default. A name - server may also - be configured to act as a lightweight resolver daemon using the - <command>lwres</command> statement in <filename>named.conf</filename>. - </para> - - </sect1> - </chapter> - - <chapter id="Bv9ARM.ch06"> - <title><acronym>BIND</acronym> 9 Configuration Reference</title> - - <para> - <acronym>BIND</acronym> 9 configuration is broadly similar - to <acronym>BIND</acronym> 8; however, there are a few new - areas - of configuration, such as views. <acronym>BIND</acronym> - 8 configuration files should work with few alterations in <acronym>BIND</acronym> - 9, although more complex configurations should be reviewed to check - if they can be more efficiently implemented using the new features - found in <acronym>BIND</acronym> 9. - </para> - - <para> - <acronym>BIND</acronym> 4 configuration files can be - converted to the new format - using the shell script - <filename>contrib/named-bootconf/named-bootconf.sh</filename>. - </para> - <sect1 id="configuration_file_elements"> - <title>Configuration File Elements</title> - <para> - Following is a list of elements used throughout the <acronym>BIND</acronym> configuration - file documentation: - </para> - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="2Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.855in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="3.770in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>acl_name</varname> - </para> - </entry> - <entry colname="2"> - <para> - The name of an <varname>address_match_list</varname> as - defined by the <command>acl</command> statement. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>address_match_list</varname> - </para> - </entry> - <entry colname="2"> - <para> - A list of one or more - <varname>ip_addr</varname>, - <varname>ip_prefix</varname>, <varname>key_id</varname>, - or <varname>acl_name</varname> elements, see - <xref linkend="address_match_lists"/>. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>masters_list</varname> - </para> - </entry> - <entry colname="2"> - <para> - A named list of one or more <varname>ip_addr</varname> - with optional <varname>key_id</varname> and/or - <varname>ip_port</varname>. - A <varname>masters_list</varname> may include other - <varname>masters_lists</varname>. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>domain_name</varname> - </para> - </entry> - <entry colname="2"> - <para> - A quoted string which will be used as - a DNS name, for example "<literal>my.test.domain</literal>". - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>dotted_decimal</varname> - </para> - </entry> - <entry colname="2"> - <para> - One to four integers valued 0 through - 255 separated by dots (`.'), such as <command>123</command>, - <command>45.67</command> or <command>89.123.45.67</command>. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>ip4_addr</varname> - </para> - </entry> - <entry colname="2"> - <para> - An IPv4 address with exactly four elements - in <varname>dotted_decimal</varname> notation. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>ip6_addr</varname> - </para> - </entry> - <entry colname="2"> - <para> - An IPv6 address, such as <command>2001:db8::1234</command>. - IPv6 scoped addresses that have ambiguity on their scope - zones must be - disambiguated by an appropriate zone ID with the percent - character - (`%') as delimiter. - It is strongly recommended to use string zone names rather - than - numeric identifiers, in order to be robust against system - configuration changes. - However, since there is no standard mapping for such names - and - identifier values, currently only interface names as link - identifiers - are supported, assuming one-to-one mapping between - interfaces and links. - For example, a link-local address <command>fe80::1</command> on the - link attached to the interface <command>ne0</command> - can be specified as <command>fe80::1%ne0</command>. - Note that on most systems link-local addresses always have - the - ambiguity, and need to be disambiguated. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>ip_addr</varname> - </para> - </entry> - <entry colname="2"> - <para> - An <varname>ip4_addr</varname> or <varname>ip6_addr</varname>. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>ip_port</varname> - </para> - </entry> - <entry colname="2"> - <para> - An IP port <varname>number</varname>. - The <varname>number</varname> is limited to 0 - through 65535, with values - below 1024 typically restricted to use by processes running - as root. - In some cases, an asterisk (`*') character can be used as a - placeholder to - select a random high-numbered port. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>ip_prefix</varname> - </para> - </entry> - <entry colname="2"> - <para> - An IP network specified as an <varname>ip_addr</varname>, - followed by a slash (`/') and then the number of bits in the - netmask. - Trailing zeros in a <varname>ip_addr</varname> - may omitted. - For example, <command>127/8</command> is the - network <command>127.0.0.0</command> with - netmask <command>255.0.0.0</command> and <command>1.2.3.0/28</command> is - network <command>1.2.3.0</command> with netmask <command>255.255.255.240</command>. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>key_id</varname> - </para> - </entry> - <entry colname="2"> - <para> - A <varname>domain_name</varname> representing - the name of a shared key, to be used for transaction - security. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>key_list</varname> - </para> - </entry> - <entry colname="2"> - <para> - A list of one or more - <varname>key_id</varname>s, - separated by semicolons and ending with a semicolon. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>number</varname> - </para> - </entry> - <entry colname="2"> - <para> - A non-negative 32-bit integer - (i.e., a number between 0 and 4294967295, inclusive). - Its acceptable value might further - be limited by the context in which it is used. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>path_name</varname> - </para> - </entry> - <entry colname="2"> - <para> - A quoted string which will be used as - a pathname, such as <filename>zones/master/my.test.domain</filename>. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>size_spec</varname> - </para> - </entry> - <entry colname="2"> - <para> - A number, the word <userinput>unlimited</userinput>, - or the word <userinput>default</userinput>. - </para> - <para> - An <varname>unlimited</varname> <varname>size_spec</varname> requests unlimited - use, or the maximum available amount. A <varname>default size_spec</varname> uses - the limit that was in force when the server was started. - </para> - <para> - A <varname>number</varname> can optionally be - followed by a scaling factor: - <userinput>K</userinput> or <userinput>k</userinput> - for kilobytes, - <userinput>M</userinput> or <userinput>m</userinput> - for megabytes, and - <userinput>G</userinput> or <userinput>g</userinput> for gigabytes, - which scale by 1024, 1024*1024, and 1024*1024*1024 - respectively. - </para> - <para> - The value must be representable as a 64-bit unsigned integer - (0 to 18446744073709551615, inclusive). - Using <varname>unlimited</varname> is the best - way - to safely set a really large number. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>yes_or_no</varname> - </para> - </entry> - <entry colname="2"> - <para> - Either <userinput>yes</userinput> or <userinput>no</userinput>. - The words <userinput>true</userinput> and <userinput>false</userinput> are - also accepted, as are the numbers <userinput>1</userinput> - and <userinput>0</userinput>. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>dialup_option</varname> - </para> - </entry> - <entry colname="2"> - <para> - One of <userinput>yes</userinput>, - <userinput>no</userinput>, <userinput>notify</userinput>, - <userinput>notify-passive</userinput>, <userinput>refresh</userinput> or - <userinput>passive</userinput>. - When used in a zone, <userinput>notify-passive</userinput>, - <userinput>refresh</userinput>, and <userinput>passive</userinput> - are restricted to slave and stub zones. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - <sect2 id="address_match_lists"> - <title>Address Match Lists</title> - <sect3> - <title>Syntax</title> - -<programlisting><varname>address_match_list</varname> = address_match_list_element ; - <optional> address_match_list_element; ... </optional> -<varname>address_match_list_element</varname> = <optional> ! </optional> (ip_address <optional>/length</optional> | - key key_id | acl_name | { address_match_list } ) -</programlisting> - - </sect3> - <sect3> - <title>Definition and Usage</title> - <para> - Address match lists are primarily used to determine access - control for various server operations. They are also used in - the <command>listen-on</command> and <command>sortlist</command> - statements. The elements - which constitute an address match list can be any of the - following: - </para> - <itemizedlist> - <listitem> - <simpara>an IP address (IPv4 or IPv6)</simpara> - </listitem> - <listitem> - <simpara>an IP prefix (in `/' notation)</simpara> - </listitem> - <listitem> - <simpara> - a key ID, as defined by the <command>key</command> - statement - </simpara> - </listitem> - <listitem> - <simpara>the name of an address match list defined with - the <command>acl</command> statement - </simpara> - </listitem> - <listitem> - <simpara>a nested address match list enclosed in braces</simpara> - </listitem> - </itemizedlist> - - <para> - Elements can be negated with a leading exclamation mark (`!'), - and the match list names "any", "none", "localhost", and - "localnets" - are predefined. More information on those names can be found in - the description of the acl statement. - </para> - - <para> - The addition of the key clause made the name of this syntactic - element something of a misnomer, since security keys can be used - to validate access without regard to a host or network address. - Nonetheless, - the term "address match list" is still used throughout the - documentation. - </para> - - <para> - When a given IP address or prefix is compared to an address - match list, the list is traversed in order until an element - matches. - The interpretation of a match depends on whether the list is being - used - for access control, defining listen-on ports, or in a sortlist, - and whether the element was negated. - </para> - - <para> - When used as an access control list, a non-negated match - allows access and a negated match denies access. If - there is no match, access is denied. The clauses - <command>allow-notify</command>, - <command>allow-query</command>, - <command>allow-query-cache</command>, - <command>allow-transfer</command>, - <command>allow-update</command>, - <command>allow-update-forwarding</command>, and - <command>blackhole</command> all use address match - lists. Similarly, the listen-on option will cause the - server to not accept queries on any of the machine's - addresses which do not match the list. - </para> - - <para> - Because of the first-match aspect of the algorithm, an element - that defines a subset of another element in the list should come - before the broader element, regardless of whether either is - negated. For - example, in - <command>1.2.3/24; ! 1.2.3.13;</command> the 1.2.3.13 - element is - completely useless because the algorithm will match any lookup for - 1.2.3.13 to the 1.2.3/24 element. - Using <command>! 1.2.3.13; 1.2.3/24</command> fixes - that problem by having 1.2.3.13 blocked by the negation but all - other 1.2.3.* hosts fall through. - </para> - </sect3> - </sect2> - - <sect2> - <title>Comment Syntax</title> - - <para> - The <acronym>BIND</acronym> 9 comment syntax allows for - comments to appear - anywhere that whitespace may appear in a <acronym>BIND</acronym> configuration - file. To appeal to programmers of all kinds, they can be written - in the C, C++, or shell/perl style. - </para> - - <sect3> - <title>Syntax</title> - - <para> - <programlisting>/* This is a <acronym>BIND</acronym> comment as in C */</programlisting> - <programlisting>// This is a <acronym>BIND</acronym> comment as in C++</programlisting> - <programlisting># This is a <acronym>BIND</acronym> comment as in common UNIX shells and perl</programlisting> - </para> - </sect3> - <sect3> - <title>Definition and Usage</title> - <para> - Comments may appear anywhere that whitespace may appear in - a <acronym>BIND</acronym> configuration file. - </para> - <para> - C-style comments start with the two characters /* (slash, - star) and end with */ (star, slash). Because they are completely - delimited with these characters, they can be used to comment only - a portion of a line or to span multiple lines. - </para> - <para> - C-style comments cannot be nested. For example, the following - is not valid because the entire comment ends with the first */: - </para> - <para> - -<programlisting>/* This is the start of a comment. - This is still part of the comment. -/* This is an incorrect attempt at nesting a comment. */ - This is no longer in any comment. */ -</programlisting> - - </para> - - <para> - C++-style comments start with the two characters // (slash, - slash) and continue to the end of the physical line. They cannot - be continued across multiple physical lines; to have one logical - comment span multiple lines, each line must use the // pair. - </para> - <para> - For example: - </para> - <para> - -<programlisting>// This is the start of a comment. The next line -// is a new comment, even though it is logically -// part of the previous comment. -</programlisting> - - </para> - <para> - Shell-style (or perl-style, if you prefer) comments start - with the character <literal>#</literal> (number sign) - and continue to the end of the - physical line, as in C++ comments. - </para> - <para> - For example: - </para> - - <para> - -<programlisting># This is the start of a comment. The next line -# is a new comment, even though it is logically -# part of the previous comment. -</programlisting> - - </para> - - <warning> - <para> - You cannot use the semicolon (`;') character - to start a comment such as you would in a zone file. The - semicolon indicates the end of a configuration - statement. - </para> - </warning> - </sect3> - </sect2> - </sect1> - - <sect1 id="Configuration_File_Grammar"> - <title>Configuration File Grammar</title> - - <para> - A <acronym>BIND</acronym> 9 configuration consists of - statements and comments. - Statements end with a semicolon. Statements and comments are the - only elements that can appear without enclosing braces. Many - statements contain a block of sub-statements, which are also - terminated with a semicolon. - </para> - - <para> - The following statements are supported: - </para> - - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="2Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.336in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="3.778in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para><command>acl</command></para> - </entry> - <entry colname="2"> - <para> - defines a named IP address - matching list, for access control and other uses. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>controls</command></para> - </entry> - <entry colname="2"> - <para> - declares control channels to be used - by the <command>rndc</command> utility. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>include</command></para> - </entry> - <entry colname="2"> - <para> - includes a file. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>key</command></para> - </entry> - <entry colname="2"> - <para> - specifies key information for use in - authentication and authorization using TSIG. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>logging</command></para> - </entry> - <entry colname="2"> - <para> - specifies what the server logs, and where - the log messages are sent. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>lwres</command></para> - </entry> - <entry colname="2"> - <para> - configures <command>named</command> to - also act as a light-weight resolver daemon (<command>lwresd</command>). - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>masters</command></para> - </entry> - <entry colname="2"> - <para> - defines a named masters list for - inclusion in stub and slave zone masters clauses. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>options</command></para> - </entry> - <entry colname="2"> - <para> - controls global server configuration - options and sets defaults for other statements. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>server</command></para> - </entry> - <entry colname="2"> - <para> - sets certain configuration options on - a per-server basis. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>trusted-keys</command></para> - </entry> - <entry colname="2"> - <para> - defines trusted DNSSEC keys. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>view</command></para> - </entry> - <entry colname="2"> - <para> - defines a view. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>zone</command></para> - </entry> - <entry colname="2"> - <para> - defines a zone. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - - <para> - The <command>logging</command> and - <command>options</command> statements may only occur once - per - configuration. - </para> - - <sect2> - <title><command>acl</command> Statement Grammar</title> - -<programlisting><command>acl</command> acl-name { - address_match_list -}; -</programlisting> - - </sect2> - <sect2 id="acl"> - <title><command>acl</command> Statement Definition and - Usage</title> - - <para> - The <command>acl</command> statement assigns a symbolic - name to an address match list. It gets its name from a primary - use of address match lists: Access Control Lists (ACLs). - </para> - - <para> - Note that an address match list's name must be defined - with <command>acl</command> before it can be used - elsewhere; no - forward references are allowed. - </para> - - <para> - The following ACLs are built-in: - </para> - - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.130in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="4.000in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para><command>any</command></para> - </entry> - <entry colname="2"> - <para> - Matches all hosts. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>none</command></para> - </entry> - <entry colname="2"> - <para> - Matches no hosts. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>localhost</command></para> - </entry> - <entry colname="2"> - <para> - Matches the IPv4 and IPv6 addresses of all network - interfaces on the system. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>localnets</command></para> - </entry> - <entry colname="2"> - <para> - Matches any host on an IPv4 or IPv6 network - for which the system has an interface. - Some systems do not provide a way to determine the prefix - lengths of - local IPv6 addresses. - In such a case, <command>localnets</command> - only matches the local - IPv6 addresses, just like <command>localhost</command>. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - - </sect2> - <sect2> - <title><command>controls</command> Statement Grammar</title> - -<programlisting><command>controls</command> { - [ inet ( ip_addr | * ) [ port ip_port ] allow { <replaceable> address_match_list </replaceable> } - keys { <replaceable>key_list</replaceable> }; ] - [ inet ...; ] - [ unix <replaceable>path</replaceable> perm <replaceable>number</replaceable> owner <replaceable>number</replaceable> group <replaceable>number</replaceable> keys { <replaceable>key_list</replaceable> }; ] - [ unix ...; ] -}; -</programlisting> - - </sect2> - - <sect2 id="controls_statement_definition_and_usage"> - <title><command>controls</command> Statement Definition and - Usage</title> - - <para> - The <command>controls</command> statement declares control - channels to be used by system administrators to control the - operation of the name server. These control channels are - used by the <command>rndc</command> utility to send - commands to and retrieve non-DNS results from a name server. - </para> - - <para> - An <command>inet</command> control channel is a TCP socket - listening at the specified <command>ip_port</command> on the - specified <command>ip_addr</command>, which can be an IPv4 or IPv6 - address. An <command>ip_addr</command> of <literal>*</literal> (asterisk) is - interpreted as the IPv4 wildcard address; connections will be - accepted on any of the system's IPv4 addresses. - To listen on the IPv6 wildcard address, - use an <command>ip_addr</command> of <literal>::</literal>. - If you will only use <command>rndc</command> on the local host, - using the loopback address (<literal>127.0.0.1</literal> - or <literal>::1</literal>) is recommended for maximum security. - </para> - - <para> - If no port is specified, port 953 is used. The asterisk - "<literal>*</literal>" cannot be used for <command>ip_port</command>. - </para> - - <para> - The ability to issue commands over the control channel is - restricted by the <command>allow</command> and - <command>keys</command> clauses. - Connections to the control channel are permitted based on the - <command>address_match_list</command>. This is for simple - IP address based filtering only; any <command>key_id</command> - elements of the <command>address_match_list</command> - are ignored. - </para> - - <para> - A <command>unix</command> control channel is a UNIX domain - socket listening at the specified path in the file system. - Access to the socket is specified by the <command>perm</command>, - <command>owner</command> and <command>group</command> clauses. - Note on some platforms (SunOS and Solaris) the permissions - (<command>perm</command>) are applied to the parent directory - as the permissions on the socket itself are ignored. - </para> - - <para> - The primary authorization mechanism of the command - channel is the <command>key_list</command>, which - contains a list of <command>key_id</command>s. - Each <command>key_id</command> in the <command>key_list</command> - is authorized to execute commands over the control channel. - See <xref linkend="rndc"/> in <xref linkend="admin_tools"/>) - for information about configuring keys in <command>rndc</command>. - </para> - - <para> - If no <command>controls</command> statement is present, - <command>named</command> will set up a default - control channel listening on the loopback address 127.0.0.1 - and its IPv6 counterpart ::1. - In this case, and also when the <command>controls</command> statement - is present but does not have a <command>keys</command> clause, - <command>named</command> will attempt to load the command channel key - from the file <filename>rndc.key</filename> in - <filename>/etc</filename> (or whatever <varname>sysconfdir</varname> - was specified as when <acronym>BIND</acronym> was built). - To create a <filename>rndc.key</filename> file, run - <userinput>rndc-confgen -a</userinput>. - </para> - - <para> - The <filename>rndc.key</filename> feature was created to - ease the transition of systems from <acronym>BIND</acronym> 8, - which did not have digital signatures on its command channel - messages and thus did not have a <command>keys</command> clause. - - It makes it possible to use an existing <acronym>BIND</acronym> 8 - configuration file in <acronym>BIND</acronym> 9 unchanged, - and still have <command>rndc</command> work the same way - <command>ndc</command> worked in BIND 8, simply by executing the - command <userinput>rndc-confgen -a</userinput> after BIND 9 is - installed. - </para> - - <para> - Since the <filename>rndc.key</filename> feature - is only intended to allow the backward-compatible usage of - <acronym>BIND</acronym> 8 configuration files, this - feature does not - have a high degree of configurability. You cannot easily change - the key name or the size of the secret, so you should make a - <filename>rndc.conf</filename> with your own key if you - wish to change - those things. The <filename>rndc.key</filename> file - also has its - permissions set such that only the owner of the file (the user that - <command>named</command> is running as) can access it. - If you - desire greater flexibility in allowing other users to access - <command>rndc</command> commands, then you need to create - a - <filename>rndc.conf</filename> file and make it group - readable by a group - that contains the users who should have access. - </para> - - <para> - To disable the command channel, use an empty - <command>controls</command> statement: - <command>controls { };</command>. - </para> - - </sect2> - <sect2> - <title><command>include</command> Statement Grammar</title> - <programlisting>include <replaceable>filename</replaceable>;</programlisting> - </sect2> - <sect2> - <title><command>include</command> Statement Definition and - Usage</title> - - <para> - The <command>include</command> statement inserts the - specified file at the point where the <command>include</command> - statement is encountered. The <command>include</command> - statement facilitates the administration of configuration - files - by permitting the reading or writing of some things but not - others. For example, the statement could include private keys - that are readable only by the name server. - </para> - - </sect2> - <sect2> - <title><command>key</command> Statement Grammar</title> - -<programlisting>key <replaceable>key_id</replaceable> { - algorithm <replaceable>string</replaceable>; - secret <replaceable>string</replaceable>; -}; -</programlisting> - - </sect2> - - <sect2> - <title><command>key</command> Statement Definition and Usage</title> - - <para> - The <command>key</command> statement defines a shared - secret key for use with TSIG (see <xref linkend="tsig"/>) - or the command channel - (see <xref linkend="controls_statement_definition_and_usage"/>). - </para> - - <para> - The <command>key</command> statement can occur at the - top level - of the configuration file or inside a <command>view</command> - statement. Keys defined in top-level <command>key</command> - statements can be used in all views. Keys intended for use in - a <command>controls</command> statement - (see <xref linkend="controls_statement_definition_and_usage"/>) - must be defined at the top level. - </para> - - <para> - The <replaceable>key_id</replaceable>, also known as the - key name, is a domain name uniquely identifying the key. It can - be used in a <command>server</command> - statement to cause requests sent to that - server to be signed with this key, or in address match lists to - verify that incoming requests have been signed with a key - matching this name, algorithm, and secret. - </para> - - <para> - The <replaceable>algorithm_id</replaceable> is a string - that specifies a security/authentication algorithm. Named - supports <literal>hmac-md5</literal>, - <literal>hmac-sha1</literal>, <literal>hmac-sha224</literal>, - <literal>hmac-sha256</literal>, <literal>hmac-sha384</literal> - and <literal>hmac-sha512</literal> TSIG authentication. - Truncated hashes are supported by appending the minimum - number of required bits preceded by a dash, e.g. - <literal>hmac-sha1-80</literal>. The - <replaceable>secret_string</replaceable> is the secret - to be used by the algorithm, and is treated as a base-64 - encoded string. - </para> - - </sect2> - <sect2> - <title><command>logging</command> Statement Grammar</title> - -<programlisting><command>logging</command> { - [ <command>channel</command> <replaceable>channel_name</replaceable> { - ( <command>file</command> <replaceable>path name</replaceable> - [ <command>versions</command> ( <replaceable>number</replaceable> | <command>unlimited</command> ) ] - [ <command>size</command> <replaceable>size spec</replaceable> ] - | <command>syslog</command> <replaceable>syslog_facility</replaceable> - | <command>stderr</command> - | <command>null</command> ); - [ <command>severity</command> (<option>critical</option> | <option>error</option> | <option>warning</option> | <option>notice</option> | - <option>info</option> | <option>debug</option> [ <replaceable>level</replaceable> ] | <option>dynamic</option> ); ] - [ <command>print-category</command> <option>yes</option> or <option>no</option>; ] - [ <command>print-severity</command> <option>yes</option> or <option>no</option>; ] - [ <command>print-time</command> <option>yes</option> or <option>no</option>; ] - }; ] - [ <command>category</command> <replaceable>category_name</replaceable> { - <replaceable>channel_name</replaceable> ; [ <replaceable>channel_name</replaceable> ; ... ] - }; ] - ... -}; -</programlisting> - - </sect2> - - <sect2> - <title><command>logging</command> Statement Definition and - Usage</title> - - <para> - The <command>logging</command> statement configures a - wide - variety of logging options for the name server. Its <command>channel</command> phrase - associates output methods, format options and severity levels with - a name that can then be used with the <command>category</command> phrase - to select how various classes of messages are logged. - </para> - <para> - Only one <command>logging</command> statement is used to - define - as many channels and categories as are wanted. If there is no <command>logging</command> statement, - the logging configuration will be: - </para> - -<programlisting>logging { - category default { default_syslog; default_debug; }; - category unmatched { null; }; -}; -</programlisting> - - <para> - In <acronym>BIND</acronym> 9, the logging configuration - is only established when - the entire configuration file has been parsed. In <acronym>BIND</acronym> 8, it was - established as soon as the <command>logging</command> - statement - was parsed. When the server is starting up, all logging messages - regarding syntax errors in the configuration file go to the default - channels, or to standard error if the "<option>-g</option>" option - was specified. - </para> - - <sect3> - <title>The <command>channel</command> Phrase</title> - - <para> - All log output goes to one or more <emphasis>channels</emphasis>; - you can make as many of them as you want. - </para> - - <para> - Every channel definition must include a destination clause that - says whether messages selected for the channel go to a file, to a - particular syslog facility, to the standard error stream, or are - discarded. It can optionally also limit the message severity level - that will be accepted by the channel (the default is - <command>info</command>), and whether to include a - <command>named</command>-generated time stamp, the - category name - and/or severity level (the default is not to include any). - </para> - - <para> - The <command>null</command> destination clause - causes all messages sent to the channel to be discarded; - in that case, other options for the channel are meaningless. - </para> - - <para> - The <command>file</command> destination clause directs - the channel - to a disk file. It can include limitations - both on how large the file is allowed to become, and how many - versions - of the file will be saved each time the file is opened. - </para> - - <para> - If you use the <command>versions</command> log file - option, then - <command>named</command> will retain that many backup - versions of the file by - renaming them when opening. For example, if you choose to keep - three old versions - of the file <filename>lamers.log</filename>, then just - before it is opened - <filename>lamers.log.1</filename> is renamed to - <filename>lamers.log.2</filename>, <filename>lamers.log.0</filename> is renamed - to <filename>lamers.log.1</filename>, and <filename>lamers.log</filename> is - renamed to <filename>lamers.log.0</filename>. - You can say <command>versions unlimited</command> to - not limit - the number of versions. - If a <command>size</command> option is associated with - the log file, - then renaming is only done when the file being opened exceeds the - indicated size. No backup versions are kept by default; any - existing - log file is simply appended. - </para> - - <para> - The <command>size</command> option for files is used - to limit log - growth. If the file ever exceeds the size, then <command>named</command> will - stop writing to the file unless it has a <command>versions</command> option - associated with it. If backup versions are kept, the files are - rolled as - described above and a new one begun. If there is no - <command>versions</command> option, no more data will - be written to the log - until some out-of-band mechanism removes or truncates the log to - less than the - maximum size. The default behavior is not to limit the size of - the - file. - </para> - - <para> - Example usage of the <command>size</command> and - <command>versions</command> options: - </para> - -<programlisting>channel an_example_channel { - file "example.log" versions 3 size 20m; - print-time yes; - print-category yes; -}; -</programlisting> - - <para> - The <command>syslog</command> destination clause - directs the - channel to the system log. Its argument is a - syslog facility as described in the <command>syslog</command> man - page. Known facilities are <command>kern</command>, <command>user</command>, - <command>mail</command>, <command>daemon</command>, <command>auth</command>, - <command>syslog</command>, <command>lpr</command>, <command>news</command>, - <command>uucp</command>, <command>cron</command>, <command>authpriv</command>, - <command>ftp</command>, <command>local0</command>, <command>local1</command>, - <command>local2</command>, <command>local3</command>, <command>local4</command>, - <command>local5</command>, <command>local6</command> and - <command>local7</command>, however not all facilities - are supported on - all operating systems. - How <command>syslog</command> will handle messages - sent to - this facility is described in the <command>syslog.conf</command> man - page. If you have a system which uses a very old version of <command>syslog</command> that - only uses two arguments to the <command>openlog()</command> function, - then this clause is silently ignored. - </para> - <para> - The <command>severity</command> clause works like <command>syslog</command>'s - "priorities", except that they can also be used if you are writing - straight to a file rather than using <command>syslog</command>. - Messages which are not at least of the severity level given will - not be selected for the channel; messages of higher severity - levels - will be accepted. - </para> - <para> - If you are using <command>syslog</command>, then the <command>syslog.conf</command> priorities - will also determine what eventually passes through. For example, - defining a channel facility and severity as <command>daemon</command> and <command>debug</command> but - only logging <command>daemon.warning</command> via <command>syslog.conf</command> will - cause messages of severity <command>info</command> and - <command>notice</command> to - be dropped. If the situation were reversed, with <command>named</command> writing - messages of only <command>warning</command> or higher, - then <command>syslogd</command> would - print all messages it received from the channel. - </para> - - <para> - The <command>stderr</command> destination clause - directs the - channel to the server's standard error stream. This is intended - for - use when the server is running as a foreground process, for - example - when debugging a configuration. - </para> - - <para> - The server can supply extensive debugging information when - it is in debugging mode. If the server's global debug level is - greater - than zero, then debugging mode will be active. The global debug - level is set either by starting the <command>named</command> server - with the <option>-d</option> flag followed by a positive integer, - or by running <command>rndc trace</command>. - The global debug level - can be set to zero, and debugging mode turned off, by running <command>rndc -notrace</command>. All debugging messages in the server have a debug - level, and higher debug levels give more detailed output. Channels - that specify a specific debug severity, for example: - </para> - -<programlisting>channel specific_debug_level { - file "foo"; - severity debug 3; -}; -</programlisting> - - <para> - will get debugging output of level 3 or less any time the - server is in debugging mode, regardless of the global debugging - level. Channels with <command>dynamic</command> - severity use the - server's global debug level to determine what messages to print. - </para> - <para> - If <command>print-time</command> has been turned on, - then - the date and time will be logged. <command>print-time</command> may - be specified for a <command>syslog</command> channel, - but is usually - pointless since <command>syslog</command> also prints - the date and - time. If <command>print-category</command> is - requested, then the - category of the message will be logged as well. Finally, if <command>print-severity</command> is - on, then the severity level of the message will be logged. The <command>print-</command> options may - be used in any combination, and will always be printed in the - following - order: time, category, severity. Here is an example where all - three <command>print-</command> options - are on: - </para> - - <para> - <computeroutput>28-Feb-2000 15:05:32.863 general: notice: running</computeroutput> - </para> - - <para> - There are four predefined channels that are used for - <command>named</command>'s default logging as follows. - How they are - used is described in <xref linkend="the_category_phrase"/>. - </para> - -<programlisting>channel default_syslog { - syslog daemon; // send to syslog's daemon - // facility - severity info; // only send priority info - // and higher -}; - -channel default_debug { - file "named.run"; // write to named.run in - // the working directory - // Note: stderr is used instead - // of "named.run" - // if the server is started - // with the '-f' option. - severity dynamic; // log at the server's - // current debug level -}; - -channel default_stderr { - stderr; // writes to stderr - severity info; // only send priority info - // and higher -}; - -channel null { - null; // toss anything sent to - // this channel -}; -</programlisting> - - <para> - The <command>default_debug</command> channel has the - special - property that it only produces output when the server's debug - level is - nonzero. It normally writes to a file called <filename>named.run</filename> - in the server's working directory. - </para> - - <para> - For security reasons, when the "<option>-u</option>" - command line option is used, the <filename>named.run</filename> file - is created only after <command>named</command> has - changed to the - new UID, and any debug output generated while <command>named</command> is - starting up and still running as root is discarded. If you need - to capture this output, you must run the server with the "<option>-g</option>" - option and redirect standard error to a file. - </para> - - <para> - Once a channel is defined, it cannot be redefined. Thus you - cannot alter the built-in channels directly, but you can modify - the default logging by pointing categories at channels you have - defined. - </para> - </sect3> - - <sect3 id="the_category_phrase"> - <title>The <command>category</command> Phrase</title> - - <para> - There are many categories, so you can send the logs you want - to see wherever you want, without seeing logs you don't want. If - you don't specify a list of channels for a category, then log - messages - in that category will be sent to the <command>default</command> category - instead. If you don't specify a default category, the following - "default default" is used: - </para> - -<programlisting>category default { default_syslog; default_debug; }; -</programlisting> - - <para> - As an example, let's say you want to log security events to - a file, but you also want keep the default logging behavior. You'd - specify the following: - </para> - -<programlisting>channel my_security_channel { - file "my_security_file"; - severity info; -}; -category security { - my_security_channel; - default_syslog; - default_debug; -};</programlisting> - - <para> - To discard all messages in a category, specify the <command>null</command> channel: - </para> - -<programlisting>category xfer-out { null; }; -category notify { null; }; -</programlisting> - - <para> - Following are the available categories and brief descriptions - of the types of log information they contain. More - categories may be added in future <acronym>BIND</acronym> releases. - </para> - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="3.350in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para><command>default</command></para> - </entry> - <entry colname="2"> - <para> - The default category defines the logging - options for those categories where no specific - configuration has been - defined. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>general</command></para> - </entry> - <entry colname="2"> - <para> - The catch-all. Many things still aren't - classified into categories, and they all end up here. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>database</command></para> - </entry> - <entry colname="2"> - <para> - Messages relating to the databases used - internally by the name server to store zone and cache - data. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>security</command></para> - </entry> - <entry colname="2"> - <para> - Approval and denial of requests. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>config</command></para> - </entry> - <entry colname="2"> - <para> - Configuration file parsing and processing. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>resolver</command></para> - </entry> - <entry colname="2"> - <para> - DNS resolution, such as the recursive - lookups performed on behalf of clients by a caching name - server. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>xfer-in</command></para> - </entry> - <entry colname="2"> - <para> - Zone transfers the server is receiving. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>xfer-out</command></para> - </entry> - <entry colname="2"> - <para> - Zone transfers the server is sending. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>notify</command></para> - </entry> - <entry colname="2"> - <para> - The NOTIFY protocol. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>client</command></para> - </entry> - <entry colname="2"> - <para> - Processing of client requests. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>unmatched</command></para> - </entry> - <entry colname="2"> - <para> - Messages that named was unable to determine the - class of or for which there was no matching <command>view</command>. - A one line summary is also logged to the <command>client</command> category. - This category is best sent to a file or stderr, by - default it is sent to - the <command>null</command> channel. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>network</command></para> - </entry> - <entry colname="2"> - <para> - Network operations. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>update</command></para> - </entry> - <entry colname="2"> - <para> - Dynamic updates. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>update-security</command></para> - </entry> - <entry colname="2"> - <para> - Approval and denial of update requests. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>queries</command></para> - </entry> - <entry colname="2"> - <para> - Specify where queries should be logged to. - </para> - <para> - At startup, specifying the category <command>queries</command> will also - enable query logging unless <command>querylog</command> option has been - specified. - </para> - <para> - The query log entry reports the client's IP address and - port number, and the - query name, class and type. It also reports whether the - Recursion Desired - flag was set (+ if set, - if not set), EDNS was in use - (E) or if the - query was signed (S). - </para> - <para> - <computeroutput>client 127.0.0.1#62536: query: www.example.com IN AAAA +SE</computeroutput> - </para> - <para> - <computeroutput>client ::1#62537: query: www.example.net IN AAAA -SE</computeroutput> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>dispatch</command></para> - </entry> - <entry colname="2"> - <para> - Dispatching of incoming packets to the - server modules where they are to be processed. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>dnssec</command></para> - </entry> - <entry colname="2"> - <para> - DNSSEC and TSIG protocol processing. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>lame-servers</command></para> - </entry> - <entry colname="2"> - <para> - Lame servers. These are misconfigurations - in remote servers, discovered by BIND 9 when trying to - query - those servers during resolution. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>delegation-only</command></para> - </entry> - <entry colname="2"> - <para> - Delegation only. Logs queries that have have - been forced to NXDOMAIN as the result of a - delegation-only zone or - a <command>delegation-only</command> in a - hint or stub zone declaration. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - </sect3> - </sect2> - - <sect2> - <title><command>lwres</command> Statement Grammar</title> - - <para> - This is the grammar of the <command>lwres</command> - statement in the <filename>named.conf</filename> file: - </para> - -<programlisting><command>lwres</command> { - <optional> listen-on { <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional> - <optional> view <replaceable>view_name</replaceable>; </optional> - <optional> search { <replaceable>domain_name</replaceable> ; <optional> <replaceable>domain_name</replaceable> ; ... </optional> }; </optional> - <optional> ndots <replaceable>number</replaceable>; </optional> -}; -</programlisting> - - </sect2> - <sect2> - <title><command>lwres</command> Statement Definition and Usage</title> - - <para> - The <command>lwres</command> statement configures the - name - server to also act as a lightweight resolver server. (See - <xref linkend="lwresd"/>.) There may be multiple - <command>lwres</command> statements configuring - lightweight resolver servers with different properties. - </para> - - <para> - The <command>listen-on</command> statement specifies a - list of - addresses (and ports) that this instance of a lightweight resolver - daemon - should accept requests on. If no port is specified, port 921 is - used. - If this statement is omitted, requests will be accepted on - 127.0.0.1, - port 921. - </para> - - <para> - The <command>view</command> statement binds this - instance of a - lightweight resolver daemon to a view in the DNS namespace, so that - the - response will be constructed in the same manner as a normal DNS - query - matching this view. If this statement is omitted, the default view - is - used, and if there is no default view, an error is triggered. - </para> - - <para> - The <command>search</command> statement is equivalent to - the - <command>search</command> statement in - <filename>/etc/resolv.conf</filename>. It provides a - list of domains - which are appended to relative names in queries. - </para> - - <para> - The <command>ndots</command> statement is equivalent to - the - <command>ndots</command> statement in - <filename>/etc/resolv.conf</filename>. It indicates the - minimum - number of dots in a relative domain name that should result in an - exact match lookup before search path elements are appended. - </para> - </sect2> - <sect2> - <title><command>masters</command> Statement Grammar</title> - -<programlisting> -<command>masters</command> <replaceable>name</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> { ( <replaceable>masters_list</replaceable> | <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> <optional>key <replaceable>key</replaceable></optional> ) ; <optional>...</optional> }; -</programlisting> - - </sect2> - - <sect2> - <title><command>masters</command> Statement Definition and - Usage</title> - <para><command>masters</command> - lists allow for a common set of masters to be easily used by - multiple stub and slave zones. - </para> - </sect2> - - <sect2> - <title><command>options</command> Statement Grammar</title> - - <para> - This is the grammar of the <command>options</command> - statement in the <filename>named.conf</filename> file: - </para> - -<programlisting>options { - <optional> version <replaceable>version_string</replaceable>; </optional> - <optional> hostname <replaceable>hostname_string</replaceable>; </optional> - <optional> server-id <replaceable>server_id_string</replaceable>; </optional> - <optional> directory <replaceable>path_name</replaceable>; </optional> - <optional> key-directory <replaceable>path_name</replaceable>; </optional> - <optional> named-xfer <replaceable>path_name</replaceable>; </optional> - <optional> tkey-domain <replaceable>domainname</replaceable>; </optional> - <optional> tkey-dhkey <replaceable>key_name</replaceable> <replaceable>key_tag</replaceable>; </optional> - <optional> cache-file <replaceable>path_name</replaceable>; </optional> - <optional> dump-file <replaceable>path_name</replaceable>; </optional> - <optional> memstatistics-file <replaceable>path_name</replaceable>; </optional> - <optional> pid-file <replaceable>path_name</replaceable>; </optional> - <optional> recursing-file <replaceable>path_name</replaceable>; </optional> - <optional> statistics-file <replaceable>path_name</replaceable>; </optional> - <optional> zone-statistics <replaceable>yes_or_no</replaceable>; </optional> - <optional> auth-nxdomain <replaceable>yes_or_no</replaceable>; </optional> - <optional> deallocate-on-exit <replaceable>yes_or_no</replaceable>; </optional> - <optional> dialup <replaceable>dialup_option</replaceable>; </optional> - <optional> fake-iquery <replaceable>yes_or_no</replaceable>; </optional> - <optional> fetch-glue <replaceable>yes_or_no</replaceable>; </optional> - <optional> flush-zones-on-shutdown <replaceable>yes_or_no</replaceable>; </optional> - <optional> has-old-clients <replaceable>yes_or_no</replaceable>; </optional> - <optional> host-statistics <replaceable>yes_or_no</replaceable>; </optional> - <optional> host-statistics-max <replaceable>number</replaceable>; </optional> - <optional> minimal-responses <replaceable>yes_or_no</replaceable>; </optional> - <optional> multiple-cnames <replaceable>yes_or_no</replaceable>; </optional> - <optional> notify <replaceable>yes_or_no</replaceable> | <replaceable>explicit</replaceable> | <replaceable>master-only</replaceable>; </optional> - <optional> recursion <replaceable>yes_or_no</replaceable>; </optional> - <optional> rfc2308-type1 <replaceable>yes_or_no</replaceable>; </optional> - <optional> use-id-pool <replaceable>yes_or_no</replaceable>; </optional> - <optional> maintain-ixfr-base <replaceable>yes_or_no</replaceable>; </optional> - <optional> dnssec-enable <replaceable>yes_or_no</replaceable>; </optional> - <optional> dnssec-validation <replaceable>yes_or_no</replaceable>; </optional> - <optional> dnssec-lookaside <replaceable>domain</replaceable> trust-anchor <replaceable>domain</replaceable>; </optional> - <optional> dnssec-must-be-secure <replaceable>domain yes_or_no</replaceable>; </optional> - <optional> dnssec-accept-expired <replaceable>yes_or_no</replaceable>; </optional> - <optional> forward ( <replaceable>only</replaceable> | <replaceable>first</replaceable> ); </optional> - <optional> forwarders { <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional> - <optional> dual-stack-servers <optional>port <replaceable>ip_port</replaceable></optional> { - ( <replaceable>domain_name</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> | - <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ) ; - ... }; </optional> - <optional> check-names ( <replaceable>master</replaceable> | <replaceable>slave</replaceable> | <replaceable>response</replaceable> ) - ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional> - <optional> check-mx ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional> - <optional> check-wildcard <replaceable>yes_or_no</replaceable>; </optional> - <optional> check-integrity <replaceable>yes_or_no</replaceable>; </optional> - <optional> check-mx-cname ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional> - <optional> check-srv-cname ( <replaceable>warn</replaceable> | <replaceable>fail</replaceable> | <replaceable>ignore</replaceable> ); </optional> - <optional> check-sibling <replaceable>yes_or_no</replaceable>; </optional> - <optional> allow-notify { <replaceable>address_match_list</replaceable> }; </optional> - <optional> allow-query { <replaceable>address_match_list</replaceable> }; </optional> - <optional> allow-query-cache { <replaceable>address_match_list</replaceable> }; </optional> - <optional> allow-transfer { <replaceable>address_match_list</replaceable> }; </optional> - <optional> allow-recursion { <replaceable>address_match_list</replaceable> }; </optional> - <optional> allow-update { <replaceable>address_match_list</replaceable> }; </optional> - <optional> allow-update-forwarding { <replaceable>address_match_list</replaceable> }; </optional> - <optional> update-check-ksk <replaceable>yes_or_no</replaceable>; </optional> - <optional> allow-v6-synthesis { <replaceable>address_match_list</replaceable> }; </optional> - <optional> blackhole { <replaceable>address_match_list</replaceable> }; </optional> - <optional> avoid-v4-udp-ports { <replaceable>port_list</replaceable> }; </optional> - <optional> avoid-v6-udp-ports { <replaceable>port_list</replaceable> }; </optional> - <optional> listen-on <optional> port <replaceable>ip_port</replaceable> </optional> { <replaceable>address_match_list</replaceable> }; </optional> - <optional> listen-on-v6 <optional> port <replaceable>ip_port</replaceable> </optional> { <replaceable>address_match_list</replaceable> }; </optional> - <optional> query-source ( ( <replaceable>ip4_addr</replaceable> | <replaceable>*</replaceable> ) - <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> | - <optional> address ( <replaceable>ip4_addr</replaceable> | <replaceable>*</replaceable> ) </optional> - <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> ) ; </optional> - <optional> query-source-v6 ( ( <replaceable>ip6_addr</replaceable> | <replaceable>*</replaceable> ) - <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> | - <optional> address ( <replaceable>ip6_addr</replaceable> | <replaceable>*</replaceable> ) </optional> - <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional> ) ; </optional> - <optional> max-transfer-time-in <replaceable>number</replaceable>; </optional> - <optional> max-transfer-time-out <replaceable>number</replaceable>; </optional> - <optional> max-transfer-idle-in <replaceable>number</replaceable>; </optional> - <optional> max-transfer-idle-out <replaceable>number</replaceable>; </optional> - <optional> tcp-clients <replaceable>number</replaceable>; </optional> - <optional> recursive-clients <replaceable>number</replaceable>; </optional> - <optional> serial-query-rate <replaceable>number</replaceable>; </optional> - <optional> serial-queries <replaceable>number</replaceable>; </optional> - <optional> tcp-listen-queue <replaceable>number</replaceable>; </optional> - <optional> transfer-format <replaceable>( one-answer | many-answers )</replaceable>; </optional> - <optional> transfers-in <replaceable>number</replaceable>; </optional> - <optional> transfers-out <replaceable>number</replaceable>; </optional> - <optional> transfers-per-ns <replaceable>number</replaceable>; </optional> - <optional> transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> alt-transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> alt-transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> use-alt-transfer-source <replaceable>yes_or_no</replaceable>; </optional> - <optional> notify-delay <replaceable>seconds</replaceable> ; </optional> - <optional> notify-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> notify-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> also-notify { <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional> - <optional> max-ixfr-log-size <replaceable>number</replaceable>; </optional> - <optional> max-journal-size <replaceable>size_spec</replaceable>; </optional> - <optional> coresize <replaceable>size_spec</replaceable> ; </optional> - <optional> datasize <replaceable>size_spec</replaceable> ; </optional> - <optional> files <replaceable>size_spec</replaceable> ; </optional> - <optional> stacksize <replaceable>size_spec</replaceable> ; </optional> - <optional> cleaning-interval <replaceable>number</replaceable>; </optional> - <optional> heartbeat-interval <replaceable>number</replaceable>; </optional> - <optional> interface-interval <replaceable>number</replaceable>; </optional> - <optional> statistics-interval <replaceable>number</replaceable>; </optional> - <optional> topology { <replaceable>address_match_list</replaceable> }</optional>; - <optional> sortlist { <replaceable>address_match_list</replaceable> }</optional>; - <optional> rrset-order { <replaceable>order_spec</replaceable> ; <optional> <replaceable>order_spec</replaceable> ; ... </optional> </optional> }; - <optional> lame-ttl <replaceable>number</replaceable>; </optional> - <optional> max-ncache-ttl <replaceable>number</replaceable>; </optional> - <optional> max-cache-ttl <replaceable>number</replaceable>; </optional> - <optional> sig-validity-interval <replaceable>number</replaceable> ; </optional> - <optional> min-roots <replaceable>number</replaceable>; </optional> - <optional> use-ixfr <replaceable>yes_or_no</replaceable> ; </optional> - <optional> provide-ixfr <replaceable>yes_or_no</replaceable>; </optional> - <optional> request-ixfr <replaceable>yes_or_no</replaceable>; </optional> - <optional> treat-cr-as-space <replaceable>yes_or_no</replaceable> ; </optional> - <optional> min-refresh-time <replaceable>number</replaceable> ; </optional> - <optional> max-refresh-time <replaceable>number</replaceable> ; </optional> - <optional> min-retry-time <replaceable>number</replaceable> ; </optional> - <optional> max-retry-time <replaceable>number</replaceable> ; </optional> - <optional> port <replaceable>ip_port</replaceable>; </optional> - <optional> additional-from-auth <replaceable>yes_or_no</replaceable> ; </optional> - <optional> additional-from-cache <replaceable>yes_or_no</replaceable> ; </optional> - <optional> random-device <replaceable>path_name</replaceable> ; </optional> - <optional> max-cache-size <replaceable>size_spec</replaceable> ; </optional> - <optional> match-mapped-addresses <replaceable>yes_or_no</replaceable>; </optional> - <optional> preferred-glue ( <replaceable>A</replaceable> | <replaceable>AAAA</replaceable> | <replaceable>NONE</replaceable> ); </optional> - <optional> edns-udp-size <replaceable>number</replaceable>; </optional> - <optional> max-udp-size <replaceable>number</replaceable>; </optional> - <optional> root-delegation-only <optional> exclude { <replaceable>namelist</replaceable> } </optional> ; </optional> - <optional> querylog <replaceable>yes_or_no</replaceable> ; </optional> - <optional> disable-algorithms <replaceable>domain</replaceable> { <replaceable>algorithm</replaceable>; <optional> <replaceable>algorithm</replaceable>; </optional> }; </optional> - <optional> acache-enable <replaceable>yes_or_no</replaceable> ; </optional> - <optional> acache-cleaning-interval <replaceable>number</replaceable>; </optional> - <optional> max-acache-size <replaceable>size_spec</replaceable> ; </optional> - <optional> clients-per-query <replaceable>number</replaceable> ; </optional> - <optional> max-clients-per-query <replaceable>number</replaceable> ; </optional> - <optional> masterfile-format (<constant>text</constant>|<constant>raw</constant>) ; </optional> - <optional> empty-server <replaceable>name</replaceable> ; </optional> - <optional> empty-contact <replaceable>name</replaceable> ; </optional> - <optional> empty-zones-enable <replaceable>yes_or_no</replaceable> ; </optional> - <optional> disable-empty-zone <replaceable>zone_name</replaceable> ; </optional> - <optional> zero-no-soa-ttl <replaceable>yes_or_no</replaceable> ; </optional> - <optional> zero-no-soa-ttl-cache <replaceable>yes_or_no</replaceable> ; </optional> -}; -</programlisting> - - </sect2> - - <sect2 id="options"> - <title><command>options</command> Statement Definition and - Usage</title> - - <para> - The <command>options</command> statement sets up global - options - to be used by <acronym>BIND</acronym>. This statement - may appear only - once in a configuration file. If there is no <command>options</command> - statement, an options block with each option set to its default will - be used. - </para> - - <variablelist> - - <varlistentry> - <term><command>directory</command></term> - <listitem> - <para> - The working directory of the server. - Any non-absolute pathnames in the configuration file will be - taken - as relative to this directory. The default location for most - server - output files (e.g. <filename>named.run</filename>) - is this directory. - If a directory is not specified, the working directory - defaults to `<filename>.</filename>', the directory from - which the server - was started. The directory specified should be an absolute - path. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>key-directory</command></term> - <listitem> - <para> - When performing dynamic update of secure zones, the - directory where the public and private key files should be - found, - if different than the current working directory. The - directory specified - must be an absolute path. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>named-xfer</command></term> - <listitem> - <para> - <emphasis>This option is obsolete.</emphasis> - It was used in <acronym>BIND</acronym> 8 to - specify the pathname to the <command>named-xfer</command> program. - In <acronym>BIND</acronym> 9, no separate <command>named-xfer</command> program is - needed; its functionality is built into the name server. - </para> - - </listitem> - </varlistentry> - - <varlistentry> - <term><command>tkey-domain</command></term> - <listitem> - <para> - The domain appended to the names of all - shared keys generated with - <command>TKEY</command>. When a client - requests a <command>TKEY</command> exchange, it - may or may not specify - the desired name for the key. If present, the name of the - shared - key will be "<varname>client specified part</varname>" + - "<varname>tkey-domain</varname>". - Otherwise, the name of the shared key will be "<varname>random hex -digits</varname>" + "<varname>tkey-domain</varname>". In most cases, - the <command>domainname</command> should be the - server's domain - name. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>tkey-dhkey</command></term> - <listitem> - <para> - The Diffie-Hellman key used by the server - to generate shared keys with clients using the Diffie-Hellman - mode - of <command>TKEY</command>. The server must be - able to load the - public and private keys from files in the working directory. - In - most cases, the keyname should be the server's host name. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>cache-file</command></term> - <listitem> - <para> - This is for testing only. Do not use. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>dump-file</command></term> - <listitem> - <para> - The pathname of the file the server dumps - the database to when instructed to do so with - <command>rndc dumpdb</command>. - If not specified, the default is <filename>named_dump.db</filename>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>memstatistics-file</command></term> - <listitem> - <para> - The pathname of the file the server writes memory - usage statistics to on exit. If specified the - statistics will be written to the file on exit. - </para> - <para> - In <acronym>BIND</acronym> 9.5 and later this will - default to <filename>named.memstats</filename>. - <acronym>BIND</acronym> 9.5 will also introduce - <command>memstatistics</command> to control the - writing. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>pid-file</command></term> - <listitem> - <para> - The pathname of the file the server writes its process ID - in. If not specified, the default is <filename>/var/run/named.pid</filename>. - The pid-file is used by programs that want to send signals to - the running - name server. Specifying <command>pid-file none</command> disables the - use of a PID file — no file will be written and any - existing one will be removed. Note that <command>none</command> - is a keyword, not a filename, and therefore is not enclosed - in - double quotes. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>recursing-file</command></term> - <listitem> - <para> - The pathname of the file the server dumps - the queries that are currently recursing when instructed - to do so with <command>rndc recursing</command>. - If not specified, the default is <filename>named.recursing</filename>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>statistics-file</command></term> - <listitem> - <para> - The pathname of the file the server appends statistics - to when instructed to do so using <command>rndc stats</command>. - If not specified, the default is <filename>named.stats</filename> in the - server's current directory. The format of the file is - described - in <xref linkend="statsfile"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>port</command></term> - <listitem> - <para> - The UDP/TCP port number the server uses for - receiving and sending DNS protocol traffic. - The default is 53. This option is mainly intended for server - testing; - a server using a port other than 53 will not be able to - communicate with - the global DNS. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>random-device</command></term> - <listitem> - <para> - The source of entropy to be used by the server. Entropy is - primarily needed - for DNSSEC operations, such as TKEY transactions and dynamic - update of signed - zones. This options specifies the device (or file) from which - to read - entropy. If this is a file, operations requiring entropy will - fail when the - file has been exhausted. If not specified, the default value - is - <filename>/dev/random</filename> - (or equivalent) when present, and none otherwise. The - <command>random-device</command> option takes - effect during - the initial configuration load at server startup time and - is ignored on subsequent reloads. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>preferred-glue</command></term> - <listitem> - <para> - If specified, the listed type (A or AAAA) will be emitted - before other glue - in the additional section of a query response. - The default is not to prefer any type (NONE). - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>root-delegation-only</command></term> - <listitem> - <para> - Turn on enforcement of delegation-only in TLDs (top level domains) and root zones - with an optional - exclude list. - </para> - <para> - Note some TLDs are not delegation only (e.g. "DE", "LV", "US" - and "MUSEUM"). - </para> - -<programlisting> -options { - root-delegation-only exclude { "de"; "lv"; "us"; "museum"; }; -}; -</programlisting> - - </listitem> - </varlistentry> - - <varlistentry> - <term><command>disable-algorithms</command></term> - <listitem> - <para> - Disable the specified DNSSEC algorithms at and below the - specified name. - Multiple <command>disable-algorithms</command> - statements are allowed. - Only the most specific will be applied. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>dnssec-lookaside</command></term> - <listitem> - <para> - When set, <command>dnssec-lookaside</command> - provides the - validator with an alternate method to validate DNSKEY records - at the - top of a zone. When a DNSKEY is at or below a domain - specified by the - deepest <command>dnssec-lookaside</command>, and - the normal dnssec validation - has left the key untrusted, the trust-anchor will be append to - the key - name and a DLV record will be looked up to see if it can - validate the - key. If the DLV record validates a DNSKEY (similarly to the - way a DS - record does) the DNSKEY RRset is deemed to be trusted. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>dnssec-must-be-secure</command></term> - <listitem> - <para> - Specify hierarchies which must be or may not be secure (signed and - validated). - If <userinput>yes</userinput>, then named will only accept - answers if they - are secure. - If <userinput>no</userinput>, then normal dnssec validation - applies - allowing for insecure answers to be accepted. - The specified domain must be under a <command>trusted-key</command> or - <command>dnssec-lookaside</command> must be - active. - </para> - </listitem> - </varlistentry> - - </variablelist> - - <sect3 id="boolean_options"> - <title>Boolean Options</title> - - <variablelist> - - <varlistentry> - <term><command>auth-nxdomain</command></term> - <listitem> - <para> - If <userinput>yes</userinput>, then the <command>AA</command> bit - is always set on NXDOMAIN responses, even if the server is - not actually - authoritative. The default is <userinput>no</userinput>; - this is - a change from <acronym>BIND</acronym> 8. If you - are using very old DNS software, you - may need to set it to <userinput>yes</userinput>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>deallocate-on-exit</command></term> - <listitem> - <para> - This option was used in <acronym>BIND</acronym> - 8 to enable checking - for memory leaks on exit. <acronym>BIND</acronym> 9 ignores the option and always performs - the checks. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>dialup</command></term> - <listitem> - <para> - If <userinput>yes</userinput>, then the - server treats all zones as if they are doing zone transfers - across - a dial-on-demand dialup link, which can be brought up by - traffic - originating from this server. This has different effects - according - to zone type and concentrates the zone maintenance so that - it all - happens in a short interval, once every <command>heartbeat-interval</command> and - hopefully during the one call. It also suppresses some of - the normal - zone maintenance traffic. The default is <userinput>no</userinput>. - </para> - <para> - The <command>dialup</command> option - may also be specified in the <command>view</command> and - <command>zone</command> statements, - in which case it overrides the global <command>dialup</command> - option. - </para> - <para> - If the zone is a master zone, then the server will send out a - NOTIFY - request to all the slaves (default). This should trigger the - zone serial - number check in the slave (providing it supports NOTIFY) - allowing the slave - to verify the zone while the connection is active. - The set of servers to which NOTIFY is sent can be controlled - by - <command>notify</command> and <command>also-notify</command>. - </para> - <para> - If the - zone is a slave or stub zone, then the server will suppress - the regular - "zone up to date" (refresh) queries and only perform them - when the - <command>heartbeat-interval</command> expires in - addition to sending - NOTIFY requests. - </para> - <para> - Finer control can be achieved by using - <userinput>notify</userinput> which only sends NOTIFY - messages, - <userinput>notify-passive</userinput> which sends NOTIFY - messages and - suppresses the normal refresh queries, <userinput>refresh</userinput> - which suppresses normal refresh processing and sends refresh - queries - when the <command>heartbeat-interval</command> - expires, and - <userinput>passive</userinput> which just disables normal - refresh - processing. - </para> - - <informaltable colsep="0" rowsep="0"> - <tgroup cols="4" colsep="0" rowsep="0" tgroupstyle="4Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="1.150in"/> - <colspec colname="3" colnum="3" colsep="0" colwidth="1.150in"/> - <colspec colname="4" colnum="4" colsep="0" colwidth="1.150in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - dialup mode - </para> - </entry> - <entry colname="2"> - <para> - normal refresh - </para> - </entry> - <entry colname="3"> - <para> - heart-beat refresh - </para> - </entry> - <entry colname="4"> - <para> - heart-beat notify - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>no</command> (default)</para> - </entry> - <entry colname="2"> - <para> - yes - </para> - </entry> - <entry colname="3"> - <para> - no - </para> - </entry> - <entry colname="4"> - <para> - no - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>yes</command></para> - </entry> - <entry colname="2"> - <para> - no - </para> - </entry> - <entry colname="3"> - <para> - yes - </para> - </entry> - <entry colname="4"> - <para> - yes - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>notify</command></para> - </entry> - <entry colname="2"> - <para> - yes - </para> - </entry> - <entry colname="3"> - <para> - no - </para> - </entry> - <entry colname="4"> - <para> - yes - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>refresh</command></para> - </entry> - <entry colname="2"> - <para> - no - </para> - </entry> - <entry colname="3"> - <para> - yes - </para> - </entry> - <entry colname="4"> - <para> - no - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>passive</command></para> - </entry> - <entry colname="2"> - <para> - no - </para> - </entry> - <entry colname="3"> - <para> - no - </para> - </entry> - <entry colname="4"> - <para> - no - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>notify-passive</command></para> - </entry> - <entry colname="2"> - <para> - no - </para> - </entry> - <entry colname="3"> - <para> - no - </para> - </entry> - <entry colname="4"> - <para> - yes - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - - <para> - Note that normal NOTIFY processing is not affected by - <command>dialup</command>. - </para> - - </listitem> - </varlistentry> - - <varlistentry> - <term><command>fake-iquery</command></term> - <listitem> - <para> - In <acronym>BIND</acronym> 8, this option - enabled simulating the obsolete DNS query type - IQUERY. <acronym>BIND</acronym> 9 never does - IQUERY simulation. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>fetch-glue</command></term> - <listitem> - <para> - This option is obsolete. - In BIND 8, <userinput>fetch-glue yes</userinput> - caused the server to attempt to fetch glue resource records - it - didn't have when constructing the additional - data section of a response. This is now considered a bad - idea - and BIND 9 never does it. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>flush-zones-on-shutdown</command></term> - <listitem> - <para> - When the nameserver exits due receiving SIGTERM, - flush or do not flush any pending zone writes. The default - is - <command>flush-zones-on-shutdown</command> <userinput>no</userinput>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>has-old-clients</command></term> - <listitem> - <para> - This option was incorrectly implemented - in <acronym>BIND</acronym> 8, and is ignored by <acronym>BIND</acronym> 9. - To achieve the intended effect - of - <command>has-old-clients</command> <userinput>yes</userinput>, specify - the two separate options <command>auth-nxdomain</command> <userinput>yes</userinput> - and <command>rfc2308-type1</command> <userinput>no</userinput> instead. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>host-statistics</command></term> - <listitem> - <para> - In BIND 8, this enables keeping of - statistics for every host that the name server interacts - with. - Not implemented in BIND 9. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>maintain-ixfr-base</command></term> - <listitem> - <para> - <emphasis>This option is obsolete</emphasis>. - It was used in <acronym>BIND</acronym> 8 to - determine whether a transaction log was - kept for Incremental Zone Transfer. <acronym>BIND</acronym> 9 maintains a transaction - log whenever possible. If you need to disable outgoing - incremental zone - transfers, use <command>provide-ixfr</command> <userinput>no</userinput>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>minimal-responses</command></term> - <listitem> - <para> - If <userinput>yes</userinput>, then when generating - responses the server will only add records to the authority - and additional data sections when they are required (e.g. - delegations, negative responses). This may improve the - performance of the server. - The default is <userinput>no</userinput>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>multiple-cnames</command></term> - <listitem> - <para> - This option was used in <acronym>BIND</acronym> 8 to allow - a domain name to have multiple CNAME records in violation of - the DNS standards. <acronym>BIND</acronym> 9.2 onwards - always strictly enforces the CNAME rules both in master - files and dynamic updates. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>notify</command></term> - <listitem> - <para> - If <userinput>yes</userinput> (the default), - DNS NOTIFY messages are sent when a zone the server is - authoritative for - changes, see <xref linkend="notify"/>. The messages are - sent to the - servers listed in the zone's NS records (except the master - server identified - in the SOA MNAME field), and to any servers listed in the - <command>also-notify</command> option. - </para> - <para> - If <userinput>master-only</userinput>, notifies are only - sent - for master zones. - If <userinput>explicit</userinput>, notifies are sent only - to - servers explicitly listed using <command>also-notify</command>. - If <userinput>no</userinput>, no notifies are sent. - </para> - <para> - The <command>notify</command> option may also be - specified in the <command>zone</command> - statement, - in which case it overrides the <command>options notify</command> statement. - It would only be necessary to turn off this option if it - caused slaves - to crash. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>recursion</command></term> - <listitem> - <para> - If <userinput>yes</userinput>, and a - DNS query requests recursion, then the server will attempt - to do - all the work required to answer the query. If recursion is - off - and the server does not already know the answer, it will - return a - referral response. The default is - <userinput>yes</userinput>. - Note that setting <command>recursion no</command> does not prevent - clients from getting data from the server's cache; it only - prevents new data from being cached as an effect of client - queries. - Caching may still occur as an effect the server's internal - operation, such as NOTIFY address lookups. - See also <command>fetch-glue</command> above. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>rfc2308-type1</command></term> - <listitem> - <para> - Setting this to <userinput>yes</userinput> will - cause the server to send NS records along with the SOA - record for negative - answers. The default is <userinput>no</userinput>. - </para> - <note> - <simpara> - Not yet implemented in <acronym>BIND</acronym> - 9. - </simpara> - </note> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>use-id-pool</command></term> - <listitem> - <para> - <emphasis>This option is obsolete</emphasis>. - <acronym>BIND</acronym> 9 always allocates query - IDs from a pool. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>zone-statistics</command></term> - <listitem> - <para> - If <userinput>yes</userinput>, the server will collect - statistical data on all zones (unless specifically turned - off - on a per-zone basis by specifying <command>zone-statistics no</command> - in the <command>zone</command> statement). - These statistics may be accessed - using <command>rndc stats</command>, which will - dump them to the file listed - in the <command>statistics-file</command>. See - also <xref linkend="statsfile"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>use-ixfr</command></term> - <listitem> - <para> - <emphasis>This option is obsolete</emphasis>. - If you need to disable IXFR to a particular server or - servers, see - the information on the <command>provide-ixfr</command> option - in <xref linkend="server_statement_definition_and_usage"/>. - See also - <xref linkend="incremental_zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>provide-ixfr</command></term> - <listitem> - <para> - See the description of - <command>provide-ixfr</command> in - <xref linkend="server_statement_definition_and_usage"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>request-ixfr</command></term> - <listitem> - <para> - See the description of - <command>request-ixfr</command> in - <xref linkend="server_statement_definition_and_usage"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>treat-cr-as-space</command></term> - <listitem> - <para> - This option was used in <acronym>BIND</acronym> - 8 to make - the server treat carriage return ("<command>\r</command>") characters the same way - as a space or tab character, - to facilitate loading of zone files on a UNIX system that - were generated - on an NT or DOS machine. In <acronym>BIND</acronym> 9, both UNIX "<command>\n</command>" - and NT/DOS "<command>\r\n</command>" newlines - are always accepted, - and the option is ignored. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>additional-from-auth</command></term> - <term><command>additional-from-cache</command></term> - <listitem> - - <para> - These options control the behavior of an authoritative - server when - answering queries which have additional data, or when - following CNAME - and DNAME chains. - </para> - - <para> - When both of these options are set to <userinput>yes</userinput> - (the default) and a - query is being answered from authoritative data (a zone - configured into the server), the additional data section of - the - reply will be filled in using data from other authoritative - zones - and from the cache. In some situations this is undesirable, - such - as when there is concern over the correctness of the cache, - or - in servers where slave zones may be added and modified by - untrusted third parties. Also, avoiding - the search for this additional data will speed up server - operations - at the possible expense of additional queries to resolve - what would - otherwise be provided in the additional section. - </para> - - <para> - For example, if a query asks for an MX record for host <literal>foo.example.com</literal>, - and the record found is "<literal>MX 10 mail.example.net</literal>", normally the address - records (A and AAAA) for <literal>mail.example.net</literal> will be provided as well, - if known, even though they are not in the example.com zone. - Setting these options to <command>no</command> - disables this behavior and makes - the server only search for additional data in the zone it - answers from. - </para> - - <para> - These options are intended for use in authoritative-only - servers, or in authoritative-only views. Attempts to set - them to <command>no</command> without also - specifying - <command>recursion no</command> will cause the - server to - ignore the options and log a warning message. - </para> - - <para> - Specifying <command>additional-from-cache no</command> actually - disables the use of the cache not only for additional data - lookups - but also when looking up the answer. This is usually the - desired - behavior in an authoritative-only server where the - correctness of - the cached data is an issue. - </para> - - <para> - When a name server is non-recursively queried for a name - that is not - below the apex of any served zone, it normally answers with - an - "upwards referral" to the root servers or the servers of - some other - known parent of the query name. Since the data in an - upwards referral - comes from the cache, the server will not be able to provide - upwards - referrals when <command>additional-from-cache no</command> - has been specified. Instead, it will respond to such - queries - with REFUSED. This should not cause any problems since - upwards referrals are not required for the resolution - process. - </para> - - </listitem> - </varlistentry> - - <varlistentry> - <term><command>match-mapped-addresses</command></term> - <listitem> - <para> - If <userinput>yes</userinput>, then an - IPv4-mapped IPv6 address will match any address match - list entries that match the corresponding IPv4 address. - Enabling this option is sometimes useful on IPv6-enabled - Linux - systems, to work around a kernel quirk that causes IPv4 - TCP connections such as zone transfers to be accepted - on an IPv6 socket using mapped addresses, causing - address match lists designed for IPv4 to fail to match. - The use of this option for any other purpose is discouraged. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>ixfr-from-differences</command></term> - <listitem> - <para> - When <userinput>yes</userinput> and the server loads a new version of a master - zone from its zone file or receives a new version of a slave - file by a non-incremental zone transfer, it will compare - the new version to the previous one and calculate a set - of differences. The differences are then logged in the - zone's journal file such that the changes can be transmitted - to downstream slaves as an incremental zone transfer. - </para> - <para> - By allowing incremental zone transfers to be used for - non-dynamic zones, this option saves bandwidth at the - expense of increased CPU and memory consumption at the - master. - In particular, if the new version of a zone is completely - different from the previous one, the set of differences - will be of a size comparable to the combined size of the - old and new zone version, and the server will need to - temporarily allocate memory to hold this complete - difference set. - </para> - <para><command>ixfr-from-differences</command> - also accepts <command>master</command> and - <command>slave</command> at the view and options - levels which causes - <command>ixfr-from-differences</command> to apply to - all <command>master</command> or - <command>slave</command> zones respectively. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>multi-master</command></term> - <listitem> - <para> - This should be set when you have multiple masters for a zone - and the - addresses refer to different machines. If <userinput>yes</userinput>, named will - not log - when the serial number on the master is less than what named - currently - has. The default is <userinput>no</userinput>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>dnssec-enable</command></term> - <listitem> - <para> - Enable DNSSEC support in named. Unless set to <userinput>yes</userinput>, - named behaves as if it does not support DNSSEC. - The default is <userinput>yes</userinput>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>dnssec-validation</command></term> - <listitem> - <para> - Enable DNSSEC validation in named. - Note <command>dnssec-enable</command> also needs to be - set to <userinput>yes</userinput> to be effective. - The default is <userinput>no</userinput>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>dnssec-accept-expired</command></term> - <listitem> - <para> - Accept expired signatures when verifying DNSSEC signatures. - The default is <userinput>no</userinput>. - Setting this option to "yes" leaves named vulnerable to replay attacks. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>querylog</command></term> - <listitem> - <para> - Specify whether query logging should be started when named - starts. - If <command>querylog</command> is not specified, - then the query logging - is determined by the presence of the logging category <command>queries</command>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-names</command></term> - <listitem> - <para> - This option is used to restrict the character set and syntax - of - certain domain names in master files and/or DNS responses - received - from the network. The default varies according to usage - area. For - <command>master</command> zones the default is <command>fail</command>. - For <command>slave</command> zones the default - is <command>warn</command>. - For answers received from the network (<command>response</command>) - the default is <command>ignore</command>. - </para> - <para> - The rules for legal hostnames and mail domains are derived - from RFC 952 and RFC 821 as modified by RFC 1123. - </para> - <para><command>check-names</command> - applies to the owner names of A, AAA and MX records. - It also applies to the domain names in the RDATA of NS, SOA - and MX records. - It also applies to the RDATA of PTR records where the owner - name indicated that it is a reverse lookup of a hostname - (the owner name ends in IN-ADDR.ARPA, IP6.ARPA, or IP6.INT). - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-mx</command></term> - <listitem> - <para> - Check whether the MX record appears to refer to a IP address. - The default is to <command>warn</command>. Other possible - values are <command>fail</command> and - <command>ignore</command>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-wildcard</command></term> - <listitem> - <para> - This option is used to check for non-terminal wildcards. - The use of non-terminal wildcards is almost always as a - result of a failure - to understand the wildcard matching algorithm (RFC 1034). - This option - affects master zones. The default (<command>yes</command>) is to check - for non-terminal wildcards and issue a warning. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-integrity</command></term> - <listitem> - <para> - Perform post load zone integrity checks on master - zones. This checks that MX and SRV records refer - to address (A or AAAA) records and that glue - address records exist for delegated zones. For - MX and SRV records only in-zone hostnames are - checked (for out-of-zone hostnames use named-checkzone). - For NS records only names below top of zone are - checked (for out-of-zone names and glue consistency - checks use named-checkzone). The default is - <command>yes</command>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-mx-cname</command></term> - <listitem> - <para> - If <command>check-integrity</command> is set then - fail, warn or ignore MX records that refer - to CNAMES. The default is to <command>warn</command>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-srv-cname</command></term> - <listitem> - <para> - If <command>check-integrity</command> is set then - fail, warn or ignore SRV records that refer - to CNAMES. The default is to <command>warn</command>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-sibling</command></term> - <listitem> - <para> - When performing integrity checks, also check that - sibling glue exists. The default is <command>yes</command>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>zero-no-soa-ttl</command></term> - <listitem> - <para> - When returning authoritative negative responses to - SOA queries set the TTL of the SOA recored returned in - the authority section to zero. - The default is <command>yes</command>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>zero-no-soa-ttl-cache</command></term> - <listitem> - <para> - When caching a negative response to a SOA query - set the TTL to zero. - The default is <command>no</command>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>update-check-ksk</command></term> - <listitem> - <para> - When regenerating the RRSIGs following a UPDATE - request to a secure zone, check the KSK flag on - the DNSKEY RR to determine if this key should be - used to generate the RRSIG. This flag is ignored - if there are not DNSKEY RRs both with and without - a KSK. - The default is <command>yes</command>. - </para> - </listitem> - </varlistentry> - - </variablelist> - - </sect3> - - <sect3> - <title>Forwarding</title> - <para> - The forwarding facility can be used to create a large site-wide - cache on a few servers, reducing traffic over links to external - name servers. It can also be used to allow queries by servers that - do not have direct access to the Internet, but wish to look up - exterior - names anyway. Forwarding occurs only on those queries for which - the server is not authoritative and does not have the answer in - its cache. - </para> - - <variablelist> - <varlistentry> - <term><command>forward</command></term> - <listitem> - <para> - This option is only meaningful if the - forwarders list is not empty. A value of <varname>first</varname>, - the default, causes the server to query the forwarders - first — and - if that doesn't answer the question, the server will then - look for - the answer itself. If <varname>only</varname> is - specified, the - server will only query the forwarders. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>forwarders</command></term> - <listitem> - <para> - Specifies the IP addresses to be used - for forwarding. The default is the empty list (no - forwarding). - </para> - </listitem> - </varlistentry> - - </variablelist> - - <para> - Forwarding can also be configured on a per-domain basis, allowing - for the global forwarding options to be overridden in a variety - of ways. You can set particular domains to use different - forwarders, - or have a different <command>forward only/first</command> behavior, - or not forward at all, see <xref linkend="zone_statement_grammar"/>. - </para> - </sect3> - - <sect3> - <title>Dual-stack Servers</title> - <para> - Dual-stack servers are used as servers of last resort to work - around - problems in reachability due the lack of support for either IPv4 - or IPv6 - on the host machine. - </para> - - <variablelist> - <varlistentry> - <term><command>dual-stack-servers</command></term> - <listitem> - <para> - Specifies host names or addresses of machines with access to - both IPv4 and IPv6 transports. If a hostname is used, the - server must be able - to resolve the name using only the transport it has. If the - machine is dual - stacked, then the <command>dual-stack-servers</command> have no effect unless - access to a transport has been disabled on the command line - (e.g. <command>named -4</command>). - </para> - </listitem> - </varlistentry> - </variablelist> - </sect3> - - <sect3 id="access_control"> - <title>Access Control</title> - - <para> - Access to the server can be restricted based on the IP address - of the requesting system. See <xref linkend="address_match_lists"/> for - details on how to specify IP address lists. - </para> - - <variablelist> - - <varlistentry> - <term><command>allow-notify</command></term> - <listitem> - <para> - Specifies which hosts are allowed to - notify this server, a slave, of zone changes in addition - to the zone masters. - <command>allow-notify</command> may also be - specified in the - <command>zone</command> statement, in which case - it overrides the - <command>options allow-notify</command> - statement. It is only meaningful - for a slave zone. If not specified, the default is to - process notify messages - only from a zone's master. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>allow-query</command></term> - <listitem> - <para> - Specifies which hosts are allowed to ask ordinary - DNS questions. <command>allow-query</command> may - also be specified in the <command>zone</command> - statement, in which case it overrides the - <command>options allow-query</command> statement. - If not specified, the default is to allow queries - from all hosts. - </para> - <note> - <para> - <command>allow-query-cache</command> is now - used to specify access to the cache. - </para> - </note> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>allow-query-cache</command></term> - <listitem> - <para> - Specifies which hosts are allowed to get answers - from the cache. If <command>allow-query-cache</command> - is not set then <command>allow-recursion</command> - is used if set, otherwise <command>allow-query</command> - is used if set, otherwise the default - (<command>localnets;</command> - <command>localhost;</command>) is used. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>allow-recursion</command></term> - <listitem> - <para> - Specifies which hosts are allowed to make recursive - queries through this server. If - <command>allow-recursion</command> is not set - then <command>allow-query-cache</command> is - used if set, otherwise <command>allow-query</command> - is used if set, otherwise the default - (<command>localnets;</command> - <command>localhost;</command>) is used. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>allow-update</command></term> - <listitem> - <para> - Specifies which hosts are allowed to - submit Dynamic DNS updates for master zones. The default is - to deny - updates from all hosts. Note that allowing updates based - on the requestor's IP address is insecure; see - <xref linkend="dynamic_update_security"/> for details. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>allow-update-forwarding</command></term> - <listitem> - <para> - Specifies which hosts are allowed to - submit Dynamic DNS updates to slave zones to be forwarded to - the - master. The default is <userinput>{ none; }</userinput>, - which - means that no update forwarding will be performed. To - enable - update forwarding, specify - <userinput>allow-update-forwarding { any; };</userinput>. - Specifying values other than <userinput>{ none; }</userinput> or - <userinput>{ any; }</userinput> is usually - counterproductive, since - the responsibility for update access control should rest - with the - master server, not the slaves. - </para> - <para> - Note that enabling the update forwarding feature on a slave - server - may expose master servers relying on insecure IP address - based - access control to attacks; see <xref linkend="dynamic_update_security"/> - for more details. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>allow-v6-synthesis</command></term> - <listitem> - <para> - This option was introduced for the smooth transition from - AAAA - to A6 and from "nibble labels" to binary labels. - However, since both A6 and binary labels were then - deprecated, - this option was also deprecated. - It is now ignored with some warning messages. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>allow-transfer</command></term> - <listitem> - <para> - Specifies which hosts are allowed to - receive zone transfers from the server. <command>allow-transfer</command> may - also be specified in the <command>zone</command> - statement, in which - case it overrides the <command>options allow-transfer</command> statement. - If not specified, the default is to allow transfers to all - hosts. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>blackhole</command></term> - <listitem> - <para> - Specifies a list of addresses that the - server will not accept queries from or use to resolve a - query. Queries - from these addresses will not be responded to. The default - is <userinput>none</userinput>. - </para> - </listitem> - </varlistentry> - - </variablelist> - - </sect3> - - <sect3> - <title>Interfaces</title> - <para> - The interfaces and ports that the server will answer queries - from may be specified using the <command>listen-on</command> option. <command>listen-on</command> takes - an optional port, and an <varname>address_match_list</varname>. - The server will listen on all interfaces allowed by the address - match list. If a port is not specified, port 53 will be used. - </para> - <para> - Multiple <command>listen-on</command> statements are - allowed. - For example, - </para> - -<programlisting>listen-on { 5.6.7.8; }; -listen-on port 1234 { !1.2.3.4; 1.2/16; }; -</programlisting> - - <para> - will enable the name server on port 53 for the IP address - 5.6.7.8, and on port 1234 of an address on the machine in net - 1.2 that is not 1.2.3.4. - </para> - - <para> - If no <command>listen-on</command> is specified, the - server will listen on port 53 on all interfaces. - </para> - - <para> - The <command>listen-on-v6</command> option is used to - specify the interfaces and the ports on which the server will - listen - for incoming queries sent using IPv6. - </para> - - <para> - When <programlisting>{ any; }</programlisting> is - specified - as the <varname>address_match_list</varname> for the - <command>listen-on-v6</command> option, - the server does not bind a separate socket to each IPv6 interface - address as it does for IPv4 if the operating system has enough API - support for IPv6 (specifically if it conforms to RFC 3493 and RFC - 3542). - Instead, it listens on the IPv6 wildcard address. - If the system only has incomplete API support for IPv6, however, - the behavior is the same as that for IPv4. - </para> - - <para> - A list of particular IPv6 addresses can also be specified, in - which case - the server listens on a separate socket for each specified - address, - regardless of whether the desired API is supported by the system. - </para> - - <para> - Multiple <command>listen-on-v6</command> options can - be used. - For example, - </para> - -<programlisting>listen-on-v6 { any; }; -listen-on-v6 port 1234 { !2001:db8::/32; any; }; -</programlisting> - - <para> - will enable the name server on port 53 for any IPv6 addresses - (with a single wildcard socket), - and on port 1234 of IPv6 addresses that is not in the prefix - 2001:db8::/32 (with separate sockets for each matched address.) - </para> - - <para> - To make the server not listen on any IPv6 address, use - </para> - -<programlisting>listen-on-v6 { none; }; -</programlisting> - - <para> - If no <command>listen-on-v6</command> option is - specified, - the server will not listen on any IPv6 address. - </para> - </sect3> - - <sect3> - <title>Query Address</title> - <para> - If the server doesn't know the answer to a question, it will - query other name servers. <command>query-source</command> specifies - the address and port used for such queries. For queries sent over - IPv6, there is a separate <command>query-source-v6</command> option. - If <command>address</command> is <command>*</command> (asterisk) or is omitted, - a wildcard IP address (<command>INADDR_ANY</command>) - will be used. - If <command>port</command> is <command>*</command> or is omitted, - a random unprivileged port will be used. The <command>avoid-v4-udp-ports</command> - and <command>avoid-v6-udp-ports</command> options can be used - to prevent named - from selecting certain ports. The defaults are: - </para> - -<programlisting>query-source address * port *; -query-source-v6 address * port *; -</programlisting> - - <note> - <para> - The address specified in the <command>query-source</command> option - is used for both UDP and TCP queries, but the port applies only - to - UDP queries. TCP queries always use a random - unprivileged port. - </para> - </note> - <note> - <para> - Solaris 2.5.1 and earlier does not support setting the source - address for TCP sockets. - </para> - </note> - <note> - <para> - See also <command>transfer-source</command> and - <command>notify-source</command>. - </para> - </note> - </sect3> - - <sect3 id="zone_transfers"> - <title>Zone Transfers</title> - <para> - <acronym>BIND</acronym> has mechanisms in place to - facilitate zone transfers - and set limits on the amount of load that transfers place on the - system. The following options apply to zone transfers. - </para> - - <variablelist> - - <varlistentry> - <term><command>also-notify</command></term> - <listitem> - <para> - Defines a global list of IP addresses of name servers - that are also sent NOTIFY messages whenever a fresh copy of - the - zone is loaded, in addition to the servers listed in the - zone's NS records. - This helps to ensure that copies of the zones will - quickly converge on stealth servers. If an <command>also-notify</command> list - is given in a <command>zone</command> statement, - it will override - the <command>options also-notify</command> - statement. When a <command>zone notify</command> - statement - is set to <command>no</command>, the IP - addresses in the global <command>also-notify</command> list will - not be sent NOTIFY messages for that zone. The default is - the empty - list (no global notification list). - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-transfer-time-in</command></term> - <listitem> - <para> - Inbound zone transfers running longer than - this many minutes will be terminated. The default is 120 - minutes - (2 hours). The maximum value is 28 days (40320 minutes). - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-transfer-idle-in</command></term> - <listitem> - <para> - Inbound zone transfers making no progress - in this many minutes will be terminated. The default is 60 - minutes - (1 hour). The maximum value is 28 days (40320 minutes). - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-transfer-time-out</command></term> - <listitem> - <para> - Outbound zone transfers running longer than - this many minutes will be terminated. The default is 120 - minutes - (2 hours). The maximum value is 28 days (40320 minutes). - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-transfer-idle-out</command></term> - <listitem> - <para> - Outbound zone transfers making no progress - in this many minutes will be terminated. The default is 60 - minutes (1 - hour). The maximum value is 28 days (40320 minutes). - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>serial-query-rate</command></term> - <listitem> - <para> - Slave servers will periodically query master servers - to find out if zone serial numbers have changed. Each such - query uses - a minute amount of the slave server's network bandwidth. To - limit the - amount of bandwidth used, BIND 9 limits the rate at which - queries are - sent. The value of the <command>serial-query-rate</command> option, - an integer, is the maximum number of queries sent per - second. - The default is 20. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>serial-queries</command></term> - <listitem> - <para> - In BIND 8, the <command>serial-queries</command> - option - set the maximum number of concurrent serial number queries - allowed to be outstanding at any given time. - BIND 9 does not limit the number of outstanding - serial queries and ignores the <command>serial-queries</command> option. - Instead, it limits the rate at which the queries are sent - as defined using the <command>serial-query-rate</command> option. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>transfer-format</command></term> - <listitem> - - <para> - Zone transfers can be sent using two different formats, - <command>one-answer</command> and - <command>many-answers</command>. - The <command>transfer-format</command> option is used - on the master server to determine which format it sends. - <command>one-answer</command> uses one DNS message per - resource record transferred. - <command>many-answers</command> packs as many resource - records as possible into a message. - <command>many-answers</command> is more efficient, but is - only supported by relatively new slave servers, - such as <acronym>BIND</acronym> 9, <acronym>BIND</acronym> - 8.x and <acronym>BIND</acronym> 4.9.5 onwards. - The <command>many-answers</command> format is also supported by - recent Microsoft Windows nameservers. - The default is <command>many-answers</command>. - <command>transfer-format</command> may be overridden on a - per-server basis by using the <command>server</command> - statement. - </para> - - </listitem> - </varlistentry> - - <varlistentry> - <term><command>transfers-in</command></term> - <listitem> - <para> - The maximum number of inbound zone transfers - that can be running concurrently. The default value is <literal>10</literal>. - Increasing <command>transfers-in</command> may - speed up the convergence - of slave zones, but it also may increase the load on the - local system. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>transfers-out</command></term> - <listitem> - <para> - The maximum number of outbound zone transfers - that can be running concurrently. Zone transfer requests in - excess - of the limit will be refused. The default value is <literal>10</literal>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>transfers-per-ns</command></term> - <listitem> - <para> - The maximum number of inbound zone transfers - that can be concurrently transferring from a given remote - name server. - The default value is <literal>2</literal>. - Increasing <command>transfers-per-ns</command> - may - speed up the convergence of slave zones, but it also may - increase - the load on the remote name server. <command>transfers-per-ns</command> may - be overridden on a per-server basis by using the <command>transfers</command> phrase - of the <command>server</command> statement. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>transfer-source</command></term> - <listitem> - <para><command>transfer-source</command> - determines which local address will be bound to IPv4 - TCP connections used to fetch zones transferred - inbound by the server. It also determines the - source IPv4 address, and optionally the UDP port, - used for the refresh queries and forwarded dynamic - updates. If not set, it defaults to a system - controlled value which will usually be the address - of the interface "closest to" the remote end. This - address must appear in the remote end's - <command>allow-transfer</command> option for the - zone being transferred, if one is specified. This - statement sets the - <command>transfer-source</command> for all zones, - but can be overridden on a per-view or per-zone - basis by including a - <command>transfer-source</command> statement within - the <command>view</command> or - <command>zone</command> block in the configuration - file. - </para> - <note> - <para> - Solaris 2.5.1 and earlier does not support setting the - source address for TCP sockets. - </para> - </note> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>transfer-source-v6</command></term> - <listitem> - <para> - The same as <command>transfer-source</command>, - except zone transfers are performed using IPv6. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>alt-transfer-source</command></term> - <listitem> - <para> - An alternate transfer source if the one listed in - <command>transfer-source</command> fails and - <command>use-alt-transfer-source</command> is - set. - </para> - <note> - If you do not wish the alternate transfer source - to be used, you should set - <command>use-alt-transfer-source</command> - appropriately and you should not depend upon - getting a answer back to the first refresh - query. - </note> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>alt-transfer-source-v6</command></term> - <listitem> - <para> - An alternate transfer source if the one listed in - <command>transfer-source-v6</command> fails and - <command>use-alt-transfer-source</command> is - set. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>use-alt-transfer-source</command></term> - <listitem> - <para> - Use the alternate transfer sources or not. If views are - specified this defaults to <command>no</command> - otherwise it defaults to - <command>yes</command> (for BIND 8 - compatibility). - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>notify-source</command></term> - <listitem> - <para><command>notify-source</command> - determines which local source address, and - optionally UDP port, will be used to send NOTIFY - messages. This address must appear in the slave - server's <command>masters</command> zone clause or - in an <command>allow-notify</command> clause. This - statement sets the <command>notify-source</command> - for all zones, but can be overridden on a per-zone or - per-view basis by including a - <command>notify-source</command> statement within - the <command>zone</command> or - <command>view</command> block in the configuration - file. - </para> - <note> - <para> - Solaris 2.5.1 and earlier does not support setting the - source address for TCP sockets. - </para> - </note> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>notify-source-v6</command></term> - <listitem> - <para> - Like <command>notify-source</command>, - but applies to notify messages sent to IPv6 addresses. - </para> - </listitem> - </varlistentry> - - </variablelist> - - </sect3> - - <sect3> - <title>Bad UDP Port Lists</title> - <para><command>avoid-v4-udp-ports</command> - and <command>avoid-v6-udp-ports</command> specify a list - of IPv4 and IPv6 UDP ports that will not be used as system - assigned source ports for UDP sockets. These lists - prevent named from choosing as its random source port a - port that is blocked by your firewall. If a query went - out with such a source port, the answer would not get by - the firewall and the name server would have to query - again. - </para> - </sect3> - - <sect3> - <title>Operating System Resource Limits</title> - - <para> - The server's usage of many system resources can be limited. - Scaled values are allowed when specifying resource limits. For - example, <command>1G</command> can be used instead of - <command>1073741824</command> to specify a limit of - one - gigabyte. <command>unlimited</command> requests - unlimited use, or the - maximum available amount. <command>default</command> - uses the limit - that was in force when the server was started. See the description - of <command>size_spec</command> in <xref linkend="configuration_file_elements"/>. - </para> - - <para> - The following options set operating system resource limits for - the name server process. Some operating systems don't support - some or - any of the limits. On such systems, a warning will be issued if - the - unsupported limit is used. - </para> - - <variablelist> - - <varlistentry> - <term><command>coresize</command></term> - <listitem> - <para> - The maximum size of a core dump. The default - is <literal>default</literal>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>datasize</command></term> - <listitem> - <para> - The maximum amount of data memory the server - may use. The default is <literal>default</literal>. - This is a hard limit on server memory usage. - If the server attempts to allocate memory in excess of this - limit, the allocation will fail, which may in turn leave - the server unable to perform DNS service. Therefore, - this option is rarely useful as a way of limiting the - amount of memory used by the server, but it can be used - to raise an operating system data size limit that is - too small by default. If you wish to limit the amount - of memory used by the server, use the - <command>max-cache-size</command> and - <command>recursive-clients</command> - options instead. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>files</command></term> - <listitem> - <para> - The maximum number of files the server - may have open concurrently. The default is <literal>unlimited</literal>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>stacksize</command></term> - <listitem> - <para> - The maximum amount of stack memory the server - may use. The default is <literal>default</literal>. - </para> - </listitem> - </varlistentry> - - </variablelist> - - </sect3> - - <sect3> - <title>Server Resource Limits</title> - - <para> - The following options set limits on the server's - resource consumption that are enforced internally by the - server rather than the operating system. - </para> - - <variablelist> - - <varlistentry> - <term><command>max-ixfr-log-size</command></term> - <listitem> - <para> - This option is obsolete; it is accepted - and ignored for BIND 8 compatibility. The option - <command>max-journal-size</command> performs a - similar function in BIND 9. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-journal-size</command></term> - <listitem> - <para> - Sets a maximum size for each journal file - (see <xref linkend="journal"/>). When the journal file - approaches - the specified size, some of the oldest transactions in the - journal - will be automatically removed. The default is - <literal>unlimited</literal>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>host-statistics-max</command></term> - <listitem> - <para> - In BIND 8, specifies the maximum number of host statistics - entries to be kept. - Not implemented in BIND 9. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>recursive-clients</command></term> - <listitem> - <para> - The maximum number of simultaneous recursive lookups - the server will perform on behalf of clients. The default - is - <literal>1000</literal>. Because each recursing - client uses a fair - bit of memory, on the order of 20 kilobytes, the value of - the - <command>recursive-clients</command> option may - have to be decreased - on hosts with limited memory. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>tcp-clients</command></term> - <listitem> - <para> - The maximum number of simultaneous client TCP - connections that the server will accept. - The default is <literal>100</literal>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-cache-size</command></term> - <listitem> - <para> - The maximum amount of memory to use for the - server's cache, in bytes. When the amount of data in the - cache - reaches this limit, the server will cause records to expire - prematurely so that the limit is not exceeded. In a server - with - multiple views, the limit applies separately to the cache of - each - view. The default is <literal>unlimited</literal>, meaning that - records are purged from the cache only when their TTLs - expire. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>tcp-listen-queue</command></term> - <listitem> - <para> - The listen queue depth. The default and minimum is 3. - If the kernel supports the accept filter "dataready" this - also controls how - many TCP connections that will be queued in kernel space - waiting for - some data before being passed to accept. Values less than 3 - will be - silently raised. - </para> - </listitem> - </varlistentry> - - </variablelist> - - </sect3> - - <sect3> - <title>Periodic Task Intervals</title> - - <variablelist> - - <varlistentry> - <term><command>cleaning-interval</command></term> - <listitem> - <para> - The server will remove expired resource records - from the cache every <command>cleaning-interval</command> minutes. - The default is 60 minutes. The maximum value is 28 days - (40320 minutes). - If set to 0, no periodic cleaning will occur. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>heartbeat-interval</command></term> - <listitem> - <para> - The server will perform zone maintenance tasks - for all zones marked as <command>dialup</command> whenever this - interval expires. The default is 60 minutes. Reasonable - values are up - to 1 day (1440 minutes). The maximum value is 28 days - (40320 minutes). - If set to 0, no zone maintenance for these zones will occur. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>interface-interval</command></term> - <listitem> - <para> - The server will scan the network interface list - every <command>interface-interval</command> - minutes. The default - is 60 minutes. The maximum value is 28 days (40320 minutes). - If set to 0, interface scanning will only occur when - the configuration file is loaded. After the scan, the - server will - begin listening for queries on any newly discovered - interfaces (provided they are allowed by the - <command>listen-on</command> configuration), and - will - stop listening on interfaces that have gone away. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>statistics-interval</command></term> - <listitem> - <para> - Name server statistics will be logged - every <command>statistics-interval</command> - minutes. The default is - 60. The maximum value is 28 days (40320 minutes). - If set to 0, no statistics will be logged. - </para><note> - <simpara> - Not yet implemented in - <acronym>BIND</acronym> 9. - </simpara> - </note> - </listitem> - </varlistentry> - - </variablelist> - - </sect3> - - <sect3 id="topology"> - <title>Topology</title> - - <para> - All other things being equal, when the server chooses a name - server - to query from a list of name servers, it prefers the one that is - topologically closest to itself. The <command>topology</command> statement - takes an <command>address_match_list</command> and - interprets it - in a special way. Each top-level list element is assigned a - distance. - Non-negated elements get a distance based on their position in the - list, where the closer the match is to the start of the list, the - shorter the distance is between it and the server. A negated match - will be assigned the maximum distance from the server. If there - is no match, the address will get a distance which is further than - any non-negated list element, and closer than any negated element. - For example, - </para> - -<programlisting>topology { - 10/8; - !1.2.3/24; - { 1.2/16; 3/8; }; -};</programlisting> - - <para> - will prefer servers on network 10 the most, followed by hosts - on network 1.2.0.0 (netmask 255.255.0.0) and network 3, with the - exception of hosts on network 1.2.3 (netmask 255.255.255.0), which - is preferred least of all. - </para> - <para> - The default topology is - </para> - -<programlisting> topology { localhost; localnets; }; -</programlisting> - - <note> - <simpara> - The <command>topology</command> option - is not implemented in <acronym>BIND</acronym> 9. - </simpara> - </note> - </sect3> - - <sect3 id="the_sortlist_statement"> - - <title>The <command>sortlist</command> Statement</title> - - <para> - The response to a DNS query may consist of multiple resource - records (RRs) forming a resource records set (RRset). - The name server will normally return the - RRs within the RRset in an indeterminate order - (but see the <command>rrset-order</command> - statement in <xref linkend="rrset_ordering"/>). - The client resolver code should rearrange the RRs as appropriate, - that is, using any addresses on the local net in preference to - other addresses. - However, not all resolvers can do this or are correctly - configured. - When a client is using a local server, the sorting can be performed - in the server, based on the client's address. This only requires - configuring the name servers, not all the clients. - </para> - - <para> - The <command>sortlist</command> statement (see below) - takes - an <command>address_match_list</command> and - interprets it even - more specifically than the <command>topology</command> - statement - does (<xref linkend="topology"/>). - Each top level statement in the <command>sortlist</command> must - itself be an explicit <command>address_match_list</command> with - one or two elements. The first element (which may be an IP - address, - an IP prefix, an ACL name or a nested <command>address_match_list</command>) - of each top level list is checked against the source address of - the query until a match is found. - </para> - <para> - Once the source address of the query has been matched, if - the top level statement contains only one element, the actual - primitive - element that matched the source address is used to select the - address - in the response to move to the beginning of the response. If the - statement is a list of two elements, then the second element is - treated the same as the <command>address_match_list</command> in - a <command>topology</command> statement. Each top - level element - is assigned a distance and the address in the response with the - minimum - distance is moved to the beginning of the response. - </para> - <para> - In the following example, any queries received from any of - the addresses of the host itself will get responses preferring - addresses - on any of the locally connected networks. Next most preferred are - addresses - on the 192.168.1/24 network, and after that either the - 192.168.2/24 - or - 192.168.3/24 network with no preference shown between these two - networks. Queries received from a host on the 192.168.1/24 network - will prefer other addresses on that network to the 192.168.2/24 - and - 192.168.3/24 networks. Queries received from a host on the - 192.168.4/24 - or the 192.168.5/24 network will only prefer other addresses on - their directly connected networks. - </para> - -<programlisting>sortlist { - { localhost; // IF the local host - { localnets; // THEN first fit on the - 192.168.1/24; // following nets - { 192.168.2/24; 192.168.3/24; }; }; }; - { 192.168.1/24; // IF on class C 192.168.1 - { 192.168.1/24; // THEN use .1, or .2 or .3 - { 192.168.2/24; 192.168.3/24; }; }; }; - { 192.168.2/24; // IF on class C 192.168.2 - { 192.168.2/24; // THEN use .2, or .1 or .3 - { 192.168.1/24; 192.168.3/24; }; }; }; - { 192.168.3/24; // IF on class C 192.168.3 - { 192.168.3/24; // THEN use .3, or .1 or .2 - { 192.168.1/24; 192.168.2/24; }; }; }; - { { 192.168.4/24; 192.168.5/24; }; // if .4 or .5, prefer that net - }; -};</programlisting> - - <para> - The following example will give reasonable behavior for the - local host and hosts on directly connected networks. It is similar - to the behavior of the address sort in <acronym>BIND</acronym> 4.9.x. Responses sent - to queries from the local host will favor any of the directly - connected - networks. Responses sent to queries from any other hosts on a - directly - connected network will prefer addresses on that same network. - Responses - to other queries will not be sorted. - </para> - -<programlisting>sortlist { - { localhost; localnets; }; - { localnets; }; -}; -</programlisting> - - </sect3> - <sect3 id="rrset_ordering"> - <title id="rrset_ordering_title">RRset Ordering</title> - <para> - When multiple records are returned in an answer it may be - useful to configure the order of the records placed into the - response. - The <command>rrset-order</command> statement permits - configuration - of the ordering of the records in a multiple record response. - See also the <command>sortlist</command> statement, - <xref linkend="the_sortlist_statement"/>. - </para> - - <para> - An <command>order_spec</command> is defined as - follows: - </para> - <para> - <optional>class <replaceable>class_name</replaceable></optional> - <optional>type <replaceable>type_name</replaceable></optional> - <optional>name <replaceable>"domain_name"</replaceable></optional> - order <replaceable>ordering</replaceable> - </para> - <para> - If no class is specified, the default is <command>ANY</command>. - If no type is specified, the default is <command>ANY</command>. - If no name is specified, the default is "<command>*</command>" (asterisk). - </para> - <para> - The legal values for <command>ordering</command> are: - </para> - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="0.750in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="3.750in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para><command>fixed</command></para> - </entry> - <entry colname="2"> - <para> - Records are returned in the order they - are defined in the zone file. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>random</command></para> - </entry> - <entry colname="2"> - <para> - Records are returned in some random order. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>cyclic</command></para> - </entry> - <entry colname="2"> - <para> - Records are returned in a round-robin - order. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - <para> - For example: - </para> - -<programlisting>rrset-order { - class IN type A name "host.example.com" order random; - order cyclic; -}; -</programlisting> - - <para> - will cause any responses for type A records in class IN that - have "<literal>host.example.com</literal>" as a - suffix, to always be returned - in random order. All other records are returned in cyclic order. - </para> - <para> - If multiple <command>rrset-order</command> statements - appear, - they are not combined — the last one applies. - </para> - - <note> - <simpara> - The <command>rrset-order</command> statement - is not yet fully implemented in <acronym>BIND</acronym> 9. - BIND 9 currently does not fully support "fixed" ordering. - </simpara> - </note> - </sect3> - - <sect3 id="tuning"> - <title>Tuning</title> - - <variablelist> - - <varlistentry> - <term><command>lame-ttl</command></term> - <listitem> - <para> - Sets the number of seconds to cache a - lame server indication. 0 disables caching. (This is - <emphasis role="bold">NOT</emphasis> recommended.) - The default is <literal>600</literal> (10 minutes) and the - maximum value is - <literal>1800</literal> (30 minutes). - </para> - - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-ncache-ttl</command></term> - <listitem> - <para> - To reduce network traffic and increase performance, - the server stores negative answers. <command>max-ncache-ttl</command> is - used to set a maximum retention time for these answers in - the server - in seconds. The default - <command>max-ncache-ttl</command> is <literal>10800</literal> seconds (3 hours). - <command>max-ncache-ttl</command> cannot exceed - 7 days and will - be silently truncated to 7 days if set to a greater value. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-cache-ttl</command></term> - <listitem> - <para> - Sets the maximum time for which the server will - cache ordinary (positive) answers. The default is - one week (7 days). - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>min-roots</command></term> - <listitem> - <para> - The minimum number of root servers that - is required for a request for the root servers to be - accepted. The default - is <userinput>2</userinput>. - </para> - <note> - <simpara> - Not implemented in <acronym>BIND</acronym> 9. - </simpara> - </note> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>sig-validity-interval</command></term> - <listitem> - <para> - Specifies the number of days into the - future when DNSSEC signatures automatically generated as a - result - of dynamic updates (<xref linkend="dynamic_update"/>) - will expire. The default is <literal>30</literal> days. - The maximum value is 10 years (3660 days). The signature - inception time is unconditionally set to one hour before the - current time - to allow for a limited amount of clock skew. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>min-refresh-time</command></term> - <term><command>max-refresh-time</command></term> - <term><command>min-retry-time</command></term> - <term><command>max-retry-time</command></term> - <listitem> - <para> - These options control the server's behavior on refreshing a - zone - (querying for SOA changes) or retrying failed transfers. - Usually the SOA values for the zone are used, but these - values - are set by the master, giving slave server administrators - little - control over their contents. - </para> - <para> - These options allow the administrator to set a minimum and - maximum - refresh and retry time either per-zone, per-view, or - globally. - These options are valid for slave and stub zones, - and clamp the SOA refresh and retry times to the specified - values. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>edns-udp-size</command></term> - <listitem> - <para> - Sets the advertised EDNS UDP buffer size in bytes. Valid - values are 512 to 4096 (values outside this range - will be silently adjusted). The default value is - 4096. The usual reason for setting edns-udp-size to - a non-default value is to get UDP answers to pass - through broken firewalls that block fragmented - packets and/or block UDP packets that are greater - than 512 bytes. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-udp-size</command></term> - <listitem> - <para> - Sets the maximum EDNS UDP message size named will - send in bytes. Valid values are 512 to 4096 (values outside - this range will be silently adjusted). The default - value is 4096. The usual reason for setting - max-udp-size to a non-default value is to get UDP - answers to pass through broken firewalls that - block fragmented packets and/or block UDP packets - that are greater than 512 bytes. - This is independent of the advertised receive - buffer (<command>edns-udp-size</command>). - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>masterfile-format</command></term> - <listitem> - <para>Specifies - the file format of zone files (see - <xref linkend="zonefile_format"/>). - The default value is <constant>text</constant>, which is the - standard textual representation. Files in other formats - than <constant>text</constant> are typically expected - to be generated by the <command>named-compilezone</command> tool. - Note that when a zone file in a different format than - <constant>text</constant> is loaded, <command>named</command> - may omit some of the checks which would be performed for a - file in the <constant>text</constant> format. In particular, - <command>check-names</command> checks do not apply - for the <constant>raw</constant> format. This means - a zone file in the <constant>raw</constant> format - must be generated with the same check level as that - specified in the <command>named</command> configuration - file. This statement sets the - <command>masterfile-format</command> for all zones, - but can be overridden on a per-zone or per-view basis - by including a <command>masterfile-format</command> - statement within the <command>zone</command> or - <command>view</command> block in the configuration - file. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>clients-per-query</command></term> - <term><command>max-clients-per-query</command></term> - <listitem> - <para>These set the - initial value (minimum) and maximum number of recursive - simultanious clients for any given query - (<qname,qtype,qclass>) that the server will accept - before dropping additional clients. named will attempt to - self tune this value and changes will be logged. The - default values are 10 and 100. - </para> - <para> - This value should reflect how many queries come in for - a given name in the time it takes to resolve that name. - If the number of queries exceed this value, named will - assume that it is dealing with a non-responsive zone - and will drop additional queries. If it gets a response - after dropping queries, it will raise the estimate. The - estimate will then be lowered in 20 minutes if it has - remained unchanged. - </para> - <para> - If <command>clients-per-query</command> is set to zero, - then there is no limit on the number of clients per query - and no queries will be dropped. - </para> - <para> - If <command>max-clients-per-query</command> is set to zero, - then there is no upper bound other than imposed by - <command>recursive-clients</command>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>notify-delay</command></term> - <listitem> - <para> - The delay, in seconds, between sending sets of notify - messages for a zone. The default is zero. - </para> - </listitem> - </varlistentry> - </variablelist> - - </sect3> - - <sect3 id="builtin"> - <title>Built-in server information zones</title> - - <para> - The server provides some helpful diagnostic information - through a number of built-in zones under the - pseudo-top-level-domain <literal>bind</literal> in the - <command>CHAOS</command> class. These zones are part - of a - built-in view (see <xref linkend="view_statement_grammar"/>) of - class - <command>CHAOS</command> which is separate from the - default view of - class <command>IN</command>; therefore, any global - server options - such as <command>allow-query</command> do not apply - the these zones. - If you feel the need to disable these zones, use the options - below, or hide the built-in <command>CHAOS</command> - view by - defining an explicit view of class <command>CHAOS</command> - that matches all clients. - </para> - - <variablelist> - - <varlistentry> - <term><command>version</command></term> - <listitem> - <para> - The version the server should report - via a query of the name <literal>version.bind</literal> - with type <command>TXT</command>, class <command>CHAOS</command>. - The default is the real version number of this server. - Specifying <command>version none</command> - disables processing of the queries. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>hostname</command></term> - <listitem> - <para> - The hostname the server should report via a query of - the name <filename>hostname.bind</filename> - with type <command>TXT</command>, class <command>CHAOS</command>. - This defaults to the hostname of the machine hosting the - name server as - found by the gethostname() function. The primary purpose of such queries - is to - identify which of a group of anycast servers is actually - answering your queries. Specifying <command>hostname none;</command> - disables processing of the queries. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>server-id</command></term> - <listitem> - <para> - The ID of the server should report via a query of - the name <filename>ID.SERVER</filename> - with type <command>TXT</command>, class <command>CHAOS</command>. - The primary purpose of such queries is to - identify which of a group of anycast servers is actually - answering your queries. Specifying <command>server-id none;</command> - disables processing of the queries. - Specifying <command>server-id hostname;</command> will cause named to - use the hostname as found by the gethostname() function. - The default <command>server-id</command> is <command>none</command>. - </para> - </listitem> - </varlistentry> - - </variablelist> - - </sect3> - - <sect3 id="empty"> - <title>Built-in Empty Zones</title> - <para> - Named has some built-in empty zones (SOA and NS records only). - These are for zones that should normally be answered locally - and which queries should not be sent to the Internet's root - servers. The official servers which cover these namespaces - return NXDOMAIN responses to these queries. In particular, - these cover the reverse namespace for addresses from RFC 1918 and - RFC 3330. They also include the reverse namespace for IPv6 local - address (locally assigned), IPv6 link local addresses, the IPv6 - loopback address and the IPv6 unknown addresss. - </para> - <para> - Named will attempt to determine if a built in zone already exists - or is active (covered by a forward-only forwarding declaration) - and will not not create a empty zone in that case. - </para> - <para> - The current list of empty zones is: - <itemizedlist> - <listitem>10.IN-ADDR.ARPA</listitem> - <listitem>127.IN-ADDR.ARPA</listitem> - <listitem>254.169.IN-ADDR.ARPA</listitem> - <listitem>16.172.IN-ADDR.ARPA</listitem> - <listitem>17.172.IN-ADDR.ARPA</listitem> - <listitem>18.172.IN-ADDR.ARPA</listitem> - <listitem>19.172.IN-ADDR.ARPA</listitem> - <listitem>20.172.IN-ADDR.ARPA</listitem> - <listitem>21.172.IN-ADDR.ARPA</listitem> - <listitem>22.172.IN-ADDR.ARPA</listitem> - <listitem>23.172.IN-ADDR.ARPA</listitem> - <listitem>24.172.IN-ADDR.ARPA</listitem> - <listitem>25.172.IN-ADDR.ARPA</listitem> - <listitem>26.172.IN-ADDR.ARPA</listitem> - <listitem>27.172.IN-ADDR.ARPA</listitem> - <listitem>28.172.IN-ADDR.ARPA</listitem> - <listitem>29.172.IN-ADDR.ARPA</listitem> - <listitem>30.172.IN-ADDR.ARPA</listitem> - <listitem>31.172.IN-ADDR.ARPA</listitem> - <listitem>168.192.IN-ADDR.ARPA</listitem> - <listitem>2.0.192.IN-ADDR.ARPA</listitem> - <listitem>0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA</listitem> - <listitem>1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA</listitem> - <listitem>D.F.IP6.ARPA</listitem> - <listitem>8.E.F.IP6.ARPA</listitem> - <listitem>9.E.F.IP6.ARPA</listitem> - <listitem>A.E.F.IP6.ARPA</listitem> - <listitem>B.E.F.IP6.ARPA</listitem> - </itemizedlist> - </para> - <para> - Empty zones are settable at the view level and only apply to - views of class IN. Disabled empty zones are only inherited - from options if there are no disabled empty zones specified - at the view level. To override the options list of disabled - zones, you can disable the root zone at the view level, for example: -<programlisting> - disable-empty-zone "."; -</programlisting> - </para> - <para> - If you are using the address ranges covered here, you should - already have reverse zones covering the addresses you use. - In practice this appears to not be the case with many queries - being made to the infrastructure servers for names in these - spaces. So many in fact that sacrificial servers were needed - to be deployed to channel the query load away from the - infrastructure servers. - </para> - <note> - The real parent servers for these zones should disable all - empty zone under the parent zone they serve. For the real - root servers, this is all built in empty zones. This will - enable them to return referrals to deeper in the tree. - </note> - <variablelist> - <varlistentry> - <term><command>empty-server</command></term> - <listitem> - <para> - Specify what server name will appear in the returned - SOA record for empty zones. If none is specified, then - the zone's name will be used. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>empty-contact</command></term> - <listitem> - <para> - Specify what contact name will appear in the returned - SOA record for empty zones. If none is specified, then - "." will be used. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>empty-zones-enable</command></term> - <listitem> - <para> - Enable or disable all empty zones. By default they - are enabled. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>disable-empty-zone</command></term> - <listitem> - <para> - Disable individual empty zones. By default none are - disabled. This option can be specified multiple times. - </para> - </listitem> - </varlistentry> - </variablelist> - </sect3> - - <sect3 id="statsfile"> - <title>The Statistics File</title> - - <para> - The statistics file generated by <acronym>BIND</acronym> 9 - is similar, but not identical, to that - generated by <acronym>BIND</acronym> 8. - </para> - <para> - The statistics dump begins with a line, like: - </para> - <para> - <command>+++ Statistics Dump +++ (973798949)</command> - </para> - <para> - The number in parentheses is a standard - Unix-style timestamp, measured as seconds since January 1, 1970. - Following - that line are a series of lines containing a counter type, the - value of the - counter, optionally a zone name, and optionally a view name. - The lines without view and zone listed are global statistics for - the entire server. - Lines with a zone and view name for the given view and zone (the - view name is - omitted for the default view). - </para> - <para> - The statistics dump ends with the line where the - number is identical to the number in the beginning line; for example: - </para> - <para> - <command>--- Statistics Dump --- (973798949)</command> - </para> - <para> - The following statistics counters are maintained: - </para> - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.150in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="3.350in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para><command>success</command></para> - </entry> - <entry colname="2"> - <para> - The number of - successful queries made to the server or zone. A - successful query - is defined as query which returns a NOERROR response - with at least - one answer RR. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>referral</command></para> - </entry> - <entry colname="2"> - <para> - The number of queries which resulted - in referral responses. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>nxrrset</command></para> - </entry> - <entry colname="2"> - <para> - The number of queries which resulted in - NOERROR responses with no data. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>nxdomain</command></para> - </entry> - <entry colname="2"> - <para> - The number - of queries which resulted in NXDOMAIN responses. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>failure</command></para> - </entry> - <entry colname="2"> - <para> - The number of queries which resulted in a - failure response other than those above. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>recursion</command></para> - </entry> - <entry colname="2"> - <para> - The number of queries which caused the server - to perform recursion in order to find the final answer. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>duplicate</command></para> - </entry> - <entry colname="2"> - <para> - The number of queries which the server attempted to - recurse but discover a existing query with the same - IP address, port, query id, name, type and class - already being processed. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>dropped</command></para> - </entry> - <entry colname="2"> - <para> - The number of queries for which the server - discovered a excessive number of existing - recursive queries for the same name, type and - class and were subsequently dropped. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - - <para> - Each query received by the server will cause exactly one of - <command>success</command>, - <command>referral</command>, - <command>nxrrset</command>, - <command>nxdomain</command>, or - <command>failure</command> - to be incremented, and may additionally cause the - <command>recursion</command> counter to be - incremented. - </para> - - </sect3> - - <sect3 id="acache"> - <title>Additional Section Caching</title> - - <para> - The additional section cache, also called <command>acache</command>, - is an internal cache to improve the response performance of BIND 9. - When additional section caching is enabled, BIND 9 will - cache an internal short-cut to the additional section content for - each answer RR. - Note that <command>acache</command> is an internal caching - mechanism of BIND 9, and is not related to the DNS caching - server function. - </para> - - <para> - Additional section caching does not change the - response content (except the RRsets ordering of the additional - section, see below), but can improve the response performance - significantly. - It is particularly effective when BIND 9 acts as an authoritative - server for a zone that has many delegations with many glue RRs. - </para> - - <para> - In order to obtain the maximum performance improvement - from additional section caching, setting - <command>additional-from-cache</command> - to <command>no</command> is recommended, since the current - implementation of <command>acache</command> - does not short-cut of additional section information from the - DNS cache data. - </para> - - <para> - One obvious disadvantage of <command>acache</command> is - that it requires much more - memory for the internal cached data. - Thus, if the response performance does not matter and memory - consumption is much more critical, the - <command>acache</command> mechanism can be - disabled by setting <command>acache-enable</command> to - <command>no</command>. - It is also possible to specify the upper limit of memory - consumption - for acache by using <command>max-acache-size</command>. - </para> - - <para> - Additional section caching also has a minor effect on the - RRset ordering in the additional section. - Without <command>acache</command>, - <command>cyclic</command> order is effective for the additional - section as well as the answer and authority sections. - However, additional section caching fixes the ordering when it - first caches an RRset for the additional section, and the same - ordering will be kept in succeeding responses, regardless of the - setting of <command>rrset-order</command>. - The effect of this should be minor, however, since an - RRset in the additional section - typically only contains a small number of RRs (and in many cases - it only contains a single RR), in which case the - ordering does not matter much. - </para> - - <para> - The following is a summary of options related to - <command>acache</command>. - </para> - - <variablelist> - - <varlistentry> - <term><command>acache-enable</command></term> - <listitem> - <para> - If <command>yes</command>, additional section caching is - enabled. The default value is <command>no</command>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>acache-cleaning-interval</command></term> - <listitem> - <para> - The server will remove stale cache entries, based on an LRU - based - algorithm, every <command>acache-cleaning-interval</command> minutes. - The default is 60 minutes. - If set to 0, no periodic cleaning will occur. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-acache-size</command></term> - <listitem> - <para> - The maximum amount of memory in bytes to use for the server's acache. - When the amount of data in the acache reaches this limit, - the server - will clean more aggressively so that the limit is not - exceeded. - In a server with multiple views, the limit applies - separately to the - acache of each view. - The default is <literal>unlimited</literal>, - meaning that - entries are purged from the acache only at the - periodic cleaning time. - </para> - </listitem> - </varlistentry> - - </variablelist> - - </sect3> - - </sect2> - - <sect2 id="server_statement_grammar"> - <title><command>server</command> Statement Grammar</title> - -<programlisting>server <replaceable>ip_addr[/prefixlen]</replaceable> { - <optional> bogus <replaceable>yes_or_no</replaceable> ; </optional> - <optional> provide-ixfr <replaceable>yes_or_no</replaceable> ; </optional> - <optional> request-ixfr <replaceable>yes_or_no</replaceable> ; </optional> - <optional> edns <replaceable>yes_or_no</replaceable> ; </optional> - <optional> edns-udp-size <replaceable>number</replaceable> ; </optional> - <optional> max-udp-size <replaceable>number</replaceable> ; </optional> - <optional> transfers <replaceable>number</replaceable> ; </optional> - <optional> transfer-format <replaceable>( one-answer | many-answers )</replaceable> ; ]</optional> - <optional> keys <replaceable>{ string ; <optional> string ; <optional>...</optional></optional> }</replaceable> ; </optional> - <optional> transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> notify-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> notify-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> query-source <optional> address ( <replaceable>ip_addr</replaceable> | <replaceable>*</replaceable> ) </optional> <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional>; </optional> - <optional> query-source-v6 <optional> address ( <replaceable>ip_addr</replaceable> | <replaceable>*</replaceable> ) </optional> <optional> port ( <replaceable>ip_port</replaceable> | <replaceable>*</replaceable> ) </optional>; </optional> -}; -</programlisting> - - </sect2> - - <sect2 id="server_statement_definition_and_usage"> - <title><command>server</command> Statement Definition and - Usage</title> - - <para> - The <command>server</command> statement defines - characteristics - to be associated with a remote name server. If a prefix length is - specified, then a range of servers is covered. Only the most - specific - server clause applies regardless of the order in - <filename>named.conf</filename>. - </para> - - <para> - The <command>server</command> statement can occur at - the top level of the - configuration file or inside a <command>view</command> - statement. - If a <command>view</command> statement contains - one or more <command>server</command> statements, only - those - apply to the view and any top-level ones are ignored. - If a view contains no <command>server</command> - statements, - any top-level <command>server</command> statements are - used as - defaults. - </para> - - <para> - If you discover that a remote server is giving out bad data, - marking it as bogus will prevent further queries to it. The - default - value of <command>bogus</command> is <command>no</command>. - </para> - <para> - The <command>provide-ixfr</command> clause determines - whether - the local server, acting as master, will respond with an - incremental - zone transfer when the given remote server, a slave, requests it. - If set to <command>yes</command>, incremental transfer - will be provided - whenever possible. If set to <command>no</command>, - all transfers - to the remote server will be non-incremental. If not set, the - value - of the <command>provide-ixfr</command> option in the - view or - global options block is used as a default. - </para> - - <para> - The <command>request-ixfr</command> clause determines - whether - the local server, acting as a slave, will request incremental zone - transfers from the given remote server, a master. If not set, the - value of the <command>request-ixfr</command> option in - the view or - global options block is used as a default. - </para> - - <para> - IXFR requests to servers that do not support IXFR will - automatically - fall back to AXFR. Therefore, there is no need to manually list - which servers support IXFR and which ones do not; the global - default - of <command>yes</command> should always work. - The purpose of the <command>provide-ixfr</command> and - <command>request-ixfr</command> clauses is - to make it possible to disable the use of IXFR even when both - master - and slave claim to support it, for example if one of the servers - is buggy and crashes or corrupts data when IXFR is used. - </para> - - <para> - The <command>edns</command> clause determines whether - the local server will attempt to use EDNS when communicating - with the remote server. The default is <command>yes</command>. - </para> - - <para> - The <command>edns-udp-size</command> option sets the EDNS UDP size - that is advertised by named when querying the remote server. - Valid values are 512 to 4096 bytes (values outside this range will be - silently adjusted). This option is useful when you wish to - advertises a different value to this server than the value you - advertise globally, for example, when there is a firewall at the - remote site that is blocking large replies. - </para> - - <para> - The <command>max-udp-size</command> option sets the - maximum EDNS UDP message size named will send. Valid - values are 512 to 4096 bytes (values outside this range will - be silently adjusted). This option is useful when you - know that there is a firewall that is blocking large - replies from named. - </para> - - <para> - The server supports two zone transfer methods. The first, <command>one-answer</command>, - uses one DNS message per resource record transferred. <command>many-answers</command> packs - as many resource records as possible into a message. <command>many-answers</command> is - more efficient, but is only known to be understood by <acronym>BIND</acronym> 9, <acronym>BIND</acronym> - 8.x, and patched versions of <acronym>BIND</acronym> - 4.9.5. You can specify which method - to use for a server with the <command>transfer-format</command> option. - If <command>transfer-format</command> is not - specified, the <command>transfer-format</command> - specified - by the <command>options</command> statement will be - used. - </para> - - <para><command>transfers</command> - is used to limit the number of concurrent inbound zone - transfers from the specified server. If no - <command>transfers</command> clause is specified, the - limit is set according to the - <command>transfers-per-ns</command> option. - </para> - - <para> - The <command>keys</command> clause identifies a - <command>key_id</command> defined by the <command>key</command> statement, - to be used for transaction security (TSIG, <xref linkend="tsig"/>) - when talking to the remote server. - When a request is sent to the remote server, a request signature - will be generated using the key specified here and appended to the - message. A request originating from the remote server is not - required - to be signed by this key. - </para> - - <para> - Although the grammar of the <command>keys</command> - clause - allows for multiple keys, only a single key per server is - currently - supported. - </para> - - <para> - The <command>transfer-source</command> and - <command>transfer-source-v6</command> clauses specify - the IPv4 and IPv6 source - address to be used for zone transfer with the remote server, - respectively. - For an IPv4 remote server, only <command>transfer-source</command> can - be specified. - Similarly, for an IPv6 remote server, only - <command>transfer-source-v6</command> can be - specified. - For more details, see the description of - <command>transfer-source</command> and - <command>transfer-source-v6</command> in - <xref linkend="zone_transfers"/>. - </para> - - <para> - The <command>notify-source</command> and - <command>notify-source-v6</command> clauses specify the - IPv4 and IPv6 source address to be used for notify - messages sent to remote servers, respectively. For an - IPv4 remote server, only <command>notify-source</command> - can be specified. Similarly, for an IPv6 remote server, - only <command>notify-source-v6</command> can be specified. - </para> - - <para> - The <command>query-source</command> and - <command>query-source-v6</command> clauses specify the - IPv4 and IPv6 source address to be used for queries - sent to remote servers, respectively. For an IPv4 - remote server, only <command>query-source</command> can - be specified. Similarly, for an IPv6 remote server, - only <command>query-source-v6</command> can be specified. - </para> - - </sect2> - - <sect2> - <title><command>trusted-keys</command> Statement Grammar</title> - -<programlisting>trusted-keys { - <replaceable>string</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>string</replaceable> ; - <optional> <replaceable>string</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>string</replaceable> ; <optional>...</optional></optional> -}; -</programlisting> - - </sect2> - <sect2> - <title><command>trusted-keys</command> Statement Definition - and Usage</title> - <para> - The <command>trusted-keys</command> statement defines - DNSSEC security roots. DNSSEC is described in <xref - linkend="DNSSEC"/>. A security root is defined when the - public key for a non-authoritative zone is known, but - cannot be securely obtained through DNS, either because - it is the DNS root zone or because its parent zone is - unsigned. Once a key has been configured as a trusted - key, it is treated as if it had been validated and - proven secure. The resolver attempts DNSSEC validation - on all DNS data in subdomains of a security root. - </para> - <para> - All keys (and corresponding zones) listed in - <command>trusted-keys</command> are deemed to exist regardless - of what parent zones say. Similarly for all keys listed in - <command>trusted-keys</command> only those keys are - used to validate the DNSKEY RRset. The parent's DS RRset - will not be used. - </para> - <para> - The <command>trusted-keys</command> statement can contain - multiple key entries, each consisting of the key's - domain name, flags, protocol, algorithm, and the Base-64 - representation of the key data. - </para> - </sect2> - - <sect2 id="view_statement_grammar"> - <title><command>view</command> Statement Grammar</title> - -<programlisting>view <replaceable>view_name</replaceable> - <optional><replaceable>class</replaceable></optional> { - match-clients { <replaceable>address_match_list</replaceable> }; - match-destinations { <replaceable>address_match_list</replaceable> }; - match-recursive-only <replaceable>yes_or_no</replaceable> ; - <optional> <replaceable>view_option</replaceable>; ...</optional> - <optional> <replaceable>zone_statement</replaceable>; ...</optional> -}; -</programlisting> - - </sect2> - <sect2> - <title><command>view</command> Statement Definition and Usage</title> - - <para> - The <command>view</command> statement is a powerful - feature - of <acronym>BIND</acronym> 9 that lets a name server - answer a DNS query differently - depending on who is asking. It is particularly useful for - implementing - split DNS setups without having to run multiple servers. - </para> - - <para> - Each <command>view</command> statement defines a view - of the - DNS namespace that will be seen by a subset of clients. A client - matches - a view if its source IP address matches the - <varname>address_match_list</varname> of the view's - <command>match-clients</command> clause and its - destination IP address matches - the <varname>address_match_list</varname> of the - view's - <command>match-destinations</command> clause. If not - specified, both - <command>match-clients</command> and <command>match-destinations</command> - default to matching all addresses. In addition to checking IP - addresses - <command>match-clients</command> and <command>match-destinations</command> - can also take <command>keys</command> which provide an - mechanism for the - client to select the view. A view can also be specified - as <command>match-recursive-only</command>, which - means that only recursive - requests from matching clients will match that view. - The order of the <command>view</command> statements is - significant — - a client request will be resolved in the context of the first - <command>view</command> that it matches. - </para> - - <para> - Zones defined within a <command>view</command> - statement will - be only be accessible to clients that match the <command>view</command>. - By defining a zone of the same name in multiple views, different - zone data can be given to different clients, for example, - "internal" - and "external" clients in a split DNS setup. - </para> - - <para> - Many of the options given in the <command>options</command> statement - can also be used within a <command>view</command> - statement, and then - apply only when resolving queries with that view. When no - view-specific - value is given, the value in the <command>options</command> statement - is used as a default. Also, zone options can have default values - specified - in the <command>view</command> statement; these - view-specific defaults - take precedence over those in the <command>options</command> statement. - </para> - - <para> - Views are class specific. If no class is given, class IN - is assumed. Note that all non-IN views must contain a hint zone, - since only the IN class has compiled-in default hints. - </para> - - <para> - If there are no <command>view</command> statements in - the config - file, a default view that matches any client is automatically - created - in class IN. Any <command>zone</command> statements - specified on - the top level of the configuration file are considered to be part - of - this default view, and the <command>options</command> - statement will - apply to the default view. If any explicit <command>view</command> - statements are present, all <command>zone</command> - statements must - occur inside <command>view</command> statements. - </para> - - <para> - Here is an example of a typical split DNS setup implemented - using <command>view</command> statements: - </para> - -<programlisting>view "internal" { - // This should match our internal networks. - match-clients { 10.0.0.0/8; }; - - // Provide recursive service to internal clients only. - recursion yes; - - // Provide a complete view of the example.com zone - // including addresses of internal hosts. - zone "example.com" { - type master; - file "example-internal.db"; - }; -}; - -view "external" { - // Match all clients not matched by the previous view. - match-clients { any; }; - - // Refuse recursive service to external clients. - recursion no; - - // Provide a restricted view of the example.com zone - // containing only publicly accessible hosts. - zone "example.com" { - type master; - file "example-external.db"; - }; -}; -</programlisting> - - </sect2> - <sect2 id="zone_statement_grammar"> - <title><command>zone</command> - Statement Grammar</title> - -<programlisting>zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replaceable></optional> { - type master; - <optional> allow-query { <replaceable>address_match_list</replaceable> }; </optional> - <optional> allow-transfer { <replaceable>address_match_list</replaceable> }; </optional> - <optional> allow-update { <replaceable>address_match_list</replaceable> }; </optional> - <optional> update-policy { <replaceable>update_policy_rule</replaceable> <optional>...</optional> }; </optional> - <optional> also-notify { <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional> - <optional> check-names (<constant>warn</constant>|<constant>fail</constant>|<constant>ignore</constant>) ; </optional> - <optional> check-mx (<constant>warn</constant>|<constant>fail</constant>|<constant>ignore</constant>) ; </optional> - <optional> check-wildcard <replaceable>yes_or_no</replaceable>; </optional> - <optional> check-integrity <replaceable>yes_or_no</replaceable> ; </optional> - <optional> dialup <replaceable>dialup_option</replaceable> ; </optional> - <optional> file <replaceable>string</replaceable> ; </optional> - <optional> masterfile-format (<constant>text</constant>|<constant>raw</constant>) ; </optional> - <optional> journal <replaceable>string</replaceable> ; </optional> - <optional> forward (<constant>only</constant>|<constant>first</constant>) ; </optional> - <optional> forwarders { <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional> - <optional> ixfr-base <replaceable>string</replaceable> ; </optional> - <optional> ixfr-tmp-file <replaceable>string</replaceable> ; </optional> - <optional> maintain-ixfr-base <replaceable>yes_or_no</replaceable> ; </optional> - <optional> max-ixfr-log-size <replaceable>number</replaceable> ; </optional> - <optional> max-transfer-idle-out <replaceable>number</replaceable> ; </optional> - <optional> max-transfer-time-out <replaceable>number</replaceable> ; </optional> - <optional> notify <replaceable>yes_or_no</replaceable> | <replaceable>explicit</replaceable> | <replaceable>master-only</replaceable> ; </optional> - <optional> notify-delay <replaceable>seconds</replaceable> ; </optional> - <optional> pubkey <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>string</replaceable> ; </optional> - <optional> notify-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> notify-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> zone-statistics <replaceable>yes_or_no</replaceable> ; </optional> - <optional> sig-validity-interval <replaceable>number</replaceable> ; </optional> - <optional> database <replaceable>string</replaceable> ; </optional> - <optional> min-refresh-time <replaceable>number</replaceable> ; </optional> - <optional> max-refresh-time <replaceable>number</replaceable> ; </optional> - <optional> min-retry-time <replaceable>number</replaceable> ; </optional> - <optional> max-retry-time <replaceable>number</replaceable> ; </optional> - <optional> key-directory <replaceable>path_name</replaceable>; </optional> - <optional> zero-no-soa-ttl <replaceable>yes_or_no</replaceable> ; </optional> -}; - -zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replaceable></optional> { - type slave; - <optional> allow-notify { <replaceable>address_match_list</replaceable> }; </optional> - <optional> allow-query { <replaceable>address_match_list</replaceable> }; </optional> - <optional> allow-transfer { <replaceable>address_match_list</replaceable> }; </optional> - <optional> allow-update-forwarding { <replaceable>address_match_list</replaceable> }; </optional> - <optional> update-check-ksk <replaceable>yes_or_no</replaceable>; </optional> - <optional> also-notify { <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional> - <optional> check-names (<constant>warn</constant>|<constant>fail</constant>|<constant>ignore</constant>) ; </optional> - <optional> dialup <replaceable>dialup_option</replaceable> ; </optional> - <optional> file <replaceable>string</replaceable> ; </optional> - <optional> masterfile-format (<constant>text</constant>|<constant>raw</constant>) ; </optional> - <optional> journal <replaceable>string</replaceable> ; </optional> - <optional> forward (<constant>only</constant>|<constant>first</constant>) ; </optional> - <optional> forwarders { <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional> - <optional> ixfr-base <replaceable>string</replaceable> ; </optional> - <optional> ixfr-tmp-file <replaceable>string</replaceable> ; </optional> - <optional> maintain-ixfr-base <replaceable>yes_or_no</replaceable> ; </optional> - <optional> masters <optional>port <replaceable>ip_port</replaceable></optional> { ( <replaceable>masters_list</replaceable> | <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> <optional>key <replaceable>key</replaceable></optional> ) ; <optional>...</optional> }; </optional> - <optional> max-ixfr-log-size <replaceable>number</replaceable> ; </optional> - <optional> max-transfer-idle-in <replaceable>number</replaceable> ; </optional> - <optional> max-transfer-idle-out <replaceable>number</replaceable> ; </optional> - <optional> max-transfer-time-in <replaceable>number</replaceable> ; </optional> - <optional> max-transfer-time-out <replaceable>number</replaceable> ; </optional> - <optional> notify <replaceable>yes_or_no</replaceable> | <replaceable>explicit</replaceable> | <replaceable>master-only</replaceable> ; </optional> - <optional> pubkey <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>string</replaceable> ; </optional> - <optional> transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> alt-transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> alt-transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> use-alt-transfer-source <replaceable>yes_or_no</replaceable>; </optional> - <optional> notify-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> notify-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> zone-statistics <replaceable>yes_or_no</replaceable> ; </optional> - <optional> database <replaceable>string</replaceable> ; </optional> - <optional> min-refresh-time <replaceable>number</replaceable> ; </optional> - <optional> max-refresh-time <replaceable>number</replaceable> ; </optional> - <optional> min-retry-time <replaceable>number</replaceable> ; </optional> - <optional> max-retry-time <replaceable>number</replaceable> ; </optional> - <optional> multi-master <replaceable>yes_or_no</replaceable> ; </optional> - <optional> zero-no-soa-ttl <replaceable>yes_or_no</replaceable> ; </optional> -}; - -zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replaceable></optional> { - type hint; - file <replaceable>string</replaceable> ; - <optional> delegation-only <replaceable>yes_or_no</replaceable> ; </optional> - <optional> check-names (<constant>warn</constant>|<constant>fail</constant>|<constant>ignore</constant>) ; // Not Implemented. </optional> -}; - -zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replaceable></optional> { - type stub; - <optional> allow-query { <replaceable>address_match_list</replaceable> }; </optional> - <optional> check-names (<constant>warn</constant>|<constant>fail</constant>|<constant>ignore</constant>) ; </optional> - <optional> dialup <replaceable>dialup_option</replaceable> ; </optional> - <optional> delegation-only <replaceable>yes_or_no</replaceable> ; </optional> - <optional> file <replaceable>string</replaceable> ; </optional> - <optional> masterfile-format (<constant>text</constant>|<constant>raw</constant>) ; </optional> - <optional> forward (<constant>only</constant>|<constant>first</constant>) ; </optional> - <optional> forwarders { <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional> - <optional> masters <optional>port <replaceable>ip_port</replaceable></optional> { ( <replaceable>masters_list</replaceable> | <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> <optional>key <replaceable>key</replaceable></optional> ) ; <optional>...</optional> }; </optional> - <optional> max-transfer-idle-in <replaceable>number</replaceable> ; </optional> - <optional> max-transfer-time-in <replaceable>number</replaceable> ; </optional> - <optional> pubkey <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>number</replaceable> <replaceable>string</replaceable> ; </optional> - <optional> transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> alt-transfer-source (<replaceable>ip4_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> alt-transfer-source-v6 (<replaceable>ip6_addr</replaceable> | <constant>*</constant>) <optional>port <replaceable>ip_port</replaceable></optional> ; </optional> - <optional> use-alt-transfer-source <replaceable>yes_or_no</replaceable>; </optional> - <optional> zone-statistics <replaceable>yes_or_no</replaceable> ; </optional> - <optional> database <replaceable>string</replaceable> ; </optional> - <optional> min-refresh-time <replaceable>number</replaceable> ; </optional> - <optional> max-refresh-time <replaceable>number</replaceable> ; </optional> - <optional> min-retry-time <replaceable>number</replaceable> ; </optional> - <optional> max-retry-time <replaceable>number</replaceable> ; </optional> - <optional> multi-master <replaceable>yes_or_no</replaceable> ; </optional> -}; - -zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replaceable></optional> { - type forward; - <optional> forward (<constant>only</constant>|<constant>first</constant>) ; </optional> - <optional> forwarders { <optional> <replaceable>ip_addr</replaceable> <optional>port <replaceable>ip_port</replaceable></optional> ; ... </optional> }; </optional> - <optional> delegation-only <replaceable>yes_or_no</replaceable> ; </optional> -}; - -zone <replaceable>zone_name</replaceable> <optional><replaceable>class</replaceable></optional> { - type delegation-only; -}; - -</programlisting> - - </sect2> - <sect2> - <title><command>zone</command> Statement Definition and Usage</title> - <sect3> - <title>Zone Types</title> - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table"> - <!--colspec colname="1" colnum="1" colsep="0" colwidth="1.108in"/--> - <!--colspec colname="2" colnum="2" colsep="0" colwidth="4.017in"/--> - <colspec colname="1" colnum="1" colsep="0"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="4.017in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>master</varname> - </para> - </entry> - <entry colname="2"> - <para> - The server has a master copy of the data - for the zone and will be able to provide authoritative - answers for - it. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>slave</varname> - </para> - </entry> - <entry colname="2"> - <para> - A slave zone is a replica of a master - zone. The <command>masters</command> list - specifies one or more IP addresses - of master servers that the slave contacts to update - its copy of the zone. - Masters list elements can also be names of other - masters lists. - By default, transfers are made from port 53 on the - servers; this can - be changed for all servers by specifying a port number - before the - list of IP addresses, or on a per-server basis after - the IP address. - Authentication to the master can also be done with - per-server TSIG keys. - If a file is specified, then the - replica will be written to this file whenever the zone - is changed, - and reloaded from this file on a server restart. Use - of a file is - recommended, since it often speeds server startup and - eliminates - a needless waste of bandwidth. Note that for large - numbers (in the - tens or hundreds of thousands) of zones per server, it - is best to - use a two-level naming scheme for zone filenames. For - example, - a slave server for the zone <literal>example.com</literal> might place - the zone contents into a file called - <filename>ex/example.com</filename> where <filename>ex/</filename> is - just the first two letters of the zone name. (Most - operating systems - behave very slowly if you put 100 000 files into - a single directory.) - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>stub</varname> - </para> - </entry> - <entry colname="2"> - <para> - A stub zone is similar to a slave zone, - except that it replicates only the NS records of a - master zone instead - of the entire zone. Stub zones are not a standard part - of the DNS; - they are a feature specific to the <acronym>BIND</acronym> implementation. - </para> - - <para> - Stub zones can be used to eliminate the need for glue - NS record - in a parent zone at the expense of maintaining a stub - zone entry and - a set of name server addresses in <filename>named.conf</filename>. - This usage is not recommended for new configurations, - and BIND 9 - supports it only in a limited way. - In <acronym>BIND</acronym> 4/8, zone - transfers of a parent zone - included the NS records from stub children of that - zone. This meant - that, in some cases, users could get away with - configuring child stubs - only in the master server for the parent zone. <acronym>BIND</acronym> - 9 never mixes together zone data from different zones - in this - way. Therefore, if a <acronym>BIND</acronym> 9 master serving a parent - zone has child stub zones configured, all the slave - servers for the - parent zone also need to have the same child stub - zones - configured. - </para> - - <para> - Stub zones can also be used as a way of forcing the - resolution - of a given domain to use a particular set of - authoritative servers. - For example, the caching name servers on a private - network using - RFC1918 addressing may be configured with stub zones - for - <literal>10.in-addr.arpa</literal> - to use a set of internal name servers as the - authoritative - servers for that domain. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>forward</varname> - </para> - </entry> - <entry colname="2"> - <para> - A "forward zone" is a way to configure - forwarding on a per-domain basis. A <command>zone</command> statement - of type <command>forward</command> can - contain a <command>forward</command> - and/or <command>forwarders</command> - statement, - which will apply to queries within the domain given by - the zone - name. If no <command>forwarders</command> - statement is present or - an empty list for <command>forwarders</command> is given, then no - forwarding will be done for the domain, canceling the - effects of - any forwarders in the <command>options</command> statement. Thus - if you want to use this type of zone to change the - behavior of the - global <command>forward</command> option - (that is, "forward first" - to, then "forward only", or vice versa, but want to - use the same - servers as set globally) you need to re-specify the - global forwarders. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>hint</varname> - </para> - </entry> - <entry colname="2"> - <para> - The initial set of root name servers is - specified using a "hint zone". When the server starts - up, it uses - the root hints to find a root name server and get the - most recent - list of root name servers. If no hint zone is - specified for class - IN, the server uses a compiled-in default set of root - servers hints. - Classes other than IN have no built-in defaults hints. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>delegation-only</varname> - </para> - </entry> - <entry colname="2"> - <para> - This is used to enforce the delegation-only - status of infrastructure zones (e.g. COM, NET, ORG). - Any answer that - is received without an explicit or implicit delegation - in the authority - section will be treated as NXDOMAIN. This does not - apply to the zone - apex. This should not be applied to leaf zones. - </para> - <para> - <varname>delegation-only</varname> has no - effect on answers received - from forwarders. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - </sect3> - - <sect3> - <title>Class</title> - <para> - The zone's name may optionally be followed by a class. If - a class is not specified, class <literal>IN</literal> (for <varname>Internet</varname>), - is assumed. This is correct for the vast majority of cases. - </para> - <para> - The <literal>hesiod</literal> class is - named for an information service from MIT's Project Athena. It - is - used to share information about various systems databases, such - as users, groups, printers and so on. The keyword - <literal>HS</literal> is - a synonym for hesiod. - </para> - <para> - Another MIT development is Chaosnet, a LAN protocol created - in the mid-1970s. Zone data for it can be specified with the <literal>CHAOS</literal> class. - </para> - </sect3> - <sect3> - - <title>Zone Options</title> - - <variablelist> - - <varlistentry> - <term><command>allow-notify</command></term> - <listitem> - <para> - See the description of - <command>allow-notify</command> in <xref linkend="access_control"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>allow-query</command></term> - <listitem> - <para> - See the description of - <command>allow-query</command> in <xref linkend="access_control"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>allow-transfer</command></term> - <listitem> - <para> - See the description of <command>allow-transfer</command> - in <xref linkend="access_control"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>allow-update</command></term> - <listitem> - <para> - See the description of <command>allow-update</command> - in <xref linkend="access_control"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>update-policy</command></term> - <listitem> - <para> - Specifies a "Simple Secure Update" policy. See - <xref linkend="dynamic_update_policies"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>allow-update-forwarding</command></term> - <listitem> - <para> - See the description of <command>allow-update-forwarding</command> - in <xref linkend="access_control"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>also-notify</command></term> - <listitem> - <para> - Only meaningful if <command>notify</command> - is - active for this zone. The set of machines that will - receive a - <literal>DNS NOTIFY</literal> message - for this zone is made up of all the listed name servers - (other than - the primary master) for the zone plus any IP addresses - specified - with <command>also-notify</command>. A port - may be specified - with each <command>also-notify</command> - address to send the notify - messages to a port other than the default of 53. - <command>also-notify</command> is not - meaningful for stub zones. - The default is the empty list. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-names</command></term> - <listitem> - <para> - This option is used to restrict the character set and - syntax of - certain domain names in master files and/or DNS responses - received from the - network. The default varies according to zone type. For <command>master</command> zones the default is <command>fail</command>. For <command>slave</command> - zones the default is <command>warn</command>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-mx</command></term> - <listitem> - <para> - See the description of - <command>check-mx</command> in <xref linkend="boolean_options"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-wildcard</command></term> - <listitem> - <para> - See the description of - <command>check-wildcard</command> in <xref linkend="boolean_options"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-integrity</command></term> - <listitem> - <para> - See the description of - <command>check-integrity</command> in <xref linkend="boolean_options"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>check-sibling</command></term> - <listitem> - <para> - See the description of - <command>check-sibling</command> in <xref linkend="boolean_options"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>zero-no-soa-ttl</command></term> - <listitem> - <para> - See the description of - <command>zero-no-soa-ttl</command> in <xref linkend="boolean_options"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>update-check-ksk</command></term> - <listitem> - <para> - See the description of - <command>update-check-ksk</command> in <xref linkend="boolean_options"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>database</command></term> - <listitem> - <para> - Specify the type of database to be used for storing the - zone data. The string following the <command>database</command> keyword - is interpreted as a list of whitespace-delimited words. - The first word - identifies the database type, and any subsequent words are - passed - as arguments to the database to be interpreted in a way - specific - to the database type. - </para> - <para> - The default is <userinput>"rbt"</userinput>, BIND 9's - native in-memory - red-black-tree database. This database does not take - arguments. - </para> - <para> - Other values are possible if additional database drivers - have been linked into the server. Some sample drivers are - included - with the distribution but none are linked in by default. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>dialup</command></term> - <listitem> - <para> - See the description of - <command>dialup</command> in <xref linkend="boolean_options"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>delegation-only</command></term> - <listitem> - <para> - The flag only applies to hint and stub zones. If set - to <userinput>yes</userinput>, then the zone will also be - treated as if it - is also a delegation-only type zone. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>forward</command></term> - <listitem> - <para> - Only meaningful if the zone has a forwarders - list. The <command>only</command> value causes - the lookup to fail - after trying the forwarders and getting no answer, while <command>first</command> would - allow a normal lookup to be tried. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>forwarders</command></term> - <listitem> - <para> - Used to override the list of global forwarders. - If it is not specified in a zone of type <command>forward</command>, - no forwarding is done for the zone and the global options are - not used. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>ixfr-base</command></term> - <listitem> - <para> - Was used in <acronym>BIND</acronym> 8 to - specify the name - of the transaction log (journal) file for dynamic update - and IXFR. - <acronym>BIND</acronym> 9 ignores the option - and constructs the name of the journal - file by appending "<filename>.jnl</filename>" - to the name of the - zone file. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>ixfr-tmp-file</command></term> - <listitem> - <para> - Was an undocumented option in <acronym>BIND</acronym> 8. - Ignored in <acronym>BIND</acronym> 9. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>journal</command></term> - <listitem> - <para> - Allow the default journal's filename to be overridden. - The default is the zone's filename with "<filename>.jnl</filename>" appended. - This is applicable to <command>master</command> and <command>slave</command> zones. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-transfer-time-in</command></term> - <listitem> - <para> - See the description of - <command>max-transfer-time-in</command> in <xref linkend="zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-transfer-idle-in</command></term> - <listitem> - <para> - See the description of - <command>max-transfer-idle-in</command> in <xref linkend="zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-transfer-time-out</command></term> - <listitem> - <para> - See the description of - <command>max-transfer-time-out</command> in <xref linkend="zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>max-transfer-idle-out</command></term> - <listitem> - <para> - See the description of - <command>max-transfer-idle-out</command> in <xref linkend="zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>notify</command></term> - <listitem> - <para> - See the description of - <command>notify</command> in <xref linkend="boolean_options"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>notify-delay</command></term> - <listitem> - <para> - See the description of - <command>notify-delay</command> in <xref linkend="tuning"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>pubkey</command></term> - <listitem> - <para> - In <acronym>BIND</acronym> 8, this option was - intended for specifying - a public zone key for verification of signatures in DNSSEC - signed - zones when they are loaded from disk. <acronym>BIND</acronym> 9 does not verify signatures - on load and ignores the option. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>zone-statistics</command></term> - <listitem> - <para> - If <userinput>yes</userinput>, the server will keep - statistical - information for this zone, which can be dumped to the - <command>statistics-file</command> defined in - the server options. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>sig-validity-interval</command></term> - <listitem> - <para> - See the description of - <command>sig-validity-interval</command> in <xref linkend="tuning"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>transfer-source</command></term> - <listitem> - <para> - See the description of - <command>transfer-source</command> in <xref linkend="zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>transfer-source-v6</command></term> - <listitem> - <para> - See the description of - <command>transfer-source-v6</command> in <xref linkend="zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>alt-transfer-source</command></term> - <listitem> - <para> - See the description of - <command>alt-transfer-source</command> in <xref linkend="zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>alt-transfer-source-v6</command></term> - <listitem> - <para> - See the description of - <command>alt-transfer-source-v6</command> in <xref linkend="zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>use-alt-transfer-source</command></term> - <listitem> - <para> - See the description of - <command>use-alt-transfer-source</command> in <xref linkend="zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - - <varlistentry> - <term><command>notify-source</command></term> - <listitem> - <para> - See the description of - <command>notify-source</command> in <xref linkend="zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>notify-source-v6</command></term> - <listitem> - <para> - See the description of - <command>notify-source-v6</command> in <xref linkend="zone_transfers"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>min-refresh-time</command></term> - <term><command>max-refresh-time</command></term> - <term><command>min-retry-time</command></term> - <term><command>max-retry-time</command></term> - <listitem> - <para> - See the description in <xref linkend="tuning"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>ixfr-from-differences</command></term> - <listitem> - <para> - See the description of - <command>ixfr-from-differences</command> in <xref linkend="boolean_options"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>key-directory</command></term> - <listitem> - <para> - See the description of - <command>key-directory</command> in <xref linkend="options"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>multi-master</command></term> - <listitem> - <para> - See the description of <command>multi-master</command> in - <xref linkend="boolean_options"/>. - </para> - </listitem> - </varlistentry> - - <varlistentry> - <term><command>masterfile-format</command></term> - <listitem> - <para> - See the description of <command>masterfile-format</command> - in <xref linkend="tuning"/>. - </para> - </listitem> - </varlistentry> - - </variablelist> - - </sect3> - <sect3 id="dynamic_update_policies"> - <title>Dynamic Update Policies</title> - <para> - <acronym>BIND</acronym> 9 supports two alternative - methods of granting clients - the right to perform dynamic updates to a zone, - configured by the <command>allow-update</command> - and - <command>update-policy</command> option, - respectively. - </para> - <para> - The <command>allow-update</command> clause works the - same - way as in previous versions of <acronym>BIND</acronym>. It grants given clients the - permission to update any record of any name in the zone. - </para> - <para> - The <command>update-policy</command> clause is new - in <acronym>BIND</acronym> - 9 and allows more fine-grained control over what updates are - allowed. - A set of rules is specified, where each rule either grants or - denies - permissions for one or more names to be updated by one or more - identities. - If the dynamic update request message is signed (that is, it - includes - either a TSIG or SIG(0) record), the identity of the signer can - be determined. - </para> - <para> - Rules are specified in the <command>update-policy</command> zone - option, and are only meaningful for master zones. When the <command>update-policy</command> statement - is present, it is a configuration error for the <command>allow-update</command> statement - to be present. The <command>update-policy</command> - statement only - examines the signer of a message; the source address is not - relevant. - </para> - <para> - This is how a rule definition looks: - </para> - -<programlisting> -( <command>grant</command> | <command>deny</command> ) <replaceable>identity</replaceable> <replaceable>nametype</replaceable> <replaceable>name</replaceable> <optional> <replaceable>types</replaceable> </optional> -</programlisting> - - <para> - Each rule grants or denies privileges. Once a message has - successfully matched a rule, the operation is immediately - granted - or denied and no further rules are examined. A rule is matched - when the signer matches the identity field, the name matches the - name field in accordance with the nametype field, and the type - matches - the types specified in the type field. - </para> - - <para> - The identity field specifies a name or a wildcard name. - Normally, this - is the name of the TSIG or SIG(0) key used to sign the update - request. When a - TKEY exchange has been used to create a shared secret, the - identity of the - shared secret is the same as the identity of the key used to - authenticate the - TKEY exchange. When the <replaceable>identity</replaceable> field specifies a - wildcard name, it is subject to DNS wildcard expansion, so the - rule will apply - to multiple identities. The <replaceable>identity</replaceable> field must - contain a fully-qualified domain name. - </para> - - <para> - The <replaceable>nametype</replaceable> field has 6 - values: - <varname>name</varname>, <varname>subdomain</varname>, - <varname>wildcard</varname>, <varname>self</varname>, - <varname>selfsub</varname>, and <varname>selfwild</varname>. - </para> - <informaltable> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="0.819in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="3.681in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>name</varname> - </para> - </entry> <entry colname="2"> - <para> - Exact-match semantics. This rule matches - when the name being updated is identical - to the contents of the - <replaceable>name</replaceable> field. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>subdomain</varname> - </para> - </entry> <entry colname="2"> - <para> - This rule matches when the name being updated - is a subdomain of, or identical to, the - contents of the <replaceable>name</replaceable> - field. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>wildcard</varname> - </para> - </entry> <entry colname="2"> - <para> - The <replaceable>name</replaceable> field - is subject to DNS wildcard expansion, and - this rule matches when the name being updated - name is a valid expansion of the wildcard. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>self</varname> - </para> - </entry> - <entry colname="2"> - <para> - This rule matches when the name being updated - matches the contents of the - <replaceable>identity</replaceable> field. - The <replaceable>name</replaceable> field - is ignored, but should be the same as the - <replaceable>identity</replaceable> field. - The <varname>self</varname> nametype is - most useful when allowing using one key per - name to update, where the key has the same - name as the name to be updated. The - <replaceable>identity</replaceable> would - be specified as <constant>*</constant> (an asterisk) in - this case. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>selfsub</varname> - </para> - </entry> <entry colname="2"> - <para> - This rule is similar to <varname>self</varname> - except that subdomains of <varname>self</varname> - can also be updated. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <varname>selfwild</varname> - </para> - </entry> <entry colname="2"> - <para> - This rule is similar to <varname>self</varname> - except that only subdomains of - <varname>self</varname> can be updated. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - - <para> - In all cases, the <replaceable>name</replaceable> - field must - specify a fully-qualified domain name. - </para> - - <para> - If no types are explicitly specified, this rule matches all - types except - RRSIG, NS, SOA, and NSEC. Types may be specified by name, including - "ANY" (ANY matches all types except NSEC, which can never be - updated). - Note that when an attempt is made to delete all records - associated with a - name, the rules are checked for each existing record type. - </para> - </sect3> - </sect2> - </sect1> - <sect1> - <title>Zone File</title> - <sect2 id="types_of_resource_records_and_when_to_use_them"> - <title>Types of Resource Records and When to Use Them</title> - <para> - This section, largely borrowed from RFC 1034, describes the - concept of a Resource Record (RR) and explains when each is used. - Since the publication of RFC 1034, several new RRs have been - identified - and implemented in the DNS. These are also included. - </para> - <sect3> - <title>Resource Records</title> - - <para> - A domain name identifies a node. Each node has a set of - resource information, which may be empty. The set of resource - information associated with a particular name is composed of - separate RRs. The order of RRs in a set is not significant and - need not be preserved by name servers, resolvers, or other - parts of the DNS. However, sorting of multiple RRs is - permitted for optimization purposes, for example, to specify - that a particular nearby server be tried first. See <xref linkend="the_sortlist_statement"/> and <xref linkend="rrset_ordering"/>. - </para> - - <para> - The components of a Resource Record are: - </para> - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.000in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="3.500in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - owner name - </para> - </entry> - <entry colname="2"> - <para> - The domain name where the RR is found. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - type - </para> - </entry> - <entry colname="2"> - <para> - An encoded 16-bit value that specifies - the type of the resource record. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - TTL - </para> - </entry> - <entry colname="2"> - <para> - The time-to-live of the RR. This field - is a 32-bit integer in units of seconds, and is - primarily used by - resolvers when they cache RRs. The TTL describes how - long a RR can - be cached before it should be discarded. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - class - </para> - </entry> - <entry colname="2"> - <para> - An encoded 16-bit value that identifies - a protocol family or instance of a protocol. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - RDATA - </para> - </entry> - <entry colname="2"> - <para> - The resource data. The format of the - data is type (and sometimes class) specific. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - <para> - The following are <emphasis>types</emphasis> of valid RRs: - </para> - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="3.625in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - A - </para> - </entry> - <entry colname="2"> - <para> - A host address. In the IN class, this is a - 32-bit IP address. Described in RFC 1035. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - AAAA - </para> - </entry> - <entry colname="2"> - <para> - IPv6 address. Described in RFC 1886. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - A6 - </para> - </entry> - <entry colname="2"> - <para> - IPv6 address. This can be a partial - address (a suffix) and an indirection to the name - where the rest of the - address (the prefix) can be found. Experimental. - Described in RFC 2874. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - AFSDB - </para> - </entry> - <entry colname="2"> - <para> - Location of AFS database servers. - Experimental. Described in RFC 1183. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - APL - </para> - </entry> - <entry colname="2"> - <para> - Address prefix list. Experimental. - Described in RFC 3123. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - CERT - </para> - </entry> - <entry colname="2"> - <para> - Holds a digital certificate. - Described in RFC 2538. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - CNAME - </para> - </entry> - <entry colname="2"> - <para> - Identifies the canonical name of an alias. - Described in RFC 1035. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - DNAME - </para> - </entry> - <entry colname="2"> - <para> - Replaces the domain name specified with - another name to be looked up, effectively aliasing an - entire - subtree of the domain name space rather than a single - record - as in the case of the CNAME RR. - Described in RFC 2672. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - DNSKEY - </para> - </entry> - <entry colname="2"> - <para> - Stores a public key associated with a signed - DNS zone. Described in RFC 4034. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - DS - </para> - </entry> - <entry colname="2"> - <para> - Stores the hash of a public key associated with a - signed DNS zone. Described in RFC 4034. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - GPOS - </para> - </entry> - <entry colname="2"> - <para> - Specifies the global position. Superseded by LOC. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - HINFO - </para> - </entry> - <entry colname="2"> - <para> - Identifies the CPU and OS used by a host. - Described in RFC 1035. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - ISDN - </para> - </entry> - <entry colname="2"> - <para> - Representation of ISDN addresses. - Experimental. Described in RFC 1183. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - KEY - </para> - </entry> - <entry colname="2"> - <para> - Stores a public key associated with a - DNS name. Used in original DNSSEC; replaced - by DNSKEY in DNSSECbis, but still used with - SIG(0). Described in RFCs 2535 and 2931. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - KX - </para> - </entry> - <entry colname="2"> - <para> - Identifies a key exchanger for this - DNS name. Described in RFC 2230. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - LOC - </para> - </entry> - <entry colname="2"> - <para> - For storing GPS info. Described in RFC 1876. - Experimental. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - MX - </para> - </entry> - <entry colname="2"> - <para> - Identifies a mail exchange for the domain with - a 16-bit preference value (lower is better) - followed by the host name of the mail exchange. - Described in RFC 974, RFC 1035. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - NAPTR - </para> - </entry> - <entry colname="2"> - <para> - Name authority pointer. Described in RFC 2915. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - NSAP - </para> - </entry> - <entry colname="2"> - <para> - A network service access point. - Described in RFC 1706. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - NS - </para> - </entry> - <entry colname="2"> - <para> - The authoritative name server for the - domain. Described in RFC 1035. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - NSEC - </para> - </entry> - <entry colname="2"> - <para> - Used in DNSSECbis to securely indicate that - RRs with an owner name in a certain name interval do - not exist in - a zone and indicate what RR types are present for an - existing name. - Described in RFC 4034. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - NXT - </para> - </entry> - <entry colname="2"> - <para> - Used in DNSSEC to securely indicate that - RRs with an owner name in a certain name interval do - not exist in - a zone and indicate what RR types are present for an - existing name. - Used in original DNSSEC; replaced by NSEC in - DNSSECbis. - Described in RFC 2535. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - PTR - </para> - </entry> - <entry colname="2"> - <para> - A pointer to another part of the domain - name space. Described in RFC 1035. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - PX - </para> - </entry> - <entry colname="2"> - <para> - Provides mappings between RFC 822 and X.400 - addresses. Described in RFC 2163. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - RP - </para> - </entry> - <entry colname="2"> - <para> - Information on persons responsible - for the domain. Experimental. Described in RFC 1183. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - RRSIG - </para> - </entry> - <entry colname="2"> - <para> - Contains DNSSECbis signature data. Described - in RFC 4034. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - RT - </para> - </entry> - <entry colname="2"> - <para> - Route-through binding for hosts that - do not have their own direct wide area network - addresses. - Experimental. Described in RFC 1183. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - SIG - </para> - </entry> - <entry colname="2"> - <para> - Contains DNSSEC signature data. Used in - original DNSSEC; replaced by RRSIG in - DNSSECbis, but still used for SIG(0). - Described in RFCs 2535 and 2931. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - SOA - </para> - </entry> - <entry colname="2"> - <para> - Identifies the start of a zone of authority. - Described in RFC 1035. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - SRV - </para> - </entry> - <entry colname="2"> - <para> - Information about well known network - services (replaces WKS). Described in RFC 2782. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - TXT - </para> - </entry> - <entry colname="2"> - <para> - Text records. Described in RFC 1035. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - WKS - </para> - </entry> - <entry colname="2"> - <para> - Information about which well known - network services, such as SMTP, that a domain - supports. Historical. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - X25 - </para> - </entry> - <entry colname="2"> - <para> - Representation of X.25 network addresses. - Experimental. Described in RFC 1183. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - <para> - The following <emphasis>classes</emphasis> of resource records - are currently valid in the DNS: - </para> - <informaltable colsep="0" rowsep="0"><tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="4Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="3.625in"/> - <tbody> - - <row rowsep="0"> - <entry colname="1"> - <para> - IN - </para> - </entry> - <entry colname="2"> - <para> - The Internet. - </para> - </entry> - </row> - - <row rowsep="0"> - <entry colname="1"> - <para> - CH - </para> - </entry> - <entry colname="2"> - <para> - Chaosnet, a LAN protocol created at MIT in the - mid-1970s. - Rarely used for its historical purpose, but reused for - BIND's - built-in server information zones, e.g., - <literal>version.bind</literal>. - </para> - </entry> - </row> - - <row rowsep="0"> - <entry colname="1"> - <para> - HS - </para> - </entry> - <entry colname="2"> - <para> - Hesiod, an information service - developed by MIT's Project Athena. It is used to share - information - about various systems databases, such as users, - groups, printers - and so on. - </para> - </entry> - </row> - - </tbody> - </tgroup> - </informaltable> - - <para> - The owner name is often implicit, rather than forming an - integral - part of the RR. For example, many name servers internally form - tree - or hash structures for the name space, and chain RRs off nodes. - The remaining RR parts are the fixed header (type, class, TTL) - which is consistent for all RRs, and a variable part (RDATA) - that - fits the needs of the resource being described. - </para> - <para> - The meaning of the TTL field is a time limit on how long an - RR can be kept in a cache. This limit does not apply to - authoritative - data in zones; it is also timed out, but by the refreshing - policies - for the zone. The TTL is assigned by the administrator for the - zone where the data originates. While short TTLs can be used to - minimize caching, and a zero TTL prohibits caching, the - realities - of Internet performance suggest that these times should be on - the - order of days for the typical host. If a change can be - anticipated, - the TTL can be reduced prior to the change to minimize - inconsistency - during the change, and then increased back to its former value - following - the change. - </para> - <para> - The data in the RDATA section of RRs is carried as a combination - of binary strings and domain names. The domain names are - frequently - used as "pointers" to other data in the DNS. - </para> - </sect3> - <sect3> - <title>Textual expression of RRs</title> - <para> - RRs are represented in binary form in the packets of the DNS - protocol, and are usually represented in highly encoded form - when - stored in a name server or resolver. In the examples provided - in - RFC 1034, a style similar to that used in master files was - employed - in order to show the contents of RRs. In this format, most RRs - are shown on a single line, although continuation lines are - possible - using parentheses. - </para> - <para> - The start of the line gives the owner of the RR. If a line - begins with a blank, then the owner is assumed to be the same as - that of the previous RR. Blank lines are often included for - readability. - </para> - <para> - Following the owner, we list the TTL, type, and class of the - RR. Class and type use the mnemonics defined above, and TTL is - an integer before the type field. In order to avoid ambiguity - in - parsing, type and class mnemonics are disjoint, TTLs are - integers, - and the type mnemonic is always last. The IN class and TTL - values - are often omitted from examples in the interests of clarity. - </para> - <para> - The resource data or RDATA section of the RR are given using - knowledge of the typical representation for the data. - </para> - <para> - For example, we might show the RRs carried in a message as: - </para> - <informaltable colsep="0" rowsep="0"><tgroup cols="3" colsep="0" rowsep="0" tgroupstyle="4Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.381in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="1.020in"/> - <colspec colname="3" colnum="3" colsep="0" colwidth="2.099in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - <literal>ISI.EDU.</literal> - </para> - </entry> - <entry colname="2"> - <para> - <literal>MX</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>10 VENERA.ISI.EDU.</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para/> - </entry> - <entry colname="2"> - <para> - <literal>MX</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>10 VAXA.ISI.EDU</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <literal>VENERA.ISI.EDU</literal> - </para> - </entry> - <entry colname="2"> - <para> - <literal>A</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>128.9.0.32</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para/> - </entry> - <entry colname="2"> - <para> - <literal>A</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>10.1.0.52</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <literal>VAXA.ISI.EDU</literal> - </para> - </entry> - <entry colname="2"> - <para> - <literal>A</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>10.2.0.27</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para/> - </entry> - <entry colname="2"> - <para> - <literal>A</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>128.9.0.33</literal> - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - <para> - The MX RRs have an RDATA section which consists of a 16-bit - number followed by a domain name. The address RRs use a - standard - IP address format to contain a 32-bit internet address. - </para> - <para> - The above example shows six RRs, with two RRs at each of three - domain names. - </para> - <para> - Similarly we might see: - </para> - <informaltable colsep="0" rowsep="0"><tgroup cols="3" colsep="0" rowsep="0" tgroupstyle="4Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.491in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="1.067in"/> - <colspec colname="3" colnum="3" colsep="0" colwidth="2.067in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - <literal>XX.LCS.MIT.EDU.</literal> - </para> - </entry> - <entry colname="2"> - <para> - <literal>IN A</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>10.0.0.44</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"/> - <entry colname="2"> - <para> - <literal>CH A</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>MIT.EDU. 2420</literal> - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - <para> - This example shows two addresses for - <literal>XX.LCS.MIT.EDU</literal>, each of a different class. - </para> - </sect3> - </sect2> - - <sect2> - <title>Discussion of MX Records</title> - - <para> - As described above, domain servers store information as a - series of resource records, each of which contains a particular - piece of information about a given domain name (which is usually, - but not always, a host). The simplest way to think of a RR is as - a typed pair of data, a domain name matched with a relevant datum, - and stored with some additional type information to help systems - determine when the RR is relevant. - </para> - - <para> - MX records are used to control delivery of email. The data - specified in the record is a priority and a domain name. The - priority - controls the order in which email delivery is attempted, with the - lowest number first. If two priorities are the same, a server is - chosen randomly. If no servers at a given priority are responding, - the mail transport agent will fall back to the next largest - priority. - Priority numbers do not have any absolute meaning — they are - relevant - only respective to other MX records for that domain name. The - domain - name given is the machine to which the mail will be delivered. - It <emphasis>must</emphasis> have an associated address record - (A or AAAA) — CNAME is not sufficient. - </para> - <para> - For a given domain, if there is both a CNAME record and an - MX record, the MX record is in error, and will be ignored. - Instead, - the mail will be delivered to the server specified in the MX - record - pointed to by the CNAME. - </para> - <para> - For example: - </para> - <informaltable colsep="0" rowsep="0"> - <tgroup cols="5" colsep="0" rowsep="0" tgroupstyle="3Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.708in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="0.444in"/> - <colspec colname="3" colnum="3" colsep="0" colwidth="0.444in"/> - <colspec colname="4" colnum="4" colsep="0" colwidth="0.976in"/> - <colspec colname="5" colnum="5" colsep="0" colwidth="1.553in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - <literal>example.com.</literal> - </para> - </entry> - <entry colname="2"> - <para> - <literal>IN</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>MX</literal> - </para> - </entry> - <entry colname="4"> - <para> - <literal>10</literal> - </para> - </entry> - <entry colname="5"> - <para> - <literal>mail.example.com.</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para/> - </entry> - <entry colname="2"> - <para> - <literal>IN</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>MX</literal> - </para> - </entry> - <entry colname="4"> - <para> - <literal>10</literal> - </para> - </entry> - <entry colname="5"> - <para> - <literal>mail2.example.com.</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para/> - </entry> - <entry colname="2"> - <para> - <literal>IN</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>MX</literal> - </para> - </entry> - <entry colname="4"> - <para> - <literal>20</literal> - </para> - </entry> - <entry colname="5"> - <para> - <literal>mail.backup.org.</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <literal>mail.example.com.</literal> - </para> - </entry> - <entry colname="2"> - <para> - <literal>IN</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>A</literal> - </para> - </entry> - <entry colname="4"> - <para> - <literal>10.0.0.1</literal> - </para> - </entry> - <entry colname="5"> - <para/> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <literal>mail2.example.com.</literal> - </para> - </entry> - <entry colname="2"> - <para> - <literal>IN</literal> - </para> - </entry> - <entry colname="3"> - <para> - <literal>A</literal> - </para> - </entry> - <entry colname="4"> - <para> - <literal>10.0.0.2</literal> - </para> - </entry> - <entry colname="5"> - <para/> - </entry> - </row> - </tbody> - </tgroup> - </informaltable><para> - Mail delivery will be attempted to <literal>mail.example.com</literal> and - <literal>mail2.example.com</literal> (in - any order), and if neither of those succeed, delivery to <literal>mail.backup.org</literal> will - be attempted. - </para> - </sect2> - <sect2 id="Setting_TTLs"> - <title>Setting TTLs</title> - <para> - The time-to-live of the RR field is a 32-bit integer represented - in units of seconds, and is primarily used by resolvers when they - cache RRs. The TTL describes how long a RR can be cached before it - should be discarded. The following three types of TTL are - currently - used in a zone file. - </para> - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="0.750in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="4.375in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - SOA - </para> - </entry> - <entry colname="2"> - <para> - The last field in the SOA is the negative - caching TTL. This controls how long other servers will - cache no-such-domain - (NXDOMAIN) responses from you. - </para> - <para> - The maximum time for - negative caching is 3 hours (3h). - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - $TTL - </para> - </entry> - <entry colname="2"> - <para> - The $TTL directive at the top of the - zone file (before the SOA) gives a default TTL for every - RR without - a specific TTL set. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - RR TTLs - </para> - </entry> - <entry colname="2"> - <para> - Each RR can have a TTL as the second - field in the RR, which will control how long other - servers can cache - the it. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - <para> - All of these TTLs default to units of seconds, though units - can be explicitly specified, for example, <literal>1h30m</literal>. - </para> - </sect2> - <sect2> - <title>Inverse Mapping in IPv4</title> - <para> - Reverse name resolution (that is, translation from IP address - to name) is achieved by means of the <emphasis>in-addr.arpa</emphasis> domain - and PTR records. Entries in the in-addr.arpa domain are made in - least-to-most significant order, read left to right. This is the - opposite order to the way IP addresses are usually written. Thus, - a machine with an IP address of 10.1.2.3 would have a - corresponding - in-addr.arpa name of - 3.2.1.10.in-addr.arpa. This name should have a PTR resource record - whose data field is the name of the machine or, optionally, - multiple - PTR records if the machine has more than one name. For example, - in the <optional>example.com</optional> domain: - </para> - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="1.125in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="4.000in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para> - <literal>$ORIGIN</literal> - </para> - </entry> - <entry colname="2"> - <para> - <literal>2.1.10.in-addr.arpa</literal> - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para> - <literal>3</literal> - </para> - </entry> - <entry colname="2"> - <para> - <literal>IN PTR foo.example.com.</literal> - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - <note> - <para> - The <command>$ORIGIN</command> lines in the examples - are for providing context to the examples only — they do not - necessarily - appear in the actual usage. They are only used here to indicate - that the example is relative to the listed origin. - </para> - </note> - </sect2> - <sect2> - <title>Other Zone File Directives</title> - <para> - The Master File Format was initially defined in RFC 1035 and - has subsequently been extended. While the Master File Format - itself - is class independent all records in a Master File must be of the - same - class. - </para> - <para> - Master File Directives include <command>$ORIGIN</command>, <command>$INCLUDE</command>, - and <command>$TTL.</command> - </para> - <sect3> - <title>The <command>$ORIGIN</command> Directive</title> - <para> - Syntax: <command>$ORIGIN</command> - <replaceable>domain-name</replaceable> - <optional><replaceable>comment</replaceable></optional> - </para> - <para><command>$ORIGIN</command> - sets the domain name that will be appended to any - unqualified records. When a zone is first read in there - is an implicit <command>$ORIGIN</command> - <<varname>zone-name</varname>><command>.</command> - The current <command>$ORIGIN</command> is appended to - the domain specified in the <command>$ORIGIN</command> - argument if it is not absolute. - </para> - -<programlisting> -$ORIGIN example.com. -WWW CNAME MAIN-SERVER -</programlisting> - - <para> - is equivalent to - </para> - -<programlisting> -WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM. -</programlisting> - - </sect3> - <sect3> - <title>The <command>$INCLUDE</command> Directive</title> - <para> - Syntax: <command>$INCLUDE</command> - <replaceable>filename</replaceable> - <optional> -<replaceable>origin</replaceable> </optional> - <optional> <replaceable>comment</replaceable> </optional> - </para> - <para> - Read and process the file <filename>filename</filename> as - if it were included into the file at this point. If <command>origin</command> is - specified the file is processed with <command>$ORIGIN</command> set - to that value, otherwise the current <command>$ORIGIN</command> is - used. - </para> - <para> - The origin and the current domain name - revert to the values they had prior to the <command>$INCLUDE</command> once - the file has been read. - </para> - <note> - <para> - RFC 1035 specifies that the current origin should be restored - after - an <command>$INCLUDE</command>, but it is silent - on whether the current - domain name should also be restored. BIND 9 restores both of - them. - This could be construed as a deviation from RFC 1035, a - feature, or both. - </para> - </note> - </sect3> - <sect3> - <title>The <command>$TTL</command> Directive</title> - <para> - Syntax: <command>$TTL</command> - <replaceable>default-ttl</replaceable> - <optional> -<replaceable>comment</replaceable> </optional> - </para> - <para> - Set the default Time To Live (TTL) for subsequent records - with undefined TTLs. Valid TTLs are of the range 0-2147483647 - seconds. - </para> - <para><command>$TTL</command> - is defined in RFC 2308. - </para> - </sect3> - </sect2> - <sect2> - <title><acronym>BIND</acronym> Master File Extension: the <command>$GENERATE</command> Directive</title> - <para> - Syntax: <command>$GENERATE</command> - <replaceable>range</replaceable> - <replaceable>lhs</replaceable> - <optional><replaceable>ttl</replaceable></optional> - <optional><replaceable>class</replaceable></optional> - <replaceable>type</replaceable> - <replaceable>rhs</replaceable> - <optional><replaceable>comment</replaceable></optional> - </para> - <para><command>$GENERATE</command> - is used to create a series of resource records that only - differ from each other by an - iterator. <command>$GENERATE</command> can be used to - easily generate the sets of records required to support - sub /24 reverse delegations described in RFC 2317: - Classless IN-ADDR.ARPA delegation. - </para> - -<programlisting>$ORIGIN 0.0.192.IN-ADDR.ARPA. -$GENERATE 1-2 0 NS SERVER$.EXAMPLE. -$GENERATE 1-127 $ CNAME $.0</programlisting> - - <para> - is equivalent to - </para> - -<programlisting>0.0.0.192.IN-ADDR.ARPA NS SERVER1.EXAMPLE. -0.0.0.192.IN-ADDR.ARPA. NS SERVER2.EXAMPLE. -1.0.0.192.IN-ADDR.ARPA. CNAME 1.0.0.0.192.IN-ADDR.ARPA. -2.0.0.192.IN-ADDR.ARPA. CNAME 2.0.0.0.192.IN-ADDR.ARPA. -... -127.0.0.192.IN-ADDR.ARPA. CNAME 127.0.0.0.192.IN-ADDR.ARPA. -</programlisting> - - <informaltable colsep="0" rowsep="0"> - <tgroup cols="2" colsep="0" rowsep="0" tgroupstyle="3Level-table"> - <colspec colname="1" colnum="1" colsep="0" colwidth="0.875in"/> - <colspec colname="2" colnum="2" colsep="0" colwidth="4.250in"/> - <tbody> - <row rowsep="0"> - <entry colname="1"> - <para><command>range</command></para> - </entry> - <entry colname="2"> - <para> - This can be one of two forms: start-stop - or start-stop/step. If the first form is used, then step - is set to - 1. All of start, stop and step must be positive. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>lhs</command></para> - </entry> - <entry colname="2"> - <para>This - describes the owner name of the resource records - to be created. Any single <command>$</command> - (dollar sign) - symbols within the <command>lhs</command> side - are replaced by the iterator value. - - To get a $ in the output, you need to escape the - <command>$</command> using a backslash - <command>\</command>, - e.g. <command>\$</command>. The - <command>$</command> may optionally be followed - by modifiers which change the offset from the - iterator, field width and base. - - Modifiers are introduced by a - <command>{</command> (left brace) immediately following the - <command>$</command> as - <command>${offset[,width[,base]]}</command>. - For example, <command>${-20,3,d}</command> - subtracts 20 from the current value, prints the - result as a decimal in a zero-padded field of - width 3. - - Available output forms are decimal - (<command>d</command>), octal - (<command>o</command>) and hexadecimal - (<command>x</command> or <command>X</command> - for uppercase). The default modifier is - <command>${0,0,d}</command>. If the - <command>lhs</command> is not absolute, the - current <command>$ORIGIN</command> is appended - to the name. - </para> - <para> - For compatibility with earlier versions, <command>$$</command> is still - recognized as indicating a literal $ in the output. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>ttl</command></para> - </entry> - <entry colname="2"> - <para> - Specifies the time-to-live of the generated records. If - not specified this will be inherited using the - normal ttl inheritance rules. - </para> - <para><command>class</command> - and <command>ttl</command> can be - entered in either order. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>class</command></para> - </entry> - <entry colname="2"> - <para> - Specifies the class of the generated records. - This must match the zone class if it is - specified. - </para> - <para><command>class</command> - and <command>ttl</command> can be - entered in either order. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>type</command></para> - </entry> - <entry colname="2"> - <para> - At present the only supported types are - PTR, CNAME, DNAME, A, AAAA and NS. - </para> - </entry> - </row> - <row rowsep="0"> - <entry colname="1"> - <para><command>rhs</command></para> - </entry> - <entry colname="2"> - <para> - <command>rhs</command> is a domain name. It is processed - similarly to lhs. - </para> - </entry> - </row> - </tbody> - </tgroup> - </informaltable> - <para> - The <command>$GENERATE</command> directive is a <acronym>BIND</acronym> extension - and not part of the standard zone file format. - </para> - <para> - BIND 8 does not support the optional TTL and CLASS fields. - </para> - </sect2> - - <sect2 id="zonefile_format"> - <title>Additional File Formats</title> - <para> - In addition to the standard textual format, BIND 9 - supports the ability to read or dump to zone files in - other formats. The <constant>raw</constant> format is - currently available as an additional format. It is a - binary format representing BIND 9's internal data - structure directly, thereby remarkably improving the - loading time. - </para> - <para> - For a primary server, a zone file in the - <constant>raw</constant> format is expected to be - generated from a textual zone file by the - <command>named-compilezone</command> command. For a - secondary server or for a dynamic zone, it is automatically - generated (if this format is specified by the - <command>masterfile-format</command> option) when - <command>named</command> dumps the zone contents after - zone transfer or when applying prior updates. - </para> - <para> - If a zone file in a binary format needs manual modification, - it first must be converted to a textual form by the - <command>named-compilezone</command> command. All - necessary modification should go to the text file, which - should then be converted to the binary form by the - <command>named-compilezone</command> command again. - </para> - <para> - Although the <constant>raw</constant> format uses the - network byte order and avoids architecture-dependent - data alignment so that it is as much portable as - possible, it is primarily expected to be used inside - the same single system. In order to export a zone - file in the <constant>raw</constant> format or make a - portable backup of the file, it is recommended to - convert the file to the standard textual representation. - </para> - </sect2> - </sect1> - </chapter> - <chapter id="Bv9ARM.ch07"> - <title><acronym>BIND</acronym> 9 Security Considerations</title> - <sect1 id="Access_Control_Lists"> - <title>Access Control Lists</title> - <para> - Access Control Lists (ACLs), are address match lists that - you can set up and nickname for future use in <command>allow-notify</command>, - <command>allow-query</command>, <command>allow-recursion</command>, - <command>blackhole</command>, <command>allow-transfer</command>, - etc. - </para> - <para> - Using ACLs allows you to have finer control over who can access - your name server, without cluttering up your config files with huge - lists of IP addresses. - </para> - <para> - It is a <emphasis>good idea</emphasis> to use ACLs, and to - control access to your server. Limiting access to your server by - outside parties can help prevent spoofing and denial of service (DoS) attacks against - your server. - </para> - <para> - Here is an example of how to properly apply ACLs: - </para> - -<programlisting> -// Set up an ACL named "bogusnets" that will block RFC1918 space -// and some reserved space, which is commonly used in spoofing attacks. -acl bogusnets { - 0.0.0.0/8; 1.0.0.0/8; 2.0.0.0/8; 192.0.2.0/24; 224.0.0.0/3; - 10.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16; -}; - -// Set up an ACL called our-nets. Replace this with the real IP numbers. -acl our-nets { x.x.x.x/24; x.x.x.x/21; }; -options { - ... - ... - allow-query { our-nets; }; - allow-recursion { our-nets; }; - ... - blackhole { bogusnets; }; - ... -}; - -zone "example.com" { - type master; - file "m/example.com"; - allow-query { any; }; -}; -</programlisting> - - <para> - This allows recursive queries of the server from the outside - unless recursion has been previously disabled. - </para> - <para> - For more information on how to use ACLs to protect your server, - see the <emphasis>AUSCERT</emphasis> advisory at: - </para> - <para> - <ulink url="ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos" - >ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos</ulink> - </para> - </sect1> - <sect1> - <title><command>Chroot</command> and <command>Setuid</command></title> - <para> - On UNIX servers, it is possible to run <acronym>BIND</acronym> in a <emphasis>chrooted</emphasis> environment - (using the <command>chroot()</command> function) by specifying the "<option>-t</option>" - option. This can help improve system security by placing <acronym>BIND</acronym> in - a "sandbox", which will limit the damage done if a server is - compromised. - </para> - <para> - Another useful feature in the UNIX version of <acronym>BIND</acronym> is the - ability to run the daemon as an unprivileged user ( <option>-u</option> <replaceable>user</replaceable> ). - We suggest running as an unprivileged user when using the <command>chroot</command> feature. - </para> - <para> - Here is an example command line to load <acronym>BIND</acronym> in a <command>chroot</command> sandbox, - <command>/var/named</command>, and to run <command>named</command> <command>setuid</command> to - user 202: - </para> - <para> - <userinput>/usr/local/bin/named -u 202 -t /var/named</userinput> - </para> - - <sect2> - <title>The <command>chroot</command> Environment</title> - - <para> - In order for a <command>chroot</command> environment - to - work properly in a particular directory - (for example, <filename>/var/named</filename>), - you will need to set up an environment that includes everything - <acronym>BIND</acronym> needs to run. - From <acronym>BIND</acronym>'s point of view, <filename>/var/named</filename> is - the root of the filesystem. You will need to adjust the values of - options like - like <command>directory</command> and <command>pid-file</command> to account - for this. - </para> - <para> - Unlike with earlier versions of BIND, you typically will - <emphasis>not</emphasis> need to compile <command>named</command> - statically nor install shared libraries under the new root. - However, depending on your operating system, you may need - to set up things like - <filename>/dev/zero</filename>, - <filename>/dev/random</filename>, - <filename>/dev/log</filename>, and - <filename>/etc/localtime</filename>. - </para> - </sect2> - - <sect2> - <title>Using the <command>setuid</command> Function</title> - - <para> - Prior to running the <command>named</command> daemon, - use - the <command>touch</command> utility (to change file - access and - modification times) or the <command>chown</command> - utility (to - set the user id and/or group id) on files - to which you want <acronym>BIND</acronym> - to write. - </para> - <note> - Note that if the <command>named</command> daemon is running as an - unprivileged user, it will not be able to bind to new restricted - ports if the server is reloaded. - </note> - </sect2> - </sect1> - - <sect1 id="dynamic_update_security"> - <title>Dynamic Update Security</title> - - <para> - Access to the dynamic - update facility should be strictly limited. In earlier versions of - <acronym>BIND</acronym>, the only way to do this was - based on the IP - address of the host requesting the update, by listing an IP address - or - network prefix in the <command>allow-update</command> - zone option. - This method is insecure since the source address of the update UDP - packet - is easily forged. Also note that if the IP addresses allowed by the - <command>allow-update</command> option include the - address of a slave - server which performs forwarding of dynamic updates, the master can - be - trivially attacked by sending the update to the slave, which will - forward it to the master with its own source IP address causing the - master to approve it without question. - </para> - - <para> - For these reasons, we strongly recommend that updates be - cryptographically authenticated by means of transaction signatures - (TSIG). That is, the <command>allow-update</command> - option should - list only TSIG key names, not IP addresses or network - prefixes. Alternatively, the new <command>update-policy</command> - option can be used. - </para> - - <para> - Some sites choose to keep all dynamically-updated DNS data - in a subdomain and delegate that subdomain to a separate zone. This - way, the top-level zone containing critical data such as the IP - addresses - of public web and mail servers need not allow dynamic update at - all. - </para> - - </sect1> - </chapter> - - <chapter id="Bv9ARM.ch08"> - <title>Troubleshooting</title> - <sect1> - <title>Common Problems</title> - <sect2> - <title>It's not working; how can I figure out what's wrong?</title> - - <para> - The best solution to solving installation and - configuration issues is to take preventative measures by setting - up logging files beforehand. The log files provide a - source of hints and information that can be used to figure out - what went wrong and how to fix the problem. - </para> - - </sect2> - </sect1> - <sect1> - <title>Incrementing and Changing the Serial Number</title> - - <para> - Zone serial numbers are just numbers — they aren't - date related. A lot of people set them to a number that - represents a date, usually of the form YYYYMMDDRR. - Occasionally they will make a mistake and set them to a - "date in the future" then try to correct them by setting - them to the "current date". This causes problems because - serial numbers are used to indicate that a zone has been - updated. If the serial number on the slave server is - lower than the serial number on the master, the slave - server will attempt to update its copy of the zone. - </para> - - <para> - Setting the serial number to a lower number on the master - server than the slave server means that the slave will not perform - updates to its copy of the zone. - </para> - - <para> - The solution to this is to add 2147483647 (2^31-1) to the - number, reload the zone and make sure all slaves have updated to - the new zone serial number, then reset the number to what you want - it to be, and reload the zone again. - </para> - - </sect1> - <sect1> - <title>Where Can I Get Help?</title> - - <para> - The Internet Systems Consortium - (<acronym>ISC</acronym>) offers a wide range - of support and service agreements for <acronym>BIND</acronym> and <acronym>DHCP</acronym> servers. Four - levels of premium support are available and each level includes - support for all <acronym>ISC</acronym> programs, - significant discounts on products - and training, and a recognized priority on bug fixes and - non-funded feature requests. In addition, <acronym>ISC</acronym> offers a standard - support agreement package which includes services ranging from bug - fix announcements to remote support. It also includes training in - <acronym>BIND</acronym> and <acronym>DHCP</acronym>. - </para> - - <para> - To discuss arrangements for support, contact - <ulink url="mailto:info@isc.org">info@isc.org</ulink> or visit the - <acronym>ISC</acronym> web page at - <ulink url="http://www.isc.org/services/support/" - >http://www.isc.org/services/support/</ulink> - to read more. - </para> - </sect1> - </chapter> - <appendix id="Bv9ARM.ch09"> - <title>Appendices</title> - <sect1> - <title>Acknowledgments</title> - <sect2 id="historical_dns_information"> - <title>A Brief History of the <acronym>DNS</acronym> and <acronym>BIND</acronym></title> - - <para> - Although the "official" beginning of the Domain Name - System occurred in 1984 with the publication of RFC 920, the - core of the new system was described in 1983 in RFCs 882 and - 883. From 1984 to 1987, the ARPAnet (the precursor to today's - Internet) became a testbed of experimentation for developing the - new naming/addressing scheme in a rapidly expanding, - operational network environment. New RFCs were written and - published in 1987 that modified the original documents to - incorporate improvements based on the working model. RFC 1034, - "Domain Names-Concepts and Facilities", and RFC 1035, "Domain - Names-Implementation and Specification" were published and - became the standards upon which all <acronym>DNS</acronym> implementations are - built. - </para> - - <para> - The first working domain name server, called "Jeeves", was - written in 1983-84 by Paul Mockapetris for operation on DEC - Tops-20 - machines located at the University of Southern California's - Information - Sciences Institute (USC-ISI) and SRI International's Network - Information - Center (SRI-NIC). A <acronym>DNS</acronym> server for - Unix machines, the Berkeley Internet - Name Domain (<acronym>BIND</acronym>) package, was - written soon after by a group of - graduate students at the University of California at Berkeley - under - a grant from the US Defense Advanced Research Projects - Administration - (DARPA). - </para> - <para> - Versions of <acronym>BIND</acronym> through - 4.8.3 were maintained by the Computer - Systems Research Group (CSRG) at UC Berkeley. Douglas Terry, Mark - Painter, David Riggle and Songnian Zhou made up the initial <acronym>BIND</acronym> - project team. After that, additional work on the software package - was done by Ralph Campbell. Kevin Dunlap, a Digital Equipment - Corporation - employee on loan to the CSRG, worked on <acronym>BIND</acronym> for 2 years, from 1985 - to 1987. Many other people also contributed to <acronym>BIND</acronym> development - during that time: Doug Kingston, Craig Partridge, Smoot - Carl-Mitchell, - Mike Muuss, Jim Bloom and Mike Schwartz. <acronym>BIND</acronym> maintenance was subsequently - handled by Mike Karels and Øivind Kure. - </para> - <para> - <acronym>BIND</acronym> versions 4.9 and 4.9.1 were - released by Digital Equipment - Corporation (now Compaq Computer Corporation). Paul Vixie, then - a DEC employee, became <acronym>BIND</acronym>'s - primary caretaker. He was assisted - by Phil Almquist, Robert Elz, Alan Barrett, Paul Albitz, Bryan - Beecher, Andrew - Partan, Andy Cherenson, Tom Limoncelli, Berthold Paffrath, Fuat - Baran, Anant Kumar, Art Harkin, Win Treese, Don Lewis, Christophe - Wolfhugel, and others. - </para> - <para> - In 1994, <acronym>BIND</acronym> version 4.9.2 was sponsored by - Vixie Enterprises. Paul - Vixie became <acronym>BIND</acronym>'s principal - architect/programmer. - </para> - <para> - <acronym>BIND</acronym> versions from 4.9.3 onward - have been developed and maintained - by the Internet Systems Consortium and its predecessor, - the Internet Software Consortium, with support being provided - by ISC's sponsors. - </para> - <para> - As co-architects/programmers, Bob Halley and - Paul Vixie released the first production-ready version of - <acronym>BIND</acronym> version 8 in May 1997. - </para> - <para> - BIND version 9 was released in September 2000 and is a - major rewrite of nearly all aspects of the underlying - BIND architecture. - </para> - <para> - BIND version 4 is officially deprecated and BIND version - 8 development is considered maintenance-only in favor - of BIND version 9. No additional development is done - on BIND version 4 or BIND version 8 other than for - security-related patches. - </para> - <para> - <acronym>BIND</acronym> development work is made - possible today by the sponsorship - of several corporations, and by the tireless work efforts of - numerous individuals. - </para> - </sect2> - </sect1> - <sect1> - <title>General <acronym>DNS</acronym> Reference Information</title> - <sect2 id="ipv6addresses"> - <title>IPv6 addresses (AAAA)</title> - <para> - IPv6 addresses are 128-bit identifiers for interfaces and - sets of interfaces which were introduced in the <acronym>DNS</acronym> to facilitate - scalable Internet routing. There are three types of addresses: <emphasis>Unicast</emphasis>, - an identifier for a single interface; - <emphasis>Anycast</emphasis>, - an identifier for a set of interfaces; and <emphasis>Multicast</emphasis>, - an identifier for a set of interfaces. Here we describe the global - Unicast address scheme. For more information, see RFC 3587, - "Global Unicast Address Format." - </para> - <para> - IPv6 unicast addresses consist of a - <emphasis>global routing prefix</emphasis>, a - <emphasis>subnet identifier</emphasis>, and an - <emphasis>interface identifier</emphasis>. - </para> - <para> - The global routing prefix is provided by the - upstream provider or ISP, and (roughly) corresponds to the - IPv4 <emphasis>network</emphasis> section - of the address range. - - The subnet identifier is for local subnetting, much the - same as subnetting an - IPv4 /16 network into /24 subnets. - - The interface identifier is the address of an individual - interface on a given network; in IPv6, addresses belong to - interfaces rather than to machines. - </para> - <para> - The subnetting capability of IPv6 is much more flexible than - that of IPv4: subnetting can be carried out on bit boundaries, - in much the same way as Classless InterDomain Routing - (CIDR), and the DNS PTR representation ("nibble" format) - makes setting up reverse zones easier. - </para> - <para> - The Interface Identifier must be unique on the local link, - and is usually generated automatically by the IPv6 - implementation, although it is usually possible to - override the default setting if necessary. A typical IPv6 - address might look like: - <command>2001:db8:201:9:a00:20ff:fe81:2b32</command> - </para> - <para> - IPv6 address specifications often contain long strings - of zeros, so the architects have included a shorthand for - specifying - them. The double colon (`::') indicates the longest possible - string - of zeros that can fit, and can be used only once in an address. - </para> - </sect2> - </sect1> - <sect1 id="bibliography"> - <title>Bibliography (and Suggested Reading)</title> - <sect2 id="rfcs"> - <title>Request for Comments (RFCs)</title> - <para> - Specification documents for the Internet protocol suite, including - the <acronym>DNS</acronym>, are published as part of - the Request for Comments (RFCs) - series of technical notes. The standards themselves are defined - by the Internet Engineering Task Force (IETF) and the Internet - Engineering Steering Group (IESG). RFCs can be obtained online via FTP at: - </para> - <para> - <ulink url="ftp://www.isi.edu/in-notes/"> - ftp://www.isi.edu/in-notes/RFC<replaceable>xxxx</replaceable>.txt - </ulink> - </para> - <para> - (where <replaceable>xxxx</replaceable> is - the number of the RFC). RFCs are also available via the Web at: - </para> - <para> - <ulink url="http://www.ietf.org/rfc/" - >http://www.ietf.org/rfc/</ulink>. - </para> - <bibliography> - <bibliodiv> - <!-- one of (BIBLIOENTRY BIBLIOMIXED) --> - <title>Standards</title> - <biblioentry> - <abbrev>RFC974</abbrev> - <author> - <surname>Partridge</surname> - <firstname>C.</firstname> - </author> - <title>Mail Routing and the Domain System</title> - <pubdate>January 1986</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1034</abbrev> - <author> - <surname>Mockapetris</surname> - <firstname>P.V.</firstname> - </author> - <title>Domain Names — Concepts and Facilities</title> - <pubdate>November 1987</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1035</abbrev> - <author> - <surname>Mockapetris</surname> - <firstname>P. V.</firstname> - </author> <title>Domain Names — Implementation and - Specification</title> - <pubdate>November 1987</pubdate> - </biblioentry> - </bibliodiv> - <bibliodiv id="proposed_standards" xreflabel="Proposed Standards"> - - <title>Proposed Standards</title> - <!-- one of (BIBLIOENTRY BIBLIOMIXED) --> - <biblioentry> - <abbrev>RFC2181</abbrev> - <author> - <surname>Elz</surname> - <firstname>R., R. Bush</firstname> - </author> - <title>Clarifications to the <acronym>DNS</acronym> - Specification</title> - <pubdate>July 1997</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2308</abbrev> - <author> - <surname>Andrews</surname> - <firstname>M.</firstname> - </author> - <title>Negative Caching of <acronym>DNS</acronym> - Queries</title> - <pubdate>March 1998</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1995</abbrev> - <author> - <surname>Ohta</surname> - <firstname>M.</firstname> - </author> - <title>Incremental Zone Transfer in <acronym>DNS</acronym></title> - <pubdate>August 1996</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1996</abbrev> - <author> - <surname>Vixie</surname> - <firstname>P.</firstname> - </author> - <title>A Mechanism for Prompt Notification of Zone Changes</title> - <pubdate>August 1996</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2136</abbrev> - <authorgroup> - <author> - <surname>Vixie</surname> - <firstname>P.</firstname> - </author> - <author> - <firstname>S.</firstname> - <surname>Thomson</surname> - </author> - <author> - <firstname>Y.</firstname> - <surname>Rekhter</surname> - </author> - <author> - <firstname>J.</firstname> - <surname>Bound</surname> - </author> - </authorgroup> - <title>Dynamic Updates in the Domain Name System</title> - <pubdate>April 1997</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2671</abbrev> - <authorgroup> - <author> - <firstname>P.</firstname> - <surname>Vixie</surname> - </author> - </authorgroup> - <title>Extension Mechanisms for DNS (EDNS0)</title> - <pubdate>August 1997</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2672</abbrev> - <authorgroup> - <author> - <firstname>M.</firstname> - <surname>Crawford</surname> - </author> - </authorgroup> - <title>Non-Terminal DNS Name Redirection</title> - <pubdate>August 1999</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2845</abbrev> - <authorgroup> - <author> - <surname>Vixie</surname> - <firstname>P.</firstname> - </author> - <author> - <firstname>O.</firstname> - <surname>Gudmundsson</surname> - </author> - <author> - <firstname>D.</firstname> - <surname>Eastlake</surname> - <lineage>3rd</lineage> - </author> - <author> - <firstname>B.</firstname> - <surname>Wellington</surname> - </author> - </authorgroup> - <title>Secret Key Transaction Authentication for <acronym>DNS</acronym> (TSIG)</title> - <pubdate>May 2000</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2930</abbrev> - <authorgroup> - <author> - <firstname>D.</firstname> - <surname>Eastlake</surname> - <lineage>3rd</lineage> - </author> - </authorgroup> - <title>Secret Key Establishment for DNS (TKEY RR)</title> - <pubdate>September 2000</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2931</abbrev> - <authorgroup> - <author> - <firstname>D.</firstname> - <surname>Eastlake</surname> - <lineage>3rd</lineage> - </author> - </authorgroup> - <title>DNS Request and Transaction Signatures (SIG(0)s)</title> - <pubdate>September 2000</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3007</abbrev> - <authorgroup> - <author> - <firstname>B.</firstname> - <surname>Wellington</surname> - </author> - </authorgroup> - <title>Secure Domain Name System (DNS) Dynamic Update</title> - <pubdate>November 2000</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3645</abbrev> - <authorgroup> - <author> - <firstname>S.</firstname> - <surname>Kwan</surname> - </author> - <author> - <firstname>P.</firstname> - <surname>Garg</surname> - </author> - <author> - <firstname>J.</firstname> - <surname>Gilroy</surname> - </author> - <author> - <firstname>L.</firstname> - <surname>Esibov</surname> - </author> - <author> - <firstname>J.</firstname> - <surname>Westhead</surname> - </author> - <author> - <firstname>R.</firstname> - <surname>Hall</surname> - </author> - </authorgroup> - <title>Generic Security Service Algorithm for Secret - Key Transaction Authentication for DNS - (GSS-TSIG)</title> - <pubdate>October 2003</pubdate> - </biblioentry> - </bibliodiv> - <bibliodiv> - <title><acronym>DNS</acronym> Security Proposed Standards</title> - <biblioentry> - <abbrev>RFC3225</abbrev> - <authorgroup> - <author> - <firstname>D.</firstname> - <surname>Conrad</surname> - </author> - </authorgroup> - <title>Indicating Resolver Support of DNSSEC</title> - <pubdate>December 2001</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3833</abbrev> - <authorgroup> - <author> - <firstname>D.</firstname> - <surname>Atkins</surname> - </author> - <author> - <firstname>R.</firstname> - <surname>Austein</surname> - </author> - </authorgroup> - <title>Threat Analysis of the Domain Name System (DNS)</title> - <pubdate>August 2004</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC4033</abbrev> - <authorgroup> - <author> - <firstname>R.</firstname> - <surname>Arends</surname> - </author> - <author> - <firstname>R.</firstname> - <surname>Austein</surname> - </author> - <author> - <firstname>M.</firstname> - <surname>Larson</surname> - </author> - <author> - <firstname>D.</firstname> - <surname>Massey</surname> - </author> - <author> - <firstname>S.</firstname> - <surname>Rose</surname> - </author> - </authorgroup> - <title>DNS Security Introduction and Requirements</title> - <pubdate>March 2005</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC4044</abbrev> - <authorgroup> - <author> - <firstname>R.</firstname> - <surname>Arends</surname> - </author> - <author> - <firstname>R.</firstname> - <surname>Austein</surname> - </author> - <author> - <firstname>M.</firstname> - <surname>Larson</surname> - </author> - <author> - <firstname>D.</firstname> - <surname>Massey</surname> - </author> - <author> - <firstname>S.</firstname> - <surname>Rose</surname> - </author> - </authorgroup> - <title>Resource Records for the DNS Security Extensions</title> - <pubdate>March 2005</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC4035</abbrev> - <authorgroup> - <author> - <firstname>R.</firstname> - <surname>Arends</surname> - </author> - <author> - <firstname>R.</firstname> - <surname>Austein</surname> - </author> - <author> - <firstname>M.</firstname> - <surname>Larson</surname> - </author> - <author> - <firstname>D.</firstname> - <surname>Massey</surname> - </author> - <author> - <firstname>S.</firstname> - <surname>Rose</surname> - </author> - </authorgroup> - <title>Protocol Modifications for the DNS - Security Extensions</title> - <pubdate>March 2005</pubdate> - </biblioentry> - </bibliodiv> - <bibliodiv> - <title>Other Important RFCs About <acronym>DNS</acronym> - Implementation</title> - <biblioentry> - <abbrev>RFC1535</abbrev> - <author> - <surname>Gavron</surname> - <firstname>E.</firstname> - </author> - <title>A Security Problem and Proposed Correction With Widely - Deployed <acronym>DNS</acronym> Software.</title> - <pubdate>October 1993</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1536</abbrev> - <authorgroup> - <author> - <surname>Kumar</surname> - <firstname>A.</firstname> - </author> - <author> - <firstname>J.</firstname> - <surname>Postel</surname> - </author> - <author> - <firstname>C.</firstname> - <surname>Neuman</surname> - </author> - <author> - <firstname>P.</firstname> - <surname>Danzig</surname> - </author> - <author> - <firstname>S.</firstname> - <surname>Miller</surname> - </author> - </authorgroup> - <title>Common <acronym>DNS</acronym> Implementation - Errors and Suggested Fixes</title> - <pubdate>October 1993</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1982</abbrev> - <authorgroup> - <author> - <surname>Elz</surname> - <firstname>R.</firstname> - </author> - <author> - <firstname>R.</firstname> - <surname>Bush</surname> - </author> - </authorgroup> - <title>Serial Number Arithmetic</title> - <pubdate>August 1996</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC4074</abbrev> - <authorgroup> - <author> - <surname>Morishita</surname> - <firstname>Y.</firstname> - </author> - <author> - <firstname>T.</firstname> - <surname>Jinmei</surname> - </author> - </authorgroup> - <title>Common Misbehaviour Against <acronym>DNS</acronym> - Queries for IPv6 Addresses</title> - <pubdate>May 2005</pubdate> - </biblioentry> - </bibliodiv> - <bibliodiv> - <title>Resource Record Types</title> - <biblioentry> - <abbrev>RFC1183</abbrev> - <authorgroup> - <author> - <surname>Everhart</surname> - <firstname>C.F.</firstname> - </author> - <author> - <firstname>L. A.</firstname> - <surname>Mamakos</surname> - </author> - <author> - <firstname>R.</firstname> - <surname>Ullmann</surname> - </author> - <author> - <firstname>P.</firstname> - <surname>Mockapetris</surname> - </author> - </authorgroup> - <title>New <acronym>DNS</acronym> RR Definitions</title> - <pubdate>October 1990</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1706</abbrev> - <authorgroup> - <author> - <surname>Manning</surname> - <firstname>B.</firstname> - </author> - <author> - <firstname>R.</firstname> - <surname>Colella</surname> - </author> - </authorgroup> - <title><acronym>DNS</acronym> NSAP Resource Records</title> - <pubdate>October 1994</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2168</abbrev> - <authorgroup> - <author> - <surname>Daniel</surname> - <firstname>R.</firstname> - </author> - <author> - <firstname>M.</firstname> - <surname>Mealling</surname> - </author> - </authorgroup> - <title>Resolution of Uniform Resource Identifiers using - the Domain Name System</title> - <pubdate>June 1997</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1876</abbrev> - <authorgroup> - <author> - <surname>Davis</surname> - <firstname>C.</firstname> - </author> - <author> - <firstname>P.</firstname> - <surname>Vixie</surname> - </author> - <author> - <firstname>T.</firstname> - <firstname>Goodwin</firstname> - </author> - <author> - <firstname>I.</firstname> - <surname>Dickinson</surname> - </author> - </authorgroup> - <title>A Means for Expressing Location Information in the - Domain - Name System</title> - <pubdate>January 1996</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2052</abbrev> - <authorgroup> - <author> - <surname>Gulbrandsen</surname> - <firstname>A.</firstname> - </author> - <author> - <firstname>P.</firstname> - <surname>Vixie</surname> - </author> - </authorgroup> - <title>A <acronym>DNS</acronym> RR for Specifying the - Location of - Services.</title> - <pubdate>October 1996</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2163</abbrev> - <author> - <surname>Allocchio</surname> - <firstname>A.</firstname> - </author> - <title>Using the Internet <acronym>DNS</acronym> to - Distribute MIXER - Conformant Global Address Mapping</title> - <pubdate>January 1998</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2230</abbrev> - <author> - <surname>Atkinson</surname> - <firstname>R.</firstname> - </author> - <title>Key Exchange Delegation Record for the <acronym>DNS</acronym></title> - <pubdate>October 1997</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2536</abbrev> - <author> - <surname>Eastlake</surname> - <firstname>D.</firstname> - <lineage>3rd</lineage> - </author> - <title>DSA KEYs and SIGs in the Domain Name System (DNS)</title> - <pubdate>March 1999</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2537</abbrev> - <author> - <surname>Eastlake</surname> - <firstname>D.</firstname> - <lineage>3rd</lineage> - </author> - <title>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</title> - <pubdate>March 1999</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2538</abbrev> - <authorgroup> - <author> - <surname>Eastlake</surname> - <firstname>D.</firstname> - <lineage>3rd</lineage> - </author> - <author> - <surname>Gudmundsson</surname> - <firstname>O.</firstname> - </author> - </authorgroup> - <title>Storing Certificates in the Domain Name System (DNS)</title> - <pubdate>March 1999</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2539</abbrev> - <authorgroup> - <author> - <surname>Eastlake</surname> - <firstname>D.</firstname> - <lineage>3rd</lineage> - </author> - </authorgroup> - <title>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</title> - <pubdate>March 1999</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2540</abbrev> - <authorgroup> - <author> - <surname>Eastlake</surname> - <firstname>D.</firstname> - <lineage>3rd</lineage> - </author> - </authorgroup> - <title>Detached Domain Name System (DNS) Information</title> - <pubdate>March 1999</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2782</abbrev> - <author> - <surname>Gulbrandsen</surname> - <firstname>A.</firstname> - </author> - <author> - <surname>Vixie</surname> - <firstname>P.</firstname> - </author> - <author> - <surname>Esibov</surname> - <firstname>L.</firstname> - </author> - <title>A DNS RR for specifying the location of services (DNS SRV)</title> - <pubdate>February 2000</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2915</abbrev> - <author> - <surname>Mealling</surname> - <firstname>M.</firstname> - </author> - <author> - <surname>Daniel</surname> - <firstname>R.</firstname> - </author> - <title>The Naming Authority Pointer (NAPTR) DNS Resource Record</title> - <pubdate>September 2000</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3110</abbrev> - <author> - <surname>Eastlake</surname> - <firstname>D.</firstname> - <lineage>3rd</lineage> - </author> - <title>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</title> - <pubdate>May 2001</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3123</abbrev> - <author> - <surname>Koch</surname> - <firstname>P.</firstname> - </author> - <title>A DNS RR Type for Lists of Address Prefixes (APL RR)</title> - <pubdate>June 2001</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3596</abbrev> - <authorgroup> - <author> - <surname>Thomson</surname> - <firstname>S.</firstname> - </author> - <author> - <firstname>C.</firstname> - <surname>Huitema</surname> - </author> - <author> - <firstname>V.</firstname> - <surname>Ksinant</surname> - </author> - <author> - <firstname>M.</firstname> - <surname>Souissi</surname> - </author> - </authorgroup> - <title><acronym>DNS</acronym> Extensions to support IP - version 6</title> - <pubdate>October 2003</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3597</abbrev> - <author> - <surname>Gustafsson</surname> - <firstname>A.</firstname> - </author> - <title>Handling of Unknown DNS Resource Record (RR) Types</title> - <pubdate>September 2003</pubdate> - </biblioentry> - </bibliodiv> - <bibliodiv> - <title><acronym>DNS</acronym> and the Internet</title> - <biblioentry> - <abbrev>RFC1101</abbrev> - <author> - <surname>Mockapetris</surname> - <firstname>P. V.</firstname> - </author> - <title><acronym>DNS</acronym> Encoding of Network Names - and Other Types</title> - <pubdate>April 1989</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1123</abbrev> - <author> - <surname>Braden</surname> - <surname>R.</surname> - </author> - <title>Requirements for Internet Hosts - Application and - Support</title> - <pubdate>October 1989</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1591</abbrev> - <author> - <surname>Postel</surname> - <firstname>J.</firstname> - </author> - <title>Domain Name System Structure and Delegation</title> - <pubdate>March 1994</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2317</abbrev> - <authorgroup> - <author> - <surname>Eidnes</surname> - <firstname>H.</firstname> - </author> - <author> - <firstname>G.</firstname> - <surname>de Groot</surname> - </author> - <author> - <firstname>P.</firstname> - <surname>Vixie</surname> - </author> - </authorgroup> - <title>Classless IN-ADDR.ARPA Delegation</title> - <pubdate>March 1998</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2826</abbrev> - <authorgroup> - <author> - <surname>Internet Architecture Board</surname> - </author> - </authorgroup> - <title>IAB Technical Comment on the Unique DNS Root</title> - <pubdate>May 2000</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2929</abbrev> - <authorgroup> - <author> - <surname>Eastlake</surname> - <firstname>D.</firstname> - <lineage>3rd</lineage> - </author> - <author> - <surname>Brunner-Williams</surname> - <firstname>E.</firstname> - </author> - <author> - <surname>Manning</surname> - <firstname>B.</firstname> - </author> - </authorgroup> - <title>Domain Name System (DNS) IANA Considerations</title> - <pubdate>September 2000</pubdate> - </biblioentry> - </bibliodiv> - <bibliodiv> - <title><acronym>DNS</acronym> Operations</title> - <biblioentry> - <abbrev>RFC1033</abbrev> - <author> - <surname>Lottor</surname> - <firstname>M.</firstname> - </author> - <title>Domain administrators operations guide.</title> - <pubdate>November 1987</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1537</abbrev> - <author> - <surname>Beertema</surname> - <firstname>P.</firstname> - </author> - <title>Common <acronym>DNS</acronym> Data File - Configuration Errors</title> - <pubdate>October 1993</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1912</abbrev> - <author> - <surname>Barr</surname> - <firstname>D.</firstname> - </author> - <title>Common <acronym>DNS</acronym> Operational and - Configuration Errors</title> - <pubdate>February 1996</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2010</abbrev> - <authorgroup> - <author> - <surname>Manning</surname> - <firstname>B.</firstname> - </author> - <author> - <firstname>P.</firstname> - <surname>Vixie</surname> - </author> - </authorgroup> - <title>Operational Criteria for Root Name Servers.</title> - <pubdate>October 1996</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2219</abbrev> - <authorgroup> - <author> - <surname>Hamilton</surname> - <firstname>M.</firstname> - </author> - <author> - <firstname>R.</firstname> - <surname>Wright</surname> - </author> - </authorgroup> - <title>Use of <acronym>DNS</acronym> Aliases for - Network Services.</title> - <pubdate>October 1997</pubdate> - </biblioentry> - </bibliodiv> - <bibliodiv> - <title>Internationalized Domain Names</title> - <biblioentry> - <abbrev>RFC2825</abbrev> - <authorgroup> - <author> - <surname>IAB</surname> - </author> - <author> - <surname>Daigle</surname> - <firstname>R.</firstname> - </author> - </authorgroup> - <title>A Tangled Web: Issues of I18N, Domain Names, - and the Other Internet protocols</title> - <pubdate>May 2000</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3490</abbrev> - <authorgroup> - <author> - <surname>Faltstrom</surname> - <firstname>P.</firstname> - </author> - <author> - <surname>Hoffman</surname> - <firstname>P.</firstname> - </author> - <author> - <surname>Costello</surname> - <firstname>A.</firstname> - </author> - </authorgroup> - <title>Internationalizing Domain Names in Applications (IDNA)</title> - <pubdate>March 2003</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3491</abbrev> - <authorgroup> - <author> - <surname>Hoffman</surname> - <firstname>P.</firstname> - </author> - <author> - <surname>Blanchet</surname> - <firstname>M.</firstname> - </author> - </authorgroup> - <title>Nameprep: A Stringprep Profile for Internationalized Domain Names</title> - <pubdate>March 2003</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3492</abbrev> - <authorgroup> - <author> - <surname>Costello</surname> - <firstname>A.</firstname> - </author> - </authorgroup> - <title>Punycode: A Bootstring encoding of Unicode - for Internationalized Domain Names in - Applications (IDNA)</title> - <pubdate>March 2003</pubdate> - </biblioentry> - </bibliodiv> - <bibliodiv> - <title>Other <acronym>DNS</acronym>-related RFCs</title> - <note> - <para> - Note: the following list of RFCs, although - <acronym>DNS</acronym>-related, are not - concerned with implementing software. - </para> - </note> - <biblioentry> - <abbrev>RFC1464</abbrev> - <author> - <surname>Rosenbaum</surname> - <firstname>R.</firstname> - </author> - <title>Using the Domain Name System To Store Arbitrary String - Attributes</title> - <pubdate>May 1993</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1713</abbrev> - <author> - <surname>Romao</surname> - <firstname>A.</firstname> - </author> - <title>Tools for <acronym>DNS</acronym> Debugging</title> - <pubdate>November 1994</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC1794</abbrev> - <author> - <surname>Brisco</surname> - <firstname>T.</firstname> - </author> - <title><acronym>DNS</acronym> Support for Load - Balancing</title> - <pubdate>April 1995</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2240</abbrev> - <author> - <surname>Vaughan</surname> - <firstname>O.</firstname> - </author> - <title>A Legal Basis for Domain Name Allocation</title> - <pubdate>November 1997</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2345</abbrev> - <authorgroup> - <author> - <surname>Klensin</surname> - <firstname>J.</firstname> - </author> - <author> - <firstname>T.</firstname> - <surname>Wolf</surname> - </author> - <author> - <firstname>G.</firstname> - <surname>Oglesby</surname> - </author> - </authorgroup> - <title>Domain Names and Company Name Retrieval</title> - <pubdate>May 1998</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2352</abbrev> - <author> - <surname>Vaughan</surname> - <firstname>O.</firstname> - </author> - <title>A Convention For Using Legal Names as Domain Names</title> - <pubdate>May 1998</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3071</abbrev> - <authorgroup> - <author> - <surname>Klensin</surname> - <firstname>J.</firstname> - </author> - </authorgroup> - <title>Reflections on the DNS, RFC 1591, and Categories of Domains</title> - <pubdate>February 2001</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3258</abbrev> - <authorgroup> - <author> - <surname>Hardie</surname> - <firstname>T.</firstname> - </author> - </authorgroup> - <title>Distributing Authoritative Name Servers via - Shared Unicast Addresses</title> - <pubdate>April 2002</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3901</abbrev> - <authorgroup> - <author> - <surname>Durand</surname> - <firstname>A.</firstname> - </author> - <author> - <firstname>J.</firstname> - <surname>Ihren</surname> - </author> - </authorgroup> - <title>DNS IPv6 Transport Operational Guidelines</title> - <pubdate>September 2004</pubdate> - </biblioentry> - </bibliodiv> - <bibliodiv> - <title>Obsolete and Unimplemented Experimental RFC</title> - <biblioentry> - <abbrev>RFC1712</abbrev> - <authorgroup> - <author> - <surname>Farrell</surname> - <firstname>C.</firstname> - </author> - <author> - <firstname>M.</firstname> - <surname>Schulze</surname> - </author> - <author> - <firstname>S.</firstname> - <surname>Pleitner</surname> - </author> - <author> - <firstname>D.</firstname> - <surname>Baldoni</surname> - </author> - </authorgroup> - <title><acronym>DNS</acronym> Encoding of Geographical - Location</title> - <pubdate>November 1994</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2673</abbrev> - <authorgroup> - <author> - <surname>Crawford</surname> - <firstname>M.</firstname> - </author> - </authorgroup> - <title>Binary Labels in the Domain Name System</title> - <pubdate>August 1999</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2874</abbrev> - <authorgroup> - <author> - <surname>Crawford</surname> - <firstname>M.</firstname> - </author> - <author> - <surname>Huitema</surname> - <firstname>C.</firstname> - </author> - </authorgroup> - <title>DNS Extensions to Support IPv6 Address Aggregation - and Renumbering</title> - <pubdate>July 2000</pubdate> - </biblioentry> - </bibliodiv> - <bibliodiv> - <title>Obsoleted DNS Security RFCs</title> - <note> - <para> - Most of these have been consolidated into RFC4033, - RFC4034 and RFC4035 which collectively describe DNSSECbis. - </para> - </note> - <biblioentry> - <abbrev>RFC2065</abbrev> - <authorgroup> - <author> - <surname>Eastlake</surname> - <lineage>3rd</lineage> - <firstname>D.</firstname> - </author> - <author> - <firstname>C.</firstname> - <surname>Kaufman</surname> - </author> - </authorgroup> - <title>Domain Name System Security Extensions</title> - <pubdate>January 1997</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2137</abbrev> - <author> - <surname>Eastlake</surname> - <lineage>3rd</lineage> - <firstname>D.</firstname> - </author> - <title>Secure Domain Name System Dynamic Update</title> - <pubdate>April 1997</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC2535</abbrev> - <authorgroup> - <author> - <surname>Eastlake</surname> - <lineage>3rd</lineage> - <firstname>D.</firstname> - </author> - </authorgroup> - <title>Domain Name System Security Extensions</title> - <pubdate>March 1999</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3008</abbrev> - <authorgroup> - <author> - <surname>Wellington</surname> - <firstname>B.</firstname> - </author> - </authorgroup> - <title>Domain Name System Security (DNSSEC) - Signing Authority</title> - <pubdate>November 2000</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3090</abbrev> - <authorgroup> - <author> - <surname>Lewis</surname> - <firstname>E.</firstname> - </author> - </authorgroup> - <title>DNS Security Extension Clarification on Zone Status</title> - <pubdate>March 2001</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3445</abbrev> - <authorgroup> - <author> - <surname>Massey</surname> - <firstname>D.</firstname> - </author> - <author> - <surname>Rose</surname> - <firstname>S.</firstname> - </author> - </authorgroup> - <title>Limiting the Scope of the KEY Resource Record (RR)</title> - <pubdate>December 2002</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3655</abbrev> - <authorgroup> - <author> - <surname>Wellington</surname> - <firstname>B.</firstname> - </author> - <author> - <surname>Gudmundsson</surname> - <firstname>O.</firstname> - </author> - </authorgroup> - <title>Redefinition of DNS Authenticated Data (AD) bit</title> - <pubdate>November 2003</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3658</abbrev> - <authorgroup> - <author> - <surname>Gudmundsson</surname> - <firstname>O.</firstname> - </author> - </authorgroup> - <title>Delegation Signer (DS) Resource Record (RR)</title> - <pubdate>December 2003</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3755</abbrev> - <authorgroup> - <author> - <surname>Weiler</surname> - <firstname>S.</firstname> - </author> - </authorgroup> - <title>Legacy Resolver Compatibility for Delegation Signer (DS)</title> - <pubdate>May 2004</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3757</abbrev> - <authorgroup> - <author> - <surname>Kolkman</surname> - <firstname>O.</firstname> - </author> - <author> - <surname>Schlyter</surname> - <firstname>J.</firstname> - </author> - <author> - <surname>Lewis</surname> - <firstname>E.</firstname> - </author> - </authorgroup> - <title>Domain Name System KEY (DNSKEY) Resource Record - (RR) Secure Entry Point (SEP) Flag</title> - <pubdate>April 2004</pubdate> - </biblioentry> - <biblioentry> - <abbrev>RFC3845</abbrev> - <authorgroup> - <author> - <surname>Schlyter</surname> - <firstname>J.</firstname> - </author> - </authorgroup> - <title>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</title> - <pubdate>August 2004</pubdate> - </biblioentry> - </bibliodiv> - </bibliography> - </sect2> - <sect2 id="internet_drafts"> - <title>Internet Drafts</title> - <para> - Internet Drafts (IDs) are rough-draft working documents of - the Internet Engineering Task Force. They are, in essence, RFCs - in the preliminary stages of development. Implementors are - cautioned not - to regard IDs as archival, and they should not be quoted or cited - in any formal documents unless accompanied by the disclaimer that - they are "works in progress." IDs have a lifespan of six months - after which they are deleted unless updated by their authors. - </para> - </sect2> - <sect2> - <title>Other Documents About <acronym>BIND</acronym></title> - <para/> - <bibliography> - <biblioentry> - <authorgroup> - <author> - <surname>Albitz</surname> - <firstname>Paul</firstname> - </author> - <author> - <firstname>Cricket</firstname> - <surname>Liu</surname> - </author> - </authorgroup> - <title><acronym>DNS</acronym> and <acronym>BIND</acronym></title> - <copyright> - <year>1998</year> - <holder>Sebastopol, CA: O'Reilly and Associates</holder> - </copyright> - </biblioentry> - </bibliography> - </sect2> - </sect1> - </appendix> - - <reference id="Bv9ARM.ch10"> - <title>Manual pages</title> - <xi:include href="../../bin/dig/dig.docbook"/> - <xi:include href="../../bin/dig/host.docbook"/> - <xi:include href="../../bin/dnssec/dnssec-keygen.docbook"/> - <xi:include href="../../bin/dnssec/dnssec-signzone.docbook"/> - <xi:include href="../../bin/check/named-checkconf.docbook"/> - <xi:include href="../../bin/check/named-checkzone.docbook"/> - <xi:include href="../../bin/named/named.docbook"/> - <!-- named.conf.docbook and others? --> - <!-- nsupdate gives db2latex indigestion, markup problems? --> - <xi:include href="../../bin/rndc/rndc.docbook"/> - <xi:include href="../../bin/rndc/rndc.conf.docbook"/> - <xi:include href="../../bin/rndc/rndc-confgen.docbook"/> - </reference> - - </book> - -<!-- - - Local variables: - - mode: sgml - - End: - --> diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch01.html b/contrib/bind9/doc/arm/Bv9ARM.ch01.html deleted file mode 100644 index 30e9e0d..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.ch01.html +++ /dev/null @@ -1,560 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: Bv9ARM.ch01.html,v 1.16.18.21 2007/10/31 01:35:57 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>Chapter�1.�Introduction</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="prev" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="next" href="Bv9ARM.ch02.html" title="Chapter�2.�BIND Resource Requirements"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">Chapter�1.�Introduction</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="Bv9ARM.html">Prev</a>�</td> -<th width="60%" align="center">�</th> -<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch02.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="chapter" lang="en"> -<div class="titlepage"><div><div><h2 class="title"> -<a name="Bv9ARM.ch01"></a>Chapter�1.�Introduction</h2></div></div></div> -<div class="toc"> -<p><b>Table of Contents</b></p> -<dl> -<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564117">Scope of Document</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564140">Organization of This Document</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2563474">Conventions Used in This Document</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564816">The Domain Name System (<acronym class="acronym">DNS</acronym>)</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564837">DNS Fundamentals</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564871">Domains and Domain Names</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567208">Zones</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567285">Authoritative Name Servers</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567526">Caching Name Servers</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567588">Name Servers in Multiple Roles</a></span></dt> -</dl></dd> -</dl> -</div> -<p> - The Internet Domain Name System (<acronym class="acronym">DNS</acronym>) - consists of the syntax - to specify the names of entities in the Internet in a hierarchical - manner, the rules used for delegating authority over names, and the - system implementation that actually maps names to Internet - addresses. <acronym class="acronym">DNS</acronym> data is maintained in a - group of distributed - hierarchical databases. - </p> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2564117"></a>Scope of Document</h2></div></div></div> -<p> - The Berkeley Internet Name Domain - (<acronym class="acronym">BIND</acronym>) implements a - domain name server for a number of operating systems. This - document provides basic information about the installation and - care of the Internet Systems Consortium (<acronym class="acronym">ISC</acronym>) - <acronym class="acronym">BIND</acronym> version 9 software package for - system administrators. - </p> -<p> - This version of the manual corresponds to BIND version 9.4. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2564140"></a>Organization of This Document</h2></div></div></div> -<p> - In this document, <span class="emphasis"><em>Section 1</em></span> introduces - the basic <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym> concepts. <span class="emphasis"><em>Section 2</em></span> - describes resource requirements for running <acronym class="acronym">BIND</acronym> in various - environments. Information in <span class="emphasis"><em>Section 3</em></span> is - <span class="emphasis"><em>task-oriented</em></span> in its presentation and is - organized functionally, to aid in the process of installing the - <acronym class="acronym">BIND</acronym> 9 software. The task-oriented - section is followed by - <span class="emphasis"><em>Section 4</em></span>, which contains more advanced - concepts that the system administrator may need for implementing - certain options. <span class="emphasis"><em>Section 5</em></span> - describes the <acronym class="acronym">BIND</acronym> 9 lightweight - resolver. The contents of <span class="emphasis"><em>Section 6</em></span> are - organized as in a reference manual to aid in the ongoing - maintenance of the software. <span class="emphasis"><em>Section 7</em></span> addresses - security considerations, and - <span class="emphasis"><em>Section 8</em></span> contains troubleshooting help. The - main body of the document is followed by several - <span class="emphasis"><em>appendices</em></span> which contain useful reference - information, such as a <span class="emphasis"><em>bibliography</em></span> and - historic information related to <acronym class="acronym">BIND</acronym> - and the Domain Name - System. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2563474"></a>Conventions Used in This Document</h2></div></div></div> -<p> - In this document, we use the following general typographic - conventions: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - <span class="emphasis"><em>To describe:</em></span> - </p> - </td> -<td> - <p> - <span class="emphasis"><em>We use the style:</em></span> - </p> - </td> -</tr> -<tr> -<td> - <p> - a pathname, filename, URL, hostname, - mailing list name, or new term or concept - </p> - </td> -<td> - <p> - <code class="filename">Fixed width</code> - </p> - </td> -</tr> -<tr> -<td> - <p> - literal user - input - </p> - </td> -<td> - <p> - <strong class="userinput"><code>Fixed Width Bold</code></strong> - </p> - </td> -</tr> -<tr> -<td> - <p> - program output - </p> - </td> -<td> - <p> - <code class="computeroutput">Fixed Width</code> - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - The following conventions are used in descriptions of the - <acronym class="acronym">BIND</acronym> configuration file:</p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - <span class="emphasis"><em>To describe:</em></span> - </p> - </td> -<td> - <p> - <span class="emphasis"><em>We use the style:</em></span> - </p> - </td> -</tr> -<tr> -<td> - <p> - keywords - </p> - </td> -<td> - <p> - <code class="literal">Fixed Width</code> - </p> - </td> -</tr> -<tr> -<td> - <p> - variables - </p> - </td> -<td> - <p> - <code class="varname">Fixed Width</code> - </p> - </td> -</tr> -<tr> -<td> - <p> - Optional input - </p> - </td> -<td> - <p> - [<span class="optional">Text is enclosed in square brackets</span>] - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2564816"></a>The Domain Name System (<acronym class="acronym">DNS</acronym>)</h2></div></div></div> -<p> - The purpose of this document is to explain the installation - and upkeep of the <acronym class="acronym">BIND</acronym> (Berkeley Internet - Name Domain) software package, and we - begin by reviewing the fundamentals of the Domain Name System - (<acronym class="acronym">DNS</acronym>) as they relate to <acronym class="acronym">BIND</acronym>. - </p> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2564837"></a>DNS Fundamentals</h3></div></div></div> -<p> - The Domain Name System (DNS) is a hierarchical, distributed - database. It stores information for mapping Internet host names to - IP - addresses and vice versa, mail routing information, and other data - used by Internet applications. - </p> -<p> - Clients look up information in the DNS by calling a - <span class="emphasis"><em>resolver</em></span> library, which sends queries to one or - more <span class="emphasis"><em>name servers</em></span> and interprets the responses. - The <acronym class="acronym">BIND</acronym> 9 software distribution - contains a - name server, <span><strong class="command">named</strong></span>, and two resolver - libraries, <span><strong class="command">liblwres</strong></span> and <span><strong class="command">libbind</strong></span>. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2564871"></a>Domains and Domain Names</h3></div></div></div> -<p> - The data stored in the DNS is identified by <span class="emphasis"><em>domain names</em></span> that are organized as a tree according to - organizational or administrative boundaries. Each node of the tree, - called a <span class="emphasis"><em>domain</em></span>, is given a label. The domain - name of the - node is the concatenation of all the labels on the path from the - node to the <span class="emphasis"><em>root</em></span> node. This is represented - in written form as a string of labels listed from right to left and - separated by dots. A label need only be unique within its parent - domain. - </p> -<p> - For example, a domain name for a host at the - company <span class="emphasis"><em>Example, Inc.</em></span> could be - <code class="literal">ourhost.example.com</code>, - where <code class="literal">com</code> is the - top level domain to which - <code class="literal">ourhost.example.com</code> belongs, - <code class="literal">example</code> is - a subdomain of <code class="literal">com</code>, and - <code class="literal">ourhost</code> is the - name of the host. - </p> -<p> - For administrative purposes, the name space is partitioned into - areas called <span class="emphasis"><em>zones</em></span>, each starting at a node and - extending down to the leaf nodes or to nodes where other zones - start. - The data for each zone is stored in a <span class="emphasis"><em>name server</em></span>, which answers queries about the zone using the - <span class="emphasis"><em>DNS protocol</em></span>. - </p> -<p> - The data associated with each domain name is stored in the - form of <span class="emphasis"><em>resource records</em></span> (<acronym class="acronym">RR</acronym>s). - Some of the supported resource record types are described in - <a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them" title="Types of Resource Records and When to Use Them">the section called “Types of Resource Records and When to Use Them”</a>. - </p> -<p> - For more detailed information about the design of the DNS and - the DNS protocol, please refer to the standards documents listed in - <a href="Bv9ARM.ch09.html#rfcs" title="Request for Comments (RFCs)">the section called “Request for Comments (RFCs)”</a>. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2567208"></a>Zones</h3></div></div></div> -<p> - To properly operate a name server, it is important to understand - the difference between a <span class="emphasis"><em>zone</em></span> - and a <span class="emphasis"><em>domain</em></span>. - </p> -<p> - As stated previously, a zone is a point of delegation in - the <acronym class="acronym">DNS</acronym> tree. A zone consists of - those contiguous parts of the domain - tree for which a name server has complete information and over which - it has authority. It contains all domain names from a certain point - downward in the domain tree except those which are delegated to - other zones. A delegation point is marked by one or more - <span class="emphasis"><em>NS records</em></span> in the - parent zone, which should be matched by equivalent NS records at - the root of the delegated zone. - </p> -<p> - For instance, consider the <code class="literal">example.com</code> - domain which includes names - such as <code class="literal">host.aaa.example.com</code> and - <code class="literal">host.bbb.example.com</code> even though - the <code class="literal">example.com</code> zone includes - only delegations for the <code class="literal">aaa.example.com</code> and - <code class="literal">bbb.example.com</code> zones. A zone can - map - exactly to a single domain, but could also include only part of a - domain, the rest of which could be delegated to other - name servers. Every name in the <acronym class="acronym">DNS</acronym> - tree is a - <span class="emphasis"><em>domain</em></span>, even if it is - <span class="emphasis"><em>terminal</em></span>, that is, has no - <span class="emphasis"><em>subdomains</em></span>. Every subdomain is a domain and - every domain except the root is also a subdomain. The terminology is - not intuitive and we suggest that you read RFCs 1033, 1034 and 1035 - to - gain a complete understanding of this difficult and subtle - topic. - </p> -<p> - Though <acronym class="acronym">BIND</acronym> is called a "domain name - server", - it deals primarily in terms of zones. The master and slave - declarations in the <code class="filename">named.conf</code> file - specify - zones, not domains. When you ask some other site if it is willing to - be a slave server for your <span class="emphasis"><em>domain</em></span>, you are - actually asking for slave service for some collection of zones. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2567285"></a>Authoritative Name Servers</h3></div></div></div> -<p> - Each zone is served by at least - one <span class="emphasis"><em>authoritative name server</em></span>, - which contains the complete data for the zone. - To make the DNS tolerant of server and network failures, - most zones have two or more authoritative servers, on - different networks. - </p> -<p> - Responses from authoritative servers have the "authoritative - answer" (AA) bit set in the response packets. This makes them - easy to identify when debugging DNS configurations using tools like - <span><strong class="command">dig</strong></span> (<a href="Bv9ARM.ch03.html#diagnostic_tools" title="Diagnostic Tools">the section called “Diagnostic Tools”</a>). - </p> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2567308"></a>The Primary Master</h4></div></div></div> -<p> - The authoritative server where the master copy of the zone - data is maintained is called the - <span class="emphasis"><em>primary master</em></span> server, or simply the - <span class="emphasis"><em>primary</em></span>. Typically it loads the zone - contents from some local file edited by humans or perhaps - generated mechanically from some other local file which is - edited by humans. This file is called the - <span class="emphasis"><em>zone file</em></span> or - <span class="emphasis"><em>master file</em></span>. - </p> -<p> - In some cases, however, the master file may not be edited - by humans at all, but may instead be the result of - <span class="emphasis"><em>dynamic update</em></span> operations. - </p> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2567338"></a>Slave Servers</h4></div></div></div> -<p> - The other authoritative servers, the <span class="emphasis"><em>slave</em></span> - servers (also known as <span class="emphasis"><em>secondary</em></span> servers) - load - the zone contents from another server using a replication process - known as a <span class="emphasis"><em>zone transfer</em></span>. Typically the data - are - transferred directly from the primary master, but it is also - possible - to transfer it from another slave. In other words, a slave server - may itself act as a master to a subordinate slave server. - </p> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2567360"></a>Stealth Servers</h4></div></div></div> -<p> - Usually all of the zone's authoritative servers are listed in - NS records in the parent zone. These NS records constitute - a <span class="emphasis"><em>delegation</em></span> of the zone from the parent. - The authoritative servers are also listed in the zone file itself, - at the <span class="emphasis"><em>top level</em></span> or <span class="emphasis"><em>apex</em></span> - of the zone. You can list servers in the zone's top-level NS - records that are not in the parent's NS delegation, but you cannot - list servers in the parent's delegation that are not present at - the zone's top level. - </p> -<p> - A <span class="emphasis"><em>stealth server</em></span> is a server that is - authoritative for a zone but is not listed in that zone's NS - records. Stealth servers can be used for keeping a local copy of - a - zone to speed up access to the zone's records or to make sure that - the - zone is available even if all the "official" servers for the zone - are - inaccessible. - </p> -<p> - A configuration where the primary master server itself is a - stealth server is often referred to as a "hidden primary" - configuration. One use for this configuration is when the primary - master - is behind a firewall and therefore unable to communicate directly - with the outside world. - </p> -</div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2567526"></a>Caching Name Servers</h3></div></div></div> -<p> - The resolver libraries provided by most operating systems are - <span class="emphasis"><em>stub resolvers</em></span>, meaning that they are not - capable of - performing the full DNS resolution process by themselves by talking - directly to the authoritative servers. Instead, they rely on a - local - name server to perform the resolution on their behalf. Such a - server - is called a <span class="emphasis"><em>recursive</em></span> name server; it performs - <span class="emphasis"><em>recursive lookups</em></span> for local clients. - </p> -<p> - To improve performance, recursive servers cache the results of - the lookups they perform. Since the processes of recursion and - caching are intimately connected, the terms - <span class="emphasis"><em>recursive server</em></span> and - <span class="emphasis"><em>caching server</em></span> are often used synonymously. - </p> -<p> - The length of time for which a record may be retained in - the cache of a caching name server is controlled by the - Time To Live (TTL) field associated with each resource record. - </p> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2567561"></a>Forwarding</h4></div></div></div> -<p> - Even a caching name server does not necessarily perform - the complete recursive lookup itself. Instead, it can - <span class="emphasis"><em>forward</em></span> some or all of the queries - that it cannot satisfy from its cache to another caching name - server, - commonly referred to as a <span class="emphasis"><em>forwarder</em></span>. - </p> -<p> - There may be one or more forwarders, - and they are queried in turn until the list is exhausted or an - answer - is found. Forwarders are typically used when you do not - wish all the servers at a given site to interact directly with the - rest of - the Internet servers. A typical scenario would involve a number - of internal <acronym class="acronym">DNS</acronym> servers and an - Internet firewall. Servers unable - to pass packets through the firewall would forward to the server - that can do it, and that server would query the Internet <acronym class="acronym">DNS</acronym> servers - on the internal server's behalf. - </p> -</div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2567588"></a>Name Servers in Multiple Roles</h3></div></div></div> -<p> - The <acronym class="acronym">BIND</acronym> name server can - simultaneously act as - a master for some zones, a slave for other zones, and as a caching - (recursive) server for a set of local clients. - </p> -<p> - However, since the functions of authoritative name service - and caching/recursive name service are logically separate, it is - often advantageous to run them on separate server machines. - - A server that only provides authoritative name service - (an <span class="emphasis"><em>authoritative-only</em></span> server) can run with - recursion disabled, improving reliability and security. - - A server that is not authoritative for any zones and only provides - recursive service to local - clients (a <span class="emphasis"><em>caching-only</em></span> server) - does not need to be reachable from the Internet at large and can - be placed inside a firewall. - </p> -</div> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="Bv9ARM.html">Prev</a>�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch02.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">BIND 9 Administrator Reference Manual�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�Chapter�2.�<acronym class="acronym">BIND</acronym> Resource Requirements</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch02.html b/contrib/bind9/doc/arm/Bv9ARM.ch02.html deleted file mode 100644 index cbf6c15..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.ch02.html +++ /dev/null @@ -1,158 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: Bv9ARM.ch02.html,v 1.13.18.21 2007/10/31 01:35:57 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>Chapter�2.�BIND Resource Requirements</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="prev" href="Bv9ARM.ch01.html" title="Chapter�1.�Introduction"> -<link rel="next" href="Bv9ARM.ch03.html" title="Chapter�3.�Name Server Configuration"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">Chapter�2.�<acronym class="acronym">BIND</acronym> Resource Requirements</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="Bv9ARM.ch01.html">Prev</a>�</td> -<th width="60%" align="center">�</th> -<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch03.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="chapter" lang="en"> -<div class="titlepage"><div><div><h2 class="title"> -<a name="Bv9ARM.ch02"></a>Chapter�2.�<acronym class="acronym">BIND</acronym> Resource Requirements</h2></div></div></div> -<div class="toc"> -<p><b>Table of Contents</b></p> -<dl> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567622">Hardware requirements</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567649">CPU Requirements</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567661">Memory Requirements</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567688">Name Server Intensive Environment Issues</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567699">Supported Operating Systems</a></span></dt> -</dl> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2567622"></a>Hardware requirements</h2></div></div></div> -<p> - <acronym class="acronym">DNS</acronym> hardware requirements have - traditionally been quite modest. - For many installations, servers that have been pensioned off from - active duty have performed admirably as <acronym class="acronym">DNS</acronym> servers. - </p> -<p> - The DNSSEC features of <acronym class="acronym">BIND</acronym> 9 - may prove to be quite - CPU intensive however, so organizations that make heavy use of these - features may wish to consider larger systems for these applications. - <acronym class="acronym">BIND</acronym> 9 is fully multithreaded, allowing - full utilization of - multiprocessor systems for installations that need it. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2567649"></a>CPU Requirements</h2></div></div></div> -<p> - CPU requirements for <acronym class="acronym">BIND</acronym> 9 range from - i486-class machines - for serving of static zones without caching, to enterprise-class - machines if you intend to process many dynamic updates and DNSSEC - signed zones, serving many thousands of queries per second. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2567661"></a>Memory Requirements</h2></div></div></div> -<p> - The memory of the server has to be large enough to fit the - cache and zones loaded off disk. The <span><strong class="command">max-cache-size</strong></span> - option can be used to limit the amount of memory used by the cache, - at the expense of reducing cache hit rates and causing more <acronym class="acronym">DNS</acronym> - traffic. - Additionally, if additional section caching - (<a href="Bv9ARM.ch06.html#acache" title="Additional Section Caching">the section called “Additional Section Caching”</a>) is enabled, - the <span><strong class="command">max-acache-size</strong></span> option can be used to - limit the amount - of memory used by the mechanism. - It is still good practice to have enough memory to load - all zone and cache data into memory — unfortunately, the best - way - to determine this for a given installation is to watch the name server - in operation. After a few weeks the server process should reach - a relatively stable size where entries are expiring from the cache as - fast as they are being inserted. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2567688"></a>Name Server Intensive Environment Issues</h2></div></div></div> -<p> - For name server intensive environments, there are two alternative - configurations that may be used. The first is where clients and - any second-level internal name servers query a main name server, which - has enough memory to build a large cache. This approach minimizes - the bandwidth used by external name lookups. The second alternative - is to set up second-level internal name servers to make queries - independently. - In this configuration, none of the individual machines needs to - have as much memory or CPU power as in the first alternative, but - this has the disadvantage of making many more external queries, - as none of the name servers share their cached data. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2567699"></a>Supported Operating Systems</h2></div></div></div> -<p> - ISC <acronym class="acronym">BIND</acronym> 9 compiles and runs on a large - number - of Unix-like operating system and on NT-derived versions of - Microsoft Windows such as Windows 2000 and Windows XP. For an - up-to-date - list of supported systems, see the README file in the top level - directory - of the BIND 9 source distribution. - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="Bv9ARM.ch01.html">Prev</a>�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch03.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">Chapter�1.�Introduction�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�Chapter�3.�Name Server Configuration</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch03.html b/contrib/bind9/doc/arm/Bv9ARM.ch03.html deleted file mode 100644 index 18f2711..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.ch03.html +++ /dev/null @@ -1,808 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: Bv9ARM.ch03.html,v 1.35.18.31 2007/10/31 01:35:57 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>Chapter�3.�Name Server Configuration</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="prev" href="Bv9ARM.ch02.html" title="Chapter�2.�BIND Resource Requirements"> -<link rel="next" href="Bv9ARM.ch04.html" title="Chapter�4.�Advanced DNS Features"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">Chapter�3.�Name Server Configuration</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="Bv9ARM.ch02.html">Prev</a>�</td> -<th width="60%" align="center">�</th> -<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch04.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="chapter" lang="en"> -<div class="titlepage"><div><div><h2 class="title"> -<a name="Bv9ARM.ch03"></a>Chapter�3.�Name Server Configuration</h2></div></div></div> -<div class="toc"> -<p><b>Table of Contents</b></p> -<dl> -<dt><span class="sect1"><a href="Bv9ARM.ch03.html#sample_configuration">Sample Configurations</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568004">A Caching-only Name Server</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568020">An Authoritative-only Name Server</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568042">Load Balancing</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568465">Name Server Operations</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568470">Tools for Use With the Name Server Daemon</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2570184">Signals</a></span></dt> -</dl></dd> -</dl> -</div> -<p> - In this section we provide some suggested configurations along - with guidelines for their use. We suggest reasonable values for - certain option settings. - </p> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="sample_configuration"></a>Sample Configurations</h2></div></div></div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2568004"></a>A Caching-only Name Server</h3></div></div></div> -<p> - The following sample configuration is appropriate for a caching-only - name server for use by clients internal to a corporation. All - queries - from outside clients are refused using the <span><strong class="command">allow-query</strong></span> - option. Alternatively, the same effect could be achieved using - suitable - firewall rules. - </p> -<pre class="programlisting"> -// Two corporate subnets we wish to allow queries from. -acl corpnets { 192.168.4.0/24; 192.168.7.0/24; }; -options { - directory "/etc/namedb"; // Working directory - allow-query { corpnets; }; -}; -// Provide a reverse mapping for the loopback address 127.0.0.1 -zone "0.0.127.in-addr.arpa" { - type master; - file "localhost.rev"; - notify no; -}; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2568020"></a>An Authoritative-only Name Server</h3></div></div></div> -<p> - This sample configuration is for an authoritative-only server - that is the master server for "<code class="filename">example.com</code>" - and a slave for the subdomain "<code class="filename">eng.example.com</code>". - </p> -<pre class="programlisting"> -options { - directory "/etc/namedb"; // Working directory - allow-query-cache { none; }; // Do not allow access to cache - allow-query { any; }; // This is the default - recursion no; // Do not provide recursive service -}; - -// Provide a reverse mapping for the loopback address 127.0.0.1 -zone "0.0.127.in-addr.arpa" { - type master; - file "localhost.rev"; - notify no; -}; -// We are the master server for example.com -zone "example.com" { - type master; - file "example.com.db"; - // IP addresses of slave servers allowed to transfer example.com - allow-transfer { - 192.168.4.14; - 192.168.5.53; - }; -}; -// We are a slave server for eng.example.com -zone "eng.example.com" { - type slave; - file "eng.example.com.bk"; - // IP address of eng.example.com master server - masters { 192.168.4.12; }; -}; -</pre> -</div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2568042"></a>Load Balancing</h2></div></div></div> -<p> - A primitive form of load balancing can be achieved in - the <acronym class="acronym">DNS</acronym> by using multiple records - (such as multiple A records) for one name. - </p> -<p> - For example, if you have three WWW servers with network addresses - of 10.0.0.1, 10.0.0.2 and 10.0.0.3, a set of records such as the - following means that clients will connect to each machine one third - of the time: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -<col> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - Name - </p> - </td> -<td> - <p> - TTL - </p> - </td> -<td> - <p> - CLASS - </p> - </td> -<td> - <p> - TYPE - </p> - </td> -<td> - <p> - Resource Record (RR) Data - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="literal">www</code> - </p> - </td> -<td> - <p> - <code class="literal">600</code> - </p> - </td> -<td> - <p> - <code class="literal">IN</code> - </p> - </td> -<td> - <p> - <code class="literal">A</code> - </p> - </td> -<td> - <p> - <code class="literal">10.0.0.1</code> - </p> - </td> -</tr> -<tr> -<td> - <p></p> - </td> -<td> - <p> - <code class="literal">600</code> - </p> - </td> -<td> - <p> - <code class="literal">IN</code> - </p> - </td> -<td> - <p> - <code class="literal">A</code> - </p> - </td> -<td> - <p> - <code class="literal">10.0.0.2</code> - </p> - </td> -</tr> -<tr> -<td> - <p></p> - </td> -<td> - <p> - <code class="literal">600</code> - </p> - </td> -<td> - <p> - <code class="literal">IN</code> - </p> - </td> -<td> - <p> - <code class="literal">A</code> - </p> - </td> -<td> - <p> - <code class="literal">10.0.0.3</code> - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - When a resolver queries for these records, <acronym class="acronym">BIND</acronym> will rotate - them and respond to the query with the records in a different - order. In the example above, clients will randomly receive - records in the order 1, 2, 3; 2, 3, 1; and 3, 1, 2. Most clients - will use the first record returned and discard the rest. - </p> -<p> - For more detail on ordering responses, check the - <span><strong class="command">rrset-order</strong></span> substatement in the - <span><strong class="command">options</strong></span> statement, see - <a href="Bv9ARM.ch06.html#rrset_ordering">RRset Ordering</a>. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2568465"></a>Name Server Operations</h2></div></div></div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2568470"></a>Tools for Use With the Name Server Daemon</h3></div></div></div> -<p> - This section describes several indispensable diagnostic, - administrative and monitoring tools available to the system - administrator for controlling and debugging the name server - daemon. - </p> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="diagnostic_tools"></a>Diagnostic Tools</h4></div></div></div> -<p> - The <span><strong class="command">dig</strong></span>, <span><strong class="command">host</strong></span>, and - <span><strong class="command">nslookup</strong></span> programs are all command - line tools - for manually querying name servers. They differ in style and - output format. - </p> -<div class="variablelist"><dl> -<dt><span class="term"><a name="dig"></a><span><strong class="command">dig</strong></span></span></dt> -<dd> -<p> - The domain information groper (<span><strong class="command">dig</strong></span>) - is the most versatile and complete of these lookup tools. - It has two modes: simple interactive - mode for a single query, and batch mode which executes a - query for - each in a list of several query lines. All query options are - accessible - from the command line. - </p> -<div class="cmdsynopsis"><p><code class="command">dig</code> [@<em class="replaceable"><code>server</code></em>] <em class="replaceable"><code>domain</code></em> [<em class="replaceable"><code>query-type</code></em>] [<em class="replaceable"><code>query-class</code></em>] [+<em class="replaceable"><code>query-option</code></em>] [-<em class="replaceable"><code>dig-option</code></em>] [%<em class="replaceable"><code>comment</code></em>]</p></div> -<p> - The usual simple use of dig will take the form - </p> -<p> - <span><strong class="command">dig @server domain query-type query-class</strong></span> - </p> -<p> - For more information and a list of available commands and - options, see the <span><strong class="command">dig</strong></span> man - page. - </p> -</dd> -<dt><span class="term"><span><strong class="command">host</strong></span></span></dt> -<dd> -<p> - The <span><strong class="command">host</strong></span> utility emphasizes - simplicity - and ease of use. By default, it converts - between host names and Internet addresses, but its - functionality - can be extended with the use of options. - </p> -<div class="cmdsynopsis"><p><code class="command">host</code> [-aCdlnrsTwv] [-c <em class="replaceable"><code>class</code></em>] [-N <em class="replaceable"><code>ndots</code></em>] [-t <em class="replaceable"><code>type</code></em>] [-W <em class="replaceable"><code>timeout</code></em>] [-R <em class="replaceable"><code>retries</code></em>] [-m <em class="replaceable"><code>flag</code></em>] [-4] [-6] <em class="replaceable"><code>hostname</code></em> [<em class="replaceable"><code>server</code></em>]</p></div> -<p> - For more information and a list of available commands and - options, see the <span><strong class="command">host</strong></span> man - page. - </p> -</dd> -<dt><span class="term"><span><strong class="command">nslookup</strong></span></span></dt> -<dd> -<p><span><strong class="command">nslookup</strong></span> - has two modes: interactive and - non-interactive. Interactive mode allows the user to - query name servers for information about various - hosts and domains or to print a list of hosts in a - domain. Non-interactive mode is used to print just - the name and requested information for a host or - domain. - </p> -<div class="cmdsynopsis"><p><code class="command">nslookup</code> [-option...] [[<em class="replaceable"><code>host-to-find</code></em>] | [- [server]]]</p></div> -<p> - Interactive mode is entered when no arguments are given (the - default name server will be used) or when the first argument - is a - hyphen (`-') and the second argument is the host name or - Internet address - of a name server. - </p> -<p> - Non-interactive mode is used when the name or Internet - address - of the host to be looked up is given as the first argument. - The - optional second argument specifies the host name or address - of a name server. - </p> -<p> - Due to its arcane user interface and frequently inconsistent - behavior, we do not recommend the use of <span><strong class="command">nslookup</strong></span>. - Use <span><strong class="command">dig</strong></span> instead. - </p> -</dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="admin_tools"></a>Administrative Tools</h4></div></div></div> -<p> - Administrative tools play an integral part in the management - of a server. - </p> -<div class="variablelist"><dl> -<dt> -<a name="named-checkconf"></a><span class="term"><span><strong class="command">named-checkconf</strong></span></span> -</dt> -<dd> -<p> - The <span><strong class="command">named-checkconf</strong></span> program - checks the syntax of a <code class="filename">named.conf</code> file. - </p> -<div class="cmdsynopsis"><p><code class="command">named-checkconf</code> [-jvz] [-t <em class="replaceable"><code>directory</code></em>] [<em class="replaceable"><code>filename</code></em>]</p></div> -</dd> -<dt> -<a name="named-checkzone"></a><span class="term"><span><strong class="command">named-checkzone</strong></span></span> -</dt> -<dd> -<p> - The <span><strong class="command">named-checkzone</strong></span> program - checks a master file for - syntax and consistency. - </p> -<div class="cmdsynopsis"><p><code class="command">named-checkzone</code> [-djqvD] [-c <em class="replaceable"><code>class</code></em>] [-o <em class="replaceable"><code>output</code></em>] [-t <em class="replaceable"><code>directory</code></em>] [-w <em class="replaceable"><code>directory</code></em>] [-k <em class="replaceable"><code>(ignore|warn|fail)</code></em>] [-n <em class="replaceable"><code>(ignore|warn|fail)</code></em>] [-W <em class="replaceable"><code>(ignore|warn)</code></em>] <em class="replaceable"><code>zone</code></em> [<em class="replaceable"><code>filename</code></em>]</p></div> -</dd> -<dt> -<a name="named-compilezone"></a><span class="term"><span><strong class="command">named-compilezone</strong></span></span> -</dt> -<dd><p> - Similar to <span><strong class="command">named-checkzone,</strong></span> but - it always dumps the zone content to a specified file - (typically in a different format). - </p></dd> -<dt> -<a name="rndc"></a><span class="term"><span><strong class="command">rndc</strong></span></span> -</dt> -<dd> -<p> - The remote name daemon control - (<span><strong class="command">rndc</strong></span>) program allows the - system - administrator to control the operation of a name server. - Since <acronym class="acronym">BIND</acronym> 9.2, <span><strong class="command">rndc</strong></span> - supports all the commands of the BIND 8 <span><strong class="command">ndc</strong></span> - utility except <span><strong class="command">ndc start</strong></span> and - <span><strong class="command">ndc restart</strong></span>, which were also - not supported in <span><strong class="command">ndc</strong></span>'s - channel mode. - If you run <span><strong class="command">rndc</strong></span> without any - options - it will display a usage message as follows: - </p> -<div class="cmdsynopsis"><p><code class="command">rndc</code> [-c <em class="replaceable"><code>config</code></em>] [-s <em class="replaceable"><code>server</code></em>] [-p <em class="replaceable"><code>port</code></em>] [-y <em class="replaceable"><code>key</code></em>] <em class="replaceable"><code>command</code></em> [<em class="replaceable"><code>command</code></em>...]</p></div> -<p>The <span><strong class="command">command</strong></span> - is one of the following: - </p> -<div class="variablelist"><dl> -<dt><span class="term"><strong class="userinput"><code>reload</code></strong></span></dt> -<dd><p> - Reload configuration file and zones. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>reload <em class="replaceable"><code>zone</code></em> - [<span class="optional"><em class="replaceable"><code>class</code></em> - [<span class="optional"><em class="replaceable"><code>view</code></em></span>]</span>]</code></strong></span></dt> -<dd><p> - Reload the given zone. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>refresh <em class="replaceable"><code>zone</code></em> - [<span class="optional"><em class="replaceable"><code>class</code></em> - [<span class="optional"><em class="replaceable"><code>view</code></em></span>]</span>]</code></strong></span></dt> -<dd><p> - Schedule zone maintenance for the given zone. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>retransfer <em class="replaceable"><code>zone</code></em> - - [<span class="optional"><em class="replaceable"><code>class</code></em> - [<span class="optional"><em class="replaceable"><code>view</code></em></span>]</span>]</code></strong></span></dt> -<dd><p> - Retransfer the given zone from the master. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>freeze - [<span class="optional"><em class="replaceable"><code>zone</code></em> - [<span class="optional"><em class="replaceable"><code>class</code></em> - [<span class="optional"><em class="replaceable"><code>view</code></em></span>]</span>]</span>]</code></strong></span></dt> -<dd><p> - Suspend updates to a dynamic zone. If no zone is - specified, - then all zones are suspended. This allows manual - edits to be made to a zone normally updated by dynamic - update. It - also causes changes in the journal file to be synced - into the master - and the journal file to be removed. All dynamic - update attempts will - be refused while the zone is frozen. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>thaw - [<span class="optional"><em class="replaceable"><code>zone</code></em> - [<span class="optional"><em class="replaceable"><code>class</code></em> - [<span class="optional"><em class="replaceable"><code>view</code></em></span>]</span>]</span>]</code></strong></span></dt> -<dd><p> - Enable updates to a frozen dynamic zone. If no zone - is - specified, then all frozen zones are enabled. This - causes - the server to reload the zone from disk, and - re-enables dynamic updates - after the load has completed. After a zone is thawed, - dynamic updates - will no longer be refused. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>notify <em class="replaceable"><code>zone</code></em> - [<span class="optional"><em class="replaceable"><code>class</code></em> - [<span class="optional"><em class="replaceable"><code>view</code></em></span>]</span>]</code></strong></span></dt> -<dd><p> - Resend NOTIFY messages for the zone. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>reconfig</code></strong></span></dt> -<dd><p> - Reload the configuration file and load new zones, - but do not reload existing zone files even if they - have changed. - This is faster than a full <span><strong class="command">reload</strong></span> when there - is a large number of zones because it avoids the need - to examine the - modification times of the zones files. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>stats</code></strong></span></dt> -<dd><p> - Write server statistics to the statistics file. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>querylog</code></strong></span></dt> -<dd><p> - Toggle query logging. Query logging can also be enabled - by explicitly directing the <span><strong class="command">queries</strong></span> - <span><strong class="command">category</strong></span> to a - <span><strong class="command">channel</strong></span> in the - <span><strong class="command">logging</strong></span> section of - <code class="filename">named.conf</code> or by specifying - <span><strong class="command">querylog yes;</strong></span> in the - <span><strong class="command">options</strong></span> section of - <code class="filename">named.conf</code>. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>dumpdb - [<span class="optional">-all|-cache|-zone</span>] - [<span class="optional"><em class="replaceable"><code>view ...</code></em></span>]</code></strong></span></dt> -<dd><p> - Dump the server's caches (default) and/or zones to - the - dump file for the specified views. If no view is - specified, all - views are dumped. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>stop [<span class="optional">-p</span>]</code></strong></span></dt> -<dd><p> - Stop the server, making sure any recent changes - made through dynamic update or IXFR are first saved to - the master files of the updated zones. - If -p is specified named's process id is returned. - This allows an external process to determine when named - had completed stopping. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>halt [<span class="optional">-p</span>]</code></strong></span></dt> -<dd><p> - Stop the server immediately. Recent changes - made through dynamic update or IXFR are not saved to - the master files, but will be rolled forward from the - journal files when the server is restarted. - If -p is specified named's process id is returned. - This allows an external process to determine when named - had completed halting. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>trace</code></strong></span></dt> -<dd><p> - Increment the servers debugging level by one. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>trace <em class="replaceable"><code>level</code></em></code></strong></span></dt> -<dd><p> - Sets the server's debugging level to an explicit - value. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>notrace</code></strong></span></dt> -<dd><p> - Sets the server's debugging level to 0. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>flush</code></strong></span></dt> -<dd><p> - Flushes the server's cache. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>flushname</code></strong> <em class="replaceable"><code>name</code></em></span></dt> -<dd><p> - Flushes the given name from the server's cache. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>status</code></strong></span></dt> -<dd><p> - Display status of the server. - Note that the number of zones includes the internal <span><strong class="command">bind/CH</strong></span> zone - and the default <span><strong class="command">./IN</strong></span> - hint zone if there is not an - explicit root zone configured. - </p></dd> -<dt><span class="term"><strong class="userinput"><code>recursing</code></strong></span></dt> -<dd><p> - Dump the list of queries named is currently recursing - on. - </p></dd> -</dl></div> -<p> - A configuration file is required, since all - communication with the server is authenticated with - digital signatures that rely on a shared secret, and - there is no way to provide that secret other than with a - configuration file. The default location for the - <span><strong class="command">rndc</strong></span> configuration file is - <code class="filename">/etc/rndc.conf</code>, but an - alternate - location can be specified with the <code class="option">-c</code> - option. If the configuration file is not found, - <span><strong class="command">rndc</strong></span> will also look in - <code class="filename">/etc/rndc.key</code> (or whatever - <code class="varname">sysconfdir</code> was defined when - the <acronym class="acronym">BIND</acronym> build was - configured). - The <code class="filename">rndc.key</code> file is - generated by - running <span><strong class="command">rndc-confgen -a</strong></span> as - described in - <a href="Bv9ARM.ch06.html#controls_statement_definition_and_usage" title="controls Statement Definition and - Usage">the section called “<span><strong class="command">controls</strong></span> Statement Definition and - Usage”</a>. - </p> -<p> - The format of the configuration file is similar to - that of <code class="filename">named.conf</code>, but - limited to - only four statements, the <span><strong class="command">options</strong></span>, - <span><strong class="command">key</strong></span>, <span><strong class="command">server</strong></span> and - <span><strong class="command">include</strong></span> - statements. These statements are what associate the - secret keys to the servers with which they are meant to - be shared. The order of statements is not - significant. - </p> -<p> - The <span><strong class="command">options</strong></span> statement has - three clauses: - <span><strong class="command">default-server</strong></span>, <span><strong class="command">default-key</strong></span>, - and <span><strong class="command">default-port</strong></span>. - <span><strong class="command">default-server</strong></span> takes a - host name or address argument and represents the server - that will - be contacted if no <code class="option">-s</code> - option is provided on the command line. - <span><strong class="command">default-key</strong></span> takes - the name of a key as its argument, as defined by a <span><strong class="command">key</strong></span> statement. - <span><strong class="command">default-port</strong></span> specifies the - port to which - <span><strong class="command">rndc</strong></span> should connect if no - port is given on the command line or in a - <span><strong class="command">server</strong></span> statement. - </p> -<p> - The <span><strong class="command">key</strong></span> statement defines a - key to be used - by <span><strong class="command">rndc</strong></span> when authenticating - with - <span><strong class="command">named</strong></span>. Its syntax is - identical to the - <span><strong class="command">key</strong></span> statement in named.conf. - The keyword <strong class="userinput"><code>key</code></strong> is - followed by a key name, which must be a valid - domain name, though it need not actually be hierarchical; - thus, - a string like "<strong class="userinput"><code>rndc_key</code></strong>" is a valid - name. - The <span><strong class="command">key</strong></span> statement has two - clauses: - <span><strong class="command">algorithm</strong></span> and <span><strong class="command">secret</strong></span>. - While the configuration parser will accept any string as the - argument - to algorithm, currently only the string "<strong class="userinput"><code>hmac-md5</code></strong>" - has any meaning. The secret is a base-64 encoded string - as specified in RFC 3548. - </p> -<p> - The <span><strong class="command">server</strong></span> statement - associates a key - defined using the <span><strong class="command">key</strong></span> - statement with a server. - The keyword <strong class="userinput"><code>server</code></strong> is followed by a - host name or address. The <span><strong class="command">server</strong></span> statement - has two clauses: <span><strong class="command">key</strong></span> and <span><strong class="command">port</strong></span>. - The <span><strong class="command">key</strong></span> clause specifies the - name of the key - to be used when communicating with this server, and the - <span><strong class="command">port</strong></span> clause can be used to - specify the port <span><strong class="command">rndc</strong></span> should - connect - to on the server. - </p> -<p> - A sample minimal configuration file is as follows: - </p> -<pre class="programlisting"> -key rndc_key { - algorithm "hmac-md5"; - secret "c3Ryb25nIGVub3VnaCBmb3IgYSBtYW4gYnV0IG1hZGUgZm9yIGEgd29tYW4K"; -}; -options { - default-server 127.0.0.1; - default-key rndc_key; -}; -</pre> -<p> - This file, if installed as <code class="filename">/etc/rndc.conf</code>, - would allow the command: - </p> -<p> - <code class="prompt">$ </code><strong class="userinput"><code>rndc reload</code></strong> - </p> -<p> - to connect to 127.0.0.1 port 953 and cause the name server - to reload, if a name server on the local machine were - running with - following controls statements: - </p> -<pre class="programlisting"> -controls { - inet 127.0.0.1 allow { localhost; } keys { rndc_key; }; -}; -</pre> -<p> - and it had an identical key statement for - <code class="literal">rndc_key</code>. - </p> -<p> - Running the <span><strong class="command">rndc-confgen</strong></span> - program will - conveniently create a <code class="filename">rndc.conf</code> - file for you, and also display the - corresponding <span><strong class="command">controls</strong></span> - statement that you need to - add to <code class="filename">named.conf</code>. - Alternatively, - you can run <span><strong class="command">rndc-confgen -a</strong></span> - to set up - a <code class="filename">rndc.key</code> file and not - modify - <code class="filename">named.conf</code> at all. - </p> -</dd> -</dl></div> -</div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2570184"></a>Signals</h3></div></div></div> -<p> - Certain UNIX signals cause the name server to take specific - actions, as described in the following table. These signals can - be sent using the <span><strong class="command">kill</strong></span> command. - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p><span><strong class="command">SIGHUP</strong></span></p> - </td> -<td> - <p> - Causes the server to read <code class="filename">named.conf</code> and - reload the database. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">SIGTERM</strong></span></p> - </td> -<td> - <p> - Causes the server to clean up and exit. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">SIGINT</strong></span></p> - </td> -<td> - <p> - Causes the server to clean up and exit. - </p> - </td> -</tr> -</tbody> -</table></div> -</div> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="Bv9ARM.ch02.html">Prev</a>�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch04.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">Chapter�2.�<acronym class="acronym">BIND</acronym> Resource Requirements�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�Chapter�4.�Advanced DNS Features</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch04.html b/contrib/bind9/doc/arm/Bv9ARM.ch04.html deleted file mode 100644 index 09507fe..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.ch04.html +++ /dev/null @@ -1,1028 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: Bv9ARM.ch04.html,v 1.40.18.41 2007/10/31 01:35:57 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>Chapter�4.�Advanced DNS Features</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="prev" href="Bv9ARM.ch03.html" title="Chapter�3.�Name Server Configuration"> -<link rel="next" href="Bv9ARM.ch05.html" title="Chapter�5.�The BIND 9 Lightweight Resolver"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">Chapter�4.�Advanced DNS Features</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="Bv9ARM.ch03.html">Prev</a>�</td> -<th width="60%" align="center">�</th> -<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch05.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="chapter" lang="en"> -<div class="titlepage"><div><div><h2 class="title"> -<a name="Bv9ARM.ch04"></a>Chapter�4.�Advanced DNS Features</h2></div></div></div> -<div class="toc"> -<p><b>Table of Contents</b></p> -<dl> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#notify">Notify</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#dynamic_update">Dynamic Update</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#journal">The journal file</a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#incremental_zone_transfers">Incremental Zone Transfers (IXFR)</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570642">Split DNS</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570660">Example split DNS setup</a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#tsig">TSIG</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571095">Generate Shared Keys for Each Pair of Hosts</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571169">Copying the Shared Secret to Both Machines</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571179">Informing the Servers of the Key's Existence</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571219">Instructing the Server to Use the Key</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571413">TSIG Key Based Access Control</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571458">Errors</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571472">TKEY</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571521">SIG(0)</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#DNSSEC">DNSSEC</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571725">Generating Keys</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571795">Signing the Zone</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571874">Configuring Servers</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2572153">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572215">Address Lookups Using AAAA Records</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572236">Address to Name Lookups Using Nibble Format</a></span></dt> -</dl></dd> -</dl> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="notify"></a>Notify</h2></div></div></div> -<p> - <acronym class="acronym">DNS</acronym> NOTIFY is a mechanism that allows master - servers to notify their slave servers of changes to a zone's data. In - response to a <span><strong class="command">NOTIFY</strong></span> from a master server, the - slave will check to see that its version of the zone is the - current version and, if not, initiate a zone transfer. - </p> -<p> - For more information about <acronym class="acronym">DNS</acronym> - <span><strong class="command">NOTIFY</strong></span>, see the description of the - <span><strong class="command">notify</strong></span> option in <a href="Bv9ARM.ch06.html#boolean_options" title="Boolean Options">the section called “Boolean Options”</a> and - the description of the zone option <span><strong class="command">also-notify</strong></span> in - <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. The <span><strong class="command">NOTIFY</strong></span> - protocol is specified in RFC 1996. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> - As a slave zone can also be a master to other slaves, named, - by default, sends <span><strong class="command">NOTIFY</strong></span> messages for every zone - it loads. Specifying <span><strong class="command">notify master-only;</strong></span> will - cause named to only send <span><strong class="command">NOTIFY</strong></span> for master - zones that it loads. - </div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="dynamic_update"></a>Dynamic Update</h2></div></div></div> -<p> - Dynamic Update is a method for adding, replacing or deleting - records in a master server by sending it a special form of DNS - messages. The format and meaning of these messages is specified - in RFC 2136. - </p> -<p> - Dynamic update is enabled by - including an <span><strong class="command">allow-update</strong></span> or - <span><strong class="command">update-policy</strong></span> clause in the - <span><strong class="command">zone</strong></span> statement. - </p> -<p> - Updating of secure zones (zones using DNSSEC) follows - RFC 3007: RRSIG and NSEC records affected by updates are automatically - regenerated by the server using an online zone key. - Update authorization is based - on transaction signatures and an explicit server policy. - </p> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="journal"></a>The journal file</h3></div></div></div> -<p> - All changes made to a zone using dynamic update are stored - in the zone's journal file. This file is automatically created - by the server when the first dynamic update takes place. - The name of the journal file is formed by appending the extension - <code class="filename">.jnl</code> to the name of the - corresponding zone - file unless specifically overridden. The journal file is in a - binary format and should not be edited manually. - </p> -<p> - The server will also occasionally write ("dump") - the complete contents of the updated zone to its zone file. - This is not done immediately after - each dynamic update, because that would be too slow when a large - zone is updated frequently. Instead, the dump is delayed by - up to 15 minutes, allowing additional updates to take place. - </p> -<p> - When a server is restarted after a shutdown or crash, it will replay - the journal file to incorporate into the zone any updates that - took - place after the last zone dump. - </p> -<p> - Changes that result from incoming incremental zone transfers are - also - journalled in a similar way. - </p> -<p> - The zone files of dynamic zones cannot normally be edited by - hand because they are not guaranteed to contain the most recent - dynamic changes — those are only in the journal file. - The only way to ensure that the zone file of a dynamic zone - is up to date is to run <span><strong class="command">rndc stop</strong></span>. - </p> -<p> - If you have to make changes to a dynamic zone - manually, the following procedure will work: Disable dynamic updates - to the zone using - <span><strong class="command">rndc freeze <em class="replaceable"><code>zone</code></em></strong></span>. - This will also remove the zone's <code class="filename">.jnl</code> file - and update the master file. Edit the zone file. Run - <span><strong class="command">rndc thaw <em class="replaceable"><code>zone</code></em></strong></span> - to reload the changed zone and re-enable dynamic updates. - </p> -</div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="incremental_zone_transfers"></a>Incremental Zone Transfers (IXFR)</h2></div></div></div> -<p> - The incremental zone transfer (IXFR) protocol is a way for - slave servers to transfer only changed data, instead of having to - transfer the entire zone. The IXFR protocol is specified in RFC - 1995. See <a href="Bv9ARM.ch09.html#proposed_standards">Proposed Standards</a>. - </p> -<p> - When acting as a master, <acronym class="acronym">BIND</acronym> 9 - supports IXFR for those zones - where the necessary change history information is available. These - include master zones maintained by dynamic update and slave zones - whose data was obtained by IXFR. For manually maintained master - zones, and for slave zones obtained by performing a full zone - transfer (AXFR), IXFR is supported only if the option - <span><strong class="command">ixfr-from-differences</strong></span> is set - to <strong class="userinput"><code>yes</code></strong>. - </p> -<p> - When acting as a slave, <acronym class="acronym">BIND</acronym> 9 will - attempt to use IXFR unless - it is explicitly disabled. For more information about disabling - IXFR, see the description of the <span><strong class="command">request-ixfr</strong></span> clause - of the <span><strong class="command">server</strong></span> statement. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2570642"></a>Split DNS</h2></div></div></div> -<p> - Setting up different views, or visibility, of the DNS space to - internal and external resolvers is usually referred to as a - <span class="emphasis"><em>Split DNS</em></span> setup. There are several - reasons an organization would want to set up its DNS this way. - </p> -<p> - One common reason for setting up a DNS system this way is - to hide "internal" DNS information from "external" clients on the - Internet. There is some debate as to whether or not this is actually - useful. - Internal DNS information leaks out in many ways (via email headers, - for example) and most savvy "attackers" can find the information - they need using other means. - However, since listing addresses of internal servers that - external clients cannot possibly reach can result in - connection delays and other annoyances, an organization may - choose to use a Split DNS to present a consistent view of itself - to the outside world. - </p> -<p> - Another common reason for setting up a Split DNS system is - to allow internal networks that are behind filters or in RFC 1918 - space (reserved IP space, as documented in RFC 1918) to resolve DNS - on the Internet. Split DNS can also be used to allow mail from outside - back in to the internal network. - </p> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2570660"></a>Example split DNS setup</h3></div></div></div> -<p> - Let's say a company named <span class="emphasis"><em>Example, Inc.</em></span> - (<code class="literal">example.com</code>) - has several corporate sites that have an internal network with - reserved - Internet Protocol (IP) space and an external demilitarized zone (DMZ), - or "outside" section of a network, that is available to the public. - </p> -<p> - <span class="emphasis"><em>Example, Inc.</em></span> wants its internal clients - to be able to resolve external hostnames and to exchange mail with - people on the outside. The company also wants its internal resolvers - to have access to certain internal-only zones that are not available - at all outside of the internal network. - </p> -<p> - In order to accomplish this, the company will set up two sets - of name servers. One set will be on the inside network (in the - reserved - IP space) and the other set will be on bastion hosts, which are - "proxy" - hosts that can talk to both sides of its network, in the DMZ. - </p> -<p> - The internal servers will be configured to forward all queries, - except queries for <code class="filename">site1.internal</code>, <code class="filename">site2.internal</code>, <code class="filename">site1.example.com</code>, - and <code class="filename">site2.example.com</code>, to the servers - in the - DMZ. These internal servers will have complete sets of information - for <code class="filename">site1.example.com</code>, <code class="filename">site2.example.com</code>,<span class="emphasis"><em></em></span> <code class="filename">site1.internal</code>, - and <code class="filename">site2.internal</code>. - </p> -<p> - To protect the <code class="filename">site1.internal</code> and <code class="filename">site2.internal</code> domains, - the internal name servers must be configured to disallow all queries - to these domains from any external hosts, including the bastion - hosts. - </p> -<p> - The external servers, which are on the bastion hosts, will - be configured to serve the "public" version of the <code class="filename">site1</code> and <code class="filename">site2.example.com</code> zones. - This could include things such as the host records for public servers - (<code class="filename">www.example.com</code> and <code class="filename">ftp.example.com</code>), - and mail exchange (MX) records (<code class="filename">a.mx.example.com</code> and <code class="filename">b.mx.example.com</code>). - </p> -<p> - In addition, the public <code class="filename">site1</code> and <code class="filename">site2.example.com</code> zones - should have special MX records that contain wildcard (`*') records - pointing to the bastion hosts. This is needed because external mail - servers do not have any other way of looking up how to deliver mail - to those internal hosts. With the wildcard records, the mail will - be delivered to the bastion host, which can then forward it on to - internal hosts. - </p> -<p> - Here's an example of a wildcard MX record: - </p> -<pre class="programlisting">* IN MX 10 external1.example.com.</pre> -<p> - Now that they accept mail on behalf of anything in the internal - network, the bastion hosts will need to know how to deliver mail - to internal hosts. In order for this to work properly, the resolvers - on - the bastion hosts will need to be configured to point to the internal - name servers for DNS resolution. - </p> -<p> - Queries for internal hostnames will be answered by the internal - servers, and queries for external hostnames will be forwarded back - out to the DNS servers on the bastion hosts. - </p> -<p> - In order for all this to work properly, internal clients will - need to be configured to query <span class="emphasis"><em>only</em></span> the internal - name servers for DNS queries. This could also be enforced via - selective - filtering on the network. - </p> -<p> - If everything has been set properly, <span class="emphasis"><em>Example, Inc.</em></span>'s - internal clients will now be able to: - </p> -<div class="itemizedlist"><ul type="disc"> -<li> - Look up any hostnames in the <code class="literal">site1</code> - and - <code class="literal">site2.example.com</code> zones. - </li> -<li> - Look up any hostnames in the <code class="literal">site1.internal</code> and - <code class="literal">site2.internal</code> domains. - </li> -<li>Look up any hostnames on the Internet.</li> -<li>Exchange mail with both internal and external people.</li> -</ul></div> -<p> - Hosts on the Internet will be able to: - </p> -<div class="itemizedlist"><ul type="disc"> -<li> - Look up any hostnames in the <code class="literal">site1</code> - and - <code class="literal">site2.example.com</code> zones. - </li> -<li> - Exchange mail with anyone in the <code class="literal">site1</code> and - <code class="literal">site2.example.com</code> zones. - </li> -</ul></div> -<p> - Here is an example configuration for the setup we just - described above. Note that this is only configuration information; - for information on how to configure your zone files, see <a href="Bv9ARM.ch03.html#sample_configuration" title="Sample Configurations">the section called “Sample Configurations”</a>. - </p> -<p> - Internal DNS server config: - </p> -<pre class="programlisting"> - -acl internals { 172.16.72.0/24; 192.168.1.0/24; }; - -acl externals { <code class="varname">bastion-ips-go-here</code>; }; - -options { - ... - ... - forward only; - forwarders { // forward to external servers - <code class="varname">bastion-ips-go-here</code>; - }; - allow-transfer { none; }; // sample allow-transfer (no one) - allow-query { internals; externals; }; // restrict query access - allow-recursion { internals; }; // restrict recursion - ... - ... -}; - -zone "site1.example.com" { // sample master zone - type master; - file "m/site1.example.com"; - forwarders { }; // do normal iterative - // resolution (do not forward) - allow-query { internals; externals; }; - allow-transfer { internals; }; -}; - -zone "site2.example.com" { // sample slave zone - type slave; - file "s/site2.example.com"; - masters { 172.16.72.3; }; - forwarders { }; - allow-query { internals; externals; }; - allow-transfer { internals; }; -}; - -zone "site1.internal" { - type master; - file "m/site1.internal"; - forwarders { }; - allow-query { internals; }; - allow-transfer { internals; } -}; - -zone "site2.internal" { - type slave; - file "s/site2.internal"; - masters { 172.16.72.3; }; - forwarders { }; - allow-query { internals }; - allow-transfer { internals; } -}; -</pre> -<p> - External (bastion host) DNS server config: - </p> -<pre class="programlisting"> -acl internals { 172.16.72.0/24; 192.168.1.0/24; }; - -acl externals { bastion-ips-go-here; }; - -options { - ... - ... - allow-transfer { none; }; // sample allow-transfer (no one) - allow-query { any; }; // default query access - allow-query-cache { internals; externals; }; // restrict cache access - allow-recursion { internals; externals; }; // restrict recursion - ... - ... -}; - -zone "site1.example.com" { // sample slave zone - type master; - file "m/site1.foo.com"; - allow-transfer { internals; externals; }; -}; - -zone "site2.example.com" { - type slave; - file "s/site2.foo.com"; - masters { another_bastion_host_maybe; }; - allow-transfer { internals; externals; } -}; -</pre> -<p> - In the <code class="filename">resolv.conf</code> (or equivalent) on - the bastion host(s): - </p> -<pre class="programlisting"> -search ... -nameserver 172.16.72.2 -nameserver 172.16.72.3 -nameserver 172.16.72.4 -</pre> -</div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="tsig"></a>TSIG</h2></div></div></div> -<p> - This is a short guide to setting up Transaction SIGnatures - (TSIG) based transaction security in <acronym class="acronym">BIND</acronym>. It describes changes - to the configuration file as well as what changes are required for - different features, including the process of creating transaction - keys and using transaction signatures with <acronym class="acronym">BIND</acronym>. - </p> -<p> - <acronym class="acronym">BIND</acronym> primarily supports TSIG for server - to server communication. - This includes zone transfer, notify, and recursive query messages. - Resolvers based on newer versions of <acronym class="acronym">BIND</acronym> 8 have limited support - for TSIG. - </p> -<p> - TSIG can also be useful for dynamic update. A primary - server for a dynamic zone should control access to the dynamic - update service, but IP-based access control is insufficient. - The cryptographic access control provided by TSIG - is far superior. The <span><strong class="command">nsupdate</strong></span> - program supports TSIG via the <code class="option">-k</code> and - <code class="option">-y</code> command line options or inline by use - of the <span><strong class="command">key</strong></span>. - </p> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2571095"></a>Generate Shared Keys for Each Pair of Hosts</h3></div></div></div> -<p> - A shared secret is generated to be shared between <span class="emphasis"><em>host1</em></span> and <span class="emphasis"><em>host2</em></span>. - An arbitrary key name is chosen: "host1-host2.". The key name must - be the same on both hosts. - </p> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2571112"></a>Automatic Generation</h4></div></div></div> -<p> - The following command will generate a 128-bit (16 byte) HMAC-MD5 - key as described above. Longer keys are better, but shorter keys - are easier to read. Note that the maximum key length is 512 bits; - keys longer than that will be digested with MD5 to produce a - 128-bit key. - </p> -<p> - <strong class="userinput"><code>dnssec-keygen -a hmac-md5 -b 128 -n HOST host1-host2.</code></strong> - </p> -<p> - The key is in the file <code class="filename">Khost1-host2.+157+00000.private</code>. - Nothing directly uses this file, but the base-64 encoded string - following "<code class="literal">Key:</code>" - can be extracted from the file and used as a shared secret: - </p> -<pre class="programlisting">Key: La/E5CjG9O+os1jq0a2jdA==</pre> -<p> - The string "<code class="literal">La/E5CjG9O+os1jq0a2jdA==</code>" can - be used as the shared secret. - </p> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2571150"></a>Manual Generation</h4></div></div></div> -<p> - The shared secret is simply a random sequence of bits, encoded - in base-64. Most ASCII strings are valid base-64 strings (assuming - the length is a multiple of 4 and only valid characters are used), - so the shared secret can be manually generated. - </p> -<p> - Also, a known string can be run through <span><strong class="command">mmencode</strong></span> or - a similar program to generate base-64 encoded data. - </p> -</div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2571169"></a>Copying the Shared Secret to Both Machines</h3></div></div></div> -<p> - This is beyond the scope of DNS. A secure transport mechanism - should be used. This could be secure FTP, ssh, telephone, etc. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2571179"></a>Informing the Servers of the Key's Existence</h3></div></div></div> -<p> - Imagine <span class="emphasis"><em>host1</em></span> and <span class="emphasis"><em>host 2</em></span> - are - both servers. The following is added to each server's <code class="filename">named.conf</code> file: - </p> -<pre class="programlisting"> -key host1-host2. { - algorithm hmac-md5; - secret "La/E5CjG9O+os1jq0a2jdA=="; -}; -</pre> -<p> - The algorithm, hmac-md5, is the only one supported by <acronym class="acronym">BIND</acronym>. - The secret is the one generated above. Since this is a secret, it - is recommended that either <code class="filename">named.conf</code> be non-world - readable, or the key directive be added to a non-world readable - file that is included by - <code class="filename">named.conf</code>. - </p> -<p> - At this point, the key is recognized. This means that if the - server receives a message signed by this key, it can verify the - signature. If the signature is successfully verified, the - response is signed by the same key. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2571219"></a>Instructing the Server to Use the Key</h3></div></div></div> -<p> - Since keys are shared between two hosts only, the server must - be told when keys are to be used. The following is added to the <code class="filename">named.conf</code> file - for <span class="emphasis"><em>host1</em></span>, if the IP address of <span class="emphasis"><em>host2</em></span> is - 10.1.2.3: - </p> -<pre class="programlisting"> -server 10.1.2.3 { - keys { host1-host2. ;}; -}; -</pre> -<p> - Multiple keys may be present, but only the first is used. - This directive does not contain any secrets, so it may be in a - world-readable - file. - </p> -<p> - If <span class="emphasis"><em>host1</em></span> sends a message that is a request - to that address, the message will be signed with the specified key. <span class="emphasis"><em>host1</em></span> will - expect any responses to signed messages to be signed with the same - key. - </p> -<p> - A similar statement must be present in <span class="emphasis"><em>host2</em></span>'s - configuration file (with <span class="emphasis"><em>host1</em></span>'s address) for <span class="emphasis"><em>host2</em></span> to - sign request messages to <span class="emphasis"><em>host1</em></span>. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2571413"></a>TSIG Key Based Access Control</h3></div></div></div> -<p> - <acronym class="acronym">BIND</acronym> allows IP addresses and ranges - to be specified in ACL - definitions and - <span><strong class="command">allow-{ query | transfer | update }</strong></span> - directives. - This has been extended to allow TSIG keys also. The above key would - be denoted <span><strong class="command">key host1-host2.</strong></span> - </p> -<p> - An example of an allow-update directive would be: - </p> -<pre class="programlisting"> -allow-update { key host1-host2. ;}; -</pre> -<p> - This allows dynamic updates to succeed only if the request - was signed by a key named - "<span><strong class="command">host1-host2.</strong></span>". - </p> -<p> - You may want to read about the more - powerful <span><strong class="command">update-policy</strong></span> statement in <a href="Bv9ARM.ch06.html#dynamic_update_policies" title="Dynamic Update Policies">the section called “Dynamic Update Policies”</a>. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2571458"></a>Errors</h3></div></div></div> -<p> - The processing of TSIG signed messages can result in - several errors. If a signed message is sent to a non-TSIG aware - server, a FORMERR (format error) will be returned, since the server will not - understand the record. This is a result of misconfiguration, - since the server must be explicitly configured to send a TSIG - signed message to a specific server. - </p> -<p> - If a TSIG aware server receives a message signed by an - unknown key, the response will be unsigned with the TSIG - extended error code set to BADKEY. If a TSIG aware server - receives a message with a signature that does not validate, the - response will be unsigned with the TSIG extended error code set - to BADSIG. If a TSIG aware server receives a message with a time - outside of the allowed range, the response will be signed with - the TSIG extended error code set to BADTIME, and the time values - will be adjusted so that the response can be successfully - verified. In any of these cases, the message's rcode (response code) is set to - NOTAUTH (not authenticated). - </p> -</div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2571472"></a>TKEY</h2></div></div></div> -<p><span><strong class="command">TKEY</strong></span> - is a mechanism for automatically generating a shared secret - between two hosts. There are several "modes" of - <span><strong class="command">TKEY</strong></span> that specify how the key is generated - or assigned. <acronym class="acronym">BIND</acronym> 9 implements only one of - these modes, the Diffie-Hellman key exchange. Both hosts are - required to have a Diffie-Hellman KEY record (although this - record is not required to be present in a zone). The - <span><strong class="command">TKEY</strong></span> process must use signed messages, - signed either by TSIG or SIG(0). The result of - <span><strong class="command">TKEY</strong></span> is a shared secret that can be used to - sign messages with TSIG. <span><strong class="command">TKEY</strong></span> can also be - used to delete shared secrets that it had previously - generated. - </p> -<p> - The <span><strong class="command">TKEY</strong></span> process is initiated by a - client - or server by sending a signed <span><strong class="command">TKEY</strong></span> - query - (including any appropriate KEYs) to a TKEY-aware server. The - server response, if it indicates success, will contain a - <span><strong class="command">TKEY</strong></span> record and any appropriate keys. - After - this exchange, both participants have enough information to - determine the shared secret; the exact process depends on the - <span><strong class="command">TKEY</strong></span> mode. When using the - Diffie-Hellman - <span><strong class="command">TKEY</strong></span> mode, Diffie-Hellman keys are - exchanged, - and the shared secret is derived by both participants. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2571521"></a>SIG(0)</h2></div></div></div> -<p> - <acronym class="acronym">BIND</acronym> 9 partially supports DNSSEC SIG(0) - transaction signatures as specified in RFC 2535 and RFC2931. - SIG(0) - uses public/private keys to authenticate messages. Access control - is performed in the same manner as TSIG keys; privileges can be - granted or denied based on the key name. - </p> -<p> - When a SIG(0) signed message is received, it will only be - verified if the key is known and trusted by the server; the server - will not attempt to locate and/or validate the key. - </p> -<p> - SIG(0) signing of multiple-message TCP streams is not - supported. - </p> -<p> - The only tool shipped with <acronym class="acronym">BIND</acronym> 9 that - generates SIG(0) signed messages is <span><strong class="command">nsupdate</strong></span>. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="DNSSEC"></a>DNSSEC</h2></div></div></div> -<p> - Cryptographic authentication of DNS information is possible - through the DNS Security (<span class="emphasis"><em>DNSSEC-bis</em></span>) extensions, - defined in RFC 4033, RFC 4034, and RFC 4035. - This section describes the creation and use of DNSSEC signed zones. - </p> -<p> - In order to set up a DNSSEC secure zone, there are a series - of steps which must be followed. <acronym class="acronym">BIND</acronym> - 9 ships - with several tools - that are used in this process, which are explained in more detail - below. In all cases, the <code class="option">-h</code> option prints a - full list of parameters. Note that the DNSSEC tools require the - keyset files to be in the working directory or the - directory specified by the <code class="option">-d</code> option, and - that the tools shipped with BIND 9.2.x and earlier are not compatible - with the current ones. - </p> -<p> - There must also be communication with the administrators of - the parent and/or child zone to transmit keys. A zone's security - status must be indicated by the parent zone for a DNSSEC capable - resolver to trust its data. This is done through the presence - or absence of a <code class="literal">DS</code> record at the - delegation - point. - </p> -<p> - For other servers to trust data in this zone, they must - either be statically configured with this zone's zone key or the - zone key of another zone above this one in the DNS tree. - </p> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2571725"></a>Generating Keys</h3></div></div></div> -<p> - The <span><strong class="command">dnssec-keygen</strong></span> program is used to - generate keys. - </p> -<p> - A secure zone must contain one or more zone keys. The - zone keys will sign all other records in the zone, as well as - the zone keys of any secure delegated zones. Zone keys must - have the same name as the zone, a name type of - <span><strong class="command">ZONE</strong></span>, and must be usable for - authentication. - It is recommended that zone keys use a cryptographic algorithm - designated as "mandatory to implement" by the IETF; currently - the only one is RSASHA1. - </p> -<p> - The following command will generate a 768-bit RSASHA1 key for - the <code class="filename">child.example</code> zone: - </p> -<p> - <strong class="userinput"><code>dnssec-keygen -a RSASHA1 -b 768 -n ZONE child.example.</code></strong> - </p> -<p> - Two output files will be produced: - <code class="filename">Kchild.example.+005+12345.key</code> and - <code class="filename">Kchild.example.+005+12345.private</code> - (where - 12345 is an example of a key tag). The key filenames contain - the key name (<code class="filename">child.example.</code>), - algorithm (3 - is DSA, 1 is RSAMD5, 5 is RSASHA1, etc.), and the key tag (12345 in - this case). - The private key (in the <code class="filename">.private</code> - file) is - used to generate signatures, and the public key (in the - <code class="filename">.key</code> file) is used for signature - verification. - </p> -<p> - To generate another key with the same properties (but with - a different key tag), repeat the above command. - </p> -<p> - The public keys should be inserted into the zone file by - including the <code class="filename">.key</code> files using - <span><strong class="command">$INCLUDE</strong></span> statements. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2571795"></a>Signing the Zone</h3></div></div></div> -<p> - The <span><strong class="command">dnssec-signzone</strong></span> program is used - to - sign a zone. - </p> -<p> - Any <code class="filename">keyset</code> files corresponding - to secure subzones should be present. The zone signer will - generate <code class="literal">NSEC</code> and <code class="literal">RRSIG</code> - records for the zone, as well as <code class="literal">DS</code> - for - the child zones if <code class="literal">'-d'</code> is specified. - If <code class="literal">'-d'</code> is not specified, then - DS RRsets for - the secure child zones need to be added manually. - </p> -<p> - The following command signs the zone, assuming it is in a - file called <code class="filename">zone.child.example</code>. By - default, all zone keys which have an available private key are - used to generate signatures. - </p> -<p> - <strong class="userinput"><code>dnssec-signzone -o child.example zone.child.example</code></strong> - </p> -<p> - One output file is produced: - <code class="filename">zone.child.example.signed</code>. This - file - should be referenced by <code class="filename">named.conf</code> - as the - input file for the zone. - </p> -<p><span><strong class="command">dnssec-signzone</strong></span> - will also produce a keyset and dsset files and optionally a - dlvset file. These are used to provide the parent zone - administrators with the <code class="literal">DNSKEYs</code> (or their - corresponding <code class="literal">DS</code> records) that are the - secure entry point to the zone. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2571874"></a>Configuring Servers</h3></div></div></div> -<p> - To enable <span><strong class="command">named</strong></span> to respond appropriately - to DNS requests from DNSSEC aware clients, - <span><strong class="command">dnssec-enable</strong></span> must be set to yes. - </p> -<p> - To enable <span><strong class="command">named</strong></span> to validate answers from - other servers both <span><strong class="command">dnssec-enable</strong></span> and - <span><strong class="command">dnssec-validation</strong></span> must be set and some - <span><strong class="command">trusted-keys</strong></span> must be configured - into <code class="filename">named.conf</code>. - </p> -<p> - <span><strong class="command">trusted-keys</strong></span> are copies of DNSKEY RRs - for zones that are used to form the first link in the - cryptographic chain of trust. All keys listed in - <span><strong class="command">trusted-keys</strong></span> (and corresponding zones) - are deemed to exist and only the listed keys will be used - to validated the DNSKEY RRset that they are from. - </p> -<p> - <span><strong class="command">trusted-keys</strong></span> are described in more detail - later in this document. - </p> -<p> - Unlike <acronym class="acronym">BIND</acronym> 8, <acronym class="acronym">BIND</acronym> - 9 does not verify signatures on load, so zone keys for - authoritative zones do not need to be specified in the - configuration file. - </p> -<p> - After DNSSEC gets established, a typical DNSSEC configuration - will look something like the following. It has a one or - more public keys for the root. This allows answers from - outside the organization to be validated. It will also - have several keys for parts of the namespace the organization - controls. These are here to ensure that named is immune - to compromises in the DNSSEC components of the security - of parent zones. - </p> -<pre class="programlisting"> -trusted-keys { - - /* Root Key */ -"." 257 3 3 "BNY4wrWM1nCfJ+CXd0rVXyYmobt7sEEfK3clRbGaTwSJxrGkxJWoZu6I7PzJu/ - E9gx4UC1zGAHlXKdE4zYIpRhaBKnvcC2U9mZhkdUpd1Vso/HAdjNe8LmMlnzY3 - zy2Xy4klWOADTPzSv9eamj8V18PHGjBLaVtYvk/ln5ZApjYghf+6fElrmLkdaz - MQ2OCnACR817DF4BBa7UR/beDHyp5iWTXWSi6XmoJLbG9Scqc7l70KDqlvXR3M - /lUUVRbkeg1IPJSidmK3ZyCllh4XSKbje/45SKucHgnwU5jefMtq66gKodQj+M - iA21AfUVe7u99WzTLzY3qlxDhxYQQ20FQ97S+LKUTpQcq27R7AT3/V5hRQxScI - Nqwcz4jYqZD2fQdgxbcDTClU0CRBdiieyLMNzXG3"; - -/* Key for our organization's forward zone */ -example.com. 257 3 5 "AwEAAaxPMcR2x0HbQV4WeZB6oEDX+r0QM65KbhTjrW1ZaARmPhEZZe - 3Y9ifgEuq7vZ/zGZUdEGNWy+JZzus0lUptwgjGwhUS1558Hb4JKUbb - OTcM8pwXlj0EiX3oDFVmjHO444gLkBO UKUf/mC7HvfwYH/Be22GnC - lrinKJp1Og4ywzO9WglMk7jbfW33gUKvirTHr25GL7STQUzBb5Usxt - 8lgnyTUHs1t3JwCY5hKZ6CqFxmAVZP20igTixin/1LcrgX/KMEGd/b - iuvF4qJCyduieHukuY3H4XMAcR+xia2 nIUPvm/oyWR8BW/hWdzOvn - SCThlHf3xiYleDbt/o1OTQ09A0="; - -/* Key for our reverse zone. */ -2.0.192.IN-ADDRPA.NET. 257 3 5 "AQOnS4xn/IgOUpBPJ3bogzwcxOdNax071L18QqZnQQQA - VVr+iLhGTnNGp3HoWQLUIzKrJVZ3zggy3WwNT6kZo6c0 - tszYqbtvchmgQC8CzKojM/W16i6MG/ea fGU3siaOdS0 - yOI6BgPsw+YZdzlYMaIJGf4M4dyoKIhzdZyQ2bYQrjyQ - 4LB0lC7aOnsMyYKHHYeRv PxjIQXmdqgOJGq+vsevG06 - zW+1xgYJh9rCIfnm1GX/KMgxLPG2vXTD/RnLX+D3T3UL - 7HJYHJhAZD5L59VvjSPsZJHeDCUyWYrvPZesZDIRvhDD - 52SKvbheeTJUm6EhkzytNN2SN96QRk8j/iI8ib"; -}; - -options { - ... - dnssec-enable yes; - dnssec-validation yes; -}; -</pre> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> - None of the keys listed in this example are valid. In particular, - the root key is not valid. - </div> -</div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2572153"></a>IPv6 Support in <acronym class="acronym">BIND</acronym> 9</h2></div></div></div> -<p> - <acronym class="acronym">BIND</acronym> 9 fully supports all currently - defined forms of IPv6 - name to address and address to name lookups. It will also use - IPv6 addresses to make queries when running on an IPv6 capable - system. - </p> -<p> - For forward lookups, <acronym class="acronym">BIND</acronym> 9 supports - only AAAA records. RFC 3363 deprecated the use of A6 records, - and client-side support for A6 records was accordingly removed - from <acronym class="acronym">BIND</acronym> 9. - However, authoritative <acronym class="acronym">BIND</acronym> 9 name servers still - load zone files containing A6 records correctly, answer queries - for A6 records, and accept zone transfer for a zone containing A6 - records. - </p> -<p> - For IPv6 reverse lookups, <acronym class="acronym">BIND</acronym> 9 supports - the traditional "nibble" format used in the - <span class="emphasis"><em>ip6.arpa</em></span> domain, as well as the older, deprecated - <span class="emphasis"><em>ip6.int</em></span> domain. - Older versions of <acronym class="acronym">BIND</acronym> 9 - supported the "binary label" (also known as "bitstring") format, - but support of binary labels has been completely removed per - RFC 3363. - Many applications in <acronym class="acronym">BIND</acronym> 9 do not understand - the binary label format at all any more, and will return an - error if given. - In particular, an authoritative <acronym class="acronym">BIND</acronym> 9 - name server will not load a zone file containing binary labels. - </p> -<p> - For an overview of the format and structure of IPv6 addresses, - see <a href="Bv9ARM.ch09.html#ipv6addresses" title="IPv6 addresses (AAAA)">the section called “IPv6 addresses (AAAA)”</a>. - </p> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2572215"></a>Address Lookups Using AAAA Records</h3></div></div></div> -<p> - The IPv6 AAAA record is a parallel to the IPv4 A record, - and, unlike the deprecated A6 record, specifies the entire - IPv6 address in a single record. For example, - </p> -<pre class="programlisting"> -$ORIGIN example.com. -host 3600 IN AAAA 2001:db8::1 -</pre> -<p> - Use of IPv4-in-IPv6 mapped addresses is not recommended. - If a host has an IPv4 address, use an A record, not - a AAAA, with <code class="literal">::ffff:192.168.42.1</code> as - the address. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2572236"></a>Address to Name Lookups Using Nibble Format</h3></div></div></div> -<p> - When looking up an address in nibble format, the address - components are simply reversed, just as in IPv4, and - <code class="literal">ip6.arpa.</code> is appended to the - resulting name. - For example, the following would provide reverse name lookup for - a host with address - <code class="literal">2001:db8::1</code>. - </p> -<pre class="programlisting"> -$ORIGIN 0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. -1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 14400 IN PTR host.example.com. -</pre> -</div> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="Bv9ARM.ch03.html">Prev</a>�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch05.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">Chapter�3.�Name Server Configuration�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�Chapter�5.�The <acronym class="acronym">BIND</acronym> 9 Lightweight Resolver</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch05.html b/contrib/bind9/doc/arm/Bv9ARM.ch05.html deleted file mode 100644 index 80418b9..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.ch05.html +++ /dev/null @@ -1,143 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: Bv9ARM.ch05.html,v 1.33.18.33 2007/10/31 01:35:58 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>Chapter�5.�The BIND 9 Lightweight Resolver</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="prev" href="Bv9ARM.ch04.html" title="Chapter�4.�Advanced DNS Features"> -<link rel="next" href="Bv9ARM.ch06.html" title="Chapter�6.�BIND 9 Configuration Reference"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">Chapter�5.�The <acronym class="acronym">BIND</acronym> 9 Lightweight Resolver</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="Bv9ARM.ch04.html">Prev</a>�</td> -<th width="60%" align="center">�</th> -<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch06.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="chapter" lang="en"> -<div class="titlepage"><div><div><h2 class="title"> -<a name="Bv9ARM.ch05"></a>Chapter�5.�The <acronym class="acronym">BIND</acronym> 9 Lightweight Resolver</h2></div></div></div> -<div class="toc"> -<p><b>Table of Contents</b></p> -<dl> -<dt><span class="sect1"><a href="Bv9ARM.ch05.html#id2572269">The Lightweight Resolver Library</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch05.html#lwresd">Running a Resolver Daemon</a></span></dt> -</dl> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2572269"></a>The Lightweight Resolver Library</h2></div></div></div> -<p> - Traditionally applications have been linked with a stub resolver - library that sends recursive DNS queries to a local caching name - server. - </p> -<p> - IPv6 once introduced new complexity into the resolution process, - such as following A6 chains and DNAME records, and simultaneous - lookup of IPv4 and IPv6 addresses. Though most of the complexity was - then removed, these are hard or impossible - to implement in a traditional stub resolver. - </p> -<p> - <acronym class="acronym">BIND</acronym> 9 therefore can also provide resolution - services to local clients - using a combination of a lightweight resolver library and a resolver - daemon process running on the local host. These communicate using - a simple UDP-based protocol, the "lightweight resolver protocol" - that is distinct from and simpler than the full DNS protocol. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="lwresd"></a>Running a Resolver Daemon</h2></div></div></div> -<p> - To use the lightweight resolver interface, the system must - run the resolver daemon <span><strong class="command">lwresd</strong></span> or a - local - name server configured with a <span><strong class="command">lwres</strong></span> - statement. - </p> -<p> - By default, applications using the lightweight resolver library will - make - UDP requests to the IPv4 loopback address (127.0.0.1) on port 921. - The - address can be overridden by <span><strong class="command">lwserver</strong></span> - lines in - <code class="filename">/etc/resolv.conf</code>. - </p> -<p> - The daemon currently only looks in the DNS, but in the future - it may use other sources such as <code class="filename">/etc/hosts</code>, - NIS, etc. - </p> -<p> - The <span><strong class="command">lwresd</strong></span> daemon is essentially a - caching-only name server that responds to requests using the - lightweight - resolver protocol rather than the DNS protocol. Because it needs - to run on each host, it is designed to require no or minimal - configuration. - Unless configured otherwise, it uses the name servers listed on - <span><strong class="command">nameserver</strong></span> lines in <code class="filename">/etc/resolv.conf</code> - as forwarders, but is also capable of doing the resolution - autonomously if - none are specified. - </p> -<p> - The <span><strong class="command">lwresd</strong></span> daemon may also be - configured with a - <code class="filename">named.conf</code> style configuration file, - in - <code class="filename">/etc/lwresd.conf</code> by default. A name - server may also - be configured to act as a lightweight resolver daemon using the - <span><strong class="command">lwres</strong></span> statement in <code class="filename">named.conf</code>. - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="Bv9ARM.ch04.html">Prev</a>�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch06.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">Chapter�4.�Advanced DNS Features�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�Chapter�6.�<acronym class="acronym">BIND</acronym> 9 Configuration Reference</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch06.html b/contrib/bind9/doc/arm/Bv9ARM.ch06.html deleted file mode 100644 index d829a17..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.ch06.html +++ /dev/null @@ -1,7114 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: Bv9ARM.ch06.html,v 1.82.18.73 2007/10/31 01:35:58 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>Chapter�6.�BIND 9 Configuration Reference</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="prev" href="Bv9ARM.ch05.html" title="Chapter�5.�The BIND 9 Lightweight Resolver"> -<link rel="next" href="Bv9ARM.ch07.html" title="Chapter�7.�BIND 9 Security Considerations"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">Chapter�6.�<acronym class="acronym">BIND</acronym> 9 Configuration Reference</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="Bv9ARM.ch05.html">Prev</a>�</td> -<th width="60%" align="center">�</th> -<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch07.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="chapter" lang="en"> -<div class="titlepage"><div><div><h2 class="title"> -<a name="Bv9ARM.ch06"></a>Chapter�6.�<acronym class="acronym">BIND</acronym> 9 Configuration Reference</h2></div></div></div> -<div class="toc"> -<p><b>Table of Contents</b></p> -<dl> -<dt><span class="sect1"><a href="Bv9ARM.ch06.html#configuration_file_elements">Configuration File Elements</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#address_match_lists">Address Match Lists</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573480">Comment Syntax</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch06.html#Configuration_File_Grammar">Configuration File Grammar</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574092"><span><strong class="command">acl</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#acl"><span><strong class="command">acl</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574282"><span><strong class="command">controls</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#controls_statement_definition_and_usage"><span><strong class="command">controls</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574711"><span><strong class="command">include</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574726"><span><strong class="command">include</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574749"><span><strong class="command">key</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574771"><span><strong class="command">key</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574930"><span><strong class="command">logging</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2575056"><span><strong class="command">logging</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576406"><span><strong class="command">lwres</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576480"><span><strong class="command">lwres</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576544"><span><strong class="command">masters</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576587"><span><strong class="command">masters</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576602"><span><strong class="command">options</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#options"><span><strong class="command">options</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_grammar"><span><strong class="command">server</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_definition_and_usage"><span><strong class="command">server</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585361"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585410"><span><strong class="command">trusted-keys</strong></span> Statement Definition - and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#view_statement_grammar"><span><strong class="command">view</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585490"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zone_statement_grammar"><span><strong class="command">zone</strong></span> - Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586798"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2589080">Zone File</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them">Types of Resource Records and When to Use Them</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591101">Discussion of MX Records</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#Setting_TTLs">Setting TTLs</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591653">Inverse Mapping in IPv4</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591848">Other Zone File Directives</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2592173"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt> -</dl></dd> -</dl> -</div> -<p> - <acronym class="acronym">BIND</acronym> 9 configuration is broadly similar - to <acronym class="acronym">BIND</acronym> 8; however, there are a few new - areas - of configuration, such as views. <acronym class="acronym">BIND</acronym> - 8 configuration files should work with few alterations in <acronym class="acronym">BIND</acronym> - 9, although more complex configurations should be reviewed to check - if they can be more efficiently implemented using the new features - found in <acronym class="acronym">BIND</acronym> 9. - </p> -<p> - <acronym class="acronym">BIND</acronym> 4 configuration files can be - converted to the new format - using the shell script - <code class="filename">contrib/named-bootconf/named-bootconf.sh</code>. - </p> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="configuration_file_elements"></a>Configuration File Elements</h2></div></div></div> -<p> - Following is a list of elements used throughout the <acronym class="acronym">BIND</acronym> configuration - file documentation: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - <code class="varname">acl_name</code> - </p> - </td> -<td> - <p> - The name of an <code class="varname">address_match_list</code> as - defined by the <span><strong class="command">acl</strong></span> statement. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">address_match_list</code> - </p> - </td> -<td> - <p> - A list of one or more - <code class="varname">ip_addr</code>, - <code class="varname">ip_prefix</code>, <code class="varname">key_id</code>, - or <code class="varname">acl_name</code> elements, see - <a href="Bv9ARM.ch06.html#address_match_lists" title="Address Match Lists">the section called “Address Match Lists”</a>. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">masters_list</code> - </p> - </td> -<td> - <p> - A named list of one or more <code class="varname">ip_addr</code> - with optional <code class="varname">key_id</code> and/or - <code class="varname">ip_port</code>. - A <code class="varname">masters_list</code> may include other - <code class="varname">masters_lists</code>. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">domain_name</code> - </p> - </td> -<td> - <p> - A quoted string which will be used as - a DNS name, for example "<code class="literal">my.test.domain</code>". - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">dotted_decimal</code> - </p> - </td> -<td> - <p> - One to four integers valued 0 through - 255 separated by dots (`.'), such as <span><strong class="command">123</strong></span>, - <span><strong class="command">45.67</strong></span> or <span><strong class="command">89.123.45.67</strong></span>. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">ip4_addr</code> - </p> - </td> -<td> - <p> - An IPv4 address with exactly four elements - in <code class="varname">dotted_decimal</code> notation. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">ip6_addr</code> - </p> - </td> -<td> - <p> - An IPv6 address, such as <span><strong class="command">2001:db8::1234</strong></span>. - IPv6 scoped addresses that have ambiguity on their scope - zones must be - disambiguated by an appropriate zone ID with the percent - character - (`%') as delimiter. - It is strongly recommended to use string zone names rather - than - numeric identifiers, in order to be robust against system - configuration changes. - However, since there is no standard mapping for such names - and - identifier values, currently only interface names as link - identifiers - are supported, assuming one-to-one mapping between - interfaces and links. - For example, a link-local address <span><strong class="command">fe80::1</strong></span> on the - link attached to the interface <span><strong class="command">ne0</strong></span> - can be specified as <span><strong class="command">fe80::1%ne0</strong></span>. - Note that on most systems link-local addresses always have - the - ambiguity, and need to be disambiguated. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">ip_addr</code> - </p> - </td> -<td> - <p> - An <code class="varname">ip4_addr</code> or <code class="varname">ip6_addr</code>. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">ip_port</code> - </p> - </td> -<td> - <p> - An IP port <code class="varname">number</code>. - The <code class="varname">number</code> is limited to 0 - through 65535, with values - below 1024 typically restricted to use by processes running - as root. - In some cases, an asterisk (`*') character can be used as a - placeholder to - select a random high-numbered port. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">ip_prefix</code> - </p> - </td> -<td> - <p> - An IP network specified as an <code class="varname">ip_addr</code>, - followed by a slash (`/') and then the number of bits in the - netmask. - Trailing zeros in a <code class="varname">ip_addr</code> - may omitted. - For example, <span><strong class="command">127/8</strong></span> is the - network <span><strong class="command">127.0.0.0</strong></span> with - netmask <span><strong class="command">255.0.0.0</strong></span> and <span><strong class="command">1.2.3.0/28</strong></span> is - network <span><strong class="command">1.2.3.0</strong></span> with netmask <span><strong class="command">255.255.255.240</strong></span>. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">key_id</code> - </p> - </td> -<td> - <p> - A <code class="varname">domain_name</code> representing - the name of a shared key, to be used for transaction - security. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">key_list</code> - </p> - </td> -<td> - <p> - A list of one or more - <code class="varname">key_id</code>s, - separated by semicolons and ending with a semicolon. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">number</code> - </p> - </td> -<td> - <p> - A non-negative 32-bit integer - (i.e., a number between 0 and 4294967295, inclusive). - Its acceptable value might further - be limited by the context in which it is used. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">path_name</code> - </p> - </td> -<td> - <p> - A quoted string which will be used as - a pathname, such as <code class="filename">zones/master/my.test.domain</code>. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">size_spec</code> - </p> - </td> -<td> - <p> - A number, the word <strong class="userinput"><code>unlimited</code></strong>, - or the word <strong class="userinput"><code>default</code></strong>. - </p> - <p> - An <code class="varname">unlimited</code> <code class="varname">size_spec</code> requests unlimited - use, or the maximum available amount. A <code class="varname">default size_spec</code> uses - the limit that was in force when the server was started. - </p> - <p> - A <code class="varname">number</code> can optionally be - followed by a scaling factor: - <strong class="userinput"><code>K</code></strong> or <strong class="userinput"><code>k</code></strong> - for kilobytes, - <strong class="userinput"><code>M</code></strong> or <strong class="userinput"><code>m</code></strong> - for megabytes, and - <strong class="userinput"><code>G</code></strong> or <strong class="userinput"><code>g</code></strong> for gigabytes, - which scale by 1024, 1024*1024, and 1024*1024*1024 - respectively. - </p> - <p> - The value must be representable as a 64-bit unsigned integer - (0 to 18446744073709551615, inclusive). - Using <code class="varname">unlimited</code> is the best - way - to safely set a really large number. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">yes_or_no</code> - </p> - </td> -<td> - <p> - Either <strong class="userinput"><code>yes</code></strong> or <strong class="userinput"><code>no</code></strong>. - The words <strong class="userinput"><code>true</code></strong> and <strong class="userinput"><code>false</code></strong> are - also accepted, as are the numbers <strong class="userinput"><code>1</code></strong> - and <strong class="userinput"><code>0</code></strong>. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">dialup_option</code> - </p> - </td> -<td> - <p> - One of <strong class="userinput"><code>yes</code></strong>, - <strong class="userinput"><code>no</code></strong>, <strong class="userinput"><code>notify</code></strong>, - <strong class="userinput"><code>notify-passive</code></strong>, <strong class="userinput"><code>refresh</code></strong> or - <strong class="userinput"><code>passive</code></strong>. - When used in a zone, <strong class="userinput"><code>notify-passive</code></strong>, - <strong class="userinput"><code>refresh</code></strong>, and <strong class="userinput"><code>passive</code></strong> - are restricted to slave and stub zones. - </p> - </td> -</tr> -</tbody> -</table></div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="address_match_lists"></a>Address Match Lists</h3></div></div></div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2573277"></a>Syntax</h4></div></div></div> -<pre class="programlisting"><code class="varname">address_match_list</code> = address_match_list_element ; - [<span class="optional"> address_match_list_element; ... </span>] -<code class="varname">address_match_list_element</code> = [<span class="optional"> ! </span>] (ip_address [<span class="optional">/length</span>] | - key key_id | acl_name | { address_match_list } ) -</pre> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2573305"></a>Definition and Usage</h4></div></div></div> -<p> - Address match lists are primarily used to determine access - control for various server operations. They are also used in - the <span><strong class="command">listen-on</strong></span> and <span><strong class="command">sortlist</strong></span> - statements. The elements - which constitute an address match list can be any of the - following: - </p> -<div class="itemizedlist"><ul type="disc"> -<li>an IP address (IPv4 or IPv6)</li> -<li>an IP prefix (in `/' notation)</li> -<li> - a key ID, as defined by the <span><strong class="command">key</strong></span> - statement - </li> -<li>the name of an address match list defined with - the <span><strong class="command">acl</strong></span> statement - </li> -<li>a nested address match list enclosed in braces</li> -</ul></div> -<p> - Elements can be negated with a leading exclamation mark (`!'), - and the match list names "any", "none", "localhost", and - "localnets" - are predefined. More information on those names can be found in - the description of the acl statement. - </p> -<p> - The addition of the key clause made the name of this syntactic - element something of a misnomer, since security keys can be used - to validate access without regard to a host or network address. - Nonetheless, - the term "address match list" is still used throughout the - documentation. - </p> -<p> - When a given IP address or prefix is compared to an address - match list, the list is traversed in order until an element - matches. - The interpretation of a match depends on whether the list is being - used - for access control, defining listen-on ports, or in a sortlist, - and whether the element was negated. - </p> -<p> - When used as an access control list, a non-negated match - allows access and a negated match denies access. If - there is no match, access is denied. The clauses - <span><strong class="command">allow-notify</strong></span>, - <span><strong class="command">allow-query</strong></span>, - <span><strong class="command">allow-query-cache</strong></span>, - <span><strong class="command">allow-transfer</strong></span>, - <span><strong class="command">allow-update</strong></span>, - <span><strong class="command">allow-update-forwarding</strong></span>, and - <span><strong class="command">blackhole</strong></span> all use address match - lists. Similarly, the listen-on option will cause the - server to not accept queries on any of the machine's - addresses which do not match the list. - </p> -<p> - Because of the first-match aspect of the algorithm, an element - that defines a subset of another element in the list should come - before the broader element, regardless of whether either is - negated. For - example, in - <span><strong class="command">1.2.3/24; ! 1.2.3.13;</strong></span> the 1.2.3.13 - element is - completely useless because the algorithm will match any lookup for - 1.2.3.13 to the 1.2.3/24 element. - Using <span><strong class="command">! 1.2.3.13; 1.2.3/24</strong></span> fixes - that problem by having 1.2.3.13 blocked by the negation but all - other 1.2.3.* hosts fall through. - </p> -</div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2573480"></a>Comment Syntax</h3></div></div></div> -<p> - The <acronym class="acronym">BIND</acronym> 9 comment syntax allows for - comments to appear - anywhere that whitespace may appear in a <acronym class="acronym">BIND</acronym> configuration - file. To appeal to programmers of all kinds, they can be written - in the C, C++, or shell/perl style. - </p> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2573495"></a>Syntax</h4></div></div></div> -<p> - </p> -<pre class="programlisting">/* This is a <acronym class="acronym">BIND</acronym> comment as in C */</pre> -<p> - </p> -<pre class="programlisting">// This is a <acronym class="acronym">BIND</acronym> comment as in C++</pre> -<p> - </p> -<pre class="programlisting"># This is a <acronym class="acronym">BIND</acronym> comment as in common UNIX shells and perl</pre> -<p> - </p> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2573525"></a>Definition and Usage</h4></div></div></div> -<p> - Comments may appear anywhere that whitespace may appear in - a <acronym class="acronym">BIND</acronym> configuration file. - </p> -<p> - C-style comments start with the two characters /* (slash, - star) and end with */ (star, slash). Because they are completely - delimited with these characters, they can be used to comment only - a portion of a line or to span multiple lines. - </p> -<p> - C-style comments cannot be nested. For example, the following - is not valid because the entire comment ends with the first */: - </p> -<p> - -</p> -<pre class="programlisting">/* This is the start of a comment. - This is still part of the comment. -/* This is an incorrect attempt at nesting a comment. */ - This is no longer in any comment. */ -</pre> -<p> - - </p> -<p> - C++-style comments start with the two characters // (slash, - slash) and continue to the end of the physical line. They cannot - be continued across multiple physical lines; to have one logical - comment span multiple lines, each line must use the // pair. - </p> -<p> - For example: - </p> -<p> - -</p> -<pre class="programlisting">// This is the start of a comment. The next line -// is a new comment, even though it is logically -// part of the previous comment. -</pre> -<p> - - </p> -<p> - Shell-style (or perl-style, if you prefer) comments start - with the character <code class="literal">#</code> (number sign) - and continue to the end of the - physical line, as in C++ comments. - </p> -<p> - For example: - </p> -<p> - -</p> -<pre class="programlisting"># This is the start of a comment. The next line -# is a new comment, even though it is logically -# part of the previous comment. -</pre> -<p> - - </p> -<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Warning</h3> -<p> - You cannot use the semicolon (`;') character - to start a comment such as you would in a zone file. The - semicolon indicates the end of a configuration - statement. - </p> -</div> -</div> -</div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="Configuration_File_Grammar"></a>Configuration File Grammar</h2></div></div></div> -<p> - A <acronym class="acronym">BIND</acronym> 9 configuration consists of - statements and comments. - Statements end with a semicolon. Statements and comments are the - only elements that can appear without enclosing braces. Many - statements contain a block of sub-statements, which are also - terminated with a semicolon. - </p> -<p> - The following statements are supported: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p><span><strong class="command">acl</strong></span></p> - </td> -<td> - <p> - defines a named IP address - matching list, for access control and other uses. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">controls</strong></span></p> - </td> -<td> - <p> - declares control channels to be used - by the <span><strong class="command">rndc</strong></span> utility. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">include</strong></span></p> - </td> -<td> - <p> - includes a file. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">key</strong></span></p> - </td> -<td> - <p> - specifies key information for use in - authentication and authorization using TSIG. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">logging</strong></span></p> - </td> -<td> - <p> - specifies what the server logs, and where - the log messages are sent. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">lwres</strong></span></p> - </td> -<td> - <p> - configures <span><strong class="command">named</strong></span> to - also act as a light-weight resolver daemon (<span><strong class="command">lwresd</strong></span>). - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">masters</strong></span></p> - </td> -<td> - <p> - defines a named masters list for - inclusion in stub and slave zone masters clauses. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">options</strong></span></p> - </td> -<td> - <p> - controls global server configuration - options and sets defaults for other statements. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">server</strong></span></p> - </td> -<td> - <p> - sets certain configuration options on - a per-server basis. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">trusted-keys</strong></span></p> - </td> -<td> - <p> - defines trusted DNSSEC keys. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">view</strong></span></p> - </td> -<td> - <p> - defines a view. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">zone</strong></span></p> - </td> -<td> - <p> - defines a zone. - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - The <span><strong class="command">logging</strong></span> and - <span><strong class="command">options</strong></span> statements may only occur once - per - configuration. - </p> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2574092"></a><span><strong class="command">acl</strong></span> Statement Grammar</h3></div></div></div> -<pre class="programlisting"><span><strong class="command">acl</strong></span> acl-name { - address_match_list -}; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="acl"></a><span><strong class="command">acl</strong></span> Statement Definition and - Usage</h3></div></div></div> -<p> - The <span><strong class="command">acl</strong></span> statement assigns a symbolic - name to an address match list. It gets its name from a primary - use of address match lists: Access Control Lists (ACLs). - </p> -<p> - Note that an address match list's name must be defined - with <span><strong class="command">acl</strong></span> before it can be used - elsewhere; no - forward references are allowed. - </p> -<p> - The following ACLs are built-in: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p><span><strong class="command">any</strong></span></p> - </td> -<td> - <p> - Matches all hosts. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">none</strong></span></p> - </td> -<td> - <p> - Matches no hosts. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">localhost</strong></span></p> - </td> -<td> - <p> - Matches the IPv4 and IPv6 addresses of all network - interfaces on the system. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">localnets</strong></span></p> - </td> -<td> - <p> - Matches any host on an IPv4 or IPv6 network - for which the system has an interface. - Some systems do not provide a way to determine the prefix - lengths of - local IPv6 addresses. - In such a case, <span><strong class="command">localnets</strong></span> - only matches the local - IPv6 addresses, just like <span><strong class="command">localhost</strong></span>. - </p> - </td> -</tr> -</tbody> -</table></div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2574282"></a><span><strong class="command">controls</strong></span> Statement Grammar</h3></div></div></div> -<pre class="programlisting"><span><strong class="command">controls</strong></span> { - [ inet ( ip_addr | * ) [ port ip_port ] allow { <em class="replaceable"><code> address_match_list </code></em> } - keys { <em class="replaceable"><code>key_list</code></em> }; ] - [ inet ...; ] - [ unix <em class="replaceable"><code>path</code></em> perm <em class="replaceable"><code>number</code></em> owner <em class="replaceable"><code>number</code></em> group <em class="replaceable"><code>number</code></em> keys { <em class="replaceable"><code>key_list</code></em> }; ] - [ unix ...; ] -}; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="controls_statement_definition_and_usage"></a><span><strong class="command">controls</strong></span> Statement Definition and - Usage</h3></div></div></div> -<p> - The <span><strong class="command">controls</strong></span> statement declares control - channels to be used by system administrators to control the - operation of the name server. These control channels are - used by the <span><strong class="command">rndc</strong></span> utility to send - commands to and retrieve non-DNS results from a name server. - </p> -<p> - An <span><strong class="command">inet</strong></span> control channel is a TCP socket - listening at the specified <span><strong class="command">ip_port</strong></span> on the - specified <span><strong class="command">ip_addr</strong></span>, which can be an IPv4 or IPv6 - address. An <span><strong class="command">ip_addr</strong></span> of <code class="literal">*</code> (asterisk) is - interpreted as the IPv4 wildcard address; connections will be - accepted on any of the system's IPv4 addresses. - To listen on the IPv6 wildcard address, - use an <span><strong class="command">ip_addr</strong></span> of <code class="literal">::</code>. - If you will only use <span><strong class="command">rndc</strong></span> on the local host, - using the loopback address (<code class="literal">127.0.0.1</code> - or <code class="literal">::1</code>) is recommended for maximum security. - </p> -<p> - If no port is specified, port 953 is used. The asterisk - "<code class="literal">*</code>" cannot be used for <span><strong class="command">ip_port</strong></span>. - </p> -<p> - The ability to issue commands over the control channel is - restricted by the <span><strong class="command">allow</strong></span> and - <span><strong class="command">keys</strong></span> clauses. - Connections to the control channel are permitted based on the - <span><strong class="command">address_match_list</strong></span>. This is for simple - IP address based filtering only; any <span><strong class="command">key_id</strong></span> - elements of the <span><strong class="command">address_match_list</strong></span> - are ignored. - </p> -<p> - A <span><strong class="command">unix</strong></span> control channel is a UNIX domain - socket listening at the specified path in the file system. - Access to the socket is specified by the <span><strong class="command">perm</strong></span>, - <span><strong class="command">owner</strong></span> and <span><strong class="command">group</strong></span> clauses. - Note on some platforms (SunOS and Solaris) the permissions - (<span><strong class="command">perm</strong></span>) are applied to the parent directory - as the permissions on the socket itself are ignored. - </p> -<p> - The primary authorization mechanism of the command - channel is the <span><strong class="command">key_list</strong></span>, which - contains a list of <span><strong class="command">key_id</strong></span>s. - Each <span><strong class="command">key_id</strong></span> in the <span><strong class="command">key_list</strong></span> - is authorized to execute commands over the control channel. - See <a href="Bv9ARM.ch03.html#rndc">Remote Name Daemon Control application</a> in <a href="Bv9ARM.ch03.html#admin_tools" title="Administrative Tools">the section called “Administrative Tools”</a>) - for information about configuring keys in <span><strong class="command">rndc</strong></span>. - </p> -<p> - If no <span><strong class="command">controls</strong></span> statement is present, - <span><strong class="command">named</strong></span> will set up a default - control channel listening on the loopback address 127.0.0.1 - and its IPv6 counterpart ::1. - In this case, and also when the <span><strong class="command">controls</strong></span> statement - is present but does not have a <span><strong class="command">keys</strong></span> clause, - <span><strong class="command">named</strong></span> will attempt to load the command channel key - from the file <code class="filename">rndc.key</code> in - <code class="filename">/etc</code> (or whatever <code class="varname">sysconfdir</code> - was specified as when <acronym class="acronym">BIND</acronym> was built). - To create a <code class="filename">rndc.key</code> file, run - <strong class="userinput"><code>rndc-confgen -a</code></strong>. - </p> -<p> - The <code class="filename">rndc.key</code> feature was created to - ease the transition of systems from <acronym class="acronym">BIND</acronym> 8, - which did not have digital signatures on its command channel - messages and thus did not have a <span><strong class="command">keys</strong></span> clause. - - It makes it possible to use an existing <acronym class="acronym">BIND</acronym> 8 - configuration file in <acronym class="acronym">BIND</acronym> 9 unchanged, - and still have <span><strong class="command">rndc</strong></span> work the same way - <span><strong class="command">ndc</strong></span> worked in BIND 8, simply by executing the - command <strong class="userinput"><code>rndc-confgen -a</code></strong> after BIND 9 is - installed. - </p> -<p> - Since the <code class="filename">rndc.key</code> feature - is only intended to allow the backward-compatible usage of - <acronym class="acronym">BIND</acronym> 8 configuration files, this - feature does not - have a high degree of configurability. You cannot easily change - the key name or the size of the secret, so you should make a - <code class="filename">rndc.conf</code> with your own key if you - wish to change - those things. The <code class="filename">rndc.key</code> file - also has its - permissions set such that only the owner of the file (the user that - <span><strong class="command">named</strong></span> is running as) can access it. - If you - desire greater flexibility in allowing other users to access - <span><strong class="command">rndc</strong></span> commands, then you need to create - a - <code class="filename">rndc.conf</code> file and make it group - readable by a group - that contains the users who should have access. - </p> -<p> - To disable the command channel, use an empty - <span><strong class="command">controls</strong></span> statement: - <span><strong class="command">controls { };</strong></span>. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2574711"></a><span><strong class="command">include</strong></span> Statement Grammar</h3></div></div></div> -<pre class="programlisting">include <em class="replaceable"><code>filename</code></em>;</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2574726"></a><span><strong class="command">include</strong></span> Statement Definition and - Usage</h3></div></div></div> -<p> - The <span><strong class="command">include</strong></span> statement inserts the - specified file at the point where the <span><strong class="command">include</strong></span> - statement is encountered. The <span><strong class="command">include</strong></span> - statement facilitates the administration of configuration - files - by permitting the reading or writing of some things but not - others. For example, the statement could include private keys - that are readable only by the name server. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2574749"></a><span><strong class="command">key</strong></span> Statement Grammar</h3></div></div></div> -<pre class="programlisting">key <em class="replaceable"><code>key_id</code></em> { - algorithm <em class="replaceable"><code>string</code></em>; - secret <em class="replaceable"><code>string</code></em>; -}; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2574771"></a><span><strong class="command">key</strong></span> Statement Definition and Usage</h3></div></div></div> -<p> - The <span><strong class="command">key</strong></span> statement defines a shared - secret key for use with TSIG (see <a href="Bv9ARM.ch04.html#tsig" title="TSIG">the section called “TSIG”</a>) - or the command channel - (see <a href="Bv9ARM.ch06.html#controls_statement_definition_and_usage" title="controls Statement Definition and - Usage">the section called “<span><strong class="command">controls</strong></span> Statement Definition and - Usage”</a>). - </p> -<p> - The <span><strong class="command">key</strong></span> statement can occur at the - top level - of the configuration file or inside a <span><strong class="command">view</strong></span> - statement. Keys defined in top-level <span><strong class="command">key</strong></span> - statements can be used in all views. Keys intended for use in - a <span><strong class="command">controls</strong></span> statement - (see <a href="Bv9ARM.ch06.html#controls_statement_definition_and_usage" title="controls Statement Definition and - Usage">the section called “<span><strong class="command">controls</strong></span> Statement Definition and - Usage”</a>) - must be defined at the top level. - </p> -<p> - The <em class="replaceable"><code>key_id</code></em>, also known as the - key name, is a domain name uniquely identifying the key. It can - be used in a <span><strong class="command">server</strong></span> - statement to cause requests sent to that - server to be signed with this key, or in address match lists to - verify that incoming requests have been signed with a key - matching this name, algorithm, and secret. - </p> -<p> - The <em class="replaceable"><code>algorithm_id</code></em> is a string - that specifies a security/authentication algorithm. Named - supports <code class="literal">hmac-md5</code>, - <code class="literal">hmac-sha1</code>, <code class="literal">hmac-sha224</code>, - <code class="literal">hmac-sha256</code>, <code class="literal">hmac-sha384</code> - and <code class="literal">hmac-sha512</code> TSIG authentication. - Truncated hashes are supported by appending the minimum - number of required bits preceded by a dash, e.g. - <code class="literal">hmac-sha1-80</code>. The - <em class="replaceable"><code>secret_string</code></em> is the secret - to be used by the algorithm, and is treated as a base-64 - encoded string. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2574930"></a><span><strong class="command">logging</strong></span> Statement Grammar</h3></div></div></div> -<pre class="programlisting"><span><strong class="command">logging</strong></span> { - [ <span><strong class="command">channel</strong></span> <em class="replaceable"><code>channel_name</code></em> { - ( <span><strong class="command">file</strong></span> <em class="replaceable"><code>path name</code></em> - [ <span><strong class="command">versions</strong></span> ( <em class="replaceable"><code>number</code></em> | <span><strong class="command">unlimited</strong></span> ) ] - [ <span><strong class="command">size</strong></span> <em class="replaceable"><code>size spec</code></em> ] - | <span><strong class="command">syslog</strong></span> <em class="replaceable"><code>syslog_facility</code></em> - | <span><strong class="command">stderr</strong></span> - | <span><strong class="command">null</strong></span> ); - [ <span><strong class="command">severity</strong></span> (<code class="option">critical</code> | <code class="option">error</code> | <code class="option">warning</code> | <code class="option">notice</code> | - <code class="option">info</code> | <code class="option">debug</code> [ <em class="replaceable"><code>level</code></em> ] | <code class="option">dynamic</code> ); ] - [ <span><strong class="command">print-category</strong></span> <code class="option">yes</code> or <code class="option">no</code>; ] - [ <span><strong class="command">print-severity</strong></span> <code class="option">yes</code> or <code class="option">no</code>; ] - [ <span><strong class="command">print-time</strong></span> <code class="option">yes</code> or <code class="option">no</code>; ] - }; ] - [ <span><strong class="command">category</strong></span> <em class="replaceable"><code>category_name</code></em> { - <em class="replaceable"><code>channel_name</code></em> ; [ <em class="replaceable"><code>channel_name</code></em> ; ... ] - }; ] - ... -}; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2575056"></a><span><strong class="command">logging</strong></span> Statement Definition and - Usage</h3></div></div></div> -<p> - The <span><strong class="command">logging</strong></span> statement configures a - wide - variety of logging options for the name server. Its <span><strong class="command">channel</strong></span> phrase - associates output methods, format options and severity levels with - a name that can then be used with the <span><strong class="command">category</strong></span> phrase - to select how various classes of messages are logged. - </p> -<p> - Only one <span><strong class="command">logging</strong></span> statement is used to - define - as many channels and categories as are wanted. If there is no <span><strong class="command">logging</strong></span> statement, - the logging configuration will be: - </p> -<pre class="programlisting">logging { - category default { default_syslog; default_debug; }; - category unmatched { null; }; -}; -</pre> -<p> - In <acronym class="acronym">BIND</acronym> 9, the logging configuration - is only established when - the entire configuration file has been parsed. In <acronym class="acronym">BIND</acronym> 8, it was - established as soon as the <span><strong class="command">logging</strong></span> - statement - was parsed. When the server is starting up, all logging messages - regarding syntax errors in the configuration file go to the default - channels, or to standard error if the "<code class="option">-g</code>" option - was specified. - </p> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2575108"></a>The <span><strong class="command">channel</strong></span> Phrase</h4></div></div></div> -<p> - All log output goes to one or more <span class="emphasis"><em>channels</em></span>; - you can make as many of them as you want. - </p> -<p> - Every channel definition must include a destination clause that - says whether messages selected for the channel go to a file, to a - particular syslog facility, to the standard error stream, or are - discarded. It can optionally also limit the message severity level - that will be accepted by the channel (the default is - <span><strong class="command">info</strong></span>), and whether to include a - <span><strong class="command">named</strong></span>-generated time stamp, the - category name - and/or severity level (the default is not to include any). - </p> -<p> - The <span><strong class="command">null</strong></span> destination clause - causes all messages sent to the channel to be discarded; - in that case, other options for the channel are meaningless. - </p> -<p> - The <span><strong class="command">file</strong></span> destination clause directs - the channel - to a disk file. It can include limitations - both on how large the file is allowed to become, and how many - versions - of the file will be saved each time the file is opened. - </p> -<p> - If you use the <span><strong class="command">versions</strong></span> log file - option, then - <span><strong class="command">named</strong></span> will retain that many backup - versions of the file by - renaming them when opening. For example, if you choose to keep - three old versions - of the file <code class="filename">lamers.log</code>, then just - before it is opened - <code class="filename">lamers.log.1</code> is renamed to - <code class="filename">lamers.log.2</code>, <code class="filename">lamers.log.0</code> is renamed - to <code class="filename">lamers.log.1</code>, and <code class="filename">lamers.log</code> is - renamed to <code class="filename">lamers.log.0</code>. - You can say <span><strong class="command">versions unlimited</strong></span> to - not limit - the number of versions. - If a <span><strong class="command">size</strong></span> option is associated with - the log file, - then renaming is only done when the file being opened exceeds the - indicated size. No backup versions are kept by default; any - existing - log file is simply appended. - </p> -<p> - The <span><strong class="command">size</strong></span> option for files is used - to limit log - growth. If the file ever exceeds the size, then <span><strong class="command">named</strong></span> will - stop writing to the file unless it has a <span><strong class="command">versions</strong></span> option - associated with it. If backup versions are kept, the files are - rolled as - described above and a new one begun. If there is no - <span><strong class="command">versions</strong></span> option, no more data will - be written to the log - until some out-of-band mechanism removes or truncates the log to - less than the - maximum size. The default behavior is not to limit the size of - the - file. - </p> -<p> - Example usage of the <span><strong class="command">size</strong></span> and - <span><strong class="command">versions</strong></span> options: - </p> -<pre class="programlisting">channel an_example_channel { - file "example.log" versions 3 size 20m; - print-time yes; - print-category yes; -}; -</pre> -<p> - The <span><strong class="command">syslog</strong></span> destination clause - directs the - channel to the system log. Its argument is a - syslog facility as described in the <span><strong class="command">syslog</strong></span> man - page. Known facilities are <span><strong class="command">kern</strong></span>, <span><strong class="command">user</strong></span>, - <span><strong class="command">mail</strong></span>, <span><strong class="command">daemon</strong></span>, <span><strong class="command">auth</strong></span>, - <span><strong class="command">syslog</strong></span>, <span><strong class="command">lpr</strong></span>, <span><strong class="command">news</strong></span>, - <span><strong class="command">uucp</strong></span>, <span><strong class="command">cron</strong></span>, <span><strong class="command">authpriv</strong></span>, - <span><strong class="command">ftp</strong></span>, <span><strong class="command">local0</strong></span>, <span><strong class="command">local1</strong></span>, - <span><strong class="command">local2</strong></span>, <span><strong class="command">local3</strong></span>, <span><strong class="command">local4</strong></span>, - <span><strong class="command">local5</strong></span>, <span><strong class="command">local6</strong></span> and - <span><strong class="command">local7</strong></span>, however not all facilities - are supported on - all operating systems. - How <span><strong class="command">syslog</strong></span> will handle messages - sent to - this facility is described in the <span><strong class="command">syslog.conf</strong></span> man - page. If you have a system which uses a very old version of <span><strong class="command">syslog</strong></span> that - only uses two arguments to the <span><strong class="command">openlog()</strong></span> function, - then this clause is silently ignored. - </p> -<p> - The <span><strong class="command">severity</strong></span> clause works like <span><strong class="command">syslog</strong></span>'s - "priorities", except that they can also be used if you are writing - straight to a file rather than using <span><strong class="command">syslog</strong></span>. - Messages which are not at least of the severity level given will - not be selected for the channel; messages of higher severity - levels - will be accepted. - </p> -<p> - If you are using <span><strong class="command">syslog</strong></span>, then the <span><strong class="command">syslog.conf</strong></span> priorities - will also determine what eventually passes through. For example, - defining a channel facility and severity as <span><strong class="command">daemon</strong></span> and <span><strong class="command">debug</strong></span> but - only logging <span><strong class="command">daemon.warning</strong></span> via <span><strong class="command">syslog.conf</strong></span> will - cause messages of severity <span><strong class="command">info</strong></span> and - <span><strong class="command">notice</strong></span> to - be dropped. If the situation were reversed, with <span><strong class="command">named</strong></span> writing - messages of only <span><strong class="command">warning</strong></span> or higher, - then <span><strong class="command">syslogd</strong></span> would - print all messages it received from the channel. - </p> -<p> - The <span><strong class="command">stderr</strong></span> destination clause - directs the - channel to the server's standard error stream. This is intended - for - use when the server is running as a foreground process, for - example - when debugging a configuration. - </p> -<p> - The server can supply extensive debugging information when - it is in debugging mode. If the server's global debug level is - greater - than zero, then debugging mode will be active. The global debug - level is set either by starting the <span><strong class="command">named</strong></span> server - with the <code class="option">-d</code> flag followed by a positive integer, - or by running <span><strong class="command">rndc trace</strong></span>. - The global debug level - can be set to zero, and debugging mode turned off, by running <span><strong class="command">rndc -notrace</strong></span>. All debugging messages in the server have a debug - level, and higher debug levels give more detailed output. Channels - that specify a specific debug severity, for example: - </p> -<pre class="programlisting">channel specific_debug_level { - file "foo"; - severity debug 3; -}; -</pre> -<p> - will get debugging output of level 3 or less any time the - server is in debugging mode, regardless of the global debugging - level. Channels with <span><strong class="command">dynamic</strong></span> - severity use the - server's global debug level to determine what messages to print. - </p> -<p> - If <span><strong class="command">print-time</strong></span> has been turned on, - then - the date and time will be logged. <span><strong class="command">print-time</strong></span> may - be specified for a <span><strong class="command">syslog</strong></span> channel, - but is usually - pointless since <span><strong class="command">syslog</strong></span> also prints - the date and - time. If <span><strong class="command">print-category</strong></span> is - requested, then the - category of the message will be logged as well. Finally, if <span><strong class="command">print-severity</strong></span> is - on, then the severity level of the message will be logged. The <span><strong class="command">print-</strong></span> options may - be used in any combination, and will always be printed in the - following - order: time, category, severity. Here is an example where all - three <span><strong class="command">print-</strong></span> options - are on: - </p> -<p> - <code class="computeroutput">28-Feb-2000 15:05:32.863 general: notice: running</code> - </p> -<p> - There are four predefined channels that are used for - <span><strong class="command">named</strong></span>'s default logging as follows. - How they are - used is described in <a href="Bv9ARM.ch06.html#the_category_phrase" title="The category Phrase">the section called “The <span><strong class="command">category</strong></span> Phrase”</a>. - </p> -<pre class="programlisting">channel default_syslog { - syslog daemon; // send to syslog's daemon - // facility - severity info; // only send priority info - // and higher -}; - -channel default_debug { - file "named.run"; // write to named.run in - // the working directory - // Note: stderr is used instead - // of "named.run" - // if the server is started - // with the '-f' option. - severity dynamic; // log at the server's - // current debug level -}; - -channel default_stderr { - stderr; // writes to stderr - severity info; // only send priority info - // and higher -}; - -channel null { - null; // toss anything sent to - // this channel -}; -</pre> -<p> - The <span><strong class="command">default_debug</strong></span> channel has the - special - property that it only produces output when the server's debug - level is - nonzero. It normally writes to a file called <code class="filename">named.run</code> - in the server's working directory. - </p> -<p> - For security reasons, when the "<code class="option">-u</code>" - command line option is used, the <code class="filename">named.run</code> file - is created only after <span><strong class="command">named</strong></span> has - changed to the - new UID, and any debug output generated while <span><strong class="command">named</strong></span> is - starting up and still running as root is discarded. If you need - to capture this output, you must run the server with the "<code class="option">-g</code>" - option and redirect standard error to a file. - </p> -<p> - Once a channel is defined, it cannot be redefined. Thus you - cannot alter the built-in channels directly, but you can modify - the default logging by pointing categories at channels you have - defined. - </p> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="the_category_phrase"></a>The <span><strong class="command">category</strong></span> Phrase</h4></div></div></div> -<p> - There are many categories, so you can send the logs you want - to see wherever you want, without seeing logs you don't want. If - you don't specify a list of channels for a category, then log - messages - in that category will be sent to the <span><strong class="command">default</strong></span> category - instead. If you don't specify a default category, the following - "default default" is used: - </p> -<pre class="programlisting">category default { default_syslog; default_debug; }; -</pre> -<p> - As an example, let's say you want to log security events to - a file, but you also want keep the default logging behavior. You'd - specify the following: - </p> -<pre class="programlisting">channel my_security_channel { - file "my_security_file"; - severity info; -}; -category security { - my_security_channel; - default_syslog; - default_debug; -};</pre> -<p> - To discard all messages in a category, specify the <span><strong class="command">null</strong></span> channel: - </p> -<pre class="programlisting">category xfer-out { null; }; -category notify { null; }; -</pre> -<p> - Following are the available categories and brief descriptions - of the types of log information they contain. More - categories may be added in future <acronym class="acronym">BIND</acronym> releases. - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p><span><strong class="command">default</strong></span></p> - </td> -<td> - <p> - The default category defines the logging - options for those categories where no specific - configuration has been - defined. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">general</strong></span></p> - </td> -<td> - <p> - The catch-all. Many things still aren't - classified into categories, and they all end up here. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">database</strong></span></p> - </td> -<td> - <p> - Messages relating to the databases used - internally by the name server to store zone and cache - data. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">security</strong></span></p> - </td> -<td> - <p> - Approval and denial of requests. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">config</strong></span></p> - </td> -<td> - <p> - Configuration file parsing and processing. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">resolver</strong></span></p> - </td> -<td> - <p> - DNS resolution, such as the recursive - lookups performed on behalf of clients by a caching name - server. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">xfer-in</strong></span></p> - </td> -<td> - <p> - Zone transfers the server is receiving. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">xfer-out</strong></span></p> - </td> -<td> - <p> - Zone transfers the server is sending. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">notify</strong></span></p> - </td> -<td> - <p> - The NOTIFY protocol. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">client</strong></span></p> - </td> -<td> - <p> - Processing of client requests. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">unmatched</strong></span></p> - </td> -<td> - <p> - Messages that named was unable to determine the - class of or for which there was no matching <span><strong class="command">view</strong></span>. - A one line summary is also logged to the <span><strong class="command">client</strong></span> category. - This category is best sent to a file or stderr, by - default it is sent to - the <span><strong class="command">null</strong></span> channel. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">network</strong></span></p> - </td> -<td> - <p> - Network operations. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">update</strong></span></p> - </td> -<td> - <p> - Dynamic updates. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">update-security</strong></span></p> - </td> -<td> - <p> - Approval and denial of update requests. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">queries</strong></span></p> - </td> -<td> - <p> - Specify where queries should be logged to. - </p> - <p> - At startup, specifying the category <span><strong class="command">queries</strong></span> will also - enable query logging unless <span><strong class="command">querylog</strong></span> option has been - specified. - </p> - <p> - The query log entry reports the client's IP address and - port number, and the - query name, class and type. It also reports whether the - Recursion Desired - flag was set (+ if set, - if not set), EDNS was in use - (E) or if the - query was signed (S). - </p> - <p> - <code class="computeroutput">client 127.0.0.1#62536: query: www.example.com IN AAAA +SE</code> - </p> - <p> - <code class="computeroutput">client ::1#62537: query: www.example.net IN AAAA -SE</code> - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">dispatch</strong></span></p> - </td> -<td> - <p> - Dispatching of incoming packets to the - server modules where they are to be processed. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">dnssec</strong></span></p> - </td> -<td> - <p> - DNSSEC and TSIG protocol processing. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">lame-servers</strong></span></p> - </td> -<td> - <p> - Lame servers. These are misconfigurations - in remote servers, discovered by BIND 9 when trying to - query - those servers during resolution. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">delegation-only</strong></span></p> - </td> -<td> - <p> - Delegation only. Logs queries that have have - been forced to NXDOMAIN as the result of a - delegation-only zone or - a <span><strong class="command">delegation-only</strong></span> in a - hint or stub zone declaration. - </p> - </td> -</tr> -</tbody> -</table></div> -</div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2576406"></a><span><strong class="command">lwres</strong></span> Statement Grammar</h3></div></div></div> -<p> - This is the grammar of the <span><strong class="command">lwres</strong></span> - statement in the <code class="filename">named.conf</code> file: - </p> -<pre class="programlisting"><span><strong class="command">lwres</strong></span> { - [<span class="optional"> listen-on { <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; [<span class="optional"> <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; ... </span>] }; </span>] - [<span class="optional"> view <em class="replaceable"><code>view_name</code></em>; </span>] - [<span class="optional"> search { <em class="replaceable"><code>domain_name</code></em> ; [<span class="optional"> <em class="replaceable"><code>domain_name</code></em> ; ... </span>] }; </span>] - [<span class="optional"> ndots <em class="replaceable"><code>number</code></em>; </span>] -}; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2576480"></a><span><strong class="command">lwres</strong></span> Statement Definition and Usage</h3></div></div></div> -<p> - The <span><strong class="command">lwres</strong></span> statement configures the - name - server to also act as a lightweight resolver server. (See - <a href="Bv9ARM.ch05.html#lwresd" title="Running a Resolver Daemon">the section called “Running a Resolver Daemon”</a>.) There may be multiple - <span><strong class="command">lwres</strong></span> statements configuring - lightweight resolver servers with different properties. - </p> -<p> - The <span><strong class="command">listen-on</strong></span> statement specifies a - list of - addresses (and ports) that this instance of a lightweight resolver - daemon - should accept requests on. If no port is specified, port 921 is - used. - If this statement is omitted, requests will be accepted on - 127.0.0.1, - port 921. - </p> -<p> - The <span><strong class="command">view</strong></span> statement binds this - instance of a - lightweight resolver daemon to a view in the DNS namespace, so that - the - response will be constructed in the same manner as a normal DNS - query - matching this view. If this statement is omitted, the default view - is - used, and if there is no default view, an error is triggered. - </p> -<p> - The <span><strong class="command">search</strong></span> statement is equivalent to - the - <span><strong class="command">search</strong></span> statement in - <code class="filename">/etc/resolv.conf</code>. It provides a - list of domains - which are appended to relative names in queries. - </p> -<p> - The <span><strong class="command">ndots</strong></span> statement is equivalent to - the - <span><strong class="command">ndots</strong></span> statement in - <code class="filename">/etc/resolv.conf</code>. It indicates the - minimum - number of dots in a relative domain name that should result in an - exact match lookup before search path elements are appended. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2576544"></a><span><strong class="command">masters</strong></span> Statement Grammar</h3></div></div></div> -<pre class="programlisting"> -<span><strong class="command">masters</strong></span> <em class="replaceable"><code>name</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] { ( <em class="replaceable"><code>masters_list</code></em> | <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] [<span class="optional">key <em class="replaceable"><code>key</code></em></span>] ) ; [<span class="optional">...</span>] }; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2576587"></a><span><strong class="command">masters</strong></span> Statement Definition and - Usage</h3></div></div></div> -<p><span><strong class="command">masters</strong></span> - lists allow for a common set of masters to be easily used by - multiple stub and slave zones. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2576602"></a><span><strong class="command">options</strong></span> Statement Grammar</h3></div></div></div> -<p> - This is the grammar of the <span><strong class="command">options</strong></span> - statement in the <code class="filename">named.conf</code> file: - </p> -<pre class="programlisting">options { - [<span class="optional"> version <em class="replaceable"><code>version_string</code></em>; </span>] - [<span class="optional"> hostname <em class="replaceable"><code>hostname_string</code></em>; </span>] - [<span class="optional"> server-id <em class="replaceable"><code>server_id_string</code></em>; </span>] - [<span class="optional"> directory <em class="replaceable"><code>path_name</code></em>; </span>] - [<span class="optional"> key-directory <em class="replaceable"><code>path_name</code></em>; </span>] - [<span class="optional"> named-xfer <em class="replaceable"><code>path_name</code></em>; </span>] - [<span class="optional"> tkey-domain <em class="replaceable"><code>domainname</code></em>; </span>] - [<span class="optional"> tkey-dhkey <em class="replaceable"><code>key_name</code></em> <em class="replaceable"><code>key_tag</code></em>; </span>] - [<span class="optional"> cache-file <em class="replaceable"><code>path_name</code></em>; </span>] - [<span class="optional"> dump-file <em class="replaceable"><code>path_name</code></em>; </span>] - [<span class="optional"> memstatistics-file <em class="replaceable"><code>path_name</code></em>; </span>] - [<span class="optional"> pid-file <em class="replaceable"><code>path_name</code></em>; </span>] - [<span class="optional"> recursing-file <em class="replaceable"><code>path_name</code></em>; </span>] - [<span class="optional"> statistics-file <em class="replaceable"><code>path_name</code></em>; </span>] - [<span class="optional"> zone-statistics <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> auth-nxdomain <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> deallocate-on-exit <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> dialup <em class="replaceable"><code>dialup_option</code></em>; </span>] - [<span class="optional"> fake-iquery <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> fetch-glue <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> flush-zones-on-shutdown <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> has-old-clients <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> host-statistics <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> host-statistics-max <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> minimal-responses <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> multiple-cnames <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> notify <em class="replaceable"><code>yes_or_no</code></em> | <em class="replaceable"><code>explicit</code></em> | <em class="replaceable"><code>master-only</code></em>; </span>] - [<span class="optional"> recursion <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> rfc2308-type1 <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> use-id-pool <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> maintain-ixfr-base <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> dnssec-enable <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> dnssec-validation <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> dnssec-lookaside <em class="replaceable"><code>domain</code></em> trust-anchor <em class="replaceable"><code>domain</code></em>; </span>] - [<span class="optional"> dnssec-must-be-secure <em class="replaceable"><code>domain yes_or_no</code></em>; </span>] - [<span class="optional"> dnssec-accept-expired <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> forward ( <em class="replaceable"><code>only</code></em> | <em class="replaceable"><code>first</code></em> ); </span>] - [<span class="optional"> forwarders { [<span class="optional"> <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; ... </span>] }; </span>] - [<span class="optional"> dual-stack-servers [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] { - ( <em class="replaceable"><code>domain_name</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] | - <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ) ; - ... }; </span>] - [<span class="optional"> check-names ( <em class="replaceable"><code>master</code></em> | <em class="replaceable"><code>slave</code></em> | <em class="replaceable"><code>response</code></em> ) - ( <em class="replaceable"><code>warn</code></em> | <em class="replaceable"><code>fail</code></em> | <em class="replaceable"><code>ignore</code></em> ); </span>] - [<span class="optional"> check-mx ( <em class="replaceable"><code>warn</code></em> | <em class="replaceable"><code>fail</code></em> | <em class="replaceable"><code>ignore</code></em> ); </span>] - [<span class="optional"> check-wildcard <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> check-integrity <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> check-mx-cname ( <em class="replaceable"><code>warn</code></em> | <em class="replaceable"><code>fail</code></em> | <em class="replaceable"><code>ignore</code></em> ); </span>] - [<span class="optional"> check-srv-cname ( <em class="replaceable"><code>warn</code></em> | <em class="replaceable"><code>fail</code></em> | <em class="replaceable"><code>ignore</code></em> ); </span>] - [<span class="optional"> check-sibling <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> allow-notify { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> allow-query { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> allow-query-cache { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> allow-transfer { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> allow-recursion { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> allow-update { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> allow-update-forwarding { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> update-check-ksk <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> allow-v6-synthesis { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> blackhole { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> avoid-v4-udp-ports { <em class="replaceable"><code>port_list</code></em> }; </span>] - [<span class="optional"> avoid-v6-udp-ports { <em class="replaceable"><code>port_list</code></em> }; </span>] - [<span class="optional"> listen-on [<span class="optional"> port <em class="replaceable"><code>ip_port</code></em> </span>] { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> listen-on-v6 [<span class="optional"> port <em class="replaceable"><code>ip_port</code></em> </span>] { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> query-source ( ( <em class="replaceable"><code>ip4_addr</code></em> | <em class="replaceable"><code>*</code></em> ) - [<span class="optional"> port ( <em class="replaceable"><code>ip_port</code></em> | <em class="replaceable"><code>*</code></em> ) </span>] | - [<span class="optional"> address ( <em class="replaceable"><code>ip4_addr</code></em> | <em class="replaceable"><code>*</code></em> ) </span>] - [<span class="optional"> port ( <em class="replaceable"><code>ip_port</code></em> | <em class="replaceable"><code>*</code></em> ) </span>] ) ; </span>] - [<span class="optional"> query-source-v6 ( ( <em class="replaceable"><code>ip6_addr</code></em> | <em class="replaceable"><code>*</code></em> ) - [<span class="optional"> port ( <em class="replaceable"><code>ip_port</code></em> | <em class="replaceable"><code>*</code></em> ) </span>] | - [<span class="optional"> address ( <em class="replaceable"><code>ip6_addr</code></em> | <em class="replaceable"><code>*</code></em> ) </span>] - [<span class="optional"> port ( <em class="replaceable"><code>ip_port</code></em> | <em class="replaceable"><code>*</code></em> ) </span>] ) ; </span>] - [<span class="optional"> max-transfer-time-in <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> max-transfer-time-out <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> max-transfer-idle-in <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> max-transfer-idle-out <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> tcp-clients <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> recursive-clients <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> serial-query-rate <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> serial-queries <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> tcp-listen-queue <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> transfer-format <em class="replaceable"><code>( one-answer | many-answers )</code></em>; </span>] - [<span class="optional"> transfers-in <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> transfers-out <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> transfers-per-ns <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> transfer-source (<em class="replaceable"><code>ip4_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> transfer-source-v6 (<em class="replaceable"><code>ip6_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> alt-transfer-source (<em class="replaceable"><code>ip4_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> alt-transfer-source-v6 (<em class="replaceable"><code>ip6_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> use-alt-transfer-source <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> notify-delay <em class="replaceable"><code>seconds</code></em> ; </span>] - [<span class="optional"> notify-source (<em class="replaceable"><code>ip4_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> notify-source-v6 (<em class="replaceable"><code>ip6_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> also-notify { <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; [<span class="optional"> <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; ... </span>] }; </span>] - [<span class="optional"> max-ixfr-log-size <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> max-journal-size <em class="replaceable"><code>size_spec</code></em>; </span>] - [<span class="optional"> coresize <em class="replaceable"><code>size_spec</code></em> ; </span>] - [<span class="optional"> datasize <em class="replaceable"><code>size_spec</code></em> ; </span>] - [<span class="optional"> files <em class="replaceable"><code>size_spec</code></em> ; </span>] - [<span class="optional"> stacksize <em class="replaceable"><code>size_spec</code></em> ; </span>] - [<span class="optional"> cleaning-interval <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> heartbeat-interval <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> interface-interval <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> statistics-interval <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> topology { <em class="replaceable"><code>address_match_list</code></em> }</span>]; - [<span class="optional"> sortlist { <em class="replaceable"><code>address_match_list</code></em> }</span>]; - [<span class="optional"> rrset-order { <em class="replaceable"><code>order_spec</code></em> ; [<span class="optional"> <em class="replaceable"><code>order_spec</code></em> ; ... </span>] </span>] }; - [<span class="optional"> lame-ttl <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> max-ncache-ttl <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> max-cache-ttl <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> sig-validity-interval <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> min-roots <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> use-ixfr <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> provide-ixfr <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> request-ixfr <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> treat-cr-as-space <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> min-refresh-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-refresh-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> min-retry-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-retry-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> port <em class="replaceable"><code>ip_port</code></em>; </span>] - [<span class="optional"> additional-from-auth <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> additional-from-cache <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> random-device <em class="replaceable"><code>path_name</code></em> ; </span>] - [<span class="optional"> max-cache-size <em class="replaceable"><code>size_spec</code></em> ; </span>] - [<span class="optional"> match-mapped-addresses <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> preferred-glue ( <em class="replaceable"><code>A</code></em> | <em class="replaceable"><code>AAAA</code></em> | <em class="replaceable"><code>NONE</code></em> ); </span>] - [<span class="optional"> edns-udp-size <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> max-udp-size <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> root-delegation-only [<span class="optional"> exclude { <em class="replaceable"><code>namelist</code></em> } </span>] ; </span>] - [<span class="optional"> querylog <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> disable-algorithms <em class="replaceable"><code>domain</code></em> { <em class="replaceable"><code>algorithm</code></em>; [<span class="optional"> <em class="replaceable"><code>algorithm</code></em>; </span>] }; </span>] - [<span class="optional"> acache-enable <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> acache-cleaning-interval <em class="replaceable"><code>number</code></em>; </span>] - [<span class="optional"> max-acache-size <em class="replaceable"><code>size_spec</code></em> ; </span>] - [<span class="optional"> clients-per-query <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-clients-per-query <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> masterfile-format (<code class="constant">text</code>|<code class="constant">raw</code>) ; </span>] - [<span class="optional"> empty-server <em class="replaceable"><code>name</code></em> ; </span>] - [<span class="optional"> empty-contact <em class="replaceable"><code>name</code></em> ; </span>] - [<span class="optional"> empty-zones-enable <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> disable-empty-zone <em class="replaceable"><code>zone_name</code></em> ; </span>] - [<span class="optional"> zero-no-soa-ttl <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> zero-no-soa-ttl-cache <em class="replaceable"><code>yes_or_no</code></em> ; </span>] -}; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="options"></a><span><strong class="command">options</strong></span> Statement Definition and - Usage</h3></div></div></div> -<p> - The <span><strong class="command">options</strong></span> statement sets up global - options - to be used by <acronym class="acronym">BIND</acronym>. This statement - may appear only - once in a configuration file. If there is no <span><strong class="command">options</strong></span> - statement, an options block with each option set to its default will - be used. - </p> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">directory</strong></span></span></dt> -<dd><p> - The working directory of the server. - Any non-absolute pathnames in the configuration file will be - taken - as relative to this directory. The default location for most - server - output files (e.g. <code class="filename">named.run</code>) - is this directory. - If a directory is not specified, the working directory - defaults to `<code class="filename">.</code>', the directory from - which the server - was started. The directory specified should be an absolute - path. - </p></dd> -<dt><span class="term"><span><strong class="command">key-directory</strong></span></span></dt> -<dd><p> - When performing dynamic update of secure zones, the - directory where the public and private key files should be - found, - if different than the current working directory. The - directory specified - must be an absolute path. - </p></dd> -<dt><span class="term"><span><strong class="command">named-xfer</strong></span></span></dt> -<dd><p> - <span class="emphasis"><em>This option is obsolete.</em></span> - It was used in <acronym class="acronym">BIND</acronym> 8 to - specify the pathname to the <span><strong class="command">named-xfer</strong></span> program. - In <acronym class="acronym">BIND</acronym> 9, no separate <span><strong class="command">named-xfer</strong></span> program is - needed; its functionality is built into the name server. - </p></dd> -<dt><span class="term"><span><strong class="command">tkey-domain</strong></span></span></dt> -<dd><p> - The domain appended to the names of all - shared keys generated with - <span><strong class="command">TKEY</strong></span>. When a client - requests a <span><strong class="command">TKEY</strong></span> exchange, it - may or may not specify - the desired name for the key. If present, the name of the - shared - key will be "<code class="varname">client specified part</code>" + - "<code class="varname">tkey-domain</code>". - Otherwise, the name of the shared key will be "<code class="varname">random hex -digits</code>" + "<code class="varname">tkey-domain</code>". In most cases, - the <span><strong class="command">domainname</strong></span> should be the - server's domain - name. - </p></dd> -<dt><span class="term"><span><strong class="command">tkey-dhkey</strong></span></span></dt> -<dd><p> - The Diffie-Hellman key used by the server - to generate shared keys with clients using the Diffie-Hellman - mode - of <span><strong class="command">TKEY</strong></span>. The server must be - able to load the - public and private keys from files in the working directory. - In - most cases, the keyname should be the server's host name. - </p></dd> -<dt><span class="term"><span><strong class="command">cache-file</strong></span></span></dt> -<dd><p> - This is for testing only. Do not use. - </p></dd> -<dt><span class="term"><span><strong class="command">dump-file</strong></span></span></dt> -<dd><p> - The pathname of the file the server dumps - the database to when instructed to do so with - <span><strong class="command">rndc dumpdb</strong></span>. - If not specified, the default is <code class="filename">named_dump.db</code>. - </p></dd> -<dt><span class="term"><span><strong class="command">memstatistics-file</strong></span></span></dt> -<dd> -<p> - The pathname of the file the server writes memory - usage statistics to on exit. If specified the - statistics will be written to the file on exit. - </p> -<p> - In <acronym class="acronym">BIND</acronym> 9.5 and later this will - default to <code class="filename">named.memstats</code>. - <acronym class="acronym">BIND</acronym> 9.5 will also introduce - <span><strong class="command">memstatistics</strong></span> to control the - writing. - </p> -</dd> -<dt><span class="term"><span><strong class="command">pid-file</strong></span></span></dt> -<dd><p> - The pathname of the file the server writes its process ID - in. If not specified, the default is <code class="filename">/var/run/named.pid</code>. - The pid-file is used by programs that want to send signals to - the running - name server. Specifying <span><strong class="command">pid-file none</strong></span> disables the - use of a PID file — no file will be written and any - existing one will be removed. Note that <span><strong class="command">none</strong></span> - is a keyword, not a filename, and therefore is not enclosed - in - double quotes. - </p></dd> -<dt><span class="term"><span><strong class="command">recursing-file</strong></span></span></dt> -<dd><p> - The pathname of the file the server dumps - the queries that are currently recursing when instructed - to do so with <span><strong class="command">rndc recursing</strong></span>. - If not specified, the default is <code class="filename">named.recursing</code>. - </p></dd> -<dt><span class="term"><span><strong class="command">statistics-file</strong></span></span></dt> -<dd><p> - The pathname of the file the server appends statistics - to when instructed to do so using <span><strong class="command">rndc stats</strong></span>. - If not specified, the default is <code class="filename">named.stats</code> in the - server's current directory. The format of the file is - described - in <a href="Bv9ARM.ch06.html#statsfile" title="The Statistics File">the section called “The Statistics File”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">port</strong></span></span></dt> -<dd><p> - The UDP/TCP port number the server uses for - receiving and sending DNS protocol traffic. - The default is 53. This option is mainly intended for server - testing; - a server using a port other than 53 will not be able to - communicate with - the global DNS. - </p></dd> -<dt><span class="term"><span><strong class="command">random-device</strong></span></span></dt> -<dd><p> - The source of entropy to be used by the server. Entropy is - primarily needed - for DNSSEC operations, such as TKEY transactions and dynamic - update of signed - zones. This options specifies the device (or file) from which - to read - entropy. If this is a file, operations requiring entropy will - fail when the - file has been exhausted. If not specified, the default value - is - <code class="filename">/dev/random</code> - (or equivalent) when present, and none otherwise. The - <span><strong class="command">random-device</strong></span> option takes - effect during - the initial configuration load at server startup time and - is ignored on subsequent reloads. - </p></dd> -<dt><span class="term"><span><strong class="command">preferred-glue</strong></span></span></dt> -<dd><p> - If specified, the listed type (A or AAAA) will be emitted - before other glue - in the additional section of a query response. - The default is not to prefer any type (NONE). - </p></dd> -<dt><span class="term"><span><strong class="command">root-delegation-only</strong></span></span></dt> -<dd> -<p> - Turn on enforcement of delegation-only in TLDs (top level domains) and root zones - with an optional - exclude list. - </p> -<p> - Note some TLDs are not delegation only (e.g. "DE", "LV", "US" - and "MUSEUM"). - </p> -<pre class="programlisting"> -options { - root-delegation-only exclude { "de"; "lv"; "us"; "museum"; }; -}; -</pre> -</dd> -<dt><span class="term"><span><strong class="command">disable-algorithms</strong></span></span></dt> -<dd><p> - Disable the specified DNSSEC algorithms at and below the - specified name. - Multiple <span><strong class="command">disable-algorithms</strong></span> - statements are allowed. - Only the most specific will be applied. - </p></dd> -<dt><span class="term"><span><strong class="command">dnssec-lookaside</strong></span></span></dt> -<dd><p> - When set, <span><strong class="command">dnssec-lookaside</strong></span> - provides the - validator with an alternate method to validate DNSKEY records - at the - top of a zone. When a DNSKEY is at or below a domain - specified by the - deepest <span><strong class="command">dnssec-lookaside</strong></span>, and - the normal dnssec validation - has left the key untrusted, the trust-anchor will be append to - the key - name and a DLV record will be looked up to see if it can - validate the - key. If the DLV record validates a DNSKEY (similarly to the - way a DS - record does) the DNSKEY RRset is deemed to be trusted. - </p></dd> -<dt><span class="term"><span><strong class="command">dnssec-must-be-secure</strong></span></span></dt> -<dd><p> - Specify hierarchies which must be or may not be secure (signed and - validated). - If <strong class="userinput"><code>yes</code></strong>, then named will only accept - answers if they - are secure. - If <strong class="userinput"><code>no</code></strong>, then normal dnssec validation - applies - allowing for insecure answers to be accepted. - The specified domain must be under a <span><strong class="command">trusted-key</strong></span> or - <span><strong class="command">dnssec-lookaside</strong></span> must be - active. - </p></dd> -</dl></div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="boolean_options"></a>Boolean Options</h4></div></div></div> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">auth-nxdomain</strong></span></span></dt> -<dd><p> - If <strong class="userinput"><code>yes</code></strong>, then the <span><strong class="command">AA</strong></span> bit - is always set on NXDOMAIN responses, even if the server is - not actually - authoritative. The default is <strong class="userinput"><code>no</code></strong>; - this is - a change from <acronym class="acronym">BIND</acronym> 8. If you - are using very old DNS software, you - may need to set it to <strong class="userinput"><code>yes</code></strong>. - </p></dd> -<dt><span class="term"><span><strong class="command">deallocate-on-exit</strong></span></span></dt> -<dd><p> - This option was used in <acronym class="acronym">BIND</acronym> - 8 to enable checking - for memory leaks on exit. <acronym class="acronym">BIND</acronym> 9 ignores the option and always performs - the checks. - </p></dd> -<dt><span class="term"><span><strong class="command">dialup</strong></span></span></dt> -<dd> -<p> - If <strong class="userinput"><code>yes</code></strong>, then the - server treats all zones as if they are doing zone transfers - across - a dial-on-demand dialup link, which can be brought up by - traffic - originating from this server. This has different effects - according - to zone type and concentrates the zone maintenance so that - it all - happens in a short interval, once every <span><strong class="command">heartbeat-interval</strong></span> and - hopefully during the one call. It also suppresses some of - the normal - zone maintenance traffic. The default is <strong class="userinput"><code>no</code></strong>. - </p> -<p> - The <span><strong class="command">dialup</strong></span> option - may also be specified in the <span><strong class="command">view</strong></span> and - <span><strong class="command">zone</strong></span> statements, - in which case it overrides the global <span><strong class="command">dialup</strong></span> - option. - </p> -<p> - If the zone is a master zone, then the server will send out a - NOTIFY - request to all the slaves (default). This should trigger the - zone serial - number check in the slave (providing it supports NOTIFY) - allowing the slave - to verify the zone while the connection is active. - The set of servers to which NOTIFY is sent can be controlled - by - <span><strong class="command">notify</strong></span> and <span><strong class="command">also-notify</strong></span>. - </p> -<p> - If the - zone is a slave or stub zone, then the server will suppress - the regular - "zone up to date" (refresh) queries and only perform them - when the - <span><strong class="command">heartbeat-interval</strong></span> expires in - addition to sending - NOTIFY requests. - </p> -<p> - Finer control can be achieved by using - <strong class="userinput"><code>notify</code></strong> which only sends NOTIFY - messages, - <strong class="userinput"><code>notify-passive</code></strong> which sends NOTIFY - messages and - suppresses the normal refresh queries, <strong class="userinput"><code>refresh</code></strong> - which suppresses normal refresh processing and sends refresh - queries - when the <span><strong class="command">heartbeat-interval</strong></span> - expires, and - <strong class="userinput"><code>passive</code></strong> which just disables normal - refresh - processing. - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - dialup mode - </p> - </td> -<td> - <p> - normal refresh - </p> - </td> -<td> - <p> - heart-beat refresh - </p> - </td> -<td> - <p> - heart-beat notify - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">no</strong></span> (default)</p> - </td> -<td> - <p> - yes - </p> - </td> -<td> - <p> - no - </p> - </td> -<td> - <p> - no - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">yes</strong></span></p> - </td> -<td> - <p> - no - </p> - </td> -<td> - <p> - yes - </p> - </td> -<td> - <p> - yes - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">notify</strong></span></p> - </td> -<td> - <p> - yes - </p> - </td> -<td> - <p> - no - </p> - </td> -<td> - <p> - yes - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">refresh</strong></span></p> - </td> -<td> - <p> - no - </p> - </td> -<td> - <p> - yes - </p> - </td> -<td> - <p> - no - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">passive</strong></span></p> - </td> -<td> - <p> - no - </p> - </td> -<td> - <p> - no - </p> - </td> -<td> - <p> - no - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">notify-passive</strong></span></p> - </td> -<td> - <p> - no - </p> - </td> -<td> - <p> - no - </p> - </td> -<td> - <p> - yes - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - Note that normal NOTIFY processing is not affected by - <span><strong class="command">dialup</strong></span>. - </p> -</dd> -<dt><span class="term"><span><strong class="command">fake-iquery</strong></span></span></dt> -<dd><p> - In <acronym class="acronym">BIND</acronym> 8, this option - enabled simulating the obsolete DNS query type - IQUERY. <acronym class="acronym">BIND</acronym> 9 never does - IQUERY simulation. - </p></dd> -<dt><span class="term"><span><strong class="command">fetch-glue</strong></span></span></dt> -<dd><p> - This option is obsolete. - In BIND 8, <strong class="userinput"><code>fetch-glue yes</code></strong> - caused the server to attempt to fetch glue resource records - it - didn't have when constructing the additional - data section of a response. This is now considered a bad - idea - and BIND 9 never does it. - </p></dd> -<dt><span class="term"><span><strong class="command">flush-zones-on-shutdown</strong></span></span></dt> -<dd><p> - When the nameserver exits due receiving SIGTERM, - flush or do not flush any pending zone writes. The default - is - <span><strong class="command">flush-zones-on-shutdown</strong></span> <strong class="userinput"><code>no</code></strong>. - </p></dd> -<dt><span class="term"><span><strong class="command">has-old-clients</strong></span></span></dt> -<dd><p> - This option was incorrectly implemented - in <acronym class="acronym">BIND</acronym> 8, and is ignored by <acronym class="acronym">BIND</acronym> 9. - To achieve the intended effect - of - <span><strong class="command">has-old-clients</strong></span> <strong class="userinput"><code>yes</code></strong>, specify - the two separate options <span><strong class="command">auth-nxdomain</strong></span> <strong class="userinput"><code>yes</code></strong> - and <span><strong class="command">rfc2308-type1</strong></span> <strong class="userinput"><code>no</code></strong> instead. - </p></dd> -<dt><span class="term"><span><strong class="command">host-statistics</strong></span></span></dt> -<dd><p> - In BIND 8, this enables keeping of - statistics for every host that the name server interacts - with. - Not implemented in BIND 9. - </p></dd> -<dt><span class="term"><span><strong class="command">maintain-ixfr-base</strong></span></span></dt> -<dd><p> - <span class="emphasis"><em>This option is obsolete</em></span>. - It was used in <acronym class="acronym">BIND</acronym> 8 to - determine whether a transaction log was - kept for Incremental Zone Transfer. <acronym class="acronym">BIND</acronym> 9 maintains a transaction - log whenever possible. If you need to disable outgoing - incremental zone - transfers, use <span><strong class="command">provide-ixfr</strong></span> <strong class="userinput"><code>no</code></strong>. - </p></dd> -<dt><span class="term"><span><strong class="command">minimal-responses</strong></span></span></dt> -<dd><p> - If <strong class="userinput"><code>yes</code></strong>, then when generating - responses the server will only add records to the authority - and additional data sections when they are required (e.g. - delegations, negative responses). This may improve the - performance of the server. - The default is <strong class="userinput"><code>no</code></strong>. - </p></dd> -<dt><span class="term"><span><strong class="command">multiple-cnames</strong></span></span></dt> -<dd><p> - This option was used in <acronym class="acronym">BIND</acronym> 8 to allow - a domain name to have multiple CNAME records in violation of - the DNS standards. <acronym class="acronym">BIND</acronym> 9.2 onwards - always strictly enforces the CNAME rules both in master - files and dynamic updates. - </p></dd> -<dt><span class="term"><span><strong class="command">notify</strong></span></span></dt> -<dd> -<p> - If <strong class="userinput"><code>yes</code></strong> (the default), - DNS NOTIFY messages are sent when a zone the server is - authoritative for - changes, see <a href="Bv9ARM.ch04.html#notify" title="Notify">the section called “Notify”</a>. The messages are - sent to the - servers listed in the zone's NS records (except the master - server identified - in the SOA MNAME field), and to any servers listed in the - <span><strong class="command">also-notify</strong></span> option. - </p> -<p> - If <strong class="userinput"><code>master-only</code></strong>, notifies are only - sent - for master zones. - If <strong class="userinput"><code>explicit</code></strong>, notifies are sent only - to - servers explicitly listed using <span><strong class="command">also-notify</strong></span>. - If <strong class="userinput"><code>no</code></strong>, no notifies are sent. - </p> -<p> - The <span><strong class="command">notify</strong></span> option may also be - specified in the <span><strong class="command">zone</strong></span> - statement, - in which case it overrides the <span><strong class="command">options notify</strong></span> statement. - It would only be necessary to turn off this option if it - caused slaves - to crash. - </p> -</dd> -<dt><span class="term"><span><strong class="command">recursion</strong></span></span></dt> -<dd><p> - If <strong class="userinput"><code>yes</code></strong>, and a - DNS query requests recursion, then the server will attempt - to do - all the work required to answer the query. If recursion is - off - and the server does not already know the answer, it will - return a - referral response. The default is - <strong class="userinput"><code>yes</code></strong>. - Note that setting <span><strong class="command">recursion no</strong></span> does not prevent - clients from getting data from the server's cache; it only - prevents new data from being cached as an effect of client - queries. - Caching may still occur as an effect the server's internal - operation, such as NOTIFY address lookups. - See also <span><strong class="command">fetch-glue</strong></span> above. - </p></dd> -<dt><span class="term"><span><strong class="command">rfc2308-type1</strong></span></span></dt> -<dd> -<p> - Setting this to <strong class="userinput"><code>yes</code></strong> will - cause the server to send NS records along with the SOA - record for negative - answers. The default is <strong class="userinput"><code>no</code></strong>. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - Not yet implemented in <acronym class="acronym">BIND</acronym> - 9. - </p> -</div> -</dd> -<dt><span class="term"><span><strong class="command">use-id-pool</strong></span></span></dt> -<dd><p> - <span class="emphasis"><em>This option is obsolete</em></span>. - <acronym class="acronym">BIND</acronym> 9 always allocates query - IDs from a pool. - </p></dd> -<dt><span class="term"><span><strong class="command">zone-statistics</strong></span></span></dt> -<dd><p> - If <strong class="userinput"><code>yes</code></strong>, the server will collect - statistical data on all zones (unless specifically turned - off - on a per-zone basis by specifying <span><strong class="command">zone-statistics no</strong></span> - in the <span><strong class="command">zone</strong></span> statement). - These statistics may be accessed - using <span><strong class="command">rndc stats</strong></span>, which will - dump them to the file listed - in the <span><strong class="command">statistics-file</strong></span>. See - also <a href="Bv9ARM.ch06.html#statsfile" title="The Statistics File">the section called “The Statistics File”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">use-ixfr</strong></span></span></dt> -<dd><p> - <span class="emphasis"><em>This option is obsolete</em></span>. - If you need to disable IXFR to a particular server or - servers, see - the information on the <span><strong class="command">provide-ixfr</strong></span> option - in <a href="Bv9ARM.ch06.html#server_statement_definition_and_usage" title="server Statement Definition and - Usage">the section called “<span><strong class="command">server</strong></span> Statement Definition and - Usage”</a>. - See also - <a href="Bv9ARM.ch04.html#incremental_zone_transfers" title="Incremental Zone Transfers (IXFR)">the section called “Incremental Zone Transfers (IXFR)”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">provide-ixfr</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">provide-ixfr</strong></span> in - <a href="Bv9ARM.ch06.html#server_statement_definition_and_usage" title="server Statement Definition and - Usage">the section called “<span><strong class="command">server</strong></span> Statement Definition and - Usage”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">request-ixfr</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">request-ixfr</strong></span> in - <a href="Bv9ARM.ch06.html#server_statement_definition_and_usage" title="server Statement Definition and - Usage">the section called “<span><strong class="command">server</strong></span> Statement Definition and - Usage”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">treat-cr-as-space</strong></span></span></dt> -<dd><p> - This option was used in <acronym class="acronym">BIND</acronym> - 8 to make - the server treat carriage return ("<span><strong class="command">\r</strong></span>") characters the same way - as a space or tab character, - to facilitate loading of zone files on a UNIX system that - were generated - on an NT or DOS machine. In <acronym class="acronym">BIND</acronym> 9, both UNIX "<span><strong class="command">\n</strong></span>" - and NT/DOS "<span><strong class="command">\r\n</strong></span>" newlines - are always accepted, - and the option is ignored. - </p></dd> -<dt> -<span class="term"><span><strong class="command">additional-from-auth</strong></span>, </span><span class="term"><span><strong class="command">additional-from-cache</strong></span></span> -</dt> -<dd> -<p> - These options control the behavior of an authoritative - server when - answering queries which have additional data, or when - following CNAME - and DNAME chains. - </p> -<p> - When both of these options are set to <strong class="userinput"><code>yes</code></strong> - (the default) and a - query is being answered from authoritative data (a zone - configured into the server), the additional data section of - the - reply will be filled in using data from other authoritative - zones - and from the cache. In some situations this is undesirable, - such - as when there is concern over the correctness of the cache, - or - in servers where slave zones may be added and modified by - untrusted third parties. Also, avoiding - the search for this additional data will speed up server - operations - at the possible expense of additional queries to resolve - what would - otherwise be provided in the additional section. - </p> -<p> - For example, if a query asks for an MX record for host <code class="literal">foo.example.com</code>, - and the record found is "<code class="literal">MX 10 mail.example.net</code>", normally the address - records (A and AAAA) for <code class="literal">mail.example.net</code> will be provided as well, - if known, even though they are not in the example.com zone. - Setting these options to <span><strong class="command">no</strong></span> - disables this behavior and makes - the server only search for additional data in the zone it - answers from. - </p> -<p> - These options are intended for use in authoritative-only - servers, or in authoritative-only views. Attempts to set - them to <span><strong class="command">no</strong></span> without also - specifying - <span><strong class="command">recursion no</strong></span> will cause the - server to - ignore the options and log a warning message. - </p> -<p> - Specifying <span><strong class="command">additional-from-cache no</strong></span> actually - disables the use of the cache not only for additional data - lookups - but also when looking up the answer. This is usually the - desired - behavior in an authoritative-only server where the - correctness of - the cached data is an issue. - </p> -<p> - When a name server is non-recursively queried for a name - that is not - below the apex of any served zone, it normally answers with - an - "upwards referral" to the root servers or the servers of - some other - known parent of the query name. Since the data in an - upwards referral - comes from the cache, the server will not be able to provide - upwards - referrals when <span><strong class="command">additional-from-cache no</strong></span> - has been specified. Instead, it will respond to such - queries - with REFUSED. This should not cause any problems since - upwards referrals are not required for the resolution - process. - </p> -</dd> -<dt><span class="term"><span><strong class="command">match-mapped-addresses</strong></span></span></dt> -<dd><p> - If <strong class="userinput"><code>yes</code></strong>, then an - IPv4-mapped IPv6 address will match any address match - list entries that match the corresponding IPv4 address. - Enabling this option is sometimes useful on IPv6-enabled - Linux - systems, to work around a kernel quirk that causes IPv4 - TCP connections such as zone transfers to be accepted - on an IPv6 socket using mapped addresses, causing - address match lists designed for IPv4 to fail to match. - The use of this option for any other purpose is discouraged. - </p></dd> -<dt><span class="term"><span><strong class="command">ixfr-from-differences</strong></span></span></dt> -<dd> -<p> - When <strong class="userinput"><code>yes</code></strong> and the server loads a new version of a master - zone from its zone file or receives a new version of a slave - file by a non-incremental zone transfer, it will compare - the new version to the previous one and calculate a set - of differences. The differences are then logged in the - zone's journal file such that the changes can be transmitted - to downstream slaves as an incremental zone transfer. - </p> -<p> - By allowing incremental zone transfers to be used for - non-dynamic zones, this option saves bandwidth at the - expense of increased CPU and memory consumption at the - master. - In particular, if the new version of a zone is completely - different from the previous one, the set of differences - will be of a size comparable to the combined size of the - old and new zone version, and the server will need to - temporarily allocate memory to hold this complete - difference set. - </p> -<p><span><strong class="command">ixfr-from-differences</strong></span> - also accepts <span><strong class="command">master</strong></span> and - <span><strong class="command">slave</strong></span> at the view and options - levels which causes - <span><strong class="command">ixfr-from-differences</strong></span> to apply to - all <span><strong class="command">master</strong></span> or - <span><strong class="command">slave</strong></span> zones respectively. - </p> -</dd> -<dt><span class="term"><span><strong class="command">multi-master</strong></span></span></dt> -<dd><p> - This should be set when you have multiple masters for a zone - and the - addresses refer to different machines. If <strong class="userinput"><code>yes</code></strong>, named will - not log - when the serial number on the master is less than what named - currently - has. The default is <strong class="userinput"><code>no</code></strong>. - </p></dd> -<dt><span class="term"><span><strong class="command">dnssec-enable</strong></span></span></dt> -<dd><p> - Enable DNSSEC support in named. Unless set to <strong class="userinput"><code>yes</code></strong>, - named behaves as if it does not support DNSSEC. - The default is <strong class="userinput"><code>yes</code></strong>. - </p></dd> -<dt><span class="term"><span><strong class="command">dnssec-validation</strong></span></span></dt> -<dd><p> - Enable DNSSEC validation in named. - Note <span><strong class="command">dnssec-enable</strong></span> also needs to be - set to <strong class="userinput"><code>yes</code></strong> to be effective. - The default is <strong class="userinput"><code>no</code></strong>. - </p></dd> -<dt><span class="term"><span><strong class="command">dnssec-accept-expired</strong></span></span></dt> -<dd><p> - Accept expired signatures when verifying DNSSEC signatures. - The default is <strong class="userinput"><code>no</code></strong>. - Setting this option to "yes" leaves named vulnerable to replay attacks. - </p></dd> -<dt><span class="term"><span><strong class="command">querylog</strong></span></span></dt> -<dd><p> - Specify whether query logging should be started when named - starts. - If <span><strong class="command">querylog</strong></span> is not specified, - then the query logging - is determined by the presence of the logging category <span><strong class="command">queries</strong></span>. - </p></dd> -<dt><span class="term"><span><strong class="command">check-names</strong></span></span></dt> -<dd> -<p> - This option is used to restrict the character set and syntax - of - certain domain names in master files and/or DNS responses - received - from the network. The default varies according to usage - area. For - <span><strong class="command">master</strong></span> zones the default is <span><strong class="command">fail</strong></span>. - For <span><strong class="command">slave</strong></span> zones the default - is <span><strong class="command">warn</strong></span>. - For answers received from the network (<span><strong class="command">response</strong></span>) - the default is <span><strong class="command">ignore</strong></span>. - </p> -<p> - The rules for legal hostnames and mail domains are derived - from RFC 952 and RFC 821 as modified by RFC 1123. - </p> -<p><span><strong class="command">check-names</strong></span> - applies to the owner names of A, AAA and MX records. - It also applies to the domain names in the RDATA of NS, SOA - and MX records. - It also applies to the RDATA of PTR records where the owner - name indicated that it is a reverse lookup of a hostname - (the owner name ends in IN-ADDR.ARPA, IP6.ARPA, or IP6.INT). - </p> -</dd> -<dt><span class="term"><span><strong class="command">check-mx</strong></span></span></dt> -<dd><p> - Check whether the MX record appears to refer to a IP address. - The default is to <span><strong class="command">warn</strong></span>. Other possible - values are <span><strong class="command">fail</strong></span> and - <span><strong class="command">ignore</strong></span>. - </p></dd> -<dt><span class="term"><span><strong class="command">check-wildcard</strong></span></span></dt> -<dd><p> - This option is used to check for non-terminal wildcards. - The use of non-terminal wildcards is almost always as a - result of a failure - to understand the wildcard matching algorithm (RFC 1034). - This option - affects master zones. The default (<span><strong class="command">yes</strong></span>) is to check - for non-terminal wildcards and issue a warning. - </p></dd> -<dt><span class="term"><span><strong class="command">check-integrity</strong></span></span></dt> -<dd><p> - Perform post load zone integrity checks on master - zones. This checks that MX and SRV records refer - to address (A or AAAA) records and that glue - address records exist for delegated zones. For - MX and SRV records only in-zone hostnames are - checked (for out-of-zone hostnames use named-checkzone). - For NS records only names below top of zone are - checked (for out-of-zone names and glue consistency - checks use named-checkzone). The default is - <span><strong class="command">yes</strong></span>. - </p></dd> -<dt><span class="term"><span><strong class="command">check-mx-cname</strong></span></span></dt> -<dd><p> - If <span><strong class="command">check-integrity</strong></span> is set then - fail, warn or ignore MX records that refer - to CNAMES. The default is to <span><strong class="command">warn</strong></span>. - </p></dd> -<dt><span class="term"><span><strong class="command">check-srv-cname</strong></span></span></dt> -<dd><p> - If <span><strong class="command">check-integrity</strong></span> is set then - fail, warn or ignore SRV records that refer - to CNAMES. The default is to <span><strong class="command">warn</strong></span>. - </p></dd> -<dt><span class="term"><span><strong class="command">check-sibling</strong></span></span></dt> -<dd><p> - When performing integrity checks, also check that - sibling glue exists. The default is <span><strong class="command">yes</strong></span>. - </p></dd> -<dt><span class="term"><span><strong class="command">zero-no-soa-ttl</strong></span></span></dt> -<dd><p> - When returning authoritative negative responses to - SOA queries set the TTL of the SOA recored returned in - the authority section to zero. - The default is <span><strong class="command">yes</strong></span>. - </p></dd> -<dt><span class="term"><span><strong class="command">zero-no-soa-ttl-cache</strong></span></span></dt> -<dd><p> - When caching a negative response to a SOA query - set the TTL to zero. - The default is <span><strong class="command">no</strong></span>. - </p></dd> -<dt><span class="term"><span><strong class="command">update-check-ksk</strong></span></span></dt> -<dd><p> - When regenerating the RRSIGs following a UPDATE - request to a secure zone, check the KSK flag on - the DNSKEY RR to determine if this key should be - used to generate the RRSIG. This flag is ignored - if there are not DNSKEY RRs both with and without - a KSK. - The default is <span><strong class="command">yes</strong></span>. - </p></dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2580536"></a>Forwarding</h4></div></div></div> -<p> - The forwarding facility can be used to create a large site-wide - cache on a few servers, reducing traffic over links to external - name servers. It can also be used to allow queries by servers that - do not have direct access to the Internet, but wish to look up - exterior - names anyway. Forwarding occurs only on those queries for which - the server is not authoritative and does not have the answer in - its cache. - </p> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">forward</strong></span></span></dt> -<dd><p> - This option is only meaningful if the - forwarders list is not empty. A value of <code class="varname">first</code>, - the default, causes the server to query the forwarders - first — and - if that doesn't answer the question, the server will then - look for - the answer itself. If <code class="varname">only</code> is - specified, the - server will only query the forwarders. - </p></dd> -<dt><span class="term"><span><strong class="command">forwarders</strong></span></span></dt> -<dd><p> - Specifies the IP addresses to be used - for forwarding. The default is the empty list (no - forwarding). - </p></dd> -</dl></div> -<p> - Forwarding can also be configured on a per-domain basis, allowing - for the global forwarding options to be overridden in a variety - of ways. You can set particular domains to use different - forwarders, - or have a different <span><strong class="command">forward only/first</strong></span> behavior, - or not forward at all, see <a href="Bv9ARM.ch06.html#zone_statement_grammar" title="zone - Statement Grammar">the section called “<span><strong class="command">zone</strong></span> - Statement Grammar”</a>. - </p> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2580595"></a>Dual-stack Servers</h4></div></div></div> -<p> - Dual-stack servers are used as servers of last resort to work - around - problems in reachability due the lack of support for either IPv4 - or IPv6 - on the host machine. - </p> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">dual-stack-servers</strong></span></span></dt> -<dd><p> - Specifies host names or addresses of machines with access to - both IPv4 and IPv6 transports. If a hostname is used, the - server must be able - to resolve the name using only the transport it has. If the - machine is dual - stacked, then the <span><strong class="command">dual-stack-servers</strong></span> have no effect unless - access to a transport has been disabled on the command line - (e.g. <span><strong class="command">named -4</strong></span>). - </p></dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="access_control"></a>Access Control</h4></div></div></div> -<p> - Access to the server can be restricted based on the IP address - of the requesting system. See <a href="Bv9ARM.ch06.html#address_match_lists" title="Address Match Lists">the section called “Address Match Lists”</a> for - details on how to specify IP address lists. - </p> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">allow-notify</strong></span></span></dt> -<dd><p> - Specifies which hosts are allowed to - notify this server, a slave, of zone changes in addition - to the zone masters. - <span><strong class="command">allow-notify</strong></span> may also be - specified in the - <span><strong class="command">zone</strong></span> statement, in which case - it overrides the - <span><strong class="command">options allow-notify</strong></span> - statement. It is only meaningful - for a slave zone. If not specified, the default is to - process notify messages - only from a zone's master. - </p></dd> -<dt><span class="term"><span><strong class="command">allow-query</strong></span></span></dt> -<dd> -<p> - Specifies which hosts are allowed to ask ordinary - DNS questions. <span><strong class="command">allow-query</strong></span> may - also be specified in the <span><strong class="command">zone</strong></span> - statement, in which case it overrides the - <span><strong class="command">options allow-query</strong></span> statement. - If not specified, the default is to allow queries - from all hosts. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - <span><strong class="command">allow-query-cache</strong></span> is now - used to specify access to the cache. - </p> -</div> -</dd> -<dt><span class="term"><span><strong class="command">allow-query-cache</strong></span></span></dt> -<dd><p> - Specifies which hosts are allowed to get answers - from the cache. If <span><strong class="command">allow-query-cache</strong></span> - is not set then <span><strong class="command">allow-recursion</strong></span> - is used if set, otherwise <span><strong class="command">allow-query</strong></span> - is used if set, otherwise the default - (<span><strong class="command">localnets;</strong></span> - <span><strong class="command">localhost;</strong></span>) is used. - </p></dd> -<dt><span class="term"><span><strong class="command">allow-recursion</strong></span></span></dt> -<dd><p> - Specifies which hosts are allowed to make recursive - queries through this server. If - <span><strong class="command">allow-recursion</strong></span> is not set - then <span><strong class="command">allow-query-cache</strong></span> is - used if set, otherwise <span><strong class="command">allow-query</strong></span> - is used if set, otherwise the default - (<span><strong class="command">localnets;</strong></span> - <span><strong class="command">localhost;</strong></span>) is used. - </p></dd> -<dt><span class="term"><span><strong class="command">allow-update</strong></span></span></dt> -<dd><p> - Specifies which hosts are allowed to - submit Dynamic DNS updates for master zones. The default is - to deny - updates from all hosts. Note that allowing updates based - on the requestor's IP address is insecure; see - <a href="Bv9ARM.ch07.html#dynamic_update_security" title="Dynamic Update Security">the section called “Dynamic Update Security”</a> for details. - </p></dd> -<dt><span class="term"><span><strong class="command">allow-update-forwarding</strong></span></span></dt> -<dd> -<p> - Specifies which hosts are allowed to - submit Dynamic DNS updates to slave zones to be forwarded to - the - master. The default is <strong class="userinput"><code>{ none; }</code></strong>, - which - means that no update forwarding will be performed. To - enable - update forwarding, specify - <strong class="userinput"><code>allow-update-forwarding { any; };</code></strong>. - Specifying values other than <strong class="userinput"><code>{ none; }</code></strong> or - <strong class="userinput"><code>{ any; }</code></strong> is usually - counterproductive, since - the responsibility for update access control should rest - with the - master server, not the slaves. - </p> -<p> - Note that enabling the update forwarding feature on a slave - server - may expose master servers relying on insecure IP address - based - access control to attacks; see <a href="Bv9ARM.ch07.html#dynamic_update_security" title="Dynamic Update Security">the section called “Dynamic Update Security”</a> - for more details. - </p> -</dd> -<dt><span class="term"><span><strong class="command">allow-v6-synthesis</strong></span></span></dt> -<dd><p> - This option was introduced for the smooth transition from - AAAA - to A6 and from "nibble labels" to binary labels. - However, since both A6 and binary labels were then - deprecated, - this option was also deprecated. - It is now ignored with some warning messages. - </p></dd> -<dt><span class="term"><span><strong class="command">allow-transfer</strong></span></span></dt> -<dd><p> - Specifies which hosts are allowed to - receive zone transfers from the server. <span><strong class="command">allow-transfer</strong></span> may - also be specified in the <span><strong class="command">zone</strong></span> - statement, in which - case it overrides the <span><strong class="command">options allow-transfer</strong></span> statement. - If not specified, the default is to allow transfers to all - hosts. - </p></dd> -<dt><span class="term"><span><strong class="command">blackhole</strong></span></span></dt> -<dd><p> - Specifies a list of addresses that the - server will not accept queries from or use to resolve a - query. Queries - from these addresses will not be responded to. The default - is <strong class="userinput"><code>none</code></strong>. - </p></dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2581153"></a>Interfaces</h4></div></div></div> -<p> - The interfaces and ports that the server will answer queries - from may be specified using the <span><strong class="command">listen-on</strong></span> option. <span><strong class="command">listen-on</strong></span> takes - an optional port, and an <code class="varname">address_match_list</code>. - The server will listen on all interfaces allowed by the address - match list. If a port is not specified, port 53 will be used. - </p> -<p> - Multiple <span><strong class="command">listen-on</strong></span> statements are - allowed. - For example, - </p> -<pre class="programlisting">listen-on { 5.6.7.8; }; -listen-on port 1234 { !1.2.3.4; 1.2/16; }; -</pre> -<p> - will enable the name server on port 53 for the IP address - 5.6.7.8, and on port 1234 of an address on the machine in net - 1.2 that is not 1.2.3.4. - </p> -<p> - If no <span><strong class="command">listen-on</strong></span> is specified, the - server will listen on port 53 on all interfaces. - </p> -<p> - The <span><strong class="command">listen-on-v6</strong></span> option is used to - specify the interfaces and the ports on which the server will - listen - for incoming queries sent using IPv6. - </p> -<p> - When </p> -<pre class="programlisting">{ any; }</pre> -<p> is - specified - as the <code class="varname">address_match_list</code> for the - <span><strong class="command">listen-on-v6</strong></span> option, - the server does not bind a separate socket to each IPv6 interface - address as it does for IPv4 if the operating system has enough API - support for IPv6 (specifically if it conforms to RFC 3493 and RFC - 3542). - Instead, it listens on the IPv6 wildcard address. - If the system only has incomplete API support for IPv6, however, - the behavior is the same as that for IPv4. - </p> -<p> - A list of particular IPv6 addresses can also be specified, in - which case - the server listens on a separate socket for each specified - address, - regardless of whether the desired API is supported by the system. - </p> -<p> - Multiple <span><strong class="command">listen-on-v6</strong></span> options can - be used. - For example, - </p> -<pre class="programlisting">listen-on-v6 { any; }; -listen-on-v6 port 1234 { !2001:db8::/32; any; }; -</pre> -<p> - will enable the name server on port 53 for any IPv6 addresses - (with a single wildcard socket), - and on port 1234 of IPv6 addresses that is not in the prefix - 2001:db8::/32 (with separate sockets for each matched address.) - </p> -<p> - To make the server not listen on any IPv6 address, use - </p> -<pre class="programlisting">listen-on-v6 { none; }; -</pre> -<p> - If no <span><strong class="command">listen-on-v6</strong></span> option is - specified, - the server will not listen on any IPv6 address. - </p> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2581241"></a>Query Address</h4></div></div></div> -<p> - If the server doesn't know the answer to a question, it will - query other name servers. <span><strong class="command">query-source</strong></span> specifies - the address and port used for such queries. For queries sent over - IPv6, there is a separate <span><strong class="command">query-source-v6</strong></span> option. - If <span><strong class="command">address</strong></span> is <span><strong class="command">*</strong></span> (asterisk) or is omitted, - a wildcard IP address (<span><strong class="command">INADDR_ANY</strong></span>) - will be used. - If <span><strong class="command">port</strong></span> is <span><strong class="command">*</strong></span> or is omitted, - a random unprivileged port will be used. The <span><strong class="command">avoid-v4-udp-ports</strong></span> - and <span><strong class="command">avoid-v6-udp-ports</strong></span> options can be used - to prevent named - from selecting certain ports. The defaults are: - </p> -<pre class="programlisting">query-source address * port *; -query-source-v6 address * port *; -</pre> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - The address specified in the <span><strong class="command">query-source</strong></span> option - is used for both UDP and TCP queries, but the port applies only - to - UDP queries. TCP queries always use a random - unprivileged port. - </p> -</div> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - Solaris 2.5.1 and earlier does not support setting the source - address for TCP sockets. - </p> -</div> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - See also <span><strong class="command">transfer-source</strong></span> and - <span><strong class="command">notify-source</strong></span>. - </p> -</div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="zone_transfers"></a>Zone Transfers</h4></div></div></div> -<p> - <acronym class="acronym">BIND</acronym> has mechanisms in place to - facilitate zone transfers - and set limits on the amount of load that transfers place on the - system. The following options apply to zone transfers. - </p> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">also-notify</strong></span></span></dt> -<dd><p> - Defines a global list of IP addresses of name servers - that are also sent NOTIFY messages whenever a fresh copy of - the - zone is loaded, in addition to the servers listed in the - zone's NS records. - This helps to ensure that copies of the zones will - quickly converge on stealth servers. If an <span><strong class="command">also-notify</strong></span> list - is given in a <span><strong class="command">zone</strong></span> statement, - it will override - the <span><strong class="command">options also-notify</strong></span> - statement. When a <span><strong class="command">zone notify</strong></span> - statement - is set to <span><strong class="command">no</strong></span>, the IP - addresses in the global <span><strong class="command">also-notify</strong></span> list will - not be sent NOTIFY messages for that zone. The default is - the empty - list (no global notification list). - </p></dd> -<dt><span class="term"><span><strong class="command">max-transfer-time-in</strong></span></span></dt> -<dd><p> - Inbound zone transfers running longer than - this many minutes will be terminated. The default is 120 - minutes - (2 hours). The maximum value is 28 days (40320 minutes). - </p></dd> -<dt><span class="term"><span><strong class="command">max-transfer-idle-in</strong></span></span></dt> -<dd><p> - Inbound zone transfers making no progress - in this many minutes will be terminated. The default is 60 - minutes - (1 hour). The maximum value is 28 days (40320 minutes). - </p></dd> -<dt><span class="term"><span><strong class="command">max-transfer-time-out</strong></span></span></dt> -<dd><p> - Outbound zone transfers running longer than - this many minutes will be terminated. The default is 120 - minutes - (2 hours). The maximum value is 28 days (40320 minutes). - </p></dd> -<dt><span class="term"><span><strong class="command">max-transfer-idle-out</strong></span></span></dt> -<dd><p> - Outbound zone transfers making no progress - in this many minutes will be terminated. The default is 60 - minutes (1 - hour). The maximum value is 28 days (40320 minutes). - </p></dd> -<dt><span class="term"><span><strong class="command">serial-query-rate</strong></span></span></dt> -<dd><p> - Slave servers will periodically query master servers - to find out if zone serial numbers have changed. Each such - query uses - a minute amount of the slave server's network bandwidth. To - limit the - amount of bandwidth used, BIND 9 limits the rate at which - queries are - sent. The value of the <span><strong class="command">serial-query-rate</strong></span> option, - an integer, is the maximum number of queries sent per - second. - The default is 20. - </p></dd> -<dt><span class="term"><span><strong class="command">serial-queries</strong></span></span></dt> -<dd><p> - In BIND 8, the <span><strong class="command">serial-queries</strong></span> - option - set the maximum number of concurrent serial number queries - allowed to be outstanding at any given time. - BIND 9 does not limit the number of outstanding - serial queries and ignores the <span><strong class="command">serial-queries</strong></span> option. - Instead, it limits the rate at which the queries are sent - as defined using the <span><strong class="command">serial-query-rate</strong></span> option. - </p></dd> -<dt><span class="term"><span><strong class="command">transfer-format</strong></span></span></dt> -<dd><p> - Zone transfers can be sent using two different formats, - <span><strong class="command">one-answer</strong></span> and - <span><strong class="command">many-answers</strong></span>. - The <span><strong class="command">transfer-format</strong></span> option is used - on the master server to determine which format it sends. - <span><strong class="command">one-answer</strong></span> uses one DNS message per - resource record transferred. - <span><strong class="command">many-answers</strong></span> packs as many resource - records as possible into a message. - <span><strong class="command">many-answers</strong></span> is more efficient, but is - only supported by relatively new slave servers, - such as <acronym class="acronym">BIND</acronym> 9, <acronym class="acronym">BIND</acronym> - 8.x and <acronym class="acronym">BIND</acronym> 4.9.5 onwards. - The <span><strong class="command">many-answers</strong></span> format is also supported by - recent Microsoft Windows nameservers. - The default is <span><strong class="command">many-answers</strong></span>. - <span><strong class="command">transfer-format</strong></span> may be overridden on a - per-server basis by using the <span><strong class="command">server</strong></span> - statement. - </p></dd> -<dt><span class="term"><span><strong class="command">transfers-in</strong></span></span></dt> -<dd><p> - The maximum number of inbound zone transfers - that can be running concurrently. The default value is <code class="literal">10</code>. - Increasing <span><strong class="command">transfers-in</strong></span> may - speed up the convergence - of slave zones, but it also may increase the load on the - local system. - </p></dd> -<dt><span class="term"><span><strong class="command">transfers-out</strong></span></span></dt> -<dd><p> - The maximum number of outbound zone transfers - that can be running concurrently. Zone transfer requests in - excess - of the limit will be refused. The default value is <code class="literal">10</code>. - </p></dd> -<dt><span class="term"><span><strong class="command">transfers-per-ns</strong></span></span></dt> -<dd><p> - The maximum number of inbound zone transfers - that can be concurrently transferring from a given remote - name server. - The default value is <code class="literal">2</code>. - Increasing <span><strong class="command">transfers-per-ns</strong></span> - may - speed up the convergence of slave zones, but it also may - increase - the load on the remote name server. <span><strong class="command">transfers-per-ns</strong></span> may - be overridden on a per-server basis by using the <span><strong class="command">transfers</strong></span> phrase - of the <span><strong class="command">server</strong></span> statement. - </p></dd> -<dt><span class="term"><span><strong class="command">transfer-source</strong></span></span></dt> -<dd> -<p><span><strong class="command">transfer-source</strong></span> - determines which local address will be bound to IPv4 - TCP connections used to fetch zones transferred - inbound by the server. It also determines the - source IPv4 address, and optionally the UDP port, - used for the refresh queries and forwarded dynamic - updates. If not set, it defaults to a system - controlled value which will usually be the address - of the interface "closest to" the remote end. This - address must appear in the remote end's - <span><strong class="command">allow-transfer</strong></span> option for the - zone being transferred, if one is specified. This - statement sets the - <span><strong class="command">transfer-source</strong></span> for all zones, - but can be overridden on a per-view or per-zone - basis by including a - <span><strong class="command">transfer-source</strong></span> statement within - the <span><strong class="command">view</strong></span> or - <span><strong class="command">zone</strong></span> block in the configuration - file. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - Solaris 2.5.1 and earlier does not support setting the - source address for TCP sockets. - </p> -</div> -</dd> -<dt><span class="term"><span><strong class="command">transfer-source-v6</strong></span></span></dt> -<dd><p> - The same as <span><strong class="command">transfer-source</strong></span>, - except zone transfers are performed using IPv6. - </p></dd> -<dt><span class="term"><span><strong class="command">alt-transfer-source</strong></span></span></dt> -<dd> -<p> - An alternate transfer source if the one listed in - <span><strong class="command">transfer-source</strong></span> fails and - <span><strong class="command">use-alt-transfer-source</strong></span> is - set. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> - If you do not wish the alternate transfer source - to be used, you should set - <span><strong class="command">use-alt-transfer-source</strong></span> - appropriately and you should not depend upon - getting a answer back to the first refresh - query. - </div> -</dd> -<dt><span class="term"><span><strong class="command">alt-transfer-source-v6</strong></span></span></dt> -<dd><p> - An alternate transfer source if the one listed in - <span><strong class="command">transfer-source-v6</strong></span> fails and - <span><strong class="command">use-alt-transfer-source</strong></span> is - set. - </p></dd> -<dt><span class="term"><span><strong class="command">use-alt-transfer-source</strong></span></span></dt> -<dd><p> - Use the alternate transfer sources or not. If views are - specified this defaults to <span><strong class="command">no</strong></span> - otherwise it defaults to - <span><strong class="command">yes</strong></span> (for BIND 8 - compatibility). - </p></dd> -<dt><span class="term"><span><strong class="command">notify-source</strong></span></span></dt> -<dd> -<p><span><strong class="command">notify-source</strong></span> - determines which local source address, and - optionally UDP port, will be used to send NOTIFY - messages. This address must appear in the slave - server's <span><strong class="command">masters</strong></span> zone clause or - in an <span><strong class="command">allow-notify</strong></span> clause. This - statement sets the <span><strong class="command">notify-source</strong></span> - for all zones, but can be overridden on a per-zone or - per-view basis by including a - <span><strong class="command">notify-source</strong></span> statement within - the <span><strong class="command">zone</strong></span> or - <span><strong class="command">view</strong></span> block in the configuration - file. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - Solaris 2.5.1 and earlier does not support setting the - source address for TCP sockets. - </p> -</div> -</dd> -<dt><span class="term"><span><strong class="command">notify-source-v6</strong></span></span></dt> -<dd><p> - Like <span><strong class="command">notify-source</strong></span>, - but applies to notify messages sent to IPv6 addresses. - </p></dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2581988"></a>Bad UDP Port Lists</h4></div></div></div> -<p><span><strong class="command">avoid-v4-udp-ports</strong></span> - and <span><strong class="command">avoid-v6-udp-ports</strong></span> specify a list - of IPv4 and IPv6 UDP ports that will not be used as system - assigned source ports for UDP sockets. These lists - prevent named from choosing as its random source port a - port that is blocked by your firewall. If a query went - out with such a source port, the answer would not get by - the firewall and the name server would have to query - again. - </p> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2582003"></a>Operating System Resource Limits</h4></div></div></div> -<p> - The server's usage of many system resources can be limited. - Scaled values are allowed when specifying resource limits. For - example, <span><strong class="command">1G</strong></span> can be used instead of - <span><strong class="command">1073741824</strong></span> to specify a limit of - one - gigabyte. <span><strong class="command">unlimited</strong></span> requests - unlimited use, or the - maximum available amount. <span><strong class="command">default</strong></span> - uses the limit - that was in force when the server was started. See the description - of <span><strong class="command">size_spec</strong></span> in <a href="Bv9ARM.ch06.html#configuration_file_elements" title="Configuration File Elements">the section called “Configuration File Elements”</a>. - </p> -<p> - The following options set operating system resource limits for - the name server process. Some operating systems don't support - some or - any of the limits. On such systems, a warning will be issued if - the - unsupported limit is used. - </p> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">coresize</strong></span></span></dt> -<dd><p> - The maximum size of a core dump. The default - is <code class="literal">default</code>. - </p></dd> -<dt><span class="term"><span><strong class="command">datasize</strong></span></span></dt> -<dd><p> - The maximum amount of data memory the server - may use. The default is <code class="literal">default</code>. - This is a hard limit on server memory usage. - If the server attempts to allocate memory in excess of this - limit, the allocation will fail, which may in turn leave - the server unable to perform DNS service. Therefore, - this option is rarely useful as a way of limiting the - amount of memory used by the server, but it can be used - to raise an operating system data size limit that is - too small by default. If you wish to limit the amount - of memory used by the server, use the - <span><strong class="command">max-cache-size</strong></span> and - <span><strong class="command">recursive-clients</strong></span> - options instead. - </p></dd> -<dt><span class="term"><span><strong class="command">files</strong></span></span></dt> -<dd><p> - The maximum number of files the server - may have open concurrently. The default is <code class="literal">unlimited</code>. - </p></dd> -<dt><span class="term"><span><strong class="command">stacksize</strong></span></span></dt> -<dd><p> - The maximum amount of stack memory the server - may use. The default is <code class="literal">default</code>. - </p></dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2582186"></a>Server Resource Limits</h4></div></div></div> -<p> - The following options set limits on the server's - resource consumption that are enforced internally by the - server rather than the operating system. - </p> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">max-ixfr-log-size</strong></span></span></dt> -<dd><p> - This option is obsolete; it is accepted - and ignored for BIND 8 compatibility. The option - <span><strong class="command">max-journal-size</strong></span> performs a - similar function in BIND 9. - </p></dd> -<dt><span class="term"><span><strong class="command">max-journal-size</strong></span></span></dt> -<dd><p> - Sets a maximum size for each journal file - (see <a href="Bv9ARM.ch04.html#journal" title="The journal file">the section called “The journal file”</a>). When the journal file - approaches - the specified size, some of the oldest transactions in the - journal - will be automatically removed. The default is - <code class="literal">unlimited</code>. - </p></dd> -<dt><span class="term"><span><strong class="command">host-statistics-max</strong></span></span></dt> -<dd><p> - In BIND 8, specifies the maximum number of host statistics - entries to be kept. - Not implemented in BIND 9. - </p></dd> -<dt><span class="term"><span><strong class="command">recursive-clients</strong></span></span></dt> -<dd><p> - The maximum number of simultaneous recursive lookups - the server will perform on behalf of clients. The default - is - <code class="literal">1000</code>. Because each recursing - client uses a fair - bit of memory, on the order of 20 kilobytes, the value of - the - <span><strong class="command">recursive-clients</strong></span> option may - have to be decreased - on hosts with limited memory. - </p></dd> -<dt><span class="term"><span><strong class="command">tcp-clients</strong></span></span></dt> -<dd><p> - The maximum number of simultaneous client TCP - connections that the server will accept. - The default is <code class="literal">100</code>. - </p></dd> -<dt><span class="term"><span><strong class="command">max-cache-size</strong></span></span></dt> -<dd><p> - The maximum amount of memory to use for the - server's cache, in bytes. When the amount of data in the - cache - reaches this limit, the server will cause records to expire - prematurely so that the limit is not exceeded. In a server - with - multiple views, the limit applies separately to the cache of - each - view. The default is <code class="literal">unlimited</code>, meaning that - records are purged from the cache only when their TTLs - expire. - </p></dd> -<dt><span class="term"><span><strong class="command">tcp-listen-queue</strong></span></span></dt> -<dd><p> - The listen queue depth. The default and minimum is 3. - If the kernel supports the accept filter "dataready" this - also controls how - many TCP connections that will be queued in kernel space - waiting for - some data before being passed to accept. Values less than 3 - will be - silently raised. - </p></dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2582320"></a>Periodic Task Intervals</h4></div></div></div> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">cleaning-interval</strong></span></span></dt> -<dd><p> - The server will remove expired resource records - from the cache every <span><strong class="command">cleaning-interval</strong></span> minutes. - The default is 60 minutes. The maximum value is 28 days - (40320 minutes). - If set to 0, no periodic cleaning will occur. - </p></dd> -<dt><span class="term"><span><strong class="command">heartbeat-interval</strong></span></span></dt> -<dd><p> - The server will perform zone maintenance tasks - for all zones marked as <span><strong class="command">dialup</strong></span> whenever this - interval expires. The default is 60 minutes. Reasonable - values are up - to 1 day (1440 minutes). The maximum value is 28 days - (40320 minutes). - If set to 0, no zone maintenance for these zones will occur. - </p></dd> -<dt><span class="term"><span><strong class="command">interface-interval</strong></span></span></dt> -<dd><p> - The server will scan the network interface list - every <span><strong class="command">interface-interval</strong></span> - minutes. The default - is 60 minutes. The maximum value is 28 days (40320 minutes). - If set to 0, interface scanning will only occur when - the configuration file is loaded. After the scan, the - server will - begin listening for queries on any newly discovered - interfaces (provided they are allowed by the - <span><strong class="command">listen-on</strong></span> configuration), and - will - stop listening on interfaces that have gone away. - </p></dd> -<dt><span class="term"><span><strong class="command">statistics-interval</strong></span></span></dt> -<dd> -<p> - Name server statistics will be logged - every <span><strong class="command">statistics-interval</strong></span> - minutes. The default is - 60. The maximum value is 28 days (40320 minutes). - If set to 0, no statistics will be logged. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - Not yet implemented in - <acronym class="acronym">BIND</acronym> 9. - </p> -</div> -</dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="topology"></a>Topology</h4></div></div></div> -<p> - All other things being equal, when the server chooses a name - server - to query from a list of name servers, it prefers the one that is - topologically closest to itself. The <span><strong class="command">topology</strong></span> statement - takes an <span><strong class="command">address_match_list</strong></span> and - interprets it - in a special way. Each top-level list element is assigned a - distance. - Non-negated elements get a distance based on their position in the - list, where the closer the match is to the start of the list, the - shorter the distance is between it and the server. A negated match - will be assigned the maximum distance from the server. If there - is no match, the address will get a distance which is further than - any non-negated list element, and closer than any negated element. - For example, - </p> -<pre class="programlisting">topology { - 10/8; - !1.2.3/24; - { 1.2/16; 3/8; }; -};</pre> -<p> - will prefer servers on network 10 the most, followed by hosts - on network 1.2.0.0 (netmask 255.255.0.0) and network 3, with the - exception of hosts on network 1.2.3 (netmask 255.255.255.0), which - is preferred least of all. - </p> -<p> - The default topology is - </p> -<pre class="programlisting"> topology { localhost; localnets; }; -</pre> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - The <span><strong class="command">topology</strong></span> option - is not implemented in <acronym class="acronym">BIND</acronym> 9. - </p> -</div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="the_sortlist_statement"></a>The <span><strong class="command">sortlist</strong></span> Statement</h4></div></div></div> -<p> - The response to a DNS query may consist of multiple resource - records (RRs) forming a resource records set (RRset). - The name server will normally return the - RRs within the RRset in an indeterminate order - (but see the <span><strong class="command">rrset-order</strong></span> - statement in <a href="Bv9ARM.ch06.html#rrset_ordering" title="RRset Ordering">the section called “RRset Ordering”</a>). - The client resolver code should rearrange the RRs as appropriate, - that is, using any addresses on the local net in preference to - other addresses. - However, not all resolvers can do this or are correctly - configured. - When a client is using a local server, the sorting can be performed - in the server, based on the client's address. This only requires - configuring the name servers, not all the clients. - </p> -<p> - The <span><strong class="command">sortlist</strong></span> statement (see below) - takes - an <span><strong class="command">address_match_list</strong></span> and - interprets it even - more specifically than the <span><strong class="command">topology</strong></span> - statement - does (<a href="Bv9ARM.ch06.html#topology" title="Topology">the section called “Topology”</a>). - Each top level statement in the <span><strong class="command">sortlist</strong></span> must - itself be an explicit <span><strong class="command">address_match_list</strong></span> with - one or two elements. The first element (which may be an IP - address, - an IP prefix, an ACL name or a nested <span><strong class="command">address_match_list</strong></span>) - of each top level list is checked against the source address of - the query until a match is found. - </p> -<p> - Once the source address of the query has been matched, if - the top level statement contains only one element, the actual - primitive - element that matched the source address is used to select the - address - in the response to move to the beginning of the response. If the - statement is a list of two elements, then the second element is - treated the same as the <span><strong class="command">address_match_list</strong></span> in - a <span><strong class="command">topology</strong></span> statement. Each top - level element - is assigned a distance and the address in the response with the - minimum - distance is moved to the beginning of the response. - </p> -<p> - In the following example, any queries received from any of - the addresses of the host itself will get responses preferring - addresses - on any of the locally connected networks. Next most preferred are - addresses - on the 192.168.1/24 network, and after that either the - 192.168.2/24 - or - 192.168.3/24 network with no preference shown between these two - networks. Queries received from a host on the 192.168.1/24 network - will prefer other addresses on that network to the 192.168.2/24 - and - 192.168.3/24 networks. Queries received from a host on the - 192.168.4/24 - or the 192.168.5/24 network will only prefer other addresses on - their directly connected networks. - </p> -<pre class="programlisting">sortlist { - { localhost; // IF the local host - { localnets; // THEN first fit on the - 192.168.1/24; // following nets - { 192.168.2/24; 192.168.3/24; }; }; }; - { 192.168.1/24; // IF on class C 192.168.1 - { 192.168.1/24; // THEN use .1, or .2 or .3 - { 192.168.2/24; 192.168.3/24; }; }; }; - { 192.168.2/24; // IF on class C 192.168.2 - { 192.168.2/24; // THEN use .2, or .1 or .3 - { 192.168.1/24; 192.168.3/24; }; }; }; - { 192.168.3/24; // IF on class C 192.168.3 - { 192.168.3/24; // THEN use .3, or .1 or .2 - { 192.168.1/24; 192.168.2/24; }; }; }; - { { 192.168.4/24; 192.168.5/24; }; // if .4 or .5, prefer that net - }; -};</pre> -<p> - The following example will give reasonable behavior for the - local host and hosts on directly connected networks. It is similar - to the behavior of the address sort in <acronym class="acronym">BIND</acronym> 4.9.x. Responses sent - to queries from the local host will favor any of the directly - connected - networks. Responses sent to queries from any other hosts on a - directly - connected network will prefer addresses on that same network. - Responses - to other queries will not be sorted. - </p> -<pre class="programlisting">sortlist { - { localhost; localnets; }; - { localnets; }; -}; -</pre> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="rrset_ordering"></a>RRset Ordering</h4></div></div></div> -<p> - When multiple records are returned in an answer it may be - useful to configure the order of the records placed into the - response. - The <span><strong class="command">rrset-order</strong></span> statement permits - configuration - of the ordering of the records in a multiple record response. - See also the <span><strong class="command">sortlist</strong></span> statement, - <a href="Bv9ARM.ch06.html#the_sortlist_statement" title="The sortlist Statement">the section called “The <span><strong class="command">sortlist</strong></span> Statement”</a>. - </p> -<p> - An <span><strong class="command">order_spec</strong></span> is defined as - follows: - </p> -<p> - [<span class="optional">class <em class="replaceable"><code>class_name</code></em></span>] - [<span class="optional">type <em class="replaceable"><code>type_name</code></em></span>] - [<span class="optional">name <em class="replaceable"><code>"domain_name"</code></em></span>] - order <em class="replaceable"><code>ordering</code></em> - </p> -<p> - If no class is specified, the default is <span><strong class="command">ANY</strong></span>. - If no type is specified, the default is <span><strong class="command">ANY</strong></span>. - If no name is specified, the default is "<span><strong class="command">*</strong></span>" (asterisk). - </p> -<p> - The legal values for <span><strong class="command">ordering</strong></span> are: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p><span><strong class="command">fixed</strong></span></p> - </td> -<td> - <p> - Records are returned in the order they - are defined in the zone file. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">random</strong></span></p> - </td> -<td> - <p> - Records are returned in some random order. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">cyclic</strong></span></p> - </td> -<td> - <p> - Records are returned in a round-robin - order. - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - For example: - </p> -<pre class="programlisting">rrset-order { - class IN type A name "host.example.com" order random; - order cyclic; -}; -</pre> -<p> - will cause any responses for type A records in class IN that - have "<code class="literal">host.example.com</code>" as a - suffix, to always be returned - in random order. All other records are returned in cyclic order. - </p> -<p> - If multiple <span><strong class="command">rrset-order</strong></span> statements - appear, - they are not combined — the last one applies. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - The <span><strong class="command">rrset-order</strong></span> statement - is not yet fully implemented in <acronym class="acronym">BIND</acronym> 9. - BIND 9 currently does not fully support "fixed" ordering. - </p> -</div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="tuning"></a>Tuning</h4></div></div></div> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">lame-ttl</strong></span></span></dt> -<dd><p> - Sets the number of seconds to cache a - lame server indication. 0 disables caching. (This is - <span class="bold"><strong>NOT</strong></span> recommended.) - The default is <code class="literal">600</code> (10 minutes) and the - maximum value is - <code class="literal">1800</code> (30 minutes). - </p></dd> -<dt><span class="term"><span><strong class="command">max-ncache-ttl</strong></span></span></dt> -<dd><p> - To reduce network traffic and increase performance, - the server stores negative answers. <span><strong class="command">max-ncache-ttl</strong></span> is - used to set a maximum retention time for these answers in - the server - in seconds. The default - <span><strong class="command">max-ncache-ttl</strong></span> is <code class="literal">10800</code> seconds (3 hours). - <span><strong class="command">max-ncache-ttl</strong></span> cannot exceed - 7 days and will - be silently truncated to 7 days if set to a greater value. - </p></dd> -<dt><span class="term"><span><strong class="command">max-cache-ttl</strong></span></span></dt> -<dd><p> - Sets the maximum time for which the server will - cache ordinary (positive) answers. The default is - one week (7 days). - </p></dd> -<dt><span class="term"><span><strong class="command">min-roots</strong></span></span></dt> -<dd> -<p> - The minimum number of root servers that - is required for a request for the root servers to be - accepted. The default - is <strong class="userinput"><code>2</code></strong>. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - Not implemented in <acronym class="acronym">BIND</acronym> 9. - </p> -</div> -</dd> -<dt><span class="term"><span><strong class="command">sig-validity-interval</strong></span></span></dt> -<dd><p> - Specifies the number of days into the - future when DNSSEC signatures automatically generated as a - result - of dynamic updates (<a href="Bv9ARM.ch04.html#dynamic_update" title="Dynamic Update">the section called “Dynamic Update”</a>) - will expire. The default is <code class="literal">30</code> days. - The maximum value is 10 years (3660 days). The signature - inception time is unconditionally set to one hour before the - current time - to allow for a limited amount of clock skew. - </p></dd> -<dt> -<span class="term"><span><strong class="command">min-refresh-time</strong></span>, </span><span class="term"><span><strong class="command">max-refresh-time</strong></span>, </span><span class="term"><span><strong class="command">min-retry-time</strong></span>, </span><span class="term"><span><strong class="command">max-retry-time</strong></span></span> -</dt> -<dd> -<p> - These options control the server's behavior on refreshing a - zone - (querying for SOA changes) or retrying failed transfers. - Usually the SOA values for the zone are used, but these - values - are set by the master, giving slave server administrators - little - control over their contents. - </p> -<p> - These options allow the administrator to set a minimum and - maximum - refresh and retry time either per-zone, per-view, or - globally. - These options are valid for slave and stub zones, - and clamp the SOA refresh and retry times to the specified - values. - </p> -</dd> -<dt><span class="term"><span><strong class="command">edns-udp-size</strong></span></span></dt> -<dd><p> - Sets the advertised EDNS UDP buffer size in bytes. Valid - values are 512 to 4096 (values outside this range - will be silently adjusted). The default value is - 4096. The usual reason for setting edns-udp-size to - a non-default value is to get UDP answers to pass - through broken firewalls that block fragmented - packets and/or block UDP packets that are greater - than 512 bytes. - </p></dd> -<dt><span class="term"><span><strong class="command">max-udp-size</strong></span></span></dt> -<dd><p> - Sets the maximum EDNS UDP message size named will - send in bytes. Valid values are 512 to 4096 (values outside - this range will be silently adjusted). The default - value is 4096. The usual reason for setting - max-udp-size to a non-default value is to get UDP - answers to pass through broken firewalls that - block fragmented packets and/or block UDP packets - that are greater than 512 bytes. - This is independent of the advertised receive - buffer (<span><strong class="command">edns-udp-size</strong></span>). - </p></dd> -<dt><span class="term"><span><strong class="command">masterfile-format</strong></span></span></dt> -<dd><p>Specifies - the file format of zone files (see - <a href="Bv9ARM.ch06.html#zonefile_format" title="Additional File Formats">the section called “Additional File Formats”</a>). - The default value is <code class="constant">text</code>, which is the - standard textual representation. Files in other formats - than <code class="constant">text</code> are typically expected - to be generated by the <span><strong class="command">named-compilezone</strong></span> tool. - Note that when a zone file in a different format than - <code class="constant">text</code> is loaded, <span><strong class="command">named</strong></span> - may omit some of the checks which would be performed for a - file in the <code class="constant">text</code> format. In particular, - <span><strong class="command">check-names</strong></span> checks do not apply - for the <code class="constant">raw</code> format. This means - a zone file in the <code class="constant">raw</code> format - must be generated with the same check level as that - specified in the <span><strong class="command">named</strong></span> configuration - file. This statement sets the - <span><strong class="command">masterfile-format</strong></span> for all zones, - but can be overridden on a per-zone or per-view basis - by including a <span><strong class="command">masterfile-format</strong></span> - statement within the <span><strong class="command">zone</strong></span> or - <span><strong class="command">view</strong></span> block in the configuration - file. - </p></dd> -<dt> -<span class="term"><span><strong class="command">clients-per-query</strong></span>, </span><span class="term"><span><strong class="command">max-clients-per-query</strong></span></span> -</dt> -<dd> -<p>These set the - initial value (minimum) and maximum number of recursive - simultanious clients for any given query - (<qname,qtype,qclass>) that the server will accept - before dropping additional clients. named will attempt to - self tune this value and changes will be logged. The - default values are 10 and 100. - </p> -<p> - This value should reflect how many queries come in for - a given name in the time it takes to resolve that name. - If the number of queries exceed this value, named will - assume that it is dealing with a non-responsive zone - and will drop additional queries. If it gets a response - after dropping queries, it will raise the estimate. The - estimate will then be lowered in 20 minutes if it has - remained unchanged. - </p> -<p> - If <span><strong class="command">clients-per-query</strong></span> is set to zero, - then there is no limit on the number of clients per query - and no queries will be dropped. - </p> -<p> - If <span><strong class="command">max-clients-per-query</strong></span> is set to zero, - then there is no upper bound other than imposed by - <span><strong class="command">recursive-clients</strong></span>. - </p> -</dd> -<dt><span class="term"><span><strong class="command">notify-delay</strong></span></span></dt> -<dd><p> - The delay, in seconds, between sending sets of notify - messages for a zone. The default is zero. - </p></dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="builtin"></a>Built-in server information zones</h4></div></div></div> -<p> - The server provides some helpful diagnostic information - through a number of built-in zones under the - pseudo-top-level-domain <code class="literal">bind</code> in the - <span><strong class="command">CHAOS</strong></span> class. These zones are part - of a - built-in view (see <a href="Bv9ARM.ch06.html#view_statement_grammar" title="view Statement Grammar">the section called “<span><strong class="command">view</strong></span> Statement Grammar”</a>) of - class - <span><strong class="command">CHAOS</strong></span> which is separate from the - default view of - class <span><strong class="command">IN</strong></span>; therefore, any global - server options - such as <span><strong class="command">allow-query</strong></span> do not apply - the these zones. - If you feel the need to disable these zones, use the options - below, or hide the built-in <span><strong class="command">CHAOS</strong></span> - view by - defining an explicit view of class <span><strong class="command">CHAOS</strong></span> - that matches all clients. - </p> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">version</strong></span></span></dt> -<dd><p> - The version the server should report - via a query of the name <code class="literal">version.bind</code> - with type <span><strong class="command">TXT</strong></span>, class <span><strong class="command">CHAOS</strong></span>. - The default is the real version number of this server. - Specifying <span><strong class="command">version none</strong></span> - disables processing of the queries. - </p></dd> -<dt><span class="term"><span><strong class="command">hostname</strong></span></span></dt> -<dd><p> - The hostname the server should report via a query of - the name <code class="filename">hostname.bind</code> - with type <span><strong class="command">TXT</strong></span>, class <span><strong class="command">CHAOS</strong></span>. - This defaults to the hostname of the machine hosting the - name server as - found by the gethostname() function. The primary purpose of such queries - is to - identify which of a group of anycast servers is actually - answering your queries. Specifying <span><strong class="command">hostname none;</strong></span> - disables processing of the queries. - </p></dd> -<dt><span class="term"><span><strong class="command">server-id</strong></span></span></dt> -<dd><p> - The ID of the server should report via a query of - the name <code class="filename">ID.SERVER</code> - with type <span><strong class="command">TXT</strong></span>, class <span><strong class="command">CHAOS</strong></span>. - The primary purpose of such queries is to - identify which of a group of anycast servers is actually - answering your queries. Specifying <span><strong class="command">server-id none;</strong></span> - disables processing of the queries. - Specifying <span><strong class="command">server-id hostname;</strong></span> will cause named to - use the hostname as found by the gethostname() function. - The default <span><strong class="command">server-id</strong></span> is <span><strong class="command">none</strong></span>. - </p></dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="empty"></a>Built-in Empty Zones</h4></div></div></div> -<p> - Named has some built-in empty zones (SOA and NS records only). - These are for zones that should normally be answered locally - and which queries should not be sent to the Internet's root - servers. The official servers which cover these namespaces - return NXDOMAIN responses to these queries. In particular, - these cover the reverse namespace for addresses from RFC 1918 and - RFC 3330. They also include the reverse namespace for IPv6 local - address (locally assigned), IPv6 link local addresses, the IPv6 - loopback address and the IPv6 unknown addresss. - </p> -<p> - Named will attempt to determine if a built in zone already exists - or is active (covered by a forward-only forwarding declaration) - and will not not create a empty zone in that case. - </p> -<p> - The current list of empty zones is: - </p> -<div class="itemizedlist"><ul type="disc"> -<li>10.IN-ADDR.ARPA</li> -<li>127.IN-ADDR.ARPA</li> -<li>254.169.IN-ADDR.ARPA</li> -<li>16.172.IN-ADDR.ARPA</li> -<li>17.172.IN-ADDR.ARPA</li> -<li>18.172.IN-ADDR.ARPA</li> -<li>19.172.IN-ADDR.ARPA</li> -<li>20.172.IN-ADDR.ARPA</li> -<li>21.172.IN-ADDR.ARPA</li> -<li>22.172.IN-ADDR.ARPA</li> -<li>23.172.IN-ADDR.ARPA</li> -<li>24.172.IN-ADDR.ARPA</li> -<li>25.172.IN-ADDR.ARPA</li> -<li>26.172.IN-ADDR.ARPA</li> -<li>27.172.IN-ADDR.ARPA</li> -<li>28.172.IN-ADDR.ARPA</li> -<li>29.172.IN-ADDR.ARPA</li> -<li>30.172.IN-ADDR.ARPA</li> -<li>31.172.IN-ADDR.ARPA</li> -<li>168.192.IN-ADDR.ARPA</li> -<li>2.0.192.IN-ADDR.ARPA</li> -<li>0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA</li> -<li>1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA</li> -<li>D.F.IP6.ARPA</li> -<li>8.E.F.IP6.ARPA</li> -<li>9.E.F.IP6.ARPA</li> -<li>A.E.F.IP6.ARPA</li> -<li>B.E.F.IP6.ARPA</li> -</ul></div> -<p> - </p> -<p> - Empty zones are settable at the view level and only apply to - views of class IN. Disabled empty zones are only inherited - from options if there are no disabled empty zones specified - at the view level. To override the options list of disabled - zones, you can disable the root zone at the view level, for example: -</p> -<pre class="programlisting"> - disable-empty-zone "."; -</pre> -<p> - </p> -<p> - If you are using the address ranges covered here, you should - already have reverse zones covering the addresses you use. - In practice this appears to not be the case with many queries - being made to the infrastructure servers for names in these - spaces. So many in fact that sacrificial servers were needed - to be deployed to channel the query load away from the - infrastructure servers. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> - The real parent servers for these zones should disable all - empty zone under the parent zone they serve. For the real - root servers, this is all built in empty zones. This will - enable them to return referrals to deeper in the tree. - </div> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">empty-server</strong></span></span></dt> -<dd><p> - Specify what server name will appear in the returned - SOA record for empty zones. If none is specified, then - the zone's name will be used. - </p></dd> -<dt><span class="term"><span><strong class="command">empty-contact</strong></span></span></dt> -<dd><p> - Specify what contact name will appear in the returned - SOA record for empty zones. If none is specified, then - "." will be used. - </p></dd> -<dt><span class="term"><span><strong class="command">empty-zones-enable</strong></span></span></dt> -<dd><p> - Enable or disable all empty zones. By default they - are enabled. - </p></dd> -<dt><span class="term"><span><strong class="command">disable-empty-zone</strong></span></span></dt> -<dd><p> - Disable individual empty zones. By default none are - disabled. This option can be specified multiple times. - </p></dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="statsfile"></a>The Statistics File</h4></div></div></div> -<p> - The statistics file generated by <acronym class="acronym">BIND</acronym> 9 - is similar, but not identical, to that - generated by <acronym class="acronym">BIND</acronym> 8. - </p> -<p> - The statistics dump begins with a line, like: - </p> -<p> - <span><strong class="command">+++ Statistics Dump +++ (973798949)</strong></span> - </p> -<p> - The number in parentheses is a standard - Unix-style timestamp, measured as seconds since January 1, 1970. - Following - that line are a series of lines containing a counter type, the - value of the - counter, optionally a zone name, and optionally a view name. - The lines without view and zone listed are global statistics for - the entire server. - Lines with a zone and view name for the given view and zone (the - view name is - omitted for the default view). - </p> -<p> - The statistics dump ends with the line where the - number is identical to the number in the beginning line; for example: - </p> -<p> - <span><strong class="command">--- Statistics Dump --- (973798949)</strong></span> - </p> -<p> - The following statistics counters are maintained: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p><span><strong class="command">success</strong></span></p> - </td> -<td> - <p> - The number of - successful queries made to the server or zone. A - successful query - is defined as query which returns a NOERROR response - with at least - one answer RR. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">referral</strong></span></p> - </td> -<td> - <p> - The number of queries which resulted - in referral responses. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">nxrrset</strong></span></p> - </td> -<td> - <p> - The number of queries which resulted in - NOERROR responses with no data. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">nxdomain</strong></span></p> - </td> -<td> - <p> - The number - of queries which resulted in NXDOMAIN responses. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">failure</strong></span></p> - </td> -<td> - <p> - The number of queries which resulted in a - failure response other than those above. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">recursion</strong></span></p> - </td> -<td> - <p> - The number of queries which caused the server - to perform recursion in order to find the final answer. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">duplicate</strong></span></p> - </td> -<td> - <p> - The number of queries which the server attempted to - recurse but discover a existing query with the same - IP address, port, query id, name, type and class - already being processed. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">dropped</strong></span></p> - </td> -<td> - <p> - The number of queries for which the server - discovered a excessive number of existing - recursive queries for the same name, type and - class and were subsequently dropped. - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - Each query received by the server will cause exactly one of - <span><strong class="command">success</strong></span>, - <span><strong class="command">referral</strong></span>, - <span><strong class="command">nxrrset</strong></span>, - <span><strong class="command">nxdomain</strong></span>, or - <span><strong class="command">failure</strong></span> - to be incremented, and may additionally cause the - <span><strong class="command">recursion</strong></span> counter to be - incremented. - </p> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="acache"></a>Additional Section Caching</h4></div></div></div> -<p> - The additional section cache, also called <span><strong class="command">acache</strong></span>, - is an internal cache to improve the response performance of BIND 9. - When additional section caching is enabled, BIND 9 will - cache an internal short-cut to the additional section content for - each answer RR. - Note that <span><strong class="command">acache</strong></span> is an internal caching - mechanism of BIND 9, and is not related to the DNS caching - server function. - </p> -<p> - Additional section caching does not change the - response content (except the RRsets ordering of the additional - section, see below), but can improve the response performance - significantly. - It is particularly effective when BIND 9 acts as an authoritative - server for a zone that has many delegations with many glue RRs. - </p> -<p> - In order to obtain the maximum performance improvement - from additional section caching, setting - <span><strong class="command">additional-from-cache</strong></span> - to <span><strong class="command">no</strong></span> is recommended, since the current - implementation of <span><strong class="command">acache</strong></span> - does not short-cut of additional section information from the - DNS cache data. - </p> -<p> - One obvious disadvantage of <span><strong class="command">acache</strong></span> is - that it requires much more - memory for the internal cached data. - Thus, if the response performance does not matter and memory - consumption is much more critical, the - <span><strong class="command">acache</strong></span> mechanism can be - disabled by setting <span><strong class="command">acache-enable</strong></span> to - <span><strong class="command">no</strong></span>. - It is also possible to specify the upper limit of memory - consumption - for acache by using <span><strong class="command">max-acache-size</strong></span>. - </p> -<p> - Additional section caching also has a minor effect on the - RRset ordering in the additional section. - Without <span><strong class="command">acache</strong></span>, - <span><strong class="command">cyclic</strong></span> order is effective for the additional - section as well as the answer and authority sections. - However, additional section caching fixes the ordering when it - first caches an RRset for the additional section, and the same - ordering will be kept in succeeding responses, regardless of the - setting of <span><strong class="command">rrset-order</strong></span>. - The effect of this should be minor, however, since an - RRset in the additional section - typically only contains a small number of RRs (and in many cases - it only contains a single RR), in which case the - ordering does not matter much. - </p> -<p> - The following is a summary of options related to - <span><strong class="command">acache</strong></span>. - </p> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">acache-enable</strong></span></span></dt> -<dd><p> - If <span><strong class="command">yes</strong></span>, additional section caching is - enabled. The default value is <span><strong class="command">no</strong></span>. - </p></dd> -<dt><span class="term"><span><strong class="command">acache-cleaning-interval</strong></span></span></dt> -<dd><p> - The server will remove stale cache entries, based on an LRU - based - algorithm, every <span><strong class="command">acache-cleaning-interval</strong></span> minutes. - The default is 60 minutes. - If set to 0, no periodic cleaning will occur. - </p></dd> -<dt><span class="term"><span><strong class="command">max-acache-size</strong></span></span></dt> -<dd><p> - The maximum amount of memory in bytes to use for the server's acache. - When the amount of data in the acache reaches this limit, - the server - will clean more aggressively so that the limit is not - exceeded. - In a server with multiple views, the limit applies - separately to the - acache of each view. - The default is <code class="literal">unlimited</code>, - meaning that - entries are purged from the acache only at the - periodic cleaning time. - </p></dd> -</dl></div> -</div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="server_statement_grammar"></a><span><strong class="command">server</strong></span> Statement Grammar</h3></div></div></div> -<pre class="programlisting">server <em class="replaceable"><code>ip_addr[/prefixlen]</code></em> { - [<span class="optional"> bogus <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> provide-ixfr <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> request-ixfr <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> edns <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> edns-udp-size <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-udp-size <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> transfers <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> transfer-format <em class="replaceable"><code>( one-answer | many-answers )</code></em> ; ]</span>] - [<span class="optional"> keys <em class="replaceable"><code>{ string ; [<span class="optional"> string ; [<span class="optional">...</span>]</span>] }</code></em> ; </span>] - [<span class="optional"> transfer-source (<em class="replaceable"><code>ip4_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> transfer-source-v6 (<em class="replaceable"><code>ip6_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> notify-source (<em class="replaceable"><code>ip4_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> notify-source-v6 (<em class="replaceable"><code>ip6_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> query-source [<span class="optional"> address ( <em class="replaceable"><code>ip_addr</code></em> | <em class="replaceable"><code>*</code></em> ) </span>] [<span class="optional"> port ( <em class="replaceable"><code>ip_port</code></em> | <em class="replaceable"><code>*</code></em> ) </span>]; </span>] - [<span class="optional"> query-source-v6 [<span class="optional"> address ( <em class="replaceable"><code>ip_addr</code></em> | <em class="replaceable"><code>*</code></em> ) </span>] [<span class="optional"> port ( <em class="replaceable"><code>ip_port</code></em> | <em class="replaceable"><code>*</code></em> ) </span>]; </span>] -}; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="server_statement_definition_and_usage"></a><span><strong class="command">server</strong></span> Statement Definition and - Usage</h3></div></div></div> -<p> - The <span><strong class="command">server</strong></span> statement defines - characteristics - to be associated with a remote name server. If a prefix length is - specified, then a range of servers is covered. Only the most - specific - server clause applies regardless of the order in - <code class="filename">named.conf</code>. - </p> -<p> - The <span><strong class="command">server</strong></span> statement can occur at - the top level of the - configuration file or inside a <span><strong class="command">view</strong></span> - statement. - If a <span><strong class="command">view</strong></span> statement contains - one or more <span><strong class="command">server</strong></span> statements, only - those - apply to the view and any top-level ones are ignored. - If a view contains no <span><strong class="command">server</strong></span> - statements, - any top-level <span><strong class="command">server</strong></span> statements are - used as - defaults. - </p> -<p> - If you discover that a remote server is giving out bad data, - marking it as bogus will prevent further queries to it. The - default - value of <span><strong class="command">bogus</strong></span> is <span><strong class="command">no</strong></span>. - </p> -<p> - The <span><strong class="command">provide-ixfr</strong></span> clause determines - whether - the local server, acting as master, will respond with an - incremental - zone transfer when the given remote server, a slave, requests it. - If set to <span><strong class="command">yes</strong></span>, incremental transfer - will be provided - whenever possible. If set to <span><strong class="command">no</strong></span>, - all transfers - to the remote server will be non-incremental. If not set, the - value - of the <span><strong class="command">provide-ixfr</strong></span> option in the - view or - global options block is used as a default. - </p> -<p> - The <span><strong class="command">request-ixfr</strong></span> clause determines - whether - the local server, acting as a slave, will request incremental zone - transfers from the given remote server, a master. If not set, the - value of the <span><strong class="command">request-ixfr</strong></span> option in - the view or - global options block is used as a default. - </p> -<p> - IXFR requests to servers that do not support IXFR will - automatically - fall back to AXFR. Therefore, there is no need to manually list - which servers support IXFR and which ones do not; the global - default - of <span><strong class="command">yes</strong></span> should always work. - The purpose of the <span><strong class="command">provide-ixfr</strong></span> and - <span><strong class="command">request-ixfr</strong></span> clauses is - to make it possible to disable the use of IXFR even when both - master - and slave claim to support it, for example if one of the servers - is buggy and crashes or corrupts data when IXFR is used. - </p> -<p> - The <span><strong class="command">edns</strong></span> clause determines whether - the local server will attempt to use EDNS when communicating - with the remote server. The default is <span><strong class="command">yes</strong></span>. - </p> -<p> - The <span><strong class="command">edns-udp-size</strong></span> option sets the EDNS UDP size - that is advertised by named when querying the remote server. - Valid values are 512 to 4096 bytes (values outside this range will be - silently adjusted). This option is useful when you wish to - advertises a different value to this server than the value you - advertise globally, for example, when there is a firewall at the - remote site that is blocking large replies. - </p> -<p> - The <span><strong class="command">max-udp-size</strong></span> option sets the - maximum EDNS UDP message size named will send. Valid - values are 512 to 4096 bytes (values outside this range will - be silently adjusted). This option is useful when you - know that there is a firewall that is blocking large - replies from named. - </p> -<p> - The server supports two zone transfer methods. The first, <span><strong class="command">one-answer</strong></span>, - uses one DNS message per resource record transferred. <span><strong class="command">many-answers</strong></span> packs - as many resource records as possible into a message. <span><strong class="command">many-answers</strong></span> is - more efficient, but is only known to be understood by <acronym class="acronym">BIND</acronym> 9, <acronym class="acronym">BIND</acronym> - 8.x, and patched versions of <acronym class="acronym">BIND</acronym> - 4.9.5. You can specify which method - to use for a server with the <span><strong class="command">transfer-format</strong></span> option. - If <span><strong class="command">transfer-format</strong></span> is not - specified, the <span><strong class="command">transfer-format</strong></span> - specified - by the <span><strong class="command">options</strong></span> statement will be - used. - </p> -<p><span><strong class="command">transfers</strong></span> - is used to limit the number of concurrent inbound zone - transfers from the specified server. If no - <span><strong class="command">transfers</strong></span> clause is specified, the - limit is set according to the - <span><strong class="command">transfers-per-ns</strong></span> option. - </p> -<p> - The <span><strong class="command">keys</strong></span> clause identifies a - <span><strong class="command">key_id</strong></span> defined by the <span><strong class="command">key</strong></span> statement, - to be used for transaction security (TSIG, <a href="Bv9ARM.ch04.html#tsig" title="TSIG">the section called “TSIG”</a>) - when talking to the remote server. - When a request is sent to the remote server, a request signature - will be generated using the key specified here and appended to the - message. A request originating from the remote server is not - required - to be signed by this key. - </p> -<p> - Although the grammar of the <span><strong class="command">keys</strong></span> - clause - allows for multiple keys, only a single key per server is - currently - supported. - </p> -<p> - The <span><strong class="command">transfer-source</strong></span> and - <span><strong class="command">transfer-source-v6</strong></span> clauses specify - the IPv4 and IPv6 source - address to be used for zone transfer with the remote server, - respectively. - For an IPv4 remote server, only <span><strong class="command">transfer-source</strong></span> can - be specified. - Similarly, for an IPv6 remote server, only - <span><strong class="command">transfer-source-v6</strong></span> can be - specified. - For more details, see the description of - <span><strong class="command">transfer-source</strong></span> and - <span><strong class="command">transfer-source-v6</strong></span> in - <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p> -<p> - The <span><strong class="command">notify-source</strong></span> and - <span><strong class="command">notify-source-v6</strong></span> clauses specify the - IPv4 and IPv6 source address to be used for notify - messages sent to remote servers, respectively. For an - IPv4 remote server, only <span><strong class="command">notify-source</strong></span> - can be specified. Similarly, for an IPv6 remote server, - only <span><strong class="command">notify-source-v6</strong></span> can be specified. - </p> -<p> - The <span><strong class="command">query-source</strong></span> and - <span><strong class="command">query-source-v6</strong></span> clauses specify the - IPv4 and IPv6 source address to be used for queries - sent to remote servers, respectively. For an IPv4 - remote server, only <span><strong class="command">query-source</strong></span> can - be specified. Similarly, for an IPv6 remote server, - only <span><strong class="command">query-source-v6</strong></span> can be specified. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2585361"></a><span><strong class="command">trusted-keys</strong></span> Statement Grammar</h3></div></div></div> -<pre class="programlisting">trusted-keys { - <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>string</code></em> ; - [<span class="optional"> <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>string</code></em> ; [<span class="optional">...</span>]</span>] -}; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2585410"></a><span><strong class="command">trusted-keys</strong></span> Statement Definition - and Usage</h3></div></div></div> -<p> - The <span><strong class="command">trusted-keys</strong></span> statement defines - DNSSEC security roots. DNSSEC is described in <a href="Bv9ARM.ch04.html#DNSSEC" title="DNSSEC">the section called “DNSSEC”</a>. A security root is defined when the - public key for a non-authoritative zone is known, but - cannot be securely obtained through DNS, either because - it is the DNS root zone or because its parent zone is - unsigned. Once a key has been configured as a trusted - key, it is treated as if it had been validated and - proven secure. The resolver attempts DNSSEC validation - on all DNS data in subdomains of a security root. - </p> -<p> - All keys (and corresponding zones) listed in - <span><strong class="command">trusted-keys</strong></span> are deemed to exist regardless - of what parent zones say. Similarly for all keys listed in - <span><strong class="command">trusted-keys</strong></span> only those keys are - used to validate the DNSKEY RRset. The parent's DS RRset - will not be used. - </p> -<p> - The <span><strong class="command">trusted-keys</strong></span> statement can contain - multiple key entries, each consisting of the key's - domain name, flags, protocol, algorithm, and the Base-64 - representation of the key data. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="view_statement_grammar"></a><span><strong class="command">view</strong></span> Statement Grammar</h3></div></div></div> -<pre class="programlisting">view <em class="replaceable"><code>view_name</code></em> - [<span class="optional"><em class="replaceable"><code>class</code></em></span>] { - match-clients { <em class="replaceable"><code>address_match_list</code></em> }; - match-destinations { <em class="replaceable"><code>address_match_list</code></em> }; - match-recursive-only <em class="replaceable"><code>yes_or_no</code></em> ; - [<span class="optional"> <em class="replaceable"><code>view_option</code></em>; ...</span>] - [<span class="optional"> <em class="replaceable"><code>zone_statement</code></em>; ...</span>] -}; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2585490"></a><span><strong class="command">view</strong></span> Statement Definition and Usage</h3></div></div></div> -<p> - The <span><strong class="command">view</strong></span> statement is a powerful - feature - of <acronym class="acronym">BIND</acronym> 9 that lets a name server - answer a DNS query differently - depending on who is asking. It is particularly useful for - implementing - split DNS setups without having to run multiple servers. - </p> -<p> - Each <span><strong class="command">view</strong></span> statement defines a view - of the - DNS namespace that will be seen by a subset of clients. A client - matches - a view if its source IP address matches the - <code class="varname">address_match_list</code> of the view's - <span><strong class="command">match-clients</strong></span> clause and its - destination IP address matches - the <code class="varname">address_match_list</code> of the - view's - <span><strong class="command">match-destinations</strong></span> clause. If not - specified, both - <span><strong class="command">match-clients</strong></span> and <span><strong class="command">match-destinations</strong></span> - default to matching all addresses. In addition to checking IP - addresses - <span><strong class="command">match-clients</strong></span> and <span><strong class="command">match-destinations</strong></span> - can also take <span><strong class="command">keys</strong></span> which provide an - mechanism for the - client to select the view. A view can also be specified - as <span><strong class="command">match-recursive-only</strong></span>, which - means that only recursive - requests from matching clients will match that view. - The order of the <span><strong class="command">view</strong></span> statements is - significant — - a client request will be resolved in the context of the first - <span><strong class="command">view</strong></span> that it matches. - </p> -<p> - Zones defined within a <span><strong class="command">view</strong></span> - statement will - be only be accessible to clients that match the <span><strong class="command">view</strong></span>. - By defining a zone of the same name in multiple views, different - zone data can be given to different clients, for example, - "internal" - and "external" clients in a split DNS setup. - </p> -<p> - Many of the options given in the <span><strong class="command">options</strong></span> statement - can also be used within a <span><strong class="command">view</strong></span> - statement, and then - apply only when resolving queries with that view. When no - view-specific - value is given, the value in the <span><strong class="command">options</strong></span> statement - is used as a default. Also, zone options can have default values - specified - in the <span><strong class="command">view</strong></span> statement; these - view-specific defaults - take precedence over those in the <span><strong class="command">options</strong></span> statement. - </p> -<p> - Views are class specific. If no class is given, class IN - is assumed. Note that all non-IN views must contain a hint zone, - since only the IN class has compiled-in default hints. - </p> -<p> - If there are no <span><strong class="command">view</strong></span> statements in - the config - file, a default view that matches any client is automatically - created - in class IN. Any <span><strong class="command">zone</strong></span> statements - specified on - the top level of the configuration file are considered to be part - of - this default view, and the <span><strong class="command">options</strong></span> - statement will - apply to the default view. If any explicit <span><strong class="command">view</strong></span> - statements are present, all <span><strong class="command">zone</strong></span> - statements must - occur inside <span><strong class="command">view</strong></span> statements. - </p> -<p> - Here is an example of a typical split DNS setup implemented - using <span><strong class="command">view</strong></span> statements: - </p> -<pre class="programlisting">view "internal" { - // This should match our internal networks. - match-clients { 10.0.0.0/8; }; - - // Provide recursive service to internal clients only. - recursion yes; - - // Provide a complete view of the example.com zone - // including addresses of internal hosts. - zone "example.com" { - type master; - file "example-internal.db"; - }; -}; - -view "external" { - // Match all clients not matched by the previous view. - match-clients { any; }; - - // Refuse recursive service to external clients. - recursion no; - - // Provide a restricted view of the example.com zone - // containing only publicly accessible hosts. - zone "example.com" { - type master; - file "example-external.db"; - }; -}; -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="zone_statement_grammar"></a><span><strong class="command">zone</strong></span> - Statement Grammar</h3></div></div></div> -<pre class="programlisting">zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"><em class="replaceable"><code>class</code></em></span>] { - type master; - [<span class="optional"> allow-query { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> allow-transfer { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> allow-update { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> update-policy { <em class="replaceable"><code>update_policy_rule</code></em> [<span class="optional">...</span>] }; </span>] - [<span class="optional"> also-notify { <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; [<span class="optional"> <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; ... </span>] }; </span>] - [<span class="optional"> check-names (<code class="constant">warn</code>|<code class="constant">fail</code>|<code class="constant">ignore</code>) ; </span>] - [<span class="optional"> check-mx (<code class="constant">warn</code>|<code class="constant">fail</code>|<code class="constant">ignore</code>) ; </span>] - [<span class="optional"> check-wildcard <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> check-integrity <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> dialup <em class="replaceable"><code>dialup_option</code></em> ; </span>] - [<span class="optional"> file <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> masterfile-format (<code class="constant">text</code>|<code class="constant">raw</code>) ; </span>] - [<span class="optional"> journal <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> forward (<code class="constant">only</code>|<code class="constant">first</code>) ; </span>] - [<span class="optional"> forwarders { [<span class="optional"> <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; ... </span>] }; </span>] - [<span class="optional"> ixfr-base <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> ixfr-tmp-file <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> maintain-ixfr-base <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> max-ixfr-log-size <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-transfer-idle-out <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-transfer-time-out <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> notify <em class="replaceable"><code>yes_or_no</code></em> | <em class="replaceable"><code>explicit</code></em> | <em class="replaceable"><code>master-only</code></em> ; </span>] - [<span class="optional"> notify-delay <em class="replaceable"><code>seconds</code></em> ; </span>] - [<span class="optional"> pubkey <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> notify-source (<em class="replaceable"><code>ip4_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> notify-source-v6 (<em class="replaceable"><code>ip6_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> zone-statistics <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> sig-validity-interval <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> database <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> min-refresh-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-refresh-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> min-retry-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-retry-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> key-directory <em class="replaceable"><code>path_name</code></em>; </span>] - [<span class="optional"> zero-no-soa-ttl <em class="replaceable"><code>yes_or_no</code></em> ; </span>] -}; - -zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"><em class="replaceable"><code>class</code></em></span>] { - type slave; - [<span class="optional"> allow-notify { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> allow-query { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> allow-transfer { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> allow-update-forwarding { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> update-check-ksk <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> also-notify { <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; [<span class="optional"> <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; ... </span>] }; </span>] - [<span class="optional"> check-names (<code class="constant">warn</code>|<code class="constant">fail</code>|<code class="constant">ignore</code>) ; </span>] - [<span class="optional"> dialup <em class="replaceable"><code>dialup_option</code></em> ; </span>] - [<span class="optional"> file <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> masterfile-format (<code class="constant">text</code>|<code class="constant">raw</code>) ; </span>] - [<span class="optional"> journal <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> forward (<code class="constant">only</code>|<code class="constant">first</code>) ; </span>] - [<span class="optional"> forwarders { [<span class="optional"> <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; ... </span>] }; </span>] - [<span class="optional"> ixfr-base <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> ixfr-tmp-file <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> maintain-ixfr-base <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> masters [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] { ( <em class="replaceable"><code>masters_list</code></em> | <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] [<span class="optional">key <em class="replaceable"><code>key</code></em></span>] ) ; [<span class="optional">...</span>] }; </span>] - [<span class="optional"> max-ixfr-log-size <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-transfer-idle-in <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-transfer-idle-out <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-transfer-time-in <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-transfer-time-out <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> notify <em class="replaceable"><code>yes_or_no</code></em> | <em class="replaceable"><code>explicit</code></em> | <em class="replaceable"><code>master-only</code></em> ; </span>] - [<span class="optional"> pubkey <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> transfer-source (<em class="replaceable"><code>ip4_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> transfer-source-v6 (<em class="replaceable"><code>ip6_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> alt-transfer-source (<em class="replaceable"><code>ip4_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> alt-transfer-source-v6 (<em class="replaceable"><code>ip6_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> use-alt-transfer-source <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> notify-source (<em class="replaceable"><code>ip4_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> notify-source-v6 (<em class="replaceable"><code>ip6_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> zone-statistics <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> database <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> min-refresh-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-refresh-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> min-retry-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-retry-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> multi-master <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> zero-no-soa-ttl <em class="replaceable"><code>yes_or_no</code></em> ; </span>] -}; - -zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"><em class="replaceable"><code>class</code></em></span>] { - type hint; - file <em class="replaceable"><code>string</code></em> ; - [<span class="optional"> delegation-only <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> check-names (<code class="constant">warn</code>|<code class="constant">fail</code>|<code class="constant">ignore</code>) ; // Not Implemented. </span>] -}; - -zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"><em class="replaceable"><code>class</code></em></span>] { - type stub; - [<span class="optional"> allow-query { <em class="replaceable"><code>address_match_list</code></em> }; </span>] - [<span class="optional"> check-names (<code class="constant">warn</code>|<code class="constant">fail</code>|<code class="constant">ignore</code>) ; </span>] - [<span class="optional"> dialup <em class="replaceable"><code>dialup_option</code></em> ; </span>] - [<span class="optional"> delegation-only <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> file <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> masterfile-format (<code class="constant">text</code>|<code class="constant">raw</code>) ; </span>] - [<span class="optional"> forward (<code class="constant">only</code>|<code class="constant">first</code>) ; </span>] - [<span class="optional"> forwarders { [<span class="optional"> <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; ... </span>] }; </span>] - [<span class="optional"> masters [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] { ( <em class="replaceable"><code>masters_list</code></em> | <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] [<span class="optional">key <em class="replaceable"><code>key</code></em></span>] ) ; [<span class="optional">...</span>] }; </span>] - [<span class="optional"> max-transfer-idle-in <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-transfer-time-in <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> pubkey <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>number</code></em> <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> transfer-source (<em class="replaceable"><code>ip4_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> transfer-source-v6 (<em class="replaceable"><code>ip6_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> alt-transfer-source (<em class="replaceable"><code>ip4_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> alt-transfer-source-v6 (<em class="replaceable"><code>ip6_addr</code></em> | <code class="constant">*</code>) [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; </span>] - [<span class="optional"> use-alt-transfer-source <em class="replaceable"><code>yes_or_no</code></em>; </span>] - [<span class="optional"> zone-statistics <em class="replaceable"><code>yes_or_no</code></em> ; </span>] - [<span class="optional"> database <em class="replaceable"><code>string</code></em> ; </span>] - [<span class="optional"> min-refresh-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-refresh-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> min-retry-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> max-retry-time <em class="replaceable"><code>number</code></em> ; </span>] - [<span class="optional"> multi-master <em class="replaceable"><code>yes_or_no</code></em> ; </span>] -}; - -zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"><em class="replaceable"><code>class</code></em></span>] { - type forward; - [<span class="optional"> forward (<code class="constant">only</code>|<code class="constant">first</code>) ; </span>] - [<span class="optional"> forwarders { [<span class="optional"> <em class="replaceable"><code>ip_addr</code></em> [<span class="optional">port <em class="replaceable"><code>ip_port</code></em></span>] ; ... </span>] }; </span>] - [<span class="optional"> delegation-only <em class="replaceable"><code>yes_or_no</code></em> ; </span>] -}; - -zone <em class="replaceable"><code>zone_name</code></em> [<span class="optional"><em class="replaceable"><code>class</code></em></span>] { - type delegation-only; -}; - -</pre> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2586798"></a><span><strong class="command">zone</strong></span> Statement Definition and Usage</h3></div></div></div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2586806"></a>Zone Types</h4></div></div></div> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - <code class="varname">master</code> - </p> - </td> -<td> - <p> - The server has a master copy of the data - for the zone and will be able to provide authoritative - answers for - it. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">slave</code> - </p> - </td> -<td> - <p> - A slave zone is a replica of a master - zone. The <span><strong class="command">masters</strong></span> list - specifies one or more IP addresses - of master servers that the slave contacts to update - its copy of the zone. - Masters list elements can also be names of other - masters lists. - By default, transfers are made from port 53 on the - servers; this can - be changed for all servers by specifying a port number - before the - list of IP addresses, or on a per-server basis after - the IP address. - Authentication to the master can also be done with - per-server TSIG keys. - If a file is specified, then the - replica will be written to this file whenever the zone - is changed, - and reloaded from this file on a server restart. Use - of a file is - recommended, since it often speeds server startup and - eliminates - a needless waste of bandwidth. Note that for large - numbers (in the - tens or hundreds of thousands) of zones per server, it - is best to - use a two-level naming scheme for zone filenames. For - example, - a slave server for the zone <code class="literal">example.com</code> might place - the zone contents into a file called - <code class="filename">ex/example.com</code> where <code class="filename">ex/</code> is - just the first two letters of the zone name. (Most - operating systems - behave very slowly if you put 100 000 files into - a single directory.) - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">stub</code> - </p> - </td> -<td> - <p> - A stub zone is similar to a slave zone, - except that it replicates only the NS records of a - master zone instead - of the entire zone. Stub zones are not a standard part - of the DNS; - they are a feature specific to the <acronym class="acronym">BIND</acronym> implementation. - </p> - - <p> - Stub zones can be used to eliminate the need for glue - NS record - in a parent zone at the expense of maintaining a stub - zone entry and - a set of name server addresses in <code class="filename">named.conf</code>. - This usage is not recommended for new configurations, - and BIND 9 - supports it only in a limited way. - In <acronym class="acronym">BIND</acronym> 4/8, zone - transfers of a parent zone - included the NS records from stub children of that - zone. This meant - that, in some cases, users could get away with - configuring child stubs - only in the master server for the parent zone. <acronym class="acronym">BIND</acronym> - 9 never mixes together zone data from different zones - in this - way. Therefore, if a <acronym class="acronym">BIND</acronym> 9 master serving a parent - zone has child stub zones configured, all the slave - servers for the - parent zone also need to have the same child stub - zones - configured. - </p> - - <p> - Stub zones can also be used as a way of forcing the - resolution - of a given domain to use a particular set of - authoritative servers. - For example, the caching name servers on a private - network using - RFC1918 addressing may be configured with stub zones - for - <code class="literal">10.in-addr.arpa</code> - to use a set of internal name servers as the - authoritative - servers for that domain. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">forward</code> - </p> - </td> -<td> - <p> - A "forward zone" is a way to configure - forwarding on a per-domain basis. A <span><strong class="command">zone</strong></span> statement - of type <span><strong class="command">forward</strong></span> can - contain a <span><strong class="command">forward</strong></span> - and/or <span><strong class="command">forwarders</strong></span> - statement, - which will apply to queries within the domain given by - the zone - name. If no <span><strong class="command">forwarders</strong></span> - statement is present or - an empty list for <span><strong class="command">forwarders</strong></span> is given, then no - forwarding will be done for the domain, canceling the - effects of - any forwarders in the <span><strong class="command">options</strong></span> statement. Thus - if you want to use this type of zone to change the - behavior of the - global <span><strong class="command">forward</strong></span> option - (that is, "forward first" - to, then "forward only", or vice versa, but want to - use the same - servers as set globally) you need to re-specify the - global forwarders. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">hint</code> - </p> - </td> -<td> - <p> - The initial set of root name servers is - specified using a "hint zone". When the server starts - up, it uses - the root hints to find a root name server and get the - most recent - list of root name servers. If no hint zone is - specified for class - IN, the server uses a compiled-in default set of root - servers hints. - Classes other than IN have no built-in defaults hints. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">delegation-only</code> - </p> - </td> -<td> - <p> - This is used to enforce the delegation-only - status of infrastructure zones (e.g. COM, NET, ORG). - Any answer that - is received without an explicit or implicit delegation - in the authority - section will be treated as NXDOMAIN. This does not - apply to the zone - apex. This should not be applied to leaf zones. - </p> - <p> - <code class="varname">delegation-only</code> has no - effect on answers received - from forwarders. - </p> - </td> -</tr> -</tbody> -</table></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2587362"></a>Class</h4></div></div></div> -<p> - The zone's name may optionally be followed by a class. If - a class is not specified, class <code class="literal">IN</code> (for <code class="varname">Internet</code>), - is assumed. This is correct for the vast majority of cases. - </p> -<p> - The <code class="literal">hesiod</code> class is - named for an information service from MIT's Project Athena. It - is - used to share information about various systems databases, such - as users, groups, printers and so on. The keyword - <code class="literal">HS</code> is - a synonym for hesiod. - </p> -<p> - Another MIT development is Chaosnet, a LAN protocol created - in the mid-1970s. Zone data for it can be specified with the <code class="literal">CHAOS</code> class. - </p> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2587395"></a>Zone Options</h4></div></div></div> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">allow-notify</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">allow-notify</strong></span> in <a href="Bv9ARM.ch06.html#access_control" title="Access Control">the section called “Access Control”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">allow-query</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">allow-query</strong></span> in <a href="Bv9ARM.ch06.html#access_control" title="Access Control">the section called “Access Control”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">allow-transfer</strong></span></span></dt> -<dd><p> - See the description of <span><strong class="command">allow-transfer</strong></span> - in <a href="Bv9ARM.ch06.html#access_control" title="Access Control">the section called “Access Control”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">allow-update</strong></span></span></dt> -<dd><p> - See the description of <span><strong class="command">allow-update</strong></span> - in <a href="Bv9ARM.ch06.html#access_control" title="Access Control">the section called “Access Control”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">update-policy</strong></span></span></dt> -<dd><p> - Specifies a "Simple Secure Update" policy. See - <a href="Bv9ARM.ch06.html#dynamic_update_policies" title="Dynamic Update Policies">the section called “Dynamic Update Policies”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">allow-update-forwarding</strong></span></span></dt> -<dd><p> - See the description of <span><strong class="command">allow-update-forwarding</strong></span> - in <a href="Bv9ARM.ch06.html#access_control" title="Access Control">the section called “Access Control”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">also-notify</strong></span></span></dt> -<dd><p> - Only meaningful if <span><strong class="command">notify</strong></span> - is - active for this zone. The set of machines that will - receive a - <code class="literal">DNS NOTIFY</code> message - for this zone is made up of all the listed name servers - (other than - the primary master) for the zone plus any IP addresses - specified - with <span><strong class="command">also-notify</strong></span>. A port - may be specified - with each <span><strong class="command">also-notify</strong></span> - address to send the notify - messages to a port other than the default of 53. - <span><strong class="command">also-notify</strong></span> is not - meaningful for stub zones. - The default is the empty list. - </p></dd> -<dt><span class="term"><span><strong class="command">check-names</strong></span></span></dt> -<dd><p> - This option is used to restrict the character set and - syntax of - certain domain names in master files and/or DNS responses - received from the - network. The default varies according to zone type. For <span><strong class="command">master</strong></span> zones the default is <span><strong class="command">fail</strong></span>. For <span><strong class="command">slave</strong></span> - zones the default is <span><strong class="command">warn</strong></span>. - </p></dd> -<dt><span class="term"><span><strong class="command">check-mx</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">check-mx</strong></span> in <a href="Bv9ARM.ch06.html#boolean_options" title="Boolean Options">the section called “Boolean Options”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">check-wildcard</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">check-wildcard</strong></span> in <a href="Bv9ARM.ch06.html#boolean_options" title="Boolean Options">the section called “Boolean Options”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">check-integrity</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">check-integrity</strong></span> in <a href="Bv9ARM.ch06.html#boolean_options" title="Boolean Options">the section called “Boolean Options”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">check-sibling</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">check-sibling</strong></span> in <a href="Bv9ARM.ch06.html#boolean_options" title="Boolean Options">the section called “Boolean Options”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">zero-no-soa-ttl</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">zero-no-soa-ttl</strong></span> in <a href="Bv9ARM.ch06.html#boolean_options" title="Boolean Options">the section called “Boolean Options”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">update-check-ksk</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">update-check-ksk</strong></span> in <a href="Bv9ARM.ch06.html#boolean_options" title="Boolean Options">the section called “Boolean Options”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">database</strong></span></span></dt> -<dd> -<p> - Specify the type of database to be used for storing the - zone data. The string following the <span><strong class="command">database</strong></span> keyword - is interpreted as a list of whitespace-delimited words. - The first word - identifies the database type, and any subsequent words are - passed - as arguments to the database to be interpreted in a way - specific - to the database type. - </p> -<p> - The default is <strong class="userinput"><code>"rbt"</code></strong>, BIND 9's - native in-memory - red-black-tree database. This database does not take - arguments. - </p> -<p> - Other values are possible if additional database drivers - have been linked into the server. Some sample drivers are - included - with the distribution but none are linked in by default. - </p> -</dd> -<dt><span class="term"><span><strong class="command">dialup</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">dialup</strong></span> in <a href="Bv9ARM.ch06.html#boolean_options" title="Boolean Options">the section called “Boolean Options”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">delegation-only</strong></span></span></dt> -<dd><p> - The flag only applies to hint and stub zones. If set - to <strong class="userinput"><code>yes</code></strong>, then the zone will also be - treated as if it - is also a delegation-only type zone. - </p></dd> -<dt><span class="term"><span><strong class="command">forward</strong></span></span></dt> -<dd><p> - Only meaningful if the zone has a forwarders - list. The <span><strong class="command">only</strong></span> value causes - the lookup to fail - after trying the forwarders and getting no answer, while <span><strong class="command">first</strong></span> would - allow a normal lookup to be tried. - </p></dd> -<dt><span class="term"><span><strong class="command">forwarders</strong></span></span></dt> -<dd><p> - Used to override the list of global forwarders. - If it is not specified in a zone of type <span><strong class="command">forward</strong></span>, - no forwarding is done for the zone and the global options are - not used. - </p></dd> -<dt><span class="term"><span><strong class="command">ixfr-base</strong></span></span></dt> -<dd><p> - Was used in <acronym class="acronym">BIND</acronym> 8 to - specify the name - of the transaction log (journal) file for dynamic update - and IXFR. - <acronym class="acronym">BIND</acronym> 9 ignores the option - and constructs the name of the journal - file by appending "<code class="filename">.jnl</code>" - to the name of the - zone file. - </p></dd> -<dt><span class="term"><span><strong class="command">ixfr-tmp-file</strong></span></span></dt> -<dd><p> - Was an undocumented option in <acronym class="acronym">BIND</acronym> 8. - Ignored in <acronym class="acronym">BIND</acronym> 9. - </p></dd> -<dt><span class="term"><span><strong class="command">journal</strong></span></span></dt> -<dd><p> - Allow the default journal's filename to be overridden. - The default is the zone's filename with "<code class="filename">.jnl</code>" appended. - This is applicable to <span><strong class="command">master</strong></span> and <span><strong class="command">slave</strong></span> zones. - </p></dd> -<dt><span class="term"><span><strong class="command">max-transfer-time-in</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">max-transfer-time-in</strong></span> in <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">max-transfer-idle-in</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">max-transfer-idle-in</strong></span> in <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">max-transfer-time-out</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">max-transfer-time-out</strong></span> in <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">max-transfer-idle-out</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">max-transfer-idle-out</strong></span> in <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">notify</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">notify</strong></span> in <a href="Bv9ARM.ch06.html#boolean_options" title="Boolean Options">the section called “Boolean Options”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">notify-delay</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">notify-delay</strong></span> in <a href="Bv9ARM.ch06.html#tuning" title="Tuning">the section called “Tuning”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">pubkey</strong></span></span></dt> -<dd><p> - In <acronym class="acronym">BIND</acronym> 8, this option was - intended for specifying - a public zone key for verification of signatures in DNSSEC - signed - zones when they are loaded from disk. <acronym class="acronym">BIND</acronym> 9 does not verify signatures - on load and ignores the option. - </p></dd> -<dt><span class="term"><span><strong class="command">zone-statistics</strong></span></span></dt> -<dd><p> - If <strong class="userinput"><code>yes</code></strong>, the server will keep - statistical - information for this zone, which can be dumped to the - <span><strong class="command">statistics-file</strong></span> defined in - the server options. - </p></dd> -<dt><span class="term"><span><strong class="command">sig-validity-interval</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">sig-validity-interval</strong></span> in <a href="Bv9ARM.ch06.html#tuning" title="Tuning">the section called “Tuning”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">transfer-source</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">transfer-source</strong></span> in <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">transfer-source-v6</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">transfer-source-v6</strong></span> in <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">alt-transfer-source</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">alt-transfer-source</strong></span> in <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">alt-transfer-source-v6</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">alt-transfer-source-v6</strong></span> in <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">use-alt-transfer-source</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">use-alt-transfer-source</strong></span> in <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">notify-source</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">notify-source</strong></span> in <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">notify-source-v6</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">notify-source-v6</strong></span> in <a href="Bv9ARM.ch06.html#zone_transfers" title="Zone Transfers">the section called “Zone Transfers”</a>. - </p></dd> -<dt> -<span class="term"><span><strong class="command">min-refresh-time</strong></span>, </span><span class="term"><span><strong class="command">max-refresh-time</strong></span>, </span><span class="term"><span><strong class="command">min-retry-time</strong></span>, </span><span class="term"><span><strong class="command">max-retry-time</strong></span></span> -</dt> -<dd><p> - See the description in <a href="Bv9ARM.ch06.html#tuning" title="Tuning">the section called “Tuning”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">ixfr-from-differences</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">ixfr-from-differences</strong></span> in <a href="Bv9ARM.ch06.html#boolean_options" title="Boolean Options">the section called “Boolean Options”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">key-directory</strong></span></span></dt> -<dd><p> - See the description of - <span><strong class="command">key-directory</strong></span> in <a href="Bv9ARM.ch06.html#options" title="options Statement Definition and - Usage">the section called “<span><strong class="command">options</strong></span> Statement Definition and - Usage”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">multi-master</strong></span></span></dt> -<dd><p> - See the description of <span><strong class="command">multi-master</strong></span> in - <a href="Bv9ARM.ch06.html#boolean_options" title="Boolean Options">the section called “Boolean Options”</a>. - </p></dd> -<dt><span class="term"><span><strong class="command">masterfile-format</strong></span></span></dt> -<dd><p> - See the description of <span><strong class="command">masterfile-format</strong></span> - in <a href="Bv9ARM.ch06.html#tuning" title="Tuning">the section called “Tuning”</a>. - </p></dd> -</dl></div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="dynamic_update_policies"></a>Dynamic Update Policies</h4></div></div></div> -<p> - <acronym class="acronym">BIND</acronym> 9 supports two alternative - methods of granting clients - the right to perform dynamic updates to a zone, - configured by the <span><strong class="command">allow-update</strong></span> - and - <span><strong class="command">update-policy</strong></span> option, - respectively. - </p> -<p> - The <span><strong class="command">allow-update</strong></span> clause works the - same - way as in previous versions of <acronym class="acronym">BIND</acronym>. It grants given clients the - permission to update any record of any name in the zone. - </p> -<p> - The <span><strong class="command">update-policy</strong></span> clause is new - in <acronym class="acronym">BIND</acronym> - 9 and allows more fine-grained control over what updates are - allowed. - A set of rules is specified, where each rule either grants or - denies - permissions for one or more names to be updated by one or more - identities. - If the dynamic update request message is signed (that is, it - includes - either a TSIG or SIG(0) record), the identity of the signer can - be determined. - </p> -<p> - Rules are specified in the <span><strong class="command">update-policy</strong></span> zone - option, and are only meaningful for master zones. When the <span><strong class="command">update-policy</strong></span> statement - is present, it is a configuration error for the <span><strong class="command">allow-update</strong></span> statement - to be present. The <span><strong class="command">update-policy</strong></span> - statement only - examines the signer of a message; the source address is not - relevant. - </p> -<p> - This is how a rule definition looks: - </p> -<pre class="programlisting"> -( <span><strong class="command">grant</strong></span> | <span><strong class="command">deny</strong></span> ) <em class="replaceable"><code>identity</code></em> <em class="replaceable"><code>nametype</code></em> <em class="replaceable"><code>name</code></em> [<span class="optional"> <em class="replaceable"><code>types</code></em> </span>] -</pre> -<p> - Each rule grants or denies privileges. Once a message has - successfully matched a rule, the operation is immediately - granted - or denied and no further rules are examined. A rule is matched - when the signer matches the identity field, the name matches the - name field in accordance with the nametype field, and the type - matches - the types specified in the type field. - </p> -<p> - The identity field specifies a name or a wildcard name. - Normally, this - is the name of the TSIG or SIG(0) key used to sign the update - request. When a - TKEY exchange has been used to create a shared secret, the - identity of the - shared secret is the same as the identity of the key used to - authenticate the - TKEY exchange. When the <em class="replaceable"><code>identity</code></em> field specifies a - wildcard name, it is subject to DNS wildcard expansion, so the - rule will apply - to multiple identities. The <em class="replaceable"><code>identity</code></em> field must - contain a fully-qualified domain name. - </p> -<p> - The <em class="replaceable"><code>nametype</code></em> field has 6 - values: - <code class="varname">name</code>, <code class="varname">subdomain</code>, - <code class="varname">wildcard</code>, <code class="varname">self</code>, - <code class="varname">selfsub</code>, and <code class="varname">selfwild</code>. - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - <code class="varname">name</code> - </p> - </td> -<td> - <p> - Exact-match semantics. This rule matches - when the name being updated is identical - to the contents of the - <em class="replaceable"><code>name</code></em> field. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">subdomain</code> - </p> - </td> -<td> - <p> - This rule matches when the name being updated - is a subdomain of, or identical to, the - contents of the <em class="replaceable"><code>name</code></em> - field. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">wildcard</code> - </p> - </td> -<td> - <p> - The <em class="replaceable"><code>name</code></em> field - is subject to DNS wildcard expansion, and - this rule matches when the name being updated - name is a valid expansion of the wildcard. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">self</code> - </p> - </td> -<td> - <p> - This rule matches when the name being updated - matches the contents of the - <em class="replaceable"><code>identity</code></em> field. - The <em class="replaceable"><code>name</code></em> field - is ignored, but should be the same as the - <em class="replaceable"><code>identity</code></em> field. - The <code class="varname">self</code> nametype is - most useful when allowing using one key per - name to update, where the key has the same - name as the name to be updated. The - <em class="replaceable"><code>identity</code></em> would - be specified as <code class="constant">*</code> (an asterisk) in - this case. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">selfsub</code> - </p> - </td> -<td> - <p> - This rule is similar to <code class="varname">self</code> - except that subdomains of <code class="varname">self</code> - can also be updated. - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="varname">selfwild</code> - </p> - </td> -<td> - <p> - This rule is similar to <code class="varname">self</code> - except that only subdomains of - <code class="varname">self</code> can be updated. - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - In all cases, the <em class="replaceable"><code>name</code></em> - field must - specify a fully-qualified domain name. - </p> -<p> - If no types are explicitly specified, this rule matches all - types except - RRSIG, NS, SOA, and NSEC. Types may be specified by name, including - "ANY" (ANY matches all types except NSEC, which can never be - updated). - Note that when an attempt is made to delete all records - associated with a - name, the rules are checked for each existing record type. - </p> -</div> -</div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2589080"></a>Zone File</h2></div></div></div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="types_of_resource_records_and_when_to_use_them"></a>Types of Resource Records and When to Use Them</h3></div></div></div> -<p> - This section, largely borrowed from RFC 1034, describes the - concept of a Resource Record (RR) and explains when each is used. - Since the publication of RFC 1034, several new RRs have been - identified - and implemented in the DNS. These are also included. - </p> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2589098"></a>Resource Records</h4></div></div></div> -<p> - A domain name identifies a node. Each node has a set of - resource information, which may be empty. The set of resource - information associated with a particular name is composed of - separate RRs. The order of RRs in a set is not significant and - need not be preserved by name servers, resolvers, or other - parts of the DNS. However, sorting of multiple RRs is - permitted for optimization purposes, for example, to specify - that a particular nearby server be tried first. See <a href="Bv9ARM.ch06.html#the_sortlist_statement" title="The sortlist Statement">the section called “The <span><strong class="command">sortlist</strong></span> Statement”</a> and <a href="Bv9ARM.ch06.html#rrset_ordering" title="RRset Ordering">the section called “RRset Ordering”</a>. - </p> -<p> - The components of a Resource Record are: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - owner name - </p> - </td> -<td> - <p> - The domain name where the RR is found. - </p> - </td> -</tr> -<tr> -<td> - <p> - type - </p> - </td> -<td> - <p> - An encoded 16-bit value that specifies - the type of the resource record. - </p> - </td> -</tr> -<tr> -<td> - <p> - TTL - </p> - </td> -<td> - <p> - The time-to-live of the RR. This field - is a 32-bit integer in units of seconds, and is - primarily used by - resolvers when they cache RRs. The TTL describes how - long a RR can - be cached before it should be discarded. - </p> - </td> -</tr> -<tr> -<td> - <p> - class - </p> - </td> -<td> - <p> - An encoded 16-bit value that identifies - a protocol family or instance of a protocol. - </p> - </td> -</tr> -<tr> -<td> - <p> - RDATA - </p> - </td> -<td> - <p> - The resource data. The format of the - data is type (and sometimes class) specific. - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - The following are <span class="emphasis"><em>types</em></span> of valid RRs: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - A - </p> - </td> -<td> - <p> - A host address. In the IN class, this is a - 32-bit IP address. Described in RFC 1035. - </p> - </td> -</tr> -<tr> -<td> - <p> - AAAA - </p> - </td> -<td> - <p> - IPv6 address. Described in RFC 1886. - </p> - </td> -</tr> -<tr> -<td> - <p> - A6 - </p> - </td> -<td> - <p> - IPv6 address. This can be a partial - address (a suffix) and an indirection to the name - where the rest of the - address (the prefix) can be found. Experimental. - Described in RFC 2874. - </p> - </td> -</tr> -<tr> -<td> - <p> - AFSDB - </p> - </td> -<td> - <p> - Location of AFS database servers. - Experimental. Described in RFC 1183. - </p> - </td> -</tr> -<tr> -<td> - <p> - APL - </p> - </td> -<td> - <p> - Address prefix list. Experimental. - Described in RFC 3123. - </p> - </td> -</tr> -<tr> -<td> - <p> - CERT - </p> - </td> -<td> - <p> - Holds a digital certificate. - Described in RFC 2538. - </p> - </td> -</tr> -<tr> -<td> - <p> - CNAME - </p> - </td> -<td> - <p> - Identifies the canonical name of an alias. - Described in RFC 1035. - </p> - </td> -</tr> -<tr> -<td> - <p> - DNAME - </p> - </td> -<td> - <p> - Replaces the domain name specified with - another name to be looked up, effectively aliasing an - entire - subtree of the domain name space rather than a single - record - as in the case of the CNAME RR. - Described in RFC 2672. - </p> - </td> -</tr> -<tr> -<td> - <p> - DNSKEY - </p> - </td> -<td> - <p> - Stores a public key associated with a signed - DNS zone. Described in RFC 4034. - </p> - </td> -</tr> -<tr> -<td> - <p> - DS - </p> - </td> -<td> - <p> - Stores the hash of a public key associated with a - signed DNS zone. Described in RFC 4034. - </p> - </td> -</tr> -<tr> -<td> - <p> - GPOS - </p> - </td> -<td> - <p> - Specifies the global position. Superseded by LOC. - </p> - </td> -</tr> -<tr> -<td> - <p> - HINFO - </p> - </td> -<td> - <p> - Identifies the CPU and OS used by a host. - Described in RFC 1035. - </p> - </td> -</tr> -<tr> -<td> - <p> - ISDN - </p> - </td> -<td> - <p> - Representation of ISDN addresses. - Experimental. Described in RFC 1183. - </p> - </td> -</tr> -<tr> -<td> - <p> - KEY - </p> - </td> -<td> - <p> - Stores a public key associated with a - DNS name. Used in original DNSSEC; replaced - by DNSKEY in DNSSECbis, but still used with - SIG(0). Described in RFCs 2535 and 2931. - </p> - </td> -</tr> -<tr> -<td> - <p> - KX - </p> - </td> -<td> - <p> - Identifies a key exchanger for this - DNS name. Described in RFC 2230. - </p> - </td> -</tr> -<tr> -<td> - <p> - LOC - </p> - </td> -<td> - <p> - For storing GPS info. Described in RFC 1876. - Experimental. - </p> - </td> -</tr> -<tr> -<td> - <p> - MX - </p> - </td> -<td> - <p> - Identifies a mail exchange for the domain with - a 16-bit preference value (lower is better) - followed by the host name of the mail exchange. - Described in RFC 974, RFC 1035. - </p> - </td> -</tr> -<tr> -<td> - <p> - NAPTR - </p> - </td> -<td> - <p> - Name authority pointer. Described in RFC 2915. - </p> - </td> -</tr> -<tr> -<td> - <p> - NSAP - </p> - </td> -<td> - <p> - A network service access point. - Described in RFC 1706. - </p> - </td> -</tr> -<tr> -<td> - <p> - NS - </p> - </td> -<td> - <p> - The authoritative name server for the - domain. Described in RFC 1035. - </p> - </td> -</tr> -<tr> -<td> - <p> - NSEC - </p> - </td> -<td> - <p> - Used in DNSSECbis to securely indicate that - RRs with an owner name in a certain name interval do - not exist in - a zone and indicate what RR types are present for an - existing name. - Described in RFC 4034. - </p> - </td> -</tr> -<tr> -<td> - <p> - NXT - </p> - </td> -<td> - <p> - Used in DNSSEC to securely indicate that - RRs with an owner name in a certain name interval do - not exist in - a zone and indicate what RR types are present for an - existing name. - Used in original DNSSEC; replaced by NSEC in - DNSSECbis. - Described in RFC 2535. - </p> - </td> -</tr> -<tr> -<td> - <p> - PTR - </p> - </td> -<td> - <p> - A pointer to another part of the domain - name space. Described in RFC 1035. - </p> - </td> -</tr> -<tr> -<td> - <p> - PX - </p> - </td> -<td> - <p> - Provides mappings between RFC 822 and X.400 - addresses. Described in RFC 2163. - </p> - </td> -</tr> -<tr> -<td> - <p> - RP - </p> - </td> -<td> - <p> - Information on persons responsible - for the domain. Experimental. Described in RFC 1183. - </p> - </td> -</tr> -<tr> -<td> - <p> - RRSIG - </p> - </td> -<td> - <p> - Contains DNSSECbis signature data. Described - in RFC 4034. - </p> - </td> -</tr> -<tr> -<td> - <p> - RT - </p> - </td> -<td> - <p> - Route-through binding for hosts that - do not have their own direct wide area network - addresses. - Experimental. Described in RFC 1183. - </p> - </td> -</tr> -<tr> -<td> - <p> - SIG - </p> - </td> -<td> - <p> - Contains DNSSEC signature data. Used in - original DNSSEC; replaced by RRSIG in - DNSSECbis, but still used for SIG(0). - Described in RFCs 2535 and 2931. - </p> - </td> -</tr> -<tr> -<td> - <p> - SOA - </p> - </td> -<td> - <p> - Identifies the start of a zone of authority. - Described in RFC 1035. - </p> - </td> -</tr> -<tr> -<td> - <p> - SRV - </p> - </td> -<td> - <p> - Information about well known network - services (replaces WKS). Described in RFC 2782. - </p> - </td> -</tr> -<tr> -<td> - <p> - TXT - </p> - </td> -<td> - <p> - Text records. Described in RFC 1035. - </p> - </td> -</tr> -<tr> -<td> - <p> - WKS - </p> - </td> -<td> - <p> - Information about which well known - network services, such as SMTP, that a domain - supports. Historical. - </p> - </td> -</tr> -<tr> -<td> - <p> - X25 - </p> - </td> -<td> - <p> - Representation of X.25 network addresses. - Experimental. Described in RFC 1183. - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - The following <span class="emphasis"><em>classes</em></span> of resource records - are currently valid in the DNS: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - IN - </p> - </td> -<td> - <p> - The Internet. - </p> - </td> -</tr> -<tr> -<td> - <p> - CH - </p> - </td> -<td> - <p> - Chaosnet, a LAN protocol created at MIT in the - mid-1970s. - Rarely used for its historical purpose, but reused for - BIND's - built-in server information zones, e.g., - <code class="literal">version.bind</code>. - </p> - </td> -</tr> -<tr> -<td> - <p> - HS - </p> - </td> -<td> - <p> - Hesiod, an information service - developed by MIT's Project Athena. It is used to share - information - about various systems databases, such as users, - groups, printers - and so on. - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - The owner name is often implicit, rather than forming an - integral - part of the RR. For example, many name servers internally form - tree - or hash structures for the name space, and chain RRs off nodes. - The remaining RR parts are the fixed header (type, class, TTL) - which is consistent for all RRs, and a variable part (RDATA) - that - fits the needs of the resource being described. - </p> -<p> - The meaning of the TTL field is a time limit on how long an - RR can be kept in a cache. This limit does not apply to - authoritative - data in zones; it is also timed out, but by the refreshing - policies - for the zone. The TTL is assigned by the administrator for the - zone where the data originates. While short TTLs can be used to - minimize caching, and a zero TTL prohibits caching, the - realities - of Internet performance suggest that these times should be on - the - order of days for the typical host. If a change can be - anticipated, - the TTL can be reduced prior to the change to minimize - inconsistency - during the change, and then increased back to its former value - following - the change. - </p> -<p> - The data in the RDATA section of RRs is carried as a combination - of binary strings and domain names. The domain names are - frequently - used as "pointers" to other data in the DNS. - </p> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2590513"></a>Textual expression of RRs</h4></div></div></div> -<p> - RRs are represented in binary form in the packets of the DNS - protocol, and are usually represented in highly encoded form - when - stored in a name server or resolver. In the examples provided - in - RFC 1034, a style similar to that used in master files was - employed - in order to show the contents of RRs. In this format, most RRs - are shown on a single line, although continuation lines are - possible - using parentheses. - </p> -<p> - The start of the line gives the owner of the RR. If a line - begins with a blank, then the owner is assumed to be the same as - that of the previous RR. Blank lines are often included for - readability. - </p> -<p> - Following the owner, we list the TTL, type, and class of the - RR. Class and type use the mnemonics defined above, and TTL is - an integer before the type field. In order to avoid ambiguity - in - parsing, type and class mnemonics are disjoint, TTLs are - integers, - and the type mnemonic is always last. The IN class and TTL - values - are often omitted from examples in the interests of clarity. - </p> -<p> - The resource data or RDATA section of the RR are given using - knowledge of the typical representation for the data. - </p> -<p> - For example, we might show the RRs carried in a message as: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - <code class="literal">ISI.EDU.</code> - </p> - </td> -<td> - <p> - <code class="literal">MX</code> - </p> - </td> -<td> - <p> - <code class="literal">10 VENERA.ISI.EDU.</code> - </p> - </td> -</tr> -<tr> -<td> - <p></p> - </td> -<td> - <p> - <code class="literal">MX</code> - </p> - </td> -<td> - <p> - <code class="literal">10 VAXA.ISI.EDU</code> - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="literal">VENERA.ISI.EDU</code> - </p> - </td> -<td> - <p> - <code class="literal">A</code> - </p> - </td> -<td> - <p> - <code class="literal">128.9.0.32</code> - </p> - </td> -</tr> -<tr> -<td> - <p></p> - </td> -<td> - <p> - <code class="literal">A</code> - </p> - </td> -<td> - <p> - <code class="literal">10.1.0.52</code> - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="literal">VAXA.ISI.EDU</code> - </p> - </td> -<td> - <p> - <code class="literal">A</code> - </p> - </td> -<td> - <p> - <code class="literal">10.2.0.27</code> - </p> - </td> -</tr> -<tr> -<td> - <p></p> - </td> -<td> - <p> - <code class="literal">A</code> - </p> - </td> -<td> - <p> - <code class="literal">128.9.0.33</code> - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - The MX RRs have an RDATA section which consists of a 16-bit - number followed by a domain name. The address RRs use a - standard - IP address format to contain a 32-bit internet address. - </p> -<p> - The above example shows six RRs, with two RRs at each of three - domain names. - </p> -<p> - Similarly we might see: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - <code class="literal">XX.LCS.MIT.EDU.</code> - </p> - </td> -<td> - <p> - <code class="literal">IN A</code> - </p> - </td> -<td> - <p> - <code class="literal">10.0.0.44</code> - </p> - </td> -</tr> -<tr> -<td>�</td> -<td> - <p> - <code class="literal">CH A</code> - </p> - </td> -<td> - <p> - <code class="literal">MIT.EDU. 2420</code> - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - This example shows two addresses for - <code class="literal">XX.LCS.MIT.EDU</code>, each of a different class. - </p> -</div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2591101"></a>Discussion of MX Records</h3></div></div></div> -<p> - As described above, domain servers store information as a - series of resource records, each of which contains a particular - piece of information about a given domain name (which is usually, - but not always, a host). The simplest way to think of a RR is as - a typed pair of data, a domain name matched with a relevant datum, - and stored with some additional type information to help systems - determine when the RR is relevant. - </p> -<p> - MX records are used to control delivery of email. The data - specified in the record is a priority and a domain name. The - priority - controls the order in which email delivery is attempted, with the - lowest number first. If two priorities are the same, a server is - chosen randomly. If no servers at a given priority are responding, - the mail transport agent will fall back to the next largest - priority. - Priority numbers do not have any absolute meaning — they are - relevant - only respective to other MX records for that domain name. The - domain - name given is the machine to which the mail will be delivered. - It <span class="emphasis"><em>must</em></span> have an associated address record - (A or AAAA) — CNAME is not sufficient. - </p> -<p> - For a given domain, if there is both a CNAME record and an - MX record, the MX record is in error, and will be ignored. - Instead, - the mail will be delivered to the server specified in the MX - record - pointed to by the CNAME. - </p> -<p> - For example: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -<col> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - <code class="literal">example.com.</code> - </p> - </td> -<td> - <p> - <code class="literal">IN</code> - </p> - </td> -<td> - <p> - <code class="literal">MX</code> - </p> - </td> -<td> - <p> - <code class="literal">10</code> - </p> - </td> -<td> - <p> - <code class="literal">mail.example.com.</code> - </p> - </td> -</tr> -<tr> -<td> - <p></p> - </td> -<td> - <p> - <code class="literal">IN</code> - </p> - </td> -<td> - <p> - <code class="literal">MX</code> - </p> - </td> -<td> - <p> - <code class="literal">10</code> - </p> - </td> -<td> - <p> - <code class="literal">mail2.example.com.</code> - </p> - </td> -</tr> -<tr> -<td> - <p></p> - </td> -<td> - <p> - <code class="literal">IN</code> - </p> - </td> -<td> - <p> - <code class="literal">MX</code> - </p> - </td> -<td> - <p> - <code class="literal">20</code> - </p> - </td> -<td> - <p> - <code class="literal">mail.backup.org.</code> - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="literal">mail.example.com.</code> - </p> - </td> -<td> - <p> - <code class="literal">IN</code> - </p> - </td> -<td> - <p> - <code class="literal">A</code> - </p> - </td> -<td> - <p> - <code class="literal">10.0.0.1</code> - </p> - </td> -<td> - <p></p> - </td> -</tr> -<tr> -<td> - <p> - <code class="literal">mail2.example.com.</code> - </p> - </td> -<td> - <p> - <code class="literal">IN</code> - </p> - </td> -<td> - <p> - <code class="literal">A</code> - </p> - </td> -<td> - <p> - <code class="literal">10.0.0.2</code> - </p> - </td> -<td> - <p></p> - </td> -</tr> -</tbody> -</table></div> -<p> - Mail delivery will be attempted to <code class="literal">mail.example.com</code> and - <code class="literal">mail2.example.com</code> (in - any order), and if neither of those succeed, delivery to <code class="literal">mail.backup.org</code> will - be attempted. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="Setting_TTLs"></a>Setting TTLs</h3></div></div></div> -<p> - The time-to-live of the RR field is a 32-bit integer represented - in units of seconds, and is primarily used by resolvers when they - cache RRs. The TTL describes how long a RR can be cached before it - should be discarded. The following three types of TTL are - currently - used in a zone file. - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - SOA - </p> - </td> -<td> - <p> - The last field in the SOA is the negative - caching TTL. This controls how long other servers will - cache no-such-domain - (NXDOMAIN) responses from you. - </p> - <p> - The maximum time for - negative caching is 3 hours (3h). - </p> - </td> -</tr> -<tr> -<td> - <p> - $TTL - </p> - </td> -<td> - <p> - The $TTL directive at the top of the - zone file (before the SOA) gives a default TTL for every - RR without - a specific TTL set. - </p> - </td> -</tr> -<tr> -<td> - <p> - RR TTLs - </p> - </td> -<td> - <p> - Each RR can have a TTL as the second - field in the RR, which will control how long other - servers can cache - the it. - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - All of these TTLs default to units of seconds, though units - can be explicitly specified, for example, <code class="literal">1h30m</code>. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2591653"></a>Inverse Mapping in IPv4</h3></div></div></div> -<p> - Reverse name resolution (that is, translation from IP address - to name) is achieved by means of the <span class="emphasis"><em>in-addr.arpa</em></span> domain - and PTR records. Entries in the in-addr.arpa domain are made in - least-to-most significant order, read left to right. This is the - opposite order to the way IP addresses are usually written. Thus, - a machine with an IP address of 10.1.2.3 would have a - corresponding - in-addr.arpa name of - 3.2.1.10.in-addr.arpa. This name should have a PTR resource record - whose data field is the name of the machine or, optionally, - multiple - PTR records if the machine has more than one name. For example, - in the [<span class="optional">example.com</span>] domain: - </p> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p> - <code class="literal">$ORIGIN</code> - </p> - </td> -<td> - <p> - <code class="literal">2.1.10.in-addr.arpa</code> - </p> - </td> -</tr> -<tr> -<td> - <p> - <code class="literal">3</code> - </p> - </td> -<td> - <p> - <code class="literal">IN PTR foo.example.com.</code> - </p> - </td> -</tr> -</tbody> -</table></div> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - The <span><strong class="command">$ORIGIN</strong></span> lines in the examples - are for providing context to the examples only — they do not - necessarily - appear in the actual usage. They are only used here to indicate - that the example is relative to the listed origin. - </p> -</div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2591848"></a>Other Zone File Directives</h3></div></div></div> -<p> - The Master File Format was initially defined in RFC 1035 and - has subsequently been extended. While the Master File Format - itself - is class independent all records in a Master File must be of the - same - class. - </p> -<p> - Master File Directives include <span><strong class="command">$ORIGIN</strong></span>, <span><strong class="command">$INCLUDE</strong></span>, - and <span><strong class="command">$TTL.</strong></span> - </p> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2591870"></a>The <span><strong class="command">$ORIGIN</strong></span> Directive</h4></div></div></div> -<p> - Syntax: <span><strong class="command">$ORIGIN</strong></span> - <em class="replaceable"><code>domain-name</code></em> - [<span class="optional"><em class="replaceable"><code>comment</code></em></span>] - </p> -<p><span><strong class="command">$ORIGIN</strong></span> - sets the domain name that will be appended to any - unqualified records. When a zone is first read in there - is an implicit <span><strong class="command">$ORIGIN</strong></span> - <<code class="varname">zone-name</code>><span><strong class="command">.</strong></span> - The current <span><strong class="command">$ORIGIN</strong></span> is appended to - the domain specified in the <span><strong class="command">$ORIGIN</strong></span> - argument if it is not absolute. - </p> -<pre class="programlisting"> -$ORIGIN example.com. -WWW CNAME MAIN-SERVER -</pre> -<p> - is equivalent to - </p> -<pre class="programlisting"> -WWW.EXAMPLE.COM. CNAME MAIN-SERVER.EXAMPLE.COM. -</pre> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2592000"></a>The <span><strong class="command">$INCLUDE</strong></span> Directive</h4></div></div></div> -<p> - Syntax: <span><strong class="command">$INCLUDE</strong></span> - <em class="replaceable"><code>filename</code></em> - [<span class="optional"> -<em class="replaceable"><code>origin</code></em> </span>] - [<span class="optional"> <em class="replaceable"><code>comment</code></em> </span>] - </p> -<p> - Read and process the file <code class="filename">filename</code> as - if it were included into the file at this point. If <span><strong class="command">origin</strong></span> is - specified the file is processed with <span><strong class="command">$ORIGIN</strong></span> set - to that value, otherwise the current <span><strong class="command">$ORIGIN</strong></span> is - used. - </p> -<p> - The origin and the current domain name - revert to the values they had prior to the <span><strong class="command">$INCLUDE</strong></span> once - the file has been read. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - RFC 1035 specifies that the current origin should be restored - after - an <span><strong class="command">$INCLUDE</strong></span>, but it is silent - on whether the current - domain name should also be restored. BIND 9 restores both of - them. - This could be construed as a deviation from RFC 1035, a - feature, or both. - </p> -</div> -</div> -<div class="sect3" lang="en"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2592069"></a>The <span><strong class="command">$TTL</strong></span> Directive</h4></div></div></div> -<p> - Syntax: <span><strong class="command">$TTL</strong></span> - <em class="replaceable"><code>default-ttl</code></em> - [<span class="optional"> -<em class="replaceable"><code>comment</code></em> </span>] - </p> -<p> - Set the default Time To Live (TTL) for subsequent records - with undefined TTLs. Valid TTLs are of the range 0-2147483647 - seconds. - </p> -<p><span><strong class="command">$TTL</strong></span> - is defined in RFC 2308. - </p> -</div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2592173"></a><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</h3></div></div></div> -<p> - Syntax: <span><strong class="command">$GENERATE</strong></span> - <em class="replaceable"><code>range</code></em> - <em class="replaceable"><code>lhs</code></em> - [<span class="optional"><em class="replaceable"><code>ttl</code></em></span>] - [<span class="optional"><em class="replaceable"><code>class</code></em></span>] - <em class="replaceable"><code>type</code></em> - <em class="replaceable"><code>rhs</code></em> - [<span class="optional"><em class="replaceable"><code>comment</code></em></span>] - </p> -<p><span><strong class="command">$GENERATE</strong></span> - is used to create a series of resource records that only - differ from each other by an - iterator. <span><strong class="command">$GENERATE</strong></span> can be used to - easily generate the sets of records required to support - sub /24 reverse delegations described in RFC 2317: - Classless IN-ADDR.ARPA delegation. - </p> -<pre class="programlisting">$ORIGIN 0.0.192.IN-ADDR.ARPA. -$GENERATE 1-2 0 NS SERVER$.EXAMPLE. -$GENERATE 1-127 $ CNAME $.0</pre> -<p> - is equivalent to - </p> -<pre class="programlisting">0.0.0.192.IN-ADDR.ARPA NS SERVER1.EXAMPLE. -0.0.0.192.IN-ADDR.ARPA. NS SERVER2.EXAMPLE. -1.0.0.192.IN-ADDR.ARPA. CNAME 1.0.0.0.192.IN-ADDR.ARPA. -2.0.0.192.IN-ADDR.ARPA. CNAME 2.0.0.0.192.IN-ADDR.ARPA. -... -127.0.0.192.IN-ADDR.ARPA. CNAME 127.0.0.0.192.IN-ADDR.ARPA. -</pre> -<div class="informaltable"><table border="1"> -<colgroup> -<col> -<col> -</colgroup> -<tbody> -<tr> -<td> - <p><span><strong class="command">range</strong></span></p> - </td> -<td> - <p> - This can be one of two forms: start-stop - or start-stop/step. If the first form is used, then step - is set to - 1. All of start, stop and step must be positive. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">lhs</strong></span></p> - </td> -<td> - <p>This - describes the owner name of the resource records - to be created. Any single <span><strong class="command">$</strong></span> - (dollar sign) - symbols within the <span><strong class="command">lhs</strong></span> side - are replaced by the iterator value. - - To get a $ in the output, you need to escape the - <span><strong class="command">$</strong></span> using a backslash - <span><strong class="command">\</strong></span>, - e.g. <span><strong class="command">\$</strong></span>. The - <span><strong class="command">$</strong></span> may optionally be followed - by modifiers which change the offset from the - iterator, field width and base. - - Modifiers are introduced by a - <span><strong class="command">{</strong></span> (left brace) immediately following the - <span><strong class="command">$</strong></span> as - <span><strong class="command">${offset[,width[,base]]}</strong></span>. - For example, <span><strong class="command">${-20,3,d}</strong></span> - subtracts 20 from the current value, prints the - result as a decimal in a zero-padded field of - width 3. - - Available output forms are decimal - (<span><strong class="command">d</strong></span>), octal - (<span><strong class="command">o</strong></span>) and hexadecimal - (<span><strong class="command">x</strong></span> or <span><strong class="command">X</strong></span> - for uppercase). The default modifier is - <span><strong class="command">${0,0,d}</strong></span>. If the - <span><strong class="command">lhs</strong></span> is not absolute, the - current <span><strong class="command">$ORIGIN</strong></span> is appended - to the name. - </p> - <p> - For compatibility with earlier versions, <span><strong class="command">$$</strong></span> is still - recognized as indicating a literal $ in the output. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">ttl</strong></span></p> - </td> -<td> - <p> - Specifies the time-to-live of the generated records. If - not specified this will be inherited using the - normal ttl inheritance rules. - </p> - <p><span><strong class="command">class</strong></span> - and <span><strong class="command">ttl</strong></span> can be - entered in either order. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">class</strong></span></p> - </td> -<td> - <p> - Specifies the class of the generated records. - This must match the zone class if it is - specified. - </p> - <p><span><strong class="command">class</strong></span> - and <span><strong class="command">ttl</strong></span> can be - entered in either order. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">type</strong></span></p> - </td> -<td> - <p> - At present the only supported types are - PTR, CNAME, DNAME, A, AAAA and NS. - </p> - </td> -</tr> -<tr> -<td> - <p><span><strong class="command">rhs</strong></span></p> - </td> -<td> - <p> - <span><strong class="command">rhs</strong></span> is a domain name. It is processed - similarly to lhs. - </p> - </td> -</tr> -</tbody> -</table></div> -<p> - The <span><strong class="command">$GENERATE</strong></span> directive is a <acronym class="acronym">BIND</acronym> extension - and not part of the standard zone file format. - </p> -<p> - BIND 8 does not support the optional TTL and CLASS fields. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="zonefile_format"></a>Additional File Formats</h3></div></div></div> -<p> - In addition to the standard textual format, BIND 9 - supports the ability to read or dump to zone files in - other formats. The <code class="constant">raw</code> format is - currently available as an additional format. It is a - binary format representing BIND 9's internal data - structure directly, thereby remarkably improving the - loading time. - </p> -<p> - For a primary server, a zone file in the - <code class="constant">raw</code> format is expected to be - generated from a textual zone file by the - <span><strong class="command">named-compilezone</strong></span> command. For a - secondary server or for a dynamic zone, it is automatically - generated (if this format is specified by the - <span><strong class="command">masterfile-format</strong></span> option) when - <span><strong class="command">named</strong></span> dumps the zone contents after - zone transfer or when applying prior updates. - </p> -<p> - If a zone file in a binary format needs manual modification, - it first must be converted to a textual form by the - <span><strong class="command">named-compilezone</strong></span> command. All - necessary modification should go to the text file, which - should then be converted to the binary form by the - <span><strong class="command">named-compilezone</strong></span> command again. - </p> -<p> - Although the <code class="constant">raw</code> format uses the - network byte order and avoids architecture-dependent - data alignment so that it is as much portable as - possible, it is primarily expected to be used inside - the same single system. In order to export a zone - file in the <code class="constant">raw</code> format or make a - portable backup of the file, it is recommended to - convert the file to the standard textual representation. - </p> -</div> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="Bv9ARM.ch05.html">Prev</a>�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch07.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">Chapter�5.�The <acronym class="acronym">BIND</acronym> 9 Lightweight Resolver�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�Chapter�7.�<acronym class="acronym">BIND</acronym> 9 Security Considerations</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch07.html b/contrib/bind9/doc/arm/Bv9ARM.ch07.html deleted file mode 100644 index 96acfe6..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.ch07.html +++ /dev/null @@ -1,253 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: Bv9ARM.ch07.html,v 1.75.18.63 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>Chapter�7.�BIND 9 Security Considerations</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="prev" href="Bv9ARM.ch06.html" title="Chapter�6.�BIND 9 Configuration Reference"> -<link rel="next" href="Bv9ARM.ch08.html" title="Chapter�8.�Troubleshooting"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">Chapter�7.�<acronym class="acronym">BIND</acronym> 9 Security Considerations</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="Bv9ARM.ch06.html">Prev</a>�</td> -<th width="60%" align="center">�</th> -<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch08.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="chapter" lang="en"> -<div class="titlepage"><div><div><h2 class="title"> -<a name="Bv9ARM.ch07"></a>Chapter�7.�<acronym class="acronym">BIND</acronym> 9 Security Considerations</h2></div></div></div> -<div class="toc"> -<p><b>Table of Contents</b></p> -<dl> -<dt><span class="sect1"><a href="Bv9ARM.ch07.html#Access_Control_Lists">Access Control Lists</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2592714"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2592791">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2592851">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch07.html#dynamic_update_security">Dynamic Update Security</a></span></dt> -</dl> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="Access_Control_Lists"></a>Access Control Lists</h2></div></div></div> -<p> - Access Control Lists (ACLs), are address match lists that - you can set up and nickname for future use in <span><strong class="command">allow-notify</strong></span>, - <span><strong class="command">allow-query</strong></span>, <span><strong class="command">allow-recursion</strong></span>, - <span><strong class="command">blackhole</strong></span>, <span><strong class="command">allow-transfer</strong></span>, - etc. - </p> -<p> - Using ACLs allows you to have finer control over who can access - your name server, without cluttering up your config files with huge - lists of IP addresses. - </p> -<p> - It is a <span class="emphasis"><em>good idea</em></span> to use ACLs, and to - control access to your server. Limiting access to your server by - outside parties can help prevent spoofing and denial of service (DoS) attacks against - your server. - </p> -<p> - Here is an example of how to properly apply ACLs: - </p> -<pre class="programlisting"> -// Set up an ACL named "bogusnets" that will block RFC1918 space -// and some reserved space, which is commonly used in spoofing attacks. -acl bogusnets { - 0.0.0.0/8; 1.0.0.0/8; 2.0.0.0/8; 192.0.2.0/24; 224.0.0.0/3; - 10.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16; -}; - -// Set up an ACL called our-nets. Replace this with the real IP numbers. -acl our-nets { x.x.x.x/24; x.x.x.x/21; }; -options { - ... - ... - allow-query { our-nets; }; - allow-recursion { our-nets; }; - ... - blackhole { bogusnets; }; - ... -}; - -zone "example.com" { - type master; - file "m/example.com"; - allow-query { any; }; -}; -</pre> -<p> - This allows recursive queries of the server from the outside - unless recursion has been previously disabled. - </p> -<p> - For more information on how to use ACLs to protect your server, - see the <span class="emphasis"><em>AUSCERT</em></span> advisory at: - </p> -<p> - <a href="ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos" target="_top">ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos</a> - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2592714"></a><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span> -</h2></div></div></div> -<p> - On UNIX servers, it is possible to run <acronym class="acronym">BIND</acronym> in a <span class="emphasis"><em>chrooted</em></span> environment - (using the <span><strong class="command">chroot()</strong></span> function) by specifying the "<code class="option">-t</code>" - option. This can help improve system security by placing <acronym class="acronym">BIND</acronym> in - a "sandbox", which will limit the damage done if a server is - compromised. - </p> -<p> - Another useful feature in the UNIX version of <acronym class="acronym">BIND</acronym> is the - ability to run the daemon as an unprivileged user ( <code class="option">-u</code> <em class="replaceable"><code>user</code></em> ). - We suggest running as an unprivileged user when using the <span><strong class="command">chroot</strong></span> feature. - </p> -<p> - Here is an example command line to load <acronym class="acronym">BIND</acronym> in a <span><strong class="command">chroot</strong></span> sandbox, - <span><strong class="command">/var/named</strong></span>, and to run <span><strong class="command">named</strong></span> <span><strong class="command">setuid</strong></span> to - user 202: - </p> -<p> - <strong class="userinput"><code>/usr/local/bin/named -u 202 -t /var/named</code></strong> - </p> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2592791"></a>The <span><strong class="command">chroot</strong></span> Environment</h3></div></div></div> -<p> - In order for a <span><strong class="command">chroot</strong></span> environment - to - work properly in a particular directory - (for example, <code class="filename">/var/named</code>), - you will need to set up an environment that includes everything - <acronym class="acronym">BIND</acronym> needs to run. - From <acronym class="acronym">BIND</acronym>'s point of view, <code class="filename">/var/named</code> is - the root of the filesystem. You will need to adjust the values of - options like - like <span><strong class="command">directory</strong></span> and <span><strong class="command">pid-file</strong></span> to account - for this. - </p> -<p> - Unlike with earlier versions of BIND, you typically will - <span class="emphasis"><em>not</em></span> need to compile <span><strong class="command">named</strong></span> - statically nor install shared libraries under the new root. - However, depending on your operating system, you may need - to set up things like - <code class="filename">/dev/zero</code>, - <code class="filename">/dev/random</code>, - <code class="filename">/dev/log</code>, and - <code class="filename">/etc/localtime</code>. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2592851"></a>Using the <span><strong class="command">setuid</strong></span> Function</h3></div></div></div> -<p> - Prior to running the <span><strong class="command">named</strong></span> daemon, - use - the <span><strong class="command">touch</strong></span> utility (to change file - access and - modification times) or the <span><strong class="command">chown</strong></span> - utility (to - set the user id and/or group id) on files - to which you want <acronym class="acronym">BIND</acronym> - to write. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> - Note that if the <span><strong class="command">named</strong></span> daemon is running as an - unprivileged user, it will not be able to bind to new restricted - ports if the server is reloaded. - </div> -</div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="dynamic_update_security"></a>Dynamic Update Security</h2></div></div></div> -<p> - Access to the dynamic - update facility should be strictly limited. In earlier versions of - <acronym class="acronym">BIND</acronym>, the only way to do this was - based on the IP - address of the host requesting the update, by listing an IP address - or - network prefix in the <span><strong class="command">allow-update</strong></span> - zone option. - This method is insecure since the source address of the update UDP - packet - is easily forged. Also note that if the IP addresses allowed by the - <span><strong class="command">allow-update</strong></span> option include the - address of a slave - server which performs forwarding of dynamic updates, the master can - be - trivially attacked by sending the update to the slave, which will - forward it to the master with its own source IP address causing the - master to approve it without question. - </p> -<p> - For these reasons, we strongly recommend that updates be - cryptographically authenticated by means of transaction signatures - (TSIG). That is, the <span><strong class="command">allow-update</strong></span> - option should - list only TSIG key names, not IP addresses or network - prefixes. Alternatively, the new <span><strong class="command">update-policy</strong></span> - option can be used. - </p> -<p> - Some sites choose to keep all dynamically-updated DNS data - in a subdomain and delegate that subdomain to a separate zone. This - way, the top-level zone containing critical data such as the IP - addresses - of public web and mail servers need not allow dynamic update at - all. - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="Bv9ARM.ch06.html">Prev</a>�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch08.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">Chapter�6.�<acronym class="acronym">BIND</acronym> 9 Configuration Reference�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�Chapter�8.�Troubleshooting</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch08.html b/contrib/bind9/doc/arm/Bv9ARM.ch08.html deleted file mode 100644 index a475378..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.ch08.html +++ /dev/null @@ -1,139 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: Bv9ARM.ch08.html,v 1.75.18.64 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>Chapter�8.�Troubleshooting</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="prev" href="Bv9ARM.ch07.html" title="Chapter�7.�BIND 9 Security Considerations"> -<link rel="next" href="Bv9ARM.ch09.html" title="Appendix�A.�Appendices"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">Chapter�8.�Troubleshooting</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="Bv9ARM.ch07.html">Prev</a>�</td> -<th width="60%" align="center">�</th> -<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch09.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="chapter" lang="en"> -<div class="titlepage"><div><div><h2 class="title"> -<a name="Bv9ARM.ch08"></a>Chapter�8.�Troubleshooting</h2></div></div></div> -<div class="toc"> -<p><b>Table of Contents</b></p> -<dl> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2592999">Common Problems</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2593004">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2593016">Incrementing and Changing the Serial Number</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2593033">Where Can I Get Help?</a></span></dt> -</dl> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2592999"></a>Common Problems</h2></div></div></div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2593004"></a>It's not working; how can I figure out what's wrong?</h3></div></div></div> -<p> - The best solution to solving installation and - configuration issues is to take preventative measures by setting - up logging files beforehand. The log files provide a - source of hints and information that can be used to figure out - what went wrong and how to fix the problem. - </p> -</div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2593016"></a>Incrementing and Changing the Serial Number</h2></div></div></div> -<p> - Zone serial numbers are just numbers — they aren't - date related. A lot of people set them to a number that - represents a date, usually of the form YYYYMMDDRR. - Occasionally they will make a mistake and set them to a - "date in the future" then try to correct them by setting - them to the "current date". This causes problems because - serial numbers are used to indicate that a zone has been - updated. If the serial number on the slave server is - lower than the serial number on the master, the slave - server will attempt to update its copy of the zone. - </p> -<p> - Setting the serial number to a lower number on the master - server than the slave server means that the slave will not perform - updates to its copy of the zone. - </p> -<p> - The solution to this is to add 2147483647 (2^31-1) to the - number, reload the zone and make sure all slaves have updated to - the new zone serial number, then reset the number to what you want - it to be, and reload the zone again. - </p> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2593033"></a>Where Can I Get Help?</h2></div></div></div> -<p> - The Internet Systems Consortium - (<acronym class="acronym">ISC</acronym>) offers a wide range - of support and service agreements for <acronym class="acronym">BIND</acronym> and <acronym class="acronym">DHCP</acronym> servers. Four - levels of premium support are available and each level includes - support for all <acronym class="acronym">ISC</acronym> programs, - significant discounts on products - and training, and a recognized priority on bug fixes and - non-funded feature requests. In addition, <acronym class="acronym">ISC</acronym> offers a standard - support agreement package which includes services ranging from bug - fix announcements to remote support. It also includes training in - <acronym class="acronym">BIND</acronym> and <acronym class="acronym">DHCP</acronym>. - </p> -<p> - To discuss arrangements for support, contact - <a href="mailto:info@isc.org" target="_top">info@isc.org</a> or visit the - <acronym class="acronym">ISC</acronym> web page at - <a href="http://www.isc.org/services/support/" target="_top">http://www.isc.org/services/support/</a> - to read more. - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="Bv9ARM.ch07.html">Prev</a>�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch09.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">Chapter�7.�<acronym class="acronym">BIND</acronym> 9 Security Considerations�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�Appendix�A.�Appendices</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch09.html b/contrib/bind9/doc/arm/Bv9ARM.ch09.html deleted file mode 100644 index 3c2e779..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.ch09.html +++ /dev/null @@ -1,630 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: Bv9ARM.ch09.html,v 1.75.18.66 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>Appendix�A.�Appendices</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="prev" href="Bv9ARM.ch08.html" title="Chapter�8.�Troubleshooting"> -<link rel="next" href="Bv9ARM.ch10.html" title="Manual pages"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">Appendix�A.�Appendices</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td> -<th width="60%" align="center">�</th> -<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="appendix" lang="en"> -<div class="titlepage"><div><div><h2 class="title"> -<a name="Bv9ARM.ch09"></a>Appendix�A.�Appendices</h2></div></div></div> -<div class="toc"> -<p><b>Table of Contents</b></p> -<dl> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2593300">Acknowledgments</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2593472">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2596683">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt> -</dl></dd> -</dl> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2593300"></a>Acknowledgments</h2></div></div></div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="historical_dns_information"></a>A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym> -</h3></div></div></div> -<p> - Although the "official" beginning of the Domain Name - System occurred in 1984 with the publication of RFC 920, the - core of the new system was described in 1983 in RFCs 882 and - 883. From 1984 to 1987, the ARPAnet (the precursor to today's - Internet) became a testbed of experimentation for developing the - new naming/addressing scheme in a rapidly expanding, - operational network environment. New RFCs were written and - published in 1987 that modified the original documents to - incorporate improvements based on the working model. RFC 1034, - "Domain Names-Concepts and Facilities", and RFC 1035, "Domain - Names-Implementation and Specification" were published and - became the standards upon which all <acronym class="acronym">DNS</acronym> implementations are - built. - </p> -<p> - The first working domain name server, called "Jeeves", was - written in 1983-84 by Paul Mockapetris for operation on DEC - Tops-20 - machines located at the University of Southern California's - Information - Sciences Institute (USC-ISI) and SRI International's Network - Information - Center (SRI-NIC). A <acronym class="acronym">DNS</acronym> server for - Unix machines, the Berkeley Internet - Name Domain (<acronym class="acronym">BIND</acronym>) package, was - written soon after by a group of - graduate students at the University of California at Berkeley - under - a grant from the US Defense Advanced Research Projects - Administration - (DARPA). - </p> -<p> - Versions of <acronym class="acronym">BIND</acronym> through - 4.8.3 were maintained by the Computer - Systems Research Group (CSRG) at UC Berkeley. Douglas Terry, Mark - Painter, David Riggle and Songnian Zhou made up the initial <acronym class="acronym">BIND</acronym> - project team. After that, additional work on the software package - was done by Ralph Campbell. Kevin Dunlap, a Digital Equipment - Corporation - employee on loan to the CSRG, worked on <acronym class="acronym">BIND</acronym> for 2 years, from 1985 - to 1987. Many other people also contributed to <acronym class="acronym">BIND</acronym> development - during that time: Doug Kingston, Craig Partridge, Smoot - Carl-Mitchell, - Mike Muuss, Jim Bloom and Mike Schwartz. <acronym class="acronym">BIND</acronym> maintenance was subsequently - handled by Mike Karels and �ivind Kure. - </p> -<p> - <acronym class="acronym">BIND</acronym> versions 4.9 and 4.9.1 were - released by Digital Equipment - Corporation (now Compaq Computer Corporation). Paul Vixie, then - a DEC employee, became <acronym class="acronym">BIND</acronym>'s - primary caretaker. He was assisted - by Phil Almquist, Robert Elz, Alan Barrett, Paul Albitz, Bryan - Beecher, Andrew - Partan, Andy Cherenson, Tom Limoncelli, Berthold Paffrath, Fuat - Baran, Anant Kumar, Art Harkin, Win Treese, Don Lewis, Christophe - Wolfhugel, and others. - </p> -<p> - In 1994, <acronym class="acronym">BIND</acronym> version 4.9.2 was sponsored by - Vixie Enterprises. Paul - Vixie became <acronym class="acronym">BIND</acronym>'s principal - architect/programmer. - </p> -<p> - <acronym class="acronym">BIND</acronym> versions from 4.9.3 onward - have been developed and maintained - by the Internet Systems Consortium and its predecessor, - the Internet Software Consortium, with support being provided - by ISC's sponsors. - </p> -<p> - As co-architects/programmers, Bob Halley and - Paul Vixie released the first production-ready version of - <acronym class="acronym">BIND</acronym> version 8 in May 1997. - </p> -<p> - BIND version 9 was released in September 2000 and is a - major rewrite of nearly all aspects of the underlying - BIND architecture. - </p> -<p> - BIND version 4 is officially deprecated and BIND version - 8 development is considered maintenance-only in favor - of BIND version 9. No additional development is done - on BIND version 4 or BIND version 8 other than for - security-related patches. - </p> -<p> - <acronym class="acronym">BIND</acronym> development work is made - possible today by the sponsorship - of several corporations, and by the tireless work efforts of - numerous individuals. - </p> -</div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="id2593472"></a>General <acronym class="acronym">DNS</acronym> Reference Information</h2></div></div></div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="ipv6addresses"></a>IPv6 addresses (AAAA)</h3></div></div></div> -<p> - IPv6 addresses are 128-bit identifiers for interfaces and - sets of interfaces which were introduced in the <acronym class="acronym">DNS</acronym> to facilitate - scalable Internet routing. There are three types of addresses: <span class="emphasis"><em>Unicast</em></span>, - an identifier for a single interface; - <span class="emphasis"><em>Anycast</em></span>, - an identifier for a set of interfaces; and <span class="emphasis"><em>Multicast</em></span>, - an identifier for a set of interfaces. Here we describe the global - Unicast address scheme. For more information, see RFC 3587, - "Global Unicast Address Format." - </p> -<p> - IPv6 unicast addresses consist of a - <span class="emphasis"><em>global routing prefix</em></span>, a - <span class="emphasis"><em>subnet identifier</em></span>, and an - <span class="emphasis"><em>interface identifier</em></span>. - </p> -<p> - The global routing prefix is provided by the - upstream provider or ISP, and (roughly) corresponds to the - IPv4 <span class="emphasis"><em>network</em></span> section - of the address range. - - The subnet identifier is for local subnetting, much the - same as subnetting an - IPv4 /16 network into /24 subnets. - - The interface identifier is the address of an individual - interface on a given network; in IPv6, addresses belong to - interfaces rather than to machines. - </p> -<p> - The subnetting capability of IPv6 is much more flexible than - that of IPv4: subnetting can be carried out on bit boundaries, - in much the same way as Classless InterDomain Routing - (CIDR), and the DNS PTR representation ("nibble" format) - makes setting up reverse zones easier. - </p> -<p> - The Interface Identifier must be unique on the local link, - and is usually generated automatically by the IPv6 - implementation, although it is usually possible to - override the default setting if necessary. A typical IPv6 - address might look like: - <span><strong class="command">2001:db8:201:9:a00:20ff:fe81:2b32</strong></span> - </p> -<p> - IPv6 address specifications often contain long strings - of zeros, so the architects have included a shorthand for - specifying - them. The double colon (`::') indicates the longest possible - string - of zeros that can fit, and can be used only once in an address. - </p> -</div> -</div> -<div class="sect1" lang="en"> -<div class="titlepage"><div><div><h2 class="title" style="clear: both"> -<a name="bibliography"></a>Bibliography (and Suggested Reading)</h2></div></div></div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="rfcs"></a>Request for Comments (RFCs)</h3></div></div></div> -<p> - Specification documents for the Internet protocol suite, including - the <acronym class="acronym">DNS</acronym>, are published as part of - the Request for Comments (RFCs) - series of technical notes. The standards themselves are defined - by the Internet Engineering Task Force (IETF) and the Internet - Engineering Steering Group (IESG). RFCs can be obtained online via FTP at: - </p> -<p> - <a href="ftp://www.isi.edu/in-notes/" target="_top"> - ftp://www.isi.edu/in-notes/RFC<em class="replaceable"><code>xxxx</code></em>.txt - </a> - </p> -<p> - (where <em class="replaceable"><code>xxxx</code></em> is - the number of the RFC). RFCs are also available via the Web at: - </p> -<p> - <a href="http://www.ietf.org/rfc/" target="_top">http://www.ietf.org/rfc/</a>. - </p> -<div class="bibliography"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2593659"></a>Bibliography</h4></div></div></div> -<div class="bibliodiv"> -<h3 class="title">Standards</h3> -<div class="biblioentry"> -<a name="id2593670"></a><p>[<abbr class="abbrev">RFC974</abbr>] <span class="author"><span class="firstname">C.</span> <span class="surname">Partridge</span>. </span><span class="title"><i>Mail Routing and the Domain System</i>. </span><span class="pubdate">January 1986. </span></p> -</div> -<div class="biblioentry"> -<a name="id2593693"></a><p>[<abbr class="abbrev">RFC1034</abbr>] <span class="author"><span class="firstname">P.V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Concepts and Facilities</i>. </span><span class="pubdate">November 1987. </span></p> -</div> -<div class="biblioentry"> -<a name="id2593717"></a><p>[<abbr class="abbrev">RFC1035</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>Domain Names — Implementation and - Specification</i>. </span><span class="pubdate">November 1987. </span></p> -</div> -</div> -<div class="bibliodiv"> -<h3 class="title"> -<a name="proposed_standards"></a>Proposed Standards</h3> -<div class="biblioentry"> -<a name="id2593753"></a><p>[<abbr class="abbrev">RFC2181</abbr>] <span class="author"><span class="firstname">R., R. Bush</span> <span class="surname">Elz</span>. </span><span class="title"><i>Clarifications to the <acronym class="acronym">DNS</acronym> - Specification</i>. </span><span class="pubdate">July 1997. </span></p> -</div> -<div class="biblioentry"> -<a name="id2593780"></a><p>[<abbr class="abbrev">RFC2308</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Andrews</span>. </span><span class="title"><i>Negative Caching of <acronym class="acronym">DNS</acronym> - Queries</i>. </span><span class="pubdate">March 1998. </span></p> -</div> -<div class="biblioentry"> -<a name="id2593805"></a><p>[<abbr class="abbrev">RFC1995</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Ohta</span>. </span><span class="title"><i>Incremental Zone Transfer in <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">August 1996. </span></p> -</div> -<div class="biblioentry"> -<a name="id2593830"></a><p>[<abbr class="abbrev">RFC1996</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A Mechanism for Prompt Notification of Zone Changes</i>. </span><span class="pubdate">August 1996. </span></p> -</div> -<div class="biblioentry"> -<a name="id2593853"></a><p>[<abbr class="abbrev">RFC2136</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">Y.</span> <span class="surname">Rekhter</span>, and <span class="firstname">J.</span> <span class="surname">Bound</span>. </span><span class="title"><i>Dynamic Updates in the Domain Name System</i>. </span><span class="pubdate">April 1997. </span></p> -</div> -<div class="biblioentry"> -<a name="id2593909"></a><p>[<abbr class="abbrev">RFC2671</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Extension Mechanisms for DNS (EDNS0)</i>. </span><span class="pubdate">August 1997. </span></p> -</div> -<div class="biblioentry"> -<a name="id2593936"></a><p>[<abbr class="abbrev">RFC2672</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Non-Terminal DNS Name Redirection</i>. </span><span class="pubdate">August 1999. </span></p> -</div> -<div class="biblioentry"> -<a name="id2593962"></a><p>[<abbr class="abbrev">RFC2845</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>, <span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, and <span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secret Key Transaction Authentication for <acronym class="acronym">DNS</acronym> (TSIG)</i>. </span><span class="pubdate">May 2000. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594024"></a><p>[<abbr class="abbrev">RFC2930</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secret Key Establishment for DNS (TKEY RR)</i>. </span><span class="pubdate">September 2000. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594054"></a><p>[<abbr class="abbrev">RFC2931</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DNS Request and Transaction Signatures (SIG(0)s)</i>. </span><span class="pubdate">September 2000. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594084"></a><p>[<abbr class="abbrev">RFC3007</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Secure Domain Name System (DNS) Dynamic Update</i>. </span><span class="pubdate">November 2000. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594110"></a><p>[<abbr class="abbrev">RFC3645</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Kwan</span>, <span class="firstname">P.</span> <span class="surname">Garg</span>, <span class="firstname">J.</span> <span class="surname">Gilroy</span>, <span class="firstname">L.</span> <span class="surname">Esibov</span>, <span class="firstname">J.</span> <span class="surname">Westhead</span>, and <span class="firstname">R.</span> <span class="surname">Hall</span>. </span><span class="title"><i>Generic Security Service Algorithm for Secret - Key Transaction Authentication for DNS - (GSS-TSIG)</i>. </span><span class="pubdate">October 2003. </span></p> -</div> -</div> -<div class="bibliodiv"> -<h3 class="title"> -<acronym class="acronym">DNS</acronym> Security Proposed Standards</h3> -<div class="biblioentry"> -<a name="id2594193"></a><p>[<abbr class="abbrev">RFC3225</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Conrad</span>. </span><span class="title"><i>Indicating Resolver Support of DNSSEC</i>. </span><span class="pubdate">December 2001. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594288"></a><p>[<abbr class="abbrev">RFC3833</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Atkins</span> and <span class="firstname">R.</span> <span class="surname">Austein</span>. </span><span class="title"><i>Threat Analysis of the Domain Name System (DNS)</i>. </span><span class="pubdate">August 2004. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594324"></a><p>[<abbr class="abbrev">RFC4033</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>DNS Security Introduction and Requirements</i>. </span><span class="pubdate">March 2005. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594389"></a><p>[<abbr class="abbrev">RFC4044</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Resource Records for the DNS Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594454"></a><p>[<abbr class="abbrev">RFC4035</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Arends</span>, <span class="firstname">R.</span> <span class="surname">Austein</span>, <span class="firstname">M.</span> <span class="surname">Larson</span>, <span class="firstname">D.</span> <span class="surname">Massey</span>, and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Protocol Modifications for the DNS - Security Extensions</i>. </span><span class="pubdate">March 2005. </span></p> -</div> -</div> -<div class="bibliodiv"> -<h3 class="title">Other Important RFCs About <acronym class="acronym">DNS</acronym> - Implementation</h3> -<div class="biblioentry"> -<a name="id2594596"></a><p>[<abbr class="abbrev">RFC1535</abbr>] <span class="author"><span class="firstname">E.</span> <span class="surname">Gavron</span>. </span><span class="title"><i>A Security Problem and Proposed Correction With Widely - Deployed <acronym class="acronym">DNS</acronym> Software.</i>. </span><span class="pubdate">October 1993. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594621"></a><p>[<abbr class="abbrev">RFC1536</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Kumar</span>, <span class="firstname">J.</span> <span class="surname">Postel</span>, <span class="firstname">C.</span> <span class="surname">Neuman</span>, <span class="firstname">P.</span> <span class="surname">Danzig</span>, and <span class="firstname">S.</span> <span class="surname">Miller</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Implementation - Errors and Suggested Fixes</i>. </span><span class="pubdate">October 1993. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594690"></a><p>[<abbr class="abbrev">RFC1982</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Elz</span> and <span class="firstname">R.</span> <span class="surname">Bush</span>. </span><span class="title"><i>Serial Number Arithmetic</i>. </span><span class="pubdate">August 1996. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594725"></a><p>[<abbr class="abbrev">RFC4074</abbr>] <span class="authorgroup"><span class="firstname">Y.</span> <span class="surname">Morishita</span> and <span class="firstname">T.</span> <span class="surname">Jinmei</span>. </span><span class="title"><i>Common Misbehaviour Against <acronym class="acronym">DNS</acronym> - Queries for IPv6 Addresses</i>. </span><span class="pubdate">May 2005. </span></p> -</div> -</div> -<div class="bibliodiv"> -<h3 class="title">Resource Record Types</h3> -<div class="biblioentry"> -<a name="id2594771"></a><p>[<abbr class="abbrev">RFC1183</abbr>] <span class="authorgroup"><span class="firstname">C.F.</span> <span class="surname">Everhart</span>, <span class="firstname">L. A.</span> <span class="surname">Mamakos</span>, <span class="firstname">R.</span> <span class="surname">Ullmann</span>, and <span class="firstname">P.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i>New <acronym class="acronym">DNS</acronym> RR Definitions</i>. </span><span class="pubdate">October 1990. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594828"></a><p>[<abbr class="abbrev">RFC1706</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">R.</span> <span class="surname">Colella</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> NSAP Resource Records</i>. </span><span class="pubdate">October 1994. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594866"></a><p>[<abbr class="abbrev">RFC2168</abbr>] <span class="authorgroup"><span class="firstname">R.</span> <span class="surname">Daniel</span> and <span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="title"><i>Resolution of Uniform Resource Identifiers using - the Domain Name System</i>. </span><span class="pubdate">June 1997. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594901"></a><p>[<abbr class="abbrev">RFC1876</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Davis</span>, <span class="firstname">P.</span> <span class="surname">Vixie</span>, <span class="firstname">T.</span>, and <span class="firstname">I.</span> <span class="surname">Dickinson</span>. </span><span class="title"><i>A Means for Expressing Location Information in the - Domain - Name System</i>. </span><span class="pubdate">January 1996. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594955"></a><p>[<abbr class="abbrev">RFC2052</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>A <acronym class="acronym">DNS</acronym> RR for Specifying the - Location of - Services.</i>. </span><span class="pubdate">October 1996. </span></p> -</div> -<div class="biblioentry"> -<a name="id2594994"></a><p>[<abbr class="abbrev">RFC2163</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Allocchio</span>. </span><span class="title"><i>Using the Internet <acronym class="acronym">DNS</acronym> to - Distribute MIXER - Conformant Global Address Mapping</i>. </span><span class="pubdate">January 1998. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595019"></a><p>[<abbr class="abbrev">RFC2230</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Atkinson</span>. </span><span class="title"><i>Key Exchange Delegation Record for the <acronym class="acronym">DNS</acronym></i>. </span><span class="pubdate">October 1997. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595045"></a><p>[<abbr class="abbrev">RFC2536</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>DSA KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595072"></a><p>[<abbr class="abbrev">RFC2537</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/MD5 KEYs and SIGs in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595098"></a><p>[<abbr class="abbrev">RFC2538</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Storing Certificates in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595138"></a><p>[<abbr class="abbrev">RFC2539</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Storage of Diffie-Hellman Keys in the Domain Name System (DNS)</i>. </span><span class="pubdate">March 1999. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595168"></a><p>[<abbr class="abbrev">RFC2540</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Detached Domain Name System (DNS) Information</i>. </span><span class="pubdate">March 1999. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595197"></a><p>[<abbr class="abbrev">RFC2782</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gulbrandsen</span>. </span><span class="author"><span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="author"><span class="firstname">L.</span> <span class="surname">Esibov</span>. </span><span class="title"><i>A DNS RR for specifying the location of services (DNS SRV)</i>. </span><span class="pubdate">February 2000. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595240"></a><p>[<abbr class="abbrev">RFC2915</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Mealling</span>. </span><span class="author"><span class="firstname">R.</span> <span class="surname">Daniel</span>. </span><span class="title"><i>The Naming Authority Pointer (NAPTR) DNS Resource Record</i>. </span><span class="pubdate">September 2000. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595273"></a><p>[<abbr class="abbrev">RFC3110</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS)</i>. </span><span class="pubdate">May 2001. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595300"></a><p>[<abbr class="abbrev">RFC3123</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Koch</span>. </span><span class="title"><i>A DNS RR Type for Lists of Address Prefixes (APL RR)</i>. </span><span class="pubdate">June 2001. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595323"></a><p>[<abbr class="abbrev">RFC3596</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Thomson</span>, <span class="firstname">C.</span> <span class="surname">Huitema</span>, <span class="firstname">V.</span> <span class="surname">Ksinant</span>, and <span class="firstname">M.</span> <span class="surname">Souissi</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Extensions to support IP - version 6</i>. </span><span class="pubdate">October 2003. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595381"></a><p>[<abbr class="abbrev">RFC3597</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Gustafsson</span>. </span><span class="title"><i>Handling of Unknown DNS Resource Record (RR) Types</i>. </span><span class="pubdate">September 2003. </span></p> -</div> -</div> -<div class="bibliodiv"> -<h3 class="title"> -<acronym class="acronym">DNS</acronym> and the Internet</h3> -<div class="biblioentry"> -<a name="id2595413"></a><p>[<abbr class="abbrev">RFC1101</abbr>] <span class="author"><span class="firstname">P. V.</span> <span class="surname">Mockapetris</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Network Names - and Other Types</i>. </span><span class="pubdate">April 1989. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595438"></a><p>[<abbr class="abbrev">RFC1123</abbr>] <span class="author"><span class="surname">Braden</span>. </span><span class="title"><i>Requirements for Internet Hosts - Application and - Support</i>. </span><span class="pubdate">October 1989. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595461"></a><p>[<abbr class="abbrev">RFC1591</abbr>] <span class="author"><span class="firstname">J.</span> <span class="surname">Postel</span>. </span><span class="title"><i>Domain Name System Structure and Delegation</i>. </span><span class="pubdate">March 1994. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595484"></a><p>[<abbr class="abbrev">RFC2317</abbr>] <span class="authorgroup"><span class="firstname">H.</span> <span class="surname">Eidnes</span>, <span class="firstname">G.</span> <span class="surname">de Groot</span>, and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Classless IN-ADDR.ARPA Delegation</i>. </span><span class="pubdate">March 1998. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595530"></a><p>[<abbr class="abbrev">RFC2826</abbr>] <span class="authorgroup"><span class="surname">Internet Architecture Board</span>. </span><span class="title"><i>IAB Technical Comment on the Unique DNS Root</i>. </span><span class="pubdate">May 2000. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595554"></a><p>[<abbr class="abbrev">RFC2929</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>, <span class="firstname">E.</span> <span class="surname">Brunner-Williams</span>, and <span class="firstname">B.</span> <span class="surname">Manning</span>. </span><span class="title"><i>Domain Name System (DNS) IANA Considerations</i>. </span><span class="pubdate">September 2000. </span></p> -</div> -</div> -<div class="bibliodiv"> -<h3 class="title"> -<acronym class="acronym">DNS</acronym> Operations</h3> -<div class="biblioentry"> -<a name="id2595611"></a><p>[<abbr class="abbrev">RFC1033</abbr>] <span class="author"><span class="firstname">M.</span> <span class="surname">Lottor</span>. </span><span class="title"><i>Domain administrators operations guide.</i>. </span><span class="pubdate">November 1987. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595635"></a><p>[<abbr class="abbrev">RFC1537</abbr>] <span class="author"><span class="firstname">P.</span> <span class="surname">Beertema</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Data File - Configuration Errors</i>. </span><span class="pubdate">October 1993. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595661"></a><p>[<abbr class="abbrev">RFC1912</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Barr</span>. </span><span class="title"><i>Common <acronym class="acronym">DNS</acronym> Operational and - Configuration Errors</i>. </span><span class="pubdate">February 1996. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595688"></a><p>[<abbr class="abbrev">RFC2010</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Manning</span> and <span class="firstname">P.</span> <span class="surname">Vixie</span>. </span><span class="title"><i>Operational Criteria for Root Name Servers.</i>. </span><span class="pubdate">October 1996. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595724"></a><p>[<abbr class="abbrev">RFC2219</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Hamilton</span> and <span class="firstname">R.</span> <span class="surname">Wright</span>. </span><span class="title"><i>Use of <acronym class="acronym">DNS</acronym> Aliases for - Network Services.</i>. </span><span class="pubdate">October 1997. </span></p> -</div> -</div> -<div class="bibliodiv"> -<h3 class="title">Internationalized Domain Names</h3> -<div class="biblioentry"> -<a name="id2595770"></a><p>[<abbr class="abbrev">RFC2825</abbr>] <span class="authorgroup"><span class="surname">IAB</span> and <span class="firstname">R.</span> <span class="surname">Daigle</span>. </span><span class="title"><i>A Tangled Web: Issues of I18N, Domain Names, - and the Other Internet protocols</i>. </span><span class="pubdate">May 2000. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595802"></a><p>[<abbr class="abbrev">RFC3490</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Faltstrom</span>, <span class="firstname">P.</span> <span class="surname">Hoffman</span>, and <span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Internationalizing Domain Names in Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595848"></a><p>[<abbr class="abbrev">RFC3491</abbr>] <span class="authorgroup"><span class="firstname">P.</span> <span class="surname">Hoffman</span> and <span class="firstname">M.</span> <span class="surname">Blanchet</span>. </span><span class="title"><i>Nameprep: A Stringprep Profile for Internationalized Domain Names</i>. </span><span class="pubdate">March 2003. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595883"></a><p>[<abbr class="abbrev">RFC3492</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Costello</span>. </span><span class="title"><i>Punycode: A Bootstring encoding of Unicode - for Internationalized Domain Names in - Applications (IDNA)</i>. </span><span class="pubdate">March 2003. </span></p> -</div> -</div> -<div class="bibliodiv"> -<h3 class="title">Other <acronym class="acronym">DNS</acronym>-related RFCs</h3> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - Note: the following list of RFCs, although - <acronym class="acronym">DNS</acronym>-related, are not - concerned with implementing software. - </p> -</div> -<div class="biblioentry"> -<a name="id2595928"></a><p>[<abbr class="abbrev">RFC1464</abbr>] <span class="author"><span class="firstname">R.</span> <span class="surname">Rosenbaum</span>. </span><span class="title"><i>Using the Domain Name System To Store Arbitrary String - Attributes</i>. </span><span class="pubdate">May 1993. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595950"></a><p>[<abbr class="abbrev">RFC1713</abbr>] <span class="author"><span class="firstname">A.</span> <span class="surname">Romao</span>. </span><span class="title"><i>Tools for <acronym class="acronym">DNS</acronym> Debugging</i>. </span><span class="pubdate">November 1994. </span></p> -</div> -<div class="biblioentry"> -<a name="id2595976"></a><p>[<abbr class="abbrev">RFC1794</abbr>] <span class="author"><span class="firstname">T.</span> <span class="surname">Brisco</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Support for Load - Balancing</i>. </span><span class="pubdate">April 1995. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596002"></a><p>[<abbr class="abbrev">RFC2240</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Legal Basis for Domain Name Allocation</i>. </span><span class="pubdate">November 1997. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596025"></a><p>[<abbr class="abbrev">RFC2345</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>, <span class="firstname">T.</span> <span class="surname">Wolf</span>, and <span class="firstname">G.</span> <span class="surname">Oglesby</span>. </span><span class="title"><i>Domain Names and Company Name Retrieval</i>. </span><span class="pubdate">May 1998. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596071"></a><p>[<abbr class="abbrev">RFC2352</abbr>] <span class="author"><span class="firstname">O.</span> <span class="surname">Vaughan</span>. </span><span class="title"><i>A Convention For Using Legal Names as Domain Names</i>. </span><span class="pubdate">May 1998. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596094"></a><p>[<abbr class="abbrev">RFC3071</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Klensin</span>. </span><span class="title"><i>Reflections on the DNS, RFC 1591, and Categories of Domains</i>. </span><span class="pubdate">February 2001. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596121"></a><p>[<abbr class="abbrev">RFC3258</abbr>] <span class="authorgroup"><span class="firstname">T.</span> <span class="surname">Hardie</span>. </span><span class="title"><i>Distributing Authoritative Name Servers via - Shared Unicast Addresses</i>. </span><span class="pubdate">April 2002. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596147"></a><p>[<abbr class="abbrev">RFC3901</abbr>] <span class="authorgroup"><span class="firstname">A.</span> <span class="surname">Durand</span> and <span class="firstname">J.</span> <span class="surname">Ihren</span>. </span><span class="title"><i>DNS IPv6 Transport Operational Guidelines</i>. </span><span class="pubdate">September 2004. </span></p> -</div> -</div> -<div class="bibliodiv"> -<h3 class="title">Obsolete and Unimplemented Experimental RFC</h3> -<div class="biblioentry"> -<a name="id2596190"></a><p>[<abbr class="abbrev">RFC1712</abbr>] <span class="authorgroup"><span class="firstname">C.</span> <span class="surname">Farrell</span>, <span class="firstname">M.</span> <span class="surname">Schulze</span>, <span class="firstname">S.</span> <span class="surname">Pleitner</span>, and <span class="firstname">D.</span> <span class="surname">Baldoni</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> Encoding of Geographical - Location</i>. </span><span class="pubdate">November 1994. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596248"></a><p>[<abbr class="abbrev">RFC2673</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span>. </span><span class="title"><i>Binary Labels in the Domain Name System</i>. </span><span class="pubdate">August 1999. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596275"></a><p>[<abbr class="abbrev">RFC2874</abbr>] <span class="authorgroup"><span class="firstname">M.</span> <span class="surname">Crawford</span> and <span class="firstname">C.</span> <span class="surname">Huitema</span>. </span><span class="title"><i>DNS Extensions to Support IPv6 Address Aggregation - and Renumbering</i>. </span><span class="pubdate">July 2000. </span></p> -</div> -</div> -<div class="bibliodiv"> -<h3 class="title">Obsoleted DNS Security RFCs</h3> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - Most of these have been consolidated into RFC4033, - RFC4034 and RFC4035 which collectively describe DNSSECbis. - </p> -</div> -<div class="biblioentry"> -<a name="id2596323"></a><p>[<abbr class="abbrev">RFC2065</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span> and <span class="firstname">C.</span> <span class="surname">Kaufman</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">January 1997. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596362"></a><p>[<abbr class="abbrev">RFC2137</abbr>] <span class="author"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Secure Domain Name System Dynamic Update</i>. </span><span class="pubdate">April 1997. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596389"></a><p>[<abbr class="abbrev">RFC2535</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Eastlake</span>, <span class="lineage">3rd</span>. </span><span class="title"><i>Domain Name System Security Extensions</i>. </span><span class="pubdate">March 1999. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596419"></a><p>[<abbr class="abbrev">RFC3008</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span>. </span><span class="title"><i>Domain Name System Security (DNSSEC) - Signing Authority</i>. </span><span class="pubdate">November 2000. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596444"></a><p>[<abbr class="abbrev">RFC3090</abbr>] <span class="authorgroup"><span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>DNS Security Extension Clarification on Zone Status</i>. </span><span class="pubdate">March 2001. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596471"></a><p>[<abbr class="abbrev">RFC3445</abbr>] <span class="authorgroup"><span class="firstname">D.</span> <span class="surname">Massey</span> and <span class="firstname">S.</span> <span class="surname">Rose</span>. </span><span class="title"><i>Limiting the Scope of the KEY Resource Record (RR)</i>. </span><span class="pubdate">December 2002. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596507"></a><p>[<abbr class="abbrev">RFC3655</abbr>] <span class="authorgroup"><span class="firstname">B.</span> <span class="surname">Wellington</span> and <span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Redefinition of DNS Authenticated Data (AD) bit</i>. </span><span class="pubdate">November 2003. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596544"></a><p>[<abbr class="abbrev">RFC3658</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Gudmundsson</span>. </span><span class="title"><i>Delegation Signer (DS) Resource Record (RR)</i>. </span><span class="pubdate">December 2003. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596570"></a><p>[<abbr class="abbrev">RFC3755</abbr>] <span class="authorgroup"><span class="firstname">S.</span> <span class="surname">Weiler</span>. </span><span class="title"><i>Legacy Resolver Compatibility for Delegation Signer (DS)</i>. </span><span class="pubdate">May 2004. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596597"></a><p>[<abbr class="abbrev">RFC3757</abbr>] <span class="authorgroup"><span class="firstname">O.</span> <span class="surname">Kolkman</span>, <span class="firstname">J.</span> <span class="surname">Schlyter</span>, and <span class="firstname">E.</span> <span class="surname">Lewis</span>. </span><span class="title"><i>Domain Name System KEY (DNSKEY) Resource Record - (RR) Secure Entry Point (SEP) Flag</i>. </span><span class="pubdate">April 2004. </span></p> -</div> -<div class="biblioentry"> -<a name="id2596642"></a><p>[<abbr class="abbrev">RFC3845</abbr>] <span class="authorgroup"><span class="firstname">J.</span> <span class="surname">Schlyter</span>. </span><span class="title"><i>DNS Security (DNSSEC) NextSECure (NSEC) RDATA Format</i>. </span><span class="pubdate">August 2004. </span></p> -</div> -</div> -</div> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="internet_drafts"></a>Internet Drafts</h3></div></div></div> -<p> - Internet Drafts (IDs) are rough-draft working documents of - the Internet Engineering Task Force. They are, in essence, RFCs - in the preliminary stages of development. Implementors are - cautioned not - to regard IDs as archival, and they should not be quoted or cited - in any formal documents unless accompanied by the disclaimer that - they are "works in progress." IDs have a lifespan of six months - after which they are deleted unless updated by their authors. - </p> -</div> -<div class="sect2" lang="en"> -<div class="titlepage"><div><div><h3 class="title"> -<a name="id2596683"></a>Other Documents About <acronym class="acronym">BIND</acronym> -</h3></div></div></div> -<p></p> -<div class="bibliography"> -<div class="titlepage"><div><div><h4 class="title"> -<a name="id2596693"></a>Bibliography</h4></div></div></div> -<div class="biblioentry"> -<a name="id2596695"></a><p><span class="authorgroup"><span class="firstname">Paul</span> <span class="surname">Albitz</span> and <span class="firstname">Cricket</span> <span class="surname">Liu</span>. </span><span class="title"><i><acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></i>. </span><span class="copyright">Copyright � 1998 Sebastopol, CA: O'Reilly and Associates. </span></p> -</div> -</div> -</div> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="Bv9ARM.ch08.html">Prev</a>�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch10.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">Chapter�8.�Troubleshooting�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�Manual pages</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/Bv9ARM.ch10.html b/contrib/bind9/doc/arm/Bv9ARM.ch10.html deleted file mode 100644 index 03cce5a..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.ch10.html +++ /dev/null @@ -1,102 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: Bv9ARM.ch10.html,v 1.2.2.6 2007/01/30 00:23:46 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>Manual pages</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="prev" href="Bv9ARM.ch09.html" title="Appendix�A.�Appendices"> -<link rel="next" href="man.dig.html" title="dig"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">Manual pages</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="Bv9ARM.ch09.html">Prev</a>�</td> -<th width="60%" align="center">�</th> -<td width="20%" align="right">�<a accesskey="n" href="man.dig.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="reference" lang="en"> -<div class="titlepage"> -<div><div><h1 class="title"> -<a name="Bv9ARM.ch10"></a>Manual pages</h1></div></div> -<hr> -</div> -<div class="toc"> -<p><b>Table of Contents</b></p> -<dl> -<dt> -<span class="refentrytitle"><a href="man.dig.html">dig</a></span><span class="refpurpose"> — DNS lookup utility</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.host.html">host</a></span><span class="refpurpose"> — DNS lookup utility</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.dnssec-keygen.html"><span class="application">dnssec-keygen</span></a></span><span class="refpurpose"> — DNSSEC key generation tool</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.dnssec-signzone.html"><span class="application">dnssec-signzone</span></a></span><span class="refpurpose"> — DNSSEC zone signing tool</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.named-checkconf.html"><span class="application">named-checkconf</span></a></span><span class="refpurpose"> — named configuration file syntax checking tool</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.named-checkzone.html"><span class="application">named-checkzone</span></a></span><span class="refpurpose"> — zone file validity checking or converting tool</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.named.html"><span class="application">named</span></a></span><span class="refpurpose"> — Internet domain name server</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.rndc.html"><span class="application">rndc</span></a></span><span class="refpurpose"> — name server control utility</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.rndc.conf.html"><code class="filename">rndc.conf</code></a></span><span class="refpurpose"> — rndc configuration file</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.rndc-confgen.html"><span class="application">rndc-confgen</span></a></span><span class="refpurpose"> — rndc key generation tool</span> -</dt> -</dl> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="Bv9ARM.ch09.html">Prev</a>�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right">�<a accesskey="n" href="man.dig.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">Appendix�A.�Appendices�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�dig</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/Bv9ARM.html b/contrib/bind9/doc/arm/Bv9ARM.html deleted file mode 100644 index 8a33041..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.html +++ /dev/null @@ -1,262 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: Bv9ARM.html,v 1.85.18.68 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>BIND 9 Administrator Reference Manual</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="next" href="Bv9ARM.ch01.html" title="Chapter�1.�Introduction"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">BIND 9 Administrator Reference Manual</th></tr> -<tr> -<td width="20%" align="left">�</td> -<th width="60%" align="center">�</th> -<td width="20%" align="right">�<a accesskey="n" href="Bv9ARM.ch01.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="book" lang="en"> -<div class="titlepage"> -<div> -<div><h1 class="title"> -<a name="id2563155"></a>BIND 9 Administrator Reference Manual</h1></div> -<div><p class="copyright">Copyright � 2004-2007 Internet Systems Consortium, Inc. ("ISC")</p></div> -<div><p class="copyright">Copyright � 2000-2003 Internet Software Consortium.</p></div> -</div> -<hr> -</div> -<div class="toc"> -<p><b>Table of Contents</b></p> -<dl> -<dt><span class="chapter"><a href="Bv9ARM.ch01.html">1. Introduction</a></span></dt> -<dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564117">Scope of Document</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564140">Organization of This Document</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2563474">Conventions Used in This Document</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch01.html#id2564816">The Domain Name System (<acronym class="acronym">DNS</acronym>)</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564837">DNS Fundamentals</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2564871">Domains and Domain Names</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567208">Zones</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567285">Authoritative Name Servers</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567526">Caching Name Servers</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch01.html#id2567588">Name Servers in Multiple Roles</a></span></dt> -</dl></dd> -</dl></dd> -<dt><span class="chapter"><a href="Bv9ARM.ch02.html">2. <acronym class="acronym">BIND</acronym> Resource Requirements</a></span></dt> -<dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567622">Hardware requirements</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567649">CPU Requirements</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567661">Memory Requirements</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567688">Name Server Intensive Environment Issues</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch02.html#id2567699">Supported Operating Systems</a></span></dt> -</dl></dd> -<dt><span class="chapter"><a href="Bv9ARM.ch03.html">3. Name Server Configuration</a></span></dt> -<dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch03.html#sample_configuration">Sample Configurations</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568004">A Caching-only Name Server</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568020">An Authoritative-only Name Server</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568042">Load Balancing</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch03.html#id2568465">Name Server Operations</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2568470">Tools for Use With the Name Server Daemon</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch03.html#id2570184">Signals</a></span></dt> -</dl></dd> -</dl></dd> -<dt><span class="chapter"><a href="Bv9ARM.ch04.html">4. Advanced DNS Features</a></span></dt> -<dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#notify">Notify</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#dynamic_update">Dynamic Update</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#journal">The journal file</a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#incremental_zone_transfers">Incremental Zone Transfers (IXFR)</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2570642">Split DNS</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2570660">Example split DNS setup</a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#tsig">TSIG</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571095">Generate Shared Keys for Each Pair of Hosts</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571169">Copying the Shared Secret to Both Machines</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571179">Informing the Servers of the Key's Existence</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571219">Instructing the Server to Use the Key</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571413">TSIG Key Based Access Control</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571458">Errors</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571472">TKEY</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2571521">SIG(0)</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#DNSSEC">DNSSEC</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571725">Generating Keys</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571795">Signing the Zone</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2571874">Configuring Servers</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch04.html#id2572153">IPv6 Support in <acronym class="acronym">BIND</acronym> 9</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572215">Address Lookups Using AAAA Records</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch04.html#id2572236">Address to Name Lookups Using Nibble Format</a></span></dt> -</dl></dd> -</dl></dd> -<dt><span class="chapter"><a href="Bv9ARM.ch05.html">5. The <acronym class="acronym">BIND</acronym> 9 Lightweight Resolver</a></span></dt> -<dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch05.html#id2572269">The Lightweight Resolver Library</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch05.html#lwresd">Running a Resolver Daemon</a></span></dt> -</dl></dd> -<dt><span class="chapter"><a href="Bv9ARM.ch06.html">6. <acronym class="acronym">BIND</acronym> 9 Configuration Reference</a></span></dt> -<dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch06.html#configuration_file_elements">Configuration File Elements</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#address_match_lists">Address Match Lists</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2573480">Comment Syntax</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch06.html#Configuration_File_Grammar">Configuration File Grammar</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574092"><span><strong class="command">acl</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#acl"><span><strong class="command">acl</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574282"><span><strong class="command">controls</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#controls_statement_definition_and_usage"><span><strong class="command">controls</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574711"><span><strong class="command">include</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574726"><span><strong class="command">include</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574749"><span><strong class="command">key</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574771"><span><strong class="command">key</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2574930"><span><strong class="command">logging</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2575056"><span><strong class="command">logging</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576406"><span><strong class="command">lwres</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576480"><span><strong class="command">lwres</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576544"><span><strong class="command">masters</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576587"><span><strong class="command">masters</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2576602"><span><strong class="command">options</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#options"><span><strong class="command">options</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_grammar"><span><strong class="command">server</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#server_statement_definition_and_usage"><span><strong class="command">server</strong></span> Statement Definition and - Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585361"><span><strong class="command">trusted-keys</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585410"><span><strong class="command">trusted-keys</strong></span> Statement Definition - and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#view_statement_grammar"><span><strong class="command">view</strong></span> Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2585490"><span><strong class="command">view</strong></span> Statement Definition and Usage</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zone_statement_grammar"><span><strong class="command">zone</strong></span> - Statement Grammar</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2586798"><span><strong class="command">zone</strong></span> Statement Definition and Usage</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch06.html#id2589080">Zone File</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#types_of_resource_records_and_when_to_use_them">Types of Resource Records and When to Use Them</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591101">Discussion of MX Records</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#Setting_TTLs">Setting TTLs</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591653">Inverse Mapping in IPv4</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2591848">Other Zone File Directives</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#id2592173"><acronym class="acronym">BIND</acronym> Master File Extension: the <span><strong class="command">$GENERATE</strong></span> Directive</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch06.html#zonefile_format">Additional File Formats</a></span></dt> -</dl></dd> -</dl></dd> -<dt><span class="chapter"><a href="Bv9ARM.ch07.html">7. <acronym class="acronym">BIND</acronym> 9 Security Considerations</a></span></dt> -<dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch07.html#Access_Control_Lists">Access Control Lists</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch07.html#id2592714"><span><strong class="command">Chroot</strong></span> and <span><strong class="command">Setuid</strong></span></a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2592791">The <span><strong class="command">chroot</strong></span> Environment</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch07.html#id2592851">Using the <span><strong class="command">setuid</strong></span> Function</a></span></dt> -</dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch07.html#dynamic_update_security">Dynamic Update Security</a></span></dt> -</dl></dd> -<dt><span class="chapter"><a href="Bv9ARM.ch08.html">8. Troubleshooting</a></span></dt> -<dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2592999">Common Problems</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch08.html#id2593004">It's not working; how can I figure out what's wrong?</a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2593016">Incrementing and Changing the Serial Number</a></span></dt> -<dt><span class="sect1"><a href="Bv9ARM.ch08.html#id2593033">Where Can I Get Help?</a></span></dt> -</dl></dd> -<dt><span class="appendix"><a href="Bv9ARM.ch09.html">A. Appendices</a></span></dt> -<dd><dl> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2593300">Acknowledgments</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#historical_dns_information">A Brief History of the <acronym class="acronym">DNS</acronym> and <acronym class="acronym">BIND</acronym></a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#id2593472">General <acronym class="acronym">DNS</acronym> Reference Information</a></span></dt> -<dd><dl><dt><span class="sect2"><a href="Bv9ARM.ch09.html#ipv6addresses">IPv6 addresses (AAAA)</a></span></dt></dl></dd> -<dt><span class="sect1"><a href="Bv9ARM.ch09.html#bibliography">Bibliography (and Suggested Reading)</a></span></dt> -<dd><dl> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#rfcs">Request for Comments (RFCs)</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#internet_drafts">Internet Drafts</a></span></dt> -<dt><span class="sect2"><a href="Bv9ARM.ch09.html#id2596683">Other Documents About <acronym class="acronym">BIND</acronym></a></span></dt> -</dl></dd> -</dl></dd> -<dt><span class="reference"><a href="Bv9ARM.ch10.html">I. Manual pages</a></span></dt> -<dd><dl> -<dt> -<span class="refentrytitle"><a href="man.dig.html">dig</a></span><span class="refpurpose"> — DNS lookup utility</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.host.html">host</a></span><span class="refpurpose"> — DNS lookup utility</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.dnssec-keygen.html"><span class="application">dnssec-keygen</span></a></span><span class="refpurpose"> — DNSSEC key generation tool</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.dnssec-signzone.html"><span class="application">dnssec-signzone</span></a></span><span class="refpurpose"> — DNSSEC zone signing tool</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.named-checkconf.html"><span class="application">named-checkconf</span></a></span><span class="refpurpose"> — named configuration file syntax checking tool</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.named-checkzone.html"><span class="application">named-checkzone</span></a></span><span class="refpurpose"> — zone file validity checking or converting tool</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.named.html"><span class="application">named</span></a></span><span class="refpurpose"> — Internet domain name server</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.rndc.html"><span class="application">rndc</span></a></span><span class="refpurpose"> — name server control utility</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.rndc.conf.html"><code class="filename">rndc.conf</code></a></span><span class="refpurpose"> — rndc configuration file</span> -</dt> -<dt> -<span class="refentrytitle"><a href="man.rndc-confgen.html"><span class="application">rndc-confgen</span></a></span><span class="refpurpose"> — rndc key generation tool</span> -</dt> -</dl></dd> -</dl> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left">�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right">�<a accesskey="n" href="Bv9ARM.ch01.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">�</td> -<td width="20%" align="center">�</td> -<td width="40%" align="right" valign="top">�Chapter�1.�Introduction</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/Bv9ARM.pdf b/contrib/bind9/doc/arm/Bv9ARM.pdf deleted file mode 100755 index be27aa1..0000000 --- a/contrib/bind9/doc/arm/Bv9ARM.pdf +++ /dev/null @@ -1,12885 +0,0 @@ -%PDF-1.4 -5 0 obj -<< /S /GoTo /D (chapter.1) >> -endobj -8 0 obj -(1 Introduction) -endobj -9 0 obj -<< /S /GoTo /D (section.1.1) >> -endobj -12 0 obj -(1.1 Scope of Document) -endobj -13 0 obj -<< /S /GoTo /D (section.1.2) >> -endobj -16 0 obj -(1.2 Organization of This Document) -endobj -17 0 obj -<< /S /GoTo /D (section.1.3) >> -endobj -20 0 obj -(1.3 Conventions Used in This Document) -endobj -21 0 obj -<< /S /GoTo /D (section.1.4) >> -endobj -24 0 obj -(1.4 The Domain Name System \(DNS\)) -endobj -25 0 obj -<< /S /GoTo /D (subsection.1.4.1) >> -endobj -28 0 obj -(1.4.1 DNS Fundamentals) -endobj -29 0 obj -<< /S /GoTo /D (subsection.1.4.2) >> -endobj -32 0 obj -(1.4.2 Domains and Domain Names) -endobj -33 0 obj -<< /S /GoTo /D (subsection.1.4.3) >> -endobj -36 0 obj -(1.4.3 Zones) -endobj -37 0 obj -<< /S /GoTo /D (subsection.1.4.4) >> -endobj -40 0 obj -(1.4.4 Authoritative Name Servers) -endobj -41 0 obj -<< /S /GoTo /D (subsubsection.1.4.4.1) >> -endobj -44 0 obj -(1.4.4.1 The Primary Master) -endobj -45 0 obj -<< /S /GoTo /D (subsubsection.1.4.4.2) >> -endobj -48 0 obj -(1.4.4.2 Slave Servers) -endobj -49 0 obj -<< /S /GoTo /D (subsubsection.1.4.4.3) >> -endobj -52 0 obj -(1.4.4.3 Stealth Servers) -endobj -53 0 obj -<< /S /GoTo /D (subsection.1.4.5) >> -endobj -56 0 obj -(1.4.5 Caching Name Servers) -endobj -57 0 obj -<< /S /GoTo /D (subsubsection.1.4.5.1) >> -endobj -60 0 obj -(1.4.5.1 Forwarding) -endobj -61 0 obj -<< /S /GoTo /D (subsection.1.4.6) >> -endobj -64 0 obj -(1.4.6 Name Servers in Multiple Roles) -endobj -65 0 obj -<< /S /GoTo /D (chapter.2) >> -endobj -68 0 obj -(2 BIND Resource Requirements) -endobj -69 0 obj -<< /S /GoTo /D (section.2.1) >> -endobj -72 0 obj -(2.1 Hardware requirements) -endobj -73 0 obj -<< /S /GoTo /D (section.2.2) >> -endobj -76 0 obj -(2.2 CPU Requirements) -endobj -77 0 obj -<< /S /GoTo /D (section.2.3) >> -endobj -80 0 obj -(2.3 Memory Requirements) -endobj -81 0 obj -<< /S /GoTo /D (section.2.4) >> -endobj -84 0 obj -(2.4 Name Server Intensive Environment Issues) -endobj -85 0 obj -<< /S /GoTo /D (section.2.5) >> -endobj -88 0 obj -(2.5 Supported Operating Systems) -endobj -89 0 obj -<< /S /GoTo /D (chapter.3) >> -endobj -92 0 obj -(3 Name Server Configuration) -endobj -93 0 obj -<< /S /GoTo /D (section.3.1) >> -endobj -96 0 obj -(3.1 Sample Configurations) -endobj -97 0 obj -<< /S /GoTo /D (subsection.3.1.1) >> -endobj -100 0 obj -(3.1.1 A Caching-only Name Server) -endobj -101 0 obj -<< /S /GoTo /D (subsection.3.1.2) >> -endobj -104 0 obj -(3.1.2 An Authoritative-only Name Server) -endobj -105 0 obj -<< /S /GoTo /D (section.3.2) >> -endobj -108 0 obj -(3.2 Load Balancing) -endobj -109 0 obj -<< /S /GoTo /D (section.3.3) >> -endobj -112 0 obj -(3.3 Name Server Operations) -endobj -113 0 obj -<< /S /GoTo /D (subsection.3.3.1) >> -endobj -116 0 obj -(3.3.1 Tools for Use With the Name Server Daemon) -endobj -117 0 obj -<< /S /GoTo /D (subsubsection.3.3.1.1) >> -endobj -120 0 obj -(3.3.1.1 Diagnostic Tools) -endobj -121 0 obj -<< /S /GoTo /D (subsubsection.3.3.1.2) >> -endobj -124 0 obj -(3.3.1.2 Administrative Tools) -endobj -125 0 obj -<< /S /GoTo /D (subsection.3.3.2) >> -endobj -128 0 obj -(3.3.2 Signals) -endobj -129 0 obj -<< /S /GoTo /D (chapter.4) >> -endobj -132 0 obj -(4 Advanced DNS Features) -endobj -133 0 obj -<< /S /GoTo /D (section.4.1) >> -endobj -136 0 obj -(4.1 Notify) -endobj -137 0 obj -<< /S /GoTo /D (section.4.2) >> -endobj -140 0 obj -(4.2 Dynamic Update) -endobj -141 0 obj -<< /S /GoTo /D (subsection.4.2.1) >> -endobj -144 0 obj -(4.2.1 The journal file) -endobj -145 0 obj -<< /S /GoTo /D (section.4.3) >> -endobj -148 0 obj -(4.3 Incremental Zone Transfers \(IXFR\)) -endobj -149 0 obj -<< /S /GoTo /D (section.4.4) >> -endobj -152 0 obj -(4.4 Split DNS) -endobj -153 0 obj -<< /S /GoTo /D (subsection.4.4.1) >> -endobj -156 0 obj -(4.4.1 Example split DNS setup) -endobj -157 0 obj -<< /S /GoTo /D (section.4.5) >> -endobj -160 0 obj -(4.5 TSIG) -endobj -161 0 obj -<< /S /GoTo /D (subsection.4.5.1) >> -endobj -164 0 obj -(4.5.1 Generate Shared Keys for Each Pair of Hosts) -endobj -165 0 obj -<< /S /GoTo /D (subsubsection.4.5.1.1) >> -endobj -168 0 obj -(4.5.1.1 Automatic Generation) -endobj -169 0 obj -<< /S /GoTo /D (subsubsection.4.5.1.2) >> -endobj -172 0 obj -(4.5.1.2 Manual Generation) -endobj -173 0 obj -<< /S /GoTo /D (subsection.4.5.2) >> -endobj -176 0 obj -(4.5.2 Copying the Shared Secret to Both Machines) -endobj -177 0 obj -<< /S /GoTo /D (subsection.4.5.3) >> -endobj -180 0 obj -(4.5.3 Informing the Servers of the Key's Existence) -endobj -181 0 obj -<< /S /GoTo /D (subsection.4.5.4) >> -endobj -184 0 obj -(4.5.4 Instructing the Server to Use the Key) -endobj -185 0 obj -<< /S /GoTo /D (subsection.4.5.5) >> -endobj -188 0 obj -(4.5.5 TSIG Key Based Access Control) -endobj -189 0 obj -<< /S /GoTo /D (subsection.4.5.6) >> -endobj -192 0 obj -(4.5.6 Errors) -endobj -193 0 obj -<< /S /GoTo /D (section.4.6) >> -endobj -196 0 obj -(4.6 TKEY) -endobj -197 0 obj -<< /S /GoTo /D (section.4.7) >> -endobj -200 0 obj -(4.7 SIG\(0\)) -endobj -201 0 obj -<< /S /GoTo /D (section.4.8) >> -endobj -204 0 obj -(4.8 DNSSEC) -endobj -205 0 obj -<< /S /GoTo /D (subsection.4.8.1) >> -endobj -208 0 obj -(4.8.1 Generating Keys) -endobj -209 0 obj -<< /S /GoTo /D (subsection.4.8.2) >> -endobj -212 0 obj -(4.8.2 Signing the Zone) -endobj -213 0 obj -<< /S /GoTo /D (subsection.4.8.3) >> -endobj -216 0 obj -(4.8.3 Configuring Servers) -endobj -217 0 obj -<< /S /GoTo /D (section.4.9) >> -endobj -220 0 obj -(4.9 IPv6 Support in BIND 9) -endobj -221 0 obj -<< /S /GoTo /D (subsection.4.9.1) >> -endobj -224 0 obj -(4.9.1 Address Lookups Using AAAA Records) -endobj -225 0 obj -<< /S /GoTo /D (subsection.4.9.2) >> -endobj -228 0 obj -(4.9.2 Address to Name Lookups Using Nibble Format) -endobj -229 0 obj -<< /S /GoTo /D (chapter.5) >> -endobj -232 0 obj -(5 The BIND 9 Lightweight Resolver) -endobj -233 0 obj -<< /S /GoTo /D (section.5.1) >> -endobj -236 0 obj -(5.1 The Lightweight Resolver Library) -endobj -237 0 obj -<< /S /GoTo /D (section.5.2) >> -endobj -240 0 obj -(5.2 Running a Resolver Daemon) -endobj -241 0 obj -<< /S /GoTo /D (chapter.6) >> -endobj -244 0 obj -(6 BIND 9 Configuration Reference) -endobj -245 0 obj -<< /S /GoTo /D (section.6.1) >> -endobj -248 0 obj -(6.1 Configuration File Elements) -endobj -249 0 obj -<< /S /GoTo /D (subsection.6.1.1) >> -endobj -252 0 obj -(6.1.1 Address Match Lists) -endobj -253 0 obj -<< /S /GoTo /D (subsubsection.6.1.1.1) >> -endobj -256 0 obj -(6.1.1.1 Syntax) -endobj -257 0 obj -<< /S /GoTo /D (subsubsection.6.1.1.2) >> -endobj -260 0 obj -(6.1.1.2 Definition and Usage) -endobj -261 0 obj -<< /S /GoTo /D (subsection.6.1.2) >> -endobj -264 0 obj -(6.1.2 Comment Syntax) -endobj -265 0 obj -<< /S /GoTo /D (subsubsection.6.1.2.1) >> -endobj -268 0 obj -(6.1.2.1 Syntax) -endobj -269 0 obj -<< /S /GoTo /D (subsubsection.6.1.2.2) >> -endobj -272 0 obj -(6.1.2.2 Definition and Usage) -endobj -273 0 obj -<< /S /GoTo /D (section.6.2) >> -endobj -276 0 obj -(6.2 Configuration File Grammar) -endobj -277 0 obj -<< /S /GoTo /D (subsection.6.2.1) >> -endobj -280 0 obj -(6.2.1 acl Statement Grammar) -endobj -281 0 obj -<< /S /GoTo /D (subsection.6.2.2) >> -endobj -284 0 obj -(6.2.2 acl Statement Definition and Usage) -endobj -285 0 obj -<< /S /GoTo /D (subsection.6.2.3) >> -endobj -288 0 obj -(6.2.3 controls Statement Grammar) -endobj -289 0 obj -<< /S /GoTo /D (subsection.6.2.4) >> -endobj -292 0 obj -(6.2.4 controls Statement Definition and Usage) -endobj -293 0 obj -<< /S /GoTo /D (subsection.6.2.5) >> -endobj -296 0 obj -(6.2.5 include Statement Grammar) -endobj -297 0 obj -<< /S /GoTo /D (subsection.6.2.6) >> -endobj -300 0 obj -(6.2.6 include Statement Definition and Usage) -endobj -301 0 obj -<< /S /GoTo /D (subsection.6.2.7) >> -endobj -304 0 obj -(6.2.7 key Statement Grammar) -endobj -305 0 obj -<< /S /GoTo /D (subsection.6.2.8) >> -endobj -308 0 obj -(6.2.8 key Statement Definition and Usage) -endobj -309 0 obj -<< /S /GoTo /D (subsection.6.2.9) >> -endobj -312 0 obj -(6.2.9 logging Statement Grammar) -endobj -313 0 obj -<< /S /GoTo /D (subsection.6.2.10) >> -endobj -316 0 obj -(6.2.10 logging Statement Definition and Usage) -endobj -317 0 obj -<< /S /GoTo /D (subsubsection.6.2.10.1) >> -endobj -320 0 obj -(6.2.10.1 The channel Phrase) -endobj -321 0 obj -<< /S /GoTo /D (subsubsection.6.2.10.2) >> -endobj -324 0 obj -(6.2.10.2 The category Phrase) -endobj -325 0 obj -<< /S /GoTo /D (subsection.6.2.11) >> -endobj -328 0 obj -(6.2.11 lwres Statement Grammar) -endobj -329 0 obj -<< /S /GoTo /D (subsection.6.2.12) >> -endobj -332 0 obj -(6.2.12 lwres Statement Definition and Usage) -endobj -333 0 obj -<< /S /GoTo /D (subsection.6.2.13) >> -endobj -336 0 obj -(6.2.13 masters Statement Grammar) -endobj -337 0 obj -<< /S /GoTo /D (subsection.6.2.14) >> -endobj -340 0 obj -(6.2.14 masters Statement Definition and Usage) -endobj -341 0 obj -<< /S /GoTo /D (subsection.6.2.15) >> -endobj -344 0 obj -(6.2.15 options Statement Grammar) -endobj -345 0 obj -<< /S /GoTo /D (subsection.6.2.16) >> -endobj -348 0 obj -(6.2.16 options Statement Definition and Usage) -endobj -349 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.1) >> -endobj -352 0 obj -(6.2.16.1 Boolean Options) -endobj -353 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.2) >> -endobj -356 0 obj -(6.2.16.2 Forwarding) -endobj -357 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.3) >> -endobj -360 0 obj -(6.2.16.3 Dual-stack Servers) -endobj -361 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.4) >> -endobj -364 0 obj -(6.2.16.4 Access Control) -endobj -365 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.5) >> -endobj -368 0 obj -(6.2.16.5 Interfaces) -endobj -369 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.6) >> -endobj -372 0 obj -(6.2.16.6 Query Address) -endobj -373 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.7) >> -endobj -376 0 obj -(6.2.16.7 Zone Transfers) -endobj -377 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.8) >> -endobj -380 0 obj -(6.2.16.8 Bad UDP Port Lists) -endobj -381 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.9) >> -endobj -384 0 obj -(6.2.16.9 Operating System Resource Limits) -endobj -385 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.10) >> -endobj -388 0 obj -(6.2.16.10 Server Resource Limits) -endobj -389 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.11) >> -endobj -392 0 obj -(6.2.16.11 Periodic Task Intervals) -endobj -393 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.12) >> -endobj -396 0 obj -(6.2.16.12 Topology) -endobj -397 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.13) >> -endobj -400 0 obj -(6.2.16.13 The sortlist Statement) -endobj -401 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.14) >> -endobj -404 0 obj -(6.2.16.14 RRset Ordering) -endobj -405 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.15) >> -endobj -408 0 obj -(6.2.16.15 Tuning) -endobj -409 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.16) >> -endobj -412 0 obj -(6.2.16.16 Built-in server information zones) -endobj -413 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.17) >> -endobj -416 0 obj -(6.2.16.17 Built-in Empty Zones) -endobj -417 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.18) >> -endobj -420 0 obj -(6.2.16.18 The Statistics File) -endobj -421 0 obj -<< /S /GoTo /D (subsubsection.6.2.16.19) >> -endobj -424 0 obj -(6.2.16.19 Additional Section Caching) -endobj -425 0 obj -<< /S /GoTo /D (subsection.6.2.17) >> -endobj -428 0 obj -(6.2.17 server Statement Grammar) -endobj -429 0 obj -<< /S /GoTo /D (subsection.6.2.18) >> -endobj -432 0 obj -(6.2.18 server Statement Definition and Usage) -endobj -433 0 obj -<< /S /GoTo /D (subsection.6.2.19) >> -endobj -436 0 obj -(6.2.19 trusted-keys Statement Grammar) -endobj -437 0 obj -<< /S /GoTo /D (subsection.6.2.20) >> -endobj -440 0 obj -(6.2.20 trusted-keys Statement Definition and Usage) -endobj -441 0 obj -<< /S /GoTo /D (subsection.6.2.21) >> -endobj -444 0 obj -(6.2.21 view Statement Grammar) -endobj -445 0 obj -<< /S /GoTo /D (subsection.6.2.22) >> -endobj -448 0 obj -(6.2.22 view Statement Definition and Usage) -endobj -449 0 obj -<< /S /GoTo /D (subsection.6.2.23) >> -endobj -452 0 obj -(6.2.23 zone Statement Grammar) -endobj -453 0 obj -<< /S /GoTo /D (subsection.6.2.24) >> -endobj -456 0 obj -(6.2.24 zone Statement Definition and Usage) -endobj -457 0 obj -<< /S /GoTo /D (subsubsection.6.2.24.1) >> -endobj -460 0 obj -(6.2.24.1 Zone Types) -endobj -461 0 obj -<< /S /GoTo /D (subsubsection.6.2.24.2) >> -endobj -464 0 obj -(6.2.24.2 Class) -endobj -465 0 obj -<< /S /GoTo /D (subsubsection.6.2.24.3) >> -endobj -468 0 obj -(6.2.24.3 Zone Options) -endobj -469 0 obj -<< /S /GoTo /D (subsubsection.6.2.24.4) >> -endobj -472 0 obj -(6.2.24.4 Dynamic Update Policies) -endobj -473 0 obj -<< /S /GoTo /D (section.6.3) >> -endobj -476 0 obj -(6.3 Zone File) -endobj -477 0 obj -<< /S /GoTo /D (subsection.6.3.1) >> -endobj -480 0 obj -(6.3.1 Types of Resource Records and When to Use Them) -endobj -481 0 obj -<< /S /GoTo /D (subsubsection.6.3.1.1) >> -endobj -484 0 obj -(6.3.1.1 Resource Records) -endobj -485 0 obj -<< /S /GoTo /D (subsubsection.6.3.1.2) >> -endobj -488 0 obj -(6.3.1.2 Textual expression of RRs) -endobj -489 0 obj -<< /S /GoTo /D (subsection.6.3.2) >> -endobj -492 0 obj -(6.3.2 Discussion of MX Records) -endobj -493 0 obj -<< /S /GoTo /D (subsection.6.3.3) >> -endobj -496 0 obj -(6.3.3 Setting TTLs) -endobj -497 0 obj -<< /S /GoTo /D (subsection.6.3.4) >> -endobj -500 0 obj -(6.3.4 Inverse Mapping in IPv4) -endobj -501 0 obj -<< /S /GoTo /D (subsection.6.3.5) >> -endobj -504 0 obj -(6.3.5 Other Zone File Directives) -endobj -505 0 obj -<< /S /GoTo /D (subsubsection.6.3.5.1) >> -endobj -508 0 obj -(6.3.5.1 The \044ORIGIN Directive) -endobj -509 0 obj -<< /S /GoTo /D (subsubsection.6.3.5.2) >> -endobj -512 0 obj -(6.3.5.2 The \044INCLUDE Directive) -endobj -513 0 obj -<< /S /GoTo /D (subsubsection.6.3.5.3) >> -endobj -516 0 obj -(6.3.5.3 The \044TTL Directive) -endobj -517 0 obj -<< /S /GoTo /D (subsection.6.3.6) >> -endobj -520 0 obj -(6.3.6 BIND Master File Extension: the \044GENERATE Directive) -endobj -521 0 obj -<< /S /GoTo /D (subsection.6.3.7) >> -endobj -524 0 obj -(6.3.7 Additional File Formats) -endobj -525 0 obj -<< /S /GoTo /D (chapter.7) >> -endobj -528 0 obj -(7 BIND 9 Security Considerations) -endobj -529 0 obj -<< /S /GoTo /D (section.7.1) >> -endobj -532 0 obj -(7.1 Access Control Lists) -endobj -533 0 obj -<< /S /GoTo /D (section.7.2) >> -endobj -536 0 obj -(7.2 Chroot and Setuid) -endobj -537 0 obj -<< /S /GoTo /D (subsection.7.2.1) >> -endobj -540 0 obj -(7.2.1 The chroot Environment) -endobj -541 0 obj -<< /S /GoTo /D (subsection.7.2.2) >> -endobj -544 0 obj -(7.2.2 Using the setuid Function) -endobj -545 0 obj -<< /S /GoTo /D (section.7.3) >> -endobj -548 0 obj -(7.3 Dynamic Update Security) -endobj -549 0 obj -<< /S /GoTo /D (chapter.8) >> -endobj -552 0 obj -(8 Troubleshooting) -endobj -553 0 obj -<< /S /GoTo /D (section.8.1) >> -endobj -556 0 obj -(8.1 Common Problems) -endobj -557 0 obj -<< /S /GoTo /D (subsection.8.1.1) >> -endobj -560 0 obj -(8.1.1 It's not working; how can I figure out what's wrong?) -endobj -561 0 obj -<< /S /GoTo /D (section.8.2) >> -endobj -564 0 obj -(8.2 Incrementing and Changing the Serial Number) -endobj -565 0 obj -<< /S /GoTo /D (section.8.3) >> -endobj -568 0 obj -(8.3 Where Can I Get Help?) -endobj -569 0 obj -<< /S /GoTo /D (appendix.A) >> -endobj -572 0 obj -(A Appendices) -endobj -573 0 obj -<< /S /GoTo /D (section.A.1) >> -endobj -576 0 obj -(A.1 Acknowledgments) -endobj -577 0 obj -<< /S /GoTo /D (subsection.A.1.1) >> -endobj -580 0 obj -(A.1.1 A Brief History of the DNS and BIND) -endobj -581 0 obj -<< /S /GoTo /D (section.A.2) >> -endobj -584 0 obj -(A.2 General DNS Reference Information) -endobj -585 0 obj -<< /S /GoTo /D (subsection.A.2.1) >> -endobj -588 0 obj -(A.2.1 IPv6 addresses \(AAAA\)) -endobj -589 0 obj -<< /S /GoTo /D (section.A.3) >> -endobj -592 0 obj -(A.3 Bibliography \(and Suggested Reading\)) -endobj -593 0 obj -<< /S /GoTo /D (subsection.A.3.1) >> -endobj -596 0 obj -(A.3.1 Request for Comments \(RFCs\)) -endobj -597 0 obj -<< /S /GoTo /D (subsection.A.3.2) >> -endobj -600 0 obj -(A.3.2 Internet Drafts) -endobj -601 0 obj -<< /S /GoTo /D (subsection.A.3.3) >> -endobj -604 0 obj -(A.3.3 Other Documents About BIND) -endobj -605 0 obj -<< /S /GoTo /D (appendix.B) >> -endobj -608 0 obj -(B Manual pages) -endobj -609 0 obj -<< /S /GoTo /D (section.B.1) >> -endobj -612 0 obj -(B.1 dig) -endobj -613 0 obj -<< /S /GoTo /D (section.B.2) >> -endobj -616 0 obj -(B.2 host) -endobj -617 0 obj -<< /S /GoTo /D (section.B.3) >> -endobj -620 0 obj -(B.3 dnssec-keygen) -endobj -621 0 obj -<< /S /GoTo /D (section.B.4) >> -endobj -624 0 obj -(B.4 dnssec-signzone) -endobj -625 0 obj -<< /S /GoTo /D (section.B.5) >> -endobj -628 0 obj -(B.5 named-checkconf) -endobj -629 0 obj -<< /S /GoTo /D (section.B.6) >> -endobj -632 0 obj -(B.6 named-checkzone) -endobj -633 0 obj -<< /S /GoTo /D (section.B.7) >> -endobj -636 0 obj -(B.7 named) -endobj -637 0 obj -<< /S /GoTo /D (section.B.8) >> -endobj -640 0 obj -(B.8 rndc) -endobj -641 0 obj -<< /S /GoTo /D (section.B.9) >> -endobj -644 0 obj -(B.9 rndc.conf) -endobj -645 0 obj -<< /S /GoTo /D (section.B.10) >> -endobj -648 0 obj -(B.10 rndc-confgen) -endobj -649 0 obj -<< /S /GoTo /D [650 0 R /FitH ] >> -endobj -653 0 obj << -/Length 236 -/Filter /FlateDecode ->> -stream -xڍ��JA ���9��M'�d2s�T��Beo�ai�Rp�t�����*�Ar���� �/A�}��Փºs ��v��
�B)�P+!�lQ�bJ��w�N�1��P�)&>���ͮ��-A�bEM�p����d��[L+V?�c��t�~�r ��~[��� �~�N � a�(��˘���9�M��<� -endobj -650 0 obj << -/Type /Page -/Contents 653 0 R -/Resources 652 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 659 0 R ->> endobj -651 0 obj << -/Type /XObject -/Subtype /Form -/FormType 1 -/PTEX.FileName (./isc-logo.pdf) -/PTEX.PageNumber 1 -/PTEX.InfoDict 660 0 R -/Matrix [1.00000000 0.00000000 0.00000000 1.00000000 0.00000000 0.00000000] -/BBox [0.00000000 0.00000000 255.00000000 149.00000000] -/Resources << -/ProcSet [ /PDF /Text ] -/ColorSpace << -/R15 661 0 R -/R9 662 0 R -/R11 663 0 R -/R13 664 0 R ->>/ExtGState << -/R17 665 0 R -/R8 666 0 R ->>/Font << /R19 667 0 R >> ->> -/Length 668 0 R -/Filter /FlateDecode ->> -stream -x�u�;�d9���+��e��R�� �lG`X�kz#�10gw�~6��[53}+�}tI%����T��s*{�?�����'����?l﷼�#5�_7}�n��3�����̻�w�7\^���V��o��_��v�m�S�mq� ھ�h)�ώ�,ײ�Zjj ��Vʕ����n�����5͵[+i6}�k��͖��ر�R��VI� e�ĶyKfZWTp����9���ƌ���>R_���JsJ��.���i���\ -��_g'��_6�����͓[8f����Kj��4���5�#6�J�4���+��اk��~��19wR7�m�U%s�,�T| -�2Ə��jU�q�K"ηb�R<�������ײRU| �$��Z*���C�u�|�hL$,I���`�Y|�Nż�L�#pՋB��j9-- 9@�
�D̩�.��J{N]��� Z*z�3�?�T��$��%�XF�Z�%.��@�O���!$t\'<��*W -�j˵�B;��"%��;�+��)�����IJ�5y�GN>�ʧ*=5Dt'�tˇ��iQ{ - ���Iq%�3vH�w�KAįr��q n[Uz�!*�)��KG���gG-dL#�X0�@��ף^����H��_7S41Ã,��O%�*\�/1v�\�Ρ��G�P:�S��1�ޣ q�uc�,�J��e� '�; F/�&N(AW֚Nf���q��ht�ؓ��O�ىG�4�HD'�:S�#O���D4�Lt�3�=�ݙp��S�F$_)^"�ە.�d��d��J�Ӥ�,�}�F:I�P<�:�����H�J���v�9��8G -%S}8\���{!�p�j y�8N��L-�ļ1_yk������us�#�W����AŹ{�0���4±��8p�0���]#H �iӺhS�28�*7��'��� wMp�D�9d=�r�� �d
�l�mF1�\�j�� J$���lHO�� ,x !F� q�* i!ߪ � ���\��"o6,�M(�$�^�P^�>�� �V���#Z����?�j��L��R����V�o�� �e�T� �U�ف�* �2�Nv�@��Y#E?�+�En����h��F�l�bY3�c0CEW'���4���m"�٩�94A�#���� ����N)�Z��օ����#�x��:� �qY�����\U���ղhb \��P����>��9��Ѹ��Um!����Zh!��~(�t~��A,��>*"�D�0QEu�|���`���%�U�&2WjD�5E�)��� -�S�0�4j�0�U6 ќ5���0*�B��" gܲ����Hg�:2�xļ�� ��C��𨏘*#{���s�� -����M�� 1�QQ ���0@yP,��"cf 6��H%aD�j���Pj�(�f��خ��q,f�Lhǧ#�d�0xD�YW���0y��*�_��F� �.�tƨj��K���5�7�bi� �3Ŕ -��P�̨Yu�e��a�5エ0k�,��ä��V����(*�G� �0[;=���t �X3pD�i�'���+ a�qz JC "�1��(� -F��Ica��0�) �A�+����
��|-Tu�a>�s:���~K���V��O�A�I�
�ɪ�r2Q��ب�>.z -�����e�Nd��d� "gK2c�ɗGoO�8G� �Ϧ:B
�ht[ -endobj -660 0 obj -<< -/Producer (AFPL Ghostscript 8.51) -/CreationDate (D:20050606145621) -/ModDate (D:20050606145621) -/Title (Alternate-ISC-logo-v2.ai) -/Creator (Adobe Illustrator\(R\) 11) -/Author (Douglas E. Appelt) ->> -endobj -661 0 obj -[/Separation/PANTONE#201805#20C/DeviceCMYK 669 0 R] -endobj -662 0 obj -[/Separation/PANTONE#207506#20C/DeviceCMYK 670 0 R] -endobj -663 0 obj -[/Separation/PANTONE#20301#20C/DeviceCMYK 671 0 R] -endobj -664 0 obj -[/Separation/PANTONE#20871#20C/DeviceCMYK 672 0 R] -endobj -665 0 obj -<< -/Type /ExtGState -/SA true ->> -endobj -666 0 obj -<< -/Type /ExtGState -/OPM 1 ->> -endobj -667 0 obj -<< -/BaseFont /NVXWCK#2BTrajanPro-Bold -/FontDescriptor 673 0 R -/Type /Font -/FirstChar 67 -/LastChar 136 -/Widths [ 800 0 0 0 0 0 452 0 0 0 0 0 0 0 0 0 582 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 841 633 576 686 590 540 923 827 407 760] -/Encoding 674 0 R -/Subtype /Type1 ->> -endobj -668 0 obj -2362 -endobj -669 0 obj -<< -/Filter /FlateDecode -/FunctionType 4 -/Domain [ 0 1] -/Range [ 0 1 0 1 0 1 0 1] -/Length 39 ->> -stream -x��N)-P0P�-�QH�H�P -endobj -670 0 obj -<< -/Filter /FlateDecode -/FunctionType 4 -/Domain [ 0 1] -/Range [ 0 1 0 1 0 1 0 1] -/Length 36 ->> -stream -x��N)-P0P�-�QH�H�P -endobj -671 0 obj -<< -/Filter /FlateDecode -/FunctionType 4 -/Domain [ 0 1] -/Range [ 0 1 0 1 0 1 0 1] -/Length 40 ->> -stream -x��N)-P0T�-�QH�H�P -endobj -672 0 obj -<< -/Filter /FlateDecode -/FunctionType 4 -/Domain [ 0 1] -/Range [ 0 1 0 1 0 1 0 1] -/Length 50 ->> -stream -x��N)-P0�365�T�-�QH�H�P���X����#� � -,���Z -endobj -673 0 obj -<< -/Type /FontDescriptor -/FontName /NVXWCK#2BTrajanPro-Bold -/FontBBox [ -45 -17 923 767] -/Flags 4 -/Ascent 767 -/CapHeight 767 -/Descent -17 -/ItalicAngle 0 -/StemV 138 -/MissingWidth 500 -/CharSet (/Msmall/C/Ysmall/Nsmall/Osmall/Esmall/Rsmall/S/Ssmall/I/Tsmall/Ismall/Usmall) -/FontFile3 675 0 R ->> -endobj -674 0 obj -<< -/Type /Encoding -/BaseEncoding /WinAnsiEncoding -/Differences [ 127/Nsmall/Tsmall/Esmall/Rsmall/Ysmall/Ssmall/Msmall/Osmall/Ismall/Usmall] ->> -endobj -675 0 obj -<< -/Filter /FlateDecode -/Subtype /Type1C -/Length 2657 ->> -stream -x�}VkpU�!!i0d H�:=���"��*QpYWÊD@p� �$$��$!a2������Ǽ����C ��)�]^�+�B-�k)Z�����f�� �J������������|�ͦ�1&��<q��d]IM�����j�J
ӌt�y����#��;M�7� ��9��~�c���oG�&��I��� j�6:*�V4� z����Kk_+�/���XV�`/�YS먫u�4���o�_Ue_b m�/)k(sl��[��
���Ɗ2����([[�?w��� %�e�%���Zc�'����^YcǾ�/�T�����`/�)���ԎFYS�T��,k��d2MX��0Dyi �cX�i���L��<�L���)����3��̿1��|�^0!��1 3�2��h�¬��=��q��}>�d���h���a3 NO?��iv����$}ت?�����,ݮ �"cqC;��j� =��uV���xӍU�� ��ȜC�������t��z>Tww$հ,'���B��85HqL+kc6zj�-k�_�?�>M/D�Q�Z�� �ɽ�O�| -_�ź����D�PE�EJ��Z�`���8(�A��}B��>R&+��E��f�YPx����� �ܤg~�(qe.ʮFw����<8���?� �z��W��Z>C��j��� 9���zރa���=}���N7�~�}C �,�������z� -�W -����\ o��
TZ -��jIt!�CΞ��y|��ḥ����k?^�^ /�/��m���F'�nH P�����Vf1,�&����Z��� r�/���Ҕ=�&e��n+̄�t [r63�˹��2, T��NK��N���p��1MReZ�D�MV��)v33�����
hl���f9.jB��"j -%z�2(b P�Ie��V� Q -�'x6F��Q�X)��Z�g����w�k6'��+���V���l`�\�@h��T.Bn���$t�nv��0��Z8�(J�\�K�*x�M���o�OEG�jk������Ҷ��3Q������$��F����i.?�1,0@�L7?ȡۙ Q <$Q>��:�:�ꥎ=���cS�H(��A��ј���5��P8 -n�`�r�`�F��|�?C3A���pJ�>8Ş0`�UI Ӳ��"�$և������F��
[�M�m ;�d�j���^M�$��p�]
+rH��Nx�k�z�k `(��G��a|o�1�@��ޮ/�5���l�J�`��� -� VŶ�� --R�5��U����� q��ª�v:#��TsOնU(G_�x�m#�#��Tp�Ȥd{�d4��M�q��i��4�2�3��*e%]_N�j6a���!4�/E�@;��u���pPm�S�c� -.9,���%W�:�-�R,6�� �AZbb�n�d7�����yL�'��C9�O��~�]�C���ݛ�a2��N��!�����P��m5jA����8�SL�4�Þ ��&b���n� �H�����a������g>���+�Ԍ�,�5���}hZ���Dݡw�Ћ����� Q�ܱߪ?~��� e � ����k��� ���)e��~�|��Tq�c1[�5���ï��2���Yf-�1��_| ��=>�fH| -&���n>��)D 6� -x�
\3�gA34 �IT�-�R8�-ǵ��2�Wu�~�!"(0�*FÂ͢�Ĩ�S��o�QP�0 ���iF�ݸVN^_!Ԃ�b� "-Qy$��s�m ���@��J=Ŧ����L �D�Q�T�?G��lR �$F*�4���6��\`����ѓ� ��d]��`�� �9�DijeI �.q -ȼL��<;� * X�����G �_Y1ET��4��-U�_>��آ��}���v�
��d��#�r۟�@��\5l �h�<8�s� -�O���v61B�5*�<6��,�bh����\�]��#�#���1O��Ϥ5o�]ц��4}h��0$�,6���A,�?/�;R�cy 6��UJ��Y�X^����ɟ�����2�K|o�ؔ/�Ȩ�/�( �2�#�NMK�r�
r��f9�yZ��}$�� ���)� h`i�G�A� ���H+����&*�X$���V�h�������A1�����0���Hi �w~I(��2;�]�L��x4[�O�,�����QQ��FdQ������%\���:Ó;�є�Eb1��������=$��?I��C���3�C=V�'>�����+�~8 �#;��_���*qň+� 8����p�_YR��d%a �H\e���Df�� ���R[�kφG��/WT��A5�H��Voo8h�n�)�� �Dn���q�z f�h�&�cQb�X�߂�L���;{����u���ن-�[S�-ۼ� yub܁�h�m�� 4^˙ ��L�Q��endstream -endobj -654 0 obj << -/D [650 0 R /XYZ 85.0394 794.5015 null] ->> endobj -655 0 obj << -/D [650 0 R /XYZ 85.0394 769.5949 null] ->> endobj -652 0 obj << -/Font << /F21 658 0 R >> -/XObject << /Im1 651 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -678 0 obj << -/Length 994 -/Filter /FlateDecode ->> -stream -xڵV˒�J��,5����Z҈��8 3����h�+8 ��7��D�ۛ�.*��y�d@4 ?�&29��ud`bh�� -Qm]����ϡ[ ?N��k5��~� �,�r ��v|��*Ԙ"��V��������"("6 ���0SצњfkZ��Uv:d��% e��K�q�CY����P�
������(��ĭؒ���K/�F�a��f�Zύ��U��5���̂�Z���_���S]��HZ��&��n���ק��Y_b���ĈS��,ʀ'�ɧ��k��z��8�I�.g���yY��Ap� -���LֳyG�����m�뜬[al�:���JX��r�ʛ�w�I��C���X����W��R���8K1w��A���p�A�0hS�k&�=��/�54d+I g�'�f[�v])KF_?�V1e��PT�&����{��ځ ��Z�K������p�T߄�J w��͐��b����b-��H:��E��i��Љ剟�uG���7���:�B�;a;�D ��8�B�� ��;a�{���sa��̉'�J��nIi�~$��\Q�C>t���g���b���{L��X^���1�����~��-�fg"�ۖbGvS?
�$A��XC����A<Ax�2Rz=J��<ҞF��*�'K����Ai {n�Q=mÛ#� -�Y�ϼ�����&r��� �\ d<b ���2���E�h�v�D=�@-��(�W�rWA�Nk�� �^ óp�z��ݚ�7���b����~x�|��5V�ƺ��m��o"j��bR�{��8�9e&���_��d�endstream -endobj -677 0 obj << -/Type /Page -/Contents 678 0 R -/Resources 676 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 659 0 R ->> endobj -679 0 obj << -/D [677 0 R /XYZ 56.6929 794.5015 null] ->> endobj -676 0 obj << -/Font << /F23 682 0 R /F14 685 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -688 0 obj << -/Length 2891 -/Filter /FlateDecode ->> -stream -x��Ms������E:p2� -���U~}���)�B�k�E��$6����%f����0�2=K2� f�X��k��7/��6����&�۹Q)3�Lfs|���/��Z���,I1��4�2�I�����?�N��)�f}���?uˬ����ln%өJ�w���� ��M]]mͲ*[�g�!��\�M3�h.�P�_�׳�Ň������ -W����*� �o��x�]Δܫ�!$j2Ȑ� -����6�<���L�9. u��@�X��H�� c�5�B\(�)�����g�"dm2ȐB�B �B�t>�Z3c�PC_C�招ey=Z=�T�]��X�2+���DB�n�
#��\���#��B��>�J2m�PS�PS�������UNJ�N0_aB �A�&�� )6��!؈�A�Az �ə�z�4� >b�
���vs�,�n�[>T���7S���=�X���0 C -�-9"qP0�xLJ�p�%�Mh�s�O�_��{�E.�զ^��ſ7˺X��x4]ኟ9�i��S��vi�i#ҳ�5v��]��R� .�1�~���OO��MQ��O�<U�� �� -9�zaC���Ґ'�= -5�'t9*?;^��w�O�>?C�k� - �GyiKnS�S�,H��; Rw�"&E�=l���3-�tB�щ��W��C|���f{ED��T"�!AĖ&�8"h�Iʔ�.�F'~�m�'��h�l���8����#CJ|�~J�H ���w�H\�Τ����1��*�����6/])�Js�-�R� ߓaB�LXO��a��A�Dz0̈́0P�(r��k��2��瑜�h��N�R�`�(l"qPؐއ HK�E%� -%��q&���֟ -� ﱍD�*�Ӭ�ڴ�H<��wk�l �*�fS�=�bO�B���V�b��_��̮�X�.βL�C�[��f�ɭ�ݝ�Gϓ|�eac�=�
�{pKl��H i��@�Iݰ�<h�����WP�}���7���9@�C��<����B�H��:�R[�d:���!,��UmjW���\�� 遛�q� 2����Q�D��!���Gif3� ��'u^.�6 -2�P�j��&�X *����oL�BE]*w�����=�B��p2Lf R�a�)�"qP��އ�Lp�җda.;� ޯ 3���h6wm���H�d8�!���#� ��Lsu4G]^��9��7 Vb_mS$H1�3lHp�%� ?��ApF{��H-S\ -�����/�uS�탙�0ߙ搕ɚ#CJs�uJ�H ���AsiX -M���:h�n��������o��k�h�#��lk�lMfR,`5("qP,���b�����~]��=�מ,�z �%h�g�� -��G� �m2� �R�Bb7��� -RDaY�x�N,�)�;�]�3"����Տgk�u�a��m��S)CvdXg��Hb�k ,I���D���ә�7�� ��4��}�
�J�#H�z�E��� �z�����Я������-t��)�o�O�T�3)$����x �P����e���'����A�+��R#M.�g��3�������/�J���s�Aendstream -endobj -687 0 obj << -/Type /Page -/Contents 688 0 R -/Resources 686 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 659 0 R -/Annots [ 691 0 R 692 0 R 693 0 R 694 0 R 695 0 R 696 0 R 697 0 R 698 0 R 699 0 R 700 0 R 701 0 R 702 0 R 703 0 R 704 0 R 705 0 R 706 0 R 707 0 R 708 0 R 709 0 R 710 0 R 711 0 R 712 0 R 713 0 R 714 0 R 715 0 R 716 0 R 717 0 R 718 0 R 719 0 R 720 0 R 721 0 R 722 0 R 723 0 R 724 0 R 725 0 R 726 0 R 727 0 R 728 0 R 729 0 R 730 0 R 731 0 R 732 0 R 733 0 R 734 0 R 735 0 R 736 0 R 737 0 R 738 0 R 739 0 R 740 0 R ] ->> endobj -691 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 688.709 539.579 697.2967] -/Subtype /Link -/A << /S /GoTo /D (chapter.1) >> ->> endobj -692 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 676.5858 539.579 685.4425] -/Subtype /Link -/A << /S /GoTo /D (section.1.1) >> ->> endobj -693 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 664.4876 539.579 673.3442] -/Subtype /Link -/A << /S /GoTo /D (section.1.2) >> ->> endobj -694 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 652.3894 539.579 661.246] -/Subtype /Link -/A << /S /GoTo /D (section.1.3) >> ->> endobj -695 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 640.1914 539.579 649.1477] -/Subtype /Link -/A << /S /GoTo /D (section.1.4) >> ->> endobj -696 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 628.0932 539.579 637.0495] -/Subtype /Link -/A << /S /GoTo /D (subsection.1.4.1) >> ->> endobj -697 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 615.995 539.579 624.9512] -/Subtype /Link -/A << /S /GoTo /D (subsection.1.4.2) >> ->> endobj -698 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 603.8967 539.579 612.853] -/Subtype /Link -/A << /S /GoTo /D (subsection.1.4.3) >> ->> endobj -699 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 591.7985 539.579 600.7547] -/Subtype /Link -/A << /S /GoTo /D (subsection.1.4.4) >> ->> endobj -700 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 579.7002 539.579 588.6565] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.1.4.4.1) >> ->> endobj -701 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 567.6019 539.579 576.5582] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.1.4.4.2) >> ->> endobj -702 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [532.6051 555.5037 539.579 564.46] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.1.4.4.3) >> ->> endobj -703 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 543.4055 539.579 552.5112] -/Subtype /Link -/A << /S /GoTo /D (subsection.1.4.5) >> ->> endobj -704 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 531.3072 539.579 540.413] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.1.4.5.1) >> ->> endobj -705 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 519.209 539.579 528.3147] -/Subtype /Link -/A << /S /GoTo /D (subsection.1.4.6) >> ->> endobj -706 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 496.7003 539.579 505.4125] -/Subtype /Link -/A << /S /GoTo /D (chapter.2) >> ->> endobj -707 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 484.5772 539.579 493.5832] -/Subtype /Link -/A << /S /GoTo /D (section.2.1) >> ->> endobj -708 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 472.4789 539.579 481.485] -/Subtype /Link -/A << /S /GoTo /D (section.2.2) >> ->> endobj -709 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 460.3806 539.579 469.3867] -/Subtype /Link -/A << /S /GoTo /D (section.2.3) >> ->> endobj -710 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 448.2824 539.579 457.2885] -/Subtype /Link -/A << /S /GoTo /D (section.2.4) >> ->> endobj -711 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 436.1841 539.579 445.1902] -/Subtype /Link -/A << /S /GoTo /D (section.2.5) >> ->> endobj -712 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 413.4314 539.579 422.288] -/Subtype /Link -/A << /S /GoTo /D (chapter.3) >> ->> endobj -713 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 401.353 539.579 410.4588] -/Subtype /Link -/A << /S /GoTo /D (section.3.1) >> ->> endobj -714 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 389.2548 539.579 398.3605] -/Subtype /Link -/A << /S /GoTo /D (subsection.3.1.1) >> ->> endobj -715 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 377.1565 539.579 386.2623] -/Subtype /Link -/A << /S /GoTo /D (subsection.3.1.2) >> ->> endobj -716 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 365.1579 539.579 374.164] -/Subtype /Link -/A << /S /GoTo /D (section.3.2) >> ->> endobj -717 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 353.0597 539.579 362.0658] -/Subtype /Link -/A << /S /GoTo /D (section.3.3) >> ->> endobj -718 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 340.9614 539.579 349.9675] -/Subtype /Link -/A << /S /GoTo /D (subsection.3.3.1) >> ->> endobj -719 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 328.7635 539.579 337.8693] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.3.3.1.1) >> ->> endobj -720 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 316.6653 539.579 325.771] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.3.3.1.2) >> ->> endobj -721 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 304.567 539.579 313.6728] -/Subtype /Link -/A << /S /GoTo /D (subsection.3.3.2) >> ->> endobj -722 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 281.9139 539.579 290.7706] -/Subtype /Link -/A << /S /GoTo /D (chapter.4) >> ->> endobj -723 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 269.8356 539.579 278.9413] -/Subtype /Link -/A << /S /GoTo /D (section.4.1) >> ->> endobj -724 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 257.7373 539.579 266.8431] -/Subtype /Link -/A << /S /GoTo /D (section.4.2) >> ->> endobj -725 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 245.6391 539.579 254.7448] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.2.1) >> ->> endobj -726 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 233.5408 539.579 242.4971] -/Subtype /Link -/A << /S /GoTo /D (section.4.3) >> ->> endobj -727 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 221.4426 539.579 230.3988] -/Subtype /Link -/A << /S /GoTo /D (section.4.4) >> ->> endobj -728 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 209.3443 539.579 218.3006] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.4.1) >> ->> endobj -729 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 197.2461 539.579 206.2023] -/Subtype /Link -/A << /S /GoTo /D (section.4.5) >> ->> endobj -730 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 185.1478 539.579 194.1041] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.5.1) >> ->> endobj -731 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 173.0496 539.579 182.0058] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.4.5.1.1) >> ->> endobj -732 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 161.051 539.579 170.0571] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.4.5.1.2) >> ->> endobj -733 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 148.9527 539.579 157.9588] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.5.2) >> ->> endobj -734 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 136.8545 539.579 145.8606] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.5.3) >> ->> endobj -735 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 124.7562 539.579 133.7623] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.5.4) >> ->> endobj -736 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 112.658 539.579 121.6641] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.5.5) >> ->> endobj -737 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 100.4601 539.579 109.4163] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.5.6) >> ->> endobj -738 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 88.3618 539.579 97.3181] -/Subtype /Link -/A << /S /GoTo /D (section.4.6) >> ->> endobj -739 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 76.2636 539.579 85.2199] -/Subtype /Link -/A << /S /GoTo /D (section.4.7) >> ->> endobj -740 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 64.1653 539.579 73.1216] -/Subtype /Link -/A << /S /GoTo /D (section.4.8) >> ->> endobj -689 0 obj << -/D [687 0 R /XYZ 85.0394 794.5015 null] ->> endobj -690 0 obj << -/D [687 0 R /XYZ 85.0394 711.9273 null] ->> endobj -686 0 obj << -/Font << /F21 658 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -743 0 obj << -/Length 3152 -/Filter /FlateDecode ->> -stream -x��[w�����)�(=p��ˣ�9I[۱�y�)X� I�$���]�݁�j�ȵD&'�la0������X -
���?��{q�sq`���+�M������Ue����{����OĠĄ� 1b�j1�80bP�����EbDŐf�J���:r�^�^��1��cEe����bF�!�ԉ�qF2q`���
�C�����& �!q �y����'���Yo�?�W���?�y�}�
g�w��& -& ��{L� ��rrY� 0�8�Za�d��8A�N�l7`GL�AL������Q��q��d�2~T���bx� ��O��������h_��Ns�P� _����?x�FLe1"�cJ�A���� 0Q�:)s��꯹��/AΊ�����s^�0�x��b<e��xB���%��Q�>N�G E�^'R[LM�à�a���!���pωa w�Es}��$�*�<���(yT�
c����;PB1~OG.� �{��I��i)�>?����vY�a
w�e1'��j�q���� �2I� ��R�둶߶������a�;�\�Vun��rR)� ����x���5� �-�b�@�����80xP� �<,�S� -���u���t$%ښ;�Hj��B����
x�I: -O. �{_����I *��U�/�:���}}���Mo��G|�3��%`�����zsq`(��JZ{z8(a�AP:<ӑ�=��'��`�!eÐ�ā!�z�(I�e<!s�Jղ�l�����c����J W� -9.�b�@
����\ ?�����J�?���O� ssY� 0�8�Za�d��8A�ND;����KU�M+�&���� �TŎkjr\�0���b�d���A�~�!�jP��C�s� V�Qף��bN�!� �J�o��Łq�zO�8U�) *��8ϛfQW��o{:�J�#���U 0�`�r��+�80P��q�[C�.�Y��'��n;���n+��W�4D���Ɨ]rq l���W [ �>�e��m��n���;O��-K�b���*b @)�x����@ЎX�Cv <����/�
v�x�,ڢq��9%� `�a����āa�zOX(C,7�ڡ:,~\��S�ٸ�j�N�/�� ,�bx@��x?��������Cwx�|[�/�=�
>PAs�"歘 -`�QuQ�������@�'*� F��Q�=��������u��|�M*�a',b⊱ -� /�u��� �b�:.B��Y -��Xx{3x�����m�L�B�ݕ�Y|��r��C�ǵNP,/0�� V�K�80yQ�Q^� �������?���5L?��!樔 -endobj -742 0 obj << -/Type /Page -/Contents 743 0 R -/Resources 741 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 659 0 R -/Annots [ 748 0 R 749 0 R 750 0 R 751 0 R 752 0 R 753 0 R 754 0 R 755 0 R 756 0 R 757 0 R 758 0 R 759 0 R 760 0 R 761 0 R 762 0 R 763 0 R 764 0 R 765 0 R 766 0 R 767 0 R 768 0 R 769 0 R 770 0 R 771 0 R 772 0 R 773 0 R 774 0 R 775 0 R 776 0 R 777 0 R 778 0 R 779 0 R 780 0 R 781 0 R 782 0 R 783 0 R 784 0 R 785 0 R 786 0 R 787 0 R 788 0 R 789 0 R 790 0 R 791 0 R 792 0 R 793 0 R 794 0 R 795 0 R 796 0 R 797 0 R 798 0 R 799 0 R 800 0 R 801 0 R 802 0 R 803 0 R 804 0 R ] ->> endobj -748 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 758.4766 511.2325 767.4329] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.8.1) >> ->> endobj -749 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 746.445 511.2325 755.4012] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.8.2) >> ->> endobj -750 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 734.5129 511.2325 743.3696] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.8.3) >> ->> endobj -751 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 722.3816 511.2325 731.3379] -/Subtype /Link -/A << /S /GoTo /D (section.4.9) >> ->> endobj -752 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 710.3499 511.2325 719.3062] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.9.1) >> ->> endobj -753 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 698.3182 511.2325 707.2745] -/Subtype /Link -/A << /S /GoTo /D (subsection.4.9.2) >> ->> endobj -754 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 675.998 511.2325 684.7301] -/Subtype /Link -/A << /S /GoTo /D (chapter.5) >> ->> endobj -755 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 663.9862 511.2325 672.9425] -/Subtype /Link -/A << /S /GoTo /D (section.5.1) >> ->> endobj -756 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 651.9545 511.2325 660.9108] -/Subtype /Link -/A << /S /GoTo /D (section.5.2) >> ->> endobj -757 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 629.6343 511.2325 638.4909] -/Subtype /Link -/A << /S /GoTo /D (chapter.6) >> ->> endobj -758 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 617.6225 511.2325 626.7282] -/Subtype /Link -/A << /S /GoTo /D (section.6.1) >> ->> endobj -759 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 605.5908 511.2325 614.5471] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.1.1) >> ->> endobj -760 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 593.5591 511.2325 602.5154] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.1.1.1) >> ->> endobj -761 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 581.5275 511.2325 590.4837] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.1.1.2) >> ->> endobj -762 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 569.4958 511.2325 578.4521] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.1.2) >> ->> endobj -763 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 557.4641 511.2325 566.4204] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.1.2.1) >> ->> endobj -764 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 545.4324 511.2325 554.3887] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.1.2.2) >> ->> endobj -765 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 533.4007 511.2325 542.5065] -/Subtype /Link -/A << /S /GoTo /D (section.6.2) >> ->> endobj -766 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 521.3691 511.2325 530.3254] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.1) >> ->> endobj -767 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 509.3374 511.2325 518.2937] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.2) >> ->> endobj -768 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 497.3057 511.2325 506.262] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.3) >> ->> endobj -769 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 485.274 511.2325 494.2303] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.4) >> ->> endobj -770 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 473.2424 511.2325 482.1986] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.5) >> ->> endobj -771 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 461.2107 511.2325 470.167] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.6) >> ->> endobj -772 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 449.179 511.2325 458.1353] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.7) >> ->> endobj -773 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 437.1473 511.2325 446.1036] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.8) >> ->> endobj -774 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 425.1157 511.2325 434.0719] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.9) >> ->> endobj -775 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 413.084 511.2325 422.0403] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.10) >> ->> endobj -776 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 401.0523 511.2325 410.0086] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.10.1) >> ->> endobj -777 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 389.0206 511.2325 398.1264] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.10.2) >> ->> endobj -778 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 377.0886 511.2325 386.0947] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.11) >> ->> endobj -779 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 365.0569 511.2325 374.063] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.12) >> ->> endobj -780 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 353.0252 511.2325 362.0313] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.13) >> ->> endobj -781 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 340.9936 511.2325 349.9997] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.14) >> ->> endobj -782 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 328.9619 511.2325 337.968] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.15) >> ->> endobj -783 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 316.9302 511.2325 325.9363] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.16) >> ->> endobj -784 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 304.7989 511.2325 313.9046] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.1) >> ->> endobj -785 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 292.7672 511.2325 301.7235] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.2) >> ->> endobj -786 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 280.7355 511.2325 289.8413] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.3) >> ->> endobj -787 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 268.7038 511.2325 277.8096] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.4) >> ->> endobj -788 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 256.6722 511.2325 265.6285] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.5) >> ->> endobj -789 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 244.6405 511.2325 253.5968] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.6) >> ->> endobj -790 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 232.6088 511.2325 241.5651] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.7) >> ->> endobj -791 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 220.5771 511.2325 229.5334] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.8) >> ->> endobj -792 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 208.5455 511.2325 217.5017] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.9) >> ->> endobj -793 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 196.5138 511.2325 205.4701] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.10) >> ->> endobj -794 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 184.4821 511.2325 193.4384] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.11) >> ->> endobj -795 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 172.4504 511.2325 181.4067] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.12) >> ->> endobj -796 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 160.4187 511.2325 169.375] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.13) >> ->> endobj -797 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 148.3871 511.2325 157.3433] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.14) >> ->> endobj -798 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 136.3554 511.2325 145.3117] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.15) >> ->> endobj -799 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 124.3237 511.2325 133.4295] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.16) >> ->> endobj -800 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 112.292 511.2325 121.3978] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.17) >> ->> endobj -801 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 100.2604 511.2325 109.2166] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.18) >> ->> endobj -802 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 88.2287 511.2325 97.3344] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.16.19) >> ->> endobj -803 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 76.197 511.2325 85.3027] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.17) >> ->> endobj -804 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [499.2773 64.1653 511.2325 73.1216] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.18) >> ->> endobj -744 0 obj << -/D [742 0 R /XYZ 56.6929 794.5015 null] ->> endobj -741 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -807 0 obj << -/Length 3353 -/Filter /FlateDecode ->> -stream -x��Ks7���<�j���x��Ö^v�rd�$W�6Ɂ&���P�Î��/�`�"�%8~��J�������4�̐������"TX��VE��
&;�7r{���1��}x����ߟ ݳ���]��2��z��_w�^�]��]^��~����e<)T̨����ί������i�a��}p?P¬�ɎT�()D�����ο� �_W����!�p��$\�O�8'�jg����o�G)w���g�p��1T: �a��r�(���ʏs0<�2�rS��/�E9)���>Wt���?��g{�F�]����x��~�ܭ�+nH�)k}��٨9�1 r�Pp3f��_Ŭذ#0��#��#5)�f�N�(1��o��j�O��7�jؼy=����x��t\�
� -[|�tBܚ
ĠY ��&a
����9 +Zhĝ��oZ�ih���� d�cN=w�ܝ
�`Z ��)a�=�TXK�*d ��"0ݝ��b�g؊nͅ -"Ь�M�NhRv ��ڙ�Dkm{���R& -P�qP֕���H����x>X&��� B~������\B� B�Z�t��h��\{K��DPi"!�rQ.�j�G��+䶾��'x8� ��#�m7? ;0~P�-?�!B�����늟��}9 U���������W���܈m+�����Q�I1�joQ +�VDyF^.��Y���w��2nʒ�b��nW�dOy -^�fb��(a�$��A��zUII���e$�/��L��� f2,��������Yb�Nj" ���5����b�u[th6.@��t�����pA���N�� ��sp9=;z���$��MZ�.^�x|y%�2 ��C�����ނ�)q�X -"x��t/��@������H� J}^�譥ۼ\���l����t4u�aX��ͺ��©���شx�+�n��a~�КZ��'Z*߉�j�z��`0(����*�M��b<_��&�k��W]px�U���(aF�=Ҥ(і��������m�d~�<��M����*$�������Xm�pE��Y.��a�T�8T�?쉯� -�!���A�X������#�ޖN�%���|�>T�qis�N|ᚇ��z�T�Ӫ٠, -�tb'W���\A�+Y��� W�����'5�E��R��y�yO� �1���7�Lko�g�j�lu��) ��P�gC1�`X1�v`P�����$�\��ɸQ�skb[�jU<���N`�O���00f0 ;0`6��� a�� ��]�� clw6]��.�Wn���Q�{����@��Y��{ < �M���G7z+?E {���d�]�j�i�I=M 嶵ɾ���s/( �\Ok1D��4�S �tQXB�� ��
}�����|�\M��g ��w��g����C�f����K}�ڨ� �s�t�pՏ����ѿ\*g����'���X��|��;apT{�J�^zU�� �4���X��ݸGW�j�V���x6S�g�ɛz�ڙ� -��l� ��Zv` ��#Rf���&�\��;%ګ���u���W�����h� �B)x;% ���M�� Jړ��~B��er�wnn�j8 ����Q��%�J0h���`O��`Ck�rb�&T�z��ya�~�.��:��{��V^�WOpn����#&aF�=�_���Ftjxl} 5��p6.��� ���t�q}+u ���.n��ͺPA��A!:+(��� �� -���D��DR�< �I"�˪�� -+��|�G�*�msZ�]-��� -��֟��� - �=kV������0WlhM\� -��l�p�V�� �G�*i~?7��x�^wP����@���
� a3�hk���7�]M�N�-m_�6A -at�������`�����hw��2�
U q+,1�����`_��j>/���G�3y�T[�>L���,�rJ ��v?w.a�;r�41�I��4 ����o Jb��_e(�:" �QC�hwݙ2�U A��X! -�j@���r�?�*����^�P�-A�LP�q6A@#Ɛ���!A��H��j�;����[�T��9�� ->�&b�2�� -endobj -806 0 obj << -/Type /Page -/Contents 807 0 R -/Resources 805 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 659 0 R -/Annots [ 809 0 R 810 0 R 811 0 R 812 0 R 813 0 R 814 0 R 815 0 R 816 0 R 817 0 R 818 0 R 819 0 R 820 0 R 821 0 R 822 0 R 823 0 R 824 0 R 825 0 R 826 0 R 827 0 R 828 0 R 829 0 R 830 0 R 831 0 R 832 0 R 833 0 R 834 0 R 835 0 R 836 0 R 837 0 R 838 0 R 839 0 R 840 0 R 841 0 R 842 0 R 843 0 R 844 0 R 845 0 R 846 0 R 847 0 R 848 0 R 849 0 R 850 0 R 851 0 R 852 0 R 853 0 R 854 0 R 855 0 R 856 0 R 857 0 R 858 0 R 859 0 R 860 0 R 864 0 R 865 0 R ] ->> endobj -809 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 758.4766 539.579 767.4329] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.19) >> ->> endobj -810 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 746.5215 539.579 755.4777] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.20) >> ->> endobj -811 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 734.5663 539.579 743.5226] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.21) >> ->> endobj -812 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 722.6111 539.579 731.5674] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.22) >> ->> endobj -813 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 710.656 539.579 719.6122] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.23) >> ->> endobj -814 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 698.7008 539.579 707.6571] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.2.24) >> ->> endobj -815 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 686.7456 539.579 695.7019] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.24.1) >> ->> endobj -816 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 674.8901 539.579 683.8962] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.24.2) >> ->> endobj -817 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 662.935 539.579 671.7916] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.24.3) >> ->> endobj -818 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 650.9798 539.579 659.9859] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.2.24.4) >> ->> endobj -819 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 638.925 539.579 647.8812] -/Subtype /Link -/A << /S /GoTo /D (section.6.3) >> ->> endobj -820 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 626.9698 539.579 635.9261] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.3.1) >> ->> endobj -821 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 615.0146 539.579 623.9709] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.3.1.1) >> ->> endobj -822 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 603.1591 539.579 612.0157] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.3.1.2) >> ->> endobj -823 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 591.1043 539.579 600.0606] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.3.2) >> ->> endobj -824 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 579.1491 539.579 588.1054] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.3.3) >> ->> endobj -825 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 567.1939 539.579 576.1502] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.3.4) >> ->> endobj -826 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 555.2388 539.579 564.1951] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.3.5) >> ->> endobj -827 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 543.2836 539.579 552.2399] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.3.5.1) >> ->> endobj -828 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 531.3284 539.579 540.2847] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.3.5.2) >> ->> endobj -829 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 519.3733 539.579 528.3296] -/Subtype /Link -/A << /S /GoTo /D (subsubsection.6.3.5.3) >> ->> endobj -830 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 507.4181 539.579 516.3744] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.3.6) >> ->> endobj -831 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 495.4629 539.579 504.5687] -/Subtype /Link -/A << /S /GoTo /D (subsection.6.3.7) >> ->> endobj -832 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 473.5253 539.579 482.2574] -/Subtype /Link -/A << /S /GoTo /D (chapter.7) >> ->> endobj -833 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 461.59 539.579 470.5462] -/Subtype /Link -/A << /S /GoTo /D (section.7.1) >> ->> endobj -834 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 449.6348 539.579 458.7405] -/Subtype /Link -/A << /S /GoTo /D (section.7.2) >> ->> endobj -835 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 437.6796 539.579 446.7854] -/Subtype /Link -/A << /S /GoTo /D (subsection.7.2.1) >> ->> endobj -836 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 425.7245 539.579 434.8302] -/Subtype /Link -/A << /S /GoTo /D (subsection.7.2.2) >> ->> endobj -837 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 413.7693 539.579 422.875] -/Subtype /Link -/A << /S /GoTo /D (section.7.3) >> ->> endobj -838 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 391.8316 539.579 400.5637] -/Subtype /Link -/A << /S /GoTo /D (chapter.8) >> ->> endobj -839 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 379.8963 539.579 388.8526] -/Subtype /Link -/A << /S /GoTo /D (section.8.1) >> ->> endobj -840 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 367.9411 539.579 376.8974] -/Subtype /Link -/A << /S /GoTo /D (subsection.8.1.1) >> ->> endobj -841 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 355.986 539.579 364.9423] -/Subtype /Link -/A << /S /GoTo /D (section.8.2) >> ->> endobj -842 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 344.0308 539.579 352.9871] -/Subtype /Link -/A << /S /GoTo /D (section.8.3) >> ->> endobj -843 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 322.0931 539.579 330.8253] -/Subtype /Link -/A << /S /GoTo /D (appendix.A) >> ->> endobj -844 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 310.1578 539.579 319.1141] -/Subtype /Link -/A << /S /GoTo /D (section.A.1) >> ->> endobj -845 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 298.2027 539.579 307.1589] -/Subtype /Link -/A << /S /GoTo /D (subsection.A.1.1) >> ->> endobj -846 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 286.2475 539.579 295.2038] -/Subtype /Link -/A << /S /GoTo /D (section.A.2) >> ->> endobj -847 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 274.2923 539.579 283.2486] -/Subtype /Link -/A << /S /GoTo /D (subsection.A.2.1) >> ->> endobj -848 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 262.3372 539.579 271.2934] -/Subtype /Link -/A << /S /GoTo /D (section.A.3) >> ->> endobj -849 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 250.382 539.579 259.3383] -/Subtype /Link -/A << /S /GoTo /D (subsection.A.3.1) >> ->> endobj -850 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 238.4268 539.579 247.5326] -/Subtype /Link -/A << /S /GoTo /D (subsection.A.3.2) >> ->> endobj -851 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 226.4717 539.579 235.5774] -/Subtype /Link -/A << /S /GoTo /D (subsection.A.3.3) >> ->> endobj -852 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 204.534 539.579 213.2661] -/Subtype /Link -/A << /S /GoTo /D (appendix.B) >> ->> endobj -853 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [527.6238 192.5987 539.579 201.555] -/Subtype /Link -/A << /S /GoTo /D (section.B.1) >> ->> endobj -854 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [522.6425 180.6435 539.579 189.7493] -/Subtype /Link -/A << /S /GoTo /D (section.B.2) >> ->> endobj -855 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [522.6425 168.6883 539.579 177.7941] -/Subtype /Link -/A << /S /GoTo /D (section.B.3) >> ->> endobj -856 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [522.6425 156.7332 539.579 165.8389] -/Subtype /Link -/A << /S /GoTo /D (section.B.4) >> ->> endobj -857 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [522.6425 144.778 539.579 153.8838] -/Subtype /Link -/A << /S /GoTo /D (section.B.5) >> ->> endobj -858 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [522.6425 132.8228 539.579 141.9286] -/Subtype /Link -/A << /S /GoTo /D (section.B.6) >> ->> endobj -859 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [522.6425 120.8677 539.579 129.9734] -/Subtype /Link -/A << /S /GoTo /D (section.B.7) >> ->> endobj -860 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [522.6425 108.9125 539.579 118.0182] -/Subtype /Link -/A << /S /GoTo /D (section.B.8) >> ->> endobj -864 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [522.6425 97.057 539.579 106.0631] -/Subtype /Link -/A << /S /GoTo /D (section.B.9) >> ->> endobj -865 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [522.6425 85.0022 539.579 94.1079] -/Subtype /Link -/A << /S /GoTo /D (section.B.10) >> ->> endobj -808 0 obj << -/D [806 0 R /XYZ 85.0394 794.5015 null] ->> endobj -805 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -868 0 obj << -/Length 69 -/Filter /FlateDecode ->> -stream -x�3T0 -endobj -867 0 obj << -/Type /Page -/Contents 868 0 R -/Resources 866 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 659 0 R ->> endobj -869 0 obj << -/D [867 0 R /XYZ 56.6929 794.5015 null] ->> endobj -866 0 obj << -/ProcSet [ /PDF ] ->> endobj -872 0 obj << -/Length 2197 -/Filter /FlateDecode ->> -stream -x��Yݏ��_�G-pf�)�y��������
��A+qm�d���n���C)˶|w�-РX`M���p�7��lMᏭ�"T�Ό$�2�.�+��»��XБJ%�����%4Q�g��|����|�ٚS��\� ����L#�Y?�?'�v�a��݆+���_ ~�i�d:cn�-� �~f��r,��m��XbR�F� 悹N�agai��i�k�O��}^58������ � ������x � ��h��� _�O�9���c3�ad[TO� ���X�6C5T(͒�%
�$8�;c�(ţ�a��;��,��qW�.��N�]U�5J�yӀ�3����h�{���d���n���%ʟ����6 �f��]�U�yDI�l��?\�!o�Ja+N�>;�'��������놃��.w��T�Ø�������(�T��A4���X����mO�-�*�����Z�Ǖ+��j� ܳ��[ �~�v<����@�U���QK�pR��c�g���bI Ob� -��A)*�a��qf��d -D ���� R -}�7A,��+�c���%%��8y�iU ��^OI��0Sԃ�C�>��e�<��!8|V5T����W���������*�sU���v�>�J���D�A G -Oy��C֕���@�64* >2�NgÌ&����UlN�.�R �#�0H���n*�؆�����K�{h��ˌ�B/-Rv�i�n0�b��HU錍 -�j�^�� h�*"��K4ѷ�3v��tgihM2�c`��w.�˺ >,)���`7!] -> Y��T&��dQ ���Qa��'�L, -��S^�I�� ���7��k�a� �V��v��A
D��
�� ���} ����U�[o#zv�os� ї��[��g�����ql -��R���6x_��?xc�_� �!R��K�e�P�#ĆSYV�b�;����l�Wc�K㡪/�gn� @?y -�[}�[�y5s�,����� -AD���g������` �
���^��0�����_�# �r �\�+��_O+���-� �endstream -endobj -871 0 obj << -/Type /Page -/Contents 872 0 R -/Resources 870 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 886 0 R ->> endobj -873 0 obj << -/D [871 0 R /XYZ 85.0394 794.5015 null] ->> endobj -6 0 obj << -/D [871 0 R /XYZ 85.0394 769.5949 null] ->> endobj -874 0 obj << -/D [871 0 R /XYZ 85.0394 582.8476 null] ->> endobj -10 0 obj << -/D [871 0 R /XYZ 85.0394 512.9824 null] ->> endobj -875 0 obj << -/D [871 0 R /XYZ 85.0394 474.7837 null] ->> endobj -14 0 obj << -/D [871 0 R /XYZ 85.0394 399.5462 null] ->> endobj -876 0 obj << -/D [871 0 R /XYZ 85.0394 363.8828 null] ->> endobj -18 0 obj << -/D [871 0 R /XYZ 85.0394 223.0066 null] ->> endobj -880 0 obj << -/D [871 0 R /XYZ 85.0394 190.9009 null] ->> endobj -881 0 obj << -/D [871 0 R /XYZ 85.0394 170.4169 null] ->> endobj -882 0 obj << -/D [871 0 R /XYZ 85.0394 158.4617 null] ->> endobj -870 0 obj << -/Font << /F21 658 0 R /F23 682 0 R /F47 879 0 R /F39 863 0 R /F48 885 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -889 0 obj << -/Length 3125 -/Filter /FlateDecode ->> -stream -x��]�۶��~� u3�~��ۍ3�sb��i�<P"��"�:��뻋]P����6�f�+`�� '��"��8S�"�� 2Zl7b�����H�Y9�����_^�d�Y���z7�+
D��ź���A��b�����JEb���wo� ����G�������""���=|��J�8�o���q�� �K������ۗ�v��������o^�G���I����n>�*0���t�F����2�8܄��Pk7Rݼ��i�p2k�z%%E�t�<�R�'�( b
S(���!�vMU5�����mS?�z(�������钑��)*k���ve;Y���;��ys�r��!������_����R�q�R -h���t+�[� O�D� �ᨯpj�Idi�Ht �$bR�r�Le���d��^�|��DE��'�|�, 2��9#-� w(G
w�"0%�(����$����Qh%��<�k�E�����&K�J�Da�_��вc!�?�����O..� -3o���+� �� -�~���8XW�E>䛼7����a��~��izڮ�wMwp��fy�� �%�b��l ~��C�4^c=�VԈ�#!�E����l -��rk��t}nS@FYѨ]� ��� �Y��j@� �(���3��{l�N&�� �m��o0.����.��*A��ڢe�4 :���K�Зӷ�\�[�|"4Zq� �ʭe�rH��=�C�,ͦ�y�Pk/Z2rUB �l����;�=�i�� �淣�J� @��W�f����������,��S[������! | -�(� -�Vx����C�k'HX-hʀ�V�����$yI�2>z��pd�<VW8�� -| �S�P -B��9��|�4��xx�qFPB���kɆ O��i i��#[ %J;��S8�J#E9%�h��\8����rv�e(GA����� �?0j����>�md� -����`�n�p��r�0h���f�#�bp��`�n ���h�p(��w�|Ȓ@��6�lꊓ�����%DU�O% ��ʁ]]�7���� ϛy���2��C[��D.G��-R��[�X����@dB0�mm^�ܜ�h�u����o�m���I��ڹ�ms� -:fc<
�".�n� �0�P�3P��( �x��:#�0f�:a^xNZ��̬T2R�= @�:G�.��D50�WK#�yD�@���"6�Gi�5 � -X���GAfn�cS�]Z0�.zS�8�]}I�R�f\�D{ܜ�0��4 �0��^ -b5:��y�,��+��$u9@y�7ےC.�ƸH�#�D�d�f -� -J�}�������͘� 2�LM/ :i
5 -�&M�d)#�j��ZK��^�ʝ�V��8�rF��ۂ��=��@��8UWm �m�>v/����Jӣ�mM��� l��Ze���c��Ŭ �+�4a� XQ Б�5|��C2:�����!;���Oޘ�d�>C$_� E I�ғ�×qHHS9k�=���-�:�����w�ypv��) -S���-�깇b��;=��m� �c?� *؇�� �����m�+����%:W�ϝ$�E� -endobj -888 0 obj << -/Type /Page -/Contents 889 0 R -/Resources 887 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 886 0 R -/Annots [ 896 0 R 897 0 R ] ->> endobj -896 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [272.8897 210.0781 329.1084 222.1378] -/Subtype /Link -/A << /S /GoTo /D (types_of_resource_records_and_when_to_use_them) >> ->> endobj -897 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [190.6691 182.1322 249.6573 191.5418] -/Subtype /Link -/A << /S /GoTo /D (rfcs) >> ->> endobj -890 0 obj << -/D [888 0 R /XYZ 56.6929 794.5015 null] ->> endobj -891 0 obj << -/D [888 0 R /XYZ 56.6929 756.8229 null] ->> endobj -892 0 obj << -/D [888 0 R /XYZ 56.6929 744.8677 null] ->> endobj -22 0 obj << -/D [888 0 R /XYZ 56.6929 649.0335 null] ->> endobj -893 0 obj << -/D [888 0 R /XYZ 56.6929 609.5205 null] ->> endobj -26 0 obj << -/D [888 0 R /XYZ 56.6929 551.1302 null] ->> endobj -894 0 obj << -/D [888 0 R /XYZ 56.6929 525.7505 null] ->> endobj -30 0 obj << -/D [888 0 R /XYZ 56.6929 422.4834 null] ->> endobj -895 0 obj << -/D [888 0 R /XYZ 56.6929 395.8284 null] ->> endobj -34 0 obj << -/D [888 0 R /XYZ 56.6929 166.2827 null] ->> endobj -898 0 obj << -/D [888 0 R /XYZ 56.6929 138.253 null] ->> endobj -887 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F47 879 0 R /F39 863 0 R /F21 658 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -903 0 obj << -/Length 3414 -/Filter /FlateDecode ->> -stream -xڥZKs�6��W��j��A -a������f�����W�\��� ����t� -B�c34�����=��r�
���G�}0N: -$�vG"��Uk"��}O-�´7� �9�D��� Q �X4 -ڽ��b����r����� �u����K�y{���� �����0�#����� _Xy��4��ǧ�ǚh>����*x�u�s�K ����Ou�-~�f ->�D�)�y�ZN�/ ��Le�~ȿQt�Op��j��E��#�,�`� �9nt���R��O8X���u � ���tm}�|Bd�@
*�4�I ���;<��j�#GC� c?�H�4n�5ϯ��Q��c��,�RM��#$��B2�?ԧ�"��'�s���(�q�r�[|+� �����R�]C���3tt� �=F���ʅ�_�x���
Jӊqf��疺���))�z@�4�W@����1�� �i Q ��
�@}!���^��'T��:� -n�=*��wz��x�K��i{ - �0���^!��� -��)�c��|F��¡f63 -O=�&�w�W�dcZ*�� ����i����d��6��]Ь.dJ�� &��Ys��M� >��W�S���M� fH�WUOA -fD -_t���v��M����S &c�Q�f����:�Mϣ� -4��9�����v��}�1[,�\\�G S=�^��:�mZc��1�p��/���~�F�_ [��U����.�rl� �p���8� m��������_S� �p�����-��E*��C�� g�̌�ge��A�)��p� �%_* { ��7�������(�b1A�!�G����+ܪ�_ǥ�u�7k�=uU+ -��
X��ÕXT
�p~�C�,x^��z�;���|����`�\5m� )"_�����$X5�Ƌ��j��8B�D�^��r -����H�[�� ��(L�X����V5��,w�. -��piQ�Epd -���( -endobj -902 0 obj << -/Type /Page -/Contents 903 0 R -/Resources 901 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 886 0 R -/Annots [ 906 0 R 907 0 R ] ->> endobj -906 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [519.8432 463.1122 539.579 475.1718] -/Subtype /Link -/A << /S /GoTo /D (diagnostic_tools) >> ->> endobj -907 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [84.0431 451.8246 133.308 463.2167] -/Subtype /Link -/A << /S /GoTo /D (diagnostic_tools) >> ->> endobj -904 0 obj << -/D [902 0 R /XYZ 85.0394 794.5015 null] ->> endobj -38 0 obj << -/D [902 0 R /XYZ 85.0394 570.5252 null] ->> endobj -905 0 obj << -/D [902 0 R /XYZ 85.0394 541.3751 null] ->> endobj -42 0 obj << -/D [902 0 R /XYZ 85.0394 434.1868 null] ->> endobj -908 0 obj << -/D [902 0 R /XYZ 85.0394 406.5769 null] ->> endobj -46 0 obj << -/D [902 0 R /XYZ 85.0394 301.1559 null] ->> endobj -909 0 obj << -/D [902 0 R /XYZ 85.0394 276.6843 null] ->> endobj -50 0 obj << -/D [902 0 R /XYZ 85.0394 200.1512 null] ->> endobj -910 0 obj << -/D [902 0 R /XYZ 85.0394 175.6796 null] ->> endobj -901 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F47 879 0 R /F39 863 0 R /F21 658 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -914 0 obj << -/Length 2458 -/Filter /FlateDecode ->> -stream -xڥ˒��>_�[4U � -Y������U ��. T�ūL�@�\5wQ��8R�C���g�n뢤DH��QI�$�8K(�wp9������e8j[u-O{s������yp8V�>�i��������Ǖ�M��qO_�h�����0^���y v�H��Y阠� <�RF��,a3(�z �8���6"z]_���h��5�<�<�u�_� ��[ H�1ʍ!$2 -���T � -�>a������-}���©��A"U�x��\wݷ�d�)^��`��Ix�2��6�0 -�,��&� W2%�������l]5��
rϸn &��A��s�q; -G �{�� - j�� -�.X������/��'��+`cڸ��F�r �rr�(���l �(�G�㙼 �cp�I�Z�/� ?r��3�A"�6 �wի��0UohN`K�UnP*y�"� Ɠ2 ��o�-�A��ٕ���0���g�s۵�z���� U07'*f�um��ERR�a�*Y+ N��`,M %ܒ`�>���#Y]��Q����3�������IP0aׅ�T1�\1e�pKF�ǂ�m�W)}s ��g�^8�e�i��7�_�&&@(M��S�wEfW^�
F<�Asp��̡^vS)q��!� 1�衰�Z��x��e�?��d" ��d&U�����Bq�.;疸�Y �V�2�HJf9&,���Cm,�n�d���T"c�����t��Y)�n���|�h��(��T -�i��;.Pw��s7��@Va$���DF �ޘ�Y�GZF��K����]���\�)Z�����EC�(_=H y rZ~D���efk�(�6��P�0-$���
���W�Dh���vh�d��"o��B�#�b� <� &dg��[�x��e���K���}�#Elr|��uϫ]|3�ϲ{� ��� ��QcL��J���<_�Z0F~tm�0ֺ��+��E%\�!�yNb<[:�;_�6I ��~�L���O�U>N�������̷ �CO8��6�� p�� ������t���]{�x|zO#�zͺ�4dq#�j� �*�M�D7�E�SzHJgoO0�J
t�� �b� [@X������i�fG�XGM ���ٳ�K9*�����]���� �FW5���d��I蓹�ȹ�W9�6�6�=M���:���%� ��۪� 9=l�~�[��U̟R��Xw/c|�p�A ��ċI�EƩ#�}�� ]����4��@�b��A�a��44�����Ww/�bm��X���ӗbg�f�N�F�k�_ �IJF�Y��B�����w�B� i����s�`3���͒QV�=Mn�OX,� C6��U��.��ԐS���/1��Vue�$SBC�CL
�C a �.�D�ZF��K) I]�/��_�1|��竣Ig8��قv���<��-W�I��] @�wz]�+chft���[ -�4 ՒB� nU�hjU -e*�����,EJ��Mq 9j���/��Gi�5���y�օ���vzO�So9� ��o��!��OH8&������(
T���T�A8ʀ3�Rjxù�������:�endstream -endobj -913 0 obj << -/Type /Page -/Contents 914 0 R -/Resources 912 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 886 0 R ->> endobj -915 0 obj << -/D [913 0 R /XYZ 56.6929 794.5015 null] ->> endobj -54 0 obj << -/D [913 0 R /XYZ 56.6929 717.7272 null] ->> endobj -916 0 obj << -/D [913 0 R /XYZ 56.6929 690.4227 null] ->> endobj -58 0 obj << -/D [913 0 R /XYZ 56.6929 550.0786 null] ->> endobj -917 0 obj << -/D [913 0 R /XYZ 56.6929 525.2967 null] ->> endobj -62 0 obj << -/D [913 0 R /XYZ 56.6929 393.0502 null] ->> endobj -918 0 obj << -/D [913 0 R /XYZ 56.6929 363.1913 null] ->> endobj -912 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F47 879 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -921 0 obj << -/Length 2095 -/Filter /FlateDecode ->> -stream -xڕXɒ�6��+t�T���1��*�T<9�9`DHD
� -wQ�gY�� ��YY��Y����o�M-�Fw�(
���h[��E � -J��C
2� �՟!�(��8���R� Uҧ7"�t� �3=} y�FG�� �:�&q[��*Aϻ<���q�{���V�It�+������[�d
�y����f^���!r�㮯� {3$�J���TP�X�5�'7�7mdk��ޱ �q�Y�|nԁn��S -fhW�(��Yhov ��vl�25�,*Yݳ�������q��j�|S�͂�{�uϕcq��]#Xg��,�I���ߨ �8dD\2lL|��lV��J n �`�.h���#A&F��=�;I^4� �TRd�C#4�hšV�|.��hM�4`��_�i�\Տ�+�t��ab\rc8JK� rgM� �ԑ��~$�&TE���a��n�hQYd��J�k����Z��xm�v��|�Ull�Y6H�Q�X��G9(���� -dX�cs�.�~��� �����:%<�7IE��ږؒ� 2 y�T -hZv�x�Y/� ���N6�dy 8xp]�c~{�0��~��$���3�|�$�$�R�2�/{��4���c��W�a����,�XT�JP����VD�6 -^A��"r� -D�49�vD����n�~������/��>��P�_�M�Z繗� -�ѸU�>Gy%�*哦�t�RW8 -��Ihs�]W�y -�m� �Q��z -�~�
� f�"���9Lt����j� mK(��b� -endobj -920 0 obj << -/Type /Page -/Contents 921 0 R -/Resources 919 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 886 0 R -/Annots [ 927 0 R 928 0 R ] ->> endobj -927 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [519.8432 268.1131 539.579 280.1727] -/Subtype /Link -/A << /S /GoTo /D (acache) >> ->> endobj -928 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [84.0431 256.1579 143.5361 268.2175] -/Subtype /Link -/A << /S /GoTo /D (acache) >> ->> endobj -922 0 obj << -/D [920 0 R /XYZ 85.0394 794.5015 null] ->> endobj -66 0 obj << -/D [920 0 R /XYZ 85.0394 769.5949 null] ->> endobj -923 0 obj << -/D [920 0 R /XYZ 85.0394 574.3444 null] ->> endobj -70 0 obj << -/D [920 0 R /XYZ 85.0394 574.3444 null] ->> endobj -924 0 obj << -/D [920 0 R /XYZ 85.0394 540.5052 null] ->> endobj -74 0 obj << -/D [920 0 R /XYZ 85.0394 447.7637 null] ->> endobj -925 0 obj << -/D [920 0 R /XYZ 85.0394 410.3389 null] ->> endobj -78 0 obj << -/D [920 0 R /XYZ 85.0394 348.7624 null] ->> endobj -926 0 obj << -/D [920 0 R /XYZ 85.0394 311.223 null] ->> endobj -82 0 obj << -/D [920 0 R /XYZ 85.0394 189.9853 null] ->> endobj -929 0 obj << -/D [920 0 R /XYZ 85.0394 156.0037 null] ->> endobj -919 0 obj << -/Font << /F21 658 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -933 0 obj << -/Length 611 -/Filter /FlateDecode ->> -stream -xڥTMs�0��+t3E�t�I�;���v� �$�bp$Ϳ�@�&Mz�x<��v�v�zM -�,}Q7c�}v����b�JP*ݾ-W f��=�D�+��\Ki� �'�s�?0���U�W`[����ϲ��B
>�m[7���� WN��n���QD����Z3���c ��������/���*�Kzܹ�n�8AabD\Q�̈́��|�������@�endstream -endobj -932 0 obj << -/Type /Page -/Contents 933 0 R -/Resources 931 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 886 0 R ->> endobj -934 0 obj << -/D [932 0 R /XYZ 56.6929 794.5015 null] ->> endobj -86 0 obj << -/D [932 0 R /XYZ 56.6929 769.5949 null] ->> endobj -935 0 obj << -/D [932 0 R /XYZ 56.6929 744.7247 null] ->> endobj -931 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -938 0 obj << -/Length 1222 -/Filter /FlateDecode ->> -stream -x��WI��D������H��Z��OͰ�Hs`8T�rb�Se�rB���js6s� -�ǥ��E�S��2Of=�&��W.t�LFX��y��'1���fӸ<�n�&=Z|K����Dn��
[;�iteL-d��^z@3� �r0�sS���а�@E�Q/�ph�@#�I����kg+�ۓ�:c��� &L0�3LDc�o`�=����n��"�i�$����Z�Z}!W�37�u�VDS' ���4A�L\�6� @{{VnZ&�v�vR���� ����V�k�R���X�iuD��q��Uw�w��{�� ���dC���a~}��e ��[�M#AJTyy+W��@A����F�jc���=�0T�>� ��Eq)�+\]gR�
=^�l9��σ�ڻ� -��2��@[ ��('�Vt�(�� F �7��� K�sTRRx;֛#<鹎{���I��7�P鴫�q���1t6Ihb�{�^��(��!��m�C�e -5�B=������/n�G��^x�`W>�QAF?�9����;� ��9�����w��|��0��I�
�:���0
� �0�1���SM�^�^r0m%���1��� �O��������]h�̗��wP�/2�#��4�PA�<2yaz�m��zt�7�̙�endstream -endobj -937 0 obj << -/Type /Page -/Contents 938 0 R -/Resources 936 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 944 0 R ->> endobj -939 0 obj << -/D [937 0 R /XYZ 85.0394 794.5015 null] ->> endobj -90 0 obj << -/D [937 0 R /XYZ 85.0394 769.5949 null] ->> endobj -940 0 obj << -/D [937 0 R /XYZ 85.0394 575.896 null] ->> endobj -94 0 obj << -/D [937 0 R /XYZ 85.0394 529.2011 null] ->> endobj -941 0 obj << -/D [937 0 R /XYZ 85.0394 492.9468 null] ->> endobj -98 0 obj << -/D [937 0 R /XYZ 85.0394 492.9468 null] ->> endobj -942 0 obj << -/D [937 0 R /XYZ 85.0394 466.0581 null] ->> endobj -102 0 obj << -/D [937 0 R /XYZ 85.0394 237.1121 null] ->> endobj -943 0 obj << -/D [937 0 R /XYZ 85.0394 206.4074 null] ->> endobj -936 0 obj << -/Font << /F21 658 0 R /F23 682 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -947 0 obj << -/Length 1859 -/Filter /FlateDecode ->> -stream -x���r�6���D�D0^$����v�L⸲RO'́"!�>���v��]<HQ2e��g�� `��]������ �� B�<L<'�Gع��w#bq&-Ҥ��f6:>g��Ч�3[�h �� �,��2��(`�����xB=�^�MǞ�� ���:�����.>]^�'���Ǔ�Y��4���.�/�}���� ��:)��̔�G_�b'�ߏ0b��
L0"aH�|�=�<�X����G?u{����F��tHu����2����B�'>��F�
PZL�$�PT��#���ԡ!"�'"��G5��~e �Q���FŻH�4ko��8ʖeݠJ� �a��,�&]���4(���� �����wF�����eu���(_e�e>�aOk=̗WV�8J���j�������ɺ���� +f�ɾ�v?ʲr#��ҎUT� ��2 ���d��#: !E�<� -�"x�c�x��Yy�2�J�7��=���i�b� �Ќ �з�]�h���Qس�]��퐟 �7Xu+� z�L_���Ez�u|N�C8b ��,�ȣ��Іy:� �>�QbB�(��8-n�q� xp� -�� u'� ����<mR��j -o�HiB��&��yG\O㨰��l/Sy'-vjwu�Q���3�ތ뺣���&]e��ʸ�cR��_���u��wՃ���(e��a��!fC۱��*��r�:� -
4�s�*X���`R7]�U�ޗc�
��>�p���Z������ 5٤����ٔ�7���R 6�K� �ETf��dy�Sj�������`�%b�4�o
�C�+,�t�"��>),,J��+�4�� �,#K;�RY4vy�f�].�B�GZ5ʨ�*W�T�k�h��a��Ѳ����Is��~M@�0u�O�9yVQB��B�%��T�G/� ����@˂�t��&�L�C�q�<;�/��g����ut ?�p��;�}P���'��Wy@��/WP�qB}w*�r�� [�v�b��G�ӭ��FM�� -�� -�Ʋ�Z����ZyQ7$�M�� -d�x�V�a���{)�l;��":RL� 8b����A��=h�h -��S���.oBff�ﾹ�<5�6���e5�#���U��ݿ*��
���* �݁�AJ�A�k35FfH���]ծ(�Q%�E挄ڦR->��B�^�Ú ؚȒ��w�<�6��
�Ak��yvog�A�K���0�ݥ-s�� �9�����ڌ�Į����aG�d&�� �Y��+@�ڦDà΅�V��]��kͺ*d��F��q����Z�h�*�B�ѫR�rs�4�D6Q��Tz�t�>]�� ���S�ϡ�_�Ǐ� ka�+�:% D!�3��*�*'e���h�1�|�,n����rcrp�~�W h_0��t�jR`v�检ᖣ� --��z� U$��י��T���C��؇C��Q|L���������@�c z�<x Σ<�SRL���r����~�!_���h�KS$�_��7�b%�����*��d ~�O�Xr�1!�-ˬ���>�Nt3f�k����q� �z�ᅙg�Ζ��BB��X�m&���*������(3{i���E �uo���趀h��*�Sթ�i�֍�ŝE2� -endobj -946 0 obj << -/Type /Page -/Contents 947 0 R -/Resources 945 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 944 0 R -/Annots [ 952 0 R ] ->> endobj -952 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [55.6967 190.8043 126.3509 202.8639] -/Subtype /Link -/A << /S /GoTo /D (rrset_ordering) >> ->> endobj -948 0 obj << -/D [946 0 R /XYZ 56.6929 794.5015 null] ->> endobj -106 0 obj << -/D [946 0 R /XYZ 56.6929 480.2651 null] ->> endobj -949 0 obj << -/D [946 0 R /XYZ 56.6929 441.7923 null] ->> endobj -950 0 obj << -/D [946 0 R /XYZ 56.6929 373.7178 null] ->> endobj -951 0 obj << -/D [946 0 R /XYZ 56.6929 361.7627 null] ->> endobj -110 0 obj << -/D [946 0 R /XYZ 56.6929 167.4388 null] ->> endobj -953 0 obj << -/D [946 0 R /XYZ 56.6929 126.8733 null] ->> endobj -114 0 obj << -/D [946 0 R /XYZ 56.6929 126.8733 null] ->> endobj -954 0 obj << -/D [946 0 R /XYZ 56.6929 98.4089 null] ->> endobj -945 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F21 658 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -958 0 obj << -/Length 2706 -/Filter /FlateDecode ->> -stream -x��Z�s۸�_��N���A�O��%���%��i �̔� �w�);��� �$EJ��������~f3 -l�SBE.gY.IJY:[��l
�~�b�& DI�ꇛ����,'��jv��`iB�f����˿������넧t.�u�*:��W�� ������廷��������L�o{{�d4����w�����ןo~�zu����� -� \}�LgK����(�Ng�0���9���d*H*�+۫W�������1ͥB�T�lDu���.͉\8��of�]'�R:��,�Uݴ����16��mc��D���Hγ�!�l�'�2e9�)��Z�e� b��RhO���$Z$�c(9*�%�͋j9�aw����j�u��q?�)S�>�<��p���^ �]�B� �b�$��-�.���2v�mY �N��tU p
�����8��CY�qV;�ܘÝ94�J8K�@�v�1��)��M[�++�� p^V�۴[�C���� [ �P��%'6Ma�є���r6(�RM�`��E�g�h��� D#<{vA���L�L��&�f�e�+���M�ʺk��S%��MS:f�R�6�
VH 1���A���o7��Ҹ] -�5X�oM���Uh��7h7vfq��j��o���R -�S������� DY��od|ޔ�)��UkŢ-��#!��i �%����oR�=��E��m�.6C��M��8���Yх��A��{�I��t����m�x�wڳ�a@��'��)+c�'��؞>���\� そ,�i���t+4� �p�a�-<�S�T�5x�TD0H�#�� ��x�U�@��b��'�0�ꑓ��ǦX�I��$"��Y2u00��c2��b�+��=�Z�u5���ԻFO$�! E8��'�<���5��S Ɉ�" -� x"� ��dU� -����P�t����HխR�LmȓT��\#�[1��=��e8��|���i��G(<��U�����P3��l��4�䬾\D_�JH��`���S� J���xiV�q���P����+0���nM{oL��6X��-�}�"�gR��X� -���)���Y,�h�Mc��݆ҷl�u���e�?ݚo��[o��Kk��Y�n7g>���'{J9� -v�I��1��#���.sP.tIϑ��1��#U4M �I�r�����]���b,��{-Cv�ʁ<�&r�B��ˇjY��x�)���E�����\�_��ʝ�>� I�C� �����ʹ�'�i�i����(�j[��> �^��OƑ+�z�� �4��dyD�X�}[��/x�����u:;�4��Ӳ��=j��k�j:�F��M/�r
�l��s�TX3H�L�N�>=/�:�E��Nx&�����O�4����!n ��J:Om��>�u�Qvon��}��&UN��|��;�2["BVw�,����� @�s쩳��f�3[X+nk�Jax�š���=kM~�?P��կ"������T��wXpNA{�?&,�9����\�����Պ�^�@��a`��đ���`�c�G>ۋ�2��O���A�@��Ư���c -ؿ�C _�Xg�U��U��8�A��*��1]ED��U�P��\=�Ȣ�1]ED����܁�ل�Z -"U�FN�:Y�����j�hp��"�ijC��<� ��*�%��g�<%��Q¯�$Ϊ��p�q�qN!Z� -�=����m�K j
��1&�/L|)�o�:�9{fغ�����+q��s�p�\��*VƖ1�4��H�.�;���a�)���������8g�7���%l$��u$xp���N�0b:�� 3�O@�A�����v �N��i8�����b<�#T� ��\yfv� ���c�cg=a ٪�+�T��b](���d���Q7���
���a���ig[\G��� -<C ug*0��9x�?ݛEi�͐��U�}��.�`��O-�13~�>:� �V_ Ӆ�uͤ ���?:����nҪX�7� ��9��^ -!-h���ޮܚMqW�N"{�����#-� U�i���(�/����ZG��4�d,ϕ@P2�,�Y���ccƯ�4�~Ù
�)�d,a"����I�(�d�~�����]Y�*E� - =ςPVx�%���t*�� -endobj -957 0 obj << -/Type /Page -/Contents 958 0 R -/Resources 956 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 944 0 R ->> endobj -959 0 obj << -/D [957 0 R /XYZ 85.0394 794.5015 null] ->> endobj -118 0 obj << -/D [957 0 R /XYZ 85.0394 769.5949 null] ->> endobj -911 0 obj << -/D [957 0 R /XYZ 85.0394 749.3395 null] ->> endobj -122 0 obj << -/D [957 0 R /XYZ 85.0394 221.8894 null] ->> endobj -963 0 obj << -/D [957 0 R /XYZ 85.0394 197.4323 null] ->> endobj -956 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R /F53 962 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -966 0 obj << -/Length 3396 -/Filter /FlateDecode ->> -stream -x��[ݓ۶��Bo��X>�l���N��ډ�Ҵ���'Rw�%R�;˓?���"!��'�L;�܃��r�X,~�]�� [Ȅ$�*���L.V�+���w�^1˳tL�!�W�W_�j��,���v=����lq[���$���^rI��o����?����/�>�Vqt����륢Y }�����:��2�~���o��\�����ŭ �p�� - ¯W���E����r���,��U,��������� �՟NY.��H��R�$����XB2�HhO�P�7K94dF�Eo�l`���er���u�-���\}�����2�4z�,~�����i����iL���F(e����0]�,���L�F/�����݄Đ�K�.J,�}���qB��I�%;�4!f 甩Œ1�I���U��JZ��;4�, �ƌ��pR�ƉJTl��}=!� �����u^m@+67��� �?� ���Ӥ��(�ơ�������N�_����k���wb$ɔJ��M��2!)V$�T
-���X�PT��� cy�&�r�Mm1�i -���gqF��l��i�@`XX�4S,���V�|��Qg�/�;��R�L}����~�|�[��R ��o 囧��Zq��ZC� JC3h��USwe�y����ݕ��gJyY� -�%�1� eΫ��j�7��f�û�Z��ѐ����槨��,��� L�@^7�mޡC�9�HA�K�1`�wDŽ���buڣR�%2;ۣ���',V"��V�B�#c�m��g�z�Ţ"rm�8C����x���~Q�q�(�)A}<�2#sgz���[C��k�Z�M�n�mW:�b[�U��s�� I�ϔ�(@;�Qm�!,6��T8`A�Y�����*���?��@ -u֘H���W_�F��!��rc�o��������g1�K���wl���it�RI(��Ry��84�S��� ��Eļ� -�� -�x�B�3&r\��� �l��gT�� M~7!E��D]%���Y1nE<V�Ӕ.� %e �/ -�}ޖ�kl�p���"KYh���{��� ˺���9�3J -s�\��6��� -bXvި�kl��/ j����f�9���w!��+�l���)K�Oq��m�2�2ᘰiR���L���tAkiK���a�]��f�M�`�I�yjd����Vxh��e�� CĨ�4 R$xm}ȭ���:K6uݕ��6/��S�K}�Z5�˰Ćc�ajjl���;�/C�A�m�φ �M �� �I�����6?�!A�7LW�h� 4��9��|c \����ug�# -���\�4D�y��{ɹ����C�A����Chk{�}v�G=1�����{>k�o�+�;=7��ٜ��\�}�ZO�fr �z8sѿ��Oe=�_�0�L��<~
����s��y� -���+��bԳ�#ّI�#���/��N;a���œ�x$s��ϻ!�^/-��$�X���e(��X�L�$N�ɩd5�2�L9,S�.��M
�
k�86�l���R���-+W�0��0a6� 2;<S�m >(��ó)h�P -endobj -965 0 obj << -/Type /Page -/Contents 966 0 R -/Resources 964 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 944 0 R ->> endobj -967 0 obj << -/D [965 0 R /XYZ 56.6929 794.5015 null] ->> endobj -964 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F53 962 0 R /F14 685 0 R /F21 658 0 R /F23 682 0 R /F48 885 0 R /F55 970 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -973 0 obj << -/Length 3750 -/Filter /FlateDecode ->> -stream -xڭks����U�9��$����K.3��w�c&�th��أHG��q�绋@R�$O��x����b� �f�ǯ�N���u��D3�����~�w�^q��@�9�W�W����:O�T��3\&a����������x��Ǜ��l%���N��Û?C3���֫�y��?|x��ۿ~|s����� >ܬ3�+Xyy�?~3��t����W�܆]�wʙ�-�z��/캂
��}�,�y.��WJ�D+)�L{���/��]���&�Fd� 9 �<1�4יΓT�;�]SݬejV�@��nV���uu�HS�����E��O~��o��Xﺢŧ|�h��e=8���ߪ�m����������֎�MQ���>���B�.ל'���r<���c�=$���L�fUv��,�"ϣ� -P�9��2sq1�tB��7E;�P[��~�刁T&�R� ꘁ�y�&Ʉ>��� TQ�ո�q VC��R�h�ق4�b����� -�P2��X�u7H�)�����z�U�1��� 64Q=��4%��?V��^�����h��
����Q�M�� i0_���jW���È{��ό�� ^��䫻�[�Դ-���"�m=��~�D�+BO[G��W�w�;Qs4H= �B ����5 �;6�a,v�� ����{z�~\��u� I�_X3��@ +B𦊑 -V���J�eq����ס��o0ֈ]-������ߙ��#�G�tqhM���v<k��� 癸`�s�Ӷ�p?�(�#�2O���� ���D�J �-��J:�-� �r�Gz3x��� @<���_ꖆw���w�� �d�%��3b#���^��z*5�7�0 E� ��$�!����� ��aIj��3�� ��,!x�� .J�+s�t����m�Ɲϗ�ݟ���Y��0d=;-� -w����n@�~��9O;2G��̂������Q�����;����w���t� �'�uc�<xؘˢ*R40��)�n���ʿ�D���� ��mQ��tM��6�Ư�� �(��P,k�(l�K � H!�n�
��(��p�)��q�-l -\5�s�9��i+,�G�p���a�*�ʡ�]&;�ԙ�E8 -ϑ��7�����b� -IPHE�����Wt�VP �4���]��eX��n��+�� 0���t�b�Ue̟�İ�G�_��E�f ��̚\P�k��u=���X��#��d9��i�)�t)6[B �W��l -`z&
P;���AwQ�� w 0 -[�CL7Y�X[���U���D�xd�Q�� �L�&�
҄��'��}��W��D�CE��!�:T��Lx&]�q���Ө���4j��$2�蔧GG��~��({��g�*&"���S ��$�K�fx P]�f�� -p��k�S1�FYv��XZ�#rS0�����]������P��u]b�8��v8�, c��j
i�V&;;!'H�@�Y��S稑�C��;�8m�j��ݘվ�\�;P
.t�4�f��(�����u�NXp�3 �<�t(w͝kd�e&�\�|)5ҘE� ����ٺ�^� �i�q �=�z� ���R!XNVB�b��L_�-�-�%.�����D����>D�W�w��:�-�
�Rb�s�y ��+P[A��6m�s�{�x�3�}̕i�`���r�N9d��y���װ�-P��>��w�i���Sp����a��K�iv"VAʕ3��C�U�$�� -9d�,�^�ĥ:^D�܃a���<Qy������ �$3�,��Pz -�����ԲƗO������ľ:���M��e��@e�eJc2�@ol>�����0�*�6M�! -�6�����I -���� ��fک*X�4\��v:�f}�Y��'r��)h ���v���z��� B7O�g_�KȍU$�;��K�ŭ�D#��X��9 (P:G�1le P_#܀� -m^p�9���nG��Կ�N����s�CY�D0 jtEŜ�Aym��ޏn��3x��|���Tu��*b �X��������I�� �P�%ӑXj ��Rf��DH�� }r� !_v.
+�'8��J�y�������͵5�$I��Q�{�Z�䆧K�s1aV۽
u�5E`���/Ek��aX���@n����U�+� Ю��"ʭ_9����fT6
��VD�O�O��7{[H��� ),n��u,��Y��]?�^S :0A� -�R�u -z���\�)�rt��Æ�W���O~�i�\� -�R�y�>�;��Q�A� -͓�ԡ��¤��E�&�8��ZP�4���?���4�߅JE:s���
6]S�O�`T�e�8�q�L���JSF�|���ÔQ�* -�x����: -endobj -972 0 obj << -/Type /Page -/Contents 973 0 R -/Resources 971 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 944 0 R -/Annots [ 975 0 R ] ->> endobj -975 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [120.1376 365.8002 176.3563 375.0156] -/Subtype /Link -/A << /S /GoTo /D (controls_statement_definition_and_usage) >> ->> endobj -974 0 obj << -/D [972 0 R /XYZ 85.0394 794.5015 null] ->> endobj -971 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F48 885 0 R /F55 970 0 R /F21 658 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -979 0 obj << -/Length 1632 -/Filter /FlateDecode ->> -stream -x��Xmo�6��_!�`��m��i�M����vŠH�-T�2Kn ��;��,�Lt�6 �`R<� �{� 0�H���@�qLx�,G8���Ɉ8�� -�R�f���LiAE0� �R+E�Y�~�CЀǧ���'!�x|~|6�|| �����É�Ƴ����I(���G/��:���8z}�|zr��3�0{9:�����`f����� �p��#��V<�� FDk,Gg�G�uO����^�`���E�`D��>�� -���1���[�Y� �PR�� CB��3x[���HQT�v�,2;H��2.� <�C��SJpI�����h�������6.Z�WYQũ���mp�-bM.I.�e�4v�=�h�7�� h�� -8PvH��H���-�a�1 �ܯ�TiĈ��Gs�}غ���@��Q�'r;��zj��j#� W� -����ͳ�cZ0D��o,q�xi-�� �����2��wv-�����/D� b��}E���۶[C&����j
yϰv�2F���x1&PD����4�o��xL�+ -q��>����m'P�#%�i�"��C� k�3�N?��]� �k˽ �}t�a��NC��2�շ�-5ERI�NC1�,cϧ'/.��D$!�Y0P��\�5��� C��I�-'� ������/A����LԂH~C-������JC:�u�G��7��ǃ�i�$� -endobj -978 0 obj << -/Type /Page -/Contents 979 0 R -/Resources 977 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 944 0 R ->> endobj -980 0 obj << -/D [978 0 R /XYZ 56.6929 794.5015 null] ->> endobj -126 0 obj << -/D [978 0 R /XYZ 56.6929 466.6686 null] ->> endobj -981 0 obj << -/D [978 0 R /XYZ 56.6929 439.3642 null] ->> endobj -982 0 obj << -/D [978 0 R /XYZ 56.6929 409.8468 null] ->> endobj -983 0 obj << -/D [978 0 R /XYZ 56.6929 397.8916 null] ->> endobj -977 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R /F48 885 0 R /F21 658 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -987 0 obj << -/Length 2297 -/Filter /FlateDecode ->> -stream -xڥ˒۸�>_�[�* K<�i�ǖ�0�x&��z���"�"eg���F7(J�ة�R�� -�2���+>�B��o�vf�Wt����<1c���%KS����X�}Fb(59J�R`c�1' -c ߷C�yQQ`M��h&�ʁ� -GID濯� 3�p-�k�g����r�+� -�g ]��q~��%d!��"�_4�t6���B��e�=�б/��n��p��e�)Md�ٴ�@*28�ɨ�d>�{M�tΊK�LV���t�?o~�=]U �_oR�]���� @@�v7F*�\f�L{sw� D�B �%�2-ڗ-�sR���F� ��,�+d��ە��R�˂y9� -ln�� �&MN�q&
�K&s�����s1d�p^H�0�q@܆ԙ�JK�ĂX�H߶�U��o&er���}n��~UjPY,�a!�6}�"��,��ia -�1�Pސ� ��L��&�?� --/H� ��y&����N�V�)�|O��p��E�$P�>�G~���Y�� ���3y^�kW���ܕ�Zt�8�9�V���c�y���p�mD4( �p�b����3�))��{_a��d�d]�����鳫ǧ>�B�l��p���f��J�*�}�K�� �i�K*-+>&���qQ� -oQ�"�5Q����)��:kE��XՕ-� ������>ł3eSoj�k� -}F�>�� E?n�gʝ����E��`{Ӥp0���.�[$ .d2��S���b�2�q����ݽ}
뒖�=��H� -��G[�R�b����K�`� 4��mpp {��J0 F��Ǻ�~ F �����e�<��u�$�t�{�"�\?�%dCv�)#O����cq�ţ=�!zVl�C��c��>�<v��Cn���� ̵a���0�1q:� ���+ca�)b|�^����G<t1"a8h_ -����f���,���dT��UM�!E���'��٤��N9�D¦I�a��h����O���ȳ�X� jP�p]RK�fb<�ƵY����NJb��
& x����� ��>���2 ~F� -f2 ��Ft-��~���nw�-��;]�c�Bλ�s�Hz ����9E�;4UUw�iw�IΒi̝�� �� ��������V�c�b�uՌ1t�|w |ON~�
�I�ϊ�<> �<�= -� -endobj -986 0 obj << -/Type /Page -/Contents 987 0 R -/Resources 985 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1001 0 R -/Annots [ 991 0 R 992 0 R ] ->> endobj -984 0 obj << -/Type /XObject -/Subtype /Form -/FormType 1 -/PTEX.FileName (/usr/local/share/db2latex/xsl/figures/note.pdf) -/PTEX.PageNumber 1 -/PTEX.InfoDict 1002 0 R -/Matrix [1.00000000 0.00000000 0.00000000 1.00000000 0.00000000 0.00000000] -/BBox [0.00000000 0.00000000 27.00000000 27.00000000] -/Resources << -/ProcSet [ /PDF ] -/ExtGState << -/R4 1003 0 R ->>>> -/Length 1004 0 R -/Filter /FlateDecode ->> -stream -x�eU9�,G��e�@@Q ��!��%bd(d��ʤ���(��� -�$�T�)��������_����a��c���ڿG�=����1�F�l�]t����qu�ݦ��5����<8Ǘ�:\;�����<q��;.\�i2c��~�e���qc�=7�+�g
����ct�a��L1ca�cu��m QO����-�{w�&k��� -�9xcH -�ϒ�ig٥���C6u���&�\� G T��M����K�l��Fyu|?�%�iȥK��N�q{v��*�� JE�]8h��p0R��$�(+� n�N� -q���ѫ�^��>��>��
.13ׅӃ!�3�S�AՔih�Ũ�^�(�<�m䦽����lL���7� -г2"�E9~� -n*�1����x�ƈp���&XîÜ����\� D�� ��0}#X���� ���>#^V ��|2�i�9�r ) `��Xh��&��hb�H��e"�� -�r�G�X 5�� �8��ժO��t�� �$�y���Bқ��5�/��vp��o`kA��r ���4N.4�� -endobj -1002 0 obj -<< -/Producer (AFPL Ghostscript 6.50) ->> -endobj -1003 0 obj -<< -/Type /ExtGState -/Name /R4 -/TR /Identity -/OPM 1 -/SM 0.02 -/SA true ->> -endobj -1004 0 obj -1049 -endobj -991 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [470.3398 482.8902 539.579 494.9499] -/Subtype /Link -/A << /S /GoTo /D (boolean_options) >> ->> endobj -992 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [316.7164 470.9351 385.3363 482.9947] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -988 0 obj << -/D [986 0 R /XYZ 85.0394 794.5015 null] ->> endobj -130 0 obj << -/D [986 0 R /XYZ 85.0394 769.5949 null] ->> endobj -989 0 obj << -/D [986 0 R /XYZ 85.0394 582.0558 null] ->> endobj -134 0 obj << -/D [986 0 R /XYZ 85.0394 582.0558 null] ->> endobj -990 0 obj << -/D [986 0 R /XYZ 85.0394 543.4475 null] ->> endobj -138 0 obj << -/D [986 0 R /XYZ 85.0394 324.8439 null] ->> endobj -999 0 obj << -/D [986 0 R /XYZ 85.0394 292.4184 null] ->> endobj -142 0 obj << -/D [986 0 R /XYZ 85.0394 174.5048 null] ->> endobj -1000 0 obj << -/D [986 0 R /XYZ 85.0394 146.6189 null] ->> endobj -985 0 obj << -/Font << /F21 658 0 R /F23 682 0 R /F62 995 0 R /F63 998 0 R /F39 863 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1009 0 obj << -/Length 3382 -/Filter /FlateDecode ->> -stream -xڥZ�s�6�_��*3k�$��to�n��N��%���n ��Օ%W������>l��fn��/A��rx �/�V� �Qz�S� T���*�~���]�L�rD�)��뫿��:��8��כ ���$�^�z��
p�����w?�=�o��n�YE*�>��pG���������'j~ -Tp����P�7+�e��������%s�}�ϛ0 �ۇ�w�h���xw�k���x�t���ǫ�������@���������x�"M��� �it���J�J -�z����� '�v�"���D -h2K�T� BMVY{&ދ��E�����VvT �E֛�Kl�8���NVE�1D�}��&+� -VmeO�2e -*�rW����1sV���5�A D|R u7�,Nu�+�<�릧�iw ӉF����'1#� �-� �g��I�Lx�d�ȷ�ޗC��
�hG 6�7�W��4�cN��k�1��^s�>�ǭY> 0�|�"M����BB�(4��n(. � 9Y��H���g���yRv
�0uw��f[�X21sgƣ
�u:��.&�8�QvΕ��S�cN(�H{�x�E�'� )��8LAb�� ^��=�O^F�A��d�� -Ƅ�[���g ?T�ƈ���Yo �4��L��[��N�7- -���t3�!��yZ����5��P)d��@��^~���j�6�U|�B�:7�B0Hс�K6ˎ�Jƾ��� �3�͐8�d��B�)�tZ\
� -U, -J�t�G����w��ý@E ��+/�UJ?�Q2 v�s>� ��]kl����k�dY���;��r���.�:W��cs� -"<fu?�tЋ"�g�LY|TS�'�N3���V�__x~����7��HO�1�50�9+�^+��I6�9�N�v��Rh�)����mPc�P��`{Έ�N��W�A � �h x����&���{OU�t�h�,k��}k|��)|vk5=q -yf�츧0ϔEhp�( %$K�֦'���� -�I3S� 8!�@b��GG��d���)�L�����b"�rg_H��D�_ˌ2^a W
pUĄԥ�H�%��+�_ ��\ ���4�u����[��+�?g> ��!N�g*�N���wH#'���� ����6��H`�T��~h��.?N�Sr^��|����(���d��a�F"&؇�ɍO��8�v�H��m�=���� -9��s�3�ás L�C�;e/h��盙E=��?� ��K��8U��s�"�ò �P~(�� ��s�;B^~:_ؤ�Z��3J �F��O���^� 3��k�}h��=�' h�ř�g�U(@^���L �@|������� �iU���+|j��s��s -��씯�P#��D�fno.5���"u%���Ηh���Ԣ =~�"*����g8J=x&5�e����a��)��㚦0|��_ �r �Up[�rR4^�v��gm��-�Wx [��~�Hw�%h���٨9 ��B��g#����Ϟ.� ^s���\��̬� �G�2��u�~��3̧��"��YD�잒NRB�Z��!R�z:2�& O -endobj -1008 0 obj << -/Type /Page -/Contents 1009 0 R -/Resources 1007 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1001 0 R -/Annots [ 1012 0 R 1013 0 R ] ->> endobj -1012 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [464.1993 519.4233 511.2325 531.4829] -/Subtype /Link -/A << /S /GoTo /D (proposed_standards) >> ->> endobj -1013 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [55.6967 508.4843 105.4 519.5278] -/Subtype /Link -/A << /S /GoTo /D (proposed_standards) >> ->> endobj -1010 0 obj << -/D [1008 0 R /XYZ 56.6929 794.5015 null] ->> endobj -146 0 obj << -/D [1008 0 R /XYZ 56.6929 584.989 null] ->> endobj -1011 0 obj << -/D [1008 0 R /XYZ 56.6929 551.635 null] ->> endobj -150 0 obj << -/D [1008 0 R /XYZ 56.6929 396.4263 null] ->> endobj -1014 0 obj << -/D [1008 0 R /XYZ 56.6929 360.8629 null] ->> endobj -154 0 obj << -/D [1008 0 R /XYZ 56.6929 173.1662 null] ->> endobj -1015 0 obj << -/D [1008 0 R /XYZ 56.6929 145.9427 null] ->> endobj -1007 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F55 970 0 R /F39 863 0 R /F48 885 0 R /F47 879 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1019 0 obj << -/Length 2880 -/Filter /FlateDecode ->> -stream -x��]s���]��o�2���q���Di�� �V�L��"!�5E($Y���w��8� )5ӧN���a���_��p�OL�a\�z��.�d~s�'����'"��"�,������oU6�Yn��\\%� �Ή�����߽~wq��t&
�jv:3�O_��S!���ۯϾ�W�@�o�^�fzz��gp"�6��_~x���E�ůߟ�]��������N~��O���'��ܙ�l8y.'7'�(f�R�d}���a��:& � 3Nf#�jL<&gV�+���t��V�Sᦋr [�O��������]��e8_�����%�!D�y� V�5 �eCGw��ۇ���tT]�ɦ�)�W��r[���˧?n��� V��U8@z@ ��,7FzW�z� -B��aΘȄ�QZ~.�IK�8�Rp���[�3����▎���b�OB��Q]ZZ�
��U:��%omgAX$S�qQj"ZR
�"�-�E��%\-�� -��K{��C����0u�)�E�)q� x6I{)n"� e �#�1U���>/�]�Ws�����dh�\��c��kC�7� S�ټ��6k3.���s�����զ�e�Z�>$[�|�� �T\Fv@����FL��cֿB���w ���e����.3�s3R�(��Rn,@��<z���� �x�͏�U������Nz�*�c��=D��7[� -��e����"<So~��#�Ϲ0�e�7DV���g���k��'��<X� -����U��/<"lìn��dQ� -��� |�"���:3z�jݐG�!�C��R�2Jy�G���u)'�L]�ب��HH:U+�����(��雟�pG�x�{J V0� -_���A�[�۪�3��?��"� 3.=�� MQ �o(G��u��m�吭L ��MY.|^���yq� --�m�]��� ���[wӪ0�ֱ�$�� �8L=t?/��`%�Hi�@� -���I����$���08Kp�< ��� 3h�e�f8�Nf8�i �b�/�xN�|����|G��?��jQ�����,����K,������2�*���Dŧ�Q��F�oE��%?�4 �_��p���rl- >Vw�סּ�^����,����cN+7��P��C z�����}b�-�,�`w� >` �RL�Pc!��}bv�+ �`�+�iXA�4�
�y/_
�������`�9* ����|1
ִ�Wf������K�_�� ��_E��1�鴏> f��zv]͖�܃�rFu��-�t��k�cc�sL�40YV��W�|G X -�?�1>�����%&
��sr܌���<�D!/r�q�?��%�?mwendstream -endobj -1018 0 obj << -/Type /Page -/Contents 1019 0 R -/Resources 1017 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1001 0 R -/Annots [ 1021 0 R ] ->> endobj -1021 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [417.8476 228.9788 466.5943 241.0384] -/Subtype /Link -/A << /S /GoTo /D (sample_configuration) >> ->> endobj -1020 0 obj << -/D [1018 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1017 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F39 863 0 R /F47 879 0 R /F14 685 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1024 0 obj << -/Length 837 -/Filter /FlateDecode ->> -stream -x��WKS�0��Wx8%+zٖ�)�Ж�0��� -g�V酳 ��QXK `Z y�� -endobj -1023 0 obj << -/Type /Page -/Contents 1024 0 R -/Resources 1022 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1001 0 R ->> endobj -1025 0 obj << -/D [1023 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1022 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1028 0 obj << -/Length 2146 -/Filter /FlateDecode ->> -stream -xڥ�r۶��_�ɓ4 a�"�>�����4'�9/M'���T$^�gο�],@�2ݤSk� -��Av���욣S:���E�H��"��I"0J��w(�D�$�C����}��-:͙����N��.��� L./ � ;ߩ;;5�� -Ι�"1�hB6�{�W�������F�u��>)/��u]^&��nW�{]��v���] � -.�Ԯ�����xm��M2�M�����}M�����K�I��HpU��V7 W�W���m�v KuX�������IM�M^�'<�'\ @�X�����&�3���!n��zw���㔉0��� �uC��羸S;]u -� �g�W��tn�8���o��`ٴ� nd4��Ԙ�6k���h�mU�q Ì�6f��>������EP����� [�M\�HbZ� ��&9A���8ɋ5�1hq�������gS"U��s��i�͡:�mk�dMcF�Tw<3�6 -�!��&t� -�XD�U7�� �vW(�L7 �J� -K��c�f �$�f ˉ&�gqdd<h<�;�'Ȩ�c>�ᮨl�����L\�&���hʟz���IEC#��#�!$�)Ic�Ilqر!pRPG�Q� -��eϢ������Y��^��O��� X����� nEȤ/ϽgL _|qzBHL�IR9Xޞ��*bS5�� �<\�}��������s����>��y�>q<� �5&XHUK��pB7����:�>k����U��8�Ѳ ��g@��4G �����pFD��a��U�!b������< EX�؋�ls�gX)�H=�8-���1�W�N��S���r����eD+�iitm��S��;S��d�s
��dA�M�� �;i0"�*�c�m�_��Nk��:��6 *G�d8[w�3]�p�'��R�}9�AxOm��m���#.,�E�/D!15�ڑ�/��=�:� #�x\^@/Թ�sl�x� ��y�ٓ���a��c�f�3L�NE� 9U^��q<8�Bo+OѸ-U�yd�+���X�7��.큓؛v�ӛɝ� I�UKN���&���~� -endobj -1027 0 obj << -/Type /Page -/Contents 1028 0 R -/Resources 1026 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1001 0 R ->> endobj -1029 0 obj << -/D [1027 0 R /XYZ 85.0394 794.5015 null] ->> endobj -158 0 obj << -/D [1027 0 R /XYZ 85.0394 479.27 null] ->> endobj -1030 0 obj << -/D [1027 0 R /XYZ 85.0394 444.0186 null] ->> endobj -162 0 obj << -/D [1027 0 R /XYZ 85.0394 287.5734 null] ->> endobj -1031 0 obj << -/D [1027 0 R /XYZ 85.0394 259.9325 null] ->> endobj -166 0 obj << -/D [1027 0 R /XYZ 85.0394 214.4637 null] ->> endobj -1032 0 obj << -/D [1027 0 R /XYZ 85.0394 191.8161 null] ->> endobj -1026 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R /F21 658 0 R /F47 879 0 R /F48 885 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1035 0 obj << -/Length 2336 -/Filter /FlateDecode ->> -stream -xڥ]s�6�ݿBӗHs�� ���8�{M.W�����!�)E*"G�����H����x���b�b�C&2�DI�4z��_����\{�y ������*�$, e8Ynz�b��XL��/S��f@�O�7�ofs)d§��/�/�~��怂�W�� !��w�W�p�ջ ��Z̢`�������o� .�� �;�,s /~��O2����$֓[�p&�DN��VLJyHqqs�`o�m ���L�P�E�1�脅J�N(���\pΧoӲM ��S�c��Uio �T�� -�U��K�[����V����۪�C7���D�9�嶦��5�|J�<�7�w�%Z�݈�Ŋ��嚧u���ˍ�Ca�m�C`^��O�m��bp�xJ�A/Q<11�k�n�ṉ&����d�� �Հ�����-�9����+�߽3
�̶h &c ��) �آ�+�F$ܥ�h�{Yݖ8D�O��;��Y<m �� GU�ݑ��YĒ�0��l{�~�&1b�Z� �.��#R'���"%�� �=�P��_���,&��@��%����&e�:�r^�B�?������pB1��Q�0� :��cИז��/+gt�z�z���~�w��3�8DC�5(�T9;
�z] ��B"������$�晰n] �c���.�zOvU[d�T�Y;���:��t����w؈^��A|�>Gq���F�)�aW���Y?���F�n��Muh� ?�o�� ���/sz6� H�^}���Ÿ'���>݂.1��9C$�� �r2`<L4a�s��H�ґ�QB6���i+��i�F�� -��(���>WP s!�;��c$$�K
9�����v_���s[;�X^��2��K7 -r�m�d-�����!�>.�14 sژzRu�n��|[��"�'C�-���x>��� -%���1$�#�R�^Û�(N�c��M�BBt&��!���]*tM;^�cT?����_���.CEق�?�����sm���S��2<�|�8J�L��]\��֘'�m��0h����n�>�wfe���n���V���nw��,5�g����z�F� |yvnvf�Ʌ�P�����ľF8��:��H$O�:��(�XT��wk�����Ȋ�U���c�GJ��,�d��E�9��L��*,�:�f�[�폔�{O� (P^��w�����5J�H���'�h�@R5�mu�6�D�-�P����XӺ |�XU�� �ws�e�� e� \��G��% w.�#�� �1 ����3/)ӥ��C��N_�
���u%,P�z��W��%7�5s��,c5�e��KY=��r�Sd�ckj�������G8)g5
θ͋G+Z�r�[um@�S0��YS"���Xs�hJrq2��f�ش��g`�T�6��9���a�;�j�o~��E �.ޏ5.߹��r�a�N�V�3�u�ݳ��4PCe��s¹e�}wC@^��x�a�d D�g]^Z�m[zt�.h�����# 8X]������>n!p<A��S�t�Dw�ӥ���$�HŴ���.��3f#��p���ڣ�pyڠ�E��"�^��������V�pE �/!8 �����oV8zD( -�>$fN ;�� �����=��d -endobj -1034 0 obj << -/Type /Page -/Contents 1035 0 R -/Resources 1033 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1001 0 R ->> endobj -1036 0 obj << -/D [1034 0 R /XYZ 56.6929 794.5015 null] ->> endobj -170 0 obj << -/D [1034 0 R /XYZ 56.6929 769.5949 null] ->> endobj -1037 0 obj << -/D [1034 0 R /XYZ 56.6929 752.2692 null] ->> endobj -174 0 obj << -/D [1034 0 R /XYZ 56.6929 663.7495 null] ->> endobj -1038 0 obj << -/D [1034 0 R /XYZ 56.6929 633.2462 null] ->> endobj -178 0 obj << -/D [1034 0 R /XYZ 56.6929 587.2939 null] ->> endobj -1039 0 obj << -/D [1034 0 R /XYZ 56.6929 559.4406 null] ->> endobj -182 0 obj << -/D [1034 0 R /XYZ 56.6929 362.928 null] ->> endobj -1040 0 obj << -/D [1034 0 R /XYZ 56.6929 335.0747 null] ->> endobj -186 0 obj << -/D [1034 0 R /XYZ 56.6929 132.2109 null] ->> endobj -1041 0 obj << -/D [1034 0 R /XYZ 56.6929 104.3577 null] ->> endobj -1033 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F47 879 0 R /F39 863 0 R /F14 685 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1044 0 obj << -/Length 2916 -/Filter /FlateDecode ->> -stream -xڥYYs��~ׯ�[�*��`p�O�%����ndnR[�}�HHB�h (YI忧��E�vU�U������oz���
�ɢE�E�U�.6�3���� δ�Y�I���볗oM�Ȃ,���v@+
T���z���ͻ�_�W��Ъe��l����8�Z//>����� �����<���_���Ge0/ -bY����o��<�Zw�
e�� s��~�C-� ʏg*0Yj��P�βp�?�� ld��ٝ}<�{Gp0JK�tbM�4Lf��9��,�
�R.*��������-�� �]��: �y+3�es��e�i��z���-Wo���f�P���j�2a��)�<&+��O\��]�W� ��꿯��H� ��}�|K}�T��r�
�UFښKw�l�BD����JQF{/��䟏�kE�\(���ndy� ���O������L��A)g��S�- �
e2��Y�U���Q� -u6b��k�Y�b�2tzF�Z8���� -�4�x�A�T�� >_i�s�4u��](̂0V�� �N�:�zS8WVw�G�A�����?pOg�P�����| Z -!0�m� w-��,- �&�q�hx�Ɓ��Y�|����5ǻ8��!;�WVu�"� -a�*h^����� +^�� -h�D)���u�$[ ,<!�f�2 �� f-$�"�D-h����ά����OsE+$j.__\"*B~�!
B�� -�� i���>ѠQ�Z4�^�|N>�<o�� *A�Q�J�ۚ(C 9v=�3�9�4��=��3��HO�g��hC!"bC�@�*iE�*!�Θ9�9��g�p�T Ť�����6Tq�;&�'*�W�*��HY �ʽ p��7n�dyq:/5yuGj�����N�Zy%k�J�=��QbL�sҝe�l�b� ���b�Ws����~��� nQd � �C
l�Hz�ΈD/�n�A�b� ��؊)b��8�� -�@��YA��BƔ%y����c��u����~{9���7��3ļ7aײj%�!T �?�1�^��~'0�q^�8}���܀+n�� -$,��D\�߬3 (�E���6��Y����&pr*_�%��o��ԟ���r�]�G ��O-�bW���"(yE�g ��*)��s��CY ���<���q �3�0��4����Qe�9�6�&�Uٖ 0�Iw��247����K��p��N}Ֆ��`m�!S�p�������X4���wG����'�4�q���*?������A -� � #�{��{,��,\���������j�9�z�e ,��L`"z��Ѳ�T��gC"�`L&{������1�1{�`dv�w
uQ�I�V)#�. ���g�7 �l��)��ⶥ(�� I�j>���'�Nb��7 -endobj -1043 0 obj << -/Type /Page -/Contents 1044 0 R -/Resources 1042 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1050 0 R -/Annots [ 1046 0 R ] ->> endobj -1046 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [418.3461 669.297 487.0181 681.3566] -/Subtype /Link -/A << /S /GoTo /D (dynamic_update_policies) >> ->> endobj -1045 0 obj << -/D [1043 0 R /XYZ 85.0394 794.5015 null] ->> endobj -190 0 obj << -/D [1043 0 R /XYZ 85.0394 648.2128 null] ->> endobj -1047 0 obj << -/D [1043 0 R /XYZ 85.0394 619.5539 null] ->> endobj -194 0 obj << -/D [1043 0 R /XYZ 85.0394 444.3683 null] ->> endobj -1048 0 obj << -/D [1043 0 R /XYZ 85.0394 407.9434 null] ->> endobj -198 0 obj << -/D [1043 0 R /XYZ 85.0394 220.8457 null] ->> endobj -1049 0 obj << -/D [1043 0 R /XYZ 85.0394 183.187 null] ->> endobj -1042 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F39 863 0 R /F21 658 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1054 0 obj << -/Length 3094 -/Filter /FlateDecode ->> -stream -xڭ�r�6���a�F��<̞��'�d�ٵ�=�q�D�bE"����o7���Ij�|P�� -J$�-R�U��R�����c�nҽt6��/B��U8TpW��{�=O��L�8���qeS��IƨX��K -v�܊���V�z�:���h���#e���1
(o'Ʒ -��V��Ot�?��뒸�HR���5�"(۟Y�=ͼo ݹ�� !J���4�9�9< ����+
g�� �Թ}��L<2�w;F} -Ĝ����w��DP��C�[�q_�}��A�n7LѯK>l�4ȿ"ں �5/ّͯ\���#��x�q�)놶��V�vHT�������{^j�ojYk��f3e��sޮ��[�w] �%M�B�"gY�'� )R�$펭13pѺ�;�K�y< -���<�w��)`��k�0��gBs��c�� �y�� - g�y��m0T=q �hΒ���Wݔ|���
�j*�l�&(�a����e�>�H��8[7'������u
et��)�Ejcc!����5P�>��>߃�N�*�h,Cp�� l�Hd�lSUӁk/��O���2CI�P�r1E�v�3T��+���D, �tam��|l�p�2�l8f��AFa�n�ih�N���^��
�����,A j_1(*T **��cW��<p�Ox=e�%��P�9�7@Ck`� �INH�<0�̂�{]� xmU�&�c��.:(�j"4��멲��a)@��!jN�2�I!bK���7ƨ�D�"��״ �~@K>��qư!� ���Č'�t�ޞ����n]S9>��B�X9 -���f/ �-��A�jl��ӡ�{��3��0�)� __ćA�v�w@aެ�O�4v��
-a+�tl� +�~CY�|q`� 2�����L -�� q���\5�y-�!�(p��O'��j�g��a��lB%�3���v'� _��)7�<[eI*���&K��G�!t�="dc��$�dgA2,��PJy1��s� �ro�����G������gQ4����t��U��� ݠ{ �ȱ��%�ih�Jގ���w -Scv�ۻ�7���z�2�"rU.N�ӱ���Q�g;.� �=�j�Zb#��D��� =����y��_ﻸo9�Q�=�~�0�¸�j���JZ��oC��`R�Ě�8ө���r���ڦ���� ����� X?,}�³�����g� �L�G����O {�r�#bd��
��]`����s;��Ja]��?�k@�Y�C����͔�T��TN����?=�-\���qEA<,���H��n�
܈����SS)�I���
LJwEf�� '�Ï�ǭ^-�W/ -1�r5�7x�FK97uBf�����B�R��F����^G�g���W��;p�n�� �=��Y�����q�����0y�������}�.�a����g� -endobj -1053 0 obj << -/Type /Page -/Contents 1054 0 R -/Resources 1052 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1050 0 R ->> endobj -1055 0 obj << -/D [1053 0 R /XYZ 56.6929 794.5015 null] ->> endobj -202 0 obj << -/D [1053 0 R /XYZ 56.6929 769.5949 null] ->> endobj -1056 0 obj << -/D [1053 0 R /XYZ 56.6929 747.8139 null] ->> endobj -206 0 obj << -/D [1053 0 R /XYZ 56.6929 540.916 null] ->> endobj -1057 0 obj << -/D [1053 0 R /XYZ 56.6929 511.3349 null] ->> endobj -210 0 obj << -/D [1053 0 R /XYZ 56.6929 239.6059 null] ->> endobj -1058 0 obj << -/D [1053 0 R /XYZ 56.6929 207.3747 null] ->> endobj -1052 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F47 879 0 R /F39 863 0 R /F48 885 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1061 0 obj << -/Length 2903 -/Filter /FlateDecode ->> -stream -xڵYI��F����x��݈�X�1mO��l @b� -�W���,0,T�WI��«�6��_@��3}<r��w(�*�"r⫺{�%3�,�W������&jk��� l�g�>��Ԛ�7 -lr݈nf��->���vɆ�����%[�G�B%"��i�hk�o�'I�H d��O�Q��� -���,\��Jt�X �?���l��<�py+ɈBW��LTK�!A� -��4���8�^��<��T��_�l�����ƛ�VlD��3;�����������3s�Lfh�}�l�"ɾO�j�� �` V��>i����3~*� �(�`��P�&�0�S�8���N⳪�d%&c �煺��%�SD��6L�|��H��~N�0rTn/W�Ƙj�t -��w��� -���Pߣe�8���\D�g����L��ڒ�Y�Q p�C�+�E�"B"A�ȍ � -|��o�7*�$:�O�o�њ�F�!��{ce��b���p�Hq���CÛmۺz��nQ�p�-��Y�J�{�L�F�m�%-��b�x���Z�[��_w�3G������4��8S;�`��N�,y��྆eλ��*��r\k�����X���@�t���@_$�ˡ�¦vܯmg�.�Z^��~/K��7�Zc&�����uI�U�V�� w���sW\�ao�m+s�dH����'ﲚ�a��UO�����Awқ��߇���y����{�� ������U��n��D���t�^*ѭq����tV��] tNޭ����)�~�*��}�����8q�L�������67�eV�NW���קM��MM��5�j���Ƭn�������
��R|M���{A�C�� �px��A�Y�~� .t�5�K��ꕃ -���Jbp"dX -Fd���a�mVKMtϗ����Hͳku·�v�հf��o��Q��6���0]�����,�����8o����������6��`�NY���3��O���>½ w�<�� -����Rٗ�]���g39]����l�&5f�R�(Χ�`�߂j� k�����}���9�o�@��6�t:�Qu�p�;������ 8m5���.��{�G���m;���H�P4�2�'�}}�&���iCn���~X]�����g��5���enN�]�nO���zc�P���;~ți��:ws�N��z��i����z
I �0]�;��5�Н'�}w��͓=�O�t�k�bi�Z�����9J��� �q�۷���]Vj�: ��&T�6(3B��֝�S�4���,.��$��:V����ut�l�x���.N�Y�������cYjO�Ŗs���h��G�8� �}�����Ro���\2M�'�d_~z\�0����P����
�H���o�� HH=(��� %O��st�ϕ"$}ռ���G���t �endstream -endobj -1060 0 obj << -/Type /Page -/Contents 1061 0 R -/Resources 1059 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1050 0 R ->> endobj -1062 0 obj << -/D [1060 0 R /XYZ 85.0394 794.5015 null] ->> endobj -214 0 obj << -/D [1060 0 R /XYZ 85.0394 717.5894 null] ->> endobj -1063 0 obj << -/D [1060 0 R /XYZ 85.0394 690.1986 null] ->> endobj -1059 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1066 0 obj << -/Length 2379 -/Filter /FlateDecode ->> -stream -xڥYKs�6��W���B�"H:'gƓ8��xmM��Ɂ�1w(RCR�z���o7�(�v�j�*�4�~|h�"��+��0��4�S�".�`�=�����Lx�eϴ s��:����F�`��JO��?B�R� -F��/ǒݡ n�!�\�?xR�8�3���Ӱ�`��ݣ ���<��繥��h;��lQ��EK#v�x��l�+-Me�����Q���t^W4�˚�R�+��hH��M]w44R�k൪�c&�G�N �
85I�` �W�Qj ����}Q�Z��"�)m�8�8��u����#p>�����ꦣ�s�4��݇ �T& ����3��;,�܄-Ioi"+K"���Y�$�UG�q��Ϝ��ʨ�mK2\��*�Z���K�s��EY��� � ��u�u�k�\�\{� -�;PY��D�[������lKC���f_=���m�~��h�ћE��P���Y5�e�����>C�m���,U2q��!��Th�C��i� �J&�a<�ƻm!��� �K�!���In�Y�Ex�� M+eQ�݁$ϞV�0e3dG�e��0�;��:��r�I�uY@8-�"�4��
��3N6��4x�<���p�;��d[?Y��ƍ�[D�!i` �e���`�l���C0 f��n���';o�+rE҇)P�m@X�; $�e��D��`(̥�z�u]uY� �d�d09'&+H���g���"�^)�u{�
->1tȺ3��='G�� -�3{��/�Z0)�t�mQu3�J,������,������n��� �&�� P)Mx�PQ2R -�PTY�L|e�`K�gslj:��`)��& -�V��"���x�]�5��X��� -��FG��!� ��%d$��7x����Z���Ƃ��M���p�L��g����]&�{V9)2�v��X�:������F�a��ԭ\!ľ/������@ &��D c ����Om)}��7y/�]�3�"�n�Tx��ݝ�ZB4Lw�j� -c�,/<+��}�I��0zy'���4H��b#E�M4n M��K
�R��s������۾Q -�� �橰��x�}�ޒ{���X�����Χk_����Zk���8< �x$�{<�d��?o�F�ށ9^п���7������k�K&�x��1���,���{�� -^JC-��>1~W��ũ;"<�x<|��^��R ��F7u>�Ǜ�J3���ރ�|�v�ZЋ`E5X�;(�!B���%Jc�(j�&0u]fÀ+x� �� O�pV�+.\�yj_��W{"DO�Rռ!���u�yd۹<" ��b γa|�<�5Z���OU@d��t� ��䐓O4萔% ���>�]�����+�_� -tғ'--$����:ۭ�k"w��Tx������:wṙ�Z� ��� E�z82CT�~1�C�B��ѡh�����=�xKo��N����υHML´��}q7:�v���3�ÃT��(�=>� � >�/�z:��7� � 9 ��2�� ���#҉��~Gm�'O� -?Q�=� �#�g�٥X���Xu��������$y&zT��N� ��wQŵ��Wd�!�����5���}���l�`DB"z�^g��}�]��Ù���e�-�] ��c$�6 -�� ��j�$P��� -endobj -1065 0 obj << -/Type /Page -/Contents 1066 0 R -/Resources 1064 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1050 0 R -/Annots [ 1069 0 R ] ->> endobj -1069 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [349.4919 384.4828 408.4801 395.2672] -/Subtype /Link -/A << /S /GoTo /D (ipv6addresses) >> ->> endobj -1067 0 obj << -/D [1065 0 R /XYZ 56.6929 794.5015 null] ->> endobj -218 0 obj << -/D [1065 0 R /XYZ 56.6929 594.1106 null] ->> endobj -1068 0 obj << -/D [1065 0 R /XYZ 56.6929 562.6395 null] ->> endobj -222 0 obj << -/D [1065 0 R /XYZ 56.6929 370.2937 null] ->> endobj -1070 0 obj << -/D [1065 0 R /XYZ 56.6929 341.714 null] ->> endobj -226 0 obj << -/D [1065 0 R /XYZ 56.6929 214.6004 null] ->> endobj -1071 0 obj << -/D [1065 0 R /XYZ 56.6929 186.0207 null] ->> endobj -1064 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R /F62 995 0 R /F21 658 0 R /F47 879 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1075 0 obj << -/Length 1913 -/Filter /FlateDecode ->> -stream -xڍX_��8�ȣh\K����fo��]���>]�A���P[�F���� )JN�q�E���(�"� )�M?���4M���<-2Vl��]�y��_߱ �"-r!�eet[�:-j^m��J>=���O�6<K˒����VY�i#�f���'��A Guz��"K���>�F��+��2X�H�&�����"�O��<���_��0���r��Q+�S��<h-EZ��Q��a˲,�迯. �N��t�M�6%/�j^�e�2��ɒ������}� - 5e"��^���8������R�x�6�UG�Y���p�#����d6�&�y^~<�1LQ�s�s���4�[&�_�� Mꤕ���vK���~;���Kz���=��l�<Ӌ�C�S'��ʓt�WA@Ơ�Ͽ��[�[�*��D��[g�����Qgl�p�����J lid<(b��н�;��V9��a 霸�=�D�Hfo�ޞ� ��1� �6.��n�+�_>���/��_�v��σ�*qz��Qe'Gzk�OG�{�Wr���(�꺰C�\ -ve ��N� ���g��r��.�����h������<�Bh%��ˁ�:z����h�ӻ>H���hǠL8[�,�j����D>�/�T��T�
��0�&�m�٭4D��Y�B���.��&�0�5�RP �������'�Sʯ����F^b����+�Y����_�;oDH�Jz+�I�!��`D�:���� Q����R-��T!p� -M&P�q���i7jӎ4��Y�y�"A�͠ì�d,"����kk�;�)�R^�:�& J��9*���,J�ן�IW�!6��O -endobj -1074 0 obj << -/Type /Page -/Contents 1075 0 R -/Resources 1073 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1050 0 R ->> endobj -1076 0 obj << -/D [1074 0 R /XYZ 85.0394 794.5015 null] ->> endobj -230 0 obj << -/D [1074 0 R /XYZ 85.0394 769.5949 null] ->> endobj -1077 0 obj << -/D [1074 0 R /XYZ 85.0394 576.7004 null] ->> endobj -234 0 obj << -/D [1074 0 R /XYZ 85.0394 576.7004 null] ->> endobj -1078 0 obj << -/D [1074 0 R /XYZ 85.0394 544.8207 null] ->> endobj -238 0 obj << -/D [1074 0 R /XYZ 85.0394 403.9445 null] ->> endobj -1079 0 obj << -/D [1074 0 R /XYZ 85.0394 368.2811 null] ->> endobj -1073 0 obj << -/Font << /F21 658 0 R /F23 682 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1082 0 obj << -/Length 69 -/Filter /FlateDecode ->> -stream -x�3T0 -endobj -1081 0 obj << -/Type /Page -/Contents 1082 0 R -/Resources 1080 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1050 0 R ->> endobj -1083 0 obj << -/D [1081 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1080 0 obj << -/ProcSet [ /PDF ] ->> endobj -1086 0 obj << -/Length 3113 -/Filter /FlateDecode ->> -stream -x��˒��>_�K*���7��i��d}p{o��8#�J�,R;�|}�� -Wa��)m%�����LZEB�L�ap~���Wq/�����I:pH^���ժ}����v�-�Y�]O�`��V s��모�� XP���Xu�,� ݤ�_�� .>�E���8�oA腞h!��^������_�d���;Δwf� 8 -h \��f ��%�f���x燈v��0�)��Dsͤ�Eؾr�:����9 s�/�d�9�gv6`��QfH�@� 8��&rf�� -�S5�~�h �x���1��fN��P�y���� 0^�S#�X ��V���N�� 7ģ���� �cV �}���XM���a�G��^��n���͙�z��f��\mM :�L�!!ީ��:��j���1�S�e�-�y��r@�ЃE�D�
�]U�X�)�Ġ7&�>n�&��qt61���|�h�x�����>#�D R�c��]0����� PW�8�6T#� -]� -��� e�q6�Bm�%Ħ+ր*�����^�z��: �Z���YP2�C�����lL��p0$��b� -�-�\�_J@�e��u�� d~#
�. -Hy��Uc��\`e*Y;�
�7hf�*óU�8��;x�
���ފ��E�
w��z�sֵ���L;s�=��⫬�W�i}n����<�u������n=a��Qf��Cyǁ�,��v�_MQ�=�#�r s`X�<��+���$n���� -��6V�C���?��
�/P{Ya�u3_��)�m8��Dv���FcE9#�1�� �q_�@
"��e&�{�L �_8�#w�QŹ���l"^u�+E}�J\��� 6F���]�usɔg��� �ձ,a��Q梙��� Qy�<�[���d�gR��o�{j N�o�o�R��� 0�\��] ��0&u�|�t�ͷ?�D�H�{�x����r=� �o���/R�AIH�`ǒ1����z�ߏ#^����)6!� �:R�?���t .�u�0�j-�������u�����Q^P�C*�y�.W�5��!����J�Z��4R7}���5�.W���� ��O� FC_�jSn˞�m<b+Pv]�6�� �b�F����L�˜���$�)��1���� V�X -���*Y���x To�����v��c�N�H<�� ���������?>��
3�%dG(��.GO=���YZ�����:wwp���~��)!�DZ�ۥ��K���q6F��z �� ��� �dT#e�MKwg�a�i������qS�Y��K�k�ajf'��a�[D��E�P^��1�_nJt0�=3�p��%� ��\;�遆�Qr.�. �۷��Ν�C�Q8�������ݼ�`B��t �#H2�C�J�⽾6��n {��s�=7-��Ӯ�_� }hUo�V$��م�v�o��"��*uG�)pj�C��B�e"��
��Ͷ.�IE�a����-�$���V����4sp4�"K�����M�� -1�0%�vQ��u��+ �7��=}�# d����i�B#$�y�?� ��È !�C� ��7+p��!�b -�� �X*�aج�F�ݺ��s��n�~�ɀ*��k�s�Yv/�{+�*ARth�������|�d�����@)�>~�� � �T�k"7�[����GO� -��GZP[��k(�[w�6-�]_6 z����5h ɐs�\0�03 -���"G�X�2� K!��ݖ(��x��]�^�2��c�� /��n>EXX'����O�;"��m�x�Z 5 =J�[S���2����A�A���ɲ��K�dB�
���>�_>u|��&2�����y��(Fi��ϓ��[��{� �=+K��z����&��P���|qh� -endobj -1085 0 obj << -/Type /Page -/Contents 1086 0 R -/Resources 1084 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1093 0 R -/Annots [ 1092 0 R ] ->> endobj -1092 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [356.2946 363.7923 412.5133 376.6291] -/Subtype /Link -/A << /S /GoTo /D (address_match_lists) >> ->> endobj -1087 0 obj << -/D [1085 0 R /XYZ 85.0394 794.5015 null] ->> endobj -242 0 obj << -/D [1085 0 R /XYZ 85.0394 769.5949 null] ->> endobj -1088 0 obj << -/D [1085 0 R /XYZ 85.0394 576.7004 null] ->> endobj -246 0 obj << -/D [1085 0 R /XYZ 85.0394 479.565 null] ->> endobj -1089 0 obj << -/D [1085 0 R /XYZ 85.0394 441.8891 null] ->> endobj -1090 0 obj << -/D [1085 0 R /XYZ 85.0394 424.9629 null] ->> endobj -1091 0 obj << -/D [1085 0 R /XYZ 85.0394 413.0077 null] ->> endobj -1084 0 obj << -/Font << /F21 658 0 R /F23 682 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1097 0 obj << -/Length 3638 -/Filter /FlateDecode ->> -stream -x��[�s��_�>EΜ`|$ӇK�K/M.i�L �̅�h�s��������{w")Jvje�s���b����lB� �(M��nb�$�25�/����}y��Y;h� �����+a&�8����C�j-�\-~�j��9P��Ͽ}����?~�������oߜϸ��W��� �˯/��|s����M?����.��t$���7_� �~�����7�_��r����UZLw�� -\�og?�B' X�Wg�g�� ~P��T�()D�S��p��D���:&@)�\���jV��
SP�66�#�(;�u�-ь�PK8�l��l���Y31@D .���L�!J8���p l��Hf-�Y��>w�Ň쭫M� ^����XơmN��^�PK���w�4��z3HC��:~��.���q���J�a�j����]>B���X�(AC���°�̖Ųh�EษB'�?�6��N���]�~�z��'3&1�C���T��23}��ۼ�뼬�i��r:��u1���!��3�u�)� ف��9��yh_�����<�k�9�}V6���jU�n�g��iV�S�����J�� -��j��� (��6��l�~�䛢~F�L��������]�ɀ�M� ��8 -�s�(3�ָ@ly��?�e6��r� � -�x�6b��ڄ��C�\���H�
�����7vl>M�����n<,�Qjb�8����g/ ��I �c��¶�8�L�d��� - u>�n�&?bS m}� mJ�Ҧ(��� �`5ӄ* ��v��l�C�Mu�+��y�UA�$�`�BeBM�U ;6Ṭ�V��!n5- �F
^J��I&Q|D4�#`_6�x�?��'�J���!�kB|)c|���b^�ժ��� F���9�E0`0���Z;����PG;OeCm���$�/���hqԄ���!{:Z��R�b�u�Ðj5[�YS�G��t*� ���X5��ϣ���� n�5!����8�� #||AC_���� d&�6�)$'5L5/�5p�i�����4@p�k>��Mv]"�\��Hx���� �7�
�&�G( Tv���� ��1�`� �𣈐|Ẉr��:<�+Xg랧 &F+p�V��?�`J� 2��Ys��
;q�l��g]���1ʉ�����@4��%�َ�k;�m[ �6��|�K�vױ��(���'x���|� -��,݇(!�Wi�Q#�%��]���?��8�)� ��>a*Hʸ0m0��o�m9 IF�LE7��(����/GKk � - -�ͤ�;.8d��}u�=?j)κ$G� �
�|7�=�3��E~ۂ��ai��Ĝ��BQ� ;SY� ������>���R�ﳢ ��\V���
��ѴO:B)u��� ~T�x�eSE-l�0�{�8�����X� �!��d �1(;H��A�2فߋ�6�غ��~hp�e���n���7������6M� �N`tk@ y�. MaI*i�<�qX���2���p��B�7�x�7��Q ��yV_�#!C�6��`g�E���p��"R�V�rLNU��w#� �4��O����wEY]?4x�OTQ���� -|+q��>�2V�J�NV��R<\������ ,�-��d�%��0�' �������K%Z'sY�$ E?�"\܋a8 -w "p ?�%� &y�?�.&/�_Z3��9��� -�GX�/�/oendstream -endobj -1096 0 obj << -/Type /Page -/Contents 1097 0 R -/Resources 1095 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1093 0 R ->> endobj -1098 0 obj << -/D [1096 0 R /XYZ 56.6929 794.5015 null] ->> endobj -250 0 obj << -/D [1096 0 R /XYZ 56.6929 304.8746 null] ->> endobj -1094 0 obj << -/D [1096 0 R /XYZ 56.6929 277.1668 null] ->> endobj -254 0 obj << -/D [1096 0 R /XYZ 56.6929 277.1668 null] ->> endobj -1099 0 obj << -/D [1096 0 R /XYZ 56.6929 249.2319 null] ->> endobj -258 0 obj << -/D [1096 0 R /XYZ 56.6929 169.6708 null] ->> endobj -1100 0 obj << -/D [1096 0 R /XYZ 56.6929 141.5207 null] ->> endobj -1095 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R /F21 658 0 R /F48 885 0 R /F14 685 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1103 0 obj << -/Length 2809 -/Filter /FlateDecode ->> -stream -xڭ]s�6�ݿB�{��X4@���ԸNϝ��%���4�9��$�)R%�8����]��D۹kG -���a u�F
����� ���X����9�ZL6_ :� �o�>�Hd4������m=������s9o[�%���-1ȱ�C/�t�T��fG3�
/�2h
ZkE��qp���*�a� Ӫ��+cړv���F�U%��t�)>[�ͯq� (\`�B��B+�*���n�~���!f���>����\T��U,� �k�Ϻ1�0��1����0�C2٤��th�iDLh�lD�d -c
�2d�I\���h�V��8�.�k5�b=UP��q���"/��`D폃n&��� -���ւ� ���$Q����,wE��4�I�(|���jt D��]S�8�AO�$�K��� �&�LP��P���;�� -RQ��t��&�B����e֔��RJò�6 -�QX����5,=P�3��0�`c���S%es,��ȠG�;��� � -G�I�>���+*�ʹ���Э���M߫��^ݝ�v'��G�j���^S�Ėo� ->t��Mڅ��h�i -�?W[�/�n_��6�n{��R�6Xz��.��[�%����"�1PO�o'<Z_��ME�����{��U^F��i��� XR���%4��8��D��
1l�C���<�=��qp.����GKP�F�I0���3�U�TN&Fɗ��2��Ƕ|�`&!W��
|����qG�T�q�%�� S�[G� �k�%pDK�� -��g���@ԝC��(hF�����~�嫯�\'���{f��������M -��C �����e�V�/�g -|E��R1��w}��[�/r��GHV���-~DžF)�v͑����Q��e��b�v،A���1�� � -�`��b����>˹3�e���'��(��� �J��͡�:�c ��>/���ԟ״`(i��F��M������&������ h 0b�&�<�25��l�\ �!;����!����o�R�|�3h�--/��qo -�x�S�B��:�}x�-dh*}�(.
P��1�^ ("��,X���C$�q�1���3gOf�bW4^a��"�g23�%��H=_BU4�D./����͛�F�o
u\�y�����43�������Q�3���{n���:��m��/G��ޫM�Á�y�!9rk���UR�[?E�G��O:ud|paG�P���x> ��x��bm���h� O�}�DP�P$�fM�w��q��5��ݴ-��;9|D%,j7��&�3^_�P�]�~f� A�������+.,D<x�B��.�2�N>� a^(Z��]�H؎<=� -�^8r /(8�\��G]ٳ3�� _�LZ��h%���NJ��m0V��Pvžtuv�:�i� i�W扗�wX� �[*
�P\ԕ��e�S��1���O%��� -endobj -1102 0 obj << -/Type /Page -/Contents 1103 0 R -/Resources 1101 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1093 0 R ->> endobj -1104 0 obj << -/D [1102 0 R /XYZ 85.0394 794.5015 null] ->> endobj -262 0 obj << -/D [1102 0 R /XYZ 85.0394 438.8479 null] ->> endobj -1105 0 obj << -/D [1102 0 R /XYZ 85.0394 409.9891 null] ->> endobj -266 0 obj << -/D [1102 0 R /XYZ 85.0394 349.7918 null] ->> endobj -1106 0 obj << -/D [1102 0 R /XYZ 85.0394 323.4555 null] ->> endobj -270 0 obj << -/D [1102 0 R /XYZ 85.0394 249.9022 null] ->> endobj -1107 0 obj << -/D [1102 0 R /XYZ 85.0394 222.3206 null] ->> endobj -1101 0 obj << -/Font << /F37 747 0 R /F14 685 0 R /F23 682 0 R /F21 658 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1111 0 obj << -/Length 2453 -/Filter /FlateDecode ->> -stream -x��Z�o�F��B@?TB��>�����8>���}8 �GS�E�"U>�:�;ȕDKN�+� -��F����W�p �����i�(�<=��ûˋ]��$��\��a6�O�]��ܶ.�N߿?���I,��� �?ߜ_٩������[;��� �W��ί�?���~�������%��`�������db�x�S��<@#���N�`Hp��Hqr}�K�0�5KG�G0�,�# -�lL�B����V�٫W�},2���iZ�VY�6�״I���C�.m�]:���r��I��mV�eo���oX�H��k�N�a��nR.��e���g[m�y��nkf�|l����9!H A�Ty��9�Ѵ��L[��ӛe�hӤ,�ֶo37����$�g$�VMc���h�u��ƛ{4�C;���zl�|t�U�Eu?�q���f��cb ��[g�ym�Y�.�Q�ZuMk[]ㆬ��aL�u���.�~;���l��� ���l��&/T�%��f��a ����_��n�K��ڀ��؏���P�í(���#܆b�ƶ~��/|�������Y�Uu�K������S<�Y�o�ޑ��s]g �k�d3*��C`M�c� ��eV�j��Xg��s>�; x�:Ga�iv�Ճg ���f��;blF)��pd}�oF��� -���w��9c)�T���
�Q@X�o� ����9I��o^�h��mx� � ��������
>@����ƒ�`�z^�$)%�x����I��Ӽ�: �\ӯ�d5��cDU��dګ�nQ�$�&.B�Ȩ�߁���Mk��kc]�tC�W�@�^�m:����%\L.jt5������m#��3��r�&o+�q���C�FL -3�>���NV��~"��(��y��f�CK�O��?bz���E�Ĥ �3�� -}�� �T����]��\�K G����O��'S���aآ�q9^�j�覕Y@�.��qIJ�`�Βڶ�I��P���U���v�@Cfd�j�>) �@;#Y'��g��~n�*�c3�7��|`���2��wRw��C��^�%,s@a -LY;fij�uʁ[h��b�ɒ h���}A��F` I�29 ��uֶ$�É��үx�hА ��h�<#J��ZWE� ˥�s��#�A�v` 0!+ܴG��Y�_������m�c�uA��T].ґ�Aբ"�y���3B�t�
�|�·mH�hC)����H,�����EvЂ��و����p�c���?b�ő��,��7��#{<��f���֏QY��"� -��Ϊ��� =c_e"W��7���C)����?���j��� -�{s�x��� a��~k)�mN) ��pB �$�TvS��E��ɢ�]���g�ȼ�j0` �Ai�6AG��/��C�?v� �*���#�ā�y u �ս��w��T��CŃ�� - -kJ��G�LG�DKaA" �$��t�|�v��e�85�~� ��OU��73�H�C�P-/�� T�*�����=Uk����� /j��xz_T��M`| �a|�T�����Z�hnj6�_dwIWl��dw��7��Cͷ�d�6^,�'�#*��v@��ҥ%���4�q��CU���� �ѝ��m3꼷�.�&ߧ�@��� �PI �sL ����m�A�X�J~V�3�R=��f����p}}~fۚ� e�<�.�y�)����h���&��y��Jt7�,UtO����*
D�X �����A��2��{��X -{����]�(��������;?Ѡ�P� Q���_hD1�U�,9��@ =z|�b.���Qg�Q^L� ���"c����g�U���{�[i���Z����2œ&�� -�X �q�vt�Ҋ`|���9�G� ���endstream -endobj -1110 0 obj << -/Type /Page -/Contents 1111 0 R -/Resources 1109 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1093 0 R ->> endobj -1108 0 obj << -/Type /XObject -/Subtype /Form -/FormType 1 -/PTEX.FileName (/usr/local/share/db2latex/xsl/figures/warning.pdf) -/PTEX.PageNumber 1 -/Matrix [1.00000000 0.00000000 0.00000000 1.00000000 0.00000000 0.00000000] -/BBox [0.00000000 0.00000000 31.00000000 31.00000000] -/Resources << -/ProcSet [ /PDF ] ->> -/Length 557 -/Filter [/FlateDecode] ->> -stream -x�m�In 1 EOPw�u�$�Ig0��ľ�6���V5 oʯ��s���������O�� �����#h8���:�5? �Ơ[�I�L�~ �F�� P��Y����d��zZ8��������f��(���E#@x�oL ۹[����� -� -6\>Rg�b�W��j[��� -W�Ϣ�{6;���F�����]��)�/ԬMu;pk; ̩�dh<�E��A�w�𬱱N�����t���D��²]��(��;����厰��r����L��
T�͡誋��t��w_ =�]��=�uS����"� �yl����-�kHs��reOڳ�vg�<7�t,��e�;���Э/I�B�&�(���Yٹ�,�kRԚ�' ^
m" ^��h���W9AV�y �©/f���"����Fy-Sng \�d����ƥ��}B�� ���$�w1.�&�����C�O��V�X�9g�E{��< ���P)!�Z�şLު~��'�U�XL��c��XsЖ�� ���Ӓ~�BL���ƹO��NZ�_[��.����*]3Q���� !�-�endstream -endobj -1112 0 obj << -/D [1110 0 R /XYZ 56.6929 794.5015 null] ->> endobj -274 0 obj << -/D [1110 0 R /XYZ 56.6929 426.5656 null] ->> endobj -1113 0 obj << -/D [1110 0 R /XYZ 56.6929 394.7216 null] ->> endobj -1114 0 obj << -/D [1110 0 R /XYZ 56.6929 335.9523 null] ->> endobj -1115 0 obj << -/D [1110 0 R /XYZ 56.6929 323.9972 null] ->> endobj -1109 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F39 863 0 R /F62 995 0 R /F21 658 0 R >> -/XObject << /Im3 1108 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1118 0 obj << -/Length 2937 -/Filter /FlateDecode ->> -stream -x��Z_s�6�����7� $O����i�\�>�� -�6/�����~���$%Q���F�b����-(1��gW^O2����L�#>����G"���A���.���Feϼ�vrq5��wNL.�LO�~������L>��xf,�~w��5Q<=Nz����� N�3=�8�� �?��9�p����x&�0_F&�9��Zo?����ɇ��.�?:���2ܯ� -7�_~�l��#Δwfr/� ��du��bF+�(ˣ�G��z��1��q2Q�!�7Fni�xf�TA��i -��O��������bUTm��:_��5���Fᓙ��k�����Y�� -z�7ΜH�<*e։�3�u�4�Vy;���,�6��� &k��D��Ƞ3ƭq݆�#z]�ʹ�ʶ�+��Ղ?7�u�Q�wzqSt��gB8��6� ÄUiL3L�i�4�u��z4���zY�鍴����ê�U 7u"�N�N� �����ǥ��6�S�F��*p�W[�ܮK��{z�4YJi&�t�f���Z�dB� �(S��|z2�wCN몥��~�����~r�CO���`�1���q�wu [P -�s��زAAH�;�0؇��%�I
H]m���2R�9ł�we{3�2s��L<��Vgq�eqU�t�P�'�I��_�X6��MA�^-�Ӫ��B��ĎY`��<���Ns�"� -��D /�e}W,F��� ��qTY]�+i���\���z�9��,�291V1��~J�`*̲���u�� ���A h ^��fl��u��Ac.�r�� ��1�����~�k�bJ��G���h�x`nj80lWņ;��Փ(�z�Hc-��Ot�`�R��t�!E -N�X�U��V�O��@�o�����2�8�3 *B��t�_3A �z�/q�Bq����g:����_4�(��FR s�Đ`�+����ן饬�b}�ϋc1M�.� bY�"Os�@ -}�t�<OϽ� -clk �����Ns�4��Z�fuYDu�wUj���zs�O�S;ډ�{��n%;��`�hTt^���_Y��y�~�p�M�J�N��(&�گ���b��X�`A�Ž����o�*�� y�� -����{��<h��Xj�������a{��b}0���X�sTkp�<��f�Ӭ� �> -�IS�J>��-%<�� -5������pU��(d�SsY���^b���h�2`J^��:��˼��k.��#p��*,�J���P�� �g{k�q6d9r�`=���ay+6G�5�S��|9���"S�7����w_o����Gӆ[�k��<}��GA�6� �82$7��b�4�X;��ܷ3����矣� �4��A����W��dI&��~bDz8�u_�����5�S�������B@R6C � �R�HW��t}�{�ڬ��oֈ���̜g�k��LX��j�����ᢃ�bw�7j{0"GF ��o)��oCR��@Ƃ� #�Qs0���N���2�8�7����WԈw -&\�
hHä��.x����� -endobj -1117 0 obj << -/Type /Page -/Contents 1118 0 R -/Resources 1116 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1093 0 R ->> endobj -1119 0 obj << -/D [1117 0 R /XYZ 85.0394 794.5015 null] ->> endobj -278 0 obj << -/D [1117 0 R /XYZ 85.0394 769.5949 null] ->> endobj -1120 0 obj << -/D [1117 0 R /XYZ 85.0394 752.4085 null] ->> endobj -282 0 obj << -/D [1117 0 R /XYZ 85.0394 683.64 null] ->> endobj -1121 0 obj << -/D [1117 0 R /XYZ 85.0394 653.5261 null] ->> endobj -1122 0 obj << -/D [1117 0 R /XYZ 85.0394 576.1881 null] ->> endobj -1123 0 obj << -/D [1117 0 R /XYZ 85.0394 564.2329 null] ->> endobj -286 0 obj << -/D [1117 0 R /XYZ 85.0394 417.9499 null] ->> endobj -1124 0 obj << -/D [1117 0 R /XYZ 85.0394 388.7174 null] ->> endobj -290 0 obj << -/D [1117 0 R /XYZ 85.0394 267.384 null] ->> endobj -976 0 obj << -/D [1117 0 R /XYZ 85.0394 235.1866 null] ->> endobj -1116 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F39 863 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1127 0 obj << -/Length 3451 -/Filter /FlateDecode ->> -stream -xڭZ_s����#=sB -jz_���� x $|R�<�� �X�e�)��9 �Y
����j��>�y��Q�R�-6��L���>����CwE���à�$3 c?=՚A���O�^G��Ȱ% -5 ؤ��H"��&�]5��AΔ���� -`�� �_c>:����B0���u3-p��7m9@� -Q=��51o�0�O���1/�~ Ɔ� -�QF��"�vU��fyS�!�����MMt�����3� �7��W쬂���\��Y��X�8tS��p���X:��a ��� �]�Z� j�c&��w��؛q�f T�c�ҠR���� �ׂ�Aj��R4�| zVa\�/�RV�,��Z�-n_R(��Ye�
-+Ԡ^PPDO7�r+z� p�8n�>��^xE~S����������8X X��XGk4��ޠ��[`�s�?Ka�:Zܣ�z���H��8@���p��}q�a_�[��X�����K���fd�9e_
o 7���f樰|^�P��N=�ko���]�d Ԯl��`١8d>E�,qa��d��Ld �\i�!^ ��1 �f,�F6�Ds�*�ɜ�1w�w���A���:�:�p���p�]^5eȓ�Q]�t�� ���BˢB��*�R$�P�y���=>�x��R��\j^.�6_�QL o�0 ���i �`������sj|�@�ϗ�Î�]�C����tؠ���ǂ�2,SJ�����}�C\ 9�%�������@���=TǶn����sɀ��I�M��+z_ OR���)�o�q@9Is8@�2��_R - � -5�,渻ґq -�
�)7����A��ʇ���)�:���Ɩ2���ǂ �lB�qM���UUOL�r���W �{ż�H@��z� 鮬f ���JA!����|���Uc -�{�ϺB}J.@.�z�b f�� �֏�<%"�G:���6[0k�$H�G���$ᗖ:@�SR�����I^�;� �Ҡ( �/t%cē.�(IE0�*��@],��F|ĕ���l�. N��%���r (!��D����S�e�6� �a �=ܢ�G
:�kh4P臡�`H�������D��eC�U�_ϩ# ��R:�.��z�B�3+�V��V��� �Y���cE�n��b ��Ϛ����ex� =r�N�~�u�5����Kb<����J�W� Ob -BȤ���%��C��S�^F�c6�8�����Ҥ� ���k�xR`8�h&��:�T���n��FyF���f �3nh2���Wa����9��^�� -K�κ{}9�#L�����^��r��XQ�� ��
u`��jQ� >ߍIģ$��${�$?h�U���&#���S�t"�a!x|���9J0b V$j�OjDz��g �;4�U��]��`� Qo�2�{Ġ����08g��+%BU8���zN%[a�q�"�|�8]ό�cM��g����w -qj�>�"��zG*�� ��P���x L$�ý=�l�^��Ք��]�1�{D��[|ɡ�����"׃CG����8�9 �ow�g�q��H�(K ��7�#�(A�OE �Iu� -endobj -1126 0 obj << -/Type /Page -/Contents 1127 0 R -/Resources 1125 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1093 0 R -/Annots [ 1129 0 R 1130 0 R 1135 0 R 1136 0 R ] ->> endobj -1129 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [55.6967 676.8938 256.3816 688.9534] -/Subtype /Link -/A << /S /GoTo /D (rndc) >> ->> endobj -1130 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [268.5158 676.8938 332.4306 688.9534] -/Subtype /Link -/A << /S /GoTo /D (admin_tools) >> ->> endobj -1135 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [378.2799 73.4705 428.5017 85.5301] -/Subtype /Link -/A << /S /GoTo /D (tsig) >> ->> endobj -1136 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [112.234 62.1828 168.4527 73.5749] -/Subtype /Link -/A << /S /GoTo /D (controls_statement_definition_and_usage) >> ->> endobj -1128 0 obj << -/D [1126 0 R /XYZ 56.6929 794.5015 null] ->> endobj -294 0 obj << -/D [1126 0 R /XYZ 56.6929 403.8784 null] ->> endobj -1131 0 obj << -/D [1126 0 R /XYZ 56.6929 377.7405 null] ->> endobj -298 0 obj << -/D [1126 0 R /XYZ 56.6929 339.6466 null] ->> endobj -1132 0 obj << -/D [1126 0 R /XYZ 56.6929 308.8302 null] ->> endobj -302 0 obj << -/D [1126 0 R /XYZ 56.6929 236.1221 null] ->> endobj -1133 0 obj << -/D [1126 0 R /XYZ 56.6929 207.0192 null] ->> endobj -306 0 obj << -/D [1126 0 R /XYZ 56.6929 125.1654 null] ->> endobj -1134 0 obj << -/D [1126 0 R /XYZ 56.6929 93.2531 null] ->> endobj -1125 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F39 863 0 R /F48 885 0 R /F14 685 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1140 0 obj << -/Length 2602 -/Filter /FlateDecode ->> -stream -xڭ]s�6�ݿB��L�����)M��{W��q� �L�� �S�TE�:_���v� -Olxw��+��}��Oon/?��xqu��2�Wp���v��3�-@� /8SE�gG�p&�Bζ�VL'Jy�����?{��U�5�?�r�s�(UH��`��%T��ڠ�*�"g��9�G�_ͣ�Qc�4��]ٙ��;�O�yYӠ��{�n��#a����dc ���/GH@���\����G!��8�U�V +2)�����2ǀT..�z*,t�7��� ��Y�Ҍq��|�`���nDk� -�{Zܯf4� 8J� 7�;�9]d⣙;��F��
�%�>$�=�s\�Qs�����v4�� s2;��n�\ ��``����3�r.A�3���GQAO��}l�#H �'Mg��,'/ ��y���_�S��$��ƬI͒B'����j�"gX$�+4i��60�Y�k� k�-��q
D�A���؝2� RI+�f[Vn?b��PW� ��f��Z>V��6�BD�5et��\�� ���>
v(� ��� .Qi^x�3��y)X����n�E�yه����#2��4P��w��Aܩm�Q �U�>p �n��V.HyY��R}�[,����o�n�v�DOe�uEĦ"��X��x��q0bFU=o�te�3��僡�{cj����� �%Ț``Y�);Q�k�j�@`��5�? _|k��X����n
i��[�'�9w -. -��B� -��MK0��@�Ru�ߕpP�ع�@,Q�&p�,U�
����;�v;s�Oc(и�b|k�m9�� �(�X.y��s��t_7XJ��RPIB鬞#�OHI������?˗�����%�� g�5Ӿ,u~2!'`�%zBO �$= �>^���,�H�/Y �*�����b0�K �] �F� -� `�f+�beP %��<��L�L����@n~"j����>CA�3�4d)�� -�T*DE��!����C�Ӆ�OS�(Xg:׃�����-� ����݄[wu��n�V>L�V%T{�������غ� ��"�獔S%����,[� M �ŅG$Y_w��,Ѥɸ��P���y. 9E�f�rͣ��b_��r�-���䖁#�ޞH -�� -XV�0 J��0�벮��9�|��m@���6�FiYm ����#K���c t8T-��f'��oq�_�;ԛj[ٛp��F�C������2�pg Ν�>�����˲�WH��c��na��� ԇ��$��! ḃ�`1�������f�$8���X�����
�4 �g�p3)���h��� !Ǖ�W�.G��p��|(�P�� � �Mc^ -��U�'��2�("�� x ��gϹ��Mg��ztYO�3ƾ�{�@[C���O�A�IA&}�q�z�W� D �n˕ �I� ���}�2�|<�$%Uq���M:z{!Ծsp�h�r8z(��A�� �%�� m����"Nl -6�!.�!��2K�J����P�� P�����s�˘��I�ޭ�%�q1 �ͼ�[�4�nw�hmk�u�h_ћߖn��ȶ앩a\Ù�'刯z�R���o$(��o��:��� -N݁�[��k �U0�}�ܻd�Q�ܫ�אv� Vfc��n�͑x����
hӸ U���-���b�<�,|˪`Y2~�~�ms%I����G��<��3���<�� -9� s.:���0-t� �����t���$���w����T���ˊW϶�-!bj7�I�]k���H9&�MW�m*����þ�{��cx���2�mH���<S(�ʦ�� ��Y� �~��endstream -endobj -1139 0 obj << -/Type /Page -/Contents 1140 0 R -/Resources 1138 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1145 0 R -/Annots [ 1142 0 R ] ->> endobj -1142 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [103.6195 731.9163 159.8382 743.9759] -/Subtype /Link -/A << /S /GoTo /D (controls_statement_definition_and_usage) >> ->> endobj -1141 0 obj << -/D [1139 0 R /XYZ 85.0394 794.5015 null] ->> endobj -310 0 obj << -/D [1139 0 R /XYZ 85.0394 589.1911 null] ->> endobj -1143 0 obj << -/D [1139 0 R /XYZ 85.0394 558.8491 null] ->> endobj -314 0 obj << -/D [1139 0 R /XYZ 85.0394 294.8462 null] ->> endobj -1144 0 obj << -/D [1139 0 R /XYZ 85.0394 261.6947 null] ->> endobj -1138 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F53 962 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1148 0 obj << -/Length 4109 -/Filter /FlateDecode ->> -stream -xڭ]s��ݿ�ӗ�3' ?zO�ԗ\�\ҫ��I2J�$�(R)�N�{w� ��!�io< � X,�{!y-�O^�$Jr�_�y !��rw%�7��͕�1s7h> ���ouz�Gy����h�,Y&��V?͒HE70��}��������77i<�{�����2b���_n��͇7�����\fFξ��͏w� �+�9�z��O��qa��oo?ܾ���旻�n��^���B�F�u��/�z���JD:��� ^D$�\]�b�#k� ��߮��' ��O���"R:Q*"�ɣD+� �K �bv�-i��m�4eM/?nEW�faJ=�R\���&{S�u��F{��Ǟڛ��շ���j큞;h�l�K���I*p����&&�q�i����*^��ȋ��4�Κ�ܖ��?ϩh��~�#i�!�eȏ �ޗ�.IG�L�٪�Y�T}�6Խ;v=�UͲ>�Jn|�WM1 _�ű+���=A��#�i[����bc鎃ʺ\�卜��ny |a7*e�#�T�1���g�OD0Kf���|/y<�3�}q��.��=t��^˪���)����!~�ͪ�L���ʃ}k=qL��)\G��d_VU��Y�{,��]O"GL�����=���k<D
�Qw���fu��z� -��w �Q��*����̵Lv�<?|zFƗ"�HI�ņWk� l< �"�s��oʦ<�Fv�j�+ --���ެ��� +I;;=���-\�-k��J�E���݃2Y�� ��l���H �$�b� ���=� `�$IR h
!��ť��QBR�ʚ�z��i�zNw�Q�j�9����d_�lj+P(��Cg��E��x�S�p^�ӮJ��AP��K�4���2�*^��$�W�:�Nm � ק��U� -�>V�ag� V����y#x��Ĝs -��G�0�����kbe�I���ay� �h�� ���
-�є'j�F%M�@�7��`n����2���U��6�)ˤ�y��r%'E -�ii�];^wU�G� -�`�G*����ƺ�[ _��Sp��<~�`*���Z���܃�a|+�ٟ���PN�W%G�Ÿ2=�b'�%�cyh�IAq �M����!'we�@V�T�t�]Q�a�{t/N��oU����z&*{)2�l�%d^�������(}�<�>H_ =��y �*�י0+�!� j!��S(������q�͢�$���fqn��<,��\����g*�>t�9� �KgZ��Kt�����CQ�L��]���} 3�G}&|�g�'�L�2� �$4Vf}��?'>}k�J_��\%��6b��I`�/�SK���-r��m��7�;���s
rF��� b,�Q�í����g�R����������}��9�k��^ՌV$}��� -[@Ŧ?�� |� *NR4p�:/�,�Cy��fkk��U'�Iu��^T��T؏�E�xd�W0tt ���<Z�H�L=-��ϧ] ��L.��~q���<,�=aG&������cp���*�M�� �H�<�l$:�f>) ��T��FU8� ��1S<��\FR� l��lb�-�̚L���,N��j�y�=�_�J�p*�Z�� R��QQ
]0�+b��ޛP��Q��l��6y,���!
.���i�) W�BϦ\���M��`�-�y�!�w�}�W ��0�y!�0�R;F��I��V>/C�`�T.p��U~���8��lYh[��$���ũ=�ll����S�Ss�2��M+�{oV�lwa���^�����v� -/X�#�X����G�S~��K<v���;& z��`�_p_�g�?a���'~����3�$����?��V
9H�M�3�N6:St�G�j�jk�r����a�Νae���n�[�#��ntp
�h�E�g{z_�Y����cP��� ��7�:� -endobj -1147 0 obj << -/Type /Page -/Contents 1148 0 R -/Resources 1146 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1145 0 R ->> endobj -1149 0 obj << -/D [1147 0 R /XYZ 56.6929 794.5015 null] ->> endobj -318 0 obj << -/D [1147 0 R /XYZ 56.6929 769.5949 null] ->> endobj -1150 0 obj << -/D [1147 0 R /XYZ 56.6929 752.0323 null] ->> endobj -1146 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F47 879 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1153 0 obj << -/Length 2579 -/Filter /FlateDecode ->> -stream -x���r�F�`�b�J����>9�d+�q��rJR.�� -�o�H�����/�\� � {�����V������ۻ�?���� y��˙DF�����(�� .X(3/���B�eb���bƑ�R_�r����ɮ9�_,U+�z(�O�q&RH#��) d) �./42���X���bx �A@R&��Fөu�>�5�K��[�R���-��Z<h���`_l��?���*h��3�Aޔ�h�[W͚жmi v]�KZ�+<�2gY�p hw��]��Y�h*�TELY�� -�
���������`�����w�}��k��&"g@(����Ђ��\&̑P��;��
��
�B�?�� -�$���}��`2�CQf$��Y.p) }���7 ���% ����+� �g�^�����Q���n~-g��v�#��� ys��Pm�]m�����,>����8 �G�I@V���oy| ��Ɍ��ǔ #�T��r�2|�]�`G�}5l<�+�.u��<4��*|AK��K�vT ^��53R����eO{G���7��� -��T�O��9��U�ɠ���L� -c�.����m~�>2 /� Ԓ(TI ͕�{�I!�&�����@�C%�E�A�ʦ��@�2JM��vy] ���+��W͘I�d�R�Y�JB�o�^#ƞ�$���,v�@(h�¥߲x�B�Bҙv -�g�v=I��t�$@y4J�&�Q��ǟ;��D�)�,
� Q���������u :d
�v� �����w�k�2R%�M�ݸ��DP�� #*��S9�q�#�(L��ȁ�o��M
��K.�� -�\��� �� 1G9��M#�z���(�j��2 �H�� �D��X ->�{�� �T>-�a+*:)#, �L��/��a7�-(O�_�"f"d��� �f�^��n�=����� �b8� �Eht��)BqJ��Pb�;}ᬍ ��!��6j�<�c )�=���'�q���he��m��^��ze�� WX��9��s<FO��~9� �U^T��6 �9���%U�jϨi��pJēv~�G��Q��öմm�y��_cE"��,�I+�:?mь��c^ �P� 9�Kz.��q�<�&�����_Ƨ
�U�nK��N� �����5�}��|�� -(/}IaT��᧞�V'Ի�fJ@?�ݠ˧�1m������KK��/�� �}2ugg� ������j*v]���!���k��k��0Q�S!��!��9�'��n|v�����V��g3����Y�l�H�O6�gh��Qt6����^m�-y����I{��k�P�-#���%��t4�p��4�J] -p�H���P�yx� U���i��0�4D(�"s%4~[j�ࣦ�X�tBP�:�� ih�V�C�����=#�Td�eG�N^+�D��D��tI�)�\D��$pX��s�� �X��,.N����g7v�cMC������h5�Ĵ�f�s�Nj�0S�F���pXGyf ,#���D�v���� -v�V|\ ����#�;�����1�4���ڶ�I*�@%G� ;6�
�α�ޡ�Ѣ�ھc� �E�8���0�6i��ˌi���� ����h �Wk7��οM,�{$5�2��u�� ='f����c���e -e$�S������7�6��endstream -endobj -1152 0 obj << -/Type /Page -/Contents 1153 0 R -/Resources 1151 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1145 0 R -/Annots [ 1155 0 R ] ->> endobj -1155 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [173.6261 500.8708 242.2981 510.2804] -/Subtype /Link -/A << /S /GoTo /D (the_category_phrase) >> ->> endobj -1154 0 obj << -/D [1152 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1151 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1159 0 obj << -/Length 2502 -/Filter /FlateDecode ->> -stream -x��Z_s�6����%�L�#� /Onj��9;9W��k;J�,N(RH��N���bA��)�>;3?�\,�o���#��(Y{�H�> \ ��3wtc θ�4L�.��ӳ�] -9�Y z�h��Ȋ�E|4MqB�1Hp�� o.�>���|,}gz��f<����=}�=��>� Oxp��?�?M/ni(�2�����(1�; �������������g��,��rW�A~?��7w�±<s���`� -쌚���q�y"� -δR.z�b
rQnz��v�8�q @1�6�m��N��3�z�|d -�#���<�=��ߤı�npnu~T����1��j����so�O�WO������e�"��ӑ�ݻ!'�� �8)+%�M���n�����wp��������k�C��<��M�V�CfzN���8��e�.�������8��q|�x�����\E
�=ޮ�Y-lC���Ea} ��ꏅ�L0=uC.� ��
�9�1 ���e'*��.�� �R�,Of9\�ҫb�:>̀���T��&[WYYX�r�,�j�V{c����a�Jpz;kkW/�*� -6�u� a��Z%�&�X�IS���hQWuWƮ�'j��j�l���n ��� X �'t�^1���j6�� ��0�� �>63��&�����a�8ڵ -�� -����P����-�@�=��6���>i�1]�Q�-5t���- �g�d�v����z��Zzn"��E6 ֳ- ����H� -GMtl�`�� ��q�О�>SCW��E[&�W�9��<�u�8~����� ����*1�儍}µ����� ��,��5&`;~ 5���<��L -���;S�`� -f�̴��"ͅ�8t)�0{��y!�~X�iꀒ�kS�"��K`'���)U�R{7����.bfz��^�M[7 x��c�܋�#��s��y���� ���^�?D�8Z���|9��7��"(T��C9+;{��S��Q�� �x.�`�N�/N�[��ټ�D�9�����[��uY�'.��3t� Z��u�`��$NG^���&> �%]]��� �,5��ßݯ�|�Dyÿ��dZ -endobj -1158 0 obj << -/Type /Page -/Contents 1159 0 R -/Resources 1157 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1145 0 R ->> endobj -1160 0 obj << -/D [1158 0 R /XYZ 56.6929 794.5015 null] ->> endobj -322 0 obj << -/D [1158 0 R /XYZ 56.6929 729.6823 null] ->> endobj -1156 0 obj << -/D [1158 0 R /XYZ 56.6929 704.9004 null] ->> endobj -1161 0 obj << -/D [1158 0 R /XYZ 56.6929 387.929 null] ->> endobj -1162 0 obj << -/D [1158 0 R /XYZ 56.6929 375.9738 null] ->> endobj -1157 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1165 0 obj << -/Length 2770 -/Filter /FlateDecode ->> -stream -xڥ]o�F�ݿB�= ���'��ɍ������.p@����R�*Rv}���7��K�e�qt���3��=#�Q��(Qa$R9�S����tu����9��w�~�;{�^ģ4L5ף�yWFI�Fw�/��^�r7�9 s:< + ?]]_�JJû���>�zsq �����5-�L�On&��&�c�(��p������}�����������g���-���H�C�<��5���?�E�H5z��(di�G�3�D��~�8�=�W���k��OF,d\����)���t�Ftݔ)J�� 3�R� �x��� -g �0)�D5�Uj��˟[��M��xс��J�@�n�f�ϟ���K�9gI`��� ���3��;��Z,�[k���1 (�-���| � �&�4��?�+dD5/��,
M�Yc���ݻ�N-C��p?�@�3�� � �YQW��c �P��W5ev_������`�D_�N{W�ؖ��� �8�'� >�Ɂ��b� \�n�$�� � '�aS�]Y �i"W�:��ߢ��� ��[��b'�l��{]mG���Epw�W���ٌ��n#+gC���X�8(��{�*�b��H�=aw,)��; -��2[7-2$� -P�#��������yD���� �������օ �Պ�\]�x�������.�o�h� Qv@�4�1�c"�
("J�5 u��+]��I( ��'."��tB �*IB q"Z��)s���:k�˓����7<��4�%�ҭ�`�M�0��`���h&��<XC����m r��ҏFp܅���\�c��nVS�P�7J�˥�q~'L�p/P���u����J�H$f O��������h����Շ �jZ�A?��Ν_LJ k� -�� P��Y+�0Q�TV�4�A����4&�=�Z}`[*u -_c�1���m��� ���V%��v�aR`�_d# - �D:�j -��� We�t�.[x�$�M�c, - xk =̎ ��#"0��v%������ u��A/��9��^��D��?�p�]�-鐍�&��z �IDp������ -���lFcF(�9 v:�k} �/x���!�Ot<eG�z�0��P{)!ecz�:�)���H�'� -��ͅo� -�:��P��� ��w`�d�fs��)I����j�p��ʒ�^TPq� �j�� vz ,�ν=�k�9 �+,�Rn#VĜ��VWe_WE��w�)�ˏq{f�-����3 -���N���גl��٣�b�� ��$�!G�i��U�� ������y�g2m3uJ~Hb!�_�eB�����?dE�n�V��* ���.��>��@�yBޘf�fc-�X �*���OP������ b�̸Wf4P �Y5'3�<�+�m���2�,��s��צ��~?�z���g��_E����D���)� ,��$eC�t�� �������ԯ�|Dމj�~��!��W�f9��Z�7Q� �'��8��~��W� ����s��9�b�0�r�ə@Qihץ���g�����7�pϟ� �%��d�'�U��vM������4SIU�⮳��L�ͣ - ��H�%�䰟zGm=��?X��5��~D������}w)|�d��HB��x��� 5�Cendstream -endobj -1164 0 obj << -/Type /Page -/Contents 1165 0 R -/Resources 1163 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1145 0 R -/Annots [ 1169 0 R 1170 0 R ] ->> endobj -1169 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [519.8432 252.798 539.579 264.8576] -/Subtype /Link -/A << /S /GoTo /D (lwresd) >> ->> endobj -1170 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [84.0431 240.8428 117.8035 252.9024] -/Subtype /Link -/A << /S /GoTo /D (lwresd) >> ->> endobj -1166 0 obj << -/D [1164 0 R /XYZ 85.0394 794.5015 null] ->> endobj -326 0 obj << -/D [1164 0 R /XYZ 85.0394 451.0558 null] ->> endobj -1167 0 obj << -/D [1164 0 R /XYZ 85.0394 423.9067 null] ->> endobj -330 0 obj << -/D [1164 0 R /XYZ 85.0394 301.4703 null] ->> endobj -1168 0 obj << -/D [1164 0 R /XYZ 85.0394 271.3564 null] ->> endobj -1163 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1173 0 obj << -/Length 1216 -/Filter /FlateDecode ->> -stream -xڥXKs�6��W�h ��o�99��:�8����"A c�`Ж���@��՚�G��s?�~X,��-$��0��� -c������ k-�>Nl3��@����7�bN`ͳ VQ��<]\Ё�]\�����mvuz��/w��������S]�8����jv �ȷ/���c>���`�����{b]��lz3�Mﮧ���O�鼳�o��\eȏ�� Y�4��A7�|�I6��ر�����\���'_'v��ѝ�Q�l 7p��ؖm�����~ �q;mW���(0���ʯ R�R�j\�V&˝�{;�,��RM�;�@"�� ���X-t�VKո�u� �H� �2�����p�֯�- ȳ���}n��;3 Bh��y�m�%��"�N���A�� !����R��2Օo �I�ր?LJ~���D�7Q��zq �<E���9{�ՌզO +�VN��,����t�"�$���Y�N�+�S4��Un�rѬ��9~4���px�eК� -VfGV �A��r���z81�~ J��nh{��!�r���X�-�m����3 ���|��XrQ�rm�����v_zø�ǂ�����9�嚀��撦�RZ�D��Ć -��R�0ByG�i⃕w���O���Y��a^�G*��7�����j <��'2���-H��/:P� �:;2�ф��|E�3%�~7�����ڿYu6� Ew>�d��d# -sr�I/9' %^�g�#��s�b1��c9c�ٙ��eg����d����x� -��!Um����' �����| �gDV?�:=̀��<9�u� �TfL���]"f���)��YF�J�zm�4�֗!CƝ��5 �?@�!��[�I�� \�ˀ�q��3F��j 5N�}p}���# <��7.�K�d^E��K@?qpB��D�(�,����^��/#��rendstream -endobj -1172 0 obj << -/Type /Page -/Contents 1173 0 R -/Resources 1171 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1145 0 R ->> endobj -1174 0 obj << -/D [1172 0 R /XYZ 56.6929 794.5015 null] ->> endobj -334 0 obj << -/D [1172 0 R /XYZ 56.6929 769.5949 null] ->> endobj -1175 0 obj << -/D [1172 0 R /XYZ 56.6929 752.2028 null] ->> endobj -338 0 obj << -/D [1172 0 R /XYZ 56.6929 693.9224 null] ->> endobj -1176 0 obj << -/D [1172 0 R /XYZ 56.6929 663.1642 null] ->> endobj -342 0 obj << -/D [1172 0 R /XYZ 56.6929 628.9495 null] ->> endobj -1177 0 obj << -/D [1172 0 R /XYZ 56.6929 601.0964 null] ->> endobj -1171 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F39 863 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1180 0 obj << -/Length 1186 -/Filter /FlateDecode ->> -stream -x��Y�r�6��+��:O��� WN�i�VUW�GC��̚"���4��B�[�lR��t��{��pc�?l� "*�a 9��p�=d���=�}�@��������2&1�Ѵ�eCd��y㋫_/
�}@8�0a p]����%�������
/���|�M�����pp{5�ls��I������A��0����rؿ}�
FE,�x1��@���w��t� {Ras�I? �� Ƽ�8��Q���?{����&�8�!���$����
�aqMJ�F�q �]��}�3�*��q���Jd����?*pV��K��B% c��� �� -�Q�S�+��bd�i�>��Cue�&R��d������tc��|�Xz ���Nv��u�RD�t��e�� �@�Z���w'��p��9��Z��ڡ�e��,�e�_���K�.��% %װ�b�oPJ_e~*/�� `ӂ�"��Nb�y%��7����p����J�UݾeL��ڜ������d6c ��V'� Ȩ0O(H -e!�i�kO��:E�6g����� 1�0�)#];S��8f?F�=�CZe��?Ȟ�өm���j�<�H���em�&\��e�b�څ���1����_��N#q�
|�[Xkˬ�Z���5�Jƾd5d\�O��W�}�;��4�Rv�^���3��mgzJ�?x�:�Ν�%�W�N�;��L:EZضJ�l�б��E�U���;�� -�2���N�r"l�ޯ�m)�l!�aժRe�Q%�BB-����N�V�� +A���3��7�%Cl!�Lt�1�I#ݥғv��o��jc� ߁'�%_��(�T�打!��6eQ�(?n�XR&��,ߞ4� <ä�C��cl�4*j�Tр%˷ ������-��y� ������! ��X��[��n�{�HW������s��� ��y+�zU�8��1��@:� �6���� ���t�N9\_�7܂���=�ν���s߶Iq�Nh�:�"�DX9�u��n3/.�w���@wJendstream -endobj -1179 0 obj << -/Type /Page -/Contents 1180 0 R -/Resources 1178 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1182 0 R ->> endobj -1181 0 obj << -/D [1179 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1178 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1185 0 obj << -/Length 1615 -/Filter /FlateDecode ->> -stream -xڥ]s�8�=�"o��`!���S��+s���J���J���������ʒ;1% ɃV���j?%�1�?��R/ �i�BL�q� �� �ލ��q["�K�z2zy������'���$!�I~�D�C'�;o>^�_��|uz�������9����@�N?|8�:qI�͟�Oή�Rdy���|k0�~����������������l�>K���� �F�7x�ñߏ0��$ ��#���x9 -B ��r�i�Ϛag��:h?���Gސӎ�" ��0E�����O�cg��PSF�[T��;Z|�ZN�xe&7�� �%�a�u4�f4c�2���B�"�p ]���G3�� 4���vIU��-A����y��2\�
�o�B2�r�3���`ne�23��~v!�ڡ;�x��YJ�d�R��cI �*��������+�� �/�B=�B�"�jQT��\��_I�⇙���-�Nn���wE>�c�}[1��ܭ�N�L�T���|<���� "~�bɎ� -m�H��4��XӴ�2�Nv��}.��@�ڌ�Ou�kxs,�(����2�A��@�G3�7&2�dQ�m[���H����ze�x& ��^�3���Q�P=�����|%���^Ә���D�:3�T �8�8�l��i4ŀa�%iJ~m�@�l[��NC6�8-y�Հ���1i -�jp������
���6hq��0M���ٌ�Jt�EY�qW���s��'(&$�0� -�2š�nINcI��h@r�{+���Y��^��s�z���BM @%�֫��U����8p�����ʒVp7�S�˕���z�k�v����ڍR@�(��$�8��x�L��$ ��*��Ҍ�,%�k��YQMjhsb}\BHs��Xi�6r4�VMX��g�%��@�i�xv��T��K�P�����92���\�Uõ�r$V�@��>��ij9f��ni�KܞSC����������U\@�Z -}�C6{ 6��K�h��m��SDS7���C�����E
-endobj -1184 0 obj << -/Type /Page -/Contents 1185 0 R -/Resources 1183 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1182 0 R ->> endobj -1186 0 obj << -/D [1184 0 R /XYZ 56.6929 794.5015 null] ->> endobj -346 0 obj << -/D [1184 0 R /XYZ 56.6929 215.7523 null] ->> endobj -1187 0 obj << -/D [1184 0 R /XYZ 56.6929 183.9675 null] ->> endobj -1183 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F21 658 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1190 0 obj << -/Length 3744 -/Filter /FlateDecode ->> -stream -xڽ]s��ݿ�o�'��"��Sr�K�6��ΙN'�-R�$R'R�s}w� -�[ - -��w%�2'���?�� 3g\A�e�,K���tEʵ��31� �\��2����c>1g�Y?�x�OM��.��8�μ �K�D��Ƃԏ5�3��,s|�[Y�F8F�� -u[�B��yDG:#Gp�9�f,G �qq�&����Z� P@�;.e�L�Զ�̲�m�ȝPOM4�Ƅ_1b�>� Oy��h哾8e��Ȓ�����H�l�P�x*r1b�X�#F�:�z�7�D�ˤ=� iq�B�1m08��7���s�C��lm�i4yD��A2���\q�k���@��,8���F6nX r��f�jn���.3`#�:ùf�oR� �t&ͱ�S�?��10�Ij�ݰn�F�:@���|ظ�� �l��r� _����}q�P'*�(��:�/T�>��B� -�;@�W����+Xyݹ��� -Ϥ:��G��=��r�O�S�+�Q��rx~���� -���~�RU�h�w�|�TFM��� ���FH�{� �:�/ Zj� ;N��m�tf \Ug��y�$���&���[ի��ڝ&֧0Sĥ�t���MEV��R�*��3�8���|n���?IMʘ;!Y�Qr��b:+0@�R� �sV�>^���$º`% �&<�� ʡs^���%��ō��E��acd0`'�f|��ֱ�hC�}����`b`0 -M�z�B��Ek�l T� 6�W����V`�f��4O�ٮ���)�\��lr�$7s : -���s��&'�m��ک��U�/e�1�y;
X�dn�s� ���]� �f��+\�UY>&~?�4�hV �1��hV ����ke��ܲ� ���lb�V�n�����(&D�ّ\Pe�h=Ue������W���QfҰ�\�_��+�w��Y z<s ����ߔKI_� -�"��a�� -��z���cH&�����` |�@�g�I���v�Ai@�K�u���{:�cϲ�(�wEg�UZp��9|��;P<!ik���N&��AS�����v��㩗t� �Si��q��� ]�.7]�à/����ا�?�7y�C
���뎱��̀esV<��:����*���_� `Ͱ0=�b�*���j5<��x���Pހձ���+F��;�7u� ����o%��7�r�5 �@���G�� �-aRYĹK�}�S��ʂe��A��ۆ��5�˃TZ� � -=�o.����x)q�B`��bGX�c�������,����B���aܛˡ<� J �OD�zF{��[� -7B���V��z���{�2Sc'}��'9��J�����cGyE����w����CF�I.�h"H���X�q������AKD 51mj���~ -����W��� �A�r�>�3�C�#���- 2� ��u���d!��6;�7�>Ы.� �e�q��e��/1W�2(>;���AD��W��wx����� -������,O�"�c"�L>`�� g|f�3`��̆�����FG���7v�@����!Ruh! #|3.а_r;�* >w�f[�
[��lЇ��.�Ӑ�M+�n�gd���� �IX��x@=zz�s);sj��:V{Hf�Ef�E�,�����z�-ck�l/�9*��P!��}X��ŜB�ȋX,����k��X��:�S�0� �쯧uc˨�Fy <$�_�F��t�K ,��1⟥g�~�N胈c�͞\�h�<��6�l܈�%^���" -�0^����� ���.�`�VQ�B�\Cq�e�ܣo�����(ͦ9BPQj�0�?��%��4G�R���� i,S��r�š�>Ȍ��K�����P��궣�߫H������8����K�ߙ,��R��Ԇ��`X���ˁ~WR�22�-�|R�7m34��.�w��@�E@w���} {���~8�7o��6g5N��N��IyԢ�=�lj�� ��T��˙��� �nO��[��+�xoP�3E���TsSx�P�RM9WB�J�b������endstream -endobj -1189 0 obj << -/Type /Page -/Contents 1190 0 R -/Resources 1188 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1182 0 R -/Annots [ 1192 0 R ] ->> endobj -1192 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [250.9056 208.6872 324.559 218.0968] -/Subtype /Link -/A << /S /GoTo /D (statsfile) >> ->> endobj -1191 0 obj << -/D [1189 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1188 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F47 879 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1196 0 obj << -/Length 3362 -/Filter /FlateDecode ->> -stream -xڥ]s���ݿ�sO�L�r��r9yrb����nm����=P�J�"u"e'��/���H���i2c�K��7@�����D*���4�A��|�> ϗ���3�8S�4�c�{<�ˇ8=ςLE��qѣ��Pkq�X�:QA\ -B�n A��IxI͖�.� , Z}.���gLȬ��S���'� 6� ӱ���e��:^�(�('�N��) -@�r:NW6u^�1�f��t�,��叝�~%��h7M�0�X��G� <+�"�U ݔ-]����"���� 5�fi�Һ���F�/��-He*F�6�>�q3�X(�m�t��Tf��D�M]}}alID��Os�F�[���Ԑ�Nj,�춠�X�J�U��I��07kSw��*C�C��b�D �j E�5Z�̓���f��uK�� y]�vG
�SJ�ޞ( ��Ԇ��\v+�_��M��̗y�+X��3V� 6��W3"x�t��6k�� ���������Z)8�2�����(�W���
?��,���`���u�)�>~z���!o��-��f�<q�R�Ñ �}�����4�Q� s��K^nD�^~(�o��<�k=�f�v��}�1a�5�� �9\�bH����:�p �,�6�Uf�W�f v�n_������4 k�������z��q�U�C������\�><\���=�����5@���y~�b��m(�r�#�O�Uh | cS���T� -��� �� ��D�W�.�l,C����λS����i�����. -T��3Gl��J$v��bL��⡏u�� ��J�B��VM�9o��e��
3}��5����� xb�ÿV��Ґm�7#��*�R�+r��C5��Қ�)�6O���6ltz�We�w���[�� -���J6���bV?�3���iFBL�� �ಷ�W�V�n{�lS[��庬�-ِ|s��9?q�? �S�*�F�هmǀm%�!"
w0�)�����{�9�!�i�Z �c � ��Tk4Ǚ��۾�� �@�4 k��A4W2H�42�Qc�>��Ui��5� -M�I�$���aأ�D 9+Y�V+��� -_��O54��AhӵH�~ -�B^K@_�X� Rh #� Rd�tD�X�.$E�JV����l:����l[�A��+Pr��"S���c�� %q���Eк�ep�����p/�Z�Fԗ�:(ɨ�A��$�Je�Ļx���������":A ��uX���Vb��J����#"�$0Y�92��0�@>�����:���K&8�"�s�T�"�*��U�$!x�� ү�]�d����"G�z�Qf~ ��0�/�>�]�TƵ�w�z Wq�a�������+�e�c���ԋ�|��'��X#��N��!�^�i,��s�8�4q�]�pX�BE(S�/]^���A��C����+� - �6'�f
j�����xys��|4�j�A��C��9�bͽ}2[��;"�R}�~S$�Z�\�+߁*���*9'˜J��4������ּÁ�D�T'�ۃ�['m��aw��2_���Ж ����� - -�0=��Cٶo�@zb������'�H"�%R�� C D�"i*�S���聛�ZKK����z�����ږ{�q�P%-�\�`L�u�i�.W�5څ5�$N441��4N�IU֟1c��鸊}�l�@�I;� ��q$�W`q�(<��w C,���g ���CbQ�;KP;/>�m<+JK ?����n��3�3GE��֏��dKL��t���b�m.��M=�=�ܫ - @ ��:��� -�C"�op`�&�fc;��p[� ���5�s8��r�b���j9���
�z�U ���#=h$��8��7 ���`��X{����g��}�i�T �����[�(M���#��3��:�j]g~R�b��6qh������Ls1�р$ K�]��p� 6�q�a%ѐ@c��Si�G8��@�:����t����BPè0}1pCjr����?�[>���2 �R ��k
�TX* � ���o?˪�y�ﳞ�T�ߠ�X�>X�"D] (���t�� - ���}�ެ_���i�%�=�>��bq_|5u��]�+N]g?�P�p�T��[������������e�
f{ި�i��UųѴ�V����� �a�I�@(�j�����H0�M�ғY%�7]��`���;����M -} � �f��0۪� p@�9 ��aO
��� ���U9��_���a-e����?�+�� ���}�{�ؒUj�B�W�f� -endobj -1195 0 obj << -/Type /Page -/Contents 1196 0 R -/Resources 1194 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1182 0 R ->> endobj -1197 0 obj << -/D [1195 0 R /XYZ 56.6929 794.5015 null] ->> endobj -350 0 obj << -/D [1195 0 R /XYZ 56.6929 387.6589 null] ->> endobj -1005 0 obj << -/D [1195 0 R /XYZ 56.6929 362.5676 null] ->> endobj -1194 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R /F48 885 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1200 0 obj << -/Length 3390 -/Filter /FlateDecode ->> -stream -x��]s��ݿBo�g�>I��r�]����3�4�O�,62鈔}��.�H���i:��x�\,��b�I1��'f�0���eN3Å�- .�� ��]�@�D��O����7oU6s̥2�ݭzkYƭ�����7~����D>O�ebR>����;�8�y������ o__fz~w��зWo�n�n�\]&��eX�Ȅ���"������_�^�r����]w��yWx��.~��ϖp��/8SΚ�3<p&���� m3Z���\|���[�7�N��(ˌ�ل -����͊��6 ��qX+�q�p��;T����� sf�2��:�d�(�e�ov�$��z��e�9-iŅ"EJP��P�Le#��K�� x`�$7�� �;�������F�V��)���tj=��;�� -
-��K�ᶼ�a�~l˺�Ѣ�raIM����-]<����OM�)�������!=E��F�����Rٟ.�p~�܅Y1��A�XA�
uL k��z�92YWG�V�1h����S �ێ��m�.���fW�����Ԟ���|p�ʀ��O����
�v�i6�p�@�*U����N�0���V� F�I��� *|e�c��,�]�5� ��(��]"��m��ǖ"��H*hf���"�
SS�<�`���. -�O�'�7�� -�0Yh�PD%Ł�s�64��� �U�O^9p���������� ����Ҳ;`��Sy%�� Rm9l��K�E��"%ʍ��m�
Z��?j�N��1��GT���� :a�0�b�_MT�A�τZ�e��;�^}����Q��\��,�Ŧ,�v��ApdS�� tT kR8�CȘU�v>��< �K1��9Mj}��������nD��d�a��< �]$�k�Wu�!� 6y9��@[Rk�w�T�tOg� L���(t��-Q`��Z��Zt)=�˛P6Hߵ����9P��=%t���P��9%㚘�p9o �V�C���:�� �m�4�ˤuh컊����]'��e���Sa-'��f[B�';�뺾�� D�,F��j!� &RbJX�}�5���.r ��ȗǍRÂN���}�F����M�4-dhM[.�F���l�O3�QMp04Jt�Y6d��>F��O���I0@�����kQ<�+(��o� �hUo��'J{������Ga1a��
�_#� ��Iɸ��ے�]oˤ����j���6�'���LFܧ:~� r����R~�Vv�)o��1��K�i6"ј
�
<���� ��*�ύ&���/��e&㮋aP?��uK� G d��dX:J -,��'��}�%�n��&(Ė r�i�yՀ -���X�����H�H h��D PU�AD��u��x���U@����1�9�62��q% -V�! �9�9m�a��º��qzc0�B� tl[& TW
�kz^V(7�A��� ��H{���.�i��WѮkH�qeH��SbX2b)A%��dl �|���[�&��]����x���z�Mq�;!^����g_��@V���M�� }�_�PC�����W��d��^_����:�����re�8�Aq����C�_��fק:nv �7;8B �8Y� -r �SN�� tT ��Le�Y7�z�<�)B�4�*@�a(�z�,�x]��|���'d��*�/�����b:1四���X�J��.i`,c�����r�T���#��(@�F�ڍ����Z�a
o]���u��s>�(�<�/M\c[R�#E��C7�9�u$~x;�u�㧺]ӱ� ��|��[v�]�f��-!Z=������"+�2�����T'9R
�x�W -�N�V�����3n������{��|}�]M�M31j�)��)�7�>]�:��x�����R�@6z�{!�
qJ�q�]wCx;
=l����(��:J��?�ս�p5�V���N������ɡ��E�y��mF��۪-�/x��� ?�&�wA �6˨ޘ�Ta�?<�� �~�� �� �4N�҂|���ѯ" ��t�) � -endobj -1199 0 obj << -/Type /Page -/Contents 1200 0 R -/Resources 1198 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1182 0 R -/Annots [ 1204 0 R ] ->> endobj -1204 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [182.6146 117.0296 231.8861 129.0892] -/Subtype /Link -/A << /S /GoTo /D (notify) >> ->> endobj -1201 0 obj << -/D [1199 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1202 0 obj << -/D [1199 0 R /XYZ 85.0394 720.9574 null] ->> endobj -1203 0 obj << -/D [1199 0 R /XYZ 85.0394 709.0022 null] ->> endobj -1198 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F48 885 0 R /F21 658 0 R /F47 879 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1207 0 obj << -/Length 3814 -/Filter /FlateDecode ->> -stream -xڭ]s�6�ݿBoG�D,@$0��&NΝ�s�s�i�@K�� E�"���o��H���i� -���Ͽ����Õ�5z�� "��F��U�U�c��Hy���� �ެ�tr��#�D��jk�,�6LL�>�� -
�jO�*��{@$�rJ�in��n��*��Z*�g�z�1���H���d�Vt����P��6l|�2
�� À� �p�-t���������]���[<� ��!(��3&Ί�QL]�ɷ ��ɾ(K�Ԃ�mZv��Kn3��$�z���]�9J���=sup5"&�B��� -S)� �i0ۡ�V -�e���A����Pg�W��R��#��U0갡�T�
�l��Kޅ�12�-+����+0 � -�떩�/�#��F�mQ=O�1pBo���c -&�$Hi �H�#�Q -��M��Z2+��A��8��"�=�� ������rɲΓe]�m܂�>�9�a -�b^,盺.G�Q@� R=� F5� �5�Ņ�?R��ݥ9��4���e�N�ضX'�Gɉ@V�����zy��a;t���X/�����9��8 �t,�3��@>O�c�Y@�hF��$2=K�� �+ P�>�yS:�G�ħ'����.lj�E]�� �_��q`�c;�� ���h�G
��Eh��J -f�/R -�k����>y����J� ����E���*�9���mZF<��Qi�U:td �t��� X�i �C��iL�\��HtJ�bƶs]�j�B� �P\���}Zs��9G@�(s,a��nJ�C�*!E �����As�7�|��Kt�R�.�N�{*$��E����m�ٻ>|����+� �����z���͌ �V����)�-������d`�ͧJ��$Z���}��F���\��`�R�Ȝ'�Ƅ^�&XڔC���Tz��a�;��l*�wz�M]MF��;BP�8�R��e�dO(������錚M�Iޕٖ����Cw#;�`uVJ��hY_0 -0�q{�H�[��>}���]�Х� �܋P�7�>�X&� s �S�/S*@~��WS� JN�����,�z��%�Sl���Kh�U -�+�K�_�'�1��q����eQ�:^� �q�o��7p�o� ���)MU �����Ӷ�c��Sz -vj�8����������M�4�++�p��&��rG5b#���1x��w)u� �)�� ?�D�D��Mީ �Ց`�b�� -����L80zʂ��En�Z�n� y;��:u������Rm��Sȕ���D -endobj -1206 0 obj << -/Type /Page -/Contents 1207 0 R -/Resources 1205 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1182 0 R -/Annots [ 1209 0 R 1210 0 R 1211 0 R 1212 0 R 1213 0 R ] ->> endobj -1209 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [80.6033 407.9328 154.2566 417.1482] -/Subtype /Link -/A << /S /GoTo /D (statsfile) >> ->> endobj -1210 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [265.4578 363.0047 326.6578 375.0643] -/Subtype /Link -/A << /S /GoTo /D (server_statement_definition_and_usage) >> ->> endobj -1211 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [367.5441 363.0047 416.2908 375.0643] -/Subtype /Link -/A << /S /GoTo /D (incremental_zone_transfers) >> ->> endobj -1212 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [280.9692 332.6817 342.1692 344.7414] -/Subtype /Link -/A << /S /GoTo /D (server_statement_definition_and_usage) >> ->> endobj -1213 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [277.6219 302.3588 338.8219 314.4184] -/Subtype /Link -/A << /S /GoTo /D (server_statement_definition_and_usage) >> ->> endobj -1208 0 obj << -/D [1206 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1205 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F48 885 0 R /F62 995 0 R /F47 879 0 R /F14 685 0 R /F39 863 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1217 0 obj << -/Length 3673 -/Filter /FlateDecode ->> -stream -xڭ�r�6���m�!�u�L<Y�����S9$9�dqM� - �8_���HJ�&����Fh4�
�����4���u�iat��]�O0��U�8K�� c}�p��;�\g"�e|����� M���o���|������RF�"7�(�ݽ�� }�������>��I������x��������7�0�B�/y�3���tK� >����7 o�x������e|�0Px�?�~�#�^ñ� -����� -%�$�^�P�y��l݆{�*6�,�3�@3�%��XL��n�"���*. �r�lܒ� `^�F (��ګ �)E�%ɔ���X�YS���B�C�TxB�ٙ�̬͟0�_�NE� m��妩w�U������m���0t�W]��V�`�He�SChˠQo�F&�u�T��H15+&2��cG"K�4�V�Ⱥ��ߣE����$/�:l�~� bZ�"���hgXF�V1V�)�! *x��e �O\�� X3�l�ɕ[N�����KZdO�, -#����� -D����,d<�����D��m?/a�n�����T��}�'�E�<P�d�P�^�= �ٛ�p����9��5ѱ�΅����i�����1M{�Z��b�:�n=�t��hUjͷ�l���n�Șc���w)u�?��^3 zc�&/���8J���ꚷeM +1c���Vl띙;Tݡ���I - ��g�RuԷ�8lj
��Wj�%���dq_T+s��TN�HK�|�� -y����H��������RaDS��2� �����}bG�Ębje�~&��< -�9Tw2r�3g+�'k�4W���Ȳ� -�
�M�+�;�6�b 9�>���m^=^b�������]�u�k�Ệl���|���H�41�5?>�<�i�l,��3��|�!%�b � �r�.��L���nM�G ��)4�
�Q~ׯ�+B���#A���U�M4�[f�~aZ���X��1�Դ�/� ja>�Me�x@ ,��rK&��~��+T ٙ]m�6h�wn��� ��hg_���� 2 � -}��a�U����Z��a�� v�� ��%�K�4� p_����4� -WsB[Y#HUG���-�8}�U(�W�0���ճ:1�L ՚�5 ��,�h��1����vf�(��\��zq��RBeq<��3�f� d�^|�G�D����&9��Xn�G��,U��S�Sr��-�q�&��D�-RBBoz�_��D��d���C�] DN�vDD�D��,E&c�K���8i �/�8?-X�=)�1w���0 g�a�H���r0<�: {,ˁ�����I���izyw�5���]-q��������sbIVa�^B�*��z�{����A� ����Y�ɫe��O����鎒4�����*|���Q��ȼ �)ت|�s�јʲ�"� -��oT9ҡ�!�ĖE״��RW�J��M�9���m�� ��� ڔ�g����m� -���]�����������RƤ�Y��#����2( (\���lr�X�&0SJ�HP�.���
�y�B�&`V.���~9,+Hӊ�&� -� ���� kf��Q#�:H��V ��������o��u�=�؎l@@{I��h�rל� ��?�f���Q��� ~ŋoJSV�`�����9�~�d�k��2�/��STM�n8 ��ZP�k�Kk��8��s���0���|���˗���K^�܆��2GB�Iv��5C�����:SS"���K��1l������N̢T-�ם� g��'jtDW��(���w�в�fW��bط����/�REMM��" �~�>�H Y� {��� '!M���ąӄ�����.����
�K����6�u4��C�.��f���20:!䍥 -v� 1��Qj#W0�Q�ؙ��e��G9�߹I+,� PG����G!/�킌����a�:u�/}Y�#���2wYW����Rp R�_�Ў�� �C�s�g_�]�E� ���m=��ӿ�"K�d�1�a��H T�ƿ~�K4±Fׁ�&��Z�Z�]��:G^Z{��,İ�N�����!��N� 9:��lP; Up��Ƣ��&\�� ��(j Y5~��ƿTVGo����g�'/�Nאb7;WSl�u� - ��1������ðD�endstream -endobj -1216 0 obj << -/Type /Page -/Contents 1217 0 R -/Resources 1215 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1219 0 R ->> endobj -1218 0 obj << -/D [1216 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1215 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R /F21 658 0 R /F48 885 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1222 0 obj << -/Length 3453 -/Filter /FlateDecode ->> -stream -x��ZYs#7~�����Uã/>*3�Y'�Wv��$m�eu����[v�_ � -��Њ�h�XY�1+{.��b�-�L�t�U�+ -@�����#]i��6��뼺���I�T�eeXO�Wْ(uI�݅J&YU��E�-댚�t�.�lG�*���K*T�E��F��;e�:�Y��R�"�M���%HD�� -�*}��t,')i���� -�4%��] ��LVΜ@�d��h벪9���e�o�� �R�Q�-َ�
����o�� �a��g���d&�V,�ߖ�|�K�f�گ��+�Nn((�3bVٷ� ��I���y���q�C+ʷZZ^Q �/�9�y�)J�H�]R}6�Q�&-��M�T�H�����f�M�Ok��y���|ږ��er�(��i��?3js� -�<]����� I��P��U�&���Q�c.���L|�%�Y,��A���|��Υ sZsCM�u��R�F~� ��o�����%���R�1���%+����5C�����������jr/$�FC��nn����\$��HZ��MrDu������
��oC�֊$��i��iDpo��� -gbC��}o"�Z��*�QvW�@LN������%c��,�_h��~C>E� &+ -P9@��E�t�:�YT l`l z^Qg,k_���l�54�|ŃK-"����� ����TR����> �R�D����:���
��GX������� O��L#���+�N"�W�6ہm�WIL�Ο��tI4�*�Z:�zEM.���{�U�, m/�� P��=䄦��EN��!��(�!<�Vp8Vݍ�M�
ȝ���3*��^!응+b��� O�8� 7��z � "�-��+���� kԍDs�` :U&�gu� -�H�q�����#8�U� {@>�hc�٧�;�IQ&��Gb��zԙ�g ��Fđ6_��8�IP���r w���]�j�|ҫN��L#�G|��8�S&H�ƥ`Uץ��]*�ޥ��]*6ޥ�HwaIߥ�[�Dc���WM3�J,�|�W�"���_��;�V-� �b��S�Y���J"������Px�����'�_��A4y"0F�?�{�+�
���6�n����A�9��'�ȼG��Be ��]K` �p"8F��kp��5��EFol8]��� V�v�(�U�N�zs���МV��Ѡ��1l$Q�W��Ry�W��`�.�@M���qi�?�}h���kj���$����5���>�5���6��_����@�A�N8!�PX �чN* o�ix���k -���Tp��� -���7B -�@���]r -�ݗ��t�eЁۻ�P��� �X*~i�8�Jf�c-� �^P�ɲ3�cs�+Xl@���J�Y -w�[� -�GF|��ǁ=��-���l��V����_�(���� -endobj -1221 0 obj << -/Type /Page -/Contents 1222 0 R -/Resources 1220 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1219 0 R ->> endobj -1223 0 obj << -/D [1221 0 R /XYZ 56.6929 794.5015 null] ->> endobj -354 0 obj << -/D [1221 0 R /XYZ 56.6929 183.6365 null] ->> endobj -1224 0 obj << -/D [1221 0 R /XYZ 56.6929 158.6249 null] ->> endobj -1220 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1227 0 obj << -/Length 3161 -/Filter /FlateDecode ->> -stream -xڥ]s�6�ݿBo�g*� -��� �� -���g*�f� /��,��ͅ6��T�T�.��m؛
K��g�g�K7!@�z ��ΜɘU0�l 8�7��})v8��粪 -�[Uu��f�����A�m��K1��m�j
��Bϯ�($�ˬNJ�9�28 -j@P�8[�� k�N�m oh("k�A&0��)��x��{>ޒ�K��c���]���r�?�}�v�/yɬWͣH���P�c\���ni�; �8W �4E1�se=:9� ��M�&w3��L��_� �����%�O -��I5fH� 37`���tX��q���&�j��C;!���I��Ia����9����բi��g:ç
�� ����3ڦ�N)KQ�DC�tq��SS -���� ���*G���%�]K3���w������ޟB$E�}Ul"4P|�v��1�/�M7[�#{)��̾���m��x��I���
����=Tg��d �$��Ǻ�{m��r[����8��J��c��� �q�]�9�� nZq>3�y�&�DNZk� r1��J�(��|�o%��QE��A0�<���|�\6A�.쾦Y/-l � &í�8ff��C�hw���*�o��ńm��GW�\�G� �Q�h?b�4Υ� �7�pj���A� �H���K�x��� ���z�LG'��; fxQz>�x8�]8 Bb�(��#~COT% �yЧ�h�.���H/A�Y�މ���q01L�l�$ĵ@!d5�,b$[Ƴ���P�x&<�� F
Z�8_{�A��#�}QlS�l�V'�|Yo6A��"��Ӱ�=L�n��p���x�q�BO�C ��KҎ��o!zO � ���vWW��n��$<�RP -m^V�P� ��E�2r��"[4��]o�ӵ����j��Dz>��X�a�J`�#r8�b`"ڻW�wX�QL��X?�?����??��G �"�ˌ x��'ւ��G�c�E;� �tT �RW��"(X����F��l CT?I��2� 9Dˌ�z�C��)������ҴT�%�,��� tU e"�&�ݩL��}���] �u��c ���km�Ɓ�6�a�tHo�1@Ƀ��(����R�xK��
�hB�LEb�A@<�&$B�f��]�k^ YX�Ƭc&� ��|�q��!j�\�z_�{l0z��DCZ�oM ,����xm����S?� :�R�b�%퇘�)?�� -����ILY����\F�1�Iae���
��<�.�Dk�y�#\ <�}�����^q�d6�"�� �$^A�[z�`�p� -簘 y\q^n c!ı/�2S��#S�^�-�j��3"{e2ԑy��r,w�ӂ�`Gmם}M� u�{��� ۷��>���W �í�;� -R;�J� .Pf�v���K$}ӻ0c�� -�(�n�8Y1���r~u$�TI�.�r,�K����e��z�pڃ�덜���L�������\v�b��d �u�M��:K�P_�ĺa��X��K$�S�[F���7 �\�� �ľw�t�y�5��NF���ah^��:R.�A~��H���>�P ��8����Kߧ��u���n!���Hps�!�����9����Dfz˦[<k��a�G1� ?01l�.9�a K8�
�!,)�c P� �6����]\wp9�FI+ �q��Q�7�����X[s �)9d��� ��8�� �}E�":Z-b�_Ǟ�17ܵ5n�̮X�wML�G�@���lDnߕ���]t�Z�klU>��d�/N|]������M+��2ٸ�6x�S2����t$�P�˼�m�s�B� U���g�[�� C �d�(�b^�W*�>�KMX'n|`�D&_���&���B��1��Z�=@0LVj{�cx���6���s�&�p�/�% a�c��?<&@�/�"�L��b�6v���+�G�O�n���b5lՉ����� �q�7xˤ�Ĉ^�{�,Ɖd1νb��%���5��,�.����a+ 2�X�Й,� -����ۭU~��B�!�P獵�t�V�A���d��e dW��s�;�c�� -����������������B -�f� � -�߽l�M�$�� -%��8��͢�b�W��� � -�AN���t\��m��c��y��ڱ�O��r�w=>����9O R%�Vz��=fv�`�0���u��Z����/�# �������%�� �t���������endstream -endobj -1226 0 obj << -/Type /Page -/Contents 1227 0 R -/Resources 1225 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1219 0 R -/Annots [ 1229 0 R 1232 0 R 1233 0 R ] ->> endobj -1229 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [367.5469 658.7781 428.747 670.6783] -/Subtype /Link -/A << /S /GoTo /D (zone_statement_grammar) >> ->> endobj -1232 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [483.4431 456.4665 539.579 468.5262] -/Subtype /Link -/A << /S /GoTo /D (address_match_lists) >> ->> endobj -1233 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [213.0783 62.7905 261.825 73.5749] -/Subtype /Link -/A << /S /GoTo /D (dynamic_update_security) >> ->> endobj -1228 0 obj << -/D [1226 0 R /XYZ 85.0394 794.5015 null] ->> endobj -358 0 obj << -/D [1226 0 R /XYZ 85.0394 642.7523 null] ->> endobj -1230 0 obj << -/D [1226 0 R /XYZ 85.0394 619.131 null] ->> endobj -362 0 obj << -/D [1226 0 R /XYZ 85.0394 502.2708 null] ->> endobj -1231 0 obj << -/D [1226 0 R /XYZ 85.0394 478.809 null] ->> endobj -1225 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F39 863 0 R /F21 658 0 R /F63 998 0 R /F62 995 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1238 0 obj << -/Length 3053 -/Filter /FlateDecode ->> -stream -xڭ]s�6�=���f��\�� �}J�I���v���=�}�m%�Ԗ\KN껹�~ ->����F�DR�q�,��J�I̟�j����|�,3�E(��f�mV7� �
,2�z��vV�Sv�4�R��»��t�T"��XN�3�'A0-�����/}��2������;�"CyV���:��Kf�4D� �6'�(� -#U�C���Gۙ�HO_��W���]�J�|����q��iE8y�-6�珆uG�@���k4��㘞R)d��|��A�
��̪�ʣ���7U���gb�j ��K�9���3��t]��.� \�?v�å�i��I�>َxcTA12H���E8���^�աk�٫�V�%G(A3!ƫ�R��%��K'+�%�m�<l� ��Ue],�M� ��"x� -hc�>V�n�J�:'� -D'i��}8[u��ʛ�ؐ���.iD� �\��X���Նҗd^ K�ݚ�T�D����/��F��Q"���L<�1) O� ��_3 L�< ����&��Ue�� G*�>��[ڽ���bHBϬ\
>��/��2Q�������bA�
>�d�|S#�މ��.�2� �8�'M:�*�62)�Q�\�, �8����5��ǯ��W9��| iu=� -�Ւ [��H) #�
��6/[�J�+�a��j[��i7�@Q�be���h#Tl����j'jG}`�k%�z���@GC�_>9d�(����' ߫���8�Ƞր���z�{B�� � ��P����u�9)/d E I��� k���� -�9���,7E��[�D�3�h��Ozʠ 9�+t�;{�ol_�!�d��鰱��vK��S���
F�q����s+�:x��Q?��ơ��k �_t�� �:/�U9"����̈B�h6=���Q(�b]��J=�=Г��6�ɢF��%i�1-�0�5����6Z.�5�6���HCe}Bc���J�Ƙ�)��S�wI� ��_� 6ih�=���Ґ�Xa���L:�o1 5A������m������%��:c�_tIW�I��RB%��l��l.����8�I�K�K<|�S3z��
�߳ɶE��aLt���jt��=ľb�u�@�*�R�h_n�z�)�ۑ��X�;�g[��zđ�&1�2��ع���Z��,nؔ �$�� -���G�obs("&o�dri���A4�2�9�����J��I -����|�E��oHI�
���7�����NzE���6��q�M� �`��3}��-Tp��q���lHɓٙ�0w��-��(��q���{vU���/BN���8㙭h�;��k��uN?&pu���at -06��- ������=�
�Zz�v��?f�X+���C�E��oj=~�5����݃��R��@~�Z���z���'���P �K���"�����?(j��*�q�93�Tڈ� -���Q,��0Q#��?-� endstream -endobj -1237 0 obj << -/Type /Page -/Contents 1238 0 R -/Resources 1236 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1219 0 R -/Annots [ 1240 0 R ] ->> endobj -1240 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [369.8158 645.68 418.5625 657.7397] -/Subtype /Link -/A << /S /GoTo /D (dynamic_update_security) >> ->> endobj -1239 0 obj << -/D [1237 0 R /XYZ 56.6929 794.5015 null] ->> endobj -366 0 obj << -/D [1237 0 R /XYZ 56.6929 475.2364 null] ->> endobj -1241 0 obj << -/D [1237 0 R /XYZ 56.6929 451.0522 null] ->> endobj -1236 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F48 885 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1244 0 obj << -/Length 2446 -/Filter /FlateDecode ->> -stream -x��]s�F�ݿBo�n��~��<���s�ꤎ��k�@Kk�c�TEɾ�����%EI���s37��X,�X -O,����9��_���������'�N����+䏓_���� g��f�/� ��hy��bF+�B'�N~��f��!��3��l@�R
)�8fL� ��b�*n_7 �c�l枀U���Ư ���uE�U���(�����>���ュ�b6[�E����
M��
,7�@����ZF��ٴ�fq����
,� -\�Z �\lG\�Õ��`��x�c�ƲLX��զl���ZZ�i�G�g��Q y� U���fVp -Ќk�N1h �Ў9�짭_G§@H
�P� 7�U+�ꉣ (�j�T�mh⾪ p��y$\ -��3eL� -Q -��~���b������rz�w �d��Fn?#��5`?���k�nޛh�w$ C?=^Ǟe���m -<Aiwp� �c��b�ʸ�>bO�z��en`U����}�r�$��_U�@�q!"E.8�\1�ᘞ�E�8Њ�v�A�JD� t)��� -�Sm0�L@i���{C�A֫��E�,F�6��# -�!��A֝���R��j�h��%��)���{ .���p�:!H(�p ��
��~�J��r�ܴ��#��D҂�{I�� �X�ͦ�8��RJ ��a��E��_nj�~p���GQ
R.X�L��-��7H� {��+�?7��6�X�!�*l�(���j�.�����^$����=0�|`���xD��� 7���a�yH�'�0gW��D4�{���� !��c��˼ ��8�}�]��ž�!6W��Ђ�d3i���튧∄��e�~!�(�Xd�4�(H�d��q�O��8��`R;X�T/�h��5�<[`��T���G p�5A�,�Q�rq�lW=� ��@e.�V��rء�^��� -|A��v4�]� ��a��)��� ���E�j�� i\I1�����eV�o�"XjY�ķw�>�g\D -�GC �O�SP.M=p�j��J�@���b���}�*��A�*�.�߿��f��: ������ ��U[~=� �~��|{���!�Rv��m���x�ncO,�=��U��M�B�$��_Eg��$`�e^����O�EU6���V� -���m0 Q1-���&�y�g`% u\��� f�`QB�g�j�?��z[ED�f�u1�]B�z x��DmD��]�]G�s��K̀��'-��^,�G��pUW>bqYV�<nb���N���G֘s�
��R 5��(�=��M�E - .��� n�ɯt���;���i�����g�{@�I����̒�E}S,�}a�3�YlJ�o%=�� Hl��>W��]�PƘb�`W &���x ;w��I8���A�g�+ ��ڏ"V���tZ�>ӈ�Q���;�籃)��R[&ϣ��L��B�ȅzTv���O�F�~o���NW��Rqb}ZS70t"v"B��d��8 � O_5�V�p}Dm� HN�#�êyDC^�\�,��]N����y�|$R�Z�X`���� X���P�� ï��̻��� %w�Ygp5�r�)ܵ�tY��ި��i�����ԖF{endstream -endobj -1243 0 obj << -/Type /Page -/Contents 1244 0 R -/Resources 1242 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1219 0 R ->> endobj -1245 0 obj << -/D [1243 0 R /XYZ 85.0394 794.5015 null] ->> endobj -370 0 obj << -/D [1243 0 R /XYZ 85.0394 650.4851 null] ->> endobj -1246 0 obj << -/D [1243 0 R /XYZ 85.0394 625.2941 null] ->> endobj -374 0 obj << -/D [1243 0 R /XYZ 85.0394 171.1138 null] ->> endobj -1006 0 obj << -/D [1243 0 R /XYZ 85.0394 149.3849 null] ->> endobj -1242 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F39 863 0 R /F21 658 0 R /F62 995 0 R /F63 998 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1249 0 obj << -/Length 3623 -/Filter /FlateDecode ->> -stream -x��[�s�6�_�sf�<~����f{�\w���t��>(��hjK�eo��� @}Yvҹ���N L� ?� -㝝=���{=�^%��{6W�_����7^����B�TOP�� -=D�)��(���_5(�w�o>�d�D��)O��*&�� U�Z&j�����
Nk��V|*7Z��R��媠��c1�WpJ<OZ�e]5��ŝ;'2'������q0�u����V� �0���Ʉ����h� ���d��4 -����GKt�� - U%C��$oe�E�� -q -�\�b�h|o�f4g����==�`�K�%T� �zhB i�c{j2���v��Z���XF�D����t��S*��Vj �D�5�C�'%h�G���VI� d�QDf��Ks@0 ��u������`��g� �rҭAHpΩ$����e�ҧ:�TZ��xqoc���H_X�i& xmD��G�~���>�S��C�s��� ,\��}�h��$� -G g��}���q v=e�}���Y -�fI:d�_!XP��^|\⁀�{ ']a��^z�����v�jIic͛���d��$�^��x� & -� (ٶ�r��)�Nz�4s�|�Fa�i��+��`�t[L��l:��1�;�� �z�ې�BB ��R ��wU�Ĵbr2�@���B� �\5b�@�P)���tu;��Y}AP��z���фm�����=�p-�zC����!9�Ʋ��.�I��(z[M�I����+��E����._�ʼ�
��9�}��dTJ:�]�l�{C�9���)�7L -X����2�8��9�Z�;!U{�Q��ۺ�N�y�8��K���f~ � d�_����@�9�v� R> R �jt�?S�I+m� Ǜ�c��D���&e=x��;�?(A�0{|�i�rs�w&����%� K�u���60с$c�ԍ��+�1�F��QL��x!] ��.%��I�Ö�I5 ���aԆ�ߕK*B4���~��0������@$�^� h������=�3K}����K�τ�d�w��sR���a��x�Z��(�?����[�xۓ�ώ�� *��71˸~e�����T�t"�B��g�Ț��� �L��|��R���L�H8��Wo�&� ^m&xwn�� -~�l
��<d��o�&� �ċ,�p}�@��D��q|��h��}u[��'2!l�L�Ʉp �6oBHzƄ�� ��tt�S�t�zx�) YkM���� ����X�\�&T{.��\c(}�B>,j�Z����6�z� �A��pJe����>�y�TCƓ�:-Li'�Ĩ�\�Tl���< d>C>��ٿ6���2ȥ!%;w�\�V�˖�H_�H�"v�3� ����i�:=��+!�� - -r* a1��8��N��p:�1��$�N83׃��g��Z0�A��� �������=tN)=: zK*> ���F�������JO��2 �^+D8bm/< �h��� P��7��q -,�v�aSk"�__ʱ1R���|���z - -�������� �p�l#�3hF�a���csdairxa�Gn q�5��{�V�ؤM�lܯ�%����rS7���xER<�����a����@���;��N���D�c�3��|O��m�ܣ`�L�JT*�J}����~�>t�(�e"�z\�Sg�|7V��� J����U|�/I& F8��� jtxAAL�6lr�����S��!�^�endstream -endobj -1248 0 obj << -/Type /Page -/Contents 1249 0 R -/Resources 1247 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1219 0 R ->> endobj -1250 0 obj << -/D [1248 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1247 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1253 0 obj << -/Length 2665 -/Filter /FlateDecode ->> -stream -x��]o�8�=��o� -{vO@" -U�~��۲�8�(�}S����TI0�gت̼���m����X��Ӣ} h�v�=R���$�Zclߤ��Bj���8h>�$��'Em'�O�Q� Χ�'7�H.DD�����;3� >�2MR�I�����;)���.�b�;M���}��^`�=��pŌb�3�{�����:����T�����P�EY�if^��[��j��@{�LѶd}0��gɬ��|]4��ݹdA�����s��#h��`��\��3����:PC�,8c#'���1ݑ�t}����c�=.�Ep�� q�0�����e2U��^v`�1BvXG<��� ��1 !��?ဍk��A4�h����&��&_(oF �6)��'6��J{^��_�b�L��{�@� ,P�D�k�bN�MC��ˏ��@��Y�D[�$�s'�s� �����"��� ������ '��H#| �"��3`�5�ck��b]A�á�=�_D�Ko�0�D�d�N1feӢ�=V5�����}o862n���E��5g!r*:�MSLQ�!vC��9�����i��]�-��� <&��-�{�0���@��Ww �J�/�2�0���8��Eäut���@��>&Dg ]�U��� �N�����/&�e�@�> -��Oՠ���~�6ف ��� -H#� S�)��C^00 ��� �����~`�S�mcq -Ō��y�"�O�D+0p\���z��?��������L�u���1�Q��o�i &4k��A�g@�2�
y���\�6�R�ŏo�W��|���a�wlW+��]��!xz8&����!.�r�]Ɓ�Ȉ�憧Bc'P�Te d ��&�<�3�m �>}B�#�O� -e�\��2���c]Χ�j�����n��!;�]� �9��G���d�������>�:*�i����� -(�"�)�8 -�a�TP���}�@�T��֪|ٹ�k��fu ~"�Z��#B�8���Ij���g7�HT� ����� ������-�-�g)���k� yls���` "�7�����a�qȸe��r (��E� -endobj -1252 0 obj << -/Type /Page -/Contents 1253 0 R -/Resources 1251 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1256 0 R ->> endobj -1254 0 obj << -/D [1252 0 R /XYZ 85.0394 794.5015 null] ->> endobj -378 0 obj << -/D [1252 0 R /XYZ 85.0394 141.2512 null] ->> endobj -1255 0 obj << -/D [1252 0 R /XYZ 85.0394 118.94 null] ->> endobj -1251 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F62 995 0 R /F63 998 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1259 0 obj << -/Length 3339 -/Filter /FlateDecode ->> -stream -xڭZ�s�6�_�*3�N�5�����m���%���^ d[ItkK�%'����>lٹ��d2�H� -J\07���n��p�S�S��F&���u���#)c��`��iX -���4!xh�h��=����<" ���?sz��.#@ <lw��� �âz8Q�Nf���ؠ!�h%��즘��R���Mr�ߔ��k����MI1�\ �& mJ�!���bfb�)�Bіh�-Y�Ud�b[�_�n�� ���, 3/%{9�����)H��,5i H� �^�� -"IR~9�{��
w�QL7��n���;�pm��Z -G���5�oso&�� ����n��'��R �9�[٠=�iy͡%��&o<��aL�Mh� qa�к|9�t��"Eޞe"?�x��� -"� ��O��݅��h�w\Q��eQ -~g�JY -��z�g=���)ê�VZ_V���c�b�A/�HJ}U��$)�$ ۖM�)��X -�>�v�U��U�V�����L�{|! - Q�k��]��B�%�G���B�$Rd@�/� -.+��ߝ���4]�s�ĞT*�W#�)���$ʟ�P����_C �|姲�uͩD��⥐�CV�qCi����������=��XKu��L�}=0�mZ��:9��4�l����T����b�R3��e�Ai�� 4Մ���CKg�@/��uU]4Ϻ`_�MG%ݾZL����)ީ������x<6�O��"�38M���P���p=亰�k�B8�y X�!q�(��P`4W�ũtv� ���}�;��#C�JC��E�� �g��ЯO~�M~��/���<� -endobj -1258 0 obj << -/Type /Page -/Contents 1259 0 R -/Resources 1257 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1256 0 R -/Annots [ 1262 0 R 1264 0 R ] ->> endobj -1262 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [361.118 694.3759 409.8647 706.4356] -/Subtype /Link -/A << /S /GoTo /D (configuration_file_elements) >> ->> endobj -1264 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [347.1258 314.3269 404.2417 326.3865] -/Subtype /Link -/A << /S /GoTo /D (journal) >> ->> endobj -1260 0 obj << -/D [1258 0 R /XYZ 56.6929 794.5015 null] ->> endobj -382 0 obj << -/D [1258 0 R /XYZ 56.6929 769.5949 null] ->> endobj -1261 0 obj << -/D [1258 0 R /XYZ 56.6929 749.7681 null] ->> endobj -386 0 obj << -/D [1258 0 R /XYZ 56.6929 443.842 null] ->> endobj -1263 0 obj << -/D [1258 0 R /XYZ 56.6929 420.887 null] ->> endobj -1257 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1267 0 obj << -/Length 2860 -/Filter /FlateDecode ->> -stream -xڭ]s۸�ݿB}�g"�'O��������ۗ�=�eqB��H�����w P�D)餓�p�X,v����g ���)���e�J5�z��\��̽���f ��1�Ow���l���fv��xٔY�gw�ߒ���tw}{9�%&��kÒ�n>�L��>o?~xw����W��J�n>~ �������o�/��j��pb����]�����_�n/�����n�%֗3��|���w6[�ڿ\�T�VϞa�R��b��PZ�ZI0��?.�>0�f�ҩ�SڦZ(3�k�Zk��)��i8�y�xj�ʆS|��r������f��|,��:Oy��Y��H��jB��
��H��uy9�*OH�I���Y��~
�g���.�U�X�4(�%���6�ZWu��~�͊�}���5eMp��ݶ����H'�R��y�k-���b"�͒3&����jY���ۤ,�/���~�������E��ܺ}&`S4/ݽ�4P7墯ڦ , /�sU�ݣn���- W5N� � Γn[,J������ڝ'h7~ �CH�V8����}9��]��#ܷ��S��y���2p�eG�u�y�j�^ �m腩��뗱Vt7����S�:���Pi� 8���b�:z� ܤ�C�`�%��]�.���K��w�ix��M?�� E�F�T -#��iLu�O*sQ�E�;��G�jDX+ϋ0PM�0v�,U67c!��)i�D�� Z=�"sشO�P'��mE�eLе�Xx2�.Ț� ���36D҇��b �?������"O�����ȥ�5��{Fv���a� #��� �<�e�1%c> e,�G��<�5��'�l��>Z�� �a�\Xϻxq�F3Ť�,O�r^֑�c�C��ʞ -^,� wV���ܞ�y-|�Xb�7W�&W+W��8�\ �d,������ˇ�����)uYQB �\��w��dR%(+"���)�k.�n��ƾ*B�`O ��j�T�<UK�R(�籏�8���9p����9L֦B�P�x�f2Wڑ�W���k׃��S[�h���pw��Ho�w��P�œ|5q�g�X���v -��ܜw1��x7P��]�v}���F<&�7��&�8�z�gb|(� �Q���A8 � ��{�}xp��s��s� ��c t�ǥ��җl_ Pē*�";�������!a�� �.a�P##'l�6���r8>رe�{)�`��38"e�sP�FA�� �E�o�Z;�Z�JQÌ>͋�1����b�j ��K��JB�&8� -X&\���k�z��@� %dG |� >B�ǡu��\
dž�"� ߶`�ٗ��sIT�ݟ�C��و��-�4�� -��1k�����!䖁JA����j]�f��K����Ͷ.7%8��#���H���Wy� =s|�?vePæ&gз�_ ̠�V -HS��p�mG���?$!���X���Js_!qI�C�źm�ҳ(�Ӹ���{Jz�B ��BE�
a��u�tE�o� � �9O*l���)��+�A��/�0�ra -O\:�jy���5*ևyO�we�¶J
�a�g`5:Ͻ_��/<��(�;���A�W|.�tE3���2Yp�b� Z>F����t�ç����0+i�\��z_��g��q��,��s�~ 7��LV�������2�2p��� -:%���<��gi&Ex���q�Q��-�=s#�s�5h�8��r}? �E�\g<�.�`��Ӽ�j����,8Q��|��ߪ��)�0~#��{l���UfR(���^>�ͼ) -�A�� �B�~�P��Ɓ%!�.,s5�p��#Զ�*j,p� ���I����5'C�-X �䙻$��n�r.,�_�A�]O8�4��sv�°�~���7��K����0k���t�� -�!�CW�;Jf��iBW�j�ȌCKD�7��>*��)�13������Q����E H��]��ǹan ���2��Αꜽ�o���/P#��Po�L�Ob 4��yC�� � Z3�ܑ&�+�X�п�(���gfz�s}' ��A0����a@$��y ����\#6��]�Y�p�l� -endobj -1266 0 obj << -/Type /Page -/Contents 1267 0 R -/Resources 1265 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1256 0 R ->> endobj -1268 0 obj << -/D [1266 0 R /XYZ 85.0394 794.5015 null] ->> endobj -390 0 obj << -/D [1266 0 R /XYZ 85.0394 690.2056 null] ->> endobj -1269 0 obj << -/D [1266 0 R /XYZ 85.0394 665.1198 null] ->> endobj -394 0 obj << -/D [1266 0 R /XYZ 85.0394 302.1184 null] ->> endobj -1270 0 obj << -/D [1266 0 R /XYZ 85.0394 278.2032 null] ->> endobj -1265 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F62 995 0 R /F39 863 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1273 0 obj << -/Length 2998 -/Filter /FlateDecode ->> -stream -xڵ]s�6�ݿb�N��*�DM���I�i����=�}�we[�]ɑ�u3���PKi���NfB�A -BĹ1%��Xe"]d��M���]�] f �T D�%�s���"�+�_F&4�Lf���Xkw��煈��p�]u/7��|+o��"���� �+�!�uo���Ԁeh���]IwJU�* -�|{�?��� ��� -�` ��
Mnw��5�hvX�fW�� m�-1��e� ����V�-�� = -��gS�R��^un*�v =+�Sa`�fV��鑛� -�F�{� -zE�q���V' ����b\�4H�$��\�CFV�IB�"�@���Q���⁈���e���� d&)$�u�(y����¦�>NA�E���)~\���CS�+>��q���8P6��
0e�-�u�?I%�B�"�V?)π,�Z{$�(.C��i��6�03`!�ۢ_�MyT�Y�~; ���@�:S��#�Y�R%���5)��T�e�Գª�t����m�~u��Bs^�HO�j!�� �0�V|S�8n�t�ͦ�#�!%��2k���q� j��ø UZn��2(7d� ���� 7���)�q��|ܕ�v-As�V�G��]�z��jA�UZGg�-���'`�ݐ�&Ҭ��1����X���J{��������ܐ�hH�U�ӱՠ/W�t9 T�Q����ZU� ;��5�~���bE�P3dPp>���!��* ($3���n�2��!~;&=�ǘ��֬3y̍X(�����;骩KR�8�?4�T�b�L3C9 "�i�($�b���jŤ]5��5�$�����dE�H���$��Gk�� -r -�����-��d��5��غ(�� o��( �5#�}�
?��9ŏ�Ml䛺����ȱʴ�x)5-1G�E�v
��MO-V�{��[V�wL쾟�IJ&���`E
+|}8��N���|绻�&��Qޡ$r�1 -J��6FE� � ����0�-LQ �Qw�FҜ����2��I����o��"85yC:�%NSL6&�R
�#����u��LB���ό9��e����k �f�5�0c�p���}�4�b� Ҳ��9�2ca�,�eL�2:�zp�UK�5��c�`쭆���?��Q�_��) �
�m�� ���q��KZ9�8��� p t"����i� ����?� �j=�7(���� %|H�x��� f�<21� f44�W�)����p�&���d_���圄��W�#9�o&��-�vRjg��X��x��nyBN�գ����M>Sn��r�O����M��r����3妞,7�T����&�#7�<�MЇ��Yx]�7�+�ɕ ����`A^���4=���8��X���gc3��d���g�u���`��n�<���@��0Sȹ���?c;d��?��vendstream -endobj -1272 0 obj << -/Type /Page -/Contents 1273 0 R -/Resources 1271 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1256 0 R -/Annots [ 1276 0 R 1277 0 R ] ->> endobj -1276 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [213.6732 554.0172 286.8984 566.0768] -/Subtype /Link -/A << /S /GoTo /D (rrset_ordering) >> ->> endobj -1277 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [209.702 475.7236 283.4678 487.7833] -/Subtype /Link -/A << /S /GoTo /D (topology) >> ->> endobj -1274 0 obj << -/D [1272 0 R /XYZ 56.6929 794.5015 null] ->> endobj -398 0 obj << -/D [1272 0 R /XYZ 56.6929 622.2509 null] ->> endobj -1275 0 obj << -/D [1272 0 R /XYZ 56.6929 600.0717 null] ->> endobj -1271 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R /F62 995 0 R /F63 998 0 R /F21 658 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1280 0 obj << -/Length 2668 -/Filter /FlateDecode ->> -stream -x��]s۸�ݿB�'�s��@���9�ozN�����@K��9�TD)���� P�D��%7 � �X�.� � �?61�Pa�$��(��d�<��[�{}��4MS��f'?�������n\�Pc�d�x������g�W�S�h���Ti��tq�3�Xl^��|u���Wg���fo.q�����������)3��z 0 Y���o��{}u��gW��g����z^R~���'�������a����%�Z>Y�H%��Bđ����?z�ɬ_:&?% Q��#�bL��-`� p�����nںn��?���rU������w[} -c�Sf���ڦ��p���Sծ#����=�v^D �n���Y�:�
�� -��o�{ ��M�� ��2F�R�3Ӕ��v�{�(��.�Jg�êU]�qpӆ����W{�7],HK��@7��jp$��$��s���VmӕqY�l�|ܖ� 4��M��{�!l��� ]I��� n�h���qm�c(Z7���L��r���f�
��Ŷg�}�l�T �A�m�'n#��7 � � -l�T -��� ���!܉�L�
�tŲ `�% �!L�#���� )�4A�i7ع.�u:T.����&��p�Ăy����QkJ�/~{�H�� �� Bx
qB}�|O]���1�<<����$�6�^����8��4a -�WW]$�f� - Jh���-��gܵ͘KV� �^QS�w0`'J_J駤[�Xc�x�5�1NS���8n��nc�r>��IU��*ĄE������0�IX�<�[��r ����p#5�HH]Yب�HLr8'1n��%1NS�^b�r��O�\� �� �%���{�̻��� ���<�IJ��D�� ߍ� �#Ls�-!��q�w�C�tet������OZj��ߏ� �#� h$�9`�����!��9�='����� ¹z��v�p.\.� �u��2�V�Puʲ�u�\9+-?�� q�-X�7D���u_p'�y4�����me�]��8���� HZ��^~�(m6�� �-D�>�=D�~�6���F p��0=Lb���` a �}D��X��Ԁ��6��%p*x4��*ZtГ�w��DP��ci���"dz[�Nz=B�1�A�Ǖb`n��*$��\�ȉT�1%d�\X��Ґ �����U����t�\GW����"25� �h�H|���"&Ribr��8A�>��O� "� �H��I�ˀd�������: iڎ����! �a��ڦ ��ݪ�$i��ە�|������nf���Q��Oܶȅ~�](�Y_�K_q�*�{����h!��e����"I.�Ğ��m2�s��J2# ;g������j��I�H -$>�<�k�Ӌ��KP ��X�+% �� �G��
��P�}~��y�A )*�@8pY!ArP���L��ΰ�\����� ��y�|���^h�/F��;(T�P|%�/>�\��!v��y���X��O 0�ڞΓ�����Ύ�t_I -"r]'"�)�]e��U�]f38n9� -��þ -�����8�6���Q�C�K�r���f�P���_�w�}7�R ����/����gR=��}MpeG�ʾ�_��U��6i��(�\����*<��ժ,<-��~��� � ->2r'��ƠQ�eq��*;r�݉s�n�Ory�Ad�J M�r��j�5i_\���>���S�֛3�4%93pcg�L�29 *���'���f�g������XΘ[淞|�@t�� -J��ם ���K>���& S�4�왂`���rW� -endobj -1279 0 obj << -/Type /Page -/Contents 1280 0 R -/Resources 1278 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1256 0 R -/Annots [ 1282 0 R ] ->> endobj -1282 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [353.6787 560.2827 427.332 572.3423] -/Subtype /Link -/A << /S /GoTo /D (the_sortlist_statement) >> ->> endobj -1281 0 obj << -/D [1279 0 R /XYZ 85.0394 794.5015 null] ->> endobj -402 0 obj << -/D [1279 0 R /XYZ 85.0394 630.8728 null] ->> endobj -955 0 obj << -/D [1279 0 R /XYZ 85.0394 603.2815 null] ->> endobj -1283 0 obj << -/D [1279 0 R /XYZ 85.0394 477.5928 null] ->> endobj -1284 0 obj << -/D [1279 0 R /XYZ 85.0394 465.6376 null] ->> endobj -406 0 obj << -/D [1279 0 R /XYZ 85.0394 128.2785 null] ->> endobj -1285 0 obj << -/D [1279 0 R /XYZ 85.0394 104.5761 null] ->> endobj -1278 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F39 863 0 R /F21 658 0 R /F53 962 0 R /F62 995 0 R /F63 998 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1288 0 obj << -/Length 3669 -/Filter /FlateDecode ->> -stream -xڥZIw�6��W�6�{�� -,�S�A�-��pb�����7E]7=�R~ݔ^�P�A^�sX��_/`�rB�`G��T��Kw%~�jZ�?c�o�Mv���8E��O��f�}��Հ���Cp�� ���$3 P�kI����x4二G�+J�2 �������'����p��: /�s�{���?�p�=���
-O�j��`�kj�3�3,"�l��h���L��tU_]��t��
�ւ�v�f$ ڰ�SF_D��7u0�����%7��H�,*�Iq�_Q���eG.��^�M�w3ES -=��_�:q-�=R4U�J�Ǔ�2nQ�6�O�;ԛɚ{�zM5��6h�æ~W�XBYۀͿ��p�ak���v�*�~�,Ȏf5�Yd� ��%�L���l�# -c�b�1 j W�� 3� ZM� �pm�JiE�Ph5 �P�d(/h��L��z�3�j�9�fQ�h�FF$e�`W����Z�L����Y���_�m`G�������~S9 a� ��`���㦼�i0��q_ ���v�5~C� %;Ӷ�-�ƚ�P�MEd�[�������К[b���Y�P�e0����x��3��5 �ն������ ؤ���3�`l�ka #`S� -��աJqhNq�&���}� a^��|r�닱��p�Я���8�\)�+�۲ۭ������~����y��3��i._�B�Z��ȃ�(1�h�x�f��-�� -�G��� ^���~-��u!:3�X3
���]�Xy� -���h��vU���?�� ��2� ���%�� -ң'N�SV�:�O)\��uZ;=;W�2� +�#OVh��g���[%y�3Q n�$W9� *>��"��b ���]�C�[T���&��p\�V�l4m(̤�Q��[�������ӈ]�Ӷ��Kw�Dגۗ�z�t�#��۶�֧�q�U���/n���NL���$x0pM� �-��l)��:}�Ŝ�
�����۟�tw�y�{t1���{]q �}�K����ނ� -����J��]q���\[��?āI ��)�y�d3�2�W/��ST ۘ�O�z[ ����/���3�#� 4�����D�;�6$,&xgA���K�m`~�)�iN,ӯ�
�.[�B`s��S��\���~�oB��|y�ka#|�� -4�SHU�ٟ�!_�]Џ�p����& -;�Q]C�m� -�XV���P�'�� '���dA�S�2�&]ދdq����o�����c���|�w�O���i��!�� -endobj -1287 0 obj << -/Type /Page -/Contents 1288 0 R -/Resources 1286 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1256 0 R -/Annots [ 1290 0 R 1291 0 R ] ->> endobj -1290 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [297.8955 476.5924 347.2449 488.6521] -/Subtype /Link -/A << /S /GoTo /D (dynamic_update) >> ->> endobj -1291 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [324.9335 169.1118 381.8296 181.1714] -/Subtype /Link -/A << /S /GoTo /D (zonefile_format) >> ->> endobj -1289 0 obj << -/D [1287 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1286 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R /F48 885 0 R /F62 995 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1295 0 obj << -/Length 3537 -/Filter /FlateDecode ->> -stream -xڭZmo�6��_�o� -�x����J�2����R_}����0h�C����4��Jf ��4 �Zf�Ak gQ"� �,���}/�rQW�����y:_|ٛ��
ib�]L���F$:J��g� -���\�$���u�Z��� ����Y�`T�stT·EC�3G�3[��i�(��rN`��� /�u��K*�_��艴n���!Ӄ�[e%��h7�Q�Зl -9}��rR��3Y -hp[ T��7G�e`��+x�ޮ�NF�HZ
P<���5'4>W������4m�pK
�r�����Z��nˁ�� -�"�n�L����y:N�Bz��
l�ǣk��g:lp��M
�: ��ǽFb�t��t�s�Y��j���r�
�w9�i�X��0�H0�:8�x2�`(���z+�3 ��%��Ħ}�!�k�G���ƍ��M�X���QԤ����o}�pIBv �i� ��e��&�p��?�^ T�4�b�q�c�T �X��t���:FB�c��7=ht�UϠii�~k���v���bkG��yC]�Ͷ���x�X%�1���8(4ǝ�(�_��q��$� �����.����b�t� *�N�e}�<,JS�g W�u�|q���ܣ�Tq�AD6��T
�h����QRI�Ơ�h���Tv�?345%! 0�!�d=�iaDۘ��W֮�?���a�7�B�� ��sq,Ac� ����h�(��2�`�� -�����B� -�ֶ3��]��vQ�'S/�a��yD`[R�Ii�USN(I�Hh��̊��t�'�L�C\9��O ���!���8���A.�� ��ez����]O%�+l�j�2�=U晚1�茹���,@� ݏ�v��r������q�~��l�g?�
#q&0��zE�snA�2X_�o� -������m�l� �z=��bMl)*���`�l�# p]��o���Y�P�]D�Q�D,�����n� ���[���dN>�B���D�ên s���i�%�cW�&�C ���J��*� -�C�1'�'e�O��̓� �Bd��P�D�圧�X�����i0�)2�F���%/T*J��^� � ^�{��k.�m���.����N�lLB꘩��� ��(����<xaܿ����� ��I�� �h� ��)��N2��^�Knh��N��L;!��Mi,����Ɨ�)�9��ӎ,��� �i���%�$S 14�p�� �ґv� ��]$� �V����_(mT�<�*{��E����c�ol8l��|���j�[s��~�74��]x���Ei -7�k`#���a���R�3�8�-� +��m�j�/��E��T!��t��El����}���g�͢T!��Q�xS)���
lK�">�q����ԁ�'" ������b'����f���.�u�^A���\Uyyq$�T�<��kb�1�1H[!f �@O�o߇��`O�����>�=}{�u�;S�����ѧ����O%IQ������,�3����b y'D���+� =�
�� -�I �*SO��:�٦} + Bk�7��kt�a
�������$-��kO��xGCx�S7����-�K���"q��Vw-
���ޗ��#���Db��Pbh'��~��SB$k�D �Am�XG���U�Ɣ�:o���s��j>�����<��ġ �v1��Ǽ���F��W�J��s�>7g#�ɷX�BB�gy, B�IK�Ҁ7mlR��j�����
��$�;�S����@���K �ik��&�S (�F��z���Ǚ�I�{&�*oS� �b��@L��V�ClP��U�',n5��}N s<��c� �Q���*]z��q�� -��៳���LJ�뎎 t�y�dI� -_�P�<{ʉeAҡ'D�/��}endstream -endobj -1294 0 obj << -/Type /Page -/Contents 1295 0 R -/Resources 1293 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1303 0 R -/Annots [ 1301 0 R ] ->> endobj -1301 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [84.0431 462.4692 144.9365 474.5288] -/Subtype /Link -/A << /S /GoTo /D (view_statement_grammar) >> ->> endobj -1296 0 obj << -/D [1294 0 R /XYZ 85.0394 794.5015 null] ->> endobj -410 0 obj << -/D [1294 0 R /XYZ 85.0394 535.1829 null] ->> endobj -1300 0 obj << -/D [1294 0 R /XYZ 85.0394 508.8634 null] ->> endobj -414 0 obj << -/D [1294 0 R /XYZ 85.0394 198.9245 null] ->> endobj -1302 0 obj << -/D [1294 0 R /XYZ 85.0394 172.1168 null] ->> endobj -1293 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F11 1299 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1307 0 obj << -/Length 1767 -/Filter /FlateDecode ->> -stream -xڽ�]s�8���L��LQ�a���mH��6�R����x���d��~e$�#�x:��� K����Ȓe b�G�\ !� &2F >\�
���j{? F3��1T�] �\�d(�T k�W�p���b�5����G�>�\���=���8Z�>Ɣ��z��T���' ?N�1I9���1����u�0}���\��?.t:�^O�ӛw���Ň�tqb�������w<\)���L��Q `D��ûA��1c�f;�2���!h=��� ��2A �̕@.�`��I�b�k���~?"i��]�-jS���3�� �t�ߪ�k],��.��)w'�a�c�$Q'D+@_M��0I���ꏤ�ojE�M�R�ĥ��*ͳ����j�&��#I��Ep� IB�@��� �ϴ��)����1F���L*�U�}�-y��MM)W�X�Ӌ�4&�OU��O����D���IfJ" }9� ��q �*�U�}�-|��
MI�>&(�E�*�U�}�-|��
MI�������*�U�}�-|��
M���)� -�J XV��r�N�PƼ���=3uf��� -]7�/#I3wS��[U��gڒwM���4E�>�q�b�OP�a�� �ϴe١��Ǯ�ۉLP�a�� �ϴe١� ;N�2�� -��L[���� �����\FHb!�c"U�7 S�ʐ��+CG�~Ө���p�n��(;h�ac* ��Q���C�5 �+]W�[�}���:�jO��n���۬6U�� WE����"wD�O7�X!$9�+� ��(7��8 {b"Z ϩ�tc�;UY�b�+�)��͋j++]�j�S�6<�`�S��._�0����Fm�+L�I�Bg�G�f��O����Ūè����%n)�o�A��%�k]~���{�<�ꃓ��Yuh{Х���&��ج��yW�Ov����W�o��<�N SA=N���3>�w�m��+��w�������o�& RT �S HT�}�1�j�U��RU��Gn��fL��+]a/����%�S���F�m�&[5��&{0f�A�Y� -{ Y��� �:��9��X����\]U��hV��>[ �e�����j���A3Y�ϲ�p{ԛK��Xf�)=��.�e�.��Wa�`n�#�V�r��/1�z�Շ�(��Ә%j��}�,}�/-U(������T]�����l���KX����:bx�ZeǞ��R�-�lj�,��#�� �W���xi4}T��{kf�*�m�';1� d37YY �T8�����yl�̜�=f�,k�KiTM� -endobj -1306 0 obj << -/Type /Page -/Contents 1307 0 R -/Resources 1305 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1303 0 R ->> endobj -1308 0 obj << -/D [1306 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1305 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F14 685 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1311 0 obj << -/Length 2674 -/Filter /FlateDecode ->> -stream -x���n�H��_������'�=��$v��Ğu<��y�E�&�"��1_�U}���c� 0�.VWWW��U-��t�dL��T�X*g���]����h�h1�zwq��1Og:� Kf�/���"�=z���_/��� &I���LH�����h;�?;=>�����<���٩E� � ��?�/���3���'� Y�����χ��?.> ]�� �K ǃ|;��2��؟H̵��[� 1՚��B�X -�=�:�r���p0k�N�/�,�� /ٖ�Xk)��%``��'x�ux9Я��͛$,N Λ�������}5�S -�)�1A��lu,A���Xr����"���Ϣ�}s -vмO t"�*��1�<�4��!*D��HfC�vT��a �Z���_6Ų\�Cq���묳���u�.ܼq"��ͦ��<� Gcr�K�����"��/g�éecF7�j #����n�7x��ʸ���XA��qm��1��0�x����"k1 X ���|� ��avm�?�\oop�Xʄ=�C�ǝ"P�N�l�.[v�Bnj=�}����RČ� ��)ἂ)y� ک
�Nm��n��MXҧF��8eܢ���'W�c2�n!�n��.^�_1��}n -�B�+-�ϗ.�ʶ+�.��K{�$�/�Ae�Q�� �"^u��:/����-W� 庬@��G� r�s�\7(s(*�eV� �xwϺ��J.�5g��'�w�OVWe���]��CU��[���y�2aGev|��ʹ >� �W"�N9��Zh���&zp Ul�[_�R`SJ��q^[��u�n�� -2��=�¹�(�:0}�����Z�K^��%-3 -�t���V
��D -�I��g -��� -n_�t�su{;}���FP�� t�C���S�'9Qj���B�~���GH R���^��M'�bUl���z��e��F���ކHkY:3A�GO@ \�������=j��>a���_�Ϳ�@�'��g D5�&��١��nۢ{avP�� `� \��l����c�p��+|�=��&�����<���5Tď������,N.��D�,��]����2�1)��F�� � �`�
�d��O��������Tz� � N�w$�b���Vo!b.�6Xee��/ $l7�.�\K�b��c K2�:��Œ���۞?� -endobj -1310 0 obj << -/Type /Page -/Contents 1311 0 R -/Resources 1309 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1303 0 R ->> endobj -1312 0 obj << -/D [1310 0 R /XYZ 85.0394 794.5015 null] ->> endobj -418 0 obj << -/D [1310 0 R /XYZ 85.0394 494.8753 null] ->> endobj -1193 0 obj << -/D [1310 0 R /XYZ 85.0394 472.5641 null] ->> endobj -1313 0 obj << -/D [1310 0 R /XYZ 85.0394 284.6288 null] ->> endobj -1314 0 obj << -/D [1310 0 R /XYZ 85.0394 272.6736 null] ->> endobj -1309 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F62 995 0 R /F21 658 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1317 0 obj << -/Length 3317 -/Filter /FlateDecode ->> -stream -xڥZYo�6~���m#��(�ا�ē8H&� y� �Zm ����vg��V�H mٞl`�"�W�ί�b�#i6� ��Bo��ona��3��~R0�����7�U�1�D2�\�g{%�'��\�>m#&�9����~�����_�ޞ�������|��� j}����^�"�b�������������b��̦W�/�.>��8�|������.��\��q��3���<�L�Do �Ù0Fn��P+�C�<�<�x��q�٨]�&�� &�V ��))^8���p�k�1K$�ON
7L�?�R�̄�Q'R�t"�faobmX���:ٵ���P60]ͦ�Tb �pλ��A�a����&o� m�=����;�웖wEvG{�����܍�.k�'�-q -�������B�J����}��iY:�S76�0V4+C���R�i�y{��S� �J�~�_�&!�%�8N -��Z
6Wb��E�) -�G!W�|�=��=��ν�(�@DPBħʹ�:DO -�Б��Or -�3ӊ�i%B���T �Ԉ��$BB����2��i'
T������ -@�oV�*�����_��H��k�XW���˂o �� � ��Ҧ���9KB�d" ��K�ՋQD�0���("��.� �&�����#��t]��؞�'�N�<+�GGt R�a:95��p�P�,����G��'z�>ݸ���{o��[���Pv*y�����lW��&W�����(z��td��pjB(�O
F��Ϭ��/���&� g���h��hBLD[&�2ܹ#~YB$��s��s
!�� �w3����X%��z��s��� �����I���p�����<�LH�f�
-L�X$|>��8�vz��rI����u� �! -e �=]���aN��&�T� �� �@[D'�mnHznH0�H��F�
��X� ������i��U��!G��
H��f� ���2rn�8 �l��t�jv!z³ }jB -������e��^�fY��� -��i�s�6�3��_��83���؏�����Vдh�+w3 Ԕ#(�O `t�!���+S�#01[s -`����ƭ�AƢ���-�) � *_q��$6-��7祵ar�u<8;�ﲰc̫�����oa!@��^J��Jɣ��~�jOO��X :���YxR�a�N���DS���A�e�Oq��|s���b�x� b<u-�a���0�
�dN^�-�M U鸟�H � �*�9����� �g� V �ͅ��Z�~�� ->+V�·�@؟�;�C{��� ��_��7+6�@�� l8�9�����p(��v�C��w��S��NR��>�ov Z�=��H���><�Y$���<�," -g2��Jj���/A�Tb��Y�TX�S �'8�C��Vꤣ�sl���_�Io�f ���EK��i�+d< �P�,Xa�.G kU>}G W�! �~G�L��O����:�N���
���R�"�[���WT�G��/�7�O� �|_<�y���k�N*f��u�n�h�Ms���t�i�`���?��y�b��C���<( ���{��V -$�?pZ��|��� ��#��i�����~�<SVk��Tv�"���� -endobj -1316 0 obj << -/Type /Page -/Contents 1317 0 R -/Resources 1315 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1303 0 R ->> endobj -1318 0 obj << -/D [1316 0 R /XYZ 56.6929 794.5015 null] ->> endobj -422 0 obj << -/D [1316 0 R /XYZ 56.6929 644.4755 null] ->> endobj -930 0 obj << -/D [1316 0 R /XYZ 56.6929 619.6136 null] ->> endobj -426 0 obj << -/D [1316 0 R /XYZ 56.6929 131.4228 null] ->> endobj -1319 0 obj << -/D [1316 0 R /XYZ 56.6929 107.0033 null] ->> endobj -1315 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1322 0 obj << -/Length 3405 -/Filter /FlateDecode ->> -stream -xڵk�۶�������X �"��''>��4N�\:�8 O�N�%R�;_����b| �OG ,���b� -9c�G�W͗�] ���)/T w���! b�a�}~6� �!��uqh�h�r] vYK�_cS���%L� ���n�tK�xӇ��T����_� ��j����#Qz�����6��*zN˽���y�!����L
`�R��G�?d"���� -�!� 2R1|�@{l��� q��#��mv] HƼ�ߨ44�UN�)�+D��s^I�bvٷŜ~�3qZ�9��qr �`S)' �K�L%%� -�զXS�F: ����f�����*5�]~���B�2*�s����U� Q@!�r� -/ ����U�@ D��_���jC��vȡ�8t����` ������u�5�tp�0� ���� Wϥb�>�3�e7k$�fS �H%$���&Ûtl�ԇOh9I��!���Þʞđ�$�>wne��2Ov�:�!ID��:J�;#z��R�F~��*�ߟ�O�?y��Ϻ=� ѻy�=@� 6���(2�j��A����:��VA��*ηp�e�� -��4;T`�L<�O����Zl��yw; �%�M"&���,_O"�e �_^�Dc��� .�-i�e9��-�� -ȴl64���q
�3��@k�t�9x1Jϰp0�]<Ќ�#%��uF i��u� 3,���r�����y��-^L}Y�v� �<�����np�}̴��� k�1٣� z[Ң�"�<g�����>'�1SpW��G:�*��P��bp�\�;��� *�Y /�JD�ɀ��R���b�R��O7�*���TGJ�3�LMJI�&%�� -��rf�Տ�"��@��PPuOBГP$b�?_�`��5ԗx/��i� �< -}���Ԉ
�f�������� �}8MC� -
鰑1�`���o��}�#�w���,:Kه����bP,����k��SK�F�Z�}(8y�H"+]��_B�)��g�wI� ���endstream -endobj -1321 0 obj << -/Type /Page -/Contents 1322 0 R -/Resources 1320 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1303 0 R ->> endobj -1323 0 obj << -/D [1321 0 R /XYZ 85.0394 794.5015 null] ->> endobj -430 0 obj << -/D [1321 0 R /XYZ 85.0394 575.952 null] ->> endobj -1214 0 obj << -/D [1321 0 R /XYZ 85.0394 545.1349 null] ->> endobj -1320 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F21 658 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1326 0 obj << -/Length 3013 -/Filter /FlateDecode ->> -stream -x��ZKs�8��W�r��Ń -F��MfAo* -� ��P,�6x��(Ńy�,C�w��CG� ںnm� ���t�(��˼X�ye;�p�Rr'�pϳ�w�Q/�#&#����y�҂�$}W�_pE�`�o���Zq�ȁ�T�L�%�٨��t,R�ڽ�"C`� �5�X0�ޱU�%�(Yb� �Y#q�I���?1ƴ+�`Y�XAHf�cZf�u�#����'l,�J 042Gl:�
��X9r�x�Sc ��/���.���� ^�S�Gr pAp 8� ���5����p6<k���vo�Š һ�jB���E�Ϻ������,���S��V�2,6F��rp�5���¡4oAx���V̴N��\c�;�E�a3�ïX��?��¢3��>�j�p���Z�O����; ���Z8������NkBG�����S?vY���K�`�ʊl>���}EfЉ�LB?&���:�V8@B���6+�aP��D&�MVU�*�Oϝr��=uT�]��A�m;�M���E���qGB����95�} �4Z2�C���0��b�5:p|�����������j�n6� ��
oǮ��X�g�[3.�`7JM��ll��:߮�� -ʊ�� Z��V���m��= o�. ��=FX���"�F�f�I`詣r��q��{3"��7qܳ<zF�)`nQ��x���_�#�r㻌�RR�.2?d�$�U^��Mx1���
AFO�Tb - -�Qt�(0�k{Th -�S,� EW���u� �r!��fU�\2��B%��vw�c9���q���~>3ƾ|�����}~�a�ְ��2kx�]E�� �����m �_������ӌ#�:?<�C�:aR6� :UyiyS̫�����닷Ԧ"Z�HOTY(�Q"� �WA���] 8�ld�D!�#�y�S6�g� cTn(��)a3��tM8$]�t2�zn҈N�*�y0�0��w��ސ {ӓ�0�vj�Rq_��D젱�����ڮ2�fjʕ/�(�Y���JX/E��n�C�f�oE�P��MO�{���"ll�:gq�I -Oe�\j�&�'��C� ��l���N^Xi_P���ԧ�����#Bm�O�Ҋz晫�j�! �o�ojkn� ��c�;�S�� �i� ��� w8�&Yi�ni@�p�.�~NŔ�$���:_v&~Ж�y�cZ���oڛ~��*�M�1�p��G�7���n�� -8�Lu�(�g0Vx��m�,��ѽI��5Q��>�A��W���$�=�#���(i)���>� �(�&H���m�L�4�R=��gHV��K��.�MZ/�f�u;i��������u� -�ȌB�?f��r��(Gs���y��<�G��DR����������^�� ��D��ß�Ϧ�߾��)k�8ݔ -endobj -1325 0 obj << -/Type /Page -/Contents 1326 0 R -/Resources 1324 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1303 0 R -/Annots [ 1328 0 R 1329 0 R 1332 0 R ] ->> endobj -1328 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [87.6538 683.0228 137.7628 695.0824] -/Subtype /Link -/A << /S /GoTo /D (tsig) >> ->> endobj -1329 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [370.941 574.3534 439.613 586.4131] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1332 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [432.8521 316.5051 481.8988 328.5648] -/Subtype /Link -/A << /S /GoTo /D (DNSSEC) >> ->> endobj -1327 0 obj << -/D [1325 0 R /XYZ 56.6929 794.5015 null] ->> endobj -434 0 obj << -/D [1325 0 R /XYZ 56.6929 474.1474 null] ->> endobj -1330 0 obj << -/D [1325 0 R /XYZ 56.6929 446.055 null] ->> endobj -438 0 obj << -/D [1325 0 R /XYZ 56.6929 366.5019 null] ->> endobj -1331 0 obj << -/D [1325 0 R /XYZ 56.6929 335.6 null] ->> endobj -442 0 obj << -/D [1325 0 R /XYZ 56.6929 180.4336 null] ->> endobj -1304 0 obj << -/D [1325 0 R /XYZ 56.6929 155.306 null] ->> endobj -1324 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1335 0 obj << -/Length 2914 -/Filter /FlateDecode ->> -stream -xڭZKs�8��W�rY��b@�`sr'㩉'�xv�vf4Y�P�F��x��o7�C�#e6�6��_���_4�IȄ�g��ÄEɬX��� ��?�윹�4 �z}s���f*T)Og7�/2)�������� o.�O�<aA�Γ��/��R��Ǜ���]�����4���˟���������՛��y$����3/���邨��� >�_��~����M���~#&p#���;�-`�?��P(�� ���H)>[�ĉ�X�S�|:�G�p4j^��/2L$�| -T>&*LF���=�|ǣY�*I8Ne�y,C%$7�P1���c�}� H ����k]w�|�c��eW65�����_��Nۅ�H$X�'a��A�:7+�K3L�,�p�8�,����TJi'�c�Ҡl��c�<��rWa+ �:�N�`�=�d���Y�L������*�<+�M���ھ��������}�iz���D� ;�}$rQ.q��6R�q�p"TQ�f��d`k�� -_�d��]/����F��|X5D�m�3o?�$��P"�즃�|ەŮʷ���դ ����N_o*��~�vS����t��X�e�jv�� -s{ �]�����5�ܞ��7�]Օ� �H�m�s�a�xb8]���@�P��$!�#bD�A�˺�f�'��}� 8�bM�Q� �M^�~ ReUє[;�j]u�8Y��݂&�+U ҁ�J�s���t!4t'�`�w� -w�
ğ�� ���ah�K+;;�m�pؾ�h_^,�Bږޜ���N<Cq[ # |}�i - ��D:K ���ǸM *c�>�9�9��,�zD!�0Q0�OC1������,���݄�9 2�Q�R8䉐U�v>P�a�E��r8 C ���z BB�2g F� q &��>�� ��(�: �*w��
�0XCb�[�'9 �@���c�aG6l<6T&��ςM�"|����(��l��|���4�h�`-
e�e�Oƞ�c��Oo"�sX� -�^�2= -_��}e��9F� �M|>L���#�ƚW&�Qc��I�H�˺ �37e�� -���6V+��||[���I��Ԟc��W����$��I|���(w�Z��.���7!Md��M��Y?��$�I����*��� �`cT�ܗ 4�T( -� -�n�>�TCW�SV06��8%-�c���@ S�:*X�]N}�ȁ��Cw� l� [���SN�g���*]8�%�Z�̂bY 6��� -齋
��� \��]��j֖�xaB��fo}�!��
��Wtl(���e=L� -q�����0a���v��NYZ����F -���)`�Q*�q� /8��s�*�b��$��
�I���c ��(FZs�)8�MC�X��zf�v�$/1��w�'��$:>���~e/� �����ӊl��䎆��LE/t]ؾ���!��qu����P���(�dѓt��C!#�8���i� �-H -( 0���-�Ӂ�G�x��j:
vk��|��ήn͉��J1��s��� �zg2����o�ɂ߱>!i]y[�C.� �!.���= ��E�ޔ�^����o'������r4R?��j=%��3fGx�8V�����Ρ@h
���ZH� �Ik|�+�_���9�
W~�E�h�:qU7���]p�6��+�=�\�*@t0�H�ؑ��1`��UH�y��M��"�S��A eA���~ �KL�.��4`�g�fC#����aH M�z��N GI�D�'og���"c�R�,�>ug&���B,<�ʞ(��C��12�!B�э-K���2 H ;�R�o-�ۖ@��+Y�{��<pQ{ K#�A�e��@�T���FeP�+�yʷ�c�5��e���u�3.ʣ7��P�� -k����r���Ͽ{.�a�"d2��69����%�/��_�,�@����/_Ҕc|H��fW-��5��E��7�j�=4�ϣ��䎥/$H�Xh~/�+�O��[*~0d�D��[{���p�b������
�ѧBN$�����E��� u{�L�]�APt�s8��oe�,��}��ܾPn5�Վ>����Àn���ۆ���?>�7Ae$�a��}h���z�-B�j����.n_���������q�}Ի�x��m2�'`1��%hk��sr����/�];��7�Ĉ� �Z/ͧ�c���d��c�_7� ~ -)�oKӬ�A��!L[�� K�}��?�<�="c�endstream -endobj -1334 0 obj << -/Type /Page -/Contents 1335 0 R -/Resources 1333 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1338 0 R ->> endobj -1336 0 obj << -/D [1334 0 R /XYZ 85.0394 794.5015 null] ->> endobj -446 0 obj << -/D [1334 0 R /XYZ 85.0394 731.1791 null] ->> endobj -1337 0 obj << -/D [1334 0 R /XYZ 85.0394 700.243 null] ->> endobj -1333 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F21 658 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1341 0 obj << -/Length 1132 -/Filter /FlateDecode ->> -stream -x��X�s�6��� :#��O������Z�>� ����I"@���-���X+�߮vB�.H� ������m �Z�tm.�{�|T/��[�ƽ�+��|�;���g
,ꞇ�q8�;Ѐ���/��^�\�9��V|��v -d�����T�L٢r� ���c�$���6<ͦ9�3K�����ܡ�`�5�fŮ���<��������d3�4��y�2"e������ջ�-i��J�&|��i�vV�&��� -���)���h
�6fE�b�kB�>�<9M��.Mφ����h����=���\�j�l�k�q:O8������T%�#=]V ��d�8�E��r衈�7��� ��GA�] �B�X�0!e$iU�fX<Eu��τ�śtc ��;�[���+p5m�w��#�D��{������{�1���Z� -endobj -1340 0 obj << -/Type /Page -/Contents 1341 0 R -/Resources 1339 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1338 0 R ->> endobj -1342 0 obj << -/D [1340 0 R /XYZ 56.6929 794.5015 null] ->> endobj -450 0 obj << -/D [1340 0 R /XYZ 56.6929 672.4064 null] ->> endobj -1234 0 obj << -/D [1340 0 R /XYZ 56.6929 645.0635 null] ->> endobj -1339 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F21 658 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1345 0 obj << -/Length 1074 -/Filter /FlateDecode ->> -stream -x��X]��6}�W�:#�%Y�5y�l�-����<Q��`��H� ��+ -vj����@�tRl��q�u��.��`�U�d��"�P�<k)-E4:z�8P��d8�r ��/�ښ��BϦ���"���TFAxC�9��5�8 -狡�J �P�å��g������@�}�X�Ur��� �p����� �l(�c��sH:Z�'���H�?�"2��^ ��,8���� �1� -�X�"}�+�g-���7��1���-Mf� a<J��D��#�'(;Z�r ��� ���S}9%-ƧP: -�"�]�g�JeV�>_ǹ�8�H^��c�`�$�9�I�~I Q�<ϵ -��x>�e��=3�T�-�� �H�}M�y�f�̨� T�yT�M & +�458I�ڛpe#J��zPZ�D���M`�A���4 -�����&�a�M���� ��;�"� �@�0v���_ϟ��� A�f�%~y�#���E_��o�;tpvV16��C��S����k�R�D��)�S!6M��Z�l�9�!/\� �M@��0 �2�.�4����X>Nz��Y�O/ -��v�a��*�Jל2X=��#�L:��L�]��! IeRاOW����_Ab�Z�Z��G�a
E��R����ڌ��OB>���OgT��s��hKg����� �0~ߦ\�7�d��J�L��*$�?�L�}3��Z�JArJ���\���e��U̝[�]�xB��:�� �v ��X�\;YުC����*ݲCWBarRZrDj��I ȮO� Sv�>^��bR8k%� }̼%��D�m3_�ܾ��/
$��endstream -endobj -1344 0 obj << -/Type /Page -/Contents 1345 0 R -/Resources 1343 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1338 0 R ->> endobj -1346 0 obj << -/D [1344 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1343 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1349 0 obj << -/Length 1975 -/Filter /FlateDecode ->> -stream -xڭX_s�8���<S��D��<�ݤ��mv/��\6ӡm:֭,yE���n��)˩�K�7~ � � -�.��r;��GX{7N&�B�P��|��:Φ+�(���]9�y.���}����@��r{}��Y&���/��0Jxp}��Q��.߿����"OD����_�Ww��: onn NA�3Jﮮ��n�^� �?M���]��<Ƌ�9���\�� gq�'�L8EM���,�q�9����o�����:�?�Y�ј��s�R���`i �ց��0�<� �� �V�f���4�v�i��Ǧ�X74�k�١�H�h��M�Cө�4]�4O��jV�S e��k���k��p��V�[m6aWn��z�]���l����kI� �I��ҎoUqnž��p�L�7}- a�Bpy�� -r*ʋ@�� ����HT�&�Ϋ�rO�&��� -�H -� ���k��+��oF��� [��FSM��s3�� eQ��ı� -�� - \@.p���teعp�ˍ� ��&T �P���)��] �gq�>�V6�� ��� ��!w��=�p�� #dY!h�
!>�S���IV�9m������ ���� -�@���f8@�5��PUE�4�.#db�EB�d�#g[�@�8�)9p�l -endobj -1348 0 obj << -/Type /Page -/Contents 1349 0 R -/Resources 1347 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1338 0 R ->> endobj -1350 0 obj << -/D [1348 0 R /XYZ 56.6929 794.5015 null] ->> endobj -454 0 obj << -/D [1348 0 R /XYZ 56.6929 493.3884 null] ->> endobj -1351 0 obj << -/D [1348 0 R /XYZ 56.6929 463.2745 null] ->> endobj -458 0 obj << -/D [1348 0 R /XYZ 56.6929 463.2745 null] ->> endobj -1352 0 obj << -/D [1348 0 R /XYZ 56.6929 438.8631 null] ->> endobj -1353 0 obj << -/D [1348 0 R /XYZ 56.6929 438.8631 null] ->> endobj -1354 0 obj << -/D [1348 0 R /XYZ 56.6929 426.9079 null] ->> endobj -1347 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F21 658 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1357 0 obj << -/Length 3410 -/Filter /FlateDecode ->> -stream -xڥ�n�F��_��Ѐ���əx&v<Y��@�Z�,&���=��o]MQ�Iv`]���j鉂?=�|�l�&i�b�����j�}�/����A��o .��$���$���`�,VY�'�_��ps95^EI|9��������197o?�}������E� �}���������Tg^�|#+�2���?oz������/?\�<�w�W+����_�d���B�6���>T���L����;kfu���_���^�:F?g��'9@&�c��{}_�C�����J����j��L�^�8�R}�J>��vyl����8��[�n���y���I����8�HiS P���%�V��u�*���5�,�oU<���W�Q�yVn: �- ���n/u��U5+�R�h�� � -��[ǹ����-auk�����L�5��[�l�Y��h�r�(�b����xF�~Yw�}��r�����l8��tT��F��n:��w���G̹cSl;��s ����>��G�7X�_tQ�n�o7��Y)3;>+�(�
T���C��֛U���]����M�@�l��fEǒ���3wCL�ѩ�˂^ -P�<�G�f˨��N�aN�N� ��h�E��*M�;F 롧 -.H�{��Ig&KE�q�y<k�ň��9H�&�P�gkm���d�][<�I -�=�U��[�>kv�9�O%�v M���[�q�t� " �U&M�Vz�j�X�/Bx0�d�"Xt�t�$y�Hd�c�8�8p����.iYĬ�Ϩ�v
�xI��f2��E,q�:�W �Yꏁ��W(� ���F�} �V���R ���&�P��a#� ����d�� �0�P��DhY� 0�F�(���^~��� ϩmT�V�/.��1� -�l�� �<:#t���X��Wٳ�����͆����zAD$�ɫ�N^���ϼ��z� {G -���2�!f�j�;�� x��
t·� -N0L��ͧP�yW<� p&�Oj� y���{����.�O�D1�q2/��+;H�0�3Ν� �E/�m;�<8�kh�A���&b� �8��լ�Y*Wc���븮�|C�̖N$��I��$��1h�ۀ��VHm8��1$ H�i�
�Q/H%�������� ���pgD|edrwR
.��DP2��PG� -,M�۠���lDp�n8wx��hF4����H�s>�� �������ąV -b���]��\�=e� U|�����h�W)��jd���ÌW��Y���ӔNb����`j��T��*��4<
/?'&D����&����B�E��5���C�� u�%�9ݍ�S�d1vٰx��m����a�?����zX|K��(�u�ۏ ������.������=:������S�/\^�!�"�� ��z�-Jy>�h��u��m�g|_��9�! ħ��@魏�������o!,��Y ��=��� ���ܐ�ֹ������w1���͛R��k��dA�2���J�8��L�ژXrU��� -d�������װ�i����e��_g'���x���x��s��M -ǀ��n�I��Sx�?{˷ -_�r��3 �:=��(x?4�.��Ts� -��:X{@Л�L �6�>�>|#K�� ��Q�5��2�;>��/ -`c�G���W�����0�8�e�` ��3M9�1�g��f��L:r��^܉endstream -endobj -1356 0 obj << -/Type /Page -/Contents 1357 0 R -/Resources 1355 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1338 0 R ->> endobj -1358 0 obj << -/D [1356 0 R /XYZ 85.0394 794.5015 null] ->> endobj -462 0 obj << -/D [1356 0 R /XYZ 85.0394 167.2075 null] ->> endobj -1359 0 obj << -/D [1356 0 R /XYZ 85.0394 139.8789 null] ->> endobj -1355 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R /F21 658 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1362 0 obj << -/Length 3030 -/Filter /FlateDecode ->> -stream -xڵ[Ks�6��W���rU��I�Gg��:��Y�s�Mr�$x̲D*$5����)��@��)�@�#��
��a -��BE$Jx��Iej��_��gh��9̪���o .��(�EB��G���^_�P���a��2"�\Bt������w?�_]�r�psw{��.?��p����~����rŴb������� �"��77��bM�?g:���x}}�����/� :[��2*�!�_��]l���/(�V�x��% _�/�DI!ښ�ŧ�w �Z�W'��(�"��bʁ*!��&������L vi������rk��]q؛�Ɩ���OiQ�� - �L����[|�P^2�,�bS�i�Ԙ�6[�S�P���l�bIL+���E�Z�i�"��pfN�M�[߃V��D)�X�68@��l�_)�T�x��',Y��&�+��&7Sm]j�r�}B��A���a�٥(�0փ�WD�(Z�DL� U�$H)m���uV�ՈK�ČE�(fDqyn���p����w(�P��/+���u(�1A��qXz����c�0�}�9�HSؚjSf�7��x��nʥv�04b�yM��g��N��`���X~^`�gq���x�/��9g��""�* e �g�C�(2��*BΒMB���&[ [�:���GSNp�*dޡ&��\~�H��ߓl�C��D �&�X�����X<���\� �%�a�w�Eƽ��FX�t<õ *��u��L����!�8�� �dP~��P���
��P���[ߎ����q�q�R+�x���g� ��v�E1�B���;Ԝ"�ނ�S1l ��a\ u�q �4R��X�8����H��w� �>� ��8���=�% �NV �Ɖ����o���T�nŷ?c�߿���VW��A�w�Eƽ��&#�c�g��C�֢�D �ա�e����0l���;Ԅ|�nfz,|>u�� -���ϯ��O���s$�1:�� �n�(|v0���+�hC�� -p��=\_�Pk�3�����8`L+8�J��a w�9EF��i��i2G� *@�5��+8q���6�?�IM�pT�CMh�,�`�f������M�J���&) -s�%�c6æ *��u��n7px�r�\DYX| ��qK0"4Ty��� :�b <昽<�ȅ��Qó4�i�3F��};�b
g!���Ps��z �k
J���Q��֡N#���\f��j'Ua�-hB�O8J�����{�3c�8F
\V��D�i���Ձ��X=��/0Z4a�w�9EF���l~����PƵ��PU�z7�k����5!��' B�P�﹀��^ ��$ \ (��,
^ 8����~�η� ����P3��{ ���+�z4÷ *���l<MiO���HWu�G8N�T"�@����g\L�=�{*��& rN��Q�@��0 ��l
�8���z��_�q��K���Ps��z r�%�D����Q�9סzV#�����k�dF�5��G:ɉTt���,�S� �k8~Eq�R^� -�M���5 [�����~��f����]���!��1n<����U����f*�6�:Ǥc���%} |4�q��̓�.�� -M�q��!Y/�m> �o��h{ -�G���1}�uwf?=���VzN�yɖ���]�Y��jo�E�����j�K!v���j�,k.�b�:��$m`�i�5�(iN���:}vN�t�-�b�sB.���#�Xʼn*��PTvgm�){��t��lxOwX�(r�-3wMO6%�T��ɱ6�Ϙ��'ֺ�%�]���I ��b?�Ɔ*=}�� =�nZ�mv������jfc��xZ���^��f��ր>�ׯ^*���@_("�o �ύ���x��?�� ��.��܇��T�:5���}�?V��endstream -endobj -1361 0 obj << -/Type /Page -/Contents 1362 0 R -/Resources 1360 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1338 0 R -/Annots [ 1365 0 R 1366 0 R 1367 0 R 1368 0 R 1369 0 R 1370 0 R 1371 0 R 1372 0 R 1373 0 R 1374 0 R 1375 0 R 1376 0 R ] ->> endobj -1365 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [284.2769 667.7189 352.9489 679.7785] -/Subtype /Link -/A << /S /GoTo /D (access_control) >> ->> endobj -1366 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [282.0654 636.5559 350.7374 648.6156] -/Subtype /Link -/A << /S /GoTo /D (access_control) >> ->> endobj -1367 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [299.7586 605.393 368.4306 617.4526] -/Subtype /Link -/A << /S /GoTo /D (access_control) >> ->> endobj -1368 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [292.0084 574.23 360.6804 586.2897] -/Subtype /Link -/A << /S /GoTo /D (access_control) >> ->> endobj -1369 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [330.7921 543.0671 399.4641 555.1267] -/Subtype /Link -/A << /S /GoTo /D (dynamic_update_policies) >> ->> endobj -1370 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [401.5962 511.9042 470.2682 523.9638] -/Subtype /Link -/A << /S /GoTo /D (access_control) >> ->> endobj -1371 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [257.6971 346.6843 326.3691 358.744] -/Subtype /Link -/A << /S /GoTo /D (boolean_options) >> ->> endobj -1372 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [310.7975 315.5214 379.4695 327.581] -/Subtype /Link -/A << /S /GoTo /D (boolean_options) >> ->> endobj -1373 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [308.6055 284.3584 377.2775 296.4181] -/Subtype /Link -/A << /S /GoTo /D (boolean_options) >> ->> endobj -1374 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [294.1999 253.1955 362.8719 265.2551] -/Subtype /Link -/A << /S /GoTo /D (boolean_options) >> ->> endobj -1375 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [303.0862 222.0326 371.7582 234.0922] -/Subtype /Link -/A << /S /GoTo /D (boolean_options) >> ->> endobj -1376 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [332.9347 190.8696 401.6067 202.9292] -/Subtype /Link -/A << /S /GoTo /D (boolean_options) >> ->> endobj -1363 0 obj << -/D [1361 0 R /XYZ 56.6929 794.5015 null] ->> endobj -466 0 obj << -/D [1361 0 R /XYZ 56.6929 726.6924 null] ->> endobj -1364 0 obj << -/D [1361 0 R /XYZ 56.6929 700.1172 null] ->> endobj -1360 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F39 863 0 R /F21 658 0 R /F48 885 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1379 0 obj << -/Length 2951 -/Filter /FlateDecode ->> -stream -xڵ[�r�6}�W�۴���ˣ���&vFVj�*��͖SdO/R��� bi��<q��j8�]pp\Pd�� Yh�03|� G�X?^��=�}A<f@�6��ۋ��cja��T.n���4�Z������������rE^Jt�/��~���1����﮿���ͥ�����]��ջ����o�.WD �S��� ��y�J����77����pqumi�K0�����_�bf�p�3Z,��#b ]<^p���������ſb�����1�q���\.V -+�Lɘ��zySd�i�7�� Qt��q 7�F��`B ��Ď�y� ~|��M~X�ݱ�+WQo�b=3�B�r*t�� e1 2 ���&R�WFuLt����+ܴ���c��:c�g�,�D��� -af� Q3� {����=y�A�s;���fx�2�Ϭ髺*_<m��f(��1I�Q�+��a���O��ޖŲѣ��v�����X�߇�::`Vm\��x�s�?�*?@ �\-���5�x衡!�m:0�'����
�J2 tv�o.W +;-*�Z0Êw�����F���]n������NPd��M���%��<;�����~���=�__�;��0=�c�&����^��$���A4����FM�+��Y�z���7bQ��"&-8�F$wƇJ$������<���~{*�3o\j뛁�7p�����Ve���o�f��S�c�Z����-�'L�Y�HĐ&�x��I��:; r/+�X��g�N��5n��t��� ��r*� �=�� �_��L<_��o�mt� -���1�Rծ2���%,��� -�|~(�q$�f�:��t8�y�Y^���S��geY?{�\MU� ��Uw4�ծ.L0�(lS$� ~��fz���6$�%��A-�[��' -{W���YlY�OX���Ӿ�J(�P�i�{m��Vn^@@����6�>;v��Y1���r��dy��w7���K���=�S�C,k(qp�B2��U���@$� ��i}���U�d:7�����u���� ����� ?Q���b�5��R$� !���k;+�oU9�jĸ�S�&�7� -�杳dz���G�ى�B%&N@u&��q����O n��tF��Ѣ�6.Q��F�>.�PRm���1����n�� -�{>�k '#xy �����IOs͐4��=�FM{:�y�N�Q�������
N Q*LW����a i -k�6;�GW�u���=: x����n�"ͯ_v7ye�%X�3�tzmV �zh�t���\ |�1�985��F�~ �OTp�!pH�OT(�jհ��!���0b�j����� .�+$%�?f�= M
��o��H_���9��S>f�� �ʟ�� �RK&f��B%� P���W�R��}�( ��0�A��v�&5�J���j������::�ܴE=5�DL)5��aZ#n4��H�D����~��<��6���q��E��%�< ë���P ���r���k��ZZ��Q��B{.������S�Y k�`!� ��k[�d��Ϙ?���,�wfZ��!�f��d!S�u I�h��4 6��q�A��B&����"]����/"`۞�Vh"�4��=�m�S ���^_�? -3C0i �=���a�F�L"��Jp/����(�l�*5�K�~I�z��E�pۤ~�in����4%:V'���3���b��J�C -� ܾ����J[�p7 ��-��ۑ�
�4�1��ffQn����Z �0l�c� �����ڣcJz
�w�,줅ֶ����W pX�a���&!|��j�~�|��s���'���7��ޮz�B�cv�uCq8�����w��j�Y�oh~7��]�qtWi�{Wp����ͱB\���#�J���8���&����Ў,��9_�MR���3q���&]D5f����,6��ee#��i$߭Rh�T#�F��D�tX�Q��ד� �0����P -���)3y�?c����/��;@p�H�BD�h2�-�p�
X�ebڨ�}
�:7 ��~=��6�g���-���Ţ��ס߄1=
FpM �l� {S� �ˇ������L�@ -��ƙrr��G��.��?p�� -���q�a�45*(eW���`��T���?탄kendstream -endobj -1378 0 obj << -/Type /Page -/Contents 1379 0 R -/Resources 1377 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1392 0 R -/Annots [ 1381 0 R 1382 0 R 1383 0 R 1384 0 R 1385 0 R 1386 0 R 1387 0 R 1388 0 R 1389 0 R 1390 0 R 1391 0 R ] ->> endobj -1381 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [259.4835 736.902 328.1555 748.9617] -/Subtype /Link -/A << /S /GoTo /D (boolean_options) >> ->> endobj -1382 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [387.5019 437.0578 456.1739 449.1174] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1383 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [381.9629 406.178 450.6349 418.2377] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1384 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [398.5803 375.2983 467.2523 387.358] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1385 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [393.0412 344.4186 461.7132 356.4782] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1386 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [255.0796 313.5389 323.7516 325.5985] -/Subtype /Link -/A << /S /GoTo /D (boolean_options) >> ->> endobj -1387 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [311.5276 282.6591 385.1809 294.7188] -/Subtype /Link -/A << /S /GoTo /D (tuning) >> ->> endobj -1388 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [381.2254 154.1545 454.8788 166.2141] -/Subtype /Link -/A << /S /GoTo /D (tuning) >> ->> endobj -1389 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [335.4973 123.2747 404.1693 135.3344] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1390 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [363.1733 92.395 431.8453 104.4547] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1391 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [365.365 61.5153 434.037 73.5749] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1380 0 obj << -/D [1378 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1377 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F48 885 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1395 0 obj << -/Length 3132 -/Filter /FlateDecode ->> -stream -xڵZ�s۸�_�Gy&b ��)�8��=������偑(��D�Dʎn��w ��H��\:�� �\��o?@����3� �,62P���rw�f�����;�EM�hS��p��w"���Da4{X�x�i�g�O�(�k���o>ܽ�}�����X� n?�]/B���n�~C����������k��o���燛{Z� � n��Ҍ����7�n�o���\~�������֗3���v��3��@� �X �V�g�a7&������B�3۫�W�� [���!�I��,���F�A�9�Ē���1rȇ�\S���m��I^���5��EY �t����A\!��.=Y<Հ0�% ń`�+��4%/T7X�������i�X�`g��8`�4 ´Ng�p���,?W[D -�k -����qF���<���|� -w̋*[�.a����v��v��;�U����' ��8�;�z�a�KP � -h%���� -� �U��Ё��3��������mc� -�}:�I���q�G��ĺ�� / �� �|/�<� ��@k -�N Ң�#f����sN�oB����7F�� -�aXC�B�P?یG��&��'X<._KZ��Lv�jr�A�h ������SV ��Sz(AGw��+"2��mEW +G��iX�˚AC��Ht��k���x�#� [A�䧶�����|��Vc e�Y -E ��+z�+_ �/G�d�9�K(�<+隧�na �0c�h�b�=�#} 3��<]��<u�T��)�ĸ -�qeM(4�P���R m ���� ������ ��5 b1O�%���):`�G�i.�[� ���&�DA��2%�d�rz�D��=�rx -6v�Dmӧ�1X$3�:��x��V&�P��*k��mQ|-�L&��5��1��s��������� ��(%�I8x��:���F��K%
?_��[��P���lt���2a��8��)*{ʶ�#�����=�Х����&qϕ�� IP� -��:J
鲢1%6�]�ǃ� �D�@ڦ���B�0�-�6v�J ��%L>c�#W1M }ܛ!��=���9F�KL�°���y"�(ʸ�į�~]� hږ�L�uLȹ�� 5u� ���ɉ�'�>��=g�%l�R�e[U;p��m�9!.v�=��tk/g����Y �LB���v�L|��l�����_Kl���=WQ�A1�^�l�>[r�Kk�N�2����=��dE#� (B���Y��V
ǭV
�
��ڮ%ty��Ϳh�~[n���=j� ���MqN7g�uI{�- �r����4u�P�/�I�v��;{���Ym����= -�2��I ��DϤ���h�= �gJ`�\`����o�d�Js`�b���Z� 4�ZA��;�
�'���K���>� ��0W��
&]��-䊡�G�@o:���;adž��ѫ620�ט`Y��CB �Ou8Ū�ˡp5 q�C��S�n�U�� PoH h)�g�^ �8�l�?D��椊�_#8���Y h��y�w�B� �w̓�-����Q��ށ���߅� �L��� 4Z_�)N�R�p&T -endobj -1394 0 obj << -/Type /Page -/Contents 1395 0 R -/Resources 1393 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1392 0 R -/Annots [ 1397 0 R 1398 0 R 1399 0 R 1400 0 R 1401 0 R 1402 0 R 1403 0 R 1404 0 R 1405 0 R ] ->> endobj -1397 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [364.6945 737.8938 433.3665 749.9535] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1398 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [374.6372 708.0059 443.3092 720.0656] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1399 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [292.0276 678.118 360.6996 690.1776] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1400 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [319.7036 648.2301 388.3756 660.2897] -/Subtype /Link -/A << /S /GoTo /D (zone_transfers) >> ->> endobj -1401 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [460.1655 618.3422 533.2211 630.4018] -/Subtype /Link -/A << /S /GoTo /D (tuning) >> ->> endobj -1402 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [362.144 588.4542 430.816 600.5139] -/Subtype /Link -/A << /S /GoTo /D (boolean_options) >> ->> endobj -1403 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [293.1435 558.5663 354.3435 570.626] -/Subtype /Link -/A << /S /GoTo /D (options) >> ->> endobj -1404 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [288.6803 528.6784 357.3523 540.738] -/Subtype /Link -/A << /S /GoTo /D (boolean_options) >> ->> endobj -1405 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [328.5503 498.7905 402.2036 510.8501] -/Subtype /Link -/A << /S /GoTo /D (tuning) >> ->> endobj -1396 0 obj << -/D [1394 0 R /XYZ 56.6929 794.5015 null] ->> endobj -470 0 obj << -/D [1394 0 R /XYZ 56.6929 484.6014 null] ->> endobj -1051 0 obj << -/D [1394 0 R /XYZ 56.6929 459.8194 null] ->> endobj -1406 0 obj << -/D [1394 0 R /XYZ 56.6929 84.3175 null] ->> endobj -1407 0 obj << -/D [1394 0 R /XYZ 56.6929 72.3624 null] ->> endobj -1393 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R /F53 962 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1410 0 obj << -/Length 3082 -/Filter /FlateDecode ->> -stream -x��ZKs��
��W�H��^����fg<����Idm���%�-f)R+R�q~}���d��ij��l��/� -�� ��Ys�`Ym2���e��Xi������07i�>� -$� -cST��"U2ߩ1 �Q-2��(�R�T�z���C)�^�s�\i\ ��?�n�*���r�S �nU�]9oAkIG�e�R��2����?�q�����2Q����8�CJ�[��z3W�����zQtnA/��. �^T��5��y�1o�8����u����I�Di���zB * -�2 -���; ���&C����z�d��(�U!4��ׂ�2K���)È�JR+r��s��0F��?��b^l/ -�������[��>�ݺ��e���}t�K7wGV�2C��� ���ȩZN{fn/Uz* � �%`0��\�� -W���!2/�����Y��<{���q�@�o�9 � �z -���z�E��=�@3�ʈ<�zߍ?��>��!�r� 4+��w���\$�E:�lH�|X�yR��Fd*���J '�P�2y*�̐J>�Z��w{�\ v�i��<�IW۶����� y��z ������ـ�Y�o㊂b1p�`- -Py�V 鎮��_��B���a�!ר�y�!��S<��í�q42��C�à ,���-�'���]������ �0 33O���~+�6�����v$ -Y������( -�<�? 4��3n�*�GJ��a����>�M��#� [7F>pʣ��Ó�<�T& �h�����:�Zs��<W��Q�ـm�*�1��
����E��m3/�n�K�ݒ��#��o̅�<,���cI��� -� u W��0�-ۮ/#�o�m�/���C������X��)�?ҳ8���}x��e�vCö�P �$��P!y��{��ĵ�v3w�
��`B24��e�]��@P�:�,�� ���fx�a�� ڝw\�Ȓ�"�; Ǭ�xJ���6���}E���o� ���$ ��7�̗6��r��̕�>�������q�9sO -B��ɄBc?�k.H@�÷��$� H+��)L&�]G�`����[����}�/�`��1<���GV��H��M1��R��O?saC���c9�z}��u�V���냪ͻ�[� `a���CrU|�{���DD%�Q �=b�C�,�ޠ��� ۜ��P-���, ���kR �E�掽u M�u�)��5��U�T��� ?6f̍���RJ�c@�.9��š�7���& .�i��#�;yD�C�u�����BP#�r_� `]z�n�0AX�u0��@�� ���xA���m�~ � ^h���Re d�s���Z�Ж��W&\OL� �L�-�I�y�fy��'�#�����Tлi��j$\
hM��<,r�Q��Kcr>*M� �����NMM���L�����1��V]��x���b� a�6��#��W��ps���3 -<�v�*ly���}.�i,��� -� -endobj -1409 0 obj << -/Type /Page -/Contents 1410 0 R -/Resources 1408 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1392 0 R -/Annots [ 1414 0 R 1415 0 R ] ->> endobj -1414 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [341.1654 214.5127 414.8187 226.5723] -/Subtype /Link -/A << /S /GoTo /D (the_sortlist_statement) >> ->> endobj -1415 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[1 0 0] -/Rect [434.6742 214.5127 508.3275 226.5723] -/Subtype /Link -/A << /S /GoTo /D (rrset_ordering) >> ->> endobj -1411 0 obj << -/D [1409 0 R /XYZ 85.0394 794.5015 null] ->> endobj -474 0 obj << -/D [1409 0 R /XYZ 85.0394 424.823 null] ->> endobj -1412 0 obj << -/D [1409 0 R /XYZ 85.0394 392.7174 null] ->> endobj -478 0 obj << -/D [1409 0 R /XYZ 85.0394 392.7174 null] ->> endobj -899 0 obj << -/D [1409 0 R /XYZ 85.0394 362.8617 null] ->> endobj -482 0 obj << -/D [1409 0 R /XYZ 85.0394 306.2038 null] ->> endobj -1413 0 obj << -/D [1409 0 R /XYZ 85.0394 283.8925 null] ->> endobj -1416 0 obj << -/D [1409 0 R /XYZ 85.0394 197.5762 null] ->> endobj -1417 0 obj << -/D [1409 0 R /XYZ 85.0394 185.621 null] ->> endobj -1408 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R /F53 962 0 R /F21 658 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1420 0 obj << -/Length 2921 -/Filter /FlateDecode ->> -stream -x��[[S�H~�W�QT���_v�� 3`�Tewf �-�*��Z���{N��-;� -��!�J�n���߹�VĀ�_10�� ��� f0��������Hs��I{�Yo/w~:RnX��.�;kyƽ����e��� -<������4<;:� -�uu�a �M,p�,f^W�ۼ!���Vd�M��ʚ���4=���OFȚ���#�D��`]�My[����8�kxIP�����吭rW�8o��!��g -�v��`p���;����ko�60倃{�1�%�;������H�Pk�U �i=���aD�����r�9���ӑ�*��-{�y| 9]Ӭ� ��6�B��U��q9JZ{^�c��sI� *F8�w1��QD�6�עb�onT_� :����N[lA����n��G���5�K�� =!����ڨRo�֨�QEa�Z���Ur�Lk �=���N?���z8+����r��{t@@b�+o�m)/��)��=�z�iǬ���uF0�<i�>����@�mR�%�)�����n�����u ��[�sھ� >�Q��O&�� f%��z�X���y�*�3�r��i>k�|��4)z��i����� �������׀r2*i�aSV���4Uj�:1�o�pS$� -]�����P/���K���=>ō��㖦4�{��@"��uu7!�<d�_�� ���i�+�0�Lo�l!=�^6;L� -d����yg��2Wp��� ]�{ �-=�>TÜ�A_rtg� -ls����"�q�p����i��Z~-��Y�렲�pt���V�kD�e �!zv -�� W�W,��qu�KӪ.1sH�^�M �7����^%]�pz���V_q|��gF�����K����'G� -���G"(Y�AF��] �*" Or�b
�FX�q�Ig���@�{��ڧ�2�Df�4��<�s _�;�����R�P�GQl$U- �i�\*[� -��J��8 �cs -�=��E�X��+g��!DP�g��=�RѾc�z��W��:^��:oEo��~�2�d �vz��V� �DG�\ ��:��]�h$�$M���x�ի��R���y,2��r��i�u�R����{��q���z�z����� H�Kׂm������I��x�k - �шPb������߷�"������1%��u��&�g}��keJ�� �l�E/����)_q�K �w=�W �t�$��"�+̎"�`/k�y����� -'�U,ߪ%|aJ�u��0 ��i�=^ og߯��A:aYO)Qq͌�dHQ��;QG���� ! ��:�H��k7|a�<�`2ER��K�lH'z�!MJ���w{���w�D�6� ��y ��p��h�b�J�Чk�(����Yx�.q(��@� ���CP-?���<�n���mY�H�5�{��JHZ�SdYO��.�!��g'�;����4��֦�X� n<��x/�m -� -:�̴J�Q|-�fu�G����ro)XG�s6�=�ـ:?��>X�Ϳq��t�������M�=V/�5���.�uEc[i O1O1���%X -f���}�)�U2ҟ.c ���jO������ -/���K�[�y��HE�E���|�)�;�W�>�
�^�e�
ҕ��f�0��졳���H 3�%k��yD}��us�
:��� ��f��AȢu��� �!�`�X�g�Z�C��!3���qF>k��W}:]! ��'H�o�t���ZOPϹ���;GŅQ�V��ҿLiC��J�c��� -�}9�٣w�,M��`���CQL�C��$� -N@|B۟Ɩ���+L)� -i���C��r ,/3�����/���7a��/��+ܟ�~Mҟ>�V� �Z�������TV��:[�? -endobj -1419 0 obj << -/Type /Page -/Contents 1420 0 R -/Resources 1418 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1392 0 R ->> endobj -1421 0 obj << -/D [1419 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1422 0 obj << -/D [1419 0 R /XYZ 56.6929 695.8713 null] ->> endobj -1423 0 obj << -/D [1419 0 R /XYZ 56.6929 683.9162 null] ->> endobj -1418 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F47 879 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1426 0 obj << -/Length 3296 -/Filter /FlateDecode ->> -stream -x��]s���]��o�f$�;|\���R�ԑ]�i2M� -�/�H�Σ�WB ��n�VC�k�s�Rx��WQ��W�t��|(�J����(�� K�C�?=�C�ڸ�kW����X���{.��iC�թH��,QM낐��u%c�v�U
HA&�w���}�(�Q�| EH�@ �dT���w��{]�٪�9 �jX�W���wĩ@�I ��!>��R��- ��/)�V�AxLZ^+��us;���\E��.Z�X��Q��^_��^^L+; =S͛�[���g]�A
�S�`|"�����TR=���ۼ����8�o��v dz�*_ -� c:�x*DLL?��7A3IA�uW�w��l�����2�U�W� 1� -Gh)5�����o٢�:�%Aa��ψj������ӏt;�*JS?N�<"�H�~iJ�&�NPL�&�:� 1�cbk����\�Y� ��y��E5>��{��)���)p��-e���);�e5+�Y��z�`�������a7k<�F� �?Mޟ�P{g4�D WЃj ��z�lW����t��f�� ���5_�ˊ <� �c����JY^�F�{D�wS,9��L��V*mx��>.Eh�`��&���' �U�
���������' ��"�����eB���v��� ��OC��܅�}������B!�?� -�U����?I4�"�NŠ����S%p��������Q�������a ��Rq� �\J� -So��J5 � ��I�t-aL�{n�p���yW���}���5�d �N���+ ��1�L�bOS>�f�f��H[:�rU�w3;�����
%�R -�դ� �OL+�d����M+�n-��
.����:l�#I�`�+F-�u5�:�HJ�U -�� ��E�U�/��D�W�q��m:�m�[on|�Z>�����߹Ț�}�Ht� �#DeJ#{��j�a�#�#[(h����-3S����[�\������n^B��:�%k1 g%�2)���xk8�M��T\ e%���XQ�Y 8 ��e�!�&/S�� -��/�h?���Q�}��q_��� -�.�Y�~�����t�a� ��BTp���B(I6��1� \gcuL �l�����6�~%ε�).�"�S�z�k:d����I}�va&a�} �� -M���]N��{�vڢ1��}(:��ҥ��,�>� 6 Ж��h�M�ڬ9=L�%c��ռ�[c큹B֘Ӏ���@&8�9���q��� ��&��`[~�4����>���¶�]fnh�L����K�E��/�l�sD����G����K�ي�y��\hC�M6�����zL�,]8x�(���qw�0�W �#�R& \%��|�
���=�-hCe� ��m����Ekl�'e
z�)����]� �?�T]5�I�l����~�Hkլ�K�m��8�����.@�
y\��\c�y�����u,���_��7#zsH��,מ{w�b�1�dt�;QB\�� ` �Pu�`L�Y���.: ���# �[/v �ݎ�U ;NА-
\�ByR����Sw�� �� �%��j׳s)�1�^�Ω�?�ปgӪ��6��� e�+�ι�WFG�� �ͯDU��4=�[����D!˓d��H�~��� ����k#endstream -endobj -1425 0 obj << -/Type /Page -/Contents 1426 0 R -/Resources 1424 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1392 0 R ->> endobj -1427 0 obj << -/D [1425 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1428 0 obj << -/D [1425 0 R /XYZ 85.0394 492.6335 null] ->> endobj -1429 0 obj << -/D [1425 0 R /XYZ 85.0394 480.6783 null] ->> endobj -486 0 obj << -/D [1425 0 R /XYZ 85.0394 173.0867 null] ->> endobj -1430 0 obj << -/D [1425 0 R /XYZ 85.0394 147.5597 null] ->> endobj -1424 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F47 879 0 R /F39 863 0 R /F21 658 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1433 0 obj << -/Length 2902 -/Filter /FlateDecode ->> -stream -x��Z�s�6�_�Gz&� $�{s�U�ur�{����D[�J�N�����]삢$�q�.�L���b���b�� ��'GI*R��(sF$�LF��Y<�����$�\��>�w7g{���.U����ˊ�Z9����B�s�G�zw}u~��8z;� JR�DE��|s5���I�_��G���ߎ��ery���f�'Wo�&Wׯ�����������5����_�Gs��dzXhg��Tb!�S�ՙI�H�֡ey��� �^� :���ҩ�I�!�'R
]���z�� ����B�Y�. -*�U�A�_Aݥ��/˦= ����7=� �ϫ9�͖y�0�ۃ������ Q7�Qi�WU���r�� -R -�$ʫ4/>ű� -�`Q�i}�R�Ts�J��zˆ�*�(����}㴸�7��Fu����d�NU,稇�ј�Шy���Ԝ��e�j5-�e��b��u�i`1X\?̀���6\,� �ռ�*��w
�![mQ�!*V��T�n� �uo2�%�!r[>�\�Z%�}C�h|ݗzO/�� 6-���h��*�m[T\\�m[��[OT��V|�W�e`P� -���4,� �]�H,Xx��`�SA�t�2���'1�q!vׂ��Q;]h����2g����{ -8a�G9�"ɾpM�k�H�R�h �,�cke(d��E~�]����@ ��@ +�r� �Y]5������O�u��bZ��TmWS��|�L� ���7HG�z��,H�� -1�ބ�'��9 k"!��E?M �1E� �ߟ�Q�*�`��<0��!�;��"��H�*�#�Oľ ߭��]���4��N����{����l� �� �)D� 4��f0,�P�J�䗏��Ѣ8 -%������X����������G�d��¤Vd�֧<n�%#�)������G������
��et�à 6Y�H��1�0Ǚ������>w -�Ϥz�X0���ְ#*���O�az>��9J\�� -�>̲�%�����'�K��ЮWː���o��0�����-��y7�C~�5���v>|]Ws~�p�հ&"Б��j�R5������]2�mN%�d��y\����*>3�% r� vuB��F���΄p�SC��zH;r���袩�#~��|���m[PmU�e��R5���� -�t�Ւ �xk
�ző -�m�����U�I`'����~Y���א��fS�7[bv�11�{'���NI�� +8��O��5}Þ�'�{/ ���i��v#�r�i�R�b�Ͼ��-��նi" o�:�2' `��p -���;�8�8Y ����Y 5��q<��;�u��RT<*���wVmk|���3�����e~��� w�ڀ x�Y;�� -�j���(��,�d��.�ã���F��B�T�8s�7�,��nP�Xg�$f�ʿ�A �i
�bǹ���ס,f�%�� �� ��A¾$_� �(3�^ � 9��/9�dC�&�X�h~2;D�t�GG= �F���a|b%�;����'NEb� � ��G`(�]�zs�:�y_ ���8 �2Oo68�SEI���7��~�>Yo�A�<�<�Oo�o�x2'b{�-�cP�������� ��I�zs�@��)�Dž_ ���7Z�$I�~ ��h�����&��IIN^��N�"�٣��_�����d`�endstream -endobj -1432 0 obj << -/Type /Page -/Contents 1433 0 R -/Resources 1431 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1392 0 R ->> endobj -1434 0 obj << -/D [1432 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1435 0 obj << -/D [1432 0 R /XYZ 56.6929 673.1367 null] ->> endobj -1436 0 obj << -/D [1432 0 R /XYZ 56.6929 661.1815 null] ->> endobj -1437 0 obj << -/D [1432 0 R /XYZ 56.6929 493.0122 null] ->> endobj -1438 0 obj << -/D [1432 0 R /XYZ 56.6929 481.057 null] ->> endobj -490 0 obj << -/D [1432 0 R /XYZ 56.6929 393.3436 null] ->> endobj -1439 0 obj << -/D [1432 0 R /XYZ 56.6929 369.004 null] ->> endobj -1440 0 obj << -/D [1432 0 R /XYZ 56.6929 151.2167 null] ->> endobj -1441 0 obj << -/D [1432 0 R /XYZ 56.6929 139.2615 null] ->> endobj -1431 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F39 863 0 R /F21 658 0 R /F47 879 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1444 0 obj << -/Length 2798 -/Filter /FlateDecode ->> -stream -x��Z�s۸�_��>P3 �-۩o;Ut����@K��)E*"'�뻋HJ��\��u2B��X��o� �bb4�*�'i3ͅ�,7g|r}�τ��ِ����O�*�d,Kd2Y�
dƍ���C��o/�-.�ә�<J�t� �|u}N��>�n�/�^�:9M�hqusM����������t&T�%P^�o7��ty��b�q���Ţ[�p[�+\麟 �d���3�=y� ��,���Y�ӱR�R��?�{'p�놎�I*�R�&33����#f�fd��Ru�%U�Th�(5,�2��6/Jؼ��ʖ�g����D�P��~k雷��l[���m���s�S-@II C���|�--[�q��,eF��ȫԌq��@�|F* ��H?�w�yQ�mT~��n* �z���L� t� -P� -�2���Sܑ�T�h�vG?jOl�uc���KkW/��@��6��$cZ���m���~������$:z���o� -��b~��t��J�L����sb�%��<zo۶��I�b�YA1�b�ድ�<��bcgm=�m�t���<a>���K[��G�WN?�����Z{OO"wpvK��Vd���쫢m�3'Qc�u�jܑ�9�L����仢��4� � �-�'ʯ��K8׆Hk[Q 6�ٖ��m��y�F�ƫ H�Uj�l����KZ��(kw -h Y�F ��u��i#d@9 ΅L)�'�� �����y9�A������Ej�m�+;>�h(R�)T�!���wf26oΈ1-�a xZ��.�C�F�K4YہSy3�:�CT��;�[��!��Σ�Y�3���٪�pY
��?�o��ưNT�ۺjl3f�w��
��z�Ɯ�s�M����=7��!�� zuW-�}�%wM0q8�5.���kn�L9����d�P�eO�G"È�v�
3&͞�[�e��(��Ņ�XEzV����d -���pIj�μ�oKܐ[�-Q0 -~�Q� �=�} -F�%�a��D �y -�%O���b�;I�;��x�*=2�*G8�$2=$��TD�� SM p"�Ƌ��],����#fAg��n�T�˶,���FH��&b�AP��W@/Fʉ��%֊�UI2��AEĉJ��<*b_(\Uh��<���m�� _�� ?_=̭��2Ƞ9&Ue� i�ۢ��#w�v -�1��.��2�|�ӧu u����j�6��:pR �3�Ԏ �7,mET, -#�<���T���hp�S�# -�u �ӥD���+{(�� - }.(�# �Q���I��a���aި+W�@�R��B -ua-عlVQ{�����i.���~6R -�ő�nlY4� - -�u[8�F�w������xY�M����U�7 O������7��=|>��4Ëf n��Z��q@7J���1��ë�nU�r��݅� �*��4c���F0�J�=ߋQ -endobj -1443 0 obj << -/Type /Page -/Contents 1444 0 R -/Resources 1442 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1453 0 R ->> endobj -1445 0 obj << -/D [1443 0 R /XYZ 85.0394 794.5015 null] ->> endobj -494 0 obj << -/D [1443 0 R /XYZ 85.0394 711.7496 null] ->> endobj -1446 0 obj << -/D [1443 0 R /XYZ 85.0394 684.4451 null] ->> endobj -1447 0 obj << -/D [1443 0 R /XYZ 85.0394 642.9726 null] ->> endobj -1448 0 obj << -/D [1443 0 R /XYZ 85.0394 631.0174 null] ->> endobj -498 0 obj << -/D [1443 0 R /XYZ 85.0394 462.3028 null] ->> endobj -1449 0 obj << -/D [1443 0 R /XYZ 85.0394 432.3134 null] ->> endobj -1450 0 obj << -/D [1443 0 R /XYZ 85.0394 343.0202 null] ->> endobj -1451 0 obj << -/D [1443 0 R /XYZ 85.0394 331.065 null] ->> endobj -502 0 obj << -/D [1443 0 R /XYZ 85.0394 138.4884 null] ->> endobj -1452 0 obj << -/D [1443 0 R /XYZ 85.0394 114.5262 null] ->> endobj -1442 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F39 863 0 R /F21 658 0 R /F47 879 0 R /F62 995 0 R /F63 998 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1456 0 obj << -/Length 2275 -/Filter /FlateDecode ->> -stream -xڽY�o7�_�?�����~��-�\�r*����<�%�^@ڕ��8���� rŵ6�{��9;���fH��l�bg<$�$�25XlN�� �ޞ0�3�L�����ɛ � 2��< �W����4e���CA� �F���N�#�htqyR����w�� b����� g2 �n��o������7S��M.&���l2�8��d2oU�bT} O>|��%X�� %"K�� ~P²�6'R ��~f}r{�k+0X�����Q�E�{��Y��TFb�E�'E��R� 4Zxz3�|{��=/vz���1��@( ->0|^��S�@��8w|�j���7}��)�R2���G� -
EO�0������hT� -(g�$�����q��xk�. bUI���e,m�#w;����m~����r��#j���F�^v9o�b�o+��G���� -2�'ci W�@f %�Jۣ -���*�r����mM0�.�Xػ�*���A���N� �8� -_Y?�}�')�M�� c �O��m��}�].EY��{'��Ǟ�y� ��(�!����EA3hIJq}|`]|� -endobj -1455 0 obj << -/Type /Page -/Contents 1456 0 R -/Resources 1454 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1453 0 R ->> endobj -1457 0 obj << -/D [1455 0 R /XYZ 56.6929 794.5015 null] ->> endobj -506 0 obj << -/D [1455 0 R /XYZ 56.6929 769.5949 null] ->> endobj -1458 0 obj << -/D [1455 0 R /XYZ 56.6929 751.4464 null] ->> endobj -510 0 obj << -/D [1455 0 R /XYZ 56.6929 563.3947 null] ->> endobj -1459 0 obj << -/D [1455 0 R /XYZ 56.6929 537.1873 null] ->> endobj -514 0 obj << -/D [1455 0 R /XYZ 56.6929 314.9763 null] ->> endobj -1460 0 obj << -/D [1455 0 R /XYZ 56.6929 292.5697 null] ->> endobj -518 0 obj << -/D [1455 0 R /XYZ 56.6929 211.1564 null] ->> endobj -1461 0 obj << -/D [1455 0 R /XYZ 56.6929 183.865 null] ->> endobj -1454 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F53 962 0 R /F11 1299 0 R /F39 863 0 R /F62 995 0 R /F63 998 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1464 0 obj << -/Length 3617 -/Filter /FlateDecode ->> -stream -x��ZKs�8��W萪��, ^|�M�(YOe���ݚ�L�H٬P�V��(�~�� -'1�LnW=Z�Q$&��'���f o���S�s/`�S?��ϗWo�'���Wo/���zv j����u_��ί�W���S��/���$���jN��^������l~�n�,����g�>�I -���3G��~p&�XN�g�W��J�������-��[3u�M��� �p�O����J*�'��_Ē]^Mgo�\������4�ܻ��������k���~��~���T��|�#$�$$�"��j�뜚4nl�(i�|!Q�2��S�� × ��<�^_��аB�'A�B��KTKŊ�<<P��n�� V�, -|��h Z��f IM�CM*I�*.4;�R0��? ���06l�&�]�l���78�$vnF���5�kyˤ��"�gU�F�U+�h +j�������T����d�L���Y[zv�?�M��@y��Խ]�w��n��W�Aq�-�sWg� �vc\(� ��YC�����յ x���s" �����bR��#��Ֆ�"��MU�M�� ��#&�@N��1�@�S��a nJ� 4�)'UM����s���!���/��j��K�z��Y݊����2�R_��]��`��\D^VW;�Xf��z��y�v!�?>vВF%M��z�Y�����˻�O��>�6�b{�Wc�f~��s��UQ$[G���>��Ͻz�^TEM� ��>/���xm� Z��<��4��ӌ�'tt�O�M�,��^/�� S) -��D8y*�` �ғ ��g9�KX ���-�v���������f �^ ̰�vW� � ���4[�뤠>��w�2��t.%iJ��wƋ? 0��5b� K �3�0I^$�"��M -W�� C��҈�2�F0�7N�y��.�B�q���Y�L�E D� �}^��8�>�ȍ�N ���y]��')��_�L��q�jKS<�9�l��ǀj�m.h�:�6մ�ԛzL -r�9 �gۼq�fC��p��yП��K;j{ y�"���9���17"5�~��Eć�@��Ռ�b���$*�� �<�;��� 9�ZE'�g�?��==��J%��s��0z�P�%���ퟔ�S -�;@�+;��T��9]��ے�\'��:-1�}��߈�n7 -�>!���~�e��k���e��(~Cr�t$d�~��R�Ep�TA�P�����=%�?��B[^��=$@��^�n~5�6���|,�U�s� -ι7KӼ���� �9ؘq9�� -!��� ��b���N�_��/_[�p��U�v�y?�7vu����V����0FƐweۇ����v�u -�j�Bl��q��=T�P�k�� ���k[�����}�#�%ak\�������g�� -��omp�0������:��@ƀƌ�����۲5�t���.� F|
XG:/c��.�$#��4�F �@_�w?�lL������t�ȗ�����l�`m� �5�.�|i��� -DG��� �vtt���y�ۃ�m�h�l1���w�� k�\~''���'�F�AV�ܭZ�"_�C��
��K�J�.�dQ��s�|�:D @sW��W�/[�Qf�c��B?��vw��n���P婥Ahoy�7Y�if���]�@�]�w�-eG� �xwOW�Zzu�n�ۓ��)�*����Qh!~��tZ��7U]� R2��8 ���)��x�m��6��sW�7yi�qѮ[���Cf��<��z�}��QA@��>^kY ���7cR�K��BZ�p
{����oa��jL���� -endobj -1463 0 obj << -/Type /Page -/Contents 1464 0 R -/Resources 1462 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1453 0 R ->> endobj -1465 0 obj << -/D [1463 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1466 0 obj << -/D [1463 0 R /XYZ 85.0394 687.9013 null] ->> endobj -1467 0 obj << -/D [1463 0 R /XYZ 85.0394 675.9461 null] ->> endobj -522 0 obj << -/D [1463 0 R /XYZ 85.0394 283.5376 null] ->> endobj -1292 0 obj << -/D [1463 0 R /XYZ 85.0394 259.198 null] ->> endobj -1462 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F21 658 0 R /F23 682 0 R /F14 685 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1470 0 obj << -/Length 69 -/Filter /FlateDecode ->> -stream -x�3T0 -endobj -1469 0 obj << -/Type /Page -/Contents 1470 0 R -/Resources 1468 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1453 0 R ->> endobj -1471 0 obj << -/D [1469 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1468 0 obj << -/ProcSet [ /PDF ] ->> endobj -1474 0 obj << -/Length 1368 -/Filter /FlateDecode ->> -stream -xڕ]o�6�=��ȓ � )�s}j�v�P C�>�{�e�*��D%͆���x�,Ǫ��0t< ��M����YL(ϣE�G$�,^�]����W��D1'qĹY��b��8 ��j������}�!%IƋ�n���)��8_��w�j�-WaL�t���W<�4K �FDB�(��7 ~{��9~�e1t�~�՝j�r+;�K��XDx���_���@J�r�(��뢐}?�ѝ�p��g�9ɓ0q�8%!����|��, �G�xؽ/4���>���n -� �K�5��g�E�)��������n7�a���;�lF�\�1��qh/.�J=����ӌ����(M�) ����<c� ����2��#C�2f �Hob�a��X�n*Q|=�Jΰ�LX��՝h��ɀs~&LY� U��(uA��� �In���<7���s_6{C���6A���`�h�߃x�}�4ll2&,(Ԓ�(68���4x<��s Ç?�pt.� ��N���I�R Ԡ �jЦ��p�g�a<�5P��v�+ -�U�N|�$L�/�W{����V��Pa$�S �� �Y -�M# -endobj -1473 0 obj << -/Type /Page -/Contents 1474 0 R -/Resources 1472 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1453 0 R ->> endobj -1475 0 obj << -/D [1473 0 R /XYZ 85.0394 794.5015 null] ->> endobj -526 0 obj << -/D [1473 0 R /XYZ 85.0394 769.5949 null] ->> endobj -1476 0 obj << -/D [1473 0 R /XYZ 85.0394 574.5824 null] ->> endobj -530 0 obj << -/D [1473 0 R /XYZ 85.0394 574.5824 null] ->> endobj -1477 0 obj << -/D [1473 0 R /XYZ 85.0394 544.7049 null] ->> endobj -1472 0 obj << -/Font << /F21 658 0 R /F23 682 0 R /F47 879 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1480 0 obj << -/Length 3343 -/Filter /FlateDecode ->> -stream -xڥZ[o�V~����ҀE�\x+ ��Ӻ�H���ݢ�E K�P�BRV�_�3g�P�D7� ��p8�2�o�� -�$ �U�3 �Gax�~_3b��I����� K�N8)�6h 8��
W0J�1��| �̾��xT�y�/L�̐7����*ܳ�8��;����G���[Nk�s�������A5M��v-`|65�4��SG 8&NR�5� �� �.n�< a� -�9� -��
]�������%���f��#" +���산R�P�'3];O ۔�;�^���Ap��'F� -�M)_�Qr
\ �t�f����ǎ�r��g -��7-?�bB�S@�C 8��AQQ��� J%aa��R���qtA- ��:��l+�ۦ(�)���NCmv���`jJ_f��O ���T� ������H]��2�� �B��`? ��5��e�= 7�o3,�m\�4T�8����r��m�S!4�.U -Qش������^ł�� -�� =B �b+�|nD�u���Ա��5�GO:8����_�αK �l�K��� � �J�9�)�ro�`JeN��iWd�q�j�;~�]}�^ ���W�+�|��Y>����/�u�f_4^�qPv� ��ښ��ښ�`�N� !`�+�Ѫ�Y] �p���Tq]�����
US`�7�U�Q�(��ڕR�{��YQF��%*����ަ��I&5��bbX9f���c��EV����U���;���^�S�@�P�� -\T����'�m��ɫ ���q�����0gUO֨I2ı?������J��.G������e0
�4N�
-@�ܜ�h���X܃s]���$���"p�$�����
�n�-���dX�ɺ�20~�f��,v��o�a���|����x�h����6lB��fT�|)h������ ���$�1�Z, �O���]�*{a��� -�ʹphێ0<Py�E�H�R��vc��)qZ�6�z��2��z�fdN��m.A���=궠�+�vC5:7��44�3�@��������uE��H��[˄(�
�o�!~��l2\�`� `� -. j�l?Q�&=a�l7�ReQn������b:��'������|:��b}Y�C �}CL��m�nm����
|c��VA���f������u��6�׀��=����CoXЊ�ؚ��>[4A -endobj -1479 0 obj << -/Type /Page -/Contents 1480 0 R -/Resources 1478 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1453 0 R -/Annots [ 1485 0 R ] ->> endobj -1485 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[0 1 1] -/Rect [63.4454 757.0719 452.088 767.2337] -/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos)>> ->> endobj -1481 0 obj << -/D [1479 0 R /XYZ 56.6929 794.5015 null] ->> endobj -534 0 obj << -/D [1479 0 R /XYZ 56.6929 739.5018 null] ->> endobj -1486 0 obj << -/D [1479 0 R /XYZ 56.6929 704.7645 null] ->> endobj -538 0 obj << -/D [1479 0 R /XYZ 56.6929 563.5308 null] ->> endobj -1487 0 obj << -/D [1479 0 R /XYZ 56.6929 535.7626 null] ->> endobj -542 0 obj << -/D [1479 0 R /XYZ 56.6929 418.2412 null] ->> endobj -1488 0 obj << -/D [1479 0 R /XYZ 56.6929 389.5504 null] ->> endobj -546 0 obj << -/D [1479 0 R /XYZ 56.6929 228.1296 null] ->> endobj -1235 0 obj << -/D [1479 0 R /XYZ 56.6929 194.8993 null] ->> endobj -1478 0 obj << -/Font << /F37 747 0 R /F67 1484 0 R /F11 1299 0 R /F39 863 0 R /F21 658 0 R /F23 682 0 R /F47 879 0 R /F53 962 0 R /F48 885 0 R /F62 995 0 R /F63 998 0 R >> -/XObject << /Im2 984 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1491 0 obj << -/Length 533 -/Filter /FlateDecode ->> -stream -xڥTM��0��+|��6�` �IڲR�4a�� xT��@6����3·��TE��o�|x�"b~ � �1Je�9� �[���9��Q� Ϥ�u�{���I,�(A�ˍ��D���� ���"#N�!O���&���XN��,4�1[f��b���ga,�0��)L g����� P� Ԟ�{o�_�m�f���==T���=��
�J��s�y����xK��E���:4<��"J����q�f����z�lO��ս��,7Zw��k���/�v�)���-�ui�[x�UE�*8��y�E_�U� �`wXUz[��H�.�R�Z!�{S�7�Ў�� R�%�ѩ'�T��)����{�2�]���,#��o����-���� ��I����]بW�\c�*uۛ|u�vx_�v -endobj -1490 0 obj << -/Type /Page -/Contents 1491 0 R -/Resources 1489 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1493 0 R ->> endobj -1492 0 obj << -/D [1490 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1489 0 obj << -/Font << /F37 747 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1496 0 obj << -/Length 69 -/Filter /FlateDecode ->> -stream -x�3T0 -endobj -1495 0 obj << -/Type /Page -/Contents 1496 0 R -/Resources 1494 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1493 0 R ->> endobj -1497 0 obj << -/D [1495 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1494 0 obj << -/ProcSet [ /PDF ] ->> endobj -1500 0 obj << -/Length 1964 -/Filter /FlateDecode ->> -stream -xڥX[��~?��o��V�D]Ңi��I�E� g����-im�H�#Rv7��3��,�JS��&���7�b���2��2��e�H�Mտ�6{�}�N�L*�P�I��V&E(�8�l�F�zy��u,6qfY,7/���,/�2I��K���頎� ������/"�4̋\�Z.d��Q�^ ����]ט�ֶ ���H�$�bV˒0�"�S��a+�( -�t�� �0j0ӛ��Rz ����M<�� � ���Y�� �����4�{{���Q隣�����A]�=�z�ɑ%�2,�8�� =e*RJ�,%�v��42��l��ę�3���r�v -i ���3���y����&��8K<�c���� �h� C��<��Ќ��h�����ס\@�����w=�vV -��mT�,(����}�q���\�&|&d�vK�T�V��h�KI�S?s�@�+6�k0mH����rRϯ�'� -�f3G�51b��i�diN����⏱��0�"�0����Z�7�\s�w"�&0���F�?$cR�Z���(��:�H^�04g���(�� �W��7���S,[>�����;�3`��'b�����^ ��Ey�]����v����a���k@n@�zh|��t�O�0J�m�㗿�e�� �(��i�E��
�͝��z҃ѣm��戧�O�$ -�����:�����BYn?z�Xd�q�d�����N�:�r��Q�a�L�C�MucV��V.W��4 �8H�� Uoy)�@� Z�o+B)���D9��;B.��Ty� v�)�6��Zds�����M����r=����&vӞ��^/yr��� ���P;�y �1{9B�F��{�ו�M>p\�-��7>� �W�̨W -��rc�-������ -��%��i�I 沠��~��џ/�6��v�� m�r���.z�����E���x�8KQ���ܼ �Bw1\�����s^��Q��s�jMk�/ �,��mR��Ez��s�㾇� -endobj -1499 0 obj << -/Type /Page -/Contents 1500 0 R -/Resources 1498 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1493 0 R -/Annots [ 1507 0 R 1508 0 R ] ->> endobj -1507 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[0 1 1] -/Rect [348.3486 128.9523 463.9152 141.0119] -/Subtype/Link/A<</Type/Action/S/URI/URI(mailto:info@isc.org)>> ->> endobj -1508 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[0 1 1] -/Rect [147.3629 116.9971 364.5484 129.0567] -/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.isc.org/services/support/)>> ->> endobj -1501 0 obj << -/D [1499 0 R /XYZ 85.0394 794.5015 null] ->> endobj -550 0 obj << -/D [1499 0 R /XYZ 85.0394 769.5949 null] ->> endobj -1502 0 obj << -/D [1499 0 R /XYZ 85.0394 576.7004 null] ->> endobj -554 0 obj << -/D [1499 0 R /XYZ 85.0394 576.7004 null] ->> endobj -1503 0 obj << -/D [1499 0 R /XYZ 85.0394 548.3785 null] ->> endobj -558 0 obj << -/D [1499 0 R /XYZ 85.0394 548.3785 null] ->> endobj -1504 0 obj << -/D [1499 0 R /XYZ 85.0394 518.5228 null] ->> endobj -562 0 obj << -/D [1499 0 R /XYZ 85.0394 460.6968 null] ->> endobj -1505 0 obj << -/D [1499 0 R /XYZ 85.0394 425.0333 null] ->> endobj -566 0 obj << -/D [1499 0 R /XYZ 85.0394 260.2468 null] ->> endobj -1506 0 obj << -/D [1499 0 R /XYZ 85.0394 224.698 null] ->> endobj -1498 0 obj << -/Font << /F21 658 0 R /F23 682 0 R /F11 1299 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1511 0 obj << -/Length 69 -/Filter /FlateDecode ->> -stream -x�3T0 -endobj -1510 0 obj << -/Type /Page -/Contents 1511 0 R -/Resources 1509 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1493 0 R ->> endobj -1512 0 obj << -/D [1510 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1509 0 obj << -/ProcSet [ /PDF ] ->> endobj -1515 0 obj << -/Length 2543 -/Filter /FlateDecode ->> -stream -x�uYYs�8~ϯ�[誑���7[��d�rY�N�n�"! k�`Ҋ��O7�y�éTJ@�h��u��.\��]���
��"��u�z�E^�s/�����<a��0`�����t �~r��or����'��u ����~<+N�� �O�����u�~]���u�.������u�& ��pD��$�K�Ҍ�^���g�8Z�A��ڻ\y� [�ϵ>��8T��f��:��A6�^y��$M�]�J�i�E�N�g�h&vGI���-
D]����
\d�,�c>Ӈ˹!�[vG� � d� ~�~gx���u�\�)���� yPu��Q�6s�] U��^TLݞM'+��m� -�\ӱ8 ؐ�r���D3h ē0D,��[��:�� d�9�QԀE��'{)��r���ɪ��q����$��� Y_��'�=>\f�sU�"' �_�k/���� -�6pkK���'�s[w��-@أ�̭�p,XB��� 'h7����*�pv -��a�|��nl��-H��Zy�6�����( -R��1�uL~�6�`l� ��~ZѨ�<�C��̓ -�
r��O�B�=� 1j"����pQɧU�z�"G��� G,��fS6� �Bdz��z�ӄQD�
B0q -��U#7C�@Q��.��� -�D�����^=:\��� -�o���+�'E\2}8ǒ;i %҇�&��W�\~j�a��{���G�!zeoA_�^�N m�x�^X��;����r{z8�'"H�ȃ��U�N�� -endobj -1514 0 obj << -/Type /Page -/Contents 1515 0 R -/Resources 1513 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1493 0 R ->> endobj -1516 0 obj << -/D [1514 0 R /XYZ 85.0394 794.5015 null] ->> endobj -570 0 obj << -/D [1514 0 R /XYZ 85.0394 769.5949 null] ->> endobj -1517 0 obj << -/D [1514 0 R /XYZ 85.0394 573.5449 null] ->> endobj -574 0 obj << -/D [1514 0 R /XYZ 85.0394 573.5449 null] ->> endobj -1518 0 obj << -/D [1514 0 R /XYZ 85.0394 539.0037 null] ->> endobj -578 0 obj << -/D [1514 0 R /XYZ 85.0394 539.0037 null] ->> endobj -1519 0 obj << -/D [1514 0 R /XYZ 85.0394 510.2426 null] ->> endobj -1513 0 obj << -/Font << /F21 658 0 R /F23 682 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1522 0 obj << -/Length 2893 -/Filter /FlateDecode ->> -stream -xڭks��{~��ՙ�I�3��L.�ls�˥�;���͔�h[]Y�r��__� -'�<%ث�4hνd�J%�ʉ�����ڭTCS�u]"�UN��yH����f���)ZE�zM�Jɦ|�ee� �^e-3��햗 �\~ 4 -hf�yN��9f�VT�"�F��g[�>k$�ӭ%ya4P�~�$��#��p -"�Ϯ�g�F�\�s&[� jp`�1��.}Qe�ߩ�%��)�+]�q�� -~H��OQ�4��:��$o��=�R��f�-DM��"���m/�����N���@1t$ ���, s�b,�)P�TE&u;aB�9����V$��\{؆,Cf�C�UP9 '���HI"����z�ۛ�Ä���D���u����肁�"FH�m,$B����V 4P}#�� -�Ai�K:��C����Ca�R�_~�� �-����� -ɑ9R��P)�0���i�4`(M�6�'��^S(Wr7dg51�h� �=�m/̹?5Y���l�7���(���5o]�"L�6xc0�q �m -����5��D �$�lH�r��&��ݳ5�?��hd��k+ �/-U�I0> -���G$�uf,խDC���x�;�t -(�"��Yi4�B���qf�Y'��і�\z
�n�\�&�K� ��v(��1���£��|�؊� ��ˈ�p}�6e�[SW�j��M���`K@�� j]��VP%� -�K���W��Cw;"I���~�8ԥV(<A�Hn?���_`�2�endstream -endobj -1521 0 obj << -/Type /Page -/Contents 1522 0 R -/Resources 1520 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1493 0 R -/Annots [ 1526 0 R 1527 0 R ] ->> endobj -1526 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[0 1 1] -/Rect [253.7995 146.8976 417.685 158.9572] -/Subtype/Link/A<</Type/Action/S/URI/URI(ftp://www.isi.edu/in-notes/)>> ->> endobj -1527 0 obj << -/Type /Annot -/Border[0 0 0]/H/I/C[0 1 1] -/Rect [63.4454 108.9117 208.8999 119.0735] -/Subtype/Link/A<</Type/Action/S/URI/URI(http://www.ietf.org/rfc/)>> ->> endobj -1523 0 obj << -/D [1521 0 R /XYZ 56.6929 794.5015 null] ->> endobj -582 0 obj << -/D [1521 0 R /XYZ 56.6929 652.1213 null] ->> endobj -1524 0 obj << -/D [1521 0 R /XYZ 56.6929 614.8935 null] ->> endobj -586 0 obj << -/D [1521 0 R /XYZ 56.6929 614.8935 null] ->> endobj -1072 0 obj << -/D [1521 0 R /XYZ 56.6929 584.5024 null] ->> endobj -590 0 obj << -/D [1521 0 R /XYZ 56.6929 289.5256 null] ->> endobj -1525 0 obj << -/D [1521 0 R /XYZ 56.6929 251.3901 null] ->> endobj -594 0 obj << -/D [1521 0 R /XYZ 56.6929 251.3901 null] ->> endobj -900 0 obj << -/D [1521 0 R /XYZ 56.6929 222.7156 null] ->> endobj -1528 0 obj << -/D [1521 0 R /XYZ 56.6929 53.7852 null] ->> endobj -1529 0 obj << -/D [1521 0 R /XYZ 56.6929 53.7852 null] ->> endobj -1520 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F47 879 0 R /F53 962 0 R /F11 1299 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1532 0 obj << -/Length 2825 -/Filter /FlateDecode ->> -stream -xڵZ]{�6�ϯ��<-��K����4�4v����g0�g&��{�>�ζ��" ���O <���"�<��Q�}�<�F���7����V2�Z�ږ�Y]��
G ���gk�yQ�G������i�8����0o<E�k�yzt�XN�À� *�o|sw��݇�����ʇ~�7}�˛�Ϸ���j�n�����-��ɧ���be^��iأ�����m��_y��0�d���ȨT�dW˫�̂�l�h����Hأ+�G#�i)�qPBke-�8���M9�[��(c�h��$4��IK ���f�$�S3E �� m�α}�D0c( -)k�ϋ}����x���wBBy5+�ur��8�H^���i�ViR��3q�!������|�i� ��r�X�IuLK%�X�&���(�0�B4��V�K�XRF���s0₶�b0b�_d�nȒ}�Wq�y���!Y��y Y��sr&@���#o�>��(�@�-5L������3N䆡3�~�Z�q��X��4�v8�v����\��U��s1����Li�)>��7�D����)>��H-يpׄ��G�Z*~�O꥟�š(m)�^@E�w���;-e܋s�{9�-�����w��8��Xz���?E�([M0��c�����k��>�|�p -���f1�{���,@^C-�{F�B��9�;y���Љ픽�&A$����� -e��^�`�m1�� `�L���W ����T:�~:%ǁ��r�I@�S�4����U�qq=���G�z��CP��wKʡw-e� �.pA[z�b��_|���4 �$������E?��;Ow�g�F�������1 |�K�A���( -\�]� -l��"��EWrܧ��Ȍ�e���G�I���C$d��f���`V�����^"�|n��Rú7RF��洞�Ѝ�ϰ�u�_&�*�l�>y�M �U�E�䄼JMM��E�B�EV˻�!�"/b�� j<n�C�q:�c�$��?����f黔E��x�fqY]˼o Zy?��h��-#0}ۍ2�_&���,�\I�:X��D<(��$QQ~�N,)��h)c'�z;qA[v�� ��e'�i'"}�U����N4S���z�P;���C�3���Ag�h�8�2�L��#�f��r�!K�����r$2'��P{�!�(�9����f,�ǟ���m W'Imِ%�s\9�� ����7[#�KlYR���f�z^�`�m��� `�RZ?�'j�j� -�qM�|D�k�F�k��#ƃ6I�0���ss�)��7���-e� �9�mq�� ���Mr���b�P�V"څ� _�u"��ٶ���^�ɰ' ib%��X =>(���T{-��p!�].e~�t^��<�\ː��N9�T����}��� -��/��i&�h��ߡf�_�/ū=s߲�~e|�pu?�C�ej�ú*l����<�橻��4�
m���wm{R�C Kq��-5l�Fʘ5!�vB7f}��o�-�|Sۘn+����^����á8Vg �r1����� ���?+�z����� -��SzIC�Z��=�ԡw���.���m��NF�� /]x���i)���fk
���\�L ��L� �p�f�M��x�%���-��g= �P�����@wF��V���i � $�p�" ^�#����4R�L�s��n�<��'�^����y�U�|\lN*���Z�BX�dis�лs�б�Ŕ�Ĉ��Y�z��11��F���;�dw$^�!.�DGn�9� [�6LjH p�I�n�φ�0 -=|a�ԖrЯ�,� 1� m��� ��WgU�.�.��C��l�FD�o��bD&&��Mb�;��}n�l�3C��s;s,�&,�6 3a;�}P��,�G��[���2����_� ������vaI9�BK5v�;�Ж]t����T��8��#�B��Mm�F*�SU�� ĝٍ�5,>}�}ʸ #���21���M��su\bZF���Y�©�� ������ -�X�* -endobj -1531 0 obj << -/Type /Page -/Contents 1532 0 R -/Resources 1530 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1589 0 R ->> endobj -1533 0 obj << -/D [1531 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1534 0 obj << -/D [1531 0 R /XYZ 85.0394 752.3015 null] ->> endobj -1535 0 obj << -/D [1531 0 R /XYZ 85.0394 752.3015 null] ->> endobj -1536 0 obj << -/D [1531 0 R /XYZ 85.0394 752.3015 null] ->> endobj -1537 0 obj << -/D [1531 0 R /XYZ 85.0394 746.3107 null] ->> endobj -1538 0 obj << -/D [1531 0 R /XYZ 85.0394 731.5461 null] ->> endobj -1539 0 obj << -/D [1531 0 R /XYZ 85.0394 728.1497 null] ->> endobj -1540 0 obj << -/D [1531 0 R /XYZ 85.0394 713.3851 null] ->> endobj -1541 0 obj << -/D [1531 0 R /XYZ 85.0394 709.9887 null] ->> endobj -1542 0 obj << -/D [1531 0 R /XYZ 85.0394 651.9592 null] ->> endobj -1016 0 obj << -/D [1531 0 R /XYZ 85.0394 651.9592 null] ->> endobj -1543 0 obj << -/D [1531 0 R /XYZ 85.0394 651.9592 null] ->> endobj -1544 0 obj << -/D [1531 0 R /XYZ 85.0394 648.8377 null] ->> endobj -1545 0 obj << -/D [1531 0 R /XYZ 85.0394 634.0731 null] ->> endobj -1546 0 obj << -/D [1531 0 R /XYZ 85.0394 630.6767 null] ->> endobj -1547 0 obj << -/D [1531 0 R /XYZ 85.0394 615.9121 null] ->> endobj -1548 0 obj << -/D [1531 0 R /XYZ 85.0394 612.5156 null] ->> endobj -1549 0 obj << -/D [1531 0 R /XYZ 85.0394 585.7959 null] ->> endobj -1550 0 obj << -/D [1531 0 R /XYZ 85.0394 582.3994 null] ->> endobj -1551 0 obj << -/D [1531 0 R /XYZ 85.0394 567.6349 null] ->> endobj -1552 0 obj << -/D [1531 0 R /XYZ 85.0394 564.2384 null] ->> endobj -1553 0 obj << -/D [1531 0 R /XYZ 85.0394 549.5337 null] ->> endobj -1554 0 obj << -/D [1531 0 R /XYZ 85.0394 546.0774 null] ->> endobj -1555 0 obj << -/D [1531 0 R /XYZ 85.0394 531.3128 null] ->> endobj -1556 0 obj << -/D [1531 0 R /XYZ 85.0394 527.9163 null] ->> endobj -1557 0 obj << -/D [1531 0 R /XYZ 85.0394 513.1518 null] ->> endobj -1558 0 obj << -/D [1531 0 R /XYZ 85.0394 509.7553 null] ->> endobj -1559 0 obj << -/D [1531 0 R /XYZ 85.0394 483.0356 null] ->> endobj -1560 0 obj << -/D [1531 0 R /XYZ 85.0394 479.6391 null] ->> endobj -1561 0 obj << -/D [1531 0 R /XYZ 85.0394 464.8745 null] ->> endobj -1562 0 obj << -/D [1531 0 R /XYZ 85.0394 461.4781 null] ->> endobj -1563 0 obj << -/D [1531 0 R /XYZ 85.0394 446.7135 null] ->> endobj -1564 0 obj << -/D [1531 0 R /XYZ 85.0394 443.3171 null] ->> endobj -1565 0 obj << -/D [1531 0 R /XYZ 85.0394 428.5525 null] ->> endobj -1566 0 obj << -/D [1531 0 R /XYZ 85.0394 425.156 null] ->> endobj -1567 0 obj << -/D [1531 0 R /XYZ 85.0394 355.0758 null] ->> endobj -1568 0 obj << -/D [1531 0 R /XYZ 85.0394 355.0758 null] ->> endobj -1569 0 obj << -/D [1531 0 R /XYZ 85.0394 355.0758 null] ->> endobj -1570 0 obj << -/D [1531 0 R /XYZ 85.0394 352.0499 null] ->> endobj -1571 0 obj << -/D [1531 0 R /XYZ 85.0394 337.3452 null] ->> endobj -1572 0 obj << -/D [1531 0 R /XYZ 85.0394 333.8889 null] ->> endobj -1573 0 obj << -/D [1531 0 R /XYZ 85.0394 309.8192 null] ->> endobj -1574 0 obj << -/D [1531 0 R /XYZ 85.0394 303.7727 null] ->> endobj -1575 0 obj << -/D [1531 0 R /XYZ 85.0394 278.3282 null] ->> endobj -1576 0 obj << -/D [1531 0 R /XYZ 85.0394 273.6565 null] ->> endobj -1577 0 obj << -/D [1531 0 R /XYZ 85.0394 246.9367 null] ->> endobj -1578 0 obj << -/D [1531 0 R /XYZ 85.0394 243.5403 null] ->> endobj -1579 0 obj << -/D [1531 0 R /XYZ 85.0394 173.5556 null] ->> endobj -1580 0 obj << -/D [1531 0 R /XYZ 85.0394 173.5556 null] ->> endobj -1581 0 obj << -/D [1531 0 R /XYZ 85.0394 173.5556 null] ->> endobj -1582 0 obj << -/D [1531 0 R /XYZ 85.0394 170.4341 null] ->> endobj -1583 0 obj << -/D [1531 0 R /XYZ 85.0394 144.9896 null] ->> endobj -1584 0 obj << -/D [1531 0 R /XYZ 85.0394 140.3179 null] ->> endobj -1585 0 obj << -/D [1531 0 R /XYZ 85.0394 113.5982 null] ->> endobj -1586 0 obj << -/D [1531 0 R /XYZ 85.0394 110.2017 null] ->> endobj -1587 0 obj << -/D [1531 0 R /XYZ 85.0394 95.4372 null] ->> endobj -1588 0 obj << -/D [1531 0 R /XYZ 85.0394 92.0407 null] ->> endobj -1530 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F47 879 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1592 0 obj << -/Length 2889 -/Filter /FlateDecode ->> -stream -xڵ��w�:���W��>��E��$v�������VN0����#�� zwϞ<�A��ӌfF��x��ȏH4 "y�&���3�}WgXʜ+�sS�����4�D(�?�2� -��xr��2�E3��^,/n�������_�s�9ӿ ωWsq�y��Zl��v��������y�G�4��[���?E�Gut��b3�z��lq�_��iء����}��Lv� ?�9�F�7� 7�QD&�3ף�s)U-����_z@��~�w����I�\<�E�GZ��Eȧ�֓�feq<l���-;q}?�x{e� ��4��K�>�J��ӗ��K�C�����v�Z�T�k. L䑠�{�~���t:_m��z-�ߎC�J�����O�� �J}x >�;x�8�K�~�)c,~�� ����P�xz#���?��&��(e�Z�>d�>�s9h��D�� �H
~[l_�WV Rx�fB�ҹX�>>m��ޣ� ��AC��(B��6�� k)M8p�a�V�
�ݽ�[�X��M|��=7�m��Aw���/�� �������h����X�%�.w�C -jt�G�~c���qe����Z �N�{�H`dJY�*)M��}ժڠ���O��� ,fB�e^�C�*q'���B6�%�e��J��.�\���e!�?��^e�c���x�S�C>���r�=F�F��.5�"Ϋ�ΥQ+�ì�n��b�h�A�^�"�� �)5�WKx�a�V�
�ݽx[��� �;�~m|�Ӈ<�Dcg�����U��*v(E�Q�|�|9�i_N�/�V_NQz����`I��L !|14�"��-Ge��b}̙ ���ADG@R�JJ�&Ա���6@wu��6udr�/~m������9��7� w ��Å�ɥW���*� ����J�Nq��#����%�u�1 -������`��P��6(tu�S0u�7��� ���b���MiޝweG<�v� v��c�S��=�%uQ�mBsIh��U��0�LkC߽Sq���gM,&�af0 s������2�b6����~b���&��v���(j4�2�5~���b�E�7 -j��� ��G(p�������n`s �k��`F���'�0��A>L� �)5 SK0-��Uu�Dw/̖�MU �] -Gtz�b �����ͭ�!oP y�`ȯC.1P�!�l��9C��iz�� -�z��OR��� !���� �Ŵ���r]���؆���2`G�6���~ئn;�\(�/�����ZίY]���9��?�-����덴�
��-��E�҆�
��Z������
ˁ�� C ��UC�BUI5T]K cUmP���jꞳ*�>���1��ݨ@���٥����[%�42��Sj���h��R -5 ��ng�k��(�Gi(��t]$�k}4H��`'��I�J����:�b o��<x��J�P��F� �=�����j�^ȫ���I�� - <�8�3���)!
̋,���XWq/0S������X^�'��;�� -����kq����N4�`�R�͡���9~dl�.�$��.�"_ୗ������&���.�C��2͓��]"�fU����δ8�e����0 &̋��ClHY+)���`UmP����l꾆I��9�2���%/~�]� 8�llO�\˴���Fnu,0��wu,��l2��폪3��w ���`Jx �B��9��l�:�>8`�,�8Έ 6���k���3��n����e�ҭ�c�o�� ��~��&���?�� ~�"�����~6oZ_ ��zH3����� �"�j�)e���J��Ҫڠ���O�Խfߏ����,Wۡ�"�#/~w]�
�\��k�n�BzS֕���,H��N�����@��� ݑz�)e���4/���M���� ��{<��T��n�uf�8���#�uۓ�A� -�}��=e�s�=�qr � 6=���#�#@�w�!(���
��,c��ʎ�^I���;��~f8���!4LK 5eb�T��6���{Q����sC��܈���յ�s�N$��*W��+�;vH��o�%M��N�`�:���͔����wJ�������#���֖ei�W_,j%��_k�3��@�Rg����g� ��ϟ�U� -endobj -1591 0 obj << -/Type /Page -/Contents 1592 0 R -/Resources 1590 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1589 0 R ->> endobj -1593 0 obj << -/D [1591 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1594 0 obj << -/D [1591 0 R /XYZ 56.6929 748.5056 null] ->> endobj -1595 0 obj << -/D [1591 0 R /XYZ 56.6929 748.5056 null] ->> endobj -1596 0 obj << -/D [1591 0 R /XYZ 56.6929 748.5056 null] ->> endobj -1597 0 obj << -/D [1591 0 R /XYZ 56.6929 743.7078 null] ->> endobj -1598 0 obj << -/D [1591 0 R /XYZ 56.6929 719.6381 null] ->> endobj -1599 0 obj << -/D [1591 0 R /XYZ 56.6929 711.8197 null] ->> endobj -1600 0 obj << -/D [1591 0 R /XYZ 56.6929 697.0552 null] ->> endobj -1601 0 obj << -/D [1591 0 R /XYZ 56.6929 691.8868 null] ->> endobj -1602 0 obj << -/D [1591 0 R /XYZ 56.6929 665.1671 null] ->> endobj -1603 0 obj << -/D [1591 0 R /XYZ 56.6929 659.9987 null] ->> endobj -1604 0 obj << -/D [1591 0 R /XYZ 56.6929 635.929 null] ->> endobj -1605 0 obj << -/D [1591 0 R /XYZ 56.6929 628.1106 null] ->> endobj -1606 0 obj << -/D [1591 0 R /XYZ 56.6929 601.3909 null] ->> endobj -1607 0 obj << -/D [1591 0 R /XYZ 56.6929 596.2225 null] ->> endobj -1608 0 obj << -/D [1591 0 R /XYZ 56.6929 569.5028 null] ->> endobj -1609 0 obj << -/D [1591 0 R /XYZ 56.6929 564.3344 null] ->> endobj -1610 0 obj << -/D [1591 0 R /XYZ 56.6929 549.6297 null] ->> endobj -1611 0 obj << -/D [1591 0 R /XYZ 56.6929 544.4015 null] ->> endobj -1612 0 obj << -/D [1591 0 R /XYZ 56.6929 529.6968 null] ->> endobj -1613 0 obj << -/D [1591 0 R /XYZ 56.6929 524.4686 null] ->> endobj -1614 0 obj << -/D [1591 0 R /XYZ 56.6929 500.3989 null] ->> endobj -1615 0 obj << -/D [1591 0 R /XYZ 56.6929 492.5805 null] ->> endobj -1616 0 obj << -/D [1591 0 R /XYZ 56.6929 467.136 null] ->> endobj -1617 0 obj << -/D [1591 0 R /XYZ 56.6929 460.6924 null] ->> endobj -1618 0 obj << -/D [1591 0 R /XYZ 56.6929 436.6227 null] ->> endobj -1619 0 obj << -/D [1591 0 R /XYZ 56.6929 428.8043 null] ->> endobj -1620 0 obj << -/D [1591 0 R /XYZ 56.6929 414.0996 null] ->> endobj -1621 0 obj << -/D [1591 0 R /XYZ 56.6929 408.8714 null] ->> endobj -1622 0 obj << -/D [1591 0 R /XYZ 56.6929 382.1516 null] ->> endobj -1623 0 obj << -/D [1591 0 R /XYZ 56.6929 376.9833 null] ->> endobj -1624 0 obj << -/D [1591 0 R /XYZ 56.6929 350.2636 null] ->> endobj -1625 0 obj << -/D [1591 0 R /XYZ 56.6929 345.0952 null] ->> endobj -1626 0 obj << -/D [1591 0 R /XYZ 56.6929 321.0255 null] ->> endobj -1627 0 obj << -/D [1591 0 R /XYZ 56.6929 313.2071 null] ->> endobj -1628 0 obj << -/D [1591 0 R /XYZ 56.6929 298.5024 null] ->> endobj -1629 0 obj << -/D [1591 0 R /XYZ 56.6929 293.2742 null] ->> endobj -1630 0 obj << -/D [1591 0 R /XYZ 56.6929 267.8297 null] ->> endobj -1631 0 obj << -/D [1591 0 R /XYZ 56.6929 261.3861 null] ->> endobj -1632 0 obj << -/D [1591 0 R /XYZ 56.6929 199.468 null] ->> endobj -1633 0 obj << -/D [1591 0 R /XYZ 56.6929 199.468 null] ->> endobj -1634 0 obj << -/D [1591 0 R /XYZ 56.6929 199.468 null] ->> endobj -1635 0 obj << -/D [1591 0 R /XYZ 56.6929 191.7053 null] ->> endobj -1636 0 obj << -/D [1591 0 R /XYZ 56.6929 176.9408 null] ->> endobj -1637 0 obj << -/D [1591 0 R /XYZ 56.6929 171.7724 null] ->> endobj -1638 0 obj << -/D [1591 0 R /XYZ 56.6929 157.0677 null] ->> endobj -1639 0 obj << -/D [1591 0 R /XYZ 56.6929 151.8395 null] ->> endobj -1640 0 obj << -/D [1591 0 R /XYZ 56.6929 137.1348 null] ->> endobj -1641 0 obj << -/D [1591 0 R /XYZ 56.6929 131.9066 null] ->> endobj -1642 0 obj << -/D [1591 0 R /XYZ 56.6929 117.2018 null] ->> endobj -1643 0 obj << -/D [1591 0 R /XYZ 56.6929 111.9736 null] ->> endobj -1644 0 obj << -/D [1591 0 R /XYZ 56.6929 97.2091 null] ->> endobj -1645 0 obj << -/D [1591 0 R /XYZ 56.6929 92.0407 null] ->> endobj -1590 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F47 879 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1648 0 obj << -/Length 2544 -/Filter /FlateDecode ->> -stream -xڥZKs���W�(U�� ��M�l�&3�#y�I�`��THʳ��>
�A�"�ɦ|0 4��u7���xS�$�DI�Q��d{�B�=��_a)3WBsS����/w$�$^�����X+�P �����t��t��\�s6�)�.�ٜ"�Fon7�y&|��M�WןW��������~E- ��f����v�|+o���� D���OW����ͭaD�;����oh�� ~�B Ib:�7��I�OW%
Q#�����zAc�}tLU�� ��hDW>�`�%��=e�� �OZe- 6b[�GV�MV�uW�[\�Kˈ cd ��m}w�"�
11E^���;@��50MS���&�<�Y!���Y��
l��j1Vv�h���l�<���-�zA ��B|�B��'�.Xsj�|g�V�;�đgU6�Kr�ېr(\Ii�S9T�6�>Ķ���)�R*^[�2mRqu��L\ݔů����A �V� �SN��� H�������㚱�a�T�=n�� #!V2����L);ZJ��`�N��#� {�� �(: ���b�g)�1��8���,ie�� {�f���V?4#���vNQ|�C����R��##.h��!���L�7Uְ*���ZJc]�e##Jz� �a�;���(���q���Z��%-�����9�?f�N��3f� O��0�h� ,I!M��I\����"�k-�]� g�gi��S��^V��(ʶl��0�"?�O���!��t�������Q��� A���%s�$ ��W�߃V�*�� -i�� L���&7;k�@�ċ��)�Rvֵ��=���v't���8�=��< ��3�10��[��(�GS���ٜ�tUק� -`��xf���R+�[%��HQ -���pU��[BX#�"�6��Ǣ.���<`���j�uk���� ���L3آ2�T�d !d�uD^Fh� �K!E: G@v���-��?1�ЎCHGh���.��<���Fx5�Z>,T�0<& `&��C] -/ ���O-��I ɣ��� {�� �B�F�YѵE�Kɬ`�|*�㽜��]9+�U}���t��&6F��/���)�Sz9j8�A� -���n4��%�t�`�YPB�'��QG�p;�������b ��Y�Hv�)����A���8��~/��~��VY���-}�'`(�̦G���>]ݲ�ܔ���F}�<e��4>������ -2j�H���YF2�Hl�B��D���2|s�˭�W�/���endstream -endobj -1647 0 obj << -/Type /Page -/Contents 1648 0 R -/Resources 1646 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1589 0 R ->> endobj -1649 0 obj << -/D [1647 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1650 0 obj << -/D [1647 0 R /XYZ 85.0394 748.4854 null] ->> endobj -1651 0 obj << -/D [1647 0 R /XYZ 85.0394 748.4854 null] ->> endobj -1652 0 obj << -/D [1647 0 R /XYZ 85.0394 748.4854 null] ->> endobj -1653 0 obj << -/D [1647 0 R /XYZ 85.0394 743.3452 null] ->> endobj -1654 0 obj << -/D [1647 0 R /XYZ 85.0394 728.6405 null] ->> endobj -1655 0 obj << -/D [1647 0 R /XYZ 85.0394 723.1655 null] ->> endobj -1656 0 obj << -/D [1647 0 R /XYZ 85.0394 708.4607 null] ->> endobj -1657 0 obj << -/D [1647 0 R /XYZ 85.0394 702.9857 null] ->> endobj -1658 0 obj << -/D [1647 0 R /XYZ 85.0394 688.2211 null] ->> endobj -1659 0 obj << -/D [1647 0 R /XYZ 85.0394 682.8059 null] ->> endobj -1660 0 obj << -/D [1647 0 R /XYZ 85.0394 668.0414 null] ->> endobj -1661 0 obj << -/D [1647 0 R /XYZ 85.0394 662.6262 null] ->> endobj -1662 0 obj << -/D [1647 0 R /XYZ 85.0394 599.7666 null] ->> endobj -1663 0 obj << -/D [1647 0 R /XYZ 85.0394 599.7666 null] ->> endobj -1664 0 obj << -/D [1647 0 R /XYZ 85.0394 599.7666 null] ->> endobj -1665 0 obj << -/D [1647 0 R /XYZ 85.0394 591.7571 null] ->> endobj -1666 0 obj << -/D [1647 0 R /XYZ 85.0394 565.0374 null] ->> endobj -1667 0 obj << -/D [1647 0 R /XYZ 85.0394 559.6222 null] ->> endobj -1668 0 obj << -/D [1647 0 R /XYZ 85.0394 534.1777 null] ->> endobj -1669 0 obj << -/D [1647 0 R /XYZ 85.0394 527.4872 null] ->> endobj -1670 0 obj << -/D [1647 0 R /XYZ 85.0394 502.0427 null] ->> endobj -1671 0 obj << -/D [1647 0 R /XYZ 85.0394 495.3523 null] ->> endobj -1672 0 obj << -/D [1647 0 R /XYZ 85.0394 420.5376 null] ->> endobj -1673 0 obj << -/D [1647 0 R /XYZ 85.0394 420.5376 null] ->> endobj -1674 0 obj << -/D [1647 0 R /XYZ 85.0394 420.5376 null] ->> endobj -1675 0 obj << -/D [1647 0 R /XYZ 85.0394 412.5281 null] ->> endobj -1676 0 obj << -/D [1647 0 R /XYZ 85.0394 388.4584 null] ->> endobj -1677 0 obj << -/D [1647 0 R /XYZ 85.0394 380.3932 null] ->> endobj -1678 0 obj << -/D [1647 0 R /XYZ 85.0394 365.6884 null] ->> endobj -1679 0 obj << -/D [1647 0 R /XYZ 85.0394 360.2134 null] ->> endobj -1680 0 obj << -/D [1647 0 R /XYZ 85.0394 345.4488 null] ->> endobj -1681 0 obj << -/D [1647 0 R /XYZ 85.0394 340.0336 null] ->> endobj -1682 0 obj << -/D [1647 0 R /XYZ 85.0394 325.269 null] ->> endobj -1683 0 obj << -/D [1647 0 R /XYZ 85.0394 319.8539 null] ->> endobj -1684 0 obj << -/D [1647 0 R /XYZ 85.0394 295.7842 null] ->> endobj -1685 0 obj << -/D [1647 0 R /XYZ 85.0394 287.7189 null] ->> endobj -1686 0 obj << -/D [1647 0 R /XYZ 85.0394 272.9543 null] ->> endobj -1687 0 obj << -/D [1647 0 R /XYZ 85.0394 267.5392 null] ->> endobj -1688 0 obj << -/D [1647 0 R /XYZ 85.0394 252.7746 null] ->> endobj -1689 0 obj << -/D [1647 0 R /XYZ 85.0394 247.3594 null] ->> endobj -1690 0 obj << -/D [1647 0 R /XYZ 85.0394 223.2897 null] ->> endobj -1691 0 obj << -/D [1647 0 R /XYZ 85.0394 215.2245 null] ->> endobj -1692 0 obj << -/D [1647 0 R /XYZ 85.0394 149.4956 null] ->> endobj -1693 0 obj << -/D [1647 0 R /XYZ 85.0394 149.4956 null] ->> endobj -1694 0 obj << -/D [1647 0 R /XYZ 85.0394 149.4956 null] ->> endobj -1695 0 obj << -/D [1647 0 R /XYZ 85.0394 144.3554 null] ->> endobj -1696 0 obj << -/D [1647 0 R /XYZ 85.0394 120.2857 null] ->> endobj -1697 0 obj << -/D [1647 0 R /XYZ 85.0394 112.2205 null] ->> endobj -1698 0 obj << -/D [1647 0 R /XYZ 85.0394 97.4559 null] ->> endobj -1699 0 obj << -/D [1647 0 R /XYZ 85.0394 92.0407 null] ->> endobj -1646 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F47 879 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1702 0 obj << -/Length 2122 -/Filter /FlateDecode ->> -stream -xڥYKs���W��*B��37��8��ڎ�d33��%�)R+R����4� J$����n�?�Q����?��(�\�Q捒� �`����I�4���_���I��D>�G/o����0d���WgJ��\�]��=�>O����x�=�|� �>̰����v�x����|:�{�6�~D�����av�o �*�������/���/Ͳ��1*Ԛ���������W��(�F?�C �">�\�� �+DMɮW�lZ�zj��%\���V��#����� m��ײ�d%�������F&�]Z �i>ݔ��.4htG� �&�p���Ҿ�VN}���f�9X� �U7\�]� 1 �mݳb��x�r�<��Z�Y �Jn�z4����d^�E��t�;R���R�� -S|�̈��U��1���1 �%�sӸ1�_���&��q��w��\+�4��>8W�E��$ģ: -�"����Xw�u�Cԏ� �H��5�C�U� (
pRm�p��[w��C��j�8�v���'!,�7�5G���|���Z�� '�3HW��8w� N��8��2�T:�q�< r�*w����(�)�����P7����5�Y�u�,��
��0;�ݍ���'7.�ݛ,ޥ�(�I\5����"�]���}�Sq��Us�U��GZv; -p��Ll�e���ԃ�yx�γ��!m�H}o -�WP%�Q��A=-�@R�:Mb;4ظ��p��`� �X\��\6��A�6�����u7��[ׅ������L5LI}�E@;�"M1^df/B��� ��� ��T�yu���? �}��U�.� |�Z�Ćڊ��s~)�w�;��gC]$��P�����}��u�<1P�/�t����OL�՜�p�T}<1g�;OLKwOUzza�>��B�B�� Z\ϳ����S$}*v��3����m� �q�_����Ӈ�����2 �!�A�G�� ��' . �]rsi$�v�[�ULSH�.D �j ֬ЫgA ��Yi� -�����\��g����ƫ�����U�Qg5�%�!��>Zcn���S�!����<3�$)6�.|�q�j�:��≀�2-�,N7:�ꁸjX ��B��:s%v�r�(+d-K��p��u�a�����7Y��O+|��'66E^��\8���S�lvlԬسW ���^����~�3�f*IM=�nj�38�� LPxu�b���k�7����av��B��7r)�X}y�;�F���<�R�����:O&� l�(Lg֟G� �ș��<�Ҋy�zƭ�o[�^�5Vć9O�>�I� .\�H��S�ɻ�пO�j"s��� v�j��ˈ!l�
��+Լ '����%L8 ��i�}��� p�bXW�,�B\�B��eUl M ��L��#�y��43O��S�N�tM52�kE��Y.{�8����hs�������% "컊p����(���=[y����� �`��endstream -endobj -1701 0 obj << -/Type /Page -/Contents 1702 0 R -/Resources 1700 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1589 0 R ->> endobj -1703 0 obj << -/D [1701 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1704 0 obj << -/D [1701 0 R /XYZ 56.6929 749.4437 null] ->> endobj -1705 0 obj << -/D [1701 0 R /XYZ 56.6929 749.4437 null] ->> endobj -1706 0 obj << -/D [1701 0 R /XYZ 56.6929 749.4437 null] ->> endobj -1707 0 obj << -/D [1701 0 R /XYZ 56.6929 746.6461 null] ->> endobj -1708 0 obj << -/D [1701 0 R /XYZ 56.6929 722.5763 null] ->> endobj -1709 0 obj << -/D [1701 0 R /XYZ 56.6929 716.7581 null] ->> endobj -1710 0 obj << -/D [1701 0 R /XYZ 56.6929 701.9936 null] ->> endobj -1711 0 obj << -/D [1701 0 R /XYZ 56.6929 698.8254 null] ->> endobj -1712 0 obj << -/D [1701 0 R /XYZ 56.6929 684.1207 null] ->> endobj -1713 0 obj << -/D [1701 0 R /XYZ 56.6929 680.8926 null] ->> endobj -1714 0 obj << -/D [1701 0 R /XYZ 56.6929 656.8229 null] ->> endobj -1715 0 obj << -/D [1701 0 R /XYZ 56.6929 651.0047 null] ->> endobj -1716 0 obj << -/D [1701 0 R /XYZ 56.6929 636.3 null] ->> endobj -1717 0 obj << -/D [1701 0 R /XYZ 56.6929 633.072 null] ->> endobj -1718 0 obj << -/D [1701 0 R /XYZ 56.6929 609.0023 null] ->> endobj -1719 0 obj << -/D [1701 0 R /XYZ 56.6929 603.184 null] ->> endobj -1720 0 obj << -/D [1701 0 R /XYZ 56.6929 579.1143 null] ->> endobj -1721 0 obj << -/D [1701 0 R /XYZ 56.6929 573.2961 null] ->> endobj -1722 0 obj << -/D [1701 0 R /XYZ 56.6929 558.5914 null] ->> endobj -1723 0 obj << -/D [1701 0 R /XYZ 56.6929 555.3634 null] ->> endobj -1724 0 obj << -/D [1701 0 R /XYZ 56.6929 540.5988 null] ->> endobj -1725 0 obj << -/D [1701 0 R /XYZ 56.6929 537.4306 null] ->> endobj -1726 0 obj << -/D [1701 0 R /XYZ 56.6929 510.7109 null] ->> endobj -1727 0 obj << -/D [1701 0 R /XYZ 56.6929 507.5427 null] ->> endobj -598 0 obj << -/D [1701 0 R /XYZ 56.6929 477.5928 null] ->> endobj -1728 0 obj << -/D [1701 0 R /XYZ 56.6929 453.2532 null] ->> endobj -602 0 obj << -/D [1701 0 R /XYZ 56.6929 369.7201 null] ->> endobj -1729 0 obj << -/D [1701 0 R /XYZ 56.6929 345.3805 null] ->> endobj -1730 0 obj << -/D [1701 0 R /XYZ 56.6929 310.6805 null] ->> endobj -1731 0 obj << -/D [1701 0 R /XYZ 56.6929 310.6805 null] ->> endobj -1732 0 obj << -/D [1701 0 R /XYZ 56.6929 310.6805 null] ->> endobj -1733 0 obj << -/D [1701 0 R /XYZ 56.6929 310.6805 null] ->> endobj -1700 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F47 879 0 R /F14 685 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1736 0 obj << -/Length 1917 -/Filter /FlateDecode ->> -stream -xڵX[�ۺ~ϯ0�>h���E��������)�-���֦m!��#ɻ1����pH����(���p�q8wJ,8��E�Wy�H�i.�b�{�X��+�y��N����j�U�t&�E| -���՛�J���#��~=�eҔ�|q���m[[�ʟ7��<zw�p�+�JX��wq8!eFi�v|.�}Q[ll?� S��~���p��=��<Z��G�2e �qW��Q���F�SȌ\�ٝ�]ʔF �Ҡj� ��������pL�\� X"��]��nھtwx��~ԩ�L(�h" :Wsz ����d��� w�p6Q��
�IF�����/��l���#�I�*I���h87�Ug{o��Yp�,Q���L�Yft�\V�,��Y���9��*ຬl=�|*d�2��s� ��v3V��:���5��m��O�4���vU� �J�r��9�po8���ϫx�Dsx �慽W�mw����/?�a9�,ɹ9�NƑypy#V��+.����Ё���u�䷽�M;0� .E�J%KR�G"��rď\ӈ���EӒ�\�D���-pME�T�cQ�-�B��
j��s?|��� ����r7rOR��ǔ��.( �G��5_5���!�'<*�u�튡l���h�݈,jZ���L=�4�ι�?���yh��V -�.� ��v�nb���v * �r�čۜC��L����*"�+H,�}[O ���E�?�q�Z ~�����x�w�]�;�[ �n���Im�|��#>��J��+k�}n�!���k9])# ��ʺ�Q?t��8ၼ��K�0�Xg.��@ʄ ?48�%�`�~�4(��G1ZZ��]OK�vY�n�Y�o9���%�^�\�kX�@ �� ��Њ3
RP���C0�f�� ����#x�lӽlr�C{?��!D��m�d���h���E5�֬g�0�h�����'*�>�s²<�pǜ�iJ����~��9*��g*uʹ2����UJF5�xU p�Խ"�s9l��lv;�~\���5 -��~g�G�i �%�����'���� r<��3�BXS�q -0 �P�L�~L!1Ŋ�GrbP����>G Cg�L%+�r����boM�~��4i<�90�1U�C=U�'9o��-^� �LD� �E�7I���5�0��,�i΄0�7d���*���� -;� -���]��K����|��IȊ/(y���!�)P�[��<�U� B�CQ� -o����P�c�����>"� ���ʮ ���Q��� 5P~Dr͛ �C�z*�9?�ww�����������a��-g3�Lf�hg��*�߆�Rn>�~6�|� C��D97�2"�%B����&/���*d T�q�rn�q�Yk�J�� �R7 -���藾�VsAO�b�*Z��� ��*�дV�'[��{���'i},�9B:u\���� -endobj -1735 0 obj << -/Type /Page -/Contents 1736 0 R -/Resources 1734 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1589 0 R ->> endobj -1737 0 obj << -/D [1735 0 R /XYZ 85.0394 794.5015 null] ->> endobj -606 0 obj << -/D [1735 0 R /XYZ 85.0394 769.5949 null] ->> endobj -1738 0 obj << -/D [1735 0 R /XYZ 85.0394 573.0107 null] ->> endobj -610 0 obj << -/D [1735 0 R /XYZ 85.0394 573.0107 null] ->> endobj -1739 0 obj << -/D [1735 0 R /XYZ 85.0394 538.4209 null] ->> endobj -1740 0 obj << -/D [1735 0 R /XYZ 85.0394 504.6118 null] ->> endobj -1741 0 obj << -/D [1735 0 R /XYZ 85.0394 432.7569 null] ->> endobj -1742 0 obj << -/D [1735 0 R /XYZ 85.0394 303.3232 null] ->> endobj -1734 0 obj << -/Font << /F21 658 0 R /F23 682 0 R /F39 863 0 R /F53 962 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1745 0 obj << -/Length 3971 -/Filter /FlateDecode ->> -stream -x��Z�s�6�_�>T��X� -�\ 9�=5`�Z7�� ��j��⩜'�<uf!���|�S�G ��q��3���I. |v�0�p���� �O��E���蚻��`�[ߘ
�32������M�U -��K �] 6؝�tBؽQ�v���{T؟[t'��EDž�_���x:o&N*�R���Ʒ���IA�7+ N�����1'�oij���� �S�?��̍��7�+OƜ�ӓ"8�# -�m� -[�6�� é=� ��>Qܼj�O�`�xSÈ�ג�E�L�e�P� ���v�"�rO_v��b�NV��l?Tk�I.�Or�5�/ Z��s���%L����T��5�\ -)�;) ~cS�-� 둾�:�C�b<��'���b�N��rv��1 ���A+#����;̫�y��!p� ���#��$@� ��S�<8v�d�Em�����r��z D)��z��㢢0,#�TdW�kO����� ~ �G���d�H{�ި��i\<��O.�?r�d[/)�3��"]��Ni�8r\�=<�ݺ�O+5��u S�\E�w�z�� ��.۔�:��*�^��0�� M~�15M���g{��D]>
��9� "�(��(P.~��CB$�~@bX��g��W|� ��i�=dϧ[0eV��v�k�^�W�z>V RI��섆�V��c��"z )�`$^RT�m�q52�Dd=� o1 � Y,*��ʱE��.L6[�}ن�%����:�5z��!�����U�W҅�Z�+��3���i��(y������c� �?�d8 ŘD��4��>1;��Ew �=���q�U:ۇ���w�Î��ݪ�5�1w �Q@�G��Cw+L -�k,]IvfR q�`%�K�q��8$�NW`r -0+��*J�,��� / �D)�����I$��A�e_'��^fĪ0�Ī&�)�D������XI�Y��7K2m����a�+���j-4�I�{!p}�o>!�e]���-g]�P.�w"0� -�آ /ۆH�m��H��0]um��#"�*�+�R���Ը9.�;�GtzX� �����J�t�j� �;�۱ˣ,D�Ū��C��)�����:���u��g،�9|�����ݫl,���w"�#K��x�@u�'j���w�F��
�`�A<�>s"Q2�C=Lb� -��4d�V ��K���]����s�I�M�z���c�ݏ��bK���jm�L�8��B��>]��sZVM!�m����rK?�vǀox�E�Sy������|0� �8�9�]W� -ê�y�vQ.�_3���5T� -we�>K�@y��d�c�` -endobj -1744 0 obj << -/Type /Page -/Contents 1745 0 R -/Resources 1743 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1589 0 R ->> endobj -1746 0 obj << -/D [1744 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1747 0 obj << -/D [1744 0 R /XYZ 56.6929 752.2728 null] ->> endobj -1748 0 obj << -/D [1744 0 R /XYZ 56.6929 504.0748 null] ->> endobj -1743 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R /F48 885 0 R /F53 962 0 R /F11 1299 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1751 0 obj << -/Length 2762 -/Filter /FlateDecode ->> -stream -xڭZ�o�8~�_�G�QI����!m�E�6�I�=�yP,9jKYKN���
9C�%�pw(PK�!g���̐ -_0��� -��rk(��b�;c�'h�x�I��)]t��ߟ��U� �(����XI���/�o������W7�_��-������^~B����� ���5R,%n�"����x�p�����w��0g�x��ٷ������X t�����u�؝I%%�p����� ~�N��:�I��0 A c( D� u���f�z�l��<%ˢF�߇|_���y����T(�QV��o�M?�#JҒ��ۧj_4� �%+�[y̋� u��BD˛[��|���)꾃YU�4��, r�y�� -�����<YV/EF&�2}&��H����x(�X��a03��*u��:`:�c&;2����A}:�����ȩ5��./��-J�"t�K j&�K�� -�����i����*�&z<o4x]<���L��
|�(Ih;�4�q �.*�0&�Z;��a�.�X��,2���W�� ���'�dͨ�=q�I� -f�LA�F� -�<�@���c�f��Q��C����ꖨ �k5�чr��n�J�����?)&S��3�b~��n�zAC������(�⏅öTe�Y�?0�zS4 -E�B�A��� �������E!,w�y�^���E �&��id��,b�"�Y$=��c��=1�"�e�J��9 ��S�PiՎe�� ����W�$�/@�m��x2�I���)C (.T?jt*<J�kǷ�t��5m�%��9m��b[4�sι S�3� F�{ʗ����P!ԃ��R�o��-��աhL�$�d��P�j�o]�i�y-�&d�j��pN1(��n�5�N��9������ˮ���m�?�SV�Jq?73�HbT3<C̷�93 v�a;f�NaF�8 �<�14�6�h� QL΄�BDg$(�R*H�d���DL���Mv� !R�@*-�XҎ�̒:-��Y�K��SO��8\W<JX<��:u����Cɻ�)�D�Jx�s���c�2�v*�B nR���~�x[z�y�D��C1��;Dv'>�VB -�+�`����T���}��my�� ./�Ё���O�����t�H�`�T�6���">~�VB�pG�wy�z���j�2u�ְ*�Nh'��I�L�yܒ������P�\A����}��;z
��$�����'c�?u܂ZQ�h�ҧ$�w���TN�)�%�0���Z�{�k�0��b4L�o����0�3oS� I65�S��`j6Ot�н5
���%�
�K< 2: ���>��0�%F�8}ښ�Q�BN�g��DY:㍮��������Mf��U�Ξ�l܃@y:� Hu ���;��,0�2uZ��,�hͰ�i�,�T�L�e3�^�ԃ���� --ػ�ή3�o��#�X��b�楀���M^B5<�a�� I�7�t]�i{-���<�g�� >�>��y�a`U��A�� #(<|��_���&_��b -LC� ��њ���j����!�5���X �!왾�/�S�!}P|$��.��܅l^v>��"��Rm�?�L��AGo`�Q���)�7�
�� �R �Y�^��r Z ;8�L�w����?��Je���� � ���?i�$FƁ -endobj -1750 0 obj << -/Type /Page -/Contents 1751 0 R -/Resources 1749 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1754 0 R ->> endobj -1752 0 obj << -/D [1750 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1753 0 obj << -/D [1750 0 R /XYZ 85.0394 695.9587 null] ->> endobj -1749 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F21 658 0 R /F39 863 0 R /F48 885 0 R /F53 962 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1757 0 obj << -/Length 2840 -/Filter /FlateDecode ->> -stream -xڥZ[oܺ~���GITR�(�@ $=�A{�8h��h��J��� rH��mO[�(q��|s�����.�(�b�<N Mw���=��/W�м�Do|�w�W�+�vE\�D�n ����9��V_�w1��a������D�$����|�����}J�������o���n� ��ç��_�>�:a|�)aJ��W_�Ȯ��"1+�t� 7$�E��W<eq��O��OW�t z���%�4�ӄ���� �/����@��E,X�x��&K����K�ݝ��|��t�4�c�0�%�j� �#{�X�I���o�����F^�a9��'=H�^�5���ﻇ��F����W���5�#���k���}��+��H{_8�� ��gyz���F -oν����L�h���zT h���* \�������Q��O\���y(������z�0B%��>ؿ^�-%EL�,��mA�� y8f١��WB����H -1�`��T��kx��7͡������}w8�v���ź�p<�� -�����R���p\p,!bFT��]ԥ�4*�h�� -28B��{�R78���\�V�`��l��ծ�סruZ6�xzm� -�CY�ת
�#]_����zO��N|l^&^�sw�&:�%T/�mp�H���q�b��B$�D�O�� G���4�[�q�.�54s����A�����ͨ�/�ђ��N]w����G=q� ��X�]X��^_̾ r�8Wc��hF/�>Ն),�h -�Ĕ��M�cp��_�� -�YA��;�� -��Ep��#x�N�\ Z�<���~ ���/�}����k#��~.��<�)��j�v- ���}\�@�m[q\�ܺ�0�1��F����I&.T �� ��I:6 -endobj -1756 0 obj << -/Type /Page -/Contents 1757 0 R -/Resources 1755 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1754 0 R ->> endobj -1758 0 obj << -/D [1756 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1755 0 obj << -/Font << /F37 747 0 R /F48 885 0 R /F23 682 0 R /F21 658 0 R /F53 962 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1761 0 obj << -/Length 3318 -/Filter /FlateDecode ->> -stream -xڭZ�s�6�_����� -!�H�f���N�m���ӻ���HۜJ�*RNܿ�v�D��|�^2 p�] -�R& �ʦ��S�1}]M�<�.��eI�g�5G���=�\�,S���mٝϥL��t�z�^�[l'Qs��P>O�ӄ���ft�{�MyΣ|�U�z�V���aI�Ȏ��|]:���"e"I8��ㅸ`��Dq9��aR -E����˜D �ò�۪�}�,* �ϢmV��d��l.�� ���93Z ��=7
gT��U�:O�jG�U�tr���8�e�][�������t��l��+�eM���J�?�L1آ
�*��m xb�����,Q� �7�v�"{N��+�N��qg S ��DF[Qa7$-�T�f�p�i�i�5�R*� -���6�f�Wu�:�����>���x���� ��q�8qW2cp
^k@���8��Wr� ]ɫVQ��Z�I9�Njk�x"�� -.6��d.�T��&�i�ڧ:nS�����}[�Y�~3��J��rO�Tc�C�� KM��ܭU^������5 -:�Ӹ $h-�]K���k��+�ϴM\�3��t�gLHi^е � ]�TV�ʢn_5R4�0��>�8P�9 �/h�d6d} ����id^ٲpVYJ�VMM�� �Y�c���}U� W����x��К -H= -D��2�A'�ا:�@e��K���� �ZUu9�c��l�i��j,��`��81C n��=JdtN��>��
���Kײ牍ۏ�H�'`����=�hMK3�N�v����:'�.����n��s��dNb3�o�o^�.s����SH���;hXdl�A�oh�0T��G78ܓCuD��uѱ9�"½@ �� ���K�M � �֦��j�> -�����mB,�<�˅,��T��E�>��B���w�ԡ9+���Q��T��n�'Ǩ�/�(!K� -,�|A�@5��@[lb��"\t��n0N�� ���ݬ�g��
H$:4:�ƞ4�R�ܺ�����|2R�+4~ea�C _�`�j� -B�.3=Ąw�T6� RB'0 �\����ǯP�di���N\�� -W -��-����1d"";�<P���4U|������C� ���[� 9/��j�lm1��<����c!p����iFES�u|��箏���d?���ݔ,�Εf�������(�B��ۘp4�أ�1� �41���$ �4�A@4m��|�ۉG�V8�ד � ^?䐩0���[�p. ��%�u��: -,�`-u 6b�� �{���6l�*����T+�\!t���r��2�����Ǘ��\Z�M���a����&�R����ݷ����:~�v�[z��{T'�,��KL�����_����%:��ETc�h0�%�$C!l�Ҫ��T��C�ҵѨH�Aw��Y�s�1��4�/>4s�z�����TL�P:����k{!� Ũ��e�l�� -.a*���#�5Φo����Nى� ��) {;�I;%R4���@jܜ�ۖ*�8�/9VW�%�2�s����H��'慠�Ou�Z�౺fc g��%�8#V���1���Y�y:��/�\�J~N"7{'/��N̵7��?���t�МJ�ܖ��"�l��� � &��b&ƲX�C��0Ʊ��7�1}S��c̯8�/9�1Tk%���c�v�-�c.����6�a�E�����=�Gw�7��V�t�����m� -���2'��^�Ue��¨�?�[�jW�\��t�x�� ��9H�@V�?�ߐK���>�+F%U"���x)R�� -�ZB��+����_cR
�� � ���r��8��Rۇ }C6Ύ���6 �$OU�SU�l�"E؎}�E.Ib�9*�H� j�ŵ��]n�}��<W���E�T�4���M��}A��!��s�����=a��@��GTH�_ۻ�����?S�a���b�/���NI�w�ga&��櫩=����<��r�������P��CQH���V�0��=����������w�f�.>u*!�� HH�\�&TRp���~�Ͻd�[ ;h�IZ4��Z:���q3�2^�m*h�26� -�z��K"K�@`�����V���X���A��ud0�۬h�Y!aA����]'��mS�N _��=�X �;�,L�Y*E>@{ ��>@S� -endobj -1760 0 obj << -/Type /Page -/Contents 1761 0 R -/Resources 1759 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1754 0 R ->> endobj -1762 0 obj << -/D [1760 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1763 0 obj << -/D [1760 0 R /XYZ 85.0394 204.5196 null] ->> endobj -1759 0 obj << -/Font << /F37 747 0 R /F48 885 0 R /F23 682 0 R /F53 962 0 R /F39 863 0 R /F21 658 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1766 0 obj << -/Length 2180 -/Filter /FlateDecode ->> -stream -xڥ�r����_��Δ����[ߜ��љ ۍ�9�$y�I��E��v���4%ѣt:| ��b,.+& >1��2���f>�$�.���>\K3sD�!�����{Nb2�,W^�Q$&����I6���n��Τ H�]����^���c4@������竏����һ�p��~[�vq��J,�BQ~\|��'��g*���3 8q,'Յ��RS^,.��3 ̚���I�1�c*�! T���Y -C�#Xs��f�
�G��?� $�΅~u])�E/31K6���3T��^��['݈3G��Q�W�ⓐ����P�EW����Y� ��$��d+ - W��TB��C :(�܂� �'� ��Q�Jk.����4�˱��f2�ȣ|�X���- ��|�i���r<�K��8h�j�(1���\E�39y������[���(Q���ukB�����}f˷u�N��ſL -�eB��_Zig��4�vu�J�
r �����[ ��(�^�]z��ۦ|bp�W� FL��?���߿��~�K�n�1�ۛ,nnHW w�c��i;����Z��"Cd4@fu����{������A[5@-�{�}z�Z)�4�X��t� -�Du ������G�s�� 6�>�� �5
��r��T
�@3�g -T����{X -�7t�����z9(6�_fɻ�������C�c���&A�Ԛ�Iێ�)�IC�3� aZ�߹b�5ݫ������ w�C>�@LJ-�9vg9v��X�� -���1�?��{N��U~��G-Z z�ˣ/�jd�C�Ve�8��f:�N��{(�U2G���Ѡ*L�0h\�,�}��/�w�#ya$,���JG� �/�4�k�j��H�Q'̈́�%��[�+S���\g�;$MC����װ&)Kˍ C�z��<��M9z8?��rf�@��-t�,I�1�OOEj 1|~HL
��?�Klmk@ -��;,Z[ym��ΰ ���)�ߌ�BB���w>�)$�J�]n��]l��6e�wU��P�6��, �{<"����x�1�'�>�� QF]'I�?���ɽ�� -endobj -1765 0 obj << -/Type /Page -/Contents 1766 0 R -/Resources 1764 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1754 0 R ->> endobj -1767 0 obj << -/D [1765 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1768 0 obj << -/D [1765 0 R /XYZ 56.6929 626.4701 null] ->> endobj -1769 0 obj << -/D [1765 0 R /XYZ 56.6929 517.4334 null] ->> endobj -1770 0 obj << -/D [1765 0 R /XYZ 56.6929 438.0429 null] ->> endobj -1771 0 obj << -/D [1765 0 R /XYZ 56.6929 376.8269 null] ->> endobj -614 0 obj << -/D [1765 0 R /XYZ 56.6929 339.1376 null] ->> endobj -1772 0 obj << -/D [1765 0 R /XYZ 56.6929 306.6767 null] ->> endobj -1773 0 obj << -/D [1765 0 R /XYZ 56.6929 271.6646 null] ->> endobj -1774 0 obj << -/D [1765 0 R /XYZ 56.6929 207.5268 null] ->> endobj -1775 0 obj << -/D [1765 0 R /XYZ 56.6929 137.3205 null] ->> endobj -1764 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R /F21 658 0 R /F53 962 0 R /F47 879 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1778 0 obj << -/Length 4061 -/Filter /FlateDecode ->> -stream -x��[[w�~���[�sV\\�9}p���M���Iۓ�h�'�);ί� f -�V�WS��IQ��N�MW5u�b��J���n]� Q���|I]çe�-a&O��bͭ�_�|�1 ?j������oy���x9r� X�q9�gٴ�Ȣ�����HU�$7F����n� ���+�/Ԭ�+ �#{���a#0�_n�i-�XU��" E��|�����<��벛�ޖm�zJ�M�0�?,2K���q9�Z%� s9Uа�t� �<�R®g6HiZ��!�$M��.�#�� - ���5�W�+-?���b��˨ �躪~�7�P�*⒦Og9�g��Y�E�+Nt�N%RK�y�P2qƆ ���W���H5�6�l��������qS`�,��pS��,���>!�4��T���1a��[� ���][.^��$-��gD��ԥ��s�ZѠEו�M��7�T�E�nV�K�"߸��d���?�݃w����YfȀL@�-s������׃��Y3��g�1X��1a���i3�}j�N�]�l�UWt�SI��~Lo�H&��� �o�J0hh����pp���Z?^: �ܧ�,�_�Pu`h�f�n�ߡPq�b�Έ3��ԛ~<4�`.�aEoFk���ȏ�6h�t>��*��TK�U�Wn��w�tM�ߐ�!� �[�hh��]�� ����|U�� -I�X�n�|��P��Ĺ� q���V�ռ`�g%=Ѯ� ����݆h-۪Y0�[�;eM�P��y�,��.y��;��x��|c^�S�'�ۂ
_/ʇb�: ,��[z�#���r 3�7?�l��Oރ��Y����ͮ�6�h'�e]n m5���H��Xy����Eg�#y�9�$�p�n1 )�̂�m���&;n`ynz �&$�ռ��s�"� p�=�{a���/2 ��Cb�I�dY�3R� ��چ|�S�� -X��7 -rr���_!y%�G��ގ#.m��J5�aj� -����$u�0"���[y�1No��=�{ud���|,z ��;-�yu`z����ڐy �pm�2� �3��ۦ���� �y���iw��.��-Ypק���vϳ�Z+w�� ݍs��P'� *f��`�+pOL����� -���j*G����E����� ׅyʶk����mLЦ�xE"3�g g��������S(��齵X�H���
�4�n><�D -� �^&�f�3�N-џ��r�4�?^c���kوb��hX��l�I]���n\ NeG���G��lD9�H!s�6E^�"�H{ٔc�_�,6VA��� -_���=�F`��Ta��
�-��Z� ������]��3�*�B�v�d�ӂ����z��x�, -����%�b��W��9T�f/����=��U�p?�F�P&�\Şr:���T:5�u#��{5(��'�j��\x3�|S=�&� �$�h�&{BSw�uVt�1�%��q�ӌ[�Q��b3��ן�� ����ƃ��S�d��5
��x|561Y��/`-:%X�LB����n��i���:��9�eo��{���Tt7-X]�-Θ|��d4��x��E��M =Y�c��@�24�}� G@���k�O��i �iK~M�7��
���� -�O:M�S�>�$eb����{�q���ok�Df�=_~T+q|������SS���2]�kI�°�#^�ݛ*_He�F��� ��á}��7 6`%�M��2Z���x������u��+�Z� -H?| -endobj -1777 0 obj << -/Type /Page -/Contents 1778 0 R -/Resources 1776 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1754 0 R ->> endobj -1779 0 obj << -/D [1777 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1776 0 obj << -/Font << /F37 747 0 R /F53 962 0 R /F23 682 0 R /F21 658 0 R /F39 863 0 R /F47 879 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1782 0 obj << -/Length 2136 -/Filter /FlateDecode ->> -stream -xڥX_s�8ϧ��)3�?�$�۸���4Wyg�&�E� Me�k���>���H�t��) ��lF��f2&��j���H���]���}�`�'��1���"�)�b �V�����4e���6xG� 4��β����|\\_�L�R�����ߗ!�����������gܻ�T<�\d��W�_,V�Zc�F��.n���,���7�~���.")����w����_���[{�� -F 1����cDI�'ΐ�Ă ���5��qs��ۥ��ʘ��ȑt)<�q<lē�4�)�����<r8#R�3�-\Β�N��Pipw,�7��=n����'���;}��l�*����j���� ��V�o��~� �7��QP:�E���{�����W���ԡ�e -����� -V̳��%p&�Q ��-���QJT$^�'4Nǔ���KP�� ʼ���Q4�I �֭��C^�wp��Y��W�Ư"Rwz�� ܺյ=j�f\� ��٘F9p�*�S u��Fטgj� 7Z}8Y��n���a��&���BXn�읓}�Q���D䧈���Cs����� ���F6���L�*gFe k>�~m�PppQc�'8w*�mSC� �A�Q^�9�|��!rFa�� �� �����ӈp%�,V1(�_NT��~8 ��X$��X7N��(y�٨x����>/<�IB��;St}*��;]w�S�{Wi�����{�<�s�O�s�([| qb���w�C��( PO�P⚑d����yX�A/ -�� ������o˛��뵧0��9ԞAj� -����u��� -3����f�.3;� �`��b�Jio ���x�� <������j�4õ�W��(+����=�|$�ME� ����zm���C \�����
�JBG �������(����8v0�we�W���x��D��G-*�-y3�dP�^��� ��sM�� f� -'8
�ѣ��KC�S�
� �ݱ�J -endobj -1781 0 obj << -/Type /Page -/Contents 1782 0 R -/Resources 1780 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1754 0 R ->> endobj -1783 0 obj << -/D [1781 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1784 0 obj << -/D [1781 0 R /XYZ 56.6929 751.8114 null] ->> endobj -1785 0 obj << -/D [1781 0 R /XYZ 56.6929 637.809 null] ->> endobj -1786 0 obj << -/D [1781 0 R /XYZ 56.6929 571.6272 null] ->> endobj -618 0 obj << -/D [1781 0 R /XYZ 56.6929 530.4875 null] ->> endobj -1787 0 obj << -/D [1781 0 R /XYZ 56.6929 492.9536 null] ->> endobj -1788 0 obj << -/D [1781 0 R /XYZ 56.6929 459.984 null] ->> endobj -1789 0 obj << -/D [1781 0 R /XYZ 56.6929 390.8804 null] ->> endobj -1790 0 obj << -/D [1781 0 R /XYZ 56.6929 303.7532 null] ->> endobj -1791 0 obj << -/D [1781 0 R /XYZ 56.6929 225.6163 null] ->> endobj -1780 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R /F53 962 0 R /F55 970 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1794 0 obj << -/Length 2915 -/Filter /FlateDecode ->> -stream -xڥZ[s�6~��У<�\y�}r�Ҵv6Rf�����(��TE�����98 -Y\!O^����`?]q�`�� <p&�TN6W�(f�R~���_��[0����B����� ��G��8�0��`<��C�(ج�~gL��%��,��6y�}� KDh�bc����Pܩ��NY�����|�/��9�y�%��)�N�R�;�S�
��P����B�)����tA���9+��w�Tp#E�DlĀ��6��Ti�웖�� `bG�G�?�w�4�;7|]�� �����6�'3�j��+�R����Ra�e�p!P�� -R�b�>�;IWf fB��R2���hSG�Ȉ n� -5⛿R-ڣH��l�[�P�%�X -�����_*�{#o��{��4yȨ��Ѻr��T �,�~� �Pb&#�b.G�4CQ
��J��V!�7v�鱸���ҫ��GL�ܟ$��c���ƞ15:eKh�t7�c��{���2 Y4���K�� 0 �Nǐ&'r8s�Z�)�qL�&WǬ��Lb8��6A&�endstream -endobj -1793 0 obj << -/Type /Page -/Contents 1794 0 R -/Resources 1792 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1797 0 R ->> endobj -1795 0 obj << -/D [1793 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1796 0 obj << -/D [1793 0 R /XYZ 85.0394 181.7045 null] ->> endobj -1792 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F55 970 0 R /F23 682 0 R /F39 863 0 R /F14 685 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1800 0 obj << -/Length 1931 -/Filter /FlateDecode ->> -stream -xڥXKs�6��W��2D -�=h�ԇ�HPX�h,6J ��G�D�(�b��y� �`�z�BC,-�W��\]�Ѳ*�$+k3K�_��6�_&�����#�����КM�X!IiO� -i���e��"�7��&yV��*�.���n���V튬�������#y�d����}4B�I�vR�~���wY�s)z�(D|��鉰G5� -k�wԇ�P�.[��*��ö�c��:CZ��~���-���uO�'�V����@��UiFͦگ7nl���?�Z
=֠�=x;�p�ew�V�{����Ň ;V�p #I9kՙ�:���4� �`&�a\�x -�9�āwE�=����H��S�� D���P��@iA�sF��U��l����D_Af�����\�eUx4 E�:^�.en��y�-+�fKQ8a�[��SC����{��ۣS -��h=�O��g -�CAb�[Z��,�r���Go ��Zc��&�4�O��:���;���Չ��e -ߑO���HI���P�/�;m�w� -3w�w���|1�0
�9��z�C� ��Q�i/}��2�P�:�@P�D� u�gb�l�7� !q���
L���8�'1�d���PxXte��� S���'6M�?��. -�! O%�.J��$�N5K����A�_ݐ�th��jw^�9E��6kΕ�B �ǯ<mۍv���7`ULU���������e��dל�� J��+:�M7z>����C7�����V_��l&e d k�`a��N#� ��Z<���%�����az����<���u�''�Mi�ܽԌ:; ֖�����T�����!���2�L���, -!@��z�"�]������ ���q�YL�h���$��R�=Ծ����~�endstream -endobj -1799 0 obj << -/Type /Page -/Contents 1800 0 R -/Resources 1798 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1797 0 R ->> endobj -1801 0 obj << -/D [1799 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1802 0 obj << -/D [1799 0 R /XYZ 56.6929 635.5323 null] ->> endobj -1803 0 obj << -/D [1799 0 R /XYZ 56.6929 476.3563 null] ->> endobj -1804 0 obj << -/D [1799 0 R /XYZ 56.6929 407.9215 null] ->> endobj -622 0 obj << -/D [1799 0 R /XYZ 56.6929 365.2162 null] ->> endobj -1805 0 obj << -/D [1799 0 R /XYZ 56.6929 326.9947 null] ->> endobj -1806 0 obj << -/D [1799 0 R /XYZ 56.6929 293.3376 null] ->> endobj -1807 0 obj << -/D [1799 0 R /XYZ 56.6929 221.9809 null] ->> endobj -1808 0 obj << -/D [1799 0 R /XYZ 56.6929 108.6903 null] ->> endobj -1798 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F39 863 0 R /F21 658 0 R /F48 885 0 R /F47 879 0 R /F53 962 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1811 0 obj << -/Length 3191 -/Filter /FlateDecode ->> -stream -xڥZ[w�6~���#}Z���D�)m�4m�dk��ݦ�D�l$��8�_�3�o�������� -iϗ�3q~}��$�,�b�����7?����.Q����`�,Y&�oVD/��z��� eE�]|��BDo_\���
��_8�xuy}��Y*S`2Ȗ����������ׯ�������ϛ��.o:���K�Q�����S��`?��X�̞?����s�|sf����:P�g�g��& ���sʰ:�m��m(y.e�U#uX'Zi��w�o^����ۉ����J�N�j� ̴r��g��p�E>]��X�L _20�,�K���tv��oRʨؖw�d�|���}Qۼ-V�ؔ�U��2��&>��$sq&�qT7C�ú鸼n���7?X;��"Vl+<�r�7�T0�l,m� ���m�C��%��cٮ �e�AU4������5H6߬�&L����Bm�b�:�:�����qN�2ΜլЏ��:���$����f�S�
g(�ͅ9Z�^,��Q�ixE�7�Gt�����'�@�� 9��'�����D6�����g� ۲����y��b_8Pd��P
�3���nݖ�k6y[n���q"�;a���.o����] ޟ��W�&/�=��� -��u\3���dӏe{�x -J �S%6z�ϝ߈�-QA@bZ�J� Rۚ�W��VŞ� -�ğ/���Պ���fG�k�v/��������?>�*�pC$֍m�%Fx�o��O~�����O�T��'��>1�:� ����I X��b���}4�"N�$>*\`�n��Ʃ4z,ݛ��H��yA��2�ǩ�� -}�s��l@�D2��:@59�dV-�<tn���m�, �S���d�9�u�526J&'L;�:b���M{?�Od.9�d`�Yr�Odi:Yr�x�]�:yoP: ���? -C�g�7�Ħ�m� ����i=��\� ���(�6��bu8� ��B��p 1O���iN�4M�o����S�$=.^�5#�(�؇n��k|b(�BcE��1��
w>=Ո_�I��� T -��7o��ᡟ�u �Y(g�0F�e^Va -��K��EE�á����R�˧�xZ�Ĥ=���ק�j��
��<������˅ߑ�'/�����k��4��6�C� xV�H �� �1P�! �� -<���w<b�9��-&&�'�.NS�1+{�� -S|=R�� -�U c3���G�
PŅs �Aם��)ס�� ���/�'���>L0����4j�;m$�;��髫��n�; n*n&Φ^#c8�� -Yw9���K[�>qA2�:�] �Ǯ��b9�t�T�k w��\�$T&M�q�:���降�Mӱ��L�2�� �!�
4���&��M IX"� ��Xh�Υ{`m��x��D���\+�f���/�X�3�s����4P9�cF)�b�����,���N� {wY�������}H�X��ąː�.�C{��1'� L3K�*0�`'K�ߖUˇ~��C�ee4��&�> ���k�0��,�A~����-�H�8��]%U
��-��3c��ĉs#?���J3�ם�N�\���qy딧��@������|4���u\3��ک K��.����N�Oe�k�ϋ����[%'�yӄޜi>(�lj>5�W�ظ-� ��� -�LL��2fFo��.t�5��Q���qR�L3���:�a ��3g�S�k��wtg0� \�g5M��ja�]V�:k_Y����i�P�e�۹ ��Q� ����ar!h��f��,/���L��4b�7���� V�OeS �i�UA#W�rM�������V੩��O�<4��.��{��u��*��PK���2 �Rw�H���ޛ�?5��n���w�q��q
{�nҒ܁�[-�~[�OEـ{���H*T]v���2��k%
��� rŗ��c- ��_�� <B�?{'��/.jC��a�(��O[��r�Oc���)�K
�5z�����i ��R�r�V�tK�̈́�a�a��LU�i�s� ���@�?� -�<p � :*�-�j��J �_+ᰢ��r -endobj -1810 0 obj << -/Type /Page -/Contents 1811 0 R -/Resources 1809 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1797 0 R ->> endobj -1812 0 obj << -/D [1810 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1813 0 obj << -/D [1810 0 R /XYZ 85.0394 751.8312 null] ->> endobj -1809 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F55 970 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1816 0 obj << -/Length 2975 -/Filter /FlateDecode ->> -stream -xڥZ�s�6�_�����I -3wŷ<L����/��x�f鎵X����`6�R�� �D��x�ǚZ�� iV���U�k���e�n=�����}^懔x���#�<�� } 3L&I������䈧_�22�t[W���o]\���}t�(��~?��"K��P�u��O�@�G�=����:�����ǝc�`wt�V�,*����
�lS��c�\��� �
cՆ:?�k����������2m��� -ε= �(�d�0v��5BeO�Z���' �*�zy�� -ɒH�� jl#���t?Q��m�h�QN��7+�]��U]wۼ]V��Gz�4��,� Γ� ��2�+��� s���-������W5h�W#�D�4�] =��N[Ć)� --����2k�Y�X_ѼL-ʙ�H�O8�T
�%�\�ـ�Ȏ*A -駎fؖp���/����a[@M�K�w -.���< -j�� �@[#�m��wݐ� p̵�u�}��jk�����y�A��8/���A�07���M���v�SТFH��d��4�����!igt�M� O�dP!�����a�QA>�$0j�QuQӎ�E9GU�� *�mjr(��L7X �y�Z�m�(�0�d�����o.Ppltĸp�/�m��9e���hc� ��|u������(���ng�0�]#�5!?���+#���EM˯E9�}|)Ѐ�cl����� �� lQ#���7�$�'�IQi��?����3D&����I�����v�sBЁm t$0~ -:N��4u&��wsu t4�N8oiD�1�מ�(!�L��DX��>M���@C: �8���
�f4,����[& �V��e -U���$M��!Љ=��US�_��]E����|;�r��S��q@�3 -�\���b,��+ Q`�3ruZ�� �C��R-�� y�o���= Y��Ǽ�㾤�;��/�BOQ�R�Y��fX[������6�r�LOU��X][���"��K!�id� X�Y�N��n�{>Z�ˑj�.p$=T�m֏����V�k�D�����:��YԔ(����[�Ȗ]^%�)nU�O�"$tu���<�_�\W��6G�1��5 ��y�tQ� iQ�#�/&
��1ߞ�-5�\�<a4BX?c��Y@�أ ��z�g������u a�,� ڲ慂`5ò�r,�v�D�V��-hd˞AS+����}Yu V�o� �zv��;�Ej�0�1L��& -�� A�y)�J�p!��^ �o@� -&Y�h;�u -e�nY�_֓� T=]�O�b���] -�đ�8�RHi�������HX�}t� -���֚�X9�*��fCbDk7��G�uS �/��S�4���=[��Z�?G�N���-�7h��'�'LJM_�v��_�G"8���%�k����v[=7 ���#&��_S� ���;$o�P
�%��h��~�$4 �آy�͛@�ۛ+j�Q��
������� -c��!+k�_W�L
w��&��a�}�$�{p�
���OCN% C7�; ��j!K}�?vǺ!ȝ���H��(w�6 -endobj -1815 0 obj << -/Type /Page -/Contents 1816 0 R -/Resources 1814 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1797 0 R ->> endobj -1817 0 obj << -/D [1815 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1818 0 obj << -/D [1815 0 R /XYZ 56.6929 119.3275 null] ->> endobj -1814 0 obj << -/Font << /F37 747 0 R /F23 682 0 R /F39 863 0 R /F21 658 0 R /F55 970 0 R /F48 885 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1821 0 obj << -/Length 1544 -/Filter /FlateDecode ->> -stream -xڥXms�8�ί�����V�b��GJH��!�@�n�� �5r�6����ڒ�m��Mf�-�wW�>�"�>�?��9�,p�^�"� �/�=�_ów=�e #�4���{o���P ���W
]>¾O������~2���{�P�o���nG�ϣOj�~����d6t�'� B�x0 �N��������nz=|��M�cM� f�W���<���� |��7� ��m�� q�1���f�?k���ի608���gC#���$e �_�<�N ��TFj�Y��T�F?��s�E��o=������%,��C -8����
I� -c��x��l�m��t*Z��v �\�V��,E|$|�W"7RŴ�D��O�~H�N�y���� @��.(�|� - Wo6�(�F�fw��A�PF�y�[G�+,����zᶚ
A.6�����J� ���6�q^d!G-=4�K-݆r&�,~�B���wQ�S ��J#�[��Q���hXpsh�� xm�F���� ~�ۍ����f��Cu�i��<͊x�=�us� �K��C孀D �0�Tu�Yl��wS,��r� �U�S9�ZP�<֛� U%)��U�X'X*ˊ��A��TZ��A�O-\*��Z'i�&/!�A��9T�� !``� -��� -������ �-��s��Ż9E�늶{�MUs�2> e�=� 3�/<;�[F�@�I�d�j��P���"�-#usl�� +F�yK˝�\4����g��F�0�"�N��"@đ+:3]��k�eC���z:�Ș��8 ��`j���PT
mg�I&�`��VC���Tŭ}�d��G�ߘ4B��X�)������,��T�ôW'�����iŁS r],����8:�k�1u���@�3.� -endobj -1820 0 obj << -/Type /Page -/Contents 1821 0 R -/Resources 1819 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1797 0 R ->> endobj -1822 0 obj << -/D [1820 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1823 0 obj << -/D [1820 0 R /XYZ 85.0394 562.7154 null] ->> endobj -1824 0 obj << -/D [1820 0 R /XYZ 85.0394 499.03 null] ->> endobj -626 0 obj << -/D [1820 0 R /XYZ 85.0394 459.6249 null] ->> endobj -1825 0 obj << -/D [1820 0 R /XYZ 85.0394 426.4105 null] ->> endobj -1826 0 obj << -/D [1820 0 R /XYZ 85.0394 390.6449 null] ->> endobj -1827 0 obj << -/D [1820 0 R /XYZ 85.0394 324.0377 null] ->> endobj -1828 0 obj << -/D [1820 0 R /XYZ 85.0394 263.3171 null] ->> endobj -1829 0 obj << -/D [1820 0 R /XYZ 85.0394 199.6317 null] ->> endobj -1819 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R /F21 658 0 R /F47 879 0 R /F53 962 0 R /F55 970 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1832 0 obj << -/Length 1880 -/Filter /FlateDecode ->> -stream -x��Y[s۶~ׯ�#5S!���b��{;����$��<�HE�⪿��ER��L�N��Ϙ ��;>`Wd�ᏌE���(�H`"�����`�q4SO4mS�\�^|Ϣq�␆�Ū�K",%/�w�K� p������|z����?�_]�'S���7o���M�T` b��׳˷�Wv��$���������|�(�V�`���4z��S��F,�b� -�xɠ\ٙ��M,�B�x��&uVv�*m ��������J!� ��beg���d�F-3��J������$�Z%�������\�2�q� ��Z��^�к�4 OY����b!�!V�Y�'���`�x!GA�ͧ+�D�D�X �
��|����&�/B�`��M�^������h:5�9���(���V���@ջmQYiIa���3UuR�ܪ <�}d�Um
�r�� ��k�RU�e�R/�
�c i�}�*5� �n�=7��x���j��!���K�G����<�gY�ֲ���8D '#>�//.�-�ة���"�j��rk����9�X:?�N�]��KB�h��� �ˮ#fo?^]?큋�V�B����Z�]��ʢ*�u�[ �r�xH ����� (����� -N�,��}3L���%�� �� - ��uY�C ���v���rSeU B -8 ��6 {���P
xo2
!6��?�o3�Ԍ>7��5\t1+�g�O�e�T� -=�gP[��&o���� -�Z�'(��N��Zz��-'欇���e[c�6f8�۹ľ��dv� �:�(��PFge���~B�f1k ��&�tzV�6[�;�d\er�Y啝��ۧk�i~TGôG���J{��ږ��z����,��H���;���r��=����� 5�!vg��o�)A )�`�0�cv��L��� -cءQ����7�Q���h�a�2����+s^ 7��5^cA �<z�o��{"-t���A�p =.�� �k{)��~$���Er�7]���� @,:e3\!�H|���i� �1��)� ���6dnK�ϻ�w,��nj�����Y* �U���:L_wؐ��I�o������}ͥj�` -�9| z�����`bDYHt� ��vendstream -endobj -1831 0 obj << -/Type /Page -/Contents 1832 0 R -/Resources 1830 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1797 0 R ->> endobj -1833 0 obj << -/D [1831 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1834 0 obj << -/D [1831 0 R /XYZ 56.6929 687.0104 null] ->> endobj -1835 0 obj << -/D [1831 0 R /XYZ 56.6929 626.5588 null] ->> endobj -1836 0 obj << -/D [1831 0 R /XYZ 56.6929 566.1072 null] ->> endobj -630 0 obj << -/D [1831 0 R /XYZ 56.6929 528.949 null] ->> endobj -1837 0 obj << -/D [1831 0 R /XYZ 56.6929 496.7215 null] ->> endobj -1838 0 obj << -/D [1831 0 R /XYZ 56.6929 461.9427 null] ->> endobj -1839 0 obj << -/D [1831 0 R /XYZ 56.6929 398.5692 null] ->> endobj -1840 0 obj << -/D [1831 0 R /XYZ 56.6929 263.2909 null] ->> endobj -1841 0 obj << -/D [1831 0 R /XYZ 56.6929 125.0477 null] ->> endobj -1830 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R /F47 879 0 R /F53 962 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1844 0 obj << -/Length 2946 -/Filter /FlateDecode ->> -stream -x��ZY��~�_�Gn���> ײ�ȉ�r��U��0K�.�&9k�P����8� r#U*m���� -������p�pP�)," | 8 lpÖ�k�.�U�o%;�v�h=�Na�l���V�hh�Y ��3�l��g�ŀ[ViXH=���&����~�m��� �R\�g����k� C;Ě�6�
�r�G���� ��I~?��N��&�� �H���#�Ա� ?D�#i����q��E�s��qD5�� �9y~�Be�~7E���2� ���X��?վ3Ƙ��5?~,���� ��)�j,�#�C�n�qݼ� ���]�惡CjS r0 �|��6��ꝒKc@��&]�T����D�a�ϤP-�� *��a4������f1`h� -�O�R�,[�h�W7�HH�:��g����T�]Z��ɣ�b�:�IA��qǬ���z�f<�j*A�i � � � ��S�(DH�4N0�=���浩f�� T��{ĸbg�B`���%�hQ���2���4�f .�������.y:վ3֢l��R� Z�x����� -���\Z\p~���>�t. ��� -Ѩ���i�j���A��Y��,_):�5 uk�MƜ�&K�|��+�16R"c49_Kp �!���jI�P5q�،�;(���/â�²�|;_�_`���2���t+d���ŗ -��3<�0��Q� -I���iSM[f�r�Y�O�A�VJ�� Qp���%��:��m�S�.{?^+�<� ˋI|�I�50��ǯbd
�����n����.%��w�����iZ�1��ML�_H�$;��T3��TN���K-U�i�O^j�嬹�2dm�RK���9k2}�;��U��le��_� XѦ� -rnW���^5�Wyʹt��KO� ��, #N;Ө2���2[�����b�{� \��� -endobj -1843 0 obj << -/Type /Page -/Contents 1844 0 R -/Resources 1842 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1846 0 R ->> endobj -1845 0 obj << -/D [1843 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1842 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F55 970 0 R /F39 863 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1849 0 obj << -/Length 2037 -/Filter /FlateDecode ->> -stream -xڥYKs�8��W�j� UY�$pt,e�S��䝭Jr�)Jb�
�x~�6�"%HJՖl���F���d�Ꮜ��<E��W L�(Lo�h �~�!�g�2M�\ W7 >1���7Zmz�$�R��j�m��h�xq�e>�L)���=>����»��,���-��>��lj�����ɏ��7�UgN�d����ϛo?�h
��~�SR���#� �7\0$8c�Jr���w'������\H$(�� 1�;�(�|B���z�%.?Y&��i����=F�?� Zs��" -��x?�! -y�;�sY�1���z � -�
$S��mA��Eg�~��(��I� G���B��q�#��4N֡���s9^\�2K�� -�$���V�.�e����:�pj� #���ʼ�� �c�I�ji~��g������l}$�o�Y�8�Z��6/�j����X�O��f* D� ��c^�1 -Bٵl>A\��w1��\糩��u��?i��!"%����r� &�D0��Cݫ���iЖ�Ƙ��7G=�P'_"�f����0�h�0i�+��q]�\�e0�v�R#L����ɡz�9��y�Pw�_�u`�g� ��~Ai`>�Y�i�z~Z� �g�����9� y�J�/�� �3�Cr8ڰ6=L�Vu���kQ�Wv,���.�{$�a8*̈[X���+Q\QSK�M�[��J������ܳ��͏�>/�:��r�� R��n<�G���F �C2�"�u����
� �z়�@.� �Gښ��a13����L\Vp���8�m�O�к�K��ЋN���� ��~�� ����c�W���tɣ��!�^�E!�w��S��<+����b�=j�p -K��J`5 �p��J��X5, ����AY/�6�(�
5��]�ʨx� -����|_��q�aP���FDR$���ڿ�B��b
�0w*�Q;�=��)��R^G�vV -���I��Ml]� ��/ɱ��!o�����[��T�p_�.� -I�c���N�Cj��1��Q'���!y�£�: ��|����p�,����_;꯫ֆT�s��E��&��#�?H��|y���z����^�6����:�^z -hh�If��S��-1>�V -endobj -1848 0 obj << -/Type /Page -/Contents 1849 0 R -/Resources 1847 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1846 0 R ->> endobj -1850 0 obj << -/D [1848 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1851 0 obj << -/D [1848 0 R /XYZ 56.6929 496.4666 null] ->> endobj -1852 0 obj << -/D [1848 0 R /XYZ 56.6929 433.6488 null] ->> endobj -1853 0 obj << -/D [1848 0 R /XYZ 56.6929 370.8311 null] ->> endobj -634 0 obj << -/D [1848 0 R /XYZ 56.6929 332.0288 null] ->> endobj -1854 0 obj << -/D [1848 0 R /XYZ 56.6929 299.0792 null] ->> endobj -1855 0 obj << -/D [1848 0 R /XYZ 56.6929 263.5784 null] ->> endobj -1856 0 obj << -/D [1848 0 R /XYZ 56.6929 197.8388 null] ->> endobj -1857 0 obj << -/D [1848 0 R /XYZ 56.6929 126.0307 null] ->> endobj -1847 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F55 970 0 R /F23 682 0 R /F39 863 0 R /F47 879 0 R /F53 962 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1860 0 obj << -/Length 2811 -/Filter /FlateDecode ->> -stream -x��Z�o�F�_!� J�f��D8�/p�8��A �}����V"�t���7�E�%�����Z.ggggg~�A��d��Y�g*�H`"f��ϖ����4q ��T� .^���Y�RI��a�� �$d�0�5���������2�G��e,0��^�}�����_�4�zs� 9g��!�8��z{s}���7�8}� fF�����gs��� �X���'x���)�m.�`Hp�������:���v� -K�H���%3BP* (A�H2ʬ��?ܾ�{p�� -d������[AG�|� -Nn�Y��SV0زo���d 5K�9+�Q���@eϝ�B�Lj2�2'x^��b/ -P�H<" ���uT�%%�X����h��}Z��T��q�W�&��� �jX*�u�>���0��v�5EU��ff�ݸ(�FgsGm�k�|�Y�n^L����4H�R7��2�蹽�Y�$EI!&v��t��8e(5���P�H =�(Y]Ɯ�H�ul�<7��1# ��u�͋r^z��ӛ�pz���lu���>U�? A�h�nĵֻ�0�����]`4�]e�R�4*��
w+�y�� -�
tsr�@4�� �Q�&�[�Ԗ#�8t��\x/� ��w�߰����Vn��|*���K 9�W�V&�9���N�5PY�.'��$�g� D[���D�і�H�Yx�<���[� -^(��>J"!��]d�������N�dOv���JMՙK�S ����^�f -9� H�Xg7I RK��i�:� ��H�HNE:
2 �;)9�l��<ڀM�sm�-����h� ��lY�v -=1�}����>�R�웳�|*l��n ��Ae�`�PUn\��L���l7�6�swCk�w3[�)�l܄ �0��a�T{�A��E�\���]���3-�nm��N��<�08`�}`�N��X�S��Oo ⅾV�wǦ'�yW��%���Ώ:"����IO�S wŎ�����/n�]s�%\��+M�5�9 TR9�ǢnB��$v�ջBס �Kf/�8��ҽ/�·���( 8ָ��-�a��nfG� �S ���Gu�N���z��R ��䖁hb�Q�$��-�T<���RC3���Uc�5p�E^���Mi.9ݧ�U;uq,��F� ->�\4 -'����� :N��Yb�� � �t(�h��r�0��C���s� ]Ld-)}��>K��%��0F�aa~�S������`4�w��$��ǒF7�����$ �K���� OS�zc{ڽ����
�]Wp�Y�X�s�gm�%i���<K��,�S� [q��+���g�nNF���"�GdxWzk��A��TE�n�ݚ�M��%���%�� -��o� M�
���A��,S]��ͧ���(��{���ֹE۴;��;�6]���`� � L�o_ge,���4t��H��b_(���H� 0r�ϡXGeQ���L)�h�����hJ%c�����)PMH7$r~o�vq��!���6�I�{N�tȻ��w�
[�$U��k��0[�����l�����e.`���^�Ȭl��H��z9 �b�&�琝$ܔ8�̻�w�s_�е> -�DrD�� � ���K�ǀWa�0 ��%�����B��h���,��d�g!�����Q �����{ Ɛ�p���?>���Y� -endobj -1859 0 obj << -/Type /Page -/Contents 1860 0 R -/Resources 1858 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1846 0 R ->> endobj -1861 0 obj << -/D [1859 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1862 0 obj << -/D [1859 0 R /XYZ 85.0394 751.3856 null] ->> endobj -1858 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R /F55 970 0 R /F53 962 0 R /F62 995 0 R >> -/XObject << /Im2 984 0 R /Im3 1108 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1865 0 obj << -/Length 2226 -/Filter /FlateDecode ->> -stream -xڵY_o�8ϧ���@��D�SzMr^�n/q���bщP[�ZR�~��!)G�e��C -4�l�=�����|�ʢ��4�Hs�����Q�^������ �A��kY��ɔ�8�.J� A�ץ�6~�5�&~�WCx ӷ� -�R�~��fe��S� � q
A!��A" �"'�,�T[�h�gU� -�t<�$ :8� zi�
�
�����ɖ#^ �"��?�Z��η��� h18x�yѭ 8�� ',����3����e�>�� -DS�����A��yaӃ��m��tn� � { ^_���\�@�S��G�y��${m�v���<?�Y��$M@P @��|}�ra��G{*Vχ�� I �� ��FD�C'AP�"�,B��1q�lw� ^�����{�� ��h���;��@Rc?�O��}:*g�ױ��� -��[�l�d�+��C��$���Ϊ���O R�0z���* ʳ&�+ݪ�HY 7��GU?��A���)�wpgn� V��w�]e�:��sa_��8Y�I���?�������v��%����,U?(� -t� �S>�����C��˕=��#)����������H.�X���#���8T�.O�ЧZ���K�*�AU�XfXo����j�x<8.>���T~��<�U�xk��''x�5 4Ԁ9�]�8 @ӄ�]��+��X�
53��@��ڱF���g�I�`i�vz ��T��kO.� _� }�H5����� ��&з��T��� -ҭ�0 (���̫��y��$ ���+24 )���]�Q�3wm���q����Ą��-�Pz5����-s����������RP�o_�<���~��B�/f��?N��E \% [3�=a�JHB��:m� -��c�� v "ƕ��G��"Xk�����W�� �������Sv��ˬ�͉@���H>��>��"^��� Whб�a��s�w_Њ�������cE�f]#���\团,��Q�[����{�E�l���q�N�J��>���!�8�1� |�z3�8�:İ������� ��/(J��#B���Y^:?!������N���=ё����"]������#q�{��4Vg�'���#:m��ș�9�]��2�h[�G�+yV�=ё��C��Wa�D! �Դ��[��Ap{1�/ӽo���8���#!Y�� _�$M`��2Ə/ -.�r���I�! endstream -endobj -1864 0 obj << -/Type /Page -/Contents 1865 0 R -/Resources 1863 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1846 0 R ->> endobj -1866 0 obj << -/D [1864 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1867 0 obj << -/D [1864 0 R /XYZ 56.6929 361.2723 null] ->> endobj -1868 0 obj << -/D [1864 0 R /XYZ 56.6929 210.791 null] ->> endobj -1869 0 obj << -/D [1864 0 R /XYZ 56.6929 130.947 null] ->> endobj -1863 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F55 970 0 R /F23 682 0 R /F53 962 0 R /F62 995 0 R /F63 998 0 R /F39 863 0 R /F47 879 0 R /F48 885 0 R >> -/XObject << /Im2 984 0 R /Im3 1108 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1872 0 obj << -/Length 2455 -/Filter /FlateDecode ->> -stream -xڭYYo�H~�����������8Nƃ�㍝�I ��S�F�������(��� -� 1��3] tX�Q}v,_���230��G�q%�Z�a�I��z &\�hɜ����7���aW4d��*����5y�I��Yy ڵ�{���ֿ�xh�yE�c�.DZ�� "F� -NLr3XE�zA���^ �ן��}-�(=6��-m`R��>l���_��i��8���KՁ ��?�����[�a�e9XhR���Ϻ{Wnv![�`�Ps�wM��� �<Ɩ��!&��T�� �1j��?�G�I_��6� -z�+�s���ö���v͈��IE�`G����V���*v\:�(�QR:T�k�O�C*ʼn�i ��i���e=�+u�[xf����|x �>�g���g�U�F�d� -�D�r�
����c��rͦ0��$G��@%A�rvZ��kB�ᕍD�N�60�� ȕ -x��$b&b�%�i�5Y��=wb���E�Ld�M��NF��廼���`�.ɦ�hp�p �m����:������f��_F ��9�ꂟV���np��*(L�� E�Q�N^� �B���2=P�g�B�J� )� ��p.Oc��'B#M�>8�PȌtS -"��_VBiL�^ �լ:K �0����|D��)��"��`u�I����� %��g��|��# ��ol,E�{B�b5�����kN;.��ɉd�C�W}� Cע"U�F�ĥ5^���=�p��x�N�[�鸻E&�m͛�wM7�5F���^ ӁbC�a��@���ఃP����m��-��� ���fz7� }�� -� K�Qu3��� C�(:r�Ǡ#��
B; ��;������ �k"m�B�~�d�{� ��]����n�m]���; s� E��~ acջ�@u� �D|�endstream -endobj -1871 0 obj << -/Type /Page -/Contents 1872 0 R -/Resources 1870 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1846 0 R ->> endobj -1873 0 obj << -/D [1871 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1874 0 obj << -/D [1871 0 R /XYZ 85.0394 752.1052 null] ->> endobj -1875 0 obj << -/D [1871 0 R /XYZ 85.0394 676.9839 null] ->> endobj -638 0 obj << -/D [1871 0 R /XYZ 85.0394 637.9396 null] ->> endobj -1876 0 obj << -/D [1871 0 R /XYZ 85.0394 604.8838 null] ->> endobj -1877 0 obj << -/D [1871 0 R /XYZ 85.0394 569.2766 null] ->> endobj -1878 0 obj << -/D [1871 0 R /XYZ 85.0394 503.1887 null] ->> endobj -1879 0 obj << -/D [1871 0 R /XYZ 85.0394 431.0324 null] ->> endobj -1880 0 obj << -/D [1871 0 R /XYZ 85.0394 247.0209 null] ->> endobj -1870 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F47 879 0 R /F23 682 0 R /F39 863 0 R /F53 962 0 R /F55 970 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1883 0 obj << -/Length 2194 -/Filter /FlateDecode ->> -stream -xڭ�r�6��_����ƝD�\�麓8n�tv��-R��%){��{p�H -���Lf"�����/0�a�GfB"���Ŋ#����wx�{�\���H�!�ϫ��,�)�$���f@+A8I�l����������`\J��������kt���� Q� ��:ԫ��������/��@}�G���^}�������/7KM��f��1��`����� �Y"�z�S����FD):�]p����yHy����'8�5GC��"A�r Zd�b�5LPL Ŝ �D�k����=������W 0 A��[�=�M7Ն���DΆ7���|
��b�c5�k�W��Ⱥ���*k�WW�����]x�&.B�B,fr"��j*���U�婻��8 ��{oW�_��,ߤ����U]3'IT��M�*/�̽s���'>� �!�9}ú�W�뱌u�^)cK�^��#� j/�(�T����҇2�2?��Cݺ��~|,�dzJ� ��{U C��J豌ag<����)[�D"��"�$I8���#���Pr,B�M�#� Ax���z���Fт!�$�[��Iu[�pz�Ě�K,�����;�� �r$d� )s��MJ����!�����
c��oҮ�+ Ԑ2G� ��W c1J��|7�x�o(̅bE����ݾ����%���i��eT��<����� ��g 3'J[� %�M-��yBDi�X7pl�>m Q���U��}w
��.4�G����Ƃ7�[L���vyۦ����,2oQ��5nد�y�A����n7Z�S3%���75 �@�R&(�z���{��!�ScC
F4!�x�Yc/8� �@��c۰* �F�}�ׅ��<{�N�q Pڗ��*[�J.C\2 /EYZښl��K�u��^0�D�]�vS+�,�e��)J���_��͛�q|wi����Q}��G���*M�[9�&�MH6�Y�]�G�� e<�|{r6�ڠ��d]��7��* '�m�V7 K�ie�6��u! �
}�kCo�O���{��F0<�H3�4����N���s�G@��vm"���0�N�M����=��Cx���s��-��� )�jĽ�JW�A�l,�����,�IV.�x7hu� ݺ�����u�p�eoS�lj��ݦ���Wy���-n�Z6�����N!Ѵ-r ���F��F����
���<��� -��i�%��o�6��;�)���4�&������;�� #Lb���Xe? �"U� ��=�u(L<Ŋ ���l��ɮ\AA=G}XAV:���3�Y� -������ ������e@pi*�`��-�ϩY���<�ޙ� 8Q˲w�P����>CI�@:h����Y%JO���]Q�aN���C�U�Z9����|���T�4 -��}�<�+d�0����9�M��s�">���(=Q5�4���fX��A
� -�X�ך<����x��wh�,�Ő�}Qr�{AE��x�kM
���om����u��8h�g�ʀ�c56�2>���Z�dz����a�r �k���R3�y 4<���͍=z�q�9 t ������ yw,�&S`=[�͵|�$�V,��P���$Sh�)t̔SSB�M�7f8!�R=Q>#������տ?y[S�U�7�O)�C �3�54�_���x����'H�9�$C,�n�ai� "�� (�++ǝ�觑��P�� Z�0�#Ф`�Fi쪎Nj��g�(X ő� ����\6M$h6!�Q"x�������!�� �Kz�3 -?a�o��_n�u�:��P|�� �$���!���C�ֻ���:C�$�����54�� o�ѩ�S`�E
臆�+�� ��$P�V.<��@�耩˜�"��d -�S�?�����B<F,I�<1S(TpXz��Ą��7d����&t}�endstream -endobj -1882 0 obj << -/Type /Page -/Contents 1883 0 R -/Resources 1881 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1846 0 R ->> endobj -1884 0 obj << -/D [1882 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1885 0 obj << -/D [1882 0 R /XYZ 56.6929 546.7712 null] ->> endobj -1886 0 obj << -/D [1882 0 R /XYZ 56.6929 448.103 null] ->> endobj -1887 0 obj << -/D [1882 0 R /XYZ 56.6929 386.1077 null] ->> endobj -642 0 obj << -/D [1882 0 R /XYZ 56.6929 347.8768 null] ->> endobj -1888 0 obj << -/D [1882 0 R /XYZ 56.6929 315.1782 null] ->> endobj -1889 0 obj << -/D [1882 0 R /XYZ 56.6929 279.9283 null] ->> endobj -1890 0 obj << -/D [1882 0 R /XYZ 56.6929 215.0111 null] ->> endobj -1891 0 obj << -/D [1882 0 R /XYZ 56.6929 155.9807 null] ->> endobj -1881 0 obj << -/Font << /F37 747 0 R /F53 962 0 R /F21 658 0 R /F55 970 0 R /F23 682 0 R /F39 863 0 R /F47 879 0 R /F48 885 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1894 0 obj << -/Length 2682 -/Filter /FlateDecode ->> -stream -xڭY�s�6�_��=���P| �<9��s����;ә^ h��x�HU��sn���.�(��ӹ=\���~�3?1��q���,O��B��3>��� τ_3���U/��~x��Y�r#��z5�e�V̮��& ?^�}���\j��d�s�y�����?��y.�� /?���3�rv���� �h5`��e�F���?~�^}x���]^Gq�G\�������-�do�8S�ճ{x�L乜m�R��N� -������#����tJEZY���&t$Ք�tΌ�)<��M�o�E�?����<� ����e��A��g]5%�I� �l.,˅&f�`��Y��#a�a2S^�UlS�l��5��6ۺ��_��n�f�F M�)�'w�e������������ɹ�K�kߕ Q���\ؤ�]_��l��9}2�u���ڦ�zF� -3�K!X� ����ѕ�;wF�}�!�A�=>��u�M��#=V���+�}��4e9���)�%�پ����*�+�L]��@���D0)��h�{Y��}�Ͻ �b
ƛ��iڭ��ںn��%��<г_�e��{%4KS>�} zWR$�rIf�:"��� z8>n�ĉ���BZ*8l�?[�]O����it�ٗ~n]6�o�O~ğ�ǁ�mu>(<��N�۽�P ZI�b��ccHN�[r��H³���!e�l&�Ȏ螏���q��؈����C#�Q�ވ@�ɽU,Y�R8 �~]a�� - t̷�:O.��Lr� R0��|sr�TBli�-S���c�+�X����! B�W������ -J��� W*�'[g����\���m�I�m�� i�n6.� �7d(()����J�����)������' k����M����M�/�^�`#f���.[5�S 꼌9�FT:m e48z*h��gE�cz!�<D���lc$[*�H)��k��& -� ����t�������a%e ��1c�q��Bʦ �e'B�,��(4�����L�bE|������� V�k�z����P$�r�-}���S폻i{�ʇ9���\�u�ʰ����r1�OĔ�B����N�^B� :���3��^[0V��c H���ؒ2���*�"��o�`(;����O�e,h��t�`� -���w)�@$���A8tڅ_<�6e��)�vO~�"�F�p.�H&��Ū?��)㤂e����˖)e�CU�o��g{� �[�k�,�������}C�Cw�����#�E�Fi�Ax��Dªݑ�,tgR�c�((�JQG� ��� �4|�&4'�M�nۮ�nj��w��SA�U"��d�.C��U�jϦ -6ʗTY|.iD�����&��m# V�k��i -ݐ�����W�dX]p��G4�u�De��K��뽆d���� E��5o�
��~�0�;7A -5��W �@�!L(9H��#42�S(�i�YKy� ��;��6��,3�ȡõ�cE ز*�eQ߶;8�f*�!9 ���/��S�R2)���!�\�80u����G�"�dc�t�� -��˫��iqNߑ��̈́���;p��+�Qnċb���A�n�5��d -���4%-��g{"� ���>�WB��A �\n��+�l���S�/��<��z�>E�y ?7�}����䖥*
�6�W6UL���3�b-���0lIu�#���!��P>T]Fwݸ<�� -��S���R����u�% ���l�%�����2�K9���a[�U]�
i`S4�� -��/�>�t�c�
<\�9j���8^O��n�����A}Qdw{��Z�Q��NT,�$ �G�������?N3��tw푢���nE�mڋ)l<�x���Á���ou�v�#2��l��:� � ����"�����!Q��������(�<�3����:!�(8�J�4��Ϝ� D2Cm<i�I���M��o�z�0X)J��'ߙ7�V�JՇ�KZ?����U)� /���J�����|7}18��_������ �<���[��v�1e����-F�B��B����Dz�1 '�endstream -endobj -1893 0 obj << -/Type /Page -/Contents 1894 0 R -/Resources 1892 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1897 0 R ->> endobj -1895 0 obj << -/D [1893 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1896 0 obj << -/D [1893 0 R /XYZ 85.0394 368.0049 null] ->> endobj -1892 0 obj << -/Font << /F37 747 0 R /F53 962 0 R /F23 682 0 R /F39 863 0 R /F21 658 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1900 0 obj << -/Length 1897 -/Filter /FlateDecode ->> -stream -xڥX_s�6 ����e�]Ŋ�(����M�6[㶉�ۭ�"1����Y����w HP�l+Kz;?�A -'"伥����N`o�n tX�xĆ|�z�P��cJI�����'~�5�n��_ư1�D rہِw�:oK�\,��_f��#hyQx�ӵn�g!p�\������[��������ϛ�?�x�{�������_2��đ0 -�{��3 -��=�^;��<�g ^8�l���c����Կ<8K� ����# ��m�)��H�̸*�$/-�� r��ڏB��2�����Yu��B��
@ ���� 3{��U�{0�}S��H+�A��Hb>�dkL�\?Y!���8�(��8�eL�y�;7� ��U�(B"C�8>H)����K�6� -�;4���N��o����
..x�)^ -o�
h hߘ�� �Ԏ=��M����w�Ԑ"�*�[CDUK ާ͛c�<��# ,��� ��U� �p��#G������T��"� |���P�2��hܰW� Q����H -$`����0-g��Ls�� ;7B�.�{$��ΐ��F ��Y0(h����
�b��x -��Tm�8�:�K�>r�B�<s�UQ�B�v� ��m��z@x��T3`�=tm#,�ZV�V�Xu`�Z��%.i8� �� }[�� -�)o��}F}�����T�4/Ձ��S�L((}�� �&Tʻ��@���an�^�<�C�H ���A$��~ �k�z��M��H��4[�e^7��& �J�j��2u�.�r�;p�nFCGU` �`jp����ˌ�뷏���,��s���νx��&�}J ���"���2ւ���ı 4�
�F]8 x��!�ߠ������W����k]��z}_�U��q -�S�Y��
� ��ې�4�>��?���°r }�D֙A�A��*�qwb��o�ݭ��]�牉ͪ*�����e�����˃�#���q�dC� �(+&L� ��`^��F;�_���sl�) ��s;�A��^���"� RP=F���v��Nf: �� Љ�͋o��F_�C-E��𲋆�_=��m���1@ �Cy�y�&�D���� ���q;>_?�n�ek]�O�@��t���&ˇ�=xQхK't�Px�
�c! -endobj -1899 0 obj << -/Type /Page -/Contents 1900 0 R -/Resources 1898 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1897 0 R ->> endobj -1901 0 obj << -/D [1899 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1902 0 obj << -/D [1899 0 R /XYZ 56.6929 449.4646 null] ->> endobj -1903 0 obj << -/D [1899 0 R /XYZ 56.6929 355.3738 null] ->> endobj -1904 0 obj << -/D [1899 0 R /XYZ 56.6929 285.1933 null] ->> endobj -646 0 obj << -/D [1899 0 R /XYZ 56.6929 241.275 null] ->> endobj -1905 0 obj << -/D [1899 0 R /XYZ 56.6929 202.5209 null] ->> endobj -1906 0 obj << -/D [1899 0 R /XYZ 56.6929 168.3311 null] ->> endobj -1907 0 obj << -/D [1899 0 R /XYZ 56.6929 95.2288 null] ->> endobj -1898 0 obj << -/Font << /F37 747 0 R /F39 863 0 R /F23 682 0 R /F21 658 0 R /F48 885 0 R /F47 879 0 R /F53 962 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1910 0 obj << -/Length 3181 -/Filter /FlateDecode ->> -stream -xڥZK��6�����
� >%{�d&A���LX ��ڒ��ؒc�����T�eI��>��Jd��'�~l����En$Q���zwC�p��iV�h5�������"_b2�-�7��4�Z��}�����/ ?}����+���ܮ�˟������ܗ[×����vŌ�%1�t]����w��>�����n�����}dk�:�y�����袄7��a�Z�� J�1|���J%�3ۛ�7�� ��GS�PB�y��g ƈQ���� �V >~���/�w����gN�7�K�Y�CS�W��<V���LN����h�C�W �T�%<�?J����q�8�
���`�IAr -�����֜� O��<_��~����P�뱫J7*��E��j��O۾:4���o���P�+d��s"���(j`�n ��d���r� -3`Wb�Z�;k��TFrɵ�t�r+
��Qv ;�n�[��U�o�YH�$ŕ1~Aص?��.��0Df������ ���zM,4 �@���� �s,�MB:#�h� i�]UΉ'�$�4@��խ��� �$��4c��?)v�z�[~OJ�5/�njT30q��ˣ�{��'7�;�҄id�*Rb�$* ��{���-�`�����q�&���rM el���=�S ��G��s[���'��MU�)��Y6WD���/.H�� �gv)m�Hʦ<�Cv<� !np��&DS&Π�W���c/~��O�>�bT)`��� w��g�=��J�g�W: �<�jH|�y �T'\
�4����-Qbˡ� b -f�x�����9���g�P���� ^����/4�
����?՝�n��Z&���Y�H�RA<����"˩�IwP2b�]կ��ͳv��L�<���!�2b-T�B�ڡ]��!��Jd�hP�ؑ�`5-�}��Q h�8n�<A���o�>}�s��ñ���,s{`զ<��x��5ѿ�k �\�\)gWTωd���xW��0��s_�_��� �C�����Yv� ˂x���]�F6�E&���rYV���h�ʢ��n��w��n��!`5��݉�`d�l �; 9L#3�p�m_�Q^0E�4�&5A]6�xΎ
nYy�@8<W��i @@�R^Ӝ RK1� �`u`�m���
���;h uaԴ�9 ����|�� �'�5�Ɛ�h�O���cӤ�&���F�.l��Cy ����V:G�,��li�D���y�cRA�PY��MO`}���~�Қn�_՞wg��m�� <�����|�Cb+�f�&g6*���`Q&I�7sJE[x����h'Ȩ����%�X�y���y�s�*�r��G�?P#[��y���!t��}]� -ye�@��rT��^'[~9�>�6��ԟڃ7�����+��L2��nڗ����3+��t���o Y�ذ�W�bࢴ�����*�����1�������|�9sI <�n�1��:�|�˚ 9=h\Ƃ��[+`^B\�����;�z$��w�.���v�`X���nN �� vQ�>�j�E+�kZ˄�%�ήf��+}���x"���U���Ԧ���^�S��)1�EBq?�j �}_�b!.̠�;�M;z�*��� �����L\�x%1"VH[�b�Ƴb�m� -l����ٸn���%��B���"�ԡ#��B��L��� @w�0�=�\]�ѐj H��"�@�!��@q�.�(����E�{#H)�"��1cL)��E-��h���ܴ���u4e�n�i ����-�8�����C�W�f\���y"a)<�tk�r�k�W@��yek�fƠ����ޡ��.+7���3MD<>zWV���{%��f��j�JX Np���������g8x@�" �d(Q�i�9\��M�u�0N�I��E��к@� u��=I���c�S#�n|�+1!��
I���
p9�J,[s+/
Oyp��I��=�ɖ'�c85�f'�l��B��eF]܂��e3u�(J7�d � � � �2���. Ѐ>��>+�*�a -�(�}xɲءhJۀ�=�H&:�{V��Sc4��ZLP�[ �� |��w�uhL3�t\�t�T�-RY��]-r��<x8������"眵d�3�m�L�Ζw_���N�=ť�� �Q��������4*�� ��:�:圎�}f>^B>D��,^�̌����l�6md���b��/F��vN -O�%��x��O&^���- �/�1H�⸵���7���*J�ى`�xzPU��n�+ ����0`���Q4�M����T�h��yXօa?��wm{��� k>�A���� �1��.9�/�g�A���'�nڣu8�z�� �GF�r(�T�7�c̫��c��* �Z]ɎD���,ΏW�,�q��*�S��:c*Ye
��Vke�6��<W�J��pf�VA������7���i���)R�6�觧��C<���Pu�I�h����^wܢ"�T><��ŋm�rp���c1��fl�m�}�D��4���d�V��aO���� �xD�H�b���m p��9���i��Pi{�<�SA%¶�,S(*��)��#�s��F�l�endstream -endobj -1909 0 obj << -/Type /Page -/Contents 1910 0 R -/Resources 1908 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1897 0 R ->> endobj -1911 0 obj << -/D [1909 0 R /XYZ 85.0394 794.5015 null] ->> endobj -1912 0 obj << -/D [1909 0 R /XYZ 85.0394 751.0357 null] ->> endobj -1913 0 obj << -/D [1909 0 R /XYZ 85.0394 641.026 null] ->> endobj -1908 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F39 863 0 R /F55 970 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1916 0 obj << -/Length 733 -/Filter /FlateDecode ->> -stream -xڥU�O�@~���co���Z=/Z{�&&��+�4����(� .M�a�曙of�̧�a��D[n��J�(S������wg �1� -��m�һ����*��R�<j��'x9ڄ���|��w��Z/E�-�c����-����S�7�:m��}��:4��aPiFA#-�%����` F����]i�s�N+�^����.\�f�?MZ>osdv�bp�
�"O��FH �]�@�\�ƺ�됙 o�+�n3� @b��=�j�j�L���N��`�i�c��<��* 6m��e��sn{� �b���W|*\�1����0�5H>�nG���0 x5!��D�!�K�<�T_Kb�=���a�[{8�3�5�m03B�(��I.�W__����*j��
#ӽP��bGh�a���5�����]m�TV�hZ�KU�G��S�3���ռ��7�xm��3�'SzD��T\��=6�Y����Z�s���[�d���l5�p\����bW~��!`�D'�'}K�w�����0�����+�zH�+�1�!�a��� ˳�endstream -endobj -1915 0 obj << -/Type /Page -/Contents 1916 0 R -/Resources 1914 0 R -/MediaBox [0 0 595.2756 841.8898] -/Parent 1897 0 R ->> endobj -1917 0 obj << -/D [1915 0 R /XYZ 56.6929 794.5015 null] ->> endobj -1918 0 obj << -/D [1915 0 R /XYZ 56.6929 752.4085 null] ->> endobj -1919 0 obj << -/D [1915 0 R /XYZ 56.6929 626.6031 null] ->> endobj -1920 0 obj << -/D [1915 0 R /XYZ 56.6929 566.5511 null] ->> endobj -1914 0 obj << -/Font << /F37 747 0 R /F21 658 0 R /F23 682 0 R /F48 885 0 R /F39 863 0 R /F47 879 0 R >> -/ProcSet [ /PDF /Text ] ->> endobj -1137 0 obj -[650 0 R /Fit] -endobj -1921 0 obj << -/Type /Encoding -/Differences [ 0 /.notdef 1/dotaccent/fi/fl/fraction/hungarumlaut/Lslash/lslash/ogonek/ring 10/.notdef 11/breve/minus 13/.notdef 14/Zcaron/zcaron/caron/dotlessi/dotlessj/ff/ffi/ffl/notequal/infinity/lessequal/greaterequal/partialdiff/summation/product/pi/grave/quotesingle/space/exclam/quotedbl/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde 127/.notdef 128/Euro/integral/quotesinglbase/florin/quotedblbase/ellipsis/dagger/daggerdbl/circumflex/perthousand/Scaron/guilsinglleft/OE/Omega/radical/approxequal 144/.notdef 147/quotedblleft/quotedblright/bullet/endash/emdash/tilde/trademark/scaron/guilsinglright/oe/Delta/lozenge/Ydieresis 160/.notdef 161/exclamdown/cent/sterling/currency/yen/brokenbar/section/dieresis/copyright/ordfeminine/guillemotleft/logicalnot/hyphen/registered/macron/degree/plusminus/twosuperior/threesuperior/acute/mu/paragraph/periodcentered/cedilla/onesuperior/ordmasculine/guillemotright/onequarter/onehalf/threequarters/questiondown/Agrave/Aacute/Acircumflex/Atilde/Adieresis/Aring/AE/Ccedilla/Egrave/Eacute/Ecircumflex/Edieresis/Igrave/Iacute/Icircumflex/Idieresis/Eth/Ntilde/Ograve/Oacute/Ocircumflex/Otilde/Odieresis/multiply/Oslash/Ugrave/Uacute/Ucircumflex/Udieresis/Yacute/Thorn/germandbls/agrave/aacute/acircumflex/atilde/adieresis/aring/ae/ccedilla/egrave/eacute/ecircumflex/edieresis/igrave/iacute/icircumflex/idieresis/eth/ntilde/ograve/oacute/ocircumflex/otilde/odieresis/divide/oslash/ugrave/uacute/ucircumflex/udieresis/yacute/thorn/ydieresis] ->> endobj -1483 0 obj << -/Length1 1628 -/Length2 8040 -/Length3 532 -/Length 8905 -/Filter /FlateDecode ->> -stream -x��te\���6� �t�����ݡ�0 00� ���� ��R" ��t �ȋ>������?��?��w���^�Z�7�� ��5� -���r�pr� t���P(�W琅C��fL9g0���]�� -��{fX E -0�����a֏��O�o������?��x����=� a.��Ab���9Y�
���/z{x�*�����2#�Dj,���8��E�y��;�o��n
�A����ߋ(��X>�.3v�ms�W`g �� Ϩ�"� -rn���蚗ߡR�w�9� _�ҹ�_8=�e4%v>oF�k(�?`Lٽ�`� �4����&9[~��;26cL�|r)S�j���l(�� -b��7�����V�h9���,�I��R���e��߷R�%=���
�t��(��%�LǏ�)��>1٥����^�2��O�� %��>�pjÕr{2��w��<�g��-j�!3c��akI�,A�$�L��ƋJ��n��U� �m�މD3 -~"�V��=�����`���3 t;k��Bf?�[��Y����a��+ g l�ft]�B��w3�,����k�y�����> ��m�W��r���0ϔd�#��B���UJ�� u� ��I��a����� � �L���d�<�c�-8�җ�t���4��|�D�����]����E�� >�R�9xy���[��`�~Ͳ�D��'��5e[-0GM�=K��J�&�&�P�S�8��in,� 2PU�r`Z����v8Q���� ��o�o[�2�O2Ӿ�m/���Y���vV�"_=5ӛ���� �a֙7�v|g �y�&"Y� Ж(�+�M o��|�>� vZ�I��W��%�^�������]�%�Z��_�@�R�d���9詂���k�C��Hz�Oln������>{�b�7U^|�-)G? -8�x�m�%�j�=!��[��;[#Ɗ� �J�/A%�v���`�i���njP~^z��Q�7��\扯� ��.|����è�� -�����q�z`�\F棖�E�!~�T��\�'4/ �C�e� 7,�9t�Ҿ�1 ���IM^y/��kIm;���}O��o�H╡�6�]� 7�h`� J�T�cwe�f�kԭ��R��(9%�֯c -ӷ_܀����r_7�Gm�&�Љl�Ǝ -K�#�T� ֆ���� ���DE&�˜^QH�!��>� ���̹�$�x�F`���4I�@N@��>_9�J��E�O� -u�'� �?s_�Ї����'u -B�H��?� -$O����ŀD� -�_O�� -�;�� u�u��X�[A���^L ��=_ħ�fJ���;7�1�,`_q� ���9��x��t�� ->C{(���ʰnw�,K
?E�7�Bq&���jɏ����?��-�C���%�uXc����B�Š� ;���3h�Ŭ ���t(����� :�cآ>:������#�Ǥ_VItS�$�`�~"�ܲ�r$�U�Y7���?��i��q����؝IS�5�4
��b�E����n�p���-.��o��H�~B���T�Z��_)�� Oq�z�ߐ�>��;�dpI�rr1�A -��P�2Pw]�u����(��/�������ܿ~&�[1�A�-K��EО5J��.f�z�wi�h�bL�B��6� -��ٲ��HȠ 9^��;�̜p��m%{r7E ����ό��E��ʨ*o,�� Q��ʭ䦀(�$��y{�gk9���5�1�0ۘF3��!s0�4X���#r��2�\8nq��s}䮀�s��5)q�i�C9ad��`u
^<�2 @��R��$�Ƴ�x�>��wd� �}T���������t\1�~�9���8ia D9��"�!g��q� �A�ׯ�� -�]�č��A�8����d@I�?_ɽ�b�J�8&1ߒb�y��J��J _�|�i��C��L;�Ɩ=x8"���\�Gd'�����/B���pR�'�s�X'M��d;���E�tGm���g������W�},�φět�k�f���� ��&�o�/L��G�����BZm�Ow݉��>���^� v�ɎHk6����DM0��}�da'���o��˾xWp�311��d� �9�ŭ� �?�j�>*�����:�-+X}7�$�L \���nD��쐡�X�vW��=m�|'M}����_��ϣ�rci%��s܃����,n���" 5ٽ6��6�Q���m�����+q�Ɛ���$�|��]�������&����ՄKfV��Df���Z�b��`#�Z�< �_��-������ -_�lg���>��T�7 0��W~��C!<Z����#(��3�b�:ß�n����$�đ�f;��* =�nنb����VE��<�uBg��ׯx��_��z�X��`��4s�i��A�+<����E.Q��Qq��D����$`d�l�/B��Y<x�%��+{�Ԣ���N���T�T��V3Tj+"}��r}�X�\L$��Ț��Eh��-x�� ->_��r�x�|���Nx�<7M�/&�ga�j[�˱ �4�����O�|�1_JSw{��ıD�P~��FY�Yy�]�:�a�_|�j�M+���0@�h�t�l��g�� �AbD巏�w��}��Y�� i�B �*j��Z�˦�N�F�T/Hn���֓4�OE�z~�
�88�� �w|q����F ���� -TT>/5�䬽%��d�q�nC�%�4�XDme�:#�U�� �l1~� 4�GL�%��EЈ���\;��8�+��JZd��d�K��Z�I�f3zV#W�c[ۡ*_-�߈�ޭ��5k
����,�d�����S/���� N�)u��Y~ ]�j��٘f�u��K,tʍ��\'gy��5�<T �4CUM�Ɲg �3Q�8N�É�zN5\/M�r� ]�S��}p� �VD@�:]���7>1���C�'�Eƌ!��7aV�:ASQ{|��j9Y�4�|m�η*_�w4�!D1 �X�٤X��� -t���=��b���w�6�"���µ?��J�OP2R� oQo+��1) �w�����d�I�� Z�V͝�(e��� �"[vQ��F�s(�F�$'�qL �/�!��
�Hvk։�h�ȉ��؉�o?�a:���q�c�� g�!_Q�~�W�1�a��U�Gm�Y�mn%�R�r9���0q�5�/�E�(�ړ��,W��$�����Lx���|� 奕�w�Z|�V���,�Od -�y�G�
����3l�4���\�T2Z��Ag�.7�#�P��v�eŦQL����O���\� ��ĵJ��(�3�].�*,M�>�Bx�(�S��|D�u��ޡ�{:ґ��2G9�C�{ɕ<|?��K����@F)�,�w��?�� � ��a��h%ٱo ^��{�6�� @�-��%�~j�wXjz1��i���%u�3^��g��`d+�K[�De��]��Y����?�>��Hj�,�kѸ�h�8�� �v_�
[�J֮�9m=����?\�k>�ଇ�*�ѳ�,Y
�<���u� Z/ZV$S��#�mNO��5M@��r��0H�7�&7[��A���O�Ƨ���5�pE6~d��^.x�T1���$��7��4����j��G1���po��3�Q��Z:�N����,0�� ��Zg����)�Q����X""���0�����BvFA�)Y9(�YÖ���S�|�����qb��N.L�X��_��¿�%�%�����|�D>W�7}C ��#�ZR��$�`b�Gο�a�9g�S%\��/� ��hC|�?s� �g����)��m}�v��k��.b�&O -���+uqf�`�a�����,I�㯽/������ݛ��'P6ߢH��?����ٹ���9��mHr7:pMRY�#� '�W���KC�|-�mW�躖nᲶ�0����3���=j���-,n��e����b�i�;��H�l<)�L.��Y���ڷ)�wL=(�����L|�)=�'��-�@����<�Nr�6�E�ʃ3�d�k�����%�����(kD~�(�_y��; ���f�O�{&*��yү9ۏB�T�d>�.<S��X3p7��~ �"럽��l˴��DQ�f��� -*s"}Y
;҉��{Y����]p��ݯ� ��Xo���} -endobj -1484 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1921 0 R -/FirstChar 67 -/LastChar 85 -/Widths 1922 0 R -/BaseFont /NTJURL+URWPalladioL-Bold-Slant_167 -/FontDescriptor 1482 0 R ->> endobj -1482 0 obj << -/Ascent 708 -/CapHeight 672 -/Descent -266 -/FontName /NTJURL+URWPalladioL-Bold-Slant_167 -/ItalicAngle -9 -/StemV 123 -/XHeight 471 -/FontBBox [-152 -301 1000 935] -/Flags 4 -/CharSet (/C/D/E/H/I/O/R/S/T/U) -/FontFile 1483 0 R ->> endobj -1922 0 obj -[722 833 611 0 0 833 389 0 0 0 0 0 833 0 0 722 611 667 778 ] -endobj -1298 0 obj << -/Length1 771 -/Length2 1151 -/Length3 532 -/Length 1711 -/Filter /FlateDecode ->> -stream -x��RiTS�����2��j=,�yn4��1d %�ސ[�{���2�8PIU�Elt�(*J�UE�(��*�N�U�,�E�VE������g��wΟ��������p
g�a|�c$ bC"�/�I!.��\.���'9��X��DD -=�j��V -�P5r5�(B��@�V�u�7��:$ !2�M� -l@RP�ƙ�$Ŕ8��am��TB�S��۔L&�D�8��Q�8kq�Bi�'dM/ �U���5�姜�K^�A����&MK"��0B`ө��q2F���Y))W� -1��F -W��f/��Un�{�c|��Bd�� �b -\��vK�sJ����� �V8(j�����H}k\���P0X ��Z���.���0�%��d��d��'�ϟ�>{m��<Pd�X8 ����7��}��Υ[_���+W}q���ڬ2�i��۟�<&1��yN7�|�j����5{��%�s��ɴ;A���^�>�|����~^R�|o�j�W8��L45V-i��� ��w�q\�5�N�0T;��uE�Ug� �㋎�<t����$��8r�cQ�����;��#�gy�bu.�6Y��Y{����e{�lV���c5!5�4�G�9{� -� BV��g����S�E��-d����6��˵�H�����l"��LK+F`��dz2xg>Z��JHy��sx���] <��r���4�Mπ��&��$���ў �����=ތ�=j��} * �|�����;櫥>-����[���+#���X�B�� �\��ub�N����)nfg���[�g�Ԝf�H2�<QU�� �Yu�Å\3V)�JO��[̸=s�q���SbӁ�����תּиъ �;]�<��#� ?�^!S�^LJ�I�����:�e6u�.�+���ܶ��(�s�� ��,�k���7���m� �G�j���B �ّ��|�ws -W��`��uc�}u���}Gv\̌|��t�-ʹTR��26�n�ݲ,�O�Шh�7�PYl�a�ڟ(��W��JڼzXV�p|��v�*��knA�;6���hYFxŗq>��Qg�}�s�u]\�"ᤜCE��)w%=���|�{~�:`t���3�烪�Ӟ����˝⛭��]��҂ݲ�5�� �;�~Yt��{W{q;���q�2�ū��˝��'A݆�A-k2a�p `���ѡ͗��'.�뺾sD���q�,�',2��>�V�o���i�E,Zͺ����O�I� ����$^��|4l���9��L,b��U��y�
O2C�W�k��s��_���B�� �ȉT�oU팯endstream -endobj -1299 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1923 0 R -/FirstChar 60 -/LastChar 62 -/Widths 1924 0 R -/BaseFont /AUHQZV+CMMI10 -/FontDescriptor 1297 0 R ->> endobj -1297 0 obj << -/Ascent 694 -/CapHeight 683 -/Descent -194 -/FontName /AUHQZV+CMMI10 -/ItalicAngle -14.04 -/StemV 72 -/XHeight 431 -/FontBBox [-32 -250 1048 750] -/Flags 4 -/CharSet (/less/greater) -/FontFile 1298 0 R ->> endobj -1924 0 obj -[778 0 778 ] -endobj -1923 0 obj << -/Type /Encoding -/Differences [ 0 /.notdef 60/less 61/.notdef 62/greater 63/.notdef] ->> endobj -997 0 obj << -/Length1 1608 -/Length2 7939 -/Length3 532 -/Length 8790 -/Filter /FlateDecode ->> -stream -x��vgPTݶ-HPP�IhrM��irNl�Z��,Q@� 9G%#A2H�9��d� �C�{ι���������U�j�9�s�9�Z�Y�tyd K�"����Ѐ�[:�t�j<�8pk&`a�CB�h�A ��>B! -���:�� -u�
�� - sDn�j�+��m F��ݺ��H���wI|�0�^4���n�߹,� -a%�21% ]F��5 �������I�}��GD�Ob�hы��@�ʡg7u�;�?�U87zZ��l��Ѓ,Z/&���G �
"\�|�y�I��ជjK�&O�
6V�u�s��> jD� ~��er��%e>w$�J��$k|X�A\�������9[GowWg�1N�:
Wz$>�� 6!k��S:���~�g�e.0��clKP�>����1yՒ �d �S�լ�n9����|e>�'�C��f��Л�q��Y����8�$f��S���R�o�@*�� ʹA�guG�*|�eB�;}�v��]�����6���y�}sx/Gj�T�$J�H
�Q���B~RlE�1w.�*�br|��}$nև�Gs]> �?V1�x�+w��\�9�e�І�إ���v��7����N�� ��/���.���&�)��0�P����k � �� ��R�� -^8��&sݱ�|&��#6cկ����� �E�=�����.�}(p��c8hX���eM����pefI�|� -8xώo��
L�� -R!�1�r<;��$�g2���įCǥs��Ϲ��E#��2��9[��e�b �B�Ç�;q��4��y,'�X�. �^����m}l3S@+'�Y�W[ZT�a�y��R#�We�� ��w<���!��H���ݰa2Y'�xVc[Ѓ�̺�P��|m� L�3X���|FSp �6!w��qi���)/)y4�^�d����'��+O�+W�Ï/H���8�:̨%�0��n���R� NSX)�ĩwo�V�"n��U��u�.�e���5������v0��=̭�е������tw�tKy�� � �������/h�nf��Y��35|\�)b��^s$�Q�<.'D� -(^��p߬h7���~ݢ�킅�.^,����z��D���3�Z��|JRA.K�&[�/0��2���Oy��C� �B�e���t�:���CA2���V��P�'�z��Ō~,�ђ�AkQ� - ��7=s`[�z��ޕM�� ME���uG�h�+��KI�9��Z��3h#`+]�J�淚�����4 G���5�ɦ��
�/�~
2���I�%�R *�ȹ壟CS�[�m�&��,�^���l��0�3F�!��2�g�Ⱥ�Yz��^�X@��͛#d�Q��� ���?'ty��,��bx_�����DC���}�F0j|{��\���s����}8$Q��i n�A�$o<��R �e�#�"U�e�rމK� ��=�`GS"�H�bʘ#6W?��� ��+��� ���� -�I{�QeY:B��b���>:_/!����@����Ȭ�u��3�+�Ln��q�q`U�m��'�aeG- -�W�C����� -����i��.h��
6'��� 6 -V͊2�71sz 8o+VP�^�M�����J���e/��G�>� -�� qE�����*+n��Ɨ�;O e��Y:�*���g��'\�7"�k�l��q����'�9�Tgeix �qVV^���nOi�l�&�h1�� n� �o-R��!�~x��葷��yo���4��{��\4X ���� ��ϴ���/坵��N%{�;4u)�!�=���"�3��М��� `��<x���� -�1�#-@����<���)[�ؓ9QuC� �̨�-�F�ɀ?���Y�|96��j����UN�n�XӰ�ķ�G��k'u��Fd��>0� f���6� -#v�l|�g�՚����:q��yN�3-y��ŖU��${L�6���R�ə��?"�Z����\�Q>Ȕ �{���7l] -�m�tW ?e�����RXݟ��
q�N�b%2t)( ��- ֧9�A���ɚ2����;Njf:��9N��ʜT)����=l�'v!V���7?�њ\��k=�^� -2~ �U�s�.�o�˪�aMfs�%W2b+��� -( ̰?�6|K������86<6zlD�)�V�sF���Gf�Z���J�
P!Hl��<�H�8��eg��/�D-����� �U�Y�q�ձ� �� -*��p�¤A w�'v��7V�4���+j��N9dB<o�L�o��#%p ��n���AH41ס
t�. Zm�0�r�$��XrJJ&��
�����`�eM��3����_�����}d�)(A=�_D �����bN��}�����5,�Ӎc9A7!�{�K*J^��~�j '�%U�Y �{�݇�]�"L��xi�2��/�� �b�U��j��)4�"�� -?U����� -�䲝5��v!.[7$�\�����)%�-D�9��\�����7 F�O��Ϟ���8i����f&\�
--��6���X���,��DŽ�k}Y� ��A�<��?q�oY �L��oȯ��"������Vw$���5-M���&�{ �Q}2ѻ5�����x��u�B�;������\r�h��x��?�^i��&� �C��Q�b\�TH�e%���QՏE��O�}�:y��J �AH� �P�-��[kN��/�<ͩ�E��zH�('�8/��><�NZN,±$����\�|.ʳ�4 -�u&IFl� Pȋ�<>��O}��>ݧ��g�F�;YuQT������ ���tD��fP�{s�c+J� .>xi���Ȧ{�3Ś��~���d@�a��ķ��k�887Kp��RX�C��Ѱ�T�EQ��^w~@��G���K� 3r�N���K�j�� -}~� Lc��t>� �N$c�������=nƩng��� � �IE^�֊ -!d�F ��/���p�I^��ݩ���([|�F�v/f�H/>_!���ocG�%�� s5���n�5�Z��ݟ���J������\U����
�[�2���2��Qx���s���ث PU X�x�nO -Iǐ������� v �4� �
CihT�ޏ�� ��f%�2� -Oy�|g܇;��h��#1|���6�g����U��� rk_��w����j!:/�*¼�_Ԧ �S+��(#>��pK�s%����hj���N -\O��u��.��h8�˵[%-n&�o{�,OJ��k �$4�sz!���b�7ڇv�em��5Hc���W� u�T��O���7 ����;B�Ȇ�������"�d�U�t����[��0!�<ڗ(U���>�9��;�ր7��ޭ:��ղy �7����T}I�C����Q���\��W�3�ýZ��&�h�l��K\o`~~�t!���(� '��tq Y���b��4r3�DZ��a[�_�> (��E7 bO;8�<0��8�4;ժ>*�V�u?+� h�H�~�q�x/�}$���+�V8|��!ّ`ǩ�M�������Q�'�e�^J Y���7:�? �k�s��qW�fa����� 4>���Z'�y]�;_GdR�� ȕ�bn��f��\Q��1�7� -3��<Ȉ� h�=�`��C-�Z*����3�J`+>�p�;w c���\坵df؆:��V��� �Q� -L�ڱ{i C��D8����7.4�=�N�~�A���Y���Q�� -;d����Y��.���3�m -���'OܧZM���k �E���AøV�F+� ��\7H������ًs� -A7�����?�151"yU�F��I����fw�*Q�;1WG� ���WG9 -d����ϡ�6��h��|�� R�/?�j�V�ttf=]��m�XCh-�E�`?|(�躃��w���]�R��跸����[ O�^��'^m[�4]ađ��9�5Q�Ĕ�bcőn"��]�GF&<�
�3dR��%� ��.ӵ����W�Qmw)�G�Da�e���l�NA|�Z��ҽ�L� ���E}b\��L�� &�p��gr[���ߞz���d�� �����-� �Z���pn����|˨) 2xq� �S=w�Æ�
jI�6a� �6�.OSy]���S�oa�ԫ�̱⣊51r�%ob2�pȈ E�&�����I��p����V���N��iX�Բ�� ��A$��e$D{�D�����';,�g��k\�� G�i3�q�Q��L� -X�"��b�3��]ub7��夨��-�s�K>�<� !!� =j��
b��](��i�t9 � -K�.H a�+-Ε[������x�Ciif|-i�s�\��� �|�6�m���=�1�`K^!y9���IjX��XHO~�L�쫜�F7v�")��@�W�[zb����4�*��L����0��z$��/���{>UiO��E��5����t�=�;� -���4?�t�sTe��!4 J%h�����Q�:��yӴ(kY���M>X��
s�q�ir ���8!����S� �S�$�ŭ$R�ѕ amP�$?��g�˟�V�d[��1�i �O�<�_��%y����Z�.�e���X�*I�{()��_���W��� �x}k���VԳ��I͵'E�� Gi���V;��Ͽ��6�+�$ɝ� {�T�"1М�5v-V$�l�ޯ���bݦ���)���oS6�hLG���,v%�u�I~�]%�)�}���2� ��oJ�]^��RӠHm�;��� -8>� -�� -3�+��ʕ��a�l���nזOBw:��D��^�����Rn��d�����;S�td�� A~z M��R Vt}��+'� �4~}���}��ښ[T:�%|ŒQ"�X����9"���0Tw��ȋd��P�@��@���E��xO��� ��IXUb_4��Q
�:��^\�47��U ��&� ��c
�A�`�0�������̑��߷%�y�.Sz�M�h�������g
#$S���O����B�[y�5� �q(O��L#�'�/�ث*�����5X1��)ol��s[2L&�d�/������� -#�{0Ҏ�� -endobj -998 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1921 0 R -/FirstChar 36 -/LastChar 121 -/Widths 1925 0 R -/BaseFont /MTTJYO+NimbusSanL-Bold -/FontDescriptor 996 0 R ->> endobj -996 0 obj << -/Ascent 722 -/CapHeight 722 -/Descent -217 -/FontName /MTTJYO+NimbusSanL-Bold -/ItalicAngle 0 -/StemV 141 -/XHeight 532 -/FontBBox [-173 -307 1003 949] -/Flags 4 -/CharSet (/dollar/hyphen/semicolon/C/D/E/F/G/I/L/N/O/R/T/U/Y/a/c/d/e/f/g/h/i/l/m/n/o/p/q/r/s/t/u/w/y) -/FontFile 997 0 R ->> endobj -1925 0 obj -[556 0 0 0 0 0 0 0 0 333 0 0 0 0 0 0 0 0 0 0 0 0 0 333 0 0 0 0 0 0 0 722 722 667 611 778 0 278 0 0 611 0 722 778 0 0 722 0 611 722 0 0 0 667 0 0 0 0 0 0 0 556 0 556 611 556 333 611 611 278 0 0 278 889 611 611 611 611 389 556 333 611 0 778 0 556 ] -endobj -994 0 obj << -/Length1 1166 -/Length2 8264 -/Length3 544 -/Length 9079 -/Filter /FlateDecode ->> -stream -x��zUX\[�- 4���p'hpw�*(��*�!���n�]��k��/���o���t��w� �Zc�=�c���z(*r%U&3[�G[�+3�� -n�3�� -|�G责��N��� ��b�=R��E�TBbC���DޤW:�[���$dEY%�[�t�/o������P'�[ā�~� X2��c�42:X�{�%��FS�]�8�ޓ���G&$��|-C�l7�����~�,Nv}���,@H��fM�\�� jLw~�,r�M�F]_� -��8��O��o�ӂ��L�Ӽ��+�k�6�A�$=43��o��J��rOwVsr �ʬ�z��~����������-!蔄Wd=R9��l:V�h�����L��a�t�8QIV�yU&��� ���\ �j_E�{<��Y��D���l� a���D����x�?��$�|�"X��"r��Xu[��6��N���A���qm��ɏ���Hx7�Mx�_�[��z - �*K��Z���հ�W�����.�R���ES �Lk�D�?���v%. -�I-b�z��U��ї�D�yM�\���C����S�tR R��$ �ۈFy/� �}�YeO�Z��ϫ����c}�< ��^�RX�T[�g��F/yo\ky�Wb�˷�{�e��_�b1���(17��LsT/�ks����R��8�׆h0��cs��]���"Z�p�̥`�T�ռ��V����ޚ� ����;�W��i%(���5��,���>N*�Y�?��y���ʈf�λ�� � ɽ�7��FWq� ZS>M��dT� Ǫ;�Qס3˱_���L_���(U}�h- ²C� F;5 �} �.T��/0�y�]�!3f\C�1�WR|#� o�Ǧ?}Fq?��f�� ���R�2� ����"# -h��?��P���||�u�sSQ2��PbHR���8ꎜ�MS^M��ݴ ӛ���n�U�]I�l(�ª����pX�,�%0�1�ky���q���� ��`h� Y�� go�[r�`jϾ�N�t �\�����bIBj���µ^��H��{����� -�
+�'�]��@f̼��Gg�d��������F�!k���*.$|� /m�F���yAO&�2��� ���1� �<��+v ����Dce����Ex`I�5���K:�����O��t�.erƧb�,H/���u��Rr��WW�OF3�g�)��D�"\ߞ�j����Ӕv�Vس�u�t2C
��h]W*�g̯%�"��@�r�Bqf���4�F��<�P+]°�Ng�8��q/��ȼ�b��d�&���dVN �����6b�N��?���P�ZW�n��v� -b���v\aۺΤ:�}�����"�#" tl~����5�ws�@�|K��yϒ4%��|�}�=�-RK��{ֈ���xwwa@������K�0�o�wˊ���6�M8��q���o��YF�i{#�Hj �/�HP,9;]D���c�b�* �z����s�e����?���T�w}�Η��ܚT��jy�<w���ʼO �� �� M�w��UQ8�x�Ȭ����3�}�^�a���|ݒ��~�Zw�(� -kA,Ȟ��R*(^?�X5���,|�0&�)q���3�5Q�Q��>1(`��3;��~���jffl���{>�SՆ�[Zƀ��^m5 -�l���4�
} -�i۬[ -AE�i�ܾ^�p����S��q�)䗮}�ș�X���� ���I|&�Y�d���I��~h�%i}�Z��f�ǤX�x,�������T�;=�Ji��^�ɦ� �z,�h?R9��; @��j��Y) Ƀp9:�I߭���G� -gwo�Ї�V}�Cs g@������m
^��i�;4 -����f��61^Ԙ�����iB��1����Ɏ���+��ic�e 3+ ����'���N�꓁7��i�� ���~2�b�������`�������C ?����=u�ۈU���"�#��\f��N2� -w�蒡 ������վϮH�=��T����6X�>� 3�6��1 ��V��mj3/7�=���
&!nIy<<QD�"'�[nt�;D[sZ�Z�Ď ��v��8`���fF��s�|��7G 9�+
�?I�]Kk �d� ӽ���+(���5�(� �CT��\ڟ�l�npOh���@t���3�6P�Ui��Q�G��*�w��x�� 1)mvj"�f6�F0�������Y�i ��K��UQN�g_;;C4�� o�%bT �͆d^�F G
��k�W�>` e%a�{�#0S�=�\:���z��G�U%�YM����.�ܐ�_b��~���w��X���{7���M�6�B��z�״���p���Q��G2n2�D�.�hE#�� Z��Y��&��E\(�ES�c�lgK��T@�9 1D��c���j ����i���D�����Я0T���b�$㪌��y�d������n&��\ �H�^���X\J��H?!� -F�P��h�!�F���� ��4��E�Q��Ȍ �˿$ƣ}I�D0I>��lP�l&�FX����^����!W� �qV`��z"!_j���E��e� �Q���G��P�['�k��Z��5%K����¸� ���㼿��/��G Z��ָ���˛w� f��ĺ#7^��?<��a���9" �*��z]��ֈ���v�� �-�Tq�.��%� 8�ke�3�[M�6 �@G�X�ޥ�S&2؟jF[fz�.���'eCL`KI -g.� ��5�\�c��O]ff�,�m��@+��q[� ,<���IP��if8��MI e({�J�~�$:�`�� -��;���y~�`����jr+�-���>IE�f��l��ZV���
��U M�5
�O�R����N@�d��F_���u�G��l0�YiQ��r���eY$�9�q+S�b�9+��Y��� )mdA( Ŕ��m;�U�
�ʈm-�/=��?� )CH �rS��-���0K�k}�W�j��9��@F#i�K��D;�$*����:v�u� -��6G4� W��mq�Mo����0zt� ��[Λ����3��Zs��P:dV�/fyŨV������ ގ%� � G5��A��ޫ�h�}K��=�4�a3����x MPn���#qp´�̨�xk l�<�����ʿ�aL���+&�0q�wl$^dn��y(�BӶ�o�#@��M��@S#8�CjQ��} �k��*l� ,��� =��Θex����h�������gЇ�N�/U
t�M-w*���<�\ɽ~,($ۥDz��5d�rР�� �=��+�"�~t�%ʁ"�,i��, -� -���.�o�x�g6��چ��VDU�N �;Z��5o�Oh����>I��:h^�$��lz����T @�}&Y�H�E� (=�q��6�٨�W=w��xsDs��:����-��{�1�Fi�"}�F��Lf_���;FO5���|y~U�� ���C���� ��+����u{�&d��*��E牊�M�t/&%ϩH6�ҥ���GJ�:������ҕ�:��e�� ��q��(LdO�"^$�u1�&j�� Z� -�=;���:������/�n��,*�`\��K}["�H T�ވo`���z�N� &j�'�2�|K�c6Q�n)' �֜�v?.��괖�P����Z]GO�I�vIb��� �ЄH\ԇ��}v�����1�{'��g�݇�m���*��V�k�J��9���<���i��gCL���X�rX�=G����.B�� o�~o��~8:_��Wz�HT�{�, �d?u-�R,����cQk�����'���Q���������g\&�Q�#J�Y�#ղ�[���E�E(@���x����/ ��:g]!$�US ](%v� ���팼`�j�&^ ۜ?-�@���j��<��lY?XRr$���-�T��~��/0��B�7���YSB{@&A^UE s $DH@ -٦ϭ�%"��9� --��B�h�0�nnL��E~��M�v��LYd<�g�վ�Q��� E�o�|Ľ�\cv� -Y
�4j"����6���(~7qB�b�� L*&=��4P'���@X�ѧ����R���i��#k]3�&M<~��Ǝ�yז=��.�}�h�"rr�˫��� <�$wt��CnE�@��*�w N.߆Z�r�L�:����O�T�P� ".!�M�?d�<��h���¯=B��B] o��d�J�o۰ư�TF�Q�P��C@qS������ 7_���Ԉ ����3即_������#�̂�
�~sOs� |�Ʊ-J?�>8�_@1.�X Ig5�Ric�Rc -endobj -995 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1921 0 R -/FirstChar 2 -/LastChar 151 -/Widths 1926 0 R -/BaseFont /DHCAHC+NimbusSanL-Regu -/FontDescriptor 993 0 R ->> endobj -993 0 obj << -/Ascent 712 -/CapHeight 712 -/Descent -213 -/FontName /DHCAHC+NimbusSanL-Regu -/ItalicAngle 0 -/StemV 85 -/XHeight 523 -/FontBBox [-174 -285 1001 953] -/Flags 4 -/CharSet (/fi/quoteright/parenleft/parenright/comma/hyphen/period/zero/one/two/three/five/eight/nine/semicolon/A/B/C/D/F/I/L/N/O/P/R/S/T/U/Y/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/quotedblright/emdash) -/FontFile 994 0 R ->> endobj -1926 0 obj -[500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 222 333 333 0 0 278 333 278 0 556 556 556 556 0 556 0 0 556 556 0 278 0 0 0 0 0 667 667 722 722 0 611 0 0 278 0 0 556 0 722 778 667 0 722 667 611 722 0 0 0 667 0 0 0 0 0 0 222 556 556 500 556 556 278 556 556 222 222 500 222 833 556 556 556 556 333 500 278 556 500 722 500 500 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 333 0 0 1000 ] -endobj -969 0 obj << -/Length1 1624 -/Length2 8351 -/Length3 532 -/Length 9216 -/Filter /FlateDecode ->> -stream -x��weT��.R��;A��Cq-�� H!P�x�Bq)-��PZ(V��ݵ-��{�3�ݿ�ٿ�#�;�9��� _��t9el�� E(����#� -�l -��� -q�l1�5��G� -�h���7L� t��.��_b��� �'rn
cE�*��n����z���� ���Cm�y��#+ ��p -�8��E -�6/�N;0|�s2����X��`kmH[Ǽ�*�p+? ��5��#/����� �R�
���*��9a���ٗ���=�g(�6)ٳ�a0�{<�f� -p͢�2�/��`�T� �j� 3L���� �!�H� ��s�?VL�T� �J�&�g:���ѧLy����ge 0�+�&|����~s�T�����tt�Rm�I��d�9:6+�@��䧗%��A~��A ����b��0�T�Y�s� 1��g{ܙ�_8X��x!�y4��3�m�,qաF���U�1�=ʙgʙg�Ȳ�w�E�w#A� ���J���B�S����n뮔{w�?�W#�T�JZ��>}�ѕ�JJ���������j���[f"�u�x^�(�HH� }Q���a�Rz8�����;j��:�ȃ��%^�%Q�����v�i��Ƥ|h��Uq�J��� ���:aẖ���2]�R����\xT;
�7L4T3F��.�k�4��u�q���Ŋ �c��������:��˃NG!��E�f�4�vZi�M ��c���X�"�-�����P����$�_?N�y���սm�+��_��s�� �I%paz�l����u�U�
��\���bj��b>U�)}{ Q�N�����w%=�k��fZ%��os[1��]���Z�w��fs�\��c x������M�(}�"�\�|1wNk�T�h,.W��h7)m|���'g�5�S��J2�M<'s��+ �U�R������&I"Ak�ð��c����'����b�^X��V�㞋c&j�� �«{A�.5��d -�{�A�ݧL3b�
J?�n��C#�G�:��Sş��XJ��5^9%4���Ҩ�_Z��u�A���݇�,23s��Z�z�gI�f�35T�Q��_
?�n� )-�d٭�!�-�ԇ$J���z�������)N��:���{�[}�|ͯ�*�e���\�v,��: j����H�R<[ݧ�}I� ���R��hs t4��3�{�� � e�A���)f !����Wn];Fu��TK&|Ջ�\c�G���E9#��l��z�X,�t8����vO���j�@� ����1Z1���Wc7�^q7���Hm�#�4��9.<�qƖ7]�>�"घ��;ʆW=�PN ��mMj�%��G�(��/��]-�'?E4����� �� ЗB�NI�V}f�ז�����B��aˈ -���I��+��k� +�k{p�M��$]Lj&�?M(�z�h������6�g*⪈}���.l���^w�k�X�7eKxv����5Q��Ǖ�.ܥ˯�ZK�Q��s �h��\�l >[�� ݓ �"b� -idgu� ��܂� 9��ˑ'jM.~��f�K�� �� S�k�'�,F��.J���� XѶ%�nv⚒� ��\��V��r >guΆɩ,h��bѤ�_9���`�T �#�W}g�|�f<�8��5� ��m`cڗ}���[�o��-Σ�gL���F& �z�_ٺ�['X�tqu�G.�/�b���i$g�� � -#���SD��l
��gT���B'�|pٞ2SX�� =��~��K�D�+�k����IC�C�0SAp��cZ:� �s���Z���K ��D�l�os���'+�E�;����b ] RN;-���(�]({5ׄX������~��=njpy�7�rB>�#��r{Y��3�r�l���~�Y��)�`qy�T��IJ\^�º2�5�����¨�ٽ C+�a��my�ʀ=Y�Gzm�՟>� �I)�~�����wZ䥗Q�yy�R�f�ff8��� -��τe) ��5��z}�=1� ��v��G <�'}�p�/�ʨ^�r��)��ǼV�YY�sSs�a�A��PW�� /U��G�8 G��X�����gd��������rs�c�W8DN0|�t&s��9�~�}Y%�Z���4�@h�wK��0�7�>�"OhI��" 5��t�]��e����Uy�� ��\_�j��O" o���~ i��b ���wyu�����: - �EW�?K�ߓI����t�{�Be-� Uu�ti�9�V���_onw�YH��y��|Ë��K��'z�uLԂ�I��?Cf�.mQn%���I\zQ[��D]Y�7�T�$&+�z���^� �P��Ǵ �m�SXS�α��d����Y>R�љ���� *�~�zr�4�6:b�*ǴH]��� �X˗P/f ���w��V%.�-H�������������ϙ�ϳ� /�V>�G��~ ]I��R���5��o<�zŕ��!r��C)4�K��d�� 5YG��!�U�a dV��`ȆՃ��|�FĹ�Ə#\XZ��c��ex��⻫� -����I��AM8�e��� 4+�`,N�| -�� �u -jT�C�i�Tu # s���'�jzǢ���]�>� �ӛ���4��}AB1��pvs!��Z���0���5 =Yّ���=�`������U:�� -$���,3��{Q�Q�5��6�h���� � <���P1[�;d�F�oU�%�U�ސ,�ɚ5V o1 -=J�ˬ�<2͢��� ��|���m��a��kv�@�w�����A�yƫ�� �v�DY�32� -��c�Y +�ƀ��Q�s��:�rM���*i���K����0��k���<���|;�^Q���@��E<Y�4�.8X��@��IǽL���k[�irW�E/f؇j�)R��X���vb ~� ��CL?;Yt^8+��/*7�2��)�=fI�#!����ch����{�V�#r�\���58����1�z�x݅Ȯ�֡@�����G�vÄ��*�b>� -ăڙ~��?(���_a�3����q�ҷ'Z�M��qZ���� S�v8����[=�2MV*�E���mpx���Ǹ
+4a���!��2J �¯�c2Ļ��� GЙ��Q�(���0�� ʠ�Z��`����>Qq�Y�T�lFr�9�>�$s�| -c��� �99� v�I��J�?�����l�2��������%�4�ڍ]z�My\U�_�C���Oa��ׯ�I m>�jzX�<P�0[:?��"����\H)�n���� d����N_ �m�D��?�����*�=�;R O�vh�nOx��={��{o�;��N�Zϧ&���#)�[>P���������:���.)��h ^iy�pd�<�L#�ƥ{��ܺ�E��z�'��I���`ύ���G� -F�lqF�w�!�lgVc8Agbf�FLD��x9�|s �5��i.�5�.�so�����4�e5<eє7t>CÚ�C�H�z r���x���Ż+V�-j�p��n
J�m��сs�pЭ@�E�sF�-V^@6�I]�gI�EJ�J[e��%K\�\%k�ב�}�ϱ�����s�2�w��k��h���U%'�W(��h?�G���l��7+#��O'���������78' K*�T���F\��q$q�q�tM�+�M4��7�!�
�9B�cr�xԩ*�E ���!���� G_����k���E�A G�H�#��f �T���<��}!g������X
Wϲlq*��驰 MWf�p]��ST� i;��y�>.�Gxf����[$� LTm�m�f��e����P*�t�5[=� TQ3<�)u k� }��b�4�w -E,����&��6�����$�����<��|�o�L�8�x'%�-i�_~����uY߉��]��<�c�ބď:g}�A�l=iܒٛA���u��צ<ۭO��m�5��T� � ���kjՋIG �X%-��\�q�t�D Љ64>�_ڝ��[Nl��3�KR�p���b]�J�^�6m4��'r��"d^D��y!!o<�fN���%�PZQ��n�� 7Je( �%.���F��Q� ڛv��*�&Q� _�1�ǻO�M��S]���O -,���"Erq�3�{1N�Z2�
��eeE?qx -�N$�E ��!Nz(�}Xn���aב��S��q=! �Uw��-�W�}�\d攝Qf���sZY�TH�-�/��-k������RZ��2�x�.��[��t8HիXE�2�U-�bO��g�Vs ��I5����JҴټ��#LA�fv�ͳ�n��M6H���,ٌ��p�BIN"�� �:2���l �V=+�w 9f�������"�۽����<��ǙR]Y4B�,L��IL ���=����3B�]�'�Ԩ��]d�� -�ݦDJ) ٌ�ɡfl��Sa�c��c���h}�
�7�:����e�+"� ^��?�l^}��.<�E�����QzM�iD���LT�����k=m�P�� '�U��/��0�� -䖓Tf0k�����6�"�F��q$ �DY7ʏ����� �_�+�XDLI�#%�8�[�: ��A|��z,� -��B�w�]��xŮ� �Қ� -r��d�9�b�C��G��| 9]�Q ��3��8��'|2
jK���6�Y����ū؆M�{"���~l�� W�����ZI���CLTb�ب��ɮ-�GOdfE��k'�,�q���ʚBa�=As_|����|�E� �� �`uͶ�:�p0n���+��`�|,_ -Q^ ��kB˶���W)�XI6�,}��>ѭ -ff|����D�[(-��1MX����Ǩ��1���C�`SN���Ő��a�B��7,Pč_���p��ω���CG�t�=6J�w���Pױf���̟����͍��)�U���N��2�C.�;���vc��&���Л���� ?�!s� yvط����kYi��h b�0�ID�.�Y_^�+<@<�Nk�� eop���+�� �hC�0�H� �c����Hf
ջu�T� "[1�8�Q �MB�Hi �*�]ƽ �Y�ip�8i����Ǫ<F���Na����Q[��bd
Yfwp����·{�B�T.�)�N�5#��\8�
�o�c�j9^ �bYH�o�I�3�"���O�U�7���
ڣx����=|M�˕����\�������Ls (i�*{�2w}� �Sq���z�4XBc��/���N��}��O"���^��ŕm���h��rd,����JtF���эW�\ʯ�q��9-1;� ��V��U����
- a�)�Y��eD ����ڗ�~��of�B8�zIŋ����"�6Z��� �?|������V�j������$��辙A_%�� -�=7c��G¬��35�m����mqZ�\B�[��46���� �1��p#T��Y̼�ܼ��8c1@��b$�Z�>�A��� Z*9/�[ qM%�Z��3�"��O��klT�HFk�m�Y��A3��Opkķ\;����� ��OX.����Z|�9K>���� -[L-��_�lr��~�?��S� & �Ŭ}+����Wf�5na�����|�kS=��[�8����(��O�*��\L�ʰ_P ��:�܆�0 -o�d� W<D�?� |)"���z�8��>r���$E����y�okj���*�Ҥ'��']����8�� �B��%[�1F��U~z�7����&��D�=.E���i�H�
|v`�� /���W�w���I���@+a��(���A5�=y=���x�>US�D�<���MU�ԛ��l E� ��wR�{���kGo-��Dq��R�� � ������p� �oB:04B���
*p���O*=�oF�ɰ��C�I��k�$�ƍ�
wLv' -�O�X�g��m9#��2�q -�RLv�͌�/�7Xy!r8�!M�4�cK v&���4�UO-Ey�T�T�����}3�5�V�H�>���"M*��jn��3��|��ג4��{���L�!�W��Pf����FG�Չ}j�j컁��R�A��5ݫr�)vw��'-��Gr�pnv�1A������ \<u���bð��hQ�j�c:Dq�z,|�>1sN�& b�]?Mr)smWŀ���� uQ�� -�a����j��ܚ�Sނ{�Tv����)x���V�c��������O -��_�:�Eendstream -endobj -970 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1921 0 R -/FirstChar 35 -/LastChar 122 -/Widths 1927 0 R -/BaseFont /NZFEJI+NimbusMonL-BoldObli -/FontDescriptor 968 0 R ->> endobj -968 0 obj << -/Ascent 624 -/CapHeight 552 -/Descent -126 -/FontName /NZFEJI+NimbusMonL-BoldObli -/ItalicAngle -12 -/StemV 103 -/XHeight 439 -/FontBBox [-61 -278 840 871] -/Flags 4 -/CharSet (/numbersign/hyphen/period/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/r/s/t/u/v/w/y/z) -/FontFile 969 0 R ->> endobj -1927 0 obj -[600 0 0 0 0 0 0 0 0 0 600 600 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 0 600 600 600 600 600 600 0 600 600 ] -endobj -961 0 obj << -/Length1 1630 -/Length2 10420 -/Length3 532 -/Length 11286 -/Filter /FlateDecode ->> -stream -x��teT��-� \��.���]h���ww��.!$@� �=�[p� �!�|ߜ9�Ν_3��]��z{�O��]UϮ���4�$- �Ar�(;�@�`���Qb� -rrq|�px�^�� ]��.`'(�%�����uBm��?�]�/0���������OKa/4/(��� O�\� �%��� ��������Wn�`��?+`����.�� W���?���>��{�����_юy�g
`�+�ފ ���%��%�5���gX�!V� -:������u��]���+,�\�$��E6.nvο�`W9�'�R
��X�_��/�6��b��^���Z_�89�Ӳ[�A����7�X�k�/r�U<��������a��T{����� it� -����GJ������`�~����pq��7�����Yu{ 9�99� -�;���� ��Br?��"�U�V~��`�r��#�X���5>N�����&e�Hc�o\P�n�i܋�i����-��&������ ѧ��\3�
��u�#vm���%�� �#`��:瑉hW�D�l�}١��J���Y��ݥ��e�|,Pw�ֺ��o���Q�/Kk��C)3��kKКM,y]�ݻIW�Cn���ў�Ebg�BY�� E����o��%�_�
p�����?B�Z�b����d*R �������@�����g�o���2�!�� ��~����p�}�K� ��CF%=ʾ�+�x�7����� -��7���{D/k�:N��3�1f������>��0��-~�d�R�X<�6�4��zVƝ��O��a�= �d!?Ֆ�.OB)�O�8:e�4�� ��Y�zM�I[ ��\�i�ӯ���j��X������BJ�[�E� RS�߽c&�1Om +bi� Nȟ -"� �V6� �dJ VO��r��p�9���LV� B���&J��<��dRs΄5�c6�<Z�ڽ���xc~ �� -7kXp-�Zc��8* ��Ѷ�▟�����h�4W�L^�A�e�
"<�y�g W�x���o)l)�ͨ��*����̙ ����ʔ�tM -Y4<z��Tٱ��m��Ǚy�>�=��#|��2� u��� 7$tD;��/>䅦+�ؘ�% ��D@X;��1O�K(��fAH̦�"m�
`���F5�RX�.���1_|q�2 -���q�\�aT���3� l�B�0Um��:<�L�p. ��Ha>7� �$�$aL�W*��Z�݁ඔ�����.�U�HeY��� 4�5��|���� �m��˭�ߓTrו?����wJf��h�3�7P�bF�`�/[�Lύ>��td#�5��Pݮg� |ԫ�CY��#4W�*��0Z^o�,�F��i�� ���n4
�EMI;h!�Q5r����� �uVr�yq �f~I��A��8�+�}�&���u"a �y�-� ��* ��
ɹ�#L�j)�|�t�Wu��4�s!MRmY�5�0�W�����G i�G�D��V�>5���w&��3F\�~'�ݻ�I�O��������G�4���X�+� ��D�I_ �hk��/��r2�H�������9D���K1͜�.��f:��_� ��4LT�M 7(�o3is������_�C'�{drmcN~�G�;��q� � CLs:l
�DFLS��r�'�H<uw0��H����ȘlN�D���Ʒ+���7T�2|�=�OG~vu1b4r�T�g�̜� ����_|��lՇ�0���8_Vϻ����#�R�� ��-{z��{������9�/ڋ]�mȨ��?2T8�f
5��9[X���>��G�tH���a�ɩZ����h96�˗���3ψ%6ˍpx��O�e.OS�М�<��)˾ F���7}˔#)_Z��� -7��D
R ��象~HY�+R�,=�-*����-�?MVC�$��i��5�����Z�a8W�OYE�Pj5�� Nh����K�����[����� ��]�ʲj -e����:8}L���a�N����Ԫ��jb���;� ����A�1�E��{�c���l -�����Z<3�r�r�,������sۣ����t�-�,���2�v^I4{|�fg�!�-��� - l ,v �g�[�GV�S��u rb�W�_�}\7�]K� �ϟ�=8R�C&)��13S���܈z�� &�{ ��;�{�w/L=��>i%�+06wI���/��1qx≓�^�� ��V��
aF�kH���p�6�B�EAb��4��"�g�#ߖ�]����۞����Q��K���A���j����p ?Ѓ�'[y� |#�Qb9rȾ�FNw��^��~�6�� ��E���b�ß��#��#�W��*��:��$4�h�����nD��ܚ�SעFD�}��X�ϝI�U1�θ3o8�8J)u�e<ԅ��h|�"=�gf��1 `[u��QA��y���p%oZ��qa��a���C5����^Ќ� -����]2����k|��7�X>럐���(�;o����Jm��oXGU�7w&�# -)Fkc�֥��]ͥD�� M����*��t�f����������F�f ��z���ʏ2��`�&qTYO���9J��Ny����p�lb��8���f*��� 6�ꕕ�-�
� ��ф�_`-{F��Z���
LA�P��.�:�I��h�;��)�Z\�/F�H�}Q��L��+w5]D0|��&�W �^�IU5l� r��>0����} -�(O��RtS63Z�0CFv߲��Z -|C�r���?����F�$ @��rjB/�H
$�=@"��� -���L��#�|D���$LP�f(.� RC�7�@ -����� ��*�e�Vt����`�z)�`j|S����ר?�4��-�5W��8� ��W���h ��~�&JY��)0��D�:�4��Ú��<�$ �F�!u���K~Sm�z�2
;z�J�f�iu��j���ϐ}�GL0tW�e�ނ�0\�C�x�}���V<=Xeys���LV��3#����Ns�Nɶ��H*�����?� -/RB��M���W?F�m6�Iy�%�Y��եo�{;s�2��ӆ{�G � L�R�
��� A��I+23�(-�Aqp�Z �����u#��{O�̀;S n����)�j���o�O'I�����蜼��;�~Y� �<�hDs���\�CldS \�2�Isd��|�0"eq��d�� -��صM"-!J$Th� ��`1/���\�����TQ�Ќ�[�N��W������ ���9��C�?�a�|�� ��2gz���|펋0T��L�Һ2������E��:�@A,��`k�� �m���G6�+�9g����r~I��O���Dʢ[ {����r�\CP�#�|m\�}�h;�����fB��0=�7�R�/������k�1fR� ^�ۺ�C����>0c(��e(�.� ��J��� -Q9!����y0��zi��^� /D��|e����>JB�!| A�,S`&ǽ�.�L5��������CX ��ގ�
�a���
/}WR�"��g�Ѿ����;.���2Q�)3�+�#'[����j�X�����EIk��YBU�<����ۋQˢ�����-* -H����ҶX�2l ���RC/��w�Y@}!�~�vֳK��Y�E.�\��,Ż�Bj>�����l�~�����-�er@�Y��䞏��j��T"���ۨ�K��%�_�[~����xR� ��&'q.k�خ���ёcc��s1\�E���b�<&z�d�}�l���@ ��uR$�-��M -�,(Z�
��G!��,�8yK�;~�)_�z�8�����X�/�&_5�(Ƀ|s5�)���+>�ϰc��lj����%��Q
e�����w����U�7|ޖ����4ϑ���hB���h'��] N�D���T�T�$n ���Cm�:1
S����EԨ��Q/nHb��A( ���'r�/V��.p:F� ֓�a���w�l0y�]���.z2�֟~�������z^��&����_BX�].��,y4D��Y=�N[�ou1~KM� ��e�l�QЃ$��QJ�\�3����7�_�U2�(�89j��X(��R��� -�� �J�YsD,~ ��j %��.�(g �b�7�[(�[7�>"ī1�KIkJ�r�(t~�,{|���x��҅CW�
����pK�}A���oX4���5�)k�a��G�f�e�Ʀ��#%��M'z�X������V���,]0.ف���9�߇'��+}�Nw�s��oX��:�r��u����U�ʇ�Bs��s�1��]����gE>��6�: ���bC�ّP�\r���f��L[1�@����L -���>�X���0���p�~�~�nr���f�*zW�W�8���X��7`i
vX�q|�*���;�} ���K��B@�SC�HjI���3N��Om��uH�&��H�{��N�Iv-%�2 �b*B�� ��.ڿ���(-0��.�
�b�J����ק�njiF^A��x�� 8��- ��!�
`ܯ� L����.�S@&�$ 1~G���!n�[�:sH���z�����P����oaǍ"ۣ]�{ ;X� Fb
�z��w��� -v{ �~[ Y퉷k�[�F.��R2:|�&Ë� �&~t����kAY�-ҒQ��^���A�PR�R��A� %��+��9�R���{ �� �!�UW2i����
oO7B�. _���y�
D(a�]k ~�u� �ݑ��F%�����df�qţ� =#� j)��)��o}�|(� ��$5�)�:�eݖ\K�|�`S';ZU�� -�._� 7#�� �c���B�ע f�� =��������?�z����0�Cʑ!���t��1�u?K+.�o�/�Ri�-zS�6��drh�tF�(eL��/umD�N�V�}�3,R֎X�;m?�oZ92����?�}�]*�|��I��W���K�6�,�5�sx����V$$��u"ۺ�w��� -endobj -962 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1921 0 R -/FirstChar 34 -/LastChar 122 -/Widths 1928 0 R -/BaseFont /STPRBR+NimbusMonL-ReguObli -/FontDescriptor 960 0 R ->> endobj -960 0 obj << -/Ascent 625 -/CapHeight 557 -/Descent -147 -/FontName /STPRBR+NimbusMonL-ReguObli -/ItalicAngle -12 -/StemV 43 -/XHeight 426 -/FontBBox [-61 -237 774 811] -/Flags 4 -/CharSet (/quotedbl/numbersign/parenleft/parenright/plus/hyphen/period/colon/B/C/D/F/N/O/R/T/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z) -/FontFile 961 0 R ->> endobj -1928 0 obj -[600 600 0 0 0 0 600 600 0 600 0 600 600 0 0 0 0 0 0 0 0 0 0 0 600 0 0 0 0 0 0 0 600 600 600 0 600 0 0 0 0 0 0 0 600 600 0 0 600 0 600 0 0 0 0 0 0 600 0 600 0 0 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 ] -endobj -884 0 obj << -/Length1 1606 -/Length2 16237 -/Length3 532 -/Length 17113 -/Filter /FlateDecode ->> -stream -xڬ�ct�_�%��c��Ŷm۶m۶�����N:�m�v����g�u��i��p�u��:�vծs�!%TP�4�72��s�e�c��Y��:����� -�ۘ -"b���ba��Ong˿n����H{c�J���/�_�����3�����\F� -I��1� - �:�}V -T�:j�V6��>z1ZV�=����v�F��54��!����9A6P0�+MG�b�Y���Ga���� V�c3�Y?�!_��
�Zk -�d�C��1� �#MH}:�ad���Ɠ5�F��Jgbq�&���4���H ����y�<� ^� �/�n���,�t?P�����!(�n'�|H�����fQ"��3���6<�Q�?#^vy�Q!�P�9a��PJM������5m� - ��G���O�!��p��h-
�p d����0őN\dǬ�s��a[��##�W��$������FA�iX���4�����m���(3�)q�_0\��pZ#r��\�F/�����W�08�nQ��,RjU�"vȗ7�B7�y�GJf�[ ��/���C -�،�Hܗ� `�o(8��J�ժ�����>�Y�{����f��/��m����A��`� -q;w���D"'�0@=�a#�Q�� � �k^G6�P��'9Tʤ�!���סT;��j�~C
O��Hm~�.!H!�[8=f���|�t۲��Ȁ�!"L7w��V�Jq��T#p� w�������@ZR��&�~�w -b۟=�MF"PƁ�Cי�X1� -AU�]<������*1EQ��!A&��@x*a� 99�� -
8"T� ���ˬx"-Ԧ[�=@%�⨹�A�!��=w����ԋ�3�l4���s3&ꍚ)\l^��Ě�Q�l�o�ރ�m9EM�`:���8��7d@8�f���` -쐟� -Z���_��9�N�9l��:�\z��Yс�>}8��:��JywkP������Jt��lɬ��;H�"@�]P����+�%0)���K�3á�> KA�Hj��L�� [�� KI-?<� �QA�@�ۙ -be2d5���%̜�&�9�a7\Ԧ�F#�#����#f�E庲�N�<�y�(� ��j�Z^�&#�-���q^�+�!d�g�~3�u��NO=����.�E��%U� �1Ԭ}+lF��b
~�����V��;�]��K� o-K� � _JO ��<G�����A%��x���V������o�{Y�TA����"�5T�nH�om"���-�:�#Wj�G]��HJ,��14��X2j��P���0t��G'3�P�S/�]�" �dC �2|��C���8���K�&�HHU�.�I���ZA��9��P&F�����+�z-���c�Vd�xP!֜-l�w�5�6�yZ�X]�!�_68T�_̧�K*)ܕ\� ��g��)��t
�5DBv�, U�o�P���*���\o�z.;~ATy�#^�s�]�U�(\�$D��%�LeU�����X���J�j}kEO �^�d�����2"�",�D��pS� c;��jr[��Vq?p �B!� �픞���{b?eV)��狟���7���*�=��BZ�H_SHbű���O2�U��� -��+�{�����ܖo�<�j=`Se� -�L�C�C��wC�Y�qx� :�z� 65 |Y�� �uYN��p� �"S�Py!W8����WzF�?�V����H�qn1Ux` �(9��7�P��U@U�6�z -xa��i��'�'c��͆�ђ�xt�}E jR�ᔚ�c ���(��#�I]� kћ(��,��:��&q{ iI�HR[��O����c,n7!�h��>}y��G�� -�=�����_�/7��1������K`���r�Y�|G�`�=���pD�Ň`� ��(�Z��R��.�ْ�Z� eR:Ž���s͉�Dua�k�OSA`� ��u��U'VA��^R��ly��sp��^4����$�?����$x�@������o�$Z\��O�Z]�\(�u -8-y�u'�8��\9b�Bt�1��+/�u?�e�Bj�(��MEA�%��> :� -a��#�T/��p�$3x�f' �c;��Z��Cq�4:-��rf�B!��<2��P���wF�.�S:=<o(vY\��]l 6��X2��Jպ��:����L����V�G���aq!��U�"��Wէ�o�Ǧ���Z �f3 @�e�Y{�>�ܹD�F-M0�s% -��Q|�g�n����>_ad������!��_�'����$\� �� �bHz��szrP'����];7w�]@�/c�&��j��M��g� ��R�*6?�<Q��h9�� �P���;g��W�e ���e��u�<�]f�߽��{��EG2kI2��a����ׂ^��2�����eT�R. ����sɄ5�T��p� �Ja�s# -� -������^wr�Mb�vֺQv����M����}�9�\�����h�(t
=��!y��Ѽ��L[�I����f� �k6 �6ܴ�W� -�4.Q��;X�%� C���w1�G[��Wc/hl���-�
2[��+��9?�AaOc�t�o1b -'�rxxš�b��(�� E��F���Q2�'�'y��% -]L���0bK���sM�T�w���7��1�M�2��Z��h/+׃�go��#(�y�k)@;4��� ,zfM?H�H�Q,Cw9 �� ���m�;8^vW�� g��g*�v�2�~�s -:� 5�.X�N�Cx�k��6�=T�6d�;͇W.�e�1Gx�M�k��~�] -�ѨzJ�[�³����L�}��8Q������8簊�IZ�6��þ� ��Ck�.`��\o�Z�Zkif»?���x`mH;��SV�������%���LN��Q��>19�)i��� q��#�ad�|-��� $�%@����g�x�֎����$�.�gL<������7b�S���j%;"�2k)�"�x�9=FY��wj�J��R���$��a,~Lo��ګ���8Y }��I6E��ѫ���UX���\>Hn�NߖY���V -t /�~�;��nC̒}8��)(�8���q]>\=n;�:N����2hk]yt5�2N�����I*��u� D.�QQD���6c8r�*�� � -�J2k�%o72 m�I�K�o5��n$�ҊY~�p��/�y\mT��4�N�j �jKSO}��6�
g�]�ɕ \G u��2%LzI|���ʽ۳:�T�����OA�!
�\x,{"�F�� wz��Y2�Ξ�Od����`/�<���9�ֈH!��ӄ �v���,��M�[���^�9��3Nr�17'r�JҢ�"bP ��(#阍�S��ZZ� ��u���35<���::�އ
� ��!�o��,~�"�\� U�{��YA��(q������f��gߑ���:%����r�'�*" -Sd�=z��K �*<g٠e -� -t�mQb�mq��ә��<}~�[$ �E(-$��p���k"���"����M�r=PUϣ<z`YO��Ѷ��p�.�2#��=�j'�g��φ�P��f -�n���H,d10PP�
��G7�_d�ܚ�jSX[�s�9 ���}J�tq���į��jF�~��^x�V+'�ԁi��� >���(��N'٦7��u<TF[��E� f� ���Ѣ��j��!|��t_��&�Ɉ%��m��C#�\!��텧k�+�� �a��d����Fb������7,j�J<�y|���n����S�J [�A��c�`t�� u*� ˚��)�ߌҚ�z̤�Yq�@ ���F�iIl.�3� h뉵��}��q�~|lH��DY YnC�&̴�Ad�s��e*��� --�xUdۨ�+��� �h�3MLА�g����[��nd&N[I���9u��;h��h �&�v��c���g[�ϩR#* -��D����P�h� �ioi1���������a�M(a��� i��
�̋���0ƫ��,z�ĵ:�c -�����^=���F�:%)Wmqf`���yܩ�� *�2|�~�����f�wԪ�6��S���Jya� -�[�h��z\^-B }�,�K���nc� ]O;EΝ�m�d�cx�g�=%T]����\���j����d����Z>�M 4���U ��w�;�0eѩ��KE*Ѽ�`0���k6_� �.�6wVv>O܀@w��ʫ��� n��(���^���j�Fk�^�*� cJ#,��ߓۧ F���Ţ� ��a�x�)�B'�= Z�?�u�i�% 1~f� 3A�/ A�N��
Bl�w�B+<{�Ċ ��i��G{K�/�~��������ʰq�X�b�>t�^h�Bƴ��[�.1��b�$&��EU�l�a/�Ԡt��p�7�/�E b> ��`Yך�"3^�r�ꉊ;ڐQ��Sc��|�%����%��@�R��L19��Qa [�b}[�2"��I͞� ��M����� ��.���e�2yǜ��(-�5������ �6����<v�s֣�� 1 -(led7)��s���p')���]����:N2�p6,���[��H��n�R�PZ�T���ء!�$a��&Ĭ�o�lfS,嵢�x�� Q�K;c�@�W?陉��B�z�r�&
�1i���� ���I3w�)�t����>��D;�����_4�}�ZQ%�����]+�O��Z���&�ɛ�.� ]�H����u�P�95� �뢗�f DZb�Dl ~r�n�%n�Mm�7�C�����b Ms��(�㌬--��^� �垌���1�Ék^-���D�ft^t,���ud�'��0"�1oQ��A�ؽ6$-0,�y�ZdR3c�^�OKo�(r����߂��e :3ĆԱh�����: -��ΐ�"����:B;�� &&c�'I���n|]�h���� -%�� w�k�vm� w �p � J��U ��&���oP�1�\�fr;�|Y[���n���� ��LT����d��ǭ!5� 樹�S^�X#�w��$c#�p�RqE.84A���#�P�4UīS��ɰ�\ b����`��H�0�ɹr,_Qw��B�V� 4 O=����?�;e���(�� -7����.q `~K� -�3}� ���Aj�*�b�$k3Vgz�O��*P�=Idi) ~*0vyʐ� -9�J�$W�`���R�#��"?撲��o�q Erl>�����!!(�� (� �^�H����#�7��d�O ��>��}��8$� 4��J��^w�� $-Z �;� '���{�U�f -Rs2$�%���!n��%BۻC)uv�'\�&6�u��=��:� k�z����U9S/����Ϩ��w1~�0D6 Y+e���ݼF�z�P���do��
�T�,���rJv�����ä�_q ���O�>�z0��3�&UK&g&�IJ����[z� KR"ᚅ�ʏ���/��~+����pJ�� �<�w���Vi�h�yufR�Ֆ4��p\ W a ��\�B -':o��]9 >�ɡ-֙)y�Xp<�o_j���UZ帥�06_VnO�n�rzc����:L�5u�� 8�i�����w�P�RJaa���4
�a��{LљB ��è\@oE��;�A�
��,�+�q˝�j���� dV8G�}c��d���^.���ڏ���>*�k����x>2���_&9�!�x��G"��*� ���ݻ �V0�D)ɢ�k���:� �P4� -��?�yUG��c璣� %���������TY�� -�V�:cMG ���R\Y^( [#�� É��*�|J���������R/��h���d���!HŨ���`�H�� ٕ�iҥ8���"ƿ첈���`�"���� �S���ϖ<$��� -y#K�2ª�q1g����-ö���݃�I�F�Mx�<?�g�� k�B-�Nlr�A�M/�Ń�I��;5��,��W�`�i��LJ�x� ʪѾ�F/G c �"��_��,� �+��&lws�`��S�&��yGp�$9>O cׇK2��A����,b
�O)���䪎ۖ����Ll����: -:^f��r��5�ª���(foC;a'�'�'pq84 ��q��i��� -����y�N���=�xhw�Ц-L��oR����3'Ş�7vF���b�r 1u�ą��aml��W��FI���_�߱#E�p��\R8��r� ,��n�o���2V;���r����� [gƶ��O�B�&�)�\�#����7�|��ov�E|���}�I%\�r���
7K��v,_Z��e�Њ�y���%_����y��2#� O��8_^{���9��C'�2]���y����)� �X�\��~��ô}ْ����b�y���{K9��l���tß9���2�~�ϏM�YYzࢄ�T�Ο8�6�B9�dIF��{��:O��.,|��u���n�k�9u�3z X&j��7WD����9��fG���TNo� ����ў3(�'P��b/���y�?nI�y��H�֚��-$�MS|�*����k���+�Y��}����;���� n�͢�i�������6�L�6/螵���c�][K8���KQ�i��ZnrKb]�:�˃��������o\gl�V�����]�w�K�M�?
��{E�f3˅��Q����ټ��C�R��k_g-�M���Q�����f -ר���Ģ���Ģl. -endobj -885 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1921 0 R -/FirstChar 34 -/LastChar 125 -/Widths 1929 0 R -/BaseFont /NQLZDD+NimbusMonL-Bold -/FontDescriptor 883 0 R ->> endobj -883 0 obj << -/Ascent 624 -/CapHeight 552 -/Descent -126 -/FontName /NQLZDD+NimbusMonL-Bold -/ItalicAngle 0 -/StemV 101 -/XHeight 439 -/FontBBox [-43 -278 681 871] -/Flags 4 -/CharSet (/quotedbl/numbersign/plus/hyphen/period/slash/zero/one/two/three/five/six/seven/eight/semicolon/equal/A/B/D/E/F/G/H/K/M/N/O/R/S/T/W/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright) -/FontFile 884 0 R ->> endobj -1929 0 obj -[600 600 0 0 0 0 0 0 0 600 0 600 600 600 600 600 600 600 0 600 600 600 600 0 0 600 0 600 0 0 0 600 600 0 600 600 600 600 600 0 0 600 0 600 600 600 0 0 600 600 600 0 0 600 0 0 600 600 0 600 0 0 0 600 600 600 600 600 600 600 600 600 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 ] -endobj -878 0 obj << -/Length1 1620 -/Length2 20127 -/Length3 532 -/Length 21036 -/Filter /FlateDecode ->> -stream -xڬ�ct�]�. �v*I�cul' [ �b�b۶m۶����cw����>c�����j�k^s^�Z� 5FQ�)�0��%�lA ,��< -o(:��_����OFu�I)Q������:T\+k�2��(��2+�Ի�]��AM���Q�?A"tto��$��A���w�B����1l�Ux�q�e����t �d"�$�nj��M ,tE�2g���0AC����ǓIy�bL�ż�|c - )/�h�0H�Z =`|K�@?��3Ob�c�L<B�1d�h��$�� �����]C�Y��GO��!���.=��� ��.oǰ,�� �t���3s ��֮�qb�0�Ű�DY~�i��u(�˾���?��
c��bdS7sY�>�d����Q�cz���7¾c���$ �>2�%��߰%F ->@��dJ�'��T�Wݖ
�������@Zl�,P* �7o6x�b���Z���Oרc��^�HY��]��qG�x-
$v��y�J�ыl�w݄ze|5lǢ��&^^Y��d��=眫�'Z���Q.,�#p�������~j�|i���_)��<-�qHb_һS3�4~��/�J� -�k�AUyѮ
D�<a�/Q߆W}�{N�r�0���� 2�u��K!�e���-õ�_����&���t���)����i��=39^T�y�V� �A`�˯���1�[��Cr!F\Y�T��$0��v�]1��2��2����Q�<^�2�H�,F�Ѐ����S���$�f@��}7E�q�l���0�R -C�V������g&�>���"�pVk_�+t��$��Bh�t�ߒ�`�-��C�<l�I4@����6�0;���;>��}���OQN��h�lق�X�����-��Ӳ�f]D��]fp`� - �ו�o�D�� ����y��<1����3 -9� ��:ń�\�Fl���N�統�F�1�{1I# ���#g�M !�&�!�f��<:⑁[ǂ���dx�U���9��m�{��F��A�/b��ޟ&�i��0��<�{ �3��)t;� -I���8� J��2���F���t�+�K�D:r t�Sα���FX�Y��w0����o��"�-P�L>V���פ2�Yn��|CV�ZsZ� ӆx9��ĶU&bN�\@�'��lN���1�W��j�E����I1�~��)��P#�P&�B5�rE��&܁�P�g֩��r�3�5�(h���66q� Jķ� �|�� �#��:[����i0����o�*3�8�|Sgr J _����T�Z�%{�b˄p�T��iK�`�$�� -��
r -g}%���<�����y>�ds�Z�����t��B<*C�u��
X�4RWJY�?�se4����GG��=1nI6�>ⶍdx��z�������^`K��u �Z�$gM��E�ݧR��� |~Π;�Iך�CXF��[��"9� -%V�y���wd`�\ � -?>L�w\_�__��+�����*�5�,��~� -�GB��4$<]q�x\6_̏I_� �ȸt�<<���[�V(�K���hA�L����������k��� �-H�~���Rt��;�ԧОS��,�>x��Q mMΠ����H|�M�D-2:s��K�j�)yu$���:��([mq!+G���S�z�P�҆��jL�p��Ys%���p�z.M[�t]ާ��Kx �KPų����L���L�=�'d{�-�?���#����E^+#6#�
�/������T��<�n�Z�/��8Y2��/g�Aӛ���,dx -v]���}a(��:e�X!��A ϐ[����ܒ��ƹƣ�3a�^��xR���\�2�<2����mx��Q�� Q�E���ȿ�=�HF,����ж�>��]��ب�qZ\Q0���-|/SS��; �?�[ B���j��&Bؒ�IR�u�$����j��i&�Y�$���� -���i
�%0�)x��d�IG�& ����tɳ6��7|�.&� - -Έ��f�� �PMC� 3p��e��q��B��h�~ �,����Ʈ��� -� ;K�{jP̝C�f���أ_:��b*���Ժ�A�h����q�Fa���9�X���)t��QPAng������4������>�I����� --5�\;���2>V��*T#
+ -@0�cz���cL"����1tQ�mh�7Oy�K/=m�1ܴi��NJ���Č%��v=
\l B�� 9� ������W���ݩs;ھ����a _ 7,Z�jg[�6�bV��Y�q�=�TL�T��4���Z�x�ǩD �S7Aof��o�����d��(?# ͔�4��7��;��c%$P�P|�ړk�T�d�pR(����; @U�o.P -�?�? ��:�;r� �;( � ��HB�UQ%Wy ���cE��������b��go@��q��D���'
)������h�H�*��#��Z�YH�( %��g!�� ߿�W{|��h�G�q��L��o�DT�d ������e6D�]�}~Ǣj� -S(x�#o���� � -�c�)E}d�HӜGNo j<]S�<�u��yק�U�7�ꭲ�E��py��8'��ibH���qT?q::ج��(ݽ�Rg��>^ ���WM��}��駋��{��Z��(s�[6��O �z� -I���� ǖT�-�R�5߇����@�nj�oT��uf�����;?�I�B,$�q�G�v��PIJ ��ƻ�(����S�`RH�Rp���/i���6rƳ�Ȼ���v�kU;]�W�魍ysV�$Z k�o��À���K���Σ
�e�*|L *p�� }��� }an��ܥ�ϡ����7d�y�g9�����FOdt����,5FYr�c}��N��:�K �e
f�vE#�?�ю˪̘ �0 S(ӿ�ME J+dL���I��^>|$� g'I���?"t�y0��4=:9W8���1� -6AdQ���,>N)�ҩ�O��ͷo}��3U���3�ϊC�}�p)���a�FK��+ �W1{����iN�Z?�~�<�Z�����~�}�IU?� -^��*��;�<\��j�B��:��k�o�����ta�A=� ��'���H��N!z^���w��K�̴�vߪ�'Z��S�_-�!���9���y��<`���k��8Ë��� UF���ҿ����O��3x���솰b$p��fN2rI[ �Ѝ`-I�Ѹ\\AI��z�A�
;�;����@s�ђ��"� ,m�G(;v����d� "|�"���`྅�鑫���l��!|t]�j�0����־�0Z
)�M&�E�+��ɜ G�7kʱ� Ed`X]��E��Qd��'D5��DU� p�)+7sZz Ce�� -�)k=g< -����L�����wD#XY�y����z�p�^������R�҈��B�D����_v|����Ɣ�v�S|*B��D#ь�N7u�'�x� �v�NEy-�U I 9̽�|i�B[}�� Ө��E>T �;pf4_��%��N}�T����� uĘ�������,Ri.� -�y�ъ<��� ��Yt��z`�4�M�>f��H3���(���]�!9��ߤ� ����c�� -���XC#�1�7r�ѧ��1����*:�� -����"�������P
���t�k�����s�8����8�c��9��Q�3E������Άq��t����CCY^"fDzJ -�n���'�{�������AiD�Xg��N -�2k}������hd7,=���p3{9 uN4��� �T��b ؆F�i$��'p�}��t����^ɨ�"3�Ut��zx���x4D K�Z�gܖz�xC6�]����9&y��t6�?��"% -��F�CA���}>��6���V��\� di B��ٝQ��.�~ނ���=��m�6yS$�-ѥ���)P���)ke ��vM�G���e�5%�_�Y�M�K�}���8 �՟�l5w�� �<�ŷ���3Ǐ����V� � - ���.Ѱ\�d�(��>��L�PÊ� Ԛ3,��16�e��۲�BG�O�����_�ƵW��e o�P'��@��� KL�º-/�J[��xw]�G8f�r�V��cv��h;���臵��!q�L�� m�B���@h�R}���r��'r�⣖�5qq!���� �t��w�¯��Q8�@���}H�% �՛E1T��G���vF9մ��֜�����y� -�YN0ې�x� �����Z1#�p�G�)���{+�ݪjwұE��=P��7���[7����NYY�U�yd -���d)$� ���[a# :����.�����7Lӄ�(��G� y� �안��wb�M�����N��e?Z�ÂfRc�P�e����Q�"�I8� -4�g��� �L����?�l���6_� �؈u���$���; �DpB�u�Cb��#13�;� -*�K;�-�"+ܦ˳-�<��t_��Y�Β�B���$���.&�>�e�R��3���]u7�a�� �.R8�zA���vnXL��pYT���['��U��=|���*��O�A�/�*C�
�?C��h67�
W��x,V���_R��^/H�}��;��=+m�k���uS��ẇNbnN���Y)�ct�-y��JHw�d`��M���}K�4����!�W���sY��MS
|�ЧD N�"�dYD� -�4�5�K��}�#�.����R��� -�S���o�V���x{�?]�{�jA}��{�$��B��h>/o�"U����P�SkwU�n0� �8��B�� �F;u�pL) #��� -}c6!�L��P�{��;D�d�q ���z`�2�f���])�FD�ܛ/�[���"��^w�HZ���"��oD{��_7z ��5�b�;�S@$��W�� �Z�D���u�هW{fM�2� �I*,~����#x�֊�z�KkV߁L�E��)����IXb�S��Ȼ�[N[l� 3�LX ����w^@dq�r -G%vA)��G���f�o���`ݭLF��V���K����w�`�?q����� tj@��<a����IF���������1*O�c=�S��Rf��xh��> ��3c�� -�(�N���i�%���e���?� ��o�`�b�0ؖ �� MR�� -Xፅ<��0�C"��j� (��ڊe��_{�#�p7�L��5`:�~��4���?�L��8Q�\�,OǙ��;�mhT�Χ�V�! �h���;t*����q
!��, �*�Z�Ο�W��T*��6C�:(��9�ɵQ�Q��G�Ǧߑ_<�9��Yۭ�ںM�3u"JL ��ҦQ#�V_���vYT�VKY�����U�g��� ����z�Z(�C?�1�=�� �D�j�R8��%��g�Ȟi2v�n���MM�t
Qd��*l%���RS7��gj���<�W��}#�9����e�^��g ��
��#�z:ݢ -�Ha\��� E�H
܄���f� %bA��I�vʥlPsw8�8֭��z1I��Qg����Mw����#�C$=ꤡ���=�j�wԟD*/��d���V -����������.3����9�]v\_17OnS{�71��t����Cg�!���+�\\j�Ğ�,1���62�e����춣�&kL���W�c�a�J�Q�&AY���t���+� 8��� ��Z����V|Ҝ�����/�99t<�g�`^B?h��0������O� �D�� �ƎA��� �Ј"&���GZ���M��1�.���� -}�6������E�<�P&��>sD�b �_� ��Wp v�e�>����f��(!��~i0bkz��I��ٲ�� @���R&��i$|i �
����R��-f ��� ��by,I� ��pX�ة���� )bF��K�b �H���ub�<A���Y*�Iĝw7y ��okSI�&�����Kʱ��/�Q�w�����&��1 �>J�%Y� �y�X}<����3�îe �i0�~4f$�z6n/��z��v��x$�������nme�a�t�T�E�*>��M�CJ�0�g�W�W k�0[(�L�(����/;�:1J ��ޯ�����'s -���!Y5��h��� -�9� ��ͺi=�� nu��'h�N«�4� 7<����I�������=�)i�N{�$dQ��T�0��h�K�����9������@��G�� $��fKvH��:��&��Ao�`���DGO?�d��3� �̪i��'Y"-��-���O-��5�4 �í�6rM�4�쒉����U9F4ұS�U-�� -��"�,�g�K�D~^�����/Zn\�$�M����1Č)�BoŐ�E[�cQ�h�X*����O>0���w+���aڨF~�z�y��{ � gS(��9�&Id�X2)F�b�8��p��PX,G�(x��2�S`� faj�e��h.,w��7 -cL��2 �a� -L�ys�<q��;u %��xC��i67k]|Օ���*�I -ќ��٪
Z����7�_ �vN��Ks6�\���[�w��4 -� �zI6��u�+�S9�$�� -�� ^x��n�N)�����.�q:�:+� ���{��sX~��e�y��YT��ws!k��(I���B(��#��M����}d�D2�9 ���'̡���E�,6bO� O;f�u-~_�x���7���(����/�݈9?�W����Fg��`�}�}4*� -�3� ��1.a� A��J&��0E|R*��(��[ \eZ�� ��Z�����s�%�_,sEj��.��ܨll�q��;����|i*V�� -�K���p����>���gW�D���?�K��m#|�Z�� �Ie� "b0G`�t�� n�J�q���P�G08m�8٪� �ݯ� ���Rf�2e±;$D/�&.m�ȗ(�n�\�U"S#��!=7�� -�����+�����qJ�lHsIw�e� zD�ުԕ�NښO%����r�� ��=W�˄TF%��:u�䀙2�,~u�\ı�����oC}x���q"4{� -@��#\t�� �/K���UgR�H�d~� -a��|��|e�g��
}�uT��a3s+�̥����1K��1�t�~�O`˒tyQ[�ȗM!��o�J����'�K��⊿S�|���\W�A�#��9��2]2Z�lp�F������O��O
&���Dp�V�8�����
�zg���g��5��-�}P�����/�y+ �rC*�#&�]:x"v�rN�4��|�W�J �`f�Z1m�-msFY��:8[� �?[�+v~��Მ �&p� s�K�v�y��}������[�01%�.c�Y�]j���:� ���:Qq�!嵾�����g���{�6j� ��({�;�`����A$���=�7<���ZLLSX�F�}Db62�, ��v;=�#���c�(�FrE��UA7����μ ����
0 - ���Vh/��M�D:���N�����:#��>PL��w��Q5Gb� �
�����@` �z(iV�� O�6 � -��� Y�u ���+���9�-���RU�Mx�O�� ����sC�3�D�����yE�q ��R�d}�O± ��[���G`c��;[��^L���(�n^v轈���� �IA?��Zdߦx��0��5/���0i�U E��,�"7ZE�"Y��� ������BG�8�����#��^ �a�b����b�V��לuHmz�� -P�̪��q��D��@�Dz���u �����fN?ag>-���M�a7��j�)Х0c1���&��0�︂�n9��M�W�)��P&�C�ً��J@e�Oq�Ⱦ��x���3���\����u��$�=�� ��:0���
� {]�7�PP��m1��=p�v�18Z�����rG�%�6.��̢8�8���woZK�9'���#�G��j �X+�ÚP8���ݸ�0J��D�-� f�=_U0 �A����L��-�K������&z�^Lq�m���_��~�9�$�|�ԫ*9k+��җeL�<��u��]� v����_ r�!�ߧ���n"X [,#ѬR;Ry\���VX���AA+w -���ʻ�y�+���%�I�2�m����\��u� �:���WbՑ�� ��h'�I���C��۠ -J�t�a��~�B��n
8b��W�V�n$���)4���V�����;���N �R���������>Y�5( QD�!%�H��f��9��n i�"]�-�1�K��ݵ�����}����y�㕁�4|�"��`��]_�����ݲ�\�$�:�{�F�ƻl��3�?�L$G@����vm���#� �װtή4�FI��\鱹����cL�B��n��e�i��s;<������7J���ie/�5��F�EZUu�!����JM�����Ӎ }�ߖ~� -���z{JE�F�M�ۄ�u��G0i ������^�Yk�z�'���H�n��([�KFR}�^��dk -�5b�$��}Cd%#vﱓ*�����
������8h���_���7�U�2f -b�o�m���Y��j�nQ���f��m����m&*�8���1|�a�~� F�������XQ;( _�SI0�+p��&��$BF -�1�_v#Z��,�g��V� -*��@i�����8��C�3luR� n��sbX�ɠ�ځN�0Lb�?yrK�S��=Ո����@� ��l�
��<�'�A�87g�U� -�x�����XG�y�'� �9v�,սO��K���IC`� � ��9��鸈 �cZ��h.R��I�8�_$�fIKm�Xr���� �%Ŭg������Y'�VR, �B~
��AQ�ϲ�u�s���_��\@�t-����>��Q�F��U��l$�.ËW(�8*��{>B7@ -7쑘�y��7�!�� � Q��L}*�$�WV�ɮ����״//2ZA$�����b;>~T6E�<տ�Vj3ps[��[� � #.J���Y��0��'�����Q�8}Q��Қ�.H������$=��o��aZ]�#6�/�����e��Z��M{�h= Hp���-���� �e���z���ƫ�(On���s�QY����&�I(Ja]�U�-f�� �[����ݦ6v�%�.[��KpyJֈ��h2n�sjJ,�V�&EͯU��x�9�W+0�O��X�3�\ -����z�:s[�+�:[��r 7��_����F�2�:����-A� -���O��,Eߝ��;XM� � U����e�� &��c�2�.D�T��h8&�e7nV"�C�p���# }&_ot-�2��X�L�����ï"���f&ѭ탔w��ʼ�E9���Y|t\d�=_��i��� 9��U5�<}�oCʬe�ɷmQJ_����x-�� D���3����"�_ -{8�F������ �sE�c���c /
�Xne��� Ip�X�,X�x�o��C�C7}y�8��KӕF<ؗ�c��c�>��"����YxV�#���9y�bTj��N�������j�\�W�X!�[�뺧b'ތ�)<$1���[,� �@�W�c3/��WnY"��4�� [_���#x��f3I��[V�;��2f�a_��X ;q)��& ��4F� �� �� -=X�9� �:ؕ�� -�*N�(�c��� -�Q�p/6�~� -��2����Y$�ɕ�ߪ2^I�PYm3����Ju��=���~9�� 2��pmP kDɏ ǥ)DcX������k*+ �MC �{��~���)��5����L|y�1�5u�������c9��rU ��BD��3Ty�嘙 SzH1�+`��+ �`��W5�㎎����i��,��}c��3!��҃��Pu aۛ�� t��|T\�L,p��BH��9���)8H-���jj*�=�O� -��<\a/r�� v �x�f��CvP���u�f��y��m4���aj�lW�J�4p��Z� A�6���B�][���״B���� -�U�wUM��g�"& -C��&�A�"4��]i� �|,��(mͅp��.���oR��] �k���P��Z�Z��T2ʩ�pC��d�.Rn �f� 7����r� k��-!O���1t�9~��q�mx Y��9gK�}������ H��Af�\pC�ˬM�._�B�� jq
��]qL�� �a��n�����('��&Cv�p�f����OF�2� -# �:�F(��Y�s�L���x�J��%�g����e :��#0���ʻ3����LM�\�w�g�RkH��_K�wӪ��ni��ر
�w�lN�j s��8v<o���ֲ�U8^�|W�� -����%���� ���sK����#�� �� -endobj -879 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1921 0 R -/FirstChar 2 -/LastChar 151 -/Widths 1930 0 R -/BaseFont /HVVXSU+URWPalladioL-Ital -/FontDescriptor 877 0 R ->> endobj -877 0 obj << -/Ascent 722 -/CapHeight 693 -/Descent -261 -/FontName /HVVXSU+URWPalladioL-Ital -/ItalicAngle -9.5 -/StemV 78 -/XHeight 482 -/FontBBox [-170 -305 1010 941] -/Flags 4 -/CharSet (/fi/fl/parenleft/parenright/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/a/b/c/d/e/f/g/h/i/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/emdash) -/FontFile 878 0 R ->> endobj -1930 0 obj -[528 545 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 333 333 0 0 250 333 250 296 500 500 500 500 500 500 500 500 500 500 250 0 0 0 0 0 0 722 611 667 778 611 556 722 778 333 0 667 556 944 778 778 611 778 667 556 611 778 722 944 722 667 667 0 0 0 0 0 0 444 463 407 500 389 278 500 500 278 0 444 278 778 556 444 500 463 389 389 333 556 500 722 500 500 444 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1000 ] -endobj -862 0 obj << -/Length1 1612 -/Length2 18760 -/Length3 532 -/Length 19672 -/Filter /FlateDecode ->> -stream -xڬ�ct���&��� ۶mW�T�c۶m�b۶]�*��[�s���qn�/}�{�ߚx�3�3�c�)�� �����8�1�3r�ͭ:;�����)M��lpdd"@C's[QC' 7@h ��L\\\pd -��R� -��m{|��v�* �k����?�ܗN�>���F{1�(zR�����$T}��� 4 z%��gQ�W���Z����J�z��Pߧ;X `����H\ -��I �|�R�c1:QA�����' ?=R �� ��@�������@ �G���� h�Ux�SA�7!�ݴ_}jt{�呑�FX˾*��ٴ˾'A�� �&�9H��W�������J����Zw&s��m -쿝�$
�Ʉ�'~ -j8+�="HOl��|V�L�I��_y�1A�T5dSoEy%|Dm3N���P�{����و -��0�#�D�Fw�(� ٝӧ~�f%��Y���"<ؙ�l���ǹ���2ݩ�H��K�����2|Cu���4��b -d�$�[ß4�h3i�*#��]Y��6_�$l��\5�� -� �G�g�t7�z \��S����� Kz��~��F��s>y{�)�C�a�����7� �#�F�o�Q2v3���ן�xҾ#x9�s�(Ã�����UX7�qb���H�;Q��������:�5p,s͊�V���XQ�3j� .jW ����[�2#o��2���6���y�0O ����8�)Kz�l��z�^骟|�gOH)� Y �e�,���,������sźy&�⥄����*�@bKiy��k@W ����/�����5
�##���@���R�;��6�V|��9{<)�� QU+�؉�@"9�巾9�-��Ƭ� �؎ȳ�� �e�t Y.���W����;����Pf�W�BN���X�a|n�d5�R���o��]fǧ_$��0[^��Ip�VzrE�s��^����J�ˮ���q���3���t�ip��ɼ��/�ø��7d���M��{<1�/�{�"Ýg'�Dnn�J0 V�k܄},j6�6�� � n�'�`g�[�� -� Ҕ�d�3��A*�<�;����Ȉ��r�U��Ξ� �R64yEI�#ب[@�4�S�Я����(p�g/�/�X���@�Żb¾�c��I�n������3�"�U=^�\X�wV����B:ϑ -[���$�� zE�}:�`s(�H��+X���� *5�^�m���$����GH ->��:ۆ�-��w�N� -3�7�]� }"}x�t�-i7�蹽�� -�Ɖ����І�@S&_#�= ]�% e ��P���R��oQ�Jt{����0�8&�� A"zXX���^i$�@ ��h0�km}��u���@�K/�O�\�z��O�u#�"��R.�ADŽ�����J ��4I�mu�`*?섨0�V2 -p��/�nD(0�D -[�%:P+t�*5Gi l@�vmY� ����~�S�J��jn5���ys��0���¹�tOC��������i�DX�� -ٿ�;��D�r]9@�̈�֏S|�[�,
('|f�~}�!�n�w���n���\8�gK�Uz:'=*"ԛ%F WHO��ڳ�����D�_|��\�\� -q��� a���G��� �e -����~)�ܓU��$�ߓ�A=�C���:��W�Pv ���hbּ�A�lmo�U���7��� \~3� -�����s��TN� +�<��9O��f� �D�F�����Y� ��l����6�33���\1 �b� a� ��{�|�m��*ʛ}�"�?Y�,�Թ� e��P�h���XE���\���[�g�V3C^���S���$������:�ɻ��� ���^��������묆)�!j��K�GR~�CkC���BΔ�!$�dՈV`��\��n��G��H�n� ��v�&�̊":����^"�;b�z�N�0U�Ֆ��1��,Ծ㢫|7�oV};�:M����c����= �Mh�C�ga�7���b�5_���/� H:L�
>�r>ղ"�y�6 o�A���RQ���_;N\���L���%7�����g$�c [��� 80�=~��.�T ���^�W`�/�$8�%S>�����X�$'�.�����2��o��;At�!�����&\Ş�dn��kjӥ�<�-YR�oi�U�ڝƑ �Y K�%?�5TXrz��[�/��=gU0�܄�U ShW�1��zcw�>�X�1��S\��3���Baʏ@,���?/�u3u�� ;��MX�;�0�z��E9�T ���[x,��s�1����Q�שVNc̅�r�s,� ��ee��l�N0j�;� -??z܅��'P�E�e6�-V�����>��Pe���͕G�f5�{AuԦJ��^V��P -:�4G�Ce*Z�:?�"���S$`�*~=Q�Ff����d5�?U�a�9v��"�T!K�
��;[�� -����$ vC�ۚ,ه�_ ���pv�Y4�}ay =,��� -�� �a,ZƢO>c!��&,�A�$l��4`�̙�G �9h{�I K�����3�F��й��Pe�w -
8�=�C���"��L��:0%��vմH��?�������3��VF _?��)���qoT��>����v�[�~�+�
���h
�>�V��{�i����,�PhF�1J4��ҁ.��l"�<K�*��Y�e���]XOD�^,@+�4 ��bi����������mJ�e �g��H9�-7,z3��'�nK��)�Z�u�,�.�9����3֥$�ܠ�c -9P ����8�Fl��R�⎩r�'�&��r+ v����7_���m/!���9����AVԕI��L"��O]�� �!����WD�w<��
`���[� ���)!䛽'2Rj:PC��fűb�]��L��pݷm�}p�f�� �SY�ë^0�x�ʷ���E���E�7N�)�m ь�����7��U�ↇK��߲9��,����X�<���Ņc�"�g���=j�� b�*"��LZa�{oF�{���MA� �Q�(��0�k�c�Ǧ�tD�<`N%�y0�B����PP��?Ĭ����x�V�y��.J�����/vg`�0z���~� |�i�lT ��X�A�j��W¸�ӷ������l/^��^��X�H6�3d"��:���_T`��K��X� ����� �����t�b��82�ً�Y -g�w�� _��f�4�,l�F�t�� ���v��0 �Z���I�X�E�w�b�!Zh�����T�kS��S��m�·}P���iG�ִb
�/��zNӟylQ]*+ ��"�V!��s�Л�����Hм��C�93�+-q��01=*����u� r�e��� -{�bFg#���ly�>.i��?�#E�4*872l�Gݛ����Ձ����A �a��+l�h ��c�[�U��_Q'��M �7&U6�؋ { t� 3_��_�er�$q�E��>$zr,�.�B��D҉�@���D��ĭwPL+w1x�KDTj�_�KU������N���=�C; ]����\z�r���~�K*��f:� }䥳�]��Bu�B<+2�����I�����S������zM�<��n1��u���^V�#�:. �?�yٞ������|`q^ I����:k��ZFMd�͇�� > <���4I)'16T�͆N��`��` [�r �z���l8�� ��Ll[@�h_��;�Hk��jL�f'��%��&s�@�T�b[Oj�� 0��m-�Z��<"�V�wSp#H�Ͱ�,3L\g*�ݾ���pg��^� uІ�H%a��uQl��ZK�B�vH�qe·lA�W`��і�x�F �����7��� �IhB($y{� ���MS�~�� # Z|Ѻ6��c >�B�Y��*�ӵEk�i���ܲ��6�#��xN۵qq�� k%:Ђ��� 0{�4ۤ8��J�T��~U�j�Dg,V�|��)�m� � n$;����W��)6{�2��1���2_Q.4�ZxWG)�q���G��{R�h���W��rz�����K�D�]�w�Q���G�\�# n��{a�Ɵ�¯U"�k;`�aEw}������� tf ��u &���s�k�Qk�pxN�nL�v��(|)�F�c��Y�0c���0cX{�}h��e��� K�:�oh�hdY�}�w�Vj �]��c��wn�P�QY@V)[7�U5:ҳ��� �
-��B�BZY���Q����:_}�be�*r�9�Կ��{ݘ����]1�W�e
5�o#��Nb����>���A �췼���z��]M�Q��)�'�&m�"��8�g+G��-��J�ٶ(!�d%���F�钋��0�K^��� �.�f9պi"�B��ת�h<M�OO�u�h9�&ZO{��x�6"�rWN �6�$���0����U���>�0�/D��V��6j��̇�o�� -_0�9��ܮ��@3&i �)BB D����r8��s������6�5E������3�����i�I�R���]S��e�z�!K��Ñ��7��96@:�O���E(Q`�W���g�CI� �7�@���N~�O��L�Ԛ�ф6 t>��tFt &Q��k����: ZBw�0.��� -X�D�B�矉u� Rá������"�����S, V�Ug����H�
֕خ�h3���@gYa����K}\)��ք�o�}7d�{�+ �ר��ǟúi�pC 8[bk�%u�I0:�]���I*]�NꌕԲ�<'�̀Dq�1�Y���4��;4ٴԘ�^���E�:�Z������hS��"���eGq ����Ү���"�v=}���%ű;>R�w���u�)D�P���V�-{
i��87�rC ~zIu( a=/��`�� -`JV��M?�-*\�F�\q�w�4��"�y'L�i
��I����Tx�CxE��7#�=䬯��]��)9��j^wp�i�uؕ�I/9 c���;��Y�V%�ǒ:�gEF�ҷO(�qS ��=��M.A��5������PF�/�* �X��D�,o ��`�O�&���1��)�au�4�x��"���V�Kn�?af������-��(�M�4j����[ �x06Ė3� ʏbV�gG�$���X����]0ML]B@! !k��'9iH�%7�d�ý����V�iH���L��� ���T�MӴ1�=1T��������H&L�5� "��j��a1�5e�� ��9�df�C|�fS}��� ^3�Ry�!��c�^ٱ�Cy�>��GY� ��L���+��w����� ]E���I��#��� �W�ig/��0@h�nl��5�灮�F6PI�pK��KU�q�o��J�ED=��*�S�PlB��a` -^�2�9�4G�MdH�:a,h�&y a�;!�$��a �8|Z2�dދJ��c��6��}�u"���7)�)�ޔL#m�0n��^��l�~c[��z�A��Е��͙q��Em)P�F���x �Ԗ�is�D6
&�<��Y��l���� s��C��ypKWFs��j����s ���~ -��4?�q|C��[9��nю�U��kCWvܾO�HB �fGp��ڙuw"����M+<�RE͜��`�щ)�S���k3��̌�y�m:�s��f�Bܲ�� Ĩ����4�J�� �=���l%��Wa*��K6#�=\{��{��Bz[�aey�}1i%�1�p�eD�Ni�`�6^� -�V-� ���>Zw>�^�:��֣,A��=a�PP?N}��8s3zxC4-��'�@���a0���&v�&��ʫ�j�-OB;�b�Al/����Ȼ�
#o��#y�?.��� �ϲ -sf"7�Ș'z��Aܬ�;�-؏��5��Po��Rn�㗧cĭd>�Ղ�mO �vX�}݅["��C�ε� ڷ�f��?j���s$!ϧmAb�yg��3�������Y�I��j�[��a� �e��{/��j������ZX��� ����a.���\�ߛ��ؼ�~
�����5�Z ��X�oJQ�iO���[=Z)�!��&���I�B�\�;�"�B7�� c)����a�%��T��Ln_��i��c�udg/U��=7 -B�A>Ȩ�t����Mt7��:���=2>�((�!{G�o�8Di�G�l�
��V��U�ֺ�jܔ��� -���)δ��P=����� ��i�NR�Ӏ���m:���@1??�� ��x!M�T�۟As˕-&I����@�ݪ��E!F_��5���T� ���.�-�{m��Y�ߞ�� C&���oÕ���W5i����������~d�F��N{u�Ug�a`BFtCپV�-�V�e *�@� @u�Q�
�8L�4�2�Ir��Г��o ��� ��� �I�tP�'�i�s���TЃF `���0�u�5hJ��
ه,K��к�P�f|�O7��Hf|d�r^k�
��'@>���@����Ĕ��J����>3�����Z��١R^X�9��j�y0�N��s�gA��W��[U� ��2��zבl�K�6`� -��װ����'�+�O?�H��q@� -��eȤ��� ]�q};����%W[J������� a��[�-@^��F�GH� ���ܰ<�e�@�w����y�(��xd;{���U�ot��D�L -����|��p�a�^�9L�����`=1O�L -^���h@R�f���6�U -�q�p&+yP�1���¥��X�|��$�6U��Ď�%��m'v�!��^�����.��6q2�\���C�7E.�ԗ�lwB�8=�_so09F�t�f��o�Ra��J��b;�x�)ｫG ��W���Qw���V�K�7��y$�o5 M���,=��_�4��3����� -�B����$EZk�`�Y
5q�[�����F� :��N���j�ܨ��JV[� - ���8�b����9�Ѳ�&&9 h���!`Z����M$�'� �� ��b| �]�[E�\�tHL�.=MSe�{F"�(�fI � -�4Ƭ�x��k&���� �K��ڪƎ5so�UK�U6ۋm���<{W�Fgs�2��+t��ɇ������F�m���9�������( Q���?�F��$�O�r?�ZJ�M�{m9���1+É��!�ڂ�� �n��Y:�AȋWv� �iq�~�R� -�q�o�8\"Ɂ���m~'8
������\"~Ķ��puX�8R���;��,q�\;1�L Aț�>lϴ���������\U��k�K���(29��J3���r�O���M���Bu� 蓼!�*�� ��x���f��ԃ��Fb6�([N�+�e�#�� ,+C��U�3Mcf��A�n0Ja��.H�#�J>U� ��bF��V?4�;> -۠�_�cvDM�Ⱥ��)�3,fŷ�@s�?X����\��$@�$�W; �=W!za(NGv � �(�ᇓ�Y�C�dQ1�On?S9�>O� -d���#. -��u��ax�'�T��49�} -����ye� ���SY��j��]�)ō ��Y�vSW����ҏG��U� � �h4 �
�DT��� ���}d��'.��c)s��4E���cr'L�q!2�Xd�F ұ!NMi����d ��|H�^�u�����?a��sNfB ��(�;�>�[ Q-�-��$�Kor���I�;G�],��J�A�Xڀ�v�9g�0�h}[� �ŋ�T� %/WH���D��~�!����WJQ;dZU���o 7�U
�iT�dG��!y�"?��L�u���~���{U#[ց�g_Sڏ�s���s=���}���^W@���I�9����@�}�$0_>)���z�Ep,����� -��Q�4Zl��A�MN�1B.N� L�Yϥ ��ʩ�0d��)�����O�F'�<I�('�.D�=����pEd�����mQ��� -~z#�6��Mmn�^���Ҏ�y����{?���
�N[�!H -�░�y�� �B�l�ns �Y�U4M���
�0l�ܴ~����` -ch�, 3 �
#���G� �ъ9$5� �l|�QλM}���>� ��!�}�n��B=�_�' q�=�D�JQ:| 4� "V&71���ʴXG�̘�6��X�L�j�D^�P�,0��>�njzK �U� �;�#
zJ��G �Lt�k
�' ,�2����ϐ���k|�[~>'}A���h�M$�O��{ə �a �|Fo���\basm筂��jM߃���Rڷ��`W<T�;�������&>�5YC�]ށ��}�A� I� F�i���>4�1 <���Q���J!�@�/g�� -�?��Y�L�O���oc���^vu?�Y�Qb���%h��|�:���ʼn "���%v �� -U�!��N}���ѓ;�J���Cĵ?����+�<��辌�p��[���AN -�h�@�{�N'H_�9S(rڷkE�&�ϕtÛ�.�,�x> A(wY��% - �(�'E5��0�{'�W���l��
4�O���k���ـ���)Tl��SM�̺t�� :��OI[|� ,�� -�} �i�<nU���'D�7�z;%s}S�l<��y�4�6���TZ�e�]�D�\Y��}�en|( x�n�� )<�ˌ��G/ �ꂫ�f�$'��":�u� ��x/�<��?�C�S�064qcZ� z�����\! ;�^ ��'PZ։Evd��b�jGY�=�h/������� $8��'k�꼲� -%gs��B�*�ĕT����VԽ~�g��s-������I3���ʨb��4ZŨǾdz�ϗ� ����׳�X] "�e ��?Â�j��<��s�f�AgV+�ԟ8�dڥ_��l:ɶ�q -L!�
� a�,C-C�}M�~�ރ�Cz��� '|;�D܋ �������Ns���
c��9T#qY%%�G� 0٥*�f� -. ���LH]D�.�� �����Ncx�*��R��jHG�mwr$ƛ~�zX���c7G9�fRp�ԛ��`��/�F��͡S�s�e�� ��� �jrv�K �����li�@b �̧�ӵ�F����L �s��_�m\9G��8 +��XmK� ^γ��&�m��t���]�_l��@O3�]�q���X;�3��� -k���x�����C �"QPf�CY_v�����|����d���:
eФ�w���e� V�ꖆP-o� �*����:G�M����Or�/C�lMk[6qɊP�e�0����z�?TR����(��8�j$27Bjߺ��֖����ȹ����-:N
^T��O`b�v� �o(<>y�e��H�T��2���� ��(�2��9��g�F�� ��?q��N��J�PZ�c���iΑ88��w�D&o�\<�����.'cve�k����u�I�]Ț���+���� ~�db D:{���q ��j+�Z�+�?�T�歺����! -�:%�5���V��u�J�5J�b��"2j ����=j� ���ͷ�Oֱ���i�R�q�do e ל}�j(�IaR�FT��{��T�n��W�'�y@,} H5�A�8�L��]���5�vY��D"���Dʺ�z����z}�����_@�O>s0<#gr�f!b��� �5��Öx��J�./�A>x� !�jm��s�7v� ��C}A����}�n4X��V��s�%����{P�< ��� �7�d����.�?�s1��t�}�;��ݽ��G��{U��.!� !T-���9�ݯ~_�*g�k�v�����$���U���5S�� -� ���'l�:���;{3���e���;��Mc���-�XON�½��r�0��C���ƅL9ꉱSW���� �N2���v���� �*�{�k^�jog�"o��gl��I�P�}tq(�� -QCm�6� -���Ș�m����_�p�D��K�|iVWee����
��l���Ï��4�T0���]�d�;PL���e!D*%)f��о� {������s��|0�L�-�����Y��Z`�<�u�N!����a���IJE�O�F��ق�O�������*+aB5*��Y�0M���>���SΚb��(= n�j����4 W���-�Ϸ�_ѐ����Ǻ��` �%�g���W�iІJm�� ��Ԇ�ߑ$1��ؓ](snr��L��R��� Ub�Vfn3]������3��9�T�k�� �B����W��o�9u�lܲ �vxv��3� ��lQ;,
��w��,�f9z � �?� J��l* +pË(�M��� eF� g� �@� <�5�M�� jm�� ��ks�]VY:z�P�]�a���u_d���`�]&6���2#��b�S��|_'UB �9���*�+����Y[����z��w -��(�`�1B������kL�;B�/�,�� �G70���(Y:�� -��i��ԧ�wX\�y=r��7"��i�e6Ս��`C��o��?g`� F朌��H������ϑ`�
��T~65�.96,`�x���l� �\θ;&�!k��� ���J�V>��nQ3��c�8���aG��$ ��(��f�A*"C��}�:�� �l{�7nN^��`�p��˘�V��y�2>�{Ή =�"�;�l`�GS=)�hhR:� bް� }�;��Y�Hey~aN'��o�NQ��%`\�?G�2�9��>�S ��7����6�_qۧ�ȒΊ���vغ�.�#*����G-���~3����N�d�� H�|���>I6]�s����� {�7c� a8d?��NV��W����^ٟ\W��;�w�`�v0zA�f�A����$=�ҥ����GV�a�M�s*(��8������^�d���1���s��C�Ddq -I�B�������X��Lb �c����0��h��v�� -� -��2A��� �e�ۛӦ;������!���`�]�U-Y�����M5�F��&RG�w�+����8����f�yFW�
OU�w��$��@i��9��r�>�H������e��w{��� -,����6���ߑ����*��A>Sx���O��Ð�j�wc�]o������?e��%I�m ��l)���?��4���I���.�����A��qh}�_J�Q��u���ZX�y7��x�,i���^飯\�1) �k��� T�>����3���� 1!} KGf�[Zdɦ�^ �s>�쨹�����]���� ~V\Y�����Х�tQr�=<e�w�|h�$��ܣ �� �S �<�x�I'������_t�d���w��s_��dI#��ҿ� -ogӃ1GC6E��]cdv�l}�����E*��X�
�Vr,�8�>7%�5/�Qz 6@^�$ � -�k���hDlU�v7X}���Z%f�b+��5�;T�H�$I��R.X/+�e��2��4���6�(z������g,͢��Z}~��Jm�g(��e{u�"&���? c -á �\����n -�)���,� ����;ީ x%��*:G�̑b�ޚ�ڱ��'�('
��&ᦗ�Bfs^0 �^T -i�5x�@>,�u> w?ti Ӷ0��I��#%(��� -���|LO�D����g�����8v�C�I~�O���>�m���ޢ��}� -^h��� ���hZ��/��_�7��+P���&&���$+Nȶp��
~ I(���c�ڟY���g�%��p%�>�� H�iL�\����(���_�8C��R{� -��r������0�{���Q�2��Z�a���*7�c��J�I�����]����1=�����S�MX���GM����P��:*��OT9��D�*�z��*ڞ������_hg -����9�j��"J7ޮ(�hT(�� �� ���ʙ�ċV���q -o�]� }��9B�7�� ���H{������i`T&�V��s"��������VMo�i���{C�^�;�_g�`,���2
�n�
R� ɫǶ]�j�uib����V!Q��>��aO<���O�x��H�$��fe �����ꏥ�Кx��i���>�$���y"-�-ŵ ������q ���ֈ�"�[�� m�cA� ��"t8Q+P�K����є����h_� �$��+����S������$�ؙ�ezv~7Eh�Zނ�Ӫ�Hݝ��m�ݑ(���"���wn�ꛝ��Ք^�� -endobj -863 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1921 0 R -/FirstChar 33 -/LastChar 125 -/Widths 1931 0 R -/BaseFont /REOTBO+NimbusMonL-Regu -/FontDescriptor 861 0 R ->> endobj -861 0 obj << -/Ascent 625 -/CapHeight 557 -/Descent -147 -/FontName /REOTBO+NimbusMonL-Regu -/ItalicAngle 0 -/StemV 41 -/XHeight 426 -/FontBBox [-12 -237 650 811] -/Flags 4 -/CharSet (/exclam/quotedbl/numbersign/dollar/percent/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/underscore/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright) -/FontFile 862 0 R ->> endobj -1931 0 obj -[600 600 600 600 600 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 0 600 0 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 600 ] -endobj -746 0 obj << -/Length1 1630 -/Length2 15892 -/Length3 532 -/Length 16775 -/Filter /FlateDecode ->> -stream -xڬ�cx�]�- �v��fǶm�$+6:�ض��m;���cul���}���\��_�ۿ�=kT��Y����Z���j�"��@I{WFV&^���������9�A�Q�����̉@I)� 4q9؋��yZ@s�8� ��`���+%@����di� -���AKO��_�\ -��UY\��u�Z������8X��4w0s�gK�����E]M@�. -`ab��W��k؛�mA������� -�**�)�PHW�B��U�m�W���Or�]Vɕ $��qy��"��z� f<0��� ���f}/���>b�F�,V�Ud�Ճ��JlN�o��+�O�X�1�-��c-N�1ipݛ�\A� -�� �`u vd�,RH��$�kK�>&Y ��۔O�&�o�k�Ɯm���W��� -��/���[B��`�t���N�Gf �ĈH��mV�D�ϓ������Y_k���+��1 p�Ҩ�����j D�j� -Ga1��8��Y۫��н>�l��!������R��?�W'��_N�吃�Y4!aԄ���� -/�L�F�V�a����+sTe�1�G�G]<�lI�7E��+��=� ���,C��O��or.�k� /��ӌ��U��Hi~|��w��k�q��~��֣7 ��"��Y��O �k_�1fo4,�Iob�m5���O�k�uҥ2�ޡ�d�j�7W})� ދ ��Ͼ�dT�wDŽ{�����fː�ؙ#K��N�h
�u��%�>��X������%�r�_&��bks�u��j���E� -�:�kإ�����v�5��°��0p!.Z�2�.�`��;��ҟ��E '��L�~�'"Bδ �Rۅ�뚀���1���ނ`0�zл�-��������$��|��9� �h��`�6G��h��� :"��;�M�_��J�%�o% ��nck��'y���α�m��������*{ iwQ[��k�� � t�F!c �8���N� ��x�
��!Ē���������~_��H��۱1%����� Ͼ����>�M�A�dZ��51�b1ܤɬU�/ -�� - օݧ�{����R���I�����4���d`�e'��K�����0 x����Q��]�h�J;ZL�"�7Җ��| �T����o2R��%��Xs���c�>`pȸԢD� � o�I[�4u�G ���]F?bo� �"1I[#� x�%�x����ɬ���>��s*���hd&C�x3��9��kM��"S����͊L�''��C�e��@���4:%�Bԇ?ִOH6c{h�5/�� -5�Q�ĄQ�� q�0=l�\α� -��$�_~Т:�l -ۅ�Mڄm>�'������M�O�q�CĐ]�5CX�*\�MN�dtW� -BJ!�l!~X��ՠɕa�1�"/�E��!J���o�KDMk��� w�F��ۈ{�g,�6Q 4��l�a�W�w�4q�7_�U0"�B`��"�?(�*�2��G���f��QX��J5���� �%����b�ʡ�Y�_c� p'v�Ю/�]�m��D� /��w���|&�>��GSܰ
�d9{��I�J�K�9f�銠�����@�9x�i,P�*=c�����Nm6O�^ E� �֞���Ю� -M2tɻbqJCg�`AjI@v r]� @� *� ��載_��/����/ -��"�R�����$� �U W=�gY�'���
�M���{}����A��5��U<b�I�q��3�� \���� s�^�Q��I?^�s2X�OzG�6v�����i����A��6���av-�2 �Kr�ʃzs_4/��B�o[��3r��)_&x���3����eX�9i�i�x�ל-9��sA\U �=$˘��G ��Sſ%��R�2��&���t�Z�Eǣ���.��hnSm�ij=�D����6�Ɯ�k0��SF�4p�J��� �c��Q��G���,\�RX�<5�[��w��� � ��� R�,����\�māT�0쪃��s�`�O4� W��l���"Z2�0l��{�'( z�.9_�z��Б���b����wS*�[�Fsp���ߤ_�~} �s\���f�{����#�ʇ/�� V�L�lQ9�%���T� h�(��"�� -�_#��:�d��r@S�^�2�Q���]��8UY���q����j_'�m~��O�� ��
�,��鋑c^������C)� �t%E�f�$�P9����4yo(���d9m�jW�/�qge>K���f6��'2�g�,5��h�����6��� -g!�)#�LI�e�O~,Eb�� �.���=���L(Bćơ=�a~���L�jSȁ�k�5���H��F��WiWམX�w��� \#A�%�2�j Ǎ�� ۡ���P2���C�����o K,\Q۲Ԏ���3W� �S���3�F#�l������¬�T{�?�u5DZ�b!⺂Ɲn9�#M�y^Qi$�\�o#�
:� ����q`{�!�C%o��|���N�`^�V�:z����ژ�,���\uyF�O���6����?z�t+A���E�>V� ݴ�r�t'ˇ�<�9�]����C��|f�K������( �%S r�3��Y� %�T<R�m�*��S��-�a�C!)wȨ�;�&N��p����t��;��]�njQ���_@q��a� ��� n}������Z�����Y�hy5}��]5P�*�a$G(��u�"���c9�z��� -Qm���. -_ Hf��U;�^�~���3�5�
���� �[\١&��;Mo9E*��� E �m�l귚�qd�����xZ��v���Q�䨟J��cFv�1Xc:bv��Q43��g��6j �K���|R������N7�����DL�
�YTmN`�Ԋ�i -�Y�=~��k8�eh�RZ^�V<��x�@#�"s����d�I�P������z8*u�K�d�Y����. ө��.��u�Ta�V��C�nXЫ�j�����S� � [džN���� �z �۶I�WV�A�����NQ��6W -�� ^]ē�[#"�6]�����X�=���h��m�%��F�W�������t�d� -�;�/�`>��D�F �X8)R�(�e+QB���Y��$�w�4�A��F�[/��(=�|�11ǹ�Yf�F�s��'�[��w�|����,��39i�漎��m!��uE� �� .>Pr ����O�be�/ϔ���?c�^0���˫L�9}I�v#VSgz���ё����)����p.��I*�wg��&)��o�U��H�+��ɥal�B�iW��G^���l8��~�H/� �5�c/� -q,� ����G�Kco�I۳����� Nv#j��)���̷����C��mm� -����VJ@�y�4A��(9�,��-mZ�)鋝 �8ժ�+�lv�cʞ|:"ڐ!� Xj��,N�O�y|�a덟�a��z -�Φ�*-�r�b3��1<]#�դpX%'L�w��I�ohZrI�����Q��1�ؗ�I��
�UH��q�G[Y(|#8�� ��� ��"�@�B��ѳ {��'��V ���߈)I���E�H��]~@wt<�7�q�E��̬��!y�j� 7����*�4ø�?r�9��gţ��Kj�4H�D}L��=���1�7�4S�r/��,m@� Hp�^T*�g� ��V
e�'&�F���my�v��Q��X�6~p l��3�e��`��=���3(���q7�s��W�)�����K� 1�!q�I b^B,�sb�@� �ja��0?8�@?N������o s�y��TF3�Rer�9I���7?�0x?Dtebv -"q�x�A d�Ĝ��w�4��Jټ��8��W�wm
B\����Q������2�'=|J�^�{~
%�ff�2*���UU��[�Rn��� � ��/�︊��յ����[�@����͗5NCCOQ~�/N��� q�!ꠐ���H���5��3��ya�UTE�3B ���GN�܇�lX�� G��) ��aow;�5�-Vy3���J%��vsQ��\��0wW�jS4��l �Wb�9z%�;,_*E�Ì��w1w�=�^D%I����� ���Ή���k�߉ y(@�qH·D�ǐ�QsfT+��թs>�K@B�B����j�A�Sg(c�� ^���<H|�v�uMg�[���� e7�wjr�2D��6dl�
H.)=�:{�;�5vrU�(� -��;�5�9�%��L��w_ ��hݥ��
6�V� -�^��D>#�|�z��>�_ƈP���FY���Q[� Ⱦo �zsT�8�Zv?=���H A�B[L��âvl.����G�v�7"E��O�Ojn(`����Wb��vs�;��+�{����X�����[����1�'��6�U�Y���d�e`3��糼6�Hũ��������(n����"uY���[F��3� J -�d���l�Z(��RO����69ۀ������DQ��UJE5�*r�@ -(�[$$��,��% %y� ��ƔV��{�(�3� Z��= (0�Hn��%1��Bz;��ߎ�s�9�=u �U���g��v��9�{⒮0� -��%I��а�"�H_|B -D��Z�K~��y�'������2ZS��*_�s�����y��4�D��G�V!3���.�����~Yx��Q3�0��*����J�n�P���x��W1�1u� : Ow aA��^���Ƅf��RW��(���B�|d9�e��� x�|nz��풝]��O���;={ɗ �/݄x_
?�^��xV�W���%u� �s+��iTO�������^��qF��;��[1I��@�I�E��Xq{tU��Z$��/.��3�-�
�_�a?�@��PlT�L���?iy1s��yK��[�>su
�-UXr�m;�:��K� *g����� Y&��1Z��ڬ��Q�~r "�J��`\�}�r�&���[@��ڻE�($:��� e���|��C��(�~��� -�99'(��G(#?�i��q -[( ��� �t
b�[��- -H�U -�7�����Ś�,<���
� ��� �;KY�7�n�7q��L3�8�@�S�C�tv�j�Y���bb��iS -�L;&���社Q�;�UjNN{)�����@�:�0>nOG"�ya,.���� zi�T���:q!$*nK\�)�.����8>� ���u�J~&� ��M[oȳ��J�2�xy�3������.���t�.� �5��8A�� �Z�����n�K�'�[����V�54���,eW~o�5X9m�j�k�$'<�Y��@� �A-G-�_�mV� ` �������ӹה��$ȝ����C�r1�"��$A��)й�?��0H�ş�c��&<j � C @ ��tH.��k�A����!� -u�WfH��6��PG -.g4�M�'M��(�M�|�ֈ������Ę#5Ǵ=ȕ�~u�5V�R�/����H�Įf���N�: �l�Tmo�_ �[O�1�̤�k�&�IN��v@��H,�t�t��>�'R��K.zg�J��(+�5�2�kڠ �϶��[�3�n�^ �^���Q�T d`v+f<� �'yжj~�q)�\k,����kQ헽`��O� �c��\,& ��J -�iW� fȓ$#��"�qH��J\�WxZ'd��� -'���� ��#>���Z*�
?f��1sm%$�� -a�2r��Y"`��� -E���_Q�HL�@Z�~fNS^ ���^�<+9;�y��Mt��t��N9�JA��ئ{��M�JXQ�D�+v��Ն|bs�F-˕�EJ���8}]�z�eR��d.Ly��|�Dl>��]�h�W[�!��T��� �u��!"�g��.�FHD�������g�$�6MN�jpx#2�,y]��ê�
_�wr�% �Oqp �,Ԇ�}��y.�0�ֳp��OS*�㇝�w�E ��0m�����YiE� �X�Eiy� F/ɪ�����J�����@%aH���?7�����'�J��2L���D���h�̢��,�h��CY�]�ߴ��gmk�f�#������J�Um�ý����1���� �ƻņ-eQC�s�o��؉ ͙�LlmwӚޗJ��9�!&5#�~k�ӕ��9wX�Mk��Hg����6��x����r>%C��#�(��Rm|�$�B\�� AvV7����00�(�1� �՝��K�ܹ�~�o�T9z�~Y�{��=Mq0�JA ��}/�1�����e�Ѧn/*�mF��x�
q� �yJS*\�d�-�:��]y���T������E@͍fvT�6��2 ~lW=_x�Se�<�B���m"��g|����/>���n��0'OK_5b�F��ؽ�`�� Ԛ��&�ϸ? `;���
�z��=k-"c �)k�@2��l S�s't��f��p!ӫ���H|�����[� 4��9_���SGUP�I%�5� -� -qQ)[���W=� лe~ٌB����#�� mω;y��%��@D$zf��A%O�t�9����u 6�R�ފx��� -2:Rҁ]���\���Dʙ��^-;n��Y~�0�1ͻP���0��}��?f0���q�c ��[��;�96��/ - P� �*�~f�i����� y;��������p�<3A, -HG�B�!�q<6���p�-HM���u'���h�) -�s'&�H�������QN���8[/�'��t�Ms� Z!�7�FjA�;P�;��<�:��hX[��xWӷM �xW���ћӼa�~ݯJ�r�����`����F�m�1����U, ŀ���;:֝ �9��y��1���PU��S�QRUib�3�W�A(W���ŀ������6��Q{I���/��#�I� -RW�� -�d<��*�/^���u���ֆ�06f�Dx>�3��6
$c��~{V -�.�lTֱ�`�����t����ɟ��R)z��� ^ �}b���d7 -�~�+ ҫ����Bc�#�UQ����2��5:a]C>+ 7��B -lw�� ��; e��/~ũ�6�bDP����5 �h�d�'�1㎁�H���I��z��FR� R꿧������~ZB���|���s>v�(B�)��<��+��>w �*>�v�P�����n݇�32B�;�}0�\d3합�l��u>�5��
�'V���7����n@��_��u,c!�y&i�6I���pǾ -I3qn�#q.�+j�lx���w$��mE8L/�ğ4 -i}�8c�+V\��H}Hȧ�`$��O4Wa�����ů��b�b������z[�a�^Q��o�59�>�%{q��x����/ � Ÿ)�1�7i�-ɉ<���y�`��~)/B,Ԍ� �$������} �q��q\����9X��&Y �~��?Fѫ��7A�hnzr���$"w�:X�#uq^�>\xb1һ�t�6J��O�;��ɖa�ې߄f {�e# zP$��)И'���y����n&s��d����h0�Q�>��sA�>2 ̄8����q}���Lm���dx�N�GQ �L���Y�2�V��� 1�ŵX�*�� �q�69+�ޥ��0�8����X����s>ޡv5js+����Qa�e� -�����bJ�� ��"oRc���~:ƃK�X^��Tp����#�2�&���j�7�L��zm-5? ��� %;7�'G�av�&�}.u����-�Amix�� ��c -MI�\�uT�jGI-g���ӖG�ydf���x��,�o�.���*�_�S�����Ck�ڙ���>]�r��:K��S%�x -�5-l��w�?v�͓!�P�C��2��6$�.�M��������8�� =C�<:6��*�8��i������e �x�7gSL��]�� ��M�l϶�_L�[�>7�~K�C�
b֡�M�DSG�l,Ա���4����vO �j��vXڋ>N]'#����!���7��*x�G������!%a�Ц_��\{��qf__�j�vU�j3��Eo/�4 16�-AX�I�s���ZI��>��NA���s�Kp����"�Gx ��?��Kl\j��a�ۗ샜+�u�tC�h��� -�n$r� X��D�t
��Ӆ�2��n �s�mOƄ��;���shu�U9�֏&;y-s�P~K*��z4rnp��}����)RB�+��>�cI���w� �hz��\mm��M�H��<�|��&����w�s���+\?V˴<=y��H�M'���67C�o�+A5x5 ��x�'_� - c!v�~��4�bIp�P]�H^���nkL�Y�ل��,��)tC�r�� �i�ϱm$�h��n.����O�� W�[�{OFC h�'�W��*6L�1��g^H]u���a3��g@�T�L_1@ d7���������:��XF.����fb1\��S٣�֮T�IS�Ҏ�{9 .��v��P�_$ ��Ù.T��j��R�.z���iX�^;-��kw�0HMKy��Sc-�tk��k'a.*b� ۶4�d�&�*qɟX�����"c�4 *+9�3� -c�E�Lg%����K���=�g�~Q)�u��e7@�`���c��s2��e/���5�I*�[�rH��D4;"�hntRɴc����݄u �{��� }h��� -�41�{�Q���l�P�g;�($@QQ~:�4� /��e���'t��>~���T�={���cW
��6�͆�Ij˂�{ Al ��
���s 蹔L� ������q���=*Y��K -endobj -747 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1921 0 R -/FirstChar 40 -/LastChar 90 -/Widths 1932 0 R -/BaseFont /SJDLCB+URWPalladioL-Roma-Slant_167 -/FontDescriptor 745 0 R ->> endobj -745 0 obj << -/Ascent 715 -/CapHeight 680 -/Descent -282 -/FontName /SJDLCB+URWPalladioL-Roma-Slant_167 -/ItalicAngle -9 -/StemV 84 -/XHeight 469 -/FontBBox [-166 -283 1021 943] -/Flags 4 -/CharSet (/parenleft/parenright/hyphen/period/zero/one/two/three/four/five/six/seven/eight/nine/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/Q/R/S/T/U/V/X/Y/Z) -/FontFile 746 0 R ->> endobj -1932 0 obj -[333 333 0 0 0 333 250 0 500 500 500 500 500 500 500 500 500 500 0 0 0 0 0 0 0 778 611 709 774 611 556 763 832 337 0 726 611 946 831 786 604 786 668 525 613 778 722 0 667 667 667 ] -endobj -684 0 obj << -/Length1 862 -/Length2 1251 -/Length3 532 -/Length 1861 -/Filter /FlateDecode ->> -stream -x��UkTgn�J�+ŀ�� -�2��%X4� Ʉ� L P� -A@0�P�TZ)�`��b���Y#BAn�\u��إ?w�ٙ?�>���3����Y�y��9H슈$��w�� -C>"�I`: -��L $ೝE� �vD�-u���]�2��ɗ�y -�$6 e `���$ �AHAX�� 2�P�
`� a۷��������, `������98�E( -�$�g��]��c#�a���t!l�Đܪ��/����#���� -M�v�_ML �ṡz��,XR2R��zB�U�e;��G��{�}5U��jja�_f ���탏LH��zmc9�T� 8���ʘވ>:�햭=S[b[��qԌC�f�t�[{��6�H빠���|d����5��7���o�wcz�Ů��J��n�4���P*m�����UG
9skYi�����)���[|�dө1�ѿ� -���MM/�����k4e\￣H��"e��n0u3i}d�{����C�I0y�vť��������ߨ�7�Ƽ(�B�sLw=� -��n��~|�1�U�>+�S�v���;���d�,��h�J��K���kx'FI��1���;�K � ?�3��k��j\: r}���<4p�zE�\�I3����+�ʲ��b�
��Kq� ���`�͎N��z,�pv s��j�|- Ƒ� *����k
�����z��}��(���B��ѝ�HK� ����R+�pSnb -T�Is���7��8��l�i~H;�n��U���یJO�E��� -endobj -685 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1933 0 R -/FirstChar 13 -/LastChar 110 -/Widths 1934 0 R -/BaseFont /JTOBJF+CMSY10 -/FontDescriptor 683 0 R ->> endobj -683 0 obj << -/Ascent 750 -/CapHeight 683 -/Descent -194 -/FontName /JTOBJF+CMSY10 -/ItalicAngle -14.035 -/StemV 85 -/XHeight 431 -/FontBBox [-29 -960 1116 775] -/Flags 4 -/CharSet (/circlecopyrt/bullet/braceleft/braceright/bar/backslash) -/FontFile 684 0 R ->> endobj -1934 0 obj -[1000 0 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 500 500 0 0 278 0 0 0 500 ] -endobj -1933 0 obj << -/Type /Encoding -/Differences [ 0 /.notdef 13/circlecopyrt 14/.notdef 15/bullet 16/.notdef 102/braceleft/braceright 104/.notdef 106/bar 107/.notdef 110/backslash 111/.notdef] ->> endobj -681 0 obj << -/Length1 1616 -/Length2 25291 -/Length3 532 -/Length 26183 -/Filter /FlateDecode ->> -stream -xڬ�c��]�%\]�.u�Ȳm۶]YV�m۶mtٶ�l����{�Νug~�7?r��D�ٱ#�9�֓�$�J4ƶ�@Q[GZzN������������4������D� h�hnk#l�����@# -ӿr�������A��h,o�hd01��ۧ�*6�@{+s�_=�m%���������̍,m�i<���6����_��eN'!� �.F�������j��f����(E���.�A�ux�0��hٙ�^9F -4�^�ck�h����X��34!���� -�$T���^��s:�����Ӂt��� i+3�0���~Z�ҋ��*㹮.�zbd�hn�<�c��� -��>��1os���(���_����� -�iv^����cHd�8��z��&v'�@� v -�}���JK3��՞� �l�����D�Rfd�IC�FJ$GK�D����v�+�$kPS �c��U|R��
��hX'�Q�S���5� -�L�{��h1X+�a�1�G�$��l&H�o��5��qΧ�uA����9 +�.��AK�lrD�2||�ޝW��qo �U{�@��^��q��HΧ6U�SN0}��� �z,sE���a;<Z�t$N}Dz���P�:���� .� N���Ftȥ� �hR=l>e�E/�:P���H�O�Q\Ɍm�՛��IY湪
F'}P�����iR���� ���-D1d�MZa���oo�Pe0��{�3X|��(�5rc�퓪Cch���n']��%�$��p�C$�g��/q��Q��{k��y� ��(�r�ZԔ*"IL�ь��bG. /�!C�U��Rm�fB, @���N��;��E��@�O} 64j�(�c� -M
J9����=�EM�ǧS������gg��� �g���\ %#B9%���b]c A=� -���,o2�C���=��k�/��K�՜�j�Q�ʄ���y -@�Ŀ��� H ���Z��PA�G�KX����7��Q��f��1�F-�w|� $�\�D���x�� �Ȁ�"��t?o�n�F�ٻs��V@�R�2Sx �p]���]¼��CR�
" .z����PG�� ԃ H>��%W�D|r����E`�z�Gf���t��9��϶3�7�� ir6s��ϋ���(����M�_�^�8%���h<T��<G�& � �s����}x4�"�`��?�70�029t3�a�h ~�ع�&�*�cG�\��n
<_�HB�nV ^?z^
6~ pȓ!T�( Q4��"�>��s:� lw�j�Q����-��؎���I:(i>�Q�J�|]�gZC����0'�ܜ �7����pyf� �C��t��&�?��[��蘍��>�bE��i�K)�O�����m����Ԉ�ҳ�}'� ixi� ��c�|^"��Ł>p&����G�:[>��X>�l�Z��Z9�[:�}��e��Fk;�pO ��=���ySɱ�T���)�s<ZvkHJ�=�EF�k
�[} ��He�"y0O��Jz�
4M����r|L_h��K�[������c��SF� ѐ�]��c(�=��=����E��y���$��]K�煭���>m%����OZ�8!'�7�6
�u�� �qCS) (�g-��"�m�:��WV���/� |�� Y�,F}��u/�ˤ���570]� 4�eCآY�햲 �Z -J� � -{����KqHM+~ �BO��?oi�x�+�7g7[*�F]4HxD�I��-�������-v��*h�T����g$+���?t�"+<䵠+zҴ���Kْ�fٔ͡���^fx�wݡ�ڑQ!��wxm$,
���y��C8 @�S+�dt����Wڳ���9�N-*h�E��@����uAI�؞d�&#t�� x���Q��
� -9��.�0{Z[Cdi���!�O�^)kUI�h���Ci��{��&K����o��� �Z����l�����6l�KR:�;y>�uj u�� M���3ک*c�!� cp���$+7�,̟;�o&��b��Zl�~�wԻ���Y��~���)X�[u���SX�&���-D�r�-�7�� �V5� �n��Ӟ���ޚ�����t����GQbE��D�>�*꯴�[@��5Ƥ�*>��9%���D H�y �ff3@h?L;��F����ϸ/;*s���cO�U�Bڽ/�A�.k��� sHFC��¨�J��1�Fn^������WW�)�NV��QO���m�i}�8���;��=�8;2{��^� �JE9�n(t�x~��J�k�)5���Bʨn�8Ʋ>>�mjS#�YR��ʹ������\�Gk��1_d:mN;����"a��q���� �?���#���� {�=#Ǚ������{��l�=��P�DZҋ�lļ��-:�eD8�=�*$YT�O�x����]���ڈ�I5����ש_)�N�3�6�����N�"�D1������0��7�<4�(�u�S�Q��pR/��E�`S�^����@D�� ��x��}��:����u� pp��Q�К� -��&rs�:�� ��̏���V�y.<�!f���iQ�g:0�����s_E�3dΑ��:A=���8��d�A�ʽ ���R�- ��S��'�B�\e�~�"��RrD|�}��d�qyI��1�6��(��hQC��#��� �[6ED��%����<ZL9�A���s��7\w�m���ٷ���9�wב0�p���y&NߧBm4D�SD"�4*�w�t�� &��W��WȞ�H��Kv3�;a�4 �Qoڮ�A.��`L�&<v�2�M\�;C��!U�^e_Š�*ٳ�_��ض��� -��`7z�|�y�ݙ ���kn:� �|�
� -�;[Ȳ�]P �������N��է�
�H��|.�=h��dr �E#�UP�QE^}�v����(#��2�V������
β��cH��y�>�q������i�t�L6OcG!,�j�eD �=G83���e�����^4�r�X��2N�@ȓm��D¼�<�����±6�pv\�ڞ�%�3+�W,K���ٜ�E�h ��`v�y�'5�$ع$r�[ -�(~�$"�jJZ��0V;X��9�L[����=�\�$�eKE���*V�% T��엣�c�㢎����1�6`h��7>�m�>/�ge����s����2 V�� y�pw����k���g������P�Ê����GW�%!�l s��e�� ��;�8� 1�k���>�?F�$�;wͺn����^ܔ/��R��T���z�W�U~WW�G0a�
@8�OQv�k?UJ_xJ��&��#p�;'+�Uv��#9�}�Q����%�<"w9>O�d�FT�p�;�&w�n �-g�o �����3 ��D㻭;� C+Ҹ��f@� -ư -�[x�� ��\KQ}ޣ{�nU� {�����(�ixJ -/�����x�Pt|����P�βJ���Χ��[�� %����W������L��ZLys)5�b[vb����K�B����� |�2�>���X�K�o[rH�\��q� �?
��y� ��o�d�fN/� �MB-��P �,�#�|�7a���YE8n�
H�����IH�D}���#���:>��l�)_�1}N �L���]�Np���=�� j � /G�r�ң1,�;c|�6� 4Ցa '�q*v�ڳ� '|i�����L5��I"w�{�,�|X��/�(3��-4ؗ�0dT@N&��E|�4��.�i�ќ�1��[� pJ�T
���s;�c�U\��K�/m�@��M=�]��J�% �_JX�ҹ��hu�{��y��z���AW�{iaz����m��;�2�/��/��c�Ѷ���?�N���ܠF`� ^�Z��v���R�4�I�d�'|�|�� z��%�=-�j�����-�մ;�X�pM�8��-�< -QP�-��&e��Ӫ�^" q\SV�k�D�>��p8�=�[5<�K� ���/=�^�{"~jh�^Z � -TS��ґ��?�n�� ��>bO�3���#w�V��[�6����V�5xy`��FC���Y &�����X��R>��.� ��Bpe�� ������������M���{ � (Lv�%�<�D�� ��@^m��}(}屩 A? N'�89�}���հ�ahg��NyF=�,�E$�=� -�?w�]�{�]���4j����P)ssW;R�˄�#�m�>�~F��& �[� -���x�>]����������3OSF}�ޏn+Q��PR�����5��V�Š���eh���NJ��Fe]m��e�e�RՃ�I�MQț.���~#v�X�J�˦�u�wgߴ�ٲ -^>��$���N��jQt�� �'�"�BK�-����fOU�51�D:e;�"YE�"^g�L�I�)��#S|^o��/�fe� �ပ�� 4�|�%��
.��0� &�$Lè����k�ML�O�c����[�L3x�Zs�Z����d42)w��!�5� �%a�+|�=ʝ.�ӹ3��8�- p�h����^�W��Ev�hdBdw���Py�>h�L r%@�C��#�(|HD��ݠ�W6�G~��+�m+�_#ɀ'[.�F��� �9�f�i�D -�EE�S9WM3�!�d��mAfo���m��[�d�F$��RUJt������� -0� -��Dq�ڻuJ�$m���\5%�w �x��� �݊c����� ���� -:�P���g������-R^��#�w��n�Q1����2�8 -�U���T�[F蚍x],Z���s��+�� �S&�9h�� �p4mYK�l]�.)�~g�R��_��(����te�c��x��ơ�]��2x��4��O����梨�q.sv�}���Dv��- 7�s�fYn�i̎R0֘�p��G~)!�R%e�k/���%A0�|&�8�
��o��/t!���$�g�����'x���+�=F���y@�ST~�̽�,�~�B��� ���|�2H�%�_��'5Y�h
�E8i��Š��)u�_�� ò�`X�˶b�� ����$]T�H��n0F ��h-����aݐ�R�]����P�$� ��m<��tL?Y=�GWr&`����8C�+� �!xr(<:��ܺ���=6�P.'���f zh?9>^.~-죦� ���>. �_�AC鈮��:%c�6{L�n&�[��⨆�nC�rM��( �Zv�pt�� c2{d�q�D|����䊇��|��3̋����S(�� ���V���C��δ�CM*y]?�e�q1��=��>x�d?O-G������翝���� �����_�S߃�#�����c�7���9�X'!yf���f�;�g3��0�`�emrG�^��z � �����e��I�� u�V��Wk))5ü�p�3`܊��f~�)`���� �G�F�&М���M��D@�UJ� k��� ��^�dԫ��m�~9O��Q�4�>����X>��8# c -�^�� -��M ��*T$�&N_��,j5% -��_��\��d��Y|��(�i٘��_ <{��nS��7T��l p�/�=[�][�6S[�M���3$`�MIu��R {,�W����Ζg-�qj�I��=��Y�idᜒ�tR�)�z ����e;��Ot+%�������W�7 p�>\�
�x�͟*L�b��Q�'Q�\����x�:S,Q@��Iy��I��A�)i^�����#\>����k��p�/��noMe��3���B���]ҧF�"��5~�����VS���,&Tqx`�GY��F/� ��=TЉ���&�%�S��#�]��I�7�� -����DG�_�
�������tx��&�Rue���:F��sy.!�\�s��k�E��ӕs ��x�C��<�t�Krg�/Y4� �<KSUGY����J�>�V���K��Kb1�����,M1}}A��W2������8x�3t���3�<º���U�G�� ��|D���Z�D�����>�Ⓘ���:��� �m�A����'�\��H+��t��H�����N�st�m��'1L� d��8���!��l���'`�,�O��>� S��<څ̢�D�L�y�*mpМ�U��J�:��`6�؈�+��\�2�a�U�?w���<���4'���!l��T�br֜-1_/&�Xcb���i�D8���� u��fmk7��v �Z��Ţ�|$b �Anշ�ꅸbQ&���R�X[� �Ѹ� ��E�ˬ[oٶ��[�ʫ��w>w�{3�D)�I�#�)��'�J�����F������M��4���ZuT�زn��9DDt��� b5�1g8 �!2��j <��+�y"
$��1!����l_.����k3q,7����F�F���_z=F���:G߿q�*F yDӳ �R�3��PaZ�~CR��sF], -�D(A~��i�ԖE�1+�^��iy֡d�gVs��_�� t\��[V����㟞4��EUwS����͝ƍ��T��n�
�"@�s���١h�B^#�ހ�~aG>a�L� u��p��f�� -�`H�@$�fl�=nU��5���-�2?�+{�j���j��W b�>H��9� ��h��v�=f�{f��V�:�1["r��S�o���ǒ��lO����]��u�0��XP�k��9Ѕ�:�\������{����#�}B*Q��W������tZ�x���/*�V�^o�?Z�F
�Ԑ7� :�
�cj�?�z�z1��^y��v���\�0��Ć]dq� =��@�ֺ�3Io ���"�p��ML�"��w�h=y|+�(�2#g�D �k��Uhɫ���h+V2��,��*MYc����¬�O�~��g�.�cf��MM� �!T��6�8 .��)�
�U��mS�"��5�
L4���:�O�c�5hFWG8 s˛�s-����";�\��2��ys8�תl�P�X�L|����4��̯v9�Nvsr���+xC�>c�X��'���}ֲ߱�1T��u#�2�� -+�ɿ��֊^ڮ/\�sj�O��+G4Ֆ��9 -,���U� g���;���l"�R��uEc�V�2^�BRA4M��Q�牶�#�ʀ�#�h�5� ;�b��X�D ��gX]�F�"yM��Y@�Z��xax�49��|�ތ>�����D��2�C%4�ÿ/����n�t�Ċe��2n��t
=_~ �}R�~>� �a0�n.�Υ�#M
H��TiC�Nj���s�֑�a�_ �ȣ��xF���
EG^�n �=���r&��C0�wC���`>�U�F��X��}6�[��f��f� �z����V�S�䑿��i��g oL���6Ut�Y�S
�S�,���XppjI�W��8���s��wZ�EyB�Ș�}�w9z�^ٮ(�����Щ�< K�V��>Q/��#��ط�y�!�o�~A���%�#�����Bz������?_"� ����?w0���v�_��"=%_U[��|� <"�6�Z� Uc�zA���5`�\�~��S�©��՚P���+�� -1����2�v�z����AfW�� �s��K�i&��zy����#t�Z�)���6� -k��+>x�����ބP�
E Eo-B1��L�� ���� ��֛�{���Zq"C��� �i��by��[&��d_� / -�љi-j��/�fX�����(�.V�+��
� -�JT���c���J$1�٫B��H�S��
�{�)E��@�|���,�G|8f�U��g�d��S� ��PҔ�^�����J#���v֜�2W���V�~-�3R�z���� -3�dc
��+��'��z8�d� ������[T�w@����́�gM/ٛ��F�]�,���Şlx+d��
9���~O��KC��hM��%�vk����(��MW{B %8T��da�҅`[ԥ��y�CCtt?�h�������`��1>���u��$=��gSg�W��w��H�. ެ�_�Lz�x���煫�9��Q�:��s��9v�A%�˲��ߡ��!CҶ�)YXP����1 *A�E�RS��ƚ��8L? #�OYI(�c,F�n���@ɫ�E6�Pdw9^� �v]
�%cND�y� ;��P���QFa���qF?�h�����-�כ�ˏ#��<�)%�<��i�F� -{@[s0�"�����db�����EV�Mh^�i5q�B 2�^JO
^ ��o�'���L��d�T<����fj�7D�� 1�X}2�7���c�Bb�/?��I xPp�%���S�Cօ�La2�i�I[�E8������̠�@��\Ǹ�29SQTw*�B1�Н�+U�h��ġ�/���C�y[�A�#2�oL� *��UqQ� -�|,�Z�K��-J�U��~Ss�1���3�t⒔�����m�QDf"x~��d��M�pr�B!�4��N���b�@���q
����A��յh�ۄ��dz8v�ti�E��U$ՃF#�l���2��55J��� -W���Go#�Jܤ��L�yN��]I���f�+ZM v��7{�����X��X� �`*�҂jp j��?+� -|B@�-�&��
�5�tkf�? B~�b:%Y���6uέ�����LA������X ���W����,�o���� �1��֮�M")���8H_Q@)�����j�Y�* F�&�2��B���.�%n��\ۆ_�O�A�;)��j�7�����so�쪰1� 3Yj�@�f��E#�Q�Y�zp���,��e�\n�nC��P��XC�� -۠.]�1�f��$�V�nj[�N<�?�Y��tL�N��v}���&�ync�(�:�Z����,��wJo�؟q�黻2���R⩽(�ue�����D�%����� a�uZG�9�4�Ӥuy ١]&P��f�eA�>X ��p�N���R`�l�C��Hl�$���N�Ph7�� ��Lf���a h��y8
�� q��c )�_~1iSՈC�a H
� Ӊk0z�� .@�R���� l���R
����L��t�(I�d��|�m� ��S�B ��VG�:����Dڃ?s���� �T���?�?ˆ �ה-.���d�7���.�� -q� -<��y�� {e�(�6鈔I��by���ZA �I���Æ�`��� S�^�A�Rup:��GW@-!����������s=aˋ�'v�R�l+}��_��u0 -���^)~�p����*���sY:ûy��6ŀ$�ݺ��{���i�rL#�(T�P�v��Qr���VJ� k�H0�r�IV���*$�/ -��O�!�x�Rd�h�!] ��UK+<7֜j㐫/�M;��>����}���� �ZV -b���1��y�#�6y�R��`s�UJ����H�.߰�G���M�ek����� ���C��˞�l^��\<��6�K̹��$��v��
%hf��m��s� |G'�[f��/� a��3�r��gS��~9^� ȊS�ꦘ��N�� �M>�]�p� -䀚�5�����R��R� -�̂StR��a�����m+����/�m@���fD�)�y �XDl_`p �3���"p� �ӽr��� �i3N� �_�+i� �WQ ���l���K��.X� :���0 �vפ�, a�;�<e8�z U������\j^���"��7 s.G���U,�Ǒ��U�
ꅶ,?�E j�2 -K�BP�ǍM�́֝�x)<��ӫ�?j��[�s� -#!՟��S� ��ڱ�$j',g�b�����!: �i�|�����Jpّ���ǜ*��R7�O�&��$n�P$sn��+ouu*�ۓA���
���/% ����l����k|*��
H����k|ߏm:��U���6؟o�;�h�:��t��!�N|��?�`~Y`�V�G?��a }4��Iߞ= 6�,�J��V9u֔!��jYA���dJ���Յ2���/���V0�F�쭌�.}3}���&q��?x�����sóp�]�U�|y
#�jr�24�E_�aഐ�u��C�^���&B����M}���z)�܅tMJX���:�CbX(��rj��45���{ ,3�j�W�0_��� -����?]��� �<ꯞ'��1��C ��Kt�(���'%ԟ8��M��c� �z&CA3��E�r��,�B�yK��N��%�/);��S˧�v!�]��_��d���6�C��T������*��e轜�dv*L�Ohf����oM�ܸ�_�xB5(Ce��%-n��VDƄ 珙6j��\�o���� B����[�� �_��r�Hԁ;6�������!�r��
�� -�N��q
�ʕG�`��x]SJ��_���G1�m���]�5�R)%h�+�] -we:��}���â.� U�ɛ�-���wKP��x��l��� ծHi�����6��ؼyn� -#"�91cӅ�5BZ̡U Q}�ے��i���Bp���=:��=Ī����V��̾����<őJ*=
�2",^�B;T�}�\�S��rV�-� ���c?5���9zL���1dpAP���63��[%�
MD�j&z\%dj�2�S)܂�:c�Ex�CU}S�\��z&��,G�{k� ˳�:��D"�
��?.�V5�0_�� ��H� ���ݼ+َ��#���ʰ�m;�HP^v�+�oo|�� ��7��$0�b����<nh�BmWf��y�+���U��-����w h��i����+�/�={W�� Z��|,'���#hQl��y��rT�ԉ �"~1]��?::��3�ۨw�C -�����}d�F\��]�9@ò���[�Դ]z���K������ P� -�πoD���!�]OZg*�@D�(���NV�X.�_��@��$4� "_=�1�q�Tn�h���u�R� -ǁ�
����n�C��F����(RX��r�څ���z��]3�m8Y)HR�* w;6�-$9�7�bVu |s����}�$\ �%���Dq���A���&8�߫ �µ�(�o��;Z{�rA y��>[� �ߑyO(����3hwr粂� ��;D�J#H�]��/�[>@�ƌt.<�I�S=R�Z`�3U�%���,�>!���t$9��қQ6��:�E�$�?u&�I�IU����ܡ����#�&y- -tkR������V�� -+E�0������ 3M�rN?Ze��hS� K�c#B��`��+��?�@ž�M���%qndzF��I�E8���ڥd��H��Tz]�7]37ԗ��?2��`���5�VY7� �v� �b� -2�$5n�D���I��5;����⥜�� ��ΜI���P��z � {��Ϛ �Q�h�- [/�/�%�4��^�a���v�1� �x�6L��I ���n�4�z E���3������%r��(��[!y�k��Fy����e5kW��(�(j�Y9�o��jCB�O�����9?}0�����stQ���t�y Q��*�[ ~R�[ E���x#�{�=�6OK�#s�{oq�7��[��<nÜ!�q���
%����$21ӂ���Y���;YÕj įb�E »i�s'h���� -x�,F��V�u=;�Z�n���"����v��՛����a�r�=Ia��q��Y�f �� H�����q��#��t�Dײ�)b�� -���A��gѪ���-ѩ3 � -i�w�]SwC''/� ��~�s - -��8�~|�o��3�v<*g����_ȊZ���� -jf�� I�7��t":�ʘf���|��n�8�i�ٺi=7"*�Z�T����J�[ɩL~����x�| ��j�sm #��Ym�u#�� .�l�PXU��,����ys��J�l�y�� ���gVm�|Yɺ�I�o����}x �hx R����D"���m�C/��]�#�ߒ�|r�B>����e�gظ%���FK#�� -VK�ϰ@�M�h��{�ӫk -��W�́�u�� Ƀ�ɏ�,In�������h�Z��r��w�3��n�)8Fհ=���S�� �5�*�o�`!�\:���G��b���:*��W��)������.�zx�Q+u -�o�� ���g|)�ݔ+媀B}lzr}/L���Z - �Ħ~Vyg�匡�u�J ��״fM-�8 �K����C˚, J �| �j_6R#/&]��æ|e@�(��#�' �{�̿��q� �|�L��j - -0�s ����&0/��t�՟���;��9t;��۶ nia��v�~�"�_�N���GM] �#�8-z;aaZJp� �k�� -��׳^K脅���#� �*0N� u� ^8~=��B��C���r/C��-�;0|�ǣ�g��MN��a`���w�@�#�0�}�����[�5^3H�>x�0�"��T�p� -�h�$�l$zQ���=���1d������"sx(�*1���z,��'݇v!���I1Ձ�g [�C��1Q1S��l�Iz_T���������>ХG���ȅ�oa�ݗ��Z��ɬ�DW����U� �;VtW�����p�4oU��I67�]�K�%��N�ph��� O{Vi� ���F ��˿��ȋ!��H8-� �� -:B��l�g�2�a�"��?|����
t+��+��R�~ h
,�_s -h<�ș�g� W��@W���;_y"�C � :mM`�= ã;�t��X��
~ԓ'�6�3m��Aۍ�1�����M�W��ޮjj ��2�,�b�����<)yh+o� Q�v�j�3����&� -�G��:��������2M.��D7�c��Wkx6��N+�Ls��ȶVa�k� �� ���y#�-�آxofiRTڴ �lQN�� ��ULӂM�&�2���D�u���#}J�4�p�4e�m� -�Vx�]"��=�����s��~��41����%�O:F��43�Y\ ���*lT���T�3������Ű�n�� Ao�s��rO���5�d��1
�~��Q�����)56(����<���Z�G�LQ�pyC�g���).�1 οy������O��\7�TQ|�u�C�wv#���M ��r�\���d�����f��1`��J8>��~ ������&��`Y�͘�c�?�2�e�� D/�(�+�P��L-��a � -Z����a��k6kUq�L�%hp��r۰���E�r:-�d��HP:��2;P����F{ Ư<Q,J���~ +�h[�RN]~���L��������-�٥� -��Y��}�c��C�ˤ��q���� eS�]��g��6\L� �/*X���> Д�@Ϝ�O��t�G����4�%��Y���P��id�˃8L�U/p��h[��1������E�JP(�C����t�8ꜧ��Q��j%U��ٟJX��LF-.=5�O�~� -\j�9gW��."F�m���Ǒ��A��|�Wj
p7M�"Kc20ȧ�Oh]9J�F��҇��TN�)mC\R���8�ĝЗ|- �¸����l �B@\��4Ʋ�k�_̦C���T!Խ\!��D�$�&m i�����Lݢ�?a�|���� �*$��66���R�p `N�8��s�2�����aL�%�)K�9CJN -i��t:���xx�͚6����KZ��l����bd|O᱖k˥���B��E��� -�lL�OnRZ~��&I�=w�}��l�b����g �ŏT͑���{�1Lxm�̭�?b��܀�%��]���'$5��
}~܋{�47
�CS -endobj -682 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1921 0 R -/FirstChar 2 -/LastChar 216 -/Widths 1935 0 R -/BaseFont /IOQPXG+URWPalladioL-Roma -/FontDescriptor 680 0 R ->> endobj -680 0 obj << -/Ascent 715 -/CapHeight 680 -/Descent -282 -/FontName /IOQPXG+URWPalladioL-Roma -/ItalicAngle 0 -/StemV 84 -/XHeight 469 -/FontBBox [-166 -283 1021 943] -/Flags 4 -/CharSet (/fi/fl/exclam/numbersign/dollar/percent/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/circumflex/quotedblright/emdash/Oslash) -/FontFile 681 0 R ->> endobj -1935 0 obj -[605 608 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 278 0 500 500 840 0 278 333 333 389 606 250 333 250 606 500 500 500 500 500 500 500 500 500 500 250 250 0 606 0 444 747 778 611 709 774 611 556 763 832 337 333 726 611 946 831 786 604 786 668 525 613 778 722 1000 667 667 667 333 0 333 0 0 278 500 553 444 611 479 333 556 582 291 234 556 291 883 582 546 601 560 395 424 326 603 565 834 516 556 500 0 0 0 0 0 0 0 0 0 0 0 0 0 333 0 0 0 0 0 0 0 0 0 0 0 500 0 0 1000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 833 ] -endobj -657 0 obj << -/Length1 1614 -/Length2 24766 -/Length3 532 -/Length 25647 -/Filter /FlateDecode ->> -stream -xڬzS�m]�eٶ]uʶm۶m��)۶m��)����:n�S�}Xkf� 92G�{G,RBy%c;CQ;[gZzNE5ykkc ;iA;kc� 3 )������������ '���1���##)���������3��Y� !0����N' 3[��Wk;{[� ���J&&��&��&Br��b�b�*b&�&���.��F�F&�N&�v���� 0��5���4'� ,''{#��m&�F&���� �M m,��~� ,��
l�z�lG`akd�b�� ��ݿ�;��D���~��휜�� -� ~�� ��Ogs�r;Y�� �L"��\�)�_� � ����������?� M�-��
<~r���;Z��������1�&p413p4�6qr������;�U'��V�����ǿv��+�?9X8;�X��B10��4r��mfa E�ϨHؚ�0�������?|�&��j�?3C�C�����ڃ����N���'%���ʴ�s"�H�?"�������w���C��{��;��������ɿ6�� C M��%��XX{����{��ɿq���H8�4B���G zZ�3Z8�Z���[8��X�t�_v[cGk [� 5��Hz���S6�0�����,��2�5����q:qU
���F�W������ �?���;��\��"(h�N�E���H@�D��s�~�p0���_2� ���2Ύ�Z?e������k���`Dl����%g[���O�?n#G� U�u�����������j}�Έ+�2�w�s z�Ȕ��@ �H�}i�rQ��]�_z� G��Gmm� �W��� ��#I��>4�_��&��8>����d�lTǁt���j�^7Kһ ������S -��% `�3�L�7)��] �QH���|���P�� -�\�%��}�54>:2�{��M�I�� -K�ͧ�R!R�Dzݞe�}��"��\ʤ!g?5�� �k�T $f}Q�}}�7��aI�zQ��`�{1��ʛ�9s���r5��<#�=�����36��4�+�Ǿa��p:��"�|:[5P6��<M`I���L Ց �� ���Da_g��Ü�]閧 9 �8s�Ӛ���e�b�:mi�*N��z|+hytHO�V77�a� -�N�&��3���E@\�Yzm�~D9�ru]
�R���0��u+�Y}��+�\���胘`Ix�|P>��D��;MMM�:NNI�0����+��zz���\ -�����qt� � ��)�x�0EB�)�d4��,Y=2� ����=�K86i������S(� �Q�x;��wMҐ�\]�Ň�������'���H�|�d@I���E
���xER��[�������6�t����U�����c���� ����t/�E�N r�5����}[��v�bO��x�3�^�X�~ݱ�tX���bۻZe�B}D� ���{dy��� ��b�ZR4�R`s��1w p�a��V� }�Ԋ'X7z�(S�ţ��AK����r&�椫�\��F��Lu�c�X�Y�nT<)�l%W�z� -̝0Lo�2��4cױ�� ����%����r��rOxR�@o�[#O��Y���UՈʼn%?�H�@y���L�b�ۏq��c}DNC��o� s�r?������Jx>�?��]�;�Hbӑ�tT�)�m"�|�\���C��e`�'(�l-z��.�f 섩�5 /�/����S��E�W;mdu���خ=)�6li����� E�X��n��]6 -Ȇ�y�ԙ6��2R�v��Qvv��T�*�(?�)m�5 �OV�#8��ڕ4��P�"!�a��]\yc���s�AZPU6gb�+:�*(��'V�P܅��)+#��. r����[y�]��զ<A��|�� �&ۦ�,`�� -\w�w�0��R��J�H�oQS��(b�,���9�/#��o
�|�q3d�p+��>2�~��z��[=1#��W*�a��4� -|\4Y���\V�A�iٜ�V -'��ݥ�r���]E ���(��+c[��j���Q��_��g��44U���;2��LC -JO ��4Wќ�:��\�љ��! �y �\3��=�/Τ�� ��/8���c+�
GI1(yB�5�� -�����q�@��|�R���ҨZq�1#.�[�^�%�(: ^�D��Pؕ/� -�J�N$���d��ak�n�mk5�{n -�.��n�'' 2��3�2?g��<�eZ���a��6�'z ��O�t�:��Bz�FѣAj�6��}�q�����f���aN�R�m�ɀe�aS��=��PD���ũ?Κ-�v��*.���_��p�EJ-Mn���#��?J�j��U�T�* - d���� M1�7��*���+D��Z���j�?� -�;��������ٗ8�!�K�z.�� �X��H�K�\�M(����BO8��XE_�s�YZ��p6aaL�5f(wS;�K�O��z�x -է��Y�۞�����燸-f:�s�q�957�>\ǐ�� �C�}8$;DP�e��V�'����<���ܾNO(߈]����r_[�*ʇ����<�x���l -Ē���zJmp�0Zgô� u���� !F���
�b��.� ��9w�hQ�+� G�Tjx�~wt�.^j��g&r�̹V�#K������ q�H����~�lsL�fH9��Njn�W4`oѣ:�ؚ^��K������L9�l�0ۉB���#k|yˢ\�=*X��<d0����Jkáܫm�u����H`�6彋E�����Bū�/h��#�^ ����i(]��Z]�& ��C��������{�j+��ڑZQ[){�iZ_Â��=F�(s!:T
K�;X��Z�#�D�,v�4��QD~����� *�B�b��ʴ�:��pu ���9rK28]���]��]� �i��r�f�>�
�Ri� �H~&���ϲSz���h��0�/�H��-Z�m���
<��Q��0z�ב�8r�tI�'�`�@*�Ʈ@f�&�IѪ�v%Q�:��:.s&��F���Q�ʸ�W �_!ҏ0sI"A4���D����C!n����;+ �ֺ{����d� ��� z/1�76����0l����Cヤb�s0�N��� ?� X!�����`���$�:��]��߫�kw#+���j$P����6>����^70��K���$�]�ﭐ��o�@g \��G -9��bW<-��9�EjR��������R��G^�sJ�� b��A�x��eح�æ�> ��j��,W�s -���I2�� |�{1�[y#���9�_�S�柒�fyf+(� -K#��/�2�;���Z �$��^ M��0�)�N(��<�� 6l�;9�у �)���F}���=���V
ۘ�/�G�I�YW��=������;�v�bs�+�Y��/�w��NV�&���0� 7��$6/ ��a������� z| �>��� -�M��&/�}�� I �%΄%0W�ɷ���{�I\5d�1��A)�7��TD��c��M~��0l4��������)�h7�d~a�ru�[l�F��\)�|<k�z?D \ ]�7�2�� �d��T�� WdDmI!�πS�'#Q~ On )vE6�n��i�� Ӏ(II�?���W�bڼ%��bAP�`6D -�f���C%��bl��$�������D�d� -��p���0TO@,{i`�ζ�Ƣ����Kܬ ��yO��<�Q� -�� ����p� ��"M �p�)�!(��[������s���W�ʨBP�h �'��� ���Oԫ�����{� e�d���Kx5Q �Ι6!▭a˦��}2��݈�+0�|3k��r�e�[A��l\� �}��\&�[���qt� ��8�y :� l�U�"�K Я��Cpe�b�^���o��s'����c�K�]�w+VuN|��� s.�����n��4�&���{��� -u W�� �Z��9�� ��r��i~ې0�<�G<�À�3�?�(�P��~�G�qF�ݝ��ƽH�J+3"ʫF�@�'���I�����Z��7Y - g�зt@�� +[�3�/*;��Q�.�n�D� ]�ꠓR��?*�]�_��C�k~�3A� -$1�f� -���%|�Uůx��;%� ��}5]�D��J��)h#?y���-^�*#G� ����� ��i;I��2珎�/~�)�u 죯�3noዯ78]P�]n�|�g -6ψ6o�PB�P'̧AF��df?P0dGC״rW��B��6&�S�r�� ��SS������T9���K�)�\�)�b�Ն3��$Z�#&����jsm�Cf��S4X�HF Z��zϘ(Pt -|��c2�#�$'j��|c�x�3� lޓ�3Bm��9��?� -L�J�5(� -S|�H�G��=>�ԑʇ�w1�V��瀏R=�K�uW�e� 4��Z^ �����#��D���mwp#�T-��{M��Sq���Z!�ȥ�;�c��g�S�q�q/V1aŶ�rR����dfN51���= t���p����fq��
�o� -#�%���+0{���Vx����I���@
�A��]d ���ܚf�
3.��L��^��wkFOp��m����KL�.�f0��2x�$�G��~ͅ���gp��z�l�T��'Ah7�#m�(��'Z %��a&�P[&W)��y�aH�r�xg+E������^�(� �� `��r�j��7Y�s ���PDS"��"pq�Q�M괚s�ډ��R'�
)�0���zl���`^���� ���q2��qٕ���m���r��Eh -��} �D'N+�n�~���0��o��WO�s:��waz;A�cJ©��A�����<�+Uȯ�CvL���P�۲s��*
ze-�� �;2 �� �#_ ���s���v�ċ��e���Cؓ��>��,��pe��h�m2��ݰM�[���ݒ��� �"_o�U��h�
�B57��^��T'kiWCE�r�� -��W� �\N[�����͍&n��9vd������!��5iAŝ@�/*w.��(:������6�u1�3�᪾��W��48���K�^�3T�te:��`�"����p�,�iAX/�Hۘ?��)RR�Y?�xj�/�)�P8C>�r�B�!��g�@�k�ړ�N��?D�F�U<�5�I.:��s��j-p��䊰"���c�#�:B
�+?/P��w�g&�o��!�9�a p�|���K5l����9�CF ��� /��;�G@!�xc|�� D�.n^H$���Â�q]��+�{�i�� -�*��րH-e�pg,e�|�aJt��/d���*Λ� 6�K2;��x'.Q�[��̐��:��T� $$ ���ͥ��4UA -~:�0Nǎ��y�r��$85�A��`!�W�F'*nN�bt*�*�����;�E����a���T~�֓S4��3<5��\ �J���&斓O=P�[�P$�ӵ�� �i��_`�.��{h/"�"v��C�)-F�E��A<�� KF���9 �'��a�4*$'=��O �equGf0 [�Ҵ����7� ˩4����x�% %�:��/�.@��#)N���a�St�k ����j�5b;��J;�ұC�7�䰃�K�wA�5S��%8.nN`��9_������;S���\g|��H�ae# �����u��;�����X���o+7�m4����0��#4��8�h���R�9�����{�S�㣛����z��r�����Μ�V��i�!z_)����VS[i�s�q��%��e?�w��b�-�97� �|ʚ a���[ -4%�5k��02���w�b�8 y<���p��*��ȁ�p��,�&��r��G�T�禣�忔X{���H;_�Z���/i)�1���.5n仯��9
=)� � �W%^}@|Ѧ{P`��ea�,pS L�ܔ�ڮ�7C��b�t�z� 3$rX� 5آP����jW~\\{ 7N�ySE�9
]���"�i5����X�xB��\��y�\Ἴ!�k(M��L]*/���䧝FJ{Y<�&e��l�����̂+���<�@9vO�����[RY�Z�UM �Z�p4�DagPcZ�%V_ ��\;=M�W۾�G -�����<��h�E�;Uk�� -J�&�������9����Zue)�G $ L�#[|��Ϭ4���bO -��Aڤx8mw����ԏ���x�� #�a��U!���T�N.���-əQ��iy@�Wc�8q�/�砋��qYw'`:�N��= -*�6�!bƥ$�)�F�3�x=H3/xR �WGz�t�Dc��'�HD��XM-� ��p����̒!#���*�� ��/<Ԣ8>�І���r�e���tѦ� �L�p m�
U?�+ -�����>��r�KK���r�Afjxy� ^W_�^��U��NGRe�\�v/�V���R�h��y3���c�b'��l��ĝ�k,����.�kx�K��(�9�^�� -�d���#�}������G(��hQ/Um+�|��^�OI$Ѹ�0��V�� )�J3�LJ_���L����n��o�v�J���qm����%����c�~�zVȐ�s�q� g%�Q�4��`�E��/T��?�p�y� �[u�лJ��dh�H�� �lM� -� s?�r&Fd��6�&>N�.� ��1:�rP1�ؗ�k �f)�dQm���I B��5M��1T�`m[;�z!�_��=�p)�5^ I��@���
���A�'tG<����a� � �m-mn(� -��|�"]�n��GhS�C���.%^=�� ��| �%��%�/�5�n�tnt I-����.-ڊ -�4����t�-ws(��� �.}!˕��^��805D|~�f�W�������9�q�y[eN��~TҀJ�gD���%H��N�W�V� ܩ&QXS�;^� #~o �S���Q��Om��k�ʖ�{.� -��%.@����ZP�}������<,2x��+�P �:І��XH�9�2�!I����m� 놀)�Lv���ʊ� �����I����J�-um~5S��?� ����xXkDZ�S� ꊿʥ�'��A�E�z�Lt�=��������ʛ2{@?�5�����N �&���Ȩ�3HK�G��6hXle����kM��Mx�qh��V����ki1 I�ˋ밪���9UFmwY�Y��W>�YM� �7u -�:�hפ��ߛ֙C9߇�o��/�z>��8�"��p�"8f@xk���f����s��˂�(�'� �ڃ�pLjt:1[ɘ���H���K�Q��AH)�3W.������U7��"� ��_mz$(�$��^���Ɵ�E��vP���7/' �l\du#vت� ���ēQP�qH{�$5�l���y�d?�2$y�9ML�G%[!/J��2an����Oz~؊ 9@5ꎥ;V7�F�� Fs��d���×�?si�5$ �$�D_j(�܇�O��BO��q���N�#.�/8Z��kV�肹�p��j�Gp���z���I9�HӮ"!�J��OY���5�=.J���2y�PK0�͏��PI���I�$G�^�ƺ��c�%�E���cij�9��9ђl{��$ 0�w��&jjia>�4�\� KD�{pʌ#?�A �0�9 ��-D>"�:c?���~�^e55�l -:kb��LQ�c���S��ۀ �l��{Y14���#Y��IUH�6��'&:,q[������g+�A�d�/L�n���R� -ˇ����MCE��w���P���]�-�5L-�Բ%\�d*]�K�qtmpM�{�6Dm1�[�2m���w*Q�d�Q��\�Bq���2<��� `ve���*9G i�� - .��']��^Od��D���,?#�WֳbR�v��S���Χ��$��`m�
2D=�n�����D㔹=�k�IP��v�J<� ����t���Z�G
U^�W0�������̚�=J�SQ�T#��O��>]�A���ʇȆ�Z!������>�ԋf�.��¾�;��h gXU���yX�%�6,�ā�T����*1 �����"��3Y�m"��s��̷
R�;���U��8f���0A�� ��oxZ����+�NVk���#$ ˣ6\ 4�t� V��D^2'lRw� f�2�[��߇`�k5� s�k�˷g��s� ���ݍ͟�B?1 |k6*yf�3��P�|B�u+��N�8X���䑡��EUQ�F �������i�2��`N�}�T�?A��i�� �[�5���-�CL�� UY$����h��WN��JB-���a��vv�T��d��[�>Ɩ�|s�r�Cd `���^�����D�*�%������������Ú �fX �6�v��]���V�M"B����=&w>8K���*�+� � o�K���4�x(
=�$h%H -�V�R� -�82�&)�"�E;ܴ�ŤUYv���VZ9M*��jQSJ�)�� �@LH��5��� -�~�o�dW )�(ր����P��Z���P ���OU��m�ߴ� �ra ��w@��&7�V��y�\��i�H47�+�L -�Qu-W���4~Q.���)��LHQ-�(����>��|k�܄X`����] #.�wx+�;.�ml3 �Ѫ۰�s -:�(B��'=����e�9,�`�ه{�%���
� 0<�}��Y��}� -��B�p:��x�M?�}���4������G�ߐaWG��� -��1,u6AS���x\|cz�R��o�bЏ.P����=��+<�U
Z��&z���Reu� -[5�����_ka�������* q�=�R4�/@�j�H�0M�$��z� -���p8�C������q0�SGD��S�T2J��i� �ɽ���A� i��D�9)�>o����Ђ,�DO� ����&���ߟ������O �[ �:&�QC���y��1�ܨ^N�`ϯȌ)��!���Ӥ~�,�7�$�/�ۺ�z�5"�4�b����M]��o~ E�5p���J�s��{�mo����%֡A;�<��������� ��@=��@ZR��Gv �}����O������A�|:������ @pm�����R �w<�a�ݽ7#�SBG�8-(v�> � �q<]������Pd��� @J����W�2|� �ʄs��ʑi%
��3��� 6� NP&0�>�>�I2�O����j��ۯ)�����J8���*fzU;.�Z�$��d -�D����a ���*�����ٚ*�(���q�����°[�.xԌ Hh�� {������y�澡:�u��g�����4k ���=��El�D+�9�{���=�n���E:x���n��� �� -�4NȊ�v��.Ճ_�n$`���)<�E������@�q6I����O���R��g-�d���A��>l� 3)V��,��8�nd2����@צ�*�]��hs� ž�n�( ����՟W����#���sD�&��ؤ�m<[� Xp.7��(5%���>B8��'� � ��-�M%f+�o0�8}�{+��/�� ��pp� ������W��CF8f�����6�ӑ�BV�� P,-{D�BЪ�ߓ��,���N`:� �Ԍ/�t>�����ݫ9�>��]`5T�ђz�vyWX2F���bfO�f�>}al��\�Mꗴ�����VP�sp��o������x��N
�O_��N=�����ND����zZ�@( 5Ic{�v�c۶m۶m۶�ƶm�љw8w��z��~e�Y��*D+_��#io��T�{?� �|X�!�S)�b��[�_� -� %,3�1��J��wG�����oe��yDh�N��Ϲݎ�R��~��G�B�\���;؆r�R-�EGT�����Ѷ���z��� /z�މ �3 ��f!K�t[��qQ�(����g���E�u dV;~_�dr��I;17 a ���q��)b����s(�0 -IfLt�& -���]����������WӞ�N���� ��� ��I�ї��:k
b-F����y��L �c�Y># S ���������x5 -�sU ?��{x[�q=4����T� �bEK'�m�v��9���ȁ$�CXc��\��>�G�m @>��lX1
���dwO �A��E�֒�Sc�I/cK+�5>�V�+"zg -*��M액p_�V�+}��ލT�Y!��Ĺ(K�i�"��(*wOz�F����X`�������� -�*r[�n��+�m��� ���un2q�i"P6h�.��T��Od�_���n�~ �q#$i5�2�皏u�O�L[˱�E�IkQ���:�_�w���!ɷ�7ˬ����l�λ�> ^�H��
�fu��g���m4N}� -���ܝ�9Uwg�Bk���ڞ�Gr��u)�� -���A��� �_�5Xu�wo%~�KG`4�B9MX����*��=c�w����r������� ���Xmgs�{n�>�.��S����������Q���6�4Ȥ�z�9ڗ���K\
�kC쫛!�;����y�� - -"���܌�%�(�PL������}����d�A�4HVs_�c�҄��őn܊�V�z*-�To���� 7*�� #{y��l��:n\Ɲ>��os.���s�E���ɡ�<�m� E��@��x��kr���}G=1 �Nl.&��Mf�2�4îۯ0�� 6��
�G���B�R�Bt���%����~�$`X�(���ph��[, ���w�.���e��$H������<�;]v��r �����puU�J�А�A��<��Ӥ��V1r�¥�e8��7�)h(��E�G�Ж��W�M� _Y������fc؊����C�0��۲u�����p3�~��[y�5!�y�� �-�9�Ɋ%�Q-} /D�C��jn�%>HLg�h:���Bld���u�݈���I�#o����i9��t��2¯̉��֮�2V�^�.�� -� �8�� -�o��ĉ�8�{� q�ED�G�������b��߰�\&܁�����2qs�ư�y��>b��OX(o�YӋ�"4نw�7 �~L�'�]�v�}O�8 �M�)���X��E�,3bQ*�WA 0�N5<_8%)FľJV�r�[�=W�:�&,o/�Q��+"%N���m��*Vt�_-�Ȱ��sP�kX�'�ʑF �bM�zyix����GG1S�(&�F��8'� -m�R!/��mYz'����h'�1I �Ѩ���I�;b �@\�q��[��*���F����ػ�Rq�� �0��nD%���ɀ� ]:bĨv���U��q�{Ĥ -��#����(���w��R����; h@���8~�Lp����R�t�3�5/0ҡS0�n�&9=Ӡ�-�z;�Ir�H�3��pdl�l[�}B�p���N2�� w
Д���Uh�pO�� -F֗bow��'<{��e/>w��O �yf4,%[n���<����D��7XQ`���;�kg��t{D�VC|n$�_ -5�)�;���kPAs~6wD�l�Y��'�&>)�:��Ί�tAʐ�x�I�ũђ"V�·���}��l�ܜ2�?�R٪���
�2���L���*���ϕ�z�W��PO!Z��:���3�v{�3: 9�;8
~��Gc� �X�*ؾƔr�F��<ͤ��WSs�������RX�lN|PL�4���l8� ����[��4���ɽ.z�cF�{���T��������[�(�)� ��f��F����Z"g��� >��5�l��,��y��ē1 �e]# �{G�!�K���O�������!�^{��ɑF'U0BBo�L�7�ob��A�q�5��&���Yd5K��e �O%:�
6 �zD�-߹̫\�M0 -�'l��_�2�.v�K�Ԁf�����\�������.��iA�U� ��ss*��� -�
�.��Jy'k<��T�u�r�
p��2���y����0^��� �H v,�w�!���1��V�r#�p_JI��4���6�˘�{2{�
<[�)��j�x�o~y�S�m��h�NWp�Q2����>��gCX���VU�����bM����6 kh*�4�� ��T�#��<��wH2�A�S�WR�v"����1�2����;��uE@L
�������^4�Ռl����̺-����\Z����t� %p�����j�K�r���Ƣ[~��� -e���i�G�8���C�I���� ]u���j� -Jt�B�k(WI�)͒�Ǡ��kF�ȐJi�� FS���⅗�l;���(�cgH�5��Uj�����NX*1a"��J[�?x�5M�@�7��ɳ't"Mrmc
��n��r���<.�o���ｦk���M�����p 40�Y�����^s�뵬d>R�~Y�Z_�둹v0�Gm��N�3��7G$*��th��������g)�, &�M����3�y�&o�ٛ�u��4��,�Z�Ok����D%��D�z�v?�/��;� �' ?���c����� -�(�\�a� -E�7jŨi�o� �:����c�SJo*>�u+�#@ī�b\[k!s&D����d`�<H��T�E�d�:�C�kE -j !H���3�E. - �!{m�/��Z�+p%��u�}Fc�� ���/�Ƶ1>��M)�� O�%S��8���� -d���r4�$#��/��w $�+3�]̄5�T87�]���إ��ZP���
X�� [��8�Xp��Ci��`KpmM�*�y��&��*�\�l����� xr#L?)���kv���|V{��a�B$����j�`�h�������QUd�j5�$k>7�|�������ھ�,��S�b�=� 6��I۞�2���?��)C�|��0)ukt ���o#�Ɛ$�s� �Wg�~�������ԥ;��a�l�Q���h˛���` -Z��ќ8�e��F��� ,�\5�I.��aM
4��m�Ջ�qWM����egc���
�\[�T -�����U��x�LD�s�Ӛ -I��~p��E�f}^!� �tQ�ْ��E��>� n|'�V �5D9_��7���FJv��2ȭی��;ۣK�>Z&�������ɉ,-�,Yت�=�����X8?��#�m �������u� <5��w�6��́ԙ��#0�q��Q��������=��;1�&< -| f �g�,=��vp���xM� �_ b�5 -����� ����4��#�?��7L�Xʳ���k̀Z�vSLR��
4 �?&4 =cwә7m��8 �L��~�� m�0R��]N9�O:;e0v�(�6�����æ�=��և7��?�)�' ��38ƬpYB� ��|ƾC�D?�D��-Q�(6�>��)�*#���DUd����vU -[`�Q� �Y�O��J��2��a�.�yM�B.�T�.� -��bWW��^��M?��ߪ��;�<��h��K�ŵ������V1�c�O� "��x4t�:l��t@i�uū����0����]RϺM'�>��?#�ABl�=f�����i�z�Ԩ�!�+�2Ԓ�z����b�B - y��P'c� �^M#R����4
{LJ B �� ���n�H�Mc�9|�*S 5�V��K�����v�J������R��PKw��;�ͳ��H-�O������*W��������p�+��a7AԺ�;��R�~4��|S��m��W�~ ��� �} D L�WF5J����|�i�>#\2�� -��30D��`�����4}&1xҤ֥ �dP�$ȾCO�ْj�v��?`C&W'a�CJ�I's�F��M˼k�����+X � cA� ��ᥣ�r!<s %!�b��N�* d3��6���0�+3��NY�8��j��P �7ިV�� c=$0��9���
���WCҸ1�
Բ9L���~� ��W�y�I n����'�I3
�]`+�7v��!������k�Z��(&4�j���`�+�p�x���S�W �$�M7�[IZ�����~�V��:�\髅���y_��� -.�� �6�����S�c��Q&�5 fd -�n��,6"�@K;\������ -endobj -658 0 obj << -/Type /Font -/Subtype /Type1 -/Encoding 1921 0 R -/FirstChar 2 -/LastChar 151 -/Widths 1936 0 R -/BaseFont /HVUUYY+URWPalladioL-Bold -/FontDescriptor 656 0 R ->> endobj -656 0 obj << -/Ascent 708 -/CapHeight 672 -/Descent -266 -/FontName /HVUUYY+URWPalladioL-Bold -/ItalicAngle 0 -/StemV 123 -/XHeight 471 -/FontBBox [-152 -301 1000 935] -/Flags 4 -/CharSet (/fi/fl/exclam/dollar/percent/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/question/at/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/quotedblright/emdash) -/FontFile 657 0 R ->> endobj -1936 0 obj -[611 611 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 278 0 0 500 889 0 278 333 333 444 606 250 333 250 296 500 500 500 500 500 500 500 500 500 500 250 250 0 0 0 444 747 778 667 722 833 611 556 833 833 389 0 778 611 1000 833 833 611 833 722 611 667 778 778 1000 667 667 667 333 0 333 0 0 0 500 611 444 611 500 389 556 611 333 333 611 333 889 611 556 611 611 389 444 333 611 556 833 500 556 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 500 0 0 1000 ] -endobj -659 0 obj << -/Type /Pages -/Count 6 -/Parent 1937 0 R -/Kids [650 0 R 677 0 R 687 0 R 742 0 R 806 0 R 867 0 R] ->> endobj -886 0 obj << -/Type /Pages -/Count 6 -/Parent 1937 0 R -/Kids [871 0 R 888 0 R 902 0 R 913 0 R 920 0 R 932 0 R] ->> endobj -944 0 obj << -/Type /Pages -/Count 6 -/Parent 1937 0 R -/Kids [937 0 R 946 0 R 957 0 R 965 0 R 972 0 R 978 0 R] ->> endobj -1001 0 obj << -/Type /Pages -/Count 6 -/Parent 1937 0 R -/Kids [986 0 R 1008 0 R 1018 0 R 1023 0 R 1027 0 R 1034 0 R] ->> endobj -1050 0 obj << -/Type /Pages -/Count 6 -/Parent 1937 0 R -/Kids [1043 0 R 1053 0 R 1060 0 R 1065 0 R 1074 0 R 1081 0 R] ->> endobj -1093 0 obj << -/Type /Pages -/Count 6 -/Parent 1937 0 R -/Kids [1085 0 R 1096 0 R 1102 0 R 1110 0 R 1117 0 R 1126 0 R] ->> endobj -1145 0 obj << -/Type /Pages -/Count 6 -/Parent 1938 0 R -/Kids [1139 0 R 1147 0 R 1152 0 R 1158 0 R 1164 0 R 1172 0 R] ->> endobj -1182 0 obj << -/Type /Pages -/Count 6 -/Parent 1938 0 R -/Kids [1179 0 R 1184 0 R 1189 0 R 1195 0 R 1199 0 R 1206 0 R] ->> endobj -1219 0 obj << -/Type /Pages -/Count 6 -/Parent 1938 0 R -/Kids [1216 0 R 1221 0 R 1226 0 R 1237 0 R 1243 0 R 1248 0 R] ->> endobj -1256 0 obj << -/Type /Pages -/Count 6 -/Parent 1938 0 R -/Kids [1252 0 R 1258 0 R 1266 0 R 1272 0 R 1279 0 R 1287 0 R] ->> endobj -1303 0 obj << -/Type /Pages -/Count 6 -/Parent 1938 0 R -/Kids [1294 0 R 1306 0 R 1310 0 R 1316 0 R 1321 0 R 1325 0 R] ->> endobj -1338 0 obj << -/Type /Pages -/Count 6 -/Parent 1938 0 R -/Kids [1334 0 R 1340 0 R 1344 0 R 1348 0 R 1356 0 R 1361 0 R] ->> endobj -1392 0 obj << -/Type /Pages -/Count 6 -/Parent 1939 0 R -/Kids [1378 0 R 1394 0 R 1409 0 R 1419 0 R 1425 0 R 1432 0 R] ->> endobj -1453 0 obj << -/Type /Pages -/Count 6 -/Parent 1939 0 R -/Kids [1443 0 R 1455 0 R 1463 0 R 1469 0 R 1473 0 R 1479 0 R] ->> endobj -1493 0 obj << -/Type /Pages -/Count 6 -/Parent 1939 0 R -/Kids [1490 0 R 1495 0 R 1499 0 R 1510 0 R 1514 0 R 1521 0 R] ->> endobj -1589 0 obj << -/Type /Pages -/Count 6 -/Parent 1939 0 R -/Kids [1531 0 R 1591 0 R 1647 0 R 1701 0 R 1735 0 R 1744 0 R] ->> endobj -1754 0 obj << -/Type /Pages -/Count 6 -/Parent 1939 0 R -/Kids [1750 0 R 1756 0 R 1760 0 R 1765 0 R 1777 0 R 1781 0 R] ->> endobj -1797 0 obj << -/Type /Pages -/Count 6 -/Parent 1939 0 R -/Kids [1793 0 R 1799 0 R 1810 0 R 1815 0 R 1820 0 R 1831 0 R] ->> endobj -1846 0 obj << -/Type /Pages -/Count 6 -/Parent 1940 0 R -/Kids [1843 0 R 1848 0 R 1859 0 R 1864 0 R 1871 0 R 1882 0 R] ->> endobj -1897 0 obj << -/Type /Pages -/Count 4 -/Parent 1940 0 R -/Kids [1893 0 R 1899 0 R 1909 0 R 1915 0 R] ->> endobj -1937 0 obj << -/Type /Pages -/Count 36 -/Parent 1941 0 R -/Kids [659 0 R 886 0 R 944 0 R 1001 0 R 1050 0 R 1093 0 R] ->> endobj -1938 0 obj << -/Type /Pages -/Count 36 -/Parent 1941 0 R -/Kids [1145 0 R 1182 0 R 1219 0 R 1256 0 R 1303 0 R 1338 0 R] ->> endobj -1939 0 obj << -/Type /Pages -/Count 36 -/Parent 1941 0 R -/Kids [1392 0 R 1453 0 R 1493 0 R 1589 0 R 1754 0 R 1797 0 R] ->> endobj -1940 0 obj << -/Type /Pages -/Count 10 -/Parent 1941 0 R -/Kids [1846 0 R 1897 0 R] ->> endobj -1941 0 obj << -/Type /Pages -/Count 118 -/Kids [1937 0 R 1938 0 R 1939 0 R 1940 0 R] ->> endobj -1942 0 obj << -/Type /Outlines -/First 7 0 R -/Last 607 0 R -/Count 10 ->> endobj -647 0 obj << -/Title 648 0 R -/A 645 0 R -/Parent 607 0 R -/Prev 643 0 R ->> endobj -643 0 obj << -/Title 644 0 R -/A 641 0 R -/Parent 607 0 R -/Prev 639 0 R -/Next 647 0 R ->> endobj -639 0 obj << -/Title 640 0 R -/A 637 0 R -/Parent 607 0 R -/Prev 635 0 R -/Next 643 0 R ->> endobj -635 0 obj << -/Title 636 0 R -/A 633 0 R -/Parent 607 0 R -/Prev 631 0 R -/Next 639 0 R ->> endobj -631 0 obj << -/Title 632 0 R -/A 629 0 R -/Parent 607 0 R -/Prev 627 0 R -/Next 635 0 R ->> endobj -627 0 obj << -/Title 628 0 R -/A 625 0 R -/Parent 607 0 R -/Prev 623 0 R -/Next 631 0 R ->> endobj -623 0 obj << -/Title 624 0 R -/A 621 0 R -/Parent 607 0 R -/Prev 619 0 R -/Next 627 0 R ->> endobj -619 0 obj << -/Title 620 0 R -/A 617 0 R -/Parent 607 0 R -/Prev 615 0 R -/Next 623 0 R ->> endobj -615 0 obj << -/Title 616 0 R -/A 613 0 R -/Parent 607 0 R -/Prev 611 0 R -/Next 619 0 R ->> endobj -611 0 obj << -/Title 612 0 R -/A 609 0 R -/Parent 607 0 R -/Next 615 0 R ->> endobj -607 0 obj << -/Title 608 0 R -/A 605 0 R -/Parent 1942 0 R -/Prev 571 0 R -/First 611 0 R -/Last 647 0 R -/Count -10 ->> endobj -603 0 obj << -/Title 604 0 R -/A 601 0 R -/Parent 591 0 R -/Prev 599 0 R ->> endobj -599 0 obj << -/Title 600 0 R -/A 597 0 R -/Parent 591 0 R -/Prev 595 0 R -/Next 603 0 R ->> endobj -595 0 obj << -/Title 596 0 R -/A 593 0 R -/Parent 591 0 R -/Next 599 0 R ->> endobj -591 0 obj << -/Title 592 0 R -/A 589 0 R -/Parent 571 0 R -/Prev 583 0 R -/First 595 0 R -/Last 603 0 R -/Count -3 ->> endobj -587 0 obj << -/Title 588 0 R -/A 585 0 R -/Parent 583 0 R ->> endobj -583 0 obj << -/Title 584 0 R -/A 581 0 R -/Parent 571 0 R -/Prev 575 0 R -/Next 591 0 R -/First 587 0 R -/Last 587 0 R -/Count -1 ->> endobj -579 0 obj << -/Title 580 0 R -/A 577 0 R -/Parent 575 0 R ->> endobj -575 0 obj << -/Title 576 0 R -/A 573 0 R -/Parent 571 0 R -/Next 583 0 R -/First 579 0 R -/Last 579 0 R -/Count -1 ->> endobj -571 0 obj << -/Title 572 0 R -/A 569 0 R -/Parent 1942 0 R -/Prev 551 0 R -/Next 607 0 R -/First 575 0 R -/Last 591 0 R -/Count -3 ->> endobj -567 0 obj << -/Title 568 0 R -/A 565 0 R -/Parent 551 0 R -/Prev 563 0 R ->> endobj -563 0 obj << -/Title 564 0 R -/A 561 0 R -/Parent 551 0 R -/Prev 555 0 R -/Next 567 0 R ->> endobj -559 0 obj << -/Title 560 0 R -/A 557 0 R -/Parent 555 0 R ->> endobj -555 0 obj << -/Title 556 0 R -/A 553 0 R -/Parent 551 0 R -/Next 563 0 R -/First 559 0 R -/Last 559 0 R -/Count -1 ->> endobj -551 0 obj << -/Title 552 0 R -/A 549 0 R -/Parent 1942 0 R -/Prev 527 0 R -/Next 571 0 R -/First 555 0 R -/Last 567 0 R -/Count -3 ->> endobj -547 0 obj << -/Title 548 0 R -/A 545 0 R -/Parent 527 0 R -/Prev 535 0 R ->> endobj -543 0 obj << -/Title 544 0 R -/A 541 0 R -/Parent 535 0 R -/Prev 539 0 R ->> endobj -539 0 obj << -/Title 540 0 R -/A 537 0 R -/Parent 535 0 R -/Next 543 0 R ->> endobj -535 0 obj << -/Title 536 0 R -/A 533 0 R -/Parent 527 0 R -/Prev 531 0 R -/Next 547 0 R -/First 539 0 R -/Last 543 0 R -/Count -2 ->> endobj -531 0 obj << -/Title 532 0 R -/A 529 0 R -/Parent 527 0 R -/Next 535 0 R ->> endobj -527 0 obj << -/Title 528 0 R -/A 525 0 R -/Parent 1942 0 R -/Prev 243 0 R -/Next 551 0 R -/First 531 0 R -/Last 547 0 R -/Count -3 ->> endobj -523 0 obj << -/Title 524 0 R -/A 521 0 R -/Parent 475 0 R -/Prev 519 0 R ->> endobj -519 0 obj << -/Title 520 0 R -/A 517 0 R -/Parent 475 0 R -/Prev 503 0 R -/Next 523 0 R ->> endobj -515 0 obj << -/Title 516 0 R -/A 513 0 R -/Parent 503 0 R -/Prev 511 0 R ->> endobj -511 0 obj << -/Title 512 0 R -/A 509 0 R -/Parent 503 0 R -/Prev 507 0 R -/Next 515 0 R ->> endobj -507 0 obj << -/Title 508 0 R -/A 505 0 R -/Parent 503 0 R -/Next 511 0 R ->> endobj -503 0 obj << -/Title 504 0 R -/A 501 0 R -/Parent 475 0 R -/Prev 499 0 R -/Next 519 0 R -/First 507 0 R -/Last 515 0 R -/Count -3 ->> endobj -499 0 obj << -/Title 500 0 R -/A 497 0 R -/Parent 475 0 R -/Prev 495 0 R -/Next 503 0 R ->> endobj -495 0 obj << -/Title 496 0 R -/A 493 0 R -/Parent 475 0 R -/Prev 491 0 R -/Next 499 0 R ->> endobj -491 0 obj << -/Title 492 0 R -/A 489 0 R -/Parent 475 0 R -/Prev 479 0 R -/Next 495 0 R ->> endobj -487 0 obj << -/Title 488 0 R -/A 485 0 R -/Parent 479 0 R -/Prev 483 0 R ->> endobj -483 0 obj << -/Title 484 0 R -/A 481 0 R -/Parent 479 0 R -/Next 487 0 R ->> endobj -479 0 obj << -/Title 480 0 R -/A 477 0 R -/Parent 475 0 R -/Next 491 0 R -/First 483 0 R -/Last 487 0 R -/Count -2 ->> endobj -475 0 obj << -/Title 476 0 R -/A 473 0 R -/Parent 243 0 R -/Prev 275 0 R -/First 479 0 R -/Last 523 0 R -/Count -7 ->> endobj -471 0 obj << -/Title 472 0 R -/A 469 0 R -/Parent 455 0 R -/Prev 467 0 R ->> endobj -467 0 obj << -/Title 468 0 R -/A 465 0 R -/Parent 455 0 R -/Prev 463 0 R -/Next 471 0 R ->> endobj -463 0 obj << -/Title 464 0 R -/A 461 0 R -/Parent 455 0 R -/Prev 459 0 R -/Next 467 0 R ->> endobj -459 0 obj << -/Title 460 0 R -/A 457 0 R -/Parent 455 0 R -/Next 463 0 R ->> endobj -455 0 obj << -/Title 456 0 R -/A 453 0 R -/Parent 275 0 R -/Prev 451 0 R -/First 459 0 R -/Last 471 0 R -/Count -4 ->> endobj -451 0 obj << -/Title 452 0 R -/A 449 0 R -/Parent 275 0 R -/Prev 447 0 R -/Next 455 0 R ->> endobj -447 0 obj << -/Title 448 0 R -/A 445 0 R -/Parent 275 0 R -/Prev 443 0 R -/Next 451 0 R ->> endobj -443 0 obj << -/Title 444 0 R -/A 441 0 R -/Parent 275 0 R -/Prev 439 0 R -/Next 447 0 R ->> endobj -439 0 obj << -/Title 440 0 R -/A 437 0 R -/Parent 275 0 R -/Prev 435 0 R -/Next 443 0 R ->> endobj -435 0 obj << -/Title 436 0 R -/A 433 0 R -/Parent 275 0 R -/Prev 431 0 R -/Next 439 0 R ->> endobj -431 0 obj << -/Title 432 0 R -/A 429 0 R -/Parent 275 0 R -/Prev 427 0 R -/Next 435 0 R ->> endobj -427 0 obj << -/Title 428 0 R -/A 425 0 R -/Parent 275 0 R -/Prev 347 0 R -/Next 431 0 R ->> endobj -423 0 obj << -/Title 424 0 R -/A 421 0 R -/Parent 347 0 R -/Prev 419 0 R ->> endobj -419 0 obj << -/Title 420 0 R -/A 417 0 R -/Parent 347 0 R -/Prev 415 0 R -/Next 423 0 R ->> endobj -415 0 obj << -/Title 416 0 R -/A 413 0 R -/Parent 347 0 R -/Prev 411 0 R -/Next 419 0 R ->> endobj -411 0 obj << -/Title 412 0 R -/A 409 0 R -/Parent 347 0 R -/Prev 407 0 R -/Next 415 0 R ->> endobj -407 0 obj << -/Title 408 0 R -/A 405 0 R -/Parent 347 0 R -/Prev 403 0 R -/Next 411 0 R ->> endobj -403 0 obj << -/Title 404 0 R -/A 401 0 R -/Parent 347 0 R -/Prev 399 0 R -/Next 407 0 R ->> endobj -399 0 obj << -/Title 400 0 R -/A 397 0 R -/Parent 347 0 R -/Prev 395 0 R -/Next 403 0 R ->> endobj -395 0 obj << -/Title 396 0 R -/A 393 0 R -/Parent 347 0 R -/Prev 391 0 R -/Next 399 0 R ->> endobj -391 0 obj << -/Title 392 0 R -/A 389 0 R -/Parent 347 0 R -/Prev 387 0 R -/Next 395 0 R ->> endobj -387 0 obj << -/Title 388 0 R -/A 385 0 R -/Parent 347 0 R -/Prev 383 0 R -/Next 391 0 R ->> endobj -383 0 obj << -/Title 384 0 R -/A 381 0 R -/Parent 347 0 R -/Prev 379 0 R -/Next 387 0 R ->> endobj -379 0 obj << -/Title 380 0 R -/A 377 0 R -/Parent 347 0 R -/Prev 375 0 R -/Next 383 0 R ->> endobj -375 0 obj << -/Title 376 0 R -/A 373 0 R -/Parent 347 0 R -/Prev 371 0 R -/Next 379 0 R ->> endobj -371 0 obj << -/Title 372 0 R -/A 369 0 R -/Parent 347 0 R -/Prev 367 0 R -/Next 375 0 R ->> endobj -367 0 obj << -/Title 368 0 R -/A 365 0 R -/Parent 347 0 R -/Prev 363 0 R -/Next 371 0 R ->> endobj -363 0 obj << -/Title 364 0 R -/A 361 0 R -/Parent 347 0 R -/Prev 359 0 R -/Next 367 0 R ->> endobj -359 0 obj << -/Title 360 0 R -/A 357 0 R -/Parent 347 0 R -/Prev 355 0 R -/Next 363 0 R ->> endobj -355 0 obj << -/Title 356 0 R -/A 353 0 R -/Parent 347 0 R -/Prev 351 0 R -/Next 359 0 R ->> endobj -351 0 obj << -/Title 352 0 R -/A 349 0 R -/Parent 347 0 R -/Next 355 0 R ->> endobj -347 0 obj << -/Title 348 0 R -/A 345 0 R -/Parent 275 0 R -/Prev 343 0 R -/Next 427 0 R -/First 351 0 R -/Last 423 0 R -/Count -19 ->> endobj -343 0 obj << -/Title 344 0 R -/A 341 0 R -/Parent 275 0 R -/Prev 339 0 R -/Next 347 0 R ->> endobj -339 0 obj << -/Title 340 0 R -/A 337 0 R -/Parent 275 0 R -/Prev 335 0 R -/Next 343 0 R ->> endobj -335 0 obj << -/Title 336 0 R -/A 333 0 R -/Parent 275 0 R -/Prev 331 0 R -/Next 339 0 R ->> endobj -331 0 obj << -/Title 332 0 R -/A 329 0 R -/Parent 275 0 R -/Prev 327 0 R -/Next 335 0 R ->> endobj -327 0 obj << -/Title 328 0 R -/A 325 0 R -/Parent 275 0 R -/Prev 315 0 R -/Next 331 0 R ->> endobj -323 0 obj << -/Title 324 0 R -/A 321 0 R -/Parent 315 0 R -/Prev 319 0 R ->> endobj -319 0 obj << -/Title 320 0 R -/A 317 0 R -/Parent 315 0 R -/Next 323 0 R ->> endobj -315 0 obj << -/Title 316 0 R -/A 313 0 R -/Parent 275 0 R -/Prev 311 0 R -/Next 327 0 R -/First 319 0 R -/Last 323 0 R -/Count -2 ->> endobj -311 0 obj << -/Title 312 0 R -/A 309 0 R -/Parent 275 0 R -/Prev 307 0 R -/Next 315 0 R ->> endobj -307 0 obj << -/Title 308 0 R -/A 305 0 R -/Parent 275 0 R -/Prev 303 0 R -/Next 311 0 R ->> endobj -303 0 obj << -/Title 304 0 R -/A 301 0 R -/Parent 275 0 R -/Prev 299 0 R -/Next 307 0 R ->> endobj -299 0 obj << -/Title 300 0 R -/A 297 0 R -/Parent 275 0 R -/Prev 295 0 R -/Next 303 0 R ->> endobj -295 0 obj << -/Title 296 0 R -/A 293 0 R -/Parent 275 0 R -/Prev 291 0 R -/Next 299 0 R ->> endobj -291 0 obj << -/Title 292 0 R -/A 289 0 R -/Parent 275 0 R -/Prev 287 0 R -/Next 295 0 R ->> endobj -287 0 obj << -/Title 288 0 R -/A 285 0 R -/Parent 275 0 R -/Prev 283 0 R -/Next 291 0 R ->> endobj -283 0 obj << -/Title 284 0 R -/A 281 0 R -/Parent 275 0 R -/Prev 279 0 R -/Next 287 0 R ->> endobj -279 0 obj << -/Title 280 0 R -/A 277 0 R -/Parent 275 0 R -/Next 283 0 R ->> endobj -275 0 obj << -/Title 276 0 R -/A 273 0 R -/Parent 243 0 R -/Prev 247 0 R -/Next 475 0 R -/First 279 0 R -/Last 455 0 R -/Count -24 ->> endobj -271 0 obj << -/Title 272 0 R -/A 269 0 R -/Parent 263 0 R -/Prev 267 0 R ->> endobj -267 0 obj << -/Title 268 0 R -/A 265 0 R -/Parent 263 0 R -/Next 271 0 R ->> endobj -263 0 obj << -/Title 264 0 R -/A 261 0 R -/Parent 247 0 R -/Prev 251 0 R -/First 267 0 R -/Last 271 0 R -/Count -2 ->> endobj -259 0 obj << -/Title 260 0 R -/A 257 0 R -/Parent 251 0 R -/Prev 255 0 R ->> endobj -255 0 obj << -/Title 256 0 R -/A 253 0 R -/Parent 251 0 R -/Next 259 0 R ->> endobj -251 0 obj << -/Title 252 0 R -/A 249 0 R -/Parent 247 0 R -/Next 263 0 R -/First 255 0 R -/Last 259 0 R -/Count -2 ->> endobj -247 0 obj << -/Title 248 0 R -/A 245 0 R -/Parent 243 0 R -/Next 275 0 R -/First 251 0 R -/Last 263 0 R -/Count -2 ->> endobj -243 0 obj << -/Title 244 0 R -/A 241 0 R -/Parent 1942 0 R -/Prev 231 0 R -/Next 527 0 R -/First 247 0 R -/Last 475 0 R -/Count -3 ->> endobj -239 0 obj << -/Title 240 0 R -/A 237 0 R -/Parent 231 0 R -/Prev 235 0 R ->> endobj -235 0 obj << -/Title 236 0 R -/A 233 0 R -/Parent 231 0 R -/Next 239 0 R ->> endobj -231 0 obj << -/Title 232 0 R -/A 229 0 R -/Parent 1942 0 R -/Prev 131 0 R -/Next 243 0 R -/First 235 0 R -/Last 239 0 R -/Count -2 ->> endobj -227 0 obj << -/Title 228 0 R -/A 225 0 R -/Parent 219 0 R -/Prev 223 0 R ->> endobj -223 0 obj << -/Title 224 0 R -/A 221 0 R -/Parent 219 0 R -/Next 227 0 R ->> endobj -219 0 obj << -/Title 220 0 R -/A 217 0 R -/Parent 131 0 R -/Prev 203 0 R -/First 223 0 R -/Last 227 0 R -/Count -2 ->> endobj -215 0 obj << -/Title 216 0 R -/A 213 0 R -/Parent 203 0 R -/Prev 211 0 R ->> endobj -211 0 obj << -/Title 212 0 R -/A 209 0 R -/Parent 203 0 R -/Prev 207 0 R -/Next 215 0 R ->> endobj -207 0 obj << -/Title 208 0 R -/A 205 0 R -/Parent 203 0 R -/Next 211 0 R ->> endobj -203 0 obj << -/Title 204 0 R -/A 201 0 R -/Parent 131 0 R -/Prev 199 0 R -/Next 219 0 R -/First 207 0 R -/Last 215 0 R -/Count -3 ->> endobj -199 0 obj << -/Title 200 0 R -/A 197 0 R -/Parent 131 0 R -/Prev 195 0 R -/Next 203 0 R ->> endobj -195 0 obj << -/Title 196 0 R -/A 193 0 R -/Parent 131 0 R -/Prev 159 0 R -/Next 199 0 R ->> endobj -191 0 obj << -/Title 192 0 R -/A 189 0 R -/Parent 159 0 R -/Prev 187 0 R ->> endobj -187 0 obj << -/Title 188 0 R -/A 185 0 R -/Parent 159 0 R -/Prev 183 0 R -/Next 191 0 R ->> endobj -183 0 obj << -/Title 184 0 R -/A 181 0 R -/Parent 159 0 R -/Prev 179 0 R -/Next 187 0 R ->> endobj -179 0 obj << -/Title 180 0 R -/A 177 0 R -/Parent 159 0 R -/Prev 175 0 R -/Next 183 0 R ->> endobj -175 0 obj << -/Title 176 0 R -/A 173 0 R -/Parent 159 0 R -/Prev 163 0 R -/Next 179 0 R ->> endobj -171 0 obj << -/Title 172 0 R -/A 169 0 R -/Parent 163 0 R -/Prev 167 0 R ->> endobj -167 0 obj << -/Title 168 0 R -/A 165 0 R -/Parent 163 0 R -/Next 171 0 R ->> endobj -163 0 obj << -/Title 164 0 R -/A 161 0 R -/Parent 159 0 R -/Next 175 0 R -/First 167 0 R -/Last 171 0 R -/Count -2 ->> endobj -159 0 obj << -/Title 160 0 R -/A 157 0 R -/Parent 131 0 R -/Prev 151 0 R -/Next 195 0 R -/First 163 0 R -/Last 191 0 R -/Count -6 ->> endobj -155 0 obj << -/Title 156 0 R -/A 153 0 R -/Parent 151 0 R ->> endobj -151 0 obj << -/Title 152 0 R -/A 149 0 R -/Parent 131 0 R -/Prev 147 0 R -/Next 159 0 R -/First 155 0 R -/Last 155 0 R -/Count -1 ->> endobj -147 0 obj << -/Title 148 0 R -/A 145 0 R -/Parent 131 0 R -/Prev 139 0 R -/Next 151 0 R ->> endobj -143 0 obj << -/Title 144 0 R -/A 141 0 R -/Parent 139 0 R ->> endobj -139 0 obj << -/Title 140 0 R -/A 137 0 R -/Parent 131 0 R -/Prev 135 0 R -/Next 147 0 R -/First 143 0 R -/Last 143 0 R -/Count -1 ->> endobj -135 0 obj << -/Title 136 0 R -/A 133 0 R -/Parent 131 0 R -/Next 139 0 R ->> endobj -131 0 obj << -/Title 132 0 R -/A 129 0 R -/Parent 1942 0 R -/Prev 91 0 R -/Next 231 0 R -/First 135 0 R -/Last 219 0 R -/Count -9 ->> endobj -127 0 obj << -/Title 128 0 R -/A 125 0 R -/Parent 111 0 R -/Prev 115 0 R ->> endobj -123 0 obj << -/Title 124 0 R -/A 121 0 R -/Parent 115 0 R -/Prev 119 0 R ->> endobj -119 0 obj << -/Title 120 0 R -/A 117 0 R -/Parent 115 0 R -/Next 123 0 R ->> endobj -115 0 obj << -/Title 116 0 R -/A 113 0 R -/Parent 111 0 R -/Next 127 0 R -/First 119 0 R -/Last 123 0 R -/Count -2 ->> endobj -111 0 obj << -/Title 112 0 R -/A 109 0 R -/Parent 91 0 R -/Prev 107 0 R -/First 115 0 R -/Last 127 0 R -/Count -2 ->> endobj -107 0 obj << -/Title 108 0 R -/A 105 0 R -/Parent 91 0 R -/Prev 95 0 R -/Next 111 0 R ->> endobj -103 0 obj << -/Title 104 0 R -/A 101 0 R -/Parent 95 0 R -/Prev 99 0 R ->> endobj -99 0 obj << -/Title 100 0 R -/A 97 0 R -/Parent 95 0 R -/Next 103 0 R ->> endobj -95 0 obj << -/Title 96 0 R -/A 93 0 R -/Parent 91 0 R -/Next 107 0 R -/First 99 0 R -/Last 103 0 R -/Count -2 ->> endobj -91 0 obj << -/Title 92 0 R -/A 89 0 R -/Parent 1942 0 R -/Prev 67 0 R -/Next 131 0 R -/First 95 0 R -/Last 111 0 R -/Count -3 ->> endobj -87 0 obj << -/Title 88 0 R -/A 85 0 R -/Parent 67 0 R -/Prev 83 0 R ->> endobj -83 0 obj << -/Title 84 0 R -/A 81 0 R -/Parent 67 0 R -/Prev 79 0 R -/Next 87 0 R ->> endobj -79 0 obj << -/Title 80 0 R -/A 77 0 R -/Parent 67 0 R -/Prev 75 0 R -/Next 83 0 R ->> endobj -75 0 obj << -/Title 76 0 R -/A 73 0 R -/Parent 67 0 R -/Prev 71 0 R -/Next 79 0 R ->> endobj -71 0 obj << -/Title 72 0 R -/A 69 0 R -/Parent 67 0 R -/Next 75 0 R ->> endobj -67 0 obj << -/Title 68 0 R -/A 65 0 R -/Parent 1942 0 R -/Prev 7 0 R -/Next 91 0 R -/First 71 0 R -/Last 87 0 R -/Count -5 ->> endobj -63 0 obj << -/Title 64 0 R -/A 61 0 R -/Parent 23 0 R -/Prev 55 0 R ->> endobj -59 0 obj << -/Title 60 0 R -/A 57 0 R -/Parent 55 0 R ->> endobj -55 0 obj << -/Title 56 0 R -/A 53 0 R -/Parent 23 0 R -/Prev 39 0 R -/Next 63 0 R -/First 59 0 R -/Last 59 0 R -/Count -1 ->> endobj -51 0 obj << -/Title 52 0 R -/A 49 0 R -/Parent 39 0 R -/Prev 47 0 R ->> endobj -47 0 obj << -/Title 48 0 R -/A 45 0 R -/Parent 39 0 R -/Prev 43 0 R -/Next 51 0 R ->> endobj -43 0 obj << -/Title 44 0 R -/A 41 0 R -/Parent 39 0 R -/Next 47 0 R ->> endobj -39 0 obj << -/Title 40 0 R -/A 37 0 R -/Parent 23 0 R -/Prev 35 0 R -/Next 55 0 R -/First 43 0 R -/Last 51 0 R -/Count -3 ->> endobj -35 0 obj << -/Title 36 0 R -/A 33 0 R -/Parent 23 0 R -/Prev 31 0 R -/Next 39 0 R ->> endobj -31 0 obj << -/Title 32 0 R -/A 29 0 R -/Parent 23 0 R -/Prev 27 0 R -/Next 35 0 R ->> endobj -27 0 obj << -/Title 28 0 R -/A 25 0 R -/Parent 23 0 R -/Next 31 0 R ->> endobj -23 0 obj << -/Title 24 0 R -/A 21 0 R -/Parent 7 0 R -/Prev 19 0 R -/First 27 0 R -/Last 63 0 R -/Count -6 ->> endobj -19 0 obj << -/Title 20 0 R -/A 17 0 R -/Parent 7 0 R -/Prev 15 0 R -/Next 23 0 R ->> endobj -15 0 obj << -/Title 16 0 R -/A 13 0 R -/Parent 7 0 R -/Prev 11 0 R -/Next 19 0 R ->> endobj -11 0 obj << -/Title 12 0 R -/A 9 0 R -/Parent 7 0 R -/Next 15 0 R ->> endobj -7 0 obj << -/Title 8 0 R -/A 5 0 R -/Parent 1942 0 R -/Next 67 0 R -/First 11 0 R -/Last 23 0 R -/Count -4 ->> endobj -1943 0 obj << -/Names [(Access_Control_Lists) 1477 0 R (Bv9ARM.ch01) 874 0 R (Bv9ARM.ch02) 923 0 R (Bv9ARM.ch03) 940 0 R (Bv9ARM.ch04) 989 0 R (Bv9ARM.ch05) 1077 0 R (Bv9ARM.ch06) 1088 0 R (Bv9ARM.ch07) 1476 0 R (Bv9ARM.ch08) 1502 0 R (Bv9ARM.ch09) 1517 0 R (Bv9ARM.ch10) 1738 0 R (Configuration_File_Grammar) 1113 0 R (DNSSEC) 1056 0 R (Doc-Start) 655 0 R (Setting_TTLs) 1446 0 R (acache) 930 0 R (access_control) 1231 0 R (acl) 1121 0 R (address_match_lists) 1094 0 R (admin_tools) 963 0 R (appendix.A) 570 0 R (appendix.B) 606 0 R (bibliography) 1525 0 R (boolean_options) 1005 0 R (builtin) 1300 0 R (chapter*.1) 690 0 R (chapter.1) 6 0 R (chapter.2) 66 0 R (chapter.3) 90 0 R (chapter.4) 130 0 R (chapter.5) 230 0 R (chapter.6) 242 0 R (chapter.7) 526 0 R (chapter.8) 550 0 R (cite.RFC1033) 1653 0 R (cite.RFC1034) 1537 0 R (cite.RFC1035) 1539 0 R (cite.RFC1101) 1635 0 R (cite.RFC1123) 1637 0 R (cite.RFC1183) 1597 0 R (cite.RFC1464) 1675 0 R (cite.RFC1535) 1582 0 R (cite.RFC1536) 1584 0 R (cite.RFC1537) 1655 0 R (cite.RFC1591) 1639 0 R (cite.RFC1706) 1599 0 R (cite.RFC1712) 1695 0 R (cite.RFC1713) 1677 0 R (cite.RFC1794) 1679 0 R (cite.RFC1876) 1601 0 R (cite.RFC1912) 1657 0 R (cite.RFC1982) 1586 0 R (cite.RFC1995) 1544 0 R (cite.RFC1996) 1546 0 R (cite.RFC2010) 1659 0 R (cite.RFC2052) 1603 0 R (cite.RFC2065) 1707 0 R (cite.RFC2136) 1548 0 R (cite.RFC2137) 1709 0 R (cite.RFC2163) 1605 0 R (cite.RFC2168) 1607 0 R (cite.RFC2181) 1550 0 R (cite.RFC2219) 1661 0 R (cite.RFC2230) 1609 0 R (cite.RFC2240) 1681 0 R (cite.RFC2308) 1552 0 R (cite.RFC2317) 1641 0 R (cite.RFC2345) 1683 0 R (cite.RFC2352) 1685 0 R (cite.RFC2535) 1711 0 R (cite.RFC2536) 1611 0 R (cite.RFC2537) 1613 0 R (cite.RFC2538) 1615 0 R (cite.RFC2539) 1617 0 R (cite.RFC2540) 1619 0 R (cite.RFC2671) 1554 0 R (cite.RFC2672) 1556 0 R (cite.RFC2673) 1697 0 R (cite.RFC2782) 1621 0 R (cite.RFC2825) 1665 0 R (cite.RFC2826) 1643 0 R (cite.RFC2845) 1558 0 R (cite.RFC2874) 1699 0 R (cite.RFC2915) 1623 0 R (cite.RFC2929) 1645 0 R (cite.RFC2930) 1560 0 R (cite.RFC2931) 1562 0 R (cite.RFC3007) 1564 0 R (cite.RFC3008) 1713 0 R (cite.RFC3071) 1687 0 R (cite.RFC3090) 1715 0 R (cite.RFC3110) 1625 0 R (cite.RFC3123) 1627 0 R (cite.RFC3225) 1570 0 R (cite.RFC3258) 1689 0 R (cite.RFC3445) 1717 0 R (cite.RFC3490) 1667 0 R (cite.RFC3491) 1669 0 R (cite.RFC3492) 1671 0 R (cite.RFC3596) 1629 0 R (cite.RFC3597) 1631 0 R (cite.RFC3645) 1566 0 R (cite.RFC3655) 1719 0 R (cite.RFC3658) 1721 0 R (cite.RFC3755) 1723 0 R (cite.RFC3757) 1725 0 R (cite.RFC3833) 1572 0 R (cite.RFC3845) 1727 0 R (cite.RFC3901) 1691 0 R (cite.RFC4033) 1574 0 R (cite.RFC4035) 1576 0 R (cite.RFC4044) 1578 0 R (cite.RFC4074) 1588 0 R (cite.RFC974) 1541 0 R (cite.id2499701) 1732 0 R (configuration_file_elements) 1089 0 R (controls_statement_definition_and_usage) 976 0 R (diagnostic_tools) 911 0 R (dynamic_update) 999 0 R (dynamic_update_policies) 1051 0 R (dynamic_update_security) 1235 0 R (empty) 1302 0 R (historical_dns_information) 1519 0 R (id2465026) 875 0 R (id2466484) 876 0 R (id2467305) 880 0 R (id2467506) 881 0 R (id2467714) 891 0 R (id2467891) 893 0 R (id2467912) 894 0 R (id2467946) 895 0 R (id2468030) 898 0 R (id2470292) 905 0 R (id2470315) 908 0 R (id2470345) 909 0 R (id2470435) 910 0 R (id2470465) 916 0 R (id2470500) 917 0 R (id2470595) 918 0 R (id2470629) 924 0 R (id2470656) 925 0 R (id2470668) 926 0 R (id2470694) 929 0 R (id2470705) 935 0 R (id2470805) 942 0 R (id2470821) 943 0 R (id2470843) 949 0 R (id2470860) 950 0 R (id2471334) 953 0 R (id2471339) 954 0 R (id2473122) 981 0 R (id2473133) 982 0 R (id2473511) 1014 0 R (id2473529) 1015 0 R (id2473964) 1031 0 R (id2473981) 1032 0 R (id2474020) 1037 0 R (id2474038) 1038 0 R (id2474049) 1039 0 R (id2474156) 1040 0 R (id2474282) 1041 0 R (id2474327) 1047 0 R (id2474341) 1048 0 R (id2474390) 1049 0 R (id2474595) 1057 0 R (id2474732) 1058 0 R (id2474811) 1063 0 R (id2474954) 1068 0 R (id2475084) 1070 0 R (id2475106) 1071 0 R (id2475139) 1078 0 R (id2475354) 1090 0 R (id2476147) 1099 0 R (id2476174) 1100 0 R (id2476281) 1105 0 R (id2476296) 1106 0 R (id2476394) 1107 0 R (id2476477) 1114 0 R (id2476893) 1120 0 R (id2476936) 1122 0 R (id2477152) 1124 0 R (id2477512) 1131 0 R (id2477527) 1132 0 R (id2477550) 1133 0 R (id2477572) 1134 0 R (id2477662) 1143 0 R (id2477857) 1144 0 R (id2477909) 1150 0 R (id2478602) 1161 0 R (id2479412) 1167 0 R (id2479485) 1168 0 R (id2479549) 1175 0 R (id2479593) 1176 0 R (id2479608) 1177 0 R (id2481708) 1202 0 R (id2483474) 1224 0 R (id2483532) 1230 0 R (id2483954) 1241 0 R (id2484042) 1246 0 R (id2484857) 1255 0 R (id2484872) 1261 0 R (id2485056) 1263 0 R (id2485257) 1269 0 R (id2485688) 1283 0 R (id2486990) 1313 0 R (id2488093) 1330 0 R (id2488142) 1331 0 R (id2488222) 1337 0 R (id2489668) 1351 0 R (id2489675) 1352 0 R (id2489681) 1353 0 R (id2490299) 1359 0 R (id2490332) 1364 0 R (id2491624) 1406 0 R (id2491881) 1412 0 R (id2491899) 1413 0 R (id2491920) 1416 0 R (id2492156) 1422 0 R (id2493254) 1428 0 R (id2493382) 1430 0 R (id2493403) 1435 0 R (id2493834) 1437 0 R (id2493971) 1439 0 R (id2494061) 1440 0 R (id2494466) 1447 0 R (id2494590) 1449 0 R (id2494605) 1450 0 R (id2494717) 1452 0 R (id2494876) 1458 0 R (id2494937) 1459 0 R (id2495006) 1460 0 R (id2495043) 1461 0 R (id2495105) 1466 0 R (id2495584) 1486 0 R (id2495729) 1487 0 R (id2495788) 1488 0 R (id2495868) 1503 0 R (id2495874) 1504 0 R (id2495885) 1505 0 R (id2496039) 1506 0 R (id2496101) 1518 0 R (id2496273) 1524 0 R (id2496529) 1529 0 R (id2496531) 1535 0 R (id2496539) 1540 0 R (id2496563) 1536 0 R (id2496586) 1538 0 R (id2496622) 1549 0 R (id2496649) 1551 0 R (id2496675) 1543 0 R (id2496699) 1545 0 R (id2496791) 1547 0 R (id2496846) 1553 0 R (id2496873) 1555 0 R (id2496900) 1557 0 R (id2496962) 1559 0 R (id2496992) 1561 0 R (id2497021) 1563 0 R (id2497048) 1565 0 R (id2497123) 1568 0 R (id2497198) 1569 0 R (id2497225) 1571 0 R (id2497261) 1573 0 R (id2497326) 1577 0 R (id2497392) 1575 0 R (id2497457) 1580 0 R (id2497465) 1581 0 R (id2497559) 1583 0 R (id2497627) 1585 0 R (id2497662) 1587 0 R (id2497703) 1595 0 R (id2497708) 1596 0 R (id2497766) 1598 0 R (id2497803) 1606 0 R (id2497838) 1600 0 R (id2497893) 1602 0 R (id2497931) 1604 0 R (id2497957) 1608 0 R (id2497982) 1610 0 R (id2498009) 1612 0 R (id2498036) 1614 0 R (id2498075) 1616 0 R (id2498105) 1618 0 R (id2498135) 1620 0 R (id2498178) 1622 0 R (id2498211) 1624 0 R (id2498237) 1626 0 R (id2498261) 1628 0 R (id2498318) 1630 0 R (id2498343) 1633 0 R (id2498350) 1634 0 R (id2498376) 1636 0 R (id2498398) 1638 0 R (id2498422) 1640 0 R (id2498468) 1642 0 R (id2498491) 1644 0 R (id2498541) 1651 0 R (id2498549) 1652 0 R (id2498572) 1654 0 R (id2498599) 1656 0 R (id2498626) 1658 0 R (id2498662) 1660 0 R (id2498702) 1663 0 R (id2498708) 1664 0 R (id2498740) 1666 0 R (id2498854) 1668 0 R (id2498889) 1670 0 R (id2498916) 1673 0 R (id2498934) 1674 0 R (id2498956) 1676 0 R (id2498982) 1678 0 R (id2499008) 1680 0 R (id2499031) 1682 0 R (id2499077) 1684 0 R (id2499100) 1686 0 R (id2499127) 1688 0 R (id2499153) 1690 0 R (id2499190) 1693 0 R (id2499196) 1694 0 R (id2499254) 1696 0 R (id2499281) 1698 0 R (id2499317) 1705 0 R (id2499329) 1706 0 R (id2499368) 1708 0 R (id2499395) 1710 0 R (id2499425) 1712 0 R (id2499450) 1714 0 R (id2499477) 1716 0 R (id2499513) 1718 0 R (id2499549) 1720 0 R (id2499576) 1722 0 R (id2499603) 1724 0 R (id2499648) 1726 0 R (id2499689) 1729 0 R (id2499699) 1731 0 R (id2499701) 1733 0 R (incremental_zone_transfers) 1011 0 R (internet_drafts) 1728 0 R (ipv6addresses) 1072 0 R (journal) 1000 0 R (lwresd) 1079 0 R (man.dig) 1739 0 R (man.dnssec-keygen) 1787 0 R (man.dnssec-signzone) 1805 0 R (man.host) 1772 0 R (man.named) 1854 0 R (man.named-checkconf) 1825 0 R (man.named-checkzone) 1837 0 R (man.rndc) 1876 0 R (man.rndc-confgen) 1905 0 R (man.rndc.conf) 1888 0 R (notify) 990 0 R (options) 1187 0 R (page.1) 654 0 R (page.10) 915 0 R (page.100) 1767 0 R (page.101) 1779 0 R (page.102) 1783 0 R (page.103) 1795 0 R (page.104) 1801 0 R (page.105) 1812 0 R (page.106) 1817 0 R (page.107) 1822 0 R (page.108) 1833 0 R (page.109) 1845 0 R (page.11) 922 0 R (page.110) 1850 0 R (page.111) 1861 0 R (page.112) 1866 0 R (page.113) 1873 0 R (page.114) 1884 0 R (page.115) 1895 0 R (page.116) 1901 0 R (page.117) 1911 0 R (page.118) 1917 0 R (page.12) 934 0 R (page.13) 939 0 R (page.14) 948 0 R (page.15) 959 0 R (page.16) 967 0 R (page.17) 974 0 R (page.18) 980 0 R (page.19) 988 0 R (page.2) 679 0 R (page.20) 1010 0 R (page.21) 1020 0 R (page.22) 1025 0 R (page.23) 1029 0 R (page.24) 1036 0 R (page.25) 1045 0 R (page.26) 1055 0 R (page.27) 1062 0 R (page.28) 1067 0 R (page.29) 1076 0 R (page.3) 689 0 R (page.30) 1083 0 R (page.31) 1087 0 R (page.32) 1098 0 R (page.33) 1104 0 R (page.34) 1112 0 R (page.35) 1119 0 R (page.36) 1128 0 R (page.37) 1141 0 R (page.38) 1149 0 R (page.39) 1154 0 R (page.4) 744 0 R (page.40) 1160 0 R (page.41) 1166 0 R (page.42) 1174 0 R (page.43) 1181 0 R (page.44) 1186 0 R (page.45) 1191 0 R (page.46) 1197 0 R (page.47) 1201 0 R (page.48) 1208 0 R (page.49) 1218 0 R (page.5) 808 0 R (page.50) 1223 0 R (page.51) 1228 0 R (page.52) 1239 0 R (page.53) 1245 0 R (page.54) 1250 0 R (page.55) 1254 0 R (page.56) 1260 0 R (page.57) 1268 0 R (page.58) 1274 0 R (page.59) 1281 0 R (page.6) 869 0 R (page.60) 1289 0 R (page.61) 1296 0 R (page.62) 1308 0 R (page.63) 1312 0 R (page.64) 1318 0 R (page.65) 1323 0 R (page.66) 1327 0 R (page.67) 1336 0 R (page.68) 1342 0 R (page.69) 1346 0 R (page.7) 873 0 R (page.70) 1350 0 R (page.71) 1358 0 R (page.72) 1363 0 R (page.73) 1380 0 R (page.74) 1396 0 R (page.75) 1411 0 R (page.76) 1421 0 R (page.77) 1427 0 R (page.78) 1434 0 R (page.79) 1445 0 R (page.8) 890 0 R (page.80) 1457 0 R (page.81) 1465 0 R (page.82) 1471 0 R (page.83) 1475 0 R (page.84) 1481 0 R (page.85) 1492 0 R (page.86) 1497 0 R (page.87) 1501 0 R (page.88) 1512 0 R (page.89) 1516 0 R (page.9) 904 0 R (page.90) 1523 0 R (page.91) 1533 0 R (page.92) 1593 0 R (page.93) 1649 0 R (page.94) 1703 0 R (page.95) 1737 0 R (page.96) 1746 0 R (page.97) 1752 0 R (page.98) 1758 0 R (page.99) 1762 0 R (proposed_standards) 1016 0 R (rfcs) 900 0 R (rndc) 1137 0 R (rrset_ordering) 955 0 R (sample_configuration) 941 0 R (section*.10) 1662 0 R (section*.11) 1672 0 R (section*.12) 1692 0 R (section*.13) 1704 0 R (section*.14) 1730 0 R (section*.15) 1740 0 R (section*.16) 1741 0 R (section*.17) 1742 0 R (section*.18) 1747 0 R (section*.19) 1748 0 R (section*.2) 1528 0 R (section*.20) 1753 0 R (section*.21) 1763 0 R (section*.22) 1768 0 R (section*.23) 1769 0 R (section*.24) 1770 0 R (section*.25) 1771 0 R (section*.26) 1773 0 R (section*.27) 1774 0 R (section*.28) 1775 0 R (section*.29) 1784 0 R (section*.3) 1534 0 R (section*.30) 1785 0 R (section*.31) 1786 0 R (section*.32) 1788 0 R (section*.33) 1789 0 R (section*.34) 1790 0 R (section*.35) 1791 0 R (section*.36) 1796 0 R (section*.37) 1802 0 R (section*.38) 1803 0 R (section*.39) 1804 0 R (section*.4) 1542 0 R (section*.40) 1806 0 R (section*.41) 1807 0 R (section*.42) 1808 0 R (section*.43) 1813 0 R (section*.44) 1818 0 R (section*.45) 1823 0 R (section*.46) 1824 0 R (section*.47) 1826 0 R (section*.48) 1827 0 R (section*.49) 1828 0 R (section*.5) 1567 0 R (section*.50) 1829 0 R (section*.51) 1834 0 R (section*.52) 1835 0 R (section*.53) 1836 0 R (section*.54) 1838 0 R (section*.55) 1839 0 R (section*.56) 1840 0 R (section*.57) 1841 0 R (section*.58) 1851 0 R (section*.59) 1852 0 R (section*.6) 1579 0 R (section*.60) 1853 0 R (section*.61) 1855 0 R (section*.62) 1856 0 R (section*.63) 1857 0 R (section*.64) 1862 0 R (section*.65) 1867 0 R (section*.66) 1868 0 R (section*.67) 1869 0 R (section*.68) 1874 0 R (section*.69) 1875 0 R (section*.7) 1594 0 R (section*.70) 1877 0 R (section*.71) 1878 0 R (section*.72) 1879 0 R (section*.73) 1880 0 R (section*.74) 1885 0 R (section*.75) 1886 0 R (section*.76) 1887 0 R (section*.77) 1889 0 R (section*.78) 1890 0 R (section*.79) 1891 0 R (section*.8) 1632 0 R (section*.80) 1896 0 R (section*.81) 1902 0 R (section*.82) 1903 0 R (section*.83) 1904 0 R (section*.84) 1906 0 R (section*.85) 1907 0 R (section*.86) 1912 0 R (section*.87) 1913 0 R (section*.88) 1918 0 R (section*.89) 1919 0 R (section*.9) 1650 0 R (section*.90) 1920 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.1.4) 22 0 R (section.2.1) 70 0 R (section.2.2) 74 0 R (section.2.3) 78 0 R (section.2.4) 82 0 R (section.2.5) 86 0 R (section.3.1) 94 0 R (section.3.2) 106 0 R (section.3.3) 110 0 R (section.4.1) 134 0 R (section.4.2) 138 0 R (section.4.3) 146 0 R (section.4.4) 150 0 R (section.4.5) 158 0 R (section.4.6) 194 0 R (section.4.7) 198 0 R (section.4.8) 202 0 R (section.4.9) 218 0 R (section.5.1) 234 0 R (section.5.2) 238 0 R (section.6.1) 246 0 R (section.6.2) 274 0 R (section.6.3) 474 0 R (section.7.1) 530 0 R (section.7.2) 534 0 R (section.7.3) 546 0 R (section.8.1) 554 0 R (section.8.2) 562 0 R (section.8.3) 566 0 R (section.A.1) 574 0 R (section.A.2) 582 0 R (section.A.3) 590 0 R (section.B.1) 610 0 R (section.B.10) 646 0 R (section.B.2) 614 0 R (section.B.3) 618 0 R (section.B.4) 622 0 R (section.B.5) 626 0 R (section.B.6) 630 0 R (section.B.7) 634 0 R (section.B.8) 638 0 R (section.B.9) 642 0 R (server_statement_definition_and_usage) 1214 0 R (server_statement_grammar) 1319 0 R (statsfile) 1193 0 R (subsection.1.4.1) 26 0 R (subsection.1.4.2) 30 0 R (subsection.1.4.3) 34 0 R (subsection.1.4.4) 38 0 R (subsection.1.4.5) 54 0 R (subsection.1.4.6) 62 0 R (subsection.3.1.1) 98 0 R (subsection.3.1.2) 102 0 R (subsection.3.3.1) 114 0 R (subsection.3.3.2) 126 0 R (subsection.4.2.1) 142 0 R (subsection.4.4.1) 154 0 R (subsection.4.5.1) 162 0 R (subsection.4.5.2) 174 0 R (subsection.4.5.3) 178 0 R (subsection.4.5.4) 182 0 R (subsection.4.5.5) 186 0 R (subsection.4.5.6) 190 0 R (subsection.4.8.1) 206 0 R (subsection.4.8.2) 210 0 R (subsection.4.8.3) 214 0 R (subsection.4.9.1) 222 0 R (subsection.4.9.2) 226 0 R (subsection.6.1.1) 250 0 R (subsection.6.1.2) 262 0 R (subsection.6.2.1) 278 0 R (subsection.6.2.10) 314 0 R (subsection.6.2.11) 326 0 R (subsection.6.2.12) 330 0 R (subsection.6.2.13) 334 0 R (subsection.6.2.14) 338 0 R (subsection.6.2.15) 342 0 R (subsection.6.2.16) 346 0 R (subsection.6.2.17) 426 0 R (subsection.6.2.18) 430 0 R (subsection.6.2.19) 434 0 R (subsection.6.2.2) 282 0 R (subsection.6.2.20) 438 0 R (subsection.6.2.21) 442 0 R (subsection.6.2.22) 446 0 R (subsection.6.2.23) 450 0 R (subsection.6.2.24) 454 0 R (subsection.6.2.3) 286 0 R (subsection.6.2.4) 290 0 R (subsection.6.2.5) 294 0 R (subsection.6.2.6) 298 0 R (subsection.6.2.7) 302 0 R (subsection.6.2.8) 306 0 R (subsection.6.2.9) 310 0 R (subsection.6.3.1) 478 0 R (subsection.6.3.2) 490 0 R (subsection.6.3.3) 494 0 R (subsection.6.3.4) 498 0 R (subsection.6.3.5) 502 0 R (subsection.6.3.6) 518 0 R (subsection.6.3.7) 522 0 R (subsection.7.2.1) 538 0 R (subsection.7.2.2) 542 0 R (subsection.8.1.1) 558 0 R (subsection.A.1.1) 578 0 R (subsection.A.2.1) 586 0 R (subsection.A.3.1) 594 0 R (subsection.A.3.2) 598 0 R (subsection.A.3.3) 602 0 R (subsubsection.1.4.4.1) 42 0 R (subsubsection.1.4.4.2) 46 0 R (subsubsection.1.4.4.3) 50 0 R (subsubsection.1.4.5.1) 58 0 R (subsubsection.3.3.1.1) 118 0 R (subsubsection.3.3.1.2) 122 0 R (subsubsection.4.5.1.1) 166 0 R (subsubsection.4.5.1.2) 170 0 R (subsubsection.6.1.1.1) 254 0 R (subsubsection.6.1.1.2) 258 0 R (subsubsection.6.1.2.1) 266 0 R (subsubsection.6.1.2.2) 270 0 R (subsubsection.6.2.10.1) 318 0 R (subsubsection.6.2.10.2) 322 0 R (subsubsection.6.2.16.1) 350 0 R (subsubsection.6.2.16.10) 386 0 R (subsubsection.6.2.16.11) 390 0 R (subsubsection.6.2.16.12) 394 0 R (subsubsection.6.2.16.13) 398 0 R (subsubsection.6.2.16.14) 402 0 R (subsubsection.6.2.16.15) 406 0 R (subsubsection.6.2.16.16) 410 0 R (subsubsection.6.2.16.17) 414 0 R (subsubsection.6.2.16.18) 418 0 R (subsubsection.6.2.16.19) 422 0 R (subsubsection.6.2.16.2) 354 0 R (subsubsection.6.2.16.3) 358 0 R (subsubsection.6.2.16.4) 362 0 R (subsubsection.6.2.16.5) 366 0 R (subsubsection.6.2.16.6) 370 0 R (subsubsection.6.2.16.7) 374 0 R (subsubsection.6.2.16.8) 378 0 R (subsubsection.6.2.16.9) 382 0 R (subsubsection.6.2.24.1) 458 0 R (subsubsection.6.2.24.2) 462 0 R (subsubsection.6.2.24.3) 466 0 R (subsubsection.6.2.24.4) 470 0 R (subsubsection.6.3.1.1) 482 0 R (subsubsection.6.3.1.2) 486 0 R (subsubsection.6.3.5.1) 506 0 R (subsubsection.6.3.5.2) 510 0 R (subsubsection.6.3.5.3) 514 0 R (table.1.1) 882 0 R (table.1.2) 892 0 R (table.3.1) 951 0 R (table.3.2) 983 0 R (table.6.1) 1091 0 R (table.6.10) 1417 0 R (table.6.11) 1423 0 R (table.6.12) 1429 0 R (table.6.13) 1436 0 R (table.6.14) 1438 0 R (table.6.15) 1441 0 R (table.6.16) 1448 0 R (table.6.17) 1451 0 R (table.6.18) 1467 0 R (table.6.2) 1115 0 R (table.6.3) 1123 0 R (table.6.4) 1162 0 R (table.6.5) 1203 0 R (table.6.6) 1284 0 R (table.6.7) 1314 0 R (table.6.8) 1354 0 R (table.6.9) 1407 0 R (the_category_phrase) 1156 0 R (the_sortlist_statement) 1275 0 R (topology) 1270 0 R (tsig) 1030 0 R (tuning) 1285 0 R (types_of_resource_records_and_when_to_use_them) 899 0 R (view_statement_grammar) 1304 0 R (zone_statement_grammar) 1234 0 R (zone_transfers) 1006 0 R (zonefile_format) 1292 0 R] -/Limits [(Access_Control_Lists) (zonefile_format)] ->> endobj -1944 0 obj << -/Kids [1943 0 R] ->> endobj -1945 0 obj << -/Dests 1944 0 R ->> endobj -1946 0 obj << -/Type /Catalog -/Pages 1941 0 R -/Outlines 1942 0 R -/Names 1945 0 R -/PageMode /UseOutlines -/OpenAction 649 0 R ->> endobj -1947 0 obj << -/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfeTeX-1.21a)/Keywords() -/CreationDate (D:20071031135044+11'00') -/PTEX.Fullbanner (This is pdfeTeX, Version 3.141592-1.21a-2.2 (Web2C 7.5.4) kpathsea version 3.5.4) ->> endobj -xref -0 1948 -0000000001 65535 f -0000000002 00000 f -0000000003 00000 f -0000000004 00000 f -0000000000 00000 f -0000000009 00000 n -0000066898 00000 n -0000664779 00000 n -0000000054 00000 n -0000000086 00000 n -0000067022 00000 n -0000664707 00000 n -0000000133 00000 n -0000000173 00000 n -0000067147 00000 n -0000664621 00000 n -0000000221 00000 n -0000000273 00000 n -0000067272 00000 n -0000664535 00000 n -0000000321 00000 n -0000000377 00000 n -0000071535 00000 n -0000664425 00000 n -0000000425 00000 n -0000000478 00000 n -0000071660 00000 n -0000664351 00000 n -0000000531 00000 n -0000000572 00000 n -0000071785 00000 n -0000664264 00000 n -0000000625 00000 n -0000000674 00000 n -0000071910 00000 n -0000664177 00000 n -0000000727 00000 n -0000000757 00000 n -0000076188 00000 n -0000664053 00000 n -0000000810 00000 n -0000000861 00000 n -0000076313 00000 n -0000663979 00000 n -0000000919 00000 n -0000000964 00000 n -0000076438 00000 n -0000663892 00000 n -0000001022 00000 n -0000001062 00000 n -0000076563 00000 n -0000663818 00000 n -0000001120 00000 n -0000001162 00000 n -0000079535 00000 n -0000663694 00000 n -0000001215 00000 n -0000001260 00000 n -0000079660 00000 n -0000663633 00000 n -0000001318 00000 n -0000001355 00000 n -0000079785 00000 n -0000663559 00000 n -0000001408 00000 n -0000001463 00000 n -0000082713 00000 n -0000663434 00000 n -0000001509 00000 n -0000001556 00000 n -0000082838 00000 n -0000663360 00000 n -0000001604 00000 n -0000001648 00000 n -0000082963 00000 n -0000663273 00000 n -0000001696 00000 n -0000001735 00000 n -0000083088 00000 n -0000663186 00000 n -0000001783 00000 n -0000001825 00000 n -0000083212 00000 n -0000663099 00000 n -0000001873 00000 n -0000001936 00000 n -0000084298 00000 n -0000663025 00000 n -0000001984 00000 n -0000002034 00000 n -0000086008 00000 n -0000662897 00000 n -0000002080 00000 n -0000002126 00000 n -0000086132 00000 n -0000662784 00000 n -0000002174 00000 n -0000002218 00000 n -0000086257 00000 n -0000662708 00000 n -0000002271 00000 n -0000002323 00000 n -0000086382 00000 n -0000662631 00000 n -0000002377 00000 n -0000002436 00000 n -0000088910 00000 n -0000662540 00000 n -0000002485 00000 n -0000002523 00000 n -0000089162 00000 n -0000662423 00000 n -0000002572 00000 n -0000002618 00000 n -0000089288 00000 n -0000662305 00000 n -0000002672 00000 n -0000002739 00000 n -0000092495 00000 n -0000662226 00000 n -0000002798 00000 n -0000002842 00000 n -0000092621 00000 n -0000662147 00000 n -0000002901 00000 n -0000002949 00000 n -0000102950 00000 n -0000662068 00000 n -0000003003 00000 n -0000003036 00000 n -0000107881 00000 n -0000661936 00000 n -0000003083 00000 n -0000003126 00000 n -0000108007 00000 n -0000661857 00000 n -0000003175 00000 n -0000003205 00000 n -0000108133 00000 n -0000661725 00000 n -0000003254 00000 n -0000003292 00000 n -0000108259 00000 n -0000661660 00000 n -0000003346 00000 n -0000003388 00000 n -0000112550 00000 n -0000661567 00000 n -0000003437 00000 n -0000003496 00000 n -0000112677 00000 n -0000661435 00000 n -0000003545 00000 n -0000003578 00000 n -0000112806 00000 n -0000661370 00000 n -0000003632 00000 n -0000003681 00000 n -0000120178 00000 n -0000661238 00000 n -0000003730 00000 n -0000003758 00000 n -0000120305 00000 n -0000661120 00000 n -0000003812 00000 n -0000003881 00000 n -0000120434 00000 n -0000661041 00000 n -0000003940 00000 n -0000003988 00000 n -0000123309 00000 n -0000660962 00000 n -0000004047 00000 n -0000004092 00000 n -0000123438 00000 n -0000660869 00000 n -0000004146 00000 n -0000004214 00000 n -0000123567 00000 n -0000660776 00000 n -0000004268 00000 n -0000004338 00000 n -0000123696 00000 n -0000660683 00000 n -0000004392 00000 n -0000004455 00000 n -0000123824 00000 n -0000660590 00000 n -0000004509 00000 n -0000004564 00000 n -0000127470 00000 n -0000660511 00000 n -0000004618 00000 n -0000004650 00000 n -0000127599 00000 n -0000660418 00000 n -0000004699 00000 n -0000004727 00000 n -0000127728 00000 n -0000660325 00000 n -0000004776 00000 n -0000004808 00000 n -0000131334 00000 n -0000660193 00000 n -0000004857 00000 n -0000004887 00000 n -0000131463 00000 n -0000660114 00000 n -0000004941 00000 n -0000004982 00000 n -0000131591 00000 n -0000660021 00000 n -0000005036 00000 n -0000005078 00000 n -0000135033 00000 n -0000659942 00000 n -0000005132 00000 n -0000005177 00000 n -0000138107 00000 n -0000659824 00000 n -0000005226 00000 n -0000005272 00000 n -0000138236 00000 n -0000659745 00000 n -0000005326 00000 n -0000005386 00000 n -0000138364 00000 n -0000659666 00000 n -0000005440 00000 n -0000005509 00000 n -0000140844 00000 n -0000659533 00000 n -0000005556 00000 n -0000005609 00000 n -0000140973 00000 n -0000659454 00000 n -0000005658 00000 n -0000005714 00000 n -0000141102 00000 n -0000659375 00000 n -0000005763 00000 n -0000005812 00000 n -0000145286 00000 n -0000659242 00000 n -0000005859 00000 n -0000005911 00000 n -0000145415 00000 n -0000659124 00000 n -0000005960 00000 n -0000006011 00000 n -0000149682 00000 n -0000659006 00000 n -0000006065 00000 n -0000006110 00000 n -0000149811 00000 n -0000658927 00000 n -0000006169 00000 n -0000006203 00000 n -0000149940 00000 n -0000658848 00000 n -0000006262 00000 n -0000006310 00000 n -0000153288 00000 n -0000658730 00000 n -0000006364 00000 n -0000006404 00000 n -0000153417 00000 n -0000658651 00000 n -0000006463 00000 n -0000006497 00000 n -0000153546 00000 n -0000658572 00000 n -0000006556 00000 n -0000006604 00000 n -0000157451 00000 n -0000658439 00000 n -0000006653 00000 n -0000006703 00000 n -0000161073 00000 n -0000658360 00000 n -0000006757 00000 n -0000006804 00000 n -0000161202 00000 n -0000658267 00000 n -0000006858 00000 n -0000006918 00000 n -0000161459 00000 n -0000658174 00000 n -0000006972 00000 n -0000007024 00000 n -0000161588 00000 n -0000658081 00000 n -0000007078 00000 n -0000007143 00000 n -0000166242 00000 n -0000657988 00000 n -0000007197 00000 n -0000007248 00000 n -0000166371 00000 n -0000657895 00000 n -0000007302 00000 n -0000007366 00000 n -0000166500 00000 n -0000657802 00000 n -0000007420 00000 n -0000007467 00000 n -0000166629 00000 n -0000657709 00000 n -0000007521 00000 n -0000007581 00000 n -0000169977 00000 n -0000657616 00000 n -0000007635 00000 n -0000007686 00000 n -0000170106 00000 n -0000657484 00000 n -0000007741 00000 n -0000007806 00000 n -0000174741 00000 n -0000657405 00000 n -0000007866 00000 n -0000007913 00000 n -0000180920 00000 n -0000657326 00000 n -0000007973 00000 n -0000008021 00000 n -0000184667 00000 n -0000657233 00000 n -0000008076 00000 n -0000008126 00000 n -0000184796 00000 n -0000657140 00000 n -0000008181 00000 n -0000008244 00000 n -0000186525 00000 n -0000657047 00000 n -0000008299 00000 n -0000008351 00000 n -0000186654 00000 n -0000656954 00000 n -0000008406 00000 n -0000008471 00000 n -0000186783 00000 n -0000656861 00000 n -0000008526 00000 n -0000008578 00000 n -0000190468 00000 n -0000656728 00000 n -0000008633 00000 n -0000008698 00000 n -0000198661 00000 n -0000656649 00000 n -0000008758 00000 n -0000008802 00000 n -0000216022 00000 n -0000656556 00000 n -0000008862 00000 n -0000008901 00000 n -0000220238 00000 n -0000656463 00000 n -0000008961 00000 n -0000009008 00000 n -0000220366 00000 n -0000656370 00000 n -0000009068 00000 n -0000009111 00000 n -0000224175 00000 n -0000656277 00000 n -0000009171 00000 n -0000009210 00000 n -0000227147 00000 n -0000656184 00000 n -0000009270 00000 n -0000009312 00000 n -0000227276 00000 n -0000656091 00000 n -0000009372 00000 n -0000009415 00000 n -0000234515 00000 n -0000655998 00000 n -0000009475 00000 n -0000009522 00000 n -0000238765 00000 n -0000655905 00000 n -0000009582 00000 n -0000009643 00000 n -0000238894 00000 n -0000655812 00000 n -0000009704 00000 n -0000009756 00000 n -0000242265 00000 n -0000655719 00000 n -0000009817 00000 n -0000009870 00000 n -0000242394 00000 n -0000655626 00000 n -0000009931 00000 n -0000009969 00000 n -0000246293 00000 n -0000655533 00000 n -0000010030 00000 n -0000010082 00000 n -0000249718 00000 n -0000655440 00000 n -0000010143 00000 n -0000010187 00000 n -0000249976 00000 n -0000655347 00000 n -0000010248 00000 n -0000010284 00000 n -0000258745 00000 n -0000655254 00000 n -0000010345 00000 n -0000010408 00000 n -0000258874 00000 n -0000655161 00000 n -0000010469 00000 n -0000010519 00000 n -0000264226 00000 n -0000655068 00000 n -0000010580 00000 n -0000010629 00000 n -0000268214 00000 n -0000654989 00000 n -0000010690 00000 n -0000010746 00000 n -0000268342 00000 n -0000654896 00000 n -0000010801 00000 n -0000010852 00000 n -0000272260 00000 n -0000654803 00000 n -0000010907 00000 n -0000010971 00000 n -0000276289 00000 n -0000654710 00000 n -0000011026 00000 n -0000011083 00000 n -0000276417 00000 n -0000654617 00000 n -0000011138 00000 n -0000011208 00000 n -0000276543 00000 n -0000654524 00000 n -0000011263 00000 n -0000011312 00000 n -0000279969 00000 n -0000654431 00000 n -0000011367 00000 n -0000011429 00000 n -0000281613 00000 n -0000654338 00000 n -0000011484 00000 n -0000011533 00000 n -0000285546 00000 n -0000654220 00000 n -0000011588 00000 n -0000011650 00000 n -0000285675 00000 n -0000654141 00000 n -0000011710 00000 n -0000011749 00000 n -0000289728 00000 n -0000654048 00000 n -0000011809 00000 n -0000011843 00000 n -0000295345 00000 n -0000653955 00000 n -0000011903 00000 n -0000011944 00000 n -0000305746 00000 n -0000653876 00000 n -0000012004 00000 n -0000012056 00000 n -0000309844 00000 n -0000653758 00000 n -0000012105 00000 n -0000012138 00000 n -0000309972 00000 n -0000653640 00000 n -0000012192 00000 n -0000012264 00000 n -0000310100 00000 n -0000653561 00000 n -0000012323 00000 n -0000012367 00000 n -0000317603 00000 n -0000653482 00000 n -0000012426 00000 n -0000012479 00000 n -0000321290 00000 n -0000653389 00000 n -0000012533 00000 n -0000012583 00000 n -0000324743 00000 n -0000653296 00000 n -0000012637 00000 n -0000012675 00000 n -0000325002 00000 n -0000653203 00000 n -0000012729 00000 n -0000012778 00000 n -0000325260 00000 n -0000653071 00000 n -0000012832 00000 n -0000012884 00000 n -0000328115 00000 n -0000652992 00000 n -0000012943 00000 n -0000012995 00000 n -0000328244 00000 n -0000652899 00000 n -0000013054 00000 n -0000013107 00000 n -0000328373 00000 n -0000652820 00000 n -0000013166 00000 n -0000013215 00000 n -0000328502 00000 n -0000652727 00000 n -0000013269 00000 n -0000013349 00000 n -0000332842 00000 n -0000652648 00000 n -0000013403 00000 n -0000013452 00000 n -0000335118 00000 n -0000652515 00000 n -0000013499 00000 n -0000013551 00000 n -0000335247 00000 n -0000652436 00000 n -0000013600 00000 n -0000013644 00000 n -0000339340 00000 n -0000652304 00000 n -0000013693 00000 n -0000013734 00000 n -0000339469 00000 n -0000652225 00000 n -0000013788 00000 n -0000013836 00000 n -0000339598 00000 n -0000652146 00000 n -0000013890 00000 n -0000013941 00000 n -0000339727 00000 n -0000652067 00000 n -0000013990 00000 n -0000014037 00000 n -0000343990 00000 n -0000651934 00000 n -0000014084 00000 n -0000014121 00000 n -0000344119 00000 n -0000651816 00000 n -0000014170 00000 n -0000014209 00000 n -0000344248 00000 n -0000651751 00000 n -0000014263 00000 n -0000014341 00000 n -0000344377 00000 n -0000651658 00000 n -0000014390 00000 n -0000014457 00000 n -0000344506 00000 n -0000651579 00000 n -0000014506 00000 n -0000014551 00000 n -0000347945 00000 n -0000651446 00000 n -0000014599 00000 n -0000014631 00000 n -0000348074 00000 n -0000651328 00000 n -0000014680 00000 n -0000014719 00000 n -0000348203 00000 n -0000651263 00000 n -0000014773 00000 n -0000014834 00000 n -0000351968 00000 n -0000651131 00000 n -0000014883 00000 n -0000014940 00000 n -0000352097 00000 n -0000651066 00000 n -0000014994 00000 n -0000015043 00000 n -0000352226 00000 n -0000650948 00000 n -0000015092 00000 n -0000015154 00000 n -0000352355 00000 n -0000650869 00000 n -0000015208 00000 n -0000015263 00000 n -0000376379 00000 n -0000650776 00000 n -0000015317 00000 n -0000015358 00000 n -0000376508 00000 n -0000650697 00000 n -0000015412 00000 n -0000015464 00000 n -0000379211 00000 n -0000650577 00000 n -0000015512 00000 n -0000015546 00000 n -0000379340 00000 n -0000650498 00000 n -0000015595 00000 n -0000015622 00000 n -0000397280 00000 n -0000650405 00000 n -0000015671 00000 n -0000015699 00000 n -0000404815 00000 n -0000650312 00000 n -0000015748 00000 n -0000015785 00000 n -0000411129 00000 n -0000650219 00000 n -0000015834 00000 n -0000015873 00000 n -0000420651 00000 n -0000650126 00000 n -0000015922 00000 n -0000015961 00000 n -0000423538 00000 n -0000650033 00000 n -0000016010 00000 n -0000016049 00000 n -0000429911 00000 n -0000649940 00000 n -0000016098 00000 n -0000016127 00000 n -0000439507 00000 n -0000649847 00000 n -0000016176 00000 n -0000016204 00000 n -0000442707 00000 n -0000649754 00000 n -0000016253 00000 n -0000016286 00000 n -0000448703 00000 n -0000649675 00000 n -0000016336 00000 n -0000016373 00000 n -0000016742 00000 n -0000016864 00000 n -0000024693 00000 n -0000016426 00000 n -0000024567 00000 n -0000024630 00000 n -0000645556 00000 n -0000619613 00000 n -0000645382 00000 n -0000646581 00000 n -0000019727 00000 n -0000019944 00000 n -0000020013 00000 n -0000020082 00000 n -0000020150 00000 n -0000020218 00000 n -0000020267 00000 n -0000020314 00000 n -0000020647 00000 n -0000020669 00000 n -0000020837 00000 n -0000021002 00000 n -0000021171 00000 n -0000021350 00000 n -0000021659 00000 n -0000021819 00000 n -0000026052 00000 n -0000025867 00000 n -0000024793 00000 n -0000025989 00000 n -0000618401 00000 n -0000591922 00000 n -0000618227 00000 n -0000591237 00000 n -0000589092 00000 n -0000591073 00000 n -0000037758 00000 n -0000029108 00000 n -0000026137 00000 n -0000037632 00000 n -0000037695 00000 n -0000029642 00000 n -0000029796 00000 n -0000029953 00000 n -0000030110 00000 n -0000030266 00000 n -0000030423 00000 n -0000030585 00000 n -0000030746 00000 n -0000030907 00000 n -0000031069 00000 n -0000031236 00000 n -0000031403 00000 n -0000031568 00000 n -0000031730 00000 n -0000031896 00000 n -0000032057 00000 n -0000032212 00000 n -0000032369 00000 n -0000032525 00000 n -0000032682 00000 n -0000032839 00000 n -0000032996 00000 n -0000033150 00000 n -0000033306 00000 n -0000033468 00000 n -0000033630 00000 n -0000033786 00000 n -0000033943 00000 n -0000034105 00000 n -0000034272 00000 n -0000034438 00000 n -0000034599 00000 n -0000034754 00000 n -0000034911 00000 n -0000035068 00000 n -0000035230 00000 n -0000035387 00000 n -0000035544 00000 n -0000035706 00000 n -0000035863 00000 n -0000036025 00000 n -0000036192 00000 n -0000036358 00000 n -0000036520 00000 n -0000036682 00000 n -0000036844 00000 n -0000037005 00000 n -0000037167 00000 n -0000037322 00000 n -0000037477 00000 n -0000051127 00000 n -0000041075 00000 n -0000037843 00000 n -0000051064 00000 n -0000588541 00000 n -0000571460 00000 n -0000588357 00000 n -0000041665 00000 n -0000041828 00000 n -0000041990 00000 n -0000042153 00000 n -0000042311 00000 n -0000042474 00000 n -0000042637 00000 n -0000042792 00000 n -0000042950 00000 n -0000043108 00000 n -0000043264 00000 n -0000043422 00000 n -0000043585 00000 n -0000043753 00000 n -0000043921 00000 n -0000044084 00000 n -0000044252 00000 n -0000044420 00000 n -0000044578 00000 n -0000044741 00000 n -0000044904 00000 n -0000045066 00000 n -0000045228 00000 n -0000045391 00000 n -0000045553 00000 n -0000045715 00000 n -0000045878 00000 n -0000046041 00000 n -0000046204 00000 n -0000046373 00000 n -0000046542 00000 n -0000046706 00000 n -0000046869 00000 n -0000047033 00000 n -0000047197 00000 n -0000047360 00000 n -0000047524 00000 n -0000047693 00000 n -0000047862 00000 n -0000048031 00000 n -0000048200 00000 n -0000048369 00000 n -0000048538 00000 n -0000048707 00000 n -0000048876 00000 n -0000049045 00000 n -0000049215 00000 n -0000049385 00000 n -0000049555 00000 n -0000049724 00000 n -0000049894 00000 n -0000050064 00000 n -0000050234 00000 n -0000050403 00000 n -0000050573 00000 n -0000050741 00000 n -0000050902 00000 n -0000063950 00000 n -0000054658 00000 n -0000051225 00000 n -0000063887 00000 n -0000055224 00000 n -0000055387 00000 n -0000055550 00000 n -0000055713 00000 n -0000055876 00000 n -0000056038 00000 n -0000056201 00000 n -0000056369 00000 n -0000056537 00000 n -0000056704 00000 n -0000056872 00000 n -0000057028 00000 n -0000057190 00000 n -0000057357 00000 n -0000057524 00000 n -0000057686 00000 n -0000057848 00000 n -0000058010 00000 n -0000058172 00000 n -0000058339 00000 n -0000058506 00000 n -0000058673 00000 n -0000058835 00000 n -0000058997 00000 n -0000059152 00000 n -0000059307 00000 n -0000059464 00000 n -0000059626 00000 n -0000059788 00000 n -0000059944 00000 n -0000060099 00000 n -0000060256 00000 n -0000060418 00000 n -0000060574 00000 n -0000060731 00000 n -0000060887 00000 n -0000061044 00000 n -0000061206 00000 n -0000061363 00000 n -0000061525 00000 n -0000061682 00000 n -0000061843 00000 n -0000062005 00000 n -0000062167 00000 n -0000062322 00000 n -0000062478 00000 n -0000062635 00000 n -0000062792 00000 n -0000062949 00000 n -0000063105 00000 n -0000063262 00000 n -0000063419 00000 n -0000570494 00000 n -0000550527 00000 n -0000570321 00000 n -0000063576 00000 n -0000063731 00000 n -0000064395 00000 n -0000064210 00000 n -0000064061 00000 n -0000064332 00000 n -0000067523 00000 n -0000066713 00000 n -0000064436 00000 n -0000066835 00000 n -0000066959 00000 n -0000067084 00000 n -0000067209 00000 n -0000549638 00000 n -0000528306 00000 n -0000549464 00000 n -0000067334 00000 n -0000067397 00000 n -0000067460 00000 n -0000527539 00000 n -0000510131 00000 n -0000527366 00000 n -0000646699 00000 n -0000072034 00000 n -0000070852 00000 n -0000067647 00000 n -0000071346 00000 n -0000071409 00000 n -0000071472 00000 n -0000071597 00000 n -0000071722 00000 n -0000071847 00000 n -0000071002 00000 n -0000071195 00000 n -0000071972 00000 n -0000310036 00000 n -0000352419 00000 n -0000076688 00000 n -0000075652 00000 n -0000072158 00000 n -0000076125 00000 n -0000076250 00000 n -0000075802 00000 n -0000075964 00000 n -0000076375 00000 n -0000076500 00000 n -0000076625 00000 n -0000092558 00000 n -0000079910 00000 n -0000079350 00000 n -0000076812 00000 n -0000079472 00000 n -0000079597 00000 n -0000079722 00000 n -0000079847 00000 n -0000083337 00000 n -0000082196 00000 n -0000080021 00000 n -0000082650 00000 n -0000082775 00000 n -0000082900 00000 n -0000083025 00000 n -0000083150 00000 n -0000082346 00000 n -0000082498 00000 n -0000083274 00000 n -0000268278 00000 n -0000084423 00000 n -0000084113 00000 n -0000083422 00000 n -0000084235 00000 n -0000084360 00000 n -0000086508 00000 n -0000085823 00000 n -0000084521 00000 n -0000085945 00000 n -0000086070 00000 n -0000086194 00000 n -0000086319 00000 n -0000086445 00000 n -0000646817 00000 n -0000089413 00000 n -0000088545 00000 n -0000086606 00000 n -0000088847 00000 n -0000088973 00000 n -0000089036 00000 n -0000089099 00000 n -0000088687 00000 n -0000089225 00000 n -0000089351 00000 n -0000249782 00000 n -0000092747 00000 n -0000092310 00000 n -0000089524 00000 n -0000092432 00000 n -0000509475 00000 n -0000497890 00000 n -0000509298 00000 n -0000092684 00000 n -0000096532 00000 n -0000096347 00000 n -0000092871 00000 n -0000096469 00000 n -0000497355 00000 n -0000487841 00000 n -0000497178 00000 n -0000100916 00000 n -0000100525 00000 n -0000096695 00000 n -0000100853 00000 n -0000100667 00000 n -0000161651 00000 n -0000103202 00000 n -0000102765 00000 n -0000101053 00000 n -0000102887 00000 n -0000103013 00000 n -0000103076 00000 n -0000103139 00000 n -0000105854 00000 n -0000108386 00000 n -0000105703 00000 n -0000103326 00000 n -0000107818 00000 n -0000107944 00000 n -0000108070 00000 n -0000107496 00000 n -0000107657 00000 n -0000486982 00000 n -0000477610 00000 n -0000486810 00000 n -0000477048 00000 n -0000467964 00000 n -0000476875 00000 n -0000108196 00000 n -0000108322 00000 n -0000646935 00000 n -0000107325 00000 n -0000107383 00000 n -0000107473 00000 n -0000198725 00000 n -0000227340 00000 n -0000112935 00000 n -0000112001 00000 n -0000108538 00000 n -0000112485 00000 n -0000112613 00000 n -0000112157 00000 n -0000112323 00000 n -0000112741 00000 n -0000112870 00000 n -0000356445 00000 n -0000116427 00000 n -0000116047 00000 n -0000113086 00000 n -0000116362 00000 n -0000116194 00000 n -0000117661 00000 n -0000117470 00000 n -0000116552 00000 n -0000117596 00000 n -0000120563 00000 n -0000119987 00000 n -0000117760 00000 n -0000120113 00000 n -0000120240 00000 n -0000120369 00000 n -0000120498 00000 n -0000123953 00000 n -0000123118 00000 n -0000120701 00000 n -0000123244 00000 n -0000123373 00000 n -0000123502 00000 n -0000123631 00000 n -0000123759 00000 n -0000123888 00000 n -0000127856 00000 n -0000127088 00000 n -0000124091 00000 n -0000127405 00000 n -0000127235 00000 n -0000127534 00000 n -0000127663 00000 n -0000127792 00000 n -0000647059 00000 n -0000305810 00000 n -0000131720 00000 n -0000131143 00000 n -0000127968 00000 n -0000131269 00000 n -0000131398 00000 n -0000131526 00000 n -0000131655 00000 n -0000135162 00000 n -0000134842 00000 n -0000131858 00000 n -0000134968 00000 n -0000135097 00000 n -0000138493 00000 n -0000137734 00000 n -0000135274 00000 n -0000138042 00000 n -0000138171 00000 n -0000137881 00000 n -0000138300 00000 n -0000138428 00000 n -0000352161 00000 n -0000141231 00000 n -0000140653 00000 n -0000138659 00000 n -0000140779 00000 n -0000140908 00000 n -0000141037 00000 n -0000141166 00000 n -0000141671 00000 n -0000141480 00000 n -0000141330 00000 n -0000141606 00000 n -0000145673 00000 n -0000144907 00000 n -0000141713 00000 n -0000145221 00000 n -0000145350 00000 n -0000145478 00000 n -0000145543 00000 n -0000145608 00000 n -0000145054 00000 n -0000647184 00000 n -0000149746 00000 n -0000150069 00000 n -0000149491 00000 n -0000145772 00000 n -0000149617 00000 n -0000149875 00000 n -0000150004 00000 n -0000153675 00000 n -0000153097 00000 n -0000150207 00000 n -0000153223 00000 n -0000153352 00000 n -0000153481 00000 n -0000153610 00000 n -0000156460 00000 n -0000157710 00000 n -0000156334 00000 n -0000153800 00000 n -0000157386 00000 n -0000157515 00000 n -0000157580 00000 n -0000157645 00000 n -0000161715 00000 n -0000160882 00000 n -0000157864 00000 n -0000161008 00000 n -0000161137 00000 n -0000161264 00000 n -0000161329 00000 n -0000161394 00000 n -0000161523 00000 n -0000166757 00000 n -0000165359 00000 n -0000161827 00000 n -0000166177 00000 n -0000165533 00000 n -0000165684 00000 n -0000166306 00000 n -0000166435 00000 n -0000166564 00000 n -0000166693 00000 n -0000165843 00000 n -0000165993 00000 n -0000454156 00000 n -0000170235 00000 n -0000169578 00000 n -0000166895 00000 n -0000169912 00000 n -0000169725 00000 n -0000170041 00000 n -0000170170 00000 n -0000647309 00000 n -0000174870 00000 n -0000174550 00000 n -0000170360 00000 n -0000174676 00000 n -0000174805 00000 n -0000178034 00000 n -0000177655 00000 n -0000174995 00000 n -0000177969 00000 n -0000177802 00000 n -0000180984 00000 n -0000181178 00000 n -0000180729 00000 n -0000178146 00000 n -0000180855 00000 n -0000181049 00000 n -0000181113 00000 n -0000184925 00000 n -0000184141 00000 n -0000181290 00000 n -0000184602 00000 n -0000184731 00000 n -0000184860 00000 n -0000184297 00000 n -0000184449 00000 n -0000186912 00000 n -0000186334 00000 n -0000185037 00000 n -0000186460 00000 n -0000186589 00000 n -0000186718 00000 n -0000186847 00000 n -0000188482 00000 n -0000188291 00000 n -0000187024 00000 n -0000188417 00000 n -0000647434 00000 n -0000190597 00000 n -0000190277 00000 n -0000188581 00000 n -0000190403 00000 n -0000190532 00000 n -0000194902 00000 n -0000194534 00000 n -0000190709 00000 n -0000194837 00000 n -0000194681 00000 n -0000264290 00000 n -0000198790 00000 n -0000198470 00000 n -0000195027 00000 n -0000198596 00000 n -0000202882 00000 n -0000202386 00000 n -0000198915 00000 n -0000202687 00000 n -0000202752 00000 n -0000202817 00000 n -0000202533 00000 n -0000208035 00000 n -0000206902 00000 n -0000203007 00000 n -0000207970 00000 n -0000207085 00000 n -0000207241 00000 n -0000207426 00000 n -0000207600 00000 n -0000207785 00000 n -0000272323 00000 n -0000212172 00000 n -0000211981 00000 n -0000208227 00000 n -0000212107 00000 n -0000647559 00000 n -0000216151 00000 n -0000215831 00000 n -0000212297 00000 n -0000215957 00000 n -0000216086 00000 n -0000220494 00000 n -0000219505 00000 n -0000216263 00000 n -0000220173 00000 n -0000219670 00000 n -0000220302 00000 n -0000220430 00000 n -0000219839 00000 n -0000220005 00000 n -0000281677 00000 n -0000339791 00000 n -0000224304 00000 n -0000223794 00000 n -0000220660 00000 n -0000224110 00000 n -0000223941 00000 n -0000224239 00000 n -0000227405 00000 n -0000226956 00000 n -0000224429 00000 n -0000227082 00000 n -0000227211 00000 n -0000231466 00000 n -0000231275 00000 n -0000227571 00000 n -0000231401 00000 n -0000234642 00000 n -0000234324 00000 n -0000231578 00000 n -0000234450 00000 n -0000234579 00000 n -0000647684 00000 n -0000239021 00000 n -0000238215 00000 n -0000234795 00000 n -0000238700 00000 n -0000238829 00000 n -0000238371 00000 n -0000238957 00000 n -0000238545 00000 n -0000242523 00000 n -0000242074 00000 n -0000239133 00000 n -0000242200 00000 n -0000242329 00000 n -0000242458 00000 n -0000246422 00000 n -0000245755 00000 n -0000242676 00000 n -0000246228 00000 n -0000246357 00000 n -0000245911 00000 n -0000246073 00000 n -0000250105 00000 n -0000249337 00000 n -0000246588 00000 n -0000249653 00000 n -0000249484 00000 n -0000249846 00000 n -0000249911 00000 n -0000250040 00000 n -0000254580 00000 n -0000254034 00000 n -0000250284 00000 n -0000254515 00000 n -0000254190 00000 n -0000254352 00000 n -0000332906 00000 n -0000259003 00000 n -0000258364 00000 n -0000254746 00000 n -0000258680 00000 n -0000467609 00000 n -0000465612 00000 n -0000467444 00000 n -0000258809 00000 n -0000258511 00000 n -0000258938 00000 n -0000647809 00000 n -0000276607 00000 n -0000261168 00000 n -0000260977 00000 n -0000259129 00000 n -0000261103 00000 n -0000264485 00000 n -0000264035 00000 n -0000261280 00000 n -0000264161 00000 n -0000264355 00000 n -0000264420 00000 n -0000268471 00000 n -0000268023 00000 n -0000264625 00000 n -0000268149 00000 n -0000268406 00000 n -0000272388 00000 n -0000272069 00000 n -0000268583 00000 n -0000272195 00000 n -0000276671 00000 n -0000275594 00000 n -0000272500 00000 n -0000276224 00000 n -0000275759 00000 n -0000275910 00000 n -0000276353 00000 n -0000276481 00000 n -0000276070 00000 n -0000280097 00000 n -0000279778 00000 n -0000276783 00000 n -0000279904 00000 n -0000280033 00000 n -0000647934 00000 n -0000281742 00000 n -0000281422 00000 n -0000280209 00000 n -0000281548 00000 n -0000283200 00000 n -0000283009 00000 n -0000281854 00000 n -0000283135 00000 n -0000285934 00000 n -0000285355 00000 n -0000283299 00000 n -0000285481 00000 n -0000285610 00000 n -0000285739 00000 n -0000285804 00000 n -0000285869 00000 n -0000289857 00000 n -0000289537 00000 n -0000286046 00000 n -0000289663 00000 n -0000289792 00000 n -0000295474 00000 n -0000293080 00000 n -0000289969 00000 n -0000295280 00000 n -0000295409 00000 n -0000293326 00000 n -0000293488 00000 n -0000293650 00000 n -0000293811 00000 n -0000293971 00000 n -0000294142 00000 n -0000294304 00000 n -0000294466 00000 n -0000294628 00000 n -0000294791 00000 n -0000294954 00000 n -0000295117 00000 n -0000300692 00000 n -0000298631 00000 n -0000295599 00000 n -0000300627 00000 n -0000298868 00000 n -0000299030 00000 n -0000299192 00000 n -0000299353 00000 n -0000299514 00000 n -0000299676 00000 n -0000299839 00000 n -0000299993 00000 n -0000300147 00000 n -0000300309 00000 n -0000300469 00000 n -0000648059 00000 n -0000306003 00000 n -0000304030 00000 n -0000300817 00000 n -0000305681 00000 n -0000304249 00000 n -0000304411 00000 n -0000304573 00000 n -0000304734 00000 n -0000304896 00000 n -0000305050 00000 n -0000305211 00000 n -0000305365 00000 n -0000305527 00000 n -0000305875 00000 n -0000305939 00000 n -0000310358 00000 n -0000309291 00000 n -0000306128 00000 n -0000309779 00000 n -0000309907 00000 n -0000310164 00000 n -0000309447 00000 n -0000309617 00000 n -0000310229 00000 n -0000310294 00000 n -0000313806 00000 n -0000313485 00000 n -0000310483 00000 n -0000313611 00000 n -0000313676 00000 n -0000313741 00000 n -0000317732 00000 n -0000317282 00000 n -0000313905 00000 n -0000317408 00000 n -0000317473 00000 n -0000317538 00000 n -0000317667 00000 n -0000321548 00000 n -0000320840 00000 n -0000317857 00000 n -0000320966 00000 n -0000321031 00000 n -0000321096 00000 n -0000321161 00000 n -0000321226 00000 n -0000321354 00000 n -0000321418 00000 n -0000321483 00000 n -0000325389 00000 n -0000324552 00000 n -0000321673 00000 n -0000324678 00000 n -0000324807 00000 n -0000324872 00000 n -0000324937 00000 n -0000325066 00000 n -0000325131 00000 n -0000325196 00000 n -0000325324 00000 n -0000648184 00000 n -0000328630 00000 n -0000327924 00000 n -0000325568 00000 n -0000328050 00000 n -0000328179 00000 n -0000328308 00000 n -0000328437 00000 n -0000328566 00000 n -0000332970 00000 n -0000332521 00000 n -0000328823 00000 n -0000332647 00000 n -0000332712 00000 n -0000332777 00000 n -0000333436 00000 n -0000333245 00000 n -0000333095 00000 n -0000333371 00000 n -0000335376 00000 n -0000334927 00000 n -0000333478 00000 n -0000335053 00000 n -0000335182 00000 n -0000335311 00000 n -0000339856 00000 n -0000338912 00000 n -0000335488 00000 n -0000339275 00000 n -0000465291 00000 n -0000456078 00000 n -0000465105 00000 n -0000339059 00000 n -0000339404 00000 n -0000339533 00000 n -0000339662 00000 n -0000340894 00000 n -0000340703 00000 n -0000340089 00000 n -0000340829 00000 n -0000648309 00000 n -0000341321 00000 n -0000341130 00000 n -0000340980 00000 n -0000341256 00000 n -0000344634 00000 n -0000343408 00000 n -0000341363 00000 n -0000343925 00000 n -0000344054 00000 n -0000344183 00000 n -0000344312 00000 n -0000344441 00000 n -0000344570 00000 n -0000343564 00000 n -0000343736 00000 n -0000345088 00000 n -0000344897 00000 n -0000344747 00000 n -0000345023 00000 n -0000348332 00000 n -0000347754 00000 n -0000345130 00000 n -0000347880 00000 n -0000348009 00000 n -0000348138 00000 n -0000348267 00000 n -0000352611 00000 n -0000351392 00000 n -0000348418 00000 n -0000351903 00000 n -0000352032 00000 n -0000352290 00000 n -0000351548 00000 n -0000351727 00000 n -0000352483 00000 n -0000352547 00000 n -0000359497 00000 n -0000355669 00000 n -0000352763 00000 n -0000355795 00000 n -0000355860 00000 n -0000355925 00000 n -0000355990 00000 n -0000356055 00000 n -0000356120 00000 n -0000356185 00000 n -0000356250 00000 n -0000356315 00000 n -0000356380 00000 n -0000356510 00000 n -0000356575 00000 n -0000356640 00000 n -0000356705 00000 n -0000356770 00000 n -0000356835 00000 n -0000356900 00000 n -0000356965 00000 n -0000357030 00000 n -0000357095 00000 n -0000357160 00000 n -0000357225 00000 n -0000357290 00000 n -0000357355 00000 n -0000357420 00000 n -0000357485 00000 n -0000357550 00000 n -0000357615 00000 n -0000357680 00000 n -0000357745 00000 n -0000357810 00000 n -0000357875 00000 n -0000357940 00000 n -0000358005 00000 n -0000358069 00000 n -0000358134 00000 n -0000358199 00000 n -0000358264 00000 n -0000358329 00000 n -0000358394 00000 n -0000358459 00000 n -0000358524 00000 n -0000358589 00000 n -0000358654 00000 n -0000358719 00000 n -0000358784 00000 n -0000358849 00000 n -0000358914 00000 n -0000358979 00000 n -0000359044 00000 n -0000359109 00000 n -0000359174 00000 n -0000359239 00000 n -0000359304 00000 n -0000359369 00000 n -0000359433 00000 n -0000648434 00000 n -0000366143 00000 n -0000362579 00000 n -0000359609 00000 n -0000362705 00000 n -0000362770 00000 n -0000362835 00000 n -0000362900 00000 n -0000362965 00000 n -0000363030 00000 n -0000363095 00000 n -0000363160 00000 n -0000363225 00000 n -0000363290 00000 n -0000363355 00000 n -0000363420 00000 n -0000363484 00000 n -0000363549 00000 n -0000363614 00000 n -0000363679 00000 n -0000363744 00000 n -0000363809 00000 n -0000363874 00000 n -0000363939 00000 n -0000364004 00000 n -0000364069 00000 n -0000364134 00000 n -0000364199 00000 n -0000364263 00000 n -0000364328 00000 n -0000364393 00000 n -0000364458 00000 n -0000364523 00000 n -0000364588 00000 n -0000364653 00000 n -0000364718 00000 n -0000364783 00000 n -0000364848 00000 n -0000364913 00000 n -0000364978 00000 n -0000365043 00000 n -0000365108 00000 n -0000365173 00000 n -0000365238 00000 n -0000365302 00000 n -0000365366 00000 n -0000365430 00000 n -0000365495 00000 n -0000365560 00000 n -0000365625 00000 n -0000365690 00000 n -0000365755 00000 n -0000365820 00000 n -0000365885 00000 n -0000365950 00000 n -0000366015 00000 n -0000366079 00000 n -0000372318 00000 n -0000368880 00000 n -0000366255 00000 n -0000369006 00000 n -0000369071 00000 n -0000369136 00000 n -0000369201 00000 n -0000369266 00000 n -0000369331 00000 n -0000369396 00000 n -0000369461 00000 n -0000369526 00000 n -0000369591 00000 n -0000369656 00000 n -0000369721 00000 n -0000369786 00000 n -0000369851 00000 n -0000369916 00000 n -0000369981 00000 n -0000370046 00000 n -0000370111 00000 n -0000370176 00000 n -0000370241 00000 n -0000370306 00000 n -0000370371 00000 n -0000370436 00000 n -0000370501 00000 n -0000370566 00000 n -0000370631 00000 n -0000370696 00000 n -0000370761 00000 n -0000370826 00000 n -0000370891 00000 n -0000370956 00000 n -0000371021 00000 n -0000371086 00000 n -0000371151 00000 n -0000371215 00000 n -0000371280 00000 n -0000371345 00000 n -0000371410 00000 n -0000371475 00000 n -0000371540 00000 n -0000371605 00000 n -0000371670 00000 n -0000371735 00000 n -0000371800 00000 n -0000371865 00000 n -0000371930 00000 n -0000371995 00000 n -0000372060 00000 n -0000372125 00000 n -0000372190 00000 n -0000372254 00000 n -0000376897 00000 n -0000374633 00000 n -0000372430 00000 n -0000374759 00000 n -0000374824 00000 n -0000374889 00000 n -0000374954 00000 n -0000375019 00000 n -0000375084 00000 n -0000375149 00000 n -0000375214 00000 n -0000375279 00000 n -0000375344 00000 n -0000375409 00000 n -0000375474 00000 n -0000375539 00000 n -0000375604 00000 n -0000375666 00000 n -0000375730 00000 n -0000375795 00000 n -0000375859 00000 n -0000375924 00000 n -0000375989 00000 n -0000376054 00000 n -0000376119 00000 n -0000376184 00000 n -0000376249 00000 n -0000376314 00000 n -0000376443 00000 n -0000376572 00000 n -0000376637 00000 n -0000376702 00000 n -0000376767 00000 n -0000376832 00000 n -0000379664 00000 n -0000379020 00000 n -0000377022 00000 n -0000379146 00000 n -0000379275 00000 n -0000379404 00000 n -0000379469 00000 n -0000379534 00000 n -0000379599 00000 n -0000384149 00000 n -0000383828 00000 n -0000379776 00000 n -0000383954 00000 n -0000384019 00000 n -0000384084 00000 n -0000387400 00000 n -0000387144 00000 n -0000384301 00000 n -0000387270 00000 n -0000387335 00000 n -0000648559 00000 n -0000390650 00000 n -0000390459 00000 n -0000387538 00000 n -0000390585 00000 n -0000394430 00000 n -0000394174 00000 n -0000390775 00000 n -0000394300 00000 n -0000394365 00000 n -0000397604 00000 n -0000396829 00000 n -0000394568 00000 n -0000396955 00000 n -0000397020 00000 n -0000397085 00000 n -0000397150 00000 n -0000397215 00000 n -0000397344 00000 n -0000397409 00000 n -0000397474 00000 n -0000397539 00000 n -0000402075 00000 n -0000401884 00000 n -0000397742 00000 n -0000402010 00000 n -0000405203 00000 n -0000404430 00000 n -0000402213 00000 n -0000404556 00000 n -0000404621 00000 n -0000404686 00000 n -0000404750 00000 n -0000404879 00000 n -0000404944 00000 n -0000405008 00000 n -0000405073 00000 n -0000405138 00000 n -0000408593 00000 n -0000408337 00000 n -0000405341 00000 n -0000408463 00000 n -0000408528 00000 n -0000648684 00000 n -0000411453 00000 n -0000410743 00000 n -0000408731 00000 n -0000410869 00000 n -0000410934 00000 n -0000410999 00000 n -0000411064 00000 n -0000411193 00000 n -0000411258 00000 n -0000411323 00000 n -0000411388 00000 n -0000415132 00000 n -0000414876 00000 n -0000411604 00000 n -0000415002 00000 n -0000415067 00000 n -0000418569 00000 n -0000418313 00000 n -0000415257 00000 n -0000418439 00000 n -0000418504 00000 n -0000421040 00000 n -0000420332 00000 n -0000418707 00000 n -0000420458 00000 n -0000420523 00000 n -0000420588 00000 n -0000420715 00000 n -0000420780 00000 n -0000420845 00000 n -0000420910 00000 n -0000420975 00000 n -0000423926 00000 n -0000423152 00000 n -0000421191 00000 n -0000423278 00000 n -0000423343 00000 n -0000423408 00000 n -0000423473 00000 n -0000423601 00000 n -0000423666 00000 n -0000423731 00000 n -0000423796 00000 n -0000423861 00000 n -0000427282 00000 n -0000427091 00000 n -0000424064 00000 n -0000427217 00000 n -0000648809 00000 n -0000430235 00000 n -0000429525 00000 n -0000427407 00000 n -0000429651 00000 n -0000429716 00000 n -0000429781 00000 n -0000429846 00000 n -0000429975 00000 n -0000430040 00000 n -0000430105 00000 n -0000430170 00000 n -0000433534 00000 n -0000433278 00000 n -0000430386 00000 n -0000433404 00000 n -0000433469 00000 n -0000436418 00000 n -0000436034 00000 n -0000433727 00000 n -0000436160 00000 n -0000436225 00000 n -0000436290 00000 n -0000436354 00000 n -0000439896 00000 n -0000439186 00000 n -0000436650 00000 n -0000439312 00000 n -0000439377 00000 n -0000439442 00000 n -0000439571 00000 n -0000439636 00000 n -0000439701 00000 n -0000439766 00000 n -0000439831 00000 n -0000443031 00000 n -0000442322 00000 n -0000440047 00000 n -0000442448 00000 n -0000442513 00000 n -0000442578 00000 n -0000442642 00000 n -0000442771 00000 n -0000442836 00000 n -0000442901 00000 n -0000442966 00000 n -0000446214 00000 n -0000445958 00000 n -0000443195 00000 n -0000446084 00000 n -0000446149 00000 n -0000648934 00000 n -0000448960 00000 n -0000448317 00000 n -0000446339 00000 n -0000448443 00000 n -0000448508 00000 n -0000448573 00000 n -0000448638 00000 n -0000448766 00000 n -0000448831 00000 n -0000448896 00000 n -0000452693 00000 n -0000452373 00000 n -0000449111 00000 n -0000452499 00000 n -0000452564 00000 n -0000452629 00000 n -0000454018 00000 n -0000453632 00000 n -0000452818 00000 n -0000453758 00000 n -0000453823 00000 n -0000453888 00000 n -0000453953 00000 n -0000454189 00000 n -0000465533 00000 n -0000467856 00000 n -0000467825 00000 n -0000477345 00000 n -0000487401 00000 n -0000497639 00000 n -0000509844 00000 n -0000527977 00000 n -0000550065 00000 n -0000571075 00000 n -0000588893 00000 n -0000591724 00000 n -0000591494 00000 n -0000618982 00000 n -0000646091 00000 n -0000649041 00000 n -0000649164 00000 n -0000649290 00000 n -0000649416 00000 n -0000649506 00000 n -0000649598 00000 n -0000664889 00000 n -0000682155 00000 n -0000682196 00000 n -0000682236 00000 n -0000682370 00000 n -trailer -<< -/Size 1948 -/Root 1946 0 R -/Info 1947 0 R -/ID [<FC34A9E475CA4461718A60185182A60D> <FC34A9E475CA4461718A60185182A60D>] ->> -startxref -682634 -%%EOF diff --git a/contrib/bind9/doc/arm/Makefile.in b/contrib/bind9/doc/arm/Makefile.in deleted file mode 100644 index 85f318d..0000000 --- a/contrib/bind9/doc/arm/Makefile.in +++ /dev/null @@ -1,67 +0,0 @@ -# Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") -# Copyright (C) 2001, 2002 Internet Software Consortium. -# -# Permission to use, copy, modify, and/or distribute this software for any -# purpose with or without fee is hereby granted, provided that the above -# copyright notice and this permission notice appear in all copies. -# -# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH -# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY -# AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, -# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM -# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE -# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR -# PERFORMANCE OF THIS SOFTWARE. - -# $Id: Makefile.in,v 1.12.18.8 2007/08/28 07:20:03 tbox Exp $ - -srcdir = @srcdir@ -VPATH = @srcdir@ -top_srcdir = @top_srcdir@ - -@BIND9_MAKE_RULES@ - -@BIND9_VERSION@ - -MANOBJS = Bv9ARM.html - -PDFOBJS = Bv9ARM.pdf - -doc man:: ${MANOBJS} ${PDFOBJS} - -clean:: - rm -f Bv9ARM.aux Bv9ARM.brf Bv9ARM.glo Bv9ARM.idx Bv9ARM.toc - rm -f Bv9ARM.log Bv9ARM.out Bv9ARM.tex Bv9ARM.tex.tmp - -docclean manclean maintainer-clean:: clean - rm -f *.html ${PDFOBJS} - -docclean manclean maintainer-clean distclean:: - rm -f releaseinfo.xml - -Bv9ARM.html: Bv9ARM-book.xml releaseinfo.xml - expand Bv9ARM-book.xml | \ - ${XSLTPROC} --stringparam root.filename Bv9ARM \ - ${top_srcdir}/doc/xsl/isc-docbook-chunk.xsl - - -Bv9ARM.tex: Bv9ARM-book.xml releaseinfo.xml - expand Bv9ARM-book.xml | \ - ${XSLTPROC} ${top_srcdir}/doc/xsl/pre-latex.xsl - | \ - ${XSLTPROC} ${top_srcdir}/doc/xsl/isc-docbook-latex.xsl - | \ - @PERL@ latex-fixup.pl >$@.tmp - if test -s $@.tmp; then mv $@.tmp $@; else rm -f $@.tmp; exit 1; fi - -Bv9ARM.dvi: Bv9ARM.tex releaseinfo.xml - rm -f Bv9ARM-book.aux Bv9ARM-book.dvi Bv9ARM-book.log - ${LATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1) - ${LATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1) - ${LATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1) - -Bv9ARM.pdf: Bv9ARM.tex releaseinfo.xml - rm -f Bv9ARM-book.aux Bv9ARM-book.pdf Bv9ARM-book.log - ${PDFLATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1) - ${PDFLATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1) - ${PDFLATEX} '\batchmode\input Bv9ARM.tex' || (rm -f $@ ; exit 1) - -releaseinfo.xml: - echo >$@ '<releaseinfo>BIND Version ${VERSION}</releaseinfo>' diff --git a/contrib/bind9/doc/arm/README-SGML b/contrib/bind9/doc/arm/README-SGML deleted file mode 100644 index e33c937..0000000 --- a/contrib/bind9/doc/arm/README-SGML +++ /dev/null @@ -1,329 +0,0 @@ -Copyright (C) 2004 Internet Systems Consortium, Inc. ("ISC") -Copyright (C) 2000, 2001 Internet Software Consortium. -See COPYRIGHT in the source root or http://isc.org/copyright.html for terms. - -The BIND v9 ARM master document is now kept in DocBook XML format. - -Version: $Id: README-SGML,v 1.17 2004/03/05 05:04:43 marka Exp $ - -The entire ARM is in the single file: - - Bv9ARM-book.xml - -All of the other documents - HTML, PDF, etc - are generated from this -master source. - -This file attempts to describe what tools are necessary for the -maintenance of this document as well as the generation of the -alternate formats of this document. - -This file will also spend a very little time describing the XML and -SGML headers so you can understand a bit what you may need to do to be -able to work with this document in any fashion other than simply -editing it. - -We will spend almost no time on the actual tags and how to write an -XML DocBook compliant document. If you are at all familiar with SGML -or HTML it will be very evident. You only need to know what the tags -are and how to use them. You can find a good resource either for this -either online or in printed form: - - DocBook: The Definitive Guide - By Norman Walsh and Leonard Muellner - ISBN: 156592-580-7 - 1st Edition, October 1999 - Copyright (C) 1999 by O'Reilly & Associates, Inc. All rights reserved. - -The book is available online in HTML format: - - http://docbook.org/ - -and buried in: - - http://www.nwalsh.com/docbook/defguide/index.html - -A lot of useful stuff is at NWalsh's site in general. You may also -want to look at: - - http://www.xml.com/ - -The BIND v9 ARM is based on the XML 4.0 DocBook DTD. Every XML and -SGML document begins with a prefix that tells where to find the file -that describes the meaning and structure of the tags used in the rest -of the document. - -For our XML DocBook 4.0 based document this prefix looks like this: - - <!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.0//EN" - "/usr/local/share/xml/dtd/docbook/docbookx.dtd"> - -This "DOCTYPE" statement has three parts, of which we are only using -two: - -o The highest level term that represents this document (in this case - it is "book" - -o The identifier that tells us which DTD to use. This identifier has - two parts, the "Formal Public Identifier" (or FPI) and the system - identifier. In SGML you can have either a FPI or a SYSTEM identifier - but you have to have at least one of them. In XML you have to have a - SYSTEM identifier. - -FP & SYSTEM identifiers - These are names/lookups for the actual -DTD. The FPI is a globally unique name that should, on a properly -configured system, tell you exactly what DTD to use. The SYSTEM -identifier gives an absolute location for the DTD. In XML these are -supposed to be properly formatted URL's. - -SGML has these things called "catalogs" that are files that map FPI's -in to actual files. A "catalog" can also be used to remap a SYSTEM -identifier so you can say something like: "http://www.oasis.org/foo" -is actually "/usr/local/share/xml/foo.dtd" - -When you use various SGML/XML tools they need to be configured to look -at the same "catalog" files so that as you move from tool to tool they -all refer to the same DTD for the same document. - -We will be spending most of our configuration time making sure our -tools use the same "catalog" files and that we have the same DTD's -installed on our machines. XML's requirement of the SYSTEM identifier -over the FPI will probably lead to more problems as it does not -guarantee that everyone is using the same DTD. - -I did my initial work with the "sgmltools" the XML 4.0 DocBook DTD and -"jade" or "openjade." - -You can get the 4.0 XML DocBook DTD from: - - http://www.docbook.org/xml/4.0/ - -(download the .zip file.) NOTE: We will eventually be changing the -SYSTEM identifier to the recommended value of: - - http://www.oasis-open.org/docbook/xml/4.0/docbookx.dtd - -NOTE: Under FreeBSD this is the package: - - /usr/ports/textproc/docbook-xml - -NetBSD instructions are coming soon. - -With packages listed below installed under FreeBSD the "catalog" file -that all the tools refer to at least one is in: - - /usr/local/share/sgml/catalog - -In order for our SYSTEM identifier for the XML DocBook dtd to be found -I create a new catalog file at the top of the XML directory created on -FreeBSD: - - /usr/local/share/xml/catalog - -This file has one line: - - SYSTEM "http://www.oasis-open.org/docbook/xml/4.0/docbookx.dtd" "/usr/local/share/xml/dtd/docbook/docbookx.dtd" - -Then in the main "catalog" I have it include this XML catalog: - - CATALOG "/usr/local/share/xml/catalog" - - -On your systems you need to replace "/usr/local/share" with your -prefix root (probably /usr/pkg under NetBSD.) - -NOTE: The URL used above is supposed to the be the proper one for this -XML DocBook DTD... but there is nothing at that URL so you really do -need the "SYSTEM" identifier mapping in your catalog (or make the -SYSTEM identifier in your document refer to the real location of the -file on your local system.) - -HOW TO VALIDATE A DOCUMENT: - -I use the sgmltools "nsgmls" document validator. Since we are using -XML we need to use the XML declarations, which are installed as part -of the modular DSSL style sheets: - - nsgmls -sv /usr/local/share/sgml/docbook/dsssl/modular/dtds/decls/xml.dcl \ - Bv9ARM-book.xml - -A convenient shell script "validate.sh" is now generated by configure -to invoke the above command with the correct system-dependent paths. - -The SGML tools can be found at: - - ftp://ftp.us.sgmltools.org/pub/SGMLtools/v2.0/source/ \ - ftp://ftp.nllgg.nl/pub/SGMLtools/v2.0/source/ - -FreeBSD package for these is: - - /usr/ports/textproc/sgmltools - -HOW TO RENDER A DOCUMENT AS HTML or TeX: - -o Generate html doc with: - - openjade -v -d ./nominum-docbook-html.dsl \ - -t sgml \ - /usr/local/share/sgml/docbook/dsssl/modular/dtds/decls/xml.dcl \ - Bv9ARM-book.xml - -A convenient shell script "genhtml.sh" is now generated by configure to -invoke the above command with the correct system-dependent paths. - -On NetBSD there is no port for "openjade" however "jade" does still -work. However you need to specify the "catalog" file to use for style -sheets on the command line AND you need to have a default "catalog" -mapping where to find various DTDs. It seems that "jade" installed out -of the box on NetBSD does not use a globally defined "catalog" file -for mapping PUBLIC identifiers in to SYSTEM identifiers. - -So you need to have a "catalog" file in your current working directory -that has in it this: (these are probably more entries than you need!) - - CATALOG "/usr/pkg/share/sgml/iso8879/catalog" - CATALOG "/usr/pkg/share/sgml/docbook/2.4.1/catalog" - CATALOG "/usr/pkg/share/sgml/docbook/3.0/catalog" - CATALOG "/usr/pkg/share/sgml/docbook/3.1/catalog" - CATALOG "/usr/pkg/share/sgml/jade/catalog" - CATALOG "/usr/local/share/xml/catalog" - -(These would all be "/usr/local" on FreeBSD) - -So the command for jade on NetBSD will look like this: - -jade -v -c /usr/pkg/share/sgml/catalog -t sgml \ - -d ./nominum-docbook-html.dsl \ - /usr/pkg/share/sgml/docbook/dsssl/modular/dtds/decls/xml.dcl \ - ./Bv9ARM-book.xml - -Furthermore, since the style sheet subset we define has in it a hard -coded path to the style sheet is based, it is actually generated by -configure from a .in file so that it will contain the correct -system-dependent path: where on FreeBSD the second line reads: - - <!ENTITY dbstyle SYSTEM "/usr/local/share/sgml/docbook/dsssl/modular/html/docbook.dsl" CDATA DSSSL> - -On NetBSD it needs to read: - - <!ENTITY dbstyle SYSTEM "/usr/pkg/share/sgml/docbook/dsssl/modular/html/docbook.dsl" CDATA DSSSL> - -NOTE: This is usually solved by having this style sheet modification -be installed in a system directory and have it reference the style -sheet it is based on via a relative path. - -o Generate TeX documentation: - -openjade -d ./nominum-docbook-print.dsl -t tex -v \ - /usr/local/share/sgml/docbook/dsssl/modular/dtds/decls/xml.dcl \ - Bv9ARM-book.xml - -If you have "jade" installed instead of "openjade" then use that as -the command. There is little difference, openjade has some bug fixes -and is in more active development. - -To convert the resulting TeX file in to a DVI file you need to do: - - tex "&jadetex" Bv9ARM-book.tex - -You can also directly generate the pdf file via: - - pdftex "&pdfjadetex" Bv9ARM-book.tex - -The scripts "genpdf.sh" and "gendvi." have been added to simply -generating the PDF and DVI output. These substitute the correct paths -of NetBSD & FreeBSD. You still need to have TeX, jadeTeX, and pdfTeX -installed and configured properly for these to work. - -You will need to up both the "pool_size" and "hash_extra" variables in -your texmf.cnf file and regenerate them. See below. - -You can see that I am using a DSSSL style sheet for DocBook. Actually -two different ones - one for rendering html, and one for 'print' -media. - -NOTE: For HTML we are using a Nominum DSSSL style instead of the -default one (all it does is change the chunking to the chapter level -and makes the files end with ".html" instead of ".htm" so far.) If you -want to use the plain jane DSSSL style sheet replace the: - - -d ./nominum-docbook-html.dsl - -with - - -d /usr/local/share/sgml/docbook/dsssl/modular/html/docbook.dsl - -This style sheet will attempt to reference the one above. - -I am currently working on fixing these up so that it works the same on -our various systems. The main trick is knowing which DTD's and DSSSL -stylesheets you have installed, installing the right ones, and -configuring a CATALOG that refers to them in the same way. We will -probably end up putting our CATALOG's in the same place and then we -should be able to generate and validate our documents with a minimal -number of command line arguments. - -When running these commands you will get a lot of messages about a -bunch of general entities not being defined and having no default -entity. You can ignore those for now. - -Also with the style sheets we have and jade as it is you will get -messages about "xref to title" being unsupported. You can ignore these -for now as well. - -=== Getting the various tools installed on FreeBSD -(NetBSD coming soon..) - -o On freebsd you need to install the following packages: - o print/teTeX - o textproc/openjade - o textproc/docbook - o textproc/docbook-xml - o textproc/dsssl-docbook-modular - o textproc/dtd-catalogs - -o on freebsd you need to make some entities visible to the docbook xml - dtd by making a symlink (can probably be done with a catalog too) - ln -s /usr/local/share/xml/entity /usr/local/share/xml/dtd/docbook/ent - -o you may need to edit /usr/local/share/sgml/catalog and add the line: - - CATALOG "/usr/local/share/sgml/openjade/catalog" - -o add "hugelatex," Enlarge pool sizes, install the jadetex TeX driver - file. - - cd /usr/local/share/texmf/web2c/ - sudo cp texmf.cnf texmf.cnf.bak - - o edit the lines in texmf.cnf with these keys to these values: - - main_memory = 1100000 - hash_extra = 15000 - pool_size = 500000 - string_vacancies = 45000 - max_strings = 55000 - pool_free = 47500 - nest_size = 500 - param_size = 1500 - save_size = 5000 - stack_size = 1500 - - sudo tex -ini -progname=hugelatex -fmt=hugelatex latex.ltx - sudo texconfig init - sudo texhash - - o For the jadetex macros you will need I recommend you get a more - current version than what is packaged with openjade or jade. - - Checkout http://www.tug.org/applications/jadetex/ - - Unzip the file you get from there (should be jadetex-2.20 or - newer.) - - In the directory you unzip: - - sudo make install - sudo texhash - - NOTE: In the most uptodate "ports" for FreeBSD, jadetext is 2.20+ - so on this platform you should be set as of 2001.01.08. diff --git a/contrib/bind9/doc/arm/isc-logo.eps b/contrib/bind9/doc/arm/isc-logo.eps deleted file mode 100644 index c6a1d7a..0000000 --- a/contrib/bind9/doc/arm/isc-logo.eps +++ /dev/null @@ -1,12253 +0,0 @@ -%!PS-Adobe-3.1 EPSF-3.0 -%%Title: Alternate-ISC-logo-v2.ai -%%Creator: Adobe Illustrator(R) 11 -%%AI8_CreatorVersion: 11.0.0 -%AI9_PrintingDataBegin -%%For: Douglas E. Appelt -%%CreationDate: 10/22/04 -%%BoundingBox: 0 0 255 149 -%%HiResBoundingBox: 0 0 254.8672 148.7520 -%%CropBox: 0 0 254.8672 148.7520 -%%LanguageLevel: 2 -%%DocumentData: Clean7Bit -%%Pages: 1 -%%DocumentNeededResources: -%%DocumentSuppliedResources: procset Adobe_AGM_Image (1.0 0) -%%+ procset Adobe_CoolType_Utility_T42 (1.0 0) -%%+ procset Adobe_CoolType_Utility_MAKEOCF (1.19 0) -%%+ procset Adobe_CoolType_Core (2.23 0) -%%+ procset Adobe_AGM_Core (2.0 0) -%%+ procset Adobe_AGM_Utils (1.0 0) -%%DocumentFonts: -%%DocumentNeededFonts: -%%DocumentNeededFeatures: -%%DocumentSuppliedFeatures: -%%DocumentProcessColors: Cyan Magenta Yellow Black -%%DocumentCustomColors: (PANTONE 1805 C) -%%+ (PANTONE 871 C) -%%+ (PANTONE 301 C) -%%+ (PANTONE 7506 C) -%%CMYKCustomColor: 0 0.9100 1 0.2300 (PANTONE 1805 C) -%%+ 0.3569 0.3608 0.6353 0.1882 (PANTONE 871 C) -%%+ 1 0.4500 0 0.1800 (PANTONE 301 C) -%%+ 0 0.0500 0.1500 0 (PANTONE 7506 C) -%%RGBCustomColor: -%ADO_ContainsXMP: MainFirst -%AI7_Thumbnail: 128 76 8 -%%BeginData: 10692 Hex Bytes -%0000330000660000990000CC0033000033330033660033990033CC0033FF -%0066000066330066660066990066CC0066FF009900009933009966009999 -%0099CC0099FF00CC0000CC3300CC6600CC9900CCCC00CCFF00FF3300FF66 -%00FF9900FFCC3300003300333300663300993300CC3300FF333300333333 -%3333663333993333CC3333FF3366003366333366663366993366CC3366FF -%3399003399333399663399993399CC3399FF33CC0033CC3333CC6633CC99 -%33CCCC33CCFF33FF0033FF3333FF6633FF9933FFCC33FFFF660000660033 -%6600666600996600CC6600FF6633006633336633666633996633CC6633FF -%6666006666336666666666996666CC6666FF669900669933669966669999 -%6699CC6699FF66CC0066CC3366CC6666CC9966CCCC66CCFF66FF0066FF33 -%66FF6666FF9966FFCC66FFFF9900009900339900669900999900CC9900FF -%9933009933339933669933999933CC9933FF996600996633996666996699 -%9966CC9966FF9999009999339999669999999999CC9999FF99CC0099CC33 -%99CC6699CC9999CCCC99CCFF99FF0099FF3399FF6699FF9999FFCC99FFFF -%CC0000CC0033CC0066CC0099CC00CCCC00FFCC3300CC3333CC3366CC3399 -%CC33CCCC33FFCC6600CC6633CC6666CC6699CC66CCCC66FFCC9900CC9933 -%CC9966CC9999CC99CCCC99FFCCCC00CCCC33CCCC66CCCC99CCCCCCCCCCFF -%CCFF00CCFF33CCFF66CCFF99CCFFCCCCFFFFFF0033FF0066FF0099FF00CC -%FF3300FF3333FF3366FF3399FF33CCFF33FFFF6600FF6633FF6666FF6699 -%FF66CCFF66FFFF9900FF9933FF9966FF9999FF99CCFF99FFFFCC00FFCC33 -%FFCC66FFCC99FFCCCCFFCCFFFFFF33FFFF66FFFF99FFFFCC110000001100 -%000011111111220000002200000022222222440000004400000044444444 -%550000005500000055555555770000007700000077777777880000008800 -%000088888888AA000000AA000000AAAAAAAABB000000BB000000BBBBBBBB -%DD000000DD000000DDDDDDDDEE000000EE000000EEEEEEEE0000000000FF -%00FF0000FFFFFF0000FF00FFFFFF00FFFFFF -%524C45FD1CF852FD63FFF820272726272727264B27272627272726272727 -%26272727264B20F827FD63FFF827FFFFFFCFFF84365AFFFFFFCFFFFFFFCF -%FFFFFFCFFD04FFCAF852FD63FFF827CFCFCACFCA2F0607A8CFCACFCACFCA -%CFCACFCACFCACFCACF7CF827FD63FFF800FFCFFFA8A8070D06A8CFFFCFFF -%CFFFCFFFCFFFCFFFCFFFCFA7F852FD63FFF800077E2F0D060D060706537D -%CF7D2FA8CFCACFCACFCACFCAFF7CF827FD63FFF8000D062F070D062F070D -%062F2F0D062FCACFCFFFCFCFCFFFCFA1F852FD63FFF8050707062E517651 -%522807060706072ECFCACFCACFCACFCAFF7CF827FD63FFF8002F067C757B -%757C757B512F072F2FFFCFCFCFFFCFFFCFFFCFA1F852FD63FFF805075251 -%75517551755175512F062FCACFCACFCACFCACFCAFF7CF827FD63FFF8F859 -%75765176757C517C757B2E2F07A8CFFFCFCFCFFFCFCFCFA1F852FD63FFF8 -%00517551757CCFCAA751755175060753CFCACFCACFCACFCACF7CF827FD63 -%FFF8F87C75757CFFCFFFCFA7517C752F072F59A8CFCFCFFFCFFFCFA7F852 -%FD04FFA87D527DA8FD5AFFF827757551A1CFCFCAFFA0755175280D060706 -%A8CFCFCACFCAFF7CF827FD05FF27F827FD5BFFF8F87C51767CFFCFFFCFA0 -%517C752F062F060D84FFCFFFCFFFCFA1F852FD05FF7DF87DFD5BFFF80552 -%7551757CC9A7A05175517606072F7E7DCFCACFC9CFCAFF6FF827FD05FF52 -%F852FD27FFA8FD33FFF80059757C7575517C517C517C2E2F06CFCFFFCFCF -%9293CAFFCF6FF852FD05FF7DF87DFD04FFA8FD05FF7D7DA8FF527D7D7D52 -%7D52A8FFA8527D527DA8FF7D7D527D52FD05FFA8FD05FFA87D7DFFFFA852 -%7D527DA8FF527D7D7D527D52A8FD19FFF805075275755175517551752D0D -%0653CFFFCFFFA78C6899939344F827FD05FF52F852FFFFFFA8F87DFD04FF -%7D27FFA87D7DA8F827A87D7DFFA8F827A8527DFFA8F852A827F8A8FFFFFF -%7DF8FD05FF2752FFFFA8F827A8527DA87D7DA8F827A87D7DFD19FFF8F82F -%0752517C757B757C2E0D062FA8C999CFCFC28C928C8C8C6EF852FD05FF7D -%F87DFD04FFF8F87DFFFFFF7D52FD05FFF852FD05FFF87DFD05FFF852FFFF -%F852FFFFFF7DF8F8FD04FF7D52FFFFFFF87DFD07FFF852FD1CFFF8000607 -%062F2852282E060D0607067D928C9293688C6892688C44F827FD05FF52F8 -%52FFFFFFA85252F852FFFF7D27FD05FFF87DFD04FFA8F852FD05FFF852FF -%FFF8A8FFFFFF7D5227F8A8FFFF527DFFFFA8F852FD07FFF87DFD1CFFF800 -%852F2F062F070D062F072F062F0D9A8C928C928C928C928C6EF852FD05FF -%7DF87DFD04FF27FF52F852FF7D52FD05FFF852FD05FFF82752527DFFFFF8 -%52FF527DFD04FF527DFF27F8A8FF7D7DFFFFFFF82752527DFD04FFF852FD -%1CFFF827CFCF7D2F060D062F2F7EA82F062F938C68928C8C68926E994AF8 -%27FD05FF52F852FFFFFFA827FFFF52F852A852FD05FFF87DFD04FFA8F852 -%FF7DA8FFFFF82752F8A8FD04FF7D52FFA827F8A87D7DFFFFA8F852FF7DA8 -%FD04FFF87DFD1CFFF827FFCFFFA80D062FA8CFCFCA927693928C928C9292 -%75517C7B51F852FD05FF7DF87DFFFFFFA827FFFFFF52F8F87DFD05FFF852 -%FD05FFF87DFD05FFF852FF52F8A8FFFFFF5252FFFFFF27F8277DFFFFFFF8 -%7DFD07FFF852FD1CFFF827CFCFCACF06062ECFCAFF928C688C6892688C6E -%765175517C26F827FD05FF52F852FFFFFFA827FD04FF52F852FD05FFF852 -%FD04FFA8F852FFFFA8A8FFF87DFFFFF8F8A8FFFF5227FD04FF27F8A8FFFF -%A8F852FFFFA8A8FFFFFFF852FD1CFFF827FFCFFFCF7E53A8CFFFCFC99292 -%8C928C92757C757C517C7551F852FD04FFA852F852A8FFFFA8F8A8FD04FF -%527DFD04FF7DF827FD04FFA8F827525252FF7DF827FFFFFF2727A8FF5227 -%A8FD04FF52A8FFFFA8F827525252FFFFFF7DF827FD1CFFF827CFCFCACFCF -%CFCAFD04CF93688C688C6F7651755175517C4BF827FD05FFA8FFA8FFFFFF -%A8FFA8FD0BFFA8FFA8FFFFFFA8FFA8A8A8FFFFFFA8FFA8FFFFFFA8FFA8FF -%A8FD09FFA8FFA8A8A8FD05FFA8FFA8FD1BFFF827FFCFCFCFFFCFCFCFFFCF -%C38C928C8C6E7C7576517C75767551F852FD63FFF827CFCFCACFCACFCACF -%92928C8C688C6875517551755175517526F827FD63FFF827FFCFFFCFFFCF -%FFCA938C928C928C99517C757C517C757C7551F852FD63FFF827CFCFCACF -%CACFCACFA093688C6892757551755175517551754BF827FD63FFF827FFCF -%FFCFCFCFFFCFFF998C8C926E7C7576517C7576517CA7A1F852FD06FFA87D -%527DA8FD58FFF827CFCFCACFCACFCAFFCF996892686F5175517551755175 -%7CFF7CF827FD05FF7D2752A82727A8FD57FFF827FFCFFFCFFFCFFFC2BB8C -%928C8C6E7C757C517C757C51CFFFA1F852FD05FF2752FFFFFF52FD58FFF8 -%27CFCFCACFCACFCF99688C68928C6F5175517551755175CAFF7CF827FD04 -%FFA8F852FD5CFFF827FFCFCFCFFFCFFFA0998C928C926E7C517C7576517C -%51CACFA1F852FD04FFA827F87DFFFFFFA8527DFD04FF527DFFFFA87D52A8 -%FF7D527D527D527D7DFF7D7D527D527DFFFFFFA8FD06FFA8FD04FFA87D7D -%7DFD26FFF827CFCFCACFCACFCACFCF99688C6893517551755175517575FF -%7CF827FD05FF52F8F852FFFFFF52F8A8FFFF7D27A8FF5252A8A852A852A8 -%7DF827A87D7DFFA8F852A87D52FFFFFFF8A8FD04FF5227FFFFFF7D27A8A8 -%52A8FD25FFF827FFCFFFCFFFCFFFCFFFA08C8C92927C517C757C517C7575 -%7C7CF852FD06FF52F8F852FFFFFF27F8FFFF52A8FFFFF87DFD07FFF87DFD -%05FFF852FD06FFF827FD04FF2727FFFFFF2752FD29FFF827CFCFCACFCACF -%CACFA799688C68927575517551755175517526F84BFD07FF52F8F87DFFFF -%A8F87D7D52FFFFFFF8F87DFD05FFA8F852FD05FFF87DFD05FFA8F8F8A8FF -%FF7DF8F8A8FFFF52F852A8FD27FFF827FFCFFFCFCFCFFFCF9368928C928C -%995176517C7576517C7551F852FD08FF7DF8F8FFFFFF52F827FD05FFF8F8 -%27FD05FFF87DFD05FFF8277D527DFFFF7D52F852FFFF277DF8A8FFFFFF52 -%F8F87DFD26FFF827CFCFCACFCACFCAFF938C688C688C6875517551755175 -%517C26F827FD09FF27F8A8FFFFFFF852FD06FF52F827FFFFFFA8F852FD05 -%FFF852A8A87DFFFF527D7DF8FF7D52A8F87DFD04FF7DF8F8A8FD25FFF827 -%FFCFFFCFFFCFFFCFCFCFC98C928C92927C517C757C517C7551F852FD04FF -%7DFD04FF7DF8FD04FFF852FD07FF7DF8A8FFFFFFF87DFD05FFF852FD05FF -%52A8FF272752A8FFF87DFD06FFF8A8FD25FFF827CFCFCACFCACFCAFD04CF -%99688C688C6E7651755175517C4BF827FD04FF5227FFFFA8F852FD04FFF8 -%7DFFFFFF7D7DFFFF7D27FD04FFF852FD05FFF852FFFFA8FFFF27A8FF7DF8 -%52FFFFF852FFA852FFFF7D27A8FD25FFF827FFCFCFCFFFCFCFCFFFCFCF92 -%928C928C926E7C517C75767551F852FD04FF7D272752277DFD04FF7DF827 -%FFFFFF7D27525227FD04FFA8F852A8FFFFFF7D2727525252FFA8F8A8FFFF -%52FFFFFF2727A8FF275252527DFD26FFF827CFCFCACFCACFCACFCAFF998C -%688C688C688C68755176517526F827FD07FFA8FD07FFA8FFA8FFFFFFA8A8 -%A8FD05FFA8FFA8FD05FFA8FFA8A8A8FFA8FFA8FD07FFA8FFFFFFA8A8FD28 -%FFF827FFCFFFCFFFCFFFCFFFCFCF92C29A928C928C928C99757C7551F852 -%FD63FFF827CFCFCACFCACFCACFCAFD04CFFF998C68928C8C6892689344F8 -%27FD63FFF827FFCFFFCFCFCFFFCFCFCFFFCFCFCFC98C928C928C928C928C -%68F852FD63FFF827CFCFCACFCACFCAA8537ECACFCAFF938C6899688C688C -%689244F827FD63FFF827FFCFFFCFFFCFA8072F07FFCFFFCFCF992F0D5992 -%928C928C68F852FD08FF7D7D527D52A8A8FD54FFF827CFCFCACFCACFA70D -%060753A87DA8CA5A0607069368929AC244F827FD06FF7DF8527D7D7D52F8 -%27FD54FFF827FFCFCFCFFFCFCF2F2F070D062F072F062F07539993C2FFFF -%76F852FD05FF7DF87DFD06FF27FD54FFF827CFCFCACFCACF7D0D060D0607 -%060D0607060753FFCACFCAFF76F827FD04FFA8F827FD07FFA8A8FD15FFA8 -%FD3DFFF827FFCFFFCFFF592F062F072F2852282F072F072F7DFFCFFFCFA7 -%F852FD04FF52F87DFD0CFFA87D7D7DFD05FFA8FD05FF7D7DA8FFFFA87D7D -%7DFFFFFFA87D527D7DFD04FFA8527D527DA8FFFF7D527D527D527D7DFF7D -%7D7DFFFFA8527DA8FFFFA8527DFFFFFFA8FD06FFA8FFFFF827CF5959CA53 -%07060D066F688C6892684B060D06077DCFCFCF7CF827FD04FF27F8A8FD0A -%FFA82752A87D52F852FFFFA8F87DFD04FF7D27FFFF7D27A87D52FFFF5227 -%7DA87D27F8A8FFFFA8F827A827F8A8A852A87DF827A87D7DFFA8F852FFFF -%A8F827FD04FF2727FFFFFFF8A8FD04FF5227FFFFF827A9062F070D062F28 -%928C928C928C928C92282F072F847E5953F852FD04FFF8F8A8FD0AFF2752 -%FD04FF7DF87DFFFFF8F852FFFFFF7D52FFFFF8A8FFFFA8FF7DF8A8FD04FF -%27F8FFFFFFF87DFFFFF87DFD04FFF87DFD05FFF852FFFFFFF87DFD04FF27 -%52FFFFFFF827FD04FF2727FFFFF8272F07060D060D278C688C68928C8C68 -%8C688C060D0607060D06F827FFFFFFA827F87DFD09FF7DF8FD06FF27F8FF -%A85252F852FFFF7D27FFFF27F87DFFFFFF2727FD05FF7DF852FFA8F852FF -%A8F87DFFFFFFA8F852FD05FFF852FFFFA8F852FD04FF5252FFFFA8F8F8A8 -%FFFF7DF827A8FFF827FF2F2F070D06938C928CBCC9CFC9BB8C928C6F070D -%062F0706F852FD04FF27F852FD09FF52F8FD06FF52F8FFFF27FF52F852FF -%7D52FFFFA827F827A8FFF852FD06FFF852FFFFF852FF7D7DFD05FFF87DFD -%05FFF852FFFFFFF87DFD04FF2752FFFF7D52F852FFFF277DF8A8FFF827CF -%CF2F0D064C689268C2CFFFCFFFCFC2688C682E0607062F52F827FD04FF7D -%F8F8A8FD08FF52F8A8FD05FF52F8FFA827FFFF52F852A852FD04FF7DF827 -%FF2727FD05FFA8F852FFA8F82752F8A8FD04FFA8F852FD05FFF852FFFFA8 -%F852FD04FF5252FFFF7D7D7DF8FF7D52A8F87DFFF827FFCF59062F6F8C8C -%99CFFFCFFFCFFFCF938C8C4B2F0759CFA7F852FD05FF52F827FD06FF7DFF -%A8F852FD05FFF852FFA827FFFFFF52F8F87DFD05FF7DF8FF52F8A8FD04FF -%A8F8A8FFFFF87DFF52F8FD05FFF87DFD05FFF852FFFFFFF852FD04FF277D -%FFFF27A8FF272752FFFFF87DFFF827CFCF2F070693688C99FFCACFCACFCA -%FF998C686F060759CF7CF827FD05FFA852F8F87DFFFFFF5227FFFF52F87D -%FFFFFF5227A8FFA827FD04FF52F852FF527DFFFF5227FFFFF827A8FFFFFF -%2752FFFFFFF852FFFF27F8FFFFFFA8F852FD05FFF87DFFFFFF52F8A8FFFF -%7D27A8FFFF27A8FF7DF852FFFFF827FFF827FFCF53062F6E928CC2FFFFCF -%FFCFFFCFC28C926F2F077ECFA7F852FD07FFA8FD06277DFFFFFF7D27277D -%527DFFFFFF7DF8A8FD04FF527DFFA827525252A8FFFFFF5227527D52A8FF -%FFFFA8F852A8FFA82727A8FFA8F852A8FFFFFF7DF827FD04FF52277D5252 -%A8FFFFA8F8A8FFFF52FFFFFF2727A8F827CFCF2F07066F8C8C92FFCFCFCA -%CFCFCF8C8C8C4B060D59CF7CF827FD0BFFA8FD09FFA8FD05FFA8FFA8FD09 -%FFA8A8FD07FFA8A8FD05FFA8FFA8FD05FFA8FFA8FFA8FD05FFA8FFA8FD05 -%FFA8FD05FFA8FFA8FD07FFA8FFF827AF2F2F070D4B928C8CA0FFCFFFCFFF -%998C8C92280D067ECFA1F852FD63FFF8270707060D0607688C688C99C9CA -%C9938C688C680D0607065A76F827FD63FFF8275A062F070D07528C928C92 -%8C928C928C928C2F070D062F072EF852FD63FFF84B842F597E0607064C8C -%8C68928C8C688C6828060D0607060D52F827FD63FFF827FFCFCFCF7E060D -%062F6F928C928C934B2F070D0684A85A59A1F852FD63FFF827CFCFCACFCA -%590607060D06282728060D0607067ECACFCFCF7CF827FD63FFF827FFCFFF -%CFFFCF59062F070D072F070D062F2FA8CFFFCFFFCFA7F852FD63FFF827CF -%CFCACFCACF2F07060D0607060D06070653CFCFCACFCAFF7CF827FD63FFF8 -%27FFCFFFCFCFA82F070D59CFA8A8A859060D07FD04CFFFCFA1F852FD63FF -%F827CFCFCACFCFA82F0D2FCFCACFCFCFA80D060DA8CFCACFCAFF7CF827FD -%63FFF827FFCFFFCFFFCFFFA8FFCFFFCFFFCFFF7E7EA8FFCFFFCFFFFFA7F8 -%52FD63FFFD09F820FD07F820FD07F820F8F827FD63FF27F827F820F827F8 -%20F827F820F827F820F827F820F827F820F827F87CFDE2FFFF -%%EndData -%%EndComments -%%BeginDefaults -%%ViewingOrientation: 1 0 0 1 -%%EndDefaults -%%BeginProlog -%%BeginResource: procset Adobe_AGM_Utils 1.0 0 -%%Version: 1.0 0 -%%Copyright: Copyright (C) 2000-2003 Adobe Systems, Inc. All Rights Reserved. -systemdict /setpacking known -{ - currentpacking - true setpacking -} if -userdict /Adobe_AGM_Utils 68 dict dup begin put -/bdf -{ - bind def -} bind def -/nd{ - null def -}bdf -/xdf -{ - exch def -}bdf -/ldf -{ - load def -}bdf -/ddf -{ - put -}bdf -/xddf -{ - 3 -1 roll put -}bdf -/xpt -{ - exch put -}bdf -/ndf -{ - exch dup where{ - pop pop pop - }{ - xdf - }ifelse -}def -/cdndf -{ - exch dup currentdict exch known{ - pop pop - }{ - exch def - }ifelse -}def -/bdict -{ - mark -}bdf -/edict -{ - counttomark 2 idiv dup dict begin {def} repeat pop currentdict end -}def -/ps_level - /languagelevel where{ - pop systemdict /languagelevel get exec - }{ - 1 - }ifelse -def -/level2 - ps_level 2 ge -def -/level3 - ps_level 3 ge -def -/ps_version - {version cvr} stopped { - -1 - }if -def -/makereadonlyarray -{ - /packedarray where{ - pop packedarray - }{ - array astore readonly - }ifelse -}bdf -/map_reserved_ink_name -{ - dup type /stringtype eq{ - dup /Red eq{ - pop (_Red_) - }{ - dup /Green eq{ - pop (_Green_) - }{ - dup /Blue eq{ - pop (_Blue_) - }{ - dup () cvn eq{ - pop (Process) - }if - }ifelse - }ifelse - }ifelse - }if -}bdf -/AGMUTIL_GSTATE 22 dict def -/get_gstate -{ - AGMUTIL_GSTATE begin - /AGMUTIL_GSTATE_clr_spc currentcolorspace def - /AGMUTIL_GSTATE_clr_indx 0 def - /AGMUTIL_GSTATE_clr_comps 12 array def - mark currentcolor counttomark - {AGMUTIL_GSTATE_clr_comps AGMUTIL_GSTATE_clr_indx 3 -1 roll put - /AGMUTIL_GSTATE_clr_indx AGMUTIL_GSTATE_clr_indx 1 add def} repeat pop - /AGMUTIL_GSTATE_fnt rootfont def - /AGMUTIL_GSTATE_lw currentlinewidth def - /AGMUTIL_GSTATE_lc currentlinecap def - /AGMUTIL_GSTATE_lj currentlinejoin def - /AGMUTIL_GSTATE_ml currentmiterlimit def - currentdash /AGMUTIL_GSTATE_do xdf /AGMUTIL_GSTATE_da xdf - /AGMUTIL_GSTATE_sa currentstrokeadjust def - /AGMUTIL_GSTATE_clr_rnd currentcolorrendering def - /AGMUTIL_GSTATE_op currentoverprint def - /AGMUTIL_GSTATE_bg currentblackgeneration cvlit def - /AGMUTIL_GSTATE_ucr currentundercolorremoval cvlit def - currentcolortransfer cvlit /AGMUTIL_GSTATE_gy_xfer xdf cvlit /AGMUTIL_GSTATE_b_xfer xdf - cvlit /AGMUTIL_GSTATE_g_xfer xdf cvlit /AGMUTIL_GSTATE_r_xfer xdf - /AGMUTIL_GSTATE_ht currenthalftone def - /AGMUTIL_GSTATE_flt currentflat def - end -}def -/set_gstate -{ - AGMUTIL_GSTATE begin - AGMUTIL_GSTATE_clr_spc setcolorspace - AGMUTIL_GSTATE_clr_indx {AGMUTIL_GSTATE_clr_comps AGMUTIL_GSTATE_clr_indx 1 sub get - /AGMUTIL_GSTATE_clr_indx AGMUTIL_GSTATE_clr_indx 1 sub def} repeat setcolor - AGMUTIL_GSTATE_fnt setfont - AGMUTIL_GSTATE_lw setlinewidth - AGMUTIL_GSTATE_lc setlinecap - AGMUTIL_GSTATE_lj setlinejoin - AGMUTIL_GSTATE_ml setmiterlimit - AGMUTIL_GSTATE_da AGMUTIL_GSTATE_do setdash - AGMUTIL_GSTATE_sa setstrokeadjust - AGMUTIL_GSTATE_clr_rnd setcolorrendering - AGMUTIL_GSTATE_op setoverprint - AGMUTIL_GSTATE_bg cvx setblackgeneration - AGMUTIL_GSTATE_ucr cvx setundercolorremoval - AGMUTIL_GSTATE_r_xfer cvx AGMUTIL_GSTATE_g_xfer cvx AGMUTIL_GSTATE_b_xfer cvx - AGMUTIL_GSTATE_gy_xfer cvx setcolortransfer - AGMUTIL_GSTATE_ht /HalftoneType get dup 9 eq exch 100 eq or - { - currenthalftone /HalftoneType get AGMUTIL_GSTATE_ht /HalftoneType get ne - { - mark AGMUTIL_GSTATE_ht {sethalftone} stopped cleartomark - } if - }{ - AGMUTIL_GSTATE_ht sethalftone - } ifelse - AGMUTIL_GSTATE_flt setflat - end -}def -/get_gstate_and_matrix -{ - AGMUTIL_GSTATE begin - /AGMUTIL_GSTATE_ctm matrix currentmatrix def - end - get_gstate -}def -/set_gstate_and_matrix -{ - set_gstate - AGMUTIL_GSTATE begin - AGMUTIL_GSTATE_ctm setmatrix - end -}def -/AGMUTIL_str256 256 string def -/AGMUTIL_src256 256 string def -/AGMUTIL_dst64 64 string def -/AGMUTIL_srcLen nd -/AGMUTIL_ndx nd -/agm_sethalftone -{ - dup - begin - /_Data load - /Thresholds xdf - end - level3 - { sethalftone }{ - dup /HalftoneType get 3 eq { - sethalftone - } {pop} ifelse - }ifelse -} def -/rdcmntline -{ - currentfile AGMUTIL_str256 readline pop - (%) anchorsearch {pop} if -} bdf -/filter_cmyk -{ - dup type /filetype ne{ - exch () /SubFileDecode filter - } - { - exch pop - } - ifelse - [ - exch - { - AGMUTIL_src256 readstring pop - dup length /AGMUTIL_srcLen exch def - /AGMUTIL_ndx 0 def - AGMCORE_plate_ndx 4 AGMUTIL_srcLen 1 sub{ - 1 index exch get - AGMUTIL_dst64 AGMUTIL_ndx 3 -1 roll put - /AGMUTIL_ndx AGMUTIL_ndx 1 add def - }for - pop - AGMUTIL_dst64 0 AGMUTIL_ndx getinterval - } - bind - /exec cvx - ] cvx -} bdf -/filter_indexed_devn -{ - cvi Names length mul names_index add Lookup exch get -} bdf -/filter_devn -{ - 4 dict begin - /srcStr xdf - /dstStr xdf - dup type /filetype ne{ - 0 () /SubFileDecode filter - }if - [ - exch - [ - /devicen_colorspace_dict /AGMCORE_gget cvx /begin cvx - currentdict /srcStr get /readstring cvx /pop cvx - /dup cvx /length cvx 0 /gt cvx [ - Adobe_AGM_Utils /AGMUTIL_ndx 0 /ddf cvx - names_index Names length currentdict /srcStr get length 1 sub { - 1 /index cvx /exch cvx /get cvx - currentdict /dstStr get /AGMUTIL_ndx /load cvx 3 -1 /roll cvx /put cvx - Adobe_AGM_Utils /AGMUTIL_ndx /AGMUTIL_ndx /load cvx 1 /add cvx /ddf cvx - } for - currentdict /dstStr get 0 /AGMUTIL_ndx /load cvx /getinterval cvx - ] cvx /if cvx - /end cvx - ] cvx - bind - /exec cvx - ] cvx - end -} bdf -/AGMUTIL_imagefile nd -/read_image_file -{ - AGMUTIL_imagefile 0 setfileposition - 10 dict begin - /imageDict xdf - /imbufLen Width BitsPerComponent mul 7 add 8 idiv def - /imbufIdx 0 def - /origDataSource imageDict /DataSource get def - /origMultipleDataSources imageDict /MultipleDataSources get def - /origDecode imageDict /Decode get def - /dstDataStr imageDict /Width get colorSpaceElemCnt mul string def - /srcDataStrs [ imageDict begin - currentdict /MultipleDataSources known {MultipleDataSources {DataSource length}{1}ifelse}{1} ifelse - { - Width Decode length 2 div mul cvi string - } repeat - end ] def - imageDict /MultipleDataSources known {MultipleDataSources}{false} ifelse - { - /imbufCnt imageDict /DataSource get length def - /imbufs imbufCnt array def - 0 1 imbufCnt 1 sub { - /imbufIdx xdf - imbufs imbufIdx imbufLen string put - imageDict /DataSource get imbufIdx [ AGMUTIL_imagefile imbufs imbufIdx get /readstring cvx /pop cvx ] cvx put - } for - DeviceN_PS2 { - imageDict begin - /DataSource [ DataSource /devn_sep_datasource cvx ] cvx def - /MultipleDataSources false def - /Decode [0 1] def - end - } if - }{ - /imbuf imbufLen string def - Indexed_DeviceN level3 not and DeviceN_NoneName or { - imageDict begin - /DataSource [AGMUTIL_imagefile Decode BitsPerComponent false 1 /filter_indexed_devn load dstDataStr srcDataStrs devn_alt_datasource /exec cvx] cvx def - /Decode [0 1] def - end - }{ - imageDict /DataSource {AGMUTIL_imagefile imbuf readstring pop} put - } ifelse - } ifelse - imageDict exch - load exec - imageDict /DataSource origDataSource put - imageDict /MultipleDataSources origMultipleDataSources put - imageDict /Decode origDecode put - end -} bdf -/write_image_file -{ - begin - { (AGMUTIL_imagefile) (w+) file } stopped{ - false - }{ - Adobe_AGM_Utils/AGMUTIL_imagefile xddf - 2 dict begin - /imbufLen Width BitsPerComponent mul 7 add 8 idiv def - MultipleDataSources {DataSource 0 get}{DataSource}ifelse type /filetype eq { - /imbuf imbufLen string def - }if - 1 1 Height { - pop - MultipleDataSources { - 0 1 DataSource length 1 sub { - DataSource type dup - /arraytype eq { - pop DataSource exch get exec - }{ - /filetype eq { - DataSource exch get imbuf readstring pop - }{ - DataSource exch get - } ifelse - } ifelse - AGMUTIL_imagefile exch writestring - } for - }{ - DataSource type dup - /arraytype eq { - pop DataSource exec - }{ - /filetype eq { - DataSource imbuf readstring pop - }{ - DataSource - } ifelse - } ifelse - AGMUTIL_imagefile exch writestring - } ifelse - }for - end - true - }ifelse - end -} bdf -/close_image_file -{ - AGMUTIL_imagefile closefile (AGMUTIL_imagefile) deletefile -}def -statusdict /product known userdict /AGMP_current_show known not and{ - /pstr statusdict /product get def - pstr (HP LaserJet 2200) eq - pstr (HP LaserJet 4000 Series) eq or - pstr (HP LaserJet 4050 Series ) eq or - pstr (HP LaserJet 8000 Series) eq or - pstr (HP LaserJet 8100 Series) eq or - pstr (HP LaserJet 8150 Series) eq or - pstr (HP LaserJet 5000 Series) eq or - pstr (HP LaserJet 5100 Series) eq or - pstr (HP Color LaserJet 4500) eq or - pstr (HP Color LaserJet 4600) eq or - pstr (HP LaserJet 5Si) eq or - pstr (HP LaserJet 1200 Series) eq or - pstr (HP LaserJet 1300 Series) eq or - pstr (HP LaserJet 4100 Series) eq or - { - userdict /AGMP_current_show /show load put - userdict /show { - currentcolorspace 0 get - /Pattern eq - {false charpath f} - {AGMP_current_show} ifelse - } put - }if - currentdict /pstr undef -} if -/consumeimagedata -{ - begin - currentdict /MultipleDataSources known not - {/MultipleDataSources false def} if - MultipleDataSources - { - 1 dict begin - /flushbuffer Width cvi string def - 1 1 Height cvi - { - pop - 0 1 DataSource length 1 sub - { - DataSource exch get - dup type dup - /filetype eq - { - exch flushbuffer readstring pop pop - }if - /arraytype eq - { - exec pop - }if - }for - }for - end - } - { - /DataSource load type dup - /filetype eq - { - 1 dict begin - /flushbuffer Width Decode length 2 div mul cvi string def - 1 1 Height { pop DataSource flushbuffer readstring pop pop} for - end - }if - /arraytype eq - { - 1 1 Height { pop DataSource pop } for - }if - }ifelse - end -}bdf -/addprocs -{ - 2{/exec load}repeat - 3 1 roll - [ 5 1 roll ] bind cvx -}def -/modify_halftone_xfer -{ - currenthalftone dup length dict copy begin - currentdict 2 index known{ - 1 index load dup length dict copy begin - currentdict/TransferFunction known{ - /TransferFunction load - }{ - currenttransfer - }ifelse - addprocs /TransferFunction xdf - currentdict end def - currentdict end sethalftone - }{ - currentdict/TransferFunction known{ - /TransferFunction load - }{ - currenttransfer - }ifelse - addprocs /TransferFunction xdf - currentdict end sethalftone - pop - }ifelse -}def -/clonearray -{ - dup xcheck exch - dup length array exch - Adobe_AGM_Core/AGMCORE_tmp -1 ddf - { - Adobe_AGM_Core/AGMCORE_tmp AGMCORE_tmp 1 add ddf - dup type /dicttype eq - { - AGMCORE_tmp - exch - clonedict - Adobe_AGM_Core/AGMCORE_tmp 4 -1 roll ddf - } if - dup type /arraytype eq - { - AGMCORE_tmp exch - clonearray - Adobe_AGM_Core/AGMCORE_tmp 4 -1 roll ddf - } if - exch dup - AGMCORE_tmp 4 -1 roll put - }forall - exch {cvx} if -}bdf -/clonedict -{ - dup length dict - begin - { - dup type /dicttype eq - { - clonedict - } if - dup type /arraytype eq - { - clonearray - } if - def - }forall - currentdict - end -}bdf -/DeviceN_PS2 -{ - /currentcolorspace AGMCORE_gget 0 get /DeviceN eq level3 not and -} bdf -/Indexed_DeviceN -{ - /indexed_colorspace_dict AGMCORE_gget dup null ne { - /CSD known - }{ - pop false - } ifelse -} bdf -/DeviceN_NoneName -{ - /Names where { - pop - false Names - { - (None) eq or - } forall - }{ - false - }ifelse -} bdf -/DeviceN_PS2_inRip_seps -{ - /AGMCORE_in_rip_sep where - { - pop dup type dup /arraytype eq exch /packedarraytype eq or - { - dup 0 get /DeviceN eq level3 not and AGMCORE_in_rip_sep and - { - /currentcolorspace exch AGMCORE_gput - false - } - { - true - }ifelse - } - { - true - } ifelse - } - { - true - } ifelse -} bdf -/base_colorspace_type -{ - dup type /arraytype eq {0 get} if -} bdf -/doc_setup{ - Adobe_AGM_Utils begin -}bdf -/doc_trailer{ - currentdict Adobe_AGM_Utils eq{ - end - }if -}bdf -systemdict /setpacking known -{ - setpacking -} if -%%EndResource -%%BeginResource: procset Adobe_AGM_Core 2.0 0 -%%Version: 2.0 0 -%%Copyright: Copyright (C) 1997-2003 Adobe Systems, Inc. All Rights Reserved. -systemdict /setpacking known -{ - currentpacking - true setpacking -} if -userdict /Adobe_AGM_Core 216 dict dup begin put -/nd{ - null def -}bind def -/Adobe_AGM_Core_Id /Adobe_AGM_Core_2.0_0 def -/AGMCORE_str256 256 string def -/AGMCORE_save nd -/AGMCORE_graphicsave nd -/AGMCORE_c 0 def -/AGMCORE_m 0 def -/AGMCORE_y 0 def -/AGMCORE_k 0 def -/AGMCORE_cmykbuf 4 array def -/AGMCORE_screen [currentscreen] cvx def -/AGMCORE_tmp 0 def -/AGMCORE_&setgray nd -/AGMCORE_&setcolor nd -/AGMCORE_&setcolorspace nd -/AGMCORE_&setcmykcolor nd -/AGMCORE_cyan_plate nd -/AGMCORE_magenta_plate nd -/AGMCORE_yellow_plate nd -/AGMCORE_black_plate nd -/AGMCORE_plate_ndx nd -/AGMCORE_get_ink_data nd -/AGMCORE_is_cmyk_sep nd -/AGMCORE_host_sep nd -/AGMCORE_avoid_L2_sep_space nd -/AGMCORE_distilling nd -/AGMCORE_composite_job nd -/AGMCORE_producing_seps nd -/AGMCORE_ps_level -1 def -/AGMCORE_ps_version -1 def -/AGMCORE_environ_ok nd -/AGMCORE_CSA_cache 0 dict def -/AGMCORE_CSD_cache 0 dict def -/AGMCORE_pattern_cache 0 dict def -/AGMCORE_currentoverprint false def -/AGMCORE_deltaX nd -/AGMCORE_deltaY nd -/AGMCORE_name nd -/AGMCORE_sep_special nd -/AGMCORE_err_strings 4 dict def -/AGMCORE_cur_err nd -/AGMCORE_ovp nd -/AGMCORE_current_spot_alias false def -/AGMCORE_inverting false def -/AGMCORE_feature_dictCount nd -/AGMCORE_feature_opCount nd -/AGMCORE_feature_ctm nd -/AGMCORE_ConvertToProcess false def -/AGMCORE_Default_CTM matrix def -/AGMCORE_Default_PageSize nd -/AGMCORE_currentbg nd -/AGMCORE_currentucr nd -/AGMCORE_gradientcache 32 dict def -/AGMCORE_in_pattern false def -/knockout_unitsq nd -/AGMCORE_CRD_cache where{ - pop -}{ - /AGMCORE_CRD_cache 0 dict def -}ifelse -/AGMCORE_key_known -{ - where{ - /Adobe_AGM_Core_Id known - }{ - false - }ifelse -}ndf -/flushinput -{ - save - 2 dict begin - /CompareBuffer 3 -1 roll def - /readbuffer 256 string def - mark - { - currentfile readbuffer {readline} stopped - {cleartomark mark} - { - not - {pop exit} - if - CompareBuffer eq - {exit} - if - }ifelse - }loop - cleartomark - end - restore -}bdf -/getspotfunction -{ - AGMCORE_screen exch pop exch pop - dup type /dicttype eq{ - dup /HalftoneType get 1 eq{ - /SpotFunction get - }{ - dup /HalftoneType get 2 eq{ - /GraySpotFunction get - }{ - pop - { - abs exch abs 2 copy add 1 gt{ - 1 sub dup mul exch 1 sub dup mul add 1 sub - }{ - dup mul exch dup mul add 1 exch sub - }ifelse - }bind - }ifelse - }ifelse - }if -} def -/clp_npth -{ - clip newpath -} def -/eoclp_npth -{ - eoclip newpath -} def -/npth_clp -{ - newpath clip -} def -/add_grad -{ - AGMCORE_gradientcache 3 1 roll put -}bdf -/exec_grad -{ - AGMCORE_gradientcache exch get exec -}bdf -/graphic_setup -{ - /AGMCORE_graphicsave save def - concat - 0 setgray - 0 setlinecap - 0 setlinejoin - 1 setlinewidth - [] 0 setdash - 10 setmiterlimit - newpath - false setoverprint - false setstrokeadjust - Adobe_AGM_Core/spot_alias get exec - /Adobe_AGM_Image where { - pop - Adobe_AGM_Image/spot_alias 2 copy known{ - get exec - }{ - pop pop - }ifelse - } if - 100 dict begin - /dictstackcount countdictstack def - /showpage {} def - mark -} def -/graphic_cleanup -{ - cleartomark - dictstackcount 1 countdictstack 1 sub {end}for - end - AGMCORE_graphicsave restore -} def -/compose_error_msg -{ - grestoreall initgraphics - /Helvetica findfont 10 scalefont setfont - /AGMCORE_deltaY 100 def - /AGMCORE_deltaX 310 def - clippath pathbbox newpath pop pop 36 add exch 36 add exch moveto - 0 AGMCORE_deltaY rlineto AGMCORE_deltaX 0 rlineto - 0 AGMCORE_deltaY neg rlineto AGMCORE_deltaX neg 0 rlineto closepath - 0 AGMCORE_&setgray - gsave 1 AGMCORE_&setgray fill grestore - 1 setlinewidth gsave stroke grestore - currentpoint AGMCORE_deltaY 15 sub add exch 8 add exch moveto - /AGMCORE_deltaY 12 def - /AGMCORE_tmp 0 def - AGMCORE_err_strings exch get - { - dup 32 eq - { - pop - AGMCORE_str256 0 AGMCORE_tmp getinterval - stringwidth pop currentpoint pop add AGMCORE_deltaX 28 add gt - { - currentpoint AGMCORE_deltaY sub exch pop - clippath pathbbox pop pop pop 44 add exch moveto - } if - AGMCORE_str256 0 AGMCORE_tmp getinterval show ( ) show - 0 1 AGMCORE_str256 length 1 sub - { - AGMCORE_str256 exch 0 put - }for - /AGMCORE_tmp 0 def - } - { - AGMCORE_str256 exch AGMCORE_tmp xpt - /AGMCORE_tmp AGMCORE_tmp 1 add def - } ifelse - } forall -} bdf -/doc_setup{ - Adobe_AGM_Core begin - /AGMCORE_ps_version xdf - /AGMCORE_ps_level xdf - errordict /AGM_handleerror known not{ - errordict /AGM_handleerror errordict /handleerror get put - errordict /handleerror { - Adobe_AGM_Core begin - $error /newerror get AGMCORE_cur_err null ne and{ - $error /newerror false put - AGMCORE_cur_err compose_error_msg - }if - $error /newerror true put - end - errordict /AGM_handleerror get exec - } bind put - }if - /AGMCORE_environ_ok - ps_level AGMCORE_ps_level ge - ps_version AGMCORE_ps_version ge and - AGMCORE_ps_level -1 eq or - def - AGMCORE_environ_ok not - {/AGMCORE_cur_err /AGMCORE_bad_environ def} if - /AGMCORE_&setgray systemdict/setgray get def - level2{ - /AGMCORE_&setcolor systemdict/setcolor get def - /AGMCORE_&setcolorspace systemdict/setcolorspace get def - }if - /AGMCORE_currentbg currentblackgeneration def - /AGMCORE_currentucr currentundercolorremoval def - /AGMCORE_distilling - /product where{ - pop systemdict/setdistillerparams known product (Adobe PostScript Parser) ne and - }{ - false - }ifelse - def - level2 not{ - /xput{ - dup load dup length exch maxlength eq{ - dup dup load dup - length dup 0 eq {pop 1} if 2 mul dict copy def - }if - load begin - def - end - }def - }{ - /xput{ - load 3 1 roll put - }def - }ifelse - /AGMCORE_GSTATE AGMCORE_key_known not{ - /AGMCORE_GSTATE 21 dict def - /AGMCORE_tmpmatrix matrix def - /AGMCORE_gstack 32 array def - /AGMCORE_gstackptr 0 def - /AGMCORE_gstacksaveptr 0 def - /AGMCORE_gstackframekeys 10 def - /AGMCORE_&gsave /gsave ldf - /AGMCORE_&grestore /grestore ldf - /AGMCORE_&grestoreall /grestoreall ldf - /AGMCORE_&save /save ldf - /AGMCORE_gdictcopy { - begin - { def } forall - end - }def - /AGMCORE_gput { - AGMCORE_gstack AGMCORE_gstackptr get - 3 1 roll - put - }def - /AGMCORE_gget { - AGMCORE_gstack AGMCORE_gstackptr get - exch - get - }def - /gsave { - AGMCORE_&gsave - AGMCORE_gstack AGMCORE_gstackptr get - AGMCORE_gstackptr 1 add - dup 32 ge {limitcheck} if - Adobe_AGM_Core exch - /AGMCORE_gstackptr xpt - AGMCORE_gstack AGMCORE_gstackptr get - AGMCORE_gdictcopy - }def - /grestore { - AGMCORE_&grestore - AGMCORE_gstackptr 1 sub - dup AGMCORE_gstacksaveptr lt {1 add} if - Adobe_AGM_Core exch - /AGMCORE_gstackptr xpt - }def - /grestoreall { - AGMCORE_&grestoreall - Adobe_AGM_Core - /AGMCORE_gstackptr AGMCORE_gstacksaveptr put - }def - /save { - AGMCORE_&save - AGMCORE_gstack AGMCORE_gstackptr get - AGMCORE_gstackptr 1 add - dup 32 ge {limitcheck} if - Adobe_AGM_Core begin - /AGMCORE_gstackptr exch def - /AGMCORE_gstacksaveptr AGMCORE_gstackptr def - end - AGMCORE_gstack AGMCORE_gstackptr get - AGMCORE_gdictcopy - }def - 0 1 AGMCORE_gstack length 1 sub { - AGMCORE_gstack exch AGMCORE_gstackframekeys dict put - } for - }if - level3 /AGMCORE_&sysshfill AGMCORE_key_known not and - { - /AGMCORE_&sysshfill systemdict/shfill get def - /AGMCORE_&usrshfill /shfill load def - /AGMCORE_&sysmakepattern systemdict/makepattern get def - /AGMCORE_&usrmakepattern /makepattern load def - }if - /currentcmykcolor [0 0 0 0] AGMCORE_gput - /currentstrokeadjust false AGMCORE_gput - /currentcolorspace [/DeviceGray] AGMCORE_gput - /sep_tint 0 AGMCORE_gput - /devicen_tints [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0] AGMCORE_gput - /sep_colorspace_dict null AGMCORE_gput - /devicen_colorspace_dict null AGMCORE_gput - /indexed_colorspace_dict null AGMCORE_gput - /currentcolor_intent () AGMCORE_gput - /customcolor_tint 1 AGMCORE_gput - << - /MaxPatternItem currentsystemparams /MaxPatternCache get - >> - setuserparams - end -}def -/page_setup -{ - /setcmykcolor where{ - pop - Adobe_AGM_Core/AGMCORE_&setcmykcolor /setcmykcolor load put - }if - Adobe_AGM_Core begin - /setcmykcolor - { - 4 copy AGMCORE_cmykbuf astore /currentcmykcolor exch AGMCORE_gput - 1 sub 4 1 roll - 3 { - 3 index add neg dup 0 lt { - pop 0 - } if - 3 1 roll - } repeat - setrgbcolor pop - }ndf - /currentcmykcolor - { - /currentcmykcolor AGMCORE_gget aload pop - }ndf - /setoverprint - { - pop - }ndf - /currentoverprint - { - false - }ndf - /AGMCORE_deviceDPI 72 0 matrix defaultmatrix dtransform dup mul exch dup mul add sqrt def - /AGMCORE_cyan_plate 1 0 0 0 test_cmyk_color_plate def - /AGMCORE_magenta_plate 0 1 0 0 test_cmyk_color_plate def - /AGMCORE_yellow_plate 0 0 1 0 test_cmyk_color_plate def - /AGMCORE_black_plate 0 0 0 1 test_cmyk_color_plate def - /AGMCORE_plate_ndx - AGMCORE_cyan_plate{ - 0 - }{ - AGMCORE_magenta_plate{ - 1 - }{ - AGMCORE_yellow_plate{ - 2 - }{ - AGMCORE_black_plate{ - 3 - }{ - 4 - }ifelse - }ifelse - }ifelse - }ifelse - def - /AGMCORE_have_reported_unsupported_color_space false def - /AGMCORE_report_unsupported_color_space - { - AGMCORE_have_reported_unsupported_color_space false eq - { - (Warning: Job contains content that cannot be separated with on-host methods. This content appears on the black plate, and knocks out all other plates.) == - Adobe_AGM_Core /AGMCORE_have_reported_unsupported_color_space true ddf - } if - }def - /AGMCORE_composite_job - AGMCORE_cyan_plate AGMCORE_magenta_plate and AGMCORE_yellow_plate and AGMCORE_black_plate and def - /AGMCORE_in_rip_sep - /AGMCORE_in_rip_sep where{ - pop AGMCORE_in_rip_sep - }{ - AGMCORE_distilling - { - false - }{ - userdict/Adobe_AGM_OnHost_Seps known{ - false - }{ - level2{ - currentpagedevice/Separations 2 copy known{ - get - }{ - pop pop false - }ifelse - }{ - false - }ifelse - }ifelse - }ifelse - }ifelse - def - /AGMCORE_producing_seps AGMCORE_composite_job not AGMCORE_in_rip_sep or def - /AGMCORE_host_sep AGMCORE_producing_seps AGMCORE_in_rip_sep not and def - /AGM_preserve_spots - /AGM_preserve_spots where{ - pop AGM_preserve_spots - }{ - AGMCORE_distilling AGMCORE_producing_seps or - }ifelse - def - /AGM_is_distiller_preserving_spotimages - { - currentdistillerparams/PreserveOverprintSettings known - { - currentdistillerparams/PreserveOverprintSettings get - { - currentdistillerparams/ColorConversionStrategy known - { - currentdistillerparams/ColorConversionStrategy get - /LeaveColorUnchanged eq - }{ - true - }ifelse - }{ - false - }ifelse - }{ - false - }ifelse - }def - /convert_spot_to_process where {pop}{ - /convert_spot_to_process - { - dup map_alias { - /Name get exch pop - } if - dup dup (None) eq exch (All) eq or - { - pop false - }{ - AGMCORE_host_sep - { - gsave - 1 0 0 0 setcmykcolor currentgray 1 exch sub - 0 1 0 0 setcmykcolor currentgray 1 exch sub - 0 0 1 0 setcmykcolor currentgray 1 exch sub - 0 0 0 1 setcmykcolor currentgray 1 exch sub - add add add 0 eq - { - pop false - }{ - false setoverprint - 1 1 1 1 5 -1 roll findcmykcustomcolor 1 setcustomcolor - currentgray 0 eq - }ifelse - grestore - }{ - AGMCORE_distilling - { - pop AGM_is_distiller_preserving_spotimages not - }{ - Adobe_AGM_Core/AGMCORE_name xddf - false - Adobe_AGM_Core/AGMCORE_in_pattern known {Adobe_AGM_Core/AGMCORE_in_pattern get}{false} ifelse - not currentpagedevice/OverrideSeparations known and - { - currentpagedevice/OverrideSeparations get - { - /HqnSpots /ProcSet resourcestatus - { - pop pop pop true - }if - }if - }if - { - AGMCORE_name /HqnSpots /ProcSet findresource /TestSpot get exec not - }{ - gsave - [/Separation AGMCORE_name /DeviceGray {}]setcolorspace - false - currentpagedevice/SeparationColorNames 2 copy known - { - get - { AGMCORE_name eq or}forall - not - }{ - pop pop pop true - }ifelse - grestore - }ifelse - }ifelse - }ifelse - }ifelse - }def - }ifelse - /convert_to_process where {pop}{ - /convert_to_process - { - dup length 0 eq - { - pop false - }{ - AGMCORE_host_sep - { - dup true exch - { - dup (Cyan) eq exch - dup (Magenta) eq 3 -1 roll or exch - dup (Yellow) eq 3 -1 roll or exch - dup (Black) eq 3 -1 roll or - {pop} - {convert_spot_to_process and}ifelse - } - forall - { - true exch - { - dup (Cyan) eq exch - dup (Magenta) eq 3 -1 roll or exch - dup (Yellow) eq 3 -1 roll or exch - (Black) eq or and - }forall - not - }{pop false}ifelse - }{ - false exch - { - dup (Cyan) eq exch - dup (Magenta) eq 3 -1 roll or exch - dup (Yellow) eq 3 -1 roll or exch - dup (Black) eq 3 -1 roll or - {pop} - {convert_spot_to_process or}ifelse - } - forall - }ifelse - }ifelse - }def - }ifelse - /AGMCORE_avoid_L2_sep_space - version cvr 2012 lt - level2 and - AGMCORE_producing_seps not and - def - /AGMCORE_is_cmyk_sep - AGMCORE_cyan_plate AGMCORE_magenta_plate or AGMCORE_yellow_plate or AGMCORE_black_plate or - def - /AGM_avoid_0_cmyk where{ - pop AGM_avoid_0_cmyk - }{ - AGM_preserve_spots - userdict/Adobe_AGM_OnHost_Seps known - userdict/Adobe_AGM_InRip_Seps known or - not and - }ifelse - { - /setcmykcolor[ - { - 4 copy add add add 0 eq currentoverprint and{ - pop 0.0005 - }if - }/exec cvx - /AGMCORE_&setcmykcolor load dup type/operatortype ne{ - /exec cvx - }if - ]cvx def - }if - AGMCORE_host_sep{ - /setcolortransfer - { - AGMCORE_cyan_plate{ - pop pop pop - }{ - AGMCORE_magenta_plate{ - 4 3 roll pop pop pop - }{ - AGMCORE_yellow_plate{ - 4 2 roll pop pop pop - }{ - 4 1 roll pop pop pop - }ifelse - }ifelse - }ifelse - settransfer - } - def - /AGMCORE_get_ink_data - AGMCORE_cyan_plate{ - {pop pop pop} - }{ - AGMCORE_magenta_plate{ - {4 3 roll pop pop pop} - }{ - AGMCORE_yellow_plate{ - {4 2 roll pop pop pop} - }{ - {4 1 roll pop pop pop} - }ifelse - }ifelse - }ifelse - def - /AGMCORE_RemoveProcessColorNames - { - 1 dict begin - /filtername - { - dup /Cyan eq 1 index (Cyan) eq or - {pop (_cyan_)}if - dup /Magenta eq 1 index (Magenta) eq or - {pop (_magenta_)}if - dup /Yellow eq 1 index (Yellow) eq or - {pop (_yellow_)}if - dup /Black eq 1 index (Black) eq or - {pop (_black_)}if - }def - dup type /arraytype eq - {[exch {filtername}forall]} - {filtername}ifelse - end - }def - /AGMCORE_IsSeparationAProcessColor - { - dup (Cyan) eq exch dup (Magenta) eq exch dup (Yellow) eq exch (Black) eq or or or - }def - level3 { - /AGMCORE_IsCurrentColor - { - gsave - false setoverprint - 1 1 1 1 5 -1 roll findcmykcustomcolor 1 setcustomcolor - currentgray 0 eq - grestore - }def - /AGMCORE_filter_functiondatasource - { - 5 dict begin - /data_in xdf - data_in type /stringtype eq - { - /ncomp xdf - /comp xdf - /string_out data_in length ncomp idiv string def - 0 ncomp data_in length 1 sub - { - string_out exch dup ncomp idiv exch data_in exch ncomp getinterval comp get 255 exch sub put - }for - string_out - }{ - string /string_in xdf - /string_out 1 string def - /component xdf - [ - data_in string_in /readstring cvx - [component /get cvx 255 /exch cvx /sub cvx string_out /exch cvx 0 /exch cvx /put cvx string_out]cvx - [/pop cvx ()]cvx /ifelse cvx - ]cvx /ReusableStreamDecode filter - }ifelse - end - }def - /AGMCORE_separateShadingFunction - { - 2 dict begin - /paint? xdf - /channel xdf - begin - FunctionType 0 eq - { - /DataSource channel Range length 2 idiv DataSource AGMCORE_filter_functiondatasource def - currentdict /Decode known - {/Decode Decode channel 2 mul 2 getinterval def}if - paint? not - {/Decode [1 1]def}if - }if - FunctionType 2 eq - { - paint? - { - /C0 [C0 channel get 1 exch sub] def - /C1 [C1 channel get 1 exch sub] def - }{ - /C0 [1] def - /C1 [1] def - }ifelse - }if - FunctionType 3 eq - { - /Functions [Functions {channel paint? AGMCORE_separateShadingFunction} forall] def - }if - currentdict /Range known - {/Range [0 1] def}if - currentdict - end - end - }def - /AGMCORE_separateShading - { - 3 -1 roll begin - currentdict /Function known - { - currentdict /Background known - {[1 index{Background 3 index get 1 exch sub}{1}ifelse]/Background xdf}if - Function 3 1 roll AGMCORE_separateShadingFunction /Function xdf - /ColorSpace [/DeviceGray] def - }{ - ColorSpace dup type /arraytype eq {0 get}if /DeviceCMYK eq - { - /ColorSpace [/DeviceN [/_cyan_ /_magenta_ /_yellow_ /_black_] /DeviceCMYK {}] def - }{ - ColorSpace dup 1 get AGMCORE_RemoveProcessColorNames 1 exch put - }ifelse - ColorSpace 0 get /Separation eq - { - { - [1 /exch cvx /sub cvx]cvx - }{ - [/pop cvx 1]cvx - }ifelse - ColorSpace 3 3 -1 roll put - pop - }{ - { - [exch ColorSpace 1 get length 1 sub exch sub /index cvx 1 /exch cvx /sub cvx ColorSpace 1 get length 1 add 1 /roll cvx ColorSpace 1 get length{/pop cvx} repeat]cvx - }{ - pop [ColorSpace 1 get length {/pop cvx} repeat cvx 1]cvx - }ifelse - ColorSpace 3 3 -1 roll bind put - }ifelse - ColorSpace 2 /DeviceGray put - }ifelse - end - }def - /AGMCORE_separateShadingDict - { - dup /ColorSpace get - dup type /arraytype ne - {[exch]}if - dup 0 get /DeviceCMYK eq - { - exch begin - currentdict - AGMCORE_cyan_plate - {0 true}if - AGMCORE_magenta_plate - {1 true}if - AGMCORE_yellow_plate - {2 true}if - AGMCORE_black_plate - {3 true}if - AGMCORE_plate_ndx 4 eq - {0 false}if - dup not currentoverprint and - {/AGMCORE_ignoreshade true def}if - AGMCORE_separateShading - currentdict - end exch - }if - dup 0 get /Separation eq - { - exch begin - ColorSpace 1 get dup /None ne exch /All ne and - { - ColorSpace 1 get AGMCORE_IsCurrentColor AGMCORE_plate_ndx 4 lt and ColorSpace 1 get AGMCORE_IsSeparationAProcessColor not and - { - ColorSpace 2 get dup type /arraytype eq {0 get}if /DeviceCMYK eq - { - /ColorSpace - [ - /Separation - ColorSpace 1 get - /DeviceGray - [ - ColorSpace 3 get /exec cvx - 4 AGMCORE_plate_ndx sub -1 /roll cvx - 4 1 /roll cvx - 3 [/pop cvx]cvx /repeat cvx - 1 /exch cvx /sub cvx - ]cvx - ]def - }{ - AGMCORE_report_unsupported_color_space - AGMCORE_black_plate not - { - currentdict 0 false AGMCORE_separateShading - }if - }ifelse - }{ - currentdict ColorSpace 1 get AGMCORE_IsCurrentColor - 0 exch - dup not currentoverprint and - {/AGMCORE_ignoreshade true def}if - AGMCORE_separateShading - }ifelse - }if - currentdict - end exch - }if - dup 0 get /DeviceN eq - { - exch begin - ColorSpace 1 get convert_to_process - { - ColorSpace 2 get dup type /arraytype eq {0 get}if /DeviceCMYK eq - { - /ColorSpace - [ - /DeviceN - ColorSpace 1 get - /DeviceGray - [ - ColorSpace 3 get /exec cvx - 4 AGMCORE_plate_ndx sub -1 /roll cvx - 4 1 /roll cvx - 3 [/pop cvx]cvx /repeat cvx - 1 /exch cvx /sub cvx - ]cvx - ]def - }{ - AGMCORE_report_unsupported_color_space - AGMCORE_black_plate not - { - currentdict 0 false AGMCORE_separateShading - /ColorSpace [/DeviceGray] def - }if - }ifelse - }{ - currentdict - false -1 ColorSpace 1 get - { - AGMCORE_IsCurrentColor - { - 1 add - exch pop true exch exit - }if - 1 add - }forall - exch - dup not currentoverprint and - {/AGMCORE_ignoreshade true def}if - AGMCORE_separateShading - }ifelse - currentdict - end exch - }if - dup 0 get dup /DeviceCMYK eq exch dup /Separation eq exch /DeviceN eq or or not - { - exch begin - ColorSpace dup type /arraytype eq - {0 get}if - /DeviceGray ne - { - AGMCORE_report_unsupported_color_space - AGMCORE_black_plate not - { - ColorSpace 0 get /CIEBasedA eq - { - /ColorSpace [/Separation /_ciebaseda_ /DeviceGray {}] def - }if - ColorSpace 0 get dup /CIEBasedABC eq exch dup /CIEBasedDEF eq exch /DeviceRGB eq or or - { - /ColorSpace [/DeviceN [/_red_ /_green_ /_blue_] /DeviceRGB {}] def - }if - ColorSpace 0 get /CIEBasedDEFG eq - { - /ColorSpace [/DeviceN [/_cyan_ /_magenta_ /_yellow_ /_black_] /DeviceCMYK {}] - }if - currentdict 0 false AGMCORE_separateShading - }if - }if - currentdict - end exch - }if - pop - dup /AGMCORE_ignoreshade known - { - begin - /ColorSpace [/Separation (None) /DeviceGray {}] def - currentdict end - }if - }def - /shfill - { - clonedict - AGMCORE_separateShadingDict - dup /AGMCORE_ignoreshade known - {pop} - {AGMCORE_&sysshfill}ifelse - }def - /makepattern - { - exch - dup /PatternType get 2 eq - { - clonedict - begin - /Shading Shading AGMCORE_separateShadingDict def - currentdict end - exch AGMCORE_&sysmakepattern - }{ - exch AGMCORE_&usrmakepattern - }ifelse - }def - }if - }if - AGMCORE_in_rip_sep{ - /setcustomcolor - { - exch aload pop - dup 7 1 roll inRip_spot_has_ink not { - 4 {4 index mul 4 1 roll} - repeat - /DeviceCMYK setcolorspace - 6 -2 roll pop pop - }{ - Adobe_AGM_Core begin - /AGMCORE_k xdf /AGMCORE_y xdf /AGMCORE_m xdf /AGMCORE_c xdf - end - [/Separation 4 -1 roll /DeviceCMYK - {dup AGMCORE_c mul exch dup AGMCORE_m mul exch dup AGMCORE_y mul exch AGMCORE_k mul} - ] - setcolorspace - }ifelse - setcolor - }ndf - /setseparationgray - { - [/Separation (All) /DeviceGray {}] setcolorspace_opt - 1 exch sub setcolor - }ndf - }{ - /setseparationgray - { - AGMCORE_&setgray - }ndf - }ifelse - /findcmykcustomcolor - { - 5 makereadonlyarray - }ndf - /setcustomcolor - { - exch aload pop pop - 4 {4 index mul 4 1 roll} repeat - setcmykcolor pop - }ndf - /has_color - /colorimage where{ - AGMCORE_producing_seps{ - pop true - }{ - systemdict eq - }ifelse - }{ - false - }ifelse - def - /map_index - { - 1 index mul exch getinterval {255 div} forall - } bdf - /map_indexed_devn - { - Lookup Names length 3 -1 roll cvi map_index - } bdf - /n_color_components - { - base_colorspace_type - dup /DeviceGray eq{ - pop 1 - }{ - /DeviceCMYK eq{ - 4 - }{ - 3 - }ifelse - }ifelse - }bdf - level2{ - /mo /moveto ldf - /li /lineto ldf - /cv /curveto ldf - /knockout_unitsq - { - 1 setgray - 0 0 1 1 rectfill - }def - /level2ScreenFreq{ - begin - 60 - HalftoneType 1 eq{ - pop Frequency - }if - HalftoneType 2 eq{ - pop GrayFrequency - }if - HalftoneType 5 eq{ - pop Default level2ScreenFreq - }if - end - }def - /currentScreenFreq{ - currenthalftone level2ScreenFreq - }def - level2 /setcolorspace AGMCORE_key_known not and{ - /AGMCORE_&&&setcolorspace /setcolorspace ldf - /AGMCORE_ReplaceMappedColor - { - dup type dup /arraytype eq exch /packedarraytype eq or - { - dup 0 get dup /Separation eq - { - pop - dup length array copy - dup dup 1 get - current_spot_alias - { - dup map_alias - { - begin - /sep_colorspace_dict currentdict AGMCORE_gput - pop pop pop - [ - /Separation Name - CSA map_csa - dup /MappedCSA xdf - /sep_colorspace_proc load - ] - dup Name - end - }if - }if - map_reserved_ink_name 1 xpt - }{ - /DeviceN eq - { - dup length array copy - dup dup 1 get [ - exch { - current_spot_alias{ - dup map_alias{ - /Name get exch pop - }if - }if - map_reserved_ink_name - } forall - ] 1 xpt - }if - }ifelse - }if - }def - /setcolorspace - { - dup type dup /arraytype eq exch /packedarraytype eq or - { - dup 0 get /Indexed eq - { - AGMCORE_distilling - { - /PhotoshopDuotoneList where - { - pop false - }{ - true - }ifelse - }{ - true - }ifelse - { - aload pop 3 -1 roll - AGMCORE_ReplaceMappedColor - 3 1 roll 4 array astore - }if - }{ - AGMCORE_ReplaceMappedColor - }ifelse - }if - DeviceN_PS2_inRip_seps {AGMCORE_&&&setcolorspace} if - }def - }if - }{ - /adj - { - currentstrokeadjust{ - transform - 0.25 sub round 0.25 add exch - 0.25 sub round 0.25 add exch - itransform - }if - }def - /mo{ - adj moveto - }def - /li{ - adj lineto - }def - /cv{ - 6 2 roll adj - 6 2 roll adj - 6 2 roll adj curveto - }def - /knockout_unitsq - { - 1 setgray - 8 8 1 [8 0 0 8 0 0] {<ffffffffffffffff>} image - }def - /currentstrokeadjust{ - /currentstrokeadjust AGMCORE_gget - }def - /setstrokeadjust{ - /currentstrokeadjust exch AGMCORE_gput - }def - /currentScreenFreq{ - currentscreen pop pop - }def - /setcolorspace - { - /currentcolorspace exch AGMCORE_gput - } def - /currentcolorspace - { - /currentcolorspace AGMCORE_gget - } def - /setcolor_devicecolor - { - base_colorspace_type - dup /DeviceGray eq{ - pop setgray - }{ - /DeviceCMYK eq{ - setcmykcolor - }{ - setrgbcolor - }ifelse - }ifelse - }def - /setcolor - { - currentcolorspace 0 get - dup /DeviceGray ne{ - dup /DeviceCMYK ne{ - dup /DeviceRGB ne{ - dup /Separation eq{ - pop - currentcolorspace 3 get exec - currentcolorspace 2 get - }{ - dup /Indexed eq{ - pop - currentcolorspace 3 get dup type /stringtype eq{ - currentcolorspace 1 get n_color_components - 3 -1 roll map_index - }{ - exec - }ifelse - currentcolorspace 1 get - }{ - /AGMCORE_cur_err /AGMCORE_invalid_color_space def - AGMCORE_invalid_color_space - }ifelse - }ifelse - }if - }if - }if - setcolor_devicecolor - } def - }ifelse - /sop /setoverprint ldf - /lw /setlinewidth ldf - /lc /setlinecap ldf - /lj /setlinejoin ldf - /ml /setmiterlimit ldf - /dsh /setdash ldf - /sadj /setstrokeadjust ldf - /gry /setgray ldf - /rgb /setrgbcolor ldf - /cmyk /setcmykcolor ldf - /sep /setsepcolor ldf - /devn /setdevicencolor ldf - /idx /setindexedcolor ldf - /colr /setcolor ldf - /csacrd /set_csa_crd ldf - /sepcs /setsepcolorspace ldf - /devncs /setdevicencolorspace ldf - /idxcs /setindexedcolorspace ldf - /cp /closepath ldf - /clp /clp_npth ldf - /eclp /eoclp_npth ldf - /f /fill ldf - /ef /eofill ldf - /@ /stroke ldf - /nclp /npth_clp ldf - /gset /graphic_setup ldf - /gcln /graphic_cleanup ldf - currentdict{ - dup xcheck 1 index type dup /arraytype eq exch /packedarraytype eq or and { - bind - }if - def - }forall - /currentpagedevice currentpagedevice def -/getrampcolor { -/indx exch def -0 1 NumComp 1 sub { -dup -Samples exch get -dup type /stringtype eq { indx get } if -exch -Scaling exch get aload pop -3 1 roll -mul add -} for -ColorSpaceFamily /Separation eq - { - sep - } - { - ColorSpaceFamily /DeviceN eq - { - devn - } - { - setcolor - }ifelse - }ifelse -} bind def -/sssetbackground { aload pop setcolor } bind def -/RadialShade { -40 dict begin -/ColorSpaceFamily exch def -/background exch def -/ext1 exch def -/ext0 exch def -/BBox exch def -/r2 exch def -/c2y exch def -/c2x exch def -/r1 exch def -/c1y exch def -/c1x exch def -/rampdict exch def -/setinkoverprint where {pop /setinkoverprint{pop}def}if -gsave -BBox length 0 gt { -newpath -BBox 0 get BBox 1 get moveto -BBox 2 get BBox 0 get sub 0 rlineto -0 BBox 3 get BBox 1 get sub rlineto -BBox 2 get BBox 0 get sub neg 0 rlineto -closepath -clip -newpath -} if -c1x c2x eq -{ -c1y c2y lt {/theta 90 def}{/theta 270 def} ifelse -} -{ -/slope c2y c1y sub c2x c1x sub div def -/theta slope 1 atan def -c2x c1x lt c2y c1y ge and { /theta theta 180 sub def} if -c2x c1x lt c2y c1y lt and { /theta theta 180 add def} if -} -ifelse -gsave -clippath -c1x c1y translate -theta rotate --90 rotate -{ pathbbox } stopped -{ 0 0 0 0 } if -/yMax exch def -/xMax exch def -/yMin exch def -/xMin exch def -grestore -xMax xMin eq yMax yMin eq or -{ -grestore -end -} -{ -/max { 2 copy gt { pop } {exch pop} ifelse } bind def -/min { 2 copy lt { pop } {exch pop} ifelse } bind def -rampdict begin -40 dict begin -background length 0 gt { background sssetbackground gsave clippath fill grestore } if -gsave -c1x c1y translate -theta rotate --90 rotate -/c2y c1x c2x sub dup mul c1y c2y sub dup mul add sqrt def -/c1y 0 def -/c1x 0 def -/c2x 0 def -ext0 { -0 getrampcolor -c2y r2 add r1 sub 0.0001 lt -{ -c1x c1y r1 360 0 arcn -pathbbox -/aymax exch def -/axmax exch def -/aymin exch def -/axmin exch def -/bxMin xMin axmin min def -/byMin yMin aymin min def -/bxMax xMax axmax max def -/byMax yMax aymax max def -bxMin byMin moveto -bxMax byMin lineto -bxMax byMax lineto -bxMin byMax lineto -bxMin byMin lineto -eofill -} -{ -c2y r1 add r2 le -{ -c1x c1y r1 0 360 arc -fill -} -{ -c2x c2y r2 0 360 arc fill -r1 r2 eq -{ -/p1x r1 neg def -/p1y c1y def -/p2x r1 def -/p2y c1y def -p1x p1y moveto p2x p2y lineto p2x yMin lineto p1x yMin lineto -fill -} -{ -/AA r2 r1 sub c2y div def -/theta AA 1 AA dup mul sub sqrt div 1 atan def -/SS1 90 theta add dup sin exch cos div def -/p1x r1 SS1 SS1 mul SS1 SS1 mul 1 add div sqrt mul neg def -/p1y p1x SS1 div neg def -/SS2 90 theta sub dup sin exch cos div def -/p2x r1 SS2 SS2 mul SS2 SS2 mul 1 add div sqrt mul def -/p2y p2x SS2 div neg def -r1 r2 gt -{ -/L1maxX p1x yMin p1y sub SS1 div add def -/L2maxX p2x yMin p2y sub SS2 div add def -} -{ -/L1maxX 0 def -/L2maxX 0 def -}ifelse -p1x p1y moveto p2x p2y lineto L2maxX L2maxX p2x sub SS2 mul p2y add lineto -L1maxX L1maxX p1x sub SS1 mul p1y add lineto -fill -} -ifelse -} -ifelse -} ifelse -} if -c1x c2x sub dup mul -c1y c2y sub dup mul -add 0.5 exp -0 dtransform -dup mul exch dup mul add 0.5 exp 72 div -0 72 matrix defaultmatrix dtransform dup mul exch dup mul add sqrt -72 0 matrix defaultmatrix dtransform dup mul exch dup mul add sqrt -1 index 1 index lt { exch } if pop -/hires exch def -hires mul -/numpix exch def -/numsteps NumSamples def -/rampIndxInc 1 def -/subsampling false def -numpix 0 ne -{ -NumSamples numpix div 0.5 gt -{ -/numsteps numpix 2 div round cvi dup 1 le { pop 2 } if def -/rampIndxInc NumSamples 1 sub numsteps div def -/subsampling true def -} if -} if -/xInc c2x c1x sub numsteps div def -/yInc c2y c1y sub numsteps div def -/rInc r2 r1 sub numsteps div def -/cx c1x def -/cy c1y def -/radius r1 def -newpath -xInc 0 eq yInc 0 eq rInc 0 eq and and -{ -0 getrampcolor -cx cy radius 0 360 arc -stroke -NumSamples 1 sub getrampcolor -cx cy radius 72 hires div add 0 360 arc -0 setlinewidth -stroke -} -{ -0 -numsteps -{ -dup -subsampling { round cvi } if -getrampcolor -cx cy radius 0 360 arc -/cx cx xInc add def -/cy cy yInc add def -/radius radius rInc add def -cx cy radius 360 0 arcn -eofill -rampIndxInc add -} -repeat -pop -} ifelse -ext1 { -c2y r2 add r1 lt -{ -c2x c2y r2 0 360 arc -fill -} -{ -c2y r1 add r2 sub 0.0001 le -{ -c2x c2y r2 360 0 arcn -pathbbox -/aymax exch def -/axmax exch def -/aymin exch def -/axmin exch def -/bxMin xMin axmin min def -/byMin yMin aymin min def -/bxMax xMax axmax max def -/byMax yMax aymax max def -bxMin byMin moveto -bxMax byMin lineto -bxMax byMax lineto -bxMin byMax lineto -bxMin byMin lineto -eofill -} -{ -c2x c2y r2 0 360 arc fill -r1 r2 eq -{ -/p1x r2 neg def -/p1y c2y def -/p2x r2 def -/p2y c2y def -p1x p1y moveto p2x p2y lineto p2x yMax lineto p1x yMax lineto -fill -} -{ -/AA r2 r1 sub c2y div def -/theta AA 1 AA dup mul sub sqrt div 1 atan def -/SS1 90 theta add dup sin exch cos div def -/p1x r2 SS1 SS1 mul SS1 SS1 mul 1 add div sqrt mul neg def -/p1y c2y p1x SS1 div sub def -/SS2 90 theta sub dup sin exch cos div def -/p2x r2 SS2 SS2 mul SS2 SS2 mul 1 add div sqrt mul def -/p2y c2y p2x SS2 div sub def -r1 r2 lt -{ -/L1maxX p1x yMax p1y sub SS1 div add def -/L2maxX p2x yMax p2y sub SS2 div add def -} -{ -/L1maxX 0 def -/L2maxX 0 def -}ifelse -p1x p1y moveto p2x p2y lineto L2maxX L2maxX p2x sub SS2 mul p2y add lineto -L1maxX L1maxX p1x sub SS1 mul p1y add lineto -fill -} -ifelse -} -ifelse -} ifelse -} if -grestore -grestore -end -end -end -} ifelse -} bind def -/GenStrips { -40 dict begin -/ColorSpaceFamily exch def -/background exch def -/ext1 exch def -/ext0 exch def -/BBox exch def -/y2 exch def -/x2 exch def -/y1 exch def -/x1 exch def -/rampdict exch def -/setinkoverprint where {pop /setinkoverprint{pop}def}if -gsave -BBox length 0 gt { -newpath -BBox 0 get BBox 1 get moveto -BBox 2 get BBox 0 get sub 0 rlineto -0 BBox 3 get BBox 1 get sub rlineto -BBox 2 get BBox 0 get sub neg 0 rlineto -closepath -clip -newpath -} if -x1 x2 eq -{ -y1 y2 lt {/theta 90 def}{/theta 270 def} ifelse -} -{ -/slope y2 y1 sub x2 x1 sub div def -/theta slope 1 atan def -x2 x1 lt y2 y1 ge and { /theta theta 180 sub def} if -x2 x1 lt y2 y1 lt and { /theta theta 180 add def} if -} -ifelse -gsave -clippath -x1 y1 translate -theta rotate -{ pathbbox } stopped -{ 0 0 0 0 } if -/yMax exch def -/xMax exch def -/yMin exch def -/xMin exch def -grestore -xMax xMin eq yMax yMin eq or -{ -grestore -end -} -{ -rampdict begin -20 dict begin -background length 0 gt { background sssetbackground gsave clippath fill grestore } if -gsave -x1 y1 translate -theta rotate -/xStart 0 def -/xEnd x2 x1 sub dup mul y2 y1 sub dup mul add 0.5 exp def -/ySpan yMax yMin sub def -/numsteps NumSamples def -/rampIndxInc 1 def -/subsampling false def -xStart 0 transform -xEnd 0 transform -3 -1 roll -sub dup mul -3 1 roll -sub dup mul -add 0.5 exp 72 div -0 72 matrix defaultmatrix dtransform dup mul exch dup mul add sqrt -72 0 matrix defaultmatrix dtransform dup mul exch dup mul add sqrt -1 index 1 index lt { exch } if pop -mul -/numpix exch def -numpix 0 ne -{ -NumSamples numpix div 0.5 gt -{ -/numsteps numpix 2 div round cvi dup 1 le { pop 2 } if def -/rampIndxInc NumSamples 1 sub numsteps div def -/subsampling true def -} if -} if -ext0 { -0 getrampcolor -xMin xStart lt -{ xMin yMin xMin neg ySpan rectfill } if -} if -/xInc xEnd xStart sub numsteps div def -/x xStart def -0 -numsteps -{ -dup -subsampling { round cvi } if -getrampcolor -x yMin xInc ySpan rectfill -/x x xInc add def -rampIndxInc add -} -repeat -pop -ext1 { -xMax xEnd gt -{ xEnd yMin xMax xEnd sub ySpan rectfill } if -} if -grestore -grestore -end -end -end -} ifelse -} bind def -}def -/page_trailer -{ - end -}def -/doc_trailer{ -}def -systemdict /findcolorrendering known{ - /findcolorrendering systemdict /findcolorrendering get def -}if -systemdict /setcolorrendering known{ - /setcolorrendering systemdict /setcolorrendering get def -}if -/test_cmyk_color_plate -{ - gsave - setcmykcolor currentgray 1 ne - grestore -}def -/inRip_spot_has_ink -{ - dup Adobe_AGM_Core/AGMCORE_name xddf - convert_spot_to_process not -}def -/map255_to_range -{ - 1 index sub - 3 -1 roll 255 div mul add -}def -/set_csa_crd -{ - /sep_colorspace_dict null AGMCORE_gput - begin - CSA map_csa setcolorspace_opt - set_crd - end -} -def -/setsepcolor -{ - /sep_colorspace_dict AGMCORE_gget begin - dup /sep_tint exch AGMCORE_gput - TintProc - end -} def -/setdevicencolor -{ - /devicen_colorspace_dict AGMCORE_gget begin - Names length copy - Names length 1 sub -1 0 - { - /devicen_tints AGMCORE_gget 3 1 roll xpt - } for - TintProc - end -} def -/sep_colorspace_proc -{ - Adobe_AGM_Core/AGMCORE_tmp xddf - /sep_colorspace_dict AGMCORE_gget begin - currentdict/Components known{ - Components aload pop - TintMethod/Lab eq{ - 2 {AGMCORE_tmp mul NComponents 1 roll} repeat - LMax sub AGMCORE_tmp mul LMax add NComponents 1 roll - }{ - TintMethod/Subtractive eq{ - NComponents{ - AGMCORE_tmp mul NComponents 1 roll - }repeat - }{ - NComponents{ - 1 sub AGMCORE_tmp mul 1 add NComponents 1 roll - } repeat - }ifelse - }ifelse - }{ - ColorLookup AGMCORE_tmp ColorLookup length 1 sub mul round cvi get - aload pop - }ifelse - end -} def -/sep_colorspace_gray_proc -{ - Adobe_AGM_Core/AGMCORE_tmp xddf - /sep_colorspace_dict AGMCORE_gget begin - GrayLookup AGMCORE_tmp GrayLookup length 1 sub mul round cvi get - end -} def -/sep_proc_name -{ - dup 0 get - dup /DeviceRGB eq exch /DeviceCMYK eq or level2 not and has_color not and{ - pop [/DeviceGray] - /sep_colorspace_gray_proc - }{ - /sep_colorspace_proc - }ifelse -} def -/setsepcolorspace -{ - current_spot_alias{ - dup begin - Name map_alias{ - exch pop - }if - end - }if - dup /sep_colorspace_dict exch AGMCORE_gput - begin - /MappedCSA CSA map_csa def - Adobe_AGM_Core/AGMCORE_sep_special Name dup () eq exch (All) eq or ddf - AGMCORE_avoid_L2_sep_space{ - [/Indexed MappedCSA sep_proc_name 255 exch - { 255 div } /exec cvx 3 -1 roll [ 4 1 roll load /exec cvx ] cvx - ] setcolorspace_opt - /TintProc { - 255 mul round cvi setcolor - }bdf - }{ - MappedCSA 0 get /DeviceCMYK eq - currentdict/Components known and - AGMCORE_sep_special not and{ - /TintProc [ - Components aload pop Name findcmykcustomcolor - /exch cvx /setcustomcolor cvx - ] cvx bdf - }{ - AGMCORE_host_sep Name (All) eq and{ - /TintProc { - 1 exch sub setseparationgray - }bdf - }{ - AGMCORE_in_rip_sep MappedCSA 0 get /DeviceCMYK eq and - AGMCORE_host_sep or - Name () eq and{ - /TintProc [ - MappedCSA sep_proc_name exch 0 get /DeviceCMYK eq{ - cvx /setcmykcolor cvx - }{ - cvx /setgray cvx - }ifelse - ] cvx bdf - }{ - AGMCORE_producing_seps MappedCSA 0 get dup /DeviceCMYK eq exch /DeviceGray eq or and AGMCORE_sep_special not and{ - /TintProc [ - /dup cvx - MappedCSA sep_proc_name cvx exch - 0 get /DeviceGray eq{ - 1 /exch cvx /sub cvx 0 0 0 4 -1 /roll cvx - }if - /Name cvx /findcmykcustomcolor cvx /exch cvx - AGMCORE_host_sep{ - AGMCORE_is_cmyk_sep - /Name cvx - /AGMCORE_IsSeparationAProcessColor load /exec cvx - /not cvx /and cvx - }{ - Name inRip_spot_has_ink not - }ifelse - [ - /pop cvx 1 - ] cvx /if cvx - /setcustomcolor cvx - ] cvx bdf - }{ - /TintProc /setcolor ldf - [/Separation Name MappedCSA sep_proc_name load ] setcolorspace_opt - }ifelse - }ifelse - }ifelse - }ifelse - }ifelse - set_crd - setsepcolor - end -} def -/additive_blend -{ - 3 dict begin - /numarrays xdf - /numcolors xdf - 0 1 numcolors 1 sub - { - /c1 xdf - 1 - 0 1 numarrays 1 sub - { - 1 exch add /index cvx - c1 /get cvx /mul cvx - }for - numarrays 1 add 1 /roll cvx - }for - numarrays [/pop cvx] cvx /repeat cvx - end -}def -/subtractive_blend -{ - 3 dict begin - /numarrays xdf - /numcolors xdf - 0 1 numcolors 1 sub - { - /c1 xdf - 1 1 - 0 1 numarrays 1 sub - { - 1 3 3 -1 roll add /index cvx - c1 /get cvx /sub cvx /mul cvx - }for - /sub cvx - numarrays 1 add 1 /roll cvx - }for - numarrays [/pop cvx] cvx /repeat cvx - end -}def -/exec_tint_transform -{ - /TintProc [ - /TintTransform cvx /setcolor cvx - ] cvx bdf - MappedCSA setcolorspace_opt -} bdf -/devn_makecustomcolor -{ - 2 dict begin - /names_index xdf - /Names xdf - 1 1 1 1 Names names_index get findcmykcustomcolor - /devicen_tints AGMCORE_gget names_index get setcustomcolor - Names length {pop} repeat - end -} bdf -/setdevicencolorspace -{ - dup /AliasedColorants known {false}{true}ifelse - current_spot_alias and { - 6 dict begin - /names_index 0 def - dup /names_len exch /Names get length def - /new_names names_len array def - /new_LookupTables names_len array def - /alias_cnt 0 def - dup /Names get - { - dup map_alias { - exch pop - dup /ColorLookup known { - dup begin - new_LookupTables names_index ColorLookup put - end - }{ - dup /Components known { - dup begin - new_LookupTables names_index Components put - end - }{ - dup begin - new_LookupTables names_index [null null null null] put - end - } ifelse - } ifelse - new_names names_index 3 -1 roll /Name get put - /alias_cnt alias_cnt 1 add def - }{ - /name xdf - new_names names_index name put - dup /LookupTables known { - dup begin - new_LookupTables names_index LookupTables names_index get put - end - }{ - dup begin - new_LookupTables names_index [null null null null] put - end - } ifelse - } ifelse - /names_index names_index 1 add def - } forall - alias_cnt 0 gt { - /AliasedColorants true def - 0 1 names_len 1 sub { - /names_index xdf - new_LookupTables names_index get 0 get null eq { - dup /Names get names_index get /name xdf - name (Cyan) eq name (Magenta) eq name (Yellow) eq name (Black) eq - or or or not { - /AliasedColorants false def - exit - } if - } if - } for - AliasedColorants { - dup begin - /Names new_names def - /AliasedColorants true def - /LookupTables new_LookupTables def - currentdict /TTTablesIdx known not { - /TTTablesIdx -1 def - } if - currentdict /NComponents known not { - /NComponents TintMethod /Subtractive eq {4}{3}ifelse def - } if - end - } if - }if - end - } if - dup /devicen_colorspace_dict exch AGMCORE_gput - begin - /MappedCSA CSA map_csa def - currentdict /AliasedColorants known { - AliasedColorants - }{ - false - } ifelse - /TintTransform load type /nulltype eq or { - /TintTransform [ - 0 1 Names length 1 sub - { - /TTTablesIdx TTTablesIdx 1 add def - dup LookupTables exch get dup 0 get null eq - { - 1 index - Names exch get - dup (Cyan) eq - { - pop exch - LookupTables length exch sub - /index cvx - 0 0 0 - } - { - dup (Magenta) eq - { - pop exch - LookupTables length exch sub - /index cvx - 0 /exch cvx 0 0 - } - { - (Yellow) eq - { - exch - LookupTables length exch sub - /index cvx - 0 0 3 -1 /roll cvx 0 - } - { - exch - LookupTables length exch sub - /index cvx - 0 0 0 4 -1 /roll cvx - } ifelse - } ifelse - } ifelse - 5 -1 /roll cvx /astore cvx - } - { - dup length 1 sub - LookupTables length 4 -1 roll sub 1 add - /index cvx /mul cvx /round cvx /cvi cvx /get cvx - } ifelse - Names length TTTablesIdx add 1 add 1 /roll cvx - } for - Names length [/pop cvx] cvx /repeat cvx - NComponents Names length - TintMethod /Subtractive eq - { - subtractive_blend - } - { - additive_blend - } ifelse - ] cvx bdf - } if - AGMCORE_host_sep { - Names convert_to_process { - exec_tint_transform - } - { - currentdict /AliasedColorants known { - AliasedColorants not - }{ - false - } ifelse - 5 dict begin - /AvoidAliasedColorants xdf - /painted? false def - /names_index 0 def - /names_len Names length def - Names { - AvoidAliasedColorants { - /currentspotalias current_spot_alias def - false set_spot_alias - } if - AGMCORE_is_cmyk_sep { - dup (Cyan) eq AGMCORE_cyan_plate and exch - dup (Magenta) eq AGMCORE_magenta_plate and exch - dup (Yellow) eq AGMCORE_yellow_plate and exch - (Black) eq AGMCORE_black_plate and or or or { - /devicen_colorspace_dict AGMCORE_gget /TintProc [ - Names names_index /devn_makecustomcolor cvx - ] cvx ddf - /painted? true def - } if - painted? {exit} if - }{ - 0 0 0 0 5 -1 roll findcmykcustomcolor 1 setcustomcolor currentgray 0 eq { - /devicen_colorspace_dict AGMCORE_gget /TintProc [ - Names names_index /devn_makecustomcolor cvx - ] cvx ddf - /painted? true def - exit - } if - } ifelse - AvoidAliasedColorants { - currentspotalias set_spot_alias - } if - /names_index names_index 1 add def - } forall - painted? { - /devicen_colorspace_dict AGMCORE_gget /names_index names_index put - }{ - /devicen_colorspace_dict AGMCORE_gget /TintProc [ - names_len [/pop cvx] cvx /repeat cvx 1 /setseparationgray cvx - 0 0 0 0 () /findcmykcustomcolor cvx 0 /setcustomcolor cvx - ] cvx ddf - } ifelse - end - } ifelse - } - { - AGMCORE_in_rip_sep { - Names convert_to_process not - }{ - level3 - } ifelse - { - [/DeviceN Names MappedCSA /TintTransform load] setcolorspace_opt - /TintProc level3 not AGMCORE_in_rip_sep and { - [ - Names /length cvx [/pop cvx] cvx /repeat cvx - ] cvx bdf - }{ - /setcolor ldf - } ifelse - }{ - exec_tint_transform - } ifelse - } ifelse - set_crd - /AliasedColorants false def - end -} def -/setindexedcolorspace -{ - dup /indexed_colorspace_dict exch AGMCORE_gput - begin - currentdict /CSD known { - CSD get_csd /Names known { - CSD get_csd begin - currentdict devncs - AGMCORE_host_sep{ - 4 dict begin - /devnCompCnt Names length def - /NewLookup HiVal 1 add string def - 0 1 HiVal { - /tableIndex xdf - Lookup dup type /stringtype eq { - devnCompCnt tableIndex map_index - }{ - exec - } ifelse - setdevicencolor - currentgray - tableIndex exch - HiVal mul cvi - NewLookup 3 1 roll put - } for - [/Indexed currentcolorspace HiVal NewLookup] setcolorspace_opt - end - }{ - level3 - { - [/Indexed [/DeviceN Names MappedCSA /TintTransform load] HiVal Lookup] setcolorspace_opt - }{ - [/Indexed MappedCSA HiVal - [ - Lookup dup type /stringtype eq - {/exch cvx CSD get_csd /Names get length dup /mul cvx exch /getinterval cvx {255 div} /forall cvx} - {/exec cvx}ifelse - /TintTransform load /exec cvx - ]cvx - ]setcolorspace_opt - }ifelse - } ifelse - end - }{ - } ifelse - set_crd - } - { - /MappedCSA CSA map_csa def - AGMCORE_host_sep level2 not and{ - 0 0 0 0 setcmykcolor - }{ - [/Indexed MappedCSA - level2 not has_color not and{ - dup 0 get dup /DeviceRGB eq exch /DeviceCMYK eq or{ - pop [/DeviceGray] - }if - HiVal GrayLookup - }{ - HiVal - currentdict/RangeArray known{ - { - /indexed_colorspace_dict AGMCORE_gget begin - Lookup exch - dup HiVal gt{ - pop HiVal - }if - NComponents mul NComponents getinterval {} forall - NComponents 1 sub -1 0{ - RangeArray exch 2 mul 2 getinterval aload pop map255_to_range - NComponents 1 roll - }for - end - } bind - }{ - Lookup - }ifelse - }ifelse - ] setcolorspace_opt - set_crd - }ifelse - }ifelse - end -}def -/setindexedcolor -{ - AGMCORE_host_sep { - /indexed_colorspace_dict AGMCORE_gget dup /CSD known { - begin - CSD get_csd begin - map_indexed_devn - devn - end - end - }{ - AGMCORE_gget/Lookup get 4 3 -1 roll map_index - pop setcmykcolor - } ifelse - }{ - level3 not AGMCORE_in_rip_sep and /indexed_colorspace_dict AGMCORE_gget /CSD known and { - /indexed_colorspace_dict AGMCORE_gget /CSD get get_csd begin - map_indexed_devn - devn - end - } - { - setcolor - } ifelse - }ifelse -} def -/ignoreimagedata -{ - currentoverprint not{ - gsave - dup clonedict begin - 1 setgray - /Decode [0 1] def - /DataSource <FF> def - /MultipleDataSources false def - /BitsPerComponent 8 def - currentdict end - systemdict /image get exec - grestore - }if - consumeimagedata -}def -/add_csa -{ - Adobe_AGM_Core begin - /AGMCORE_CSA_cache xput - end -}def -/get_csa_by_name -{ - dup type dup /nametype eq exch /stringtype eq or{ - Adobe_AGM_Core begin - 1 dict begin - /name xdf - AGMCORE_CSA_cache - { - 0 get name eq { - exit - }{ - pop - } ifelse - }forall - end - end - }{ - pop - } ifelse -}def -/map_csa -{ - dup type /nametype eq{ - Adobe_AGM_Core/AGMCORE_CSA_cache get exch get - }if -}def -/add_csd -{ - Adobe_AGM_Core begin - /AGMCORE_CSD_cache xput - end -}def -/get_csd -{ - dup type /nametype eq{ - Adobe_AGM_Core/AGMCORE_CSD_cache get exch get - }if -}def -/pattern_buf_init -{ - /count get 0 0 put -} def -/pattern_buf_next -{ - dup /count get dup 0 get - dup 3 1 roll - 1 add 0 xpt - get -} def -/cachepattern_compress -{ - 5 dict begin - currentfile exch 0 exch /SubFileDecode filter /ReadFilter exch def - /patarray 20 dict def - /string_size 16000 def - /readbuffer string_size string def - currentglobal true setglobal - patarray 1 array dup 0 1 put /count xpt - setglobal - /LZWFilter - { - exch - dup length 0 eq { - pop - }{ - patarray dup length 1 sub 3 -1 roll put - } ifelse - {string_size}{0}ifelse string - } /LZWEncode filter def - { - ReadFilter readbuffer readstring - exch LZWFilter exch writestring - not {exit} if - } loop - LZWFilter closefile - patarray - end -}def -/cachepattern -{ - 2 dict begin - currentfile exch 0 exch /SubFileDecode filter /ReadFilter exch def - /patarray 20 dict def - currentglobal true setglobal - patarray 1 array dup 0 1 put /count xpt - setglobal - { - ReadFilter 16000 string readstring exch - patarray dup length 1 sub 3 -1 roll put - not {exit} if - } loop - patarray dup dup length 1 sub () put - end -}def -/add_pattern -{ - Adobe_AGM_Core begin - /AGMCORE_pattern_cache xput - end -}def -/get_pattern -{ - dup type /nametype eq{ - Adobe_AGM_Core/AGMCORE_pattern_cache get exch get - dup wrap_paintproc - }if -}def -/wrap_paintproc -{ - statusdict /currentfilenameextend known{ - begin - /OldPaintProc /PaintProc load def - /PaintProc - { - mark exch - dup /OldPaintProc get stopped - {closefile restore end} if - cleartomark - } def - end - } {pop} ifelse -} def -/make_pattern -{ - dup matrix currentmatrix matrix concatmatrix 0 0 3 2 roll itransform - exch 3 index /XStep get 1 index exch 2 copy div cvi mul sub sub - exch 3 index /YStep get 1 index exch 2 copy div cvi mul sub sub - matrix translate exch matrix concatmatrix - 1 index begin - BBox 0 get XStep div cvi XStep mul /xshift exch neg def - BBox 1 get YStep div cvi YStep mul /yshift exch neg def - BBox 0 get xshift add - BBox 1 get yshift add - BBox 2 get xshift add - BBox 3 get yshift add - 4 array astore - /BBox exch def - [ xshift yshift /translate load null /exec load ] dup - 3 /PaintProc load put cvx /PaintProc exch def - end - gsave 0 setgray - makepattern - grestore -}def -/set_pattern -{ - dup /PatternType get 1 eq{ - dup /PaintType get 1 eq{ - currentoverprint sop [/DeviceGray] setcolorspace 0 setgray - }if - }if - setpattern -}def -/setcolorspace_opt -{ - dup currentcolorspace eq{ - pop - }{ - setcolorspace - }ifelse -}def -/updatecolorrendering -{ - currentcolorrendering/Intent known{ - currentcolorrendering/Intent get - }{ - null - }ifelse - Intent ne{ - false - Intent - AGMCORE_CRD_cache { - exch pop - begin - dup Intent eq{ - currentdict setcolorrendering_opt - end - exch pop true exch - exit - }if - end - } forall - pop - not{ - systemdict /findcolorrendering known{ - Intent findcolorrendering pop - /ColorRendering findresource - dup length dict copy - setcolorrendering_opt - }if - }if - }if -} def -/add_crd -{ - AGMCORE_CRD_cache 3 1 roll put -}def -/set_crd -{ - AGMCORE_host_sep not level2 and{ - currentdict/CRD known{ - AGMCORE_CRD_cache CRD get dup null ne{ - setcolorrendering_opt - }{ - pop - }ifelse - }{ - currentdict/Intent known{ - updatecolorrendering - }if - }ifelse - currentcolorspace dup type /arraytype eq - {0 get}if - /DeviceRGB eq - { - currentdict/UCR known - {/UCR}{/AGMCORE_currentucr}ifelse - load setundercolorremoval - currentdict/BG known - {/BG}{/AGMCORE_currentbg}ifelse - load setblackgeneration - }if - }if -}def -/setcolorrendering_opt -{ - dup currentcolorrendering eq{ - pop - }{ - begin - /Intent Intent def - currentdict - end - setcolorrendering - }ifelse -}def -/cpaint_gcomp -{ - convert_to_process Adobe_AGM_Core/AGMCORE_ConvertToProcess xddf - Adobe_AGM_Core/AGMCORE_ConvertToProcess get not - { - (%end_cpaint_gcomp) flushinput - }if -}def -/cpaint_gsep -{ - Adobe_AGM_Core/AGMCORE_ConvertToProcess get - { - (%end_cpaint_gsep) flushinput - }if -}def -/cpaint_gend -{ - newpath -}def -/path_rez -{ - dup 0 ne{ - AGMCORE_deviceDPI exch div - dup 1 lt{ - pop 1 - }if - setflat - }{ - pop - }ifelse -}def -/set_spot_alias_ary -{ - /AGMCORE_SpotAliasAry where{ - pop pop - }{ - Adobe_AGM_Core/AGMCORE_SpotAliasAry xddf - true set_spot_alias - }ifelse -}def -/set_spot_alias -{ - /AGMCORE_SpotAliasAry where{ - /AGMCORE_current_spot_alias 3 -1 roll put - }{ - pop - }ifelse -}def -/current_spot_alias -{ - /AGMCORE_SpotAliasAry where{ - /AGMCORE_current_spot_alias get - }{ - false - }ifelse -}def -/map_alias -{ - /AGMCORE_SpotAliasAry where{ - begin - /AGMCORE_name xdf - false - AGMCORE_SpotAliasAry{ - dup/Name get AGMCORE_name eq{ - save exch - /Adobe_AGM_Core currentdict def - /CSD get get_csd - exch restore - exch pop true - exit - }{ - pop - }ifelse - }forall - end - }{ - pop false - }ifelse -}bdf -/spot_alias -{ - true set_spot_alias - /AGMCORE_&setcustomcolor AGMCORE_key_known not { - Adobe_AGM_Core/AGMCORE_&setcustomcolor /setcustomcolor load put - } if - /customcolor_tint 1 AGMCORE_gput - Adobe_AGM_Core begin - /setcustomcolor - { - dup /customcolor_tint exch AGMCORE_gput - current_spot_alias{ - 1 index 4 get map_alias{ - mark 3 1 roll - setsepcolorspace - counttomark 0 ne{ - setsepcolor - }if - pop - pop - }{ - AGMCORE_&setcustomcolor - }ifelse - }{ - AGMCORE_&setcustomcolor - }ifelse - }bdf - end -}def -/begin_feature -{ - Adobe_AGM_Core/AGMCORE_feature_dictCount countdictstack put - count Adobe_AGM_Core/AGMCORE_feature_opCount 3 -1 roll put - {Adobe_AGM_Core/AGMCORE_feature_ctm matrix currentmatrix put}if -}def -/end_feature -{ - 2 dict begin - /spd /setpagedevice load def - /setpagedevice { get_gstate spd set_gstate } def - stopped{$error/newerror false put}if - end - count Adobe_AGM_Core/AGMCORE_feature_opCount get sub dup 0 gt{{pop}repeat}{pop}ifelse - countdictstack Adobe_AGM_Core/AGMCORE_feature_dictCount get sub dup 0 gt{{end}repeat}{pop}ifelse - {Adobe_AGM_Core/AGMCORE_feature_ctm get setmatrix}if -}def -/set_negative -{ - Adobe_AGM_Core begin - /AGMCORE_inverting exch def - level2{ - currentpagedevice/NegativePrint known{ - currentpagedevice/NegativePrint get Adobe_AGM_Core/AGMCORE_inverting get ne{ - true begin_feature true{ - bdict /NegativePrint Adobe_AGM_Core/AGMCORE_inverting get edict setpagedevice - }end_feature - }if - /AGMCORE_inverting false def - }if - }if - AGMCORE_inverting{ - [{1 exch sub}/exec load dup currenttransfer exch]cvx bind settransfer - gsave newpath clippath 1 /setseparationgray where{pop setseparationgray}{setgray}ifelse - /AGMIRS_&fill where {pop AGMIRS_&fill}{fill} ifelse grestore - }if - end -}def -/lw_save_restore_override { - /md where { - pop - md begin - initializepage - /initializepage{}def - /pmSVsetup{} def - /endp{}def - /pse{}def - /psb{}def - /orig_showpage where - {pop} - {/orig_showpage /showpage load def} - ifelse - /showpage {orig_showpage gR} def - end - }if -}def -/pscript_showpage_override { - /NTPSOct95 where - { - begin - showpage - save - /showpage /restore load def - /restore {exch pop}def - end - }if -}def -/driver_media_override -{ - /md where { - pop - md /initializepage known { - md /initializepage {} put - } if - md /rC known { - md /rC {4{pop}repeat} put - } if - }if - /mysetup where { - /mysetup [1 0 0 1 0 0] put - }if - Adobe_AGM_Core /AGMCORE_Default_CTM matrix currentmatrix put - level2 - {Adobe_AGM_Core /AGMCORE_Default_PageSize currentpagedevice/PageSize get put}if -}def -/driver_check_media_override -{ - /PrepsDict where - {pop} - { - Adobe_AGM_Core /AGMCORE_Default_CTM get matrix currentmatrix ne - Adobe_AGM_Core /AGMCORE_Default_PageSize get type /arraytype eq - { - Adobe_AGM_Core /AGMCORE_Default_PageSize get 0 get currentpagedevice/PageSize get 0 get eq and - Adobe_AGM_Core /AGMCORE_Default_PageSize get 1 get currentpagedevice/PageSize get 1 get eq and - }if - { - Adobe_AGM_Core /AGMCORE_Default_CTM get setmatrix - }if - }ifelse -}def -AGMCORE_err_strings begin - /AGMCORE_bad_environ (Environment not satisfactory for this job. Ensure that the PPD is correct or that the PostScript level requested is supported by this printer. ) def - /AGMCORE_color_space_onhost_seps (This job contains colors that will not separate with on-host methods. ) def - /AGMCORE_invalid_color_space (This job contains an invalid color space. ) def -end -end -systemdict /setpacking known -{ - setpacking -} if -%%EndResource -%%BeginResource: procset Adobe_CoolType_Core 2.23 0 -%%Copyright: Copyright 1997-2003 Adobe Systems Incorporated. All Rights Reserved. -%%Version: 2.23 0 -10 dict begin -/Adobe_CoolType_Passthru currentdict def -/Adobe_CoolType_Core_Defined userdict /Adobe_CoolType_Core known def -Adobe_CoolType_Core_Defined - { /Adobe_CoolType_Core userdict /Adobe_CoolType_Core get def } -if -userdict /Adobe_CoolType_Core 60 dict dup begin put -/Adobe_CoolType_Version 2.23 def -/Level2? - systemdict /languagelevel known dup - { pop systemdict /languagelevel get 2 ge } - if def -Level2? not - { - /currentglobal false def - /setglobal /pop load def - /gcheck { pop false } bind def - /currentpacking false def - /setpacking /pop load def - /SharedFontDirectory 0 dict def - } -if -currentpacking -true setpacking -/@_SaveStackLevels - { - Adobe_CoolType_Data - begin - @opStackCountByLevel @opStackLevel - 2 copy known not - { 2 copy 3 dict dup /args 7 index 5 add array put put get } - { - get dup /args get dup length 3 index lt - { - dup length 5 add array exch - 1 index exch 0 exch putinterval - 1 index exch /args exch put - } - { pop } - ifelse - } - ifelse - begin - count 2 sub 1 index lt - { pop count 1 sub } - if - dup /argCount exch def - dup 0 gt - { - exch 1 index 2 add 1 roll - args exch 0 exch getinterval - astore pop - } - { pop } - ifelse - count 1 sub /restCount exch def - end - /@opStackLevel @opStackLevel 1 add def - countdictstack 1 sub - @dictStackCountByLevel exch @dictStackLevel exch put - /@dictStackLevel @dictStackLevel 1 add def - end - } bind def -/@_RestoreStackLevels - { - Adobe_CoolType_Data - begin - /@opStackLevel @opStackLevel 1 sub def - @opStackCountByLevel @opStackLevel get - begin - count restCount sub dup 0 gt - { { pop } repeat } - { pop } - ifelse - args 0 argCount getinterval {} forall - end - /@dictStackLevel @dictStackLevel 1 sub def - @dictStackCountByLevel @dictStackLevel get - end - countdictstack exch sub dup 0 gt - { { end } repeat } - { pop } - ifelse - } bind def -/@_PopStackLevels - { - Adobe_CoolType_Data - begin - /@opStackLevel @opStackLevel 1 sub def - /@dictStackLevel @dictStackLevel 1 sub def - end - } bind def -/@Raise - { - exch cvx exch errordict exch get exec - stop - } bind def -/@ReRaise - { - cvx $error /errorname get errordict exch get exec - stop - } bind def -/@Stopped - { - 0 @#Stopped - } bind def -/@#Stopped - { - @_SaveStackLevels - stopped - { @_RestoreStackLevels true } - { @_PopStackLevels false } - ifelse - } bind def -/@Arg - { - Adobe_CoolType_Data - begin - @opStackCountByLevel @opStackLevel 1 sub get /args get exch get - end - } bind def -currentglobal true setglobal -/CTHasResourceForAllBug - Level2? - { - 1 dict dup begin - mark - { - (*) { pop stop } 128 string /Category - resourceforall - } - stopped - cleartomark - currentdict eq dup - { end } - if - not - } - { false } - ifelse - def -/CTHasResourceStatusBug - Level2? - { - mark - { /steveamerige /Category resourcestatus } - stopped - { cleartomark true } - { cleartomark currentglobal not } - ifelse - } - { false } - ifelse - def -setglobal -/CTResourceStatus - { - mark 3 1 roll - /Category findresource - begin - ({ResourceStatus} stopped) 0 () /SubFileDecode filter cvx exec - { cleartomark false } - { { 3 2 roll pop true } { cleartomark false } ifelse } - ifelse - end - } bind def -/CTWorkAroundBugs - { - Level2? - { - /cid_PreLoad /ProcSet resourcestatus - { - pop pop - currentglobal - mark - { - (*) - { - dup /CMap CTHasResourceStatusBug - { CTResourceStatus } - { resourcestatus } - ifelse - { - pop dup 0 eq exch 1 eq or - { - dup /CMap findresource gcheck setglobal - /CMap undefineresource - } - { - pop CTHasResourceForAllBug - { exit } - { stop } - ifelse - } - ifelse - } - { pop } - ifelse - } - 128 string /CMap resourceforall - } - stopped - { cleartomark } - stopped pop - setglobal - } - if - } - if - } bind def -/doc_setup - { - Adobe_CoolType_Core - begin - CTWorkAroundBugs - /mov /moveto load def - /nfnt /newencodedfont load def - /mfnt /makefont load def - /sfnt /setfont load def - /ufnt /undefinefont load def - /chp /charpath load def - /awsh /awidthshow load def - /wsh /widthshow load def - /ash /ashow load def - /sh /show load def - end - userdict /Adobe_CoolType_Data 10 dict dup - begin - /AddWidths? false def - /CC 0 def - /charcode 2 string def - /@opStackCountByLevel 32 dict def - /@opStackLevel 0 def - /@dictStackCountByLevel 32 dict def - /@dictStackLevel 0 def - /InVMFontsByCMap 10 dict def - /InVMDeepCopiedFonts 10 dict def - end put - } bind def -/doc_trailer - { - currentdict Adobe_CoolType_Core eq - { end } - if - } bind def -/page_setup - { - Adobe_CoolType_Core begin - } bind def -/page_trailer - { - end - } bind def -/unload - { - systemdict /languagelevel known - { - systemdict/languagelevel get 2 ge - { - userdict/Adobe_CoolType_Core 2 copy known - { undef } - { pop pop } - ifelse - } - if - } - if - } bind def -/ndf - { - 1 index where - { pop pop pop } - { dup xcheck { bind } if def } - ifelse - } def -/findfont systemdict - begin - userdict - begin - /globaldict where { /globaldict get begin } if - dup where pop exch get - /globaldict where { pop end } if - end - end -Adobe_CoolType_Core_Defined - { /systemfindfont exch def } - { - /findfont 1 index def - /systemfindfont exch def - } -ifelse -/undefinefont - { pop } ndf -/copyfont - { - currentglobal 3 1 roll - 1 index gcheck setglobal - dup null eq { 0 } { dup length } ifelse - 2 index length add 1 add dict - begin - exch - { - 1 index /FID eq - { pop pop } - { def } - ifelse - } - forall - dup null eq - { pop } - { { def } forall } - ifelse - currentdict - end - exch setglobal - } bind def -/copyarray - { - currentglobal exch - dup gcheck setglobal - dup length array copy - exch setglobal - } bind def -/newencodedfont - { - currentglobal - { - SharedFontDirectory 3 index known - { SharedFontDirectory 3 index get /FontReferenced known } - { false } - ifelse - } - { - FontDirectory 3 index known - { FontDirectory 3 index get /FontReferenced known } - { - SharedFontDirectory 3 index known - { SharedFontDirectory 3 index get /FontReferenced known } - { false } - ifelse - } - ifelse - } - ifelse - dup - { - 3 index findfont /FontReferenced get - 2 index dup type /nametype eq - {findfont} - if ne - { pop false } - if - } - if - { - pop - 1 index findfont - /Encoding get exch - 0 1 255 - { 2 copy get 3 index 3 1 roll put } - for - pop pop pop - } - { - dup type /nametype eq - { findfont } - if - dup dup maxlength 2 add dict - begin - exch - { - 1 index /FID ne - {def} - {pop pop} - ifelse - } - forall - /FontReferenced exch def - /Encoding exch dup length array copy def - /FontName 1 index dup type /stringtype eq { cvn } if def dup - currentdict - end - definefont def - } - ifelse - } bind def -/SetSubstituteStrategy - { - $SubstituteFont - begin - dup type /dicttype ne - { 0 dict } - if - currentdict /$Strategies known - { - exch $Strategies exch - 2 copy known - { - get - 2 copy maxlength exch maxlength add dict - begin - { def } forall - { def } forall - currentdict - dup /$Init known - { dup /$Init get exec } - if - end - /$Strategy exch def - } - { pop pop pop } - ifelse - } - { pop pop } - ifelse - end - } bind def -/scff - { - $SubstituteFont - begin - dup type /stringtype eq - { dup length exch } - { null } - ifelse - /$sname exch def - /$slen exch def - /$inVMIndex - $sname null eq - { - 1 index $str cvs - dup length $slen sub $slen getinterval cvn - } - { $sname } - ifelse def - end - { findfont } - @Stopped - { - dup length 8 add string exch - 1 index 0 (BadFont:) putinterval - 1 index exch 8 exch dup length string cvs putinterval cvn - { findfont } - @Stopped - { pop /Courier findfont } - if - } - if - $SubstituteFont - begin - /$sname null def - /$slen 0 def - /$inVMIndex null def - end - } bind def -/isWidthsOnlyFont - { - dup /WidthsOnly known - { pop pop true } - { - dup /FDepVector known - { /FDepVector get { isWidthsOnlyFont dup { exit } if } forall } - { - dup /FDArray known - { /FDArray get { isWidthsOnlyFont dup { exit } if } forall } - { pop } - ifelse - } - ifelse - } - ifelse - } bind def -/?str1 256 string def -/?set - { - $SubstituteFont - begin - /$substituteFound false def - /$fontname 4 index def - /$doSmartSub false def - end - 3 index - currentglobal false setglobal exch - /CompatibleFonts /ProcSet resourcestatus - { - pop pop - /CompatibleFonts /ProcSet findresource - begin - dup /CompatibleFont currentexception - 1 index /CompatibleFont true setexception - 1 index /Font resourcestatus - { - pop pop - 3 2 roll setglobal - end - exch - dup findfont - /CompatibleFonts /ProcSet findresource - begin - 3 1 roll exch /CompatibleFont exch setexception - end - } - { - 3 2 roll setglobal - 1 index exch /CompatibleFont exch setexception - end - findfont - $SubstituteFont /$substituteFound true put - } - ifelse - } - { exch setglobal findfont } - ifelse - $SubstituteFont - begin - $substituteFound - { - false - (%%[Using embedded font ) print - 5 index ?str1 cvs print - ( to avoid the font substitution problem noted earlier.]%%\n) print - } - { - dup /FontName known - { - dup /FontName get $fontname eq - 1 index /DistillerFauxFont known not and - /currentdistillerparams where - { pop false 2 index isWidthsOnlyFont not and } - if - } - { false } - ifelse - } - ifelse - exch pop - /$doSmartSub true def - end - { - exch pop exch pop exch - 2 dict dup /Found 3 index put - exch findfont exch - } - { - exch exec - exch dup findfont - dup /FontType get 3 eq - { - exch ?str1 cvs - dup length 1 sub - -1 0 - { - exch dup 2 index get 42 eq - { - exch 0 exch getinterval cvn 4 1 roll 3 2 roll pop - exit - } - {exch pop} ifelse - }for - } - { - exch pop - } ifelse - 2 dict dup /Downloaded 6 5 roll put - } - ifelse - dup /FontName 4 index put copyfont definefont pop - } bind def -/?str2 256 string def -/?add - { - 1 index type /integertype eq - { exch true 4 2 } - { false 3 1 } - ifelse - roll - 1 index findfont - dup /Widths known - { - Adobe_CoolType_Data /AddWidths? true put - gsave dup 1000 scalefont setfont - } - if - /Downloaded known - { - exec - exch - { - exch ?str2 cvs exch - findfont /Downloaded get 1 dict begin /Downloaded 1 index def ?str1 cvs length - ?str1 1 index 1 add 3 index putinterval - exch length 1 add 1 index add - ?str1 2 index (*) putinterval - ?str1 0 2 index getinterval cvn findfont - ?str1 3 index (+) putinterval - 2 dict dup /FontName ?str1 0 6 index getinterval cvn put - dup /Downloaded Downloaded put end copyfont - dup /FontName get exch definefont pop pop pop - } - { - pop - } - ifelse - } - { - pop - exch - { - findfont - dup /Found get - dup length exch ?str1 cvs pop - ?str1 1 index (+) putinterval - ?str1 1 index 1 add 4 index ?str2 cvs putinterval - ?str1 exch 0 exch 5 4 roll ?str2 cvs length 1 add add getinterval cvn - 1 dict exch 1 index exch /FontName exch put copyfont - dup /FontName get exch definefont pop - } - { - pop - } - ifelse - } - ifelse - Adobe_CoolType_Data /AddWidths? get - { grestore Adobe_CoolType_Data /AddWidths? false put } - if - } bind def -/?sh - { - currentfont /Downloaded known { exch } if pop - } bind def -/?chp - { - currentfont /Downloaded known { pop } { false chp } ifelse - } bind def -/?mv - { - currentfont /Downloaded known { moveto pop pop } { pop pop moveto } ifelse - } bind def -setpacking -userdict /$SubstituteFont 25 dict put -1 dict - begin - /SubstituteFont - dup $error exch 2 copy known - { get } - { pop pop { pop /Courier } bind } - ifelse def - /currentdistillerparams where dup - { - pop pop - currentdistillerparams /CannotEmbedFontPolicy 2 copy known - { get /Error eq } - { pop pop false } - ifelse - } - if not - { - countdictstack array dictstack 0 get - begin - userdict - begin - $SubstituteFont - begin - /$str 128 string def - /$fontpat 128 string def - /$slen 0 def - /$sname null def - /$match false def - /$fontname null def - /$substituteFound false def - /$inVMIndex null def - /$doSmartSub true def - /$depth 0 def - /$fontname null def - /$italicangle 26.5 def - /$dstack null def - /$Strategies 10 dict dup - begin - /$Type3Underprint - { - currentglobal exch false setglobal - 11 dict - begin - /UseFont exch - $WMode 0 ne - { - dup length dict copy - dup /WMode $WMode put - /UseFont exch definefont - } - if def - /FontName $fontname dup type /stringtype eq { cvn } if def - /FontType 3 def - /FontMatrix [ .001 0 0 .001 0 0 ] def - /Encoding 256 array dup 0 1 255 { /.notdef put dup } for pop def - /FontBBox [ 0 0 0 0 ] def - /CCInfo 7 dict dup - begin - /cc null def - /x 0 def - /y 0 def - end def - /BuildChar - { - exch - begin - CCInfo - begin - 1 string dup 0 3 index put exch pop - /cc exch def - UseFont 1000 scalefont setfont - cc stringwidth /y exch def /x exch def - x y setcharwidth - $SubstituteFont /$Strategy get /$Underprint get exec - 0 0 moveto cc show - x y moveto - end - end - } bind def - currentdict - end - exch setglobal - } bind def - /$GetaTint - 2 dict dup - begin - /$BuildFont - { - dup /WMode known - { dup /WMode get } - { 0 } - ifelse - /$WMode exch def - $fontname exch - dup /FontName known - { - dup /FontName get - dup type /stringtype eq { cvn } if - } - { /unnamedfont } - ifelse - exch - Adobe_CoolType_Data /InVMDeepCopiedFonts get - 1 index /FontName get known - { - pop - Adobe_CoolType_Data /InVMDeepCopiedFonts get - 1 index get - null copyfont - } - { $deepcopyfont } - ifelse - exch 1 index exch /FontBasedOn exch put - dup /FontName $fontname dup type /stringtype eq { cvn } if put - definefont - Adobe_CoolType_Data /InVMDeepCopiedFonts get - begin - dup /FontBasedOn get 1 index def - end - } bind def - /$Underprint - { - gsave - x abs y abs gt - { /y 1000 def } - { /x -1000 def 500 120 translate } - ifelse - Level2? - { - [ /Separation (All) /DeviceCMYK { 0 0 0 1 pop } ] - setcolorspace - } - { 0 setgray } - ifelse - 10 setlinewidth - x .8 mul - [ 7 3 ] - { - y mul 8 div 120 sub x 10 div exch moveto - 0 y 4 div neg rlineto - dup 0 rlineto - 0 y 4 div rlineto - closepath - gsave - Level2? - { .2 setcolor } - { .8 setgray } - ifelse - fill grestore - stroke - } - forall - pop - grestore - } bind def - end def - /$Oblique - 1 dict dup - begin - /$BuildFont - { - currentglobal exch dup gcheck setglobal - null copyfont - begin - /FontBasedOn - currentdict /FontName known - { - FontName - dup type /stringtype eq { cvn } if - } - { /unnamedfont } - ifelse - def - /FontName $fontname dup type /stringtype eq { cvn } if def - /currentdistillerparams where - { pop } - { - /FontInfo currentdict /FontInfo known - { FontInfo null copyfont } - { 2 dict } - ifelse - dup - begin - /ItalicAngle $italicangle def - /FontMatrix FontMatrix - [ 1 0 ItalicAngle dup sin exch cos div 1 0 0 ] - matrix concatmatrix readonly - end - 4 2 roll def - def - } - ifelse - FontName currentdict - end - definefont - exch setglobal - } bind def - end def - /$None - 1 dict dup - begin - /$BuildFont {} bind def - end def - end def - /$Oblique SetSubstituteStrategy - /$findfontByEnum - { - dup type /stringtype eq { cvn } if - dup /$fontname exch def - $sname null eq - { $str cvs dup length $slen sub $slen getinterval } - { pop $sname } - ifelse - $fontpat dup 0 (fonts/*) putinterval exch 7 exch putinterval - /$match false def - $SubstituteFont /$dstack countdictstack array dictstack put - mark - { - $fontpat 0 $slen 7 add getinterval - { /$match exch def exit } - $str filenameforall - } - stopped - { - cleardictstack - currentdict - true - $SubstituteFont /$dstack get - { - exch - { - 1 index eq - { pop false } - { true } - ifelse - } - { begin false } - ifelse - } - forall - pop - } - if - cleartomark - /$slen 0 def - $match false ne - { $match (fonts/) anchorsearch pop pop cvn } - { /Courier } - ifelse - } bind def - /$ROS 1 dict dup - begin - /Adobe 4 dict dup - begin - /Japan1 [ /Ryumin-Light /HeiseiMin-W3 - /GothicBBB-Medium /HeiseiKakuGo-W5 - /HeiseiMaruGo-W4 /Jun101-Light ] def - /Korea1 [ /HYSMyeongJo-Medium /HYGoThic-Medium ] def - /GB1 [ /STSong-Light /STHeiti-Regular ] def - /CNS1 [ /MKai-Medium /MHei-Medium ] def - end def - end def - /$cmapname null def - /$deepcopyfont - { - dup /FontType get 0 eq - { - 1 dict dup /FontName /copied put copyfont - begin - /FDepVector FDepVector copyarray - 0 1 2 index length 1 sub - { - 2 copy get $deepcopyfont - dup /FontName /copied put - /copied exch definefont - 3 copy put pop pop - } - for - def - currentdict - end - } - { $Strategies /$Type3Underprint get exec } - ifelse - } bind def - /$buildfontname - { - dup /CIDFont findresource /CIDSystemInfo get - begin - Registry length Ordering length Supplement 8 string cvs - 3 copy length 2 add add add string - dup 5 1 roll dup 0 Registry putinterval - dup 4 index (-) putinterval - dup 4 index 1 add Ordering putinterval - 4 2 roll add 1 add 2 copy (-) putinterval - end - 1 add 2 copy 0 exch getinterval $cmapname $fontpat cvs exch - anchorsearch - { pop pop 3 2 roll putinterval cvn /$cmapname exch def } - { pop pop pop pop pop } - ifelse - length - $str 1 index (-) putinterval 1 add - $str 1 index $cmapname $fontpat cvs putinterval - $cmapname length add - $str exch 0 exch getinterval cvn - } bind def - /$findfontByROS - { - /$fontname exch def - $ROS Registry 2 copy known - { - get Ordering 2 copy known - { get } - { pop pop [] } - ifelse - } - { pop pop [] } - ifelse - false exch - { - dup /CIDFont resourcestatus - { - pop pop - save - 1 index /CIDFont findresource - dup /WidthsOnly known - { dup /WidthsOnly get } - { false } - ifelse - exch pop - exch restore - { pop } - { exch pop true exit } - ifelse - } - { pop } - ifelse - } - forall - { $str cvs $buildfontname } - { - false (*) - { - save exch - dup /CIDFont findresource - dup /WidthsOnly known - { dup /WidthsOnly get not } - { true } - ifelse - exch /CIDSystemInfo get - dup /Registry get Registry eq - exch /Ordering get Ordering eq and and - { exch restore exch pop true exit } - { pop restore } - ifelse - } - $str /CIDFont resourceforall - { $buildfontname } - { $fontname $findfontByEnum } - ifelse - } - ifelse - } bind def - end - end - currentdict /$error known currentdict /languagelevel known and dup - { pop $error /SubstituteFont known } - if - dup - { $error } - { Adobe_CoolType_Core } - ifelse - begin - { - /SubstituteFont - /CMap /Category resourcestatus - { - pop pop - { - $SubstituteFont - begin - /$substituteFound true def - dup length $slen gt - $sname null ne or - $slen 0 gt and - { - $sname null eq - { dup $str cvs dup length $slen sub $slen getinterval cvn } - { $sname } - ifelse - Adobe_CoolType_Data /InVMFontsByCMap get - 1 index 2 copy known - { - get - false exch - { - pop - currentglobal - { - GlobalFontDirectory 1 index known - { exch pop true exit } - { pop } - ifelse - } - { - FontDirectory 1 index known - { exch pop true exit } - { - GlobalFontDirectory 1 index known - { exch pop true exit } - { pop } - ifelse - } - ifelse - } - ifelse - } - forall - } - { pop pop false } - ifelse - { - exch pop exch pop - } - { - dup /CMap resourcestatus - { - pop pop - dup /$cmapname exch def - /CMap findresource /CIDSystemInfo get { def } forall - $findfontByROS - } - { - 128 string cvs - dup (-) search - { - 3 1 roll search - { - 3 1 roll pop - { dup cvi } - stopped - { pop pop pop pop pop $findfontByEnum } - { - 4 2 roll pop pop - exch length - exch - 2 index length - 2 index - sub - exch 1 sub -1 0 - { - $str cvs dup length - 4 index - 0 - 4 index - 4 3 roll add - getinterval - exch 1 index exch 3 index exch - putinterval - dup /CMap resourcestatus - { - pop pop - 4 1 roll pop pop pop - dup /$cmapname exch def - /CMap findresource /CIDSystemInfo get { def } forall - $findfontByROS - true exit - } - { pop } - ifelse - } - for - dup type /booleantype eq - { pop } - { pop pop pop $findfontByEnum } - ifelse - } - ifelse - } - { pop pop pop $findfontByEnum } - ifelse - } - { pop pop $findfontByEnum } - ifelse - } - ifelse - } - ifelse - } - { //SubstituteFont exec } - ifelse - /$slen 0 def - end - } - } - { - { - $SubstituteFont - begin - /$substituteFound true def - dup length $slen gt - $sname null ne or - $slen 0 gt and - { $findfontByEnum } - { //SubstituteFont exec } - ifelse - end - } - } - ifelse - bind readonly def - Adobe_CoolType_Core /scfindfont /systemfindfont load put - } - { - /scfindfont - { - $SubstituteFont - begin - dup systemfindfont - dup /FontName known - { dup /FontName get dup 3 index ne } - { /noname true } - ifelse - dup - { - /$origfontnamefound 2 index def - /$origfontname 4 index def /$substituteFound true def - } - if - exch pop - { - $slen 0 gt - $sname null ne - 3 index length $slen gt or and - { - pop dup $findfontByEnum findfont - dup maxlength 1 add dict - begin - { 1 index /FID eq { pop pop } { def } ifelse } - forall - currentdict - end - definefont - dup /FontName known { dup /FontName get } { null } ifelse - $origfontnamefound ne - { - $origfontname $str cvs print - ( substitution revised, using ) print - dup /FontName known - { dup /FontName get } { (unspecified font) } - ifelse - $str cvs print (.\n) print - } - if - } - { exch pop } - ifelse - } - { exch pop } - ifelse - end - } bind def - } - ifelse - end - end - Adobe_CoolType_Core_Defined not - { - Adobe_CoolType_Core /findfont - { - $SubstituteFont - begin - $depth 0 eq - { - /$fontname 1 index dup type /stringtype ne { $str cvs } if def - /$substituteFound false def - } - if - /$depth $depth 1 add def - end - scfindfont - $SubstituteFont - begin - /$depth $depth 1 sub def - $substituteFound $depth 0 eq and - { - $inVMIndex null ne - { dup $inVMIndex $AddInVMFont } - if - $doSmartSub - { - currentdict /$Strategy known - { $Strategy /$BuildFont get exec } - if - } - if - } - if - end - } bind put - } - if - } - if - end -/$AddInVMFont - { - exch /FontName 2 copy known - { - get - 1 dict dup begin exch 1 index gcheck def end exch - Adobe_CoolType_Data /InVMFontsByCMap get exch - $DictAdd - } - { pop pop pop } - ifelse - } bind def -/$DictAdd - { - 2 copy known not - { 2 copy 4 index length dict put } - if - Level2? not - { - 2 copy get dup maxlength exch length 4 index length add lt - 2 copy get dup length 4 index length add exch maxlength 1 index lt - { - 2 mul dict - begin - 2 copy get { forall } def - 2 copy currentdict put - end - } - { pop } - ifelse - } - if - get - begin - { def } - forall - end - } bind def -end -end -%%EndResource -%%BeginResource: procset Adobe_CoolType_Utility_MAKEOCF 1.19 0 -%%Copyright: Copyright 1987-2003 Adobe Systems Incorporated. -%%Version: 1.19 0 -systemdict /languagelevel known dup - { currentglobal false setglobal } - { false } -ifelse -exch -userdict /Adobe_CoolType_Utility 2 copy known - { 2 copy get dup maxlength 25 add dict copy } - { 25 dict } -ifelse put -Adobe_CoolType_Utility - begin - /ct_Level2? exch def - /ct_Clone? 1183615869 internaldict dup - /CCRun known not - exch /eCCRun known not - ct_Level2? and or def -ct_Level2? - { globaldict begin currentglobal true setglobal } -if - /ct_AddStdCIDMap - ct_Level2? - { { - ((Hex) 57 StartData - 0615 1e27 2c39 1c60 d8a8 cc31 fe2b f6e0 - 7aa3 e541 e21c 60d8 a8c9 c3d0 6d9e 1c60 - d8a8 c9c2 02d7 9a1c 60d8 a849 1c60 d8a8 - cc36 74f4 1144 b13b 77) 0 () /SubFileDecode filter cvx exec - } } - { { - <BAB431EA07F209EB8C4348311481D9D3F76E3D15246555577D87BC510ED54E - 118C39697FA9F6DB58128E60EB8A12FA24D7CDD2FA94D221FA9EC8DA3E5E6A1C - 4ACECC8C2D39C54E7C946031DD156C3A6B4A09AD29E1867A> eexec - } } - ifelse bind def -userdict /cid_extensions known -dup { cid_extensions /cid_UpdateDB known and } if - { - cid_extensions - begin - /cid_GetCIDSystemInfo - { - 1 index type /stringtype eq - { exch cvn exch } - if - cid_extensions - begin - dup load 2 index known - { - 2 copy - cid_GetStatusInfo - dup null ne - { - 1 index load - 3 index get - dup null eq - { pop pop cid_UpdateDB } - { - exch - 1 index /Created get eq - { exch pop exch pop } - { pop cid_UpdateDB } - ifelse - } - ifelse - } - { pop cid_UpdateDB } - ifelse - } - { cid_UpdateDB } - ifelse - end - } bind def - end - } -if -ct_Level2? - { end setglobal } -if - /ct_UseNativeCapability? systemdict /composefont known def - /ct_MakeOCF 35 dict def - /ct_Vars 25 dict def - /ct_GlyphDirProcs 6 dict def - /ct_BuildCharDict 15 dict dup - begin - /charcode 2 string def - /dst_string 1500 string def - /nullstring () def - /usewidths? true def - end def - ct_Level2? { setglobal } { pop } ifelse - ct_GlyphDirProcs - begin - /GetGlyphDirectory - { - systemdict /languagelevel known - { pop /CIDFont findresource /GlyphDirectory get } - { - 1 index /CIDFont findresource /GlyphDirectory - get dup type /dicttype eq - { - dup dup maxlength exch length sub 2 index lt - { - dup length 2 index add dict copy 2 index - /CIDFont findresource/GlyphDirectory 2 index put - } - if - } - if - exch pop exch pop - } - ifelse - + - } def - /+ - { - systemdict /languagelevel known - { - currentglobal false setglobal - 3 dict begin - /vm exch def - } - { 1 dict begin } - ifelse - /$ exch def - systemdict /languagelevel known - { - vm setglobal - /gvm currentglobal def - $ gcheck setglobal - } - if - ? { $ begin } if - } def - /? { $ type /dicttype eq } def - /| { - userdict /Adobe_CoolType_Data known - { - Adobe_CoolType_Data /AddWidths? known - { - currentdict Adobe_CoolType_Data - begin - begin - AddWidths? - { - Adobe_CoolType_Data /CC 3 index put - ? { def } { $ 3 1 roll put } ifelse - CC charcode exch 1 index 0 2 index 256 idiv put - 1 index exch 1 exch 256 mod put - stringwidth 2 array astore - currentfont /Widths get exch CC exch put - } - { ? { def } { $ 3 1 roll put } ifelse } - ifelse - end - end - } - { ? { def } { $ 3 1 roll put } ifelse } ifelse - } - { ? { def } { $ 3 1 roll put } ifelse } - ifelse - } def - /! - { - ? { end } if - systemdict /languagelevel known - { gvm setglobal } - if - end - } def - /: { string currentfile exch readstring pop } executeonly def - end - ct_MakeOCF - begin - /ct_cHexEncoding - [/c00/c01/c02/c03/c04/c05/c06/c07/c08/c09/c0A/c0B/c0C/c0D/c0E/c0F/c10/c11/c12 - /c13/c14/c15/c16/c17/c18/c19/c1A/c1B/c1C/c1D/c1E/c1F/c20/c21/c22/c23/c24/c25 - /c26/c27/c28/c29/c2A/c2B/c2C/c2D/c2E/c2F/c30/c31/c32/c33/c34/c35/c36/c37/c38 - /c39/c3A/c3B/c3C/c3D/c3E/c3F/c40/c41/c42/c43/c44/c45/c46/c47/c48/c49/c4A/c4B - /c4C/c4D/c4E/c4F/c50/c51/c52/c53/c54/c55/c56/c57/c58/c59/c5A/c5B/c5C/c5D/c5E - /c5F/c60/c61/c62/c63/c64/c65/c66/c67/c68/c69/c6A/c6B/c6C/c6D/c6E/c6F/c70/c71 - /c72/c73/c74/c75/c76/c77/c78/c79/c7A/c7B/c7C/c7D/c7E/c7F/c80/c81/c82/c83/c84 - /c85/c86/c87/c88/c89/c8A/c8B/c8C/c8D/c8E/c8F/c90/c91/c92/c93/c94/c95/c96/c97 - /c98/c99/c9A/c9B/c9C/c9D/c9E/c9F/cA0/cA1/cA2/cA3/cA4/cA5/cA6/cA7/cA8/cA9/cAA - /cAB/cAC/cAD/cAE/cAF/cB0/cB1/cB2/cB3/cB4/cB5/cB6/cB7/cB8/cB9/cBA/cBB/cBC/cBD - /cBE/cBF/cC0/cC1/cC2/cC3/cC4/cC5/cC6/cC7/cC8/cC9/cCA/cCB/cCC/cCD/cCE/cCF/cD0 - /cD1/cD2/cD3/cD4/cD5/cD6/cD7/cD8/cD9/cDA/cDB/cDC/cDD/cDE/cDF/cE0/cE1/cE2/cE3 - /cE4/cE5/cE6/cE7/cE8/cE9/cEA/cEB/cEC/cED/cEE/cEF/cF0/cF1/cF2/cF3/cF4/cF5/cF6 - /cF7/cF8/cF9/cFA/cFB/cFC/cFD/cFE/cFF] def - /ct_CID_STR_SIZE 8000 def - /ct_mkocfStr100 100 string def - /ct_defaultFontMtx [.001 0 0 .001 0 0] def - /ct_1000Mtx [1000 0 0 1000 0 0] def - /ct_raise {exch cvx exch errordict exch get exec stop} bind def - /ct_reraise - { cvx $error /errorname get (Error: ) print dup ( ) cvs print - errordict exch get exec stop - } bind def - /ct_cvnsi - { - 1 index add 1 sub 1 exch 0 4 1 roll - { - 2 index exch get - exch 8 bitshift - add - } - for - exch pop - } bind def - /ct_GetInterval - { - Adobe_CoolType_Utility /ct_BuildCharDict get - begin - /dst_index 0 def - dup dst_string length gt - { dup string /dst_string exch def } - if - 1 index ct_CID_STR_SIZE idiv - /arrayIndex exch def - 2 index arrayIndex get - 2 index - arrayIndex ct_CID_STR_SIZE mul - sub - { - dup 3 index add 2 index length le - { - 2 index getinterval - dst_string dst_index 2 index putinterval - length dst_index add /dst_index exch def - exit - } - { - 1 index length 1 index sub - dup 4 1 roll - getinterval - dst_string dst_index 2 index putinterval - pop dup dst_index add /dst_index exch def - sub - /arrayIndex arrayIndex 1 add def - 2 index dup length arrayIndex gt - { arrayIndex get } - { - pop - exit - } - ifelse - 0 - } - ifelse - } - loop - pop pop pop - dst_string 0 dst_index getinterval - end - } bind def - ct_Level2? - { - /ct_resourcestatus - currentglobal mark true setglobal - { /unknowninstancename /Category resourcestatus } - stopped - { cleartomark setglobal true } - { cleartomark currentglobal not exch setglobal } - ifelse - { - { - mark 3 1 roll /Category findresource - begin - ct_Vars /vm currentglobal put - ({ResourceStatus} stopped) 0 () /SubFileDecode filter cvx exec - { cleartomark false } - { { 3 2 roll pop true } { cleartomark false } ifelse } - ifelse - ct_Vars /vm get setglobal - end - } - } - { { resourcestatus } } - ifelse bind def - /CIDFont /Category ct_resourcestatus - { pop pop } - { - currentglobal true setglobal - /Generic /Category findresource - dup length dict copy - dup /InstanceType /dicttype put - /CIDFont exch /Category defineresource pop - setglobal - } - ifelse - ct_UseNativeCapability? - { - /CIDInit /ProcSet findresource begin - 12 dict begin - begincmap - /CIDSystemInfo 3 dict dup begin - /Registry (Adobe) def - /Ordering (Identity) def - /Supplement 0 def - end def - /CMapName /Identity-H def - /CMapVersion 1.000 def - /CMapType 1 def - 1 begincodespacerange - <0000> <FFFF> - endcodespacerange - 1 begincidrange - <0000> <FFFF> 0 - endcidrange - endcmap - CMapName currentdict /CMap defineresource pop - end - end - } - if - } - { - /ct_Category 2 dict begin - /CIDFont 10 dict def - /ProcSet 2 dict def - currentdict - end - def - /defineresource - { - ct_Category 1 index 2 copy known - { - get - dup dup maxlength exch length eq - { - dup length 10 add dict copy - ct_Category 2 index 2 index put - } - if - 3 index 3 index put - pop exch pop - } - { pop pop /defineresource /undefined ct_raise } - ifelse - } bind def - /findresource - { - ct_Category 1 index 2 copy known - { - get - 2 index 2 copy known - { get 3 1 roll pop pop} - { pop pop /findresource /undefinedresource ct_raise } - ifelse - } - { pop pop /findresource /undefined ct_raise } - ifelse - } bind def - /resourcestatus - { - ct_Category 1 index 2 copy known - { - get - 2 index known - exch pop exch pop - { - 0 -1 true - } - { - false - } - ifelse - } - { pop pop /findresource /undefined ct_raise } - ifelse - } bind def - /ct_resourcestatus /resourcestatus load def - } - ifelse - /ct_CIDInit 2 dict - begin - /ct_cidfont_stream_init - { - { - dup (Binary) eq - { - pop - null - currentfile - ct_Level2? - { - { cid_BYTE_COUNT () /SubFileDecode filter } - stopped - { pop pop pop } - if - } - if - /readstring load - exit - } - if - dup (Hex) eq - { - pop - currentfile - ct_Level2? - { - { null exch /ASCIIHexDecode filter /readstring } - stopped - { pop exch pop (>) exch /readhexstring } - if - } - { (>) exch /readhexstring } - ifelse - load - exit - } - if - /StartData /typecheck ct_raise - } - loop - cid_BYTE_COUNT ct_CID_STR_SIZE le - { - 2 copy cid_BYTE_COUNT string exch exec - pop - 1 array dup - 3 -1 roll - 0 exch put - } - { - cid_BYTE_COUNT ct_CID_STR_SIZE div ceiling cvi - dup array exch 2 sub 0 exch 1 exch - { - 2 copy - 5 index - ct_CID_STR_SIZE - string - 6 index exec - pop - put - pop - } - for - 2 index - cid_BYTE_COUNT ct_CID_STR_SIZE mod string - 3 index exec - pop - 1 index exch - 1 index length 1 sub - exch put - } - ifelse - cid_CIDFONT exch /GlyphData exch put - 2 index null eq - { - pop pop pop - } - { - pop /readstring load - 1 string exch - { - 3 copy exec - pop - dup length 0 eq - { - pop pop pop pop pop - true exit - } - if - 4 index - eq - { - pop pop pop pop - false exit - } - if - } - loop - pop - } - ifelse - } bind def - /StartData - { - mark - { - currentdict - dup /FDArray get 0 get /FontMatrix get - 0 get 0.001 eq - { - dup /CDevProc known not - { - /CDevProc 1183615869 internaldict /stdCDevProc 2 copy known - { get } - { - pop pop - { pop pop pop pop pop 0 -1000 7 index 2 div 880 } - } - ifelse - def - } - if - } - { - /CDevProc - { - pop pop pop pop pop - 0 - 1 cid_temp /cid_CIDFONT get - /FDArray get 0 get - /FontMatrix get 0 get div - 7 index 2 div - 1 index 0.88 mul - } def - } - ifelse - /cid_temp 15 dict def - cid_temp - begin - /cid_CIDFONT exch def - 3 copy pop - dup /cid_BYTE_COUNT exch def 0 gt - { - ct_cidfont_stream_init - FDArray - { - /Private get - dup /SubrMapOffset known - { - begin - /Subrs SubrCount array def - Subrs - SubrMapOffset - SubrCount - SDBytes - ct_Level2? - { - currentdict dup /SubrMapOffset undef - dup /SubrCount undef - /SDBytes undef - } - if - end - /cid_SD_BYTES exch def - /cid_SUBR_COUNT exch def - /cid_SUBR_MAP_OFFSET exch def - /cid_SUBRS exch def - cid_SUBR_COUNT 0 gt - { - GlyphData cid_SUBR_MAP_OFFSET cid_SD_BYTES ct_GetInterval - 0 cid_SD_BYTES ct_cvnsi - 0 1 cid_SUBR_COUNT 1 sub - { - exch 1 index - 1 add - cid_SD_BYTES mul cid_SUBR_MAP_OFFSET add - GlyphData exch cid_SD_BYTES ct_GetInterval - 0 cid_SD_BYTES ct_cvnsi - cid_SUBRS 4 2 roll - GlyphData exch - 4 index - 1 index - sub - ct_GetInterval - dup length string copy put - } - for - pop - } - if - } - { pop } - ifelse - } - forall - } - if - cleartomark pop pop - end - CIDFontName currentdict /CIDFont defineresource pop - end end - } - stopped - { cleartomark /StartData ct_reraise } - if - } bind def - currentdict - end def - /ct_saveCIDInit - { - /CIDInit /ProcSet ct_resourcestatus - { true } - { /CIDInitC /ProcSet ct_resourcestatus } - ifelse - { - pop pop - /CIDInit /ProcSet findresource - ct_UseNativeCapability? - { pop null } - { /CIDInit ct_CIDInit /ProcSet defineresource pop } - ifelse - } - { /CIDInit ct_CIDInit /ProcSet defineresource pop null } - ifelse - ct_Vars exch /ct_oldCIDInit exch put - } bind def - /ct_restoreCIDInit - { - ct_Vars /ct_oldCIDInit get dup null ne - { /CIDInit exch /ProcSet defineresource pop } - { pop } - ifelse - } bind def - /ct_BuildCharSetUp - { - 1 index - begin - CIDFont - begin - Adobe_CoolType_Utility /ct_BuildCharDict get - begin - /ct_dfCharCode exch def - /ct_dfDict exch def - CIDFirstByte ct_dfCharCode add - dup CIDCount ge - { pop 0 } - if - /cid exch def - { - GlyphDirectory cid 2 copy known - { get } - { pop pop nullstring } - ifelse - dup length FDBytes sub 0 gt - { - dup - FDBytes 0 ne - { 0 FDBytes ct_cvnsi } - { pop 0 } - ifelse - /fdIndex exch def - dup length FDBytes sub FDBytes exch getinterval - /charstring exch def - exit - } - { - pop - cid 0 eq - { /charstring nullstring def exit } - if - /cid 0 def - } - ifelse - } - loop - } def - /ct_SetCacheDevice - { - 0 0 moveto - dup stringwidth - 3 -1 roll - true charpath - pathbbox - 0 -1000 - 7 index 2 div 880 - setcachedevice2 - 0 0 moveto - } def - /ct_CloneSetCacheProc - { - 1 eq - { - stringwidth - pop -2 div -880 - 0 -1000 setcharwidth - moveto - } - { - usewidths? - { - currentfont /Widths get cid - 2 copy known - { get exch pop aload pop } - { pop pop stringwidth } - ifelse - } - { stringwidth } - ifelse - setcharwidth - 0 0 moveto - } - ifelse - } def - /ct_Type3ShowCharString - { - ct_FDDict fdIndex 2 copy known - { get } - { - currentglobal 3 1 roll - 1 index gcheck setglobal - ct_Type1FontTemplate dup maxlength dict copy - begin - FDArray fdIndex get - dup /FontMatrix 2 copy known - { get } - { pop pop ct_defaultFontMtx } - ifelse - /FontMatrix exch dup length array copy def - /Private get - /Private exch def - /Widths rootfont /Widths get def - /CharStrings 1 dict dup /.notdef - <d841272cf18f54fc13> dup length string copy put def - currentdict - end - /ct_Type1Font exch definefont - dup 5 1 roll put - setglobal - } - ifelse - dup /CharStrings get 1 index /Encoding get - ct_dfCharCode get charstring put - rootfont /WMode 2 copy known - { get } - { pop pop 0 } - ifelse - exch - 1000 scalefont setfont - ct_str1 0 ct_dfCharCode put - ct_str1 exch ct_dfSetCacheProc - ct_SyntheticBold - { - currentpoint - ct_str1 show - newpath - moveto - ct_str1 true charpath - ct_StrokeWidth setlinewidth - stroke - } - { ct_str1 show } - ifelse - } def - /ct_Type4ShowCharString - { - ct_dfDict ct_dfCharCode charstring - FDArray fdIndex get - dup /FontMatrix get dup ct_defaultFontMtx ct_matrixeq not - { ct_1000Mtx matrix concatmatrix concat } - { pop } - ifelse - /Private get - Adobe_CoolType_Utility /ct_Level2? get not - { - ct_dfDict /Private - 3 -1 roll - { put } - 1183615869 internaldict /superexec get exec - } - if - 1183615869 internaldict - Adobe_CoolType_Utility /ct_Level2? get - { 1 index } - { 3 index /Private get mark 6 1 roll } - ifelse - dup /RunInt known - { /RunInt get } - { pop /CCRun } - ifelse - get exec - Adobe_CoolType_Utility /ct_Level2? get not - { cleartomark } - if - } bind def - /ct_BuildCharIncremental - { - { - Adobe_CoolType_Utility /ct_MakeOCF get begin - ct_BuildCharSetUp - ct_ShowCharString - } - stopped - { stop } - if - end - end - end - end - } bind def - /BaseFontNameStr (BF00) def - /ct_Type1FontTemplate 14 dict - begin - /FontType 1 def - /FontMatrix [0.001 0 0 0.001 0 0] def - /FontBBox [-250 -250 1250 1250] def - /Encoding ct_cHexEncoding def - /PaintType 0 def - currentdict - end def - /BaseFontTemplate 11 dict - begin - /FontMatrix [0.001 0 0 0.001 0 0] def - /FontBBox [-250 -250 1250 1250] def - /Encoding ct_cHexEncoding def - /BuildChar /ct_BuildCharIncremental load def - ct_Clone? - { - /FontType 3 def - /ct_ShowCharString /ct_Type3ShowCharString load def - /ct_dfSetCacheProc /ct_CloneSetCacheProc load def - /ct_SyntheticBold false def - /ct_StrokeWidth 1 def - } - { - /FontType 4 def - /Private 1 dict dup /lenIV 4 put def - /CharStrings 1 dict dup /.notdef <d841272cf18f54fc13> put def - /PaintType 0 def - /ct_ShowCharString /ct_Type4ShowCharString load def - } - ifelse - /ct_str1 1 string def - currentdict - end def - /BaseFontDictSize BaseFontTemplate length 5 add def - /ct_matrixeq - { - true 0 1 5 - { - dup 4 index exch get exch 3 index exch get eq and - dup not - { exit } - if - } - for - exch pop exch pop - } bind def - /ct_makeocf - { - 15 dict - begin - exch /WMode exch def - exch /FontName exch def - /FontType 0 def - /FMapType 2 def - dup /FontMatrix known - { dup /FontMatrix get /FontMatrix exch def } - { /FontMatrix matrix def } - ifelse - /bfCount 1 index /CIDCount get 256 idiv 1 add - dup 256 gt { pop 256} if def - /Encoding - 256 array 0 1 bfCount 1 sub { 2 copy dup put pop } for - bfCount 1 255 { 2 copy bfCount put pop } for - def - /FDepVector bfCount dup 256 lt { 1 add } if array def - BaseFontTemplate BaseFontDictSize dict copy - begin - /CIDFont exch def - CIDFont /FontBBox known - { CIDFont /FontBBox get /FontBBox exch def } - if - CIDFont /CDevProc known - { CIDFont /CDevProc get /CDevProc exch def } - if - currentdict - end - BaseFontNameStr 3 (0) putinterval - 0 1 bfCount dup 256 eq { 1 sub } if - { - FDepVector exch - 2 index BaseFontDictSize dict copy - begin - dup /CIDFirstByte exch 256 mul def - FontType 3 eq - { /ct_FDDict 2 dict def } - if - currentdict - end - 1 index 16 - BaseFontNameStr 2 2 getinterval cvrs pop - BaseFontNameStr exch definefont - put - } - for - ct_Clone? - { /Widths 1 index /CIDFont get /GlyphDirectory get length dict def } - if - FontName - currentdict - end - definefont - ct_Clone? - { - gsave - dup 1000 scalefont setfont - ct_BuildCharDict - begin - /usewidths? false def - currentfont /Widths get - begin - exch /CIDFont get /GlyphDirectory get - { - pop - dup charcode exch 1 index 0 2 index 256 idiv put - 1 index exch 1 exch 256 mod put - stringwidth 2 array astore def - } - forall - end - /usewidths? true def - end - grestore - } - { exch pop } - ifelse - } bind def - /ct_ComposeFont - { - ct_UseNativeCapability? - { - 2 index /CMap ct_resourcestatus - { pop pop exch pop } - { - /CIDInit /ProcSet findresource - begin - 12 dict - begin - begincmap - /CMapName 3 index def - /CMapVersion 1.000 def - /CMapType 1 def - exch /WMode exch def - /CIDSystemInfo 3 dict dup - begin - /Registry (Adobe) def - /Ordering - CMapName ct_mkocfStr100 cvs - (Adobe-) search - { - pop pop - (-) search - { - dup length string copy - exch pop exch pop - } - { pop (Identity)} - ifelse - } - { pop (Identity) } - ifelse - def - /Supplement 0 def - end def - 1 begincodespacerange - <0000> <FFFF> - endcodespacerange - 1 begincidrange - <0000> <FFFF> 0 - endcidrange - endcmap - CMapName currentdict /CMap defineresource pop - end - end - } - ifelse - composefont - } - { - 3 2 roll pop - 0 get /CIDFont findresource - ct_makeocf - } - ifelse - } bind def - /ct_MakeIdentity - { - ct_UseNativeCapability? - { - 1 index /CMap ct_resourcestatus - { pop pop } - { - /CIDInit /ProcSet findresource begin - 12 dict begin - begincmap - /CMapName 2 index def - /CMapVersion 1.000 def - /CMapType 1 def - /CIDSystemInfo 3 dict dup - begin - /Registry (Adobe) def - /Ordering - CMapName ct_mkocfStr100 cvs - (Adobe-) search - { - pop pop - (-) search - { dup length string copy exch pop exch pop } - { pop (Identity) } - ifelse - } - { pop (Identity) } - ifelse - def - /Supplement 0 def - end def - 1 begincodespacerange - <0000> <FFFF> - endcodespacerange - 1 begincidrange - <0000> <FFFF> 0 - endcidrange - endcmap - CMapName currentdict /CMap defineresource pop - end - end - } - ifelse - composefont - } - { - exch pop - 0 get /CIDFont findresource - ct_makeocf - } - ifelse - } bind def - currentdict readonly pop - end - end -%%EndResource -%%BeginResource: procset Adobe_CoolType_Utility_T42 1.0 0 -%%Copyright: Copyright 1987-2003 Adobe Systems Incorporated. -%%Version: 1.0 0 -userdict /ct_T42Dict 15 dict put -ct_T42Dict begin -/Is2015? -{ - version - cvi - 2015 - ge -} bind def -/AllocGlyphStorage -{ - Is2015? - { - pop - } - { - {string} forall - } ifelse -} bind def -/Type42DictBegin -{ - 25 dict begin - /FontName exch def - /CharStrings 256 dict - begin - /.notdef 0 def - currentdict - end def - /Encoding exch def - /PaintType 0 def - /FontType 42 def - /FontMatrix [1 0 0 1 0 0] def - 4 array astore cvx /FontBBox exch def - /sfnts -} bind def -/Type42DictEnd -{ - currentdict dup /FontName get exch definefont end - ct_T42Dict exch - dup /FontName get exch put -} bind def -/RD {string currentfile exch readstring pop} executeonly def -/PrepFor2015 -{ - Is2015? - { - /GlyphDirectory - 16 - dict def - sfnts 0 get - dup - 2 index - (glyx) - putinterval - 2 index - (locx) - putinterval - pop - pop - } - { - pop - pop - } ifelse -} bind def -/AddT42Char -{ - Is2015? - { - /GlyphDirectory get - begin - def - end - pop - pop - } - { - /sfnts get - 4 index - get - 3 index - 2 index - putinterval - pop - pop - pop - pop - } ifelse -} bind def -end -%%EndResource -Adobe_CoolType_Core begin /$Oblique SetSubstituteStrategy end -%%BeginResource: procset Adobe_AGM_Image 1.0 0 -%%Version: 1.0 0 -%%Copyright: Copyright (C) 2000-2003 Adobe Systems, Inc. All Rights Reserved. -systemdict /setpacking known -{ - currentpacking - true setpacking -} if -userdict /Adobe_AGM_Image 75 dict dup begin put -/Adobe_AGM_Image_Id /Adobe_AGM_Image_1.0_0 def -/nd{ - null def -}bind def -/AGMIMG_&image nd -/AGMIMG_&colorimage nd -/AGMIMG_&imagemask nd -/AGMIMG_mbuf () def -/AGMIMG_ybuf () def -/AGMIMG_kbuf () def -/AGMIMG_c 0 def -/AGMIMG_m 0 def -/AGMIMG_y 0 def -/AGMIMG_k 0 def -/AGMIMG_tmp nd -/AGMIMG_imagestring0 nd -/AGMIMG_imagestring1 nd -/AGMIMG_imagestring2 nd -/AGMIMG_imagestring3 nd -/AGMIMG_imagestring4 nd -/AGMIMG_imagestring5 nd -/AGMIMG_cnt nd -/AGMIMG_fsave nd -/AGMIMG_colorAry nd -/AGMIMG_override nd -/AGMIMG_name nd -/AGMIMG_maskSource nd -/invert_image_samples nd -/knockout_image_samples nd -/img nd -/sepimg nd -/devnimg nd -/idximg nd -/doc_setup -{ - Adobe_AGM_Core begin - Adobe_AGM_Image begin - /AGMIMG_&image systemdict/image get def - /AGMIMG_&imagemask systemdict/imagemask get def - /colorimage where{ - pop - /AGMIMG_&colorimage /colorimage ldf - }if - end - end -}def -/page_setup -{ - Adobe_AGM_Image begin - /AGMIMG_ccimage_exists {/customcolorimage where - { - pop - /Adobe_AGM_OnHost_Seps where - { - pop false - }{ - /Adobe_AGM_InRip_Seps where - { - pop false - }{ - true - }ifelse - }ifelse - }{ - false - }ifelse - }bdf - level2{ - /invert_image_samples - { - Adobe_AGM_Image/AGMIMG_tmp Decode length ddf - /Decode [ Decode 1 get Decode 0 get] def - }def - /knockout_image_samples - { - Operator/imagemask ne{ - /Decode [1 1] def - }if - }def - }{ - /invert_image_samples - { - {1 exch sub} currenttransfer addprocs settransfer - }def - /knockout_image_samples - { - { pop 1 } currenttransfer addprocs settransfer - }def - }ifelse - /img /imageormask ldf - /sepimg /sep_imageormask ldf - /devnimg /devn_imageormask ldf - /idximg /indexed_imageormask ldf - /_ctype 7 def - currentdict{ - dup xcheck 1 index type dup /arraytype eq exch /packedarraytype eq or and{ - bind - }if - def - }forall -}def -/page_trailer -{ - end -}def -/doc_trailer -{ -}def -/imageormask_sys -{ - begin - save mark - level2{ - currentdict - Operator /imagemask eq{ - AGMIMG_&imagemask - }{ - use_mask { - level3 {process_mask_L3 AGMIMG_&image}{masked_image_simulation}ifelse - }{ - AGMIMG_&image - }ifelse - }ifelse - }{ - Width Height - Operator /imagemask eq{ - Decode 0 get 1 eq Decode 1 get 0 eq and - ImageMatrix /DataSource load - AGMIMG_&imagemask - }{ - BitsPerComponent ImageMatrix /DataSource load - AGMIMG_&image - }ifelse - }ifelse - cleartomark restore - end -}def -/overprint_plate -{ - currentoverprint { - 0 get dup type /nametype eq { - dup /DeviceGray eq{ - pop AGMCORE_black_plate not - }{ - /DeviceCMYK eq{ - AGMCORE_is_cmyk_sep not - }if - }ifelse - }{ - false exch - { - AGMOHS_sepink eq or - } forall - not - } ifelse - }{ - pop false - }ifelse -}def -/process_mask_L3 -{ - dup begin - /ImageType 1 def - end - 4 dict begin - /DataDict exch def - /ImageType 3 def - /InterleaveType 3 def - /MaskDict 9 dict begin - /ImageType 1 def - /Width DataDict dup /MaskWidth known {/MaskWidth}{/Width} ifelse get def - /Height DataDict dup /MaskHeight known {/MaskHeight}{/Height} ifelse get def - /ImageMatrix [Width 0 0 Height neg 0 Height] def - /NComponents 1 def - /BitsPerComponent 1 def - /Decode [0 1] def - /DataSource AGMIMG_maskSource def - currentdict end def - currentdict end -}def -/use_mask -{ - dup type /dicttype eq - { - dup /Mask known { - dup /Mask get { - level3 - {true} - { - dup /MaskWidth known {dup /MaskWidth get 1 index /Width get eq}{true}ifelse exch - dup /MaskHeight known {dup /MaskHeight get 1 index /Height get eq}{true}ifelse - 3 -1 roll and - } ifelse - } - {false} ifelse - } - {false} ifelse - } - {false} ifelse -}def -/make_line_source -{ - begin - MultipleDataSources { - [ - Decode length 2 div cvi {Width string} repeat - ] - }{ - Width Decode length 2 div mul cvi string - }ifelse - end -}def -/datasource_to_str -{ - exch dup type - dup /filetype eq { - pop exch readstring - }{ - /arraytype eq { - exec exch copy - }{ - pop - }ifelse - }ifelse - pop -}def -/masked_image_simulation -{ - 3 dict begin - dup make_line_source /line_source xdf - /mask_source AGMIMG_maskSource /LZWDecode filter def - dup /Width get 8 div ceiling cvi string /mask_str xdf - begin - gsave - 0 1 translate 1 -1 Height div scale - 1 1 Height { - pop - gsave - MultipleDataSources { - 0 1 DataSource length 1 sub { - dup DataSource exch get - exch line_source exch get - datasource_to_str - } for - }{ - DataSource line_source datasource_to_str - } ifelse - << - /PatternType 1 - /PaintProc [ - /pop cvx - << - /ImageType 1 - /Width Width - /Height 1 - /ImageMatrix Width 1.0 sub 1 matrix scale 0.5 0 matrix translate matrix concatmatrix - /MultipleDataSources MultipleDataSources - /DataSource line_source - /BitsPerComponent BitsPerComponent - /Decode Decode - >> - /image cvx - ] cvx - /BBox [0 0 Width 1] - /XStep Width - /YStep 1 - /PaintType 1 - /TilingType 2 - >> - matrix makepattern set_pattern - << - /ImageType 1 - /Width Width - /Height 1 - /ImageMatrix Width 1 matrix scale - /MultipleDataSources false - /DataSource mask_source mask_str readstring pop - /BitsPerComponent 1 - /Decode [0 1] - >> - imagemask - grestore - 0 1 translate - } for - grestore - end - end -}def -/imageormask -{ - begin - SkipImageProc { - currentdict consumeimagedata - } - { - save mark - level2 AGMCORE_host_sep not and{ - currentdict - Operator /imagemask eq DeviceN_PS2 not and { - imagemask - }{ - AGMCORE_in_rip_sep currentoverprint and currentcolorspace 0 get /DeviceGray eq and{ - [/Separation /Black /DeviceGray {}] setcolorspace - /Decode [ Decode 1 get Decode 0 get ] def - }if - use_mask { - level3 {process_mask_L3 image}{masked_image_simulation}ifelse - }{ - DeviceN_NoneName DeviceN_PS2 Indexed_DeviceN level3 not and or or AGMCORE_in_rip_sep and - { - Names convert_to_process not { - 2 dict begin - /imageDict xdf - /names_index 0 def - gsave - imageDict write_image_file { - Names { - dup (None) ne { - [/Separation 3 -1 roll /DeviceGray {1 exch sub}] setcolorspace - Operator imageDict read_image_file - names_index 0 eq {true setoverprint} if - /names_index names_index 1 add def - }{ - pop - } ifelse - } forall - close_image_file - } if - grestore - end - }{ - Operator /imagemask eq { - imagemask - }{ - image - } ifelse - } ifelse - }{ - Operator /imagemask eq { - imagemask - }{ - image - } ifelse - } ifelse - }ifelse - }ifelse - }{ - Width Height - Operator /imagemask eq{ - Decode 0 get 1 eq Decode 1 get 0 eq and - ImageMatrix /DataSource load - /Adobe_AGM_OnHost_Seps where { - pop imagemask - }{ - currentgray 1 ne{ - currentdict imageormask_sys - }{ - currentoverprint not{ - 1 AGMCORE_&setgray - currentdict imageormask_sys - }{ - currentdict ignoreimagedata - }ifelse - }ifelse - }ifelse - }{ - BitsPerComponent ImageMatrix - MultipleDataSources{ - 0 1 NComponents 1 sub{ - DataSource exch get - }for - }{ - /DataSource load - }ifelse - Operator /colorimage eq{ - AGMCORE_host_sep{ - MultipleDataSources level2 or NComponents 4 eq and{ - AGMCORE_is_cmyk_sep{ - MultipleDataSources{ - /DataSource [ - DataSource 0 get /exec cvx - DataSource 1 get /exec cvx - DataSource 2 get /exec cvx - DataSource 3 get /exec cvx - /AGMCORE_get_ink_data cvx - ] cvx def - }{ - /DataSource - Width BitsPerComponent mul 7 add 8 idiv Height mul 4 mul - /DataSource load - filter_cmyk 0 () /SubFileDecode filter def - }ifelse - /Decode [ Decode 0 get Decode 1 get ] def - /MultipleDataSources false def - /NComponents 1 def - /Operator /image def - invert_image_samples - 1 AGMCORE_&setgray - currentdict imageormask_sys - }{ - currentoverprint not Operator/imagemask eq and{ - 1 AGMCORE_&setgray - currentdict imageormask_sys - }{ - currentdict ignoreimagedata - }ifelse - }ifelse - }{ - MultipleDataSources NComponents AGMIMG_&colorimage - }ifelse - }{ - true NComponents colorimage - }ifelse - }{ - Operator /image eq{ - AGMCORE_host_sep{ - /DoImage true def - HostSepColorImage{ - invert_image_samples - }{ - AGMCORE_black_plate not Operator/imagemask ne and{ - /DoImage false def - currentdict ignoreimagedata - }if - }ifelse - 1 AGMCORE_&setgray - DoImage - {currentdict imageormask_sys} if - }{ - use_mask { - level3 {process_mask_L3 image}{masked_image_simulation}ifelse - }{ - image - }ifelse - }ifelse - }{ - Operator/knockout eq{ - pop pop pop pop pop - currentcolorspace overprint_plate not{ - knockout_unitsq - }if - }if - }ifelse - }ifelse - }ifelse - }ifelse - cleartomark restore - }ifelse - end -}def -/sep_imageormask -{ - /sep_colorspace_dict AGMCORE_gget begin - /MappedCSA CSA map_csa def - begin - SkipImageProc { - currentdict consumeimagedata - } - { - save mark - AGMCORE_avoid_L2_sep_space{ - /Decode [ Decode 0 get 255 mul Decode 1 get 255 mul ] def - }if - AGMIMG_ccimage_exists - MappedCSA 0 get /DeviceCMYK eq and - currentdict/Components known and - Name () ne and - Name (All) ne and - Operator /image eq and - AGMCORE_producing_seps not and - level2 not and - { - Width Height BitsPerComponent ImageMatrix - [ - /DataSource load /exec cvx - { - 0 1 2 index length 1 sub{ - 1 index exch - 2 copy get 255 xor put - }for - } /exec cvx - ] cvx bind - MappedCSA 0 get /DeviceCMYK eq{ - Components aload pop - }{ - 0 0 0 Components aload pop 1 exch sub - }ifelse - Name findcmykcustomcolor - customcolorimage - }{ - AGMCORE_producing_seps not{ - level2{ - AGMCORE_avoid_L2_sep_space not currentcolorspace 0 get /Separation ne and{ - [/Separation Name MappedCSA sep_proc_name exch 0 get exch load ] setcolorspace_opt - /sep_tint AGMCORE_gget setcolor - }if - currentdict imageormask - }{ - currentdict - Operator /imagemask eq{ - imageormask - }{ - sep_imageormask_lev1 - }ifelse - }ifelse - }{ - AGMCORE_host_sep{ - Operator/knockout eq{ - currentdict/ImageMatrix get concat - knockout_unitsq - }{ - currentgray 1 ne{ - AGMCORE_is_cmyk_sep Name (All) ne and{ - level2{ - [ /Separation Name [/DeviceGray] - { - sep_colorspace_proc AGMCORE_get_ink_data - 1 exch sub - } bind - ] AGMCORE_&setcolorspace - /sep_tint AGMCORE_gget AGMCORE_&setcolor - currentdict imageormask_sys - }{ - currentdict - Operator /imagemask eq{ - imageormask_sys - }{ - sep_image_lev1_sep - }ifelse - }ifelse - }{ - Operator/imagemask ne{ - invert_image_samples - }if - currentdict imageormask_sys - }ifelse - }{ - currentoverprint not Name (All) eq or Operator/imagemask eq and{ - currentdict imageormask_sys - }{ - currentoverprint not - { - gsave - knockout_unitsq - grestore - }if - currentdict consumeimagedata - }ifelse - }ifelse - }ifelse - }{ - currentcolorspace 0 get /Separation ne{ - [/Separation Name MappedCSA sep_proc_name exch 0 get exch load ] setcolorspace_opt - /sep_tint AGMCORE_gget setcolor - }if - currentoverprint - MappedCSA 0 get /DeviceCMYK eq and - Name inRip_spot_has_ink not and - Name (All) ne and { - imageormask_l2_overprint - }{ - currentdict imageormask - }ifelse - }ifelse - }ifelse - }ifelse - cleartomark restore - }ifelse - end - end -}def -/decode_image_sample -{ - 4 1 roll exch dup 5 1 roll - sub 2 4 -1 roll exp 1 sub div mul add -} bdf -/colorSpaceElemCnt -{ - currentcolorspace 0 get dup /DeviceCMYK eq { - pop 4 - } - { - /DeviceRGB eq { - pop 3 - }{ - 1 - } ifelse - } ifelse -} bdf -/devn_sep_datasource -{ - 1 dict begin - /dataSource xdf - [ - 0 1 dataSource length 1 sub { - dup currentdict /dataSource get /exch cvx /get cvx /exec cvx - /exch cvx names_index /ne cvx [ /pop cvx ] cvx /if cvx - } for - ] cvx bind - end -} bdf -/devn_alt_datasource -{ - 11 dict begin - /srcDataStrs xdf - /dstDataStr xdf - /convProc xdf - /origcolorSpaceElemCnt xdf - /origMultipleDataSources xdf - /origBitsPerComponent xdf - /origDecode xdf - /origDataSource xdf - /dsCnt origMultipleDataSources {origDataSource length}{1}ifelse def - /samplesNeedDecoding - 0 0 1 origDecode length 1 sub { - origDecode exch get add - } for - origDecode length 2 div div - dup 1 eq { - /decodeDivisor 2 origBitsPerComponent exp 1 sub def - } if - 2 origBitsPerComponent exp 1 sub ne - def - [ - 0 1 dsCnt 1 sub [ - currentdict /origMultipleDataSources get { - dup currentdict /origDataSource get exch get dup type - }{ - currentdict /origDataSource get dup type - } ifelse - dup /filetype eq { - pop currentdict /srcDataStrs get 3 -1 /roll cvx /get cvx /readstring cvx /pop cvx - }{ - /stringtype ne { - /exec cvx - } if - currentdict /srcDataStrs get /exch cvx 3 -1 /roll cvx /xpt cvx - } ifelse - ] cvx /for cvx - currentdict /srcDataStrs get 0 /get cvx /length cvx 0 /ne cvx [ - 0 1 Width 1 sub [ - Adobe_AGM_Utils /AGMUTIL_ndx /xddf cvx - currentdict /origMultipleDataSources get { - 0 1 dsCnt 1 sub [ - Adobe_AGM_Utils /AGMUTIL_ndx1 /xddf cvx - currentdict /srcDataStrs get /AGMUTIL_ndx1 /load cvx /get cvx /AGMUTIL_ndx /load cvx /get cvx - samplesNeedDecoding { - currentdict /decodeDivisor known { - currentdict /decodeDivisor get /div cvx - }{ - currentdict /origDecode get /AGMUTIL_ndx1 /load cvx 2 /mul cvx 2 /getinterval cvx /aload cvx /pop cvxs - BitsPerComponent /decode_image_sample load /exec cvx - } ifelse - } if - ] cvx /for cvx - }{ - Adobe_AGM_Utils /AGMUTIL_ndx1 0 /ddf cvx - currentdict /srcDataStrs get 0 /get cvx /AGMUTIL_ndx /load cvx - currentdict /origDecode get length 2 idiv dup 3 1 /roll cvx /mul cvx /exch cvx /getinterval cvx - [ - samplesNeedDecoding { - currentdict /decodeDivisor known { - currentdict /decodeDivisor get /div cvx - }{ - currentdict /origDecode get /AGMUTIL_ndx1 /load cvx 2 /mul cvx 2 /getinterval cvx /aload cvx /pop cvx - BitsPerComponent /decode_image_sample load /exec cvx - Adobe_AGM_Utils /AGMUTIL_ndx1 /AGMUTIL_ndx1 /load cvx 1 /add cvx /ddf cvx - } ifelse - } if - ] cvx /forall cvx - } ifelse - currentdict /convProc get /exec cvx - currentdict /origcolorSpaceElemCnt get 1 sub -1 0 [ - currentdict /dstDataStr get 3 1 /roll cvx /AGMUTIL_ndx /load cvx currentdict /origcolorSpaceElemCnt get /mul cvx /add cvx /exch cvx - currentdict /convProc get /filter_indexed_devn load ne { - 255 /mul cvx /cvi cvx - } if - /put cvx - ] cvx /for cvx - ] cvx /for cvx - currentdict /dstDataStr get - ] cvx /if cvx - ] cvx bind - end -} bdf -/devn_imageormask -{ - /devicen_colorspace_dict AGMCORE_gget begin - /MappedCSA CSA map_csa def - 2 dict begin - dup dup - /dstDataStr exch /Width get colorSpaceElemCnt mul string def - /srcDataStrs [ 3 -1 roll begin - currentdict /MultipleDataSources known {MultipleDataSources {DataSource length}{1}ifelse}{1} ifelse - { - Width Decode length 2 div mul cvi string - } repeat - end ] def - begin - SkipImageProc { - currentdict consumeimagedata - } - { - save mark - AGMCORE_producing_seps not { - level3 not { - Operator /imagemask ne { - /DataSource [ - DataSource Decode BitsPerComponent currentdict /MultipleDataSources known {MultipleDataSources}{false} ifelse - colorSpaceElemCnt /devicen_colorspace_dict AGMCORE_gget /TintTransform get - dstDataStr srcDataStrs devn_alt_datasource /exec cvx - ] cvx 0 () /SubFileDecode filter def - /MultipleDataSources false def - /Decode colorSpaceElemCnt [ exch {0 1} repeat ] def - } if - }if - currentdict imageormask - }{ - AGMCORE_host_sep{ - Names convert_to_process { - CSA map_csa 0 get /DeviceCMYK eq { - /DataSource - Width BitsPerComponent mul 7 add 8 idiv Height mul 4 mul - [ - DataSource Decode BitsPerComponent currentdict /MultipleDataSources known {MultipleDataSources}{false} ifelse - 4 /devicen_colorspace_dict AGMCORE_gget /TintTransform get - dstDataStr srcDataStrs devn_alt_datasource /exec cvx - ] cvx - filter_cmyk 0 () /SubFileDecode filter def - /MultipleDataSources false def - /Decode [1 0] def - /DeviceGray setcolorspace - currentdict imageormask_sys - }{ - AGMCORE_report_unsupported_color_space - AGMCORE_black_plate { - /DataSource [ - DataSource Decode BitsPerComponent currentdict /MultipleDataSources known {MultipleDataSources}{false} ifelse - CSA map_csa 0 get /DeviceRGB eq{3}{1}ifelse /devicen_colorspace_dict AGMCORE_gget /TintTransform get - dstDataStr srcDataStrs devn_alt_datasource /exec cvx - ] cvx 0 () /SubFileDecode filter def - /MultipleDataSources false def - /Decode colorSpaceElemCnt [ exch {0 1} repeat ] def - currentdict imageormask_sys - } - { - gsave - knockout_unitsq - grestore - currentdict consumeimagedata - } ifelse - } ifelse - } - { - /devicen_colorspace_dict AGMCORE_gget /names_index known { - Operator/imagemask ne{ - MultipleDataSources { - /DataSource [ DataSource devn_sep_datasource /exec cvx ] cvx def - /MultipleDataSources false def - }{ - /DataSource /DataSource load dstDataStr srcDataStrs 0 get filter_devn def - } ifelse - invert_image_samples - } if - currentdict imageormask_sys - }{ - currentoverprint not Operator/imagemask eq and{ - currentdict imageormask_sys - }{ - currentoverprint not - { - gsave - knockout_unitsq - grestore - }if - currentdict consumeimagedata - }ifelse - }ifelse - }ifelse - }{ - currentdict imageormask - }ifelse - }ifelse - cleartomark restore - }ifelse - end - end - end -}def -/imageormask_l2_overprint -{ - currentdict - currentcmykcolor add add add 0 eq{ - currentdict consumeimagedata - }{ - level3{ - currentcmykcolor - /AGMIMG_k xdf - /AGMIMG_y xdf - /AGMIMG_m xdf - /AGMIMG_c xdf - Operator/imagemask eq{ - [/DeviceN [ - AGMIMG_c 0 ne {/Cyan} if - AGMIMG_m 0 ne {/Magenta} if - AGMIMG_y 0 ne {/Yellow} if - AGMIMG_k 0 ne {/Black} if - ] /DeviceCMYK {}] setcolorspace - AGMIMG_c 0 ne {AGMIMG_c} if - AGMIMG_m 0 ne {AGMIMG_m} if - AGMIMG_y 0 ne {AGMIMG_y} if - AGMIMG_k 0 ne {AGMIMG_k} if - setcolor - }{ - /Decode [ Decode 0 get 255 mul Decode 1 get 255 mul ] def - [/Indexed - [ - /DeviceN [ - AGMIMG_c 0 ne {/Cyan} if - AGMIMG_m 0 ne {/Magenta} if - AGMIMG_y 0 ne {/Yellow} if - AGMIMG_k 0 ne {/Black} if - ] - /DeviceCMYK { - AGMIMG_k 0 eq {0} if - AGMIMG_y 0 eq {0 exch} if - AGMIMG_m 0 eq {0 3 1 roll} if - AGMIMG_c 0 eq {0 4 1 roll} if - } - ] - 255 - { - 255 div - mark exch - dup dup dup - AGMIMG_k 0 ne{ - /sep_tint AGMCORE_gget mul MappedCSA sep_proc_name exch pop load exec 4 1 roll pop pop pop - counttomark 1 roll - }{ - pop - }ifelse - AGMIMG_y 0 ne{ - /sep_tint AGMCORE_gget mul MappedCSA sep_proc_name exch pop load exec 4 2 roll pop pop pop - counttomark 1 roll - }{ - pop - }ifelse - AGMIMG_m 0 ne{ - /sep_tint AGMCORE_gget mul MappedCSA sep_proc_name exch pop load exec 4 3 roll pop pop pop - counttomark 1 roll - }{ - pop - }ifelse - AGMIMG_c 0 ne{ - /sep_tint AGMCORE_gget mul MappedCSA sep_proc_name exch pop load exec pop pop pop - counttomark 1 roll - }{ - pop - }ifelse - counttomark 1 add -1 roll pop - } - ] setcolorspace - }ifelse - imageormask_sys - }{ - write_image_file{ - currentcmykcolor - 0 ne{ - [/Separation /Black /DeviceGray {}] setcolorspace - gsave - /Black - [{1 exch sub /sep_tint AGMCORE_gget mul} /exec cvx MappedCSA sep_proc_name cvx exch pop {4 1 roll pop pop pop 1 exch sub} /exec cvx] - cvx modify_halftone_xfer - Operator currentdict read_image_file - grestore - }if - 0 ne{ - [/Separation /Yellow /DeviceGray {}] setcolorspace - gsave - /Yellow - [{1 exch sub /sep_tint AGMCORE_gget mul} /exec cvx MappedCSA sep_proc_name cvx exch pop {4 2 roll pop pop pop 1 exch sub} /exec cvx] - cvx modify_halftone_xfer - Operator currentdict read_image_file - grestore - }if - 0 ne{ - [/Separation /Magenta /DeviceGray {}] setcolorspace - gsave - /Magenta - [{1 exch sub /sep_tint AGMCORE_gget mul} /exec cvx MappedCSA sep_proc_name cvx exch pop {4 3 roll pop pop pop 1 exch sub} /exec cvx] - cvx modify_halftone_xfer - Operator currentdict read_image_file - grestore - }if - 0 ne{ - [/Separation /Cyan /DeviceGray {}] setcolorspace - gsave - /Cyan - [{1 exch sub /sep_tint AGMCORE_gget mul} /exec cvx MappedCSA sep_proc_name cvx exch pop {pop pop pop 1 exch sub} /exec cvx] - cvx modify_halftone_xfer - Operator currentdict read_image_file - grestore - } if - close_image_file - }{ - imageormask - }ifelse - }ifelse - }ifelse -} def -/indexed_imageormask -{ - begin - save mark - currentdict - AGMCORE_host_sep{ - Operator/knockout eq{ - /indexed_colorspace_dict AGMCORE_gget dup /CSA known { - /CSA get map_csa - }{ - /CSD get get_csd /Names get - } ifelse - overprint_plate not{ - knockout_unitsq - }if - }{ - Indexed_DeviceN { - /devicen_colorspace_dict AGMCORE_gget /names_index known { - indexed_image_lev2_sep - }{ - currentoverprint not{ - knockout_unitsq - }if - currentdict consumeimagedata - } ifelse - }{ - AGMCORE_is_cmyk_sep{ - Operator /imagemask eq{ - imageormask_sys - }{ - level2{ - indexed_image_lev2_sep - }{ - indexed_image_lev1_sep - }ifelse - }ifelse - }{ - currentoverprint not{ - knockout_unitsq - }if - currentdict consumeimagedata - }ifelse - }ifelse - }ifelse - }{ - level2{ - Indexed_DeviceN { - /indexed_colorspace_dict AGMCORE_gget begin - CSD get_csd begin - }{ - /indexed_colorspace_dict AGMCORE_gget begin - CSA map_csa 0 get /DeviceCMYK eq ps_level 3 ge and ps_version 3015.007 lt and { - [/Indexed [/DeviceN [/Cyan /Magenta /Yellow /Black] /DeviceCMYK {}] HiVal Lookup] - setcolorspace - } if - end - } ifelse - imageormask - Indexed_DeviceN { - end - end - } if - }{ - Operator /imagemask eq{ - imageormask - }{ - indexed_imageormask_lev1 - }ifelse - }ifelse - }ifelse - cleartomark restore - end -}def -/indexed_image_lev2_sep -{ - /indexed_colorspace_dict AGMCORE_gget begin - begin - Indexed_DeviceN not { - currentcolorspace - dup 1 /DeviceGray put - dup 3 - currentcolorspace 2 get 1 add string - 0 1 2 3 AGMCORE_get_ink_data 4 currentcolorspace 3 get length 1 sub - { - dup 4 idiv exch currentcolorspace 3 get exch get 255 exch sub 2 index 3 1 roll put - }for - put setcolorspace - } if - currentdict - Operator /imagemask eq{ - AGMIMG_&imagemask - }{ - use_mask { - level3 {process_mask_L3 AGMIMG_&image}{masked_image_simulation}ifelse - }{ - AGMIMG_&image - }ifelse - }ifelse - end end -}def - /OPIimage - { - dup type /dicttype ne{ - 10 dict begin - /DataSource xdf - /ImageMatrix xdf - /BitsPerComponent xdf - /Height xdf - /Width xdf - /ImageType 1 def - /Decode [0 1 def] - currentdict - end - }if - dup begin - /NComponents 1 cdndf - /MultipleDataSources false cdndf - /SkipImageProc {false} cdndf - /HostSepColorImage false cdndf - /Decode [ - 0 - currentcolorspace 0 get /Indexed eq{ - 2 BitsPerComponent exp 1 sub - }{ - 1 - }ifelse - ] cdndf - /Operator /image cdndf - end - /sep_colorspace_dict AGMCORE_gget null eq{ - imageormask - }{ - gsave - dup begin invert_image_samples end - sep_imageormask - grestore - }ifelse - }def -/cachemask_level2 -{ - 3 dict begin - /LZWEncode filter /WriteFilter xdf - /readBuffer 256 string def - /ReadFilter - currentfile - 0 (%EndMask) /SubFileDecode filter - /ASCII85Decode filter - /RunLengthDecode filter - def - { - ReadFilter readBuffer readstring exch - WriteFilter exch writestring - not {exit} if - }loop - WriteFilter closefile - end -}def -/cachemask_level3 -{ - currentfile - << - /Filter [ /SubFileDecode /ASCII85Decode /RunLengthDecode ] - /DecodeParms [ << /EODCount 0 /EODString (%EndMask) >> null null ] - /Intent 1 - >> - /ReusableStreamDecode filter -}def -/spot_alias -{ - /mapto_sep_imageormask - { - dup type /dicttype ne{ - 12 dict begin - /ImageType 1 def - /DataSource xdf - /ImageMatrix xdf - /BitsPerComponent xdf - /Height xdf - /Width xdf - /MultipleDataSources false def - }{ - begin - }ifelse - /Decode [/customcolor_tint AGMCORE_gget 0] def - /Operator /image def - /HostSepColorImage false def - /SkipImageProc {false} def - currentdict - end - sep_imageormask - }bdf - /customcolorimage - { - Adobe_AGM_Image/AGMIMG_colorAry xddf - /customcolor_tint AGMCORE_gget - bdict - /Name AGMIMG_colorAry 4 get - /CSA [ /DeviceCMYK ] - /TintMethod /Subtractive - /TintProc null - /MappedCSA null - /NComponents 4 - /Components [ AGMIMG_colorAry aload pop pop ] - edict - setsepcolorspace - mapto_sep_imageormask - }ndf - Adobe_AGM_Image/AGMIMG_&customcolorimage /customcolorimage load put - /customcolorimage - { - Adobe_AGM_Image/AGMIMG_override false put - dup 4 get map_alias{ - /customcolor_tint AGMCORE_gget exch setsepcolorspace - pop - mapto_sep_imageormask - }{ - AGMIMG_&customcolorimage - }ifelse - }bdf -}def -/snap_to_device -{ - 6 dict begin - matrix currentmatrix - dup 0 get 0 eq 1 index 3 get 0 eq and - 1 index 1 get 0 eq 2 index 2 get 0 eq and or exch pop - { - 1 1 dtransform 0 gt exch 0 gt /AGMIMG_xSign? exch def /AGMIMG_ySign? exch def - 0 0 transform - AGMIMG_ySign? {floor 0.1 sub}{ceiling 0.1 add} ifelse exch - AGMIMG_xSign? {floor 0.1 sub}{ceiling 0.1 add} ifelse exch - itransform /AGMIMG_llY exch def /AGMIMG_llX exch def - 1 1 transform - AGMIMG_ySign? {ceiling 0.1 add}{floor 0.1 sub} ifelse exch - AGMIMG_xSign? {ceiling 0.1 add}{floor 0.1 sub} ifelse exch - itransform /AGMIMG_urY exch def /AGMIMG_urX exch def - [AGMIMG_urX AGMIMG_llX sub 0 0 AGMIMG_urY AGMIMG_llY sub AGMIMG_llX AGMIMG_llY] concat - }{ - }ifelse - end -} def -level2 not{ - /colorbuf - { - 0 1 2 index length 1 sub{ - dup 2 index exch get - 255 exch sub - 2 index - 3 1 roll - put - }for - }def - /tint_image_to_color - { - begin - Width Height BitsPerComponent ImageMatrix - /DataSource load - end - Adobe_AGM_Image begin - /AGMIMG_mbuf 0 string def - /AGMIMG_ybuf 0 string def - /AGMIMG_kbuf 0 string def - { - colorbuf dup length AGMIMG_mbuf length ne - { - dup length dup dup - /AGMIMG_mbuf exch string def - /AGMIMG_ybuf exch string def - /AGMIMG_kbuf exch string def - } if - dup AGMIMG_mbuf copy AGMIMG_ybuf copy AGMIMG_kbuf copy pop - } - addprocs - {AGMIMG_mbuf}{AGMIMG_ybuf}{AGMIMG_kbuf} true 4 colorimage - end - } def - /sep_imageormask_lev1 - { - begin - MappedCSA 0 get dup /DeviceRGB eq exch /DeviceCMYK eq or has_color not and{ - { - 255 mul round cvi GrayLookup exch get - } currenttransfer addprocs settransfer - currentdict imageormask - }{ - /sep_colorspace_dict AGMCORE_gget/Components known{ - MappedCSA 0 get /DeviceCMYK eq{ - Components aload pop - }{ - 0 0 0 Components aload pop 1 exch sub - }ifelse - Adobe_AGM_Image/AGMIMG_k xddf - Adobe_AGM_Image/AGMIMG_y xddf - Adobe_AGM_Image/AGMIMG_m xddf - Adobe_AGM_Image/AGMIMG_c xddf - AGMIMG_y 0.0 eq AGMIMG_m 0.0 eq and AGMIMG_c 0.0 eq and{ - {AGMIMG_k mul 1 exch sub} currenttransfer addprocs settransfer - currentdict imageormask - }{ - currentcolortransfer - {AGMIMG_k mul 1 exch sub} exch addprocs 4 1 roll - {AGMIMG_y mul 1 exch sub} exch addprocs 4 1 roll - {AGMIMG_m mul 1 exch sub} exch addprocs 4 1 roll - {AGMIMG_c mul 1 exch sub} exch addprocs 4 1 roll - setcolortransfer - currentdict tint_image_to_color - }ifelse - }{ - MappedCSA 0 get /DeviceGray eq { - {255 mul round cvi ColorLookup exch get 0 get} currenttransfer addprocs settransfer - currentdict imageormask - }{ - MappedCSA 0 get /DeviceCMYK eq { - currentcolortransfer - {255 mul round cvi ColorLookup exch get 3 get 1 exch sub} exch addprocs 4 1 roll - {255 mul round cvi ColorLookup exch get 2 get 1 exch sub} exch addprocs 4 1 roll - {255 mul round cvi ColorLookup exch get 1 get 1 exch sub} exch addprocs 4 1 roll - {255 mul round cvi ColorLookup exch get 0 get 1 exch sub} exch addprocs 4 1 roll - setcolortransfer - currentdict tint_image_to_color - }{ - currentcolortransfer - {pop 1} exch addprocs 4 1 roll - {255 mul round cvi ColorLookup exch get 2 get} exch addprocs 4 1 roll - {255 mul round cvi ColorLookup exch get 1 get} exch addprocs 4 1 roll - {255 mul round cvi ColorLookup exch get 0 get} exch addprocs 4 1 roll - setcolortransfer - currentdict tint_image_to_color - }ifelse - }ifelse - }ifelse - }ifelse - end - }def - /sep_image_lev1_sep - { - begin - /sep_colorspace_dict AGMCORE_gget/Components known{ - Components aload pop - Adobe_AGM_Image/AGMIMG_k xddf - Adobe_AGM_Image/AGMIMG_y xddf - Adobe_AGM_Image/AGMIMG_m xddf - Adobe_AGM_Image/AGMIMG_c xddf - {AGMIMG_c mul 1 exch sub} - {AGMIMG_m mul 1 exch sub} - {AGMIMG_y mul 1 exch sub} - {AGMIMG_k mul 1 exch sub} - }{ - {255 mul round cvi ColorLookup exch get 0 get 1 exch sub} - {255 mul round cvi ColorLookup exch get 1 get 1 exch sub} - {255 mul round cvi ColorLookup exch get 2 get 1 exch sub} - {255 mul round cvi ColorLookup exch get 3 get 1 exch sub} - }ifelse - AGMCORE_get_ink_data currenttransfer addprocs settransfer - currentdict imageormask_sys - end - }def - /indexed_imageormask_lev1 - { - /indexed_colorspace_dict AGMCORE_gget begin - begin - currentdict - MappedCSA 0 get dup /DeviceRGB eq exch /DeviceCMYK eq or has_color not and{ - {HiVal mul round cvi GrayLookup exch get HiVal div} currenttransfer addprocs settransfer - imageormask - }{ - MappedCSA 0 get /DeviceGray eq { - {HiVal mul round cvi Lookup exch get HiVal div} currenttransfer addprocs settransfer - imageormask - }{ - MappedCSA 0 get /DeviceCMYK eq { - currentcolortransfer - {4 mul HiVal mul round cvi 3 add Lookup exch get HiVal div 1 exch sub} exch addprocs 4 1 roll - {4 mul HiVal mul round cvi 2 add Lookup exch get HiVal div 1 exch sub} exch addprocs 4 1 roll - {4 mul HiVal mul round cvi 1 add Lookup exch get HiVal div 1 exch sub} exch addprocs 4 1 roll - {4 mul HiVal mul round cvi Lookup exch get HiVal div 1 exch sub} exch addprocs 4 1 roll - setcolortransfer - tint_image_to_color - }{ - currentcolortransfer - {pop 1} exch addprocs 4 1 roll - {3 mul HiVal mul round cvi 2 add Lookup exch get HiVal div} exch addprocs 4 1 roll - {3 mul HiVal mul round cvi 1 add Lookup exch get HiVal div} exch addprocs 4 1 roll - {3 mul HiVal mul round cvi Lookup exch get HiVal div} exch addprocs 4 1 roll - setcolortransfer - tint_image_to_color - }ifelse - }ifelse - }ifelse - end end - }def - /indexed_image_lev1_sep - { - /indexed_colorspace_dict AGMCORE_gget begin - begin - {4 mul HiVal mul round cvi Lookup exch get HiVal div 1 exch sub} - {4 mul HiVal mul round cvi 1 add Lookup exch get HiVal div 1 exch sub} - {4 mul HiVal mul round cvi 2 add Lookup exch get HiVal div 1 exch sub} - {4 mul HiVal mul round cvi 3 add Lookup exch get HiVal div 1 exch sub} - AGMCORE_get_ink_data currenttransfer addprocs settransfer - currentdict imageormask_sys - end end - }def -}if -end -systemdict /setpacking known -{ - setpacking -} if -%%EndResource -currentdict Adobe_AGM_Utils eq {end} if -%%EndProlog -%%BeginSetup -Adobe_AGM_Utils begin -2 2010 Adobe_AGM_Core/doc_setup get exec -Adobe_CoolType_Core/doc_setup get exec -Adobe_AGM_Image/doc_setup get exec -currentdict Adobe_AGM_Utils eq {end} if -%%EndSetup -%%Page: Alternate-ISC-logo-v2.ai 1 -%%EndPageComments -%%BeginPageSetup -/currentdistillerparams where -{pop currentdistillerparams /CoreDistVersion get 5000 lt} {true} ifelse -{ userdict /AI11_PDFMark5 /cleartomark load put -userdict /AI11_ReadMetadata_PDFMark5 {flushfile cleartomark } bind put} -{ userdict /AI11_PDFMark5 /pdfmark load put -userdict /AI11_ReadMetadata_PDFMark5 {/PUT pdfmark} bind put } ifelse -[/NamespacePush AI11_PDFMark5 -[/_objdef {ai_metadata_stream_123} /type /stream /OBJ AI11_PDFMark5 -[{ai_metadata_stream_123} -currentfile 0 (% &&end XMP packet marker&&) -/SubFileDecode filter AI11_ReadMetadata_PDFMark5 -<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xmlns:x='adobe:ns:meta/' x:xmptk='XMP toolkit 3.0-29, framework 1.6'> -<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#' xmlns:iX='http://ns.adobe.com/iX/1.0/'> - - <rdf:Description rdf:about='uuid:8aa76b3d-2474-11d9-a8a3-000393cd9a96' - xmlns:pdf='http://ns.adobe.com/pdf/1.3/'> - <pdf:Producer>Adobe PDF library 6.66</pdf:Producer> - </rdf:Description> - - <rdf:Description rdf:about='uuid:8aa76b3d-2474-11d9-a8a3-000393cd9a96' - xmlns:tiff='http://ns.adobe.com/tiff/1.0/'> - </rdf:Description> - - <rdf:Description rdf:about='uuid:8aa76b3d-2474-11d9-a8a3-000393cd9a96' - xmlns:xap='http://ns.adobe.com/xap/1.0/' - xmlns:xapGImg='http://ns.adobe.com/xap/1.0/g/img/'> - <xap:CreateDate>2004-10-06T16:15:40-07:00</xap:CreateDate> - <xap:ModifyDate>2004-10-22T21:51:43Z</xap:ModifyDate> - <xap:CreatorTool>Illustrator</xap:CreatorTool> - <xap:MetadataDate>2004-10-06T16:15:40-07:00</xap:MetadataDate> - <xap:Thumbnails> - <rdf:Alt> - <rdf:li rdf:parseType='Resource'> - <xapGImg:format>JPEG</xapGImg:format> - <xapGImg:width>256</xapGImg:width> - <xapGImg:height>152</xapGImg:height> - <xapGImg:image>/9j/4AAQSkZJRgABAgEASABIAAD/7QAsUGhvdG9zaG9wIDMuMAA4QklNA+0AAAAAABAASAAAAAEA
AQBIAAAAAQAB/+4ADkFkb2JlAGTAAAAAAf/bAIQABgQEBAUEBgUFBgkGBQYJCwgGBggLDAoKCwoK
DBAMDAwMDAwQDA4PEA8ODBMTFBQTExwbGxscHx8fHx8fHx8fHwEHBwcNDA0YEBAYGhURFRofHx8f
Hx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8f/8AAEQgAmAEAAwER
AAIRAQMRAf/EAaIAAAAHAQEBAQEAAAAAAAAAAAQFAwIGAQAHCAkKCwEAAgIDAQEBAQEAAAAAAAAA
AQACAwQFBgcICQoLEAACAQMDAgQCBgcDBAIGAnMBAgMRBAAFIRIxQVEGE2EicYEUMpGhBxWxQiPB
UtHhMxZi8CRygvElQzRTkqKyY3PCNUQnk6OzNhdUZHTD0uIIJoMJChgZhJRFRqS0VtNVKBry4/PE
1OT0ZXWFlaW1xdXl9WZ2hpamtsbW5vY3R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo+Ck5SVlpeYmZ
qbnJ2en5KjpKWmp6ipqqusra6voRAAICAQIDBQUEBQYECAMDbQEAAhEDBCESMUEFURNhIgZxgZEy
obHwFMHR4SNCFVJicvEzJDRDghaSUyWiY7LCB3PSNeJEgxdUkwgJChgZJjZFGidkdFU38qOzwygp
0+PzhJSktMTU5PRldYWVpbXF1eX1RlZmdoaWprbG1ub2R1dnd4eXp7fH1+f3OEhYaHiImKi4yNjo
+DlJWWl5iZmpucnZ6fkqOkpaanqKmqq6ytrq+v/aAAwDAQACEQMRAD8AiX5AfkB5O/MTydea1rV5
qNvdW+oyWSJZSQJGY0ghlBIlhmblymPfMfLlMTQbIQBDOPM//OKX5U6B5e1DWZ9R1uSOxhaX0hcW
il2H2U5G0NOTUFcOCcskxAVuWOaoQMj0Y1+Wf5EflJ56N+kUuvWEtgImZHu7OTmJS4+Glmv2eG+3
fMvXYJ6etwb8v2uPpNRHNdCqZz/0Jp+WH/V01v8A5H2n/ZLmv/MSczww7/oTT8sP+rprf/I+0/7J
cfzEl8MO/wChNPyw/wCrprf/ACPtP+yXH8xJfDDAfzv/AOcc/JHkPyHN5g0i+1Oe9juIYVju5bd4
uMrUYkRwRNXw+LJ48xkaRKAAfT/5V/8AksPKH/bE07/qEjzJaiynFXYq7FXYq7FXYq7FXYq7FXYq
7FXYq7FXYq7FXYq7FXYq7FXYq7FXYq7FXYq+BfyU/MTzH5Nhnn0yUPbSzt9ZsZqtBJ8CAMVBFGHZ
hv8ARtmz0uihnwkS58XPryDrdVqp4sorlXL5st1/z/8AmP5whlgu7p20+b7VnCqwW9AwYL250YD7
TE5eI6TSncgS+Zccy1OoGwPD8ggfLXmTzl5HvJLzTD9X9YKtwroksUiqSVVjvTc9iDlkp6bVjhsS
+wsIxz6Y3Vfc9B1b/nJjWZ9Hhh03TYrPVmH+lXTt6sQp/vqM/wA3+UTT365iY+w4CVyNx7v1uTPt
eRjsKk9s8j+YrjzH5W0/Wbm0aymu4wzwtsCRsXTcng1KrXemaHV4RiyGAN07jT5TkgJEVae5jNzx
v/nLL/yT91/zG2v/ABM5dg+pjPk9M/Kv/wAlh5Q/7Ymnf9QkeZzjllOKuxV2KuxV2KuxV2KuxV2K
uxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV+eX5W6Yl7aztLvBDMSy/zEqtB8tsyJ644NP6fr
lI18hZcX8oMuf1fTGP6S9h0Ly3rGtzm20q1M7RgF6UVEXtyZiFHTbOa3ke8u52Adr3lvWNEnFtqt
qYWkUlCSGRx3oykqeu+DeJ7iuxDANasU07UIriJFaF29RYmAK8kILKVPVc7bsjWnUYiJfVHY/oLy
/aOlGHIDH6S+zNB1K31TRNP1K2UJb3lvFPEg6KsiBgu38taZzGaBhMxPMF6DHMSiCOoR2VM3jf8A
zll/5J+6/wCY21/4mcuwfUxnyemflX/5LDyh/wBsTTv+oSPM5xyynFXYq7FXYq7FXYq7FXYq7FXY
q7FXYq7FXYq7FXYq7FXYq7FXYq7FXYq7FXYq+A/yedP0NepT4xccie5BRR+FMxNfE8ET0uX+9bNP
IcZHWh+l9K/kxr2kW1neaZcSxwXskwmjaQhfUUqF4qT1Kla098wMUg5Mgq/nNrujzada6XDKk9+s
4mbgQ3pIEZaMR0Lcht9PhjlIWIeCebnQQ26U+MszA+AAAP31zoPZyJ4pnps6ftqQqI67s3/KGD81
YPMejRFNVh8ts6tKJ0mFp6HAsOPqDgFYUoVzYdonTGEvp4/hduJoRnE4/VwfY+lCyggEgE9B45yr
0Lxb/nLe8tYvyoe2kkCz3N7bmCM9W9NqtT5A5bhI4wFlAmBI5B6l+Vf/AJLDyh/2xNO/6hI8z3EL
y3/nLq+1nQPJem69oWsalpWoyapHZytZX11BG8UltM5BijkVK8oFoaePjir0v8ooJB+W/lq8nu7u
9vNR0uyvLy5vbme6keaeBZXPKZ34jk52XbFWYYq7FXYq7FXYq7FXYq7FXYq7FXYq7FXYq7FXYq7F
XYq7FXYq7FXYq7FX5z/l3fy2Nq88Y5D1mDodgylE2zaafSR1GnMJfztvI0HWanUSw5xIfzf0l6Zb
a3plwnITrGe6SkIR9+x+jOdz9k6jGa4TId43dti7QwzF8Ve/Zq61zTLdORmWU9kiIcn7th9Jw6fs
nUZD9PCO+W37Vzdo4YDnfu3S3y5bW3mjzpptlqVwtnZ3U6xO5JoEFTwBAPxP9kH+Y+GdXDCNJpyI
CyBfvPf+Ojz5ynU5xxbAvozTPzt/L2W4vbT60bO109R6E8qFY5kX4SIVUF9uylakduucN+aiSbfQ
Z9gamMYkC+LoOnveJeYvzDnP5kTeatBmlMUUoayS7qRxMYSRCgbZHPLYHp4HMKWT18Qet03Zo/Kj
DkA5b179vixD84/zA8y+btFi/TEsbJaSVt44o1jVTIRy6bn7I6nMzRZJSyi+4un7Y7OxabSS8Mcz
G32N+Vf/AJLDyh/2xNO/6hI83jwxeUf85q/+Ss0r/tuW/wD1CXeKvVfyn/8AJWeTf+2Hpv8A1CR4
q8j8x/nX5n8ifnH5nGr28+o/l4tzp9rNKnxtp082nwSckAqQklWYp0Y1K/FUFV7F5gutN1/yJe6h
pmoSNaT2M1xY6jp1zJC1fRfi6SwMh2PY9+o2xVjP5faLe+ZPyb8tx3WtanDPqNraXmo6jHeXBvpD
QSMqXLSGSIOwAbifs1HeuKvOfzm0m/8ALHnz8tdI0fzJ5hhsfMmqG01aNta1GQyRC4tI6KzTEp8M
77rir2bQfIEWia5+kbXWtYurZ7SW2msNQ1G7voS7yROkyC4kk4OgjZajs2KvH9Is9R1n/nJrzd5Q
utf12Py9p+mRXtnZQavqEQjmaOxJIZZg1K3D7Vpvir2Xy/5JTSdO1PTZdW1PUbS9ujcW8l3fXUlz
bxmGKMwpcmT1uIkjZx8X7WKvB/8AnH/RPMX5gflhrGqaj5x8wQa/BqE9rYagNWvfTjEdtBLH6kLS
NG685TyqtaYq9K/5xr86+aPOH5Yw6n5kJlvYbqa1hvWADXMMQUrK3EAVDM0ZPfjirHPzm/M7zt5G
/M6wvNIt5NV8u22jC78waSrbCD620RuUG5R0LKC4FKfa23Cr1fyr5t8s+ePLcWraHeG5066HFzG7
RTROAC0UnAq8ci13FfwOKsS/JBbuS183fXNQv9Qaz8y6rp1s97eXFyUtbaVUijX1XYLxA6jfFWA6
RZ6jrP8Azk15u8oXWv67H5e0/TIr2zsoNX1CIRzNHYkkMswalbh9q03xV6vB+XE8Oi3+ijzJrJs7
2/S8W5e+uJL6GBI4gbWK8eQzIjSxFiQfssy964q8i/ObSb/yx58/LXSNH8yeYYbHzJqhtNWjbWtR
kMkQuLSOis0xKfDO+64q9n0DyDFoWvDU7XWtXurdrWW2m0/UdRur+Eu8kTpMq3MknF0EbLUdmxVl
WKuxV2KuxV2KuxV8tf8AOKPkvyrr35Z6zJq+mQ3k02qy2zTSL+8WJLa3dVRxRk+JyaqQcqnqsmMj
hkR1T4EJg8QtKPzn/LXS/JV9pzaXNNJaakJisc5VijQlKqGULUfvO4zoezNdLODxAXGnR6/SRwkc
PIsk/Ln8gtN17QNP17V9RnSO9VpPqMCKhCh2VaysXryVQ32B1+nMXW9ryxzMIgbdf2ORpezIziJS
PPownzdp3kO384XUWjyXMOkWbMrRg82kkiFCsEjVKhn25PWg+LfZc1uP2mIgRKPFLoeh9/7Ofk9P
H2GyT4JxkIxl9Q6x93f+hj2oXjXt9cXjIsbXEjStGleILmpArU985ORs2+nYcfhwEbJ4RW/PZG2X
l+4mAec+ih6LSrn6O2TjiJdNre38WI8MPXL7Pn+Pek/5j6Pa2nliWWMuW9WMfEQep9gM2GhxgZHm
O0u2cuoxGEhER8v7X2j+Vf8A5LDyh/2xNO/6hI83LzpeUf8AOapH/KrdKWu51yAgd6C0uv64q9V/
KYg/lZ5Np/1Y9N/6hI8VYb5Q0/SvMf5j/nBpWq2yXNhdzaVbXVq+4ZBp/p12oQTwqCNwehqMVea6
5Yeb/wAgZ9Tgtlm1r8qtdWWJVrym0+edCq1rQA1NK/ZkHg2Kvevyiiji/KrycqDip0TT2I93tY2Y
/STiryz/AJyO/wDJp/kv/wBtw/8AUXp+KvoDFXzXp/lvSfMH/OXnney1P6x6CaPbzJ9VurmyfmsG
nKKyWskLkUY/CWp3psMVe6+U/LmkeW0vdK064llV5hfGK5nluZo1nURqGlneSRlLQNxLH27Yq+XP
yK8n+e9f/IrzOPKfmS5025fULiJdIRLcQ3LLa2zOPXaP6xE8qNwqkqjYV74q93/Ij8xPLvmnyhBp
tjaR6Pq2hItnqnl9FMZtnj+CqI3xemxB3O4NQ2+KqFxLDN/zkwllKitGfJMpYPQhxLqiqUKkb7R4
q8984/l15r/JzzNP+YP5axNd+WZjy8w+WBXikIqzMgFf3a7lSByj90qMVehf8476tZ635O1fXrON
ooNZ8watqCJJTmFuLkugehI5BKA0xV57p/lvSfMH/OXnney1P6x6CaPbzJ9VurmyfmsGnKKyWskL
kUY/CWp3psMVe6+U/LmkeW0vdK064llV5hfGK5nluZo1nURqGlneSRlLQNxLH27Yq8e/5yO/8mn+
S/8A23D/ANRen4q+gMVdirsVdirsVdirsVfOv/OGn/ksNU/7bc//AFCWuYeo+pux8ntWreX9C1hE
TVtOttQWLl6X1mFJeHOnLhzB41oOmQx5pw+kke5M8UZ/UAUFq3mDyp5P0+zhv7iLTLI0t7KMIxUB
F+yqxq1AB36ZTlzC7kdy5ek0OTN6cUb4Q+XvzM13S9c866lqGmRJHZO4SOSMcfWKDi0xG28h36dO
u+arLIGRIfRey9PPDp4xmfV93l8EHoGmqVF5KtTX9yD2p+1/TJ4odXS9vdpkHwYH+t+r9f8AanuZ
DyTEPzS/5RKX/jNF/wASzJ0f1teb6X2H+Vf/AJLDyh/2xNO/6hI82zhlb51/K3yR52EK+aLGXUYr
ducMBvLyGJXpx5CKGaNOVO9MVTHy15Q0Ly1p0em6MlxBYQp6UFvJd3VwkaDosYnll4AduOKoTRfy
68p6Lr1/r2m29xDq2qFG1G4a9vZfXMYIT1ElmeNuAYhart2xVPNS03T9TsJ9P1G3ju7G6QxXFtMo
eN0bYqynYjFWtK0yx0rTLPS9Pi9CwsII7W0hBZgkMKBI1qxZjxVQNzXFWO+avys8j+a9VstV16xm
u7/TW9TT5heXkIgcFTyiSGaNENY1NQOoxVlFvAkEKQoXKIKAyO8jfS7lmP0nFWDXn5Gflnd69P5g
n066Ot3NPW1FNT1KOZqKEHxpcqacVAxVO9F8g+WdFsr6z02K5ij1Fle8le+vZZ3ZAFWlxLM8y0Ap
RXGKqPkr8s/JfkmGWDyxZSafbzuZZbf63dzRNIVCl/TmlkTlxUCtMVWXX5XeRbjzT/ir9Gm28wkF
ZNRs7i5s5JAQAfVFtJEslaCvMHFVWb8ufKU3mtfNklvcnzAkRt0vhfXqlYCxcxCMTCMR8mJ4caYq
yUgEUO4PUYql2g+W9D8v2cllotlHYWck0lw1vCCsYklNXKrWignstBirFLz8jPyzu9en8wT6ddHW
7mnraimp6lHM1FCD40uVNOKgYqyLyx5N8v8AllLpNHhmjN66y3Ulxc3N5I7KvFayXUkz0A7A0xVL
vNX5WeR/Neq2Wq69YzXd/prepp8wvLyEQOCp5RJDNGiGsamoHUYqyi3gSCFIULlEFAZHeRvpdyzH
6TiqpirsVdirsVdirsVfOv8Azhp/5LDVP+23P/1CWuYeo+pux8nvOY7Y8/8Azo8q6Nq/lK61O/eW
O40aCaayeJqLzYCiupqCGZVB75j6mAMbPR3XYeryYs4hGqmQC+XIYmlmjiX7UjBR82NM1z3+XIIR
MjyAtmqIqIqIKKoCqPADYZmgU+X5MhnIyPMm12Fghvzc8i6jZ/lNJ5hvHEKS3FsLe1pV2SRtnY1+
HboMy9JH1W1ZTs+nfyr/APJYeUP+2Jp3/UJHm0cQph5t84eXfKWjSaxr94tnZIwRWILvJI32Y441
DO7t2Cj8MVYZqX57aRpCQXOs+V/Mel6ZcOkUep3ViiwBpCAgfjM0sfIttzQYq9MxV2KuxV2KuxV2
KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KvnX/nDT/wAlhqn/AG25/wDqEtcw9R9Tdj5P
ecx2x4p+e3lfzteTXGr2dy7eXLa1Q3NoJ2ChkY839H7J6jf2zC1MJXfR6z2f1eniBCQ/emWxr9Lw
yw/3utv+Mqf8SGYkeYen1wvBP+pL7mZZmvmTsVZ7/wA5N6hZ6h+Rn12zINtNc2bRhabDkfh27r0O
bDTm5Boyci9X/Kv/AMlh5Q/7Ymnf9QkeZ7jF43/zl1Lrmk3vkTzVBAbvSNC1Fp7m3IPpfWFeGWES
0rtIsLqK9PpxV6v5X84+R/zX8mXB06cXFleRGDULJqLc27Ov2ZENeLKd0bcGlQTiqF1P85dE0r8w
NN8j6ppGp2OpauwXTr6ZLX6lKDWhWVbhm+0OPHhyrTbcYqnfn7z3pvkrRYtWv7S7vo5rmGyhtbBY
pLiSa4PGNUjlkh5knspJ9sVa1vz9pOg6TZX2t29zY3WozJbWGjlY576a4k+zFHHbPOrN40eg7nFV
C2/MOI6rHp2p6DqujGaGa5hur2O2Nu0cCeo/7y3nuOLcd+D0b2xVj+t/njDofl6TzFq/kvzJZaPC
sby3M0OnrxEzrGnKP676gq7qKccVRNp+cf1rSrPWU8meYho97HDPFf8Ao2DRiC4CskzLHePIE4sG
Y8dh1xVW8+/nFpHknXNH0bUtG1S7u9flNvpDWS2jpPMGjTgPUuYmU8p0HxAdcVR+kfmFNfa7a6Pe
eV9a0aW9SV7e6v47P6uTCvJkL29zcEMR0FMVTTW/OGiaLrWiaPqEpiu/MEssGnGg4GSGP1CrGu3I
bLtudsVTvFUj8u+cdD8w3utWelymWTQb06ffNQcfXWNXbgQTUKX4GtPiU/MqobzF5/0XRdZtNBEV
zqfmC+jae30iwjEs/oKeLTSF2jiij5bcpHUE9MVVPLXnBNb1HUdNl0nUNH1DTEgkuLfUY4V5JcmV
Y3ikt5biKRawOCVfFWQ4q7FXYq7FXYq7FXYq7FXYq+df+cNP/JYap/225/8AqEtcw9R9Tdj5Pecx
2x51+eHmy/0HysLa2sUuYdZE1jPPIW4xCSOlAi05MyluPxbU6HMfUzMRXe7zsHRxzZrMqMKlXfu+
YCHR6EFXU7g7EEZrn0AgEeTMrO5W5to5l/bHxAdj3H35mRlYfNNbpjgyygenL3dFbJOIxj80NQvk
8i3Fis7izluIXe35HgWVtm49K++ZWj+trzfS+u/yr/8AJYeUP+2Jp3/UJHm1cMpxrekaHr2nXeh6
vbxX1lcxgXdlLQ1jcnixA+JfiQ8WHcbbjFXx/wCefJXmT/nHvz/p3mzy1cyXHli9mMSo7fEU+1JZ
XIFA1UFUf2rsVxV9Efnb+XUf5geRuWnEx6/ptNR8vXa1WRZlAb0ww+IeqAB7NxPbFWLfk35j1D83
LrTPOOsxenY+VIhaW9r+xNrTxA3N5xB+ykLqIlP2S7HFU7/Pv8vvN/mO20LzF5MuBH5o8p3El3YW
zlQswlCc1Bf4OX7paB/hIqD1xVA/lD+ek/mzXn8necdGOh+drBWlELIyxSlFIdo1kq8T8GJpUgrU
hqbYqmH/ADlH/wCSJ8zf9GP/AHULfFWVflQA35VeTlYVB0LTQQehH1OPFXkn/OTk89v+Y35Pz29u
95PFrEjw2kbIjyut1YFY1aRkQFzsCzAeJxV61onm/wAwahr0Ol6n5SvdFR4JrlLy6uLKaP8AcsiF
V+qzXB5H1h1ptirxr/nJzRvMHmLzXZRaFM8eoeTNDm8ywrGKuXN7DH8BrXmEt3kX4TulO+Ks6i/O
car+TVj5q0dFk8x6z6el6fp43/3MzH0fTof2Uesu/wDusVxVhn/OMdldeWPP/wCYvkq8uWu5rOe3
uVuXJ5SGsgkkIPd/UQ4qmv5xeUPzP0Pz/b/mj+XcS6ldrZDT9X0dl9RpIUfn8EYKtIrUWqoeYK1F
a7Ksv/Jv839H/MewvZVsW0rzDphSDWNOloXQ1fgVchWZOQfZgCpqCO5VejYq7FXYq7FXYq7FXYq7
FXYq+df+cNP/ACWGqf8Abbn/AOoS1zD1H1N2Pk95zHbGiqkgkAlTUHwNKfxxS+UPzkutEufzA1KT
SkdOLCO+5rwU3UfwylFNDTYVr1apzV5iOI0+jdiQyR00RP4f1ejGNK1RrOQq9Wgf7Sjsf5hkYTpe
1ezBqY2Nsg5H9BZRDNFNGJImDoejDMoEF4TNgnilwzFFif5pf8olL/xmi/4lmVo/rcXN9L7D/Kv/
AMlh5Q/7Ymnf9QkebZwykHm1PzQ0f8w18xeWdIh8w6BeaZBYajpf1uO0uVnt7i4lSaJp6RfZuaHf
f2oDirH/ADj5I89/mxe6Rp3mfSI/K/k3TLpb+8tXuoru/u5kVkRF+r8ook4uwJ5k71xV7DdzSW1o
8kFs908Y/d2sJjV27UUytGg+lhirx7/nGDyX5z8keT7/AEHzPo0thcz6lLexTie0miMb28MYH7ma
R+XKE/s4qzXzNqX5haV5piutG0L/ABB5euLRIrq2huoLa5guY5Xb1Y1uWjidWRwGHMHb23VY/pvk
zzH5j/NnTvzB1/SU0CDQbGSz0ywaaK4vJpZxIjyTvbs8KIkcrBUDtua1xVGf85AeXvMnmb8r9V8u
eXtNk1HUtSNuIwstvCiCC6hnYu08kXVYzTjXFU9/LC11iw8haBpGr6bLpt/pWnWllcRyyW8oaS3h
WJijQSSgiqV3p1xV5z+fXlHz/r/nbyHq/lny9JqsHlO+a/umN1Z26y1mtZljT1plf/j3YElcVZ/p
3mfz3qGr6fay+TrrRtPeR21HULy70+ZUjWJyqpHbXE0jM8vBelAN8VSnyzpHmVvzd8z+YNU0S4tN
Jv7KxsNKuZJbSRSluJHnMkcVxI68pHAX4DXvTFWOflr+Q0vlP8ytZ1R5eflS3ma78q6dyDJFc3iB
LiUx/stCiekh7qcVdZ+TPO2hf85H635ztNElvfK+uWEdrNPBPaKVlWKD4/Rlmhf7dvStD9onFWXX
ut/mbpHmnWI4/K7+YfLtzJFNpNzZ3tpDNCBbRRywyxXckAoZkd1Kt3xVB/lr5C1ew84eavPWu28O
nap5nkhWLSbdxKttb26BAZJFCq8spHJ+OwPc1xV6RirsVdirsVdirsVdirsVdir51/5w0/8AJYap
/wBtuf8A6hLXMPUfU3Y+T3nMdsQGoa9omnT29vf30FrcXTrHbQyyKryO7cVCKTU1O2WwwzkCYgkB
hLJGJomrQd15K8p3eoXWo3WlW897ex+jczyIGZkC8e+wPHao3zGOKJNkOdDXZoxEYzIjE2Hyf5k0
uzj81alp2hRTzWkFxLHbRspaXhETy2ArQUPUVp1zWGO5p9G0+c+DGWUgSIHuspTBc3Fu/OFzG3en
eniO+AGm7Pp8eWNTAkEr896vd3Plp4JuLD1IzzpRtj7Gn4ZsNBMnJReT7d7Jw4cByQsGx12/Hxfb
v5V/+Sw8of8AbE07/qEjzePFFlOKuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV
2KuxV2KuxV86/wDOGn/ksNU/7bc//UJa5h6j6m7Hye85jtj5B/OE2S/mVrEun3KTwvKkglicOFkM
amReQJ3WSvyztuzb8CIkKeW19eMSCzGx/wCcmfMNvaWsM+k29zJDGqTztI6tKyinPYUUnqeuYM+w
4EkiRDlR7XkALDBvzG8+t5y1tNSXT49NVIkQxxkO7utfjkkCoXO9FqNhmZoezoaeyN5Hr+hp1naW
TOBAkiEeUb2vvZjpf5M+bNeg8vanNJHLYX8UL3tz6oNwkUjGQu4YDkwjYKtGY9K0zi+1cHFqZcIA
jfT7ftfRewO2oYNCIzMjkAJF7+4Wln/ORn5QaL5T8irq+k3F1KGvIYJobgo6qrh25hkRKfEoXfxy
OlwCGQENGt7ZyanBKExEcjt7w+kPyr/8lh5Q/wC2Jp3/AFCR5tnnCxj88Pzoi/LzTrSz061Gpeat
YPDSrA1KD4gvqyhSGK8moqjdjtUbnFXaF+WHnPUrGO988+dNYfV5xzmsNGuf0bZ25bf0k+rKkknD
pyL7+GKpJ5+/Lfz15b0afzB5N89a4X04fWbvTNUufr8UluhDS+m8ysyssYLDlyrSm2Kva8VdirsV
dirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVfHH5K/mFceTPyPvZrD021W98wzR2qyg
soSO0tGlYgUqKUXr+1lul0Yz5al9IH9jRqtUcWOx9RKa+aP+cgPNGu+XW0lLaLTZ5zS7vLV3BeKm
8aK1SnLueZ22za4Ox8eOfFfF3AutzdpznDhqnmkUApyfv0X+uYHavb/gyOPFRkOZ6D9r1Hs97HnU
wGbOTHGeURzkO/yH2nyVQqAEBVofYE/ed85qXbOqJvjP2Pcx9l+z4x4fCj9pPzu1jwIw+H4W/A5t
tB7RzEhHNvH+d1H4/FvOdsew+MxM9L6ZD+AmwfcTuD7yR7no/wCT/wCbcnlK4k0vWZJJNAkDsigF
3gmAJ+AdeLnYr47+Ob3tHs8ZwJwri+8PBaLWHCTCd19xX/n5+cXlzzh+Xt/pGm29zC8c1vOs1yEQ
OElClVVWc/t1zUz7MyYQJSI+Ds8WvhlJiL5Poj8q/wDyWHlD/tiad/1CR5BtL5u8+3Bv/wDnMzSL
bURW1srrTYrMP9mgt0uEpX/l4kP04q+usVaIBFDuD1GKvMPzU/MTW7LzT5d/L3yq6QeZvMzGR9Rk
QSrZWUfIyTLEdncrE/Hl8PwmuKprc/lSs9sKebPMkeohaDUE1OZfiofiNsKWp3PT0sVYX+Vv5k+d
NP8AzL1L8qfPk6alqVtGZ9F1xEETXMKp6gEqr8JJiPIECoKsGJ64qk/mP86/M/kT84/M41e3n1H8
vFudPtZpU+NtOnm0+CTkgFSEkqzFOjGpX4qgqvYvMF1puv8AkS91DTNQka0nsZrix1HTrmSFq+i/
F0lgZDsex79Rtirz6383eYPLf/OMsHm2ykn1PXhpNvdtPezS3bmacokkzGZnNIw5k49NsVVfI9jo
/nfybZavoHnbVbvzAkcMt7cDUp1CXNFd4LmwRhBGjMrLQRV4/ZJGKorzz588wal+Zenflf5Uuf0b
dzW5v9f1wIkstraAEiO3SQMnqybfEynjyFB4Kpxqn5TyT2kh07zd5isNVKn0b46lPOgfqC9rITbs
teoVF9qYqxj8kvzR806t5j1/8u/PHpyeafLvJhfwKI1urdHWMyFV4gNWRGBUCqsNgQaqsa0qz1HW
v+cmfN/k+58wa7F5fsNLjvLOzt9Xv4hHM8diSVZZq0rcOaHbfFU5/KrV/PVl+avnj8ur3WLjWtI0
i2juNN1i9P1ie3kuFjeGKSQ8WkJSY1qesZpSuKqX52eTpvJv5R6vrmkeZ/Mn6Y09bQRXk2tag9TL
dwwuzR+sI/iSRv2cVT3yT+Xh1n8v/LesnzL5ii1m+0ywv5Lg6zfyRtcSQRzNzheVozGzn4lp02FM
VY//AM5AX+sad+Zf5X22m6tqVha6/qv1XVra0vrqCKaFbmzjCmOORUX4ZnBKgVrirJv+cj5b3Sfy
d1fVdK1C+0/UdNFoLS6tby5hkAkvIYW5tHIvqVRyKvXFWUflR6z/AJa+WLu4uLi7u77S7K7urm6n
luJXmnto3kYvMztuxrQGmKsJsDej/nJi80U6lqLaPF5bXU49Oe/vGtxdC8ii9T0mlKH4CRxI4+2K
oX8/fzcvPIHm/wAivDK/6PknuZddtkJo9n+6hqyjqV9RnT/KXFXsFzrGmW2kSaxNcoumQ25u3u61
jECp6hkqP2eG+KvJf+cd/wAz9U8+XnnafUGkQQanHNY2cvW2tJ4jHDEFJ+Ha3JbsWJPc4qwz/nFD
QdH138oNY0/VrWO7tJNbn5RyDofqlrRlI3Vh2INcx55pY5iUTRZ+HGcakLDyTU7a1j1y9t7RWW0i
uJlgSQ1YRI7cQxHU8RnU6zUyxaaWT+IR+0/tdN2Xo46jWwxfwyn/ALEbn7GWflb5Oh82+bodPuiR
Ywo11ehTRmijKjgDsRyZ1Wo7Z5tihxy3fae1dZ+VwcUef0x/Hk+p7Py/oVlYiwtdPt4bMLxMCxIE
I/yhT4vpzZDHECqfPZ6nJKXFKRMu+3g357/l3pegyWuu6PCLazvZDBdWqCkaTcS6NGP2Q6q1V6Cm
2YOoxCO45PY+z/aU8wOOZuURYPk8buFHIMB1G/zGdr7O6g5NPwn+A18HgfbbRRw63ijyyR4vjyP3
X8WX/mR+VFlon5Kx+a57trnUL9rKW3iQcIoormj0Nfid+JG+w9u+U63tE5JnEBUQfudfo9EIR8Qm
yR976m/Kv/yWHlD/ALYmnf8AUJHmI5heIf8AOUv5ZeY013TfzQ8qxPNeaV6LalHEC0kbWr+pBdKg
3YL0enQAHpUhV6z+U/5y+VPzE0aGayuY7fW1QfX9HdwJo5AKsUU0Mkfg4+mhxVkHnfzlpXlPQZtT
vpYxMR6en2jtxe5uX+GKGMAMxLuQDQGg3O2KvEvzwFx5K/PPyX+Z1xE7+XkjGm6jOoLiAsJomYge
MNyWXxKnFX0LZXtnfWkV5ZTx3NpOokguIWDxujbhlZSQQfbFXhOlab/i7/nKm58z6YPV0XyhYfUr
m/XeKS9khkiMKMNmZBcNy8OPyqqyDyhp+leY/wAx/wA4NK1W2S5sLubSra6tX3DINP8ATrtQgnhU
Ebg9DUYq811yw83/AJAz6nBbLNrX5Va6ssSrXlNp886FVrWgBqaV+zIPBsVe0/l3e6Lp/wCVHkSz
1Dgtvq+l6dZRxygGOSW4sRIY2DbH1OLCncmmKvHPze/Ke0/K7U9L8/8A5cXMumajLqMFmdAVyYrl
rhifSiqeXF+NGiNVp0pTFUx84T/8q9/5yis/OOsAxeWvNdqti+pN/dQyiFIOLtSi0aCNmr+yxPY4
q+jY54ZIVnjkV4HUOkqkFSpFQwYbUp3xV4P+VWlN5k/5yB88fmNZrXy6iLpOn3Y/u7meKOCGV4mG
zov1U7jb4hiqS2Wk6vqn/OXXniDStauNBuk0eCT65bRW87Mog05fTZLqOZOJLBthXbriqffkj5qf
yz5r1v8ALfzoEg85zXcl7DrT1H6YSUkpJzcmrhBRFFBxHEAFWxVkX/OUf/kifM3/AEY/91C3xVlX
5T/+Ss8m/wDbD03/AKhI8VeVf85Hf+TT/Jf/ALbh/wCovT8VZv8A85HaVeap+Snmi1s4zLOsENxw
UEnha3MVxIaDwSJjiqY/kjrFhqv5S+U57KVZUt9LtbObiQSs1rCsEqNToQ6HFWN+Xok1T/nJTzLr
Fk/rWej6Bb6PeSrui3c1wtx6XIbFkSP4h2OxxVCeavK+n+f/AM1vNXl6+/3ktPKtvp4f7XpXF7dt
dJMFr9pTbxMNv2cVYD+WeqeavNGi235IazBLDcaBfNH5mujXidFs3V47cPt8U0pWJaf7qFcVZL+W
PDRP+coPzD0FVEUOo2kOoQqo4oSBDJRen/LU3TwOKsC/5x7/ADR0byR+VF8LqGW71C61m5a0tYxx
Vgtpagl5SOKip7VPtksWglnnsaiObVm1kcMd9yWBTXZn1Ca6ICGeR3I6hfUJr91c6DXabxNPLGOf
Dt7xydZ2TrRg1mPMeQnv7jz+xmf5V+cYPKfm+HULsH6jPG1relRVljkKtyA/yXRSfbPNcU+CVvtf
a2jOpwGMfq5j8e59U2etaPe2Iv7S9gmsqBvrKSKYwD4tWg+nNkJgi7fO54JxlwyiRLup4D+fP5ga
ZrtxaaJpE4ubSwdpbq4jNYnmI4qEYbMEUt8Q23zB1GUSNDkHs/Z/s6eEHJMVKXIda/a8duGqwUGo
A3HgTna+zmnMNPxH+M38HgvbbWxzazgibGOPCf63M/oHves/m/5m0DV/+cb7S10y8WebTjpltdQH
4ZY3iURnkh3oSux6HNbqcE4ZyZD6iSGjTZYSxARPIB75+Vf/AJLDyh/2xNO/6hI8LIspxVg+v/kl
+VOvXbXupeWrRrx25vc2/O0lZ615F7ZomLe9a4qoaR+Q35S6TqUGp2nl6Nr+2dZbe4uZ7m7ZHQhk
ZfrMsoBUio8MVZvf6fYajZzWOoW0V3ZXC8J7adFkjdT2ZGBUj54qwy1/JD8s7MsLPS5bWByS9pBf
X8Vq1a15WyTrCRv0KYqy7StG0nSNOi03SrSKwsIV4xW1sgiRR7BKUPviqT6L+XXlPRdev9e023uI
dW1Qo2o3DXt7L65jBCeokszxtwDELVdu2Kp5qWm6fqdhPp+o28d3Y3SGK4tplDxujbFWU7EYqk+p
+QPJ+qeV7XytqGmR3Og2McMVnZOzkRLbJ6cPF+XqAouwblX3xVB6P+VPkTSdSt9TttPkmv7Ov1O4
vru7v2gqKfufrcs/pmn8tMVT/WtD0bXNOl03WLKHULCYUltrhFkQ+BowO47HqMVYnbfkj+WltEbe
HS5VsmrXTzfX7WdD1H1VpzBT24YqzOysrKxtYrOyt47W0gUJDbwoscaKOiqigKo+WKsXsvyo8jWX
mqfzZbWdxH5iul4XOo/X79pJEAUcHDTlWWka7EU2GKovzf8Alz5L84NaP5h0xLyexYPZ3SvLBcRM
CG/dzwPFKvxAGgbrirfmL8v/ACt5k0BdA1yC4vtJWnK3kvbwF+Lh19WRZhJLxZQRzY0xVHeXPLOj
+XNMh0vSI5YbC3RYreCW4uLgRxpsqoZ5JSoAPQYqlPmn8rfJHmnVrHV9dsprvUNMcSafMLy8hEDg
q3KJIZo0U1jU1A6jFWTRW0UVuLccniA40lZpWIP8zSFmb6TirCh+SP5ZJczXNrpD6e9weU8en3l7
YxOf8qG1mhiP/A4qyjy/5c0Ly7pqaZodjDp9ihLCCBQoLN9p2PVmPdjviqA0nyH5Z0nX77X7GG4T
VtT9P9IXEl7eTCb0UKRc45ZnjPpqxC/Dt2xVMLPy/otlq+oaxa2ccOp6qIRqN2oo8wt1KRcz/kKa
DFUmvPyw8k3fm7/GEljKnmQoIjqMF3d27lAnphSsMsaEcRTdcVfOX/OO/wCXGled/wApJ7e+mktm
svMFzJHPCFL8XsrUOnxVA5UU/Rjj1stPMkC7DDLpY5ogHoU9/M/8hodE0RNU8r/WLtLQMdRgmZZJ
TH19VOCp9n9oAdN+xzZ6Dtc5J8OShfL9TrtZ2aIR4oWa5vHIphTi/wBDf1zF7V7A8WRyYtpHmO/3
eb0vs97Yfl4DDqAZYx9MhzA7j3j7R5qoZCvLktPmK/d1znD2Nqga4D9n38nuI+1HZ5jxeLH7b+VW
sedR9j4j49vxzcdn+zkuISz7D+b+s/qeX7Z9uIcJhpbMj/Gdq9w5376rzZn+Xv5ReYPOkFzeRyCw
sYgRDdzozLNNX7C0INB+029OmdDq+0MenqNWe4dA8Dp9HPPcifiepQv5oflBrHlD8vdZ1PWJYZJP
XtLayNuxdGV5eUjnkEYEcFA27nNZrO0o5hGML7zbsdJoZYiZS+D6p/Kv/wAlh5Q/7Ymnf9QkeYbm
FlOKuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV2KuxV86/wDOGn/ksNU/
7bc//UJa5h6j6m7Hye63Mxht5ZgjSmNGcRoKs3EV4qO5PbKYizTMmg+NNH8sa75q85nSVga31C7u
He8EiFfQBYtK7qeJASvT6O+dzlzww4uK7iBt5vJwwyy5OHkSfk9Lk/5xf1YT0j16BoN/jaB1f2+A
Mw/4bNUO3o19Jv3uw/kc/wA77Hk+q6PdeW/M8um6nCJJdOuAs0RFVkRWDAivVZEoR7HNxjyDLj4o
/wAQdZPGcc6l0L7Wso7SO0hSzRI7RUUW8cahECU+EKoAAFM4ORNm+b18QK25PIf+csv/ACT91/zG
2v8AxM5Zg+pE+T0z8q//ACWHlD/tiad/1CR5nOOWU4q7FXYq7FXYq7FXYq7FXYq7FXYq7FXYq7FX
Yq7FXYq7FXYq7FXYq7FXYq7FXyD5H/Lj/nLDyRpMuk+XLW1tbGedrqSN5dPlJldEjLcpGY/ZiXbK
5YxI7s4ypkX1b/nNfws/v0vI+BHuZcZUv0Z/zmb9Z+tehYfWuHp+vx0r1OFa8OXXjXemHwhVb0ji
3vZV+rf85r+Fn9+l4PAj3J4yl0nlT/nLmXVv0vLp2lyaoEWMXjx6S0oVCStGIqKV6jLBYjw2eHut
rIjxcVC0x+rf85r+Fn9+l5X4Ee5s4ykfnHyH/wA5becdEfRdftrW5055ElaJZNOiPOM1U8oyrYY4
gDYQZW+m/IelXuj+R/Luk3yhL3TtMs7S6RSGCywW6RuAw2NGU7jLWsp7irsVdirsVdirsVdirsVd
irsVdirsVdirsVdirsVdirsVdirsVdirsVdirsVf/9k=</xapGImg:image> - </rdf:li> - </rdf:Alt> - </xap:Thumbnails> - </rdf:Description> - - <rdf:Description rdf:about='uuid:8aa76b3d-2474-11d9-a8a3-000393cd9a96' - xmlns:xapMM='http://ns.adobe.com/xap/1.0/mm/'> - <xapMM:DocumentID>uuid:c63b31d6-45fe-11d8-8e7c-000393cd9a96</xapMM:DocumentID> - </rdf:Description> - - <rdf:Description rdf:about='uuid:8aa76b3d-2474-11d9-a8a3-000393cd9a96' - xmlns:dc='http://purl.org/dc/elements/1.1/'> - <dc:format>application/postscript</dc:format> - </rdf:Description> - -</rdf:RDF> -</x:xmpmeta> - <?xpacket end='w'?> -% &&end XMP packet marker&& -[{ai_metadata_stream_123} -<</Type /Metadata /Subtype /XML>> -/PUT AI11_PDFMark5 -[/Document -1 dict begin /Metadata {ai_metadata_stream_123} def -currentdict end /BDC AI11_PDFMark5 -Adobe_AGM_Utils begin -Adobe_AGM_Core/page_setup get exec -Adobe_CoolType_Core/page_setup get exec -Adobe_AGM_Image/page_setup get exec -%%EndPageSetup -Adobe_AGM_Core/AGMCORE_save save ddf -1 -1 scale 0 -148.752 translate -[1 0 0 1 0 0 ] concat -% page clip -gsave -newpath -gsave % PSGState -0 0 mo -0 148.752 li -254.868 148.752 li -254.868 0 li -clp -[1 0 0 1 0 0 ] concat -54.9161 147.252 mo -1.5 147.252 li -1.5 1.5 li -54.9161 1.5 li -54.9161 147.252 li -false sop -/0 -<< -/Name (PANTONE 7506 C) -/0 -[/DeviceCMYK] add_csa -/CSA /0 -/TintMethod /Subtractive -/TintProc null -/MappedCSA null -/NComponents 4 -/Components [ 0 0.05 0.15 0 ] ->> -add_csd -1 /0 get_csd -sepcs -1 sep -f -7.82032 17.3956 mo -12.9034 12.8946 20.6797 13.3624 25.1856 18.4405 cv -29.4395 23.2481 29.1768 31.1573 24.5225 35.4014 cv -19.4395 39.9131 11.2784 39.8477 6.76954 34.7637 cv -2.26661 29.6758 2.73926 21.9004 7.82032 17.3956 cv -cp -11.7549 43.3096 mo -12.2579 48.5938 li -16.7979 48.8663 li -17.9268 43.7178 li -20.3682 43.4747 22.7608 42.7344 24.8936 41.4756 cv -28.8946 44.7803 li -32.2999 41.7657 li -29.4512 37.3243 li -30.8975 35.3721 31.9356 33.1631 32.5196 30.8428 cv -37.9678 30.3233 li -38.2413 25.7842 li -33.0137 24.6417 li -32.794 22.21 32.0909 19.837 30.8458 17.6924 cv -34.1573 13.6866 li -31.1416 10.2813 li -26.8135 13.0518 li -24.8252 11.46 22.5674 10.3506 20.1846 9.75684 cv -19.6973 4.61329 li -15.1592 4.34083 li -14.0616 9.35645 li -11.6202 9.62598 9.22754 10.4092 7.04786 11.7168 cv -3.06153 8.42383 li -2 9.36426 li -2 15.0967 li -2.42969 15.7667 li -2.27442 15.96 2.14551 16.167 2 16.3663 cv -2 42.168 li -5.16114 40.1416 li -7.12208 41.6631 9.37012 42.7315 11.7549 43.3096 cv -/1 -<< -/Name (PANTONE 301 C) -/CSA /0 -/TintMethod /Subtractive -/TintProc null -/MappedCSA null -/NComponents 4 -/Components [ 1 0.45 0 0.18 ] ->> -add_csd -1 /1 get_csd -sepcs -1 sep -f -19.8682 23.167 mo -21.6221 25.1495 21.9336 28.1055 19.6426 30.2452 cv -17.7315 32.5264 13.9385 32.1124 12.1084 30.046 cv -10.2051 27.9034 10.4053 24.626 12.5489 22.7256 cv -14.6924 20.8213 17.9698 21.0293 19.8682 23.167 cv -cp -24.5225 35.4014 mo -29.1768 31.1573 29.4395 23.2481 25.1856 18.4405 cv -20.6797 13.3624 12.9034 12.8946 7.82032 17.3956 cv -2.73926 21.9004 2.26661 29.6758 6.76954 34.7637 cv -11.2784 39.8477 19.4395 39.9131 24.5225 35.4014 cv -/2 -<< -/Name (PANTONE 871 C) -/CSA /0 -/TintMethod /Subtractive -/TintProc null -/MappedCSA null -/NComponents 4 -/Components [ 0.3569 0.3608 0.6353 0.1882 ] ->> -add_csd -1 /2 get_csd -sepcs -1 sep -f -42.0054 124.904 mo -38.6949 132.106 29.9537 135.87 22.7505 132.561 cv -15.5523 129.245 12.4058 120.72 15.7144 113.527 cv -19.0259 106.334 27.5503 103.179 34.7427 106.488 cv -41.5435 109.62 44.98 118.187 42.0054 124.904 cv -cp -52.1324 108.189 mo -46.0132 109.425 li -44.6382 106.935 42.775 104.731 40.4371 103.029 cv -42.0914 97.1954 li -37.271 94.9756 li -33.9527 99.9629 li -31.0816 99.1973 28.1519 99.0762 25.3277 99.5635 cv -22.3921 94.2989 li -17.4175 96.1416 li -18.6011 102.011 li -16.1207 103.443 13.9351 105.404 12.2232 107.825 cv -6.41944 106.179 li -4.2046 111.001 li -9.19288 114.318 li -8.42237 117.192 8.30616 120.126 8.78467 122.94 cv -3.52295 125.882 li -5.36475 130.86 li -11.2349 129.672 li -12.6656 132.151 14.6226 134.34 17.0562 136.049 cv -15.4068 141.854 li -20.23 144.069 li -23.5582 139.057 li -26.3648 139.764 29.271 139.844 32.0865 139.344 cv -35.1089 144.747 li -40.0816 142.907 li -38.8687 136.883 li -41.3609 135.473 43.5679 133.563 45.2554 131.213 cv -51.0806 132.864 li -53.2984 128.045 li -48.1685 124.64 li -48.7964 121.878 48.8687 119.031 48.4048 116.281 cv -53.9722 113.169 li -52.1324 108.189 li -1 /1 get_csd -sepcs -1 sep -f -25.3804 126.851 mo -21.3306 124.99 19.5601 120.199 21.4234 116.152 cv -23.2847 112.103 28.0757 110.342 32.1226 112.198 cv -35.8609 113.921 38.1509 117.934 36.23 122.414 cv -34.9371 126.865 29.2769 128.645 25.3804 126.851 cv -cp -34.7427 106.488 mo -27.5503 103.179 19.0259 106.334 15.7144 113.527 cv -12.4058 120.72 15.5523 129.245 22.7505 132.561 cv -29.9537 135.87 38.6949 132.106 42.0054 124.904 cv -44.98 118.187 41.5435 109.62 34.7427 106.488 cv -/3 -<< -/Name (PANTONE 1805 C) -/CSA /0 -/TintMethod /Subtractive -/TintProc null -/MappedCSA null -/NComponents 4 -/Components [ 0 0.91 1 0.23 ] ->> -add_csd -1 /3 get_csd -sepcs -1 sep -f -51.919 34.2159 mo -50.1553 34.3702 48.4336 34.6612 46.7647 35.085 cv -45.0293 31.7598 li -41.462 32.9639 li -42.0958 36.6563 li -40.4815 37.3428 38.9317 38.1573 37.4639 39.085 cv -34.7881 36.46 li -31.7666 38.7081 li -33.5157 42.0323 li -32.1993 43.1778 30.9776 44.4268 29.8624 45.7686 cv -26.5 44.0938 li -24.3194 47.1651 li -27.0049 49.7813 li -26.1094 51.2696 25.3331 52.837 24.6817 54.4659 cv -20.9756 53.917 li -19.8526 57.5108 li -23.2159 59.169 li -22.8292 60.8477 22.5831 62.5772 22.4659 64.3418 cv -18.7579 64.9659 li -18.7999 68.7315 li -22.5225 69.2696 li -22.6778 71.0323 22.9639 72.7549 23.3868 74.4249 cv -20.0635 76.1573 li -21.2667 79.7266 li -24.959 79.0928 li -25.6456 80.709 26.46 82.2569 27.3887 83.7256 cv -24.7627 86.4004 li -27.0127 89.4219 li -30.336 87.6729 li -31.4795 88.9883 32.7305 90.21 34.0713 91.3243 cv -32.3975 94.6895 li -35.4698 96.8663 li -38.085 94.1827 li -39.5743 95.0782 41.1387 95.8555 42.7725 96.5069 cv -42.2208 100.211 li -45.8155 101.335 li -47.4737 97.9708 li -49.1524 98.3584 50.8799 98.6104 52.6456 98.7227 cv -53.2696 102.43 li -54.8282 102.401 li -54.8282 90.2071 li -50.5508 90.4063 47.168 89.4581 43.1543 87.2188 cv -31.6788 80.8194 27.5655 66.3292 33.9717 54.8516 cv -38.3282 47.044 45.9112 42.2872 54.8282 42.667 cv -54.8282 30.4581 li -52.4581 30.4971 li -51.919 34.2159 li -1 /3 get_csd -sepcs -1 sep -f -33.9717 54.8516 mo -27.5655 66.3292 31.6788 80.8194 43.1543 87.2188 cv -47.168 89.4581 50.5508 90.4063 54.8282 90.2071 cv -54.8282 73.5127 li -54.4903 73.5616 55.1485 73.5948 54.7969 73.5948 cv -50.8213 73.5948 47.5987 70.3731 47.5987 66.3975 cv -47.5987 62.419 50.8213 59.1944 54.7969 59.1944 cv -55.1485 59.1944 54.4903 59.2286 54.8282 59.2764 cv -54.8282 42.667 li -45.9112 42.2872 38.3282 47.044 33.9717 54.8516 cv -1 /2 get_csd -sepcs -1 sep -f -3 lw -0 lc -0 lj -4 ml -[] 0 dsh -true sadj -54.9161 147.252 mo -1.5 147.252 li -1.5 1.5 li -54.9161 1.5 li -54.9161 147.252 li -cp -0.99 0.99 0.99 1 cmyk -@ -0 0 0 1 cmyk -%ADOBeginSubsetFont: TrajanPro-Bold Initial -%ADOt1write: (1.0.21) -13 dict dup begin -/FontType 1 def -/FontName /TrajanPro-Bold def -/FontInfo 7 dict dup begin -/Notice (Copyright 2000 Adobe Systems Incorporated. All Rights Reserved.Trajan is either a registered trademark or a trademark of Adobe Systems Incorporated in the United States and/or other countries.) def -/Weight (Bold) def -/ItalicAngle 0 def -/FSType 8 def -end def -/PaintType 0 def -/FontMatrix [0.001 0 0 0.001 0 0] def -/Encoding 256 array -0 1 255 {1 index exch /.notdef put} for -dup 67 /C put -dup 73 /I put -dup 83 /S put -dup 127 /Nsmall put -dup 128 /Tsmall put -dup 129 /Esmall put -dup 130 /Rsmall put -dup 131 /Ysmall put -dup 132 /Ssmall put -dup 133 /Msmall put -dup 134 /Osmall put -dup 135 /Ismall put -dup 136 /Usmall put -def -/UniqueID 45714 def -/FontBBox {-248 -284 1528 985} def -end -systemdict begin -dup /Private -15 dict dup begin -/|- {def} def -/| {put} def -/BlueValues [-17 0 750 775 638 660] def -/OtherBlues [301 305 405 408 -261 -256 -222 -209] def -/FamilyBlues [-17 0 750 767 638 656] def -/FamilyOtherBlues [301 305 405 408 -273 -255 -214 -209 -252 -239] def -/StdHW [47] def -/StdVW [118] def -/StemSnapH [47 55] def -/StemSnapV [118 126] def -/ForceBold true def -/password 5839 def -/MinFeature {16 16} def -/OtherSubrs[{}{}{}{systemdict/internaldict known not{pop 3}{1183615869 -systemdict/internaldict get exec dup/startlock known{/startlock get exec}{dup -/strtlck known{/strtlck get exec}{pop 3}ifelse}ifelse}ifelse}executeonly]def -/Subrs 5 array -dup 0 <1C60D8A8CC31FE2BF6E07AA3E541E2> | -dup 1 <1C60D8A8C9C3D06D9E> | -dup 2 <1C60D8A8C9C202D79A> | -dup 3 <1C60D8A849> | -dup 4 <1C60D8A8CC3674F41144B13B77> | -def -put -dup /CharStrings -14 dict dup begin -/C <1C60D8A8C9B6D5A0DEDEC57B918D61DDFA401F5A49FEA3B89C6864173301 -6BDC674395116B42D2387AF24DF2F1DC60C61A5B6585CC0DA86F050A110B506B -B65171C092F0636620BAA275DBDEA04B3E655EC58BDFB8B9B535650BF4DE0E82 -1C2ADFD8C9F649E0C395722C228833505318AA21D61F3D55D035246FCF9BC983 -692D83F8C9AF492468B91F4CB872C7D1953185BF38A8E7A5B72C7F51E36572D3 -718D9C26EEF5DDFAB02F3E79248875F4CA6CC06F7C289C017B388B2CFE4B85A5 -1B0090> |- -/I <1C60D8A8C9B77771C05B04C6A1CDBDED73825D1016AD1A9F739BE3AE28A3 -2F89A16FA0ADB365C478020BF11BB9ADC332932373DC2832A2FD54E961E2B084 -4B0EB81447C317CA2A36F9297140F653C6CF38B651D9BF313FA9254650245A3A -6E604D8E9EFFEAAF12423E3B4CFD19A9AFAFF5FC58BD3FF4189B6F8AF938C510 -BD91FB49103F7E5C2AE8440096A8B2CFB59E1B448BD934D6C96663C7ECAD3789 -1B4FEEBF9172B6A7CCC0965D9AA12297E39BBF30EB7B8F6243DD70D9185FBD81 -8CFC74B60F41E69C4533165A53D5C2FC5A9B44BA5F12F31CB79A71FA4F70F551 -E84E63E5837361F7B7736F91> |- -/S <1C60D8A8C9B7F51B95A0DFD92CF0B9552EA2D8DB80CD668D35E3A70F4576 -D4238E8EEA2F046EF8BC16C7785D1607E04A62100A5AFF084F37B544AFC2004C -0BC4AE1356D2B0EC8700AB99117F620401AEDDDFA69D53F0F4E5314303A9C779 -D85053ADE7DEA169C445735EBAC333F65F31A077498B479248885315A58C9DAE -7AD6ABA3F9562E1A36EA3EA3274E191D557F04A6CB9FA3B240660C95B31FD1EC -ACE3874E2F240022DE09CA2256274ED580EE94FBAA5793BD5F9D37682BE7C541 -ACC5EE4D95FB35149493D2CCA9BEA729ABD0DCEC9C95E902EA9DD124CA919CBA -F3364C7699DDBE268B46D54393CC359D98EA67700B83CEF348489F1F90A16D> |- -/Nsmall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|- -/Tsmall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|- -/Esmall <1C60D8A8C9B7FBE1B006E95A68A3EFE857D335EDE0BE9AEA4BE7F95 -2FA0109C6CB803A7F2B985E7BDE818880C9FD186C7136A63CCA57CEDB6AF2828 -DE38E8685BB8771E2988A810F73E0345E8908310C31FD0F7C222F54500389519 -240356E338A96366351A20F484B5651422D1A0FDAE927D548045766A19F6150D -CC390EA0D98D6C0EC5E1C97E0B4512533CA015299550D65A6EA9A741DBD81A7F -575EC26534A2210CD8BC3335B163A776277B6F29843653C092C384FA226EA0E5 -F40EBE1799B10828B444468B3DA053A6ABB46879088C5CDBC46D899C794B325A -A3C97D044BB760BC39839995FB64819C682832A40321F78B99C09513B805CEC3 -996F9F6C14C0DA278CFDCC8EE83409A0C9BCAE8289E42BA209582E05976E48A0 -66222F364CA72855AA1A8DD971B9E012D88EC883F11B6B8DD1F7A3A1A193533F -B42207516FD3B0F5443A7865F511A1795EBD587D37DBDF03F04386AD8496835A -76A8A2EA2B1821C0A26A3284A32DDD223178AF712B0015CA9C866D881702FB56 -88AFCD83EBB5B8B70C983ADB28C933F563180B2F5D693852DE904FE07D55275B -BF14C6F4184BD1B4A9AECA29C644CB5A0BE9622ABA21F24CFE079641418F3570 -3415A4A73F296C050FA68AD25A13C7E948BFB4A1F5816B4ED0207AE7F70F6A21 -CEF402873ACC39E699949E03BE7A042549D2AB51127EAC04572696553A61D3AD -7A50684611A83B8CC45B07DFB59CE66FF4633DDD79F> |- -/Rsmall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|- -/Ysmall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|- -/Ssmall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|- -/Msmall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|- -/Osmall <1C60D8A8C9B6AE36D8AFC06EF7691CEA7388408CB5711A90AA9C8BB -7DF107C83E9F4C9D93C2707EED4FFD917928C910BF7966EA41381731C2EDBAD2 -707004603AE29A600E85B2D80CC1F8253013508BECCA2FDAB8779E3B7D43916A -0E2CE1B80BB3DF3> |- -/Ismall <1C60D8A8C9B704CCC403F91AADD9CB2F76DB90BC6EC90EF3D45C6A9 -10C33779B027A5893F399469312EDD288FF0EA2B3848F5A530D7C0162C275993 -6728784ECB91933A5B31FC0120544923268E389858466EE39EB2181D57CD3BF7 -07FB3669BB94B89A418CD729CFF5FBF8DC7045D58C25F7CB07F19116123D927E -59434BBF93B4FE5DBF40C126B117E6B60590BBF45DA98B6DE8B19144213326F9 -87495E510476E3585AE1A21D73828E47A902A177877DAAAB4C0EE1255BEF7F14 -75F7B919B37EA781F4D15EE851B6A63CFE7192BA2E00BB3BF61621837B8C6E3E -7AB8CE9EC58E9FFE71C29175C76E5> |- -/Usmall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|- -/.notdef <1C60D8A8C9B7A73DC56ED86593A26411A239A9F576A4BB06AD4079 -CBD73625AFEDCD129CE8B573E3C4C05A38ADB9D43C2E751D7FE69FF5F6F4BCAD -D50244964753D5C819FE275F32A27920BE3EA3D1AFD957ADA922B28CD2CD8E15 -58DDDC89C143A1> |- -end put -end -dup /FontName get exch definefont pop -end -%ADOEndSubsetFont -/FDJFDP+TrajanPro-Bold /TrajanPro-Bold findfont def -/FDJFDP+TrajanPro-Bold*1 -[ -67{/.notdef}repeat /C 5{/.notdef}repeat /I 9{/.notdef}repeat /S 43{/.notdef}repeat /Nsmall -/Tsmall /Esmall /Rsmall /Ysmall /Ssmall /Msmall /Osmall /Ismall -/Usmall 119{/.notdef}repeat -] FDJFDP+TrajanPro-Bold nfnt -FDJFDP+TrajanPro-Bold*1 [32 0 -0 -32 0 0 ]mfnt sfnt -63.709 49.9312 mov -(I) sh -FDJFDP+TrajanPro-Bold*1 [26 0 -0 -26 0 0 ]mfnt sfnt -78.333 49.9312 mov -0.080658 0 128 0.288605 0 (\177\200\201) awsh -131.874 49.9312 mov --1.83563 0 127 1.73947 0 (\202\177\201) awsh -188.218 49.9312 mov -(\200) sh -FDJFDP+TrajanPro-Bold*1 [32 0 -0 -32 0 0 ]mfnt sfnt -63.709 85.9316 mov -(S) sh -FDJFDP+TrajanPro-Bold*1 [26 0 -0 -26 0 0 ]mfnt sfnt -81.7983 85.9316 mov -0.213654 0 132 -0.177307 0 (\203\204\200) awsh -127.864 85.9316 mov --0.0141907 0 133 0.276245 0 (\201\205\204) awsh -FDJFDP+TrajanPro-Bold*1 [32 0 -0 -32 0 0 ]mfnt sfnt -63.709 121.932 mov -(C) sh -FDJFDP+TrajanPro-Bold*1 [26 0 -0 -26 0 0 ]mfnt sfnt -88.9883 121.932 mov -(\206) sh -109.841 121.932 mov -(\177) sh -130.882 121.932 mov -(\204) sh -144.271 121.932 mov -(\206) sh -165.124 121.932 mov -(\202) sh -182.77 121.932 mov -(\200) sh -199.487 121.932 mov -(\207) sh -210.59 121.932 mov -(\210) sh -230.869 121.932 mov -(\205) sh -%ADOBeginClientInjection: EndPageContent "AI11EPS" -userdict /annotatepage 2 copy known {get exec}{pop pop} ifelse - -%ADOEndClientInjection: EndPageContent "AI11EPS" -% page clip -grestore -grestore % PSGState -/FDJFDP+TrajanPro-Bold*1 ufnt -Adobe_AGM_Core/AGMCORE_save get restore -%%PageTrailer -[/EMC AI11_PDFMark5 -[/NamespacePop AI11_PDFMark5 -Adobe_AGM_Image/page_trailer get exec -Adobe_CoolType_Core/page_trailer get exec -Adobe_AGM_Core/page_trailer get exec -currentdict Adobe_AGM_Utils eq {end} if -%%Trailer -Adobe_AGM_Image/doc_trailer get exec -Adobe_CoolType_Core/doc_trailer get exec -Adobe_AGM_Core/doc_trailer get exec -%%EOF -%AI9_PrintingDataEnd - -userdict /AI9_read_buffer 256 string put -userdict begin -/ai9_skip_data -{ - mark - { - currentfile AI9_read_buffer { readline } stopped - { - } - { - not - { - exit - } if - (%AI9_PrivateDataEnd) eq - { - exit - } if - } ifelse - } loop - cleartomark -} def -end -userdict /ai9_skip_data get exec -%AI9_PrivateDataBegin -%!PS-Adobe-3.0 EPSF-3.0 -%%Creator: Adobe Illustrator(R) 11.0 -%%AI8_CreatorVersion: 11.0.0 -%%For: (Douglas E. Appelt) (Mad Doug Software) -%%Title: (Alternate-ISC-logo-v2.eps) -%%CreationDate: 10/22/04 2:51 PM -%AI9_DataStream -%Gb"-6CMtIYE[^blnitWj!HrIdV0lorEFGN3p=d2AK:U\*q_!hY[_$iT*gP5UX1]SSqSRQ?_'$)V>TY%qP`SMZ@PZ&5]GQS5IeD7R -%m`Y!Qle<L>GQ7K.<ATW8Y&.3ff<4tLWP85on#ub1r+t\(\B,1VnRC\d?aFN#k'iiu,P=Jej)_iEpKp\9gP9_8n(o-NJ)9&<gtdJZ -%c"d.Iea;XG=$QIuY#bRC]XbTMbA)*>p&6?3aPlR\_,pU'rp&CDDZ00VZam^DTYCI"bGS,pf>eC0p"$ku^->l[*"R8fVlPU'FAYD. -%pH<]YO.ZB_I5g)6.fSi&qjT5\No0V,*'aApjM1[&?VKA;s5+k>*rNhPC\4:.?Tp^0SRbF/qI]^'n%Sf"Iau[8YhK*1=8[PW@95Bj -%feh2g<p8L3A_Z,@b<N!cr+8s4l3l4F)ZS3.jk%=mrI?bp\bL4Cb1F/eHN2#M)10h-\l(\1c#S;^"2j?\A#s>C0m5p>Dk5X:Z"Oie -%_>('6rT`ihmf%TV6aJF?pEP/0^\r2;05#YbIeS'\a5_%#</7$:3`Y.podN#Y[0)AgpUKKQL2Ok'].nKiG?6^6&XYr6NSe+CnDck= -%d?+"\lhda;+2Wq^BXjUsa1jXk?iT6ap8=BiCnj_^n;[HORXgF0o\5ig-[E'j?N,`?LX9Z("VI(0Lot+`kmtfVY!5/+?ThZOh>Z`D -%M#tCQSj(t84WKTq]6a,<n([nmj8WB5P83V<H.@$R:$^2BE;aO?4\HWk:*fbtIp=)qnf&+kpXckbGFs@1$N0&_4jiKiro)Vts74)f -%2XP7"/X?=obK]SVO13_+fi[>!Z/=Ac38STd5'sfM!j\oF_"j]3hd,(<E.%/VlgEmCN:f-1\`U)Es5in@lK@1jd58MolVGRUn*^/k -%p9n\jC8eaE[rSTh\+/\1&lSEE_>Bg28!D:rMsrhk/^7$3khgXInb)kR&(e;*iD*,)s5!YHLWE;hFu@_jloh"cpiZ.#*V<iiGW=Q# -%LSsUUqshkocaR!-*[$G42:&XBs2p=ngY:Q7_j)mW8(XpCrqN+dc-Hp9ct`U0FmsSpiNI=lGIs-gY(P''K5\@3^?muXp2GP[l)AZU -%>2om4is<'4&Sd<ci?2tu#BcPh3mRc@e':62kF`Ug#CiGuFpk^d>Bk2#Kl=D(W,jr6[thj\_UF8BI"+-&1Xoq"0D1+W8Dh:JnpT+i -%?bp*J"_3/!:^b8g,Gjj:7.;#X^kgo%N*@Djcbc(-0AOC"i%MH*E2&Y,7.;#4%A-H(@tJn;2!Os8$cW@"U!DTsAMQKsF+Q,4Oe;i, -%kt)dRoq)"TIA=8=cXi-4#5pe=(a&[0Q=pJ:eFXd+(jnY%(n]#+6%tnan\JSBK@/*E_dD[hPe^Y)"lk6M1lI#5"BTn6]MWVJH7nt; -%F%6*QW'`.gS%s_I:;)FS;nqP0e?[:7eW:lO"/?ORK[IWb1huk&`Wq!e(?%32O'k<#_I'5DUT;*AbSJnUaO(q4]*3rn<s79NkCb:; -%$UPXbVZ_5/*C67Q95oNTbDaNpW:*PUhG13%oCP3E:sXtR$(GYS#r^;M!IkB),IPuVeQ5)>Og5*b&bcUD"n*]8_:'!OK[Sm3$^B[6 -%5`Z&2n8s><oMt`<n"k3lael'-#<mtp2Z2%4oM,7ZT>%6#pdm^#=2R9LnWSF!M=0COrQI(Rca192k+D=8^58KSZe<]Rr1otMX5/e. -%i[=]kpN.KAl),"U`6Vl[i%N>*h9-geqXLul[N?!kAp]o#p95J:So\,F?=@Y?r9HTE9mTU-eQ5>%g-7NM(++>09[hd@j04R<oEk-3 -%-+gb_TBi9Xe(0#T?,LT-W5j3fcZ0Q2*hUt'rVB#`%hO6g5O3SXf2KA`7qdIri+`$@rEW41%lg\<s*"Dnr_E.MQ-(+04mgrjg*?AU -%A:9!kHj`mNoJ>P-UK1TF%c8k1lR(l6i1KQ.D>/ZiP77uF=:=.,l*oJ5h?SSg[%2rnj-9S%rs]G0#5Y%NI9>jRd)*Dm_=p:p6Ha4( -%%s]7ECC]5b_C2&frY,1V!dlA`)%DM2%tN!shJ!Ad=ANrJE#?0-pjfm:H\(YXcc>jYILn%7LGPCXK7=doF?NF3Tq-Amq6356p8p]/ -%6aLY9>CE'2qW-gq0ue!MF2[/GR<gh4r$VJ.CnuOdT@cBS6UD;RUk@LYQY$S.Rs)N"S[@N^<@]lf+m.A)=s,dKjrC8s[,ZTqlJ$Q> -%ID^&7gH`q9k)StGE/[64elI6>-HA)u?IH9bK3#J6Y3dN$<6>cP#CnF3fQ7'/b18A51>EE4/c=%\dK7XPDtQBgl"Sm!\%$3Y`+g>^ -%phb4CTn#q_5Gi]fcCeRTY4"5qE(gL_B,hStRio_GnkVgFj:;#QGL.SM!pD(QA:T_K#IUb-.^[@YnKl!DO]%%E@$]M0nJRC?TJaO/ -%[/OG4$eMo?o)eM8UH$VVn0^Oaf&iE!L-:Ue^bO'_&jB#SoZSTJ1gB+)*ZLLtcG87`T*)j!Fq4E8\oG`8B]7Fc")p\s#s\DC1H6&Z -%^V)m<pRSgHbQ.8oc3V[ZH>8VOV"`D@n-.9Ri:D?2".%s#oN+DNk$.ZdGU'mT6QL,4qBY+@H[MF!OkpI7,gZ#I6AsAq1^9,N+OLJ_ -%0Uc_EnIin#3eBHQ$c%8\>ec#;QRRJ25F&?&^'+35b_\N[GM$P^0gZ\=Xp$HD=ZE^Y$$\,Fqge4XF^7(gSot56ST)P"8AU6<-)7,Q -%UpuHR/l2P/J=dI!&;Q><JFf>Z5h'uT%#cI\]flh6U9K+%qklsH<82S$i^Hu'LXNQmOTH#g)t?H/7.Z$'dRL#8OCRF`K,oY:V.i/9 -%6)H_q\\OhK#AX<J#(!"L_A\h\_$Iht_&o$lkoK:[J2Uh*e2orH-12:iWjJPUNmA$PJl_8dC_*=U_XlN7E$>7.#W%%<d;S#\OOU"J -%n_GIe2X*0mItVA3*C%6<>uFnAA(PN@jK0cnHeo(4+86'6O_)EI+eS)ToS`:0W?-MjmcVDF>)bc3-+I\o]2!?0a6sf"DnFd0hfJ5) -%\rN<<b%g\d\Ec?:]9OH#*/jqY<sf')oNIAbi(,VmE"-s&\HEd`e#ur;-HCc+O/L?AWoJX=+t8Qi\JqCc>5l"eD!!=b>g:hX64>lD -%i`;cm+I."DJKlOj`I80gcMO&DUHLk:Uti3!YmPSWJ0`AeoMEF;oMh?aKV!aA7%S/TP\ARfcOZbDd4]kh[C4_BbZ!$4@E+trFtD[Y -%JjO)n0TcLpVOTL6d`BmG(5\YKJ(H7+f#5moL'QgDl\XCe\.c9Y7emMN[R1WS&E\YX*rEF$ILt,.D8b;<mf7\QK1OZDH/LojECJ]8 -%@4+0%E`(?d>n1#3d.J)-X@/Vp+ZtJ<>D"11Z@q@ATG6L%WhJZTRLR+L/Zi,iT\cg0.(BXI7/.<q!,4$e\Nu<EF3n4q#"0J0CHYl# -%K7k$l`A-m6T]B0X!U.Vs>T$`VXDO5J0!,;0gilp_l^?ft$cOeN8]rFHV4KH5c.$C>L'c39Qq9D?s5N.7<b:f"96Sm4Uh-BT!bQ*_ -%)6Jd=AAVcj9?(SD2%"It0+Ba8Au!%A+M(pAg57on`;5,MCJ;&i^[d%`7u7'i:'%*sl]RYmg:/W;<,Z?Wa4ZcS6-aCIfKs?R(W82- -%+c1W,jA4:hKL<^sUF*@>UUD!7#`V>hS`R7pP.&nB&VgH0O'61pfquQW9(N(dBXOB*5Nth7HqL%'4duc(9>$L^\o$7a=ck_HMh$i# -%U_*o&d28')d7gtLiXT!2b3)f(:Ab9oS^Y\CrcHUQjV/<9iG$odb.+72JK5HUV@"4Oeu45M\0cX&'5ItAGNeXIXkBQX2E9VG?LM53 -%CKeCbhf\7%kSMSsi+KF>#h5[;'N2HH[]=0C-EtO,g$UPR"maTmgp,MlBbrA4f^kY9;[:sA&NeecGlt/b"Q*&E7Z7Idl#mijK9L`g -%M[&hpCi6ju>86t'XOXQ4>L@2Mge2HoM:Qa0HfjEu*>RsKA^(RRNqTd2E`(FL#Rgqs3'Y"qfU3"_iutR%qi/B(m>?\$dOp0Rg=9ue -%1l7Q7BphR9il8ne78KT,**L+Plk=.OQ)n-gb-a"AQ8"Y^VGkjii-D6&3l"rNc+5U@F732Dc=;s!*\q3aT!J>rQ3O1h"^NO:8gGY) -%:snJ:C;h5G3n>@M^BLRTdVSQ[2EAj;efM-EmQ_a%<prkZBE`?BBc4#:UK55eIM<e:@%LN_%eQl2)tkRSYfJ#ocE1`mMC;)&77XWL -%0[n02,iX+c8r[(E<iDK>g;"`1_J$=kpM+*KnI7)=&]%"8ViA:^+gp6j'fs3%H4VrOXW9fech-gF2?f+09bSrjX;81`e2)5b>9sNr -%Sj\lFfNjA\DD.;``k4=5K&ZX*Cun;HO#WaeO(*0e(gW`VPUjmI$^thg\cYj0T;!oOpSlAl)4nO=LN:;O4['aCP"O-AV>@Q0$`*dc -%n^,a"[3bTF[$M"kk\9_r;ao:Flh`A6P(k/\BA*_pqk9aLN4<(!,Lu*`ZE6PV&hZ[p7s%0J?-E.\)e)pS-epH/\=ti)io;3GAS*e9 -%?n%PAXKAnm/>LfI\tR#eh?/1hlk`mP+ma!'#U?N!`H`4nF,Y9EdX&m`,@t$_OOOi42m2)37!>F5C/LT52P*U_:0/>&4@k+Cc:K]M -%&/;@6ABkLn]ja:]&ab)FMtV-]ng8FliDD\;5slM]i2Apple@,k#IY>CV4reK?3L8]Db,J]lU[.'TemP=,K72KG!OdQ-<VSiXf#ri -%j*#F%*-UGqPHdQ.#0K%L2Iflj7k6Fp-G&;FpS$Kg4mWGMbTV>o/QsJFs.$Jb'Q0XfDq'AX5Ds'oGR3d,LaU%1F78@74ZEh)W3pqF -%F]%_<J8+<)]IGmC*sg7d`SY*[qTPc-RR?_+YW`UB98(bB4[FMUmealX5O'gdT>t66M/\_\F#Yef+'r0JfDs>b>N>8L>oW4@]\cZV -%U,PR.JR9'*ej4tgqL7/9ITO0H+;@XbU/:n2c#&GbY!;)/;VoThfae;,?)JuAT>%eH4_ps&m;G4>HRJd$]fUe7m:UG:r9""Hk3`KN -%0)UdfI!^89nu;Iae[`kQs)RjQr-Wqi_p*2_`lfIlYQ!Pf/u4j"&(ejKs39`MotCD%Er5k2iVM^!l>hCIrl`4Lo(N[H2]n'H?V@fl -%nrMad/#mWDX^,8H^V53tjn/**pn*mSYmrpHKoNj6`fKn*Fa9cQO6Y,&Gk@Gn^SX'DWm5acF,S:EQZlF'Np>K#\p'k9*HgHO<W,6a -%^Vm/&jd/g<_po8^*:GOFp^S@+Qg[)M00_Z@mr)SJT9&HWZhX+;?Z'bA&!rokmK!B]I_>;KS??`or;"?"koTf*I;9oWhqrkYq&]IT -%0-BVc4rd@"pHMq]+2[=rDXSW1*'[c4pQo6:^:F+<@hjkbh0f$G]"\+U/'6u#a4ned(L(-Up#P`4rkldODsI2m#lgO"5/7,<"#j-: -%b*V_Ss8C.21CWilh-Y%QO8o%Tk3@X"HL/4lIs'cn#Z#l]\au#SGN4H3I]AI,]8)m9a+nn0O>u+P>^q?fJ,XQ_rckuNa]L@)n]1Y" -%%WLM&KC@7MnUr!?a<&:PW8(4=GSeQ&nAFpK>Q]Q\TEU__9DIu9r>!T@rlb6\p(Sr%oGd8'\a&bG[3%)tLO\pW-i]dM%tGc^f9+AX -%I.d:P3f#`/lGJ[,?TrfNW@ld07JH*I2.=KgFDamIq(7m3<hnu!6`&[<V6?lHf;^tOpX`C)O&Y/#\sYe2=!(hI5(C;\<):t2S?C`+ -%"2<Y7WS5mL,R>T.U?Ln5a"Ond>hslih->ARn8ro!Hi3.!rKVl8qJMANo#!\>s4uikVrM\r^\;)5bQ+rJrU'JD#Vu8$lMEE6a%#k% -%l-`P@2"esZs1A<')Ya/+RU3*\h#7'Dh9V^ReXr;8@Cfc&;g7KbF8Ybc=#U]IFEr<3dF6.Rc\guf-<S)?c/TP_1>GjRg]6kiid\JP -%](p=Dn`-Gfg^3!k/jJ1LIJEBiZ\E8QiWCkphu)gn^HNZf\6;ml)_O9$!('jHDS!LWj<+.mmY.,`GK62.X&[pHN4khJrp+h+_f=6# -%2,q<[q#(*"5G.q&GOtbZI<#l%%=KA/Idc7nNLqI%4/dW.$,2hBs5rI%s6B(@n%O2GmHqs+l;n7ZeMe%PE.@cXXoIS)e`QkSk9!d_ -%h;-obHBhOhYG`32o):r,55PgsGId\)d#6W7??q9W>kn/DWVOF*iB9i[SpfSVk3Dp_gVDS5H1o?uh]jOB]hH0JN>J0GrrtlJld)K] -%YUYM05DBc!U2E*fr>_9"gXrcTfDd"Jk8W.r5Mk4geC7slrq8R:2g:l.(dj/COfNuC])T.e/G.5Ol3@ibDnfOA*90HESN]?dip,8? -%Y<G6l<g+rM1C$VrJ+GU3#cF(kRp5RahZ<7n%euODYBIt4Su]'ohM]2L]"@o`AICUpqM.6"WrBc5?h^%=g[FueIi.IEnI*'Kk_ER` -%LM?6-Y?1EV_fjZAqr'6[@l(Q'2tl8cNh]tNN,Dm]RrLOX`r1/OCS@Wr9>YT3EVF+7k/g?`BesV(S_%*WF$2I2.FQK>4NuhJc1C;7 -%@_M<tPhj!E&$C'bGgO"XNG`dpbIF_1`bhckoj(jIl[D!ua#33S4)d_tDqDVoIXTkuRqC,e\kTpW2WJE'bT"#oD`4*PB"-H3%bl<a -%Ctig9mC0uVgeP)Po.(Q[V/:E\^T?2?]4T[_\m<&iG2mJobr`C=ml%d0Gd6]Iqg./dgO6R"pVVIP3r$@3qt5EEhsP^crVgc7&'^fM -%%c*iQ?#=t%_3a%dD;G#gY<?Q=!A`2Hm71<_rO&VQ^\j812sqcCl:ob(X)!$2%:1<=c/`%(gpgs%2=&6mZIq.MVp2r,pXN*PD;3?C -%4YHcVbC+8:RrdD3OL0JhmB58tcR\X`CS5_"Fa_g5h#O!OIJ*R$hY.jn#QD/N%0sW@I-p^_ijI`\c'RI+jpQU(/,s8C97D3"3kee3 -%)STstq?()O^34Tu*`(bKn?muY0a"[L?ZU7a5O7Ca,hJ?bMZ;?Uf06_TqHDLmeKgKRM$j7Oe]EMNBB0d!,Qnhrogn@f<3VVV<%sSV -%<NqbXeRNEL.#UV8d$>5E:fiaFd$G?3;:m*.i39sY[JL>4LGZfa`a;q`'C'&YEPa)nh&^48_7>3og>_b7IdX+_oMaW@?/Kt0Y.I'1 -%pO1qB)\2r#c/$l8aDUH$ZE660ep`arpB\D(W4N8;/e$_V4F22md36I"i/rNP!OhNkFe1K<O1'\=Qd4%]`6fQ>E$X:dl<78\cmSt3 -%GK_;HJ%Dd?aqonV6mA2J&8?bbg*)Rg8>Hn3WN1!TJOm7@UjFB8)Mtgi,$cPE*KoY1,uYpa:So1&UPG(HS/jS5Y<DM9*eo1Kq[OsS -%#*.YHL[+@bGc6ZEp7B\.=]dJDhZ=5f-6/E)'=T?<:E6!O^-epW+Kb*orX['d)Ou#)>0@HrRACLkFpt4%g"=(kbV<4C%$H@]JY8qQ -%&o34'0rftq'FoQ.@BXstHQI'_6QLE=:<Tp-/HhK-A(<(4g#,>Qg5JQ+gtY-Hikt81cTH9eAgS#(EnD?g\A:Y.=_JYT"#aLfY/.0X -%pN625*ng%=Qa"<IoHJo$DAIMaT:\aG-fV618m@Cd'?])J=XFB+U%ANa]0dJ&V(g'N)J(Woj0mYaSg(KfJMEm<SnM*EERuV92^k[l -%=G+,<b;5WDCOg8TDlFk=1n%5i@pgc[R8,8pVad1G8rWm0V,bC[PZg5Q<_TZLY['T!;kR2Y?D1Ifi<>[P(nVJI-+l^I-.E^A,m7;6 -%)qeF)g>,ndS+,/[ESKau]3X@'ou5kdU,nR`WLd*QYBFONh!3Sco36nT(06C<=O"+>j^atM9_2LjJMh3`MC1M?B[NVdcLn:)H1s+% -%l)BH[s+QL8+.X!,U,_jmcGoGikP<rpFeHRGIck.sGjIJ9T!7f+@cR9<o=ST(S7M,:V=X<-GhbB*#.4!gB]E6Zo8IGTChot3"a,8, -%)ipEmcgGtJokcf!F.OsYSja-\auVc7NCVcVkH$bkB/cF,3R<7(c]8=WSNBXCNCRcC6)u+B_tW'aED.2jf_`LmIZUthQM,dS><hnj -%#K#hY0m]Mb*]Pb8eYl.0:j659`Mn/&bpa9Goer7;,ipMPA\<9)ro?XtK^9ro;QsOmR!OA^&OX8&eY1F#eQ:Y#YI+,l>A57m`7S!( -%$i"<R/fG9#fYh5.I(k4a'a%F'0W3,[FU$BOjXSUYk>C3Hqt@m&i><UgInS*rk*5Wej<<d.7Qn=Z6/F*Qc#hpdHqN70^Vd>%aZ"3i -%VVKeZm"/5'N!!X<_=+NkI(9#up$GO>s16W;^9p`&"L8U298N5/bVbm5/=UV;iNGlQfl*$hCTa5=m*@u#MEVMmE])uoc./5_O&s<d -%+FT73R`mXY.p40!\;nE6q>\VUF."[_05&L?rO.$PJh+8J<%pVG4J5=">)Q,J>*FrRfMp7/_qZ[HPG^sqk6T;sjV(RaQg3ZG;kB?@ -%jV(RaQg3ZG;`:IPes8dOckpjhdJr@%"hL?7ME\NV>+oVa]:^8*<<_Bc_\M`WKW>J^cW@><TdD5B,VC!+WLSTU.I-"U.%-fCDM,O2 -%$VDcsT$2bu0Wfp:g&t-W%Jm$eUj^T`76;NBN]Mko$*HrOe5o(O'tn`'[+B0A@7?75M`)M2g,eH*ri0)6'c!'o<V>kBX+/8l4fqnt -%]#Uu=nLE[9cX544'ae#`m]+Q^]m)..<*@&pVCJ%(CWNb>A$3A8+DC^iYm)Ws%TK>aI\YGnd[0`.4cb\NY&6<tJ*P%5;F<TqY0qA* -%R,9"cZ?g`-qWQIrn?6aX-nh1$mSI+J0SaM,IQHVt^hJYWc=fCJ1WS=G2s6e.DRA5A<A<3eb_3CG7[n2?<!1nWkpPt\P^fK6`:=Pa -%;&!B:EqU-69QC;CUQ*PPjPoui8@>fLJf<0)L1I_:P7@>\Z.,hpPQ0*RETcDbQGpA&J(mE^heM0Amsm8am3Yrh^iD-UcUH<+E=MG_ -%9dC[]jT?Xb3_'ifktCp'7Fr5%I&Xu(M!UW.j+j[j]DL.XkG'E3jOUfm$aBk)PVTHW+]B_hH$h)2]OE#[J^tF7VN>O#>%=d_K1D[d -%-kE9YOXLfNDGj,aF?o,h8e_Z8>%mTG.N)F;8CS)H34-i%eW-/BS7<P_/h3WU'UV@X>o<5[W$mq]<5bM2S*AK;X<ogKANG$][^Iqi -%H=kU9coPG>mZJVMKDfgK+OiYLFg_u6)A6fC<RB)jh2M"^V37\?=K70+-*.H0UQdF=0_VehMKVIp1m4t<m#@#a(,rljKNEkn8$Y;G -%__S\2#3[D4RU%U9pU!_S#&2d^RWpX11W'QZdq#$S^:61Ab^9oX<h-dJ_YWUZgj;s_CQ8%@eT2I+C!Tq[SQS6[KpCAUf4qt-Ot>20 -%bPC<lHC"5homX]U59.=$hg*&PnH.Qm5sKXG5Bt$%H)tlnp&<kaJt5sO2Z=l_+.dj)K@_)(heKL$G6e/>SU]P:^Xql8b'.=eS`tR# -%>2Ql:Hgi'3^"bYRQ-I3"[glJNoC0r*_c>APr,V+B[CFQS6L/T%c,4iL4kW)gPMMF>@;Gbf]s:7IDl9(9D:gBYQnQ]m[ql_$bNp9o -%>:&%Z7.g:E2j1plFYaEhO9:Z>ib^iT1^@1G+4%7,<A1WJBYK&8b\XLZ]r\?%YA3<[QX6r5(]KN7dd)dRKIY'AU'Zs9<0^"RdMel+ -%Vb696iq?R_cUsS%E%UVJ)N`kKLsi*#YeQOqoSPh=dCW'L\o=2[S@SJGG]H4`Y3<JD?<bfcCQ3_b+n(k^E(RGSOGeBJ<Zs/#A7ol3 -%aOC^$\*T3eD-=8L,Em2MqFnur7TPOqjEY.<6N%4&JdadIA:]).]sbuh2lrNX!\%Z;PVmVPIR\W\LFgmR<2]lLa=@eB0DDCtP4H+K -%cFIQ[E^gO"Z2Qa+-gd%cG,S"'\tR,\[f\.i463SLepl;mB,td/'PE0l`R_G1^LI'O/aZ+67O]a+0^b,o;(0:8MSghR=X7$?.Rprs -%Otk,!-llmn1^_;P,/YI:P`nsBZE.$R1<N7PQr.IM4k2%'bpYTIlkJ\%j_'gN,"$ts,ro-4>SAZX(qW2)MEHk229Jm\W_oo?WZYJ6 -%\46!,"Dl_@NA<Eg;i!qtm)+,rr@F6!EK-uEM[am4;,qP>iN>&<l7FpL[7400`J2"UW2d>ZE)62^4l7S9J3g?cZ&<:(_VpN9E:j9. -%Y7sX%;jJIeF+pC@JT<S3&$EC[bq$cYLWIaU0<Z$q^<F]eO&pnbLli&]D_`rZ9t9sB&$I/b:H5lRn(f5d46,04Ec9pmLQ$G\'Ab=2 -%HUp,?b."-7EJ7H,G0l6L<.L8uhh`*Wm]K'P$9CYrlPi"?o\)=Zr#W%6^(V"41StZ-XLW<BdC8*X0t#/ZimFd?`J-E9Kb;7Tk?&]' -%E-6U+B/hUmr9'Oe`Q%Zgb=p.oX1)2CC7\P@`A1B``9Jq?R@5N&?g,4`c@d5kmIRb1T6+)U1AN7up%g#$)P#[HWnsbLEeEuLY:;%n -%qun241b*_j'sHPC<#K&=g`,JaX'NCkXU8ji_t%AdQO818<T_Y-Eb[Yui+-)`.dcc%Y2RT9SY-U>W%.Cq>4RYVp63@qdO.)h51P@b -%HC\tSDVD'rk?F4@L9&r%<oq>ll?0g@\Oj;W?8u2(o9V!]mM4>PfYj9NSc9A)pA^(nH&W)(RIa(RLtdjr0/2Qj?FI[k,2u0qp$>2o -%8M#?kO&^Gm71EE2h'ZRJR(Ki@r^So'bJ),8iP56cT@P,&P[:VB.]o;B[u'("X/G6"@Q<B4WHt$NNjsD8hBmt%Y+DZF`GhU]q6f0M -%<n"'TlUbYFXm3=Q797m;Sen:"\>E9>:#^`&BiQf^4L!n.qj=1/<)7dE5C-!l;k@'UEQ$#UYtEVkq5T<i>PY[Vj9dE<C2qAgQr!.e -%:K;?l0429R6:UlPEW2hMaX\('k:E'[f/[.,PoI[)K86&4@Jmcl]Y4dfI]e1s)gfrp=4%NOVM;LnRN:aSlsYr.cCVdu,fciBZ;-=( -%<P=Z?>1BV<XfU!G?<(oTSJLmuH7S<gW)qMR=f94u?.$O`_DU/6#%#djkXl%pfm,#8?_"<SHSfUY#?=438^'5Sj'40NVoEZbs2#ga -%2$>#n;7CVL(:D&L8Q1['m%Q.[YM2'=Mh4?9YhW63T[[X4JBl]>G+&V$37bF8Tpn&@krCh(h]?]#6W1Q]*'aA49($)^.tjGV?.^0m -%F`^NKPE"2(kuom/bB@Z?SZ17[-Mkr.N:t)++`+<!Pj?2fS7?(o'i^1(8phId)`;N-MC1d`AWWJ34VLD/BL#Ip_KKYK.W(PfA</S8 -%OG\77m#C_]_a4"1cURIX)nqqQm!bs[HblF^4_Dis$).dY-GM#=ONF\3nLErM`#mDSbI]"Bb255Pb@j6*2D:Aoa\5BNAjVf]i,"eR -%3A<*R[0T:n_0C)JFh.^X?6;b0/jZPi7oH6Xd-CGKn'6Z6"oVM87BoE]fNt4,iX@".5\IB#8TCadH#[q<S2n+UC1go8mRmsYE5n&Z -%MJe^jUqB#;E.oA_bH[Qd,nA,WR%/tsQ^:t'[oU8Z]_mRkpatOnGMn2L7U(",_De#lkS\*0QEit[-G`oqi!F<W0e+:(2T[$t<K]P% -%11%[tY"Ku5$L.Ku10k6l=$l<#ZWoW?G4F>sQ)@h=Cp]Xj="?eBjZ*Y\HWRV:SA:M^(31$5>7Q=5Pm"?<./]OYe&(e8Y^-)VlYZT" -%A-;Z;%H/#.pP+Fl@BSJ<&3e^r>8k@-qe,7shD<oq]Q]d,PkQm#A)>DAT:r.tlUr*#/auT[7<:XRJr=`N3T[i9jek+/%6W0OBim6? -%)=)f)kB'dmYJH?R-SO(7j?!"P<-bekY=],2-j'Q!JoGQ/.rEMUO9M=B?Bpi;/`t_)LW6LM<U\45@KXHn"WPBKkHV(pYWl(N=UY+^ -%j7-`hrV6X2F2Q]q/V$l;=l6u2VBnh`nV3Htesi\,dDoaf#SLM8,Y.j3=p:t)3q>Mc.TiNZ6/?b4Mp:NgIUp-lh+=?]"_k(P>$sjr -%ahC)/CkpEj%@^i<fER^RaXBeo=Ye3aBi^2!EVDQIB.IJdIEY7:D`U%q[mc#D[X-,m>JT[,QYMS-P])nQK-Y,QFt)n^,-=J<GWgWp -%>GTMe^MX_6cq%EkJ>)]X`\\73jKVQ\_3"Z+UUP^6gZ>(QLfZ7iN!X]S)J<759pRkX/%'4K/]FSAQa3<!_Q/>oi<3+B"6gdr1_)t6 -%eBGUl/AR)O\6=^$=bs]KYa\PK%>We>@N=Oo)i:EHF%-F1&AaJgRuiunKkj`@7#P!S`cG4O8D"083!(AYp!ADge;RAb)R.`WW"\b+ -%et+k"`*H'#(]1Jj[%):i?peKF0)u;[UUpMS?gUaU^87nl/N#GF(K94i<'L!`MTk$\pVV]W5#p?d6)3Q#GJf+R[(_ilA)/1FQnCK] -%\lEN9>l9nP3c;"c]Pc4n8qf'.@-u?-]$FD-<jCjKC=F>DDm)pV&$$e^a=C.k;;<V"0cef4Xinb4_[:]^Fd='7$aH^adTE6h')4bX -%0SD`5jIj<T6CaWG*+:ZDJ[oj@9O[f(;s5%XnTG4GfMmP)CE6kIo^^H[((m=DS&d,DWpgNF$OaE7F,i8&AU2JiX,72i+1\t\>ns!% -%nXOASG?&:i*+*_d`T$.D=+u.*Hf'GRjI+UU4j9N9@J,?]+*2(`=(Z2p/2uTe#"J=)H\3%#dBlldV.'j:>4jd&guJ7=HHB#$k8#Z" -%o5^,;U.(QCB=57=_@fY1H$%056D=q.FJt?>c-KY6)&Zt/0Q)KbcSf#I^=M8+,D0UB4J\tt*=Y4''i%`^amhi+\0Ope9_ZVoA@6]n -%YBYt+\e0EMI'(:4k8MV(&l'(M;;cb_8IC4fIN4b8Z[4m56ZJeb=f))nIGqJW/U+2$W)RpLHeAOj0m[&2BbnCm$DH;L)@P.n\-ftE -%V9jdV_e83]j"b2$e<1>XamV*Rad]<g@9`<F4WA6,)rWOM^mLr?k]HZPjTG]IWD$m0b+)$QP:%M%,aG?F<gcGj&]@WOlRWbO-R4^P -%"Qtp[m$!YhBf^i+8OkI6Bhk'DV3G+1.1&[GJgt/4^o(hBPbHI+?d9mA"(>6D2"B.["jZNr]]c0.?VXc"mlP+BnPcK!a&nsMF>*qb -%`j=cgcDkNJ=nMp\K<"9dY]sVWaZh.E_,hr.3BP@!a*p%nOIoSh'C\G_SEQ*a<,-'.W&Z+^92Bm/;`oa;r+HIBBZ4ocoG653RcnjZ -%DRf2OlbJnI3E<7%3*5JZ:Y&sa(n4[s<]s?EX@_(+?KG\cq[;#"3krjIQ,5O9f'695p,,kl&(H3)#>4qV>*U''\K^1;OK$)_MRf+" -%9)cM'fO/aS[DLk3I#9+<$_8\hU>RbOpaS*-D'f40Z5YDh.To`-+@8p>KM`]6$,dJYX,q+'P0*./Tn%/%?p"a7@N":Eq1%Ai5M7Qj -%_O5n+g+f5qUq_0"hgQTlpqu_%eDYlQ?p@_lF8b*dIUYO9ZVJWP,F01OL<SW+dl"=;[cFm8g[0@gC5iUT2B7A'LSI[[$XO<2F`Jl[ -%?F3JE:&,,tEX+cP[H=kfb=ACPHsCEYS9Ui*2psl`_6GD2Qq]\R1U#Hd(Y1R]<f-Qdg$a(*^UWLs>!:k>Hp3@cn5C'Z?Dp<l6K5bA -%pb*ol$]4mMikLTM0-pN)M>op%^QA4D,lZCAnKd-G=TZ22U?g/Z-Tcu>IYAYGbKe75q<RARY%UUMl<lP+VGL<I2mQR"Mu%Ac9ROY\ -%D"Vs0CLJjhXOb.O;ZfL#I%.BfNh-+"bVQ`\=`qe,G.V?-)@tTg.e66+>ou6jBB#-L-n7L7l\83n,<!`Cn1h8OkF-Vdg'U@,1$=O/ -%nr;/Y4==e5&M)`--E*H^[q@0ZbA;mEL+W#[Nd8!Nl&e!6KH:]>?8Kpai%F=JE:,k#HkdJXS`\D@fV:D'q("AuZL]QPl_Ohn5/"cX -%8kRjk[A@0`g@J-**UK[5mb<V9mYAaCY-%,$GE4,'BZn!tr56mr.\,oql.9lE7J9\Yh_sfd8t.?:]oot:"Xgd:gg5nO10@=2npH]s -%(YNsd^9:OYI\dOhi@Yp[',BtV]l9#_O&;uf6o'm0P6C`YB+UC"iKP#"W&V7a`iF+uX&<9(/Cd]7d'?4GFPJXe";[5USHE+LL@XKD -%;GFi-JKD#oK>V?ecLF(dGN$,VbZ]Fr4uo0#0k?!Y/JEoU3#=G7R:e^/6JY_B&8cD[U,?-fY>7a^f1r"2P\SP6WdB0>W.bGJS(fFe -%kQ<kogITK'<GrgJ$'C*`Qr4JtBD%Q>"bCr"D\_5j'-\n=#@KGU2\Nf;#^Xl<f!+J5&#kgFWBuk`66'skLD?pte'b6sYA<OJ[ZT*W -%'pc>n!d@,1/?WrU2=A"TDRI"$V.10_At?QHb2kKu<ES6YGj%=ogW#Lq+2UIeYb#u?fVfd\h9a7`*p6fX5k7UF8+J%(RB"P5HQB0T -%MQFB^Nq%R)f_AYrITuH)ISspl^T(f5RmiiKl)I_<C!U@hHh+.6ia5Xg#G[V4!B*,2<U+,e='ei(F]L'8HKFg'8-'C]12hb9Thrt- -%,KFE)ljucYf''b&"oEl'%Q7cXW/Tt+bQ_T;&=^KQC^+t%+s?R\@k4M1<8]2548bP2'M>[@@U]1dEtlc[\;I!t'+0>C?!IPDN^HUb -%Po&HN;&48l_["I%(j5ZJU@%WA:J\'qA,\W4E@Nh2W11qma6UH7TF=8?1-k&+&1G]ahYQ*$]*_=!FB,lprpj(3o4BXqniq?cSoBCU -%C:j,EH,?u7YK@Qh-X?8RX%M@bc<Y^_'f%+U-mtAPe?,5\bEZjgE%ffQk5*l]9pLCf3^*^Qa4I."G,=E6,R1_UhWGN)].lM5:5@Y[ -%B\U?_UU*=6V1$eF.m<Q!f14rEOf)tYSNcnK:OIoq;"9\Anbc>QXkoE^%ir]q9u8c>ms5`.0[a>:*Dhkf9a"gHP3d+KUIQh.e_>hj -%&,YYZ&qSEHZ?j^\%j9)r\'4gOiiIJ%b#4_hrd*_bs#CND_,Sa@:OM7"T@@8CbWb8Bm=]#r&oA@YMI.^b`sDFeoNI:hmht\Ub2sSj -%d%_kfLq"p4nRG2U'?ocsQ:WrWI(]'pRp3PEa2X[A%t(6;L6hQOE3B:pM.i6&c_:%2W`YLl&VddO*:H8=S:b>2NB2s2+*[mK`*UWT -%3H1#\ZBs+O<H6saMENKd>Mcg@n;5S/hS=*CTf@&9rlB*VP#%pX3/pAM@JgRgo&BfO^e%T#*7hl7m:$`hiK^0_*=orp?6pb7&f.AI -%j'%HlN59KH+K%Tf-qKBEl'4e"F]pH#c<k\1o5^p.os,7&QXbHDQ_!WY*:$P:m"FQ`=J+k)a75Zm(LNI!`KR7tT>RP`Wkn^^L%4sC -%duChn1@!It2SgS[B\eR;p#@7H\Vo;hZcYK'[/(K/6OVh41@s%FASjBV\uA_7HV^_=$h9pG2oCg40A-/t'7(+:[b@dJhc"7^4lsC> -%A5n<U_/GMs32d#2Ji`qA6D*]]TiuCngVsn&6`S8/-4($DYeVVG/;QsEo'55iY*Ig'8@FC10r1G4I_P;r2A]([$Ph.c[qt*X=.H1n -%J'&h?<94m$/).mL-S!f3c;o9%%f``m%p,gVc'P1qh=s4A(!K,+1oT7#F@<jgCs]2_9.ie$JQW3_FcG[Te5\Khq!A-k'oc3H&(aQd -%16Y\a:Wq8caN76.iqZ<Z$fp=3ani$/FE#1IN^cKlZ$PKHLpP,Cj)i$'4Q:bQ;SDK\inWru^$\#BI)/^ojud+2E[jr$:<Pl#*;hkX -%I`S[aj:5186R>l[ba/j(`*9an#&^_pgSml]ajr&=]qG(jo3jD#$NB]OU[1LHB1CQ4!I@t.5EtknML.ltbcMO-V6ZUm8m'WC)j<i' -%s.'#S$`Ck,c?Ll>PT?SV/lB<u0f'-VW6R/Xjce11%o:N4RsFj=1Ol7]B(?%:?>uS8=g1j5:c`eSce/Ea98E4'oba;F[-`E#kH;ZI -%Pc)Kl<HJ-h:KY-,B1*:n)Ge0?Cc34B9&GJ0AMKV1-<t>m!Pt6:<O*8MG9]H:S?O.K2^RJ'7,4:<)\eZtWgJ47P\[:`<lu\MZDjTk -%Bqf'GW)=rjPP#5&5)VFmnpF3/e4j)7VCM+_.6/fB;X9TKp#H+(kIS=b^'j.deQ_IRJGN3Xjh;,$5Lj!+]7B`V^#cs9W'AgJc>5Lb -%5SG[WB9,&64,@'Vj^1l:?$%mllTtM.bO`JJ5p'u(UG3tR6HRP2bUVh#4*55LB\5Nmp^g5H0@!PYi21fD\1&kVcI29UI_:+hrkEnJ -%H1h.a^Ud*VIB11#g%3e.T9?=KRPcS$'.U4>5")c(NE*K!'X$<\\,\8k=)W:f!#^Kkf3!`"7cEVi<oK3=\14$nMQF?U(9CEp96=M) -%@$!E:a1=sP)8X#mD-)5V`E+u&H_j\'eGk-=^E@M&M'#73k90XG')R:LIt)\>c2I>&_tEC-J+GT+\+LQfmm"WI*I[P(e\f;prmi=m -%qYk`IqSSXA4Jmm`=&!a5:L1"bPCJ><p[S]af0d7MkF_;<+8inRjpV3pl;t`)rTR\TeH[Z*k<FJj0s.%ObS7ca$gDe=HF>LkIZ*c4 -%r<_BZ2'ib8JVqkerU/Ci:SINboKMY70E"PenrE@]53JcIn7-tip$i+X+rp:gCrFSSh.n#o3k>\p%Pr:+SM+0M4,1%a]'u0P%/6@Y -%go;AJ`hDd#':_oV\CD@dJ[2kbZ50Kch%4M&\Y8nOmsP`:Om/TWC'W#7DOTK@j4o]rEV9`-^M;`&*oIk9#9,*rl<3;_^,&M#FZ5@X -%B7_]T\;+\6B__S?J#7!7I+9[1FT^7[ICXiE\8TkQ>W,7ldocK.gr;%DmudMAe2Q_eW5F&VpR\hRGi4#j"Tg[CTa*ic"<^'UiMh89 -%5T<l11^5Lse_NjU%eh25NTUN7]f*s8_>+2Jd`M5Kk1AL7cJq2-%GrB53]cCqauV`pc?H[?(Of(4Y<!Lp1Va#"?A3=e4ahP%_gr-m -%HniJHp(Opi?h>C0_nCeH..`OT_lT\oWOj#FngM.`JoPoR^.8#T[2s^$Z]`$,Ho3n^T#m\?^o]V=N^^)#__7^75*BGXqu283Y2pS( -%05]]cPFrd&ecVk=<qQ;D)gn%eHpPCTFlnV8H)2MK^$ri7H5bc!Zfb3TItYKQO-^t2&BF]9E+jt2E*'u_*">h'/YKC<pP^*;OA$cI -%6Zsd(bfD^jmii-i+oAP`Z6ooK7fWI=mLa7hF^B[C1C./4)[:[#[O9O>&Ki8+#PY=p^P7!ESc=m+@h_N(Vt>SB'6tru"7_h>kJSCI -%<>StFc`W?'C19LIlqKPE.^h&kjre4tZacC^C&sr*N47kETGWD;$;=PZp*_d'KQ%$+Y07mp'^S[B-(XKaLa>jjd-j"P3=fu%n)N'd -%0_X'^]94LgYIr`T<q70dle-&g1j7ch="+1'>OW#64^uqAYMR18ojt:B3O`G`"gT+1&#Q)KX."9L$q%Bfl.6Y>dmYhQZ")F>VhCa; -%.Rp(7H!?HR4P15MmsMGM%0&pqR+'4'b;RWj4$BsW@]Wj1-eUa:+Nc7ZE&l)FEt%aEQj=d<O=PdaJr^!B;!o"lNe*XHqr:<&n:Pkt -%Y=fRDfoK]?q7IsdB-t#?mg?k:LouatOmURg%6\gf%dV?c"*cBlb"O!j,aQiJ@n+>>/41q<pu<7b[:/`:E_;ge16=,[qV]*ZD,)md -%1(?oGe&+>K(@[=grq@<_:lHcY#"Z\-qZJ1n\A2<6$h<Km%3Naj$tC.t/nhs.h>9V]h5?-'K*jHBg:)M\JX?YfKdHfjd)UJL!@DA6 -%kW"+iT_!DG2hMSsN'Z?jB;P'Jmc<o]JM,Kt!!$-#XrN@&=Y@eo<\68m6*2Y`'&c_8J=TmWnJ:n\kug_fR&iJFQCBrH"-@sphTsKJ -%#&s$tiHS_UKQmsQg5'mk^2@=Fld!]:M:IC@"C!-"+Gh+32I6b%"1&,jXb%dr"JJ4Q4P-M[=J.'oD`PYB`tlJcSq(K\T\#7Q#/AY$ -%EZ`GmNmSRic:qlc(4^<N-NfML:-)G)fg*iqTT9KAYe2o*F-7_7=dJW9eEMaBAK>Ii!0*+d+Pb8&merBm,P+<GH<)HVOmaZ!,3Y)n -%,#_tCUfM2Uq.j$OV$1s*;:3<c#)p*iBnZA$i:#JA*q>'.c-R[e4YdVAcfFs`S]b+b/6#aU9DG5mRjGoj4ZDk\#+='S$M=iZmh,bc -%HVHiTDmkDE"+p]J"!,aLFTdD9kQ&6,ejC.;I$<k!RpGEJWj#/"&((T')ONe:EBFM"BX=e`fWh!G/7gr00pQFRK+k!dKV1mo/PkA> -%+>O]TdO!*t!Mfa;@4'9u&b`%K@N]C*Cra_O9::`M6AA?S$h&N\\dCqo?=5[\Bo3*P44QG*4g(X>^&8@akrbMhL=IO/.]BIM[EV\. -%P'U@U0ggL0Oa805cm+R;.;ig<0)IpO;i)0abf]K3MmsP51ZU2#a>q43=B*lcM`NT25kjb@r<>6SkU)jeTqg5ijhC2(rM9a1']]@q -%5^i+?Y$Vu#:XrJkiV$A321aN";4h:\Gj]2p8epnB32iPBcsWI+Du6e^JJ*8GaQO7J^ip+p6mCj2psaO<;YQS7coJC_Lbd<pV5c$o -%<NT<%=;d;X;:`Mu!X*?@+"-?d;C-bA8lad,igXJ!?`+q3lb'"@H*.%!!EoJn!KmXt!pJ'C0GDDdi$luGeDK:a7/2_UmlDdF;,hpG -%4%(+3h_sN!Z64Fm9%>EuDI@&V>'N?,&#P-8+IH<K'@RqhAT)*h?]^8\P)W76W"d@06C!XsV7.(/6LUTSXtfJ63!U3'pJ$jU0W[%U -%JVE'2mn.[Q\s0X0M_8QmgsuO5[$#c2L!R7]n7fQ(,,9niJRt0]>Z`?<'0jnR7DnsXZmjtK?r%k-[hT3R;_OWN*ESur$q>Tp,7=e8 -%0!$NF7B?jgT%3mC9-e.PUu@sm-HkDFT.V#^UkfiecCk8N@#"E3/nG6\f.am9"%3=WN=+Z,3`#DM<E]$(fh7_:Bo!XGRa+*o8sql6 -%Pg1*AD9$5-SkO6m^a%qPQ@fn0EDDe)A0BrF8]?ij7W-dFC.tQP1TRHf@.tU[l$s]-i.j(3@hGCiUbbPE^tTLZ0l3i)\PPSE>qG0* -%(8ASR%4(i9MS+Rl>Z30k881c[fHe(%ZU`*@=jUC^n>qjsn-O61h")Stf*gtB2PUH[\#=\8ZWC2dXr1(+##*$B19[O^Ng9Z!`XWj< -%J;^ga*9Zn<g3h<E5mIct`sWik:ka8P0.rakMmi:dpPMVuG]l'ml0b;$oA0`?5__>46TNK*6Wp^09sjLO_fm?mFj5A<55T>C['A/. -%S-P-6@hXg-ZU^)p2\XTK3(9LpM2>sK*<Og8CbeMIqGSI`P+.[[H(i"I.T5IDh"l/KoEi,=$b$=6"$E[,WtqjDYRT4oGe67Kf^Q8; -%U=lDXH"/^#&W8sZ/G&^4#E?*s+,n6UcYL,u%g+QfZ*e\FFBPu*C1CtoqU,Gd?n'(N"l";iX&&)"$XebH`9orh4\!"sqh1obXho!* -%Rpg+bdXO@U\'-PsAc_9sbd<aA_JWl8[<CGjD4$EMS5#+21op`3F_EI#)2"*W2jM`B5u!9K"mkr!I%$,sAd?\6cPB5trA5&(.C$3k -%B=0G`--Mgdgt=Q-HSPD(irU+k\UcYN-7Ef1inBq'4H6WOgo3GEqi6jQ*FWf'fD[)nJF/-ZB43@8V'pWAML3FUQ(cS=(T!kCaH7cG -%'?$"F=!c.+R;9fg$WJmB*cJkQN-ids.."@nEA(PNME:cCm@l`M[Zqj5$ek/b<FAY)rr@_L.%1Co4js[a;BeJJn:\Uo(n,#^L*[U[ -%VX:c/<GCNfD"8h/NA?#*=Nq&2;?^8%(e5unB1A!P0?`4tYe\=+/JHBb)S-+=Knn;I[t2Vm0Z8JA(-us\ilMWf&X:tnRCQ%#Amnm. -%PjPt$=Ad)64O<T:nl.4*O$\fZ^_=jEH_:`Ll@jP9VK/jG1fRmOn)d#<J_R>q'0-74TOo6t*:&>Y<RIZn;,quS'31mp;H60ROapPD -%PVUW7rHnLU:Z5WL>>uKo'h*0Y_d^_P:"1+hB:Qf9NR\tM$B!CDV!?\SHe41)1Z3ilgdT^lZr8c^m*n-tK+t4Em;*Z1nZ9(RJjUVR -%`)*A3Y[87C!BHQ@^FgFh%g>]ePXSRhmPMZ!]k2%X7Vp>e'5=BN.go,\n+*!EIYGf1YiM;K;6_B@'rh\?8,*eESrfu?Z7$gCAPkXe -%b6;CCZ!\@Vgl"X@0pGm0q@Xqt`+Fk25d/DbI2UZl!]\!V3CZc9@r"Yi9Mt#LfKm;.MhNHNc&HDf`g5<:=<[7=l1uPQ7,TL$#+J%s -%UU<W2K;C;:g537o:dPq0log^eS-t;3pT0'.WWLj:7>$hUS<T<X#&Ace!gkiA=9D"n@-9@;K3;A.;SjW?,mA9u78bJ<$G<^`?PDRk -%E?*Q*huUcDetf+h^t6/&c01WrP6-rZd\J^.S^Sa![n^@/**B%GUa9Vgq/OEV$iHN@4f6phi3V"+ouJ_,1?]Gqbe,j-Kp,\28)@u` -%D`53F5;MT*W.:[BA#HId]r\FA'OZVh#$E/:F)#6"m']L_b&^\:VoikD^VU[hp0u_$i^bc8[-La,P/;NUdA;$W/7Y-rLXq%,eSAV7 -%m%ZM=@9U;4ATaf.R^uWYp):\Ml^)tLGF/8TNVi1--Yh$l^j:o@D\D)MU@%Et,or1*!XQTD!5R0[^O"r&l-(LO"Ls/RbIUPF8ZAo% -%c2=,(^UE=&7&I?lX3=#L\kjr<V2S]W>C&q4[L0Ad:Y=^5HXJ/35D*M1]jRnk^6i7LG[==#aA\b'CrP)p#I?Kh_J+r&O3inVWn?ob -%@#MX1AL@r=?"E7-#C7d!'[%K[WV$tV'+U8"^.G[g//t(_`JXCBm'&P!U@aJ,K<7Jm"_*72#@!%E'8LePMQCjXFrfh_&r-P6WQjcr -%N(FkEMF3dtDt[F5b2t.'%p]b-?F,Vf`c3ETL;]J#HZU6boL7<H^.KB&$qEC!bD=i^?2u1poaEY$;&H=m'.?+YT0Se\D1In^'>)$' -%Xk<9`=HqWkju%mXJIrfj-H5C;pR+$a@b29M\XJ6Q,)jX4$K40H-F$k)L;\Q2CUD594cuS4oJBsU_</6k.=8d^qK$1-NZ9mOaKZ04 -%-ko_o1SKceG.7PZapAXI'5VC\.Rr$(A(Zfo]iVuqjh^@G>*_^@J7Cs%":5e4bMloiUDY+W>gI*B%(ue41,N(,b6%(.[(Sa(I`N/> -%+Wuma%KW%/0He/'%$H-(bcR<4Lb@e^/N`bU<@7KLYc$uF68-bNQ:B7q*r$?p&LNOU,f4tn]L@np_^)#e$'SIVZ4ma"P3.R:E8=>W -%JQU3PCt0Z94=ASbVW2n6EO'\j<Bj3oag/i3/LSd[D,)V>\1plDNDlNo0W7;LMNg[<&jIu\81!WI`*4_i$3H@q.P;;7Lu8mhcq78p -%R^Je"T2rE%=X\eP'PNJ2'p>RJm>.o]V^<l/-2/AeZ]d"OY\JtIEA,SqEXnH]YQknV4VG6b9\bd]`%<t_[j5f]gsQ6i>1SnCVS`6M -%%'^(;5dE0u6FKf?2>GO<40UMn%fim8/9;-@8M$cBk!kJC=cSdKq5i;mWfHFq1Of"iE/4C15Zr1ZOUZ7Y8:jW(Tf<MVK#E9FBuBd- -%:uTcVL_;1V>mMkc,aJ.,f,bL5FX,iU25#haJ#ETor_2;nTFANE-1\!HeL?.mKn<iG>Sr'RlA5XbN'8_G+.:b6>]\GgUt)`sZ'$F7 -%@Wk)t">9Hhf5o[+P:i(jTULOKN!1[6"(d+Xrn=(.^c2QS%G2*]q>?2I["KQ^Re]:+ii!`uP=UIt7=L&X$8@TM.17E?'c,Sd9;,W, -%MA_WdD^kG"p9lY%a&F2?)\#XA1og>1@K8nAk3WbYA@pPUWE#m'&1,Mr_L`,cqBQs]mlac5)?Xln9i-1@kXWDr7_Jru%n_baO'9CI -%_,*RtOgC;co)Ua!hCE:@Mf/[/o(ereg*&k<:k<l)FA8094i^"%#$%I;;fbnIW^u<;m0lsV_("DId<\h#=[Jp:OI@fM29![/fM[hs -%/X+GhE045rK]sX&VIn('7)[a:Sl^fT&LE9fFRTop%.S:q1lF[`KMIf30B5,3B.AfU"%!CV;N0El#A2^N@I@_5G*(h$[8LOM``4e. -%;hE=U7qPEZ-R&/I)e@10n.WDn0oMBm)@bn$]!`GR@7G5#-'m$nU(u$06eESdQ\[h8$T[g/]g;/SAC!*Z!*nCbca4=g4<&JtZ8N"N -%;M>ha,6BjCs"FX)cM(#i+W<Z13s9X3+ET_tn6QN3$&hqp=9@MW2XX!m$sWJ#4bgXs<KQO6Z?n7)WpJT#d*TE!U1$Vm=&?_:X1bne -%m4F14&oB$"@L8Dh,aP![a"1jh5=fE?(1IE1kR8*@,Xe%g>6r[bi>0;;6G,a,apWHV@88_V_S@a:b#*D;TIJ9h6A/DW4bn8b&3X0C -%9;9Lb;&mIQ65YLI^C\F_#'E*OfmMm(ZbnQ9/k#k+U:Y!T'pYJO";;+od]dt5oIf\i$-rmi9Y2n[F\/)ddXhY^s/;`H%X/L6+lP$t -%-7%BCAD5.K8+OogdKYU;DD:o5"3VnEZ"GS).<&(/XW"aKA[>sZ6tJ\/TgY72Xo@4Eo`'$*O4D1Qd3jf^f]a'SQu)GP=:?oJ+r3Q, -%=TO`3BPh@G-b\Mt/1P.=$hT3(:l+*D'r\Sk:g[+OP)-d[YSlNnff:"dDr)I5pS<<7#`@ZLgaM2ajiGq<!8lHhIQRS(6D3l`2I]+g -%P+C6gh:*?E1ZN85LiYU9I)(o@-r&]7'soI\Zs)Tn)->#V?H*s@][&"$5X4EOM<?nlloqC(naq%`SMdt9`\42RmHG-#%Bu%tlL_tF -%T)Pmf`NXO7#)atN%radm"/e65CZ9l3P5RuG4s_IJp-'d5/G)ViQ-J5@4O0X:k'\Zb9p9p@.g]d'6(GP4m&7-o3Y,qT$LFF:Ti_@u -%B(fV10&cDlHH_/D+GY8)1JuaPq[qS2?bPnMp4htkEI!$Ok<T/sA=b'^8*3^]Wq1%"I"WVp"@#H/FF]#HF_QYC1HBhSKL?,Q(8M`, -%`E>e,\]m<_Bs7FZ/c%6&#\>hUE#[sMm[AUSh0&&r/)Bk\2%??c1^%BulHG^1D"AFc\2Bg1:fBu+Q6Jt$4'["ukp9.oJ0KOg(2sk" -%$gtqKP>6uc"DkEs=Mi_7?>%N.\]Jcaa!JODJL`<?E,^?XZF)9na]YZM5,DlN/S:6/LY_hQ>f;2dK7GTb(F]sT3Oe!a4M8@j$p"J_ -%$#mmRO;SXfO?;W.CpE=@q+6el<jq)[a2fYZ_b/]@B=O6L>8@@rh`B-)2/+10@!#!S%_^s0-5[2:\k3*(M9=->(7T3H^t-0IZIU5s -%buqF4i$B_2*LB<rcn%[Z'aJXXA,o_^Z1)*h&]/uqIVY=US_]5^)9u5kDY_f7WQRfaVf@$es/P,S$H.A4Za_i2gRruR)4XW(A#CrO -%?HZe/$X+H>=g=2DLo^PI&ZM!$!K-c(\F4G^'dn$q;YDg]"Od:pU*rRbL+!BAekpHTl]V#`dJq,hW9uG^;$,06c]isf!!!b`-MgiC -%_to`'`YGV1/-.'Z7jOnKr5`,X+*j_qM9HN?(V&51H)bU.OU*>R5bs?Gah\;3.IF]!*LBSG)46'a'l>5I;:R_5(>K"o$Xr1,=S+pR -%0uRNt$-S.h8jJ.c>m68lAlc=h<n:*e5nLo53!c6<_\NV2QBX)FfVgSNp3BTG2Mbumo7CDa:':G_lOfKk5LD/2-I8Ki+GH%u+a78% -%>VbWA(,fZQ/)aimUDAVXGg;7I68X@X8r,rVi!).YoG0A=1*^FL"Z<^n;>VW/9[l64-X/Jk5,)9HR'k-H@dPF0>Dhg)l"P,skB'?i -%[jSTMNWR/AQXq&QEluP0&jIu;>f2^t>T9NH6oG2ad\I59[]kU?-"WfY8Jk?^F$2t(e.As'B(%;D9?R*1l]oho,2lW9@KfHF:bC-R -%4F(Z1(AK8bYSEaF=`T)hPSdB:]eV&Ze(?]YjdlUr-<9.AP%9C@"9gTL?d#)n""V]_SPM?)q,$Es/N=([3u;15h-NlKTlQ1<gh.!i -%[f(pGk;EP4e.@TA)tkFqV\JijeI(\7PZ?C"+EtfLI!(@mUKK6JLD.@fRCVBh:-1l\"F+bHS-h-s@a1J`>#k+o0*(8lJ0u9CYrB,+ -%A]K\Pr??=0=S.>S5ec5IL#(%s2S@2s)iJ-Y2Csdl)WJW":&R`V;!N)PD"c`61b@[8TV!EnfmT?+@qTdTAXAU3FjjA/C-rjX9F"U" -%>ILIWaZJ0F2t0:Zb>*@T@`+W%d4n#!h$grag9SoT5^TI^];,nC=k>.<XFWMS>2G,RfQEm!hpcVKbSX7/Z'Xc!h@8fq15^.*$H3l/ -%9<Zj5dPg/m^F,7c?RWjk$%3gS7A_+:7UL7))"Pa.6NnZ4SO3k0VC"PDNJgLE+Kr(_bN.#f7@:iP'5,DaL3l'%8ZmX,E6<D7LkhBe -%#!OmEP%uIep_4>KoNk<63@/`2V/V`IS/_1ZOg8;mQI&)SM_Ogi?5?u)'>[`6WQ")2asjsi%!+Ir-WPo!0/\/uhNC?r<WT;pdgh5M -%Ue[O?+nl;)qg^Hc:lJgPh*d$!9b_d#dmO@p4cK',KF6q22KC.qE6;5gbq(=[:j!)8"3Oi2.$0E7Xc2ntOJa:29B$g*(rN%_F9l)5 -%Ym<W>&JH(!qYW8PD4#GM]u>SZ2<D>,MZS\l.@+L8<-Uj2)lB,#:tUu)A\ZNQ*=8NIkuoj3/Z/W63h54gZr+]I!]F4u?,GfUop.'7 -%P]P+tB4,`1.-KiGFTbBD0Mn^XPOo*+r3bf+k_8[HlX58@&DQ+[nODb*kb'tYS9J$S=Qr3U2]$bGjkgr*0+fS.8T*51GbdIDD.a(% -%,tNZ+/lFU3Q]![t+rMV/XlM'*B6KQ%nV37^(`[^6U8Ce.)7&9^0s^#:)F0NqPqkGE$qk8mBqefmHje@[E16!61_:]CK\=C9b//^8 -%gd[DW/Jk]tWi44='5&Z#2#1e^Q#*X+P,1<#,:ea;K91dp)9OBqYmdPKPRQTXN3*6EF1Q269BKiD37`.I[?U?sl-QY*m+K&+W%cDd -%j&-hnhOXgJ)igIhq6*2Yn&Z3rE`c&^hMWrhh1uuuW]g*J%J($UP4WRXDqL6t$q=kO7Pf+eK6Cof855>T5#_F,<Os.65Rd@E-4jSu -%JoIpE-JaoP^!gP5%OoH)/$L@nIn])6p%r:"0Xt</cm+m;Hl+2NVOJT;A"OTmi*#86J_B;:"#2Jn[Q(f5!HJ=b7UelW6"A'2f[i+t -%6Wm(1&`&6(BFXq.hEnL6*Gs\RdZE#JmD=3!B,QJn2B8m2!8A4aG&FUWAtuW+X`GmRiY659k9OVn[M$_5ct5B\_f:rU<r)(.Nnu65 -%N?kbl-$b]@J/Q$gcQ@EEXMsBp(<0r0S1Ts5Ms5Ig`fM75d>W03EM>\k&<T\RQ6TE7G)+"K]!3[CTA^5ri-HRWQEnK"D<B><+l<_s -%\G%W8:uB8sKc\ZVNQeD=*nhd+MHH\ofP]+c4&k[cWAguO>&sY5poFR!6CMI[`X_;[9LUb/S2'+.`c:*ZN!5g54U,rC#n6QsWON"L -%)_c"4(M;Tara=W.dUgiWgZpW\YjB?7T6t0Z5-f6Yc?>LLA5=CC@$BZe`j(88Q6hMJdqZ#9>LJH<Uh*+N,>[1@CY?n3kM<e:h7sf: -%:s,^l5%[of_/"\s-.4cN:sF((RrJ+_bq>`3JA:1+>gQ%h5t@c\9Uq)$eDY5VUAKa$8b:Df%k(mF5;=Z&5!SRg.=1V"+2oc>C#Y>F -%Kcs0<C9T%?&-^5A^r2#+Ml70(d0YC!&9]LlLPnP@QjZNO.k"DkN0Q+k*74DRX'+Z,fdc;eP@=Y]^(AU#lYe5AgP\HHcY_N=g\l?- -%9SR4G:]aQ"arJpMl%"DXKoo-CQkDkLnO^`hh+W3t]'(UW+0.#([W$LcX0OE>kq[gZJSXKj=[2J+QH"M(2[ep[m5"!t$:<27pBcZX -%/G5O/bYXZM^_2XL,G5iIXIgc9.h!k*S+n6SFT@+X!_f^af.\%OeNQQe0mm3CGgUd(R_ZM>NBV=LM*%k#pV_[tjX[n)dqInWPs.dC -%)EA%sQ=IG>#R2p4BOi6[nYl?+q[.*<Um,u:5<^21<J)Lc=ak)\Bo2$D+]U(5-5N@#EU<2?X&aBTN0a:TN)DG$\a#oR/5VYo,aQp? -%!(e;FTNP*#cKJ<;9.-$,8[n)k$6#RK!:P#t0F>oj$K*nA>?NE]`0M$nV5)6ORbCCjF)&hXapCF(@iIF:W+^9!FL!<-0sZJ>"f>dS -%;T?.)*Ot<K';kpKIBLLKcCR8:*`7788]j);\aRL1MI#dADsikEIP5#*Yte($s1nl;(Z1N23hH!'pc&D;3HBN.+I;#YS%.-lfU*MV -%3o6Y=4]>d!kghi7Z;02'nQ^r#ghVgU.$KkB\n'j,@,L8%n[+S![3j$Uhoan]1So/1eNkoEMZ=dR,?)EKpR%A*l9a15\"E5Z$t[p6 -%3b3s=p$ANM\tk@R^g7Q<]I9OY0G<#DH+Rjam=X-+;S/:,0_[#F=SsW,R.u8UACqZBF<!n\@4!\:7Sd>pVhS&a3%Z(NZ-P!,4\;:9 -%4G%heIAUQ4Z`I>]E`rt2&Ai2ZPk\Ds"4FOMS<T`5gGi">p:2UrT>aTa^I8i4Xh;X\>d>%s](OdbWL0V>o9(gmA_:WLe7*A'aX,t. -%a$]Lc-&3Aj]7ih]'5&]$2#3QEcJ%j[PrANa[N)g-ZeoTBJR,)erAfpFq[UPSZf8G0J^QVr5I,_R`cB@qf@&q5idI%.<hAA-a2fPW -%[n7VsB<mg.>>"/5Bt!--SXuBaV:@hm.VpL)QK*sNG-^JgOQ7YH<Tflt%2K=e:O0KZoQK:5n$B[3`'<jBgMu=bBBRVA+*J,'nB39O -%,>1B-H.G=q2J1WIOVR$FdW!YJ_eo4f$JAp^Ai]"R3(Sr1#"]/HFN0ZV1qaZ>(92#O:3G>%/0DN9I[3![B5:)0PU1jA,hag1X;HfX -%lr#U(H]>,#N$CAFNU.MHQhG,7;RSfNWE:S%Yi[rG>in%H>f(n-BhF6j/!%"bOfVfBnLFcBXH'!7*2:GFCsdr2cA,k?B9Mk[L(J?` -%a/LIjS`CJ,@\=AVikn$j'D%SLBmoMH\h*^DBs"mQJ=)d)X2&-4E=C;Q0d`ogSGJHp:ORg$iDr[1PR1uljQIKDCh7"Nn?h[;c&$F' -%['#63pVi2N-A3\9GSr])Th+<@fG+'^'<:\,1_AoVBHTaUR'gj:qffkGDXHYUS\7E_QJ*lI('rL;%2^^O\'KG\;LjSHH2F<kC!c(^ -%-Cb4f/1)-o[:E+?"ug=^itK*o0q.l*02[[o/<A@CBs!_uR7q5I@RC0)pjaOHlkg5fN.J;OB^_H@Bh*1f]2Ugp$]VG01Gr9:K15lN -%B-Y=*9QoRH_MF@$BbMbTO]WplC&)PaI1%T]%LciQ.Q#;Z<5<`)dH<QUqA@P]["8?fSPpb-YLoqEnk.(ucg]]1OtF`"R/32M8(3^& -%:Sk=/n?MK+62WHt;(1D!,bsA%$1faQ)U"-rG#dI6G&GOZSK">;CbeK-fEu/;7ZAr04`/Q[Ygb*`3HjtN69F9\QM2qiUDT.mEjcuK -%\cpDkR\Ls3_r3uA?H$%^lJR4eToG5sf/htrLY\+lYAsKJNkn@0W^Yfrgl'*sR:NaN4*L6kiOBpX)`Xpsi@(hi/bjA1;6d=5:%M-7 -%YAIuKbe+^>,HUouorhI;9+ejR[q&\dgWhM-?$8<2ZjAGW0E`XG*ufA5,j2sLgm5:9&U(LTK[pq3+!D_R`qJ5KD/i@Rm):.EZ.#l- -%YmaPDn<1Y.6@tT\3J>PuDQDekUpA_^@H_.sa2M#)iX5-6;l7(A43j'>mbLY"@[&j;E6\bO83"n%X6q2Gi3JcWf1MRUCr23Ejd@62 -%.T.TJ.+3k*lh@>5m#/f]KQBo0]iu#&SaL(-icHgb&XK/AVXl,=:I0PVP%K8X75b0Wil&Vco;_5b9`RlY!R>GCkmZq&?u2!"B.EM, -%"D6&4AE-8`[jDat1_%RN?iZRY;0\J8+PO8QMlcQH-\A2C;iAb;EDlLdO_Bs^o;)jopC8?5`>Lu%Pb?D/Sb4_A8"'_XBoIe2!EuFs -%X<>]jGd]]!+]KJP1B?-"r.*gTW[.ekER<_/+s$to2mcDUQ].dmc(1P$9tL^KQft'Z4(QDFhB=#(^]P$(M,Ig(W[S0d=U^*'F$?Zu -%VYX92aM*0J(4ut_.!3@K1)gH':cQ`2.fg@4C?V(7$O9L!R06>W)auU,0[\nE+t<u3VpnNeQu``k5toiZME7\c(td_'63!]FIP&C4 -%5\knD0W9NM:=*ck'bDB@g1&L^/i\8?c3de8ba*MnhHhI&1bUi24Y3j$c32'FQXUCLmZ8n4&B,(m$-!<P,BQS!RG8usW8a'cTZC^m -%C)?'M\stNWg6#Q('L654SRmLd4Jj@:3:!jQ2E;H'j9gH4c3-$s)b%?F4NR)l1*=sYB4eP*nRihsCnFI&$u$+J[c8irh81Ol?O=`, -%T3-P@j@PYU=h[penN$!%2oJ/L_>Ph>&BAlt6Ph]"lS`lU#mIt/7=GB5Q8fN,S/Y0:T9*8<lm@ck3;*sm67f&&P13?D09/@D+C@7$ -%AJel$0OK42>k@9+*aT+H_LiiL[=VkOC0%%f^m(E*U6DB,KHo#pqIkg`;Tk"9qPDbLTs3YmBI/+dNo"_*1ECK/*f9KgeT%l<:e1p\ -%A.Y<,0W7gA@U*(c0J/766DFgm&nDI<QR6C1j#H7aG`)+.>k_2_i=M@Y^1kGRVk!\4FYT13%,V+XZ%PX,^3$/?#/gqoV>$4#@sV?! -%&Ogq0<dQ*Di!fuD_Pro`E_P9;?'XfW-cB!;Q'#B2Q'PF5fQcUI^kUn)n`"lR<)ti(MM.>$af,nq4VUt-+0,r$("beX=\DmeJYs2B -%:Ip=YcL[uEa9X)7RtKl=Z?`J#%Hap@0(Q&U3%P<0:X+0!''gFtmhpF_0&nK\Z(MrZ</P=gq&E4fBWClucm!$:poEAh,rR@613b@c -%X9*"t=Fb+NNV:"GPRT#ITh7d77V]nDL;59":1@NT]StedQ;iHrKjY*ogM\ml/5j^cNT1&a#dQ0g88P\i-q:9fIZe]@*'B9MN$Uk5 -%(l;Z(Q;Laj@b1s1/Q#blLaBIk4AEYV>#QWC,+`AuR,_rgWJ^mt=[LCnfKG5b:6&WL:NN%UZG\$7.;iRX>=:%2Mbm*/'IKaIeXY)/ -%rU:R$L;3qcmLYd/e1G"`#pa&62t1)ZBaK/gN)0i<%D2A/(P_=(d2_2nFOj^M^m@C@_&"t/G4;oXOH;+mY<kdIk[1Kg]$2PO/JO'h -%'OnENXR1s/Aj;b!T?pM-@80W:igN8H#k8+f1dh1pE39b&+e5Smo*+b?#ZM^A2Y7tK(5/uYR);o27B[''?NC-B9TSFVfm?I4fYu2I -%iI`;^6hoRPYd5c5P?-si2R7_s,r,C$YZY^o#hqOho>'cFPVsUQ(R2,aIdD[(KB>lJYp-8T,$'B)(JH%qR:dcb5sjTe^6*E$1B.Z[ -%LZ^\9R0689:)=3a:*6O+oPJ):k$$)-iNga$0N-%k1T"BN:Pk/GeRDEl$regUdR%=k/HfN+l\o94:UJ9Ko;/9oM#S&9)$5=V8erf; -%9GEp5-SrGp=_6s$5_g!2,q@;Q<MHIg&nNaiUA4k$1Y<KjkZgZII<?0?(HRom@=dAS[ZiMLP)>ZMiN]We$j2ZP=]VE:`iNiX7AFI, -%q+M6m"o_>-+bmlKQk4RLM%V+@=$b#5j8^'ia>cc:D_f8?UerD1F+2*&LX55s$??*413)]*SD63]/$#<m_bAD9s6hAfZaaj6Q+0p? -%AK5?)QUi"7$/GuT-k7&Wbts6DPKcpH+$1g)RGf;'m7O,(jt7+GRFNGp@S$uNjA<6:NCZZ";!"XS+cT%0K+d;`WJ;A#q*5PcTqCL) -%,"^^1k9apaA_1D'(OSiuAA?db-g,j%*;UlnToPn@h"g<JXs]F--?usF,!qAWh++g$'T`[NLJ-,",q'kXn?OaU0JC\/g&/:Jj/!3, -%*NA2NM&nE<;TA=kVBcojPB?DA3RVCs]`8NNP9/3;"Y(?F2%4&Nlcc_A14X"Lo$!,#TI<HTQ7,CZbMa\+PK6DlL]U3N\qmg!(Lr@s -%V^b//8gc/V/iZI6k.AjMB3)JSIHC7r"Gsj5I(I2#!R@(sN#AfYULr@7@[)t06V&p.r6WK#o:1NK7#+PE=pr7,E2Rg%"sudfWNdFR -%VM-5Pc8chJ1ufu1,=8Jb=dDB*WN7?qERY'A2,(R![k[jeO*siU9s.%iS"sip$jS[^R05E.:@2C4['Pm1VI+.o:3if"Z01ndime>[ -%cT"&m:eA\RJ1:u/2#&%U(4[9a5H7!V<N'lVaE0",c?PE3:R6Kq5]<PJS%`s=m*jl\2l=EJR`<YWYE]?2S$]BC]4EA2:1.4pVl[nD -%U;`fW*2;2aR!6tiEjchj#7)KqJjL,$H^KR<m!p_,b3mUpN?k/aF9W'H&=oNYVT&g,dJ(RC./I?8RF2s!?qnchTM>&R\_"3db30DE -%3E=?s#"8h)&m6V+5p@huJR6YL`GI;'X/VcPI(GgsSC95>83p%J.`4.jEe.RHNpXDR&k=5GQ8g'+=2@F<Hrpb/Y*o!%*=T%PimR0@ -%(h,4uJ7N.L9*cDRJ-Rl:$T!?RAnP^SKX"!Zp?Es)p5$-A1pg+Z%.:SO=eQpLVG(:4-`)$UQV.11PY(e-nBrNW=VS7l>Xn>7[Vh)n -%72,W?+IcNFLQ"1C`b94N`_:*/e08l=d5ckI=K-sm#V.K&90..Ie.rXh?q&;`N4CBh6d8%!P>F'_s%5bAVhDB&8nMrUZ"B2_BuTea -%p9ZZHF%W;Q>TLYV"@s_D$6mQKWD&6cph>TJ-4DmZR5U>X'([B.#1?Ik5*Rp=b`aGX"ho+;VTn$So6J7*/_eU+T!:W*.Z5K4mC40= -%C%,'$T1Nja!3ekZ+0-7?W(39G1rJoWI*o7FN3O.3S-D!N;2_0jPm1s-+N'?D-CkN[/'Y;PRt^/g`9Ym&_D&@6kUdIT9QFRQQ6MBI -%0#nTnK-r<<b51%)9F!MqfUPiURoGP1.VY`ls)6_V1WSU_HZS<PS[h<F\a*ju(O(YYgg5$OaddWskCa\*`WoP`.'tPflA7f.A_/-l -%.?V/=PQ7:LbG18ZA$SJC#J'13<5uT1IYHV0b'(M)rNU3R8n%F&YZMYm`a(c<o7&%Z/a7?-D"cj$6jmB]6s&04aYn,)%aWRjroejf -%l;t`,rUW8Ls1\9cB!qVkK*B7Qj+,[sdqi#OHfS00rT9f#\PfmND;X9Gek_q$6(QV-n:Wh?U0eA\Nms!iX``Tf/T/RO@;FYB,(4$I -%?4gp3^/4[r/h-FOPIS^?4)coF2RK<E*G-s\HYh=n7+ll=n(fYhY)jed(.,7P5atNt0ZR**@U%<FH<2=CFkjq95#BoRm9iF%Q0$25 -%Tl@q:2brEWltWatH;,#]mLcoi7lA)s*]rSB'Q#<@lCQ63"Z2E5h8[ViW"louPL%P-E@l:b0jU1BmZAN@h/;Lt^0A_kP+3c]qqhmr -%3aI,O:)QhQM2o&l'h'hA$UN^KQe$^3?:b\gHs.O;bhre=64NG;4%0Q(>'LK*']uNZeN9!%*H90f8-U@iGU3q9\e_MKOhaXfRt1VD -%V#p`p$Io:Z>LM(HqYOpAiRG6,,6&;D(])gjUt1nD(_6IN&0F*V?=A9hn_Y2PUF>&d[4Lf?D34p&e>dRR_ila?"D(Gl0XK]*"Yu_m -%U+ckqU?YR%;.@&=P6YZM:m;7LFOt8i+F\U9O2KHCpfsdp((1G<%<B9D9Y56f(]s/eP(EX)70>^r9qZ=<7U;nsa=fbB^nmV-q-];7 -%"9]'d-3sl.:G@qR5QC0'M[2a#+q-T-LjY#Cnle@/J>c1Ak0D&(5U@s,'Tj)DjAdI'R_Vhf;No$O[7XCdngIDVCPeh9_*j\/XLo+e -%&0VSk6R7D`$P=8=/6HLPW[JM!,#+:_*9;jO#SA%C&0a(872-'fNTgI+b9f.n7uTg6Hpc3S\9s`79'4OsNjWVMlBe0g(fEcuV2Yj_ -%n<8m)P6H.d:<Bch;FOcU-LgEf/^VDG%X)9^.s7Yc;Jo""p@=eAXCC*,Q2W1CIVh<X2'+78Hc]uq_btL^pL"A[]$1r4A7JfsOF)86 -%hRo`Z0nBeB1%jdX-C'-SqBBLEs4i>LO4k+kPVpOf5(Nm(5n%kkU%9IKW$*l(:#R.%_0)SJ9K5VSl!l-*p:7>rDBE8['.e-/.1?++ -%j[E96M%Pa*Cc7:b\ioqUJu%RK1SFl)a8qG7UUl4T5"KP,cgYg/]$t-D\R!<?[,pR24G3*l64*^/(G(EI<?gl@pY7_+%":]:ZspXf -%0CQ=/Z*lW!N_p+Q_[458H;'+BcmLg2ou(:8Y(.;.a`YU[fW);5abeb=h5po=muh'aG!(I>Te<eTFWk!j^IRQ[?_e.qWuY!hq!uI? -%?[]?]D>4#.p;8gj%hH_X>Ir]3J%35SP2E?i[CuEYJ%b^PiVr]&naiq7F-"rTHu]o:bk@RVV7g46KE(]'I,SF5rT\U-5Q,B2qLI]- -%r!1)%KK;#F@Del:YJu',rk-5Mi@2t^JfXX,Js`03J"]btam\0CPgtcnmopD=K'NAl:uSuqW&oaF:Bo=0f=/fHa45Cc2[$)?*n*Dt -%SU>\-?T[gUK22^.Q[Bd65V?pH'MIKjmmp@@QR-3JrE[uTK_<q"0OU?RJ[rXRZCg\G:(+6ToI,2hTg'X:9Hu[tpU%U;1Y-l6_!JtO -%oajjIiHZp/^`al'=+G$J+r@'Z^(W7h1gR'R/lmU)JX>Zj$B7@)BC6iQTR>'H1`]%UXh7T_n7=Jj(fE@&9rXF8-8-NHa\':5JRBg9 -%I[B]S%7@)g:=\Bk]usUf0B&%M@0YW+E.V,dP>Y35L."R_.TM\pj>@umTj\MQ,Jq@mNc;q'[18,W(/DR3BiE]cgI"&2DFnr6nCfJ. -%A4qtCaGL=9NXi0/q\kM^C4YJ5r^gLs^(&[OUc3`q$<P\MBZtIX:Z+WP;a3.ufac[!geul?VGLs%mC&du0X!@1iu<=:`,43DD3"57 -%@s6>3Vo+D=kUs(5TE>p*JAB8A.#T>NT`[Nr\JnfS64Z@qh+0fhA#R53%?Dn@+S;&i]bqtN/-DRN"g9!S#ji>`%bl]q2p=PFhuJ.* -%J:MLc8M18OHp8qJ`_V'`%#O<^#bDL@&AUG.TE(a?h*-BV!.IGmA,^f`KK0VeRuZ6BNY7)aGQ&Vc#%tZAoniN3jrV)lof,Wk:!;sd -%T[NM3U4YNMN7P6\n1C>Uf20X-?Ak36+U6,>H*h/=)4GFlgUh"G8(:qrCRZ*1;.m*LqYRG`-QE0@04AlKJc^2Eb522U#"lfp%kLf_ -%?Y136635F>P5,G!!9IgEF9=-R\GYlTE%nR((nf/F_k(7o(Jl'sKHW%&f2&c,&2<St&g%92i,[4(NEK'q%/B\($"2C`4!UiN"Ukhd -%bs<`d[,OK*A1.TEqb__*"ub0rRJDEeDbF?pgW4pDRn&P6RWVDj,ZH8i)&Y0aW.d>80\>M2idlpF@(PQ0T?/`74f1="cKLMPQ]4.u -%O=)W6E`G%\DsHJ:8%>N,n>+3GLs5M]:#N`$(dG$c&2Q3<=r'4a3/F\\E:+uqP*6Z3[$7gd6W-q,<E4<jH"bQQi8B&D(rh$aH"9d) -%AU<30/9tO4l%VT*%A7"WmYR\@6W?c7&\)YCl0'Jbk\o5fh^[`fDKt$fc,V2p$HL7a9::`;Sd'ktOq)=3(U^0d7//o/]Op)sZCm\g -%S,ejL2,+Ac-bP]09"D)TcRUPi@!-/'GW&%WH+63c5]R@ZHHGM$%jgl'M7i<QklCitDbR5,3DW5Qpo.poRK`Wi*4g7(TWJ3,\QPF2 -%GQWI*Sf#'nPuoB*n$p?51AQ<!BMY[.IaGZi;D`Z=-2K$7J!Gre_0:0/jqS69r%+25f(_Ti<[`f#I4"IDgJmd<-pB.E0,;J"9O%3* -%)G'G+*c*6'?jb5Gapark"m@1)D^(/OjB'MW6%4C>K+Ym4l\'7XSkeP\:Rc*r@1J_YR$BZYe9>?@':P^hj&[q;ND6d-aqMO%95GQr -%np<(tH%I3:WlLkJ*V_a>"!qJf(6/o%%?H*(AG)/L]gTjBL%lCETKRt9EAp!1)Z(SfJ_frM@Fhn1;8C''2I].ld=s[jNR.ks9YX(3 -%+jdPYC>]REZZR8%UQ"XM*&+VV\HN+#P16E48VP!]kk,L[kOHWCn0H8W%lY_O(bkS#:'cF/)t@4t:a-:S<X#far1j\;:Kij"l'L>\ -%EOegb&_KWE"b(G>Ta$QX=s-@hGLUWAPh-MTKCd?"nebtmAjg^kHndlO5.!GFU!le$9jQN"6#t,k#?2Gc.N_i-3$;8Y!k.]7(6e7o -%WZpX>0IZuI#^H&;@2?m+Lcs5UfO>>p#!_9Ia.k2aXO7;H<tE=ZWqX;nK'Fe5JLLg?8EhY_"?7doiIj6SjNn)u,eSo+(3EIch2.*V -%3*tCNp"c6p!0RPpV`KED)]%H8dk(mLJHCF->&R3s1re]Kd\u7BX@Z3$Y"+!DQH]D3#,oS\!RGt2C>$^O"JF7rJ5b;J_qYk8a*n:B -%\<d8rTPa`dLTnMo6^9,0LsQ.>9#'FI<iLSYqVfWJrN@aIBB>I3/Sqt*1k"E)iYN+gr\KR%ocb>SBE['X!N9Ar:)2,kW5uX+'S],c -%&ZT`rNNWAh.Zc's$D8j5YM=no!Z59"U"p<@bk3L'St+t0&,M,?'?E?*Gn0BtjL$dj7C4r2F@Wn'rL3Wc30D6hHA:nGPC/a>*Jg05 -%FWc)Nh9Yj;HtFWRCbW[g3JmmX1r*UPCA^4ufKd+a<:\qW(7')@pl9S"](\.f0Pk^ALu-)";GBcL*i@Y%l-KaM#Q$TM2DE`S_q?2` -%N6ncI[tCP;?8Z,";ZI=hn\_n7,OFjYaqje&7Yo,K_h[eME`p^k9Z)9S6+n<R%4"N]B0[S*k/k'/33AktqZq9KenM>le%r1t!hbRL -%CC22'Q%l[tk2VuZ'Jg9U5YV:GZ_?Z4.)b(n`+1PX!N^GGUPWJ4!7m\K/$#7FCWIkBMub%ZAc;^"&8[Ke6c499>in'B#j^;ch\/LM -%I-H&h$m]j4D/7ks*glsa/V=n7LE#0U$']b-ZNNl&_&8o!S'QUC3,?71V?8rdK2k`_#4ct.EYBksIL;<E2\Wje?Il+dl6289(=BtL -%j$ZuLp^a*n$$S@4n?Hgt;9p1LiP))[492,Y%gm]]B*W)LRWb@!<@ND:*8OT3IT+M*\-[fm9L`IlKW?[):g^[;+>9fWC20W2?oh$d -%+FjrqdL>CQ)"L/Y66IUZJhoGqTt1:`/^Wcd%Q`l#2'F#nL,_R7bP)DfFS(p*T%A,D^8#M\!218MY8KZ;b4cI949Gb0!1c/9VKn7( -%`*1Y"%=mRZJ=f)?Uo58`ciBL6i..C">VTX&%f(sfYso"EEJd#]EKr6l6Ik#O`'>Nu#bZ.(:^.QH#(SQ&,9C<L(-<@@:X#aa+[Yo3 -%Uh0bi1m\5a)L?PpgO]DcJ-W6;nY(uEh=)cH`IlES6kDo)4JU?S%DuS(1^Z]e+AIZo!$`0rIUl-G4ddS%TdgmR(aeOU*2"t/Z31m9 -%'9Nsuh6pC&6a1(U1HPTN#"^8jj/usQD3PBLs.1!*?Aj\P*^FtsICO3`Hi&0>Zej0R%3mQWUI%)>(N3fCnF4)&6@06Bp'H*np,Xqt -%iSfF(9>`,toe`rT%q)\1<<*q,Ekq,EHR=MS"?"7XL(PsUi44:P'6h@,\E+sFd$i_]9FlB8inV"a\7Z?^*I&9<RE$b6rf_]5Qa\59 -%L7t"=7$N*1E8P^hN:TNN1'f;k0Nc!.]MA`&\.hSejG@tHmKknGC0I8B[*dLNN`8<#Pd(]d#XjNCgI^4@0"nD7)`'U4Pf+[G?A7>2 -%95-)0cRlE!%Q&\Jjg!SrHuPJuAUR:MZ>e^J;&^oeRP%.H)1r`Un\EVh]5\i!gph2LeRgo8#!Ogp-<'\!g'n,Y[!e#$s1)Q\Z3@+g -%NDtJ-V*N54_,rjp3RhUX7(E$4QJ<0tWG4a*!;MA'ei+U8"lgOk1*O_%6>7cBJ5?Ir@M>@7XMTB9?j)(-I7#M5[.)[\>X^RUkRO## -%HJr3L87!V,)N.#M=j`n<LCO<"BaN]B9M79E"f-I;GS^_bXH=BOLAqo#'mbf>PH-^7!k;1Z%7/cDZm/"Z>VNl-&W,1$h(suo34pB` -%EMOVu4`3&MKUaXhSMH,DLg_^%C>/9JqRYd2"/`lL<$_j0\f_h(N'P=CQ9"LO=:Lr^bb"<_Gro'g[mPIa$[PWD=rXUi-NOhuj.Y^, -%[SpS+#aH<)155h/%Hec;fHVU5?4dJ;%&A%bqcLndH(+">cNcm`a><tZ6n?8_#[#&>/Lc3f-Hdk+G?H?=cDj?AmWL!"4YN0gcG6=; -%5kNYc%L^_$.O]S@XZ-fj-3m#EBMBcI4[9SMDus3$a`jD?G(cfsViAb82n4C,M'nEm!8f#c@#kZ#>"]mg`G3#0n&SC\PQ[C[K[]ZP -%\WiZn<0Ncjd=D?%XF?ZK:BHQ5L+WQR4F+0Ie]'^Ao+dcH$A"St=;?o%bQcjcmPkeoMEi(oO1lXoZ/ZK&W,ij7#[jRAB;t/^fI2b: -%,-m2qo+4oQL@0$n;H&m9FKi&ieRNG6C_O5*MAAD'/d-'I@RHf=e<=F(_u.]f/^`TB/"X?c\t"dY.G&36q.%[MD[:8kVZmEJX?!A> -%%MPT@HsL6I@A"@AMed^]9FY!,LGclr$Z>,KFWrr=bL7#ub2il*QA]J\h9:`g3.anm0;>'^bDD,f8.8n^cmpAZ%m5C$hMgKObBWY4 -%CFHb)?ch=u#<d%n7A:WF8VR[HJR9XK&Bt0DZS+h3jB.^1_7p()0Md('BX"."">jer3<,d,jq/I_Y7Q13+KI;u_Tb#De5UL$dkHsk -%[K5D.1,'EB.e->>3286/WH^XW`l\D%AuKE@NL#:nV87]nQ.uL@E<L6d\?PeMB/YF$rgZNtE7TnhnZ`237_]AqD6X"b0_5c$O)I8g -%5J)@k[Jp]+.35lqOWe[f!87b&^^u=eD2;>+#Yl7WJ!,b&2Y(@6RMQ8k#%4,E<E9G&@fSuXTDp5hfX[7ESl8M[?2828?1nS])i>Df -%[QS86lh>>4N9G+H5*.=Jdfcnf_4goP&fR!hciWRcA`Eu*]d=>rUrHe`GopIP]qg$C#ClLMqj;t(#IM)%RNZ7g>%%b_.LW/k_?OH/ -%gB?%p,ug<lhe'g>c=W4Lalg0&KF#pU?,<$G6Tdm2.eN^&6ss4c[G;]QFI1Tm6U<QbiE.Zi?[VjLcj[9FbV4E:hZSJnq83X)WEm7< -%+D_2$r*ort@9\:;);%si`0pML:B7ac@6j`[\=d0idtEl<6\Xha:u9?0WL6$K4@f$%^)gG3S-K*F'/mhRmd28U^rI.qZR5r-$_Z2! -%liJiSVoTKe$<F`'*<^inVP)Z4:t"<4M?.>jPX"Z533]2t&_''G4PZJ(O"D2Xc7[bb7L4=a7q#6HU0-<5:j]SZaVNcDH5/s]X>"ET -%oK_14KY4d_0PX2-'*RG&Q69N<c:6=<@>R1/ef,Pb+<]7K2n%3:Rl&32A:G#O7dFIg[QJsH0`g4#?=PrQF!KuUl%pN)2k;Gs=@*=$ -%&AB9[**kN)1hMiWjd.^8NL97o7K@t)+!A8reqL,-30;krb#<7![\+_"it4q-:I1Lf$dRi$_M*uDIb&)kci@';k(Y&5$-sSXWK5FU -%^l5j5-5?b'I<e]:(2R3arT5/j[R_OMq:NPi?!DTW?\\222Z>fuJidBN(W&Fs0[/iW6A6#boggSW]sr^uJM!UA?sD^O1Fue90Eq/" -%88`CJ%Z?4H.9[+KJsRV2$@^<66SP5-3BS_?69a^rS$@n&^26.PQ!On\Tgh!/183b64T9CmDhHuoKD[q-_mITIHmlcGp#A>J*Rlfc -%Q]bku7g"8k0ZNft!!,KhU2:)g=Q=ISXfY<K'+T-tX:s*.BoM/kFI48T.7JhM#2Fk#3C)6s0a@Rg)iu"ppGuo&:]nNZr`R89*n/;? -%Qb4NtD:fAqKIo[HQI&3$iDU=P-)KO=38imWTGYDSESrb.64R!mmce3i`o@0[CD'&KnsVH@e]Mm1+Skpi`b/.GUk.RD3=2<g(T)jp -%0bsRFbZgbGU\jUm#5OT?]a\^@&)(Z066b,#oHhnX7RSU^"aBC#Xq7E!7,Ys0.@WYoA6j^ZQic4%D+H5O2=M8$e)Y+11'fkV0E%8n -%[h@LEd1Q!Ja,ShE4]tBAO"<Bl*?k#>+BbT1$sDS:5]6a+8G=k7S)F,7'pdd?#tn5+X"RI;5*d>fQ?&Wr.Uc3G0:ssQo/7j8VEjq] -%SjAYU:d0X7IHY'0r4$$"Q6<:GG=3>#N_-676AH.TB:FMC)m;)klUD8UL*7Pt011%)T8qnNpLi,HOde+^n8rCjPfhH@if=YfmBhSM -%cZt3X,H6q$Ysldk+d7@@Tlt<T;/h/<WT5`:iP?W-0W:IDkkToHINk'9^e"uM_fD0+X%l`"Te2^Un5bl)^.39$Km`837r'S&:&&6t -%-k?8>GUeI;g/q*@`UZ8uF9`mdE5N(d^\<mtVG0?Qp`<%__\@JFlXn+6`g*fm4ENbCN`2@BBKAPRfs!1RG`&F;@EjbkA]hdH)%I`" -%o#8JKFh>*.&`$.NYn9<"\QNE4-QaD_11'6`q8'a\*_*5)9Kp*Y#R]M$*_ANq/9%_F]k)^X]e:c\<Feh*?X/Fj1f#/W\(se?FE&fj -%r8c;F*WVK>lrmu?,8T92.OL.PRiT+k*p@Z%D\Ecmj$Z'[XF\0C=jtAUL>.0s[l2:uci9(e5sNOb3.Shbq(o>drH]gU3ia]7VDhk, -%_ijj/*a,32+l:atC=7&dp`h(F+O\Dnb"'Bs3Pk6P?X?lq`ReRFjn9_M[<tb_!Vd'i(DFM<*VUEQhfC:a""Wo0?#Iu!J#Ak+Hs-$d -%GI\;JB-FX(V$&c8a]lSY'J:^TMeGl(+e/WgHYj>sbXAX@=m,-%@uVTY?Y;74Q'G."s4LY&/53hslsaP'^OmQ\I,30D=dTE%b>91& -%P06Z,JD]d)e.JZ[V@5``1i_el*TD+.r%0s\L_>f;$>5<gkGV+'I^^+-dM@b=MR,!>%e]c9`FHN;`@mRZDg`Su2BtF5C%//e%^#IE -%8m>q#(u1tH9obEVb.&HQ,+asYCM0f)`\h%m0-O;&7DTRN/(IjH%4,?AlV(S*gJT;$hA?,#r!#=br^sErZ`8Q*7oM$Z@.<]$#ZD;a -%T)#==&Zq5]#fUcU`jb_<9hD+*%%F]U0UaLH(s;!72M4Y4+`"raI-*4*FZ3&#Bu#0Tl>8S29GC?DAq]&fE;19p0NSGZ-_E,/1VfIa -%0TX[[9qm76!Oq[S_8L;4`=)&3fkHCE4X"P^K?Js+bSr*i,I2!7)!>dhnG(@rn%TFm/kV$X&6rh3N>D_7@q<`L9`eUB<rJ:O#P=hi -%-(_pQ%5'Rea.0BE#4p0`,HQf^`\&(,<LMAi`Lc6I2I+)/cXqIt2XP?Zrd2p_>!`]R=lq_#P"]X;D=ur79dR//,7OL[Y2DO\B2h@b -%j)8Ra(?b$o:RM`d.G5nEo<H52ok7;JQfMWhO:o_la*b,4nTg?.;4AiX8r+Vu'X.89/28A^5*us5To.>+Bo=Y75XtS2A,9uK-WGUD -%B:`6:jF<OJ.P\&02:Cm7F\E#RdNfkk4jCHAYNbgBGK*jhbpj3u;U0q,<ibPP42eVE'U"CGd:3'(Fp8L/Rg5^+RY&`c%\ILaQ#SDZ -%T0S>f.2W(`R)/SH=S52qTg92>Z?k?d"REY_8Y\u8,r0=YdDl(2Zoald+asFCJMg7#;FZCJdW)A(K#W]T.Ep77&ST7mPD>C/Aft;1 -%gnd]UT6WhfGG@PChSS*O[gDm!q)e0*nAa2)/B)F-,kr$(+fu81jCY8:jrHQ)!atMAA=YEJkPTVqM>8U'S'W,J;J3:ur$qadm%RD\ -%N[_@G&2ulg!Ej4XM>+!jdPpI%>_YiPj\LDRhJ_)X4k"uR"F?!MIUb4UIE&a<*k*<AT9BN!Q:g%dSUr[LP4`41%81J$2\d^c1a8iV -%!(./O&'Nhlj2W\p?3'2&4GR\=R?>XUa):NUOh0kq#C&_HD#65EO;:?.e$mW#AJug\bco@'Td6#%[N(E?EqJqTfL*W7Xi^aFParo5 -%*!'Q$"-N%51jI4TI$8feF\DQe%6m-G4^=&&$\9$7hr8@/!uIP"+779B?G.k5i=o7f'A+EuVSTN3'Gl"bqjL!=M)VY=rmoo,\*<ZB -%O\)aHf@(L&CWo;6O8CrtR;#en3[?*<3?MO\#G,B1G*$4_NA?1g^]`b.h7RWe+_GFDF&3T1UPqeUAJ.pp#tg%167[CPGeJ^p)f?M1 -%]Yq<KkmtPdo%#oZJoEhI22nF$3R>1E:67T8_f.5\Tf="1\$Wj(Qo/Z6*$I+mKo"L\j%!Gi=h(OK_1,7uhIbihF=R:(<qfXlp<8=: -%_.q#?#:Z41R:g'\Xt#3I"uVq+TpumqBGRMML9i(kVVOXhbl.m<I7U)a,oT#epb&s0g0cN(0=_VD_#U/kT7M'-iqfjZSeo>Ae_5/F -%;tH)T+R/8r`JSU('Vhpq2-FQ]1/ad(!jf&S>c(7Ea"mj<_Zac+1btm0fg4+nJ$J<V6@MPknuj:cMW_u21,![-WiraWnKKn7\Mt\K -%2amBI$@"a47nmc((O@=^5V2Rj,W`cbBF"M8<'Mgt+V"^p]?M\>@H!H#iK/oE7CIib]&*t/-Se.25uG4G22gau/Ode1fhYk"f<sBO -%q(Uo<_s:@h8iY:8p6!Iq,GmeOhGhMV(R&0(nT.0fIm7Z?F.o5::cqi+)u1?`ajH32"7jK260K$XhS<t=DhI!l,s@0>f=#Vc&QN?9 -%aFnql(47`\Lng6/EgBVOFDi"%3V.f@,P4gBkGGJS]*Joamg$nDbj.<&UE8d*A&"IRhV[<q]_$!L*b%HHa^UJ`/ki(gE>3(^G?#/f -%JE%u#AO0/$hV0%.GJi9LjN#J&m>6g\#LgBg&DE@/9M`$6L+59)8s##!>&'5\l)OT$%n0)\$`;'-2Xfg&;R(G>UkE"X:'g"('>k1Z -%G.M;c0--!n0Q>PVV+I%D`r:Sq&aor\k'c(L4OLJRb4-)q9?*=.BBVFA];K22.nVZuH'u(_Q1aGBbaI&o45AgMq6s;i!l#TG2BtHK -%f4@&r1O:]e7MHIN+6iYeK";Ye,+]@k(7eN1FL\LY3sdSP`iE7<ik-ORgq9MG#_`!5%RacA7qlTaOMQF1m0(JD8;[VV5"!,sKVHkr -%M:]ZEbNZUaR5*?k&]%+2bbU!Y?$3r$fuC7tiZVQ5bt]Tko+@*re"qj6[c_ZP@qQ$%33!QTm!>._+1(lM-Lee?@%UL3Oq\P_8)dZb -%e+/[`N%>_5PY^/+&Q,Q;8"`9TX(pq!dk?Dh91I!eVJWKJg9d'V'D'SAmG8O\@rW0FUPoO7P=I]9::q[OT2_s2.0dYC"#7so%UYAY -%-BoTI?si#;i>59ORG"$@Vgb60QFqe..5DZ[TbQn60<<s,j1eP3Gk`\?jR&dh5iH)V0L6X,jJR3hja_Y$lo,ZWdnjMU+pFi69R5YB -%UQ<Ja_5Jt8ZCZ_jB9mfe]#^B$[fua7s3H%ALgorH\r:BI%r]KAa=;IpWC[$5O=E.g/X(hd&jGV&kc/o`<>BikeWRFp\l:)[KN^6. -%X@.a-nQ=nA%7Kp-ZFAoF^Jm@$'>XVfh[0L^qI/"0c;Du."Tpn]rkX;nAFnI#9=]8>.IW3e+I%8pH,3TUE,b,UCh&sfA.`V]liNfG -%UiqgJTP5D.j2GqZStCoL;j)t7"YJ`9N2e8Y>L@5@SP-Po+XINh!hpti-.`;F)2C-qOq95eRuYm+;arcLc.f07qg=IYFQ=?_]EC<p -%.fXW61rZDMTDA0IDo;R@9`@qI"*;#-WGjQZKpU&p\V2Rf,LOsM5]h%U##>'V(m;R69]Ku\j_VAEa<F+/)#%"\juMjf)?c8J6,Ajc -%N@I''nM4C@]&2t*)tgrkbWe`44H=Zl"l:)K'dl-'a_1jLeJdoAHH:[;]fA9HR,[/E!,h]am6_ptf:\ORqB!$8Z8$$:p15EHfoC]# -%#B,fj4+4jAD;7A:Up3FWbQ6N%r,E1W$Q5P*XsA1*f&`<;9=rCb"&PF(g8FqlC(7Tp(dE3lc:,H[%!mbAj#LeMqI@kRFHg;E>Uc\k -%E50eMroNNcaIf(\^GqH97tt\q#@W^87p,)h%s>.[PW[]8#qR,(r%<=Jk_<!D0rmFU<Z/dQ2WsurCq@/a_p2J8RYG\$A,^%KIF(sC -%VAciuCI,_Jr,((NjB#b\b5-5!o7-XrPP^KCqj,W`41_`d3_=;IL(FfV[4u?]V6c(4dAG/tmW'*[LQ/OGrAna9m4iE(qUeEsg^#LU -%>9;1UnTb)gW.3*%ZCTb9RJ1TXgrC7p,Ao^$8p`4dIB]<r1kX:J1iI/D2J_TWS$/;a%NmVLE?6E!6utSI^4_`2Tm'P$nC->+B<aH$ -%#Ks:q\;gIMPTfa7,@s(0BkGlU+iZW;XoeC'BpKb`)#JF@l#FOd%bD3b[&(6fWFjW(Z7EmGI31NElhAc(4OY.YRW>]bV_ftG]A*SX -%q/l\HU&UXP.qSqD0nsQD[s(#o`9bbtSn+k3ETl3NBOoVLhI+`WL+XYPq"MFBcn;G^/%]XSL7VDZGn-B*ruf'aIQ8K9'XeTLq%\QR -%rAoJ`d!s8k_'`t[^8cE2s7ZHdY:KWm:T*KG(jDP96D\b,GW+"%35Yd_i__q,Q93JhoVZ9*CZ+N?[%)[XAb]cnXE<F!DH^lEm/IJm -%B)gukDoe`HF&"\Po\1[B*<Z%]=i;W%".PA_(0$TGb?.:I3i^5Keq9n,(P;M7:6It>p_e?cDo?_T7&\,@<=mBJh8\PP-&D8ek`,Ld -%qqJ?):@)BC0G+?KFIL7.:!LVC"5#BbcEH77j%f$:AVj_._K(CeP-L400A3MP])Vk?lhra0WfZh!i*C&h(q=lWZI:/e>\'Y#X-HM1 -%)8L+Q5A*f3F2WMSmF'nNI4_.##2p#%dTi72[BcZm?t8;BpGbO4V'pu3";P/+VA!6h39/c?kA$(9":jJ%2S&1GK@gs*ANN&RZA+k/ -%^Yf&Lnt/hq,c]*men"@JgIm*o/`M2G=_4(5etarGj04D^W9*(XZ]9^OEaWNYZ\V%Sk^\JO2aK157pa^]rJ,lia,ZuYh.>?k%7X[t -%?f1lAo)G!j^a;[m:p"JVQ*DQjeO4LE.p#)Zg]p"%Jf[P.`e\DS\KN8CF;df&,HeE.OLmJFT0jra,).Z,#-`L0Ce(Q2o&)6H`7O=i -%7iW$!oD02J#:=Af%@6_.B4+R3\`oN2[F3L0LFWUa<6B7?;Yid\'ST)eI1?1D?m^o+/b<0D@2FMe(3Be$OZZt?23Ml-+["T*I"Zt< -%9*#DqLjZG-W9LN\-.<S/omTQWP78L[/M:9_hT(o8iEb<G$9`02^'7Z'M29!q#m+"<\,G&7DttFhkOSAc-(;^D9WIERQ%;=9\FT1U -%JJa`/9?83DQ(k/\UVd*A>uLNPLq\uOmQFGK*aH8NU!MZf`DoM@BG)4@SK@QP_tOEmTLGeGbA*qEQB_eca%FrX5f-.e<HspN-1o#s -%OhY]XVB1(AYUU$*M70hSDIX1$S-b7M*QhW,E_X")0k('+`HO9nd*F!E9!ELjnm'BmO17&$NhL&BEV"i.a(F(GNJuN<?4Dl]e,qA4 -%]34\5Xf88h27+X[k<Hh1@tU0l&APm>CX<_=/1a!K>E$XBj#V36SdJR:%6Pa)iit-d]AA&RO;bSSm#,?g7h"GW]VYLB!M;0ZY$C[K -%F9&hF\Lp>fJ3MhVO*>sV+@72Fk\Luo1D2Z@;P=8l:TsN2Fu&jo(^$:&o_%Qs`^OPK(*GF.?kNU4T[/OBK**((`kM_d<"+_:mA4]@ -%0ipJEnhh2<$_XgPKI:o$NYs\G:_Fq)r"lY\`3sRnO0E^_W3jVPB6U3F+aY$s"/)]+[k!4!-EHt]h@pag&%e4A:?PY4kEiZ*NGU,e -%(esb@737>!o'#eqZ[l\$aCKoR1-h8jk#ItqVFTlL0FH)kVc\sa^h[o]cFsKq?pkE`r\HUKPmI27a4D^OjR'1adF-R>b(lp/We$>C -%:[T6&P6^[V?%3=o+o4WRph37?]H0CN,eHB-9sUd(%.5GKHlH;las-E=/-O69]HiQ)HjdK@9]5(oeeo[B6EC2LhtM51%uhLXE$"Fl -%+##.p-"[Jr-E##.I-(NcK:Xk]o[c2\jO:cu0g*=\d?NK3O)TTnf.[Eop7VdEl+i)X$J551mlrVc=BkqWZ7K%blrH@uoM4'AGP+3L -%St*lU#<E?_RDq"Fm.WBO-D@+M+/+t+bC%(;k%ddY0iRE$5r,f:Q@t[`EAO4$g0,cFZ:]DtME+Q<72\?qMT^rL/%b2+iBW>T/,9,_ -%?WE/.Uji\,i1SQum?cFP?"-=*?_m1V,LMF?`Lc)J8g.L\k82kYVeSnIk(dY+@sFejaMKs;)W:lI<?jW;U;H]Wk_ekB0fo/r',1L8 -%^Zk`\YKPIm.YfggY*Y@@5_0PBA')BE"<bQ3.p\o[VK2aW4NC$/Z384.c/"mAptUh')PS:jX)-no)I94!(KimJZI$4NK,3bOOtWiM -%p`6k35EFkhbK4BNmlKMj.UBoOdLdp<<`[R3(8)eT+mPnpiaTQQFe&?\R!A+M%4\>?q4q_U^-U5^\:,L&ppQ2d9Mn_a,hEL#.#_KW -%;nH$]h1rZjg;1)ZA5$[#Ma+5Mae5geFa9Pa*nfmtXra4iBtDG=IV+O*%dI9ghK46(].SR"M&<R&?aG(gE6'V+jXF<JWp(YX-#plI -%0AopU$5bu2>h@$;h_od`Y=2Ku'>I@rX0`P>#KT\qe-R)'!m;Y[mAfN/9e2P#VRq\A;W'I!)91Gq9+]V;Sa56*-=_h#W0*;UEJ6Qf -%FM]/c`T!hb+Kf2jXlT<A+<Cn@@u/<^6&1bF<g]@uM/L@[M=?\nqjm6q!<o9arJ\oJ7"j)$9>)nc(VuGh>*rseddI88(ELb!n3]N= -%&RrmU")]NZc32NQ!fJFp@.aqEX88Lu[7@T@#@8@na@X7cbb']\;DkL4_n[A#:)Cl_Ic1=5o64K)_2KstV!dhFPe;7_#Y@H<$Z8M@ -%%qbD+_ub'lZBHFi6PqC#)CI,^g<IN9Dl_5R-Pp_D5uH97GU,uGF(Km"K%l%9AUoCGcKJU(/QO:8-8GZP_;To(BG.'f16R18jutie -%<qo%DT_#ImijDVNDC@uj3MSjdU`O2WbJliP;VCNWa'i@1B>Ps-:!nq`W*mK9:\*EgY=8UM<GqsmnM_cFIm6;,KFLuodQK/SWn_IZ -%YC0oVCGm#q,OU%mFEpcX;p7BP2t":0TiGL4$<)K;">S73\\E%Or;f0jTZrL><eCG+,ipqgd]UBN#Z^_nVK8QV70bm_%DM$WfYAd> -%A0[&AggY`PekSgOTVu6#YB*Pg2Q$V*5]F)$1q)-@*i=6f=@Z#!-c6QM6!9T1&6P)dI!i*JSG8"2q4X*Y^jZb==.>bR/L!-+ndPVc -%9[!ou3.7O?VE0ZeNO^V-QSM'hk`%M"ghKHs!`hj22aQX]0m("=Gd7Gd$4AY2b:jh^Y]UVF/j%aQ`GXG^U]`S0_.Lm[+CBCmU&)Z+ -%YA3i$,R-Z6jVd2LS-K.Z.RkV)QpuU)OFA,GS$Y6Ua:d)^0k(:-IEp9:UAY_S`U'G"#_A(:DNo4d8TJU6""nY^H0lU&,npL5L!DO- -%.p]k';nakYVYeU&<.c$)Gp/Z<Q\i>?C#>o4SErnc%tH0Ii$BY<*)/@-/@BphN:dr=:inMtUf')\`YTunL,^[`H,Q;Dk/LP="IG*0 -%YJm>JDk!gGX])4I`8h\Ckp]'a6kNo4gE<uD3JNp_M]*l@[.d(.73!djXk[o\J7*-MRT#%Vl%R=%FPhq"^eXb(Mcp#CQR@6O9d=*- -%/3L<3*0MH38MVYrO9f)?Yen:_Dh/5V:kgZP+Y+4`$/@%Sndr4Q&r9qQm>m5VDTuK+.H'-_(iF%",a;>3]8$opdS:K@FCih7C+kXl -%$\H&M_n_d;eg<u-!hbrR&<(J<>QFU87R^9$Y>HUuFCr51R@'=d))R"lmqPprheK/;<U!I#@d>:-!l+-p(Aq"*&h<I5&QbN@Y&.GK -%nM9&^K?NQOWLD*ZL_&`-'>K9#bYXXJ^d)?e;&;f3,dK6`fcnZk085!EOc&7mE`0t)O#%_jft;C53,;AG/cF$L'PCEBA0Oi<YUW%! -%J6=1H)>TgWEE*$+-8nXb@+GBJSFlQI`d.rt#j=t+S8:mQE5I'3XtIF[Z&4*"cUT1`1!/cPOCpLT,`>sOPnMO2!&1>o6u?A1hn`D< -%(n+aH?M0t>LiS#XQ5C\`rlYWkfbIs1\4?5JB,A^p9eKNh,LY5=NsD:%E?FPoP"LTf\+T$l[1?/t!_'Y-o9:_P>3miBUUoMTUff+D -%M:.X'$X!"LES1rNJ=\+^3Rk"q:U?Go.E+'4&jU1u1F53*m^$faJZZX$p=[>H"2U%t.HkOFW@Kisb7G$NT3ksmH;K(A9_8IO*_T/L -%(?#UoQ"ojLCuEI%V'Cn_IQQ@Q2RM37X7U4dAlt#r>g_F5HOD*uJh?MC.Od!bQDZZ;5pARJA(ZmbY].T)!Td^0aQ;GC5l]lO":!Ea -%m_'>e+QIF@mq=*$;M^R,8e;*IA?rLSaKpsd7n_@f/PW$>8ntF]ZHK_-<)(@DKK*KtR+''?.K-L@;!M=EArK=B&$@qAU(ha+4tZFC -%YC`!=p#^-T/jAlk(6`h=a6ctsrC2)V=hIK6G#)ohfo505(c4#TC`tCYpm?3gF0%'NOegk9lL?/.'>=;kpBPQ]_\sob#[[Z:^7YAh -%rZ<'GAn!NR@VleN+Q,#K>Bk)>Qj6h4H/=P)>Rl=.R%U1=WP0#oY<L2'(*$9'[7uJ&9QC(]M1DW-\a=jR;6]`'1Ml/]!-GL4/0l8U -%>*-`>I$]2"dEZPr&H,oHR]-%;j;#2)VH@7tD3J74T@Y6\N2DY\B&,X?C^*u#kUu`L\en'cf3@DZ@n<-$8b:GMY4@b9B1[*;.++]Z -%(g*^?JJ82YWoa4CODJ_K\pPZa>o\k+#=ZV1LQ2<S^/KHE1cY`2'Nqq;LnRuI#"JiWZlVo*fHg0TOXVeq7216=Q,Srl>=/JKU)l#[ -%o-Bu(oI4p<4%To4"ClrHe5@>@b6B1X**e*Bf9:h=Wig,8EmdN4SfUmYGt*@J..M;/Zt!"B%KfF_3f]P/,#e."3MJpm09>RA'Vc,# -%A[[I4Xbe/B(4M/pWp\r+hOosY=@">;eYF8D&U,$b<^JJlg#n@U[@;`Ka_"!r/ul$Anktno)JJ4*PL*1soCHEUX%ml.R4KW;5YhjV -%"/iHV\jY@@kfpJM[>U$0rY72kcb[=h010)Y\F1KJ>M+c"/a5>(`D!oAhPTV\<g#3JgUM5X0&_,b2,/nJ.:W2o#,`WP$ibNU@fSL) -%-"^`^B9k"+odTQLROZMFS6IT#d.RL!I4T5;aP#MV"f9'mojJe*n[Wb[eK-0VA@]q)\DLnV+^$'CVS][Yp+i8F/,LVBq`I8U<Ac:J -%^pdea`"H3`f54#\7s2GM4e1X9?>YjKKn'GZQGF17[WWY2:uak<Egb=tp0t5Agr_WE2Zm3tZ,O]1RSl_M<a)@MBI!<Gh.g,?"@bsK -%h/h@i;nnQA>&'=7=*PQ5S(j7jjPo5&D_XLqCbR@7JDH^JWi^nn4*M+g!a)Zl%hJb:nZ`56NM2W\.h*%0`4*^r:X\(n@kb&m(_LNe -%MGffIcr#B*"e%>L#,=ck%Ftt2!X2Pg$k_M07(?9]q&]:2<,P,d[hBLC:/)7bdgetePjsp+'hFZb>?R"n[#dfl-,Fo:<>\Tj,;3aj -%:2IA]ZkPk9lu<`K<tTBWg1Z;UQC6`K.5jQ/H6<ZOg'D.Je4Hp>TcfDj+dcfK1Wum,gP@g"4!30)fEPm7`5;?lo%TB[[+2T6;-D0Q -%>;`a[+qfNuLY-X*+Ghukd6MMW)DDl7co0QFZ$Q5SOH+1s6Xid[&/Y)W!aUY[@VUK0U+Np7_cAnQZDCa1\`C.C&K?As+utY3=tmHI -%GugCi]fS&sT*'P->/aFa/gnc_Kp<@t<tUugpe4(LW,W<4ZAVTZgK^PnWmf]//O30pMr"2,j=!c)K/JOuD2>bA[,>=SL6`gn$bHH> -%@QSQW6)t,r]7tb_dRIHPN/'Q05U/XNb>P\#"ZD!R'5,h)ki\Vrk"$q9fH+"8YZ@QU8GH+qE+pQE(:Iu'5*LD]p_OMjFatjm`&kn9 -%Q^tK8k"5a1D3qE2,T<+r>p4&GZH3&4h#]W,aQ]e+e#OeVP\*uTTXeZ/(/Oh1&=[,1((Mtr#?kM6Pa*dOr\EcJa\GB;1(D"K0,2up -%Zk%;,MY#>d$aZ^q+b+a+JA%>MQ@rncZ"p(.1$(H3LFuL.jLDRA3_eGnb=,M]MU;`D])6@rG`fpg;nndag`4J36TV3&S!iTt[US4i -%;!QOWXt_[c<(a';%Jb/+&ruT6C8Bb=_HPLp.#9_&&pT$3>0TeE[Us$WKfPJ4,cde*/l!8"<cR-9V8\8lHHX>$9'6Xu0^-5(gSSdg -%J5`d.29S/j,eK0."=b$]=L5%;8u1GMN5[,IZQa''4AaJF:Z\:AK79;?XO:*:_.2SB=`'(g0\qX#(H2e\,esuD<`D39hOqi)4s]dA -%4LO-Q#?Rm!77)%Y*`3Jj$I>rfC'kY-gm3>,'a1t>&(W:rDU.mba8cHfZdC'81G5M+l'*$h%d-dW.m3Bo,CZ1KX<Q+^d0jYi>=t/O -%eBC.8!(ZJ63Z:^:$&MIKG"bPjG9skE;qh_,>)"$Ejj[A:J/OAUA59C/-YX>Hd^%6"/!ben+TUecM>N\Y[L/nu6!'?9;_51BlL3b> -%i&I3D4Ci(IS>`g9%7*;@kC?ne!3>/k\MD<1;GfEH3t*!&nmO,$1i4[9bTO5tl%5NaARocF-i'Cq(:BjW70pV)<1Y3;M'=)_Gas65 -%53<b"4^`DLLZ1FgM69boR[&SB_ZCKkq?ldVkRJqPgj+7n4/h:DYf?9_`30i"<SSpOKX>bO.:`c^ZpOa,#KSY$'f`mC.3A*=fATFg -%Pj@"g^kL2Td9l&^^p-9A'&M`V-ZIu%`[;:GVtqXI4?WH$E]>?0i,?K$E.OZCSAZ:>8#f=NmDQKX7j;'m@ZnNDLC#,tU6a<\J7#56 -%5h=T_HS,?W@\D9"79WF5:6m=2:8eqDhuM\138cM+^`#q(2A<M#fN_8NEl2dWVqErk&=S<BL$q>2&T0"Q\HADmGo%d'_>NuZ`DHI8 -%Olpa$2FP<\W*+&MN?\.KQ^0(-/<?tB<V%4$Mp,;u4[[FY@3cPFE;5!0Qcc4aV1+"-Co#%>Y`"PWa"hCF5gI1ni_;Gf@5t]Xj=_l@ -%Ig(C*Q,c/!-`_EG1dNhB_+=4QSP#i52oJVP8L<%:p=es)_JDkU;2fUAFA"3?lC3h8^Wf_D/e"e&$BRN'PQdJQnl":hX/R(<:]Asl -%a_bsi5ThjLPu2$3LDo?U;cM,U.[L8aIoQ5FirOAX2(+V2S)ZuMB#l8Ta<o[/oK],'-psm;!f@2QMBt\Pr!:YTAEAC)r]L2toui:/ -%61^XC?%Q0a`sq[>ckBj7d<(.V:Y$PKUa*4J8W/!8:P"n71uVcgUBAnE$:>9m(n@o83-S#:`%ur2_pO$%0Fmc)':NZ'^%Rgg+A+]3 -%5c!M"0PosRJes.@%[6El5)?d?h1/%(Nac21k@oIUWN0I\A&u(^E<'S`%c;*&(3c[oVs(Hp\1-[2;gj6a4gN<,o,s'JN&q(db&r*e -%#"Sf*`7,GV":4`:15`:Ub*_]m2u@(M&lJ!gll")nEl4Uh#oH9:%Tcl<\hMdUdqET!)f.MM@7F*K(p/VXpRK?b%1a,bc!jQI"lSi# -%D$-8fDUbbV(75Rc(mkqmNc%P6/=-iA:U1FVD)149REM;l:Z2f%_A^-Wm1aOP1u/u2M52U,;oP5l44rAd*K)g(l6IQ<f%CI)`t^ap -%aPrlU/L\7r#&@I_9OrmV$KU)JZLlCYpoe^@ckZ.>]t:od%7dLCS5HM?0D$KM$+$#:J?b0M_k(0Xe/;IL7sJMmq\R?goW/IVAB;0' -%*:u8;1J.M"XXePMQ`>Bj)K@U+j[<7Hm]q=D\Jh#u<0t4rHk&XZUZe-bp>^q/]h]$Kc#$=V:X@Dh[,m[a`d%a^'UFA=O.D-CY?Qa' -%3dGGg!B`3@:4hL4[iHd+&nRsYbe\>)JY9SJjeAW>i&m3fXns)N/-%pZX#LRDVS$tb%LuVOpEnTAdFlEdhr<cM-_-m=KJ6uID4Zoe -%NCdm1lI,m>P$M+>sZ\a:_,e"Va>Ft9j3l[[V-<Qf02E*#he3R962YL[P=\-Xi.cU:;,2H)JB&Q6!<q=]UlP,KsP$Qq:oq]biM -%9Aff??cXsD,ZgnT8q@Q@/dOcV2V]nJ:#Sb`:8":nVfT\:']EbV[tucpgj4u@4WBDFf$*^OHVr0/L+I44LT?%F)TM6].tLVnfu).` -%fGmJC,pFjq_:)(YNcd65,d!GX50ma`jk<ZPXRD)7ZRnI&0jOLtYT1s&hA'RD6Th'5RdAhh#ii+j7p_7k(\^'(.Sg_j9nGZe)./b& -%HekRZc,>%6hK@u?H$j'gA3&).VKkkUF;,\15-p6.#+&mpoea)%H5.utlcH67_uRs]jaA1ik.48Q#_uR$D*#6i3;L?4dPIpad**ab -%U[te-[2bhJMW(9']j>>"C=e(X1VZ)ns#))+eQP*0Ys2_6g8t^ba*h$"2u`4r;H1jrFqa!dKG8^T/ilKb:f-u*G9DHrF.l_r3r2^K -%,_;a0XuT#]T4bIh.NE-mZYE<k[]T6ACdp0<A0k#k>6#bpc)WVJjnRl9^i2aXdK%H&8N#:.W7=")n1m5ZII<csCg+KSPI1kS%[Sm9 -%7Q:CP)4e\WCo`8L,3aXT!oZ(+9n@,Sc`e^a%9+rbIB$0d>2bMg4)$^BGrX^-C5$Is,-pJ[[`R/.O's7Omb-If'OJ&Rj3Cu;3Ha\` -%5B1J,&oBCo."73TD5N8V$^K$QM[&i(?O*_W3\M&_/;_`9ZlMU\?l(C+q&#)ghlt$'((0=E_bhQe/"CZ7>Mr]>d('J#p"L][*%O_h -%I#>rb]?S@0DQ6+ACik;rh;G.<$s-(U6"1SW"g:N0FJgj5mUA%;LAs/KL=;gGf]pLn<9'j:ZP<:ZY:V_th'EDq.%Bt/>OMn2!_hA$ -%i%rTjh57B)CDhlq:J\!i@,`PkeB6J\/M.LEH,Xh1rNL"`,16p=TrtAb&`T#dF!`+>qN,KL:/JuJFB!5Aq?Hp;s4\e;Ho3IjZ.(OB -%].kB0]9(=8W2U3K/("f7g(l$8?J%7*:t-T\KpkoM!s%\b*LES=8iWL2`k:sumoMX2MI5-/E?V\.>/Tj5OT7aJ#u:tJJpkFHokAR^ -%oM"F@6ilT[#7S1>YrB8%*en*):BS7(WcdnF_U7XW\0?1<E(L+c6d?3X)0ZGE(J-<NW\3=>lQRh\q*a;tg?-L7`9,IUf2`\Tl.r+" -%O"DT%4lKugX=Z7T^tW%ZfiUZLg!H>P5;8hNl"9c\&ouY!#H&$;/NiI[V=:rhV/W&Zs7c.(VM7l?[:\,tK95Gr1g;WUWADC2%'a8V -%GV%NS9K5DD(7+41_]r.aE$^eZIqNC?c%d"H_e;Y+Nr[R`:PpC?`B"go0EnYfi[J(BQPR&@2anXJ*oZYLX@&I<KAXMO:X;"oqD?"B -%F;ktM)Ue]>j@mXcqF<.VEgo*g2,4*E*Eus=)-%CuYn1^rSu>85i>Wp+SlN#*Y4UHDLAo'^6-ucNfc"=ADCSnGWb0d?[M9,6otWHh -%["!2).VmStA51>":C<0J%',p8h58emrgVf2H'siM]"L?qd7l2\#_7.YPaehe0;\o:;-@^WdghKgo3#O*?tR[k!6gB2aTEZZa1YuH -%``J[(>=m[+^iIO"E0LDKC5`EG(_uP1.GEs%L=Z,nWt&#$a3T9YN&oc)"\m!!m<4-obI!Q6CmK.:NWkc2ZM/Pf^!59)Q@W$E^B>Ya -%)]-&XBsFXK=TR;0B[$os(Sm0)])AeNaI_[*k6S_&=ntS]O41\2=f=#lI&!X4A=3Q9M3?tN%g($57$19S%<b%Z$LLhA.0=],T5@n@ -%$Looqhr.031.\D`;[J:=`7?4*=q%*3%I\ZR/>t%hi@d:+:$ld*#f*,?_CsCEP,:u@SPA_"S+q%*bcSYo/di:T^M@PH8SYcMFnYhp -%S]$7Ng38?X,Rj$X'O@F`$OSpJ0&/>7K%8)`]\T\d[o/mO]^.oRB:G6'1O^Z?mm.5Tl!K4'h/Mlpa#0OSJEb)N6I;G]4Jl$Ndn6f! -%J9V@p*+%G:?\_Z)-)A#Hr/?*Ch,>TDb97BpiVfp%8O*<./(CdeG%AL5+6qOQD(eL:+5$E^@E6>:j;^M/V;$cV&gX$iWfEDtOtMtj -%XO0M'V"dX4G4@E.cNlTc0!7Y+,Nj%$1i.^s75%*B/HfFh7P+CfLR$_.$+K"X!XEN,ZI',r)ibbg&Q-5,J3pJI'$+oH;:,:0<=+U6 -%4;[o7/;^092[(D-]*,kUlc*#-n\*.T%Q>lM=4D5@I7!@ElY,2We6ML@fH8E()ZTm25/]kg&Nc:T1o[AtTdd"WV:gp<E"OuT?5SQ0 -%,^=<-^sc,`Ef##HZ[mA2=tBZ()Y+kBF[iL91,N`6/6-?%cH$'UoPRE0!oPM[g(+Su&3P")bKA(;).U\>`f7/9AMt<Mr[MEN'g4PW -%,,-?@9LdIH5fTEc)+P&6+FruPS$jYDB55shjm&m>3>F:*=8F.KH8fRgn`rM;$L*T0XPD8sD\J/crLjpUG9[J0n.=Lf!V;.".83#] -%Ba/r-:*.?`\3>AnZD?[lZ8*Q?!9>$YA)62jYV)%!kTL5t``J$G)<dD$`X"T?B(0*AgO^uZ73:.I%X8h6lAcbPBA1sr_soP"F`AM^ -%*6sj1ie`F-D9PX/Ki`H1n[>##Y3rAam;Ai2=\1^\,9cB<SF?NuBe%ku?*^PnKG#/=#>F)W&VJLa^M@DDh[u9'paf(k*JAbV!R7*& -%ra>?;2l["a/MDZg@6&A4#^3^QKLEt8OChkMS&]0rQ<.l"9G1[A(R#I="KlA(O]$RP!qAQk;84[cgNiL\dGnr9\!]n)c*:/344Vb> -%)5s\GU.GLA!3Hs+ZOK;BbL/[)Z_<W\].?GV#I"jcY[7.<Dpb,1,nE3gC`?`[_WWXg(aD-^:/<FAqB5)l/=m1;M4#([#9`%$B^9\) -%`6Y7*Q$<^q<W_=bTFku*dc0'uL=b0H_%[30d11Etb=4-`Rs9mV>"uOdS!H8;0OHmB/VAn-Urepe9FteH1X"a_+%dSp*6ZWA+**]^ -%>5&nfC#^_or>&[&))2k\:BCHeQ'iG,65EQNMi3;+D7ig-ZY`>^ZM9j!FY[s]UmV7F<8#aL,QRHJp3aM*[,-mI_Q<kBe'gj+F.h7s -%j27rf2D1c1W67O.]t6mgJ/c#=,s#0!Rf"eeTtlI(@hsDHF7j^1C##T?3K+naED,1-@LG[\]XB%g9^;I4Kn\?Kj)(Z$Kb9%h8Gl.K -%<B3)&4$KbXN0nX:fO1K_A(=>6,Mj2XA6:abMBh>!UUQZ>m>Ak2l2pcc5qtroL+BV2H35LMU^5,9;!Gq.N/0%L5(hgE+[p3Bn5^2a -%@!=OeNSAU<KlQ-'TXpu>2>dJ#@"JDt3@[FgFnnRYq3fP6<D1_.)kUtNqQ]RU-"cgN`IeOt+XS$R:R`a"TO;uV.s4)bF-"4*]O*"3 -%RnUeB4BdWRbA:@T#]Q4V)Z[(nX->=Ii.9O[L_m(&)h<Aa+0Kr2Q<_]&Y*XVPbVBhLQM!2:%UkkhJ8>cijH`N19lLY_m9&PAgP)Qo -%OpT_8BZ&77NGhM40"!#-<.Nn/Q?,sRSf>f4i`3IaH<C'HoYJ6MoJYAp0l^34R_clE/SF1#$`/hO+-jdY5SG9L^4g4p>t39`2%6r% -%cq.;q`.hij'S_UN\CGa?EJouZFELen%6cFtI4%bC0_nP-11bj1SLei2^,+i6_M^c9)KoYs-s[,rG"68o8kqCQW/9P0L:nJght+*t -%@&ZOd&;*\LhumkPr%"+mO@Uo]iDaIl4:iG1]0fLB6K!!][K=(Y+%8<ol%jg/!?feuS&SO08q"4N&>HHe*dOk5%:49h70c+Y[56P# -%fJF>8D,]l,o,[FUUL.t:_3U#mXSZAYW*-P'&j!]SINg?F@._o;Dc=*"Lqbhp.YDQ).-k'4A&>DKcZd`c@pUNH6h8'dbOM]u/]e6@ -%$\#NN?e7N'PQ.Gu!tlt^;F[i6p*7kpRoIPW]`.mp(Xj^79X);CV_hG"1IEk<8DkEf<S21]"!6CDe1572fQY\A3=;KiJprXBfZ=]5 -%BpWZ;&ZK%&Wu$Air)BbcmNnZ^<'rV<QB!'LF:NJgn&mUpS`c<(@)OmE`?!)uFj&QWK,b4r=(.TdScC^@>:@*%>4fudhe#[+"pG9: -%[2/0Ba[.C]F7@ct`SAfC.okEp`@GT1+M:(f46Znm*<G^V*&5u^$1SbSnPkq9=:"/VWE+22Ln`M<G99k5D>AsDGgM5&(qnF1I<AWp -%l"9#U-'@s>l.Z=heb7YN<92I4'f9E*[-*9MXt')G'9SW3'Wm([VE%c28ErVEW2Y<4"<)Ar5,T`!.(b]Pf>Y-`i>.et=]C`n-;.U@ -%lR"EcJUX##$&]__d<&^*BQB43Ih(s//H#)Zl)QA41`.%$@OFLpLNS7a13Urb;oQ)#.>4T')KBEZc"2g8Y99(pMS4`Z,%-rbeus't -%5\qq-f!U*P5jBTBZQnP*m.Zidi(K,h3LohcSV$Hpi"',B[@8$%3R"sX8;]Xi*6WBCK5$g[Bh_VEK=iOK?.d2t8^4;kiiY%41E"r1 -%)(6B>[$eJ].,cFt^CpI31_@WN\AWe^;i<$oLmO7TF,u=\*177X[)0GW_\B/0%Nrn,eP,]2EP>$iOpI9d(0NYoYRX+Zb2Khp$j2R% -%-CB4oGRi179h:l#AZ^ob%DNTo8KWb!]Md6B`fV^pN!&+%))DpUIu4.QK)[TdBdghZ"Js^F4=k+^4]j\+]9NoA7f#"Z8D;Rh:(RJ[ -%%[VH`@qUU+;Wj^;@$U!>r*`So2X6/n+K6J.M7a>/`@P:Z@UF*uNd7rC$!iJGS2QNOlfZ$,3AdZ'^5UQ@`]jO5fZ<9]*D*WY"=g[# -%`]UqAK706:PCR4VT,Q1q@3t<8d(0<@+5;[1TPX0KA0ps0raij$i<K)HV.TnI;A)4M'V22hFjn)PWs+@30+BWB]2c*V+#DGSAPfF[ -%og=?BhDKE$n1_^qoB7e6,(CKtgZ7/;l:%=F0:/**>7++-;HDe'K&[1om4#k"))>Rs[TGR9Dr)8W_[3m<*D"$/;G+$*Z8uTl9NRMB -%9*HoI.9);gR&Mg&nms,B]8o30rbf,[2L2Q)-pS$;U_Fo'I@4]B[P)BKka@#i(Hh=PFO=o)buRFaYnSuY3hM/)6[>(M#;m'5+]i[W -%(28J+2iQfPic&i-^6Wa7Qk#TD.OKH`GIbtq*9<HKnm.B[$@dkT;[R[_Ha1)KbEc\Xf3mLubGYSq,VIg><kbY'b!9qBnCM0_M68^7 -%+V]!#Z4\nFItbB$3DYOK%qL]t>(&8>(:5H7o6$b0NfhDpe@fZI?,t9WVR;Pt)ET!03eU1khZ\-'Ca+uL_*lKUq9)=dVS+D(JSGO\ -%3J521_UuQ.5B_rg.[jd=E+s6ElI8Hk,&Z-<[n/T$.H:mj&eDbC_?3;BA6>i"8#bD)Z]'KYE!M,2qMpi2G5/A+IFk7FMl6erRnM`` -%$rO7@7^ErRIC*ok=AmdR,X^M%L7)/<7N4'l%eA:(T&%VXl#`8[NZ^)Q7N<#idS?*=iRb]1UM2&I4-$qUZ278%!R"@IKMOHY]+'&R -%$m4nL.U0Hr,8l%_%6mP;;9%FEB'CTlI1>me5)P[SS=lR9\BoX<3Kau^8"-C[E?',DAL-iAr8h3VeZrX8&[s?W3)O<mEgGno9Prs& -%,H=_h3',t<K"Z>57\bs/P)*I'=p!Y&$"-.]pgLR>$u's`ps#C?rV,([DZ^[hfn@*50b:Z^.)<AEY++Ka'E69GbVb(3W6SlodWE?n -%'GSMLLgc4RUP(ng]$e2I%eCGdf%j/"%gQFO)[@p,q-ff8EotaThJ2>`<a8W+)@Il&/"YOOqDLhHl>#/Vq\!1&((b_$>a99"6-7!M -%)3Me=kCu'[\ua+c&VQ0eU=M_W?ogkdMcCW>!-mI1<Ah$*2`KM.>EtZsVSb'%b<$g;l$A=2;5Js@!IFcKmsq,N`R[djLu9*M&O)ON -%&kX7kXMmqhnS:RESI;u,A;C'pk(2bpL^F3=Y+M)t&oW=R\YhIfn,L$&"&AAc"bXI#JOC*7TE%Dc2*1usXi/pr/BDsK2+Y>oUVdm< -%I2^s=0uVaD6/a8G*/HM("e1D<M8SLeAB@#75EA\YatVbHB``eMF2"m$n[!&r&XG:oU/mV'd?b@:REMMJ*3d<q/3YU71EG+ign5Si -%1%kQm8qoLRG'"/,CjVY7T0\-/6;Y<-9X2A"QGWC93O;un_o2[r2ld`^L;D-n'JbB:M`G'/jKpcnPRE=>RCYikKED6cBA?1R3@Ddl -%'%O/%Y[@ss5]u5QF1tfkj(GmcflbsO+G(,(,g&S\mAmW2!+r6rU#\VGW>P,$UfSWJ\g.4+PL9X+_&qN5+o&A1D,,Na*Y&c(i8.4+ -%1E:!KAZlP,;1Gle(f\Ag&_n+Y]BkhTdCHAOK4ATb]Mg.+;hD=1R,:^F^lBo+Y\10o_R"R-*!WMXC6Jdhb$AI0b!4T)D!siF&5-HA -%D%W*>Mam6i>]JUG$Kd=CLsAr]('0+2/nsR'k9Eo\OY]8<E$8p*VIOc7'<hGNT#)8j!XM5DHVVOs$@b<"G/5ddV+PkR;^\J@b(k!' -%G'>k.Y@14SB#;)cH$@VHMVSig]%`Inbc1`PiWLLVccR]&;^\K1Q$=Hloe@\ok\ZJ)bTJ%'a:+_S!H@_VN"at)rm?J;^95S.MIGt^ -%X#oj!:'/+T6V3L<oA;,O2BefqlHR4X-taq'Lg0`'-g2To0EDiP&r[%p+4DU^o$AS+9Z8l=rrSn\>+<`>2eB_.1qH"0+?t%R6^,Z0 -%MUF(r7d"Fij\_RCTu7="a!)cMS3hOVnF+8c!o<s'.LH_>U"ee^G-O2V$<[feDA5PfDA?([>Fkc@Nadt\o86SIF8%U/Q-RFG?9HQ- -%dPsTGNL2NW,p`@fA#BB[,\DI#,$19@X4[=RaFM\Kd+6-mq-Qp-Q2400^!1%FDR9*?::$oL#=lYZ;Y\Yhmnls<:gW3iZD_qKP/qff -%?'cqu)`_4]!psOs+<3(pV/QJYM\uX+#bo@9$m]%(Q%/ouil7?Q`kmqhm-I(5P[^WiU\S;nLhVi3KW(E0IeECp;1.#O,(G7pbdto` -%rN!(QS%o7Q38:AU[Od#65o0ru&dTUK=b`G$FI`=pArqNDk+B.dmZVX[^n9#I71mF8F1^U3fcpT%J6SMe!EauOM"Dp&d9Nb"'F)4] -%Ui\?l#<]pq9p#s)n7q$$juF]iSOm@TT+Y4U<5:-L,\9^\%V$)pLIcllpeO#-/4#A(Q4lM(:e4"FR.P$+p_phfIQ"!9'_$%2@9JSA -%%'uq5mQrpe1b&I)7cGl<HIG%]AL=W+p#=VmV@Y.<T;Dc!MSM?tbQiYGF]FI1'mq?23W?5r:;RLb4KJ3e9irSAISAPO>W+R>:e+fH -%lj.h\-6l3D%"&;2SOFn6U,&n8/qZ2K@)J^mfa)N@FG..O!3?1-"-1dMVk8RIPY@:/ak2@_,5u7L2S\7PF;jEPG0]4pfB4Hs\S\0: -%dcPfc`Ffs3m%p8F%<XZRBZ.0k,:R8JcSpmaF;UaA4&`8@-PAJG!#KF^^d6>"e8lA+KF\LQN=)L&+O(A&U00sd;FjUlE6]>&&0!") -%R/YHnfRf$!!VV+J/l)%h?aKGa+hq<IgM0"K>PloRS3$AM$eWFbH+*-;=&W2=*N[U=Fe:=R^m:E@f9EL"I&LHn$Ll;bV"bX+fc`da -%2D\s7hs&i;eR,R4kWddu`$Z@F/Ib>Z1#K%bk@Ybi\Xg'-5O6J*bUA(Oe"WYc^nSPnAraG^2)*C38D,N`.lTW<'_1\i;lsq;%05;n -%AG<5:'6Jn91\bI]I<Hk3)]mTFXj(@E?5=0pb"Hqs)IuSG*-J-#,]&A>.$Lp"TPCRVob3<]*1.o:+CX+"gld>%9k==0Y=&:)TJLcR -%D)%'EnY.M-@ILMbQ=Umea5V$rGiU_sd?K,;;*9"5Z]LJ%q*nFL-pGKsW9NY@rN)LE$)d![J!eIudmFC`\i0VL)`lL0[c+C.3B^&b -%f#;(LeM$:"AL-#`^;N;H^o]NoWb`pPVc`35Z<cVaAqu\5NUJ<B>PfOW?C#B8i^utK]j"&K#;3h\<@C/+"fJ@6A4$\_(Pc$LNb:ed -%Go?H;X?eKhHp5tYR_sm6\u+b3[$p/<V3TQ3.P0L3A/_hsc2C-GPu2LR2hmP12HWgKR)a5pc=RcN9urrLq7#FT)@Yfmr>$1PZ`[:l -%;FD>+ebM$2*&d?^7&:*<_Z'bXn8o/7X73HYg/*MJ3'a<[pZn"jQegTiKdfKoV82=U:N$V"fORusVZEXs9UOp&AM_s?=a<@ldjRi\ -%ZjUAZkD=&;W2;IrPc.?gK]2ugmc<0O6CqG6QE[-7+C2-U?rHJqs-2Om#5]k^Q.Z]@0fShkROFH3S,/5^H8SY)@,=+3j1Z?Wi]'0g -%U;A4+h.2A)N#)!jKHEFJ</OWk13\(DX^V&sku+o.=(mW>3.c/+HB<4^9Q(Mo[/J)N@2i6p@0ipI'ja,%l#"+J7?&\\$ufi%EAeN[ -%l2:TO&bS"iHeDsq,`6Xr\2&l0RL2YATd\&r@o%r\DHZ'4GCQk>K9K%ukd&KCZ$ohL0Q(DH&Wn'$`afeD$pDF[Xe7Sf&@4pq[C?qt -%5%C^KPAkt_nn-/g:M0.fR7J?,+nUm[_33eKkFs7W^Hf-S)+F$tRsJg1-U-osUl\hk]2R[??\a"E=FI\7rb%j>B&%[Wdb?fcS-ZW6 -%ST_k<@G(Y#8BuHmT<j:X`-(%]5NPp^<n@H()/:2#Httn'qO!W5"fU\!X/aGt2Dp1MmCAK<m*sNAAd#"j[`gt--VZNei[Rb,r%tq' -%nJR7$]?#>Jf&b(bg8GuDQ:d#<YW/TFKT@sB_6STHdrJ5gUlt54iDhF[GlQ3g_Y>'u/_mnXRi7HG$leQJY-d"?A3[eJaW$FFpG#>@ -%?Jo$nTeqj&&I%2S(rYJ0qD8lt@=q\(<N!HODW!c'`*eHSF,:JDdgY4rGRm_QhSU-?XpZGAQa!m]iF@=I.uoX8`NR5]9.'q#lH03q -%DN"<CfZ8fX2fgS0_TlthO&M(0B1Y>R-B@[d:0`Ta>*;'9CFuQQ\.=sXb9h0p_ASpq-*P,6Ypj?WFr4#V:/gh&XlJ^3:pVXA5M@65 -%e\jD8a@$W1,rJ\Pc.&jXq-t!@:!72qfV859:08;IB6HlKSGGdVB+sC#_(f4;nX$8D_rGCF:f/=3MN+-`!JP/P:VfYpQ%K7]O1V`s -%qeQO."Ao4!=#;RXU.Va@$PEcd$E;&k&/RsKJ86IYZQkq*cM@6*J*9B2M39!,@$s;/R]T5LQ*GH&2Z>*aR`PCMY6tJ'BSeGCiPU%% -%X8c:6+d(HL9Ms=]<i9T8's4nq.B"`K0L4idYO^j1HM5>tVT-W`K8l;&RO"E$E;EFV#CdP:'(!>oiT]AC-]8YBEkr$I:G`Z#A=^LA -%<4:'XTgY9H\skf2@rsYT;GGI`4LB[U*O>*Q(R\![*!.^0"^3kYTLB8AKgVbnl#%::mo>K^"h1TB&^;=/]t3X$:q0c6!((S*j7mG3 -%X,I\KWKI?r7X%FQTEs%.K#+mOklDYI!XF/>%oKW1#>1`#+oI@"]1%_&:^Y(=2?4=ci4I[R8PA)UC37jrIl`tuAW,+f.r0p[;8U0Q -%?2@4KJ]Y[+RWUDIB.<$5YhL`0s071'9L?CF;7=%"XDZLf3K!tf-gDW67jer"T>TMcB84-!6^UuID*e1\Q&11snd.%I'l)f?=.A63 -%KJ*?fkhruG&;`N@e:],9AI:/a81K>;.JDiYk"GAt]?usI%$GB%%69#+h.5jaFOBYtX.]-P2?YJAVXj.g];*lB>%\r.],CR^(ECf% -%#B''#`&8(m`bB)AS,'>JBdX9o<&VYXZOPb>AK'H?'%"^#_#i\V19J\lpiIXP*Qp3-7$6P(JL$/_=Pob4B$H?MO$ngk@/I1<PL3M[ -%S[dF$0XG^W\&4@SB,k2bP(P#A5NX?"IX\@'m_Xoj"tKf*e-m?lm.t;'S#q1A%7#:M>b+MeJ$aDs!4T%GY_<^!?31;p-,D<c%!-XP -%0)_&>rK&^tXTlg^o"[4+[#HEdF[D[6B\*@!PaHp30%m4C=1jp=Xm8M$8fg^]]mQ6[Ms0>AD[.7Rr$'C072C1eUkf9j^o_"uiMGPX -%AE.2V7J%5YkJM=YPOm]N@`:uHQ47/borgPF,^5W0$NcG(ou-bg/<6+UI&C,(<=gHa6R_0fT7H9*67_T/_$j/ILa&cCK>Z]fh-\,Z -%`s7o1O$="#[0-.l]T`^Rfr3uhmG3G8^Y?A!"Psiuc)@3X>$^b[_G@;.jnh^JTjoUJm82%$>Wu(0^r(221ZYZoL'^DhE)8=97/rur -%AJDSZ/@L(k!@p@ghGrjGr_AYlfuLl2BdB_mb5>SK]L1;u#pP/q&Bc_%Hn==#99nDl.OJctBnpM/(1rO(%6U\Z:?F',DKMDC&e?.m -%,Dcj5_HKL=gukRbaaKeRVNQRg.,[X(`tqa#E-`b+XRbQSZEm%Tb*`k(HDd4[*gV8Cj9?q,AC?7J`:K`PdMu-8SV%^h+(Hb=mZ0(c -%`.@b(TN4F)JT>#?iFT8MghWD7>t`kg@e/J$b1L1M9,6HF^E:3Lk;Xo*pn$afa%T<3>HIUI!-4ZQ-!1PN-t=EtO*ju6Qc+;q>W'1? -%:-Gr$j/E6M,J0eC1*flD)LlJ5<U!6LI`?K&=u1:d4m`))<=SDfU#O%CeWN>JVE>rj:D?iPpV`:Pl&VF-ZHp9E'u@?L&N(7.Fn^/3 -%Y]@.3TGi/F/IG(+-SQs,/(i<,$%pbXW)ed(OpA"A6"jbRFqb.]@Cqt++mD\%j6Iibh$4,c]DLrZfT?U8^ebQiR)6j[9O6]HNjb'^ -%Fhf/l.SPR2V4"*))#8$;)&!%#IF<D<qN%HbVF<'g)8,#<=)'t=VjNmDcbF\+@+1'7ZgP"Iq+\sW2@RHuYWGEZ5F4[q<0B5]!kA0B -%gKTRi:'U5(FfN5-"!XTjg!&o/*KsXW`*,K2jo5=M;99U*3AL=Bal?,k$9o*Z;n))>-;qdm?&HDA%WcU],mBeM9O-*+],C6X5*up6 -%n;fUF4V)AV)N+/@%_5QOQD&>Pb`>!.7-*t.>t![FZAk-FY>tbs/8W!HV1Z+KMlr>d:7Y"]ZD173Fa8i=P.)]<+Vt5u$:9MJ=7[]Y -%9@gdY%>SoVWc!ZL,XLr"niB19#"`K"5I0\#8d<PUeB\V\5!fTB!YZrR)&b&oa-QYJ]/AKCD/8Y)/,\EQ/CQ#:eT#=a:O1\/2bW>/ -%-UH0Br^I^_s0T(LeX\qT9',0Z,R`&Ng+^rmd!7s_:0aTX/b;qTP%8DL9t2[R3ab3IJF.Z8R+1O(>CZqM*4'/'k_,cWhV,5aaU\5a -%<`+N-iJK..hNFTN[nh;TnOsnoH6FO:_2FL=\D-Z5PH9#$bgPg!D]hfJ_TA&]g!o_b+tij3qu@r;nSELGa#CU#3)f1_[Da)eW90h& -%&,UC'7iU6r3)mHl/@!jdbd@g5M0VcWS]O#pRhC$I<%&<HAdV-Z'$gSQ>*XD'M`74\9$O(NSk5-hpT'>;MtjqK+*iE;\_s\Hh-7-K -%Hd\;,kY`;:_?Ku1Yl<FE<GuTG+1jDOdTr^%?l2_H7Tn1p*$Ju1bs@=2<TTS'P7c\#j"N-A3Z?^k->=t*d7>EWe_mY#)F$hXqC<`s -%!L+Q5(g)f-D:<:N;hjU-*r+j/Mtp)n5DJn/s1E*:kgh.P'KE0XgoZUhgj*_"&?*_MrmHk*9NWGFZ1/!.!-!VF,])0dmNi!Y-[?f) -%IKOk-`3%$1-*c<*CJm:dA5d.g=U(if4GBdkdT3(=+!^!DM#iO\A-2OAHoJD0QoAZT\<=qr81d0^#e:*YeF8]=(Blnl,)%-u=IYcF -%r`aaRi?]sVs6/'I<'ZRB60/),;7Zm%<'$-*Qtipt_0Z7WR\WcI%?l>$U>udX"rf)&R(uf@G=o>Z5n!k88Q()s$1o5"bre4+PM&6U -%L0D?X%I5IfZG;SaK:G2L?H</O0%\E!pas3VQ@()"LX%I/:R&/a_NP.m%4I+\dYUH9RZ;C?*J\,.V`;U#RX??D.l!79MPR%a)em?< -%%,eieTM:]69\XrSnRe9jSr/8#!9rh(7K([%:Goo%%E!jK[E>Q[Z^lmS0I=Gb#4h-c#h1YLh'.no3\-F,;!HaJ%&6m%PN]eF9TiqK -%ncu+S.Y\U]@gELa--n'f.=HB_=2lA/oQgtc,L8Y^QMD>V0uP9k^$L[T>6?(M5($,0V`W'RT57&8`*"PnY#;-TYFs>E,pV0!Z!=5q -%G)JJfmBKUdL42E_(V]qaT%F]eA/Z@[ZJ7HN6#[f`a,@FD[\71KK7IfX;PC+FbPX*7Rq[>u&1\)+)'RNCL10oiINoJs2@L0"&.&M* -%e-?NeIrnYG;O1Zu.^4pe$mV0LV(Q_[n^su?3QXmO3nf0_!(n5q[9k+@JbU#kR;-cLiOBGj;Q)7$qf8#Z$Lf(Q2*f<;C\9F)Rq[<e -%$?HG2-l2-VCrRNtlOXJ@lYn1I2]G5I2bOah1S#-tr!K02e1L^jNb(_H+kL*X_p-#E4@omC4#Q?rO.ufT's]I5aZr)-ViSdk#b1"b -%7:g"6LOi),".Y'IY,r$*nJp]94?naT'iiIL!aO%1iPc0p(Y([8l)<lR/M?<eLe*h(eX,1==5\\+*9O6e,2ONaJ:nN/PS!3Lmc]2Q -%TD!DV+N@fb.b;C<F9E?DO`%!B0RG#b3?^]q@i-m1;Q]G<OMlSXo4FSd28AER#c0HUhmY&t&U:Cp;T@WaNt[uM=dG.qHm;o*jkYms -%=AB-!]7I6V$E8Y5*35AuoFdU\PV8ZonHhoL/>XO[F=men?0JXUfShQWXsF.9FboY]CQ(4,r$^i1,s?q@."XCIL;?(0oA$(;:;)VO -%mX9"3Xn\W*f(i'AXhs4/Hr6Gb#AmjLjdL`AN_Y</p+p3F/;C"GCmnUGT?i2aJ?]Y'?ka;BJ#GH.*5_bh-'+oITCFqcb<#ZthdmWA -%"7^0gN+m-cG!QUKZD#!1Rtn&PqTM%YES&W'\!:+&AT4\t?P:@\MigMK&Mh:7A`R#h`!2Vmlir.585aSG$K7?n+Wr\>,S]9hI1WEd -%:b[9Uo4FVeQ+Eu6UFgS"#Ue#L?TJp<*sIco$(Sd>E#6$*oR*S#DQnPfB*muVl2WYH2)pG7]hlf\Z#).,W"_"?=+t0'@KWF:lSK4> -%P&OO2Zl>VT8jgQO.##2W#`sJmh1p83cd.2J;^iZ=_V5q^GciUd+C3L+1p%/Ae.?R;XBbSYJ+kR,RVrOgp4j/4kSmJC0K/1XfW,Xp -%k;u,r@%1-=YRh`^c,cmo>)FT[P\mEmaP*HC>4-')_?NC`&Jdi>lT*+sR42rUf(F!h3A&Z(+0pPLJou<eD"10Vr1K\AJ%'R!\q<g" -%kp]hlBo:UZ<-](uJ%UGuoc5m9ll"C5OW;IVMIY223pMfO(,oGtckNMcs%bI=OsDeAr]!52?fV(YF:jhL[kpH:$b;D0Pj>oA(o?BL -%csm$61=4)J@>gcH<-<b<PWG85:2oE&+e;krEaGQ<<AcF"rX<d8;RF<Z&S<'B'Wt(Ka2i.?W>@9bj_&fo`&L$-$L\Xn7&kf%`d%rq -%ISA^"B2VPI0T<Y6-:B;Qg+=L%kRjhF<fB6eoM3\>ltXKFM0]$A&gHra.;Ei\#!5;5?2B<>1dJP69["Z!h>WPh22_EA<ViXnQ_`g; -%(]6e(dPnsQg&"n6!%HeF*nYHbCC_F'qKT\1PeEF_.).M8.lZAE@E2RVmAG=DSEn%BkjWCrS&oXp[fpi,Sc$,'jj\$"HA`<frnXmF -%C3-bj+,#i7mP'=uf16UkW^K3n*j[&YPo$<dm+uIpYGQ6`.qX?O"I.Hi5$*GJ_=]qopEusd8h-D<rb\au.S#i)IH7YGO-sAc'C[Z* -%e>c)VWk6E8]jf(=e>_lXTMNf4Wq&b[icM4Gi*k9mFSqN(Wm5CRjqFF5dc2l='k&#c,_3-FFt\aS&$O`+82ddI[Oe-L.ATb'CWZ/h -%d885-G_f[a<>si;,f-VI$77>)DNZQqaQ]-M>+$*VDa9Gh%re,jkZD^pM_V@ij)4eVlIJI'"f*d&@E*[kiOoLWJ=.AI[>`@-o"(lp -%i8T]uXX0F*l?3M>nq]i.B"^pZO*NJJKq+Fn.5RiRi&=>";K7Nu/Fp5_gH[ZG9)LP:K,PMp"_*n6"B]W3EM'&Lh,dKOf"m)MRLCf2 -%>P9XH:L=#U�qm^(B9L6P4oJZf/cQ^iIj$<tNT5);u\)J<[?<_2P],=q]X:+j5B31`O=$ZE^oC^B3EseJt`2>g9?*Run?2+=dfR -%&^_0,*6o.?beplu3Vi.>\8$#JE-=5b9mJWB8pQ?*Tna8aoE`HqE%ah;(/8:k0OR8h,%,GWp55$A7G%`="uWQ'<_oSrL]Qm7\O=fp -%iD$#h'A+.D01ljC:rS0s7OT?!0Uf<4m&Fs]N5*SWMjPJ"c!-H8pJd5KJ/g"Cfp1uC3>FcT$AOR1='k+7i24;PMgscqgd:WqNHt]7 -%r0[MbL2/P>br[6s@Tf";n`j)3=VB?eW+nj)JNLX\6F:Gc)B\K-Xqp;_0!7abiQMqZ"(e!gDQT_<X9oE@$OL['e(9ANW*Dk@O-r:f -%R2cSciPI,O33a'!mlJ,`OQSi&OMPH8DrT<o"A/0CCkMTtnHD=4eYn/G'2GiIcaC*MVs]Ge8!oHQDU![boemol4m>LpiP@40>MPE. -%L"0d<K<!oE:2o!:E1=(i@C'O*LM@/Y9!),(90%h[jUkNQVG=Ve[0"7n#uAu@/gSQ3qZPO]*$(i5!5;h++K`1"JY(p#eB#?G(*UZb -%loNJ5q(!r>poGW/A#!O,9_=tR%Nu/:aQrJp[I=3<.blS^qm`HdGnO0'"nB@XpnD@Bn7gJ.>l9uN`2t^>T,+L^I#FtF$9@Zlm0[6/ -%#o^AhQLc/qps(S<H5!C"24eDh_B)Cui_#$./Y-5oSrutY`VR'ZH*U/M$K6iQ@]2=%lfOou!m)LNYt2B$lnR>Tr4ZUKoqqnA:u'l' -%XnLf.?sb$KMH*l5<@U7tJ0cG<HKPH]kdGF<D5B:=dRL4)AQ66KGI-.<j2[rFZ-e8L%=<[h*NUbflDO-5A_EV7Ao8)"XNbm&cNa8" -%RO&K#J(0`ggtkg@5>uEj%,SbO@9#gXZD(!@#VUnVaWSKo-\ET0.6D^`HT8-k)\#nE0rq]0UC/s#cE-"lCpi]eT<Wh6-OHt'H;I?N -%nYXiG7RBo<QjRHCE@c7cSmF<J(q]hA2!Sp5ISA]EJcHT!&ZRk3A8'^4nWsH7"GQZaS8ta%N=qei!IAQgQ,l=%=]&$E>uj4W7??7* -%?M6kGJ/'5PT/c-cCp_0,j9[9O#m2iH$`+m,NQh:($_e^;%o\K`86_\mfP]K4^2].>s&7gS^mlY->68nIqaFI#jA)^I`Un/$ck2rB -%F;f=FPRAb^ib@-$Pl-b+`a+:X#fL&S5*>nKc$VK1S!rtUjT&oQSYr.JSe!,bQXn?\#W#Z=3o>fP6(/b<A)Ro7#j)A:h[[($+I+$: -%$h.g']!XLl<AW$T9@UE`I&qM,p.dCUBYnE[V[5F<5p]]oYjlOka:DL&/@d@'Nc%.S'\<=@HV:FPL<M?o">WZ41K@SA6kQ%\]qpU8 -%bZ!![P;`sRmD#4Mi3FmpJ>fYJ(^Q=A%bF,9`j*a/FU0Y1e;7/[C=*I*K+V2h?A`bd*R+6Zj1rqqkBJ`K9,@V5Z6AKja)P:^$:+5r -%m]sSq=r@aS7n93)TAoZC11=t3U;fjl:K==le9=lV1FkAiR)2da*"`"dl,.MDbHC@o$TKqsRG8nFKmDDG2CC`O`pjPKPu(JA*[r:P -%1Ui1qaC>#VL<i7=-L(;s*YMOSRMf%#_8Yb"UWKcN^l++$-r/9$"V0l)SE7_CXdJr/B=Zq%L*m_g8]lHT(A&@#9LDD,-Y;\5G&LB; -%5Afm?(u1NoF:5KhUacC8Q/en1JZ7?K#Vm'SQCRcod=<oI/<dmFVZWN5E^%`oRuX,WW%Q5*[G6!bLgJ,<$lr1"=O"r$*_p"FU-R1, -%K,!%L.Q(.b.biga@sF\@Fi2j,N(pN$MXaQ6dOo3!EBc!87I&Ei6:f,:5iB%Y]hGq@otF3*`6Fj=HmJ]51+#YjP9iC+:Blj_Ql,d; -%[>;SZZ"%8$V<_]"`*15,B2(-#.<)9p;-]&b^74e4mN6WR45hFros`c.+mb@GS6>i=M\aHOf:cQ!q>kPRk$F,2*;DukSM*'86`g*T -%NIATOo)%28X>>leqnS+O]#B:u*d).@<VR"_%C%1JcoJ2$n.a3HPsTs\ah]*O-e%hO-1Rl\$qMFm*,qRNqje;#/5nXjEb+kg/khAA -%:,NP`D21B$1\:/km(_-jkar?Bgj\+.`)NsL"]LP+_1>o&NF##+-H0^``'"]"M$r0Qe-0RabS!bRUNbk`'1K`(]F&Y,([40RO*26l -%YZUQg9Al@d#cYd:6,1eodH\Al4(XsQr[[ig8SR#oTW9Y+H6/;;)$Vq\lVrIkbtQo/lED6UruafXMoPn"=0J>jiPV\)7+K&nc$e+_ -%8@BS)#uqaG<#DWGA6/bcPio\_VnYN7ZuK1[L(oUA^_A[>%kM9l<nqnN%P@i@'7"o+_4$`oKMXKt:%"#GdR9$.P#ok>+j7Wb:u:EY -%3?-YrnNmU?m6Bf!Jq_pAKtnpq>CWYB#a9oA&-<sW:UH$O7kl).IctNJ6YJ0YJG?noe+QE!4>l+$,RnQ\!hg%KC0RA],`i`H:[OHg -%_nP$P^iD"ia7D3g%qZ[@\%6T/[KDG_JFd?pQ6BH9c!9g;W-U_0ZkJ.L#/$lJ*_Qgm"RqeG=[EfjPKYG\""Bic=&,0,FegR(\'baV -%%?5O=Ub+Y^C"BELmdrXSG[_Nf)UI/S3nfUNj;VRCV]?0i)()k!MWqog&,EhR9F2+@"AhY^=h9m?EbJW"fU=uq[d"TKSjM'D2)H_r -%fT/R!!#-aK)\`439V&VE6U9<j$_RgV35q<A?%IB`k>_`@,eL"m,>W"m&Ch.'?_gnl1<!(hc]VmKnpOK63h8JK@C\H#^b1?L(W:9K -%f/D7,*(8&o"DeJ9MQSueTZrL\,N8\!hT#ao^W?UH-heC)Wg$N!6*PWdI?!B+k'64Y8)5%_Fm2_93WPfs$(dWPWaN!&.KMI0N7.<k -%,[kdSgfd#cW_-;E@bJ2-)t4*#d*]5>g`n4KL`Bf?WV[snLM6aX!Pr,]2?US2W([ULCiRaBCWS`Zo."1L.t@VP)G2;*%?)i+cZFpF -%2J0LU5)6\)?1?hNO*\l9`.1fT[H=WNfid[+$(,,rR"/!H':)>pN=u5A.+2T,2!_sZ76FDb%ZjAE.9.S=-PjRI1iK^r"ssQ`9Ytsf -%3/'1D9KRrtV/j*`<`k%qm:,%q7XgCJfF95mi7Cb3fOf[;0p_nP6_W8AW+-EP#DfpPXeQJqDR'io)p&FS_W:o)=CSX!/+OP&g[$0e -%En$lXTn<@*<)F/+Y;!c0QK6b`34e=06KB@@(%<:6Do3i`'H..C;&7LLdNO381GJN#5Q^[W-fYBnFh1>>%X"2!YU$=r,7r,OXYT>J -%$t,&#PJ2hD2CiH$9*"ujp^5ULV>N9!Qg%J0Ak>IMVjJj(7W@c#[.Mj5aDQ1E]"-V91b4VW4OJ:uc7X'EOf068#/6Hq/=5*O&N61Z -%fcUZq\#<mhZ$I(F4N?qI$THUS1!Euu^.\^/\GZsl%qQ(Q\r40g)L5l%S$nLg<\P.]ADG_fk;1)#i\<L[l2ELW,KS.I^oA7VWrb%& -%M>sf]lBmB(7,K%sGa&jDkam#%*@3BG_T0]9hPS&bn?NVLDYB@(Jd[,)(E'.'I5JNm(8U\Z.R6r$^gHZ8Uh\?]F5I=5VB)!pa)RDY -%;sHan_NU]bV`$=j_T6VHJ"VF@/AM;.!Xqs,CSf=gaNLgYJ`2(ej__;;.ZZEDW1!Y93Ou[/R*Kp!gi2SV\P#+.9/??)>?HM@7F9%O -%UETD+EVL^JP#$](>$i\XfDB@BUjidHDC@M>-&kRV;2G1M_3gqB\JK,\(IP<$GRDQ5&!.Y&6_gr!0D9Do_)gP!pMqAT[YZ9PU9 -%G7W.eFB-g\f."-3L81-W#^*/nQ!(Z#Wi9F:\QnG<66YA7$!l]564mms&P4;U4-C)ZE7lL^m'^&Z/cW&%<&mRfmnSW\?+?\<"!:`@ -%Ve@jt"X4o?I2\J*m4nCFBq(f((X<\e+FcI\5Zb6qFM!o<#*?B3jCY3"+dp(biQ@$GFY@T&a93(@D/s*4[BeHJU**0Fdb><^1[WsF -%'m@VlUtKe[_t`DJs'o+.s2q;.4crTe<V!5%H:0$Y71Ee\/j`FH7oj3H4@7BV8->-:KMD/OSpsPMAC8?4'+;jp#V5tJ($Pm5P_T"t -%d=asG0#ZMAo&Djai)?["[KjF5*q$TOrc1!;lbJ>ojOC#c;PM8K)nsO+HP4A272Le/5;9reDHiqYQEhel4aj([eQ\7,InZQgoM$s" -%cN(P0:#oPkj/.%;V8iuS4pD=RMsG?Ai5[,=>qd9F=M?B_2W)qY<#30_bE?P`b4>PKcpo<;O^8<XVpdG%^sU5L<';r6O8G$jG6rX> -%;1t1EEg^`%a2+osQLGo`LjnGIOQF&HWOXH2Z,ANu4c5SoQEH=7N9S$&0=0I@E>(?9Md=@HU9SOp!\P#m0Mi%-\'Onu,$>KGVJ7F7 -%WT/ciF@Pj^c\_jT,&%qqLrc]l00SR#o6=&'3SJhSc2jtnT030hqp3uKR)NPdDj)_XJ4Iu2D3K?AKi-NhLVF*C#I8$6d^r,T;D?qG -%/1_Oe_qdsU1#lLKaCH.#\1VGs\&^_8@ISY`:<ALc\O;UpRa3R).A7I's%]hg]5YBY%.kC\gB<G@le*KCZ2qcCd"Ldh9TnI;7Vs5` -%\4'qHV-eqo*6=tV'4?a!SV1XOqbZj1$>3i:JTA;Z*;*EJW<oIYOCtSZ%?Lm@9Z_Qh;o`Eh].3)u]fSXj^..ZCZdNr[;C<T$"h<q\ -%3.J8-mFem(`(4$!K1BfA>P/U8Hh>d)SN><3L#J&UE@IoDmhlsDf%Q?Z#EAt-ET1%3\SCb0lo3le;tu$>:c/o8&lA<WR(%p;VZ'Z` -%mZ8@lMcs-3Pa$bk.ia6.-DG-7&NT9?5cg*e7E)PY1fY9=BQkc?O:dn2m(YCbB0rC,--H+Ihoua/!s,s6j=/HG6H(Dk&/[FT#Q>R` -%X/&@O%u7L)\Tr4o5R5h?PO+LPJXHO,QsHqd:h7`%/acd0e5C0:pm.FmXo/m@C-Ehr@>&+d$$[s*:El/Cr/T91<jnD/9B9AP5,hPU -%p`@T4PY)T)%nY/flafOeEC$+\9DMF=E*$W?%"'LtXI\.TPbi194[I.;d$7(]3oMOhU6FGJ%:qS[*90L[/Esclf`J\;ZMP+D-7E"? -%VGjoC+Gn't[dTp&9rCs%V6c5*=b(<_fpM@WPQA9V!)VGXS<.1::0qM<?pUoVRLJc3@1i&9M]/U%)M?QO2[^R;jUlKE@S%qqG9.E. -%@=08R*#;7V.V`qW%tOBq6[>.oWTn!<k"kq[LEd;hlkK0C'P+D$V;MP+k6RcjBR\;9430(nPUc##+0_.KXU+kQ$P;2&(^s#e=lS() -%c,pbL.ZE*^W(,>t"";G,`3DbQF;.7G3I-SFAM0h-Z,gN$P6&V(]7S=hJHPT=&D!8F[RibTV)4m5[PFh\0G!m^U],0s;.fVnit%rS -%oKHe6nr(U%crWC0Wr#oYQ_$bp6JZI\fj+%("*pA(WCfG7Q>]'&Vq@F823TcTg<u=VeDqkRUp2iE)B-.:Q55@IgP[MqWp5Elj1@4M -%*&RqWP+n)^eONk*'n6b/l$h7R\YUFR5]=kMUtth9mub9-TbMRBc`<D_h1cX'@6Dk')7oCK*f!"R<4Um`11=Z"5s!)1RXS_F2HUK@ -%`M#a)Y*WX1e<aHh9T]jAYM'+b%H9-oAD9:tJg,gk<26K(.d?E,]Zl9I?Z]PN14XW.\+hPW$\`1OE!d#-@_cmU'NoHRS5&)GRQ50c -%l(BS,\T&`-jm#.m!\AIpM7o:],jDq;>Sc8^V?g'GNaY'Y!TN]MB_40H\+u$C@c^K\MCcQ/22DkfJ*Mi^H6>c5WN8W>\*15#ls#(Y -%:l:0]/g-f8$<mgT%Zn7*K7%uW)\pm8)IR9Ug&OK1V$nJLPg:?Z<jHOqcmcuYa&r=()<'^R*,gDM.4.VZ;?D!AA5^OFWG/]K@G,W0 -%I:Eh`2$PH7hMN7_9q,8?DPDLcER-mXZmA1H;7\/)E'PQf4A\iq\t&@@*L(psiC0dA23;V7g@rL9cm29N`3%)pC6s\$hC>3R'$AA[ -%k#?JK+Ya.M-H"q4!X8@]0uPc1i@cj\,5WQAF:nBR).UJ$NVG62Ui'EuJ&qVF,1>J3s.kRJ)krhNV<.fS5JTa8.=k90K1(8mEj)2O -%]d./[3e..*+\FYkU.nJh80PE<S/6Pd#ZQ#_W7ng]389gh^&lVWA1!UW3\>E0OXL+PcSbTfTC0??p1CVC$^@oQ6Ks/_nY%PFS7L&A -%jPSp6i,(Zm(]TGoa`aD6Vl\sZG#fB*3iNG1@U(2-o_iPs`T&Vr/nn-);8]^;Q3,PcMA.1DLM[*L\%os^9=J$l!0;YDAp78"SdQmr -%)/=oA2m7C]Sg2.2L,EXh=IP9Uo4k.3*!04nUG-DL6L)am?krKY92ohZC5s^"!Z>H4,5]gd/[o2A@g,UWKLCE4Ijg'W<C2j?RYMU8 -%+.t0Igd]Hsi'BjfFN]f6AtDD!(monh.`&[VI6m>?2uCbgP,W&g;OK^-V<OQu$Ib9X6;$e_*^NN0pf8u5'Kpk:@]1'Y5t=r)+/hG3 -%6J6YYC,+Pd"kDBH50oO(B2%X]mhR5E5?700#4YBYgs^X/9[hYu_$(QMU&mI/6$Fduk_*@'AM_Vp80'1^TS[@qQ"LnTF(-k2mGla( -%lG`C<eY$45OVQ!82`3E6!ahsS,WD(Q-5#lZ4gH;:M(:@.cU_DPGsNn7G-h;N'<ls9\g>I'dmc`5OY:t_A9NegmU$[kCm6//VqUZu -%YTcf0MT7j"oH.!JZ[4G;_bi_EoHC4WZMSM;J5p9IdTM5*fXU%<iij+@pkS!BU#]9U7lQoVOF5.9$;]]k?f'_BbcXE4SFKj'`^qpD -%4?it7*:"(Xp2/dMli]?[n1+7*bacWp<-Uu7`/fJbMi'C^CUo&&Ep(!#ETm=lGZDP`WO[[7m"84n2cJ#f[*WhrAOrS-nR?2DpW(A= -%8>-=<7o37h)$&a2#+]'I!P`GG:suhlZUlro0er_m45spa&&H;<"c/'`,EQ"[qP%]=:bs]FQS2)E+-ZUX+(q=&MV$$&*.R9V+W:n> -%q,5S"!.A((N]^@P6DncOJ*GSS5fC&uFhqO"B!9ZU:#O9&(J?Qm)-'De<KrJEh:<*eImR_k>PeGd^2^;W,uZ37K2ZncL:<PUJ^CdQ -%V'0PZkNN#07m&QO[96cGTMDh@-R@H/l^1n!jm#_k<%_$R""OWrYs5['eO_2g(dQ%l<V<BJ/K5HQ?,b`mc;AXq^s)ul%>P22a-^bS -%OBgl!$M]OuD<^g=SQ21]U9O)q;.`<T*_Sr8I@Qe.V7a8lpd53;I#4aP@Kn;Li2Q">J<]1&Q`?3[8?\Zg'&FAPY\<^J`K'i&)=&G" -%4WGiX?Z+\4]*MXPH;r[,CE<1%alXOrloJU`TJ0_A72)2iBF^]hY5&meP-]F2P@K;PYJ\YC:Q;?Db$*B[0TLD`Vgp(E7Lca\su -%mT;?Kn9q25N,uJ?^7H$D"=Gf;<B&03O!\50ALD0ui(/Cn+bYKZ:F)I1UjJM_b`GU%[68SW_F$2!([@=KARsST_BGSjn5<(:5a`7i -%bdbbh_\$?\AZ=TR`!f8R7:hA>?t,P@3MkI#&0c^Mb>O05!&jbgDKJ%WcaX2+-A^Oc'PN_]6bJ1VO%-9>T%_X-pKa:IcqKM%5e@I9 -%Itih>5Wfmo$pPj*9f_W7PRJ?_^mU!dJWR]n91cuqpRA-/BKY<Vg:&;T^mHa32_eP+^Qm(b@[CLDO2#S+$S&e^\3USVFgn9r_O0O" -%!d>:"p_]h2TEIBL,l)?g*ask6\[0.^1N+%H8aCs:Z"o!7$Mfgh'`M(h*JboP];cDbUF:4N`<7PJ0NMd!,Vlm!o0)MG*+Rf$E&?Ql -%M3P8c#sJQ<Mr\=d7l)[H&2uD@QC.1sSFS]<0FQpZ/P87aZ@Db,T3.^sEMhp.,]@*.l9gO1(ncB2br7<`oYNE\FJ*!#?j2?BlJ;W5 -%S1#(D>!'=N7[?#*$)\cr1h[,8(5AV8&\q-DJr0!@"CJAh&E8q)UbN,d)Of[B!09UE#@;+Y1Qu!YC+R7+#_Z.'*?rC;^Qb!,dlK&, -%]Xktep^SL:_+3-^mI;up4%rSqRsGY99tp\+**I"1jn1EE7d12+_Gioq7B$g)MpO1N(8"$rCTn-gqBf7&`E5_;2'pteT!u?k.;Z,% -%<TURkjsqV6<2G'R_FJi\^FY(@,J-OETm=9d5pd'NCDG\c-!Q95A`Xj:.qVP&LKFg]]6QCJ&jo90+<.1`8$";(.R>5=D2-tdQmQ^< -%St@BBe\5hiMFhOpc_*&J>jQ%/T#H+.SQ.-S[rcSp96HZ&p72B(Eq_?J0#Gb;;ELSh&ncR4FR"M<]Wm8t*J#s.:sH3b)N;26#6eIt -%Do*f,Q.W-545]c\92?&js7S,+RRB8u\86(\qa6qli3Ma54*7]:a)0V_SW^$1nLgi`/N7WYW:5&@EVFp:aZ^t/==5a7i7p[9+&X#6 -%7E-n'><\9?f8=pE#pLo:$7'9MEpP-%`13,MMYPg>8IhqR2FaJl'>^@6(-\XSCk7'CpG,Zd'FD`X>m8GLTLdlBa0_'a_4HOI5/3.2 -%H9$8,KMn!9Q3jK\Ejk'"+a*&Y_k)_lZB7`r+%;s(i@S&6mUUS>Vi>:WnM=8B_9cQnA0$/kP"n!,d.Ts;oPlc!G;D@.jJ%qdc?FD: -%X%=Q?;_agd=N*qQG6\h=;>+3e.\`W99_DjBh/KHhA;sOr"iFa?D-/AiP1%csSMq3+UWGXJjPn)\Z&]TK$.,3_i]W3gV#g@@6OW[- -%s%pjnWE:2DJ!*BEKJeihAUpD#nF*J5Pm0W@jW:-``,dJ6iaD1<)XnRU3=)Zf]g1-Ki9iHi-aTi1IP%spBS]%6\Rg4mX::nsG*[7! -%07u9[A>plS=1]C>SB4M],WHsHnU?K+mZ'u'6@OKTNM3A%L7?t0ARKg4eqhdu-mE4BbAM/6s7ti]pG.Zs:g%/Fh^T'O'n$p*9BM5u -%r:<hA%ej&I=UsR9pCVc2AJQ<k'qm"mlL2K8J"mGhTbYDq@m)(gFXh&b*R1#RqVd!pprD-]:3e]Y,ITQaZ5OlkR^,H:7hH:s'9'gS -%*8'EWpL^ad@(!(PV<Um,b1WHD/kn(%%3i=+e#*(=n\uKqC%rRDOgl[.:0%3HqoZJXMq/$kcr8VoJe]be<=5\/'\@^KGAeoX29htT -%j-VZIMeOC*SP9p%5oE*:=&sm1:E_nB,((SM67/Otk\gLKqdjesNt=_co]f@CE(&(\-4qMr'MHRg"%%#"R9udZ>p5]YUK-K_P$A-s -%1aA6P!in6B$=1"',4fHB9GU806J4sj$G))QT;W/3`)\KY056'H6>/9Ri]mf;s7q",f4j@>f*!+:F/'@/dj`/X-j!L<q>eDYK^4Ku -%Zbn)tW&'pAg=e6kZ'njRUBm-SLo6"+a)<S2iP\/oXXPSAnFOG&kslM/_\F1&fc?/GWd7O3.YOV./u_$<\f]LkY0u:19"S'!Ed:B4 -%TI19(Gr.pG2LO0AA6`*N"q([a>/k<]H$Ze85I@T)"0/B&b.Zi<.'`h3/Sh8I^VID9J@m#dD\)bCZgaA1]JKN%9U[[8c+pa-HQA/K -%;;Q,20q?`(lnER#Pf"WjSg\5o.Y5?I#$?i%UFJ^\P+LrfAEDL'`)JtpI`gs2JoAh#<08@r[muS$kp\fE0Yu^/7&O3@Aq.2"([M$Y -%E=oXjXu;J"B''%ipMRU+,[#<C(Xt\!MguZH.bO]o2_)cOO\&AWCQakm#bb*8$)=(3:rA\Fo_45cg#a>q:1g%<64X./;&OO>4P\2i -%R;L]*mBr0tR?E-=MLr/O>kQ1Q=L3'?+ioL;m$@ul(f:a',SlT>dQ9::+r&h#M+Jkfq%N^WISb(S]n:gi@"fnc:j7qs'3>)p,1j1A -%gA1TT'ch@)G+Pt\Hd9]LdeSm?L@nU1>Nmkjo'qNt#9<:aSbaqY#$?.%otU;P@\-[F6p:CKm!T+^(5A6Zg'enP*Ru97fTBE(\0arG -%M6$ht%]F?9*"ofM&Q-AR9q'^HY't2i<,71F-RKDk'MKP=n%1?tpS)F@'h@U1&M=J&*e8>LjGTV`aI^!6g6fJ^<&)J7=+H'eEuuPp -%E4CI+RoAuQ3VrqAXf`WAd.T'B`*bQch^8!2F&@P9'.pX?67p1m\fX*`NGBi*6."j]J^1j'/a-3^kKSmHAb*`N`K44^kFQ.>G^4J= -%QHRW=]8`)[BI&NAgbYT35XSClk,FEEUKdFPTZMssV:X/7L`HRT[=)'ukiU9&gXtLp9J%(:i&>Cc_gK<YH0`1(444;&f6?:2%q6_# -%XBo+P9'a<662+@sYc:mFIkWGYWL3T7,,_HW5;9MaN4Bm#a(@]=`mi%V.=mK;-D2?73#Le:<mD\7].&`aCe#d#._"2sV76d.`Yde[ -%XGC1K5,TpgI^)5AEI+bD4M&%@NVg`YU$kZjgt-`B/.7M?'=f8O!bMNi2)]3+C3cP]L2Ip#B*/XJaq&K.o2gHU?rU`DDhD4@QG%LI -%[UAPh1o+oa%>XRolDC$j5PM6+%$9#jOs.X2QFp*gb\qFdo>I5i7Mca:.Q'a\B4QdMBAg=O>XKoY-(?4;,@Z92ri'n<EMkc9GK1NE -%W(ZS9"@Opqkl6g7m]e\:WJH[KgJhdCp'h665g)sgC"7kNUXq`2/"%i^5KrsKXG<=fAug7L_T-e%qQ\D8Yp_#%IrMT8nS'HslXOHZ -%J+[pj7KSVSB+J5aj3XHLRsb\B8ftNHBV"$W`!YjP>[jU9Z">1X5fF:=#mM4G#X&`h/2L^QTe[g(`[#F>,gLRX&=frR]j=-!_aJ;W -%*G]2e8I_/l1k/J"=B.1uQ.81R@Q?kR40FL[J0$lKeX>PY"<ccjYVMEagIfNaNh`=JG7b:*2mqDfVItAm3H9F)X-$C08?!]^7AilF -%ArHGhcRoQ;k,DQ`hQ$iP=R[$>(r/:maS[k0"jKG.rWMj)T;%^k;T(KDfTKHGi]rBB3=)%1]#?3sHjt/jFVnf>3Xi7W'U+W-_\%#2 -%n;`5R_)4[2+@re:CTI@W:,j[EeT8:O95=(UV)L;adu<8P\o./!qf!AY0S&i?`FR;C&j:@o+T9O8c'UF5aQ@5HWt@&KfG(9M@UjUK -%P:DGag5$LKQm^.T(L=e3I86F0U2;!HgETC[Q(SYBFXXNF9=qK69t0dO=P^M,,f="`Z"E$Y$JeG4+It)>\piqXHfu]5o9jM61;3UJ -%G`1^"%/rP1gYWU<r#'Ef$VX;q5">2K*7+E%d]V1=hKj"7h>-n6-jV*#I/e6*j)dHYD*WmOHs%64\)3n9hKn&THA%.YD]d.Rq$hIl -%m&sqX6KX5576@0I\3ZV`r?khGbr4-XORKa"'4rYeJm[Lm(j@N*/>%\6\U&A+D]T5%Eh9^FoorV/?g9525dO3$5QGF^POg@_e8FU[ -%4Sp`?c0iD-L0;ia=ef_f5>PYUm;ALnLq(<#i^E&*!IF!tHb>?bD8pn1AMLEOZT'/LaUj#&HI:Ls'hR<A#0^Go$,L8"i,J3X<(eTe -%qaA@K.L-0GB7j%)jWTB_2*h8]0P93c(_E:P!f]HJVjHUWEP=9HO,c"S`EIA>.LLnc7Jul0YOc:)&LcKJ)lWTY$([Kj9A4N'WCm)M -%`gCaqf(]4Z3`EuIP2cD\ro&*VB>Gh]D4#,OSs=3GTf$4?c_5F&:\+QCZQ>#.F0Eo8NG?uE$`TY,.8P*jO?,I]`0,[]_"G1C`R0t* -%iUD3gmWFBLZE#.Rn7Z@O$_E=H@K;3\,Q$U(N^G64%irRKrK7P2-F4H?)d'6G82=b[9t8DTkm>*?d3lf.kZk@9'gnD\.3L#sZ0PWC -%fJ)B.&A-(#Icf[Wqi@GK,OdY17tXZ<dQ]oSV\"i<]N\65;4p8R'^m@eJNbUtJOs5+#9AkHGWA2:U5't>*==$#1VlH+UO)=FX)CT- -%Z1A,AbG&4neT`C5G9>/FPNsJg8;?J;/VdP#T[5,KO_gIXfU-XWrXo:mr?00dHr"7KRi4NQgR+uP#3)Su<9=%LU7`nA`,<@4=[[tV -%-n\=,D:TOm.3U_>/<JGI3F!%_]_"O4:=@Mi:IQ%VAP@N:'(RRa@^MZS"UDpnO[tK5SiCj<,rMTQS?W&?T<Fl.,"Wr0#U#W`7!;4T -%F.P=R<(u.4a-kH:.=6BTs5(g7/C1>8NI4kF$7^ujoc'o;@<T"t`N=k8A=%_Yrm7bTIoM1'<#a,,H\E]WSV,hV8'bh!l*hmQq]%u- -%Csi^D;8SY.Dne6p=5)bn.P:Sj[;rEj2E1&EFt-nAhZ"'+N9@\GW"lG6+6o$7qPK>`';&PL0;dUn,Q*juT<BZWLSD>kWgDX!(eh<K -%YL")O;m57pilCpP7#kmT[Wrn>BWfh&8C1@raA>[nY305++@-^SJYgeD`.jS`3OiU[oC7KPVOPNq3F1-uokmX>ONTf^'TiYkVhuS5 -%O*H/2(`"*UW!@LNNu!M.RkRsJ7':)brAfJh9G)Mn.$F0)9S9_.EPpNC32tP\E%k8oM9%Z0W1G*sS/=C<G<S!HC:XnJ,)^0N2^\t, -%pJ<$hm3L$:L1=lLY4I6hMjpjiG>LhZ*K(G-g/>IKFjZ-]p7Xj_Y%!2`=^.V*NA#+a%pn*:?LG")T0N@p?iKuTs+-gAePH5$^\j_i -%s8K5$r]g?7J,I?:r0r32H[Yl8s5s@ZgV7sUs7#Ver7aI8h;A4n:\rCIktc\c6/Hs)MiTsuPP.TI1&_%%rsq?nlc26iY=IW&rOMn) -%Dh%cDraYg#5I(0js#pCGfXE<t_DV,a`qQ@+,aeW/p\ad#EsmHm:]J]6N(Q8Z5_)fXUPgN1dKgas67lTJq'7`Vo`<cAO@,1)!Nqje -%9XGblJ-2;N8Gs*f2As=ZLc'n\M0a)ZF3h04$5Q,<*5Yu\j%Xfn.>AJnHn\-83pZlF#ng:6Lj+ai"bcVc2(8`$fl(@M*EAD.jFn$? -%iR'G;i6STVAkZ(d#&4eR5#EQ:3>L*Mq6@,3kR-DP<'H`e3B>8_Ml&CO)@45m`CPfs_)rqrHg9u]d?k3U8Jij=<d5DR`8hr7q_Kl& -%&gU'%G?sm[2'$6G#m"SQ:Jh'f6GT6r?c*FmWXQJR=ag4r")$^G8kC.E\4m#:J.5m!E82igGloGpFdMSBH*0K@[N)h+PmC/c-mM.$ -%nkoE.S6nUI*qor;6\I3tWFBkACcc,eo4")Lj_[E)(s9mFLe;amAXMsKA8hrCKre0k"JQ"(81?'6>cPRf%KNg*-h@cFe-45W^sp6+ -%jSlRJOT98Q<,='6NlU11IY4i7Z5.Z3/e]Gl5T2N<E?[^F$27i\G8IkO2@/I*qc+Ve^`j/HVJ,f4dmq/Lhub,^Od$hh'r9NL(lJ[( -%W)>1mVP3#,7:ahun[OuYH`<o6bf#Q1Ktb;"$,X*F@74+RDe]ru_"C6[[d9H[b">X8/6'jG-euZ3g!S$,U`hH$Kri_&K,@Zh[Y#<g -%g$T)4</c!P?DJ3r:Vhc)1Bh?d<O5&LiMJA5QR3qpQB_k?=oqYgQED7GHJR?U&FTAemEa2%QfCJpksm@kV@#uK!h%:U.[s#/75>E0 -%'Q2VFV%%ZMXG5ST:#BAu/Z&MW^*!GL`^MjO3:p+!D[c1VWpH^Q]s*uqacs$TTFoA%3Ptn"%ftf,p?pmbNX:mFq2T,F#GE5)gCA3T -%0MM'6rm<AIhSCeJW$@j+YAoYG]=:s_qE,_ulIi#]bIX\B)@7hQ=XO[?nuDmo!2Z5MRuj5B?"L31hGZhBOee5hGpGS9.#+dZ8P%>" -%5Ybt'@35JDK)'YLkT^Jj5d1g[5M][LjuqoXlj!O-1P$+efCt>Tnb/!b#+Xg7\c)ru/Bn/[.llp^9'q`c-H4<B=H3B5=B^/U&-Qq' -%>QCi1_V^XL#m/ReWdjTN%JoqBNktut;&mp47E"`\m@t^ejBP*&7P';IRbl`&QYu_o`+NaF!F]Hhik_j7AXC=ee*6j0ZDtq014VBQ -%R`dledQX27n#,c%T:R+kEgeJND=ElMqSuPPJ't!r<6ZJi%<RddL%H]7a@<FG&km(Q<Bd4:"_h/e4fM<j(ka'\^qDUndeVq,=tHPr -%ID!PgEg1iS(oA6r>/:MMnTr8.kRRK&EH>NA,2FJnmT2!\S0(<[`^je4UojJB?la@_bk'?*iKk/M*Q!(Yj!ns-6]b4Ieh@EN6Q%q4 -%k[ZXDeJH!F#YNS6UlfCOV;R*h'16.D4XcRSfYfQ[Ea3.JO`+>u/%GD',]>lgX^W!bd+Qame7r7]=U2REpdKq^k]<$<1K\)tCJ"s0 -%cr]EtXZF0o/0pk[4m4H[Ae#h!>OboFd<C"fDE:JDf^hPI6ruIli03ZFKcENi@<RX1RV3mq,3_Bbp4^#ck/m:MU>kRE6,g-W4m\0( -%+/-_+BTg-ee:[b4CBXT1G)8OR!<Njl_OhHt1jXfue(_3%I*cGs[00>[,8o`#j`^G9?fpA`3-d^]'`NH4C-:g4LD&838@&$Agk7@n -%+]TWq,@FS`E6h=.4^6@^]uk[XQ[S&oo'*7M5fmC#J=J5=+OTIC0m_Cr@HB0gNV%]lS760"=ssdW'D@<8oc=dR(nbN=9VF.leT2`p -%,WL[#jK_X?7HH#.B43Vc^P/MJ9lM=R(j*A^`"^f*_+gVII_03\Vs/MMYcK6<I9j6$s0s-Jr>BTnHC7oCjL177\#:43?fHu$pF63H -%K/?sj2V=LeqpER'-=[d].q6sA(&e(\b7dmH%DK<Ag_QHC[4KScO3aj@,!;9ZE1,&DiqHT22fPKlD0p)ukD.>O&'ore]>UMOV$D@u -%Fch=F\(AF4c(OEGd?\7`m@ne?r+7duRmOp\rpaP=.4gRa(NhNtm*DjR0oi8I24Jon/D!nk%HkIO6gF0([##0\8I_W%EV0TF05\^8 -%pt99ai3]!OYg5KIOSM1h_In/m'[d]S"C#+cQ\>QTdh6Ps?-<DnbE9pYcSDDE(-qilK)c3dhWLqP;"KIKgW_-LI/(%!cYSur<G/a' -%RYWo5/L4i,X)>6_7)k4>?UpjqeW:nCZuRRaWkAA4Y<Yj7j4-#*O!f&+(]d`$eEnG._K>e4[DZi\$EX0*Z+p*UA)N+t)uT%3l<HQu -%*MoOoGIA*kGU<*$3MKe]fTh[-o#KYKm(j9V$]qKds48UfZAfi*]aG5%XRGaT^Vk_BJ62ZiH<ZoOj!BLu)=_op'(41"TG2fG$*tHN -%p%[!I)O@;%4Ed*"h)66?b_j@:A-f\]Ke_:fnE@!=-aVh"p9XFCU"M.l=_K<%'3U\W65n%u(Y7G*o:@9t;E3Z"GApi'cVk5QnTb#" -%M9W<?gO-udDD06hX'6<hi+_c>J(@92^$B,N6)5j#I^.`dZi&^I,s\5Eb.XubGeEH.N^YQW,O]F,drehK0k/O/Z*(s*@c<0?2qh_P -%^43"([6K/PXmq)2H%'uc\3E:G(JgBC>C!g*S'Sd'@ZPiH:-0=M'<A5^p:I6G>[VICOFb,*(Ys)cp6[^/(A*e`Wqq.(8[Cqo!B% -%It2JFmY2[p_p`aO0b>>Jo/ImI19\IOV-pH9RNC?U<R&aHhYj!YHi<m8juM7qH8o%%adet$YhRqADscep*YO`3[+l\:Vp"@fVEQLs -%\<0S=@8SE30pigFNadmaajElLr=/,HEbVmLg\\ZKR9enN'#\(LR9Gsk6%8P+U$R`qHD7!GkVH]AlL31[4Y<oa?RO<Qhi"B9TG7Kt -%Lr0?tX"dskUPR5#ol2XA2X`KPZu59t7Ig3*gNI_Bd=rE4o(C_smZ/95,Pl:;`::E-IK&IbJ;a3/MsbVDpp3@@.b:S;D`Yh74ETR0 -%=$;Upn^2!fk[GP]H&.D,n-Lnj>U/LJ#nt5JC"sk,YHca"!B7amX%\jmi:@s2Oi.$CLq\?bNnKq4_Cb?ncHkP<*5%p,fs^&;kHcB8 -%BS1:mhuJfo,V*7"\AYX46d.4cN83>q7OMZkH?VfiYBi+RpJsq]K""dk.<[3G<19Z)?C,(JN<EB:.`.7F%D$diE?,Hm`((O9Br6fF -%TFfQ]V7sPT3P*^X,ei_bEf*bg]+=t'(fk`Y7(Hd]2?HnJasoQSLm-e?&/C.#)EpZ#-\?4!EhG?8()L!ciOZ6]6VA<DMr0P>?X+6f -%_77Oho#;M(%!0)Z3p@qrK!$>U5o^+9qi3?:BcZ?^02',514)e95Ne<:#5eiS^@T\Ndn`2eK#ZM#L^X-(CU'\/I9>WY!DDM]f25;+ -%c2!&<q_UST;JH4/a^_,/XgLu[q<"'r@<t?n^/O8lk&?QBX"Nh8,^Ws3O-:@;>,SDWGVRU`a<"@u0n,:`1Q%C@]*XZR#!m7r-\[>, -%$OtK,A9`ou8+![@UJ[(Hg"aV-IaqKCZ?kRTOsJ"GRm(BU>d9hdnAD-PJR>h0W.R<MZfc>=X-*s[IA6T:q)<RT/>\=a^s@:`$`pmb -%.mEq^&"5N-BERQ3MS5dZ!TZt7BT5C$O(+TlimF>L+c*E:%4J8h+3P0engq]">S8gLM'QR9EPc,VG(P)LJh#OsR3.Qd7g?gqK42]U -%R&obU*8kF+-pi(ZQL4W[&q3^h_c;8JA<b[El3FH6Qn+A;h,gW:,"p`_.REq;.>&s0%(o"FR'VC!Uu'"VV!HhIW(t.]C.tCFM]%Ob -%FnQqZ3HpHt^3"?(fFjYZ.(W@YX!+-9SHm*XFCAmi<(7T)"*P0maX`?a>BE-s8]FdZGYehNXu]!;QQh>3*\:OjIL_2[bFd:GQC&;R -%W$99-H..:t!V6esGB!gL$<T9!-Nu6pRk@4!LunebJKJIRMXd<(73F`j_I/]%&W7s:n@<=,%j0)TZ-k&s&`uH)kj/H-Lf)KqqEG'4 -%">OWQ8%"LHPI1DUc3jIr\RgDb\3Lcrk,Ph]@7_^lI<kc1GX*bN@dO&jEtq&D(fdXLp_.*@Uml<068^>HC]uFlOdm7=J[g0&Lm^+5 -%;sFA,Fr0g+ef`0dXA+rD:0d&i`<HcKn<h`W=t!dk0Zieo<V8dCC/b9In=@X?U%SW;@)RaF<JH(<P4hk"cFgo1=9l9JG4AC8e@_[N -%?AdZq-s\7DnIUK&SI?do6pJX$&sER9TX)-<kC0KFi-FWkos@9Xp7MjHB?d@@-T$)LBLSaC3XY(?r#Em]9H_b(o:WD*,Wd)V4W%u` -%9YA*aao35C9$s!!&CF$PJ?,(K]$ULW\QIq=MCH<$1f+fV;HQJ+Fk+EpVGO)==-WcmANMFE%\PQeo;,Whc!A0&7uSJ*?;2#il;Ck$ -%ne>*,EiX7W&:T[Ia]9r\Tf@aT<;61[`\H<UC#Q]Y:EgNf@D]@ZQijI0^EJ(]/TG.;-!rN,Ke_6CN'cGY8=6ZH;dZ@M/qYn4iArj< -%'p,PnEKfDiN;\30\s?/JYADM>'8DK)MEroa4B7KKkn63SYYu>XW46`Afe#>.cuJc*q%Gj^e.+biG)EcGC8_AB60a7T6J81Z6ie`5 -%cu$>S/.ira(aSe^$TGkJk]kMdAC_&ZbknD^S4U*G3ksZ&OD<\uLjQp]5_]?AK;EpLl0Z"[Eki3pF[=Fs?^WBfVta@OiQ(9-L/%T( -%^Nt#iIrm.L\3X&EmEHBj-5?-0="oAF_U(Ou-/il0j,KI"<SX9cJq/'Q9Gr$*ALTL0clT@rL@RH`FhFpk`0s!e]8H`-&.D_(n],RJ -%F`(@S:-N$FPoB"6/MYIWW5CJs%%2h0[Pb42mJMegCcd,a$JuDBj_5h2d3!kO*)*ge5DT0`XkeMVkg'lObF3()LEbqNe^++:P&GB3 -%[Pfl+a_m@tR[+Q!?buuUep7s!<K^Z/b.F*jTG07ZA5l.C;OMQpW^".I;RG'r,*M4^;2C>g/-RC4S&Q8TksRAK+b\Cg8Icq,"6LB2 -%nkY&Q,jLE:q'.03Jse%VgJiT0eV]!W`=!d5Nu6Y3@aIPrW:!b'`aQ\@EJ6S!FWUcQrNm$:_6/H6('N')n%`+_e-(]SUf.Yj_T%>E -%U)=n,ODRTX/QIB(3$#cVnq=!5o#bg<d>PK\'$:M*p'bb6U?2a_We`-U%uqhfKbT+1M"s5Hk?[&"&$]KDcI3G%7+e;sfV'f%ZLrZY -%Q+0JUpiM'/cUMQMlWI]uLfMA@&:$I$AI5UgC0OU.JmLmO.CqD_#qtJNUbR^%cF6l":b^?FaD)@!(*>:.P87\l@iC;jQ"u#[/?1t9 -%jK,CM!;VbJ"hG$JAeE(Vi2TT]KfT:n."VEknl"XaZ'6meFafE@+lH8n1h8s>F?&UN=>HJWJ^@E.23*8Cg&eYkKJRVT,p]^^B\Pt. -%38o*L/_JVf"lu)pU#W]7V)r5>2,:mbNYFgWp]Nj<<qXa[riP+62`LeVlSO^M@1B3;ATjX>;-nPkHKO;W$.0*WF1Ps,K3k9S1o\Xt -%2g$/XHj[lg*n#YM^oe3O6q@C`^AX8@[pG@HMe@`W;@d7]5RD7"dFW<$82EXu"G%3:Uci=i":OFRm#0X&CD%hS>Br%><,V+RU-sK[ -%cZA/N,&%8VZFLGdD+1+*iiNe]Se`p9.;kX/ZH5.WeJUgF"h7H)Z$hMDQjjKNr@E'(b"iSP,0nYOf-V*2CtTI5D^3Fs'Y(2%6+>EV -%r$9<L"D\;!\&C)S(l:6s'@"2@Y`:?49L:a2,0tu<l0ZA:5\E1rEL9T<"+c$KTYe]ZBYiO+%)HPA;7q`WTi%G'kl6=r5c7`A8ZF!G -%V7s&6oFN'TqqO)8olUr0f\X`*E_r`6L0Qa`.d,7X[-fQ<#I^rc>6u5s0sYQkrf1Cu&::=>5S_81dDoM2;&Vlp`$lP&$`V4$]snCk -%b-GGWJHaOGZ!.8M1Uj__`l$gKC1I.PY`'8Ao%>'p1PIWQRJ!YQa2A;`g>Q^Z2F@KoXcm6MPFBus0,*@RiG1F1Uf"L:0A(m?cnuB\ -%J^^+b8$83R:#2I:/?(]rK*JE$2Q$V7guRZMb>.'`".$$*JaY-Xpm.,'oJT9N/g[^KaGmMPo`BRd"<=jVj7.pfhJU<=N>F2=SV$a/ -%3&o7[f@PE@U-Dfkp$_nO5Q:&RJ,HpNs6tO<di\VKDuRperq*'V78cK($0F&?l+a>m.Thi"9&/n5eFq]ZWF*$ciadRh]G+'<o5655 -%iSWtR_0_B^0bL:6>*>NX%@5tn4$NA9TDtrs)C`*OiR#?qg*#Dh#rYK,^#!O^Dgm/uDJ8o#HlA4rA)i\6WueD6BqS$C3q!GqU*^q& -%Hl$`8_MrrH/\_)WmG2Xj0_Ck$#g)'hll-HhVn00l6LW[2M)=Pc^af\)Gd#A!rVZA,f)m;@S]<^oL@*l3U/1POL_H=HZeMA'Q3Mnf -%[k5>kq47E=*e8Qu8Ni^O8K%XQBD<BL0#G)%gJ$cn8DUT*HVO%TcgTZV4FuZ5IZ]3bM\9dFlqZ<F`fBPWokm^=%,pksnV^p-8MnIb -%4g`VF=QF9XU_8m[1rVC<^N6lFoPBMWkL-KIh:bo@maG/Uo1i53oCG%fqd&5+rRrTnr2Qkh\=.9-BWHOua2!"\GFIN\TAR367j_<F -%L,:E?9NW<P&9("+@2[s>Msl+DkC+LU@>`_Q4*dS8XG\tJo#856S;3gDn$L&X5JM9SlPY/Uk.:Hs*^c=SBcB"C9,cf6gWF(JYP3rf -%-ou_.O8jC2KG[$X1?s#=C\'JL^U_rdHFiD`?+9cU[FB?T"BGs'`-ZA"HD'GJIDj^pK7G@9C&W$P$\B<7YV9O,DnXW^Dgm.VYMYma -%e>4MDk[R_HLYH[IHT/A7k52j#q!R<hme;jOLAX*o=kYjh:lZJJ!qYNqpmnkgmcSf^pYIsVLf2?mGkKh)X^4@r/<'@A>Ip6XbPf^Y -%hF+27ZMkV#1h,'cGc[8+5nr7H(4Y`CgH0hZA)V(Y0$(fkVqk24FV?_U$qn@af&M%Ime"+\"n*Z,`1?%VB+Re&^lEP"%cf%qC\(Ul -%^V/Al-5?@cP.H;-1S&n/gAktn;;P0bh\P,Jr6G7)[%qNO$0bPZ/'r-E?LIs!"0_H*>C?2:488Wni_A:QbZNgY^M'AHj7,H,"obAF -%^A%GoHc>H'oW[qBs89A+nAi:jS8nH;k!6sbd:Fu.fcAR05klQ'o+!gbGPu]#M]6GsGl>29f(f7-GOB_sLjZT+`MXk2B0ZF^T:"tk -%m.V,8RDI-*\nIHur"dGQT\#U]_j3XEmSiCeg[Un#r'\3=9L<kd%_IKpnM*L<2&OQ1'&$@pBb$8+D[Fe?l!iOY]"jUH%ffPnlB5f7 -%!;_4;]b%mK\>SX,6!TpOR*m$g?Y4b&+a.FJGlceO8CJ(`eEA;CP]D[/&H3HmfsSK3PFeTr\XiBmK3"D&2JFL>[aY&^KM`3*P2spZ -%EG`RR/gQ#E<\8/G5+O(q+UC[t_MlUYcK$_oM\Hk3%/$gb9\UZ%SJGehq*"S%KSAo%N"^irYU(JeU^fU_\<ek_:l^&=_R#E4ZgkdU -%[pbG]!"P>NJeL6q2;AtrJ"mdr)g7\B5Upgt96*0h@17-fJM%!I60eGlC76l#%-U.sB(^tJ5o,qpN/2%/9F8>?KF8W*Jqs\/*_;`h -%D]Y]7\3&aY9/ibXD^).\J?Q!f]UER"FCPp?*7^d,$,OSdK_n8gPhM,";LlJk0uH#A\If6]9ak1KFfm0\MKC_S'>^?=<ip,AXEG`f -%*_dnTD`JE$o'f3gVISJ?K2lfD\!;RIf@jKdZH0=H[Q"Pc!n)f[)DdmqoDj^rBt1s?]USs)9CU0"1SbR7K\cJ9SNBE"E+A#s8l<FF -%YB",W,2(l%0tjirI#.EuGLA8Q,6X+Tg-L4YlI%IDdfA_:YSK7GI#fo4PLRX;9Xp%p&_sR6-@!>E)5_Jnj(-G3/i"]"ZY6)0:dB4D -%<!=rs/&GJ-X]p6"j[Im"F5%iOdBASV^p[]5iAcA7\sRF:VD"/qHn8r]Ad*%oddicP5Z87AFnURaA*tmF,AmYe41QmUc:j!"P*GI3 -%G-1/?o,u0bmA89%9aN96cQp,@_"oJ@:?Wkr3"[_bmES[!TqnFM/VM/A%[i0XTQq'SB].<4apE*)m&Mo=&)'@YQ/@CmEI]E\4=M'2 -%/PXbMWjK/i#ucudK_2\Z-?1E/a>`,46_JSAWiEQ3)PnB.oB`Gs$>ph[JRIA%"R#$R4#EjmU'lnMXGBngdZu'XJm/:45aL:0Q`\Q= -%1@_]LH:ch%C>#a9?_3+8,bp*9r"A:<O%jXd*jGp[*Z*=I[U_I@5(mLBK5DPuYt5[^]f.[T,iG&caC-(q&N\;m&2$Y/M`<Y`O@.f- -%,ul4+g#0[-+Z;^n#eKJT\9V:I)$(sPeru`U%53mlY(Us0q%%MT&5(pM"&WC%?m<$4n-c6/G)GJt*^iY!)sgZ=ORYahR4>#?4<$NI -%>qGk-RF7\gXSZ*;$>*A@r#(jQ]^JLCgl<\(pN8T^]3=J_7o[=gD6Dr_hjD_?H1q/qV49$[><+mMjdF<L/5N<,+!N#!@@`0gmpR<K -%Q)mh%eAJ,/(XRDcfJ<uZ?1;hJ?#TTfKCZ+?rS0],]-\TaoFR3*?u1fTU@\TZUt7d&]!rrDk]4EjIS_lmkC""8f)#'VR1r?\)TA,4 -%Z%Adg1e8)8#RHDVJ-JRMTT?meJufG^%\)aLO_6\5Hr]+68\SJAM$gu_&ui-(a"sS>UbbYs2]t;;r=):HoKAIZKq'WViX[9G/0FX< -%Y!X>g"6-D]7Lq9b=`Q4T<(Y1qcKQjLd)QVTUs3+8RDQA5GHF,<rrWuX*o5]3P\q$6SS7:26V<;*p+a)BE?PSE1bsoM^e.=cirBl_ -%]r`Z]rrPtlFcV<S;<l#&#c+;:``e*sFc\1@ckK$V8f`[NWte.RAYkc^W6_5V8!dMTQu[-1pG%YaKGi)(W2eYr0Z=qbH#J"3^WLEU -%9I&16MnTEgNRGXggi7H"Lk00h4#mSb.IoG1Dil.p(+fO(_!-H7*'gfkftiF=amS\HN!5;@d-)J]h-6WLc'.H#e"5Wm%(T`W3[Cuc -%jFO$r+Og`q[+,WWR7f\dHDUtV"c)(l3=k3a:H)8!R=iXEIA^g?mR@XP@U(\AqQC&9eJDV;?KKn^VRJbQRC#Ocg,N?BmK=Xg)@I&F -%2[9UIY>%]P%q!i-NO1Q=Yb#\mHUSi<E/gZA_Z1[IKs>R-Ld[@aOJHa@\qYPSd>VTf7Z(uBT[Sl%52njEIr0gV^D\e"k7^A'-A[Vr -%%TURS,gK>N*)B9E!?trJC2t17-G6u[Cclq'kpe"FEAZ[7])7R^au.:s\)q-J/;?Q;!km@(*Y%Q!OdH.rVuTf!F?pHXfpDR;hH'cW -%/V"M(.g`CEgBYT!/<rd,/UO7R,r8727[:]*UK(PM^nTg'C\MpF&UKqn2U_7-bP$MC[HAtQnU,Yi:_#)Yc.GshV%?fRa7\Sc&6TWU -%2akKEASrYj"L1h(/-GO49Nmp.g]]#6]!4mr>pYo`%3AJI`ePW*SsnX]3Pu0BlL,G:Ap*.3fME45or02t3PGS@FgDD4!<uEDE<C>q -%ZiubPCi(I<H8\-SPhRP!'Y5i7ADs$_H84R$^cj1.o$CubmK"E'p]q7jZq6o8aN+E;%:<aoeUS0%_(fn1c7CiW1o-U9eM%2*+d]Ot -%m/RHG!*,kmb"R)4KPad@\sCKKeDoakU^ER##s:sJg1+o8(Ej^jAP.@p2J2W#CqH_Wq;+6qJb9MN1*3J]R7proG_!p41Vtbc-,hf3 -%b3-PpW*6j%cr.b51BlsQ\?i_E_g6YGRl+!9Pb9&"ese'8!2pX"XA-\:T@pO>R(-PQbK,i7rmeaf4gRfgMFf:9dX-%`.$NCV:K7b! -%I2_tc'R$e'mS4NJa%@Y_883'bKu2?3eabPT7/r6Q;FPPZbhHX]JO'dMkYON>pO)?cI18pC$NCYQRM^t+npLP?-L_<)a^>3>[_.uL -%Rr6Z[[IMJ")%W,+/m9r40RNnodj.r/F5lhkK,j4<MHd*i^ors^l3,bVGd;_=Dg0r%ggekgSJ#Dh[N$:ARVVl=E6q09#__"VBg_3m -%ft_`I#-rp4o[j8_BSm)rO3Q&5hG5J^Nj2D2$p1\1V,gH;hb=8nf_mLrYS<>r'nJGX.$@fIS&o/YnEG]tK)/WO=(*=);L(#/BZ&mp -%O+#BMhto0i-$IBXlfc3@LN+HSJl?13#-p@ooEi\ha!7BcPbqh_Qj$=*H/'/m=?BB6QpSL4=S'_5YT=>M)kPVq;oV@#1m+*AV!$PE -%TeLWL?qm?a@Zg#A;FZW]TSeH9P[-<fc"[r@[;K-JRfrl&S"sg!GS.''e5;GTrc#Gn-7=]P.NGajl/@K&XC1Ye?B:YDDA('2IGXFK -%`@RP<Tdrhp9TaDZg*FUm4'-O>Vm@6l5uoop6:88.-lrF2CTN8L+jlQF#'rp/Q@:3omQEniY6s(k.;Ko.EE2:lSu;A@E+:k\O8Y$% -%+hu_W@mjdmJ<G,]7De,AYqFo%X[:8q'@ii`2/U:+ZmJ\q3AncB-pU+</qp`d\eqa?K2N#N/a67hQ4/'UQGB4US95-/#5G!O"!qd\ -%@4_OPUNDIu=,<#6TWs>s,O,a"+-'R@rXdc`q7EGSPGT,ujok]:<D"f=Ka3#iU@UXlm2l2J*J>s^#9J0$8P75E%$I:i^P1L@<$8;i -%Ml[P-iYac\&+9V8!d=9X$O%Yn3NOTG)aIXJ=TrqdZ+fh[]?$-/p>!2QbOauQ+h0j\/N2@Pl;Q"1+H+<9oIR:Y,S!!YCM`-3^S\&% -%;=Zp6l-QHZot<F+[Aruc9ghb.]dpp;17roVP72%pb[Q`7]Sg/YOsT=,f]omu"[=ZfK_pFi42Q3p0&]W7QK!=k7GB+4^KjP55h(rk -%^KqZG$e='9*F*]R,F-Es$N9E?kA=^Q8Oc9!qp68gQD%At7:s]P/D*YT?dOQXXr]ijI)r[9]&Fu(J]t3o`ngo)hhq%Sg.nn\Fq6=b -%J7pirNXKK3XW5M6&`n)VF%2#CHsJ7S+QPiGAh./9_(!r7p)[tA+N.+=/OGYuH#s^A#HLW1<5g96Q4`RA-3]P\R0:fHb>,[^d!LG# -%c9nmN/;or3)(Qo&j]##S3]g%0nYClHSeG+D0:]T9FhF+V3b.Md00eK=/L!fYE86og+tX9;BcI[q6kjEROX$BpFjX'UjNOcM#1X7B -%]7<.$dZ&"Gb+&[PnH"#*ZELdLYZ\%3;9[H+or[iU4K*ftf`B`1P2`d@ieUPtpbd%,`*neHgQOkrE,9YZ7Q(]E2qTtojDCoDlU@4( -%(?@;Do:h8;U2ukqYo7bfKo-QY4KBu0:9=.\:&(l9FQsu_J6\[IP2RBF+snm=HC#oL1E6@Ep619iO(?d472ho[5o%A:GDZ=TU:`NY -%#_Ien"mFZcOf3eCKu-"(L_e$9S=ea.+:Tcb@AYDKkhQ%rl%qqq^WB4r*DSkoSGFZga?,Ne=k06W3b\-mS)be!H>"'+ZTDrgiBtRm -%d_t7_oO5VeAc@X:W<_B!KY6i^9JnklRb2#cBSqd7T,T.dm._R`.a;iRjec"98[Qe)5*=E,<b2j[.!'END=R2(7R(kc66IZOXH?o0 -%)?;I8\`Gn4[TN3n4*A-)X>nZ`4K9rNqPb-Y[E;DUIB82SHEA9V`:,$L&F,cBrKtS2=:oY-Qe)sFh+;Pu&t+`K-o;GP=<S$*`)i`R -%&Ca(m))5F,5b&9g^8W>aQTTJl"Q.fR.QSA<Xc/'h_0oeT'uJY)8U-[E#$&>\IhYh)UoVF5GH::0E.U-ErbO1C$/&'+@ndBEK,d(G -%rYs18*R&X"LBAiJVTpcIf>"kY'nMa.d[FPi(<[6R?=%j]!\-VuMsGh:I$Mc:N7ef"2!*YXmfWZ\+ikPfB@s?uesrVA^G^bHiF?G5 -%%0\>]`YL'c-&]^KmBWf@e#lZfE?F#&>6/4V^6J#qK4LiN-VG=5_\_NFJL>7^86<f07Wsfkird2"?FW"X\W'>FqTI%P8$IZ0Ll1If -%r@6*$_K&S4Nne):g"_RP"MANKKdqrnZKoEaa#XRfVnh3M=gb-2C2h9V7CF((4M%gk>;9c?d`Ic'UpgDZVNA6P$ilX_o,4L1/h`!e -%<O_2<@qX;o3B_Xjba]Be@9=*(:?5nmU[T:T0:7';dFU7&lZIU6*qmkE*Cu-To;Y'NN2/.S'qf-r"A9+1k,^eg&_`E,lIqDq\>B#J -%a7MR7!U.3J!HE'C"LXZ=>HQ`M7iX.gO5Y!RG3"pD47\ab(8S-k6';k<!!>2Io+G?sp1FuCVe1OiE@r1t6Gr<:*j<dE_#4S^ODd$/ -%kCl@2fJj_,8(=e3<12]E?jl2'ZJ>C6i$ih2Ge#611Q$bd#.Z6LJ8bsPIqRr%&QHkN_Je&%6?&bX$-SNki7h1?j:.WG@8+7H>@ftM -%8N3/2:\K`m2A^XT?$X$6?8CjEE]O")%Zq1K^2>Ve:(g`Pm0Z`)*+r>\3$$1OC^Yc$'Ll>7p'$0mL-3`;f/QPrR1:j>/3mcC_QgJq -%KNo/u%VB1bD-Ag?UOKeL`3JlU6U6]OX?/A:?:J(9n&LepC/X^e('!jpI97[&K+odeOi\3/O$&U-Iainqkl>;B<R;,-&9**A7=(V@ -%qCn?ae&]ZdQYn.g^kYYsV!-b,TcpI1m^];]9ncmEiAoliaE/U-7"68/@u5u8iY8`<HCG157(eB(jee<>PqIbf3f\Hk<LBO!+[.q> -%QB42$%!G#i_&ZC-i%hVL!@]6]B.1#:&Qp/D9pQKd1>69(^I21,L0ogg\8c(6FbZ%G5S7:V+/@n@^rmQc9bL:*Th%_Tq"3#=0Ok*1 -%9D_D<,C&k&.b?XmSm4=+bnr75dd&q:1FCOO4XdY74F5r0(g8@T,8+\0?cV+hOCl!UH/D@%)et+LH>Wc:1Y+*u6`oICc*Aa#gOYh_ -%em;2g$Sk3"rnu%gZS+<=B29EB5b-4O<^2BroHlj0!BJV2hRrS=V,S,aSnA`K8jF&\#mEt6J&cqghFZG_Gree+C\DO%!Rid6AHehJ -%2UIeYeB]7O*_i1Uc8<C6'sj9tBuC0tT1SYlBfrl&&?<mB*J'SD-_qLK#;rGb]KLZS871]Fp-m1@U$Ot7,.;#i6Cc!q>:sKf7(d[n -%8,,ih('4Y@8dj$MP%2^?X;1hjd]ZJ!i#qi-F9hNKoj=K;M>@<!"D2J#rZHb]7UBU(8:MCS+bon<'8$#)62VHD:(Q9$kktJFV[N"7 -%BBofjLMSEbb^oI<>M82/CWZ2u9&4R<+U$B"Bg;dc2mdiPTO60b_)$2kr%Or+_<<*3=sQ`rb`@ucj!fASl#r,S+R;]5S-YGq=!aDN -%$"aT/T@[Jm7j7'qlTb?c5Q9Krr8g`E&$Sf&iT"qO`PDOZ.A5biFoV*[WiLQZUMD!SNcW:S?[g(4(B!/R9t)e4X);'J5tqfek5OWF -%oABO3U-IT6JYAi2rdtenjDuD%rKAdqqZsUSqdJ"npU6(k2E+&u*^>8YI:<pPgR(6GSOHdRi_m8)Fn8ki7.8RK]]V$^ndckpJ%j\8 -%Cg#*ClhDE9hsQie2YDH8j*-(KN9f1u&qN[Fd5LsZG.e+^oUou7mJ>XN?`f`%bI)-5G-1qsb\cN%5jQGep$:FKpN:p#*6S&h:&"[^ -%.3?fT4`<L@]:O6A\pA/HlLuE`Fe9*:ajoO&8'L)eEDo(&CNUS#NDI9:GFc!%I=gC/a6\c(M#6#_L;/)I+&HQfY3Tu;g!n*hpA&I@ -%^\r6WWMJ9O-B"t*1j*bfplcbA!]Jp(B9XYiH*lQ"a'6.pC&6kWq7LiG4OUg/YHGJH$]`JfqfF>;H3j/#j7_<oB=i:<:5Sn.qln## -%Y1p2U^$(5Wjq-"8ge<4MjQ=_Z7iF$m?B=pUS*?tj>h9R3Upb;"rTsE`S*@ulGTDTMB>(139g>5Ege>JrR1@-deQ\N0/'n:R9V:?k -%Iu``:Y^bG%5J*!FA,F7sq`HcU9q-RNXPQW89XESLHG;3+q<iD$eYYfb[a/"o^.eRIb<Do9.^;'g=@ZXNg&OGM0m#BC6^X1?/buu* -%M5DME6CE%N&sM'DAVG+eD8UD`8_cd2D<:"CEKdl0qf+8WjS=24pptlhbC8TJ7#.BP:2;dE9KY)!&9eOSJ`\mq[pSO:gO<m9n(hO7 -%j"8:L=8grPDf6"hPY,c6FWGuQPIiqZD#AClSj,(]DXB:g$u#AsI=5a55QCALV=6TH&X(&o:i-]<:iY*)S&<dBI%A$!2]Hc>eMDTt -%k&@_NRn/"nZu'loGAaiL>\uc6IlFptlgBCjr6487_V*7?DpKEl]5GsC:>>_1[LM6q*nB(qh9YOEm_A)V,(t(8NTFT]:HNTj5*%lf -%G+P0a,^ZLUZcTlUFJl>2N9i9TRpIuQHO0WO$(26+Y@c8h`Y-dQXDZ]i6p3l-FqJ\4p3^nYqWr;NP`t\19L<`0$62AV5EToBKH<.] -%_2&:UA`NBc>5B`dn=gAgL7l7qk)fPA/X$l=^$5pA]0dM<VU<tsVOAeXLi$o0j'G.^p=^J#Sgi/mKa0h!KfTjN8Kh^?,*gpOF!q[$ -%BLCD]EGl!BK'oR^Wu>$7qkX55`c'EXD!aVs&ZuF8>[P-+;N9:]@ou"32@Djp[Wmh/b[`XMg*\O/LaBoT6'r+d"[Mpg?1TjKlV#tp -%We^D@a&\9WF.)A>`4AbSbM;6Q1r3G>eFGE9W[LF[D/G*qZ<;Po@tK&9*+7-cZt7kGGV-JjH;P[a]R:R9=q7NiVZ2j(Dhe:mW]f)L -%7i2^h]BNtr6iSTiIV@r-'LZgW8k8pkPN2UQ#d9qO=>]`t@7ARD['u&OJ_6f<9Q*:*Mq^d%SlMYHk5ed'cHBTTA(nF^Dj,F)9almf -%YQLgdJu%YA9Hdt%:nM8(A68*oE!?prf8XhK>sfa62FUG&:;Z4Vr#F`3FI4VG9hat&YT$[(#Z2E3A-`*M4)"UgZQ8PJMVeH%'0lT1 -%WO8iQ6QhYa+o"5rG'putAVM=[[H*?p:iQpgBda4X3WpXHKh`W))0;boW(E@,li<_[3)d%H6q8DG"1*NP_<Z&HB(5L.O))RJ*%QLI -%4^sOe.oHZsM;CddPpfl"F:;^NS"jhH=$\D<`U,/l==-tOC8)]"`QuOaA&];7B6",Je!a!7>;9P?+4ADmq+82Xi7:>t*uR%a<FU_\ -%;nc!_9FbD1'G$.@kXk&o+g[kEl/(%=l_?tAdVj$?U.sGVlQp&YDN0BiTVND^5c'qnUE"N21mYp2mg_ISPnZQ//dg,G,_t(\aFVUM -%Rkp)>dq!i.>[;[3^ap!pkgF*g)U<-^],^(L-r`:@'m))/9C`q;dN$QEP0rs:pAj^`-;ca_PB"@fOs4hC7d"eR3L`TqH^<T0[B[:p -%nZB=^QREk\@L9JO0Lj77lR!?2,NpfiABANgS#\qkLZ2XP-g7U2%ne6MH>q[i"0--KosbIKUhAIJnA:+:C<d_7#(@g]gG0&TN&F-L -%1fR@M`nap=])4'446l</&c^k3gI6S2KbS-<htLt+9NH:gOG(Rrp.6GaX></EDiQ-;M<Hl6>JsjT;%khY3l%@O\hd%)%SZi7__1"A -%,t[]Ver##.">isu!UmiN>uUtAh1cGDk?3kfT#`h.WQk0pK?I_U,bsG%>Mm7TYlR(8ZuMc_l:$gE66(o+kdq!r5M:<M5otYHRj9AO -%Z'=WK%.Os6ce7WI!C/Js5RS!"!LNsqI%J^QB!JNWeu\BSD/f)$b6\;D9;-K3%6$4M"nO+#>D\N8#=)=u@AK(u;iJR(]hW5>M!G5o -%,nN-<b,mc&fuss.5X@A>Xbe0iK/&4='.6goDEj3N0oK]5H9i(:n#%1XS-s!\Mt@h>g6Xd[TW<Xsf;BJ&4luj2a_2VkG1_Q@!V6Vr -%0iE$#r9r"s,O,Q42,Fc*5Fdt+TH4I%JMn<@/h(rl)Y+);#F#XIAN"%Z=];'#bQPu<,9GBM'QIPn;a^%2ipk\Hc>pL0"6D+g^:"&$ -%-@pb;@/"hFP=Q^YK]9Kd(^qLYE;HN!lRi;$GK^DQGT'#\L)@nW,q'JdJH?TNV$Z`bLCHlL_CcBN!(<^k%TRa9GT+kgmLV`=f%6+D -%8D86o_:&IT!hakq*\pW]aR(2HEXl5cb?#WIlT>%B<S,I.T<;UfIQ+)Sr(Q:0kV(Rh<!bTrEQgO_A[0<`1:5KV<j!_p9mQ!a:&mT] -%Os]"lYIGtN[7%!_AY*XMfWGkc%A8CpD]:@<Ebu^g#k-5snU^NKDLiE8307)k_\(FE:=p()R$WLR1[ZE^,$?2(bd=SYFtmHEWgpJ/ -%c*BOp3A^MgeRFDhfTlSP1oB2sTb'\M"f0P4GT-,p\rlU.hTJ$o;*<QE0JS/$4n54ja?]lu>.`6r\EuG"LaE"$qsL7;*ic#J3k^[W -%JMeLf]ZC"eQg\�GiX=aB#RMdi5,Fc:S9["(s<JDGr<;'KtP+Fg5N):Y^&?C^Zco&>$_]j+XaL!:E8=n.Ni]I'tc6,!"@*MUuQ< -%$3Ukk(e!f;@gibcF&101OC_t98FD;nB2s<!jc;0@hT_gTd0Hf^)-cCoU7e27K0)4P.=bL1g<prk.o86NKBtm""8lR4@OU7+A/NRh -%@2BC&_W)&,6a1G?^UcFu@0:2C)GepA@"glBU&421cX!_UUPc@%eopqqF?HU6%,hfpF9/n,<tV8fMQ2]q]E3GrBrGK&ecXoQ3CY\O -%h32pt_@+7fH@B!/o$`I]]PFlO'<hj(5%FeDjF6L=3.8ZKa3SjQS>;q#PPXda5-2X!gBM]I.M6ANC>iT!+<].%./kr@]"K0g5B%=S -%W^5mSV4o?+5p`AYdr=/eNuuC-YuRG5&GX(fAlL&gMp_6$Ha/5(DJ]MAke!s'0mB'2,1Q93%ZdGMQRf;^hlmT("@]ErQpQ';E<aV9 -%>QIY+M^buD7i19YDEC-Fcn>iVpDfDoh%d4Si?Ue*PflJ*?'iiZkBDb0e90A]pr)dRk!"%dNHO+<*q\%\f'>JVq]7,pdoP;N<YKL\ -%C##$"ZVQ!1DLL5e?+GraQOK17?=TrhlIU5q5&FrfC-Q3WnfjT,qVC`oeQsI.Zc]gRcSmN3GdY9sjqZ1nS?dDqgKPTZR-d&EF.)EE -%a)(JhZ^jnJ).pM;1#)\fftPRJ@$Q/\D"emT]pnS([f)3=hVusBZQ8M%m=*)lpH*!AhjA8-RXS\Rl]'S`Rjm*.T;H[ggV,6MQeAN# -%Am9362U<6%GKb6D1#(G>\=)`/A%$T&]Zdh!A%)8og"u)\,KoIr]iDaklbM6hBb-gj"!,]g%/ofG=CCW(Z6RA3l!/G?ASlPVAf#G- -%_@:M"Ba5!fL2e5%,[/,pj*.E\"j!U3[c[&8C_XDb?[(k2qjHp1m1JZt/`.QrQ8DT.i;<34B:d^1MB!1WGMfQES>PE&FkM1h>F)ON -%Z`hg-cf]cKG+J4f3,[U,i]U%D+alT(oCgW"ADH>P!c#>3ccP-#HKr9/e(ai@37j^FA'O:3T)tGKrk!!Fa<Q97emfU4+9Hk`?)I.& -%Ormq[BCt?5;gd&X.Fsigd/gdAYFE#0X>bR5G[H4DG^Cs_<XojfqsDoYj16=)'5Y(Sf,m/b?`e=te!nr[`9[/ep$?lRH.X&(QJ=S8 -%rQ.s#XnK'g)"%94NQkLN?0>(<ZZdrWB)!t3HgWhb/:#uba*P/SqlFP1?`phWB(OOXbO9ee`dFr$qX<^uCHScs?)uS_L#2Y?J-5Q' -%IJ%'W2`P8D)&[U*'>7a3]kZEYSo!tbni^_GN<8VD+t$+*)p4^<92?:'1*V?>*_B3K`+C8KX!6hf9f#/>O-kEXo>kkE9=gLCi\o$< -%NtYB!2,pdb@,5,M"N;fo[g3d^3nL(nQ*_PD-IBEDJjU2UQ;c?KX,G"a8%])^""J)C&.qT)86[8d$*9f]OR?EIiIpk<)-A](c8TUU -%Hm4Hff2M.\@h$Qk6t6DFWZ4G0cnifgStr0\235ZuW0f;[)u*YX"<nM#A\SfY!*DXsJM#t2W7m(7MpSpH'Wg-uZl%9OS^j0.JO336 -%isoJ8gF%!+'rIi^*_(A]WQq_*.2mD35&Qt-,Z?I0T5:ocpZ@f/j9S%]Ak=Rt#J_5V<a:R1`DV4`AJ-2ZjS9:Rbaq7HLd`CdJnXrq -%K.[=e(ne`*A5uPiCIoDr7Of0c/W#sqb/:oOk(e$090-mV2)d$n9jdfr;9TR!?@s`g3D%>/QC)<(8;9.o<MDeLB.TNK]/"&.;HS>b -%r6WuJ9U'Cn59h(:Y%Z",igM;F"_IgT(r2Y#&HmE-W94]'Eckmu!@V&49tDb8JYRX8']SAd;5a+.Ks?mNV`nt&O;76k#]5bho*fqh -%gjL?0aFI5qb)RtB\AN*'C`WD-`k5DRR-@uopZo.>MHIUA8P;pi$7XLK8n\Fp(i8IMZac(Q%qCPkML9NSDBhk.\tV#Q*":1;;mjuL -%"(b`XrQE&r[O#Bb(eqnL`mQ,Gr!MJ7JPomH3T`ELUd/ZkeZE#.3,s8-CX:nZ9m"umV/D7Ke8(0iR"D.A/q@LF7D=f>=JNDoAVG5& -%>7YOPbti$ZWAJ8HF.2Fk1&Ld,;]NMra%2(b"\2JE%B>#9-t2Z/T((Qek?^tZ70T&G'#+JUU@C&'+':ji)D4Zh@6n(;8h,'$0R?s0 -%k\2k<RYTN#Ce4bu=U.KX:@@%_:1C:e`6VLrW0D3fmpu\@/!FX<nP*5BR)@b"S3j4O:=6"k6D-?<lEE#-74>:*R$3t6-BiM[N'e^p -%,K5HeJ7l;gi(H\.YqQbieN?1=3%,:VQW2Fqco=G#n=FVj>WafE#q.PfSumt\H"eU#pAsbO!<T]$U_tR<5%rX*3=k1gYXES+:#_<_ -%e6+[X#4"+62]=njhebQO7S7]'J:p67knc/N-@f3)#Pc2fk,"j_DHk^q*OHeud:'fr[T4s%WDmiS9^0uLdrh@D=h5lg&#W<l;4pN" -%K6%U>%YS><&L*MnR\6dj<8slZ5LS+\hG3JF>I\T"D&_V,\@]Y(8.t1Zn.Q"+9jU)?9BunX+k<hEHqs>C5I#+e8F'LV>DjiHi`ok+ -%9P&rq`8fa[6fSfr)7IU6Wp?+IL/:=LcfD)^PbQOmH:LkMX(7ET86!c?hpC#HGG9g;%i^?"D^G+eqeE*W)U#HFg`>`mA:@Es`8f*O -%p_G$.U6K`,e1/$?&TNsNU]U[li*3Qsa.UYl<qe?I7,$)E"+[h6r2Z-i`3-\!.V<:$ajIqDa%"-c1>T^Y11qa<-np5"`FPV+oMFdo -%H.3K_)"7g"\F%B48_/2@Tu`,@)r*(Zr+O!K,2#L7,oaiXPkDg'T/<3d1AQ8gbBq\^dgSs8gcSJlZ%oQF+0Np$BItR7>_?JTKRF3# -%GmI392[t+%24k7?:NbgKG^^XCPk@E@Ad->qD#&1ocp2dj&!o0$AhV$cQC.96gVe]GXEC4/<0loChB5"7l6b;BWeI'q2QQp]0.9>q -%[p1R>r5I,Ecj)6+l45,XVJ9]NN"\X2g"tJ4T)%J!r&W":+#1G&eaer2Z:##05!i&g9'>[QnN^1mJs.'"fqr+*W;UOeDK=@W1-WA_ -%OK1;UM]k>O!fEK.8qIs=ShpXW0D&EAW<&'sY2@BP,N1b]6VOuQAMAVS)9eI`eMV>$n2u_KYom*mn8#rFO?8AhF&RFlX`Urc?8Gf[ -%FVJRDTQG<n0cB?n6Vh#VlM-YpfNZi&a(gPbUM?F^aZM?,A74\3"Ms@e20XlkL@;t9^MS<7F+=7hZSF?ZiPX/k4MlcH@jI*tp-cTg -%XkDO!iqS#u#>G%.4%$]JR/^H'mC3A-TnFrlk6.o_,'*(f:O;N<oQ5nP#a`CScXj`$V'amS&S@PCF-3-3n@qO^#e\FJOT$+F5l!V0 -%(2<l<Hfe-Xmf^R:ckPR"d)BIe\fI:h$&9@YR"D27*q(L;J?p!(1tHmn/;sEc*bqoQ!"Zu]hYF7X[)6q(<*O1hQH)@9PmU[E")C*0 -%V_MaD(iAcM:hW6[K;rc*@nHoV.aK9XPR!p4e6T\6:)&Kd?NSQ0B:+&^JL_l!8:.!c'HX4m6dWL*jT?FJ_Qe4mVlj]a$J4("Z$?jf -%p0(p@_)=&6^faA(KG5k50)2T%I4W==%\!tKIllPFknRqpD]s0fi/@sZETlNr45s@=+XlTtd5tGj>R27bYYS'jjb).;XZh]"$0"N' -%"(N2b%b-$,&Bq5749N'ob&]<)[%E%f!;>J;.NY0J"ObeLWU.1**(To4<>fn*L57u8]$Sk3-;kYlD$`Rtmg<V'<HF9A3dQkW[%\iO -%+]<ufJ8hkKJG`.T9*VrWa#)'p#o,@W9TVdQT;ub*k[YaeJbinq,`)f_HgEco]\NcG8g5,3+LuR8nf<K%66]C#8X"8SP%7QHY?lJ` -%=W#QFO8\:#/s.Y_%G/RUCU1G%W>#pk/r""+^/km_3@f&VNi3Yl$uffPUrR,=7@-.6?Y+Nj#hb2nX:(a7<*_0Y#<G!!,B'I>L*<a. -%L*gX]BqJcfVE4>La%&4"*hoNfgt[QAEE^"sjONEXoY+F"XC!UI&D`=X'qT+n5B[QZ/\"m;rBo+S"?uD:d)X2%\G)D)D(^u=Dppe? -%MGg-IT52ui5h!WW#W#l;%N4l@;sZ*>^&R?-pPGsQ=Zt*3#l>&`."p7eG$h!8F]Ra]a%s\"@;_HWhs#ObOm%0(b+KL`.qtd4!246' -%DL?YjS79A]88t0'-KQU?VPppJ*G&e`diY:AS0G%]fr)VC/7PQ0ep#=,e9*suB%IdXTO&?,72::]pTsSt:2iY>X4N"ZmJJSjN/+kC -%oIF%rOT,Ig(h_8FlbRW&H+L8Mib&6O@d3Vs%#.?A@9D363KS?o"BrGc3113o+7$1<HgQS]aY\s&$S_D$^$ZL6c8`W$Ge^3X_H6CY -%nVQIPQn3:%W5:j(A,$#_CD_JGSAp@E*@c!E+UGg$aldsaU=Z_6;kdQsj.KpWVr8*4nIfEs.\&5A0#K0E8bap1^SriF)9f`-$h+pl -%CU+*18G`P7QE$<,H&%JmU[#,-Wh\I\`eL`dLcmA?AW)Z?hNctQkiF"X@C!=*%iKo=.#i4^XrTR:mE/!'HGA(d0M%'h<Eas`VREK\ -%#`7qh7$e]OEQN<:XYk.2Bt7TnZ(P0GFNHVAoan,;iJ"B+IBp$u-GkIfE,m5;Aj,Ghm7%FpRsiK.,"&cY3;(&L'S'BA-6$KGAN71c -%<^gG0miD5OGZhLYnZZr8)8L+0E+jP7OK?SP''GWF+uT0GK^<l,qO)UJnm?k92+`X"DM5eF@puFTc?:"#i>=Q:Z$%blk[3]#n.Dt3 -%6mO?(`l0^-E4WeT)+WSOhDnk12QYAdrm0uUO,VK*HB+p6,cmI"rjY4'eB(2hrpY<d(p6`;qdeq)o-TEA(PAW(rV3Ot2oh5QZ=;eO -%@`\$-0_fnRpj*A9<2E+TB.bdNBkNB?(o.1;(GT,JZ6K9u!^(pTXimp5h!-fGW!tOHJn,l#j]=MY,s=V^:md4K82AG`,l&i9!&8B5 -%rhoMfr';:?]ssjQ"ij;JV0c2Go>Bm4W\*oAY%dKt`RoMrCN;.CPn7i\_UBbpfq!cm?;+o1U(!XDPHmIK)%q.QFa0UJ"@*n-BL/VV -%ccA@qa#ifORBd`m,K)A<[mM$,GFF<V4&'#On7A5P4>n)F10CEXS3K]/!Jc%?5#ZgTo;m*F0Rfh!7gs.[:!'fkQFM)]d%sFS$D3"Y -%@b=j30<n,qTt)j*gd[#mS5Z1@P?rWHaIN**Y=&!U#<OBXO-Se%lZ^!^j^O)E#N6(>@]R<U?SqDV!on4/]E/!>&Il?DYtYNa;H%mH -%kI)qaPfRa__3%uQ3!G[hJQ`SE`HI+#PpC@ZmS$\:jPKN*da6`H:gjgOU4qqN8Q$OH&Sl_=)$A!HD]AY&As#1+/(UYrgU8nK_Su!` -%%LiYX,l("o'&ehFdMA/l%"esT8EmC\2+oM4;L;%K_0Tr['G!QUYDP=,Bn3A&r1UV"ST0X6&edIm9F/BgP1Xr:X7jZ:'-U1i=:%fE -%JIlQ]8T8hrLLjE?>LN)`=M#(Igt,-]ek*WZ9!YNTA9Vi(SV_pj=EanJW!K,-1Aq?'`]ZH:=C$iK<%*74E=/=<e-K)GCA@EGW%,T9 -%/SIsC7@tBoCck2oL&_Xh0;0bM;9N.<i3;2cQa!1T[Kd_n&$/YIng@8G;@TcJ;jC8nrV*LOPG/>Dr;D3Gh1[j.06<X>+#[M==BrI8 -%!4Xm5o\'!)r](T-,i[6;Z\m!;gssuZrM']56NP'l5Socka!5lW+..%u5uS??npmB,_0H[r9p&a]k.,euVoD=2+d@SV7\n\C$n)=P -%J=*-33U)nm.1WgVT1kV@8HY#;/!aU1aCrCU>?Z#cl@KOt:;@>435S?o5%(?]7jc7-MpE(/$^7jTp%U#S+>(ki9O\5A;)XAo>`c:J -%/Ns"=_.U<@0>eX%5KkR:I)E0H4DX8g(fS&(X/=?8fNC>Jg3/Zn>Bm*o[`_[iUT8ftq)sZSF!3nngKk:F[S>*_/.Tb'(Y/H@L58"S -%@GD,"7iOX%SVk`JN3Mf7cQoAhN6`P7Ana"rfH*NHMe@tC<NVb0Z6GsFJmnHb&\,[p'Z2nb+i_H@;.Yt8!/tA`fab?^OSj](cHFaK -%Eor-+)j7X6rsB:$<@"';U\/sqD\3DVS*u]hp0J(qG9&OU!%0JB"3V$o4;:=GYR_]L"q1=n/JHGJi-C8*Q?8':>coa+f1=eJW&u(W -%5?#O*!^#LZ@Z\/CDHYO%UVNF)6^G=.E!X-fAThSA..&=(AXnr5B:["%KO>0q=L^fH`aXLR1KfTm]5a9DZ;^%a%22L\.n;`Ba!,<m -%i%^Tr8X=l9hL^tU9\Pafc/hJVFoO3:BB3r#KD.lpgDWP?ER6-I)5J5@U,7!/4ChMHFsE5R=?j@E/Nb'2Yc\g1DP^T[MIL>9^L7O* -%!Bc*mSRDdSK0dDZe$PpY_T37%Am:0*e>?JMTt6L^`^chMEEkgYT\/pn!T`%CcS/&VJjD"m:d6^eaZ_m37lVT6T)l54`.f.;aqX90 -%'<<&'UGG*O'ug)"*^[jR9"<d9)8b:g5d`?u"a[oI`3#TM-jlK%C$Sun+^_kj=$[1\[D3dA%d&;(:Z*tR7&#>iG`eo%1SK)#A8-q$ -%oscAI\[<lj_F:GCO8G`.'ATETQNYr_\i<-HI#R+FYVLju@AF-YV&N55KM[ioHV?iU*>B:qGSg`m-r*9A`j!s=-q$),$@dtN4>tN[ -%ficS*Y75Y(90ZY`=Dg"pUNsa_@Np7AO8#M\*J`G:j:MEe_$CR8I3CG48;P<ca5KQi)8-WO+Yi^nna9,3?:%m"I\<a!.&F_k$+!Br -%`fF\CEh8lcb(osK/m=D%IMMko]i:i]SP;k6]I`n.#IdF(W[*5ZOl-I`J<,<_kL03X8:`c8qOr.D5-tXMGCOJmOGDF?,,5d)\QQ/[ -%W@=qfH7Vgl;J6?f2#&=-IS/+lJJ[qSH63<JTJoYsc$b1q'h4KE;q@!SQ<k@k=O?N0Mc)\<.3@EHoUQ,1m?4<B0Jim)F2)fh.&#NZ -%Kn]1*Y9[*l%iG35\TDSO*CblF2be47R)9WJdKg\%@<-:)pYj?,ADr8%lCd5c_9gOs-%TX("RR?Q@1RIrG+:OX@3D[$3%,sCW4Q/@ -%bMg<Wn!,M%g@G_]:kVgc<Q%-b)Khf+jtE2$2=b/-+G"+@Z]PZqRA+L7ch.-]5D54/q-7Fbk'kaYM70Q<8l<oBKd,n(*B5U6O[$<Y -%#:%YqNr#`GF1qC_(C&?Jc^hiW'FLtN66A"rO+U)t$s[g:\Jqsu;lCC+Rh;=2QWO&?k0%P$+FZraAc.PH?&#oZ_MHf?fd?=:-!l^] -%#5#.04uF?:B$rG1-A20K-Y:i[:1;O1;YO>@.an/%=8S>\j!?(j4GZSKN.r&VWWcs`^K5lNc[bP<iP_M'KtIq0;n3e3!,sta5c35Z -%(ur&d$tVeG4<SR$9Q_[RF2<#R#G1gHE34K%3%d+qC-BX?04S/+?4sHCcG/=oai;<\dGW`iO=2%K@t&^:>IQk*'.;XgDOL?#+RpE, -%i`#*t>"It62Pt:7gc-%#-(\Z=?qY`r@4S/M5q6G:Z&bRMRC3"p^5,b8]jiBP[-)mPE$eEA,rR2!aEXB7+s)Wj>8[Z\3LlfKdMW%u -%GTCThYHR\qV5.5D']C!!``t;pnrVi.*\-9mOh"_=1$%/NFkr\#e'.#,=n#PRd3R_1XW0?[U%f^NI-eS/8:u[ZW^pM%=5HnF$6oma -%9-a[=#dXgXR"ZkrE-VXFEE<S>hW7s7g:bh!8tT_#AhloVMMV9M/6N>7i,`F<Bs3ad*'=)VD38SFgp_b1+=)O!6+RM:&`*D])ai<s -%%m_+1@P&uGm0jDukh\JEH\$IHPpSbi"Z#ck0Tc?N)dJ^h7O5<qm0tV+Lh<@PPC,!Gakf(a)P_?A8=pBh%m$)r9D2(V+`X=s*esIF -%Oeg_uZ/Ur+%&D'SD,$&\;jY.`U2jfbSirFhC\5m!#D<P/Ac,AR>FLNe`jW(Y!dHe;"4>['nn4$f.1%Brom$iOk^F2J^g'rk[@eU= -%?k0C@\7uQ^T&jSJ?%m^jV4o4W$X@(g;j2jA3VU85P.eI"2-q1\rTU=*6LT!ELoD/GS&@-PVer'Al7'/LJct7;c:-[NHTus9)dAl_ -%*JT7Qd0,OW5d^oIW>tmQD'Z`#TXXfe0q"*[$D^RdBZOc*co(DQ"4o<^<KFuV>>UYhh.#N)Y+G5Ll^fhAO9K/b.FH?!0fkJ"JKb8f -%HhS>Q2"'1ljWDbl*GRq.$bMl>4"N0or0[V-pYuh#hH*[7S2S8aUp'alY,T0TL.(,'cdYnCVO16MWu5bLF?YV>,$KM%JfPl"fGf)= -%eO?/kp#lo^B]f/X1.Rsd\r)+`mMpg+bu>B@Ye$'"WSVq/Q"T2MZG8B2CmetA?CBl?:(!5as/\(7!pm*r&Gm@<>9t_E0;_\Q`SQ"t -%Ad(D#`(e(L%YI/m1JhA70JZeh$Qk!U<X?*5EAs(d/$Bmpj,gD*.BZqH?r/Q%aj-mIL7dcT$75ZVD2O=N6)d,eBp'YPqnbS6k--'s -%MM]^OWI.WfeG$"uJl]Rm=Z9>F3N)bn>:(Pa>Le'cCG8mn(!lt2#1FQTSUl/I6p+Nk'VfIo3t2li":XT7Vs99s$`MgdPf#V[+=l]R -%P@V\.?Kj(0[h4-5*Gq)p'mNK^oN\$.pVU>+EceuZQ!SK@i_aSIMT3r]j"QM]l4hkNEZ?f?.!T-A0O8*=fL<7N@&$`OFp][d)'PLn -%Q,=;nNa,=?n2u60V>sG43BKD@kE["\JIn9i"L0.=1o]I^3<$OU!mS9FV,1>l2'?86%'inl-[DrKW<Ung)*#+)?uG,*1c&,U'lSkX -%APahZ&q0YQktLWQgpHGMmtPP\bRN^G.Tf<iW?Mt]BKTffCVd7>_O%4X..mqQ1ad@+2oj-Y.M=#_^>ON;"9-3Eo5Z[m4Y7QZf6.bg -%ZEt67Pj/m)""kJ:mAE!7"_gEY3Ng>I;na"\TtL`r1/I_BoFXfd_`I3S;rF*\o-!f]2h;LQo94eh_lkR_F&<YHdE,#s;sfl[AJhBd -%.!mRMTkse2TnJ5((*+cDZ&l!A:7G\fJ/.4B'Lu)*(C&Y_!)!h,:L)I"dA;e.PB;2.hnT@+O<COd_q`TN.jk6r$ltlbRUbKBMeTK3 -%@fjk\_ZX'mS=F5*lC6CFrFk+s)3!!]CW/!LCHDh8c2Xe\qKL3#Tb%^A)+1Xs^n#'j>l+Q#-M'?Ie9!Bb3tYr=3Uo,(2T9a8WGe39 -%c4HpbU:n`>7Q+6J$Fm?iEto8K<CTiNlF0V%]p00OTCcL$SRafl2@B:0YeMq^l%ngj#d^PLpdgN<'6*:X!@2o`&.ZV[Mm++i/A/+N -%mho*HAi7"C&^6X`)Mg@+EcQ\/iA4mXk&!1mE,FeiB46@/ZS0fj&T.^KkA2>%@+%j(a"V2D`Ci-\[AqZk7&j\6H<.'7N#/BA1:bSU -%ikW!5Mlmjt&Rg)]EF)p3K]X\<hl!qd0>c%@T*'OH$mk$nb4@?pM]IG(>i2jtl9rBh7oM:'Xb/bH\hqQ0`#b(!$Z-o;4QdnV&ljgI -%m$M5DWQZJ9@HS<+B=JO?U.%M@1?@\=[\X;I>IAV#kd(A)#ip$%Z\_+&>0fTA<.6^TX;"b8^s`E\!F-,p`p\P-N8rRl(Vaj515&C8 -%NN0r^C0Zl7*%H>K1`e''1!`]j;A;]F(I:7rLT.kJ)E%:DKg77,UR8<P]'bT0+/k8F)"gmu"(U37OUkV7e7%oSQ,-`+C_5I=]PiNF -%j1J&+EXQM\UFS's]2FF/Ma$ir,,@D60=&]C^:8fH\BEjn%2%c5?s/CJ<7-IKmc?"]7(n/dNtM,cGRo19Z\>.-4Kf-<edSq.hLEU5 -%4P8W_ZRSYo!_.P'=m1SdH*s\@^*q,$3j'R^0N^hAb,poW6q(eD66RP)5lo@V/47MaYnb@\&3rV.$%>`kX;])4<GMuj-(^UW<PO;3 -%3aJf;7?in584uW)5I7+XPV-CqDn2<);#nb#[!QU$$uj>$T2A^>/5nib$u_%\'@`bg%B`hc%gRoi8f1%n@7_kL[93b?)S<CW.:ArS -%N8rW'qR%?<N>C3lqE#s^P9"foJQ5BuI9=W217d&dYVj=Hfog`Z-qNs/[no"`?SOQ$_)6q,"A.d]S$NV!AUo9VRDb7+E`"_!H<eF0 -%bG]7u_XR((J>F-u"8L]dOs4/E8MVPnP?^Zk?7!E4Yjdo.`PskE(<@Yk:nlrTmO(2.b=#tIBf(3*FFNY\cn1.<@FH@H5Z%q9)mj4( -%fTLl1+oG6h"9WjQLoU5$]ol+&3r*'+I.VHsRL\3NZ%_]\L4&M>F;hhTi:6D&4$-r,\I3)%E%n-EVd]'eAoX;FViF_,ernfKK:MFU -%]k&sDVfb"ljG)>OTiB:C7?Yapmt(0(Fc?>?#GMS#Eud*7_kL9]2_(%+U@2%pRrrDao;4<Wndr8#FVoB$QRdbLKAJPI-0)3qD'[kV -%=87ga6-JQHF\7'lp'!ibZ(ZV'bh8#a,dt'.jbE-,l@CpYE*F<OC`A?PpJ'-e<OH<jVdXj&L@hd!Q_fk0h6`m'?XTm<$f)u@J^73g -%E3.^/1e/ZG:E>C>MCJKD[/:Y"C[;a8F#!HJ8OrNK.8uB'Ku7h/Qj5/iZ`EZ3')Ft`QId:/c[?)1_0k:+`bkuiDSc\ijX)0#9t=so -%Br]0@B%KP#j9/n2`Jc,i[$/[Q0)#hM%K,u1]h3f?j.VNJV][eW`\=ffR-KbjMtt@qrVA,gXdic6#TSVnpsD%XMpp9+1jXZ_Y?-KN -%b0W6T#J=u[4Y4.+<X@p;ORFZe1RaO)]Z&(rh>7RWBL<rWVT)unHfA/U*<66fh4Z,G[Si(hM%HNDZ8#p%L<"\ALqt.`'Ys4%qOW53 -%.EMN;Jq5-"pTRJS:=Vn/M3Y;B`"=jmi]YM_nMO4cG0cGD>1$Ni);TBn&?M,n;<iGlr2UP0SZ5#pWBBjD%."IiF,jm1s!((H'drdV -%dlc;H:pQNlnd)Z`f[:>H.k*A5I^.V=,a;h,IUn06@]74HBo*rW)4O=lP=CQ_Ze(-'`,W+a_0/i.@qdVd[0H`I68@Q^Kt*n*RZU%Q -%2,BA0E!Urm`"u6)(_:("/"N)^7n*agX!WK=P<KN$+94Whp9Sg<72]Q:4@]lF2&8O>Cu#Oodo"RW8PeS/)V;e'\B<M&X1;Rgi$_FY -%>,Z`5m*<FcH!_U\\sG]*\HU[V$/EG>F6QYc%,@k-\fmSOi2Kk(.W%NqT1R.umd!_&G\utVo`S!qL<rdkm>!>BAMK%.4:K'%&&A"W -%$G-.PkX/41;_VH+;a2=H.8T)gjPI3'l!dCsEQI^94cl&]#_*Ds;H7RuMZCiU)bBfnL'1m8H,-P6T"-B8jl,!I!hu#I3FhkiG=Udf -%`d<;aTrD9.mPqJ6=bk&B]CL_tXIH;l5tO0Gd\]@]?[fRWFf5"4W58o>M=;N_VFoYIWSq9Y."s)L]:4DMhe(dX=cjTFTXOp*[[\oH -%:EAF<,Lgk?C5#8TO7uaGXXE4XDnIDrPg$Y38J-nr%iCo&jT`%ICWMslP2nPjXJ98*Q%j%_!@pcb_#-bOYZN*0!t:\r_i8f-ZA.T/ -%@/OuolmJmS#P,ZM^i3>/WrP>$*2o/kL-0L;+1PEH=VEt&LA<$cJAI'k^D&OpaHFadUM\VtLF\H\NrjKoams?m#5\kE5%HgoE_m7g -%RhZ[G,`/.J,=F5%6u[ks[3W[g+B\^M-lAqi8#,ndDSCNtbYJaKXDr'F>D"jpKit\YkW9RF%Qd!2pf"qu'o'ah(!2E]#L:mN%CeBM -%A7-u1XL`WpPBSBZfD:Nr@*CcOMPCuM"@Mquq<Om;e5uN^!/*#a\Z!G?)oe'#JRcO]FA\[9X&HGCoa+`)IW9'7_8@uUmu87G#".5K -%JD"&:+l@p`Q:6qeEH0cf%c+?MOhou4-*\7e)C#(EClb'oBd(`F7ZAXR?GU)8nei`#TYG1,2%?UFP*1ZU)2K.X7JO6[]%'IU0-fsp -%R[PkQ?7qRCh/s"FKaUU67I.7rA^OU2q*q!`-Si'n#U;4M\8[U@,DHMBKA?*:]\ZVX%-%K-JZ3+\QsP;V9il(u_SZOI(q66#&b5'[ -%)GG_@=cIs]43=G42s5=_5#ITN,IpHCNXgPME0fim?Sr/t`b%Lmc/qb;(I;<C?'9XP!F(5Z^Za5gg$EaGW(=dL6KsHJo<JFhQsN9+ -%7dlsUjr**LfL,*=mpR%5&?2AJ%Bp"UB(OI5N]'-NDJ`'PhS:#bF9B!!K!qRr77^m:Icj9d>l'H,PT\/.*Vg0*eP:*l"]%3.;kg;b -%h?Hea)EHOBMrH]HiL^]0nGaFN1_lV8kBA!.H@^:_X1H]Ak-k)_mkZ%>llZ#p\"Z8(/rON07>J5QCV.'<:d2'M<Y+3#qbmTge=YT7 -%jF[Z5@lpb3"dIYsU[$%O^.2*4a=R70i+I3Mda7i'c=js(PKpP?2F8QQR)LWkqn3FljAR^\*I.lP.J>a1dI[E+,e2Vd0n-qlnd$a2 -%Zd7ICE^.?nC9[d8,(;4Nmap(d1TV1GeI[MOZJf+4lt';-eD7nbg+Y?>h?Bm*,2QLPC'.i]!>9I=N@M#4MTb-8[SJ0U:s_3U$iZk, -%a3<DR'<7-6JYPV=rYC<Q"MnI&^.i^d?TnD'J,YA@r;!Pr_`LL`1/gs^g4hm.4n7P[c^RZ)<hh,cW@!%5>ZY@5SBj*`7;DhO_VOgt -%%)"d@7n:nTR&n"XG-7eOrGe_>[T,J'C2,4E"<S?W#$r2K5<`'[Vs>A#-J!`07T4R#qtfpT$pRoa*4EZ""8E@M>!:>Rm%+;r)=T8O -%ML.B'%iFn`MoLjg]/eY'%B=4-Jh8qIAlY_]H?qrE5Mha#Q\Ts,m:bK]nm)3lqk-?(31%ZSfZ;f"%KsH_GD\[E=hPX/k<<T=;eCP" -%G-<,p3?$n6l/]&&P5%IoR'.\IK&EG])QSgTO^fR2qW8MVC2\*!cgG^QdsVhlU;0*X_N*_T&tG>]1UK_aT_H".`$PW:j"t._M*2q6 -%&,cA=HLALFr6h4G4qX?3A\#%N;9o(0"s7%mbaM_sE.7Cn^_T5KouVaQYFOUrg8.mcW5<L;.2](c28['HULMQap=fh-AicH`e;^&^ -%IY!>mX)o,_,4T#OkU<`/1&D:15+aMJPLqBJ1oskZIHpEb?'"c(b"jCG-*HIP,,E6l$;-g8`;l9X(:5d7P_OKL\ki,I+5#/\"L2tE -%:VV%Dl8Fam4\\4.a(*e_=d#"<P-GQ$&ALusPN3hJoLtE^?HuEAEp;[75+:Fr(!8it,MC'.A8+38[q%f+NLMqGJJ3MaeVTm1`@0`^ -%8-G/FM.o<!/GRlhDo@k<f^u^>1m'kd,H"#OpWf*.pP2nE_,N)NGPsrZ_e`X)2Lr\eR8E/0hB-$VYi,\9?2K<mT8r;8D$2Z/$I)Yr -%AW"mrSF956i(0EGbNF/EPMf+ZLm1V(JX$D4YWS^[)DB(8Sklh^@_Ig5'T?;Ul/8VI11>tJ];oK,l00jkr&^+?0JnQRS33S8M=ZG& -%)1qKZ_RJ')aaBP-RU2',oFcU8<gL'AXJneq-1TNKW6[[G%u:*)*a5-ra1KM$CX;T[fbo^o6dpQKAPMae.)h?%IM>[9q2@ODBTgU` -%s8&5R!SY<_>_MuJ'r1<0KEr`VHp$&T)ps:$S>1A#*@^6j/8_)U-JZ_McgdPR;eJHLWHei_pIQLn.3MsoVQFiA7i>q)dMD[je3J)n -%$>nk<7kl^pQ/..A.8LcS+8om#`N4s#!$mE:O%jDa;Cbs3BDQ.6OI`.D(c"FdVRP6Y,!MgM*t+pVG$a_olIm^IZo`g7$38AU;"j!: -%U,r6s(*s)&(-UAu&3t+*nu@K2W=b6%al'/c-F(S2I+,n/Qk0(t^\HcqWp"P^HZ^Q\YTf/7WJPZu:Pk&,0LC#O.j$4RFpO3ac$:9] -%?2e;V@aV4q<a_^G&V/mr.4O^"_U)4cHLDY_&kbeanB<eL0$*V/B6MJs$ga1Zj'g.GpnZE<dh.Wq4M3:qr:T`4J$J#61(eK:8qD4V -%_g&iLll+0nmrT9hS/.\!8[AM!<8I(>TXoH7/7BXCb#PD+ZCHO'0;0%A$1b%B2XNYucgIk(g/n(_Mkoo$cBLmAD>"j2e)g8qhd,Z- -%l`r$,D5W.e=%ZSiN`?+UP(6?D]B6Z;0XC4?0<_TS(<htsOg@CD]0ln'gc6ek0Wc'$YQ/RM?/3PXW4@\hq<_:br7[(c?7C[(e;Ho2 -%7OpA+"@jJ]<[XU]1L`pE$ne3eES+$n"?#JdmiD&ZjY4aI,%#B_.tUVd4`j0KaH_:S"%jQ2;qJq-?hZ)TT+I_`*#J4)0a!p"f9gVH -%ghOaY4FJhKN0/)!8f6%1J$d&9q0CFqYF`.h<4$(FL8)]ToC^/)CU5MUNoMl/=/"YPKYSHOC/s_NoH!O6.1^IYfNc=&!D#,Cr6q)s -%aM[YODM>bBR<4`@btdEN@5M6r4u.5.%7;UM!=;qSo=9ZO#-aD%<]RO<*WU%GFf+/<SXOQd7[AfugT2l3^4#G4_ps`<<Gg]&!HBs% -%lLSs-jkF<7?=,cC3qAg^n!ul[3DLA=i2hMOc5J$m,m+XSC^@!,M%iqR!#Vem^!1"fGu9aHkh_U.S]OK$24NAKrW&uhS#'PV@ED.B -%PF!Zn_<]m/Y?OL/i(N2YdYp:Nl@L_-_cu?re8DjE=h/njldGs)Cqk.75YZ",gjn_Brf"O[>m&s\EV\KcbG,M\&3<(&*n;b;=bspY -%p43;=jl#ZNRL;s>UuHI<[6eK%WS%.5=-%D?.L:sRQgiYS<G4_3)RlS9L8bp[gCfM@FR,<!NiCHK]%'TR9.-\HXYl,oF/6.JiIKQD -%R+%).A211rnu,4<p?aSa\D\Ci!d\L4*kk(tE*M9O5g>OFMo3gm3L\_$Q&5QJOjCiEUL0-USX9d@H=.Otg:+)X1R@F]Q$]W#6OK^O -%/UZ19@t*S\_V'YPmp,hFRBs3l5d%tDVjEOA!N^LulMCCi4<5`ics'0PP#VaE?ch)dSpp>/;m.tdS/n-t`\jD`$$i+V<7QY37Pspo -%8,:W:>p;iDB#Q-^r?fRQP>rcEEIl%0f^P7AEL.h0SFoih,j5h"]KbT"K9Dr<*eK>"-qRKp&5Eq].VVat39-b*,:(/=\g\D50mo4. -%P7$6@5<qmDb_>89#e/"b<E<Nu[7p9\?+\/HG!$n*RW/?p]La@MG#FOr8o:n+eTmtd=c4fqDGQsa`1nF>9bH/O4KUN<\.`2=!Q37? -%+!0=a-<\Fpj`_cfSSoYEe_hCB,0COc[fG:k[M]JRdaBchqkL],NBe0/UE\\/4QbT7n0T#='NHVNb)Ra4&ZV8+bFmRB*#K3mdeN1( -%,:rGdXq&_1`N*G"<Xn$0\Mq9n[#1=Y3K2',9+YQVU4@72;rTI61Equ(`c36pl*6SJ7^j4mChb1oJp#!ZMs':AP4^f``K1Y.0N>Yr -%daB\<_9@I!FD9<L7\hiu`,JRrQ)BIUT)8>sV'oOSb[n6R&>]5'WTo_U1#eDRNPI)!YU019=c4m.IPI/0RUUr?&5u8cG-0//:%3BH -%Eg=ER^u).kWNt>2.XDdUKoTEh1-s#B]V::5CGeBJq*!_;X&sBRgp-3<'bE1$KX2Jg`bK-R.SIAb5Y:i)V@]-nYBimVIhEQm0nkH] -%,7LqLOt`OPU/hsg2I^*o+dOE:N/phaQfWUhM(DqAR)@iZNq2F75'g6Yl:=BLVUoi'[umi0mTa0G`fmPsY0Oa$/@_&L5.J%=d?c,6 -%(J&^;SJ(CMp\PU%_/uPe$!?cf-s5c9]#glf6Dgd8b>Wd'mLKRDiX.Fl8d>=s,8O0>^"LFG8V]T_r<Z3R@Btur7&]f"UdHAFSXr/2 -%=X"(EVO*d$F<@Lm^iZ8IA=H5)1.d(s0]V\6Mep81i^KN7S)^9d#:<!OcC[fX4\WPO(h\\?q/eqZ*fDUm+B;:[C?+>U^M#HT(u%aD -%?"ekWL]>b*mlAom=K*%4jXs_:/=V]g=S7fFP(Ig10&URO0tJN)0;cBbF0-t^`><V:=L"!4Q1Y7FJISi!FTm"G$HKbZRpjRI/;847 -%7;s5Wc`qZSo\?tL*#W)=PZ:H'\&1u;r3Gdn\/*T[k$6H$N5oQ2TSV?]1r,uX/J>#br#@54f?nae!N2E.crm$i:\&P3\q&9u<h#/E -%N$L/dY9QVefj[rnJ;M]ijNDpsglM$;\tTXI?/uImQ@rih)c?j#UIknN+Z52I8o99-Me=e:.a_rZb_Is[hVmgRksR'"%OBmPB99R> -%:R?>_L!I3McS#h+*agd.(!KZAZ=49l'&@Y1,%m:Y_8*S>"0XXUpk6Q-R7VsN,*Ljb1<;1KCaBZOd/.e.M^GK[a%*fRS`"B<oU!UX -%2gW(sROjA+GsT1q$nqE466oh9`*okj<uoB]Pf'i*ZE;r%CST\riebWkeX?:[Q,+67MDiE%F9_6rYs,arB$!YD6Hr)e,_7>a'btQB -%N1n:+q2;]GWK;m;jL+)H0+IUI;UE5>L>6!1bS3rg,bImr$u.k&J0hKXTEtj@6MI7T!BD)"9-gOH7E4B(/ZN6]6N-Mo>gGgrPk;\Z -%9hnsD]c;kAL]>;VB/P*mq6c\gk=LRH&)2URgcg$"R6"nNYOeSPImg77s-lQC+d($Wb'Hl"rC@C$>*3S4E`PmK@hCs8#+b^)5\sHs -%YoBQ;QjE'`S*@&PUj"<a<[?CO'!b",OYW>;&VEZ^)O$b#7d>a"IC_n2d''86hkLT4mcX(@SY6t$$<0ahr8-n7"lAJ^3l8Bu+eD'; -%W%D+r`8J'8SN_0*[a7*[oXAHJXq`Gij\tSH>SrX7ZdZi1LJI-OEH^8^#ppshcgVmAG,!,d80mdi8U?>V@96T#gLt&u^I%-4fZj*$ -%*L#%Ni&C#M(T\(?N#X38Z2QILqnM>V>@kDt?rEO2/=bK,mhrc1D[lWiW^pj?]_1bN2Q<\Pod7oS6LMO'c-P\nhbSuIqIl"%j]9hJ -%XahDZ:\'"?l@A=-i<*Ssf[LU4:oK'k6HX34E-l^B&H&rH8Q^Zj=_]f'HkFE5lRI`aO*d))\5WX79n?B.b]?5ej^q%BN.[o)!hhDD -%o\[$>?q5aIh^";cqNit?pj1`ua2W.KS-]U'1[c&Q,+N$:U7+JohlipFXt/*?LL(*U7aY#d:$_'l#@&F!'2:-tE8U/N#\6M8?BIoJ -%.(FNkW!chrX_R@80S#'03ud!Da8u^I?DC*/E\9=q2_[X""eAR*BeXOW^TQ!$a1Y&O2!.FUV:@#%&)g#(QhWQ816aZVTV]JgL>(4\ -%S)+SubJU_1^'>kr,At\35kTHKnN>L9o'PoP>5P=,:&T/SM=i\0]LPOp5A`:>X`=SNV;=lihYI(m(h3!kUbRVNm\gf8ELOpD(CR@' -%i"4RVE`9!JM+pp?Bn$17&6@=]RM,^0VJ)62\2Ss\+[As+C9t'^h!Xn,BHMB,JBVU?E$g\4S!t7fa\%VDem#GuA'%@aL3tTs)8?%0 -%JqLa=K3a3""i*Q0oO42\GtH0iCN9i7+B^tFW^,.h$rWbmj4=]@G^#tc`f;Od@7!cXSGa).$]`Q,JlAI/)CqtG;!(4FI-:j1Bdpe: -%+3Ah-T0CTZq*]J!\p.6O8`5G5Ge<8TO06$#\O2PNM?%KoF"H5FreGMQgLQ[GBZY1-'9ucHKF8M&0l4gj:UK*5Lsk:e$<0)dn\O=7 -%<JDVsl$>\IeRT(H:A5gb]no0i]e7_/8<W9Scj1cd6I(9Tp]"glh0(A3Q7K3ni'6_-!NG$ekP\jS8L6OPfPWY%&CH/>#XV*7b<SpZ -%Hup;*pV"S&&WsWThCOtC,N41._7=UKbY)JW`/#"bPc[Oc>=S'<bdYl\@,T5B;E'pg\ILD68F()[T?GU$e2A-13J)XBR;0t`F,^>^ -%fNGsH_3;-hWVdtg^7C^#!gY[Zj=SJS`-E28F4SsW:<?!1)$'$XP"3VVX(h012llDA:Lu#lb!'`5l'!]K=n>*4)k`+39cLC&Zi'fm -%35Tg?j@/fg+Y[6o_T7m[Z%8gd12f6Y?A!6'>Q)[iV@&\*/KZ>JnA1l2kTB!J*i>GbN@_"bKVhkOqB[]:->[;t=m-Dkh)%/3jL5gY -%2fQ0Mr+h]Dm!I#G%KDgkA<Dl;cYAu1q?;+1Z\,B'jG[:!pWEtnY?MdK5PL0Ud`bm4SETJ!XtPG:`t[d3NGJ&:84q&?ZGtm-$l&g/ -%[&>9%iJEm@c&*g<=DX0?)QJd]5u[qOMOLfN8KjkN'G*gc9r9rA\ZVm2_gELH$FS%jL(uH#AU\4K2)=d-Bo+j'_aIPK8k0g6$-W"N -%OMlGMX4Uuh.piPRqiHBG*bCV81+uWOI7pmH[J>3(U8H79`XLEo^$RbM*UO[\gW4D)`6XSAO6G9*1Vr#$7#kjord&qKV=-R'Qf3L_ -%=/i.\e8jh@Neo$j=YE`h&r>l5V-g@k!-eUe:1dg3no)@U&[0Fo*]P?MYe4_IpsT)DQtCTa0T*@B<eJ7J9-9LMWLcdmohsi__[04C -%A715Kc[rBnO4i>kG^,W,G*mJ`gL_?Oqc:/\0J*M6;Z,*);)/FJVNtbrPFY.sEo=DMk-LTF^UtZc1M-"ci[)U?A=S9ZY@"1@J=*q$ -%(/Okm@_/ZkV+gk+:<ZVX_3bNAY#N$qiD4^#WfhLo_2$9ni?G9\X&CaSKOaqF]]aH<?Eif'9iEj'">Gu#j`5Zs""Q=RZr.@9/o>.J -%+M%cH3bBj`$aX].nQ<.3KmZb)f-7[^FkuBa*kGL^AXAM"aXDh.\be7.jRHEFOo7-5+4[etWA.(m3Z0?ap_O$tg3a`O;)K"-7N8>M -%J@7<?+)a#33@=<IXKki+P>s1d7SY7dGhL3YKVE]Vr"Xp2Mopbmm7\7$aY7_7gY<8EVif_JOI^ru+iZ8p4?>elATP[MO`!)M2!AC- -%BCiKP^[[M'q'dksZ""W?mP'F9P'mlHob,rjZ"%\CkUlesD07#ie)5KY^ABBh-SR@)LMCs(QX2K"X8iB`'"IkYe&[Bii[gFp:]hE& -%oB*]B^UO\87a\_P\^*hBer:X`=&TY>T\oaQQ&IM8,7(KpE'YG@X7V)Df$pt%M(G"B#g%k8_U!*E=0kcIaHkE5DfM530p""T;dVmS -%%(nr*?!:W36hbT-i2$\`=oNu4O"*'0p^Vk@Ac_46V_qjk7Jmn5VJiNl*3T:-ng0MpF+TG\>m(d=<dC1t\*u3`CTi)\!AFrkmgrJ( -%AO@cdQGK1>,A%?":\FDq>K1e@IQQr/E/..Xk']89m<ERA\I$9%Ir?",1b/6E?^g3.#_]DO>Z[Qdhte2I17O2L`W3Z=P-H\$,JB]E -%it&.:126FP1(L0mbGo/6Wd+s#WD(\Ln38Zu"fDB]/j<H\IWsXb'i!;DaLY>G<1;UIf$,%H'YEnu6FI<,F_;UC:[f.e(ke8a?UVUV -%?Pi:BEYD:r9m';=qA"E?:H=a'ER/4&i#A]I/L?BcYn]pfF`Xc:NUuD>Ac<(mA01H,Y;KY#E<?C@ijB`_93f?k=UGs\\>];0/qt!U -%X10gfO)saHkl1J"esX9qD(3/a%f+^oI#HgZc;5[7,)O=f1l.%"kd:gBj/s/)iNIOp$K2"RN&/Cr[slkNs/*]hl]:8$qpfk@b`(I@ -%D#%0Sr=%\1/mJH:o]oFE+*6-c5-2dp=Jcrr8m7S&3(qHff\nP2Nuqr`I[]H9>o)Z9&Au)K&Bp<=]s9:odVm_`P7@dIBXHs.Go.Mo -%Mn\\k,+Sid1UQgFHcFe68u9E0,F?<!<2>SY0gc*R::>G0Skb2"(c[V5"1^f<s(ej>L1d'>osM/%o2,/J=k&=ck#IbFq-9e:1d0T. -%:Xs7EB5(G,Rq]U$IP%M]AbV_rK%@V6rE?;a[=4-rja@SjqRN4fB"gH/Ud(I5icSeSWT',Ee]LrSNK[DDa]+O,.s&J+*E6lXiI\gF -%TrkJGa\r'1aD*h][qE!ll2m4dIE>Zp>Ub3G?E83a"`LMD>LD!8;ld=@N$Cme?ab#MmhTlmp:EcDQb]^gps_JPlPf>O.+IXQB3_K; -%U3<Y>9kM.@/).Yei>/oc[IU3r\b`_.T%@8Lef0N+blrUtGhYO..c/N3Z+]]SZ4?f&Bc?2a_*\dKAa3!rS#!cS=it-ml:MBSp&HpI -%TZo\@pn.>\BCb\9cF?W)bX60_5E_214fO0"XqPR)MM9:7@ES`&-tM/.g(c@'j$&I#$6kf%R+:$r'$=Q2;4gY)S]SlsChQ#QAb.g, -%lhq.?Z3knB"6/&+QD#Qp[BK=@R\E.ZR8jO0%7C.??`f6.R8q5V\mFSJ>ZV)A=!D&FD#0DQJ(9a.?$oa)++"W+[Qr4W[f1C7Yfs4k -%R@h'1p3Z_D-5^H6gI:hdm0oAh%i/[^O`dI)A#Q^;fERu>VK\=C6Il`qH0&2aB2&i[gHA+q?e(`L:k%(K<T_34d1C]WVE-5ECQ[Jg -%h=9>=\L%k0=Wqk-CaHHd*TZg>n$JlSkPJ#L;>5q?@gdG8I,FXb_q:%@rSt8,2J\D^Dd*i<lJV9sGNGkIchciFYTIrT!sAVri,J&N -%Ztg\Mpr]l:[SNA/<"e!gcu]#]$sj+Y8XPNd%=GLsj6_KnhF><Ln\K"!TBl=^c#r7mH`S5>2.I8/H1"K=a4g5=4eC6Rdn;nd"2I9] -%P63W`\3A&!Z.t%Qmab];U!@F*D=]kQek4b)btf^-^$jn0b^<sF`I1tP(SBF)2M"Z=9m2#i[kD1S*W+8)c3%@Er!&J8ZS'"D[,_,A -%96QnjM[7ir6J74c*S9W#f3s*A`iA5p?>k=Ib_1:R<u(8=Z@)G-pADDelJK4f\?:(&DH^_T>aABK<IYocS)8Db5Dm1M?#s<r-0cK@ -%bA[TgWiDd<mM#+JUig):H`b!5[Iu[$HtY)7/2lY^Sicb+E7C102Elliq<r_olRg)cN_>H04)TKDDG@n>msIbq4]"IK3u%ebY'm\A -%haP;sds%chqU9Yfr8GhC&Ztp-=j5fL('0QsnkipqH2/jXLL*10WH6seTWQ%W/u.f+,%'f4j0+JY1FSbqkOBt2o<-60pY,V%*54)& -%.&FS8qtJeIY(41ULDI1\DlD8J<NVgT?@6I@AKK-8PM443DrlAcF0YOa<.[0g^7m9#0m=Y!K(>T@<rBC4:/nE)&s/kZVq[ONW?F?O -%;2sqTYP,9)9Dc;DH#c]/H7l21dq<<_\Xa3PPaT4V40n#^QKkbQX^=$&g>:^LX%6LeI+%8FcSViaRj';Q7QBkSHl#W00`-4CF'J$k -%V^f+B:Png0='O2][e/-nSUNa&B2NNrdWf)Gp=j@JiN(=D:E>I^7K5H=e3-?-]O0LEH(E.o$fN//$?D*<Y>O[VQiW7II[/`q1sTc? -%-W(L>dC^7j\nBhXN;rjs]>*Ns=92_qU*V*ohQrF=]CiOND._Dm9eU#Kh3qRUbK!IiCHd[ToSlksh3NoD_/40Caj.nIft-<W`&^Ka -%b4_BH.@R/QF\BOMro;gAIqH`>:)1QdBVf/sjS3#mG).T7orRBG1&@FShq-d8Vfg!3?]gt[0g=oI`7Wnlq;-B8GHFm=d2gU5pE+Mr -%leCcoZT_hl@!PA4g7!ERqc0cYS"=ErQP$l$#(3D)`@tc:,-4MQSB5e&"4ee/Y(YPa'qLAnD@"`N4Hl^@#*'h>]\#-&QZI_DZc5fS -%$`IAI/gr2=N81dX`DE\9cenQ[ISXqVYHN-!)F=+/_u$]"lMKBng63OpmG0PN[.eLpL.CrC[&9/shP+SXd>!*oihe=(G2f#JAG(TS -%>21c$+8GRPF\:St):-D$jaI!E1d;<37sR-Q>Sc36cdh@Lr\CprlYoKEmJ=80phDQnpk]h<rYfC6h4`@GF*Cm@M!i0(;7gpI-'(^P -%F\=X+3FAISlZs.GSW\B7j0cWlH[Km?G7F@A<t1ZF?F"E.h"jc]rX)pen#AN,e"aC:X\5OI-K'hWVF8`BM7pXGTGpZN-^287kc)Vm -%Tm+;%\o0PfD+jOr9$s,b=I1E2]9n]oJ(aM<&CPLc)nh7qPngS*Ao9F(nPCmqQcXh\jOeP:b96f&Y+X$e]Z!dG=^mZ,=fg[Y!)9dD -%OMtUlW7]:no1$TMba5_BTemq-P0]V_^a5re^(ISlA2Xmt<hGdJ(m%cOBO;3iK_'iq>VcRk^?*dMh^eoqaCtbAI(_)V@J%s?+Xofq -%O\G<^qd_!4&q3rO:EOr]ZTV_36*6ds3>#Za)17+B6k7+I>H4cX(k[u$P?s(aKklEVR8T<c#"K+BU0`Ir)0Sf@NlZaX7s+b+o=c#> -%bHW<rR!GRC/oY>E]m20(6#FOP!^b./)4!sl)EB)ViX+r4W!JQYNI[J,%%]Um].`!\6/TZBr,gFh-E@9STjBh#^/>i'`CQBgCTH*( -%*"uR,S3uW?oB1Oc?:>F*DC9ah"K:tZql7/`RoSIs82,rT)uFDJXoo:e.aSY;.m$s676(<XXMMD1Aflg(e'S7GYI>tlCFeF_CoG?b -%NY0GSPZ>BMSq<TRn:qhbi#Yj-puU8EJ&cpj,-4Gn/O.k)+H7ZJ1a!5ao%="JptW^PgSboejB6p?#\jiX"DheXILgl<D%o@S"Cs_U -%$)gP;EI\X9AD8HJ3%@h\4]T7g7KBd1;bUQW5(3I51&:bWZOA`RoC6:Rc0@%4M1\-X5A<ao1hgK46ZV02=]NqDN>e'O->Jj:.tV\k -%rF7De#a+CWT1.[^N!elO,g1RQWb@c&!s^'dA52s[:jI=2c/MdW/E8Z_J_V>jN<_/;]M\/Mp/dZC<=n0kojsa0j2"?IQ*.)u3#HY( -%C-7lYOtF![-k,Uo-UV/<CenTbg.1'<j-Q.Y9:N<pGG"f>(bX9^5QQ%?rXpt/7cJ7.T:g$'p+T^Ad*H<MfqlT$g#HCn9$\u_rpk?L -%Va*-XT"+RuGa#RWfHVRd<&j`oOjLK]=g5Ce/*./-YMD>3a5fH"o>7-PJUW>WrQXD*1D2bqpN81_$!cn#$W9A`r3d6>>\_A/[2c3$ -%,lM6YZ0@>l'ifSU\po>>@7b"am&i[r3b7?;i8k0W(h?TOL[HqZX[+AY8,u&aW\G[p/t%!?5H-24)U&+@];8`Nknk(sW[?JV9m&Hr -%cF9d+CGH0oIa3(tX<Idh#e8*YAN.8LhFHg$Ht33jbAoVJ.QWc_`F@\cdoL;W<?n)YY3th1o5UoACYNPO`!8"^PB^?j0<Q"V+K+PE -%M0je9"K494R.r+-XL?bS=2.raG0<$K^)Ofu@0k_2l/Q1]j:V?/:Zm-\V3K1MLG#"N;rGf,QdA#:AtLr*KdIXPAA,YR,BUML+k,DZ -%.+K[@2T&rn`39;M)[F\^")`-@N)O:GGo`2,0qEJ.bmN"i,$FT=Ms)mTI#:e:qsT2RMs9fpP;2bIXq5f&4=3#-bs3gs;=rk#b<ku0 -%9\i:)?@V2#pb%\]H`RnO!,Gufo`S>2/lf#K*W^7[OUimFM+q7tX*qf;mmm#>Y,>]m(?pK^U)""eq4!raAt;3GfUpCdF!t_-Xml.c -%Z2;93br%_e/nXY`4[tZk^n=ojMI[*`P_@.r8WGGqG+n^/eCJpB[llIU(=JIX(ZfJ@\W^AoRJ(-%;W"(;rncBhIW..SU,k/<8B'4V -%^9^'$]j4\t"#'ki#Be=0ibhTtG1T[CSpKE-*Cb.-8:oFeM5b\l[f\hX[,jN28i]UA4h]62(Q)c.![=9X4._<O1@ak1Z1\*S?G?:u -%B>VD["QZ:,:tss7m<Ye(fW]ujqCSuoX=K`SKKf?ll*^:p`;Qa.]&)X8]KkHdU:Hd[/"VV?U&`b[A+TX8]mTQu0<SlDFU2QPb^-/U -%N=4Qp9R/gG&^l6DNio4(4f@#@aHQ6B^tO%QEdL#PoN\IcGW#<R]0/r"DHD0W0ndS'TDn@$j+9SmGOu9\m0VQ,>%Hh@33I'&<$,ZN -%Y-``sQi"HLj6,GdF^Pr\KRLOFj7r8%@V#*O*?!=n8q)q+>3-JXK<&l/.HbD`fm&)*d'9]?^u$*'b.Lc5E<Tej`6,_(fAiNn193[b -%(c(7sRKoDNhZg^3a7XQ`^2jM]l-I[_Vt+QC`p&3g8Z>KQ@U7/Q1:&"(0[:5o1uI]"?>$u9bGPSRaD3c;d.Mi+:A`O]5'8n(lSZ(K -%>G7"R@HY,96%9@@dhmK,0dj+k"F@a8&rm)HM<G2kK(!5"U5a,_^XKlqpNUlM><??CG0"iTrU"h:lRmV;$)u$6?,dcV[PUbX_Db"m -%hJ8cA$^3`q"Qjo/?a\LmN+:/%cWNEgiVgC+DE*0RIEln?/a[j;q8m!P?HgG)AFEIWI)4-!$J?<[q8$uVk4a5I'2QcB7iOn1pA;2] -%#;U`,S[6__F9j`$-nj'*Y/n<fEIV^V]l!jQ@+#bTRL7sCpGCT%l.7bPJ<_+B/=7fQn.Xp+;/+IE0?a'[>4MUJg(N=INR`;LeQqb= -%hHmTh/sO./+(niUQJ#QY/B'M1j1ISNmE>EVYIZuFkK(YFl>1c<'h(Ma8/"BTr&^@"r;>':lG7*.CbCjUDTB0@?f($QI7IaGaE(IC -%=7iP]&LJY3a^Z.pZI1NXVcgWW>J/33CS\)K\Y%m&67%t-SE=^gYdqXCihtCVDfnD]F?pp`Uo0$^%:l0'QO.9FpMJ3[FR$@Hn\dlB -%(p6DLgknP(.7p/_`o-N]j7`DnD^?#+;%pb;DSp1]GgX[r0(LL2aiJ\V]2ndY+"PY"Ip'`]Mtb=g,*e!b=abSU8$rgkmaU16H%DM% -%+.19_@Ip5OT%H#iD4^[P*Th_oBqW&dNFAFMpfm^mrT_;/NDJg[$Q1aL5ULrI^7AS9L=HifAfO-"-EQ'mgo=aB5<'b&Z4s5;>N4aM -%hSjs`\Xm_9,rpB2Ohl8QYTaJCd*F&[Oo7Xf6JXShZDd339EACZ.IF]P,3A[Nl\>i(VPd`s^SOaY+?ke"$sdq;IU55*ZEF_*C(5[c -%OldHEd>_9V6Z8)$.R!<iNTq3j!C%J`hqJb9jaB58(Ot^f9;9>12LHk2$c_hq8&&[2G2fK(>]cpr=InJl]T7+4m`(*'s5\M)b=MF/ -%(9>4$NAoZ1D"Apo1Wp`NEShrs>=F=(Xs"YSG+M]+`S8#uiW-P=04Z34]0)\_B^JF7(c"e=FeSME-(NBEaR!,LIQ?(^:Y4s,)-;^` -%&-/X$"%4$@RP.&3(maXRFO7<e)E\u^OF$M>B0>pjn+Y_dA\>D9$B7Cp%VL*UrOHB4k^-!j=XI;H0P7\9SeI?i?.hluQZ@Z,]2_Q* -%W76Y2]mK#?>lV0O9ng6dX^"f`_l)Sk+ZQai&H'p6M[cS%[:BI`r;00?:o(3UD-29pGW)'qY[3um+m`+-f+\_.o6I)o/]2'KI;jdM -%ZWgTthP?hhFR><J70t[;b-pWUnJF=(D[C[]+l5ZsoCOK3ac%CgkK*DVMr-k+i8edBbK<IDhX?.Adk$a2[O(S!0'NW=2cT.%\\<4d -%q"gE99>3T1ZlSWoYc&?G%+0p4naYFS<pu'6)@hD&RinX[_QWX[pltATBT3qZJ!Q*Fj6OAq+4hdbWkUDTHH%e]bBJE!!`:AD<_j3) -%aDU1/CR88sV%:;`hgH:Pc10T!^-=I=or\5MH`K@'mitO9dK?eGiaAg13r%8WoBDLHe=Q3[\"[)VJ<*uq4F%!M%O8C&$=/baWL4Xr -%ZRI.q*'20Q'g@>!h34fkTAHLj*p*4Sm?bkghum[BpHc"SU0Ob'/%5E;(JlGb\c'ZCasiYhdZ:#/Ut8JT=)/9f`S&Krgi!5$p9P=0 -%iuo@B<Y`?<WWEPq;>P=&3ne_,8&T>hn\<j+OiID"mF/'pMY$_P7+%$YQLMVJ9-^t5?9+jp\0'b?8h9D%jCA!UHcGY=m'%(2e(]-g -%lRt<O;E55Gf7&3bfCp<3-ND)@bgunJY:`@1q6!LXPFaLGPbOf!CP%N[:6`*I]rgH2kG\t6mHj=*-#<O]X`k/Mk*(5^)=gT&W,=La -%:+-(U.tNcrBg)0Iq5E^D,c,n6T:C5,/"j,=N%9e:PDK+G?E]T+IU+H`\V5GIN]qPLBg]&f.i[G0Ffb98JS4F_e@oKLFBSK$SQ+(@ -%lLHr@,M]%Ql[0QTG[Fr0*V2Bc>Fde3nab*=c0siJS8)$^o%o&?A4o/'VhE80<"ZQ"A'!fig",IbN<SR*C6iBI?r-,)3u%UV<Fl2/ -%QsN[/Zh,#tne/JsEec!B&;ouPWH6s4J4tTpolT-/e+fKm`</[UkfJZE+,R@m/90M"!CucIYhN#.U<%$rjp9HAn[i.E*#EZ.#mSK) -%\B#_F,76Fc`%;GY8c*=r:ZiCT'`lr;<`5Lt?04Re-.sVg4p$Muhl6LnaHtV8QN?Xn-s>VXJ9;M8lg.WYL;@*i9L@_Vfc7W&-=6uC -%S$eK"N*0"KY@e&+'$N4<\tgfGr>DYZ^j05j@_fU>b!o+K8gj'9H0?/3j?tP\F,"pNjP,<Rdcf\Lj"[%4F'<#-C*:i:-n<9mfi51$ -%)TEM@+F"Y%;.F%U[-b(M>e_g;W4=U0bqp3GU7rXX5]0-m5V4Zl8*IR^,,)S9e+m;195LUmqMPg86@DW_;=QDl=/O3NTO15d!Zs.# -%fil]MM[9;dTUT(\/fB*Fisu((&'(5i:pa+k%(K1.VDSTsZ>:`)*OL?k2'iuA1;<W'B[=(X<rFlEre<hdI*p)WX[5f?/(-mrHdC[! -%\2VnZ-BtW@%#nIk[?jKDP.2iJ8rgN`GuFq6(S%4Po?a]a2"#n!Z#324nTFanb,/HFFc^`-[POZk5Dtn--Z;pfVBcGj*EG"tW<VNu -%WIVf'"2)9BbTk;NTU>OS))\X&9?/Ru*YMR+Wu=QPE6lrnT)=u%p0H1\b=ZN%%h!O!0jOW<)c2hiHr:tWbhh@KO@M6fLOcr%Pm-MV -%h?ma=\kLIXFXq7NglF!!&hiYC103;^(fh]=0D"IEh<5m\]nWCLlRJ`)Rpm6g]b^^TJRTXCrh=pkOu*oL[j#X</b=N=kq=4Sn]?\g -%e3(AbX\;V&)'3Z5J[?hNZOJbe26h,*$8M$\,R-#Gm21#k"?DZKIg)LgA8LaW1JIf(Cu)r]Ukt`^JmJn_[:7jZ$7u0c_aT)/;!OGE -%Qf7hG1>([YC1;paO-fW@^q9^=7EY'U?oRVM>O-C%l?SH,*gr:Oi;`kk_./Hk(SLD]Qq:CUWs2/\[-sL7kZ@<%a:*`[HW_X4N-LQW -%EW%A9Df?)Zr$!op;$m=aQ`N]h%,.d+p'OQrG_70Z(;^Vqqtl!hk1UTt#-FVU*+FK@/!U.OLRLia3$DYKmsF:-=jrTXn\199%kfdW -%E.KL2UhD*s$]&(0)AX)/aEX2a,A^2THEdNfAJ2W2<3g9X=ZeeiUH+GgRE]a4_#LG582c+g,[<kb7^38H!<N2@IRR2nZ,=el)AuTm -%fkAM#i^H,131HHJIToBF&pDse8Im3H%TOrF1d[Xr9*9``('XVGfNHs&_f">SBnX\`j7hNTY*L>2j[6IsR5B!#A/'JnX)%rP6W/0V -%P<--P2Q'u_WeOUgfXI[TZ\@SQf$K@pE?fMII#;_u*6ot6IiS6B)JqRS^R,V[_>OoA%ZIoRBK(i'1CF#;*EW`@!m2J4UgLk'HS<WH -%AIE:^_uQ46=QEjC`IaCU"2ZT_i6QS.,PhQj!u>p`ZFl!F6bRWC++u6W/^/+f"E:9ST>)phM@DMdmYa>?ZGK\ObSV9a(n<H0F:r*A -%&Am_PHc\!go_j\"#9M"^alG"?k2#;1Nf_DW`d.;Ik?'ZE`\)H$dhMC)AC+2XCmCNE1=8WK:8U4&:UR-0J<j'Sk:nc35V6!=K_rQt -%*fLP;nlWD).9XXB3bu!3/?QgsZ!sTjlP+cj5=!)&>U7`nJmTYpg^6],(26rcV&Ek-cXpZt_c+sf1G$nolJ%_V6Idc4BXeM,F=fJg -%^qL5OUs@GGjYsZ:[A;j0&'0*W2P<]!-^.PF3:<'N[tiU(+SNoFUkraBi['8h!e3-JId.LBm459:Wb)iR]7<t@((I\IcaIaoBEhB8 -%iu*1QC'q:[4rdm-R0'0o$,/FlWq_iOV'%L_37tGH?s9gQG6nqI4SG.N>dp<fjJ$5aQALVAn8-<6Ur`CIT?'tp1kZE'L5bCUgXYG! -%ftY&nA$Nf]o)@ao)TDl`g*b@+X/ZujMPqE%aCL*YBa#b9!a(H"J-/ILe#o(8!K6BQZF=4'65saaSL?h(Bh>OH&jE62_5(WX38@i> -%+KS/bHq?$9;,e8B9*.(Pr4T22m+WtsfLNA#PEeVQ&tp(55C'AOX:i0t94M,i4\3_Rl>U0aj%]eaL7=!`!*RI&lGUG4eT[@E"^0Sl -%3u`NA;f'BLamr8!ErcA+=o+5W34"cp;JfC_RP2`MTg#eCAgJb1Jmo<b#C3WA%\)O=AO3Wm<e"'T'e$'"n2k6B"lHrHB?YZP64n$, -%jTA`uZa,Q6\n&F?EK7A*Z,ADJ&VB9J8DYQPY#U'_oiV-9]Yl1c.D8iC1m;WbiQl7[CR*8.ZKO*G>9<77=>*Xof7kD^.N'"@UA4Zt -%5&GpL>)''"c,V]Sg=J9lF_7T^5CfA<c4=,!jK.F/9Tsi],ChULao!u_/EgU+%1/unk.nEg"Nthh3M4JOQO8X2("omma[P:dbA)9s -%_f/&4?,q#p.#a\`7)A%qjlBrq32Y"pfk4f-jFs"E2!DKerm6dC,T597OO$t9B5!+L2j(5m3Mk-T=X9H?Cs&0#>uBm@s/cS0%hRqa -%FC'"X_Lo"$R[)Q?&?35YHA)bR*kR9pYSMS?-/3mR\Y3KJ.&5VM\b[([2g-0ubM]k^:RYA9<PT*]'nmqM3g0QQB*(5&#lk-bgS(CN -%o$FjW\Cne5+'"Vn3?Xq\;;pYK:*.W#*Ib3OKD8?W-*%;7gj#C8Z@PVD`(PEAk$gdBY\9/0K;ga"B!E1C2d@349h5EIbRTQ5(0,nD -%c*HN=I^Ttli:]`NZePI3QL9HTLFWG#4m)d=%g%O)gulb]8h?jF9i_Ri.CRc>NV1=GK[gE,50_$$B)XR/]VneiAh1-"WL(6%.m,/> -%+7q=63i(sZ^t^&J8&SAWN_Ts%@c))&Lo)OP2Nq/q<OUoXgnZFc"6+hs_mlIZanJLN06`d8B'%0<7"&*=gP?Zq,$0h;O),>Ks42$G -%PeeA/F)ie3ZWM+/Hd,r+P<%@*/ebN_2qKPH3Ep[#i-AEtG61p$^YSU#1SuhC;d?sjgWS)opZ:&MZ'9C*8T=%&TZR%%29n717n('m -%^XrsXV?DacM5?D\n&:pW^T]/_l`l89A_SYl.E&n%bImG)fR')S?@mFq-f2rsD-0msS9j"7b'#-6.)?:h!u^3'-+--"KF+Ft=j2oR -%"Bp>X=FHGs72!PE3>b+)[OC"lDS0g_c_AkJq1S,nWY+c%A91[gX42&g\(,.<fJ]aCgBLYk,g0PM'e]7$4UiKr#SnomW"cXN#gO+r -%V92bajoG*e(P-=8nL4FN"c_'t5E1*[FVacW8E,NY)hERTIc,70c2EOhTk2m)>X]nNk&*>k:hLHme,ZjNW]2dicE"\@YJaM=)>Sf_ -%diKN=_8*.8;,,d%S;b55+VMOlVO"6%B#Oc0<Ss2FNiY(mE1sO:NWLCW8)oCjWe"/:@raf4P\[(5G88J_O%F;tAHj?iC3^P8ahGFP -%Hde<CaJ>5om.',+Ho3TF!Urhn?FKoA185#4,qcc<3<*fS&Z_C;g<fP*nu!4pO&pao.Gi<S9V0VXF/8BA/DIZ2l*(Om/St9-0ZU"Y -%#'3g5kfUiuh!]7d:%NWZBRZEHhEf)"5e7/L3U%:NEfcZML4b&]U:>9Qp^I.4!F[4jnZWdF^9$n:YXH#c;R^*:HI_Jon/77F%U%A" -%F=7fubQ>`)mY+fboFLh/#E+Ij4q*_%8_pHa(N9/q*<AmhA%1HG7t';RRE9HSZ?_[ZG\7,]QXijDC`Ynb/"HOj!^!mt1pUK4#3:3F -%lD"OWZ7<TR;k^Ch2e`Geq1D-.?[k&f#O]UC4mDN/-8[4TBQtRRa0$S4%=]$3;H2IoR7.<:bd(d&#pn*?K6,RElGY7-5P'"0H8+8: -%FsoV*hkTYg%c-Ijn$R6?]bU&`@+H1XcXEJ8s-jKM&Y.m+^`<P;:n4`)Og8)-Z-+H"7D1g%[Nbg\Z/?i2oEroP0VISi][2!f%7W3F -%gH?BB2+lsf,B;CI/grlEaC&1><Xrb16%[H;1gsr!_euliTaftqGo`)e*_h^QXMs)@C]'R%mkU].iq/)BLY_e(D[o7GYW-AT']rCt -%h6:?n3"E#0(<+YieYn+ZhJN_>&44)^lP]]AQf1l.W,)/hgug6J`6fMn%EP1Tr^=s1CY@bI86TWuL17WihIGhBFRV=8hg:@nj#9:\ -%f0FL[k`uXU@:3I3CpJULYdj\`5VgR1Qh`YW69'tHOOa1]Cl^5:(#n?3=D9h_<('rAARn1bf`K*dL(Ej#,fqh54Hf2k%oKq>5Jqf& -%<Fs,Q%Ks#8WcD[;EuH".fE*nZa"ZEKl^3(oO^D*C;t#lH6IrW>b>9!CUrt+k_r*9%/0j*A6BR@A"(2MG)Dbn$XX^RLDZF<9=G!UX -%V?*c-?*OY99<=f'+afr^p]Q])&)%'S7V:8G=<-+s8K2]PV[7&1PC!A"`K9U?0W]EiQ=Q*+]L6&,4QNBp1rc+Vl9f@")'igO@U%t& -%QNU]^9JJN[nAUYUMip14?K<%K:lT[/<el:S5MJ!4CN+E*l)BVY=3_+Q!eRh.SeZbn_g\(pc7fA4IlAVL\:9)5I]1i3/IVfjJu]<k -%#2fH!9F<Z)2!5UB,Q(e@]T1-YYKa4*I>KQc+n"RC)%N-N/7j_klC9fj4dPe];lg#$AdhC!Kd_^MT@XFB<[Yaq6UZb#G;X=-r>Y0t -%`aV6%at[+"&^S<36t#q%Z5EN`I*]7J#BH?m!q5,.)[c,MN66(+cXosDfsqjBjX\:ulX5R4Pl]>Qjb[do[gjB$3m+]E\j/M?DF-7h -%7FKY'c._BJbfM2qohPj/9@hg`SYT-o5er[*[M'YkGC,A>`R)SJCiR#Jo34_V,E4#+].^"E?Y&i8RY5,SGt,kUOD!?s[cdL$cgqWS -%pXSk>UV?+385g'r/;J>efuZ5E2+Q`LI+DuTNk%TqfYWAf2nS+/^i.pW9>A6C=Vt>uH@=K]]_CY`HE<k<l[0F1XTXYN[aC!+p%KQq -%RJ$32;fe0rJbn`_l[:t6m7I$D:#Bgbc9hi"c<0jcT+r^F05+!2HeVTu]lJMEb0s&]Z#@3j`\[NsA'pm>;-oX!o8A$lp%;Y)b)pr6 -%_ok";%f6!85/5sd]j86f`/ZghB`s:b/IRa,oVt'Gqeb@rT6>5%pRV"Q!ShdVkIWVHc?B^l`Notj1S\>e+uRG!E&IF4I8rkK_sG<3 -%c%=Z^%T[']Kq4^G"S$h&AZuET-2F'7:J;]YERpD07fYI@1ck9lrdD6`!j/h<f<6K&_Hb1m+=:S;V@`!D`N!/E<s_KO;\+34DUb/@ -%IV@Pb4EduAXL>SO-=O"de+*W('U:@_VUFLt7BF6QCMe<$=&n77(!K!8(m#=`fEaO\\DUr?AJ+gr"5(gZ3!C!]7Pi['LT2T5%)k1( -%,hYL1d(TSGDSo$8I)0Ab[nUit\[`s2QA(7<Udj6C&h:%Af".Ss8YAEZ;fV<WdS6Rm'`ubhg&si$\bK8D@)XOq'f54_0mLhk()p'o -%*4nX0c3?MNo@WI#Hk"2gpK\PeDH=L+N&]I60;J'N%\7EhRDT"U,+`1=Mh]+/?4%,M(BLS6_Vn*O`,pBsfsVD9"l,_h`h=q=`b$*o -%M`6hPZ:^)uK4R%1TJdWTlXl_Gj8*EUqI8XhLD=7,%:RBb:eAPuFG%k`alF:&"!g*l*eP82H%7ZCi&b0F6X8D"6h/uZGFMBhoo><+ -%MYJ<fnk'#+ifo+Q#hMW`1\hk/W6^-hd*C;QV.CRB[+L]SGOJ<-&b:Wb>R)FkI_ip@A-']DaE%h61P'qdG7P2:QLfcrAaEaI"qRTF -%,Q<M&AYjoop]@Pd+jO:&)oE>LRi)<`0>m<!!D)?di"GJ<7B[#8#p:H\<3I5o5,!lV%G*M]`54OV9PdN-TUfr`146iXD.A).IDg\l -%'al?)^aco\.TqL"=5bQ_B&[FNKb&sR'B!(UQOJI>[m2[T["aO(A@T9S/<RG>*!l%/7uG1GD2[c,:S[Gu#l$-O$6kKe,;Guui;d0a -%EE%Ju+/=S0QW<2\/jJN1cf2k*5V>\YK7=_0dsre+'J++n=p/f@/LsGL,>T]qN"Q/_\4uOt/[AY_Ks"\-blXS\dCYJ-pP(CYW_LOk -%YaE(9*$Ci)CK@h[r&l5GY.J*i'hj#aUqlL(d=3"#AH_T/h-=(FE:2uKB-;K`H"dsZ"-ELf7CIa9-(m[\G4P3r&kh<>997c>=GMWA -%6t6YQ@)d8l08*mLZBfB*fSs")]Wk!.<'u)u0k*qFJX--5@G-6\1.OouPaE1W9>gA>J;0sP7.sInUq>M$hdIB^aCY(M>=9GsRmYlC -%\ZLDh#61*a[gu\p]jfQ:Ms#nq!N-<mj!>p)c8\DpXLcnA'@URqZ1[\3GZ7'QFe8ZV(P-FS..>mqCZ8Pf20N)sq&D,EDBKguJ>VNG -%+U=Je^aU:3oYC9V-'!##P&4a^YkYDO)IU@K/n$Z#h)U?-dHj>b"ZiDo,'BZQZ8nS)?@0SS3DeJ:prAkldZ!&GmG/"q2^E]OA7I=Z -%_8h+")cKfp`OWUmS!>Z!c-),-)Pk*&?oTBbh2Qlr!'$==82NLJQ59J>\YES@`#^ZfAn+gX6NHRL)MJBK%4A'l&g0AHaImm,s#n-' -%!gq.r_M>p0J0p,[#Nsr/.h\2AX>2_;*3MY/QeWe<1()M$T3BOH]_(K17[h4+^qhr1&!fgIRRB9K3<qW(pYF^;DcH9R2F4^("r^UU -%/1)`-;1o&@kBouq`_k><XZc1qq1'`SnV63/JfnfDf5G#Z.=IiX*SkJm8u";d>5Yg^/=p(sPpgle5(kOAe^(ONg"UDd:N%TGlL!h= -%IfBRjBtb!HMdOK5Y8F^srM6T^e,<]!;I#j7(hR[V7]@If1Z`ASBI*25b[-bJKER7Y[(lFZ5Mi0&D3f7nqsHVsU[9jY5/ZW2hb1QJ -%e#\Iu68JS<e)&7Tr8n3"%$H0C&3'3ap)+NOc.9(,de3_#L^ZnJB'(K>;%&+I,9G=XMAFkr(=j_%qYY.qgK(MdMh\MSSgtT;,_ll_ -%['d[g#kFRaDjWu0A=ade0rEpuI=)!^hlW<9=Un!/hX\HlGdJRE[=<")S1=KtiJCi*)R:@[R]GNd2[*P)\%I*j>^GDiiUQ(ta5@f6 -%Q<>-F-?G6=GFj0Wc4BU%11M=90;mOB8d!/>RqLSpJmr,17XJZ,gaOT`+__D=6bnB6TSA:)n>6ca9L'DibaBS-p'-03[8%[nncKs% -%D)1[:"WUB=raL"+B`;#P(2;;i[CGRp:9m7mhs6%,.,\^+e25O;4eu^mMB!l]\?gH^@;:u?,DWJbP`BK5o_+^'MA9i*PPthWh.<E# -%qQX2/WRO#c@c[r(PT9?+&#JBrSHt!LG4W['5rX]78X9?5.S;:&Hd0i=@e9PF?^ARDANTGZqZW4$7WJd/&?MAQ1&@Y.@rNSaOMsg^ -%n<1F4Ru=2B*$b5IQGBkT.67fTDQ>H/>51OTPA,6sdRN*]TBRQjp-GUkWD1"WH$%J'[W!/2$c1_q_)K!2LjN"](pE-C(AK#-'e\uu -%pe+_Y?r,H59]`2HJ%1OO:[,N([YIWP"?^q[i$&Oj;G:^^.10#dT^:.AaL0;IKO>go!G5u(+(!s2=R[\/8s\U\]85[/,.`SZ.WcG; -%p0MY]\enN60^PApj546\dpI`AJ`HR,m9d^oh<Nit>V1lCq.I#S-D8jVdfP6b=D+IR&N=S%gp@-;bOg7e9iVpq2q\#Rp&o5L/$=Nr -%XhiV%k\6F]X;j)B_e%Ki2iE_0$chO#]SBmY-iSY:^_[r&k'k*JV2qta%GRW8./CurrL@2G@Hla']G*ejL1pWO<Mnb9!^/8n_=KTa -%;+WuMKY5-1*K&tppL>X+niHd-8hQo@=7(poTVs=U7L'u,^WL*+@!%89mhQr%<i\X2l=X7Ebk'#D?4?-0pI*G\,"Fr?<mU-aF>DS0 -%ct"F[)m93RBrT,5(h2n&Eb)1n2Ui3!h^smcZcS*,>q$9,>jW_Oc:7`Y$pNg8Gnt0NYE&Jm]?P1I(Qc@n"5b]KDmV,cY.OLnVr?[g -%""1r@mkb^dUA*Di+J*_/Bd@4OQQKS3j#ae9MAL=$VpKH]aZHkGf5fqZJCt[gN97A)39Mu!lGEF$6j?5^QAXSaTHf:(Nbm-@<6P'R -%XA8S:Tl;q;OW[tB2t0V?H"n*6m"m$M3`*h]2$B'*K2laJ4<+reS"m6Nf_Mo`jkagC_Ztfs(@>*e>*6QQlp'uuNP?Q)e7*;T!sNEd -%$QSNS3:8nb6u>Ri7WV.EZt6s.*$dehCs/9u>gi3O,g*K)eU(1Xo'Udt*4Am$Z2LV<8Wo'InX>6MeGg_&R(m*A3N(?Nm@(Pb'YVPr -%>+T&qk-TY=<SB`&aaiS5bkjh1Uq@blN"f"?#2dHV-6D@mJ?fCnO6GMQ:WX_7iJ>c1"Y$#U!Znt!GF7t(n+ZG9K/;8$n6!EW<'qtt -%MP=WnEIBaGM5TMn9JoquOC(+%bsSm*l',CaaWpiWEIoC4B31][B%YK*)(0@MVrM"W@msMQI'Es(;=c>7+\e]UF"*bLDX1[?]'Uo; -%bZW_ZIV:T&_CG`^$ZY/UUd0EHihdZ$#7]E-rnh9*P]u'(g%;XRhX-\5BR4+.eLpMWXH_j$KV`97,A&mqd98GU9(pEM>9(XMTc)q: -%+,1bDC,7&)8dm><2^I[67;&$*2(a^q1KsS`]]&g*:XH'NHC[IiRM[@o1#u7d8t<m\_Su@40->)DA2.EE$[_^)1"QjX#DOFWW3#;> -%R:,n@n!2cqSnr`i-chPl[8KlWlt*KP%e8*(S:(*QfiQ#Hd:DcPn4I6?%$)9W+G)Sl/EZJ[bg^Q8_:t@67;M]<P6HZAl1@[K8T#@" -%E6r=d@Dt#MpQA\5ar4D^qjJu-D-;OJ=_BR$<qbOTag/Nd#uo*[J!u)[N['A`*DVUZ$tI)+0A;B__CP[+rCfAoPTFQ:%VqU1Y;AKM -%rccs+/83mbe%$pE8\NC,_XRbo[B2(<calYXAstFuQrT2g>)#(UQ(*uVPJYYP<<e*)MrtuVpc*Yu7?/3&53-<d(BNSul&.fC3$BIs -%67BQZ4F3GHOWj;V_;,h+M.L,@T4R7?c6(^taF2H-C;_2>bH]4OfK(uiaa>3j_!<P!=:-`rIu(_`pR-Cb_,OP7,'5QB14IeeS6:;d -%k&^@&<!l*=f.lj:p=$F,e3`nh4e<"h<DJ$n@W'MD%.<`,XSRSd-Ta5M4V`p<7EhJbP9njpN=,]5]'u_1bWe=?)RaQjLIE,.;b"XL -%?2aTLUtaPc@5R4jG5![^P]+iqR9,c[X0nk7H4QVu&,aZ_J,R:"qhtK^rp=(mqY1$Sn,Dg3J,#@;nTW%2J,:>fq:GZ=0E:\1+9(NV -%J,Jr\`..Rns7fC)hZ)Pis7lWQ^F]78J,(btqZ$R[hThblc*+n]h:I/OqhOn?o,lDAJ+<<kJ,+"Ir9NDCZ1r,Irg3Zapu?jNr6,-; -%&H0'[gQ2C3O8mi3SUUK`4Stb#ps]q9UGi)Gs8'X2\dR/$:ocFkDboAtJZn=JpdY]6af_99b$P#g5FekGoUZcR4qmZ!%kkl2)*_XH -%.,:Oe&[XA4&Le5.Xh_su2<dkHQV+QqhEHD?gCO=Lc\j<)s5BZ\X*(-<T5BRKT8^k@*[Yk8V%<O"Of8JW8\FcWr3p>9j1'_\>)&m\ -%]m%rBWh7fA'9O`@"3d>_7#7u9,5GYk5O1D">lJu:L_KXqq1_V&ZdkXQ86Fs=R,r-Nrs7?Vl<+eR-DWb*9UKdpf_6SArF#r\Z`3H@ -%j$+78TdG4na4L^[Jsroq8!H=]!@Hn+M*g`tR+NhHq(.P:$->)^QdNS=@1Q,b?<['*22(3BDP_^3*bVjkefO"6$O;SRVdLU33,`ra -%7ie_7>h$P1h>kHB-H(o)F*)5sJ]CKo`3[_#Pod!a2[5&p`X$JD/k4HI^5^f)\DU.&D7C3E861UacTVbT'>hctau9T)AO_6-]1r9g -%Fr2dRa_,7kD]:7;/n*UnUO^Q$AC0iEU?QoY_8m$t&"fsaZ%4NR5<d962hY+7TbM[9a>WQ:Xm-SX:9b!YL4hm"<_`A!(Nf<b=>Fff -%euAq!&=Kc=S][;Hpjj"=cr.?Q/LQCQMa\j#0qp4(HoO<Eo`5br_`B+\"GF"gD&/9:mn>k9&]lZ#&f/peiRhtT(0I?T7+hhL+f([O -%ALAN!Cf^%^Z:tV2m5%_J!:Pj5Fne<t"YA]*PB%S37O.i5VM>p"2XFEa:ea-q<F@sT0S,MK'=(cHop&8i4prlOAI2LNRghLBa;Z6< -%V=\OF5(^dpLu7g8J['q_.:ihOp6d@1G_on0D%ieeIT0r%QBR!4>?<N^?/#t`YglaYaQ`&6Q+Wj@d-tMYl023SNt%%^l`Xt3EHK!6 -%ejlg=-Qg7brIqk-952GUl0`GX+#b,EH^pA=HnNtM]WZZr**:PVfCFQ6V;]9jQ6123WXmbG=^shq:CUDGBTHr2O5f2?UJkZ`e=m%7 -%8;m-U?\!46`ap%_bVjpiqW!dhpg9g--M\u3/m>[0*MC*PB-1V7iBs`VX4>PE8+[!^9[.Cj!RE9MF=QTJ";gDu?DWCJo;/\8?Ye!= -%SuVHkBJTb.e$=Ji(oMpCLG(>SK908BG)iL&VJ5/A]8g#tn^?@%qeG!<'ej)t^<;n7B[8HAar6A="8#!bR`9aG=\$9_IaTSm'S;@6 -%-7;B9T>Q0;`%UZX[AVanPOV7.*LiDVaq/_h(pklH:n%c<$KY-5QU)U'<1Fc7`YOOBY7;,(C[[.Pf#0.a%0B<V',J)Ofdc%7-EPnF -%U=NuT^(+?gn-,5W@u7XjiV%=7=bYE!"OeEoJJgA-]F`Wo)6Z_Z9J^c5/6TS^e3RiYH"X2(/aF-q<sLdlV`AN8e8H/9UG#dQ)%PJP -%lUNA-VV*m[$&GY`Z4a]N#H*JCgM2m/hOFOoktTEBa6M).2-\DD*3lXXLY=p;<@b!dSD1e$NNEC!``0Q[Kr(_^H)Lm&kXLT(<\kms -%i<o:>Or9LiH-TeSATKg";.fSg#d2S/eS&f'<3mLHPo5Xjkg;6!>FF:]d6o=^)mmWG@+*ld^nXQQKFbD7lM'$#'=h[QS[rW/jF>hQ -%&HL.1`72'BmA;!K0fK$lT[=$=ACo'%4=tUk'agR]/-]l)Fl^"_<5sit!P!'*T$8uA0X\O=XDdL:9O%,A\Rj<D8\&WMSF&ArhoNCE -%nZ$11E9FK+C<]PhD.^\HSc-`B"ANlNfec%oR;b*okiFNUEAc2pAWLF"e(n)'ZB&+DbuW(,%sntIReY819ld\SZ2q:K.]]*r9,Y%d -%.U^7-2DaeN<".?rHj/7>%*QRn<gRic+X@eh<]IK9KMWq:qZfp]L]mtDHXn&3"6'K'Y/XO#ZQKHQcL2OO\J@/<S(<%@MpS%h13q#R -%L[9+W:kF#o6G[2LQ.bE.O\N-p?_J#PieLO0"hD48C:fpSCs0)Q3o#P8<inI?@&sC+\ba0o]C/ZkYdKWg7'l([K_,<09G.FB4;ir3 -%(+Ec8JIlEl3]`J/UVc2F1O5(O`u]'Mqut8-Pqqbd4$'U&m561BhgO,e@Ad<'_iIY>'B\^`&H-ea'$;>tK!'32!&n7DLq0_QT:s6i -%a*KT#.LkWEp*QS)\nOSWYg</g$0+dW9HaV2r02%dm9r?HGO$%bnMUEk'FJ_-dk8<JO'M>ea`."d2fk:Sc*_Kn;>=7?HBui<',Fl! -%PGdu>fJaI8O__=n9]+l:KjYXK?qbDU>VcC%6;YnZSJ<8G]5ggIGZ6W61?7%-Qad?Kfiu_4_C^$e-luls>sZ2!S6Aq)_Zu@V4P^jB -%UhR\.QC]?JR^Gfb?JSd&X#6TZ%BcT7Vj`]N_!^teZ\`P:,0@DTgP*aU2LQWU1QiS!ju<1Wf5fsX$TV_V,)[4aPsoG)MhK\oU1Sln -%V5C;:%s%_fpXct+o$fgP;gZ,N4l(CkF*LQTkY5W,eqr#%L0`(?l[HfNn9`gAVMhP/5"93Y3g"M-2s&n%$0.<^Um.kEAbQqL*t80Y -%igc0Y0Q;G]eR%laZ.g:0X?A>F<3?*?hB+f#YS?"O1*P2>c"+9KlmhFDb11o\G!,HW*funls#tXN!?lPo^E7W0T`\J*r-^$+pp85* -%_AnIdS+j]nd`2q^[6V,E.@)V=.tu*j;X$&NN[5KBF"(MINce+r1jB&:(?p1gVX^&XX&F(4M*N<n7JIC5EF"2WQo8;*J<RTqP.WP, -%@#K\q"\EMg2"=Qpb>opPKMOg+1gQhFDAqjb2^MT_[QDl_pt"<tm,Y!4Q&g"KD0JsRZq,2'U4Obbb[%L/HakZ.^n-"^lh7#7dZ'rj -%/gCe*iksBiWG&\5jN8WVk,Z)F,igi3?cSZd]8ta\G\Q.h*1"bfE2e2gbeujq<]=bh^IC0R:*uZ/hEGi</R5uq\YZaJj7LIIeO!Ch -%12LOCB=#_(#_&-O=dEC(Q=-l<2U6L8^O>l8ojTX+FBn@!YAS#r]4@aJ)T$!;V8R$.+bQJRXat>rPFpBCV5Ag2E@Y1,1he(+(-d'$ -%!R9uV@A>2^TRE(+2f5IjA=5V.ln\9RVV"Aoahl79nnR,!i*o,'oO0*HrIPL)8)8cEpO;c#Dgq1PgAPrKL]-nLJ,^2lqqWCJGR9Q3 -%>Jk!SEgrUF*$/@7];Zs1hk%asF_!LsDblAjLA5KdnZmZEY<V(is69r\+k)[,1Y>bjl(ZH71jd-5V`T$f/nEmj"X_pJ0Fs^K;d":L -%mNi+RPIS_3$_a`Bb8;Ht8E+^ua'9o/=K/e6\'0bk$:5B9,EIOYg`f\UX\\R]5JBVUIiPBKBuY147rcp&"N`*MN?*A8%d5c?`3@J= -%cj7,ghjRgV;=g]rY_EC]!A.4Jfk$aaet$Y!ag2RI`O"nOi5'9F0B!7CiMuD<cShk:`\_:[8k)kY0D`@D)i+[`HBoGGZL,mp5]2MX -%Ri=?_V$<eh5]aHE>mA-d-[!/@>sc--j;u5"Th$/21]6f/PsV#R4t;K2?,$bE5X4PDDV_mD6UE.Cm^S-,2=llt:nDI"L!1=IG"[ei -%Ir5Ma]sAfsFa0t3%459DVNBaib\f8K_strYZNK`]3Q1"fDAHUXU3MYt_rOO4DYJRk0,M^m("!4GS/UX#5O8&"]+\aT3Ssi_0(+4N -%Jk*n^2-lY@"Dl/ek',e?m#o[c<gIMPO6ViY`R:@5BRO6Mb1b\Ch3pEV]"HV^!NLlpG-<bRo@TU@@1`dQ>,uekKh:0TQ1i1HY?5Qr -%F_&?Dm2k"iK/@kO;n/*[)tQL9A9U@kZ,03hq1P.%l,K0IJ(k^LJ6u+l!8pru4]29?VIpXGJoLM_Y6ZX3J3;Tn/GK&pi8=2H1CZ_. -%+(n!,(g-Cak#rgn,')>=[^fC`f3tGs%5D)k9IhT*@YGd8/*[j4X'6*826d/45c@=q-V@XLmpJUKoWg*)oiu?'"'OoPVUu\j+.'Xm -%^e3g<VAidh_Q^3ag;gc"=;JfOE2Qe?oiUe.;O)&%B62!Dn-p(UBSCGcB,-R1*K/`Md&NV5g#gJ(0R&k7ZK$hMOVdG/SU30N@r\D" -%K8]:0PT`E=,E<JMO%%nTG8^&4Y-tWYj)<o67h_>q(<:=`nsT&[fNF9lN8i.nSgCc.*bN1a1?\k60Y;?/5Vc7faSI91P7%Y;*^]Y# -%CpXbak1t$m224cZ(Cr+g63_F9*f;i<*FsgSg(D$^&qoaZrG]XFi^3/i&TX<)<LiU'J$.?QZ6alq".A,4Yt8G1p$C_]>YSm\0'g?X -%<b]HFST%;W(b*b-%(]Q"B\%oe(6Kqt1l=H'BTWsa\JM6'3nGNLj_e]n80_`t'U8+3)M1<%<Wt<f]r!)3<sfEonQLV1VsGXAPbNJG -%aW(<FlYKkAn("URAM1ZPEH<'!GW#E)d+`Y5:JtT+KN"*]ad\lL*1#$Wfu*%o!-qrsEHLOc3YlJ.RIu"K?PLt+89+<8R4sm(=Yh%X -%-+pQ]\:0`p9N]P,$m_jDOa*0eIL+$uA&=!if1e5FefegRs/pdSm$)._Oq/`m-SP`f6J7<)CCFqe^MYhIQ&TTS9.GfMTJd1=:R$XK -%5E%>A!pb5Z[)V*7-l$Rt)T[;3-BBDl.s&?&`1di:(9,=_cGA8H3t>2q)0AE(lWlJ?/ZOTEfBK4bZGtY^=.PMl.hY.<N#kS@hASY. -%6hZ_qK@$h>99XjUi*;a;PS=uR^T=@`cDFM4/E:q$b^0Z$7O[sH23=[ugEQj@:ji=,A1#")mGMaSn,E#Fr5HGKiNN7Fb9-`JT7?gO -%J,/Otrm),&T7(25['oOts7d]8cTh?N5Q1G>5Q9>CroIL7q=:^rs78JTiU?:&TE"[N4eDRY*rgRlX8Y_Xor;,1Z@&+E$@?@;Cl%X1 -%'%QB6Ys$pLqj;WaZ7R)oaA`<gHWGBH7;A4dI/-5/AI]"Kb.*P[?j8r03A\!:V@N?:8E^RKi(l3ss8HrtE-tcFgGU5Bn#u-`['HC; -%g'tpqd[TP7((L(-cWi(kqn:)#U%iWFaAN,#p>^2?ZgNpDjEXnV,AUs+U&fNqZ=1TA1*QoN9\FiH,UY<Tpo,W6YSMZ?e81e<YA([Z -%_eEVrA6RGW2'62,0fDk0kj3&()APV#84\OA2-KAu/j*0K*FbngWE$O`fn5f"pbE4ar^=)/9@t7Ufked6no?W,D/`YIi7A-d(+t7@ -%?:3@fd^cXL9^iFl"eWh50pbZ=V04,b5$k+,^edVTqn(UHFQo6k!dnLV!GXk*X03+[cDi<i,SK)?liEO;3P_`V"g%uKC52%!D'Y1n -%7C(PmTg8r-j:$H6"'e:W[V9>0Z#W^nZdN0qn.V]3rZ+qgaXEOJ^:#?R[rh\PnJ]:^m9Zg<.UEC=hN\i'#%=0a+ZeN^Hu]9gHe$&\ -%s.[W+3NEDVEfAK;$_cI7+lpauAO&=*0F/n;90I0%:!X_=#X[N-5?p^..TN9e1TJ1LEFBPf]ci;Gl)VFVbuTS5NS]#Qc:#BUd;Tft -%^Af$lM.I::7\f83Wg+M.1j,R/dIA3^qeECHk.<1IAmQ0T?IW&61(B<,dR&g>',]hCG;1'E-FCi%KI"huTge:G`8'<:Bm1N>DqpE2 -%2`%duroSfq<ZMEceO%Z*3UFgYQ1aQKKG9rBr*jFIk/eDM2=OM`?)oak7?Hid([Z$sqe=N?Z/+T!KTd;5jpJtE".W5>pE3_k[79q\ -%poH-+;U'<dh:V.3V<G5\IeimJ'e#LGMo(A).%.G'>4W<b1lGrsO2'(d[i?(2AlJJ_[8\,1,\TX_G$Vrb4"$!un4RqAcdetl^8M)' -%4]nq+/B96*YoW0^SHJpk)i@U[JFAN[51,lE$p.(7UJi#fTN9>Rf;CRb4_hl/E0BmIqpDjN`Ti4hJqY@)M^./dI]oOIF?n\%J4\!j -%Fpu3BPOKriiC/W`D0M#*,D<Gk%RooLa7>o.+"^8%DY]e-4gN&pc=@*880S)oGW,Bs(Fk>0:Mq<0>4Vr;2g1N.K?Hc$_@01@$6M1S -%Hm^J+rsPHi3sFp*5b"X%lE(t*mC2SCY/G&!&.A6b'G3)n0T_p-]?(oa)2Od<M6"1&9NFlA<i[/)%lUh`G.k/l>M:[5gjj,U=_q@K -%5@!0Rb.9]D._qDhO>*q7JLhWTbu;UR.9oc27(Km9KjK.*bt<LOX0#E(pb&V#@8g4_AVR>9VE_*81T"P5#o=.$[TqTl;ln!OYG/*# -%UDWmY-fHU^]b;,.bCR9a67;t81eCdqg8>9$:8IX8Y),^^$?]jko!\*XQ>jkHjr&24GSpe6IP8_rf:It;[1k7b)BsDg27K/iYa9;m -%>d6:s0;R!jOI)Un_W0![?t*@RjPUurSQe*7.OjU?E*U`-5agMm>Bq*b#WcUcff`n211jV.n@U\&"M]10D_2LQDK>uQ"?C5iVa)@E -%0Q#!Qb=l3&c#0Ib',nfE_IZO`5T,=4:f^g\g!q?@@`h^u>0B6DK*/dAo5!;<l5ZkSA&oltp:CLBE6F(T@%.@L-gfl`*G3FoXt-E+ -%&M;?sDqBVR$+s?8Ik!$u7u7g2?$C\jnW1Hb@Jm+aaa]JDbMmMbX7J?3o^,5-q:rsZ@D8DkbKd;@<Ms/$0!jHF%:SW>1t1n6B1]fq -%'/J?Y6(_R<753^LnCh@1;!am3C6;p2PP^/<!QTl(9ofb!\?lHDi7*\Tm[C@1lP%B[k(,6n%LHcY.02q;4Vl%BoJ_VlXd07-SKY/j -%6.PE&A*R79c"'A;R6cpPHG1:AR2Rd[BkrWMkr?"m"3Ca*NRfE,r<l:+&`t<2YXW7Qn(4WeL0$?!kdY=-:^@5`6$tV<UW)31A]OGY -%s5K0\d\]7P8<UiCEW_@nCoCC:4rTfK.+1Zk=n7F5bl[M*(RX\<88OV9>f=Jd.FS$Y^r1#2+"u-kGf"ETG\)ZTpZu5Df!E],/eDt* -%fBQ<!-lJ<ZN]#g'4E[;QLcXoI%Dpf,e7dO?aJQU5[O'-ob2eJ;%#6<8O3fR68C7Ht:,=p=Dfj*h928%l$8mQXS0"1GWN>:'11eph -%Frg5KRE3*S`9VH)M/;^ibV#&T4lGaF^(P_uS`")]_u],j_bOpDr\^BghW2`IR!0'W.66PG+\tbq:#]KG7fqd."%19(mBfK/+`!4. -%Ycb=Pe*7EqD[nd=f9RQYoZGi@qEi7mN2X-4S4L(D)]E`S\IChn%U[O"+GnN:X8B!pQU1Q7iY.=?B(C$/7FJDL:qs[c5CW<@oa"p& -%d/\/4QE:e\^.Ra*R2)>QiJ$WEG#i0si0M+l^ZLKB*LUJ2;d9A9QNNG-A-6CYkGo,pD/[9@UtmeMQac:[Nq6e),FQgraLuo?4IH\j -%_=+XR[^8U)CK_ho2q\j_\*Z,4Vq2"@,:!nne/8Gi?@Z1:Gp=S@;HC;f.g*[kem.M9E8/8%-@G`\6`bB.Gs=N`39's$qo[Qt^IgOZ -%&Y+X3kU(E<es%C_:F=EJ/:kOm&YG]8BI;\Y4Hs7c5NmX$.,]'EYXab*e7-H=@Wl&";fbD4Uc[*ln>GPH&C5*$*7Y_/?J>&g10u?t -%A_WfiJ"h2@MRpC'8NRKL.\RbMp.iPC:?#loH9lHmY2^/,Yj;mRq%cH3_Mj=5cr[iS#C8VOV[q5]YN!TL^-6eHBSZL9Y0A(gG!i]( -%1L[H@e';`Q<'`7JN5VT*+g_eh5&SJd*H8<8@H5B9#qo`LrL0%$@$_[SkrbXm$X9hZCbqsM\D!LN#e2bP7^h[Gs&fg+-$oBLMc)sl -%hrQX+WKV-Tjca:j8WE)Pl6k!+N)7I_R_(:d>aMo7fDK0iL&q[X.k3Sl,Wd>G*On1#A?8+@k^i;odq)#[jln[UK(MSlh$<OuAY;(D -%Jainf"*?Odecl#$5<f2pA#t>GY0K3_EHAYC_sl6q;1+NEc":N#fhK36f8h#^qt[m$:oqg4k3ot/'>CNt@PD5kAU=g>r<1Hk*h>+h -%':V8Vo[UoB]5j4lqB;@a6$AWN+"<h#C%o>6Ud0&u(*rt%\f_"?qgP(GT.G>\^O@_`Gf[gX7`)EmNpCDU)JTNRJPpT?<Y5>EJ"<X/ -%A6bkOgdi`5NQsfa+C$EB++3p5bpHtC3%Ikh"N;1?jdjY*CQBX=4dQeTlEhDN#J*D'8tPU<j2lZs6!!`-']#s32kJ<lJSq=*>rg4< -%gn0XsC>l1'U>-dJ]L[XV=1(%O-r9P#ELL^),1#6D0LYAS"1fr!Z]iPZb<o&(,4?\0g+_)k2<(%)=rsF2T\3$Wd:or08Pe&&i`n%l -%KBY`eJ,rkb*nYWeYP&'#@<=(\fqoUOlL42]1i0-A&_eq7.J1F&fI,X1]4e!4N.421Nr(:?2+0ou+p?.W[h>.kSo7]JWm3_iFg^ei -%fW6r4_jjiZ@HupZ=0bo@Z@$manTK>l8JZ5#+L;kNRAUURVaen(qQUoR,[L$Vks[XJ^&KfO5-JEq0N--^/&56kaF*5$oal>Fd$aE; -%R@`XXX1d_U+<#Q3M9*94iX:tOLJ4i<cT9-pkp:&&",,bpgNu%/(j1\5<Ze@JIBjE?ZMd1BBYk`UWcSKbPic?Aq$>3^[R<($*@4MB -%eeq+Y,$2G#iO'Lc6,rsdRD+/@DN9UZ!&k.4pX=YqH.cF)TBOZTodOZlNn=onC0l--r&8HFU/rZ$k;$I'cnK0fMauSdb*N+t4RJ_6 -%6VgsS/C15!e?OaTjBLl2@PN'`YQEhAjLJjSId-3>_dNV#-'<uWHa(<P85YkX+Q41F@MG4nghFqs_@GY[h2g#=\H-M;3YgGTK'B1% -%8G0ID[49*PQ"-@LX<eOaXL/fcEE7GojSXHP(k.c(&pMGi_P?TolESXqemZ\-8>o4B6t\(!haLJtA?J^k'8b[AS+i?CHrbRARHjb' -%Cla\\=Z/Yj"Wg%Y7neX,\VBhK:l?`i)!1+>O^WDLHYa,-iX9OJRkO5S.q;*+DmC?]O(J1@O=VI76;Ntk+9(kq\Xpab3JNj/#7rTS -%abd"\1AL79G^`\b7^hT1rUIenqff#)RlLdOW6<FKGHoE^,JgZ)6^M:Q?GQg[k&0#q)HDo$MOd]J4?.4i4bh%3@SMJoSF,Qifbkb= -%&2q#^G07P`?bYG8L@1U=p'q"8F*b\aT`Ate*a=rn[=l!a.,6upmjq=mc-RW`F2k!C.X?tYN7`3dgk%X.4"<Pm<FY\f:34+`q:!K6 -%RLql@Y_H)OPoi5,p0<V@UF7(Y/oJ]UN72jYD3bPpeklfm?PXT2%c]T;NID)kj?ENbDZ2^m6<_52J5A@`3E_D77ll[a1?>(D)U,gL -%KPC%[0[hN?Df7NuTTea]45T&[b+aU@;.pFdk^i#86f^7d0,"V.Y+Xe,$93K-%s^4R<iuga2:*q9.mWi0[pO_H^#"D%"EH'j4>]=d -%)@g3H1TFURA=`XmW7kjqk];r?DPj&=4#l$(@;'-^($,KZ/'f%cV`O<?!_0U[GsS#\auB+.RW*A,8KZ6i+k.!^'G9TW@%-9N&8fiR -%gm"on-.hZ#9Z&)4WHSYO#fIOX5uWb%0_p^D.7MRu:fsN8H$;7!lWFJC/]r^BTpsF'=KI,f=aTVGhHT4(V%((Ro=7Lj3V?'ClE9r+ -%3mUtJ$\W(@nL:$pG72sueA+L]FrGVi!RugDCHi\Pf(;U5JkPI2`"+q22_n-cWRZZ9O\O!/0O[l^TuFp'BEZc(Kl(W_^iF#^H*\0# -%iUU0KWH/oUjW_*bBA<=l//&rd5CQ*N7VMgt^53E5[/+4,8Fd,)Ubj9$p)qX(7u4-LY7J8Z(DOKZQr&0J/9^.85,o8Io\GP$4,2W7 -%K^h<s1'MVSaoNc)cFd:p3sV`tIGuGV_l1#R?nQGo$@"%m%%bi!S.:aI.Fi9@VqB4kJJpJ,Ca<HJq,p^`l1V_]oA+SR?Sprfa`=V3 -%"$;7l4TI;Mgfm$NLkI45?tMW^A2<Ho50b[4b#kn/#VGr6[0NEQL2gLSJ$,RHb-=0h?NQU7'+6f5MJ7m%+d$6LS(ie=;p&8-1&,V/ -%2%.\Kc"0+]jj1@OI+KD=P0dJ?*DJJZR9oja+LL8pa<ihf*?R=pQjP5+*0.S#(-gh/#l:l<3BAKn`ccqmbuVNUe)L`=!,"OB+d[k@ -%ilK:&JnS,(Ae[#Hlhcn7mooS8)r`otggVp?X'uY$V.7(`P&h(X<=tB=\%V6k#cCI/V>8T3=[0=s0j(WZprF0>!SnQqYs"G-[l-7D -%[oJ6gI`W=YADJ@Mb$e=<b8UC0]np@Z;'WQ[qM@]2SXP9O<s$_#i=V2MpaWP]e[\e]]/PTDaSe[6%:5L0b?B;dF0dtiQkE=-&%C'; -%<u36F9p]b@K&$>Hg+Fn0YW.VGNL^5mTL-:99J#Za=hi_)mt'i`hE@<kDU3/i??0*AC53&)j-nk2S@7J8P?>&L13qc[^G+oN5U_4p -%Y"h`%p(B_)YZdTf-IGn)&W6#/r0('I7%!qe?+gf'DNZ5OaCbD$`Oap)f]S`^ARh%Y^T<]!ok`%(KhrZ?`NIa`5CT00nta''A4*+] -%5([U[E)AQiOSLRl4Z.m)&EL_'XP^MH#_Te7`QAC>2laODpDl4lios4mEWNqd3,]W-)#G4cPB<`qR$KrsJm'9g&QlXL&qt9>DkN'g -%>Eeeia#'*1RO?$_DciT<>o_*GWBO.$k?OY>F:\pX_*&d#BHVWf\QBF6qSrfYl2&+!5+'642k(s`P*R'*EffCHA-1WQiI!m#,b@<= -%T5D]"rjZ6H6>DYI%Te_sjhP=Kka\M$G^"96df%[K:(+6t-6K\n3<juOio5C,#N*4Xfo@9`[Gi%'Pc/n34KIZAclZ^hj[f%^pq`jT -%?XE1?4h4W5A.*@WI$N?:q%?>fF*41bGm^EQ#sWb=ij3;6\p=2JFdeD>E"k6t4t@^%(X$c/"he=.(D7@FMVD\Cin;Ho19'2J=M.D' -%93D4Ln+Wgm,:J$m^\Fj&PLhm8k^L3"J<!I0_f(">;@Q-+emXZFG&sTK31])nN7f:q^h8[F>ko^krVS.M*0RhtlB=jNp<amGdm@Ag -%^TL?[oOKkP?\.%n_"p:M^%+3IhY5rMmA4C_R[4](NI,upk8$4601*o?+kX4hD7jZ0GIA_.KWW6W?LF2A^<NMgjVbCr-G.,r(C08N -%P91l5OgD>U9pO)7rO2!5T@JI)+s2N\#)7elFmQIG00T(M>MpVR4'Xe["]Bl(3@^YM)lL5hfTdua"kA=V$_4c^+dKcYbJD6$#ZV]$ -%Pk5/"oi=E.&O8CRRrqNP,Wh8P,3>HshOQ-P![l$LW^[+n"6<(qa4HP-FR9Ms8-.>Ij^1j&^b=gQoq4=HB>g4*QZF.0Cd\QW>>aNf -%]E`<[-7cag%;_0#Ai$T+Ak$c&,gULF\3A\3N>+$Fm;$Tu3_qD@4F4f)U:k:K:0=YC'BjuelqeNnn]r2.MR9ZYFDO$qEOQ#foq"XW -%.HGM+ABp2B?f?=UGNkK^neEl-6u^be(%3;9%U?Q'*u"),I=58kB0/*A.H62Z`-,6KlW&R.3Cd&$:MV_:Xn)l'mXrg>OUsoKc8.a> -%YIdJ^W%LCD-oVl+&S>MC;S/oImd6V>2qiDbF+<TSG0c<+FC46T(&StZ"'8+]-Ya;-Y/`Df_E-N]TA+L%):36g"=]CA1(l+dE1_Y: -%^/4#0jYC'09MP7=6l^J?22dekO77&ZW<;"`XElHT/TH.9)WDL_l1SRI:"e+<NkJ?W<0-.I)X(TS2apXg'L0d$jnZUqpRo'<i3FJD -%ER]e(i'E-iI.YPLIXXF!35M?Uj*.\N6Sgec13$BU'81W-1$^HsSqG.#>>4Br4^4ccZ;05Bo4TcHqj2MP-Yf/(bKd2m+,cnCNr\7a -%l=*@6MCe+"0@8_J?ll%kAbr'&\)!Q&/6O`Y)fJcH^fZ)VDUHS:P7>JY&M-p&"t@?XG]l'/V?cqDkR+hnEsB>D^pSK[G"aG.A`nXi -%:4='VS.%h2Tt$'?#Kn\Sj^j#6fc%IQE2p;diQIOp$hnam&L_3&^\B:`0e?/&N;%MD.Rn5A#R*j@Q=fsG)lR(d_niWp^t-i9jEV&Q -%G%$V'H/C?#&ZB#4ZN<9_2lh^9%!0_^!JrR$#*N?!$Z"6ZMLZ3E7EI#"k*>mU<'^QRo6G8I<:<"+dt:tdA]%e)HP!<:+)SsP^5\e. -%m<450&%l2u*4J4Q(eKe@5au'p$hWkb.b4;CWptoXF#r(aY:n(KID1r^:*4AGDYITsLBOrY4aufUV>Ofu"PS_?"Po6Mhn7M+LXg]Q -%kokL7[h=be@`A<"aW!PuRZIiq1JTP8VH2o5EVqgQm'%r;r-eZpNg9:C2I^5$-m=S;>.9Ik]sd;=@8th"*ZKVdH,r,VilfVnE'B34 -%l(c434Y'BF&XaQB9?Y;ll@^AnB$[GqQq]+!LaTfM3a=F=dl)jBU(o%cB*6UeIHeSi(`5TogGaK!J>81'Bl4S6f#B7rjhWu:^enJa -%*=)P$fY\RqNo,+K.QIK6o;&JK.oG=l"Q":q'Wq#/TPc0/Y:e\G=WJE<16QCI#;d-K/EL>g#QoJWEV4WgDL&JMj`KGkZE_tdfRqt^ -%Op">q4$4$t\(j^KrY*Sgp8^H6?QbYW$1i*A+U7%m^!N5>B`,<Y&k!8VcJmR&h&efJr9l]93<n<!P[U.$+*<2p^_a#hVM_r>?HUD> -%HY\X,s0s1I(!Lp1\@D@@nm7si_.7<kd.oBZXuG8KmU7#-0+7Jr?bYtn_7pG)+5R-K(LKPra2cPh5iHm<<:S32G1YLa4p#QudcurX -%Fl58Rc\bGG@e&mRY]tppbS/;lP^GJ>hE`IVOR`u\Qcjjqga[:9kB2BtSu=#P_HNDh4M(^l0V>/F[_9JD+%NYBK=&QMLf?0U^P2pT -%]n*nl(>3t6Te!kDC,H:ip\?Kr[YLkm_]KnsNa[u250m"B<s^((I]"85g%cb*PiY8!fl@)0a,i6halcIsihpg$3m]o0+>i_,EP#?S -%)?fN@F&on_M6V7ha6&**4Z.*Zf@,BGE5[3t-i&1Z?0e.cGF%8c=M?PFU*ZT[5=3\S!U/&_lW2MeF-]P5lQk.XpN+Ot',S3=1]1P= -%?k-h&N994MRB4K.%PY&!6;O3qZ6h3:eZcC%Im.H]Pht$Rn?PGtDaji#Kh4H<LLGIrT,G#?#F/!c+]),_q9aS!"g%3Yr;bWE!!ICE -%cr[XgaE"1&Ie6iXCS9q7<NGVR.S7Tpa:t=`<d)+]L>)aukEH%tb\b=_Kn5T8k4$3&b:0,,J15b!LXfOcI#ScH$KYS[^;b+ZYB^SF -%H9$7K7'K]$hVo:&P#Xqd@`ZXTn?.BaD:]TJ_[#SZbXthIK<TU76XOi`mH^FW"B@_HXN2ELh;OAD5@7HL/>[ImrK&'US1-N'/&F@B -%p1ZNr-JVHL[VRV"F"G@e(AEr>LBM`FBo2DHSkK,m<(*jG0gI_S4sO]n[6"J*35`G>L1kr$Qri"cajQfIN:97FS5S)/O+gC;R5)S; -%_Pk4qkc<<oZt:<7ArnVj1FM(+Eb^eGB1?30]m6@HIB;\d33&KY"4X+!=7%ErPWii%q/r`XVq<2+?pFr54ZEZhW8k1QY!ft:8aIIe -%iMGAp3gQ)1A&r'A##()p4_R)rr7El70^Ncb$abL,$npF[E^)ij\6Z5Em4@7'nHGA%qU]VU/,dV5fR^I640gIHCr"5a3f8O]UL*)) -%03<;WNH.\AF0353<P5ZL3:9?:Tb6Mo1[(7&ObP#LhH[^F-<KP*22kk/#2OtS65s"M%pVlMIk[StY6H\uEP6-iOY_7Fm:BkCW$K$W -%qC+H?h>qOko(s1G)r?,:AWQ<gK8HQe87#/rh4rE]Yk-@ncO0E\m8T]oH!V6^>*98YYE>];;a7NhT[s@;!T)MTY%Uluo<l@;X"`;4 -%'WfV)cEG\["dW"nD#.5%6(KJ2[mG65ouY/,:No]p;s'+".:t7@rLPlblMhJhGoD*i=0HZIe#V!KW5*a"9,+#_2ErF?*YjHMOBn_M -%DQGkd^\7!]0[;*\T(9G9QnmX2T9ke]?U^D+2jl5+MpFGo?lH#;$!6["=BQ9:+?75Cn2^s*_(rrf^afR^?8h*c-NMo+>($J(^"hkO -%OjK*MV'JBbcaAb$lqLq8Xnm,WNPa)?QgcrT)+OATMd\`,LEX:l-/Qb9*&3.?*<S'E%NSo"rim06a/[?FnQa&=S/Rc4.h&1$GZ/V* -%;_:"6.8bH>p,\X!;#OhCs*+;*X?:*;h]NZ0KMblY&SR$_Qg-fcpq9oAQ)p(3jR$9->\f<@pZX@CZ`gKgB6#)kj[2u140XKcC@0TG -%#$U:XUnIk"c.jbJ\/D]:#o8GQTiKmlNNQhI]IXMW^<)\)B(_NU)HirngL98I&Mn3#moIM.lmM1uQpXQG!ntmmFaMV(0_Oc?B2]uS -%4PkN@/`rlC>FlXb0d*+%4XrNH!>%r+aEQ+<:DQ.gTXJ7Zj'a#Lnk'j$!>O];MshaZYQMj%^!K@&6E:.4YYlhuaO\SG*<eTJmAT"` -%0pT/:jiL8BC=/TCd(heVHrf05L6AId/?N:k;A6R(lI"Zd4@[e1bn_s+Hr]Y=.?2rVYlm93)Ul6IlLNAt*dDN&n[;@d5h$_I"-c7, -%%QIAM$tiuX=AX3VG48rD(E,FSp3Tl0:69(!<Eer2Ddd8F\0=po<P1o9V2)(d]iJ98oOuDC2PJa=BkC+b]5u$`(7GmigV2p8Iqq(k -%Mu)\'hl3)Rnh^K$:M@rJ!;PE^N1>+)(5Ea%q`5A2Hlpg@jRFS`\j4m%.\3/5j7D@9;pR:^cV6a";40j`XV1@R@6(Idc)jH,Lja?> -%3V7HtX!50-V/AIW<b'Al>T5F@Me2)H#]*"]"CMoQkWCAN*+VO`aciu]E\PHucDTS/82l_sl[4JnopRe+IfmpZX?fZaO7cU+'AaWR -%mQa.$LPL1A[9K3,ls]Kf'/tQ:(IYl/eTtf%Om"\ob`i/09%rOH/p&#A>NHmJT"un??e[J/"VTUD!d!Dt*h]`T?DN`?@gsQuYXn-& -%A35L2.foN4X-V[2Wku8Q,r6(uA]:i^WB#"A;k2DK:,"qV*5K957@La[W*8FDE&HO1DNclT)'c$jcZUsYmsKSoN[EqEnU1eZp?d+n -%<J-3<#LFLN\0jA]?U!/3qk@XQ4\-B4&0#5&G?P*(*NmSR[AK)UfoqPo"EAQHQ9t?t.H%RW%T,K^JF(-n'&%!fJLL]<*?.(%9K([, -%o;C]&Xk_JF2GeB5Zi/U7/@4afoW6OM@'uPt276i4gQADd4H"k8Z0AD/%l;#e?6q*J[Wg6f7>^*`/e!o(&]MoV#FEX@i'8Y%^YYZ/ -%PBc=-rL0Tj`MIa#W*3*-s4lpo$`<G@E=Xrp*qc_.WFD.64rKbZ:bnp%S.0!s(.KSGJIj/T25XQSdr+qHR1F9F:<t=RS(h?skV36a -%Q*O*4=D]*XJDX:ke\)Dh@<oEC>OnOD"kKrE;4D-tGS_1YFqoi<WhY!KoCZrr$D_W/b&[',[6nrOFZUW"c7@!a\p8^Fk6U+a-![4" -%DQkT5$+DtQg(G\>T&'?V&"N9(<d%]&l(dJ-?;BY7](.8hhGNgPH>,Cj)"n/3EQ"iS-dA,-10?PKV!Y*bmalXih,?e'img.+LLhN# -%kXJB4l#S)n9.[(($!f^20KJDCbUtRd;4o]?aPpX&S0OZmd)i"C?=_Br^75qpb-g*mf0QE(*;K#T!fe*n#4MK.&<c')Ze_iJZK/%l -%Qb%Fm6dOAgQDj>03e-g5%m#\b%\GjmjT51J.SB]3b0T,5D3]Y<VKO]lXo?b(V^>ACm'dl3N*Y;kHp907^6aW<HbO.fqo"H+IAThc -%!Rt0f.cN?]at[<E/TO&QpSu5a6<'OaSDl@tB3h=23`c-*J01c40G-K&2)t(L\MQAe91nVk7$q"p-ku)/baVmlU3=o'9bd-=@^Y5j -%nWTg9WK[FG]-i.aX+\bZjkd=aZ)p35UkK^,KMU/iS9Akd-(S>+NaBD5>rcogDj9I$=*!Sd16'i;09cee=Css(96XM$\0A6@7l%?@ -%F@^^5GD2J"^bH^LL&]qk*/O8M;/J8OOp*:O04sItA;R&nd&gV50^.n]k@6mC\_ADsQWaR,nWghKNqM<5nXr4+gtX7Q3Eq4cBAXp8 -%aU>/$N$qb7"O99[A&BS`2n@L3g+pc,d$qt&,Kkh[E#n6\rY,r&-pH%iVC3cK:GIB:a?/#0<n?lACZ?>$fn*eUD2X'gh]%sA,=T2k -%p.B!s[5r"d94ml1AS%F*YSY7i@Qjk?Wkc/.;@m>GLuJ,204VHXZK/p5QE-%AZLT!iVFEqJ[d[GU]Hr[kcY&e#Wp=,r!gjSfVg80F -%S%H>_'FRHhWC`\q=-[WQmqPQm?I@nYK;fC7<EC?;)3jR5FLTc<H)5=NVl%AGpC,5J6clI*V5bLi<b\8!'`=Jf(LSYB3uPrD<1jUk -%<.Y_NZ#<+D0&JMbV@^<Rd?pfFUskd!(JMPaS-oJeefYWW;B4NIoi,pr]]6>p#"=5KXrN'UgRW3k2W,l'VA)M3.u"PbPP5rQg7De] -%PN*5k#_dA-&aDe_\E\2f]+')h?M8K[oa=paZnJAWANZ`>oChj"_:4T)iaUG4*)"pM91N9ZC#3VS?>q-slhA+SS7EX?OFj(4WY4/j -%f,)ecZj%L)b4/Nd$Q=iIlHuQjpU0)KpIghsG!HhoQjSf,nImab;q\;=o%lYP><g;C_96HS>-F[6jF<un=mj?r]"QlW;Y=r@YMrQA -%UWCZ:k^69b()oVpIH92TG1Uhf>ZXng6ZO<]?e?M1$S+.HCm/l^;OpjK#3#nZ_'7e\oQ17Da,[cGMW2BU-1P[<+S[6>?b,)Gf&hE# -%VXLH^!h!SQh<\(8JR^iQ+mMsgK8L)T/O)K1.Pf6"o).Jb<.XLpJ">PBCnKP9@3`G\a1ae>+_;`>s4h%=j4)o?G(k4*ph]-\e`73K -%?m=F?aW)^mY52]@2n'D_USb*kNLf-&6if3qgH8dILnhECM!B<"H,d2^4$dPuU(@O[Rh_ii%^@JR"U[EaJP[?n[qA4'GlKb1#O1_M -%\)9\N;=FS&mK\3%ieaE8^b5rM6jqA[nHFlKZ?bT0o?6!(W\&(uLsGNP<+=IFLTl/NG/sPb.$]@N:#%:PM0@As\WR\UUJRJcGkP+W -%hSE-0M@`%#Y&&NrOso91`X4Xd)7^j,YMIKB1O,hjCY2Js3QUoY5%;AIB$4:*lBs)b/7!(Tj$5HLTbTl7gaOTFg.re<:e@0Lf\6=O -%Y=X!*muaddh1tN3pbg2FS1)*PG8N-Qn$#lB<a@'YBL)EA^2%+acNQYN-;6aM4iaQ,hLJO-UbIqNI5-R%5VfJ!!"MrW32j*(\Bo$d -%MGf[&Y7Uq4()2YVF]m8jb!:?O+E4T2VX3R+2=O5:SeuJ10T8C\J)+A$*p8V82W.W<h[m>:HtYMq^<<CCjhl.%7_;uMP`IOq;'mA% -%[VkVX`2S7C\l&FlUg^ic;5\3`.e4Zb%5T$0(EQV*MV)Jd9\='Fic'?*p.a]0!9oGYS6aGJ[p%[$HhhjOW[rpgO-X?8P*,95GR0g/ -%NoGLQGtP2"3NsCEe!GJ\&ZblZ.6O&`!cN-1IYspDYHbmaE_D^<U+u:MY]$SVB@!SWGi(80\8;q_6E;^6/L2f@N>*\3c>C!Of;[$T -%G2ZQJ(J"5Jci#TdboIX*jO+QI;gH/mr6V(;!+p;!OSQoIJC+/5bd2u?DD"JL)K@ZfVC-Z.K..LKYAl:!(DsY`L!2O9b5l'XJN[64 -%MW48Sl'*b`o3T=uQnCdKB11W1Pf(;o]dZmO3^kn5HS\^,QT`pS[7Q,e`SC@<'/L[r_aW;@gV*Aq?l)mPf?b5(*j;m%j[6<MXBTTS -%a6hW<cTmFGh'q9mrk1f785__qPPUhATqaP@A0F%3=k6:V\4rF9FfC)!^!?L(mtFrBJu,B_W\Z1XfflHqBQa"<DIASHkOuW"'![Is -%+'>6\6=Jp:3ej?epjK8a[ah=\8g5qVYi"Ta0sP`=fm0K@R<#`T)4'\:?B&jFDC4C#@$P5].k8W>k2d((;2*[1Du4F<;#WadD7nD/ -%dH0El1b2>[=DfA9TTWa-r:`rSRKT;P1Q:l=1&[1.CF%a[(*cPG5uNu#b6u1C!gW&[Y^S?(caBF<*5R$Pc=rqRC7I4ZMUO&"W4r_E -%eh"=r]i_:ICQs_k^Q40f*HDRii\1V.e)WZ[;66k`2BlG2^1/.6IhVdoV\jLF\ViJ!FRP>J;(SrK28>Y@";Tg(hti&%6nWG.$<*8C -%[N>;s([VXL@=pXq)h^O]>r2#2B$GIr@n]MAOnTcY1C"ct2*F'Pal&4=E3KXjKh0Yt09GAp69#t\P3P)RkTr;O_TT"R@]?EQU=(L5 -%eone1S=:A6,6ES%]sHK_2Ie@$71`&#B"uYh1FHC9Ln7W;%EjVF#p&'Dn7]K7*8!p#DKJKYQG\94YK@pDlEC_F"B8q4rQ>("(ZhZI -%9?bMNE&)UOPC&^chC_,-GFnLD!7Pc%)96=YCJ5AU:64BJ[n^<O#lh3]:'5@CXr1*@X;@!O)aV8]637C^"Ud[N_*+%N[1&RlO)9pY -%X"JKX:KB.:rRJ,b"_D<^o5kTRD0+-VY1P`1eC&d#a8<b7jV:%TXKoeUPLiu%r"sOapd4OD_m0?6=O;]g.=aHBM<a^[j7mJ346,T! -%Yg4\[(nQp;l""TaX8M^^=oQ/&Me]Cg=)&2pn_Co'T]JmD)t?DM&gm8Ae2rJ"S'g-JE96[H2]hX14pWM;8BsjA[W"q8ICLAP@'\J[ -%6#a4*TpfZlRe*[nhn3P'NJ:7CD>b"%hKIM6,s)T`JprLP7f[858!Vu"eh=>r+#_i7+bMTX_%;DL.FEc(!ldS5H@,+g,%>,ShH>%* -%CEs;mF75PY\Z<$A1=o#aXIJ6k/bT.EP5nPs5%JO-KI'FF03,tiPsP:)ZCpX]4M.qooStFGh.I>6=48^dWh3`j.[V.u>?A1FZ,pQd -%7%cW2Q_qFOmLEqTQfRdFW$U^d#V0qhY:8%>$9,dMW*JAF`c3Y.Y<i(`9A\jF(q#!Bb>6@5p)P.)UXr=D=1*u%S[tN](@u&GE,@g8 -%-bh)`/>]Bp>tS18LggQ;M+45bMR%I'(c*sc7GRX.egh_eC')u+6F,>YiX/bi;#*g"!B7'MpB#mY`j,0pW[\h5(C21K5cut"k"I7P -%VtkI3e^'jYh;(i/TPW<;p5iRZdaIlF8<Iu)FCRSlqk>I>_X9>I-A"cuAtm;J4JQUA&F"0$a6aG@`oA[;s%G\QBt*/#>W[MApRG/& -%[hk>t'[aiSC2::a%E9"6Sg&`?U.+.*1r(Xs1K0/Hnn'M%2DCHdb6.ZMnf^Bt[j7.'=c7Hp'Wh8!<L57f(UCT/1T7TfNBM'M-WE%1 -%[G=m7Br,mi^5i!$'F<8-<Tb>_dl&_C:i@X`d$f7D;fmUUn$^;1'Y2J#@"aJNgU]!f%W$#$->*liDgC9KKkeW*#AEkCI?EerD%QqV -%6-6p?FN'!5Z_iFLHD,a"^Oo0ETZti4I5CGU/l76ZXr>)^+];Z_La-3H(W+8%BD-/TmW#H/,4WpBBZP,r.+GCMncSgUd[ul&1kd^k -%?kiD(g';D)V?Ml6m/_b;N80Z+#aJGYpk-+R`m$^eM]HA(9kAY04adTIAHacjKei1j]pr8D4.X8@0lE$&Q+OD)'?)e)`C"C<?6m5Z -%rC2@I?:5pkli6Xhiu691iZp/#98DC#U..[J[s").8S\YfSE+bor-aH_%_EZV:!D#\`3:JLrDIGFhA&ihUqkrfhH9B_0$)tF9&'G; -%5jVG3.kg^DXDsV<9K;/YX&j'KF@@B)VSEgQ;6Z:;;BnH=63kGf!ArQUFmAB7PX5KLHj?(nb(/criL4aJ0_6.+_$55!%48r,^(h5C -%"g5VT6?5um4%3)."B6q2U,&X9GYnh#D#-jo9Jnj`3XuAU"^@Ein2\V9egpC$CnmMIAOS];aV&s6e4%W_?R`pt"95k=7qG*kOGnkB -%GF@&8?]?+=IJkVe]ul6201FL!QSJM&K4Wl0\aXO[;KE(sEq*AX9:.Z(oNRM6gBDg1D]hk[*ZaM.7#Sgsod`\K'X%mE;Aun46T[7V -%1UoXc!'9"Oerb*K*%5l$3luX5QALP-[r=S\M@i6U45Y!mqtmJ!rh`dZ,0`^3VbM#EloPP'1U8DFZKs:5jJ1(]AHjiAbTI<JDNu.U -%BZmp;Z<:abQI4I.3p#U"7P>BpSRiJ(Jj>;V.pe:@F_.E@A9Stbi/)Om1FB*gkFsrl#)G99LPR_9@-pRKLpC)g!^n*t5ac@lFk^JD -%_B[Gu0WHc--)YpiQ*Nhafk)6onO!p%Kp\rI@IDOKh97[>?4E8"SRqm'1OR>!LQo/IOCa_>;:)rW01$9o3L[B@M-7<W_QZX4V5i"! -%'-F_J>3',[\[tal/X2M:.+SVN3$Jbc9*p&P!]Ni'^EMcH%E=$cd#,N2$[/N7'm=G^s4<Nf.podN@UW&23kU]%1:]u%d3M\U')AbY -%I]6l-'jtXaY&#Q3'Ri]cJqeG7%0?W:i@nW%3\OR=*)kcJo*Q78]&bd?jrTtA6X6+m^`E!.ndJ.QF_b6RGM?e?7Q<XJ)TU__XqWHE -%h(nnRhL*krL51'0FIk!Yf=Z7rXr@p+pOJSUPi#p)9%+STXkE4BEi3)#d4b)SbrBqMq\p3]5EB$Hq4!WI\0Vh<HLEm7@=eStf1#QC -%IGoGUq^)B)Cs#B?j)r[t&0uG6F+5cFnB.oeTMo(EjS**s?%NM0=3dpR<<kjR1S$:KKfBh=KL::92/<BMhZrCB,$FU>72'fjVt(4M -%^7RLhc^^+Ef&Os2a:]kl/FY[CVl)ZXgMe'.a`cV21i%$NaJO];M(7SOddLE@Pr`+q6N#V++l3je]X8N4-n/+Cr7ZP?`se[1(>R@h -%S@NG=aXZ0l&dL(2jgM!@=)QEhEqbePA((2?C2EbFm7Rdt@FkuX^"tu?<sGeL`FAN;1L*$s*:b^QQ1ut8eCdAbf&$k^[b6?uW2^RV -%$KW%#TODQ;4TSHab-;WC(@o:%0X#)I'5]1+bS:F2SjlZ'A0ukGKu+XDXAK2U13kOZY\P+"TK:\\Q;doURVUEo126V=,F]BWJETO# -%,#l0s,:[I)kTk6!C3-p_V7+`e0!U:WUThDWXV>6h[jS]'2003mNn\/D62JRS?jZO<>U`"65'HB8\\mZ4(s_f?<)FHW+'/]\_r/8# -%RKD`=n%`c*roJHaH0(sYS*W2L192Yn@f`(Q3O!mln/'&!Et)jZ$Yf[/`MA;t7LI8]5pR*U/*B_:9<h25g-<E$j1I*+IMo!3@B0>i -%cuO@Aq1c#t3Rhq&oFq"0d>pR(?umkPDPo4km7,\dmLY0B1^c=6UI06#2[XPPGM\iUgLN^beoW-]`JPnbfYk*qhsGfF\kp-2BCZck -%jXeOAS8Q"bP[(Q0n)AL\52?-bW;[.3&3#IZ>=33cXjD8A:gWbpbfm^iM0,61r<M_^E9:*.(RR;?jq<cT'KsacaK<LA?0W(T#WQOF -%<lMVLl:iBs\;%Ysh(0qN7.n?a8+9oi[cI/#rmYFJdf35FWrZ\U*r&ZK_.Cp^(/d]8G`#M]%bQ1!_Qm1>F,mt!MEopuk?Yf>K6gl? -%(q2W0R.TjL$f\F9>W5W)oiUcfm0Sm7booK]j=[<3D=.=J-_f1b4?^(2-"#L1)f#OLh,UqJ9V864K0._s0J;Ki=sUIkT:ZaV:>p3[ -%n=ZI/oj&M"j/J&1`3pthCQE-f[ntEg2o)GcpK@?=OnZ(cI7ZT&;KC'CgD66#'W9,+Wr&A,Y;'o$7A_ii<h`%-CBTaC]F3k(7aRoO -%O0.k'/t.,HF;%Xf(_]?(Ae82&QbPlUZgI?o;*]D]+Fu[X2"/N?O!n64.gfECO-3*LS(s$rcj79E&uoORHq6;4'XX?e5l'(n(qW^S -%%2s:X8&dN'kd:gJ/`q*&>GmFXfp7)cm)Z*[Pt7=gZ#paiA_5j=D4p]TQ`gY8nGkqZKiFedmL3!F*&3Sef9`^!c!<T&LXO[WM>i`< -%KLk.#fq22Npcg@`]/XKJlP6=dl#09R(R&VhD@.;k4`3M\o<q!pE?K:Z-tf2DW1-\aAa[9c<_&9)RVVT]Q6[Wbf'S\N&rC^lcL,Kq -%XYF0+194Kp((%F@3EJbVp7d:42]97nW$R!3DBci09+MH0C2c8k.X![5UFXWs!Id,&Ja!O-m?DbCMI&'I[])DkBUa$SmE_9U5dS5P -%HXE@(;S0[&>oCge`$nGkC:jS4(F^q(#NXYI9^2?VGs<3#ogO'13S27":R0"(jXhL`UAL.dI-RE.e4e.2o"4>e'Doi0%S6FSk:h@" -%O."K#CdT"WI8!`3;s`l0P$QH],A6[p2EA.;@,u_$a<IF_h(,#U7$sh=1sqZlQf6OK[d@(=,]eX6ds5B^M]<@7hVbk\:Km8%("l77 -%1ogDu9m/QVj&"pJ(8*r4+C7c!'\k^X\OS711NR/<!$2B]%F;2![Q"H/;!3q_[O6k<TSF!?iGC3u[A-&@0%\gh1p1#$mgt*QC7N.F -%Lr)#b^NLo/qpTKR^A)i=o,;n<)N'ck@D1IsF\(*/j]U^[IGqAVhJXpd=O+Xf37W4C]6QL(6,rZR9l6dpC=4)p(6PBi]mEfE"OESB -%&\2ttos]f(@99]bV+jrDl_T?n.<t$dMd^,5;FJE#9%!E)A]QuO?*3k`@qdttA(hs[ll#$H"pSrE]hMSp]m3'cI0F:;:\>Y"Fc_i8 -%,7Q?'>D^8A!.Q=[Z?0g4Cth&HCL4Qd4#NP5S/h5.muPb:\0ORScPg>P*#qi)EE&*:MAYMG,oVX-YeL^k\6TGS,GfpI>#r26Km)ee -%92u,DGK^Z5/HL*[ZHQ;%n972h@>XKFma^$3W@)-^$=^9oG@"H;4*Q^FDYDg.[o-+G@G`SHGDNINU+gK,C6*(Q'qE[7Dl]nBnVQr3 -%5_:M',\`,)?Tjj"#LG6q4(r@06GU#m/DZPR<JS%R%:G($p#u8-`:!A8kL+Q3oiU!)dKOrtDLfeD)k`t7D1*q-adoS*%[Ei"2I/7B -%\c#WHZ(C4Y:30T"-[4o[8lSY'Rb3:]=ec`-0Ui<!J_#6i=7jnQ'g,)VFXr[X9+=CU*5\mc8fFecZXp%L;%*B20864e)5qSi9<uKQ -%e^gQ-fagp0jS7-#.l-O!)!)a!-#i/0q=RZ\ECG2qIXe<FJeSC3L^`%N.484(Fm;MRih'+T/%R050oo$L(/g@ko<,f\(V?nmb]j6T -%:1Rp#-Kle0*V9?di=e/bbU@]=?*gW%Zf5+ae^5=i'%r=gQgLQ#m&j;k-DnpE@9?d#Yar4>Wb'R(U4dqSJT\-Ibr9YBn2nkt25K'! -%\N9PVis$XYTcC_M[T*%#$/d@^]Kln+\'P'jr]<BGG5l^F6qE%dHrMqO.REa3ME)hB7EhPq[D&h00d4"Z#6Y-.V&%j?#T0HLcRYe= -%$uF$jh?#&D"#Q9'e$Zee28OIbefh)"6;<;U,7Mp6A>E#r\"UH9g2q<>)9W%WB8IP#O%jDT-WmiCJH:CiOQFWtXb]sd<6^"?eJ<U] -%JU+a$'UlLJXl:5oMYF!'IL!l`LiLrhfsqcsl!(YSW`8]S%4?#Q;U0AQ*t/D1CVoZm6K0N#]P_t'"5R$QU,r+WHb[fJ@qE'#Z%H`p -%aXmnZDf<J/6EqDKgr#<5<6K%D@*;keQ))i5,/50gibiV`Kasu"&)nh!:5$k$X1\m0$JsC]p:^(U2Sc/[;H5<Df!#4a+u`obLT^)[ -%$e60Qk#/_>6n9ge5;KMQ8k@?)j^P%^HZ`+k8E+)jl7GThh:_T48R8SS[cMdQ4K8(ZP6o)#9Xh0EK/%_2(9=UN^?Hl8lJ6du264kL -%3`d-<<['a`58004Bc`qQ`e-]0?nl)*`ia:(M=N@#WUBskj;S?VrARrP)F-I:-\]1gW0h_agaqK5`]5:E?JDb"3u;9]bb`q$U6'*] -%e9L($IZ$oYmD."M*%qmfmtsn!@I.^?[qd'b^6d!SXf<o0-]d-.d0SQT"c,C0@Ufig@C1d],G^,"a=2*&J*iZW*_KA%]1%k95$c$r -%NADFkc&K'>cdBIn\5gHTkCu:';&5'V%7Rac:%;VuF8-"?^-_D:mZoU97[c`$T5MSO>Ep+7GDp3.X=5R9M\3BC/)b?.\M#SK>jk7A -%e#=pAs8"QZrDH)<?M^$5Z7Cmd%XYt?Gq%S=Q**!<m8"<]&!^r=3TqRW91a(!V3(D,eg7bdQnWVb%>?Nj\W<<c!`'V[57EVWbck0l -%DPZ.R2f$gGg3%0'9Cl,)+p^l'P+tOfQfJI!oVC>0=!pZ.F8tNGld%-WS/JX7n_:a;8?%P"hbuqr]U`Nf!="EAV$9j$H*W8u8m:ss -%;5Pj7oK<R-ld8Fi0F*`Pr[fTOeVgXp^1O]n)p1tq;&'ZVT;^I<!`S8+1J>Ff*NEH!1&?>O\].<r!3o,gnAtN4U:<cp8!J*!N9PIr -%EjE2>lO%p>C6`f#O!Ib*,K4Uf2&+';h6afD`_X:e6PUi4fT;sOijLm_W8*>&G'Q1+Ql=7p_T!-2*r?mf-F$bUnPY`7[KP!@\)'LA -%cE;<,%T[6M\K_;f.J/F9V:$&Y!7Ck/6SKT_X^ZVjbK]'cIN]IKAc@oA=ti4&:jYikp3XAD*U\5TCKp1()PG.-+Vm]e3='i@U^f9X -%dR!*Ih_Sd*gD&X:)mnht>s=@Zb.G6&eY4,3*<ZV4f+Pjb4&XL:eHh9r3Rd&gfJm8iKGO,X\OA4$6JcE)c=^V2Cf/7-\]intaE?oT -%k`I6:VO")*o''(dLH]V$ZH*Hfht"Lu1\ImP9"JmGRm(^Y!B'na+,`9+(?bIP2No_QF[&,S_u$!:apt?*mFsMWpjGarBN"L8ab6#p -%04$,o-2>'`eG6s"%eZPF*TE;,,ch#QXt-[jAClc&<&7-CDoV9VqLI"sqgr$b_gX5;j<mO`^2C*Sp9W'SH&G4>2gsO(\Xp&F=EFO! -%@8q0UIb1c-MS$PD[4luO&$U16b.OJ?64X(o\,qFI5j?[hFa#LnlA@pdN=`9O]tnB/o]_'pBW`Rk^_MS&^-@PkJSYF47lMOs-`:U3 -%.UK4['o9J8np,$t4@<6%-A<%#gQL:Bm@JuI)(>o.Cf%4b+tp^eKZ$QoQn4:6n0"4<WqJ\U(Gd<5.lFP]^Ms84*F&<5,D@Hc>@>l= -%oj/XG*U@::SbL^1Gjj37ZgaBpK:3/\7ha)d5PJ)8>OTIf2Esjj%t/[%OL[e=@.j#XpL^Rg%YQRYf\)B`f5ck2\2)X`D91$fDteCJ -%"`M.bnX*bqgE61GU:NfuJY&W$R[r?pjQnKP)oM&\WVSKa7ON[9WKENF)`GL.L/U6]PaG)Z?$./'.tOc:h8j&@hAiMt`q0/cX4c6t -%lb7[GQ['m5qB]4jk("kaIK`3GhHHP=`)SJ'<a@Z\B&D-(+PG5LRn*]li7i7gg&9Y,M.doJm&:L"/PIas`/dQVna<)/feu*thc,C_ -%^5*hbA.J5^0H*)XXnIaK1)e/m3Hi#'Ffb;(VeU++GC$lN>@d*lgbsY^UOrFV!L9*3._"WHNs8ZrluHNd1q3h/\+@,eD_$1k)EU#l -%l9f1;jP7uC*SJrp_f]7Sp;u\JS$H8MV<md:'!-V<Zrhbe>gT&^*oDp^IZ#aOaMm/1L<e_LDOs#)qhT]pg^67+1K<aU>E6S'AnAVF -%m_Km"UA!D@PNX7$!$-4*34#e(YDBC9g(:7lFX8^5rPis"2>32iO[!LprPcp[>rmKlTL+fT/CAgH6d%b7`/GRsG++7s`q)gF_"IPE -%*1Ghu);K5q/'*T6'LqoMU;%N,d<Hhn&(P(fF^TXmYjo7Q-g\*<1h$rlNX\6C8r*!FA(b_E\)a5t.H<%A=G*8hIfc07F,0?='$UNp -%;?W!WHtGoYfDo^f0Rjc1o[=blIG7dB+.<Be!e892:!Js41F"o"]?RBr=K52THZk@&1"EHd"`_cOj/b-*hXEHJ8`+odFTYW)<E(j9 -%h,.08/b3ejfTG!E;<g$iIO9RX$c"TdKmm8-mHL+BYbEju7l!hNmjg*!P]X,W8AYY4G4[u+[tD<BONVK35((_Yc`1DHUlk$XSSS&1 -%IcZk7keLeZ,o9H#mNBrjN9F2c3uY2dQiu"TRrgUh)o3Q\\%]trEKFHEalO5m3n-@D$V7!!Wdi(-e-*%\C7U4pf>B\;iUjmD]P9B; -%1Su>)lkt<\Rh4T)-`HPh10%aA2=eJ.D,ZI]r(^aZ%_)RdQ:>-ioQ%qe>\`b1#!`[U^;qjqh\A$3)X"\b&'EHq[T9I*o1]b\J\/6T -%pAPKaY`s;mek9uGb@\5j+CH%31!?\a$t1SO+o1:Ado(cO18&!S'"qDR"3EkHo1BV'/O:CHoPr`l=Q;GKqcb\a[a-6n-hS)<VjL<u -%.*uXX*I%l(l.;qoODeeAih5Fn>%/$KUgS]f9tW@nJQUrJ0`ZkV+fe1k];/Z2iq?k`=!N'SqWuA<MWYGQZ:HF6_&b,kef8#!X'_hd -%8C>Jt`f1L0/S!!AphEZ1m'`Y#]dJgsJB3cL->cpa8<3=MJWpieF?N0b[lL\BQ+#c5C+8,Qilio%kZ^37g?`g7p+09crP8N;91r5Y -%b\S&P]#I@jU26BYG*>n445bnGgaS"Q_?DM:?HTsFlkZ9NF.<OsW*ZdNX0Y751T^gla'^k0S[[fKlK6>Kn>lUjX?*sNPc4@sUq!=9 -%(1uH*eOe];%Xj73>K$W*`C6AG".P\JI_sI,COu8fE5t/)&"83sCn[T\[f1p`\Q,q>L#k8-E4GL$jQa45JI,l;fIWj'2K).t"X\B@ -%4?G$(Wq=mkDG&?^cB'+9JRp_:5k#M_^Sq,0V7`!JnO)H_>8?r=.;4M0`7<-Q$<na&Ne+%&E>>7o?%AtS8aL5I$HS/hAT#Jb:%4c6 -%YHZ:k<^7e;\o-E>W:_KY[Zl&YBD!5,>>Ff;4P5%:;2%G+<m2:d#F/6Sg=:JN+N6Np$KB[fo`uLt[$s54[9Ntf5`#,=JOpXPfrejJ -%^HU!1#$gfP9&<KNKF(]N3RaYU3SYDHCH[QU]8$VlP"L6U'\V5H68/\YAB(QWmaeFN"ucEYDRU)rOQiVJ2M/BB,2Z:FGcL'F%Cu:4 -%G$:9+*`<Lf_rX)ti:^ibBA-?:^[ID6h-KQ:,3(`6&)e2uf06nC/M@=G.-RJ'+Z*D_mGJd90L*:!R`&u7^"`)p\uCdZRDF3:5e?.` -%G%#2G2n>o3D>ZX>YoufjltO[IiI8LU>`"(CiG!/;Z]8nuR3i5`#nD'HQl_u0,>*<j8,%h1ehO9dAj2.g[II2\nSUa_d+D7n\f"#K -%+h4h>*?/6c94S?#NL,l0n&fE<Yg^s*jJRts[;QsS,FY5,7CM$/.RLe9],o4@&"2O!Nk7h_C(\\79COjEktG,]]':HP'uV.W7-r,A -%cM<H"cGPJ/\LDPf+u_@1apjFLgR<\%oZC2[[-M<<N*ltA'#Hb0HJ3KDMC.$il0m.2d/YZOIBoMr::SG%l?jR"TAge]dCl4uZGa/N -%Pk=16=*%d>qH`2U,$TM0Wi;GF3DJV8k_'jB0g+k()/a&(^TGj5G3b/(DS3>+XW)S+hSUWphPJ3lgZcJOG[qr?9?Wu5<SBu\M>t-N -%a^kXJYf#FrZ,nDGGB*6oIk$4#c4ZngmYe$YZ9g,!+>Eo>Q)D66RtanEno;$`Q`X`FiBG&e'-N=[df<;$kYVjD46^\%a<j`bA5Lu3 -%h0oIQ2AE#6pb\a$,IbK1[YsW*$?+bFg)F.WH8EtlC09Xc\rNN7[OTlU+3'78Mgj)3"c9,UArBiii""=o(ehW%?W-i^<(M(`2tb`4 -%X_'I(5^>\aK"=,0l9,6Vo18beia`BPb=E@,*nqls37cGoKu+orkSE]hM%:*@c#/O%jqZFVTm`3F=+A%RLg/9NXQ+;J:A#AJ.Gcs_ -%`hLgdh=XJ7FC2Qn4*QIpSQ>bD0]ni-jSuCamWY=IbuTfsd[Ro5/<XTQUYpRfVLINGYjUA]`#>J<e"SRo?-B%T[9<nPai,`>]j]CV -%IRbqo\a1Xi_'N,84dUI>eJnOkef.?=)B&)X<4f4S6,K#"doCX]EX%2lX#Gf+$`6/jQB!;GM<bW8A6r/3;(>5[F2dr[+XDaBdaG8S -%e3.HC2\pK@Jl*.uFZYX7oOBAZ56V:d$Im-M<qZ"SCU`oD=MCmK]i'riDlIObjU3aH,Q"N?L5TMSk@iS3DOAu^;Nmcm.J+,2OgQ1q -%dMh,)n%l'!g)>ei1;5tdh@W!:ncld<U9Err0'sFDqhi/u2kg45]YASE;%<D?AC+dG^HfTCd%tQn$#[L85?KC[48Fs_Cs[gQpoOOs -%1WPu>CKRQcom<G:ZIc6#r=J?gI``6I2G7_!8!M?H!bHJ]kd9.AXg#0:%Ga(E1e8&7>#j!?U`inLk4QDO@(e.tW7HYrE<ED!lR/uh -%o`:K8Ro2/fY.`m'BKrdmBM'r^(4:d?B>9;2)c/C3<@L'L:mG7L?->,Eo/;+@;&I(]N%4-hZ9,_NOI5;^:I/P<XZ8Y<NWHH@hj?(? -%<_T>Y[C0\[D0?H;!&sp\?eu42VKq8K"^'SL[<iFpIib88CCR&ea;]KTB(Vtg2naaM6Jpb1i`7n;hS)omEK7AIY5pE7R2uFYArIA# -%W7ki_`]E0Zg5:i3`si5T31`c<;DXB>1G24%hs2'1Gl$h5#EUY<0()lgWJJ*<<3l3ugni"B(Z2mg01.JOs)_a4]-GIRe]`f%!.re+ -%U0$LL4uk?'<<:FJduL4nFt;8#U7F4KDmP7&^NF=n0qu:8I:P^GNd0NRb&SnTeICkfd%c71RKL8o"H6,d[Q&p.\du4m<>ElFi,9PL -%4!Om4c'uihj5*e6I]>=:YrHo0c8?2QA\'&p*b):l<#BZ=K"+`tkTP)I[GFrXa5Q3`#,kZ1$88H<6D:9+*QhVB[m2ZZp?7OF><".1 -%g7/"^YhdI2^#/[;3:Z#rk"l'hXL]:E=%i0+h,:NTFR`"JgW_ukhE%CdN1nbd`c(&;12+`.n5h)hRNBB[jMq5dK4ZQLe[ll$SasAA -%A^U]5R"q]N:s@-@649)n9T\6Po(tDKmrq#e,->&lA1j,7X9BfjAW1aFL#1<gP2E&rQCPT>Rc]ZSd1P'[iGZL)4mjM"+pp=2$+DY, -%Ri$]U2][u^V1"8Sm#B8PTAMVY3+k&<=_U@aeP[VpP$'7"lW[*(AsuO-Xe)J$Y\U!l.AWbsLbarthTT4&4H0=@%\PEC@p:=ZN%k5f -%#Q#7di.3n`:[^i[5Wh:g`DT3082&&so<[j8Hp<\:2j/AKQ[5]!8dMMG`>2nGLJ-q3[00BZKH6EWmoq>BDi];K@(^2PB>H6M\cDgG -%YK6%&V&Ji[]DE/)BYV/>#LMc<.bp!Ief)L0VUMc>I4P74[Gu;kcNh_HO?*&.7JTg1[Rr5Q-YH(QE48mt%(Q91`8N;A$/s<VQe9P3 -%#1ssfhJ_b-gbDWTd$S]"mT:aL.qJ<XH?sSsoBun'M[kRY;:RAW`f2pg8?f>1#Q`e4&TkJDoMLg(KD->6*?/"!.8<%7Y?M%4#&u6k -%9\\)@"d"udHlmun>?^7!&>uC8(QR.b,C%U=h0e!pqL0JR\%Vp\FQ"bJ[F(Vk57OnGL4-n/K_4!51bn!3;oi$<"=n"LEmP`^#MBJR -%T@h*CBqal-\pK&1(g5:U>%@o(h2'B8!SMo?QCh("[gjCL`VlHTA1c"DWdrV3'3QjOAhG5-l`$HDkHX]A1\s]paD?>SMj_Of'<U%, -%qZKd`AiXEOXdAIX8C%C^i;`.5T'plrq'bs)-l\b"CM&U:2B(H-A^S.Y6=XECh/-'[5RKe_C*>M!:h8>HV</CTh7t,GZP;rhmEX5U -%U@2,aDi+IlMd2BWY#1I'oM#KOVlsIB[?j7d2D2W31oso4[t@6dSR>Ksa`5Ytp+Z&oM1N'N=[[6S'Hg*tJFCd<X\.T0M6hc"XsbEL -%3u<-t,i0133M*a8E13JW=r8@PRmYSs_D)"pLsbNH2F0QCLa1['#%g#ENO\j#0k^-9qIs\'L-k9@-L)ft9Q)dH5*u@)2G&G#Q?s3t -%,iW[g1cG1Z9$-Y\2`IuV!W'#UWH$>'Ld&f#YIP9*4+mc-^TolY%,C"B'Bmj#7fK&`D0BP'e(S\PF6e@(Z,NCUGN722WpFV(C?6X! -%"HB51p[mrkq?RB0ErtSSH[BGc,PoCn-%aM"nOE0.c\$V+GIlGEB&5^kUX:H3i"gpJAI;/A0e6V1hRq_ENK7p[E;K/s)AMV4hB\Ol -%`V89i&T;37`2Y0eogU-Z(\/@]8ed-sRkE'*J2Y#_"MTcMQG6sEYr_"Dq"$T/H?4L/ek%;l7FJZja]0n9CXWX8(l_"/qnI;m5pc%B -%CXu\=G$+]khX<_=AkYp5\o*=&M@HD-"T4fkFg>k_RX[O3nNG_5;s:Zk/1n!55qLq0UhV@2iR_rNHUVOq+e8KHG>T*fA2YUE"Kb>/ -%mt0p37=kS$g:P9.$A)a;DcPare8=:F!VW>f1pCR$:%4fM(Rn;0,`G@i/ncGXFp`P;9BofPU1JCb!Rhd`_5@P87qRO0:)UiMIOOI1 -%Q$W&AgGB+n6IYFk65IaY6sdZf6$'.(0&CJ2G?/TWllh&U%-:LR2LXc=Hg<*pFn/;8Egt3herFqD&CUs!QB25Ed/p8G<>cJm;M_&@ -%l%&GW_7ngpVD#bOo"Ai&3Vr/K3cE8PltT%HRFtRrAM.b<1Cnm:jCclT0^(bdrReThMg^!L,p0o$F"L[;FcaGh@!r7IoR0uX^(thi -%!A)D!c%6-0i)F-L^Gqt0Rq3fh"E7e8W#>j)gURReZ-S]*iuMec1-++G6ci_MU@pma"MGn`aKCpikN8_+^CR(5D99rsG1J[O-1MH4 -%^r&\h6RS(!H\02^(7u8%SF>XGoqTp$3`/CSO!O,9'H!:1KIq4)JO(59l@k,:2bcl"Q-P28m+7!Q#uuf=bfI.['C?!%HpOG6pO9`% -%Nj2-.6m&JHm:\%c(OHZTVUibuoima+^fX8rqeM&V<+]J%(e=qO=A^-sn^GZ`U6F1ErZ.2e&F\;`oU<cF+5W1iXH`MlP:'ufj(0c5 -%*I=&CiB>1kDc7on^pt?Ser*1<@`AgkiruNf"qZ5mX&Frp<%0"'@74*+;kWiH@hLNU:WCs5A$A_iYG'-o)NWVsa#5J%WX6uc$QF_5 -%FDN28B_:'pf!NlYAdqfZdPGD&bJ3qlAn2_1M=e.R4GB-&S<=b2Q=&<&kf),Wo-OPuKJ/$^*m,$0eG%]0Z[uEn5%/h!G5oj+$7@[- -%-$=(W/3JnX%ZqVDY1OXrH8$/*d/_P#_=h3B\oG15[@*EPZ#6%_]?+7Id%/T1I+JVCi+P/].BFbSQQAe#DW/6X?^gAOcG3nqW&Ood -%`d'd9Uq]#FK)5E.j7&Rqol2flQEI'PB2`n@GBYAp$uk]e&2dt!/I/Ukge=Z:RjX^g1U81o%$L'Y6VZ?e":aO)2.(n>mV>X```FoG -%luU)L^K[V^ESG\81r,L]65dB?WYmm>:sl0X7dpA1Y;U?+F%"3R/(@P\\7J"g&_LsVg+S@e@ceQ-7nO0B!7;ra9dJkWg9,Xif)Rs% -%!@WU(@uU]>K/M<7(`N/r.@"#AG'0_ugL@T&$J85rZNV?-\hQii$c4t'0YEm$CQ"_)1S*+>8Z`$4bFS=W%rU_3b`/i!:g2;WBrYrJ -%LOV;,Xa>#b6MW/Fn$:[WG`\?bVtS$c[6ffFHK!bY[1?6j;6;ll$8V<tCE$a?8;j@^JV':=+LNP8#U%Dd!G/_O2<iTC#E*?MArPT3 -%nKP-7S#=VVYhL)D_(Y6t6"'eZn?pTlB\]Y258O,*7=Xd$,=(GZr>ba^G1i,3<L1gg0h*m!T[Li9Wps@\dB?Pk4s<CCe9(_qLQhKT -%\QOGkMK:<>efOMrPGZlr4/ha6-U0jTZ3/\TYaPpB/p'-#hCf78d;R'i@"4rVUGTD1J;.FNhIiWfZo<rh[N*pBV7(.$WQee8n'T88 -%7Ks@[`TX,:qMcq0o7";lqE!`,rD]aH*^fAj$n0fm>_7d#!+1"4g7KHs<?5j[D<aaW^I>*]gMM@sgXXTWd!&.WX(J>qoaO\@[*E\_ -%2STd.4l@o%l1>g<^f%5#+NMr.']=Zh=2S?TO$CtFs.u$PpXu5*&h<!D74,#,rV-&A2aZodpX$E),i;=s/%/kBG=`6i1&Uoo&3ff. -%p$t@@W,T1C0NekO!:OqS&T,1q-Qp0>'+HT+lb7?=je]-$gT;_m2]lFAJ=l7;J(E4L[:a8sbf/WEc8m?hbsA`X5Ac;g:piCZ5EKB; -%);m*>NO12Y<K9!&-*2101[sIdbcWOX4d+po3SB#0NGXAh.JLO8Mk'*6,F)Z`<#]*RX'!?.MsqU6MBEE_b<[N^hL/GU758`<J`\@h -%p+eGJACRb4*9AK8LtSeGQYA94(U?gjB1eSn$@ElSG/+5]TdCU[`5@jCoj1bFMK2d\L7=ZP$Wd'r>RcT`XD<%U\<*W(he/b)5K."\ -%qKuOLYZ+^'eDjY_bI0s>)Rhe?oK1(scba&8&.R'jFtlst#*`&&b%!"o_fN?m2(*3!kZug-%F7$l5[/goM*g7[KWl(.Lqcilc`TMV -%Y2(&Z$Jaq2UZ1)VQ!78CRk':L(W]%cO)H7!;?YKt5SaXfVL[CJ!8h?/!b3C:J2-m/U\j"a>]'Y8:QVK_M`:>>=Ji_tRbWZ1^s<Q5 -%lZOB5gJ^2=gL@E0N6n.Y1jb?f/ksU-NkaJAp=2_kZnDGA5sAsgoFYQ)Ec3*d0Ec!jHRIg4Fg@nT</VYjf`7?sCFNH`=g*kO4""qK -%/9MPKJ!iMj_4N5[W1NM.QT0^d]CuQZ'-!uW$&qr\DR:=g771iVRtnN?f+$C)50+fDVdVEnKXUU?L,g@n9M:g+#C)%S.B<WEoH*%_ -%DAp"3R9.<)/c&-o1WU0;1tV$Zgkc<"+)<7Uh2PDee,-BHZ,KqXDEcB]2m<+9L/OpX?q(EU4W47=bG_";=/\s1s4k)nO.YQ;pAr:1 -%0*Y&#QuOUY:aEQ@7](Sh]`4l73P<pmA:-eV9L@X(%gI*e6d'WRbm\KIbP8+5Wf7TJ)$f_^57Xff/8E#aP-a_oB"]?W)ETLp&9bYX -%<j2if8nO["<kPIK2D39;(rT;uhPFY3FFV%-Gt:n9Gl8]f0UWH?-"*@?%QZ,#;`>>KCq5')b?";'9seJ1eR["$Qa'"iSA(;J="$d] -%4X2a]W]<RZ2B)YX,9)nV]X9qp]R_!g(&UfG0>.Q#W@Dm>P5nT`X/_q+EbUIJ"70c1K\KLX\a/1No]r]8nj7'ZZ8O@NLr,p2hIUe- -%#l2aeU<k?^qNeU!O/hOQ5hR7n?*K[\mreX6q-^pP/sd2#kjJmE/#0+TR+VC7Mmd7l64NHA9>%LH'UaQAY">D?MdgG35)Xn9*0f94 -%l@.W/2kW6:;;\hOZ#6bZ-$<qOTfXiI-@1=8#h+tP&oA(Yr*7'*A[g"S2".T5K!!`i,cR,AG(tI\Z++<#JE_3*r;(?.&<IRkG-8XC -%Dt;)L+`A%#[MY#iL1[%:a[cDXY$:KgYL,Kq!6mX]8*I.eZ#u%`h>dE`[/1Mh%>WT1fFOApRjrs:bG^s'MDVSLfU6)Lkk"\2"$d1X -%e+#/12(&Ptmromu[&_$/GprpTad7;.>g12u,0X+rOI]J:`dJI\]^[g0IkU3gOOh^U':GB!!9F1uM+45!#:X@@P%$:+a`#c@gmO3A -%;FmBV3o.W5I;>HFeuc4-RAD$HN4`U#+V]2>\!dp5Tl=e5?]<K(!Z'D42t6lh8nAc4@\V<rmt'.mnRg'&nW.&VlHB%cci3j/^\PVc -%romef`W&"!h>d&X^]2L7s7?9f+9%>9qnjNTiV1*>nLsq$huD0o5+2H;YC?5X^\de]^]1/1q3UE6^Nf_ODuS4PIt%@ZqBc)\q1&D+ -%5JR3ZIs_.3s78#EVdJ^Bs8+JLpA_jUq0TaIhgG5\k0&VNo?L63hHfY/WA""b[&%,"?Wb'm[Z6<&q"s4t*m?@Yn,2&AobUOP?GF!S -%;#PlMTt&W%o.RlOhsh%gZN8b!ie(i-/RW`jnM)&goNEkboSaB@[8('(\fhS\h<[[X%++"[4+@U*=T>(+8JF+l%*uc70$rtI?L6<d -%A%-QI)r1NZ5(L?CJ+<",j^7rb&-)5crV48prQ!goh=(C80E9MEoOf3e^J<0@s5dVeT7?Y75Q1$-s70fPq3QU$j2XB6r1!`]LVL/g -%s885`nTEg*HMuG;_RniN5$J%ab0@+#B[U^D1Mf\pkAiIu]1ia\A=*h1!HU,,GrP038-W+fd@;XJ)r`LJrTcne?!:Qs!KA[Fd%Bb+ -%:H19[iM@8e7d&:^gE!'Ikf32arckE7]l*K5.?"gUL3_Z3.VK[L"B0#.)YN\2r(5eXVbaPnbjX/1+.(h=_EJeGg54QTqeboi[Ellq -%P<U"7p#6FAqJJC.F[puQK?CiI)UTTaLH.OoXBg0q]nG0`o.LW=:ZPX8e'n?kQs"Vsh)q\af"2=%D=1DAa+N-4@mK_SBc:TgRQS?j -%_<45p[K"7-AqfO/qm\*KjnKr\(Ze[.5AA?UOQM7[15tYr\?U.sg6hjE&qk.O=YVj)h=TO?I]HOt;&)nB)A,<Gfk%8@N7@"5fJJ`^ -%gA?4a+$_d9P-gKu]nf8DYo+"X1+#IrMkf!TQ91'0^#XQGs'"4E`-oBNQXt;D/,]9\JH2<-oNAi7<[M_"jcarWd+#4po-(k,)GY'< -%&G\*-QWoU\c'G;_O^!\\=/n)hMqg!:%E]N*hS9*]^iaU%X82<ki:Q"[R\dj_P9+?[L,HVAMZ`#!gG425WX8I5LAk`,di=6*o_m)M -%#JG[@-hh4G>/B>1d9\^58%kMlDuESW13DpNh@88"A+n6@fs%iC<SK4kbW=6*no'NJH:?PI/dLLXf=*hU9L_6hA*oUhKQ.sh!147H -%3Vb@LFp[9i!109XmE5@\bl,h%O(n*'X1?o$lkaRj,N?M(Uh@3JdflIJ&WK4@eZ,JFEh)S_l+?S!Lj:*Nf?GsuR.KW#<#Ao.(WI=O -%p[E9A'i$it%:J7:ADbUiko&,ZGHXsCR$FU1^sX7a(:T""ipP]!OJk!d^8dO1=R=>R/K2E=<i7tQ'5lnY=`eY"hZpBPgB-bi]"IsF -%<'r)eLuFhm-*%HHN$Se_.a4`3/fp7Uh,o#akoH>7hR-*oD0l8#qt=Nc@>&X>!9fsH1)<E7_g#b\UmB`.Qg3i>]!bgL)FatS\T,%" -%B,.60AZdGCn650^aZHa\rRfY7bcU*;104b*/^/:T[:AJ8^:&%#/sI^nPF)+,#&+Q^efDE_5Mg6[q[Q(H>cIqcDS('80]VY-?.TR2 -%=#L5pV`A'BWh7$ujdQ;!"[e<H*Mi.Z3raT@R^P+iciR]mSHGPWkJm%LHF4+-=PV/:C4OoULY('ohjBTO@.`@<HBfkF]TF%\/Bt3: -%g@+oNI(4eEPN?hfHEK,S>)(@]i/2*UVLFJqdX<"agH&p[7,4-[$QjHq?d$X-04VI2Q]?Shr`&0-]R;QNk_2S<^mEKS"79%R#7#2K -%3':.!I@<PujjQSU_i:5E`<\mt2gaG#R(]i9)dOWj7aHInd;/)jMrX>5L*tluV6S.-pXknR]Z/2PNWFCc3uQdH'B4\XWRYNq3nQPk -%^n9A-f$'/4ZXqsb$G?NXQ%dVV1]#j3".1QsVH`e`GBRD(-lD9sp6rS\+F>8q5;oQ(%;'^Z*e)=JoRG,$QW;E._QgX^913(>hBkRD -%m+AoGp1"D1m%Xo_cFA$O::8i^S;\DRg_M^/FjVdg]uA-ng$onH2kM^N0"tkGI!N6o39Ki$+7Ags<0&i.RC+C/\27EnMKZTG`pNE. -%1bntnj0Wj51GCiQL_S0#Wo3[W%^53n@c%s;Y:c37(>%GmH!6$E-2XpZD;7&F/Le,R4[Mk9hK-=&,Ru+23dP/Hb_@+UERrNbl")]j -%o$hBD*G8@E^6:Cf<WQ,.Q'-*(G.+%]/N&E&]7I-^14#F-4BKH"lN<Na&YbIdM>i"8q8UCjG$o')GRNOu=7U&C8_:oP!Cf@*75nTC -%)Q029NQ.;(iPt,8^]l$1l^56Ba1Z]]=&3hunGTm%]dg)3Tln>4e&d=c>%QJDIbOr2"E?t^f^KP??k,Z_b=lb.6t$BSfuS/N/8V=E -%,@9Nj0:@9u5J)&u9^X1b#u/79qgt9f%2LB:=33i-B5G"Gs2+SLptH_TNAnXZ2!TYYc/Hb6dc9Dt<XU<u06>#IC27H1b*uE96kUYI -%oC0asP<?K?Pbg5fU?1"LfD.C3BG`g%;7-4Hpd$5-eo\K:DKHK^"bCbhJSE3co3$kbgfWWH=gGfc>e3]%M=mZL2]\EWpeuHs'$&a\ -%>j=-H@_)[(7!?<1OY5J+7.C"-^0V+Q@.rH\"m0B''b@g;#?F:>Q%S4!RDj-SCELoeGmoG'B(S8.\Cldm)BWP[8r)*A8Z=EETPsh: -%Z[/-V.?fLQO=\c/>4oiS*`Cc1qA-]jV4@$\PjkpR-q`P3=,<LlDJ[\=b:(U[5;]B,Pujof4@Y`b!qp8Lo:4HP]f5WDDd>GViot'= -%70RQfo.6Blc,/\%)DK>*\W?lFOZNBCB[)'ISHD,]gl:)lI9r:`=k["1^U3'660k(R\N/MS'bbp_$tmR$Hc)4&#,k0nF",.@T[9R[ -%>HQ&F9gj_J[+"-WQcEk`7X_e!j4tcKlSo,;+QJ_;TAP4ii`90G4S1^WUS!G$R/9fiZ@ILm&cVZb&(J"Toa$hbQi4rWjs66m*ujZV -%0o."oiN$T52$XeV?jtuXDVc4V+hLUc4`RDSWhQ^?'s@Z!DD0(`@:HB1ogK(.,*b_!Xd9lt2?d>:B%\DR;]VB@QL<kPVSo+<>442& -%NrA('?(17`P`6OA27%eWCWe$%7W-(<pH#7"r7ZPebh5mSD7]L]9\2O[HgPX>_*5ol",*i^iQkFlj_t00fpYm6:sIXNR8)SkMGb2b -%MEneZgc2'PB%[:_5bHI^<Cb=tcnjmX??'e_L6>H)llMo'm@@@YldD2d;tr(12W:8LiQ%R&HN&SOn+g<fpbpW)05u_0<LG)aT,e+( -%D(u(ahGr6h5CG6_huA^\oWQ$fNa,,kleArP>PC26iT,C-3]o4HKMun9.kN*<;32%.Ph1+hUQ]7i<WpY3TUD.o^`T/1Cb@2#C#l73 -%`fcbQ1g.HYN^ok#NYsG(G'C<u-SUK12OgR^7XK28G>)(Z%9M?O;KBo*),QO<VX*M[Ll%<FKjs1AHjahFhRnfd%LG?TgOMnQ)3]qX -%Am@Ul^Wb8-)b.Ws?D[d;cHAb0DAYHY$'XUbT"):@PtcD1@t&YpfG3h%PB#:/#pW(PDA95_k.WeT*!s*j)=Q1k-USVn8DV`H;/JH" -%VU*$)juHFq[*b3pX&_0lUO]P*DD"ZG!7iFrgNU-t61Z2)*Yt*7JM1M;)9*(R-TCaBE=&&[cK-[(0+'+_93_4,nReCAE4E9?]<`9' -%OaZJ+eo'kYSAN1tR8eCbCfK<ic,Sh=h:7m__J5T7gcu%T%G/=gG2'[AAI6%LAQQHMp+j3!GPo.<]DPR!(c,(Jb)M\TTXne_Y=sQr -%NL=(d`c&X;7i8e>XYD3T;"aO#*Cfci1k=Vcr4rAk`W2?P2r8-!I4"unm,?"Nc1Wmc!-Ct^L1WFe_>4$._KgV+F"R,U?cLgsN&g+! -%!9.V;r7tJ4]*:FW&;SY7M(d/Z1l%sC5.'B&C>s.T;DFHs'MhOYlo<iRW5fQ2ak+e@YYF`6r1"';UL<CWjEjQ3\Y^8IGQHOC%=sr' -%_+<2u-MsRJO^X["+h.CMh'"DZ3P[GUB4XfUKSttp_/dNHh*^5MboL581G)60:m>?G6"Cb\b_VM%bNN8s#4N8%S*T'M=eS4cP_Q<q -%3bVJu)7_%L]0`Zi_811;/(lOkZ5,[n21<rYT.71d!<2e%gNG%b"rNPF!)3XreDag&FTN$1LhJ_/^\cKgiHoR&Gq%O+'3UK9pA=R8 -%ol<A\YFPraCkm,(Y.lT5\$7bkI#/%mY?]lcq)S@TicZ6tJ[Hn%]J?m$p(QAKZZ2,>pZZEcq_>l4B(VLD;&+7iW3[gpq1Zo<N>$)C -%O^8D?E!*Q,@kT+D$eE-ic3V=AT7J5iYamHF^(!,V2m[rm[H^-O*h52#p^S+s&<%)kFQ56!M$&So[Upr/3..(rC[>I3,Q6YGX,6W9 -%LQKM>"E"C>6B;1@bPMG<aif+]N*6%'0p.s^[,Q=PHR@TD[:!1?T-S0d^'JkO?QeQA:kT;?,^=_;$_BkIFUmi!^<bYpbGCt,$>1@/ -%(nL0&p_B#$Y6`.Kkl+M.**!T94VT,K;`Nel>@J25KXkq\E[kDPLWg$%h#5=HhhnW_AmA>si5nP!;"9_<A0(G3CG3>B\!iZsToZR> -%oF>5jSD6Hl2b/]ic](AO^m!5d92iF(,.^%Cm;ah]\6"@;@>rs0_WnXu<NMpgbZ2i;dI>GtmO;6^Z!QC+-1#RgiM5Oc6&u??+lN+j -%\o>e+!Zq:dTX=?sq+K9g9K4HfdY3b=qP>OP7:ohA)>"4G2PV)]%m$T3&Y$-MO4697.e,8@pA&j+Y9$qO[VJ'gLTo\,hP>&=<`0Y* -%NSJE8?()bfgu>dMGr#^CGkdZ,!FOq?[eL7lroXPV?LHil^RRL$O"ZQ$l/?E,q!O2i`,R_]fQeN]WPa2YYkK14alAD-hL1GHom'=t -%DuWT\`T^&V+$YOEl?K0hS:AScnp%/uSA<1oqVb[Dq>_meiPD^Bn3N*6b/(E0n:Hg\BkD7'R'*K1BmN)bn(!PtDFD@tf1";Y9_+UV -%`F$*S]o_.WZZS^SB!.?\9[DMjfouQiQDSot\FCV!l/QsdYk:4#'8H\OiUD+PW")>O_sqq5.Z]AM_ZB[S=MGsD%kbZF>rXk\#9W$> -%F2![?hgRT"[Z<)&YP>UE*Z!%8NL^jFC"8fAp\?mq#TO=?`^;`V&@rjuS7=hV(d&f@X^anF%,[)=hD$E@L6'A?o,*WSL9JWopD=Sd -%"6a7!I14<F&c>##In0r0U_&RNL1=]P0o9mDGT9X,a#(pQlI/W`NCg#OEg7T#)Jth`m@Cmps*I<c_q_J?\rJFUbEUS?hJ/B`U)R&/ -%rET?9/a)2h6n`&ek3>EfH<Uq*H@rdErgpDMa<MkQ5$A^+T^N?GHKJXgZBSM%N3/a]#'5&_f/iI(pNdQ:J>MpXUpjX1*%eC5SL%;m -%2PIj3%CaWs&qe.Ikr+k4R*'H\`[E`p47qM+gF>OLC08(<;NA$k@GH22!liKO,7K=/P2bR.o04#),C@9Xe(@W.)VnR\/il'M"!__? -%:Le!<T9lejpX@C#huiVmIG8U!$.+[,,'B>Sl?LRAiD_jtH3J`^S?i"s8&1(:6eUMi473<mQWqJt#\IE;L[B?Dh5\/Pfha&_]o42g -%"?ke8oZc0!._YE[P^IruGuAenP+%>na_M![1iC=n[6pgjcZ;":X\mK-*WlDn2[hi*_`07i-c8(><qTttk+$-e2(IW8#?,@LFBc<n -%?tqK@1H5gRR@_!U0@B'H'j9*-Ea(2<J=Pu^E5bs/1Ha5B/mst'n4qs.k9]l8M\Q%D-64,8GY&Kt=C]14Sd<@:Hua&D);kD"_eX3U -%B<fJ'0ij0SRsN`%bj7L7^W2KlC-,0N];pXBF_89.hYfcp"ToTI\aWd9)S4=c+i6d1_AkgQct,uQl]"JN"3cB^B$4EMP$+oTH[/s; -%?#+%u;&3WN2UKW\1/Afro)"k+NfImfE_HY8lI+;S!XsMZ-5V0(a]ktcK8n?e=qgt+$s-Bc2#5fWMrl\;i?U,7C-.8RHA$nO/9B]j -%r_Clu)PR["-@R!_Cr1^C69bPSYbpL5[O]EV$n+hrG[_i.FH>itVR[R'A/D`\0L[C:\P?FKZ&;dfJ@i437+"gY=I#6UQ#;Sf2!$5! -%]jd9"T(u$>@8[]-OA!2bm%,=t[80VRf5)o^DI\;/p:/?"3'\X)ef?,g%LT/Gp&p;CJO<%U;bTm_b[n9g7I$'rEs'RlXuU#';MWf\ -%r4c2>2>iJiOc5l9$=hZiFR^)?E2-Za!!/Mj7-@>l!egH,qapJT?9uKg'[45jWp3&dGS-soh=(KKd3g%O;2EIQRk"FWSVsqVik<7b -%n>$*=YW@2[0n'P2qQJcmM:0QE70@c]"i&rS]ZJo;<lBs.JP05b#EQ@:/"=s:NY?%_0i>p7&SES@VN#>XH3O"KL0u6?++G_)GM*]t -%Z+6YGW8F9h4rItL+!>2>62[X2cS^7Ai84nMP:]Qg37E.m0/rL\&L2%)^3^Q9Wb,ijE,K1^lOM<?=:*lj')SM")dS<U88sJ)K4Nn7 -%io\[bG][Q;fsSArn8E:#"Jgk*LkV#<'DY/D5B)G?ME=@*G]4Tfb;RZrd@8h4]eCZE3A'ejcEIsp"f!.sbWdhlR3fQ_q^iLlc'V`% -%j>[Ii3-40o>^Cs5h9,j24A-`S89JoP>2^N1-8St[i*)&G9.ubP3&fuEKlHD7fYU9Q@h18kB;<`/L'qfWAeNNQ+2s0J/1(.B(Qn0P -%JSFt8[Gd>cT0TiVSXIJ=\)j+V2\)K'->N\Wf9V"<ZSS)AH#<Ji2jBQ;i=dcf@T.BhF/3b>Kj2]PCt:,r\3bI%UO'Y_l&3##9V!I; -%a5Z9FFSh@U6k7`/Q,FlRLgk0JVN(>KlM;fXH)l-qMsh*:5UF"YK,C^5lcDGr\D^21!%UEU'<;.;[1$,84eI\Kl&ZV`>l,YO'EZ$o -%*aW1o&A:mNYYc'ok?DIQJ1gKqClXsb-+qH^?8,kd2Q'aa#tM094Im05$U!L0(`L#+AhA')qQW>n"4D^Bl&u/2G;nS<DQ=97hB>N$ -%,BGDbYLm'*^HKAe:j2/aj[m8%BaT:,VnM<th)H(#UH3&m!t:;mm/a^1Fp#S@*EWLThm(-i8WQKWLTc_9T?L.@,W<BjoL.',!8fKu -%g.&)N*k@/e!W\>aM[1]-i"b\0iS:6Cq&^C*+H^T+V6F?2AA`C7&1fNLp=`7dENDpc_V,tg'WG#4Z0V*[O:WHI`o\>=@K6#/gQ$*? -%A.Y^J;:\-J`tWJ?E"mA'...VH!OUhpW9,V]iPn;XQ3CO.WHQTmocZ**5/i]JVM,b#XFl=?F[?r/]e(:\l6#6A.YkOl.`82YgO^&! -%N+<<`Vk$5'Eu]C9ok1rr"5PQeN8=XW%ZPPUOZt'Z;,cDDT.p=oQ[)$iBIVX"":V)M/[@rOL\ATXo$B:4fKl73kVQ18SZg]0kiNW' -%@)0NE?7o;2RFciW%SFDd/rf.1lWAtaJ6?oHT\GfQ_q)2TN$;1Jb:Ls5_Z1/?Lp@kTD.]m2,&D.YP;n0O@0!oI10HqoZ0Vl0aAN6K -%&,e)!H'\O&bo=?*jBKJVnOOO`1f!\ZgKL.Tp]QT66L7Tl#79W(qQNu3!Jt%C6f[blgJVW=X&s#s.k*%R'#0QZ(iT'],j)g+hEeqX -%]@\i5m$7lF4UTpIOU/DUP:srMG%PL_?5e)dM66Pr*I1LQ3V[4A(/oW_YZkF@s-c<S(TN(/(KQmk5Y/':f>,)dH'`73OR_(p[mZW% -%=WHpa:9-FN:dMKB51G)K>1D@KV9%\iJEqj`@qb+%?dnpcZ'3Dr(ime7R.M*GX+X.INnH_%IM4LUH]$7PkD?p[\\NorNP$f<A;pK] -%3KaU+[^6o$f]tI)8o3t++uJbGC2>Wr)n(3Tn/Xt40,M,p0U=o4rq?ZI\e'lC=lX(=5s,Iu8qanPMbj8I;"F\)Wc/mj]*l=6q6`Nk -%+'6`;URb4GkS%[N)SaZ&(*2s`__,QS@_<C2ZGj;B]toSq]uqOWK%!JDPD3FHM^=Ds\IAX&YZO(44&5OPW.pAIe]n_I`%5MsBb.O, -%HKcE9;H;RmZZ8m@NP\4?akApmo+6JbGV0ONB\0BIU/.`!m]LL0`mTB9\j.tKPT-U!:9Gj10G[aJ![]]"(gr4fDe:9jbge#SEj)Ot -%+W#^s53Q-MM<ToA#N_arI)Bg$qWY/+;2VMg;&g!A4*82nIUWCiD7>b40OsO57]B!4(ehD]cJd;+r>97$p5P$4!FF6SPoYfe_[F8^ -%[KVl!j4*!l[LnP5+VmllnE$86#_on3S?=nljI!3q)d&&DbrCuOp%'+)Ui>4ofL`3G13U_#bW$G<*02m2rY?CYWMFu3DQI+s!PJOs -%Zs#T`pGQ3@</l9BiVmcGg_K!cYmj>dVn.N8H!>uZTp>:gjo?(J"'eDkF<c98"47#%BQoL^0DQ4hY(p!B*+#CWg^j__d^Eb=`MQc< -%Ido8<:6H7TYL*"9iW[/"-Gdj_(FN&I=D;baH_X:u5`IhnMHlB3(3j$sS=cu+a0/hE#[Y+;_=4$!co-IglNmd?(/s%$,jNA2C,X=& -%L@u<^4I$J8SZBn\k,PN%Pr_.)5`kl>8U1^6b"K=2-?MFTL?2%M]6/g.QAs"?aV;"Eb8$lAV0]'X]mtdJg)1sP,/D94c'F'K5H=*& -%YGg`i%6q'2'1n3r-IpY^D@cm@j>BZKJ_ZZ-\Qc(@am6#BgDDtEk64p@2poS2UlWkZ=!di.T+#)TdWQr7Bm`;$@M1if7;[*BI?@+j -%4ZA;Nn+?^oe/9^TldE(rEfK[/Vma7g.2js--fD(hq=t@&]7Lr^FHe!bZ>]ut4q7=:DHpZ);Rsf+28i;qZM&NHmPnf0$</90?q)hA -%gtTr?Wp:WsC`2;GS"9m!oeW!+-:e3T7AE\E'$[LmgK-cd#"qR4O`'e,SL%;CU$uk2"sAVV7g.p"$;NLt,^d#!LneZRgPUJ7eP=8s -%R;8.D;9r\3H0?a5g9baT-JlV*:Zafl^O#jo`Fnr*_UsTLGR::pqS6,P;P=H)Tgo2/8@W]d5mj7HU4WJ&904Xp?D`oXmckLWVg2W. -%rB7\g3"G7P]nX2E[P_3hi03g:!J59U]h?c,72<lN<t%k.@51=IXg5VneXIJDiBWV:,;Bbl$R\@:=,@+X$BHAj^N):E*PGE[9LMVJ -%i:=KfV3r5g0)U!PEiLc_^X1ZM67jqfkur8$(V1;..X"Gc!4p(Bkd\JUCOt44<f!=@'O/]KVG37d+^RjBH"Is,fpb\e]8kHlq"l,# -%O<1XbeaHgiC7W@f>8F[K1'@Ls:qP6l(>Go_&?VqIC:@BHeEuO:#6U7u^LM1hfI@q[<\YU+6u"i`n[Cr`*]I"Ac,qM;(g4p3&s">H -%9n-NQV+L&R-nLOEYa]!i^8tS4:!'><GE)Dp2hu@AlWqCfV8YocK%U4?C,KLe.sh8td6ECF+:-5LqLq)JIfC:D!K0YjH7:Q19e8MI -%SJ05hg/Kh>EsJ(p%lGU'b^QkuE12_IB:u$$L9eF&.gk16ODNC8Fn2]&^NX2=48`'en";X%E3H81:\_qY!c',?';*ES)ufgMQI47. -%JPol\Aeela(UGQoUTYSc+$-$R.;M0r</9o4ZA3'%os1=QCcIEb&nb699ugT(@HjYXZ!8@#[(>R_2D1[M(-*TYBh"EI%$h6VU8'gt -%q#hpa2JlRE:CFd5]9-jKL.WbLaX'k@;5k&1eJ*6MN!Y^sT>4p<Mq?CtF81QaZ7YG]e0\;Uk0gbB"t5o:QpaS[;#^+fjFJ6s9dgHD -%m_OR9eL^:fDM]C+C4\1(c7=DB2E54ub7^<+X^5\ig.>[I,-3lQL3W565oG%"e3mt!>/%V:[2-AWe6;cRSno?iiK>+0GbhIL@/(g\ -%NB'6FVAsRb%NmU)6&c-X:5E)%!1.b/S1_Xf`X]d>'$J-LM:CP\PTO7_Q]a_'!t8il@T402&PtbJ\.p/Ap/?kN49j*ZSrj#>KTVPl -%)umk)^/_Aa;h<gc!-RI2AoW'N+d"W:3f.+tBTVMbU&:587HN8O*1tG/A<ibP,1>.BWLO`2mJ[)K^e28<9+/o5;%p0O96h$GFIbJ1 -%%$V%:5asocJ^/Tp<UU(;+,:Fc0ku:GiNSK'\#E0U.H9jb18%'C*=4aA^pXIT<jHSVN2gr\^jVgp]U%8l#.c'F`;)c?#L60*9K+HT -%qKGuZ24@*U<YZJb8s;G(h9>X6-V4anQBmdmGMk#:=<=(O?m5[Yo*Sg1F9&U'q]+kECdCN'"p6]5]pbDX3$u0Yf!SA;Tl[g>W)P/6 -%Zl94J88Q-Oa3c=_KJZ\o^`;[bChiWL3r&RbY"K3q?-<<ND.Z7d6rqL.$pf$NgR"R9PI=^1bKNGe\_24l)Qs#g@;MCKFCSo7jO_W> -%GZ>_%_Dru02d3`ufm7\<b"SA`)F@qG]]&^t3L-'t6bS)b<'lAkE__-@f_L&DT,HH>JC,i54pAndZ0V8uim0AO5qPIEk%?$uOnEqZ -%#9G9FB/YH30j4`qe>o[b1Od\%4<\2ZIX?TX=WJFB)D_^P0Q-'/q'3]MH-L[+4/WLF%14GO3Sm/.E4VL5o0%BQ2hlZp!H]K0bc"-6 -%#>YFd4X$PZl92HL[Ms?C$*52>Lap,jX4:#\`n';aatR1ff;^CP%-&TXM[aQg#AQ[[B_HVto=d6iRpo)=SH.nm_dJfdG["$J1%W-6 -%/-p;+]T@Ag<gP.:W$;>H]pl1!h%g@gAo&l((p!hFH"Ni[m=3T<+`A!IG'X-hSA?GUa8rC@%tD3Z3.W(QfZB<[(25#q=<4$lJZ\Li -%R8O$Z+SC]qB,'^_2lsF$"ZWN4J9DnfTk,U>5_E[O_F3m\0SquhYPSe<q\8,=.Z2&01k8%.dXi&a;'I5)_G7cYTID#Mc+bQ10^oYI -%47o*1W!89i:O-Yt(KVaKQP'RpJ53TUPMhWNr/W)Q;&Ad0f=<b2TJVCf[`l^01_ku1"']Jc/K1goof&>&N'6_`B(U$P:Q*)k)[XKS -%a?<s^Wm#+JgNg-s3"tEdhHs,T]W\H;@t2hh?<@L./aZOG4$7mLiRc[Vk74m`EH@<+1h(ulIT#YV7:hnD$=85.FJM3#:^%hk^^/.L -%+bY=pM9p0T.!K$^Y-")m!.,$^Omi?lTEUIFW:NLfehj^CdY1I>[JFCp$d6tM/M]L*khV*sGf94n!.NBq=#^mHqRALfg\p[)E.rMO -%!e=WN-n%<BYDf0.Tt3PZX3PhaLe-[!g^r7C3/OskdAuXP"*EVS0RtKi`8c"dKt_kT4coKHZQOL8e&ChO`gpQ4'mU$Ph0'$6\6+If -%=_1gY)o,dEpbO_s*]:Gt+^&ZM+R4a9.T/%L;G!$":XWD<ecXRE#5a4fNSi-n#D2YR$_jda`1a8X![[;5pjWLJ?P6<IUlOWO:ntL% -%!f,'1dr;e<!OW>AK>;TC"d7_c=uWZV]sd?%aKUUCHtqur6oD<0e+e^HJLCr:)(6:'jeLI;7c8C$@k2)K.0>$AUc&!<989b2o1<_2 -%Pe]7\^ED`]N<3)=&#M^jUg-<(1a?u][Ond;E(.I_@;aJgWJJZ*itCQs'fd.T#HS;<("0@)F9`?Z1k<\f#LjX+bW!(GoPt(Tc`HTG -%Jo99kBsNC]g)8_D7/=&NBN;]uQg;sJDlSA>C$5s)`&U*82)_Pmg5`DV_fa-o-h%>EnS&?18qDE6mr)Z'BBZ'MeE9[2f&;%&-CohR -%-BiOQiaca@Ye]J,@VR/pb.SW)%h3Nk`sY`rA`&',#F2b4Z)fDRG2HaGAo+2JGm-*<?iu&8;H@./Iq"I2W&\I0S@ik`MdTf$f28?Y -%.5I!;HFX6u]W*)o6s0R@W]!u_(7G(I&'q6Xc'9NoL2M_GW&G$Ks/@<jp1sZ=<46l<bJADTG9=:b@+kTZ17)k!fCn8+N9cX.3Wh<T -%iiG]FRj/1[VJEdV!Big^Z6GIY?D#1(K3lumQqLaA96+%$jFjQN`g/0\l9D:Q7G4GuOJ0\p'[<lNW*cJXg;-^%$ja613!]dq1#5lj -%Ud"Ju?eNt[.>W6M)2\H,lrt:jCKC4@<$aLEN%AhuSYgd5lc7CcLcg-A7em$:`-+ZQ;Q\mXL_un';P!Ot5[sJrEEY@9p^I>mWo_/u -%!ml>"WB,I%Aid<BYH<?$r`hVILi\1=+d=Z4hY=oR0e6CZoj\c+LEu5W.tgOfQLnLW8no?.Rai73J/OP4XO6NP'bN"pAXb'D&o1(5 -%ER)e7f57S:2Qe03E.=HjHR*Ls&<neE7l/g6.O5hGCggkikf.Bo3LILL)ol;j[>)[N!(YFN1@I;%.HkaR7;DD@9JQ\6,KhKB=]c,( -%NE8fac[VoDKmGO\JET]e#+,Zt$GXO)@(8*Rc@i0'CBdM/:^NA;GDIS#U+:_3`^!1b/gK#rhWUDaOAMQ,kEN2Xe(-c9h.EJ/%91I5 -%']:b(pk"H/dR*#ccj?<kM+/$?]7?ISl0T05kKT$T+o5Y;ZAU<"/MVSsi\Y?\$hS-_)H2u;D_@A9gEs9H;R1S)2a0POa,EEqNHs\2 -%mJ[86p5g9U;%ru-W,>r#BD+<V9Uc.Zo3iTiNCu[<NV+QI1o8*19&o*;k&dGSd!\FH9$9J*/":!VHaO5q)bZZ!/@Z7:KM<^o#_p4u -%I,$h61-mI<L'k+mT[i;B=MC!4:H,8Z?I=t$d-.Zn3+E;<KO3`@71%J[r2.4u"66Xb=:q7OjRNm9%I8ZITLE^kc('kN`sk"6L0gtu -%R_ChMOS'@SBcnCb'pFi!Ff>%1*RX;KY_0<X)0rrTXLast)(@A3+?cJ#oX"pL7/RmcE?bYb]Qu&fTg_hE_@_oH_03d]iWGj%;5gag -%E?U;4Gbss_egUg&k@K1824u<e9u8']h<uO*1dUWg,Y4g2('U)-!l2/+&lmC9V!MZ5_/mHMmmFu&;noW3mjuc4.R7r#T5<K]a'X&T -%W7XHLZtR%\i=\*/H)Fh2\=5&9He[^n$K@3l=g4%@r8TU,$SO,tEWpbOKo9CL'!VRF[A*73&.QV#7[$cV.@m&A>4a+CaKTGePKm_c -%'H=>SN8Y`qm,('8noTjI5k!5C/qAX,_8,aS$8CtHK2,ui?sdb_5`g17",JPqDoU?'C#qKC'#2EK&>-U0#NmT@G]mV;ip9r@ql*H\ -%;aXfO`P3PWH,KtIE>ZElo%OSgQ#.3pcs4\D1mG#iO%"&Q=LSVZ4YNk2$SuCJOYuo<nt3$_bD:t<\2eK8\eK,gG'5jh;irUaA<hH, -%Sep7=6kQmQ1%a'#)LEfmpHJdn[EktUh9#o1`F_.J!+Un=m&qUk$["2e@&73iA!:@*pfOkKTNORICk7:,5)b,10PZS@n,.,Zn[7KJ -%m0kU>-D@o^)l]+Z7l6b+p+;+U`SNu+1Etf0,eL[e:f9;k!U=hX<%uq`"e'@aVAWtmO2rg<6i$UGaIO(7R5J`g(2@G&WXB+0lc..G -%jlF_>Y<2ihD9U3HA+_=gKf_U;D&FgHITP%mM-R=CJ$(&D;Ig@KF8F_n[RBsBbVW,V#QIb6FmHe!FQ[c$S4<WNnsP7[d[SWV/knMq -%C!LVVHmEjiZ+Je00*Qd5"Gb$VA.t9e6p+E4%^`h]5OX`WGGP0X$%aN[iK8A0VC4XT)3<:f,>%HW:jF<n*bh&RPg0C.o10OCU6H_` -%VamKH,H:?$J3?eA+)/,Q$LWJHq`sL2;Lf9Wi<NQVOb.s+.mFT7:F,-K?2BC]IAC9n$/9*5pQ5`1VMq/#j[UNk"(hGLDEecm:R(Z2 -%]DbLBJ"Z-Ml2=+$J:hCJUU\*:Lu9[aE0N:@8g,0C'-7;mc=.20fnQ9?_bgp'X;c.[QoKt#*+UQ@,VG*t(e<PD8!/ci4cZ:Va-4Tb -%;%VeS3oiS=j<.$7'JDK4S/`hP%ald:+tH/LQBQ@4K?26J*6_8<k"0%E-qA=mY'CSh3==acV/m\gFrhoSNoE2lTq@Mqcq-=_;.f#7 -%8TYY"H5&D$Bd+S9P9,CCNhT59i_9q=:M37tUNk:@d*tpWl6p$4+E_gk`B"?>4c!sGFLdD5?4ULP7q&WSK\1q4fRl$6;8hfenE_Q` -%G*GjNOBaliZQ4bT*_"rr!c]S:\[1SV=eP12AbRU"GEg01M!7&.mlcL!*T[,>V#QH1JO`#B#P#Wo:>o'sn3R!A.$St><.'d7I$/5, -%ME2d^+<SNGO0Xp=$-K#Jj\a\$5m6d-R!FqII$!<7OR,)cH_,pVO.r=\H-ljGdKeIRUVQ+c$hYp;H5'IECU"pl>E8ih%q;b5iRj@2 -%lrf;@-sV+b\:'IV4\FlY7<TaUH&E4j(<uGLoQC_%Qc^B-f!%c'io.E-8b7NA@s>_qSHY2)1k*?j5+un%0C$%%-@TEBI*d7OH5npg -%&,_Q6U<.tIo"\OVi45?q0dlD5O_&UpiuGTk8"S%h&bNj[3YRJ_N2-^PdZNd9j?u0#ViG#_,:i)2_0$rK*Ece]%'gQ"m)VeG@'Deu -%h2].X'8Q"s[lZD;*a!e;_V^InprFXA0Fj_bM'jA)RIYU`7NQi>OdU@;-,E.V.eL5$/rV/)k`Ib!1UZk+JU1k-*dOlK*7uKCp;!bX -%@,[[_]16K%!t4mT1&T$CIc)A6E0a;\js(91aHo(GWukHr%ufm#\,/Pq5;L5SeFEh[qN8%3jL.;Bi/aE(1V*M'_gg\4+5-T?-%N=: -%^enIs6&XYe\)<oun=YMT<),Df/3N,N*46`G.M!&I&.e%<#G$\V9o:=sMPJV==V]tqTQ/K839kN(2*=WK*tQL:B,-Q(hT1=-a[sM5 -%W-@g*NH3NG3=2iNBX8[X>`NPP&'?RR'q(iRb`ag,6,Vi`G4VYkF&^OIkj:KJo,M:g%XL@#g->l`TqgVoK0%CWalo[KoUq7U71VP` -%nt9TR4Gi@Q#%h@*pl8@Zq>e'[)td4`W!IH@Y`fc6D"1rI,d.70\SOPb6ePb/]+1>04DI8IkXce[ViE6,#<f*mh5d;?eq9RF;0hK+ -%de09sFk$D:<s^tRM4KpPc6?g1H=f\/Z_L.HPG6c.HgRWXG1:UqWkU\F`BC0B*VJS:[-E[_G"2_K#IV3sZJJH2mm4/G,jfg*!.<-$ -%I*`WkWXta9$]jS-B-"psA7?%HI]B7*FQ1!*T[E=oLa2o1W%GQn_+W4>f4\;?)h-AEhW.P'nm03)61=A9)tU/*Gu39YWcK5(4<HCE -%O8>Ls+jig)d<BlaUQ4T6k35GYoj()\W470)ApmKq4Y"/eeR9PAA=k\kht:]E9"#81[grhV#;+a:h;&<qhP6P.c_A0ED;_1Hn6'c+ -%W(q`)0n*(a5)LR,<Kp::b=?^;UQ4r@k4?d6d4*<6BDHJcMBd:@j7[VL,e8efAFRW!0Sid=c<"M5#nQM4:q<]5K"m?H[<i*c"^5T> -%@;+iue#/k?(B5baSf,u<*O327at"dDe''cceOOZ-bkY.?6-/N/'fEQ6?ac\*3;+u%>;]S_h:.82=(G4$7]%KU./B:B\_Y!JWRtF- -%.U\l@;@_Y#l>NoRUsXgrr;e8-24,5M:;^F4::=,5]ErU`MPk7jaN&WS[:fqE[\-7L^l3r"TIDTMS$k-B@&e2N)T$*eG>od#8t;st -%W"s5:XAud[#f0fjb0F4H<&`sUHgRTQ\-!bG%95P0RFqqp!]NlO]68@43Wua.)3kojTG156A25iC8Sdoq:h91Jj\+jZ0piL5?H1hl -%WrSkHLE$]Tig7uoR+:)s3878SSViFS;F]UL9N<CO;_nGY*OlE#mZ@(.hG5tsL^%V?Z[GIQ?H*JHJR)N$68#_F+Z,DrFc]p'Dap&L -%8*pp(iHqhP%VCM)N<FRB74K`9H$1d%[k;1/P;N'_<fZAETJ,9_AX-(sqjP'oCTCfHRB0'*Wej=/I3#SZ?@b7W!C(Euj`MeYrQVC$ -%Lna\_11:r&_M!nFr%MIiiZIU3iRFq;hrG2h"Q=Ks<_4*K`W2qXRub\qCHnX^[CNVMY&lH-=ml+fd:l&_4+^dFf8WR+j5d\(S3klq -%DrsC1neD-dJ6K)HB"R$i=LPOr,eBbJkWs0=Kaa^i_u(g*QMUo^11f?a"Msb_cfkN;r`h@CjP%R"k7'-I\cSF"7_"[aUjQLbW`"=\ -%T1B0V@mmPLQVp)#Eat3i8:!45]<7->CSgX-'[g+',?I#Bhs8HV>_QIoRZ^$Bh']2`WM@Ir7]#O:V3.^KiZ1aI)Tq`MnO899:K`Cu -%QKRqTHHth6Q[Dqef.]!=Qn(qmS0RiVD2t"8q"SP_)IIus]V"=9VheuoS!l]j_CLFo;!7.''"DC:`.;IhoRe-HQSI)X6+Io8ABPGm -%.<#$fq?kSNP9-4E7,"nUEWHpQI8t>k]DF,CdattHM-:XLoZNWQigedp`C7/t('mD4E\W91TYpC:M;oaJ]No,'Hkuc&B')Zo"D45d -%8H9G\2DuA^.IDDLRkE*bcTPRCpW%I(Si]FDTe^tp4FO8)juSa)pB.$lgJWA`EnT`[n$/:-^:9"RH8/_bpM9ol?mNh%Z2]_3%E)>u -%(!tL3`CU[_n%C'bpNl58`FbFIBaP4APm&4H8b`s#-R`-ZmOA4F<H*[fR)7>%1a5EOaq-6'8l=nI&-L>\UtWE,>::*II*%L*]7S,P -%#ROA5ajI(I,cPisQ)tqsnJ(g$q3p9m-%W3g9Xof*e0Gn5#MB*XU"n:qOBmAcM2EAg$Y@pj)mEBB#c*0cVFV])9t:9\.l?,hX_$=Z -%[19&<BV5rHEQk]RPnhR-D0[_-goM.VMp#-K;-,8Cq0Kq#\k4Oec$%/cBuJ/n]#9X'dVRH>3V6Yn>NuULY_usD8_J/HNnYj;=b9!+ -%/]DC8.Lt1?'MH!tRb'fF)&TOBlWUD`X_%k?CR7Y#F/mSp5!g==I3jm+JbNYUr>G7^"#Ob)p&Jf3b'P%CT]>qC]j,fW)*@oVba,VY -%LsPYJE(\@I9fM^'<I)9Uhl<?@KVnL7qLaKN00slJ^[ui^c^=;dMi<j]kHa>N?;W(^-3l/776\pmcUi9YT76h)NaEighm&G[#\*"b -%(Vf"C]0t>""&bAcE*.hHTL,q_XeX`'TXgJo<p>bT6=p=9(^$%Lnd\@Z9i<\6P'MaP!q)?k1c':T<:Y5(lW2'K4mH9(&2q(uV7Qm< -%5l-pHTHW/A#&&R!ksU7&:\?'U!&gnP)>nd*^J[%sO;d3tY7I'J<RnI)\o_Ks=iaAe(`0^n*MML(+2Enu/-ZXX5:bDg^fY_O5;oKu -%]&K\G^l3Tq7Fr]9`0/AJN'h^"0cMD_/`RNhG]cDXE'ma_A!_on;nZdR;S^910)bd.WmM*VLN0u=Pj(NH1/cbZitI*_rk=3*'U(DM -%Vduc_6LE&1nA>G683K8>dPl!2JYDXh]e6$EN/g()Ll9EHcdmihFiZO'pO,VP&*LVD;c'Eq]%';R$Z[^;G#ZpI7B,%'I`T@YQ/ZTq -%d%rQ!;o@ER@P!'3(ccc0b_9UpMOA!&Vp'SL,%MJATnYqdMR6ILnf8M9O8"q-1;Ja:EPps,.l.R'D0SqI-k-PTk@'J7%O:!@'3>OF -%QR>H^8[R2IbXgs]6EU;Xj^]/E%N7STi[?ArDQs7,@GoXnEgopEZ:%k?:;P-`huP&7`heO\IS)8,[&Crfp8n/2M%Ln@.P!`r\Ps(! -%P5K2,D8\sP].,I5&hKM63JSB2k[m<oq-IqGbl@"t?_<Kn$_1eCX"8f&60[:`iF,54+:eY,$<B,moT7ed./TQqS*JYVX-?1%fO`3' -%K'(gq'Rn5?c/f;29*u>aPrk/QGBapP#V9^$b.\T"n<=q%:K"fg,aGif:m@Z/QX=iO"mf\X&uooMl3Ohg-);%<<^YTh';Ugf.qF(_ -%,'QIB!f&cu:%XP6FXIGd'.nZ-e;=\m9I,O+V)rN8ZX_eqJ@.fLflT)!=3_/0_>QN!H7hjAdgm3YH7Y=_)pKU9!3`mXrg7?Z^H+V@ -%XiX$"L^4EN&I%)r?<SUL@5]kXCg4NI00"Vi2noYq9tr9[NE-&mD,ts2^_4q'ZXTO,IX`/Pjqa&<7FgR%ms`_>`;o@)V^FXWZZbV* -%BD%q<qOlVi<-^Xm_*2PQ53U33'kr`o[7@(JUF,D]IdVj>mST8D6,E:ilh@=ar1G-Ze/CNN&jIc]5H#SEFcfH<b"'/,ZSM-)MXuJ[ -%o2-HQ91\Ae;lnn:O_p_U,cs.O`sq7:9D+*R9Q._tl%dJbIF\H#FVHWp6u#&!,'RPt;G<K$*mfl8_b=9eN%4^GaoX;be<nUtR6,KO -%0=_SXUH,?*q[q!%-M[[N,(K3NN4sdOJ/#kd$Xl5XoXKi3FBt(`Gp1:E3XA.TYLg3+EH]<cG.'I$)%cH8I0pMV4I<e:g&NBpKLmW_ -%g7YGPUCujqAQL,--\9Yh!cbisb`#,16+gBeC<BttKFdfV'9&W_lt3'c)l+'W]P(j'eW"O$.`I9&!(@5HW"C8XJ-#K:E@3$`g^%)? -%6Z%Q7<"jpm?KS!Q\kCcZ/SIWA#L:"M1@V[T79[Q"cM/^N2S66bkJ^,@IfY>6[$j1f7KgP_nkTQg1,b]#YpIt]R^-*[P&8\b_]3g- -%4fnbiRqYq]R0A)aIiWTAa/mu^#4@ST46H2WF+D;YiBq5IR"`32]Hb$;Tj0mN2Z`feK[[:jXBK'p3.<>S6n"G?kh2upU:Q+E.HFaf -%-f4"p^f#uDR8LB$9Bs&OX[psLCTCD1M^:G/!WL6n`L>j&BBe\p>_3Andk]f?gC(Ds(n#.qUBHAp16BOmjY<t7Qie'E18t?AP`(Zh -%6tIG!r@<-m<05g0r#-Rnnj2jMCssZmUj7:*c;?n]`9I=nJlg*0.-7YG,7!M]@/04:D#h_ZRM9Ph*CO*D]9]ff1Qr'*/s2iBh*RuW -%O)TEj&O5+@7=DDKUXWpDZ2#o7:$\]_%k7[>H]]DL?5Q>o#J->7VCQDi<QPJ%0(=;F(ifgeI>*eooGgbN#)6ZJ5#YW(`fPL'1c_nY -%eG4f\b(DTD6p"QYO!do?$02to*)<#t1dPP),I(9u/]uq\Mqi.;0%='G<UIP5g^C05TFef>c+-G_Prjk)F9B(&`PIg,$8#U7]N]Q4 -%O-#[uYeGF<6lhR9&_0mcJ&,nHk14F#KRS:">`o9G`ueP(<&Cr`F@fp[&3=/ecgqON43)e@h<56b]_X>tIpM7J>SNZU?\)"piRcla -%QA[Odl_/KgpXG@;l+7.>cR/atIPY$(p'rdMlRau1F3A$-m0^,2oEjnAb;A4[ocbj2FRqdE@$$TI?']il$^;*.bW%RId)g&n$^u!; -%[7f,70Pa/;"T3.g)KX;3cWo,$"sf(P1q\3_KT[ie/Nq1t6nhXnYr24:\QeTnT"EeZ<@IDPCSpgP=Yh984>nZI(RPNB1c)2)GtAk$ -%N5Qa*lm\0G.n-%/P@p&X%QrcQLpWn&C!rDT2>uiU]J.&<UG5$`cUBaqOPKs0er<#uWB$$H`sbK?<!gbu0d's3@1`oFZ(5cO@4`"C -%&/`2!G*\Our?e'f1[]_;KK6V`P6G^Ml^"cd&IUi1XUGqQAEpk:)pGm8jTAf&Zj;o4P`RoGXK!4eUZ`0::cg=/S^6)]\+ER];)5`s -%S22(qoT5po%UVWRoNeprW6"ltYWo:4bVu1PQZ>W/L,3;YrRE[tm3D\W6-"P1!KpE*C^ub-1o(YnW+lp!T28AuJ5q`P?oY?nRTn32 -%Q`rJDelaQ11&TOcEjn-73<_H`30k-5@/ts?<FmL9JjEMlQJ`^SJ8SO:?4M%T"0;V3^g7gF\Wg@>9,NQRCC+7F@<95jpE.Sqk0Tak -%T*jRP1o9\W6Yr32ZPb%r<KrpD&1>&HPD*77d*.AKZ?^aUW<OI8rr!fm@.I/FN\BApo+EacQE?E77H-2bP,"7/0>27gef9Q*2<pZl -%8,2Va5<8uZ:;kQ=34^FIDTpMi3B9T"2sSND3kAo6DVU`!GB=6(8,-.XhG4=OM>/"L+r,R4f*LF"'E+!ALC]=*j3-Ha4"eLE(@=%5 -%g'MaQqfAa^Z#^3+,D+cXT=rU2pFNHO+S`&ScinMi>+^gbH<BiYcM@@8q=3S:1Hp9WDk"X'D%8\(Eki+,&E(Jk36LHQ.s5i^9kJBd -%UE:@d7*s?3O7;oMLZ`JiGQP(s6JW0@fgVQOZnn.9dbE"$QQ3b?ZG&.m/m;;5YXSrH-)mBJ21:"@@fVh!3olQU+/iYqV^=(I3P]5l -%0Zk]CE8iQ:\bXUNJ_EgqiPJR?8a<Z#!(3pOgP^(T@Fik@/Zp[_5pc+!5)"KfI@s0_%C$3ZOTL>-Q`oD=Ua7^G^oAV?>FuH2?Q[&h -%-d]^T^-V\X(>5f0:!Kb#`ak00IYW1ITmi4n8DIV56k.he''_KOWUBWlS0/G_!!PV5@U32`"#7RBo"41iRO1B2A<i!658slZ-8^C= -%Lu*6\nAdT]dSCF.#<9U%q!\9H39)IEE>Jk9`d`!&]gs[2oNkM+W_.)QK8?N?))WtCiQq+]6)*/,pJ6F1M'3L.9=5jOQ)TV-@"QpW -%mW'<#8M7i5jJ7tV13;GMYkjVYs03niX<.;e2#5n*oC:qiWB.UtLX#JC2W!I0rHUL)_#X]=93]0;.A^a]o=/ta&>8J))TR6S,8>o@ -%eKbub)(?9X<7sKZE#oPCo5X^(i-q0WGGk@kjoqDDD5#?kWA2J7e4g9j[]L%2/X'lP!(-^o416:iG"+1>Z/'uAKSg*B#3Z-]GkNCB -%!t?`BG2J:@I4MV*n7g)E%^%.^!LR_BLk0?NU\ba,4N&A_B]UhOH(Sg2:2'>`a,P`K](riMCbfM\YuO/SpiL?Ng(ANk$r7,kc5:(X -%_e\mD1$=LQqi:$mTFQ>JV?\Vlo*PA;,L]^?JC3ganAgd2hTr<b0>DPI*DaR#ADfP,n;'#NJgLhE>X/0MV.==SYaH(h&D1^ojBgi3 -%V$_4Q>_<Dd7<:2YJG3llLB0;%]#cb7CF/jF@*HO9s*f"'222%&q:It/ct`EN/bMI=lU/#ELW7sW9sd^P[a0B4%kYGTc+]hHJfe0P -%+.J6S2C:XF0gE*.IqXgjCnlGq\GjjFrRf3ieFNR34hMN:d##tl/pQ9^BbUm@8c$]@Xitfa#qrbc4ElO++7>Eq[tQG2#k7$"M^?+Q -%"YV[,Y&&cKXM;M&O^AHLZYBcB3auAED)J!5F\,tgG_3A[PX_@Yg0u]\b=$92GQltU\Vt=j!LIn&Hu3k5\U`D`3[@>FbY=^gaH</! -%DBII_j'@tfp:iPg%fi._d)5$a_XW"XClEH!c2N]Prnb]of^\pi*WCJrG]V=uBP,RL2i!mJ,MS/n?<O1lT*$f<X:mnWQ_GXmD`[M( -%%"POrL5n@t.8PcC,<F:[NHuI@1]TI2)*1U2aR4-NPN&a[;#\a!)?TN3\<_T>@DWdh/:1?JMqK+Q"2#grR4EKY)$oi:%)ardqM;^H -%i3ON1gkVQf+oHWoeW*2[Xu6^&&IV3)^9f'CW-i:\+$ch3@J0<F`(H*-VFLsBUKhP'4qG^lasMGC@hE_*mL48MTq_/'lPe'k<JLpI -%U&Au1\ktD(.n(QA[S)X@g0N\IW6ol`+gKDr'DObJVjVG-8>qI?6*l3d!1>1&Zq&T.WP-C%%t\4OSdIDjFVQ'!g#C*sY?`RA3J:L] -%".4Lb#,@_tCHnNI3\%*;\b4Fi83*IX?[)rUj0AE7DJ%An&\G(]"3+M9<I:@L;p<O'!0SPg:a9Qo$Af2#9B?(Q/oETR/iu;.d=Z3; -%buT[d[M5.f_fn^aMaT:@BW>Sp>nZWGn":oh\'._oKJ=%jp9M3o]g'Bu3EIX!2/m_&BU4!H"6&=p'p<6<6Q-3Q?;&R@\Ph30PO?`6 -%%ln?YB]a7i1"9^BZ+$96J9c4s7ITe/.!4LWA%t7FiAlZ<HKZ)j%dns]VEc'#+(&;3>COsf:U@5WYUu-mYsmVAoV!rI-PtD_/J@Vj -%bp\)7s'tM'Qg6]8F3uA^45c1#S/d1LHhWKar35EFQ!O$Y,0/H;?+X&I#['\(5QOI"b1#f#QZ(*)[<`IP-&IiHWcO?*$r6H[H]Q?/ -%^7i3'dK!ECi"LYTLh\sh+02!mRVY&b6"J0r-Y']WKN.8:R)c$Q>]'f]P7T3t;AZX9;9Lc"R^&>K6o.1VE-YEH/V1KIXor+4&\'EA -%WhC%gD/uHU-8_V'Xbb4-7DMKrYtIEslQoeKA[*0'\a"a.[@/Q'-e"'U]a[r1<";+J<3!tPp/GG.bjl'JG+C/d\r+ILb,"Z5k*NCn -%<9RnGMU9k'2Wm[Oq[3@j;Ml5h9qbU]m4HHpOVjn8C4#P[7:F885``rg@BCkp]f4RNm=$@&Y71LCc@XC`fW8IKSh"d/$>Q\Z8rca) -%oP,,qF0ZUOlDgkmSg8ga\aH,E-)BcIICE3*HVZa[b3>N6ll^,`@gdo4V:\A;K-ar<e:nk_imC>iD!&C'Cp#J4Wp"3.:olD\1SiIG -%.SC>+?K,MNe)%8,\HE*OE6H$T_UU4aGZ?`<:sDrF<`0$e[e8<W./K\i<rKIWJg8P<h7>2*CI?dUSZSl\X#uSj:/k;u2L0Qoa,X_2 -%A^2hAO0WjaZ[`oe!;KQYqc+"Rj.n[aN(GKS&1Fi`)oT6gRK7l=\dE@`;2gi%rDJh&WEH&?.Gh*+Ca$#uW(_gK^ls[0@'>.bd:bQ$ -%$3VkJ:e#3VeM+J6cn`'\FfoBoW.Ueh]WkML=t36+-&l?&k$3ZA*_F6/'YBctQ"_kbYeQ;jYiT03l'4lID7(fBbBH682bpMV*:"[. -%Q$YO2`t"6=X/Oc&;+IK!'THX<<^+I#72`QS_>h:ejn$"f!TLZLN)3&cf"20'(Vkf?#u7\`QP-QATH6r$OI_jYcte'ukZksmcBW4! -%/":^jCZ#O)0>'+4G&Is^mbg7;pQ^Wd2b#FjU5nu*]8@R?9)LplZ;O@ZAX$U_AI9K^=HI?p*b9q^(QF)?5=-D.hr(mp@<Ui![7'co -%`BBBtC7s6^.YN0:gip;XLJHik6b*L*ZT.TBLcAC:-k'aFW&d(`rNCn]L&m"ai5=1lS])g:+Bc:-GY#n4Ui%*u4:Na5L?)2^6rQHN -%WYPB1+k>,!'l/LeCIkk@6H_5/n6.4:g*[(D;2D@$NK'pZ"r(Z"A7mF2BL<-7'tUdR2;=52D3aU-9Fa"WO^"NL)q*1EM<r6XG=-tp -%!L;LKmG81=hiQ'#L%oRW&ic[#*)[:WBaTWKL+D>?.n#4]9#VD>ieXLP8EdQUr\u6^*)]B=fI'0WPs\0e(&#fo;<Es:F+np]8CKRA -%oNWR>N(2%Bk/,!WFG4<=kt:7DF+%ZHV(1VI/dbHQg70`:\HsOrNeB:+MDc]Dl^\9BJ6T_I@]oZAXK5[Z(sLct.*/38R=(ih[4Et2 -%/@Qg<!/HbTCeVSE=\^4H>O_iSNQX#&<&mcI#cV;D@d;mfGLi;3BMVMu>(foH^mQfYJ.?*E\=tcpL*YB;[L*Ygo4jSP85"tPg<+F^ -%pU7a?9hE=bP&<V3e[RdlG-#5'P#/Kf8a+#roc,-H@]BhCgS@mrC5WW37X9TMJK>8NMCr,`kn[+(SkN:B6KG;bP%C6drZ9@q#gP1\ -%mT#O4V?p+VE67l$L#4Q_*otOOP,kqjAWujlE/.tO:.:(7893Wt:9[InJ"s8L1XJb##rI6%HVUNX]O'"2FtCO]@'O7s!"Hc[L3`u5 -%pSuh:Mb8g;>X:0J0kJ-]6ke675QbsZ7(^M'k>h1?NIs-%'WU%2)\Ahn,#[*>[l<f+Yu=?B77C*"0[8.R4?4N8cTp%G+=u$j8po2: -%4;b0fi!>X!#-'ihlngFl,DBo0%e>:g5I7BJ'%"i9&gotG<(kRcTu)<E*;`IR>GRnp1$q3q;=KR?j%&oJ^6p<J'?t&30j$(2P(uWm -%Q*EFg!/g3VKWNa63b^1c6PflqWBq+3LJj[#Fs_eGDa&\/>>5clC1^`0?*\sJMc(VkROuJDV7`ldON\^`%"hlM.CJ$T[M(#Y1b)(t -%H!UTIDiBklFA2A+FU(U"#_Bte>]`Nn679\u9u>EV&icP?81;Ni(u1_Y/Q$5i9Qi3OO@51L:A+g_.FC^4"K<nR#E&`mRF=C\n("%& -%(6i9Na[Il'Q+]J)fm4qb,SLZXk7'k%#TTMYVG\5F5F5lIPp&F:'r,;4bn*jMapDcq;?nk^d9>HNE`)qC0``1$H%ishXrIq8RgfR9 -%^rmmdhLc)^cIK9OZ)q-a$ar[^C_:@2.-BX?iB+[(B&6SN06c]>YfJirj/\)>"2Q/i.KYZ@D@84&j+h$II]4K:&qPhdRqfb#%r`sV -%gu$IMjA=e'/*Q_LT8H;s@.`bck*L?=^slFB_2>?Gcj-:A&Z^tV/g)rP_'2h<LYN5?n"*P8U-^gQ85l(@[Pc;V*H@f6I&g2:XWS&N -%R"M*4VA%(Q[M@]4=a(h-MJ"/$V(JXbapC[>J_XXR9UOAOEZhiE<sp#D<>1biL?-JF`24"9VCNCZi(\P-GiG_jSWCl!h/WmhL-:An -%,k#'Hpd;Bp[MD/R_4*bkJS8#lFY;Xiki&7nRhD8E1l29/VcC-?77A.DF"<.*MNTqq-O6[7Gg^qg(_F3<]T>,I#c08qF0%-<%9^>u -%Hs\DZ@+EW^#b01LNg$1oQmh*=*7$iTO8TSd!\9'.p"qI`*FN&S2hs(!d3($`PX44439,8knP]q*?6(5s,h0%M`t5'-ELohn<Mo9r -%g+97Jo>Tb_>EHb*UL/aHR3AG>%tF1G\(q$e#07G&MRThHglLf7::_MR*(Q@*ADr^.TE*%!XZG#A%3lleC'6?_706QD>ccD,gRMF: -%VJoVW')oNLTi$]O5LCMtL%jYrpq[mY',Tj80C__,bLROP0<9P,b[9;Ia!\`=FNL'7#+13&->cbI"]Ae:SO+k%nUp?f(SGA\-,bAa -%d7Q5hZg(Pt(,#onN?CD6Wh69?bkm:']6Q.Ng^-hLjZ679[umMn=&q,G?T]AR1dYFn5:+QAAsM60"JSjn1*T[Aclpf+d(g^(.%<]/ -%5/^+2K^#i6@cTPQ'$&2(M+K"W<-J7hM3lW0%tIT@f]/C/,SPsSQG(]l6T/5VY,`Kr#n0/t,@73'1TO(n:JECL?i_pZ+?8Rh%9IS( -%dB)5?1*ge:%&%7[1Td8R(/QNGFu1&O<LJpnJ`MG1OVR53cn71IAeC^LPLG+_Sc+4o"r&L)R%^'WF/\Yg`$TS@71U^iWC[5rQNkOG -%$YFL@o?+%e'&Y&0?%b"@\dO&/&k&j)eHLr"dVY[o%$P[?P7]*_AYbD,+3aYUUrg,VkgXn)<#aYe6g6qO_`cq[G0A?Hf,_rO+=q-* -%bY`-]h'&52"noQd&:V+.YWlj;+:]`C\.gI:2I,7,c*4Wr7[n4u*ET[eZs0H%":$.jjk<Ba3cAT_=161h1[T%lI0eihm<&$SauqYo -%moJkrnLZf7D21'V?gJq1Q=>`pQLD?1Qr,Krn$s[UZY0-GljSq@6'?%/PrjaF'G2rW/he]gT7FSO1SP5Hi)=bc+<?RY]EC%rRpaZq -%!p:ET2*sIOb`)TtJ1R6n-mq\2]@!F*L>5;MCF!,X3ah#.R]^n*YXE2u4>9-@-:;LGJjJ>qLK<*/X[::hSg6Bn0G;dW:bmJ6<#=qa -%BL^$Ga\N+^OWB`Q"@]qF'W48QALEiJ^oYD1%a<Q+MB.AMSQ.b=KN]48B#3pk/SLd+m[(]7;Hd7j7aY]L()\,BeX+D>-70`t`Hd2+ -%Yua=?7WI+7;mAtO@9OT)g\atXTF3/Y-Kt.+..J.i''V7Xap^Qn"8L+J<+cBcZO[%>!=Q$fMFRB9'rY#2ZC8mk&=Zo%^/cn"!0eh[ -%22RirJSru;K0]l-1]C-bH8N.A\Q.loC('`Ll<&^t,QWNW+W$#hb%f./)Q,g=ag3mZ!k;c8`>L4'@XZ2R"2*fM0JJS1=@B96aBV=H -%MjU:U0L8348@l2U/`]kHPdBG4DW#YO@'$KG=]5E#Z^27t$:Cf!9:W8<U(O`Ai5`Xq=QON6@?;+lWQo<7N'pZi9Elk)+^&qo%-UuV -%l9!NVS#]`3fU87cd(*>"+jF`VjL,fU_1M35Un!aFGE-^u:3a41EWh:3"BSTtB=LTu_!.8.IKF/$dp'#EV*fF*?L_$CR.;4JfnkeH -%7(<>Ua<[hV9Fjp"3f5C^mW3g&'VN,:f'<-qE7WojFS-B.I]WAVb_2Z]0fD3"L<;[jC5'^"c5A4m'uUCf6E=f)BP1,H+N;pSM[W7@ -%N/Eq&'K?u]65e<I=Y6hO;;.gsHkCBA>"5?7`8jek;edG*ShV'(?3?LLKLdh9aIT2+1:Sa$&55UsK[PB,'e"/JLt!6QM<9-,r/Rbl -%I,eC*dQg9QnRS%e`&t%F@L^OlX&->MXDS2l[fY,"!;hK^^f@o&XC<AfMQhpLO/#XjFeTAR7519bfLLA.K+g+]j!_eR>8D`Ak67]0 -%pW99V:/H\6=?7YmLEkeh8`\!UD\q"<kO*E\_aQ7KdsIe@/!iN3c`0fAfqe8.D147>2APYqL-W'qa?8QBV$sf5+J)u!b6GbI[WN6s -%mOU)0K'&n\0$H1tX/Q%ScR[r^nIU>dZN18nN3JkRGY&5Mhb2n*,Gn6C^!2ToZZk\EdmQP:iT0L:>EUpF+q(W8'F[IMaeU[H*>lac -%H,#_[o?:(R1QC6i"%bMDJe9lmiT<IAhEi\,!G!:+T2r\V;Wp:fDiT$l6pJ8e"RHkM/c$RDOYn/G\KV\$?^-<=D:*tC+H:;??JATu -%IrO&,A15]5R=9mR(Fts;:l'[d&GaL5!QkR*JP_f')bi7HI_Ob,dq[hpU@=CL28.4l;L/G28>`B),7:FZ,/r"$=&mV*1+D^#e-0!1 -%Y:*hDk!J"?)!\I.!9+CERqVo!o%APlUdjSM19<B"?'4'I:FIh]cb7RFm/V9[<!sH;Lo<?@-'sM_(%ub^ep90GR:$C\6Q]1],[&\3 -%oq:TVR>(<*)OR'(M%OJPMdZMc$A^2@2K4@P0ZdN^8Zko8I#bnH33^ML'DEqtAI1hJ]0g&aI1kFY]gdCMMFRkP.:$'tX;P#H&?].2 -%dNifKBqV-C+c2E>Gst[B'hT1k'k?]+F7qQKY9ec+7*?Rsm@9=G,n*GrfE.hXK;^,?mHR[knmj`U#o)Ys+3H6A!Ac`#H[*aK=\Ckr -%EbgjMN,_:t,-=2H0$BE!#0K`l$mgMd4".H)qpS??X\Sk#j1MPaCScpak/UiuQcrBrJUQ.?W&-jcRBg#(fjnfW<%H3Qs6?\!X\m:- -%%7*:9$6K""ds;qkr=1je\c09/nu5h+<+SKo.EAA(X[G`-$Jsk*TbjhO1)#+3b\I@L"(eXs!7>k[o[#CA'PcmlNY>Y\$2ME'L!fOT -%2H'`Z@E*YsMXepWML\6uJD2D:E/I=l]oqLsipVN%GBKcL$QtNOWtMDc=3UDs6kM@&.#Sh5GbsDR'2%NN6P9i#hFGNsKs^?+3(%M8 -%]MJfO>)@[O6Z(eDZNtV,?]1Cc.S@rB@E<s6V4A5A"3g[`.U88@"6Z#XU&h\>Tsth'Xb9h#D%aoR'fJcbnX?9r0Zb[.'&:f$a/MP" -%-"[d0Vq*D0h]*>skSHFt6MJ6BMts)e#m)5qUPNYoF[uT;P(Xo.W1(hU^B"<XnBtM9.sRr<5V^`"6!bHVKF*OQL14?IS!@Fl,YR0> -%<a.Lp;8kD=Q]/W$Te\2)cD?(#l;#c50OK+an52(Y&iRZ&fY^-7^(/kl3f09b;6[>GkU9hm`AP$((E4_IENp`>Jsob^VPjSsYS"t` -%4Agd=1>G-`[F,@i0I!Pt9HLgI*/[MSfsELW47Rq@p'^X]k2o+^5Vk.*m'Wo=7k-ef8aJAG[a?Ap>@TR4=LVH8P%h&"]'^!A@JZH# -%Z19iN[-0deB-mr^AHil/!'NfA?lA*464^A-HB[lHYEf).<='b5'Ak<'/q7dNHTn0EDUS_l!`D^uV)TnX1Y%mmK[ZWbZ!=?@a4>Eb -%-SDH5-I.Vm&70$kEgJ9BSuJ1;?0]aY;.4G=I30CT+><Y>fS258!Q!7h[i([21+Fe;bm["e=)jq^_G9]LY-#]4/2eFKOBKC2G[9Yq -%E5=D1j/Jca'I9Hi(0^m9CLQs:2NDN.%Pgr1)ur\i#:T)_e^pYA(hqTqJZj4=E)Be1o0&OZBjcXXHU-H$6M*Dd"Wu0JY>C4^d#nnG -%bf<uO6X'+*JbkIEI7VSr6K(+;HQNm<%k6S[D"@a8qB:Fg3naI^(k5)M^Ikt"T]R>Zpob8.%uUMub6[I"*-eWt&QAaA)-)C425l4t -%=%#@cpU,!hE.*@jV7!T:ZhLDMUP5gl4.^M2<L?M,-F=p?KO/=EV1%`K/^.P%k!aSP^,/dl?=J0B)uS6>[=jOd"=5>1H#QfKMK,&9 -%$qNj%e/082/pjF.=LO[;+a1!t..E>%;DCEcS[-,8"thm]K:Y)g8;[IN<fi>pcl(&tBK7YZ;OH=sUaD:'HQ,7\6;^"nhA&asKir[l -%_E=W0?D2Nh9Q8?jiNp[]GG\[q0V3oTfZag:`uCr[#-"9*&\jYBZdfQm)Yc$.d:V3LnhfX((\=iq\uo`J?-d2'DeVmrVo9Tg-$r>E -%c8NBA?h051huUoDKLT8O0(1dSQQ)W$l3P<-E/.2S]gZBd/2aHJ]ACFG"u,c9Yo=\1iF*eOR#(Q,P:9R%GD<ge(8RZ0pE6Y87f`34 -%'bA+H6eM8s7"0Z`+2I<b#lPJlrrD[U9Fhsc&r[G5<g"-I&fHEQ%kHlV50_P(7M]!cPscHmAZr^f!Y$tm%NE085<VRu3gr8E+.M;_ -%+FOj<mlir54V^qM%Bn&C8m8XdA+5e+Ya;#e[n69kBWb>"5j"c;E-2P1/&/9cS,e3_iW[HJ>pOCl)AjF(q?7go'(tX)&E3'_a[X1T -%Um2Xk@CjoA0kr"kC*hhRR$om+iu4eBXX/a^'?Pu#B>aAKPuKXF0ek\g-n3)-<KO[,V1p@odNKnraMLLN'f>-U44pIR:#JlgPD'$f -%Y@^cSWpthi3&45XQ9sbN?Pd7N_;.4FOXmN-Q<7[m="^<f/]^-W3DDh/b0[I4O]>_?Br)J<'j%\9f^MG>[]0kf<G,7o:oZEJk16PM -%&_:R?_rqpHN`n<d($S51@9oilc\]"GO>e:?nV!Rq)15>b/C',nRdfnrh'&I^b+i:jebibGVSP\niZ+)9Ms>mn6X8sq/gl4,6c*aQ -%/Hg-j2]'A!"#B%*Etb[ac2RK.PI-YmHDTV0%d>\%FI8IWb[Ol"GMUT(*Tk_/ZY`c!F,)cg_d)*,]\lWsnM&^B,r9g2KmB'M]TO"h -%gkbdVAD/RG*9!3\r$F;4VhH9b;^KJ5Acn?Hq["\jlJs(<Rj^SUMi.W%#PM`GMWcsfm,HDu//pjZBI(gk"q\r',7t"qE-5bk$pnd. -%>;0Fkk."lk$)Af_pa"<EZ,egEUc.+oBi?<u,q2J]X(7AqX#j6(:is].WsMfq1AFZ&6#A\k_&`+.Y%AIZ1QhBPQIbYsoH#/PY7Yd; -%#pn*O.F1?rU'NBF%Vj$@QhjHd)i.<jnjO.714C_:D1+jE%K!\4fc9ZF33\@Yj;DN"p=<W)f+&'2'0-B0S-6#9&aCl&HYGB#?83i1 -%"5!de=/H-tOpG*Ye3KFPXsS`9n](1XB<\Z/&[.e/PI-A7>fY?tMBXA]T%&/I?AW`ek[X^[:H7:/c5^#Q[sHK.oGOWI&UGGaT?.<Q -%Y4*)8\;Z3Ea6UitUVsuWMW$60dGd24<k'ZnFTK_"T[_fP"X@(#4`L:`MJGY/@]fUL`F\C?2.-]ZN_2l<fSm>,6seW@W_CQC85F$+ -%TU:o*H,0uhC2E6`>,bU\36`Kg-"''qBVhnX#;gk;4Z0%Scub$CLZjWa5aII.kTdV6#h^7&,qbgA50sZ$,dk3Y8)Sc/?j,O46N5Tb -%"'/;+#"]%M#n"R\L1/fR+@Tb3Xtp/]_6uh\8e_EEGHdgKQ66Jk1;V)=jdef!/#81-qSs>Na<@\HOFV?dK0R<?O+@2H*.VMfmqJXB -%/rN[fo`MoQ$Xo.%0[+B9c%G4pL!C+p74)URTVKsbgfq]/rcaFRoLd(oW$&B)R!]^%rRhQ_Z3V=;g8qH1i#IoF7IYVE[[AR<Ze@r` -%9GYj%M-SIuqZlfUE?MhhWLHFgaOtMF,Q.'M<dBL9^'h<0#("=c#:,U7GoD8jZpU'-Vnt9Lj@Ag.;@5g!INU9k9pV.Y1sHm'f97Kb -%M%qNi(rLHT+Ud\!YBI]u]?b41&=s*Lk*:h?pI?&$A`SfKG=,!7Ub,>]Yp9]Z<2@6:<<9I%<o@aKo(=F>8$Et^.nh_["d)Fj#65(2 -%E)pKsnEeUI-0XSSHg$Q(F9Q>@!+h5<gFGPX+Xh^D+('Sf%q4]i!;d,UI0CHPK[?p<m8<h!Z5SHr0TbLOYlA)INOIO^J*iMYP9kdS -%6Sm&[',SV:KDhP3a_H3@cIqOB-2gu"3dGguM9%1%ZgZSOe/n.[lt7$/(Nbf9Y7r*#bUl>ddO<`$`CVcCUbHQYf0tc'dFF4O`C3[* -%0rru=@gD\HIn1t[c(CHcY>,t>3SW/EE0^^^,3^j3K8H)rk71`CY1]#I`8e?6*,cfY&DrS=(:]X,ITSNHOE;,B2E0Q\.td]l%fA0M -%LD:YYT=ka"WK=mhi`8of;uAo;UNYFoJMPAQkl[4?qck)-PVpr`=&'W+$aP"qr1\X8:A3\6QQAQ)(:,qd4E").\j3[N"?%<)!^h,+ -%"OnuNW[J'iCc_2mc5R[(Ji^9r&B==\[YBRK`$"FS@LUTa"XeXm^,.AJiOk06!U1*t109g3iP@Z.6dd'F@/rEXaQghNW%8(IC/P!C -%r<=p8P<:Moo48\YWucNZC8ZJHM^Y^3TWmSJI5^hILd3[16'eadTt%mS]S!5"o(n-Q(qiu;,$Y5MXa2\&&;7nr#[4Hl/Jnh5N[Gk> -%.:Y&P7&u&p1"\BeSS8/(:+LlKk)(9(*[68q@^0HW5P'J)/`d?4O5b=1,#nGZ<hUC/=#0OZ-dZTT-R6:aH&Il'WW3ZNJda@XH/;NU -%!s0<B(l`$IVh0`R3.aMH1*beknU0CdZ$Gj,3[5?6@/9.:<'%HF4PC@Y2FP*X,2rgj\KT79'pCSlmgYD.X/Nf7JoHN'>fA!!0T8B+ -%itrXo6rB!7Q7LV3+c^W"p`+oR=)as&`9@UiFb"!C@U<.*YsU)0&9YUBclJj+#IrY+N:71GG_eI'Tp1=gjtZRT"XcIO<"IC..nK%N -%Wd=pL]n-t@ilVK3oG+b0&D97c^^guVVlSaV!D7,2dDbWT,j?ba2Ec-qE1#SA?HLS5VK33p^/bocp63UQBkJq6C;XSj@G9I.MVKnV -%DO>[XP,($1kSpDuXeZ9+U_N6n*j-b;NY37cWK1h/P/EO,EUMp\Rc]&gk:lRM,u&KK;EDr`>tIs8A[DqG?WYZdLFKXKjP,qfh-j4M -%+T6L1<HoglGaO#oR]JWQK/0Bm18q@](O"q'3:Ou_js96YMT(a:WNU@a*=3HMk[pFW/ELYXSuQd4k1Ks@`]fa-gf7cP/`.,UX7*(= -%cm!Hr&&:)kliuRRL9eM4"[lg]:sRk<XoM#<]V#l$I>A]8B;gpNMKpMS!K0JsNfgFB^sNRNAskId<)m<B_j-*`7)]SuGFnF[&%I6Y -%5eY'\js\Z2?;=PjU5Pcm9R=BM,Ff`_49L3i=`g8%B4WPdL+&?l!Ya#+HJTOV@%;[41kKGl*"oqsmZr,W:r]\>J'0hF_&Eu7T&JbH -%)\6;a)hq(tW]LV89^(:^<EF&5DP`;p=3Ep*=s>-K-49hT(8c&3p=E&ff'sVsk8rD*,a/X(*fq'!PSW%<a0TF/fW+d"_TZt_XOPAk -%lj]gO=LaGR8XBm,l)J^$d/"r9RZ_G`ZU3t)PKGW_6MM*X]cgq(h-joj^UGDb/2S;^!l5`P(*c\FJ3#0e)bk9ZA@7dC1]dp3<AO\t -%&dR>b3"unr#+1X6XRs1T(tD:ep/)S>itVuk>'5jVL.K-''$66'>kbsA6DS"ZLqWB3dQGA<aZ,g[m?*C''sloJ*a5.Q$n)u4/);`@ -%(t]qGBTrg+1j#E+*&t5dQ#phSP>?7FH`Kq;6I]dEZ6c?:`TH!VNjItb<QS&fKM,*LS6RiaVJ?tH%2<Uj+UZUEiIr<_@0Gifa>9NN -%SAp&I:u:IsP>m<U9UT&uYG,%D)0q`k.C)I+]?)\/$%#MVHT)G'-JS6/[nlS!b-c%t7@IUidOM4hMG1Sf+?%JOfcS$9Pa^qCC($gW -%77]:X4dk'%A/)2h((MZ7C=#ac:3/&p(snd2?r_U\n:2E'5U95j>+m\/dOAW(HhEJ"o;<?uVdQ4K&'>8Hl++G-JP\t>BL#_aPLY>' -%ikl[0_*-Hs"9'U2U#"mH)R;E+'0oPCOs/ILN@G*0"k7tIJ[I+S$^J?::YKrfib#`M;0hSuOU3hn#K17G\mh70`6k6u=7H_j*).4u -%<LCk.Ttk*hE#;tf#tEK7m[Z+VE@*[YbS;Z'Ni_hLK).0bI3n3m1o0tI\R/H@OaE6h7bTuOHH"go'Y2a-OYd1f'9J3P!OUM(0%cEO -%\-3$aokc"[1']XS8Tn7"CJM:%UJpFY-J:cA5A4).2D/SGlW"LC.!0'\[V\S*2C*no&BDK]T^?gN@Fsr=g'nqhf%KVKb^'@$^6K9% -%9"90YfO!8,_c&<Q:W&AT324<s]LLJ]7dN(.!8O=W*0I)bS.5Qm%/D,KQmRQh'LN(_&_Fu/0?0AHA&u*`a39)=OKrGT&d^jVRfUd3 -%DCNGjkZ*T9SjjKQSm/T0R0:gqKS+8cjb?mL9LdXZhA%oJ^j;=I"Vk,E>U`$@PnaLh+^<-Of4BX<B#kdp_CRKRTrI/gbJr0q($)&b -%"(KrD3+2I)b!!V:.h-J.aH;368h6-!6[GUQOjf]hBuCK=UleiSS/TgSNJOZ:8?^+=/soK9ab)Bl`(hT2QAAuaW@@OG%JEV;U_2du -%r%jKbM3;e3gnU;ZWYa(`>f;r,`ik*@PC_.)+c\pUr#YWT;?&KmPb&l.lMg2i,".lt6C^:Ej[VEXg6;dKPo;+BD!Y1.3VdKe[TRXD -%c?0A*^'9EOZpNM6:J/WR]?6O!jOY;*E=H$^p9"5*FRgrAILK-#LIpbq7RHuY2tr^NY#P>UR1G%E%N?F3@+a/kYQj/!UVb8;4<5j* -%4QQ,OY^``"3EK,]._JjTpI`G#=+jbZ"/:m$RO3Y,@AG;I;Cn,?)Iu9,^h9W6>,XGc[9;(Ci2U=g\\UhbZp+27";hPNSnkI@e$p%? -%TOcPEH)[',<5YG1.g<)1\Yc-te7&>k[:I#Z$LPj`8F-Z2r2Rt\(qisC>U0lU<-8coAeBW`]P-7+P$qOOUisr='B$Yl<E&oZV$e[7 -%A6,JM&88/X=Nt;f4RC&"66n,G!8^AKY$B>+CjCkk&5[U)K).eAl.JlV:i/-n@WE6[#l_OE-=p%XS:55T4WiNB.Ktq,]BJA`_!+Tl -%T2d4r3IY*J:jBUGr!h9SNo5\k(@4_XCnp<rYf:5<[9N^C5rdOEY4B`>=<WbWFQfh>Y&b)!JP`VS]&.TGB<-j/-+T[cnLYnNi#_Ft -%6ffPfaU&hs"UR%k6Tkuo-Qfhug'C_8cp//T'uNsl&r?^qB`haKT[Oo91!FflRfHG5Oo\[je^I97A7gPU@Z:k-8=VCYfbb?BXAF," -%=?_Im+=kqb6^j,P8s04#aXZ>fLn%npiipJuE"=nNhR3H1_JkDB2WMs"?.n;Vj"NSV`@dc.DPk%Ze_o=H2stXK&!"Qck_rUjG&I++ -%*N,bL-S&Rjf82tia?cN8]eu73&Z*@+HsrSE@8QQ9=<2IZP30"6k-.&4?7jLdlE<t&d]_5/A*/*9TR7MCfPMAR^KD_D#,3i_AV3ZR -%\"lV5fbO?a^Z2$?HW,Z[ccSV_nu*"i^Qk^;s&g@+^h]#(pg"sk!(1=+W)sI.OFb"6DB3_HeI\SpY4-B`%/8#N?L2Q,fp19t_`G3C -%MRMR)\'"_(J)@>P/eChM=la[RoTB6gHtnJ_TE.N6'1UN%XgCGpc@i41/@&`\>bD=jF\8ihK$fGgieUDgN\Xb_<Y>3/;h4KGZ3:Am -%a-iAek/_kb(!BB_'t^G_:hIVW$M$oEW!uUcj$JY*7iW?;Zh4D7V]^,>UHAnAbXS6b3qr)lQhJ%=p"AX"L(ggQBh=+H8<!DfeGqT5 -%F[F[!4Ii".M;4Tm#L_$/WAhgB*@lda6h69M9?8TV#ajeD`K'3Oc23;J%E^gc\G-n'Je$]W.*-G+&SNU_&h8!@j`ISpUu@^\S^67t -%?9@i?$Y!4/HWY=cISQ-@.dg@f*`dY1e:q>0,JQ^l0Oeu<OZcYdjHop9c;QUW!$]_i;p,MncB)^PKp$)&^1U9KISedJD[,ZW[eBIh -%Q&7HLQkhT2?4$P.P<f1`>3*VBcqc:n,[Lg<S6i*P#oZeRVoR[*fm_0&_1Z)TA!WHO?in:^:]dgfnj,(`$;J(.\i:q(XJCi+G_F>4 -%driO%20,H($dtCrBt-A34)'shA4T3G,VE4C3Do+%Zf;sa#Z>'CAW(MX'Xbn>2[p3Q"6h2D`@F$jEL3]:<@=ORV:;f=V.HYt['5G< -%<#60n1aqkeH")"3NB(QNfOoq422"W.RVBpn',E%_?=E_*Yra.'E%+]9[,rFVodIQs%>*;-A#:O,3@l'\9;+u;p(2:I7L.kQfTc%n -%A@$=dnCa=""@\7cC''KO+4lAbX;:GA>'Z4*-ja$-Cr3$j&G9^/7S0LkC8Rj0)dW'P/$NDF6Y*W-nHl'f6O-_=^ce>.n+?28UJIZt -%$0jq`9@_0(\al=%?J`AbCmT9o=+/de2cmS/#=Lm'b+TPrU,=Eq+mIA]6.5`U)'5^+P;bIsUXQl%n;!@Kn2f77HJ\VY&Dg,h;re9/ -%K[l?F;%L"-Qn*OK4`j`?\OQ#adkt5,-ml1@Oh/T13b2N%AS<*i\INml7i\d$51q[^lj?Cf?\AO7=X6=PZcu)%,37LcEW)?7kWt6u -%=$!7$R^8<N:pI70CF*[*X;3[SbY$F$'2=[h1p]b-3AT:42]r^V6,:$":!Fl8,A=cf$DAg6P2.ZWGO4e*"r'A?5GkF[ZnlZ?P'@I* -%Qo-"f'n`?6Ch\:'o8S?kb#=ER*G'^BYO27``*V+.1!G\=JM5/M=o&,_1(bXSA[;c]`cEV`js;e$UdJ]ZfAs`nV[6R4;a-TF;+q6X -%1Z\tEVEm)XRK$>&OK:=T-daD4rQpGij;A;-J\F;e%?Y".p&a\Lk,e'++\m4'A2gn_fBM`TauU=/8LPWbdIfnFPb9o*s%SiFr2'-J -%BLti%:Cdm`ArmbP8]AmWEQUBoHC7S3`h,M-Ci-&?='hB/TJGVs4roimS?DFl%#J;FUbLgi]#0-33tt:B"!b7N+YD.aKp2H58gWJ* -%c/N/[@qQ@p8H:]TGg&k&Z_B/N!K.[O5cELn,WHJk-gE[H9Ok73_6kK7UO(A+_UC#(W^l``LP;r+MIc>9k6ZT+53$s:PVIlHWk4o$ -%Q]i^qVh.-O`p`/f15?iAo`NRiXL(gJ[Z'sL*A9Cf_-:N"[0E.4bH$?@2h8/00FgMi-j&0=77KqSB(kHP[q``5k?NQ=U)Y:"SdBs* -%;T/<01NI,^>VQmu"IUkk8('XZ[GEld.n=?3.UC\\`0RIuV%Y2VkB`,&Fri)<+Lq$AYJ@M8>,7bH3W,-'+]`3O!lpEiHq:43Q.uIK -%:PK\]4WNX;qX7JsMfR"oT+*&e?ncS$,Bn"O/)Lh@]r(r1/e@&-Y#Gsr5<p7Q"-BY^:8;+CkUVo.q5&j?e3>p.ot)BbqtNKLI.NLm -%h]ui6ZBZhN1W.`PR#Ob9V"@mBE+=pT>"R7E,_!6@WEh)Hk-CcgM%2Uu*e_]1=b$`&#[OBAO97TKWN6(+P"Ljg2))"D>JM4,q1Tke -%BVG#9PSupl#F6:PTEnssgP!LJjV+I3BWi%(M&8pUciLHI&`oOI);*2m=;g4o.74k)SLcIckIQOeYVcG^"dH]#7`>Q-cP_FW;W:Pf -%J1+ad+&eiu"TJ[/f<2:9<;44MHQYl\c`L.Y*Rl%a9m^NbIP!p9QqP1l8S(_@AYhT68hHB<h3VQ(R$DDAalZRe"?DIeck15A&B.@s -%_kZ\NR6%"UMMO_OPmL=S'UYu+'h1aEIJi#0l(omF&'?_g$9G:'Ii9,\)O?Uk.6f[@<Ac=B[8I!?==e5i<bnN7f<AN3Ycu`ZF(!os -%(qL[kAf\U>`=#Ko=jIEL%j`\NTe^>[]ZBY>d/Z?JW=L9@S&#_D*%HTK#pE)f)IaG51+3o(?ce1J,u`t,rXEKgc6@ttc`mofm&]9g -%,h*69G#0HGc2d-2,`S<5LslD\$8`C_:AYh#nu.AsKAj,RU1,Y7a+!e]Ac%:L($OhbPg$Ambcj'dEJBTc=l&ks>7]/<U7666pc/J6 -%%cO36d*j.3FU2Zo(G9hk_INZjqfGN_42-,>'qTdA)S6#Ee2hl$5k?"g%NF45W%L10n"4T4Zh4+T0Al@$rpoWdZM`X`i+Kh$fCn;j -%?bcO3mG$7Mr:0-uRu?$:&cVXdYF!jb`'=:rlg(mXMjGeB4]1`6oL=>\s5u&mobi,"Zf[T;pg<tarj.Ns4%Ug748D,@f:BRMYQ'TQ -%f!Kaf(t`FEg,t:"/4El3>;,-RgR$jEY.5L$cis&VS7k8e5[sLOIHQFgQ^m=89hiX%s.];KMa7_(qWshp\u."s'K\(EeD?TIYsZ/- -%#mS+?Z'/E/qF+t<mm<jWCT>$?]1a,7QB1fATBjflJKReH"@:*LQ>@RV<<@Y$e1\qKZ/Fp7g7\.@h^*.tZ.2JVUhDms=o2rEAgHd[ -%0\Q].C]^S6$cZ5nRBZTs;o2pG2BWns8)'82QicqeKo4.5\WpP8L"iW-gk.&r>0oVSFE3`o&o5lZRWO"l:(JpQ7$!URQ+h?8a&^$. -%_W$ff+-S$ld<;Rl:::EDa$C6->LuL?'4r(aT.T*3VsgO<ZrdL?;C3sYN3`WnG*fO+W?p9@Y1Y/Vq(9f$WOQBRY:5#0MldZ7#A!6W -%^TRp^2Ip5ffY1X,d8$(hLsANnIrj6"nFnN2P@4\M4Vd3jq"dV%b"tUg99oo:I^1kYIc&O-.E94\0d5r;8T$YOC]^rMo!n30AGc6H -%<8Fp&e>5[-8d1*L?=Ok@&n',4Bu\:hL-eeC'Q.?I(tcK@oW4-4<qX0\###Yr'_PRI0_:"lbDZ+a`0pa"H/Adp+lLE7-MI7`H\':, -%6nF:f1:X25>J=_^%YIo?*\/0?pEJAY#`]#-iglR4f\OZnjOUZ?qW`fEn)Ok4j]1BZmA#O,[XfZ22%43nO:?uHhDB5*N0hj8,F++m -%jj&&bX03CWF>sAIW@9E$e2n9NIhoLsE@YcTS+C/<XI\JBOgsX%'ppoLKh=3eSbA+*H<ZR]^'n.mPktR#Cm*N2ouUag_A1!hNffrt -%lq,rnrU'^=ARS1B(/"_#OK_#[AFu'tP#PO14`Ga2d&mro[?DrSX92?ME[aa"K-P4d<31=4g@T\cOjH$KN!Y?iMTD[F"?;#)WMehI -%`],fJ%]#uL%M<IHBB'UKeV;k=)kCI\jrO['=;&lKKQnd&S?tTA&1_o1R._mq-C_jl6s+ie3Nuam&o3@f^B+m["YjlRp6fQp9rJ7b -%E#4Kj;9KCN<n8Q0<[#t,6.0uHF%m`?%rIaSd-&CBJ"DO7P"C.<0&b0a+JL]C,](@FEX=3/138ChG/j:E;4E+%>tGn6b%oW+-j\Ai -%E&0(h=i)V@^R(b+Y_cYts5=?5>UiJr7K$R%gX,8>q!]4T-!-dBG&^3#+uhIMKo/7@!O"cjFh?e)d]Sh1;AT,-\%uVD)2Vj[McWB$ -%9S"Qq78%A,*P7)q([%%TJEeS*'K,I9Kqp>9Di:3\BMW:0CBI-1&bt,%`!OJV7LT[P\1*#`KRO4YX<cA%*YN7MNeAIe_N(@i'nd8- -%/Jpa,"XN_/Rg08p`&-&L-#p5Spp=SV!1P,$r-Z+J'C_>l1"["_X-61+%*=6cK`+9!-EIF:KB0Mi<m\)?']mo3)e34ESP:p/eB-2\ -%:'AUTnksU?H0kb0mdVm;NPi3(.#p^QAo"'l%ag^mXPQTiV#;@-CLeS&<Iqu*aAO,H=CdspkY+8L%DHm8JtI"s9JN2k,+>Dg$YAf$ -%kC0st;pSiHF=_^-=$A#c5.fRV=op#de/];m>7PgX#OBCTcUg?g))*rh$0U#I60t=?:c5i`K#8V9:iR<FM`WSpnE8MUQ6KlZ.\_Ks -%AP\4)-pgY:=WUZX/)5]a7&]g]+Ah5A`I4l8`scZ*Co&^MZ1)-ZFU@>uJgd"'Z9m0M82#$_3n"@u[r8/IRpup@C"=+!PelLQ`g1_E -%2T0iF^lrDYUUe.T:sMBb)GFTJO&1GY.Fa'^=LUPJ8arUQRdOE,P=dqoBZ1`#EsNN0?B@K?P7k1DLS<\XUu6pT:[t5/f80>b$Ag00 -%N.*/fXb+beg/i&e1XYEiQ%EcqDCB.pGu`PqgiFkNJ$7r8=LXR<A<Z-Bo+S,?9a1\2XX[F7\@bFOG23=@PPC@t?AF8-0'mM@m>aS$ -%DI>Y83-<)XL8RG_>EBE*=qk?L/e@'[>F;Nk(-AWM/L1,?]%'NNC^p"KkV9p[12(WO"K:`$9IFeP8Kb;#2f^LoWkVL`<_F*c=K))- -%(ZHD34i`(TSFDgWV0^X^P+ie[`,(o^L+E&[KZ)I0&Xk9(=;+:EclUX)NH5KRL9Zk%H#;Zkb-p'4LkrFm`'s,WLdkO(TBi2L%B+T5 -%Ket$U<b469RI,U%M'FX'!KE'[+Q6U.FI!Aj(Fnj"""FVg&;63RAfS)0@!ad_ZBU0Tf[OHg#BJm2JG*Jh`Y%DKhOItGEG>_n"%n?< -%m+WYQ$$s3S"IQ&E+>QFG!3L=jHM#KTJ$;@TXj.Fu@kuD]`a@q6:%k8]eJ/gjc&F>&X'&/a"9s*e,nXklM;KAd+(;K/oImdbnXdr. -%74<sUTsHW:/tNFJKZTo1"sF:h%6/XmL#2>m(L&Sf@673WcIIWN1C%RgPpm"XL>j6]nrf=qX'&?3lTn]@5F0R<NKP>M:X<#/g9Z`L -%W)6RACfSB@ff;?,eRC=&iTr9,`dli46'Q@``ENF%_G3RP%Ohc7hpm\kg'6&g]rkX,lnGm/D.on^_dJ?JTas3@`<0:[/JiPjWamK7 -%&1@p,No<UhE%Qh,p#((O&E6nrQWfqr34\ct=LOYu8rnjKJoN_*Zkl$Jn,ah?PB7s\ILIO2Tl1mo:?D"OTCaZQ$ssc44')su37U=d -%SgEMJ1,)/#BJ!@2icgZJ]^Y*`H]<`BFjdX]eFR[p?>,+Xh8N^;p/`_E:a/]K^(JKB)]gp'4)R!k<V8f!h1W8h>G[Ya%U^b8-NL<# -%DWWfD3jJFfR0uX%F`9@*q3aedf2K-@W8snlQ5$1To_-_I3]qFE5<kbj9sr"?`TDeajs;AN!\/91/^M'#`OHLc%poH>.*>Z=6u\c\ -%akR/Y0B\7l[Nsd'nK"I!njtfn=Z?R5hGf]]_'OoK*+$HWErTm?RSVkBjg`@*HBkcmPP^nM(`nG[cS59klM2Z6Xq7gAnZmG8P[k`U -%C/B.c.<3-r46B8b,p0DQ%8[/Kiamf17K`VRJuPKc!m_,e(mBhRn]i$YdOH/c`>9eZk#;^U=D1A?7XjUDS$S&9iGO:>/^e??W-%_7 -%1\-?fI57ppllY`4S*;XN)hNaLG>Rfuo[c2$L63dgIYY:[DUNV]fP-Op$%h9KOKb2(D1t,b)LT%V7+_PTE`X7C`0n?%N!7NNV2[\K -%keO9<=9UT1OIBd18Mn6N/*R&i\sUu^:+p+DF(2II'1s-2MdjsXIOf9;$>aCNa)`#gdN?qT;5&hd]`d\f=edma!H2He)f"ngFe$X9 -%JPM=[.)]SS8qj:o3=LjEiR+[21XY:3D'`Ygg4tFj#<sal1!SCEj/I="1^b^pb,9FVjauSI0&fePnaTKOQfk>6",s%=%ArbJ,kTFr -%6%@,o?LUk`i]Pg9-q=N7`<e\`%JLHt'<)o-"RD9m0'GS.Qpu3t$<8C(O&""@&IR6.c.P;!@-J5ff1\l4,]l6.ge8hD<9t;nJXoUM -%lND1Pk6i"oLNp8`W0t.+l=)9d4[8fp1e&_IcH^!EXeT1Ii+u&OQn%c&k0?i5#ITKJV)DIA+%1OGUg2N?cj-Mj1I46^oo=ht#t.1D -%ju0LK//BId930DK-:'I`9FAr$hU>*5gae.L/YL*(:_bT$b8:O+67#VCJ:!?T52"eFb(Nfg6'YP:bNoJ_@iKA-n<G@fe4SG1(I-Q6 -%^]L.'r87]O3ZDP&("'M9Sg>(UC+.\T`s#$#U3<;^7T?EodR#F`gc%L*&Keu!C[)rG-M>k`$PWp<Bg&^F6Oh9DC++LG&Rd$A&7MjM -%)iC,*"#pQ(Cr%BgA(W3BjsSNF/gc,6GpF691Rurj@ctkO.W9cTk!0?pr^[L^QVheF"F$mqg9O.)0g7R*g6I)]-1M8f4AV[h]d/X- -%Q$ZLHWI]pu"?-koGKg@rk.a]DnYRa#m1nXJY`O@@&PO'\<=2Ra"(f1Hd\161)1('L#=e*I@/b^64!:AEMem;`[Oac?RM+W$>ffnh -%(0qd>^W.6^]/o^cN"r/sW6e1k%l\g0:A*aa,2a,rc\"OZKsno0Du;a7(_lY+gn6<B@]SdAajBp6!Zr<e6!\8":=MOL\9f/%;NP!H -%"XK(^=+K-r1qar2<c5oKbk,Gj^a*UE2n75e)38s3SWJ_5[4WNu!rh8ln6@e;OS`cVqO%hF=Fn`gO/-3!^u/QhmFnC.Yi0Z=7@8ZS -%4E_'t-3iT6/V4jccp5"sN5fbG=-BE#9&>4O:6REcB![8(n!8V=<'eg\,dMZkdQ,0D.B`;0`QgU%\X9D,gW&#lo%<qXl(E#EE"W"[ -%r.>07Wl\:%#))NV8>E<,XR<.39gTB_@"hXkf)^:VJmY0:pqMo-d<mZC_<_)o_dR^,3FkgP&.V#1W&Zo#2!D:G;s4=[M97uE"Rp3G -%OBU$qF3IX;F,1%Z,g+b9^gpW?H)d&9KH)CGkgD4k))c79MlUeDYbP*U#`pGV$>4o4)Gpi6+_`q<[Y\E("^3CfEh!kclMjk'hPWr! -%0`e]64;;*741)%NEsil5.a"@9T0UUOESs==eH+/'JJ(-8,,4@9+MN0.Q1^g\I7'?8(Db$ML_Hi_1]>"<N>->%_ASXt=0eN<K5'_P -%J]M"Ns7oC@3`jjZ8;e<EM/bi,-U(LNHd"*kqD-A>:qP&CWN>/$(4@]4O>\j,7V(SO"6,"HOSJ]braK9u"/2QaY?>`,Amh:AW9bP% -%-/pGM1,KXZc^0UsZ+5"Uq"p?W&HY=KTR?*?k=(udp00QhU,,c6"n5W-0Lk+);/'d'7Bj6h)R+TVIQb)iV.0W7-<,3?1is2lMg/[! -%CH8.\?5WHrYeQs"Eja>GBndlC#ce9O:8EF5c":Dn'&euUXrAu+_?5!D4'AB4YQ.XBn6=V+$NjL,I\_UOirK[2b_pu].sB?W[R7Vk -%A.r$iYS[II`DiSdILDT=Ul8mK5j%_^$?[LUk%4ubeN2(L#,og@-,'fr_@H>'g&]2N[A?k=Zfnd%%'"hSAS'VQEu$-cYZD4Z.eb"_ -%=>[?&_^\PP7TR@J(K(dlA.O;p.'Y?$,;!]IAg6\2,W$W-+0-9Z;522d<"(>"Cqk!#%a[t>FA9V3+d0IiTQPf(Ke"IXjeG^B"/;E> -%UXU]"@pQl^E#VUoC6&IKqSR`l&W.sn,o.g6BO-@Hg<e4IRF14"UEpo.b*p?s7`f^M/Q15o88)*=X(*0p1Ml?-Lu&!5iJr^%9tI9- -%Ql9X_f'`/1cBTfsnO,?@6e-Ojl79G'kL!.Tm($Uc#gmJM`U44D+.sZS(p>YrUd,Z:>S>?[\u^n7:$HJ.,E.RAWYT.fiW2AJN3(j4 -%%bOTSN1i\hV8MjT!,iPAZ@VgTcbr&/dob/>6WL1^+`8#J'Cs#g_*ZN+=.j-eH),?dZqA]hKOe+0F;)/;,GG_F[gpD*Dke,KSQ,1r -%S+T6m(P[c3P&(a6TW0qbeun.F$cY<oK;n%_gd&?UE#gQHGpDrnk^!gV"CS)8h$,!+of^T8#bDCQZ4=iO-j!MKp@Tg^=;_j:q<4UE -%/r;I,Oc1'3KUO3N/4."`?;X4_AG0$%L)LZ-"t]OE&%$-LQQ"9ePGoc6O5ikbhu[':FE@H+9`,s$^pWi=dKc]+JR7TK2Rld^iP2G^ -%?4Fi].<d\rTC(B<#N++DBNKoMT=_./&&2EJfL!*CSU[a\Qp%+eN+!-)esRE8L%E1"B!R3U?@FVH6u>E9FIcgho'X1hna%l?!6#=n -%D#hVN6j=p,XnCn?D7e9"%YlL9TtiGk$tW2&K2TiWO;AIt!fUe%=0%2Lq[DJaSTaZ2M7D=AA):$AMoiate@K?H-.+J#0X$n=L%Nb" -%]Uf^<Q3cbXFoc"P8mEpM-CG0o1#+p:c:]ufO)?b\Rp&QHC2huENSs&J-@Rr>K?(k5/[Wl^iN-'17pb?)AJ/#mSK-URDf[=fBR_QY -%hb8_K:@o*kBn0lfnEL#\I!Q#0J\5`*8W4s0?k,XPH-J`:#<"hR>+>c0UI9ma!,VOK>_,l%eFk/(F^dR2kS>!7i<H6(BXA^WCW[:u -%^\[G`4e0G'A6?p@Ho+o'A$oF[.?gK9+m7B%7Np"k9_(YE"(d>0/65jQEL8"2GS+\)m^<7uAg<%A+/ROcd,GgXl#,Ege_$Nge:7af -%gNqPgYZ7t>m+!dY>3aUHDDa+C$/HB?!d^,Hl:1+m6ZnRE.Bk`[/JXW%#aX+qME;DTZg^-$hp[:7;p+p#,-7*K#%p0j!"$+mSY`V_ -%T:U846@,qEjCs1TJJaFp>D!2cKW&f_NJs7,YZS*%AS[,a-X-MG0juidTSHJ%.:^,"A="K.8*ik`^=6hL0ML,9(R<UX,$koLRKXJf -%94U_M"`XY;+P7[RK&K2j*^a#'_:f"9V1l#PKk3_aQI:i=Gh]6c8kSM((7/,76NY+C/]u1gj)4,A&n*8(\RD=cB$!.AeL2A8-_URj -%HQaSm.5!J;1]Y$fP_q<gjA`COoNkU2a+>3AC_0ac/7i!m.gq[P'APjCe9E1[LbP=;BU$\pac<X[:T;F1-3I3;MnHj7QTA3cSoYR7 -%Oa8:rPGU.0?d9N&auIE5,DNbk=M+KV>eJip5Fc!oYd.DV-V"P/*YX!-PEo;fVB("0V1goi_g.&Fdc9>pU??N)"\c1p>?VoH.DH5d -%T*$:>N2W(S%H_o*YPr'[J/i%Jg?6;f<L2IB@a1s3MdT'GQKGS/<%#RG,_4mAYf>Vs#4h$<AhYISSY<fR2S&>P9T)'L\N/)'s/cEZ -%VInt1l1g-K7WIage<u@/a_1(hor>\=:/)]HD*T3Lm+mMs_P3HS?m;=`bq,KO1PhsPDS?sH@)p*m@sQ>Ci_gBDJSQKU:`Vm=<M@B7 -%%=gml[V/;%e83)r[DSY$T1"7)N4ZFLBNkQCBi4@`/C7F:=:dWTU:Ir_(S<2I%h=FT[r.)%Dq#IRoYSOiaORqs>ol-+I#@&]WY*HJ -%Ak1H\rB\95Br6@caFL!`VECk1/?2uq4Y>T:=g&KI[T##Y66P5Dg$qj_'hE-f/6C2\bA0!IC^<ZnaIImGQG@2W\%19((32$9QlCQ` -%`L_7],:rNo8u-256"1n%+?0b&2mSb=>d+/f,7si`:`@XfFum&k[,#P+Zttd1P_1)l6PUs?^^'e#p[EX;DN@8^h<B)"a_?Dn!;iBV -%Qjq:pLGDDjXT>iCR3W.JZOeaph(5EqO(\M_*!M<ugea7D4lS7u3@nj[ke/mYd?4gi81kGu\t^1JD%DU,j;F9@7mbs5`_KflKq2$l -%S]!>_"#.imY;j12^]H;&Ajo)tfPY<O\+"Apm4;I:BQ[^;p6Lm"X],H[]@M4NreRqe_7VAbe7MTTbPS\,"S$u1$'/b4Sfu!;J<?k> -%3d@8+gd$2@A6C;fXWsrlFuef,+i7T=8C$FBk!leqHHc_,MP4E\^ck%'T0YZ`*l7,hK7:rl,VTI<QufaBhM,"/_gn&%62P2J(0<0> -%E&2iK2UI;D<LCI'[%tRO`)\$+O+f8OfV3r!`Y$@*k(g=D2+q+0W$k`%F3)LY-(bP^eX)S9^UG]\1<j<picm/A][]Rr,IBe.[O%\Z -%%H'b0D(T+LLaA[o+4`jf/qTp10C*I;@nQ><P\;fSL'4;jkD=aif>+Z!1t@fl:P9c4=JG<Xd+n^e+tMHb+@)<Q^7<oKCS!#IH1N\V -%`BR-kf!J,Nf/Z.%W"o@ZEQ%IjPOUt&#opOA9273[`Ig=8I2Np:N#hYTqNZkCgfMrFQ,&$jZYPt+=>(f*>G2u#QOD@'Y-CTS1\s8% -%X(VIqk'l[(N.09,f84>\h5:b>_5=kg/"8JM'>4PopZ/W9G@#^bJ3@E6I5r/6f5QgGk'3rr3-#m$4PZ.k3L5Kt,Lj(EJ#U$;KU7/i -%;_ii<eem\1F/r,_&RjJ`_/nq2Q;tpfJ?E=2Og?@mkYjsh()J6%qebQ,CGLSk$@.jinh-L.N0\mcihY.WAt#?42%hlm.B-6f9WJ)% -%TURqo=GnJV-RBMe3^4OB:SrM<M%b$%j@.IJ3\,GH]Jufo?j)ft#5J`Ff$](LP1&::!)[#I[=QuYPPLV?5te)s&8@X=;6uo<:V#0t -%?iio=B!T^H^tj+L-H(a5ZP7r6Dr)oZ;6(S#+G.5%)U:/k5Y`Sr0K#YA^/1d^hTo)bl0UoN'@[UUP=m4DiBsZM0Bqr17>g0HaqR5q -%(g/D&C>h]8Q;Ek_)"fX/Tp&`i,1O1p/Kl.B.&Eb^/"%Ke(q2kqXN=Bna9Oe)Vd"gNh6gRo1m"Qp!<&(,'?Zj.Rg^T4AIVnaA0\jr -%:a2dc^P>6Ukc^Lo!C2iAZp$&^LigWNGoq`p72f9?V$L1Y^<Ch:/-VfE7E>b',kWYT3Z^mOlRPT*0n(_T2iD%A3,>TP4[XKZWX@ee -%G#>maY:JDL*d%"Z"O7uZeWukYf+#f9qPAdEB9sAcCboQu%lb<CS@h"#H8/GT]&^:VO?SLQB9W:ZFq+p>%M19.0(_sM_"p=8.4X-K -%Mopm_V%L\!TP&-PbpjoiIOYHTbRPFG&<34'<i6;'8k,\h(^W"8+#=Oe$83Y9QU'"OeY8#EPd)io.m#?R%-`LdGQeWd>e=J-pVI8@ -%8@t2&#,Apl)eV*s5,g(i/JURI[`Bg(MsG=ol;EB3e\@a*e7L>\/oKf@6Zrp(%k0c/!#e8\mfir_1TKZ5[t=dR]M`0H`"#\QQXYE< -%N@L(/Z_o5uX_$T1W>PjMQks@fAcZ[]^`-A(>cYOB9>d,=RMls&YS#NM(hcs$K>17Iqui<WT0P.dk2ZpgCpKSDZq07$EGDA_7ZGAf -%I5^3m>D1)S9]dn$E[_mncJW/XR[%S<R>[dd99Mm_PM"JI<7@OmLbWQbp]eE0V.%q$(cD<p?Y;XKXjA8_1Q9WEXj',RAc3dP"fUpq -%/C6Q17MN\)iTI'JfTa_Wot#N@2-.o+W3RlUK7e1.JD5+&bh>+1[N1S=oke^.Zjf@XeXSOgP_#)OD=/9AD9tp0K--;XO(i8e92uK7 -%L*Xf($_C.Kf")IUoijLlc"JMg5[-[EZ9>)<k,+itU1ukF</Lr[Z:IT[*<6DP"at-N8A74AA[,dU0=<:9#b(o#bmL[,mn;,,88>ba -%U"B!(3(0j9q[I!s"cC0O\7IcW!#/;H2<@0Kk/jS9WX#sY5C&gDQZ?_+G9tbuJr%9%-]<Cc`)N<\S%8s-Pb\Jo(,BsA.\T!fFLV0N -%^R_&SW%1RWng;iDoQ&s^G,DR7&PhFOUtuN^R_hLlJXA-q8URO;=X7!'"`V(Nemub!7QNsG$glZ*nL7&2NXM^a>@*?t@%oSen"soH -%q^pMOA-o*Uha`Sjc7JMP;8E-h*,jJ'G83S8=_.R?8`JpYl\]a+8;)4r.!QcpJsH7`aDVC`+b(Fn%]$hp99*T]WE5PBJpC;'_.6.6 -%qmXarmIZ`O:E8Oei7^J!31C,s)(<U%Vt9AgFso+CD>"@KL)e)^+\33^KZFNP`dYs7m-nhPrbIKb4-T0Whqq]=nb2PMc/nV*:JXF' -%"P_+Lq!@b4d_C#Ss7F:&s5g_VYBi!srR1]:jI\X5j^3K2iqGAb0D^1tr+d)I_oXRHGgkFBlcIKQIeE!;s4]"$0B29rLQc(m2ZD=C -%S\9?ms6NO1q6/Cgmf)79n%[t6qrP#!DpQ/TrR$Nf]tOC0mAl02o8B7!Va$gRrVW/.="eJFY5-t)F*[cIo&ff8G.2tL_E7Yfo/HE' -%_"nmsYWa['lFZ*MnuK6</md">r?&,[`Ah`g?GCp]jrku&`Yd([];,/dm.J>9D_M+eD4g1`mi)[tY&7`'45IV4VX(]mIlMq!p,DjE -%h#e#=(sTA(GDGbcc/kGdDuOkSlMe%nhgE6^Ddu=^3rY%]IJSkmg["[[e[IK@0AgU:o")KJD]-:!H$amenLq@ahgTWl^5]P1]\_IF -%Qe-"7ItJORGP5qSDn`op4aV6khp]0N>X.`ik5O4Y'HXq2n%Z2Y[Z)`g];>Q,U%J9O]062^o&Z@KCY!h#h,aBUh7Yn)D_<[BqTZ_- -%bB=)@rpJQO0CKjrYQ"4<?bQ=0S$OdH2TA$Grl)ZDq"O*t2toN+2dcOH`VH!1hn6XOfg#?+c.Wd+M8s^N"Rj"]IefIkY>7>H)GEB* -%_=[Ef=]Z_QrVksMp!I=(QH?LrMrt>NR*ml^F0q<p(=S??8foX^UW)l>Vr25C]s%DW/LIcj2Y,?>/Z&t\9`K/,p@[apZg1u5HM^Y= -%pnKM<LKPO&XnR8XQGu:7-U+`g(s'GRo_QhUhd$*Hnr3SI"0jKHG55"Hp`I6LqXqgU)fNVaieI@1Nar$=*/s8)mJR^gnm3&Q,Nn"H -%SdP>b?6+,<?2sdH&+17k?C\cYFa!Y6[&2^WTDV:Zj3?]YRhlU^1#L1AEUT2Vm@(5"gK=Bo>>D)A1S*DZT)Rp0cA1d\rVufb#5c:Z -%Y1NXMro*7uB?+*>#LMMFIs#ZLig&AlVrp"BDJoL=]5Q96P!?KPa5,Vje(`W\cd"2X3'Y$)BH'6$h<jdYE:aV:kJ)LnF+&',!,'8? -%`jF@dn[P1J>eb`/p4.."CKPYe59@<5-ZgeUC(O0u9Pi'KnEC'(5.X,[lLN1AcRr:;i=G!KIk4I;NSR?*51aGVQZ'UK\p1QH`E8`# -%j`pc?c+u,)iO1H@lKD!pfCYf^FkuM/4anM7+*D\'lh;IZX`Q]gnh'ap`U.#^MK`n+X7UmZnHHW+h:\6LrUR3*NXpO:\#$c#@.k-0 -%N?86HEuMK=Ed32:G;FYs,"s>#V>l=dA2Z6""(3n!^A-I%X"V1IH[55=[aGOI4?UaSDJm5fk2t4=?gkUQ2Ja1J`4,:L6V/>69>8&d -%FgdRF_jVTkrsc<"A_=oXh4D<mI![O=c9L&SFu?l.3%akL\<&V#7Xs]W[$CUiM-iUhfgVOq2>!T[$,>2M?Mn>!`\tCmL^`'gDDs?D -%qZlkEr8[$B:k[^jo"6#"M78^@r7+iNrZ<>FGU$_oJb"UUJu8D>o8"LahJMB%GfkZJOV;c=%rV-hps%pdDdT'+?X-lA^\Q^=[p+5? -%*dHSF7;4]#hgWqas*c*3B"%_'#35etG9]1^?Wm@,q);s<f,(X)\9N.9rW&_n=5+S5I^aO<A<._]^MRI_qq^+S[3("]hT0#M%1)\Q -%Sr2\6X8h!Ys6.0Vk@P0^X*=79__E`$@\H!]WS>K;G`nf1Oh'A!/@YfVg'd<Os51rTJ,28,\W(T<<0+ViIU\%^jc?$>?XBirhV[W& -%q=WjM=8.&L/h[-9,JFuYn(kCZO+,D<^'C6WJ+in<4J\P9n*Jf`S#[&&XsmYig\j&i+,Jg.3kF>c^A")kH!\*cIql1VgHE6VX)dC< -%]=A^kq=@[Sf,&'=6%7+-hDsKVkARQ\^*@a1E-tr0jITQKH"Sre?XCIWr7enp\\2AmbXR=sS_hgihjiNZO$n<eh:_NA3@rbC*ToAH -%d(!.Sg;k,<ZgT9HrMto_fh]%5[\Blg`R<D[h!\GcO'u&BLr/]hZRVMaA-kFc(rTIPr^ef"[Z/!C@1XA[KW"\scSlIS3`_ml]ZhDc -%nK!/l)gsW9o&OZK]RRLXM"?To=.ZG\D0Yg4%trTZp4!D\@OjP'#_Z:tf#IoHfSFfm"@Bcq,ri]MfSFnCa\U_n0&3?QH5i:L*t/G6 -%O$JN'C:"p7]:XJp[rPH>Em-HtpRcaGilH?:"MU_WCu-PAp4k`uRgEAL@e7;_eq1g0$9p*$i;neM>N(9^8e$W:FT%'/@X]h+s/GUI -%4hnOQp$3'<J<(H?Nf7[:pcJ:;n8EeM9Ks&_bLq\1m"&\-O5H97\UT+HX81jHVW(/2GeB]0(R0oTCh"#\\=b`8'up^IGX3?t6!`:& -%XEo7XW;C9R>/P^#TDk5oo;FkoYG^FR['f46,<E^HY,@9'`.rY%D&q3sR*bIpYQ9dl:&d1CA%AUHDIcq2-fk5uOLgFRYdG.MO_OVF -%:WNc9drTkUFgF[jYlU;bLI!WmM>o]J';,1%Fsm6<54AO-s520"5FcP"E&6eMaXfic^]/.n3jqFBoDg'T^D14:".4%6InO$+gDIqm -%$0U`qG%AHM1?"24?q`P(fAbPCZT#Y0s5(?"IX1JVjn3rmo:LD!XQ,oqV#RL?e=cbr9@c7V@q[[AE#?<=,IYr"q#9G8=5VlI?GE$p -%J2;V6+oL<d7OfBBR;ut&a5SO>kaRN[m,b!,2#OVi>jjE@n`_+]NFYpM3>HIRGLQX@HrJ2.PL'!VmH'gUXtJRIjf2LBEW4Qn87FKA -%[P7dIkYBa]:@72Tme=<,L?-ujDC9RKVsF'uj/mDd4Ru3.-DNaN)0L;0kVa+I*Y\tYj5o/O?N'EEg%SikAM-4H7&BjuX[b6\id>s5 -%2tFO2qL"6(rd]4MV\?>rbtKk8i'-&F`]cj@pGAqQ">,Z,3f[([+*fid.-8Q*9)56aa>$;tNHI3M.C[\$:HV8FS'/"MIf'!$"jr8# -%@2quaS!m-m"T&,WeZ52.56's9`PqN5rFB5^hVYEX^YXA;\'(7B(N2LP]m0AKc0a3WWe9fYZ]/;UG!A,;innS]lX0hZ=O?PN+<:oe -%UOdMDOPYnHoUF%<P1OVY4FgQ%]dP]RYPKn77&_aWnUW;R]Q7`acfN^3#>bu?N=<c%qa79K4j<&:.4Y<Tk2N-=nD.mKDJBI^-L]^D -%YP[AZ`C$YQCkN)hDO5R3AXVrK2qNF%Iit,<]jC0l2Z;PrBSeW&TK><N4.$9+?TSJW2?pSDo1,bc?[R3?hR2k-UUT@6osUf;7D(5; -%H=<_pdG&^6[N)t4HQ2A9D0bTf3I4n)No$(s\)gHoc2BQZX*8[a]j$.[B@2(<D;VP'kd?j-S&qQ((`c),n[J9(^u9l>o?Vpd[OYbs -%n@3:G9RH^ZO6aWRUlF.Qqu&^srR*:GD%,_QhoeNO[JSA,c'oZn-_I\k9Z_eAL\oW`Rm3KMY.cV4aN<9a;8j3op9k$Ga&N!(jKh&o -%'n7Iu\>Q.^De7LlOG^f<Y!4fZs!)j52R;kFqNu-c8Uf)L[R!Xbpm,dZC-'ecHm!@\<k<aUQ2(`"AN'7.IMA#%CFAJ^#MP3&1+,Ra -%R31qd4/Q_1_fj\*F*Mm?O%FHMaSgBLU@TJ@rqc<,-D;Uo3taL-Ilc/i(G@_SY<Ku$r6+tpA8\6`)g-8#lYB\?k.:QdUFl#rgCd`( -%2'-.)HrTF9fsoZ>C"Ie'c.U:0muBN(5MhcNN4Pc)FL6[\G0kC>?6AR-c"T#,VB+0pdIjEi6!NUMd1/4k5t="MdnB0Om%A]DhG^%r -%[Z(UK]6j"[HFMAt^[Lmp]??NO8/=j9,Q66^hAsKm(D"TEr4.km)$Kg5M^NiQ2A2T@H3-"g$2E!(gTTJJ]!u'@Va&V3%/8f5kuJio -%61WRZl\jZW?MsQP^(8edeh&V<I!p?_FY=HtfgaC<V6b@NnE/m4mVdbAS%?1@4PnDZE28!Z6&0HUJ%9q!*pI$\6Md$EJ3;r@)M3)) -%h:(oemFh<)ZWFoV\_KfSS@/-*\+9>a9Sfqmq'#%Hp@Ns-?JcdOp"QN3o\K,Jqn\t1@9$G'GW14rq<%UE5@)"7Ik]J5?gu+j(t+t8 -%5;mP%^6SKjIU^g?Y(NhrGOZM4_Z.74m(`kmRB=^1Omlcu6[1<D_rE]9KD^LCc8Lk^Gk<&+lJBE#78&,OhZuC_*M#[*NA:>R>.XU@ -%eF\aY.6`24rR9.0[r^JgqVk#K0A_1gs(iWQn9DUb<dOa5["[7,rsqD"Ch=4`TIjbeprbP'NMFa?[$a+*S*=F?ChuUuqE_3[NMNcW -%5Xs3l7WUDTN^hLFBNc@od:bQZ9h1uCBJ^`G1i:1iHSh0LBJ^_Cepe$:irdS'HecTHSV7oFRsmcBrC.3kA&A3,;J/56K_tYmp!(*l -%dsF=48)glb&dJ:-e]l?eqeF%Cc\@<HY?X*^UJ83RK[FT5rV]_%^SX.>Fk?WWX&irss7Q2ELi0pi42617rBG/=0rr4fGW^GIjt"-A -%,P)U.k#U*o,P,M2mN-i%C]Vj@['^q_s8S).-$u>N0Rn*r`CEgLHRi5)a1C"hDT""#T'L94Wo2g5Bj,Fi#mP_P,Dq4oj@m7fB"6.[ -%K1fuu@mk[W*[,PF<nDa="1ltA]7YB6Q147Vfh>TI6$:&Zd#**=($dOgCE$L:W*p](//Wk@.u!dRC0;XHP(Gjgc[Yugk5+'<>09>& -%N;\3da7Y!t?i/YCC+LH\p\LYqRl<9f,6i@E?L(DQE,Ve9qT"R']Dl\cbKG%0#/?^ll;+>_^Ce0K.Fm@c1@&q`lh;IZX`XNHe_lL, -%fgai(D2mOHce&F:mGh-RR@EFI:YAd[re.1c/$JFUT!GJ?rNT/OYmAqp16]2*M0mD1J%4gK`TR9jLsRBtmmp9\-%_;,=(;nIoqQ1m -%4uR<!Xi.V2I\)_#3$gfMVj,$M^H:a'h3WW!ft7%E?+p8GDW-*04a?pcYl,n$iVQEhefL$'k6?.grYtUMl2N^=09^3^O;QE@:B&:" -%Gd'>Hk-+j;L'BCu(EJ>75+n\@LQ.c":H]iT)p/'c\N^,pF<d*n;_mi<2fbi=SV$kR7)!=?F9;HK)1',sT&YfE\k`Z_D=qfFFFdU; -%LH<%0jVpdSIHiQEhM$*>6L2*Yf'ra*QJXt0V#T]Qm/$D,mt#*>[r8Irs)!\Wo-'^&2eQK7jjb80R^d]oIZSn$S8?-=I&G;OUK-S@ -%l!KH4l$`#rBD'36Ch+drmA4/3pX4EG9E%;kQ@;5%n1X`srpAh77TT8Y1AF$rmt!Hc5Q'oU]n:;iP1R\d>!>sT_%BK<"<?/309mUd -%c1^o_Q5B-oY?l'U*p1Z=LRjA#iu<Ft2'X/LEb%7[Iq$ff]TrI<;KQG*K/fOfaT&ubH26(HZ`Ulta,2)hT7?R@?i@$L?iKZi9<10A -%U.g_'It)P<a$(^0J2e;6Y:om$H+j-2c[Pnr[_`"9`V3G@h7W$RI=(\<`U!Ql6iYB$r2TeC?bZF(D?#+bn<nWhU/*0)=n]8qs/5Pi -%M7)E.s8$O9'E.%irdXjLrZD0n7GjZ3PM_r/TE"4P?;a/jp=X.s;gF[-S5*7-oO"_k>]oStH<\j_83B%N0qOKN5AR55ObK/8$fa&3 -%@O>N1k,4SASnkZ]b)sX<=e4i"6GiN!(29Fc\$pMN+8fu(eg3o%FYO+!Z'oHlI^S7*r`JcG^T>b%%?Z-Vl@7qDBqY)IW;LAu5Y,#r -%/L>[Z1mT+P(nR#Rb/q2;2W`N)c-u;9pQ9H.q\QrT,jZO"26bFlb>VeWI9(B\IVGH.JnloTI8t%5#$`[Br0WB8-N!_IYGm*(s3/*J -%Zfk'?<M4Mfp[l-0cU,_WI7SK^(nOGRdM-pZP:Xo8T1un)/b-buS$$>e6`?99[^G@&$B@1`T/iM[J)6\JDMh#7.eOP>RI*3R;fD]^ -%r,&'<l?F,WB=1JH"0U140_d>9""o<N4n*@+,l0]n:eC$NiWT7c4u"A&+uAO4m;;6]#qF.tY0oT$isEGW\8P]',/Se$ZA^>*YP)TJ -%b7Lq@I$!`>V;`&%>_lD4gqGHHhI$mY7fs4Li3KZn+to?WI?iq!En'NSOQQgO%:3)@c]?:E?\jlOr`CXV(8Bp))7/alP%E\IBh/OT -%F0T+jHq[7pdmVB+XprlEKsG^qTuE(h'Tu.-haHR:3F=?(l_4j\D%l"n/\ZAR9&IiSXnH$d*T-*ImG#$00>3okO`0LR:4@,uG?.D( -%ZA*#69gNr:ErDg);V'LTo2R-#Y:C7:B>12d/!312@C(kDaBce9;6sP[I2BH<)lgB9VPl`1>[LiEM4.tJH;Znu^KPUU]$T']Zj0NP -%p!/S^l#EPs]:7D8o<bH?G'WQCPZl^&&\Zl?)g?RRq?ZqgipWJF5$_$@[60XaH<.qJA`H7NXaYK[*q0-ZYIKeTF?c+7.")V$.EW!a -%f!jt1MQ8@VR3pdb,RQDeYklil9K]X,Uos2:Ph`n:ol]Km]_3l:XS6T3ae\n#;judh8c=b7htQBV;4jc;[h\pDJ"F;83DH(G?H#73 -%-o]5smuk]XQ=:YB^H-WIas8Pj06c(P^"`5h"C6U3cZe9)rZU+_G@-ZMZ`;4JmOQe:C#U4A^/o_TqRo^KhmUtBM_"Y6o!'NM^M5R] -%Td7+hr^,"(qT$)$rr3EbeA$+4Z1pg>?0/_\IB#UC=a!`5A9N?^A'b#f>K#]Rhj#T1jAX&=oW95$(/u`UX1A[+s+7CF(:qV/YC.M$ -%Y<$I<<"1lmI;eEcom_J-df)k%.`'r3b/@r=(HF3*EDEZuhQL+hDNU*OSitt<.>N&(dIB5lVbKr^QggWZ-9IULjBMUgV^jV"rSFS; -%n\"K?8CPL%kVn7qIF4bN7ZVZ<D+!'8TAE8.5b7]56iYIt?-W<`R;s'O^W:/l,0X?CO_G,D?8=[,FL`)G:*KB3,__s'ZhLYr!S?3N -%q'j%k\-LFUVlFb>F<0rQ;HIs,iXW?P.ot3sc2!<!9S@eMEsHaSNK;krn*c3K+8q:eaIV]WG>07Ec;0YU#-ncL^&!b)oErs\@a8,; -%NZ?L&O+o02=4:C,W7?@$.qtljX/EhtK^Pp5[MJP@o&E+IcnUfp`I#0,EpnpU)IC;[_T'Y]efWEX<;?e\g*3jL8lb.<7OG`S,l1W) -%U>f9K[rugm?d^Bep-DWmYFiI;H@\"ieM#d-^3`PT_Sf&[(Y2/10:L0U\%2mlnQZeNmsa$[O2AA5-H/tkOG0dnXo2h\MfL8lWF$`p -%\k4'@j0b_e$eko.J!T:uA'RN?488WG\175VN0A.^9M\G_bopc8EdpJfGLB?/T'&2ag5;'A2e8O>Cp'Mt]i4%("RJiDnP*r@hGMk% -%pfaLum5^a[-Q6AWaeA5=jKuE_?(Wg]s1<L_6$;3e$ElbqI4,M<P$Qirec)$'rPgeA\P?.S.$OR.TSl:"6"Sl5]%'tt3#erRd/6=1 -%pLG*7HSq-8ids[j?KmDgkmL+1TWca0.(d"Hf2L>tQ>Efc71m+[&m<it=)`JNQL&3nY&?JR[mQ;D]MGiBEQ.4^^e0#X;r3ppM&oE? -%)H38GrirH[d&p&>k-ahG?stbD+NP!D(*5V;<SIu]#14L9<`brlm6B)=Pk.=JUYdKTZ$p]e+4R>Q"P+tK<gtIb]Ace$F-*mr$<XPg -%Ac9'p'"SOcBMBbj:\DPc):$.mr@n+\qcI[\rgqX+1Nn-ZK=:(h+o%VW6$@.68sFJVN@H9cS+nb5AV,K`mrgl8Hp26^T7=:"k0s6; -%8)-%2o2/6&(`ZlpWX%i9<N=n1oSu(9$VPUBZ;[4).=HPsRe2bQ`BtOqH."46GI?(JFRJ5\mG_Bt!St10N,fcHORG7C3ZQqhD+fAu -%7GQCem7M`arS8PFNt1f[2XqK)@AGtaB!sXfq;1@;Ib1l_DN7]lWU.N#j/=V=<tXQ^me9%ED5/U(GZ2\ZMSA;`rR'SLl+K]jdncRb -%JJ;Y#)nkt#K@%)'&M9k1QC3(]"k$k\SoHr\>o7:Ri\W^boe8gTW8pP%QERiu^WWJ2^%,BUVhhSWI:R2Gf!,1/r&on7U>f/)-7<4\ -%PBg8PHlrfNFjD[5?;F)VG=\\/V5b(??(G+FJ1a7CnTgiF^5B5TkTKHbpUdp'HW<#9$Gh.eG:%Sg05X7cj1@q<-\XL6(PPX'TGJd8 -%Zej"GT?k@q-!Kco</u"a1Mn-rLgB5;Ed#F$pQd?I;AVZAgd(S=9tIQ9ao/\EA?andoHLAYP%=sra;d8a\laA/Zs::39n[gg:EaoK -%Njg`W-IdS4U'Y&4W%UJU'@Ca_a!/84Hm-qfF^\W/;I&:?ENgRsH.(Rq?8,0A"n)Ljk"/pB$aF0eGB(db*p]<%n6:NWs/+'+I8ib& -%@teLZ$?CXJR`o5SPLnVRM9i8b+e>>:X>R^8b2V]U7'RQ%O-9piZ=>'6a>,H^$FI<'aP-:@[GQg<2aV[ZO1dXjZt1#e\0t^g\B/\] -%(i!$hg#[fIWj.VKKV=l<HGuh06H"-9!li3r\Uce9&E[Hj/PdD]+KF1u+-n;n;n_5>8=Ak-5$6D!T<$[K`5M,^Xf6Ws47a^6,/(H[ -%[(aQZ4l44kH;*B)jqC?FTfdl'qaksDQFW+SgaDH6[J<5Gm3c0m(9;Jl^.A,!+E%n);f^7@a`#UKGZdGRKm6s,9dk<@$ZiTX9''9C -%[V)%:p@cf'546%u<LCJ6n._$_S%QI7rQcg1=*65K>k46&@I?$6q251F)0@UiEW(sj.$;s>S_"P#\tBB\bR@SF9d+Mt:!\SF@KLbI -%)HFKLk[_BK73Tfms(?N'SZ=]DGeUfd\BW)jnD3_BjC%&d"]';62\2s(_\:lKni!GAM)9.kCI>G-j!)/sB&/2`I\3ZuRhIF.i1"KW -%Ung(RA7/8OfR>,-2sH;+FYj8);7Yfjg1@P4&GNYagPt$jlGl?3I=A\_f^'@AB;(qI?CV.r+87^OqkUuMH6L[hP+BC.";9<s=-?A5 -%1OUhL$%Ps07o?L&;7_i09hEbl`/1t7cOKo-*(G8$cZRB@DS&`(o00S<hH%hLa1co2=1R$26+]m.RbiGSK3RSO%3G41Q=he-@dmXY -%:XGoYR6I%Hf&eJP/ihWaH6EK4TOE1*-U1(hT%NE.5K*ZC"/&.OKJ@dX7s'ID0P9Lu@YP=pPPUQs33P)jrpQ5+ITqr4i`o9H\A252 -%&lYQ%gr_tlcmp<(h)21T+dh!:f-Q8/8kP_e@T(YT&IDs5,G#6)cfF_SqHD;oaDBP7h^"*JRFEb\4k%'>8T*3Hr]!sq6>dp-"2^=o -%Du7\'fs05CqRqIB/"Rh<4eJdA/'-2`:PBW>Np[kC7HEKKigY""aGW+9(YO!Q?2R"bU5S=cLd0)1b!\,^]GH!Fhbcn(4==IJ.E_k" -%p;og#!_n)YW\p0fG=n!l+Ps-t^eWnS?J(VpKVph(EOu$aNO%HK<P@q9`%&,!!Dc/r?*oOg1H:<h)Tm?l0.e.NUlEPZ#U(6PY9q`r -%m?D0_Zr+nfAjAK/UdObD;HHF)#:G@6''m)X5RoNsok9AdY(jNm8-/($i$9npAdX#B[j=2X-)b/6SbPDn>_uu07-Rl^HM3n$"3qm# -%<Sg7YHF_,=-kcb>374m2$YRABFY`fq.B"Ok]EE;tii$Z#G$u&,@Nnl_(@PKDkF+4];,g3-`D&q=m;8hV#`C`)4I`IoFY<MG/IoKH -%6%1@GEPHLo)Bu%ZV]^E4&dWcc%HnHui`N3=ct?OojYasqq;r#6CbU0EOqYuI]eHA:D/P^5gJl*:Vesf5@miXOi7Pn=<Q2*04h_X( -%$R17K1>GA4P+o53MT+g]hj"P,Y!^efA(EAR:k8"-%Iqg5l8'N$M<_=d:G+u^QITls:lN"?W\k^:Y2o2j^<R%N9U"io2OaVC?\?J" -%Q-ZqDN(O/-eGWS$`CeD?k,)u`&O6su][-5P7-\HYc-,6EoUa^dWZ2m&C$b<<#pq-8UH5@0ajW7E'H#*kk-KD&%W0)57B1m]@a$-E -%hBrS?)lI5(@M`Lkdc1tR8n$Z>+GQ_k`HmR>eW4I(`bpC-M5aoCEBWWt84/Z0!'Sl(PtJ>o]j0p"2E3NYlCW;3a?*^2V'D[%LZoQD -%KcaT8+@PH[Q,Sslm!5A.OndJp4mKdDl-=$$X6m'L2@34%%+%;a9fBi;`(Egn[[Sn%?F&W=n23mAD*'@%nhWfh'ceclbu(!'I5@e" -%B@(p$Y9qhri8\cs#g$@*:6rWGqn%sN9.sp0;ET[K%Z2NqWd1bZ.bCV3`R-P2_Yu<'eo"ZAmtl^G!9WC2U,G9r**'((6kU7D1dmC? -%Yi!1K5Y<)!Aq(??Ug$sOs$!($;QG*r]U5sG43RVa@M[,T#:RLNm+9u=O<p)j=G(Dr](;t(@EtS3n+S[m?5M=EMDWN]4\?,]qL&eZ -%;*6)8@PaZ8HOVZRB`Xc02fo,Nl`bjAog/9L:+Tko3go([*Llo3.:OdqBqN@^J&#oomN6ac;aeNXp5':1Br,d9qH:,gW4ffhNH?2m -%5sJ$'O?JAW6LF[(`KPNk)IaMiOd\DrUpMG/8.@_%cdbUM`?dm,8FJYWi?Rg'1MLN_I'ReQ&B)@Si0Am2cslHhH-fhQY<fDECjudP -%./WJ*rVL4lqsp)g\p\W)ch=[us763as7MFkqu8\tTq/@]*tH4N8J;=OStpF_!6d-SLI'/Fl[qH7dcEi(Aj?1`li'*_9BYa06^Vt4 -%%K\@nBat-&8J;?E`iO^r!QX9eK:l`L_#qJ_Z8ea,5SKIF+@m/)E>YV\h)bUmAkbB.MM<H!#"Ff[%t^RMM$!`l[^c2W.:(`H?rGdu -%5sQm``'MI$C#Yi=2#6tjFIFc)+o&Ei?$:`o=#M3,5bDRe%KSdc$O>V>Uk(mpC=9sdZ"ik&!GF?l``)DBZD%hI*4b2Z$-B.uE]*ka -%/bT_7Okb0As2X-b\X?i4\+sgYYjD>HF7%H2jkDj`ZH5<NKOs0j%R[Qo'Dm#4OWT6iP9pdTZsi6kNbXan%`5Vn'8Iac\;>jBD;<!: -%kVbG8#N=EViu`ejP<8[RN19(;:Ihs`9(@"nRlu3r7_7Ofho!%I59,?"PO3Arh@1FlabVm&arZ4]PFjo:onH%"!;@g5H4]XA2V(1H -%2qXN'T\m\.4:(s69fs*j#?19q$lh3G(^a$,3!]a:"$$Vn#KqT-$b-!DO%7+(=?ccr-_34&&LU9mJr,[o4pVlNCOHaHNgi!:)95Gk -%KT5"-%RJ-,!sdfF\;A*7Emhll(ccKn0U/(Ya$D[FfiJD%jeR`g@ccZ%4:j*"V@UJc@=SS*k+mid0QVDm4<6;7S*\8,\``Zi++Tl6 -%3r<IS*8IFsT]beq*.XY;DpZrFFD.CJM.)R^h\h0O8Y<][YH)iQr'PtoS,S&SO9CB'aeU88aS)9Ld)lk#f0Kd,!+#mHaoMK(d>&6` -%fKl:h"50)Zn8t$<2_bBfM4sf3W1C<d:p?L<rD:"pI!l"QDP"WK5jm^^6U5kbUE'?H1\9_m^cS(F"/'itJPQO.a^cFq^Vg%5!.ZG' -%T7\82E6]I(_@u[o5qoql#O)MQ-i\,s*"Oc`!s!Vp`$(4)]VSC/jWQfA"QnYb%Y3\uc#F:S:RX6GSgQ*0"ON>Z%YEo$Z@3?U%o"#D -%duu*g!pX2u*!"NqD7:&-KD;Er4W30DO?I=;&C@#UE!U:+B'5#d^%l%H^jGV_LVWY[KnBAQ@fIJPi=da>+:t/%E<(qnB&We5+-+g6 -%TmUh%4;l@u]ljCG:RX6KcmMO-!9o[O%Kc=V>Our=+(jL4@%X"G&\&@HHoenNYK5/nIcaRS3lDQ#SHD-+n>[N0o95RhSDSGZo7&aq -%bQ%#1ooCW-5Gs`j6m$Vn:41K.Y@!m6roWS%Mj#Y<JGhq:lLY!>rVuo@s4@8eJ*[,Zp?'W=mI_RX^3OjHIIZ']gFp:S4o>6<G4E9E -%\C'%;1#7A[manZ!?C^r]k4[PJDXNV:.>J=QegW3,UF>F(]u64I.t.<DKdJf18KC#H0)YpCaL=0mE`pJQ/2%62+(@m,0M]]j+u.,F -%8^)`g&UFr:Og'WK6c.b!5=&qA$jSVN,KJ+,:?2LD_C-32J(lW9W^73bc<j0GR<6t/io"qbI;?A-(I,>YjAqmgL0fg=4-kfJC>DlJ -%T_ieG<bd+S`&gRXQU*<'1_eUBUPLGcPXCqfdHa%a0:Lfs8.IY8#(hNd=^6$f[rR7eOAT3XV4`W,4k_$FTQUJ]e&<WU,a/&9#6!+3 -%Yo!5(jZ2f5%BB-rnfj8S2mH-"V^nf=TX3jZI:8S-NM%uN5e]*<O!#QIkV_EoaIf2_.Fnre9OoV<\ETT[&]CD/Whu^#MAZYLjOfL2 -%&@r(?+M`a,11>@QXZfnFCK`7cAOP23Qg!"O9_BSBE`>p;Frk`X<A6^jq$K0d<Gju47LLG2J\=m\o[87$N2$]<-M&.YWWX,T$J\jq -%7:r7^b-g>V"ZjMZ46!K0)N\]F9\'1m+VNk0Lg%\-=CDsC]88UKKp@9-?-#j*;g-l8l7a/hPAu'a+E:jT#CS,V6t8l@Dr<8/0^,Yn -%AIu.D%*1MdUP"nZ;A5]0Z<;n7KJP2VOX8BZ-Manj-s%HBRkl84Wf0X2bsm;n?n,;QG0;BNZhoj'PKkAo,_ka*<ne>nbIXR,QVW&R -%<acC0Xb-HZhD=D#.fF*9m0WG!oZ*E=fVPp-D>?!%ST7ufdiqc8?^hIQa=pror6Rp#^dXur.GZ$O^XZ?A[+I/Ylm>E_gIOslT:ig5 -%hNXC)GD4#F71UYU_V:hh?aDZUW\p4JUr?Qhder:E2MkOoE,%r`<P0G3eKgqm`FnsN;]_L1H4mOY`<f1LW)^cfS*2=KPJ:ErWu$bQ -%TNlg-3!K=VI!cB!mZ!Bb>c`N*NtP_YjbU\CE]l6VBhg\Jc^o6-HD[bmqQ,agM&VfnE[%]B9+2df"h%,Z%(`%!jcrK[9,;Gu=0[r0 -%7!bS\1Dq#iAI.u)FW0k<*#J2C#8O9O'A2r:MUtfD7Ng<r=-Pp>T&oF)AKXCRI3K@RW<ZIe4Zr)?+[!dBqa$NR^j@b-aQ`(B^k*0D -%-[(XYSqE\-c]q-moMH:j$@0=.Kl0X!l8hZT,XoImgJh.SNe,#ddtI3!#q&#g9c?/[DJ=1ma#Gq%Bs\KiS#Vk7dQkoO;b8tBN]@AS -%W"YoP<W#rK<KUBq.J7RQ=^?0tj_>6\<kod0Uip,W-&I&/HG_ATe^XLe"&:D*q9GXi&U:B_%Y)t'lMCj;L?PmO$LjhNWUPF'0ci&] -%kp8b>C2h`V+\<qu4Y=Hf)JUCg02^PIZ!k#R$+PT+M@q<'KmG]2fdIj`2,BajoSd?moMeaV]lB"d3gFs$?961Z85BhOTQ^?''._+h -%N8(6/"GQ,<a?(jIK@YJaFbRed>9pK3=BOc7I&h]9dOD)o(9a3,];4<CM@1><jN,$\l4tl_G9W_a[>e!X_:rYbOs4md&IktT+O2lf -%m*KkIN@Um^"<oHok$q7*9qD6mm"f*!\jS\<rJiX;PTq/MDuN'se-l=NE`MKn<eNmi#s'=go!bGT^sbY1!:Nn,WBTT&E*d%Hm&`Sq -%TNoPbQ;M@LP!C!Qd:!196+D06$lSP?<QR`\#'6RZI4>lRMt/]^OOGIW3%)"p!\_j(6@*I:o\7*8f_0LjBU,.=)^QXN@m[tsn,#qQ -%a\;0-4:.Oj_Y4Q;n)WW+`!Ns]EgCoM35><Rl6'u[l8@qr9Lp>sG]]Wp]SMt\eN*a5e$1WjF0p.G5]IF5bRq[RM;0'c58:rM3&UJN -%1S+=MoRSFSjSe$!:BdZ3"ss'GC@U4\mOrO!l?$Q,YiqC!%VZ_-esLP`KbOcK8j[#&1Q`oE)ZQ[5m0\He/chZ8.1.72f`FpE7eW4] -%lbMJ\U#Iq=59^%rN*hTK)r2^1l);F7f#1,srZ>WgXt*/N.uA^@rkjjOYRY+`jE8ku<r2ku:8!kR-$B=^pFf+,O[dZ%[9KY2[QPKL -%*^7q2(thuK^c:BBlH=Q%3+EjG$s!9a@m,;=b;2lP:@)s`9AKHhTm9/8^_X*/&E(S]@Xp?@O\F^;oGNS#nFD;$e'5%7':$8[JqJK$ -%37\Gf51j)/Z,iq$nFE,s2^LEi/e2cG0,SCNAcU[tAlo&PSB2PUYG9oQ["C2sHN_/HC]Q6HG)FAg(Uunk@"@h\:P-R[q_>rA8(E%5 -%5^,m,LiE:j[HT6<@Bn;p:M\b1,92`lrMI2=h]ai@bJPO$F2BtWocT2.7r1'nT:qVhk\>`'NX\?`s*jc,@Ri7\#hYiV>$D41$[B2e -%+><p-mWKeXa`;L)IN$mQ,9$I`cJ]SFA0G4M/I)*tm#mQ+__sp'_;H29oQT"MCk$MIjHobl4a\]1aQt_h!=J:>"MS^7YE+lWM`@jm -%GH]nD'sfo@OnX16A#Vst6:?.1j*mDa;A%)[?hB:M,+[gQ91&fM)!er?kr1<X-LP=8;Ql?eCp7Mh6?)90aViKU5OVjP\.9F]/0s_> -%::&aRJef?:1.lXScL,iYRodOXLT/h>-.Xf9:g2(^d4a>*6$LSBEgo5EYn9C2F&E&+&Q'Ft*^k%:3s6@N2'N5+h!PG`hBI`?!nR68 -%(,-p_?b01Sa8)jT"&cnh4Et":"O`^9+sZ["Bntr+?Z.8qRV?L,J3St@5p">\ouRB=B7qP?EGS(4dL3_NYW!SE!1Ns8HY29os0D9: -%$UHI0aU<mV;P))V@DtW>BDhe&]HIlGf=!mEcb9u0bgZ4_MYHj4<<@e]0+Wbe!YSbU?;Mc0c.=n%Dd2.??16]FXoKE6aQ3UeFt/!U -%7DOA':V?%N!L1$a!.DhbJt1-YUa:%\B4::R"`g"iJ]G2?Qkj)>&JCl>`96m'"\K:4FIN]Bfuk:P-9\RRH9VY6Q8H1G>JC..b41qS -%\%n\i^:lO<er<n#7<U>J8f`8/ajJ/%NU6!4$Xo#Yo+KuND+s?drlq=uc0*E??Uo>GE&XB+DL:_X9oQuQi9.ts%o=inUeYYGqY#/. -%h>l,Z6VY$gh<4/\&-4tDlb12RJ&fFhrA;BZ%*m30"l6rl+'cjkl)@nq.QPKiR"').A7[n/!O^i$\&L*">NI.q5oKkSp\8s#?c&Ae -%K^KVpG)MRCqpF0XC]+:dO4!Y5bpO@rPO_Xc9-hR*<l75-]5$->jDB*qf9N2M5X2CG@N5OG5Pf$FnhM`ti$da7Ekk^*_$7nZbWt'O -%rdJr$9-j-%*l*9!"rK/;^GLg*Hcn?Pb#)ukTKA,,]Lfe%2f2&OqK9L[Ql3Q8h+I!_R8qICGi)nB07-L3ICuH$K91YP_AgJaigWX[ -%-W+aJn;Jb\kn_*DiUjQ\A0&T=&EG?hD#7)p`ua:l36B;5p'/RB^\rPeX;MdWSU<]7l5j%,IV/'pVeCk;oq6/B\_eNe"ShrBQ7&5) -%ZEhZs,P0M\W'sjU;jD<OUBY`ui$K?X97PT4^jVs=VSQ#D1\O)LlDoQpI0iehS(&I;bk2)fT]#1=K)W>dn!noYqt(!cf440"Zn3uP -%[_O-)g7Q9i4sDPeG:`]5AHbftHg!'Bre"0&(/pOnIG>d=,=@?;!\%.51f`sZO1pW_IoHG+6.(kEUYs`G)7P5K_bMkZ9&6N4N4(TU -%Nm(r^E/pSq"YK(R>K;A:g;4l_=5t4m)dSA;'m5VuPI*a*niZAVpk[Jk$D6%YT;]&^=@P@G2XX:OPNFdi>B]r"N;26]*ZG,df0NJ! -%:T2ILW&WefUtE"5b+LYTj)CR+(5H:J$m9u3[RM=JJCU514hs?*@"`fo8oWVqrk6YN&8a"Js-iIq%T'Q(g6Q%q+>bcqJBn;p#N43n -%fqV9=$sp$Db=#j,Jb-UNV-B!0\)7pf[gfuO$s/"$Q*$/L>@s$]F`=oFK!->f74JJfi?f)),":N>E9KU(dK;\7JV.koAk,T7gB!W= -%l;OtID+(X=\BLW7;=4^9&,pljbFtm;["Ig#>Dor!/<DO>5^D%GlMBjcTaX5MMZfs)=1`G%NT'gsn$KkG(-,S2d4)-s`bZl#!4."V -%PF(#pmD]oaoWGEXL=PTtDLcYYc'2gf((n^$>G*>ZT>?H7"uL,XC\nG`XX.$(AC!LZ"gG4B.LMrC3E*dP#,C(3\KN]!^.*?71F.:X -%6U:/<7L"p/adPNQred>oTOTeQ..3.3EG)FW+)0XbRk);%'YDbB@c2FMgM[Zl&E(-;],5dbNtHR4j[Zq$J3j!o/R<nGApVsl)NHEC -%oCO_2ks5D7S<^9C\ZcZqH-d,>MUe/C0S4R?TPdkq&+J0s*2$r;r!^.p&-<D]k4$%@aU8g9%16t]g?o$NFP#GZ;;5j)\^:2Wd#2K/ -%d^V>D#JptnU)n>f'%cV7"IoC+a<S;l5*)NTL-=#PfOk=tfh>b^9r;2u?PU<$9L0).j8cd[VEbL`fTsPRReX):El[_tkd+kc)(WHD -%8\&MaL)8tEccDJ4$U!FNRg&e!6Er]3pfBEIX8/>ON]$iaN%!LFc2*JQULAH))narVG+o)$:d4b(R/\&[,iE)0LR4P##Vq^hVF0"X -%kpUd?7ehYW90i"h.(EeJhqti4,6fa8@m:['!'3$(bgEj:*I\mr8dMprW\"BR>9pk^?XsI%f\c0V>iBhT[KV94BE\9qTt:A$%#^4S -%oD[A"7G/mLYrP,6pZnJ47cuef(g"Yt=b?6m<jdhk..\Gem\-$tK9fdP0C*L)%l4j5pQGVh]C?<>+2aV5'DI]=MY'+Y2W)`+?'ZcS -%SK`?&2`eVY&b51X?6b0[P;.ZJ@bgD0A13OGU]'\)Du9T^7MO=:P`YtR+q!9h\=MuhK#HSf;41oJ'#D$rmM4'04ZG:HK0=Jg)gF&f -%=@%j8aWBBbKIa)-nN;GKV@E9F#0Z5:IiMBcK&X`?O2H<YP[B4HQ^1]hjNg?nk_)G["Vc2N?s>\<&EJ=0aE*hm7Lk1>e!cnp*+Q6t -%cc6=/INsd0][LlM5YpQf@c:;?mu2CQ$bBd=r_;@W*B"GF*Ln@M\S[5Ddr7)OTlqp/W<aCffk`m*G4;g4EYEE4V,P2V3%]Hc!)`g* -%`G8&b//\Kl09'?g?M1uo\`_cFWj2IrOR6j"PBi<&a)oO-#n!R8<'eGo)7Ui0$QoU@c@Ea@p:=Tg>c8Ei(6g'/K1.=AIBWm%2!YEb -%a9*!Q)ZRI@EDd!Z&m_F>g3Kr.",N1g$AaL\K,9G\p5O)S&02k">X8tkC?p>-mdOd\k<cMfM'iEWl13XTeB#GH@Wpb4WB6H;[s2J? -%`<KVgRlXX>06hjt=:NmC&<jOV$Um]$JAJ"N0&r?P@i2)eAUMD/S45=;O)@Pu!SbB`ArLkfF/61ilMK[G-:%cGT\%Ma_g+CZ2+C.. -%2C#_<bkm]''1"D<1l,S.&/K0Q#0#-`9c$8&'=<GZM_*<uO66RJ>;lrg!Y"d>)MS<`iTsc):hMZbST$<"6+0=pe^dGc+nl%2L:DOn -%\AETB@I8@"Kd-lGma',?It?c@WHTu1f/HspqX),5'MpJ731!Q=:#/M$q+;5YTV9V9!,O6ZHQ[rSj>lu3OJa>M^^(u%5Ro!REGX+i -%CP0.aiLrrSn])c)0+UT]<_OeO=m3`6>]3u9Y@,0nBD%p*\?HC#Utc"3HO]S4T.s')neK:LAROS`PlJ_/_m\SX>Nd`5a95/:WMG)* -%cQAQY/l9>j&dm9!?_J^3CK\LGb=Eg[?hY;lSi]>W"op(p;MR,2kI$d%NN?@l#.h4P)um;tp8q]57A]BYpTh6n&VN0966e<<c2?@B -%OmuEUH#9%*F5:;639SRkN/YKGpU52ge/j[G@m!Vc?p<)BhjHWnq&I1#ZGcU%&hN/1nKpNH[#Y5`FXS:Kk*]jcY`N\f(0aORDN=k[ -%Zp'/s_b'Y+"L[MX=8=7)XY#%cN$ue_g[t`Y4Nd?RPnU#t(3W)@k?j8^hI)^d@&cm(,3nOl9gEGk57%$-6LA8>>Cd`lQUMM@j%t%g -%5@Y&K(-LG\H7]c;Z#1YMq>QFQ0l^!^k4thl]s1=_f)%U&O(JT$a1IY][W@V@2UFgM.:CO&^P9qLIIHdS/V(LDIr&=4M''Ql^Ae[) -%HfGB89I$YJT;!D8j/&Vj>.>siUTO9g]_)s9CUcak?M;q;RrX.f`.FX0CNmk2Yf[tADt:OnI^T&*/sa.?'E6XmY-ne@CN/DJl]q9U -%<9\`4.]55..XGgT3U]p^)8aO^Rr6?YCn.&BBK7kYaZ;jOa#j(1#?-9m6gCc`gL]tWL,J/lPq5BRL6FD1'&3/dACq>ga9<W*HYMtu -%*q*sp:6Z-Vi+OM7BP?,E$hB$(qiWb$W%k#OUS[:!-siYhJ[RJ>:3X[<-Fa,@hl\MI0EQ9;<Z&.[p>0;KhrCAb%Aql75=S]bOk:i8 -%A(:4mq!QJ%i1GYA5=V">&;a`Um12*n&V)ncAMSbP&rn6uf3b?02d,_UZb>,l%=AP\J&7]E+n4?/(J[BiD\kb<NFhj=9>lmD-bL.s -%]AW[lm_E7g]R_3*p/Lb,p7Y:D$27#E+n)kI*hX!&15!T,R@nuS"EO\6Rlc0I+'m>Y4=j,9./9*i5UY.'jFr#*g1'a)PS4E,1O?lP -%]Yq/,_"+UmJ-OKroJ+bQh)Rt+*tgPF6qHXQ4_LWnd:X9tQquVpN`K3A?M['q+p.(i9FE4OTJ,r)<e\;Whc(SkT_>Id9OI/K=%us. -%-eQp`h0]Z,ht65:@be<jomE+0T<_aOaG`.###,nTJ4S*%DpN\SUCFYkkeZR5N3k*T!Z?Pq,^?:I42Lk*g=>XEJFH(.J"s+fRgsAk -%::]II^Hn5q8,U)26eq6Img=UnEJVZ7Jb2YoE6]DRkoRYW/oE)H8ajRjD/)gb,8-dP:Le2;^U1s_&`C5g3n[.%Y:i\ao!m=q!h$'s -%Of$f'7)/^MSVmR7$u@'4_"[VX#^^g`,.hAK(l.+(LkkglGe60@_qhCI%@&SO;/6Xf_0fdK/\)F@Sro[R]"j8np2)(fg_!%nhrr=R -%i5Ta\j;FA*Al]d7BJ(H9L8Dmg4=AYT:]XOD9LFkghWEd3Y`n7)J-]m-5X#P5pX"P^@GI1(\&;""XL9-;+sLCQ9E?EO.I`"Bh#n8t -%!L_"-'!Tn+\X?erO1tu1gU2#1n#5C8Df@DVQ?puE)n(sHJhoFm<\nd0P2&Wl@R$7-fkgi%D,N[L)mgYOPA8gW,u[.2DICsg9CVg5 -%_FZ#AYmeVW$E'ma?_Z*UZB*Z>p1pquNrSC8b+.PL;],U72,F.A*3*)3A&b7dENPi+kOU%0jCW+u$Ui47`0F]11Xkd76!8/-AJ9E< -%XR<DEpW0"F607bZ`im%K2QrEh"BQ;U9TW2'0<jUOi7[aB2e5C9$H:7B3j@$gjI9%I5iFSbonY`L2f<tD&3[u'2sOmBO*5@Zg+n(> -%QN/2B!8?Xll>;CG:ld^Z0RC*=GoIX8SOKhRGias^T^ufTTO03jrhB::dVbH^Ag49bEis>VN$-495Jg1Wgs0-#:>a[MKB+.!pk/VY -%_Ka/U6ig,4?XWS8#IRLE63u6&P%bHU[WI[:&W(e\qtBboKJ/G%1oUPB<!Ok&n5311P8EFF_:5D#4R_eE#H9o#7c=qtHUdR99Irs* -%!XAb)>\<gO>a>l*gm6[t\q!GD@LYe-P%Vbse@pOs<Ht&#Cqo1E0c9!!=7or;?>C7bE3S)Lp_=*>^stW/pRO$:"i<gLBgd]V1fG.& -%PuT.U=[5\K(nN^JpRQDZZq!!8;$%4!(SH9b_%n5&KpsOT,ca6[7VYY)K'fAcFUF([,jq_rS2KG$UTqnZMq4h)c6P)4F@J[7N*o)_ -%]Um=!RYl^%*B_t1rB;oAIW0GfjTef5#lbh27#Y&#TohCl"'0[l6DW9nIdXVGqLrHQEXL=GqeF`Y+Zd&>HMU#_STED3=&pojpU=#5 -%B!`(H0A<X8a#*pg3(,;OC-iAC]DhTj&RF.>#rC(G&'a[*h_U7=EXAu(_\_@K:+8`(TUUJG+![:E6knFl*e2MC3OTWKX#rMnMKDL" -%C=j0BZt,E^-fa>=b3r)*bc"*0AA]mj/5ZDEmUokqjM5W\GInEjVL`^o$d#Tm."_38HY#7MI;&E<)`[#^1?NVqNu$]BdA9?18-t0d -%[nuCFaaTHAWb/YY_]r,<A#>fTh%)g[pUl^/j<1)AI\o?].Z)1mcF*b*,G2sX$7In"FdIU_Jnht:)QYbtm+5]&Z\lH>(dMl%B+`gt -%[M!*'K$c00/QPQ(7^qAI[R+R33F9n8ihS5`^eKHF(D2FF/+#c3aum+%[\No3Ke;_Z_b8_N(4'eUCt9!+G&S\t+2RD9^hXjor,KIO -%Hh<ZY_@/i7QEjX2a,Q:WO"Y>A`n*6Wd'h&3]9<Ya+9d#6G].qZ8ot&IAS_G+*kWaFh72WC`:%@:]JKC(@JI`6LnQh]l`9BM!P[ui -%b95a1;<'1JXP$1eUL8M(-D3P5RcqEF>4DPk%Y;nDJDZD"c<$CT-EU2/N:<-@I@[iA5_7U@M8^V6+ANdb%KV'l_:]&.+lIgWhEE(_ -%f.QHX[Zul<D;8XQ.0-1l]Ja?N3].s*k?_0[Vj/AmloB5"mKj&TJDYlp./el#E*eG#<&UBk^iBT8R'p#rA[ed3!?>I?[4MVNDQI4p -%)L(=qRt(Q]CVRulVe:X2Z$Z_G#K<Je'3%jKF>C>6S=mFMGL/P`-YPXogJ3pN+Pl$FOtk=?P[gA'lZgo&3-h35UI?E;Hik5%s*F>% -%WD`P+dig%)eD,HsR.HK*#JieeW1sqIIpXn;;ZY'cAd'rp,m/PS*;5i:A(u4jRt.Nq2E6&ai"djeqC$mD"?`u!Cg/$An1Rdnko"7+ -%03pu2YuEeao<T>Ef39juBgX_Zs7'd6'B'P!D8(RM20lpX9heVR2q\.iLTTOf;cPcA4L*pn4jCUr&t8A>ApC@>Pl,0,0^FQfb*7hI -%@taGgYjtgclZLgEG:0PB6J"D20uLi`e`Y927P@(qiA,<a4l`;QqU(B8VkRO9pfiYId^_%*&(Css!>_-7_f!.U'hYZm*DU"Q]fI2* -%%Kj,rF2&gqAq^eO&`f3XY$4F5T`>3R*G'cr$"UM1:]:6**Ku6r"`a#Pp/b@+-1V79!=36]*!0dpqZ6=DGiC(8ThjK`IARn'be!+' -%J1r_,$rl_=dLHGX3Ah&68V4GZMfOFddND^5%-t&j=mZejgLa/\G[HO+T*kp25_9\hD2a7\Nf+%ri)/hBpo%e!efM&i>SE3,fteeR -%1^1=r"N?t7i-HA301e6m$t1"u/&+W$0Lb1N%;?!p%O?d!n`o2VRd^6INgp6V"\MaUZ"ZtVYRk,K"JBB%%g?@\0R#&0-;6<feHp^a -%SV0@M[RjR2`V"@-_kCakmRPGkqK%2+@\%:1nsj6M1_]:G2EhH%P.%T;[[1kL8HOg#>#/Ur^;Sq];m.7NOfh$ZR\.A.;#;.Y<!OqB -%XL7\:ZVeNY[e1!8/J9&3;"7#>),$eAfQo6L1T%R6'hWh7B8\bUD?f)W36*/D>I+/Fkl*"(TK4EPLr2dfeA18`,]IXpo)!IkeNq9) -%R9%(SpC5`Nl4psuJ+l=ZX(o>FiZH'N!$'o0_,hZ<9EN:!JBO3>9C%5#A9)Jg*!S])o?nV=-l+V='-8CoY09]_q4saL+V6+1[@)WU -%R0AtW9'n2(nZH3sK.<066]$U1:nn(2]Ygcs>&"6+23mr!Vc$fU:qZjsS.&okf-dDb3d&7I_tcIZZ[qk.W85o:ppVclQX=qd(L6AC -%H8Uko+2GH+!?A:4X_lm1(lHgHqVCPlH_;/g(3O:kij'-NP24aJ]EP-c5R1.P)8s1El6'[LoNm`J:>T"'"2n(%'h6q5BW4Rg]9Tgi -%LTt^^(*<^A?\.k1o!&$!H<[D+V"(Dnc:aCR$igo:,@o!#Y*Z(M6Ytk%P.#\V#`i&n;E\QI+t@5AkmG\FS.U9=0*GR(V4-!g-2O)N -%2K1d>H[Wk_bN=.>XffEoUX<i'NE7!S<gW1qT#Bf%KFa<"W=+kM3(oZS*n%WEM(c2WX:"bV&0>")37V!,gC%QBDpaY'j]XJd#l+&s -%Ih\%%fMje60"C+o1'jk_WmnTfrR`h:5S1j+f40JpWli5><Si@MCN.g^>G#b*q\6"5h@YK(C9$hFhZWlUkbHKc<hN6m^Y[["+f"^2 -%5Ro$S;$RmRGR[AAEV[2m_4SUK\ekQ\MPDbGVcl.2m=2UdE4=bOU-^.5ruJPi-GWNm,/:169^#J'D\icClb6YNIM[2W)$l$nr"H<$ -%6jjap8:GU-O9jT2ELsOZ#DK/01lrZ`0W?lIP#_5Nba2ErS-G.BJ9/V`?2.qU2'T@AIKCg&@[",K8S0_86%%,C0hGB=!gHnn="A_# -%B#[.d((I'^<mhi7P%uE:R!]OYD:N?qY_0lC$hoao*paL12Y_3D.B.QL?6)OUZUUd&C1RM]MZ6aU*oI8"C2?U:AC]E1$4RcL3K'"6 -%7@15D$#A,/0VV%ajlHu]@q]*%;T/[e_"<"hg4^en(k^U+^OaVI&Eg09@7bd`*lY_?ql<j=9u%?@0eVu])gL=/at"n1QS;hs/8_/f -%TOp-MOqQ;=#Y#?--lLLg?<.&L+/E5AN&^<s.@aa26'9=.'62kIlqu<"pn*$9.nQQDW$IYZ(.B$]G%jS`%Na`oAC_e]pn,%PVVE8" -%iT'6):6)]`:G.9%Zu0_D(9Lg&UBi9OTO7q;Lg9a8G1"%EGu+W_9n9\FL])OXXg8PG)B.g:a]J(6G;sf8H<<54ohfDu/qC<[Z:G/S -%,#eARc>MaKWrO!;.2jKiFL/'n8,:p+:q9\b-jA+t<k`>%rcGc\Ej=BW-10VRm^:Z]8boAjGQfT<'8p;aEDs5h\2',C7;L(?3.R-m -%HY(QWZrN4^Esq29kW"f^.@c0gK"PDKW=H5CeZirf"'G"<VfpJ_[2pI);Cj;?jRUG54]"*UlP*$(_Q"Sl$;pjdkh<Ikcp7Bf>I)[Q -%D%"Q]:BfRSo_fUgQ>JET;Chr>:=r/4cEM[R':-!?jf?0dH)C^Ke,.Zq+4U^^$W2&kf1*5)[5P']?:BUI.D)QlBl^DcFHbVV@r+e. -%X(Zf'+LOP9b>^"N0rH2$KB3CO`>3nh$7Im%kt3b7'HL&QeSeB$pc0W6L*Qhe>I7:_focCDVN[s01ibFWI'?%&W,7`45Rbt-C+p"1 -%[=rel029J&#H!#*WJ?"uFXp+sYSI'9-K0V3(mO\_KU2F@ILcqn"mk^n(6P4["o&nfOr9t+*C>!P5*Q7Pidu+t+N`RQ^h;dc0__8l -%Zo'_F#QdFI9Mk[6)TZ!q-(#\t2ab93YUG`W<X9Wgs62QArq05e`COWQH<1$[`j,uQ,Snk4rcsPS/1k+lQ#l\KJ[R*'QX1aeP\^3' -%07QVC\n57k@2W/?Oc@@qdcPsF5h(6)"Mc@b!ceD.<%#44$<Kij3S,%3ZJ+hXIcY9,a5_km(XPF;,6Wc8ZF;EIF>"*)n@q!g#e-@- -%"k:?S0q?Q[+7LJEOc_68)Yo<l\HS/rYUFFC"3.XgOsGWq/O@=m%?+s4$8t_0NsS;Fff(U%S"#:-/bVR_"B6<_Rg.R^kmuF_%!nVj -%0j\pg+EH:`(%$j)+r4:U1DCb!i^4C\<Cjcg\66;(0!<%2]Y:kg_6m=:=nnk@)n2E"D2!/4[N:%WKAoK8!O[-^a)bc`n\W?d=f.?4 -%jYkq/5)-L=&_9t*75DI9@8!K:2GaMfS:agUm(l$&INa?WQWRk5jVmAB@h7/?L.&hs''V9.A=qpa"G7)m.f0H4+sj.r">b>95n`;k -%mUM'Yg$NjC5]$4Q0:5pu]E,g_gMf`HmqS?!QlV\AB9;-o*D?0#aE;q7rDpqp(7\p).TO:LJV2jt.tE<E9:1C.Jk@bk%^_Z3-T`=4 -%KsE<<M8b)69Bs2)Xd<"L;%U*Wcc6=;Lt7]D2%Z&?[,t)<P9[8;5tF8AV3FBrLC&$oJol0,?W#3aHj/I=,ep>l)Nr.#e;*Sc,[FuL -%XtQKS1XMO`^6Ec$A\pdL*_M%%#85(8ifEcU^6IW<jJ!e?)$u![Eb!5Mj9GQ\RRSf/R9V,/7A!)jZJM'iD.Y4_CH*?9)sQ,ZnI;NJ -%.`qSi9VTYK/]tN@Q.[QJh9Grt-:$:N!0PEiVdpbS74\63%j3l=;$M[T$NAZnFo+4ePqkE`073lMX!T13UfCr&\N[E4@Ee1W@+GYO -%9X"bD`hLi0q,ZjENL7&>-F5V!P!TMZAl200FacPE3*3#0\N3`*Q4$VX@G)!2O@:u9c!inTgEA!`gD6](F,qkK8m81o`/FYAo\De- -%2QaLL3Y.^([1$NhDu;diTFK.2"PJmuU``NE42@#mOXD9j<nh=1BI2E<=HAo(#,@"<malYBnjia2j@`pkkJ!W#.SoVV1JHb#WU.j6 -%4-*)2WqM`n!-P_[6LLu6_+L,i)3@2V=')3il;2dOmN,)`i@SV?kI7H(;YLKuBmC6G9&;)5?Ph#fqS/*e?iLRJ650a3Dd4@>(Hf=q -%_-i=P"rPS";t5oNm)uYRP%6Fro1/RueD#Rta.dRW"`7,IX*b>GO`YV_Q6ZL4)<['R!+&buWS@R[HK6mLn/ajUPCJ9d^g+m.O-A"/ -%AXr3>/IhMR4K^dI:$Rb7``>4)>R@r?j'h\2%Vsn#eU+H1DAM,K/l'k%h<A*T(:f8PY%oYW]LS8ZZ^,n.[e/oDas3@m#4umkVO<"6 -%kuJkZ<e\oYaGQ3cFWI9@eA-4!b&Iga[CpVhat'LdJ0rMB_(PY%(Z-4$0/<Fi/t05d<%8b&&;rkinGNWqa`#r;X@[!IcR:r\(p7Ej -%H@X,bXd;(]IKCt+$*](nY6np3o=`LM]'$t5%R"ap^1tugJde-G0?#rTq6>Q/:g;L67(uB$3RZDli+r&C_].MT63.8]+DCl[jS.5P -%8;!bJ^B$!B!1@*t]>7HNj%D]2[HNCh`lgI1I]j^QIW@A%ZUVI=m64^M?sm"jE"]4k!H=X.1*:a5:rp>M7#a:Rn!t.YAO#-bQ;aI7 -%V5R$qs6(8+=A%5/cQDSmUK!9ukYb::@BdPGJ@_U"ajV_`s$MAYV$C!\U<Gcd)*#<Pl_W$@*`O#>mOO<frk5JE2tU1eKmr@hkeBWL -%lu6E3^nV)QO??3C[fhM\""gha_0'9/>LJ<aYAQkC.rNWR'dSO)Bq3]LNKsF];<PX+%Ora.38S:A4^%t"!7%k:D;-SVmF)8:i9Gm, -%!nK<U?u=R-At(U.Nh)4FHTN7lIPC4\g:$DYqJ0,3NA4P?9AVVM@ba8Y&iL'GPhU'Y_5EuY!X`87.+3$!f)]n#TEe%?R6*`f*Mc:S -%YFsJI)m>6)^d3%GJtt>@!pWn[Z1WIA+6")\s0?afOg%+4_>T0/g:#fc>qj/C@-_E^*aE[r@,ZHAX+P[4ZF7rq[Wg/1h^OhjrB;H2 -%^/mn1jc#2Q/A2_+^B3R[SO#PJ)EkU5']93aFY(>$\;43WhcDMT]%#i_hn)$#RcY/N9XnS'E_D=84Qr$mn&m.6:Z-;B"8)gc^k(8$ -%R1*ZH^,o]s?F`Yd:?18<[t#qHj4-Q^@A:$Jenn=6o;ooj3Y-E+i/Rf$Xr6#3>dJ7+lQD]eLGS)h_q$BPG,uYJhQVNbW$VL)NF()' -%]qp0:kq&K-jc6/Q@o.<*D@j&Kr$Dq<MU;Z2I_LWgErl#4Xp'#W3LlSJo6nV>8p`8$!n\"Xp^*ug9FB=Y-GajK9d`Rro7jk/ld]V+ -%$]E`8hYfIFhY@KJ,i3KIp[t)pZI)!#0.T)fTnJ`fV(l?Gpkp/[ERD@L4tFEV+*7OV9!Cg2']r6[jJ'?3Amm_(,)Ed0E6/^=.b1iD -%d1V9l/bX7bIJ!A8#HC(b=Np7<B2D[M__;D[-0sd9USQ,AS5`DI-kF9=_0Oes>kda9B(XT]G86OE*]V4qjNr^"/B:ruS6VUj5f$o< -%r@R5<]P2(_iY;H'DM7$L'BgbL$J7KEdN=3bh<"nK$uP7'X#2]&c^I@e^$\Y+(S&qI0\EOf7rl1qJ_B)O?5#'5G#-E5m0:&4J_)_n -%(+`*bMqRPuo9#/J[Qr%.4J+1D()]Ep;QH`!=1Q0!H=[\Pn=e'=l"h`3fk+]1.*\a+#Kt+:+'71IV_-qSmO#8C$.$(p=9dd]>%1mR -%6,PFE\@$0WW!ejG]Ujenmd'r!hl?FR+O&dh.+\D?g@AgEeEVVN6Fe+CXJnW%Q&N-WGhneMm?74<Kf3fo.6#&P3=K<VH)4#^h_8NC -%]a*dgg,t&=YT908*Ab$u$(c)#m<g4bK&%e@K;`hNq@s%.L)pSR3C)k=*'D(:0W'(gLec(/B$\13/lUF#gNN?*\5`i?;ab8!;<,W; -%7aUZ*7_hJHmUddZS3KHfBUVd8!>`k_S>[;o1gmN3[]bKCbcqWH6k=$Mlp`IRXQ*Bh-u:OoY3mKlk*["kTF68,BZ[MtHWAkH'K*\m -%/$f)l9%U1&XYcH%II-Q%i*$Erj8tTje\u>o1=Uk:,7G`MlON=1^j2gEm_f[,0i+cS_O!8a`A6nuNfnJ8fe\>lmI9p6Q-ZHV]r#*Y -%DoLM&^6B)P<Qi=")t!9Ah$j0h-r2LW\&1TQUBO_S`<*T$a1HJ)"V[,eF/_84/Df0GA:3:mU=he8mLR47/DY%fM[e24%^RAI::m`H -%-IT"S#0'!E@?6hW+?+C^lP<RBDDj10*KR%sW#Rf*DA3J`!*3'r]HW.O+P*'//[L=l*_@4hbi?_tL6(Ga)S`c!I`7_tdBX^dHaX=b -%K<RjTc]IC\*If.^bhi'9.P@p07GAe`7ZSF3hUVWDMWC10Y9d:r[\`:>[/V2XQ/G@ci.1S"$n>VC8mG[a(nl,*J/tUVeut#G`B82V -%L/bPuN8@k*(<IY"-c,lD7V;c>rd',A`]u2'^bMWs[07j#`W51\;-4mT?pUH#(Va&H@/]rZJu)^a[[Cm9RAuq6WH]C*Q&^[d9pa/$ -%#Ql_,L<Q=I9N@UsPT\IT'gM$UfHl/^R*=+E"]ikcZO7&,="(OX0[B5RnGG_"?lWK$Fli':<Q$WII64BgLOi-k[=LZp01i)RBJ-<S -%'kZ8Uo7T'f6<qNn`_Q]g*E?U;]MLep<pI"2C(`t`5l1M_[`EV9hPBRbR6mgZ65q<S$G>N5"@UDXd'c3%$L_El6$iCgW`fnR%c1%7 -%RK+])[>4\\;VN&l'MQ3Y>d2lAVqBZ)j:sj.$Ic*q3ID_f<+*Z]AQBnXDu>!OGF/An21%o%nX<TCms\gq]agsHR$\GQnE1`a>&l>; -%D4/'`i$q_Kg`pmW;oT_sV@0+^kZ1/*bAoeRcP-B@h;tB.i@N=NC'Mp_."3)YlIlG;2r*%gkAa61p_$9kBbA&CZE@h+'/ohu=BF@7 -%n,"uN&A69WXSVAak8VWS=#O(s/B>ODHiN>$OIM<=S[/h"S5,6GdUJl:0;SpN=^r]GEP+46\%qk[4Rm1!;e1R'T7l17\5Ss*b*/FN -%k?&K1gup^H+8nu0K>uc?PfA!u!4n:3oDQ4$^[b#_pS9V@cSq5EXYr[W0&0U!fEZUEeilJA%Sgo3GpKO-K]h<sH+1V2EMYmKT;`6% -%dk)$C.mEf&>6G2cq[:IbK;X20B2m0]LrNA[`gjJ+,?r9IM);a1iRlF)P!Pd3RJu#O'&[r/T;2/=)`\Vpl^4r-4:L5q2u#LU#?`er -%`&XM\cok.W[CA(sgU!dWb"rXM7'cJa-'"%minpYn[I!YcC8dI_XXnK<K0DE4i#9S%\^@<sF:89@SZ@N`dQ94_\9\XW,mL[gi1>V5 -%"tm<\B"!*#iDDQ4aNQF7cFnAVfet_2o!@1=U,BNI!KXqm#_Lipn&CDH8%Ff<)<+OR/aCPh@;IG75.@*qbDsPaaA?3NVhj_\E5!*2 -%m'pr?F;lS2Cj1UkV->sTlssLYmaldh`CU7gk%sbX<ek*YF2-B;E*746jg;98`j8p"$Y$]nLqMa4UB'T-mldU4!*;<E("p!&luh2c -%eb%Z\c1iF)41f[^m+P_m+Kcg;M`e^l3(V=G"_E67(Hj#bd`gV?r'/X@h)\1=a7hNSPqn'`$gN5EPje^f?l$F1&2D[MeS?KRP5>\< -%!bKO/Z,N3WH.qWjDC%gKh\P"`E%B&4J%bA+:\BLmKtX<X>oqaGdhi]1J:$$2*UgA%Xq=\0E=BSC&70@k1a<1EB#21TF]O&^FK\g, -%]r($.k(^AeDRZ.10ZEGlEK0W)hgOA1ZhDrNmegXP4@0EccOb]k2s8uRgk"]FmPT2)cR3h]Y>R5i4)W_phojuHd'If<-k;\oeYV2r -%4mk7!"h76O75O8I6C/QA>=Xo\X&+@_P;cFJ@fV9=W7B&$)s4P5XS3%-`6@Ok"7*Ur2>2u2J^c!9H,Qh697D&un!P_MdPJ<"eW?Eb -%.\EXCR!J2Hd#&e1)Uf`X!eIll8$%=+'WrJJ;*edR!5&id'\*Be*8nET2)$&6WJGbRUr(_Te`%k]QXYe&=>7%(oZ2"_#JaRNXVkt0 -%c`/$Tb3%IM\_"4&igeE*RaU[30__#hVqUOrBfBumnp<kJbWM5t"Ik#@f$\CO>W[.o1k-Trh.G[1^*?+B:@nX>#oRP5Tn9%jRDq6U -%4CGO\gL6dRs1<`0c=^kgXTRdTj?p`er[6VHF>Wd,:MpjCbp\=r0M>QY-#^j_7\j#>Br^mR#(#F8b')oeC7_)8PFs<fCu7!Wiac`= -%%P-rD)p#i#46uIchrZupY!(!^93'B2:up4n(?_a!gMGsV-#rLEBfBMK8/hcc%P9Od04*"m**c,:>WcV/UK0(F-Y1?(O_mri?bY>k -%fs-JJ$t;8IY>Te(0sJLiYQ(0"-\;]7R+L+E&9Milr^bZsJ&4)gV(j2NGF1rQq=2&Iat7cH+,BSRmF,M'pB6'C-?041%1LIL[:XWt -%,A$Si@bPGgO4qe^*pJ.EQZ@&g.c]ZSW?d1T%q^^9)0U;U-o2=AhsN;`2H2O,<YB"#4.5m]$tKG*Ju$4T)!DY\])EF`_p,Lj[u36R -%TB_PTi)s(c8k$I0^LCnlX$ikoWQQ>*hf\9OV8:=A7\jeBrK^!Kb)K^#g5++!duCk&qslbjK+b>m@T!jJD!Y+#FeP(R>L-IG>l)>n -%J-pIg`Ss3T@bI?3S0Rs)P!WP6AODgWi:Tpgc\8rch.Y9uB^euFEn')TiY2]\2;N,%$HQ!JrgY+Klij+TcQ9C]+_=HV1:LSs\@&_b -%U),Fu<&([pH4PDL,(U(##]=?cCB>2^ke0+&DQ,%GbS';+K.;edHfY(3Z0f(UgZg$IhG+DC6$LFq2WFV4SnRe<&?f:qhAKZ@!YhNl -%TLuslcLm%]B8E"ZMXXn:[Co[n1<[3Ar!*7*c<\</X*-VsbsHrteD`n^"&\Bh$cpKX&o$fnW&*K6;;C6FE<uDdP/ZanZmO-Q/a!$E -%MoGXBN9H*)b90;-q#<WQ'`58T#^f-Bhu,1FG#\i]_OYnX$>Pbb+@&mJQ]8M_o^IG["JG1dm,[`A+$`$t."H9--1\8EnkfCZO+1j? -%;/1YpEaq$/gGW^3lR5acVjZ'QpLoG5**,Z"/tdM`VgV.u+j1olY4,>Re./3J35P((#W$A%8j+-*1*X0-r,kpEjC-J;H^d1F6(B_: -%8LC!eJR'P!o*n+D>(2q/@4Gd&Im*Y@8*aMLCJ:U4=LT^LH8"MC\'6SK!nnjWhR/IW]rg%K</n1QCHnnrRG<1FI7)s,Gt/<S%YoSe -%cCU(/AnjgW'a#;.8qR!AC)]$k^pa&VLiVr"h?K1VX+>PF-s2]Q%F,&(X87!Yb3YM<6;CXhO;mE(ASclIC=i7.$DW8qG0N""H$?a/ -%p(>J*bn5X*KE+';jp:D`E/nnb(J*-H/9dTjFPdXK_Cn`2F]n(@ko:',@5r!a]HiDQ<]Q,Yd5H[`!Ld0$G]1U+C<i`/RIdDNkBoGu -%!G;TA-(1dQaX<LV(h(InoLp<Mk&>\N26l.7:'39Sj%=GhN2s1#+m.uoC&N2Zm+]*g[_LG5BsL":K+-C%nE#Qm[A6"f,<FffZdcS! -%aHVON74ZQ\s3*[UBu9bb3KrUY92XV9(<#;PkXA=HX'XtH?%I0BUK!.L[&0sHhAiVeD>T[!d8)/Ni<&LYr^?GGUkFb3"4S@Df3&SY -%X/1ihr.XeUXj[!Yi3G^OcMMV,;bPD<Mk5a\rBPP]>SZ<-e1L\U;Zj4cYbkV0YU@Z:]_-`BO/di_SV+M'J`=SeQ(^_:H6S-K<5RFY -%<@Rm>BF_%["L^0^FT]Uhmkiu"4Z?tT=AnXSe_6A&05MN.IEn7PGH`!^bY9XZkHOZ?1oK"`N*mFm"XEKm^k4gFpSd736pAn3f7^;> -%]gCI"h1W!!M[i^&?dH4[:Mr\XXlUIsTPU9*]!LS,aIJ&jMtOVV4>ReLDVi6qB&%u`\KT/GM'.YB#0>..:1Ec6g6q3!(%rA$.#[7< -%M3A?1[5)kd\M--C.DI(*".%_:cLO:T]ZeRd)@;;V9`.rS0[5Hoo]\Jcb#;al!d[+boKE_sm4Z9!X#e+>nKfa:^5!mO;F'>68lkD6 -%qj,sO+:ujtj;S/F]Uij3F+2*L1qablOhBnriq\?HC.Vud'UR8`q90uq7elra'e1Mb)[X(0O]cUV,P1de_L?1lQYdiiYSs@TKrf?" -%N;"%[&?@c.N]!M%ODZpZM)4B!p?Jc*I2Ct)-H1+]O>RL+YV\$*p4a?3m)f!AA.7-,0gsF9G*!QY/HR>K$l@P8NAM`6S!f4Rd=hg< -%9AX9?('AWVN9s,ik$&JP`lA;pIj?epq=Dai>V#%/_Lf<CJj!;#'CD(e*>UKBB4,#.JMZ5'MTO@5o0QC^@YWV(*$k#H'LM'tr>f-N -%p/%b%aY72?I&%*&g(>J4':+kJ!t,J.T<KkKA\X6*6Z\D5f_>VjKp]lhnEK"#\`;^H^bLt<N:GK>Jbn`Y9?)r9f54.nP^(>C.$VeG -%3041E7EZN-3CgN]#$J)H>AtB#bpig?AW_Se+hj@4AR*^)JfmjmD&GPCR0t5j3UK'p,:%)Bg'Cd]WU@I[$m;V'S2@VY]OrbXi>P=W -%K-#usLGK-aarl.[q9XQQ3C=]g4Dq\8C+0Ue\"=as1dR2-Aac$Z0c(R!1@LV)nP0)g*_G17Yl9mqJ48H$P!Vo1MHT6i_%8lCIJ<-Q -%kJ4aZ5pQe9^c-Q>Or]97O&@pf\M,tkKim[3KJf.(2't1IMVPt$btt6/"SECm)nfbR<?C9_?6Oicdh\>=h>5,:VB^N2r1On0INg14 -%_VJE1q4&mLCUb;lS0BR%;(Q,(+^KOdZ%T#F@E.8=-%Q)-5)L\uHJ65q"G,VS3-0;rr_;s.dLa-9c7'dg-PsFl(Yh^JTkD%E#:4-h -%@/U!Hp#TEu%K!u7=\hPY8M>I':s<O9_9YW,O6"SK=C'F/MkI?/B?A5b$3RTB3sV8Q!<-9g:1]H#94Z\T<68?n_['j$6qrWk")XO, -%'\.BMHUARIkc)Q'[p0=G/cAV"7aAl(8]PX).aAJdi*A?Y>kD"UpEYk2<gJ]0@R<?(*lYP%+b8$dcX^YjK>YuTQ)R8gP)<Uu-t'/6 -%m[GMfQjAM2ScLSiAf!7e<Pc0Nmh6@TR&Yk8\M#1UJc/2ua$!no!^s9(B2J!>MQ0XXP9_[gFX'XTDDF>G72<Nm,hDOa9Q:F@)eu'm -%DB4"H[bP>/SP5U*Nk&V@=r3W=%2RI4oVR#:$8ZCI<CprEJ?8f;<2EtcWpKs]iPcQ2-!p'<>iVS/?ess.(c%BX201/IZ'F^#7WK]@ -%FD&Dh=+of\11HI*pNpMP<YB.\8>.[h%KSR&AD^ZjWE`r6rFup=+@G'+0H4TJGg.PuTcD7G`u6HR8js!IbXu3)'s#VD1YCb9+I@[$ -%ad*B^1+5a%]M/d?LG$S6XMQ>^>"'4Id#=Wi5j"H6?IRh[R"?3@\Rc=WH\G0R/OTR`$sO5l-qf0*:ff)RL37AOZ8Yk5N'9jc]f+RU -%9K>3jb8$Aifj\DKApBVVlSPC\?r,p?W<-o-RUlj'GnL6%[9Wk]=c-(\`s".KHJtFIg>3^T?Qiq6]iE9ZKpVU-#nRu;]S_).S4A1K -%9'C-J<Z`,Pf"J*m+n4-'-BfZ&m[@uGW3e&5rR:Y+%Eq7!kD]"7\WS:("?;J.V.q/j1'!`i]:m#NhCNGS4-E5Z@L0;?E^8@gq,eM2 -%7'`Q,+S>O(Of!"^DYq^W2VUug#0SR"ONc9O#[lTdQ(\Jk>+M[+)cFHJaQM+sXMC)_Xu&hkqUfJKb46ZlQ[&+6PENR/[0c4NG?;,= -%hKpU"Y7h=Eb7KD#MbkH_#Eu3cNS@Hdj*7.,A"V=/q/3HFEpcCLZ6b[`0'q8B@>=0G(!,pgV,Nna.u7L`*pXqEl]oL==,q;o.Oq]5 -%^B'&AnHU+-Y+4]j]KOq*Q.Ssu*bd3lm(c3WT=Aht5"8"Q;Tc;++@#H?T\u?U$L[B94THoR6=JY43UmYKq*["S_]Ineo*P/'q1q0M -%il(<-#[>8LDpV[H+Aulp?%e,[l4_6kH+(q"6>[;1I@omGB&HHc`UST"jkcCr7h3MX+%RGEofX\OT6n.i%JaK+TURP).1q4%!mBZ1 -%e#;Gip.BEmh=2:@_rrB7Fi7k\3P<.C]h]L\k7Ooc;KHH%!#ZN,_A:HfLKh@G%3J@RoOFts(<j!(S93;pf8Y',kFa)5p`[,DfZILd -%QL#(>NA`Jke*V+8qNFN;3`u3t>^`jLg?sXPXed52bJ/U98bSgo,r:9rMd%[J.Zsi89[u9]Zf&Al*Z*n.CFp5,/d9lBr?d%OHS&V^ -%Mqej`VtV0g*Mp&0MD&c$[sI-Olg;f=Sf:]Dq_V^?SC8LBa1DSYbY&t>.0!sh50GiZ"/EK_44^IiX:,*X!8Te"42n+Ud9[[`A)TAG -%,"2B&,>>9uK0U?Yl,,;$;M#@!"d*-l@655tI,/k90D9_sbSGF34=V.?/^aF,T<-1P23g-+/js81M0e`()Z><#k7-8[ODT_=[rIf9 -%hS6(l-X#*Nk7KQtNJF(eM%_]o>$%^R`0.Br5n/s)V<+RLMg/]qp-'K2!)I)<E)%:6[B!s6EfJk$$T5VKF4R"j@+Ha[9)'n<"E$Ei -%KR^^F.p;G$T%O:O=_$lA+JLWTfrj714#23>baW6*I\tY*Ub$7sVVrr5$Of,Ufelu/D#Dlt).cS\/]&T?n8&'60b$tSrgG'&1:AbM -%/Ha)Mm(djA76.Xukhj1_,\/&P$Q*+B;KpaVJH_"[^gL+j&cOsoQ<BI]Rp>bbX%*k<UY(XR)StIDKT6:+g+6ru0,q>l`NgU50Ub5D -%b@e_U],o8akWZ.%<AA>?f3+g1X_^C6;`8T!%UL7)9oD0B9,-"JH28^=QutT:`lM;]"g]V`_"e:7AA3N/cM#_Aq@lu3!q1pHaIRF0 -%&qkJ*CO?8k]Gj-X7te(g[b-sa@BWN)1K]pg.nmM/M^)6Ri,-cO%1?NLkt)N7&m)!YneH#JS0h!po*hO4gJ&!'kE-_dDEBd19^>EH -%b;S.cndX%0&Sf_ZpIS)F-aLc)>s+6HU$`&IC?k`%nX`1RlIssFRZXT&<KU(AZKud!KBITcO(?Y[5%0JEQcsa9#'9+4f,)>"&gc8> -%P[t.$pjA$>QIF'hY$-'+lO:'i-[QEu&VK7.'e@eE\%iPYE,-@Cjc>XE)^s"r..q=>-hC\^3@I%Z+42aOpA<@_C2,>_8(k^=4qY90 -%TRu]#VfN_p6a]&>\iA5q!Vh&$n55[km&X1C"#=oH\=s3J_LcJbg_'JE:!%rlHg)Lk[/>=lp!tcCc.D-IMsEYpY91sZ#\D@Y;.C,7 -%,%t]H.dd]6q&&($>0NCS^s^Z>W*\8gi2^)e8$$)'ZWfEoX@C>e#VT+,;S'aHC'*s$Sf)+['sZBgMG%dM`u0oG[Q57X14oKR*\--J -%CHXZ8p$dR5>[@Z=DYC#LWECVihb<00KEPGKeTB<k(]YPj6>Kf`?7C7*DTP0roph'm93@IO)osMV9n:+&&l_l=IfNaSB4=]M[YJ.e -%QPH-)/XF$Uhod$P'S(;?(VJYi%q<*<1P:8^ZtQGoOql8/$l>18CCBjm.aN!@:DU_A:!YNMXATP0FSHKHplt5Y.UuG'[FKM7Z'kh; -%-/VMDFDg[M=ct;_@MIDKjsi]*6P,O7%%]51#KdeUShCD*kZabb2S%Ym"CuK(`i*#&a]]Q6Ks4\F5un@P^"I0Mq5-i/Y=p:NRauR2 -%1.EZ"?.UU.BZmXTN&&fGf?(:`V3&G6%6j3#X_sf3nZRI:Vi9*gH_S=a^Oh[+`)kTb+&*J!_Jk=i'kTiVq+c_?GB9+jBm#qW&%cnH -%^lCq:-o^'/*PjCj("86'!bF&PK(P$`GF4_%:Z>;6>TLJok&IVAKn2n.2G$s%C;)LDJPH%5;=ZlBmm.`CZkeYBbi%i[I_TI<[QNHM -%pr>76@#[;Jn)4EMpNNa6oiX5R=1qC2]"\7jr0[?K,8dG-qWA<WY)9V:oUZpnJ1P>^ln8Z6aNa&j4+YGb`3t:r1DVJTPP?QLU!:EX -%CtQII0q8/5j,SgN_PV[Ad:>3388XQa!_@Z*cqkSGVO-N69..@Sj=S1lFlMt*!qNL2iD*fmZs\[\jp59*QtukPc'0-?5.aP:jK>n_ -%FVsQ^qj,KhV2C%^EQKP1(5o9!,s6e?jDEh`dlVCi6npNA%%q(V$hW]C5<g#t),C3rq9=n0p*FWUQP#9_(i"F$(j9<Y0p3M_T_jB% -%"a9Z`G)rge(`g]*Z/dr,Np)GJGA"o%!EXqt`&,C[?kB_?/LF##(.mr*:KVEk>V`=`Hs(ZR3seY;O/5pIcf"/C8!)kj#-OBhCB"tA -%,h"EmZY/+(!9BA%YS:%Ej1a*>/$jE7j/+`2$,6TSU]?d>V/9fcfbq'6^^;uRDh;J$nBTOahh%F_`Z`-B'5lk/'3Npt-K)to'3`4D -%*^)aP;/annd]h\7DF?Md9H2+Ndn<\)co-d-jQd"0n&tPc"q#Dm2)#7n_*_?49hEGW$0RhlK)=PE-Mp4_"u2iJqD;k>/"J]1bS5"o -%^q+EqbYAM$Y\1^5J@=3r$tekI9Xh9pm_K%*GB4ha.o8a^KS6if>2\t>U&2&>*5rmDT]HjXX?9=)-]Z08e>7NApblqWNCN%4jS?pT -%,AY`%7N$c'd%]Y`.<^3*9oC6)iXIN@?Q-QsR;$Z6[*Kf`SWLY;4BF[:'#GRN1"Oi"WQ37$PA0o!."W4Oa7)k/>T:1!!WE,gQuAu] -%8nMnIn$LQNF`>+5ai3W`-R7S'<LiGM_!t:SBee&8al9P3CCEa<r6tIYF[*4&CT4f<4V_+o=7Af^N9deBM2Ehdk,m`c=8**q6Yutt -%pg_Bl*gGQ7J30`NPNoUtWqcrq+1kF/adGG>"@Xe+9=C^SVe-q'rkao=?.$m4UnYj9N7U3K5bG_QK<=bP!INU"#id3tQ#nX+PZD?& -%bAIO[$@Xf8gF'JNdr%9N,F6Nfc&&6q4@5)X/k"JiT\L@m#NV;EAHR4Vb[-m`kNg,Ak`b'n5364)4XV.%%rh5O9:r_WVol33H%@fS -%P$*nT]nZiEO=fiYP2MBLn/+CH_"Erdhlk*]>P%J*-o,JGMk>VA^Ygb>7.W4s(p_WW2E=c\)n'VL0Fpt!5fYa-AY5&2IX7f!VPI_B -%1X_LNe(::r13MtW;oebC'V(K4Es'`pa,p%TmXO9K3(XNi7f4SLHEPGe=m=c"(_knGZ7nl&-V:#5L0*'h2Gfh!\0<fV8#e=b%k;n$ -%3jLaIV/R1p6TO>TA0A:*JueO,?B%VhDe@mJ!JP2/-oa.;a,hPM9V^r=B?oW,H0YG+!NJ([PAtBK<8[MA+$_bQF6lQf%S)q7ju(i[ -%MI=4`9i>fN1te+SLB;o)f7P'12CGs.d"'0!B#\RoCN,GWr.;Q5h_r5J:1nlQ8LHobh[\MPerm)E^*d'=`\0Q%H&Jn%*E9M6SXT2V -%k00T8k[0QY-MC[\%uk]EC\\/BTkMYbgbL`#c_!"^k![-"/7*8[^!YW\G:M%>N-d1G+qN6SCCAmtga-M+Na%6,L^@gn9frZ*m;e"e -%rfL]rP&Y62S\\KmKd+j%5'JBOmG$F@dg;@,?[+MZJ&+4$8R<lgCqEmuIb64pW(Ur=_dR(g:/EOk\O@ec=ioiu4Lcck'HK:k0mc"B -%rSd=iN<fE^3bGg)HbiI$qb?7(SO7"72K^Z6(1`q\k,)EZDS-5]3%^#@Y1N7VO"?jjk6[`#G;LBH1Zgut7.5,S^mT)X.pWVH^C/m5 -%GJ2"MhDu-*4hSg2#_3NV]TTRihH^AM0]T!$#/,h<5.=5P4r@R7I=Z\:"M+)gDVAdGYGJtf"t(M1(@g=LqAkLPV"l$J?].`!Rft`H -%0CEuEMj1mj+FfH6(&LU.YT(K'?Mu*+BG-)Cc`-_@Tr8s=OEPS*[PoW-TtS:)LY\(q1-R".bW/,u'q7P]*o"_pE3-C991>=]T,*br -%`S@%,*Op/@W-ZY+s!&Ze`@PQt>8d$K1_Xl"-B*`)oI/1F<4#qZ(=^7)aCP-FDBnO71/_5mL#kfn&*Bh^lnCCV-H8;CCdsO8[3-), -%W1"pQC'sFLQSUNCeBfC/&4nD=:3/*oLObX(7eWlE[W8'hRa^[WTXn<[$#7R1MW2mlQ6c.(&MR'8I5Sb?hFn+6pCa\o2o4rH$`l"K -%"=L2:%%HFlcU)-lb)Fsd=\Ao'#X-\oQ@!^7_$nOjGYpW:Q=RokU9lV.?<6qN<!4'>dlrF-$gr)QD%`7e)A\k6f,@-eLCie8Z@pgc -%BAmhbS-p(SMf.WC4D?DnB0%sg3G^U]0`l-HO*<b#^g&uN22[T@@t3(T]g!,:>UXl:IL&Kf9BustWT./e(HBE)co!eC+bsi+;@f1! -%!nKjAaHa-N($jS:qV6:K1"8u_!^QI0n.F14fLlcF=i#j,iEWuS^?okJ_hl;bqMDa-<&44=,QK[`fK5L!0'!]C_bgi`^.Ope(2JcJ -%nN'LM6^^heD-1]6lT"bF(lUD,q_r=62\LYuNtFRkDr/9h#0R*Z$jlKh3Y3ulrk!9KFjFI=OoN?e;t&/Bi+BLA=(H@X$gu;5U<FaT -%(-g^=eZ%joWr<k!'iFk"Vn]FgAu-$Y7>TUMhXHE;pgG$nCD7!%S3o_#>$a&TW@a3Z:IS":D,&1(W!/kllZLNf;<rBa$:d/=#$@s* -%A<@SG2FJ_YVR_:pa%DHT:!$O*]_gWW:(j;f^gQXiL+=N8Sue7G+:\->UkE&GGY%r!`jabsZ&W)ILmu0&$9l.aiKSFMCZ\ugAo9`$ -%Zs=BEW<7$"RLatsgBb6upJ;++J3@ApW:.'%bE;3Gl0YX?30Jq8E<f,e=a3dMJ%=gh$&sQ,M#9>9&gAh"@'\K3)]%h%YbVXM?rD7u -%UL96^oR%DJ5Mm`YAXLG&SoW#KfeO$tGQF=30PPqE``+^qNPEM?B\6&g=*m-'5DR3_b1##76'PE/L1Y0`8F#=[%C>P8hc65u3Y5B' -%]2B3@gfqr^1)M=^VAOXOFuk`X`'E+b!G?RRpH!!9;L@%dn:r&=WT)QaH#':&5+,V%p^CgW#A&JVkb1h+3?9I/BI1KKp:qR?BV7#h -%9_&hmRNbNA7NAdG%mUgRWFNeP;s@u7aJ'E$KViDP]CR\KQ">^i[Jg):/Ko#P_G15qILd+poR_'E8OAe>2O>LE\P(##7_^s`2c"Ka -%YF)Zn->.J8<YCkZ[2=/h:6fNg6]j5hR:`oa<FWp%mfSs/,7F2Ge^0iFnC@VfXehE&P,W!oo*?QO80oPr(JD%tbo(q</Y`dVHU%U* -%Pf0[P5i;3>.O1`@8cfE"WtsH[F4IA2G;QY5M,t*I)5,!$CoH"**e<+`MA@Bgo;G8PCMF#CelOQ>cD!8-K@&g[)EeHd=]s6+3Vek$ -%jTTrG)[2mDl@^Y,nM%1M-r!g07^Z-844=Nm[)_*`Ub/R_+d^+bS`q]K!]_phabMGqgTh0rFK:PN9h6',!jqcJlTsYU,Y:I*%34?Y -%IeGCE?j8P9p^I6c./-J\i'c$OPCW6-<7"prHioCfYb(goEjSWApF#H1__ihARQ0f"';b<Nc+.eI>>N(o;_1b#^c@0NE2f!l_"QV: -%1;qf&0\9eh2mi%o#h-0@Nni9M[u?q-mO<bD':ZUeSubi2m@B]r99,G_q"g>,i6D8m;GBI>H7q0i(O27Y+S;:VO(/@6:8hL.Pp>!Y -%:^gb;<=f:Gf&I5b.NuS8C`b&eF^*t&TGo6Q%0=M_XoH``(UMuH62'5Z?lX*%fr]mRMREZ_r>8rgfDQI)?GYqZoN-8hfl\4j9>Qg. -%Yl2h.!cR#(%<&XIi@WY&q"%(nYtH0(`7^1>^JRGK7lBe+(P(qs#Q]:JGWUjN=LZmP3u2NlJd2V/4"Lmm&F$_';=Y&Ur8I$cpS<i_ -%W>eHj,fh$+>OU2dO(ced4%:6q`_3C)N3rl/Aq8?YO@mOZ]@!lP.c_bWiLZGPm4;eQ9c+-fF2m&K!i@)mEZu/*m?@k<4L6<emF7ai -%pu*!W(N-/75gcT^%BOm>%:$7%PmB?hQ#sm+8B\_agIr)KPYf#`UN6MLL&60_^ld/F03/`FOH^>AJ=^TMI#K`d[<8GT<Y*J0Jjg2n -%dL"V^(,^XXPTK0'H!aGu@)3_6_u2J'=qL6_E!+ARlNGp%3sEprL(;(JWD\d,k2"c9ICXu70L?]!8uhra&-0/=hR5\3>+kLqNKBAW -%TYN]_9F&W_@n<qU6GS3D1-=f-)]6OLZL%q/+-A_]:"toD=Jh^BmfG]H!-^L.UW@EP^;OonZP`rcZA.m]\7GiYNp[`K`R]i,1QWo8 -%!P\S?g(js/[LQ()UYJmioo*\69"'3Q70'[M';U0J,,F#N2RT:iqMjG/(h#AY#.UN#0-E6i#dO\gQcN\)!l.><+N^+>;DE+@3@Hl& -%LoYX''c>?#W5>,p#g??.$D)6Mh_U'ki7D$2'.Z0_32((#EWITH8t(,_N\upoO_.#gC+lnijAj1#1Ec"OP$#&AoOKe_p#'=a^/pM% -%4n*5%"d&NXc6?7p')@:XLc5KI4^%MJ>)%PXg&(7!>`uP:I#jTV`/5UKL;k(L8qbn1mVVD<=>a^dUc3LZ!g&6,O'S*G/XX.sb:Af) -%f@/Qs2]^??O$W1O*:2&gnRBM1+6pI<7Z&ljqcAM8#^VSiW+"`q+NI,o\88NAR.1h01.To#2WJEQES[Kg`>.ar)=h:gfnHm0HY85W -%]g_A)++mhYl&0mcCWhZ7Oh4)Uei2[<8A:oBr$QHD9F+6"!EO2PVr\fD%+9;nc`DXiR,IaO"Z)$6Ub388'&X@n-F:`gb[J4Ahi7+2 -%MUV^(#6h;6)F5Fq^j9,gfn2';9A=c[]E5q[``FQjg/;Yf#H8Ck%*]&1./27W09J<0_AoiE]itQ@$m"[9empV+1G#C0p^"I\k@915 -%>%K=HM#Y3P9Ei2_oYJa;=j%jc>?25rhL5U*#c2f17ed*\OZ]^r;;sAtp7Pf(<o$@9E_idM<7l>?'N[D';24\V5^IF.'#&oiB&)2M -%acik76Fn!0>-9BMM7S3fbbPr'#ZAMa-isaWN'!L@iPX'OF#(l8!;`I"$l%RVGAg@_X<&p\1t^`ID<8Hc0mLDAU9lLKU__U/J2f$, -%h4,AZD0*G]gC?m(lBCU?M:d%UX'L%/pi5`cgutXE/%<rUOWC+$\.0$BjJ/^@"g:5B?j'Mmk@;JYZMk;"Ko@;E,YutVP0?qu)PIEc -%nblnUBtkak@EKJh0+dPkgWO3K;jb.X>[=kj3Z'<b[\%Vb0R\TW?60XNKGkO?"5f,I*d/X[QM^KCaq[M]^9lQ$4YR>-DmkC%1I1K, -%cFAqZ=hA7'o"NVO&X-Z-f>>Dl8iD!bnJ$-m5`4\5>86O:e4bn8PAF*VfJO>P<"'20qd>aXE=9Ao#9A0T/'El%FHF-s=I3l89UHU% -%kKf:hCm-"^#Hsu>7p2(piPYLqqQJ"%-V2G<@a(ps,&i(*?Ee[/nE?@,o;1^qaM=?Qh_9LslOFb*!!^`tGn6Q?FY]c]7u&`5gA1h$ -%WNqOGN&BKYljd<9m\\QY3L@?p`sUZ/i&0k-%QP$=T5.)Y8ff<7J6_P=r;8\.V60N>=^q!%'d)B"cU5JZ@#5&bSoK5gE#tq^hU?ba -%4cCLe;Js=,TJ-q1&uB=+UI<Sp0[uO$635Ln'4j`WQAUrN$fKo0Dc[-eh9/EVM:/t8.ahG=L[C3_h7l<`#P<op&NfJFHq4iG++4Y9 -%p"t2G;oC(#?;hSXrgVjf3ks\Fo1,F05Y(0XDVo?"bl64XJgXI.oNI%94\eaWd5ZZ05IS8B.Ga.e^ut1j>$HGW!KA[T^#&r@S6*ic -%!dEJW#7(9XZmB$;oD2X">c8+^rRT.SNhTT^]9ZqDKtQ,DDqCIHXD&V-pg!N<Gh<?A(9r-5fQpA7BDOo0Ct7h!^l+o`$84^!Ue>D% -%A&&cUIM4scd:+Yt'L3n,N7Jn:p2LYeU6V@JJL+=@>WL_V4rZd+g'!(#meI^YI9MBa>04-NPH.paA@Te1-_L`An0%Ir%]si]4tXSM -%r);?9m`-A2s/EJT=9CSHe2#b3d^7`^EXW[m_5NC2#2DT^`YTB%E;Kdi\dY4-N7.9<R'3,LkL'!aTi5Y'a07a3CWd%>f5;LF,%tq6 -%!m3L[H>s&m8/LdeCQ)2poq4S76%Q-C+56!FVUScUBZUbsa1+/dAD,+P'mKkPaR_.'+Qh:PfYH.R'E!:m5`\b,\E]lP4oL>NDI&Z0 -%T9O.^-YpN^UX%eLi>?N$C'*D)r_]\2q4iK2b/q_2jA=?%UWu2o*`pj;k_!!o7ZiQHP?i*"\9I6P3)@An47'[fBPtEX(UI9R>gV.+ -%H:EZ2Lr8j4YTC4:Q;AUFLZK?L$'ZLla0@B;a)V\R.&V'5"h)WVQk$uA&+\Cr?LU!O_8tZco/p-jbq>U#RA'VWeQ[sQ-!*-(6"Pn1 -%YQ:oI"LkjqT2WOKSU_:m)*Kqb_J`c0P@2.n$uJ!YXP0_MXa^!K^M*^iVI&RY"?>Tg]e*m@$oV"#3%(PTChMl'YPiR?ai(FL@\&]- -%Y62=.\!G[@J&"TFTkHnMWCV<,>ch&lAq/]r$',04+9r&-F'(c2/\s<eG`8<9=,[1lNR9-N8n+(rH3i_R)A)=7.iLgi5D!7^q1F3\ -%Yq8=HjA?iF,7giB+;',HX:_P,,'gMP@$8hai0H7b1bPf8!f<USX<M>B[1TWTi=Q*kS-K3BpTB-T+7AT+d[ar+WAu1)C1,=8WAL-: -%PhSr$G-%7+Hk^EX`uP!28]DV'?*7S'mX*+lN.urd0OH@dWUg+,7rVl\7>LJC^B$VK5Fu0&1Z-7=,C#M7l8NS-gHKBRNg&lVSR2?) -%!cf?h=/bp@Y?O)\FK<28L^N<qf<fH=HZ0]SV$\nlmd^"ZG9)L0#.G9BI6Y`n!Cjpi27Bf$n2+l55Qf%\jf5FRXd200^>B'0UY01> -%b2iYcLG'I"ZrJfVVKU[+J\iU]TZdICF:RI'^W430D$`,""h#J:J1\k.Du6-hH?90@O9NkTdKN1r-K(?&lop$/+3g,HIkH.:'<)4p -%\7lJXF&B`cAM$0U[8bk&PD9>*f7a9S&Eet*TmGGpZWdUm;;[Ee\$jfDK>(2IhZRoqD%@<,;m(lhjB_150EM_/qu!@q^b=9Q6@nMS -%grHi4^%FsRG[9$Zjtd9W!]2""Kk158s*`,kqX91mT(u_ljCL##4,a^lSo#!$anb0]66;_87hJ97%u/&J\F;t:<g6K?E*dJ0_dugf -%&"&>M84tpG(<2epo\)hnY-@$3=arq%C'Q_=lN.Jmi/-N*"1TO>e_upL\-L4X(1N^h]/4:A30@8sBalWsFp@oW`Oa+WNFi'?%MdQ7 -%e*=d9GXd9e]Rn#D(5e`7Y=S^Q7fuPa#9"Rn(57k#6[M+0R5DM[7N(tDIQd;s6o301@Z-co2-B_7<0`3=CkiH(]<uit%6E(2]W2WJ -%9]F`:Ti'9<rfo=P.-0Hq!/+j/UnS"%7m8^8Fe]0\Z3PteXC@da")N5??1ia..i?`gUX`a+aqdF;KcD=MnX)(N]R^f.DO'iH17qlM -%KZHE'Z(5hL&4mW"E:Lro:N?M>+r*KFc6U_AaLc103)2"HKSbX/ndG`CXSclUe/c2+'6t_UgC!)-3?ePm^qt#/B#^LalR&ek$CZ5S -%n.pAek-\]jkWi\5fa..DD+uZ]hh#U`ICM(9qW^\A+h18g(n"_)PkCK8^cWiT6!9?/]*mm@4(DM"]'br91FX_7q@pTUF&;&kjl+$u -%pgX0e&hHW"$k*BLJp08#/1`[lOq5(e!$3DM"@]JGl[nT7VJ0ds-,\]:6=$?qYZ"`n45K9;fIOF-'.@5m5O=]iK-f=oUtXTO9Yi/9 -%Pg7&.El$RIBf-h5OFV[&_i)R7JkLQn4DBM%5oSD""eX7a$NBcBj(#+%_^cP9(T.9NnUUq^2ZV.VOumqZfi-7u(^F[".Km6n4K!Kf -%#LF;Pfi-C'Z<\:NE@es`Gj)\FF8S9:AAm]A4^7b]`2o&,.mc/`,YN%<->)co,^!=SK[kZLXs=BZ1(o<-8]hCl@FT+2TV$</O(<s6 -%9)ptiek"P)JER0J/>k(Up_]<F;,T>g)ppK/l=Q('M"s"hVK5-Z9l)a\/(\3al^b+SB-<(?>I8.@Sf=&%TB9L?/_A(W5YYi8$\`&J -%R$&&G=1B(iEc0!"C./@nOT,mqYLE7]WZmIR9gJBElHr`':s;_qD7Y=?_Yh+[pgOY-i9$6,E5Xu]7+t5O@)S=S#/k!&G,gWQ@l]/O -%`lPQb=lNRo41)RgbK5jb.iFSm,&:R@5\77^co)'3,(_h[&VdeA(#9VtaXH(4R?oF<NigGK\?.<sn,VT/^qai5"#,t0<Qk)BP7?p% -%Z4n(>(,Y(T6bk0^B&jd":oY8K:tpZRS9,_T->Tg$#J_"rG)=kAU6%^[,K`.uYEVP(po:Am@/#W(0#PIaAmm"[M)o*pg;M;blKd%A -%!G9`&6Rf8a8eRgias>:<>MU^cUXUKb\lm;/@FP[qR<S&;i/Wd[fYOP>$?6cqN`@qsMfsq:#(;1,Q'f^Gj?e,H[\ji@fINq8%0ZX; -%7;[DAEsJZZG\gjQ<*++4fYi`S8hP5Jg&d<gWO9IF%cc.($qu''/Ja"l#:_^a,U>$B/7bPQ(Q>=67<XWUkutPTd#7BVq$(^t9mD&Q -%ZQ!=f7kkp_-oeR$CFpD=Yd']`#MFa]5>Sa>`.[5pfr_9(.,?ZLMY2A_!T5%'(uI^-VJ3HX#*Y7Y#nRY6QNY&Fs3UHAq"CYk#91<% -%*d9ZI2mM`k5l@5&!#=UK`QCLfUE\Jd^jXMG@Ga.c,R;e\[;.@WC;$h0%;I5b-"f!fK!hVL5-3(e_g\J5@Y(P#?"g%0D/q-u=&6SS -%ILdZBi\K5m,tGAIH)VY]Y&U*s]VhMtXHsIaa^8\#dq_")r6cB0TVcel2?L=5"-[6WcLO*kphSt(30kT2>)s*Wk60;$0,2W.I19Lk -%U[0XAEN4:$ln#bq<BV_Y#I"qE+^3'XM&Kn?@XVRJq(mdX_$#:p`4f3TZPj/%1`\TXXqS4C[l%<j5V<nelgn?--41YqfNSPd4!,p7 -%:M!S2>c&rB;+.L<-k'\maH7R\#)$iaps-Z:4EUqI>V]A3kiu=K3*tQU@5,P!i[S>K&5)[7P7Z`t(U:L$oq]_`b@StnXI"o,K.'ng -%+tMM)E>u8ElPWdB24:[lQ;9=K#8[]E6GUUeBE==$'3XgHC`0*IT4.YcP"!lDP\F8N,W_s+fk3X5eWe&69Li[RjT.i@,b1Tk!1#dr -%;[!GlSL);Y`1le+q5(C)9)o63oO/3I![l&D5a>WeWs%U3gr\SbHe]odpI"j;4q2G@'N".3(0J>W%_.%Z0q_\09]Q=.rZ.Ea1:q:P -%BFS`[9JZ!rL`i_+=LV]SYoKD/g1r\jfDa>:]=HG](/PBiq_dh3Q4_9*hIhT?0+eEi0Ir8I1I@Z;;/";XPqUo]:.]``f"A\:3rheP -%"m6_/=WkECBZe+#++\9e!`-OhI)QIu6_2i3I;onca`_'HY;CFHA=C-nZ56MY!lM4dg'0=<ZZm#SYY'7ilRL!_^A]*@4ec$`,ZBoW -%`>'WAD$>9>llH0D\Iq($G(U7gKXE/;a=&/d+U.tk`(91$h?,->)jg,d-M"UZpNj$s$Y1]Y60ID4:cbQ!ZU-b9N"j_Deh@lp1rF_R -%fB`dCT'hET+$oHM!;qT!Qn10(F-Wk/.$f!W0NWit&GCe)37<s'VC@rG^0V15c.7lKXS3K`49c;^5Ol$c"3@69e)$fDZVh60!EKG5 -%>DIb1]b^"lUj61dfkk-e"Q^btW9NLXd<&p5cik[($h)bd,X9B*QF$m/S0I?f#D>2],J7qs1ae/\$H\a^=L@-ON7l`nb`Rj%8SM8( -%@^6nL5V9VF3pHi284'iF<8<X1;cjJ$>YZ'PgV:eA%Yrc\C488p^E6ri<;cC\W@7;^,FJ1HnjA:b;CtYl@>_&=9n:lk8iHd?'TJa! -%=pp'RFPSimEXP0J493-OA(?rBJt#A3Ys%\JCZdT;G8cFCI+Cb&._C0T%t.3!YI_MJ_+ZF&0TO9U@GOg8Q0`su^39F>\OIbC2a97B -%XLr<.l=_'@k?c^DSpu8\0Qgn0O6I@"7EUl:i1?T)a@ge[Z5$-RU0^.$H5+0`a#LLOJ-.#WEXcJ>f6<OL1<#slgiFA8]N8E^E)WG7 -%5gsA^B0?Z)SIVChHfM^Q!MT\WoiJuX\=aoR=64e0/D!eQW#2IN[7^P[#.#@s"/e!T;J'<N_M8W+QPrrkkUZg^JP$YmHe?2o*mhZZ -%CWDTS\4^lh2_r_5$?DK_D53YD$ModS\e/U38LWaS^Zc`al8?Zjf:]V6DHJTmcu^rP3X,KOU&^6Nn>(hnN[PYiZ<2HNc9.?N8nLP- -%B9E0Dgl0t<3#&97n0hr9JR[UK,:m:bEk%,<4-c#TPj7;O;fMu),[b;+o7==mj)f5Ln-Z?4cXe0VB1BHO#k$+sN-.s+-MCin4<p$o -%qGuj3K%DoATNr\dlV4uHGMoq"@Jb_/8KT+HpXt2edhcmjeIRjb;Y<,FbuBr5E7Z!I8F9"Q=GZt$UlC"S4Oo'po@1MBP-?8R_bnpq -%"e*iAa8m:R4$*]`WcHVX[dqSAIcj>\3!N4V7]hfG%#cZl1C;k8@0g!-n<aYJ^dY43Q4LeFA*=_cJce,V0a\aTGs.kaT!nP&"bUNs -%5KqlBO7JSN:_-2"oi_f`#baNaK3!(48DDiC17BZV="3&/.8k"')>2H*+sVb]cA)B6[^_"SeDb!#F$`&##Y>K,-!mY*@VL#VaX%+d -%Jk9aV!k\ca7u%V@N9Xf2_2<7Q_\d2LDM,hbJmgd=IE-NH^t4p'E'D#/TO<l,lbd$jbILqH\#uZBbV:6&es/6J2?r=OSj);saN.g\ -%@h/p$0>rL@nB%l<`8Q(%!b?HY7[[A]#VK=^><$Yo/-k.ToHW]7nu1.Ac<l>MgX:'g>Y-KQ_HgO"d&C)+%:e^PrL3A^0kGtSEZtOd -%Xc>*f)gLpYbT5gLhSo)QRu&`>,pT_"a3@P;$eB`m+EsT4ms>rVR%nUHa@DZ!;RSB)CbAo/gs4Pq"Lh$_#2&2'L!FsHbP![+Pu3Ij -%OuujE`4c:?8aS8La-o_Sq#V'S\H=UgcI+HFL<3RT"\Y@[?;?kFkr#ro6*#9)O=TQ$$:!Qg4[MH@pro/bU%\Rc>uLf:7$jb[eq-)h -%SbX,tiYKGD#Ee23q-*neBF&SBN-T[!&bhd9*E`EWrdCD)SEd.*"<_NZhuKMR`W/J*^O0)in7lWb#S`f\FTf10Wh=lui^u07edXef -%GYS)2-GZYEh"WcU_.I)>$hOk!p#M-l/W(\6&SK-&*3AO$YRP!pLSJTB%tE$u(2TmgP/gnX6Cq;LC:S>),!YT%]<fV)DGsetS>b!j -%TK]tr%[)mW<P]^UMFCLf<F`E>8:We(gG2G)%+Z*`k]KfA56:nclXA0r6E>idFG@?F@1j^,Y1eJsR/*D\&hlD>_buRfqZD(\pF[S8 -%E6T?Vh?[A7Jbt,bI3-KjNH;tHO."g@k](!]*)W3Y6eE4G0Q3a6^7l6/KVc")]YiKXaEIQO\W$hWAHok*UKbNPr;(O@"h[@M5`^%P -%FpK4OM+,"J!?,<)o?]&!i9#gJp<6nKafB8?BCao4cQIEPmsfsGDm[=6?lF:HLSU^+W^k$1"/k`Q37qd=E##5CN9Ge'M!jH1Q'ffL -%Bub-[Ya`mUe`iMiO>)</k8P_9#4M]G0gH)uNg3l%$b3\u5j?-@fVe%@lHF:?T(tFlB0T6/UM2rRh?/%+/AuH4!'dAtArEpR`ft18 -%.0-sq"mg#p#]!C.K[_6,0,+P@e7HJ\kN?dW@)&'k$,s]dF>((.ci'sN^:YnF]r`O7-K;EUs)U[%l8$9Md^N/uH(3r%i";cnd(mQA -%`OuZ#LV74MkL&sf`N)./UM@*%&oeCrN+KY-o/6kV;4Z#HI2T6<iK%h7YX:@KXU!B\C1=L:jtr.Ba<FQ7MfCco[*=QP.<A`4aR995 -%3L)D.f\KS12qn\9mrbej_chRC8cdCe,ATIVC@5W%T8KfO7YmaR_[EH7)Ou'`#u4W#8/Aq=hRTDN1[Ke_I2q%*UTCi'pc,6o8"OT/ -%H09oekbj`=YW[L5g8qLJaif"&,;u+)?p'9PlGl2ImDtLS.Q0$R\kZ>",K;+ofe0tpZ2hn4@K';J?p8P-5VZjk=kr]F_(ZJ>-<49E -%g^@tc>-:M%IeON6Z[a,_[u'2QYU9MV=?,XY^V`@l5^j3Np;rfGp"h%_2OM6oVf)4J`R@1fa,J`-#0pGYVLVgeniIYV/[@X#cK-fr -%eIf[,@h8K&bnFKYObG]V3c]]OPBg=i"N(0=Z3Q!^O3r'=<3b.ok6h)j;H?d&Us+n_^nRi+R?VGb(B^7?/DoN]01/`VlWlc,q$%1l -%SZ*)!Yt<JHX^H&357@8]0\Y7A("D#PYIiWZA!kj>A9b)=!,H(^hs6<F:eB,J[^mF/7WL]88&RjV3D?3RrCbmcLeCD6l-%,,:k=YO -%+MQF1%1i()@ta*+DBPJl%<T'8"lQa%mto8_E`"K/NF1N?dU3Y`+9O\D=FhJN>*6R7/8Lp,0L^KN&E^Nl\#L4.:tL&R5>[FOS-E#! -%7d]cJgSUl73V;FSObeUDIVeimXFL:2hs,:)JQX'q2FDUpa^urr?(59AbN-mi&=0IpCHt."rrX+!C1Ri9bg;a./bVFd'7_Oi@/RpT -%n-8a#O)+B>N_9msQs#[#]SN5%Z#@.u#]j+W9T2Fm>.P[MU$Qb+.#sJrD,Ab9",;?"kG&Q(77<s6hE^L>$20(SOc"FSA6<CB/uS)C -%>E0i`TV<gp],[(bbKF@UL_.+"oM`R5iQTQRH'2rue'Lo/R#JA-i`jGP/LfV#j>!1,Qo(-U)#q'%qWCo-.]<-\DGoC?U!.9`:I`W8 -%A3I!P`a+W,fWh_:jVB;MHhqTuSZf6/'K&C?=%3_O6KeIZ?5^RMAddAgOscMG`jm%sLkOLB,dLA'B!>k6E@n,`bXnogFnL^Od#G)[ -%55X^J;+D9kFQ5iC=:q@+e>97#`qU@B%RuB'<-amC$=qrVNo<-t7=WL^[n(Me*T]eiTQC@6LpHdK35FF#8%n/ke(p09d&+HDn:r#l -%7f<9EQZ4.R9g&J@TC9ra5gt?a2*@9l^u,4qkBn%:=6]r=JmVPqFgY7u-9oQkPS2W/U1V#;bKVOd_FcC1iQ.Rc$@CZ#=t+CEN7WS] -%q"!gtYcn<jBli>;+qujui,U&FJcqnZ,R(FYO:P0CKY/h=1--aBJL,_3IsmQnTRNIM.D9;)YET?";M`KnmD\<m,E1"aR8ai+UGLA+ -%[^>6n(THRLK*Q#6N-ri>L#X[T"/H1d[ur#6nlrL1Sdm!sVLpg$O%no1*fl9/P\cs!h.Qj,n!fBt(iX/a#7S>2bbP_\,+"'V@M/!r -%s+%>ef-'L"Lc\1<"=FtRWB;qmXk)R=$t(8mO&pS("$3IQXH:"IME<&sRE>/M[-7!pM],^2XVj,pVP$nGT7cJ2nj8^Q(U&@"Hp6mi -%UFDV)(F(mEnQ3M:`1L2Uj=2CPJOm[]j7YnBb_TNQ\2DOI-Sl*;DV#9Of&B8Gh5MMU_m<dSN7S7#O:s3>\%F6q'R[,;Sq9L(P`XBY -%"rY3[.?P8.W[""$0tdhG<WjPJ<dV%T*H\[t!?&#?YHS1E6Pltjs.R1/Qk17/2[&ea]#qE7X&B)W$$%JLgWJH4@/t))2I)Z))^&lW -%&EJCe,<+5;Mpj]%Pj'dm1'*B.CFXC$Gk;E9VP:*%,&_nTOQSZf9Yc%A`<lc0c8eerE2%87l&IiJ;tJCR.i8sI^LR8Ha7QS8I^JlT -%js0m4QjZV\VU=_sRDV_rh'0SN7l%tn4D8n&OV9lp8C$#3"`Yj-LI]BS=a:,<UQSZk'SjR^UG,PF3ndmKj^lkU93kj9T&fC'7>KIP -%LiICY.QgSphSH75#%o4P/QloB<8biKF7:H"@_WqHVe78kg>.'F;s"?YqKGqiR:@qCpjLZ'oX6<gp?M"Y6@df(H?pg3nf)QDP1%<6 -%=!ja[2Tu2k+NUbiEs@dCs!/$(L:^o'=!fSk2e**jHQ=U>jSFogcXWZ!9M!/UCuCb#2Y>r)nUDV[otPJf:X]C<_m:3[`&Z/Nc7Nbs -%bX&N(6t=c4ie#U+CP+Xc3.$*;@O$]%&NRK<XIUnp7f&u.4%X:.%28gHf"RWY%D(k:(e#+Rk`3CCAUK:$O;V5`;ZGq-jgMVVkr%t_ -%kBAUYpO<`NHDJ3j7fG)nc_"RR5Qq"Di3CIU8(^>t/OM6*r6Jl+V75en"05XKVTHa0f;6t=5'`V=.lP%$<FmXO%ht8[9b&srbCE8, -%YG1=IVeW3`EWTUB1$)Q_GiRaf04e5gA<*'m(<g<(qOM/GPqL]T&Pul@2>f\GFfGE4pt1A,[gCW4@HiiV]B0"GG,:Zi%7iQECfRp' -%rDPHF>!5=\B;lJm!d:o)_`K9XCKV`pd6JJW`**'K>=o$t-3%5#:,O"2=4bu4E1CTZ?h,7qqrJ41%aYR<f^nZ[fpVP+!8p_i8'j-k -%-]C(Es"on;'E//\fG,1?0>0rl5YoMeY!.J:pIf95gOABupcs]b`uo3L#-W5S'.C9:8PAe>mKe+YX>qrdbD^nL2<14T2Ol+4Vk:Tp -%$9'.+;BGT.qUZ!*?rSekaU;?,EO`m,6?m<>VR"e$_8/$F9O%*N(hCnq)NS@IPI8Wp&/_%h\dtZ@,L9gVSMX-Kj^=Z,qph$:rJNY8 -%K=1hOg[;UBK0LFUEI^RKg92)&lDP2VZ;)Il5^!RofWd5)%/5g0Wo]jS$W'>&'AQ]ak.s^LFACRQ?<G"ue,qCp\S7PuDR*Se+MTPE -%n"BtXe"ik;l/,@$=#Lrc0b*j1+'O8gYfser#'7&VA8&&QA?j=F8-A=-T2T_Q4S.\Xqdp'XHEo7q<FDg<57*aV.O07#Ms?N`WJ&=P -%h/=0:.`e-ONtHPprf9@aBGXo'/pSc-YHVVPO/QtP$DmbKbET#q(5'UF=JD/amUP!:NboGk7ob^uQ++(qQ^SgkqGe1ln$"_JdH;J- -%G5V7@mTGUMcD27=URG&7DDs9*('KCQgY3LRJh*XJ8TlEo>ZY0jTn5;<q^^`odFZXT_+,&(b>hJ80@X,#l1^Pu"PEfh4PH+ki'2fr -%Y>[(odB?o<elX9CB8fd$^K'r,5!]Wn^8cXKC"d?7?uDQ;V9G_F<%N@$4`]-q%0,,C8+=$O3?0LW5mi-WeD#ETfe%`,oADaj2VsM[ -%G"<'4+&Bg9JG1?WS9].^URJ+9-6Xi/YiN`%%0YTrDi-u<cW=<Y^ps\G1;WMQ"JoWNK<9aLCCnm6g^N7dCY^q2McRkkk*P20mJF,( -%97s0K[L9$Ff@gug;@@S=bAl5XA@h[NjJj4''J'bF0Y:>C\\1<^a56M7#cm#7!%1le>@;VI6$\0sr9N\J!5]p6$=IdFBp<JCbl`Fa -%2XP:+aAgFeY_1_YRXj+>8k51WWK_3Z!A,(GUsQCl5^Dhq%&e7E!X[DL>6f%<YGTd'*BC<7`lC.M?IRAo(;otWN6AQq(tFfH6bA;A -%g"\55r-cEE]T*ep#4hQi8*.6u8HPd"]7\tBEBf_s2:?Vi.W$I9C:HO$(@cO]%A+'E&,e/K+Xq7.GbJqll6%GX^V@.X9s8H<ZKX6X -%s-f7`eGacQXiZYI1V83C"*uIM4gOe_Ms.B)Y+9PVk^g99Na/jB"2_/FHJ@&;Ej8]V%_'dZ'.B`3&n&%VhtlZ=BqYqq9gBa5g/c&V -%JV*l-hu>>2>.6Js0UZkkg"S%*PhN"`6!BXZ0aEE=QpY#)RY?QMG_ARq*5nTZ>1@2LC(LQW*n6Y[*^T8GJ,3U0gO9;$`BY+3r?d'] -%JIP9tQ\$:T`\3&k7GI)D>OV2!cmFRp32d4$ql;4JC*tODUeHh3K)9<(K2nh?Jg(38.N^N-4EThaq7M?ig!ZVg`.]"nnoG.i1qI_S -%RW*drjX?L=3=+&6s.QPe?'aUMkDg:I]97afhol=FE$k7d\B=OHY<eD4ibcc+b+_q`qRW"_B@]ai1Q58sXQW?KTFQude]2t4_ohMG -%pO$1*\P^!ke%^X>]e+^@BH%*Y*+?W)DWkiqY-"^T[4?OUQuQ2b_D2"+UC'@qG*"`>DV;-Uh""Jli!cXb6),d^=/-1Jbo#e<K0N,G -%Q\,%L$bS;p[H=Ora<dib0%Up&(-PnRa<Q%%\ncF?cG?,NC[h_K)C!a7!QdTiP;HK'WE9A\VdN@l'Vs5(5Np(P.^i$8Vt.)i:\ms2 -%>7:<VVj"&t'f.3uWIReP7ffT'<kt0fO2XKn75KCaoTH&a(OKtsq-P2:F(]cW\kl@bNa+d%cQ2r0cY\kH[t=qk+rCj6i$#Z1=B8-! -%>DOl)=9Wu"$3sqX[d_lJ$S]Ga`#)=(_&YrA'9*urMt0#?q[a>,K\cgd+eK<r==Lda2NXMg#5Wc>qb=k][]Kc<f(E39XDZIg[j%(h -%gFLe#e4j+9ep+om`XuW1FFAO(!!:HI)TS@b&Xk&t1(g1F[A&&U\f&SOrs@b]!(IJSOA:bC(A<Mm(hF[<`^Y)l1_b-!L7.YmDmX%C -%B=]oF_XTFJ<c?0_\Z`h->YW2.,;%k"@Rn7:WIsboJ8/3sV<"CMO&V6Ol3FCFKjBg.NNgUTWcVh%,iTbm!ftR.CiC/QWehl4^;.0d -%C1>8IX,56"%PsRU\3[LP`<fo6T_D`Eo9FC/%$U6gZK,a1[TBE2+:kNVcp38JZ7ZXmZ/FEH'Qc.rhiG$P1qCbAC`ksQRSb#o)leM( -%;?-SQ1eFBF?`\hV@VR?-]/SQnZLt=N(t?AQ*2U[_cFZ&dJsoLfA]\bE_idMiSR?_pek,Vp:mG[C3.C2[e5Nr_[&4X]I$p0Jr*7d/ -%%%!ZV'YhuP)QG7$hUE7eEtCVj&IK7qe.j9`C!7.i%4pm<kda\YP%4NbBmo>6eiE(-q]IcVWS/r/_7U=;:m=C`KgQB&C9&5Z;VT^Z -%&X)[\jbi><_0J[Q0Q2dTat5=_B%>2U4fu_o.P'1)%9c+TY:Xmp7J49rG%n12qs/XAF\$IMJP4O;XkW<="_,U6ec\s]/8G8P!`^1= -%Mt//%R2"b`qZVmk#)GUG%&9OU^Y4-](?2t&P;!."[:daqjT7&;ePG&PLk;gSCP0T(-RTY`U($'`]6FA;=(H5<5kT;/NAR1FCIE5b -%,$l)'g%$@uoKrjD&_e.9>9AK)O0Ng;%12/$ONRhNQPcl>&e?@_'S=QJaNmBXa<4q@a:[M*W;VCuA(]ujpo]0Q+TfYO*.K&MHMp]u -%@H.C^r>8aVj*oW&NidMM3%h1A^o4AB7-5rG*j.(tmP9"ML/j#/AF98Ep>=K=P*Q*gDqE\YaOqd[J!C)jXf]qC[[@g,ld5sAAp`@] -%[0IS%b*g8sWj]VsqO?"ZPYXGt0n/KV*4[<mc/tZFrD,Yi%M)KDLG^oV7;hK#[Zprt"hRuZlIK*V'eH=biAQVIeg`"/9)S`nM5%+% -%45`3e<Yo`tL9'/r"r?\(I#RQ?SnuRV5:;A)"+=RV)F7l=6H/+)N6Ek75aHK1=/:@,"+,*8AO_kYK@Jn,7GH<#FX'OB:mXnVQ@4Ud -%#&?*:kH&lLXii=erKgi[RanZ"F0RbaOB0C+Q@#DAG(!KH8id7D6Po5Z>MQh9?<CCJl8[Q.`;*DW1pMKgYUno,$M#kS76lFcTP8GQ -%[`!)M\*=L$%abAi^rls+2lWZJf549)iO[9j3a_VQ24VhFZOE`UTLks[.+@Vd;XpoJ/jPjuBZ?-hAbp21GpT;p75n:KX;Y6j1o"-@ -%![k*?;AH'%8XJ_b1>iM*In(tSQ]b[Y5UHBthV4Klnn."@Oci?u4f"*(g"!KI3l@d:(LJ<gA@cZlY%7G/s4"aLXsM82-2%K)*Vtft -%8p4-5=d<>Pr'NNN#I9CFL?3-U@2K+BLt9YY9bJH:%f#b#Lfc/OZM$JKRbN>3TQkUiG+PY6WiXG>>S1m*24VjMq:(QQXJ4K?G`)d3 -%!@G:#C1l'q]j\97/ma)F/Vi:8I`:3N]<HXtf3,pn9_HOgfX\lu%-+nn8%u\?%rUHpi/s83;)U>9-f)-)(AYrp(_f\Qnl?\;B%\VC -%bsa`HXlMo#qk*$gf`ErLQ58ihnkoJPBS<!6+#bp,cmNl>G?%N9p[Ca,rR6&jW*!1TFLjNrqo3Y&Cbb7J#O&QM$d,N^6Zg/q=l,[M -%fk(MP@65eI9&o6\IB4Oa^26c`br_9bc5<$-<8W]PX#dnBaT>79!IjjDYrB3DR'"CS+K7JPGi[PtRC;>DTq!ZD"*Eo[^u]`,DHPZP -%N6JkW9WK!r^s2nLXR/FVc0@+fBT;ajJ<'HCm:9!RI:rX'J@^S9/l`DGR5Cla+_Gepfk=?V6)`JdY@9%_o$G@Skl5AiP#?ttR.,N) -%fgEg)FUI7/rV$!aQSDQTUC.8Rm=h)tm=1%?/OQ3<Ep+P1bR@f!^ffEo;.uQ75?-M=I2+'o,8SM2I@fQ_Q00?a)A]Qlf_B9H8J7N/ -%DB)UL9dU1&bqRg"Ynq"RdK1fq$Z9Vca@e*,6;225)k\-=):YkMrX@5Q(q6`"SEl<LaQBbAoAnT%);K+q`uIm>FKmgQddA'PDt5;' -%)O!-ZZ>/LaA6'%8%:iKtg]O%QSZIBq?Bk*XX;SS2STUS/6jM9/RSKuk,%ENR7J5Hke;uc4k#Zdan&ND^?U-FS,=hj.=,DaX.KK:e -%WM=T279Eu/'!,K0!C9uUp#YGVI^n4%B-$&iH0fF6l[c84cI,fOoj4Kc-/9g_nC+X<5u!*D^KchiA]8oq\N3VJ/Sk1H@_S.L1sB/, -%,>`O[_BR)`)0IAu,n*$UCA183jDutaT7Y/bN&W`8^:i=b^sqa^!_*=;2;o'aMlAYLDkop0`hMuq(o>FI_[aT:?SW.4PV?r8r&3D< -%Q>IuW+I#'lYi_7t0]$pJMXp('N_O75bVaB!gsT*B?s7=HC-\-f\8.qejlp6&pokf(QR;hs;Op=T^jMI6@Ia88HX&^P)(D_[GDATe -%a*RZ1h+,mLn;`A$(;(/fQKgUP3J1B=5^u;@G6*.#H))c,fF49;-Lu^cj3(!?87XTgat35'b[\=*jslW=VSsDUS8J@%1=oa_5q94R -%Km^L.">!?7!g[+F"=tom*(en5'r9!:]OK[\["@ePjTPlb'GiONLu^52T_gDuq".Bi'EERg*lUks*BmFQ6<Wf*lh$$gq_<NEff.o[ -%"B._!bJ<?U:5H:#KX2eJ>f&8BC)#]:=l7@=>r1eRe)-<Y#.BM;_f"0LKt>#^ccF"YH1K(8T5W6>EVY`m]8pTnr%dNEKG-PaPb^\C -%_H;4b)28AXXhsG/b$]OH^9Y$d.o-QPVECsp8'&iTf70lpX3C)Bn6kZW.-]Nlgu9pJVsTV.(&#*RHFUS"dRfk_1\m#WUcH20[mfjK -%9%5G<_7Ja8NeIiaK/ng]XH@%-L<hL*Uorn-VSB[nE_OeZV%nYeFVhiuao9VZ>L47(*Y]%%Y)7/+XL</7fD0.N[T$[.mF2(Rrg)9O -%do#m/WW^`Gh#SWA1f&c5A%t$^DRa)!YuN9$"nY']NeQ"bP(\Rf!u#')%OoZ1)S>8TA5g>*<<;lTL`h;!(OUf@2aWD03B_?b+"?+_ -%0hLG\AH<jeX?qp3=_%ef&u:&.r>%NV?!HGl79F\\"s2aL!^&moha0_]!A`g=Z0c[MJ-VN#/`8)VVXBT.1g?$DY99S*"<#s+aEnfJ -%i:o'[!;@`"dni:lK+p$N!@^-l>BkS,O4>-Gn8]W<1sqltQ=_(m55^^_@\*[%Kn$YXRt1"5/HXoN>m,8q/OK`mJg($4^A?HJqnU=, -%,ikdj(-idM]80bG$!*490/B0JjqP@-"CE=f>/^:*Fs@L@8IqD@[=Y?2\\K9bN4a%_)&@-$Y`<$Xj:i'$Td+50**IAtCt+/Ep?#Ka -%Z31RR'!Dk^lCg16db&Ln/mpZH(YEfUU/5P)5ncMF1Z6oMK,.?0>`e@]]%-]$qIibV@Q[%XE%Q!PjYMfW]MqoH@oHrB##kJuf.Z7^ -%cUbSC!-I%3KtRWTc[\jfmK+#H>"gH3pVe^l,Te4/$.E_^6hH8laO*](=^FWr)],\9V-#q.ik5_^hC&-FY0;/Y\B"oCGssC]"r%F. -%KnA[h16JZ!8h.UfN-s2R6BTXQJJk5NB4.P3%fqaF:dX+U&-CIh=+a'aRfmt=7(s@)EX%nHn951`JG?q5AHXP<YVCd^T+V\Oo,5KR -%:djpOEhBHAO<TUXh<mp.2tkHQB"--h&(iqt!5Y.7i,SCWSh(%Ej3Gp\qua0+2[tAB06au+)Y7'qa/kqt'FCl-@B&JQdW<fm4`M/B -%W6G[i6IW<YW"'Heg'%X#O^Ldg\PSb%3d^,Wjeq>H+(DL2*R,DHT[,fSc4MAl!=rF]I++,Jp$lUt3N)G0K5.P(;e'^%3B2T]=B;k5 -%@2X7fjT(jqkdh+H3*A+N!\t2@+p%#nE(QbiC^"r,"^!F\<4=3Ip#/Vf5QY+2hPK^YL#"%$I+SO]62/nE1MXr^5&cUq4?Q6p;bN]( -%nYas^F86/-)>K>8R)kh2cbUo3.)YI4E;s;+R:Hm%eT<^dVoFqZm:GgfAWMRm2RD*)5./qgikD^7U'I(0mVk[l,kDcEZ/OtO5e8Q` -%)a>;Tb?0'I>THs5O%lbYFR7c,H/T@UParL3bNt?^WP@,1i%a6X-?)s<AJ%e?]_N$ipoO?E\L9fE=TF[rc6-L*SpO!QV<A*f]AOJ' -%8=&l=5=[sflh1^TY)Y3Z$6hr,OC;o-H'722L*jf&>UPHq+oE5$=SbsZ59`@[@(3p5mC:J&Pe@F^<#5T'kfI^s!0_pA(2rf7DE#f_ -%*&:*#G^gL@4-+NrgN.^BOT(_cogYrLPm/`$/Rp1**[1VpnU?-mk1XWHCBTpN3YmgV,,_!Mn*o3gg#NQjl1!4K0UsnrV,k@FXDSp' -%H'&[#2>&JUnp=-tojo/U3.$b#^!6V3L7H)T$crRjmA;6M2[b^2XJ]Rm`55_d@4!",a]B-/-[@qn2n,mBGi`XfI/q9U;*Q**`;4NK -%?FUD.!1+RVHdP'?%+<D*GTG7W'48ZJl16,o=]=iN_^WA3O8IG4pG.NQo<rZHBW>TF@8o!mE+]uu(%`cVeY0(Bb3I>s4$A3FD($K! -%aj1t[Fg&0o7pRUN>.se)eAo\tApOqP//^5U_+=DokQXZ_K??W_!m#r.'H;st,D5`i*sk<AN,Jpe&a9^Mn2p9S,u?4RC)V\a*`PAV -%:F$1%"&-Y!=[7j_L5q\]gr1>^4i3Xre=$bIqt:;i,>+igIPUVPQW<kSb4n(Wl.Hs(+S#>'^g\%W:,<MIJJ]Nrhic6aN5?):J%f<p -%<.NduMD2iQrSV\%WfiX/D9?B#Hn^juEI(d@W_KrEB%\A.NP.Qi//)6*$hdNg0+4^1%9@N9r!8hI3^9[^#3,2MFgDIiC-HE8L-]<$ -%!qs<o'hiNlEEd(d:1Bb'j!5c6C.sODGed_=cM$r5L/b)6rc%4&n9-7LnaHU]@h82>F+Wn(Upfa%qZ4>eb5,Yrl6AO3e-RH>ii<&C -%=`<2[V5?^$.h%C^$]+e"ku(/-\9R,l[4O&-O?2LI;V,(>^6(WADbQ=\G7rik;Jp]A%/b4Z@GXKjQ?Au^W(EU`1gETo@i!uak;i_F -%T(<ArJ2Aia$K0/HZ/.+RVCm5c$rTm:/0MA#bFi%<5<b&!2tglMS\a?&^!kjDD_0bINoZYfo'hBtH)u3ibRY:k(%8?]><(d4%kTG9 -%WM4@(_f(+4[J$?\b@MX<F9Gt'XIaLu#uU6s=.K#VP/W`jM\a/MpZB-1A#'(V#W"U#Q+$V'n)#kQ(lHG<GFJBLk2uej(%;6Kf()Lb -%_COj;D=_e1N!f#g(+XYJ)dr-pVVB1#f'@TG/dX0Qbt"Fi!ktiod!Hc*Ftmn_S<eobb],Pm=.mQ$5N;;N3VEqtk8t$:3*e)24omB> -%C88kYP:9BOpVf"dFV,<":MQBYQ.mM7%=U=ZGODTg`d5DePV>Xi^,DcYZXpUsaGc&>hAJ`)E!ck1jWk"cQJqXD!dMJ670'79=]N(+ -%*FTSjq*=]b-3:>7V!WKo%r##cNI;-d1Ou_D/_6+g["<7!MVIXQWgd"-6aHI`>q2;U-f8V*'#.ah6u!gVQn&FMDU,3H9ds3(UFbT1 -%k[4QSf4bEg'YoXOn9sJXH.HK>PR;YhD/*Zr'/(M-/8;<q320U/]VnQ[H2Bs\?P<t%\U$OF"4a50+e(MHcD[0go=epe:ugG;[^M7A -%r`1-:."K"=h2*MPZX;+rd%o7knA7s^,91"n80>s"go0E>Y,*p]be0DQ89`s6&7/t>(UMS5,-^bHbt_%VRiNk?nkhXkNR_lH=s`*g -%_"A%,<-AX&TQpqLY'XppA's(V*BDCWe:Re"Z'GT;"3oBXi9H)>\LZ=cE&8PJ!Zp4Xan*RVAm5lA_$Sb?,A>rFVG6:NE$l^I!r`MQ -%gnPA9B<[=(E(=E%"]Y)X!^^d7j[5V*h<KBt"Vn8Q;Ob&k7,fCHg"J'e34eQ5AZb@OaZ;Ia4VQTjc<f*5_3V(L!Zq5d*';Q[Bt;`h -%*OniqNO<$&&&CP1p-Si`d8p)R*d`r;b2sq7k;A.'Tc+Gr4BO@3d^OL+L\.`1]RHMfFiSC(HjL3s#d!""FmBY>P6Z9@b9<t.c'KBG -%e>4:.b-]m"DWQkWiT=;8h4*06L!^lHc\)hEdC]FlV>Cn=A*M;AXAV1Qrc!9[grSZFJ4C\3SUli,%mY]TZZE4=TZd/M'3)bncA5ZX -%)=I!?Yg6QJ@%)WgQ.0<Bo;(D-1o[9>\?/-[L(RkZLe6b9D=Rd*2(@g2!NV6*^K:OLAL;X0C<Ol+_B9QPb&5qe]XXDF+g$Es#J&;a -%3\5VjlG-"Do*-6rG3oL/`:Bu+ql&XM\'IXpQ5Vp%]1l-T\b0P=B/Mot(\-6%@@[YY>J"&/fdLiUD)Fr&@jje+a5-b0VIB%\R1W&h -%(*-eg>r%V"q)2V?qODVJBX!t%b7fFZfMfFFj(AOXF$u)kSrS4KoeqHsQPI5NV,kX7Ihenh3bL.cUUg.TdW5_m`<*&lj8KH5\9IS# -%M`h):Mp1!q+^?S_/URPul\Nh`A4,I`iPq)b5%KM('6BR-j=Zu3)6TW*c!^=R(:eNY,u6(>>3jX0%D^T#ac6,7\!d3!iR^`g43\n> -%CcDWca.6h(a1?IPT'TAVE;JDpKPN=pjlH&n7?<T)&=YUP:G-D.D59[N*U2D?f5JmF6>"U!E9:jXr,D\+NAGpPCa<h/RHGP#o1rHY -%,YZ3753K:BJgMW'JNas@@Lk1+i%&DYl"RUt8HMhd,Tc:2jNk'F_^lp]S6#>Z0<d*s%mWb3mc?9XE3VpQB3n$sA3UbnO)K>N.8Jhn -%X6V?JfOl.;]4kFl(#\E$IB7oiSi42UMjMR]lNR!A,;-ETUG8L*[\J**C%$rtV#;hsKoqnAG%uL6DY:&\F=>)P!ou.^3]95fQEgJo -%mgh-8jF84E-Yltgjm6d>mK[.ph%p+Wc!K:Z46+d^2C7A^/`r1#S!'(W?cIij%<BG"c[<Pq@UT#ccUP(h=a-rpD,7!',@ed;(jF!$ -%;Iu*Erc;2c4AP[]msOM8=IqP#E:bL]-\7s3+=cr24,1Z#T>3kqcW`dEhI#\)$=kp%8.AC\fXi=-Gb+4,TZ1OkJGR*&0kq_)5s0es -%.nF11E*o1f?Qg-Nqt`n\G:^K7(o;@9,4T`.)6ukM21bR$kn]kNrBMhuh!BFnl%*K/JZs6qjXiS#pu-BU/TUZ#V@g5m6&dL:@Xobl -%^!6FeS?/B.1]VHTL&ugKJ/O7P&WB.1h\\lSV,MMoBNSF\bJ[k<2-,I6YWpqpi$kVnluCkXfY$_Pg%p`EB5k1Eo'JVh0`DuW.,P*( -%QP6RXT>AG"]q61c$4?n64iYP_W*I%lL$oE,^YSgEUi/30kqe</97sX%HF^q&U-FTrK.Du!3%4>p)@'0qQ>[e;jQ*9-!iN"qo1=#G -%=3B-mh@MJkN_p<hs-cPI*Z5g`-t><3a$457qpN[!2*]>=l8$d7A(p1C3e(:mLEdu-d*`[G;DF=9W^Oen!hN!n:flc=%/c$-0Rk_< -%0=Nh>C+=`?\.moh7%Cc^5i;^OC?#eq424IK-rU-)Ld#1=7Ie6?PTYs5gE.64Q<8N1""X]B]E2fBJEh,PYg,i]=fP(AS78Dd=UJ94 -%n"A`I$n.LpS]h-/?)J?Z6,fh4@b1ZAZ2QNr$l`Z9DOQ)=Ka6LEJ<G.i-)\k_\:EGS;rD_3<q\S??pq=Ia3Q59$/Ph:@fp7tHN>@_ -%^<"j0Dh*&41/:To"f,qB,AJ:YBrsVTi<!U:R_rB2%*BVsalFFg]3QTge0t#2<(A_JBOFMBND:C:=?k+GR80*#qjIRE.s>L6=MShE -%br^/eH0&!"b"Y-fDY=>eC[f6WUXcY2gKf>[IBTl$K_.gIApD6Z^h^!A"d*6L+:TmE1Z6Ye'2U8>,6rci5:qrV%X)DE&5\;F9gFFN -%>tH0U`IGbWZg9ION!2>jGB4@8>T\60Br##c`erfin7's,dmM;c?LDbN>A>5j?qfm*f!"1E#[(e:b4)LBmK0eT4i5P[&28]8!k.K@ -%"F7TZ*sEbuT#'abgo[O@!jt-TK%hWFTWbAN[ganB#p=qqY<eN&4@TZ0gB5bUU3?ZR;+HWjYMeo-hC_+F3HGIL[#&O<M+R-coVU3U -%/)`3SrHkODZXp`b1S>.->%cpD<WTBOB;lE#FM:)WAjO6=f+-n+g2aFI^gVf6*!"6f7o7gjlIZhF0jK9fV*50+756#cVuW'Rj#2O) -%=Va"+/RrSH8"4EU_!>N^qbl)&&)0,jV&Q&*'PpCYKVH_]@7%;#D&H)L'OOsH_sji_G8Lqd'gukE^p++1mq^k8;NZCAJ<VO;'8Jc: -%S-U7A&I"u+JTWNl$Wa6uMBMD3:Kr&R0"9c\&5VAi!n)9(e*<n`3Sf:b@seQjAt(HL;Ll?7mh[dcKFbn1"p+V!S3^\MXHuiSog(h] -%)rS.HG;(>^a;/3#,0SUI]%#P@\W=@bd<=:JE9sm$BpIJBf96B6]sE5D+se)e9bJE1qo_#9R72%EV^5\<_NF3,W_u>J_R`V)@(Yn" -%l!+Sbl,e03L3^#",<HAc:D&eQercDHBD5o+fk=LtG`Jb@nTn+Y@VBEpc`scu=$cuM1pb,fH<f6>9@I6$3`%L$Q8=X;,A:+WU:/bU -%+2^bSW@:_7U.#H*QE(VN%29AXX)S8`HA(U"%_b9F:o!]\#F]].Td&aW7+SWeYAgHNI^tG4)K+,0fnr/<''=Wi"dp/7Qmn^:aCGc^ -%AK?/P!%IZTC&O`!0<.6:oYhRQ312N>FAjO@%aIQhn?@@cMqR_"In)hEqD1h.LDM$<9k?VX[_2NH!]`2iY7DFh6SC\M=mK)CaNBq& -%a\H'[&r^r!`MSU<CT0'Fg8@rd*0u'eW@eRW(,0A4n=s-UZ+/.=iptDb5*L6'q!3R/NM06oG:FOMD#3hN/Ks:@oab:/%dq1^O:uYZ -%H&dlK*/XPnqeW*m"@?Od"f_X"Vk>'nGShBm9>0tQY.gWkAe9e_Nu.\@F,K2W6!oJ[4p,--,W14fmJT<NHnam*(9m276NDL^\W>R* -%[4Ak9Oq/rnPuE[*JE0kUT_atg4H+F'<60b0m.94@>.j+fSB?lMlS4HTE/Qf%h-[Sn_QL@lDIrK9L;,@[1YjoYnE-1_@mfG]o(k9G -%E6YLp#tD@'`erA@_IJqLL!L;oNqG&^VX1FpbC&9Y`E#H%4RU6WbeBqk+o\!;IB*AJ<ar)6/#>hVArTCP5_-<lrOJP<nM]DMbi.%' -%eFVMnp;Mk@X-&N`/j-5U*$G"%,X2t<\s=8EqoVXtAFWP5YgeFmO6)Jo#3&XZFG:WhFGBO$jeNk$fj0VXqst52K%fP6^LD"O%uVB4 -%;T[p$V6TQpPLN]6Mgu5B4E:H[q;\p0jID=A=NWIWO[jAKA@X-hjT?(W%Dgf-RPT"oBr$EUG_f!u1>c05ToMo&AMIam1S4$,CXeKE -%lUT)u4I&T9k'*)I`;CIt<W)i!Zek_)4^'WX>m?k-/q^0)hDD"G!u;u+ih-g9RVWHmbr(V!KQ`OBal6U2^7Qp!h^YZ"SRKcEGNNc6 -%:QFB#*NW`QoI$-EnA]DVA2ZV<M7(YgOd2`hf+j\UQPDb4[e3,[W*e..0>2r3N60$3VqZM(5)\'#;t#UjNmUXT\fgY2eFG87AodLH -%Ih-.?>"[H@'5?1niep8#U>^Bb]1[)6Y]s)NZEVktTUGI'?!&!a]O:0scFdQQ6#`E7]%l&[[U^Y,EQ:D?FU`hUF3)^>1=<Y`qZLQ2 -%5qM0t%O\@:%!M9\FV<CR25kB0h<d$YSADb!LPL@-&UT3ZC#Kd7DcZ@bKo7MP'o1tt_:ALPW.`%fRV7c#I7r/M`$m>.!.DB+C4-*1 -%e*FY<Nrm`<37_5j<WUKbZq_#D>QSYmRnOJ1DJA:0U)ST4Rg_thT9C3YnT'=&h]Ig56=k*%HnkK@DrC"\Wu#+#G1nuP\$1DF6skb` -%_V:PmlOLnPFHr2$,/.Al0LCJc0u&DG9FH^C30n!#"\p&&^;JHh/q$tM^<Qi07mR+66E?`mq"tk<!=_%0ksDB$G5C23'4AD=o2asG -%/RL6mH-=hK]$p_H)>FE&Do&p-<<+r%gi%Ro_8s<ABj)Z[6#O]pG?4g8ecNj>H$d@"H26+j]Ti?k%S!VX+r>)8o?JFG@HflTaBJr& -%2sq+N(*A;?Ne>s<M&)mrfBK1S^\*\^$hnfed>>K*B^SsH7j;6KM$hsE3+eqlBa02-1n:[Y)Pd0B%b+l)$["*`^dQa=C*C3`j==NO -%CHWQ-b(>fF1ec10KN^t:VJR[ZZNYIL,D3#hh->en'J4mmGrhon9@MqjjfN$d7AnG[$`N;0'G)s&=/Us.+K#D4p#Q[iMpS($]fGsN -%K9RSOFBZ?1gF^4;R!N*e2)GSaPLY6PEAo8!pQ*K73I\lb_>\:qWsRSk5;-&9BYd8*DYBDJOm$bL^nb1icCP?%PCB-_T!2@\dN=4^ -%k"_4Qa<[f<7_6j19b%?k@tGpV>:cADQOTNJ0t^E)?i+Bi5Ag+BCsi?Yb5[[?;*+MO&t1Y%;m+jk2+dW)c\>Ra/Dpi7.fnsEJW!G6 -%@Q"M=C`0qR$asfQb65?s]=jrFTV[:%2=OF,P)SbQ#C,ZK@9r@LFI8[/ZPF<nT<(JqYe"%&`jKVGWcc-mbUQl"S%X?aL3WnaAD)EW -%(jfXJ0Apse4G$e6-g-(=FrTpk!uWXZC_rbhet9c>Q=)YKLca6PR4HAo*S,JMdgRM4UU8eI!m"Rgh!F**"]T,b\LpkkdGj!6g\_)U -%F/kQ%Fru!I7kC!M>"6VJI:d</(#:1=&+l3#I\)o"\i$:oeA3\s"[8b[Ne++>@;_b'!s-,F^$ELMaX`/XS/p_1P,31?(7[UE72RoV -%Up/Ci$L^dm/l4XPC#VQOL?\j*"=ZU2[gJH=CW4pb!QKksM(6fAQ,[9BbNGG44E<K";o$h1#@WP#057BfKdEPc_/KUGfEEcgN.BNj -%UoDi6ACWZN^j;OnRelE4gB:dEdQGftlie0LW7Jn_@W'oc;V1Z8hsL@X0&pF("?+N2:9,f*,k3:in&k5dN!jsF=7"uPen/VrQPS^t -%ZDXW=]'2f,%n,lLJ4k6B((tQ_!rG7eFW%6aJR*mWo#YRN^cJcu[*nTXdMEi=><q'3V-UJEX,(6dY8:D.5(i1]EIAunKBD^soHf?F -%Heq'T6kg3:De7@0`cBq?mB)_l8.+:nd^Br&;/GLn#V&%>+!SGG]GJS?8Q'%9@Ks;;1#G=1)I2VmKB3mD^sh[_!SoOU(>+\)!7U1t -%_8Gk'Q8uI*GRI)."2CLiI&F9CDUIS<b+K+:Enb7^p'5El9%@ksJL&lq/n[ukG0YY;RoW=r/s%>$QH,^R`$8%Zih^"o&DDZ40*gG4 -%bIZ#I0X`3iB,TBnkToOfb?/Y=dgSPF7@h+"W1r2:F]FKMpUo!(o[XG=7C%R>qd5,qF^\:NZ8g::Td<S%?XKh$en!m))$>H`JiPtb -%h(9"6dEQ^N/o5In2P3)a?b8VUN5(\&eu^S!I:5hV'faM<qDp(Zr>!lKW0hssI$kcVL7@;Df1Sj&jgK1^YUdJ!ej$"-TTYbICU[>+ -%K^N=V``FTq73u2De].jUa1?epln0+72t8j^"%t3V+%h.6m=p.*PXu'oX[oPLqeTb6f4LFC++o>m&q7JL)[eP]c;q_ulpC5MFN5%2 -%k'i?Fm9\P?p65:`]Ss,S!j:'T+"e=:&eHiiY<:,hNSSPiUdZ(EQY17d(e9!Vhtq+pbYFlpq:M`KWOX0A<@cu;CA%h4YcD8<,"Mai -%=HY9!gKg-1Vr;A6``SUqDlWr&/PeTn1\b@hMT,J]?N.!Ts&X^Kq`k#G5JR6WT7?a-J,&u755hr,oW/#kqSutBnbS%=p\O49ZGuDh -%GGD25(-e$(kNS[6H\S(JRUGP6aM\$k\t?Kc??,m%9*%'6%VU$JYj+L4Trruqf*4R+?sXB>iR.o&i>s[(Cseqa/qMKQ$&Y+IRE#gB -%:+I)__/@r8qm88X+_$`H?i#GZm?AU:ZZ@r3oBj,!0%/E0nQ\M]`Qk5JP=49u%l=1R3*L'*HuSDe#8d)V54$Fd<n,<4&@B[\,-nYG -%-F+GZ-50NW,$0,[Wn_LKb_JbdK'&^,DquE8eS#\U3.r5fgeHUeqAic6E"c*mO(k4!P(U\H2L;Y:C^<h-'!g?g+Z4C!:k\N=e;jo1 -%,qeM/oC(6>YCjOrNhhIuni,de!BmV'i+>8*#\./bTE]AmHuWHW)N"d&+4/D(<A5g/5Q-_5Lo6m;#9Wt_UNgnn[uKK$IMaFj_MJ9U -%"h*I$5GSZ,K-RL#cpUFkUuMUeUfCbEoLT4%IfNJdLo>a>1=4Sd:u+%[_$)B\.b441Z"isQKSWgY%7ca$Sqf`2[Xj,<!lQJ,"@Yj0 -%PR8\hYlsD4<6`,/QS$8(<cD"e^E>sele,m*@'^]Y*,OX8fF`>,>2ff"D2scIBZd'/#$7=F`rn@uL\0rOV24miY1FTb(0YGS@V;%7 -%[kf:'l0(g+$3b"(")sb1pL]k0gQN)Xe_NYN=$UsQ_R'R"XtS&"a"G_kd/d9`.nC8k@ak/UWUSV-[923na@VJURN\`'K/5\UO_o5) -%dL-hYCQa"k$V'U&1?4k9@E#(Jod$6\$3pbK6sDAN^Ok'r#=*7cmLlcs,-K=i^m!@.QI,=aG0F57P"t*#g&^]s]j%'sf0_elQq8jR -%Eq\H.6up+$b>Kd``kmnd=@:'`qlO#8^4I<H+!b/lc9]gl0aS`N(,#A9c1;"k\[.stfI<NG*Fa6YqFD4S(dW<:_9m,PC5^[9.X0m4 -%[iYF+"TCKTd=r3=lW.R!YQ?nnOd'=pEGQ9!e_\phE4cHYMi79!^U%mfU-+)39r#0>:uU,;=")(HBX=8k`3hjp8J+SBBg9Ca-+D8@ -%8&P'FZe.3#SmJaZ@Sm>pNNq+*2EA%a,/d^1AI,5]k7^2;n,feS:.8F"oK3Fd=q9>LRWj>#8J5:dV%/3S95!(<C='8I%k:((Mi[-s -%T2qcEW`LY/Bs$^MWn8[6ZmJ+KBamM@XT+M1LGD.XmGVM/DDr8b.9gMBW;B/pg0:#!@!Y/q5njr1_UGgN-O%XgMO@2W#GoaBMkk7p -%eKJBP%2E`-o[b@g=0<"Y/5]-W^n]uFYet^LoQHksob$2(kcSQ>(q@%J2je:hf.I<VEOr\+!PpU-&]$#eLEc@%nWP9bW2ogTURr7< -%5:r@S.'_q=T,-KP/_tnSk&2G-+9d!^+7MNQ5S6eJ$(b$34J=hj&Kd)Z4Jbob;(fMmLo1@b5=stp/J1[pa8?L0,SKCDpHO$t9(AFc -%i^S&&,&YmIDbkh,8u1u34idF5&PiZnI[VI6+s%%ZSl1V3dZd#8T-H4=`dVAS<>=qe<95S-aobWO7=7Aenq7),7M\>l:MFC3da-^I -%C-o^7@[e_Z3"L*k'QH0p[.nMtncS,bY9<Kf!K2-%'Q0LQW_/gION'^$:ob<V=jFVN5T:C]SrsMU\]Y/NR=^M?)2#Sb*;)*/An>mN -%)%EueiH%%lIg!Ud6kOL0j@Y$I6bpTW4-FOcX:<[%l4Q]5WfIo/$=BBd8F;Ci=^5-s)0,50DZ(]ceoBF9-@&]B,"T=.6)?T*eFY=o -%5jQH=TGTX3inVWYk[cj#b/"KskP5Lm<ikl#X[e2*(_(%e]qFjdR+(k?qr*KGM7tQiHAt'g"d_X7\+IS+J+1jM1AqE\OT7m,]&_/e -%H)&SseXo<-W$1j');U`WU)`t6"-M[mTX0fL$)CqRQG*U[mDad3@JsC67-9/QNSj1g>("tsN&r=-;LYGjX)/;Q,teoT,Ia26TB`!n -%PVIQ)kMT"&-W(sh1d7)kKnpalYM6oSId@P*T<W^%lr!+R^5oU_]'Cbu<-_uSrB]k25E@"CkZFM9@kt!eZg@ohFqj,22"-;Rff#"L -%I<'nf*@L38elH**n@I)2CO).]:uQt'I,>$M/<0Uka!U^9iT5oTdN5[Rq&EuegcS@B<\MWgY4dMQPTkR>2"W61W,hu;"PGdc=-`Q7 -%$H@DBY=u#<*4b7!d4=JVR/<R"3<h.=^u\bJ1,&?mSg;EVgYj>[iM51C&@PA4N%0C.R`.`[J*%orQk9ek8Gp43;T^KL+!jT:hsgg@ -%'`mKB"R"p?[QC4>I1DcYWVPVcD`l(UJ1#p'7LiTN^V_>X"2]p>$hrH/]idNZR'_pV%Og7f`X#@E.,<N.:rLiF$m2ir\@$\i&Pj<5 -%4DcD7cut!br_/N5gs'<qHU.[.Rq+WuVt&,[K-EKmeFBoBa$]_7MKmi+jCqh\LDD-^ib?;n%pGGbZp?DY:Re5/csGh-'amGmD;=]h -%`QPA(9SbsJMDUA[iJ]TX;g$="c'rS9AtraY7DsH:%2,g<VdQa.#Qco-=W[9_($oeE,f1V/[D4eJ]lNP3T_HENkfZ=*:V-<`l1aeF -%2irmkTTdaOSjO%eM(%A9DFRG!*o2,f;2!HuH:+ML%GJ`S4-2S(mgG,L:-)uE'pg,C;^;mGK'dYU+BiH$cRN4*O7L3P*SGd!5c-NH -%4Zcc`fE.X@1rR!jXh[@om)*n1-DM:,-=n02i`nCJ8jE](*fSF9^3@mjU@BVj4'GHn+?X-HpTlYH^t'@)fDY6i7>ru6,t,nPJ9>@4 -%r@+ZdVjIX;fIXp]^#/t_@K9mRf5'SAp)Wd.#RONPBd?-c&*\Z`lqKi*/(h:.PDH*%OJY$?ri1M#WJ8gA[7qmLGLo/YPTOL%>5I4F -%iJ572n3"X?cbtbtXKQ"Mfr\6?@="(c3'$c^7ZlX<3f<RfenC0CE#e#,4rO<ae^_Zr5g6T=qcP3<Ai[2Qm@b(g,b[KPRNse#Fn#O! -%UVPd37W1_qA!kK@q`[G*DKD!&]4pE.JEl7)1uSWEJ`^fHV<&pfB"oT@>AI1=ccq9bL'@):3E]J\qI!1P6kS$D^%M<8^rmuKBpuT4 -%Y<NZOEPYu4dVYKi`A]-M?3`r\A&m`RIYpQlbEKOp"<\jTJ#EUm>*M:g*oJp^\tq&Em)K7R(EA==M!K<F(hqXZA34M:N9)IX/RIXL -%rZjQf9aMQ=NK/X42eu[6@s2m:'t;TO#C:GMMr,@bWi;!7m7A!bShRCFATaOEPC?Klnk@a(p)P@N'+a^2H:N6Cm,a#)e&;^F5f&X& -%!%PJm/-F3b^[i"VDB03qUmpR![!SeKI0\h*Gj5FAV\;gCj;bZAPgB]7qi!OfNJTnc.<@7@Hdmh,lU9hFV;l8nreV8E=XJkdG:H`d -%QAQKq+#J!&c%"AY+6a#\f:mQoXWJ7nf-Ffj%n':0^2.F-CDMBK]<4Y9)1.EWe0hfC.N^)'hOKGB<lG3TeXSEYU$En!P>N&B?q8]0 -%)W*jcCFq^*`We4!I,T>@>6df#2>;>"@62=X-lYAf=NAu*pr,bP,V%Y<<kuDtCp?7!JEO!:6hA^A)^\Ia.T\q.9dl<;#4O%F['It# -%;sp3`:@gSc2g?b[kWZS.C0JU"it%V*#31E]!lkr%?0mS5_/R*N7raC<r@uoV4W2]6$U:"ZOs^ioDCA46I>]0cSQ=;#YpOhmkgLW% -%@!O+\nb$a"aU7O1Om<t([5ps9Z*,_r63J9@i=D&f7)/Y=Hi3)sc?1Qq.F]"9E$pI%`KK,d9f0UV;'+Q%G'X1:'jVGE-+F1>f`j]A -%WXr#SH)QbpnBKE?3>mgrbG&;<`ABQiKcsT9"gZ\)&+EtJT$:r@"MAhhod!f"s(nsLCm&\`m0EZo2mJeWmY)dl$h9+3+,X7poVOU- -%"kEalgfDI8-b)*u591@7'?,?bM$k@odj&8XbY-et);PP)0*O_BQ8Dh@O;l@s'g+I4]rD+8?mD]gg+Sm#aVHS5U/:2%5A2:t&m1gh -%mNa6u/CjZ`?Flb3,>&)M/UbT)0bt#U?n)VYj]F%:P')(*$'P+*Jf6(SS9#b8d`9lfBg!4K'Q?]d=FV1TalrO'%.C=sE'=qDc8PcN -%JA]2Z?AA[Dg%YutPQIH:!2ulM#*P'AEZ*0p/GHu8BRH-6&<RN-ZTUU[XMCA2L8^3\ZtjZUNY:h<VEpA=IJ)"1Ch#[H0q!XjjCmkr -%,+s[T'N>Sb0A)53=YFIQ$A.raU?.teO;^*;b=.3tXh9T*L885@&"q-CE3%on3j"[>Jn8De)SWJ6[r$b635bs42NVVq=s@>+=nXYU -%G8C7nKOnt-`e(U-8L[?j=,[mGC^8].$CZ*qYeu@R=L"P>iu%"c"7aWa"?(8^^Uo<s!@?BD(9$.t7tU=]G/iq5TP["j\F,;eTIsLB -%0C5CP0&)kXa/@24RVq[$Lp6';?up9gNE<oe%'PYGWt5:N+bP@p=g,9'j'nnUp<(+Z5)[Z<==pgN&\9h,\G;+4>C_;Dpe!Js4%/?2 -%gQN_&C,`cP=)1BVTk,Cj<22[ZktfX9D'0$JX37LA)>+CGLcMMahZ-9OAm-mrlFnBD:=s#'[5?!0Z4uH6j?Q%n,iApteT!9F2hGFQ -%C,Lb29I/8JgXuC.RC<k]`mM1M"'0@8e1\2t()P%BY)oQ^q6@PSV&U*PW8T6EjN.NH([Z+sZTG["0hMX/P!.\E`Q"FIoLT6[7/D!r -%T+N::T`qdTA-T5hLSa10c%70-,<.XB9H!JNB=Ud^+X=DS1e+@%W#oEkE#"&nb*=WtdS0l"2c[(c\!'$7doh['XN-/dIuJnc@+:<5 -%56T*!4A&gGkW'tS=I$IL7g8*8dOhb5@%YUnc2u\Tlnk[PZhTboKc3lMAkuftYT#/gbBJB6=5[fof1XiJ5nt%\;`"!'TV)nd;YNFm -%UZjGTYtGFoL\"X=K$2Hgq`$FL.[e#Io:4Dq:r/B<.E[6+>8r"MI*@Oj8k`jTV8H^%IVp`oYaeO\?@c.V.4;$Ea&]1-b[sXl\)9W0 -%5TlO\i.;`mr<VaZ-9r15KDLV%+*CK*J[d=n"FX.kiW,U/P8sscfR;,oM3^%b*<VD0&A<"Ba3jd[#jOMROqKF%l/d]d*J;m;M.?T- -%]#.P4=E./sKs"O?5SCDR\g]l1ViOl>Z%=[M'\&1;aJ>n%JW$b6,Pe$AFh3#P+MZA/N05aj_)Q)g#K`rp$^H+snH72ukDmb>V<cj; -%lcIq+AkGYbKWJq2hSlQ"8RH1%k@eKp6T2B))i;r6@Nf3idp4Fh2Mg#(&F0>dqDK8bUsl(A#uV1&5Vg'(7b"*$I'@KHkPT(QZX*iO -%7^fZ"^%i2Mr<G3QJ_!49OU+_P1iF<]r7'K?kYD,.*\d]?M@e-la:u#R41SHSqkS_#AiQi-GYg>2H4-[>=9bK7\P0,+f>"f2*'.NP -%Z[sn4@B9cthdHmX4Pljkme5ecf%)E/<r)QmMFFbtaR3]g\n7WJ78iQ5r.#K:H<M`A5]dX?QVhG.m++un,hU`c$!*DP5CD$ih6a8d -%'l;DA3C)Fg[@EfbkS$@J#EoYKOU?+EVs1&S6\FJPrqWG3C_h#bej[Bt;T^2F/g_=gEdYWI3"d8^rpX'CQZ*^NE(=c'K9X'ER`[;[ -%k!/>gK_Gb]^0B`#N&GY@bH:C#D((\#[tU\UilAJY`HlhTE"<LAQX`FD/YjqUlg+j$i"fHk+.7fQO$f2qokR?Ss2:p_JQc:L0rU@1 -%O!9/g19q<$-)A&(%m<EB1,:)9ee#3MdeBCKCiPc'+6aR%HApnnX51l;NfgT/GR!?IUf"EA7Y42/^bhr[&4rt*Oa+1'[$%;\iL;f@ -%hct>\+k*N;MTnXcC;D2"VTH7gA\=-oPK3pHKl$"BThD1LS;%/WMV(4SiBQ*`ZKNn`8.-M.OL?j+LSV]na]Y':]L1B#W!Gi5KC!/H -%&1)n,=IP\?$uVX#<lc3i2Eqp2#.J.m1LbBj\)L+-J'hS('_[c#*j(&.o3Lu0:,IIJhNeod7<jQc'Eg/<eT6L!YbJ@3!INKE'=9MB -%9rtR4%BiC4K$7+?=bAIkVkT-j+5Zo#1b9EN^",bgDM/=2!\sYtPJjXDXDQ/6j(QX[O5o"D!Xd0u_WgL8s&Kt[8'M+BhUohkB=Z$@ -%`N\W&UN\.k"B02sjNrO'\Jr<=B?f,=8m>Fbr7WBXrrP&jK-I*`]5dI2Me*2GB_Y1be347RSpab1gCZHjS(NFVm@<p?Z.^+@:0&g6 -%Vh;uZjWZ6mn+m&B6fRhY#Hi98@.p`[TLtRQb-+!PY\:B(FD1[P_9^?Z,RCO4,WD[ADXf.9#LaSn3GRK_+0^8,SJQ77R`=*>"j99O -%^AAGk.li^`.j-@/]Hj=F?,Xgjct`1I!>hh!LqDt\6-YpqrRNhu#m80-\s(Z:nkU]J2Ge0f5-q6nS"Z.<Ka;X12l%rB=@S(R`RM*Z -%$-(4Mas_kuJEquFG'`?[Xe9mU)r`<dY$P$EZ,dt+XVESkc$-*&*%Zo7]jkUDj6@/PDoiN&pX,1KQ_"@I'QUY+aMegJAih/f$1M61 -%V+T^7Kjq`5WK247L!?c[ZaLN;+1a,t:9UNc+RNofb0eJ@Srdo^8JGHR0*="i8l!l5.JGkHaRhRcPLp7[cXZQIA%Pm-!hurP<gV3a -%5'!o?8"uZ6*^4moRWi[CerB:@1kV)?Co7g#U'DU/>%,C9J-.huWVJ/)Md<\L<dOA(]NMrg^fCb2qMY>\;/5oXSL-F3SaPG#Ea-j& -%S/QkZ$]fC=;p#/!iVCSPUaW2K?W*_4Z[Dp?J5!HrH,[S54#dNfgV/L5+4)$-_;Z769s_<uIl<3p:Hpsn8VG7r4oH`tT?lSIoIN%K -%rXi-hn:9\2Cu/>K3Br[u/tB85SCc#hGFH:M#)c+b9ja-bF/Ji].MVa\8ZC.X_6OP=*<th\JCQe#qqRA@XasP2Rm\qCDqGG?ml=K= -%$@_<1VCk(IC?i2`11qP9P(:qjEJK609WOrl8]s;*DR=9PAe=)/<^)D`K%b0?/.XO]`F6n+88e1aA.".uhKoj%L`ig,3:f^e?_[ld -%f_&>3c'sI1%jXqBm2*V>9[+B6FjnQ!^]Ik/f[MFM4)'N'[XP"o5,3Z[SHB2ZRU8K?d3*W1J1k3^,B&cHq)eqg0gi3W5RGi,U%g7r -%3_Q2JO<"mU9.-Bgk)L3;8r^2VPWR>pKH%'S9a=rJ65U7=LaXpBet+NCaW[LX3Ib)8OC?9(X2A>D'=-6__:8iUYPb,+<L]i*[LX&q -%M9QtT;+$1QD+:mKmO@?nl5Dao^/JU/r(n;;Gd(`_gm]8U40`XokmMc\#oidRNF>$Rh2R6h=MR5C=c1MY%jsN&Vl?O#*Y+dt62+MO -%BN9O1%C0UQm^k4CWGa1F=8uO#5I?4>041WVMR"sEUD=F/W+^Q&/9PG-LrLkXTfV>A>9m$%^'`)?_!&b1J.iY+hTEZ"e931jJh.g] -%V;0:EE@<\JqDA4&a^X%!s(m@Dk,H%^s6C3?WT#I']df#"ICo&]FTtJ1bGGPZBP#o)r%L+_S,6#d]g+/F#V[M4b:d\'g7dFaDao\G -%lk#jjVb+hPn.8eg<QVs6Q05f?,BHQ"2r>"%]Fk6Eq8!>eeBi9"9&m/iN)Ul*bYbMX5:k>SM(2!rkb%Zg#t53P`4dN^^uVWC$R2[> -%(2_Z(1#5.?I25YS,SYfGH?G>9Q80^n5<D2dA.TCQ:>:?NJ=dH.,=^qV_%fA7_[;utMirROo$O#'kp(i@jg/u6=i!jJ9qW]#3\.[; -%&7WJ^g_r!TALcJCe"UlMKi3>e^V^0-8p$!h#IYF>j3Z1)"LM[V%m2<EX9<gk$Y\4-U5D>GVu<9'KofuT@q?Dhd('hqQ`DB.[&?mS -%+!sHuk8)Fu#5)Y@-t(ekgQD//q-d$/CeU`S52!MtUdF7K*ZOiiPk<m4UP!e[OjKgJB'/Snl:Zqh+0O`*31=.%&r9e^=IE8WBlo&# -%ZntX9"W2+I.)H8ME_A?bXgNRGr",f=O7/K^8+DicE8<s<"kctA2qPmL^;[t/ns$'fgWW_F"LPk:771OM=`AO">X1GpIsa#?p9eqq -%Z4A,S%;S8cR"C0\YtEHLg4(=edrDGt0A"==nF:D$($6U&NaOlMU^*V_=n9XsK0VJ1<)o90aMj'E9CU(qfS+U(WPh?bPA+`o"h=AC -%dD?M"OaNY,6HM2$$fg'p/9[r@_br]^"2j^HgBq/#EnPYk*/0-A:%Cs_GV+%n;YRT^Bo#U^NKK^(/g-XW-4k4Ts0X'':3HZ'I.L3g -%2m5BVj[Kc!YDZD12RER+^5R4,Zo,:N]TjA,@LH6_^U$G(JEA^&XqT["KUT#.@5e]jLsQX(<Y!=U5Xr)>3I.0KH5r/&kRns]=BH1& -%itE8G5mrL?nokZjQpg%XhG@IX)/fY[RJ4o8Usjr"&dr6Z$rL+W$Y-Z_()H'&f"tO)<^[O*h3_C6$BKmkI7I_IYK[E#!3Jc6.ljW9 -%5]:/jV(8/Bc>DaoNnp^/=2(X)6pSb[X)'V;#e0)h/SX:g>'?JChe4$sGa$u*IVA7>:MiWH;/hHN$XuC5YA"H^`bFC3YT]B`!=lQa -%8q2_i.#G'#Lf1A,bDl!Cpf@4.$4[GFIo['2!BR;jX[srcs6t,Ple<XD<Y=8Fe]\5@fE%E,2L.Ck's4n\'<JUcP<7-GjB@:pX]O2Y -%U2]V.'&m'p.?t`^g>S<^muXomHDVbmCmCNL8<Zn7igl$\_87F[-Y`P;@l^DH[&rs4k)iIaUP,s)9%G_"N[A"ni'e3]YY,Bqo+).I -%%9+RI6&J6qX^IgAR,+,4ZuT+HND8=r],&A-N3H:?[E8_+*#>7O[2*V^QMhqB\/EE'6rS*MXS4EN,j8&j>He?$FY`cF90__Wt -%HVsu1?i`47aJuh<XRAK=BX^"&.4,7:PMV.u:#8F#+JRZtC9\<=h!+#g&DQR3ZZqH7-./Ec-^n)K?$k24LaAU&<7m[q@"tNG:G4ZW -%E7EQ<1oDh-#IK$'e_aEOSb7VIZ<Y.h]]h>R4QFYRV@*..O+)=aDu8/aJEnb^B'M&J(-e#c>T1n]-8r834!)ZY-_TRpBVn.MKg`k! -%ieIu/Uib7t/.ge>34r,\[(rZ&I>F$t,*:;(UT6>:5E'"Q;gs$7l!XpK_b%!:M7J'C>hqAsUB-m8c2]SN!$VWe6+Q"9&/em";Xd(P -%`I/(J4Y=\;qa&,n@sV=>0i-`9V+f\KbV5L0nqn=p_.9+M\pu3cfV0-WKle)K(gjgZX`G7/6+Tj/S[KkClXdI(53<;C:Fmd@`(E5# -%QFJGY/c6<i5_1K7E,F>?*M^rkZ^/OS/dsik!_LS9nTOe<<1a:TJ"qVinM\fYVYkWt%)0[kHfYcTpFQ6UTR*;lc?b.(fo]+cgiJ'F -%:VY?r;8(=e(;!)9K:8lt6h7fdUUFD0K8dM3#0N,iIpHA!Q3>rV`_3r3*M+L[(Fs0%C'$/#[^4#]J>mEm<fl\Y,.m^3h2iXRg%7l% -%P.Gr/:_K9dlt(<jjU5+<VGD(TIIQ2s@)9W;rrGQOWLLGKLj)Tef)p7-p,u2&Gp;"q#fSUM62%K*5CdW#$B#:?==q([Q2\JUK!()/ -%@j?b6GJ)^KKQejc0'9'=r5GR@r?'Y+m@XCO`<42Zk@ONsEfX=LA9s+4Ia)@C:U/mnnc&CWH8.>(iCc5`*eNi8_;eo5!HWZ7/YI-+ -%gVGrJ'57_#O(oUu58CG!-4s>ir<FbOTe)jKT'^s@4o9e@c2sR;bBa#RA;faYX-qLcNSR%1L=$7;%/a)aajqdO7+Cu5Gd><%LNahX -%jRr3jG!r0LV8nMH2hmF-^N*tU[\O%ffCf-7;]`nTOi4Jr8,KYu:F+G,I!Ri11rDhueMmNeZl"o&J>FH_V1o@kooCQe61@$*R.G\G -%blUMW/>)gb\B@!Z,JM,-HUGofS&uW8olMiW+i.o*?<r$,>]Bkr-XcWCked5P-c.<aBdi2!^A/;tf[^CN2F=ZPF6tb\]fXAl]i<>u -%91C/&7)Wi7Rl3F_?1)PBBnhc5.GT*@2gt9>OI7NpFX)//G&iqD/^FNqibJgu4,=oF&[Yfg]C%l,+\bdKY6IZfjad4$j9P)NA`0D[ -%_!GSojC=p3U%k]/]oc;:]g9RT*eRodDE9JLMf*>l0[Nq.Ge;8AqoE^7JYVh+s'Udo`aamrcc3Wr)7`d4a`oir-q+#rbMH)D_35;' -%:RFJZ@6IH9Iu>DK'A:8D,dj8Vl.aL?(;8lON0KE>:W!^7M0I;uTjT20r=ad1RGqS&cuWt!oN-P:Rm2;s`F&Z$^3t>-mC2!Op5cua -%a%ua*5Q&FfIf8NcDu]@ZJ+;d<\OQOAf71"(qpg1ErBnWns6DoIi=E^&rGV]&+91iJ5QBlts5S$Is7a;*rBL5Ef=t,ArVRJbs8INC -%bs24+T>(9]^\n35qepr^:]L>3+MW1"LMss)Vr,[os5IVeo[h]EJ+]F?rqNdKqWm$Es8KLZJ,ep/?hr%Il!IcXTD$$Kor%,*r(kqZ -%r4a'?T0Ag<rg-F\kPqr<qF;.e^S-k(q)H;kYADSCDXbZ9IPl@#P^;MahU%;260ibYR:/HbqgsZWfJ5"@#g&nrgrrnc&/_:@@KVq_ -%q:!<K6l]?k)BIEBdR]J:a1M\l^+=Ioq!DY'j!5fi9tFF.0sT?n:\RT[H.uQ0s(DLQe^8$7qR1<eJ1ud*r#l-L`MOVG4'<Mo_Vi'% -%!H$`aom[*W+_i3=jT3YJqa%.+FnSsZ]TGn*5I0OG+J_ol'A<=Yetk'"P!`o;bn&-Sr:"?f^cd*Yh")TD0e58UXbc.Uk@'q/A+6]T -%h]@6&7Jpu05COKRp\TeC-G3^[n*]EFqQS[?UV!YR[tc'R>(3pF+.kGMcMqAJb^]52\_cW_J,G@oct1u09A)>?B@Au]n$.N,:+VZK -%J58<Weal!g$.4"GVNk4.8D;K_$I&B?#-2BmC@0OXa6Z:ig[l8P<<Kf*[9_\]=@\5]_:Dr:LJrMFV6J_/07?n:<N9l.@Q]ZB5$taX -%4'8P_UpANsZ2p3U9:;;)BW&+6cY3)p62'?cBeC\.@tHe3cmT^pDW)IGXd4k^/\F4<@f=iY-L`iNs43,=hZT%nY8YC=.eTUh!]?&% -%iLP=S2XS*DAbgi`O]5L^[sQ\l5eR2,KE:IG)EZEe8=Q#4&FZ"e_W"-VV`U_@kf*u]oH,#XB`0bCYLAAMobNG'F*@&R.EBkL,8<5@ -%$VR2<-cCa1petbY\p,^:U,f/A@R3#rF?ceWjVFh<nX[7a(TT5P?<>PArcI=5OehXW;C&j&arnM;6(Pi381%AE`uafC)u%kLL.Qt* -%3jE;(TR$&"baH@$GtF<HUE$-"EHS<0deTfGc.U?.W"e$;>qeN8gMUTZ-Qr5:TL+O*P%9m3D@_8j]n/U\pua[r(.OIU^c[7"dqlFs -%j12Af<?qgUbkj1E-c>^r3$ghP/T%4kXBVT`6n,$Z>UM]\\_,"b5c!pED10"3h1<I3M$>M8PG%:G;R`GKHl@?[T#J4)/udog:#IiE -%1q++569fOsY^=u^OdaOJc`"'=7u;jZ<q.6,4VNYc<a&66-SK*RhY^h1Pr$V#ea]NNCt*FIe"33RU,RK^ghGSnBcXLlF;jsbW7fAg -%,di*_\:M9RU>50D9NLKtb*q.JMoeB9CEp#hHA3V@do^qNNcj^8<:4giR_V%<$s,)qdcM:ao.roQ.V6#80@Mrm;Sra'VPG]XALO@3 -%VfC`?^9iK+-cp?%W23Png04]@h.Nie^/R!9[".o>ZdgMnA7u+jKRe$aceV5`UlS>bo,oUtE[.EOBL1,+((bLQ94j=7;^B(LSS'0# -%hr1Sc.*o6/gK:-TWCT'JC2a9uBGd^[N-:jQ<aSLh*VB1J<%!p?Cl>_H!5[a3f*GJZ,!/SnUQMbmJU(SYB04BA;O9]"Af<1HL$`hN -%Aq8(t'7<t]aWa`VC\7#2$jaSbEZ<"(OiL4li_km:mZ[t`J):TZMi.pYkNkH!gV@[1c'%f1lf?k7D;Vi15?hF<fcV%XZKd5-b?!oL -%BjP*p3o+BLm0Qa:0Ci6,QXNrE3c5S_X?hOH+KWN"kkJ99-$"<dZ;88%^;FaJgrD=c(Ze)gFI&8qJ=1Upr!i++OCPfYPEiV_Z%ZGq -%JA#jA@a\d[rHfunh(,J.OWQ#$BNe93m-r6S&:T-3o_Bo_&QgB)+FQfSI;;NjUT.JhCfX2$&V-2&C,8r`qKgZ]?e+lK>M/VtfGZhR -%8B_(dS^8pRGV@q#jKN0SY?9e]ZccKo^_s3X?3,2:9`")HX,.Y/*YRA7C>CoWD5h7>r+Re92pC[Ce^1_.Tk$H0KL$(u+V.n_#bbBg -%jqU2spM52b.7ddPemb]=Eh)bDa]DR6S<Zb,%>I'XHBosRPV]*'+A,_+;J.-[VR@;(`mAZ)5$SN&Qtj+#:r.L&+3Gun'?-&B0.,%[ -%%-8k'nBajSOFu/+cn<aIWdn6OX=%7ChaR7;crMu>pn/V/1p$CSn-s@Z[T73h\d)!O*>L8sUh2^m"s8!.)Is?rM&htk-AcB_(hS0r -%YPMWpdBKR'(jr@Dl][Gp+e/-[W6tBLpO9(io)=O<d"m%fOAlV4Hu@PKYL-57VuYDUa3/nM4K?/R_[b480;_:b^>iYe$2X@)qO+`' -%;U0Q0CJb#=_fHsnjdRmUVV/\QD$3WfLO#hLgSg!co).m/1%u\kkf'=jh0@MX<d^eKGAbpm[%,4%DqX2GTBd*`ej^A#4<n(hd_Dc@ -%mQ3;P6%WE#qIr5:Vs7_p=1XN(Eul:KqmTGmkMfE<(VS>t3q_BJ>i$L7NLnujek&a(,q+W(p/Ra.Yp"Tie:/J!o+2Pb$LM-@FS/'B -%63sPf"Y#)Bo+G)F99^1J"%i%]qYYAPpN_j6i&6X,?cG48YNS+:o<;hRI@Z..Rp3SPK9sJ<[L#0VE]T)4ch6",,JU(no6%`=MjB!m -%dfpnIj:Sg-2MoOm9dH'&;>1/eo#^!t??LB4kR48--(RP:HX'q@TYW6L?u2")Q1nWm\-t=WWM+O%RQ@=/:P@955//)07n:k#W_&@1 -%_WOe??D,'e^er/Qm[tiqS5<L[V3IER7.Ne:[he,son(7cki,AlJfS[X.#dcI'*LLX9NShkR>!.cDTj+El/ZMR,-4Sp"t.N1[,P\> -%?2G+6iFuffH#^VVd#.h#cbM^cmGR*kY1B:r_kGSqq&rmRC]\\eo06Iu6H>PF2G&nXNV]%sY(:JQ;FX0ArS_Ls<rV[IXV$9-?2NC" -%dlm]tU\!EcB)^neNW7,^^-Fo-:^"Kq<u^![3:e6"K.e<]&s!k+Jo0W.e+i\oHMdu]]KH.%hELkK*\W:o4J$cSStD$]+!,9[a5E9p -%O3GYf@31J6kJu?Diu\$Xjlqg%p>PH:Ge&TTn0n,-fQfS8DY)cmF.5Z\N?0a.<ViXMIs\&"^O<%$5:Fre51I+bYJj<!_,0n5UZ0*8 -%YRB=TLUW==NJFQC)NT6-XjMoplg9=!m`>t3jhop@nS2G/jLZG)h`a/;+-5M:cO]QT%o;-(bC01B+iqFrUF.-G"G?KecO:'Kc[T7d -%aJ+OK&JAOeofIalRLT,b_a=([h[p\\!T+V1iZ,ZW3+P%Sh\@4'4Q2nS+C`4ZcOUVUK^T6\R>C;='<-fV#o&eXmg0_sK^T6`h'VZ5 -%_F=/L^FN]6>?3s9AAgq,*C1n`nQfQJqb"URE5W:cB8;N6@=D#AaJSGii?OQU>lgbUF8.a=,c97B7hCMkMr,+9@RA@a"Hn!Sh[rI9 -%&`4<so$!i#+&8Ocn/VNUAq>D$8BI&pIr8*)1IZeB=NU,N^FQPL22=CT[,h$f5<lYg,/,S?A5D3s!_as#HU:E/49+(Y';+C4%l;m5 -%Hrlt476Cl60ua,RJk],6Fnb]\$iFXaIA8pmkIS?D%c?=AVM(T/qY!GObWTZ)I$]JKZG4:GBd1:78]db+45?&n\],PdMPSpt+0+=7 -%q=B5=SAW[6fC=[mNelNk*sr&Jc0p/\led*dleh[/LL2\`Xc^f<rTE:J$B;U$#`:_/J.#,DO-TF=Rh6Bt'0Y%ATfH\t\6:7SjHD#4 -%dTE/aFJD$=dU&U;IMj.-Ls;ct]apA,CYb-[OF@9n4M9-Hh["IAY9rY\:9ErgC8r-H:4JIP(smFGeaC[5;K[2Je!MJ9$-4#l9<2sr -%Wb/gKT#&,G<I"W"V;L\JT#QBZrj'D[93[W5h+GRSeC-Om"i_>-V6+>N3]59FIr-=$+'$06o>VffUroPUa%$)&JV_d#5N[T'B(C!/ -%n/?.`Jo'N,L/dPAd]AoNg4m?eTED_V"GlsO@*?+:kh.^NdL61XWe$-m@_hjem/nIR/i@6'FP/)DbC0mQ3,+1b[kOj[m$\t:T\k@& -%)a%>IXPeA@]\N^J"gF#77m%'dON1B<E;C!_BmWX+>W7^R[8>\p(1?)/QS66hd/>-51K12l[[U&c)Fr^/VRJ7JhsQ;)&1UW]V:6Pa -%`M[*A[02l++C(pk]4\hp`_'#-d_$X8@_06+-9uF^^3I8lF10=0LZnA8ZST:KSsM4a61:$f%:/`?IBH1dHcB:Ja&Mt[j#%/K.)G%D -%cRcjr&YW+]/+3uA&Ff0HC9l5?a!]W`rricLN01]e[L/)jDDYt:hK?U0Ci4BjD\kV\GO"2S<8ur@aRkWkb.>=/)VS!4BK$PYD9juJ -%pM!EHqhi=7_.:0`X!o4XI7)-Hc@0<P2B3ZQ"-oM(<VKq9CEo+l0,_f^G\rHB",0X,+S7?tpp<XX'2Zb!13TPqd),+*(l<E5ZdhP) -%LWsZ(G=6c(=#6te0&CK@F2!r`Vk&Qh'gcSG*m9aU]:-Y6_qN]OY2WE'4[^r9mJ<[Hi$F2R[#qV#+0Fp6U`M`ODJ"G:oZNDlqGMb! -%7FsAAn8)hCqHs1,^!Te,<H\W)cT=Mif$d6ioo.Tr4^`Faa]bR1qlgP^1N(ZS,fS0'Uq6ir_bTGX#p-TU+*OkB>?#2-XUnhU*Vkn` -%kS8eOk!!FTZ4LWT6L(W>(@\/P2Ua\9JAW/%e\M`9HVcV]AZRipKqQ;Y*oL2R5R]8$ckaOS@u\d\#f'P`W`-9ndh?9U-S'D+9<E2` -%W[:E)"&N,k+e3NkMiS-Dp-OY81h"qO0=u!ITMsg5[I'rdYZCpF:Z$]i/XM>Jn#RU;KLkR*R*BCD1Q0NaKiJeFhE4hX.$Hls>J2p3 -%g1U^-nb^$F'gW/=oV"<?:B`DSg;\Bc&r"qI?=Qk0n@rnjb-/GA;tft:ZU2Q.kG3R<SNDF39c=c:gH)rd@1=I]^clQh-UcO.(I)_) -%'^OlC`Dp<Cnm9N1n;RKI?M#u>F&buX!h3YD2RKQ.iQ=)2Yb3GlJK7B)2G9>Xhn\PF]k&Pnb(M:k%KXt"&!00gp/XE!pb1oAZ/CmH -%O!")kO%B#1nC9K;gDloXYF<07I65h\E>-n\det\-kW?(:cCNbTD8Z?qH5Edu]!@jGecMLJVS_X,T;_0X6EY-")^/*J/'&?sn"?.o -%W[KsI_$qrBjYWPnmBAANa27?q>U3:3M^LVo-V(R>8/6!)n3LqR^qGEPAt1iTHuhf@:XA66Pehc%[h[^dlEI4B4TTC#A=V^IS)Hk& -%CZnAUEncHDBe9Lg1$6U;a)f)<G=:lHP$(o@bVcLCp5[.a2YLD:`U8Kn!cLP(bQ=<m;OT]%.,s^90N)8!BV6N"33.$$E\c25*Y!3U -%M7\pRj$OWSL,j#NR;c@8'k]Rk$YiPB/S.0A:iG4kN$ULG"s#C$.;NW;6NScJSV$^seA!O5*`<;g:Q!du,;Wo>)df_dY!C,Z\u9UR -%eX<`n7U]eWl!K50mRB7<>!m@tYGi_?MphE,fa4c]gTA/`_H:u8oKMp;f`ol886.1.qekpuDs1bOT>kDHh.,58UYFC5J3_q`JdB4\ -%S%X)7<H"tq3TTDR)O7_skmMb/"Du=MP07Y$eSifr%jMWapKZf<\lhg"3DfF%?h0^.WqJak@HK?M/TH\;<r6=,95;U,[Nml8I@Blt -%o2Ac.!$05_4ieAVDRr?,7V/?k#o<PbloUl7dG2<m<l-R0@Q">/U\NN?D@dFGO5jYhD<RJZ=I8Qi#Y=@YnKH=P:s"5>%JjV+YQu== -%jn!ST>_ffGZ6e^ak.RaO@ha%7^!*$*S4M4?&*.<`=r,0QaeQUs;00'c"[+42ouK=+A@>"rDhZ+t3@(TUb7`ZUE:J3L06&*NGZAE/ -%U^<P,qP99sc;AKn37%st*W^;;<-O#5$gu2^,\7E1J6]P+abgRD0<XrIkOc\69;1.gjb`;==)X.rpJ=N4K3/"Dn0j2kZO:@&/B;]e -%of@=Fe5UDbbGK\EW[*h?)4@A$=euj7;`?+9dp6k>Z=U)H"+%d/;=5_(D(FFd*qbp2,@,kh=i`Nf6gumq2t>_lV\_W%*)4'ks20d, -%Ie[9B0B>'!iQ@=cr\4l>0I^iKH^!uG-i:G5D-]?]!MjA2k_gpY?HU"0T?%S'ls7T9@>g8%B3du0O9Wr84,]bP(2fhp3[Pac/VBn= -%R[IBe9H9e6*;M!qkX^j@3ftZ.?"pMhXtiAVH9A!/m6Fcg!s/;G/128if@0=lQDZc323kUo\,WjOV`lbSS;XLG-gln"\S0u;P065b -%@Q?T>-eNC[.Ou,$dt2/[G2pp6J7qDA-1M,s@]&-pc#$uY5SB2o:)[bHJo!H]o.j.EH-fQm+_fABGH0lTWmS2,iM"*.FnGO69_3U1 -%%7k.*9TaS"E]cE(/W-Oj%8saD5Dj;`4'Xbm:.2n6%o8/oMPt?W,X:W7ZVn7nG$<SL;cTrtJUgtNb]K109G-1ne"s]cC(5NT1^h*e -%-iWlmpNEos(X$2*gt<T$QCIKe51sa'*;dRtoXKZ>g[Aqk:NsjWqrj5,f/!knhT*#kDkg/[Y_GWYQ/e?sTR/b_UV4OFU-Ib<:G -%nq;Us2psp4E:B,.is+8R;i_"i7'oSp2I0g9:*7m28q+"'d;=,8XU[C8PC""$GgHG\+`aVC/7BC<![q\OVP6-j%U41h.eXJ!M^87s -%(RP3f^>kPn?cXZF:'XI3Qs0X;kftrR8Q%G^g&]+e`iAbcOJ&NE(VY;@@U,.K+8R_Va#H#!NjN1^IUZY<U%CFJC^YH:O.C--f'foO -%m887lXmJ,"HT>/;=ho'^Q!?DA-<k7@%%K>#j8.-Y\_0Mh</co0RcU5kM6omV405@Oggf5XTRBo%(u<WPB33VuI+b-agL[hN4L=%= -%g3_.^6]2dCHg<I>Kg0B]I['f51"T%^V%k7a]Sn[2dL!qcpkT:0\7`$$#u0:@@7*hi3]b`G2^X_b;p`193N[_+koZ^OP'\c&W@IVW -%T.2bF<1mmhOtGRhb10EJm"rks,+^3-cW.g%(W(Ci?[@rD0DkV#++O7dJ,[\W/Wp#s#2u135SX6r3-*b$a`Y3*^Ak;0s&:mWNP.m& -%V";nIfOGOkd;AOCKaY]e"*\[GY2&j_/E>Ghk/S;8QI5"sZ<sk=,YdJ^&DgFAn1-(b&Asc?DGK,GVVm'J#4WohZK"%QPDN>K3_bYI -%dp(>HYHU5aB=ctOhDY&.#KCKtO<63cfflR<NsBM?S5L71*ACD!%I;D4MQMb`WJFX?rpV/_o8T_q(&dQ[fWWu=pQ`HK"L^YCRbiKe -%49e\uoG.5.[0"bB5GXs0\dN!Hbr[iKrij9c;efd1%,)Ku8(O>UTP<KP^"Z.LBqb`#Mk.KnW9r(A[8VSrS+,1R40TAd)Bq-eN$o74 -%;@eNr6(VjL$IWh+p93u%G3ct*;h')]BIFtm[8_Xo42Bf5B=n?:SkXb#0I)j5p$f=`3@?c"G+,R;b\p+ab583C`ddC7T)4(Xa'#hg -%En.eV1i7QCMGZ3(Z[J:?/;_MOO<p[4p-7PkXhgBZ]F$2+Ar*D.<W(gGE4Tf"WAEC@NRfYqC2hR#CK1\]%=HhR2<</HnQ0=i+HG!2 -%_Yg`$V&HMeP[<iL/3NNo.se_%#:3Q3$jZPZ6r,lop1(N6QNU2+/CdLg+(7H-N=b$"PRSl?R7BgER@;of03oS]VPhMeK1sGtm"@SI -%1qjuB"eXj8emrq`H;M/d_4.<GJ=a@c4/H,0(b_bC7&s=Gg4<./I-c[YCpmJq78-`46AKc;q>hd>7lNZS%YB_?APW0'Nt09p%R?$F -%g@Z<!V<\l@]KCd]SY**(8jf34^(6]3?O3^Zq4[J[_j]Abjm*R9qF>)WfMb`[Km?$S_,VsuSO8HIo)mfo<.2$]Qtj]E9Ug/Ep^q"o -%2F2/Fj<HOoBY>TM,mST_CJ3%AYP"15j(bI]=]dEdRa_A30-!H8PbV=`6U@S48Ei`0.m/R5AY^1-Z6+:(4sJm/!iC*%ZAZ-..V5K\ -%>+o;oG[/8nIX;O`JURU<DYCRlj]ecj[iM["*C9gsP=2O6MTXIbmi@%a`p=cr7++T,;O'i2"G@-8aY5@L:`;*i\ba'MXSQALKL,nN -%!O7QSehm=qNnl:!J&5r^k@KXp1gk_A!sa1t$`g4i%!mPZ=jXWXlAA>PFt[0@$)Q=V$@L?LCfS4PqCVEnlEhJ1d",Pcb^4mZ33XS9 -%3Qk-7Z[9&U33)D,lQL*K,oXA]9WiIAp,Q7+n'Td%6M"/OXO%XK!/4:;16kI[U5Wt'9hE<qP!448SCXRB!Z]9/=.MU#KWgbpI3>6t -%kS",%:IGDI9DS;GZ8r(?4F)fT8!]@6A&"@gm;6RTLo4nr7u_b2_]S=70Ii`QplA+H3\4RX5*<[Impi]H&`)f,Fl'\m$s:PgJ>!0> -%gt'(08VVHV7cD,:8b+)a!-<GL,`4`?BjnHL/L-=-pI66`U"4-S_6H@_6RJgbqOoEQ/L1H_*A6\>,Iam[q/g8cLK.\bML)]!obG): -%DZa!pR[3FIYtV</'L9.X<Y1DB&,$BSESf>V?5*M-R*^-/YK#B6*JVN&L>,_+c9t!j>$a=MTUonH"oSqpR]VUENZCeUEX0ded:$5h -%8[q]GZSGPpHa:VLjM$S4M=B6Ec:ZA-D91dq%mff\1g&1n#*5(jdPTS+i;s0Pdg)R/9In*/'W8KA[X02YZ@G*d&YO4Y2S2gbcrFcL -%TS"5Ck'[h;Aas#/mkN46lc&hU9#BqI+@sHWWKhb1Hq=Pm)t_O*7D,g,.sJ7//BVju+4e>1SB*&e%G@eaS*se]0'"<[%:;Qj&P\jJ -%27LD^1S[e'd4b6uB%^]4gVs_jXtXi2A!nF93R_$Gg/W(75nt2e*XTX)*b+lJft/8<[,/d*0a`\5n(+KeQ?N`q-'0`F.T/?6FhY,5 -%g5C3MCEmKdc&`ZHPc%"M0E1)e55j$hs$9?E:VZ[OZ0hSRLL:)D+"nT45Q'?pR`58as7sPUs8/F;Qe_Y2-s6?oGbZqB?eQB5_lmg# -%Rn$%1$u!"Z0KZ6k.pN%T7E7O8:/BnS_,^q7CNiQ"(O4sh\X2<P-A@g52bNJHW0=)+*.6`:?icqem`4R)\+Q>S;dO;t41[L?Mn8#& -%*e*k?:dqb^JKqj1\Y=WYbs7M+S<U@V+3<C&??^p+71Iq1)'$7G)`2MHf$a4"[5"c"LqW$Dm`Z':*j":[J>4RpYC&9g\Vs]FDl;H( -%.28!$l@O/Ne(.gRdT/jBU[D6l1+ET#k?f=^FD;qKnVZ?AMS)sk6I-5YFOI`bnI!ZR'X`V<F[(9J';?@[YUAn)DkNQ\%']?1d0@^r -%=9JD_!EZ0j3B&45Z\V;c;j`]?b,df/**6dsG-c&e$DOM_JgX4fK>1XKiuEa>:cJffql0iUc,_tcoU4\_#5^JH"1)r9@IR(7$LG-_ -%W+e1,@I[S59g;Xu-t(MT#O5O[4.r$bmHpVDTXhXc'lTeQ`;Mp&4gS/O;/7V[5//qEj4`bOq:g(m=be;<-t@lE"HUf'bC*L%3qL+s -%DS8"'9hYLb;LBLU/Z*5)mI8%3G`qr,96@[):@%2Di(7ek</<#[P4iX_j=?0jbsTshk`HI&@?h1uo;l>Ld^3&PN_(tNYq^fVn'hTq -%/9.nZNg:d?&TNQNFdZFX?u:<^SVmjMAnfTr,%@2pAnYZ)pJ3WN0sE8ei<*h4K48nMDcU2D/okW6`=M4t?1tYFd*rt9o3WY^[tQEF -%AD<N3a#8Im[LoNJL_#;b2@Bm'a4[+b"SnWk[cSs!#]VM>943+0!-:A0$e%jQMS^Mc@,3d&b3QV0'k?"".)aVSk%AhF>S_97SH(6L -%eH:H\M..4dbl+*fq"isW"le+'%;Mfl"+6p]aNRDU?iYK"oJ$9@_6=ll-ibZ:/S=2G#eaV%dmRRheS<OL5XDFt[bK>UIeDu=L:2(B -%4O@ZIgBAU.8)'^qp?G>KYbEsoW6nOX$.'1]#_*tDB-*0d>V'EBQU>E@B%E'CW/+;g4MIWoj[lH*mW,&#MK)drLf=i<H7h`Wa[<O. -%2"Paf\HrPj>A`\)fKXPFI8n??T'e)rHb7nt"bNK'Q45HrFpB)P,&/6I"rLtS6OD!u<bg:NCto?+lDZ`)J.b]V&[-H6'@)6i'o%#A -%=Y)lRs,E.!FoE>)SF$)nH@S?9U3*9s+RU`PB?Zn!OhrcEmokABlYMKQlZBJHaYnVEYW$Z_2K0_oG6gBV4X?C$=&"h/(sHA,7.YRN -%aNP\#-o[TK?F_<&<uj@Z,FS[[HpeM3f,):Kn)h'_kXe$U6'b^A$r4kRa4/.<NBKf'f'<07djUlY%sYAgjPq&<8'(nIL1GhbJLF3q -%NG1U21,Wj>l.4BINM?9>>Wp-gK_Ra,!"'X%J<e'8id37:#oOBfa(*`(a[0$Z'Gq!d,tO3ll+N(s@)7fW;b,l@NMjL@Hf'ncVagpZ -%!$@,DXr&"<UgR5mZN6VI(>UA5MERp*"$*W](U)5d/8Fg9p"e>dX0&)m!nV?F09#82A,$EO)pFRap[3!U\[W=nknT4E\8;'G&RX"e -%bMf9,p:.LeD$8C;n!b-2Fp9G)C)Ic(dZ=d,S`%=iCj9<]@6k@(%F^Is2Dc7#g#i>c6oel%*CJiN7SQ`eA++C(C@$N0bTNND#;*l+ -%7:_cOkm/__n*FdDH@Y>uT^YO=`dp'lR%INpe*!tlgg::lf%8JS4Ig&^TiN2-+0F>dBitGdF!DA]*'CjZ?q2tQoj)dgc_kk$;)Mjd -%@0M_3f8*L;_&ffNf8!nGKt-<cWZB((M,.ilU^4d0eHgCpq!r4,!2$c7[2ZH(ZiQ+hE.C^Nm"N8&bPB3sKW\i6aPJ3M+.d>jemQ`T -%@<&".,[k,t%9-+jQ])&HXrZr)'U8s/\W'2=#+c<Nl];Q=A/0hN^X5D^798Q\gurKNE2+-n`"@ecHI#.PU7$_=Tnif>BeeLuJaW>5 -%\4shQVm_H12(@^iVWp`i<lMCC;qGV(cLHLnP=^I2NnBoUXmehsIdUr)&)$(L1X;JI]_>:mI5CAdi9=Vg?3:LXW5&S>dqcCeUZr_: -%8.2KkrDOR$DT,_0N9GZIJ^[G.@u3(E4/$@KQu8lA"[d7L?Ep1JGcW'ug5shHqD'+IJJ'cCB.uKKII]eX@%B;+2;4''S8"Cc\tLTL -%$VP`;lH#EieQ4m3.(/.PE#o=5Kf-40K6=f1;"e?)Ts=F1mP/L%%^T-k+TRhS6qdj*Qj#E;^tAf@%LsDP-W2E72Brb..+;u,%."J8 -%3F/c68S:9nM"JePab<@q8Q^^!F]lN9*Erag>=K*#S:>]H(nS,4&-_qrCc(h&C@:Y^f)=:7BLo,Z4<mgRBK-g+m2U5Mom&7S!L:D' -%$()JG/ERZr_h3*^Fq+jES4Qa5<oUC%M%s"/O3YjkXUZrB2&8uXP_i^bp\Mo_lfqh">k;rWQ)XoT%BsH0>;2.\P+<c1$*Oe(>@`NC -%0)!f-5\@V'-:/XkR`4Kf%(t_\RWnGho;4%(oPURj^!*fa"T;0@,<d3H_X4e))&!4`fA(t9E^uX$1O'B[WtXtZKm[!ejV;d;Yqt.t -%1pp:`_eHgJ7skn;FNK-'G8@hnr0^DLZo_&L<g`rfYRC5l$nSV2'Xm'(JN&WhgIYos;*1Al"IY0j9qHIjD+nS:_9=[jV97:$`@?:s -%LS&)YlR/M_pcAtU*X]b:<I^SVq!4a?doFGQ_Doa#bp)*p\Ko`*bkS.5.:28)DP#`C2pSkD;j:$c!KkDKb$g?%Fgh@-fKc=Lb"K*h -%m](sEr;*hGVI?2UoBW<fHF!4O0(.*uf2KWmMnh/o3go2.6li/75F_1(>t_5Y#+)45C58C[i,LS\L8S%p$-^)_Gl?=`/@#=\,*m`] -%APWY;5YL_=bcr_\f=c_Z5i]0N$U(WKqF"b5>%k4pM4kRp)KCuMmbsIIW\-1'l:Nf;*1_k3WPnUGq:DW&(P5]QU7gj6FD6KI]@KQG -%.,Fiel&,mP=AhC6V#m]HArFR:C+f`VkFul18Z%sB%GUk=V=kqM(ufpXnt/%a#!DmSPEP@.?gGETSU!X5j=th1fc6j)PV8.3jJb3C -%Bg)qP,83GA#.LTXp_P\K-niSA-pR2/MH>Cd<KfEmg)W/`0l`^VH=5*r*f\Q\<BYfLfRf2E&d4n-fnQ6sKc?LkL]dB^W1AmL7]tq0 -%nKtY!FJ>oMVgO2B=.Yf70(Z]Z+UHO.dQSqkhTT6H#IWo6AW4',/-W_kH2!oDc1aWJ"@D1]>L!Bc3Obb;N[_e*DjRg%Eo[:ic39s# -%;;fIdEe#271R\k8O_!e2**R`$>F7D:/<N85\o"cH0m+dtEfZbTSN#2=9Z<)9/UWSrMC8oJJ%g1`HOA>>S[+6_e4.(1K$+U!gZVBR -%-Uh<Al`/XHP<"uShf4QJpuu\p&UpfQYE-?=bo>M6%o\O.KO#sf<B4`/][=4(e-%e)>B&L?<^EV=O$D%*fWd6L^FC(0$G4u2YB[UR -%bhg6-%;1f?CabfQ?+i%\-$g'<>H9HWL86@1;7,?.3?c4mgT-_AQ56i=\6<9L3l`6r$B(ari>!R!>&54aNmXppFaNOIVeoHLARVD9 -%7uWO(<lCG=\.Y:A>7F>L,U^m2:ZcIBS]B7re-UnY_@#acU&TPEf^!&C^lgI6TX+j<]r&Ur\4S5cI!,0II-Ngn:`K%eWIrbmrloU7 -%nMG'Z@S62k1G>%@CiWF+#JS%\C5&]V*IoJ8UG)lqMQON&X?dY.o3c!OnhXqoYmRGb"M1#5#0pbk@uDA+mBZ[^%jU[m3`S@bNgf49 -%FN$&E.pL[PdA,f$VEhlOl,JCi\HdJD#3?Rh"B9Of6pm2u`_/S=!4>8e=g1#_idPgk6,`s1WP\?dTWSh`*E3a1@66@Y?6Rj#)mE,M -%R'Ula:Si?="g#-/4(O625p]eS.Euc_4<-FrST'Jo7`.Xi">SZrY$]G?kQ$$F'l%ajdf6$1S;hL*MJ;Lg<S''n&P@eI-0KUmXi9D? -%mlCq2A(=N%kQ<Q)Jtilf6qC^]4EbHI3Wfb^M2b6%3dl&RcI7!2Am:kBXYTg\2&7%F[0=-=peo'dGfM^[RF1:l4e)jF?!$03/On5H -%)4NOg+$P7NDX]rs*bp9X)NLf5`MnNi#!1(b<%&iP:+WUn9.#Y[0P[<4`eliG[039-8#)&eC+7@4"OlKlpOlRGljX=mB!lpnF'YGH -%;cB[KrkWA;-;"opU$gO)r06GYs,<InesNe@6-?kJh/-o']L.076(A^`5qgs&k=Z<@0P,RbIBMDsLDX+o4d`%=dg*=F[-W)iQ&6uM -%5R!]N8CI_#BGnAP#:u=#Xj]PH1V=a@6o>?!L$BfP=>I.0&+\KV?X:.[8ge(6j`WS#=jnMJ*:UW-aP%BR'Z@f31?r2>D0F+q<1".g -%ob\.=\XrF:+p'<'&@!C(hd@9])et(CK7uZal3f.DUfku+/0C>Gm'.]mAHq6Y83s*J"\?]u/G_^U-F`!`o?t"`_@GQhH4Ug]8./?t -%U&-N@Q<SsnGg]EJjRLJN+_;mp'5)CPH`"06h;*R9GNd[FK)j9i6$C6_kJ=5eXh-G?4F*rJd[Ys!7:%M;!O[UM@N&B>/D$3,`iV)< -%kSi$5bpFRdXaICuF:U56$]Bm"4V=?t5SP3^VE*H?gte+$%hBJ.\*pZ"9RCW27cDU>NtZ!6`D^`3g9H4Wj!"Mj",j\"04&&QDU$i7 -%V)+&VM9*'^J@N$R;`mLI]AcJ[nggk8QtPNfbRdu]Q=6d6A1ZD-hH$c/"i)c7Ad_mFh%-j@HhTW`,N6HQg&ai;4iM\,RV$-R^@Eq= -%Y@j!?05S'CSeo-&_QuSlJg0aEpKa>7[9*S&Q.#r6Cr'.j.?t&?if!sG\.=fUB["b#a\[&OKi7WuOOPJ.I:`^uU!'+(1(;]HL8N]. -%MIJIX]'55?#O#b&Gm;F&HH!`%$b@`n-e%4>#d)$VQ'E:2Bc:s(o<g;m0:EnQgE0NV,Q,F/rF*Sn8,NBkU&Ptd%Akso`JE%'NtmUM -%@_n'\4K.F?0XdUF\-L?jOF]@bk\6p%J_%sIY[uPrN2d9Ua2;j.0*GOiiaf8_%R'RseH6/^U)ZI<?rerB6uX%eHtP>5%bj@P*(td" -%o>6W).4>0T-8FjWnfMU*6Zr8KLIKc`pk%#5C*5'G"_W5^cj_h!?apTCQ$`lm[WN20#!a,K.[:<lNc_.<*+ZdlPfOMe;/bb^aUb;> -%5jnQ5n5`'@0(s61SRM44Mj7hl_Bi9jIi12\$GTRI:LQ'.fY">*is=,pn3"IsEslkTC]_p6ib7bXd.FN*ASY=:Ane68LWJ`Za!57@ -%2F^p3bmmdK'W]h&3%`p8H-h*'H*_e=<$`]uJicViS+ecTRZm-77hAhId\I:XnC.#QS:Zr=RYQC8dV[+u,IR,_?raBDg>c^)R?KV= -%U^65F(O@pcm-)#kC/XS<@jM<O8fl+KV!BcO$`S%lfb?=*U$_9YXGsq%XcpS'X)Y#;L7ZS#Cro"gd2O%9?$7>'Gd[13T$,RiO8F#` -%roOpE"'.!:QXIrIf->\'_K%IC1lKch5LtpZ7sdW5Bk<VGRDYE0I@%i,Ca9>1Z:d$.F"eo$M>*b?RPq&$30Q6pQg1A-%XlT"<b5Y7 -%$Ip.g3l2%G)?4VsBu4Z;NN:@KLLu,5%Ti[kYWn4GhVD40!Uu.e(8^d5[i)l]h6n*o,#%s"INYPLXk"N@]ZBXJhdEa)1-9lPNC>n$ -%f^:n&G)L",;Y!;4>bQ9i:[RXVe;_&&\<i>`.=R`.-`ip^MgnQ,5S5[qbu5nRJaT#EdoF3*/?3Y%BSY,)8',0_1KOD2G2;W$ZOB*; -%fX;o6,OFd)YTm>X1R3&?#59F)Z&e-=,KhB]?dm/t^!J-PT_m9$N[#"+]5Qj$'>E,%!AAPCE,$0W3`W8sQB)%$5m!7qGP@Pc$afI1 -%o8%L57<Rd;k=7pE`c-D+^>m-uI>PLQ2XK$afFd=6SlU"iNa+>H/JCi`PiT"5(.B<9k,&)l*iuC6IMlA\+Wa\/@r>SDfk4_;S&!ZZ -%/!"=aP;)O40ZdB[0rD"L<&ubcm0O'c(K+lV$_a#%Z?5f`5k^*k_JPgZ_>63H+e[2"d_sG%M]5e^"1;>$&:h>0eV?o>/Jr);N+hN4 -%Jr\B1a]][@aEZjG/j7sP`kdm7h^`nm**$qlIRi39@?6B,_dCUn0;RZM%JVijm@8V-;5T#hBqqjaX<l_kBZeSGRUa6`LiYrWVg#c+ -%Sc<0.mO)u4J^X\r^jLnc>ES*/7Vu#i`f;AM,55,'M.lB!1ARel9!12j$]K:3&Gj@Ka"jXn$F4M%B$e^B\6GEDLNBR*3"L6E<4/S& -%M[<`\OEHJ2^Vc&bLYi+^K9baQY"tr`[BJ&4ne"pgV[^uSnd:Dp-P5)BQkt]7g5K!Ag'VLCrBt*BT4!58:.AL5oVK0agj86NS8^], -%SMfS+C6`3W0L(NA,ZT!goO7uH8fdF:C0aI*<Tt\3fD>hD2A/@d'PHSjhZ,Ws#5n\Y8YFG,0qoVJnWbWGW\fEl6/:,@=g8WXA6*>4 -%S5KEV>f6.$`jmmP`/u?2Yi-%cBsrTu#mZ7UX9$?<__.bO33_q*dQiC%i!DjYR))s<&Tob>;Pr)=(@(#jCP-ISeBR%.&/KF8[p=k, -%bEG3L?[S$uK^V8acDYaAe.EP*B>R=$4YdLfCC=8Omo@[HS&%Yu;E\FEbFo@XDB'+3>k^,*Ct[9kLar,r%%F("g.-t99E@j^R:f-F -%'\Fp2d2YGn*rU`IRo@p=XS5YG(7[XI`lt!'cX>Z>a(?^6q#D!l=?l/d\/B@!p5E<>)@UCqG7V-?@\u<%Qkc7KOo11Es2c(:.Q7Ao -%>/&a89IFH=g<?5C-4;'+4'Q8CVe$2#N^m\aKoq%5U./AT$8jUp=7h+[&G^%]SE(=h_JA;>mCRG.$JgoJ$mCWk/%oE[L(LBkOgaQ3 -%[[kW[.\M%gMoNR5Z8u"D7_TCH04G[5EgWaX/HnWh3;F2jn)N>,XR)aT2$jP$XDFd4AB-rI_[=R.P?C&/!BWWhiJa-h^)(SfL#F&c -%:U*&F"Ua"WPa(CQ_F,L-13HFJ`XWO6d?A_r^%ShGArJm@bK,!@l"sc)rCQ!*"n6p4Xq0e(1IYN4X^e7Vm,j0^#Nd0kSo/r8\Q#<4 -%?#jQV`G^gR<HTsB"3c1>$h)\bkDOr[!8O-^Iku*a4uQ@C$&mWq]qa/ursd.:l#q'aaK?MK:M=*oct&f:aghG[S#"_c>2d\i<UDoj -%D]WMfY)Grm)u[R`>Ui"#Xo_)<=nb$mBb(:67e^SLG`qpee.cPs)(+co9/*cYe+4/qUp:;_>NjJQ6Jqn@&2u=$7h8U'SZ)Vc%,FLR -%%SJuR=S?cJ9HDpE4DQc-FTJ.7$!i")$fD/NU`/<d(9b@d%p7dg[\H@bHJ^V,7^+[7J:T=u=s3.6<j6Kb-WR9JRSU_FXXJR;W\!bF -%XO0nlU1`L[U]g4ECLPM!/Tn>*,AkFukr<5@g8VeCq@.Fb$&W3[I2\*-q3"QB+JG"@.n'fL'HJ"`W:qRX#3n&<LE_F:AM/k(1oc[6 -%0I36U(i1=YA&QH'b^?c%LC0VM$/NdU>T!2#&6^!I&fKPK9Ke@6"I5nBK1AIqq>Zh/HQC@s,Y@>/qAi&!6D,5ErZ_OQ];_)a?lLYR -%+HdZ+JdSE+H$cFCO2o@hHN=J5"dPZ@Su:R0^C_OLk%<Fu2&tO/o]`[hr^/VanKO=m7=U":U)%:I^0acT.,F(['XA!N]$u>??gS%n -%G41K.dmpX1eiWGp\)X,b7KUi9VYW3V&.Z(8h*;6tUsIq'iN)fUXscV0npOcBF@8GX`#S'*97eTj(2,5K52hRDUJ\.`rX?Z'pE*T: -%X(KFj3!7!2T'-pOM+\M-Ve*R:,YthR-t_ts-'-4>NIou>/i:rp]JQWmnjA<.o3n!i"'?LU(Upl2JFq"C6=_C@#jt=R_IX,&@V'Q= -%Jld-PG[+ZZke#)oS?I%U9s[T*7qu$emp^[1fFcsu[-pT'S#M_HoH[-I5+\Ch`cj.U;D8ljdT&%N=W@/.l?q.BcCgEN^pdTu(0.M: -%3*%%O6!I3!q]QG]:?W8so<:,i:2&B\.'/XjdIMmUIo.BEN6ogP*RS^T:4Q,ZB]h-K\m--^0Mm#5EohGcYp,%%gjfR<]Z!nXL#O:1 -%]M"FY>TiCLCS%b;[n&tIm;#pi,q`4l_K.a5cc\HpY"OWlc\6`f<nR30k)GW2RVV!3rAMns+8.n4m2+<G.9ba[Jf7XEQ>fdu]AP_o -%aeE9[)(loLPe/5qP]i7#KSr\q<S5\f\BKZqC7[m2@1Fug07Dt.fe0rj)@B_B>3[+uC[KW6Gc<lcLpMkK[u9O1S5@rdiq7\O4)<@N -%$LRtQVkY=Q,:D1J$=kjtL1RtkPIJr6b;WmTPIOshX!+^Xc.bJFS3i"eFO'NK<pLfnK`37mH+:kZ9G;H@c1+S7B,S;<hjDtq!17"U -%GQu#2kNJclh$.og)In+ORo?&&]+rSL+'\k,=7cVbd?1H%)T@tV)<R=0Vf_@IitY,qT)'XbD6(JAl10\bMK[FjN[;u&d;7QsP?Q8; -%qX?!d`ZlDS;^9Pgjmts&p2d<^R(f1Y8^'?=f/Mb\--G:48UsHg3)K;o/apo@:?jL&bjA8/Bbj#n.I1E9gioDh^CEHfGmhW^i_/>k -%PjWL(_=,)A-OD(p$GE4SYlk`5,-7cH=?84Cc-Mor];Q_oUk!=6RY+Y_4X:k!fUmKlhJPc#?N3rd,s^0gNj4+I]kA-,U:nfN?A;6` -%e_I';DHZ,)#9:>hn6O.JD3nnJD>JGMWNXtr6+=%i/=qH(43]b7^@.NFPFM>\!'HZFh1I"rZ'HDZd0@kl5:R6@P+GXsYA?GmQ_Xi! -%Mjg7cgNT<.p6`.!J"_$;\?H['V4.N<phV%Q.qD.m9?nSPTTXELAWfsE<j-&.R>+a9b&3MGN1aIN!#`)Y"C^g.HP.#k$3J'#oi%4k -%4WEcCII*JY(U)h5G&NEUD6*SHS7rGKcLN)hd'UjY<Kd:"WG4ak^-[L,NR[=K7Bq7+a[eN6)5Pu8lfF3Qhiq#Y,o)-UU,XOjIB;Di -%+nP:l00CCN[4`]5be#^=;Vo+A1(un6`L2(=;p];A#DGk%Ng=e2O=XH<GO[b6V/Oeb(h9TAom%qOQIpQZ()sNC"CtJj8o?;`&c<o4 -%j#L7;Gj&t.O<rQl;13bJ0i(I:I2c13mLcYNOCd/nWd./=]nCFEc_ZR_.:K?k4Af;iet0q\,+t^nbdlrTK])L7%K,lt"/os`b?#gg -%E;(IP\[i5r.O.3ZYA4@TQC^Xh">F$5*uE9r]>7rN6b#d6!*+eO+KJNP6aIn!c_HfU,3L`dZ\(1f.@ps[!In6;#@QKN:#$@KcPJcB -%XC7kjF=8lBh8ZEp8-cXOmcDVd)o0I0qN)t3"'@o+=bSjYK<!9?WEkuU-$(uShC&"HLPAaa+O6TU83rTSL(ksa"0qSd'6u0:5Oa0e -%*Z=(&-N_*,Z3[ro:D$EXNle,-<D[20>5Y;JPLtf(A=FN^NQR"]^S#0QqJgX$TA9!M'kp\d7W(i(!F:1-1Qe"mR]7HXh,@7&VV?-4 -%h!*67=B(O[7dfN\j`5Wre(Y,mS9H!S-8#M/.\FZJq83+^l5me@.*jKh.'IkVEob0aY.W`+,(0!IdTXS--6mX'jsK`./Rtnh'AaG4 -%kN:ql?UQg)>C$:<,uSA*It+u;C><UQ(3A7X50?/.&$eAc\`D52S?r!6=jDr`kfHrM!I>N0b&E]amM6JqW's3omjB;1VXX"+++rXf -%c*(?4nMmRNFXfiu]5u:u^J`OsFnQOeSLN6)!h?Un(3Bp>fs^_^YV4n:DG3%ZY\'+2io;ZEPSE@=E)kU"B[!XDQ@t_eJX?3<*J+L? -%XH2OJl7tVFc/a;rB<hC'l$'%=AYQ@SS#1OqMU@=KN@(<A=1nsqQ*C;D#r<q(G%K@o=Z0MNT=(#i8''%Jl7@P557('eRP42nbB<]* -%CggHNe='VZ/ZLMo=E4]f=/#4&rk)c4e'\=XV"VlAqh0IVM?'2/MP%n!osiFg*BD;C8r,FLkbZ&SEEf26nmi!Y'K2,IMuBlAerP$G -%1gYd*OP)?#*q.K5.b^o;"FSD-I;JEY<mT%mY/#mS\KFbsC@0E3N)!sa!;E+LTIAVXJ:uP`4,@cEUB2D(YZ+SJj62W;AZ)PT945>4 -%hZ/WL3Wnn(f97Uab>,ZVQQ>.Te9g_q57P&AEu++WAM/P6P#]*J)n\id",@bq#u_i`f:_k0i,D>O%S2LqJ^-DQ'>Ql@oH4pBTA":` -%1GM^.dj-spl#-""Ng9:opLF.&(M60lEQ*de`NIi*/4ho-#4$8%r`hLU]ROb.Ijt&Gp1qhoaub2m.XHD9QK<9Not7bff$L&grSi03 -%7?+5Fq)7NXW2s!+,jhfF8j1iZ!U)%p"lCN#m$D_C/mF,EYAU9S=F6VRp4h)<A["jpTE#*37U=+ALOq%/TY0m^l-0=[r-!rRp8@&s -%el0os>%0\&\bo=2q7>%4gF"-C7XWZ\@W''1]soaUfW'UI[$TR\>B'.6$o)MJMt@GCCC11XnKY6QC=d4*7DGRm8cm`5[OOP;$<*(T -%kWrc_R'Wa!G@MXMN1$8(N?X2fDV)#XS&DObI]FXl=>Kepem&FaYqs9&g>GBY,us"#O<.3cl<6Vq*hC-XpL(WPlb1/!4f_:525hQV -%GlB/bM_AK\Q]o,WCt[Z#F!#sRMN_:MXRC`<CElWhE2is7R'9VShZ\@!?IAq#*Jr5An;eI_>\:1fL8$,QYK&T,>Y]gX=?q.[XM?Cj -%]0TV:?P3qtn/,Sj8&5P-kd8p)IB/hQ#\Yr5iAIe)=UHO0d&fM0Vk>@cfm;^q+MEMP8P@l/2QohPSEk/b<Gf9Wouqln=k*5O'Q;-j -%\6F8rCJ".9aP7rUp6E4ClKu#t"B26+ic6*UQ-X<.8j7q\XfLNhp"+*Og,e1AG]*oX`M3pPYjKB\/4QlnooWm[*hAM,(sK<jrO7i[ -%D/,MWdJ81pQS9sHbP)g]^L;+u)VODXcW*7\&,V5MNa*Arp'-6Yc>^O*l=g7B;[s'OgV7aMQT-1n/A$h^0apmEN?od=2eMqsT#nf. -%GG:`*\6o1?&b_g^,ZaE1]Jgm@cermaiWYJhX;#=%s-uYR<Fl37.2/6+"-$=,@%J6&LYXdZL/]>QBs*$8Fal>*IV=83KP\E^]Nn`J -%Y05n(g=cR\A1)kim"PDeFrRk+gXgeb?BT;Qg-1(YNXr:Em[$-!P,)%[e],++oY9RTbkA[J0-YL3&8L;0*n^^YJ5MeTio=/oIt*:4 -%^TYr(Ag7S2s'5Qb77lmLp7a$QM\@3mIK&1(I5n9o](]fHZHh_0]u[*l;F`>NcuT$)/IQW59uUM4<m>\AD$80`4mKP5Xpi?5_(b*P -%Z#`5,PF\M)6J"C'ZPUnU[''YOEK^NWig?9<=lCklr9mol!$5pTQ)#U0]'T7i27%TakrhF;IUIeU0u"MV'Ld9OX(f43"0-q7ZJESS -%*c[.=2Y,VY%UGHCnVl3M0ig.U,KXP"+XKgW;Vllg@$[lDi6F7HV4DGm4lSs6;L7sNY?]HV5%:d*n*CJlr)&h^m/7q#%S7;Tm"&Yq -%:#YVlC(ku_rV_8'<YKkKZ2n@$l+%_COF5u9lJ!@p*3Os+s5!#@nD5iHpe/4cro">Rl28<FXY"6q,Wi.q*Qs(%.D)`N),q.&ZB4V* -%g2>#]$sjg!>1Z%UcWa!4,klsX(V5D!7/k<QqY]g91B!PhTe4`CP6l97$1c^Jq*4m;jh^j:1f+ZSmD'lpnkB#`aaG[r'Xk$j(jT[5 -%p>KdX0$j.Wdc]nMefWEO6KL\4)[e7XotQYT[nHn.JR"da]er=uR87:7M*h#%F*V#"-q&H.!cjk<%Z$TSd8;13Ekb=,m6qIS"+r`o -%[)@U";(ZiBOh2`1DgT4d>YB\f6D?3!`TZT2PaG\HD2Yj9kbZ@IY&kUTa&]@4-b8$']:q9nU`JPB6Tk=)V4>0H`u]3*Ks4p!@&*ol -%D9)\sp!&@/_Bg-B?h?_Sgj1gkDsJd(K'T`33?)?m%/hJW^84XifgYb:Qf/W_rCWn!G8L,a*kSQc$/9=2*U>h?VSFd+qNsChkM4(t -%Xp$Ni790#IY8<bt1Jl);Fl#tkT$_TJUekE/!g-GM=?BOHf2F[les:>HSHZi)X\Xf`*`;FE\m:g@AB>DF0Cuad`g%Rs0$IuH-nR#S -%^p'7rXhFGMPC.^Vg?*MZJS/aq#6BVIU0'iDQ1Bh![Gl!'6J@Hgr$!!&pM,0gFC+GLm'quan]2(LAVG&XI3Kub6R/u71C5!<lu?Vg -%KlUL&c#39P'2.>p:"1\HWEHHlVAS*.A2,(uOe^\?AhR6?pia0H6nk+(kGHTF_K*#C+PS)M>gG\l+Ioue&V03m(ebCQ+-df`Np=`8 -%U5k*U"fgK\"S[\H)TeA$CB%QAE:4Lu,cF=[D8nL+F0Z,h`r[oW__c_gAlWL.`9)e]fqe$n>cYt"q>,$OVb`d@o<b+e`hLe;ZdO4( -%BApbo9oim+ha.SPO=E,R,cG2QPU/$OY``H84#cshj-gGtdZ8nD=;lEZa@5#X6\>*rn_J37.UN""7+UARC8,R`!)'>7I7XWi6CEFr -%S_X^WBnoUAY:e$,@B7uP8g#.L,+$,+F?/7J`s@l!cu3bHNkDN,BsNT,_pX+#'ZU+>>VZ)mru]>BVuCDZKb!M_+ui#s`ab.a;&cNn -%9t5,B-h$@Z/%rjh84'F];a*Z>'?;aH9D?$nkX/?HP@oE[njGr,Q/Y5`lp61dMV5eCLBC3:>X4%^)/u5/E=j]YfoeKFbcV`0m<Z]g -%9B#t/)/#-t*0%'LIj_d=F^4.g9jR0X-\QQC^c-Y+D*?kWj=oLbZP5)(3,X#p@r%YF)bGmh+(E&'2Cu1mbo!f^fHJToNPnOR%`?l@ -%KNP4G)W&@\\:pp?QVKj?[U3Ir(F(@!;("BLVn7]>WN46r^@(#;/Kb@F3BqXDR\+>O45@kg"\QH!^:aU@^bt,LFCjSbd:n%N[oNCr -%`%fU2SMgq2qmi=+.h1:></AlraYqV'X2o4-r8uh#e6EjDe,n(%QM>ITmXFeG.p/nEVCDUuP(6O##<70BA3Zt@fsh1TO&pZ-N$gK7 -%3bQJDbt(<13f3Mo2(U-fS'>PMggXGu_g\s5`\us$R_u>i^QgKc8O]mN8Dgc@IYOP$?10?/VEL??Gp-(3$7\Ho,#Y`kGl3lQC45Cj -%B5=B64Z/'CXj]8p80+hPX=Jmh0-*/DIB.F$S[#KH,(_="lEDOU*k[XWhJEQ:X1gaHMhU7:3Nc9[.9G1d_Ue-,jr*T+4l4b4)HP!H -%QBET,a?4ot>;WI3ZRW)#6D7O1[t7A4N&&/.>o(\kE3Gi$>h.%:iC<?L=ZFD>gW7BgJQ2%]/-b-XUuJ*XReNEnS0`AfF*nAq@-4U) -%=(@$WY>!Bn"^SZE9HJN//(8*KQ`^fh.Y^@+ZO8m*^I2ZdKfjKb*e&;qp:S=Zmb=4?egVRPkfE;fDC%FP9qZf,rj&*n+(UEPHgI-k -%\]a+<]X4"D]NK_4>dR!oh9-hQ[p$kYkF=j#Gb$NA-CI)PMq<3^AAhqnO0kd!&q\Z^E=q>SN\u.2D`$U!WZbd/QE3]^C/r6aSUQ)D -%fb\PG8oD9;E;Kr@EgZ5=\0TK&Wn3"=06Lhq=HcuOE\i>IXNmJ-MsRce-=]Mm>Lq1^-U%.^L24E91BBu7kbl52rp[g&YO?Z144ZKV -%4RcjFnnpfN'[Q'tR:qRpdjs+b0Ib`pe4Mt<Pkq<3%mIA/g?a.C1oFN#3]?Y*B2FaF]=;GPe=s.GO.B*ni9FE6O8-hi"E4U4h%.1& -%^&u8PC0VONT8pK_'jMMBR!'!,37m(Nfjg*ajE\Gp6-=<42hE-sG"H13R,;gdr5)#KAb@:"He9/Hg[n9k$,m>"V_^-s_rNid,q,._ -%"suVZ3\5NdfnCCfJoe#Kjo>_u2eK"4?/aldN2j=@&atPi(-S%@a_e&^gQhTOj3GqX,!X<Gqo.S+"cVH^no>,qFomPS_]#cDH]Qt% -%Id,])NPtFLq?K6T0rYC'`A.u=`7Ft&S?*P:m*'K7ZsQh8/"3Q\3K:-a=ui!qC+DO29CW8Hffjo_,!ORRNOrZBc(]Rsdm,Q1PJn,H -%>V51B-ji&rEWRjj2[1S&L'3]U<hs0YK"Y58/2FBh8$`jJR?]%m[>SH/[W7WC*G6BA,m(DeIqd9SGP`k%+u(=:]&u`*D5P'ZjCV:M -%T5!J![*`%/o1TbAqGbHm1dbj/S's&WR_ccP*]YVBjim-J+deHGM7C+]dLW!>+*74=CVqt"/irbVUum!@a?KiYAi=q0m/"m2cn^;* -%m'rF;NL(D-/BG3fT=l7%TFdt=gmU4H!SfoM#aFl2Y-c'hN3Xcb=[n=(a(,;^:e_5QZA$l4WOEU"Pum%UTYQ^S2XXi(dbN^Ao)7"1 -%/hAi%KL76T=GI?qP/[3p!)MGo&"T[k0[j"sb'rWQIJiKY@6"<#Wh.A^<&]QFaiod^P#`?bh_u325]5mSS40]k!&![JMu<=2FtXXE -%NnSF'+A;N*P7!JL"[.@i,/Y,)lYH.,/p7i,7*#^96*4LJ/b:%c;cTKHYkjM-=!tg3#$B=Y,8/e9o)GU/QY9.!XV4kOO'>f@`<*OX -%g@jLZT`e!cjQ393L2IfD$F]=:B)_\[mX@2%QZQ!EYA6d^;l,T=]"qp*,[cXn^H"D3SB`XZI)iOq_?,)jW[\Ygl9FY0g=6/jG1N6g -%;kp3KmIG!6"c1[tf,J#0G:M4[-C<.PkRa&^E;(D0[*#PFXscPtrK':(al8_SM<\ml%e"P:.?jJ/*s.2Y3Yb_lEko9_>EdmI%[Q(H -%]m.D18'AOl(1'p>6?'U2a#kk&f&u`,D-NtO]5j;apio46[i5r)\Fsmgl'%B2OKhG0"4P\@Lp]&7<aTWY3U07jO8XmM+I?n7RbGAe -%OZVsN$]J3(F9HLGpE2n/IT7r&@FVXN#ct$l['."d1C2P5&6IRnCl?Y/cu&RacK8O//7rc__t%s<b*6!Ag4$<2dL\^Y[pVb%@7$N/ -%gK^>@fa-;n.=u-EK"_Cnq\dZ\PY(sR%[keccs;?]HFopi*r?]77*N*h-sF^8'iR#<\:A#^1e"!.8g4[\&map5JO<]V%aGK[ZZK9[ -%`piJ5?ke$bbtP3GMm]_((7S)_"a2,abbGpL808n>eJr(2c^=Jd%/12%Rua5hp-rGP?QA<2#hfnNG5U()>-prU"MgTok/XSeWA<[L -%]an`s?sPS4GCG6pN3>M#_Z:nmBLQmm(4!I2%UhYfOV4WGpXffg_8^ik>Urp2]8@!QdSBsu-ph["Rtd@UR-c:VS%7BXEq_b!mdj4, -%,m\D%ne_*iR$F#%F*XRN:Xp=R#7fjo4`n/2#sH/thF/l(-j'W!NJ4,[bgEIDK%;)XG\!2*frSqKB'"["X/T=)TUj=ON*I*+2Lsdl -%Mp#q>5baj948Rt8E9q/7mZ%0e*_VqKC*Y%M5bBgQMSjW\n@Yo,ej\Ve--W:CD#%L\bRO+a6sXjSLUj!HV=&F?Dk'VI=F"3;95A8V -%nCCIuga2p(d][ta:s%Y%*4.M"KW@b*Eg;Jhdj6Ot\dXaF(XEIHYYP].cXE)#3HrJTb`fD%Rj6F+ER:_c#gWp[HtXiaIS+YnK!#eo -%<RK4EQo<>'I#R!qRU:,_e:XM%fCT><`l/ts1pe"(dEmpOlZ)9j+#>jOCMIH8o@i%6oo!d5WGICTE71OG:c'b]qmOsAR&D@!%MIBQ -%>2)&`0]J87Ofm4DEr/#8UD:<%He>bTY]sY'R/9s<&nJ5>JG$*+4-@`n7.Q+!Ht3S6-p/9YfGf0jFfA.Q\;4D+_5UD13eKb@46l[* -%V&q''.6*O`_Yu)s5QLe2V-S"ZER/8[6+CRdo2[)H+?fY4;/`YA!jFMM_R#.,8Db26$,R/e!YCUBMe$0Z<6):1qmm<M=[VE>e=c1d -%,onUb'Xd)AqZ'RoGh#f6!mPqsZ?R"e@M.K':V/mf#!Q`XZcR8u:l]o8CsIOa0gYh>]^/G2W(Ab$Qp@pq<1^l)kTcf0(O+7YM7O7q -%9`T+/':W]sW:^X)\U!H--$P([K*:7_"Od>\q(NH;P0>6L_>[Q%bkfisMR1iO2[%"<"#sTRd@am8$JtkA^GE<7M&9Z<:7I_^n7&:r -%lY6/seR&MK.02j0WBfaVq$j]j=%bFC^9*$4Pb7d]j>Var6s0<.?u\g]K&-=cR]7VFB'frT4/QA[g48sSd%fO)-:f*$>p=ZtB0jFK -%J9<?Y>eQPF2+7lH,G1F1,tJQZ[V+!RUAhu^]25%:(aE\u3Ps>!A?Ip?dI!O6!YNp`KIV6GHYhR7B(-f\1/5`)[8ZDCioXNk]5eOh -%BW7_M9(Ln09+ektp:e&d;XCUthO,1^5D=T%/T'4KQco7\7jh%IHW=.,8\;d;C"kO=1(ro23B22F)B\\iW1?0JLC$u[WOW0-9cIO_ -%,J3`Q,HXH`-X>b-dO%(M]RD;$ZuEkX]+^^+%2Y5c3/?lSl$R307SjAn]5^O#EY#uqQT6j*>BgWe*Xpb-I*c6:l16]9N6EhiB5K_n -%S`OWHkoW'F+VL_A^Eo"?/VU6;DoH*UrO6qX/iXBIU@liJ=agYJJtd$cY6(#Xek4I]ABe6d*JqkrhYbmkbZ'M:/kuW&FP@pWHU="j -%<K1'M:E40=G"K7Cd]rM/Z-rEU;(c>BN/^PP52i4`&Qk`WqfQnYkLJ3BX[.]GC=)8J>u/W,/djMqA48X`9Zk":S^%*I7XG.YAqpAK -%Ou9Qg,6bsq4^@kNQA\(2RS%N_A"*mY;H5A'a3\DVD=).+2Gn%kOtYTOBc^EeRILL7.o5+WnqtX*/89>0;9Dl1RVDVgFoB*4jguJ9 -%pTfE<dD?&<Hrr\sie1[&fjfT0g>mP7ZQrR?hi!Pn]#p?;+n2R-;&;s20Ntn#pO.I;;kh?DI%n>i9F6H,^n9qWM%[4$8YfqrWO$g6 -%0QMaPlZU"BB;>akg3HSK8:cmef<-_C')_&pqR?B+W(nDG"JSW^;bp6G3+ot1"GtBWGeHd]@r;iV8F>WtSSO6K.II4OX/lD9ZAKhS -%<m`1Rd:g-b\;LIt?C.Wr[pkDV4_EfPI+gV1B7@/7q)&c+?mViBMd&7GMiL1tAuq"q0f!^1<ku4"';66DXK"i]E2@&6</&94]1h(X -%Zk^X887YjRDVAjEO3nrkRX)cabf!I3No6[LB]i^EpV:Fr%IPicM2A_<j]Y:7k0r4DnM2L.@<$8gkt5bm%Dd:M"HpuqC[R@j0Z'*' -%ESr)g[T\r3+]uZAD.u3K@GSi.X2Gn".Z1OT(`.]id)fUIqr;P.(hYP7l2jY=?L9+kk``$mR'ahZ5'5?:T^GuCl,gYEKP#2Y':=)P -%'"c_YI:cqa`''D7Q4,ZEZ%gTT1b;^62DAQ`gVj1Zo#[Ypn1d\GA72,#oDj=C+[O4'\]aVt>CL4sbFQZR-tEo'AQ&*HdJKp0iH`*= -%f6B<m_K_qpH9d9FVWJp!H;*Ub?qg'^8m`@5lOc&)\.a:[l$O.1Sa(S_hb4nf0Pm+lCGcFV#+aV@[F>tBL/>Ve5m5sIGtbo>1U-r) -%S.6lZ&]D9l%7#LuZ&C&-]d0f)a=r37OIR5#N>9n>#PVHHjl$0>6nk^XO6#qp5!NBOV$LS"B%X%)';G95-"MO6hqLGb-6QPuV=F7+ -%&6.?.Shsl:rde?S:o]hsMEQm^$+e6iXEcqsW?)^8Jt1aqjY9m%l1jgk^,?e_pB#[R</@3(@DE!ZXPB>TWZ-F4fFoYG9miE!Lrn/* -%nEG?[JCUAW(HEgU1-,IY\#e-u9Up%%G)313V/Ye^Sp-crJm$Gm!s3:joO(.WV2q$eZ>NB<`+WORN\#ZE.Zo1_Y$R147NWD<7r[nm -%HEE-J)XEs)@2OQD*M]MC;qdm5BDViXR^m@O9>jRdHXGcfi2R85?2Kl9++f?Z7p$G[aSKHio&%H$M+3:ZM+=0G)Q.ib?26.8C$j:D -%OA?AC.re,W:pu+V(!k,,(_s.hWN%tFG5g-TIg/.b:`6=l"Y)kBaY+ssl9Bs-ppns\+6(mJ(O2=6.N'!+]:B>ELRX.i?D'pAGIl", -%Ol]u/Pru>2>-D^H?Or':'f>5j#8HPU`GY?mK,UudE*_/<IQqRR_^(npS-X!K`^(OCd-Dl1q2dt@UCJ?r1^R%qk]*`Uo%[b@pgKSW -%[rW5Q'm'Me/csfAr=X_Pna1&>`_$B_e;QR?=r9QI@%9sFSAA)0e/]\L4I3eXYbEq+f)8iI.ui*LqZI2(QAU4I[:bo<M[KrYHmi*$ -%RIM,5BD-c-,VX+0WIKMl+t0OoF+sG2RqQQ.U"u#/+e<\FJnO9GjuN5YM%g_=V:[5F^9A\q',\*DBHuI$O'YH<&)89_L!H/V.b -%jqL<XG6Z8cd*VLJLBrr.(oZcVj%4CW`]&\E?G,Q'0IGRpoZjU-\jSuH2c^JpTq"NrHf"GdoRSMV3[aBm7sdP+=,/iRZpp([p-GIe -%KNGiEM+Wr08G0QsTp7uQ@q-l(=(?Le_a6$X886$9QZXLh\OS76>J:)UpA#r3%9M^nec/sU/V3r$j([kU??^/tA)Vc._n9j$@qNiW -%AfJ_Qg&L[!eS$5]n@We60p7@'H&>'Abr\O/k#g_<Z;)R0@'oL=0\T&dRPB_nLN@'!Yd1`PhWm4jP*C=)fo/gll?ClL_4Wf2o"$Ym -%C%I%L\31J'DGBl57\Z2L&`&:uc^*'M=]r6je=$i?4Q8,BQ-6[DFJG-<p,.%>ka@S?>=krXK_J&RVJT?,9V`9O^*PgTR[*D/T)GLe -%S]`KNRj(Z,BeWJAh./D6#BgTZ(ja/XrRT7]OSVtV_>lpBT'M1FJ=1E.Q*(Vu6B#]BC8a/$7!Zm^nbgmCe]KYN^$8AEqt]O/[WSfF -%MToAse+-O?htD"'*kl1V1"TEGPh;9@Hdk19+ZOAo`kagoX^&?EHpMer?S0IKoShBo)3rH<;O8oL]dLib/pGr6bU%eiXNhJY4i%]S -%C+I+sS6g-.B.C/VcYP,Vd0#K+'+[XEasG1<[94dlpe'.aSq#91S9SWss!HPh&`8p.rN:53S[GdK,8J]7K:'0*.Sq<1\$dL2I[HI+ -%D;F"m&aTpckMjK>6EKVsGhG[@]D@;ED]ah&_O/e.h07e2C#q8UkVBDIf6=&:@^s8qPWdX\D>FK1OiJT%9g\`8,52qa%OXN,m/uUV -%[dl4J^J]t>Jf"3Om[?MQ)&dM70[`3G1b!)PEn#C-W<"8lMH"9!>2aMmY^S63Tk,1]A[EQ`WhPJ1$S+,f)"+!Qg_VZO>hrXBRoSVt -%$.!uI/&BRY*XktMf=0@Z[3)q"HArV]&,ts>X?,aOp[RWPRun_2"$/'3@m4K!V&7`7;%P#Ho4'Q`!7'k.Fmm"kSJWop/.9E?r:no8 -%J?W]i^_)pAl/"D<VcLBX$+qn.>p^u.,j10B&m&,;'dSM<8OoO=lZ0KbF(1`kb`+LnFM0(hd5iWlT7HHeN\?TK=q.9kXJ)<&LJDD+ -%T)^0B&N8#qV#t0s.e$m";%CF1OQF^"f1^trjanRN[--tlB(G?#l;.aZ.-2pmjC^cgaW^'7('/1M53mo@?n1$l;\deO+Ge1'<*4f3 -%5Q(^gYD1V_l&B;s9IlGR3".#I9+<)8Ot?;k6?%h3jZ^kh9Hn/KB%^f,;:g`P$Q,(3,_A@,#N#.bjVXj9h'jbJDO)B1^W^CD1^Lso -%J(!+*Cs_EUD!ZmbRH-G-p_:!DDt1baG3@ZOj&I*(qOmuje-q*T.RD@d\DA>jPK.>NZY(@u"GOBY2OJ,2Zu6*"j]Sh0_?cAY"0j`@ -%TlH&rW:k5ToP2k5k!&dM?K=SAYRi>i0I!%cV)%B?O&98#ZYg_6HJ9Co*dn*nileM(pT=Magl4`VVqdgKb.-Rm8elf&K0du*+u444 -%=B+_P%9Re%E:jAd*`9TYl.HD5&uhPgS_,_,+"O)0'_@oK5/T-(@fFB3f8SZV=Ob32GDR[t75_.3&JP=A;S9^I:X\(C<XU%V<o$k6 -%W'U]#j?lW9+ne7$XJM6+&+$pLWke[]NJ>[c)0F3h&D*(RAM.=/_Q(/RkN@\p92uco),l%t4s`pm_bV7nWO?*-,fOo?DW3(E\[0_H -%$4FrMpsj%1kZQAkM]FG0"lDnX@Gj^:Ef&<KfN1(V?TAkolXSJC]Q^SLWDUFbe.F?bk(c-!go=]4e-LDd/IA]VT(Ro.26">WObPDk -%I(pK'gdudVio(sd[j3NAXB.?\]&&m+hp)r->e+L%].t9>ocUl_^&LsO^@0hc*!fPmqU\A`8*aXkbmSY@mEEP)X&SFfQI/WaCOY^. -%=2m=q*.Q]'LbDA%0X[Ve(9;7`G>(6hcO0_KbC6p4%WfR0?PF1FVYph\fI-KLN?/lAl4PH<F%/i]Zp87"48,5am?puS\;)?o7'P7- -%2pmZQo25[7m`9#..,u>h[Nfmpq@_k;&RhM"I:Y'SPRs;@@%ho,eXtDo>%$0D<nsk<No+8omE)[I9']\(OQ>3P/(iA%"1[TmVk;l2 -%0;X6tZ2mY`C<)O\S1TR.j2k?/"piIeTl_S*WWpt'&D&gd,X%s%P%[eFfHK>ME9=DsA8G.0!sj2R6aIFF`<[,2Phoi\n*HMSo:e1t -%BKUGi\&$`,@5VE0OI8t,@*</;5Sd/LcB[ZDGNAMGj9pT-T0tei;UbW)V>u'[c8WSIj_d:`A$+OQ2EOZO9?4*[2t"ubeN\#Y+b+%c -%4bC"%GWX."PLia#,#Cu'L-%Q1\\+?-e6`ES@jO1idX3q;DoHC`$2&;;O*`gPSO*mZW<a-<-u5s@GH4<WEaHYe%e]%8B^&lm,^[BF -%o5<4894oV)9iR[PV;XhfJ9[$2=$B4)`RLpG<=c%63<m=k0a#[-;Y60rpeConlGjb=PB<SDi91S0C:9N@6*ZS$;[t1`[k-N$Y&LG: -%U5:WuICQK3V4QC>cb&W5C-'5S5A#DQl9gih4mciN5C>RXQ&?H8pmc`&"!=X,K@Zuho-IHhM_aq32bPb';R>GG>M[hQo`LZtGH)bQ -%+j9p$rY04ph9r7&W(W:GcIH<l^'Op4;F!*j+M&#uRA;5[m9_o_9?V"l<[hLZZ;Np1H<me*P9Tn$ZmgbfdIPq:(][=?T_\/+^EaE0 -%W(C=7(e@o6$@d%uc/PmnJ\5!ibf98K.h)IqRW%WdN>7]qV"<B>=e\6>_@H]8[p7n:j%W_BX.^L07"]_iFd2+7>Ge]QP7q0Sr#fp, -%%)T/Z<E7PD2_`cM;!hXeh=F-A[81YHYANHIlWn\9/!'P9,+)niI+KH0_B6,0MtWD$>$eY\]GibVLrh/qIKM.CYSWW#Z/0Q-XU-2p -%9=-Kf0ijt1Wqh]'?oui/>EmZF%H0kI9Q+s+3H@"`DY)"n6+Le7<CqSA2W-k_B1ZX3)R;Tbf[]ET+'_22$JJ'lfGfEoT0<?q*d=%n -%%\g0O(\tP0kDLKcFC^U+S>f)XKZcoA7&WK(pO5>[qiIG-YZ5!uHHbNDY*u;1BI/`+Z"dFKfLTXa4Z4+5i(:#OB%Ot1(H$iB.;r+G -%oNE==S&!t\#29[_Up9YD6L]et:=!]bKh!g]_$DPI3iT*_DMip!jbsG8KMkdjI1+]f!E+RV!E$iJ_=5"md$#_JM<h\4@K&g)9'fd< -%+BnH6flkS_!ZE,US=_g":XM5I57)qtbb.sS+#d=m0\c/b1KfBXs'B#gi44Q/f"@Eh`nC+UmP19&`@"L<(7-FYPlVLOhk^$93'dl2 -%<D1?9h_qGoiA8!e>mIr04L\P#TB$Bfqdj(lU1Ul1h1I35Ya/"2o-c0k@ncNQ.E:SDY`a8_XEnmXkrp-1Q9AOrQ?Zs5h2T(2Q?u&% -%ii<gXqJ)1baj?deLLu+@&)gC'+aW78:PbZEWO/CI6Jt9Y17"<dYW,"U#tNDUYI_WY#ShsEMAtOB[fDVOK.$-=DusT.[`VCca]95G -%>cHf,TLk.iQcKu4Z*7L/iG<B+7IEp-C(bc,.Y1)&WG^S`if$CM.ICQ#R5/,sKQ7n*#Uu,O!W<m*/_R,An90rN^rl7daY&`DITXM^ -%)))T?-gm5Yf(ug\UmNrV#F@kkK"STeRrWj`N;@LY4n$&>qK]@h1i1j`o6Ziur_Uj'k!Btf!h3/KmI5HpaAS7YP:@(68P-YJJ.d#q -%E7WbR:?>Dr_J1M&YCpifF1ELX,tD6]4W>cl/C3^r4umHqY.tB&^Y'`<Htn0Y2#<NAJup4c]i[[_+]"s;Cur>nq5YFl[@[>!=X>KL -%q[pY]V*[!HH%<rAY)p=OZqlE)U3]R)Vqa%[rOKQ7I5:/DqPr&#(gt3_Ou<!GShO2(aY:-TMY7rJ/IS@;QDaJ>"u+C[cg-`<c#?Z" -%msmJ@+hPO$cT\=Zi#"pFG-tpH4HFmK2h+.;'<OB(T3\sY4B8i0EEA_Wp]97QA3"D=Xt-c^EV&?t4M/k#&U\T)bSZ7)=l/Ki<+FUV -%PJ:Z%Eu'*IWip(^=(/Jkj\PJf6?MX_`Wt<r5AXJQ"QUu,jlWm*/"OMB'&oi(PNRG;I8LqUEgi\nOaUC=B)R//M_uC@)d+#<i,GZ$ -%Pf"2!7m<GNg!qL`dQN.gD>,ZZ(gfqmkMY4n@U5$ITO(aD9t0/3mO^/]_-Fk[fQ"X32bBbk^[ZGJ<*/PWQbC(3#-Dq8F^#S8X))l^ -%cpt>7P5#"UCNl`e>8%"JOW)Re&nVB@qU_MF8(_D4+E%VmD_UY1r))9UrhP?DKU9AA;C6_B.6I#lG6,=0KV52,eGobE#6QOR(t?/V -%aq4'0VPtThgUT;MViN]-"erS.^p=P4D9$T"qhfS[eN6KT.i&K.9mp9Q1.7s2^ZSd'L^/BAXEE^(hNKjVmV;2=OWq<LFn_]_WsMV- -%,gs2^<1<22f[Jd?MNpD\VjAo@^n64$^4J@1n`KFcXE@rhq&2EZ_ct)lZ9t^;h3+_^GXf:?6CiOO!:!/7)5dDTaX2L_0E*d2X61e` -%%](M_<QD^_XO821J#gq`%GNlNgBE2?7>0hufsE"l:`5H!q4o?NZ_\ViNbT\"53(Na<Z6:QI?_q]KkRDh,Qt,Ar,!9"foP%cSeqL9 -%+&L.0hZsQ[D?Ku&/EMs!RQ%"<DF;*#,LO1gpD\s/g3->;Y9d&6VLr*C6(6h%55Fto1%%g^X4g4uj=UUh.P]kjReFDjIPo+.,1Y8X -%XX0C67Y,>A0s`5V]F\_ioMTH/@cdEbI77)hBum&?K6/Acl=$FZ>K?G;QGYkF:A"'?"<!0Mao^rmDa)*7?895rO1Y#Hd])=,=DXmj -%=VaA+L7PKV7YXK,2@@]k1M+,19B2k<pt?Vqoe*rN1$89&D:FPB!NWk8fX"dIrC(.b=&6-YK#/h"<@Y]D,tK/R-7Crg(-j@KX$7AV -%0)co_.Ek`k3%`;qTl&0S/bG>kQ^(nef)JMTi(:&I4@O"8iF?WC"1Y<kZ4;eS7sKAl>`oO&P-GA,>#uR-_ZN0L`B/2-7,H?77Qn9` -%poNoELY[JV^pT5pIC%=UW8$%nM2aekp0sh2>7>I%qf+0UH^DNsdDIDgVI@M!@g()$UPMrF^Fkqljh&'D"W526N"MT@AiB6n7_W%N -%'hfjNU67>Hr>L!J)S*@E$ol^$kspGHL7H6>)..as`F*EJ0PC*^I/S=AhZEu+j/'L(iU)6n$SjU#/lq"n(E`cqoP0uB>XBcY/Hr&9 -%G4SYk+0gKoU0Gi#ESp?%'&;`#*ar,kfO6Oee%,_qDU.Zo6G"l1:A,hZfF5tfQ^DA#+8-k\G7:MU^EJ4k4"[n#j>=*r5?70BZW3u/ -%XB4[df`D^hVX!/SKU),0jCH2iV#XGs^Z2.7O)@+Q_9=G$Sn$VToWf\iJuLVMG<L1.LJI2@m:e*"?A<e0V[W^1$.J2`m-KOWNOi&- -%@pXG;3-*j:^tgq2[k4ci(3U"UbU*''A:.Gek2c\`&o573>!"aqdjh'tg;4T*JOCIN]*.ElE+d@$LtZr0d/fA)W,DFJg<-uV$^*cS -%ZKYmG7[7(iHek".+)sr:`P*"5bD6&a1AD3Gj<'6SD4RODp\PQZ/UC[d^1U9jih0Q2ZBAf*0&!tlRH$p2%-m.r\!94N>G_%q(>mR4 -%>PBef:EFk&\tX5dc<djCK6*iNi.UPMj+"0Q2cSD9[)dSjZQcBHm5'jp%*mGGV,pfFQ7?!b!gh\$D`qpO$iDo6>1oPTUiAA=XJ6[? -%p9@$?j+Off,*K5T,nn'',9[$a`BWr7/oQU,EdUV[r]]$TIQ3N-.(Y4Fl(!nlQB1-QM9`Ni3Cd2jZV<-9_',q\SJ>#gAfcGk2^Nb1 -%&XN"rKB`aNdb=)0DtsZhqtUY8>&#BjI@V=#p-1rap`?:F>"#t3c!3)Mp$qG!fRC)6pJnd2;_*F7O5)G/cITr*VL6OX3eAZG5#_,& -%KV*+g@LHuXEqPX#L0"*J&i1Rf=4L(D#B5fh*P,VXhEcc\Ds>ElP6eY$eQ/"j/0;u5$ijEiE&6N0!$hZ?5Sho;(N?-!YdWlr-P3*D -%b2.qTG%$YRe0cZON)a13[]c=Q,;i:@YCll)B.[bL:gP6L0ZM8mc$.(N6rSQ?WfVP:,uCoF8?tjnSCQ4NDh7/8TI9$>h/cMf!l\)r -%+cqi]5th>lO;Vo(muG_&WrV3o.lCHC_f64.?Z4Nq^H@H*Om(6mC1DXc`'M+M<5FX?Wh7dY>1,Qn?#]R*/&PWFT,@"S&!c,d*8IZN -%Za2R\95PiX([#$(WLZ>4'TOcTXXdu__Co*k>"^ak**7LArCHhcTKr_H9uQ&i_Or%p_[/,`G"CqmRlsIp$:M:8QlWg?MV])#M!'os -%+3o"4_(EN%<En'54j#_KrKP^SDr"]])"oPS6_4rigDV&^G$i4lAeb4jDA'(/%C:CPg4`G)NLuIeYC.F[?"].TOK*"cmr,e*<;)pB -%h*1NjL5e\D[OadSERSo;$#;m->*1l%fKN9"KP69D[6LOARD$Ft2iN=UA3]^L@,4Cpf&Y]>7NO'AF14tmd'p$D3Elh2L=0A4F1HMC -%+cXf+n*fCYZ5+f(X'0@H^D39>T!lM8T6Qs/VSl2,#OWaaA5Bc_\4i@'58BcNl+cK?.lF1uQ=_5l.JpJ_FP:_QV`/473AF#+>S;RR -%lmfob5s1M-(/#X87D=)uVI:dTcYOO+9+ecj8\SbY#u[O$p1`,rfG0L'WsauRR8QQo(=O]uP'A6Ul&tFsLGTs?99'rJjQ_3Zb>^6V -%0WG--(,Sg9X!8GYRD:Qt,SU)<.;!iE(XRlHjfUDC-f_RQ_QJ+<l1.;;(X"]lZ)JdH>@VD>2(>M0K^N;fpN/7r6j%Ad3Z,%+.p:7r -%(8=<JF0pc68sEY:DC0Hf5.+.e7]9,!j:N/[+DY;h9%LIPkH6YtTNS"MAk@8]603tO)dNWb/D=rs/>dHQ."dIL)jAg_`;;HYLGSjM -%jWcHGU-%Qg9_^Ng0I%BoC9:C@fO/l]*:nd$fW6].P5SAR/:!O`VB-VL<c9qe`Cq(9bJ5&4AA@cs)9$4!CS[EDE&1V?`%_4rST5kb -%*aqe*=7R0EA"H.Z265LR"j/Y\E0%QY(FlMYfg?=<@o>W`[M9$(2S5f=fnY3QArGjt@SnlLT9M-m]>1ch:S^&M_$BfO*:+C;V$'c> -%p3bP]7B-HG+%2GrdsbKnPLsXEja)L]C@Pj\BTLgW5F0NB#]&D,$#n.LW[t8BBU2_^6T*dE[-T<D7:%C2qc]:\.TIe"T6s<aOgN.+ -%p)(9rnQBmJ1U^0I.;Qr\H4'NHkE@r`pp$S:O;Ie^dDL<!SZ_2L=9`^'^W+E)&!;KaXf2EDV`I><bdL_gHmH)HM-!#:D32NCQ&4;& -%p0/Y9HB54`oYXc?[kY2_X!rGGQP[[\kua"S2'Nl.[&7OT8hf&,pUaf_Nt#@`JN0haB5Jg1*''g-4HY#>K/qsLG2.NeI97Hb6/bh< -%XtYMJ4(WSt/b+7nacC:SnG/#h=*t=f1$h76U-u*;gdUW1Lq+iRjt<Goi8'_nm-kWO6GS2C$BVlh*mYSF3@Xf`U@$UtIeI`U2I!nn -%gF_K+%bUcS+rQ7RPU)g/CMP"Vpc8.Ig+$-77X4$WflHLLZkkG\E^+H9"'*cr)UoG#!X&D+6T1=47H=*e7SeOi7H5HTOdmd"SseU$ -%&X3ZF"Cp+s?JO>ajtLjiWSX"FkAd12J=fc0A#/Y@K6GqX#Sq8$Loq+*M<*YpqZ)%15jX`>a.<a.@XNCGCta\-oE[cC^4`-4SuDRC -%NtddtCeo^hc#Keo&QXf!qO^'b4eY_F\ZMj^LL3)ckUMm,R]gPE%U2frZ)M,IHb_JW&0kA@EGDm:/^[aU2#(i)E\1eC%h>L<USs)d -%NZA<c5#9GV/FooF(k:YWpo^>QJnoE1,rc&Po[&W"<qk"Dk-g5P4OSAoT`%Z_ihn?<n07HQg?Ac52mgaoJ*_(o>DW9^DDGmAeas0M -%`_Z2mpT^76Jr*0&Y(*afrU63os*1c,Nq:tQs4@;I?Tp^Sj,a65s8INIO#U2;o7+1HEN?H2jp#*A0.Wd%R`<YK%u"$TM/V;-V4/ZT -%Hjf\YWu5dZJnAR`R$NW.3ZkEo97\JAj"i@e"F5'iaA74=:"TS*PLT`M*B\W2.NJWZdb[G"BdI*cS?i*5D=aMKh\g!WOWpq09;f_e -%bRpb-.`0m]iWQj,qR;&*pVN<pg.O\1;aI@1,j$`_3$ut:TTj7*V_"?DZZsV1%O[#H\1'mq/icq>a$?DT\QY+NFT5J38H]67$VRI! -%)63(;'f0)i_Bktp?:UHUcldQgaL<Ieg@"_0OY:Z^]%'l1PX2l8Wg4hs#b!=Z@FFhc!5eVfkr/tqVs9EfFFp_R^-l5&L;Dq`80"QF -%6]Q?0OW@POZQ_=)Ms(,ijm[G+LtlBJd$>[h=qqW+@1hm!lSs8CNDeFK3j82\JkS'EDAk^O&SKX)b#J-@2XN>k_N"5&D9g63VB"OJ -%Gm6?5mbp,j(cbnS-!:N9qj)8Qhnk]<#epAr_g'9mMS"MV_'=jU]!*/nDCn[4S/%*/(L-53"SondMG-)t!\6Ura)6Gp`\>2%=$KC_ -%H4)jNf2npPSsuFQfGZQ9kT,eDFfpLP.gE1bQspQ,H)>F/$`K__/V?b.`=(^[W@fA:X$>YC%SAo`[)r;<c5\;t78R-!o>VcAWC'a6 -%V5ndJYKs7%LV?)=>NnjBD::NdhmL1p!-_O!7buH/ek,hU.HioEs-i^4D\7'!AN0:-PmRW3,G-iNVU)EUC=8+NBbZt-=>a/,LrMP$ -%4e'J@U012<>IS))BRKB$bPu7M<]e`\OKe=RJVFDe1#*F$k3pOI-<!GDn8O/)T$F^4ldt1@.,\Ha!0NgpB1BkW,6N$7<0/<fj@]9f -%bVT[-WpccAP#O*PLT1&%*@jB%kX>2>,<99&;<2Pd%._c4X\iO;0qVQeH"Ph&&iNeg[1Z<d;0%E>#g_k)g`5o,$&"FF8Lu2"T1:iR -%C]dKa/\pj[>R6\mCjt\P9(kYT'1eq0g,'u9'4UtnfOWqUWN0c7X1GtZ.5=mOoR@2VM6J=>jG-F$6]m-Hk=SM+GnRQE@!=h&W/,FF -%Mfh@tBd`k;<mB&CJr_\$CIN6kF^bYJdM@A^pe'B,"3l#Odt9,3+*o$Z+rFb"F2`U'$Ku4-gL@?0$`OC=o8'kNU]sdsqU2'Rp'UGm -%Xc*k3KERs64G:8qNprH(YHkYZ;+dO$HG#b_V@II`R,1%",5+D!m)Wumm^8ub0J1opI'sD;;oH?Os'&0j%eH9Jhh=D<;\`9fG<a^; -%&.b)JAs?uM;T(sjH;R3pmZOme>HAF<IK7KBrI1h+EN%6'%>^%(dWAZZF9J_BWbR^N'S8Zl4?:p.e63*'HQTGaQO?(@ggHB=G?10C -%RQ]ENA'[6U5#_^5%WJ8V>I5nCpfmkTp5D&<.DN)Do;V!3*^_*8Vt3[pYt,/M,_4goTTfC(U,$d!1gS?Zn3jUVO]tLHEJ%ij4g,#X -%oOa:0*H6J@#2S'_`%nO9<s7oqIKa[8/0Cs3`sS":FN'Wi:6F5OI.gLsM1hu)9\7'CbQ3UTO#e:*aF0\5++J@!Fi'7nQ[uj^`ni4m -%^LM-LXs7B0rMcS]]Ss)cHC@R>4!>(NH+@`,iJe8h@HMD>N'SVdQ40)Y$9H4k!5S>=Q)UC=m%AcRSI=U^Asp]\Efb6G"$.k^=g!n, -%H#\'^6S-+>?nR:fKo4kJ\_+T,&F8Z1;$E3^WC5Dpj\OS^KJ$Z4o%Gd@/TUB"nDeEsQhdOhdqfA67eK1\QRLk@[&f(*k;)QMm1qNp -%2\_m9eU)pIk`R?G4G1JRmJF05I+bHC<B&ZjK<[:hHF*.#Y.+D#'LEAGH<3!a4%LBNqJs-)0Y7DC`tm!UYkKU"(TlA`&KUa*GY9q0 -%*.he6-qtJ"M\eba-+]f.a57kcVSgl;8_OtK(%c)9VMFXP3)%W'=9Bq!a<6OG<(?W;'u;["/*JdfCb^8Y)lZUH^YmY4N`>HO>o<15 -%^67C_<e(hh@>G3[9m6"nn?kI"a9?p:h8ikY?:jO1UN4M*4+aGdg"\Am*EF5n<'W6d01(9-'`@`q_lSa/N_Q5hXE^1X_BS%lFkQRB -%5_Cb>he'UD1lk7]WA@dqB"$P7G0W^p*=J#j.qO>ANZZpJ+3o7,3Hh]W[j`WZXLMtsXjHC<pW>>+f0OJLS[6%jm>32s@<VjpGQl@$ -%UhF/+QmGmi/T,P7/dDhA(gTZk;/>6pZ)C(_RM#FQ>GT!s#Z:gX.c0@BTD/O1cHZ8=_>bpD&+e,](0_g4SB$2E,i&<nna/<EBT8)D -%RXS_T^ti_3lR"!:r2J>]kYho&;3@%6[m)$ts*[Acs(C9^!hPl6aU*3d*GK9c"mFtWKuLO=Y5)W\I^GB+l28387jtko:VBo$.)MGK -%TYB*d>9&Bt;Q;o_c,3R6W<ruK<$'h.%EXg!:[us"EfgaUI"i$LjZlf>i<5gI!O)m1_IhPfPc3HK`/1%%$'ksO-N/A'iY6WLl*k.k -%"P%c\"1A=:!-+6?.;;WA'RY`>8[Wt];;mjtF9"TdB`D1N(20_lT%c#a'Ro7R-+:ngCt*t4.5,=N;q;Nb*4;^fr:g\RklcRG:JW;` -%_,8GISp2M4(0&nWi]89"6/aY#Vj_A_%u[uT33qn%n?L]^.uY#9@C=[L%5;=hi8mJGiLmT]PQE&J1f-U5Md4Z&#em3dF=&`TLK>B# -%1:Z"9$O(a.&WFldkMO!*<TqUgFp2ggle3(DE,@gnR2SjuP<OG)4!!Ni7!g?G`1Z<1J=tY>6BlCu4<.jX8KX!h=P5*S$+@g#k'Zq= -%<\*:W/nmjZ(^Fp%-0)dX':=;?R;bPg@h1qmEhPd+;_qs`h<pLDJg!e%11G2Q85<.fokm0ZCW]m8`%gsK!aT_Cr_>,>H)37)jS]Y& -%He?u:grcZCDRR6Vi_u5-rn/(E:@?$?hu7?BR&<To4gX4j=2hP.8'*tP6s2qnF6a1Q\>3*Cih,!R;"qOu4A!8ZZsZ>+L\i^_8W]!' -%o0bFm&I\pbEE`YXmC^URWQ=&GB/b!^9rfmjX7&.t9ANs2)Yh5^1j#bbg&'DffLp:1]sL>F%FTqX+OR,EMjBVc'NF)n%$u_mc;ZFt -%D.=M\p!(n8pQr*cJJZD%%\Hr*U<#$61s\+4ifOA=mD??ggj/OPl2H/!n;_3Tal,5QJ\s8Z;2JtQdgR'\r\@AE]Bq$gk"h\H8qZ:M -%&W&g*KHHerd8r?QY/gBGJU&-fH&*4TIFZ@YI(O:C9A5&]JOOJD@4Q\h4b3tl(AYDKWuODhp[s,3rZ#65[m?!-R+4j]!%K//_.Dg: -%0,Ic#(W[sDO&ELq#!JhI<-#L7[e1_g+4[R+Y5d1;NQA[l5j3eMqWErpnNS\^B#[VHU&-a*"/C+$%-e-UQ8NpiWlnHomG-$OMQ`.I -%;\P_K4OLR^XNIc>lu+,]ooZlf2Apcb8DYq'5umBl)ns"Tl$<qsa^2eg]Yt&^#JnbkLeYOQW!FLsOmVbq*KKIl'MRR'Fn!<i$-j[+ -%Fgl`"bH"\AH\i=>"%rMXn^#aZ[;KVH<+rf0JcMAN*9D)KqAISk0<\jhOKEeZ_mD9.nn47mTn2",,;.E'`FNc>dK32UH7[l<Q^me) -%#.$ooJHTj\Z<NP.7PU:.N5i[Ec0V<IN'%lherOa.]"S9,gjFqTQ%fNr>drk<IR^q1aZa\@@0.62d5_pupduR=^a2[e%'5Dk@G%+- -%;3BXi0CLg&PFLj9Vogr-Vu619;D0YS,a:=QWaO^gaG;h\Yro09]Oa`:46hUfOU?0#in\[C[IZfo#C.&dGP3s#=Eq*o`F?ZLH',p= -%@ntpAKq92+,M?5dMa5H<,7CYZg\+X`O&Ut+]\S`2Ye)ta*H_-&bJ<kWp66#6ba(6#HEBN<C-(.\F`UYN&fUIDqi4n$m5%Y0j-jt] -%W#`b,fB>f]:6P^2mWl<ZgHaiCpjVQjW?+-a&d#u6/QhlC6A,S=1Z%!LTF58*/VqfQ1)uh(Ej/nA<`23nF&ZoE7F8`dOg)0V[Y5iQ -%$;hOA&HMKFm)#Sj/o[tV51$%m1M/mQrE"fHF;A=e=#?LN!B(mp%=72,KH4k0-?fE9Wh9CL'.sfWaIj\s)fmZs6Tb5+h<b1Mnm^Uk -%g:?5M,lqXMqZpX%#%DHb(qDFYO.`@q"cWfR,slj&:G;DHr7>+10F4.O04m*h8!gohAB<@nfM9/e$EBPmT[2QEl1<R,.U79l?V7.0 -%/GC40`!EJ^\r/]mfB!J.bE&i;SGPZ%XBYoHEM]"kMdbKoLO<V./LE&Rj"d(,!@@d^c??I*P+PEp<O3mNIXlSRiCItA7Fj7RJn?\Q -%RXU6!U->]GUSf^TP+8L&aOI(h$YePaTOE+)aM!Tc=Y%7Y+H`RBQB)]h*2&(.+O<<=T^-kT_'p<$Gk6u(ZB-+7p4#.^Ec<qN/r9Qg -%ps`Bld#JA_EOI6CD!3^-HY=R_ka6X;=odC',nhGJ[0.PG;e%hUGAA%a^R)6LFSbJ8ZM?TQ>B/VZGqK]X]/bd^R+P.*=8082_g,L= -%#=VFM^h28M_*TamGi#<L7<gD$e5_bCcM?u_4e#aVJl)Fs!R\)@hS0/eh66!@gA6TA:gW3(:3]Dg=0RoFY9in-$C\9Ur=Bf9Z`l_Y -%G9&0>7'pYRQH+2"p:U8`d*(egC.NY-a&<E7b][r@;`J,)\a/4h(%i9$N(:WFn+W\;MYQGSmT7^n@*n%pT)^VlDRZb6FE7!,g$?bD -%O.GqX%Zgj]a)/tMNh5n5<!NLJe#Z!<^PCdU>m>A28K\VaZIu62JoG%7),0Gh!4u!t/QGH:nM'>C"pA!nk<BOo;=u]KYj6J!bGi[: -%5)14r?p]^d`?nr>o5Y4.c'u?pP^u-noL5ue/-5`a9B2Ik)pgGWZY&W]\#X-CBV!/_O0N7/)@+e#Xc_Y,]YOmAlCW)$(/^c:-+f4I -%&Yjq"8?p.JHJ8>DkN0XP[WXX61ng03rbT'EnK^*JM!nqMS2E5RI40qH\V5;dYgA<p#6SB&;jBc;O2'N=..%?qD#"hhk^J>g(5Xg9 -%1]8MUTI=:"c<_"cnYHd[Ms8PQW2a?hE#C!PIO4^i6G[eD:etl3O!>>6l(/iI4htbAhX(>FIn3OMqTu),)dsQM5UgP^KW6^.RV:<+ -%FgK0F9c$(4>-^>fXtZmqZa"GKDEn6EbPSQBqk_?p)@4mY(UIRD3*=1s5]a!]9nJ%mHS@i.MB?&7`>5q#nAiQ=fkS.u,[#;0R`[8P -%`tb@1LUZTj.>]0:WSk6DembifWRDgPR`h$Y7bf^^P%JV7OOIPjkXin3:i\P`I^4DoZm(^W&J1`kc!El0_SmU#3?sM?0h0Vg<Ns/- -%=[MQ=87h7"lV!K@h"H)X`>`_^b`4oIc\VKZfrle`m;\*s,XF4gATSMW'kqd[COkQ/0')slO<\qTQu))=Tp!G4\^Rg06&6N4WfA)R -%g4(#)e9c8l2&AQ$raJ/K!B$N:p?>(U[tsK6F10U7d<o"uUcX?2YdiU"UHjkj:cuB$b40',UV]nV11SWOhhO/=!$%#,=JX@mq[B`[ -%:(O!,,?V(JR0-+5-E*`+:!eX*7`T5"gCus):a9PS<lfi2g<si^hR7,&%PE<5W,^ng)2uKSTJkSJ$%`W%Hkq(7\d]C]A^]7`XqC8X -%0gJ;s7[Q1jnA<l7oMgMsa8336Wm>DoZFZ<EA\A.ml=.gKSbm_%=a6"#=\&gBn"M'b"X/b;Oodb\))Qb>ifp']7Fb'K]3<>UKeeXr -%.jKB^TOD?;me/bn4uo[]_e`QM"0F(`GERuj6r<WU%b`61>#"I1N(mN<V4BiPN6c_Po.a#7Z+l<aart/&<hk6s.H#];C&P$A8hs^\ -%`is3+)`<sc;&L'PhE`B[W^\R;LOQnJ$eA>OO'lu%giH&[,tZSa:3Y5'6l8nh<PH0/+gKX^KDEa3aFUcX@3D2d;Y*[.\1PFHTV5Ju -%gomb8F<4'Y#>cVLooOT`nA.J`0[JZsm]`=JWsUq3Q3;h[l]lfYWH->nYAsP[a*t.#_IS\n(%t7AoV$PqJP[Y#OBL4RTiH(MjBcI$ -%a+9/"8ced/J9U8gmRm]8_b"#S*U3.s!pL9'lF/?C'M8GG!,?2.+?,u2[G8LU$Q8,]g/AiEmns[<o4GhT&*Ij$gX8:?61Yt`J`uBb -%r%23?:M#UPQej<2+L^Va3'b_D]P502.`4n\i-jtP*^!ETVl=dO-O_!e*@JY"DcZ_PB`QtAidMC@M(^j`nMgJMc!uMp<0?tYjH\86 -%TWj$Lb=hd<..#HgcJb+l;t+MR*W2_?d=/WB7T]f$SYEepp*lsKA7T`6G:h[]eLrZ.UbhW4j&"u"`.'4/>g#;!%N:(%:&99Sa?MM0 -%ghHL>F!B6njtm(9*@C![!^)gO4(H]`'%GA[`L)-^R_=M8,ET<5Q-/6si=]-=<eEekdfsT91Er`ZpNnoXTVbcoNW3-dlJ&RY1'gFQ -%q>*A_bF%bu_qFDu))$.hO)Kpc'7`!M71T/=E/jg$:2N[A`EH!U0:2V>&U_7l-4RE]#i]!!.lO!&Js'Yip"obihdcTKfP1B$Fg\qb -%MGur0WgnG>#$.oqrYeoEY#<k<N1V%uG9_!mYI]8rS,9'oZhFU=V\Y&".Nu^nXl.P&,HgJ!MaZm1)=n<M04;2Ylg)X4.Sm*OCuD!= -%i=-^L!G]hW4_/(,Ob4c"E"5f<SJLgP#c+iO7HthJ/'74\g4)j@RA`o/#fJfgXPN&_$b'3#S+=*QGGBrIZN`!'MPWVqaO7ciK:"=B -%cfsP'^=gl"8/q2]X0J[#)GmB"L4@#_s.us_U8)eHT'LCL%J&=^&*ja[<<e;dOI-M/e!>06bMHnJE=luOcaqc\F3\lZHkL"\/6_Y\ -%aoXuXBtf_M+"QS<h>#W%gV$c4IL+89!\8e6)Y6#3n?Qq.b_Fh]MrEc#D&<58=^*E2rT6Z)E,5Z;@9Xsr?2is<Go-?6T]FYAN5De- -%Wdk-K`TemWU;F7O8-mjTC]R,<h"4[/ISP)']a[i;hXVFQ0RG-Z">^V^If\'-4KV#\n8A(8+M,n'ZAr$U\0m]m=P#^'9*!eh?C7>1 -%YYi<*F/X)[Fr_W*,+la%4Pu#5&7O`1e!mHUI1^$E\%,fpnB/IjVu^O_@KKWCSIpX'9ap_sl.:loQ<Uj9?lHfb#KUUTo4cI>Ef]rZ -%E=]u(N>.6f%^_Rg;a::]Iu2eGFI;RP_;O!PG;f'UYM_,TM2J[(:ZKb%k<&QhfO-L*E\e9.HBHUWi9XOiK`MuM95N1uSNZf?Ok^;' -%Hke>cOr>nB`4*?o;ZZ/g=Wp#J9c#ePmukXW3#S5ubjKS3q_m`K!Mfo)^1fL^qtjXO=pVS$G+3L:K'dG$!(?GC-FbQ-il-"8B5S:( -%3+fEj95WYrSSie85.X7\,r=)(Ag&A"KUDe5A(:bgg:R%to0o+ejS-hG.6Dhu#/@h.X%B#*/7tDOI;JMt=%1kO4u602Iqp\iR5j]] -%PCOpi)7[&NTghhHBW*^k*(&t1qS[n^rq7,@\l8WOCf?PoA?d^dQVrpa*iEF?0g)UCZU0>MGZ9c:9l(H/n:I""@HH;s?b*:fX:\W( -%pmIUWmK%(tg/]tmcCN_A<?p<X,3QP@UA'd*%\>DJ--Hab$G3Gt_'/m"#N)V8)%c(Tp\U^A48'ZU^qF%+NC`c_lti(h,GdJMc(jN- -%n*_SCBPE%67OD*K1oU*R;>5rl_4ul6(O=FRjjJ!Yq^@3`4\,!=U4j<.R+G"l7T"O6RaLI^#1tk:Ht:JQ5<q">pTB/7&KutNAgagk -%5&N#0Df+]Ea[HRL(W(#A$01nQf/1-;#C"nW?3tENL.8s#@-mBDDsieUH#:4=I);%q$?hosI`RJtBrjFKl&-99rc$L9,m[@ijl=.U -%($oP#@'d^+R)r7-FubG(:%Wt)`a$?0V&TgBg3$1VWPE7<=Rj3QTqlJ7M!E&<rtTbF_aTc(@4N&nn.hp:mad=m.XT2gVk6?s`B,o7 -%6k_uVo"<;-Y>AHT\"bKj[S-YdZ&^hc<X+>SpTo7LG*7M)\<5qt;:Daa(P=ZsN^<7NTg_9-F[KBULW7Z/^BHVeDQQrsS\)X'Y.d2# -%n'ik5BUh*-@$6kG:+L>A-au0W@S&.ps%iF!=8)bC=_VN0I=IHG:?)9uV)7-GInZ2L1:0tJCf7(u;tj\)dH1U<UXjXPR9[)P-qsjO -%`I/#uCaoggIb[E)\`G3ESRf"@5[Yl9-t<u<FV9k7_d^YQpqTjML_W41N-\*il[@Pi2XN#XC",nt?D%t:n/1ef.HkNSUY?pkI/s,h -%%`:+!rDuCTNS_d"He>OGm<UMFOW(@mf4.=6mF24TeAlDd$uiD?o(gRJo*nOsIgge:<8BMS.@@O2B"?C`WccpXmsT<[<LH1+d@=H' -%:f/7)dt`r/TF].M7BejaT:)7%AI'qFod&l@)\DgD"RMP)a-Rtb5kQg4ciVZm&U8u#Gm9+5^8)#qkndbAiF]UNpg&+bB``Mlru1N\ -%n@$74n_k*+##MP%,57;!$5)\6pU[usg)J%<AiC1qdb'l@!&h;2J%qp.]I,]ASD2K,cQAKYl_$1Crhs/DDEI?iIM's*=rL_QbWA\_ -%p:c,Ohs3%^Zhh@erSl)]'f`;\;C//O>nhY+k2l.*HOj@6Xgo#1Ra7WPm:E3Zp6&";ha:A*QqW<S)+_K-a-p7e^q!ggfB1QLj7RG? -%O#cIj)e_IffWUt:J`ut!@j>9$`rUkC)0@c5g%OD7\Cl`s!L%B#61jQCN>+A?(pDjf5/h17l.B]Q>6mA;O=elY3.\kWNVRnU\FVfP -%q37.ilctVjm\"PBb@J>I9cZ%u+t0BIZZ(D%'LfZ\^oo1(T]@&l&s!25pW0re38:?m3&M"L[8AE1Rt\D35s/aN>HZJclYK>2h)uUZ -%T4#ee8s&DJPWQWB#YupCmL)IKA2N]N']Q]%mPdnaBV,)%f<tK;XpE"l8=AIEdE$e`pc4cOU<Bc,oX^T`MeVl,/lkYEZ`JTZcMUMc -%qn<=W!ss/nK=*YGp.f'uH:d)EG=tKTrL>DHA[uQc.rgEVLuliB:IA3AX+<1OitgFA`&6_K6!p(*epMl6p/*"-a)>it+9Un48Di1S -%Wo(Ms=Z*]f1+RP$=".-U9WOZq^l.%%\KU,%+@>)hA-E@53WFHqK,NF)kB3VOi*Uag#*#aahob6BZ!s3IfX0G<dg*I,RDiL'e8_O) -%@GP/3=0l+"-J+FgqC]D&P'^fm*>\D&QN-pDC9VDBK6kXBo=DkFK1q[i][8eU>8b'_6snE?";=9L,J1ZHBeAJ"cDT]<^&3fbG;I=9 -%!/?RPdGq6)`QlmJ!*I4.R!'\3Wk!WW^)-4s#L%Dnqjj.JDsL*A!q_poD.'ttIiE@3"*Q#+_V]aaEuG.QG?o&7a"L&m:LJ%+(QRIZ -%bBCXmAd#["j3udB(REpHobVkS15:X.ci8Gg9sR$LSW#)^EEGLZm!fK`&H^m3#:P1GOs\P4_sdfYLDN5_n*cU#%\VArOO5/oc4XF, -%Nrm=R+ZeE2?ggbRTuL"6j'M`7W+NYk)g+;MBJ@%8qii[6S?;>*ObKR'H4%n:\L=SlCE2cLK%Bg?;:;2qolY?:l!j"DI-khmHY)OQ -%9#Rukpd)(;j.;Fsi6NVk'F/KREsmMDm**RB7"ZI\SH.qkiW)X#iCY:maDTgl80R+$hj^s#?<0g.04BCE;\jheWqXuXKO1p+3S0`[ -%/;''rr\h!N/KLg,]C#=ogqT;ZHe`9@kCE!/:j$DFH.a#7G)i<;p/@oLCKN*0CB=Q4=;PY;3P8^3Q6T1X3VPm8JV6KU8d>=?&aSiD -%%K#MpF\6]4NY=HrIXf$T\:(R-.;-^nN4K;``2q6>gY%Jq:-G6$1dMKrbg*&F7,J'$l5irRfFa?Rc(t*oLEJ,%+meh4LQStlP_9K= -%:>Yjo1jDo!1/^NnAB/W97;>G8O?k6`>)@Y3rk_DgLRh\`Q@S@@US:4@DnE7$W@*Vok>FC6Pl8E9*"?j+UJ>f)%LBKn=c(>/?)Wl8 -%38H1j;(S>jRLc&Job_h`H3WNgJNg#/>(oIC3i(@Wr&h/W7ChKqU2ELZIsbu2FiqQO-d+=Bimq,7M=5;OmbkZ^kMGkrWOit_a2U6m -%'8ZdQe8u(@OUTrH>kI:q!i'!]K:rdkQsce02M)/#/G].((WE&0C2JYAP[CAA*oJMMpbdqc:\"l^lG9"cN1?X+QR=K#Za8^ffOcEZ -%haVVCJbh27Ca01H>M&O9!.Rn.gpIKG\R1#ui2^Inb+rqs_O2E=_A1j1HF]TlGn:t)fP&0Y@^-4ZbOk:((YJ1.n$P5I&^re[[\jA< -%dh3Se\;jt6cRE:RnDfDHlWBDKF^:'_7tsj/qKe>k"W[s%QLLg:7kqf`&<B+3"apRfHUi>V=J]j87]7=PK%Xtpl`4r1FuTs^fW?`7 -%m_\D6a0(r0SMdrAP?o<ORdtK)]Sp74#;`df5]JCQ0?:Ntp^G@dkUGFl\X`I(%#e21*$CYBn0VA=Y2Dfu)&5YdN^"W?gh"!1U(IBQ -%'E-%]mi]FRY=f%49"2D&[5(^-L0i)VQ<aou4knbUL_i'[i'V37HscjCDQRnW;Des))M-(jWP/]o#^Z*;K_G;JZhh"td_Llk:@ZPP -%Z(&P,o+N/)GlKUY_4TMte\"rj?7^D+UuiR0.(-kGFc7u3,7K^*Fg:.7B[!2FI=YQNX\moij/'b.:_F[o*NP-Hh<mMcQ)hQL4p0oa -%#Zkq1DrXGbWAWA%c[/9DK%pqJlIIABl=3oPQ^Ou#lfq8JI-=.'Wfl)uO/_HaZLJ?Kqe[MOf5Y0(JJqao@'Y\r4ONPZ*HTgSk@$AA -%_0p[<:Bn4G.VSb='OT5QfUg-XAAk,ajQFKCgfH$'E<e1.@\#_p+ll5?[":IBYOg*-eNJc(`nK6IJZc.\d'I0[A0p9H.+Ifo4-#SX -%.<HGt<2$C^0UO-P:7AAf/:L)Lh\MDiIMAXUT'5?289-(t"q9T`5skXNr]Su*bj:[KTW7fX9n%32PY\\Ib<a@]ro^-6:,;4DVlXM* -%g4SAD!e1@us/"qWLnBUHB7,<a>_oTN&'asN&"no0)7"7_ga3g3T?]EcgYh$8o^BpIXkn4R4\\h&$I7F/bCSXND7>0^%r[89(Z?3? -%lhV'WMJ-f<*c&+G)guQd"-',@4+mT.:IF#)f<-$?;>d#Dpc5gss0)1_?gr%6#C9>K[srk0s4dSEofrKJIsh2j=BEQCIXb9?o!5Iu -%TDnSg>>YJ-^uTj<@/>ZXE7.1!Va>NAk"CI$?1:dBn`X"AeX6q1Y&SF2l\F,D[k82OQMGb/it"d.]G<Z?Zl;6?`GNL\`_cAEfV3DB -%mX9RAd7HtSJg_e_\E;j2/,phRSleZH`"5k4J)KY@K#\Zh2\*Z]=:8eblGl`jrl?8BeV[j2q/4T.f6%SeJrAQO)]\8K;[O#=KYlXX -%8oB!bBM8u1#!ad\h1P=40Qs->C]oY9MWQ-.T7:NjpieCj_/`=gC9<KR;)6q$STj$DRd!ln@]E3dra=FGB(.:%QGRP'@o8=-WdBMU -%ii\o_cKu<thGbWmi&Pp85!SX9;u^i(K9;Fb2H;)kd7bL9nuqq"D#WA"h'!luK;Z:/g@@<YO:$R/#;]hY`)&-Gm)!`13@*%Mc[6eh -%io7GSNG5Xj0,X8IYgDLnn[7rsac4oe-dWT:F3&].(Jt=?M#$:>BOlinN0;^4Hq:p+i@%X_ouWuH2$$K;rii2`h3ajDD"l8ll#q3? -%0`;Y=`,I1IIi-W2)Xp44%,(\5Jt$-I+dpA<FCdW,g#RPYe/p"d%_O$rn?DY(I<ah:dma08^r_8mM_6=46G=0r(P]/=mB\U)BB\qh -%nk$eB$K$^QjN^pHFQ6a3@HeIl<@p@%HY2B?@L[_[cgq%F@b,%gAI%Z3P&H?l!uAR&l4+/lA'hu1@VQ#Q6WcmUi2u?"iku,OB%V@e -%9"._?%9qtip.2kN0[A^`L@O2Z\+Ff.k`\Nf*9+8_6Ns2YIg/CmeJ@&^G8JU',DVr(#la=ls.p>>_PtWq*@'(QQt-iu#^,nQb=;XZ -%@8JpaBQVb(WT'FG?UK2e*]aUcS&]u>YLOaVU]WL!%oPk\mg-NFs5E%dkBI9[5G71&pZonI&lcO'@m7U?C_GkuZYtqH<<U]fEhCB3 -%Y<V5%C@T\7jkRDOO5SXanNI>dp@*JuhP2`BR[P=*'BXE:+kk\jjrY]H`*e4<DLA@Rlm[Xk.7uQk%KWE-pqt9aT^8GKf9BNdF?ieG -%M1tEYSfSfm-]Gp&gUf^.r<cl7Wq\;FhBLU_8+dFqEE\?+[Op`2a=5,ODdSU)JLTX"..bY+2KqnYqFQNf<!4$hW>P@%+o99+=$BHc -%nJW*u_#9pX&1WSO^0iar)CTGj&2af#88L0<g%rUdVH'jr']T7FeE7mdp0)#'Q"4gmWZi;+:S7R5>5IoI(B^bfAd3I^;9XY_+0",B -%1.aB$^5b??K"HBnfN1H&,N9#V((gT-6i^_4BN/C81>UP#n/S(Oi[XB$LDPgB_fXjq-u$UB7cL,N(pWT9p\P3P%5j#&]1J2D*dr\C -%j)V`C10C<>n/C0XXN0YO=iK8p5g`h"_Fa)nfC6jei6-4Sro+W4K&sLS5C?<L,dkg&3Au/)nU6!pb=a+9%-tsV2)B@V-<-4`/dA#= -%CZ`26e.c5Dgk^u-H$6f8)*?qA^D?-@BtjT]>JNjp.mi%TkL!a]CjmB)W)qA]c&<h\!]/suq#Q/[`:D!HHpqnLoW#mq1^CQGO4dWI -%V];Ff2229&q`j]\Ch9Hq.-M]o.6:lSnD&MD7o-?,$XnR`]#j+^-K?\qi`+rR5s$IO`q[G^lJ8SgLb=b+oBn0oF)212De6UImAOOS -%/PELf-\@hsZs'M^6PQrPi=@egRVD)Di"achC5ZK,R,&of&B5fnPquBA5u)@a]h,@LJuI@NC5Ajp>7;[`4QN@ek1?Mu64@;fJXd;' -%3I@@:;#=c#Ti3oR56r.!$0gZo6)pMc#g0XO/D.EEIm=O5L=fcN</FH1a'/)CE.bmG+dST,@kSb2cHdL-O@p?nkQ76rr"fb)g53]" -%Z-q!#&u#go1A2.Qa>3MU7oaHD+&[#_S<L;-\hME]jL$f"0pcPC!:Yh0fDluMHL]BY#&,oN,KIm;[j$m`&<@QeK(&b.2*,-roLZ7e -%Eb$nN:SK`]2NI&j;KuYlq+:H."PFKH@%XVG,]e=V5>o_?8*q%O!-mco`8l%JF6Jd<,C[DBe$a];'_UNX+P-9qgG/n4#EhD7DH6>q -%nOlB-"@)YNb>#GX'Fp(G+rB>0UI7ZhYEq;N+RMAoR7<5IjeoaJo9A!X6/b_PFKi0M_F+"C=tV)6LPK:2"b`R^`dpA$co,(5A/SaK -%;[>h13&<_r8?G@QmVCB&mJWH;6H@Vg:W#FoW&fR(k)kE=o?SC#5A_B"Zlb0T%C3,(E3\(M7]?.A7Jt[#Onkq#3LKfM0g:4sgF0lq -%aC[VV#^3-KCZ4(J2.Z&ZW\tp04]S%=%+\j;l"`Tbb%HI;.5GNuFhN;\ls"TaJ[Z**.YW4q#/.lEW(h2'HW4LlH#j=qLMn'f2j-;_ -%5d?T7G,V#n!\+]TK??*M8PMS$%8W^pdnWH_72=NDUlJUU+LbB+KH,'\!Oo_M`mKCfUH)4aaUt>'Bf',8NrA]8\cPil/i"&di_2bW -%%,j<\2.(E2@)r\(I@bn>^a^E8%=of00sMmXQc_VD#",5J`Ub'Yo?(R>j74!FXq?k6Cm^$*+"$NVY!g.Ch?Q9r;$g4Q[(3;)%&L\L -%)B4*cWkFcq8Q4<ngr+6ODt#ms@pmY<:<@W$mL_n]T]U`I5!i5Wcgu![DL`.UrZDm.5homTq4u&"PM%!Dc[*>.IJMMjPE-!4YT,]+ -%Kl_AZF-RF96Vbfp%P_u0B`jl[<"^"@0#Q/(PuNc'pHFB"b!Xqh/oZA>Z8RXG\4!>mIo70`\FJqXiqnbU[Ut%DrZH&XOPooQ\&$<@ -%FRVS#qNWGFM$mM\gbp?IQ?"Z!Jqrpo*fWI3>&1LHIW%e.hiC:X5D]>X58#\UU>-[5s1T=W8bV9g`%Cbq)t?DnBJNZKob;0rppkP1 -%;HMoU0<(1c1j@J+XBkMG9Y2W5IS1U=,=d8uS<V#gp$>qAH*C0ANJDl\Y[m!G;N.n$X0(#h^^K;PoSPlGNd`a^FlmYSTjAH;^cd;% -%cVSH9K!;A$%Y9&BcXHQBQ<96QlcD)h"E9aVrTl+l2+@2R\3:ZB,:M`j?#<-J+XBj656uVR=p8.C6(>(('Lf'@S07e2r.BLOoB>BB -%n,VnW8TYRB8g7i0$=NicGG6YWjLE.>];LqEf'ur1]ABK]j-'ajD<g42>K^g?F+.sPXVO2/Bg>j=h3/+T^p^=ib2$TO.'>T(p!\6M -%2Ap#M*);NeB$1H4g7k5YWOsYO!,O4`m5g[>*e6q'#qW)u0W<MMJsnOmp\-.LnZ!a%G:"]7,4ohs-Q_I;+[ON0]oI'Sn=8J04G'@@ -%"k2]MRl=I[DNMEuR6qOrM]\1+%aJN?fnE*aU_N&#%H5rGh6W1XGl48]9M%_YbP&GMVV.O(g.`tI2qZAMa8HlCO7,Wn+B$PN+Gtbp -%#YYkY>m>KZOZV,T4mPd+;gF8>S40Q`bQl8HJ:+^NY"57@/9L1*=WFd4UY@QpUH?Cd;,$0_s314Dg$uXV5)V/$fmoR15P"3IVps>Z -%PG[s6j2inDf6nC'HXFbdO5&W2a@2EZn,'oNcb.JtLc9-\UG4T:IV98O?IqVaOPGJiAW]j'\3\_Peg%#%6&[MGmA\op.1.oNG#,D3 -%N*VW!+Q`hk!d[!j&n\CmS$oBpBRpuTh6]S3U-Fr3&*W_Y$l4VAnKSHmn*XXd[>:k%T!6g.mY%_@DP\FtL9$;u,BSh__)uc"ap!aD -%`Y3sY68\CO)#(-^H]3hpZR6U"YWf[2AW>5V0GHfo`Z"18$o[7:BTp.$:@&RiV%Jfjr4ILjHRYAafY946K*TIIq2VU7SEa]^A!mtU -%XAKu;G91U!EEm)2\ZN.MYaQa)'b8D\]PhT=0:dkai^W:BWh-;_=!M<@XKlYT.occH(I^,Dn<ur]&8^o<X5uiKlrk8m)jh@ls1_oN -%G>\!#PJgPK9t:'VJ*")J/RWW/qg%Yq2Qcu3gZs_"O!i]Js,hBZC2U1&^8WD?W73uTn&R(1gZ3'E#<$j$*tGBVAC.#3mrS^beLqKq -%/qpW**A-*$Qk,:kD]1QH?6.\eET8*fI=C=K+>,bB*2ZMY:q7Dm?S+4Fi=@>bIro\oKa2Tb,7JquFf#pO1($I;Mcj6&XcpWm6We#e -%g)>rG&SjnBn@6SaKL6[rLm@4GM3K8KGFQ8?WY]UZrA=iR98ZZ]'-VH"-A+("Jtu2Of%9kfU#.(*e!<$R?S>Kk*ZE)Y3UT-GU":OU -%Zuq\2.u4'q/EL=1P)NK%*L8JH(;8%:2N?.b3\bq=+3?(M#WFk:I5e7Z!kDI5W?E2r56VDndgsf2*eClUh)'KF5jXZb*d!T`M#g<m -%pk)3JZ%K)p9.coAgLM@L?U?Nk6gRkZk+&D&@eYjJSe6Tr=NhAb3tIJIOjS:JD_.I#9F?r>O)%>\eQo$U]?p+2_]<I_\C5;2#H_jN -%e*A"@DjOY3F"X*Ph(^-km]j<ZrfsreOsEE+Q9Xt7k!5q([N."ED5L@u+R6O/[CO,4HTWt?,Q:N:Aq?9!(10Xe@W%94@eC0cDsoo_ -%_k!jN$pgNC2Dh?Ff`#O/(*6pa/%iR*ngG)(kf/l_Hu`/(1A;rrdV)[oh#,[<f:Q+BI)\\is.<<R4@C];'%BsMat6-^DDmGCd*8GI -%!jNf`k">5C-X/Jo:*qS%ReSj5[.=jrFm#YN-f9t;is*7+rcnW+b4'\Z,]u^Z)+I)p3U"dVg:$`$VS&\DD>A!C^>mC"ff\bhn(L9W -%gpo-<nCWT:L%)3.]q0nKIqI>rs*j[3,.#NR2&=g2BP;2H5Y0ei1\a"Pcb.jPk3FUbH=V=^rtG9G&(*J\a7VJ>`g2;o9_EO?;C2DT -%Uq^gM1l^u0CS!q5=05-poOA1#-/b8@hKQgTYJlt[%Uli@2N(/<?Yd'07.JE4EEb%'S!+ko%R/Q7T['$G2Hkrro.87:1Cd7adL!i\ -%O/&JaD=YNKU"!3%(b:`RCY=U)ak*HW5D8MM5528NkNGr)rL+N:XL;8j]d@'R+\=5+0-\rb*"[2P/88t?`,X!O&H,]Z'#C,sB66a$ -%lQ.k6?YFg\r?1$$ZaCE>+'6-1?M?2i7/sJ/>MVkNE8GCE2r(,?<3tdOe_"BBd<8c`@g(J7)ZOq?On&HKW$%B8Xnabol1hG1Rbj`L -%F:^Pk;<m3)o.@kTo[oj@3:r!_`!D80B^!:1IS''!Gnpe@o#dSpOeN[DmH>)al#MIZ\AY%E$]5rU4iBBc?\b+2VX+[-Ch]b*Ra%^9 -%F*!;U?ASC?b4IjnqKDd^MHpN]/UNUW=,nMim&=kT7)4aTEuNbir+Z@K_@j!8&XRo-;\&-naE.7$la2D0P7Y3O'MXP;B8MBhZ'%lH -%LsLH>%t,GX%qO),9@4iX@&P)$\@HgT.c-QW3:1?44(Xj)3%1Q%'V)5h(q+SoF2"29681n]im9,]aeOE!F-ScmO-@Ir*JksXN3Alj -%]#cT%hg+kLDT=@R--(5:/\l+h]3q&(N9>Mhmr='Hq:OBq2<mgidR)]`>#!WZGb96sp*_AhCH\,e'2+9@?f?,?*E9An&>KTt!"s7S -%0IXa:7W_(0ebNaNf$%\ehHq&:@Q(@O'(M^$N,;,GqEW'%B^]rMTET?,TprnAg3:)T&t*$);RmK0\3IZh.`fB&.k=d+J*4c&'<Mml -%#D^98]f/#K:)iFdqp0=b/0s2nIi/%=B>R6('l+"^+,;Y,7(kh:jdpX?h*.\H,'h_pd$0N<S!;1Ib+$QTpH*@^`V,<8erW+Lm@@^G -%G\feYRt;G":h!GrmBEUZrDNUIlXoDa7-@QEL%2(okT0"g'*?Y'&:[M,=A-W6R;MtCT@adVK;7Er0"X93,2F:G6i1ca,>DJuefAJ+ -%46LC88[8)X:XZf`\:\Y1?K8ZS!)14QLd<4Rr8H_rn#![a[*l^VCYTNW,X+$KNSq(%A$5cEd'o7"H\e+=k$k(o+3;qJ^JY%O_,F^W -%O8J^NT^r%pfl]ZCX]i77CO+C=aS%ggIBe%VI^'SS'S6.'q"Up`!C#28Hq4J@+YN,Il]8Op#Z<J`4btc^/Y(PV0@WOkJ^*@/$9AWZ -%-165`;WiO:j[];(+k)d+Lu4OU#);JE=/A[3_#E-dZ'UFf`"Ft<5u#M^E>!Dnkk--Li$+K1<r%*cJC?)]Cm[AqM@8^f7nsnDG#_]s -%q[!;/V.p8O6Nme*7W:TT28lhu8lR]jL3'KaIk2ueMk8/0X'AgjFcuVs$_ci2nJ#'B7,a*HG9*7Af`*UOn,B@jEa=GL5lq/jqNh<c -%@_iOl!Y?6l\hj#.a@P6Weg"-H-%V"&1E[N\Gc*ujfQWctp'a)<!lofn,7am:U*,O1a%kPW1hZ9jeuh'kpGGCWi4qRq1<GraF6flJ -%:7\E`=F70pg6.UK-DXe0V'e#EgM9E7Gupb#P^(3bD4,S:5a%%ZVbP,j3=CG`S[V4?/?[5VOlor'`WD*jC2\:>o:R((YBg%52f?EX -%/[MZ:RAt?Ffo)Z%"!UCepd_HK.IH@A=e1dO')7&H0:r%Pc(:I=KEPW;Mu\?R[;PYH>N'65SnF5sWM$O,R^CT[lmHUF42S<A<e;[O -%4CiG^MLk\g&Y3D;TZ<5M,L,=qL$3-ED1l`_kfgst8E4,s.5V,._DWr%@>(:VVSi;0AE+;+'B!;7Aop^u4*fdnCG9uhQI^0HX\>Dd -%jjfOf>=sid`eta3];Ta4l4tgmS^ugto?;)!H0pJmGSO$p/U=WkD!Sqb0.n!a1C^rblVN!1=M3=+Cod8($u'+,Z7uA36Q-5d.3XGk -%Mh1NE(3HrRnARrYAi#5JVH$BK9EILc*PUI_7T>pF?!4L<fd6_&Mfd<D*=O/AO=G6u6;:9f8UK?-dJ/>tE.5P`I^3;Dpc1M56l9IJ -%OG`_!/PTr=`O%:o&W`[6L6f9pg1G=T>1O6cW%+a*>GO([6[.-S8I]CX/'t<^1Lb/Cr5A]A5h&K1aB([tLQtd'2Su_Y(9B%;E/DhK -%:H3Xt[MDaPad9TrLZTM\FWcSeX*YbcVDK3);Ap&n'8os[g71SYMo(EgcB?\_mojIG3C5HtE[<JJ^j7Hs"&r7J-l;tV$%T0t+,Q[I -%]s@"TJ_8ORQI0S;XHSCr$OL$GUh$&H,s$9?3eH#rJeA0tFU]`-eD1fL6FNs&OP4S`*?E1b)ER'r$)rM8(>Hp+d5^Ee;*qIR6lF3f -%$p\7'd;Yq.D\@&%%;$lhWtr]:eGIm[A38_dkhB^8`/;J/WZVg8L-bT"<fE<VPX%k&C&GQ0?krfrLhhRBd=PCDC6KB_,>fSI`jm8Y -%AT!dYc>+Y?&Vk3M*7hR(<KNChl.RNWX3kVFhhg@K0A"a!?^8D`q*D5g$.Mo%i>=Wco(L;q;G>[gkVDk(GdL=R3Q;!_B92n2/P0E" -%qBjdj*54JJ$@8+cS5#YtT&]ac@pt7EEta:ck3*b5<W&a*h4u^/!SC#mI2->"`?no%VmOp?Ol6'f4/1$G6jJWj`SG9FACdh4GoiXR -%AJIcD'eDVPC?=;T>945E?H@/E]l1RNWYeUB^F.mena8F<$kn^>=sIL$'08p26J!qQS;LL\0jE_hD:N#_#JgqJTp>/elt]0_NkAAP -%9k+6gQQ;aD%cfVZMX)#IHn?/j8L@gP)F\oANo#S!cp5L^A]Pd4'\&:SDUN/Lo]4,0N3"9pq9`W&n=rt?'ZBS_Jt@BF1qGP6qj<^` -%nVoPI2`+W"WCEXFJgZ%K'h;+X]j<&UZGXVXd1JV<:fdLp>:\BE$Y;pUoieeE3(`WLi+/+rkIqnS<l"])obPeE)@gYT.Ug<QcNAME -%,OS1_Bh&)@&Z`p?%k2NLA'\p[;[O?\j6<45TTE9=#AB2kE1dJl\V<[F/="^*<9m)M2Z@*[J;-Oc[B].bE0El<Z$$lP!bu0hQkT\= -%Cb!\5PdihJGt4a6+[=%'1ajF"S3_\,ng&Cs$mQM>1=[uJ]f,%I1ZXMm1?j:lQH]>ZLmr#G`b$JE:YsJlKL:GMY6`o&&43B"O_pVO -%`A;/>)%-uD;'Kua%;eki+JgJBi9JI)nM74deXNOm3S_J@V/MR32THbJ"s<^Q%^Y=&-oc'ia-ubqV+kDP[E\re_Y@TN[_cfWUH;a& -%6^@b3R-Vf$J"nKcLE/s#`1HlGi\!?akX;*&.!_3@Y[*k/4(sL"0XRJS7!H6Rf@\(?d3X&eJV'2m@4jV%MqMrG(M</%)EYq2XQ0!C -%Gt@]7.mP"Y[kf0bE(dHd6NFuB^7'AFahMM#mW!Qa[KWmgTY$CeYYccXES8_Y;:;Mb8bBIbTYU2uAG!1.=+G6F3A[H22=7K-K>,:0 -%c/C@$fE#>NSqI3k8-e!OOD=?qlJ.+R/2LTQ>^MR4h8r8IDSD21AIU]?'#d"/U*jkL]L!?m>hT4XJa?J@YmME"=LId=R0AA66Cf@r -%+7aK*HF+e4<`>\*mC+C_`E_V+E,*MJRfY>Ifr5N.E1&Ja"MGW]$_pk/fhMHR15eoqXlBRk5)ASL8[&J*,h^&L:YoM>.IDZNOu0&U -%7Y^CGQkd#KK0r5[.WXl0R/K#<Lh?=^Y%=XDgLT,VgmK2T,M"=tHHhVE*(Fr\<fenZ=]ljf-8UF4p!DBC+,h<de4)3<JCMpaNF$fT -%+-#P/\9*SO,*8UV2G\CK?J/o\66&Q`eB%Z$VZ@aMJ.3FkYE`J;1uTQ"lq\f`eEE$^9A`U`9m=TpPLm)F4'/j612ja*BA,VYI/n\I -%2:doT<_'WR+R)GhU3^N)Cb1NiCP6D*@p]BZg4@i/q.g.]+jmi7jKb-dhgF1V?m/)&BnDVG!'2kg3Dfo..(/T`S5Ng6Cc>_VZ>unl -%0#Jd-L>[g62!qcF\PFe8YKbOB[@l07?aN"cJLc)LVn5d3:-'/CN#;c@o+[aIk2Q8C+0VED>8Zuqn`adWn#Rr-@l]LPTT"UB()"(, -%3$oU=io0$BIpPn-=UcN,Yf0-*[k-Vk%XU4dIoh^0Ycq+H,@#"abJOl\pT:UrWqDL73m`H@]N7CO$l"\`NN.92h+1s:#':^iNAk'I -%Ji"6odRN8%SahYJ(Ie["2[YK3V.chOS>.'B*&fZ?,Mk#-:t*+`_b*dZ0PN6'm9oTqBl(+P9AG:&^0=hu,G:CC*#Lu]Q_TOZ:P5@D -%++4DU^0qaple.BQ3&iPMs4XtTNl(:aiX$JU.=<`KW+:(F$po&)Vm[Wo4l"8@9OAHLn;R.W%Em]"=?n$V;iI0jOSnCsd0RuGSO<g= -%=4Y(+s4EP)KiE(UF;!B0k[NS#0IA3:-$?t`;HT[^OC_RM!TU1(c&JoKqg\jsDFTV]s.oW"T5[J_5m`OQZ$E)a$+4'?'@h\u`/:F_ -%!+6F\5Hsla,8?7Sc3Xs]Z-F!1=_Y%moY<dj0oCsp9rh^(/7E(XWB0BVd8=Rk09H:1p&O+f0_%We/D8!nC*_=V6>bX_?AEX`C__G^ -%BIn!oOX\Qn3,Y6,H.,nY6`iRd=c3l.ojNYgQ*#UR`mRtR&kc0,gX?jg)O#[j@9%SD>^R`t$[gNbGIlP)b524L6VZ*Z+&uL'PoZ'n -%/lZ(J@j+ohnlSOjjF\r0e2T]:>:aK>=5H7nS,C.*p0'P.js\6n?reUR&,IKiPK#VVSYskf2$DoMWh)`JW+\i,(Lf:fKsp'm[Vc/h -%,j/qd^/s*jeg`)jltL?L`=*RR,a7k$l-t50!Qh"/,W^&t2`"%@.<uP\_at+V\0Gmf;2C\pPAg:Vha0=Amb[ilkATeFH2h)'gc`At -%qWY%656(9CB0pH]p[mb"S^R-L5PXG\*ri(g`]sI`c'oNQ5Q@K3hRrdQo,#19lLf@NqYHDZ?G,-tT--5oL5c(`hu3K%msas%_cJM] -%miT4;d:])HjdlGBZQK/@kF[.pc"H#'rSp*arVY=bc\)?WJF)nUa$4uB)-)CioY5]qU-T64IrP>'T,p]k^FONc^AHd]_qh4Gb'1oJ -%&#TQ#8P^J@7Hdk=N.Ipll>n1L=17;M@O.7b5Tr"]D.,@/]UmNeikU91;>loq\6&Ag=/HGf6Cu<l>?'[p,(h8Dodd%N,dRulQ&*/M -%^4HMsk*#IE[lXV=qj>f/SI>fWn0ZOAb=l=!0?MXY-m24C,mD'm7C(1IG:HD[hS'+e1EXng%U5^h3>a&tT`+k+`QQ7")N5'HU**ih -%hHnk-bC0BVLVJpVQYYe4m]r#-,Zt'9aZGM)VSSD*aUF@k;q[>m12r&pUj&$o.S+okd$r[b.?TlVc@P^/+U5%&8Y]u]2].`XYR[IG -%eJEJ_3kBMp%6!^O'(lnGJM=AqS>*68Lf<m&*OR`pK$4BC&nsBPgU`Y@ZX^9\Ho>&&QhQ&B<*^0l:c^:"VP$d(cHQi+BS<a+feSa% -%K^1%J-'10#gC@5dWo8EF!bHVh;N"6J5bL6?",cZt!M3,ik"1^,W%8NAY0Jt<4W)5nmW%[E/:$L@!:.L7[j&me.%d-?VKQaiIQq9c -%=r@_*-p'hCUAFa_F8LlH9GpURXWtc3??h>a)=>()2;;EbeTr!d#Lk>@nLKDAd^%20Lm(pA4t-M%4o272=-oug<LB!n)E%&D)(D#I -%JPnd8igN8XjpC.Z\*')]#<`2&frF1/X%?g.lU;^RY82:K%_+O9GFCc8(/<$V!,eI^iKOWEi@\*2E<XSR031F&0R<`7;l#7u25=\] -%Qod%7#<N/-[ibR,KOD4Cj2;bk*W$P1+pAaJ<AMb(Mi4Z=9b'g5<)?F$2'&(7!4CI=4n0+R`4rSN_mc4dqYJ1WIWis$Z_'Bd=:p>E -%TW:EGki40,kiB!?kad]_2,ch)q$sh_c$qq9,Y+]KKVTt2TS_XKp<j>,,Cp+H9SfPGYK`l`dqb(laH!]9-'tW&2Q@9!;^X8VdYuXW -%KC)hYRqfGe)e>LC;,Gu1PW=i*6Yf[6+JcT',bu!6N)m"@RUqYrZ"C1G>\sma9ics]A#;5`Z9K]84TH5.c_P[5fR*b>'j;p@gDTNS -%OF`Y96Fq;h#?NSKnb0SCq<Vb@b=1[o7%&dddO%I[[2#:Z*areVe%-B/W&?86F>;.if":2/og4Z]`;rAFKbBc9g!("RXAZK/:-jDr -%`5_mrA$1')"mq7Gqt$Yb/[G/o-7@32O;';tRdk4U$#fr82Q5S'K]AmM^JBrR.Z*,t6%Xk\_Q+,[;T?]J=Y(8tR"@n=*1ZY-)@,X3 -%a??&_S'O>Lq2@7)Nc:fERd9]>bX?Kb2Lt,ckc*3Bl8IjPBlds?JTOEb/&tb%]UXPiCsZo92u$7BD9_:S;M4"2PFK-alK-=8\>sYW -%-Nl_nlY?d?$aHkoDmtnV>E&c]Z)'_*$6(gk3nN8uMFW:cI`#_,Z8+>YU?+],:%#t!^)E<[@S)J/4o(lZ>FS=UbOI1qOH1>gJ;LZ- -%".g883@=#a+)l?,"LQnRi605eB6=CEhq!T2M_Fi#`S57<SF;S^)#/.Keqa?%b:]JF=LT$0k"%M6,mUHN^f$S(M/Eq"Zu<nLAYK#J -%4B>nn+O=t!hRrrNX/RPK,I%>s0rO;,p@=q<X<!uRj1])'P5?f=dHF*_DHCm<F4s!/H/77=%^[.&fMc8h:p!VI+589cJh/e:e[dCq -%fr;.Ja^\&0M!]83UU'dlrX0WL2/t`8WZ3D;aBbO'5gf:?@d9tE7:':Z(N/QV=4b\T(JX7,^=6b4^kqoBgNTP>H\C%jokorqm&C4= -%Z)a=<[PX_c9lP!!?]'9klJa-ff,:sHI!#J%l][;1>VtId<(aeoY>FppMA/>Z6hl35X&JbRm.E!\eA2m!4PI@@C<!*taal<'?tog2 -%Y/KU2<AN.&C#pNUZl3(mncZ0Vjk7R.+HUH"<9m*;Io%"Yf?[99MW.kOi"?hp'au35-\-UAB"XY&dh6qZfTs%S0]/+30^Xja=G3"! -%IdR-AIFP<!n9FiTd!.iNKJ>WJkOCqd0\sf]ZXJ*U6^:Pl1P5'f,i9Y43CqnYXJWlL/0F@U>5<q3O-\UP0s%qr,#F2aBK#67C$neN -%ln"c.NcYO1#b&O6d,H6u_7Y\C`Zd4_gE6TQI"3>M=62>hBdPs?^J@:E?9.tpA<[Yknd&4C;uWKq9p<"4C@O[MKD-5uf<2rTI"k[i -%f9Bl,qa4La.87Qr%rf,8:1q,62B#oIRb%Q):VT:gD3<7Fk[#6)W#@PF@MS*Wd?\Ed<[d>M+<)LE&!_+%l)SU;cu`fWF7DsE_DKi& -%@]DWj[;KrGWtkMVHQdH/C'Nn.1H*/dhDLX+8augU+,p(IG<PFh"3BG0;B9J"P5)`)=`C-6NBs";pCYQ`Dn3755/94%V#I@IAqT4@ -%&e::Xi[PYYf02Lr@9O>#/ePmqi^1Mg,f;*1=WD[MTfYCM$DQ_U>`2(*l(Vi.e_HeZ0rX@YUj+'&Uo99:"+Z\6mH`_\%tS]q-g6c: -%59c39*!7@6D`!Ye[(A7`gHm7qC.*VOoF?1r&.U4EdR[m&Y3k[Ll)Hg/@B$QL<"0rg2:K6npe1]_G6@@gq-l1QW:-cemTn8r>3--Q -%h4)#sBW3gTKhJ;E6+.R+Jk@u^l*?RV"uR@pj`U/gW=$tTX;QR$)?XOjO>YQc)hf#+V4;bWYlhJ38_XfCd`1DSgr4L/Gl)QFn*IKe -%?;bLYR!pL36[Nm3s3fLJ+jqaF67tnVIfNcBh,;JZ>=,u+OJl@YX<<j'-Vh5*'6Yq/aaAs-"S`Fk\L&eOD%deLpf:<cogUQI:=cXj -%2J@7KK&l#u![R2UKLnS,`@ll0.2P_poe3a*n=pJXit5At*!.]RjJ`m&0LYu?Cj<`j!hcN%:^T-r;%M5pTEhCRS!rSuB;1bf,$OZ; -%q""[C;oLX74qu1DqNVS)euB.2%Trf/r4&d>C\#HG(TruqBFIk4!Wl88)(>EY/)rWsX=kgE]QJ_ZK$GraUjc@c2"tNp@C[M.CPu#I -%[d59`f`$WO^Y/'?EZ*1]Bftq6N:g@KEUVJ)J%YRlfKgkFMRr<[-Q1--RjqVu6.CaT5qi>TL5Mq7SXc^,@FD#^hI47Fi5E*6'5pip -%T'V2tXW/.u#)El@@@ld6im!AAI//_#PmL8i(SuZ-]/GBPYXr5&RP[Wb+uanL3GTE%-$Jh4ZogW2Ek@ZTO9T.B9-79X8sQqTSt47s -%ROJNu)*IA%Q[B%KLmW4jj>?pX!Vp$P'hI`f"Lsb\KOYS^d6T2BOj"lZ9EcMO0eF'0!4@GZJR\*YN4I[a(RqbiWuo\^HpY7nhuRa$ -%*+L#)^R*Qs8K!l]5TP^B\A[mX.BCd,d'0!JTbF:@niAYEVq;=qRB1YU&8fCT]rqUn8ZTiYAcm,k(O*SF^".G]aC&uu[aO;oBNX*5 -%_.g:llfflNWT!=@-?"?.O12kZfT?fZRcLTtiqOlZ"63[X+\\.2aP%9oS'hae3fAb8,@5no:m&P9^,L7R\GW14b5m6!MI/PH`mJ<W -%FY]14)dg`^#3fm7dGnuXc`"p/_5/$pBHp[S<#DMNPjogF%1VjlH:.?aUbl*?4s7hO\O=R'UpX@?reG,f=3LJP1Je9R@:jH;?DA$g -%_US8BSjHsJVfJUf?=kY5e#oEm+'/%G$&VXD#CO%$H()W!I;RMV=.#;/5_e"'#,ld&`O@-2'a%DJ(uBH=_3:ohpWEf#>9Ge0D'+5B -%eH<9X\+LoS$;gUXDPX/Ph9%X]h=18$4bNML('@96Rb4K_V@5V8%dV8T42#EX@it'/g[<m9\XQR#2<)$eQ-I:<YF=i-+AgI::AGIX -%?"g&)J]so0@TK'H1GiMl1f']uRj39d&Z&aN?+D>@8%ZLA9j9d8`lK7^@Rtt=#S71B`)DpgV2B\B>@Dlg@4fMlY4Wi\`:W=f2!g-7 -%&b6(6.sg,t.UN9U,W\m-;iCo%)9gRX>-en['99`[&cFhVS!hbKnDd'.6,p6Q"glZLO+j_^:;VIS<KrG:T].P_K!KLlGDR=7j0Bk? -%EM$0;e8R`i"[J&#q*B.4Xk^hg.d+'f3jK(Bl&QS*pdnmp+$a$Gb+0(C*X0*==l2ei@ABX"*VJ>XP@-4V]i3_rm-GF]QRn/Hr;,Mq -%+2;Kt`WWmV-cUqfDDn,J&KFueQD[4FGGYO_/T-PTngm?X>MlShNSBMZ'!V<;�G#9J(I,`XI1-DHo]u$79)O]JgeE6:>naHl0)D -%T$WE,:$@Pe((^76H,JBCU#(er/G9&W"V?3tIEC:hP0M)8ahVbT6Wdjh)6>JnV_^oB<$IJTWgdB,F,@5a[5$`d'?d[YY19Cd9H9>B -%W,]jTSW'5SfH+T#!quQC[W>?)Sr<\npa.>e4H!>q\H4);YirORX$!+(A:TDg+4[ht@Ip_G55BXfC,6bWCSW\ae1WEE;[(XSMF))( -%>b2,m`nE>5%5h""!"j*C,gF3\<O#rl3hC5hX"Qcijn8GKSMia9Mo+&Q\I7R?*j"'IG.[r6![!R".#gZ3%YdW**\W*Jjk[4:i=l?b -%HoD/dieR,'PeUGMp$%5bRMjetc,h(^7cg.oKfF:/V;mN'AqJChBjkCie^%s$44E)i(hBkQk&M%+k_!"nrU:kG@0R7<?[]JG[m0)A -%DPH7GD%CoDPmcVRJ62r5"l?GENcDt:KR1`pk7R:<.:Yhoo\KWLK/@!6c920#p!=bs)>(%A?@s!<\h:)$RIT#tO$Lm[rV*3cX0:FT -%>1*Gq3u['r[;FS&*%0)YDfe4pO/:quGLl0f_ch-JEci1>jV%bB<5QU8R_af\%<gm%(Fe+JY@K26<^Mt'ChK9h..kP+$Fun5`><Aq -%gM5]p3SLLt0331.&&rO=A7k^3O96Mh7ec8modY:#]t!82-FX>^%J"VQfc!`J2*b@AiNo#uejq"g3ubB:BXUBrP(;4`O(n]6g&91R -%Lr"qMIMd9oC>8#o\?cl+UcUmu2M9s<Ju8;C`jZ7@3-Xs+Thd#JAE?$T,FYcY-9=E:b%?B.ak?`OmZP5)MCh8(bgce)&R<f=(e4'& -%YgfU*)5/dgigNO]:ii2o#gdOb.%sm-abEkFi"`[rI)X/&]0-?XXh@OQ=)fC0V)m%3,'m-W^c..W6/u_r.a]YC@XKbsoeMVsA1VUU -%;hT9";^!mi,qc<em''jq"c_!`RE!lg2%hjOHs`+]'H,(^_PZ_@RdXq=CYaATN9NZ6$=aAZeA(-eZWD?/L*Oas-DR?-mskLj5#%K* -%'2dTfJl#sY+=2u+osef<M$=(oEEJIbFrPTOI9WYm]\/7!AK50,M'"pnfkcWr+lmh;jg1H$BJeIG73@P&r#os/S;!42lmd9b86Is3 -%=U@NX3B8B-K"Aj"l\^t.=W&2Jj=6!(ls$EFL)M`b<a<]?O5_`U`3g';<AbOfCZJ2T@H:(1q,fLpjS>.CZ@][Ql?YG=fNa/.+en>/ -%dArb>p+7@-Qu*"%-=.]'@^<gM$ZatXfq!uGF,&O"S!QK4[cT/+R2I]Bh4']qAd!A.h3?Q]4bnO;C-OR,!^,DTIJN7-A(:Z2Ec!6b -%CO@l$Ccche2ggeK_Ma$`'\>S(FqXCiZd6H./]m#.(a)0'%mS#6DB=BGN?;@k,:q8TGf!6iAkent(>u<YlXD;/L8C0@\NUY[`aVaG -%BMV6)&l5nu9Rob,#%gZ<YsnFeIQg'Uan&;j.Um6k_+H49bkb1CpU'qVSo/V+AW6lGOko.,q^4"LUN,mm/MehSobb>[JEKD_eG0*T -%=gH_I]afR-_R,!G9CsS1.CS.43khH>BG[l?nb*oMH0(8d)oS9;m'3>EI^8OKe+Cg;e]$2Ca(X*@S8dS%08RR`hS=Pgo'4c9D=H#T -%j)F<"'qe,Jbk%dhARn-H<@.cVb>N7b#Y,!RDMk-gl&8?7#N22j$8J=KjFj*(Ho2\SrDPNB"K+QGEm64C^nkt'B"Y@6h^/"Xk`5(j -%8iP-^jHh/l\oD+6ULthHB"7*`ag^FJ*T!(u/UX7hSJT_t)AqU.$Ga52rr$5$@MZ^9r>o,'8?5f1c#XZ$QNib=YucfBP>m!5gsaCg -%\6K5DKpfAGPcP[2Nm_c!OT^;iVMTW:$6mKAh-RTfo7F!DY,*!9!9)A5k>.edmWPe^lJ%q(n.Ed>;^3<pmI,8F:rI?'.JSbJC/-[5 -%DEKM$a'5TrNk"TDg.#=`G;_rRRS]aCmh"k!!0#TBFsL=#\9!qXi8%#Prm>+uLi>p4*Rh7gX](bH%InKnoS\lruHH(#[BQ-_Gl_ -%:)6j=^p_T.6X7u6l0>[5dK\5*+`$aX;Q_g1T/bNl:://@QulV!"Aa%bL4sPkgKPrb@?n/NYGAVM4LW*,i"F$X>Ia7r:>CEG`[5LO -%92":NpjA4pnE6]K#oO'lN`Fd<E"Dg1oj?$1S%2cL@T:JCQ3$U)K"M(UmS4tA:9-q.Da4U[5%F5b7#r.aNilAbXYP3fA83M>V)EmX -%.`*I<I)WXn'->9I*uGZDba0Md!>bo2T[ibS`^!T]iH.FfPInV;Y=.TrOk*6]&VV99+e<b9g)N8qXPlfY*M@9#(X[!kEb@m^g0Q\G -%Es;f^E7e<uSP\a:h?ErSE35nG.,>*t8+p..,7.=1Q0G$/B=J/>G$?1H8<-[eIiDH7)WOCFt1*8/4@=7sLB.l-oB^NhaR^9gW0M -%HGp804D((2T#sULVfM.,4Cf]]_F1K`Pk]#SYP]qJmg(SZoOb;6#'s&`1CLY)r-C=1OGbgQS_&O@K'k&n`-8T@,k9,%a=OR=`9=3- -%l=&@m]!D32G.JgXaik(*Q^5EMikrZ',>k_adQe@G85P;qK@=@nbqJ``JU%#\.^&2SUdS]CUrd.5_UXGAG]Ps.D;l@3kl9c]a+&N2 -%V58Yes8DZNc(B7ZF99Ea2GhbaGJl1;(>/qN[\:11%,d\1R>djde&>_B[W5L1C6i[M\Ri^7V8;Bm;o**%XRb@(AX.Bn+=8.QV"<>6 -%O8`;q<d]_FCTj"DF;:HF&/.[\>(P.I+3KtJPsLkof]Ysq7ZiGH<j14uiXqATj0/0>6h5Ce$8'E&NNnUtf4Z2+ED:aW(IdMmpiC;M -%:_GVuOt($(Y#K6fc5Is4g-P.DfspUg4jno.7MJ7-3d&n*W[N]RM/J_9!,;+)!eN'l+%mO&Lg+p+R;@;/[!hG?d=X$1iV^8#<-X.M -%Na@Ku@s-e4?Z.6nh/)_r4oWsAV=cZ*`P_9nUBJr[f8H9?g,>GIK,5<D^6'k"iBoo3:<W;Z+Mi`@1hN=^C-J^P,@Y0*[WS=leDdm` -%5;$NT^_#7q%0kb1%='E.ZpU<LK/SmeX7R\sU`G(P87t'+d=u;.PY&MCiKe9$k=OS9[?,1;?g(feLR^44r]ulC4.nm3BWJ3U$UG]H -%b1S0U]Ej@(:Uo-/7Al9^RtW(!TUW-HmoT3Z09Q9#]_e7:]hT8)Wtk34F[UU&^?jt1,L[fsU0mOU)BGc!0]6Q#$:^]P<SCAsrO&nI -%n*=_3&%J/`m"26oBq1O$iBF@Rds@1T%O@JK[TR?InGb2Z`=&V<JBU_j[Us8,b/]?`7*T'8h@,$HNO99E#Or$qX0_Y&j.sFk\##&) -%o"NIUMkdUPU:*d@DG!_RZD17qcr`ul8r2mpp/H%nVT5\lE2<8+n+gDX?p1lcjQq]Jp=JZ3[79F`8FX]9B&OJ]l"ai\:0Qqi/I_h, -%;EnGXX?m>UW\9N8-D*aEJ]4]_=)a4@mg(WB.'DoK.1NDS(hM<rRQ7*g#&M-h0q=A+@*et>csk-G6dL\j<@b%Npr9XBQ-m[#WCTpn -%gJTnr2RI'3YKq4@U'-##_IE#tM/Q#p#FG's?_t?gl#H,&j8->3M!,VfN#ilEG*U@k)NT@OfBOtC+;C7^(Mc>))Oap1_&O;81ob"U -%V3&J/<_#)k/:hS(2,Y?.^qht'G!sS>D*0P>1b&A)NR)FdK1$fbRr\D>iSl>&Lm6n<nK?(MWZFl./0:V@=k9Uu_FBWOZ@=(goG=C, -%.Gki_"09NdfE]'f'P??+Xgj/LCCPQO1%fcPN3aXSUO;gh9:UpfniU0"J@]T?:`5rXn;($SdpniOY^2\J6>%3<6,U:GK(Z7</k./< -%W&rOt;G/X:HN=A'k@Z;G(/g-FI<OUT(M$mKCkWXNXZ7A=.SIET@HIj8:YM*gT^iS$Y6\$Ap?59RO_X.EJR<OqFR1HIQd)hF[_Cs^ -%"hkp&8Y>9Wj,o@i8@Oi8>7o,ULln4c9U!V`2BhV"9:*g,d'h3\Gf!i\DNLe1OD,p_Ej!C)C6cEWa@>`Wktg?&hLXcKH0VCNPr0Jn -%Qs.=O(Je#.<pQ&B!\Fp375/RT&Qk>q2C<3-clRT=cr[.m3cqRQ\rfO&^`"GSXd6b#*#^4!)RMV3+;>/[dop6b)$(RU1NTNbGoLVf -%)d>gBoqN.KYTT(_TS1i6%ocO5j>iVWF/_f[&0M1=gdJAgC%Q9e?rTU$[IAG^f$OaAL8Pk)V036Ro@6cCkATaO+g!f7"2!.(G]bH1 -%n0NZlPN#N""BS;0_Sb`CO?4?t_GoBOL.WY+7QNp>iP@T(QW9@0Q6]i?67$O#G\0bs,)^hRKVLj93siIEWmIR=>9K!KPqbcib!:#J -%+j:gn^6\[]D&mG1`P6o3Dq\)K9e!>eA##BhFI?><^BB^LOP3.tO?U,q>=/hGTV1=kY7TH&]hqd`W?`:JBkrK3]!TAjPF]btj^eN? -%kJu*TfuR?4-6&qS"e.k,*J8WYc#Ppk#A?[D/A07H;*m'E%p_4=PEBdf;\KXuZQ^q[(^&6JkL#W7XsELKXaQ,1R9*Xo8uYp;'WOa1 -%5+.R*HX%>-IVBg$.s&*-Dk$V(K:Fb`4"3gK+CII&9Kr/%+d`UmR((_nO2eTV0MJi2p9Ppd-Z*9$kdI8-dE''[]p'j9"H2g=fH7HB -%R<?EUh5XMFQ/&7T6iVBkA8'%'WGV_=T'k<Cndq597/ls]m9tlab3tRb-e^P))t#u/gWS;,JQ*);bhYCWC-o/"HWa9(e:Ro82u>+h -%LMF7kHnr)5-[0ZH1BKTDU0*N^7lYZgO4IrE:6:d?]/Hc(.I`nr]`))<`G\N%MV#lSF`Z7aCYHfF#89@*+1@3op1e:<'0%Nu107(G -%@5B`gW/ZYWf_b'5-A`]b`[[$W'0_S>*bg"cY7Hn2]87\1!sMPVE#`uSMZsAncEhetLhkWb\rgn(IL3XbZ$01FL'i."YrWI05SMjR -%Z0Xg5glc93%X"<,3pYk#'\40)#HjS0(<<MW`$JP8\:%A"3Ha?TZIBd24\aJ/:_N/9)VqH9S&$8WD`SAQJ5h%6-ojgVLB5cL\5>RE -%PtpRWN9Mk3[5I)46[0:;R$EG9gVl_o#8r,<e[TeM)!P>U<*[qjJ,s,Sf9j#&:n7XQ&5nBsJZ(=ES<Q.F%Z3=L%_osk+J/uPj;)<? -%F?O_`4Aht3)BjgONg3Bj47CjBQK(s'<\1.K@!kD2JQM'tGX:[MB``/<b`,HC9H+'SS)%o&0Y4A20]U@*WY0SfNN)GVc*7dfo^gKC -%X'_Fr#E]JD7[dJK@<oSA!1d+E-4We1C9BDjYKqM5!cNqnM*L,tYJuj"[LSW[/C)bs,&%?4a80tG/lL1m=)r9#&ckYA,Sdc\_-o9< -%r-EN&OhZkqW>X5-7CXh'HG%-6JH?H^!b<+U7dqN`pE;;6)mKW!c;mSj.kqLDM^=*65S9`>msR,a.ZLGrE.b=oa)NGWW_1GOEQ1aJ -%PmG<R#t6aXCslEagI^O-H-k3H(<'H5&Yk^U\>B9E,m+aJ'A3K=&2SP"T9MeD(@@oYaiX"`=X;S,j[pege0[4)@jANuFjTMja"W(\ -%61LNs4tQI0Y^;74=s?s<02C=*VbQ`BMb:$d7*DW@H`t[S%_!0l[9a[f?d?W0_D&B=2W_nW8FmO#8+COu&;eWl:k`,c/>#?4I!Ak7 -%LK/-4`\hG!d7:a#enGVD`CE%hm]FDRlPkrJ%fRc0:BX<)>9i&Ug6f[kUl71W[iq7S"mUOpKO<PRN%<PBkI2g_q#t.(oJZS4h4kAl -%<taA"+SA95QPQCD85Kh_X)fI_U`rHAnEQ)^K,qk7E&7gjY'FMr\d26J1N&Zp=dl:N-:VADnOi5]N^G5M'f7&CR?MK<E_O[I@!m^E -%7\DEQGd!'+kM=i,qGG"rMA!__T[A2<_rN-rN4c"3=)I(SJELgh]@r2d+O[a03Z(0rb+n7k`^YQK`aG!T,9=^*]$NG*`#VS:CiJ^_ -%8\uq-5Rt`MG!kIWa"<mS?pQ:P)jiR<C1JT+,Y8UOpbBjGc.rQQ!,4_\\#9GL7-2N7DBiA.Ji7A4@uE7BJA"+`"4S\=&f^?u(Z]ma -%LbLbp_q\'-3q!*#>'Ok^*oQ=fd#AOmglr=L"*OI0FHJ-EV'CpNe0bD0H?R93TL[-r6`rDbk:@?uedA$*(rQSD>6B,O+Kfs9"1\io -%1_?-O/+d%3Rq!gX`sU3pT2L8lhXPGtUXh<*Ffb/gG'1["+S>>%_D`[*l:aA2a%g%^c#6bj=(QP66g!1Ph9?nL]fgkMDp`#\"P+SM -%amhTtN_8SF&TrBgp,H<^Bcu0ep,#)`N1K7cJoOG4.S9uRO=ZWVYO\AfVC`-1n<3>nYXX1eZluFqZ%lmZ)m;.K6;s:A/`NM"Ca[t; -%=csC\,"#9W1!T%fKp\8PNML/;"KKQTg6"p*kN*T1A)sAC@$lf0A7&6dZ9frHR2Yig>(cru#,k$D/$Qi>cp,CIdNfK]#]MrVPfq') -%V3OQ-Rfc)'3epP>ZfML,8&s5G&L1A-;oW]7'4=r`/rabIU7D)8LG4+,FnB7/MM5*H8>u7KlJMu_aL.iVMLYbZm/58Kj,2Cnia<iI -%4*bn[KZo*U0rTK-Wm\Ua+iG;2IF\UHN'K3uK7&t?AJ#O%>XGc"bj)_LU!/5AO]UghE:"PK12]O73,l8DP1HQW?Zsn8BhV(:NNEZs -%Y`XjYdZP*<_U.!T;T/DUQEO+Pj5ZJ5fjmK_`$nfsE/K4[q'J&VLC+r=?.XUj94RL53k.`MEG'tUB>s-?,i5V4o33^8;VH"fX$6F; -%3phshSP'3n_Saff>K=slCD=,Hi:!Y(KX4ETY'hXoqPOf/NXSq4c=#3,R@ntB)U&Bd@tdI=Wgn1B%m@2KfpH4/a#$uA*CIf,YRsQ$ -%,78\'iq<J=,6?KL4_LkkOEADVJN6#0`\sQJ,^+.@\;Q@FlJtn56QeSPn>1R%D`G0F1]4J"ODpCF`FK8*)C(Y)$2&r_p[dcB8V)k) -%c5SS8pt6:e<ZVElOBNCsZoZbc"rN,Cm+>CXD9^l4XE[=O]+fHCi\:W'/H`>A/L2[%]5N*_hb!Y(^&]Y%dOl#&V+*O%6fA.a2q0>2 -%\*f_Y"Y-_/bC9H!4+C@n7H2VTqoWnCqpHi$DRU%cF'<:D8<4/89PrQ[2F!P8,6W`[M3nthmtj"`/2X3.m#36OV;\MWlPUL+:#;8m -%m-=cSMDNF`CfF9PD%`-/QH&e-DPRdF,2R\][rGtlb9n5':4H@<`"nrKKL'gL'Vdtr?h+'DR^'lCGVSMhYldi1k8(#\`W`h-3Xjas -%iVH;BMjf]h-c),XirXkB*Vd=1rAY7!h$g`pjQLMM#o\AV2D,5/@$W*KBP1t9:ts@S>L5<dNW@2-^n,X4qguQP0;_qZmF2_n&i$[; -%d(30o"\0hE.qnaWJ`+!\P!MRWSt=@sXGXB5LsENZ6&/aI*e?Zm_Z2;nc>5o6Xjg?ig"a*9mr!t!1"d0?"cB?bHXe]0Io+nB3(Y;( -%jJUNDOaT1i-^YUL7rl1E-FU2=O[%QN>?<>--=KCU;SNa.Be$GBN/=tD+V_01YtsU'1W)%QA5>/-8cFc5.^#jo@7%nkD6\*sO^&oD -%%U*,f.7c<E@s>E.6I<[hO'4?LBT.p%U2+L,"al"8kMZu,Lm/COW-h^rS#"Qi`[8R)=H3L0!c78W_B%r&cWo/^]H\FeEAkV`a6TQ9 -%C0K(NS?R$hl+5cFjjhBDHSN&.[$\:;c'W13#D9IF@Bhk,SLbX9di$Z&;J;:O4-!=$mhkeWIIAZ8-lYZN0IPTjI)"lY:@;=Zq1Xf$ -%0O?i@HO>&n:;pL+-/NoY?t0]0+\pM@O2Yk@ja)9rKDW#unC-!mHp'Kjc&md'*$4F.<ql'Y7$0ZF*0Es-)I3='0B%.+Ns!@22)"R^ -%*@A4t*AnF(D/hi&oS^9V,"r&e"E+r1Ep\lXT#kZX`hihu@WrFQJ>*&*2_>O*<!M,35hN's`9`<0$LF[4RaUUB,-a5p>8e#bS;_OO -%jJmbMabZn4JBPa9*P,/6d<Isa#Y;"AMc3EM>@jY[_=neGm*;II.'`:DTkQp`[#pU>1t,1qfF<n/&a%M6CNE4(D"TcU5sh!!PZ]D> -%Od0"J`Nf&o4"5ThetH9rQt/720V:1&"&O2tSZMp%D]mOUMb%Z?"W>L$7GD6*U2@(*WHMB!<'!E/j^E;-N1oG$rq<&hlnZ`HK2niu -%$V%@X;bC9s0.>ptno4BVLP_=#`H<%tN_aNM`M)M7MZ*_A*OXOQ6V%utJhQdV*q>]B%&aY:W^uWt1mYDH3#"jo&6n@'ZCT8T0]k\j -%2[XD/i1qWe3ul3a*@TH:>\YnGiWd%cKu*?2IN68Cg9IF;-^#fY+I$=9+&k))k@jX^oa-4i5s'%M9QGLQBS+Y0joqVN@VOD=9#ZbJ -%o`R\NZ?m-=V2u2CSk1)J<T?Y]U#tXgMMI!W9->W?G'*'*b4Z1.(THgKIUbt!%PB/F/0KmEX?$!IOTDaFlFm*H4ADet%Wpt9fp+Ku -%dQWSZ'4.f)GBG;[.&Ub;,S5s"06PRGNGtuh`dO69BRgObgMDhJ?#80&cHX7'_8B1'--mVAerr`H\XhtI)*L%-8I3kJ_GHh3gd6_D -%3O=opD05I5jJ+;[CMQEeUH#87XYGmk<u^X!4.;5dHu)]!8Y&uFPt#rT6Wgm+7iE-A*Z?j!<0i$U02eR5qmSDeTdjO0_2ec5%e"=t -%9*b7<mM;F2!=Bmu%0Ip5g`)@K=+02O;hS*!N7o<)M],.i>H?Mp6<;dT4S[Fq)3sORXJ@M$gtR?O+[>VeB9Q85.c3g#I%Qc-A2n/X -%lmZjWA=,5on#X$/n4<3cD-+pb1r="*D?juQTNnGu]6^bFQ9NF.Qfl1jo-?8um$hdK"LMN"7gV+,Mntna-`:;lh7r5=e(/sfh>C_K -%h#@?s9Bk(Z't_pr-OT2lF1ce=M?umFkkGq/+&Be8-ZZNK)W%CNkqr("l(M>(7dj!#<6N[e-'V(_B</(+"-hX`k`Hthc^^$>ch41* -%9*?oT\0Af0)&pp^+n-WAMBcM`%V;]PDMSa!P4Rh5jrd"JEX2F@l41rB-D2S&&0Vc$9VV3b30(h&@O14X-3Na.fcj%.6KC`hL%p&# -%r%+QjeKo?,r+5;mOP6/r7)H</Br7'2>/Cn_'@ug>F.Ym:AC=LFa]2/Jkqf_Qa+jU.c'&@<W2+V5$Z*-#*?gNUA!mmtaDlDb6PY$e -%ii9&r7*mQ0%TFpgE/:`34](Co<L3sJoZ1@lA5H08-lsn6W-YN^=rB&s0jATmV,T6*Ol-]`o]:h1;:lT:H#RP/"'OspTL8fsL[a%& -%TJS,!=V`E$Q'p1V:E,_YRkZn&AGlQjp<IDN=[]gt_lUDSZ*=nBrAqk(hTBaU(8kNt%#,^PSU.Tu!Q",?F^=at8/qJ;.?d.SlaR6O -%`ZPC>`i%3-J\1R<_=t(@]G:$3fmR9148a8"0i8l]\H2c(I`-Aab9Z@:7']c3V_jE/kA8/+Un?8o&-7*7Fa$'j9#RBSc]3f5%QJu% -%YcTNDZr"Ef$FY4]kZ3_LACdj%W#*AUor1(k%!'%6XAKGoW:O!IVu!(';<B0;P&iG)(^\eH=:FHHoFk?RLKVht$TfU<eE?rf5%.3n -%l:sEseHf,0ehbbt?i%YX7YVt`KX`'DTtoW$$bNP.e_<r-.R@WeHA30'&e-"=7g%e<66I>^UDpn:Z3-:X)gH@&c2_r/88as9poEsT -%>_uuJI;i!6E>"/?+OWQk8*!S`iooA=8g>_q_YP;"/u<j5eHaal)B,WN".G%H,A4D]U]XkGDegVFDmgCcIMAS8da:#CJ#)GR!'5`Q -%EeG=j7p36HRaKZ4OuP&fR+W[^i7,8CB,:-#[DOn=eLE7::t1rj/)h*il1.V]Te[ppM;ZAC7b`%AP;o7YiOLqM@Y+'M"99t7J#lX* -%jqk<j`\blI?!&>=YiO^Ss.3)sb_;gtN0.4rj"mVn2Th[Z:`(J8;D\r?-t4cKG%&q8T'5r&3fZQfDB7:fa(^of$eCT'-rVT'=X5#I -%nfsT&?/`IW(kT?_d,I4C0C+3M.:.^EKdne!7\8*DN`=F/aslOU[UrHCjZq_W_c94[:$6SQ-4b)pM/eQoOElC`\I'X:FlHW-/M&/^ -%Z;.7HJos:(,5gtW)3_<pL%T8#.9#bMDJ"mVf1q]E&]?q$_&6MnJ:PonA^fF2g+oIhRu!$GMFPS1CIWnH#>f<ude(4BF@khXKQ8!I -%I.E:sC!X:]lB6>m)@)7Sg+K9a*'N5*8@N1"o-:W&526kG6i$pndk]d=N`l'RH5%j/Ak1TKku4BBLH(Zhg8!M<N/X-X%@AStDDebq -%3p2i=?u.0,=eFd>;l[0@LuqdfdZJ:<_<7BfedZu*NN&P*TV\W"%UWA610drAT&1c"[4RbUXlF$c"*n&j#Ttd"Q5lZPO4C3W&`[R@ -%o2mLTE!G]K6ED*8E[o6,qB1Pf7fmQ;Oc=rXYAUu61(5NXhNZ[mRop&oW+t:jm4TC0RrU-S0f;'1`1h04OSrl^91eD=PN)(JKBho! -%I&1thSeA<!!Ie#JNT+82F;!*"W[39(Ku1]KP1VKKN^>rcgUr//)<Hfn"!LWdlBeaqN"eR<DO.A"(9GYb&A+FdKmFuASRiEL-sIu< -%VC?>[&3/.3Qo1VX=uMsh'(U&Ep?]$Ze<?t6>!hPNDRiV:caT+[HL-)-_pT[Q5\r7Z&"r5<,F!P&(&SoK59_cf]$UnWaQRBH>$De^ -%2&0Y-AQbePXm\^L`<50IAQlB?/KlVhJRV.9Um;U"d-YNV5n/J1<d%p\>SYa-/+l9-gk)CF(\7CSf$TWOp6`P_=p,a%mNUmLg.1D[ -%b\':JZU<)cX2FM%C5gU,bbX#5MZlondDV;u_a[:M^(HQAF6t^KTU)7JEFCk2TpSs">Nqe'\-?h@@90o66H+l:UFX<+?<Q<gIQ2Pe -%!9t,Y7q5_>e@+$0]OeSVAZN#cNl6t#\gYH=Bq&M05@,-2C16MZ'+kOW<R(uJgpkmXYpGrbG7\d5JoPTs\,lNW:0;lq#lP(O36Nqj -%CT3W3!gV@LY,<IgapWd[aLV^g4XdMpTk4'QD(K]1-$E$9(rT-/<-$jIi9Z=;p[Pb2;L%d[:E&'0<XSW+eTpY,,0+pF%OW&j70q]U -%7l^=LJgkP1R(Aqm\+<EZL?R9bM`KS<?,t4"RYbam]&g%U@)D-#:R!4tQo/Z87Upe-`kCT2>Q3&3U=5HHNMI%aph7(T,'n"Mh_r$' -%Wh-A(cPd4j2C$FPC.^cd4.HFOA=[+nF?b2,\\dc5<f/"snDgpfQqqiaZ<j*+!#Y:/'dZ8JM3=%B2ll^c&HX\gJe6<Zj*2/S'C!6b -%8FrT+f4,9;>gbp"b,>a9<iW0ZZm(b"X5d.,p_[p[\npJ[oJAf59T4kj*.bahXe2AQQ#T#s32]>-6)5]+CQ6KMGm&\-J]b&fVcS+/ -%GRE^^pZ`q-KWVP,@'Yh'H=/,#a^iasR%"#,>(Wq";G#/Cg4Q5QV?%?rp!@0bMFsb6mUh/MOfI*=SP$q.p4Vn-R,SiB5ZE')"(=.) -%8p2+50bpe[S>k(QEpl&W\_/@A+_\2\Dht,)'t0LI>f<lEc"2Ya+ZGb$+CJZ9@?E2@(Oa"%m8?A)%O!\@Ct+>Y>`%rD0HT<:)U(J/ -%I#h"t/<"J5p3;2;NKiJbm85:S5hl$ZDR&09nfEdC@Qf+>;UUR7:o0u=VIh(oe_`us%%"!gIdC-gfj!'0fH[36Qo2:h7JBE`N*gZn -%A;R-dMK;lZE=9KmhQ*J$X_f6s8Lm`W[oC'+Bq[EG*#nll##9e[jjUfO\N68=,7+D([hUJUB'+din$+,WUK(FN-e_;WV9M0nW5QhM -%%<7LY#a*f;(3F<.]UbMWJ"ClKX&St86C\OMert;Wj!rO\XZCBFWGqQu1`;b)6ai]TdI'\\;jei.]3/acOh?Nj.KgiW-u8:7=<Y$$ -%fqP5[M@9W;J@]'q/e`Gl:j1TN&Z7WZ\q./i5Qa]+Wjc^_U@tf$K='9r>3_%iKWF"C:t`)SmZ^Fq;?N)f\[BhsQ'3`%Ki8qiS&UVh -%Qc;XgX1^5h^N-S=84P-dfO/PfUT61LX@=+fj@j>`2OXY<h[Gl9#tb8U@Pblr3:3c.'>ukq)CE1YULNlKXkIEG0@OH]j:Tj1P/t%" -%hBeSQf.5++^l(r6-PcB@M==c?V#Fh;rXoNC"nVS.Z^144Cb/<pHETZ''tFRMFMn'3MUXSs&P\-nQ-#k"S/SgY'#iO+BCA^ZA-R+E -%itQqp$+@*jr2l)&M^p6uo/Kbs`83>&o\;ZePWRCpW!t#3L<5QELKaLE@3fM4=$BW`gUX>oTiG`&*0gPD`TiORAK?aFAei9Cg;rY` -%*cf(.41il/;FOIQ1VZ8]8--1dp(!@HUKb$:X<kJs_)U+6#T,^0^mX\t'm4G5HKA<e'_(<ZKCXK5-($_hG:eM`KTETG0XJJ>>G]6a -%,k?ba]I_-;'@p/QmR`\b@<a9@GE%kPODI;%e)tEg#W9NH%BC5M2K/gKmVAja:uMgFGn"(aUW.%b#t.fj*ig*8W,8UTWrQ_<4kZcF -%S&d<!QX15pTeYaAk<T[Gq(oY&E/?;,YUJi2+\Fh=%$`U:@I)i'BGJt5NKHbQTF\R'*nk?3.]DSNIe445&kB#tOs]3d)Ok3cn4/DV -%kA,T504>uZ2dKNTIZ9dnd[7Of2?R&XorsJm08$"SCZ:YcEY=ceQ3M;Q)\+ZdSLIT+^/85g+b;r7*T.M3<4WHL"%-DgkN!j-p,"!c -%W2l9=Q4u&0.9g,"3;s#=PtQa$jK`7<V!+r1#obnZLrK_1h?I&.2ET\p=Vt+W<K4duCZr3&]cR6K*XQ1PX=>[bH!25F!g4LE9%p') -%8JSBRBghAYe^>cX%]WXa)`iKmO@Be1NP^*0)C`?rlsq633:LSqe$1OTQUkAiN(?THTHb3&b6)`=9eer:Y;3&.]""_U!.f';G_TH\ -%s,>?/Zbb>AC/W@/Z$%&TDM>7.ge/%`[3p4.$26GFX##Q:_SgU5.6<h%<#8Bpb\8!t]WAEbRr!a96@j$*Q'3`:%Z@_Y?R'ecQiKW( -%l@S=-J@2#Pm%/\i?QBFn9W0O@?-!"Sb*=+h`eD5P,Qhu0>1WB)bq[q/2Kkui@J9t+&NS.$-k^j4;3M7&'KVf!5d?/+;n@#r\n3(g -%J]i^`*LSrq?ilG!Rt;$5c&pA?c%)/O\%LZ52&rg-YAkqoQr_@0m4X^uBQZ->b"DJJJA>c<#/+D7)6+)06t9QXK*oai,P_^?o27%t -%#H!;,G?MWuVq7Ec047;*:-:'2!'K'%aFhCkZ[h;\lY6h,/%bi:7rd3dkW)b?iBbJD83KX]1iCEW'gadJW30V`^/EKK6R1euNcFBX -%7V^So:b=4HN<CV1f<4LRQ3C^@Z=W?lgXAd0TOp^@X[KEBR62;I[c2SW)j?9r3.eCBW24!l(R8.JDU9A]D]=9hIGKPcf"t9s!9[se -%jBue\U#6O]6+_5dhQ%\%,J,H%%)l?uX/drD1)4FJOqV88C7O>3G=f#99&LL)H#W"jg%[TrM?>RT@\K^2D=5I1K<Z"Yn6NSJfK:)M -%i`848\!'m^9VkUGKmNfs[Z1C2mPT&#[Z3bf#9Kn:-?6g6+jrGuRSk`i<A#PpQ,t/Ir`8"j6htZ.T^6+2DYaHs_H;jOV[;$/!$??O -%2_s6$8m"^"C/S&gZ$`kY\9SeO3`H`98o_5+Ll@1SdQBT[\1fZWkZ1,g@%h3K#cKl/34CL4=,t'+OH<W*EPD%d,;L[^'kfq&G-oSh -%E4*JdQ=*>#.\+S'l!+HoGMfbI[%kHg='tUY<X7/9Z5]+[CApEjX,D8W'G"Nf'L8`b235bmF+99G-JLIh[S^@1BC_:5a42(6>%9pa -%7<'iU\b!<]-fS.nYZ,;@)C./Vi!*7D)_L1r!a(?r>Q@k13>SBkB"jju"0AKW)?oM`YrSc>GM#nhW(9pIq=)3^9_:k;UlK>8*,]BK -%:kbo5qPi//!ZnKjiA=,k8qB2F4UEKmo(AK7psB,Rb,o//jegL>,?#hU!;t3I*kkQ&U1k&=,c3%S8(OX-NF@.nnA[;nWEZL%m?Cg\ -%6"I6q/G1pp_K@&dRUQ6@+]5N]rEb$T'R3S&rGu5/EU"d98FLB\Ls<k&8p,+:XGlK'&Zs4TqWJm[Lt!$j.e?-2YXCfFQ!kl1WE>"8 -%1.d?AobtH%3d<MQYOsW<)&sk9.Q$ADp:Zbip6A/NBnVMLpast=Sni!$&u;?=/g]KS<W:]"mg,+X\ADo;j)+?(pJ"f3;EGDDm)&#g -%q6ds$$/G=#<B.'\=eUVHf^q$E@p1ZY/(37p`LZ3rWNr,OO4TW?qI)E9h$S#-Hck-O2pd0q]^U0XQDL^,c,=;->(YKN6n5HWA_u]; -%Ks93MA*cEW98+7ln\2%S2(+?k&L*i]9XO_Bd"^i"gb?:1A[E<mJp%Qe8l]?`V/.LS;4EO;?Q(6?\P,`;)!3TEV7,"<4P`]Y`W:EF -%M6-Ij!glf(5/Nsm+3VG2H-'!Sn<9<b!oVpQ`0:\,_o`Sa[c>;cd$`J(`GmgO'7$*iga8FBoW8s@;Tg]KLGc@=BiG_q2$BtH#?_JB -%#e%@-NW=SdL;r\3cEoT@b>X@Bcr3'P)d)Lq&`hb"SZA\l4!m\og&,Sq^&,FZ9CS%)PXSd!?Co=WFZ6$1qMl4.Cbp6VIDdEFdP3Z^ -%U^f"L_h@.Vl])=l`V^;"^K*=g-[2(b9Yo@-on*aDRmk1hlUW#887"u(5-0j'kftJtTH$epkfg:4):6AY0p?TkF]Udu6Zf@j:Mucd -%;M]=`>fFF&Z:[.p>cSR*0Z,qlVm^os(eC/ZO?D5d(l[NG&(1IBXH1+LG@5%^PT,)*OkkXmN:Q[uW`s;]rK9PNB.VZSoUj?:bI`0D -%"2eIG#&AX`.:3K+SSrE($YuM5\p%=#@OOICGFf)p3L)-j:EP,%nDS4OmIV%um)Sso_uWttFf9c<XQ]cr91S+(+Ed&Cb19FG!"r3` -%FKQf2=*X_Qh`O]5S,/j3hc[Dpkqk"e<IKAl!j^RafO'Q9G&PBu5B56$=n`&!)4BbJs5`dT\U($k:PH#k)nRD`W>Z@Zii@$E2,UaL -%iXR&+\"Be`?JM8u;@lMR@fm2lIRrlp%<<<PN>F5!W<5st(%7(e"$%H#@c;qrjpMd<MK;9JifP;QUGd_IpA.7MDl_WH6f^Lq&u?=* -%*X6E.Qldogj)jJ`DE'.`$k0(Jotthm!I7HimN4:S-BLTcBPhTSgjIa?^<FTb):;uN)5W11f4tR,p[D6Sc.+cqXSC4a]Hro&=rK[M -%5]]GfFsJo<(Hu[Q#r9Gr?T"#TL`8eO.`d,XgkL*-Z<Kj\.AF'O58kbl)E.Eq$UZ9%P#;1QiN&E099(=H^g_#%YnZF<'hbSA`=L5H -%=i-'6eR^P<Ba$#B(TlW<DU.s$`79)rG/C7*W!4q\5t9r>:dfA71ol1K\LLd6P=9$t?QJ=l^uGXVc($</Y%Y,to3N#&G7$R(24kjf -%NHDUH=JY'&+\jU0Z0Yegl4[k:'9OJ(Cr6deoooiL_,#UeH0kC:`on`C6[an""\!8RK^*m2?=kABi?5ZR5l9fr%;H]ICSQT+rn_.G -%^sIB"^?k-Mjc_""c'[j+eQ"Nu+M]ar.a.m!aT??;D9RF;MN:I?-jfW]-&1hdUP3u9,MTXA*(J\;4WT!be$`e6)n$M>0kW@i8)jRQ -%hpfsR6gX@Z6H;!+J![3Gp[km/2+SrTS#]]i&pOjS@jG1RR_F$Xl530!AiSjr1%#>bY;)0f(*SlnfMZ,VAn*TX1;+MZ9Le9*9R8PV -%\"Fr&3p8pG#.H<Z8k67Z4.HY'V#u:LY[n]K*F(ab^,)RRBUVD2?>*?J2)Z*d&QIYb;^r&L-c634YA9,)M`+aeE-"Gj)'Z1Dm09Ep -%lMt=e<L.q]GT/?e$5._2f[qJE>kLX\df+SiNYVm]28AD\cIg+H.LV[j]fkp!`2hX,W8,Gf<YCL^44:>:hKUU\6EeJ2/rq\fqrIl( -%IH^@(]>?3X+l"Rr`)&8iBlt*p,-E?,Fs)GT:Q-4?@CRiP5hY)+&LB\'7)KS)*a.qq,5i<0,062IeJ>[C``<A%>dQ*2OfXR>3fHTs -%gTF_aI][JeCY#=uf33lqrY1%7)?h.4%!h7CN'YLB5cHY#j:^iV.<Mae].,m+LQH^KKG(#'qRL-s43SGRna_,8)bB%`^jDY)FT(8@ -%0tXGGlE=/\b+aWY3]D)B-+cu/h+Jea^a=5AZIrDk[F/t"0gj6k8HbbTj&*uPeqVY+aX&6o2RdQj?.p,UDK?QFA2t[U6F&0FYu]L] -%Wf#C[Yo90R61cki*XHS/@?3h=W>)q6E'6Trb%bT[TYVj;7aeDfP)+$S-Y>f`h#aWnlp-8&b=..VX@1>QJ[?P)@mC4*Mf=NQHh,1p -%7cWCVdc@Z!+X`'YCNfjEA,_eUf8rPB?;mcfB*YJo=jI0BO\.HK<_W\:k+;(*f*']M,!E3E<+s\rKD7Y*JjCuq'Q3Y5@F`7SRb"Er -%.lS:3ohO(@jeR4!Mr[>gMTI,U@jG?8eZlIP06YV0ik!CffELX?.moi/DXagM9$%O9]s3e7j`.HY'<:gHR=b*&Lur73,-7SS3(og3 -%(52gJTV<W>kqsU1dPp.U_Ed?FMlLpK:BNhkh&E@*ocrk<S)N=@Jpm$@M"f$3O,CU$XZX`I%]DE,"Bi*O=,_%7^YS76dF)_'>%rX< -%=rTT`-YbNi[R,8ilkE)jG2nan/tP(j$]mhL0'kq.C>!34H\qu/1$<;5ZKjr$HUhARWDKu+Z3!^tE7=MCfRCjff#]1j.,Ogb2U<13 -%#;d<od0qmHKT;0OB(@<cOh0kh>uWa_fb?M?TCqkoMQ2YY`u3YA<H-*%Cd0/(L#Fq0%-Ksl<I)PuAr:mi1=Tde73/+>[2FrmLE^^h -%1$<-1-n86%r_NpK8dKiMnr85S="?WW4@&ktL]^=?Ipj@=PF2uK\Y(0u5ZW%q,M-bN[G?Tf#Yf*i));>>Ai5H,]8hf#7;Bdljt\B( -%>..;[!2'cYBkP^7G;^)&.^QNL%GC],8_a4.RA1c0F5[!WZ"dLM_IBKK.(gjmhiknXdnFJ;R,fVNH/-s<-)S'hD1LJNn+P"*.J38l -%kcOV[3`*Os'R0<0mDu>"0EB'!U6f,0g,0S`?E_`;%]WprLkmMH2'(C:l4M2&BOaYNXK-=Md6*e+*I[7`*b''CYC,,[\9[blEDJN6 -%RJt]/HGFa%$[0/6*k`dF%bMF5266?-2Q)Q_+#i!jl*.gcb-9K'^TuN6+tatO6F#c+qB9>([?9#)E18X!j$r&Qri,!kFAGP9PA*4S -%kRs(&6(mOKN#K!.hAB.La2+du*]>lTVhsMm"'P(HqZAHhH_\QP]Z#IU)VZCr>?op>?CaY##=uEao'r&kGOoDE&n\\A"E!D`/qSu> -%*48,T$it]H-&dH"5JLcPkU-isq04gG;UdDG<E5]43!kS#^C1;.=.%\[?fquQV4/Bu6G*]7YBZBZ,Sa*;+[`B4RdmPo6PUX`<_"D& -%N1_=KA:W*A/j?JL<eAV4>b@HYY-SVhmnZ@\2O$>X:nc_4d!Y7+!)OufW[pIGeK$D`,-YZFo*,Y%<V0u_dQdu"h11eh^Zb6^Uc"NE -%8eYnaqbZE#S3mmWlQdH>(,N!me*6B^ckrd(6(j$,,+ru<F.\.XR]$\0'eSQ>794R,[W5C>4g`+:%*6M'UU+@D`R)WD5cYWi&QXC< -%P=:D'EuN#67gTN*cr8XVl8o<o9^b5_9ZnUn)Hl[5'a+sr?R]QXYHOtQG2*tWUr0]"B/[)CFaspGY$/IdbUmdM?(3-*,>Sd5dW_NY -%`![ns7dQ/?iG,M5j\SPDg32(D6[G1f@iiZ/Oo,fh=^7*.%b-%d9U6$j7_Yrl#deSd-Jli'%p,W"_cfT$hC*'Kd3_sclXp9o#$Y;G -%g)$e2.ekp@A$I6d("bY4eU90.41nW2,<R7J6n%u!ccBJuF0&!8X%i3./Q?B=VUI-5[ZjTcJ34VujiB&thOJU_$dWXGj7@Wc>B@s: -%2^4TGOI+/m#rr0AfT.201I65rm1-R]c;f#<23(<E\e:MR_,sdKO0%q1oSMs+YC>,qUWMj[&"<4NB0dd4\!D)6P"C!Z'ASJZ7$WFo -%L/[AlVbK1gCVP>B>?4`O1@_WKec)pu%.?a4B+l/<;SGj^@^jNnH4E4i<CX*ZX7R_`2c=a2@XWP4K77@!qt@UE%qgQ\SWn3HrFqO7 -%=1G#^YSQ']N!OGV0#J8<UJr5t7^iuNi2j*L7KY3+Q414#&%jq[aCuZW47BQ::tqj''4_;/0",7!>+iblmpc30g?@:=NpC\<SQuQa -%R<GC>p)V)T'=t2Z"h#1#m61(c)k?B&]&2pdSU:Kr_V$u/b?$XhZk!l[_P@FRgptfDB\/9M1\>F)O`_)!_^4<S\-B7E1fEd*D^K<K -%<L$m\:VYS-A8)Lmerb6Nk+/cX'/-//H-p>"N'(Dbqr0Mj!M\fC4g3Oh]kK+&Cf)YJk!:BC8p7KL5+u$og*7j0gr+sm3GIf$DFLG[ -%WmK;hfj9'e\#nNEP^e,MrRYt:kHi2fT=t+!PLj0trO2.HmsXNn2g=`'s/d.+*a_)/o[ObMIsUjq++Nk1(O&ZY5(2tG]AGZPqHM!i -%NrT.,h`Um2YDn&0adY4B?@VrE?bC[[g#k#;n($amrq,k2?bL]t?11!1A,kJ25QCAf?TnAWeP#i;#;:Pug#m$ok79fSd?!2?IJ:u6 -%YJ9lagqA48kG+Y6qr7CC5<AdRs7_^ikq3r6Pl9?,?QC/:E;[VGhSm+!hj(flhgOtjiU0Y?bO7PL;a!C'ZPj4je$FB4%hp;P8ler\ -%H`_&O-=*@gF:ldPe^aZ`iA@u&@et<"goN(&I'm@.PLn#pA$;s-R9\)8iRshC[iX.\A$\_]%J>)0h*FcroMb'j3Or-'j)c)8ae.'5 -%29,\8!N1hp#ocVaYDYE%bFs^Q"<VO->41e?Z@(hAb2[9/j-t8]IJ;"PcT_BVh)c^+nG_J.(Jiq6p#ZpuG$A_Omerb!YPpW0Nq75H -%rVl=Oi@s!RIP/AbN4^b0ci<7bgrE0"Xi8+GB*3"MFZ4,ae9fNM@I;[89M^_I;7B$?5R,l0F^%D<Pd""bg_MZnCJh<5BAg,PY?gn1 -%NI(O3*hRlM6iXSYq!mkWht]@+J,[R=Mbiejo_ObI5C7Bd$8HoA(IY>hqsP&EoLr4t%MN4Loq)2X1W=8<VoK$<c[L*ih%)\op6Ntd -%U]4SBVD!$13aUb75P"Z"V#S.\Gk'C8NaTZQLUtoIW^EL$43+aP6pRnX)LZK+=0FM/2U99u+s""qClZs#_*Ck`jq!_V9<;g,>B[@Y -%L\20Z@$SabiQ+r5:V\$>hYgItWu[`WR]9k7N@]FE/lX6Y7\qUqV7P*f7gJ*",_>>Ne%$9Z<3lL0"`#S+'f3Hk?ns&iD2Y&im,g,o -%;4[/$%sVT2:-_*G@F@k#*'un=ei8)2d67Ffk5HWVFdpL4Z:LPpHA0q+_Au@<DOg@H"GXrtW*p[r%-(1T<*2PIJPn9@D'&ht;IUH) -%j<YFC,>#M-/L;&)W2K>9P7S&3;;9$3n!0/F)^uT%;AfRr)V*aWcE/MG#!a-E;)p)Rc0/>T@&ksrV`_C2)Q`$-d$G=u<^]>To#M_^ -%nOSS^OX"C;I#(f5.A]uE#h:b\F4k3W$m;s4W5dgR_22T[h)LhP*?15==$C!_K$sM4$<\o-KGppH,*L?5-cm:7?HZTgZ8)MKgh]t3 -%F((2aG9;+BmK\=TNuC<ppqLBeV1Q4c<;]idTi+QQh-]<g"MJHr"l`VPlrpCkN"0JbY$P6f#W>b`Zl+BI5t73h(nfJN`<-aFJg -%X'jIs,mV(C.@\Ci)kib`P>k8r:8s+24,2rO$j)6=d!fe9V%VlH93q6d?JCXEpD/>_<Lf+D)Ds@]]L*nXP7Hm(X#jK=6tsq%<cm)^ -%`Y2eG5gbd;0[D>u5)>U2K1VP@&g>jICjg/fTBiP#gs0p"2N)j%('_@[R'Z=Ng"j3-Lq*ic/ERuaBOfsD*=`Y6C9<q,1o:T5&boG5 -%VS(`>.M`1ml\]%i3m<E"39Z(eI7.SEgDsGs3=$[`6.ZJk2L04ZI@+r`H6:bLKD/NMgq(_?Z%H1u]fT/#5AiQ9ZZLp[Y1KB&qu_/f -%$=)\:is6p<Pjfo.Fed%\EsNsW<Sa-9a=)X7"cX4lO![l+NG<fZ#XJXt]I?=lKo215"4`s*99&kOd<FG9e(0_+e_;tQIuQL7Dj&1t -%D![XkG)"Y"G"g58RUN!=-'P;3S2&`bf##q;8%uJON63!(U'\h4Bp2)c8I/Q/(R*_$\4q(p5f0L1=(b`2M`'sX^VgUleZlm1]9)u7 -%M\s1=MY3EmW.;?tA'PO?_u0eo5%d'9CAFOgkLN<mqKt.Gf['#]iFKTIHa6*;K.F+k(MXp+X$R<7E+92OMX.Y+`:E"8<r+/-)f'[@ -%"aaGC!t_<X[imbqRpXT3D#O"^9q_U#r'KLq])J'cV'jTI07SSuA)ALVh:5$,hGI6B]_1mq,AsW`,jd[Y!6n`XZ*1k.l@%H0CDL]0 -%<TVloHh!o%CknDV[VJYMWEnr^nq3p$o6DI_4,&4R-\n!]bfOp<RJ1<@=.W$H9#MG(?K[XtoM`GCg;sk[hTfc/KC8J4o^.]<XtH&B -%T?#c"d;GKP(N[m7qSq>s4UWT3P6KX+@D^$QfiV9bmqb*$?E%J7)*H<)UFK.^PFI?u"t0iXCdfd*ClFRs2*nHg1<hWg9f$TEj<Q&h -%j#ENVQBR4SqbYdMXL.]<QrGgL79"-$V`66),.e_l&g"Ffd0l.=_P8IAYo1?WIba8B<0gp)/2muQnRNs[3AeXmPA*1P%<h8NXJkO' -%]N>&EVL7S99Wc9jB=C140ptUuc,UCiAsR^c848"MB^t2q87KgNoI_+(\YbC,G)Kn<5gP;tPiQo$20*lLVUkAJ3bO:CK87,sl,?L4 -%]c^Kb:OJ"Fs1pc>1Xoh[\:_lBjGaOW,gR5b\?J/k_2]e^nj[7>jmIik3qk`;4^E@#VN8@b`6*X5ijB"C/&tq=qV/<qN;.Mdb`s9R -%p1lmAm\uA^1\G_nZ8,'Q8p-*4OqH+8<nNH/UN9r#)OUfd"mlP<s2nNiH`O:uaho)D@RLgD78-*5jEM$(.'_cjk;^Xafo'hjQ'#q$ -%Lgdb0NfZZG_-GA/AWA<#@RIFA+aq!I8^`FiY_Sb2Upe?5HqHF.]!Xu5A4JHkPqDF#KTq1<AQtC8C2tr!@qsGZ)6%-<9c@1%\4,\Y -%Gq`-OW1F3.6Qm21`W*;"OtC.$(0Urqn;&Z"j5AH'KtOp96(Vtk$nfS<`g*cPON\7afDS4/j`/W<hMHs[S#iYcG!1k#)K#AHX-Q-. -%*ZZ;C?&.Hd+iV[noBRph26A%sZATCCDTeb6(2b]JnNgd@=#/5@fkMkCPpuO!;!*$DMq><jg94L0W.a4r8)iUjW6t8q$$U*Cqa/<3 -%-R>tX"N;b"Lc!`8XAJN$Y@;nUWXm9IOCW9LB8=Ga,P[cMFr&<>!X/*S1m`'_Me(F5^0P2\eC(V-%m^9]i9At'j/OKpgElQ+n_<AD -%J#:rq1nqG-^97\:l/IqhV"P#UZnhk+!EuSjoF\SuXFAsX!N)[hbK8,;Yp%N4im(;V07uF[o9$)*+PYJuXdfi%-h@$^q7R6\l:6sU -%2%&q`3n*s;&X-$:$4_Lj]Q]#,_01W64&sl!c#tet&J`+c(%>pnlkI?U\Il;-oP.PO0M-B=FCDt`JEknoJ@/m[;9f2c;$ZLFabWjB -%ZP5>[$mq<u9K=UTN&+I%FQ-AhEZ2V"D&WP2T5"GeCig=f'u_sJ@8Nt5f4N4:q'cSqP&n7/g8i]50=+]%=m+RpJ.X=E?BPH'\L`PC -%^^c]N/bRd[n$>hG]?@79EV%_jd,DO,"U-k\F1uX<eGs+2cU+4.]RFl[T.rd#nOB,I&/Q?[NK@:DToNrrrDT`76dt\NY$5"%&nUZC -%Cmu,$3uIP=LM;"/>fgo4bjOumZG&,=NF^]#FE_]"3f9of&9,6L74^K\*;m.W&1u(nPOq4842LLH:nWGU5O'Io8>SS69-$WF$n.?W -%o?S@%ePteS)LKRC_&!)7@oZp!qW6NtVcnJ&,cl=I]G_3Ak+<G\Uaa:"MH->==cuD+MY`PAf+pVlOLBasW<0grQ(pA&66`>1"g9=[ -%cMW3uaA\+(iR4(?/+"Ic4el(>$S^3VI&0PYqstb.^1BtGT@jX=R$n97Zifa0LZRmJRR[u`pZE+^kE(',/c`lKTJg,2'"(Rd]_>5H -%7IM\3V`%rI=6"lAn&?p&h9i82U$cud_T'O6mLpQ,.L*ND@B?5cOB#<C_Tr!">\0L1@&p_KT1:4;_r[u+SK?s@P^mip(Jf\Bl`4[= -%@/&nWB@l')ND&<kC).S*5J:t>k>*U\Oo28&`45h]eYR+f?_:">>cd&J1:,`CD]*\i_tGr6ise"uHVTd8J#.b`XF*/-2]YKQ.^NLg -%;ZHn[EN^2nJYW9lhY7a9fuAH$gQ3c:![V]^@Ek%ojn@gC_L45q'U%%U\HsFM2d&pTDEID]B5UrJb'dT4oIEeM*=FBo\fDnD!IJhA -%XE<iQ33Bj]G)WOSnAV*!8u/6Y$-=:5IGfpWTY-^u1\9[e]4`M@m'\(;<B-Lb(/8Gf9(QTLLLLTmPJb=fV3&PX_HZKHF5Q0<6^E,+ -%O]G6U_F@]Hpru93\baQ?>+,<s)en722B-?R"u[E7i<q9>eqHTGCts_KfW=$8Ek&?E(F3IrZkmsrZcO$5ibZC`>fLCC0*K=9$PqOX -%_M;7OONhoO.$E\%/]c%f6actES,9Xe/=WEDJ1h^ViI]0f:?2K+D!pG;hcr.=$`p\FZ4#6i3P>e'FQ"DsaO''G06#>$H7p\pKqlA4 -%9:K/#&5LFK?Z;s%@)9]TXiS?\=`"1q"j+=]="F@'(>N"gY:U0gJ706[P6E2c67`L_k+S/r9tL\cCe1uLjOl5*.ibo>jNbT:%8XH" -%9cNY@"f338G7J"tLqXVjg9?&W/@H]*:ZU:MXO%&eBE[A,(SL4uk-/[$>=`;.kcir5>Ynpj:KKc.JS0qSqBkcQ/$m_E*?L0pMUIac -%LQ)1qY81ZjRK\`)+"J4kP[80UYf'?";#5LB,e,@jh7UJ<a*%+mj)9hF<up&F6,c'jOol*531Vq$S@^GuL-W/8htt9,J65]IklQg3 -%\hD9^nFZs,1JD$F-_MiIT*n3Rq*psJDBCaVas8"mG5I@XQ,n=B06K`<YA?bSAtP*:s#8b!h#T;#Q`N]>&R+3#Z24a@+TDU#1j;8U -%CPi&h>=($2(O,I'pkBT#=!1"u\?TI>jiFkg#X=kJd`H)mPc*-n5j8iZQCLbJXk2a$fR/L/..u8S^2bgc]\t2h<=*.BXt'Prd*3Ng -%]m?6>::)f),V84Vcdpe/$m'CMT#`VB$ZW5?Bp<:/4.U<02^?F!Q\gHLHhr(EqHQ<kZY=-q%$IYs6hFJP841#$Gn^'VHd'g#-m\.( -%fhL=3ZA!!!5iMg.0u$g#0tD=K9a04p''mZ$LoA:8"Ik@cS0a^e2'aN+GV0Q7aIC6r@WatS;nLS#=]ak%\<$S87D,^1->JUCRiJ-[ -%Ib\P]cAU+%d6igDUZeoT&Pj`XF=;"?0\LWrD=V_WFr%;`7J4Z''Pb9>A'UTedG8*aaF9K/kb+'hG1ICJX1S_m9qL??[QAf3/*AQ( -%Q)eXUNm1dr+ASbQ>is!:C)eIZ^E\7b#npk_PZH*?dp>@Y=1>HlU'+g:ErX:kqrAd9Xii.1k_=Tg;*bW<TtSIN+M!atG#.8iK`I5( -%o#U)2iklp5lA!pn]`8lc3q/S-R=*H\Wkej]o1&Gc'^8AE03Tu$*kYB28FfJ8YUB^/2O;7dV@"fHBdeVYE?,qLj'3RON;UefUoh:_ -%0;fgY%;D4j>Xkkt5IuTG")m&9IZNcc")&nkUnrS_6H3P^V=UZ;i7\D1KG<$kM><Fm<:(W(VUn9I%3q9URR_K(oT9Cf;n;`V`h4MH -%L(%h=LZgu(H%kSG?#4^5hFJf9:*=DS`*2DMJ>sPVZP#OTVu\HiQQuAc]WkjI'@E7J^=30'i!Pa<$]JoX0sYC6Sre@$^6g)@L-q8& -%GHp&a)?%/-K-e#r>j[&\q&lTA5o3CZ,Z)Y9M-b![!nYdR3^cOj+u_P@_b[Qr]bFd4[oeh#&G'?dBI!hN7H\O"\rHY();r6A`K#B* -%1f+:RL&Ih=O(co&H@jteX4,mp5bG]+dYM0l,cNaTrSir_(a5f4IsE"1/Y:pna!,g"NePmS,pc"@KR!CR)cfXZ]i55'0W0UVYgR^j -%!Q[al..I`N43cYF0?OS2lI5=;\rZ5*2/+lE>@0cRQM0Ru)9U)AQ&@dn=kQ:'NjGF#nlB>L]M@s2)nWltXpj#%F4aRVC%r`+SCIIa -%(],dVZ$O=EXt%1^hEe:Z*Y=4YRZj69k\,X:e/YC8?W*IYHI9p[4p6*(8XS3LVmoK]o,J%1bN,dt)mT"bD=%#\8Q).m:HlbXKCdN_ -%aOri,<DW80><eVa>cG^B>L"+Pp8StZjD,mDd?Jo5SSFDBqr)B4"alHuW0\Y3)eg!khoL85NVXHqTpC`3m$'T+_'LF<U_QAJ9P3L) -%'W5$sH)#eD#5%n4+=bC(>aSso^_i.t_o6g7@o1J%h:6B/[s5ngDN"07g/<BV(--5JS_tWJF0ir)Ledj'nK>p7/+n9V>B*knma+JT -%6!%QGj57mK)ng6AMn:t+iW,DX:<euHW%KB$TL+GDTtlp3XZAbP8ld`U2V_#8=WeAl[_,_4(pfue,)IH%m(4lj%%.e;Tk5C@'Fk`. -%G]=u*>n3kNd6Co?cc8'IFL,&h-P_ec9[JqN5)EN9$L3)q7];Fo1g[kQ3&AAP+uI]h]t6X/#'6*q%m,ZVe_W<>$T_YMa*s4b@-8kM -%/PrY[f:&k@@_jOpm^(dsoR1;.2=,k%i8-Jh)nJlo`%1aO9db[TQeI;W4c9]S,Pu;\=$p6JaS@GAYbUM:Q*jkP$=RtROu^6Li!JO` -%Ks8];[Pn2'e_G[4[R;!87)n;t9Z$s/Bh-u:bB=32)L(sJ?"Y0$h;,`'o0$![#Z8B[O-Hl:cEF"q`f-9n?dRW#Zg3]h@--Xan#%=@ -%(b?o8$f+u8%d&>\RiN$?_r*Hi+P@=BAA5lo0CEf851$,3?Z-Nk^e4^0A[lqF%H\EC^6i@k@rj`=9,Md%`W6f)Mb`#FGp0qUZCc'A -%3rs6&iNj?i>fZ4!5i0s!hS+?[$Tq](s#)"f/]d@G(U/7\*iRX_CbKZ7aM/?FYs#*U=FA!QSq,RC$.WkXoBWEB!4d6!kB5+[<_\0_ -%Xa@&tPZ><"<q:5g/?j-?<;4muo9s)0'Tu)&#k9beo?PZ4o*SQHXQ+mmYkDS<i_;:7pZ?=_mh*3;"8)la*a>B&r&,MM6]j\+O!eFp -%P(]>%i^RHa]L>?5Dbsu,)a3RPf>(tYg3"%BIJ!U][Vb'=\;g)CjuSV5<7^P]O!tjg4:L(U-j.<e$mFn%'TphV.+ai0ge'+@34_0g -%+7DD300i!*5[^2efMsf^=o::PDrYY3OQJ;:'PEgJa4V"!M,(r`XFuO#EU"M*\N8kuQL-#!i6p&r+Rm([;S,Xh=iMuQFfQa,(7iKm -%2nDIi5jXO252XFUo8q)cAKK.E*.a)9\7+M-P38h?>oJfLT&2nJ<`Fin$aUcq\tni%gNLUE!V!YeKpQ80(-o)oNmWW<pd#/B?erdt -%=,'h6A`m8;6*V&4ck.^\!9f(uWS7.KT]Su/aG-XI6dW"<DmfX(dekVXas.H+ZJh8FX#j`RY4(E;H06m_#HDA,]5]/'cj1%jlKh<^ -%OpJ0gA#ob!UoAkZ)T]oU05)`!pBf;tj:Ek_gek2!4elgm9)q%bU3"Ge^(Mi\2mM6^b=N/h23u1B7XH-1)@9K9Q#e8k\JB2u[^D=n -%-pBNj5irtpOedYn$imX(>7n'JnZc^PD-=C'duE]+Bi7?(hPFZ93eqa7gC6!pgS&\gKSfS?jJb\i_le2i8Kp)#Vqk,g'*3tunk_]g -%*he>uI.t'roQW7FaU5XI!F44jKA.uTHsV1U5n!_Y;I(ZGNmKNtG%&`[G[p#04Z09)[?\0Jo,AQqAR1%9@gK0olhe1e;gX[^=L",Z -%$*?1m%-[o2TJ_8K.e=.8o&'CtQ)@f'gkNTsUQE0HXXB4(;rM?cf(7[pGL>s=*U8)[U=OXLP@H\gmG\VZo@KRn]@_T06MPH6[^SN[ -%h?oVX7KU8?[@65n^9)%T'm!;+2K2g,Q"W*opH$1(3#Jgej.+po?BnX&Q1tKrA?3G,cS\KT[Mfo&cd.u\W^hd\e$4+ZM;2Mj^P]9` -%'2nl/**)?udPL)-Ca'm-q>cqoh2C#Ih]jo;(Y43#e(9`;R$$Q<5!2rDBmQC\hEYt8<7?9`8c92&XUmmV29DG(E0O?eV:`KdgOd'N -%L>&L>OrT@(E?f*M!l,;Q\JEtp(8CNN,joU(@:W>64CQ/rPaV>e)hC=gKR#-``u-&1PdOuTmkItt:6C0s$tQo%Ho8d[D;53?!5:c5 -%H@]aQE$<8+G.cr[3)(#OC-g#&2F<ED_%DH'T:gpa,_W&JX&($gmNZ,K;3S[,/^pg1klbP0\;TYna<=.ILXqIA6nhZrRhb6Kf/sL& -%R*IC%Ks,\/&KR[D;EH7=:LQt>eTUcA*Xk+4&'S[KHZN8J#bm7Sf[oN-QGKn52];.tjYRi_eqtTBfk.NBi`q8f]-&*]1d[Q^A3J@m -%9iA1KI:IB+jrhj$]S)O,o!tsmA%Thlr3o0lG,1eO,'HYR7kN$%c4`/h`!dPc7RMK@Nm\Y$d@XV8eOu=k)R$^#90*dZK^Rollo<Aj -%p3>p'AlJ=#n`s7P0AcX%`>:a#;=fs@2u\tn]HU:31>I8i*<FLm%I::U.-4IAW+!\U-!&L=.9?'0jYIPl<m^^T`mrJ:aW.?)>clD\ -%bG.V]n?>^n)<G(^K)oc40c-$ipI6I=Y,9E<l6f<b'fCB?=dbR4`gj.P6KU=deZ<snd':,.3lAkk0Mt5n@YS&CK1bGl9-Ze1O?Bus -%>_G3Kr-UUa,JR(je7#Tl;(r3r[/b'<R_-q9SI+e$0RB+<Zm@Jfm5Bak%%KB"#&'/fQ6`u=5,Z]iX9u]aNJVWV#n.`aI7q\>@Z;NI -%Rbc#lc%:I)#LMW[a`jl"Ca'f__Sg8-@r=#?Dpj>="+YD][;Jo..@n-,3Z0aT5"h]>:oYq[R*M]@I0lG15ZIklK8g69R)f?'"Nnkg -%p!!c_=LZ$e0IBf*8**LInM!EN)Q-60,98G60#EWfITgb!Tn60/"Wi[t?D<n!?qlXB?@CES77Ck_VZ;PT"\1i58c3!NXpm_epL3/h -%WU.X<"sq%h(56A5Su1"825A@o*lU.[6;8*4/a!E[hgFmNI]=nM;?>ATT-%b"Ec;%GrQZ+[P%9b?*pT)^/EW%"#Z7n-7DUH.>@dIL -%A7A/f(R#<t8:p,@f1&C7h&CO8(rE8e]2@Gh&p*lH+b*i;eInhdBek3l_30d/DgFA]@5I32cA\3ZY(ZNPQh3=d7&7Z-7butgpUtQ` -%%Os7I.*8#G3[;?moU[4f@_WF_f3qZZ/qD=WX7auK^UK:lC\pTp#VL$f#ul`s/V$o5b*N<XV%Ap1!`R-k&N-q)Uk6QWDo<mLEXd;L -%WMYT^C#B#T?e\Z7i_hCmH/#"IZ?3d9"FRPZ_r%Q\B%k:&ge2Q9Ml7i6po3K8<'MU^9!)0j_>(>6pWj@CNrClnH*L\KXg5RadmPKc -%X]/$eBItEI)PBP!0u&?ERtkfk4d_[81WCI4qdql@-AMiX6?U-(q(P[ZAsD%Y<]34PG_p<+fH%F-L_Nege[Q-omn`8tFma(4WdrUh -%gqUeMkVLQ67T_#QQ?59aQ6dC:TWW,8J(\as%%iB6YOYm0p+n#P3g[j+,k4c,^`M46cuCSdj,6p%g[pCSh6R(jg.OqG0ZVbqbJ<OD -%dptl2LAg_o013Q>^Nh1o+$6fB0HQ9R`GgjpPf#:U(I/I+=Z+7>IAbV'+8k?U^$*<Ts!l`WLS7rf9fMJc"@gPVXr^eb-?&^re$D8! -%k4?Co\'<=pp4'i(mgid=q9Fo==0FhOVYaT_H/>(4Hf',=aieUPo&fUXInpO'kO3odpMk9Soq/mCrFB1f9b7-odoSb]nUpSN21KR= -%i4EpAHMQP*lXr-Y<Xd<85.u2kl!NHOP1X+0^VN$]MdcVA[m0]A:\::=h0U6VHM-jsSVPNTs2g0pD1]oF0;S;s2-k_$H_8!!n_<sX -%[B..7aj1Ior+J-?jLC-*5Q9no,&JK"-bU<F),PB-:*^"'R9Hl6p[@,3p>XJCf[W4c=8PY(:]**MGAR"\NrKJBdr4G,J*3"STD\Cg -%4I0`3p<g?urR_&Ks!Rj8htfB`lg+JRJ,=$ZXag*&q>,R+f>#%bqs2#efD`IelaQkgGJ<ShHqciun%UsT?iQRDlPk?N>CZMh?dDOH -%NV>[8hB.gYnE]kK^\2#^r7OkpnGE7-fC<)6IJE*rJ+`Anht\1>l>QU:bCB:OrXWrHS)=&\I]NJ(J+-86r."Nh++4U5ocO4mRt(!q -%J,)lirce@J?i=o.a+*^ts5K[LPLk<R)o(s9qWeZ1rmuYi0E:Sb^Z`H'TDGs>^]+iEia;[LJ,]2WNhnK1oRH^Ms6p!\O8nkJYPo.5 -%`j`_XZ[_u#s6Ronr(hh(5P8g\I.Z=pq>^C0s60?pq5aOpj)t=ps82ilB4(Z+fC2_Rp>1;r&,s'<j+%(+DuE:X"GYD(p\mDNhE+9/ -%.U<kjlHVP*k1k$jF(V9h`u+u>MB!Ad3M;'kP;>Fr,mPAAZ,th;-0Isa,_J?R&1"8X+AjCf8<tAh+d-mp1>T_DVR?.7)B."EkMA8s -%%rKn,pY'Ddpoa9Rn+6/g2/Z76?amrQju<(Mf4nk+);23morGgmTDf/spMAO6I0TF^@fECrqAn<G<l6P<\i+lU]7'c2or11T(B7a? -%>3df3)VVsg]Dgoqci$Z;j"J@jA@?>SigDptr65nE`6Z*m$6*]5.Pu%j\D58QhYH'$e0=ma"nahM;kE\t1hp.'E1XQ<k-n.]Z59X; -%qQp+oF77\]=6&,Oja$;Zs2u(hlkuQd#tn"ZYE_hc;q]=BAGbiqqBY4t1O<7#;MOHHJ+fnmX]%.Hg%T^jp<Pu'<CZ5qPtSdcH^.F3 -%Cq[i2dU(/`rdXeC++EXErP^<lX[Y`DP4^VLV`/I!Y@N3sT(od-rqrramo<E!)X5f#$ND94p3N!9mFsKNQe-QZgHWIJi\UW.F'_k\ -%B'gLJoXM'nQ]gfMp[6V4EksjZqUZP@GdH=<Djl8ZeZ)QKS=)',B_AqH*BC&sXh6^9ZYpS,]?$UocE#)lIn<1\Th<o"kqg?RWqTQZ -%kC3G3aU4m3a"i/DCmM,il;b)kZ1d3A?G:O4d$DXL2qi%Ydd'm*+6-p^eB6kBWgM1Cr3D;d2CtDdSc2*Y7pdk*W(#1(IYoNE\6^dj -%*FADTMP"3i4RS,uLC`iW4fdIeWHuYC.l?R^eZsM8%G#0M<iqQl_+n:EWh[9jGkU.]6XS+&=Zsa,mk:MAp$CSL=fHdtf[Elt3jgJ" -%WP0jl.Z@JVm+U:M(D!^=db[diHa,I27h*S?REl=NTlP8pep8^Iq7QXH%6r[jc+SIAc]UROT25GLXlIJoj8(UTT+U^3nN%PI/*/e/ -%<Z&77o_mS#h!7I2O)'p6/2,N<20%cC+g"B70gG+V;R9qHj&10P?n>>ubbh]WJp6&IEW*h7jHWZe)"QXuR3OI[k3$$rQ#"bnX,32+ -%n!1q3]o[m8=uWlrJY\q:[U\JQS3<TXhAJ^6ZXNTZ]cXPRX#=\4V;P@a2i`8?\6SUNV7TH)\7jI?N;ONUcW06eI/L4W7J"0ccE+_2 -%i*D]DIF9_CY#cMMq.Rn0)?&m_B7L_73+1J,8R5!Op&"'GQQ3ON]^"@A/Q4H38c&8=%MKU1><&l\V%c'Ll*=NS?*J_5O=GPS??5Ph -%PP:^W^L,AQH%T(p_4]ISQd$Dq,0r0'>-(.S:]FnAaq*5EH/)V>au:,hY&XL>NgVJ_`^PHYh'OfOFRdje2%&F7pj`08j<*i6T=8h' -%2_2m+:48!s\C9G)2hKAeH#2#mnk$U1SN2#qVk;6ReLJmOa?(!F9(ZH&j2d?'9*Q[)"BVF^?U5Fh>hV'5:!u0(7cV<,/RPb.poHT= -%a*nu8ZqC%!^@1^ij4i^>9%@_7CccS(Q/K":Sldp&WA'$@p\f(,WmBikA8qLr;c,n4D8>=i0&=0dm-?+&;S9+/n22S2#Of7th1E(l -%F%4"?HHfR+B(`GY?*!%#ec!Z5UNT\[rgt:Hp>Gr#,ASVOcTlDZcJ<mtkSZAs[XCt0iO>/RGG"TnL5i7s%t2N%_,J\XHfSPQH7_2q -%N7Ifl%t$++6/oaX@G%%/n6,K]YNqr2r:Y$Kae*GLB(LnZ*T%/:'DH%PJ,ZX68p!,?hfB[TlM3S9qNjqSX?!mF_Rt6aVp@.45<35t -%nu[95Cg&rsDKm<%h\*D/IsgLWaG7IaABL4EY\)ZS]mXdRpa.LUD"Ve81NMrT>1G_6]3_R!@,[E(8+pkgebS#T2/2s^oW&.j#$mY5 -%X+%hmD]\pn@[$"(HbIZo4"nB^jZYZ5Gte.Kla3.qiS_fkqcAc8%*[TSm?.BQkfr<0*-CL0d/LR9<t9X:0\WeT8L\\$YO;@f62W)@ -%=MFP%`RB1#ogoN)is%,Bcb*u)p-0f%Xu:I@aZEU'kB>'`)qpec>C?4jq>9fegHVk/)`9N[IXfecj&^/h%7YSQK)b#0/^i*d\jgd, -%]\R)^!F.L&D]N%DWh,[&MtR)An9'%W0Q6<KgEA>e#!H_qq)`fHn!I-'P1./km?!ocj.51A`5HtufsE?/mp`V.gp<ZC3e=:lG2oR6 -%r3"g:V`)k7'D@r?qg<_R>#*A^*E-]B53ia,lJ`.q[mF4Z@UGAf]DTGZqQM'nNN'psYI0sSj-[$>a#6\,X6--SK2s!##2YX$e'l3^ -%rl8CGp/L%`ra)<gH6k4$_$`/m\FCq_Ym6Whb]!BiWl"4CW)r*C>l.siXR$;Ll,jE=qc!"/f+6)@*9R.1k6q8P3_dE_6AbH*1oftt -%*T-)QnX`AaW5Veq;,MW"q@e(jGND#uIXKnj!uk.q.6D"VWI*!'^5-s#k;<'qK`0<I7;KAGP>O?gJLUi3/b\T;kBD=+!mUGR^X$CP -%r3DfiFtO`!JM/N4nuL6U],k500roRZ)a<_fPqWi0m34DlGOF+Z>e&u3DY)89F0O*U?9c*82bjKFgK?V`5KJhrDP,Uk@U)ikhZX1o -%ou!5,Q,<rUVb2r+DZ'LteLI]4p$CJ0Gh>7'%LcrraR8K<YK!7&iO#5JoWHt2kP'H\k5A[J-pQuIW5G9ZpFY[mW:,&A<o\qbrOAuo -%?dbBc+5!c<mEijtmJTU`j+,FcZu]8h(h-[ll!)Hg96aP+h=LM.)c?Xc=G;n'dGi9]F(X1.9X3^ZjO\;&[TW8IE?AdMlonrJs)sOr -%E%>__hTO9`Y9-l:%>4AnqIA+u^QnSsgcK.m0'l^ffI3jbEJK=k=-Hk2]_kfVgTK5SbJu3*YLi&%FR5s?/P:_>>B.SBI/;EVc[-I` -%KT\J7mCelhM8AZ$2braBXiUj:.W]!_D9=ZhCXq/4manj<aln-Lf<T5tN12N,>?srL^!U9)ri=EFa&WYbl*Oj<`:_/g,eY^q>F#\3 -%<3=d3n#g]Jjb#'R2(ZiE[dH4n:f\iGBT;jOa%W'Y\4ueGa]`u6f?fNGr4%%afpp$ncN!&!mA-(Ss8Ipb<FW?`D3Y]Qn%uf8rHOTM -%1AZqJ4Wq(9ZnFUEZ,?(Q;oeO/(Rc1ZAM*l[-G4-=@!^GJFbVO+Hi@pB]5AWr4hQ0DjFEN$hW3NR]mY&NeRIK`4i^55h4m`8F`0/* -%4+?J55qO=nJb3[6?Gc0jGK#Fr*jt">Mhs+!I:DU5ZEZ@B"Qk9ZQ8al-)-%b1J`j%DO.JCPE:^S6`XA%n%A,ao<*&+b&k`bm&<+r. -%]`se^PTiiBY<$VWU#Y#jZ"@[;=KK[/FYnjXfDQ)h(Nd\-'e@jYjL"/]ZDti'^s0lI5F=LG:]7L1$[5`nr(c[^UFZ2,O<gUS\5`be -%`P:d5nPo[D>tr^!MkkR4,-Z5q".Y,4(.5"GRa`^6MtDC^c6F]4*8D_nF_30gH7S0uTk3&s1p-S,eV>ct9oHK@IbHTVU;&XWYj&NZ -%ir6K,5&,it\k&TI;eJlHoR=G!A7tQ7@+(uK<Pj_oo-HWVH>n$,a)*")NnO>_eVC=r?ZtJf_G%JUb$&gV%>cV4(Ni)$nV%lE-dJ/= -%Ufk>rp0uS=;3T&pBrELYn+Gd<G9:)CrF'eN&*Bl`l],3Xf?E$NHY1dI?`HiUVL$;U6d'gRK9bX_G/i#Tbn?$ZSE<2:9HD\f=V912 -%CqK0ZkOQote`1PR>#*djlt6$qbMQ'p`arA&;EjlqiD4f!.i3%aEpBHO)%#'.Qg,$Mrm=-AHe#Hh*khYX9hqqJNA_kr3tp3)V&^4o -%'A@j0O*B,u/aGtdWRlIK`:86pC%6Je.eK4DGi!Bo:23S]"uF)\SPp/F$#[ce#HgS3Mf38H^?b(`KiqA@DTflV7s0;7ET^G4cmNVC -%SC[kte>tH@%5,n,G>G92E*qu!&XtGP(;%.jH7_fJqlW*,T*m.]/a"jljhT82gK-oKR+*%`lJ(-a4s&.RDOi,&Vm!!>E+Aq7pCc?u -%CV/l=Rdk;9?I4WPTDIqd:4$qtbCgdUCU#c"8+^_kGW>5*qmkIBSN=JtrSfgZ/R6!\`-!X-mA#RqP2Gro)>1.ZV`"r6%NjGDjY<0k -%n"*cCS7^[AX)o78]Q]RXPHaVq^-$H3f$2C9NugE&jQ'mDE:0@tC/D0g44D2fQS6.'n6,5.Yg;0U=Xs-r&"iTj:FT2Va7/%Nl6g\5 -%?uraI4:M/b[r:-9*R7%(%P5b_mXO+FdpUh.A!+1\rhT]I-hR>po6hG)6e;jmDaWZOhdXCbiEanGG+'/#Y!//a`l"Zla1Ntg^TSG( -%>GY*GnCbWcNo"dUlLE\7Fre17QLDu!Bf*PrYEh=lr:!IHik#DB<f/1e(RCh7(CeK2Y=?dJmJ@;2s5DB8H[`Pt'6cslSSORph2\:: -%qIUq4mj>lh2_=Qkps0:N.u!5>fBr/72Ct:[IJW;!?``.rkK'VQG>d<7?5L)#5i]IEa"]BI%W,W%Ib(Y0.6e3?n_34PqtKI1GPKgi -%o2fiV)/dPtn6J#f?`?8/qV2s@S&@Au.L\o)>(#/@FoCUUlSn:fbK9XQa;)&u:-U&1-8/UdZ[_fZd9"$<HM4gnIb*Od_1&3mjI.h" -%PEhcbl4JLe=(]h%+)X8'O8N=n:TWn!N0B,$(9HE#H?Rp"d8q'!2IlWpqiB#I^K8^W4`d(q_u&IgHhM:N-n>cInP7DALTWj&Mu6q+ -%c[7g`hk\SArp\C!c*KLMFi-hH2OmGrr1<,`F7.sF]8iJtG4jq)&"?(OIBU#Fq<c0!orrgNpMX<MG5Ha6h/h>K`iTnlQUM.^4o4]@ -%F6-['G&!$#]8H@[r9,fd$feCj]4]WN^8obV097K!$@\E/`clLi8)I<maQaih3QM*Blh8`fSYHG-V$I$Hn%*^`h4U]V+`6/[A%u%b -%k$7[n@cT'F:6WEl[JEA\on//`7h1RHc3sCH8pqcIS.25CL$s>uq1h$ar5)rH>re8GIbZj04"?:pJ)])F*4`P.>W]<%AFAiioYB!a -%lbacKgblQ.\Gn%G0kJhU?gYaK*a:e)IV@*+oj4rmi\.fl`Ei5`IP\H;7<P3mC;Y%,NrE3fn\KpmbD%n\:Sm],ZaQBOLiN#3fA1M[ -%Q]9)U_Sb8/]g(1qk#Zi]K58Lccg+Y6&)[%P^#@.Yru*Q&J*k17AReoA7Et0CNCPPWH0WC&h",T)?Tbo:adC9T3)JQ\,8P4tn_,YM -%)t.)n\SqGZ+\dk@3YdS&lT8b>pD8=iEH_*1W<8WU:?YTR81a"O[="mO?g^!ur>5::#C!>B5.G2"Zp*rF9H>9b2'9MBlhBR[4R(U@ -%mbPBtik*I-:@6NC<1Y/M[i4o;E93*%0&1i;\(qQQ_FJcd=>H^kdkVHO3PSap`PC0-^--N1lKt58\t&YAD?N&hh&ASN1TGdkg7o50 -%L!$e@3r=hP#C\dZou?C2p[18eh_<,sE;0'cWu'*RpjVt7cf^>Sf=FSZ]T?gSl](J;qG1>$B'\<k5Fa]YqX"#N=)Qg)Hgee'S<Rs: -%aa%jocHY9!592hupR=lmQHpH']61O@q2SE&<2OC(@?]h+rF5H2Y;U7r2V:mD4"jjKR!`2LE:3(l+2?_-c),V6Qd)!\G"Bq[<Sr5; -%Y``)F/mGY^f=lllNYjp.b1pR/ens3LH-=d@gCg]l>ISG*\:3!!3KqGk)pk^0HDOMXkGRU.hrg7Q<OQ.d.d<?a#7Vb4B'd%t.B[Z# -%a,CopYZo:SQ-,s=r<5MM$5H8c;ndX5MQ*`c(!;jn?./[I#UK5$]c`oRFPEZ(9a\/1jWkNu85k)D<DpljWp&.Ljo#6lZMsUumT'<3 -%DrZ(\+@K;9fdIW+Nh,D]9l_Z4Z;Zt]gIR"#8ks0NZ@2V9D4;muQZ&ALXCGnRqe[lLUP)]IbUg[C5FhQSa`3cLOQ)MK3JEm$%bX'? -%Ls*5TUrS%rG>]dhH5mZCDAR:5,S5O2Gi21+Q33=[j;j#s*%CHNH"2K)ChC7t/<P2Z_La0^!u"c:FW/"fV#c&\CGu8EO/oNZ,EhcK -%o4AT\nsD/U[>5R8!NHPOJ43LtCaK;34:qTpKE@%>)ZFb/iD"?KJ-%r.$RlZa?](TU7D?ti)F!4B&Af7Ep-[+Ei)K1SM:+<siJV![ -%KH$jlY2M.p(_]`!"TYD)ch/#'K]lLITh^k'XB0jAM#]XoTZcX])TCJ>9)tsC3LZZ:+-N8B(:k"#Af3VY/;^DZ+5,sH2.2X$]H*\Q -%#d\ZAEB[P+AD6[DJ\s"43S63b#p]VM#*DBJmii2ek_IqPJO%L+)B>=?=Ga9#!F]Dp>"_t"JUr?-*eHd-e4F:Im%?StUt-So=AUpI -%6scC:IXoS]1RTpc(R?Bj;UZ*6QO1CRZe\/&'"s3?)GGp^H(jXd&NBjDNMB&L\fr]QM49T?:e]He16p:j.TZ$i.JF*^MaK$e\fJF7 -%T`gDD&m$M<d=@Hk0`$<n68qji&of%uUZdHR;iu/L]ZU<VP&)QuE^BfeM/CmGI(#.jn:90.&QLl$^*G`\bOh1E72XsUOpk4VYX7%_ -%i@Tos&"ram*+l&]((L1?=O)=1l\*;PMb0=R`E<8:5T\<:"/Vb;XLg[@-B>"bGU&&-a&*%LE]?DdH';![=t$]i9H2WA5kF'Zj0nHd -%"+:SSC_H?$Ja>r^%TqoD#7<9)M+hLQ4S3?]UI5%!_T8[og?6jOQg'IY5Sc[7?*b1k(f2#X771Dg7]Sr<ZLO:_$os`'l*6--3%7qf -%hdT%3Y\>9.Z$hp$Z&-jI33c.T-P)YJf4?uF,'W#[M(B@VC<]\T(@l=C&k)$neHKXK&pd1t4<nHdi(#&T&L\DnW<b"U63]?H4#gRE -%-eKcl;37bKZRMh)"'64#D^[L\TZp!4/mqP?rh<F-?sF?L0.p6/f-(J@0R&PS`tokgH6X:qkGZJ8CA!Ft$^m,/DQf^WR[tQZ+8QmH -%;Y\HN`?au88E=S@3]%t!(3VX63jLn\f`@*O<`$8B();K!F:W`-XV%Hp4miZ8RUq?P$h1Q,UpFGhWr//:?!/'X3"+U\gEi^<E\\sZ -%6,*[q:14Um4$4jgd=M;<0RNsJ!eQK`2'(BiphEG[IgVuFN<2Ct%dIe_9j$%i[f?t3dU36M2kn;K?/coP1>\OK([f&*FRmJJ,K534 -%W%f0U@p$Ziet@Pq(%CmX4m*E$_iOEmrV)G%3E@i[qub=-r9J8CpPEEOl_CW'%]+OOYt6Cg[)^u`Q`+-N0qYDsZ1VT2Lt<V+\B^l< -%MI(GG:@FT#2Cn6shSbIFf6m4-OfRWS"V^2dqR4IF[+DC9N?@JC=G&?gRm,[B`HmR0nsK+)BQ1-h_+G6MCA#k)'oW%6@m!Vj;_p6' -%oV98?UR:U%/ZZm#00Op_iK"S8EKQ"#dpfS6O6FF+7F'^^2J\u)@W1BD*lQ\%&_M3Ek2:u8b!'oXr@Lo\ZWR\*I_J`Bceth]HI7`e -%\p=Sa\/!2#oT6S1X([=>/`!6^HJdUpgobXgO_$sRLX;u?rMBuH$sEB9SLWgmJ6f4eqT.+&Q7a+KYTgc#f2ek\de(Or_k=/-/,-.6 -%_1*8<dkq`C7otC^IFO@*Ds=M74626#V2h*FQKu5X_dt/C1\oDRqqq'EDpRXu4>D-dXsP6<d#e9D]';n*m\)i0VmkEf9/1W*BK'G4 -%%(UPNn)WV[h`(Hf]gIe?-XnZ>c"kXT[b>sf2tokXn@+kBg8,XGc0'L5MLhgnQX%\X4k`-uXnIhW.>$S8k,k'-M#SNB1cP1(i:+3& -%+,iiI&_3MeDJ:Kt]CX>F\S&p;^NH&*$c.#V,Ik\5eZ1'!TYIN[^RBN@F+nA10Q$d:2Xnaoj'r?u0AcV@48sTfM;4V>3m'*YlOU/9 -%J,HuFg_8eII(ae\,Gr*>$`\CRs%mjcnVc:HJ\PM#r@KuPFBu6=1O_pl\i[H(53;Y*\a/t&4l,&"f>?S65=%8Ve"tr=T>k;$o<.95 -%gX-'%XL@b1DXJQn8"jn?r;l&BZ6()H\uI(U]Cs6k6*^:5/+u0J]se_dV;@1+0lSQ_]_;j/fHK/8k2r6R"+O?XH6G6AaqAgIRir4, -%00!56m^mXa,lH'Z9CU86?OiX>droul&4h8`I+VNaFo;e5\Ft3UTQ91d6jM#g[R&oW+*)GkCrXUL;m3\n:oG(gn3P*8F*;.#n(L.= -%[Cn_r0nZ'IDBZBae[1<&EL!Vb+NOkeF)t,NMm_?]&F%)"A$Pa^n)rj"_QU#sXb4i'`qq@HiUec(<:T"H]*2,]Eb;RYmt80](RG2. -%`m5Qj.8s=@/fas$hZ"/D(IF[AReBKmb_b8iLV[9hLQ.D0m<0HPJEco;-9ABGlPHV7luMO-mEhcgmPTDd4as-Fi"8\8HCoO.iIT`j -%[u7ZjqKD;gAMD`d*^<H&mnH"`f,tjp^*D#SH$2K==GO#&EfZ95]39YCIfP*hhs!(H6G6L?"m6L>\@3^HIEgAM]tLU^E*';1$YHg/ -%=4A-IIseA#k,(3HhgOeM?ihdln>Gkb6UR_Hpgg[X7fA0bqS+':\ef;^@DuRPr``U3&VfZKrY+Ko%4BID-o#f9a%m%'Cp*q[gURi) -%R=".S+(sW4mJcdf38b`ORbU4J]^D^Q5s=tY`],#u];=`J^:ocIfXcIDD],3\RSFc">FnA-3kV%Hn\^GjqH)=K%M#.=HYbp[#A1-! -%1P[FsI\hK\lGg%e"MJP<X="ePhM/W6CVKsqY-)ORCV9.p6)pipSHf9rFSC3&j+Wo+BirQf52fkhSBB*i](;,fa,V\V&MO[kB,?Q8 -%qZ_V3Vq+bhkBt_oJ#g6mH=tO*#=70g:f#R]*\;Te<tMT3&=qF^NpRala2f?%qp7<ul5_r0kZ8GC-M4=1p8scIpL&d`^$r")&fOH3 -%P8+f,F@%Y&c+/8aC?2#]GB]?#C/8%i[qT[@jhrMZY9.>=N0TpAlc@Xg5<e@`ghTR5!]oE#h0\te^YdqM6:(p)s6/4rg>,alE?p$0 -%m-cB!$pL8t-P#d7-RL*=C`ZCEi<Q0hoDaiP?29.]Hm_^KaQI3smc,t(nTd<l3B915n0m%\cWAou$CBsYfm3CpWSB<$WL#GEE@HAJ -%gtU'h=+d?+P@5Na\O@Ks=n746nca0L\OH1kpLYGe#6<r4^58PgQp,TcPt*uVpV71p_*L$E^#BV([lXh,e;_FQ%Hm)loFP]SSaSbD -%(JD9<oNqH4Eg.AG3EPrKX./lLE)l;=B\VL08PktiQ]LT>4YA`O"0]l7qi"jqH2%:?#7f1)i5#?JS!K*$g&,9J]ZQXJHhHeO=7;_d -%1D;!:r\L_WEaHdHYA5Ek^8,jfo+A`OZQohs"D>#u5keO7MY(0D-Kr1`g5:nM6pQ?'B1Wf%:_OXtKd%=Pm-_-b%>7SMceAIt@9[j@ -%g"GO:PqMU@pu5Xmmjs9"kTl(`(X\V?*ul(j/[(A5.ZH5l7:,I\Y\XDtI+$3nLd8$nK_LKKqA:?C`TP%KaZ_t/1Qn%*d-QZQ0aM)& -%lu>Hsp,'mA`CCnGF<^aGk+`-?A!+Nf:=st6CYJki-I#S/.9jJZH'JdM8;<REmje+DHkE\q0fDWnN@],-Yfm8#ISqs_Tbooe=[XR] -%EG\MIj]mu(5uh'R,lnH-PP&c]R*,`F-s\ZbJ^Y_,^k9W_=oQWT^!,EkTVM=IaNbU3PA:P:"$fC*K/5asIO^^TDCJ,`4Ea(!H3*Y* -%I$^Z5K5P(q%!:p1%S=EUZ,hpfJjtVJ*`HfB!#[3:@SfD^!kP7,)?GNpV6HuK7sV94c[a$m%/msOX+2,Jk^l3$-a?hqB]-k?)`iW\ -%mR$-01IU)bjnMX`h.5l-`aAiY7#.a:_'LK*##Nj1`d6FgKg6'<JKhOS1O.j)<N>Mr^_&j"_%=k;8!T_>1dL]PUE0Pi?R2!AOt*+7 -%Q,_.>#0Maq\uXWO=bn#Ig1:^Tc^$9c%B7>I."7;?'\9i?>!82?Z"mB.3`+?s]\"Xo+;q\l_qI_aZ&8bsT:X,!JBXEu0mj2q!VAL% -%NAsQOmJm7+0t79Jp?[A4L8T^h`AJ^4Z:b]h\4-8*SjBrL<%0^aJ0@O35'XO&0E[mP_9:*WGk`nU)Y@/EJq*tTY6EY(\k"oV$6p$t -%cuTie(<\QIc_?,F/2!\X!$?dWOD-9&iYj-o:5Nm2SYh]I)(8?R:F8c*kRCV,T*=;(ODcunG$tr*#:+#Z!Am]M_[<W4g^tmfU'T)t -%)k17sk_A7$%%no8gjP*p.ZNC8.%Q7KHBp2A+."a:6kS>Xd2Tr(!0kV9omaKQL8o$f!#m406&M%V5id2bjOC#8WOIGS%!<_\jBRbR -%a;CHJ3l6O__@A'%37P!%P)gf"6XjC^ebVmCemTSB!!P?@.r^b9)^&$P6\0eZ7Mc8aXpH/m,*+^^Ee0$d)J?k716g6$/R0%tL"Sb6 -%#_O'JdD,7:^'\Q+=KJggnq)cLaYYI"8k:!K:K9su^`^uWd?jSokZ1M\JoLof@dtZ-U9(^SmHcq4!MJ.]EV%;0NRFI<2kLS#1kf'J -%e7Do@a0qcH+?S\+X&pS(Uate40Pj2K3U!o_Jl%!E]sN?h#C4IAmV-FH5hE(oN8ZdupoFQ/7kub-PfJGqe9pKaP,k]a]O7#O/7&F2 -%cfQ_(A\eSgc1e'J%,I3AL0#^a0LhNZnc^]Pi",ql-WIbh=paXTe]\5,_))IN@#lYs+S6M>Y8iOJ-US/Q`IUG)YR8+[Tj/2T(j9DR -%S-,h6Z?/`^H(V>fW#\Es3eV\[+XMhd"9bELd"]?#'(?\_R\Bms0np;:$hXRO/O=GN*K#^9dJ?Il]'aUA4LIJ!E=%(!;Y+W=#2N>V -%/h;VJ"j<eoM'aZ$&m3Oi!@WW+W.A@85]Ch!a+A3M&3uU[23E^f$1D;TiMu.!);)*TpqqRCEM@>4C4)2p@6:h/aB1>s%M0a1C^P_U -%.S2)kAk*N=,9(+#'sT$9.UlPX+PCmB6B$4GD:u(*8jW`\i/6_>PkJ'1;Gn0M5jOKL;B;Ad^Tgs]dGkkd4oqJ&'J'e'VK6lA\q5kr -%PR.,oc>m"#!2n37(?IY,/HKZqYJRsYAA$"%"nX7)/c_e1#4GMXTGdABlGkS[n6?#eB!0,8Ub%7VW3f[g)i'q_,0Gbk>[ilgDU;0] -%1+Y*[1ha)0.#l28.]a8oan'dS+XRX$cm.,P'u5d)/V0h\,@OQX^p?aXON*Gf2O?[Z7mUHjd".2DdNf829#tSJns)?Q,g50JK#.XD -%Kg]Z0=M9rX(Y0pIaXZ[H4#GD+AU;uUM2C7B-/_T2$Ia)T*RRR"&$Tp(l?M7t%!o9.$Hb,ng.F:6n6E^(!YAb;-7%B4#D-6Q&iO=k -%6lR7RW8$LF&SS02W_K%\@"jWD3Yno)gk'(56N)Lq+e!$P-O[6.GSgPc`RZodaiU-id9)D>7N=&[P(?%J#\jVS:$NOLK0&-QCmSig -%K1$*4HS+*Y$i$6CG*YY6@ER+C'ibWpn]7GUnOjOc(#@@ChrEp6("aYr9:aF1;J^O/MkOY-Xscj5FP.D]N`]KS$#ICDL%D[F`3+`Q -%iG0jV*Mg6=Q'oWdkib"?D+uV>[NgF]%[AAL#,M4/`C!r=^nQc'bd!IU=<$./"i!+0oE#Q"/lA=f#g:PPY@T3\,H(T+aKQ(a-U?=7 -%js#%G-hBd\OO#I/9t"V!-fXsT$tToWYooOa$js#(&P5Kup.UekVD.$0[1Le73f@C*iR/_l7KNiX7T2[[jXZm6RMnjiD6$p%00h6T -%!u)Va0d24XD-Ab@Ymnf^!*_.cWZ?p&O@7b<EGJ)4L!ahs?Gf_dX9PeBp`_!q%&Y6'"bU>?55_Vd9UbMZdm9.Vo0mUG)TDjS"iWAl -%Fp5%K#nYdsE!O3]<B@@81?kAQ:b>^VKk*XX6R!H[VOU9ZI$C`le"N4&!/6l%LtG$<j-tZhO/7+Z=1Vedep%Ni)0c5:%XJ=0Z\#nF -%RpV7*d^lZfU,sT(F%GH2$'8-Y8<2@;"4Aqr!L+3;"?3)p[#?/%[]s7nTtu(0e7b_=RH;S##`68KF,S`jK6XckBfn;%3oU8'BAINP -%Fq\OD->GT0.;1h@#,(SQ.>pYOpg0Gf&R/!O;5]j=nAn4p$nRh=@%<?b$fFFEoO)^6m1&>Pqq/3jgnS=)+B^'TH^Hr5#OSM-\t\X$ -%%3sM3O5S\j!0+r"_,TFM3FI2V$b&77]kh81au,fD_.j%ZXm2!S#-3I?HMk1%[EaPlJlpT4DkZ[mO[_2'<`_T'+m+=ogeeEK:]M(s -%%2r(WF>?B[P6D5Lo;#->M67iTZDe)$AWs(+CX@WK)J?kK4t-DFgBF<le-PrK76Vnf%MkqfMQPN;I/^2/6:c4NXoss3F#X7c$\Gl@ -%>m.:'cOrbh<^p;JN)'I\+SY6li8er@^qs<eRKmY4p)I.'OTm_C`>^uu#QRIM@9D/6U]E$)Cc=T2el-dHf=SD*2@90)?&/u>4dV8s -%BekVRp$F2N?CW!Kb6`r4ZouAlba\F$,((/GKm`!<5a1T7O"0($3kumbSXuTQ3mF)?,?dY#i1sb`k>P-#R97$M,QoJX=,\f?)C!%) -%[lEA<>$H'5"F]bpMea*?/llF8aun-MPGtCBoWf9&:Y;uFK2jH[CQ&-"a%^"U5qBNo!:Qt.CeFa8KEtC!6CJP27<)T.!,c!H[NW&) -%Hp+$J=u9RHH*i@fkZ5BgNo%Q"f(iMn$;0=l*LRl)]M=Y%+AL-@+@(XH#WONhfIHuo)3^,,H#JJp,&A"`/V'Ocp/HE[0H)r`%"_OD -%6mm4ce!/.i9/@o.E6E!NDBt[-iJ^H2ZX>oE"s4Q":#G)$3W0<=P!:$L3Q8NoP_k4J4/Q\uo8s.:B_)O)V"o.992R4oianTlAf+T[ -%$U>o>mh-cmi@(G?m=f>d&_T=gnnQ<M-MUos3i#&<T?BT+7BS$XeV1-5cZr\V0a,s[BUiRsNJeMd4KiJc=S%fI^`gO=9%6gr$8)cs -%bcmBjS3bRS%Z)O?5Fa::IOO#ILRA>P#dZPT]4q]lbZK6fkW@c,KJ5LEWB_Y%+qS8ela-B`Ggus^%kYbf.ij<HV3ShQhj(u6Qd'=q -%JZ#L`*Kf+\4\:lj_Bb1T7Qr"t%.-8%3(7n@/e=j[(jlm:otV1?)^&7NFg0^K3!?(C*@L(G#2C[pcer:>VRN4"UPD*iTL0*=]n0GN -%brdt+9S3di%AF9';!e!T`VMe>XHJX5rPsgsnKe):@]h-Y,Zp-OhBl708rC7>7s]ddqoEFc44l4c"%93fS1BH9ro[NN:Zs;-qY+>` -%6MB+1CE2G]4^I!f'nQDYg63?6,q#OVe)TOeZLj>RL[(/I4Ln:d;rsRjmq[ajpsn8Yr=6[2NtI]n%6jSnOCPQL-)el`qd\iI7=.!" -%$'`T2(5i2=rOG%58Wp5@6tMFN$T_GPY.Ya<!j9'Mho]1!0E1h>$P?OO^V(Ap4FP`';(*ga=!Lkb-e7nFX04uW]EfpW2>V:2r%:#5 -%%_VUn3#emB=,S!E'#.T_JDi'qD-kp[(452?R%6q1o_YRLh:!L-:o$_Z\,sF7%^>:pCVF#B'oTb+Z.aP]nL2_u*#0p=Ln?Wl[]C7X -%jfKkH!DP[epY"@i@^/6oZ9'=F%DCiWEBLb7]G._ap40(o7]^FPTp`/fo@4X!S6sl1(2G_+GK'>NSFTGIT78X(`a[JQ9H>0#Q)luh -%g#B7M2ZT<;i`G/qc(-Z#6<kQ8X/<p+ZG#B)RFE:e@!W&0(6c=%T>(8Zj/7^unG84C[k6tbpYo<&L@sRPGi#fZO/k3Rna*Et@Xfst -%1'n+6:YZ\9.::pn]:lh9:S8M-Wd2;A7.W>>H9fBi$R[d_@YK3r%^-_S%Vm7bd^*`c(?aFZ0(KoSQaJlm0l"G(6S6&;H$[eEXD&uR -%Nu+s%^J'8_7hlU0qR4cQn$Hkp!Ih:_h1mkEB(@GD,,aVRd=Ad79#<ts3@h.NXT#-\3KMq,5@B`L>ID%ca$3eRra]u4I^nn%_&0.4 -%Hq(lDEtp6+X?_kWf!o/QYuiXhUrY^qTl<ZU*P5]kd,;/io60Jf'*W^IATWTVG7Hg6E`iZ?WBTI.)*q]3/LON_oe.9(rdZ6"fSF\I -%[g\;Im'YioPr#IF7l.+a'VWdG<<Ha->%D%62>V"(1'"eE4\<%B3U!(pS^^kgoZ!^jo2kCqR$2lD>B[AKWi!NO)t_D&9p93bm"Ebf -%/O&""*J0#8&:",ioN9>U3PXh$$b<hBY22R[S*qP@7Bos_[QOh3]QEV^WUEka?r,q=dq?E:Ql__hkhj"!L1e5]m(#hk7[j;Jr.sjh -%o0ll3YSmPaf67jP\F!ALEj$Nf]C73^'jo_'TI5J]Parls'jk)a7Qs$7>cd#%%2UbtVt%Uo*K)dZG9)e<Tch;,<P<'bN]n=mEarUX -%Es/b$<Ta3I*Fd(QcAer.`MEmNkHi@$e'/P%Ko+F4LWra#\nJRDe0T!]^NNN%SYmf"ToVsDc`b#;!qea`>XD\)YEgUTZsNE:r9jH[ -%^2+I`RK*`1\ZnNg:Vg\0S8^H@UgO.FPS-Y>RZ>6:,6`RGB2?iUVf1UX_EZ>K*.-Lg1%tV0(W23HS#0f7Ji2hY!KGn6$L`Ib@Vg(4 -%+O-JE?%XT8WYK<Y8R\lB*gdhbb'J2Fi@H#S%GX&Aq2opMm*!SP`JW/`>!/+Y6V;Uhi62I,C[jk.gbIrhaID4*2>>T*5nE4M>p7cf -%;#5AHc]69tjk:i3qYg*/.O"(<2^oTX6O2-I1H@0C$3lRA(c\[Ff3T]:3hLU;\[OK(MKS`.@_Gn;:?o^J=2c[U241ZFX"A[Y5<Sl% -%o!Z(J[OcYfeo<dF_N0\6b9PSInZJX"*_B^ckOR^V5AqHUc6%J-DgWm7.sC>Ar('5'E1L@`3*'H2IJ(;qEHtNT[-lDjj47Oa6k7%U -%G&E^MD"oa_HZ/Xl*q/b$@f<gpRl3L"qtK=DYY4DD.nQ:mp)Nk%E@a$H@?&0m5TnCGU\OT_!RXT0I=Cb`:Q$.3Aj8'9-MLKd=^mT@ -%i87$O7$mlgX+R<GD>j+Z,P0!iI;o%]&,4Ot3&it1/iQo>7C\sCL>r*n:S+CFDK"eOrL>WacK+0aK^7W,=AqQsK#.8ApkcUXN"2G, -%eU$<p[[attqAF+356e6,f.:9"9[/kB*\r'5]$=*0<QrSm/\DG^:HeQJ`9Y6jO-VDf&fNp<^AEB!pH5s5pA<1i7XE4GT1?kIH1QP? -%BY)FS`9>5=>urrXMaW5BhO'pl+Rsbs@WA_FIk*Htn'>[?F'fH=B]92Rhi.J$p;C=9erH^DMn@DM++?m5nP^sL--9,`cT^o%oX#Fc -%F\Bq&\E\N`4TA+S&'f#4QVtH%c&s1>q*fK[+'LZc[>M!Ap>c+<*`\R42pNH"\,D6,WFFfMWqjIIhk%K,-Z:l!];PCP[:![/Nf>,M -%!E-4;hmmO3n(PBlhnK&:I<XoMKc>7(5Bq/IcF#I?((SEeoT87t.bhU'G1UVPFmn1^c`iI3DuO@h\)2"-[q'_)Yu(8<[qY`bg"BLK -%1E/N:U#@*RqQKCeK^bq)T3A2CIh[..7d#dt=UGkCd@s50AgQ1gCYQ4"PKkc&Q_Lr)WgMs$27p87Q;k4]"^lnRLSI./X,(\_%RsiW -%s3kE3MFW[^ET3bjdPAoDPKcjMQY6p^8)UYdmL!h70Lu>K6ru8)Q>E09YMt4JG"+t*7">B)*DcaAKS+OC!BWXHAf-OAqTq6Oa:o=7 -%]So!MSu,b+_5g7ji-.)uj%'J%=^r6hABO[)QOt_#b\-'A]"ssZEJupkjT$ninj%f9<+d&!6%DaN\%.sH!FLjsak'-qQW_6L3&BW1 -%\-CtT&=9;Bp&k[gj>$c"_-KN1$^"_R-M@J-U,0C1o-3gJ*1Z/9MWtZO+M,q<ft,P^ED^"#lL<Ai(KCjC5WQh$HOXst/eL\O+m#Ij -%EEV9QA#`ULjbNAOm$\%S3eX>?9.V/R]7=\B2oRpp\\=W]#eH[+3,29;].Up;!H$%8#S>-K_&a.T71=X-0*#f;["3HL`F\6;h2L?i -%_@H`f-3M?+2NXY*#*Ks_g'`a<*Q2,mF3ksQ-dZXD9$eW3N5<7YN_E[8kOMbRZ]ZmNOLT0./A@'MLDW[Yo)oabE'>Ur/R\(E)-(fJ -%6NMfP1'autHD;Y:+N,;98dUL#4jKci*J,6o<AjqI!B+>>FIN,=[Lm!/%#La`+V7C8#oO*ZJ4rK/EpX-]gQfQE>;0<4He"MB;DAYB -%J?'6?0*FHoFOj;_X5LAG!(!.Udr_M*_4TL<'"=eQiNE[f\3u+)$FAd]N<D1JMsG]+?oA/8*)$rJPe>M?aL>j5.QFM>KTUVQ5QR]j -%#g+!+HQ+]2!"NV6"NE%)>i.%#d8b.65SlKp,%XF.PdEedMB-diD?U(%H3un^I7&T3RBed*3+9dZI4kF#=VOi"SOR%VRc5t(-iadI -%0_WhEfL,AR]?r#iNOl$c/+.1<F1M^3`'IQ<:e4CtJ;*<\HCfCK+X`*PFB"bB`!G\GA8G)0*BYQ&6s,(<n%(+pSYiQ29U3j^B>E=7 -%Fgl":#TTd[P9:i[rPF(Im[T;pq#JuW-M4_PX$P(t$H<fU)dume'c79c\M!VX"[^,r7AbJCl,OrB:e(qO@k!qTVh03q8fi."<SD+6 -%EWkqJNr&6>Q6.3IaRD;BN(Lt,(r+Y-'W_C5?I[j5(%.M'+p0[8LnT_"GYJO'+F(lZbU>(LO\q70L`Z'G-VhV5&<>(8_%dO08)["A -%6'9h5W977a_]dAJ`9B"W4.u!e_T!DYY00,1M9d\?/JN`1&6t5JcVD"%Ko(q1%B>s24,>^/7WF1c[OjoZ%6ukmjd7Y,S:P?8l5HtP -%#hI`#I#a;T_1B-84HLkP,V1JH2cUDA/>eB*%<4A1$3UBc,L]CX_OT89P3=8?mfngJ0`Hu5Qc1j4N)<1Oc!&P%PQ@F*Khjtr(Pq5t -%e/OX+:jY_6:Y8U>!t`,V)htupp^6JL>7lJB*/[^I0HOFb[5_V8!luWn:Eu'\fW5f.[c7[1$"@Qba<*P,5u7X1Wj<-8e-$[e*da"T -%'A&CT1YW[[qljdbn<`s=!?&m#=hIX*F`VMq$o%N[%OAKaBV6$ZLB=bbd5M%h<eZ>8G;nZ!E`e^Eqk5nbm*'5]AIsenf@T&<Xf[Q- -%a>sQG,8Au!TS]D7(T;6(@3?nSTX$=q;?=Xra"ZE^*XcI43Q0Xf\.B^S.eq-D!9\S7)$4e;mb:a+rIF@5qM$+oWC,TPE&j.!_35L@ -%_*Qq.ab4&1.Y1B;#!aXJL'^F&kUIc@=@WY+&"t't#F'"UV+6dW?g`U38-3Ng9f?"q]o=a41_q7/+5!CR:*QCP0RL5,g0dW"N#SL@ -%R8F!YmQSYtgR@I6_?_Jj$+MA"R_aiCLn$.$rW3C4d4%lrAlesV(WI:KhGXGP5L0O/aF=cW&3snW73/rD!P,0>3DLhT)q`<QNgnD4 -%dKXXZfuf'b:-n5(aWO\M0N:6mic6/XLr,uB5e-l;3L8C'J\f0f0An/3$K_ss.+f\DLSE]NK+X&]gY`g2f:T:Qj4;AWAg(F&<"X14 -%m=?F$NB'ph5:qnGK'8Xo%<.t0A?iPmk!sI:k(l#lGG=C\eJ9SJ7$md)<sp@!2safi/T'_dM\nC=,d*stBqUR0"sHC^q1u-Q"@[@l -%-:Akh*!%9-8<sDURq<pX%QF_B9#1W\LTPQXR?53*h%94T"RAIJ&%<E'"Loj22")ng,:&sY3mGb_]%"qO#*KOfSe2Yu`0:HAN);jL -%JDD@c2F1u-g'BkI%V=:U%2Lu,[kh-dT\5nJ<1:BTs2Uh/q5qYd6msKLk64KC('l7ULI+QWG9`=dT:l3JReU-sh>^-AU^>ZA*du3V -%Y!5(5cPuHW(B4;oYN6G.pq&X\qj6JUYJhY5o>WKH6(@h3rd)d>&_0\$)_IOLX8hi5034r>8G!o!pUi$=hss;k?GB8$V@d4cF)_rd -%mnmKKds9kYbI$`kX$m/up9OLAjOXH1_=Bf*N)uL8X'DR:g$_AVB$^9V,X45JIf"7PV*8D"eno0Bd:'XuV1B!LA^^uVIk"?i']<A. -%Iu]!*lU@l+8rEp&^/M3fT`D1dqN^D,@DeE^eGp`A92:;$/5iWGXg\t3_V](`UGZ#SnUBXJHL/U`UV@PI?bKk6Dsp_'/QefWG#g@/ -%?]c*Ka7Lo)Mq&e$XDofbXS-8%%c)I(^"DpfC+2?tdbVqRWKi]:XOcT24rIKJep6[g5SFh`)u7e2dMiAo/6X]4lG(K'RH%3W9Y]D5 -%fs\)N:]L"?/^nISbhD;VA11NX)cT;#pYIRBs/n=lme#Y`=i?cQhgP(>nWP>]Cms'9ZW1k#+eQUDHEB5YQ)N30&\#F-IJ2HF.B(;E -%*P1@fm2J8134*J_Uoo]7#6X0ML7B$[>889*'g&k-`l"h%\<"Zh9[4h_j5]S]rig"SBBqc$<?!Ig7I$[eV:S1Y>G\FHl-M_F)q7O\ -%q=FJ"99Da%YP50c*c!KM3`BE&-ib-LD:GKsG(CQ7D#n,BB>AjQS$?N#q^Ji7qY?Qd'k9Zo%e!$Iq=gQ7:.A:]pTP!`k1NI\5@/RB -%19NWTfofd?PB&'3lEc2[7K.1[*_ip2(OS6?[2:Zn!tE;n=WPWg3>D.ZLAWYGXdIl/h8Ck5cM:orU7&$(mgad7"oHhPq0k,e7JQ81 -%I9Qk4<&fjSSkBN"^2diFVj&7;HHk[5n<]=r]TX.ifl'(sX#BO4q,fFrLG:$H%18H\=XIY0l4kNW]]&6Bhn=cXm-U[/DA;\W"Sl%9 -%Z0[ATi%(rjB#3QJ_>dlB=H/&WnKFO,?ed"9kDZ7`5BLoZ0rS+i[q+G&=hVBM?fPbE>Q=MdlEOI7"mZu_(R8`3Kr0oce(:aj(&aA; -%PP/@u[2Xs//!!fHk-MV)k"Gn'7-QFAG&3Q<?>SQ^"(1%(Q#>0'?p-r*0A>pkO@\QUhK1>.pXnP/XD6pZeneYVU!KNG9?0Dr[TL': -%kfspL[[k%9B/mVu<?m57PoIAPmE?.;ptcX6pY7harI\\9%NSk7Wd:c.]FCo2<=G=BpnjZ9S2l$Y2ttJKT\08@X_Pp^;ec+)Q,BF8 -%<G-`@0)YV0:LChaqnslHcp/QEXrU_,B]>'_?FY7VjR(aXF'nQXhl1,AE0fnkeQ.70VN'CH"`+$l7-@_=NZJ.G=O8N\efWPNihLq< -%*G7:T);6Vc=tj^c_9\Nr]%Il9U<%ma859'^B;][<>TT+mF2?"5oj`XKhp&i[?r:!C`pt^eqMa0SiTrT0e+DE9LFKn0.F_klq587O -%D\&;Ip%1gAgXK>Qo$4*!UO_R8B`7Z'kHEW[i2>>?=#L\<I-J0hUH.DlhhbaOiQ$"\J!_(R3bh9jip`Pa-P"E*Lp5cHr`A!J+Yhr^ -%N6ogOPlRMgZjNJI6[o5>fi\[u9u>S[ab"A:,&j[@h!_BWIcA1tDs('^C9oW,n9+G_Idb6>";'h21P[mt_\)_4i$IuVc*t+=WNREB -%Ce3I;(bUu^0aWGQjl#u2NmOgZI*%c-7MD]Y?_+VK^*Vt7Q>(JO'kkBA=a;kZMqhQkVEMDMOmL'`:E'L*ZcauBqn\E6h9*cE@@$c< -%+.l9Q6<ttZ8iLEHqr9k+BC(X8`lI8YggX8l3;S_liQf_BPUouigA#Ya)nit<H<Au?P28ss%c1d[6VprFf*F(:rL32!c`.s(!0BGG -%:r<ONc]#@ceu#ASFWFi-aPEFLY?p'C0K'#&jLH_,<4d2b=s_A:IMaGVcH-g7&Y8V]E7^'OT,r\1hu3s>(b51rhMt[F:1$4"$@$"J -%ZI&aZ:#,o2RDUGHZQ$pq(d)[7Up`C)bKi9GYUjh`>s<8hLXYd4VjfmkhQp_B"GMHPqDg77S?%E/l_SF3T*H"@]PVb$)5oat]6kbH -%UXu%=e)JTJoN?qj'5$srVhK,0i4r6ZH18*0G]78;LKMFdhX&93a6aP@LEo6eC<\l&chb_nI=C(om8JSAhOAX1+74+7gl["h=,]d\ -%28W@7g<T<a*r>g%oD?:+34)22pIh=-+_]VMX7i*uG3AjWS5cfKpTFM*rR%RJZke)PI(AL2Dg1WdCNjabh1,4T[6&SN?i+ipR[IIP -%;RVFob%.mJSDC"l?er;9mkoLO\uj_rXIRtA<D%pN^92M$gNRJcpb>4&rj/g.6Bh@!Z>Dj&0i+4Z";mQNiPD>:Q=>`uPn^M-KRp;O -%:bPIt9n6i62(F_Fa5`@r:NI5*MJ)HnYic;e8_8jP#5VP?jjf,SA9T@J$kj0PZO#S0Cgq,m[LS;la3_fGntVeL6f;KZB:Wi!i#qS= -%)fT;Yn7"()"?;&c;kR=<?OZili0k7RPu#mPQ4["[KY1p*d]V*MiO]co&g2X\gpc2J#['Q#<e_&IOfJI11mD7Hnd-NK#?;SsCXTn8 -%A?IZGMt5jM22*KT08aZ%'D>McpC\5F_"aS_&Y+-('FSRkI$5*&)=W0`lbo"kZt-nF?"\$Z$QO+/-P_hK_=>.TR^\SZTNR"YXp!eq -%6$+ZI#Wq+;RfQd0^;O=Y+;[OD*`HKG'(b^FJ'^$+<6J0U7)7"43IIXJ/07\lF<Jj#@;t3Jl7RDj&#:!ReRNP@q?!)t"a*Wc-D(E_ -%@tEQPi^4'1,r?t<.\a5RJOru-h*"1c#6TfK9&L=i%udX#!C=2_\b3<81G/CZLdMrV0:>0;#]WT2MJuu31G^r#OH=TZ3&cB!RUgdj -%o^KX'6_8I?XG/\QQ9Rm5DrH3KiFj:)0&\e"<9,cT)"j<Ak`DJ!);q:>ZN85.=n.1T3hD>FC[&"m/s@Uf4(QqCj8occoNsA1ZEO%% -%:#b:NE!A,%!-OH$[Y+&#@4qG=RFu4\")t[U,V8N!8)-Ib9@1eQlS+l%2?QO(dg@)Z[a'+&iM<cDmh\5#/33(GA=*t$JK5n)f2^'` -%3]F9-S)!$j2A:V8R)2PZ\K]YNMS3&h5OL"IFj#Y5H397]4QVl'T%CgbNF8Bi`Fus%bbHP]Kb;UE9DGV6Ka#^'a5\maC5d^_"]'h9 -%?th:Pfd4F&A1drq"euXH/did/R\'R=+b8FjbCDP&p&tTX1ZB$=I^5T'cTi"L!M2D+I@fkLKSg8<<-`uqUTPd2#q#D+OOFm`r'HbT -%r`J<Z!\ZB,o98@'d3V&\`i`rYLs>8lE?i?!4<F,5d($?YT+gn%>''d*!BI+l;[-;O6!PX?b>EL25ZV!QSWH-:CE4a!_KLG?g?/,c -%NEron1uX4U78=iS%"UYDT]5BM$8k)&")]Mk:^'7G#5k1E?%BJKqiF0mP3b,>Q#86A;@-]$>mk&g!aos^hl[]qG(cmr&$nQX)4n7S -%8M(4dE6LXi==/*cJh'lLeBA(%2uk:9%r#IG1)VhSrbbGB3:'!(/lOmY+^?(YkCR4J$:7+i@U8+T#5"<K?>ST=LT*Nm*.VNRXm#7b -%p]Ai#=YPD\PakFB-;-*O!CI\K'*2Q%#g)*r:d<%ek;$"%#bQXu=_WKB+fKs+Li)KG;LXDsTf$CoJ;$Jl7a!$BbA?jRNZT\N2`Dm! -%/Vi!KktZj2lrHZ'LN!pV)?>C+5mc=VBmqj*W#dL,9M"D9&S]'R8dZ\++"GHbX4T??Po*98VAVZ*L[,q)oYCO$eQXC-HU%_$T$drh -%:n8K_NW^$:,I8T<!)`8k/5q)Y.?+9(5QY22AQp'fG^I7le%nG+aT:=6^`Jag,bQi7>H<8T6Th;gh1e5]'sK-SJF+$U%Ci((,cL_B -%+s8#cQ2$CC#]R`$n+mA&i"QIn;G'2>MRsH3J5=OA*si3,%J0U'5eui[QsD0pGBU^(a!(7MIJl%2/,R`Gs,aF6+o`NJEE?99!\Z_' -%^:^YRm!g\`Yl""$IN'm9/+1TAS\adp'\3&/iS@t(r>gB72ARe[3q_;9hEu0U@"lJoJ+f/*@kjac!ZbCNWY^[A?ID`.,\-o*GkMRp -%ZsU#&`,37mX`5'Z9b>qO;pUYOqJX^#AIs4N%mf"f!J0le>'=X'8;27,f+Zkh5:S3S_0:c'.17E:*aT-+n23TUBW_/S(=2jsl1Nrr -%0.rpOje_5[[>P.kFQ-.NYIkkPRn9Q5VSi81o@()@JfK4M?X1ZMrM3VXmPTW@^@Q6,#O2K%;!dWl(B3]m'3Sj.\4T!rfZ+?4UK"hj -%N1SV0==e&b.Mi+`kf)G8rRJ`AY;^@M#c4Y,^0WP^@kX&r/Z!>?Hf_o+Z.R62C0+G6bHI36NhA>i/SP;NRPRbMESkW\m%*(PZ*`t# -%'jsS%ch;7G=?<CWWf:dc(<H@fH`N)@/)BO/Ki:#fAOD/hK3N+Wjgt\JJ!@)\8;-?SB2>W62m?>t<B<-J[3i#+!2e\$/R+:']l8:9 -%qM<SeV_"7l$9k+Nco&M69oF'&K+HeMGN;-\j]CirJt-"E]620JY;p:9U8?=cVPA@5b.-"!&$8:ffMYH/2=/hf21*-qqr1Lkm\MSQ -%2dJGE".oBoS];2YoD=uOQ`QS1SbQkJ:Yp*McHQGYZ2&\T+#U?B6gF&MV]Nq\VAK#dWnk#Ngq)d,3>7KLV=M\r$\o9@<J_=B_,5C; -%$ZHM5(bomuYa4'+4+@]E-TV'So:nUdD!ZOlV_"In)#eK$baQZ_3fTF;>K%*\)obKm)*>9V/+sjGrpUd(n9t>0H$YG7J.:"Ap?Dh" -%4co3M3-N0HA`)\L+.)Zb25#0*)WG_]=@IlaV^KJnR3,0KZq9;'?[k]Ij+cU6Z7E0N%X)47qgRM^p=2K5%q2uYHXOk3<L]>^_Sj$, -%[suq`?8-MB#2RpS[s0Kbc-$B=p:pS_kC?amR.^:((JfNL8<C3X]+-I5dW]!.LcLoMlka<T@IX:]XbKiRD^)o\4+!@oAFTSVa&_i6 -%(2LQnhlbY^(4?^o*!QWIHqfSD'WkHgZ/Lp.l<)>aMn<':gN`#GV6)#I3_jZe*<./Vk<#MOH>'l:l41M?'NkX?I0S5kF6bT+*m]3B -%h6V)lD/jW,ZWN(HNFgBe4"%$nHgb22ZhN2fER`k@G#2#1M^(&!(Y=_=0WJ&kq2Bd[76O#)<X2X^FB';bdu@Y^VlW*'^$Ft"%3K^j -%R'/Ceig;YWCm[>%@fgYoh=KeBr,NUgN<leTT,k-'HgCU?8%[^)XQgflJ@&\XBUY?Blgg>R;'*9r'DFY]+#N0?eo>\?GHk?#+3P[O -%j7o&TnJT8SeN_j`0HYSqFmGqW+13a@9>#"fYl7%>^?!-'P?[0kWL3<?e4%s$D*M=<qbWF;S/\C#J+ZZ>T&.ABfsAEJZMW"jCT3^R -%mb^"9Do;L%D3E'a/P"9Mh$8A@If&QHMUV]@/Uf[+n\WC84#bCLf-Y)!PD[ei@m$YXn"Ffg0:P*Y]B'^9%SJZmn1[%dIt6k"*060> -%Gg'[tMAt'sZ`o6cn\<>$s3fk@W7@k_)DG%0&$-*>9^j$)$0V(1kuBJh3M2a<aK/0XWG,cN2TAAa@/t]GqpL,/rtfUGo`CuRfjl*N -%/ll`;Vj.$S.C>m!Mc@PlGplW<WEE(.E4Y(K9Gr.?k^:QqF;DgcaQ3WH[>LUs]j+GoR`(m"3rpiH6R]KZ0[i-#b[G'a$BY\\3Kf#/ -%\u\(<C^t^0-K/GOK2agQ6l(2?b4r*'O^:UV@?O�k:U\Ap)VZ.AP?i`j$hE]L`UTnSp!&l&qh03"$G11,tZV1Wb:2E(h-<LhjSZ -%/gD/o8G^3^A=CYmj\7mU<]]p`q?5]XFP]mu)G1e3[e3JeR;Z\P#)qM!`6hss2FkkVaC/0Tf,+5g#s<s;BA6ep"?`oc7+38U$'Rm\ -%,R\Q(pai+hEMA]]l5nQ1$DOoGdiOH/Pdcc+J3#r1JsCL&br<0<+eMK?\f"XSYi`pd@Kk#TU+>=]e;SulQ?_%6;[QF+?j@$N'V2-9 -%gEt&CT=h<Uk8>_R.o'X=K;Kk@cE*5nfqFiU_@q1Xl/6Lg-T6-r5g6])j:;e[Ch_*fJt^fWd:22?n:!Y.P:Si\a"Al"O]0K0I$U!. -%NE=K.n:b?P*57R<a<ZWkKBQ?eT@EMDnPm^P&DfB/*)T(YCD69id0U&8\iL4fJp5"@Q!>$D/ke"CjI>eDi/>HY#^<nT<6TAV'I$9: -%__,Xp;CP^d_tR;b6/$r2:(EfBM?''b;=T\/.bRCGnIpqcP@1)3L;P8[Nc%@PN<q6NN*D`!GRfW/&.DZ63il%*aL2FCKlCPm9L-go -%'=L+"O"J-oTTHJ$9"GLdfEI+dP.:f%#ZN?u&:G2Rhu`?R^J@rm>g_O8.;!\OVQ7=GLifF74QS<,*>2id/KdE.o1<]BP!o`Fk@BS9 -%<,0jK6#,fO4B/>E'Wi[>Pkru\Q*M&l[3Z(,&t;-UY(ucfRBB4H,U"<U_'\V+=+nVOlD-fm!cjU:Kg=8C;j[j.<#qIh6n&L?fYMG2 -%clXEY&82H[OffNOLg\C,aUc8#:_js2^S/QN:(ieCkRnlk<W"d0Zn^Jsp_q#HaG2b9aMqPfF*j:em)&X]#UrtXS7WWsN@'EjH#\D> -%I-RsHe%^,e"F]PK84=1m*4hoEZWL+7EqMc&1-J+p=H#\"lJ^B0.>/611chF@Z:-kc$u&RG"IfF<6BGm-*6(#6Jm*\CQ2kfa%7cE_ -%a"Z%!#SQgoWcSXs/dp#?nc6lFN*GD""oskqGROh=GgJ6lWphm;!eOSb7P]+*he!o@a#'#q..e*(Kh\X];J(\AU&rNB8-l"X:Ml3U -%Lt8&NK>POOifVhQ,I%fKY/[Ute/53OU\Tcf/ieI7+q8Wg/Q_EZ7!8]8/`G]pBgQ>#*7L)5#M(>n\As,.NohJA'hM6[cOl0jQeMVo -%'J!G"6%MP4H#?Jq<Yj"ud&gD<.87Yp_$eL??f4'9eH1t-cBii?@-Ci#V\(#V@=9e7p#BHREZDq.C;S0RENFLjQj#2ai>8d@P9smm -%LQ!)S;CcQT#!kKDW0Tk&:t'Y7@%q$PF]$la=@Q'.!/r7<6%U9?3V5Lg(pL`fOrLbr.iB[J2.M?OGRb(f)1nD)3.QXMOID>n_XMpi -%HE<SbNCUp&ct-?M3WplmL-a"[N16VZ#_5Jb?>B9_>U_B--Hm6%k$Y-o\/6t6'!db24<_0IJ2MVC#.PL`4A!NF1o69rS&O0/[Sf9^ -%M'jtfI5f7lKc42gh7+.;F-M@\MI8b<VjVQaYHqV1Ga;;?U\Kr6`t!Hi/$rcg,<SsSeu-&p5dHfDJilo1'.+<D3V'D<8><"TU*gk. -%bQ<F*X_CBV:j(2rVmFY(hPVObOg)4OEljIY"6ho<ckfBL7$p<KOKnkOE/h?pLo6r0"V&>7Yf!JT3hWclA#dod3_f8u>=/ZD$>6\K -%BumETPF3TtR>0/WF&WXrgC^:L!G%8f:bp"$*Ha;nYAbRuMCtc!*0[V23j-GYJSDps-4O]g?3lW;S]r%g,D-E(/)*d/F^e0,OefcT -%9uoTB_I9La`jLrY#!qpH&6JoVL2e\Sp0c4k.g_jH6kWq/n$>3UXb>AZ61:8.H6HBo7-eNCa?4jDmJ)Y3Zo+O9FU`r@ZJK\*c*.AL -%*tZN9F_"Y!:T>;@<*YU/W)R"/:"#9kV9)'%nekhO'gRkL9XJ38q*"mrZ'Wk/^+JDq/=eDYWEC:+Z1t3YEn+C.c:DIm(I93Mf%<HO -%fgniqX&3sTjV^u@N9Z)FKkE-2MAb]@C-!N)'U'4[8338S5e)@R1J8L'dh]PH"j9Ish6S+%!%<R,K$iQ9=dB@fA@+W/ljm0AKi/'Y -%J=)[bKuJ8JAGRd]1c)uW#=@T7-b>$KAe=;HLkNc)M(Z%eU2O<HS&EgUP8-j;(.4Q:39)\0*@AC:e55<0q[BZ\SKZ8NO9f%mfk),O -%&6M<04l]6p5n?9Q=X]to(sE`;S$3qFq52o0mKqX5_4T[74"D%[N]Q#hU=`%/`fl:iLCW"eBb)?Gq'6=L8hB?$^`$h]$C>K'U8dR9 -%)_D&6Rb5"jJAERWC64-@]&nO2jn#TRC@+n+S(9-PG,GY,i2$X9_"6n%+2S/&2Ts*4(<BXu8F=1o<.mcUODNprNtR(ZNU`R\dM[K> -%dL,!t'i%Po'fRkpO>Bd-Nc\+b3DpZZn0-M5*`b6878k4L2]dS!%t$>:=]cHSct+OcaGhDt/D=j^$__(r$tYd-*IJZ_4TP"5.PV5G -%RrHRm7FA!NgEo7._o(T#38Oe^D]NsZJuJ2EHjM)'4br"n&k.C3<a4]h-tCo^@>'^%-mU@707]uY8Xn`H[qfuBP6N=kjIf^^3Y[b= -%mU@$W95F$Z.e82UZEQa*p<ZeG((QR]]OcaSA,Tk&kZSRh=QTUJm`*UZ@-lt1-$4Gs+h(F(9!X3tN?'Gd4&J?1)@?T$+EjL+&%H#a -%%k`^;a5?:;Tn,s>T2$OiTd@\lDX`:anR4dqE$CGb(/E*q0(ts=W#Rgt%2dH[&6i(Da23BYI6N+aAVK4@J@7i[bi?'VOpe?osi -%,(j[3E!gU;b])1o\]i<TCEFp-)I)6B*!]\Dhr#LDPZ"rk_%3]g]]GI#'F0J\BO@6VX8n_kLO!CSaNb`"/1gK;l)lW.AU(5+M$R.C -%gB\%R$MB70-,PTY[[E:!UX>GNe1ST<@B]gdR'TW93_a0N-_;S@lq/-83]qRo:(@B`BJTi3)oms!^nF:q2Fit"1d$O(a3fg0W\'t4 -%ABJS/%5OBJTtk^"3?6!nGVb6_>S^Ir\u!Mg&M)1[G7n@FdT#'5Xo8kK@VHH0LTdE9atn_OgNCF[7(UGn$f<Y+^Ck8\a:;Z<.`OaL -%SAqY]O;:TZ5rrq1@K$j!A!l@@6RF*REaTeJLUX3r.LXhr7XJ-U#Za`bdk"iP3pL!gGbP^:hS.*1)m\Mq2k*.5W4;#SRNjD#.i1lF -%Rh)&H,8`,&b"2(CO3^de24YAJnfCQ$,h,L_-ug%/95A3REGQUk(&PEnbMldPq]Qkl^s_YlSS!,H!^E%dBo@-]ZeGZlQtNWZ'E'=. -%5:#fbi&2orFpPt8_lpFIU`nATliOFlW$Xo:aHG`pR48b"7LmXZ`SVIK>]O3V+`"I.YW+890Y)dXK+jCC4S04A\M3*hX")++iPGV8 -%C>sOHG(mY`N&[s]RS^^2O3eW:.7B!UfN`Sj[13R.D;)h/MKl.0)+W!W#*.,b$+-&+;74:A<EQ@\16clA(e[fXXLgO63[7]Nf=gEi -%'mhPX!Kn?H14RpneUb^5.8hBheIrk?'J[i%\r^SE*%*/T[)l0D)(LPP3Q>J0Nd1qKOa&om;0bO'8+bS_SB6_6],[Z$%&f[J\Ml35 -%gWYR>=2*"VT`oZ(MG_sQ1_0:Kl%#!U&KSGt?1pG82J&m1kb&njCMf8o_SC\A*ChJ1!1kPQk,98XI:RN>CC,c(L26;7RO?B3;o>%. -%fa7'TY0p;=]f>ckTIX9K<M*+pP\?7j#<Z(B/i;@.>_\+!VNt,1_[G(8R-cju$52U9_%1t0/eeRqbO[1*/^/g!'#Bdm]0]b?OH-p` -%@G=HsY6iH9*7.2Np>H5`@>&]GTdf^>=ob90bak?T+CV2AdJ$!!WCO,NbfC=S/([5[6j"*e%rlhk`'d+,&V3RLU$('g;P74-ai@aJ -%T95O.Vn6?G>$f-rnO1e*=P\D11N5J8Tom[(E\p>*gQ'XG0F(f<q/2m[L.!4%a(A7B+M?+m\1:%S0Pp_S2r2g^dO!:b<@Qqh:dX>D -%$Ls?+Tp7\(KcDoWkRR=(K>loPo0b<(@&9!CF!JC/?VZ6IQKd$D&j;cq^]BoI/a?1!2)r(8aB>K3U'_<NnE"Q2FnA4'VsH`*)oQ7H -%'KR`^(mCqJY_a>?`$+oo"kXuCEJL5<93)+DG+-PS-&TdclP]io8U-kX`a6snn"phEX*i[I!5$^f!ZCA\gUG@@gU'3nODZP0frf%q -%3!>m^rlXPQ[3hG+2s],)C0'LU/_`06e#m2?p)TWECXt4\^T%gc)aK3:\n/V5XptCM,HNl$:pmBbmFsHJ:npV&VEo,"nW[(I"@2gp -%+?;tA,RBN?[ap;6^-(A)6%bR:4mfPKinDU)@`"N_c%0gT5UY<`7N<E/'\)>oh$Ab+k-/nG6$11p@<a%)J9-c[Ogdq&RY9E<3JbJp -%<Hib2B:;Yf+IEDhi1bX.Y`8^6+HS#r8-Gdre)K'0;%2'R7?%0>]E+qPPp"cLq:#qf6oYb%^^Ql'&tI+d;DV=Hi,fjN$4>l\]Ih$` -%*!-[N@`!RXfQ#UCa$Z)j(bFbu1Vd#Qn[8`!8FU,_@VeuMRk/Sn)87Rf0EATiTads3K/"FuQ>%d<,+Q*gE&M,Hkd!FkU2tVoOFJm4 -%!Ue1rGu+2Q!%5Sm:(rS$QcCk:i$\8c1l2#;IYJ,"S,49bMeeeEQXK<+-5/\<$3p@u==")GrbZ\qJhu,40e&\'4D"X6)I-+(;Wh<L -%WW2Y06W`:Za4B$kaN'"*#AP+aDee&O:epH.crCKl-<lofYPr&,_XQP&8gXa4&?Z\\)<RqjXtkG]\-+]+9FpUB<G;mGS4`b`BIN/` -%S23"0qDMQk&ATr\>`":[d#iqC,soM")HA,j-nq"h)Nfj[5\@s!SuGr114UE'oHWYNi#qK=(a*eT=Wq.6Y/N%7PftM\Off!C10==Q -%.I)(;UHM.&5naSH=!cV^:Z]QRa,qT]Ba@Fh:S^g(9l1rhHN=FEk?bCX(mZ$"[]RY;RYV'^JL&,U?$95aOdiO\-+tY9C!rBU,##G! -%I)V?qD(jD5!%BAB(!^/S?-0QU%<ti,jS).ZXRKQe;MTIr%++ScT.bOU\HKVZS--6j8dmKU?Q43:?hoYrV.McIFPnQrFK#i[!?_fe -%2($!:).LZV2B?/mFn"b?=8R^H6rQLq0UZN4hZsr$9u?KFbQ25Fg$rbh*_mr%5oLDDTg&O4*ll)aI5)?X(j\ercVT8D#YA1GLp@.0 -%-/9`Z_/1,3]:Q"a)4_[.K8"]3V!5p#WrsE[E!DUEkm(=B1nH]Rfr)6H-<*Jm\f^W7e[f]8-2D:*0s]GY_3uLg:,jbTAZkXm6e&G9 -%=3f%JgsM2q@QG]8"#_^*EPT2")RAlX.iI,rRM2eUr%QT"P?g."!q.#Y9]QS/26UbWM&DU*gLnSA)^`B!"Xe5E1?8'pWD$L1?s5E- -%l(6lmJn1$SJi#S_8*gh/kWkk!/L-+NGC$:4fRcO^Z@;dTMpT-'!`nnR-;jkr[GJ:$!:15K`"89uO];FfT!mpSXs(J_4S"SMR*&-a -%<(g>q!]e\WeI-Nb/K&BABV*IQC%QFrZ![XoRQIF`A&a2pcLql3-^pRJ](@QE9H0:T#>nDA!Y>d,bt*MI8fR9nd$LMHBJ.;cM3&mY -%5YkIGG+98PaTX+!d@m+qYiP>J\L6[,A@aM#$b9X.#Q_Yn,qIB29S@_;R9kV]P5pot0uQu@/5`^KfGK9DBYnRSB>p,#d(r,kIY>Cn -%%\!Ju/Z8`+N$qB\o4lQO="7=Z97fQTU:Z;G#\q=+o,V@_/?/^*c-iEI0V"9L#+)d[!-%+R'h_77J5h@DeWO`=B;KPnd6bH;XcT\) -%c87:*J6+:lm7a"\&Oj)]'\ef@LX@K^QDRi0TA60j$^><HfotrN<%h=M=#?<U=eQ)9:;X?sbY%)8$+;1?4dR.]EVCqm24A;+d>;BF -%-MrP_`*og_S"^%K80q*/NSGJ%=!ZDY3ljSG(faYKWiOJf`CA+2Rj_8l:L8dr&1DNWl4==K5n.KhcsZSS01Mipj;!C.9+Q'[h5V@G -%Ii74C=oqZ]hTK;Vg8cq4a)L5BR.,E^n#FVRRMm0Ljm_m*Uqnn:jXq*TlM.q9aqk2-8Fb>$[apnq/$fpAVkF_!S'F(9fh!&8E)i'H -%B56aK,pQ<R&eTqRFul5I;[EkDOrGBg"1?)j3C#sSiB[/AS4Lsf$:5T?f-0Q:"pNFSDa:[\_m7R$[A@kukG)j,7%U"[=6;&0$gYbH -%@%nphC5%dqnb7X.PK+82*/"ktZt]P,)2-,'_PDmrqO0*O77n\ZE^8WG'R01ULbI-nc79G\fF$&h/OiV-WhGPHiK<%H*PTAMe-XJR -%)"p:VbcsLJ:M<+JRML&OI&ksb^m<#5lpD3J9B-'!gH+hIR]6mC"Ouu_V=Y2@6A*arl"EE.=W0?BA9UA*_LY6kbW;8K)Mjc8N,d8L -%4?AW0^cY!Q%#BkZPB8qWG/]2TPIJso&W"j"MKoJkL=C_p-AGG2S'>Y^L-f73mg*kR7h!/V<uDii""-TDM6j?gMng;<%9+oQeC5*K -%mO5rI.gTG.2<b8A?*9peN6Z!N$YP:G84O2`";sthRTcR7KB2:lQWPFR(1Ea(&0t3Qn-$cSP_I4`%er=0C&m:H9cPL;9*rma,T7&6 -%OHBq_)hRgQaqQ!e+QgfY(<K(/Op+*iBJX(Y]i6HY+XmO&&e,0V1'D<TE^N5t4OKINS4ZS_.2&TKcefKEiq3U97[1lUClRF/bWfla -%KNZ*bm<Ta1a'n'`.N'4_@1KGD7*,=\hD'`>"VZIF9S.e'>Ctcti4u]/40Rn'Z=&AbT(3l+nd*)<0i?o"b>Hk>*,d@+(9C]8i<hA' -%0oaTimE7V(dh/52OhlR)<Z"G;l@b`Sc[nlB(FC-4d)$(iA7Q80=b3Z9Gd\f!^hGXM`ba3nP-7O2%AGQaV`^uVkC)GH:r!<0UhC6/ -%,_n<("s$[o@mD;-ZLE![LpFBH,^SO\LI=iW\0pZe,n$&:rZ96Y@^Zup!BH6`0G_NkCnm(L31nfF3AC,?(mpmM"C32S/Y%.Q.9S@8 -%2OK*!,F'\f=GPsc.?OZud0e89U<<d19b-_Q.?^bdD>X^9Kc=]GI[J9kLn<j%fCgM*&fpOt=Di]C,3p(aCf@HGP_DEn+o$]1"589e -%:n7[n:_/qq?OFc&fU*6B$"FdF+..a,@0W=eY6&8`7k:FgM9C#8"FG.1iofdMQ$<&en&I/@<',-siJI9hC2#K&qFq;7iC&],&#u5W -%foSc&jC"M1Q607T':^RX]I.d(O;I[6ecG^K[ENO>Ys=_#D-Ai3T'63V$6H^m=paoK_<_tX!?:iR!@'$N@5:PB06lO[L+%D/o<EFl -%:'LP?iO/d]UPH51!i5NVVIklI]m)$ChHn,>R6h2m18Y.dL8N.o?n)M#"2u)'h5_.?&-5L]&V<7u9dH9lD&reT_,;Rq#RE2\%Qagh -%MJ(NBFG]<^^iW*Q$p>QiU*(p_pj=6LL"HB5hP$VNAgR[iW5OXmipYFYr"G#Cad#J`c,\p0:6'>U!e@Q#1!LP#6`3q?8ONpp$$V)= -%RQh4TZ['&GHVdPG%RKQt@(nb@2!@\^WQ7SN-#0,D8[SSj[keY!AH:I9#/S^132-U+0oV4^`F3#07,S-.N9gNE,Psr4!aQTr\Dga( -%]+KSKoRoW%,?ck^]3M^eRY!#Ac%)_XnQcVu:B2ak-?knb$ofjTp4e6_OH&+6a2an8Jh1m12iKA>P_T?7Cj*^ipj*_rJskEH)R1gV -%iR!+_+,()q\)EVj4,0RDWXep'acljm+d'q*$"a#F:jcI]$Z;nqD!]n?]h:B;TiF2\eAb19'LcNb!$"D8l;mtinsRfji,B78JhTa: -%e:RrN$?(Ql3hl'Eibf1J`#sFoJjVd7MBPe)^<\tf$U"Br*WK9>bO#'ZL]kDX>d50r.+BSenoRqM!HAf4*8&3G"Rf9!^]oRo9lh$! -%JOB86peK_U7.J.Tcs-k/LI0uU.`SNA6"c(BKb-[Jd&\4k:U:iAKa3l].km_MZ',Zj:T;fH&Bfr@'_/j\joXL,/e1D(TEuVOUY@M% -%'[I=SFcT'#/;'=i.+,7Q?dk]<VEo)59nLIhQO<%6+$,PpYiGsi"ULScL',GGL5B<'Qr;Wl)7E)1An!PO(H5;374TODO3@N*4J<KV -%Fc1B(Hkk!3Ip.X[2(TJL'da,#S#.W(p;@_bPOG1Qd:,Yni;a2dhOVcrC(T?UjXFdE@+7]L,]!KHn7;-DB],F.liCXrUC^,>A2#dh -%5<@_T7$]/4>mR&l^1dl3(E?Z.^bp6ph8.g_&1L_0/>\j=HlZnM6Mp:b'U_?o*28!9m>B<m/B/GTRg57Abcq07'eTk_+_F@P1_%kh -%;):.O]tbIm@$]%HJO9D\hc,$J9ju_lH;g1u"`^5heW':-YbIOVH2sM,er?I`+[86uE=5C-391AJ$QjqY1Y@QrDGS^dK%_&umg+g\ -%`-=<ukQ/5GRQC4\*2TF)/tpB,M4*uAE/fLnf0)!MGlBIdVM,Y*L[$&$C4bRR'$!!L0I`_]5W**lI'9M(TKZ'!kVO\Lra&OjGp=su -%>rC[cPaPVm+M^nh>YEk-\Vs,c+p'VfLu:X@eRfA[#U5d]1hC3XalKuC_^=B$(4NPaR%8&"LL'2+Q76JB0ZkBt;#qIdgD:&GMV'6E -%FBm`]\>@/Qb$tZIk%q]\EbWp`;9J$_AZIg+KM9`,M&$([?gpTZ)GQ.p?ULCl=MK6W*A`-/9<O/q9!4P?`9A\hWWec4MWHW&12\o$ -%`Ca_bQo.Q2KPFp`R:PkV9HmrSaD_+]%A,(`.VoJ\\<rig%e,:%_Vrli=<CQp_l0R0a5J;`Ps$RkVL>T\nW(/UC'FK2M6mN3O2Grj -%N;5i%Qd3;X-:OZh+e+(3I9e8]I#P5Zfe"=C8iW[:kpX]I3*+.O<kW/I%$0Y:&;pUlR@R/V8,/FlM';'a('0%T"'4^fs/,-$U)sS^ -%7K*MI(%irMHO9sM\#6/;)<Hoq2KUnY9I:Gd"&Nt+/l<hp?)#/^HUS^F)?r5=6/KK0L:A!D<5%>4!@oVA,!&B/Bd$?4-BrPJ)c;Xt -%Lq@;?:qA#_M;\>!Ya26pm73'5RafOP>'-H1*K&-pC4_j'PPnCqIc$eJ`>Bq:'Bt$$Z`q4V[%F4R%uF*:Z"%JdG8B:FFG]I@4Cb&m -%c?3^IM-CYYCL#$os2G;O&H6Q]I"m1;)tc(PQVtKJVdT`lR!;%FOie$OI@;%'DbpL=p7ipam0IEXa]F>>O_'0<^0G,AM:;MF]pds# -%9;pN6/=l9Y3e\J>N$1GJ1\po-%*K/!/&2uFq*f7L!ME/8+.ipFb[Y+8XDg:)n5(D+8"[]_`$NV4L,b>U"&"mIi#%oZ,%5lQ!]<7" -%/b*Hd3u0)gVC):XNo("iTZMXlfJGSSV8P>AJM>IAKZSW4#.Om*2\)h7E?YQ:b'1s<_!uNnF2]FEXBC;&duhH`8&GlI.tAXtKG8eO -%8%c^t3a#=%_XI"!SDgdY*"0ibggL5^B[,8j1r?"f8"b,/IKaeaV_.+)Of;8,<CS'd4^>SMVC5Ob:)s+oggA,DJ0*`i=I2U.@gONe -%%#;)nXS7D9:L`%3#or)9ksu^IeG)Ms<csY9>S$?:l@9G9[;rbXe]?/)^_Q4:?6b;m(fiVsP73`&F=JaBf3l$?JV4'nKa:Fm$?09' -%Xj)6<n?Rkbf5ug&e5.DP&P%`k8liglZG%#`i)'`qqQdW<!`DUm>FK@;_nt(b)!@l7$J1Kp!,-hsB$"R^QRlND#1JjST0l4i(mZ&2 -%mKLU^6)T((&*JY%=F>d!(t#E3muLc.LXLc`EU,V%bK@)+3^`caTUar5$!3X%%SB@9koN+1Bo?h`FrS@kOeiD"S^=!Cj6j55$2;]Y -%-'WZ(Mo"nH\97;Qd&,E:8G8AC;SaA+S`G&OA3Ah,U8&U`PINrF@1?C.c".IKbM50V3aGA_U&tGJT%\CNgBtANNZ?ARn1_![+E,8h -%Bo4;sBWX^'gm!dkIDV_r&RQ^-Ci[`'`O?,lOi]+:Yr75Y<B:/fQ6T4Ah!\eFfnmcIe#"<&J`0D*29\W9UM<]Z?;N&2_K;^m3&1eB -%QFKi.XC*q(kQP?PANpo2#,jI]du,a/s3KPK0.)i4IDaqOE"BrH(i4ih-A)uZ3+IS^,TE4`_X<iTO8%?mQ))^jDDgA.flQinZSSto -%8sNAjP+;4VY.d:2M3L@giV&OIk"3^6RmQ*=A/S>F7Pg+blu9m*KUdi$1E@T`TST=<m_5NBF+K]9Jj<R0jG&KOC4W5#c5A(FKn0** -%lShF/'!rn1:fL%HA_7lL'ac-_Yq$!*BFu'lM33^X]ElG98=u1Ma9@=f60:?N;"Fp_V\m=l)"^`U/7,,jY_(b%;P?EKaiqW;:WZdr -%91c+&Aqub:_D"Yb5;)+$6lV:cW@n]qn\hD=(RHi7TWHS.!&7k[Pa,^8gk19S"P=7`94gRib%?9iI#t.T+c;g:A#4HSM*$UK+ZPqr -%?@U%%.V6Ok;QN(`T1,U.TG*KT/>V@4&jeFI3=]>Ndf<irC*tH.9bC+X.O@)B6ZU$Fr$44@l+ieE;6nme3C,b>!kf1]\;Cn\a&u\W -%i(*mu)8T=0,],$nVNUfbS4-s,;,LXim-qs'e/1rf'W1ej!1(H-Q;c\`/3X,MOQ8;"#\\fDq1tPC9'H]B0PL/t#T=s>*rO,XYWkB_ -%W*:_u^GC^4/D/e`%hqUK8VTL=(]';XFCXYnp+h818]it0UAPb=!9&0)mYdm,!T,A%5tE73;:Ik"7$9B>Z=.&+P\+kN'@$W=o`S%B -%5g;N0J&$W$R7*:R'7cJR,_@2;0.b4&?nDZl+,S280F:;G)4$9s^7<1g/\NM>-\^363*@q,8d#BQHK3qWnZ\gh5ebBo'X0uQcX9\7 -%"ElcLZfDiDSk-(;UBsdEII^i+g_`VNE.E.qKbPZaZ^c\%659S'dR5Blr!gs26a!=4bZKP2r'6R%J=%2>8tAZf*'eBX^qGqj74IIo -%W=eXFd9AXcVm-sIH]7!>,d0Cg1k;3t@1>UoKLJS"?jqBC,#jP`_EJV>R0c=d)OHL,*QLt%_^WJ[,TS[emf>GUkX,tBI55sb7KGk( -%8Bsc^]VlC^&qGDFJUP/_)?eh9*"epqM3>]-+]VC]@8<s5Ymh>0>h7i(-g)%#.s5"t,9XOa5[9'n71+'m8_PZI;F,c\,"up%E4cr@ -%80S"I<"A:)73mRXP[8?`h3X:L`X%rl&/r5>L2^-q:1<99A]9t&%aG_`fQ<>h3oNJ+8->:#,1;t9d`UJU$CW)'P[<g/_,;ie-We19 -%*S_lio$q,$GgDC77#4ToB8o>iTDC^H<>24AdD.T7A=F0OeLg:r1`i)B6,KONFJOpBjXKgIcB:KP2c30-JO1EqnNFZGUjJYCLmmur -%;D'#Q'O:2K4Vj(K/Jb.^Le+S'iHU"V'>G.9%$6m,:cG3fOd7sR8pj:)Hm9oMnW"3L<+uV23Y,4fBTc>Vl4LlWP#ClC"FVGa\[2kE -%:*:XR1h[Zfk3,b0Sba1C8p0-'Kie?O]F0/;6eW;rN<k25;_m9qZm:G6!i2dP0LU%(*28/IHjDY?90Oh5..eg.0OdI"@6/hb!c/Ic -%9LBuFPs^FdEKOSX9BeWZ)K%!N2-/k9?'25AW+8S0\NuBP@q\gs:'V`4^e;Wq!IGQJ6K"Z,EZeH3-@R#(3`un"$_(W&LerU:PG,Y9 -%@uT>RKmKtt6:_RlAdeu%g4U'+,3<0h;S5Ft$Hg8q]AY$[#aV9Z?FWG#H!<YsRSV'o!=:O@1bij'2M#AV@Phs0qh(hM:/Gp)\H+!r -%)I2$Z<35#5OWS9C-)4?NS[`]A'9Z+aTYrBjfoluH?:"0j'7i\2O9fi1#O!ZB,Rtq_U?n-lE&K%jG8R19.n2*AI.s"acmRcipWRZH -%/&SJGqu5;gf<+*J2;X92DpahlOG590k1r/c*hP!s5^=k.Ti0<caS8FMa9Y9BgEO\',\Vq/#cZZo!O*HOm.%qaKUe-1I#$HGM6L)W -%#nkk1FCDDD*Ce)*1_H#m`TV?)?8m_'%+nZ6OWFK(;C.GM;(3h3?cXUO;AI6"?g9781Ut6hdBJ!I*KLeDLO)b;O3&YEe)M]YW$/>` -%I0'JuA4D_[VLN@S7^7)Jk'<,UN@K-krC^'D!S8W;raJi%URK!m705>T&k_FjS9H(i->*HO*n$;a'88P?W0@.8rO,h)_Tt\"q>@%q -%,Ke1d=<!/r"\d(N%Z3G1O<NoO;,Xk:T.:cJ!\q'Ac3#BY[aEX@G"EO@(Sh)/X+TXN@5q(S'-R\/"^/;;aYHX!nuFIo`>jb,YH*5@ -%4rTH^VMl68E`WgL=(^A\Q*/`7jREGN;9B7rV_LieWX_ep*f<c!Yp`<j8i-(d$q!oT0(>;4ou'Hu%2a$YUh+2p#9*%@l)PH`RmuP2 -%UuD<Y+\1!#D``q;UNCbIHW8RU/*h@Z5==N^Q[.c;\0%#;P_M@L'q6#@_f/RqqM2"I%)LIL0LZ/bOHS-`Uk?^l0^+`%^.'1k8<OdR -%kcou_kW<H[C.P-EctI+ZSlAQ1akIk48CsR1ig*it6"X5FF2tjhQdX><mbaEkonH\!-#&_i#(U^n.O>O6hUXIMFd[HhAB`7:A&cd! -%nHt`7B3eT.ghZ6D^`*X$'4NdERWJoM_G=9*60f4q&V;r1@a^/@#uQG75d'ro9M,U)Qe`m\5]q+t\f4=J.J4R$])sCC>i=R7CC*R\ -%N[n7P,gZt5cVbCT`oP@;nOQbSk"9].a67XHdi0q,51=^nn?Y@#*AY:u-N8@_YJ24o:e5p&N]o<7,oQ=DoV0a#PVG[SfeZ<dAnfPb -%)ZE++)2r6&W#pj=16YmiaWu]O<-0I%q8'HQNOpr6q+8_d+XlhRs$7Ada:'t;"X]C`7&`Ze?cYkM:I*/o.9FR^92!8mR_TQJ(8SK3 -%):Pi.9Jbpc2GN#gb'c`',ah]TKZ8asN.pmqVMK7AP`RZN!d2qAZa_P^J_lVRJ2il/G%&0j'D-u8UL-B6gl>u#([6iGdY_LG"p9FG -%^K<hF/#g.:P+#fc>Hofj=I3I7HBN<W6%W/FPJ[EG,RYH"UK;o?aEIK?X-cj(?q<eEe+4df3#\O)l'Rm4iJ&b$V(a.VS/ImCLh%l- -%0]V"m&b<#:HHE6t`nhZ0oN;e)A/*8_IjS'DJLZbfiYjKV9XFj/fg'oc/0"d+0jt&`ckb8)$j18)_,+=OGVIMf/EDVWkgns?m)pIp -%E<?-!&.]?J&aO#h8*RS%#`\,b5K6+aK6\__!4t6)U?&LFH;0p2;^<e_dD8?]Lm+[T;)/LY8LC65`Fk,,-q6XOq^Wua:>d6tHD?!B -%#Gh_63<0Jl.)-FOr[D-;O[kY'*`s^5YWfujalONL-`,9fYGE?\,0<"b&Z"/Q0N]"L3S(F5I`42dOn2>#RmLR@Yo(b&$DG$$6S)-d -%rIbCK(<86uF59^c!^)G\Qh)iYbcZ[\8Fu_l;Ma=Fc/1..KCZN6R!&_*5_/ckEFnDGY)<m>8WYUeh@0@.=oW:qVCl5Q3NT\jZK'X! -%A*(?]W-);(Q-4.\%Dqtr$Mg'iom5H>\2O3I2JC4tE7ioJ$*T;b/(_!:3u19`.fktIQ]FH.@]q[qYptfmU.&\$NLM]&&;:IXJ(/eQ -%D2Zb!D@-oo[X:'1D]4bYjT+]7#;1e$Op^A9C;$g98n6YYf6])m"fZ;ZdFRjG92u6V`@-QYU@SD&NuLHm@7Xt1B`)3fA_^7#d-00t -%^T/OSC^b[.nOd@R*e#i`N13_s.F+Ba*WJ`n:`LZV%D=?]DGBg.dAMjmi*S`+q#AG8P>"C>^K*^mY@j9W8B4U&^K=&&5Nl;GJW;JP -%@^<rnUOS/3VFY".\Qab0R;Z3:cmqt=R1ndK,.X9?Oe+q/Pt(c^j#P.IFOc'eR^0f3E5tLK;#1O7F9A%S?KOO]SR433/]Y\[h-%9+ -%$u5`AF!\K*,5j1A`m+ot04Eh7@58V@d<(!P@d6g@j:-b)lDFjh>Y6r<fO)61>.1P?Q+qQ^W*I+^5rTKUNiFRYmALHQ7lRf.Q?4=l -%JjYiYZV`_HKLt_<%Cn7meS@la4/[_iT*,!%U^d1k_c\!8\P$RQA`j+((27kP)5K+gd?4k)jJ\eTm.Sd_Tdh7@mU1__+M[dC"EnI@ -%D-!LU["c$7Z;S+hkr.$K?nEt2M"pGPb:tT,)H#h5BMQJ0FfR5bb$YlHP%&NJ/%k]BEJZ#W]%(+YYIIV\Wb+L$:9WS^=447:ST8R0 -%A]uGZ*&M<aWQ@!H($Ab<?#QqoeeK`;$*#LkKX3_@i;[/(P1:YsBi[rG(=inR-AtXFMXP0*.f@[4>W/(A91b.QF^,kZg;@pfO,'K( -%bpS!D.F]7XLp"is63UPW_L8H,44Wc+B1k5TBW"a&b%N+UkWiTgkIOY\TDQMj>,A_!'`Y91oiCoh1;X7%IVq.1[d]=iqVqkOSKU&6 -%RMA.p2M_8!s%2NG)BB?dM!_k:>Ffc72.:pEXu3gK1.";'1hkHcBS=?.@lhR%)lQ!TDe6l1>.Pm8:M7cDA$gDpdFp1Y[;i8'6Yu.] -%p#CZL.Zh.VOEo/;#qFeDU]K"9/eWt4'<@(,%E)lKFMmZk1P6/\Cb_lQ`,+G9gRN_+p8?:(ZnDAlNI/&Fr]M)rWfU)o8l+Y062.L( -%>8qd%0MYM25;;J;7\?+NN2?O@\PX%BX2<hFq2lOZ$8_KTpg8LB00f;go:mC>/Ls`akJ*Ib=NiMSCCQ^?9G5s$Wq%VQ;Q?2rh6g2V -%:TH4&+lEm@Y//s3%n@j$U<5uA>]3><WkV$<UX<LYkin-a.\uma37Ms\eZ!_*Z\01YggJ0-]-L>GPYJ`./.J("f[r'-gOBD'7712I -%jh$^RYP*nP'9D>_RB"l;S^`OjQK=S'W"!#h$6NP+bgis,b(4!WrBH];W;'/j-S[gLAu#/^RnW\dK;U<F#%4/!L5iB$]9AQWgWaE[ -%D79"k;De]fN2UkY`gbER/PS?u]Km`eV>=i*p172faKI.sK7;bl2hJCl?*Xbl=age"s+c)dq**g';[oq6eL/8kCtb&*Ltl$Jd.kuc -%0V%*jE`9@V,0/`$<2og^/tP%GAEhOYO\EjId8BX05+p1<Bg7t;,p=M3]_g@lWg1g]?TB]>1<nMYrSqaJp]'WZhRb\maAHe4R3:=% -%-/4oKRC&\AiJ_A06`c,8>%P#uX];>!\<H;PPr"]\nSobA7h%;KD3#Y7cYE=OoAf0:15X#qC:'G3qqt!=s4^&-a6diK_if^%_*]eW -%N;a>:"/T1F]TTCJNr7XG!<8O+a.Kfn,N0n-&S$qW)".bj61Et5Dl%1JjYgA2U"b92"qsaNCqs3+Du*75o1cGEhLp0U2teGJ21SAO -%>''J:@>Ql!(osb:cF)#n?<\$7b)2u\epE%HVEc.04J\1^PAf$l?XtbKnmW*VEbR@u&`RbY.iX]#Hu8ib0PU1!lCg-`j2Tt$%f\.9 -%Enk@,2Kn0PP^7.1[0DA,+ofhI'?W7?c&?tfoPQe)Xq%E3_D7`u:5M!,Ep]PLb@Td):pZ27_*?9&VRUklM`X%V]o?t-3N[*qp4(#h -%rXF;BZC'5<fJUGClXO;)O+$7^>V&L$nP<8,^Oq%"[h9ur82!F8VAKp-&0jiW=(3[P8r\>h(U^o:c2%MAo"KS\mh:0&Jb@pYiKd2" -%ftf7Yoaa$lQ,`hns)p*d[kYSr.IZGFmFQ%HH\>WVj.QAT%TD?q[CG+)m$jQR`@ZBbmR`<'e[(mkG'hZ+6KBk*q!+pOE?jWi-\""+ -%N#4OMBXe*XbW'.SN^H8E/5i#$$?5h85/4edr2Yif0H#R4BCKY6f_f-sr]QWuot_?[#1Y$)]S!2j0'b-Hhr.t_Ie$bCXeu#'F.d54 -%D(ojIR/`GWruU=;j=nW(<6G39))^U-ro.P=J#TPld6_2iQTMprLG=Q,QQt]s63R8i:Hf^W[".j<pb<9WQVA1>I8G`-J4E.$`loe[ -%rhCiu<G'=?LF7tWD)Td%mLarDM%\5G_t-i>Q@^s@a?P!FA4Ikd7kH)L7jReH2pn!L;2FKmS*82NI_Xi0j8\>"'!<1OB,&\DCncc9 -%oL-f]6Gc1G*DQO.-]04J[=:YH(d^GBe))D>oX@];AJ5mYo;FT<bbMa!GK?O+TMbES8capQn3t?f&CEE[1H^-:JEEn77bm#':7NLX -%h=r+T;h)Ooo8eb]&VCDC+^l<t,03'^ec@,_7NI76rdC@\gDK)Kn"W=hA]sO]*?>3$/V*\_<'Ml.GDG/t%gMX2EHP8V,)GOZ34r;1 -%@-'ri<ZVpKEA195O+&JoKl".Vc"VQfV=!K@co]]`UVFuh(^Vjf_>g(Kh!^"3qX9d$LqhQ=NK<q?2K&L(iqd#^>E[:;D"4n'HNf6) -%L8d\eE,/([/7[fS=gg%?O!Jl**+^0gPf*Nq<(R&;TE[IAJ-9$)^d3SB77]-1hb&HL8&cN,"VtbNpOBqYc>+)g<JE^Qg?hpNb+ug^ -%X#BoiE@3],G8e?DB9Ri*>1"3/r>H2\,3%KGF]tB7UHBKC@=pf!)qLkjdONQ]?g)F.!Y"q"KtMF</i&("'gn[Nm+?PubM\$1`Smnk -%$'q!,kT>Y?OTggN)5I"-#0$oV,%D<G!!=,QN5D'+s$QRKIl8l08.#t-<bk5,Sgs\W-AA&m*rX:Q(QB4/R1Pp=p-J_FkqD@us-=JH -%J#>m;heuk$]9C>FETYs\NB&raokL&tdBLuI?*p+Mr^8:gLVO%V1p@[c^\dmK(5C=t\_ai,&8*sib=\bbCJT]f[d2.6KM/0g(<FL_ -%lgBIH,"@&um;06^s*HU(s8H!s4b/#4j]B.bn"*GW_Jpbij/S(d7dV`cr\^+\ZUk+/Z=KEmF!\.$c*Mf&LZ.j014A-McXSCVT9oT7 -%4Mf^MB.%\)&Yji"*nPn0`P9XVYE,m^?Xjkf:c+?RM5"t?;AorBYQ"#E9DC)@6L+#P#sSa.r[[/o=T1GXCg-<VonT)X\)##iO8jj` -%m'RPn)5aC,6\:D-!>_KDRaKLADT.)61*8`('akTT2-H1=Or!.$STO5-oEbG.&<u(oDpD*&aS))n(A4.e''>5G=>1F"a3>XfLag;; -%IHQ>\*3Sn+EkB6YT'O/i,>nmJI9tk[oP8<pS%bhSB;O?)ojm$\pWHpe@7sAdS.I9dN+Bk+2&Q8>DILo9aRAKL51Wq-]8B>a*^mP6 -%?Z$KWHr&AXlNA4CR-tFL`Vm_dppJmRc,Fo$d@I^F5=-V2>$3-3l&UEqo"<O>6r]A"(<FhRXX<im.)rNM<;Jt8`u0u5g[.cZ30!PA -%N(WaqdIHMKSr)qP@i.pj0r.X?gqnGl<YR6TQG>J-\J`hea%^j7[*=A,%jN<<S*CANo^/a7Q[0$,8'k$WNm[If3BurKgL<$c8-u-G -%,BV5q%"_'NA\`d!^chIM_f6&8!;%/4(&f21i[&@tdHZb>9NsBRJV]I+es@D$4!.CG&uVSU-_JPfEGHlpMcNbE+8U)QXb8b]eo_fn -%=*c`<7kpSY-mn"E>N>.Dh8*/gqApq=TjN/Q55eae-&R]seuja\7MCe@h$d.%9X\"%[8KJ28imp2GmRjrPf:mj-f=K.Tl)Oc:uOrs -%^iNmNCMbn6F@sk_NK9B?#D3V%.ggb38OA0FWHr_bOm7>Q"TCN"I+6Y6*lNt7mWMb@'b\A+_k/,-2#6?qn2K@/_e3G*Kq8>r2k@+M -%gd5T+CA#sIot"\e/DJMfQ<UmhXJ-3sCft$rV=`U_9P0+\j.g>E[CW/=s1I*&epa`#^4+a7<u7*:k?F,c@_X51$P,mJfn-plBgq#W -%fan%)XC/$]F0I08%9CpoXZmE:e_2qK.E,DKgpT7$H5nM@;3bWK;]`E0*BkIH'Rn`CUb.HBo4>qDg<0)ij4@6Ts8/U,j(2et/dta$ -%[F)JlBs5)mcn7<ClY>?I5!V%ml64UL3#g8rJ4<:KSQTgR<Egp[eIY77E`F:eTuuJ1g-rU#9'%#"_Du!k*GDB,lAd02[&G\nKkf/k -%GhQqQ<Ki<?,dd$=2lrd:W#4#ILagTP.OcrtOnjR.Zn/q&fdqQ6"LP=`>&Mf?8tRC!X/fYYQ)+OM2!\nUjE3f@&!b2H$>M"A$X%%< -%B#ZIQEgMYbknBAfL'mQSK4pOaX6$CbWeKZ%MdZ@]Y9s]h7I81SYh7K-:h4QJN(0)&1)-l?,\%/b&Rh\T5p]sW,Qe2>*['hXhgu5m -%"L+rN7J65GY`aeM.lh;'5;)nQFOWlUKg@Gp<"]g76.4AJI\[nq_35%&6nT&])>g/C8Qm=[(.9u5\P+!BVYYW22d.jKV3P&GU7msZ -%(B"hF.q`Ef>uJ`Y'j[rR].QQ@bK!s84oYrTjD*Ge,W`p&i);!*cpc//M4mp&)jrgYX%nVN_^qN#_\muDA4V^V]fh"aJgY#CZS3._ -%#a%oJ?iBi*#L30r+Id-=(=j8;$pi'V4rfVIL454FrD<g;nGT#CUK(L>ooL2Ef*!2pQ-<op7sfoITf)bCKjVP[j$tKkce:$SR/RA2 -%mg6:R\s'j8d\\P9S:IFV&,WKn7r($Q@hj@oX+8b(M(8/8FVhHp;B5DAG\>)3d%o2*0OG*ss7p)5#+Ls_9kuB-gQ(oEA7i]n<;&*F -%qu6N[!rVf^&)UQSQ;p*<o:LJMJ-lG;&%H*R;qU]]rr,Cs1H[(IUlGuYk:'/h#@D[1aC\k?!%gs*>S\kO!+ESBquLIY7$<fN\97fM -%62^+[pa]DhXd!OIFF28PCI$),aAu:PfiNudbbi<u"eW5_F%K)@i,4)jnJ?*ppQW$0L-#%GoQ^\*[g$;=_g^=8Y\MDA?b6cq*/rX' -%5G\;:Ri\<AamV8NR):fm3R12"B^U[]0CXSGX]6AZpZT6Yq^n(Z(.Mb`BA('gYaaO#h#.1aF-B)nP>pIj(];R6Kl`B`F.]i>r7`LT -%Ut9J]=,9('OihW$DR?^B\,M\7dLQ)>m1@10J1T!EN&LK+8Gs?'i7ZCFLrY+hGV],bc/q6lg&+E>'\LW#N(/DU=T!BtT0K1M$MmnR -%[#"1iDPJD4@/RL/3be*'C"7u;U`H&7g=+5b[f^p0lm=.:ec$mo1JZjeOgR_:rPM(ko&S&Y#-[S^^b8SR7HR\`<b+,ndNrP$Q*]2; -%1TPY%/*5`'2U[^?Y#$1We^#>>Q"oVLe!38+40@&F^$_,*kZANj&%R>R8o6]0hPlbE%Q5&&`faY@>I$U9_d$d=11`kmLmTkL.OkP) -%/ZBY=D:uKdL)Z%b8Jf,$n<d&^m;(_ulE8lHO`FaeD3C2J\MD%I`C[O'lcD_.OK_acQVcmd2BC&>/(ZXtY0k:\=0>ae-)=d9Lhc4F -%[jE1T2+!c1QY:*0Mb;Ns/N!&72N]NuIgqK/5=C,+:EZJah\4eOchaXO?W8DF7@qI>KFpL"78/Hb'p\Ti3t`1:TTuD_+.$$B3U-fk -%UTO4#'AZH4S4a&>ZQ-2+W\kNl,]gV]R8&J-lHt1$'g`X%.rBRM@pCSS7gfBI<pI)!D9stS[AM*.^25Yp8'Q8o=X>FTe8Jf%\C'W& -%&4M3:k!/&hFO7&@e/1c4*^$bRE0&ES&J[%Lc%4-ORalp7XIQ]tB_?&f$E\bgNm"gbg,ZM]PKKte2R5;19jRr#S[Nu]fp&@UTjM^q -%bN!$CgM9rY]_gnN54g/_q.Y_Po0iol7D5`^)7qF6Ujctj_5EDYPub(fRj'=G)`DFoT[jGKcB;+Hfjf8/rA^u5WW$-+ruq"aIG.O% -%BB]VrO57,?XIR$G7?["rS)[)%Gf96?N1j?j0Gl:h8p8ud80Y1X7(\/mK!Rb\V?kTmd"4*bR#8KGImu^mpL(Ch$4KGLR8&6h>mlXc -%<\W_E^hL/.0H<?Ph[+_hb+^Om;T18_-7+dfdkZ2"8m!C[qN<U`dhUAO2!3)EaM(mI3\#gXJ[V(@cKU79e=*LZbIYBYd(m]VZ4L2$ -%JqC6YUHAB#jT_h^%>+B"[hTXXA&nnGTZOtap;uU!4dZF$Lj`H#%#QlgUN(W/ZY\338?kA,+/uun>jbAe/(h%b^F$jA4%Kbcmc%`q -%P2[lQ*KIYQp5f_.07ZW&`#i/WrMV`6X%(?2=roOk=j<n)HOj\mc<.90Xb[q=NE'tm2FU,,[I4UZ6bAr1WgU)Li/,f9603f$6b-g0 -%%>p"b5JUmN\FA[c54)*l#&foLJ63M:BX\lA6jb`Y.&2nHXAY$t1H7glJY_>3:(WYX1`?Is_aqq/H4<H`@'_^gXO_.js55I&@6o'5 -%C,kWPD-<0umB@Ei'H%?-?#(X:;J<g8;Pnd3;St6IWGQ=Wd2N=%NO)C>UTDU1P&`CL=r\G/WN\EAPp&c,;%B6e]fYW57X>)L<Z9;Y -%2Be>FM@QcQ>:s!Tc=a20c.8]F);$P8BJ^3.PLPIjT[:^j^WL7llqb?)C,_VNA%!ok'iO`V*_iS>HdJ,Fp(8\%8:tS2@U3(^$_f*j -%#J72k$3ZhA-upH%'[;N8(FUVt(/q=H;s-D7RNu^kJg7!Vp58i[g7tK6US`<t:lP)rQSWOk'nKlJA)3Igao^P2`Z"lWAbW"5A0\%7 -%,HMrJj97XT3\6/<+YET+!!e[L$Ekk4R#PZgFu5mK*;OMQBT+danY?>jNQigZ,q!'U&Rq#X00Ak3\c@]r29tZ$=?f9$JnfId>72/q -%PUe8N3`gjO)+D^KnnBC+Sru$2^gUp@NhWqAUhguHM`@ZZC_4,eEPh(t'(8HDbe$2s:;%rRVI)brVIJ[b+iSK[9?C%<b-fri_W0L) -%(+ai:K%^Af(b4C/Q0nW6E'PPPr*MqYo0",g+R3j'j3Qn]IhlV4*6S*:S)b7.+N:TlS"A/Z[3VkS[&Cuf]%H_NRL$EqdHGYZ&TL-] -%>8B\geBSXW2EGj.O'04]W-*G&Z;[cEgMQnGr`caoaAUt@U;a`F*U;:<"t*j#&-!W2=K9j<TW'si][cWZ6kicrS4VgPO@5N5n.3M7 -%Z`^<KJgo`fhJ$gYl5uf:UUD0EfUsF8==lIU>l3W1279i^/Z,tZPI6(4NgEXFah^S9:&]i/*tF$b%u@8t/LT:YA5u^GW"I2^JJQHG -%28[m&F(qb;,,pYA>:<$?iTdr-56i9`I8M7*3(m^icWZe81,hToEboI4.sr#r4tqYiHpqd^[-OW6f<TDO8/3b^WaA.%O-]7\iV;_4 -%engo-bM"tB9P[t\44L:,j$p&7"dd8t[C8_+p=dNfd1gaX#5&=+d5)YZG@4i:91ABab&K%(02*W?C3dseRi?`p@m;#;A)n2p6n,.9 -%mROgp.Z:a^GG8Io3fSu'frX1Ym6;BO.p!,7JZ1-B;kL"t=e2I]]/h@@<*(BGWq.R9>$S>CN3K:a.,N&35iq5!A@7UoV.K*V@'q?1 -%+Snkn#`^%h!XV[I%E.*LUn)@FN<@83am,V.hR(ZL7i[d(4";gC.P7$+NOj(Qdcg`-Op&(-e'd8;LqhZ(UHNLCc]iK$"QOY_R]XCo -%<b:VeNqE@6'(Ee:#kXrn[PR6\78mG'P;X_da-!R0MYGd9T4g^+&h)5;4u`"hNegbY7(f6=iYA!qYNUde746#(lA7G6'UT5]\r$UT -%'m8#A9obs>H<JgMVDosrMGC*OF@*Zm)>2._88K7'-==S$q$N/'=)^RAJeR\i*0IG_KR<qJq8R9m=)^L?JrY5\ku#fk02('H'^$`K -%_$ToE:<5A)7_U.OMf!<Kg'p':h2il8%6:0=O;$=W3MP>k'A<m5BfF%j,uI``5eA0[m910585Hk+NH<Nca9h6ge?k]!0A78gGUYai -%TPuJ4hmU+R`.RD,/p1kU<$'ReH-hScU09mmTpDVj6B=/OoV`EiNuA^C]CHH14K>/sQ<-mi>".Q(g2rRKb+i,i[m"S)-QG0V7__hR -%$JYDl!Z&])CELq:Yg#p3oE:]FXMDlU,>JM(ieW+0:'`i=OFSQN#WSP'@$ZjA?^dI7,MWDAEC.I'T[pS`[2:Xc-JFStb`(=k1)/L. -%C2+:4:dIdqXs#A)<s>#M"jS/WSiqli,2nn&&rnstiKt8kNp0(oc;C%"KO`d_*-4H`0df(CDFTjIMi_duXU^J$L:*u'lc9]O2<(V[ -%'.2"[`)T6jX$A!XXt!Zb3UV]lj%cO5mZ<mt:8g1UULjlk<%cEic#IW9N]Wrs\=/k_n<W+Nf*Z'd=j[3toWDaO]rO'Y%l?T#!J(J[ -%qW>Z_DY5[,7/gEfZ,$4p`.,Oj5<W_fMuG4]F82;SogK?ChtQ/TiD;>d8pLX9TBYCXY[)W@Rr&kq>>HEuDd*IUopq2sRmo3ceRJ2* -%20qj6*b5.=QY/8H?6%tE:k._$VD>dRAHqhQK\"iVmUo;`$>\\lJU:G-bFY?e]H<3fr5%N0ZuD@9^#(8M2UhKB@c]Wq,jm.l]rh7H -%OXDmjY?u,eHq_F1&+=c<8$fs3cYSXp:(C'`PPmm`pFb\#'Sha3gVWa]0ndR<:bD*Hp):%&/2A-NWU00)#"QA]c[,<`r$mo`*XFF` -%"5u/#?Ydpoq-<1[Kf+tjOahS.g+EPLiqhMY4ubX:ai'h/*aG;h_al0l]iXqkg/TBXc*p2l+]COlcLelBhYX4LSWd2?GknU+*_5eW -%O;M1B*St[5ek'9n<3?u7;fAeBrGo0,NGXTSLrMtIn&*'53'F78V;"0D$%^EeC7VZ^\^i$'SDK.,__5rpWjTAPFm&[hOkm';F_gG, -%p+_"&9m20JZ_Y+=J)p;m-K=)+NTN,2gmKFJd-`9qe">h/^H^6?530,B5*''rT<Hn<*lVK]WT2SQZd[P!M_h2.e;Lci=SMI/_sVWu -%m2Jh(c^<O&=a5t.MQ'<NV_6;+A,AAr1=t`FYI<st@!<OZ5B#qH*VN0.Mm&8NRo/V_GO"b_\d]C\VhZUi`n&]GA,i,lV[ou)@f)n: -%l4hKSouOi4'i*VcXLX(G8n-=m=2i5Yl9"E5fZ_hQg-*+g5L9<[PaER!r+b&)jFXi('=B[LK$S(<Y'#b8VD3:8?59gPFCZb6-S7 -%NF+jR<SX^]e&,???<e;6S\?/X?^l1A=qCMYcaZo?a"Z+NpWI+7UNOiLoIB%]s'G/dYr^]5pJUmi:0eo78t-'HLR7?2N]]FWMTO3K -%Zd[H6-bb&c(GAp^L5IW;7GK?5(]@TKCS%`GH-WM?>3KYsrKc:(;(/cuo#2\mSYBH[!`.FV&*R7?!^>EA+'_5-a8ua'kHCVWe&U:k -%=ZdflVn7[Y9<DXh\e[PP6/@7sqRN1\4k<:fNNL17R`/@7:@k1Nc'P6/;jW8_Hi0Eqr#B'K1HV_72o;G_T!g--O@c?GJPbIQO*EF, -%Y,A,I`RCU>a6`GAA'cst[.850?Is=WHBGd%$Jh;6G1iFXKfqB6_qdJ!Vk]GUdnXi=N`N&1O4dbk6[&d5H$6+Kqh;N2X-XW7V_=BD -%a1>#c0=9K[LM4#-dckfsoJ5Y7fUZ>rNr#*a7$uZlgMpVO:8QWKa.CG>gSE;RRo#g55@J`(\-T1I%poAAe7gmu4%3%@iC^Gcp`&V- -%*qnn0NW8OM[Y['\2thYGm7bhmn!g9bFLn[A'K,a_mIEeA5IR>"Kp/3SO*3QIf[A$orEO^?P>8Fp_QfC=DN?/(qekWi:o!\\Y&kYF -%k.3&[=CGo$7QN[D:'3PF\ikpU&4mOA:ZY?ZSZW(XYLNm)D,rmQEMbUXkVjI3FZPA.VPp:N86lCAbI]fO]iU%aD:RKP3pe+p](*KE -%;p'=?f7tlMIr"cN,?0!`bZJ4$k=;U4mkq)(p;";*UO#Z#ZPD)?N?s6:C#"oUK`:;qA+e^?1&W.H+/b])^F$nDlZ_s(+19]0jf<:< -%@VZk/qq*U)IC;!m&C%u@0AC3l=1i"I[EI)i]jt#&;=^#rD^OO\HfI2eC\q_E.k.B5@5Xn]>!JtpU_RBe^Wg\FND71EH0RJ/o<6L9 -%e=Q6]Y[['mfD)pkmE]Kl<&4FKFXq(-=C:<MotQC]Y@b2iFKa+ie#t-.AH1NYCL^2ES=-RJfBk_MhDG17aILjdVI*-;K2oa8`A2=N -%h4HI%*A)sPH^iHR;nfX,lW3[nE^7D%K"LkX=fT1XD._;T,MUhc;Qbg9QO@Wl@ai`j9<Rk`Ki#q9hL;c;%[;,!UUL%c,@t?X:!fk% -%]PZP*1=`Df%Pt(Xot2.keAb:UXmC"IU&"(q"*;#;ODnQ7B'.r49agCVr:QV-qt@GWhL96@h7b9:%/s9s,l!XG#>X0N+SYP@iBnu6 -%'s8h/\8tlq4ro*kf&OmGDI?Cb96TDiUA-WpXrXB0_J9'\CFq#1c.gPQo<3s@f932o`a3pThqBW+n;8Ma@*h#-lc:]8bCR'dj=%L0 -%auqm9jcCe6/r@fVqYKlOD2Us*p?]AGf&c+@iL:4\`T#MK(S5Z"E;GQ(/k@;'m%2fg=p0uEi0qj/EBVs:9!7iF\b8U(kPV+j8,q@L -%bJYKL@1]Pi,TPRNKM"QEZ'VG%#0"q\1pT]/#5fO`>)nJtfT!!s7$'T5G\hc:GIi-DJ*\n5<[-OH,OQSq+uko,Ic'p'>N5At4SA%F -%(\,7JIEZkZX2S7=2a#[L6H.F012Ch]O+'#3(\r:0iB=hn%IRmmVUh!ULNdjJp1V']M3<Tm%"go(-4TF4CMPRuDgBp::q.ssK?L#r -%.be=rW/7R1SaKZr>LUF>Y*R(*WdtEpdFWcXRLd;t,;?N2AZ!?<N=\oI79\S"S-pe%nootuA)9tC]s$gH.lEh4T[OKZR#j9hr5a:S -%hXDADU:EM2(E2CM9_'TTAqe5ll^n#$EUhNUEH;Y)9#XpdT"_ce_hu]V7/?^;r!aP&?cce7md72emN>NG)_\8+8=S9cCnT0V2IV8) -%4Ql[*Y;r;Z)QeXS>'rZWe'$OJm=ART>0U#mmW#Ln\DEq(?8TC*p<2;9'kKSfLb@)$1JcM41p62j7k=$OIipe^6VWhUeEk#9/8kid -%7NS'.7I;r&g1be2ImD>Zp[<,p-!3$Wqo2'd]g(ED%"kU99;[>_H*kKDZle.XBC.C$@]C\p5qSZRbZ^NVmfrXKRS9&mDD]gbH,tZ$ -%H$-R&h:Pi[%1[&fOkhuHpOS,^E0/WVf86&+2>/r5T00\6,Kn2eU_s)l\8`'@L7oU1NEo,gY8fpKTCQA4h9J#dQ\Vgb6X_eJ=UYVY -%kiZCLn.Bb%YE'TlePHqHWlH@_&_Wrb&j$LY<tD;)nYD2R.33AQ(--6O"ap;]/Kj_J-qhXpJ4NIbjBTJp(WZ=lMV6&2aW_,VngHUp -%k%N?^*:70]UgN0/kV["d`ea5UXE"?]F(EC[V):7oog7!VbhXp7?VY#^Rb`j]G*6Fm?<K(/9oHJu<dX2h&!^o(H!$f(amQnZ_X$I8 -%1X07.D(t^a<=X?:I:95060d`_)(V$117f;G^%;qdBJq_e'ASuc8^$qs"r3YL8;d'i%1:di%ng''O>8*GN__m<iRXTp7*)If`-fOc -%dJII\@U=ahe`R`109$m,I!R:YVme:-gWtSG7i(LB.M%r*U0Tq@(?s?fUW!=BiKS-0<'o_08Mh_<O$jX.]4#^IHjR7HVcd\ZB0g4* -%[X'R[Of='ZP_l0Hdj'.t,Gjcqe[ogM<.4a^K&"[9GOiT9Rr'JL!;DEj],>YqFUg#okCQmMT3/S$+[`8B=_LrFM5cWWlnp`F(2`\% -%QcEfu8N2uR\Q@Zf9//6&4Tb*OM5=bG0e[YGo!,XYI7^RpHXDpoqNg`$8W8KO[8UeT#fV^Zc8Kq+/fI5,]XE+(WOLTc-utY"D>2HF -%E&ks8g?dQ*T.T29.>?LP7Z"O;E;++QQo7UZVnnOm,ker0^PAYeg[H<NV5+\8$pf,J+UG"C>fNTk#-l`l/dP)Y2:c$?2cVb@*\i$A -%TiX<YbFt:Cm+n9TkcIEfI`-PT8l*ogFm]tHbtM:qLA=MDb^o;#]j_MQhIWe@rkt&okg#*&:U)d!6juSNJb($>Ch,@NLGlI6O<-l9 -%81r6*lX\.>PTdRs#PH*3c"QM1'2tI:;du]UejKZU?V,#dT!"nZGC>nSX#l,Nlt')@k!%e$;?$4[4"FUgi(cLt6d:To_4_I$@tg:j -%s(*s)`W3*AcHg"V?K"gCcg[aH9l6+-l;Q].HnSEZhJ>-AY0P+SFahSgNFqkce"(An(q^36lioj#gp$"+6kGb`k]r>:((YfgW?_+% -%k$km9*sTW;_hFuLnL@8tf[Pa9mfLW=Ls+i:Lg)F'[0o^f@hocrcopg@FcQX`6uUAD?KO2`:O$/Y/fRk^GWk.m?eC'%Dr7?+K6l4p -%C6?hrej!$W2NhPC:,FcCF2I60ZX9uuGKA&A@-^-HV\1=hm6p"-=2C!8X<C0?E;Y/J1aL*o1m]7"+:fseghj.cQ)OBemu,"u0Vp>/ -%5E5r<>cKCg%oVL<^-on@Lb9uQ"F#2"P[<;?:"`fj+UVI1>(#qO?Uq$&*\OIRn_/8e`Ksa$PfHi7IjckqAG6UP;Ehh.np<)-0O$:3 -%Z;uo-LY7,L]@1qBj'eN;hB>`HM%$DtnU8/3"$f6%T/C]c@^f*%Hf(@QPoD657]k?0[o(qL;AS$Ic+L:_!a86dB^#1*k6Dg\,F_uO -%*L6LgiFR&JH^S@jLN<1X258]`(:gjT_VT:*?!(ESj"[:rpSJoTFP33l=LR_8D=r:=AKs;T#3GS2j6d9'L;B43/.:Y=$0LF7#a=ks -%4N+I`I\W;o2i[V8bEKYbnb'A5HlB*Bh8eijL!/li,)80HSHD0%?Y*M%WGm7I(JZ;&:`8c.9UE1V':)3n[(7bE)'NimP/n'@#3_P* -%7GH2n9HekHdN8iq"j:I!rG[7mn4c.?OMJC!/<3;LgoaAi!#1.-f!<Z&4RCNYq6IOQFEokAe'0)grG#OF#.8%7E6c@!+P(.oq]=F. -%I^3U,@JOq*>klTO7:TOk?DDSDBJ5B_q'IX3a"7fl-iq5-JQ:3*)f'U=$)[)MA:TN_+br6$Nt)*L\YSB*B\E+&rU#cC#gaD/7IQV9 -%SAOmh)HWFAa0Jhe1&Om-Qo9nP7'?@M,?/`BK^e1a;>)"_J]9Ze/mSnOh,GpmMf[]3BP<>NQ4XMZ1)J-AeMA7nJN'V#rb`=QXQ;.Q -%Wj#a5r;;Pn1;q'iogH%K>ZcuQN_jdIC.k(@F,FNdIU=-q?qFh<[X'!"Ne[bY_H&5"4FDqQq0N^YXJ`>=d`!t0F4j%ncRY==`emlA -%H$&R]^m0/T-').tK6snbK5F>$Fr95g/6_TCSe9XoY`cXGiCKgcoPM6_\UVA1\c4SMQMY:n.WqfoCj0]PQ8lelkq.6d9AFoYNK+QK -%b&MEY8OWNcBAYhseR_;>U\4J?g&$P`RFgnYfB]?(MlG=35-aeW=bMsDIH-tg/16Z]iu^Vro<l/'[iu`&PhY3XE@[aq:2Tcj,%&Qs -%E7FOW^b:hpoeGiWF5.CIKIF[jm6Ifn)[4uifKou@VPbERg#j/UMGB:.F^MWH1R7A)@HMl45KsBF_b4R+ABo+^02%gWgk!;l)ka): -%mQ`,sl40=0$PYRKP'h4eIsb;UO!+@$"K6GQj/jJW`,;ICeSi&^KuVq7"6NJ]9]e^V<nT\fqSsn$Yc_mYo3[&K^emVk.M@8S\Pt-s -%[O,Fd,%kD4TCq524`JJ-A0,!VoeDAfjdcra\Z8\t<R0^RPoS-,K)puJ;7Vq,e+7>E28D/;eRETTYM:M3B>[tNa\eG+`?TSkY?W3L -%R>Vq`G!&?5:#oem%ciW)J"4XV$.M4HI/Bf!B30L$5[LfD!Y5Q_CH((a<lMtD%55/up)TVcgOl/kX9[qZ8A!:$6cdptm:!D;]6:G: -%moetOW=092DV2jBnU[@:mPtK,BWQ1CFMtGl)W8C+g0Ls;at=201jV:=gf(NT2ulG:]$n/f3RZab*ZO8]En%(?7e`7k>cDMtm/A\= -%o[N(A5l/D'UWVP5GBsd:h\<LWS&*=FE,^S]S#tri/DYH-bk\Ms/C)6nRYtV`R-X31UC$*]oCgFV+F/]Ja)\h/>&/6`21T,"#"0[@ -%.bG^uWc=quZTlM"jM;_bQn^Re*i`[(49JuL)[erWZG&c&a^pM?2S21(Dn,Ts]Y)]Nl@eMK9A\JAo"e69e'l6>>(DpJ(+)4F]OdZN -%RA*[dXWYg8Ksj^g-2.IE#EPqG`]6oRL:]\l,aT82RgY9dZ%*HW,PrZFJf_?*AfRqgBrNl>R"60#fX>;6S@DnE6"><nb3P]d/Qr@E -%l(W%^*4fes+*aklSVNB9@Y(pu+e^3G;0?4-KH9[&Cq-tZ[:is9KR6.?ijsEu)3Q^H_V1buk?W_Vg"nq9CKQQdk',k:`M(uL/[A,) -%1PURD8(L*2g=>O.7IlJm>bole"u)DXc].paYK4TJ/EgTHJR)t/kJH=jB&'A:[XEu1KJ&>5;qO4l6h'T_,[&tF?&N`5>d3uJ(;>l% -%@h)\Lb1<>pkOS,OaJE*U:B@:p##G4jRR7qfbmW@A)!0(qqnbTQ0"<QH.dI05_NtRbjU>aJXl8-QE,Du_=rDQ?i0CjW9MWsW)S'Ku -%M`EaR[W!SY[<;WMk(6huaE*'$OtSPOSRJ\\r/r1mmXL]4_U=s/\X<\O]$HYE92Y*0FO2IFP=$-T?t$HGi)OV3*76CIM0ADA^:mh" -%;e]"eflY1C*#d.8.u*)kQa1)/X@J:MOn:@a@[QXVC%dWf2KHpMNGLX$h1_LN\s?is\6tIVYCcG?C]bq"p9eV;)n9K8"O1n1AF)Xr -%7r94]Jb1ZtR[]X87uo[72o<g:UL<QVDf4so`#L'"Xg^@EH/X"'a1#KA=fZ#6bp4BGd8%rk1U>P.2r`$1a-0q_GIe+e7.D`XZ5XlD -%*[$f)8YIIie&V'jcq5eVW"HCQYeTSe,25Nn]`@?P4p-G$"k4W5PK]6g$cqErF'2?K$_8`:9[%U>'2o_$>b58teao6R?7FV8Hh[Cb -%98'BCV!so<9G>XZYd"W/'3[,'J1QTnj,^gV6UETgqW@<L!>=,/KuP3M%>-Es6+%bs0&$[@aoOQP%\"o;bcoL1)f<chO77UVJa&>8 -%hZ+;3jmD'=ml=t9^<HnW'tCT,\i^sU*bmF45A6'T+m=*!FLi/S_Pti:YfM]I\AH"3Y[&;3GkNmj+h0WgW-M1.!=<TU`lQ6V@^f*R -%KRb6Ueg(gnFGZt.Zo;$9B/N=MM#jVt*aIhj18%6lS:Esg'X!Z8E+q#RMJ6<M1N/=;9XNS^;Dqob[_pd=Q4;)M.>!n:Qd*AfNOdOi -%5n,Mc_\K`\&SC-Z_H:`/R6<LW)p)E&nL[-)Oqpcp5HJong"h'Ap.M#,Sg`+\md]92pbNJ/[`igPkYX6C)$l[;OWPjBc95iu?q2g> -%?=^'+W-)jR@h`JWqj=5IVuWh%*u=1pWsq"TMb3OCLe1o\^C:MdHf49h3BM5G"5<EAc^7BX$]aRLJ:oi9[EOoD$'oG%Ub.HUL>g;[ -%&*I1K"jmNAlS6RO?oPhP7gVd=j9nB./-jLXC!>PTYs$tIbdW=F12hI#9Vl&bqTAe$$Xc;Es)sO?*>YN:j\MH]B7.gb["[Cd!<^si -%W8]([+?*s*%MPAWn0lSmCj@(5K-TXcdtTHGb&VrOKIR0F0-`Ci6$b=BK$Lu1]ZKVUKW6%*P81sPOa^2GO3e^oZ-:]i/3eVG'$GGq -%SR<p"*[X<8bh^^dEc(JDFm>otIfZg%a!$bZEiHm\nKnRLaeaaNbKCL@Lc2VLH#=-!"u#S*AJYU&HV'VQnR=(S/-G$='$KF"_t/as -%-([aAbGsC5?`mL[)_8O4.UVrm&WqY%k3b"X8ofI[PQ8OBk,UoYaSh?af7h3lpX'hmGgafVi]ch9#BP`fptOHN%:X43S"08<0BaDM -%BkP+Ga:M.CX*'p_plh*P$gJCHY9-#4*I7U"hG!taCX^RWAKOOEo8NkEgR,3QN_iV2=k"flcT_*-m-Jfd$*RR\`KRM+[QD2o\cUpF -%cecDsb]dL,G-ZF2jgfC[[LhhIq"aa)QGOO5@oqX5p$f2OmDVlu]3D!,/)sGKc>W\1[I8E)%[cJf@&D9*JOJFUq,$`r2&"G%<3:ME -%)LUR0n5-O\R;*?D[If6SFlcl"+*jegpIr!f>ipL6g2nr?IAg?D9Js*MQMs^g%`jQSq2'm,Fb>><ncKD&ldjACq2pH4Fb:nso$SV[ -%eicq`kO)I?6e+5V11[-SJVU7JcVuuO*S\CteV;\\J)m;<h/s.Ngp6:%WccWe_hp&8:c0We(*g>Us%p+@E5i\'\3\JHckg.4o";k% -%a$\Cgn9lmoIVB<m;\6=sTNMbZfC2To?bGKp%oqp,\#/\*M`k%a5c/Kb<6YkTB&r;^"Q[iG4KaaS>kk"-?9C";6e0s"-ofHa?l`Bb -%#0nPXGp.Dj#<7(Uf,<*-C^tNN,Au9HT'\4LHs%7J7WA(V/*87q`?IN200G_68:Z%m`ncY4387;R;`6b-_fZ@BE^=rY[F<8,Q0&dP -%c#J'S?^0]-B6,7=(PHF:V#_7"D2c)G%+"&9B<,D<RhMC<!R<UB=RkE<3Pa=n?7fg,ZT2pf/74Y(K4f7aOIZ9'i7T+.CnhL#(nStQ -%c??cPI#lK4fb[D.[Zc--+.g^Xc<ep,lo*d<-$.8bn8+,]UpgYg^p>&q?oTMrRff2*JZa-_2iS!df&9r%O>i.&cF0N'5'Su@D'7_= -%bR`$S5A\-gRMB%=DDM_]Ha+;A5,1"(ME*Q-c#f<ViRsYCZ-emRkZTbLA`RX8)\NgRi!c4%!R>k?XLGd6ZNb&Xhg)\]B5;/6Ee_68 -%Hd?.=DeH+!f`oUAoldbmlr81iCj8+4CThR3cF/(NI5u4Yj4GDCTj56KBBu>AX^9=[%W!-2`T$Q,k;[5-gY);R)j^#;[P:j]"ch:[ -%f23<FrAOLWIQ`SmFF!$=lWGd3!?#P5kI4KJS05hrj8,'u)!?\p?34TkJ/%tp`;"qf13"MX\Q3NTi#9j`Jhc:MLDZWgc/BWsDM>0! -%*b$+8OYGf[LDY5\oN.;BJJdR/*aB72mP$HLS;;16h-VX@HoW]hLD]3&-$(fZ\D#g>3Q1\ZaEhaB3"O;DEQ#A$m-%=Zj*%]&b<_(s -%<#W`7ru>M'EqboT(jBtiho-2f$8)X%pQ$K;kJef.6B#,]U0&1?SC6%Fo<g7`j#/a&,fD\9NUPQ:72A=N0DK-B-XtkBB^mG]j!oo0 -%Ju1++0s:22r"NUFKsJ8b3Q*n4A[)BV\:YT<(I3rFYmEXI(geiK4>1069>2s9(t[3'nMXV?".9ZSY1I'2"u-UZ/+oZj5D'g9bLs9O -%@bd[U1+-NNEi5D2od(g%+ZGYb%V>HlEG'1sc\iWQ7,7_@@XL0mAjhTa@n4cT7>r#F5`G$8C&JHLggtSUrW$D4040/41!]Z.rF1S& -%LUkps7#WpC6S0<5^'"rQ#@^s0@a:#X`YgVAFKtcAc$TP&l%j?1$R!V_N3b970-;odpYP4V&EAf4r`k8!$b=#?`&Pk`E'NMi_5>th -%F+`saieo&$j`jG$GJ`MP^=E(DIgRpUrIWupLiHANpeh^aMLV_QaMknF`43M"[g^3bmR=Q+6B%CH2dIb>*.-Z>T=F&GqZatuoB\+< -%1!W,:=3V?;o:a&:Cq.[[F6IS>*:1jETu.UqZ-2`[k]#ju/.3K$_'Ass3daST&<ljNIg-pr@)H!/]QA8*1,p`C_,$`A'l:B+Z@5)] -%\,fb4,Ns)XE$i[&V4b_kfh3t8rWG8el',d@q@RhZJdnX3`K-\0'l:C>?+CM-h!Cm+jeBX-Cq'oqGp.:>dAQUMk\tm]fJ:h4g7-$Q -%6AO=.@(7J(\?Zp>=G8&r_bGOq91=UdfPnkCh%%fjHkG1mU;PLnh*6Z)B37_iJ.B'-=\*>;&3=(4L@b3:k!b'ONT$GWoJEt<Q[fQI -%[L'^ar^5o=q,,K0"gb0!^b6WIY2&"frgl*I+6LVjiJP=l>d5TK_j/^:o)'Ig>bOTgVR0TM\:P06H%$5DY+.NZ1\)4CE.oKXYEggV -%*Nk2.h)ciS7>EC(8:7X+K+:u:e)sS5-9>DJL>,*a/;+Kll7bGR%X5K;o:a((p18O5E!71u\9hL*3aC>X#0LOlk]#Vpb4toW5_gj_ -%a[C,$#p$2"@=A\,^=7NHU%VXMflAOlYK9F9=5P5Y![RUodn:c;HiM69!7^.b>VhS=;fW$%21NlHjOgnR.T:#0?cIm-VG["=^4pjC -%ja4i+<+bU6of&E-(#t4Wk`d&Q3NZ>@O/(C3fNW<GS6_S_=W?k1W(r@=fn:T<%S>h`5_F+R`inWg6sJuBGF^_\F;Ngl2h9NCYgZ<h -%I[I/ZH=mgOrP4aA]0'\orpa7X0.^F</f7u0$b_sEA5!tL3)aX2_-dtHM'\]NDBbHEMd313bRDm79#mI5([lH)N)nA903DF<*S&5W -%hD`aupb\K)![?/-]Y9UHm4%H<Yh+U0pVdnED.Z\!h'.p"gP:N/>YZ[o5IImHkh>:lQ'f9?2!LAW7,dh"L^.t>l\"Ss3-sH+9Xp]G -%rRJZHjh>DYGf7UBOBhaJV8R_Q:aFZPIS7IO0BnJG'--JSN4<ji-pu.@H.GPq!*iVI>8Ir<f<&:O=tG^:YZpmq3mF.=QU[mSgk0b\ -%G+)`3KF_t/ei:+[AP5+a/$<OPq(kd@(3pE/LR7OqR;mO:kjtBq8LrpM7ahEl9fuLT$bu#*%#MsBWN:1Ga`i\A27]iD61NbMEJ4LX -%(YBOM6H0G*1"rqS&V7d'NaLMJ5Y]hd[Z&f'>d'f$X<k$,O)Y7Yd&s7UiV[fl/HHb)hNrDf:G6uhh"Fp,GM,[.0$?UkqfoU1C_<tS -%1_>Ck.B44SX`#kR`cuBH*'CN-ELnq;d$XXrS.n(l)-E\nph\X%rlVK/]FIulTCZi7M_&Kp`_?[h;na)-Z:o"kOV[cAlEFK'@T,3A -%d63i:7,,OcgLYqDBWUlIc3>22O\'qTZd57a@.M:[Qolu2Pm><2k';67,HJiOE(S^3btNGI40O7\j5#a&*ganO\%WPm.``FAXY7S" -%_2Dk1O>,OLEPs!`Qd*<)=[5!6EhgOEVZX'\VJ395:jC:MNC%+rGlC>QJ0u;=Z'i5dikQ7L+V>a-R"Gh*,t98u#fGG;(Nu`pH`S+J -%qoB`6gPZn'Wm&JnV1g=+e@OB2@/Zh,*A67Aq8G@-CtgA(=Y<S[91GHiN3pZK!TGZb>oBE0NXj:Oo%e?)Z6EYI^R$43CTI2UY9oaV -%n3]^"<Lu<'`k4I3@_&pNkOH*e85mQ;T"gU;Q><PagVu=h\IRL;Y?87+OH:j%(DP&U#)dKeb7Vp2Yo'EPrRHQgZ$aS8Q9i-eLB96M -%Eltk..[JHfDi?V"$]*nkHa1fj15hS<hT!#$B>C^_bY9#ogru#p`eiK#)_Y4ZVgM>HnWmG$l[a?HN&`HZHO'9UZ6aD"anC`+*os?p -%liVjq)=;BirSH>^i\O<P;J/*Y0TXg]SkC^"/1R&8iBm8;_sQgHCAS9A^os6;(%jRe\D<%DQm>TsF)g8hH/NlsR]p#Pfrn2],r-Qa -%I7NjgEjo^+[[<aW7aI>eZ1YomkLU%mjn2MuZ#pfgRZ";78]NqV)!,7L)N6U/R/Pj:G"hdCh3].'9=t2%^CaN:XBMRk2#<V+,;@>0 -%Ha@da%)?.[H`^BU:?C*hF)fZU.5@/Y`g^n-r'KQ<mdX!-Bbg'-SfrO@pBt#1N7=$J()5(IZb;#raBdS,[>MSMk9-5NSZh7l&i5=# -%fiOeV%*61(1lBXhq(Q*fRK5I\PR+e4Zbg#AcE0678;G;G;RL,1nQmW)a5SB)hX$3)Fon8"2gffjbsZ&GPE4apiN0IbC*f%4#>aZH -%X7##Ihjl3&n#S^c`_u,f]=#<7CJ[%GBRPg@Z-(bo>PtOIeiEYS^\Bd*<K]q?kMj&EI9R:QVsVXI<O[0nZu\FCI67#shVN9Wrm-A` -%k@ME@Q#;Yk*Y5/Y:W9dt*f&A'X2EM-`tMYV8GaLT)RiqmX`ND!pNlij-,*aTAO=#@X5i_9WpJSi3BDA0gg]u_\!:i!%R\4^_1&=b -%]dnhteqP!7UW\RVn[NoW(sbD>2^TKu(\M22/=FX[eiF`e5`Y"$>R89o]Ut&U61-SaMdL=0n2?_L[>MuNC2Q>S"d_`GEe2%J/J9]2 -%]=k"eWu&<um_]CrVSq3.e_tD='VW&Cr#=>XC\B7PKLk4bB)R((3/CkMmk.AECmJc.*aIUpHLAuBM0(E:.9DO)2Vot)HUtV>HI$)7 -%?<MKL\l1fnLjX>\D^TK/_i#V6?XA*T';#e!4C!RI\+-rtUiWgW'!InY1@^^K<rTUYE.=5n^$P%^pkV;/Ii#O,PG$*_/>$0ijn#N: -%(8^bGc?LmHc5#jj&pr*`gdg`%!U\Fu21tV^:=I?!^3$4?=BVK3GU^qngE3'^OQrRuhEJ]dGP_HL<QK3#!e7$%JP<T?%d\FI@@QuH -%J\fmCH`I`P_I>nhf@B$nQ`!XjV;o)Qpg#l/"E\)ps"3&Q/UnoBHfmc&>2)3q/[\sVXmpWtdiY/Ud&cZLiO<DRQZ]JQI]d7.\Sc7S -%#_aVohL,:mm37bH*Y#Rc\+_1:A#FPFX/O(@G?FiSnZC<r%LK=SSo"Gt,uMltB!oP(7&UbdCHpD&/i4J^Rtp6l06HPV:T)iY$Al+R -%g>R:Y3R.gA]o.uViU:;,NK%*'C,9jfH5R3FB:u3+`u[t\Vh_7pgh5S/d$YsC*^i-dm+H4Xjq9>]^KljTebl1uLjaV'h[Ve7;NIW( -%B+"Zd5MV7/a)EI)no+J4s5@,"jiR3#)ZaX=#50g@rVB97Z<*Ie=>hqjH7JcGmm=`/Ge-;lG`NuAC/1InLOB!\/tVGNp;50#^(#,G -%5+W\!eG3/?$0^:]%il6`humqBcYjIcp\&a7pu[&eND2pHA[GMDgLr!QhpM(5<(F:+O(>7<Z`V.;R2`HsDQ`(s:J5\,G:eX*O]q9l -%8=Peb_o*qA>V#;sjq<L\r0RV_?+p!n4p&dLdTY!2=*D/OHTth*KC91Pq/+HZkURYqV_59]Vu6)TTi_%Ah%:aCZDF&,2sF,.4Ts^B -%jf,ej'T,&n5+aU^mER]KhH>=Y1tKANjR2uc_Y8,O\EVo-MQN`C.tu":DEp#"$P@NM*FQpM1.!gaYOh'#6j_1La@23.gb%F/hBe'T -%kbEr)l/A^G&H/)ujUg&#^(/'6SPSfPTbANBZ0'V:'0:P()CkbT<mk=E]7fnfD9:8WiHSDY5fE/2)[a2Y'D^SJ7ilSY]%p/cB<L## -%*AicN8cIe!i^M:5mj05s[sH`[iS?GYXs%6KcpNcVI[[e]!Yr@.&4=kc?'5(3KsLC&iGJJS%^FNCZg?5[;+OlN2VPq3I\lgE3br:Z -%F4l?Hl*:-:n=^LV_-(XKI"C\ZfYcCe+mS0s[Jl7PmVQ7jgV`PF@9hc5`LH6W?JVL5ZZ6OHpR*'scquM*PDef'B&`^8m`8H[^ACiS -%\8JpS,CJ5C.Vs5LVeF'#EgL^!6,f9kZnD[MW9rUGS/:tsr3H';>1gr@!krt-&W6mPq1n5n>.43)8=ZP5ag.gcT0C@TmYV75UN5o' -%p*#'QWG2Q_He,Kj8mqT[GJ6#W;1?nPRq/_*/oS%T_<_p*94H7n%N"D3pRmqF#%InCqkIET3\mNWE;Ir)2=J!Bo'NL")mJ7i@R1j7 -%kI56a\(DIC%-2VI]A?M"Y]5:b(A6cnPCj-H4*Ms,eY#`@4I[,D[Vo*;`a5X>&Qlb+na$aJAi]ti#<E9gmq)6pjFfWGk!%e&e40ld -%%Ir[l'kC]-G-dOXAT#0FG?b8+M;1CVPAJQDXl_[8M&VHO49:(-'H5ACJ,Ha!G,.;Tn_:+B.f,oI/++HA*FWQ7InO'hdbRms2:4l8 -%"<TdgW;CtC4+'*[*'JcelIA4#Baf!glqQi\2S-ks%A[.K\*j3'])2!7HhL+fF%]u<ZiS9URb;$:H4/Cl07NOt_2B^*;CMBF#;;M( -%a5nYU^m#ASc_j+3(/=3EO2W8Fg%3YZ(XeMf7t%0tpg:5q_<Zi3^M@u]*:W3Z>j%mYL32b**^c8gWSHKh7BIcbHF&'f*qg\]QdZj6 -%qrq/(1E[IcnRU9)^7WY.PW/^*2nEGphgM#n"t>T&NKeW87Z_*WI=&I[h99d`UQJjS\)!7cS]U'qI5jI5cYDQ77*3R7hE`m,Ibi5] -%S?/![MA<l8XI^6ccb4>`YTIG.g-Z369q2q:O*atg?6^o-4,3@[KcN-B\j/66I2?kZX2Jee*`"`_"1jYLXj's0[eEoh0%9uYa-:/$ -%G,gtRd-)GTNVjQ]ottpZkMK:0.0etr6<rG4LD=!7as0*SpU@mV=P_U=]GH>qp9$f(\C8`&VP@;Vo[0;H`2EJ!HLUT4W-^J\8penC -%4"N'@Qf%d3p2[V#"(kTV[pN4O8o*$K8F&WJrqR$:"+:u6-_ET00Z+H=Cj(MdH5Xiem2Z4Eq*&OE.3\uK=[QGAirnc<[hgJK&&-81 -%DmWY\I!mB)rf[XR='[AMcr&GEKH*DU_c9AX35Nt5s)+lq(C!YP>Cl9/;@oI2iTN-)J=",fZ&n_#Fli8b.A>JgTco,O2NCb3eW4Mh -%Q!Ynt;Z6cdKe55uid*J'Fj^'06oqZ/Q38=;5[p*FfmHsn%CASSXfmjU;B$B9)0pS?G'S8?+7mgtr,umL-2\:VGOLDQmn:,dYFNlF -%>A$7kj^p[Oe*MFkptT-Ci8'1G"N1;g;ksJ%\s'g:j#Pr,nTV=!n's/S(@/"D/,eRIC26%_>KXX/AN04_pXs'HD>MXA9GK]Jq84[k -%.51ROLHNR;cU]-><G=81p5-bHq;+"AK5douZ0CLpYP?]'EPmYKdcF.XI2\4@GC,.QO3Xhol)1tdlpmU>;mX<[BTQ]+`3Xeu\4smW -%g1+cs5hLmQZX;tQ!&55"3H'Or$q5Y>HolKnM>m9^eE%!`2\2"UfhNOn7q\m]:cgVXM>@.eZ1p*I`PqSr^gT3$fIc;:E`Z3%;Go&4 -%j_3X:86t;"SrjMl]-HX[]6MWCcZ,VDmAK5ub/LcT0`,Vhs%^&[3C0R9'o%Z.d9L#1md.UeRh_"XY)m)n)8D!V$6@`,nSP_g6ot?P -%Wpn[5FDt=7hK(HKdcJt>)YQ^Tf0BD7Yn1os[R1q5Q)hn%f#EF)FYN0m/6GR@Q@#tJ$;0@J[X)1G]5cAQh(Qnm&@(,p#B;LbH8C^T -%Lc7c@T2mIumhD7!H0ga\)FY[\ls.4>[Q\">J^)&_Cko=0r[:%AWabk<<MqL(X\%.qe(k,SPKWdfeY<);N&8gb?luHCE9&e40KB9j -%0U1mP`cdH0I5b(^p=O&4`oFae=7IO'q0M9XU?%@3n2mt"GdtBACsl"'fM;U+ii^ek2Y;3o8jX:gJ#oF!(QlVb`E+gA=WV^JHCaU> -%He1FR:"8l0ZZ?;A/#c%o?g.914".Yq9\'>B@ob74gWjoNWP0$)SLa,RF`m`BaE".:eh[Ks6CM\gY^9O"buI!WenT;^B;X_U%ShY3 -%>%sT9Y[U-Cl.=Kjns7cXM?BZk"bX'MYf1)9<qZE[lJV<P*K9+_c#9tdrn:^Jk%ObC"($]HBq0J\OP(3=VOrN`a6i[R1`kMmD!tot -%;e6K37"]2u7cLNEg+KVq,$X."E84!0Mj^XF"In?A<$E44#pI:X'q'KVj5YakjqoYda%(B0pDSnRA./<3Xl?s[M(/^P]"L7U04pdY -%2_p)nYNi/'NI;#b7HniY04sbaYe[D\4!YEpY1U9O*2YhLqMo@cB^e*iFQfCb-MlB]I89ue21uH\nJMYW`^KDU(dMI,1UIW>*UkP/ -%bUrQ>SRSaASHI3gK8O-fK6fPe(fGf\0ccG#K=X2S>7F11.YDaq,\2,?6UEW,*E8u)NEqt_C9h%0KG9`8]Y*W:(13\h6_&l\FV3oP -%`Fd`\]A,pC(idH:3D))Z6B9HOfYcq;204%DH8K`Dc=M9P/F5=6d3jJgKUs=Zo3tfj7dn<nG(-X1'Z=7#0=up""lG$6>@"8YquebB -%c*_BK:<_*SSI?u;3l"B`(A49Hkqh=blt,QicahN'e!-M0<3Z+*=TLBrZE.Scn"u#S[@?U5+WX;;X_]g9\5drO2_NErhGG->8[?>] -%0@in9ZaJp_H5\"A5W^5J(Yq]N&#shp1!bqZjf-G`BM`a[$1Tb,6/bYgq:H9CqtplE#s3H7BHLp3+nak?[gr_L@F?SfO@UX5^Z')1 -%%uIY*RRF]d"*n:"cC]7B>edn+GFLJ$qb"??G=\h59QpGN1]>PO?P_tDJMK9L;U8q5_e2U)GkXphW]liCc)AU<#pmnd<%V%'W^njc -%U3\PX;t%AH)YSkV2U#cKF0^9P(TYqA9UeIKZajSR":n:#UY%r.C::g+Y^/#eY%00/")EBk%fquB@<,TpqF[M8%ndiAG5TTu2?Us* -%_5pd\0&Y/']#JpkNG"WX4M%FnnbrA!b@^)cf\O,1O&K];)s9baDT!iV?R_(n^KdrTb86$I7GHE&"f6"F%A[:FF^3V5RMft[m9G9k -%g:i!K6ba)FiHh]m%O;)d;#J;G/J`9Of9[\?q`q!1T0@^dY2F4YD4]i=aNBM-NI4<Hbu3Eg>`r[eAu1mh2t%GM!A,'epUZn]p*q$Q -%'N_UWhT?;A[\?e8Gi;-F=M,X]YGZE=dP^6tTSa!eYC'9e$?&,D&+pDkTNdRZ?%A19)h&2t11$<=[IW!lY7H!<mh5Gj2uS38gRYIP -%HVn.TDWrcKV6q7:Lt*]>T"iWfZHW_I^p"V]bW0iJn_`r9-g`SV%p"CdYP<kOH;ipqQCO,Ds3HHORI2^&3&]3eNE@(Ng(P$.!oGV> -%ScA="RH)"=aToMn;9XNuh[>E<V>FAk&9%kl2)-k!&47*&AkUZ37EMZHp\>"tDr=D<RuH/A-Sr9,g-sM`n)E0=f-f2sJhMcdf>2gO -%0D0I,\JpX6:qrh7>sI$ZkrPiKHC2;<FgHY;X@"UF'&AJTdXLdJVn^L,?Jhb8Dm>KbnfE$QDPOHE(rsFm"0&h%c7(KhGHVW>r!5%8 -%4)m,<r!5$Ud-*D,@t(Dq!$"Hq%R38g,SR\F*))2TI$pj,js1/t;mP<jb97)V+gKr7b97)_RjfoFYT.*P%V*HsQ9u)Q0$0>:QkMj\ -%5re!Q#,LiP&JPX_W/18be!;jG@*[(C-r,kg/e.#E=7'ilEEK!<leT\7BrZt)\@1,3&M:e^+f7[Ac_\_XZDie\TaR?HCH4FIM7rd5 -%Q^7;@5enWF2nZ_+_pbfgZsr6;RGM<dPg6.@s5Xh:LOCSe5pp1D[D>.B0'_pKDn"pl%=.Nb^"QEY.piVqB0TPkikm:[We9^M6ROg+ -%_h9Df7BK28^bLu$B:j<l0P+Cf;jr?g\^Y:FXf:!)]0&d%L<$jUao2tI>Fmd4H4S@Ud9o8X3?2(rJD?o6rj8-e;6jOjf[>nl-5r)2 -%3/np/meN^DSgQb;8$D+n<_e1_>XGgi/r-#aU=</+K;g`INI>/jB57.hOR8Cu=24P,idW4^>NdcZ37T/=i#^ULSO+tj"u1%o>-cN& -%R,K*a)sC_lQ:&(1*FY]8W*dndKJM(dr/p>=$"'Vc0+@UL7NQ$kLlI?4U=B%-8EfY5+usuj45cSP*C^Aq]$]hR#<-:.VA7@V1"80C -%#2Z@(j:I+tX,L/JB:(dX^'[F9fjgaQhg$3*&6JDEmmd#oaTFr)Pm`S=+)uc&bt2t.Nn3W>)kN,EVVRSV^"K>KVR]p/+["H1rjTM* -%8a^t#p%c>_UgLB^1Z9=U=S+RY5Q&g@H0'D!,SKak!Fi%_,'1-.l1?bR]Xi#+0sS=pil7&4Yp:J$_aO'L%^c6](,fYKd=3/rJ_Sti -%:d7%eL>'AbD(,NtA$u+"HP[P[O(>bos#]!,m+rKrd?;-*T6Xq6^LBuW^6SR$?;:%EMr9mH4?Qu+l,pAl"T@Lq^9_t4b-gu%j6YBA -%&gFX<,-f0j1IAEV+:5?c4[Vot=$7,d)o?h%8,-Z1c3%!>^'bemLm3PW.]V;?%7(IrU]VZ>i:&>UEZ_G"ID[RdKTEniA<Qr%>NY)o -%`!Z$F)Is"QaFR<]'%#PpP<N9UQh%8`qi+#6Rk6Z+D<Q%al)@$?)^*;P2RJ#G`RX,B(Kk'@S.LZgeHtZZ85u*cZt?=BREACu'1qH+ -%&J<4D\c,&V1<YE*D;SZ'I)"tJ0(RD^qhT19?o6E.0@=m:)Ssb(VpQ"T\*OiB1lO4MWCYpMa.^thqZ?[UQ,V%qg-JQCqn\haG!$l? -%N]1/h,l)Cp:QT8LdEaK(+I2$Nf_pK2&1LhY_>mmqlYS'B6:pV;@9hUCBY;HrYVf+hM5o``2]Fmj;hYJ9POk^*6Ej:YNF%.JY0`RG -%Xl7[;1oNP1iEI&*8,\(BrJ-`ad)j[9FR((:%>MRbm5n5rJIpt.67%.U@IXmIqpUaRa@dMp`P=%^Y!/b?*H[FuH-Q&WSuJ#40k@$b -%!MVk28ODL7n"'':e1T&*ZdV&u4q)eq-3ot[MQK8$e1Q3'J`cpKA,*PrabBJhq_\<^;5FSR@k>U(q!W7DGAD,I:$<&84!2B82K9%3 -%_/pC%I7-cD'-qLL8RoD%@X5WpW0\0/ZsiFcmPu3EFTGr>&tub\4:IeC54`I@NeFVq]U<bb&@k$&:s&&Ql7,4m)\uXD&H5ak)IkZO -%FM*(L`_Z%b1_Lgk_n:tc]utjOd<PT--="rF*15,b91D-C0B#TQU;7C)]r=tO3.YJic#ClE%G!j\-&p34<#$s4WLgBn[L8e)3H[ef -%j2pR]F._,g<8j=4Cd!R7cr3C^`HRNCkCK.OF<XW'LQH_/#B?qZ<nMlUN/MVNrfL#<$q109oSIq74,!7W;-;J"rBu,sl_D5NDT(dX -%pn-aP"\_Oqkjn4@,GE*E>4+pm;X2#7kDgrIT0^R1P9csJC@CS4bL\$IUGRA;nP&ghr[PB)^M_^f*3YZ(Nh1[p+FK0\4MjrCZ:ho) -%+Kl[29RAXuMN[ScoEk]^%noqjB0)Wsh]behTWd@n87tI!>@2`5XDXMA9VdK*8Rr_LSYi!!BSS4HUu[Z"6RC&chlnS6g_>JDlc)Vf -%K"7fug[uS4f#$a@Gk-0JD[2jser9u+\RGo.MYk=OY/fqIe9uWP>Ib;`Gug-ZDsbP;kpeNe4qM^;nB$KLRuk/R29D24K/F8H+lp*1 -%LoZPgLUZ[9$lc_7lam[i"P$n(>n@+tl6s>8&>BL5GX&VpbF_Jr2Tbcjd6aH];"lX$4G8^h6H\Lt*`J=h;@"0m$8KqTUiu/>n]'6R -%p8WLb7D)biiZO/>lde++$?mFUj1%npY:%)f5eEtUg3@kIp%?L<=I:Tg[aYZ%?)Dpsd)SIPQ4%\J>n7/&_`E[u<^MC[E\&2QU/>7% -%??(W9!4K9CgFj@)fg'T0NV*]_j?HM'KQ%j&1%5`@W!]sHJrc=hok#f38ld%<pC&Q<0$hCL&7-3L&.!8S9aLFO:`"/lZ.4+j9GI$+ -%YnsHqU%V3%*t@]#9XdCZEOaLEAAA.%QmfU/[T\'j.W1u5MGZO"5),%d8Q!g/<VC"1rOq\MH1]X:\8c&qjUdcfA8<nFpXPt>fb5@Z -%MC_RI&b]Pt*XdtcAdOaX(;lQbojTm:mN"Q;oQmst.W"79(Z%)bp3JM&(fU>D!5F>NL"a$%3UqOhi!`qBMhKffT8,tC2fA/S+=[9[ -%Pl#\TFNB;o>f+(n>0mE__O88T&r)6bL@S&FbWd-rKPdEN$+8)<0-K^3!5gCRK8!;-Q\Rpg=BIFGF$Wc)J5G6]S[(pgK>Bb"UPcUd -%pUgSPpc')8jR6H`3[e1:fi(ko+2j9_;;)C$q9h5^%ZC<a;1r;/.LJ<HK^obakXK)7?u3$6foP#sDa%\u];9jNcZ1MmKi*J>qtA8[ -%]=HK8BcMmg$]SY5mf64jr7tUR7L&@4rW1?m'*!gTr!?0:G7$?c]nKQ#d;2BCc9TL-TS;e%5[Gjag]cQ@_.q3$.CAuZZ">Y=qGQls -%^P)J-B')"2*T^W%;;F^,0eR\DZ<Z`;m<<JlOFVXn^l=V'[t\CtYnL*"$kcTJ_M.EA!.oN>dp(%-PFE0j-L39@[QZhS?N@#k-s5-) -%2YIF95]ZSUS">tmA*(A=9UkjAcYT-:'LW[M$Q*]1%fdiDW#h4Y_+V1rADP?;o$?b\,0shV$o0GjfSbkeIO)KJ@e:bu>c0je\X*-p -%Hi9LQo^"Q-h$M#^4DWa3puLF(^?FCf`j/;o!8!62$GlA9GX`rcB%)aJl(WT6D%u%+M/Rh:^'Z`j[l1(cY`C.FV#COf#fEX:7tp!p -%987dm4A:fh<Uc)XO)[GlO,cBC2s[D5Wpd_8OIBSS)D&Vu/So.H45^AUU8ATJGoTOa@Z&-C^qttJos2]5T"$`oPRZ$l\OW`F>`C8G -%YIDhMl\@.a(uA4/:OknGYI4'hWf8!CS30C\,tjNC=lV'd)OAg->>dJ@\-.sO7Edq^m5K59S@L^E".>WD7GK@A]j$!!SK=Y(&uW#@ -%dRi[+d<_aU/t;tuV>cA'\8e,F$^A_H\p5="hqB$",^Tui1WR;mP3<0YkCc;e%(a4TnHOf'FMC*i=_5t4RkpB@bScTA@jFM!0HDf= -%N[5-VPXs5\NR\&Pr*"(@Zp7FafFQH@YWWc9(d'Ph5qB]Q68Wk@ZqT@r-g][&3\tH;j`Ue+#fGcr%fRi9,&#$ULCjA8#_*NGDk`J> -%OA28=UmWA"?;ed$^%K*`+OinJRUs1uC)cL8p43knF`gt2anFWG;fj[PDK>E#1u/k,9)tN`e.DR11=Wi;0IBZ#4_mVEXQ[qYdGGJ0 -%Zf/M\JeJne9]7=6UE=#!_T1;Q1!uUciTN@"5\D<h"DoN/Vin/DCX03]<:4(_@(]Sk'@(n_%eQ[IU$hjTDQ5c#NTmf_#aX-12S+T3 -%rS=%ALqKpTYR!V9Y?Hoe-(!V"\=.9cq)*TF=9/G2hJB+[s7^]5CMb<4p'LX,+peAbA#/OYe7/*rAk31=Q9^6\#+WU9Cq):mk<Ac+ -%<@rK[4@&8DhgCj1AZ8[8?#-M;p^`-#)DjMP((U65l4nH`91@4/P>tA0gOWf%YD3=Y*KorJV&re82dXC.Ki\b25'?`Paekq*%f:jk -%`PE#'n3F)2fkM8*Y=ge:oO6>\!D1f4)uEFo+bWVbM#77WeU?cl;;!VIVls_FS)&5:O=P60r=&QqU.mSl]X[9>m9rjs/i9NcW(ImS -%kK1D3Ih%&4HPm!>1I2Qlb/Qrei(O[bLO.oK^u.lt"GcMUP$r;V#_I\dD\NW*"@7"rPYj+o'*Q/1Hn6->B7_6cGfhEOS-af*E$&mO -%%*euAE3Lsi?uRFuJj[-W,@GI;#_GG=@j>B#-4#2*WuM:qo5SeI1kWQ40E?_]_'c.XPFar4jRGNT9J)P9K/5e)*(HPnL;B9##S-[8 -%&MQ2>5]H;Qp-rDF^"i%-gJipeXM.Jg%UjMqhr",BT4WRaG-1iu$:fmk-f#!j;bb<BcNeH#QAV0>Q*5hlnY(9"gJ@iqa#u*\*@O=G -%H#o^'\gS,J=K>I[lB4m-J]?g)NJ5BAcSOC$AJZa%=-gFkZcT."N#^3^\3'!JW&[YF20/,M\-W]:m[_$#iF:MJ$1_WQ/q8-'IU\BU -%c8[3tr'3gJ24&61S2i;kD6Mdaj5R[>g<68)Mm,9$JrV9bh/&??G"OQEgG>8CfrIpJ&BkT;gKFn6E_#T69OEm+^[h1nnbOA0-aETF -%l*a06o;je2[g'_,GnTB8'IhD4_(19[R)40!k1<2uiVKFj3s8hKpR.tD%+\'!"<#`:29e`ITE;U[D!-3/Q?JnSIGopLL6peAl@QsH -%,EU)e`HpeD4[^E>WE?M)UN.`gMk)f9q8RTddlkJGmS/I&@OP>#dH[?S[[oe514N5o^"2'I1ZgI-2gt_"Y>a1]#VM&.T3KLIHb$i0 -%B=\H0h9(dfk,EFG06a0Elnm86V3qN*?_r#GIRBE6[r]6)i^7moZiFI%^K`#NhdLI8BP=hSBJb`%ZNjho2g"JAWuL,K+K[2*9`3[0 -%SpLmH,ic&qrc^6]C[G<Ze\8H\jlq!&rMeV_Bsas`C+6QPgN8t'f%"':?*>@"s*cNUeXi6&et]Wd/`cU5S!t>qV07&_\'jWMk20`3 -%F2r3VgKV)O*Y)s=++>L[eY)Y!opRR#/h+Zug0<jhMj;t#lggnd6a9gs[aoqXrHXh2Z*Te?V-D7@d[Kc-(Z/O^Q&:9TZYmm+5Ptn# -%WTb5'nd7ie/p$:Sh6$$ecrnm<b=@ukh5R+bXmNGn]6ILC3@M)l<bb5(7'E[e2<Boa);4=U;C&[KG@W@L\WAJ$N@]^.AZlUTG&nVZ -%O51W2H:8QV<"OgJqWAY!YNt\)\a$<RJ(s@K?prHKBDJ>#Y8R9Uj^!6`V,7[4Ft>3sZL@&D01b!UXKmkG53,O+ZI_cKHM)QVr&ON9 -%NGk@McMHarJ&a15F(.lk=SPqc]qpRV(F_TImQW?;SR:V-ZT[%%[^31l:rQ8S^qhdhic6c%mZoM,F4JZoSrH),[T?B\YQ%ol.:(eI -%bi_0^hX+\hl_a!)=uDc)![\1M_1J3_.dq*iDIIc@>qN3;j!Dh[njWF4Z[R?]]3)$#Im/f-66YJ!+hm=+IoUs+N=,<S&rSj%]f"[7 -%l<EMJSbl,n^;!.ipc?Bf]q<lGI:&SJSRnPYSKh)3I(I[[$:\E;.4eVCL$GPm./se&K>+@;gfsc%4mupNTC2HjV#P`gkga*@q955X -%Yl36SjVS$Crl#$Z$,=^O%sOHLAe3jEm4`bR[?JnE)n!54]j/1Z=[%6II9b(E(Ar=TKPD%HlhBk^c\K_gbN_k<Di[OK3YXdXN>dCF -%Y?sD`WGi`eB2m&1F*i3,leZ-9lM$i<VEUL"#=Qt7L[sfonX&\'m"DpsI$S+c^*BkenoQ`=;%>4jig>e,MQ%!9Jb(0oDX\Gm)l7cM -%[mpa)bZ8`BGgGOt?Yl!)-#tV2^H&KV9Tr?WF,6T<a\d"_]_T'C2.[CH/DVLb\PucrIuE!XO,$h(MRReUhk3j_nTOV!MsZ4kH1nnG -%Agub'I0o3;m2tJu"DXU9h82cE=1bG/mBYJ^dL.5::]Yi[*W'MYBE+;T0.>9@/p"5"no=(=2P>)_=[e4elIONpG%p?Clb14M5mA>E -%)CqkH8\Mu3R;Y:M51cqfgb>7eVU"j5,S420.<N9B^&>&VEUPG?h4/,VKmr5%D>8(e;k\7+lVl5q+gH]5:ZfdUlClqVfum0^W*&<M -%&70V9iKNQh,6.RUQL>,q(TM,B9rtn09)H>.l8Nm@:2Qn)#t]SuSJfHa;!W>*<k>fUqMDbqE?k"/[8M#S`.pMHc#O=L:>]oRc?gYN -%/]34MhbA]0+:P>.^03UQIM\I/C1o!,m!Uk=[5L32FR+\<(L,_U?$DEAX3KYd[t=nm?mjX(K.e8EQB%[:3OBkQndchTci(")LX<me -%MJYL?`A#4Z"me=G.3<-!k*C3+i<"BQYj^T$]:rX"@XkT/(L'i&L\jm>`>Sab>YV&=N]3h!4M5P&\dY-A>dK3E["jiX`8?:A%(CD/ -%YMYSN2q^!no3d/irphrOru&\"#+[X(@SoTIoB%M!ODQZFA+^"bWRC[pbT<D.)r<kL<\XEUGD]Atb]Elsba%Ed1G"Atqhr>tRt^]; -%Q0Xugo@']io#E,CdUhR@hQ+@=BQjXf1tkLEkGM/DX_-grP<fDDSREODS_7@dFF,H;HZ^EA(L+No]Wq&+Wu^0Zp<Z'%kcCCe06=8' -%WB2MspX]7+Md2iRF?Jc%rNKKljVJiUNu;HLNV)4#g2k"R`4un[+5VFJn%./>Sa\4\J'l8M<O]W11%3IVN/hgXV9A,(b@*UE3>Edg -%r8("Ob5-R`f2n!8$X%d_HsN3<?G/YC4m8,*l]3i<_Yac5H9/\)rbPCZ3:GGE\`ic08hG3B9LE\A:qK^XXo.RIS[3\gGP7eR\TcKH -%/g>tqUE?NAq;6*oAVL=^9aBPO>`I)l.;U"@q($sjaLe,4i<F-Fm?Q*)f*aaeD"3b'L&O8XN:*1\Ni;*7TpEP)P]1a]l'78Xed``] -%k6S,u.,BrQY0s7):YNH9h't(EYFL`qmZK7J#rq<TPfU*a,*=<;NtOH27V(^7?\"Y+%Rq^Qjmsm_@q.pT/"L<M,0.]Z,l!mB;'O'# -%LlANd!_VP+(m2n'T1=_X)^DWr4Rd8;O^hlhU>gM@-$!g\8FeGJ"_C?FLkJdB)V"*GOBs0j%/WmGa2Wpoi!fW#-$!g\a@$lL@?ej< -%0d9s+Bf6<Fm,](H8`4tNPfU*a,,&LV!7eas,;KbQ3B9@E*_X/Fru=YlfGKatYmCJ5Nl$V=gA]#UCL:ZMk:]<]HN?S]f&_1AaK[HD -%GqRF:7#m6=BprA#6&?R#,;NI$5;^(j@RSX[_uCjP%&jrH^?8?;a2Wq2M#9bV^9>D0m!4s_jn9u;OVGd+7>W!',Efj^SjeJU)^CM$ -%fOn&*a2Wr%c/i;/,%$3>)1OF`2P8CeTGQOfNVON0Yl+m;T-Z@e@4i425>,`T92/3nr@FrDN12@Fg4#@;Hq$.Tg%MbJjth=I38+#3 -%UujJ^r\2IfZ_Z`iYeBHhrXCc'Gb8[H=]4i/!=hi4r@FrDN4e7_gWu%OcV2OR,hpY.Ra6:&4oaV^YSg9<8[b8)V"*ieq$jdZ?N0!B -%@&"r[PANNWC-KPH9Xt$PWVHr8RrJ7-;Y-<%@l;C%Z_Z_>I[`%=p9URW1\*5`D*L[.4u<)%PAEHVC-JD:(6`T"956ZNQF)LWT-Z@e -%@J)#'Ib&9u>Jf<fNcS'4?1mrYV5C.VfrmV(h9uPq7D=6"BN;)4eCuFm1B6&&O8eSQQ6Wa_>SeJeU/imFZ[An:bZU33CAMB_f7#8/ -%C6+@d<jhme[7I+RS]]o'd9<p$[26>radNAlp'%V==*)m@Fo`(+;RVk.TB![a:O%9T*rl4m5Bb&d1G]M(GkQ2rpYaM<amr`lZO1ar -%rLL5]2KA%IpooI%qul7;93F@-[r^<8U/A\$KQJt1^]^Hp)-a\hC8MtXB9XM1d4.;JnoVn'^&qR5hBZ:^^";3@_\:;U*ciahO.B.d -%3@:DGlq?)i\9Bb6PY,(NGaZAA?/eH])'OD7RZm7CWJIT?Apch=.:EHT;jkGp,i@qI6DjPrWI1=Pg(CLL"@:%/[K+:m\?><Q@=rVB -%9&gOT[ZD-1$PII<Aft;Po<Z8e+.15VJ]il3AX'PV\eLRJ'*6R0ge&i2K<'[-q/7SXN$FQUj/=*9BDelrUo-5_<"TA."eOd`*&f)F -%%BU=H#`$FOJHY;]c$7BR6Q5"c<gCt_5*gdK[VoY4Q_]V/1.q[!U0Nh#nK`R\PB!CRnQdg.g!CfZ97o[R_6QDPCtCc_Ju2\_4r1t7 -%9S0on7CPTk!fnUp]#qpd>];)SOtpY8.5R3HKFa,c!^+S[0U2n:IAqL?"PD'bdfSX!201NrG\]RmXfu!=6/XKBo>%)q]aTf(:P?5d -%O'6+25sb]UY&Bo1m;O=ilq&(pF(!K8UC3B'O64"k-a6aiHn:=!ON\hskX.lSXpg[EH/bKY;A$`r>cbZ5,_h(\(A`c@juA_K:C-Pm -%O?1krs59`L)'FG$pc8qc6?ABKB$I@@qGuB6$8=6)9FEfV6(iL_Fb!>JiFjf"0:iT*a33JQ4=f2?'O7"77QfZH,#ZdCRaGm*$^L9k -%aT8B*#ERm_"a'sTQZRaWMmQ`)QYrS[27I!ddT=YoE.,t6g^1+0:aSV4^oR['[Us'-otePMZAp/4VEXEZNL%ZEXn^[dR.Z5%nh&p' -%n2QdsS;QrTNP@U?8p2pmoUH>8WR/c*QuAjbAf-k$9N6"W-HJ<#qh-uLjcCUd\3u++T!0oBK&B8GSl#5P=.p`;'TFs[%`OS*Oskl+ -%M%*-Z4!$W&'>cG8/&?t!)*)lU50`h<\dc[?&7<e'588aPrIF>Laq;i\*XomTfMYAR$8U%%)i&%L)P0?1a]uCur+:reJ`f*O(2VE? -%E?BIP7:K>L&P.:mK.?G>jFJh3ET0XUM2WHg1*@auecUR2-l*eY+9s)=#WY)r,kMSd0,uO?$_rC8K:.$,-pCZ8WWED5rij]/E7lgQ -%Hlqm@KN2I$03n8fl+7htR$clpf7U`4NtiC%KT=aZL]l&&"0u*60.7-(">'d+-[_c$bnnggFUFcT=@3ujcru/i;?l(9='`QSJ8Ga& -%,SA:TmmZcsYot.PO^M1r`/:]Ac&u[unQ:huVC;;'a+[=kkTaBpfUBk/%]qh4K!,sD1]@pYk/552\D4k-N0AJEEj<nD?V$"/*J0r- -%nH=M#`tJq]^nItDe4j=0?61SWYn/CMmE3ejiZkV$0J!&LLd9sA*LW;:DD2;`;I$(n3+QU,8c7!o6('!QHj39[U]g=U,tf0C@<f:s -%-)DET)K>J9!$O1]ERVd%o^h<RXHU$I0VX<'fuC8<eJL.dZW>L"#rWb2;Z`\T!^SIs,Ut5l;4M\ncWDh'fo[<:%Bq8??U>Te<Ru_b -%;2C#b"-$<iOBGrs\-oMND8E68We6Xg"_RXJk<b9aOV5ITQ/I1P8O,dRE=t_Lm:>km6On-)cmUR;h2mBd6o8`^.8^Ldn=RQd*^CF, -%5PRS?Zmj6LnG%S#5XF?n@?+st@FM<2:5rj$BP!dZ/u?Z&n9c.>es'DVaZ%!BnGM5s9b&Rs>/'LY+_*fD8WQl9Hq7:UWM)tH#ojP2 -%1L,O-&mW6(Ze$uf%uHHYB+WFa#b07r5dT^]!DoZT6bIdU#D*lcm8EKu3M.Hl34PTF#=65#F=]V`TqH%\4]8SHFmF<0(k^RcBsB$a -%TH!#H5)7(E-H]gpA21('"J;nV$.DQ``h9sWKGpin3C;ea(_?m:\Yt@+dNM'!6UX2m+sr:Cc?L+,<PX_-AV"H)FJN\-+UFFJNN5e; -%,0+JoC1(Ba+N\+lFkC-\)KsC`2HA!+#6D\o$D+aPD8fG*J"rqc6[,5OXu/mJ*cTaSenM_81O,'o$q<?05.scE%T@p94(fQUU#lsh -%MsS@2^]St,?t*80P?9.kEi:J#L:/NT;2>a]2M%4c.0+H=QjZM*8!%`b?_thT'?(3'9[Pc/3MQ;+-POlAAn=&o`cpl^R]G\uE-.r[ -%<)Z:LF=F!s+fE#SH8EK@Seb@ScF$WP`s&HSVF7J!>Sq/pO^)7I*l\jGLJsQ!6,br"`=gY0C_?1&#eHHR@)D)>63eq&@T?7nYgX:_ -%80/h@NC&aJ0L\TEAJCZNN<j5^.2(&0?e^^8AsZ$(=\6%3W$qcR7rYIT8<7Qs=?`+WPoBo37G/4]("U6tQ'BVBI;ZjZ:U&&'!R\Si -%Q1@aE;Oq?57i27eD1l^b$-f<AFN?HbTR)VI=!:s^7=oI,Sh%[HcrWo)7a;`l23O70Oj`<2-MVT?.M7VVWXDCl=nIsSdJD6eE'Bp; -%'I3CAGcOP^/<PXrSuK^@DoqCf5adSeKNg>n4<_l!a=D657FhR)#E)"?>[O]]#Zh2,I\ijn-<9_5mR6T'$=?E(WV/*(P0Y'Zn,c/. -%U>Zj_!MZhd0Jo-Y7*6C5a4c9V/#rP^p;A@KPH<-DjJG&j<8:tDr?r'FTgCAR)L;D>EC*6<WiRVs)^a2dE#hQ-V^_G<EGLH[:7;g! -%Rc`%\dNpj1Pmius_&Y9f\k4J`W`<`"fkhlkUre*:1,;@HiB@M.BXC4&4ko$K.!9s@<frPCj?ksA&Gnd55o2MGosrA!A\*?KKUV.P -%j=67tn:lNdNB%`Jl\$:I&Oc!4eCeV6O[es8\.V*)::hr%c)//aN9*V`^r`aDEYR+U&h\sa)l\Lm:!)DC^&cW[ihHAQl#r\Ukp\6@ -%5kE%te*J@1/<h8<j9.<^3_c@oOSTHVLnKIq>qRN'+PIlHG6j'A4R_+oT&+O>4SFSC.Y3WtVo-t4,YpKn4>ARZCi`_2nHBe:[R0QU -%-E=nd\ekZ0Uf;?I)ck8$#UN5Hp-GH-ZshF?S(FkV((uTa_5?7iD]HciK1L#+K5RP?_Asr5XWd.F89#G*kU,?8[#j?iP?`1aKc;*k -%jQGQs?oVO.7Kf$Q!&P[oN04W=Z_;=S$]0SuaI*TI@tC"\Z"P-gkX/4^OIR:9,n[CmK4se>,bDFQjYhh2$n.Dip!ZH>g4UR%MPS4S -%5&GDh,R*Q\po[a/nn_923g/b5X;T/A:*["ZT$(nBRlJ,?Q'.jN/m;"OF1?br$T9L0/=//,QaSb62Hg,?_hG*#Cu-K*-(a0=4PKKX -%,^S/IIiNO/>Z8@[-S`V]=CDZ_.mEVO!@<OV-L068oM)faHhZXTI2R?/(*C`mitXjHeI^'5PHs^\`h&FH-YECr'uFo1dD*WIZ5]"l -%ks\io&sV^nY@n8MZ$h01"Jc%Fru>f9-*=r]?XB(AqY4J9%!k'N/V:).!lH-W$nH0Y<L`[+elDZeo6LB+Y5M/gGq"Hhr0?8#J6+0Q -%*7+&d64@oElPIn!Z.;M6iAP\>UtA2lYI$_&UEP'2j(i5^i;X9IR,j1JU$O%ck0Q"dnqHtbK_,+dQ+VAM>A@I6]@-NNeF`Crl:q5M -%?#BMB[o55VlMoA9C9)LO=FI:.iu@<]?11#mFfTS1pD6\G96C"%FQl^aomb.>&V'~> -%AI9_PrivateDataEnd diff --git a/contrib/bind9/doc/arm/isc-logo.pdf b/contrib/bind9/doc/arm/isc-logo.pdf Binary files differdeleted file mode 100644 index 71d3fdd..0000000 --- a/contrib/bind9/doc/arm/isc-logo.pdf +++ /dev/null diff --git a/contrib/bind9/doc/arm/man.dig.html b/contrib/bind9/doc/arm/man.dig.html deleted file mode 100644 index 7d0e437..0000000 --- a/contrib/bind9/doc/arm/man.dig.html +++ /dev/null @@ -1,665 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: man.dig.html,v 1.2.2.48 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>dig</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages"> -<link rel="prev" href="Bv9ARM.ch10.html" title="Manual pages"> -<link rel="next" href="man.host.html" title="host"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">dig</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td> -<th width="60%" align="center">Manual pages</th> -<td width="20%" align="right">�<a accesskey="n" href="man.host.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="refentry" lang="en"> -<a name="man.dig"></a><div class="titlepage"></div> -<div class="refnamediv"> -<h2>Name</h2> -<p>dig — DNS lookup utility</p> -</div> -<div class="refsynopsisdiv"> -<h2>Synopsis</h2> -<div class="cmdsynopsis"><p><code class="command">dig</code> [@server] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-k <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-q <em class="replaceable"><code>name</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [<code class="option">-y <em class="replaceable"><code>[<span class="optional">hmac:</span>]name:key</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [name] [type] [class] [queryopt...]</p></div> -<div class="cmdsynopsis"><p><code class="command">dig</code> [<code class="option">-h</code>]</p></div> -<div class="cmdsynopsis"><p><code class="command">dig</code> [global-queryopt...] [query...]</p></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2564025"></a><h2>DESCRIPTION</h2> -<p><span><strong class="command">dig</strong></span> - (domain information groper) is a flexible tool - for interrogating DNS name servers. It performs DNS lookups and - displays the answers that are returned from the name server(s) that - were queried. Most DNS administrators use <span><strong class="command">dig</strong></span> to - troubleshoot DNS problems because of its flexibility, ease of use and - clarity of output. Other lookup tools tend to have less functionality - than <span><strong class="command">dig</strong></span>. - </p> -<p> - Although <span><strong class="command">dig</strong></span> is normally used with - command-line - arguments, it also has a batch mode of operation for reading lookup - requests from a file. A brief summary of its command-line arguments - and options is printed when the <code class="option">-h</code> option is given. - Unlike earlier versions, the BIND 9 implementation of - <span><strong class="command">dig</strong></span> allows multiple lookups to be issued - from the - command line. - </p> -<p> - Unless it is told to query a specific name server, - <span><strong class="command">dig</strong></span> will try each of the servers listed - in - <code class="filename">/etc/resolv.conf</code>. - </p> -<p> - When no command line arguments or options are given, will perform an - NS query for "." (the root). - </p> -<p> - It is possible to set per-user defaults for <span><strong class="command">dig</strong></span> via - <code class="filename">${HOME}/.digrc</code>. This file is read and - any options in it - are applied before the command line arguments. - </p> -<p> - The IN and CH class names overlap with the IN and CH top level - domains names. Either use the <code class="option">-t</code> and - <code class="option">-c</code> options to specify the type and class or - use the <code class="option">-q</code> the specify the domain name or - use "IN." and "CH." when looking up these top level domains. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2569712"></a><h2>SIMPLE USAGE</h2> -<p> - A typical invocation of <span><strong class="command">dig</strong></span> looks like: - </p> -<pre class="programlisting"> dig @server name type </pre> -<p> - where: - - </p> -<div class="variablelist"><dl> -<dt><span class="term"><code class="constant">server</code></span></dt> -<dd><p> - is the name or IP address of the name server to query. This can - be an IPv4 - address in dotted-decimal notation or an IPv6 - address in colon-delimited notation. When the supplied - <em class="parameter"><code>server</code></em> argument is a - hostname, - <span><strong class="command">dig</strong></span> resolves that name before - querying that name - server. If no <em class="parameter"><code>server</code></em> - argument is provided, - <span><strong class="command">dig</strong></span> consults <code class="filename">/etc/resolv.conf</code> - and queries the name servers listed there. The reply from the - name - server that responds is displayed. - </p></dd> -<dt><span class="term"><code class="constant">name</code></span></dt> -<dd><p> - is the name of the resource record that is to be looked up. - </p></dd> -<dt><span class="term"><code class="constant">type</code></span></dt> -<dd><p> - indicates what type of query is required — - ANY, A, MX, SIG, etc. - <em class="parameter"><code>type</code></em> can be any valid query - type. If no - <em class="parameter"><code>type</code></em> argument is supplied, - <span><strong class="command">dig</strong></span> will perform a lookup for an - A record. - </p></dd> -</dl></div> -<p> - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2623002"></a><h2>OPTIONS</h2> -<p> - The <code class="option">-b</code> option sets the source IP address of the query - to <em class="parameter"><code>address</code></em>. This must be a valid - address on - one of the host's network interfaces or "0.0.0.0" or "::". An optional - port - may be specified by appending "#<port>" - </p> -<p> - The default query class (IN for internet) is overridden by the - <code class="option">-c</code> option. <em class="parameter"><code>class</code></em> is - any valid - class, such as HS for Hesiod records or CH for Chaosnet records. - </p> -<p> - The <code class="option">-f</code> option makes <span><strong class="command">dig </strong></span> - operate - in batch mode by reading a list of lookup requests to process from the - file <em class="parameter"><code>filename</code></em>. The file contains a - number of - queries, one per line. Each entry in the file should be organized in - the same way they would be presented as queries to - <span><strong class="command">dig</strong></span> using the command-line interface. - </p> -<p> - If a non-standard port number is to be queried, the - <code class="option">-p</code> option is used. <em class="parameter"><code>port#</code></em> is - the port number that <span><strong class="command">dig</strong></span> will send its - queries - instead of the standard DNS port number 53. This option would be used - to test a name server that has been configured to listen for queries - on a non-standard port number. - </p> -<p> - The <code class="option">-4</code> option forces <span><strong class="command">dig</strong></span> - to only - use IPv4 query transport. The <code class="option">-6</code> option forces - <span><strong class="command">dig</strong></span> to only use IPv6 query transport. - </p> -<p> - The <code class="option">-t</code> option sets the query type to - <em class="parameter"><code>type</code></em>. It can be any valid query type - which is - supported in BIND 9. The default query type is "A", unless the - <code class="option">-x</code> option is supplied to indicate a reverse lookup. - A zone transfer can be requested by specifying a type of AXFR. When - an incremental zone transfer (IXFR) is required, - <em class="parameter"><code>type</code></em> is set to <code class="literal">ixfr=N</code>. - The incremental zone transfer will contain the changes made to the zone - since the serial number in the zone's SOA record was - <em class="parameter"><code>N</code></em>. - </p> -<p> - The <code class="option">-q</code> option sets the query name to - <em class="parameter"><code>name</code></em>. This useful do distinguish the - <em class="parameter"><code>name</code></em> from other arguments. - </p> -<p> - Reverse lookups — mapping addresses to names — are simplified by the - <code class="option">-x</code> option. <em class="parameter"><code>addr</code></em> is - an IPv4 - address in dotted-decimal notation, or a colon-delimited IPv6 address. - When this option is used, there is no need to provide the - <em class="parameter"><code>name</code></em>, <em class="parameter"><code>class</code></em> and - <em class="parameter"><code>type</code></em> arguments. <span><strong class="command">dig</strong></span> - automatically performs a lookup for a name like - <code class="literal">11.12.13.10.in-addr.arpa</code> and sets the - query type and - class to PTR and IN respectively. By default, IPv6 addresses are - looked up using nibble format under the IP6.ARPA domain. - To use the older RFC1886 method using the IP6.INT domain - specify the <code class="option">-i</code> option. Bit string labels (RFC2874) - are now experimental and are not attempted. - </p> -<p> - To sign the DNS queries sent by <span><strong class="command">dig</strong></span> and - their - responses using transaction signatures (TSIG), specify a TSIG key file - using the <code class="option">-k</code> option. You can also specify the TSIG - key itself on the command line using the <code class="option">-y</code> option; - <em class="parameter"><code>hmac</code></em> is the type of the TSIG, default HMAC-MD5, - <em class="parameter"><code>name</code></em> is the name of the TSIG key and - <em class="parameter"><code>key</code></em> is the actual key. The key is a - base-64 - encoded string, typically generated by - <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>. - - Caution should be taken when using the <code class="option">-y</code> option on - multi-user systems as the key can be visible in the output from - <span class="citerefentry"><span class="refentrytitle">ps</span>(1)</span> - or in the shell's history file. When - using TSIG authentication with <span><strong class="command">dig</strong></span>, the name - server that is queried needs to know the key and algorithm that is - being used. In BIND, this is done by providing appropriate - <span><strong class="command">key</strong></span> and <span><strong class="command">server</strong></span> statements in - <code class="filename">named.conf</code>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2649413"></a><h2>QUERY OPTIONS</h2> -<p><span><strong class="command">dig</strong></span> - provides a number of query options which affect - the way in which lookups are made and the results displayed. Some of - these set or reset flag bits in the query header, some determine which - sections of the answer get printed, and others determine the timeout - and retry strategies. - </p> -<p> - Each query option is identified by a keyword preceded by a plus sign - (<code class="literal">+</code>). Some keywords set or reset an - option. These may be preceded - by the string <code class="literal">no</code> to negate the meaning of - that keyword. Other - keywords assign values to options like the timeout interval. They - have the form <code class="option">+keyword=value</code>. - The query options are: - - </p> -<div class="variablelist"><dl> -<dt><span class="term"><code class="option">+[no]tcp</code></span></dt> -<dd><p> - Use [do not use] TCP when querying name servers. The default - behavior is to use UDP unless an AXFR or IXFR query is - requested, in - which case a TCP connection is used. - </p></dd> -<dt><span class="term"><code class="option">+[no]vc</code></span></dt> -<dd><p> - Use [do not use] TCP when querying name servers. This alternate - syntax to <em class="parameter"><code>+[no]tcp</code></em> is - provided for backwards - compatibility. The "vc" stands for "virtual circuit". - </p></dd> -<dt><span class="term"><code class="option">+[no]ignore</code></span></dt> -<dd><p> - Ignore truncation in UDP responses instead of retrying with TCP. - By - default, TCP retries are performed. - </p></dd> -<dt><span class="term"><code class="option">+domain=somename</code></span></dt> -<dd><p> - Set the search list to contain the single domain - <em class="parameter"><code>somename</code></em>, as if specified in - a - <span><strong class="command">domain</strong></span> directive in - <code class="filename">/etc/resolv.conf</code>, and enable - search list - processing as if the <em class="parameter"><code>+search</code></em> - option were given. - </p></dd> -<dt><span class="term"><code class="option">+[no]search</code></span></dt> -<dd><p> - Use [do not use] the search list defined by the searchlist or - domain - directive in <code class="filename">resolv.conf</code> (if - any). - The search list is not used by default. - </p></dd> -<dt><span class="term"><code class="option">+[no]showsearch</code></span></dt> -<dd><p> - Perform [do not perform] a search showing intermediate - results. - </p></dd> -<dt><span class="term"><code class="option">+[no]defname</code></span></dt> -<dd><p> - Deprecated, treated as a synonym for <em class="parameter"><code>+[no]search</code></em> - </p></dd> -<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt> -<dd><p> - Sets the "aa" flag in the query. - </p></dd> -<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt> -<dd><p> - A synonym for <em class="parameter"><code>+[no]aaonly</code></em>. - </p></dd> -<dt><span class="term"><code class="option">+[no]adflag</code></span></dt> -<dd><p> - Set [do not set] the AD (authentic data) bit in the query. The - AD bit - currently has a standard meaning only in responses, not in - queries, - but the ability to set the bit in the query is provided for - completeness. - </p></dd> -<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt> -<dd><p> - Set [do not set] the CD (checking disabled) bit in the query. - This - requests the server to not perform DNSSEC validation of - responses. - </p></dd> -<dt><span class="term"><code class="option">+[no]cl</code></span></dt> -<dd><p> - Display [do not display] the CLASS when printing the record. - </p></dd> -<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt> -<dd><p> - Display [do not display] the TTL when printing the record. - </p></dd> -<dt><span class="term"><code class="option">+[no]recurse</code></span></dt> -<dd><p> - Toggle the setting of the RD (recursion desired) bit in the - query. - This bit is set by default, which means <span><strong class="command">dig</strong></span> - normally sends recursive queries. Recursion is automatically - disabled - when the <em class="parameter"><code>+nssearch</code></em> or - <em class="parameter"><code>+trace</code></em> query options are - used. - </p></dd> -<dt><span class="term"><code class="option">+[no]nssearch</code></span></dt> -<dd><p> - When this option is set, <span><strong class="command">dig</strong></span> - attempts to find the - authoritative name servers for the zone containing the name - being - looked up and display the SOA record that each name server has - for the - zone. - </p></dd> -<dt><span class="term"><code class="option">+[no]trace</code></span></dt> -<dd><p> - Toggle tracing of the delegation path from the root name servers - for - the name being looked up. Tracing is disabled by default. When - tracing is enabled, <span><strong class="command">dig</strong></span> makes - iterative queries to - resolve the name being looked up. It will follow referrals from - the - root servers, showing the answer from each server that was used - to - resolve the lookup. - </p></dd> -<dt><span class="term"><code class="option">+[no]cmd</code></span></dt> -<dd><p> - Toggles the printing of the initial comment in the output - identifying - the version of <span><strong class="command">dig</strong></span> and the query - options that have - been applied. This comment is printed by default. - </p></dd> -<dt><span class="term"><code class="option">+[no]short</code></span></dt> -<dd><p> - Provide a terse answer. The default is to print the answer in a - verbose form. - </p></dd> -<dt><span class="term"><code class="option">+[no]identify</code></span></dt> -<dd><p> - Show [or do not show] the IP address and port number that - supplied the - answer when the <em class="parameter"><code>+short</code></em> option - is enabled. If - short form answers are requested, the default is not to show the - source address and port number of the server that provided the - answer. - </p></dd> -<dt><span class="term"><code class="option">+[no]comments</code></span></dt> -<dd><p> - Toggle the display of comment lines in the output. The default - is to - print comments. - </p></dd> -<dt><span class="term"><code class="option">+[no]stats</code></span></dt> -<dd><p> - This query option toggles the printing of statistics: when the - query - was made, the size of the reply and so on. The default - behavior is - to print the query statistics. - </p></dd> -<dt><span class="term"><code class="option">+[no]qr</code></span></dt> -<dd><p> - Print [do not print] the query as it is sent. - By default, the query is not printed. - </p></dd> -<dt><span class="term"><code class="option">+[no]question</code></span></dt> -<dd><p> - Print [do not print] the question section of a query when an - answer is - returned. The default is to print the question section as a - comment. - </p></dd> -<dt><span class="term"><code class="option">+[no]answer</code></span></dt> -<dd><p> - Display [do not display] the answer section of a reply. The - default - is to display it. - </p></dd> -<dt><span class="term"><code class="option">+[no]authority</code></span></dt> -<dd><p> - Display [do not display] the authority section of a reply. The - default is to display it. - </p></dd> -<dt><span class="term"><code class="option">+[no]additional</code></span></dt> -<dd><p> - Display [do not display] the additional section of a reply. - The default is to display it. - </p></dd> -<dt><span class="term"><code class="option">+[no]all</code></span></dt> -<dd><p> - Set or clear all display flags. - </p></dd> -<dt><span class="term"><code class="option">+time=T</code></span></dt> -<dd><p> - - Sets the timeout for a query to - <em class="parameter"><code>T</code></em> seconds. The default - timeout is 5 seconds. - An attempt to set <em class="parameter"><code>T</code></em> to less - than 1 will result - in a query timeout of 1 second being applied. - </p></dd> -<dt><span class="term"><code class="option">+tries=T</code></span></dt> -<dd><p> - Sets the number of times to try UDP queries to server to - <em class="parameter"><code>T</code></em> instead of the default, 3. - If - <em class="parameter"><code>T</code></em> is less than or equal to - zero, the number of - tries is silently rounded up to 1. - </p></dd> -<dt><span class="term"><code class="option">+retry=T</code></span></dt> -<dd><p> - Sets the number of times to retry UDP queries to server to - <em class="parameter"><code>T</code></em> instead of the default, 2. - Unlike - <em class="parameter"><code>+tries</code></em>, this does not include - the initial - query. - </p></dd> -<dt><span class="term"><code class="option">+ndots=D</code></span></dt> -<dd><p> - Set the number of dots that have to appear in - <em class="parameter"><code>name</code></em> to <em class="parameter"><code>D</code></em> for it to be - considered absolute. The default value is that defined using - the - ndots statement in <code class="filename">/etc/resolv.conf</code>, or 1 if no - ndots statement is present. Names with fewer dots are - interpreted as - relative names and will be searched for in the domains listed in - the - <code class="option">search</code> or <code class="option">domain</code> directive in - <code class="filename">/etc/resolv.conf</code>. - </p></dd> -<dt><span class="term"><code class="option">+bufsize=B</code></span></dt> -<dd><p> - Set the UDP message buffer size advertised using EDNS0 to - <em class="parameter"><code>B</code></em> bytes. The maximum and minimum sizes - of this buffer are 65535 and 0 respectively. Values outside - this range are rounded up or down appropriately. - Values other than zero will cause a EDNS query to be sent. - </p></dd> -<dt><span class="term"><code class="option">+edns=#</code></span></dt> -<dd><p> - Specify the EDNS version to query with. Valid values - are 0 to 255. Setting the EDNS version will cause a - EDNS query to be sent. <code class="option">+noedns</code> clears the - remembered EDNS version. - </p></dd> -<dt><span class="term"><code class="option">+[no]multiline</code></span></dt> -<dd><p> - Print records like the SOA records in a verbose multi-line - format with human-readable comments. The default is to print - each record on a single line, to facilitate machine parsing - of the <span><strong class="command">dig</strong></span> output. - </p></dd> -<dt><span class="term"><code class="option">+[no]fail</code></span></dt> -<dd><p> - Do not try the next server if you receive a SERVFAIL. The - default is - to not try the next server which is the reverse of normal stub - resolver - behavior. - </p></dd> -<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt> -<dd><p> - Attempt to display the contents of messages which are malformed. - The default is to not display malformed answers. - </p></dd> -<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt> -<dd><p> - Requests DNSSEC records be sent by setting the DNSSEC OK bit - (DO) - in the OPT record in the additional section of the query. - </p></dd> -<dt><span class="term"><code class="option">+[no]sigchase</code></span></dt> -<dd><p> - Chase DNSSEC signature chains. Requires dig be compiled with - -DDIG_SIGCHASE. - </p></dd> -<dt><span class="term"><code class="option">+trusted-key=####</code></span></dt> -<dd> -<p> - Specifies a file containing trusted keys to be used with - <code class="option">+sigchase</code>. Each DNSKEY record must be - on its own line. - </p> -<p> - If not specified <span><strong class="command">dig</strong></span> will look for - <code class="filename">/etc/trusted-key.key</code> then - <code class="filename">trusted-key.key</code> in the current directory. - </p> -<p> - Requires dig be compiled with -DDIG_SIGCHASE. - </p> -</dd> -<dt><span class="term"><code class="option">+[no]topdown</code></span></dt> -<dd><p> - When chasing DNSSEC signature chains perform a top-down - validation. - Requires dig be compiled with -DDIG_SIGCHASE. - </p></dd> -</dl></div> -<p> - - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2650468"></a><h2>MULTIPLE QUERIES</h2> -<p> - The BIND 9 implementation of <span><strong class="command">dig </strong></span> - supports - specifying multiple queries on the command line (in addition to - supporting the <code class="option">-f</code> batch file option). Each of those - queries can be supplied with its own set of flags, options and query - options. - </p> -<p> - In this case, each <em class="parameter"><code>query</code></em> argument - represent an - individual query in the command-line syntax described above. Each - consists of any of the standard options and flags, the name to be - looked up, an optional query type and class and any query options that - should be applied to that query. - </p> -<p> - A global set of query options, which should be applied to all queries, - can also be supplied. These global query options must precede the - first tuple of name, class, type, options, flags, and query options - supplied on the command line. Any global query options (except - the <code class="option">+[no]cmd</code> option) can be - overridden by a query-specific set of query options. For example: - </p> -<pre class="programlisting"> -dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr -</pre> -<p> - shows how <span><strong class="command">dig</strong></span> could be used from the - command line - to make three lookups: an ANY query for <code class="literal">www.isc.org</code>, a - reverse lookup of 127.0.0.1 and a query for the NS records of - <code class="literal">isc.org</code>. - - A global query option of <em class="parameter"><code>+qr</code></em> is - applied, so - that <span><strong class="command">dig</strong></span> shows the initial query it made - for each - lookup. The final query has a local query option of - <em class="parameter"><code>+noqr</code></em> which means that <span><strong class="command">dig</strong></span> - will not print the initial query when it looks up the NS records for - <code class="literal">isc.org</code>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2650553"></a><h2>IDN SUPPORT</h2> -<p> - If <span><strong class="command">dig</strong></span> has been built with IDN (internationalized - domain name) support, it can accept and display non-ASCII domain names. - <span><strong class="command">dig</strong></span> appropriately converts character encoding of - domain name before sending a request to DNS server or displaying a - reply from the server. - If you'd like to turn off the IDN support for some reason, defines - the <code class="envar">IDN_DISABLE</code> environment variable. - The IDN support is disabled if the variable is set when - <span><strong class="command">dig</strong></span> runs. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2650582"></a><h2>FILES</h2> -<p><code class="filename">/etc/resolv.conf</code> - </p> -<p><code class="filename">${HOME}/.digrc</code> - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2650603"></a><h2>SEE ALSO</h2> -<p><span class="citerefentry"><span class="refentrytitle">host</span>(1)</span>, - <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, - <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, - <em class="citetitle">RFC1035</em>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2650641"></a><h2>BUGS</h2> -<p> - There are probably too many query options. - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="Bv9ARM.ch10.html">Prev</a>�</td> -<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td> -<td width="40%" align="right">�<a accesskey="n" href="man.host.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">Manual pages�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�host</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/man.dnssec-keygen.html b/contrib/bind9/doc/arm/man.dnssec-keygen.html deleted file mode 100644 index 3b8d2d8..0000000 --- a/contrib/bind9/doc/arm/man.dnssec-keygen.html +++ /dev/null @@ -1,269 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: man.dnssec-keygen.html,v 1.2.2.47 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>dnssec-keygen</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages"> -<link rel="prev" href="man.host.html" title="host"> -<link rel="next" href="man.dnssec-signzone.html" title="dnssec-signzone"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center"><span class="application">dnssec-keygen</span></th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="man.host.html">Prev</a>�</td> -<th width="60%" align="center">Manual pages</th> -<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-signzone.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="refentry" lang="en"> -<a name="man.dnssec-keygen"></a><div class="titlepage"></div> -<div class="refnamediv"> -<h2>Name</h2> -<p><span class="application">dnssec-keygen</span> — DNSSEC key generation tool</p> -</div> -<div class="refsynopsisdiv"> -<h2>Synopsis</h2> -<div class="cmdsynopsis"><p><code class="command">dnssec-keygen</code> {-a <em class="replaceable"><code>algorithm</code></em>} {-b <em class="replaceable"><code>keysize</code></em>} {-n <em class="replaceable"><code>nametype</code></em>} [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-e</code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-g <em class="replaceable"><code>generator</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k</code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-s <em class="replaceable"><code>strength</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] {name}</p></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2597830"></a><h2>DESCRIPTION</h2> -<p><span><strong class="command">dnssec-keygen</strong></span> - generates keys for DNSSEC (Secure DNS), as defined in RFC 2535 - and RFC 4034. It can also generate keys for use with - TSIG (Transaction Signatures), as defined in RFC 2845. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2597844"></a><h2>OPTIONS</h2> -<div class="variablelist"><dl> -<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt> -<dd> -<p> - Selects the cryptographic algorithm. The value of - <code class="option">algorithm</code> must be one of RSAMD5 (RSA) or RSASHA1, - DSA, DH (Diffie Hellman), or HMAC-MD5. These values - are case insensitive. - </p> -<p> - Note 1: that for DNSSEC, RSASHA1 is a mandatory to implement - algorithm, - and DSA is recommended. For TSIG, HMAC-MD5 is mandatory. - </p> -<p> - Note 2: HMAC-MD5 and DH automatically set the -k flag. - </p> -</dd> -<dt><span class="term">-b <em class="replaceable"><code>keysize</code></em></span></dt> -<dd><p> - Specifies the number of bits in the key. The choice of key - size depends on the algorithm used. RSAMD5 / RSASHA1 keys must be - between - 512 and 2048 bits. Diffie Hellman keys must be between - 128 and 4096 bits. DSA keys must be between 512 and 1024 - bits and an exact multiple of 64. HMAC-MD5 keys must be - between 1 and 512 bits. - </p></dd> -<dt><span class="term">-n <em class="replaceable"><code>nametype</code></em></span></dt> -<dd><p> - Specifies the owner type of the key. The value of - <code class="option">nametype</code> must either be ZONE (for a DNSSEC - zone key (KEY/DNSKEY)), HOST or ENTITY (for a key associated with - a host (KEY)), - USER (for a key associated with a user(KEY)) or OTHER (DNSKEY). - These values are - case insensitive. - </p></dd> -<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt> -<dd><p> - Indicates that the DNS record containing the key should have - the specified class. If not specified, class IN is used. - </p></dd> -<dt><span class="term">-e</span></dt> -<dd><p> - If generating an RSAMD5/RSASHA1 key, use a large exponent. - </p></dd> -<dt><span class="term">-f <em class="replaceable"><code>flag</code></em></span></dt> -<dd><p> - Set the specified flag in the flag field of the KEY/DNSKEY record. - The only recognized flag is KSK (Key Signing Key) DNSKEY. - </p></dd> -<dt><span class="term">-g <em class="replaceable"><code>generator</code></em></span></dt> -<dd><p> - If generating a Diffie Hellman key, use this generator. - Allowed values are 2 and 5. If no generator - is specified, a known prime from RFC 2539 will be used - if possible; otherwise the default is 2. - </p></dd> -<dt><span class="term">-h</span></dt> -<dd><p> - Prints a short summary of the options and arguments to - <span><strong class="command">dnssec-keygen</strong></span>. - </p></dd> -<dt><span class="term">-k</span></dt> -<dd><p> - Generate KEY records rather than DNSKEY records. - </p></dd> -<dt><span class="term">-p <em class="replaceable"><code>protocol</code></em></span></dt> -<dd><p> - Sets the protocol value for the generated key. The protocol - is a number between 0 and 255. The default is 3 (DNSSEC). - Other possible values for this argument are listed in - RFC 2535 and its successors. - </p></dd> -<dt><span class="term">-r <em class="replaceable"><code>randomdev</code></em></span></dt> -<dd><p> - Specifies the source of randomness. If the operating - system does not provide a <code class="filename">/dev/random</code> - or equivalent device, the default source of randomness - is keyboard input. <code class="filename">randomdev</code> - specifies - the name of a character device or file containing random - data to be used instead of the default. The special value - <code class="filename">keyboard</code> indicates that keyboard - input should be used. - </p></dd> -<dt><span class="term">-s <em class="replaceable"><code>strength</code></em></span></dt> -<dd><p> - Specifies the strength value of the key. The strength is - a number between 0 and 15, and currently has no defined - purpose in DNSSEC. - </p></dd> -<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt> -<dd><p> - Indicates the use of the key. <code class="option">type</code> must be - one of AUTHCONF, NOAUTHCONF, NOAUTH, or NOCONF. The default - is AUTHCONF. AUTH refers to the ability to authenticate - data, and CONF the ability to encrypt data. - </p></dd> -<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt> -<dd><p> - Sets the debugging level. - </p></dd> -</dl></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2598187"></a><h2>GENERATED KEYS</h2> -<p> - When <span><strong class="command">dnssec-keygen</strong></span> completes - successfully, - it prints a string of the form <code class="filename">Knnnn.+aaa+iiiii</code> - to the standard output. This is an identification string for - the key it has generated. - </p> -<div class="itemizedlist"><ul type="disc"> -<li><p><code class="filename">nnnn</code> is the key name. - </p></li> -<li><p><code class="filename">aaa</code> is the numeric representation - of the - algorithm. - </p></li> -<li><p><code class="filename">iiiii</code> is the key identifier (or - footprint). - </p></li> -</ul></div> -<p><span><strong class="command">dnssec-keygen</strong></span> - creates two files, with names based - on the printed string. <code class="filename">Knnnn.+aaa+iiiii.key</code> - contains the public key, and - <code class="filename">Knnnn.+aaa+iiiii.private</code> contains the - private - key. - </p> -<p> - The <code class="filename">.key</code> file contains a DNS KEY record - that - can be inserted into a zone file (directly or with a $INCLUDE - statement). - </p> -<p> - The <code class="filename">.private</code> file contains - algorithm-specific - fields. For obvious security reasons, this file does not have - general read permission. - </p> -<p> - Both <code class="filename">.key</code> and <code class="filename">.private</code> - files are generated for symmetric encryption algorithms such as - HMAC-MD5, even though the public and private key are equivalent. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2598295"></a><h2>EXAMPLE</h2> -<p> - To generate a 768-bit DSA key for the domain - <strong class="userinput"><code>example.com</code></strong>, the following command would be - issued: - </p> -<p><strong class="userinput"><code>dnssec-keygen -a DSA -b 768 -n ZONE example.com</code></strong> - </p> -<p> - The command would print a string of the form: - </p> -<p><strong class="userinput"><code>Kexample.com.+003+26160</code></strong> - </p> -<p> - In this example, <span><strong class="command">dnssec-keygen</strong></span> creates - the files <code class="filename">Kexample.com.+003+26160.key</code> - and - <code class="filename">Kexample.com.+003+26160.private</code>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2600195"></a><h2>SEE ALSO</h2> -<p><span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, - <em class="citetitle">BIND 9 Administrator Reference Manual</em>, - <em class="citetitle">RFC 2535</em>, - <em class="citetitle">RFC 2845</em>, - <em class="citetitle">RFC 2539</em>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2600226"></a><h2>AUTHOR</h2> -<p><span class="corpauthor">Internet Systems Consortium</span> - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="man.host.html">Prev</a>�</td> -<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td> -<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-signzone.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">host�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�<span class="application">dnssec-signzone</span> -</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/man.dnssec-signzone.html b/contrib/bind9/doc/arm/man.dnssec-signzone.html deleted file mode 100644 index 2d0ce06..0000000 --- a/contrib/bind9/doc/arm/man.dnssec-signzone.html +++ /dev/null @@ -1,323 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: man.dnssec-signzone.html,v 1.2.2.46 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>dnssec-signzone</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages"> -<link rel="prev" href="man.dnssec-keygen.html" title="dnssec-keygen"> -<link rel="next" href="man.named-checkconf.html" title="named-checkconf"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center"><span class="application">dnssec-signzone</span></th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td> -<th width="60%" align="center">Manual pages</th> -<td width="20%" align="right">�<a accesskey="n" href="man.named-checkconf.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="refentry" lang="en"> -<a name="man.dnssec-signzone"></a><div class="titlepage"></div> -<div class="refnamediv"> -<h2>Name</h2> -<p><span class="application">dnssec-signzone</span> — DNSSEC zone signing tool</p> -</div> -<div class="refsynopsisdiv"> -<h2>Synopsis</h2> -<div class="cmdsynopsis"><p><code class="command">dnssec-signzone</code> [<code class="option">-a</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-d <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-e <em class="replaceable"><code>end-time</code></em></code>] [<code class="option">-f <em class="replaceable"><code>output-file</code></em></code>] [<code class="option">-g</code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>key</code></em></code>] [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-i <em class="replaceable"><code>interval</code></em></code>] [<code class="option">-I <em class="replaceable"><code>input-format</code></em></code>] [<code class="option">-j <em class="replaceable"><code>jitter</code></em></code>] [<code class="option">-N <em class="replaceable"><code>soa-serial-format</code></em></code>] [<code class="option">-o <em class="replaceable"><code>origin</code></em></code>] [<code class="option">-O <em class="replaceable"><code>output-format</code></em></code>] [<code class="option">-p</code>] [<code class="option">-r <em class="replaceable"><code>randomdev</code></em></code>] [<code class="option">-s <em class="replaceable"><code>start-time</code></em></code>] [<code class="option">-t</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-z</code>] {zonefile} [key...]</p></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2598823"></a><h2>DESCRIPTION</h2> -<p><span><strong class="command">dnssec-signzone</strong></span> - signs a zone. It generates - NSEC and RRSIG records and produces a signed version of the - zone. The security status of delegations from the signed zone - (that is, whether the child zones are secure or not) is - determined by the presence or absence of a - <code class="filename">keyset</code> file for each child zone. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2598842"></a><h2>OPTIONS</h2> -<div class="variablelist"><dl> -<dt><span class="term">-a</span></dt> -<dd><p> - Verify all generated signatures. - </p></dd> -<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt> -<dd><p> - Specifies the DNS class of the zone. - </p></dd> -<dt><span class="term">-k <em class="replaceable"><code>key</code></em></span></dt> -<dd><p> - Treat specified key as a key signing key ignoring any - key flags. This option may be specified multiple times. - </p></dd> -<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt> -<dd><p> - Generate a DLV set in addition to the key (DNSKEY) and DS sets. - The domain is appended to the name of the records. - </p></dd> -<dt><span class="term">-d <em class="replaceable"><code>directory</code></em></span></dt> -<dd><p> - Look for <code class="filename">keyset</code> files in - <code class="option">directory</code> as the directory - </p></dd> -<dt><span class="term">-g</span></dt> -<dd><p> - Generate DS records for child zones from keyset files. - Existing DS records will be removed. - </p></dd> -<dt><span class="term">-s <em class="replaceable"><code>start-time</code></em></span></dt> -<dd><p> - Specify the date and time when the generated RRSIG records - become valid. This can be either an absolute or relative - time. An absolute start time is indicated by a number - in YYYYMMDDHHMMSS notation; 20000530144500 denotes - 14:45:00 UTC on May 30th, 2000. A relative start time is - indicated by +N, which is N seconds from the current time. - If no <code class="option">start-time</code> is specified, the current - time minus 1 hour (to allow for clock skew) is used. - </p></dd> -<dt><span class="term">-e <em class="replaceable"><code>end-time</code></em></span></dt> -<dd><p> - Specify the date and time when the generated RRSIG records - expire. As with <code class="option">start-time</code>, an absolute - time is indicated in YYYYMMDDHHMMSS notation. A time relative - to the start time is indicated with +N, which is N seconds from - the start time. A time relative to the current time is - indicated with now+N. If no <code class="option">end-time</code> is - specified, 30 days from the start time is used as a default. - </p></dd> -<dt><span class="term">-f <em class="replaceable"><code>output-file</code></em></span></dt> -<dd><p> - The name of the output file containing the signed zone. The - default is to append <code class="filename">.signed</code> to - the - input filename. - </p></dd> -<dt><span class="term">-h</span></dt> -<dd><p> - Prints a short summary of the options and arguments to - <span><strong class="command">dnssec-signzone</strong></span>. - </p></dd> -<dt><span class="term">-i <em class="replaceable"><code>interval</code></em></span></dt> -<dd> -<p> - When a previously-signed zone is passed as input, records - may be resigned. The <code class="option">interval</code> option - specifies the cycle interval as an offset from the current - time (in seconds). If a RRSIG record expires after the - cycle interval, it is retained. Otherwise, it is considered - to be expiring soon, and it will be replaced. - </p> -<p> - The default cycle interval is one quarter of the difference - between the signature end and start times. So if neither - <code class="option">end-time</code> or <code class="option">start-time</code> - are specified, <span><strong class="command">dnssec-signzone</strong></span> - generates - signatures that are valid for 30 days, with a cycle - interval of 7.5 days. Therefore, if any existing RRSIG records - are due to expire in less than 7.5 days, they would be - replaced. - </p> -</dd> -<dt><span class="term">-I <em class="replaceable"><code>input-format</code></em></span></dt> -<dd><p> - The format of the input zone file. - Possible formats are <span><strong class="command">"text"</strong></span> (default) - and <span><strong class="command">"raw"</strong></span>. - This option is primarily intended to be used for dynamic - signed zones so that the dumped zone file in a non-text - format containing updates can be signed directly. - The use of this option does not make much sense for - non-dynamic zones. - </p></dd> -<dt><span class="term">-j <em class="replaceable"><code>jitter</code></em></span></dt> -<dd> -<p> - When signing a zone with a fixed signature lifetime, all - RRSIG records issued at the time of signing expires - simultaneously. If the zone is incrementally signed, i.e. - a previously-signed zone is passed as input to the signer, - all expired signatures have to be regenerated at about the - same time. The <code class="option">jitter</code> option specifies a - jitter window that will be used to randomize the signature - expire time, thus spreading incremental signature - regeneration over time. - </p> -<p> - Signature lifetime jitter also to some extent benefits - validators and servers by spreading out cache expiration, - i.e. if large numbers of RRSIGs don't expire at the same time - from all caches there will be less congestion than if all - validators need to refetch at mostly the same time. - </p> -</dd> -<dt><span class="term">-n <em class="replaceable"><code>ncpus</code></em></span></dt> -<dd><p> - Specifies the number of threads to use. By default, one - thread is started for each detected CPU. - </p></dd> -<dt><span class="term">-N <em class="replaceable"><code>soa-serial-format</code></em></span></dt> -<dd> -<p> - The SOA serial number format of the signed zone. - Possible formats are <span><strong class="command">"keep"</strong></span> (default), - <span><strong class="command">"increment"</strong></span> and - <span><strong class="command">"unixtime"</strong></span>. - </p> -<div class="variablelist"><dl> -<dt><span class="term"><span><strong class="command">"keep"</strong></span></span></dt> -<dd><p>Do not modify the SOA serial number.</p></dd> -<dt><span class="term"><span><strong class="command">"increment"</strong></span></span></dt> -<dd><p>Increment the SOA serial number using RFC 1982 - arithmetics.</p></dd> -<dt><span class="term"><span><strong class="command">"unixtime"</strong></span></span></dt> -<dd><p>Set the SOA serial number to the number of seconds - since epoch.</p></dd> -</dl></div> -</dd> -<dt><span class="term">-o <em class="replaceable"><code>origin</code></em></span></dt> -<dd><p> - The zone origin. If not specified, the name of the zone file - is assumed to be the origin. - </p></dd> -<dt><span class="term">-O <em class="replaceable"><code>output-format</code></em></span></dt> -<dd><p> - The format of the output file containing the signed zone. - Possible formats are <span><strong class="command">"text"</strong></span> (default) - and <span><strong class="command">"raw"</strong></span>. - </p></dd> -<dt><span class="term">-p</span></dt> -<dd><p> - Use pseudo-random data when signing the zone. This is faster, - but less secure, than using real random data. This option - may be useful when signing large zones or when the entropy - source is limited. - </p></dd> -<dt><span class="term">-r <em class="replaceable"><code>randomdev</code></em></span></dt> -<dd><p> - Specifies the source of randomness. If the operating - system does not provide a <code class="filename">/dev/random</code> - or equivalent device, the default source of randomness - is keyboard input. <code class="filename">randomdev</code> - specifies - the name of a character device or file containing random - data to be used instead of the default. The special value - <code class="filename">keyboard</code> indicates that keyboard - input should be used. - </p></dd> -<dt><span class="term">-t</span></dt> -<dd><p> - Print statistics at completion. - </p></dd> -<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt> -<dd><p> - Sets the debugging level. - </p></dd> -<dt><span class="term">-z</span></dt> -<dd><p> - Ignore KSK flag on key when determining what to sign. - </p></dd> -<dt><span class="term">zonefile</span></dt> -<dd><p> - The file containing the zone to be signed. - </p></dd> -<dt><span class="term">key</span></dt> -<dd><p> - Specify which keys should be used to sign the zone. If - no keys are specified, then the zone will be examined - for DNSKEY records at the zone apex. If these are found and - there are matching private keys, in the current directory, - then these will be used for signing. - </p></dd> -</dl></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2641307"></a><h2>EXAMPLE</h2> -<p> - The following command signs the <strong class="userinput"><code>example.com</code></strong> - zone with the DSA key generated by <span><strong class="command">dnssec-keygen</strong></span> - (Kexample.com.+003+17247). The zone's keys must be in the master - file (<code class="filename">db.example.com</code>). This invocation looks - for <code class="filename">keyset</code> files, in the current directory, - so that DS records can be generated from them (<span><strong class="command">-g</strong></span>). - </p> -<pre class="programlisting">% dnssec-signzone -g -o example.com db.example.com \ -Kexample.com.+003+17247 -db.example.com.signed -%</pre> -<p> - In the above example, <span><strong class="command">dnssec-signzone</strong></span> creates - the file <code class="filename">db.example.com.signed</code>. This - file should be referenced in a zone statement in a - <code class="filename">named.conf</code> file. - </p> -<p> - This example re-signs a previously signed zone with default parameters. - The private keys are assumed to be in the current directory. - </p> -<pre class="programlisting">% cp db.example.com.signed db.example.com -% dnssec-signzone -o example.com db.example.com -db.example.com.signed -%</pre> -</div> -<div class="refsect1" lang="en"> -<a name="id2641380"></a><h2>SEE ALSO</h2> -<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, - <em class="citetitle">BIND 9 Administrator Reference Manual</em>, - <em class="citetitle">RFC 2535</em>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2641404"></a><h2>AUTHOR</h2> -<p><span class="corpauthor">Internet Systems Consortium</span> - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td> -<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td> -<td width="40%" align="right">�<a accesskey="n" href="man.named-checkconf.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top"> -<span class="application">dnssec-keygen</span>�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�<span class="application">named-checkconf</span> -</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/man.host.html b/contrib/bind9/doc/arm/man.host.html deleted file mode 100644 index 6bc2188..0000000 --- a/contrib/bind9/doc/arm/man.host.html +++ /dev/null @@ -1,249 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: man.host.html,v 1.2.2.46 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>host</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages"> -<link rel="prev" href="man.dig.html" title="dig"> -<link rel="next" href="man.dnssec-keygen.html" title="dnssec-keygen"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center">host</th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="man.dig.html">Prev</a>�</td> -<th width="60%" align="center">Manual pages</th> -<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-keygen.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="refentry" lang="en"> -<a name="man.host"></a><div class="titlepage"></div> -<div class="refnamediv"> -<h2>Name</h2> -<p>host — DNS lookup utility</p> -</div> -<div class="refsynopsisdiv"> -<h2>Synopsis</h2> -<div class="cmdsynopsis"><p><code class="command">host</code> [<code class="option">-aCdlnrsTwv</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-N <em class="replaceable"><code>ndots</code></em></code>] [<code class="option">-R <em class="replaceable"><code>number</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-W <em class="replaceable"><code>wait</code></em></code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-4</code>] [<code class="option">-6</code>] {name} [server]</p></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2597000"></a><h2>DESCRIPTION</h2> -<p><span><strong class="command">host</strong></span> - is a simple utility for performing DNS lookups. - It is normally used to convert names to IP addresses and vice versa. - When no arguments or options are given, - <span><strong class="command">host</strong></span> - prints a short summary of its command line arguments and options. - </p> -<p><em class="parameter"><code>name</code></em> is the domain name that is to be - looked - up. It can also be a dotted-decimal IPv4 address or a colon-delimited - IPv6 address, in which case <span><strong class="command">host</strong></span> will by - default - perform a reverse lookup for that address. - <em class="parameter"><code>server</code></em> is an optional argument which - is either - the name or IP address of the name server that <span><strong class="command">host</strong></span> - should query instead of the server or servers listed in - <code class="filename">/etc/resolv.conf</code>. - </p> -<p> - The <code class="option">-a</code> (all) option is equivalent to setting the - <code class="option">-v</code> option and asking <span><strong class="command">host</strong></span> to make - a query of type ANY. - </p> -<p> - When the <code class="option">-C</code> option is used, <span><strong class="command">host</strong></span> - will attempt to display the SOA records for zone - <em class="parameter"><code>name</code></em> from all the listed - authoritative name - servers for that zone. The list of name servers is defined by the NS - records that are found for the zone. - </p> -<p> - The <code class="option">-c</code> option instructs to make a DNS query of class - <em class="parameter"><code>class</code></em>. This can be used to lookup - Hesiod or - Chaosnet class resource records. The default class is IN (Internet). - </p> -<p> - Verbose output is generated by <span><strong class="command">host</strong></span> when - the - <code class="option">-d</code> or <code class="option">-v</code> option is used. The two - options are equivalent. They have been provided for backwards - compatibility. In previous versions, the <code class="option">-d</code> option - switched on debugging traces and <code class="option">-v</code> enabled verbose - output. - </p> -<p> - List mode is selected by the <code class="option">-l</code> option. This makes - <span><strong class="command">host</strong></span> perform a zone transfer for zone - <em class="parameter"><code>name</code></em>. Transfer the zone printing out - the NS, PTR - and address records (A/AAAA). If combined with <code class="option">-a</code> - all records will be printed. - </p> -<p> - The <code class="option">-i</code> - option specifies that reverse lookups of IPv6 addresses should - use the IP6.INT domain as defined in RFC1886. - The default is to use IP6.ARPA. - </p> -<p> - The <code class="option">-N</code> option sets the number of dots that have to be - in <em class="parameter"><code>name</code></em> for it to be considered - absolute. The - default value is that defined using the ndots statement in - <code class="filename">/etc/resolv.conf</code>, or 1 if no ndots - statement is - present. Names with fewer dots are interpreted as relative names and - will be searched for in the domains listed in the <span class="type">search</span> - or <span class="type">domain</span> directive in - <code class="filename">/etc/resolv.conf</code>. - </p> -<p> - The number of UDP retries for a lookup can be changed with the - <code class="option">-R</code> option. <em class="parameter"><code>number</code></em> - indicates - how many times <span><strong class="command">host</strong></span> will repeat a query - that does - not get answered. The default number of retries is 1. If - <em class="parameter"><code>number</code></em> is negative or zero, the - number of - retries will default to 1. - </p> -<p> - Non-recursive queries can be made via the <code class="option">-r</code> option. - Setting this option clears the <span class="type">RD</span> — recursion - desired — bit in the query which <span><strong class="command">host</strong></span> makes. - This should mean that the name server receiving the query will not - attempt to resolve <em class="parameter"><code>name</code></em>. The - <code class="option">-r</code> option enables <span><strong class="command">host</strong></span> - to mimic - the behavior of a name server by making non-recursive queries and - expecting to receive answers to those queries that are usually - referrals to other name servers. - </p> -<p> - By default <span><strong class="command">host</strong></span> uses UDP when making - queries. The - <code class="option">-T</code> option makes it use a TCP connection when querying - the name server. TCP will be automatically selected for queries that - require it, such as zone transfer (AXFR) requests. - </p> -<p> - The <code class="option">-4</code> option forces <span><strong class="command">host</strong></span> to only - use IPv4 query transport. The <code class="option">-6</code> option forces - <span><strong class="command">host</strong></span> to only use IPv6 query transport. - </p> -<p> - The <code class="option">-t</code> option is used to select the query type. - <em class="parameter"><code>type</code></em> can be any recognized query - type: CNAME, - NS, SOA, SIG, KEY, AXFR, etc. When no query type is specified, - <span><strong class="command">host</strong></span> automatically selects an appropriate - query - type. By default it looks for A records, but if the - <code class="option">-C</code> option was given, queries will be made for SOA - records, and if <em class="parameter"><code>name</code></em> is a - dotted-decimal IPv4 - address or colon-delimited IPv6 address, <span><strong class="command">host</strong></span> will - query for PTR records. If a query type of IXFR is chosen the starting - serial number can be specified by appending an equal followed by the - starting serial number (e.g. -t IXFR=12345678). - </p> -<p> - The time to wait for a reply can be controlled through the - <code class="option">-W</code> and <code class="option">-w</code> options. The - <code class="option">-W</code> option makes <span><strong class="command">host</strong></span> - wait for - <em class="parameter"><code>wait</code></em> seconds. If <em class="parameter"><code>wait</code></em> - is less than one, the wait interval is set to one second. When the - <code class="option">-w</code> option is used, <span><strong class="command">host</strong></span> - will - effectively wait forever for a reply. The time to wait for a response - will be set to the number of seconds given by the hardware's maximum - value for an integer quantity. - </p> -<p> - The <code class="option">-s</code> option tells <span><strong class="command">host</strong></span> - <span class="emphasis"><em>not</em></span> to send the query to the next nameserver - if any server responds with a SERVFAIL response, which is the - reverse of normal stub resolver behavior. - </p> -<p> - The <code class="option">-m</code> can be used to set the memory usage debugging - flags - <em class="parameter"><code>record</code></em>, <em class="parameter"><code>usage</code></em> and - <em class="parameter"><code>trace</code></em>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2597514"></a><h2>IDN SUPPORT</h2> -<p> - If <span><strong class="command">host</strong></span> has been built with IDN (internationalized - domain name) support, it can accept and display non-ASCII domain names. - <span><strong class="command">host</strong></span> appropriately converts character encoding of - domain name before sending a request to DNS server or displaying a - reply from the server. - If you'd like to turn off the IDN support for some reason, defines - the <code class="envar">IDN_DISABLE</code> environment variable. - The IDN support is disabled if the variable is set when - <span><strong class="command">host</strong></span> runs. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2597543"></a><h2>FILES</h2> -<p><code class="filename">/etc/resolv.conf</code> - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2597557"></a><h2>SEE ALSO</h2> -<p><span class="citerefentry"><span class="refentrytitle">dig</span>(1)</span>, - <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>. - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="man.dig.html">Prev</a>�</td> -<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td> -<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-keygen.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top">dig�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�<span class="application">dnssec-keygen</span> -</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/man.named-checkconf.html b/contrib/bind9/doc/arm/man.named-checkconf.html deleted file mode 100644 index 7db5021..0000000 --- a/contrib/bind9/doc/arm/man.named-checkconf.html +++ /dev/null @@ -1,130 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: man.named-checkconf.html,v 1.2.2.49 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>named-checkconf</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages"> -<link rel="prev" href="man.dnssec-signzone.html" title="dnssec-signzone"> -<link rel="next" href="man.named-checkzone.html" title="named-checkzone"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center"><span class="application">named-checkconf</span></th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="man.dnssec-signzone.html">Prev</a>�</td> -<th width="60%" align="center">Manual pages</th> -<td width="20%" align="right">�<a accesskey="n" href="man.named-checkzone.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="refentry" lang="en"> -<a name="man.named-checkconf"></a><div class="titlepage"></div> -<div class="refnamediv"> -<h2>Name</h2> -<p><span class="application">named-checkconf</span> — named configuration file syntax checking tool</p> -</div> -<div class="refsynopsisdiv"> -<h2>Synopsis</h2> -<div class="cmdsynopsis"><p><code class="command">named-checkconf</code> [<code class="option">-v</code>] [<code class="option">-j</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] {filename} [<code class="option">-z</code>]</p></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2599604"></a><h2>DESCRIPTION</h2> -<p><span><strong class="command">named-checkconf</strong></span> - checks the syntax, but not the semantics, of a named - configuration file. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2599618"></a><h2>OPTIONS</h2> -<div class="variablelist"><dl> -<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt> -<dd><p> - Chroot to <code class="filename">directory</code> so that - include - directives in the configuration file are processed as if - run by a similarly chrooted named. - </p></dd> -<dt><span class="term">-v</span></dt> -<dd><p> - Print the version of the <span><strong class="command">named-checkconf</strong></span> - program and exit. - </p></dd> -<dt><span class="term">-z</span></dt> -<dd><p> - Perform a test load of all master zones found in - <code class="filename">named.conf</code>. - </p></dd> -<dt><span class="term">-j</span></dt> -<dd><p> - When loading a zonefile read the journal if it exists. - </p></dd> -<dt><span class="term">filename</span></dt> -<dd><p> - The name of the configuration file to be checked. If not - specified, it defaults to <code class="filename">/etc/named.conf</code>. - </p></dd> -</dl></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2599720"></a><h2>RETURN VALUES</h2> -<p><span><strong class="command">named-checkconf</strong></span> - returns an exit status of 1 if - errors were detected and 0 otherwise. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2599734"></a><h2>SEE ALSO</h2> -<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, - <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>, - <em class="citetitle">BIND 9 Administrator Reference Manual</em>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2599764"></a><h2>AUTHOR</h2> -<p><span class="corpauthor">Internet Systems Consortium</span> - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="man.dnssec-signzone.html">Prev</a>�</td> -<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td> -<td width="40%" align="right">�<a accesskey="n" href="man.named-checkzone.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top"> -<span class="application">dnssec-signzone</span>�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�<span class="application">named-checkzone</span> -</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/man.named-checkzone.html b/contrib/bind9/doc/arm/man.named-checkzone.html deleted file mode 100644 index 93e17ec..0000000 --- a/contrib/bind9/doc/arm/man.named-checkzone.html +++ /dev/null @@ -1,294 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: man.named-checkzone.html,v 1.2.2.52 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>named-checkzone</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages"> -<link rel="prev" href="man.named-checkconf.html" title="named-checkconf"> -<link rel="next" href="man.named.html" title="named"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center"><span class="application">named-checkzone</span></th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="man.named-checkconf.html">Prev</a>�</td> -<th width="60%" align="center">Manual pages</th> -<td width="20%" align="right">�<a accesskey="n" href="man.named.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="refentry" lang="en"> -<a name="man.named-checkzone"></a><div class="titlepage"></div> -<div class="refnamediv"> -<h2>Name</h2> -<p><span class="application">named-checkzone</span>, <span class="application">named-compilezone</span> — zone file validity checking or converting tool</p> -</div> -<div class="refsynopsisdiv"> -<h2>Synopsis</h2> -<div class="cmdsynopsis"><p><code class="command">named-checkzone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-M <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-S <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div> -<div class="cmdsynopsis"><p><code class="command">named-compilezone</code> [<code class="option">-d</code>] [<code class="option">-j</code>] [<code class="option">-q</code>] [<code class="option">-v</code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-C <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-f <em class="replaceable"><code>format</code></em></code>] [<code class="option">-F <em class="replaceable"><code>format</code></em></code>] [<code class="option">-i <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-k <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-m <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-n <em class="replaceable"><code>mode</code></em></code>] [<code class="option">-o <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-s <em class="replaceable"><code>style</code></em></code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-w <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-D</code>] [<code class="option">-W <em class="replaceable"><code>mode</code></em></code>] {zonename} {filename}</p></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2600689"></a><h2>DESCRIPTION</h2> -<p><span><strong class="command">named-checkzone</strong></span> - checks the syntax and integrity of a zone file. It performs the - same checks as <span><strong class="command">named</strong></span> does when loading a - zone. This makes <span><strong class="command">named-checkzone</strong></span> useful for - checking zone files before configuring them into a name server. - </p> -<p> - <span><strong class="command">named-compilezone</strong></span> is similar to - <span><strong class="command">named-checkzone</strong></span>, but it always dumps the - zone contents to a specified file in a specified format. - Additionally, it applies stricter check levels by default, - since the dump output will be used as an actual zone file - loaded by <span><strong class="command">named</strong></span>. - When manually specified otherwise, the check levels must at - least be as strict as those specified in the - <span><strong class="command">named</strong></span> configuration file. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2600739"></a><h2>OPTIONS</h2> -<div class="variablelist"><dl> -<dt><span class="term">-d</span></dt> -<dd><p> - Enable debugging. - </p></dd> -<dt><span class="term">-q</span></dt> -<dd><p> - Quiet mode - exit code only. - </p></dd> -<dt><span class="term">-v</span></dt> -<dd><p> - Print the version of the <span><strong class="command">named-checkzone</strong></span> - program and exit. - </p></dd> -<dt><span class="term">-j</span></dt> -<dd><p> - When loading the zone file read the journal if it exists. - </p></dd> -<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt> -<dd><p> - Specify the class of the zone. If not specified "IN" is assumed. - </p></dd> -<dt><span class="term">-i <em class="replaceable"><code>mode</code></em></span></dt> -<dd> -<p> - Perform post-load zone integrity checks. Possible modes are - <span><strong class="command">"full"</strong></span> (default), - <span><strong class="command">"full-sibling"</strong></span>, - <span><strong class="command">"local"</strong></span>, - <span><strong class="command">"local-sibling"</strong></span> and - <span><strong class="command">"none"</strong></span>. - </p> -<p> - Mode <span><strong class="command">"full"</strong></span> checks that MX records - refer to A or AAAA record (both in-zone and out-of-zone - hostnames). Mode <span><strong class="command">"local"</strong></span> only - checks MX records which refer to in-zone hostnames. - </p> -<p> - Mode <span><strong class="command">"full"</strong></span> checks that SRV records - refer to A or AAAA record (both in-zone and out-of-zone - hostnames). Mode <span><strong class="command">"local"</strong></span> only - checks SRV records which refer to in-zone hostnames. - </p> -<p> - Mode <span><strong class="command">"full"</strong></span> checks that delegation NS - records refer to A or AAAA record (both in-zone and out-of-zone - hostnames). It also checks that glue address records - in the zone match those advertised by the child. - Mode <span><strong class="command">"local"</strong></span> only checks NS records which - refer to in-zone hostnames or that some required glue exists, - that is when the nameserver is in a child zone. - </p> -<p> - Mode <span><strong class="command">"full-sibling"</strong></span> and - <span><strong class="command">"local-sibling"</strong></span> disable sibling glue - checks but are otherwise the same as <span><strong class="command">"full"</strong></span> - and <span><strong class="command">"local"</strong></span> respectively. - </p> -<p> - Mode <span><strong class="command">"none"</strong></span> disables the checks. - </p> -</dd> -<dt><span class="term">-f <em class="replaceable"><code>format</code></em></span></dt> -<dd><p> - Specify the format of the zone file. - Possible formats are <span><strong class="command">"text"</strong></span> (default) - and <span><strong class="command">"raw"</strong></span>. - </p></dd> -<dt><span class="term">-F <em class="replaceable"><code>format</code></em></span></dt> -<dd><p> - Specify the format of the output file specified. - Possible formats are <span><strong class="command">"text"</strong></span> (default) - and <span><strong class="command">"raw"</strong></span>. - For <span><strong class="command">named-checkzone</strong></span>, - this does not cause any effects unless it dumps the zone - contents. - </p></dd> -<dt><span class="term">-k <em class="replaceable"><code>mode</code></em></span></dt> -<dd><p> - Perform <span><strong class="command">"check-names"</strong></span> checks with the - specified failure mode. - Possible modes are <span><strong class="command">"fail"</strong></span> - (default for <span><strong class="command">named-compilezone</strong></span>), - <span><strong class="command">"warn"</strong></span> - (default for <span><strong class="command">named-checkzone</strong></span>) and - <span><strong class="command">"ignore"</strong></span>. - </p></dd> -<dt><span class="term">-m <em class="replaceable"><code>mode</code></em></span></dt> -<dd><p> - Specify whether MX records should be checked to see if they - are addresses. Possible modes are <span><strong class="command">"fail"</strong></span>, - <span><strong class="command">"warn"</strong></span> (default) and - <span><strong class="command">"ignore"</strong></span>. - </p></dd> -<dt><span class="term">-M <em class="replaceable"><code>mode</code></em></span></dt> -<dd><p> - Check if a MX record refers to a CNAME. - Possible modes are <span><strong class="command">"fail"</strong></span>, - <span><strong class="command">"warn"</strong></span> (default) and - <span><strong class="command">"ignore"</strong></span>. - </p></dd> -<dt><span class="term">-n <em class="replaceable"><code>mode</code></em></span></dt> -<dd><p> - Specify whether NS records should be checked to see if they - are addresses. - Possible modes are <span><strong class="command">"fail"</strong></span> - (default for <span><strong class="command">named-compilezone</strong></span>), - <span><strong class="command">"warn"</strong></span> - (default for <span><strong class="command">named-checkzone</strong></span>) and - <span><strong class="command">"ignore"</strong></span>. - </p></dd> -<dt><span class="term">-o <em class="replaceable"><code>filename</code></em></span></dt> -<dd><p> - Write zone output to <code class="filename">filename</code>. - This is mandatory for <span><strong class="command">named-compilezone</strong></span>. - </p></dd> -<dt><span class="term">-s <em class="replaceable"><code>style</code></em></span></dt> -<dd><p> - Specify the style of the dumped zone file. - Possible styles are <span><strong class="command">"full"</strong></span> (default) - and <span><strong class="command">"relative"</strong></span>. - The full format is most suitable for processing - automatically by a separate script. - On the other hand, the relative format is more - human-readable and is thus suitable for editing by hand. - For <span><strong class="command">named-checkzone</strong></span> - this does not cause any effects unless it dumps the zone - contents. - It also does not have any meaning if the output format - is not text. - </p></dd> -<dt><span class="term">-S <em class="replaceable"><code>mode</code></em></span></dt> -<dd><p> - Check if a SRV record refers to a CNAME. - Possible modes are <span><strong class="command">"fail"</strong></span>, - <span><strong class="command">"warn"</strong></span> (default) and - <span><strong class="command">"ignore"</strong></span>. - </p></dd> -<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt> -<dd><p> - Chroot to <code class="filename">directory</code> so that - include - directives in the configuration file are processed as if - run by a similarly chrooted named. - </p></dd> -<dt><span class="term">-w <em class="replaceable"><code>directory</code></em></span></dt> -<dd><p> - chdir to <code class="filename">directory</code> so that - relative - filenames in master file $INCLUDE directives work. This - is similar to the directory clause in - <code class="filename">named.conf</code>. - </p></dd> -<dt><span class="term">-D</span></dt> -<dd><p> - Dump zone file in canonical format. - This is always enabled for <span><strong class="command">named-compilezone</strong></span>. - </p></dd> -<dt><span class="term">-W <em class="replaceable"><code>mode</code></em></span></dt> -<dd><p> - Specify whether to check for non-terminal wildcards. - Non-terminal wildcards are almost always the result of a - failure to understand the wildcard matching algorithm (RFC 1034). - Possible modes are <span><strong class="command">"warn"</strong></span> (default) - and - <span><strong class="command">"ignore"</strong></span>. - </p></dd> -<dt><span class="term">zonename</span></dt> -<dd><p> - The domain name of the zone being checked. - </p></dd> -<dt><span class="term">filename</span></dt> -<dd><p> - The name of the zone file. - </p></dd> -</dl></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2655177"></a><h2>RETURN VALUES</h2> -<p><span><strong class="command">named-checkzone</strong></span> - returns an exit status of 1 if - errors were detected and 0 otherwise. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2655191"></a><h2>SEE ALSO</h2> -<p><span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, - <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>, - <em class="citetitle">RFC 1035</em>, - <em class="citetitle">BIND 9 Administrator Reference Manual</em>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2655224"></a><h2>AUTHOR</h2> -<p><span class="corpauthor">Internet Systems Consortium</span> - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="man.named-checkconf.html">Prev</a>�</td> -<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td> -<td width="40%" align="right">�<a accesskey="n" href="man.named.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top"> -<span class="application">named-checkconf</span>�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�<span class="application">named</span> -</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/man.named.html b/contrib/bind9/doc/arm/man.named.html deleted file mode 100644 index 70539b4..0000000 --- a/contrib/bind9/doc/arm/man.named.html +++ /dev/null @@ -1,293 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: man.named.html,v 1.2.2.53 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>named</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages"> -<link rel="prev" href="man.named-checkzone.html" title="named-checkzone"> -<link rel="next" href="man.rndc.html" title="rndc"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center"><span class="application">named</span></th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td> -<th width="60%" align="center">Manual pages</th> -<td width="20%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="refentry" lang="en"> -<a name="man.named"></a><div class="titlepage"></div> -<div class="refnamediv"> -<h2>Name</h2> -<p><span class="application">named</span> — Internet domain name server</p> -</div> -<div class="refsynopsisdiv"> -<h2>Synopsis</h2> -<div class="cmdsynopsis"><p><code class="command">named</code> [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>debug-level</code></em></code>] [<code class="option">-f</code>] [<code class="option">-g</code>] [<code class="option">-m <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-n <em class="replaceable"><code>#cpus</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-s</code>] [<code class="option">-t <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>] [<code class="option">-v</code>] [<code class="option">-x <em class="replaceable"><code>cache-file</code></em></code>]</p></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2601798"></a><h2>DESCRIPTION</h2> -<p><span><strong class="command">named</strong></span> - is a Domain Name System (DNS) server, - part of the BIND 9 distribution from ISC. For more - information on the DNS, see RFCs 1033, 1034, and 1035. - </p> -<p> - When invoked without arguments, <span><strong class="command">named</strong></span> - will - read the default configuration file - <code class="filename">/etc/named.conf</code>, read any initial - data, and listen for queries. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2601829"></a><h2>OPTIONS</h2> -<div class="variablelist"><dl> -<dt><span class="term">-4</span></dt> -<dd><p> - Use IPv4 only even if the host machine is capable of IPv6. - <code class="option">-4</code> and <code class="option">-6</code> are mutually - exclusive. - </p></dd> -<dt><span class="term">-6</span></dt> -<dd><p> - Use IPv6 only even if the host machine is capable of IPv4. - <code class="option">-4</code> and <code class="option">-6</code> are mutually - exclusive. - </p></dd> -<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt> -<dd><p> - Use <em class="replaceable"><code>config-file</code></em> as the - configuration file instead of the default, - <code class="filename">/etc/named.conf</code>. To - ensure that reloading the configuration file continues - to work after the server has changed its working - directory due to to a possible - <code class="option">directory</code> option in the configuration - file, <em class="replaceable"><code>config-file</code></em> should be - an absolute pathname. - </p></dd> -<dt><span class="term">-d <em class="replaceable"><code>debug-level</code></em></span></dt> -<dd><p> - Set the daemon's debug level to <em class="replaceable"><code>debug-level</code></em>. - Debugging traces from <span><strong class="command">named</strong></span> become - more verbose as the debug level increases. - </p></dd> -<dt><span class="term">-f</span></dt> -<dd><p> - Run the server in the foreground (i.e. do not daemonize). - </p></dd> -<dt><span class="term">-g</span></dt> -<dd><p> - Run the server in the foreground and force all logging - to <code class="filename">stderr</code>. - </p></dd> -<dt><span class="term">-m <em class="replaceable"><code>flag</code></em></span></dt> -<dd><p> - Turn on memory usage debugging flags. Possible flags are - <em class="replaceable"><code>usage</code></em>, - <em class="replaceable"><code>trace</code></em>, - <em class="replaceable"><code>record</code></em>, - <em class="replaceable"><code>size</code></em>, and - <em class="replaceable"><code>mctx</code></em>. - These correspond to the ISC_MEM_DEBUGXXXX flags described in - <code class="filename"><isc/mem.h></code>. - </p></dd> -<dt><span class="term">-n <em class="replaceable"><code>#cpus</code></em></span></dt> -<dd><p> - Create <em class="replaceable"><code>#cpus</code></em> worker threads - to take advantage of multiple CPUs. If not specified, - <span><strong class="command">named</strong></span> will try to determine the - number of CPUs present and create one thread per CPU. - If it is unable to determine the number of CPUs, a - single worker thread will be created. - </p></dd> -<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt> -<dd><p> - Listen for queries on port <em class="replaceable"><code>port</code></em>. If not - specified, the default is port 53. - </p></dd> -<dt><span class="term">-s</span></dt> -<dd> -<p> - Write memory usage statistics to <code class="filename">stdout</code> on exit. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - This option is mainly of interest to BIND 9 developers - and may be removed or changed in a future release. - </p> -</div> -</dd> -<dt><span class="term">-t <em class="replaceable"><code>directory</code></em></span></dt> -<dd> -<p>Chroot - to <em class="replaceable"><code>directory</code></em> after - processing the command line arguments, but before - reading the configuration file. - </p> -<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Warning</h3> -<p> - This option should be used in conjunction with the - <code class="option">-u</code> option, as chrooting a process - running as root doesn't enhance security on most - systems; the way <code class="function">chroot(2)</code> is - defined allows a process with root privileges to - escape a chroot jail. - </p> -</div> -</dd> -<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt> -<dd> -<p>Setuid - to <em class="replaceable"><code>user</code></em> after completing - privileged operations, such as creating sockets that - listen on privileged ports. - </p> -<div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Note</h3> -<p> - On Linux, <span><strong class="command">named</strong></span> uses the kernel's - capability mechanism to drop all root privileges - except the ability to <code class="function">bind(2)</code> to - a - privileged port and set process resource limits. - Unfortunately, this means that the <code class="option">-u</code> - option only works when <span><strong class="command">named</strong></span> is - run - on kernel 2.2.18 or later, or kernel 2.3.99-pre3 or - later, since previous kernels did not allow privileges - to be retained after <code class="function">setuid(2)</code>. - </p> -</div> -</dd> -<dt><span class="term">-v</span></dt> -<dd><p> - Report the version number and exit. - </p></dd> -<dt><span class="term">-x <em class="replaceable"><code>cache-file</code></em></span></dt> -<dd> -<p> - Load data from <em class="replaceable"><code>cache-file</code></em> into the - cache of the default view. - </p> -<div class="warning" style="margin-left: 0.5in; margin-right: 0.5in;"> -<h3 class="title">Warning</h3> -<p> - This option must not be used. It is only of interest - to BIND 9 developers and may be removed or changed in a - future release. - </p> -</div> -</dd> -</dl></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2604492"></a><h2>SIGNALS</h2> -<p> - In routine operation, signals should not be used to control - the nameserver; <span><strong class="command">rndc</strong></span> should be used - instead. - </p> -<div class="variablelist"><dl> -<dt><span class="term">SIGHUP</span></dt> -<dd><p> - Force a reload of the server. - </p></dd> -<dt><span class="term">SIGINT, SIGTERM</span></dt> -<dd><p> - Shut down the server. - </p></dd> -</dl></div> -<p> - The result of sending any other signals to the server is undefined. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2604542"></a><h2>CONFIGURATION</h2> -<p> - The <span><strong class="command">named</strong></span> configuration file is too complex - to describe in detail here. A complete description is provided - in the - <em class="citetitle">BIND 9 Administrator Reference Manual</em>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2604562"></a><h2>FILES</h2> -<div class="variablelist"><dl> -<dt><span class="term"><code class="filename">/etc/named.conf</code></span></dt> -<dd><p> - The default configuration file. - </p></dd> -<dt><span class="term"><code class="filename">/var/run/named.pid</code></span></dt> -<dd><p> - The default process-id file. - </p></dd> -</dl></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2604605"></a><h2>SEE ALSO</h2> -<p><em class="citetitle">RFC 1033</em>, - <em class="citetitle">RFC 1034</em>, - <em class="citetitle">RFC 1035</em>, - <span class="citerefentry"><span class="refentrytitle">named-checkconf</span>(8)</span>, - <span class="citerefentry"><span class="refentrytitle">named-checkzone</span>(8)</span>, - <span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>, - <span class="citerefentry"><span class="refentrytitle">lwresd</span>(8)</span>, - <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>, - <em class="citetitle">BIND 9 Administrator Reference Manual</em>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2604881"></a><h2>AUTHOR</h2> -<p><span class="corpauthor">Internet Systems Consortium</span> - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="man.named-checkzone.html">Prev</a>�</td> -<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td> -<td width="40%" align="right">�<a accesskey="n" href="man.rndc.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top"> -<span class="application">named-checkzone</span>�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�<span class="application">rndc</span> -</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/man.rndc-confgen.html b/contrib/bind9/doc/arm/man.rndc-confgen.html deleted file mode 100644 index 056bcbd..0000000 --- a/contrib/bind9/doc/arm/man.rndc-confgen.html +++ /dev/null @@ -1,222 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: man.rndc-confgen.html,v 1.2.2.55 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>rndc-confgen</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages"> -<link rel="prev" href="man.rndc.conf.html" title="rndc.conf"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center"><span class="application">rndc-confgen</span></th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="man.rndc.conf.html">Prev</a>�</td> -<th width="60%" align="center">Manual pages</th> -<td width="20%" align="right">�</td> -</tr> -</table> -<hr> -</div> -<div class="refentry" lang="en"> -<a name="man.rndc-confgen"></a><div class="titlepage"></div> -<div class="refnamediv"> -<h2>Name</h2> -<p><span class="application">rndc-confgen</span> — rndc key generation tool</p> -</div> -<div class="refsynopsisdiv"> -<h2>Synopsis</h2> -<div class="cmdsynopsis"><p><code class="command">rndc-confgen</code> [<code class="option">-a</code>] [<code class="option">-b <em class="replaceable"><code>keysize</code></em></code>] [<code class="option">-c <em class="replaceable"><code>keyfile</code></em></code>] [<code class="option">-h</code>] [<code class="option">-k <em class="replaceable"><code>keyname</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-r <em class="replaceable"><code>randomfile</code></em></code>] [<code class="option">-s <em class="replaceable"><code>address</code></em></code>] [<code class="option">-t <em class="replaceable"><code>chrootdir</code></em></code>] [<code class="option">-u <em class="replaceable"><code>user</code></em></code>]</p></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2605524"></a><h2>DESCRIPTION</h2> -<p><span><strong class="command">rndc-confgen</strong></span> - generates configuration files - for <span><strong class="command">rndc</strong></span>. It can be used as a - convenient alternative to writing the - <code class="filename">rndc.conf</code> file - and the corresponding <span><strong class="command">controls</strong></span> - and <span><strong class="command">key</strong></span> - statements in <code class="filename">named.conf</code> by hand. - Alternatively, it can be run with the <span><strong class="command">-a</strong></span> - option to set up a <code class="filename">rndc.key</code> file and - avoid the need for a <code class="filename">rndc.conf</code> file - and a <span><strong class="command">controls</strong></span> statement altogether. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2605590"></a><h2>OPTIONS</h2> -<div class="variablelist"><dl> -<dt><span class="term">-a</span></dt> -<dd> -<p> - Do automatic <span><strong class="command">rndc</strong></span> configuration. - This creates a file <code class="filename">rndc.key</code> - in <code class="filename">/etc</code> (or whatever - <code class="varname">sysconfdir</code> - was specified as when <acronym class="acronym">BIND</acronym> was - built) - that is read by both <span><strong class="command">rndc</strong></span> - and <span><strong class="command">named</strong></span> on startup. The - <code class="filename">rndc.key</code> file defines a default - command channel and authentication key allowing - <span><strong class="command">rndc</strong></span> to communicate with - <span><strong class="command">named</strong></span> on the local host - with no further configuration. - </p> -<p> - Running <span><strong class="command">rndc-confgen -a</strong></span> allows - BIND 9 and <span><strong class="command">rndc</strong></span> to be used as - drop-in - replacements for BIND 8 and <span><strong class="command">ndc</strong></span>, - with no changes to the existing BIND 8 - <code class="filename">named.conf</code> file. - </p> -<p> - If a more elaborate configuration than that - generated by <span><strong class="command">rndc-confgen -a</strong></span> - is required, for example if rndc is to be used remotely, - you should run <span><strong class="command">rndc-confgen</strong></span> without - the - <span><strong class="command">-a</strong></span> option and set up a - <code class="filename">rndc.conf</code> and - <code class="filename">named.conf</code> - as directed. - </p> -</dd> -<dt><span class="term">-b <em class="replaceable"><code>keysize</code></em></span></dt> -<dd><p> - Specifies the size of the authentication key in bits. - Must be between 1 and 512 bits; the default is 128. - </p></dd> -<dt><span class="term">-c <em class="replaceable"><code>keyfile</code></em></span></dt> -<dd><p> - Used with the <span><strong class="command">-a</strong></span> option to specify - an alternate location for <code class="filename">rndc.key</code>. - </p></dd> -<dt><span class="term">-h</span></dt> -<dd><p> - Prints a short summary of the options and arguments to - <span><strong class="command">rndc-confgen</strong></span>. - </p></dd> -<dt><span class="term">-k <em class="replaceable"><code>keyname</code></em></span></dt> -<dd><p> - Specifies the key name of the rndc authentication key. - This must be a valid domain name. - The default is <code class="constant">rndc-key</code>. - </p></dd> -<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt> -<dd><p> - Specifies the command channel port where <span><strong class="command">named</strong></span> - listens for connections from <span><strong class="command">rndc</strong></span>. - The default is 953. - </p></dd> -<dt><span class="term">-r <em class="replaceable"><code>randomfile</code></em></span></dt> -<dd><p> - Specifies a source of random data for generating the - authorization. If the operating - system does not provide a <code class="filename">/dev/random</code> - or equivalent device, the default source of randomness - is keyboard input. <code class="filename">randomdev</code> - specifies - the name of a character device or file containing random - data to be used instead of the default. The special value - <code class="filename">keyboard</code> indicates that keyboard - input should be used. - </p></dd> -<dt><span class="term">-s <em class="replaceable"><code>address</code></em></span></dt> -<dd><p> - Specifies the IP address where <span><strong class="command">named</strong></span> - listens for command channel connections from - <span><strong class="command">rndc</strong></span>. The default is the loopback - address 127.0.0.1. - </p></dd> -<dt><span class="term">-t <em class="replaceable"><code>chrootdir</code></em></span></dt> -<dd><p> - Used with the <span><strong class="command">-a</strong></span> option to specify - a directory where <span><strong class="command">named</strong></span> will run - chrooted. An additional copy of the <code class="filename">rndc.key</code> - will be written relative to this directory so that - it will be found by the chrooted <span><strong class="command">named</strong></span>. - </p></dd> -<dt><span class="term">-u <em class="replaceable"><code>user</code></em></span></dt> -<dd><p> - Used with the <span><strong class="command">-a</strong></span> option to set the - owner - of the <code class="filename">rndc.key</code> file generated. - If - <span><strong class="command">-t</strong></span> is also specified only the file - in - the chroot area has its owner changed. - </p></dd> -</dl></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2606454"></a><h2>EXAMPLES</h2> -<p> - To allow <span><strong class="command">rndc</strong></span> to be used with - no manual configuration, run - </p> -<p><strong class="userinput"><code>rndc-confgen -a</code></strong> - </p> -<p> - To print a sample <code class="filename">rndc.conf</code> file and - corresponding <span><strong class="command">controls</strong></span> and <span><strong class="command">key</strong></span> - statements to be manually inserted into <code class="filename">named.conf</code>, - run - </p> -<p><strong class="userinput"><code>rndc-confgen</code></strong> - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2609036"></a><h2>SEE ALSO</h2> -<p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>, - <span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>, - <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, - <em class="citetitle">BIND 9 Administrator Reference Manual</em>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2609075"></a><h2>AUTHOR</h2> -<p><span class="corpauthor">Internet Systems Consortium</span> - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="man.rndc.conf.html">Prev</a>�</td> -<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td> -<td width="40%" align="right">�</td> -</tr> -<tr> -<td width="40%" align="left" valign="top"> -<code class="filename">rndc.conf</code>�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/man.rndc.conf.html b/contrib/bind9/doc/arm/man.rndc.conf.html deleted file mode 100644 index 4e8154c..0000000 --- a/contrib/bind9/doc/arm/man.rndc.conf.html +++ /dev/null @@ -1,255 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: man.rndc.conf.html,v 1.2.2.55 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>rndc.conf</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages"> -<link rel="prev" href="man.rndc.html" title="rndc"> -<link rel="next" href="man.rndc-confgen.html" title="rndc-confgen"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center"><code class="filename">rndc.conf</code></th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="man.rndc.html">Prev</a>�</td> -<th width="60%" align="center">Manual pages</th> -<td width="20%" align="right">�<a accesskey="n" href="man.rndc-confgen.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="refentry" lang="en"> -<a name="man.rndc.conf"></a><div class="titlepage"></div> -<div class="refnamediv"> -<h2>Name</h2> -<p><code class="filename">rndc.conf</code> — rndc configuration file</p> -</div> -<div class="refsynopsisdiv"> -<h2>Synopsis</h2> -<div class="cmdsynopsis"><p><code class="command">rndc.conf</code> </p></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2603676"></a><h2>DESCRIPTION</h2> -<p><code class="filename">rndc.conf</code> is the configuration file - for <span><strong class="command">rndc</strong></span>, the BIND 9 name server control - utility. This file has a similar structure and syntax to - <code class="filename">named.conf</code>. Statements are enclosed - in braces and terminated with a semi-colon. Clauses in - the statements are also semi-colon terminated. The usual - comment styles are supported: - </p> -<p> - C style: /* */ - </p> -<p> - C++ style: // to end of line - </p> -<p> - Unix style: # to end of line - </p> -<p><code class="filename">rndc.conf</code> is much simpler than - <code class="filename">named.conf</code>. The file uses three - statements: an options statement, a server statement - and a key statement. - </p> -<p> - The <code class="option">options</code> statement contains five clauses. - The <code class="option">default-server</code> clause is followed by the - name or address of a name server. This host will be used when - no name server is given as an argument to - <span><strong class="command">rndc</strong></span>. The <code class="option">default-key</code> - clause is followed by the name of a key which is identified by - a <code class="option">key</code> statement. If no - <code class="option">keyid</code> is provided on the rndc command line, - and no <code class="option">key</code> clause is found in a matching - <code class="option">server</code> statement, this default key will be - used to authenticate the server's commands and responses. The - <code class="option">default-port</code> clause is followed by the port - to connect to on the remote name server. If no - <code class="option">port</code> option is provided on the rndc command - line, and no <code class="option">port</code> clause is found in a - matching <code class="option">server</code> statement, this default port - will be used to connect. - The <code class="option">default-source-address</code> and - <code class="option">default-source-address-v6</code> clauses which - can be used to set the IPv4 and IPv6 source addresses - respectively. - </p> -<p> - After the <code class="option">server</code> keyword, the server - statement includes a string which is the hostname or address - for a name server. The statement has three possible clauses: - <code class="option">key</code>, <code class="option">port</code> and - <code class="option">addresses</code>. The key name must match the - name of a key statement in the file. The port number - specifies the port to connect to. If an <code class="option">addresses</code> - clause is supplied these addresses will be used instead of - the server name. Each address can take an optional port. - If an <code class="option">source-address</code> or <code class="option">source-address-v6</code> - of supplied then these will be used to specify the IPv4 and IPv6 - source addresses respectively. - </p> -<p> - The <code class="option">key</code> statement begins with an identifying - string, the name of the key. The statement has two clauses. - <code class="option">algorithm</code> identifies the encryption algorithm - for <span><strong class="command">rndc</strong></span> to use; currently only HMAC-MD5 - is - supported. This is followed by a secret clause which contains - the base-64 encoding of the algorithm's encryption key. The - base-64 string is enclosed in double quotes. - </p> -<p> - There are two common ways to generate the base-64 string for the - secret. The BIND 9 program <span><strong class="command">rndc-confgen</strong></span> - can - be used to generate a random key, or the - <span><strong class="command">mmencode</strong></span> program, also known as - <span><strong class="command">mimencode</strong></span>, can be used to generate a - base-64 - string from known input. <span><strong class="command">mmencode</strong></span> does - not - ship with BIND 9 but is available on many systems. See the - EXAMPLE section for sample command lines for each. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2604121"></a><h2>EXAMPLE</h2> -<pre class="programlisting"> - options { - default-server localhost; - default-key samplekey; - }; -</pre> -<p> - </p> -<pre class="programlisting"> - server localhost { - key samplekey; - }; -</pre> -<p> - </p> -<pre class="programlisting"> - server testserver { - key testkey; - addresses { localhost port 5353; }; - }; -</pre> -<p> - </p> -<pre class="programlisting"> - key samplekey { - algorithm hmac-md5; - secret "6FMfj43Osz4lyb24OIe2iGEz9lf1llJO+lz"; - }; -</pre> -<p> - </p> -<pre class="programlisting"> - key testkey { - algorithm hmac-md5; - secret "R3HI8P6BKw9ZwXwN3VZKuQ=="; - }; - </pre> -<p> - </p> -<p> - In the above example, <span><strong class="command">rndc</strong></span> will by - default use - the server at localhost (127.0.0.1) and the key called samplekey. - Commands to the localhost server will use the samplekey key, which - must also be defined in the server's configuration file with the - same name and secret. The key statement indicates that samplekey - uses the HMAC-MD5 algorithm and its secret clause contains the - base-64 encoding of the HMAC-MD5 secret enclosed in double quotes. - </p> -<p> - If <span><strong class="command">rndc -s testserver</strong></span> is used then <span><strong class="command">rndc</strong></span> will - connect to server on localhost port 5353 using the key testkey. - </p> -<p> - To generate a random secret with <span><strong class="command">rndc-confgen</strong></span>: - </p> -<p><strong class="userinput"><code>rndc-confgen</code></strong> - </p> -<p> - A complete <code class="filename">rndc.conf</code> file, including - the - randomly generated key, will be written to the standard - output. Commented-out <code class="option">key</code> and - <code class="option">controls</code> statements for - <code class="filename">named.conf</code> are also printed. - </p> -<p> - To generate a base-64 secret with <span><strong class="command">mmencode</strong></span>: - </p> -<p><strong class="userinput"><code>echo "known plaintext for a secret" | mmencode</code></strong> - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2604994"></a><h2>NAME SERVER CONFIGURATION</h2> -<p> - The name server must be configured to accept rndc connections and - to recognize the key specified in the <code class="filename">rndc.conf</code> - file, using the controls statement in <code class="filename">named.conf</code>. - See the sections on the <code class="option">controls</code> statement in the - BIND 9 Administrator Reference Manual for details. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2605019"></a><h2>SEE ALSO</h2> -<p><span class="citerefentry"><span class="refentrytitle">rndc</span>(8)</span>, - <span class="citerefentry"><span class="refentrytitle">rndc-confgen</span>(8)</span>, - <span class="citerefentry"><span class="refentrytitle">mmencode</span>(1)</span>, - <em class="citetitle">BIND 9 Administrator Reference Manual</em>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2605058"></a><h2>AUTHOR</h2> -<p><span class="corpauthor">Internet Systems Consortium</span> - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="man.rndc.html">Prev</a>�</td> -<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td> -<td width="40%" align="right">�<a accesskey="n" href="man.rndc-confgen.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top"> -<span class="application">rndc</span>�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�<span class="application">rndc-confgen</span> -</td> -</tr> -</table> -</div> -</body> -</html> diff --git a/contrib/bind9/doc/arm/man.rndc.html b/contrib/bind9/doc/arm/man.rndc.html deleted file mode 100644 index 96ed547..0000000 --- a/contrib/bind9/doc/arm/man.rndc.html +++ /dev/null @@ -1,202 +0,0 @@ -<!-- - - Copyright (C) 2004-2007 Internet Systems Consortium, Inc. ("ISC") - - Copyright (C) 2000-2003 Internet Software Consortium. - - - - Permission to use, copy, modify, and distribute this software for any - - purpose with or without fee is hereby granted, provided that the above - - copyright notice and this permission notice appear in all copies. - - - - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH - - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY - - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, - - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM - - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE - - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - - PERFORMANCE OF THIS SOFTWARE. ---> -<!-- $Id: man.rndc.html,v 1.2.2.54 2007/10/31 01:35:59 marka Exp $ --> -<html> -<head> -<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> -<title>rndc</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> -<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages"> -<link rel="prev" href="man.named.html" title="named"> -<link rel="next" href="man.rndc.conf.html" title="rndc.conf"> -</head> -<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"> -<div class="navheader"> -<table width="100%" summary="Navigation header"> -<tr><th colspan="3" align="center"><span class="application">rndc</span></th></tr> -<tr> -<td width="20%" align="left"> -<a accesskey="p" href="man.named.html">Prev</a>�</td> -<th width="60%" align="center">Manual pages</th> -<td width="20%" align="right">�<a accesskey="n" href="man.rndc.conf.html">Next</a> -</td> -</tr> -</table> -<hr> -</div> -<div class="refentry" lang="en"> -<a name="man.rndc"></a><div class="titlepage"></div> -<div class="refnamediv"> -<h2>Name</h2> -<p><span class="application">rndc</span> — name server control utility</p> -</div> -<div class="refsynopsisdiv"> -<h2>Synopsis</h2> -<div class="cmdsynopsis"><p><code class="command">rndc</code> [<code class="option">-b <em class="replaceable"><code>source-address</code></em></code>] [<code class="option">-c <em class="replaceable"><code>config-file</code></em></code>] [<code class="option">-k <em class="replaceable"><code>key-file</code></em></code>] [<code class="option">-s <em class="replaceable"><code>server</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port</code></em></code>] [<code class="option">-V</code>] [<code class="option">-y <em class="replaceable"><code>key_id</code></em></code>] {command}</p></div> -</div> -<div class="refsect1" lang="en"> -<a name="id2603169"></a><h2>DESCRIPTION</h2> -<p><span><strong class="command">rndc</strong></span> - controls the operation of a name - server. It supersedes the <span><strong class="command">ndc</strong></span> utility - that was provided in old BIND releases. If - <span><strong class="command">rndc</strong></span> is invoked with no command line - options or arguments, it prints a short summary of the - supported commands and the available options and their - arguments. - </p> -<p><span><strong class="command">rndc</strong></span> - communicates with the name server - over a TCP connection, sending commands authenticated with - digital signatures. In the current versions of - <span><strong class="command">rndc</strong></span> and <span><strong class="command">named</strong></span>, - the only supported authentication algorithm is HMAC-MD5, - which uses a shared secret on each end of the connection. - This provides TSIG-style authentication for the command - request and the name server's response. All commands sent - over the channel must be signed by a key_id known to the - server. - </p> -<p><span><strong class="command">rndc</strong></span> - reads a configuration file to - determine how to contact the name server and decide what - algorithm and key it should use. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2603219"></a><h2>OPTIONS</h2> -<div class="variablelist"><dl> -<dt><span class="term">-b <em class="replaceable"><code>source-address</code></em></span></dt> -<dd><p> - Use <em class="replaceable"><code>source-address</code></em> - as the source address for the connection to the server. - Multiple instances are permitted to allow setting of both - the IPv4 and IPv6 source addresses. - </p></dd> -<dt><span class="term">-c <em class="replaceable"><code>config-file</code></em></span></dt> -<dd><p> - Use <em class="replaceable"><code>config-file</code></em> - as the configuration file instead of the default, - <code class="filename">/etc/rndc.conf</code>. - </p></dd> -<dt><span class="term">-k <em class="replaceable"><code>key-file</code></em></span></dt> -<dd><p> - Use <em class="replaceable"><code>key-file</code></em> - as the key file instead of the default, - <code class="filename">/etc/rndc.key</code>. The key in - <code class="filename">/etc/rndc.key</code> will be used to - authenticate - commands sent to the server if the <em class="replaceable"><code>config-file</code></em> - does not exist. - </p></dd> -<dt><span class="term">-s <em class="replaceable"><code>server</code></em></span></dt> -<dd><p><em class="replaceable"><code>server</code></em> is - the name or address of the server which matches a - server statement in the configuration file for - <span><strong class="command">rndc</strong></span>. If no server is supplied on the - command line, the host named by the default-server clause - in the options statement of the <span><strong class="command">rndc</strong></span> - configuration file will be used. - </p></dd> -<dt><span class="term">-p <em class="replaceable"><code>port</code></em></span></dt> -<dd><p> - Send commands to TCP port - <em class="replaceable"><code>port</code></em> - instead - of BIND 9's default control channel port, 953. - </p></dd> -<dt><span class="term">-V</span></dt> -<dd><p> - Enable verbose logging. - </p></dd> -<dt><span class="term">-y <em class="replaceable"><code>key_id</code></em></span></dt> -<dd><p> - Use the key <em class="replaceable"><code>key_id</code></em> - from the configuration file. - <em class="replaceable"><code>key_id</code></em> - must be - known by named with the same algorithm and secret string - in order for control message validation to succeed. - If no <em class="replaceable"><code>key_id</code></em> - is specified, <span><strong class="command">rndc</strong></span> will first look - for a key clause in the server statement of the server - being used, or if no server statement is present for that - host, then the default-key clause of the options statement. - Note that the configuration file contains shared secrets - which are used to send authenticated control commands - to name servers. It should therefore not have general read - or write access. - </p></dd> -</dl></div> -<p> - For the complete set of commands supported by <span><strong class="command">rndc</strong></span>, - see the BIND 9 Administrator Reference Manual or run - <span><strong class="command">rndc</strong></span> without arguments to see its help - message. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2603512"></a><h2>LIMITATIONS</h2> -<p><span><strong class="command">rndc</strong></span> - does not yet support all the commands of - the BIND 8 <span><strong class="command">ndc</strong></span> utility. - </p> -<p> - There is currently no way to provide the shared secret for a - <code class="option">key_id</code> without using the configuration file. - </p> -<p> - Several error messages could be clearer. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2603543"></a><h2>SEE ALSO</h2> -<p><span class="citerefentry"><span class="refentrytitle">rndc.conf</span>(5)</span>, - <span class="citerefentry"><span class="refentrytitle">named</span>(8)</span>, - <span class="citerefentry"><span class="refentrytitle">named.conf</span>(5)</span>, - <span class="citerefentry"><span class="refentrytitle">ndc</span>(8)</span>, - <em class="citetitle">BIND 9 Administrator Reference Manual</em>. - </p> -</div> -<div class="refsect1" lang="en"> -<a name="id2603590"></a><h2>AUTHOR</h2> -<p><span class="corpauthor">Internet Systems Consortium</span> - </p> -</div> -</div> -<div class="navfooter"> -<hr> -<table width="100%" summary="Navigation footer"> -<tr> -<td width="40%" align="left"> -<a accesskey="p" href="man.named.html">Prev</a>�</td> -<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td> -<td width="40%" align="right">�<a accesskey="n" href="man.rndc.conf.html">Next</a> -</td> -</tr> -<tr> -<td width="40%" align="left" valign="top"> -<span class="application">named</span>�</td> -<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td> -<td width="40%" align="right" valign="top">�<code class="filename">rndc.conf</code> -</td> -</tr> -</table> -</div> -</body> -</html> |
